@authup/server-core 1.0.0-beta.3 → 1.0.0-beta.32

package/dist/core/entities/user-role/types.d.ts

@@ -0,0 +1,12 @@
+import type { UserRole } from '@authup/core-kit';
+import type { ActorContext } from '../actor/types.ts';
+import type { EntityRepositoryFindManyResult, IEntityRepository } from '../types.ts';
+export interface IUserRoleRepository extends IEntityRepository<UserRole> {
+}
+export interface IUserRoleService {
+    getMany(query: Record<string, any>, actor: ActorContext): Promise<EntityRepositoryFindManyResult<UserRole>>;
+    getOne(id: string, actor: ActorContext): Promise<UserRole>;
+    create(data: Record<string, any>, actor: ActorContext): Promise<UserRole>;
+    delete(id: string, actor: ActorContext): Promise<UserRole>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/entities/user-role/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/entities/user-role/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAErF,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB,CAAC,QAAQ,CAAC;CACvE;AAED,MAAM,WAAW,gBAAgB;IAC7B,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,8BAA8B,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5G,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1E,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC9D"}

package/dist/core/entities/user-role/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/entities/user-role/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/entities/user-role/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/entities/client/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/entities/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/entities/client/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/identity/entities/client/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/entities/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/identity/entities/client/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC"}

package/dist/core/identity/entities/client/types.d.ts

@@ -0,0 +1,8 @@
+import type { Client } from '@authup/core-kit';
+export interface IClientIdentityRepository {
+    findOneById(id: string): Promise<Client | null>;
+    findOneByName(name: string, realm?: string): Promise<Client | null>;
+    findOneByIdOrName(idOrName: string, realm?: string): Promise<Client | null>;
+    findOneBy(where: Record<string, any>): Promise<Client | null>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/identity/entities/client/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/entities/client/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,WAAW,yBAAyB;IACtC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAChD,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACpE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5E,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACjE"}

package/dist/core/identity/entities/client/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/identity/entities/client/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/identity/entities/client/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/entities/index.d.ts

@@ -0,0 +1,4 @@
+export * from './client/index.ts';
+export * from './user/index.ts';
+export * from './robot/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/entities/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/identity/entities/index.ts"],"names":[],"mappings":"AAOA,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC"}

package/dist/core/identity/entities/index.js

@@ -0,0 +1,10 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export * from "./client/index.js";
+export * from "./user/index.js";
+export * from "./robot/index.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/entities/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/identity/entities/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC"}

package/dist/core/identity/entities/robot/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/entities/robot/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/entities/robot/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/identity/entities/robot/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/entities/robot/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/identity/entities/robot/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC"}

package/dist/core/identity/entities/robot/types.d.ts

@@ -0,0 +1,8 @@
+import type { Robot } from '@authup/core-kit';
+export interface IRobotIdentityRepository {
+    findOneById(id: string): Promise<Robot | null>;
+    findOneByName(name: string, realm?: string): Promise<Robot | null>;
+    findOneByIdOrName(idOrName: string, realm?: string): Promise<Robot | null>;
+    findOneBy(where: Record<string, any>): Promise<Robot | null>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/identity/entities/robot/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/entities/robot/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,WAAW,wBAAwB;IACrC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAC/C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IACnE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;IAC3E,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;CAChE"}

package/dist/core/identity/entities/robot/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/identity/entities/robot/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/identity/entities/robot/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/entities/user/index.d.ts

