ramosedb 0.0.1 → 0.4.0

package/dist/worker/admit.js

@@ -0,0 +1,43 @@
+import * as Effect from "effect/Effect";
+import * as Redacted from "effect/Redacted";
+import * as Result from "effect/Result";
+import {} from "./auth.js";
+import { Unauthorized } from "./errors.js";
+import { JwtVerifier } from "./jwt.js";
+const unauthorized = () => new Unauthorized({});
+const bearer = (authorization) => {
+    if (authorization === null)
+        return Result.fail(unauthorized());
+    const match = /^Bearer[ \t]+([^,\s]+)$/i.exec(authorization);
+    return match === null
+        ? Result.fail(unauthorized())
+        : Result.succeed(Redacted.make(match[1]));
+};
+const isWebSocketUpgrade = (request) => request.headers.get("upgrade")?.trim().toLowerCase() === "websocket";
+const isWebSocketSession = (request, url) => request.method === "GET" &&
+    isWebSocketUpgrade(request) &&
+    /^\/db\/[^/]+\/session$/.test(url.pathname);
+export const requestCredential = (request) => {
+    const url = new URL(request.url);
+    const authorization = request.headers.get("authorization");
+    if (!isWebSocketSession(request, url)) {
+        if (url.searchParams.has("token"))
+            return Result.fail(unauthorized());
+        return bearer(authorization);
+    }
+    if (authorization !== null)
+        return bearer(authorization);
+    const queryTokens = url.searchParams.getAll("token");
+    if (queryTokens.length !== 1 ||
+        queryTokens[0].length === 0 ||
+        /\s/.test(queryTokens[0])) {
+        return Result.fail(unauthorized());
+    }
+    return Result.succeed(Redacted.make(queryTokens[0]));
+};
+export const authenticateRequest = Effect.fn("authenticateRequest")(function* (request) {
+    const token = yield* Effect.fromResult(requestCredential(request));
+    const verifier = yield* JwtVerifier;
+    return yield* verifier.verify(token);
+});
+//# sourceMappingURL=admit.js.map

package/dist/worker/admit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admit.js","sourceRoot":"","sources":["../../src/worker/admit.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAA0B,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEvC,MAAM,YAAY,GAAG,GAAiB,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,CAAC,CAAC;AAE9D,MAAM,MAAM,GAAG,CACb,aAA4B,EAC4B,EAAE;IAC1D,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7D,OAAO,KAAK,KAAK,IAAI;QACnB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QAC7B,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;AAC/C,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,OAAgB,EAAW,EAAE,CACvD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,WAAW,CAAC;AAEvE,MAAM,kBAAkB,GAAG,CAAC,OAAgB,EAAE,GAAQ,EAAW,EAAE,CACjE,OAAO,CAAC,MAAM,KAAK,KAAK;IACxB,kBAAkB,CAAC,OAAO,CAAC;IAC3B,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAE9C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,OAAgB,EACwC,EAAE;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3D,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;QACtC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,IACE,WAAW,CAAC,MAAM,KAAK,CAAC;QACxB,WAAW,CAAC,CAAC,CAAE,CAAC,MAAM,KAAK,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,EAC1B,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,EAAE,CAAC,qBAAqB,CAAC,CAAC,QAAQ,CAAC,EAC3E,OAAgB;IAEhB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC;IACpC,OAAO,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACvC,CAAC,CAAC,CAAC"}

package/dist/worker/analytics.d.ts

@@ -0,0 +1,39 @@
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+export interface DataPoint {
+    readonly indexes?: string[];
+    readonly blobs?: string[];
+    readonly doubles?: number[];
+}
+export interface AnalyticsEngineDatasetLike {
+    writeDataPoint(point: DataPoint): void;
+}
+declare const DatasetError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "DatasetError";
+} & Readonly<A>;
+export declare class DatasetError extends DatasetError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export declare const classifyDatasetError: (cause: unknown) => DatasetError;
+export interface AnalyticsClient {
+    readonly bound: boolean;
+    writeDataPoint(point: DataPoint): Effect.Effect<void, DatasetError>;
+}
+declare const Analytics_base: Context.ServiceClass<Analytics, "ramose/worker/Analytics", AnalyticsClient>;
+export declare class Analytics extends Analytics_base {
+}
+export declare const fromBinding: (binding: AnalyticsEngineDatasetLike | undefined) => AnalyticsClient;
+export declare const bindingOf: (env: unknown) => AnalyticsEngineDatasetLike | undefined;
+export type Route = "transact" | "op" | "query" | "pull" | "entity" | "live" | "replicate" | "info" | "session" | "admin" | "health" | "other";
+export declare function routeOf(rest: string, method: string): Route;
+export declare function httpPoint(o: {
+    db?: string;
+    colo?: string;
+    route: Route;
+    status: number;
+    ms: number;
+}): DataPoint;
+export {};
+//# sourceMappingURL=analytics.d.ts.map

