@engjts/nexus 0.1.0

package/dist/security/adapter.d.ts

@@ -0,0 +1,144 @@
+/**
+ * Security Adapter Interfaces
+ *
+ * Extensible adapter system for security components
+ */
+import type { Context } from '../core/types';
+import type { User, SecurityHeadersConfig, SanitizationConfig, RateLimitInfo, PermissionCheckResult } from './types';
+/**
+ * Security headers adapter interface
+ * Allows custom security headers implementation
+ */
+export interface SecurityHeadersAdapter {
+    /**
+     * Generate security headers for response
+     */
+    generateHeaders(ctx: Context, config: SecurityHeadersConfig): Record<string, string>;
+    /**
+     * Generate CSP nonce if needed
+     */
+    generateNonce?(): string;
+}
+/**
+ * Input sanitization adapter interface
+ * Allows custom sanitization logic
+ */
+export interface SanitizationAdapter {
+    /**
+     * Sanitize input value
+     * @returns Sanitized value or throws if in strict mode
+     */
+    sanitize(value: any, config: SanitizationConfig): any;
+    /**
+     * Check if value contains malicious patterns
+     */
+    isMalicious(value: any, config: SanitizationConfig): boolean;
+}
+/**
+ * Base authentication adapter interface
+ */
+export interface AuthAdapter<TConfig = any> {
+    /**
+     * Verify credentials and return user
+     * @returns User object if valid, null otherwise
+     */
+    verify(ctx: Context, config: TConfig): Promise<User | null>;
+    /**
+     * Generate authentication token/session
+     */
+    generateToken?(user: User, config: TConfig): Promise<string>;
+    /**
+     * Refresh authentication token
+     */
+    refreshToken?(token: string, config: TConfig): Promise<string | null>;
+}
+/**
+ * Rate limiting storage adapter interface
+ */
+export interface RateLimitAdapter {
+    /**
+     * Increment request count for key
+     * @returns Current count and reset time
+     */
+    increment(key: string, windowMs: number): Promise<{
+        count: number;
+        resetTime: number;
+    }>;
+    /**
+     * Get current rate limit info for key
+     */
+    get(key: string): Promise<RateLimitInfo | null>;
+    /**
+     * Reset rate limit for key
+     */
+    reset(key: string): Promise<void>;
+    /**
+     * Clean up expired entries
+     */
+    cleanup?(): Promise<void>;
+}
+/**
+ * CSRF token adapter interface
+ */
+export interface CSRFAdapter {
+    /**
+     * Generate CSRF token
+     */
+    generateToken(ctx: Context): string;
+    /**
+     * Validate CSRF token
+     */
+    validateToken(ctx: Context, token: string): boolean;
+    /**
+     * Extract token from request
+     */
+    extractToken(ctx: Context): string | null;
+}
+/**
+ * Permission checker adapter interface
+ * Allows custom RBAC logic
+ */
+export interface PermissionAdapter {
+    /**
+     * Check if user has required permissions
+     */
+    checkPermissions(user: User, required: string[]): PermissionCheckResult;
+    /**
+     * Check if user has required roles
+     */
+    checkRoles(user: User, required: string[]): boolean;
+    /**
+     * Expand role to permissions
+     */
+    expandRole?(role: string): string[] | undefined;
+}
+/**
+ * Default security headers adapter
+ */
+export declare class DefaultSecurityHeadersAdapter implements SecurityHeadersAdapter {
+    generateHeaders(_ctx: Context, config: SecurityHeadersConfig): Record<string, string>;
+    generateNonce?(): string;
+}
+/**
+ * Default input sanitization adapter
+ */
+export declare class DefaultSanitizationAdapter implements SanitizationAdapter {
+    private readonly defaultPatterns;
+    sanitize(value: any, config: SanitizationConfig): any;
+    private sanitizeString;
+    isMalicious(value: any, config: SanitizationConfig): boolean;
+}
+/**
+ * Default permission checker adapter
+ */
+export declare class DefaultPermissionAdapter implements PermissionAdapter {
+    private roleHierarchy;
+    checkPermissions(user: User, required: string[]): PermissionCheckResult;
+    checkRoles(user: User, required: string[]): boolean;
+    expandRole?(role: string): string[] | undefined;
+    /**
+     * Define role permissions
+     */
