@fivepixels-js/lite-api 0.2.1

package/dist/auth/identity.schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.schemas.d.ts","sourceRoot":"","sources":["../../src/auth/identity.schemas.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,cAAc;;;CAAmD,CAAC;AAE/E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;CAU3B,CAAC;AAEX,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmBtB,CAAC;AAEX,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCtB,CAAC;AAEX,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgBnB,CAAC;AAEX,eAAO,MAAM,sBAAsB;;;;;;;;;;;CAOzB,CAAC;AAEX,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAQrB,CAAC;AAEX,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAapB,CAAC"}

package/dist/auth/identity.schemas.js

@@ -0,0 +1,117 @@
+import { communityErrorResponses, communityResponseSchema, nullableStringSchema, uuidSchema, } from '../community/schemas.js';
+export const dateTimeSchema = { type: 'string', format: 'date-time' };
+export const authenticationUserSchema = {
+    type: 'object',
+    additionalProperties: false,
+    required: ['id', 'loginId', 'userName', 'profileImageUrl'],
+    properties: {
+        id: uuidSchema,
+        loginId: { type: 'string' },
+        userName: { type: 'string' },
+        profileImageUrl: nullableStringSchema,
+    },
+};
+export const tokenResponseSchema = {
+    type: 'object',
+    additionalProperties: false,
+    required: [
+        'accessToken',
+        'tokenType',
+        'accessTokenExpiresAt',
+        'refreshToken',
+        'refreshTokenExpiresAt',
+        'user',
+    ],
+    properties: {
+        accessToken: { type: 'string', minLength: 1 },
+        tokenType: { type: 'string', const: 'Bearer' },
+        accessTokenExpiresAt: dateTimeSchema,
+        refreshToken: { type: 'string', minLength: 1, maxLength: 512 },
+        refreshTokenExpiresAt: dateTimeSchema,
+        user: authenticationUserSchema,
+    },
+};
+export const registerRouteSchema = {
+    tags: ['auth'],
+    summary: '로컬 계정 회원가입',
+    body: {
+        type: 'object',
+        additionalProperties: false,
+        required: ['loginId', 'email', 'password', 'userName'],
+        properties: {
+            loginId: {
+                type: 'string',
+                minLength: 4,
+                maxLength: 50,
+                pattern: '^[A-Za-z0-9][A-Za-z0-9._-]{3,49}$',
+            },
+            email: { type: 'string', format: 'email', minLength: 3, maxLength: 320 },
+            password: { type: 'string', minLength: 8, maxLength: 256 },
+            userName: { type: 'string', minLength: 1, maxLength: 100 },
+        },
+    },
+    response: {
+        201: communityResponseSchema({
+            type: 'object',
+            additionalProperties: false,
+            required: ['id', 'loginId', 'email', 'userName', 'createdAt'],
+            properties: {
+                id: uuidSchema,
+                loginId: { type: 'string' },
+                email: { type: 'string' },
+                userName: { type: 'string' },
+                createdAt: dateTimeSchema,
+            },
+        }),
+        ...communityErrorResponses,
+    },
+};
+export const loginRouteSchema = {
+    tags: ['auth'],
+    summary: '로컬 계정 로그인',
+    body: {
+        type: 'object',
+        additionalProperties: false,
+        required: ['loginId', 'password'],
+        properties: {
+            loginId: { type: 'string', minLength: 4, maxLength: 50 },
+            password: { type: 'string', minLength: 1, maxLength: 256 },
+        },
+    },
+    response: {
+        200: communityResponseSchema(tokenResponseSchema),
+        ...communityErrorResponses,
+    },
+};
+export const refreshTokenBodySchema = {
+    type: 'object',
+    additionalProperties: false,
+    required: ['refreshToken'],
+    properties: {
+        refreshToken: { type: 'string', minLength: 1, maxLength: 512 },
+    },
+};
+export const refreshRouteSchema = {
+    tags: ['auth'],
+    summary: 'Access Token 및 Refresh Token 갱신',
+    body: refreshTokenBodySchema,
+    response: {
+        200: communityResponseSchema(tokenResponseSchema),
+        ...communityErrorResponses,
+    },
+};
+export const logoutRouteSchema = {
+    tags: ['auth'],
+    summary: 'Refresh Token 로그아웃',
+    body: refreshTokenBodySchema,
+    response: {
+        200: communityResponseSchema({
+            type: 'object',
+            additionalProperties: false,
+            required: ['loggedOut'],
+            properties: { loggedOut: { type: 'boolean', const: true } },
+        }),
+        ...communityErrorResponses,
+    },
+};
+//# sourceMappingURL=identity.schemas.js.map

