@corgelabs/corge 0.0.1 → 1.0.0

package/dist/router/guard.js

@@ -0,0 +1,243 @@
+import { createHash, timingSafeEqual } from 'node:crypto';
+import { Timestamp } from 'firebase-admin/firestore';
+import { getCookie } from 'hono/cookie';
+import { CORE_CONFIG } from '../config';
+import { CORE_ROUTE_DEFAULTS } from './schema';
+const HTTP_IDEMPOTENCY_TTL_MS = 24 * 60 * 60 * 1000;
+export const getClientIp = (c) => {
+    const xff = c.req
+        .header('x-forwarded-for')
+        ?.split(',')
+        .map((s) => s.trim())
+        .filter(Boolean);
+    if (xff && xff.length > 0) {
+        return (xff.length >= 2 ? xff.at(-2) : xff.at(-1));
+    }
+    return c.req.header('cf-connecting-ip') || c.req.header('x-real-ip') || 'anon';
+};
+export const isMasterKey = (bearer, expected) => {
+    if (!bearer || !expected)
+        return false;
+    const a = createHash('sha256').update(bearer).digest();
+    const b = createHash('sha256').update(expected).digest();
+    return timingSafeEqual(a, b);
+};
+export const isBaseRouteConfig = (v) => Boolean(v && typeof v === 'object' && ('path' in v || 'mode' in v || 'auth' in v || 'handler' in v));
+export const isRespondAsyncPreferred = (c) => c.req.query('async') === 'true' ||
+    c.req.query('wait') === 'false' ||
+    /\brespond-async\b/i.test(c.req.header('prefer') ?? '');
+export class RouterGuardEngine {
+    #core;
+    constructor(coreClient) {
+        this.#core = coreClient;
+    }
+    applyRateLimit = (c, cfgOrLimit, userIdOrScope) => {
+        const rl = isBaseRouteConfig(cfgOrLimit)
+            ? cfgOrLimit.rateLimit !== undefined
+                ? cfgOrLimit.rateLimit
+                : cfgOrLimit.auth === 'public' || cfgOrLimit.auth === 'none' || cfgOrLimit.auth === false
+                    ? CORE_CONFIG.limits.httpIp
+                    : CORE_CONFIG.limits.httpUser
+            : cfgOrLimit;
+        if (!rl)
+            return;
+        const userId = c.get('userId') || userIdOrScope;
+        const routePrefix = isBaseRouteConfig(cfgOrLimit) && cfgOrLimit.path ? `${cfgOrLimit.method ?? c.req.method}:${cfgOrLimit.path}:` : '';
+        const key = typeof rl.keyBy === 'function'
+            ? rl.keyBy(c)
+            : rl.keyBy === 'ip' || !userId
+                ? `${routePrefix}ip:${getClientIp(c)}`
+                : `${routePrefix}user:${userId}`;
+        this.#core.internals.resilience.acquireHttpLimit(key, rl.max, rl.windowMs);
+    };
+    authenticateRequest = async (c, cfgOrAuth = 'user') => {
+        const rawAuth = isBaseRouteConfig(cfgOrAuth) ? (cfgOrAuth.auth ?? 'user') : cfgOrAuth;
+        const authLevel = rawAuth === 'none' || rawAuth === false
+            ? 'public'
+            : rawAuth === 'authenticated'
+                ? 'user'
+                : rawAuth === 'api-key'
+                    ? 'admin'
+                    : rawAuth;
+        if (authLevel === 'public') {
+            c.set('userId', '');
+            c.set('userRole', 'anon');
+            if (isBaseRouteConfig(cfgOrAuth))
+                this.applyRateLimit(c, cfgOrAuth);
+            return '';
+        }
+        const t0 = performance.now();
+        const finishAuth = (uid, role) => {
+            if (authLevel === 'admin' && role !== 'admin' && uid !== CORE_CONFIG.auth.adminUserId) {
+                return this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+            }
+            c.set('userId', uid);
+            c.set('userRole', role);
+            if (isBaseRouteConfig(cfgOrAuth))
+                this.applyRateLimit(c, cfgOrAuth, uid);
+            const dur = (performance.now() - t0).toFixed(3);
+            c.header('x-auth-time-ms', dur);
+            c.header('Server-Timing', `auth;dur=${dur}`);
+            return uid;
+        };
+        const bearer = c.req.header('authorization')?.match(/^Bearer\s+(.+)$/i)?.[1]?.trim();
+        const cookie = !bearer ? getCookie(c, CORE_CONFIG.auth.sessionCookie) : undefined;
+        if (!bearer && !cookie)
+            return this.#core.errors.httpError(401, 'Unauthorized', 'UNAUTHORIZED');
+        const expectedKey = c.env?.SDK_API_KEY ?? this.#core.env.SDK_API_KEY;
