ramosedb 0.0.1 → 0.4.0

package/dist/internal/replication/identity-root.js

@@ -0,0 +1,48 @@
+import { internalHeaders } from "../transactor/internal.js";
+import { decodeServerIdentityRoot, sealingKeyOf, ServerIdentityUnavailable, } from "./server-identity.js";
+export const SERVER_IDENTITY_ROOT_NAME = "ramose-server-identity-root-v1";
+let cached;
+export const serverIdentityRootId = (env) => env.REPLICA.idFromName(SERVER_IDENTITY_ROOT_NAME);
+const load = async (env) => {
+    let response;
+    try {
+        response = await env.REPLICA.get(serverIdentityRootId(env)).fetch("https://replica/server-identity", { method: "POST", headers: internalHeaders(env) });
+    }
+    catch (cause) {
+        throw new ServerIdentityUnavailable({
+            reason: "server identity root is unreachable",
+            cause,
+        });
+    }
+    if (!response.ok) {
+        const failure = await response.text().catch(() => "");
+        throw new ServerIdentityUnavailable({
+            reason: `server identity root is unusable (${response.status}) ${failure}`.trim(),
+        });
+    }
+    const body = (await response.json());
+    const root = decodeServerIdentityRoot(body.root);
+    if (root === undefined) {
+        throw new ServerIdentityUnavailable({
+            reason: "server identity root record is unreadable",
+        });
+    }
+    return root;
+};
+export const serverIdentityRoot = (env) => {
+    const existing = cached;
+    if (existing !== undefined)
+        return existing;
+    const pending = load(env).catch((cause) => {
+        if (cached === pending)
+            cached = undefined;
+        throw cause;
+    });
+    cached = pending;
+    return pending;
+};
+export const serverSealingKey = async (env) => sealingKeyOf(await serverIdentityRoot(env));
+export const clearServerIdentityRootCache = () => {
+    cached = undefined;
+};
+//# sourceMappingURL=identity-root.js.map

package/dist/internal/replication/identity-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-root.js","sourceRoot":"","sources":["../../../src/internal/replication/identity-root.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EACL,wBAAwB,EACxB,YAAY,EACZ,yBAAyB,GAG1B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,yBAAyB,GAAG,gCAAgC,CAAC;AAO1E,IAAI,MAA+C,CAAC;AAEpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,GAAqC,EACpB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;AAExE,MAAM,IAAI,GAAG,KAAK,EAAE,GAAoB,EAA+B,EAAE;IACvE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAC/D,iCAAiC,EACjC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAClD,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,yBAAyB,CAAC;YAClC,MAAM,EAAE,qCAAqC;YAC7C,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACtD,MAAM,IAAI,yBAAyB,CAAC;YAClC,MAAM,EAAE,qCAAqC,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC,IAAI,EAAE;SAClF,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgC,CAAC;IACpE,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,yBAAyB,CAAC;YAClC,MAAM,EAAE,2CAA2C;SACpD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,GAAoB,EACS,EAAE;IAC/B,MAAM,QAAQ,GAAG,MAAM,CAAC;IACxB,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,OAAO,GAAgC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAC1D,CAAC,KAAK,EAAS,EAAE;QACf,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM,GAAG,SAAS,CAAC;QAC3C,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,MAAM,GAAG,OAAO,CAAC;IACjB,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,KAAK,EACnC,GAAoB,EACO,EAAE,CAAC,YAAY,CAAC,MAAM,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAS,EAAE;IACrD,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC,CAAC"}

