@dyrected/core 2.6.3 → 2.6.4

package/dist/controllers/admin-auth.controller.d.ts

@@ -0,0 +1,71 @@
+import type { Context } from "hono";
+import type { DyrectedContext } from "../app.js";
+import type { AdminAuthProvider, DyrectedConfig } from "../types/index.js";
+export declare class AdminAuthController {
+    private readonly config;
+    constructor(config: DyrectedConfig);
+    providers(c: Context<DyrectedContext>): Promise<Response & import("hono").TypedResponse<{
+        mode: "local" | "external";
+        collectionSlug?: string | undefined;
+        provisioningMode?: import("../types/admin-auth.js").AdminAuthProvisioningMode | undefined;
+        providers: {
+            id: string;
+            type: AdminAuthProvider["type"];
+            displayName: string;
+            autoRedirect?: boolean | undefined;
+        }[];
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
+    start(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 404, "json">) | (Response & import("hono").TypedResponse<undefined, 302, "redirect">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 400, "json">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 500, "json">)>;
+    callback(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<undefined, 302, "redirect">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 404, "json">)>;
+    exchange(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 404, "json">) | (Response & import("hono").TypedResponse<{
+        token: string;
+        collectionSlug: string;
+        providerId: string;
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 403 | 401, "json">)>;
+    logout(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 401, "json">) | (Response & import("hono").TypedResponse<{
+        success: true;
+        message: string;
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
+    private getProvider;
+    private completeProviderAuth;
+    private resolveAccess;
+    private buildUserData;
+    private findUserByExternalIdentity;
+    private getSiteId;
+    private getRequestConfig;
+    private buildOidcStartUrl;
+    private resolveOidcIdentity;
+    private resolveCustomIdentity;
+    private mapClaims;
+    private readStringClaim;
+    private readStringArrayClaim;
+    private getOidcDiscovery;
+    private defaultCallbackPath;
+    private buildCustomProviderStartUrl;
+    private signState;
+    private verifyState;
+    private getStateSecret;
+    private normalizeReturnTo;
+}
+//# sourceMappingURL=admin-auth.controller.d.ts.map

package/dist/controllers/admin-auth.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/admin-auth.controller.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAQpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,KAAK,EACV,iBAAiB,EAGjB,cAAc,EAEf,MAAM,mBAAmB,CAAC;AAc3B,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,cAAc;IAE7C,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;IAUrC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;IAiDjC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;IAmCpC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;IA+BpC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;IA8CxC,OAAO,CAAC,WAAW;YAQL,oBAAoB;YA6GpB,aAAa;YA0Bb,aAAa;YAkBb,0BAA0B;IAiBxC,OAAO,CAAC,SAAS;YAIH,gBAAgB;YAWhB,iBAAiB;YAgCjB,mBAAmB;YAqEnB,qBAAqB;IAsDnC,OAAO,CAAC,SAAS;IAmCjB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,oBAAoB;YAWd,gBAAgB;IAe9B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,2BAA2B;YAgBrB,SAAS;YAQT,WAAW;IASzB,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,iBAAiB;CAQ1B"}

package/dist/controllers/admin-auth.controller.js

@@ -0,0 +1,450 @@
+import { randomBytes } from "node:crypto";
+import { TextEncoder } from "node:util";
+import { SignJWT, createRemoteJWKSet, jwtVerify, decodeJwt, } from "jose";
+import { issueAuthSessionToken, revokeAllAuthSessions, revokeAuthSession } from "../auth/sessions.js";
+import { hashPassword } from "../auth/password.js";
+import { getAdminAuthCollection, getPublicAdminAuthConfig, } from "../utils/admin-auth.js";
+import { mergeDynamicConfig } from "../utils/block-references.js";
+export class AdminAuthController {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    async providers(c) {
+        const requestConfig = await this.getRequestConfig(c);
+        return c.json(getPublicAdminAuthConfig(requestConfig.adminAuth, requestConfig.collections));
+    }
+    async start(c) {
+        const requestConfig = await this.getRequestConfig(c);
+        const provider = this.getProvider(requestConfig, c.req.param("provider"));
+        if (!provider) {
+            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
+        }
+        const siteId = this.getSiteId(c);
+        const returnTo = this.normalizeReturnTo(c.req.query("returnTo"), c);
+        if (provider.type === "oidc") {
+            const redirectUrl = await this.buildOidcStartUrl(provider, returnTo, siteId, new URL(c.req.url).origin);
+            return c.redirect(redirectUrl, 302);
