workerstack 0.1.0-beta.0

package/dist/realtime/filter.d.ts

@@ -0,0 +1,42 @@
+import type { AccessUser, OperationRule, ResolvedAccess, ResolvedTableAccess } from '../access.js';
+import type { RealtimeChange } from './publisher.js';
+type GetSession = () => Promise<{
+    user: AccessUser | null;
+    activeOrganizationId: string | null;
+}>;
+export interface FilterRealtimeChangesOptions {
+    subscriptions: readonly string[];
+    access: ResolvedAccess;
+    request: Request;
+    getSession: GetSession;
+}
+export interface FilterTableChangesOptions {
+    /** Events arrive under this name — the schema key they were published with. */
+    tableName: string;
+    entry: ResolvedTableAccess;
+    /**
+     * The operation right this stream reads under: `get` for a subscription to
+     * rows, `list` for a live view of a query.
+     */
+    rule: OperationRule;
+    request: Request;
+    getSession: GetSession;
+}
+/**
+ * Whether one change may reach this subscriber: the given right plus the read
+ * scope of the row, evaluated against the caller's session. The session
+ * resolves at most once per stream.
+ */
+export declare function createChangeGuard(entry: ResolvedTableAccess, options: {
+    rule: OperationRule;
+    request: Request;
+    getSession: GetSession;
+}): (change: RealtimeChange) => Promise<boolean>;
+export declare function filterRealtimeChanges(source: AsyncIterable<RealtimeChange>, options: FilterRealtimeChangesOptions): AsyncGenerator<RealtimeChange, void, void>;
+/**
+ * The same stream narrowed to one table with its access entry known up front —
+ * what a live view (`GET /{table}:live`) consumes.
+ */
+export declare function filterTableChanges(source: AsyncIterable<RealtimeChange>, options: FilterTableChangesOptions): AsyncGenerator<RealtimeChange, void, void>;
+export {};
+//# sourceMappingURL=filter.d.ts.map

package/dist/realtime/filter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.d.ts","sourceRoot":"","sources":["../../src/realtime/filter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,UAAU,EACV,aAAa,EACb,cAAc,EACd,mBAAmB,EACpB,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAIjD,KAAK,UAAU,GAAG,MAAM,OAAO,CAAC;IAC9B,IAAI,EAAE,UAAU,GAAG,IAAI,CAAA;IACvB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAA;CACpC,CAAC,CAAA;AAEF,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,SAAS,MAAM,EAAE,CAAA;IAChC,MAAM,EAAE,cAAc,CAAA;IACtB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,+EAA+E;IAC/E,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,mBAAmB,CAAA;IAC1B;;;OAGG;IACH,IAAI,EAAE,aAAa,CAAA;IACnB,OAAO,EAAE,OAAO,CAAA;IAChB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,mBAAmB,EAC1B,OAAO,EAAE;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GACzE,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CA+B9C;AAcD,wBAAuB,qBAAqB,CAC1C,MAAM,EAAE,aAAa,CAAC,cAAc,CAAC,EACrC,OAAO,EAAE,4BAA4B,GACpC,cAAc,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAiC5C;AAED;;;GAGG;AACH,wBAAuB,kBAAkB,CACvC,MAAM,EAAE,aAAa,CAAC,cAAc,CAAC,EACrC,OAAO,EAAE,yBAAyB,GACjC,cAAc,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,CAAC,CAO5C"}

package/dist/realtime/filter.js

@@ -0,0 +1,86 @@
+import { getEventMeta, withEventMeta } from '@orpc/server';
+import { checkAccess, rowMatchesScope, tableEntryForName } from '../access.js';
+/**
+ * Whether one change may reach this subscriber: the given right plus the read
+ * scope of the row, evaluated against the caller's session. The session
+ * resolves at most once per stream.
+ */
+export function createChangeGuard(entry, options) {
+    let sessionPromise;
+    const getSession = () => (sessionPromise ??= options.getSession());
+    return async (change) => {
+        if (!entry.enabled || options.rule === 'deny')
+            return false;
+        const needsSession = options.rule !== 'public' || entry.readScope !== undefined;
+        const session = needsSession
+            ? await getSession()
+            : { user: null, activeOrganizationId: null };
+        const context = {
+            request: options.request,
+            user: session.user,
+            row: change.record,
+            session: { activeOrganizationId: session.activeOrganizationId },
+        };
+        if (!(await checkAccess(options.rule, context, entry.ownerColumn)).allowed) {
+            return false;
+        }
+        if (entry.readScope &&
+            !rowMatchesScope(change.record, entry.readScope(context))) {
+            return false;
+        }
+        return true;
+    };
+}
+/** Preserve publisher event metadata (ids) across the projection. */
+function project(change) {
+    const projected = {
+        table: change.table,
+        action: change.action,
+        record: change.record,
+        ...(change.operationId ? { operationId: change.operationId } : {}),
+    };
+    const meta = getEventMeta(change);
+    return meta ? withEventMeta(projected, meta) : projected;
+}
+export async function* filterRealtimeChanges(source, options) {
+    const subscriptions = new Set(options.subscriptions);
+    // One guard — and therefore one cached session — per table entry.
+    const guards = new Map();
+    for await (const change of source) {
+        // Events name tables by schema key; the SQL-name lookup stays as a fallback
+        // for publishers outside the CRUD path that only know the physical name.
+        const entry = options.access.get(change.table) ??
+            tableEntryForName(options.access, change.table);
+        if (!entry?.enabled)
+            continue;
+        const recordId = change.record.id;
+        if (!subscriptions.has(change.table) &&
+            (recordId == null ||
+                !subscriptions.has(`${change.table}/${String(recordId)}`))) {
+            continue;
+        }
+        let guard = guards.get(entry);
+        if (!guard) {
+            guard = createChangeGuard(entry, { ...options, rule: entry.get });
+            guards.set(entry, guard);
+        }
+        if (!(await guard(change)))
+            continue;
+        yield project(change);
+    }
+}
+/**
+ * The same stream narrowed to one table with its access entry known up front —
+ * what a live view (`GET /{table}:live`) consumes.
+ */
+export async function* filterTableChanges(source, options) {
+    const guard = createChangeGuard(options.entry, options);
+    for await (const change of source) {
+        if (change.table !== options.tableName)
+            continue;
+        if (!(await guard(change)))
+            continue;
+        yield project(change);
+    }
+}
+//# sourceMappingURL=filter.js.map

