@gate-forge/pack-auth 0.1.0

package/dist/detector.js

@@ -0,0 +1,623 @@
+/**
+ * Auth pack detector — discovers role-guard + tenant-isolation patterns
+ * in TypeScript / JavaScript HTTP route definitions and emits one
+ * `auth.resource` per guarded endpoint.
+ *
+ * Recognised constructs (TS/JS only; FastAPI/Python deferred — see the
+ * pack README "Limitations"):
+ *
+ *   - NestJS: `@UseGuards(RolesGuard)`, `@Roles('admin', 'manager')`,
+ *     plus the controller / method declaration that hosts them
+ *     (`@Controller('billing')`, `@Post('refund')`).
+ *   - Express middleware chains: `app.post('/billing/refund',
+ *     requireRole('admin'), requireTenant(), handler)`.
+ *   - Fastify preHandler hooks: `fastify.post('/billing/refund',
+ *     { preHandler: [requireRole('admin'), requireTenant()] }, handler)`.
+ *   - Hono middleware: `app.post('/billing/refund',
+ *     requireRole('admin'), requireTenant(), (c) => c.json(...))`.
+ *
+ * Discovery outcome:
+ *
+ *   - One `auth.resource` per guarded endpoint, id = `auth.<METHOD>.<path>`
+ *     (lower-cased, slashes -> dots, segments stripped). Deterministic.
+ *   - `attributes.roleRequirement`: `string[]` of role names the guard
+ *     accepts; `[]` when no role guard (tenancy may still be present).
+ *   - `attributes.tenancy`: `'tenant-bound' | 'none'`. `'tenant-bound'`
+ *     when a tenant check is detected (e.g. `requireTenant()` middleware,
+ *     `req.user.tenantId === target.tenantId`, `tenantId` in route).
+ *   - `attributes.framework`: `'nestjs' | 'express' | 'fastify' | 'hono'`.
+ *   - `attributes.method`: HTTP method upper-cased.
+ *   - `attributes.path`: Normalised route path.
+ *   - `findings[]`: ALWAYS empty in this pack — the detector fails
+ *     CLOSED by omitting findings for unparseable constructs; the
+ *     graph emits the typed `unresolved` entry for partial patterns.
+ *
+ * Determinism: regex/parse-tree scan is pure over (paths, file bytes);
+ * no `Date.now()`, no `Math.random()`. Output is sorted by id.
+ */
+import { readdirSync, readFileSync, statSync } from 'node:fs';
+import { resolve, relative, sep } from 'node:path';
+import { LocationSchema } from '@gate-forge/core';
+import { PACK_PLUGIN_ID, PACK_VERSION } from './version.js';
+/**
+ * Directories the detector skips by name (purely the noisy parts of any
+ * repo): never feed them to `readFileSync` even if the caller forgot to
+ * exclude them.
+ */
+const SKIP_DIR_NAMES = {
+    node_modules: true,
+    dist: true,
+    build: true,
+    coverage: true,
+    '.git': true,
+    '.next': true,
+    '.turbo': true,
+    '.cache': true,
+    out: true,
+    __pycache__: true,
+};
+/**
+ * Looks for `requireRole('admin', 'manager')` / `requireRole(['admin'])`
+ * calls inside a middleware argument list. Returns `null` when no
+ * role middleware is detectable (caller treats as "no role requirement"
+ * unless tenancy is also present).
+ */
+function extractRolesFromMiddlewareArgs(args) {
+    const roles = new Set();
+    let sawAny = false;
+    const direct = /\brequire(?:Role|Roles)\(\s*(['"])([^'"]+)\1/g;
+    let match;
+    while ((match = direct.exec(args)) !== null) {
+        sawAny = true;
+        roles.add(match[2] ?? '');
+    }
+    const array = /\brequire(?:Role|Roles)\(\s*\[([^\]]+)\]/g;
+    while ((match = array.exec(args)) !== null) {
+        sawAny = true;
+        const inner = match[1] ?? '';
+        const literal = /(['"])([^'"]+)\1/g;
+        let m2;
+        while ((m2 = literal.exec(inner)) !== null) {
+            roles.add(m2[2] ?? '');
+        }
+    }
+    if (!sawAny)
+        return null;
+    return [...roles].sort();
+}
+/** Tenant check by middleware name (Express/Fastify/Hono shared). */
+const TENANT_MW = /\b(requireTenant|requireTenantScope|tenantGuard|ensureTenant|withTenant)\b/;
+/** `req.user.tenantId` / `tenantId === ...` / `:tenantId` path param. */
+const TENANT_LITERAL = /\btenantId\b/;
+/**
+ * Reads the balanced argument list starting at `start`. Returns the
+ * text between `(` and its matching `)` at depth 0, or `null` if the
+ * parens are unbalanced (defensive: caller treats as "unscannable").
