@hed-hog/core 0.0.4

package/dist/auth/auth.controller.d.ts

@@ -0,0 +1,167 @@
+import { TokenService } from '../token/token.service';
+import { CreateWithEmailAndPasswordDTO } from '../user/dto/create-with-email-and-password.dto';
+import { UserService } from '../user/user.service';
+import { AuthService } from './auth.service';
+import { ForgetDTO } from './dto/forget.dto';
+import { LoginWithCodeDTO } from './dto/login-with-code.dto';
+import { LoginWithRecoveryCodeDTO } from './dto/login-with-recovery-code';
+import { LoginDTO } from './dto/login.dto';
+import { ResendMfaCodeDTO } from './dto/resend-mfa-code.dto';
+import { ResetDTO } from './dto/reset.dto';
+export declare class AuthController {
+    private readonly service;
+    private readonly token;
+    private readonly user;
+    constructor(service: AuthService, token: TokenService, user: UserService);
+    verify({ id }: {
+        id: any;
+    }, locale: string): Promise<{
+        user_account: {
+            id: number;
+            provider: import("@prisma/client").$Enums.user_account_provider_enum;
+            created_at: Date;
+            updated_at: Date;
+            email: string | null;
+            user_id: number;
+            provider_user_id: string;
+            scopes: string | null;
+            refresh_token: import("@prisma/client/runtime/library").Bytes | null;
+            token_expires_at: Date | null;
+        }[];
+        user_activity: {
+            id: number;
+            action: string;
+            created_at: Date;
+            updated_at: Date;
+            user_id: number;
+        }[];
+        user_credential: {
+            type: import("@prisma/client").$Enums.user_credential_type_enum;
+            id: number;
+            hash: string;
+            created_at: Date;
+            updated_at: Date;
+            user_id: number;
+            revoked_at: Date | null;
+            expires_at: Date | null;
+            requires_reset: boolean;
+        }[];
+        user_identifier: {
+            value: string;
+            type: import("@prisma/client").$Enums.user_identifier_type_enum;
+            id: number;
+            created_at: Date;
+            updated_at: Date;
+            user_id: number;
+            verified_at: Date | null;
+        }[];
+        user_session: {
+            id: number;
+            hash: string;
+            created_at: Date;
+            updated_at: Date;
+            user_id: number;
+            revoked_at: Date | null;
+            expires_at: Date;
+            ip_address: string;
+            user_agent: string;
+        }[];
+    } & {
+        name: string;
+        id: number;
+        created_at: Date;
+        updated_at: Date;
+        photo_id: number | null;
+        suspended_until: Date | null;
+        suspended_reason: string | null;
+        deactivated_at: Date | null;
+    }>;
+    refresh(locale: string, req: any, res: any, refreshTokenFromBody: string, userAgent: string, ipAddress: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+    } | {
+        accessToken: string;
+        refreshToken?: undefined;
+    }>;
+    login(locale: string, data: LoginDTO, ipAddress: string, userAgent: string, res: any): Promise<{
+        requiresMfa: true;
+        mfaToken: string;
+        mfaMethods: {
+            type: import("@prisma/client").$Enums.user_mfa_type_enum;
+            id: number;
+        }[];
+        accessToken?: undefined;
+        refreshToken?: undefined;
+    } | {
+        accessToken: string;
+        refreshToken: string;
+        requiresMfa?: undefined;
+        mfaToken?: undefined;
+        mfaMethods?: undefined;
+    } | {
+        accessToken: string;
+        requiresMfa?: undefined;
+        mfaToken?: undefined;
+        mfaMethods?: undefined;
+        refreshToken?: undefined;
+    }>;
+    registerWithEmailAndPassword(locale: string, data: CreateWithEmailAndPasswordDTO): Promise<{