package/dist/auth/identity.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.schemas.js","sourceRoot":"","sources":["../../src/auth/identity.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,UAAU,GACX,MAAM,yBAAyB,CAAC;AAEjC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAW,CAAC;AAE/E,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,iBAAiB,CAAC;IAC1D,UAAU,EAAE;QACV,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC3B,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC5B,eAAe,EAAE,oBAAoB;KACtC;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE;QACR,aAAa;QACb,WAAW;QACX,sBAAsB;QACtB,cAAc;QACd,uBAAuB;QACvB,MAAM;KACP;IACD,UAAU,EAAE;QACV,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;QAC7C,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE;QAC9C,oBAAoB,EAAE,cAAc;QACpC,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;QAC9D,qBAAqB,EAAE,cAAc;QACrC,IAAI,EAAE,wBAAwB;KAC/B;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,OAAO,EAAE,YAAY;IACrB,IAAI,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC;QACtD,UAAU,EAAE;YACV,OAAO,EAAE;gBACP,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,CAAC;gBACZ,SAAS,EAAE,EAAE;gBACb,OAAO,EAAE,mCAAmC;aAC7C;YACD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YACxE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;YAC1D,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;SAC3D;KACF;IACD,QAAQ,EAAE;QACR,GAAG,EAAE,uBAAuB,CAAC;YAC3B,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC;YAC7D,UAAU,EAAE;gBACV,EAAE,EAAE,UAAU;gBACd,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC3B,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBACzB,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;gBAC5B,SAAS,EAAE,cAAc;aAC1B;SACF,CAAC;QACF,GAAG,uBAAuB;KAC3B;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,OAAO,EAAE,WAAW;IACpB,IAAI,EAAE;QACJ,IAAI,EAAE,QAAQ;QACd,oBAAoB,EAAE,KAAK;QAC3B,QAAQ,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;QACjC,UAAU,EAAE;YACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE;YACxD,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;SAC3D;KACF;IACD,QAAQ,EAAE;QACR,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,CAAC;QACjD,GAAG,uBAAuB;KAC3B;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,EAAE,QAAQ;IACd,oBAAoB,EAAE,KAAK;IAC3B,QAAQ,EAAE,CAAC,cAAc,CAAC;IAC1B,UAAU,EAAE;QACV,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE;KAC/D;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,OAAO,EAAE,iCAAiC;IAC1C,IAAI,EAAE,sBAAsB;IAC5B,QAAQ,EAAE;QACR,GAAG,EAAE,uBAAuB,CAAC,mBAAmB,CAAC;QACjD,GAAG,uBAAuB;KAC3B;CACO,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,CAAC,MAAM,CAAC;IACd,OAAO,EAAE,oBAAoB;IAC7B,IAAI,EAAE,sBAAsB;IAC5B,QAAQ,EAAE;QACR,GAAG,EAAE,uBAAuB,CAAC;YAC3B,IAAI,EAAE,QAAQ;YACd,oBAAoB,EAAE,KAAK;YAC3B,QAAQ,EAAE,CAAC,WAAW,CAAC;YACvB,UAAU,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;SAC5D,CAAC;QACF,GAAG,uBAAuB;KAC3B;CACO,CAAC"}

package/dist/auth/identity.service.d.ts

@@ -0,0 +1,37 @@
+import type { AppConfig } from '../config/config.js';
+import type { IdentityRepository } from './identity.repository.js';
+import type { PasswordService } from './password.service.js';
+import type { TokenResponse, TokenService } from './token.service.js';
+export interface RegisterRequest {
+    email: string;
+    loginId: string;
+    password: string;
+    userName: string;
+}
+export interface RegisterResponse {
+    createdAt: string;
+    email: string;
+    id: string;
+    loginId: string;
+    userName: string;
+}
+export interface LoginRequest {
+    loginId: string;
+    password: string;
+}
+export declare class IdentityService {
+    private readonly repository;
+    private readonly passwordService;
+    private readonly tokenService;
+    private readonly config;
+    private readonly now;
+    constructor(repository: IdentityRepository, passwordService: PasswordService, tokenService: TokenService, config: AppConfig, now?: () => Date);
+    register(request: RegisterRequest): Promise<RegisterResponse>;
+    login(request: LoginRequest): Promise<TokenResponse>;
+    refresh(refreshTokenValue: string): TokenResponse;
+    logout(refreshTokenValue: string): {
+        loggedOut: true;
+    };
+    private authenticationUser;
+}
+//# sourceMappingURL=identity.service.d.ts.map

package/dist/auth/identity.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.service.d.ts","sourceRoot":"","sources":["../../src/auth/identity.service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,KAAK,EAA4B,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC7F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEtE,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAwBD,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAChC,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBAJH,UAAU,EAAE,kBAAkB,EAC9B,eAAe,EAAE,eAAe,EAChC,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,SAAS,EACjB,GAAG,GAAE,MAAM,IAAuB;IAGxC,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyC7D,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC;IAwE1D,OAAO,CAAC,iBAAiB,EAAE,MAAM,GAAG,aAAa;IAsBjD,MAAM,CAAC,iBAAiB,EAAE,MAAM,GAAG;QAAE,SAAS,EAAE,IAAI,CAAA;KAAE;IAK7D,OAAO,CAAC,kBAAkB;CAQ3B"}