+ */
+function readBalancedArgs(text, start) {
+    let i = start;
+    while (i < text.length && /\s/.test(text[i] ?? ''))
+        i += 1;
+    if (text[i] !== '(')
+        return null;
+    i += 1;
+    let depth = 1;
+    let inStr = null;
+    const startIdx = i;
+    while (i < text.length && depth > 0) {
+        const ch = text[i] ?? '';
+        if (inStr !== null) {
+            if (ch === '\\') {
+                i += 2;
+                continue;
+            }
+            if (ch === inStr)
+                inStr = null;
+            i += 1;
+            continue;
+        }
+        if (ch === '"' || ch === "'" || ch === '`') {
+            inStr = ch;
+            i += 1;
+            continue;
+        }
+        if (ch === '(')
+            depth += 1;
+        else if (ch === ')')
+            depth -= 1;
+        if (depth === 0) {
+            return text.slice(startIdx, i);
+        }
+        i += 1;
+    }
+    return null;
+}
+/** Joins controller prefix + method sub-path; strips trailing slash. */
+function joinPath(prefix, suffix) {
+    if (prefix === '' && suffix === '')
+        return '/';
+    if (prefix === '')
+        return normalisePath(suffix);
+    if (suffix === '')
+        return normalisePath(prefix);
+    return normalisePath(`${prefix}/${suffix}`);
+}
+/** Normalises a route path: ensures leading '/', collapses '//'. */
+function normalisePath(p) {
+    let s = p;
+    if (!s.startsWith('/'))
+        s = `/${s}`;
+    while (s.includes('//'))
+        s = s.replace(/\/\//g, '/');
+    return s;
+}
+/**
+ * Builds the stable resource id from a normalised path. Slashes become
+ * dots; `:` (path params) become the literal string `colon`; non-identifier
+ * characters are dropped. Example: `POST /billing/refund` -> `auth.post.billing.refund`.
+ */
+function buildResourceId(method, path) {
+    const normalised = path.replace(/^\//, '').replace(/\/$/, '');
+    if (normalised === '')
+        return `auth.${method.toLowerCase()}.root`;
+    const segments = normalised.split('/').map((s) => s.replace(/:/g, 'colon').replace(/[^A-Za-z0-9_.-]/g, ''));
+    return `auth.${method.toLowerCase()}.${segments.join('.')}`;
+}
+/** Returns the 1-based line number that contains `offset`. */
+function lineNumberFor(text, offset) {
+    let line = 1;
+    for (let i = 0; i < offset && i < text.length; i += 1) {
+        if (text[i] === '\n')
+            line += 1;
+    }
+    return line;
+}
+/** Returns the 0-based column of `offset` (chars since the last '\n'). */
+function columnFor(text, offset) {
+    let col = 0;
+    for (let i = offset - 1; i >= 0; i -= 1) {
+        if (text[i] === '\n')
+            break;
+        col += 1;
+    }
+    return col;
+}
+/**
+ * Walks a directory tree, returning all `.ts`/`.tsx`/`.js`/`.mjs` files
+ * (skipping excluded directories by name). Deterministic order (sorted).
+ */
+function walkFiles(dir) {
+    const out = [];
+    const stack = [dir];
+    while (stack.length > 0) {
+        const current = stack.pop();
+        if (current === undefined)
+            break;
+        let entries;
+        try {
+            entries = readdirSync(current, { withFileTypes: true }).map((d) => ({
+                name: d.name,
+                isFile: d.isFile(),
+            }));
+        }
+        catch {
+            continue;
+        }
+        for (const entry of entries) {
+            const full = `${current}${sep}${entry.name}`;
+            if (!entry.isFile) {
+                if (SKIP_DIR_NAMES[entry.name] === true)
+                    continue;
+                stack.push(full);
+                continue;
+            }
+            if (/\.(ts|tsx|js|mjs)$/.test(entry.name))
+                out.push(full);
+        }
+    }
+    out.sort();
+    return out;
+}
+/**
+ * Coerces a caller path into the absolute file the detector reads. If
+ * `path` is a directory, it is walked recursively. Otherwise the file is
+ * read directly (must end in a recognised extension).