package/dist/realtime/filter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filter.js","sourceRoot":"","sources":["../../src/realtime/filter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAU1D,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AA2B3E;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA0B,EAC1B,OAA0E;IAE1E,IAAI,cAAkD,CAAA;IACtD,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC,cAAc,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IAElE,OAAO,KAAK,EAAE,MAAM,EAAE,EAAE;QACtB,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,KAAK,CAAA;QAE3D,MAAM,YAAY,GAChB,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAA;QAC5D,MAAM,OAAO,GAAG,YAAY;YAC1B,CAAC,CAAC,MAAM,UAAU,EAAE;YACpB,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAA;QAC9C,MAAM,OAAO,GAAG;YACd,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,GAAG,EAAE,MAAM,CAAC,MAAM;YAClB,OAAO,EAAE,EAAE,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,EAAE;SAChE,CAAA;QACD,IACE,CAAC,CAAC,MAAM,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EACtE,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,IACE,KAAK,CAAC,SAAS;YACf,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,EACzD,CAAC;YACD,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;AACH,CAAC;AAED,qEAAqE;AACrE,SAAS,OAAO,CAAC,MAAsB;IACrC,MAAM,SAAS,GAAmB;QAChC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAA;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;IACjC,OAAO,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAC1D,CAAC;AAED,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,qBAAqB,CAC1C,MAAqC,EACrC,OAAqC;IAErC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IACpD,kEAAkE;IAClE,MAAM,MAAM,GAAG,IAAI,GAAG,EAGnB,CAAA;IAEH,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAClC,4EAA4E;QAC5E,yEAAyE;QACzE,MAAM,KAAK,GACT,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAChC,iBAAiB,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAA;QACjD,IAAI,CAAC,KAAK,EAAE,OAAO;YAAE,SAAQ;QAE7B,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAA;QACjC,IACE,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;YAChC,CAAC,QAAQ,IAAI,IAAI;gBACf,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAC5D,CAAC;YACD,SAAQ;QACV,CAAC;QAED,IAAI,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;YACjE,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC1B,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YAAE,SAAQ;QACpC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,kBAAkB,CACvC,MAAqC,EACrC,OAAkC;IAElC,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;IACvD,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,MAAM,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,SAAS;YAAE,SAAQ;QAChD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;YAAE,SAAQ;QACpC,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IACvB,CAAC;AACH,CAAC","sourcesContent":["import { getEventMeta, withEventMeta } from '@orpc/server'\n\nimport type {\n  AccessUser,\n  OperationRule,\n  ResolvedAccess,\n  ResolvedTableAccess,\n} from '../access'\nimport type { RealtimeChange } from './publisher'\n\nimport { checkAccess, rowMatchesScope, tableEntryForName } from '../access'\n\ntype GetSession = () => Promise<{\n  user: AccessUser | null\n  activeOrganizationId: string | null\n}>\n\nexport interface FilterRealtimeChangesOptions {\n  subscriptions: readonly string[]\n  access: ResolvedAccess\n  request: Request\n  getSession: GetSession\n}\n\nexport interface FilterTableChangesOptions {\n  /** Events arrive under this name — the schema key they were published with. */\n  tableName: string\n  entry: ResolvedTableAccess\n  /**\n   * The operation right this stream reads under: `get` for a subscription to\n   * rows, `list` for a live view of a query.\n   */\n  rule: OperationRule\n  request: Request\n  getSession: GetSession\n}\n\n/**\n * Whether one change may reach this subscriber: the given right plus the read\n * scope of the row, evaluated against the caller's session. The session\n * resolves at most once per stream.\n */\nexport function createChangeGuard(\n  entry: ResolvedTableAccess,\n  options: { rule: OperationRule; request: Request; getSession: GetSession },\n): (change: RealtimeChange) => Promise<boolean> {\n  let sessionPromise: ReturnType<GetSession> | undefined\n  const getSession = () => (sessionPromise ??= options.getSession())\n\n  return async (change) => {\n    if (!entry.enabled || options.rule === 'deny') return false\n\n    const needsSession =\n      options.rule !== 'public' || entry.readScope !== undefined\n    const session = needsSession\n      ? await getSession()\n      : { user: null, activeOrganizationId: null }\n    const context = {\n      request: options.request,\n      user: session.user,\n      row: change.record,\n      session: { activeOrganizationId: session.activeOrganizationId },\n    }\n    if (\n      !(await checkAccess(options.rule, context, entry.ownerColumn)).allowed\n    ) {\n      return false\n    }\n    if (\n      entry.readScope &&\n      !rowMatchesScope(change.record, entry.readScope(context))\n    ) {\n      return false\n    }\n    return true\n  }\n}\n\n/** Preserve publisher event metadata (ids) across the projection. */\nfunction project(change: RealtimeChange): RealtimeChange {\n  const projected: RealtimeChange = {\n    table: change.table,\n    action: change.action,\n    record: change.record,\n    ...(change.operationId ? { operationId: change.operationId } : {}),\n  }\n  const meta = getEventMeta(change)\n  return meta ? withEventMeta(projected, meta) : projected\n}\n\nexport async function* filterRealtimeChanges(\n  source: AsyncIterable<RealtimeChange>,\n  options: FilterRealtimeChangesOptions,\n): AsyncGenerator<RealtimeChange, void, void> {\n  const subscriptions = new Set(options.subscriptions)\n  // One guard — and therefore one cached session — per table entry.\n  const guards = new Map<\n    ResolvedTableAccess,\n    ReturnType<typeof createChangeGuard>\n  >()\n\n  for await (const change of source) {\n    // Events name tables by schema key; the SQL-name lookup stays as a fallback\n    // for publishers outside the CRUD path that only know the physical name.\n    const entry =\n      options.access.get(change.table) ??\n      tableEntryForName(options.access, change.table)\n    if (!entry?.enabled) continue\n\n    const recordId = change.record.id\n    if (\n      !subscriptions.has(change.table) &&\n      (recordId == null ||\n        !subscriptions.has(`${change.table}/${String(recordId)}`))\n    ) {\n      continue\n    }\n\n    let guard = guards.get(entry)\n    if (!guard) {\n      guard = createChangeGuard(entry, { ...options, rule: entry.get })\n      guards.set(entry, guard)\n    }\n    if (!(await guard(change))) continue\n    yield project(change)\n  }\n}\n\n/**\n * The same stream narrowed to one table with its access entry known up front —\n * what a live view (`GET /{table}:live`) consumes.\n */\nexport async function* filterTableChanges(\n  source: AsyncIterable<RealtimeChange>,\n  options: FilterTableChangesOptions,\n): AsyncGenerator<RealtimeChange, void, void> {\n  const guard = createChangeGuard(options.entry, options)\n  for await (const change of source) {\n    if (change.table !== options.tableName) continue\n    if (!(await guard(change))) continue\n    yield project(change)\n  }\n}\n"]}

