@hotfusion/modeller 0.0.11 → 0.0.15

package/dist/extensions/oidc/index.js

@@ -1,192 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.OIDCExtension = void 0;
-const jose_1 = require("jose");
-const client_1 = require("./client");
-class OIDCExtensionImpl {
-    id = 'oidc';
-    providers = [];
-    authPath = 'auth';
-    async setup(server, config) {
-        console.log('[OIDCExtension] setup called with config:', config);
-        this.providers = config.providers || [];
-        this.authPath = config.authPath || 'auth';
-        console.log('[OIDCExtension] Providers:', this.providers.map(p => p.id));
-        console.log('[OIDCExtension] Auth path:', this.authPath);
-        // Register auth routes
-        await this._setupAuthRoutes(server);
-        console.log('[OIDCExtension] Auth routes setup complete');
-    }
-    async _setupAuthRoutes(server) {
-        try {
-            console.log('[OIDCExtension] _setupAuthRoutes called');
-            let path = this.authPath;
-            if (server.config?.domain)
-                path = `${server.config.domain}/${path}`;
-            path = path.split('/').filter((x) => x).join('/');
-            const trimmedPath = '/' + path.split('/').filter((x) => x).join('/');
-            console.log('[OIDCExtension] Registering routes with path:', trimmedPath);
-            // ?? Callback route ??????????????????????????????????????????????????????
-            console.log('[OIDCExtension] About to register callback route at:', trimmedPath + '/callback');
-            server.router.get(trimmedPath + '/callback', async (ctx) => {
-                console.log('[OIDCExtension] Callback handler called');
-                try {
-                    let origin = ctx.session?.oidc?.query?.origin || '';
-                    const session = ctx.session?.oidc;
-                    console.log('[OIDCExtension] Session data in callback:', {
-                        hasSession: !!session,
-                        hasProvider: !!session?.provider,
-                        hasCodeVerifier: !!session?.code_verifier,
-                        codeVerifierLength: session?.code_verifier?.length,
-                        providerId: session?.provider?.id,
-                    });
-                    if (session?.code_verifier) {
-                        console.log('[OIDCExtension] Code verifier found:', session.code_verifier.substring(0, 20) + '...');
-                    }
-                    if (!session) {
-                        ctx.status = 400;
-                        ctx.body = { error: 'No session found' };
-                        return;
-                    }
-                    const code = ctx.query.code;
-                    if (!code) {
-                        ctx.status = 400;
-                        ctx.body = { error: 'No authorization code provided' };
-                        return;
-                    }
-                    console.log('[OIDCExtension] Token exchange params:', {
-                        code: code.substring(0, 20) + '...',
-                        codeVerifier: session.code_verifier.substring(0, 20) + '...',
-                        provider: session.provider.id,
-                    });
-                    // Build IClient config from session provider
-                    const clientConfig = {
-                        clientId: session.provider.clientId,
-                        clientSecret: session.provider.clientSecret,
-                        redirectUri: `http://localhost:${server['port'] || 3030}/auth/callback`,
-                        endpoints: {
-                            authentication: session.provider.endpoints?.authentication || 'https://accounts.google.com',
-                            token: session.provider.endpoints?.token || 'https://oauth2.googleapis.com/token',
-                            profile: session.provider.endpoints?.profile || 'https://www.googleapis.com/oauth2/v1/userinfo',
-                        }
-                    };
-                    console.log('[OIDCExtension] Creating OIDCClient with config:', {
-                        clientId: clientConfig.clientId,
-                        redirectUri: clientConfig.redirectUri,
-                    });
-                    const oidcClient = new client_1.OIDCClient(clientConfig);
-                    console.log('[OIDCExtension] Calling getToken with full URL...');
-                    // Construct full callback URL - ctx.originalUrl already includes the path and query
-                    const fullCallbackUrl = `http://localhost:${server['port'] || 3030}${ctx.originalUrl}`;
-                    console.log('[OIDCExtension] Full callback URL:', fullCallbackUrl);
-                    const TokenCollection = await oidcClient.getToken(code, session.code_verifier, fullCallbackUrl);
-                    console.log('[OIDCExtension] Token received:', {
-                        hasAccessToken: !!TokenCollection.accessToken,
-                        hasRefreshToken: !!TokenCollection.refreshToken,
-                        claimsEmail: TokenCollection.claims?.email,
-                    });
-                    server.emit('provider', { token: TokenCollection, sid: session.__SID, session });
-                    ctx.type = 'html';
-                    ctx.body = `<script>window?.close?.()</script>`;
-                }
-                catch (err) {
-                    console.error('[OIDCExtension] Error in callback handler:', err.message);
-                    console.error('[OIDCExtension] Full error:', err);