+    defineRole(role: string, permissions: string[]): void;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/security/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/security/adapter.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,KAAK,EACR,IAAI,EACJ,qBAAqB,EACrB,kBAAkB,EAClB,aAAa,EACb,qBAAqB,EACxB,MAAM,SAAS,CAAC;AAEjB;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACnC;;OAEG;IACH,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAErF;;OAEG;IACH,aAAa,CAAC,IAAI,MAAM,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAChC;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,GAAG,GAAG,CAAC;IAEtD;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC;CAChE;AAED;;GAEG;AACH,MAAM,WAAW,WAAW,CAAC,OAAO,GAAG,GAAG;IACtC;;;OAGG;IACH,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;IAE5D;;OAEG;IACH,aAAa,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7D;;OAEG;IACH,YAAY,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CACzE;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;;OAGG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;QAC9C,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACrB,CAAC,CAAC;IAEH;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAEhD;;OAEG;IACH,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElC;;OAEG;IACH,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7B;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IACxB;;OAEG;IACH,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC;IAEpC;;OAEG;IACH,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAEpD;;OAEG;IACH,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAC9B;;OAEG;IACH,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC;IAExE;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAEpD;;OAEG;IACH,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC;CACnD;AAED;;GAEG;AACH,qBAAa,6BAA8B,YAAW,sBAAsB;IACxE,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IA2CrF,aAAa,CAAC,IAAI,MAAM;CAG3B;AAED;;GAEG;AACH,qBAAa,0BAA2B,YAAW,mBAAmB;IAClE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAK9B;IAEF,QAAQ,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,GAAG,GAAG;IAwBrD,OAAO,CAAC,cAAc;IAiBtB,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO;CAU/D;AAED;;GAEG;AACH,qBAAa,wBAAyB,YAAW,iBAAiB;IAC9D,OAAO,CAAC,aAAa,CAAoC;IAEzD,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,qBAAqB;IAsCvE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO;IAQnD,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS;IAI/C;;OAEG;IACH,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,IAAI;CAGxD"}

package/dist/security/adapter.js

@@ -0,0 +1,159 @@
+"use strict";
+/**
+ * Security Adapter Interfaces
+ *
+ * Extensible adapter system for security components
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DefaultPermissionAdapter = exports.DefaultSanitizationAdapter = exports.DefaultSecurityHeadersAdapter = void 0;
+/**
+ * Default security headers adapter
+ */
+class DefaultSecurityHeadersAdapter {
+    generateHeaders(_ctx, config) {
+        const mode = config.mode || 'moderate';
+        const headers = {};
+        // Base headers
+        headers['X-Content-Type-Options'] = 'nosniff';
+        headers['X-Frame-Options'] = mode === 'strict' ? 'DENY' : 'SAMEORIGIN';
+        headers['X-XSS-Protection'] = '1; mode=block';
+        if (mode === 'strict' || mode === 'moderate') {
+            headers['Strict-Transport-Security'] = 'max-age=31536000; includeSubDomains';
+            headers['Referrer-Policy'] = 'no-referrer';
+        }
+        // CSP
+        if (config.csp) {
+            let cspValue = '';
+            const directives = config.csp.directives || {
+                'default-src': ["'self'"]
+            };
+            for (const [directive, values] of Object.entries(directives)) {
+                cspValue += `${directive} ${values.join(' ')}; `;
+            }
+            if (config.csp.reportUri) {
+                cspValue += `report-uri ${config.csp.reportUri}; `;
+            }
+            const headerName = config.csp.reportOnly
+                ? 'Content-Security-Policy-Report-Only'
+                : 'Content-Security-Policy';
+            headers[headerName] = cspValue.trim();
+        }
+        // Custom headers override
+        if (config.customHeaders) {
+            Object.assign(headers, config.customHeaders);
+        }
+        return headers;
+    }
+    generateNonce() {