@@ -0,0 +1,2 @@
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/entities/user/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/entities/user/index.ts"],"names":[],"mappings":"AAOA,cAAc,YAAY,CAAC"}

package/dist/core/identity/entities/user/index.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/entities/user/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/core/identity/entities/user/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,YAAY,CAAC"}

package/dist/core/identity/entities/user/types.d.ts

@@ -0,0 +1,12 @@
+import type { User } from '@authup/core-kit';
+import type { IdentityProviderMapperElement } from '../../provider/index.ts';
+export interface IUserIdentityRepository {
+    findOneById(id: string): Promise<User | null>;
+    findOneByName(name: string, realm?: string): Promise<User | null>;
+    findOneByIdOrName(idOrName: string, realm?: string): Promise<User | null>;
+    findOneBy(where: Record<string, any>): Promise<User | null>;
+    savePermissions(user: User, items: IdentityProviderMapperElement[]): Promise<void>;
+    saveRoles(user: User, items: IdentityProviderMapperElement[]): Promise<void>;
+    saveOneWithEA(user: Partial<User>, extraAttributes: Record<string, any>): Promise<User>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/identity/entities/user/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/core/identity/entities/user/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAE7E,MAAM,WAAW,uBAAuB;IACpC,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAClE,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAC1E,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAE5D,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,6BAA6B,EAAE,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9E,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5F"}

package/dist/core/identity/entities/user/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/identity/entities/user/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/core/identity/entities/user/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/index.d.ts

@@ -0,0 +1,7 @@
+export * from './entities/index.ts';
+export * from './password-recovery/index.ts';
+export * from './permission/index.ts';
+export * from './provider/index.ts';
+export * from './registration/index.ts';
+export * from './resolver/index.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/identity/index.ts"],"names":[],"mappings":"AAOA,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC"}

package/dist/core/identity/index.js

@@ -0,0 +1,13 @@
+/*
+ * Copyright (c) 2025.
+ *  Author Peter Placzek (tada5hi)
+ *  For the full copyright and license information,
+ *  view the LICENSE file that was distributed with this source code.
+ */
+export * from "./entities/index.js";
+export * from "./password-recovery/index.js";
+export * from "./permission/index.js";
+export * from "./provider/index.js";
+export * from "./registration/index.js";
+export * from "./resolver/index.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,uBAAuB,CAAC;AACtC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC"}

package/dist/core/identity/password-recovery/index.d.ts

@@ -0,0 +1,3 @@
+export * from './service.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/password-recovery/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/identity/password-recovery/index.ts"],"names":[],"mappings":"AAOA,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/identity/password-recovery/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./service.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/password-recovery/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/identity/password-recovery/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC"}

package/dist/core/identity/password-recovery/service.d.ts

@@ -0,0 +1,15 @@
+import type { IPasswordRecoveryService, PasswordForgotResult, PasswordRecoveryServiceContext, PasswordRecoveryServiceOptions, PasswordResetResult } from './types.ts';
+import type { IMailClient } from '../../mail/types.ts';
+import type { IRealmRepository, IUserRepository } from '../../entities/index.ts';
+export declare class PasswordRecoveryService implements IPasswordRecoveryService {
+    protected options: PasswordRecoveryServiceOptions;
+    protected repository: IUserRepository;
+    protected realmRepository: IRealmRepository;
+    protected mailClient: IMailClient;
+    constructor(ctx: PasswordRecoveryServiceContext);
+    forgotPassword(data: Record<string, any>): Promise<PasswordForgotResult>;
+    resetPassword(data: Record<string, any>): Promise<PasswordResetResult>;
+    private runForgotPasswordValidator;
+    private runResetPasswordValidator;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/core/identity/password-recovery/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../../src/core/identity/password-recovery/service.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACR,wBAAwB,EACxB,oBAAoB,EACpB,8BAA8B,EAC9B,8BAA8B,EAC9B,mBAAmB,EACtB,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAEjF,qBAAa,uBAAwB,YAAW,wBAAwB;IACpE,SAAS,CAAC,OAAO,EAAE,8BAA8B,CAAC;IAElD,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC;IAEtC,SAAS,CAAC,eAAe,EAAE,gBAAgB,CAAC;IAE5C,SAAS,CAAC,UAAU,EAAE,WAAW,CAAC;gBAEtB,GAAG,EAAE,8BAA8B;IAOzC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAwDxE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC;YA4C9D,0BAA0B;YA0C1B,yBAAyB;CAiE1C"}

