@aotter/mantle-cloudflare 0.0.11-alpha.11

package/dist/mount/mountServerEndpoints.js

@@ -0,0 +1,503 @@
+import { DiagnosticError, HTTP_STATUS_BY_CODE, MCP_HINT_KEYWORD, VIEW_PARAMS_RESERVED, isMediaMcpHint, redactForWire, runtimeDiagnostic, } from "@aotter/mantle-spec";
+import { ViewParamCoercionError, coerceViewParams, evaluateAuthAll, matchPath, } from "@aotter/mantle-runtime";
+import { indexHtml } from "@aotter/mantle-admin-ui";
+import { ADMIN_ROLE_SET } from "../auth/createAuth.js";
+import { AOTTER_FAVICON_SVG } from "../assets/aotterFavicon.js";
+const [PAGE_PARAM, SHOW_PARAM] = VIEW_PARAMS_RESERVED;
+/** Mount HTTP Triggers + Views + the Better Auth admin surface.
+ *  HTTP Trigger bearer-token authentication is delegated to the OAuth
+ *  provider lib (via `createMcpApiHandler`) — if a Trigger needs
+ *  identity, route it under an MCP `apiHandler` instead of a Hono
+ *  catch-all. */
+export function mountServerEndpoints(app, ref) {
+    for (const t of ref.manifests) {
+        if (t.kind !== "Trigger")
+            continue;
+        const source = t.spec.source;
+        if (source.kind !== "http")
+            continue;
+        const { method, path } = source;
+        const honoPath = openApiToHono(path);
+        const triggerName = t.metadata.name;
+        app.on(method, honoPath, async (c) => {
+            const runtime = await ref.get();
+            const waitUntil = readWaitUntil(c);
+            return handleHttpTrigger(c.req.raw, runtime, ref.auth, triggerName, path, waitUntil);
+        });
+    }
+    for (const v of ref.manifests) {
+        if (v.kind !== "View")
+            continue;
+        const viewName = v.metadata.name;
+        app.get(`/api/views/${viewName}`, async (c) => {
+            const runtime = await ref.get();
+            const waitUntil = readWaitUntil(c);
+            return handleViewRequest(c.req.raw, runtime, viewName, ref.auth, waitUntil);
+        });
+    }
+    mountAdminBetterAuth(app, ref, ref.auth);
+}
+function mountAdminBetterAuth(app, ref, auth) {
+    const spa = () => new Response(indexHtml, {
+        headers: { "content-type": "text/html; charset=utf-8" },
+    });
+    app.get("/favicon.svg", () => new Response(AOTTER_FAVICON_SVG, {
+        headers: {
+            "content-type": "image/svg+xml; charset=utf-8",
+            "cache-control": "public, max-age=86400",
+        },
+    }));
+    // Public read-only manifest of registered sign-in methods. The admin
+    // SPA hits this on sign-in-page mount so it can render per-method
+    // sections without baking the method list into its build. No secrets
+    // or sender refs — only the `kind` strings.
+    //
+    // `Cache-Control: no-store` because the list reflects deploy-time
+    // config; if the operator rolls a new method, a CDN-cached response
+    // would silently misroute the sign-in UI until the cache expires.
+    app.get("/api/auth/methods", () => Response.json({ methods: auth.methods }, {
+        headers: { "cache-control": "no-store" },
+    }));
+    // Better Auth handles the rest of `/api/auth/*` (sign-in, callback,
+    // session, magic-link, OTP, OAuth provider routes). Owned by the SDK
+    // so consumers don't have to wire — and can't accidentally register a
+    // catch-all BEFORE the specific routes above and silently swallow
+    // them. Hono matches in registration order; this catch-all sits last.
+    app.all("/api/auth/*", (c) => auth.handler(c.req.raw));
+    // Well-known OAuth endpoints (RFC 8414 + RFC 9728) used to be
+    // forwarded to Better Auth's mcp() plugin here. With the carve-out
+    // to @cloudflare/workers-oauth-provider (PR #193), the top-level
+    // `OAuthProvider` serves AS metadata and per-resource PRM
+    // automatically — adopters wire it via `createOAuthProvider` +
+    // `createMcpApiHandler` from the package index. No SDK-level
+    // forwarder needed in `mountServerEndpoints`.
+    for (const path of [
+        "/admin",
+        "/admin/",
+        "/admin/sign-in",
+        "/admin/c/:collection",
+        "/admin/approvals",
+        "/admin/preferences",
+        "/admin/settings",
+    ]) {
+        app.get(path, spa);
+    }
+    // Pre-derive the collections projection — `ref.manifests` is
+    // immutable post-boot, so the filter / Set / mediaFields work doesn't
+    // need to repeat per request.
