@dyrected/core 2.8.3 → 2.10.0

package/dist/controllers/admin-auth.controller.d.ts

@@ -1,71 +0,0 @@
-import type { Context } from "hono";
-import type { DyrectedContext } from "../app.js";
-import type { AdminAuthProvider, DyrectedConfig } from "../types/index.js";
-export declare class AdminAuthController {
-    private readonly config;
-    constructor(config: DyrectedConfig);
-    providers(c: Context<DyrectedContext>): Promise<Response & import("hono").TypedResponse<{
-        mode: "local" | "external";
-        collectionSlug?: string | undefined;
-        provisioningMode?: import("../types/admin-auth.js").AdminAuthProvisioningMode | undefined;
-        providers: {
-            id: string;
-            type: AdminAuthProvider["type"];
-            displayName: string;
-            autoRedirect?: boolean | undefined;
-        }[];
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">>;
-    start(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 404, "json">) | (Response & import("hono").TypedResponse<undefined, 302, "redirect">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 400, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 500, "json">)>;
-    callback(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<undefined, 302, "redirect">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 404, "json">)>;
-    exchange(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 404, "json">) | (Response & import("hono").TypedResponse<{
-        token: string;
-        collectionSlug: string;
-        providerId: string;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 403 | 401, "json">)>;
-    logout(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 401, "json">) | (Response & import("hono").TypedResponse<{
-        success: true;
-        message: string;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">)>;
-    private getProvider;
-    private completeProviderAuth;
-    private resolveAccess;
-    private buildUserData;
-    private findUserByExternalIdentity;
-    private getSiteId;
-    private getRequestConfig;
-    private buildOidcStartUrl;
-    private resolveOidcIdentity;
-    private resolveCustomIdentity;
-    private mapClaims;
-    private readStringClaim;
-    private readStringArrayClaim;
-    private getOidcDiscovery;
-    private defaultCallbackPath;
-    private buildCustomProviderStartUrl;
-    private signState;
-    private verifyState;
-    private getStateSecret;
-    private normalizeReturnTo;
-}
-//# sourceMappingURL=admin-auth.controller.d.ts.map

package/dist/controllers/admin-auth.controller.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/admin-auth.controller.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAQpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAGjD,OAAO,KAAK,EACV,iBAAiB,EAGjB,cAAc,EAEf,MAAM,mBAAmB,CAAC;AAc3B,qBAAa,mBAAmB;IAClB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,cAAc;IAE7C,SAAS,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;IAUrC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;IAiDjC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;IAmCpC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;IA+BpC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;IA8CxC,OAAO,CAAC,WAAW;YAQL,oBAAoB;YA6GpB,aAAa;YA0Bb,aAAa;YAkBb,0BAA0B;IAiBxC,OAAO,CAAC,SAAS;YAIH,gBAAgB;YAWhB,iBAAiB;YAgCjB,mBAAmB;YAqEnB,qBAAqB;IAsDnC,OAAO,CAAC,SAAS;IAmCjB,OAAO,CAAC,eAAe;IAIvB,OAAO,CAAC,oBAAoB;YAWd,gBAAgB;IAe9B,OAAO,CAAC,mBAAmB;IAI3B,OAAO,CAAC,2BAA2B;YAgBrB,SAAS;YAQT,WAAW;IASzB,OAAO,CAAC,cAAc;IAQtB,OAAO,CAAC,iBAAiB;CAQ1B"}

package/dist/controllers/admin-auth.controller.js

@@ -1,450 +0,0 @@
-import { randomBytes } from "node:crypto";
-import { TextEncoder } from "node:util";
-import { SignJWT, createRemoteJWKSet, jwtVerify, decodeJwt, } from "jose";
-import { issueAuthSessionToken, revokeAllAuthSessions, revokeAuthSession } from "../auth/sessions.js";
-import { hashPassword } from "../auth/password.js";
-import { getAdminAuthCollection, getPublicAdminAuthConfig, } from "../utils/admin-auth.js";
-import { mergeDynamicConfig } from "../utils/block-references.js";
-export class AdminAuthController {
-    config;
-    constructor(config) {
-        this.config = config;
-    }
-    async providers(c) {
-        const requestConfig = await this.getRequestConfig(c);
-        return c.json(getPublicAdminAuthConfig(requestConfig.adminAuth, requestConfig.collections));
-    }
-    async start(c) {
-        const requestConfig = await this.getRequestConfig(c);
-        const provider = this.getProvider(requestConfig, c.req.param("provider"));
-        if (!provider) {
-            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
-        }
-        const siteId = this.getSiteId(c);
-        const returnTo = this.normalizeReturnTo(c.req.query("returnTo"), c);
-        if (provider.type === "oidc") {
-            const redirectUrl = await this.buildOidcStartUrl(provider, returnTo, siteId, new URL(c.req.url).origin);
-            return c.redirect(redirectUrl, 302);