+        }
+        if (!provider.startUrl) {
+            return c.json({ error: true, message: "This provider does not expose a start URL." }, 400);
+        }
+        const url = this.buildCustomProviderStartUrl(provider.startUrl, new URL(c.req.url).origin);
+        if (!url) {
+            return c.json({
+                error: true,
+                message: `Admin auth provider "${provider.id}" has an invalid start URL.`,
+            }, 500);
+        }
+        url.searchParams.set("returnTo", returnTo);
+        if (siteId)
+            url.searchParams.set("siteId", siteId);
+        url.searchParams.set("provider", provider.id);
+        return c.redirect(url.toString(), 302);
+    }
+    async callback(c) {
+        const requestConfig = await this.getRequestConfig(c);
+        const provider = this.getProvider(requestConfig, c.req.param("provider"));
+        if (!provider) {
+            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
+        }
+        try {
+            const exchange = await this.completeProviderAuth(requestConfig, provider, c);
+            const redirectUrl = new URL(exchange.returnTo);
+            redirectUrl.searchParams.set("dyrectedExternalToken", exchange.token);
+            redirectUrl.searchParams.set("dyrectedAdminCollection", exchange.collectionSlug);
+            return c.redirect(redirectUrl.toString(), 302);
+        }
+        catch (error) {
+            const message = error instanceof Error
+                ? error.message
+                : "External authentication failed.";
+            const fallback = this.normalizeReturnTo(c.req.query("returnTo"), c);
+            const redirectUrl = new URL(fallback);
+            redirectUrl.searchParams.set("dyrectedExternalError", message);
+            return c.redirect(redirectUrl.toString(), 302);
+        }
+    }
+    async exchange(c) {
+        const requestConfig = await this.getRequestConfig(c);
+        const provider = this.getProvider(requestConfig, c.req.param("provider"));
+        if (!provider) {
+            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
+        }
+        try {
+            const exchange = await this.completeProviderAuth(requestConfig, provider, c);
+            return c.json({
+                token: exchange.token,
+                collectionSlug: exchange.collectionSlug,
+                providerId: provider.id,
+            });
+        }
+        catch (error) {
+            const message = error instanceof Error
+                ? error.message
+                : "External authentication failed.";
+            const status = message === "Access denied for this site." ? 403 : 401;
+            return c.json({ error: true, message }, status);
+        }
+    }
+    async logout(c) {
+        const requestUser = c.get("user");
+        const tokenPayload = c.get("authTokenPayload");
+        const allSessions = ["1", "true", "yes"].includes((c.req.query("allSessions") || "").toLowerCase());
+        if (!requestUser) {
+            if (allSessions) {
+                return c.json({ error: true, message: "Authentication required." }, 401);
+            }
+            return c.json({
+                success: true,
+                message: "Logged out. Discard your token.",
+            });
+        }
+        if (allSessions) {
+            await revokeAllAuthSessions(c.get("config"), {
+                userId: requestUser.sub,
+                collection: requestUser.collection,
+            });
+            return c.json({
+                success: true,
+                message: "All sessions have been logged out.",
+            });
+        }
+        if (tokenPayload?.sid) {
+            await revokeAuthSession(c.get("config"), tokenPayload.sid);
+            return c.json({
+                success: true,
+                message: "Logged out.",
+            });
+        }
+        return c.json({
+            success: true,
+            message: "Logged out. Discard your token.",
+        });
+    }
+    getProvider(config, id) {
+        if (config.adminAuth?.mode !== "external")
+            return undefined;
+        return config.adminAuth.providers.find((provider) => provider.id === id);
+    }
+    async completeProviderAuth(requestConfig, provider, c) {
+        const resolved = provider.type === "oidc"
+            ? await this.resolveOidcIdentity(provider, c)
+            : await this.resolveCustomIdentity(provider, c);
+        const identity = resolved.identity;
+        const siteId = this.getSiteId(c);
+        const adminCollection = getAdminAuthCollection(requestConfig);
+        if (!adminCollection?.auth) {
+            throw new Error("Admin auth collection is not configured.");
+        }
+        const db = c.get("config").db;
+        if (!db)
+            throw new Error("Database not configured.");
+        let user = (await this.findUserByExternalIdentity(db, adminCollection.slug, provider.id, identity.sub)) ??