+ */
+function resolveInputs(paths) {
+    const out = [];
+    for (const input of paths) {
+        const abs = resolve(input);
+        let stat;
+        try {
+            stat = statSync(abs);
+        }
+        catch {
+            continue;
+        }
+        if (stat.isDirectory()) {
+            for (const f of walkFiles(abs))
+                out.push(f);
+        }
+        else if (/\.(ts|tsx|js|mjs)$/.test(abs)) {
+            out.push(abs);
+        }
+    }
+    out.sort();
+    return out;
+}
+/**
+ * Pulls a list of string literals out of an `@Roles(...)` argument list.
+ * Accepts `'admin', "manager"` (single + double). Returns null when the
+ * argument list cannot be parsed (caller treats as "no role
+ * requirement detected" rather than throwing).
+ */
+function extractRoleLiterals(args) {
+    const out = [];
+    const re = /(['"])([^'"]+)\1/g;
+    let match;
+    let sawAny = false;
+    while ((match = re.exec(args)) !== null) {
+        sawAny = true;
+        out.push(match[2] ?? '');
+    }
+    if (!sawAny)
+        return null;
+    return out;
+}
+/**
+ * Scans one file's text for NestJS class-level controller decorators
+ * followed by method-level decorators within the class body, building
+ * the `<METHOD> <PATH>` declaration pair. We look for `@UseGuards(RolesGuard)`
+ * or `@Roles(...)` anywhere inside the class body, then emit one
+ * resource per guarded method. Unguarded controllers produce nothing.
+ */
+function scanNest(text, file) {
+    const out = [];
+    const controllerRe = /@Controller\(\s*(['"])([^'"]+)\1\s*\)/g;
+    let controller;
+    while ((controller = controllerRe.exec(text)) !== null) {
+        const classPath = (controller[2] ?? '').trim();
+        const classStart = controller.index + controller[0].length;
+        // Find the next class body closing brace at depth 0 (best-effort).
+        let depth = 0;
+        let classEnd = text.length;
+        for (let i = classStart; i < text.length; i += 1) {
+            const ch = text[i];
+            if (ch === '{')
+                depth += 1;
+            else if (ch === '}') {
+                depth -= 1;
+                if (depth === 0) {
+                    classEnd = i;
+                    break;
+                }
+            }
+        }
+        const classBody = text.slice(classStart, classEnd);
+        const hasGuard = /@(?:UseGuards)\(\s*RolesGuard\s*\)/.test(classBody);
+        const rolesMatch = /@(?:Roles)\(\s*([^)]+)\)/.exec(classBody);
+        const roles = rolesMatch ? extractRoleLiterals(rolesMatch[1] ?? '') : null;
+        if (!hasGuard && roles === null)
+            continue;
+        const declaredRoles = roles ?? [];
+        const nestMethod = /@(Get|Post|Put|Patch|Delete|All)\(\s*(['"])([^'"]*)\2\s*\)/g;
+        nestMethod.lastIndex = 0;
+        let method;
+        while ((method = nestMethod.exec(classBody)) !== null) {
+            const verb = (method[1] ?? '').toUpperCase();
+            const subPathRaw = method[3] ?? '';
+            const subPath = subPathRaw.trim();
+            const path = joinPath(classPath, subPath);
+            const offset = method.index + classStart;
+            out.push({
+                method: verb,
+                path,
+                framework: 'nestjs',
+                roles: declaredRoles,
+                tenancy: TENANT_LITERAL.test(classBody) ? 'tenant-bound' : 'none',
+                file,
+                line: lineNumberFor(text, offset),
+                col: columnFor(text, offset),
+            });
+        }
+    }
+    return out;
+}
+/**
+ * Scans Express middleware chain routes. The roles + tenancy come from
+ * the middleware names AFTER the path string and BEFORE the handler
+ * (final function). We do NOT trust arbitrary strings; we only inspect
+ * middleware identifiers.
+ */
+function scanExpress(text, file) {
+    const out = [];
+    const route = /\b(app|router)\.(get|post|put|patch|delete|all)\(\s*(['"])([^'"]+)\3/g;
+    route.lastIndex = 0;
+    let m;
+    while ((m = route.exec(text)) !== null) {
+        const verb = (m[2] ?? '').toUpperCase();
+        const routePath = (m[4] ?? '').trim();
+        // Find the `(` ourselves (the regex consumed `path` already, so m[0]
+        // ends at the closing quote of the path string, not at the `(`).