-        }
-        if (!provider.startUrl) {
-            return c.json({ error: true, message: "This provider does not expose a start URL." }, 400);
-        }
-        const url = this.buildCustomProviderStartUrl(provider.startUrl, new URL(c.req.url).origin);
-        if (!url) {
-            return c.json({
-                error: true,
-                message: `Admin auth provider "${provider.id}" has an invalid start URL.`,
-            }, 500);
-        }
-        url.searchParams.set("returnTo", returnTo);
-        if (siteId)
-            url.searchParams.set("siteId", siteId);
-        url.searchParams.set("provider", provider.id);
-        return c.redirect(url.toString(), 302);
-    }
-    async callback(c) {
-        const requestConfig = await this.getRequestConfig(c);
-        const provider = this.getProvider(requestConfig, c.req.param("provider"));
-        if (!provider) {
-            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
-        }
-        try {
-            const exchange = await this.completeProviderAuth(requestConfig, provider, c);
-            const redirectUrl = new URL(exchange.returnTo);
-            redirectUrl.searchParams.set("dyrectedExternalToken", exchange.token);
-            redirectUrl.searchParams.set("dyrectedAdminCollection", exchange.collectionSlug);
-            return c.redirect(redirectUrl.toString(), 302);
-        }
-        catch (error) {
-            const message = error instanceof Error
-                ? error.message
-                : "External authentication failed.";
-            const fallback = this.normalizeReturnTo(c.req.query("returnTo"), c);
-            const redirectUrl = new URL(fallback);
-            redirectUrl.searchParams.set("dyrectedExternalError", message);
-            return c.redirect(redirectUrl.toString(), 302);
-        }
-    }
-    async exchange(c) {
-        const requestConfig = await this.getRequestConfig(c);
-        const provider = this.getProvider(requestConfig, c.req.param("provider"));
-        if (!provider) {
-            return c.json({ error: true, message: "Admin auth provider not found." }, 404);
-        }
-        try {
-            const exchange = await this.completeProviderAuth(requestConfig, provider, c);
-            return c.json({
-                token: exchange.token,
-                collectionSlug: exchange.collectionSlug,
-                providerId: provider.id,
-            });
-        }
-        catch (error) {
-            const message = error instanceof Error
-                ? error.message
-                : "External authentication failed.";
-            const status = message === "Access denied for this site." ? 403 : 401;
-            return c.json({ error: true, message }, status);
-        }
-    }
-    async logout(c) {
-        const requestUser = c.get("user");
-        const tokenPayload = c.get("authTokenPayload");
-        const allSessions = ["1", "true", "yes"].includes((c.req.query("allSessions") || "").toLowerCase());
-        if (!requestUser) {
-            if (allSessions) {
-                return c.json({ error: true, message: "Authentication required." }, 401);
-            }
-            return c.json({
-                success: true,
-                message: "Logged out. Discard your token.",
-            });
-        }
-        if (allSessions) {
-            await revokeAllAuthSessions(c.get("config"), {
-                userId: requestUser.sub,
-                collection: requestUser.collection,
-            });
-            return c.json({
-                success: true,
-                message: "All sessions have been logged out.",
-            });
-        }
-        if (tokenPayload?.sid) {
-            await revokeAuthSession(c.get("config"), tokenPayload.sid);
-            return c.json({
-                success: true,
-                message: "Logged out.",
-            });
-        }
-        return c.json({
-            success: true,
-            message: "Logged out. Discard your token.",
-        });
-    }
-    getProvider(config, id) {
-        if (config.adminAuth?.mode !== "external")
-            return undefined;
-        return config.adminAuth.providers.find((provider) => provider.id === id);
-    }
-    async completeProviderAuth(requestConfig, provider, c) {
-        const resolved = provider.type === "oidc"
-            ? await this.resolveOidcIdentity(provider, c)
-            : await this.resolveCustomIdentity(provider, c);
-        const identity = resolved.identity;
-        const siteId = this.getSiteId(c);
-        const adminCollection = getAdminAuthCollection(requestConfig);
-        if (!adminCollection?.auth) {
-            throw new Error("Admin auth collection is not configured.");
-        }
-        const db = c.get("config").db;
-        if (!db)
-            throw new Error("Database not configured.");
-        let user = (await this.findUserByExternalIdentity(db, adminCollection.slug, provider.id, identity.sub)) ??