+            (identity.email
+                ? (await db.find({
+                    collection: adminCollection.slug,
+                    where: { email: identity.email },
+                    limit: 1,
+                })).docs[0]
+                : null);
+        const provisioningMode = requestConfig.adminAuth?.provisioningMode ??
+            "jit_plus_membership_management";
+        const allowJitProvisioning = provisioningMode !== "preprovisioned_only" &&
+            provider.allowJitProvisioning !== false;
+        if (!user && !allowJitProvisioning) {
+            throw new Error("This account has not been provisioned for admin access.");
+        }
+        const access = await this.resolveAccess(requestConfig, identity, provider.id, siteId, c, user);
+        if (!access.allowed) {
+            throw new Error("Access denied for this site.");
+        }
+        if (!user && allowJitProvisioning) {
+            user = await db.create({
+                collection: adminCollection.slug,
+                data: {
+                    ...(await this.buildUserData(identity, provider.id, access.roles, access.data)),
+                    password: await hashPassword(randomBytes(32).toString("hex")),
+                },
+            });
+        }
+        else if (user) {
+            user = await db.update({
+                collection: adminCollection.slug,
+                id: user.id,
+                data: await this.buildUserData(identity, provider.id, access.roles, access.data),
+            });
+        }
+        if (!user?.email) {
+            throw new Error("Authenticated admin user is missing an email address.");
+        }
+        const token = await issueAuthSessionToken({
+            config: c.get("config"),
+            userId: user.id,
+            email: user.email,
+            collection: adminCollection.slug,
+            providerId: provider.id,
+            authSource: "external",
+            ip: c.get("clientIp"),
+        });
+        return {
+            token,
+            collectionSlug: adminCollection.slug,
+            returnTo: resolved.returnTo,
+        };
+    }
+    async resolveAccess(requestConfig, identity, providerId, siteId, c, user) {
+        const resolved = await requestConfig.adminAuth?.resolveAccess?.({
+            identity,
+            providerId,
+            siteId,
+            workspaceId: c.get("workspaceId"),
+            req: {
+                method: c.req.method,
+                path: c.req.path,
+                url: c.req.url,
+                headers: Object.fromEntries(c.req.raw.headers.entries()),
+            },
+            user,
+        });
+        if (resolved)
+            return resolved;
+        return { allowed: true, roles: identity.roles, data: {} };
+    }
+    async buildUserData(identity, providerId, roles, extraData) {
+        return {
+            ...(identity.email ? { email: identity.email } : {}),
+            ...(identity.name ? { name: identity.name } : {}),
+            ...(roles ? { roles } : {}),
+            ...(extraData ?? {}),
+            authProvider: providerId,
+            externalSubject: identity.sub,
+            authSource: "external",
+            lastLoginAt: new Date().toISOString(),
+        };
+    }
+    async findUserByExternalIdentity(db, collection, providerId, externalSubject) {
+        const result = await db.find({
+            collection,
+            where: {
+                authProvider: providerId,
+                externalSubject,
+            },
+            limit: 1,
+        });
+        return result.docs[0] ?? null;
+    }
+    getSiteId(c) {
+        return c.req.header("X-Site-Id") || c.get("siteId");
+    }
+    async getRequestConfig(c) {
+        const siteId = this.getSiteId(c);
+        if (!siteId || !this.config.onSchemaFetch)
+            return this.config;
+        return mergeDynamicConfig(this.config, await this.config.onSchemaFetch(siteId));
+    }
+    async buildOidcStartUrl(provider, returnTo, siteId, origin) {
+        const discovery = await this.getOidcDiscovery(provider);
+        const nonce = randomBytes(16).toString("hex");
