@dyrected/core 2.5.53 → 2.5.55

package/dist/controllers/admin-auth.controller.d.ts

@@ -1,68 +0,0 @@
-import type { Context } from "hono";
-import type { DyrectedContext } from "../app.js";
-import type { AdminAuthProvider, DyrectedConfig } from "../types/index.js";
-export declare class AdminAuthController {
-    private readonly config;
-    constructor(config: DyrectedConfig);
-    providers(c: Context<DyrectedContext>): Promise<Response & import("hono").TypedResponse<{
-        mode: "local" | "external";
-        collectionSlug?: string | undefined;
-        provisioningMode?: import("../types/admin-auth.js").AdminAuthProvisioningMode | undefined;
-        providers: {
-            id: string;
-            type: AdminAuthProvider["type"];
-            displayName: string;
-            autoRedirect?: boolean | undefined;
-        }[];
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
-    start(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 404, "json">) | (Response & import("hono").TypedResponse<undefined, 302, "redirect">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 400, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 500, "json">)>;
-    callback(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<undefined, 302, "redirect">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 404, "json">)>;
-    exchange(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 404, "json">) | (Response & import("hono").TypedResponse<{
-        token: string;
-        collectionSlug: string;
-        providerId: string;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 403 | 401, "json">)>;
-    logout(c: Context<DyrectedContext>): Promise<Response & import("hono").TypedResponse<{
-        success: true;
-        message: string;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
-    private getProvider;
-    private completeProviderAuth;
-    private resolveAccess;
-    private buildUserData;
-    private findUserByExternalIdentity;
-    private getSiteId;
-    private getRequestConfig;
-    private buildOidcStartUrl;
-    private resolveOidcIdentity;
-    private resolveCustomIdentity;
-    private mapClaims;
-    private readStringClaim;
-    private readStringArrayClaim;
-    private getOidcDiscovery;
-    private defaultCallbackPath;
-    private buildCustomProviderStartUrl;
-    private signState;
-    private verifyState;
-    private getStateSecret;
-    private normalizeReturnTo;
-}
-//# sourceMappingURL=admin-auth.controller.d.ts.map

package/dist/controllers/admin-auth.controller.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/admin-auth.controller.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAQpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,KAAK,EACV,iBAAiB,EAGjB,cAAc,EAEf,MAAM,mBAAmB,CAAC;AAU3B,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,cAAc;IAE7C,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;IAKrC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;IAwCjC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;IAsBpC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;IAqBpC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;IAIxC,OAAO,CAAC,WAAW;YAKL,oBAAoB;YAgFpB,aAAa;YA0Bb,aAAa;YAkBb,0BAA0B;IAiBxC,OAAO,CAAC,SAAS;YAIH,gBAAgB;YAgBhB,iBAAiB;YAwBjB,mBAAmB;YAuDnB,qBAAqB;IA4CnC,OAAO,CAAC,SAAS;IA6BjB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,oBAAoB;YASd,gBAAgB;IAc9B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,2BAA2B;YAarB,SAAS;YAQT,WAAW;IASzB,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,iBAAiB;CAK1B"}

package/dist/controllers/admin-auth.controller.js

@@ -1,414 +0,0 @@
-import { randomBytes } from "node:crypto";
-import { TextEncoder } from "node:util";
-import { SignJWT, createRemoteJWKSet, jwtVerify, decodeJwt, } from "jose";
-import { signCollectionToken } from "../auth/token.js";
-import { hashPassword } from "../auth/password.js";
-import { getAdminAuthCollection, getPublicAdminAuthConfig } from "../utils/admin-auth.js";
-export class AdminAuthController {
-    config;
-    constructor(config) {
-        this.config = config;
-    }
-    async providers(c) {
-        const requestConfig = await this.getRequestConfig(c);
-        return c.json(getPublicAdminAuthConfig(requestConfig.adminAuth, requestConfig.collections));