+        const parenIdx = text.indexOf('(', m.index);
+        if (parenIdx < 0)
+            continue;
+        const callArgs = readBalancedArgs(text, parenIdx);
+        if (callArgs === null)
+            continue;
+        const roles = extractRolesFromMiddlewareArgs(callArgs);
+        const tenancy = TENANT_MW.test(callArgs) || TENANT_LITERAL.test(callArgs)
+            ? 'tenant-bound'
+            : 'none';
+        if (roles === null && tenancy === 'none')
+            continue;
+        out.push({
+            method: verb,
+            path: routePath,
+            framework: 'express',
+            roles: roles ?? [],
+            tenancy,
+            file,
+            line: lineNumberFor(text, m.index),
+            col: columnFor(text, m.index),
+        });
+    }
+    return out;
+}
+/** Scans Fastify route declarations. */
+function scanFastify(text, file) {
+    const out = [];
+    const route = /\bfastify\.(get|post|put|patch|delete|all)\(\s*(['"])([^'"]+)\2/g;
+    route.lastIndex = 0;
+    let m;
+    while ((m = route.exec(text)) !== null) {
+        const verb = (m[1] ?? '').toUpperCase();
+        const routePath = (m[3] ?? '').trim();
+        const parenIdx = text.indexOf('(', m.index);
+        if (parenIdx < 0)
+            continue;
+        const callArgs = readBalancedArgs(text, parenIdx);
+        if (callArgs === null)
+            continue;
+        const roles = extractRolesFromMiddlewareArgs(callArgs);
+        const tenancy = TENANT_MW.test(callArgs) || TENANT_LITERAL.test(callArgs)
+            ? 'tenant-bound'
+            : 'none';
+        if (roles === null && tenancy === 'none')
+            continue;
+        out.push({
+            method: verb,
+            path: routePath,
+            framework: 'fastify',
+            roles: roles ?? [],
+            tenancy,
+            file,
+            line: lineNumberFor(text, m.index),
+            col: columnFor(text, m.index),
+        });
+    }
+    return out;
+}
+/** Scans Hono route declarations (Hono middleware chain). */
+function scanHono(text, file) {
+    const out = [];
+    const route = /\bapp\.(get|post|put|patch|delete|all)\(\s*(['"])([^'"]+)\2/g;
+    route.lastIndex = 0;
+    let m;
+    while ((m = route.exec(text)) !== null) {
+        const verb = (m[1] ?? '').toUpperCase();
+        const routePath = (m[3] ?? '').trim();
+        const parenIdx = text.indexOf('(', m.index);
+        if (parenIdx < 0)
+            continue;
+        const callArgs = readBalancedArgs(text, parenIdx);
+        if (callArgs === null)
+            continue;
+        const roles = extractRolesFromMiddlewareArgs(callArgs);
+        const tenancy = TENANT_MW.test(callArgs) || TENANT_LITERAL.test(callArgs)
+            ? 'tenant-bound'
+            : 'none';
+        if (roles === null && tenancy === 'none')
+            continue;
+        out.push({
+            method: verb,
+            path: routePath,
+            framework: 'hono',
+            roles: roles ?? [],
+            tenancy,
+            file,
+            line: lineNumberFor(text, m.index),
+            col: columnFor(text, m.index),
+        });
+    }
+    return out;
+}
+/**
+ * Scans one file's text and returns every endpoint discovered across all
+ * supported frameworks. The detector NEVER throws; an unreadable file
+ * produces an empty list (fail-closed).
+ */
+function scanFile(text, file) {
+    const out = [];
+    for (const ep of scanNest(text, file))
+        out.push(ep);
+    // For Express/Fastify/Hono, only run the scanner whose import the
+    // file uses. `app.post` is the same shape across all three; without
+    // import-based disambiguation the first scanner to run wins and
+    // wrong-attribution leaks across frameworks.
+    if (/\bfrom\s+['"]hono['"]/.test(text) || /\brequire\(\s*['"]hono['"]/.test(text)) {
+        for (const ep of scanHono(text, file))
+            out.push(ep);
+    }
+    else if (/\bfrom\s+['"]fastify['"]/.test(text) || /\brequire\(\s*['"]fastify['"]/.test(text)) {
+        for (const ep of scanFastify(text, file))
+            out.push(ep);
+    }
+    else {
+        for (const ep of scanExpress(text, file))
+            out.push(ep);
+    }
+    return out;
+}
+/**
+ * Builds one `auth.resource` from one detected endpoint. The output
+ * shape is the frozen GPP/3 `Resource` schema (id, kind, source,
+ * location, detectorVersion, attributes).
