@actuate-media/cms-core 0.82.0 → 0.84.0

package/dist/__tests__/auth/password.test.js

@@ -1,226 +0,0 @@
-import { describe, it, expect } from 'vitest';
-import { hashPassword, verifyPassword, validatePasswordPolicy, needsRehash, compareToDummyHash, _waitForDummyHashReady, PBKDF2_ITERATIONS, } from '../../auth/password.js';
-describe('hashPassword', () => {
-    it(`returns a string in format "pbkdf2:${PBKDF2_ITERATIONS}:salt:hash"`, async () => {
-        const hash = await hashPassword('MySecret123!');
-        const parts = hash.split(':');
-        expect(parts).toHaveLength(4);
-        expect(parts[0]).toBe('pbkdf2');
-        expect(parts[1]).toBe(String(PBKDF2_ITERATIONS));
-        expect(parts[2]).toMatch(/^[0-9a-f]{32}$/);
-        expect(parts[3]).toMatch(/^[0-9a-f]{64}$/);
-    });
-    it('uses at least 600,000 iterations (OWASP 2023+ guidance)', () => {
-        expect(PBKDF2_ITERATIONS).toBeGreaterThanOrEqual(600_000);
-    });
-    it('produces different hashes for the same password (random salt)', async () => {
-        const hash1 = await hashPassword('SamePassword');
-        const hash2 = await hashPassword('SamePassword');
-        expect(hash1).not.toBe(hash2);
-    });
-});
-describe('verifyPassword', () => {
-    it('returns true for correct password', async () => {
-        const hash = await hashPassword('Correct!Horse1');
-        const result = await verifyPassword('Correct!Horse1', hash);
-        expect(result).toBe(true);
-    });
-    it('returns false for wrong password', async () => {
-        const hash = await hashPassword('Correct!Horse1');
-        const result = await verifyPassword('WrongPassword9!', hash);
-        expect(result).toBe(false);
-    });
-    it('returns false for malformed hash (missing parts)', async () => {
-        const result = await verifyPassword('anything', 'not-a-valid-hash');
-        expect(result).toBe(false);
-    });
-    it('returns false for malformed hash (empty segments)', async () => {
-        const result = await verifyPassword('anything', 'pbkdf2:100000::');
-        expect(result).toBe(false);
-    });
-    it('verifies legacy 100k-iteration hashes (back-compat)', async () => {
-        // Build a legacy-style hash by hand with 100k iterations.
-        const password = 'LegacyPass1!';
-        const salt = crypto.getRandomValues(new Uint8Array(16));
-        const key = await crypto.subtle.importKey('raw', new TextEncoder().encode(password), 'PBKDF2', false, ['deriveBits']);
-        const derived = await crypto.subtle.deriveBits({ name: 'PBKDF2', salt, iterations: 100_000, hash: 'SHA-256' }, key, 256);
-        const legacy = `pbkdf2:100000:${Buffer.from(salt).toString('hex')}:${Buffer.from(derived).toString('hex')}`;
-        expect(await verifyPassword(password, legacy)).toBe(true);
-        expect(await verifyPassword('wrong', legacy)).toBe(false);
-    });
-    it('rejects absurdly low iteration counts (corruption guard)', async () => {
-        const result = await verifyPassword('anything', 'pbkdf2:100:abc:def');
-        expect(result).toBe(false);
-    });
-    it('rejects absurdly high iteration counts (DoS guard)', async () => {
-        const result = await verifyPassword('anything', 'pbkdf2:99999999:abc:def');
-        expect(result).toBe(false);
-    });
-});
-describe('needsRehash', () => {
-    it('returns true for old 100k-iteration hashes', () => {
-        expect(needsRehash('pbkdf2:100000:abc:def')).toBe(true);
-    });
-    it('returns false for current 600k-iteration hashes', async () => {
-        const hash = await hashPassword('Test1234!');
-        expect(needsRehash(hash)).toBe(false);
-    });
-    it('returns false for malformed hash', () => {
-        expect(needsRehash('not-a-hash')).toBe(false);
-        expect(needsRehash('pbkdf2:notanumber:abc:def')).toBe(false);
-    });
-});
-describe('compareToDummyHash', () => {
-    it('always returns false (dummy hash never matches a real password)', async () => {
-        const a = await compareToDummyHash('any password');
-        const b = await compareToDummyHash('different password');
-        const c = await compareToDummyHash('');
-        expect(a).toBe(false);
-        expect(b).toBe(false);
-        expect(c).toBe(false);
-    });
-    it('takes meaningful CPU time (defends user-enumeration timing channel)', async () => {
-        // The whole point is that this isn't a no-op. We can't assert exact ms in
-        // CI, but we can confirm it doesn't return synchronously.
-        const start = performance.now();
-        await compareToDummyHash('Some submitted password');
-        const elapsed = performance.now() - start;
-        // 600k iterations of PBKDF2-HMAC-SHA256 takes ~50-300ms on a typical CI
-        // worker. We assert >5ms as a generous lower bound that still catches
-        // a stub returning instantly.
