@ankhorage/studio 0.3.0 → 0.5.0

package/README.md

@@ -3,7 +3,7 @@
 
 # @ankhorage/studio
 
-![license: MIT](././paradox/badges/license.svg) ![npm: v0.2.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
+![license: MIT](././paradox/badges/license.svg) ![npm: v0.4.0](././paradox/badges/npm.svg) ![runtime: bun](././paradox/badges/runtime.svg) ![typescript: strict](././paradox/badges/typescript.svg) ![eslint: checked](././paradox/badges/eslint.svg) ![prettier: checked](././paradox/badges/prettier.svg) ![build: checked](././paradox/badges/build.svg) ![tests: checked](././paradox/badges/tests.svg) ![docs: paradox](././paradox/badges/docs.svg)
 
 Standalone Studio authoring package for Ankhorage apps.
 

package/dist/authSettings.d.ts

@@ -0,0 +1,33 @@
+import { type AppManifest } from '@ankhorage/contracts';
+type ManifestAuth = NonNullable<AppManifest['infra']['auth']>;
+type ManifestFlow = NonNullable<ManifestAuth['flow']>;
+type ManifestSignIn = NonNullable<ManifestAuth['signIn']>;
+type ManifestSignUp = NonNullable<ManifestAuth['signUp']>;
+type ManifestOAuth = NonNullable<ManifestAuth['oauth']>;
+type ManifestProfile = NonNullable<ManifestAuth['profile']>;
+interface ValidationError {
+    readonly code: 'invalid_config';
+    readonly message: string;
+}
+type ValidationResult<T> = {
+    readonly ok: true;
+    readonly data: T;
+} | {
+    readonly ok: false;
+    readonly error: ValidationError;
+};
+export interface StudioAuthSettings {
+    readonly scope: ManifestAuth['scope'];
+    readonly provider: ManifestAuth['provider'];
+    readonly flow: ManifestFlow;
+    readonly signIn: ManifestSignIn;
+    readonly signUp?: ManifestSignUp;
+    readonly oauth?: ManifestOAuth;
+    readonly profile?: ManifestProfile;
+}
+export type StudioAuthSettingsValidationResult = ValidationResult<StudioAuthSettings>;
+export declare function readStudioAuthSettings(manifest: AppManifest): StudioAuthSettings | null;
+export declare function applyStudioAuthSettings(manifest: AppManifest, settings: StudioAuthSettings): AppManifest;
+export declare function validateStudioAuthSettings(value: unknown): StudioAuthSettingsValidationResult;
+export {};
+//# sourceMappingURL=authSettings.d.ts.map

package/dist/authSettings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authSettings.d.ts","sourceRoot":"","sources":["../src/authSettings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,WAAW,EAAqB,MAAM,sBAAsB,CAAC;AAI3E,KAAK,YAAY,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9D,KAAK,YAAY,GAAG,WAAW,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;AACtD,KAAK,cAAc,GAAG,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1D,KAAK,cAAc,GAAG,WAAW,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1D,KAAK,aAAa,GAAG,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;AAExD,KAAK,eAAe,GAAG,WAAW,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;AAC5D,UAAU,eAAe;IACvB,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AACD,KAAK,gBAAgB,CAAC,CAAC,IACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;CAAE,CAAC;AAEpG,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC;IAC5C,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC;CACpC;AAED,MAAM,MAAM,kCAAkC,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;AAwCtF,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,WAAW,GAAG,kBAAkB,GAAG,IAAI,CAyCvF;AAED,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,WAAW,EACrB,QAAQ,EAAE,kBAAkB,GAC3B,WAAW,CAqDb;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kCAAkC,CAyC7F"}

package/dist/authSettings.js

@@ -0,0 +1,525 @@
+import { DEFAULT_AUTH_FLOW } from '@ankhorage/contracts';
+import { normalizeSecretRef } from '@ankhorage/contracts/secrets';
+import { getSupabaseOAuthProviderDefinition } from '@ankhorage/supabase-auth';
+const AUTH_SCOPES = new Set(['global', 'none', 'integrated']);
+const AUTH_IDENTIFIERS = new Set(['email', 'phone', 'username']);
+const AUTH_SIGN_UP_FIELDS = new Set([
+    'email',
+    'phone',
+    'username',
+    'password',
+    'displayName',
+    'firstName',
+    'lastName',
+]);
+const AUTH_SIGN_UP_POLICIES = new Set(['autoSignIn', 'requireVerification']);
+const AUTH_PROFILE_FIELDS = new Set([
+    'email',
+    'phone',
+    'username',
+    'firstName',
+    'lastName',
+    'displayName',
+    'avatarUrl',
+]);
+const PROFILE_CREATE_STRATEGIES = new Set(['trigger', 'api', 'app']);
+const PROFILE_UPDATE_STRATEGIES = new Set(['api', 'app']);
+const FORBIDDEN_INLINE_SECRET_KEYS = new Set([
+    'apikey',
+    'clientid',
+    'clientsecret',
+    'credentials',
+    'databasepassword',
+    'password',
+    'payload',
+    'privatekey',
+    'secret',
+    'secretvalue',
+    'servicerolekey',
+    'token',
+]);
+export function readStudioAuthSettings(manifest) {
+    const { auth } = manifest.infra;
+    if (!auth)
+        return null;
+    return {
+        scope: auth.scope,
+        provider: auth.provider,
+        flow: { ...(auth.flow ?? DEFAULT_AUTH_FLOW) },