package/dist/internal/replication/identity.d.ts

@@ -0,0 +1,40 @@
+import type { AuthenticatedCaller } from "../authorization/request.ts";
+import type { DatabaseLeaseIdentity } from "../authorization/database-target.ts";
+import type { ResolvedDatabaseRoute } from "../authorization/database-bindings.ts";
+import type { JsonValue } from "../authorization/json.ts";
+import type { DatabaseId, ReadCompatibilityHash } from "../authorization/identities.ts";
+import type { OpaqueReplicationId, ReplicationIdentity } from "./protocol.ts";
+import type { EntityIdScope } from "./entity-id.ts";
+import { type ServerSealingKey } from "./server-identity.ts";
+export declare const opaqueHmac: (sealing: ServerSealingKey, domain: string, value: JsonValue) => Promise<OpaqueReplicationId>;
+export declare const opaqueDigest: (domain: string, bytes: Uint8Array) => Promise<OpaqueReplicationId>;
+export type ReplicationIdentityInput = {
+    readonly sealing: ServerSealingKey;
+    readonly origin: string;
+    readonly caller: AuthenticatedCaller;
+    readonly path: DatabaseLeaseIdentity;
+    readonly readRoutes: readonly ReplicationReadRouteIdentity[];
+};
+export type ReplicationReadRouteIdentity = {
+    readonly database: DatabaseId;
+    readonly readCompatibilityHash: ReadCompatibilityHash;
+    readonly readPolicy: string;
+};
+export declare const replicationReadRouteIdentities: (routes: readonly ResolvedDatabaseRoute[]) => Promise<readonly ReplicationReadRouteIdentity[]>;
+export type EntityIdScopeInput = {
+    readonly origin: string;
+    readonly caller: AuthenticatedCaller;
+    readonly database: DatabaseId;
+};
+export type ReplicationEntityIdScope = EntityIdScope & {
+    readonly server: OpaqueReplicationId;
+    readonly principal: OpaqueReplicationId;
+    readonly database: OpaqueReplicationId;
+};
+export declare const makeEntityIdScope: (sealing: ServerSealingKey, input: EntityIdScopeInput) => Promise<ReplicationEntityIdScope>;
+export declare const entityIdScopeOf: (identity: ReplicationIdentity) => ReplicationEntityIdScope;
+export declare const makeReplicationIdentity: (input: ReplicationIdentityInput) => Promise<ReplicationIdentity>;
+export declare const makeEntityIdentity: (sealing: ServerSealingKey, database: string, eid: number) => Promise<OpaqueReplicationId>;
+export declare const makeRevision: (sealing: ServerSealingKey, identity: ReplicationIdentity, stateDigest: OpaqueReplicationId) => Promise<OpaqueReplicationId>;
+export declare const makeSnapshotIdentity: (sealing: ServerSealingKey, identity: ReplicationIdentity, revision: OpaqueReplicationId) => Promise<OpaqueReplicationId>;
+//# sourceMappingURL=identity.d.ts.map

package/dist/internal/replication/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/internal/replication/identity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AACjF,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAOnF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EACV,UAAU,EACV,qBAAqB,EACtB,MAAM,gCAAgC,CAAC;AACxC,OAAO,KAAK,EACV,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAa,KAAK,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAuBxE,eAAO,MAAM,UAAU,YACZ,gBAAgB,UACjB,MAAM,SACP,SAAS,KACf,OAAO,CAAC,mBAAmB,CAQ7B,CAAC;AAEF,eAAO,MAAM,YAAY,WACf,MAAM,SACP,UAAU,KAChB,OAAO,CAAC,mBAAmB,CAO7B,CAAC;AAOF,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,SAAS,4BAA4B,EAAE,CAAC;CAC9D,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,qBAAqB,EAAE,qBAAqB,CAAC;IACtD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,eAAO,MAAM,8BAA8B,WACjC,SAAS,qBAAqB,EAAE,KACvC,OAAO,CAAC,SAAS,4BAA4B,EAAE,CAI9C,CAAC;AAEL,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,aAAa,GAAG;IACrD,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC,CAAC;AAEF,eAAO,MAAM,iBAAiB,YACnB,gBAAgB,SAClB,kBAAkB,KACxB,OAAO,CAAC,wBAAwB,CAWlC,CAAC;AAEF,eAAO,MAAM,eAAe,aAChB,mBAAmB,KAC5B,wBAKC,CAAC;AAEL,eAAO,MAAM,uBAAuB,UAC3B,wBAAwB,KAC9B,OAAO,CAAC,mBAAmB,CA6C7B,CAAC;AAEF,eAAO,MAAM,kBAAkB,YACpB,gBAAgB,YACf,MAAM,OACX,MAAM,KACV,OAAO,CAAC,mBAAmB,CAC0C,CAAC;AAEzE,eAAO,MAAM,YAAY,YACd,gBAAgB,YACf,mBAAmB,eAChB,mBAAmB,KAC/B,OAAO,CAAC,mBAAmB,CAI1B,CAAC;AAEL,eAAO,MAAM,oBAAoB,YACtB,gBAAgB,YACf,mBAAmB,YACnB,mBAAmB,KAC5B,OAAO,CAAC,mBAAmB,CAI1B,CAAC"}

