@jini-ai/cms 0.1.0

package/dist/identity/ports.d.ts

@@ -0,0 +1,201 @@
+/**
+ * @file Port contracts for the `identity` library.
+ *
+ * Purpose:
+ * Dependency-inversion seams (port/adapter rule-of-two) for the identity/RBAC
+ * tables, plus `PasswordHasherPort` — the hashing seam behind which argon2id
+ * lives (feature.spec.md Dependencies table: "behind a HasherPort, rule-of-two
+ * candidate"). Only an in-memory adapter for each repo port ships this pass
+ * (matches the disclosed precedent set by members/navigation/integrations/
+ * analytics — see `src/server/deps.ts` comments); a SQLite adapter is a later
+ * step, not a gap introduced here.
+ *
+ * `authorize()` itself is deliberately NOT a port (one
+ * evaluator) — see `authorize.ts`. `AuthorizeDeps` there is a plain repo bag,
+ * not declared here.
+ *
+ * Interfaces and types only — no feature logic.
+ */
+import type { ISODateTime, UUID } from "../core/ports.js";
+import type { PolicyPermissionRecord, PolicyRecord, PrincipalPolicyRecord, PrincipalRecord, PrincipalRoleRecord, RolePolicyRecord, RoleRecord, SessionRecord, UserRecord } from "./types.js";
+export interface PrincipalRepoPort {
+    findById(required: {
+        workspaceId: UUID;
+        id: UUID;
+    }): Promise<PrincipalRecord | null>;
+    list(required: {
+        workspaceId: UUID;
+    }): Promise<PrincipalRecord[]>;
+    save(record: PrincipalRecord): Promise<void>;
+}
+export interface UserRepoPort {
+    findByPrincipalId(required: {
+        workspaceId: UUID;
+        principalId: UUID;
+    }): Promise<UserRecord | null>;
+    /** `username` must already be normalized (NFC + lowercase) by the caller. */
+    findByUsername(required: {
+        workspaceId: UUID;
+        username: string;
+    }): Promise<UserRecord | null>;
+    /** All `users` rows in the workspace (Users admin screen listing). Not paginated in v1 — matches `PrincipalRepoPort.list`/`RoleRepoPort.list`/`PolicyRepoPort.list`. */
+    list(required: {
+        workspaceId: UUID;
+    }): Promise<UserRecord[]>;
+    save(record: UserRecord): Promise<void>;
+}
+export interface SessionRepoPort {
+    findById(required: {
+        workspaceId: UUID;
+        id: UUID;
+    }): Promise<SessionRecord | null>;
+    findByTokenHash(required: {
+        workspaceId: UUID;
+        tokenHash: string;
+    }): Promise<SessionRecord | null>;
+    save(record: SessionRecord): Promise<void>;
+    /** Server-side revocation (logout, disable-cascade). Idempotent. */
+    revoke(required: {
+        workspaceId: UUID;
+        id: UUID;
+        revokedAt: ISODateTime;
+    }): Promise<void>;
+    /** REQ-17 — every session bound to a principal, active or not (`RESET_USER_PASSWORD`
+     * revokes each active one; unlike `DISABLE_PRINCIPAL`, which needs no session enumeration because
+     * `validateSession`'s status check already invalidates every session for a disabled principal). */
+    listByPrincipalId(required: {
+        workspaceId: UUID;
+        principalId: UUID;
+    }): Promise<SessionRecord[]>;
+}
+export interface RoleRepoPort {
+    findById(required: {
+        workspaceId: UUID;
+        id: UUID;
+    }): Promise<RoleRecord | null>;
+    findByName(required: {
+        workspaceId: UUID;
+        name: string;
+    }): Promise<RoleRecord | null>;
+    list(required: {
+        workspaceId: UUID;
+    }): Promise<RoleRecord[]>;
+    save(record: RoleRecord): Promise<void>;
+    /** REQ-19 (INV-09). Callers must apply the is_builtin + zero-reference guards
+     * themselves (see `admin-crud-service.ts`'s `deleteRole`) — this method performs the row deletion