package/dist/core/identity/password-recovery/service.js

@@ -0,0 +1,173 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+import { BadRequestError, NotFoundError } from '@ebec/http';
+import { createValidationChain, createValidator } from '@validup/adapter-validator';
+import { randomBytes } from 'node:crypto';
+import { Container } from 'validup';
+import { UserCredentialsService } from "../../authentication/credential/entities/user/module.js";
+export class PasswordRecoveryService {
+    options;
+    repository;
+    realmRepository;
+    mailClient;
+    constructor(ctx) {
+        this.options = ctx.options;
+        this.repository = ctx.repository;
+        this.realmRepository = ctx.realmRepository;
+        this.mailClient = ctx.mailClient;
+    }
+    async forgotPassword(data) {
+        if (!this.options.passwordRecoveryEnabled) {
+            throw new BadRequestError('Password recovery is not enabled.');
+        }
+        if (!this.options.emailVerificationEnabled) {
+            throw new BadRequestError('Email verification is not enabled, but required to reset a password.');
+        }
+        const validated = await this.runForgotPasswordValidator(data);
+        const realm = await this.realmRepository.resolve(validated.realm_id, true);
+        const where = {
+            ...(validated.name ? { name: validated.name } : {}),
+            ...(validated.email ? { email: validated.email } : {}),
+            realm_id: realm.id,
+        };
+        const entity = await this.repository.findOneByWithEmail(where);
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        const merged = this.repository.merge(entity, {
+            reset_expires: new Date(Date.now() + (1000 * 60 * 30)).toISOString(),
+            reset_hash: randomBytes(32).toString('hex'),
+        });
+        await this.repository.save(merged);
+        try {
+            await this.mailClient.send({
+                to: entity.email,
+                subject: 'Forgot Password - Reset code',
+                html: `
+                <p>Please use the code below to reset your account password.</p>
+                <p>${merged.reset_hash}</p>
+                `,
+            });
+        }
+        catch {
+            this.repository.merge(merged, {
+                reset_hash: null,
+                reset_expires: null,
+            });
+            await this.repository.save(merged);
+            throw new BadRequestError('Password recovery failed. Could not send reset email.');
+        }
+        return {
+            reset_expires: merged.reset_expires,
+        };
+    }
+    async resetPassword(data) {
+        if (!this.options.passwordRecoveryEnabled) {
+            throw new BadRequestError('Password recovery is not enabled.');
+        }
+        const validated = await this.runResetPasswordValidator(data);
+        await this.repository.validateJoinColumns(validated);
+        const realm = await this.realmRepository.resolve(validated.realm_id, true);
+        const where = {
+            ...(validated.name ? { name: validated.name } : {}),
+            ...(validated.email ? { email: validated.email } : {}),
+            reset_hash: validated.token,
+            realm_id: realm.id,
+        };
+        const entity = await this.repository.findOneBy(where);
+        if (!entity) {
+            throw new NotFoundError();
+        }
+        if (!entity.reset_expires || new Date(entity.reset_expires) < new Date()) {
+            throw new BadRequestError('Reset token has expired.');
+        }
+        const credentialsService = new UserCredentialsService();
+        const hashedPassword = await credentialsService.protect(validated.password);
+        const merged = this.repository.merge(entity, {
+            reset_at: new Date().toISOString(),
+            reset_hash: null,
+            reset_expires: null,
+            password: hashedPassword,
+        });
+        await this.repository.save(merged);
+        return {
+            reset_at: merged.reset_at,
+        };
+    }
+    async runForgotPasswordValidator(data) {
+        const validator = new Container({});
+        const oneOfContainer = new Container({
+            oneOf: true,
+        });
+        oneOfContainer.mount('email', createValidator(() => {
+            const chain = createValidationChain();
+            return chain
+                .exists()
+                .notEmpty()
+                .isEmail();
+        }));
+        oneOfContainer.mount('name', createValidator(() => {
+            const chain = createValidationChain();
+            return chain
+                .exists()
+                .notEmpty()
+                .isString();
+        }));
+        validator.mount(oneOfContainer);
+        validator.mount('realm_id', { optional: true }, createValidator(() => {
+            const chain = createValidationChain();
+            return chain.exists()
+                .isUUID()
+                .optional({ values: 'null' });
+        }));
+        return validator.run(data);
+    }
+    async runResetPasswordValidator(data) {
+        const validator = new Container({});
+        const oneOfContainer = new Container({
+            oneOf: true,
+        });
+        oneOfContainer.mount('email', createValidator(() => {
+            const chain = createValidationChain();
+            return chain
+                .exists()
+                .notEmpty()
+                .isEmail();
+        }));
+        oneOfContainer.mount('name', createValidator(() => {
+            const chain = createValidationChain();
+            return chain
+                .exists()
+                .notEmpty()
+                .isString();
+        }));
+        validator.mount(oneOfContainer);
+        validator.mount('realm_id', { optional: true }, createValidator(() => {
+            const chain = createValidationChain();
+            return chain
+                .exists()
+                .isUUID()
+                .optional({ values: 'null' });
+        }));
+        validator.mount('token', createValidator(() => {
+            const chain = createValidationChain();
+            return chain
+                .exists()
+                .notEmpty()
+                .isLength({ min: 3, max: 256 });
+        }));
+        validator.mount('password', createValidator(() => {
+            const chain = createValidationChain();
+            return chain
+                .exists()
+                .notEmpty()
+                .isLength({ min: 5, max: 512 });
+        }));
+        return validator.run(data);
+    }
+}
+//# sourceMappingURL=service.js.map

