@atria/server 0.0.10 → 0.0.13

package/dist/auth/runtime.js

@@ -0,0 +1,539 @@
+import { randomBytes } from "node:crypto";
+import { DEFAULT_AUTH_BROKER_ORIGIN } from "@atria/shared";
+import { parseCookies, serializeCookie } from "./cookies.js";
+import { hashSecret, verifySecret } from "./hash.js";
+import { buildOAuthAuthorizationUrl, createOAuthStateId, getOAuthProfileFromCode, listConfiguredOAuthProviders } from "./oauth.js";
+import { createDbAuthStore } from "./store.js";
+import { validateLoginCredentials, validateRegisterCredentials } from "./validation.js";
+const SESSION_COOKIE_NAME = "atria_session";
+const SESSION_MAX_AGE_SECONDS = 60 * 60 * 24 * 30;
+const OAUTH_STATE_MAX_AGE_MS = 10 * 60 * 1000;
+const SESSION_PRUNE_INTERVAL_MS = 60 * 1000;
+const isOAuthProviderId = (value) => value === "google" || value === "github";
+const parseProviderFromPath = (pathname, prefix) => {
+    if (!pathname.startsWith(prefix)) {
+        return null;
+    }
+    const provider = pathname.slice(prefix.length).replace(/^\/+/, "").split("/")[0] ?? "";
+    return isOAuthProviderId(provider) ? provider : null;
+};
+const writeJson = (response, statusCode, payload) => {
+    response.writeHead(statusCode, { "content-type": "application/json; charset=utf-8" });
+    response.end(JSON.stringify(payload));
+};
+const writeRedirect = (response, location, cookieHeader) => {
+    response.writeHead(302, cookieHeader ? { location, "set-cookie": cookieHeader } : { location });
+    response.end();
+};
+const makeSessionId = () => randomBytes(32).toString("hex");
+const nowMs = () => Date.now();
+const getOrigin = (port) => process.env.ATRIA_AUTH_ORIGIN?.trim() || `http://studio.localhost:${port}`;
+const getProviderCallbackUrl = (provider, port) => `${getOrigin(port)}/api/auth/callback/${provider}`;
+const getBrokerOrigin = () => {
+    const configured = process.env.ATRIA_AUTH_BROKER_ORIGIN?.trim();
+    if (configured) {
+        const lowered = configured.toLowerCase();
+        if (lowered === "off" || lowered === "local" || lowered === "false") {
+            return null;
+        }
+        return configured;
+    }
+    return DEFAULT_AUTH_BROKER_ORIGIN;
+};
+const readRequestSessionId = (request) => {
+    const cookies = parseCookies(request.headers);
+    return cookies[SESSION_COOKIE_NAME] ?? null;
+};
+const clearSessionCookie = () => serializeCookie(SESSION_COOKIE_NAME, "", {
+    httpOnly: true,
+    sameSite: "Lax",
+    maxAge: 0
+});
+const createSessionCookie = (sessionId) => serializeCookie(SESSION_COOKIE_NAME, sessionId, {
+    httpOnly: true,
+    sameSite: "Lax",
+    maxAge: SESSION_MAX_AGE_SECONDS
+});
+const createSessionResult = async (store, request, pruneExpiredSessions) => {
+    const sessionId = readRequestSessionId(request);
+    if (!sessionId) {
+        return { authenticated: false, user: null };
+    }
+    await pruneExpiredSessions();
+    const session = await store.getSessionById(sessionId);
+    if (!session) {
+        return { authenticated: false, user: null };
+    }
+    if (Date.parse(session.expiresAt) <= nowMs()) {
+        await store.deleteSessionById(session.id);
+        return { authenticated: false, user: null };
+    }
+    const user = await store.getUserById(session.userId);
+    if (!user) {
+        await store.deleteSessionById(session.id);
+        return { authenticated: false, user: null };
+    }
+    return {
+        authenticated: true,
+        user: {
+            id: user.id,
+            email: user.email,
+            name: user.name,
+            avatarUrl: user.avatarUrl
+        }
+    };
+};
+const parseJsonBody = async (request) => new Promise((resolve, reject) => {
+    let body = "";
+    request.on("data", (chunk) => {
+        body += chunk.toString();
+        if (body.length > 1_000_000) {
+            reject(new Error("Request body is too large."));
+        }
+    });
+    request.on("end", () => {
+        if (!body) {
+            resolve({});
+            return;
+        }
+        try {
+            resolve(JSON.parse(body));
+        }
+        catch {
+            reject(new Error("Invalid JSON body."));
+        }
+    });
+    request.on("error", reject);
+});
+const toBrokerProviders = (payload) => {
+    if (typeof payload !== "object" || payload === null || !("providers" in payload)) {
+        return [];
+    }
+    const providers = payload.providers;
+    if (!Array.isArray(providers)) {