+     * only, no business rule (mirrors `WorkspaceRepoPort.delete`'s convention). */
+    delete(required: {
+        workspaceId: UUID;
+        id: UUID;
+    }): Promise<void>;
+}
+export interface PolicyRepoPort {
+    findById(required: {
+        workspaceId: UUID;
+        id: UUID;
+    }): Promise<PolicyRecord | null>;
+    findByName(required: {
+        workspaceId: UUID;
+        name: string;
+    }): Promise<PolicyRecord | null>;
+    list(required: {
+        workspaceId: UUID;
+    }): Promise<PolicyRecord[]>;
+    save(record: PolicyRecord): Promise<void>;
+    /** REQ-19 (INV-09). See `RoleRepoPort.delete`'s doc — same "no business rule here"
+     * contract. */
+    delete(required: {
+        workspaceId: UUID;
+        id: UUID;
+    }): Promise<void>;
+}
+export interface PolicyPermissionRepoPort {
+    listByPolicyId(required: {
+        workspaceId: UUID;
+        policyId: UUID;
+    }): Promise<PolicyPermissionRecord[]>;
+    save(record: PolicyPermissionRecord): Promise<void>;
+    /** REQ-19 — cascades a `DELETE_POLICY` to the deleted policy's OWN
+     * `policy_permissions` rows only (never a different policy's rows, state.spec §3's `DELETE_POLICY`
+     * row). */
+    deleteByPolicyId(required: {
+        workspaceId: UUID;
+        policyId: UUID;
+    }): Promise<void>;
+    /** OQ-10 — removes ONE permission row by its own id, the inverse of `save`. Deliberately keyed by
+     * `id` alone (plus the workspace scope every port call carries): `removePolicyPermission` proves
+     * the row belongs to the named policy via `listByPolicyId` BEFORE calling this, so a
+     * policy-scoped delete signature here would only duplicate a check the caller has already done
+     * against rows it is holding. */
+    delete(required: {
+        workspaceId: UUID;
+        id: UUID;
+    }): Promise<void>;
+}
+export interface RolePolicyRepoPort {
+    listByRoleId(required: {
+        workspaceId: UUID;
+        roleId: UUID;
+    }): Promise<RolePolicyRecord[]>;
+    save(record: RolePolicyRecord): Promise<void>;
+    /** REQ-19 — the policy-side reference check `deletePolicy` needs (F-053-02: no
+     * writer creates such a row for a non-built-in policy today, but the guard checks for real —
+     * defensive against that constraint ever being lifted, not a assumption baked into the guard). */
+    listByPolicyId(required: {
+        workspaceId: UUID;
+        policyId: UUID;
+    }): Promise<RolePolicyRecord[]>;
+}
+export interface PrincipalRoleRepoPort {
+    listByPrincipalId(required: {
+        workspaceId: UUID;
+        principalId: UUID;
+    }): Promise<PrincipalRoleRecord[]>;
+    save(record: PrincipalRoleRecord): Promise<void>;
+    /** REQ-19 — the reference check `deleteRole` needs (INV-09). */
+    listByRoleId(required: {
+        workspaceId: UUID;
+        roleId: UUID;
+    }): Promise<PrincipalRoleRecord[]>;
+}
+export interface PrincipalPolicyRepoPort {
+    listByPrincipalId(required: {
+        workspaceId: UUID;
+        principalId: UUID;
+    }): Promise<PrincipalPolicyRecord[]>;
+    save(record: PrincipalPolicyRecord): Promise<void>;
+    /** REQ-19 — the reference check `deletePolicy` needs (INV-09); this is the
+     * reference source that matters in practice (`ATTACH_POLICY` does write these rows for
+     * non-built-in policies, unlike `role_policies`). */
+    listByPolicyId(required: {
+        workspaceId: UUID;
+        policyId: UUID;
+    }): Promise<PrincipalPolicyRecord[]>;
+}
+/**
+ * The nine identity repo ports, bagged for the functions in this library that
+ * need several of them at once (`authorize`, seeding, the auth service).
