ramosedb 0.0.1 → 0.4.0

package/dist/Server.d.ts

@@ -0,0 +1,100 @@
+import { type Worker } from "alchemy/Cloudflare/Workers";
+import * as Provider from "alchemy/Provider";
+import { Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import { type AuthConfig } from "./Auth.ts";
+export { DEFAULT_JWT_MAX_TTL } from "./Auth.ts";
+import { NetworkError } from "./db/Errors.ts";
+import { type PeerRoute, type PeerStorage } from "./peer.ts";
+import type { Providers } from "./Providers.ts";
+export declare const isServer: (value: unknown) => value is Server;
+export type ServerWorker = Worker | {
+    readonly url: string | undefined;
+    readonly workerName?: string | undefined;
+} | string;
+export interface ServerProbe {
+    readonly attempts?: number;
+    readonly delayMs?: number;
+    readonly timeoutMs?: number;
+    readonly deadlineMs?: number;
+}
+export declare const PROBE_DEFAULTS: {
+    readonly live: {
+        readonly attempts: 30;
+        readonly delayMs: 2000;
+        readonly timeoutMs: 10000;
+        readonly deadlineMs: 120000;
+    };
+    readonly local: {
+        readonly attempts: 60;
+        readonly delayMs: 250;
+        readonly timeoutMs: 2000;
+        readonly deadlineMs: 30000;
+    };
+};
+/**
+ * A string, or an Alchemy Output / Effect that resolves to one at deploy.
+ * Reef's JWKS URL and CORS origins are interpolations over the auth Worker;
+ * owned form writes them onto the Worker, hatch form compares by identity.
+ */
+export type AuthEnvValue = string | object;
+/**
+ * What the server Worker needs to verify JWTs.
+ *
+ * When Server owns the Worker, these are applied onto {@link RamoseEnv}.
+ * On the escape hatch they are compared against the Worker's env and
+ * fail the deploy on divergence — do not configure auth only on the Worker.
+ */
+export interface ServerAuth {
+    readonly jwksUrl?: AuthEnvValue | undefined;
+    readonly jwksJson?: AuthEnvValue | undefined;
+    readonly jwksService?: string | undefined;
+    readonly issuers?: readonly string[] | AuthEnvValue | undefined;
+    readonly aud?: string | undefined;
+    readonly maxTtl?: number | undefined;
+    readonly jwt?: AuthConfig | undefined;
+    readonly allowedOrigins?: readonly string[] | AuthEnvValue | undefined;
+}
+export type ServerProps = {
+    worker?: ServerWorker;
+    storage?: PeerStorage;
+    main?: string;
+    env?: Record<string, unknown>;
+    name?: string;
+    dev?: {
+        readonly port?: number;
+    };
+    peer?: string;
+    routes?: PeerRoute[];
+    url?: string;
+    auth?: ServerAuth;
+    probe?: ServerProbe | false;
+};
+export declare const AUTH_ENV_KEYS: {
+    readonly jwksUrl: "RAMOSE_JWKS_URL";
+    readonly jwksJson: "RAMOSE_JWKS_JSON";
+    readonly jwksService: "RAMOSE_JWKS_SERVICE";
+    readonly issuers: "RAMOSE_JWT_ISS";
+    readonly aud: "RAMOSE_JWT_AUD";
+    readonly maxTtl: "RAMOSE_JWT_MAX_TTL";
+    readonly allowedOrigins: "RAMOSE_ALLOWED_ORIGINS";
+};
+export declare const authEnv: (peerAuth: ServerAuth | undefined) => Record<string, unknown>;
+export declare const checkAuth: (peerAuth: ServerAuth | undefined) => string | undefined;
+export declare const compareAuthToWorker: (peerAuth: ServerAuth | undefined, worker: unknown) => string | undefined;
+export type Server = Resource<"Ramose.Server", ServerProps, {
+    url: string;
+    workerName: string;
+}, never, Providers>;
+declare const ServerResource: import("alchemy").ResourceClass<Server>;
+export declare const Server: typeof ServerResource;
+/** The native Worker resource to bind from another Cloudflare Worker. */
+export declare const serverBinding: (server: Server) => Worker;
+export declare const resolveWorker: (worker: ServerWorker) => {
+    url: string | undefined;
+    workerName: string;
+};
+export declare const healthOnce: (url: string, timeoutMs: number) => Effect.Effect<void, NetworkError, never>;
+export declare const probeHealth: (url: string, probe: ServerProbe | false | undefined, defaults: Required<ServerProbe>) => Effect.Effect<void, NetworkError, never>;
+export declare const ServerProvider: () => import("effect/Layer").Layer<Provider.Provider<Server>, never, import("alchemy").AlchemyContext>;
+//# sourceMappingURL=Server.d.ts.map