-        expect(elapsed).toBeGreaterThan(5);
-    });
-    // Bugbot review #4 (PR #40): the original implementation lazily
-    // initialised the dummy hash on first call, making the first non-existent
-    // user login take ~2× the time of subsequent ones (one hashPassword +
-    // one verifyPassword vs just verifyPassword). That recreated the
-    // user-enumeration timing channel the dummy hash exists to close. The
-    // fix precomputes the hash via a top-level Promise — by the time the
-    // first user request arrives, the work is either done or already
-    // in-flight.
-    //
-    // Two warmups needed to measure verify-only cost on CI:
-    //   1. `_waitForDummyHashReady()` — wait for the eager hash precompute
-    //      so the first measured call isn't paying that extra ~150ms.
-    //   2. Throwaway `compareToDummyHash('worker-warmup')` — warm Node's
-    //      libuv worker pool used by `crypto.pbkdf2`. The first PBKDF2
-    //      call across the entire process pays a ~100-150ms cold-start
-    //      to spawn the worker thread + initialise the C++ binding
-    //      context; subsequent calls reuse it. Without this warmup, the
-    //      test failed on `main` (run 26599207053) with e1=291ms vs
-    //      e2=150ms — same ~2× ratio as the historical lazy-init bug it
-    //      was meant to catch, but caused by worker-pool warmup rather
-    //      than a regression in the dummy-hash path.
-    //
-    // After both warmups, e1 and e2 measure the *same* verifyPassword
-    // path. Reverting PR #40 (re-introducing lazy init) would make e1
-    // also include a fresh hashPassword call (~150ms) — still ~2× e2 —
-    // and the bound would catch it.
-    it('first measured call has parity with subsequent calls after eager init resolves', async () => {
-        await _waitForDummyHashReady();
-        // Throwaway: warm Node's libuv crypto worker pool (see comment above).
-        await compareToDummyHash('worker-warmup');
-        // Timing assertions on shared CI runners are noisy: a single GC pause or
-        // scheduler quantum on either sample can spike the e1/e2 ratio (see this
-        // file's history — runs 26599207053 and 27183423830 both flaked here, the
-        // latter blocking a publish). A genuine lazy-init regression is *consistent*
-        // (~2× on every iteration, because the first call would also pay for a full
-        // hashPassword), whereas noise is intermittent. So take a best-of-N: pass as
-        // soon as one iteration is within tolerance, and only fail if EVERY attempt
-        // exceeds it. The eager-init contract itself is independently guarded by the
-        // structural test below (`_waitForDummyHashReady` resolving).
-        const ATTEMPTS = 5;
-        let lastE1 = 0;
-        let lastBound = 0;
-        let withinTolerance = false;
-        for (let i = 0; i < ATTEMPTS && !withinTolerance; i++) {
-            const t1 = performance.now();
-            await compareToDummyHash('first');
-            const e1 = performance.now() - t1;
-            const t2 = performance.now();
-            await compareToDummyHash('second');
-            const e2 = performance.now() - t2;
-            // Both calls run only verifyPassword on a warm worker pool. The tolerance
-            // (1.6× + 50ms) absorbs GC pauses and scheduler quanta; without eager init
-            // the ratio is ~2× and would blow this bound on every attempt.
-            lastE1 = e1;
-            lastBound = e2 * 1.6 + 50;
-            withinTolerance = e1 < lastBound;
-        }
-        expect(withinTolerance, `e1=${lastE1.toFixed(1)}ms exceeded the ${lastBound.toFixed(1)}ms bound on all ${ATTEMPTS} attempts ` +
-            `(consistent ~2× ratio suggests lazy-init regression; intermittent would have passed one attempt)`).toBe(true);
-    });
-    it('exposes the eager-init promise for direct verification', async () => {
-        // Module-load contract: `_waitForDummyHashReady()` MUST return a
-        // promise that resolves with no work pending on the consumer side.
-        // If a future refactor accidentally drops the top-level invocation
-        // and switches back to lazy init, this test catches it because the
-        // promise either won't exist or won't resolve without a triggering
-        // call.