-                    ctx.status = 500;
-                    ctx.body = { error: err.message, details: err.toString() };
-                }
-            });
-            // ?? Login route ????????????????????????????????????????????????????????
-            server.router.get(trimmedPath + '/:provider', async (ctx) => {
-                if (ctx.params.provider === 'callback')
-                    return;
-                let provider = this.providers.find(x => x.id === ctx.params.provider);
-                if (provider) {
-                    try {
-                        console.log('[OIDCExtension] Login handler called for provider:', provider.id);
-                        // Build IClient config from IOIDCProvider
-                        const clientConfig = {
-                            clientId: provider.clientId,
-                            clientSecret: provider.clientSecret,
-                            redirectUri: `http://localhost:${server['port'] || 3030}/auth/callback`,
-                            endpoints: {
-                                authentication: provider.endpoints?.authentication || 'https://accounts.google.com',
-                                token: provider.endpoints?.token || 'https://oauth2.googleapis.com/token',
-                                profile: provider.endpoints?.profile || 'https://www.googleapis.com/oauth2/v1/userinfo',
-                            }
-                        };
-                        console.log('[OIDCExtension] Client config:', clientConfig);
-                        let { url, code_verifier, state } = await new client_1.OIDCClient(clientConfig).buildURL(provider.scopes.join(' '));
-                        console.log('[OIDCExtension] Got OAuth URL:', url.toString());
-                        let { middleware } = ctx.request.query || {};
-                        if (!ctx.session)
-                            ctx.session = {};
-                        ctx.session.oidc = {
-                            __SID: ctx.query.__SID,
-                            provider,
-                            code_verifier,
-                            state,
-                            middleware: middleware || false,
-                            query: (ctx.request.querystring || '').replace(/^\?/, '')
-                                .split('&')
-                                .filter(Boolean)
-                                .reduce((acc, pair) => {
-                                const [key, value = ''] = pair.split('=');
-                                acc[decodeURIComponent(key)] = decodeURIComponent(value);
-                                return acc;
-                            }, {})
-                        };
-                        await ctx.session.save?.();
-                        console.log('[OIDCExtension] Session saved with OIDC data:', {
-                            hasSID: !!ctx.session.oidc?.__SID,
-                            hasProvider: !!ctx.session.oidc?.provider?.id,
-                            hasCodeVerifier: !!ctx.session.oidc?.code_verifier,
-                            hasState: !!ctx.session.oidc?.state,
-                            codeVerifierLength: ctx.session.oidc?.code_verifier?.length,
-                        });
-                        console.log('[OIDCExtension] Full session OIDC:', JSON.stringify(ctx.session.oidc, null, 2));
-                        console.log('[OIDCExtension] Redirecting to OAuth URL');
-                        ctx.redirect(url.toString());
-                        return;
-                    }
-                    catch (e) {
-                        console.error('[OIDCExtension] Error in login handler:', e.message, e.stack);
-                        ctx.status = 500;
-                        ctx.body = { error: e.message, stack: e.stack };
-                    }
-                }
-            });
-            // ?? Logout route ???????????????????????????????????????????????????????
-            server.router.post(trimmedPath + '/:provider/logout', async (ctx) => {
-                if (ctx.params.provider === 'callback' || !ctx.path.includes('/logout'))
-                    return;
-                let provider = this.providers.find(x => x.id === ctx.params.provider);
-                if (provider) {
-                    let SESSION = ctx.headers.authorization || '';
-                    if (!SESSION)
-                        ctx.throw(401, 'Unauthorized');
-                    if (SESSION) {
-                        SESSION = SESSION.split(' ').pop() || '';
-                        let token;
-                        try {
-                            token = (await (0, jose_1.jwtVerify)(SESSION, new TextEncoder().encode(Array.isArray(server.app?.keys) ? server.app.keys[0] : undefined))).payload;
-                        }
-                        catch (e) {
-                            token = (0, jose_1.decodeJwt)(SESSION);
-                        }
-                        let body = {};
-                        await new Promise(resolve => setTimeout(resolve, 1000));
-                        ctx.body = body;
-                    }
-                }
-            });
-            console.log('[OIDCExtension] All routes registered successfully');
-        }
-        catch (err) {
-            console.error('[OIDCExtension] ERROR in _setupAuthRoutes:', err.message, err.stack);
-            throw err;
-        }
-    }
-}
-exports.OIDCExtension = new OIDCExtensionImpl();
-//# sourceMappingURL=index.js.map