+        return crypto.randomUUID().replace(/-/g, '');
+    }
+}
+exports.DefaultSecurityHeadersAdapter = DefaultSecurityHeadersAdapter;
+/**
+ * Default input sanitization adapter
+ */
+class DefaultSanitizationAdapter {
+    defaultPatterns = {
+        sql: /((\bUNION\b)|(\bSELECT\b)|(\bINSERT\b)|(\bUPDATE\b)|(\bDELETE\b)|(\bDROP\b)|(\bCREATE\b)|(\bALTER\b))/gi,
+        xss: /(<script|javascript:|onerror=|onload=|<iframe|<object|<embed)/gi,
+        pathTraversal: /(\.\.[\/\\])/g,
+        noSqlInjection: /(\$where|\$ne|\$gt|\$lt|\$regex)/gi
+    };
+    sanitize(value, config) {
+        if (value === null || value === undefined) {
+            return value;
+        }
+        if (typeof value === 'string') {
+            return this.sanitizeString(value, config);
+        }
+        if (Array.isArray(value)) {
+            return value.map(item => this.sanitize(item, config));
+        }
+        if (typeof value === 'object') {
+            const sanitized = {};
+            for (const [key, val] of Object.entries(value)) {
+                sanitized[key] = this.sanitize(val, config);
+            }
+            return sanitized;
+        }
+        return value;
+    }
+    sanitizeString(value, config) {
+        const patterns = config.patterns || [];
+        const allPatterns = [...Object.values(this.defaultPatterns), ...patterns.map(p => p.pattern)];
+        for (const pattern of allPatterns) {
+            if (pattern.test(value)) {
+                if (config.strict) {
+                    throw new Error('Malicious input detected');
+                }
+                // Remove malicious content
+                value = value.replace(pattern, '');
+            }
+        }
+        return value;
+    }
+    isMalicious(value, config) {
+        if (typeof value !== 'string') {
+            return false;
+        }
+        const patterns = config.patterns || [];
+        const allPatterns = [...Object.values(this.defaultPatterns), ...patterns.map(p => p.pattern)];
+        return allPatterns.some(pattern => pattern.test(value));
+    }
+}
+exports.DefaultSanitizationAdapter = DefaultSanitizationAdapter;
+/**
+ * Default permission checker adapter
+ */
+class DefaultPermissionAdapter {
+    roleHierarchy = new Map();
+    checkPermissions(user, required) {
+        const userPermissions = new Set(user.permissions || []);
+        // Check for wildcard permission
+        if (userPermissions.has('*')) {
+            return { allowed: true };
+        }
+        // Expand roles to permissions
+        if (user.roles) {
+            for (const role of user.roles) {
+                const rolePerms = this.expandRole?.(role);
+                if (rolePerms) {
+                    rolePerms.forEach(p => userPermissions.add(p));
+                }
+            }
+        }
+        // Check required permissions
+        const missing = required.filter(perm => {
+            // Check for wildcard match (e.g., 'read:*' matches 'read:users')
+            const hasWildcard = Array.from(userPermissions).some(userPerm => {
+                if (userPerm.endsWith('*')) {
+                    const prefix = userPerm.slice(0, -1);
+                    return perm.startsWith(prefix);
+                }
+                return userPerm === perm;
+            });
+            return !hasWildcard && !userPermissions.has(perm);
+        });
+        return {
+            allowed: missing.length === 0,
+            missing: missing.length > 0 ? missing : undefined
+        };
+    }
+    checkRoles(user, required) {
+        if (!user.roles || user.roles.length === 0) {
+            return false;
+        }
+        return required.some(role => user.roles.includes(role));
+    }
+    expandRole(role) {
+        return this.roleHierarchy.get(role);
+    }
+    /**
+     * Define role permissions
+     */
+    defineRole(role, permissions) {
+        this.roleHierarchy.set(role, permissions);
+    }
+}
+exports.DefaultPermissionAdapter = DefaultPermissionAdapter;
+//# sourceMappingURL=adapter.js.map

