@archlast/server 0.0.1

package/dist/engine/runner.js

@@ -0,0 +1,617 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutionEngine = void 0;
+const context_js_1 = require("./context.js");
+const factory_js_1 = require("../repository/factory.js");
+const logger_js_1 = require("../logging/logger.js");
+const scheduler_client_js_1 = require("../jobs/scheduler-client.js");
+const built_in_registry_js_1 = require("../functions/built-in-registry.js");
+const utils_js_1 = require("../cache/utils.js");
+const container_js_1 = require("../di/container.js");
+/**
+ * Check if API key has required scope (function type)
+ * Better-Auth API keys use permissions instead of scopes
+ * For backward compatibility, all API keys allow all function types
+ */
+function hasScope(apiKey, scope) {
+    // Better-Auth API keys don't use scopes - they use permissions
+    // For now, allow all API keys to access all function types
+    return true;
+}
+const QUERY_TIMEOUT_MS = Number(process.env.QUERY_TIMEOUT_MS ?? 1000);
+const MUTATION_TIMEOUT_MS = Number(process.env.MUTATION_TIMEOUT_MS ?? 1000);
+const ACTION_TIMEOUT_MS = Number(process.env.ACTION_TIMEOUT_MS ?? 10 * 60 * 1000);
+const QUERY_MAX_BYTES = 16 * 1024 * 1024; // 16 MB
+const MUTATION_MAX_BYTES = 16 * 1024 * 1024; // 16 MB
+const ACTION_MAX_BYTES = 64 * 1024 * 1024; // 64 MB
+class ExecutionEngine {
+    graph;
+    db;
+    rawDb = null; // Uncached database for system functions
+    functions;
+    scheduler;
+    storage;
+    jobQueue;
+    slowLogThresholdMs;
+    functionConcurrencyLimit;
+    functionSemaphores;
+    cacheClient = null; // CacheSidecarClient
+    container;
+    serverContext = null;
+    wsHandler = null;
+    constructor(db, graph, storage, jobQueue, cacheClient, ipcClient, rawDb, container) {
+        this.db = db;
+        this.rawDb = rawDb ?? null;
+        this.graph = graph;
+        this.functions = new Map();
+        this.jobQueue = jobQueue;
+        this.scheduler = new scheduler_client_js_1.SchedulerClient(ipcClient || null);
+        this.storage = storage;
+        this.slowLogThresholdMs = Number(process.env.SLOW_LOG_THRESHOLD_MS ?? 200);
+        this.functionConcurrencyLimit = Number(process.env.MAX_CONCURRENCY_PER_FUNCTION ?? 0);
+        this.functionSemaphores = new Map();
+        this.cacheClient = cacheClient ?? null;
+        this.container = container ?? container_js_1.globalContainer;
+    }
+    /**
+     * Set the server context for DI resolution
+     */
+    setServerContext(ctx) {
+        this.serverContext = ctx;
+    }
+    /**
+     * Get the Scheduler client
+     */
+    getScheduler() {
+        return this.scheduler;
+    }
+    /**
+     * Set the Scheduler client (called after IPC connection is established)
+     */
+    setScheduler(scheduler) {
+        this.scheduler = scheduler;
+    }
+    /**
+     * Set the WebSocket handler (called after server is initialized)
+     */
+    setWebSocketHandler(wsHandler) {
+        this.wsHandler = wsHandler;
+    }
+    registerFunction(name, definition) {
+        this.functions.set(name, definition);
+    }
+    clearFunctions() {
+        this.functions.clear();
+    }
+    unregisterFunction(name) {
+        this.functions.delete(name);
+    }
+    /**
+     * Introspection helper for the dashboard/admin APIs.
+     *
+     * Returns built-in functions registered via BuiltInFunctionRegistry.
+     * (User/deployed functions are tracked separately by the DeploymentHandler.)
+     *
+     * Includes `args` (Zod object) when present so the dashboard can generate
+     * a "smart" arg template without requiring manual typing.
+     */
+    listBuiltInFunctions() {
+        return built_in_registry_js_1.BuiltInFunctionRegistry.getAllNames()
+            .map((name) => {
+            const def = built_in_registry_js_1.BuiltInFunctionRegistry.get(name);
+            return { name, type: String(def?.type ?? "unknown"), args: def?.args };
+        })
+            .sort((a, b) => a.name.localeCompare(b.name));
+    }
+    /**
+     * Unified dispatcher so jobs/worker processes can invoke any registered function by name.
+     * - Query: returns { result, affectedKeys, affectedQueries }
+     * - Mutation: returns { result, affectedKeys, affectedQueries }
+     * - Action: returns { result, affectedKeys, affectedQueries }
+     *
+     * All function types now return consistent metadata for reactivity tracking.