+        signIn: { identifiers: [...(auth.signIn?.identifiers ?? ['email'])] },
+        ...(auth.signUp
+            ? {
+                signUp: {
+                    requiredFields: [...auth.signUp.requiredFields],
+                    ...(auth.signUp.optionalFields
+                        ? { optionalFields: [...auth.signUp.optionalFields] }
+                        : {}),
+                    ...(auth.signUp.signUpPolicy ? { signUpPolicy: auth.signUp.signUpPolicy } : {}),
+                },
+            }
+            : {}),
+        ...(auth.oauth
+            ? {
+                oauth: {
+                    enabled: auth.oauth.enabled,
+                    callbackRoute: auth.oauth.callbackRoute,
+                    providers: auth.oauth.providers.map(cloneOAuthProvider),
+                },
+            }
+            : {}),
+        ...(auth.profile
+            ? {
+                profile: {
+                    fields: [...auth.profile.fields],
+                    ...(auth.profile.table ? { table: auth.profile.table } : {}),
+                    ...(auth.profile.primaryKey ? { primaryKey: auth.profile.primaryKey } : {}),
+                    ...(auth.profile.createStrategy ? { createStrategy: auth.profile.createStrategy } : {}),
+                    ...(auth.profile.updateStrategy ? { updateStrategy: auth.profile.updateStrategy } : {}),
+                },
+            }
+            : {}),
+    };
+}
+export function applyStudioAuthSettings(manifest, settings) {
+    const currentAuthorization = manifest.infra.auth?.authorization;
+    return {
+        ...manifest,
+        infra: {
+            ...manifest.infra,
+            auth: {
+                scope: settings.scope,
+                provider: settings.provider,
+                flow: { ...settings.flow },
+                signIn: { identifiers: [...settings.signIn.identifiers] },
+                ...(settings.signUp
+                    ? {
+                        signUp: {
+                            requiredFields: [...settings.signUp.requiredFields],
+                            ...(settings.signUp.optionalFields
+                                ? { optionalFields: [...settings.signUp.optionalFields] }
+                                : {}),
+                            ...(settings.signUp.signUpPolicy
+                                ? { signUpPolicy: settings.signUp.signUpPolicy }
+                                : {}),
+                        },
+                    }
+                    : {}),
+                ...(settings.oauth
+                    ? {
+                        oauth: {
+                            enabled: settings.oauth.enabled,
+                            callbackRoute: settings.oauth.callbackRoute,
+                            providers: settings.oauth.providers.map(cloneOAuthProvider),
+                        },
+                    }
+                    : {}),
+                ...(settings.profile
+                    ? {
+                        profile: {
+                            fields: [...settings.profile.fields],
+                            ...(settings.profile.table ? { table: settings.profile.table } : {}),
+                            ...(settings.profile.primaryKey ? { primaryKey: settings.profile.primaryKey } : {}),
+                            ...(settings.profile.createStrategy
+                                ? { createStrategy: settings.profile.createStrategy }
+                                : {}),
+                            ...(settings.profile.updateStrategy
+                                ? { updateStrategy: settings.profile.updateStrategy }
+                                : {}),
+                        },
+                    }
+                    : {}),
+                ...(currentAuthorization ? { authorization: currentAuthorization } : {}),
+            },
+        },
+    };
+}
+export function validateStudioAuthSettings(value) {
+    const forbiddenPath = findForbiddenInlineSecretPath(value);
+    if (forbiddenPath) {
+        return invalid(`Auth configuration cannot contain inline secret field "${forbiddenPath}".`);
+    }
+    const record = asRecord(value);
+    if (!record ||
+        !hasOnlyKeys(record, ['scope', 'provider', 'flow', 'signIn', 'signUp', 'oauth', 'profile'])) {
+        return invalid('Auth configuration contains unsupported fields.');
+    }
+    if (typeof record.scope !== 'string' || !AUTH_SCOPES.has(record.scope)) {
+        return invalid('Auth scope must be global, none, or integrated.');
+    }
+    if (record.provider !== 'supabase') {
+        return invalid('The current Studio auth provider must be supabase.');
+    }
+    const flow = parseFlow(record.flow);
+    if (!flow.ok)
+        return flow;
+    const signIn = parseSignIn(record.signIn);
+    if (!signIn.ok)
+        return signIn;
+    const signUp = record.signUp === undefined ? undefined : parseSignUp(record.signUp);
+    if (signUp && !signUp.ok)
+        return signUp;