+        user: {
+            name: string;
+            id: number;
+            created_at: Date;
+            updated_at: Date;
+            photo_id: number | null;
+            suspended_until: Date | null;
+            suspended_reason: string | null;
+            deactivated_at: Date | null;
+        };
+        challenge: {
+            codeHash: string;
+        };
+    }>;
+    loginCode(locale: string, { token, code, methodType }: LoginWithCodeDTO, ipAddress: string, userAgent: string, res: any): Promise<{
+        accessToken: string;
+        refreshToken: string;
+    }>;
+    loginRecoveryCode(locale: string, { token, code }: LoginWithRecoveryCodeDTO, ipAddress: string, userAgent: string, res: any): Promise<{
+        accessToken: string;
+        refreshToken: string;
+    }>;
+    resendMfaCode(locale: string, { token }: ResendMfaCodeDTO): Promise<{
+        success: boolean;
+        hasEmailMfa: boolean;
+    }>;
+    generateWebAuthnOptions({ mfaToken }: {
+        mfaToken: string;
+    }): Promise<import("@simplewebauthn/server").PublicKeyCredentialRequestOptionsJSON>;
+    verifyWebAuthn(locale: string, { mfaToken, assertionResponse }: {
+        mfaToken: string;
+        assertionResponse: any;
+    }, ipAddress: string, userAgent: string, res: any): Promise<{
+        accessToken: string;
+        refreshToken: string;
+    }>;
+    forgot(locale: string, data: ForgetDTO): Promise<{
+        success: boolean;
+    }>;
+    logout(req: any, res: any, refreshTokenFromBody: string): Promise<{
+        success: boolean;
+    }>;
+    forgotReset(locale: string, { password, code }: ResetDTO, ipAddress: string, userAgent: string): Promise<{
+        accessToken: string;
+        refreshToken: string;
+        session: {
+            id: number;
+            hash: string;
+            created_at: Date;
+            updated_at: Date;
+            user_id: number;
+            revoked_at: Date | null;
+            expires_at: Date;
+            ip_address: string;
+            user_agent: string;
+        };
+    }>;
+}
+//# sourceMappingURL=auth.controller.d.ts.map

package/dist/auth/auth.controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.controller.d.ts","sourceRoot":"","sources":["../../src/auth/auth.controller.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,6BAA6B,EAAE,MAAM,gDAAgD,CAAC;AAC/F,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C,qBACa,cAAc;IAGvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAExB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAEtB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAJJ,OAAO,EAAE,WAAW,EAEpB,KAAK,EAAE,YAAY,EAEnB,IAAI,EAAE,WAAW;IAK9B,MAAM,CAAS,EAAE,EAAE,EAAE;;KAAA,EAAY,MAAM,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAM/C,OAAO,CACD,MAAM,EAAE,MAAM,EACjB,GAAG,KAAA,EACkB,GAAG,KAAA,EACT,oBAAoB,EAAE,MAAM,EAC3B,SAAS,EAAE,MAAM,EAClC,SAAS,EAAE,MAAM;;;;;;;IAiBnB,KAAK,CACC,MAAM,EAAE,MAAM,EAChB,IAAI,EAAE,QAAQ,EAChB,SAAS,EAAE,MAAM,EACA,SAAS,EAAE,MAAM,EACZ,GAAG,KAAA;;;;;;;;;;;;;;;;;;;;;;IAiB3B,4BAA4B,CACtB,MAAM,EAAE,MAAM,EAChB,IAAI,EAAE,6BAA6B;;;;;;;;;;;;;;;IAOvC,SAAS,CACH,MAAM,EAAE,MAAM,EAChB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,gBAAgB,EAC/C,SAAS,EAAE,MAAM,EACA,SAAS,EAAE,MAAM,EACZ,GAAG,KAAA;;;;IAiB3B,iBAAiB,CACX,MAAM,EAAE,MAAM,EAChB,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,wBAAwB,EAC3C,SAAS,EAAE,MAAM,EACA,SAAS,EAAE,MAAM,EACZ,GAAG,KAAA;;;;IAgB3B,aAAa,CACP,MAAM,EAAE,MAAM,EAChB,EAAE,KAAK,EAAE,EAAE,gBAAgB;;;;IAO/B,uBAAuB,CACnB,EAAE,QAAQ,EAAE,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE;IAOtC,cAAc,CACR,MAAM,EAAE,MAAM,EAChB,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,GAAG,CAAA;KAAE,EAC/E,SAAS,EAAE,MAAM,EACA,SAAS,EAAE,MAAM,EACZ,GAAG,KAAA;;;;IAgB3B,MAAM,CACA,MAAM,EAAE,MAAM,EAExB,IAAI,EAAE,SAAS;;;IAOX,MAAM,CACH,GAAG,KAAA,EACkB,GAAG,KAAA,EACT,oBAAoB,EAAE,MAAM;;;IAa9C,WAAW,CACL,MAAM,EAAE,MAAM,EAChB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAC9B,SAAS,EAAE,MAAM,EACA,SAAS,EAAE,MAAM;;;;;;;;;;;;;;;CAI3C"}