+        const state = await this.signState({
+            providerId: provider.id,
+            returnTo,
+            siteId,
+            nonce,
+        });
+        const url = new URL(provider.authorizationEndpoint || discovery.authorization_endpoint);
+        url.searchParams.set("response_type", "code");
+        url.searchParams.set("client_id", provider.clientId);
+        url.searchParams.set("redirect_uri", provider.redirectUri || this.defaultCallbackPath(provider.id, origin));
+        url.searchParams.set("scope", (provider.scopes ?? ["openid", "profile", "email"]).join(" "));
+        url.searchParams.set("state", state);
+        url.searchParams.set("nonce", nonce);
+        return url.toString();
+    }
+    async resolveOidcIdentity(provider, c) {
+        const code = c.req.query("code");
+        const state = c.req.query("state");
+        if (!code || !state)
+            throw new Error("Missing OIDC callback parameters.");
+        const parsedState = await this.verifyState(state, provider.id);
+        const discovery = await this.getOidcDiscovery(provider);
+        const redirectUri = provider.redirectUri ||
+            this.defaultCallbackPath(provider.id, new URL(c.req.url).origin);
+        const tokenResponse = await fetch(provider.tokenEndpoint || discovery.token_endpoint, {
+            method: "POST",
+            headers: { "Content-Type": "application/x-www-form-urlencoded" },
+            body: new URLSearchParams({
+                grant_type: "authorization_code",
+                code,
+                redirect_uri: redirectUri,
+                client_id: provider.clientId,
+                client_secret: provider.clientSecret,
+            }),
+        });
+        if (!tokenResponse.ok) {
+            throw new Error("OIDC token exchange failed.");
+        }
+        const tokenBody = await tokenResponse.json();
+        const idToken = tokenBody.id_token;
+        let claims;
+        if (idToken) {
+            const jwks = createRemoteJWKSet(new URL(discovery.jwks_uri));
+            const { payload } = await jwtVerify(idToken, jwks, {
+                issuer: provider.issuer,
+                audience: provider.clientId,
+            });
+            if (parsedState.nonce && payload.nonce !== parsedState.nonce) {
+                throw new Error("OIDC nonce verification failed.");
+            }
+            claims = payload;
+        }
+        else if (tokenBody.access_token &&
+            (provider.userInfoEndpoint || discovery.userinfo_endpoint)) {
+            const userInfo = await fetch(provider.userInfoEndpoint || discovery.userinfo_endpoint, {
+                headers: { Authorization: `Bearer ${tokenBody.access_token}` },
+            });
+            if (!userInfo.ok)
+                throw new Error("OIDC userinfo request failed.");
+            claims = await userInfo.json();
+        }
+        else {
+            throw new Error("OIDC provider did not return usable identity claims.");
+        }
+        return {
+            identity: this.mapClaims(claims, provider.claimMapping),
+            returnTo: parsedState.returnTo,
+        };
+    }
+    async resolveCustomIdentity(provider, c) {
+        const body = c.req.method === "POST" ? await c.req.json().catch(() => ({})) : {};
+        const tokenParam = provider.tokenParam || "token";
+        const token = body?.[tokenParam] || c.req.query(tokenParam);
+        if (!token) {
+            throw new Error(`Missing ${tokenParam} for external auth exchange.`);
+        }
+        let claims;
+        if (provider.secret) {
+            const secret = new TextEncoder().encode(provider.secret);
+            const verified = await jwtVerify(token, secret, {
+                issuer: provider.issuer,
+                audience: provider.audience,
+            });
+            claims = verified.payload;
+        }
+        else if (provider.jwksUri) {
+            const jwks = createRemoteJWKSet(new URL(provider.jwksUri));
+            const verified = await jwtVerify(token, jwks, {
+                issuer: provider.issuer,
+                audience: provider.audience,
+            });