package/dist/worker/analytics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.d.ts","sourceRoot":"","sources":["../../src/worker/analytics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAE1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,0BAA0B;IACzC,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;CACxC;;;;AAED,qBAAa,YAAa,SAAQ,kBAAiC;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;CAAG;AAE7H,eAAO,MAAM,oBAAoB,UAAW,OAAO,KAAG,YACwC,CAAC;AAE/F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;CACrE;;AAED,qBAAa,SAAU,SAAQ,cAAwE;CAAG;AAE1G,eAAO,MAAM,WAAW,YAAa,0BAA0B,GAAG,SAAS,KAAG,eAS5E,CAAC;AAEH,eAAO,MAAM,SAAS,QAAS,OAAO,KAAG,0BAA0B,GAAG,SAGrE,CAAC;AAEF,MAAM,MAAM,KAAK,GAAG,UAAU,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,GAAG,OAAO,CAAC;AAE/I,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAY3D;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAQhH"}

package/dist/worker/analytics.js

@@ -0,0 +1,54 @@
+import * as Context from "effect/Context";
+import * as Data from "effect/Data";
+import * as Effect from "effect/Effect";
+export class DatasetError extends Data.TaggedError("DatasetError") {
+}
+export const classifyDatasetError = (cause) => new DatasetError({ message: cause instanceof Error ? cause.message : String(cause), cause });
+export class Analytics extends Context.Service()("ramose/worker/Analytics") {
+}
+export const fromBinding = (binding) => ({
+    bound: binding !== undefined && binding !== null,
+    writeDataPoint: (point) => binding
+        ? Effect.try({
+            try: () => binding.writeDataPoint(point),
+            catch: classifyDatasetError,
+        })
+        : Effect.void,
+});
+export const bindingOf = (env) => {
+    const b = env?.ANALYTICS;
+    return typeof b?.writeDataPoint === "function" ? b : undefined;
+};
+export function routeOf(rest, method) {
+    if (rest === "/transact")
+        return "transact";
+    if (rest === "/op")
+        return "op";
+    if (rest === "/query")
+        return "query";
+    if (rest === "/pull")
+        return "pull";
+    if (rest === "/live")
+        return "live";
+    if (rest === "/replicate")
+        return "replicate";
+    if (rest === "/info")
+        return "info";
+    if (rest === "/session")
+        return "session";
+    if (rest.startsWith("/admin/"))
+        return "admin";
+    if (/^\/entity\/\d+$/.test(rest) && method === "GET")
+        return "entity";
+    return "other";
+}
+export function httpPoint(o) {
+    const db = o.db && o.db.length > 0 ? o.db : "-";
+    const ok = o.status < 400;
+    return {
+        indexes: [db],
+        blobs: ["http", db, o.colo ?? "-", o.route, String(o.status)],
+        doubles: [o.ms, 1, ok ? 1 : 0, ok ? 0 : 1],
+    };
+}
+//# sourceMappingURL=analytics.js.map

package/dist/worker/analytics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analytics.js","sourceRoot":"","sources":["../../src/worker/analytics.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,IAAI,MAAM,aAAa,CAAC;AACpC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAYxC,MAAM,OAAO,YAAa,SAAQ,IAAI,CAAC,WAAW,CAAC,cAAc,CAAyD;CAAG;AAE7H,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAc,EAAgB,EAAE,CACnE,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAO/F,MAAM,OAAO,SAAU,SAAQ,OAAO,CAAC,OAAO,EAA8B,CAAC,yBAAyB,CAAC;CAAG;AAE1G,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAA+C,EAAmB,EAAE,CAAC,CAAC;IAChG,KAAK,EAAE,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI;IAChD,cAAc,EAAE,CAAC,KAAK,EAAE,EAAE,CACxB,OAAO;QACL,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACT,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC;YACxC,KAAK,EAAE,oBAAoB;SAC5B,CAAC;QACJ,CAAC,CAAC,MAAM,CAAC,IAAI;CAClB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAY,EAA0C,EAAE;IAChF,MAAM,CAAC,GAAI,GAA8D,EAAE,SAAS,CAAC;IACrF,OAAO,OAAO,CAAC,EAAE,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC,CAAC;AAIF,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,MAAc;IAClD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,UAAU,CAAC;IAC5C,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IACtC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,WAAW,CAAC;IAC9C,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,IAAI,KAAK,UAAU;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC;IAC/C,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC;IACtE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAA2E;IACnG,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;IAC1B,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,CAAC;QACb,KAAK,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC7D,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC3C,CAAC;AACJ,CAAC"}

package/dist/worker/auth.d.ts

@@ -0,0 +1,26 @@
+import type * as Redacted from "effect/Redacted";
+export type PrincipalClaimScalar = string | number | boolean;
+export type PrincipalClaimValue = PrincipalClaimScalar | readonly PrincipalClaimScalar[];
+export type PrincipalAttrs = Readonly<Record<string, PrincipalClaimValue>>;
+export interface Principal {
+    readonly kind: "user";
+    readonly class: string;
+    readonly classes?: readonly string[];
+    readonly sub?: string;
+    readonly eid?: number;
+    readonly claims: {
+        readonly sub?: string;
+        readonly iss?: string;
+        readonly aud?: string | readonly string[];
+        readonly exp?: number;
+        readonly attrs?: PrincipalAttrs;
+    };
+}
+export interface VerifiedPrincipal {
+    readonly token: Redacted.Redacted<string>;
+    readonly kid: string;
+    readonly iat: number;
+    readonly exp: number;
+    readonly principal: Principal;
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/worker/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/worker/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAEjD,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAC7D,MAAM,MAAM,mBAAmB,GAAG,oBAAoB,GAAG,SAAS,oBAAoB,EAAE,CAAC;AACzF,MAAM,MAAM,cAAc,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;AAE3E,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,MAAM,EAAE,CAAC;QAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,cAAc,CAAC;KACjC,CAAC;CACH;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B"}

