@kyro-cms/core 0.1.6 → 0.1.8

package/dist/{types-BGM5MV_K.d.cts → types-Bt1OEk0S.d.ts}

@@ -4,8 +4,12 @@ interface FieldAdmin {
     readOnly?: boolean;
     hidden?: boolean;
     width?: string;
+    position?: "sidebar" | "main";
+    autoGenerate?: string;
+    action?: string;
+    method?: string;
+    inline?: boolean;
     condition?: (data: Record<string, any>, siblingData: Record<string, any>) => boolean;
-    position?: 'sidebar' | 'main';
 }
 interface BaseField {
     name: string;
@@ -31,9 +35,9 @@ interface ValidateOptions {
     required?: boolean;
 }
 type Hook$1 = (args: any) => Promise<any> | any;
-type TextFieldVariant = 'text' | 'email' | 'password' | 'url' | 'id';
+type TextFieldVariant = "text" | "email" | "password" | "url" | "id";
 interface TextField extends BaseField {
-    type: 'text';
+    type: "text";
     variant?: TextFieldVariant;
     minLength?: number;
     maxLength?: number;
@@ -42,7 +46,7 @@ interface TextField extends BaseField {
     localized?: boolean;
 }
 interface NumberField extends BaseField {
-    type: 'number';
+    type: "number";
     min?: number;
     max?: number;
     step?: number;
@@ -50,29 +54,29 @@ interface NumberField extends BaseField {
     hasMany?: boolean;
 }
 interface CheckboxField extends BaseField {
-    type: 'checkbox';
+    type: "checkbox";
 }
 interface DateField extends BaseField {
-    type: 'date';
+    type: "date";
     minDate?: string;
     maxDate?: string;
     time?: boolean;
 }
 interface EmailField extends BaseField {
-    type: 'email';
+    type: "email";
 }
 interface PasswordField extends BaseField {
-    type: 'password';
+    type: "password";
 }
 interface TextareaField extends BaseField {
-    type: 'textarea';
+    type: "textarea";
     minLength?: number;
     maxLength?: number;
     rows?: number;
     localized?: boolean;
 }
 interface SelectField extends BaseField {
-    type: 'select';
+    type: "select";
     options: Array<{
         label: string;
         value: string;
@@ -81,7 +85,7 @@ interface SelectField extends BaseField {
     defaultValue?: string | string[];
 }
 interface RadioField extends BaseField {
-    type: 'radio';
+    type: "radio";
     options: Array<{
         label: string;
         value: string;
@@ -89,44 +93,52 @@ interface RadioField extends BaseField {
     defaultValue?: string;
 }
 interface ColorField extends BaseField {
-    type: 'color';
-    format?: 'hex' | 'rgb' | 'hsl';
+    type: "color";
+    format?: "hex" | "rgb" | "hsl";
     defaultValue?: string;
 }
+interface ImageField extends BaseField {
+    type: "image";
+    minCount?: number;
+    maxCount?: number;
+    allowedTypes?: string[];
+    maxSize?: number;
+}
 interface RichTextBlock {
     type: string;
     data: Record<string, any>;
     children?: RichTextBlock[];
 }
 interface RichTextField extends BaseField {
-    type: 'richtext';
-    editor?: 'lexical' | 'slate' | 'blocks';
+    type: "richtext";
+    editor?: "lexical" | "slate" | "blocks";
+    hasBlocks?: boolean;
     defaultValue?: RichTextBlock[];
     localized?: boolean;
 }
 interface JSONField extends BaseField {
-    type: 'json';
+    type: "json";
     defaultValue?: Record<string, any>;
 }
 interface CodeField extends BaseField {
-    type: 'code';
+    type: "code";
     language?: string;
     defaultValue?: string;
 }
 interface UploadField extends BaseField {
-    type: 'upload';
+    type: "upload";
     relationTo: string;
     hasMany?: boolean;
     maxDepth?: number;
     defaultValue?: string;
 }
 interface MarkdownField extends BaseField {
-    type: 'markdown';
+    type: "markdown";
     localized?: boolean;
     defaultValue?: string;
 }
 interface RelationshipField extends BaseField {
-    type: 'relationship';
+    type: "relationship";
     relationTo: string | string[];
     hasMany?: boolean;
     maxDepth?: number;
@@ -137,7 +149,7 @@ interface RelationshipField extends BaseField {
     defaultValue?: string | string[];
 }
 interface ArrayField extends BaseField {
-    type: 'array';
+    type: "array";
     fields: Field[];
     minRows?: number;
     maxRows?: number;
@@ -148,19 +160,31 @@ interface ArrayField extends BaseField {
     defaultValue?: Record<string, any>[];
 }
 interface GroupField extends BaseField {
-    type: 'group';
+    type: "group";
     fields: Field[];
     defaultValue?: Record<string, any>;
 }
+interface BlockImage {
+    url: string;
+    alt?: string;
+}
+interface BlockAdmin {
+    group?: string;
+    images?: {
+        icon?: BlockImage | string;
+        thumbnail?: BlockImage | string;
+    };
+}
 interface Block {
     slug: string;
     label: string;
     fields: Field[];
     imageURL?: string;
+    admin?: BlockAdmin;
 }
 interface BlocksField extends BaseField {
-    type: 'blocks';
-    blocks: Block[];
+    type: "blocks";
+    blocks?: Block[];
     minRows?: number;
     maxRows?: number;
     defaultValue?: Array<{
@@ -168,19 +192,19 @@ interface BlocksField extends BaseField {
         [key: string]: any;
     }>;
 }
-interface RowField extends Omit<BaseField, 'name'> {
-    type: 'row';
+interface RowField extends Omit<BaseField, "name"> {
+    type: "row";
     fields: Field[];
     name?: string;
 }
-interface CollapsibleField extends Omit<BaseField, 'name'> {
-    type: 'collapsible';
+interface CollapsibleField extends Omit<BaseField, "name"> {
+    type: "collapsible";
     fields: Field[];
     label: string;
     name?: string;
 }
-interface TabsField extends Omit<BaseField, 'name'> {
-    type: 'tabs';
+interface TabsField extends Omit<BaseField, "name"> {
+    type: "tabs";
     tabs: Array<{
         label: string;
         fields: Field[];
@@ -188,8 +212,15 @@ interface TabsField extends Omit<BaseField, 'name'> {
     }>;
     name?: string;
 }
-type Field = TextField | NumberField | CheckboxField | DateField | EmailField | PasswordField | TextareaField | SelectField | RadioField | ColorField | RichTextField | JSONField | CodeField | UploadField | MarkdownField | RelationshipField | ArrayField | GroupField | BlocksField | RowField | CollapsibleField | TabsField;
-type FieldType = Field['type'];
+interface ButtonField extends BaseField {
+    type: "button";
+    label: string;
+    action?: string;
+    method?: string;
+    inline?: boolean;
+}
+type Field = TextField | NumberField | CheckboxField | DateField | EmailField | PasswordField | TextareaField | SelectField | RadioField | ColorField | ImageField | RichTextField | JSONField | CodeField | UploadField | MarkdownField | RelationshipField | ArrayField | GroupField | BlocksField | RowField | CollapsibleField | TabsField | ButtonField;
+type FieldType = Field["type"];
 declare function isTextField(field: Field): field is TextField;
 declare function isNumberField(field: Field): field is NumberField;
 declare function isRelationshipField(field: Field): field is RelationshipField;
@@ -197,14 +228,15 @@ declare function isArrayField(field: Field): field is ArrayField;
 declare function isGroupField(field: Field): field is GroupField;
 declare function isBlocksField(field: Field): field is BlocksField;
 declare function isUploadField(field: Field): field is UploadField;
+declare function isImageField(field: Field): field is ImageField;
 declare function isRichTextField(field: Field): field is RichTextField;
 declare function isSelectField(field: Field): field is SelectField;
 declare function isLayoutField(field: Field): field is RowField | CollapsibleField | TabsField;
 declare const PRIMITIVE_FIELD_TYPES: readonly ["text", "number", "checkbox", "date", "email", "password", "textarea", "select", "radio", "color"];
-declare const COMPLEX_FIELD_TYPES: readonly ["richtext", "json", "code", "upload", "markdown"];
+declare const COMPLEX_FIELD_TYPES: readonly ["richtext", "json", "code", "upload", "image", "markdown"];
 declare const RELATIONAL_FIELD_TYPES: readonly ["relationship", "array", "group", "blocks"];
 declare const LAYOUT_FIELD_TYPES: readonly ["row", "collapsible", "tabs"];
-declare const ALL_FIELD_TYPES: readonly ["text", "number", "checkbox", "date", "email", "password", "textarea", "select", "radio", "color", "richtext", "json", "code", "upload", "markdown", "relationship", "array", "group", "blocks", "row", "collapsible", "tabs"];
+declare const ALL_FIELD_TYPES: readonly ["text", "number", "checkbox", "date", "email", "password", "textarea", "select", "radio", "color", "richtext", "json", "code", "upload", "image", "markdown", "relationship", "array", "group", "blocks", "row", "collapsible", "tabs"];
 
 interface Request {
     body?: any;
@@ -319,6 +351,7 @@ interface AdminConfig {
         defaultLimit?: number;
         limits?: number[];
     };
+    layout?: 'split' | 'single';
 }
 interface UploadConfig {
     staticDir?: string;
@@ -395,10 +428,12 @@ interface CollectionConfig {
         fields: Record<string, number | 'text'>;
         options?: Record<string, any>;
     }>;
-    typescript?: {
-        interface?: string;
-    };
     custom?: Record<string, any>;
+    tabs?: Array<{
+        label: string;
+        fields: Field[];
+        name?: string;
+    }>;
 }
 interface GlobalConfig {
     slug: string;
@@ -415,6 +450,11 @@ interface GlobalConfig {
         interface?: string;
     };
     custom?: Record<string, any>;
+    tabs?: Array<{
+        label: string;
+        fields: Field[];
+        name?: string;
+    }>;
 }
 interface FindArgs {
     collection: string;
@@ -586,4 +626,4 @@ interface KyroConfig {
     debug?: boolean;
 }
 