package/dist/auth/auth.controller.js

@@ -0,0 +1,236 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthController = void 0;
+const api_1 = require("@hed-hog/api");
+const api_locale_1 = require("@hed-hog/api-locale");
+const common_1 = require("@nestjs/common");
+const token_service_1 = require("../token/token.service");
+const create_with_email_and_password_dto_1 = require("../user/dto/create-with-email-and-password.dto");
+const user_service_1 = require("../user/user.service");
+const auth_service_1 = require("./auth.service");
+const forget_dto_1 = require("./dto/forget.dto");
+const login_with_code_dto_1 = require("./dto/login-with-code.dto");
+const login_with_recovery_code_1 = require("./dto/login-with-recovery-code");
+const login_dto_1 = require("./dto/login.dto");
+const resend_mfa_code_dto_1 = require("./dto/resend-mfa-code.dto");
+const reset_dto_1 = require("./dto/reset.dto");
+let AuthController = class AuthController {
+    constructor(service, token, user) {
+        this.service = service;
+        this.token = token;
+        this.user = user;
+    }
+    async verify({ id }, locale) {
+        return this.service.verifyUser(locale, id);
+    }
+    async refresh(locale, req, res, refreshTokenFromBody, userAgent, ipAddress) {
+        const currentRefreshToken = req.cookies['rt'] || refreshTokenFromBody;
+        const { session, refreshToken, accessToken } = await this.service.refreshAccessToken(locale, currentRefreshToken, ipAddress, userAgent);
+        await this.token.setRefreshTokenCookie(locale, res, refreshToken, session.expires_at);
+        if (!req.cookies['rt'] && refreshTokenFromBody) {
+            return {
+                accessToken,
+                refreshToken
+            };
+        }
+        return { accessToken };
+    }
+    async login(locale, data, ipAddress, userAgent, res) {
+        const { accessToken, refreshToken, session, mfaMethods, mfaToken, requiresMfa } = await this.service.loginWithEmailAndPassword(locale, ipAddress, userAgent, data);
+        if (requiresMfa) {
+            return { requiresMfa, mfaToken, mfaMethods };
+        }
+        await this.token.setRefreshTokenCookie(locale, res, refreshToken, session.expires_at);
+        if (data.refreshToken) {
+            return { accessToken, refreshToken };
+        }
+        return { accessToken };
+    }
+    async registerWithEmailAndPassword(locale, data) {
+        return this.user.createWithEmailAndPassword(locale, data);
+    }
+    async loginCode(locale, { token, code, methodType }, ipAddress, userAgent, res) {
+        const { accessToken, refreshToken, session } = await this.service.verifyMfaCode(locale, token, code, ipAddress, userAgent, methodType);
+        await this.token.setRefreshTokenCookie(locale, res, refreshToken, session.expires_at);
+        return { accessToken, refreshToken };
+    }
+    async loginRecoveryCode(locale, { token, code }, ipAddress, userAgent, res) {
+        const { accessToken, refreshToken, session } = await this.service.verifyMfaRecoveryCode(locale, token, code, ipAddress, userAgent);
+        await this.token.setRefreshTokenCookie(locale, res, refreshToken, session.expires_at);
+        return { accessToken, refreshToken };
+    }
+    async resendMfaCode(locale, { token }) {
+        return this.service.resendMfaCode(locale, token);
+    }
+    async generateWebAuthnOptions({ mfaToken }) {
+        return this.service.generateWebAuthnAuthenticationOptions(mfaToken);
+    }
+    async verifyWebAuthn(locale, { mfaToken, assertionResponse }, ipAddress, userAgent, res) {
+        const { accessToken, refreshToken, session } = await this.service.verifyWebAuthnAuthentication(locale, mfaToken, assertionResponse, ipAddress, userAgent);
+        await this.token.setRefreshTokenCookie(locale, res, refreshToken, session.expires_at);
+        return { accessToken, refreshToken };
