@antelopejs/interface-dms 0.7.4 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,112 @@
 # Changelog
 
+## v0.8.0
+
+[compare changes](https://github.com/AntelopeJS/dms/compare/interface-v0.7.4...v0.8.0)
+
+### 🚀 Enhancements
+
+- **config:** Refuse a production start on public secrets or without the dashboard origin ([#401](https://github.com/AntelopeJS/dms/pull/401))
+- **auth:** Take the client address from the header the hosting platform writes (auth.clientIpHeader) ([#405](https://github.com/AntelopeJS/dms/pull/405))
+- **frontend:** Proxy the storage's signed URLs through the frontend server ([#406](https://github.com/AntelopeJS/dms/pull/406))
+- **tenancy:** ⚠️  Route every member and invite write through changeTenantMembers ([#407](https://github.com/AntelopeJS/dms/pull/407))
+- **frontend:** ⚠️  Compute each frontend module from its config, report served versions ([#408](https://github.com/AntelopeJS/dms/pull/408))
+- **dms-core:** One public hydration check, isHydratingComponent ([#376](https://github.com/AntelopeJS/dms/pull/376))
+- **page:** Route params for header-button availability, breadcrumb parent, one PageLayoutRequest ([#387](https://github.com/AntelopeJS/dms/pull/387))
+- Shared page toolbar for pages with a period or live data ([#351](https://github.com/AntelopeJS/dms/pull/351))
+- **drawer:** Resizable drawers, 600px side default, and side panel row options for row drawers ([#375](https://github.com/AntelopeJS/dms/pull/375))
+- **table-view:** Declare watches on the forms a table view generates ([#379](https://github.com/AntelopeJS/dms/pull/379))
+- **interface-dms:** FrontendModulesChanged event for late frontend modules ([#382](https://github.com/AntelopeJS/dms/pull/382))
+- **data-types:** Filter a tags column on the rows holding a tag ([#380](https://github.com/AntelopeJS/dms/pull/380))
+- **table-view:** ⚠️  Adopt @antelopejs/interface-data-api 0.3 ([#389](https://github.com/AntelopeJS/dms/pull/389))
+- **realtime:** Scope page messages to the tenant they are about ([#353](https://github.com/AntelopeJS/dms/pull/353))
+- **automation:** Configurable texts, tone, tenant and templates for the DMS automation nodes ([#337](https://github.com/AntelopeJS/dms/pull/337))
+- **kpi-card:** Show the comparison value and follow the selected comparison ([#352](https://github.com/AntelopeJS/dms/pull/352))
+- **layout-banners:** Scope layout banners to the application's pages by default ([#348](https://github.com/AntelopeJS/dms/pull/348))
+- **row-navigation:** Steps follow the table's full result, live tables and the kanban ([#375](https://github.com/AntelopeJS/dms/pull/375), [#398](https://github.com/AntelopeJS/dms/pull/398))
+- **layout:** Settings from the account menu only, profile picture in the sidebar ([#374](https://github.com/AntelopeJS/dms/pull/374))
+- **form:** Dependent relation options and field value rules ([#346](https://github.com/AntelopeJS/dms/pull/346))
+- **table-view:** Require a table's list for the actions reached from its rows ([#371](https://github.com/AntelopeJS/dms/pull/371))
+- **automation:** Dry-run the DMS actions in a builder test run ([#388](https://github.com/AntelopeJS/dms/pull/388))
+
+### 🩹 Fixes
+
+- **deps:** Require the tenant admission barrier and access evaluation contract ([#367](https://github.com/AntelopeJS/dms/pull/367))
+- **frontend:** Run on @antelopejs/dms-frontend 0.7 ([#368](https://github.com/AntelopeJS/dms/pull/368))
+- **startup:** Answer 503 with Retry-After until the DMS schemas are bound ([#369](https://github.com/AntelopeJS/dms/pull/369))
+- **tenant-lifecycle:** Refuse admission under a barrier with 409, not 500 ([#409](https://github.com/AntelopeJS/dms/pull/409))
+- **auth:** A session outlives the browser only when written persistent ([#377](https://github.com/AntelopeJS/dms/pull/377))
+- **layout:** Store a signed-in user's footer language switch on their profile ([#383](https://github.com/AntelopeJS/dms/pull/383))
+- **skills:** Make dms-dev.sh stop, status and restart work on Windows Git Bash ([#384](https://github.com/AntelopeJS/dms/pull/384))
+- **layout:** Translated close / select labels and a readable phone header ([#386](https://github.com/AntelopeJS/dms/pull/386))
+- **notifications:** Stop Mark read clicks from landing on Delete in the inbox ([#342](https://github.com/AntelopeJS/dms/pull/342))
+- **grid:** Lay a row nested in a cell out on its own children ([#350](https://github.com/AntelopeJS/dms/pull/350))
+- Onboarding SSR read, and row action, row token and action-target container fixes for block-built pages ([#332](https://github.com/AntelopeJS/dms/pull/332))
+- **chart:** Chart and widget fixes for block-built dashboards ([#334](https://github.com/AntelopeJS/dms/pull/334))
+- **save-bar:** Lift the toasts above a save bar on the bottom edge ([#372](https://github.com/AntelopeJS/dms/pull/372))
+- **table-view:** Row containers, grouped display, cards, bulk row runs, wide tables and calendar period comparisons ([#344](https://github.com/AntelopeJS/dms/pull/344))
+- **realtime:** Share one realtime connection between a browser's tabs ([#335](https://github.com/AntelopeJS/dms/pull/335))
+- **form:** Generic form and i18n fixes (nested options, secret rotation, group labels, module-default note) ([#333](https://github.com/AntelopeJS/dms/pull/333))
+- **data-types:** Keep formatters out of component setup and log dev errors ([#338](https://github.com/AntelopeJS/dms/pull/338))
+- **data-types:** Read a null array as empty in include and exclude filters ([#341](https://github.com/AntelopeJS/dms/pull/341))
+- **form:** Keep a refused submit's field error while its value is unchanged ([#360](https://github.com/AntelopeJS/dms/pull/360))
+- **form:** Label a relation's ids from its select route, in the picker and the filter chips ([#378](https://github.com/AntelopeJS/dms/pull/378))
+- **table:** Write a number field's unit wherever its value is drawn ([#381](https://github.com/AntelopeJS/dms/pull/381))
+- **modules:** Modules page and module store polish (installed tiles, store view, working copies) ([#345](https://github.com/AntelopeJS/dms/pull/345))
+- **format:** Read durations as written, let a number step drive the steppers, group every figure ([#391](https://github.com/AntelopeJS/dms/pull/391))
+- **form:** Address suggestions, relation add entry, confirm Close and date picker close ([#392](https://github.com/AntelopeJS/dms/pull/392))
+- **roles:** Preview a role as a non-owner member, and tell resolvers it is a preview ([#356](https://github.com/AntelopeJS/dms/pull/356))
+- **form:** Forms and KeyValueList follow the container's width in drawers and modals ([#375](https://github.com/AntelopeJS/dms/pull/375), [#399](https://github.com/AntelopeJS/dms/pull/399))
+- **table:** Count the archive without agreeing with a noun, let a table view name it ([#394](https://github.com/AntelopeJS/dms/pull/394))
+- **form:** Show a read-only list as a table of values, a URL as its image ([#395](https://github.com/AntelopeJS/dms/pull/395))
+- **dialog:** Closing any dialog gives the page its clicks at once ([#375](https://github.com/AntelopeJS/dms/pull/375), [#400](https://github.com/AntelopeJS/dms/pull/400))
+- **data-types:** Multiple relation include; date greater than excludes the picked day; order filters skip empty values; typed chip editor ([#363](https://github.com/AntelopeJS/dms/pull/363))
+- **table-view:** Combine views with tabs, date chips for relative filters, and keep the tab on reload ([#358](https://github.com/AntelopeJS/dms/pull/358))
+- **form:** Narrow date fields and repeater rows, and relation labels in change notes ([#361](https://github.com/AntelopeJS/dms/pull/361))
+- **frontend:** Refresh counts after a kanban move, no header sort on a hand-ordered table ([#362](https://github.com/AntelopeJS/dms/pull/362))
+- **frontend:** Configured add label in every placement, bulk toast counts what the route changed ([#364](https://github.com/AntelopeJS/dms/pull/364))
+- **table-view:** Warn at registration about a quick filter with no values to pick ([#370](https://github.com/AntelopeJS/dms/pull/370))
+- **form:** Create, cancel and save behaviour of forms, section scroll, error summary ([#343](https://github.com/AntelopeJS/dms/pull/343))
+- No layout shift from the live toggle, fetched banners, KPI and table skeletons, and live rows ([#354](https://github.com/AntelopeJS/dms/pull/354))
+- **table-view:** Links open on the table's defaults, global nav badges, kept view search ([#365](https://github.com/AntelopeJS/dms/pull/365))
+- **table-view:** Tab and view counters count what a click would list ([#373](https://github.com/AntelopeJS/dms/pull/373))
+- **table-view:** Generic TableView fixes from block-built pages ([#336](https://github.com/AntelopeJS/dms/pull/336))
+- **table-view:** Per-action access in forms, relative dates while hydrating, expanded rows ([#385](https://github.com/AntelopeJS/dms/pull/385))
+
+### 💅 Refactors
+
+- **startup:** Rely on the api startup gate instead of a DMS one ([#402](https://github.com/AntelopeJS/dms/pull/402))
+- **table-view:** Keep a table view's row actions schema in its own module ([#393](https://github.com/AntelopeJS/dms/pull/393))
+- **dms:** ⚠️  Remove the compatibility paths of #119 and #172, restore the migration guides ([#390](https://github.com/AntelopeJS/dms/pull/390), [#119](https://github.com/AntelopeJS/dms/issues/119), [#172](https://github.com/AntelopeJS/dms/issues/172))
+
+### 📖 Documentation
+
+- **file-storage:** Uploads stop at 100 MB at the Cloudflare edge on AntelopeJS Cloud ([#410](https://github.com/AntelopeJS/dms/pull/410))
+- **migration:** Note the KPI compared-figure default and include on multiple relations ([#415](https://github.com/AntelopeJS/dms/pull/415))
+
+### 🏡 Chore
+
+- **release:** @antelopejs/dms v0.9.6 ([0ccc9b57](https://github.com/AntelopeJS/dms/commit/0ccc9b57))
+- **release:** @antelopejs/dms v0.9.7 ([ababaeda](https://github.com/AntelopeJS/dms/commit/ababaeda))
+- **release:** @antelopejs/dms v0.9.8 ([75daeb05](https://github.com/AntelopeJS/dms/commit/75daeb05))
+
+### ✅ Tests
+
+- Pin file-storage-local 0.1.11, mongodb 1.4.4 and api with interface-api 0.0.16 in the harness ([#411](https://github.com/AntelopeJS/dms/pull/411))
+- **realtime:** Bind the verified tenant as the auth decorator does ([#414](https://github.com/AntelopeJS/dms/pull/414))
+
+#### ⚠️ Breaking Changes
+
+- **tenancy:** ⚠️  Route every member and invite write through changeTenantMembers ([#407](https://github.com/AntelopeJS/dms/pull/407))
+- **frontend:** ⚠️  Compute each frontend module from its config, report served versions ([#408](https://github.com/AntelopeJS/dms/pull/408))
+- **table-view:** ⚠️  Adopt @antelopejs/interface-data-api 0.3 ([#389](https://github.com/AntelopeJS/dms/pull/389))
+- **dms:** ⚠️  Remove the compatibility paths of #119 and #172, restore the migration guides ([#390](https://github.com/AntelopeJS/dms/pull/390), [#119](https://github.com/AntelopeJS/dms/issues/119), [#172](https://github.com/AntelopeJS/dms/issues/172))
+
+### ❤️ Contributors
+
+- Antony Rizzitelli <rizzitelli.antony@pm.me>
+- Maxime Westhoven ([@mwesto](http://github.com/mwesto))
+
 ## v0.7.4
 