package/dist/core/identity/password-recovery/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../../src/core/identity/password-recovery/service.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,qBAAqB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,yDAAyD,CAAC;AAWjG,MAAM,OAAO,uBAAuB;IACtB,OAAO,CAAiC;IAExC,UAAU,CAAkB;IAE5B,eAAe,CAAmB;IAElC,UAAU,CAAc;IAElC,YAAY,GAAmC;QAC3C,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;QAC3B,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;QAC3C,IAAI,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,IAAyB;QAC1C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,wBAAwB,EAAE,CAAC;YACzC,MAAM,IAAI,eAAe,CAAC,sEAAsE,CAAC,CAAC;QACtG,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC;QAE9D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE3E,MAAM,KAAK,GAAwB;YAC/B,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,QAAQ,EAAE,KAAK,CAAC,EAAE;SACrB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAE/D,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;YACzC,aAAa,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE;YACpE,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;SAC9C,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,CAAC;YACD,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBACvB,EAAE,EAAE,MAAM,CAAC,KAAK;gBAChB,OAAO,EAAE,8BAA8B;gBACvC,IAAI,EAAE;;qBAED,MAAM,CAAC,UAAU;iBACrB;aACJ,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACL,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;gBAC1B,UAAU,EAAE,IAAI;gBAChB,aAAa,EAAE,IAAI;aACtB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAEnC,MAAM,IAAI,eAAe,CAAC,uDAAuD,CAAC,CAAC;QACvF,CAAC;QAED,OAAO;YACH,aAAa,EAAE,MAAM,CAAC,aAAc;SACvC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,IAAyB;QACzC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,CAAC;YACxC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC;QAE7D,MAAM,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAErD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QAE3E,MAAM,KAAK,GAAwB;YAC/B,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtD,UAAU,EAAE,SAAS,CAAC,KAAK;YAC3B,QAAQ,EAAE,KAAK,CAAC,EAAE;SACrB,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,MAAM,IAAI,aAAa,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;YACvE,MAAM,IAAI,eAAe,CAAC,0BAA0B,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,kBAAkB,GAAG,IAAI,sBAAsB,EAAE,CAAC;QACxD,MAAM,cAAc,GAAG,MAAM,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE;YACzC,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,cAAc;SAC3B,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEnC,OAAO;YACH,QAAQ,EAAE,MAAM,CAAC,QAAS;SAC7B,CAAC;IACN,CAAC;IAEO,KAAK,CAAC,0BAA0B,CAAC,IAAyB;QAC9D,MAAM,SAAS,GAAG,IAAI,SAAS,CAAM,EAAE,CAAC,CAAC;QAEzC,MAAM,cAAc,GAAG,IAAI,SAAS,CAAC;YACjC,KAAK,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,EAAE;YAC/C,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CAAC,CAAC;QAEJ,cAAc,CAAC,KAAK,CAChB,MAAM,EACN,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE,CAAC;QACpB,CAAC,CAAC,CACL,CAAC;QAEF,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAEhC,SAAS,CAAC,KAAK,CACX,UAAU,EACV,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK,CAAC,MAAM,EAAE;iBAChB,MAAM,EAAE;iBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,IAAyB;QAC7D,MAAM,SAAS,GAAG,IAAI,SAAS,CAAM,EAAE,CAAC,CAAC;QAEzC,MAAM,cAAc,GAAG,IAAI,SAAS,CAAC;YACjC,KAAK,EAAE,IAAI;SACd,CAAC,CAAC;QACH,cAAc,CAAC,KAAK,CAChB,OAAO,EACP,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,OAAO,EAAE,CAAC;QACnB,CAAC,CAAC,CACL,CAAC;QACF,cAAc,CAAC,KAAK,CAChB,MAAM,EACN,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,EAAE,CAAC;QACpB,CAAC,CAAC,CACL,CAAC;QAEF,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAEhC,SAAS,CAAC,KAAK,CACX,UAAU,EACV,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,MAAM,EAAE;iBACR,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CACL,CAAC;QAEF,SAAS,CAAC,KAAK,CACX,OAAO,EACP,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CACL,CAAC;QAEF,SAAS,CAAC,KAAK,CACX,UAAU,EACV,eAAe,CAAC,GAAG,EAAE;YACjB,MAAM,KAAK,GAAG,qBAAqB,EAAE,CAAC;YACtC,OAAO,KAAK;iBACP,MAAM,EAAE;iBACR,QAAQ,EAAE;iBACV,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACxC,CAAC,CAAC,CACL,CAAC;QAEF,OAAO,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;CACJ"}