+    const schemas = ref.manifests.filter((m) => m.kind === "Schema");
+    const translatedParents = new Set();
+    for (const s of schemas) {
+        if (s.spec.translates)
+            translatedParents.add(s.spec.translates.parent);
+    }
+    const collections = schemas
+        .filter((s) => !s.spec.translates)
+        .map((s) => ({
+        name: s.metadata.name,
+        title: s.spec.title,
+        description: s.spec.description ?? null,
+        lifecycle: s.spec.lifecycle ?? "simple",
+        hasTranslations: translatedParents.has(s.metadata.name),
+        mediaFields: mediaFieldsForCollection(s, schemas),
+    }));
+    const guarded = (method, path, body) => {
+        app.on(method.toUpperCase(), path, async (c) => {
+            const gate = await readAdminGate(c, auth);
+            if (gate.kind === "unauth")
+                return adminUnauthenticated(c, path);
+            if (gate.kind === "forbidden")
+                return adminNotStaff(c, path, gate.login);
+            return body(c, gate);
+        });
+    };
+    guarded("get", "/admin/api/me", (_c, gate) => jsonResponse(200, { login: gate.login, role: gate.role, userId: gate.userId }));
+    guarded("get", "/admin/api/collections", () => jsonResponse(200, { collections }));
+    guarded("get", "/admin/api/site", async (c) => {
+        const runtime = await ref.get();
+        const site = await runtime.siteConfig.load();
+        const url = new URL(c.req.url);
+        return jsonResponse(200, {
+            ...site,
+            publicUrl: site.origin || url.origin,
+            mcpUrl: `${url.origin}/mcp/staff`,
+            staffMcpUrl: `${url.origin}/mcp/staff`,
+            userMcpUrl: `${url.origin}/mcp`,
+        });
+    });
+    guarded("get", "/admin/api/entries", async (c) => {
+        const collection = c.req.query("collection");
+        if (!collection) {
+            return jsonResponse(400, {
+                ok: false,
+                diagnostic: runtimeDiagnostic({
+                    code: "INPUT_VALIDATION_FAILED",
+                    severity: "error",
+                    path: "GET /admin/api/entries",
+                    expected: "?collection=<name> query parameter",
+                    message: "Missing `collection` query parameter.",
+                }),
+            });
+        }
+        const runtime = await ref.get();
+        const rawLimit = c.req.query("limit");
+        const parsedLimit = rawLimit ? Number.parseInt(rawLimit, 10) : NaN;
+        // Admin pagination needs the cursored shape — `executePage` returns
+        // `{ rows, nextCursor? }`. `execute()` is the flat-array variant
+        // for app code.
+        const result = await runtime.listEntries.executePage({
+            collection,
+            status: c.req.query("status"),
+            limit: Number.isFinite(parsedLimit) ? parsedLimit : undefined,
+            cursor: c.req.query("cursor") ?? undefined,
+        });
+        const items = result.rows.map((row) => ({
+            id: row.id,
+            collection: row.collection,
+            locale: row.locale ?? null,
+            status: row.status,
+            version: row.version,
+            title: row.data.title,
+            updated_at: row.updatedAt,
+        }));
+        return jsonResponse(200, { items, next_cursor: result.nextCursor ?? null });
+    });
+    // Three-step direct-upload flow: POST /uploads (capability) → caller
+    // PUTs directly to R2 S3 (Worker bypassed) → POST /uploads/:id/commit.
+    const MEDIA_UPLOADS_PATH = "/admin/api/media/uploads";
+    const MEDIA_COMMIT_PATH = "/admin/api/media/uploads/:uploadId/commit";
+    guarded("post", MEDIA_UPLOADS_PATH, async (c) => {
+        const runtime = await ref.get();
+        const media = runtime.media;
+        if (!media)
+            return mediaNotConfiguredResponse(`POST ${MEDIA_UPLOADS_PATH}`);
+        const body = (await c.req.raw.json().catch(() => ({})));
+        if (typeof body.filename !== "string" ||
+            typeof body.mimeType !== "string" ||
+            typeof body.byteSize !== "number") {
+            return jsonResponse(400, {
+                ok: false,
+                diagnostic: runtimeDiagnostic({
+                    code: "INPUT_VALIDATION_FAILED",
+                    severity: "error",
+                    path: `POST ${MEDIA_UPLOADS_PATH}`,
+                    expected: "{ filename: string, mimeType: string, byteSize: number }",
+                }),
+            });
+        }
+        const { filename, mimeType, byteSize } = body;
+        return runUseCase(`POST ${MEDIA_UPLOADS_PATH}`, () => media.createUpload.execute({
+            filename,
+            mimeType,
+            byteSize,
+            alt: typeof body.alt === "string" ? body.alt : undefined,
+            caption: typeof body.caption === "string" ? body.caption : undefined,
+            purpose: typeof body.purpose === "string" ? body.purpose : undefined,
+        }));
+    });
+    guarded("post", MEDIA_COMMIT_PATH, async (c) => {
+        const runtime = await ref.get();
+        const media = runtime.media;
+        if (!media)
+            return mediaNotConfiguredResponse(`POST ${MEDIA_COMMIT_PATH}`);
+        // Hono only invokes this handler when the route matched, so the
+        // path param is always present at runtime.