-export { type RadioField as $, ALL_FIELD_TYPES as A, type BaseAdapter as B, type CollectionConfig as C, type DeleteArgs as D, type EmailField as E, type Field as F, type GlobalConfig as G, type Hook as H, type FieldAdmin as I, type FieldHooks as J, type KyroConfig as K, type FieldType as L, type GlobalAccess as M, type GlobalHooks as N, type GroupField as O, type PluginConfig as P, type HookArgs as Q, type RelationshipField as R, type ImageSize as S, type JSONField as T, type UpdateArgs as U, LAYOUT_FIELD_TYPES as V, type MarkdownField as W, type NumberField as X, PRIMITIVE_FIELD_TYPES as Y, type PasswordField as Z, RELATIONAL_FIELD_TYPES as _, type FindArgs as a, type RichTextBlock as a0, type RichTextField as a1, type RowField as a2, type SelectField as a3, type TabsField as a4, type TextField as a5, type TextareaField as a6, type UploadConfig as a7, type ValidateOptions as a8, type VersionConfig as a9, type WhereClause as aa, evaluateAccess as ab, getWhereClause as ac, isArrayField as ad, isBlocksField as ae, isGroupField as af, isLayoutField as ag, isNumberField as ah, isRelationshipField as ai, isRichTextField as aj, isSelectField as ak, isTextField as al, isUploadField as am, mergeWhereClauses as an, runFieldHooks as ao, runHooks as ap, type FindResult as b, type FindByIDArgs as c, type CreateArgs as d, type UploadField as e, type User as f, type Request as g, type AccessArgs as h, type AccessControl as i, type AdapterConfig as j, type AdminConfig as k, type ArrayField as l, type AuthConfig as m, type BaseField as n, type Block as o, type BlocksField as p, COMPLEX_FIELD_TYPES as q, type CheckboxField as r, type CodeField as s, type CollapsibleField as t, type CollectionAccess as u, type CollectionHooks as v, type ColorField as w, type CreateResult as x, type DateField as y, type FieldAccess as z };
+export { type AdapterConfig as $, type AdminConfig as A, type BaseField as B, type CheckboxField as C, type DateField as D, type EmailField as E, type Field as F, type GlobalConfig as G, type CreateArgs as H, type ImageField as I, type JSONField as J, type KyroConfig as K, type UpdateArgs as L, type MarkdownField as M, type NumberField as N, type DeleteArgs as O, type PasswordField as P, type User as Q, type RadioField as R, type SelectField as S, type TabsField as T, type UploadConfig as U, type VersionConfig as V, type Request as W, type Hook as X, ALL_FIELD_TYPES as Y, type AccessArgs as Z, type AccessControl as _, type ArrayField as a, COMPLEX_FIELD_TYPES as a0, type CollectionAccess as a1, type CollectionHooks as a2, type CreateResult as a3, type FieldAccess as a4, type FieldHooks as a5, type GlobalAccess as a6, type GlobalHooks as a7, type HookArgs as a8, LAYOUT_FIELD_TYPES as a9, PRIMITIVE_FIELD_TYPES as aa, RELATIONAL_FIELD_TYPES as ab, type ValidateOptions as ac, type WhereClause as ad, evaluateAccess as ae, getWhereClause as af, isArrayField as ag, isBlocksField as ah, isGroupField as ai, isImageField as aj, isLayoutField as ak, isNumberField as al, isRelationshipField as am, isRichTextField as an, isSelectField as ao, isTextField as ap, isUploadField as aq, mergeWhereClauses as ar, runFieldHooks as as, runHooks as at, type AuthConfig as b, type Block as c, type BlockAdmin as d, type BlockImage as e, type BlocksField as f, type CodeField as g, type CollapsibleField as h, type CollectionConfig as i, type ColorField as j, type FieldAdmin as k, type FieldType as l, type GroupField as m, type ImageSize as n, type RelationshipField as o, type RichTextBlock as p, type RichTextField as q, type RowField as r, type TextField as s, type TextareaField as t, type UploadField as u, type PluginConfig as v, type BaseAdapter as w, type FindArgs as x, type FindResult as y, type FindByIDArgs as z };

package/dist/ws/index.cjs

@@ -1,7 +1,7 @@
 'use strict';
 
 var chunkDVD5P72E_cjs = require('../chunk-DVD5P72E.cjs');
-require('../chunk-5BLDMQED.cjs');
+require('../chunk-G7VZBCD6.cjs');
 
 
 

package/dist/ws/index.js

@@ -1,4 +1,4 @@
 export { KyroPubSub, KyroWSServer, PubSub, createWSServer } from '../chunk-3TPQ2BU6.js';
-import '../chunk-NSBPE2FW.js';
+import '../chunk-Z6ZWNWWR.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kyro-cms/core",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Astro-native headless CMS with multi-database adapters, multi-protocol APIs, and multi-vendor support",
   "private": false,
   "type": "module",
@@ -10,6 +10,8 @@
   },
   "workspaces": [
     ".",
+    "admin",
+    "packages/utils",
     "packages/create-kyro"
   ],
   "main": "./dist/index.js",
@@ -21,6 +23,11 @@
       "import": "./dist/index.js",
       "require": "./dist/index.cjs"
     },
+    "./client": {
+      "types": "./dist/client.d.ts",
+      "import": "./dist/client.js",
+      "require": "./dist/client.cjs"
+    },
     "./trpc": {
       "types": "./dist/trpc/index.d.ts",
       "import": "./dist/trpc/index.js"
@@ -96,24 +103,33 @@
   },
   "homepage": "https://github.com/danielDozie/kyro-cms#readme",
   "dependencies": {
+    "@aws-sdk/client-s3": "^3.751.0",
+    "@aws-sdk/s3-request-presigner": "^3.751.0",
+    "@kyro-cms/core": "^0.1.6",
     "@trpc/client": "^11.0.0",
     "@trpc/react-query": "^11.0.0",
     "@trpc/server": "^11.0.0",
+    "basic-ftp": "^5.3.0",
     "bcrypt": "^5.1.1",
     "bcryptjs": "^3.0.3",
     "chalk": "^5.4.1",
     "commander": "^13.1.0",
+    "cpu-features": "^0.0.10",
     "drizzle-orm": "^0.44.7",
     "esbuild": "^0.25.0",
     "glob": "^11.0.1",
     "graphql": "^16.10.0",
     "hono": "^4.7.0",
     "ioredis": "^5.10.1",
+    "jsondiffpatch": "^0.7.3",
     "jsonwebtoken": "^9.0.2",
     "mongodb": "^6.12.0",
     "nodemailer": "^8.0.4",
     "ora": "^8.2.0",
     "postgres": "^3.4.8",
+    "sharp": "^0.34.5",
+    "ssh2": "^1.17.0",
+    "ssh2-sftp-client": "^12.1.1",
     "ws": "^8.18.0",
     "zod": "^3.24.0"
   },
@@ -124,6 +140,7 @@
     "@types/node": "^22.13.0",
     "@types/nodemailer": "^7.0.11",
     "@types/pg": "^8.20.0",
+    "@types/ssh2-sftp-client": "^9.0.6",
     "@types/ws": "^8.18.1",
     "better-sqlite3": "^11.8.1",
     "drizzle-kit": "^0.31.10",
@@ -151,4 +168,4 @@
       "optional": true
     }
   }
-}
+}

package/dist/bootstrap-WMWQ4DBX.cjs

@@ -1,29 +0,0 @@
-'use strict';
-
-var chunk3EVLFWH2_cjs = require('./chunk-3EVLFWH2.cjs');
-require('./chunk-5BLDMQED.cjs');
-
-
-
-Object.defineProperty(exports, "autoBootstrap", {
-  enumerable: true,
-  get: function () { return chunk3EVLFWH2_cjs.autoBootstrap; }
-});
-Object.defineProperty(exports, "bootstrapAdmin", {
-  enumerable: true,
-  get: function () { return chunk3EVLFWH2_cjs.bootstrapAdmin; }
-});
-Object.defineProperty(exports, "bootstrapWithRetry", {
-  enumerable: true,
-  get: function () { return chunk3EVLFWH2_cjs.bootstrapWithRetry; }
-});
-Object.defineProperty(exports, "checkBootstrapRequired", {
-  enumerable: true,
-  get: function () { return chunk3EVLFWH2_cjs.checkBootstrapRequired; }
-});
-Object.defineProperty(exports, "getBootstrapFromEnv", {
-  enumerable: true,
-  get: function () { return chunk3EVLFWH2_cjs.getBootstrapFromEnv; }
-});
-//# sourceMappingURL=bootstrap-WMWQ4DBX.cjs.map
-//# sourceMappingURL=bootstrap-WMWQ4DBX.cjs.map

package/dist/bootstrap-WOVGAKZP.js

@@ -1,4 +0,0 @@
-export { autoBootstrap, bootstrapAdmin, bootstrapWithRetry, checkBootstrapRequired, getBootstrapFromEnv } from './chunk-5Y7QGIHD.js';
-import './chunk-NSBPE2FW.js';
-//# sourceMappingURL=bootstrap-WOVGAKZP.js.map
-//# sourceMappingURL=bootstrap-WOVGAKZP.js.map