package/dist/realtime/heartbeat.d.ts

@@ -0,0 +1,20 @@
+export declare const REALTIME_HEARTBEAT_INTERVAL_MS = 5000;
+/**
+ * A transport-only event. `intervalMs` is the cadence it is sent at, so a
+ * client can size its own dead-stream timeout from the server's real setting
+ * instead of hardcoding a constant that drifts from it.
+ */
+export type RealtimeHeartbeat = {
+    type: 'heartbeat';
+    intervalMs: number;
+};
+/**
+ * Emits a transport-only event whenever the source has been idle for an
+ * interval. Heartbeats are deliberately not published, persisted, or assigned
+ * event IDs, so they do not affect replay and resume semantics.
+ */
+export declare function withRealtimeHeartbeat<T>(source: AsyncIterable<T>, options: {
+    intervalMs?: number;
+    signal?: AbortSignal;
+}): AsyncGenerator<T | RealtimeHeartbeat, void, void>;
+//# sourceMappingURL=heartbeat.d.ts.map

package/dist/realtime/heartbeat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat.d.ts","sourceRoot":"","sources":["../../src/realtime/heartbeat.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,8BAA8B,OAAQ,CAAA;AAEnD;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAA;AAOzE;;;;GAIG;AACH,wBAAuB,qBAAqB,CAAC,CAAC,EAC5C,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,EACxB,OAAO,EAAE;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE,GACrD,cAAc,CAAC,CAAC,GAAG,iBAAiB,EAAE,IAAI,EAAE,IAAI,CAAC,CA8DnD"}

package/dist/realtime/heartbeat.js

@@ -0,0 +1,64 @@
+export const REALTIME_HEARTBEAT_INTERVAL_MS = 5_000;
+/**
+ * Emits a transport-only event whenever the source has been idle for an
+ * interval. Heartbeats are deliberately not published, persisted, or assigned
+ * event IDs, so they do not affect replay and resume semantics.
+ */
+export async function* withRealtimeHeartbeat(source, options) {
+    const intervalMs = Math.max(1, options.intervalMs ?? REALTIME_HEARTBEAT_INTERVAL_MS);
+    const iterator = source[Symbol.asyncIterator]();
+    let state = { status: 'pending' };
+    let wake;
+    const getState = () => state;
+    const requestNext = () => {
+        state = { status: 'pending' };
+        void iterator.next().then((result) => {
+            state = { status: 'ready', result };
+            wake?.();
+        }, (error) => {
+            state = { status: 'error', error };
+            wake?.();
+        });
+    };
+    requestNext();
+    try {
+        while (!options.signal?.aborted) {
+            let current = getState();
+            if (current.status === 'pending') {
+                await new Promise((resolve) => {
+                    let settled = false;
+                    const finish = () => {
+                        if (settled)
+                            return;
+                        settled = true;
+                        clearTimeout(timer);
+                        options.signal?.removeEventListener('abort', finish);
+                        resolve();
+                    };
+                    const timer = setTimeout(finish, intervalMs);
+                    options.signal?.addEventListener('abort', finish, { once: true });
+                    wake = finish;
+                });
+                wake = undefined;
+                if (options.signal?.aborted)
+                    break;
+                current = getState();
+                if (current.status === 'pending') {
+                    yield { type: 'heartbeat', intervalMs };
+                    continue;
+                }
+            }
+            if (current.status === 'error')
+                throw current.error;
+            if (current.result.done)
+                break;
+            yield current.result.value;
+            requestNext();
+        }
+    }
+    finally {
+        wake = undefined;
+        await iterator.return?.();
+    }
+}
+//# sourceMappingURL=heartbeat.js.map