+            claims = verified.payload;
+        }
+        else {
+            claims = decodeJwt(token);
+            if (provider.issuer && claims.iss !== provider.issuer) {
+                throw new Error("External auth issuer mismatch.");
+            }
+            if (provider.audience) {
+                const aud = claims.aud;
+                const matches = Array.isArray(aud)
+                    ? aud.includes(provider.audience)
+                    : aud === provider.audience;
+                if (!matches)
+                    throw new Error("External auth audience mismatch.");
+            }
+        }
+        return {
+            identity: this.mapClaims(claims, provider.claimMapping),
+            returnTo: this.normalizeReturnTo(body?.returnTo || c.req.query("returnTo"), c),
+        };
+    }
+    mapClaims(claims, mapping) {
+        const subKey = mapping?.sub || "sub";
+        const emailKey = mapping?.email || "email";
+        const nameKey = mapping?.name || "name";
+        const rolesKey = mapping?.roles;
+        const groupsKey = mapping?.groups;
+        const siteIdsKey = mapping?.siteIds;
+        const workspaceIdsKey = mapping?.workspaceIds;
+        const sub = claims[subKey];
+        if (typeof sub !== "string" || !sub) {
+            throw new Error("External identity is missing a subject.");
+        }
+        return {
+            sub,
+            email: this.readStringClaim(claims[emailKey]),
+            name: this.readStringClaim(claims[nameKey]),
+            roles: this.readStringArrayClaim(rolesKey ? claims[rolesKey] : undefined),
+            groups: this.readStringArrayClaim(groupsKey ? claims[groupsKey] : undefined),
+            siteIds: this.readStringArrayClaim(siteIdsKey ? claims[siteIdsKey] : undefined),
+            workspaceIds: this.readStringArrayClaim(workspaceIdsKey ? claims[workspaceIdsKey] : undefined),
+            rawClaims: claims,
+        };
+    }
+    readStringClaim(value) {
+        return typeof value === "string" ? value : undefined;
+    }
+    readStringArrayClaim(value) {
+        if (!value)
+            return undefined;
+        if (Array.isArray(value)) {
+            return value.filter((entry) => typeof entry === "string");
+        }
+        if (typeof value === "string")
+            return [value];
+        return undefined;
+    }
+    async getOidcDiscovery(provider) {
+        const discoveryUrl = new URL(provider.issuer.replace(/\/$/, "") + "/.well-known/openid-configuration");
+        const response = await fetch(discoveryUrl.toString());
+        if (!response.ok)
+            throw new Error("Failed to load OIDC discovery document.");
+        return response.json();
+    }
+    defaultCallbackPath(providerId, origin = "") {
+        return `${origin}/api/admin/auth/${providerId}/callback`;
+    }
+    buildCustomProviderStartUrl(startUrl, origin) {
+        const value = startUrl.trim();
+        if (!value || /^(undefined|null)(\/|$)/i.test(value))
+            return null;
+        try {
+            const url = new URL(value, origin);
+            if (url.protocol !== "http:" && url.protocol !== "https:")
+                return null;
+            return url;
+        }
+        catch {
+            return null;
+        }
+    }
+    async signState(payload) {
+        return new SignJWT(payload)
+            .setProtectedHeader({ alg: "HS256" })
+            .setIssuedAt()
+            .setExpirationTime("15m")
+            .sign(this.getStateSecret());
+    }
+    async verifyState(token, providerId) {
+        const { payload } = await jwtVerify(token, this.getStateSecret());
+        const state = payload;
+        if (state.providerId !== providerId) {
+            throw new Error("OIDC state verification failed.");
+        }
+        return state;
+    }
+    getStateSecret() {
+        const secret = process.env.DYRECTED_JWT_SECRET;
+        if (!secret) {
+            throw new Error("[dyrected/core] DYRECTED_JWT_SECRET is not set.");
+        }
+        return new TextEncoder().encode(secret);
+    }
+    normalizeReturnTo(returnTo, c) {
+        if (returnTo)
+            return returnTo;