package/dist/chunk-3EVLFWH2.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/auth/sqlite-adapter.ts","../src/auth/nodemailer-transport.ts","../src/auth/security/password-policy.ts","../src/auth/bootstrap.ts"],"names":["dirname","mkdirSync","randomBytes","bcrypt","nodemailer"],"mappings":";;;;;;;;;;;;;;AAiBA,IAAM,oBAAA,GAAuB,GAAA;AAC7B,IAAM,sBAAA,GAAyB,GAAA;AAC/B,IAAM,kBAAA,GAAqB,KAAA;AAC3B,IAAM,iBAAA,GAAoB,SAAA;AAEnB,IAAM,oBAAN,MAA+C;AAAA,EAC5C,EAAA,GAA+B,IAAA;AAAA,EAC/B,IAAA;AAAA,EACA,UAAA;AAAA,EACA,UAAA;AAAA,EACA,WAAA;AAAA,EACA,iBAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EAEA,kBAAA,uBAA0D,GAAA,EAAI;AAAA,EAEtE,WAAA,CAAY,OAAA,GAAoC,EAAC,EAAG;AAClD,IAAA,IAAA,CAAK,IAAA,GAAO,QAAQ,IAAA,IAAQ,gBAAA;AAC5B,IAAA,IAAA,CAAK,UAAA,GAAa,QAAQ,UAAA,IAAc,EAAA;AACxC,IAAA,IAAA,CAAK,UAAA,GAAa,CAAC,CAAC,OAAA,CAAQ,EAAA;AAC5B,IAAA,IAAA,CAAK,WAAA,GAAc,QAAQ,WAAA,IAAe,oBAAA;AAC1C,IAAA,IAAA,CAAK,iBAAA,GACH,QAAQ,iBAAA,IAAqB,sBAAA;AAC/B,IAAA,IAAA,CAAK,SAAA,GAAY,QAAQ,SAAA,IAAa,kBAAA;AACtC,IAAA,IAAA,CAAK,QAAA,GAAW,QAAQ,QAAA,IAAY,iBAAA;AAEpC,IAAA,IAAI,QAAQ,EAAA,EAAI;AACd,MAAA,IAAA,CAAK,KAAK,OAAA,CAAQ,EAAA;AAAA,IACpB;AAAA,EACF;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAI,KAAK,EAAA,EAAI;AAEb,IAAA,MAAM,GAAA,GAAMA,YAAA,CAAQ,IAAA,CAAK,IAAI,CAAA;AAC7B,IAAA,IAAI,GAAA,IAAO,QAAQ,GAAA,EAAK;AACtB,MAAAC,YAAA,CAAU,GAAA,EAAK,EAAE,SAAA,EAAW,IAAA,EAAM,CAAA;AAAA,IACpC;AAEA,IAAA,MAAM,QAAA,GAAA,CAAY,MAAM,OAAO,gBAAgB,CAAA,EAAG,OAAA;AAClD,IAAA,IAAA,CAAK,EAAA,GAAK,IAAI,QAAA,CAAS,IAAA,CAAK,IAAA,EAAM;AAAA,MAChC,SAAS,IAAA,CAAK;AAAA,KACf,CAAA;AAED,IAAA,IAAA,CAAK,EAAA,CAAG,OAAO,oBAAoB,CAAA;AACnC,IAAA,IAAA,CAAK,EAAA,CAAG,OAAO,sBAAsB,CAAA;AACrC,IAAA,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,eAAA,GAAkB,IAAA,CAAK,SAAS,CAAA;AAC/C,IAAA,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,cAAA,GAAiB,IAAA,CAAK,QAAQ,CAAA;AAC7C,IAAA,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,uBAAA,GAA0B,IAAA,CAAK,iBAAiB,CAAA;AAC/D,IAAA,IAAA,CAAK,EAAA,CAAG,OAAO,mBAAmB,CAAA;AAClC,IAAA,IAAA,CAAK,EAAA,CAAG,OAAO,qBAAqB,CAAA;AAEpC,IAAA,IAAA,CAAK,YAAA,EAAa;AAClB,IAAA,IAAA,CAAK,iBAAA,EAAkB;AAAA,EACzB;AAAA,EAEA,MAAM,UAAA,GAA4B;AAChC,IAAA,IAAI,IAAA,CAAK,EAAA,IAAM,CAAC,IAAA,CAAK,UAAA,EAAY;AAC/B,MAAA,IAAA,CAAK,EAAA,CAAG,OAAO,0BAA0B,CAAA;AACzC,MAAA,IAAA,CAAK,GAAG,KAAA,EAAM;AACd,MAAA,IAAA,CAAK,EAAA,GAAK,IAAA;AACV,MAAA,IAAA,CAAK,mBAAmB,KAAA,EAAM;AAAA,IAChC;AAAA,EACF;AAAA,EAEQ,YAAA,GAAqB;AAC3B,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AAEd,IAAA,IAAA,CAAK,GAAG,IAAA,CAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAkFZ,CAAA;AAAA,EACH;AAAA,EAEQ,iBAAA,GAA0B;AAChC,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AAEd,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,iBAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,0CAA0C;AAAA,KAC5D;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,cAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,uCAAuC;AAAA,KACzD;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,oBAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,6CAA6C;AAAA,KAC/D;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,2BAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,qDAAqD;AAAA,KACvE;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,eAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,qDAAqD;AAAA,KACvE;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,oBAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,6CAA6C;AAAA,KAC/D;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,YAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,0CAA0C;AAAA,KAC5D;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,YAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,qCAAqC;AAAA,KACvD;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,oBAAA;AAAA,MACA,KAAK,EAAA,CAAG,OAAA;AAAA,QACN;AAAA;AACF,KACF;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,oBAAA;AAAA,MACA,KAAK,EAAA,CAAG,OAAA;AAAA,QACN;AAAA;AACF,KACF;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,qBAAA;AAAA,MACA,KAAK,EAAA,CAAG,OAAA;AAAA,QACN,CAAA;AAAA;AAAA,SAAA;AAAA;AAGF,KACF;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,uBAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,gDAAgD;AAAA,KAClE;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,qBAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,iDAAiD;AAAA,KACnE;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,wBAAA;AAAA,MACA,KAAK,EAAA,CAAG,OAAA;AAAA,QACN;AAAA;AACF,KACF;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,YAAA;AAAA,MACA,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,+CAA+C;AAAA,KACjE;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,eAAA;AAAA,MACA,IAAA,CAAK,GAAG,OAAA,CAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAAA,CAQf;AAAA,KACH;AACA,IAAA,IAAA,CAAK,kBAAA,CAAmB,GAAA;AAAA,MACtB,cAAA;AAAA,MACA,KAAK,EAAA,CAAG,OAAA;AAAA,QACN;AAAA;AACF,KACF;AAAA,EACF;AAAA,EAEQ,KAAK,IAAA,EAAkC;AAC7C,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,kBAAA,CAAmB,GAAA,CAAI,IAAI,CAAA;AAC7C,IAAA,IAAI,CAAC,IAAA,EAAM,MAAM,IAAI,KAAA,CAAM,CAAA,8BAAA,EAAiC,IAAI,CAAA,CAAE,CAAA;AAClE,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,sBAAA,GAA0C;AAC9C,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAC7C,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,IAAA,CAAK,uBAAuB,CAAA,CAAE,GAAA;AAAA,MAAA,iBAChD,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACzB;AACA,IAAA,OAAO,MAAA,CAAO,OAAA;AAAA,EAChB;AAAA,EAEA,MAAM,mBAAA,CAAoB,aAAA,GAAwB,EAAA,EAAqB;AACrE,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAC7C,IAAA,MAAM,SAAS,IAAI,IAAA;AAAA,MACjB,KAAK,GAAA,EAAI,GAAI,aAAA,GAAgB,EAAA,GAAK,KAAK,EAAA,GAAK;AAAA,MAC5C,WAAA,EAAY;AACd,IAAA,MAAM,SAAS,IAAA,CAAK,IAAA,CAAK,qBAAqB,CAAA,CAAE,IAAI,MAAM,CAAA;AAC1D,IAAA,OAAO,MAAA,CAAO,OAAA;AAAA,EAChB;AAAA,EAEA,MAAM,QAAA,GAIH;AACD,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,YAAa,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA,CAAE,KAAI,CAC5C,KAAA;AAEH,IAAA,MAAM,kBAAA,GACJ,KAAK,EAAA,CACF,OAAA;AAAA,MACC;AAAA,MAED,GAAA,CAAA,iBAAI,IAAI,MAAK,EAAE,WAAA,EAAa,CAAA,CAC/B,KAAA;AAEF,IAAA,MAAM,gBACJ,IAAA,CAAK,EAAA,CACF,QAAQ,+CAA+C,CAAA,CACvD,KAAI,CACP,KAAA;AAEF,IAAA,OAAO,EAAE,SAAA,EAAW,kBAAA,EAAoB,aAAA,EAAc;AAAA,EACxD;AAAA,EAEA,MAAM,WAAW,IAAA,EAKK;AACpB,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,EAAA,GAAKC,kBAAA,CAAY,EAAE,CAAA,CAAE,SAAS,KAAK,CAAA;AACzC,IAAA,MAAM,GAAA,GAAA,iBAAM,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAEnC,IAAA,MAAM,IAAA,GAAiB;AAAA,MACrB,EAAA;AAAA,MACA,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,WAAA,EAAY;AAAA,MAC9B,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,IAAA,EAAO,KAAK,IAAA,IAAQ,UAAA;AAAA,MACpB,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,SAAA,EAAW,GAAA;AAAA,MACX,SAAA,EAAW;AAAA,KACb;AAEA,IAAA,IAAA,CAAK,EAAA,CACF,OAAA;AAAA,MACC,CAAA;AAAA,qCAAA;AAAA,KAEF,CACC,GAAA;AAAA,MACC,EAAA;AAAA,MACA,IAAA,CAAK,KAAA;AAAA,MACL,IAAA,CAAK,YAAA;AAAA,MACL,IAAA,CAAK,IAAA;AAAA,MACL,IAAA,CAAK,QAAA;AAAA,MACL,GAAA;AAAA,MACA;AAAA,KACF;AAEF,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,gBAAgB,KAAA,EAAyC;AAC7D,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,GAAA,GAAM,KAAK,IAAA,CAAK,iBAAiB,EAAE,GAAA,CAAI,KAAA,CAAM,aAAa,CAAA;AAIhE,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,IAAA,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAAA,EAC3B;AAAA,EAEA,MAAM,aAAa,MAAA,EAA0C;AAC3D,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,MAAM,IAAA,CAAK,IAAA,CAAK,cAAc,CAAA,CAAE,IAAI,MAAM,CAAA;AAIhD,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,IAAA,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAAA,EAC3B;AAAA,EAEA,MAAM,UAAA,CACJ,MAAA,EACA,IAAA,EAC0B;AAC1B,