+     */
+    async runFunction(name, args, auth, queryId) {
+        // Check built-in functions first (they take precedence)
+        const fn = built_in_registry_js_1.BuiltInFunctionRegistry.get(name) || this.functions.get(name);
+        if (!fn)
+            throw new Error(`Function ${name} not found`);
+        // Enforce auth mode and permissions BEFORE handler execution
+        this.enforceAuthMode(fn, auth, name);
+        this.enforcePermissions(fn, auth, name);
+        this.enforceApiKeyScopes(fn, auth, name);
+        switch (fn.type) {
+            case "query":
+                return await this.runQuery(name, args, auth, queryId ?? `job:${name}:${Date.now()}`);
+            case "mutation":
+                return await this.runMutation(name, args, auth);
+            case "action":
+                return await this.runAction(name, args, auth);
+            default:
+                throw new Error(`Unsupported function type for ${name}`);
+        }
+    }
+    /**
+     * Enforce auth mode requirements
+     *
+     * Authentication with Better-Auth:
+     * - Session auth: User must be logged in via Better-Auth
+     * - API key auth: Client must provide a valid Better-Auth API key (arch_* prefix)
+     * - Admin functions: Require admin role (isAdminToken === true)
+     *
+     * Auth modes:
+     * - "required": User must be authenticated (session or API key)
+     * - "optional": Auth is optional, function works both ways
+     * - "public": No authentication required
+     */
+    enforceAuthMode(fn, auth, functionName) {
+        const authMode = fn.auth || "required";
+        switch (authMode) {
+            case "required":
+                if (!auth.isAuthenticated) {
+                    throw new Error(`Function ${functionName} requires authentication`);
+                }
+                // System functions (sys.*) are always allowed for authenticated users
+                // User-defined functions require authenticated context (session or API key)
+                // Both Better-Auth sessions and API keys are valid authentication methods
+                break;
+            case "optional":
+                // Auth is optional, no enforcement needed
+                break;
+            case "public":
+                // Public functions have no auth requirements
+                break;
+            default:
+                throw new Error(`Invalid auth mode: ${authMode}`);
+        }
+    }
+    /**
+     * Enforce permission requirements
+     */
+    enforcePermissions(fn, auth, functionName) {
+        if (!fn.permissions || fn.permissions.length === 0) {
+            return; // No permissions required
+        }
+        // Public functions cannot require permissions
+        if (fn.auth === "public") {
+            throw new Error(`Public function ${functionName} cannot require permissions`);
+        }
+        // Check if authenticated
+        if (!auth.isAuthenticated) {
+            throw new Error(`Function ${functionName} requires authentication`);
+        }
+        // Check each required permission
+        for (const permission of fn.permissions) {
+            if (!auth.hasPermission(permission)) {
+                throw new Error(`Function ${functionName} requires permission: ${permission}`);
+            }
+        }
+    }
+    /**
+     * Enforce API key scope restrictions
+     */
+    enforceApiKeyScopes(fn, auth, functionName) {
+        // Only enforce scopes for API key authentication
+        if (auth.type !== "apiKey") {
+            return;
+        }
+        // If function doesn't specify scopes, allow all
+        if (!fn.scopes || fn.scopes.length === 0) {
+            return;
+        }
+        // Check if API key has the required scope
+        const apiKey = auth.apiKey;
+        if (!apiKey) {
+            throw new Error(`Function ${functionName} requires valid API key`);
+        }
+        const functionType = fn.type;
+        // HTTP and webhook are handled by the router, not ExecutionEngine
+        if (functionType === "query" || functionType === "mutation" || functionType === "action") {
+            if (!hasScope(apiKey, functionType)) {
+                throw new Error(`API key does not have '${functionType}' scope for function ${functionName}`);
+            }
+        }
+    }
+    async runQuery(name, args, auth, queryId) {
+        const fn = built_in_registry_js_1.BuiltInFunctionRegistry.get(name) || this.functions.get(name);
+        if (!fn || fn.type !== "query")
+            throw new Error(`Query ${name} not found`);
+        // Clear previous dependencies for this queryId (re-run scenario)
+        this.graph.clearDependencies(queryId);
+        if (fn.args) {
+            try {
+                args = fn.args.parse(args);
+            }
+            catch (e) {
+                throw new Error(`Invalid arguments for ${name}: ${e.message}`);
+            }
+        }
+        // ============================================================================
+        // PHASE 2: Function-Level Caching
+        // ============================================================================
+        // System functions (sys.*) should never be cached - they need fresh data
+        const isSystemFunction = name.startsWith("sys.");
+        // Generate cache key based on function name + args hash
+        const argsHash = (0, utils_js_1.hashArgs)(args);
+        const functionCacheKey = `fn:${name}:${argsHash}`;
+        // Try to get cached result from sidecar (skip for system functions)
+        if (!isSystemFunction && this.cacheClient?.isConnected()) {
+            try {
+                const cached = await this.cacheClient.get(functionCacheKey, "function");
+                if (cached !== null) {
+                    // Cache hit! Re-register dependencies for reactivity
+                    if (Array.isArray(cached.__dependencies)) {