+        if (isMasterKey(bearer, expectedKey)) {
+            await this.#core.internals.auth.authWarm;
+            return finishAuth(CORE_CONFIG.auth.adminUserId, 'admin');
+        }
+        if (rawAuth === 'api-key') {
+            return this.#core.errors.httpError(401, 'Valid API key required', 'UNAUTHORIZED');
+        }
+        let verified;
+        try {
+            verified = await this.#core.internals.auth.verifyToken((bearer ?? cookie), !bearer, authLevel === 'strict', c.env?.isDev ?? this.#core.env.isDev);
+        }
+        catch {
+            return this.#core.errors.httpError(401, 'Unauthorized', 'UNAUTHORIZED');
+        }
+        return finishAuth(verified.uid, verified.role);
+    };
+    #enforceFileRefCheck = (checkFileRef, c, userId, input, obj, role) => {
+        if (!checkFileRef)
+            return;
+        let refs = [];
+        if (typeof checkFileRef === 'function') {
+            const extracted = checkFileRef(input, c);
+            if (typeof extracted === 'string')
+                refs = [extracted];
+            else if (Array.isArray(extracted))
+                refs = extracted;
+        }
+        else {
+            const paramRef = c?.req.param('ref');
+            refs = [
+                ...(paramRef ? [paramRef] : []),
+                ...(typeof obj.ref === 'string' ? [obj.ref] : []),
+                ...(Array.isArray(obj.refs)
+                    ? obj.refs.map((r) => typeof r === 'string'
+                        ? r
+                        : r && typeof r === 'object' && 'ref' in r && typeof r.ref === 'string'
+                            ? r.ref
+                            : '')
+                    : [])
+            ];
+        }
+        if (refs.some((r) => !this.#core.files.canAccess(r, userId, role))) {
+            this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+        }
+    };
+    enforceGuard = async (c, cfg, userId, input, role = this.#core.internals.auth.resolveUserRole(userId)) => {
+        const g = cfg.guard;
+        if (!g || !userId)
+            return;
+        const obj = (input && typeof input === 'object' ? input : {});
+        this.#enforceFileRefCheck(g.checkFileRef, c, userId, input, obj, role);
+        if (g.checkCollectionField) {
+            const { collection, param } = g.checkCollectionField;
+            const docId = c?.req.param(param) ?? (typeof obj[param] === 'string' ? obj[param] : '');
+            const doc = await this.#core.db.read(collection, docId, false, { bypassRbac: true });
+            if (!doc) {
+                return this.#core.errors.httpError(404, `${collection === 'chat' ? 'Chat' : 'Document'} not found`, 'NOT_FOUND');
+            }
+            if (!(await this.#core.db.canAccess(collection, doc, userId, 'read', role))) {
+                return this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+            }
+        }
+        if (g.checkUserId) {
+            const targetUserId = typeof g.checkUserId === 'function'
+                ? g.checkUserId(input, c)
+                : typeof obj.userId === 'string'
+                    ? obj.userId
+                    : undefined;
+            if (targetUserId && role !== 'admin' && userId !== CORE_CONFIG.auth.adminUserId && targetUserId !== userId) {
+                this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+            }
+            if (obj.backupBeforeErase && role !== 'admin' && userId !== CORE_CONFIG.auth.adminUserId) {
+                this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+            }
+        }
+        if (g.requireEmailVerified && role !== 'admin' && userId !== CORE_CONFIG.auth.adminUserId) {
+            const authUser = await this.#core.auth.getUser(userId);
+            if (!authUser?.emailVerified) {
+                this.#core.errors.httpError(403, 'Email verification required', 'EMAIL_NOT_VERIFIED');
+            }
+        }
+        if (g.custom) {
+            const ok = await g.custom({ userId, role, input, env: this.#core.env, ...(c ? { c } : {}) });
+            if (ok === false)
+                this.#core.errors.httpError(403, 'Forbidden', 'FORBIDDEN');
+        }
+    };