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,YAAA,CAAa,MAAM,CAAA;AAC/C,IAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AAEtB,IAAA,MAAM,UAAoB,EAAC;AAC3B,IAAA,MAAM,SAAoB,EAAC;AAE3B,IAAA,IAAI,IAAA,CAAK,UAAU,MAAA,EAAW;AAC5B,MAAA,OAAA,CAAQ,KAAK,WAAW,CAAA;AACxB,MAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,WAAA,EAAa,CAAA;AAAA,IACtC;AACA,IAAA,IAAI,IAAA,CAAK,iBAAiB,MAAA,EAAW;AACnC,MAAA,OAAA,CAAQ,KAAK,mBAAmB,CAAA;AAChC,MAAA,MAAA,CAAO,IAAA,CAAK,KAAK,YAAY,CAAA;AAAA,IAC/B;AACA,IAAA,IAAI,IAAA,CAAK,SAAS,MAAA,EAAW;AAC3B,MAAA,OAAA,CAAQ,KAAK,UAAU,CAAA;AACvB,MAAA,MAAA,CAAO,IAAA,CAAK,KAAK,IAAI,CAAA;AAAA,IACvB;AACA,IAAA,IAAI,IAAA,CAAK,aAAa,MAAA,EAAW;AAC/B,MAAA,OAAA,CAAQ,KAAK,eAAe,CAAA;AAC5B,MAAA,MAAA,CAAO,IAAA,CAAK,KAAK,QAAQ,CAAA;AAAA,IAC3B;AACA,IAAA,IAAI,IAAA,CAAK,kBAAkB,MAAA,EAAW;AACpC,MAAA,OAAA,CAAQ,KAAK,oBAAoB,CAAA;AACjC,MAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,aAAA,GAAgB,CAAA,GAAI,CAAC,CAAA;AAAA,IACxC;AACA,IAAA,IAAI,IAAA,CAAK,WAAW,MAAA,EAAW;AAC7B,MAAA,OAAA,CAAQ,KAAK,YAAY,CAAA;AACzB,MAAA,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,MAAA,GAAS,CAAA,GAAI,CAAC,CAAA;AAAA,IACjC;AACA,IAAA,IAAI,IAAA,CAAK,cAAc,MAAA,EAAW;AAChC,MAAA,OAAA,CAAQ,KAAK,gBAAgB,CAAA;AAC7B,MAAA,MAAA,CAAO,IAAA,CAAK,KAAK,SAAS,CAAA;AAAA,IAC5B;AACA,IAAA,IAAI,IAAA,CAAK,wBAAwB,MAAA,EAAW;AAC1C,MAAA,OAAA,CAAQ,KAAK,2BAA2B,CAAA;AACxC,MAAA,MAAA,CAAO,IAAA,CAAK,KAAK,mBAAmB,CAAA;AAAA,IACtC;AAEA,IAAA,OAAA,CAAQ,KAAK,gBAAgB,CAAA;AAC7B,IAAA,MAAA,CAAO,IAAA,CAAA,iBAAK,IAAI,IAAA,EAAK,EAAE,aAAa,CAAA;AAEpC,IAAA,MAAA,CAAO,KAAK,MAAM,CAAA;AAElB,IAAA,IAAA,CAAK,EAAA,CACF,OAAA,CAAQ,CAAA,sBAAA,EAAyB,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA,aAAA,CAAe,CAAA,CAClE,GAAA,CAAI,GAAG,MAAM,CAAA;AAEhB,IAAA,OAAO,IAAA,CAAK,aAAa,MAAM,CAAA;AAAA,EACjC;AAAA,EAEA,MAAM,WAAW,MAAA,EAAkC;AACjD,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,SAAS,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA,CAAE,IAAI,MAAM,CAAA;AACjD,IAAA,OAAO,OAAO,OAAA,GAAU,CAAA;AAAA,EAC1B;AAAA,EAEA,MAAM,aAAa,QAAA,EAAmC;AACpD,IAAA,OAAOC,uBAAA,CAAO,IAAA,CAAK,QAAA,EAAU,IAAA,CAAK,UAAU,CAAA;AAAA,EAC9C;AAAA,EAEA,MAAM,cAAA,CAAe,QAAA,EAAkB,IAAA,EAAgC;AACrE,IAAA,OAAOA,uBAAA,CAAO,OAAA,CAAQ,QAAA,EAAU,IAAI,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,aAAA,CACJ,MAAA,EACA,IAAA,GAGI,EAAC,EACa;AAClB,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,EAAA,GAAKD,kBAAA,CAAY,EAAE,CAAA,CAAE,SAAS,KAAK,CAAA;AACzC,IAAA,MAAM,KAAA,GAAQA,kBAAA,CAAY,EAAE,CAAA,CAAE,SAAS,WAAW,CAAA;AAClD,IAAA,MAAM,YAAA,GAAeA,kBAAA,CAAY,EAAE,CAAA,CAAE,SAAS,WAAW,CAAA;AACzD,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,GAAA,CAAI,SAAQ,GAAI,KAAQ,EAAE,WAAA,EAAY;AAEjE,IAAA,MAAM,OAAA,GAAmB;AAAA,MACvB,EAAA;AAAA,MACA,MAAA;AAAA,MACA,KAAA;AAAA,MACA,YAAA;AAAA,MACA,SAAA;AAAA,MACA,SAAA,EAAW,IAAI,WAAA,EAAY;AAAA,MAC3B,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,WAAW,IAAA,CAAK;AAAA,KAClB;AAEA,IAAA,IAAA,CAAK,EAAA,CACF,OAAA;AAAA,MACC,CAAA;AAAA,wCAAA;AAAA,KAEF,CACC,GAAA;AAAA,MACC,OAAA,CAAQ,EAAA;AAAA,MACR,OAAA,CAAQ,MAAA;AAAA,MACR,OAAA,CAAQ,KAAA;AAAA,MACR,OAAA,CAAQ,YAAA;AAAA,MACR,OAAA,CAAQ,SAAA;AAAA,MACR,OAAA,CAAQ,SAAA;AAAA,MACR,OAAA,CAAQ,SAAA;AAAA,MACR,OAAA,CAAQ;AAAA,KACV;AAEF,IAAA,OAAO,OAAA;AAAA,EACT;AAAA,EAEA,MAAM,mBAAmB,KAAA,EAAwC;AAC/D,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,MAAM,IAAA,CAAK,IAAA,CAAK,oBAAoB,CAAA,CAAE,IAAI,KAAK,CAAA;AAIrD,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,IAAA,OAAO,IAAA,CAAK,aAAa,GAAG,CAAA;AAAA,EAC9B;AAAA,EAEA,MAAM,0BACJ,YAAA,EACyB;AACzB,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,MAAM,IAAA,CAAK,IAAA,CAAK,2BAA2B,CAAA,CAAE,IAAI,YAAY,CAAA;AAInE,IAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,IAAA,OAAO,IAAA,CAAK,aAAa,GAAG,CAAA;AAAA,EAC9B;AAAA,EAEA,MAAM,cAAc,SAAA,EAAqC;AACvD,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,SAAS,IAAA,CAAK,IAAA,CAAK,eAAe,CAAA,CAAE,GAAA,CAAI,WAAW,SAAS,CAAA;AAClE,IAAA,OAAO,OAAO,OAAA,GAAU,CAAA;AAAA,EAC1B;AAAA,EAEA,MAAM,mBAAmB,MAAA,EAAiC;AACxD,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,SAAS,IAAA,CAAK,IAAA,CAAK,oBAAoB,CAAA,CAAE,IAAI,MAAM,CAAA;AACzD,IAAA,OAAO,MAAA,CAAO,OAAA;AAAA,EAChB;AAAA,EAEA,MAAM,WAAA,GAAgC;AACpC,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,IAAA,CAAK,YAAY,EAAE,GAAA,EAAI;AACxC,IAAA,OAAO,IAAI,KAAA,GAAQ,CAAA;AAAA,EACrB;AAAA,EAEA,MAAM,oBAAA,CACJ,MAAA,EACA,YAAA,EACe;AACf,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,IAAA,CAAK,IAAA,CAAK,oBAAoB,CAAA,CAAE,GAAA;AAAA,MAC9B,MAAA;AAAA,MACA,YAAA;AAAA,MAAA,iBACA,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACzB;AACA,IAAA,IAAA,CAAK,IAAA,CAAK,qBAAqB,CAAA,CAAE,GAAA,CAAI,MAAM,CAAA;AAAA,EAC7C;AAAA,EAEA,MAAM,kBAAA,CACJ,MAAA,EACA,KAAA,GAAgB,CAAA,EACG;AACnB,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,OAAO,IAAA,CAAK,IAAA,CAAK,oBAAoB,CAAA,CAAE,GAAA,CAAI,QAAQ,KAAK,CAAA;AAI9D,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,aAAa,CAAA;AAAA,EACxC;AAAA,EAEA,MAAM,mBAAA,CACJ,QAAA,EACA,MAAA,EACA,eAAuB,CAAA,EACL;AAClB,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,kBAAA,CAAmB,QAAQ,YAAY,CAAA;AAClE,IAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,MAAA,IAAI,MAAMC,uBAAA,CAAO,OAAA,CAAQ,QAAA,EAAU,IAAI,CAAA,EAAG;AACxC,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,MAAM,oBAAoB,MAAA,EAA+B;AACvD,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,IAAA,MAAM,UAAU,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA,CAAE,IAAI,MAAM,CAAA;AAIlD,IAAA,MAAM,QAAA,GAAA,CAAY,OAAA,EAAS,QAAA,IAAY,CAAA,IAAK,CAAA;AAC5C,IAAA,MAAM,WAAA,GACJ,YAAY,CAAA,GAAI,GAAA,GAAM,KAAK,EAAA,GAAK,GAAA,GAAO,SAAS,YAAA,IAAgB,IAAA;AAElE,IAAA,IAAA,CAAK,IAAA,CAAK,eAAe,CAAA,CAAE,GAAA;AAAA,MACzB,MAAA;AAAA,MACA,QAAA;AAAA,MACA,GAAA;AAAA,MACA,WAAA,KAAgB,OAAO,GAAA,GAAM,IAAA;AAAA,MAC7B;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,cAAc,MAAA,EAA+B;AACjD,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAC7C,IAAA,IAAA,CAAK,IAAA,CAAK,cAAc,CAAA,CAAE,GAAA,CAAI,MAAM,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,aAAa,MAAA,EAKhB;AACD,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,IAAA,CAAK,KAAK,wBAAwB,CAAA,CAAE,GAAA,CAAI,IAAA,CAAK,KAAK,CAAA;AAElD,IAAA,MAAM,UAAU,IAAA,CAAK,IAAA,CAAK,YAAY,CAAA,CAAE,IAAI,MAAM,CAAA;AAIlD,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,KAAA;AAAA,QACR,iBAAA,EAAmB,CAAA;AAAA,QACnB,aAAA,EAAe;AAAA,OACjB;AAAA,IACF;AAEA,IAAA,IAAI,QAAQ,YAAA,KAAiB,IAAA,IAAQ,QAAQ,YAAA,GAAe,IAAA,CAAK,KAAI,EAAG;AACtE,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,IAAA;AAAA,QACR,iBAAA,EAAmB,CAAA;AAAA,QACnB,WAAA,EAAa,IAAI,IAAA,CAAK,OAAA,CAAQ,YAAY,CAAA;AAAA,QAC1C,eAAe,OAAA,CAAQ;AAAA,OACzB;AAAA,IACF;AAEA,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,KAAA;AAAA,MACR,mBAAmB,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,CAAA,GAAI,QAAQ,QAAQ,CAAA;AAAA,MACnD,eAAe,OAAA,CAAQ;AAAA,KACzB;AAAA,EACF;AAAA,EAEA,MAAM,SAAS,IAAA,EAYK;AAClB,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,EAAA,GAAKD,kBAAA,CAAY,EAAE,CAAA,CAAE,SAAS,KAAK,CAAA;AACzC,IAAA,MAAM,SAAA,GAAA,iBAAY,IAAI,IAAA,EAAK,EAAE,WAAA,EAAY;AAEzC,IAAA,IAAA,CAAK,EAAA,CACF,OAAA;AAAA,MACC,CAAA;AAAA;AAAA;AAAA,2DAAA;AAAA,KAIF,CACC,GAAA;AAAA,MACC,EAAA;AAAA,MACA,SAAA;AAAA,MACA,IAAA,CAAK,MAAA;AAAA,MACL,KAAK,MAAA,IAAU,IAAA;AAAA,MACf,KAAK,SAAA,IAAa,IAAA;AAAA,MAClB,KAAK,IAAA,IAAQ,IAAA;AAAA,MACb,IAAA,CAAK,QAAA;AAAA,MACL,KAAK,UAAA,IAAc,IAAA;AAAA,MACnB,KAAK,SAAA,IAAa,IAAA;AAAA,MAClB,KAAK,SAAA,IAAa,IAAA;AAAA,MAClB,IAAA,CAAK,UAAU,CAAA,GAAI,CAAA;AAAA,MACnB,KAAK,KAAA,IAAS,IAAA;AAAA,MACd,KAAK,QAAA,GAAW,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,QAAQ,CAAA,GAAI,IAAA;AAAA,MAAA,iBAChD,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,KACzB;AAEF,IAAA,OAAO,EAAA;AAAA,EACT;AAAA,EAEA,MAAM,cAAA,CACJ,OAAA,GASI,EAAC,EAiBJ;AACD,IAAA,IAAI,CAAC,IAAA,CAAK,EAAA,EAAI,MAAM,IAAI,MAAM,eAAe,CAAA;AAE7C,IAAA,MAAM,aAAuB,EAAC;AAC9B,IAAA,MAAM,SAAoB,EAAC;AAE3B,IAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,MAAA,UAAA,CAAW,KAAK,YAAY,CAAA;AAC5B,MAAA,MAAA,CAAO,IAAA,CAAK,QAAQ,MAAM,CAAA;AAAA,IAC5B;AACA,IAAA,IAAI,QAAQ,MAAA,EAAQ;AAClB,MAAA,UAAA,CAAW,KAAK,aAAa,CAAA;AAC7B,MAAA,MAAA,CAAO,IAAA,CAAK,QAAQ,MAAM,CAAA;AAAA,IAC5B;AACA,IAAA,IAAI,QAAQ,QAAA,EAAU;AACpB,MAAA,UAAA,CAAW,KAAK,cAAc,CAAA;AAC9B,MAAA,MAAA,CAAO,IAAA,CAAK,QAAQ,QAAQ,CAAA;AAAA,IAC9B;AACA,IAAA,IAAI,OAAA,CAAQ,YAAY,MAAA,EAAW;AACjC,MAAA,UAAA,CAAW,KAAK,aAAa,CAAA;AAC7B,MAAA,MAAA,CAAO,IAAA,CAAK,OAAA,CAAQ,OAAA,GAAU,CAAA,GAAI,CAAC,CAAA;AAAA,IACrC;AACA,IAAA,IAAI,QAAQ,SAAA,EAAW;AACrB,MAAA,UAAA,CAAW,KAAK,gBAAgB,CAAA;AAChC,MAAA,MAAA,CAAO,IAAA,CAAK,OAAA,CAAQ,SAAA,CAAU,WAAA,EAAa,CAAA;AAAA,IAC7C;AACA,IAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,MAAA,UAAA,CAAW,KAAK,gBAAgB,CAAA;AAChC,MAAA,MAAA,CAAO,IAAA,CAAK,OAAA,CAAQ,OAAA,CAAQ,WAAA,EAAa,CAAA;AAAA,IAC3C;AAEA,IAAA,MAAM,KAAA,GACJ,WAAW,MAAA,GAAS,CAAA,GAAI,WAAW,UAAA,CAAW,IAAA,CAAK,OAAO,CAAA,GAAI,EAAA;AAChE,IAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,EAAA;AAC/B,IAAA,MAAM,MAAA,GAAS,QAAQ,MAAA,IAAU,CAAA;AAEjC,IAAA,MAAM,WAAA,GAAc,IAAA,CAAK,EAAA,CACtB,OAAA,CAAQ,CAAA,8CAAA,EAAiD,KAAK,CAAA,CAAE,CAAA,CAChE,GAAA,CAAI,GAAG,MAAM,CAAA;AAEhB,IAAA,MAAM,IAAA,GAAO,KAAK,EAAA,CACf,OAAA;AAAA,MACC,iCAAiC,KAAK,CAAA,yCAAA;AAAA,KACxC,CACC,GAAA,CAAI,GAAG,MAAA,EAAQ,OAAO,MAAM,CAAA;AAE/B,IAAA,OAAO;AAAA,MACL,OAAO,WAAA,CAAY,KAAA;AAAA,MACnB,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,QACvB,IAAI,GAAA,CAAI,EAAA;AAAA,QACR,SAAA,EAAW,IAAI,IAAA,CAAK,GAAA,CAAI,SAAmB,CAAA;AAAA,QAC3C,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,MAAA,EAAS,IAAI,OAAA,IAAsB,MAAA;AAAA,QACnC,SAAA,EAAY,IAAI,UAAA,IAAyB,MAAA;AAAA,QACzC,UAAU,GAAA,CAAI,QAAA;AAAA,QACd,UAAA,EAAa,IAAI,WAAA,IAA0B,MAAA;AAAA,QAC3C,SAAA,EAAY,IAAI,UAAA,IAAyB,MAAA;AAAA,QACzC,SAAA,EAAY,IAAI,UAAA,IAAyB,MAAA;AAAA,QACzC,OAAA,EAAU,IAAI,OAAA,KAAuB,CAAA;AAAA,QACrC,KAAA,EAAQ,IAAI,KAAA,IAAoB,MAAA;AAAA,QAChC,UAAU,GAAA,CAAI,QAAA,GAAW,KAAK,KAAA,CAAM,GAAA,CAAI,QAAkB,CAAA,GAAI;AAAA,OAChE,CAAE;AAAA,KACJ;AAAA,EACF;AAAA,EAEQ,UAAU,GAAA,EAAwC;AACxD,IAAA,OAAO;AAAA,MACL,IAAI,GAAA,CAAI,EAAA;AAAA,MACR,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,cAAc,GAAA,CAAI,aAAA;AAAA,MAClB,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,UAAU,GAAA,CAAI,SAAA;AAAA,MACd,aAAA,EAAgB,IAAI,cAAA,KAA8B,CAAA;AAAA,MAClD,MAAA,EAAS,IAAI,MAAA,KAAsB,CAAA;AAAA,MACnC,WAAW,GAAA,CAAI,UAAA;AAAA,MACf,mBAAA,EAAsB,IAAI,qBAAA,IAAoC,CAAA;AAAA,MAC9D,WAAW,GAAA,CAAI,UAAA;AAAA,MACf,WAAW,GAAA,CAAI;AAAA,KACjB;AAAA,EACF;AAAA,EAEQ,aAAa,GAAA,EAAuC;AAC1D,IAAA,OAAO;AAAA,MACL,IAAI,GAAA,CAAI,EAAA;AAAA,MACR,QAAQ,GAAA,CAAI,OAAA;AAAA,MACZ,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,cAAc,GAAA,CAAI,aAAA;AAAA,MAClB,WAAW,GAAA,CAAI,UAAA;AAAA,MACf,WAAW,GAAA,CAAI,UAAA;AAAA,MACf,WAAW,GAAA,CAAI,UAAA;AAAA,MACf,WAAW,GAAA,CAAI;AAAA,KACjB;AAAA,EACF;AACF;AClvBA,IAAM,gBAAA,GAAmC;AAAA,EACvC,WAAA,EAAa,CAAC,IAAA,EAAM,QAAA,GAAW,MAAA,MAAY;AAAA,IACzC,OAAA,EAAS,2BAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAA,EAgBe,QAAQ,CAAA;AAAA;AAAA;AAAA,qBAAA,EAGV,IAAI,CAAA;AAAA;AAAA;AAAA,yDAAA,EAGgC,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAS3D,IAAA,EAAM,WAAW,QAAQ,CAAA;;AAAA,gDAAA,EAAwD,IAAI;;AAAA;;AAAA,kEAAA;AAAA,GACvF,CAAA;AAAA,EAEA,aAAA,EAAe,CAAC,IAAA,EAAM,QAAA,GAAW,MAAA,MAAY;AAAA,IAC3C,OAAA,EAAS,qBAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAkBW,QAAQ,CAAA;AAAA;AAAA;AAAA,qBAAA,EAGN,IAAI,CAAA;AAAA;AAAA;AAAA,yDAAA,EAGgC,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAW3D,IAAA,EAAM,CAAA;;AAAA,MAAA,EAAmC,QAAQ,CAAA;;AAAA,wFAAA,EAAgG,IAAI;;AAAA;;AAAA,iEAAA;AAAA,GACvJ,CAAA;AAAA,EAEA,OAAA,EAAS,CAAC,QAAA,GAAW,MAAA,MAAY;AAAA,IAC/B,OAAA,EAAS,qBAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mCAAA,EAe2B,QAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAiBzC,IAAA,EAAM,wBAAwB,QAAQ,CAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA,2CAAA;AAAA,GACxC,CAAA;AAAA,EAEA,aAAA,EAAe,CAAC,QAAA,EAAU,QAAA,EAAU,WAAW,MAAA,MAAY;AAAA,IACzD,OAAA,EAAS,yCAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAiBW,QAAQ,CAAA;AAAA;AAAA;AAAA,gCAAA,EAGK,QAAQ,CAAA;AAAA,iCAAA,EACP,IAAA,CAAK,KAAA,CAAM,QAAA,GAAW,GAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAgB3D,IAAA,EAAM,CAAA;;AAAA,MAAA,EAAmC,QAAQ,CAAA;;AAAA,gFAAA,EAAwF,QAAQ,CAAA;;AAAA,kBAAA,EAA2B,IAAA,CAAK,KAAA,CAAM,QAAA,GAAW,GAAK,CAAC,CAAA;;AAAA;;AAAA,iEAAA;AAAA,GAC1M,CAAA;AAAA,EAEA,eAAA,EAAiB,CAAC,QAAA,GAAW,MAAA,MAAY;AAAA,IACvC,OAAA,EAAS,gCAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAgBW,QAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAUzB,IAAA,EAAM,CAAA;;AAAA,MAAA,EAA6B,QAAQ,CAAA;;AAAA;;AAAA;;AAAA,uEAAA;AAAA,GAC7C,CAAA;AAAA,EAEA,QAAA,EAAU,CAAC,QAAA,EAAU,IAAA,EAAM,WAAW,MAAA,MAAY;AAAA,IAChD,OAAA,EAAS,2BAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAiBW,QAAQ,CAAA;AAAA;AAAA;AAAA,0CAAA,EAGe,QAAQ,CAAA;AAAA,sCAAA,EACZ,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAgBxC,IAAA,EAAM,CAAA;;AAAA,MAAA,EAA+B,QAAQ,CAAA;;AAAA;;AAAA,UAAA,EAA8D,QAAQ;AAAA,MAAA,EAAW,IAAI;;AAAA,gFAAA;AAAA,GACpI;AACF,CAAA;AAEO,IAAM,cAAA,GAAN,MAAM,eAAA,CAAe;AAAA,EAClB,WAAA;AAAA,EACA,IAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EAER,WAAA,CAAY,QAAqB,SAAA,EAAqC;AACpE,IAAA,IAAA,CAAK,WAAA,GAAcE,4BAAW,eAAA,CAAgB;AAAA,MAC5C,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,MAAM,MAAA,CAAO;AAAA,KACd,CAAA;AAED,IAAA,IAAA,CAAK,OAAO,MAAA,CAAO,IAAA;AACnB,IAAA,IAAA,CAAK,QAAA,GAAW,OAAO,QAAA,IAAY,UAAA;AACnC,IAAA,IAAA,CAAK,SAAA,GAAY,EAAE,GAAG,gBAAA,EAAkB,GAAG,SAAA,EAAU;AAAA,EACvD;AAAA,EAEA,MAAM,KAAK,OAAA,EAAiD;AAC1D,IAAA,OAAO,IAAA,CAAK,YAAY,QAAA,CAAS;AAAA,MAC/B,MAAM,CAAA,CAAA,EAAI,IAAA,CAAK,QAAQ,CAAA,GAAA,EAAM,KAAK,IAAI,CAAA,CAAA,CAAA;AAAA,MACtC,EAAA,EAAI,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA,GAAI,OAAA,CAAQ,EAAA,CAAG,IAAA,CAAK,IAAI,CAAA,GAAI,OAAA,CAAQ,EAAA;AAAA,MAChE,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,MAAM,OAAA,CAAQ;AAAA,KACf,CAAA;AAAA,EACH;AAAA,EAEA,YAAA,GAA+B;AAC7B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA,EAEA,MAAM,gBAAA,GAAqC;AACzC,IAAA,IAAI;AACF,MAAA,MAAM,IAAA,CAAK,YAAY,MAAA,EAAO;AAC9B,MAAA,OAAO,IAAA;AAAA,IACT,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF;AAAA,EAEA,OAAO,OAAA,GAAiC;AACtC,IAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,SAAA;AACzB,IAAA,MAAM,OAAO,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,OAAO,EAAE,CAAA;AACxD,IAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,WAAA,KAAgB,MAAA;AAC3C,IAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,SAAA;AACzB,IAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,SAAA;AACzB,IAAA,MAAM,OACJ,OAAA,CAAQ,GAAA,CAAI,SAAA,IACZ,OAAA,CAAQ,IAAI,YAAA,IACZ,qBAAA;AACF,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,cAAA,IAAkB,UAAA;AAE/C,IAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,IAAA,IAAQ,CAAC,IAAA,EAAM;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAI,eAAA,CAAe;AAAA,MACxB,IAAA;AAAA,MACA,IAAA;AAAA,MACA,MAAA;AAAA,MACA,IAAA,EAAM,EAAE,IAAA,EAAM,IAAA,EAAK;AAAA,MACnB,IAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH;AACF;;;AC/UO,IAAM,uBAAA,GAAgD;AAAA,EAC3D,SAAA,EAAW,EAAA;AAAA,EACX,gBAAA,EAAkB,IAAA;AAAA,EAClB,gBAAA,EAAkB,IAAA;AAAA,EAClB,cAAA,EAAgB,IAAA;AAAA,EAChB,mBAAA,EAAqB,IAAA;AAAA,EACrB,YAAA,EAAc,CAAA;AAAA,EACd,SAAA,EAAW;AACb,CAAA;AAEO,IAAM,iBAAN,MAAqB;AAAA,EAClB,MAAA;AAAA,EAER,WAAA,CAAY,MAAA,GAAwC,EAAC,EAAG;AACtD,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,GAAG,uBAAA,EAAyB,GAAG,MAAA,EAAO;AAAA,EACxD;AAAA,EAEA,SAAS,QAAA,EAAoC;AAC3C,IAAA,MAAM,SAAmB,EAAC;AAE1B,IAAA,IAAI,KAAK,MAAA,CAAO,SAAA,IAAa,SAAS,MAAA,GAAS,IAAA,CAAK,OAAO,SAAA,EAAW;AACpE,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,CAAA,yBAAA,EAA4B,IAAA,CAAK,MAAA,CAAO,SAAS,CAAA,WAAA;AAAA,OACnD;AAAA,IACF;AAEA,IAAA,IAAI,QAAA,CAAS,MAAA,GAAS,IAAA,CAAK,MAAA,CAAO,SAAA,EAAW;AAC3C,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,CAAA,0BAAA,EAA6B,IAAA,CAAK,MAAA,CAAO,SAAS,CAAA,WAAA;AAAA,OACpD;AAAA,IACF;AAEA,IAAA,IAAI,KAAK,MAAA,CAAO,gBAAA,IAAoB,CAAC,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC3D,MAAA,MAAA,CAAO,KAAK,qDAAqD,CAAA;AAAA,IACnE;AAEA,IAAA,IAAI,KAAK,MAAA,CAAO,gBAAA,IAAoB,CAAC,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC3D,MAAA,MAAA,CAAO,KAAK,qDAAqD,CAAA;AAAA,IACnE;AAEA,IAAA,IAAI,KAAK,MAAA,CAAO,cAAA,IAAkB,CAAC,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AACzD,MAAA,MAAA,CAAO,KAAK,2CAA2C,CAAA;AAAA,IACzD;AAEA,IAAA,IACE,KAAK,MAAA,CAAO,mBAAA,IACZ,CAAC,uCAAA,CAAwC,IAAA,CAAK,QAAQ,CAAA,EACtD;AACA,MAAA,MAAA,CAAO,KAAK,sDAAsD,CAAA;AAAA,IACpE;AAEA,IAAA,MAAM,eAAA,GAAkB;AAAA,MACtB,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,SAAA;AAAA,MACA,SAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,WAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,IAAI,eAAA,CAAgB,QAAA,CAAS,QAAA,CAAS,WAAA,EAAa,CAAA,EAAG;AACpD,MAAA,MAAA,CAAO,IAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,cAAc,IAAA,CAAK,QAAQ,KAAK,UAAA,CAAW,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC7D,MAAA,MAAA,CAAO,IAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,WAAA,CAAY,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC9B,MAAA,MAAA,CAAO,IAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IACE,+EAAA,CAAgF,IAAA;AAAA,MAC9E;AAAA,KACF,EACA;AACA,MAAA,MAAA,CAAO,KAAK,yDAAyD,CAAA;AAAA,IACvE;AAEA,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,OAAO,MAAA,KAAW,CAAA;AAAA,MACzB;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,CACJ,YAAA,EACA,OAAA,EACA,QAAA,EAC2B;AAC3B,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,IAAA;AAAA,MACP,QAAQ;AAAC,KACX;AAAA,EACF;AAAA,EAEA,MAAM,WAAA,CACJ,QAAA,EACA,OAAA,EACA,QAAA,EACkB;AAClB,IAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,MAAA,IAAI,MAAM,QAAA,CAAS,QAAA,EAAU,IAAI,CAAA,EAAG;AAClC,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,gBAAA,CAAiB,SAAiB,EAAA,EAAY;AAC5C,IAAA,MAAM,SAAA,GAAY,4BAAA;AAClB,IAAA,MAAM,SAAA,GAAY,4BAAA;AAClB,IAAA,MAAM,OAAA,GAAU,YAAA;AAChB,IAAA,MAAM,OAAA,GAAU,4BAAA;AAEhB,IAAA,IAAI,QAAA,GAAW,EAAA;AAEf,IAAA,QAAA,IAAY,SAAA,CAAU,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,SAAA,CAAU,MAAM,CAAC,CAAA;AAClE,IAAA,QAAA,IAAY,SAAA,CAAU,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,SAAA,CAAU,MAAM,CAAC,CAAA;AAClE,IAAA,QAAA,IAAY,OAAA,CAAQ,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,OAAA,CAAQ,MAAM,CAAC,CAAA;AAC9D,IAAA,QAAA,IAAY,OAAA,CAAQ,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,OAAA,CAAQ,MAAM,CAAC,CAAA;AAE9D,IAAA,MAAM,QAAA,GAAW,SAAA,GAAY,SAAA,GAAY,OAAA,GAAU,OAAA;AACnD,IAAA,KAAA,IAAS,CAAA,GAAI,QAAA,CAAS,MAAA,EAAQ,CAAA,GAAI,QAAQ,CAAA,EAAA,EAAK;AAC7C,MAAA,QAAA,IAAY,QAAA,CAAS,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,QAAA,CAAS,MAAM,CAAC,CAAA;AAAA,IAClE;AAEA,IAAA,OAAO,QAAA,CACJ,KAAA,CAAM,EAAE,CAAA,CACR,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,EAAO,GAAI,GAAG,CAAA,CAC9B,IAAA,CAAK,EAAE,CAAA;AAAA,EACZ;AAAA,EAEA,YAAY,QAAA,EAIV;AACA,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,MAAM,WAAqB,EAAC;AAE5B,IAAA,IAAI,QAAA,CAAS,MAAA,IAAU,CAAA,EAAG,KAAA,IAAS,CAAA;AACnC,IAAA,IAAI,QAAA,CAAS,MAAA,IAAU,EAAA,EAAI,KAAA,IAAS,CAAA;AACpC,IAAA,IAAI,QAAA,CAAS,MAAA,IAAU,EAAA,EAAI,KAAA,IAAS,CAAA;AAEpC,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AACrC,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AACrC,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AACrC,IAAA,IAAI,iCAAA,CAAkC,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AAE/D,IAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG,KAAA,IAAS,CAAA;AAClC,IAAA,IAAI,QAAA,CAAS,MAAA,GAAS,EAAA,EAAI,KAAA,IAAS,CAAA;AAEnC,IAAA,MAAM,WAAA,GAAc,IAAI,GAAA,CAAI,QAAQ,CAAA,CAAE,IAAA;AACtC,IAAA,IAAI,WAAA,GAAc,GAAG,KAAA,IAAS,CAAA;AAC9B,IAAA,IAAI,WAAA,GAAc,IAAI,KAAA,IAAS,CAAA;AAE/B,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI,SAAS,CAAA,EAAG;AACd,MAAA,KAAA,GAAQ,MAAA;AACR,MAAA,QAAA,CAAS,KAAK,qBAAqB,CAAA;AACnC,MAAA,QAAA,CAAS,KAAK,yCAAyC,CAAA;AAAA,IACzD,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,MAAA,KAAA,GAAQ,MAAA;AACR,MAAA,QAAA,CAAS,KAAK,wBAAwB,CAAA;AACtC,MAAA,QAAA,CAAS,KAAK,2BAA2B,CAAA;AAAA,IAC3C,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,MAAA,KAAA,GAAQ,MAAA;AACR,MAAA,QAAA,CAAS,KAAK,8CAA8C,CAAA;AAAA,IAC9D,CAAA,MAAO;AACL,MAAA,KAAA,GAAQ,QAAA;AAAA,IACV;AAEA,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,QAAA,EAAS;AAAA,EAClC;AAAA,EAEA,UAAU,MAAA,EAA6C;AACrD,IAAA,IAAA,CAAK,SAAS,EAAE,GAAG,IAAA,CAAK,MAAA,EAAQ,GAAG,MAAA,EAAO;AAAA,EAC5C;AAAA,EAEA,SAAA,GAAkC;AAChC,IAAA,OAAO,EAAE,GAAG,IAAA,CAAK,MAAA,EAAO;AAAA,EAC1B;AACF;;;AC9LA,eAAsB,eACpB,MAAA,EAC0B;AAC1B,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,aAAA;AAAA,IACA,SAAA,GAAY,aAAA;AAAA,IACZ,QAAA;AAAA,IACA,WAAA;AAAA,IACA,gBAAA,GAAmB;AAAA,GACrB,GAAI,MAAA;AAEJ,EAAA,MAAM,WAAA,GACJ,MAAA,CAAO,WAAA,IACP,IAAI,iBAAA,CAAkB;AAAA,IACpB,IAAA,EAAM,OAAO,UAAA,IAAc;AAAA,GAC5B,CAAA;AAEH,EAAA,IAAI;AACF,IAAA,MAAM,YAAY,OAAA,IAAU;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,EAAe;AAC1C,EAAA,MAAM,kBAAA,GAAqB,cAAA,CAAe,QAAA,CAAS,aAAa,CAAA;AAChE,EAAA,IAAI,CAAC,mBAAmB,KAAA,EAAO;AAC7B,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,OAAO,CAAA,kBAAA,EAAqB,kBAAA,CAAmB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAClE;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,MAAM,WAAA,CAAY,eAAA,CAAgB,UAAU,CAAA;AACjE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,YAAA,GAAe,MAAM,WAAA,CAAY,YAAA,CAAa,aAAa,CAAA;AACjE,IAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,UAAA,CAAW;AAAA,MACxC,KAAA,EAAO,UAAA;AAAA,MACP,YAAA;AAAA,MACA,MAAO,SAAA,IAA0B,OAAA;AAAA,MACjC;AAAA,KACD,CAAA;AAED,IAAA,IAAI,oBAAoB,WAAA,EAAa;AACnC,MAAA,MAAM,cAAA,GAAiB,IAAI,cAAA,CAAe,WAAW,CAAA;AACrD,MAAA,MAAM,SAAA,GAAY,eAAe,YAAA,EAAa;AAC9C,MAAA,MAAM,eAAA,GAAkB,UAAU,OAAA,CAAQ,UAAA,CAAW,MAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAClE,MAAA,MAAM,eAAe,IAAA,CAAK;AAAA,QACxB,EAAA,EAAI,UAAA;AAAA,QACJ,GAAG;AAAA,OACJ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT;AAAA,KACF;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EACE,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,KAC7C;AAAA,EACF;AACF;AAEA,eAAsB,sBAAA,CACpB,aACA,UAAA,EACkB;AAClB,EAAA,MAAM,YAAA,GAAe,MAAM,WAAA,CAAY,eAAA,CAAgB,UAAU,CAAA;AACjE,EAAA,OAAO,CAAC,YAAA;AACV;AAEO,SAAS,mBAAA,GAA8C;AAC5D,EAAA,MAAM,KAAA,GAAQ,QAAQ,GAAA,CAAI,gBAAA;AAC1B,EAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,mBAAA;AAE7B,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,QAAA,EAAU;AACvB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,OAAA,CAAQ,GAAA,CAAI,iBAAA,IAAqB,gBAAA;AAAA,IAC7C,UAAA,EAAY,KAAA;AAAA,IACZ,aAAA,EAAe,QAAA;AAAA,IACf,SAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,aAAA;AAAA,IAC1C,QAAA,EAAU,QAAQ,GAAA,CAAI,oBAAA;AAAA,IACtB,WAAA,EAAa,OAAA,CAAQ,GAAA,CAAI,SAAA,GACrB;AAAA,MACE,IAAA,EAAM,QAAQ,GAAA,CAAI,SAAA;AAAA,MAClB,MAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,OAAO,EAAE,CAAA;AAAA,MACjD,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,KAAgB,MAAA;AAAA,MACpC,IAAA,EAAM;AAAA,QACJ,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,EAAA;AAAA,QAC/B,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa;AAAA,OACjC;AAAA,MACA,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,qBAAA;AAAA,MAC/B,QAAA,EAAU,QAAQ,GAAA,CAAI;AAAA,KACxB,GACA,MAAA;AAAA,IACJ,gBAAA,EAAkB,OAAA,CAAQ,