-        await expect(_waitForDummyHashReady()).resolves.toBeUndefined();
-    });
-});
-describe('validatePasswordPolicy', () => {
-    it('passes when password meets all requirements', () => {
-        const result = validatePasswordPolicy('Str0ng!Pass', {
-            minLength: 8,
-            requireUppercase: true,
-            requireLowercase: true,
-            requireNumbers: true,
-            requireSpecialChars: true,
-        });
-        expect(result.valid).toBe(true);
-        expect(result.errors).toHaveLength(0);
-    });
-    it('fails when password is too short', () => {
-        const result = validatePasswordPolicy('Sh1!', {
-            minLength: 8,
-        });
-        expect(result.valid).toBe(false);
-        expect(result.errors).toContain('Password must be at least 8 characters');
-    });
-    it('fails when missing uppercase', () => {
-        const result = validatePasswordPolicy('alllowercase1!', {
-            requireUppercase: true,
-        });
-        expect(result.valid).toBe(false);
-        expect(result.errors).toContain('Password must contain an uppercase letter');
-    });
-    it('fails when missing lowercase', () => {
-        const result = validatePasswordPolicy('ALLUPPERCASE1!', {
-            requireLowercase: true,
-        });
-        expect(result.valid).toBe(false);
-        expect(result.errors).toContain('Password must contain a lowercase letter');
-    });
-    it('fails when missing digits', () => {
-        const result = validatePasswordPolicy('NoDigits!Here', {
-            requireNumbers: true,
-        });
-        expect(result.valid).toBe(false);
-        expect(result.errors).toContain('Password must contain a digit');
-    });
-    it('fails when missing special characters', () => {
-        const result = validatePasswordPolicy('NoSpecial1Chars', {
-            requireSpecialChars: true,
-        });
-        expect(result.valid).toBe(false);
-        expect(result.errors).toContain('Password must contain a special character');
-    });
-    it('accumulates multiple errors', () => {
-        const result = validatePasswordPolicy('abc', {
-            minLength: 8,
-            requireUppercase: true,
-            requireNumbers: true,
-            requireSpecialChars: true,
-        });
-        expect(result.valid).toBe(false);
-        expect(result.errors).toHaveLength(4);
-    });
-    it('passes with empty policy', () => {
-        const result = validatePasswordPolicy('anything', {});
-        expect(result.valid).toBe(true);
-        expect(result.errors).toHaveLength(0);
-    });
-});
-//# sourceMappingURL=password.test.js.map

package/dist/__tests__/auth/password.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"password.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth/password.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC7C,OAAO,EACL,YAAY,EACZ,cAAc,EACd,sBAAsB,EACtB,WAAW,EACX,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,wBAAwB,CAAA;AAE/B,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,sCAAsC,iBAAiB,aAAa,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,CAAA;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;QAC7B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAC/B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,iBAAiB,CAAC,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,CAAA;QAChD,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,cAAc,CAAC,CAAA;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAA;QAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAAC,CAAA;QACjD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;QAC5D,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,kBAAkB,CAAC,CAAA;QACnE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAA;QAClE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,cAAc,CAAA;QAC/B,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;QACvD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAClC,QAAQ,EACR,KAAK,EACL,CAAC,YAAY,CAAC,CACf,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC5C,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAC9D,GAAG,EACH,GAAG,CACJ,CAAA;QACD,MAAM,MAAM,GAAG,iBAAiB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;QAC3G,MAAM,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzD,MAAM,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,oBAAoB,CAAC,CAAA;QACrE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,UAAU,EAAE,yBAAyB,CAAC,CAAA;QAC1E,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,WAAW,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAA;QAC5C,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC7C,MAAM,CAAC,WAAW,CAAC,2BAA2B,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,cAAc,CAAC,CAAA;QAClD,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,oBAAoB,CAAC,CAAA;QACxD,MAAM,CAAC,GAAG,MAAM,kBAAkB,CAAC,EAAE,CAAC,CAAA;QACtC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrB,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrB,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACvB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,0EAA0E;QAC1E,0DAA0D;QAC1D,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;QAC/B,MAAM,kBAAkB,CAAC,yBAAyB,CAAC,CAAA;QACnD,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;QACzC,wEAAwE;QACxE,sEAAsE;QACtE,8BAA8B;QAC9B,MAAM,CAAC,OAAO,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,gEAAgE;IAChE,0EAA0E;IAC1E,sEAAsE;IACtE,iEAAiE;IACjE,sEAAsE;IACtE,qEAAqE;IACrE,iEAAiE;IACjE,aAAa;IACb,EAAE;IACF,wDAAwD;IACxD,uEAAuE;IACvE,kEAAkE;IAClE,qEAAqE;IACrE,mEAAmE;IACnE,mEAAmE;IACnE,+DAA+D;IAC/D,oEAAoE;IACpE,gEAAgE;IAChE,oEAAoE;IACpE,mEAAmE;IACnE,iDAAiD;IACjD,EAAE;IACF,kEAAkE;IAClE,kEAAkE;IAClE,mEAAmE;IACnE,gCAAgC;IAChC,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