package/dist/realtime/heartbeat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heartbeat.js","sourceRoot":"","sources":["../../src/realtime/heartbeat.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAA;AAcnD;;;;GAIG;AACH,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,qBAAqB,CAC1C,MAAwB,EACxB,OAAsD;IAEtD,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CACzB,CAAC,EACD,OAAO,CAAC,UAAU,IAAI,8BAA8B,CACrD,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAA;IAC/C,IAAI,KAAK,GAAmB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;IACjD,IAAI,IAA8B,CAAA;IAClC,MAAM,QAAQ,GAAG,GAAmB,EAAE,CAAC,KAAK,CAAA;IAE5C,MAAM,WAAW,GAAG,GAAG,EAAE;QACvB,KAAK,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAC7B,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,CACvB,CAAC,MAAM,EAAE,EAAE;YACT,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;YACnC,IAAI,EAAE,EAAE,CAAA;QACV,CAAC,EACD,CAAC,KAAc,EAAE,EAAE;YACjB,KAAK,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;YAClC,IAAI,EAAE,EAAE,CAAA;QACV,CAAC,CACF,CAAA;IACH,CAAC,CAAA;IAED,WAAW,EAAE,CAAA;IACb,IAAI,CAAC;QACH,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAChC,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAA;YACxB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;oBAClC,IAAI,OAAO,GAAG,KAAK,CAAA;oBACnB,MAAM,MAAM,GAAG,GAAG,EAAE;wBAClB,IAAI,OAAO;4BAAE,OAAM;wBACnB,OAAO,GAAG,IAAI,CAAA;wBACd,YAAY,CAAC,KAAK,CAAC,CAAA;wBACnB,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;wBACpD,OAAO,EAAE,CAAA;oBACX,CAAC,CAAA;oBACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;oBAC5C,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;oBACjE,IAAI,GAAG,MAAM,CAAA;gBACf,CAAC,CAAC,CAAA;gBACF,IAAI,GAAG,SAAS,CAAA;gBAEhB,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;oBAAE,MAAK;gBAClC,OAAO,GAAG,QAAQ,EAAE,CAAA;gBACpB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBACjC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,CAAA;oBACvC,SAAQ;gBACV,CAAC;YACH,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,CAAA;YACnD,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI;gBAAE,MAAK;YAE9B,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAA;YAC1B,WAAW,EAAE,CAAA;QACf,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,GAAG,SAAS,CAAA;QAChB,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC","sourcesContent":["export const REALTIME_HEARTBEAT_INTERVAL_MS = 5_000\n\n/**\n * A transport-only event. `intervalMs` is the cadence it is sent at, so a\n * client can size its own dead-stream timeout from the server's real setting\n * instead of hardcoding a constant that drifts from it.\n */\nexport type RealtimeHeartbeat = { type: 'heartbeat'; intervalMs: number }\n\ntype SourceState<T> =\n  | { status: 'pending' }\n  | { status: 'ready'; result: IteratorResult<T> }\n  | { status: 'error'; error: unknown }\n\n/**\n * Emits a transport-only event whenever the source has been idle for an\n * interval. Heartbeats are deliberately not published, persisted, or assigned\n * event IDs, so they do not affect replay and resume semantics.\n */\nexport async function* withRealtimeHeartbeat<T>(\n  source: AsyncIterable<T>,\n  options: { intervalMs?: number; signal?: AbortSignal },\n): AsyncGenerator<T | RealtimeHeartbeat, void, void> {\n  const intervalMs = Math.max(\n    1,\n    options.intervalMs ?? REALTIME_HEARTBEAT_INTERVAL_MS,\n  )\n  const iterator = source[Symbol.asyncIterator]()\n  let state: SourceState<T> = { status: 'pending' }\n  let wake: (() => void) | undefined\n  const getState = (): SourceState<T> => state\n\n  const requestNext = () => {\n    state = { status: 'pending' }\n    void iterator.next().then(\n      (result) => {\n        state = { status: 'ready', result }\n        wake?.()\n      },\n      (error: unknown) => {\n        state = { status: 'error', error }\n        wake?.()\n      },\n    )\n  }\n\n  requestNext()\n  try {\n    while (!options.signal?.aborted) {\n      let current = getState()\n      if (current.status === 'pending') {\n        await new Promise<void>((resolve) => {\n          let settled = false\n          const finish = () => {\n            if (settled) return\n            settled = true\n            clearTimeout(timer)\n            options.signal?.removeEventListener('abort', finish)\n            resolve()\n          }\n          const timer = setTimeout(finish, intervalMs)\n          options.signal?.addEventListener('abort', finish, { once: true })\n          wake = finish\n        })\n        wake = undefined\n\n        if (options.signal?.aborted) break\n        current = getState()\n        if (current.status === 'pending') {\n          yield { type: 'heartbeat', intervalMs }\n          continue\n        }\n      }\n\n      if (current.status === 'error') throw current.error\n      if (current.result.done) break\n\n      yield current.result.value\n      requestNext()\n    }\n  } finally {\n    wake = undefined\n    await iterator.return?.()\n  }\n}\n"]}