GAAA,CAAI,uBAAA,KAA4B;AAAA,GAC5D;AACF;AAEA,eAAsB,aAAA,GAAiD;AACrE,EAAA,MAAM,SAAS,mBAAA,EAAoB;AACnC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAA,CAAQ,IAAI,kCAAkC,CAAA;AAC9C,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,MAAM,CAAA;AAE1C,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oBAAA,EAAuB,MAAA,CAAO,UAAU,CAAA,CAAE,CAAA;AAAA,EACxD,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,kBAAA,EAAqB,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAAA,EACnD;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,eAAsB,kBAAA,CACpB,MAAA,EACA,UAAA,GAAqB,CAAA,EACrB,eAAuB,GAAA,EACG;AAC1B,EAAA,IAAI,SAAA,GAAoB,EAAA;AAExB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,UAAA,EAAY,CAAA,EAAA,EAAK;AACnC,IAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,MAAM,CAAA;AAE1C,IAAA,IAAI,OAAO,OAAA,EAAS;AAClB,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,SAAA,GAAY,OAAO,KAAA,IAAS,eAAA;AAE5B,IAAA,IAAI,SAAA,CAAU,QAAA,CAAS,gBAAgB,CAAA,EAAG;AACxC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,IAAI,CAAA,GAAI,aAAa,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,YAAY,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,KAAA,EAAO,CAAA,aAAA,EAAgB,UAAU,CAAA,UAAA,EAAa,SAAS,CAAA;AAAA,GACzD;AACF","file":"chunk-3EVLFWH2.cjs","sourcesContent":["import type Database from \"better-sqlite3\";\nimport bcrypt from \"bcryptjs\";\nimport { randomBytes } from \"crypto\";\nimport { mkdirSync } from \"fs\";\nimport { dirname } from \"path\";\nimport type { AuthAdapter, AuthUser, Session, UserRole } from \"./types.js\";\n\nexport interface SQLiteAuthAdapterOptions {\n  path?: string;\n  db?: Database.Database;\n  saltRounds?: number;\n  busyTimeout?: number;\n  walAutoCheckpoint?: number;\n  cacheSize?: number;\n  mmapSize?: number;\n}\n\nconst DEFAULT_BUSY_TIMEOUT = 5000;\nconst DEFAULT_WAL_CHECKPOINT = 1000;\nconst DEFAULT_CACHE_SIZE = -64000;\nconst DEFAULT_MMAP_SIZE = 268435456;\n\nexport class SQLiteAuthAdapter implements AuthAdapter {\n  private db: Database.Database | null = null;\n  private path: string;\n  private saltRounds: number;\n  private externalDb: boolean;\n  private busyTimeout: number;\n  private walAutoCheckpoint: number;\n  private cacheSize: number;\n  private mmapSize: number;\n\n  private preparedStatements: Map<string, Database.Statement> = new Map();\n\n  constructor(options: SQLiteAuthAdapterOptions = {}) {\n    this.path = options.path || \"./data/auth.db\";\n    this.saltRounds = options.saltRounds || 12;\n    this.externalDb = !!options.db;\n    this.busyTimeout = options.busyTimeout ?? DEFAULT_BUSY_TIMEOUT;\n    this.walAutoCheckpoint =\n      options.walAutoCheckpoint ?? DEFAULT_WAL_CHECKPOINT;\n    this.cacheSize = options.cacheSize ?? DEFAULT_CACHE_SIZE;\n    this.mmapSize = options.mmapSize ?? DEFAULT_MMAP_SIZE;\n\n    if (options.db) {\n      this.db = options.db;\n    }\n  }\n\n  async connect(): Promise<void> {\n    if (this.db) return;\n\n    const dir = dirname(this.path);\n    if (dir && dir !== \".\") {\n      mkdirSync(dir, { recursive: true });\n    }\n\n    const Database = (await import(\"better-sqlite3\")).default;\n    this.db = new Database(this.path, {\n      timeout: this.busyTimeout,\n    });\n\n    this.db.pragma(\"journal_mode = WAL\");\n    this.db.pragma(\"synchronous = NORMAL\");\n    this.db.pragma(\"cache_size = \" + this.cacheSize);\n    this.db.pragma(\"mmap_size = \" + this.mmapSize);\n    this.db.pragma(\"wal_autocheckpoint = \" + this.walAutoCheckpoint);\n    this.db.pragma(\"foreign_keys = ON\");\n    this.db.pragma(\"temp_store = MEMORY\");\n\n    this.ensureTables();\n    this.prepareStatements();\n  }\n\n  async disconnect(): Promise<void> {\n    if (this.db && !this.externalDb) {\n      this.db.pragma(\"wal_checkpoint(TRUNCATE)\");\n      this.db.close();\n      this.db = null;\n      this.preparedStatements.clear();\n    }\n  }\n\n  private ensureTables(): void {\n    if (!this.db) return;\n\n    this.db.exec(`\n      CREATE TABLE IF NOT EXISTS kyro_users (\n        id TEXT PRIMARY KEY,\n        email TEXT UNIQUE NOT NULL,\n        password_hash TEXT NOT NULL,\n        role TEXT NOT NULL DEFAULT 'customer',\n        tenant_id TEXT,\n        email_verified INTEGER DEFAULT 0,\n        locked INTEGER DEFAULT 0,\n        last_login TEXT,\n        failed_login_attempts INTEGER DEFAULT 0,\n        locked_until TEXT,\n        created_at TEXT NOT NULL,\n        updated_at TEXT NOT NULL\n      );\n\n      CREATE TABLE IF NOT EXISTS kyro_sessions (\n        id TEXT PRIMARY KEY,\n        user_id TEXT NOT NULL,\n        token TEXT NOT NULL,\n        refresh_token TEXT,\n        expires_at TEXT NOT NULL,\n        created_at TEXT NOT NULL,\n        ip_address TEXT,\n        user_agent TEXT,\n        FOREIGN KEY (user_id) REFERENCES kyro_users(id) ON DELETE CASCADE\n      );\n\n      CREATE TABLE IF NOT EXISTS kyro_password_history (\n        id INTEGER PRIMARY KEY AUTOINCREMENT,\n        user_id TEXT NOT NULL,\n        password_hash TEXT NOT NULL,\n        created_at TEXT NOT NULL,\n        FOREIGN KEY (user_id) REFERENCES kyro_users(id) ON DELETE CASCADE\n      );\n\n      CREATE TABLE IF NOT EXISTS kyro_rate_limits (\n        id INTEGER PRIMARY KEY AUTOINCREMENT,\n        key TEXT NOT NULL,\n        window_start INTEGER NOT NULL,\n        count INTEGER NOT NULL DEFAULT 1,\n        UNIQUE(key, window_start)\n      );\n\n      CREATE TABLE IF NOT EXISTS kyro_lockouts (\n        user_id TEXT PRIMARY KEY,\n        attempts INTEGER NOT NULL DEFAULT 0,\n        last_attempt INTEGER,\n        locked_at INTEGER,\n        locked_until INTEGER\n      );\n\n      CREATE TABLE IF NOT EXISTS kyro_audit_logs (\n        id TEXT PRIMARY KEY,\n        timestamp TEXT NOT NULL,\n        action TEXT NOT NULL,\n        user_id TEXT,\n        user_email TEXT,\n        role TEXT,\n        resource TEXT NOT NULL,\n        resource_id TEXT,\n        ip_address TEXT,\n        user_agent TEXT,\n        success INTEGER NOT NULL,\n        error TEXT,\n        metadata TEXT,\n        created_at TEXT NOT NULL DEFAULT (datetime('now'))\n      );\n\n      CREATE INDEX IF NOT EXISTS idx_kyro_users_email ON kyro_users(email);\n      CREATE INDEX IF NOT EXISTS idx_kyro_sessions_user_id ON kyro_sessions(user_id);\n      CREATE INDEX IF NOT EXISTS idx_kyro_sessions_token ON kyro_sessions(token);\n      CREATE INDEX IF NOT EXISTS idx_kyro_sessions_refresh_token ON kyro_sessions(refresh_token);\n      CREATE INDEX IF NOT EXISTS idx_kyro_sessions_expires ON kyro_sessions(expires_at);\n      CREATE INDEX IF NOT EXISTS idx_kyro_password_history_user_id ON kyro_password_history(user_id);\n      CREATE INDEX IF NOT EXISTS idx_kyro_rate_limits_key ON kyro_rate_limits(key);\n      CREATE INDEX IF NOT EXISTS idx_kyro_rate_limits_window ON kyro_rate_limits(window_start);\n      CREATE INDEX IF NOT EXISTS idx_kyro_lockouts_locked_until ON kyro_lockouts(locked_until);\n      CREATE INDEX IF NOT EXISTS idx_kyro_audit_logs_timestamp ON kyro_audit_logs(timestamp);\n      CREATE INDEX IF NOT EXISTS idx_kyro_audit_logs_action ON kyro_audit_logs(action);\n      CREATE INDEX IF NOT EXISTS idx_kyro_audit_logs_user_id ON kyro_audit_logs(user_id);\n      CREATE INDEX IF NOT EXISTS idx_kyro_audit_logs_resource ON kyro_audit_logs(resource);\n    `);\n  }\n\n  private prepareStatements(): void {\n    if (!this.db) return;\n\n    this.preparedStatements.set(\n      \"findUserByEmail\",\n      this.db.prepare(\"SELECT * FROM kyro_users WHERE email = ?\"),\n    );\n    this.preparedStatements.set(\n      \"findUserById\",\n      this.db.prepare(\"SELECT * FROM kyro_users WHERE id = ?