 [compare changes](https://github.com/AntelopeJS/dms/compare/interface-v0.7.3...v0.7.4)

package/dist/auth/index.d.ts

@@ -40,17 +40,17 @@ export declare namespace internal {
 /**
  * Authentication decorator that returns raw user data, ignoring email validation.
  */
-export declare const AuthRawUser: (validator?: import("@antelopejs/interface-auth").AuthValidator<TenantTokenInput, boolean | User> | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export declare const AuthRawUser: (validator?: ((data: TenantTokenInput) => boolean | User | Promise<boolean | User>) | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
 /**
  * Authentication decorator that provides the `User` instance and enforces email validation
  * if required by the configuration.
  */
-export declare const AuthUser: (validator?: import("@antelopejs/interface-auth").AuthValidator<TenantTokenInput, boolean | User> | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export declare const AuthUser: (validator?: ((data: TenantTokenInput) => boolean | User | Promise<boolean | User>) | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
 /**
  * Optional authentication decorator that returns User | undefined without throwing 401
  * Use this for routes that work both when authenticated and unauthenticated
  */
-export declare const IfAuthUser: (validator?: import("@antelopejs/interface-auth").AuthValidator<TenantTokenInput | undefined, User | undefined> | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export declare const IfAuthUser: (validator?: ((data: TenantTokenInput | undefined) => User | Promise<User | undefined> | undefined) | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
 /**
  * Authentication decorator that requires the authenticated user to be a platform
  * owner (`User.owner === true`). Throws 401 when no token is provided and 403