package/dist/worker/auth.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=auth.js.map

package/dist/worker/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/worker/auth.ts"],"names":[],"mappings":""}

package/dist/worker/authorized-live.d.ts

@@ -0,0 +1,15 @@
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Queue from "effect/Queue";
+import * as Stream from "effect/Stream";
+import { Unauthorized } from "../db/Errors.ts";
+import { OneShotReadError, type AuthorizedLiveInput, type AuthorizedRequestInput, type LiveQueryDiff, type OneShotRead, type OneShotReadOptions } from "../internal/authorization/index.ts";
+export declare const liveNdjsonStream: <R, EDb>(input: AuthorizedLiveInput<R, EDb> & {
+    readonly wakes?: Queue.Dequeue<unknown>;
+}, read: OneShotRead, opts: OneShotReadOptions, context: Context.Context<R>) => ReadableStream<Uint8Array>;
+export declare const liveDiffNdjsonStream: <R, E>(stream: Stream.Stream<LiveQueryDiff, E, R>, context: Context.Context<R>) => ReadableStream<Uint8Array>;
+export declare const liveResponseFromStream: <R, E>(stream: Stream.Stream<LiveQueryDiff, E, R>, headers: Record<string, string>) => Effect.Effect<Response, never, R>;
+export declare const authorizedLiveResponse: <R, EDb>(input: AuthorizedLiveInput<R, EDb> & {
+    readonly admissionCurrentDb?: AuthorizedRequestInput<R, EDb>["currentDb"];
+}, read: OneShotRead, opts: OneShotReadOptions, headers: Record<string, string>) => Effect.Effect<Response, EDb | OneShotReadError | Unauthorized, R>;
+//# sourceMappingURL=authorized-live.d.ts.map

package/dist/worker/authorized-live.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-live.d.ts","sourceRoot":"","sources":["../../src/worker/authorized-live.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAGL,gBAAgB,EAChB,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACxB,MAAM,oCAAoC,CAAC;AAQ5C,eAAO,MAAM,gBAAgB,GAAI,CAAC,EAAE,GAAG,SAC9B,mBAAmB,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;CACzC,QACK,WAAW,QACX,kBAAkB,WACf,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAC1B,cAAc,CAAC,UAAU,CAC6C,CAAC;AAE1E,eAAO,MAAM,oBAAoB,GAAI,CAAC,EAAE,CAAC,UAC/B,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC,WACjC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAC1B,cAAc,CAAC,UAAU,CAOzB,CAAC;AAEJ,eAAO,MAAM,sBAAsB,GAAI,CAAC,EAAE,CAAC,UACjC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,EAAE,CAAC,CAAC,WACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAY/B,CAAC;AAEL,eAAO,MAAM,sBAAsB,GAAI,CAAC,EAAE,GAAG,SACpC,mBAAmB,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;IACnC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,sBAAsB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC;CAC3E,QACK,WAAW,QACX,kBAAkB,WACf,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,GAAG,gBAAgB,GAAG,YAAY,EAAE,CAAC,CAa/D,CAAC"}

package/dist/worker/authorized-live.js

@@ -0,0 +1,30 @@
+import * as Context from "effect/Context";
+import * as Effect from "effect/Effect";
+import * as Queue from "effect/Queue";
+import * as Stream from "effect/Stream";
+import { Unauthorized } from "../db/Errors.js";
+import { executeAuthorizedLive, executeAuthorizedRead, OneShotReadError, } from "../internal/authorization/index.js";
+import { stringifyJson } from "../internal/core/json.js";
+const encoder = new TextEncoder();
+const encodeDiff = (diff) => encoder.encode(`${stringifyJson(diff)}\n`);
+export const liveNdjsonStream = (input, read, opts, context) => liveDiffNdjsonStream(executeAuthorizedLive(input, read, opts), context);
+export const liveDiffNdjsonStream = (stream, context) => Stream.toReadableStreamWith(stream.pipe(Stream.map(encodeDiff), Stream.catchCause(() => Stream.empty)), context);
+export const liveResponseFromStream = (stream, headers) => Effect.gen(function* () {
+    const context = yield* Effect.context();
+    const body = liveDiffNdjsonStream(stream, context);
+    return new Response(body, {
+        status: 200,
+        headers: {
+            "content-type": "application/x-ndjson",
+            "cache-control": "no-store",
+            ...headers,
+        },
+    });
+});
+export const authorizedLiveResponse = (input, read, opts, headers) => Effect.gen(function* () {
+    yield* executeAuthorizedRead(input.admissionCurrentDb === undefined
+        ? input
+        : { ...input, currentDb: input.admissionCurrentDb }, read, opts);
+    return yield* liveResponseFromStream(executeAuthorizedLive(input, read, opts), headers);
+});
+//# sourceMappingURL=authorized-live.js.map