package/dist/realtime/publisher.d.ts

@@ -0,0 +1,19 @@
+import type { Publisher } from '@orpc/publisher';
+export type RealtimeAction = 'create' | 'update' | 'delete';
+export interface RealtimeChange {
+    table: string;
+    action: RealtimeAction;
+    record: Record<string, unknown>;
+    /** Correlates this confirmed write with the client operation that caused it. */
+    operationId?: string;
+}
+export interface RealtimeEvents extends Record<string, object> {
+    change: RealtimeChange;
+}
+export type RealtimePublisher = Publisher<RealtimeEvents>;
+export interface RealtimePublisherOptions {
+    maxBufferedEvents?: number;
+    resumeSeconds?: number;
+}
+export declare function createMemoryRealtimePublisher(options?: RealtimePublisherOptions): RealtimePublisher;
+//# sourceMappingURL=publisher.d.ts.map

package/dist/realtime/publisher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publisher.d.ts","sourceRoot":"","sources":["../../src/realtime/publisher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAIhD,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAE3D,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,cAAc,CAAA;IACtB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,cAAe,SAAQ,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAC5D,MAAM,EAAE,cAAc,CAAA;CACvB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,CAAC,cAAc,CAAC,CAAA;AAEzD,MAAM,WAAW,wBAAwB;IACvC,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAED,wBAAgB,6BAA6B,CAC3C,OAAO,GAAE,wBAA6B,GACrC,iBAAiB,CAKnB"}

package/dist/realtime/publisher.js

@@ -0,0 +1,8 @@
+import { MemoryPublisher } from '@orpc/publisher/memory';
+export function createMemoryRealtimePublisher(options = {}) {
+    return new MemoryPublisher({
+        maxBufferedEvents: options.maxBufferedEvents,
+        resume: { enabled: true, seconds: options.resumeSeconds ?? 300 },
+    });
+}
+//# sourceMappingURL=publisher.js.map

package/dist/realtime/publisher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publisher.js","sourceRoot":"","sources":["../../src/realtime/publisher.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAuBxD,MAAM,UAAU,6BAA6B,CAC3C,UAAoC,EAAE;IAEtC,OAAO,IAAI,eAAe,CAAiB;QACzC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,IAAI,GAAG,EAAE;KACjE,CAAC,CAAA;AACJ,CAAC","sourcesContent":["import type { Publisher } from '@orpc/publisher'\n\nimport { MemoryPublisher } from '@orpc/publisher/memory'\n\nexport type RealtimeAction = 'create' | 'update' | 'delete'\n\nexport interface RealtimeChange {\n  table: string\n  action: RealtimeAction\n  record: Record<string, unknown>\n  /** Correlates this confirmed write with the client operation that caused it. */\n  operationId?: string\n}\n\nexport interface RealtimeEvents extends Record<string, object> {\n  change: RealtimeChange\n}\n\nexport type RealtimePublisher = Publisher<RealtimeEvents>\n\nexport interface RealtimePublisherOptions {\n  maxBufferedEvents?: number\n  resumeSeconds?: number\n}\n\nexport function createMemoryRealtimePublisher(\n  options: RealtimePublisherOptions = {},\n): RealtimePublisher {\n  return new MemoryPublisher<RealtimeEvents>({\n    maxBufferedEvents: options.maxBufferedEvents,\n    resume: { enabled: true, seconds: options.resumeSeconds ?? 300 },\n  })\n}\n"]}