package/dist/auth/index.js

@@ -21,13 +21,15 @@ exports.getExternalIdentities = getExternalIdentities;
 exports.announceRegistration = announceRegistration;
 exports.createSession = createSession;
 const interface_api_1 = require("@antelopejs/interface-api");
-const interface_auth_1 = require("@antelopejs/interface-auth");
 const interface_core_1 = require("@antelopejs/interface-core");
 const logging_1 = require("@antelopejs/interface-core/logging");
 const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
 const hooks_1 = require("../hooks");
 const db_1 = require("./db");
 const fire_and_forget_1 = require("../utils/fire-and-forget");
+const jwt_auth_decorator_1 = require("./internal/jwt-auth-decorator");
+const request_authenticators_1 = require("./internal/request-authenticators");
+const constants_1 = require("../constants");
 __exportStar(require("./request-authenticators"), exports);
 /**
  * Sending account e-mails and reading a user agent are DMS behaviour, not
@@ -59,6 +61,10 @@ async function authenticateRequestUser(ctx) {
     if (!validated || typeof validated === "boolean") {
         throw new interface_api_1.HTTPResult(HTTP_UNAUTHORIZED, UNAUTHORIZED_MESSAGE);
     }
+    (0, request_authenticators_1.bindVerifiedRequestPrincipal)(ctx, {
+        userId: validated._id,
+        tenantId: decoded.tenantId || constants_1.DEFAULT_TENANT_ID,
+    });
     return validated;
 }
 /**
@@ -76,8 +82,7 @@ var internal;
 /**
  * Authentication decorator that returns raw user data, ignoring email validation.
  */
-exports.AuthRawUser = (0, interface_auth_1.CreateAuthDecorator)({
-    source: (req, _) => req.headers.authorization?.split(" ")[1],
+exports.AuthRawUser = (0, jwt_auth_decorator_1.CreateJwtAuthDecorator)({
     authenticator: internal.AuthUserAuthenticator,
     validator: internal.AuthRawUserValidator,
 });
@@ -85,8 +90,7 @@ exports.AuthRawUser = (0, interface_auth_1.CreateAuthDecorator)({
  * Authentication decorator that provides the `User` instance and enforces email validation
  * if required by the configuration.
  */
-exports.AuthUser = (0, interface_auth_1.CreateAuthDecorator)({
-    source: (req, _) => req.headers.authorization?.split(" ")[1],
+exports.AuthUser = (0, jwt_auth_decorator_1.CreateJwtAuthDecorator)({
     authenticator: internal.AuthUserAuthenticator,
     validator: internal.AuthUserValidator,
 });
@@ -94,8 +98,7 @@ exports.AuthUser = (0, interface_auth_1.CreateAuthDecorator)({
  * Optional authentication decorator that returns User | undefined without throwing 401
  * Use this for routes that work both when authenticated and unauthenticated
  */
-exports.IfAuthUser = (0, interface_auth_1.CreateAuthDecorator)({
-    source: (req, _) => req.headers.authorization?.split(" ")[1],
+exports.IfAuthUser = (0, jwt_auth_decorator_1.CreateJwtAuthDecorator)({
     authenticator: internal.IfAuthUserAuthenticator,
     validator: internal.IfAuthUserValidator,
 });
@@ -110,8 +113,7 @@ exports.IfAuthUser = (0, interface_auth_1.CreateAuthDecorator)({
  * @returns Authentication decorator
  */
 const AuthOwnerOnly = () => {
-    const decorator = (0, interface_auth_1.CreateAuthDecorator)({
-        source: (req, _) => req.headers.authorization?.split(" ")[1],
+    const decorator = (0, jwt_auth_decorator_1.CreateJwtAuthDecorator)({
         authenticator: internal.AuthUserAuthenticator,
         validator: (data) => internal.AuthOwnerOnlyValidator(data),
     });