+        return [];
+    }
+    return providers.filter((entry) => typeof entry === "string" ? isOAuthProviderId(entry) : false);
+};
+const listBrokerProviders = async (brokerOrigin) => {
+    try {
+        const response = await fetch(`${brokerOrigin}/oauth/providers`, {
+            headers: {
+                accept: "application/json"
+            }
+        });
+        if (!response.ok) {
+            return [];
+        }
+        const payload = (await response.json());
+        return toBrokerProviders(payload);
+    }
+    catch {
+        return [];
+    }
+};
+const parseBrokerExchangePayload = (payload) => {
+    if (typeof payload !== "object" || payload === null) {
+        return null;
+    }
+    const typedPayload = payload;
+    if (typedPayload.ok !== true) {
+        return null;
+    }
+    if (typeof typedPayload.provider !== "string" || !isOAuthProviderId(typedPayload.provider)) {
+        return null;
+    }
+    const user = typedPayload.user;
+    if (!user || typeof user.providerUserId !== "string" || user.providerUserId.length === 0) {
+        return null;
+    }
+    return {
+        provider: typedPayload.provider,
+        user: {
+            providerUserId: user.providerUserId,
+            email: typeof user.email === "string" ? user.email : null,
+            name: typeof user.name === "string" ? user.name : null,
+            avatarUrl: typeof user.avatarUrl === "string" ? user.avatarUrl : null,
+            emailVerified: user.emailVerified === true
+        }
+    };
+};
+const exchangeBrokerCode = async (brokerOrigin, code) => {
+    const exchangeUrl = new URL("/oauth/exchange", brokerOrigin);
+    exchangeUrl.searchParams.set("code", code);
+    const response = await fetch(exchangeUrl.toString(), {
+        method: "GET",
+        headers: {
+            accept: "application/json"
+        }
+    });
+    const payload = (await response.json().catch(() => null));
+    const parsed = parseBrokerExchangePayload(payload);
+    if (!response.ok || !parsed) {
+        throw new Error("Broker code exchange failed.");
+    }
+    return {
+        provider: parsed.provider,
+        providerUserId: parsed.user.providerUserId,
+        email: parsed.user.email,
+        name: parsed.user.name,
+        avatarUrl: parsed.user.avatarUrl,
+        emailVerified: parsed.user.emailVerified
+    };
+};
+export const createAuthRuntime = (options) => {
+    const store = createDbAuthStore(options.projectRoot);
+    const oauthStates = new Map();
+    let lastExpiredSessionCleanupAt = 0;
+    const pruneExpiredSessionsIfNeeded = async () => {
+        const now = nowMs();
+        if (now - lastExpiredSessionCleanupAt < SESSION_PRUNE_INTERVAL_MS) {
+            return;
+        }
+        lastExpiredSessionCleanupAt = now;
+        await store.deleteExpiredSessions(new Date(now).toISOString());
+    };
+    const issueSession = async (userId) => {
+        await pruneExpiredSessionsIfNeeded();
+        const sessionId = makeSessionId();
+        const createdAt = new Date().toISOString();
+        const expiresAt = new Date(nowMs() + SESSION_MAX_AGE_SECONDS * 1000).toISOString();
+        await store.createSession({
+            id: sessionId,
+            userId,
+            createdAt,
+            expiresAt
+        });
+        return sessionId;
+    };
+    const consumeState = (stateId) => {
+        const existingState = oauthStates.get(stateId);
+        if (!existingState) {
+            return null;
+        }
+        oauthStates.delete(stateId);
+        if (Date.parse(existingState.expiresAt) <= nowMs()) {
+            return null;
+        }
+        return existingState;
+    };
+    const handleStart = async (provider, response, requestUrl) => {
+        const brokerOrigin = getBrokerOrigin();
+        if (brokerOrigin) {
+            const nextPath = requestUrl.searchParams.get("next");
+            const redirectPath = nextPath && nextPath.startsWith("/") ? nextPath : "/";
+            const mode = requestUrl.searchParams.get("mode");
+            const returnPath = mode === "login" ? "/login" : mode === "create" ? "/create" : "/setup";
+            const returnTo = new URL(returnPath, getOrigin(options.port));
+            returnTo.searchParams.set("provider", provider);
+            if (redirectPath !== "/") {
+                returnTo.searchParams.set("next", redirectPath);
+            }