package/dist/worker/authorized-live.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-live.js","sourceRoot":"","sources":["../../src/worker/authorized-live.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAC1C,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AACtC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,GAMjB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAEzD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,UAAU,GAAG,CAAC,IAAmB,EAAc,EAAE,CACrD,OAAO,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAE7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,KAEC,EACD,IAAiB,EACjB,IAAwB,EACxB,OAA2B,EACC,EAAE,CAC9B,oBAAoB,CAAC,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AAE1E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,MAA0C,EAC1C,OAA2B,EACC,EAAE,CAC9B,MAAM,CAAC,oBAAoB,CACzB,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EACtB,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CACtC,EACD,OAAO,CACR,CAAC;AAEJ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,MAA0C,EAC1C,OAA+B,EACI,EAAE,CACrC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,EAAK,CAAC;IAC3C,MAAM,IAAI,GAAG,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,sBAAsB;YACtC,eAAe,EAAE,UAAU;YAC3B,GAAG,OAAO;SACX;KACF,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,sBAAsB,GAAG,CACpC,KAEC,EACD,IAAiB,EACjB,IAAwB,EACxB,OAA+B,EACoC,EAAE,CACrE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,qBAAqB,CAC1B,KAAK,CAAC,kBAAkB,KAAK,SAAS;QACpC,CAAC,CAAC,KAAK;QACP,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,kBAAkB,EAAE,EACrD,IAAI,EACJ,IAAI,CACL,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAClC,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,EACxC,OAAO,CACR,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/worker/authorized-operation.d.ts

@@ -0,0 +1,30 @@
+import * as Effect from "effect/Effect";
+import { type AuthoritativeInvocationResult, type AuthoritativeOperationInvocation, type AuthenticatedCaller, type OperationInvocation } from "../internal/authorization/index.ts";
+import type { EntityIdScope } from "../internal/replication/entity-id.ts";
+import type { ServerSealingKey } from "../internal/replication/server-identity.ts";
+import type { RamoseEnv } from "../RamoseEnv.ts";
+import { BadRequest, OperationRejected, Unauthorized, UpstreamError } from "./errors.ts";
+export type ParsedOperationRequest = Omit<OperationInvocation, "database" | "caller" | "catalogKey" | "unitHash" | "entityIdScope"> & {
+    readonly invocationId: string;
+};
+type RoutedOperationRequest = ParsedOperationRequest & {
+    readonly catalogKey: OperationInvocation["catalogKey"];
+    readonly unitHash: OperationInvocation["unitHash"];
+};
+export declare const serializeOperationInvocation: (invocation: AuthoritativeOperationInvocation) => string;
+export declare const operationFailureFromResponse: (response: Response, text: string) => UpstreamError | OperationRejected;
+export declare const parseOperationRequest: (request: Request<unknown, CfProperties<unknown>>) => Effect.Effect<ParsedOperationRequest, BadRequest | Unauthorized, never>;
+export declare const decodeOperationRequest: (body: Record<string, unknown>) => Effect.Effect<ParsedOperationRequest, BadRequest, never>;
+export declare const deriveEntityIdScope: (env: RamoseEnv, database: string, origin: string, caller: AuthenticatedCaller) => Promise<EpochBoundSealing>;
+type EpochBoundSealing = {
+    readonly sealing: ServerSealingKey;
+    readonly scope: EntityIdScope;
+};
+export declare const invokeAuthoritativeOperation: (env: RamoseEnv, database: string, origin: string, parsed: RoutedOperationRequest, caller: AuthenticatedCaller) => Promise<AuthoritativeInvocationResult>;
+export type PublicOperationResult = {
+    readonly status: number;
+    readonly body: Record<string, unknown>;
+};
+export declare const publicOperationResult: (result: AuthoritativeInvocationResult) => PublicOperationResult;
+export {};
+//# sourceMappingURL=authorized-operation.d.ts.map