package/dist/security/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/security/adapter.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAuIH;;GAEG;AACH,MAAa,6BAA6B;IACtC,eAAe,CAAC,IAAa,EAAE,MAA6B;QACxD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,UAAU,CAAC;QACvC,MAAM,OAAO,GAA2B,EAAE,CAAC;QAE3C,eAAe;QACf,OAAO,CAAC,wBAAwB,CAAC,GAAG,SAAS,CAAC;QAC9C,OAAO,CAAC,iBAAiB,CAAC,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;QACvE,OAAO,CAAC,kBAAkB,CAAC,GAAG,eAAe,CAAC;QAE9C,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;YAC3C,OAAO,CAAC,2BAA2B,CAAC,GAAG,qCAAqC,CAAC;YAC7E,OAAO,CAAC,iBAAiB,CAAC,GAAG,aAAa,CAAC;QAC/C,CAAC;QAED,MAAM;QACN,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;YACb,IAAI,QAAQ,GAAG,EAAE,CAAC;YAClB,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI;gBACxC,aAAa,EAAE,CAAC,QAAQ,CAAC;aAC5B,CAAC;YAEF,KAAK,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC3D,QAAQ,IAAI,GAAG,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YACrD,CAAC;YAED,IAAI,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC;gBACvB,QAAQ,IAAI,cAAc,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC;YACvD,CAAC;YAED,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU;gBACpC,CAAC,CAAC,qCAAqC;gBACvC,CAAC,CAAC,yBAAyB,CAAC;YAChC,OAAO,CAAC,UAAU,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC1C,CAAC;QAED,0BAA0B;QAC1B,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;QACjD,CAAC;QAED,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,aAAa;QACT,OAAO,MAAM,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACjD,CAAC;CACJ;AA/CD,sEA+CC;AAED;;GAEG;AACH,MAAa,0BAA0B;IAClB,eAAe,GAAG;QAC/B,GAAG,EAAE,yGAAyG;QAC9G,GAAG,EAAE,iEAAiE;QACtE,aAAa,EAAE,eAAe;QAC9B,cAAc,EAAE,oCAAoC;KACvD,CAAC;IAEF,QAAQ,CAAC,KAAU,EAAE,MAA0B;QAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAQ,EAAE,CAAC;YAC1B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAChD,CAAC;YACD,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAEO,cAAc,CAAC,KAAa,EAAE,MAA0B;QAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAE9F,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAChB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAChD,CAAC;gBACD,2BAA2B;gBAC3B,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACvC,CAAC;QACL,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,WAAW,CAAC,KAAU,EAAE,MAA0B;QAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QACvC,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAE9F,OAAO,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5D,CAAC;CACJ;AA3DD,gEA2DC;AAED;;GAEG;AACH,MAAa,wBAAwB;IACzB,aAAa,GAA0B,IAAI,GAAG,EAAE,CAAC;IAEzD,gBAAgB,CAAC,IAAU,EAAE,QAAkB;QAC3C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAExD,gCAAgC;QAChC,IAAI,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC7B,CAAC;QAED,8BAA8B;QAC9B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC1C,IAAI,SAAS,EAAE,CAAC;oBACZ,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACnD,CAAC;YACL,CAAC;QACL,CAAC;QAED,6BAA6B;QAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACnC,iEAAiE;YACjE,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAC5D,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;oBACrC,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACnC,CAAC;gBACD,OAAO,QAAQ,KAAK,IAAI,CAAC;YAC7B,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,WAAW,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QAEH,OAAO;YACH,OAAO,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;YAC7B,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;SACpD,CAAC;IACN,CAAC;IAED,UAAU,CAAC,IAAU,EAAE,QAAkB;QACrC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,UAAU,CAAE,IAAY;QACpB,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,IAAY,EAAE,WAAqB;QAC1C,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC9C,CAAC;CACJ;AA3DD,4DA2DC"}

package/dist/security/auth/JWTPlugin.d.ts

@@ -0,0 +1,105 @@
+/**
+ * JWT Authentication Plugin
+ *
+ * Plugin untuk JWT authentication yang otomatis:
+ * - Menambahkan jwt provider ke dependencies
+ * - Menambahkan auth middleware (opsional)
+ * - Mendekorasi context dengan user property
+ * - Export API untuk plugin lain
+ */
+import { JWTProvider, JWTProviderConfig, VerifyResult } from './JWTProvider';
+import type { User } from '../types';
+import type { Context } from '../../core';
+export interface JWTPluginConfig extends JWTProviderConfig {
+    /**
+     * Auto-protect semua route (default: false)
+     * Jika true, semua route akan butuh auth kecuali yang ada di `publicPaths`
+     */
+    autoProtect?: boolean;
+    /**