package/dist/Server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Server.d.ts","sourceRoot":"","sources":["../src/Server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAY,KAAK,MAAM,EAAE,MAAM,4BAA4B,CAAC;AAGnE,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAoB,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAExC,OAAO,EAAE,KAAK,UAAU,EAAuB,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAkB,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAGL,KAAK,SAAS,EACd,KAAK,WAAW,EAGjB,MAAM,WAAW,CAAC;AACnB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,eAAO,MAAM,QAAQ,UAAW,OAAO,KAAG,KAAK,IAAI,MACT,CAAC;AAE3C,MAAM,MAAM,YAAY,GACpB,MAAM,GACN;IACE,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C,GACD,MAAM,CAAC;AAIX,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,cAAc;;iBACjB,QAAQ,EAAE,EAAE;iBAAE,OAAO,EAAE,IAAK;iBAAE,SAAS,EAAE,KAAM;iBAAE,UAAU,EAAE,MAAO;;;iBACnE,QAAQ,EAAE,EAAE;iBAAE,OAAO,EAAE,GAAG;iBAAE,SAAS,EAAE,IAAK;iBAAE,UAAU,EAAE,KAAM;;CACP,CAAC;AAErE;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,MAAM,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,YAAY,GAAG,SAAS,CAAC;CACxE;AAED,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,OAAO,CAAC,EAAE,WAAW,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,KAAK,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,aAAa;sBACf,iBAAiB;uBAChB,kBAAkB;0BACf,qBAAqB;sBACzB,gBAAgB;kBACpB,gBAAgB;qBACb,oBAAoB;6BACZ,wBAAwB;CAIzC,CAAC;AAuDF,eAAO,MAAM,OAAO,aACR,UAAU,GAAG,SAAS,KAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAA6B,CAAC;AAEvD,eAAO,MAAM,SAAS,aAAc,UAAU,GAAG,SAAS,KAAG,MAAM,GAAG,SAOrE,CAAC;AAgCF,eAAO,MAAM,mBAAmB,aACpB,UAAU,GAAG,SAAS,UACxB,OAAO,KACd,MAAM,GAAG,SAkBX,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG,QAAQ,CAC3B,eAAe,EACf,WAAW,EACX;IACE,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACpB,EACD,KAAK,EACL,SAAS,CACV,CAAC;AAEF,QAAA,MAAM,cAAc,yCAAoC,CAAC;AAIzD,eAAO,MAAM,MAAM,EAgCd,OAAO,cAAc,CAAC;AAE3B,yEAAyE;AACzE,eAAO,MAAM,aAAa,WAAY,MAAM,KAAG,MAM9C,CAAC;AAEF,eAAO,MAAM,aAAa,WAChB,YAAY,KACnB;IAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAO/C,CAAC;AAEF,eAAO,MAAM,UAAU,QAAS,MAAM,aAAa,MAAM,6CA6BtD,CAAC;AAEJ,eAAO,MAAM,WAAW,QACjB,MAAM,SACJ,WAAW,GAAG,KAAK,GAAG,SAAS,YAC5B,QAAQ,CAAC,WAAW,CAAC,6CAmBhC,CAAC;AAgEF,eAAO,MAAM,cAAc,wGAIvB,CAAC"}