package/dist/auth/identity.service.js

@@ -0,0 +1,131 @@
+import { randomUUID } from 'node:crypto';
+import { CommunityApiError } from '../community/errors.js';
+import { storageTimestamp } from '../storage/values.js';
+function isUniqueConstraint(error) {
+    if (typeof error !== 'object' || error === null || !('code' in error))
+        return false;
+    const code = error.code;
+    return code === 'SQLITE_CONSTRAINT_UNIQUE' || code === 'SQLITE_CONSTRAINT_PRIMARYKEY';
+}
+function invalidCredentials() {
+    return new CommunityApiError(401, 'invalid-credentials', '아이디 또는 비밀번호가 올바르지 않습니다.');
+}
+function invalidRefreshToken() {
+    return new CommunityApiError(401, 'invalid-refresh-token', 'Refresh Token이 유효하지 않거나 만료되었습니다.');
+}
+export class IdentityService {
+    repository;
+    passwordService;
+    tokenService;
+    config;
+    now;
+    constructor(repository, passwordService, tokenService, config, now = () => new Date()) {
+        this.repository = repository;
+        this.passwordService = passwordService;
+        this.tokenService = tokenService;
+        this.config = config;
+        this.now = now;
+    }
+    async register(request) {
+        if (!this.config.registrationEnabled) {
+            throw new CommunityApiError(403, 'registration-disabled', '현재 서버에서는 회원가입을 사용할 수 없습니다.');
+        }
+        const loginId = request.loginId.trim();
+        const email = request.email.trim().toLowerCase();
+        const userName = request.userName.trim();
+        if (loginId === '' || email === '' || userName === '') {
+            throw new CommunityApiError(400, 'invalid-registration', '회원가입 입력값을 확인해 주세요.');
+        }
+        const createdAt = storageTimestamp(this.now());
+        const passwordHash = await this.passwordService.hash(request.password);
+        const result = { id: randomUUID(), loginId, email, userName, createdAt };
+        try {
+            this.repository.registerAccount({
+                ...result,
+                passwordHash,
+            });
+        }
+        catch (error) {
+            if (isUniqueConstraint(error)) {
+                throw new CommunityApiError(409, 'account-already-exists', '이미 사용 중인 로그인 ID 또는 이메일입니다.');
+            }
+            throw error;
+        }
+        return result;
+    }
+    async login(request) {
+        const loginId = request.loginId.trim();
+        const credential = this.repository.findCredentialByLoginId(loginId);
+        if (credential === undefined) {
+            await this.passwordService.verifyDummy(request.password);
+            throw invalidCredentials();
+        }
+        const requestedAt = this.now();
+        if (credential.lockedUntil !== null && credential.lockedUntil > storageTimestamp(requestedAt)) {
+            throw new CommunityApiError(423, 'account-locked', '로그인 시도 횟수를 초과했습니다. 잠시 후 다시 시도해 주세요.');
+        }
+        const verification = await this.passwordService.verifyForLogin(credential.passwordHash, request.password);
+        const now = this.now();
+        const currentCredential = this.repository.findCredentialByLoginId(loginId);
+        if (currentCredential === undefined || currentCredential.passwordHash !== credential.passwordHash) {