package/dist/worker/authorized-operation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-operation.d.ts","sourceRoot":"","sources":["../../src/worker/authorized-operation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAQL,KAAK,6BAA6B,EAClC,KAAK,gCAAgC,EACrC,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACzB,MAAM,oCAAoC,CAAC;AAE5C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAC1E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAGnF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,aAAa,EACd,MAAM,aAAa,CAAC;AAQrB,MAAM,MAAM,sBAAsB,GAAG,IAAI,CACvC,mBAAmB,EACjB,UAAU,GACV,QAAQ,GACR,YAAY,GACZ,UAAU,GACV,eAAe,CAClB,GAAG;IAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC,KAAK,sBAAsB,GAAG,sBAAsB,GAAG;IACrD,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAC;CACpD,CAAC;AAEF,eAAO,MAAM,4BAA4B,eAC3B,gCAAgC,KAC3C,MAQF,CAAC;AAkDF,eAAO,MAAM,4BAA4B,aAC7B,QAAQ,QACZ,MAAM,KACX,aAAa,GAAG,iBAYlB,CAAC;AAkBF,eAAO,MAAM,qBAAqB,+HAahC,CAAC;AAEH,eAAO,MAAM,sBAAsB,6FAgEjC,CAAC;AAEH,eAAO,MAAM,mBAAmB,QACzB,SAAS,YACJ,MAAM,UACR,MAAM,UACN,mBAAmB,KAC1B,OAAO,CAAC,iBAAiB,CAe3B,CAAC;AAEF,KAAK,iBAAiB,GAAG;IACvB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;CAC/B,CAAC;AA+CF,eAAO,MAAM,4BAA4B,QAClC,SAAS,YACJ,MAAM,UACR,MAAM,UACN,sBAAsB,UACtB,mBAAmB,KAC1B,OAAO,CAAC,6BAA6B,CAqDvC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACxC,CAAC;AAEF,eAAO,MAAM,qBAAqB,WACxB,6BAA6B,KACpC,qBAmFF,CAAC"}