package/dist/internal/replication/identity.js

@@ -0,0 +1,95 @@
+import * as Effect from "effect/Effect";
+import { canonicalizeJson } from "../authorization/canonical-json.js";
+import { canonicalizeReadPolicy, DATABASE_READ_SEMANTICS_VERSION, hashReadCompatibility, } from "../authorization/read-compatibility.js";
+import { base64Url } from "./server-identity.js";
+const utf8 = new TextEncoder();
+const keys = new Map();
+const MAX_CACHED_KEYS = 4;
+const keyFor = (sealing) => {
+    let key = keys.get(sealing.material);
+    if (key !== undefined)
+        return key;
+    if (keys.size >= MAX_CACHED_KEYS)
+        keys.delete(keys.keys().next().value);
+    key = crypto.subtle.importKey("raw", utf8.encode(sealing.material), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
+    keys.set(sealing.material, key);
+    return key;
+};
+const canonical = (value) => canonicalizeJson(value);
+export const opaqueHmac = async (sealing, domain, value) => {
+    const key = await keyFor(sealing);
+    const signature = await crypto.subtle.sign("HMAC", key, utf8.encode(`${domain}\0${canonical(value)}`));
+    return base64Url(new Uint8Array(signature));
+};
+export const opaqueDigest = async (domain, bytes) => {
+    const prefix = utf8.encode(`${domain}\0`);
+    const material = new Uint8Array(prefix.byteLength + bytes.byteLength);
+    material.set(prefix);
+    material.set(bytes, prefix.byteLength);
+    const digest = await crypto.subtle.digest("SHA-256", material);
+    return base64Url(new Uint8Array(digest));
+};
+const callerMaterial = (caller) => ({
+    claims: caller.claims,
+    classes: [...caller.classes].sort(),
+});
+export const replicationReadRouteIdentities = async (routes) => Promise.all(routes.map(async (route) => ({
+    database: route.database,
+    readCompatibilityHash: await Effect.runPromise(hashReadCompatibility(route.deployed.unit.catalog)),
+    readPolicy: canonicalizeReadPolicy(route.deployed.unit.policy),
+})));
+export const makeEntityIdScope = async (sealing, input) => {
+    const [server, principal, database] = await Promise.all([
+        opaqueHmac(sealing, "ramose:replication:server:v1", input.origin),
+        opaqueHmac(sealing, "ramose:replication:principal:v1", callerMaterial(input.caller)),
+        opaqueHmac(sealing, "ramose:replication:database:v1", input.database),
+    ]);
+    return Object.freeze({ server, principal, database });
+};
+export const entityIdScopeOf = (identity) => Object.freeze({
+    server: identity.server,
+    principal: identity.principal,
+    database: identity.database,
+});
+export const makeReplicationIdentity = async (input) => {
+    const target = input.path.route;
+    const { server, principal, database } = await makeEntityIdScope(input.sealing, {
+        origin: input.origin,
+        caller: input.caller,
+        database: target.database,
+    });
+    const catalog = await opaqueHmac(input.sealing, "ramose:replication:catalog:v1", target.catalogKey);
+    const readCompatibilityHash = input.readRoutes[input.readRoutes.length - 1]
+        ?.readCompatibilityHash;
+    if (readCompatibilityHash === undefined)
+        throw new Error("replication database has no read route");
+    const readView = await opaqueHmac(input.sealing, "ramose:replication:read-view:v2", {
+        readSemantics: DATABASE_READ_SEMANTICS_VERSION,
+        routes: input.readRoutes.map((route) => ({
+            database: route.database,
+            compatibility: route.readCompatibilityHash,
+            policy: route.readPolicy,
+        })),
+    });
+    const unsigned = {
+        version: 1,
+        server,
+        principal,
+        database,
+        catalog,
+        readView,
+        readCompatibilityHash,
+    };
+    const authenticator = await opaqueHmac(input.sealing, "ramose:replication:identity:v1", unsigned);
+    return Object.freeze({ ...unsigned, authenticator });
+};
+export const makeEntityIdentity = (sealing, database, eid) => opaqueHmac(sealing, "ramose:replication:entity:v1", { database, eid });
+export const makeRevision = (sealing, identity, stateDigest) => opaqueHmac(sealing, "ramose:replication:revision:v1", {
+    binding: identity.authenticator,
+    state: stateDigest,
+});
+export const makeSnapshotIdentity = (sealing, identity, revision) => opaqueHmac(sealing, "ramose:replication:snapshot:v1", {
+    binding: identity.authenticator,
+    revision,
+});
+//# sourceMappingURL=identity.js.map