+    const oauth = record.oauth === undefined ? undefined : parseOAuth(record.oauth);
+    if (oauth && !oauth.ok)
+        return oauth;
+    const profile = record.profile === undefined ? undefined : parseProfile(record.profile);
+    if (profile && !profile.ok)
+        return profile;
+    return success({
+        scope: record.scope,
+        provider: 'supabase',
+        flow: flow.data,
+        signIn: signIn.data,
+        ...(signUp ? { signUp: signUp.data } : {}),
+        ...(oauth ? { oauth: oauth.data } : {}),
+        ...(profile ? { profile: profile.data } : {}),
+    });
+}
+function parseFlow(value) {
+    const record = asRecord(value);
+    const keys = [
+        'signInRoute',
+        'signUpRoute',
+        'signOutRoute',
+        'forgotPasswordRoute',
+        'otpRoute',
+        'postSignInRoute',
+        'unauthorizedRoute',
+    ];
+    if (!record || !hasOnlyKeys(record, keys)) {
+        return invalid('Auth flow contains unsupported fields.');
+    }
+    const signInRoute = readRoute(record.signInRoute, 'signInRoute');
+    if (!signInRoute.ok)
+        return signInRoute;
+    const postSignInRoute = readRoute(record.postSignInRoute, 'postSignInRoute');
+    if (!postSignInRoute.ok)
+        return postSignInRoute;
+    const optionalRoutes = [
+        'signUpRoute',
+        'signOutRoute',
+        'forgotPasswordRoute',
+        'otpRoute',
+        'unauthorizedRoute',
+    ];
+    const parsed = {};
+    for (const key of optionalRoutes) {
+        if (record[key] === undefined)
+            continue;
+        const route = readRoute(record[key], key);
+        if (!route.ok)
+            return route;
+        parsed[key] = route.data;
+    }
+    return success({
+        signInRoute: signInRoute.data,
+        postSignInRoute: postSignInRoute.data,
+        ...parsed,
+    });
+}
+function parseSignIn(value) {
+    const record = asRecord(value);
+    if (!record || !hasOnlyKeys(record, ['identifiers'])) {
+        return invalid('Sign-in configuration contains unsupported fields.');
+    }
+    const identifiers = readStringArray(record.identifiers, 'Sign-in identifiers', AUTH_IDENTIFIERS);
+    if (!identifiers.ok)
+        return identifiers;
+    if (identifiers.data.length === 0)
+        return invalid('At least one sign-in identifier is required.');
+    return success({ identifiers: identifiers.data });
+}
+function parseSignUp(value) {
+    const record = asRecord(value);
+    if (!record || !hasOnlyKeys(record, ['requiredFields', 'optionalFields', 'signUpPolicy'])) {
+        return invalid('Sign-up configuration contains unsupported fields.');
+    }
+    const required = readStringArray(record.requiredFields, 'Required sign-up fields', AUTH_SIGN_UP_FIELDS);
+    if (!required.ok)
+        return required;
+    if (required.data.length === 0) {
+        return invalid('Enabled sign-up requires at least one required field.');
+    }
+    const optional = record.optionalFields === undefined
+        ? undefined
+        : readStringArray(record.optionalFields, 'Optional sign-up fields', AUTH_SIGN_UP_FIELDS);
+    if (optional && !optional.ok)
+        return optional;
+    if (record.signUpPolicy !== undefined &&
+        (typeof record.signUpPolicy !== 'string' || !AUTH_SIGN_UP_POLICIES.has(record.signUpPolicy))) {
+        return invalid('Sign-up policy must be autoSignIn or requireVerification.');
+    }
+    return success({
+        requiredFields: required.data,
+        ...(optional ? { optionalFields: optional.data } : {}),
+        ...(typeof record.signUpPolicy === 'string'
+            ? { signUpPolicy: record.signUpPolicy }
+            : {}),
+    });
+}
+function parseOAuth(value) {
+    const record = asRecord(value);
+    if (!record || !hasOnlyKeys(record, ['enabled', 'callbackRoute', 'providers'])) {
+        return invalid('OAuth configuration contains unsupported fields.');
+    }
+    if (typeof record.enabled !== 'boolean')
+        return invalid('OAuth enabled must be a boolean.');
+    const callbackRoute = readCallbackRoute(record.callbackRoute);
+    if (!callbackRoute.ok)
+        return callbackRoute;
+    if (!Array.isArray(record.providers))
+        return invalid('OAuth providers must be an array.');
+    const providers = [];
+    const providerIds = new Set();
+    const credentialRefs = new Map();
+    for (const providerValue of record.providers) {
+        const provider = parseOAuthProvider(providerValue);
+        if (!provider.ok)
+            return provider;
+        if (providerIds.has(provider.data.id)) {
+            return invalid(`OAuth provider "${provider.data.id}" is configured more than once.`);
+        }
+        providerIds.add(provider.data.id);
+        if (provider.data.credentialsRef) {
+            const owner = credentialRefs.get(provider.data.credentialsRef);
+            if (owner && owner !== provider.data.id) {
+                return invalid(`Secret reference "${provider.data.credentialsRef}" is shared by incompatible providers.`);