package/dist/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAwDA,0DAYC;AA4ND,oDAqCC;AAQD,sDAIC;AA6CD,oDAoBC;AAED,sCA2BC;AA/aD,6DAA4E;AAC5E,+DAAiE;AACjE,+DAA+D;AAC/D,gEAA6D;AAC7D,6FAAqE;AACrE,oCAA8C;AAC9C,6BAOc;AACd,8DAAyD;AAGzD,2DAAyC;AAEzC;;;;;;GAMG;AACU,QAAA,aAAa,GACxB,IAAA,kCAAiB,GAA0C,CAAC;AAE9D,gBAAgB;AACH,QAAA,wBAAwB,GACnC,IAAA,kCAAiB,GAEd,CAAC;AAEN,gBAAgB;AACH,QAAA,cAAc,GACzB,IAAA,kCAAiB,GAA0C,CAAC;AAE9D,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAC5C,MAAM,+BAA+B,GAAG,qCAAqC,CAAC;AAQ9E;;;;;GAKG;AACI,KAAK,UAAU,uBAAuB,CAC3C,GAAmB;IAEnB,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC;IAC1D,MAAM,KAAK,GACT,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,SAAS,EAAE,CAAC;QACjD,MAAM,IAAI,0BAAU,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,IAAiB,QAAQ,CAsBxB;AAtBD,WAAiB,QAAQ;IACV,8BAAqB,GAChC,IAAA,kCAAiB,GAAkD,CAAC;IAEzD,gCAAuB,GAClC,IAAA,kCAAiB,GAEd,CAAC;IAEO,6BAAoB,GAC/B,IAAA,kCAAiB,GAA8C,CAAC;IAErD,0BAAiB,GAC5B,IAAA,kCAAiB,GAA8C,CAAC;IAErD,4BAAmB,GAC9B,IAAA,kCAAiB,GAEd,CAAC;IAEO,+BAAsB,GACjC,IAAA,kCAAiB,GAA8C,CAAC;AACpE,CAAC,EAtBgB,QAAQ,wBAAR,QAAQ,QAsBxB;AAED;;GAEG;AACU,QAAA,WAAW,GAAG,IAAA,oCAAmB,EAAC;IAC7C,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,aAAa,EAAE,QAAQ,CAAC,qBAAqB;IAC7C,SAAS,EAAE,QAAQ,CAAC,oBAAoB;CACzC,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,QAAQ,GAAG,IAAA,oCAAmB,EAAC;IAC1C,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,aAAa,EAAE,QAAQ,CAAC,qBAAqB;IAC7C,SAAS,EAAE,QAAQ,CAAC,iBAAiB;CACtC,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,UAAU,GAAG,IAAA,oCAAmB,EAAC;IAC5C,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,aAAa,EAAE,QAAQ,CAAC,uBAAuB;IAC/C,SAAS,EAAE,QAAQ,CAAC,mBAAmB;CACxC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACI,MAAM,aAAa,GAAG,GAAG,EAAE;IAChC,MAAM,SAAS,GAAG,IAAA,oCAAmB,EAAC;QACpC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC5D,aAAa,EAAE,QAAQ,CAAC,qBAAqB;QAC7C,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC;KAC3D,CAAC,CAAC;IACH,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC,CAAC;AAPW,QAAA,aAAa,iBAOxB;AAEF;;;;;;GAMG;AACU,QAAA,mBAAmB,GAC9B,IAAA,kCAAiB,GAMd,CAAC;AAEN;;;;;;GAMG;AACU,QAAA,oBAAoB,GAC/B,IAAA,kCAAiB,GAMd,CAAC;AAEN;;;;GAIG;AACU,QAAA,oBAAoB,GAC/B,IAAA,kCAAiB,GAEd,CAAC;AAEO,QAAA,sBAAsB,GACjC,IAAA,kCAAiB,GAEd,CAAC;AAEO,QAAA,sBAAsB,GAAG,IAAA,kCAAiB,GAOpD,CAAC;AAES,QAAA,6BAA6B,GACxC,IAAA,kCAAiB,GAAwD,CAAC;AAE/D,QAAA,6BAA6B,GACxC,IAAA,kCAAiB,GAAiD,CAAC;AAExD,QAAA,YAAY,GACvB,IAAA,kCAAiB,GAA+C,CAAC;AAEtD,QAAA,wBAAwB,GACnC,IAAA,kCAAiB,GAAiC,CAAC;AACxC,QAAA,oBAAoB,GAC/B,IAAA,kCAAiB,GAAiC,CAAC;AAcxC,QAAA,oBAAoB,GAC/B,IAAA,kCAAiB,GAOd,CAAC;AAEN;;;;GAIG;AACU,QAAA,YAAY,GAAG,IAAA,kCAAiB,GAAiC,CAAC;AAkB/E,SAAS,qBAAqB,CAC5B,QAA8B,EAC9B,MAAc;IAEd,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,0BAAU,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACI,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,QAA+B;IAE/B,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,8BAAyB,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,IAAA,4BAAuB,EAChC,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,iBAAiB,CAC3B,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC;YACjB,GAAG,EAAE,EAAE;YACP,MAAM;YACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,KAAK;YACL,SAAS,EAAE,GAAG;YACd,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,WAAW,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,MAAM,WAAW,CAAC;QAC9B,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,MAAc;IAEd,OAAO,IAAA,wCAAQ,EAAC,8BAAyB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,SAAoB,EACpB,IAAU;IAEV,IAAA,+BAAa,EAAC,IAAA,qBAAa,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAE1E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM;aACpB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;aACzB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;QAEnC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAA,+BAAa,EACX,IAAA,gCAAwB,EAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EACzD,kCAAkC,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,KAAK,CACX,sDAAsD,IAAI,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACI,KAAK,UAAU,oBAAoB,CACxC,SAAoB,EACpB,IAAU,EACV,QAAgB;IAEhB,IAAA,+BAAa,EACX,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,EACtC,+BAA+B,CAChC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAA,oBAAY,EAAC,YAAI,CAAC,eAAe,EAAE;YACvC,QAAQ;YACR,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,YAA0B,EAC1B,MAAc,EACd,SAAiB,EACjB,EAAU;IAEV,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAc,EAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC;SACxD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAErC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;QACpC,MAAM;QACN,SAAS,EAAE,SAAS,IAAI,EAAE;QAC1B,EAAE,EAAE,EAAE,IAAI,EAAE;QACZ,OAAO,EAAE,OAAO,IAAI,SAAS;QAC7B,EAAE,EAAE,EAAE,IAAI,SAAS;QACnB,UAAU;QACV,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,GAAG;QACd,YAAY,EAAE,GAAG;KAClB,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AA0DA,0DAgBC;AAwND,oDAqCC;AAQD,sDAIC;AA6CD,oDAoBC;AAED,sCA2BC;AAjbD,6DAA4E;AAC5E,+DAA+D;AAC/D,gEAA6D;AAC7D,6FAAqE;AACrE,oCAA8C;AAC9C,6BAOc;AACd,8DAAyD;AAEzD,sEAAuE;AACvE,8EAAiF;AACjF,4CAAiD;AAEjD,2DAAyC;AAEzC;;;;;;GAMG;AACU,QAAA,aAAa,GACxB,IAAA,kCAAiB,GAA0C,CAAC;AAE9D,gBAAgB;AACH,QAAA,wBAAwB,GACnC,IAAA,kCAAiB,GAEd,CAAC;AAEN,gBAAgB;AACH,QAAA,cAAc,GACzB,IAAA,kCAAiB,GAA0C,CAAC;AAE9D,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAC5C,MAAM,+BAA+B,GAAG,qCAAqC,CAAC;AAQ9E;;;;;GAKG;AACI,KAAK,UAAU,uBAAuB,CAC3C,GAAmB;IAEnB,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC;IAC1D,MAAM,KAAK,GACT,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,SAAS,EAAE,CAAC;QACjD,MAAM,IAAI,0BAAU,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;IAChE,CAAC;IACD,IAAA,qDAA4B,EAAC,GAAG,EAAE;QAChC,MAAM,EAAE,SAAS,CAAC,GAAG;QACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,6BAAiB;KAChD,CAAC,CAAC;IACH,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;GAEG;AACH,IAAiB,QAAQ,CAsBxB;AAtBD,WAAiB,QAAQ;IACV,8BAAqB,GAChC,IAAA,kCAAiB,GAAkD,CAAC;IAEzD,gCAAuB,GAClC,IAAA,kCAAiB,GAEd,CAAC;IAEO,6BAAoB,GAC/B,IAAA,kCAAiB,GAA8C,CAAC;IAErD,0BAAiB,GAC5B,IAAA,kCAAiB,GAA8C,CAAC;IAErD,4BAAmB,GAC9B,IAAA,kCAAiB,GAEd,CAAC;IAEO,+BAAsB,GACjC,IAAA,kCAAiB,GAA8C,CAAC;AACpE,CAAC,EAtBgB,QAAQ,wBAAR,QAAQ,QAsBxB;AAED;;GAEG;AACU,QAAA,WAAW,GAAG,IAAA,2CAAsB,EAAC;IAChD,aAAa,EAAE,QAAQ,CAAC,qBAAqB;IAC7C,SAAS,EAAE,QAAQ,CAAC,oBAAoB;CACzC,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,QAAQ,GAAG,IAAA,2CAAsB,EAAC;IAC7C,aAAa,EAAE,QAAQ,CAAC,qBAAqB;IAC7C,SAAS,EAAE,QAAQ,CAAC,iBAAiB;CACtC,CAAC,CAAC;AAEH;;;GAGG;AACU,QAAA,UAAU,GAAG,IAAA,2CAAsB,EAAC;IAC/C,aAAa,EAAE,QAAQ,CAAC,uBAAuB;IAC/C,SAAS,EAAE,QAAQ,CAAC,mBAAmB;CACxC,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACI,MAAM,aAAa,GAAG,GAAG,EAAE;IAChC,MAAM,SAAS,GAAG,IAAA,2CAAsB,EAAC;QACvC,aAAa,EAAE,QAAQ,CAAC,qBAAqB;QAC7C,SAAS,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,CAAC;KAC3D,CAAC,CAAC;IACH,OAAO,SAAS,EAAE,CAAC;AACrB,CAAC,CAAC;AANW,QAAA,aAAa,iBAMxB;AAEF;;;;;;GAMG;AACU,QAAA,mBAAmB,GAC9B,IAAA,kCAAiB,GAMd,CAAC;AAEN;;;;;;GAMG;AACU,QAAA,oBAAoB,GAC/B,IAAA,kCAAiB,GAMd,CAAC;AAEN;;;;GAIG;AACU,QAAA,oBAAoB,GAC/B,IAAA,kCAAiB,GAEd,CAAC;AAEO,QAAA,sBAAsB,GACjC,IAAA,kCAAiB,GAEd,CAAC;AAEO,QAAA,sBAAsB,GAAG,IAAA,kCAAiB,GAOpD,CAAC;AAES,QAAA,6BAA6B,GACxC,IAAA,kCAAiB,GAAwD,CAAC;AAE/D,QAAA,6BAA6B,GACxC,IAAA,kCAAiB,GAAiD,CAAC;AAExD,QAAA,YAAY,GACvB,IAAA,kCAAiB,GAA+C,CAAC;AAEtD,QAAA,wBAAwB,GACnC,IAAA,kCAAiB,GAAiC,CAAC;AACxC,QAAA,oBAAoB,GAC/B,IAAA,kCAAiB,GAAiC,CAAC;AAcxC,QAAA,oBAAoB,GAC/B,IAAA,kCAAiB,GAOd,CAAC;AAEN;;;;GAIG;AACU,QAAA,YAAY,GAAG,IAAA,kCAAiB,GAAiC,CAAC;AAkB/E,SAAS,qBAAqB,CAC5B,QAA8B,EAC9B,MAAc;IAEd,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,0BAAU,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACI,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,QAA+B;IAE/B,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,8BAAyB,CAAC,CAAC;IAClD,MAAM,EAAE,GAAG,IAAA,4BAAuB,EAChC,QAAQ,CAAC,QAAQ,EACjB,QAAQ,CAAC,iBAAiB,CAC3B,CAAC;IACF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,MAAM,CAAC;YACjB,GAAG,EAAE,EAAE;YACP,MAAM;YACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;YAC7C,KAAK;YACL,SAAS,EAAE,GAAG;YACd,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;IAAC,OAAO,WAAW,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,KAAK;YAAE,MAAM,WAAW,CAAC;QAC9B,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CACnC,MAAc;IAEd,OAAO,IAAA,wCAAQ,EAAC,8BAAyB,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,SAAoB,EACpB,IAAU;IAEV,IAAA,+BAAa,EAAC,IAAA,qBAAa,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC,CAAC;IAE1E,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM;aACpB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC;aACzB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,GAAG,CAAC,CAAC;QAEnC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,IAAA,+BAAa,EACX,IAAA,gCAAwB,EAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,EACzD,kCAAkC,CACnC,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,KAAK,CACX,sDAAsD,IAAI,CAAC,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACI,KAAK,UAAU,oBAAoB,CACxC,SAAoB,EACpB,IAAU,EACV,QAAgB;IAEhB,IAAA,+BAAa,EACX,qBAAqB,CAAC,SAAS,EAAE,IAAI,CAAC,EACtC,+BAA+B,CAChC,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,IAAA,oBAAY,EAAC,YAAI,CAAC,eAAe,EAAE;YACvC,QAAQ;YACR,MAAM,EAAE,IAAI,CAAC,GAAG;YAChB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;SAChB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,iBAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,aAAa,CACjC,YAA0B,EAC1B,MAAc,EACd,SAAiB,EACjB,EAAU;IAEV,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAc,EAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC;SACxD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAErC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;QACpC,MAAM;QACN,SAAS,EAAE,SAAS,IAAI,EAAE;QAC1B,EAAE,EAAE,EAAE,IAAI,EAAE;QACZ,OAAO,EAAE,OAAO,IAAI,SAAS;QAC7B,EAAE,EAAE,EAAE,IAAI,SAAS;QACnB,UAAU;QACV,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,GAAG;QACd,YAAY,EAAE,GAAG;KAClB,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC"}