,sBAAsB,EAAE,CAAA;QAC9B,uEAAuE;QACvE,MAAM,kBAAkB,CAAC,eAAe,CAAC,CAAA;QAEzC,yEAAyE;QACzE,yEAAyE;QACzE,0EAA0E;QAC1E,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,4EAA4E;QAC5E,6EAA6E;QAC7E,8DAA8D;QAC9D,MAAM,QAAQ,GAAG,CAAC,CAAA;QAClB,IAAI,MAAM,GAAG,CAAC,CAAA;QACd,IAAI,SAAS,GAAG,CAAC,CAAA;QACjB,IAAI,eAAe,GAAG,KAAK,CAAA;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,IAAI,CAAC,eAAe,EAAE,CAAC,EAAE,EAAE,CAAC;YACtD,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;YAC5B,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAA;YACjC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;YAEjC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;YAC5B,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAA;YAClC,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;YAEjC,0EAA0E;YAC1E,2EAA2E;YAC3E,+DAA+D;YAC/D,MAAM,GAAG,EAAE,CAAA;YACX,SAAS,GAAG,EAAE,GAAG,GAAG,GAAG,EAAE,CAAA;YACzB,eAAe,GAAG,EAAE,GAAG,SAAS,CAAA;QAClC,CAAC;QAED,MAAM,CACJ,eAAe,EACf,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,QAAQ,YAAY;YACnG,kGAAkG,CACrG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACd,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,iEAAiE;QACjE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,QAAQ;QACR,MAAM,MAAM,CAAC,sBAAsB,EAAE,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAA;IACjE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,sBAAsB,CAAC,aAAa,EAAE;YACnD,SAAS,EAAE,CAAC;YACZ,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,EAAE;YAC5C,SAAS,EAAE,CAAC;SACb,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,wCAAwC,CAAC,CAAA;IAC3E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,sBAAsB,CAAC,gBAAgB,EAAE;YACtD,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,sBAAsB,CAAC,gBAAgB,EAAE;YACtD,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0CAA0C,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,sBAAsB,CAAC,eAAe,EAAE;YACrD,cAAc,EAAE,IAAI;SACrB,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,+BAA+B,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,MAAM,GAAG,sBAAsB,CAAC,iBAAiB,EAAE;YACvD,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAA;IAC9E,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,EAAE;YAC3C,SAAS,EAAE,CAAC;YACZ,gBAAgB,EAAE,IAAI;YACtB,cAAc,EAAE,IAAI;YACpB,mBAAmB,EAAE,IAAI;SAC1B,CAAC,CAAA;QACF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;QACrD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/auth/reset.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=reset.test.d.ts.map

package/dist/__tests__/auth/reset.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"reset.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/auth/reset.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/auth/reset.test.js

@@ -1,355 +0,0 @@
-import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
-import { generateResetToken, hashToken, createPasswordReset, executePasswordReset, } from '../../auth/reset.js';
-import { verifyPassword } from '../../auth/password.js';
-import { setEmailSender } from '../../email/sender.js';
-function createFakeDb(initial = {}) {
-    const users = initial.users ?? [];
-    const tokens = [];
-    const sessions = initial.sessions ?? [];
-    const emailsSent = [];
-    const db = {
-        users,
-        tokens,
-        sessions,
-        emailsSent,
-        user: {
-            findFirst: vi.fn(async ({ where }) => {
-                const target = where.email.equals.toLowerCase();
-                return users.find((u) => u.email.toLowerCase() === target) ?? null;
-            }),
-            update: vi.fn(async ({ where, data }) => {
-                const u = users.find((u) => u.id === where.id);
-                if (u)
-                    Object.assign(u, data);
-                return u;
-            }),
-        },
-        passwordResetToken: {
-            findFirst: vi.fn(async ({ where }) => {
-                return (tokens.find((t) => t.tokenHash === where.tokenHash && t.usedAt === where.usedAt) ?? null);
-            }),
-            create: vi.fn(async ({ data }) => {
-                const user = users.find((u) => u.id === data.userId);
-                const t = {
-                    id: `rt_${tokens.length + 1}`,
-                    userId: data.userId,
-                    tokenHash: data.tokenHash,
-                    expiresAt: data.expiresAt,
-                    usedAt: null,
-                    user,
-                };
-                tokens.push(t);
-                return t;
-            }),
-            update: vi.fn(async ({ where, data }) => {
-                const t = tokens.find((t) => t.id === where.id);
-                if (t)
-                    Object.assign(t, data);
-                return t;
-            }),
-            updateMany: vi.fn(async ({ where, data }) => {
-                let count = 0;
-                for (const t of tokens) {
-                    if (t.userId === where.userId && t.usedAt === where.usedAt) {
-                        Object.assign(t, data);
-                        count++;
-                    }
-                }
-                return { count };
-            }),
-        },
-        session: {
-            updateMany: vi.fn(async ({ where, data }) => {
-                let count = 0;
-                for (const s of sessions) {
-                    if (s.userId === where.userId && s.revokedAt === where.revokedAt) {
-                        Object.assign(s, data);
-                        count++;
-                    }
-                }
-                return { count };
-            }),
-        },
-        $transaction: vi.fn(async (ops) => Promise.all(ops)),
-    };
-    // Partial mock — intersection keeps the vi.fn types visible to assertions.