+        const uploadId = c.req.param("uploadId");
+        const body = (await c.req.raw.json().catch(() => ({})));
+        return runUseCase(`POST ${MEDIA_COMMIT_PATH}`, () => media.commitUpload.execute({
+            uploadId,
+            alt: typeof body.alt === "string" ? body.alt : undefined,
+            caption: typeof body.caption === "string" ? body.caption : undefined,
+            checksum: typeof body.checksum === "string" ? body.checksum : undefined,
+        }));
+    });
+}
+async function readAdminGate(c, auth) {
+    const session = await auth.getSession(c.req.raw);
+    if (!session)
+        return { kind: "unauth" };
+    const role = session.user.role ?? null;
+    const login = session.user.githubLogin ?? null;
+    if (!role || !ADMIN_ROLE_SET.has(role)) {
+        return { kind: "forbidden", login };
+    }
+    return {
+        kind: "ok",
+        userId: session.user.id,
+        login,
+        role: role,
+    };
+}
+async function handleHttpTrigger(req, runtime, auth, triggerName, triggerPath, waitUntil) {
+    const trigger = runtime.triggersByName.get(triggerName);
+    if (!trigger) {
+        return jsonError({ status: 500, code: "INTERNAL_ERROR", message: `Trigger '${triggerName}' missing post-boot.` });
+    }
+    const procName = trigger.spec.target.procedure;
+    const procedure = runtime.proceduresByName.get(procName);
+    if (!procedure) {
+        return jsonError({ status: 500, code: "INTERNAL_ERROR", message: `Procedure '${procName}' missing post-boot.` });
+    }
+    const url = new URL(req.url);
+    const params = matchPath(triggerPath, url.pathname) ?? {};
+    const body = await readBody(req);
+    // Spread order matters: URL path params are authoritative for the
+    // resource identifier (a `DELETE /entries/{id}` body MUST NOT spoof
+    // `id`). Body fields fill in non-path inputs only.
+    const input = { ...body, ...params };
+    const ctx = await buildHandlerContext(req, auth, waitUntil);
+    const result = await runtime.invokeProcedure.execute({
+        procedure,
+        input,
+        ctx,
+        pathPrefix: `${req.method} ${triggerPath}`,
+    });
+    if (result.ok) {
+        return jsonResponse(200, { ok: true, data: result.data });
+    }
+    const status = HTTP_STATUS_BY_CODE[result.diagnostic.code] ?? 500;
+    return jsonResponse(status, { ok: false, diagnostic: result.diagnostic });
+}
+async function handleViewRequest(req, runtime, viewName, auth, waitUntil) {
+    const view = runtime.viewsByName.get(viewName);
+    if (!view) {
+        return jsonError({ status: 500, code: "INTERNAL_ERROR", message: `View '${viewName}' missing post-boot.` });
+    }
+    const viewPath = `GET /api/views/${viewName}`;
+    // Resolve caller identity FIRST and evaluate `requires.auth.all`
+    // BEFORE param coercion. Two reasons:
+    //   (1) a param-coercion 400 against an auth-gated View would leak
+    //       the View's parameter contract to an unauthorized caller —
+    //       this matters for both anonymous probes AND authenticated
+    //       users without the required role.
+    //   (2) the UNAUTHENTICATED branch in ExecuteViewUseCase only fires
+    //       when ctx is undefined, so passing a guest ctx for no-session
+    //       would collapse 401 and 403 into the same AUTH_DENIED.
+    const ctx = await buildViewCtx(req, auth, waitUntil);
+    if (view.spec.requires?.auth) {
+        if (!ctx) {
+            return jsonResponse(401, {
+                ok: false,
+                diagnostic: runtimeDiagnostic({
+                    code: "UNAUTHENTICATED",
+                    severity: "error",
+                    path: viewPath,
+                    expected: "authenticated session",
+                    message: `View '${viewName}' requires authentication.`,
+                }),
+            });
+        }
+        const denial = evaluateAuthAll(view.spec.requires, ctx, viewPath, "runtime");
+        if (denial) {
+            return jsonResponse(HTTP_STATUS_BY_CODE[denial.code] ?? 403, {
+                ok: false,
+                diagnostic: denial,
+            });
+        }
+    }
+    const url = new URL(req.url);
+    const page = parsePositiveInt(url.searchParams.get(PAGE_PARAM));
+    const show = parsePositiveInt(url.searchParams.get(SHOW_PARAM));
+    let params;
+    try {
+        params = coerceViewParams(view, url.searchParams);
+    }
+    catch (err) {
+        if (err instanceof ViewParamCoercionError) {
+            return jsonResponse(400, {
+                ok: false,
+                diagnostic: runtimeDiagnostic({
+                    code: "INPUT_VALIDATION_FAILED",
+                    severity: "error",
+                    path: viewPath,
+                    expected: "query string conforms to View.spec.params",
+                    message: err.message,
+                }),
+            });
+        }
+        throw err;
+    }
+    const result = await runtime.executeView.execute({
+        view,
+        pathPrefix: viewPath,
+        options: { params, page, show },
+        ctx,
+    });
+    if (result.ok) {
+        return jsonResponse(200, { ok: true, data: result.result });
+    }
+    const status = HTTP_STATUS_BY_CODE[result.diagnostic.code] ?? 500;
+    return jsonResponse(status, { ok: false, diagnostic: result.diagnostic });
+}
+/**
+ * Resolve caller identity for a View request from the Better Auth
+ * cookie session. Returns `undefined` when there is no session at all
+ * so callers can distinguish 401 (no session) from 403 (session but
+ * wrong role) — `ExecuteViewUseCase` produces `UNAUTHENTICATED` for
+ * `ctx: undefined` and `AUTH_DENIED` for a ctx whose predicates fail.