package/dist/auth/internal/jwt-auth-decorator.d.ts

@@ -0,0 +1,20 @@
+interface VerifiedToken {
+    tenantId?: string;
+}
+type Authenticator<T> = (token: string | undefined) => T | Promise<T>;
+type Validator<T, R> = (data: T) => R | Promise<R>;
+/**
+ * `CreateAuthDecorator` for the DMS bearer token, which also binds the
+ * verified user and tenant to the request: `getRequestTenantId` then answers
+ * the tenant of a checked credential, never one read from an unverified token.
+ * Applies to a parameter, a property or a class, like `CreateAuthDecorator`;
+ * a validator passed to the decorator replaces the configured one, and then
+ * binds nothing.
+ *
+ * @internal
+ */
+export declare function CreateJwtAuthDecorator<T extends VerifiedToken | undefined, R>(callbacks: {
+    authenticator: Authenticator<T>;
+    validator: Validator<T, R>;
+}): (validator?: Validator<T, R> | undefined) => import("@antelopejs/interface-core/decorators").ClassDecorator<import("@antelopejs/interface-core/decorators").Class<any, any[]>> & import("@antelopejs/interface-core/decorators").PropertyDecorator & import("@antelopejs/interface-core/decorators").ParameterDecorator;
+export {};

package/dist/auth/internal/jwt-auth-decorator.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CreateJwtAuthDecorator = CreateJwtAuthDecorator;
+const interface_api_1 = require("@antelopejs/interface-api");
+const decorators_1 = require("@antelopejs/interface-core/decorators");
+const constants_1 = require("../../constants");
+const request_authenticators_1 = require("./request-authenticators");
+const CLASS_PROVIDER_DESCRIPTION = "authentication-class-provider";
+function bearerToken(ctx) {
+    const header = ctx.rawRequest?.headers?.authorization;
+    return typeof header === "string" ? header.split(" ")[1] : undefined;
+}
+function isVerifiedUser(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        typeof value._id === "string");
+}
+/**
+ * `CreateAuthDecorator` for the DMS bearer token, which also binds the
+ * verified user and tenant to the request: `getRequestTenantId` then answers
+ * the tenant of a checked credential, never one read from an unverified token.
+ * Applies to a parameter, a property or a class, like `CreateAuthDecorator`;
+ * a validator passed to the decorator replaces the configured one, and then
+ * binds nothing.
+ *
+ * @internal
+ */
+function CreateJwtAuthDecorator(callbacks) {
+    return (0, decorators_1.MakeParameterAndPropertyAndClassDecorator)((target, key, index, validator) => {
+        const validate = validator ?? callbacks.validator;
+        const provider = async (ctx) => {
+            const data = await callbacks.authenticator(bearerToken(ctx));
+            const result = await validate(data);
+            // A replacement validator may skip the signature check: only the
+            // configured one, which verifies the token, binds its tenant.
+            if (!validator && data && isVerifiedUser(result)) {
+                (0, request_authenticators_1.bindVerifiedRequestPrincipal)(ctx, {
+                    userId: result._id,
+                    tenantId: data.tenantId || constants_1.DEFAULT_TENANT_ID,
+                });
+            }
+            return result;
+        };
+        if (key === undefined) {
+            (0, interface_api_1.SetParameterProvider)(target.prototype, Symbol(CLASS_PROVIDER_DESCRIPTION), undefined, provider);
+            return;
+        }
+        (0, interface_api_1.SetParameterProvider)(target, key, index, provider);
+    });
+}
+//# sourceMappingURL=jwt-auth-decorator.js.map

package/dist/auth/internal/jwt-auth-decorator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-auth-decorator.js","sourceRoot":"","sources":["../../../src/auth/internal/jwt-auth-decorator.ts"],"names":[],"mappings":";;AAsCA,wDAgCC;AArED,6DAAiE;AACjE,sEAAkG;AAClG,+CAAoD;AACpD,qEAAwE;AAExE,MAAM,0BAA0B,GAAG,+BAA+B,CAAC;AASnE,SAAS,WAAW,CAAC,GAAmB;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,EAAE,OAAO,EAAE,aAAa,CAAC;IACtD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAQ,KAA2B,CAAC,GAAG,KAAK,QAAQ,CACrD,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,sBAAsB,CAGpC,SAA0E;IAC1E,OAAO,IAAA,sDAAyC,EAC9C,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,SAA2B,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,SAAS,IAAI,SAAS,CAAC,SAAS,CAAC;QAClD,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAmB,EAAc,EAAE;YACzD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAC7D,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpC,iEAAiE;YACjE,8DAA8D;YAC9D,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,IAAA,qDAA4B,EAAC,GAAG,EAAE;oBAChC,MAAM,EAAE,MAAM,CAAC,GAAG;oBAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,6BAAiB;iBAC7C,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC;QACF,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;YACtB,IAAA,oCAAoB,EACjB,MAAgC,CAAC,SAAS,EAC3C,MAAM,CAAC,0BAA0B,CAAC,EAClC,SAAS,EACT,QAAQ,CACT,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAA,oCAAoB,EAAC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;IACrD,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/auth/internal/request-authenticators.d.ts