-            (identity.email
-                ? (await db.find({
-                    collection: adminCollection.slug,
-                    where: { email: identity.email },
-                    limit: 1,
-                })).docs[0]
-                : null);
-        const provisioningMode = requestConfig.adminAuth?.provisioningMode ??
-            "jit_plus_membership_management";
-        const allowJitProvisioning = provisioningMode !== "preprovisioned_only" &&
-            provider.allowJitProvisioning !== false;
-        if (!user && !allowJitProvisioning) {
-            throw new Error("This account has not been provisioned for admin access.");
-        }
-        const access = await this.resolveAccess(requestConfig, identity, provider.id, siteId, c, user);
-        if (!access.allowed) {
-            throw new Error("Access denied for this site.");
-        }
-        if (!user && allowJitProvisioning) {
-            user = await db.create({
-                collection: adminCollection.slug,
-                data: {
-                    ...(await this.buildUserData(identity, provider.id, access.roles, access.data)),
-                    password: await hashPassword(randomBytes(32).toString("hex")),
-                },
-            });
-        }
-        else if (user) {
-            user = await db.update({
-                collection: adminCollection.slug,
-                id: user.id,
-                data: await this.buildUserData(identity, provider.id, access.roles, access.data),
-            });
-        }
-        if (!user?.email) {
-            throw new Error("Authenticated admin user is missing an email address.");
-        }
-        const token = await issueAuthSessionToken({
-            config: c.get("config"),
-            userId: user.id,
-            email: user.email,
-            collection: adminCollection.slug,
-            providerId: provider.id,
-            authSource: "external",
-            ip: c.get("clientIp"),
-        });
-        return {
-            token,
-            collectionSlug: adminCollection.slug,
-            returnTo: resolved.returnTo,
-        };
-    }
-    async resolveAccess(requestConfig, identity, providerId, siteId, c, user) {
-        const resolved = await requestConfig.adminAuth?.resolveAccess?.({
-            identity,
-            providerId,
-            siteId,
-            workspaceId: c.get("workspaceId"),
-            req: {
-                method: c.req.method,
-                path: c.req.path,
-                url: c.req.url,
-                headers: Object.fromEntries(c.req.raw.headers.entries()),
-            },
-            user,
-        });
-        if (resolved)
-            return resolved;
-        return { allowed: true, roles: identity.roles, data: {} };
-    }
-    async buildUserData(identity, providerId, roles, extraData) {
-        return {
-            ...(identity.email ? { email: identity.email } : {}),
-            ...(identity.name ? { name: identity.name } : {}),
-            ...(roles ? { roles } : {}),
-            ...(extraData ?? {}),
-            authProvider: providerId,
-            externalSubject: identity.sub,
-            authSource: "external",
-            lastLoginAt: new Date().toISOString(),
-        };
-    }
-    async findUserByExternalIdentity(db, collection, providerId, externalSubject) {
-        const result = await db.find({
-            collection,
-            where: {
-                authProvider: providerId,
-                externalSubject,
-            },
-            limit: 1,
-        });
-        return result.docs[0] ?? null;
-    }
-    getSiteId(c) {
-        return c.req.header("X-Site-Id") || c.get("siteId");
-    }
-    async getRequestConfig(c) {
-        const siteId = this.getSiteId(c);
-        if (!siteId || !this.config.onSchemaFetch)
-            return this.config;
-        return mergeDynamicConfig(this.config, await this.config.onSchemaFetch(siteId));
-    }
-    async buildOidcStartUrl(provider, returnTo, siteId, origin) {
-        const discovery = await this.getOidcDiscovery(provider);
-        const nonce = randomBytes(16).toString("hex");
-        const state = await this.signState({
-            providerId: provider.id,
-            returnTo,
-            siteId,
-            nonce,
-        });
-        const url = new URL(provider.authorizationEndpoint || discovery.authorization_endpoint);
-        url.searchParams.set("response_type", "code");
-        url.searchParams.set("client_id", provider.clientId);
-        url.searchParams.set("redirect_uri", provider.redirectUri || this.defaultCallbackPath(provider.id, origin));