package/dist/worker/authorized-operation.js

@@ -0,0 +1,304 @@
+import * as Effect from "effect/Effect";
+import * as Result from "effect/Result";
+import { DatabaseId, MAX_INVOCATION_ID_LENGTH, mayCarrySealedEntityId, OperationVersion, parseAuthoritativeInvocationResult, parseInvocationAllocations, sealOutputEntityRefs, } from "../internal/authorization/index.js";
+import { fromJson, toJson } from "../internal/core/json.js";
+import { makeEntityIdScope } from "../internal/replication/identity.js";
+import { internalHeaders } from "../internal/transactor/index.js";
+import { serverSealingKey } from "./server-identity.js";
+import { BadRequest, OperationRejected, Unauthorized, UpstreamError, } from "./errors.js";
+import { isEntityRef, rejectNestedDatabaseSelector, refuseCatalogProof, } from "./authorized-read.js";
+import { invalidateBasis } from "./peer.js";
+export const serializeOperationInvocation = (invocation) => {
+    const wireInvocation = {
+        ...invocation,
+        ...(invocation.target === undefined
+            ? {}
+            : { target: toJson(invocation.target) }),
+    };
+    return JSON.stringify({ invocation: wireInvocation });
+};
+const bad = (message) => new BadRequest({ message });
+const deny = () => new Unauthorized({ status: 403 });
+const readOperationJsonObject = (request) => Effect.tryPromise({
+    try: async () => {
+        const text = await request.text();
+        if (text.trim().length === 0)
+            throw bad("body must be a JSON object");
+        const value = JSON.parse(text);
+        if (typeof value !== "object" || value === null || Array.isArray(value)) {
+            throw bad("body must be a JSON object");
+        }
+        return value;
+    },
+    catch: (cause) => cause instanceof BadRequest ? cause : bad("body must be a JSON object"),
+});
+const privateFailure = (status = 500, headers) => new UpstreamError({
+    status,
+    body: JSON.stringify({ error: "operation execution failed" }),
+    ...(headers === undefined ? {} : { headers }),
+});
+const operationRejectedOf = (text) => {
+    try {
+        const body = JSON.parse(text);
+        if (body.tag !== "OperationRejected" ||
+            typeof body.message !== "string" ||
+            typeof body.operation !== "string")
+            return undefined;
+        return new OperationRejected({
+            message: body.message,
+            operation: body.operation,
+            ...(typeof body.step === "string" ? { step: body.step } : {}),
+            ...(typeof body.reason === "string" ? { reason: body.reason } : {}),
+        });
+    }
+    catch {
+        return undefined;
+    }
+};
+export const operationFailureFromResponse = (response, text) => {
+    if (response.status === 409) {
+        return operationRejectedOf(text) ?? privateFailure(409);
+    }
+    if (response.status === 503) {
+        const retryAfter = response.headers.get("retry-after");
+        return privateFailure(503, retryAfter === null ? undefined : { "retry-after": retryAfter });
+    }
+    return privateFailure(response.status >= 500 ? 500 : response.status);
+};
+const parseOwner = (value) => {
+    if (typeof value !== "object" || value === null || Array.isArray(value)) {
+        return Result.fail(bad("operation.owner must be { kind, name }"));
+    }
+    const owner = value;
+    if ((owner.kind !== "entity" && owner.kind !== "trait") ||
+        typeof owner.name !== "string" || owner.name.length === 0) {
+        return Result.fail(bad("operation.owner must be { kind: entity|trait, name }"));
+    }
+    return Result.succeed({ kind: owner.kind, name: owner.name });
+};
+export const parseOperationRequest = Effect.fn("parseOperationRequest")(function* (request) {
+    const body = yield* readOperationJsonObject(request);
+    yield* Effect.fromResult(rejectNestedDatabaseSelector(body, new URL(request.url).searchParams));
+    yield* Effect.fromResult(refuseCatalogProof(body, request.headers)).pipe(Effect.mapError(() => deny()));
+    return yield* decodeOperationRequest(body);
+});
+export const decodeOperationRequest = Effect.fn("decodeOperationRequest")(function* (body) {
+    const operation = body.operation;
+    if (typeof operation !== "object" || operation === null || Array.isArray(operation)) {
+        return yield* bad("body.operation must be { owner, localName }");
+    }
+    const record = operation;
+    const owner = yield* Effect.fromResult(parseOwner(record.owner));
+    if (typeof record.localName !== "string" || record.localName.length === 0) {
+        return yield* bad("operation.localName must be a non-empty string");
+    }
+    if (typeof body.invocationId !== "string" || body.invocationId.length === 0 ||
+        body.invocationId.length > MAX_INVOCATION_ID_LENGTH) {
+        return yield* bad(`invocationId must be a non-empty string of at most ${MAX_INVOCATION_ID_LENGTH} characters`);
+    }
+    if (body.operationVersion !== undefined &&
+        (typeof body.operationVersion !== "string" ||
+            !/^[0-9a-f]{64}$/.test(body.operationVersion))) {
+        return yield* bad("operationVersion must be a canonical operation version digest");
+    }
+    const sealedTarget = typeof body.target === "string" ? body.target : undefined;
+    const target = body.target === undefined || sealedTarget !== undefined
+        ? undefined
+        : fromJson(body.target);
+    if (target !== undefined &&
+        !(typeof target === "number" && Number.isSafeInteger(target) && target >= 0) &&
+        !(Array.isArray(target) && isEntityRef(target))) {
+        return yield* bad("operation target must be an entity id, an eid, or a lookup ref");
+    }
+    const allocations = parseInvocationAllocations(body.allocations);
+    if (allocations === undefined) {
+        return yield* bad("allocations must be unique { slot, clientRef } pairs");
+    }
+    return {
+        owner,
+        localName: record.localName,
+        invocationId: body.invocationId,
+        ...(body.operationVersion === undefined ? {} : {
+            operationVersion: OperationVersion.make(body.operationVersion),