+            const brokerStartUrl = new URL(`/oauth/start/${provider}`, brokerOrigin);
+            brokerStartUrl.searchParams.set("return_to", returnTo.toString());
+            writeRedirect(response, brokerStartUrl.toString());
+            return;
+        }
+        const configuredProviders = listConfiguredOAuthProviders();
+        if (!configuredProviders.includes(provider)) {
+            writeJson(response, 400, {
+                ok: false,
+                error: `OAuth provider "${provider}" is not configured.`
+            });
+            return;
+        }
+        const stateId = createOAuthStateId();
+        const createdAt = new Date().toISOString();
+        const expiresAt = new Date(nowMs() + OAUTH_STATE_MAX_AGE_MS).toISOString();
+        const nextPath = requestUrl.searchParams.get("next");
+        const redirectPath = nextPath && nextPath.startsWith("/") ? nextPath : "/";
+        oauthStates.set(stateId, {
+            id: stateId,
+            provider,
+            createdAt,
+            expiresAt,
+            redirectPath
+        });
+        const callbackUrl = getProviderCallbackUrl(provider, options.port);
+        const authorizationUrl = buildOAuthAuthorizationUrl(provider, callbackUrl, stateId);
+        writeRedirect(response, authorizationUrl);
+    };
+    const handleCallback = async (provider, response, requestUrl) => {
+        const code = requestUrl.searchParams.get("code");
+        const stateId = requestUrl.searchParams.get("state");
+        if (!code || !stateId) {
+            writeJson(response, 400, {
+                ok: false,
+                error: "Missing OAuth callback parameters."
+            });
+            return;
+        }
+        const state = consumeState(stateId);
+        if (!state || state.provider !== provider) {
+            writeJson(response, 400, {
+                ok: false,
+                error: "Invalid or expired OAuth state."
+            });
+            return;
+        }
+        try {
+            const callbackUrl = getProviderCallbackUrl(provider, options.port);
+            const profile = await getOAuthProfileFromCode(provider, code, callbackUrl);
+            const user = await store.upsertOAuthProfile(profile);
+            await store.clearPreferredAuthMethod();
+            const sessionId = await issueSession(user.id);
+            writeRedirect(response, state.redirectPath || "/", createSessionCookie(sessionId));
+        }
+        catch (error) {
+            writeJson(response, 500, {
+                ok: false,
+                error: error instanceof Error ? error.message : "OAuth callback failed."
+            });
+        }
+    };
+    const handleBrokerExchange = async (request, response, requestUrl) => {
+        const brokerOrigin = getBrokerOrigin();
+        if (!brokerOrigin) {
+            writeJson(response, 400, {
+                ok: false,
+                error: "OAuth broker is disabled."
+            });
+            return;
+        }
+        let code = requestUrl.searchParams.get("code");
+        if (!code && request.method === "POST") {
+            const payload = await parseJsonBody(request);
+            const bodyCode = payload.code;
+            code = typeof bodyCode === "string" ? bodyCode : null;
+        }
+        if (!code) {
+            writeJson(response, 400, {
+                ok: false,
+                error: "Missing broker code."
+            });
+            return;
+        }
+        try {
+            const profile = await exchangeBrokerCode(brokerOrigin, code);
+            const user = await store.upsertOAuthProfile(profile);
+            await store.clearPreferredAuthMethod();
+            const sessionId = await issueSession(user.id);
+            response.writeHead(200, {
+                "content-type": "application/json; charset=utf-8",
+                "set-cookie": createSessionCookie(sessionId)
+            });
+            response.end(JSON.stringify({
+                ok: true,
+                authenticated: true,
+                user: {
+                    id: user.id,
+                    email: user.email,
+                    name: user.name,
+                    avatarUrl: user.avatarUrl
+                }
+            }));
+        }
+        catch (error) {
+            writeJson(response, 500, {
+                ok: false,
+                error: error instanceof Error ? error.message : "Broker exchange failed."