-    return db;
-}
-const TEST_CONFIG = {
-    siteUrl: 'https://example.com',
-    platform: {
-        email: {
-            send: vi.fn(),
-        },
-    },
-};
-beforeEach(() => {
-    TEST_CONFIG.platform.email.send.mockClear();
-});
-// ─── Token generation ───────────────────────────────────────────────────
-describe('generateResetToken', () => {
-    it('returns a 64-char hex raw token (32 random bytes)', () => {
-        const t = generateResetToken();
-        expect(t.raw).toMatch(/^[0-9a-f]{64}$/);
-    });
-    it('returns a SHA-256 hash of the raw token', () => {
-        const t = generateResetToken();
-        expect(t.hash).toBe(hashToken(t.raw));
-        expect(t.hash).toMatch(/^[0-9a-f]{64}$/);
-    });
-    it('produces unique tokens (≥ 100 entropy bits)', () => {
-        const set = new Set(Array.from({ length: 200 }, () => generateResetToken().raw));
-        expect(set.size).toBe(200);
-    });
-});
-// ─── createPasswordReset (request flow) ─────────────────────────────────
-describe('createPasswordReset', () => {
-    it('silently succeeds for an unknown email (user enumeration defence)', async () => {
-        const db = createFakeDb();
-        await expect(createPasswordReset(db, 'unknown@example.com', TEST_CONFIG)).resolves.toBeUndefined();
-        expect(db.passwordResetToken.create).not.toHaveBeenCalled();
-        expect(TEST_CONFIG.platform.email.send).not.toHaveBeenCalled();
-    });
-    it('silently succeeds for a deactivated user (no token, no email)', async () => {
-        const db = createFakeDb({
-            users: [
-                {
-                    id: 'u_off',
-                    email: 'off@example.com',
-                    name: 'Off',
-                    isActive: false,
-                    passwordHash: 'pbkdf2:600000:a:b',
-                },
-            ],
-        });
-        await createPasswordReset(db, 'off@example.com', TEST_CONFIG);
-        expect(db.passwordResetToken.create).not.toHaveBeenCalled();
-        expect(TEST_CONFIG.platform.email.send).not.toHaveBeenCalled();
-    });
-    it('creates a token, expires prior outstanding tokens, and sends an email', async () => {
-        const db = createFakeDb({
-            users: [
-                {
-                    id: 'u_1',
-                    email: 'a@example.com',
-                    name: 'A',
-                    isActive: true,
-                    passwordHash: 'pbkdf2:600000:a:b',
-                },
-            ],
-        });
-        await createPasswordReset(db, 'a@example.com', TEST_CONFIG);
-        expect(db.passwordResetToken.updateMany).toHaveBeenCalledWith({
-            where: { userId: 'u_1', usedAt: null },
-            data: { usedAt: expect.any(Date) },
-        });
-        expect(db.passwordResetToken.create).toHaveBeenCalledOnce();
-        expect(TEST_CONFIG.platform.email.send).toHaveBeenCalledOnce();
-        const tokenRecord = db.tokens[0];
-        // Stored value is the hash, not the raw token
-        expect(tokenRecord.tokenHash).toMatch(/^[0-9a-f]{64}$/);
-        // 1 hour expiry, give or take a few seconds
-        const ttlMs = tokenRecord.expiresAt.getTime() - Date.now();
-        expect(ttlMs).toBeGreaterThan(59 * 60 * 1000);
-        expect(ttlMs).toBeLessThanOrEqual(60 * 60 * 1000 + 5_000);
-    });
-    it('puts a fresh raw token into the email URL (not the hash)', async () => {
-        const db = createFakeDb({
-            users: [
-                {
-                    id: 'u_1',
-                    email: 'a@example.com',
-                    name: 'A',
-                    isActive: true,
-                    passwordHash: null,
-                },
-            ],
-        });
-        await createPasswordReset(db, 'A@Example.com  ', TEST_CONFIG);
-        const sent = TEST_CONFIG.platform.email.send.mock.calls[0][0];
-        const tokenInUrl = sent.html.match(/token=([0-9a-f]{64})/)?.[1];
-        expect(tokenInUrl).toBeDefined();
-        expect(hashToken(tokenInUrl)).toBe(db.tokens[0].tokenHash);
-    });
-    it('normalises email casing/whitespace before lookup', async () => {
-        const db = createFakeDb({
-            users: [
-                {
-                    id: 'u_1',
-                    email: 'a@example.com',
-                    name: 'A',
-                    isActive: true,
-                    passwordHash: null,
-                },
-            ],
-        });
-        await createPasswordReset(db, '  A@Example.COM ', TEST_CONFIG);
-        expect(db.passwordResetToken.create).toHaveBeenCalledOnce();
-    });
-    it('does nothing when the email is empty / whitespace-only', async () => {
-        const db = createFakeDb();
-        await createPasswordReset(db, '   ', TEST_CONFIG);
-        expect(db.user.findFirst).not.toHaveBeenCalled();
-    });
-    it('skips email send gracefully when no email adapter is configured', async () => {
-        const db = createFakeDb({
-            users: [
-                {
-                    id: 'u_1',
-                    email: 'a@example.com',
-                    name: 'A',
-                    isActive: true,
-                    passwordHash: null,
-                },
-            ],
-        });
-        await createPasswordReset(db, 'a@example.com', { siteUrl: 'https://e.com' });
-        expect(db.passwordResetToken.create).toHaveBeenCalledOnce();
-        expect(TEST_CONFIG.platform.email.send).not.toHaveBeenCalled();
-    });
-    it('builds the reset link from the configured admin path (not a hardcoded /admin)', async () => {
-        const db = createFakeDb({
-            users: [{ id: 'u_1', email: 'a@example.com', name: 'A', isActive: true, passwordHash: null }],
-        });
-        await createPasswordReset(db, 'a@example.com', {
-            siteUrl: 'https://example.com/',
-            adminPath: '/securelogin',
-            platform: TEST_CONFIG.platform,
-        });
-        const sent = TEST_CONFIG.platform.email.send.mock.calls[0][0];
-        expect(sent.html).toContain('https://example.com/securelogin/reset-password?token=');
-        expect(sent.html).not.toContain('//securelogin');
-    });
-});
-// ─── Registered email sender fallback ───────────────────────────────────
-//
-// Regression: createPasswordReset previously only sent when an explicit
-// `platform.email` adapter was passed. Apps that configure email purely via
-// `emailPlugin()` (the common case) register a sender through the core email
-// registry instead, so the reset flow must fall back to it.