+    withHttpIdempotency = async (routeKey, dedupeKey, userId, isDev, fn) => {
+        const keyHash = createHash('sha256')
+            .update(`${routeKey}:${userId}:${dedupeKey}`)
+            .digest('hex')
+            .slice(0, 40);
+        return this.#core.internals.resilience.singleflight(`http_idem:${isDev ? 'dev' : 'prod'}:${keyHash}`, async () => {
+            const docRef = this.#core.db.firestore(isDev).collection('_idempotency').doc(keyHash);
+            const snap = await docRef.get().catch(() => null);
+            const data = snap?.exists ? snap.data() : undefined;
+            const now = Date.now();
+            if (data?.status === 'completed' &&
+                typeof data.expiresAtMs === 'number' &&
+                data.expiresAtMs > now &&
+                'response' in data) {
+                return data.response;
+            }
+            const out = await fn();
+            if (!(out instanceof Response)) {
+                const expiresAtMs = Date.now() + HTTP_IDEMPOTENCY_TTL_MS;
+                await docRef
+                    .set({
+                    id: keyHash,
+                    routeKey,
+                    userId,
+                    status: 'completed',
+                    response: out ?? null,
+                    createdAt: new Date().toISOString(),
+                    expiresAtMs,
+                    expiresAt: Timestamp.fromMillis(expiresAtMs)
+                })
+                    .catch(() => { });
+            }
+            return out;
+        }, { scope: 'global' });
+    };
+}
+export const mergeCoreAndDomainRoutes = (rawCoreRoutes, overrides, attachmentTypesDesc, domainRouteDefs) => {
+    const coreRoutes = Object.fromEntries(Object.keys(CORE_ROUTE_DEFAULTS).map((id) => {
+        const merged = {
+            mcp: false,
+            ...CORE_ROUTE_DEFAULTS[id],
+            ...rawCoreRoutes[id],
+            ...(id === 'attachments.scan' && attachmentTypesDesc
+                ? {
+                    description: `OCR + classify + extract structured fields for a single attachment ref. Recognised types: ${attachmentTypesDesc}; or other.`
+                }
+                : {}),
+            ...(overrides[id] ?? {})
+        };
+        merged.mcp = merged.mcp === true;
+        return [id, merged];
+    }));
+    const domainRoutes = {};
+    for (const [name, routeCfg] of Object.entries(domainRouteDefs)) {
+        const normalizedPath = routeCfg.path
+            ? routeCfg.path.startsWith('/')
+                ? routeCfg.path
+                : `/${routeCfg.path}`
+            : `/${name}`;
+        domainRoutes[name] = {
+            ...routeCfg,
+            mcp: routeCfg.mcp === true,
+            path: normalizedPath,
+            workflowName: routeCfg.workflowName ?? (routeCfg.mode === 'workflow' ? name : undefined)
+        };
+    }
+    return { ...coreRoutes, ...domainRoutes };
+};
+//# sourceMappingURL=guard.js.map

package/dist/router/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../src/router/guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,WAAW,EAAkD,MAAM,WAAW,CAAA;AAGvF,OAAO,EACL,mBAAmB,EAMpB,MAAM,UAAU,CAAA;AAEjB,MAAM,uBAAuB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AAEnD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAkB,EAAU,EAAE;IACxD,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG;SACd,MAAM,CAAC,iBAAiB,CAAC;QAC1B,EAAE,KAAK,CAAC,GAAG,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAA;IAClB,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAA;IACrD,CAAC;IACD,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,MAAM,CAAA;AAChF,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAe,EAAE,QAAiB,EAAW,EAAE;IACzE,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAA;IACtC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAA;IACtD,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAA;IACxD,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;AAC9B,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAU,EAAwB,EAAE,CACpE,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,SAAS,IAAI,CAAC,CAAC,CAAC,CAAA;AAEtG,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAkB,EAAW,EAAE