+    }
+    async forgot(locale, data) {
+        return this.service.forgotPassword(locale, data);
+    }
+    async logout(req, res, refreshTokenFromBody) {
+        const refreshToken = req.cookies['rt'] || refreshTokenFromBody;
+        if (!refreshToken) {
+            throw new common_1.BadRequestException('Refresh token not provided');
+        }
+        await this.service.logout(res, req, refreshToken);
+        return { success: true };
+    }
+    async forgotReset(locale, { password, code }, ipAddress, userAgent) {
+        return this.service.forgotResetPassword(locale, password, code, ipAddress, userAgent);
+    }
+};
+exports.AuthController = AuthController;
+__decorate([
+    (0, api_1.Role)(),
+    (0, common_1.Get)('verify'),
+    __param(0, (0, api_1.User)()),
+    __param(1, (0, api_locale_1.Locale)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, String]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "verify", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('refresh'),
+    __param(0, (0, api_locale_1.Locale)()),
+    __param(1, (0, common_1.Req)()),
+    __param(2, (0, common_1.Res)({ passthrough: true })),
+    __param(3, (0, common_1.Body)('refreshToken')),
+    __param(4, (0, common_1.Headers)('user-agent')),
+    __param(5, (0, common_1.Ip)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, Object, String, String, String]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "refresh", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('login'),
+    __param(0, (0, api_locale_1.Locale)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Ip)()),
+    __param(3, (0, common_1.Headers)('user-agent')),
+    __param(4, (0, common_1.Res)({ passthrough: true })),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, login_dto_1.LoginDTO, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "login", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('signup'),
+    __param(0, (0, api_locale_1.Locale)()),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, create_with_email_and_password_dto_1.CreateWithEmailAndPasswordDTO]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "registerWithEmailAndPassword", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('login-code'),
+    __param(0, (0, api_locale_1.Locale)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Ip)()),
+    __param(3, (0, common_1.Headers)('user-agent')),
+    __param(4, (0, common_1.Res)({ passthrough: true })),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, login_with_code_dto_1.LoginWithCodeDTO, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "loginCode", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('login-recovery-code'),
+    __param(0, (0, api_locale_1.Locale)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Ip)()),
+    __param(3, (0, common_1.Headers)('user-agent')),
+    __param(4, (0, common_1.Res)({ passthrough: true })),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, login_with_recovery_code_1.LoginWithRecoveryCodeDTO, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "loginRecoveryCode", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('resend-mfa-code'),
+    __param(0, (0, api_locale_1.Locale)()),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, resend_mfa_code_dto_1.ResendMfaCodeDTO]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "resendMfaCode", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('webauthn/generate'),
+    __param(0, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "generateWebAuthnOptions", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('webauthn/verify'),
+    __param(0, (0, api_locale_1.Locale)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Ip)()),
+    __param(3, (0, common_1.Headers)('user-agent')),
+    __param(4, (0, common_1.Res)({ passthrough: true })),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object, String, String, Object]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "verifyWebAuthn", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('forgot'),