+ * Composition roots (`server/app.ts` / `server/deps.ts`) assemble this from
+ * individual `RouteDeps` fields.
+ */
+export interface IdentityRepos {
+    principals: PrincipalRepoPort;
+    users: UserRepoPort;
+    sessions: SessionRepoPort;
+    roles: RoleRepoPort;
+    policies: PolicyRepoPort;
+    policyPermissions: PolicyPermissionRepoPort;
+    rolePolicies: RolePolicyRepoPort;
+    principalRoles: PrincipalRoleRepoPort;
+    principalPolicies: PrincipalPolicyRepoPort;
+}
+/**
+ * Password hashing seam (INV-05). `argon2` (native argon2id bindings) is the
+ * v1 adapter — see `hasher.ts`. Declared as a port per the spec's own
+ * "rule-of-two candidate" language; only one real adapter exists this pass.
+ */
+export interface PasswordHasherPort {
+    hash(password: string): Promise<string>;
+    verify(hash: string, password: string): Promise<boolean>;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/identity/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../src/identity/ports.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EACV,sBAAsB,EACtB,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,UAAU,EACX,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;IACrF,IAAI,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,YAAY;IAC3B,iBAAiB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAClG,6EAA6E;IAC7E,cAAc,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC9F,wKAAwK;IACxK,IAAI,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACnF,eAAe,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACnG,IAAI,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,oEAAoE;IACpE,MAAM,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,EAAE,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,WAAW,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzF;;uGAEmG;IACnG,iBAAiB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAChF,UAAU,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACtF,IAAI,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxC;;mFAE+E;IAC/E,MAAM,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAClF,UAAU,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACxF,IAAI,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C;mBACe;IACf,MAAM,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,wBAAwB;IACvC,cAAc,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpD;;eAEW;IACX,gBAAgB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjF;;;;qCAIiC;IACjC,MAAM,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,EAAE,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C;;sGAEkG;IAClG,cAAc,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;CAC9F;AAED,MAAM,WAAW,qBAAqB;IACpC,iBAAiB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IACtG,IAAI,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,gEAAgE;IAChE,YAAY,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;CAC7F;AAED,MAAM,WAAW,uBAAuB;IACtC,iBAAiB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACxG,IAAI,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD;;yDAEqD;IACrD,cAAc,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;CACnG;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,iBAAiB,CAAC;IAC9B,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,eAAe,CAAC;IAC1B,KAAK,EAAE,YAAY,CAAC;IACpB,QAAQ,EAAE,cAAc,CAAC;IACzB,iBAAiB,EAAE,wBAAwB,CAAC;IAC5C,YAAY,EAAE,kBAAkB,CAAC;IACjC,cAAc,EAAE,qBAAqB,CAAC;IACtC,iBAAiB,EAAE,uBAAuB,CAAC;CAC5C;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D"}

package/dist/identity/ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/identity/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../src/identity/ports.ts"],"names":[],"mappings":""}

package/dist/identity/repo.memory.d.ts

@@ -0,0 +1,164 @@
+import type { PolicyPermissionRecord, PolicyRecord, PrincipalPolicyRecord, PrincipalRecord, PrincipalRoleRecord, RolePolicyRecord, RoleRecord, SessionRecord, UserRecord } from "./types.js";
+import type { PolicyPermissionRepoPort, PolicyRepoPort, PrincipalPolicyRepoPort, PrincipalRepoPort, PrincipalRoleRepoPort, RolePolicyRepoPort, RoleRepoPort, SessionRepoPort, UserRepoPort } from "./ports.js";
+/**
+ * @file In-memory adapters for the `identity` repo ports.
+ *
+ * Purpose:
+ * Test/dev implementations of the nine identity repo ports. Mirrors the exact
+ * style of `src/features/post/repo.memory.ts` / `src/members/repo.memory.ts`:
+ * constructor takes seed rows, methods filter/mutate an internal array. No
+ * business rules live here — that belongs to `authorize.ts`/`auth-service.ts`/
+ * `seed.ts`.