package/dist/extensions/oidc/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/extensions/oidc/index.ts"],"names":[],"mappings":";;;AACA,+BAA4C;AAG5C,qCAAmC;AAgBnC,MAAM,iBAAiB;IACnB,EAAE,GAAG,MAAM,CAAC;IACJ,SAAS,GAAoB,EAAE,CAAC;IAChC,QAAQ,GAAW,MAAM,CAAC;IAElC,KAAK,CAAC,KAAK,CAAC,MAAc,EAAE,MAA4B;QACpD,OAAO,CAAC,GAAG,CAAC,2CAA2C,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC;QAE1C,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAEzD,uBAAuB;QACvB,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC9D,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACzC,IAAI,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;YACvD,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC;YACzB,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM;gBACrB,IAAI,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC;YAE7C,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1D,MAAM,WAAW,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAE7E,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE,WAAW,CAAC,CAAC;YAE1E,2EAA2E;YAC3E,OAAO,CAAC,GAAG,CAAC,sDAAsD,EAAE,WAAW,GAAG,WAAW,CAAC,CAAC;YAC/F,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,GAAG,WAAW,EAAE,KAAK,EAAE,GAAmB,EAAE,EAAE;gBACvE,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;gBACvD,IAAI,CAAC;oBACD,IAAI,MAAM,GACJ,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC;oBAE7C,MAAM,OAAO,GACP,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC;oBAExB,OAAO,CAAC,GAAG,CAAC,2CAA2C,EAAE;wBACrD,UAAU,EAAE,CAAC,CAAC,OAAO;wBACrB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ;wBAChC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,aAAa;wBACzC,kBAAkB,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM;wBAClD,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;qBACpC,CAAC,CAAC;oBAEH,IAAI,OAAO,EAAE,aAAa,EAAE,CAAC;wBACzB,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC;oBACxG,CAAC;oBAED,IAAI,CAAC,OAAO,EAAE,CAAC;wBACX,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;wBACjB,GAAG,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;wBACzC,OAAO;oBACX,CAAC;oBAED,MAAM,IAAI,GACJ,GAAG,CAAC,KAAK,CAAC,IAAc,CAAC;oBAE/B,IAAI,CAAC,IAAI,EAAE,CAAC;wBACR,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;wBACjB,GAAG,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC;wBACvD,OAAO;oBACX,CAAC;oBAED,OAAO,CAAC,GAAG,CAAC,wCAAwC,EAAE;wBAClD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;wBACnC,YAAY,EAAE,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;wBAC5D,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE;qBAChC,CAAC,CAAC;oBAEH,6CAA6C;oBAC7C,MAAM,YAAY,GAAG;wBACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,QAAQ;wBACnC,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY;wBAC3C,WAAW,EAAE,oBAAoB,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,gBAAgB;wBACvE,SAAS,EAAE;4BACP,cAAc,EAAG,OAAO,CAAC,QAAgB,CAAC,SAAS,EAAE,cAAc,IAAI,6BAA6B;4BACpG,KAAK,EAAG,OAAO,CAAC,QAAgB,CAAC,SAAS,EAAE,KAAK,IAAI,qCAAqC;4BAC1F,OAAO,EAAG,OAAO,CAAC,QAAgB,CAAC,SAAS,EAAE,OAAO,IAAI,+CAA+C;yBAC3G;qBACJ,CAAC;oBAEF,OAAO,CAAC,GAAG,CAAC,kDAAkD,EAAE;wBAC5D,QAAQ,EAAE,YAAY,CAAC,QAAQ;wBAC/B,WAAW,EAAE,YAAY,CAAC,WAAW;qBACxC,CAAC,CAAC;oBAEH,MAAM,UAAU,GACV,IAAI,mBAAU,CAAC,YAAmB,CAAC,CAAC;oBAE1C,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;oBACjE,oFAAoF;oBACpF,MAAM,eAAe,GAAG,oBAAoB,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;oBACvF,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE,eAAe,CAAC,CAAC;oBAEnE,MAAM,eAAe,GACf,MAAM,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,aAAa,EAAE,eAAe,CAAC,CAAA;oBAE7E,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE;wBAC3C,cAAc,EAAE,CAAC,CAAC,eAAe,CAAC,WAAW;wBAC7C,eAAe,EAAE,CAAC,CAAC,eAAe,CAAC,YAAY;wBAC/C,WAAW,EAAE,eAAe,CAAC,MAAM,EAAE,KAAK;qBAC7C,CAAC,CAAC;oBAEH,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,EAAC,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAC,CAAC,CAAC;oBAC/E,GAAG,CAAC,IAAI,GAAG,MAAM,CAAC;oBAClB,GAAG,CAAC,IAAI,GAAG,oCAAoC,CAAA;gBACnD,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAChB,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;oBACzE,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;oBAClD,