+    __param(0, (0, api_locale_1.Locale)()),
+    __param(1, (0, common_1.Body)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, forget_dto_1.ForgetDTO]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "forgot", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('logout'),
+    __param(0, (0, common_1.Req)()),
+    __param(1, (0, common_1.Res)({ passthrough: true })),
+    __param(2, (0, common_1.Body)('refreshToken')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object, Object, String]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "logout", null);
+__decorate([
+    (0, api_1.Public)(),
+    (0, common_1.Post)('forgot-reset'),
+    __param(0, (0, api_locale_1.Locale)()),
+    __param(1, (0, common_1.Body)()),
+    __param(2, (0, common_1.Ip)()),
+    __param(3, (0, common_1.Headers)('user-agent')),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, reset_dto_1.ResetDTO, String, String]),
+    __metadata("design:returntype", Promise)
+], AuthController.prototype, "forgotReset", null);
+exports.AuthController = AuthController = __decorate([
+    (0, common_1.Controller)('auth'),
+    __param(0, (0, common_1.Inject)((0, common_1.forwardRef)(() => auth_service_1.AuthService))),
+    __param(1, (0, common_1.Inject)((0, common_1.forwardRef)(() => token_service_1.TokenService))),
+    __param(2, (0, common_1.Inject)((0, common_1.forwardRef)(() => user_service_1.UserService))),
+    __metadata("design:paramtypes", [auth_service_1.AuthService,
+        token_service_1.TokenService,
+        user_service_1.UserService])
+], AuthController);
+//# sourceMappingURL=auth.controller.js.map

package/dist/auth/auth.controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.controller.js","sourceRoot":"","sources":["../../src/auth/auth.controller.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAAA,sCAAkD;AAClD,oDAA6C;AAC7C,2CAYwB;AACxB,0DAAsD;AACtD,uGAA+F;AAC/F,uDAAmD;AACnD,iDAA6C;AAC7C,iDAA6C;AAC7C,mEAA6D;AAC7D,6EAA0E;AAC1E,+CAA2C;AAC3C,mEAA6D;AAC7D,+CAA2C;AAGpC,IAAM,cAAc,GAApB,MAAM,cAAc;IACzB,YAEmB,OAAoB,EAEpB,KAAmB,EAEnB,IAAiB;QAJjB,YAAO,GAAP,OAAO,CAAa;QAEpB,UAAK,GAAL,KAAK,CAAc;QAEnB,SAAI,GAAJ,IAAI,CAAa;IAChC,CAAC;IAIC,AAAN,KAAK,CAAC,MAAM,CAAS,EAAE,EAAE,EAAE,EAAY,MAAc;QACnD,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAIK,AAAN,KAAK,CAAC,OAAO,CACD,MAAc,EACjB,GAAG,EACkB,GAAG,EACT,oBAA4B,EAC3B,SAAiB,EAClC,SAAiB;QAEvB,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC;QACtE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACxI,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAEtF,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,oBAAoB,EAAE,CAAC;YAC/C,OAAO;gBACL,WAAW;gBACX,YAAY;aACb,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,CAAC;IACzB,CAAC;IAIK,AAAN,KAAK,CAAC,KAAK,CACC,MAAc,EAChB,IAAc,EAChB,SAAiB,EACA,SAAiB,EACZ,GAAG;QAE/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,yBAAyB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAEnK,IAAI,WAAW,EAAC,CAAC;YACf,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;QAC9C,CAAC;QAED,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,CAAC;IACzB,CAAC;IAIK,AAAN,KAAK,CAAC,4BAA4B,CACtB,MAAc,EAChB,IAAmC;QAE3C,OAAO,IAAI,CAAC,IAAI,CAAC,0BAA0B,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;IAIK,AAAN,KAAK,CAAC,SAAS,CACH,MAAc,EAChB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAoB,EAC/C,SAAiB,EACA,SAAiB,EACZ,GAAG;QAE/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,CAC7E,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EACT,SAAS,EACT,UAAU,CACX,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACvC,CAAC;IAIK,AAAN,KAAK,CAAC,iBAAiB,CACX,MAAc,EAChB,EAAE,KAAK,EAAE,IAAI,EAA4B,EAC3C,SAAiB,EACA,SAAiB,EACZ,GAAG;QAE/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CACrF,MAAM,EACN,KAAK,EACL,IAAI,EACJ,SAAS,EACT,SAAS,CACV,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACvC,CAAC;IAIK,AAAN,KAAK,CAAC,aAAa,CACP,MAAc,EAChB,EAAE,KAAK,EAAoB;QAEnC,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC;IAIK,AAAN,KAAK,CAAC,uBAAuB,CACnB,EAAE,QAAQ,EAAwB;QAE1C,OAAO,IAAI,CAAC,OAAO,CAAC,qCAAqC,CAAC,QAAQ,CAAC,CAAC;IACtE,CAAC;IAIK,AAAN,KAAK,CAAC,cAAc,CACR,MAAc,EAChB,EAAE,QAAQ,EAAE,iBAAiB,EAAgD,EAC/E,SAAiB,EACA,SAAiB,EACZ,GAAG;QAE/B,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,4BAA4B,CAC5F,MAAM,EACN,QAAQ,EACR,iBAAiB,EACjB,SAAS,EACT,SAAS,CACV,CAAC;QAEF,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QACtF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;IACvC,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CACA,MAAc,EAExB,IAAe;QAEf,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnD,CAAC;IAIK,AAAN,KAAK,CAAC,MAAM,CACH,GAAG,EACkB,GAAG,EACT,oBAA4B;QAElD,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC;QAC/D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,4BAAmB,CAAC,4BAA4B,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,CAAC,CAAC;QAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAIK,AAAN,KAAK,CAAC,WAAW,CACL,MAAc,EAChB,EAAE,QAAQ,EAAE,IAAI,EAAY,EAC9B,SAAiB,EACA,SAAiB;QAExC,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACxF,CAAC;CACF,CAAA;AA3LY,wCAAc;AAYnB;IAFL,IAAA,UAAI,GAAE;IACN,IAAA,YAAG,EAAC,QAAQ,CAAC;IACA,WAAA,IAAA,UAAI,GAAE,CAAA;IAAU,WAAA,IAAA,mBAAM,GAAE,CAAA;;;;4CAErC;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,SAAS,CAAC;IAEb,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,EAAC,cAAc,CAAC,CAAA;IACpB,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,WAAE,GAAE,CAAA;;;;6CAaN;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,OAAO,CAAC;IAEX,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CAHb,oBAAQ;;2CAgBvB;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAO,kEAA6B;;kEAG5C;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,YAAY,CAAC;IAEhB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CAHU,sCAAgB;;+CAgBtD;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,qBAAqB,CAAC;IAEzB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;6CAHF,mDAAwB;;uDAelD;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,iBAAiB,CAAC;IAErB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CAAY,sCAAgB;;mDAGpC;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,mBAAmB,CAAC;IAEvB,WAAA,IAAA,aAAI,GAAE,CAAA;;;;6DAGR;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,iBAAiB,CAAC;IAErB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;IACrB,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;;;;oDAY5B;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;;6CACD,sBAAS;;4CAGhB;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,QAAQ,CAAC;IAEZ,WAAA,IAAA,YAAG,GAAE,CAAA;IACL,WAAA,IAAA,YAAG,EAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC1B,WAAA,IAAA,aAAI,EAAC,cAAc,CAAC,CAAA;;;;4CAStB;AAIK;IAFL,IAAA,YAAM,GAAE;IACR,IAAA,aAAI,EAAC,cAAc,CAAC;IAElB,WAAA,IAAA,mBAAM,GAAE,CAAA;IACR,WAAA,IAAA,aAAI,GAAE,CAAA;IACN,WAAA,IAAA,WAAE,GAAE,CAAA;IACJ,WAAA,IAAA,gBAAO,EAAC,YAAY,CAAC,CAAA;;6CAFM,oBAAQ;;iDAKrC;yBA1LU,cAAc;IAD1B,IAAA,mBAAU,EAAC,MAAM,CAAC;IAGd,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC,CAAC,CAAA;IAErC,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,4BAAY,CAAC,CAAC,CAAA;IAEtC,WAAA,IAAA,eAAM,EAAC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC,CAAC,CAAA;qCAHZ,0BAAW;QAEb,4BAAY;QAEb,0BAAW;GAPzB,cAAc,CA2L1B"}

package/dist/auth/auth.module.d.ts

@@ -0,0 +1,5 @@
+import { MiddlewareConsumer } from '@nestjs/common';
+export declare class AuthModule {
+    configure(consumer: MiddlewareConsumer): void;
+}
+//# sourceMappingURL=auth.module.d.ts.map

package/dist/auth/auth.module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.module.d.ts","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,kBAAkB,EAAU,MAAM,gBAAgB,CAAC;AAqBhF,qBA2Ea,UAAU;IACrB,SAAS,CAAC,QAAQ,EAAE,kBAAkB;CAKvC"}

package/dist/auth/auth.module.js