+            });
+        }
+    };
+    const parseRequestPayload = async (request, response) => {
+        try {
+            return await parseJsonBody(request);
+        }
+        catch (error) {
+            writeJson(response, 400, {
+                ok: false,
+                error: error instanceof Error ? error.message : "Invalid JSON body."
+            });
+            return null;
+        }
+    };
+    const respondAuthenticated = async (response, user) => {
+        const sessionId = await issueSession(user.id);
+        response.writeHead(200, {
+            "content-type": "application/json; charset=utf-8",
+            "set-cookie": createSessionCookie(sessionId)
+        });
+        response.end(JSON.stringify({
+            ok: true,
+            authenticated: true,
+            user
+        }));
+    };
+    const handleEmailRegister = async (request, response) => {
+        const payload = await parseRequestPayload(request, response);
+        if (!payload) {
+            return;
+        }
+        const validation = validateRegisterCredentials(payload);
+        if (!validation.ok) {
+            writeJson(response, 400, {
+                ok: false,
+                error: validation.error
+            });
+            return;
+        }
+        try {
+            const passwordHash = await hashSecret(validation.value.password);
+            const registration = await store.registerOwnerWithPassword({
+                email: validation.value.email,
+                passwordHash,
+                name: validation.value.name
+            });
+            if (!registration.ok) {
+                const errorMessage = registration.reason === "owner_exists"
+                    ? "Owner account already exists."
+                    : "Email is already in use.";
+                writeJson(response, 409, {
+                    ok: false,
+                    error: errorMessage,
+                    reason: registration.reason
+                });
+                return;
+            }
+            await store.clearPreferredAuthMethod();
+            await respondAuthenticated(response, {
+                id: registration.user.id,
+                email: registration.user.email,
+                name: registration.user.name,
+                avatarUrl: registration.user.avatarUrl
+            });
+        }
+        catch (error) {
+            writeJson(response, 500, {
+                ok: false,
+                error: error instanceof Error ? error.message : "Could not create owner account."
+            });
+        }
+    };
+    const handleEmailLogin = async (request, response) => {
+        const payload = await parseRequestPayload(request, response);
+        if (!payload) {
+            return;
+        }
+        const validation = validateLoginCredentials(payload);
+        if (!validation.ok) {
+            writeJson(response, 400, {
+                ok: false,
+                error: validation.error
+            });
+            return;
+        }
+        try {
+            const userWithPassword = await store.getUserWithPasswordByEmail(validation.value.email);
+            if (!userWithPassword) {
+                writeJson(response, 401, {
+                    ok: false,
+                    error: "Invalid email or password."
+                });
+                return;
+            }
+            const isValidPassword = await verifySecret(validation.value.password, userWithPassword.passwordHash);
+            if (!isValidPassword) {
+                writeJson(response, 401, {
+                    ok: false,
+                    error: "Invalid email or password."
+                });
+                return;
+            }
+            await respondAuthenticated(response, userWithPassword.user);
+        }
+        catch (error) {
+            writeJson(response, 500, {
+                ok: false,
+                error: error instanceof Error ? error.message : "Could not complete sign in."