+            throw invalidCredentials();
+        }
+        if (currentCredential.lockedUntil !== null && currentCredential.lockedUntil > storageTimestamp(now)) {
+            throw new CommunityApiError(423, 'account-locked', '로그인 시도 횟수를 초과했습니다. 잠시 후 다시 시도해 주세요.');
+        }
+        if (!verification.valid) {
+            const lockedUntil = storageTimestamp(new Date(now.getTime() + this.config.lockoutMinutes * 60_000));
+            this.repository.recordFailedLogin(currentCredential.id, storageTimestamp(now), lockedUntil, this.config.maxFailedLoginAttempts);
+            throw invalidCredentials();
+        }
+        if (currentCredential.statusCode !== 1) {
+            throw new CommunityApiError(403, 'user-blocked', '사용할 수 없는 Fivepixels 사용자입니다.');
+        }
+        const replacementHash = verification.needsRehash
+            ? await this.passwordService.hash(request.password) : undefined;
+        // Hashing yields. Re-read lockout/status and CAS the latest observed version below.
+        const latest = this.repository.findCredentialByLoginId(loginId);
+        if (latest === undefined || latest.passwordHash !== credential.passwordHash)
+            throw invalidCredentials();
+        const loginTime = this.now();
+        const completedAt = storageTimestamp(loginTime);
+        if (latest.lockedUntil !== null && latest.lockedUntil > completedAt) {
+            throw new CommunityApiError(423, 'account-locked', '로그인 시도 횟수를 초과했습니다. 잠시 후 다시 시도해 주세요.');
+        }
+        if (latest.statusCode !== 1) {
+            throw new CommunityApiError(403, 'user-blocked', '사용할 수 없는 Fivepixels 사용자입니다.');
+        }
+        const user = this.authenticationUser(latest);
+        const refreshToken = this.tokenService.createRefreshToken(loginTime);
+        const response = this.tokenService.createTokenResponse(user, refreshToken, loginTime);
+        if (!this.repository.completeLogin(latest, completedAt, refreshToken.database, replacementHash)) {
+            throw invalidCredentials();
+        }
+        return response;
+    }
+    refresh(refreshTokenValue) {
+        const now = this.now();
+        const tokenHash = this.tokenService.hashRefreshToken(refreshTokenValue);
+        const replacement = this.tokenService.createRefreshToken(now);
+        const storedToken = this.repository.rotateRefreshToken(tokenHash, replacement.database, storageTimestamp(now));
+        if (storedToken.kind === 'invalid')
+            throw invalidRefreshToken();
+        if (storedToken.kind === 'user-blocked') {
+            throw new CommunityApiError(403, 'user-blocked', '사용할 수 없는 Fivepixels 사용자입니다.');
+        }
+        return this.tokenService.createTokenResponse(storedToken.user, replacement, now);
+    }
+    logout(refreshTokenValue) {
+        this.repository.logout(this.tokenService.hashRefreshToken(refreshTokenValue), storageTimestamp(this.now()));
+        return { loggedOut: true };
+    }
+    authenticationUser(credential) {
+        return {
+            id: credential.id,
+            loginId: credential.loginId,
+            userName: credential.userName,
+            profileImageUrl: credential.profileImageUrl,
+        };
+    }
+}
+//# sourceMappingURL=identity.service.js.map