+     * Path yang tidak perlu auth (hanya berlaku jika autoProtect: true)
+     */
+    publicPaths?: string[];
+    /**
+     * Nama cookie untuk menyimpan token (opsional)
+     */
+    cookieName?: string;
+    /**
+     * Custom handler ketika unauthorized
+     */
+    onUnauthorized?: (ctx: Context, error: string) => any;
+}
+export interface JWTPluginExports {
+    /**
+     * JWT Provider instance
+     */
+    provider: JWTProvider;
+    /**
+     * Sign token dari payload
+     */
+    sign: (payload: {
+        id: string | number;
+        [key: string]: any;
+    }) => Promise<string>;
+    /**
+     * Verify token dari context
+     */
+    verify: (ctx: Context) => Promise<VerifyResult>;
+    /**
+     * Verify token string
+     */
+    verifyToken: (token: string) => Promise<VerifyResult>;
+    /**
+     * Decode token tanpa verify
+     */
+    decode: (token: string) => any;
+    /**
+     * Refresh token
+     */
+    refresh: (token: string) => Promise<string | null>;
+    /**
+     * Check role
+     */
+    hasRole: (user: User, role: string | string[]) => boolean;
+    /**
+     * Check permission
+     */
+    hasPermission: (user: User, permission: string | string[]) => boolean;
+    /**
+     * Get middleware for protecting routes
+     */
+    middleware: () => (ctx: Context, next: any) => Promise<any>;
+}
+/**
+ * Create JWT Plugin
+ *
+ * @example
+ * ```typescript
+ * import { createApp } from 'nexus';
+ * import { jwtPlugin } from 'nexus/security';
+ *
+ * const app = createApp()
+ *   .plugin(jwtPlugin, {
+ *     secret: process.env.JWT_SECRET!,
+ *     expiresIn: '7d',
+ *     autoProtect: false
+ *   });
+ *
+ * // Akses JWT via plugin exports
+ * app.post('/login', async (ctx) => {
+ *   const jwt = app.getPluginExports<JWTPluginExports>('jwt');
+ *   const token = await jwt.sign({ id: user.id, email: user.email });
+ *   return { token };
+ * });
+ *
+ * // Atau via context decorator
+ * app.get('/profile', async (ctx) => {
+ *   const result = await ctx.jwt.verify(ctx);
+ *   if (!result.valid) return ctx.response.status(401).json({ error: 'Unauthorized' });
+ *   return { user: result.user };
+ * });
+ * ```
+ */
+export declare const jwtPlugin: import("../../core").NexusPlugin<JWTPluginConfig, JWTPluginExports>;
+export default jwtPlugin;
+//# sourceMappingURL=JWTPlugin.d.ts.map

package/dist/security/auth/JWTPlugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"JWTPlugin.d.ts","sourceRoot":"","sources":["../../../src/security/auth/JWTPlugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD;;;OAGG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IAEtB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAEvB;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB;;OAEG;IACH,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC;CACvD;AAED,MAAM,WAAW,gBAAgB;IAC/B;;OAEG;IACH,QAAQ,EAAE,WAAW,CAAC;IAEtB;;OAEG;IACH,IAAI,EAAE,CAAC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAEhF;;OAEG;IACH,MAAM,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAEhD;;OAEG;IACH,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,CAAC,CAAC;IAEtD;;OAEG;IACH,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,GAAG,CAAC;IAE/B;;OAEG;IACH,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAEnD;;OAEG;IACH,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,OAAO,CAAC;IAE1D;;OAEG;IACH,aAAa,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,KAAK,OAAO,CAAC;IAEtE;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CAC7D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,SAAS,qEAoHZ,CAAC;AAEX,eAAe,SAAS,CAAC"}

package/dist/security/auth/JWTPlugin.js

@@ -0,0 +1,146 @@
+"use strict";
+/**
+ * JWT Authentication Plugin
+ *
+ * Plugin untuk JWT authentication yang otomatis:
+ * - Menambahkan jwt provider ke dependencies
+ * - Menambahkan auth middleware (opsional)
+ * - Mendekorasi context dengan user property
+ * - Export API untuk plugin lain
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jwtPlugin = void 0;
+const plugin_1 = require("../../core/plugin");
+const JWTProvider_1 = require("./JWTProvider");
+/**
+ * Create JWT Plugin
+ *
+ * @example
+ * ```typescript
+ * import { createApp } from 'nexus';
+ * import { jwtPlugin } from 'nexus/security';
+ *
+ * const app = createApp()
+ *   .plugin(jwtPlugin, {