-        url.searchParams.set("scope", (provider.scopes ?? ["openid", "profile", "email"]).join(" "));
-        url.searchParams.set("state", state);
-        url.searchParams.set("nonce", nonce);
-        return url.toString();
-    }
-    async resolveOidcIdentity(provider, c) {
-        const code = c.req.query("code");
-        const state = c.req.query("state");
-        if (!code || !state)
-            throw new Error("Missing OIDC callback parameters.");
-        const parsedState = await this.verifyState(state, provider.id);
-        const discovery = await this.getOidcDiscovery(provider);
-        const redirectUri = provider.redirectUri ||
-            this.defaultCallbackPath(provider.id, new URL(c.req.url).origin);
-        const tokenResponse = await fetch(provider.tokenEndpoint || discovery.token_endpoint, {
-            method: "POST",
-            headers: { "Content-Type": "application/x-www-form-urlencoded" },
-            body: new URLSearchParams({
-                grant_type: "authorization_code",
-                code,
-                redirect_uri: redirectUri,
-                client_id: provider.clientId,
-                client_secret: provider.clientSecret,
-            }),
-        });
-        if (!tokenResponse.ok) {
-            throw new Error("OIDC token exchange failed.");
-        }
-        const tokenBody = await tokenResponse.json();
-        const idToken = tokenBody.id_token;
-        let claims;
-        if (idToken) {
-            const jwks = createRemoteJWKSet(new URL(discovery.jwks_uri));
-            const { payload } = await jwtVerify(idToken, jwks, {
-                issuer: provider.issuer,
-                audience: provider.clientId,
-            });
-            if (parsedState.nonce && payload.nonce !== parsedState.nonce) {
-                throw new Error("OIDC nonce verification failed.");
-            }
-            claims = payload;
-        }
-        else if (tokenBody.access_token &&
-            (provider.userInfoEndpoint || discovery.userinfo_endpoint)) {
-            const userInfo = await fetch(provider.userInfoEndpoint || discovery.userinfo_endpoint, {
-                headers: { Authorization: `Bearer ${tokenBody.access_token}` },
-            });
-            if (!userInfo.ok)
-                throw new Error("OIDC userinfo request failed.");
-            claims = await userInfo.json();
-        }
-        else {
-            throw new Error("OIDC provider did not return usable identity claims.");
-        }
-        return {
-            identity: this.mapClaims(claims, provider.claimMapping),
-            returnTo: parsedState.returnTo,
-        };
-    }
-    async resolveCustomIdentity(provider, c) {
-        const body = c.req.method === "POST" ? await c.req.json().catch(() => ({})) : {};
-        const tokenParam = provider.tokenParam || "token";
-        const token = body?.[tokenParam] || c.req.query(tokenParam);
-        if (!token) {
-            throw new Error(`Missing ${tokenParam} for external auth exchange.`);
-        }
-        let claims;
-        if (provider.secret) {
-            const secret = new TextEncoder().encode(provider.secret);
-            const verified = await jwtVerify(token, secret, {
-                issuer: provider.issuer,
-                audience: provider.audience,
-            });
-            claims = verified.payload;
-        }
-        else if (provider.jwksUri) {
-            const jwks = createRemoteJWKSet(new URL(provider.jwksUri));
-            const verified = await jwtVerify(token, jwks, {
-                issuer: provider.issuer,
-                audience: provider.audience,
-            });
-            claims = verified.payload;
-        }
-        else {
-            claims = decodeJwt(token);
-            if (provider.issuer && claims.iss !== provider.issuer) {
-                throw new Error("External auth issuer mismatch.");
-            }
-            if (provider.audience) {
-                const aud = claims.aud;
-                const matches = Array.isArray(aud)
-                    ? aud.includes(provider.audience)
-                    : aud === provider.audience;
-                if (!matches)
-                    throw new Error("External auth audience mismatch.");
-            }
-        }
-        return {
-            identity: this.mapClaims(claims, provider.claimMapping),
-            returnTo: this.normalizeReturnTo(body?.returnTo || c.req.query("returnTo"), c),
-        };
-    }
-    mapClaims(claims, mapping) {
-        const subKey = mapping?.sub || "sub";
-        const emailKey = mapping?.email || "email";
-        const nameKey = mapping?.name || "name";
-        const rolesKey = mapping?.roles;
-        const groupsKey = mapping?.groups;