-    }
-    async start(c) {
-        const requestConfig = await this.getRequestConfig(c);
-        const provider = this.getProvider(requestConfig, c.req.param("provider"));
-        if (!provider) {
-            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
-        }
-        const siteId = this.getSiteId(c);
-        const returnTo = this.normalizeReturnTo(c.req.query("returnTo"), c);
-        if (provider.type === "oidc") {
-            const redirectUrl = await this.buildOidcStartUrl(provider, returnTo, siteId, new URL(c.req.url).origin);
-            return c.redirect(redirectUrl, 302);
-        }
-        if (!provider.startUrl) {
-            return c.json({ error: true, message: "This provider does not expose a start URL." }, 400);
-        }
-        const url = this.buildCustomProviderStartUrl(provider.startUrl, new URL(c.req.url).origin);
-        if (!url) {
-            return c.json({
-                error: true,
-                message: `Admin auth provider "${provider.id}" has an invalid start URL.`,
-            }, 500);
-        }
-        url.searchParams.set("returnTo", returnTo);
-        if (siteId)
-            url.searchParams.set("siteId", siteId);
-        url.searchParams.set("provider", provider.id);
-        return c.redirect(url.toString(), 302);
-    }
-    async callback(c) {
-        const requestConfig = await this.getRequestConfig(c);
-        const provider = this.getProvider(requestConfig, c.req.param("provider"));
-        if (!provider) {
-            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
-        }
-        try {
-            const exchange = await this.completeProviderAuth(requestConfig, provider, c);
-            const redirectUrl = new URL(exchange.returnTo);
-            redirectUrl.searchParams.set("dyrectedExternalToken", exchange.token);
-            redirectUrl.searchParams.set("dyrectedAdminCollection", exchange.collectionSlug);
-            return c.redirect(redirectUrl.toString(), 302);
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : "External authentication failed.";
-            const fallback = this.normalizeReturnTo(c.req.query("returnTo"), c);
-            const redirectUrl = new URL(fallback);
-            redirectUrl.searchParams.set("dyrectedExternalError", message);
-            return c.redirect(redirectUrl.toString(), 302);
-        }
-    }
-    async exchange(c) {
-        const requestConfig = await this.getRequestConfig(c);
-        const provider = this.getProvider(requestConfig, c.req.param("provider"));
-        if (!provider) {
-            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
-        }
-        try {
-            const exchange = await this.completeProviderAuth(requestConfig, provider, c);
-            return c.json({
-                token: exchange.token,
-                collectionSlug: exchange.collectionSlug,
-                providerId: provider.id,
-            });
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : "External authentication failed.";
-            const status = message === "Access denied for this site." ? 403 : 401;
-            return c.json({ error: true, message }, status);
-        }
-    }
-    async logout(c) {
-        return c.json({ success: true, message: "Logged out. Discard your token." });
-    }
-    getProvider(config, id) {
-        if (config.adminAuth?.mode !== "external")
-            return undefined;
-        return config.adminAuth.providers.find((provider) => provider.id === id);
-    }
-    async completeProviderAuth(requestConfig, provider, c) {
-        const resolved = provider.type === "oidc"
-            ? await this.resolveOidcIdentity(provider, c)
-            : await this.resolveCustomIdentity(provider, c);
-        const identity = resolved.identity;
-        const siteId = this.getSiteId(c);
-        const adminCollection = getAdminAuthCollection(requestConfig);
-        if (!adminCollection?.auth) {
-            throw new Error("Admin auth collection is not configured.");
-        }
-        const db = c.get("config").db;
-        if (!db)
-            throw new Error("Database not configured.");
-        let user = (await this.findUserByExternalIdentity(db, adminCollection.slug, provider.id, identity.sub)) ??