,CACrE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,MAAM;IAC/B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,OAAO;IAC/B,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAA;AAEzD,MAAM,OAAO,iBAAiB;IACnB,KAAK,CAAM;IAEpB,YAAY,UAAgB;QAC1B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAA;IACzB,CAAC;IAED,cAAc,GAAG,CACf,CAAkB,EAClB,UAA6C,EAC7C,aAAuB,EACjB,EAAE;QACR,MAAM,EAAE,GAAoB,iBAAiB,CAAC,UAAU,CAAC;YACvD,CAAC,CAAC,UAAU,CAAC,SAAS,KAAK,SAAS;gBAClC,CAAC,CAAC,UAAU,CAAC,SAAS;gBACtB,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,IAAI,KAAK,KAAK;oBACvF,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM;oBAC3B,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ;YACjC,CAAC,CAAC,UAAU,CAAA;QACd,IAAI,CAAC,EAAE;YAAE,OAAM;QACf,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAA;QAC/C,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,UAAU,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;QACtI,MAAM,GAAG,GACP,OAAO,EAAE,CAAC,KAAK,KAAK,UAAU;YAC5B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YACb,CAAC,CAAC,EAAE,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM;gBAC5B,CAAC,CAAC,GAAG,WAAW,MAAM,WAAW,CAAC,CAAC,CAAC,EAAE;gBACtC,CAAC,CAAC,GAAG,WAAW,QAAQ,MAAM,EAAE,CAAA;QACtC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAA;IAC5E,CAAC,CAAA;IAED,mBAAmB,GAAG,KAAK,EACzB,CAAkB,EAClB,SAAS,GAAgC,MAAM,EAC7B,EAAE;QACpB,MAAM,OAAO,GAAc,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAChG,MAAM,SAAS,GACb,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,KAAK;YACrC,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,OAAO,KAAK,eAAe;gBAC3B,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,OAAO,KAAK,SAAS;oBACrB,CAAC,CAAC,OAAO;oBACT,CAAC,CAAC,OAAO,CAAA;QAEjB,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC3B,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;YACnB,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;YACzB,IAAI,iBAAiB,CAAC,SAAS,CAAC;gBAAE,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,SAAS,CAAC,CAAA;YACnE,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAA;QAC5B,MAAM,UAAU,GAAG,CAAC,GAAY,EAAE,IAAY,EAAW,EAAE;YACzD,IAAI,SAAS,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO,IAAI,GAAG,KAAK,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACtF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;YACnE,CAAC;YACD,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YACpB,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;YACvB,IAAI,iBAAiB,CAAC,SAAS,CAAC;gBAAE,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;YACxE,MAAM,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;YAC/C,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAA;YAC/B,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,YAAY,GAAG,EAAE,CAAC,CAAA;YAC5C,OAAO,GAAG,CAAA;QACZ,CAAC,CAAA;QAED,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAA;QACpF,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QACjF,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAA;QAC/F,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,EAAE,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAA;QACpE,IAAI,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAA;YACxC,OAAO,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,CAAA;QAC1D,CAAC;QACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,wBAAwB,EAAE,cAAc,CAAC,CAAA;QACnF,CAAC;QAED,IAAI,QAAwC,CAAA;QAC5C,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CACpD,CAAC,MAAM,IAAI,MAAM,CAAE,EACnB,CAAC,MAAM,EACP,SAAS,KAAK,QAAQ,EACtB,CAAC,CAAC,GAAG,EAAE,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CACrC,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,cAAc,CAAC,CAAA;QACzE,CAAC;QACD,OAAO,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;IAChD,CAAC,CAAA;IAED,oBAAoB,GAAG,CACrB,YAAmE,EACnE,CAA8B,EAC9B,MAAe,EACf,KAAc,EACd,GAA4B,EAC5B,IAAY,EACN,EAAE;QACR,IAAI,CAAC,YAAY;YAAE,OAAM;QACzB,IAAI,IAAI,GAAa,EAAE,CAAA;QACvB,IAAI,OAAO,YAAY,KAAK,UAAU,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YACxC,IAAI,OAAO,SAAS,KAAK,QAAQ;gBAAE,IAAI,GAAG,CAAC,SAAS,CAAC,CAAA;iBAChD,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;gBAAE,IAAI,GAAG,SAAS,CAAA;QACrD,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;YACpC,IAAI,GAAG;