package/dist/auth/identity.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.service.js","sourceRoot":"","sources":["../../src/auth/identity.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAyBxD,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;IAChD,OAAO,IAAI,KAAK,0BAA0B,IAAI,IAAI,KAAK,8BAA8B,CAAC;AACxF,CAAC;AAED,SAAS,kBAAkB;IACzB,OAAO,IAAI,iBAAiB,CAC1B,GAAG,EACH,qBAAqB,EACrB,yBAAyB,CAC1B,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB;IAC1B,OAAO,IAAI,iBAAiB,CAC1B,GAAG,EACH,uBAAuB,EACvB,kCAAkC,CACnC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,eAAe;IAEP;IACA;IACA;IACA;IACA;IALnB,YACmB,UAA8B,EAC9B,eAAgC,EAChC,YAA0B,EAC1B,MAAiB,EACjB,MAAkB,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE;QAJlC,eAAU,GAAV,UAAU,CAAoB;QAC9B,oBAAe,GAAf,eAAe,CAAiB;QAChC,iBAAY,GAAZ,YAAY,CAAc;QAC1B,WAAM,GAAN,MAAM,CAAW;QACjB,QAAG,GAAH,GAAG,CAA+B;IAClD,CAAC;IAEG,KAAK,CAAC,QAAQ,CAAC,OAAwB;QAC5C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACrC,MAAM,IAAI,iBAAiB,CACzB,GAAG,EACH,uBAAuB,EACvB,4BAA4B,CAC7B,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzC,IAAI,OAAO,KAAK,EAAE,IAAI,KAAK,KAAK,EAAE,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;YACtD,MAAM,IAAI,iBAAiB,CACzB,GAAG,EACH,sBAAsB,EACtB,oBAAoB,CACrB,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QACzE,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;gBAC9B,GAAG,MAAM;gBACT,YAAY;aACb,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,iBAAiB,CACzB,GAAG,EACH,wBAAwB,EACxB,4BAA4B,CAC7B,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,OAAqB;QACtC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACzD,MAAM,kBAAkB,EAAE,CAAC;QAC7B,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,UAAU,CAAC,WAAW,KAAK,IAAI,IAAI,UAAU,CAAC,WAAW,GAAG,gBAAgB,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,iBAAiB,CACzB,GAAG,EACH,gBAAgB,EAChB,qCAAqC,CACtC,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC1G,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,iBAAiB,GAAG,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAC3E,IAAI,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,CAAC,YAAY,KAAK,UAAU,CAAC,YAAY,EAAE,CAAC;YAClG,MAAM,kBAAkB,EAAE,CAAC;QAC7B,CAAC;QACD,IAAI,iBAAiB,CAAC,WAAW,KAAK,IAAI,IAAI,iBAAiB,CAAC,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;YACpG,MAAM,IAAI,iBAAiB,CACzB,GAAG,EACH,gBAAgB,EAChB,qCAAqC,CACtC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YACxB,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,GAAG,MAAM,CAAC,CAAC,CAAC;YACpG,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAC/B,iBAAiB,CAAC,EAAE,EACpB,gBAAgB,CAAC,GAAG,CAAC,EACrB,WAAW,EACX,IAAI,CAAC,MAAM,CAAC,sBAAsB,CACnC,CAAC;YACF,MAAM,kBAAkB,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,iBAAiB,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,iBAAiB,CACzB,GAAG,EACH,cAAc,EACd,6BAA6B,CAC9B,CAAC;QACJ,CAAC;QAED,MAAM,eAAe,GAAG,YAAY,CAAC,WAAW;YAC9C,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,oFAAoF;QACpF,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,UAAU,CAAC,YAAY;YAAE,MAAM,kBAAkB,EAAE,CAAC;QACxG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,GAAG,WAAW,EAAE,CAAC;YACpE,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,gBAAgB,EAAE,qCAAqC,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,MAAM,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,6BAA6B,CAAC,CAAC;QAClF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,QAAQ,EAAE,eAAe,CAAC,EAAE,CAAC;YAChG,MAAM,kBAAkB,EAAE,CAAC;QAC7B,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEM,OAAO,CAAC,iBAAyB;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,CAAC;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,IAAI,CAAC,UAAU,CAAC,kBAAkB,CACpD,SAAS,EACT,WAAW,CAAC,QAAQ,EACpB,gBAAgB,CAAC,GAAG,CAAC,CACtB,CAAC;QAEF,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS;YAAE,MAAM,mBAAmB,EAAE,CAAC;QAChE,IAAI,WAAW,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACxC,MAAM,IAAI,iBAAiB,CACzB,GAAG,EACH,cAAc,EACd,6BAA6B,CAC9B,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,YAAY,CAAC,mBAAmB,CAAC,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;IACnF,CAAC;IAEM,MAAM,CAAC,iBAAyB;QACrC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC5G,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAEO,kBAAkB,CAAC,UAAoC;QAC7D,OAAO;YACL,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,eAAe,EAAE,UAAU,CAAC,eAAe;SAC5C,CAAC;IACJ,CAAC;CACF"}