package/dist/Server.js

@@ -0,0 +1,263 @@
+import { isWorker } from "alchemy/Cloudflare/Workers";
+import * as ProviderLayer from "alchemy/Local/ProviderLayer";
+import * as Provider from "alchemy/Provider";
+import { isResourceOfType, Resource } from "alchemy/Resource";
+import * as Effect from "effect/Effect";
+import * as Schedule from "effect/Schedule";
+import { DEFAULT_JWT_MAX_TTL } from "./Auth.js";
+export { DEFAULT_JWT_MAX_TTL } from "./Auth.js";
+import { InvalidRequest, NetworkError } from "./db/Errors.js";
+import { declareOwnedPeer, ownedPeerDurableObjects, validatePeerWiring, workerEnvOf, } from "./peer.js";
+export const isServer = (value) => isResourceOfType(value, "Ramose.Server");
+const trimSlashes = (value) => value.replace(/\/+$/, "");
+export const PROBE_DEFAULTS = {
+    live: { attempts: 30, delayMs: 2_000, timeoutMs: 10_000, deadlineMs: 120_000 },
+    local: { attempts: 60, delayMs: 250, timeoutMs: 2_000, deadlineMs: 30_000 },
+};
+export const AUTH_ENV_KEYS = {
+    jwksUrl: "RAMOSE_JWKS_URL",
+    jwksJson: "RAMOSE_JWKS_JSON",
+    jwksService: "RAMOSE_JWKS_SERVICE",
+    issuers: "RAMOSE_JWT_ISS",
+    aud: "RAMOSE_JWT_AUD",
+    maxTtl: "RAMOSE_JWT_MAX_TTL",
+    allowedOrigins: "RAMOSE_ALLOWED_ORIGINS",
+};
+const AUTH_COMPARE_KEYS = [
+    AUTH_ENV_KEYS.jwksUrl,
+    AUTH_ENV_KEYS.jwksJson,
+    AUTH_ENV_KEYS.jwksService,
+    AUTH_ENV_KEYS.issuers,
+    AUTH_ENV_KEYS.aud,
+    AUTH_ENV_KEYS.maxTtl,
+    AUTH_ENV_KEYS.allowedOrigins,
+];
+const withAuthConfig = (auth) => auth.jwt === undefined
+    ? auth
+    : {
+        ...auth,
+        issuers: auth.issuers ?? auth.jwt.issuer,
+        aud: auth.aud ?? auth.jwt.audience,
+        maxTtl: auth.maxTtl ?? auth.jwt.ttl,
+    };
+const isBound = (value) => value !== undefined && value !== "";
+const list = (value) => {
+    if (!isBound(value))
+        return undefined;
+    if (typeof value === "string" || (Array.isArray(value) && value.every((item) => typeof item === "string"))) {
+        const items = (typeof value === "string" ? value.split(",") : value)
+            .map((s) => s.trim())
+            .filter((s) => s.length > 0);
+        return items.length === 0 ? undefined : items.join(",");
+    }
+    return value;
+};
+const bindAuthFields = (peerAuth) => {
+    if (peerAuth === undefined)
+        return {};
+    const auth = withAuthConfig(peerAuth);
+    const k = AUTH_ENV_KEYS;
+    const env = {};
+    const set = (key, value) => {
+        if (isBound(value))
+            env[key] = value;
+    };
+    set(k.jwksUrl, auth.jwksUrl);
+    set(k.jwksJson, auth.jwksJson);
+    set(k.jwksService, auth.jwksService);
+    set(k.issuers, list(auth.issuers));
+    set(k.aud, auth.aud);
+    set(k.maxTtl, auth.maxTtl === undefined ? undefined : String(auth.maxTtl));
+    set(k.allowedOrigins, list(auth.allowedOrigins));
+    return env;
+};
+export const authEnv = (peerAuth) => bindAuthFields(peerAuth);
+export const checkAuth = (peerAuth) => {
+    if (peerAuth === undefined)
+        return undefined;
+    const auth = withAuthConfig(peerAuth);
+    if (auth.maxTtl !== undefined && (!Number.isFinite(auth.maxTtl) || auth.maxTtl <= 0)) {
+        return `ramose: auth.maxTtl must be a positive number of seconds (default ${DEFAULT_JWT_MAX_TTL})`;
+    }
+    return undefined;
+};
+const normalizeBinding = (value) => {
+    const raw = value;
+    if (typeof raw === "number" && Number.isFinite(raw))
+        return String(raw);
+    if (typeof raw === "string") {
+        return raw
+            .split(",")
+            .map((s) => s.trim())
+            .filter((s) => s.length > 0)
+            .sort()
+            .join(",");
+    }
+    if (Array.isArray(raw) && raw.every((item) => typeof item === "string" || typeof item === "number")) {
+        return raw
+            .map((item) => String(item).trim())
+            .filter((s) => s.length > 0)
+            .sort()
+            .join(",");
+    }
+    return raw;
+};
+const sameBinding = (expected, actual) => {
+    if (expected === actual)
+        return true;
+    const a = expected;
+    const b = actual;
+    if (a === b)
+        return true;
+    if (typeof a === "object" || typeof b === "object")
+        return false;
+    return normalizeBinding(a) === normalizeBinding(b);
+};
+export const compareAuthToWorker = (peerAuth, worker) => {
+    if (typeof worker === "string")
+        return undefined;
+    const env = workerEnvOf(worker);
+    if (env === undefined)
+        return undefined;
+    const expected = bindAuthFields(peerAuth);
+    const keys = new Set([...AUTH_COMPARE_KEYS, ...Object.keys(expected)]);
+    const diverged = [];
+    for (const key of keys) {
+        const want = expected[key];
+        const got = env[key];
+        if (isBound(want) !== isBound(got) || (isBound(want) && isBound(got) && !sameBinding(want, got))) {
+            diverged.push(key);
+        }
+    }
+    if (diverged.length === 0)
+        return undefined;
+    return `ramose: Server auth and the Worker env diverge on ${diverged.join(", ")} — Server({ auth }) is the source of truth`;
+};
+const ServerResource = Resource("Ramose.Server");
+const ownedPeers = new WeakSet();
+export const Server = Object.assign((id, props) => {