-            (identity.email
-                ? (await db.find({
-                    collection: adminCollection.slug,
-                    where: { email: identity.email },
-                    limit: 1,
-                })).docs[0]
-                : null);
-        const provisioningMode = requestConfig.adminAuth?.provisioningMode ?? "jit_plus_membership_management";
-        const allowJitProvisioning = provisioningMode !== "preprovisioned_only" && provider.allowJitProvisioning !== false;
-        if (!user && !allowJitProvisioning) {
-            throw new Error("This account has not been provisioned for admin access.");
-        }
-        const access = await this.resolveAccess(requestConfig, identity, provider.id, siteId, c, user);
-        if (!access.allowed) {
-            throw new Error("Access denied for this site.");
-        }
-        if (!user && allowJitProvisioning) {
-            user = await db.create({
-                collection: adminCollection.slug,
-                data: {
-                    ...(await this.buildUserData(identity, provider.id, access.roles, access.data)),
-                    password: await hashPassword(randomBytes(32).toString("hex")),
-                },
-            });
-        }
-        else if (user) {
-            user = await db.update({
-                collection: adminCollection.slug,
-                id: user.id,
-                data: await this.buildUserData(identity, provider.id, access.roles, access.data),
-            });
-        }
-        if (!user?.email) {
-            throw new Error("Authenticated admin user is missing an email address.");
-        }
-        const token = await signCollectionToken({
-            sub: user.id,
-            email: user.email,
-            collection: adminCollection.slug,
-            providerId: provider.id,
-            authSource: "external",
-        });
-        return {
-            token,
-            collectionSlug: adminCollection.slug,
-            returnTo: resolved.returnTo,
-        };
-    }
-    async resolveAccess(requestConfig, identity, providerId, siteId, c, user) {
-        const resolved = await requestConfig.adminAuth?.resolveAccess?.({
-            identity,
-            providerId,
-            siteId,
-            workspaceId: c.get("workspaceId"),
-            req: {
-                method: c.req.method,
-                path: c.req.path,
-                url: c.req.url,
-                headers: Object.fromEntries(c.req.raw.headers.entries()),
-            },
-            user,
-        });
-        if (resolved)
-            return resolved;
-        return { allowed: true, roles: identity.roles, data: {} };
-    }
-    async buildUserData(identity, providerId, roles, extraData) {
-        return {
-            ...(identity.email ? { email: identity.email } : {}),
-            ...(identity.name ? { name: identity.name } : {}),
-            ...(roles ? { roles } : {}),
-            ...(extraData ?? {}),
-            authProvider: providerId,
-            externalSubject: identity.sub,
-            authSource: "external",
-            lastLoginAt: new Date().toISOString(),
-        };
-    }
-    async findUserByExternalIdentity(db, collection, providerId, externalSubject) {
-        const result = await db.find({
-            collection,
-            where: {
-                authProvider: providerId,
-                externalSubject,
-            },
-            limit: 1,
-        });
-        return result.docs[0] ?? null;
-    }
-    getSiteId(c) {
-        return c.req.header("X-Site-Id") || c.get("siteId");
-    }
-    async getRequestConfig(c) {
-        const siteId = this.getSiteId(c);
-        if (!siteId || !this.config.onSchemaFetch)
-            return this.config;
-        const dynamic = await this.config.onSchemaFetch(siteId);
-        return {
-            ...this.config,
-            ...(dynamic.admin ? { admin: { ...this.config.admin, ...dynamic.admin } } : {}),
-            ...(dynamic.adminAuth
-                ? { adminAuth: { ...this.config.adminAuth, ...dynamic.adminAuth } }
-                : {}),
-            collections: dynamic.collections ? [...this.config.collections, ...dynamic.collections] : this.config.collections,
-            globals: dynamic.globals ? [...this.config.globals, ...dynamic.globals] : this.config.globals,
-        };
-    }
-    async buildOidcStartUrl(provider, returnTo, siteId, origin) {
-        const discovery = await this.getOidcDiscovery(provider);
-        const nonce = randomBytes(16).toString("hex");
-        const state = await this.signState({
-            providerId: provider.id,
-            returnTo,
-            siteId,
-            nonce,
-        });
-        const url = new URL(provider.authorizationEndpoint || discovery.authorization_endpoint);
-        url.searchParams.set("response_type", "code");
-        url.searchParams.set("client_id", provider.clientId);
-        url.searchParams.set("redirect_uri", provider.redirectUri || this.defaultCallbackPath(provider.id, origin));
-        url.searchParams.set("scope", (provider.scopes ?? ["openid", "profile", "email"]).join(" "));
-        url.searchParams.set("state", state);
-        url.searchParams.set("nonce", nonce);
-        return url.toString();
-    }
-    async resolveOidcIdentity(provider, c) {
-        const code = c.req.query("code");
-        const state = c.req.query("state");