package/dist/internal/replication/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/internal/replication/identity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AAIxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AACtE,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,qBAAqB,GACtB,MAAM,wCAAwC,CAAC;AAWhD,OAAO,EAAE,SAAS,EAAyB,MAAM,sBAAsB,CAAC;AAExE,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;AAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8B,CAAC;AACnD,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,MAAM,MAAM,GAAG,CAAC,OAAyB,EAAsB,EAAE;IAC/D,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClC,IAAI,IAAI,CAAC,IAAI,IAAI,eAAe;QAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAM,CAAC,CAAC;IACzE,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAC3B,KAAK,EACL,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,KAAgB,EAAU,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,OAAyB,EACzB,MAAc,EACd,KAAgB,EACc,EAAE;IAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,MAAM,EACN,GAAG,EACH,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,KAAK,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAC9C,CAAC;IACF,OAAO,SAAS,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAwB,CAAC;AACrE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC/B,MAAc,EACd,KAAiB,EACa,EAAE;IAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IACtE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrB,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC/D,OAAO,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAwB,CAAC;AAClE,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,MAA2B,EAAa,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,MAAM,CAAC,MAAM;IACrB,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE;CACpC,CAAC,CAAC;AAgBH,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,EACjD,MAAwC,EACU,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9F,QAAQ,EAAE,KAAK,CAAC,QAAQ;IACxB,qBAAqB,EAAE,MAAM,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClG,UAAU,EAAE,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;CAC/D,CAAC,CAAC,CAAC,CAAC;AAcL,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,OAAyB,EACzB,KAAyB,EACU,EAAE;IACrC,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,UAAU,CAAC,OAAO,EAAE,8BAA8B,EAAE,KAAK,CAAC,MAAM,CAAC;QACjE,UAAU,CACR,OAAO,EACP,iCAAiC,EACjC,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAC7B;QACD,UAAU,CAAC,OAAO,EAAE,gCAAgC,EAAE,KAAK,CAAC,QAAQ,CAAC;KACtE,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;AACxD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,QAA6B,EACH,EAAE,CAC5B,MAAM,CAAC,MAAM,CAAC;IACZ,MAAM,EAAE,QAAQ,CAAC,MAAM;IACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;IAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;CAC5B,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,KAA+B,EACD,EAAE;IAChC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;IAChC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,iBAAiB,CAC7D,KAAK,CAAC,OAAO,EACb;QACE,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,UAAU,CAC9B,KAAK,CAAC,OAAO,EACb,+BAA+B,EAC/B,MAAM,CAAC,UAAU,CAClB,CAAC;IACF,MAAM,qBAAqB,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;QACzE,EAAE,qBAAqB,CAAC;IAC1B,IAAI,qBAAqB,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,KAAK,CAAC,OAAO,EACb,iCAAiC,EACjC;QACE,aAAa,EAAE,+BAA+B;QAC9C,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,aAAa,EAAE,KAAK,CAAC,qBAAqB;YAC1C,MAAM,EAAE,KAAK,CAAC,UAAU;SACzB,CAAC,CAAC;KACJ,CACF,CAAC;IACF,MAAM,QAAQ,GAAG;QACf,OAAO,EAAE,CAAU;QACnB,MAAM;QACN,SAAS;QACT,QAAQ;QACR,OAAO;QACP,QAAQ;QACR,qBAAqB;KACtB,CAAC;IACF,MAAM,aAAa,GAAG,MAAM,UAAU,CACpC,KAAK,CAAC,OAAO,EACb,gCAAgC,EAChC,QAAQ,CACT,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAChC,OAAyB,EACzB,QAAgB,EAChB,GAAW,EACmB,EAAE,CAChC,UAAU,CAAC,OAAO,EAAE,8BAA8B,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;AAEzE,MAAM,CAAC,MAAM,YAAY,GAAG,CAC1B,OAAyB,EACzB,QAA6B,EAC7B,WAAgC,EACF,EAAE,CAChC,UAAU,CAAC,OAAO,EAAE,gCAAgC,EAAE;IACpD,OAAO,EAAE,QAAQ,CAAC,aAAa;IAC/B,KAAK,EAAE,WAAW;CACnB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAyB,EACzB,QAA6B,EAC7B,QAA6B,EACC,EAAE,CAChC,UAAU,CAAC,OAAO,EAAE,gCAAgC,EAAE;IACpD,OAAO,EAAE,QAAQ,CAAC,aAAa;IAC/B,QAAQ;CACT,CAAC,CAAC"}