package/dist/auth/password.service.d.ts

@@ -0,0 +1,15 @@
+export interface PasswordVerification {
+    valid: boolean;
+    needsRehash: boolean;
+}
+export declare class PasswordService {
+    private activeHashes;
+    private readonly queue;
+    hash(password: string): Promise<string>;
+    verify(encoded: string, password: string): Promise<boolean>;
+    verifyForLogin(encoded: string, password: string): Promise<PasswordVerification>;
+    verifyDummy(password: string): Promise<void>;
+    private derive;
+    private execute;
+}
+//# sourceMappingURL=password.service.d.ts.map

package/dist/auth/password.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.service.d.ts","sourceRoot":"","sources":["../../src/auth/password.service.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;CACtB;AAqCD,qBAAa,eAAe;IAC1B,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAiB;IAE1B,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWvC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI3D,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAWhF,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOzD,OAAO,CAAC,MAAM;IAad,OAAO,CAAC,OAAO;CAoBhB"}

package/dist/auth/password.service.js

@@ -0,0 +1,116 @@
+import { pbkdf2, randomBytes, scrypt, timingSafeEqual } from 'node:crypto';
+import { CommunityApiError } from '../community/errors.js';
+const ITERATIONS = 600_000;
+const MAX_ITERATIONS = 1_000_000;
+const MAX_CONCURRENT_HASHES = 1;
+const MAX_QUEUED_HASHES = 16;
+function decode(encoded, encoding) {
+    const bytes = Buffer.from(encoded, encoding);
+    return bytes.toString(encoding) === encoded ? bytes : undefined;
+}
+function parse(encoded) {
+    if (encoded.length > 512)
+        return undefined;
+    if (encoded.startsWith('$scrypt$')) {
+        const parts = encoded.split('$');
+        if (parts.length !== 6 || parts[2] !== 'v=1' || parts[3] !== 'n=32768,r=8,p=3')
+            return undefined;
+        const salt = decode(parts[4] ?? '', 'base64url');
+        const hash = decode(parts[5] ?? '', 'base64url');
+        if (salt?.length !== 16 || hash?.length !== 32)
+            return undefined;
+        return { algorithm: 'scrypt', iterations: 0, length: 32, salt, hash, rehash: true };
+    }
+    const bytes = decode(encoded, 'base64');
+    if (bytes === undefined)
+        return undefined;
+    if (bytes[0] === 0 && bytes.length === 49) {
+        return { algorithm: 'sha1', iterations: 1_000, length: 32,
+            salt: bytes.subarray(1, 17), hash: bytes.subarray(17), rehash: true };
+    }
+    if (bytes[0] !== 1 || bytes.length < 13)
+        return undefined;
+    const prf = bytes.readUInt32BE(1);
+    const iterations = bytes.readUInt32BE(5);
+    const saltLength = bytes.readUInt32BE(9);
+    const length = bytes.length - 13 - saltLength;
+    const algorithm = ['sha1', 'sha256', 'sha512'][prf];
+    if (algorithm === undefined || iterations < 1 || iterations > MAX_ITERATIONS
+        || saltLength < 16 || saltLength > 64 || length < 16 || length > 64)
+        return undefined;
+    return { algorithm, iterations, length, salt: bytes.subarray(13, 13 + saltLength),
+        hash: bytes.subarray(13 + saltLength),
+        rehash: length < 32 || algorithm === 'sha1' || (algorithm === 'sha256' && iterations < ITERATIONS)
+            || (algorithm === 'sha512' && iterations < 210_000) };
+}
+export class PasswordService {
+    activeHashes = 0;
+    queue = [];
+    async hash(password) {
+        const salt = randomBytes(16);
+        const hash = await this.derive(password, { algorithm: 'sha256', iterations: ITERATIONS, length: 32, salt });
+        const header = Buffer.alloc(13);
+        header[0] = 1;
+        header.writeUInt32BE(1, 1);
+        header.writeUInt32BE(ITERATIONS, 5);
+        header.writeUInt32BE(salt.length, 9);
+        return Buffer.concat([header, salt, hash]).toString('base64');
+    }
+    async verify(encoded, password) {
+        return (await this.verifyForLogin(encoded, password)).valid;
+    }
+    async verifyForLogin(encoded, password) {
+        const parsed = parse(encoded);
+        if (parsed === undefined) {
+            await this.verifyDummy(password);
+            return { valid: false, needsRehash: false };
+        }
+        const actual = await this.derive(password, parsed);
+        const valid = timingSafeEqual(actual, parsed.hash);
+        return { valid, needsRehash: valid && parsed.rehash };
+    }
+    async verifyDummy(password) {
+        const actual = await this.derive(password, {
+            algorithm: 'sha256', iterations: ITERATIONS, length: 32, salt: Buffer.alloc(16, 0x5a),
+        });
+        timingSafeEqual(actual, Buffer.alloc(32));
+    }
+    derive(password, input) {
+        if (this.activeHashes >= MAX_CONCURRENT_HASHES && this.queue.length >= MAX_QUEUED_HASHES) {
+            return Promise.reject(new CommunityApiError(503, 'authentication-busy', '인증 요청이 많습니다. 잠시 후 다시 시도해 주세요.'));
+        }
+        return new Promise((resolve, reject) => {
+            const job = { password, input, resolve, reject };
+            if (this.activeHashes < MAX_CONCURRENT_HASHES)
+                this.execute(job);
+            else
+                this.queue.push(job);
+        });
+    }
+    execute(job) {
+        this.activeHashes++;
+        const done = (error, key) => {
+            this.activeHashes--;
+            if (error === null)
+                job.resolve(key);
+            else
+                job.reject(error);
+            const next = this.queue.shift();
+            if (next !== undefined)
+                this.execute(next);
+        };
+        try {
+            const input = job.input;
+            if (input.algorithm === 'scrypt') {
+                scrypt(job.password, input.salt, input.length, { N: 32_768, r: 8, p: 3, maxmem: 64 * 1024 * 1024 }, done);
+            }
+            else {
+                pbkdf2(job.password, input.salt, input.iterations, input.length, input.algorithm, done);
+            }
+        }
+        catch (error) {
+            done(error instanceof Error ? error : new Error('password-derivation-failed'), Buffer.alloc(0));
+        }
+    }
+}
+//# sourceMappingURL=password.service.js.map