+    const durableObjects = props.worker === undefined ? ownedPeerDurableObjects() : undefined;
+    return ServerResource(id, Effect.gen(function* () {
+        const given = props.worker;
+        if (given !== undefined) {
+            const worker = Effect.isEffect(given) ? yield* given : given;
+            return { ...props, worker };
+        }
+        const worker = yield* declareOwnedPeer({
+            storage: props.storage,
+            main: props.main,
+            env: props.env,
+            name: props.name,
+            dev: props.dev,
+            peer: props.peer,
+            routes: props.routes,
+            authEnv: authEnv(props.auth),
+            durableObjects,
+        });
+        if (typeof worker === "object" && worker !== null)
+            ownedPeers.add(worker);
+        return { ...props, worker };
+    }));
+}, ServerResource);
+/** The native Worker resource to bind from another Cloudflare Worker. */
+export const serverBinding = (server) => {
+    const worker = server.Props.worker;
+    if (!isWorker(worker)) {
+        throw new Error("ramose: a service binding requires a Server backed by a Cloudflare Worker");
+    }
+    return worker;
+};
+export const resolveWorker = (worker) => {
+    if (typeof worker === "string")
+        return { url: worker, workerName: "" };
+    const resolved = worker;
+    return { url: resolved?.url, workerName: resolved?.workerName ?? "" };
+};
+export const healthOnce = (url, timeoutMs) => Effect.tryPromise({
+    try: (signal) => fetch(`${trimSlashes(url)}/health`, { method: "GET", signal }),
+    catch: (cause) => new NetworkError({
+        message: `ramose: server at ${url} is unreachable: ${cause instanceof Error ? cause.message : String(cause)}`,
+        cause,
+    }),
+}).pipe(Effect.flatMap((response) => response.ok
+    ? Effect.void
+    : Effect.fail(new NetworkError({
+        message: `ramose: server at ${url} answered /health with ${response.status}`,
+    }))), Effect.timeoutOrElse({
+    duration: `${Math.max(1, timeoutMs)} millis`,
+    orElse: () => Effect.fail(new NetworkError({
+        message: `ramose: server at ${url} accepted the connection but did not answer GET /health within ${timeoutMs}ms`,
+    })),
+}));
+export const probeHealth = (url, probe, defaults) => {
+    if (probe === false)
+        return Effect.void;
+    const attempts = Math.max(1, probe?.attempts ?? defaults.attempts);
+    const delayMs = probe?.delayMs ?? defaults.delayMs;
+    const timeoutMs = probe?.timeoutMs ?? defaults.timeoutMs;
+    const deadlineMs = probe?.deadlineMs ?? defaults.deadlineMs;
+    return healthOnce(url, timeoutMs).pipe(Effect.retry({ times: attempts - 1, schedule: Schedule.spaced(delayMs) }), Effect.timeoutOrElse({
+        duration: `${Math.max(1, deadlineMs)} millis`,
+        orElse: () => Effect.fail(new NetworkError({
+            message: `ramose: server at ${url} did not answer GET /health within ${deadlineMs}ms — is the Worker that serves it running? Under \`alchemy dev\` a Worker whose bundle failed still binds its port and answers nothing.`,
+        })),
+    }));
+};
+const attributes = Effect.fn(function* (props, defaults) {
+    const badAuth = checkAuth(props.auth);
+    if (badAuth !== undefined)
+        return yield* new InvalidRequest({ message: badAuth });
+    if (props.worker !== undefined) {
+        const badWiring = validatePeerWiring(props.worker);
+        if (badWiring !== undefined) {
+            return yield* new InvalidRequest({ message: badWiring });
+        }
+        const hatch = typeof props.worker !== "object" ||
+            props.worker === null ||
+            !ownedPeers.has(props.worker);
+        if (hatch) {
+            const badMatch = compareAuthToWorker(props.auth, props.worker);
+            if (badMatch !== undefined) {
+                return yield* new InvalidRequest({ message: badMatch });
+            }
+        }
+    }
+    const worker = resolveWorker(props.worker);
+    const chosen = props.url ?? worker.url;
+    if (chosen === undefined || chosen === "") {
+        return yield* new InvalidRequest({
+            message: "ramose: the server has no URL — pass a deployed Cloudflare.Worker (workers.dev or a custom domain) or an explicit `url`",
+        });
+    }
+    const url = trimSlashes(chosen);
+    yield* probeHealth(url, props.probe, defaults);
+    return {
+        url,
+        workerName: worker.workerName,
+    };
+});
+const ProviderLive = () => Provider.succeed(Server, {
+    reconcile: Effect.fn(function* ({ news }) {
+        return yield* attributes(news, PROBE_DEFAULTS.live);
+    }),
+    read: Effect.fn(function* ({ output }) {
+        return output ?? undefined;
+    }),
+    delete: Effect.fn(function* () {
+    }),
+});
+const ProviderLocal = () => Provider.succeed(Server, {
+    reconcile: Effect.fn(function* ({ news }) {
+        return yield* attributes(news, PROBE_DEFAULTS.local);
+    }),
+    read: Effect.fn(function* ({ output }) {
+        return output ?? undefined;
+    }),
+    delete: Effect.fn(function* () { }),
+});
+// @effect-diagnostics-next-line lazyEffect:off
+export const ServerProvider = () => ProviderLayer.dual(Server, {
+    local: () => ProviderLocal(),
+    live: () => ProviderLive(),
+});
+//# sourceMappingURL=Server.js.map