+                        for (const depKey of cached.__dependencies) {
+                            this.graph.addDependency(queryId, depKey);
+                        }
+                    }
+                    logger_js_1.logger.log({
+                        timestamp: Date.now(),
+                        level: "debug",
+                        kind: "cache",
+                        message: `Function cache hit: ${name}`,
+                        context: { functionCacheKey },
+                    });
+                    // Return with empty affectedKeys (queries don't write)
+                    return {
+                        result: cached.result,
+                        affectedKeys: new Set(),
+                        affectedQueries: new Set(),
+                    };
+                }
+            }
+            catch (err) {
+                // Cache miss or error - continue to execute
+                logger_js_1.logger.log({
+                    timestamp: Date.now(),
+                    level: "debug",
+                    kind: "cache",
+                    message: `Function cache miss or error: ${name}`,
+                    context: { error: err instanceof Error ? err.message : String(err) },
+                });
+            }
+        }
+        // ============================================================================
+        const estimatedSize = JSON.stringify(args ?? {}).length;
+        if (estimatedSize > QUERY_MAX_BYTES) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "system",
+                message: "Query payload exceeded size limit",
+                context: { name, size: estimatedSize, limit: QUERY_MAX_BYTES },
+            });
+            throw new Error(`Query ${name} payload too large`);
+        }
+        // Create DI-enabled context
+        const serverCtx = this.serverContext;
+        const container = this.container;
+        const ctx = {
+            auth,
+            db: this.db,
+            rawDb: this.rawDb,
+            repository: (0, factory_js_1.createReadOnlyRepository)(this.db),
+            logger: logger_js_1.logger,
+            scheduler: this.scheduler,
+            storage: this.storage,
+            jobQueue: this.jobQueue,
+            server: serverCtx,
+            service(token) {
+                if (!serverCtx)
+                    throw new Error("Server context not available for DI");
+                return container.resolve(token, serverCtx);
+            },
+            factory(token, implementation = "default") {
+                if (!serverCtx)
+                    throw new Error("Server context not available for DI");
+                return container.resolveImplementation(token, implementation, serverCtx);
+            },
+        };
+        logger_js_1.logger.logFunctionTrigger(name, args);
+        return this.withFunctionConcurrency(name, async () => {
+            const started = Date.now();
+            // Track dependencies during execution
+            const trackedDependencies = [];
+            const result = await context_js_1.executionContext.run({
+                type: "query",
+                queryId,
+                trackRead: (key) => {
+                    this.graph.addDependency(queryId, key);
+                    this.graph.addDependency(functionCacheKey, key);
+                    trackedDependencies.push(key);
+                },
+                trackWrite: () => {
+                    throw new Error("Cannot write in a query");
+                },
+            }, async () => {
+                // Also track auth dependency
+                if (auth.userId) {
+                    this.graph.addDependency(queryId, `auth:${auth.userId}`);
+                    this.graph.addDependency(functionCacheKey, `auth:${auth.userId}`);
+                    trackedDependencies.push(`auth:${auth.userId}`);
+                }
+                const timeout = new Promise((_, reject) => setTimeout(() => reject(new Error(`Query ${name} timed out`)), QUERY_TIMEOUT_MS));
+                return Promise.race([fn.handler(ctx, args), timeout]);
+            });
+            const elapsed = Date.now() - started;
+            // ============================================================================
+            // PHASE 2: Store result in function cache with dependencies (skip for system functions)
+            // ============================================================================
+            if (!isSystemFunction &&
+                this.cacheClient?.isConnected() &&
+                trackedDependencies.length > 0) {
+                try {
+                    // Store result with embedded dependencies
+                    const cachedValue = {
+                        result,
+                        __dependencies: trackedDependencies,
+                    };
+                    const resultSize = JSON.stringify(cachedValue).length;
+                    await this.cacheClient.set(functionCacheKey, cachedValue, "function", resultSize);
+                    // Register dependencies in cache for invalidation
+                    for (const depKey of trackedDependencies) {
+                        await this.cacheClient.addDependency(depKey, functionCacheKey);
+                    }
+                    logger_js_1.logger.log({
+                        timestamp: Date.now(),
+                        level: "debug",
+                        kind: "cache",
+                        message: `Function result cached: ${name}`,
+                        context: {
+                            functionCacheKey,
+                            dependencies: trackedDependencies.length,
+                            size: resultSize,
+                        },
+                    });
+                }
+                catch (err) {
+                    // Log but don't fail on cache errors