package/dist/runtime.d.ts

@@ -0,0 +1,141 @@
+import type { AnyRouter as AnyORPCRouter } from '@orpc/server';
+import type { Auth } from 'better-auth';
+import type { AuthSessionResolver, SessionUserConfig } from './access.js';
+import type { TableAccessInput } from './access.js';
+import type { RealtimeApiRouter } from './api/realtime-router.js';
+import type { CrudApiRouterFor, MergeApiRouterTypes, UnifiedApiRouter } from './api/types.js';
+import type { RuntimeTestingHandle } from './backend-internals.js';
+import type { DatabaseConnection } from './database/adapter.js';
+import type { DbFor } from './db.js';
+import type { WorkerstackJobsBuilder, JobsDefs, JobsFacade } from './jobs/index.js';
+import type { MessagingConfig, MessagingFacadesFor } from './messaging/index.js';
+import type { MessagingAdapter } from './messaging/runtime.js';
+import type { ResolvedStorageBuckets, StorageConfigInput } from './storage/buckets.js';
+import type { StorageAdapter } from './storage/index.js';
+import { type WorkerstackAuth } from './auth.js';
+import { type BetterAuthConfig, type WorkerstackConfig } from './config.js';
+import { type EnvConfigInput, type ValidatedEnv } from './env.js';
+import { type LifecycleStatus } from './lifecycle.js';
+import { type WorkerstackLogger } from './logging.js';
+import { type Platform } from './platform.js';
+import { type RealtimeFacade } from './realtime/facade.js';
+/** Base Better Auth contract used by framework internals and API context. */
+export type AuthInstance = Auth;
+export type RuntimeOverrides = {
+    database?: DatabaseConnection;
+    resolvedStorage?: ResolvedStorageBuckets;
+    messagingAdapters?: Record<string, MessagingAdapter>;
+    authResolver?: AuthSessionResolver;
+    logger?: WorkerstackLogger;
+    /** Host services; see src/platform.ts. */
+    platform?: Partial<Platform>;
+    /** Private callback used by backend.test(); never exposed on the app. */
+    captureTestingHandle?: (handle: RuntimeTestingHandle) => void;
+};
+/**
+ * Public storage facade exposed as `app.storage`. Object-level operations live
+ * on the per-bucket adapters; this surface offers the app-wide deletes that
+ * must also clean the file-meta row.
+ */
+export interface StorageFacade {
+    /** Delete a file row and purge all underlying storage derivatives. */
+    delete(fileId: string): Promise<void>;
+    /** Low-level access to the underlying storage adapter for a bucket. */
+    bucket(name: string): StorageAdapter | undefined;
+    /**
+     * Reap stale `pending` uploads older than `olderThanMs` (default 30m). Runs
+     * only when explicitly invoked by the host or local scheduler. Returns
+     * the count reaped.
+     */
+    sweep(olderThanMs?: number): Promise<number>;
+    /**
+     * Get a public or presigned download URL for a file key.
+     * Returns a presigned S3 URL when S3 is configured, or local proxy route `/api/files/...` in development.
+     */
+    getUrl(key: string, opts?: {
+        bucket?: string;
+        expiresIn?: number;
+    }): Promise<string>;
+    /**
+     * Upload bytes as a ready file and register it in file_meta so it is
+     * accessible via `GET /api/files/<key>`. Use this for server-generated
+     * files (e.g. generated PDFs) that are not uploaded by end-users.
+     */
+    upload(key: string, body: ArrayBuffer | Uint8Array, contentType: string, opts?: {
+        ownerId?: string;
+        filename?: string;
+    }): Promise<void>;
+}
+/** Bucket names declared in a storage config; `string` when unknowable. */
+export type BucketNamesOf<TStorage> = TStorage extends {
+    buckets: infer B extends Record<string, unknown>;
+} ? keyof B & string : string;
+export type WorkerstackApp<TSchema extends Record<string, unknown>, TAccess extends Record<string, TableAccessInput> | undefined = undefined, TBuckets extends string = string, TEnv extends EnvConfigInput | undefined = undefined, TJobsDefs extends JobsDefs | undefined = undefined, TCustomApiRouter extends AnyORPCRouter | undefined = undefined, TRealtime = undefined, TMessaging extends MessagingConfig | undefined = undefined, TAuthConfig extends BetterAuthConfig = BetterAuthConfig> = {
+    handler: (req: Request) => Promise<Response>;
+    db: DbFor<TSchema>;
+    auth: WorkerstackAuth<TAuthConfig>;
+    storage: StorageFacade;
+    /** Validated env: workerstack's base vars plus the config's `env` extension. */
+    env: ValidatedEnv<TEnv>;
+    /** Named, provider-specific outbound messaging channels. */
+    messaging: MessagingFacadesFor<TMessaging>;
+    /** Job queue facade; always present — enqueue throws when jobs aren't configured. */
+    jobs: JobsFacade<TJobsDefs extends JobsDefs ? TJobsDefs : Record<never, never>, TSchema>;