@@ -1,6 +1,18 @@
 import { type RequestContext } from "@antelopejs/interface-api";
 import type { RequestAuthenticator, RequestPrincipal } from "../request-authenticators";
+interface RequestIdentity {
+    userId: string;
+    tenantId: string;
+}
 /** @internal Read only a successfully authenticated, unchanged request's tenant. */
 export declare function getAuthenticatedRequestTenantId(ctx: RequestContext): string | undefined;
 /** @internal Revalidate on every call; failures poison tenant resolution for this request. */
 export declare function resolveRequestPrincipal(ctx: RequestContext, authenticators: readonly RequestAuthenticator[], authenticateJwt: (token: string) => Promise<RequestPrincipal>): Promise<RequestPrincipal>;
+/**
+ * @internal Records the identity a JWT auth decorator has just verified, so
+ * `getRequestTenantId` reads the tenant of a checked credential. A request
+ * already bound to another identity, or to a failed authentication, or whose
+ * credential changed since, is refused.
+ */
+export declare function bindVerifiedRequestPrincipal(ctx: RequestContext, identity: RequestIdentity): void;
+export {};

package/dist/auth/internal/request-authenticators.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.getAuthenticatedRequestTenantId = getAuthenticatedRequestTenantId;
 exports.resolveRequestPrincipal = resolveRequestPrincipal;
+exports.bindVerifiedRequestPrincipal = bindVerifiedRequestPrincipal;
 const interface_api_1 = require("@antelopejs/interface-api");
 const HTTP_UNAUTHORIZED = 401;
 const requestPrincipals = new WeakMap();
@@ -79,4 +80,25 @@ async function verifyRequestPrincipal(ctx, authenticators, authenticateJwt) {
     requestPrincipals.set(request, { authorization, principal: snapshot });
     return principal;
 }
+/**
+ * @internal Records the identity a JWT auth decorator has just verified, so
+ * `getRequestTenantId` reads the tenant of a checked credential. A request
+ * already bound to another identity, or to a failed authentication, or whose
+ * credential changed since, is refused.
+ */
+function bindVerifiedRequestPrincipal(ctx, identity) {
+    const request = ctx.rawRequest;
+    const authorization = request.headers.authorization;
+    const previous = requestPrincipals.get(request);
+    if (previous) {
+        if (!previous.principal ||
+            previous.authorization !== authorization ||
+            previous.principal.userId !== identity.userId ||
+            previous.principal.tenantId !== identity.tenantId) {
+            throw unauthorized();
+        }
+        return;
+    }
+    requestPrincipals.set(request, { authorization, principal: { ...identity } });
+}
 //# sourceMappingURL=request-authenticators.js.map

package/dist/auth/internal/request-authenticators.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-authenticators.js","sourceRoot":"","sources":["../../../src/auth/internal/request-authenticators.ts"],"names":[],"mappings":";;AAiCA,0EAYC;AA8BD,0DAkBC;AA5FD,6DAA4E;AAM5E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAY9B,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAGlC,CAAC;AACJ,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAGvC,CAAC;AAEJ,SAAS,YAAY;IACnB,OAAO,IAAI,0BAAU,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;AAC3D,CAAC;AAED,oFAAoF;AACpF,SAAgB,+BAA+B,CAC7C,GAAmB;IAEnB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IACE,CAAC,KAAK,CAAC,SAAS;QAChB,KAAK,CAAC,aAAa,KAAK,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,EAC5D,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,aAAiC;IACxD,MAAM,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,MAAM,YAAY,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CACtB,SAA2B,EAC3B,QAA0B;IAE1B,IACE,OAAO,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,QAAQ;QACxC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG;QACrB,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QACtC,CAAC,SAAS,CAAC,QAAQ,EACnB,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,IACE,QAAQ;QACR,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,GAAG;YACrC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC,EAC3C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,8FAA8F;AACvF,KAAK,UAAU,uBAAuB,CAC3C,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GACX,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAC/B,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAC7D,CAAC;IACF,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,EAAE,CAAC;YAC1D,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAA+B,EAAE,aAAa,EAAE,CAAC;IAC5D,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,IACE,QAAQ;QACR,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,aAAa,CAAC,EACjE,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACjD,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAC1B,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,YAAY,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM;QAC/B,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;QACvC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,IACE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK;QACxC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,aAAa,EAC/C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9E,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"request-authenticators.js","sourceRoot":"","sources":["../../../src/auth/internal/request-authenticators.ts"],"names":[],"mappings":";;AAiCA,0EAYC;AA8BD,0DAkBC;AA4CD,oEAmBC;AA3JD,6DAA4E;AAM5E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAY9B,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAGlC,CAAC;AACJ,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAGvC,CAAC;AAEJ,SAAS,YAAY;IACnB,OAAO,IAAI,0BAAU,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;AAC3D,CAAC;AAED,oFAAoF;AACpF,SAAgB,+BAA+B,CAC7C,GAAmB;IAEnB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IACE,CAAC,KAAK,CAAC,SAAS;QAChB,KAAK,CAAC,aAAa,KAAK,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,EAC5D,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,aAAiC;IACxD,MAAM,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,MAAM,YAAY,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CACtB,SAA2B,EAC3B,QAA0B;IAE1B,IACE,OAAO,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,QAAQ;QACxC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG;QACrB,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QACtC,CAAC,SAAS,CAAC,QAAQ,EACnB,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,IACE,QAAQ;QACR,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,GAAG;YACrC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC,EAC3C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,8FAA8F;AACvF,KAAK,UAAU,uBAAuB,CAC3C,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GACX,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAC/B,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAC7D,CAAC;IACF,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,EAAE,CAAC;YAC1D,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAA+B,EAAE,aAAa,EAAE,CAAC;IAC5D,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,IACE,QAAQ;QACR,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,aAAa,CAAC,EACjE,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACjD,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAC1B,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,YAAY,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM;QAC/B,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;QACvC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,IACE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK;QACxC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,aAAa,EAC/C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9E,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,4BAA4B,CAC1C,GAAmB,EACnB,QAAyB;IAEzB,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,IACE,CAAC,QAAQ,CAAC,SAAS;YACnB,QAAQ,CAAC,aAAa,KAAK,aAAa;YACxC,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;YAC7C,QAAQ,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EACjD,CAAC;YACD,MAAM,YAAY,EAAE,CAAC;QACvB,CAAC;QACD,OAAO;IACT,CAAC;IACD,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,GAAG,QAAQ,EAAE,EAAE,CAAC,CAAC;AAChF,CAAC"}

package/dist/base/activity-feed.d.ts

@@ -179,8 +179,8 @@ export declare const ActivityFeedSchema: z.ZodObject<{
         icon?: string | undefined;
         meta?: BlockText[] | undefined;
         to?: string | undefined;
-        detail?: BlockText | undefined;
         tone?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+        detail?: BlockText | undefined;
         unread?: boolean | undefined;
     }, {
         title: BlockText;
@@ -191,8 +191,8 @@ export declare const ActivityFeedSchema: z.ZodObject<{
         icon?: string | undefined;
         meta?: BlockText[] | undefined;
         to?: string | undefined;
-        detail?: BlockText | undefined;
         tone?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+        detail?: BlockText | undefined;
         unread?: boolean | undefined;
     }>, "many">>;
     count: z.ZodOptional<z.ZodNumber>;
@@ -232,8 +232,8 @@ export declare const ActivityFeedSchema: z.ZodObject<{
         icon?: string | undefined;
         meta?: BlockText[] | undefined;
         to?: string | undefined;
-        detail?: BlockText | undefined;
         tone?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+        detail?: BlockText | undefined;
         unread?: boolean | undefined;
     }[] | undefined;
     maxItems?: number | undefined;
@@ -242,7 +242,6 @@ export declare const ActivityFeedSchema: z.ZodObject<{
     fetchUrl?: string | undefined;
     fetchUrlMethod?: import("./types").HttpMethod | undefined;
     periodScope?: string | undefined;
-    wrap?: boolean | undefined;
     mono?: boolean | undefined;
     realtimeTopic?: string | string[] | undefined;
     fillHeight?: boolean | undefined;
@@ -256,6 +255,7 @@ export declare const ActivityFeedSchema: z.ZodObject<{
     }[] | undefined;
     groupByDay?: boolean | undefined;
     visibleItems?: number | undefined;
+    wrap?: boolean | undefined;
     empty?: {
         title: string;
         description?: string | undefined;
@@ -271,8 +271,8 @@ export declare const ActivityFeedSchema: z.ZodObject<{
         icon?: string | undefined;
         meta?: BlockText[] | undefined;
         to?: string | undefined;
-        detail?: BlockText | undefined;
         tone?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+        detail?: BlockText | undefined;
         unread?: boolean | undefined;
     }[] | undefined;
     maxItems?: number | undefined;
@@ -282,7 +282,6 @@ export declare const ActivityFeedSchema: z.ZodObject<{
     fetchUrlMethod?: import("./types").HttpMethod | undefined;
     card?: boolean | undefined;
     periodScope?: string | undefined;
-    wrap?: boolean | undefined;
     mono?: boolean | undefined;
     realtimeTopic?: string | string[] | undefined;
     fillHeight?: boolean | undefined;
@@ -296,6 +295,7 @@ export declare const ActivityFeedSchema: z.ZodObject<{
     }[] | undefined;
     groupByDay?: boolean | undefined;
     visibleItems?: number | undefined;
+    wrap?: boolean | undefined;
     empty?: {
         title: string;
         description?: string | undefined;