gBACL,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/B,GAAG,CAAC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;oBACzB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACjB,OAAO,CAAC,KAAK,QAAQ;wBACnB,CAAC,CAAC,CAAC;wBACH,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,IAAI,CAAC,IAAI,OAAQ,CAAsB,CAAC,GAAG,KAAK,QAAQ;4BAC3F,CAAC,CAAE,CAAqB,CAAC,GAAG;4BAC5B,CAAC,CAAC,EAAE,CACT;oBACH,CAAC,CAAC,EAAE,CAAC;aACR,CAAA;QACH,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;YACnE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC,CAAA;IAED,YAAY,GAAG,KAAK,EAClB,CAA8B,EAC9B,GAAoB,EACpB,MAAe,EACf,KAAc,EACd,IAAI,GAAW,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EACjD,EAAE;QACjB,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAA;QACnB,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM;YAAE,OAAM;QACzB,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAA;QAExF,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;QAEtE,IAAI,CAAC,CAAC,oBAAoB,EAAE,CAAC;YAC3B,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,oBAAoB,CAAA;YACpD,MAAM,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,GAAG,CAAC,KAAK,CAAY,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;YACnG,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAA;YACpF,IAAI,CAAC,GAAG,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAChC,GAAG,EACH,GAAG,UAAU,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,YAAY,EAC1D,WAAW,CACZ,CAAA;YACH,CAAC;YACD,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;YACnE,CAAC;QACH,CAAC;QAED,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAClB,MAAM,YAAY,GAChB,OAAO,CAAC,CAAC,WAAW,KAAK,UAAU;gBACjC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;gBACzB,CAAC,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;oBAC9B,CAAC,CAAC,GAAG,CAAC,MAAM;oBACZ,CAAC,CAAC,SAAS,CAAA;YACjB,IAAI,YAAY,IAAI,IAAI,KAAK,OAAO,IAAI,MAAM,KAAK,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;gBAC3G,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;YAC5D,CAAC;YACD,IAAI,GAAG,CAAC,iBAAiB,IAAI,IAAI,KAAK,OAAO,IAAI,MAAM,KAAK,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACzF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;YAC5D,CAAC;QACH,CAAC;QAED,IAAI,CAAC,CAAC,oBAAoB,IAAI,IAAI,KAAK,OAAO,IAAI,MAAM,KAAK,WAAW,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;YACtD,IAAI,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;gBAC7B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,6BAA6B,EAAE,oBAAoB,CAAC,CAAA;YACvF,CAAC;QACH,CAAC;QAED,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;YAC5F,IAAI,EAAE,KAAK,KAAK;gBAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC,CAAA;IAED,mBAAmB,GAAG,KAAK,EACzB,QAAgB,EAChB,SAAiB,EACjB,MAAe,EACf,KAAc,EACd,EAAoB,EACR,EAAE;QACd,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC;aACjC,MAAM,CAAC,GAAG,QAAQ,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;aAC5C,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,YAAY,CACjD,aAAa,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,EAAE,EAChD,KAAK,IAAI,EAAE;YACT,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;YACrF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YACjD,MAAM,IAAI,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,IAAI,EAA0C,CAAC,CAAC,CAAC,SAAS,CAAA;YAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YACtB,IACE,IAAI,EAAE,MAAM,KAAK,WAAW;gBAC5B,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;gBACpC,IAAI,CAAC,WAAW,GAAG,GAAG;gBACtB,UAAU,IAAI,IAAI,EAClB,CAAC;gBACD,OAAO,IAAI,CAAC,QAAa,CAAA;YAC3B,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,EAAE,EAAE,CAAA;YACtB,IAAI,CAAC,CAAC,GAAG,YAAY,QAAQ,CAAC,EAAE,CAAC;gBAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,uBAAuB,CAAA;gBACxD,MAAM,MAAM;qBACT,GAAG,CAAC;oBACH,EAAE,EAAE,OAAO;oBACX,QAAQ;oBACR,MAAM;oBACN,MAAM,EAAE,WAAW;oBACnB,QAAQ,EAAE,GAAG,IAAI,IAAI;oBACrB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,WAAW;oBACX,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC;iBAC7C,CAAC;qBACD,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACpB,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC,EACD,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAA;IACH,CAAC,CAAA;CACF;