-        const siteIdsKey = mapping?.siteIds;
-        const workspaceIdsKey = mapping?.workspaceIds;
-        const sub = claims[subKey];
-        if (typeof sub !== "string" || !sub) {
-            throw new Error("External identity is missing a subject.");
-        }
-        return {
-            sub,
-            email: this.readStringClaim(claims[emailKey]),
-            name: this.readStringClaim(claims[nameKey]),
-            roles: this.readStringArrayClaim(rolesKey ? claims[rolesKey] : undefined),
-            groups: this.readStringArrayClaim(groupsKey ? claims[groupsKey] : undefined),
-            siteIds: this.readStringArrayClaim(siteIdsKey ? claims[siteIdsKey] : undefined),
-            workspaceIds: this.readStringArrayClaim(workspaceIdsKey ? claims[workspaceIdsKey] : undefined),
-            rawClaims: claims,
-        };
-    }
-    readStringClaim(value) {
-        return typeof value === "string" ? value : undefined;
-    }
-    readStringArrayClaim(value) {
-        if (!value)
-            return undefined;
-        if (Array.isArray(value)) {
-            return value.filter((entry) => typeof entry === "string");
-        }
-        if (typeof value === "string")
-            return [value];
-        return undefined;
-    }
-    async getOidcDiscovery(provider) {
-        const discoveryUrl = new URL(provider.issuer.replace(/\/$/, "") + "/.well-known/openid-configuration");
-        const response = await fetch(discoveryUrl.toString());
-        if (!response.ok)
-            throw new Error("Failed to load OIDC discovery document.");
-        return response.json();
-    }
-    defaultCallbackPath(providerId, origin = "") {
-        return `${origin}/api/admin/auth/${providerId}/callback`;
-    }
-    buildCustomProviderStartUrl(startUrl, origin) {
-        const value = startUrl.trim();
-        if (!value || /^(undefined|null)(\/|$)/i.test(value))
-            return null;
-        try {
-            const url = new URL(value, origin);
-            if (url.protocol !== "http:" && url.protocol !== "https:")
-                return null;
-            return url;
-        }
-        catch {
-            return null;
-        }
-    }
-    async signState(payload) {
-        return new SignJWT(payload)
-            .setProtectedHeader({ alg: "HS256" })
-            .setIssuedAt()
-            .setExpirationTime("15m")
-            .sign(this.getStateSecret());
-    }
-    async verifyState(token, providerId) {
-        const { payload } = await jwtVerify(token, this.getStateSecret());
-        const state = payload;
-        if (state.providerId !== providerId) {
-            throw new Error("OIDC state verification failed.");
-        }
-        return state;
-    }
-    getStateSecret() {
-        const secret = process.env.DYRECTED_JWT_SECRET;
-        if (!secret) {
-            throw new Error("[dyrected/core] DYRECTED_JWT_SECRET is not set.");
-        }
-        return new TextEncoder().encode(secret);
-    }
-    normalizeReturnTo(returnTo, c) {
-        if (returnTo)
-            return returnTo;
-        const url = new URL(c.req.url);
-        return `${url.origin}/admin`;
-    }
-}
-//# sourceMappingURL=admin-auth.controller.js.map

package/dist/controllers/admin-auth.controller.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"admin-auth.controller.js","sourceRoot":"","sources":["../../src/controllers/admin-auth.controller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,OAAO,EACL,OAAO,EACP,kBAAkB,EAClB,SAAS,EACT,SAAS,GAEV,MAAM,MAAM,CAAC;AAEd,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACtG,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAQnD,OAAO,EACL,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AASlE,MAAM,OAAO,mBAAmB;IACD;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,KAAK,CAAC,SAAS,CAAC,CAA2B;QACzC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC,IAAI,CACX,wBAAwB,CACtB,aAAa,CAAC,SAAS,EACvB,aAAa,CAAC,WAAW,CAC1B,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,CAA2B;QACrC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpE,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAC9C,QAAQ,EACR,QAAQ,EACR,MAAM,EACN,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAC1B,CAAC;YACF,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QACtC,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACvB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,4CAA4C,EAAE,EACtE,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,2BAA2B,CAC1C,QAAQ,CAAC,QAAQ,EACjB,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAC1B,CAAC;QACF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,CAAC,CAAC,IAAI,CACX;gBACE,KAAK,EAAE,IAAI;gBACX,OAAO,EAAE,wBAAwB,QAAQ,CAAC,EAAE,6BAA6B;aAC1E,EACD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,MAAM;YAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,CAA2B;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC9C,aAAa,EACb,QAAQ,EACR,CAAC,CACF,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC/C,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtE,WAAW,CAAC,YAAY,CAAC,GAAG,CAC1B,yBAAyB,EACzB,QAAQ,CAAC,cAAc,CACxB,CAAC;YACF,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,iCAAiC,CAAC;YACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YACpE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YACtC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,CAAC;YAC/D,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,CAA2B;QACxC,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,gCAAgC,EAAE,EAC1D,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAC9C,aAAa,EACb,QAAQ,EACR,CAAC,CACF,CAAC;YACF,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,cAAc,EAAE,QAAQ,CAAC,cAAc;gBACvC,UAAU,EAAE,QAAQ,CAAC,EAAE;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK;gBACpB,CAAC,CAAC,KAAK,CAAC,OAAO;gBACf,CAAC,CAAC,iCAAiC,CAAC;YACxC,MAAM,MAAM,GAAG,OAAO,KAAK,8BAA8B,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YACtE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,CAA2B;QACtC,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAQ,CAAC;QACzC,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC/C,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAC/C,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CACjD,CAAC;QAEF,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,CAAC,CAAC,IAAI,CACX,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,0BAA0B,EAAE,EACpD,GAAG,CACJ,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,iCAAiC;aAC3C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,qBAAqB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;gBAC3C,MAAM,EAAE,WAAW,CAAC,GAAG;gBACvB,UAAU,EAAE,WAAW,CAAC,UAAU;aACnC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,oCAAoC;aAC9C,CAAC,CAAC;QACL,CAAC;QAED,IAAI,YAAY,EAAE,GAAG,EAAE,CAAC;YACtB,MAAM,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;YAC3D,OAAO,CAAC,CAAC,IAAI,CAAC;gBACZ,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,aAAa;aACvB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,IAAI;YACb,OAAO,EAAE,iCAAiC;SAC3C,CAAC,CAAC;IACL,CAAC;IAEO,WAAW,CACjB,MAAsB,EACtB,EAAU;QAEV,IAAI,MAAM,CAAC,SAAS,EAAE,IAAI,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QAC5D,OAAO,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,aAA6B,EAC7B,QAA2B,EAC3B,CAA2B;QAE3B,MAAM,QAAQ,GACZ,QAAQ,CAAC,IAAI,KAAK,MAAM;YACtB,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC7C,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QAEnC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,eAAe,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAErD,IAAI,IAAI,GACN,CAAC,MAAM,IAAI,CAAC,0BAA0B,CACpC,EAAE,EACF,eAAe,CAAC,IAAI,EACpB,QAAQ,CAAC,EAAE,EACX,QAAQ,CAAC,GAAG,CACb,CAAC;YACF,CAAC,QAAQ,CAAC,KAAK;gBACb,CAAC,CAAC,CACE,MAAM,EAAE,CAAC,IAAI,CAAC;oBACZ,UAAU,EAAE,eAAe,CAAC,IAAI;oBAChC,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE;oBAChC,KAAK,EAAE,CAAC;iBACT,CAAC,CACH,CAAC,IAAI,CAAC,CAAC,CAAC;gBACX,CAAC,CAAC,IAAI,CAAC,CAAC;QAEZ,MAAM,gBAAgB,GACpB,aAAa,CAAC,SAAS,EAAE,gBAAgB;YACzC,gCAAgC,CAAC;QACnC,MAAM,oBAAoB,GACxB,gBAAgB,KAAK,qBAAqB;YAC1C,QAAQ,CAAC,oBAAoB,KAAK,KAAK,CAAC;QAE1C,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,yDAAyD,CAC1D,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CACrC,aAAa,EACb,QAAQ,EACR,QAAQ,CAAC,EAAE,EACX,MAAM,EACN,CAAC,EACD,IAAI,CACL,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC,IAAI,IAAI,oBAAoB,EAAE,CAAC;YAClC,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;gBACrB,UAAU,EAAE,eAAe,CAAC,IAAI;gBAChC,IAAI,EAAE;oBACJ,GAAG,CAAC,MAAM,IAAI,CAAC,aAAa,CAC1B,QAAQ,EACR,QAAQ,CAAC,EAAE,EACX,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,IAAI,CACZ,CAAC;oBACF,QAAQ,EAAE,MAAM,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;iBAC9D;aACF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,EAAE,CAAC;YAChB,IAAI,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC;gBACrB,UAAU,EAAE,eAAe,CAAC,IAAI;gBAChC,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,MAAM,IAAI,CAAC,aAAa,CAC5B,QAAQ,EACR,QAAQ,CAAC,EAAE,EACX,MAAM,CAAC,KAAK,EACZ,MAAM,CAAC,IAAI,CACZ;aACF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC;YACxC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;YACvB,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,eAAe,CAAC,IAAI;YAChC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,UAAU,EAAE,UAAU;YACtB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC;SACtB,CAAC,CAAC;QAEH,OAAO;YACL,KAAK;YACL,cAAc,EAAE,eAAe,CAAC,IAAI;