+ *     secret: process.env.JWT_SECRET!,
+ *     expiresIn: '7d',
+ *     autoProtect: false
+ *   });
+ *
+ * // Akses JWT via plugin exports
+ * app.post('/login', async (ctx) => {
+ *   const jwt = app.getPluginExports<JWTPluginExports>('jwt');
+ *   const token = await jwt.sign({ id: user.id, email: user.email });
+ *   return { token };
+ * });
+ *
+ * // Atau via context decorator
+ * app.get('/profile', async (ctx) => {
+ *   const result = await ctx.jwt.verify(ctx);
+ *   if (!result.valid) return ctx.response.status(401).json({ error: 'Unauthorized' });
+ *   return { user: result.user };
+ * });
+ * ```
+ */
+exports.jwtPlugin = (0, plugin_1.definePlugin)('jwt')
+    .version('1.0.0')
+    .description('JWT Authentication Plugin')
+    .author('Nexus Team')
+    .tags('security', 'authentication', 'jwt')
+    .priority('high')
+    // Type-safe configuration
+    .config()
+    .defaults({
+    expiresIn: '1h',
+    autoProtect: false,
+    publicPaths: ['/health', '/api/auth/login', '/api/auth/register']
+})
+    .validate((config) => {
+    if (!config.secret) {
+        return 'JWT secret is required. Set it via config or JWT_SECRET environment variable.';
+    }
+    if (config.secret.length < 32) {
+        return 'JWT secret should be at least 32 characters for security.';
+    }
+    return true;
+})
+    // Configure phase - create provider early
+    .configure((ctx) => {
+    const provider = new JWTProvider_1.JWTProvider({
+        secret: ctx.config.secret,
+        expiresIn: ctx.config.expiresIn,
+        issuer: ctx.config.issuer,
+        audience: ctx.config.audience
+    });
+    ctx.storage.set('provider', provider);
+    ctx.log.debug('JWT Provider initialized');
+})
+    // Register phase - add middleware if autoProtect
+    .register((ctx) => {
+    const provider = ctx.storage.get('provider');
+    if (ctx.config.autoProtect) {
+        ctx.app.use(async (reqCtx, next) => {
+            // Check if path is public
+            const publicPaths = ctx.config.publicPaths || [];
+            const isPublic = publicPaths.some(p => {
+                if (p.endsWith('*')) {
+                    return reqCtx.path.startsWith(p.slice(0, -1));
+                }
+                return reqCtx.path === p;
+            });
+            if (isPublic) {
+                return next(reqCtx);
+            }
+            // Verify token
+            const result = await provider.verify(reqCtx, {
+                cookieName: ctx.config.cookieName
+            });
+            if (!result.valid) {
+                if (ctx.config.onUnauthorized) {
+                    return ctx.config.onUnauthorized(reqCtx, result.error || 'Unauthorized');
+                }
+                return reqCtx.response.status(401).json({
+                    error: 'Unauthorized',
+                    message: result.error
+                });
+            }
+            // Attach user to context
+            reqCtx.user = result.user;
+            return next(reqCtx);
+        });
+        ctx.log.info('JWT auto-protection enabled');
+    }
+})
+    // Decorate context dengan jwt helper
+    .decorate((ctx) => {
+    const provider = ctx.storage.get('provider');
+    ctx.jwt = {
+        sign: (payload) => provider.sign(payload),
+        verify: (reqCtx) => provider.verify(reqCtx),
+        decode: (token) => provider.decode(token),
+        hasRole: (user, role) => provider.hasRole(user, role),
+        hasPermission: (user, perm) => provider.hasPermission(user, perm)
+    };
+})
+    // Export API untuk plugin lain
+    .export((ctx) => {
+    const provider = ctx.storage.get('provider');
+    return {
+        provider,
+        sign: (payload) => provider.sign(payload),
+        verify: (reqCtx) => provider.verify(reqCtx),
+        verifyToken: (token) => provider.verifyToken(token),
+        decode: (token) => provider.decode(token),
+        refresh: (token) => provider.refresh(token),
+        hasRole: (user, role) => provider.hasRole(user, role),
+        hasPermission: (user, perm) => provider.hasPermission(user, perm),
+        middleware: () => provider.middleware({ cookieName: ctx.config.cookieName })
+    };
+})
+    // Ready phase
+    .ready((ctx) => {
+    ctx.log.info(`JWT Plugin ready (autoProtect: ${ctx.config.autoProtect})`);