+ *
+ * Architectural role:
+ * The only adapter this pass — a SQLite adapter is a later step (see
+ * `ports.ts` header and `server/deps.ts` comments), matching the disclosed
+ * precedent of members/navigation/integrations/analytics.
+ */
+export declare class InMemoryPrincipalRepo implements PrincipalRepoPort {
+    private rows;
+    constructor(initialRows?: PrincipalRecord[]);
+    findById(required: {
+        workspaceId: string;
+        id: string;
+    }): Promise<PrincipalRecord | null>;
+    list(required: {
+        workspaceId: string;
+    }): Promise<PrincipalRecord[]>;
+    save(record: PrincipalRecord): Promise<void>;
+}
+export declare class InMemoryUserRepo implements UserRepoPort {
+    private rows;
+    constructor(initialRows?: UserRecord[]);
+    findByPrincipalId(required: {
+        workspaceId: string;
+        principalId: string;
+    }): Promise<UserRecord | null>;
+    findByUsername(required: {
+        workspaceId: string;
+        username: string;
+    }): Promise<UserRecord | null>;
+    list(required: {
+        workspaceId: string;
+    }): Promise<UserRecord[]>;
+    save(record: UserRecord): Promise<void>;
+}
+export declare class InMemorySessionRepo implements SessionRepoPort {
+    private rows;
+    constructor(initialRows?: SessionRecord[]);
+    findById(required: {
+        workspaceId: string;
+        id: string;
+    }): Promise<SessionRecord | null>;
+    findByTokenHash(required: {
+        workspaceId: string;
+        tokenHash: string;
+    }): Promise<SessionRecord | null>;
+    save(record: SessionRecord): Promise<void>;
+    revoke(required: {
+        workspaceId: string;
+        id: string;
+        revokedAt: string;
+    }): Promise<void>;
+    listByPrincipalId(required: {
+        workspaceId: string;
+        principalId: string;
+    }): Promise<SessionRecord[]>;
+}
+export declare class InMemoryRoleRepo implements RoleRepoPort {
+    private rows;
+    constructor(initialRows?: RoleRecord[]);
+    findById(required: {
+        workspaceId: string;
+        id: string;
+    }): Promise<RoleRecord | null>;
+    findByName(required: {
+        workspaceId: string;
+        name: string;
+    }): Promise<RoleRecord | null>;
+    list(required: {
+        workspaceId: string;
+    }): Promise<RoleRecord[]>;
+    save(record: RoleRecord): Promise<void>;
+    delete(required: {
+        workspaceId: string;
+        id: string;
+    }): Promise<void>;
+}
+export declare class InMemoryPolicyRepo implements PolicyRepoPort {
+    private rows;
+    constructor(initialRows?: PolicyRecord[]);
+    findById(required: {
+        workspaceId: string;
+        id: string;
+    }): Promise<PolicyRecord | null>;
+    findByName(required: {
+        workspaceId: string;
+        name: string;
+    }): Promise<PolicyRecord | null>;
+    list(required: {
+        workspaceId: string;
+    }): Promise<PolicyRecord[]>;
+    save(record: PolicyRecord): Promise<void>;
+    delete(required: {
+        workspaceId: string;
+        id: string;
+    }): Promise<void>;
+}
+export declare class InMemoryPolicyPermissionRepo implements PolicyPermissionRepoPort {
+    private rows;
+    constructor(initialRows?: PolicyPermissionRecord[]);
+    listByPolicyId(required: {
+        workspaceId: string;
+        policyId: string;
+    }): Promise<PolicyPermissionRecord[]>;
+    save(record: PolicyPermissionRecord): Promise<void>;
+    deleteByPolicyId(required: {
+        workspaceId: string;
+        policyId: string;
+    }): Promise<void>;
+    delete(required: {
+        workspaceId: string;
+        id: string;
+    }): Promise<void>;
+}
+export declare class InMemoryRolePolicyRepo implements RolePolicyRepoPort {
+    private rows;
+    constructor(initialRows?: RolePolicyRecord[]);
+    listByRoleId(required: {
+        workspaceId: string;
+        roleId: string;
+    }): Promise<RolePolicyRecord[]>;
+    listByPolicyId(required: {
+        workspaceId: string;
+        policyId: string;
+    }): Promise<RolePolicyRecord[]>;
+    save(record: RolePolicyRecord): Promise<void>;
+}
+export declare class InMemoryPrincipalRoleRepo implements PrincipalRoleRepoPort {
+    private rows;