+ */
+function endpointToResource(root, ep) {
+    const id = buildResourceId(ep.method, ep.path);
+    const sourceRel = relative(root, ep.file).split(sep).join('/');
+    const location = { file: sourceRel, line: ep.line, col: ep.col };
+    return {
+        schemaVersion: 1,
+        id,
+        kind: 'auth.resource',
+        source: sourceRel,
+        location,
+        detectorVersion: PACK_VERSION,
+        attributes: {
+            method: ep.method,
+            path: ep.path,
+            framework: ep.framework,
+            roleRequirement: ep.roles,
+            tenancy: ep.tenancy,
+        },
+    };
+}
+/**
+ * Creates the discover-capable detector module. The default export of
+ * the pack is `createAuthDetector()` — the CLI in-process contract.
+ *
+ * Args:
+ *   options: Optional root override for repo-relative `source` paths.
+ *
+ * Returns:
+ *   AuthDetector: the pinned `{ discover(paths) }` module.
+ */
+export function createAuthDetector(options = {}) {
+    const root = options.root ?? process.cwd();
+    return {
+        discover(paths) {
+            if (paths.length === 0) {
+                return { resources: [], unresolved: [], findings: [], classificationSignals: [] };
+            }
+            const files = resolveInputs(paths);
+            const endpoints = [];
+            const scanned = [];
+            const findings = [];
+            for (const file of files) {
+                let text;
+                try {
+                    text = readFileSync(file, 'utf8');
+                }
+                catch (error) {
+                    // Fail-visible coverage (ADR 0003 D4): an unreadable file is a
+                    // finding, never a silent hole in the scan.
+                    findings.push({
+                        code: 'SOURCE_READ_ERROR',
+                        detail: `failed to read '${relative(root, file).split(sep).join('/')}': ${error instanceof Error ? error.message : String(error)}`,
+                        locations: [{ file: relative(root, file).split(sep).join('/'), line: 1, col: 0 }],
+                    });
+                    continue;
+                }
+                scanned.push(relative(root, file).split(sep).join('/'));
+                for (const endpoint of scanFile(text, file))
+                    endpoints.push(endpoint);
+            }
+            endpoints.sort((a, b) => {
+                const idA = buildResourceId(a.method, a.path);
+                const idB = buildResourceId(b.method, b.path);
+                return idA < idB ? -1 : idA > idB ? 1 : 0;
+            });
+            const resources = endpoints.map((ep) => endpointToResource(root, ep));
+            // Phase-4 linkage (plan phase 4, ADR 0003 D1/D2): each guarded
+            // endpoint is externally reachable — one code-positive `exposure`
+            // signal per endpoint plus `lifecycle.<op>` from the HTTP method
+            // (POST⇒create, GET/HEAD⇒read, PUT/PATCH⇒update, DELETE⇒delete),
+            // and a `plane` signal asserting `tenant` when a tenant guard is
+            // present. Targets are the PATH-DERIVED resource name (last
+            // non-parameter segment) so the core classifier converges routes
+            // with tables deterministically; an underivable name emits no
+            // signal (nothing is claimed). `app.all`-style methods assert no
+            // operation. No negative proofs exist in this pack.