package/dist/core/identity/password-recovery/types.d.ts

@@ -0,0 +1,23 @@
+import type { IMailClient } from '../../mail/types.ts';
+import type { IRealmRepository, IUserRepository } from '../../entities/index.ts';
+export type PasswordRecoveryServiceOptions = {
+    passwordRecoveryEnabled?: boolean;
+    emailVerificationEnabled?: boolean;
+};
+export type PasswordRecoveryServiceContext = {
+    options: PasswordRecoveryServiceOptions;
+    mailClient: IMailClient;
+    repository: IUserRepository;
+    realmRepository: IRealmRepository;
+};
+export type PasswordForgotResult = {
+    reset_expires: string;
+};
+export type PasswordResetResult = {
+    reset_at: string;
+};
+export interface IPasswordRecoveryService {
+    forgotPassword(data: Record<string, any>): Promise<PasswordForgotResult>;
+    resetPassword(data: Record<string, any>): Promise<PasswordResetResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/identity/password-recovery/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/core/identity/password-recovery/types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAEjF,MAAM,MAAM,8BAA8B,GAAG;IACzC,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACtC,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IACzC,OAAO,EAAE,8BAA8B,CAAC;IACxC,UAAU,EAAE,WAAW,CAAC;IACxB,UAAU,EAAE,eAAe,CAAC;IAC5B,eAAe,EAAE,gBAAgB,CAAC;CACrC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAC9B,QAAQ,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,WAAW,wBAAwB;IACrC,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACzE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC1E"}

package/dist/core/identity/password-recovery/types.js

@@ -0,0 +1,8 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/identity/password-recovery/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../src/core/identity/password-recovery/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG"}

package/dist/core/identity/permission/index.d.ts

@@ -0,0 +1,3 @@
+export * from './module.ts';
+export * from './types.ts';
+//# sourceMappingURL=index.d.ts.map

package/dist/core/identity/permission/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/core/identity/permission/index.ts"],"names":[],"mappings":"AAOA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/permission/index.js