package/dist/auth/password.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.service.js","sourceRoot":"","sources":["../../src/auth/password.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAE3D,MAAM,UAAU,GAAG,OAAO,CAAC;AAC3B,MAAM,cAAc,GAAG,SAAS,CAAC;AACjC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAChC,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAuB7B,SAAS,MAAM,CAAC,OAAe,EAAE,QAAgC;IAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,SAAS,KAAK,CAAC,OAAe;IAC5B,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,iBAAiB;YAAE,OAAO,SAAS,CAAC;QACjG,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,CAAC,CAAC;QACjD,IAAI,IAAI,EAAE,MAAM,KAAK,EAAE,IAAI,IAAI,EAAE,MAAM,KAAK,EAAE;YAAE,OAAO,SAAS,CAAC;QACjE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;YACvD,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,SAAS,CAAC;IAC1D,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAClC,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,UAAU,CAAC;IAC9C,MAAM,SAAS,GAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAW,CAAC,GAAG,CAAC,CAAC;IAC/D,IAAI,SAAS,KAAK,SAAS,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,cAAc;WACvE,UAAU,GAAG,EAAE,IAAI,UAAU,GAAG,EAAE,IAAI,MAAM,GAAG,EAAE,IAAI,MAAM,GAAG,EAAE;QAAE,OAAO,SAAS,CAAC;IACxF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,UAAU,CAAC;QAC/E,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,GAAG,UAAU,CAAC;QACrC,MAAM,EAAE,MAAM,GAAG,EAAE,IAAI,SAAS,KAAK,MAAM,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,UAAU,GAAG,UAAU,CAAC;eAC7F,CAAC,SAAS,KAAK,QAAQ,IAAI,UAAU,GAAG,OAAO,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,MAAM,OAAO,eAAe;IAClB,YAAY,GAAG,CAAC,CAAC;IACR,KAAK,GAAc,EAAE,CAAC;IAEhC,KAAK,CAAC,IAAI,CAAC,QAAgB;QAChC,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5G,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACd,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,MAAM,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChE,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,OAAe,EAAE,QAAgB;QACnD,OAAO,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAC9D,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,OAAe,EAAE,QAAgB;QAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;YACjC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAC9C,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;IACxD,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,QAAgB;QACvC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;YACzC,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC;SACtF,CAAC,CAAC;QACH,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAEO,MAAM,CAAC,QAAgB,EAAE,KAAiB;QAChD,IAAI,IAAI,CAAC,YAAY,IAAI,qBAAqB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,iBAAiB,EAAE,CAAC;YACzF,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,iBAAiB,CACzC,GAAG,EAAE,qBAAqB,EAAE,+BAA+B,CAC5D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC7C,MAAM,GAAG,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;YACjD,IAAI,IAAI,CAAC,YAAY,GAAG,qBAAqB;gBAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;;gBAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAC,GAAY;QAC1B,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,CAAC,KAAmB,EAAE,GAAW,EAAQ,EAAE;YACtD,IAAI,CAAC,YAAY,EAAE,CAAC;YACpB,IAAI,KAAK,KAAK,IAAI;gBAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;;gBAChC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,IAAI,KAAK,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7C,CAAC,CAAC;QACF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;YACxB,IAAI,KAAK,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;gBACjC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;YAC5G,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC1F,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;CACF"}

package/dist/auth/token.service.d.ts

@@ -0,0 +1,38 @@
+import type { AppConfig } from '../config/config.js';
+import type { AuthenticationUserRecord, NewRefreshTokenInput } from './identity.repository.js';
+export interface AccessTokenPayload {
+    fivepixels_user_id: string;
+    iat: number;
+    jti: string;
+    name: string;
+    sub: string;
+    token_scope: 'fivepixels_access';
+}
+export interface TokenResponse {
+    accessToken: string;
+    accessTokenExpiresAt: string;
+    refreshToken: string;
+    refreshTokenExpiresAt: string;
+    tokenType: 'Bearer';
+    user: AuthenticationUserRecord;
+}
+export interface RefreshTokenMaterial {
+    database: NewRefreshTokenInput;
+    value: string;
+}
+export type AccessTokenSigner = (payload: AccessTokenPayload, options: {
+    algorithm: 'HS256';
+    aud: string;
+    expiresIn: number;
+    iss: string;
+    notBefore: number;
+}) => string;
+export declare class TokenService {
+    private readonly config;
+    private readonly sign;
+    constructor(config: AppConfig, sign: AccessTokenSigner);
+    createRefreshToken(issuedAt: Date): RefreshTokenMaterial;
+    createTokenResponse(user: AuthenticationUserRecord, refreshToken: RefreshTokenMaterial, issuedAt: Date): TokenResponse;
+    hashRefreshToken(refreshToken: string): Buffer;
+}
+//# sourceMappingURL=token.service.d.ts.map

package/dist/auth/token.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.service.d.ts","sourceRoot":"","sources":["../../src/auth/token.service.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,KAAK,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAE/F,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,mBAAmB,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,QAAQ,CAAC;IACpB,IAAI,EAAE,wBAAwB,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC9B,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE;IACP,SAAS,EAAE,OAAO,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB,KACE,MAAM,CAAC;AAEZ,qBAAa,YAAY;IAErB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBADJ,MAAM,EAAE,SAAS,EACjB,IAAI,EAAE,iBAAiB;IAGnC,kBAAkB,CAAC,QAAQ,EAAE,IAAI,GAAG,oBAAoB;IAexD,mBAAmB,CACxB,IAAI,EAAE,wBAAwB,EAC9B,YAAY,EAAE,oBAAoB,EAClC,QAAQ,EAAE,IAAI,GACb,aAAa;IA6BT,gBAAgB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM;CAGtD"}