+    constructor(initialRows?: PrincipalRoleRecord[]);
+    listByPrincipalId(required: {
+        workspaceId: string;
+        principalId: string;
+    }): Promise<PrincipalRoleRecord[]>;
+    listByRoleId(required: {
+        workspaceId: string;
+        roleId: string;
+    }): Promise<PrincipalRoleRecord[]>;
+    save(record: PrincipalRoleRecord): Promise<void>;
+}
+export declare class InMemoryPrincipalPolicyRepo implements PrincipalPolicyRepoPort {
+    private rows;
+    constructor(initialRows?: PrincipalPolicyRecord[]);
+    listByPrincipalId(required: {
+        workspaceId: string;
+        principalId: string;
+    }): Promise<PrincipalPolicyRecord[]>;
+    listByPolicyId(required: {
+        workspaceId: string;
+        policyId: string;
+    }): Promise<PrincipalPolicyRecord[]>;
+    save(record: PrincipalPolicyRecord): Promise<void>;
+}
+//# sourceMappingURL=repo.memory.d.ts.map

package/dist/identity/repo.memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.memory.d.ts","sourceRoot":"","sources":["../../src/identity/repo.memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,sBAAsB,EACtB,YAAY,EACZ,qBAAqB,EACrB,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,UAAU,EACX,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EACV,wBAAwB,EACxB,cAAc,EACd,uBAAuB,EACvB,iBAAiB,EACjB,qBAAqB,EACrB,kBAAkB,EAClB,YAAY,EACZ,eAAe,EACf,YAAY,EACb,MAAM,YAAY,CAAC;AAEpB;;;;;;;;;;;;;;GAcG;AAEH,qBAAa,qBAAsB,YAAW,iBAAiB;IAC7D,OAAO,CAAC,IAAI,CAAoB;gBAEpB,WAAW,GAAE,eAAe,EAAO;IAIzC,QAAQ,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAMxF,IAAI,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;IAInE,IAAI,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;CAUnD;AAED,qBAAa,gBAAiB,YAAW,YAAY;IACnD,OAAO,CAAC,IAAI,CAAe;gBAEf,WAAW,GAAE,UAAU,EAAO;IAIpC,iBAAiB,CAAC,QAAQ,EAAE;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAQxB,cAAc,CAAC,QAAQ,EAAE;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAQxB,IAAI,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAI9D,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;CAU9C;AAED,qBAAa,mBAAoB,YAAW,eAAe;IACzD,OAAO,CAAC,IAAI,CAAkB;gBAElB,WAAW,GAAE,aAAa,EAAO;IAIvC,QAAQ,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAMtF,eAAe,CAAC,QAAQ,EAAE;QAC9B,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAQ3B,IAAI,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAW1C,MAAM,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvF,iBAAiB,CAAC,QAAQ,EAAE;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;CAK7B;AAED,qBAAa,gBAAiB,YAAW,YAAY;IACnD,OAAO,CAAC,IAAI,CAAe;gBAEf,WAAW,GAAE,UAAU,EAAO;IAIpC,QAAQ,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAMnF,UAAU,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAOvF,IAAI,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAI9D,IAAI,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAWvC,MAAM,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAK3E;AAED,qBAAa,kBAAmB,YAAW,cAAc;IACvD,OAAO,CAAC,IAAI,CAAiB;gBAEjB,WAAW,GAAE,YAAY,EAAO;IAItC,QAAQ,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAMrF,UAAU,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAOzF,IAAI,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAIhE,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzC,MAAM,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAK3E;AAED,qBAAa,4BAA6B,YAAW,wBAAwB;IAC3E,OAAO,CAAC,IAAI,CAA2B;gBAE3B,WAAW,GAAE,sBAAsB,EAAO;IAIhD,cAAc,CAAC,QAAQ,EAAE;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAM/B,IAAI,CAAC,MAAM,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAWnD,gBAAgB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAMpF,MAAM,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;CAK3E;AAED,qBAAa,sBAAuB,YAAW,kBAAkB;IAC/D,OAAO,CAAC,IAAI,CAAqB;gBAErB,WAAW,GAAE,gBAAgB,EAAO;IAI1C,YAAY,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAM5F,cAAc,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAMhG,IAAI,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;CAUpD;AAED,qBAAa,yBAA0B,YAAW,qBAAqB;IACrE,OAAO,CAAC,IAAI,CAAwB;gBAExB,WAAW,GAAE,mBAAmB,EAAO;IAI7C,iBAAiB,CAAC,QAAQ,EAAE;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAM5B,YAAY,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAM/F,IAAI,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;CAUvD;AAED,qBAAa,2BAA4B,YAAW,uBAAuB;IACzE,OAAO,CAAC,IAAI,CAA0B;gBAE1B,WAAW,GAAE,qBAAqB,EAAO;IAI/C,iBAAiB,CAAC,QAAQ,EAAE;QAChC,WAAW,EAAE,MAAM,CAAC;QACpB,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAM9B,cAAc,CAAC,QAAQ,EAAE;QAC7B,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAM9B,IAAI,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;CAUzD"}