package/dist/internal/replication/index.d.ts

@@ -0,0 +1,13 @@
+export * from "./entity-id.ts";
+export * from "./identity.ts";
+export * from "./logical.ts";
+export * from "./protocol.ts";
+export * from "./replica-integrity.ts";
+export * from "./replica-lifecycle.ts";
+export * from "./replica-schema.ts";
+export * from "./route-slot.ts";
+export * from "./server-identity.ts";
+export * from "./session.ts";
+export * from "./state.ts";
+export * from "./transport.ts";
+//# sourceMappingURL=index.d.ts.map

package/dist/internal/replication/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/internal/replication/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}

package/dist/internal/replication/index.js

@@ -0,0 +1,13 @@
+export * from "./entity-id.js";
+export * from "./identity.js";
+export * from "./logical.js";
+export * from "./protocol.js";
+export * from "./replica-integrity.js";
+export * from "./replica-lifecycle.js";
+export * from "./replica-schema.js";
+export * from "./route-slot.js";
+export * from "./server-identity.js";
+export * from "./session.js";
+export * from "./state.js";
+export * from "./transport.js";
+//# sourceMappingURL=index.js.map

package/dist/internal/replication/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/internal/replication/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,eAAe,CAAC;AAC9B,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,qBAAqB,CAAC;AACpC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC"}