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,aAAwD,EACxD,SAA6B,EAC7B,mBAA2B,EAC3B,eAAgE,EACnC,EAAE;IAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,CAClC,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;QAC7D,MAAM,MAAM,GAAG;YACb,GAAG,EAAE,KAAK;YACV,GAAG,mBAAmB,CAAC,EAAE,CAAC;YAC1B,GAAG,aAAa,CAAC,EAAE,CAAC;YACpB,GAAG,CAAC,EAAE,KAAK,kBAAkB,IAAI,mBAAmB;gBAClD,CAAC,CAAC;oBACE,WAAW,EAAE,6FAA6F,mBAAmB,aAAa;iBAC3I;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACV,CAAA;QAChB,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,KAAK,IAAI,CAAA;QAChC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;IACrB,CAAC,CAAC,CACiC,CAAA;IAErC,MAAM,YAAY,GAAgC,EAAE,CAAA;IACpD,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC;QAC/D,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI;YAClC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAC7B,CAAC,CAAC,QAAQ,CAAC,IAAI;gBACf,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE;YACvB,CAAC,CAAC,IAAI,IAAI,EAAE,CAAA;QACd,YAAY,CAAC,IAAI,CAAC,GAAG;YACnB,GAAG,QAAQ;YACX,GAAG,EAAE,QAAQ,CAAC,GAAG,KAAK,IAAI;YAC1B,IAAI,EAAE,cAAc;YACpB,YAAY,EAAE,QAAQ,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC1E,CAAA;IAClB,CAAC;IAED,OAAO,EAAE,GAAG,UAAU,EAAE,GAAG,YAAY,EAAE,CAAA;AAC3C,CAAC,CAAA"}

package/dist/router/index.d.ts

@@ -0,0 +1,3 @@
+export * from './schema';
+export { RouterService } from './service';
+//# sourceMappingURL=index.d.ts.map

package/dist/router/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/router/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA"}

package/dist/router/index.js

@@ -0,0 +1,3 @@
+export * from './schema';
+export { RouterService } from './service';
+//# sourceMappingURL=index.js.map

package/dist/router/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/router/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA"}

package/dist/router/schema.d.ts

@@ -0,0 +1,103 @@
+import type { Context } from 'hono';
+import type { z } from 'zod';
+import { type AttachmentTypesMap } from '../attachments';
+import { type AgentConfig, type ContextItemSpec } from '../chat';
+import type { AppBindings, AppEnv, DbRole, RateLimitConfig } from '../config';
+import { type CollectionDefinition, type CollectionName, type EntryId } from '../db';
+import { type EmailTemplatesMap } from '../emails';
+import type { Core } from '../index';
+import { type PlansMap, type ProductsMap } from '../payments';
+import type { RollbackLeg, StepRetryPolicy, StepRunner } from '../tasks';
+import type { Duration } from '../utils';
+export type AuthLevel = 'public' | 'user' | 'strict' | 'admin' | false | 'none' | 'authenticated' | 'api-key';
+export type RouteMode = 'rest' | 'workflow';
+export interface ResourceGuardConfig<I = any> {
+    checkFileRef?: boolean | ((input: I, c?: Context<AppEnv>) => string | string[] | undefined);
+    checkUserId?: boolean | ((input: I, c?: Context<AppEnv>) => string | undefined);
+    checkCollectionField?: {
+        collection: CollectionName;
+        param: string;
+    };
+    requireEmailVerified?: boolean;
+    custom?: (ctx: {
+        userId: EntryId;
+        role: DbRole;
+        input: I;
+        env: AppBindings;
+        c?: Context<AppEnv>;
+    }) => boolean | Promise<boolean>;
+}
+export interface RouteExecutionContext<I = any, P = Record<string, string>, Q = Record<string, string>> {
+    core: Core;
+    env: AppBindings;
+    userId: EntryId;
+    role: DbRole;
+    mode: RouteMode;
+    step: StepRunner;
+    allWithRollback: <T extends readonly unknown[]>(legs: {
+        [K in keyof T]: RollbackLeg<T[K]>;
+    }) => Promise<T>;
+    input: I;
+    params: P;
+    query: Q;
+    rawBody?: string;
+    c: Context<AppEnv>;
+}
+export interface BaseRouteConfig<I = any, O = any, P = any, Q = any> {
+    mode?: RouteMode;
+    method?: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE' | 'ALL';
+    path?: string;
+    workflowName?: string;
+    description?: string;
+    auth?: AuthLevel;
+    rateLimit?: RateLimitConfig;
+    guard?: ResourceGuardConfig<I>;
+    params?: z.ZodType<P>;
+    query?: z.ZodType<Q>;
+    input?: z.ZodType<I>;
+    output?: z.ZodType<O>;
+    rawBody?: boolean;
+    mcp?: boolean;