package/dist/base/block-registry/types.d.ts

@@ -223,6 +223,22 @@ export interface BlockTypeDefinition {
     fixedOptions?: Record<string, unknown>;
     /** Whether the factory takes a leading controller class before its options. */
     controllerArg?: boolean;
+    /**
+     * The children an editor places in a new block of this type, as the
+     * module-side helper places them in code: `pageToolbar()`'s `LiveToggle`
+     * and `PeriodSelector` with their defaults. An editor reads them here
+     * rather than keeping its own copy of those defaults.
+     */
+    initialChildren?: BlockInitialChild[];
+}
+/** One child a new block starts with (see `BlockTypeDefinition.initialChildren`). */
+export interface BlockInitialChild {
+    /** The child id under its parent, the one roles name it by. */
+    id: string;
+    /** The child's block type, a key of the catalog (`LiveToggle`). */
+    type: string;
+    /** The child's options, JSON-serializable. */
+    options: Record<string, unknown>;
 }
 /** A block type as reported by `ListBlockTypes`, with its schemas described. */
 export interface BlockTypeDescriptor extends Omit<BlockTypeDefinition, "schema" | "childMeta"> {

package/dist/base/block-types.d.ts

@@ -25,6 +25,7 @@ import "./kpi-card";
 import "./live-toggle";
 import "./meter";
 import "./nav-card-grid";
+import "./page-toolbar";
 import "./period-selector";
 import "./placeholder";
 import "./resource-form-schema";

package/dist/base/block-types.js

@@ -41,6 +41,7 @@ require("./kpi-card");
 require("./live-toggle");
 require("./meter");
 require("./nav-card-grid");
+require("./page-toolbar");
 require("./period-selector");
 require("./placeholder");
 require("./resource-form-schema");

package/dist/base/block-types.js.map

@@ -1 +1 @@
-{"version":3,"file":"block-types.js","sourceRoot":"","sources":["../../src/base/block-types.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;GAWG;AACH,2BAAyB;AACzB,oBAAkB;AAClB,kBAAgB;AAChB,oCAAkC;AAClC,wBAAsB;AACtB,wBAAsB;AACtB,yBAAuB;AACvB,+BAA6B;AAC7B,kBAAgB;AAChB,mBAAiB;AACjB,4BAA0B;AAC1B,sBAAoB;AACpB,yBAAuB;AACvB,mBAAiB;AACjB,2BAAyB;AACzB,6BAA2B;AAC3B,yBAAuB;AACvB,kCAAgC;AAChC,qBAAmB;AACnB,mBAAiB;AACjB,wBAAsB;AACtB,iBAAe;AACf,+BAA6B;AAC7B,2BAAyB;AAEzB,2EAA2E;AAC3E,6DAA6D;AAC7D,iDAA+B;AAC/B,2DAAyC;AACzC,4DAA0C;AAC1C,yDAAuC"}
+{"version":3,"file":"block-types.js","sourceRoot":"","sources":["../../src/base/block-types.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA;;;;;;;;;;;GAWG;AACH,2BAAyB;AACzB,oBAAkB;AAClB,kBAAgB;AAChB,oCAAkC;AAClC,wBAAsB;AACtB,wBAAsB;AACtB,yBAAuB;AACvB,+BAA6B;AAC7B,kBAAgB;AAChB,mBAAiB;AACjB,4BAA0B;AAC1B,sBAAoB;AACpB,yBAAuB;AACvB,mBAAiB;AACjB,2BAAyB;AACzB,0BAAwB;AACxB,6BAA2B;AAC3B,yBAAuB;AACvB,kCAAgC;AAChC,qBAAmB;AACnB,mBAAiB;AACjB,wBAAsB;AACtB,iBAAe;AACf,+BAA6B;AAC7B,2BAAyB;AAEzB,2EAA2E;AAC3E,6DAA6D;AAC7D,iDAA+B;AAC/B,2DAAyC;AACzC,4DAA0C;AAC1C,yDAAuC"}

package/dist/base/chart-card.d.ts

@@ -24,6 +24,12 @@ export interface ChartCardProps extends BaseComponentProps {
     currencyCode?: string;
     valuePrecision?: ValuePrecision;
     showDelta?: boolean;
+    /**
+     * Treat an increase as bad, for a metric where lower is better (errors,
+     * latency): a rising delta shows in the error colour, a falling one in the
+     * success colour. The arrow still follows the raw direction.
+     */
+    invert?: boolean;
     /**
      * The card's own legend, "Period" and "Comparison" in its head, drawn when
      * the route answers a comparison. Defaults to `true`.
@@ -36,6 +42,12 @@ export interface ChartCardProps extends BaseComponentProps {
      */
     showSeriesLegend?: boolean;
     primaryLabel?: string;
+    /**
+     * The legend's name for the comparison series. Optional: with a
+     * `periodScope`, it names the comparison its selector applies ("Previous
+     * year"), else "Comparison". With no comparison selected, the card draws no
+     * change, no "vs" figure and no comparison series.
+     */
     comparisonLabel?: string;
 }
 export interface ChartCardBuilderOptions extends ChartCardProps {
@@ -61,6 +73,7 @@ export declare const ChartCardSchema: z.ZodObject<{
     valueFormat: z.ZodOptional<z.ZodEnum<["number", "currency", "percent", "compact"]>>;
     currencyCode: z.ZodOptional<z.ZodString>;
     showDelta: z.ZodDefault<z.ZodBoolean>;
+    invert: z.ZodOptional<z.ZodBoolean>;
     showLegend: z.ZodDefault<z.ZodBoolean>;
     showSeriesLegend: z.ZodOptional<z.ZodBoolean>;
     primaryLabel: z.ZodOptional<z.ZodString>;
@@ -78,6 +91,7 @@ export declare const ChartCardSchema: z.ZodObject<{
     realtimeTopic?: string | string[] | undefined;
     valueFormat?: "number" | "percent" | "compact" | "currency" | undefined;
     currencyCode?: string | undefined;
+    invert?: boolean | undefined;
     showSeriesLegend?: boolean | undefined;
     primaryLabel?: string | undefined;
     comparisonLabel?: string | undefined;
@@ -94,6 +108,7 @@ export declare const ChartCardSchema: z.ZodObject<{
     valueFormat?: "number" | "percent" | "compact" | "currency" | undefined;
     currencyCode?: string | undefined;
     showDelta?: boolean | undefined;
+    invert?: boolean | undefined;
     showSeriesLegend?: boolean | undefined;
     primaryLabel?: string | undefined;
     comparisonLabel?: string | undefined;