package/dist/internal/replication/indexeddb.d.ts

@@ -0,0 +1,171 @@
+import type { ReadCompatibilityHash } from "../authorization/identities.ts";
+import { Db, type Roots } from "../core/db.ts";
+import { type AttributeSpec } from "../core/schema.ts";
+import { type RuntimeBoundaries } from "../runtime-boundaries.ts";
+import { type Change, type ReplicationIdentity, type SnapshotChunk, type SnapshotCommit, type SnapshotStart } from "./protocol.ts";
+import type { ReplicaRouteSlot } from "./route-slot.ts";
+import { IndexedDbOutbox } from "./outbox-storage.ts";
+import { type ReplicaGcOutcome } from "./replica-gc.ts";
+import type { LeadershipFence } from "./leadership.ts";
+import { type ReplicaNoticeListener } from "./notices.ts";
+import { ReplicaLease, type ReplicaDatabaseScope, type ReplicaScope } from "./replica-lifecycle.ts";
+import { type ReplicaRestoreOutcome } from "./replica-integrity.ts";
+export declare const REPLICA_MANIFEST_STORAGE_VERSION: number;
+export declare const REPLICA_DATABASE_VERSION: number;
+export declare const DEFAULT_REPLICA_DATABASE_NAME = "ramose-replicas";
+export { replicaPartitionKey } from "./replica-lifecycle.ts";
+export { ReplicaQuotaExhaustedError, replicaSweepKey, type ReplicaGcOutcome, } from "./replica-gc.ts";
+export type ReplicaRouteObservation = {
+    readonly scope: string;
+    readonly pathKey: string;
+};
+export type ReplicaWriteCounts = {
+    readonly nodes: number;
+    readonly manifests: number;
+    readonly heads: number;
+    readonly staging: number;
+    readonly stagingChunks: number;
+};
+export type RestoredReplica = {
+    readonly db: Db;
+    readonly revision: string;
+    readonly ordinal: number;
+    readonly handles: ReadonlyMap<string, number>;
+    readonly release: () => void;
+};
+export type BoundRestoredReplica = RestoredReplica & {
+    readonly identity: ReplicationIdentity;
+};
+export type ReplicaCacheCandidate = {
+    readonly identity: ReplicationIdentity;
+    readonly revision: string;
+    readonly ordinal: number;
+};
+export type ReplicaOrdinalAcknowledgement = {
+    readonly identity: ReplicationIdentity;
+    readonly revision: string;
+    readonly ordinal: number;
+};
+export type ReplicaCacheCandidateKey = {
+    readonly selector: string;
+    readonly routeSlot: ReplicaRouteSlot;
+};
+export type ReplicaAuthenticatedBinding = {
+    readonly fingerprint: string;
+    readonly identity: ReplicationIdentity;
+    readonly candidateKey?: ReplicaCacheCandidateKey | undefined;
+    readonly route?: (ReplicaRouteObservation & {
+        readonly slot: ReplicaRouteSlot;
+    }) | undefined;
+};
+export type ReplicaInstallOptions = {
+    readonly signal?: AbortSignal;
+    readonly lease?: ReplicaLease | undefined;
+};
+export type ReplicaClearOutcome = {
+    readonly scope: string;
+    readonly generation: number;
+    readonly partitions: number;
+    readonly nodes: number;
+    readonly bindings: number;
+    readonly candidates: number;
+    readonly routeObservations: number;
+    readonly queued: number;
+    readonly clientRefs: number;
+    readonly layers: number;
+};
+export type ReplicaEvictOutcome = {
+    readonly database: string;
+    readonly generation: number;
+    readonly partitions: number;
+    readonly nodes: number;
+    readonly bindings: number;
+    readonly candidates: number;
+};
+export type ReplicaScopeParticipant = {
+    readonly scope: ReplicaScope;
+    readonly database?: ReplicaDatabaseScope | undefined;
+    readonly close: () => Promise<void>;
+};
+export declare class IndexedDbReplicaStorage {
+    readonly name: string;
+    private readonly database;
+    private readonly boundaries;
+    private readonly channel;
+    private readonly clearedScopes;
+    private readonly registry;
+    private readonly registrations;
+    private readonly invalidations;
+    private readonly meter;
+    private constructor();
+    static open(name?: string, boundaries?: RuntimeBoundaries): Promise<IndexedDbReplicaStorage>;
+    notices(listener: ReplicaNoticeListener): () => void;
+    announces(): boolean;
+    private announce;
+    onInvalidated(listener: () => void): () => void;
+    private invalidated;