YACpC,QAAQ,EAAE,QAAQ,CAAC,QAAQ;SAC5B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,aAA6B,EAC7B,QAAmC,EACnC,UAAkB,EAClB,MAA0B,EAC1B,CAA2B,EAC3B,IAAS;QAET,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,SAAS,EAAE,aAAa,EAAE,CAAC;YAC9D,QAAQ;YACR,UAAU;YACV,MAAM;YACN,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;YACjC,GAAG,EAAE;gBACH,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM;gBACpB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI;gBAChB,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG;gBACd,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;aACzD;YACD,IAAI;SACL,CAAC,CAAC;QAEH,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IAC5D,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,QAAmC,EACnC,UAAkB,EAClB,KAAgB,EAChB,SAAmC;QAEnC,OAAO;YACL,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YACpB,YAAY,EAAE,UAAU;YACxB,eAAe,EAAE,QAAQ,CAAC,GAAG;YAC7B,UAAU,EAAE,UAAU;YACtB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,0BAA0B,CACtC,EAAqC,EACrC,UAAkB,EAClB,UAAkB,EAClB,eAAuB;QAEvB,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC;YAC3B,UAAU;YACV,KAAK,EAAE;gBACL,YAAY,EAAE,UAAU;gBACxB,eAAe;aAChB;YACD,KAAK,EAAE,CAAC;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAChC,CAAC;IAEO,SAAS,CAAC,CAA2B;QAC3C,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,CAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAC9D,OAAO,kBAAkB,CACvB,IAAI,CAAC,MAAM,EACX,MAAM,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CACxC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,QAA+B,EAC/B,QAAgB,EAChB,MAAe,EACf,MAAe;QAEf,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;YACjC,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,QAAQ;YACR,MAAM;YACN,KAAK;SACN,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,QAAQ,CAAC,qBAAqB,IAAI,SAAS,CAAC,sBAAsB,CACnE,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrD,GAAG,CAAC,YAAY,CAAC,GAAG,CAClB,cAAc,EACd,QAAQ,CAAC,WAAW,IAAI,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CACtE,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAClB,OAAO,EACP,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAC9D,CAAC;QACF,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAC/B,QAA+B,EAC/B,CAA2B;QAE3B,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QAE1E,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,WAAW,GACf,QAAQ,CAAC,WAAW;YACpB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;QAEnE,MAAM,aAAa,GAAG,MAAM,KAAK,CAC/B,QAAQ,CAAC,aAAa,IAAI,SAAS,CAAC,cAAc,EAClD;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,YAAY,EAAE,WAAW;gBACzB,SAAS,EAAE,QAAQ,CAAC,QAAQ;gBAC5B,aAAa,EAAE,QAAQ,CAAC,YAAY;aACrC,CAAC;SACH,CACF,CAAC;QAEF,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,SAAS,CAAC,QAA8B,CAAC;QACzD,IAAI,MAA+B,CAAC;QAEpC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC7D,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE;gBACjD,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,IAAI,WAAW,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,KAAK,WAAW,CAAC,KAAK,EAAE,CAAC;gBAC7D,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,GAAG,OAAkC,CAAC;QAC9C,CAAC;aAAM,IACL,SAAS,CAAC,YAAY;YACtB,CAAC,QAAQ,CAAC,gBAAgB,IAAI,SAAS,CAAC,iBAAiB,CAAC,EAC1D,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,QAAQ,CAAC,gBAAgB,IAAI,SAAS,CAAC,iBAAiB,EACxD;gBACE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,SAAS,CAAC,YAAY,EAAE,EAAE;aAC/D,CACF,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;YACnE,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC;YACvD,QAAQ,EAAE,WAAW,CAAC,QAAQ;SAC/B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,qBAAqB,CACjC,QAAiC,EACjC,CAA2B;QAE3B,MAAM,IAAI,GACR,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,IAAI,OAAO,CAAC;QAClD,MAAM,KAAK,GACR,IAAI,EAAE,CAAC,UAAU,CAAwB,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,WAAW,UAAU,8BAA8B,CAAC,CAAC;QACvE,CAAC;QAED,IAAI,MAAkB,CAAC;QACvB,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YACzD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE;gBAC9C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;gBAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;aAC5B,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC;QAC5B,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;YAC1B,IAAI,QAAQ,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACtD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;gBACvB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;oBAChC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACjC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC;gBAC9B,IAAI,CAAC,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,SAAS,CACtB,MAAiC,EACjC,QAAQ,CAAC,YAAY,CACtB;YACD,QAAQ,EAAE,IAAI,CAAC,iBAAiB,CAC7B,IAAI,EAAE,QAA+B