+ */
+async function buildViewCtx(req, auth, waitUntil) {
+    const session = await auth.getSession(req);
+    if (!session)
+        return undefined;
+    const wu = waitUntil ? { waitUntil } : {};
+    const role = await auth.getUserRole(session.user.id);
+    const staff = role && ADMIN_ROLE_SET.has(role)
+        ? { id: session.user.id, role: role }
+        : null;
+    return { user: { id: session.user.id }, staff, env: {}, ...wu };
+}
+function parsePositiveInt(raw) {
+    if (raw == null || raw === "")
+        return undefined;
+    const n = Number.parseInt(raw, 10);
+    return Number.isFinite(n) && n > 0 ? n : undefined;
+}
+async function readBody(req) {
+    if (req.method === "GET" || req.method === "DELETE" || req.method === "HEAD") {
+        return {};
+    }
+    const ct = req.headers.get("content-type") ?? "";
+    if (!ct.includes("json"))
+        return {};
+    try {
+        const parsed = await req.json();
+        return parsed ?? {};
+    }
+    catch {
+        return {};
+    }
+}
+async function buildHandlerContext(_req, _auth, waitUntil) {
+    const wu = waitUntil ? { waitUntil } : {};
+    // HTTP Triggers run on `defaultHandler` (Hono), which the OAuth lib
+    // does NOT route through token verification. Bearer-authenticated
+    // identity is only available on apiHandlers registered with
+    // `createOAuthProvider`. Triggers that need identity should migrate
+    // to an MCP tool, or read it from the caller frontend layer.
+    return { user: null, staff: null, env: {}, ...wu };
+}
+function openApiToHono(path) {
+    return path.replace(/\{([^}]+)\}/g, ":$1");
+}
+/**
+ * Hono's `c.executionCtx` getter THROWS when the underlying request
+ * was dispatched without an `ExecutionContext` (test harness via
+ * `app.request(...)`, non-Workers runtimes). Treat the throw as
+ * "no waitUntil available" and fall back to inline-await downstream.
+ */
+function readWaitUntil(c) {
+    try {
+        const ctx = c.executionCtx;
+        return ctx.waitUntil.bind(ctx);
+    }
+    catch {
+        return undefined;
+    }
+}
+function jsonResponse(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { "content-type": "application/json" },
+    });
+}
+function mediaFieldsForCollection(schema, schemas) {
+    const related = [
+        schema,
+        ...schemas.filter((s) => s.spec.translates?.parent === schema.metadata.name),
+    ];
+    const out = [];
+    for (const s of related) {
+        out.push(...mediaFieldsForSchema(s));
+    }
+    return out;
+}
+function mediaFieldsForSchema(schema) {
+    const props = schema.spec.schema.properties ?? {};
+    const out = [];
+    for (const [name, prop] of Object.entries(props)) {
+        if (typeof prop !== "object" || prop === null)
+            continue;
+        const hint = prop[MCP_HINT_KEYWORD];
+        if (!isMediaMcpHint(hint))
+            continue;
+        out.push({ name, hint });
+    }
+    return out;
+}
+function adminUnauthenticated(c, path) {
+    return jsonResponse(401, {
+        ok: false,
+        diagnostic: runtimeDiagnostic({
+            code: "UNAUTHENTICATED",
+            severity: "error",
+            path: `${c.req.method} ${path}`,
+            expected: "active session cookie",
+            message: "Not signed in. Sign in via /admin/sign-in first.",
+        }),
+    });
+}
+// Distinct from UNAUTHENTICATED so the SPA can render an "access
+// denied" view for users who DID sign in but lack a staff row,
+// instead of bouncing them back to /admin/sign-in (which the OAuth
+// re-auth then silently fast-forwards through, producing a visible
+// 5-step redirect chain that looks like an infinite loop).
+function adminNotStaff(c, path, login) {
+    return jsonResponse(403, {
+        ok: false,
+        login,
+        diagnostic: runtimeDiagnostic({
+            code: "AUTH_DENIED",
+            severity: "error",
+            path: `${c.req.method} ${path}`,
+            expected: "staff role for the signed-in user",
+            message: "Signed in, but this account isn't on the admin staff list. Contact a site owner to be added.",
+        }),
+    });
+}
+function jsonError(args) {
+    const diagnostic = {
+        code: args.code,
+        severity: "error",
+        phase: "runtime",
+        path: "mount/http",
+        message: args.message,
+    };
+    return jsonResponse(args.status, { ok: false, diagnostic });
+}
+async function runUseCase(opPath, fn) {
+    try {
+        const result = await fn();
+        return jsonResponse(200, result);
+    }
+    catch (e) {
+        if (e instanceof DiagnosticError) {
+            const status = HTTP_STATUS_BY_CODE[e.diagnostic.code] ?? 500;
+            return jsonResponse(status, { ok: false, diagnostic: redactForWire(e.diagnostic) });
+        }
+        // Don't leak raw exception strings on the wire — R2 / D1 / aws4fetch
+        // errors can carry bucket names, account IDs, or query fragments.