+                    logger_js_1.logger.log({
+                        timestamp: Date.now(),
+                        level: "warn",
+                        kind: "cache",
+                        message: `Failed to cache function result: ${name}`,
+                        context: { error: err instanceof Error ? err.message : String(err) },
+                    });
+                }
+            }
+            // ============================================================================
+            if (elapsed > this.slowLogThresholdMs) {
+                logger_js_1.logger.log({
+                    timestamp: Date.now(),
+                    level: "warn",
+                    kind: "system",
+                    message: `Slow query ${name} (${elapsed}ms)`,
+                    context: { queryId, elapsed },
+                });
+            }
+            // Return with empty affectedKeys (queries don't write)
+            return {
+                result,
+                affectedKeys: new Set(),
+                affectedQueries: new Set(),
+            };
+        });
+    }
+    async runMutation(name, args, auth) {
+        const fn = built_in_registry_js_1.BuiltInFunctionRegistry.get(name) || this.functions.get(name);
+        if (!fn || fn.type !== "mutation")
+            throw new Error(`Mutation ${name} not found`);
+        if (fn.args) {
+            try {
+                args = fn.args.parse(args);
+            }
+            catch (e) {
+                throw new Error(`Invalid arguments for ${name}: ${e.message}`);
+            }
+        }
+        const estimatedSize = JSON.stringify(args ?? {}).length;
+        if (estimatedSize > MUTATION_MAX_BYTES) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "system",
+                message: "Mutation payload exceeded size limit",
+                context: { name, size: estimatedSize, limit: MUTATION_MAX_BYTES },
+            });
+            throw new Error(`Mutation ${name} payload too large`);
+        }
+        const affectedKeys = new Set();
+        // Capture for closure
+        const serverCtx = this.serverContext;
+        const container = this.container;
+        const result = await this.withFunctionConcurrency(name, async () => {
+            const started = Date.now();
+            const outcome = await this.db.runInTransaction(async (txnDb) => {
+                const ctx = {
+                    auth,
+                    db: txnDb,
+                    rawDb: (this.rawDb ?? undefined),
+                    // Use cached DB for repository to ensure reactivity works
+                    repository: (0, factory_js_1.createRepository)(this.db),
+                    logger: logger_js_1.logger,
+                    scheduler: this.scheduler,
+                    storage: this.storage,
+                    jobQueue: this.jobQueue,
+                    server: serverCtx,
+                    service(token) {
+                        return container.resolve(token, ctx);
+                    },
+                    factory(token, implementation = "default") {
+                        return container.resolveImplementation(token, implementation, ctx);
+                    },
+                };
+                logger_js_1.logger.logFunctionTrigger(name, args);
+                const timeout = new Promise((_, reject) => setTimeout(() => reject(new Error(`Mutation ${name} timed out`)), MUTATION_TIMEOUT_MS));
+                return context_js_1.executionContext.run({
+                    type: "mutation",
+                    trackRead: () => { },
+                    trackWrite: (key) => {
+                        affectedKeys.add(key);
+                    },
+                }, async () => {
+                    return Promise.race([fn.handler(ctx, args), timeout]);
+                });
+            });
+            const elapsed = Date.now() - started;
+            if (elapsed > this.slowLogThresholdMs) {
+                logger_js_1.logger.log({
+                    timestamp: Date.now(),
+                    level: "warn",
+                    kind: "system",
+                    message: `Slow mutation ${name} (${elapsed}ms)`,
+                    context: { elapsed },
+                });
+            }
+            return outcome;
+        });
+        const affectedQueries = this.computeAffectedQueries(affectedKeys);
+        // Broadcast admin invalidation events for dashboard reactivity
+        // Extract affected collections from affectedKeys and broadcast to admin connections
+        if (this.wsHandler && affectedKeys.size > 0) {
+            try {
+                // Broadcast once per unique collection to avoid duplicate messages
+                const broadcastedCollections = new Set();
+                for (const key of affectedKeys) {
+                    // Keys are in format "collection:tableName" (e.g., "collection:users")
+                    // Extract collection name from the key by splitting on ":"
+                    const parts = key.split(":");
+                    if (parts.length >= 2) {
+                        const collection = parts[1]; // Gets "users" from "collection:users"
+                        // Check if this is a system collection that should be skipped
+                        const isSystemCollection = collection.startsWith("_") ||
+                            collection.startsWith("sys_") ||
+                            collection.startsWith("auth_") ||
+                            collection.startsWith("better_auth_") ||
+                            collection === "apikey" ||
+                            collection === "_system_settings";
+                        // Skip system collections and already broadcasted collections
+                        if (!isSystemCollection && !broadcastedCollections.has(collection)) {
+                            broadcastedCollections.add(collection);