-        if (!code || !state)
-            throw new Error("Missing OIDC callback parameters.");
-        const parsedState = await this.verifyState(state, provider.id);
-        const discovery = await this.getOidcDiscovery(provider);
-        const redirectUri = provider.redirectUri || this.defaultCallbackPath(provider.id, new URL(c.req.url).origin);
-        const tokenResponse = await fetch(provider.tokenEndpoint || discovery.token_endpoint, {
-            method: "POST",
-            headers: { "Content-Type": "application/x-www-form-urlencoded" },
-            body: new URLSearchParams({
-                grant_type: "authorization_code",
-                code,
-                redirect_uri: redirectUri,
-                client_id: provider.clientId,
-                client_secret: provider.clientSecret,
-            }),
-        });
-        if (!tokenResponse.ok) {
-            throw new Error("OIDC token exchange failed.");
-        }
-        const tokenBody = await tokenResponse.json();
-        const idToken = tokenBody.id_token;
-        let claims = {};
-        if (idToken) {
-            const jwks = createRemoteJWKSet(new URL(discovery.jwks_uri));
-            const { payload } = await jwtVerify(idToken, jwks, {
-                issuer: provider.issuer,
-                audience: provider.clientId,
-            });
-            if (parsedState.nonce && payload.nonce !== parsedState.nonce) {
-                throw new Error("OIDC nonce verification failed.");
-            }
-            claims = payload;
-        }
-        else if (tokenBody.access_token && (provider.userInfoEndpoint || discovery.userinfo_endpoint)) {
-            const userInfo = await fetch(provider.userInfoEndpoint || discovery.userinfo_endpoint, {
-                headers: { Authorization: `Bearer ${tokenBody.access_token}` },
-            });
-            if (!userInfo.ok)
-                throw new Error("OIDC userinfo request failed.");
-            claims = await userInfo.json();
-        }
-        else {
-            throw new Error("OIDC provider did not return usable identity claims.");
-        }
-        return {
-            identity: this.mapClaims(claims, provider.claimMapping),
-            returnTo: parsedState.returnTo,
-        };
-    }
-    async resolveCustomIdentity(provider, c) {
-        const body = c.req.method === "POST" ? await c.req.json().catch(() => ({})) : {};
-        const tokenParam = provider.tokenParam || "token";
-        const token = body?.[tokenParam] || c.req.query(tokenParam);
-        if (!token) {
-            throw new Error(`Missing ${tokenParam} for external auth exchange.`);
-        }
-        let claims;
-        if (provider.secret) {
-            const secret = new TextEncoder().encode(provider.secret);
-            const verified = await jwtVerify(token, secret, {
-                issuer: provider.issuer,
-                audience: provider.audience,
-            });
-            claims = verified.payload;
-        }
-        else if (provider.jwksUri) {
-            const jwks = createRemoteJWKSet(new URL(provider.jwksUri));
-            const verified = await jwtVerify(token, jwks, {
-                issuer: provider.issuer,
-                audience: provider.audience,
-            });
-            claims = verified.payload;
-        }
-        else {
-            claims = decodeJwt(token);
-            if (provider.issuer && claims.iss !== provider.issuer) {
-                throw new Error("External auth issuer mismatch.");
-            }
-            if (provider.audience) {
-                const aud = claims.aud;
-                const matches = Array.isArray(aud) ? aud.includes(provider.audience) : aud === provider.audience;
-                if (!matches)
-                    throw new Error("External auth audience mismatch.");
-            }
-        }
-        return {
-            identity: this.mapClaims(claims, provider.claimMapping),
-            returnTo: this.normalizeReturnTo(body?.returnTo || c.req.query("returnTo"), c),
-        };
-    }
-    mapClaims(claims, mapping) {
-        const subKey = mapping?.sub || "sub";
-        const emailKey = mapping?.email || "email";
-        const nameKey = mapping?.name || "name";
-        const rolesKey = mapping?.roles;
-        const groupsKey = mapping?.groups;
-        const siteIdsKey = mapping?.siteIds;
-        const workspaceIdsKey = mapping?.workspaceIds;
-        const sub = claims[subKey];
-        if (typeof sub !== "string" || !sub) {
-            throw new Error("External identity is missing a subject.");
-        }
-        return {
-            sub,
-            email: this.readStringClaim(claims[emailKey]),
-            name: this.readStringClaim(claims[nameKey]),
-            roles: this.readStringArrayClaim(rolesKey ? claims[rolesKey] : undefined),
-            groups: this.readStringArrayClaim(groupsKey ? claims[groupsKey] : undefined),
-            siteIds: this.readStringArrayClaim(siteIdsKey ? claims[siteIdsKey] : undefined),
-            workspaceIds: this.readStringArrayClaim(workspaceIdsKey ? claims[workspaceIdsKey] : undefined),
-            rawClaims: claims,
-        };
-    }
-    readStringClaim(value) {
-        return typeof value === "string" ? value : undefined;
-    }
-    readStringArrayClaim(value) {
-        if (!value)
-            return undefined;