+            });
+        }
+    };
+    return {
+        hasUsers: () => store.hasUsers(),
+        getOwnerSetupState: () => store.getOwnerSetupState(),
+        getSession: (request) => createSessionResult(store, request, pruneExpiredSessionsIfNeeded),
+        close: async () => {
+            await store.close();
+        },
+        handleRequest: async (request, response, requestUrl) => {
+            const pathname = requestUrl.pathname;
+            if (!pathname.startsWith("/api/auth/")) {
+                return false;
+            }
+            if (pathname === "/api/auth/providers") {
+                const localProviders = listConfiguredOAuthProviders();
+                const brokerOrigin = getBrokerOrigin();
+                const providers = new Set(["email", ...localProviders]);
+                if (brokerOrigin) {
+                    const brokerProviders = await listBrokerProviders(brokerOrigin);
+                    for (const provider of brokerProviders) {
+                        providers.add(provider);
+                    }
+                }
+                writeJson(response, 200, {
+                    ok: true,
+                    providers: [...providers]
+                });
+                return true;
+            }
+            if (pathname === "/api/auth/session") {
+                writeJson(response, 200, await createSessionResult(store, request, pruneExpiredSessionsIfNeeded));
+                return true;
+            }
+            if (pathname === "/api/auth/logout") {
+                const sessionId = readRequestSessionId(request);
+                if (sessionId) {
+                    await store.deleteSessionById(sessionId);
+                }
+                response.writeHead(204, {
+                    "set-cookie": clearSessionCookie()
+                });
+                response.end();
+                return true;
+            }
+            if (pathname === "/api/auth/email/register") {
+                if (request.method !== "POST") {
+                    writeJson(response, 405, {
+                        ok: false,
+                        error: "Method not allowed."
+                    });
+                    return true;
+                }
+                await handleEmailRegister(request, response);
+                return true;
+            }
+            if (pathname === "/api/auth/email/login") {
+                if (request.method !== "POST") {
+                    writeJson(response, 405, {
+                        ok: false,
+                        error: "Method not allowed."
+                    });
+                    return true;
+                }
+                await handleEmailLogin(request, response);
+                return true;
+            }
+            if (pathname === "/api/auth/broker/exchange") {
+                await handleBrokerExchange(request, response, requestUrl);
+                return true;
+            }
+            const startProvider = parseProviderFromPath(pathname, "/api/auth/start/");
+            if (startProvider) {
+                await handleStart(startProvider, response, requestUrl);
+                return true;
+            }
+            const callbackProvider = parseProviderFromPath(pathname, "/api/auth/callback/");
+            if (callbackProvider) {
+                await handleCallback(callbackProvider, response, requestUrl);
+                return true;
+            }
+            writeJson(response, 404, {
+                ok: false,
+                error: "Auth endpoint not found."
+            });
+            return true;
+        }
+    };
+};
+//# sourceMappingURL=runtime.js.map

package/dist/auth/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/auth/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,0BAA0B,EAAmB,MAAM,eAAe,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,uBAAuB,EACvB,4BAA4B,EAC7B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAkB,MAAM,YAAY,CAAC;AAE/D,OAAO,EAAE,wBAAwB,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAExF,MAAM,mBAAmB,GAAG,eAAe,CAAC;AAC5C,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAClD,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9C,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AA+C5C,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAA4B,EAAE,CACpE,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,CAAC;AAE3C,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAE,MAAc,EAA0B,EAAE;IACzF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACvF,OAAO,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC,CAAC;AAEF,MAAM,SAAS,GAAG,CAAC,QAAwB,EAAE,UAAkB,EAAE,OAAgB,EAAQ,EAAE;IACzF,QAAQ,CAAC,SAAS,CAAC,UAAU,EAAE,EAAE,cAAc,EAAE,iCAAiC,EAAE,CAAC,CAAC;IACtF,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACxC,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,QAAwB,EAAE,QAAgB,EAAE,YAAqB,EAAQ,EAAE;IAChG,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChG,QAAQ,CAAC,GAAG,EAAE,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,GAAW,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEpE,MAAM,KAAK,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AAEvC,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE,CACzC,OAAO,CAAC,GAAG,CAAC,iBAAiB,EAAE,IAAI,EAAE,IAAI,2BAA2B,IAAI,EAAE,CAAC;AAE7E,MAAM,sBAAsB,GAAG,CAAC,QAAyB,EAAE,IAAY,EAAU,EAAE,CACjF,GAAG,SAAS,CAAC,IAAI,CAAC,sBAAsB,QAAQ,EAAE,CAAC;AAErD,MAAM,eAAe,GAAG,GAAkB,EAAE;IAC1C,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACpE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,0BAA0B,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,oBAAoB,GAAG,CAAC,OAAwB,EAAiB,EAAE;IACvE,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,OAAO,OAAO,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC;AAC9C,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,GAAW,EAAE,CACtC,eAAe,CAAC,mBAAmB,EAAE,EAAE,EAAE;IACvC,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,KAAK;IACf,MAAM,EAAE,CAAC;CACV,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,CAAC,SAAiB,EAAU,EAAE,CACxD,eAAe,CAAC,mBAAmB,EAAE,SAAS,EAAE;IAC9C,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,KAAK;IACf,MAAM,EAAE,uBAAuB;CAChC,CAAC,CAAC;AAEL,MAAM,mBAAmB,GAAG,KAAK,EAC/B,KAAgB,EAChB,OAAwB,EACxB,oBAAyC,EACjB,EAAE;IAC1B,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,oBAAoB,EAAE,CAAC;IAE7B,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1C,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,KAAK,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1C,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9C,CAAC;IAED,OAAO;QACL,aAAa,EAAE,IAAI;QACnB,IAAI,EAAE;YACJ,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,SAAS,EAAE,IAAI,CAAC,SAAS;SAC1B;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,KAAK,EAAE,OAAwB,EAAoC,EAAE,CACzF,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,IAAI,IAAI,GAAG,EAAE,CAAC;IAEd,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE;QAC3B,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QACrB,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,CAAC,EAAE,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC,CAAC,CAAC;AAEL,MAAM,iBAAiB,GAAG,CAAC,OAAgB,EAAqB,EAAE;IAChE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,WAAW,IAAI,OAAO,CAAC,EAAE,CAAC;QACjF,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAI,OAAmC,CAAC,SAAS,CAAC;IACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,EAA4B,EAAE,CAC1D,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAC7D,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,KAAK,EAAE,YAAoB,EAA8B,EAAE;IACrF,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,YAAY,kBAAkB,EAAE;YAC9D,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;aAC3B;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAY,CAAC;QACnD,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,0BAA0B,GAAG,CAAC,OAAgB,EAAgC,EAAE;IACpF,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,YAAY,GAAG,OAUpB,CAAC;IAEF,IAAI,YAAY,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,YAAY,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC;IAC/B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,YAAY,CAAC,QAAQ;QAC/B,IAAI,EAAE;YACJ,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;YACzD,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;YACtD,SAAS,EAAE,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI;YACrE,aAAa,EAAE,IAAI,CAAC,aAAa,KAAK,IAAI;SAC3C;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,YAAoB,EAAE,IAAY,EAAyB,EAAE;IAC7F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAC7D,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE3C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE;QACnD,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,MAAM,EAAE,kBAAkB;SAC3B;KACF,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAY,CAAC;IACrE,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,cAAc;QAC1C,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK;QACxB,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;QACtB,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS;QAChC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa;KACzC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAiC,EAAe,EAAE;IAClF,MAAM,KAAK,GAAG,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsB,CAAC;IAClD,IAAI,2BAA2B,GAAG,CAAC,CAAC;IAEpC,MAAM,4BAA4B,GAAG,KAAK,IAAmB,EAAE;QAC7D,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;QACpB,IAAI,GAAG,GAAG,2BAA2B,GAAG,yBAAyB,EAAE,CAAC;YAClE,OAAO;QACT,CAAC;QAED,2BAA2B,GAAG,GAAG,CAAC;QAClC,MAAM,KAAK,CAAC,qBAAqB,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,MAAc,EAAmB,EAAE;QAC7D,MAAM,4BAA4B,EAAE,CAAC;QAErC,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,uBAAuB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,MAAM,KAAK,CAAC,aAAa,CAAC;YACxB,EAAE,EAAE,SAAS;YACb,MAAM;YACN,SAAS;YACT,SAAS;SACV,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,OAAe,EAAqB,EAAE;QAC1D,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EACvB,QAAyB,EACzB,QAAwB,EACxB,UAAe,EACA,EAAE;QACjB,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QACvC,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACrD,MAAM,YAAY,GAAG,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