+                            if (typeof this.wsHandler.broadcastAdminEvent === "function") {
+                                this.wsHandler.broadcastAdminEvent("admin:data:invalidated", {
+                                    collection,
+                                    action: "update",
+                                });
+                            }
+                        }
+                    }
+                }
+            }
+            catch (err) {
+                // Log but don't fail the mutation if broadcasting fails
+                logger_js_1.logger.log({
+                    timestamp: Date.now(),
+                    level: "warn",
+                    kind: "system",
+                    message: "Failed to broadcast admin invalidation event",
+                    context: { error: err instanceof Error ? err.message : String(err) },
+                });
+            }
+        }
+        return { result, affectedKeys, affectedQueries };
+    }
+    computeAffectedQueries(affectedKeys) {
+        const affectedQueries = new Set();
+        for (const key of affectedKeys) {
+            const queries = this.graph.getAffectedQueries(key);
+            for (const q of queries) {
+                affectedQueries.add(q);
+            }
+        }
+        return affectedQueries;
+    }
+    clearDependencies(queryId) {
+        this.graph.clearDependencies(queryId);
+    }
+    async runAction(name, args, auth) {
+        const fn = built_in_registry_js_1.BuiltInFunctionRegistry.get(name) || this.functions.get(name);
+        if (!fn || fn.type !== "action")
+            throw new Error(`Action ${name} not found`);
+        const estimatedSize = JSON.stringify(args ?? {}).length;
+        if (estimatedSize > ACTION_MAX_BYTES) {
+            logger_js_1.logger.log({
+                timestamp: Date.now(),
+                level: "error",
+                kind: "system",
+                message: "Action payload exceeded size limit",
+                context: { name, size: estimatedSize, limit: ACTION_MAX_BYTES },
+            });
+            throw new Error(`Action ${name} payload too large`);
+        }
+        // Actions can track writes (e.g., if they perform DB operations)
+        const affectedKeys = new Set();
+        // Capture for closure
+        const serverCtx = this.serverContext;
+        const container = this.container;
+        const ctx = {
+            auth,
+            logger: logger_js_1.logger,
+            scheduler: this.scheduler,
+            storage: this.storage,
+            jobQueue: this.jobQueue,
+            db: this.db,
+            rawDb: (this.rawDb ?? undefined),
+            repository: (0, factory_js_1.createRepository)(this.db),
+            service(token) {
+                return container.resolve(token, ctx);
+            },
+            factory(token, implementation = "default") {
+                return container.resolveImplementation(token, implementation, ctx);
+            },
+        };
+        logger_js_1.logger.logFunctionTrigger(name, args);
+        const timeout = new Promise((_, reject) => setTimeout(() => reject(new Error(`Action ${name} timed out`)), ACTION_TIMEOUT_MS));
+        return this.withFunctionConcurrency(name, async () => {
+            const started = Date.now();
+            const result = await context_js_1.executionContext.run({
+                type: "action",
+                trackRead: () => { }, // Actions can read but we don't track for reactivity
+                trackWrite: (key) => {
+                    // Track writes from actions for reactivity
+                    affectedKeys.add(key);
+                },
+            }, async () => {
+                return Promise.race([fn.handler(ctx, args), timeout]);
+            });
+            const elapsed = Date.now() - started;
+            if (elapsed > this.slowLogThresholdMs) {
+                logger_js_1.logger.log({
+                    timestamp: Date.now(),
+                    level: "warn",
+                    kind: "system",
+                    message: `Slow action ${name} (${elapsed}ms)`,
+                    context: { elapsed },
+                });
+            }
+            // Compute affected queries from writes
+            const affectedQueries = this.computeAffectedQueries(affectedKeys);
+            return { result, affectedKeys, affectedQueries };
+        });
+    }
+    async withFunctionConcurrency(name, fn) {
+        if (this.functionConcurrencyLimit <= 0) {
+            return fn();
+        }
+        let sem = this.functionSemaphores.get(name);
+        if (!sem) {
+            sem = { count: 0, queue: [] };
+            this.functionSemaphores.set(name, sem);
+        }
+        if (sem.count >= this.functionConcurrencyLimit) {
+            await new Promise((resolve) => sem.queue.push(resolve));
+        }
+        sem.count++;
+        try {
+            return await fn();
+        }
+        finally {
+            sem.count--;
+            const next = sem.queue.shift();
+            if (next)
+                next();
+        }
+    }
+}
+exports.ExecutionEngine = ExecutionEngine;
+//# sourceMappingURL=runner.js.map