+        console.error(`[runUseCase ${opPath}] unhandled error`, e);
+        return jsonResponse(500, {
+            ok: false,
+            diagnostic: runtimeDiagnostic({
+                code: "INTERNAL_ERROR",
+                severity: "error",
+                path: opPath,
+                message: "An internal error occurred.",
+            }),
+        });
+    }
+}
+function mediaNotConfiguredResponse(path) {
+    return jsonResponse(501, {
+        ok: false,
+        diagnostic: runtimeDiagnostic({
+            code: "MEDIA_NOT_CONFIGURED",
+            severity: "error",
+            path,
+            message: "Media uploads are not enabled on this deployment. Bind a `mediaStorage` adapter in `createCmsRuntime` to enable.",
+        }),
+    });
+}
+//# sourceMappingURL=mountServerEndpoints.js.map

package/dist/mount/mountServerEndpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mountServerEndpoints.js","sourceRoot":"","sources":["../../src/mount/mountServerEndpoints.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,iBAAiB,GAIlB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,SAAS,GAGV,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAEpD,OAAO,EAAE,cAAc,EAA6B,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,oBAAoB,CAAC;AAEtD;;;;iBAIiB;AACjB,MAAM,UAAU,oBAAoB,CAClC,GAAS,EACT,GAAkB;IAElB,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QAC7B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACrC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;QAChC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YACnC,OAAO,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACvF,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QAChC,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,cAAc,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC5C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;YAChC,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YACnC,OAAO,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC9E,CAAC,CAAC,CAAC;IACL,CAAC;IACD,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAS,EAAE,GAAkB,EAAE,IAAU;IACrE,MAAM,GAAG,GAAG,GAAa,EAAE,CACzB,IAAI,QAAQ,CAAC,SAAS,EAAE;QACtB,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE;KACxD,CAAC,CAAC;IAEL,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,EAAE,CAC3B,IAAI,QAAQ,CAAC,kBAAkB,EAAE;QAC/B,OAAO,EAAE;YACP,cAAc,EAAE,8BAA8B;YAC9C,eAAe,EAAE,uBAAuB;SACzC;KACF,CAAC,CACH,CAAC;IAEF,qEAAqE;IACrE,kEAAkE;IAClE,qEAAqE;IACrE,4CAA4C;IAC5C,EAAE;IACF,kEAAkE;IAClE,oEAAoE;IACpE,kEAAkE;IAClE,GAAG,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,EAAE,CAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE;QACvC,OAAO,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE;KACzC,CAAC,CACH,CAAC;IAEF,oEAAoE;IACpE,qEAAqE;IACrE,sEAAsE;IACtE,kEAAkE;IAClE,sEAAsE;IACtE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAEvD,8DAA8D;IAC9D,mEAAmE;IACnE,iEAAiE;IACjE,0DAA0D;IAC1D,+DAA+D;IAC/D,6DAA6D;IAC7D,8CAA8C;IAE9C,KAAK,MAAM,IAAI,IAAI;QACjB,QAAQ;QACR,SAAS;QACT,gBAAgB;QAChB,sBAAsB;QACtB,kBAAkB;QAClB,oBAAoB;QACpB,iBAAiB;KAClB,EAAE,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,6DAA6D;IAC7D,sEAAsE;IACtE,8BAA8B;IAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAClC,CAAC,CAAC,EAAuB,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAChD,CAAC;IACF,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU;YAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,WAAW,GAAG,OAAO;SACxB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;SACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI;QACrB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;QACnB,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI;QACvC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,IAAI,QAAQ;QACvC,eAAe,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACvD,WAAW,EAAE,wBAAwB,CAAC,CAAC,EAAE,OAAO,CAAC;KAClD,CAAC,CAAC,CAAC;IAGN,MAAM,OAAO,GAAG,CACd,MAAsB,EACtB,IAAY,EACZ,IAAqE,EAC/D,EAAE;QACR,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;YAC7C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,oBAAoB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAC3C,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAC/E,CAAC;IAEF,OAAO,CAAC,KAAK,EAAE,wBAAwB,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC;IAEnF,OAAO,CAAC,KAAK,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,GAAG,IAAI;YACP,SAAS,EAAE,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM;YACpC,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,YAAY;YACjC,WAAW,EAAE,GAAG,GAAG,CAAC,MAAM,YAAY;YACtC,UAAU,EAAE,GAAG,GAAG,CAAC,MAAM,MAAM;SAChC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,iBAAiB,CAAC;oBAC5B,IAAI,EAAE,yBAAyB;oBAC/B,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,wBAAwB;oBAC9B,QAAQ,EAAE,oCAAoC;oBAC9C,OAAO,EAAE,uCAAuC;iBACjD,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;QACnE,oEAAoE;QACpE,iEAAiE;QACjE,gBAAgB;QAChB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC;YACnD,UAAU;YACV,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAA6B;YACzD,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;YAC7D,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,SAAS;SAC3C,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACtC,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;YAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,KAAK,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK;YACrB,UAAU,EAAE,GAAG,CAAC,SAAS;SAC1B,CAAC,CAAC,CAAC;QACJ,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;IACtD,MAAM,iBAAiB,GAAG,2CAA2C,CAAC;IAEtE,OAAO,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,OAAO,0BAA0B,CAAC,QAAQ,kBAAkB,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAOrD,CAAC;QACF,IACE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YACjC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YACjC,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EACjC,CAAC;YACD,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,iBAAiB,CAAC;oBAC5B,IAAI,EAAE,yBAAyB;oBAC/B,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,QAAQ,kBAAkB,EAAE;oBAClC,QAAQ,EAAE,0DAA0D;iBACrE,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC;QAC9C,OAAO,UAAU,CAAC,QAAQ,kBAAkB,EAAE,EAAE,GAAG,EAAE,CACnD,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC;YACzB,QAAQ;YACR,QAAQ;YACR,QAAQ;YACR,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YACxD,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACpE,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACrE,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,KAAK;YAAE,OAAO,0BAA0B,CAAC,QAAQ,iBAAiB,EAAE,CAAC,CAAC;QAC3E,gEAAgE;QAChE,2CAA2C;QAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAE,CAAC;QAC1C,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAIrD,CAAC;QACF,OAAO,UAAU,CAAC,QAAQ,iBAAiB,EAAE,EAAE,GAAG,EAAE,CAClD,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC;YACzB,QAAQ;YACR,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS;YACxD,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;YACpE,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;SACxE,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAYD,KAAK,UAAU,aAAa,CAAC,CAAU,EAAE,IAAU;IACjD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC;IAC/C,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,OAAO;QACL,IAAI,EAAE,IAAI;QACV,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;QACvB,KAAK;QACL,IAAI,EAAE,IAAiB;KACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAY,EACZ,OAAmB,EACnB,IAAU,EACV,WAAmB,EACnB,WAAmB,EACnB,SAAsD;IAEtD,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,YAAY,WAAW,sBAAsB,EAAE,CAAC,CAAC;IACpH,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,cAAc,QAAQ,sBAAsB,EAAE,CAAC,CAAC;IACnH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjC,kEAAkE;IAClE,oEAAoE;IACpE,mDAAmD;IACnD,MAAM,KAAK,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC;IAErC,MAAM,GAAG,GAAmB,MAAM,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IAE5E,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC;QACnD,SAAS;QACT,KAAK;QACL,GAAG;QACH,UAAU,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,WAAW,EAAE;KAC3C,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;IAClE,OAAO,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,GAAY,EACZ,OAAmB,EACnB,QAAgB,EAChB,IAAU,EACV,SAAsD;IAEtD,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,QAAQ,sBAAsB,EAAE,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,QAAQ,EAAE,CAAC;IAE9C,iEAAiE;IACjE,sCAAsC;IACtC,mEAAmE;IACnE,kEAAkE;IAClE,iEAAiE;IACjE,yCAAyC;IACzC,oEAAoE;IACpE,qEAAqE;IACrE,8DAA8D;IAC9D,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,iBAAiB,CAAC;oBAC5B,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,uBAAuB;oBACjC,OAAO,EAAE,SAAS,QAAQ,4BAA4B;iBACvD,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7E,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,YAAY,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE;gBAC3D,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,MAAM;aACnB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IAEhE,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,sBAAsB,EAAE,CAAC;YAC1C,OAAO,YAAY,CAAC,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,UAAU,EAAE,iBAAiB,CAAC;oBAC5B,IAAI,EAAE,yBAAyB;oBAC/B,QAAQ,EAAE,OAAO;oBACjB,IAAI,EAAE,QAAQ;oBACd,QAAQ,EAAE,2CAA2C;oBACrD,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;QAC/C,IAAI;QACJ,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE;QAC/B,GAAG;KACJ,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;QACd,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;IAClE,OAAO,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,YAAY,CACzB,GAAY,EACZ,IAAU,EACV,SAAsD;IAEtD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC;QAC5C,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAiB,EAAE;QAClD,CAAC,CAAC,IAAI,CAAC;IACT,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAY;IAClC,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC7E,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACjD,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAA2B,CAAC;QACzD,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAAa,EACb,KAAW,EACX,SAAsD;IAEtD,MAAM,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,oEAAoE;IACpE,kEAAkE;IAClE,4DAA4D;IAC5D,oEAAoE;IACpE,6DAA6D;IAC7D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,CAAU;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC;QAC3B,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IACjD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAChD,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAC/B,MAAsB,EACtB,OAAkC;IAElC,MAAM,OAAO,GAAG;QACd,MAAM;QACN,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC7E,CAAC;IACF,MAAM,GAAG,GAA0C,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,GAAG,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAsB;IAClD,MAAM,KAAK,GACR,MAAM,CAAC,IAAI,CAAC,MAAmD,CAAC,UAAU,IAAI,EAAE,CAAC;IACpF,MAAM,GAAG,GAA0C,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;YAAE,SAAS;QACxD,MAAM,IAAI,GAAI,IAAgC,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC;YAAE,SAAS;QACpC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAU,EAAE,IAAY;IACpD,OAAO,YAAY,CAAC,GAAG,EAAE;QACvB,EAAE,EAAE,KAAK;QACT,UAAU,EAAE,iBAAiB,CAAC;YAC5B,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE;YAC/B,QAAQ,EAAE,uBAAuB;YACjC,OAAO,EAAE,kDAAkD;SAC5D,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,iEAAiE;AACjE,+DAA+D;AAC/D,mEAAmE;AACnE,mEAAmE;AACnE,2DAA2D;AAC3D,SAAS,aAAa,CAAC,CAAU,EAAE,IAAY,EAAE,KAAoB;IACnE,OAAO,YAAY,CAAC,GAAG,EAAE;QACvB,EAAE,EAAE,KAAK;QACT,KAAK;QACL,UAAU,EAAE,iBAAiB,CAAC;YAC5B,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,EAAE;YAC/B,QAAQ,EAAE,mCAAmC;YAC7C,OAAO,EACL,8FAA8F;SACjG,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,SAAS,SAAS,CAAC,IAAuD;IACxE,MAAM,UAAU,GAAwB;QACtC,IAAI,EAAE,IAAI,CAAC,IAA0B;QACrC,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC;IACF,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,UAAU,CAAI,MAAc,EAAE,EAAoB;IAC/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,eAAe,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,mBAAmB,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;YAC7D,OAAO,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,qEAAqE;QACrE,kEAAkE;QAClE,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,mBAAmB,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,YAAY,CAAC,GAAG,EAAE;YACvB,EAAE,EAAE,KAAK;YACT,UAAU,EAAE,iBAAiB,CAAC;gBAC5B,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,6BAA6B;aACvC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,IAAY;IAC9C,OAAO,YAAY,CAAC,GAAG,EAAE;QACvB,EAAE,EAAE,KAAK;QACT,UAAU,EAAE,iBAAiB,CAAC;YAC5B,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,OAAO;YACjB,IAAI;YACJ,OAAO,EACL,kHAAkH;SACrH,CAAC;KACH,CAAC,CAAC;AACL,CAAC"}

package/dist/oauth/consentHtml.d.ts

@@ -0,0 +1,15 @@
+/**
+ * OAuth consent UI renderer. Self-contained HTML — no external assets,
+ * no framework. Navy-on-cream palette mirrors the admin SPA.