+        const url = new URL(c.req.url);
+        return `${url.origin}/admin`;
+    }
+}
+//# sourceMappingURL=admin-auth.controller.js.map

package/dist/controllers/admin-auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-auth.controller.js","sourceRoot":"","sources":["../../src/controllers/admin-auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EACL,OAAO,EACP,kBAAkB,EAClB,SAAS,EACT,SAAS,GAEV,MAAM,MAAM,CAAC;AAEd,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACtG,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAQnD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AASlE,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,SAAS,CAAC,CAA2B;QACzC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC,IAAI,CACX,wBAAwB,CACtB,aAAa,CAAC,SAAS,EACvB,aAAa,CAAC,WAAW,CAC1B,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,CAA2B;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpE,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC9C,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAC1B,CAAC;YACF,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,2BAA2B,CAC1C,QAAQ,CAAC,QAAQ,EACjB,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAC1B,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,wBAAwB,QAAQ,CAAC,EAAE,6BAA6B;aAC1E,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,CAA2B;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC9C,aAAa,EACb,QAAQ,EACR,CAAC,CACF,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtE,WAAW,CAAC,YAAY,CAAC,GAAG,CAC1B,yBAAyB,EACzB,QAAQ,CAAC,cAAc,CACxB,CAAC;YACF,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,iCAAiC,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACpE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,CAA2B;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC9C,aAAa,EACb,QAAQ,EACR,CAAC,CACF,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,iCAAiC,CAAC;YACxC,MAAM,MAAM,GAAG,OAAO,KAAK,8BAA8B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACtE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,CAA2B;QACtC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;QACzC,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAC/C,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CACjD,CAAC;QAEF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,EACpD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;gBAC3C,MAAM,EAAE,WAAW,CAAC,GAAG;gBACvB,UAAU,EAAE,WAAW,CAAC,UAAU;aACnC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,YAAY,EAAE,GAAG,EAAE,CAAC;YACtB,MAAM,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,aAAa;aACvB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CACjB,MAAsB,EACtB,EAAU;QAEV,IAAI,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QAC5D,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,aAA6B,EAC7B,QAA2B,EAC3B,CAA2B;QAE3B,MAAM,QAAQ,GACZ,QAAQ,CAAC,IAAI,KAAK,MAAM;YACtB,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,eAAe,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAErD,IAAI,IAAI,GACN,CAAC,MAAM,IAAI,CAAC,0BAA0B,CACpC,EAAE,EACF,eAAe,CAAC,IAAI,EACpB,QAAQ,CAAC,EAAE,EACX,QAAQ,CAAC,GAAG,CACb,CAAC;YACF,CAAC,QAAQ,CAAC,KAAK;gBACb,CAAC,CAAC,CACE,MAAM,EAAE,CAAC,IAAI,CAAC;oBACZ,UAAU,EAAE,eAAe,CAAC,IAAI;oBAChC,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;oBAChC,KAAK,EAAE,CAAC;iBACT,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,CAAC;gBACX,CAAC,CAAC,IAAI,CAAC,CAAC;QAEZ,MAAM,gBAAgB,GACpB,aAAa,CAAC,SAAS,EAAE,gBAAgB;YACzC,gCAAgC,CAAC;QACnC,MAAM,oBAAoB,GACxB,gBAAgB,KAAK,qBAAqB;YAC1C,QAAQ,CAAC,oBAAoB,KAAK,KAAK,CAAC;QAE1C,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CACrC,aAAa,EACb,QAAQ,EACR,QAAQ,CAAC,EAAE,EACX,MAAM,EACN,CAAC,EACD,IAAI,CACL,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC;YAClC,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;gBACrB,UAAU,EAAE,eAAe,CAAC,IAAI;gBAChC,IAAI,EAAE;oBACJ,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAC1B,QAAQ,EACR,QAAQ,CAAC,EAAE,EACX,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,IAAI,CACZ,CAAC;oBACF,QAAQ,EAAE,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;iBAC9D;aACF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;gBACrB,UAAU,EAAE,eAAe,CAAC,IAAI;gBAChC,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