package/dist/Server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Server.js","sourceRoot":"","sources":["../src/Server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAe,MAAM,4BAA4B,CAAC;AAEnE,OAAO,KAAK,aAAa,MAAM,6BAA6B,CAAC;AAC7D,OAAO,KAAK,QAAQ,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,QAAQ,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAmB,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EAGvB,kBAAkB,EAClB,WAAW,GACZ,MAAM,WAAW,CAAC;AAInB,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmB,EAAE,CAC1D,gBAAgB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC;AAU3C,MAAM,WAAW,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AASzE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE;IAC9E,KAAK,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE;CACT,CAAC;AAyCrE,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,kBAAkB;IAC5B,WAAW,EAAE,qBAAqB;IAClC,OAAO,EAAE,gBAAgB;IACzB,GAAG,EAAE,gBAAgB;IACrB,MAAM,EAAE,oBAAoB;IAC5B,cAAc,EAAE,wBAAwB;CAIzC,CAAC;AAEF,MAAM,iBAAiB,GAAG;IACxB,aAAa,CAAC,OAAO;IACrB,aAAa,CAAC,QAAQ;IACtB,aAAa,CAAC,WAAW;IACzB,aAAa,CAAC,OAAO;IACrB,aAAa,CAAC,GAAG;IACjB,aAAa,CAAC,MAAM;IACpB,aAAa,CAAC,cAAc;CACpB,CAAC;AAEX,MAAM,cAAc,GAAG,CAAC,IAAgB,EAAc,EAAE,CACtD,IAAI,CAAC,GAAG,KAAK,SAAS;IACpB,CAAC,CAAC,IAAI;IACN,CAAC,CAAC;QACE,GAAG,IAAI;QACP,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM;QACxC,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ;QAClC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG;KACpC,CAAC;AAER,MAAM,OAAO,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC;AAEjF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAW,EAAE;IACvC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC3G,MAAM,KAAK,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;aACjE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CACrB,QAAgC,EACP,EAAE;IAC3B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,aAAa,CAAC;IACxB,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE;QAC1C,IAAI,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACvC,CAAC,CAAC;IACF,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/B,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACrC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,QAAgC,EACP,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;AAEvD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,QAAgC,EAAsB,EAAE;IAChF,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO,qEAAqE,mBAAmB,GAAG,CAAC;IACrG,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAW,EAAE;IACnD,MAAM,GAAG,GAAG,KAAK,CAAC;IAClB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG;aACP,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aAC3B,IAAI,EAAE;aACN,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;QACpG,OAAO,GAAG;aACP,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;aAClC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aAC3B,IAAI,EAAE;aACN,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,WAAW,GAAG,CAAC,QAAiB,EAAE,MAAe,EAAW,EAAE;IAClE,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,CAAC,GAAG,QAAQ,CAAC;IACnB,MAAM,CAAC,GAAG,MAAM,CAAC;IACjB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,gBAAgB,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,QAAgC,EAChC,MAAe,EACK,EAAE;IACtB,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACjD,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAExC,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAE1C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,iBAAiB,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;YACjG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5C,OAAO,qDAAqD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC;AAC9H,CAAC,CAAC;AAaF,MAAM,cAAc,GAAG,QAAQ,CAAS,eAAe,CAAC,CAAC;AAEzD,MAAM,UAAU,GAAG,IAAI,OAAO,EAAU,CAAC;AAEzC,MAAM,CAAC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CACjC,CAAC,EAAU,EAAE,KAA8B,EAAE,EAAE;IAC7C,MAAM,cAAc,GAClB,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACrE,OAAO,cAAc,CACnB,EAAE,EACF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClB,MAAM,KAAK,GAAG,KAAK,CAAC,MAGP,CAAC;QACd,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;YAC7D,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAA6B,CAAC;QACzD,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,gBAAgB,CAAC;YACrC,OAAO,EAAE,KAAK,CAAC,OAAkC;YACjD,IAAI,EAAE,KAAK,CAAC,IAA0B;YACtC,GAAG,EAAE,KAAK,CAAC,GAA0C;YACrD,IAAI,EAAE,KAAK,CAAC,IAA0B;YACtC,GAAG,EAAE,KAAK,CAAC,GAA6C;YACxD,IAAI,EAAE,KAAK,CAAC,IAA0B;YACtC,MAAM,EAAE,KAAK,CAAC,MAAiC;YAC/C,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,IAA8B,CAAC;YACtD,cAAc;SACf,CAAC,CAAC;QACH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1E,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAA6B,CAAC;IACzD,CAAC,CAAoE,CACtE,CAAC;AACJ,CAAC,EACD,cAAc,CACU,CAAC;AAE3B,yEAAyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAc,EAAU,EAAE;IACtD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,MAAoB,EAC6B,EAAE;IACnD,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,MAGhB,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,SAAiB,EAAE,EAAE,CAC3D,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/E,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,IAAI,YAAY,CAAC;QACf,OAAO,EAAE,qBAAqB,GAAG,oBAC/B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE;QACF,KAAK;KACN,CAAC;CACL,CAAC,CAAC,IAAI,CACL,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAC1B,QAAQ,CAAC,EAAE;IACT,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,IAAI,YAAY,CAAC;QACf,OAAO,EAAE,qBAAqB,GAAG,0BAA0B,QAAQ,CAAC,MAAM,EAAE;KAC7E,CAAC,CACH,CACN,EACD,MAAM,CAAC,aAAa,CAAC;IACnB,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,SAAS;IAC5C,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,IAAI,CACT,IAAI,YAAY,CAAC;QACf,OAAO,EAAE,qBAAqB,GAAG,kEAAkE,SAAS,IAAI;KACjH,CAAC,CACH;CACJ,CAAC,CACH,CAAC;AAEJ,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,GAAW,EACX,KAAsC,EACtC,QAA+B,EAC/B,EAAE;IACF,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC;IACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnE,MAAM,OAAO,GAAG,KAAK,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;IACzD,MAAM,UAAU,GAAG,KAAK,EAAE,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC;IAC5D,OAAO,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC,IAAI,CACpC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EACzE,MAAM,CAAC,aAAa,CAAC;QACnB,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,CAAC,SAAS;QAC7C,MAAM,EAAE,GAAG,EAAE,CACX,MAAM,CAAC,IAAI,CACT,IAAI,YAAY,CAAC;YACf,OAAO,EAAE,qBAAqB,GAAG,sCAAsC,UAAU,yIAAyI;SAC3N,CAAC,CACH;KACJ,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EACpC,KAAkB,EAClB,QAA+B;IAE/B,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;IAClF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,KAAK,GACT,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ;YAChC,KAAK,CAAC,MAAM,KAAK,IAAI;YACrB,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YAC/D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,MAAsB,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC;IACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC,CAAC,IAAI,cAAc,CAAC;YAC/B,OAAO,EACL,yHAAyH;SAC5H,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC/C,OAAO;QACL,GAAG;QACH,UAAU,EAAE,MAAM,CAAC,UAAU;KAC9B,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;QACtC,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,OAAO,MAAM,IAAI,SAAS,CAAC;IAC7B,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC;IAC3B,CAAC,CAAC;CACH,CAAC,CAAC;AAEL,MAAM,aAAa,GAAG,GAAG,EAAE,CACzB,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE;IACvB,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE;QACtC,OAAO,KAAK,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC;IACF,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE;QACnC,OAAO,MAAM,IAAI,SAAS,CAAC;IAC7B,CAAC,CAAC;IACF,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAK,CAAC,CAAC;CACnC,CAAC,CAAC;AAEL,+CAA+C;AAC/C,MAAM,CAAC,MAAM,cAAc,GAAG,GAAG,EAAE,CACjC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE;IACzB,KAAK,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE;IAC5B,IAAI,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE;CAC3B,CAAC,CAAC"}