+        }),
+        ...(target === undefined ? {} : {
+            target: target,
+        }),
+        ...(sealedTarget === undefined ? {} : { sealedTarget }),
+        ...(allocations.length === 0 ? {} : { allocations }),
+        input: body.input,
+    };
+});
+export const deriveEntityIdScope = async (env, database, origin, caller) => {
+    let sealing;
+    try {
+        sealing = await serverSealingKey(env);
+    }
+    catch {
+        throw privateFailure(503, { "retry-after": "1" });
+    }
+    return {
+        sealing,
+        scope: await makeEntityIdScope(sealing, {
+            origin,
+            caller,
+            database: DatabaseId.make(database),
+        }),
+    };
+};
+const invocationEntityIdScope = async (env, database, origin, parsed, caller) => {
+    if (parsed.sealedTarget === undefined &&
+        (parsed.allocations === undefined || parsed.allocations.length === 0) &&
+        !mayCarrySealedEntityId(parsed.input))
+        return undefined;
+    return deriveEntityIdScope(env, database, origin, caller);
+};
+const sealPublicEntityRefs = async (env, database, origin, caller, derived, result) => {
+    if (result._tag !== "Completed")
+        return result;
+    const { outputRefPaths, ...projected } = result;
+    if (outputRefPaths === undefined || outputRefPaths.length === 0) {
+        return projected;
+    }
+    const bound = derived ??
+        await deriveEntityIdScope(env, database, origin, caller);
+    try {
+        return {
+            ...projected,
+            output: await sealOutputEntityRefs(bound.sealing, bound.scope, result.output, outputRefPaths),
+        };
+    }
+    catch {
+        throw privateFailure();
+    }
+};
+export const invokeAuthoritativeOperation = async (env, database, origin, parsed, caller) => {
+    const sealingScope = await invocationEntityIdScope(env, database, origin, parsed, caller);
+    const invocation = {
+        ...parsed,
+        database: DatabaseId.make(database),
+        caller,
+        ...(sealingScope === undefined ? {} : {
+            entityIdScope: sealingScope.scope,
+            entityIdKeyId: sealingScope.sealing.keyId,
+        }),
+    };
+    const stub = env.TRANSACTOR.get(env.TRANSACTOR.idFromName(database));
+    let response;
+    let text;
+    try {
+        response = await stub.fetch(`https://transactor/invoke?db=${encodeURIComponent(database)}`, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                ...internalHeaders(env),
+            },
+            body: serializeOperationInvocation(invocation),
+        });
+        text = await response.text();
+    }
+    catch {
+        throw privateFailure();
+    }
+    if (!response.ok) {
+        throw operationFailureFromResponse(response, text);
+    }
+    let result;
+    try {
+        result = parseAuthoritativeInvocationResult(JSON.parse(text), invocation.invocationId);
+    }
+    catch {
+        throw new UpstreamError({
+            status: 502,
+            body: JSON.stringify({ error: "transactor returned an invalid operation result" }),
+        });
+    }
+    if (result._tag === "Completed")
+        invalidateBasis(database);
+    return sealPublicEntityRefs(env, database, origin, caller, sealingScope, result);
+};
+export const publicOperationResult = (result) => {
+    if (result._tag === "Conflict") {
+        return {
+            status: 409,
+            body: { error: "request rejected", code: "invocation_conflict" },
+        };
+    }
+    if (result._tag === "OperationChanged") {
+        return {
+            status: 409,
+            body: { error: "request rejected", code: "operation_changed" },
+        };
+    }
+    if (result._tag === "UpdateRequired") {
+        return {
+            status: 409,
+            body: { error: "request rejected", code: "invocation_update_required" },
+        };
+    }
+    if (result._tag === "Completed") {
+        return {
+            status: 200,
+            body: {
+                result: result.output,
+                receipt: result.receipt,
+                ...(result.mappings === undefined ? {} : { mappings: result.mappings }),
+            },
+        };
+    }
+    if (result._tag === "Failed") {
+        return {
+            status: 500,
+            body: {
+                error: "internal error",
+                code: "invocation_failed",
+                receipt: result.receipt,
+            },
+        };
+    }
+    if (result._tag === "Indeterminate") {
+        return {
+            status: 409,
+            body: {
+                error: "request state is indeterminate",
+                code: "invocation_indeterminate",
+                receipt: result.receipt,
+            },
+        };
+    }
+    switch (result.rejection.kind) {
+        case "unauthorized":
+            return {
+                status: 403,
+                body: { error: "unauthorized", receipt: result.receipt },
+            };
+        case "invalid_request":
+            return {
+                status: 400,
+                body: { error: "invalid request", receipt: result.receipt },
+            };
+        case "request_rejected":
+            return {
+                status: 409,
+                body: { error: "request rejected", receipt: result.receipt },
+            };
+        case "operation_rejected":
+            return {
+                status: 409,
+                body: {
+                    error: result.rejection.message,
+                    tag: "OperationRejected",
+                    message: result.rejection.message,
+                    operation: result.rejection.operation,
+                    ...(result.rejection.step === undefined
+                        ? {}
+                        : { step: result.rejection.step }),
+                    ...(result.rejection.reason === undefined
+                        ? {}
+                        : { reason: result.rejection.reason }),
+                    receipt: result.receipt,
+                },
+            };
+    }
+};
+//# sourceMappingURL=authorized-operation.js.map