+ * Supports zh-TW and en locales.
+ */
+export interface ConsentModel {
+    readonly clientName: string;
+    readonly redirectUri: string;
+    readonly scopes: readonly string[];
+    readonly oauthRequestJson: string;
+}
+/** Detect consent UI locale from Accept-Language header. */
+export declare function detectConsentLocale(acceptLanguage: string | null): "zh-TW" | "en";
+export declare function renderConsentHtml(locale: "zh-TW" | "en", model: ConsentModel | null): string;
+//# sourceMappingURL=consentHtml.d.ts.map

package/dist/oauth/consentHtml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consentHtml.d.ts","sourceRoot":"","sources":["../../src/oauth/consentHtml.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,4DAA4D;AAC5D,wBAAgB,mBAAmB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,GAAG,IAAI,CAKjF;AAwDD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,EAAE,KAAK,EAAE,YAAY,GAAG,IAAI,GAAG,MAAM,CA4B5F"}

package/dist/oauth/consentHtml.js

@@ -0,0 +1,89 @@
+/**
+ * OAuth consent UI renderer. Self-contained HTML — no external assets,
+ * no framework. Navy-on-cream palette mirrors the admin SPA.
+ * Supports zh-TW and en locales.
+ */
+/** Detect consent UI locale from Accept-Language header. */
+export function detectConsentLocale(acceptLanguage) {
+    if (!acceptLanguage)
+        return "en";
+    const lower = acceptLanguage.toLowerCase();
+    if (lower.includes("zh-tw") || lower.includes("zh_tw"))
+        return "zh-TW";
+    return "en";
+}
+const STRINGS = {
+    en: {
+        title: "Authorize · mantle",
+        eyebrow: "Authorize MCP access",
+        heading: (client) => `Allow ${client} to access your CMS?`,
+        redirectLabel: "Will redirect to",
+        scopesLabel: "Requested scopes",
+        approve: "Approve",
+        deny: "Deny",
+        invalidTitle: "Invalid authorization request",
+        invalidBody: "Missing or malformed consent payload. Return to your MCP client and try again.",
+    },
+    "zh-TW": {
+        title: "授權 · mantle",
+        eyebrow: "授權 MCP 存取",
+        heading: (client) => `允許 ${client} 存取您的 CMS？`,
+        redirectLabel: "將重新導向至",
+        scopesLabel: "請求的授權範圍",
+        approve: "同意",
+        deny: "拒絕",
+        invalidTitle: "無效的授權請求",
+        invalidBody: "缺少或格式錯誤的授權資訊，請返回 MCP 客戶端重試。",
+    },
+};
+function escapeHtml(s) {
+    return s
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#39;");
+}
+const CSS = `
+  :root{--navy:#1a3062;--navy-light:#4d6aac;--bg:#eef1f8;--surface:rgba(255,255,255,.92);--border:rgba(151,158,175,.30);--muted:#6b7280;--fg:#111827}
+  *{box-sizing:border-box}
+  body{margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;padding:1rem;font-family:-apple-system,BlinkMacSystemFont,"Segoe UI",system-ui,sans-serif;color:var(--fg);background:radial-gradient(ellipse at 20% 20%,rgba(77,106,172,.10) 0%,transparent 55%),radial-gradient(ellipse at 80% 80%,rgba(0,183,199,.07) 0%,transparent 55%),var(--bg)}
+  .card{max-width:32rem;width:100%;padding:2rem;border-radius:.75rem;background:var(--surface);border:1px solid var(--border);box-shadow:0 2px 20px rgba(26,48,98,.08),0 1px 4px rgba(26,48,98,.04);backdrop-filter:blur(14px)}
+  .eyebrow{font-size:.7rem;text-transform:uppercase;letter-spacing:.18em;font-weight:500;color:var(--muted);margin:0 0 .5rem}
+  h1{font-size:1.5rem;line-height:1.3;font-weight:500;margin:0 0 .75rem;letter-spacing:-.02em}
+  p{margin:0 0 1rem;font-size:.95rem;line-height:1.55}
+  .muted{color:var(--muted);font-size:.875rem}
+  code{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.8rem;padding:.125rem .4rem;border-radius:.25rem;background:rgba(26,48,98,.06)}
+  .scopes{margin:0 0 1.5rem;display:flex;flex-wrap:wrap;gap:.375rem}
+  .scope{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.75rem;padding:.25rem .5rem;border-radius:.25rem;background:rgba(26,48,98,.06)}
+  form{display:flex;gap:.75rem}
+  button{flex:1;padding:.625rem 1rem;border:0;border-radius:.5rem;font:inherit;font-weight:500;cursor:pointer;transition:opacity .15s,background .15s}
+  button[value="approve"]{background:var(--navy);color:#fff}
+  button[value="approve"]:hover{opacity:.9}
+  button[value="deny"]{background:rgba(26,48,98,.08);color:var(--fg)}
+  button[value="deny"]:hover{background:rgba(26,48,98,.14)}
+`.trim();