package/dist/ServerRuntime.d.ts

@@ -0,0 +1,10 @@
+import * as Output from "alchemy/Output";
+import * as Effect from "effect/Effect";
+import type { Server } from "./Server.ts";
+export declare const envKeys: (server: Pick<Server, "LogicalId">) => {
+    service: string;
+    url: string;
+};
+export declare const bindOutput: <A>(key: string, output: Output.Output<A>) => Effect.Effect<Effect.Effect<A>>;
+export declare const required: (key: string, accessor: Effect.Effect<string>) => Effect.Effect<string>;
+//# sourceMappingURL=ServerRuntime.d.ts.map

package/dist/ServerRuntime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServerRuntime.d.ts","sourceRoot":"","sources":["../src/ServerRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C,eAAO,MAAM,OAAO,WAAY,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC;IACvD,OAAO;IACP,GAAG;CACH,CAAC;AAEH,eAAO,MAAM,UAAU,GAAI,CAAC,OACrB,MAAM,UACH,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,KACvB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CACoB,CAAC;AAEtD,eAAO,MAAM,QAAQ,QACd,MAAM,YACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAC9B,MAAM,CAAC,MAAM,CAAC,MAAM,CAWpB,CAAC"}

package/dist/ServerRuntime.js

@@ -0,0 +1,11 @@
+import * as Output from "alchemy/Output";
+import * as Effect from "effect/Effect";
+export const envKeys = (server) => ({
+    service: server.LogicalId,
+    url: `${server.LogicalId}_URL`,
+});
+export const bindOutput = (key, output) => output.bind(key);
+export const required = (key, accessor) => accessor.pipe(Effect.flatMap((value) => value === undefined || value === null || value === ""
+    ? Effect.die(new Error(`ramose: no value bound under "${key}" — the capability must be provided on a host that takes bindings (a Cloudflare.Worker, or an Alchemy.Action; Ramose.layer falls back to HTTPS when no service binding is present)`))
+    : Effect.succeed(value)));
+//# sourceMappingURL=ServerRuntime.js.map

package/dist/ServerRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServerRuntime.js","sourceRoot":"","sources":["../src/ServerRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAGxC,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,MAAiC,EAAE,EAAE,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,CAAC,SAAS;IACzB,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,MAAM;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CACxB,GAAW,EACX,MAAwB,EACS,EAAE,CACnC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAoC,CAAC;AAEtD,MAAM,CAAC,MAAM,QAAQ,GAAG,CACtB,GAAW,EACX,QAA+B,EACR,EAAE,CACzB,QAAQ,CAAC,IAAI,CACX,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvB,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;IACnD,CAAC,CAAC,MAAM,CAAC,GAAG,CACR,IAAI,KAAK,CACP,iCAAiC,GAAG,oLAAoL,CACzN,CACF;IACH,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAC1B,CACF,CAAC"}

package/dist/better-auth/client.d.ts

@@ -0,0 +1,19 @@
+import type { AuthProvider } from "../client/client.ts";
+/** A Better Auth credential provider for one account and token endpoint. */
+export interface BetterAuthProvider extends AuthProvider {
+    /** Forget the saved bearer and permanently close this provider on sign-out. */
+    clear(): void;
+}
+export interface BetterAuthProviderOptions {
+    readonly userId: string;
+    /** Better Auth base URL. Defaults to `/api/auth` on the current origin. */
+    readonly baseURL?: string;
+}
+/**
+ * Cache and renew the bearer minted by `ramoseToken`. A network failure may
+ * reuse the previously saved bearer; an HTTP refusal never does. Concurrent
+ * requests share one renewal. Saved credentials grant no local authority:
+ * the Ramose client still requires its prior or current authenticated binding.
+ */
+export declare const createAuthProvider: (options: BetterAuthProviderOptions) => BetterAuthProvider;
+//# sourceMappingURL=client.d.ts.map

package/dist/better-auth/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/better-auth/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAkB,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExE,4EAA4E;AAC5E,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,+EAA+E;IAC/E,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAYD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,YAAa,yBAAyB,KAAG,kBAoEvE,CAAC"}