package/dist/identity/repo.memory.js

@@ -0,0 +1,224 @@
+/**
+ * @file In-memory adapters for the `identity` repo ports.
+ *
+ * Purpose:
+ * Test/dev implementations of the nine identity repo ports. Mirrors the exact
+ * style of `src/features/post/repo.memory.ts` / `src/members/repo.memory.ts`:
+ * constructor takes seed rows, methods filter/mutate an internal array. No
+ * business rules live here — that belongs to `authorize.ts`/`auth-service.ts`/
+ * `seed.ts`.
+ *
+ * Architectural role:
+ * The only adapter this pass — a SQLite adapter is a later step (see
+ * `ports.ts` header and `server/deps.ts` comments), matching the disclosed
+ * precedent of members/navigation/integrations/analytics.
+ */
+export class InMemoryPrincipalRepo {
+    rows;
+    constructor(initialRows = []) {
+        this.rows = [...initialRows];
+    }
+    async findById(required) {
+        return (this.rows.find((row) => row.workspaceId === required.workspaceId && row.id === required.id) ?? null);
+    }
+    async list(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId);
+    }
+    async save(record) {
+        const index = this.rows.findIndex((row) => row.workspaceId === record.workspaceId && row.id === record.id);
+        if (index === -1) {
+            this.rows.push(record);
+            return;
+        }
+        this.rows[index] = record;
+    }
+}
+export class InMemoryUserRepo {
+    rows;
+    constructor(initialRows = []) {
+        this.rows = [...initialRows];
+    }
+    async findByPrincipalId(required) {
+        return (this.rows.find((row) => row.workspaceId === required.workspaceId && row.principalId === required.principalId) ?? null);
+    }
+    async findByUsername(required) {
+        return (this.rows.find((row) => row.workspaceId === required.workspaceId && row.username === required.username) ?? null);
+    }
+    async list(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId);
+    }
+    async save(record) {
+        const index = this.rows.findIndex((row) => row.workspaceId === record.workspaceId && row.principalId === record.principalId);
+        if (index === -1) {
+            this.rows.push(record);
+            return;
+        }
+        this.rows[index] = record;
+    }
+}
+export class InMemorySessionRepo {
+    rows;
+    constructor(initialRows = []) {
+        this.rows = [...initialRows];
+    }
+    async findById(required) {
+        return (this.rows.find((row) => row.workspaceId === required.workspaceId && row.id === required.id) ?? null);
+    }
+    async findByTokenHash(required) {
+        return (this.rows.find((row) => row.workspaceId === required.workspaceId && row.tokenHash === required.tokenHash) ?? null);
+    }
+    async save(record) {
+        const index = this.rows.findIndex((row) => row.workspaceId === record.workspaceId && row.id === record.id);
+        if (index === -1) {
+            this.rows.push(record);
+            return;
+        }
+        this.rows[index] = record;
+    }
+    async revoke(required) {
+        const row = this.rows.find((candidate) => candidate.workspaceId === required.workspaceId && candidate.id === required.id);
+        if (row)
+            row.revokedAt = required.revokedAt;
+    }
+    async listByPrincipalId(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId && row.principalId === required.principalId);
+    }
+}
+export class InMemoryRoleRepo {
+    rows;
+    constructor(initialRows = []) {
+        this.rows = [...initialRows];
+    }
+    async findById(required) {
+        return (this.rows.find((row) => row.workspaceId === required.workspaceId && row.id === required.id) ?? null);
+    }
+    async findByName(required) {
+        return (this.rows.find((row) => row.workspaceId === required.workspaceId && row.name === required.name) ??