@@ -0,0 +1,116 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthModule = void 0;
+const api_mail_1 = require("@hed-hog/api-mail");
+const api_prisma_1 = require("@hed-hog/api-prisma");
+const axios_1 = require("@nestjs/axios");
+const common_1 = require("@nestjs/common");
+const config_1 = require("@nestjs/config");
+const core_1 = require("@nestjs/core");
+const jwt_1 = require("@nestjs/jwt");
+const cookie_parser_1 = __importDefault(require("cookie-parser"));
+const challenge_module_1 = require("../challenge/challenge.module");
+const challenge_service_1 = require("../challenge/challenge.service");
+const mail_sent_module_1 = require("../mail-sent/mail-sent.module");
+const mail_var_module_1 = require("../mail-var/mail-var.module");
+const mail_module_1 = require("../mail/mail.module");
+const security_module_1 = require("../security/security.module");
+const session_module_1 = require("../session/session.module");
+const setting_module_1 = require("../setting/setting.module");
+const token_module_1 = require("../token/token.module");
+const token_service_1 = require("../token/token.service");
+const user_module_1 = require("../user/user.module");
+const is_strong_password_with_settings_validator_1 = require("../validators/is-strong-password-with-settings.validator");
+const auth_controller_1 = require("./auth.controller");
+const auth_service_1 = require("./auth.service");
+const auth_guard_1 = require("./guards/auth.guard");
+let AuthModule = class AuthModule {
+    configure(consumer) {
+        consumer
+            .apply((0, cookie_parser_1.default)())
+            .forRoutes('auth');
+    }
+};
+exports.AuthModule = AuthModule;
+exports.AuthModule = AuthModule = __decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({
+        imports: [
+            (0, common_1.forwardRef)(() => jwt_1.JwtModule.registerAsync({
+                global: true,
+                imports: [api_prisma_1.PrismaModule],
+                inject: [api_prisma_1.PrismaService],
+                useFactory: async (prisma) => {
+                    try {
+                        const authSettings = await prisma.setting.findMany({
+                            where: {
+                                slug: {
+                                    in: [
+                                        'access-token-expiration-minutes'
+                                    ]
+                                }
+                            },
+                            select: {
+                                slug: true,
+                                value: true,
+                            }
+                        });
+                        const settings = new Map();
+                        for (const setting of authSettings) {
+                            settings.set(setting.slug, setting.value);
+                        }
+                        const expirationMinutes = settings.get('access-token-expiration-minutes');
+                        const expiresIn = expirationMinutes ? parseInt(expirationMinutes, 10) * 60 : 15 * 60;
+                        return {
+                            secret: String(process.env.JWT_SECRET),
+                            global: true,
+                            signOptions: {
+                                expiresIn, // in seconds
+                            },
+                        };
+                    }
+                    catch (error) {
+                        console.error('Error loading JWT settings from database:', error);
+                        throw error;
+                    }
+                },
+            })),
+            (0, common_1.forwardRef)(() => api_prisma_1.PrismaModule),
+            (0, common_1.forwardRef)(() => mail_module_1.MailModule),
+            (0, common_1.forwardRef)(() => setting_module_1.SettingModule),
+            (0, common_1.forwardRef)(() => mail_var_module_1.MailVarModule),