-describe('createPasswordReset — registered sender fallback', () => {
-    afterEach(() => {
-        setEmailSender(null);
-    });
-    it('sends via the registered sender when no platform adapter is passed', async () => {
-        const send = vi.fn(async (_o) => { });
-        setEmailSender({ send });
-        const db = createFakeDb({
-            users: [{ id: 'u_1', email: 'a@example.com', name: 'A', isActive: true, passwordHash: null }],
-        });
-        await createPasswordReset(db, 'a@example.com', { siteUrl: 'https://e.com' });
-        expect(db.passwordResetToken.create).toHaveBeenCalledOnce();
-        expect(send).toHaveBeenCalledOnce();
-        const sent = send.mock.calls[0][0];
-        expect(sent.to).toBe('a@example.com');
-        expect(sent.html).toContain('/admin/reset-password?token=');
-    });
-    it('prefers an explicit platform adapter over the registered sender', async () => {
-        const registered = vi.fn(async (_o) => { });
-        setEmailSender({ send: registered });
-        const db = createFakeDb({
-            users: [{ id: 'u_1', email: 'a@example.com', name: 'A', isActive: true, passwordHash: null }],
-        });
-        await createPasswordReset(db, 'a@example.com', {
-            siteUrl: 'https://e.com',
-            platform: TEST_CONFIG.platform,
-        });
-        expect(TEST_CONFIG.platform.email.send).toHaveBeenCalledOnce();
-        expect(registered).not.toHaveBeenCalled();
-    });
-});
-// ─── executePasswordReset (consume flow) ────────────────────────────────
-describe('executePasswordReset', () => {
-    function seedDbWithToken(opts = {}) {
-        const raw = '0'.repeat(64);
-        const db = createFakeDb({
-            users: [
-                {
-                    id: 'u_1',
-                    email: 'a@example.com',
-                    name: 'A',
-                    isActive: opts.isActive ?? true,
-                    passwordHash: null,
-                },
-            ],
-            sessions: [
-                { id: 's_active', userId: 'u_1', revokedAt: null },
-                { id: 's_other', userId: 'u_1', revokedAt: null },
-            ],
-        });
-        const t = {
-            id: 'rt_1',
-            userId: 'u_1',
-            tokenHash: hashToken(raw),
-            expiresAt: opts.expiresAt ?? new Date(Date.now() + 30 * 60 * 1000),
-            usedAt: opts.usedAt ?? null,
-            user: db.users[0],
-        };
-        db.tokens.push(t);
-        return { db, raw };
-    }
-    it('rejects an unknown token without leaking which user it belonged to', async () => {
-        const { db } = seedDbWithToken();
-        const result = await executePasswordReset(db, 'a-token-that-does-not-exist', 'P@ssword1234');
-        expect(result.success).toBe(false);
-        expect(result.error).toBe('Invalid or expired reset link.');
-        expect(db.user.update).not.toHaveBeenCalled();
-    });
-    it('rejects an expired token', async () => {
-        const { db, raw } = seedDbWithToken({
-            expiresAt: new Date(Date.now() - 60 * 1000),
-        });
-        const result = await executePasswordReset(db, raw, 'P@ssword1234');
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/expired/i);
-        expect(db.user.update).not.toHaveBeenCalled();
-    });
-    it('rejects a token that has already been used (single-use)', async () => {
-        const { db, raw } = seedDbWithToken({ usedAt: new Date(Date.now() - 1000) });
-        const result = await executePasswordReset(db, raw, 'P@ssword1234');
-        expect(result.success).toBe(false);
-        // The "usedAt: null" filter means the token isn't found -> generic error.
-        expect(result.error).toBe('Invalid or expired reset link.');
-    });
-    it('rejects when the underlying user is deactivated', async () => {
-        const { db, raw } = seedDbWithToken({ isActive: false });
-        const result = await executePasswordReset(db, raw, 'P@ssword1234');
-        expect(result.success).toBe(false);
-        expect(result.error).toMatch(/deactivated/i);
-    });
-    it('rejects passwords that do not meet the default policy', async () => {
-        const { db, raw } = seedDbWithToken();
-        const tooShort = await executePasswordReset(db, raw, 'short1A');
-        expect(tooShort.success).toBe(false);
-        const noUpper = await executePasswordReset(db, raw, 'lowercase-only-1234');
-        expect(noUpper.success).toBe(false);
-        const noNumber = await executePasswordReset(db, raw, 'NoNumbersAtAll!');
-        expect(noNumber.success).toBe(false);
-    });
-    it('updates the password, marks the token used, and revokes all sessions atomically', async () => {
-        const { db, raw } = seedDbWithToken();
-        const result = await executePasswordReset(db, raw, 'F#reshPassword2026!');
-        expect(result.success).toBe(true);
-        expect(db.$transaction).toHaveBeenCalledOnce();
-        // 1. Password hash was updated
-        const user = db.users[0];
-        expect(user.passwordHash).toBeTruthy();
-        expect(user.passwordHash).toMatch(/^pbkdf2:/);
-        // 2. New password actually verifies against the stored hash
-        expect(await verifyPassword('F#reshPassword2026!', user.passwordHash)).toBe(true);
-        // 3. Token is marked used (single-use enforced for replay attempts)
-        const t = db.tokens[0];
-        expect(t.usedAt).toBeInstanceOf(Date);
-        // 4. All non-revoked sessions revoked
-        expect(db.sessions.every((s) => s.revokedAt !== null)).toBe(true);
-    });
-    it('a second use of the same token after a successful reset is rejected', async () => {
-        const { db, raw } = seedDbWithToken();
-        const first = await executePasswordReset(db, raw, 'F#reshPassword2026!');
-        expect(first.success).toBe(true);