;YAC3E,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,UAAU,GAAG,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC1F,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9D,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YAChD,IAAI,YAAY,KAAK,GAAG,EAAE,CAAC;gBACzB,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,gBAAgB,QAAQ,EAAE,EAAE,YAAY,CAAC,CAAC;YACzE,cAAc,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;YAClE,aAAa,CAAC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,MAAM,mBAAmB,GAAG,4BAA4B,EAAE,CAAC;QAC3D,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,mBAAmB,QAAQ,sBAAsB;aACzD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,EAAE,GAAG,sBAAsB,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3E,MAAM,QAAQ,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;QAE3E,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE;YACvB,EAAE,EAAE,OAAO;YACX,QAAQ;YACR,SAAS;YACT,SAAS;YACT,YAAY;SACb,CAAC,CAAC;QAEH,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,gBAAgB,GAAG,0BAA0B,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;QACpF,aAAa,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IAC5C,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAC1B,QAAyB,EACzB,QAAwB,EACxB,UAAe,EACA,EAAE;QACjB,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACtB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,oCAAoC;aAC5C,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1C,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,iCAAiC;aACzC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;YAC3E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACrD,MAAM,KAAK,CAAC,wBAAwB,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE9C,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,IAAI,GAAG,EAAE,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB;aACzE,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,KAAK,EAChC,OAAwB,EACxB,QAAwB,EACxB,UAAe,EACA,EAAE;QACjB,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QACvC,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,2BAA2B;aACnC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;YAC9B,IAAI,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,sBAAsB;aAC9B,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YACrD,MAAM,KAAK,CAAC,wBAAwB,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAE9C,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;gBACtB,cAAc,EAAE,iCAAiC;gBACjD,YAAY,EAAE,mBAAmB,CAAC,SAAS,CAAC;aAC7C,CAAC,CAAC;YACH,QAAQ,CAAC,GAAG,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,EAAE,EAAE,IAAI;gBACR,aAAa,EAAE,IAAI;gBACnB,IAAI,EAAE;oBACJ,EAAE,EAAE,IAAI,CAAC,EAAE;oBACX,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,SAAS,EAAE,IAAI,CAAC,SAAS;iBAC1B;aACF,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB;aAC1E,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,KAAK,EAC/B,OAAwB,EACxB,QAAwB,EACiB,EAAE;QAC3C,IAAI,CAAC;YACH,OAAO,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB;aACrE,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,KAAK,EAChC,QAAwB,EACxB,IAKC,EACc,EAAE;QACjB,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9C,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;YACtB,cAAc,EAAE,iCAAiC;YACjD,YAAY,EAAE,mBAAmB,CAAC,SAAS,CAAC;SAC7C,CAAC,CAAC;QACH,QAAQ,CAAC,GAAG,CACV,IAAI,CAAC,SAAS,CAAC;YACb,EAAE,EAAE,IAAI;YACR,aAAa,EAAE,IAAI;YACnB,IAAI;SACL,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,KAAK,EAC/B,OAAwB,EACxB,QAAwB,EACT,EAAE;QACjB,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,UAAU,CAAC,KAAK;aACxB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjE,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,yBAAyB,CAAC;gBACzD,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK;gBAC7B,YAAY;gBACZ,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI;aAC5B,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;gBACrB,MAAM,YAAY,GAChB,YAAY,CAAC,MAAM,KAAK,cAAc;oBACpC,CAAC,CAAC,+BAA+B;oBACjC,CAAC,CAAC,0BAA0B,CAAC;gBAEjC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;oBACvB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,YAAY;oBACnB,MAAM,EAAE,YAAY,CAAC,MAAM;iBAC5B,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,KAAK,CAAC,wBAAwB,EAAE,CAAC;YACvC,MAAM,oBAAoB,CAAC,QAAQ,EAAE;gBACnC,EAAE,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE;gBACxB,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,KAAK;gBAC9B,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI;gBAC5B,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,SAAS;aACvC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC;aAClF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,OAAwB,EAAE,QAAwB,EAAiB,EAAE;QACnG,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,UAAU,CAAC,KAAK;aACxB,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,0BAA0B,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACxF,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;oBACvB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,4BAA4B;iBACpC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,eAAe,GAAG,MAAM,YAAY,CACxC,UAAU,CAAC,KAAK,CAAC,QAAQ,EACzB,gBAAgB,CAAC,YAAY,CAC9B,CAAC;YAEF,IAAI,CAAC,eAAe,EAAE,CAAC;gBACrB,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;oBACvB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,4BAA4B;iBACpC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,oBAAoB,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B;aAC9E,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,GAAqB,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE;QAElD,kBAAkB,EAAE,GAA6B,EAAE,CAAC,KAAK,CAAC,kBAAkB,EAAE;QAE9E,UAAU,EAAE,CAAC,OAAwB,EAA0B,EAAE,CAC/D,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,4BAA4B,CAAC;QAEnE,KAAK,EAAE,KAAK,IAAmB,EAAE;YAC/B,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;QAED,aAAa,EAAE,KAAK,EAClB,OAAwB,EACxB,QAAwB,EACxB,UAAe,EACG,EAAE;YACpB,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;YACrC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,QAAQ,KAAK,qBAAqB,EAAE,CAAC;gBACvC,MAAM,cAAc,GAAG,4BAA4B,EAAE,CAAC;gBACtD,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;gBAEvC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,EAAE,GAAG,cAAc,CAAC,CAAC,CAAC;gBAEhE,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,eAAe,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;oBAChE,KAAK,MAAM,QAAQ,IAAI,eAAe,EAAE,CAAC;wBACvC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;gBAED,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;oBACvB,EAAE,EAAE,IAAI;oBACR,SAAS,EAAE,CAAC,GAAG,SAAS,CAAC;iBAC1B,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;gBACrC,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,4BAA4B,CAAC,CAAC,CAAC;gBAClG,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;gBACpC,MAAM,SAAS,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBAChD,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,KAAK,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;gBAC3C,CAAC;gBACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE;oBACtB,YAAY,EAAE,kBAAkB,EAAE;iBACnC,CAAC,CAAC;gBACH,QAAQ,CAAC,GAAG,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,QAAQ,KAAK,0BAA0B,EAAE,CAAC;gBAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC9B,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACvB,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,qBAAqB;qBAC7B,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC7C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,QAAQ,KAAK,uBAAuB,EAAE,CAAC;gBACzC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC9B,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;wBACvB,EAAE,EAAE,KAAK;wBACT,KAAK,EAAE,qBAAqB;qBAC7B,CAAC,CAAC;oBACH,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,MAAM,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1C,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,QAAQ,KAAK,2BAA2B,EAAE,CAAC;gBAC7C,MAAM,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC1D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,aAAa,GAAG,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;YAC1E,IAAI,aAAa,EAAE,CAAC;gBAClB,MAAM,WAAW,CAAC,aAAa,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;gBACvD,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;YAChF,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,cAAc,CAAC,gBAAgB,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;gBAC7D,OAAO,IAAI,CAAC;YACd,CAAC;YAED,SAAS,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACvB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,0BAA0B;aAClC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/auth/store.d.ts

@@ -0,0 +1,43 @@
+import { type DatabaseOwnerRegistrationResult } from "@atria/db";
+import type { AuthMethod } from "@atria/shared";
+import type { OAuthProfile } from "./types.js";
+interface OwnerSetupState {
+    pending: boolean;
+    preferredAuthMethod: AuthMethod | null;
+}
+interface AuthUser {
+    id: string;
+    email: string | null;
+    name: string | null;
+    avatarUrl: string | null;
+}
+interface AuthSession {
+    id: string;
+    userId: string;
+    createdAt: string;
+    expiresAt: string;
+}
+export interface AuthStore {
+    close: () => Promise<void>;
+    hasUsers: () => Promise<boolean>;
+    getOwnerSetupState: () => Promise<OwnerSetupState>;
+    setPreferredAuthMethod: (authMethod: AuthMethod | null) => Promise<void>;
+    clearPreferredAuthMethod: () => Promise<void>;
+    getUserById: (userId: string) => Promise<AuthUser | null>;
+    getUserWithPasswordByEmail: (email: string) => Promise<{
+        user: AuthUser;
+        passwordHash: string;
+    } | null>;
+    registerOwnerWithPassword: (input: {
+        email: string;
+        passwordHash: string;
+        name: string | null;
+    }) => Promise<DatabaseOwnerRegistrationResult>;
+    upsertOAuthProfile: (profile: OAuthProfile) => Promise<AuthUser>;
+    getSessionById: (sessionId: string) => Promise<AuthSession | null>;
+    createSession: (session: AuthSession) => Promise<void>;
+    deleteSessionById: (sessionId: string) => Promise<void>;
+    deleteExpiredSessions: (expiresAtOrBefore: string) => Promise<void>;
+}
+export declare const createDbAuthStore: (projectRoot: string) => AuthStore;
+export {};