-        if (Array.isArray(value)) {
-            return value.filter((entry) => typeof entry === "string");
-        }
-        if (typeof value === "string")
-            return [value];
-        return undefined;
-    }
-    async getOidcDiscovery(provider) {
-        const discoveryUrl = new URL(provider.issuer.replace(/\/$/, "") + "/.well-known/openid-configuration");
-        const response = await fetch(discoveryUrl.toString());
-        if (!response.ok)
-            throw new Error("Failed to load OIDC discovery document.");
-        return response.json();
-    }
-    defaultCallbackPath(providerId, origin = "") {
-        return `${origin}/api/admin/auth/${providerId}/callback`;
-    }
-    buildCustomProviderStartUrl(startUrl, origin) {
-        const value = startUrl.trim();
-        if (!value || /^(undefined|null)(\/|$)/i.test(value))
-            return null;
-        try {
-            const url = new URL(value, origin);
-            if (url.protocol !== "http:" && url.protocol !== "https:")
-                return null;
-            return url;
-        }
-        catch {
-            return null;
-        }
-    }
-    async signState(payload) {
-        return new SignJWT(payload)
-            .setProtectedHeader({ alg: "HS256" })
-            .setIssuedAt()
-            .setExpirationTime("15m")
-            .sign(this.getStateSecret());
-    }
-    async verifyState(token, providerId) {
-        const { payload } = await jwtVerify(token, this.getStateSecret());
-        const state = payload;
-        if (state.providerId !== providerId) {
-            throw new Error("OIDC state verification failed.");
-        }
-        return state;
-    }
-    getStateSecret() {
-        const secret = process.env.DYRECTED_JWT_SECRET || process.env.JWT_SECRET;
-        if (!secret) {
-            throw new Error("[dyrected/core] DYRECTED_JWT_SECRET is not set.");
-        }
-        return new TextEncoder().encode(secret);
-    }
-    normalizeReturnTo(returnTo, c) {
-        if (returnTo)
-            return returnTo;
-        const url = new URL(c.req.url);
-        return `${url.origin}/admin`;
-    }
-}
-//# sourceMappingURL=admin-auth.controller.js.map

package/dist/controllers/admin-auth.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth.controller.js","sourceRoot":"","sources":["../../src/controllers/admin-auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EACL,OAAO,EACP,kBAAkB,EAClB,SAAS,EACT,SAAS,GAEV,MAAM,MAAM,CAAC;AAEd,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAQnD,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAS1F,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,SAAS,CAAC,CAA2B;QACzC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,CAA2B;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpE,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC9C,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAC1B,CAAC;YACF,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAC3F,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,wBAAwB,QAAQ,CAAC,EAAE,6BAA6B;aAC1E,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,CAA2B;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC7E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtE,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,yBAAyB,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;YACjF,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC;YAC3F,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACpE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,CAA2B;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAAE,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC7E,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,CAAC;YAC3F,MAAM,MAAM,GAAG,OAAO,KAAK,8BAA8B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACtE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,CAA2B;QACtC,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;IAC/E,CAAC;IAEO,WAAW,CAAC,MAAsB,EAAE,EAAU;QACpD,IAAI,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QAC5D,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,aAA6B,EAC7B,QAA2B,EAC3B,CAA2B;QAE3B,MAAM,QAAQ,GACZ,QAAQ,CAAC,IAAI,KAAK,MAAM;YACtB,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,eAAe,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAErD,IAAI,IAAI,GACN,CAAC,MAAM,IAAI,CAAC,0BAA0B,CAAC,EAAE,EAAE,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC5F,CAAC,QAAQ,CAAC,KAAK;gBACb,CAAC,CAAC,CACE,MAAM,EAAE,CAAC,IAAI,CAAC;oBACZ,UAAU,EAAE,eAAe,CAAC,IAAI;oBAChC,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;oBAChC,KAAK,EAAE,CAAC;iBACT,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,CAAC;gBACX,CAAC,CAAC,IAAI,CAAC,CAAC;QAEZ,MAAM,gBAAgB,GAAG,aAAa,CAAC,SAAS,EAAE,gBAAgB,IAAI,gCAAgC,CAAC;QACvG,MAAM,oBAAoB,GACxB,gBAAgB,KAAK,qBAAqB,IAAI,QAAQ,CAAC,oBAAoB,KAAK,KAAK,CAAC;QAExF,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;QAC/F,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC;YAClC,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;gBACrB,UAAU,EAAE,eAAe,CAAC,IAAI;gBAChC,IAAI,EAAE;oBACJ,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;oBAC/E,QAAQ,EAAE,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;iBAC9D;aACF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;gBACrB,UAAU,EAAE,eAAe,CAAC,IAAI;gBAChC,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;aACjF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC;YACtC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,eAAe,CAAC,IAAI;YAChC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,UAAU,EAAE,UAAU;SACvB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK;YACL,cAAc,EAAE,eAAe,CAAC,IAAI;YACpC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,aAA6B,EAC7B,QAAmC,EACnC,UAAkB,EAClB,MAA0B,EAC1B,CAA2B,EAC3B,IAAS;QAET,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC;YAC9D,QAAQ;YACR,UAAU;YACV,MAAM;YACN,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;YACjC,GAAG,EAAE;gBACH,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;gBACpB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;gBAChB,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;gBACd,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aACzD;YACD,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,QAAmC,EACnC,UAAkB,EAClB,KAAgB,EAChB,SAAmC;QAEnC,OAAO;YACL,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YACpB,YAAY,EAAE,UAAU;YACxB,eAAe,EAAE,QAAQ,CAAC,GAAG;YAC7B,UAAU,EAAE,UAAU;YACtB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACtC,EAAqC,EACrC,UAAkB,EAClB,UAAkB,EAClB,eAAuB;QAEvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,UAAU;YACV,KAAK,EAAE;gBACL,YAAY,EAAE,UAAU;gBACxB,eAAe;aAChB;YACD,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAChC,CAAC;IAEO,SAAS,CAAC,CAA2B;QAC3C,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,CAA2B;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAE9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACxD,OAAO;YACL,GAAG,IAAI,CAAC,MAAM;YACd,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/E,GAAG,CAAC,OAAO,CAAC,SAAS;gBACnB,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,EAAE;gBACnE,CAAC,CAAC,EAAE,CAAC;YACP,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW;YACjH,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO;SAC9F,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,QAA+B,EAC/B,QAAgB,EAChB,MAAe,EACf,MAAe;QAEf,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;YACjC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ;YACR,MAAM;YACN,KAAK;SACN,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,qBAAqB,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;QACxF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5G,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7F,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,QAA+B,EAAE,CAA2B;QAC5F,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAE1E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAE7G,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,aAAa,IAAI,SAAS,CAAC,cAAc,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,YAAY,EAAE,WAAW;gBACzB,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,aAAa,EAAE,QAAQ,CAAC,YAAY;aACrC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,QAA8B,CAAC;QACzD,IAAI,MAAM,GAA4B,EAAE,CAAC;QAEzC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;gBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,OAAkC,CAAC;QAC9C,CAAC;aAAM,IAAI,SAAS,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,SAAS,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAChG,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,gBAAgB,IAAI,SAAS,CAAC,iBAAiB,EAAE;gBACrF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,SAAS,CAAC,YAAY,EAAE,EAAE;aAC/D,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnE,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC;YACvD,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,QAAiC,EAAE,CAA2B;QAChG,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC;QAClD,MAAM,KAAK,GAAI,IAAI,EAAE,CAAC,UAAU,CAAwB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACpF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,8BAA8B,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,MAAkB,CAAC;QACvB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;gBAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;gBACvB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC;gBACjG,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAiC,EAAE,QAAQ,CAAC,YAAY,CAAC;YAClF,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAC7B,IAAI,EAAE,QAA+B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EACjE,CAAC,CACF;SACF,CAAC;IACJ,CAAC;IAEO,SAAS,CACf,MAA+B,EAC/B,OAA+C;QAE/C,MAAM,MAAM,GAAG,OAAO,EAAE,GAAG,IAAI,KAAK,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,CAAC;QAChC,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,EAAE,OAAO,CAAC;QACpC,MAAM,eAAe,GAAG,OAAO,EAAE,YAAY,CAAC;QAE9C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO;YACL,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3C,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzE,MAAM,EAAE,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,YAAY,EAAE,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9F,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAEO,oBAAoB,CAAC,KAAc;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,QAA+B;QAC5D,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,mCAAmC,CACzE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7E,OAAO,QAAQ,CAAC,IAAI,EAKlB,CAAC;IACL,CAAC;IAEO,mBAAmB,CAAC,UAAkB,EAAE,MAAM,GAAG,EAAE;QACzD,OAAO,GAAG,MAAM,mBAAmB,UAAU,WAAW,CAAC;IAC3D,CAAC;IAEO,2BAA2B,CAAC,QAAgB,EAAE,MAAc;QAClE,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAElE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACvE,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAmD;QACzE,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;aACxB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACpC,WAAW,EAAE;aACb,iBAAiB,CAAC,KAAK,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,UAAkB;QACzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,OAAgC,CAAC;QAC/C,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,cAAc;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;QACzE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAEO,iBAAiB,CAAC,QAA4B,EAAE,CAA2B;QACjF,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC;IAC/B,CAAC;CACF"}