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;oBACjB,GAAG,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC;gBAC/D,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,0EAA0E;YAC1E,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,GAAG,YAAY,EAAE,KAAK,EAAE,GAAmB,EAAE,EAAE;gBACxE,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU;oBAClC,OAAO;gBAEX,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAEtE,IAAI,QAAQ,EAAE,CAAC;oBACX,IAAG,CAAC;wBACA,OAAO,CAAC,GAAG,CAAC,oDAAoD,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;wBAE/E,0CAA0C;wBAC1C,MAAM,YAAY,GAAG;4BACjB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;4BAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;4BACnC,WAAW,EAAE,oBAAoB,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,gBAAgB;4BACvE,SAAS,EAAE;gCACP,cAAc,EAAG,QAAgB,CAAC,SAAS,EAAE,cAAc,IAAI,6BAA6B;gCAC5F,KAAK,EAAG,QAAgB,CAAC,SAAS,EAAE,KAAK,IAAI,qCAAqC;gCAClF,OAAO,EAAG,QAAgB,CAAC,SAAS,EAAE,OAAO,IAAI,+CAA+C;6BACnG;yBACJ,CAAC;wBAEF,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,YAAY,CAAC,CAAC;wBAE5D,IAAI,EAAC,GAAG,EAAE,aAAa,EAAE,KAAK,EAAC,GACzB,MAAM,IAAI,mBAAU,CAAC,YAAmB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;wBAEpF,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;wBAE9D,IAAI,EAAC,UAAU,EAAC,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;wBAC3C,IAAI,CAAC,GAAG,CAAC,OAAO;4BAAE,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC;wBAEnC,GAAG,CAAC,OAAO,CAAC,IAAI,GAAG;4BACf,KAAK,EAAG,GAAG,CAAC,KAAK,CAAC,KAAK;4BACvB,QAAQ;4BACR,aAAa;4BACb,KAAK;4BACL,UAAU,EAAE,UAAU,IAAI,KAAK;4BAC/B,KAAK,EAAG,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;iCACrD,KAAK,CAAC,GAAG,CAAC;iCACV,MAAM,CAAC,OAAO,CAAC;iCACf,MAAM,CAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;gCAC1C,MAAM,CAAC,GAAG,EAAE,KAAK,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gCAC1C,GAAG,CAAC,kBAAkB,CAAC,GAAU,CAAE,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;gCACjE,OAAO,GAAG,CAAC;4BACf,CAAC,EAAE,EAAE,CAAC;yBACb,CAAC;wBAEF,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;wBAC3B,OAAO,CAAC,GAAG,CAAC,+CAA+C,EAAE;4BACzD,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK;4BACjC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE;4BAC7C,eAAe,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa;4BAClD,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK;4BACnC,kBAAkB,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM;yBAC9D,CAAC,CAAC;wBACH,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;wBAC7F,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;wBACxD,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;wBAC7B,OAAO;oBACX,CAAC;oBAAA,OAAO,CAAM,EAAC,CAAC;wBACZ,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;wBAC7E,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;wBACjB,GAAG,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;oBACpD,CAAC;gBACL,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,0EAA0E;YAC1E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,GAAG,mBAAmB,EAAE,KAAK,EAAE,GAAmB,EAAE,EAAE;gBAChF,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;oBACnE,OAAO;gBAEX,IAAI,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAEtE,IAAI,QAAQ,EAAE,CAAC;oBACX,IAAI,OAAO,GAAW,GAAG,CAAC,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC;oBAEtD,IAAI,CAAC,OAAO;wBACR,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;oBAEnC,IAAG,OAAO,EAAE,CAAC;wBACT,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;wBACzC,IAAI,KAAW,CAAC;wBAEhB,IAAG,CAAC;4BACA,KAAK,GAAG,CAAC,MAAM,IAAA,gBAAS,EAAC,OAAiB,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,OAAc,CAAC;wBAC5J,CAAC;wBAAA,OAAM,CAAC,EAAC,CAAC;4BACN,KAAK,GAAG,IAAA,gBAAS,EAAC,OAAiB,CAAC,CAAC;wBACzC,CAAC;wBAED,IAAI,IAAI,GAAG,EAAE,CAAA;wBACb,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;wBACxD,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;oBACpB,CAAC;gBACL,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;QACtE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,4CAA4C,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YACpF,MAAM,GAAG,CAAC;QACd,CAAC;IACL,CAAC;CACJ;AAEY,QAAA,aAAa,GAAG,IAAI,iBAAiB,EAAE,CAAC"}