+})
+    .build();
+exports.default = exports.jwtPlugin;
+//# sourceMappingURL=JWTPlugin.js.map

package/dist/security/auth/JWTPlugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"JWTPlugin.js","sourceRoot":"","sources":["../../../src/security/auth/JWTPlugin.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAEH,8CAAiD;AACjD,+CAA6E;AA0E7E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACU,QAAA,SAAS,GAAG,IAAA,qBAAY,EAAC,KAAK,CAAC;KACzC,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,2BAA2B,CAAC;KACxC,MAAM,CAAC,YAAY,CAAC;KACpB,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,KAAK,CAAC;KACzC,QAAQ,CAAC,MAAM,CAAC;IAEjB,0BAA0B;KACzB,MAAM,EAAmB;KACzB,QAAQ,CAAC;IACR,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,KAAK;IAClB,WAAW,EAAE,CAAC,SAAS,EAAE,iBAAiB,EAAE,oBAAoB,CAAC;CAClE,CAAC;KACD,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE;IACnB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,+EAA+E,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAC9B,OAAO,2DAA2D,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;IAEF,0CAA0C;KACzC,SAAS,CAAC,CAAC,GAAG,EAAE,EAAE;IACjB,MAAM,QAAQ,GAAG,IAAI,yBAAW,CAAC;QAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QACzB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS;QAC/B,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM;QACzB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ;KAC9B,CAAC,CAAC;IAEH,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACtC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;AAC5C,CAAC,CAAC;IAEF,iDAAiD;KAChD,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE;IAChB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAgB,CAAC;IAE5D,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,MAAe,EAAE,IAAS,EAAE,EAAE;YAC/C,0BAA0B;YAC1B,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;YACjD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;gBACpC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACpB,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChD,CAAC;gBACD,OAAO,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;YAEH,IAAI,QAAQ,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;YACtB,CAAC;YAED,eAAe;YACf,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;gBAC3C,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU;aAClC,CAAC,CAAC;YAEH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAClB,IAAI,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;oBAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,cAAc,CAAC,CAAC;gBAC3E,CAAC;gBACD,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACtC,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,MAAM,CAAC,KAAK;iBACtB,CAAC,CAAC;YACL,CAAC;YAED,yBAAyB;YACxB,MAAc,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YAEnC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC,CAAC;IAEF,qCAAqC;KACpC,QAAQ,CAAC,CAAC,GAAG,EAAE,EAAE;IAChB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAgB,CAAC;IAE3D,GAAW,CAAC,GAAG,GAAG;QACjB,IAAI,EAAE,CAAC,OAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAC9C,MAAM,EAAE,CAAC,MAAe,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QACpD,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QACjD,OAAO,EAAE,CAAC,IAAU,EAAE,IAAuB,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;QAC9E,aAAa,EAAE,CAAC,IAAU,EAAE,IAAuB,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC;KAC3F,CAAC;AACJ,CAAC,CAAC;IAEF,+BAA+B;KAC9B,MAAM,CAAmB,CAAC,GAAG,EAAE,EAAE;IAChC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAgB,CAAC;IAE5D,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QACzC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QAC3C,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,KAAK,CAAC;QACnD,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC;QACzC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC;QAC3C,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;QACrD,aAAa,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC;QACjE,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;KAC7E,CAAC;AACJ,CAAC,CAAC;IAEF,cAAc;KACb,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACb,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,kCAAkC,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,CAAC,CAAC;AAC5E,CAAC,CAAC;KAED,KAAK,EAAE,CAAC;AAEX,kBAAe,iBAAS,CAAC"}