package/dist/better-auth/client.js

@@ -0,0 +1,110 @@
+const bearerOf = (value) => {
+    if (typeof value !== "object" || value === null)
+        return undefined;
+    const candidate = value;
+    return typeof candidate.token === "string" && candidate.token.length > 0 &&
+        typeof candidate.exp === "number" && Number.isFinite(candidate.exp) && candidate.exp > 0
+        ? { token: candidate.token, exp: candidate.exp }
+        : undefined;
+};
+/**
+ * Cache and renew the bearer minted by `ramoseToken`. A network failure may
+ * reuse the previously saved bearer; an HTTP refusal never does. Concurrent
+ * requests share one renewal. Saved credentials grant no local authority:
+ * the Ramose client still requires its prior or current authenticated binding.
+ */
+export const createAuthProvider = (options) => {
+    const userId = options.userId;
+    if (typeof userId !== "string" || userId.length === 0) {
+        throw new Error("ramose/better-auth: userId is required");
+    }
+    const base = new URL(options.baseURL ?? "/api/auth", location.origin);
+    const endpoint = new URL(`${base.pathname.replace(/\/$/, "")}/ramose/token`, base.origin).href;
+    const key = `ramose:bearer:${encodeURIComponent(endpoint)}:${encodeURIComponent(userId)}`;
+    let closed = false;
+    let pending;
+    let memory;
+    let persisted = false;
+    const controller = new AbortController();
+    const remove = () => {
+        memory = undefined;
+        try {
+            localStorage.removeItem(key);
+        }
+        catch { }
+    };
+    const read = () => {
+        let raw;
+        try {
+            raw = localStorage.getItem(key);
+        }
+        catch {
+            return memory;
+        }
+        if (raw === null)
+            return persisted ? undefined : memory;
+        try {
+            return bearerOf(JSON.parse(raw));
+        }
+        catch {
+            return undefined;
+        }
+    };
+    const renew = async () => {
+        const stored = read();
+        const credential = (token) => ({ token, cacheKey: userId });
+        if (stored !== undefined && Date.now() < stored.exp * 1000 - 60_000)
+            return credential(stored.token);
+        let response;
+        try {
+            response = await fetch(endpoint, {
+                method: "POST",
+                credentials: "include",
+                headers: { "content-type": "application/json" },
+                body: "{}",
+                signal: controller.signal,
+            });
+        }
+        catch (cause) {
+            if (!closed && stored !== undefined)
+                return credential(stored.token);
+            throw cause;
+        }
+        if (!response.ok) {
+            if (response.status === 401 || response.status === 403)
+                remove();
+            throw new Error(`ramose/better-auth: token mint failed with ${response.status}`);
+        }
+        const bearer = bearerOf(await response.json());
+        if (closed)
+            throw new Error("ramose/better-auth: credential provider is closed");
+        if (bearer === undefined)
+            throw new Error("ramose/better-auth: token mint returned an invalid credential");
+        memory = bearer;
+        try {
+            localStorage.setItem(key, JSON.stringify(bearer));
+            persisted = true;
+        }
+        catch {
+            persisted = false;
+        }
+        return credential(bearer.token);
+    };
+    return Object.assign(() => {
+        if (closed)
+            return Promise.reject(new Error("ramose/better-auth: credential provider is closed"));
+        pending ??= renew().then((credential) => {
+            if (closed)
+                throw new Error("ramose/better-auth: credential provider is closed");
+            return credential;
+        }).finally(() => { pending = undefined; });
+        return pending;
+    }, {
+        clear() {
+            closed = true;
+            controller.abort();
+            remove();
+        },
+    });
+};
+//# sourceMappingURL=client.js.map

package/dist/better-auth/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/better-auth/client.ts"],"names":[],"mappings":"AAeA,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAsB,EAAE;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,SAAS,GAAG,KAAwB,CAAC;IAC3C,OAAO,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,IAAI,SAAS,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QACpE,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,GAAG,CAAC;QAC1F,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;QAChD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,OAAkC,EAAsB,EAAE;IAC3F,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IAC/F,MAAM,GAAG,GAAG,iBAAiB,kBAAkB,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1F,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,OAA4C,CAAC;IACjD,IAAI,MAA0B,CAAC;IAC/B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,EAAE;QAClB,MAAM,GAAG,SAAS,CAAC;QACnB,IAAI,CAAC;YAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IAChD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,GAAuB,EAAE;QACpC,IAAI,GAAkB,CAAC;QACvB,IAAI,CAAC;YAAC,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,MAAM,CAAC;QAAC,CAAC;QACjE,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;QACxD,IAAI,CAAC;YAAC,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;IACvE,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,IAA6B,EAAE;QAChD,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;QACtB,MAAM,UAAU,GAAG,CAAC,KAAa,EAAkB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACpF,IAAI,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,GAAG,IAAI,GAAG,MAAM;YAAE,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrG,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBAC/B,MAAM,EAAE,MAAM;gBACd,WAAW,EAAE,SAAS;gBACtB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACrE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,8CAA8C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACjF,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC3G,MAAM,GAAG,MAAM,CAAC;QAChB,IAAI,CAAC;YACH,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS,GAAG,KAAK,CAAC;QAAC,CAAC;QAC9B,OAAO,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,GAA4B,EAAE;QACjD,IAAI,MAAM;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;QAClG,OAAO,KAAK,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;YACtC,IAAI,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;YACjF,OAAO,UAAU,CAAC;QACpB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC;IACjB,CAAC,EAAE;QACD,KAAK;YACH,MAAM,GAAG,IAAI,CAAC;YACd,UAAU,CAAC,KAAK,EAAE,CAAC;YACnB,MAAM,EAAE,CAAC;QACX,CAAC;KACF,CAAC,CAAC;AACL,CAAC,CAAC"}