+export function renderConsentHtml(locale, model) {
+    const t = STRINGS[locale];
+    const lang = locale === "zh-TW" ? "zh-Hant-TW" : "en";
+    const head = `<!doctype html><html lang="${lang}"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><title>${t.title}</title><style>${CSS}</style></head><body><div class="card">`;
+    const tail = `</div></body></html>`;
+    if (!model) {
+        return `${head}<p class="eyebrow">${t.eyebrow}</p><h1>${t.invalidTitle}</h1><p class="muted">${t.invalidBody}</p>${tail}`;
+    }
+    const scopesBlock = model.scopes.length > 0
+        ? `<p class="eyebrow">${t.scopesLabel}</p><div class="scopes">${model.scopes.map((s) => `<span class="scope">${escapeHtml(s)}</span>`).join("")}</div>`
+        : "";
+    return (`${head}` +
+        `<p class="eyebrow">${t.eyebrow}</p>` +
+        `<h1>${t.heading(escapeHtml(model.clientName))}</h1>` +
+        `<p class="muted">${t.redirectLabel} <code>${escapeHtml(model.redirectUri)}</code></p>` +
+        `${scopesBlock}` +
+        `<form method="post" action="/oauth/authorize">` +
+        `<input type="hidden" name="oauth_request" value="${escapeHtml(model.oauthRequestJson)}"/>` +
+        `<button type="submit" name="decision" value="approve">${t.approve}</button>` +
+        `<button type="submit" name="decision" value="deny">${t.deny}</button>` +
+        `</form>` +
+        `${tail}`);
+}
+//# sourceMappingURL=consentHtml.js.map

package/dist/oauth/consentHtml.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consentHtml.js","sourceRoot":"","sources":["../../src/oauth/consentHtml.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,4DAA4D;AAC5D,MAAM,UAAU,mBAAmB,CAAC,cAA6B;IAC/D,IAAI,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;IAC3C,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACvE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,GAAG;IACd,EAAE,EAAE;QACF,KAAK,EAAE,oBAAoB;QAC3B,OAAO,EAAE,sBAAsB;QAC/B,OAAO,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,SAAS,MAAM,sBAAsB;QAClE,aAAa,EAAE,kBAAkB;QACjC,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,SAAS;QAClB,IAAI,EAAE,MAAM;QACZ,YAAY,EAAE,+BAA+B;QAC7C,WAAW,EAAE,gFAAgF;KAC9F;IACD,OAAO,EAAE;QACP,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,WAAW;QACpB,OAAO,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,MAAM,YAAY;QACrD,aAAa,EAAE,QAAQ;QACvB,WAAW,EAAE,SAAS;QACtB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,SAAS;QACvB,WAAW,EAAE,6BAA6B;KAC3C;CACO,CAAC;AAEX,SAAS,UAAU,CAAC,CAAS;IAC3B,OAAO,CAAC;SACL,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,GAAG,GAAG;;;;;;;;;;;;;;;;;;CAkBX,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,UAAU,iBAAiB,CAAC,MAAsB,EAAE,KAA0B;IAClF,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,MAAM,IAAI,GAAG,8BAA8B,IAAI,6GAA6G,CAAC,CAAC,KAAK,kBAAkB,GAAG,yCAAyC,CAAC;IAClO,MAAM,IAAI,GAAG,sBAAsB,CAAC;IAEpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,GAAG,IAAI,sBAAsB,CAAC,CAAC,OAAO,WAAW,CAAC,CAAC,YAAY,yBAAyB,CAAC,CAAC,WAAW,OAAO,IAAI,EAAE,CAAC;IAC5H,CAAC;IAED,MAAM,WAAW,GACf,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;QACrB,CAAC,CAAC,sBAAsB,CAAC,CAAC,WAAW,2BAA2B,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ;QACvJ,CAAC,CAAC,EAAE,CAAC;IAET,OAAO,CACL,GAAG,IAAI,EAAE;QACT,sBAAsB,CAAC,CAAC,OAAO,MAAM;QACrC,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,OAAO;QACrD,oBAAoB,CAAC,CAAC,aAAa,UAAU,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa;QACvF,GAAG,WAAW,EAAE;QAChB,gDAAgD;QAChD,oDAAoD,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK;QAC3F,yDAAyD,CAAC,CAAC,OAAO,WAAW;QAC7E,sDAAsD,CAAC,CAAC,IAAI,WAAW;QACvE,SAAS;QACT,GAAG,IAAI,EAAE,CACV,CAAC;AACJ,CAAC"}

package/dist/oauth/index.d.ts

@@ -0,0 +1,4 @@
+export { OAUTH_AUTHORIZE_PATH, OAUTH_TOKEN_PATH, OAUTH_REGISTER_PATH, } from "./oauthConstants.js";
+export { createOAuthProvider, type CreateOAuthProviderArgs, } from "./oauthSingleton.js";
+export { mountAuthorize, type MountAuthorizeOptions, type OAuthApiProps, } from "./mountOAuth.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/oauth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/oauth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,mBAAmB,EACnB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,cAAc,EACd,KAAK,qBAAqB,EAC1B,KAAK,aAAa,GACnB,MAAM,iBAAiB,CAAC"}