+            }
+            credentialRefs.set(provider.data.credentialsRef, provider.data.id);
+        }
+        providers.push(provider.data);
+    }
+    return success({ enabled: record.enabled, callbackRoute: callbackRoute.data, providers });
+}
+function parseOAuthProvider(value) {
+    const record = asRecord(value);
+    if (!record ||
+        !hasOnlyKeys(record, [
+            'id',
+            'label',
+            'enabled',
+            'scopes',
+            'redirectTo',
+            'queryParams',
+            'icon',
+            'credentialsRef',
+        ])) {
+        return invalid('OAuth provider configuration contains unsupported fields.');
+    }
+    if (typeof record.id !== 'string')
+        return invalid('OAuth provider id is required.');
+    const definition = getSupabaseOAuthProviderDefinition(record.id);
+    if (!definition)
+        return invalid(`OAuth provider "${record.id}" is not supported.`);
+    if (record.enabled !== undefined && typeof record.enabled !== 'boolean') {
+        return invalid('OAuth provider enabled must be a boolean.');
+    }
+    if (record.label !== undefined && typeof record.label !== 'string') {
+        return invalid('OAuth provider label must be a string.');
+    }
+    const scopes = record.scopes === undefined ? undefined : readStringArray(record.scopes, 'OAuth scopes');
+    if (scopes && !scopes.ok)
+        return scopes;
+    if (record.redirectTo !== undefined && typeof record.redirectTo !== 'string') {
+        return invalid('OAuth redirectTo must be a string.');
+    }
+    const queryParams = readOptionalStringRecord(record.queryParams, 'OAuth queryParams');
+    if (!queryParams.ok)
+        return queryParams;
+    const icon = readOptionalIcon(record.icon);
+    if (!icon.ok)
+        return icon;
+    let credentialsRef;
+    if (record.credentialsRef !== undefined) {
+        if (typeof record.credentialsRef !== 'string') {
+            return invalid('OAuth credentialsRef must be a string.');
+        }
+        const normalized = normalizeSecretRef(record.credentialsRef);
+        if (!normalized.ok)
+            return invalid(normalized.error.message);
+        credentialsRef = normalized.data;
+    }
+    if (record.enabled === true && !credentialsRef) {
+        return invalid(`Enabled OAuth provider "${record.id}" requires credentialsRef.`);
+    }
+    return success({
+        id: definition.id,
+        ...(typeof record.label === 'string' && record.label.trim()
+            ? { label: record.label.trim() }
+            : {}),
+        ...(typeof record.enabled === 'boolean' ? { enabled: record.enabled } : {}),
+        ...(scopes ? { scopes: scopes.data } : {}),
+        ...(typeof record.redirectTo === 'string' && record.redirectTo.trim()
+            ? { redirectTo: record.redirectTo.trim() }
+            : {}),
+        ...(queryParams.data ? { queryParams: queryParams.data } : {}),
+        ...(icon.data ? { icon: icon.data } : {}),
+        ...(credentialsRef ? { credentialsRef } : {}),
+    });
+}
+function parseProfile(value) {
+    const record = asRecord(value);
+    if (!record ||
+        !hasOnlyKeys(record, ['fields', 'table', 'primaryKey', 'createStrategy', 'updateStrategy'])) {
+        return invalid('Profile configuration contains unsupported fields.');
+    }
+    const fields = readStringArray(record.fields, 'Profile fields', AUTH_PROFILE_FIELDS);
+    if (!fields.ok)
+        return fields;
+    if (record.table !== undefined) {
+        if (typeof record.table !== 'string' || !record.table.trim()) {
+            return invalid('Profile table must be a non-empty string.');
+        }
+        if (record.table.trim().toLowerCase() === 'users') {
+            return invalid('Profile table cannot be named users.');
+        }
+    }
+    if (record.primaryKey !== undefined && record.primaryKey !== 'authUserId') {
+        return invalid('Profile primaryKey must be authUserId.');
+    }
+    if (record.createStrategy !== undefined &&
+        (typeof record.createStrategy !== 'string' ||
+            !PROFILE_CREATE_STRATEGIES.has(record.createStrategy))) {
+        return invalid('Profile createStrategy must be trigger, api, or app.');
+    }
+    if (record.updateStrategy !== undefined &&
+        (typeof record.updateStrategy !== 'string' ||
+            !PROFILE_UPDATE_STRATEGIES.has(record.updateStrategy))) {
+        return invalid('Profile updateStrategy must be api or app.');
+    }
+    return success({
+        fields: fields.data,
+        ...(typeof record.table === 'string' ? { table: record.table.trim() } : {}),
+        ...(record.primaryKey === 'authUserId' ? { primaryKey: 'authUserId' } : {}),
+        ...(typeof record.createStrategy === 'string'
+            ? { createStrategy: record.createStrategy }
+            : {}),
+        ...(typeof record.updateStrategy === 'string'
+            ? { updateStrategy: record.updateStrategy }
+            : {}),
+    });
+}