package/dist/engine/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/engine/runner.ts"],"names":[],"mappings":";;;AAAA,6CAAgD;AAMhD,yDAAsF;AACtF,oDAA8C;AAC9C,qEAA8D;AAG9D,4EAA4E;AAC5E,gDAA6C;AAE7C,qDAAgE;AAIhE;;;;GAIG;AACH,SAAS,QAAQ,CAAC,MAAyD,EAAE,KAAa;IACtF,+DAA+D;IAC/D,2DAA2D;IAC3D,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,CAAC;AACtE,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,CAAC;AAC5E,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AAClF,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAClD,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AACrD,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,QAAQ;AAEnD,MAAa,eAAe;IAChB,KAAK,CAAkB;IACvB,EAAE,CAAkB;IACpB,KAAK,GAA2B,IAAI,CAAC,CAAC,yCAAyC;IAC/E,SAAS,CAAkC;IAC3C,SAAS,CAAkB;IAC3B,OAAO,CAAU;IACjB,QAAQ,CAAW;IACV,kBAAkB,CAAS;IAC3B,wBAAwB,CAAS;IACjC,kBAAkB,CAA2D;IACtF,WAAW,GAAe,IAAI,CAAC,CAAC,qBAAqB;IACrD,SAAS,CAAY;IACrB,aAAa,GAAyB,IAAI,CAAC;IAC3C,SAAS,GAAoC,IAAI,CAAC;IAE1D,YACI,EAAmB,EACnB,KAAsB,EACtB,OAAgB,EAChB,QAAkB,EAClB,WAAiB,EACjB,SAA4B,EAC5B,KAA8B,EAC9B,SAAqB;QAErB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,GAAG,KAAK,IAAI,IAAI,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;QAC3B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,IAAI,qCAAe,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,CAAC;QAC3E,IAAI,CAAC,wBAAwB,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,IAAI,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,kBAAkB,GAAG,IAAI,GAAG,EAAE,CAAC;QACpC,IAAI,CAAC,WAAW,GAAG,WAAW,IAAI,IAAI,CAAC;QACvC,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,8BAAe,CAAC;IAClD,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,GAAkB;QAC/B,IAAI,CAAC,aAAa,GAAG,GAAG,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,YAAY;QACR,OAAO,IAAI,CAAC,SAAS,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAA0B;QACnC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,mBAAmB,CAAC,SAAmC;QACnD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAED,gBAAgB,CAAC,IAAY,EAAE,UAA8B;QACzD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IAED,cAAc;QACV,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAC3B,CAAC;IAED,kBAAkB,CAAC,IAAY;QAC3B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;;;;;;;OAQG;IACH,oBAAoB;QAChB,OAAO,8CAAuB,CAAC,WAAW,EAAE;aACvC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACV,MAAM,GAAG,GAAG,8CAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC3E,CAAC,CAAC;aACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CACb,IAAY,EACZ,IAAS,EACT,IAAiB,EACjB,OAAgB;QAMhB,wDAAwD;QACxD,MAAM,EAAE,GAAG,8CAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC;QAEvD,6DAA6D;QAC7D,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,mBAAmB,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAEzC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,OAAO;gBACR,OAAO,MAAM,IAAI,CAAC,QAAQ,CACtB,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,OAAO,IAAI,OAAO,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CACzC,CAAC;YACN,KAAK,UAAU;gBACX,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACpD,KAAK,QAAQ;gBACT,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YAClD;gBACI,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QACjE,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,eAAe,CAAC,EAAsB,EAAE,IAAiB,EAAE,YAAoB;QACnF,MAAM,QAAQ,GAAG,EAAE,CAAC,IAAI,IAAI,UAAU,CAAC;QAEvC,QAAQ,QAAQ,EAAE,CAAC;YACf,KAAK,UAAU;gBACX,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CAAC,YAAY,YAAY,0BAA0B,CAAC,CAAC;gBACxE,CAAC;gBACD,sEAAsE;gBACtE,4EAA4E;gBAC5E,0EAA0E;gBAC1E,MAAM;YACV,KAAK,UAAU;gBACX,0CAA0C;gBAC1C,MAAM;YACV,KAAK,QAAQ;gBACT,6CAA6C;gBAC7C,MAAM;YACV;gBACI,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QAC1D,CAAC;IACL,CAAC;IAED;;OAEG;IACK,kBAAkB,CACtB,EAAsB,EACtB,IAAiB,EACjB,YAAoB;QAEpB,IAAI,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjD,OAAO,CAAC,0BAA0B;QACtC,CAAC;QAED,8CAA8C;QAC9C,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,mBAAmB,YAAY,6BAA6B,CAAC,CAAC;QAClF,CAAC;QAED,yBAAyB;QACzB,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,YAAY,YAAY,0BAA0B,CAAC,CAAC;QACxE,CAAC;QAED,iCAAiC;QACjC,KAAK,MAAM,UAAU,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,YAAY,YAAY,yBAAyB,UAAU,EAAE,CAAC,CAAC;YACnF,CAAC;QACL,CAAC;IACL,CAAC;IAED;;OAEG;IACK,mBAAmB,CACvB,EAAsB,EACtB,IAAiB,EACjB,YAAoB;QAEpB,iDAAiD;QACjD,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACzB,OAAO;QACX,CAAC;QAED,gDAAgD;QAChD,IAAI,CAAC,EAAE,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO;QACX,CAAC;QAED,0CAA0C;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,YAAY,YAAY,yBAAyB,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,YAAY,GAAG,EAAE,CAAC,IAAI,CAAC;QAC7B,kEAAkE;QAClE,IAAI,YAAY,KAAK,OAAO,IAAI,YAAY,KAAK,UAAU,IAAI,YAAY,KAAK,QAAQ,EAAE,CAAC;YACvF,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CACX,0BAA0B,YAAY,wBAAwB,YAAY,EAAE,CAC/E,CAAC;YACN,CAAC;QACL,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CACV,IAAY,EACZ,IAAS,EACT,IAAiB,EACjB,OAAe;QAMf,MAAM,EAAE,GAAG,8CAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,YAAY,CAAC,CAAC;QAE3E,iEAAiE;QACjE,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAEtC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC;gBACD,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,CAAC;QACL,CAAC;QAED,+EAA+E;QAC/E,kCAAkC;QAClC,+EAA+E;QAE/E,yEAAyE;QACzE,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAEjD,wDAAwD;QACxD,MAAM,QAAQ,GAAG,IAAA,mBAAQ,EAAC,IAAI,CAAC,CAAC;QAChC,MAAM,gBAAgB,GAAG,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAElD,oEAAoE;QACpE,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,EAAE,CAAC;YACvD,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;gBACxE,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;oBAClB,qDAAqD;oBACrD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC;wBACvC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;4BACzC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;wBAC9C,CAAC;oBACL,CAAC;oBAED,kBAAM,CAAC,GAAG,CAAC;wBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,KAAK,EAAE,OAAO;wBACd,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,uBAAuB,IAAI,EAAE;wBACtC,OAAO,EAAE,EAAE,gBAAgB,EAAE;qBAChC,CAAC,CAAC;oBAEH,uDAAuD;oBACvD,OAAO;wBACH,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,YAAY,EAAE,IAAI,GAAG,EAAU;wBAC/B,eAAe,EAAE,IAAI,GAAG,EAAU;qBACrC,CAAC;gBACN,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,4CAA4C;gBAC5C,kBAAM,CAAC,GAAG,CAAC;oBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,iCAAiC,IAAI,EAAE;oBAChD,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACvE,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,+EAA+E;QAE/E,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACxD,IAAI,aAAa,GAAG,eAAe,EAAE,CAAC;YAClC,kBAAM,CAAC,GAAG,CAAC;gBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,mCAAmC;gBAC5C,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,eAAe,EAAE;aACjE,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,SAAS,IAAI,oBAAoB,CAAC,CAAC;QACvD,CAAC;QAED,4BAA4B;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEjC,MAAM,GAAG,GAAa;YAClB,IAAI;YACJ,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAwB;YACpC,UAAU,EAAE,IAAA,qCAAwB,EAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,EAAN,kBAAM;YACN,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,SAAU;YAClB,OAAO,CAAI,KAAa;gBACpB,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACvE,OAAO,SAAS,CAAC,OAAO,CAAI,KAAK,EAAE,SAAS,CAAC,CAAC;YAClD,CAAC;YACD,OAAO,CAAI,KAAa,EAAE,iBAAyB,SAAS;gBACxD,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACvE,OAAO,SAAS,CAAC,qBAAqB,CAAI,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;YAChF,CAAC;SACJ,CAAC;QAEF,kBAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEtC,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAE3B,sCAAsC;YACtC,MAAM,mBAAmB,GAAa,EAAE,CAAC;YAEzC,MAAM,MAAM,GAAG,MAAM,6BAAgB,CAAC,GAAG,CACrC;gBACI,IAAI,EAAE,OAAO;gBACb,OAAO;gBACP,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE;oBACf,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;oBACvC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;oBAChD,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClC,CAAC;gBACD,UAAU,EAAE,GAAG,EAAE;oBACb,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;gBAC/C,CAAC;aACJ,EACD,KAAK,IAAI,EAAE;gBACP,6BAA6B;gBAC7B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;oBACd,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;oBACzD,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,gBAAgB,EAAE,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;oBAClE,mBAAmB,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpD,CAAC;gBAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CACtC,UAAU,CACN,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,YAAY,CAAC,CAAC,EAClD,gBAAgB,CACnB,CACJ,CAAC;gBAEF,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,CAAC,CACJ,CAAC;YAEF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YAErC,+EAA+E;YAC/E,wFAAwF;YACxF,+EAA+E;YAE/E,IACI,CAAC,gBAAgB;gBACjB,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE;gBAC/B,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAChC,CAAC;gBACC,IAAI,CAAC;oBACD,0CAA0C;oBAC1C,MAAM,WAAW,GAAG;wBAChB,MAAM;wBACN,cAAc,EAAE,mBAAmB;qBACtC,CAAC;oBAEF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC;oBACtD,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CACtB,gBAAgB,EAChB,WAAW,EACX,UAAU,EACV,UAAU,CACb,CAAC;oBAEF,kDAAkD;oBAClD,KAAK,MAAM,MAAM,IAAI,mBAAmB,EAAE,CAAC;wBACvC,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;oBACnE,CAAC;oBAED,kBAAM,CAAC,GAAG,CAAC;wBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,KAAK,EAAE,OAAO;wBACd,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,2BAA2B,IAAI,EAAE;wBAC1C,OAAO,EAAE;4BACL,gBAAgB;4BAChB,YAAY,EAAE,mBAAmB,CAAC,MAAM;4BACxC,IAAI,EAAE,UAAU;yBACnB;qBACJ,CAAC,CAAC;gBACP,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACX,qCAAqC;oBACrC,kBAAM,CAAC,GAAG,CAAC;wBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,KAAK,EAAE,MAAM;wBACb,IAAI,EAAE,OAAO;wBACb,OAAO,EAAE,oCAAoC,IAAI,EAAE;wBACnD,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;qBACvE,CAAC,CAAC;gBACP,CAAC;YACL,CAAC;YAED,+EAA+E;YAE/E,IAAI,OAAO,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACpC,kBAAM,CAAC,GAAG,CAAC;oBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,cAAc,IAAI,KAAK,OAAO,KAAK;oBAC5C,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE;iBAChC,CAAC,CAAC;YACP,CAAC;YAED,uDAAuD;YACvD,OAAO;gBACH,MAAM;gBACN,YAAY,EAAE,IAAI,GAAG,EAAU;gBAC/B,eAAe,EAAE,IAAI,GAAG,EAAU;aACrC,CAAC;QACN,CAAC,CAAC,CAAC;IACP,CAAC;IAED,KAAK,CAAC,WAAW,CACb,IAAY,EACZ,IAAS,EACT,IAAiB;QAEjB,MAAM,EAAE,GAAG,8CAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC;QAEjF,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YACV,IAAI,CAAC;gBACD,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAM,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACnE,CAAC;QACL,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACxD,IAAI,aAAa,GAAG,kBAAkB,EAAE,CAAC;YACrC,kBAAM,CAAC,GAAG,CAAC;gBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,sCAAsC;gBAC/C,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,kBAAkB,EAAE;aACpE,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,oBAAoB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QAEvC,sBAAsB;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,KAAsB,EAAE,EAAE;gBAC5E,MAAM,GAAG,GAAgB;oBACrB,IAAI;oBACJ,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,CAAoB;oBACnD,0DAA0D;oBAC1D,UAAU,EAAE,IAAA,6BAAgB,EAAC,IAAI,CAAC,EAAE,CAAC;oBACrC,MAAM,EAAN,kBAAM;oBACN,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,OAAO,EAAE,IAAI,CAAC,OAAO;oBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,MAAM,EAAE,SAAU;oBAClB,OAAO,CAAI,KAAa;wBACpB,OAAO,SAAS,CAAC,OAAO,CAAI,KAAK,EAAE,GAAG,CAAC,CAAC;oBAC5C,CAAC;oBACD,OAAO,CAAI,KAAa,EAAE,iBAAyB,SAAS;wBACxD,OAAO,SAAS,CAAC,qBAAqB,CAAI,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;oBAC1E,CAAC;iBACJ,CAAC;gBAEF,kBAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBAEtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CACtC,UAAU,CACN,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC,EACrD,mBAAmB,CACtB,CACJ,CAAC;gBAEF,OAAO,6BAAgB,CAAC,GAAG,CACvB;oBACI,IAAI,EAAE,UAAU;oBAChB,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;oBACnB,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;wBAChB,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBAC1B,CAAC;iBACJ,EACD,KAAK,IAAI,EAAE;oBACP,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1D,CAAC,CACJ,CAAC;YACN,CAAC,CAAC,CAAC;YAEH,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACrC,IAAI,OAAO,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACpC,kBAAM,CAAC,GAAG,CAAC;oBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iBAAiB,IAAI,KAAK,OAAO,KAAK;oBAC/C,OAAO,EAAE,EAAE,OAAO,EAAE;iBACvB,CAAC,CAAC;YACP,CAAC;YACD,OAAO,OAAO,CAAC;QACnB,CAAC,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QAElE,+DAA+D;QAC/D,oFAAoF;QACpF,IAAI,IAAI,CAAC,SAAS,IAAI,YAAY,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;YAC1C,IAAI,CAAC;gBACD,mEAAmE;gBACnE,MAAM,sBAAsB,GAAG,IAAI,GAAG,EAAU,CAAC;gBACjD,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;oBAC7B,uEAAuE;oBACvE,2DAA2D;oBAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;oBAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;wBACpB,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,uCAAuC;wBAEpE,8DAA8D;wBAC9D,MAAM,kBAAkB,GACpB,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;4BAC1B,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;4BAC7B,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC;4BAC9B,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC;4BACrC,UAAU,KAAK,QAAQ;4BACvB,UAAU,KAAK,kBAAkB,CAAC;wBAEtC,8DAA8D;wBAC9D,IAAI,CAAC,kBAAkB,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;4BACjE,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;4BACvC,IAAI,OAAO,IAAI,CAAC,SAAS,CAAC,mBAAmB,KAAK,UAAU,EAAE,CAAC;gCAC3D,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,wBAAwB,EAAE;oCACzD,UAAU;oCACV,MAAM,EAAE,QAAQ;iCACnB,CAAC,CAAC;4BACP,CAAC;wBACL,CAAC;oBACL,CAAC;gBACL,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,wDAAwD;gBACxD,kBAAM,CAAC,GAAG,CAAC;oBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,8CAA8C;oBACvD,OAAO,EAAE,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACvE,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;IACrD,CAAC;IAEM,sBAAsB,CAAC,YAAyB;QACnD,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACtB,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC3B,CAAC;QACL,CAAC;QACD,OAAO,eAAe,CAAC;IAC3B,CAAC;IAEM,iBAAiB,CAAC,OAAe;QACpC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,SAAS,CACX,IAAY,EACZ,IAAS,EACT,IAAiB;QAMjB,MAAM,EAAE,GAAG,8CAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,YAAY,CAAC,CAAC;QAE7E,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACxD,IAAI,aAAa,GAAG,gBAAgB,EAAE,CAAC;YACnC,kBAAM,CAAC,GAAG,CAAC;gBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,oCAAoC;gBAC7C,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,gBAAgB,EAAE;aAClE,CAAC,CAAC;YACH,MAAM,IAAI,KAAK,CAAC,UAAU,IAAI,oBAAoB,CAAC,CAAC;QACxD,CAAC;QAED,iEAAiE;QACjE,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;QAEvC,sBAAsB;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAEjC,MAAM,GAAG,GAAc;YACnB,IAAI;YACJ,MAAM,EAAN,kBAAM;YACN,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,SAAS,CAAoB;YACnD,UAAU,EAAE,IAAA,6BAAgB,EAAC,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,CAAI,KAAa;gBACpB,OAAO,SAAS,CAAC,OAAO,CAAI,KAAK,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YACD,OAAO,CAAI,KAAa,EAAE,iBAAyB,SAAS;gBACxD,OAAO,SAAS,CAAC,qBAAqB,CAAI,KAAK,EAAE,cAAc,EAAE,GAAG,CAAC,CAAC;YAC1E,CAAC;SACJ,CAAC;QAEF,kBAAM,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEtC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CACtC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,IAAI,YAAY,CAAC,CAAC,EAAE,iBAAiB,CAAC,CACrF,CAAC;QAEF,OAAO,IAAI,CAAC,uBAAuB,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,MAAM,6BAAgB,CAAC,GAAG,CACrC;gBACI,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,qDAAqD;gBAC1E,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;oBAChB,2CAA2C;oBAC3C,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC1B,CAAC;aACJ,EACD,KAAK,IAAI,EAAE;gBACP,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;YAC1D,CAAC,CACJ,CAAC;YACF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACrC,IAAI,OAAO,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBACpC,kBAAM,CAAC,GAAG,CAAC;oBACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,KAAK,EAAE,MAAM;oBACb,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,eAAe,IAAI,KAAK,OAAO,KAAK;oBAC7C,OAAO,EAAE,EAAE,OAAO,EAAE;iBACvB,CAAC,CAAC;YACP,CAAC;YAED,uCAAuC;YACvC,MAAM,eAAe,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;YAElE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;IACP,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAI,IAAY,EAAE,EAAoB;QACvE,IAAI,IAAI,CAAC,wBAAwB,IAAI,CAAC,EAAE,CAAC;YACrC,OAAO,EAAE,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACP,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;YAC9B,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAC7C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,GAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,CAAC;QACD,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,IAAI,CAAC;YACD,OAAO,MAAM,EAAE,EAAE,CAAC;QACtB,CAAC;gBAAS,CAAC;YACP,GAAG,CAAC,KAAK,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAC/B,IAAI,IAAI;gBAAE,IAAI,EAAE,CAAC;QACrB,CAAC;IACL,CAAC;CACJ;AAhuBD,0CAguBC"}

package/dist/functions/built-in/auth-apikey.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Built-in Auth Functions: API Key Management
+ *
+ * - auth.createApiKey: Create a new admin API key
+ * - auth.revokeApiKey: Revoke an API key
+ * - auth.rotateApiKey: Rotate an API key (revoke old, create new)
+ * - auth.listApiKeys: List all API keys for current tenant
+ *
+ * Features:
+ * - Raw key shown ONCE at creation
+ * - Only keyHash stored (SHA-256 + pepper)
+ * - Tenant-bound and permission-scoped
+ * - Immediate revocation with cache invalidation
+ * - Comprehensive audit logging
+ * - WebSocket session eviction on revoke
+ */
+export declare const authCreateApiKey: import("../definition").FunctionDefinition;
+export declare const authRevokeApiKey: import("../definition").FunctionDefinition;
+export declare const authRotateApiKey: import("../definition").FunctionDefinition;
+export declare const authListApiKeys: import("../definition").FunctionDefinition;
+//# sourceMappingURL=auth-apikey.d.ts.map