,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,EACjE,CAAC,CACF;SACF,CAAC;IACJ,CAAC;IAEO,SAAS,CACf,MAA+B,EAC/B,OAA+C;QAE/C,MAAM,MAAM,GAAG,OAAO,EAAE,GAAG,IAAI,KAAK,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,IAAI,OAAO,CAAC;QAC3C,MAAM,OAAO,GAAG,OAAO,EAAE,IAAI,IAAI,MAAM,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,EAAE,KAAK,CAAC;QAChC,MAAM,SAAS,GAAG,OAAO,EAAE,MAAM,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,EAAE,OAAO,CAAC;QACpC,MAAM,eAAe,GAAG,OAAO,EAAE,YAAY,CAAC;QAE9C,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO;YACL,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7C,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC3C,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzE,MAAM,EAAE,IAAI,CAAC,oBAAoB,CAC/B,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAC1C;YACD,OAAO,EAAE,IAAI,CAAC,oBAAoB,CAChC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAC5C;YACD,YAAY,EAAE,IAAI,CAAC,oBAAoB,CACrC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CACtD;YACD,SAAS,EAAE,MAAM;SAClB,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACvD,CAAC;IAEO,oBAAoB,CAAC,KAAc;QACzC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CACtD,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,QAA+B;QAC5D,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,mCAAmC,CACzE,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,CAAC,EAAE;YACd,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,OAAO,QAAQ,CAAC,IAAI,EAKlB,CAAC;IACL,CAAC;IAEO,mBAAmB,CAAC,UAAkB,EAAE,MAAM,GAAG,EAAE;QACzD,OAAO,GAAG,MAAM,mBAAmB,UAAU,WAAW,CAAC;IAC3D,CAAC;IAEO,2BAA2B,CACjC,QAAgB,EAChB,MAAc;QAEd,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,IAAI,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAElE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YACnC,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACvE,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,OAAmD;QACzE,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC;aACxB,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;aACpC,WAAW,EAAE;aACb,iBAAiB,CAAC,KAAK,CAAC;aACxB,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,UAAkB;QACzD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,OAAgC,CAAC;QAC/C,IAAI,KAAK,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,cAAc;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;QAC/C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAEO,iBAAiB,CACvB,QAA4B,EAC5B,CAA2B;QAE3B,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC;IAC/B,CAAC;CACF"}

package/dist/controllers/audit.controller.d.ts

@@ -1,42 +0,0 @@
-import type { Context } from "hono";
-import type { DyrectedContext } from "../app.js";
-import type { CollectionConfig } from "../types/index.js";
-export declare class AuditController {
-    private parseQuery;
-    private emptyResult;
-    private collectAccessibleDocumentIds;
-    private buildCollectionAuditScope;
-    private getVisibleCollections;
-    findForCollection(c: Context<DyrectedContext>, collection: CollectionConfig): Promise<(Response & import("hono").TypedResponse<{
-        docs: {
-            [x: string]: any;
-        }[];
-        total: number;
-        limit: number;
-        page: number;
-        totalPages: number;
-        hasNextPage: boolean;
-        hasPrevPage: boolean;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
-        message: string;
-    }, 500, "json">) | (Response & import("hono").TypedResponse<{
-        message: string;
-    }, 404, "json">) | (Response & import("hono").TypedResponse<{
-        error: true;
-        message: string;
-    }, 403, "json">)>;
-    findAll(c: Context<DyrectedContext>): Promise<(Response & import("hono").TypedResponse<{
-        docs: {
-            [x: string]: any;
-        }[];
-        total: number;
-        limit: number;
-        page: number;
-        totalPages: number;
-        hasNextPage: boolean;
-        hasPrevPage: boolean;
-    }, import("hono/utils/http-status").ContentfulStatusCode, "json">) | (Response & import("hono").TypedResponse<{
-        message: string;
-    }, 500, "json">)>;
-}
-//# sourceMappingURL=audit.controller.d.ts.map

package/dist/controllers/audit.controller.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audit.controller.d.ts","sourceRoot":"","sources":["../../src/controllers/audit.controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EACV,gBAAgB,EAGjB,MAAM,mBAAmB,CAAC;AAe3B,qBAAa,eAAe;IAC1B,OAAO,CAAC,UAAU;IAyBlB,OAAO,CAAC,WAAW;YAYL,4BAA4B;YAiC5B,yBAAyB;YAuCzB,qBAAqB;IA0B7B,iBAAiB,CACrB,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,EAC3B,UAAU,EAAE,gBAAgB;;;;;;;;;;;;;;;;;;IAiCxB,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;;;;;;;;;;;;;CAoC1C"}