+            null);
+    }
+    async list(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId);
+    }
+    async save(record) {
+        const index = this.rows.findIndex((row) => row.workspaceId === record.workspaceId && row.id === record.id);
+        if (index === -1) {
+            this.rows.push(record);
+            return;
+        }
+        this.rows[index] = record;
+    }
+    async delete(required) {
+        this.rows = this.rows.filter((row) => !(row.workspaceId === required.workspaceId && row.id === required.id));
+    }
+}
+export class InMemoryPolicyRepo {
+    rows;
+    constructor(initialRows = []) {
+        this.rows = [...initialRows];
+    }
+    async findById(required) {
+        return (this.rows.find((row) => row.workspaceId === required.workspaceId && row.id === required.id) ?? null);
+    }
+    async findByName(required) {
+        return (this.rows.find((row) => row.workspaceId === required.workspaceId && row.name === required.name) ??
+            null);
+    }
+    async list(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId);
+    }
+    async save(record) {
+        const index = this.rows.findIndex((row) => row.workspaceId === record.workspaceId && row.id === record.id);
+        if (index === -1) {
+            this.rows.push(record);
+            return;
+        }
+        this.rows[index] = record;
+    }
+    async delete(required) {
+        this.rows = this.rows.filter((row) => !(row.workspaceId === required.workspaceId && row.id === required.id));
+    }
+}
+export class InMemoryPolicyPermissionRepo {
+    rows;
+    constructor(initialRows = []) {
+        this.rows = [...initialRows];
+    }
+    async listByPolicyId(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId && row.policyId === required.policyId);
+    }
+    async save(record) {
+        const index = this.rows.findIndex((row) => row.workspaceId === record.workspaceId && row.id === record.id);
+        if (index === -1) {
+            this.rows.push(record);
+            return;
+        }
+        this.rows[index] = record;
+    }
+    async deleteByPolicyId(required) {
+        this.rows = this.rows.filter((row) => !(row.workspaceId === required.workspaceId && row.policyId === required.policyId));
+    }
+    async delete(required) {
+        this.rows = this.rows.filter((row) => !(row.workspaceId === required.workspaceId && row.id === required.id));
+    }
+}
+export class InMemoryRolePolicyRepo {
+    rows;
+    constructor(initialRows = []) {
+        this.rows = [...initialRows];
+    }
+    async listByRoleId(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId && row.roleId === required.roleId);
+    }
+    async listByPolicyId(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId && row.policyId === required.policyId);
+    }
+    async save(record) {
+        const index = this.rows.findIndex((row) => row.workspaceId === record.workspaceId && row.id === record.id);
+        if (index === -1) {
+            this.rows.push(record);
+            return;
+        }
+        this.rows[index] = record;
+    }
+}
+export class InMemoryPrincipalRoleRepo {
+    rows;
+    constructor(initialRows = []) {
+        this.rows = [...initialRows];
+    }
+    async listByPrincipalId(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId && row.principalId === required.principalId);
+    }
+    async listByRoleId(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId && row.roleId === required.roleId);
+    }
+    async save(record) {
+        const index = this.rows.findIndex((row) => row.workspaceId === record.workspaceId && row.id === record.id);
+        if (index === -1) {
+            this.rows.push(record);
+            return;
+        }
+        this.rows[index] = record;
+    }
+}
+export class InMemoryPrincipalPolicyRepo {
+    rows;
+    constructor(initialRows = []) {
+        this.rows = [...initialRows];
+    }
+    async listByPrincipalId(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId && row.principalId === required.principalId);
+    }
+    async listByPolicyId(required) {
+        return this.rows.filter((row) => row.workspaceId === required.workspaceId && row.policyId === required.policyId);
+    }
+    async save(record) {
+        const index = this.rows.findIndex((row) => row.workspaceId === record.workspaceId && row.id === record.id);
+        if (index === -1) {
+            this.rows.push(record);
+            return;
+        }
+        this.rows[index] = record;
+    }
+}
+//# sourceMappingURL=repo.memory.js.map