-        const second = await executePasswordReset(db, raw, 'AnotherV@lidPwd2026!');
-        expect(second.success).toBe(false);
-        expect(second.error).toBe('Invalid or expired reset link.');
-    });
-});
-//# sourceMappingURL=reset.test.js.map

package/dist/__tests__/auth/reset.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reset.test.js","sourceRoot":"","sources":["../../../src/__tests__/auth/reset.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAA;AACxE,OAAO,EACL,kBAAkB,EAClB,SAAS,EACT,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AA0BtD,SAAS,YAAY,CAAC,UAA4D,EAAE;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAA;IACjC,MAAM,MAAM,GAAqB,EAAE,CAAA;IACnC,MAAM,QAAQ,GAAkB,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAA;IACtD,MAAM,UAAU,GAA2C,EAAE,CAAA;IAE7D,MAAM,EAAE,GAAG;QACT,KAAK;QACL,MAAM;QACN,QAAQ;QACR,UAAU;QACV,IAAI,EAAE;YACJ,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE;gBACxC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,CAAA;gBAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAA;YACpE,CAAC,CAAC;YACF,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAO,EAAE,EAAE;gBAC3C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAA;gBAC9C,IAAI,CAAC;oBAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBAC7B,OAAO,CAAE,CAAA;YACX,CAAC,CAAC;SACH;QACD,kBAAkB,EAAE;YAClB,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAO,EAAE,EAAE;gBACxC,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,CACzF,CAAA;YACH,CAAC,CAAC;YACF,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,IAAI,EAAO,EAAE,EAAE;gBACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAE,CAAA;gBACrD,MAAM,CAAC,GAAmB;oBACxB,EAAE,EAAE,MAAM,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE;oBAC7B,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,MAAM,EAAE,IAAI;oBACZ,IAAI;iBACL,CAAA;gBACD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;gBACd,OAAO,CAAC,CAAA;YACV,CAAC,CAAC;YACF,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAO,EAAE,EAAE;gBAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,CAAA;gBAC/C,IAAI,CAAC;oBAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;gBAC7B,OAAO,CAAE,CAAA;YACX,CAAC,CAAC;YACF,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAO,EAAE,EAAE;gBAC/C,IAAI,KAAK,GAAG,CAAC,CAAA;gBACb,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACvB,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;wBAC3D,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;wBACtB,KAAK,EAAE,CAAA;oBACT,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,CAAA;YAClB,CAAC,CAAC;SACH;QACD,OAAO,EAAE;YACP,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAO,EAAE,EAAE;gBAC/C,IAAI,KAAK,GAAG,CAAC,CAAA;gBACb,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACzB,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;wBACjE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;wBACtB,KAAK,EAAE,CAAA;oBACT,CAAC;gBACH,CAAC;gBACD,OAAO,EAAE,KAAK,EAAE,CAAA;YAClB,CAAC,CAAC;SACH;QACD,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,GAAuB,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;KACzE,CAAA;IACD,2EAA2E;IAC3E,OAAO,EAA2B,CAAA;AACpC,CAAC;AAED,MAAM,WAAW,GAAG;IAClB,OAAO,EAAE,qBAAqB;IAC9B,QAAQ,EAAE;QACR,KAAK,EAAE;YACL,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE;SACd;KACF;CACF,CAAA;AAED,UAAU,CAAC,GAAG,EAAE;IACd,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAA;AAC7C,CAAC,CAAC,CAAA;AAEF,2EAA2E;AAE3E,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAAA;QAC9B,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAAA;QAC9B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;QACrC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QAChF,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,2EAA2E;AAE3E,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,mEAAmE,EAAE,KAAK,IAAI,EAAE;QACjF,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,MAAM,CACV,mBAAmB,CAAC,EAAE,EAAE,qBAAqB,EAAE,WAAW,CAAC,CAC5D,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAA;QAC1B,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC3D,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,OAAO;oBACX,KAAK,EAAE,iBAAiB;oBACxB,IAAI,EAAE,KAAK;oBACX,QAAQ,EAAE,KAAK;oBACf,YAAY,EAAE,mBAAmB;iBAClC;aACF;SACF,CAAC,CAAA;QACF,MAAM,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;QAC3D,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,eAAe;oBACtB,IAAI,EAAE,GAAG;oBACT,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,mBAAmB;iBAClC;aACF;SACF,CAAC,CAAA;QACF,MAAM,mBAAmB,CAAC,EAAE,EAAE,eAAe,EAAE,WAAW,CAAC,CAAA;QAC3D,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC,oBAAoB,CAAC;YAC5D,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;YACtC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;SACnC,CAAC,CAAA;QACF,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,CAAA;QAC3D,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAA;QAE9D,MAAM,WAAW,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAE,CAAA;QACjC,8CAA8C;QAC9C,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;QACvD,4CAA4C;QAC5C,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,GAAG,KAAK,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,eAAe;oBACtB,IAAI,EAAE,GAAG;oBACT,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,IAAI;iBACnB;aACF;SACF,CAAC,CAAA;QACF,MAAM,mBAAmB,CAAC,EAAE,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAA;QAC7D,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAA;QAC/D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC/D,MAAM,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAA;QAChC,MAAM,CAAC,SAAS,CAAC,UAAW,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,SAAS,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,eAAe;oBACtB,IAAI,EAAE,GAAG;oBACT,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,IAAI;iBACnB;aACF;SACF,CAAC,CAAA;QACF,MAAM,mBAAmB,CAAC,EAAE,EAAE,kBAAkB,EAAE,WAAW,CAAC,CAAA;QAC9D,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,mBAAmB,