+            const classificationSignals = endpoints.flatMap((ep) => {
+                const location = {
+                    file: relative(root, ep.file).split(sep).join('/'),
+                    line: ep.line,
+                    col: ep.col,
+                };
+                const target = lastPathName(ep.path);
+                if (target === null)
+                    return [];
+                const signals = [
+                    {
+                        schemaVersion: 1,
+                        target: { resourceName: target },
+                        dimension: 'exposure',
+                        assertion: 'route',
+                        basis: 'code-positive',
+                        source: PACK_PLUGIN_ID,
+                        location,
+                        detector: { id: PACK_PLUGIN_ID, version: PACK_VERSION },
+                    },
+                ];
+                const operation = operationForMethod(ep.method);
+                if (operation !== null) {
+                    signals.push({
+                        schemaVersion: 1,
+                        target: { resourceName: target },
+                        dimension: `lifecycle.${operation}`,
+                        assertion: true,
+                        basis: 'code-positive',
+                        source: PACK_PLUGIN_ID,
+                        location,
+                        detector: { id: PACK_PLUGIN_ID, version: PACK_VERSION },
+                    });
+                }
+                if (ep.tenancy === 'tenant-bound') {
+                    signals.push({
+                        schemaVersion: 1,
+                        target: { resourceName: target },
+                        dimension: 'plane',
+                        assertion: 'tenant',
+                        basis: 'code-positive',
+                        source: PACK_PLUGIN_ID,
+                        location,
+                        detector: { id: PACK_PLUGIN_ID, version: PACK_VERSION },
+                    });
+                }
+                return signals;
+            });
+            findings.sort((a, b) => (a.detail < b.detail ? -1 : a.detail > b.detail ? 1 : 0));
+            return { resources, unresolved: [], findings, classificationSignals, scannedPaths: scanned.sort() };
+        },
+    };
+}
+/** The lifecycle operation an HTTP method evidences, if any. */
+function operationForMethod(method) {
+    switch (method) {
+        case 'POST': return 'create';
+        case 'GET':
+        case 'HEAD': return 'read';
+        case 'PUT':
+        case 'PATCH': return 'update';
+        case 'DELETE': return 'delete';
+        default: return null;
+    }
+}
+/** Last non-parameter path segment, lower-cased; null when underivable. */
+function lastPathName(rawPath) {
+    const segments = rawPath.split('/').filter((segment) => segment.length > 0);
+    for (let i = segments.length - 1; i >= 0; i--) {
+        const segment = segments[i];
+        if (segment === undefined)
+            continue;
+        if (segment.startsWith(':') || segment.startsWith('{') || segment.startsWith('*'))
+            continue;
+        if (/^\d+$/.test(segment))
+            continue;
+        return segment.toLowerCase();
+    }
+    return null;
+}
+//# sourceMappingURL=detector.js.map

package/dist/detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detector.js","sourceRoot":"","sources":["../src/detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAGnD,OAAO,EAAE,cAAc,EAAiB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAkC5D;;;;GAIG;AACH,MAAM,cAAc,GAAyB;IAC3C,YAAY,EAAE,IAAI;IAClB,IAAI,EAAE,IAAI;IACV,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,IAAI;IACd,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,IAAI;IACd,GAAG,EAAE,IAAI;IACT,WAAW,EAAE,IAAI;CAClB,CAAC;AAEF;;;;;GAKG;AACH,SAAS,8BAA8B,CAAC,IAAY;IAClD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,MAAM,GAAG,+CAA+C,CAAC;IAC/D,IAAI,KAA6B,CAAC;IAClC,OAAO,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,GAAG,IAAI,CAAC;QACd,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5B,CAAC;IACD,MAAM,KAAK,GAAG,2CAA2C,CAAC;IAC1D,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC3C,MAAM,GAAG,IAAI,CAAC;QACd,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,mBAAmB,CAAC;QACpC,IAAI,EAA0B,CAAC;QAC/B,OAAO,CAAC,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAC3C,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,qEAAqE;AACrE,MAAM,SAAS,GAAG,4EAA4E,CAAC;AAE/F,yEAAyE;AACzE,MAAM,cAAc,GAAG,cAAc,CAAC;AAEtC;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,IAAY,EAAE,KAAa;IACnD,IAAI,CAAC,GAAG,KAAK,CAAC;IACd,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IACjC,CAAC,IAAI,CAAC,CAAC;IACP,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAA2B,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,CAAC,IAAI,CAAC,CAAC;gBACP,SAAS;YACX,CAAC;YACD,IAAI,EAAE,KAAK,KAAK;gBAAE,KAAK,GAAG,IAAI,CAAC;YAC/B,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YAC3C,KAAK,GAAG,EAAE,CAAC;YACX,CAAC,IAAI,CAAC,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,IAAI,CAAC,CAAC;aACtB,IAAI,EAAE,KAAK,GAAG;YAAE,KAAK,IAAI,CAAC,CAAC;QAChC,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QACjC,CAAC;QACD,CAAC,IAAI,CAAC,CAAC;IACT,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,SAAS,QAAQ,CAAC,MAAc,EAAE,MAAc;IAC9C,IAAI,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAC/C,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD,OAAO,aAAa,CAAC,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