+    tool?: boolean;
+    timeout?: Duration;
+    retry?: number | StepRetryPolicy;
+    idempotencyKey?: (input: I, ctx: {
+        userId: EntryId;
+    }) => string | undefined;
+}
+export interface RouteConfig<I = any, O = any, P = any, Q = any> extends BaseRouteConfig<I, O, P, Q> {
+    shortCircuit?: (ctx: RouteExecutionContext<I, P, Q>) => Promise<O | undefined | null> | O | undefined | null;
+    handler: (ctx: RouteExecutionContext<I, P, Q>) => Response | O | Promise<Response | O>;
+}
+export type CoreRouteId = 'health' | 'auth.custom-token' | 'auth.session.create' | 'auth.session.get' | 'auth.sign-up.email' | 'auth.sign-in.email' | 'auth.sign-in.social' | 'auth.email.send-verification' | 'auth.email.verify' | 'auth.password.forgot' | 'auth.password.reset' | 'auth.recovery-email.set' | 'auth.recovery-email.verify' | 'auth.account-recovery.initiate' | 'auth.account-recovery.complete' | 'auth.users.list' | 'auth.users.block' | 'auth.users.delete' | 'auth.sign-out' | 'files.upload' | 'files.list' | 'files.get' | 'files.delete' | 'chat.list' | 'chat.get' | 'chat.messages' | 'chat.save' | 'chat.delete' | 'chat.stream' | 'chat.cancel' | 'openai.models' | 'openai.completions' | 'attachments.scan' | 'attachments.process' | 'routes.list' | 'tasks.status' | 'tasks.signal' | 'tasks.cancel' | 'emails.send' | 'emails.batch' | 'emails.logs' | 'emails.webhook' | 'payments.checkout' | 'payments.paymentLink' | 'payments.invoice' | 'payments.charge' | 'payments.subscribe' | 'payments.changeTier' | 'payments.cancelSubscription' | 'payments.status' | 'payments.webhook';
+export type CoreRouteOverride = Partial<Pick<RouteConfig, 'auth' | 'rateLimit' | 'guard' | 'mcp' | 'tool' | 'timeout' | 'retry' | 'description'>>;
+export type CoreRouteOverrides = Partial<Record<CoreRouteId, CoreRouteOverride>>;
+export interface WorkflowRegistryEntry {
+    name: string;
+    description: string;
+    input: z.ZodType<any>;
+    output?: z.ZodType<any>;
+    mode: RouteMode;
+    deadlineSeconds?: number;
+    guard?: BaseRouteConfig['guard'];
+    runTask: (params: any, step: StepRunner) => Promise<unknown>;
+    invoke: (params: any, userId: EntryId, c?: Context<AppEnv>, role?: DbRole, opts?: {
+        wait?: boolean;
+    }) => Promise<unknown>;
+}
+export interface CoreAppInit {
+    coreRouteOverrides?: CoreRouteOverrides;
+    attachmentTypes?: AttachmentTypesMap;
+    emailTemplates?: EmailTemplatesMap;
+    plans?: PlansMap;
+    products?: ProductsMap;
+    agents?: Record<string, AgentConfig>;
+    routes?: Record<string, RouteConfig<any, any, any, any>>;
+    collections?: Record<string, CollectionDefinition<any>>;
+    context?: readonly ContextItemSpec[];
+}
+export declare const defineRoute: <C extends RouteConfig<any, any, any, any>>(config: C) => C;
+export declare const defineRoutes: <T extends Record<string, RouteConfig<any, any, any, any>>>(routes: T) => T;
+export declare const defineRouteOverrides: <T extends CoreRouteOverrides>(overrides: T) => T;
+export declare const CORE_ROUTE_DEFAULTS: Record<CoreRouteId, BaseRouteConfig>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/router/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/router/schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAC5B,OAAO,EAAgD,KAAK,kBAAkB,EAAE,MAAM,gBAAgB,CAAA;AAOtG,OAAO,EAAuD,KAAK,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,SAAS,CAAA;AACrH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC7E,OAAO,EAAY,KAAK,oBAAoB,EAAE,KAAK,cAAc,EAAE,KAAK,OAAO,EAAE,MAAM,OAAO,CAAA;AAC9F,OAAO,EAEwC,KAAK,iBAAiB,EACpE,MAAM,WAAW,CAAA;AAClB,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AACpC,OAAO,EAKyE,KAAK,QAAQ,EAC3F,KAAK,WAAW,EACjB,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,UAAU,CAAA;AACxE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAA;AAExC,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,eAAe,GAAG,SAAS,CAAA;AAE7G,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,UAAU,CAAA;AAE3C,MAAM,WAAW,mBAAmB,CAAC,CAAC,GAAG,GAAG;IAC1C,YAAY,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;IAC3F,WAAW,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,GAAG,SAAS,CAAC,CAAA;IAC/E,oBAAoB,CAAC,EAAE;QAAE,UAAU,EAAE,cAAc,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAA;IACpE,oBAAoB,CAAC,EAAE,OAAO,CAAA;IAC9B,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE;QACb,MAAM,EAAE,OAAO,CAAA;QACf,IAAI,EAAE,MAAM,CAAA;QACZ,KAAK,EAAE,CAAC,CAAA;QACR,GAAG,EAAE,WAAW,CAAA;QAChB,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;KACpB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CACjC;AAED,MAAM,WAAW,qBAAqB,CACpC,CAAC,GAAG,GAAG,EACP,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC1B,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAE1B,IAAI,EAAE,IAAI,CAAA;IACV,GAAG,EAAE,WAAW,CAAA;IAChB,MAAM,EAAE,OAAO,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,SAAS,CAAA;IACf,IAAI,EAAE,UAAU,CAAA;IAChB,eAAe,EAAE,CAAC,CAAC,SAAS,SAAS,OAAO,EAAE,EAAE,IAAI,EAAE;SAAG,CAAC,IAAI,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAA;IAC1G,KAAK,EAAE,CAAC,CAAA;IACR,MAAM,EAAE,CAAC,CAAA;IACT,KAAK,EAAE,CAAC,CAAA;IACR,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;CACnB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG;IACjE,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,CAAA;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,SAAS,CAAC,EAAE,eAAe,CAAA;IAC3B,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAA;IAC9B,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACpB,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACpB,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;IACrB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,GAAG,CAAC,EAAE,OAAO,CAAA;IACb,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,OAAO,CAAC,EAAE,QAAQ,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,GAAG,eAAe,CAAA;IAChC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,EAAE,GAAG,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,MAAM,GAAG,SAAS,CAAA;CAC5E;AAED,MAAM,WAAW,WAAW,CAAC,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,GAAG,CAAE,SAAQ,eAAe,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAClG,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,SAAS,GAAG,IAAI,CAAA;IAC5G,OAAO,EAAE,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;CACvF;AAED,MAAM,MAAM,WAAW,GACnB,QAAQ,GACR,mBAAmB,GACnB,qBAAqB,GACrB,kBAAkB,GAClB,oBAAoB,GACpB,oBAAoB,GACpB,qBAAqB,GACrB,8BAA8B,GAC9B,mBAAmB,GACnB,sBAAsB,GACtB,qBAAqB,GACrB,yBAAyB,GACzB,4BAA4B,GAC5B,gCAAgC,GAChC,gCAAgC,GAChC,iBAAiB,GACjB,kBAAkB,GAClB,mBAAmB,GACnB,eAAe,GACf,cAAc,GACd,YAAY,GACZ,WAAW,GACX,cAAc,GACd,WAAW,GACX,UAAU,GACV,eAAe,GACf,WAAW,GACX,aAAa,GACb,aAAa,GACb,aAAa,GACb,eAAe,GACf,oBAAoB,GACpB,kBAAkB,GAClB,qBAAqB,GACrB,aAAa,GACb,cAAc,GACd,cAAc,GACd,cAAc,GACd,aAAa,GACb,cAAc,GACd,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,sBAAsB,GACtB,kBAAkB,GAClB,iBAAiB,GACjB,oBAAoB,GACpB,qBAAqB,GACrB,6BAA6B,GAC7B,iBAAiB,GACjB,kBAAkB,CAAA;AAEtB,MAAM,MAAM,iBAAiB,GAAG,OAAO,CACrC,IAAI,CAAC,WAAW,EAAE,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC,CACzG,CAAA;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAA;AAEhF,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACrB,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IACvB,IAAI,EAAE,SAAS,CAAA;IACf,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,KAAK,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAA;IAChC,OAAO,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5D,MAAM,EAAE,CACN,MAAM,EAAE,GAAG,EACX,MAAM,EAAE,OAAO,EACf,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EACnB,IAAI,CAAC,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,KACtB,OAAO,CAAC,OAAO,CAAC,CAAA;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,kBAAkB,CAAC,EAAE,kBAAkB,CAAA;IACvC,eAAe,CAAC,EAAE,kBAAkB,CAAA;IACpC,cAAc,CAAC,EAAE,iBAAiB,CAAA;IAClC,KAAK,CAAC,EAAE,QAAQ,CAAA;IAChB,QAAQ,CAAC,EAAE,WAAW,CAAA;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;IACpC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAA;IACvD,OAAO,CAAC,EAAE,SAAS,eAAe,EAAE,CAAA;CACrC;AAED,eAAO,MAAM,WAAW,GAAI,CAAC,SAAS,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,KAAG,CAAgC,CAAA;AAEnH,eAAO,MAAM,YAAY,GAAI,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,KAAG,CAAW,CAAA;AAE/G,eAAO,MAAM,oBAAoB,GAAI,CAAC,SAAS,kBAAkB,aAAa,CAAC,KAAG,CAAc,CAAA;AAEhG,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,WAAW,EAAE,eAAe,CA+QpE,CAAA"}