package/dist/controllers/auth.controller.d.ts

@@ -1,125 +0,0 @@
-import type { Context } from "hono";
-import type { DyrectedContext } from "../app.js";
-import type { CollectionConfig } from "../types/index.js";
-/**
- * Handles auth endpoints for collections with `auth: true`.
- *
- * Routes registered (relative to `/api/collections/:slug`):
- *   POST   /login
- *   POST   /logout       (stateless — client drops the token)
- *   GET    /me
- *   POST   /refresh-token
- *   POST   /forgot-password
- *   POST   /reset-password
- *   POST   /invite
- *   POST   /accept-invite
- */
-export declare class AuthController {
-    private collection;
-    constructor(collection: CollectionConfig);
-    init(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        message: string;
-    }, 500, "json">) | (Response & import("hono").TypedResponse<{
-        initialized: boolean;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
-    registerFirstUser(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        message: string;
-    }, 500, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 403, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 400, "json">) | (Response & import("hono").TypedResponse<{
-        token: string;
-        user: {
-            [x: string]: any;
-            id: string;
-        };
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
-    login(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        message: string;
-    }, 500, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 400, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 401, "json">) | (Response & import("hono").TypedResponse<{
-        token: string;
-        user: {
-            [x: string]: any;
-        };
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
-    logout(c: Context<DyrectedContext>): Promise<Response & import("hono").TypedResponse<{
-        success: true;
-        message: string;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
-    me(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        message: string;
-    }, 500, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 401, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 404, "json">) | (Response & import("hono").TypedResponse<{
-        [x: string]: any;
-        id: string;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
-    refreshToken(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 401, "json">) | (Response & import("hono").TypedResponse<{
-        token: string;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
-    forgotPassword(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        message: string;
-    }, 500, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 400, "json">) | (Response & import("hono").TypedResponse<{
-        success: true;
-        message: string;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
-    resetPassword(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        message: string;
-    }, 500, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 400, "json">) | (Response & import("hono").TypedResponse<{
-        success: true;
-        message: string;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
-    invite(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        message: string;
-    }, 500, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 401, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 400, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 409, "json">) | (Response & import("hono").TypedResponse<{
-        success: true;
-        message: string;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
-    acceptInvite(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        message: string;
-    }, 500, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 400, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 409, "json">) | (Response & import("hono").TypedResponse<{
-        token: string;
-        user: {
-            [x: string]: any;
-            id: string;
-        };
-    }, 201, "json">)>;
-}
-//# sourceMappingURL=auth.controller.d.ts.map

package/dist/controllers/auth.controller.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAW1D;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,UAAU,CAAmB;gBAEzB,UAAU,EAAE,gBAAgB;IAQlC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;IAkBhC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;IAmD7C,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;IA0CjC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;IAOlC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;IAqB9B,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;IAoBxC,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;IAgD1C,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;IA0CzC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;IAiDlC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;;;CAwD/C"}