package/dist/types/View.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=View.d.ts.map

package/dist/types/View.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"View.d.ts","sourceRoot":"","sources":["../../src/View.ts"],"names":[],"mappings":""}

package/dist/types/extensions/oidc/client.d.ts

@@ -1,32 +0,0 @@
-import type { IClient } from '../../types.d.ts';
-export declare class OIDCClient {
-    client: IClient;
-    constructor(client: IClient);
-    static decodeIdToken(idToken: string): import("jose", { with: { "resolution-mode": "import" } }).JWTPayload;
-    validateIdToken(idToken: string): Promise<any>;
-    retrieveUser(accessToken: string): Promise<any>;
-    retrieveAccessToken(code: string): Promise<{
-        access_token: string;
-    }>;
-    isDiscoverable(): Promise<boolean>;
-    getProfile(code: string, code_verifier?: string): Promise<{
-        protocol: 'oidc' | 'oauth2';
-        claims: any;
-        idToken: any;
-        accessToken: any;
-        refreshToken: any;
-    }>;
-    getToken(code: string, code_verifier: string, callbackUrlFull?: string): Promise<{
-        refreshToken: string;
-        accessToken: string;
-        claims: any;
-    }>;
-    readWHATWGStream(body: ReadableStream): Promise<string>;
-    buildURL(scope: string): Promise<{
-        url: URL;
-        code_verifier: string;
-        code_challenge: string;
-        state: string;
-    }>;
-}
-//# sourceMappingURL=client.d.ts.map

package/dist/types/extensions/oidc/client.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/extensions/oidc/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAIhD,qBAAa,UAAU;IACnB,MAAM,EAAE,OAAO,CAAA;gBACF,MAAM,EAAC,OAAO;IAG3B,MAAM,CAAC,aAAa,CAAC,OAAO,EAAC,MAAM;IAG7B,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAyB9C,YAAY,CAAC,WAAW,EAAC,MAAM;IAM/B,mBAAmB,CAAC,IAAI,EAAC,MAAM,GAAE,OAAO,CAAC;QAAC,YAAY,EAAC,MAAM,CAAA;KAAC,CAAC;IAmB/D,cAAc;IAad,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAE,OAAO,CAAC;QAAC,QAAQ,EAAC,MAAM,GAAG,QAAQ,CAAC;QAAC,MAAM,EAAC,GAAG,CAAC;QAAA,OAAO,EAAC,GAAG,CAAC;QAAA,WAAW,EAAC,GAAG,CAAC;QAAA,YAAY,EAAC,GAAG,CAAA;KAAE,CAAC;IAmDhJ,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QACnF,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,GAAG,CAAA;KACd,CAAC;IAiCI,gBAAgB,CAAC,IAAI,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC;IAevD,QAAQ,CAAC,KAAK,EAAC,MAAM,GAAI,OAAO,CAAC;QAAC,GAAG,EAAC,GAAG,CAAC;QAAA,aAAa,EAAC,MAAM,CAAC;QAAA,cAAc,EAAC,MAAM,CAAC;QAAA,KAAK,EAAC,MAAM,CAAA;KAAC,CAAC;CA2D5G"}

package/dist/types/extensions/oidc/index.d.ts

@@ -1,20 +0,0 @@
-import type { Server } from '../../server';
-import type { IOIDCProvider } from '../../types.d.ts';
-export interface IServerExtension {
-    id: string;
-    setup(server: Server, config: any): void | Promise<void>;
-}
-export interface IOIDCExtensionConfig {
-    providers: IOIDCProvider[];
-    authPath?: string;
-}
-declare class OIDCExtensionImpl implements IServerExtension {
-    id: string;
-    private providers;
-    private authPath;
-    setup(server: Server, config: IOIDCExtensionConfig): Promise<void>;
-    private _setupAuthRoutes;
-}
-export declare const OIDCExtension: OIDCExtensionImpl;
-export {};
-//# sourceMappingURL=index.d.ts.map