+    /** Typed custom row publication; enabled=false/no-op when realtime is off. */
+    realtime: RealtimeFacade<TSchema>;
+    close(): Promise<void>;
+    readonly status: LifecycleStatus;
+    readonly signal: AbortSignal;
+    /**
+     * Type-only carrier for client inference (`createClient<typeof app>()`).
+     * Never assigned at runtime.
+     */
+    readonly $inferClient?: {
+        schema: TSchema;
+        access: TAccess;
+        buckets: TBuckets;
+        api: MergeApiRouterTypes<UnifiedApiRouter<CrudApiRouterFor<TSchema, TAccess, [
+            TRealtime
+        ] extends [false | undefined] ? false : true>, TCustomApiRouter>, [
+            TRealtime
+        ] extends [false | undefined] ? {} : RealtimeApiRouter>;
+    };
+};
+export declare function materializeWorkerstack<TSchema extends Record<string, unknown>, const TAccess extends Record<string, TableAccessInput> | undefined = undefined, const TStorage extends StorageConfigInput | undefined = undefined, const TEnv extends EnvConfigInput | undefined = undefined, const TJobsDefs extends JobsDefs | undefined = undefined, TCustomApiRouter extends AnyORPCRouter | undefined = undefined, const TRealtime extends WorkerstackConfig<TSchema, TAccess, TStorage, TEnv, TCustomApiRouter>['realtime'] = undefined, const TMessaging extends MessagingConfig | undefined = undefined, const TAuthConfig extends BetterAuthConfig = BetterAuthConfig, const TSession extends SessionUserConfig<Record<string, unknown>> | undefined = undefined>(options: WorkerstackConfig<TSchema, TAccess, TStorage, TEnv, TCustomApiRouter, TAuthConfig, TSession> & {
+    realtime?: TRealtime;
+    messaging?: TMessaging;
+    jobs?: TJobsDefs | ((j: WorkerstackJobsBuilder<TSchema, ValidatedEnv<TEnv>, TMessaging>) => TJobsDefs);
+}, source: Record<string, string | undefined>, overrides?: RuntimeOverrides, env?: ValidatedEnv<TEnv>): Promise<WorkerstackApp<TSchema, TAccess, BucketNamesOf<TStorage>, TEnv, TJobsDefs, TCustomApiRouter, TRealtime, TMessaging, TAuthConfig>>;
+export { listSpec } from './api/list-spec.js';
+export type { ListSpecOptions } from './api/list-spec.js';
+export type { WorkerstackDb, WorkerstackTx } from './db.js';
+export { MAX_LIST_LIMIT } from './list-query.js';
+export { WorkerstackError } from './errors.js';
+export type { WorkerstackErrorCode } from './errors.js';
+export { resolveConfig, resolveAuthConfig, defineAuth } from './config.js';
+export type { AuthConfigContext, AuthConfigFactory, AuthConfigInput, BetterAuthConfig, WorkerstackConfig, ResolvedConfig, } from './config.js';
+export { validateEnv, createClientEnv, WorkerstackEnvError } from './env.js';
+export type { EnvConfigInput, BaseEnv, ValidatedEnv } from './env.js';
+export { buildManifest, parseManifest } from './manifest.js';
+export type { WorkerstackManifest, ManifestEnvVar } from './manifest.js';
+export type { EmailMessage, EmailAdapter } from './email.js';
+export { createJobsBuilder } from './jobs/index.js';
+export type { WorkerstackJobContext, WorkerstackJobsBuilder, BackgroundDefinition, BackgroundDefs, CronDefinition, CronInvocation, DedupeUntil, EnqueueOptions, EnqueueTransaction, JobContext, JobDefinition, JobsDefs, JobsFacade, JobsRuntimeFacade, QueueJobDefinition, QueueJobKeys, TypedEnqueueOptions, } from './jobs/index.js';
+export { defineSessionUser, defineAccess, validateAndResolveAccess, checkAccess, AUTH_TABLE_NAMES, } from './access.js';
+export type { TableAccessInput, OperationRule, AccessContext, AccessUser, AccessUserBase, SessionUserConfig, SessionUserExtraOf, SessionUserSource, } from './access.js';
+export { typeid, generate as generateTypeId, parse as parseTypeId, asTypeId, } from './typeid.js';
+export type { TypeId } from './typeid.js';
+export type { DatabaseAdapter, DatabaseConnection, DatabaseConnectionResult, } from './database/adapter.js';
+export type { StorageAdapter } from './storage/index.js';
+export type { StorageConfigInput, BucketConfigInput, ResolvedBucket, } from './storage/buckets.js';
+export type { RealtimeAction } from './realtime/publisher.js';
+export { createRealtimeFacade } from './realtime/facade.js';
+export type { RealtimeFacade, RealtimeTransport, SchemaTable, } from './realtime/facade.js';
+export { createApiBuilder, defineApi } from './api/builder.js';
+export type { WorkerstackApiBuilder, ApiFactory } from './api/builder.js';
+export type { ApiContext } from './api/context.js';
+export type { CrudApiRouterFor, ExposedApiTables, MergeApiRouterTypes, UnifiedApiRouter, } from './api/types.js';
+export type { TableCrudProcedures } from './api/crud-router.js';
+export { buildApiRegistry, mergeApiRoutersStrict, normalizeApiPath, normalizeForeignOpenAPISpec, } from './api/registry.js';
+export { mergeOpenAPISpecs } from './api/openapi.js';
+//# sourceMappingURL=runtime.d.ts.map