+    close(): void;
+    writeCounts(): ReplicaWriteCounts;
+    resetWriteCounts(): void;
+    private register;
+    outbox(leader?: () => LeadershipFence | undefined): IndexedDbOutbox;
+    claimLeadership(key: string, scope: ReplicaScope): Promise<number>;
+    admission(): Promise<number>;
+    lease(): Promise<ReplicaLease>;
+    confirmLease(lease: ReplicaLease, identity: ReplicationIdentity): Promise<void>;
+    leaseFor(identity: ReplicationIdentity): Promise<ReplicaLease>;
+    pinDatabase(scope: ReplicaDatabaseScope): () => void;
+    retainRoots(identity: ReplicationIdentity, roots: Roots): () => void;
+    private markMaterializing;
+    enroll(participant: ReplicaScopeParticipant): () => void;
+    private assertScopeLive;
+    private closeMatching;
+    clearScope(scope: ReplicaScope): Promise<ReplicaClearOutcome>;
+    private stageClear;
+    evictDatabase(scope: ReplicaDatabaseScope): Promise<ReplicaEvictOutcome>;
+    private stageEviction;
+    collectGarbage(options?: {
+        readonly scope?: ReplicaScope | undefined;
+    }): Promise<ReplicaGcOutcome>;
+    private surveyPartitions;
+    private surveyReferences;
+    private surveyManifest;
+    private liveNodeHashes;
+    private retainedRoots;
+    private sweepPartition;
+    private committed;
+    private priorManifest;
+    private quarantinePartition;
+    private validated;
+    private validatedOnce;
+    private confirmNoSweep;
+    private sweepGeneration;
+    private confirmGuardingGenerations;
+    boundIdentity(fingerprint: string): Promise<ReplicationIdentity | undefined>;
+    unbindCredential(fingerprint: string): Promise<void>;
+    restoreOutcome(identity: ReplicationIdentity, attributes: readonly AttributeSpec[], readCompatibilityHash: ReadCompatibilityHash): Promise<ReplicaRestoreOutcome<RestoredReplica>>;
+    restore(identity: ReplicationIdentity, attributes: readonly AttributeSpec[], readCompatibilityHash: ReadCompatibilityHash): Promise<RestoredReplica | undefined>;
+    selectCacheCandidate(key: ReplicaCacheCandidateKey, readCompatibilityHash: ReadCompatibilityHash): Promise<ReplicaCacheCandidate | undefined>;
+    restoreCandidateOutcome(candidate: ReplicaCacheCandidate, attributes: readonly AttributeSpec[], readCompatibilityHash: ReadCompatibilityHash): Promise<ReplicaRestoreOutcome<BoundRestoredReplica>>;
+    restoreConfirmedCandidate(candidate: ReplicaCacheCandidate, attributes: readonly AttributeSpec[], readCompatibilityHash: ReadCompatibilityHash): Promise<BoundRestoredReplica | undefined>;
+    observedRouteSlot(observation: ReplicaRouteObservation): Promise<ReplicaRouteSlot | undefined>;
+    bindAuthenticated(binding: ReplicaAuthenticatedBinding, options?: ReplicaInstallOptions): Promise<void>;
+    private stageReplacedPrincipals;
+    private advanceBarrier;
+    bindCredential(fingerprint: string, identity: ReplicationIdentity, options?: ReplicaInstallOptions): Promise<void>;
+    restoreBoundOutcome(fingerprint: string, attributes: readonly AttributeSpec[], readCompatibilityHash: ReadCompatibilityHash): Promise<ReplicaRestoreOutcome<BoundRestoredReplica>>;
+    restoreBound(fingerprint: string, attributes: readonly AttributeSpec[], readCompatibilityHash: ReadCompatibilityHash): Promise<BoundRestoredReplica | undefined>;
+    resetStaging(identity: ReplicationIdentity, options?: ReplicaInstallOptions): Promise<void>;
+    startSnapshot(frame: SnapshotStart, options?: ReplicaInstallOptions): Promise<void>;
+    stageSnapshotChunk(frame: SnapshotChunk, options?: ReplicaInstallOptions): Promise<void>;
+    private stagedState;
+    private installWithQuotaRecovery;
+    commitSnapshot(frame: SnapshotCommit, attributes: readonly AttributeSpec[], options?: ReplicaInstallOptions): Promise<RestoredReplica | undefined>;
+    private commitSnapshotOnce;
+    private installSnapshot;
+    acknowledgeOrdinal(acknowledgement: ReplicaOrdinalAcknowledgement, options?: ReplicaInstallOptions): Promise<number | undefined>;
+    applyChange(frame: Change, options?: ReplicaInstallOptions): Promise<RestoredReplica | undefined>;
+    private applyChangeOnce;
+    private installChange;
+}
+//# sourceMappingURL=indexeddb.d.ts.map