package/dist/types/extensions/oidc/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/extensions/oidc/index.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGtD,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,oBAAoB;IACjC,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,cAAM,iBAAkB,YAAW,gBAAgB;IAC/C,EAAE,SAAU;IACZ,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAkB;IAE5B,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;YAa1D,gBAAgB;CA8MjC;AAED,eAAO,MAAM,aAAa,mBAA0B,CAAC"}

package/dist/types/extensions/oidc/oidc.d.ts

@@ -1,20 +0,0 @@
-import type { Server } from '../../server';
-import type { IOIDCProvider } from '../../types.d.ts';
-export interface IServerExtension {
-    id: string;
-    setup(server: Server, config: any): void | Promise<void>;
-}
-export interface IOIDCExtensionConfig {
-    providers: IOIDCProvider[];
-    authPath?: string;
-}
-declare class OIDCExtensionImpl implements IServerExtension {
-    id: string;
-    private providers;
-    private authPath;
-    setup(server: Server, config: IOIDCExtensionConfig): Promise<void>;
-    private _setupAuthRoutes;
-}
-export declare const OIDCExtension: OIDCExtensionImpl;
-export {};
-//# sourceMappingURL=oidc.d.ts.map

package/dist/types/extensions/oidc/oidc.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oidc.d.ts","sourceRoot":"","sources":["../../../../src/extensions/oidc/oidc.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,oBAAoB;IACjC,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,cAAM,iBAAkB,YAAW,gBAAgB;IAC/C,EAAE,SAAU;IACZ,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAkB;IAE5B,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxE,OAAO,CAAC,gBAAgB;CAoG3B;AAED,eAAO,MAAM,aAAa,mBAA0B,CAAC"}

package/dist/types/extensions/oidc.d.ts

@@ -1,20 +0,0 @@
-import type { Server } from '../server';
-import type { IOIDCProvider } from '../types.d.ts';
-export interface IServerExtension {
-    id: string;
-    setup(server: Server, config: any): void | Promise<void>;
-}
-export interface IOIDCExtensionConfig {
-    providers: IOIDCProvider[];
-    authPath?: string;
-}
-declare class OIDCExtensionImpl implements IServerExtension {
-    id: string;
-    private providers;
-    private authPath;
-    setup(server: Server, config: IOIDCExtensionConfig): Promise<void>;
-    private _setupAuthRoutes;
-}
-export declare const OIDCExtension: OIDCExtensionImpl;
-export {};
-//# sourceMappingURL=oidc.d.ts.map

package/dist/types/extensions/oidc.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oidc.d.ts","sourceRoot":"","sources":["../../../src/extensions/oidc.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,oBAAoB;IACjC,SAAS,EAAE,aAAa,EAAE,CAAC;IAC3B,QAAQ,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,cAAM,iBAAkB,YAAW,gBAAgB;IAC/C,EAAE,SAAU;IACZ,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,QAAQ,CAAkB;IAE5B,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxE,OAAO,CAAC,gBAAgB;CAoG3B;AAED,eAAO,MAAM,aAAa,mBAA0B,CAAC"}

package/dist/utils/entry.js

@@ -1,13 +0,0 @@
-import "./index.less"
-import {createApp} from 'vue';
-import Component from '${relPath}';
-
-
-window.__HF_MOUNT__ = async (props = {}) => {
-    try {
-        createApp(Component, props).mount('#app');
-    } catch (error) {
-        console.error('Error in bundle:', error);
-    }
-
-};