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAA;QACjD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAClD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,eAAe;oBACtB,IAAI,EAAE,GAAG;oBACT,QAAQ,EAAE,IAAI;oBACd,YAAY,EAAE,IAAI;iBACnB;aACF;SACF,CAAC,CAAA;QACF,MAAM,mBAAmB,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAA;QAC5E,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,CAAA;QAC3D,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SAC9F,CAAC,CAAA;QACF,MAAM,mBAAmB,CAAC,EAAE,EAAE,eAAe,EAAE;YAC7C,OAAO,EAAE,sBAAsB;YAC/B,SAAS,EAAE,cAAc;YACzB,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAE,CAAA;QAC/D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,uDAAuD,CAAC,CAAA;QACpF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAA;IAClD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,2EAA2E;AAC3E,EAAE;AACF,wEAAwE;AACxE,4EAA4E;AAC5E,6EAA6E;AAC7E,4DAA4D;AAE5D,QAAQ,CAAC,kDAAkD,EAAE,GAAG,EAAE;IAChE,SAAS,CAAC,GAAG,EAAE;QACb,cAAc,CAAC,IAAI,CAAC,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,CAChB,KAAK,EAAE,EAAgE,EAAE,EAAE,GAAE,CAAC,CAC/E,CAAA;QACD,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;QACxB,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SAC9F,CAAC,CAAA;QAEF,MAAM,mBAAmB,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC,CAAA;QAE5E,MAAM,CAAC,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,CAAA;QAC3D,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAA;QACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAA;QACnC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,8BAA8B,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iEAAiE,EAAE,KAAK,IAAI,EAAE;QAC/E,MAAM,UAAU,GAAG,EAAE,CAAC,EAAE,CACtB,KAAK,EAAE,EAAgE,EAAE,EAAE,GAAE,CAAC,CAC/E,CAAA;QACD,cAAc,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAA;QACpC,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;SAC9F,CAAC,CAAA;QAEF,MAAM,mBAAmB,CAAC,EAAE,EAAE,eAAe,EAAE;YAC7C,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC,CAAA;QAEF,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAA;QAC9D,MAAM,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC3C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,2EAA2E;AAE3E,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,SAAS,eAAe,CACtB,OAII,EAAE;QAEN,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1B,MAAM,EAAE,GAAG,YAAY,CAAC;YACtB,KAAK,EAAE;gBACL;oBACE,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,eAAe;oBACtB,IAAI,EAAE,GAAG;oBACT,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;oBAC/B,YAAY,EAAE,IAAI;iBACnB;aACF;YACD,QAAQ,EAAE;gBACR,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;gBAClD,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE;aAClD;SACF,CAAC,CAAA;QACF,MAAM,CAAC,GAAmB;YACxB,EAAE,EAAE,MAAM;YACV,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,SAAS,CAAC,GAAG,CAAC;YACzB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAClE,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;YAC3B,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE;SACnB,CAAA;QACD,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACjB,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAA;IACpB,CAAC;IAED,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,EAAE,EAAE,EAAE,GAAG,eAAe,EAAE,CAAA;QAChC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,6BAA6B,EAAE,cAAc,CAAC,CAAA;QAC5F,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;QAC3D,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC;YAClC,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;SAC5C,CAAC,CAAA;QACF,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,cAAc,CAAC,CAAA;QAClE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QACxC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IAC/C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACvE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAA;QAC5E,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,cAAc,CAAC,CAAA;QAClE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,0EAA0E;QAC1E,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;QACxD,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,cAAc,CAAC,CAAA;QAClE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IAC9C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,eAAe,EAAE,CAAA;QACrC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,CAAA;QAC/D,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEpC,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAA;QAC1E,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAEnC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,iBAAiB,CAAC,CAAA;QACvE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,eAAe,EAAE,CAAA;QACrC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAA;QACzE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACjC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,oBAAoB,EAAE,CAAA;QAE9C,+BAA+B;QAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAE,CAAA;QACzB,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,UAAU,EAAE,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;QAC7C,4DAA4D;QAC5D,MAAM,CAAC,MAAM,cAAc,CAAC,qBAAqB,EAAE,IAAI,CAAC,YAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAClF,oEAAoE;QACpE,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAE,CAAA;QACvB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAA;QACrC,sCAAsC;QACtC,MAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,eAAe,EAAE,CAAA;QACrC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,qBAAqB,CAAC,CAAA;QACxE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,EAAE,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAA;QAC1E,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/auth/roles.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=roles.test.d.ts.map

package/dist/__tests__/auth/roles.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"roles.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/auth/roles.test.ts"],"names":[],"mappings":""}