+function cloneOAuthProvider(provider) {
+    return {
+        ...provider,
+        ...(provider.scopes ? { scopes: [...provider.scopes] } : {}),
+        ...(provider.queryParams ? { queryParams: { ...provider.queryParams } } : {}),
+        ...(provider.icon ? { icon: { ...provider.icon } } : {}),
+    };
+}
+function readRoute(value, field) {
+    if (typeof value !== 'string')
+        return invalid(`${field} must be a string.`);
+    const route = value.trim();
+    if (!route || route.includes('://') || route.includes('?') || route.includes('#')) {
+        return invalid(`${field} must be an application route without URL, query, or hash syntax.`);
+    }
+    return success(route);
+}
+function readCallbackRoute(value) {
+    if (typeof value !== 'string')
+        return invalid('OAuth callbackRoute must be a string.');
+    const route = value.trim();
+    if (!route.startsWith('/') ||
+        route.includes('://') ||
+        route.includes('?') ||
+        route.includes('#')) {
+        return invalid('OAuth callbackRoute must be an absolute app path without query or hash syntax.');
+    }
+    return success(route);
+}
+function readStringArray(value, label, allowed) {
+    if (!Array.isArray(value)) {
+        return invalid(`${label} must be a string array.`);
+    }
+    const entries = [];
+    for (const entry of value) {
+        if (typeof entry !== 'string') {
+            return invalid(`${label} must be a string array.`);
+        }
+        const normalizedEntry = entry.trim();
+        if (normalizedEntry)
+            entries.push(normalizedEntry);
+    }
+    const normalized = [...new Set(entries)];
+    if (allowed && normalized.some((entry) => !allowed.has(entry))) {
+        return invalid(`${label} contains an unsupported value.`);
+    }
+    return success(normalized);
+}
+function readOptionalStringRecord(value, label) {
+    if (value === undefined)
+        return success(undefined);
+    const record = asRecord(value);
+    if (!record || Object.values(record).some((entry) => typeof entry !== 'string')) {
+        return invalid(`${label} must contain only string values.`);
+    }
+    return success(Object.fromEntries(Object.entries(record).map(([key, entry]) => [key, String(entry)])));
+}
+function readOptionalIcon(value) {
+    if (value === undefined)
+        return success(undefined);
+    const record = asRecord(value);
+    if (!record ||
+        !hasOnlyKeys(record, ['name', 'provider', 'size', 'color']) ||
+        typeof record.name !== 'string') {
+        return invalid('OAuth provider icon is invalid.');
+    }
+    if (record.provider !== undefined && typeof record.provider !== 'string') {
+        return invalid('OAuth provider icon provider must be a string.');
+    }
+    if (record.size !== undefined &&
+        typeof record.size !== 'string' &&
+        typeof record.size !== 'number') {
+        return invalid('OAuth provider icon size must be a string or number.');
+    }
+    if (record.color !== undefined && typeof record.color !== 'string') {
+        return invalid('OAuth provider icon color must be a string.');
+    }
+    return success({
+        name: record.name,
+        ...(typeof record.provider === 'string' ? { provider: record.provider } : {}),
+        ...(typeof record.size === 'string' || typeof record.size === 'number'
+            ? { size: record.size }
+            : {}),
+        ...(typeof record.color === 'string' ? { color: record.color } : {}),
+    });
+}
+function findForbiddenInlineSecretPath(value, parent = '') {
+    if (Array.isArray(value)) {
+        for (const [index, entry] of value.entries()) {
+            const found = findForbiddenInlineSecretPath(entry, `${parent}[${index}]`);
+            if (found)
+                return found;
+        }
+        return null;
+    }
+    const record = asRecord(value);
+    if (!record)
+        return null;
+    for (const [key, entry] of Object.entries(record)) {
+        const path = parent ? `${parent}.${key}` : key;
+        const normalizedKey = key.replace(/[^a-z0-9]/giu, '').toLowerCase();
+        if (FORBIDDEN_INLINE_SECRET_KEYS.has(normalizedKey))
+            return path;
+        const found = findForbiddenInlineSecretPath(entry, path);
+        if (found)
+            return found;
+    }
+    return null;
+}
+function hasOnlyKeys(record, allowed) {
+    const allowedSet = new Set(allowed);
+    return Object.keys(record).every((key) => allowedSet.has(key));
+}
+function asRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+function success(data) {
+    return { ok: true, data };
+}
+function invalid(message) {
+    return { ok: false, error: { code: 'invalid_config', message } };
+}
+//# sourceMappingURL=authSettings.js.map