package/docs/CORE.md

@@ -1,191 +0,0 @@
-# Core Layer
-
-`Core` is the in-memory data primitive. It holds documents, validates them against a schema, supports indexed lookups, mingo queries, and an optional persistence adapter. Everything in this doc is inherited by `Model`, so you can ignore Core if you only ever use `Model` — but understanding it explains where the behavior comes from.
-
-> [← Back to README](../README.md)
-
----
-
-## Table of Contents
-
-- [Schema](#schema)
-- [Validator](#validator)
-- [CRUD primitives](#crud-primitives)
-- [Indexes](#indexes)
-- [Adapter](#adapter)
-- [Trash](#trash)
-
----
-
-## Schema
-
-Schemas are JSON Schema (AJV-compatible) plus a few Modeller-specific keywords:
-
-| Keyword     | Effect                                                                  |
-|-------------|-------------------------------------------------------------------------|
-| `unique`    | Enforces uniqueness across all documents on `insert` / `update`.        |
-| `private`   | Field stripped from read responses unless `{ private: true }` is set.   |
-| `index`     | Builds an in-memory index on the field for fast lookups.                |
-| `protected` | Reserved for transport-layer protection (consumed by `Server`).         |
-| `hidden`    | Hint for client rendering. Not enforced.                                 |
-| `default`   | Standard JSON Schema default.                                            |
-| `model`     | Async FK-style validation against another model by id.                  |
-
-### `$ref` resolution
-
-`$ref` resolves against `$defs` / `definitions` first, then against any `schemes` passed to the constructor (via `$id` match).
-
-A `$ref` may also carry a query string:
-
-```
-"someModel?key=_id&label=name&search=name,email&columns=name,role&min=1&max=5&unique"
-```
-
-This rewrites the property into a model reference with display metadata (`key`, `label`, `search`, `columns`) — used by client tooling to render pickers. For `type: 'array'`, `min` / `max` / `unique` become `minItems` / `maxItems` / `uniqueItemProperties`.
-
-### Inspecting the schema
-
-```ts
-model.getSchema();                   // public — strips `private` fields
-model.getSchema({ private: true });  // full
-```
-
----
-
-## Validator
-
-AJV with `allErrors`, `strict: false`, `ajv-formats`, and `ajv-errors`. Two custom formats are registered:
-
-- `phone` — `+?[0-9 \-()]{7,10}`
-- `password` — at least 8 chars, mixed case, digit, symbol
-
-And one custom keyword:
-
-- `model` (async) — value must reference an existing document in the named model. Used for FK-style references.
-
-```ts
-properties: {
-    ownerId: { type: 'string', model: 'users.email' }
-}
-```
-
----
-
-## CRUD primitives
-
-All CRUD methods are async. They throw `{ code, ... }` on failure (see [Errors](./ERRORS.md)).
-
-### `insert(key?, ...patches, opts?)`
-
-Merges `key` and any patch objects into a single document, validates, assigns a BSON `ObjectId`, and stores it.
-
-```ts
-await users.insert({ email: 'a@b.com' }, { name: 'Alex' });
-await users.insert({ email: 'admin@b.com' }, { role: 'admin' }, { private: true });
-```
-
-Returns the inserted document. `private: true` includes `private` fields in the response.
-
-### `update(key, updates, opts?)`
-
-Finds a document by `key` (mingo query), shallow-merges `updates`, re-validates, and saves.
-
-```ts
-await users.update({ _id }, { name: 'Alex H.' });
-```
-
-Returns the merged document, or `null` if no match.
-
-### `delete(key)`
-
-Removes the matching document. If an adapter is configured and `trash` is not disabled, the document is moved to the trash bin.
-
-```ts
-await users.delete({ _id });   // → { _id }  or  null
-```
-
-### `get(key, opts?)`
-
-Returns a single document or `null`.
-
-```ts
-await users.get({ email: 'a@b.com' });
-await users.get({ _id }, { private: true });
-```
-
-### `list(query?, opts?)`
-
-Paginated, **exact-match** mingo query.
-
-```ts
-await users.list({ role: 'admin' }, { start: 0, count: 25, private: false });
-```
-
-Default `count` is 10.
-
-### `find(query?, opts?)`
-
-Like `list`, but **strings match as case-insensitive substrings**. Non-string values match exactly. Returns an array.
-
-```ts
-await users.find({ name: 'al' }, { max: 10 });
-// → [{ name: 'Alex' }, { name: 'Albert' }, ...]
-```
-
-Default `max` is 10.
-
-> **`list` vs `find`** — `list` is for paginated, exact-match queries (admin views, dashboards). `find` is for autocomplete and search. `list` fires hooks; `find` does not.
-
----
-
-## Indexes
-
-Any property with `index: <number>` in its schema gets a per-field hash index built and maintained automatically. Indexes are used internally to keep large collections fast.
-
-```ts
-properties: {
-    email : { type: 'string', index: 1 }
-}
-```
-
----
-
-## Adapter
-
-Models are in-memory by default. Provide an `Adapter` subclass to persist on every write and rehydrate on `pull()`.
-
-```ts
-import { Adapter, Model } from '@hotfusion/modeller';
-
-class FileAdapter extends Adapter {
-    async sync(id, doc) { /* called on every write */ }
-    async pull()        { /* return array of docs to load */ return []; }
-}
-
-const users = new Model('users', schema, { adapter: FileAdapter });
-await users.pull();   // hydrate before serving traffic
-```
-
-The Adapter contract:
-
-```ts
-class Adapter {
-    constructor(id: string) {}
-    async sync(id: string, doc: { _id: string, ... }): Promise<void>;
-    async pull(): Promise<any[]>;
-}
-```
-
-Modeller calls `sync` on every `insert`, `update`, and `delete` — including trash moves. `pull()` is called manually when you want to rehydrate.
-
----
-
-## Trash
-
-When an adapter is configured, deleted documents go to an in-memory trash bin keyed by `_id`. The bin supports `restore`, `has`, `get`, `permanentDelete`, `empty`, `size`, `list({ start, count })`, `find(query)`, `findAll(query)`. Every trash operation also calls `adapter.sync('trash', doc)` so it can be persisted.
-
-Pass `{ trash: false }` in model options to disable.
-
----
-
-> **Next:** [Model layer →](./MODEL.md)