package/dist/runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,cAAc,CAAA;AAE9D,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAQvC,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AACtE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,KAAK,EACV,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EACjB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAC5D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAEjC,OAAO,KAAK,EACV,sBAAsB,EAEtB,QAAQ,EACR,UAAU,EACX,MAAM,cAAc,CAAA;AACrB,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAC3D,OAAO,KAAK,EACV,sBAAsB,EACtB,kBAAkB,EACnB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAUrD,OAAO,EAEL,KAAK,eAAe,EAMrB,MAAM,QAAQ,CAAA;AACf,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACvB,MAAM,UAAU,CAAA;AAIjB,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,YAAY,EAAE,MAAM,OAAO,CAAA;AAS9D,OAAO,EAAa,KAAK,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7D,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAEjE,OAAO,EAAmB,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAA;AAO3D,OAAO,EAEL,KAAK,cAAc,EAEpB,MAAM,mBAAmB,CAAA;AAY1B,6EAA6E;AAC7E,MAAM,MAAM,YAAY,GAAG,IAAI,CAAA;AAE/B,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,EAAE,kBAAkB,CAAA;IAC7B,eAAe,CAAC,EAAE,sBAAsB,CAAA;IACxC,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAA;IACpD,YAAY,CAAC,EAAE,mBAAmB,CAAA;IAClC,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5B,yEAAyE;IACzE,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,oBAAoB,KAAK,IAAI,CAAA;CAC9D,CAAA;AAID;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,sEAAsE;IACtE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACrC,uEAAuE;IACvE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;IAChD;;;;OAIG;IACH,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5C;;;OAGG;IACH,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,MAAM,CAAC,CAAA;IAClB;;;;OAIG;IACH,MAAM,CACJ,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,GAAG,UAAU,EAC9B,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,GAC7C,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAED,2EAA2E;AAC3E,MAAM,MAAM,aAAa,CAAC,QAAQ,IAAI,QAAQ,SAAS;IACrD,OAAO,EAAE,MAAM,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACjD,GACG,MAAM,CAAC,GAAG,MAAM,GAChB,MAAM,CAAA;AAEV,MAAM,MAAM,cAAc,CACxB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,GAAG,SAAS,EACxE,QAAQ,SAAS,MAAM,GAAG,MAAM,EAChC,IAAI,SAAS,cAAc,GAAG,SAAS,GAAG,SAAS,EACnD,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,SAAS,EAClD,gBAAgB,SAAS,aAAa,GAAG,SAAS,GAAG,SAAS,EAC9D,SAAS,GAAG,SAAS,EACrB,UAAU,SAAS,eAAe,GAAG,SAAS,GAAG,SAAS,EAC1D,WAAW,SAAS,gBAAgB,GAAG,gBAAgB,IACrD;IACF,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5C,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,EAAE,eAAe,CAAC,WAAW,CAAC,CAAA;IAClC,OAAO,EAAE,aAAa,CAAA;IACtB,gFAAgF;IAChF,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC,CAAA;IACvB,4DAA4D;IAC5D,SAAS,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAA;IAC1C,qFAAqF;IACrF,IAAI,EAAE,UAAU,CACd,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,EAC7D,OAAO,CACR,CAAA;IACD,8EAA8E;IAC9E,QAAQ,EAAE,cAAc,CAAC,OAAO,CAAC,CAAA;IACjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE;QACtB,MAAM,EAAE,OAAO,CAAA;QACf,MAAM,EAAE,OAAO,CAAA;QACf,OAAO,EAAE,QAAQ,CAAA;QACjB,GAAG,EAAE,mBAAmB,CACtB,gBAAgB,CACd,gBAAgB,CACd,OAAO,EACP,OAAO,EACP;YAAC,SAAS;SAAC,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,KAAK,GAAG,IAAI,CACvD,EACD,gBAAgB,CACjB,EACD;YAAC,SAAS;SAAC,SAAS,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,GAAG,iBAAiB,CACjE,CAAA;KACF,CAAA;CACF,CAAA;AAED,wBAAgB,sBAAsB,CACpC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvC,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,GAAG,SAAS,GAChE,SAAS,EACX,KAAK,CAAC,QAAQ,SAAS,kBAAkB,GAAG,SAAS,GAAG,SAAS,EACjE,KAAK,CAAC,IAAI,SAAS,cAAc,GAAG,SAAS,GAAG,SAAS,EACzD,KAAK,CAAC,SAAS,SAAS,QAAQ,GAAG,SAAS,GAAG,SAAS,EACxD,gBAAgB,SAAS,aAAa,GAAG,SAAS,GAAG,SAAS,EAC9D,KAAK,CAAC,SAAS,SAAS,iBAAiB,CACvC,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,gBAAgB,CACjB,CAAC,UAAU,CAAC,GAAG,SAAS,EACzB,KAAK,CAAC,UAAU,SAAS,eAAe,GAAG,SAAS,GAAG,SAAS,EAChE,KAAK,CAAC,WAAW,SAAS,gBAAgB,GAAG,gBAAgB,EAC7D,KAAK,CAAC,QAAQ,SACV,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC1C,SAAS,GAAG,SAAS,EAEzB,OAAO,EAAE,iBAAiB,CACxB,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,gBAAgB,EAChB,WAAW,EACX,QAAQ,CACT,GAAG;IACF,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,SAAS,CAAC,EAAE,UAAU,CAAA;IACtB,IAAI,CAAC,EACD,SAAS,GACT,CAAC,CACC,CAAC,EAAE,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC,KAC/D,SAAS,CAAC,CAAA;CACpB,EACD,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAC1C,SAAS,CAAC,EAAE,gBAAgB,EAC5B,GAAG,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,GACvB,OAAO,CACR,cAAc,CACZ,OAAO,EACP,OAAO,EACP,aAAa,CAAC,QAAQ,CAAC,EACvB,IAAI,EACJ,SAAS,EACT,gBAAgB,EAChB,SAAS,EACT,UAAU,EACV,WAAW,CACZ,CACF,CAAA;AAmjBD,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAA;AAC1C,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,MAAM,CAAA;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAA;AAC3C,YAAY,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAA;AACpD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACvE,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,GACf,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAA;AACzE,YAAY,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAA;AAClE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACzD,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AACrE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EACV,qBAAqB,EACrB,sBAAsB,EACtB,oBAAoB,EACpB,cAAc,EACd,cAAc,EACd,cAAc,EACd,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,GACpB,MAAM,cAAc,CAAA;AACrB,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,wBAAwB,EACxB,WAAW,EACX,gBAAgB,GACjB,MAAM,UAAU,CAAA;AACjB,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,UAAU,CAAA;AACjB,OAAO,EACL,MAAM,EACN,QAAQ,IAAI,cAAc,EAC1B,KAAK,IAAI,WAAW,EACpB,QAAQ,GACT,MAAM,UAAU,CAAA;AACjB,YAAY,EAAE,MAAM,EAAE,MAAM,UAAU,CAAA;AACtC,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,wBAAwB,GACzB,MAAM,oBAAoB,CAAA;AAC3B,YAAY,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AACrD,YAAY,EACV,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,GACf,MAAM,mBAAmB,CAAA;AAE1B,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AACxD,YAAY,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AAC3D,YAAY,EAAE,qBAAqB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAGtE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC/C,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,aAAa,CAAA;AACpB,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAC5D,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,gBAAgB,EAChB,2BAA2B,GAC5B,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA"}