package/dist/auth/token.service.js

@@ -0,0 +1,54 @@
+import { createHash, randomBytes, randomUUID } from 'node:crypto';
+import { storageTimestamp } from '../storage/values.js';
+export class TokenService {
+    config;
+    sign;
+    constructor(config, sign) {
+        this.config = config;
+        this.sign = sign;
+    }
+    createRefreshToken(issuedAt) {
+        const value = randomBytes(64).toString('base64url');
+        const expiresAt = new Date(issuedAt.getTime());
+        expiresAt.setUTCDate(expiresAt.getUTCDate() + this.config.refreshTokenExpirationDays);
+        return {
+            value,
+            database: {
+                id: randomUUID(),
+                tokenHash: this.hashRefreshToken(value),
+                createdAt: storageTimestamp(issuedAt),
+                expiresAt: storageTimestamp(expiresAt),
+            },
+        };
+    }
+    createTokenResponse(user, refreshToken, issuedAt) {
+        const accessTokenExpiresAt = new Date(issuedAt.getTime() + this.config.accessTokenExpirationMinutes * 60_000);
+        const payload = {
+            sub: user.id,
+            name: user.userName,
+            fivepixels_user_id: user.id,
+            token_scope: 'fivepixels_access',
+            jti: randomUUID(),
+            iat: Math.floor(issuedAt.getTime() / 1000),
+        };
+        const accessToken = this.sign(payload, {
+            algorithm: 'HS256',
+            aud: this.config.jwtAudience,
+            expiresIn: this.config.accessTokenExpirationMinutes * 60,
+            iss: this.config.jwtIssuer,
+            notBefore: 0,
+        });
+        return {
+            accessToken,
+            tokenType: 'Bearer',
+            accessTokenExpiresAt: storageTimestamp(accessTokenExpiresAt),
+            refreshToken: refreshToken.value,
+            refreshTokenExpiresAt: refreshToken.database.expiresAt,
+            user,
+        };
+    }
+    hashRefreshToken(refreshToken) {
+        return createHash('sha256').update(refreshToken).digest();
+    }
+}
+//# sourceMappingURL=token.service.js.map

package/dist/auth/token.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.service.js","sourceRoot":"","sources":["../../src/auth/token.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAElE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAqCxD,MAAM,OAAO,YAAY;IAEJ;IACA;IAFnB,YACmB,MAAiB,EACjB,IAAuB;QADvB,WAAM,GAAN,MAAM,CAAW;QACjB,SAAI,GAAJ,IAAI,CAAmB;IACvC,CAAC;IAEG,kBAAkB,CAAC,QAAc;QACtC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/C,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;QACtF,OAAO;YACL,KAAK;YACL,QAAQ,EAAE;gBACR,EAAE,EAAE,UAAU,EAAE;gBAChB,SAAS,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBACvC,SAAS,EAAE,gBAAgB,CAAC,QAAQ,CAAC;gBACrC,SAAS,EAAE,gBAAgB,CAAC,SAAS,CAAC;aACvC;SACF,CAAC;IACJ,CAAC;IAEM,mBAAmB,CACxB,IAA8B,EAC9B,YAAkC,EAClC,QAAc;QAEd,MAAM,oBAAoB,GAAG,IAAI,IAAI,CACnC,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,4BAA4B,GAAG,MAAM,CACvE,CAAC;QACF,MAAM,OAAO,GAAuB;YAClC,GAAG,EAAE,IAAI,CAAC,EAAE;YACZ,IAAI,EAAE,IAAI,CAAC,QAAQ;YACnB,kBAAkB,EAAE,IAAI,CAAC,EAAE;YAC3B,WAAW,EAAE,mBAAmB;YAChC,GAAG,EAAE,UAAU,EAAE;YACjB,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;SAC3C,CAAC;QACF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;YACrC,SAAS,EAAE,OAAO;YAClB,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;YAC5B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,4BAA4B,GAAG,EAAE;YACxD,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAC1B,SAAS,EAAE,CAAC;SACb,CAAC,CAAC;QACH,OAAO;YACL,WAAW;YACX,SAAS,EAAE,QAAQ;YACnB,oBAAoB,EAAE,gBAAgB,CAAC,oBAAoB,CAAC;YAC5D,YAAY,EAAE,YAAY,CAAC,KAAK;YAChC,qBAAqB,EAAE,YAAY,CAAC,QAAQ,CAAC,SAAS;YACtD,IAAI;SACL,CAAC;IACJ,CAAC;IAEM,gBAAgB,CAAC,YAAoB;QAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;IAC5D,CAAC;CACF"}

package/dist/cli/cli.d.ts

@@ -0,0 +1,3 @@
+import { type CommandIo } from './io.js';
+export declare function runCli(arguments_: string[], environment?: NodeJS.ProcessEnv, io?: CommandIo): Promise<number>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli/cli.ts"],"names":[],"mappings":"AASA,OAAO,EAAa,KAAK,SAAS,EAAE,MAAM,SAAS,CAAC;AAqDpD,wBAAsB,MAAM,CAC1B,UAAU,EAAE,MAAM,EAAE,EACpB,WAAW,GAAE,MAAM,CAAC,UAAwB,EAC5C,EAAE,GAAE,SAAqB,GACxB,OAAO,CAAC,MAAM,CAAC,CAmEjB"}