package/docs/ERRORS.md

@@ -1,90 +0,0 @@
-# Errors
-
-All errors thrown by Modeller are plain objects with a `code` field. They aren't `Error` instances — catch them as plain objects and branch on `code`.
-
-> [← Back to README](../README.md)
-
----
-
-## Error codes
-
-| Code                | Source                                          | Extra fields            |
-|---------------------|-------------------------------------------------|-------------------------|
-| `VALIDATION_ERROR`  | AJV failed on `insert` / `update` / event args. | `errors` (AJV errors[]) |
-| `UNIQUE_VIOLATION`  | A `unique` field collided.                      | `field`                 |
-| `METHOD_NOT_FOUND`  | `call('id', ...)` with unregistered id.         | `id`                    |
-| `UPLOAD_NOT_FOUND`  | `callUpload('id', ...)` with unregistered id.   | `id`                    |
-| `STREAM_NOT_FOUND`  | `callStream('id', ...)` with unregistered id.   | `id`                    |
-| `EVENT_NOT_FOUND`   | `subscription.dispatch('id', ...)` mismatch.    | `id`                    |
-
----
-
-## Catching
-
-```ts
-try {
-    await users.insert({ email: 'bad' });
-} catch (err) {
-    switch (err.code) {
-        case 'VALIDATION_ERROR':
-            console.log('AJV errors:', err.errors);
-            break;
-        case 'UNIQUE_VIOLATION':
-            console.log('duplicate field:', err.field);
-            break;
-        default:
-            throw err;
-    }
-}
-```
-
----
-
-## Validation error shape
-
-`VALIDATION_ERROR` carries the raw AJV error array on `errors`. Each entry has `instancePath`, `keyword`, `message`, `params`, and `schemaPath`.
-
-```ts
-{
-    code: 'VALIDATION_ERROR',
-    errors: [
-        {
-            instancePath : '/email',
-            keyword      : 'format',
-            message      : 'must match format "email"',
-            params       : { format: 'email' },
-            schemaPath   : '#/properties/email/format'
-        }
-    ]
-}
-```
-
-`ajv-errors` is enabled, so per-field custom messages declared via `errorMessage` in the schema show up in `message`.
-
----
-
-## Hooks and errors
-
-A non-scheduled hook that throws aborts the operation. The thrown value is logged at `error` level via the [logger](./MODEL.md#logging) and re-thrown to the caller. Throw a plain object with a `code` to keep error handling consistent:
-
-```ts
-users.hook({
-    id: 'check-quota',
-    on: 'before:insert',
-    callback: async ({ data }) => {
-        if (await overQuota(data)) throw { code: 'QUOTA_EXCEEDED' };
-    }
-});
-```
-
-Scheduled hooks (those with `schedule: <ms>`) are fire-and-forget. Errors from them are logged but not propagated.
-
----
-
-## Workers and errors
-
-Worker handler errors are caught and logged at `error` level. They never crash the interval — the worker keeps ticking. If you want a worker to stop on failure, call `model.stop('worker-id')` from inside the handler's catch block.
-
----
-
-> **Related:** [Core →](./CORE.md) · [Model →](./MODEL.md)