,oEAAoE;AACpE,SAAS,aAAa,CAAC,CAAS;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC;IACpC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAc,EAAE,IAAY;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9D,IAAI,UAAU,KAAK,EAAE;QAAE,OAAO,QAAQ,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC;IAClE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5G,OAAO,QAAQ,MAAM,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,8DAA8D;AAC9D,SAAS,aAAa,CAAC,IAAY,EAAE,MAAc;IACjD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,IAAI,IAAI,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,IAAY,EAAE,MAAc;IAC7C,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,MAAM;QAC5B,GAAG,IAAI,CAAC,CAAC;IACX,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAa,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM;QACjC,IAAI,OAA4C,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAClE,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;aACnB,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,GAAG,OAAO,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC7C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,IAAI,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI;oBAAE,SAAS;gBAClD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACjB,SAAS;YACX,CAAC;YACD,IAAI,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,EAAE,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAwB;IAC7C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,GAAG,CAAC,IAAI,EAAE,CAAC;IACX,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACvC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,EAAE,GAAG,mBAAmB,CAAC;IAC/B,IAAI,KAA6B,CAAC;IAClC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACxC,MAAM,GAAG,IAAI,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3B,CAAC;IACD,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;GAMG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,MAAM,YAAY,GAAG,wCAAwC,CAAC;IAC9D,IAAI,UAAkC,CAAC;IACvC,OAAO,CAAC,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvD,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3D,mEAAmE;QACnE,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACnB,IAAI,EAAE,KAAK,GAAG;gBAAE,KAAK,IAAI,CAAC,CAAC;iBACtB,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;gBACpB,KAAK,IAAI,CAAC,CAAC;gBACX,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,QAAQ,GAAG,CAAC,CAAC;oBACb,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,oCAAoC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACtE,MAAM,UAAU,GAAG,0BAA0B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3E,IAAI,CAAC,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1C,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,6DAA6D,CAAC;QACjF,UAAU,CAAC,SAAS,GAAG,CAAC,CAAC;QACzB,IAAI,MAA8B,CAAC;QACnC,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,GAAG,UAAU,CAAC;YACzC,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,IAAI;gBACZ,IAAI;gBACJ,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,aAAa;gBACpB,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM;gBACjE,IAAI;gBACJ,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC;gBACjC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC;aAC7B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,uEAAuE,CAAC;IACtF,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACpB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,qEAAqE;QACrE,iEAAiE;QACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,QAAQ,GAAG,CAAC;YAAE,SAAS;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvE,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,MAAM,CAAC;QACX,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM;YAAE,SAAS;QACnD,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO;YACP,IAAI;YACJ,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;YAClC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wCAAwC;AACxC,SAAS,WAAW,CAAC,IAAY,EAAE,IAAY;IAC7C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,kEAAkE,CAAC;IACjF,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACpB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,QAAQ,GAAG,CAAC;YAAE,SAAS;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvE,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,MAAM,CAAC;QACX,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM;YAAE,SAAS;QACnD,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,SAAS;YACpB,KAAK,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO;YACP,IAAI;YACJ,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;YAClC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6DAA6D;AAC7D,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,8DAA8D,CAAC;IAC7E,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACpB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5C,IAAI,QAAQ,GAAG,CAAC;YAAE,SAAS;QAC3B,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI;YAAE,SAAS;QAChC,MAAM,KAAK,GAAG,8BAA8B,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC;YACvE,CAAC,CAAC,cAAc;YAChB,CAAC,CAAC,MAAM,CAAC;QACX,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,MAAM;YAAE,SAAS;QACnD,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAI;YACZ,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,MAAM;YACjB,KAAK,EAAE,KAAK,IAAI,EAAE;YAClB,OAAO;YACP,IAAI;YACJ,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;YAClC,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpD,kEAAkE;IAClE,oEAAoE;IACpE,gEAAgE;IAChE,6CAA6C;IAC7C,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClF,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC;SAAM