package/dist/worker/authorized-operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorized-operation.js","sourceRoot":"","sources":["../../src/worker/authorized-operation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,UAAU,EACV,wBAAwB,EACxB,sBAAsB,EACtB,gBAAgB,EAChB,kCAAkC,EAClC,0BAA0B,EAC1B,oBAAoB,GAKrB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAG5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAElE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EACL,UAAU,EACV,iBAAiB,EACjB,YAAY,EACZ,aAAa,GACd,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,WAAW,EACX,4BAA4B,EAC5B,kBAAkB,GACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAgB5C,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,UAA4C,EACpC,EAAE;IACV,MAAM,cAAc,GAAG;QACrB,GAAG,UAAU;QACb,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS;YACjC,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;KAC3C,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,GAAG,GAAG,CAAC,OAAe,EAAc,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;AACzE,MAAM,IAAI,GAAG,GAAiB,EAAE,CAAC,IAAI,YAAY,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAEnE,MAAM,uBAAuB,GAAG,CAC9B,OAAgB,EACoC,EAAE,CACtD,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,KAAK,IAAI,EAAE;QACd,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACtE,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,MAAM,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,KAAgC,CAAC;IAC1C,CAAC;IACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,4BAA4B,CAAC;CAC1E,CAAC,CAAC;AAEL,MAAM,cAAc,GAAG,CACrB,MAAM,GAAG,GAAG,EACZ,OAAgC,EACjB,EAAE,CAAC,IAAI,aAAa,CAAC;IACpC,MAAM;IACN,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;IAC7D,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;CAC9C,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAiC,EAAE;IAC1E,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;QACzD,IACE,IAAI,CAAC,GAAG,KAAK,mBAAmB;YAChC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAChC,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;YAClC,OAAO,SAAS,CAAC;QACnB,OAAO,IAAI,iBAAiB,CAAC;YAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpE,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAC1C,QAAkB,EAClB,IAAY,EACuB,EAAE;IACrC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACvD,OAAO,cAAc,CACnB,GAAG,EACH,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,EAAE,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,cAAc,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,CACjB,KAAc,EAC2E,EAAE;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,wCAAwC,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,KAAK,GAAG,KAAgC,CAAC;IAC/C,IACE,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;QACnD,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EACzD,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,sDAAsD,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;AAChE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC,EAAE,CAAC,uBAAuB,CAAC,CAAC,QAAQ,CAAC,EAC/E,OAAgB;IAEhB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACrD,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACtB,4BAA4B,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CACtE,CAAC;IACF,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CACtB,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAC1C,CAAC,IAAI,CACJ,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAC9B,CAAC;IACF,OAAO,KAAK,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,EAAE,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,EACjF,IAA6B;IAE7B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IACjC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACpF,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,MAAM,GAAG,SAAoC,CAAC;IACpD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACjE,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,OAAO,KAAK,CAAC,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;IACtE,CAAC;IACD,IACE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;QACvE,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,wBAAwB,EACnD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,GAAG,CACf,sDAAsD,wBAAwB,aAAa,CAC5F,CAAC;IACJ,CAAC;IACD,IACE,IAAI,CAAC,gBAAgB,KAAK,SAAS;QACnC,CAAC,OAAO,IAAI,CAAC,gBAAgB,KAAK,QAAQ;YACxC,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,EAChD,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,GAAG,CACf,+DAA+D,CAChE,CAAC;IACJ,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS;QACpE,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,IACE,MAAM,KAAK,SAAS;QACpB,CAAC,CACC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,CAC1E;QACD,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,EAC/C,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,GAAG,CACf,gEAAgE,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,0BAA0B,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjE,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,CAAC,GAAG,CACf,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,OAAO;QACL,KAAK;QACL,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,GAAG,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC7C,gBAAgB,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,gBAA0B,CAAC;SACzE,CAAC;QACF,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9B,MAAM,EAAE,MAA2D;SACpE,CAAC;QACF,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,GAAG,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;QACpD,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EACtC,GAAc,EACd,QAAgB,EAChB,MAAc,EACd,MAA2B,EACC,EAAE;IAC9B,IAAI,OAAO,CAAC;IACZ,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,OAAO;QACL,OAAO;QACP,KAAK,EAAE,MAAM,iBAAiB,CAAC,OAAO,EAAE;YACtC,MAAM;YACN,MAAM;YACN,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;SACpC,CAAC;KACH,CAAC;AACJ,CAAC,CAAC;AAOF,MAAM,uBAAuB,GAAG,KAAK,EACnC,GAAc,EACd,QAAgB,EAChB,MAAc,EACd,MAA8B,EAC9B,MAA2B,EACa,EAAE;IAC1C,IACE,MAAM,CAAC,YAAY,KAAK,SAAS;QACjC,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC;QACrE,CAAC,sBAAsB,CAAC,MAAM,CAAC,KAAK,CAAC;QACrC,OAAO,SAAS,CAAC;IACnB,OAAO,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAC5D,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,KAAK,EAChC,GAAc,EACd,QAAgB,EAChB,MAAc,EACd,MAA2B,EAC3B,OAAsC,EACtC,MAAqC,EACG,EAAE;IAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC;IAC/C,MAAM,EAAE,cAAc,EAAE,GAAG,SAAS,EAAE,GAAG,MAAM,CAAC;IAChD,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,OAAO;QACnB,MAAM,mBAAmB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,OAAO;YACL,GAAG,SAAS;YACZ,MAAM,EAAE,MAAM,oBAAoB,CAChC,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,KAAK,EACX,MAAM,CAAC,MAAM,EACb,cAAc,CACf;SACF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,EAC/C,GAAc,EACd,QAAgB,EAChB,MAAc,EACd,MAA8B,EAC9B,MAA2B,EACa,EAAE;IAC1C,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAChD,GAAG,EACH,QAAQ,EACR,MAAM,EACN,MAAM,EACN,MAAM,CACP,CAAC;IACF,MAAM,UAAU,GAAqC;QACnD,GAAG,MAAM;QACT,QAAQ,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;QACnC,MAAM;QACN,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACpC,aAAa,EAAE,YAAY,CAAC,KAAK;YACjC,aAAa,EAAE,YAAY,CAAC,OAAO,CAAC,KAAK;SAC1C,CAAC;KACH,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,IAAI,QAAkB,CAAC;IACvB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CACzB,gCAAgC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EAC9D;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,GAAG,eAAe,CAAC,GAAG,CAAC;aACxB;YACD,IAAI,EAAE,4BAA4B,CAAC,UAAU,CAAC;SAC/C,CACF,CAAC;QACF,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,cAAc,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,4BAA4B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,MAAqC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,kCAAkC,CACzC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAChB,UAAU,CAAC,YAAY,CACxB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC;YACtB,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;SACnF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC3D,OAAO,oBAAoB,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;AACnF,CAAC,CAAC;AAOF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACnC,MAAqC,EACd,EAAE;IACzB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,qBAAqB,EAAE;SACjE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACvC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,mBAAmB,EAAE;SAC/D,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QACrC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,4BAA4B,EAAE;SACxE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;aACxE;SACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,gBAAgB;gBACvB,IAAI,EAAE,mBAAmB;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB;SACF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACpC,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE;gBACJ,KAAK,EAAE,gCAAgC;gBACvC,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB;SACF,CAAC;IACJ,CAAC;IACD,QAAQ,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC9B,KAAK,cAAc;YACjB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;aACzD,CAAC;QACJ,KAAK,iBAAiB;YACpB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;aAC5D,CAAC;QACJ,KAAK,kBAAkB;YACrB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;aAC7D,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,IAAI,EAAE;oBACJ,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO;oBAC/B,GAAG,EAAE,mBAAmB;oBACxB,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO;oBACjC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS;oBACrC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS;wBACrC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;oBACpC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS;wBACvC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;oBACxC,OAAO,EAAE,MAAM,CAAC,OAAO;iBACxB;aACF,CAAC;IACN,CAAC;AACH,CAAC,CAAC"}