@@ -0,0 +1,9 @@
+/*
+ * Copyright (c) 2025.
+ * Author Peter Placzek (tada5hi)
+ * For the full copyright and license information,
+ * view the LICENSE file that was distributed with this source code.
+ */
+export * from "./module.js";
+export * from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/core/identity/permission/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/identity/permission/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/core/identity/permission/module.d.ts

@@ -0,0 +1,20 @@
+import type { IdentityPolicyData, PolicyWithType } from '@authup/access';
+import type { PermissionBinding } from '@authup/core-kit';
+import type { IIdentityBindingRepository, IIdentityPermissionProvider, IRoleBindingRepository, IdentityPermissionProviderContext, ResolveJunctionPolicyOptions } from './types.ts';
+export declare class IdentityPermissionProvider implements IIdentityPermissionProvider {
+    protected clientRepository: IIdentityBindingRepository;
+    protected userRepository: IIdentityBindingRepository;
+    protected roleRepository: IRoleBindingRepository;
+    protected robotRepository: IIdentityBindingRepository;
+    constructor(ctx: IdentityPermissionProviderContext);
+    isSuperset(parent: IdentityPolicyData, child: IdentityPolicyData): Promise<boolean>;
+    resolveJunctionPolicy(identity: IdentityPolicyData, options: ResolveJunctionPolicyOptions): Promise<PolicyWithType | undefined>;
+    getFor(identity: IdentityPolicyData): Promise<PermissionBinding[]>;
+    getForClient(identity: IdentityPolicyData): Promise<PermissionBinding[]>;
+    getForUser(identity: IdentityPolicyData): Promise<PermissionBinding[]>;
+    getForRobot(identity: IdentityPolicyData): Promise<PermissionBinding[]>;
+    getForRole(identity: IdentityPolicyData): Promise<PermissionBinding[]>;
+    private reduceBindingsByIdentityClient;
+    private reduceEntitiesByIdentityClient;
+}
+//# sourceMappingURL=module.d.ts.map

package/dist/core/identity/permission/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/core/identity/permission/module.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EACR,0BAA0B,EAC1B,2BAA2B,EAC3B,sBAAsB,EACtB,iCAAiC,EACjC,4BAA4B,EAC/B,MAAM,YAAY,CAAC;AAEpB,qBAAa,0BAA2B,YAAW,2BAA2B;IAC1E,SAAS,CAAC,gBAAgB,EAAE,0BAA0B,CAAC;IAEvD,SAAS,CAAC,cAAc,EAAE,0BAA0B,CAAC;IAErD,SAAS,CAAC,cAAc,EAAE,sBAAsB,CAAC;IAEjD,SAAS,CAAC,eAAe,EAAE,0BAA0B,CAAC;gBAE1C,GAAG,EAAE,iCAAiC;IAO5C,UAAU,CAAC,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,GAAI,OAAO,CAAC,OAAO,CAAC;IA2BpF,qBAAqB,CACvB,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,4BAA4B,GACtC,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC;IAmChC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,GAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAmBnE,YAAY,CAAC,QAAQ,EAAE,kBAAkB,GAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAczE,UAAU,CAAC,QAAQ,EAAE,kBAAkB,GAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAkBvE,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAkBxE,UAAU,CAAC,QAAQ,EAAE,kBAAkB,GAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAK7E,OAAO,CAAC,8BAA8B;IAWtC,OAAO,CAAC,8BAA8B;CAUzC"}