package/dist/authSettings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authSettings.js","sourceRoot":"","sources":["../src/authSettings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoB,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC3E,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AA4B9E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;AAC9D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AACjE,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,OAAO;IACP,OAAO;IACP,UAAU;IACV,UAAU;IACV,aAAa;IACb,WAAW;IACX,UAAU;CACX,CAAC,CAAC;AACH,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAC7E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IAClC,OAAO;IACP,OAAO;IACP,UAAU;IACV,WAAW;IACX,UAAU;IACV,aAAa;IACb,WAAW;CACZ,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AACrE,MAAM,yBAAyB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1D,MAAM,4BAA4B,GAAG,IAAI,GAAG,CAAC;IAC3C,QAAQ;IACR,UAAU;IACV,cAAc;IACd,aAAa;IACb,kBAAkB;IAClB,UAAU;IACV,SAAS;IACT,YAAY;IACZ,QAAQ;IACR,aAAa;IACb,gBAAgB;IAChB,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,UAAU,sBAAsB,CAAC,QAAqB;IAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,IAAI,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,iBAAiB,CAAC,EAAE;QAC7C,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACrE,GAAG,CAAC,IAAI,CAAC,MAAM;YACb,CAAC,CAAC;gBACE,MAAM,EAAE;oBACN,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;oBAC/C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc;wBAC5B,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;wBACrD,CAAC,CAAC,EAAE,CAAC;oBACP,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAChF;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC;gBACE,KAAK,EAAE;oBACL,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO;oBAC3B,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;oBACvC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC;iBACxD;aACF;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,IAAI,CAAC,OAAO;YACd,CAAC,CAAC;gBACE,OAAO,EAAE;oBACP,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;oBAChC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3E,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACvF,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxF;aACF;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAqB,EACrB,QAA4B;IAE5B,MAAM,oBAAoB,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,aAAa,CAAC;IAEhE,OAAO;QACL,GAAG,QAAQ;QACX,KAAK,EAAE;YACL,GAAG,QAAQ,CAAC,KAAK;YACjB,IAAI,EAAE;gBACJ,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,IAAI,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE;gBAC1B,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE;gBACzD,GAAG,CAAC,QAAQ,CAAC,MAAM;oBACjB,CAAC,CAAC;wBACE,MAAM,EAAE;4BACN,cAAc,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;4BACnD,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc;gCAChC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE;gCACzD,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY;gCAC9B,CAAC,CAAC,EAAE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE;gCAChD,CAAC,CAAC,EAAE,CAAC;yBACR;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,QAAQ,CAAC,KAAK;oBAChB,CAAC,CAAC;wBACE,KAAK,EAAE;4BACL,OAAO,EAAE,QAAQ,CAAC,KAAK,CAAC,OAAO;4BAC/B,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa;4BAC3C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC;yBAC5D;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,QAAQ,CAAC,OAAO;oBAClB,CAAC,CAAC;wBACE,OAAO,EAAE;4BACP,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;4BACpC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACpE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACnF,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc;gCACjC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE;gCACrD,CAAC,CAAC,EAAE,CAAC;4BACP,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,cAAc;gCACjC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,cAAc,EAAE;gCACrD,CAAC,CAAC,EAAE,CAAC;yBACR;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,aAAa,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,OAAO,CAAC,0DAA0D,aAAa,IAAI,CAAC,CAAC;IAC9F,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IACE,CAAC,MAAM;QACP,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAC3F,CAAC;QACD,OAAO,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,OAAO,CAAC,iDAAiD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;QACnC,OAAO,OAAO,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpF,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChF,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACxF,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAE3C,OAAO,OAAO,CAAC;QACb,KAAK,EAAE,MAAM,CAAC,KAA8B;QAC5C,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG;QACX,aAAa;QACb,aAAa;QACb,cAAc;QACd,qBAAqB;QACrB,UAAU;QACV,iBAAiB;QACjB,mBAAmB;KACpB,CAAC;IACF,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IACjE,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,MAAM,eAAe,GAAG,SAAS,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC;IAC7E,IAAI,CAAC,eAAe,CAAC,EAAE;QAAE,OAAO,eAAe,CAAC;IAEhD,MAAM,cAAc,GAAG;QACrB,aAAa;QACb,cAAc;QACd,qBAAqB;QACrB,UAAU;QACV,mBAAmB;KACX,CAAC;IACX,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,SAAS;QACxC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC;QAC5B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,OAAO,OAAO,CAAC;QACb,WAAW,EAAE,WAAW,CAAC,IAAI;QAC7B,eAAe,EAAE,eAAe,CAAC,IAAI;QACrC,GAAG,MAAM;KACV,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACrD,OAAO,OAAO,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,qBAAqB,EAAE,gBAAgB,CAAC,CAAC;IACjG,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,8CAA8C,CAAC,CAAC;IAClG,OAAO,OAAO,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,IAAqC,EAAE,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO,OAAO,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAC9B,MAAM,CAAC,cAAc,EACrB,yBAAyB,EACzB,mBAAmB,CACpB,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,QAAQ,GACZ,MAAM,CAAC,cAAc,KAAK,SAAS;QACjC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,cAAc,EAAE,yBAAyB,EAAE,mBAAmB,CAAC,CAAC;IAC7F,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAC9C,IACE,MAAM,CAAC,YAAY,KAAK,SAAS;QACjC,CAAC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAC5F,CAAC;QACD,OAAO,OAAO,CAAC,2DAA2D,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,OAAO,CAAC;QACb,cAAc,EAAE,QAAQ,CAAC,IAAI;QAC7B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;YACzC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAA2D,EAAE;YACtF,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;QAC/E,OAAO,OAAO,CAAC,kDAAkD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC5F,MAAM,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IAC9D,IAAI,CAAC,aAAa,CAAC,EAAE;QAAE,OAAO,aAAa,CAAC;IAC5C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,OAAO,CAAC,mCAAmC,CAAC,CAAC;IAE1F,MAAM,SAAS,GAA4B,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,aAAa,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC;QAClC,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC,mBAAmB,QAAQ,CAAC,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAC;QACvF,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC/D,IAAI,KAAK,IAAI,KAAK,KAAK,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACxC,OAAO,OAAO,CACZ,qBAAqB,QAAQ,CAAC,IAAI,CAAC,cAAc,wCAAwC,CAC1F,CAAC;YACJ,CAAC;YACD,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED,OAAO,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,aAAa,EAAE,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IACE,CAAC,MAAM;QACP,CAAC,WAAW,CAAC,MAAM,EAAE;YACnB,IAAI;YACJ,OAAO;YACP,SAAS;YACT,QAAQ;YACR,YAAY;YACZ,aAAa;YACb,MAAM;YACN,gBAAgB;SACjB,CAAC,EACF,CAAC;QACD,OAAO,OAAO,CAAC,2DAA2D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,gCAAgC,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,kCAAkC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC,UAAU;QAAE,OAAO,OAAO,CAAC,mBAAmB,MAAM,CAAC,EAAE,qBAAqB,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QACxE,OAAO,OAAO,CAAC,2CAA2C,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC3F,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IACxC,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC7E,OAAO,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,WAAW,GAAG,wBAAwB,CAAC,MAAM,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC;IACtF,IAAI,CAAC,WAAW,CAAC,EAAE;QAAE,OAAO,WAAW,CAAC;IACxC,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IAE1B,IAAI,cAAkC,CAAC;IACvC,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,OAAO,CAAC,wCAAwC,CAAC,CAAC;QAC3D,CAAC;QACD,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,cAAc,GAAG,UAAU,CAAC,IAAI,CAAC;IACnC,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QAC/C,OAAO,OAAO,CAAC,2BAA2B,MAAM,CAAC,EAAE,4BAA4B,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,OAAO,CAAC;QACb,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE;YACzD,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE;YAChC,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE;YACnE,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE;YAC1C,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IACE,CAAC,MAAM;QACP,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,EAC3F,CAAC;QACD,OAAO,OAAO,CAAC,oDAAoD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7D,OAAO,OAAO,CAAC,2CAA2C,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,OAAO,EAAE,CAAC;YAClD,OAAO,OAAO,CAAC,sCAAsC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,YAAY,EAAE,CAAC;QAC1E,OAAO,OAAO,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IACD,IACE,MAAM,CAAC,cAAc,KAAK,SAAS;QACnC,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;YACxC,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,EACxD,CAAC;QACD,OAAO,OAAO,CAAC,sDAAsD,CAAC,CAAC;IACzE,CAAC;IACD,IACE,MAAM,CAAC,cAAc,KAAK,SAAS;QACnC,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;YACxC,CAAC,yBAAyB,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,EACxD,CAAC;QACD,OAAO,OAAO,CAAC,4CAA4C,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,OAAO,CAAC;QACb,MAAM,EAAE,MAAM,CAAC,IAAI;QACnB,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAqB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;YAC3C,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAgE,EAAE;YAC7F,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