package/dist/base/chart-card.js

@@ -97,6 +97,10 @@ exports.ChartCardSchema = zod_1.z.object({
         group: "appearance",
         widget: "switch",
     }),
+    invert: (0, block_registry_1.ui)(zod_1.z
+        .boolean()
+        .optional()
+        .describe("Treat a falling value as the good outcome."), { label: "Invert variation", group: "behavior", widget: "switch" }),
     showLegend: (0, block_registry_1.ui)(zod_1.z.boolean().default(true), {
         label: "Show legend",
         group: "appearance",

package/dist/base/chart-card.js.map

@@ -1 +1 @@
-{"version":3,"file":"chart-card.js","sourceRoot":"","sources":["../../src/base/chart-card.ts"],"names":[],"mappings":";;;AA6EA,8BAgBC;AA7FD,4CAAgE;AAChE,6BAAwB;AACxB,qDAK0B;AAC1B,mCAA+E;AAC/E,4DAA6D;AAC7D,uCAAqD;AACrD,gEAAsE;AAEtE,uCAA0C;AA0C1C,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AACnD,MAAM,eAAe,GAAG,OAAO,CAAC;AAChC;;;GAGG;AACH,MAAM,2BAA2B,GAAG;IAClC,OAAO;IACP,aAAa;IACb,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,aAAa;IACb,eAAe;CAChB,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,SAAS,CACvB,OAAiC;IAEjC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,IAAK,EAA8B,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,4BAAgB,CAClC,yBAAyB,CAC1B;SACE,OAAO,CAAC,IAAsB,CAAC;SAC/B,IAAI,CAAC;QACJ,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,YAAY;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,iBAAiB;KACrC,CAAC,CAAC;IACL,OAAO,IAAA,0CAAwB,EAC7B,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EACvD,IAAI,CAAC,aAAa,CACnB,CAAC;AACJ,CAAC;AAED,qEAAqE;AACxD,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;QAC9C,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,SAAS;KACjB,CAAC;IACF,WAAW,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACrC,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,IAAI,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC9B,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,KAAK,EAAE,IAAA,mBAAE,EACP,IAAA,qCAAoB,GAAa,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EACvE;QACE,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,iCAAiB;QAC7B,QAAQ,EAAE,2BAA2B;KACtC,CACF;IACD,QAAQ,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QAClC,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,YAAY;QACpB,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,aAAa;KAC5B,CAAC;IACF,cAAc,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,UAAU,CAAC,iBAAU,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtD,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,WAAW,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACrC,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,UAAU;KAClB,CAAC;IACF,aAAa,EAAE,IAAA,kCAAwB,GAAE;IACzC,WAAW,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,IAAI,CAAC,qBAAa,CAAC,CAAC,QAAQ,EAAE,EAAE;QAChD,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,WAAW;KACpB,CAAC;IACF,YAAY,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACtC,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,YAAY;KACpB,CAAC;IACF,0EAA0E;IAC1E,0EAA0E;IAC1E,SAAS,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACvC,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,UAAU,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACxC,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,gBAAgB,EAAE,IAAA,mBAAE,EAClB,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EACjE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CACvE;IACD,YAAY,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACtC,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,SAAS;KACjB,CAAC;IACF,eAAe,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACzC,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,SAAS;KACjB,CAAC;CACH,CAAoD,CAAC;AAEtD,IAAA,kCAAiB,EAAC;IAChB,IAAI,EAAE,WAAW;IACjB,aAAa,EAAE,yBAAyB;IACxC,MAAM,EAAE,uBAAe;IACvB,IAAI,EAAE;QACJ,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,sDAAsD;QACnE,KAAK,EAAE,eAAe;KACvB;CACF,CAAC,CAAC"}
+{"version":3,"file":"chart-card.js","sourceRoot":"","sources":["../../src/base/chart-card.ts"],"names":[],"mappings":";;;AAyFA,8BAgBC;AAzGD,4CAAgE;AAChE,6BAAwB;AACxB,qDAK0B;AAC1B,mCAA+E;AAC/E,4DAA6D;AAC7D,uCAAqD;AACrD,gEAAsE;AAEtE,uCAA0C;AAsD1C,MAAM,yBAAyB,GAAG,gBAAgB,CAAC;AACnD,MAAM,eAAe,GAAG,OAAO,CAAC;AAChC;;;GAGG;AACH,MAAM,2BAA2B,GAAG;IAClC,OAAO;IACP,aAAa;IACb,YAAY;IACZ,UAAU;IACV,gBAAgB;IAChB,aAAa;IACb,eAAe;CAChB,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,SAAS,CACvB,OAAiC;IAEjC,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,IAAK,EAA8B,CAAC;IACtE,MAAM,OAAO,GAAG,IAAI,4BAAgB,CAClC,yBAAyB,CAC1B;SACE,OAAO,CAAC,IAAsB,CAAC;SAC/B,IAAI,CAAC;QACJ,IAAI,EAAE,IAAI,CAAC,KAAK,IAAI,YAAY;QAChC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,iBAAiB;KACrC,CAAC,CAAC;IACL,OAAO,IAAA,0CAAwB,EAC7B,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EACvD,IAAI,CAAC,aAAa,CACnB,CAAC;AACJ,CAAC;AAED,qEAAqE;AACxD,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE;QAC9C,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,SAAS;KACjB,CAAC;IACF,WAAW,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACrC,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,UAAU;KACnB,CAAC;IACF,IAAI,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC9B,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,KAAK,EAAE,IAAA,mBAAE,EACP,IAAA,qCAAoB,GAAa,CAAC,QAAQ,CAAC,2BAA2B,CAAC,EACvE;QACE,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,iCAAiB;QAC7B,QAAQ,EAAE,2BAA2B;KACtC,CACF;IACD,QAAQ,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QAClC,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,YAAY;QACpB,aAAa,EAAE,MAAM;QACrB,YAAY,EAAE,aAAa;KAC5B,CAAC;IACF,cAAc,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,UAAU,CAAC,iBAAU,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtD,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,WAAW,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACrC,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,UAAU;KAClB,CAAC;IACF,aAAa,EAAE,IAAA,kCAAwB,GAAE;IACzC,WAAW,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,IAAI,CAAC,qBAAa,CAAC,CAAC,QAAQ,EAAE,EAAE;QAChD,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,WAAW;KACpB,CAAC;IACF,YAAY,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACtC,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,YAAY;KACpB,CAAC;IACF,0EAA0E;IAC1E,0EAA0E;IAC1E,SAAS,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACvC,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,MAAM,EAAE,IAAA,mBAAE,EACR,OAAC;SACE,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,4CAA4C,CAAC,EACzD,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CACnE;IACD,UAAU,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;QACxC,KAAK,EAAE,aAAa;QACpB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,gBAAgB,EAAE,IAAA,mBAAE,EAClB,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC,EACjE,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,CACvE;IACD,YAAY,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACtC,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,SAAS;KACjB,CAAC;IACF,eAAe,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE;QACzC,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,SAAS;KACjB,CAAC;CACH,CAAoD,CAAC;AAEtD,IAAA,kCAAiB,EAAC;IAChB,IAAI,EAAE,WAAW;IACjB,aAAa,EAAE,yBAAyB;IACxC,MAAM,EAAE,uBAAe;IACvB,IAAI,EAAE;QACJ,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,iBAAiB;QACvB,WAAW,EAAE,sDAAsD;QACnE,KAAK,EAAE,eAAe;KACvB;CACF,CAAC,CAAC"}