,MAAM,IAAI,CAAC,aAAa,CAC5B,QAAQ,EACR,QAAQ,CAAC,EAAE,EACX,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,IAAI,CACZ;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC;YACxC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,eAAe,CAAC,IAAI;YAChC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,UAAU,EAAE,UAAU;YACtB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SACtB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK;YACL,cAAc,EAAE,eAAe,CAAC,IAAI;YACpC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,aAA6B,EAC7B,QAAmC,EACnC,UAAkB,EAClB,MAA0B,EAC1B,CAA2B,EAC3B,IAAS;QAET,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC;YAC9D,QAAQ;YACR,UAAU;YACV,MAAM;YACN,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;YACjC,GAAG,EAAE;gBACH,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;gBACpB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;gBAChB,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;gBACd,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aACzD;YACD,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,QAAmC,EACnC,UAAkB,EAClB,KAAgB,EAChB,SAAmC;QAEnC,OAAO;YACL,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YACpB,YAAY,EAAE,UAAU;YACxB,eAAe,EAAE,QAAQ,CAAC,GAAG;YAC7B,UAAU,EAAE,UAAU;YACtB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACtC,EAAqC,EACrC,UAAkB,EAClB,UAAkB,EAClB,eAAuB;QAEvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,UAAU;YACV,KAAK,EAAE;gBACL,YAAY,EAAE,UAAU;gBACxB,eAAe;aAChB;YACD,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAChC,CAAC;IAEO,SAAS,CAAC,CAA2B;QAC3C,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,CAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAC9D,OAAO,kBAAkB,CACvB,IAAI,CAAC,MAAM,EACX,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CACxC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,QAA+B,EAC/B,QAAgB,EAChB,MAAe,EACf,MAAe;QAEf,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;YACjC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ;YACR,MAAM;YACN,KAAK;SACN,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,QAAQ,CAAC,qBAAqB,IAAI,SAAS,CAAC,sBAAsB,CACnE,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrD,GAAG,CAAC,YAAY,CAAC,GAAG,CAClB,cAAc,EACd,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CACtE,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAClB,OAAO,EACP,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC9D,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,QAA+B,EAC/B,CAA2B;QAE3B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAE1E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,WAAW,GACf,QAAQ,CAAC,WAAW;YACpB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAEnE,MAAM,aAAa,GAAG,MAAM,KAAK,CAC/B,QAAQ,CAAC,aAAa,IAAI,SAAS,CAAC,cAAc,EAClD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,YAAY,EAAE,WAAW;gBACzB,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,aAAa,EAAE,QAAQ,CAAC,YAAY;aACrC,CAAC;SACH,CACF,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,QAA8B,CAAC;QACzD,IAAI,MAA+B,CAAC;QAEpC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;gBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,OAAkC,CAAC;QAC9C,CAAC;aAAM,IACL,SAAS,CAAC,YAAY;YACtB,CAAC,QAAQ,CAAC,gBAAgB,IAAI,SAAS,CAAC,iBAAiB,CAAC,EAC1D,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,QAAQ,CAAC,gBAAgB,IAAI,SAAS,CAAC,iBAAiB,EACxD;gBACE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,SAAS,CAAC,YAAY,EAAE,EAAE;aAC/D,CACF,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnE,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC;YACvD,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,QAAiC,EACjC,CAA2B;QAE3B,MAAM,IAAI,GACR,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC;QAClD,MAAM,KAAK,GACR,IAAI,EAAE,CAAC,UAAU,CAAwB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,8BAA8B,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,MAAkB,CAAC;QACvB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;gBAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;gBACvB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;oBAChC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACjC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC;gBAC9B,