;YAC3C,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,cAAgE,EAAE;YAC7F,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,QAA+B;IACzD,OAAO;QACL,GAAG,QAAQ;QACX,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc,EAAE,KAAa;IAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAClF,OAAO,OAAO,CAAC,GAAG,KAAK,mEAAmE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,uCAAuC,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACtB,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QACnB,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,EACnB,CAAC;QACD,OAAO,OAAO,CACZ,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CACtB,KAAc,EACd,KAAa,EACb,OAA6B;IAE7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,OAAO,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,KAA2B,EAAE,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,OAAO,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QACrC,IAAI,eAAe;YAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,IAAI,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,wBAAwB,CAC/B,KAAc,EACd,KAAa;IAEb,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,EAAE,CAAC;QAChF,OAAO,OAAO,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,OAAO,CACZ,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CACvF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,KAAc;IAEd,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IACE,CAAC,MAAM;QACP,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAC/B,CAAC;QACD,OAAO,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACzE,OAAO,OAAO,CAAC,gDAAgD,CAAC,CAAC;IACnE,CAAC;IACD,IACE,MAAM,CAAC,IAAI,KAAK,SAAS;QACzB,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAC/B,CAAC;QACD,OAAO,OAAO,CAAC,sDAAsD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,OAAO,CAAC,6CAA6C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC;QACb,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,GAAG,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YACpE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;YACvB,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrE,CAAC,CAAC;AACL,CAAC;AAED,SAAS,6BAA6B,CAAC,KAAc,EAAE,MAAM,GAAG,EAAE;IAChE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,6BAA6B,CAAC,KAAK,EAAE,GAAG,MAAM,IAAI,KAAK,GAAG,CAAC,CAAC;YAC1E,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAC/C,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACpE,IAAI,4BAA4B,CAAC,GAAG,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QACjE,MAAM,KAAK,GAAG,6BAA6B,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,MAA+B,EAAE,OAA0B;IAC9E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAI,IAAO;IACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,OAAO,CAAC,OAAe;IAC9B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE,CAAC;AACnE,CAAC"}

package/dist/host/auth/projectAuthHealthService.d.ts

@@ -0,0 +1,30 @@
+import type { ProjectAuthHealth } from '../../projectAuthHealth';
+import type { ProjectManager } from '../orchestrator/projectManager';
+import type { ProjectSecretService } from '../secrets/projectSecretService';
+type ProjectAuthHealthManager = Pick<ProjectManager, 'getProjectManifest' | 'getStudioManifest'>;
+export declare class ProjectAuthHealthService {
+    private readonly projectManager;
+    private readonly secretService;
+    constructor(options: {
+        readonly projectManager: ProjectAuthHealthManager;
+        readonly secretService: Pick<ProjectSecretService, 'list'>;
+    });
+    get(input: {
+        readonly projectId: string;
+        readonly environment?: string;
+    }): Promise<ProjectAuthHealthResult>;
+    private readEditableManifest;
+}
+export type ProjectAuthHealthResult = {
+    readonly ok: true;
+    readonly state: 'loaded';
+    readonly data: ProjectAuthHealth;
+} | {
+    readonly ok: false;
+    readonly error: {
+        readonly code: 'manifest_read_failed';
+        readonly message: string;
+    };
+};
+export {};
+//# sourceMappingURL=projectAuthHealthService.d.ts.map

package/dist/host/auth/projectAuthHealthService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"projectAuthHealthService.d.ts","sourceRoot":"","sources":["../../../src/host/auth/projectAuthHealthService.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAEjE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAE5E,KAAK,wBAAwB,GAAG,IAAI,CAAC,cAAc,EAAE,oBAAoB,GAAG,mBAAmB,CAAC,CAAC;AAEjG,qBAAa,wBAAwB;IACnC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAA2B;IAC1D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqC;gBAEvD,OAAO,EAAE;QACnB,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;QAClD,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;KAC5D;IAKK,GAAG,CAAC,KAAK,EAAE;QACf,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,GAAG,OAAO,CAAC,uBAAuB,CAAC;YA8BtB,oBAAoB;CAOnC;AAED,MAAM,MAAM,uBAAuB,GAC/B;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;CAClC,GACD;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;QACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH,CAAC"}