package/dist/identity/repo.memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo.memory.js","sourceRoot":"","sources":["../../src/identity/repo.memory.ts"],"names":[],"mappings":"AAuBA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,OAAO,qBAAqB;IACxB,IAAI,CAAoB;IAEhC,YAAY,cAAiC,EAAE;QAC7C,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAA6C;QAC1D,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CACpG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAiC;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAuB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CACxE,CAAC;QACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IACnB,IAAI,CAAe;IAE3B,YAAY,cAA4B,EAAE;QACxC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAGvB;QACC,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,CACZ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAC9F,IAAI,IAAI,CACV,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAGpB;QACC,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,CACZ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CACxF,IAAI,IAAI,CACV,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAiC;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAkB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,CAC1F,CAAC;QACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,mBAAmB;IACtB,IAAI,CAAkB;IAE9B,YAAY,cAA+B,EAAE;QAC3C,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAA6C;QAC1D,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CACpG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,QAGrB;QACC,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,CACZ,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAC1F,IAAI,IAAI,CACV,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAqB;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CACxE,CAAC;QACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgE;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CACxB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAC9F,CAAC;QACF,IAAI,GAAG;YAAE,GAAG,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAGvB;QACC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAC9F,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,gBAAgB;IACnB,IAAI,CAAe;IAE3B,YAAY,cAA4B,EAAE;QACxC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAA6C;QAC1D,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CACpG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAA+C;QAC9D,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;YAC/F,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAiC;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAkB;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CACxE,CAAC;QACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAA6C;QACxD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAC1B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,CAC/E,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IACrB,IAAI,CAAiB;IAE7B,YAAY,cAA8B,EAAE;QAC1C,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAA6C;QAC1D,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CACpG,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAA+C;QAC9D,OAAO,CACL,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;YAC/F,IAAI,CACL,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,QAAiC;QAC1C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAAC,CAAC;IAC7E,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAoB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CACxE,CAAC;QACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAA6C;QACxD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAC1B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,CAC/E,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,4BAA4B;IAC/B,IAAI,CAA2B;IAEvC,YAAY,cAAwC,EAAE;QACpD,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAGpB;QACC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CACxF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAA8B;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CACxE,CAAC;QACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,QAAmD;QACxE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAC1B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAC3F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAA6C;QACxD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAC1B,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,CAAC,CAC/E,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,sBAAsB;IACzB,IAAI,CAAqB;IAEjC,YAAY,cAAkC,EAAE;QAC9C,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAiD;QAClE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CACpF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAmD;QACtE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CACxF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAwB;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CACxE,CAAC;QACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,yBAAyB;IAC5B,IAAI,CAAwB;IAEpC,YAAY,cAAqC,EAAE;QACjD,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAGvB;QACC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAC9F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAiD;QAClE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,CACpF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAA2B;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CACxE,CAAC;QACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,OAAO,2BAA2B;IAC9B,IAAI,CAA0B;IAEtC,YAAY,cAAuC,EAAE;QACnD,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,QAGvB;QACC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAC9F,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAGpB;QACC,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,CACxF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAA6B;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAC/B,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CACxE,CAAC;QACF,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC5B,CAAC;CACF"}