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CACtB,MAAiC,EACjC,QAAQ,CAAC,YAAY,CACtB;YACD,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAC7B,IAAI,EAAE,QAA+B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EACjE,CAAC,CACF;SACF,CAAC;IACJ,CAAC;IAEO,SAAS,CACf,MAA+B,EAC/B,OAA+C;QAE/C,MAAM,MAAM,GAAG,OAAO,EAAE,GAAG,IAAI,KAAK,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,CAAC;QAChC,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,EAAE,OAAO,CAAC;QACpC,MAAM,eAAe,GAAG,OAAO,EAAE,YAAY,CAAC;QAE9C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO;YACL,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3C,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzE,MAAM,EAAE,IAAI,CAAC,oBAAoB,CAC/B,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAC1C;YACD,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAChC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAC5C;YACD,YAAY,EAAE,IAAI,CAAC,oBAAoB,CACrC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CACtD;YACD,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAEO,oBAAoB,CAAC,KAAc;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CACtD,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,QAA+B;QAC5D,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,mCAAmC,CACzE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC,IAAI,EAKlB,CAAC;IACL,CAAC;IAEO,mBAAmB,CAAC,UAAkB,EAAE,MAAM,GAAG,EAAE;QACzD,OAAO,GAAG,MAAM,mBAAmB,UAAU,WAAW,CAAC;IAC3D,CAAC;IAEO,2BAA2B,CACjC,QAAgB,EAChB,MAAc;QAEd,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAElE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACvE,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAmD;QACzE,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;aACxB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACpC,WAAW,EAAE;aACb,iBAAiB,CAAC,KAAK,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,UAAkB;QACzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,OAAgC,CAAC;QAC/C,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,cAAc;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAEO,iBAAiB,CACvB,QAA4B,EAC5B,CAA2B;QAE3B,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC;IAC/B,CAAC;CACF"}

package/dist/controllers/audit.controller.d.ts

@@ -0,0 +1,42 @@
+import type { Context } from "hono";
+import type { DyrectedContext } from "../app.js";
+import type { CollectionConfig } from "../types/index.js";
+export declare class AuditController {
+    private parseQuery;
+    private emptyResult;
+    private collectAccessibleDocumentIds;
+    private buildCollectionAuditScope;
+    private getVisibleCollections;
+    findForCollection(c: Context<DyrectedContext>, collection: CollectionConfig): Promise<(Response & import("hono").TypedResponse<{
+        docs: {
+            [x: string]: any;
+        }[];
+        total: number;
+        limit: number;
+        page: number;
+        totalPages: number;
+        hasNextPage: boolean;
+        hasPrevPage: boolean;
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+        message: string;
+    }, 500, "json">) | (Response & import("hono").TypedResponse<{
+        message: string;
+    }, 404, "json">) | (Response & import("hono").TypedResponse<{
+        error: true;
+        message: string;
+    }, 403, "json">)>;
+    findAll(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
+        docs: {
+            [x: string]: any;
+        }[];
+        total: number;
+        limit: number;
+        page: number;
+        totalPages: number;
+        hasNextPage: boolean;
+        hasPrevPage: boolean;
+    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
+        message: string;
+    }, 500, "json">)>;
+}
+//# sourceMappingURL=audit.controller.d.ts.map

package/dist/controllers/audit.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/audit.controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EACV,gBAAgB,EAGjB,MAAM,mBAAmB,CAAC;AAe3B,qBAAa,eAAe;IAC1B,OAAO,CAAC,UAAU;IAyBlB,OAAO,CAAC,WAAW;YAYL,4BAA4B;YAiC5B,yBAAyB;YAuCzB,qBAAqB;IA0B7B,iBAAiB,CACrB,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,EAC3B,UAAU,EAAE,gBAAgB;;;;;;;;;;;;;;;;;;IAiCxB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;CAoC1C"}