+            (0, common_1.forwardRef)(() => mail_sent_module_1.MailSentModule),
+            (0, common_1.forwardRef)(() => api_mail_1.MailModule),
+            (0, common_1.forwardRef)(() => user_module_1.UserModule),
+            (0, common_1.forwardRef)(() => security_module_1.SecurityModule),
+            (0, common_1.forwardRef)(() => token_module_1.TokenModule),
+            (0, common_1.forwardRef)(() => challenge_module_1.ChallengeModule),
+            (0, common_1.forwardRef)(() => session_module_1.SessionModule),
+            config_1.ConfigModule,
+            axios_1.HttpModule,
+        ],
+        controllers: [auth_controller_1.AuthController],
+        providers: [
+            core_1.Reflector,
+            auth_service_1.AuthService,
+            token_service_1.TokenService,
+            challenge_service_1.ChallengeService,
+            is_strong_password_with_settings_validator_1.IsStrongPasswordWithSettingsConstraint,
+            {
+                provide: core_1.APP_GUARD,
+                useClass: auth_guard_1.AuthGuard,
+            },
+        ],
+        exports: [auth_service_1.AuthService],
+    })
+], AuthModule);
+//# sourceMappingURL=auth.module.js.map

package/dist/auth/auth.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.module.js","sourceRoot":"","sources":["../../src/auth/auth.module.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gDAAiE;AACjE,oDAAkE;AAClE,yCAA2C;AAC3C,2CAAgF;AAChF,2CAA8C;AAC9C,uCAAoD;AACpD,qCAAwC;AACxC,kEAAyC;AACzC,oEAAgE;AAChE,sEAAkE;AAClE,oEAA+D;AAC/D,iEAA4D;AAC5D,qDAAiD;AACjD,iEAA6D;AAC7D,8DAA0D;AAC1D,8DAA0D;AAC1D,wDAAoD;AACpD,0DAAsD;AACtD,qDAAiD;AACjD,yHAAkH;AAClH,uDAAmD;AACnD,iDAA6C;AAC7C,oDAAgD;AA6EzC,IAAM,UAAU,GAAhB,MAAM,UAAU;IACrB,SAAS,CAAC,QAA4B;QACpC,QAAQ;aACL,KAAK,CAAC,IAAA,uBAAY,GAAE,CAAC;aACrB,SAAS,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;CACF,CAAA;AANY,gCAAU;qBAAV,UAAU;IA3EtB,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC;QACN,OAAO,EAAE;YACP,IAAA,mBAAU,EAAC,GAAG,EAAE,CACd,eAAS,CAAC,aAAa,CAAC;gBACtB,MAAM,EAAE,IAAI;gBACZ,OAAO,EAAE,CAAC,yBAAY,CAAC;gBACvB,MAAM,EAAE,CAAC,0BAAa,CAAC;gBACvB,UAAU,EAAE,KAAK,EAAE,MAAqB,EAAE,EAAE;oBAC1C,IAAI,CAAC;wBACH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;4BACjD,KAAK,EAAE;gCACL,IAAI,EAAE;oCACJ,EAAE,EAAE;wCACF,iCAAiC;qCAClC;iCACF;6BACF;4BACD,MAAM,EAAE;gCACN,IAAI,EAAE,IAAI;gCACV,KAAK,EAAE,IAAI;6BACZ;yBACF,CAAC,CAAC;wBAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;wBAE3C,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;4BACnC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;wBAC5C,CAAC;wBAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;wBAC1E,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;wBAErF,OAAO;4BACL,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;4BACtC,MAAM,EAAE,IAAI;4BACZ,WAAW,EAAE;gCACX,SAAS,EAAE,aAAa;6BACzB;yBACF,CAAC;oBACJ,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,OAAO,CAAC,KAAK,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAC;wBAClE,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;aACF,CAAC,CACH;YACD,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,yBAAY,CAAC;YAC9B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC;YAC/B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,+BAAa,CAAC;YAC/B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,iCAAc,CAAC;YAChC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,qBAAc,CAAC;YAChC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,wBAAU,CAAC;YAC5B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,gCAAc,CAAC;YAChC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,0BAAW,CAAC;YAC7B,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,kCAAe,CAAC;YACjC,IAAA,mBAAU,EAAC,GAAG,EAAE,CAAC,8BAAa,CAAC;YAC/B,qBAAY;YACZ,kBAAU;SACX;QACD,WAAW,EAAE,CAAC,gCAAc,CAAC;QAC7B,SAAS,EAAE;YACT,gBAAS;YACT,0BAAW;YACX,4BAAY;YACZ,oCAAgB;YAChB,mFAAsC;YACtC;gBACE,OAAO,EAAE,gBAAS;gBAClB,QAAQ,EAAE,sBAAS;aACpB;SACF;QACD,OAAO,EAAE,CAAC,0BAAW,CAAC;KACvB,CAAC;GACW,UAAU,CAMtB"}