package/dist/internal/replication/indexeddb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.d.ts","sourceRoot":"","sources":["../../../src/internal/replication/indexeddb.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAI5E,OAAO,EAAE,EAAE,EAAE,KAAK,KAAK,EAAW,MAAM,eAAe,CAAC;AAExD,OAAO,EAAkB,KAAK,aAAa,EAAU,MAAM,mBAAmB,CAAC;AAU/E,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,KAAK,MAAM,EAEX,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,cAAc,EAEnB,KAAK,aAAa,EACnB,MAAM,eAAe,CAAC;AAQvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAUxD,OAAO,EAGL,eAAe,EAEhB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAUL,KAAK,gBAAgB,EACtB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAOL,KAAK,qBAAqB,EAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EAkBL,YAAY,EAGZ,KAAK,oBAAoB,EACzB,KAAK,YAAY,EAClB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAkBL,KAAK,qBAAqB,EAC3B,MAAM,wBAAwB,CAAC;AAchC,eAAO,MAAM,gCAAgC,QACN,CAAC;AAKxC,eAAO,MAAM,wBAAwB,QAA+B,CAAC;AAqCrE,eAAO,MAAM,6BAA6B,oBAAoB,CAAC;AAE/D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EACL,0BAA0B,EAC1B,eAAe,EACf,KAAK,gBAAgB,GACtB,MAAM,iBAAiB,CAAC;AA8DzB,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC,CAAC;AAoDF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;IAChB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC;CAC9B,CAAC;AAOF,MAAM,MAAM,oBAAoB,GAAG,eAAe,GAAG;IACnD,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,YAAY,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,uBAAuB,GAAG;QAC1C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;KACjC,CAAC,GAAG,SAAS,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC,CAAC;AA8fF,qBAAa,uBAAuB;IAQhC,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAV1B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAoB;IAE1C,OAAO,eAON;IAED,OAAa,IAAI,CACf,IAAI,SAAgC,EACpC,UAAU,GAAE,iBAA0C,GACrD,OAAO,CAAC,uBAAuB,CAAC,CA0ElC;IAED,OAAO,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,IAAI,CAEnD;IAED,SAAS,IAAI,OAAO,CAEnB;IAED,OAAO,CAAC,QAAQ;IAIhB,aAAa,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAK9C;IAED,OAAO,CAAC,WAAW;IAInB,KAAK,IAAI,IAAI,CAIZ;IAED,WAAW,IAAI,kBAAkB,CAEhC;IAED,gBAAgB,IAAI,IAAI,CAEvB;IAED,OAAO,CAAC,QAAQ;IAYhB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,eAAe,GAAG,SAAS,GAAG,eAAe,CAQlE;IAEK,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBvE;IAEK,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC,CAOjC;IAEK,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC,CAEnC;IAEK,YAAY,CAChB,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,IAAI,CAAC,CAKf;IAEK,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAInE;IAED,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,IAAI,CASnD;IAED,WAAW,CAAC,QAAQ,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,GAAG,MAAM,IAAI,CAWnE;IAED,OAAO,CAAC,iBAAiB;IAazB,MAAM,CAAC,WAAW,EAAE,uBAAuB,GAAG,MAAM,IAAI,CAKvD;IAED,OAAO,CAAC,eAAe;YAMT,aAAa;IAUrB,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsBlE;YAEa,UAAU;IAiFlB,aAAa,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA0B7E;YAEa,aAAa;IAkErB,cAAc,CAClB,OAAO,GAAE;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,GAAG,SAAS,CAAA;KAAO,GAC1D,OAAO,CAAC,gBAAgB,CAAC,CA4C3B;YAEa,gBAAgB;YAsChB,gBAAgB;YAUhB,cAAc;YAYd,cAAc;IA2B5B,OAAO,CAAC,aAAa;YAQP,cAAc;YAqFd,SAAS;YAST,aAAa;YAMb,mBAAmB;YAoDnB,SAAS;YA8BT,aAAa;YAoDb,cAAc;YAed,eAAe;YASf,0BAA0B;IAgBlC,aAAa,CACjB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,mBAAmB,GAAG,SAAS,CAAC,CAO1C;IAEK,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIzD;IAEK,cAAc,CAClB,QAAQ,EAAE,mBAAmB,EAC7B,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,qBAAqB,EAAE,qBAAqB,GAC3C,OAAO,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC,CAsBjD;IAEK,OAAO,CACX,QAAQ,EAAE,mBAAmB,EAC7B,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,qBAAqB,EAAE,qBAAqB,GAC3C,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAItC;IAEK,oBAAoB,CACxB,GAAG,EAAE,wBAAwB,EAC7B,qBAAqB,EAAE,qBAAqB,GAC3C,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAmC5C;IAEK,uBAAuB,CAC3B,SAAS,EAAE,qBAAqB,EAChC,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,qBAAqB,EAAE,qBAAqB,GAC3C,OAAO,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC,CA2BtD;IAEK,yBAAyB,CAC7B,SAAS,EAAE,qBAAqB,EAChC,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,qBAAqB,EAAE,qBAAqB,GAC3C,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAI3C;IAEK,iBAAiB,CACrB,WAAW,EAAE,uBAAuB,GACnC,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAOvC;IAEK,iBAAiB,CACrB,OAAO,EAAE,2BAA2B,EACpC,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CAqEf;YAEa,uBAAuB;YAqCvB,cAAc;IAmBtB,cAAc,CAClB,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CAEf;IAEK,mBAAmB,CACvB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,qBAAqB,EAAE,qBAAqB,GAC3C,OAAO,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC,CAsCtD;IAEK,YAAY,CAChB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,qBAAqB,EAAE,qBAAqB,GAC3C,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAI3C;IAEK,YAAY,CAChB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CAkBf;IAEK,aAAa,CACjB,KAAK,EAAE,aAAa,EACpB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CAwCf;IAEK,kBAAkB,CACtB,KAAK,EAAE,aAAa,EACpB,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,IAAI,CAAC,CA8Cf;YAEa,WAAW;YAqCX,wBAAwB;IA0BhC,cAAc,CAClB,KAAK,EAAE,cAAc,EACrB,UAAU,EAAE,SAAS,aAAa,EAAE,EACpC,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAWtC;YAEa,kBAAkB;YAiClB,eAAe;IAgFvB,kBAAkB,CACtB,eAAe,EAAE,6BAA6B,EAC9C,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAyD7B;IAEK,WAAW,CACf,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAWtC;YAEa,eAAe;YAgDf,aAAa;CAmE5B"}