,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/F,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,EAAE,IAAI,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,kBAAkB,CAAC,IAAY,EAAE,EAAY;IACpD,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAa,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC;IAC3E,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,EAAE;QACF,IAAI,EAAE,eAAe;QACrB,MAAM,EAAE,SAAS;QACjB,QAAQ;QACR,eAAe,EAAE,YAAY;QAC7B,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,eAAe,EAAE,EAAE,CAAC,KAAK;YACzB,OAAO,EAAE,EAAE,CAAC,OAAO;SACpB;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAA+B,EAAE;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IAC3C,OAAO;QACL,QAAQ,CAAC,KAAK;YACZ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC;YACpF,CAAC;YACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,SAAS,GAAe,EAAE,CAAC;YACjC,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAiC,EAAE,CAAC;YAClD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,IAAY,CAAC;gBACjB,IAAI,CAAC;oBACH,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;gBACpC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,+DAA+D;oBAC/D,4CAA4C;oBAC5C,QAAQ,CAAC,IAAI,CAAC;wBACZ,IAAI,EAAE,mBAAmB;wBACzB,MAAM,EAAE,mBAAmB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;wBAClI,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;qBAClF,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;gBACxD,KAAK,MAAM,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;oBAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxE,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;gBACtB,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC9C,MAAM,GAAG,GAAG,eAAe,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC9C,OAAO,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,CAAC,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;YACtE,+DAA+D;YAC/D,kEAAkE;YAClE,iEAAiE;YACjE,iEAAiE;YACjE,iEAAiE;YACjE,4DAA4D;YAC5D,iEAAiE;YACjE,8DAA8D;YAC9D,iEAAiE;YACjE,oDAAoD;YACpD,MAAM,qBAAqB,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE;gBACrD,MAAM,QAAQ,GAAa;oBACzB,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBAClD,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,GAAG,EAAE,EAAE,CAAC,GAAG;iBACZ,CAAC;gBACF,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBACrC,IAAI,MAAM,KAAK,IAAI;oBAAE,OAAO,EAAE,CAAC;gBAC/B,MAAM,OAAO,GAA8C;oBACzD;wBACE,aAAa,EAAE,CAAC;wBAChB,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE;wBAChC,SAAS,EAAE,UAAU;wBACrB,SAAS,EAAE,OAAO;wBAClB,KAAK,EAAE,eAAe;wBACtB,MAAM,EAAE,cAAc;wBACtB,QAAQ;wBACR,QAAQ,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE;qBACxD;iBACF,CAAC;gBACF,MAAM,SAAS,GAAG,kBAAkB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;gBAChD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,OAAO,CAAC,IAAI,CAAC;wBACX,aAAa,EAAE,CAAC;wBAChB,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE;wBAChC,SAAS,EAAE,aAAa,SAAS,EAAE;wBACnC,SAAS,EAAE,IAAI;wBACf,KAAK,EAAE,eAAe;wBACtB,MAAM,EAAE,cAAc;wBACtB,QAAQ;wBACR,QAAQ,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE;qBACxD,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,EAAE,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;oBAClC,OAAO,CAAC,IAAI,CAAC;wBACX,aAAa,EAAE,CAAC;wBAChB,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE;wBAChC,SAAS,EAAE,OAAO;wBAClB,SAAS,EAAE,QAAQ;wBACnB,KAAK,EAAE,eAAe;wBACtB,MAAM,EAAE,cAAc;wBACtB,QAAQ;wBACR,QAAQ,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,EAAE,YAAY,EAAE;qBACxD,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC,CAAC,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,EAAE,qBAAqB,EAAE,YAAY,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACtG,CAAC;KACF,CAAC;AACJ,CAAC;AACD,gEAAgE;AAChE,SAAS,kBAAkB,CACzB,MAAc;IAEd,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC7B,KAAK,KAAK,CAAC;QACX,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;QAC3B,KAAK,KAAK,CAAC;QACX,KAAK,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC9B,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC/B,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;IACvB,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,YAAY,CAAC,OAAe;IACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC5E,KAAK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,OAAO,KAAK,SAAS;YAAE,SAAS;QACpC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC5F,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,SAAS;QACpC,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export { PACK_PLUGIN_ID, PACK_VERSION } from './version.js';
+export { createAuthDetector, type AuthDetector, type AuthDetectorOptions, type AuthFramework, type Tenancy, } from './detector.js';
+export { AuthEntityAdapterSchema, validateAuthEntityAdapter, type AuthEntityAdapter, type AuthAdapterContext, type NormalizedAuthEntity, type AuthEntityAdapterValidation, } from './adapter-schema.js';
+export { AUTH_OBLIGATION_CONTRACTS, obligationId, type AuthObligationContract, } from './obligations.js';
+/** The default CLI in-process plugin module: `{ discover(paths) }`. */
+declare const _default: import("./detector.js").AuthDetector;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAkCA,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EACL,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,OAAO,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,yBAAyB,EACzB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,GACjC,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,KAAK,sBAAsB,GAC5B,MAAM,kBAAkB,CAAC;AAE1B,uEAAuE;;AACvE,wBAAoC"}