\"),\n    );\n    this.preparedStatements.set(\n      \"findSessionByToken\",\n      this.db.prepare(\"SELECT * FROM kyro_sessions WHERE token = ?\"),\n    );\n    this.preparedStatements.set(\n      \"findSessionByRefreshToken\",\n      this.db.prepare(\"SELECT * FROM kyro_sessions WHERE refresh_token = ?\"),\n    );\n    this.preparedStatements.set(\n      \"deleteSession\",\n      this.db.prepare(\"DELETE FROM kyro_sessions WHERE id = ? OR token = ?\"),\n    );\n    this.preparedStatements.set(\n      \"deleteUserSessions\",\n      this.db.prepare(\"DELETE FROM kyro_sessions WHERE user_id = ?\"),\n    );\n    this.preparedStatements.set(\n      \"countUsers\",\n      this.db.prepare(\"SELECT COUNT(*) as count FROM kyro_users\"),\n    );\n    this.preparedStatements.set(\n      \"deleteUser\",\n      this.db.prepare(\"DELETE FROM kyro_users WHERE id = ?\"),\n    );\n    this.preparedStatements.set(\n      \"getPasswordHistory\",\n      this.db.prepare(\n        \"SELECT password_hash FROM kyro_password_history WHERE user_id = ? ORDER BY created_at DESC LIMIT ?\",\n      ),\n    );\n    this.preparedStatements.set(\n      \"addPasswordHistory\",\n      this.db.prepare(\n        \"INSERT INTO kyro_password_history (user_id, password_hash, created_at) VALUES (?, ?, ?)\",\n      ),\n    );\n    this.preparedStatements.set(\n      \"trimPasswordHistory\",\n      this.db.prepare(\n        `DELETE FROM kyro_password_history WHERE id IN (\n          SELECT id FROM kyro_password_history WHERE user_id = ? ORDER BY created_at DESC LIMIT -1 OFFSET 5\n        )`,\n      ),\n    );\n    this.preparedStatements.set(\n      \"deleteExpiredSessions\",\n      this.db.prepare(\"DELETE FROM kyro_sessions WHERE expires_at < ?\"),\n    );\n    this.preparedStatements.set(\n      \"cleanupOldAuditLogs\",\n      this.db.prepare(\"DELETE FROM kyro_audit_logs WHERE timestamp < ?\"),\n    );\n    this.preparedStatements.set(\n      \"cleanupExpiredLockouts\",\n      this.db.prepare(\n        \"UPDATE kyro_lockouts SET attempts = 0, locked_at = NULL, locked_until = NULL WHERE locked_until < ?\",\n      ),\n    );\n    this.preparedStatements.set(\n      \"getLockout\",\n      this.db.prepare(\"SELECT * FROM kyro_lockouts WHERE user_id = ?\"),\n    );\n    this.preparedStatements.set(\n      \"upsertLockout\",\n      this.db.prepare(`\n        INSERT INTO kyro_lockouts (user_id, attempts, last_attempt, locked_at, locked_until)\n        VALUES (?, ?, ?, ?, ?)\n        ON CONFLICT(user_id) DO UPDATE SET\n          attempts = excluded.attempts,\n          last_attempt = excluded.last_attempt,\n          locked_at = excluded.locked_at,\n          locked_until = excluded.locked_until\n      `),\n    );\n    this.preparedStatements.set(\n      \"resetLockout\",\n      this.db.prepare(\n        \"UPDATE kyro_lockouts SET attempts = 0, locked_at = NULL, locked_until = NULL WHERE user_id = ?\",\n      ),\n    );\n  }\n\n  private stmt(name: string): Database.Statement {\n    const stmt = this.preparedStatements.get(name);\n    if (!stmt) throw new Error(`Prepared statement not found: ${name}`);\n    return stmt;\n  }\n\n  async cleanupExpiredSessions(): Promise<number> {\n    if (!this.db) throw new Error(\"Not connected\");\n    const result = this.stmt(\"deleteExpiredSessions\").run(\n      new Date().toISOString(),\n    );\n    return result.changes;\n  }\n\n  async cleanupOldAuditLogs(retentionDays: number = 30): Promise<number> {\n    if (!this.db) throw new Error(\"Not connected\");\n    const cutoff = new Date(\n      Date.now() - retentionDays * 24 * 60 * 60 * 1000,\n    ).toISOString();\n    const result = this.stmt(\"cleanupOldAuditLogs\").run(cutoff);\n    return result.changes;\n  }\n\n  async getStats(): Promise<{\n    userCount: number;\n    activeSessionCount: number;\n    auditLogCount: number;\n  }> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const userCount = (this.stmt(\"countUsers\").get() as { count: number })\n      .count;\n\n    const activeSessionCount = (\n      this.db\n        .prepare(\n          \"SELECT COUNT(*) as count FROM kyro_sessions WHERE expires_at > ?\",\n        )\n        .get(new Date().toISOString()) as { count: number }\n    ).count;\n\n    const auditLogCount = (\n      this.db\n        .prepare(\"SELECT COUNT(*) as count FROM kyro_audit_logs\")\n        .get() as { count: number }\n    ).count;\n\n    return { userCount, activeSessionCount, auditLogCount };\n  }\n\n  async createUser(data: {\n    email: string;\n    passwordHash: string;\n    role?: UserRole;\n    tenantId?: string;\n  }): Promise<AuthUser> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const id = randomBytes(16).toString(\"hex\");\n    const now = new Date().toISOString();\n\n    const user: AuthUser = {\n      id,\n      email: data.email.toLowerCase(),\n      passwordHash: data.passwordHash,\n      role: (data.role || \"customer\") as UserRole,\n      tenantId: data.tenantId,\n      createdAt: now,\n      updatedAt: now,\n    };\n\n    this.db\n      .prepare(\n        `INSERT INTO kyro_users (id, email, password_hash, role, tenant_id, created_at, updated_at)\n         VALUES (?, ?, ?, ?, ?, ?, ?)`,\n      )\n      .run(\n        id,\n        user.email,\n        user.passwordHash,\n        user.role,\n        user.tenantId,\n        now,\n        now,\n      );\n\n    return user;\n  }\n\n  async findUserByEmail(email: string): Promise<AuthUser | null> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const row = this.stmt(\"findUserByEmail\").get(email.toLowerCase()) as\n      | Record<string, unknown>\n      | undefined;\n\n    if (!row) return null;\n    return this.rowToUser(row);\n  }\n\n  async findUserById(userId: string): Promise<AuthUser | null> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const row = this.stmt(\"findUserById\").get(userId) as\n      | Record<string, unknown>\n      | undefined;\n\n    if (!row) return null;\n    return this.rowToUser(row);\n  }\n\n  async updateUser(\n    userId: string,\n    data: Partial<AuthUser>,\n  ): Promise<AuthUser | null> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const existing = await this.findUserById(userId);\n    if (!existing) return null;\n\n    const updates: string[] = [];\n    const values: unknown[] = [];\n\n    if (data.email !== undefined) {\n      updates.push(\"email = ?\");\n      values.push(data.email.toLowerCase());\n    }\n    if (data.passwordHash !== undefined) {\n      updates.push(\"password_hash = ?\");\n      values.push(data.passwordHash);\n    }\n    if (data.role !== undefined) {\n      updates.push(\"role = ?\");\n      values.push(data.role);\n    }\n    if (data.tenantId !== undefined) {\n      updates.push(\"tenant_id = ?\");\n      values.push(data.tenantId);\n    }\n    if (data.emailVerified !== undefined) {\n      updates.push(\"email_verified = ?\");\n      values.push(data.emailVerified ? 1 : 0);\n    }\n    if (data.locked !== undefined) {\n      updates.push(\"locked = ?\");\n      values.push(data.locked ? 1 : 0);\n    }\n    if (data.lastLogin !== undefined) {\n      updates.push(\"last_login = ?\");\n      values.push(data.lastLogin);\n    }\n    if (data.failedLoginAttempts !== undefined) {\n      updates.push(\"failed_login_attempts = ?\");\n      values.push(data.failedLoginAttempts);\n    }\n\n    updates.push(\"updated_at = ?\");\n    values.push(new Date().toISOString());\n\n    values.push(userId);\n\n    this.db\n      .prepare(`UPDATE kyro_users SET ${updates.join(\", \")} WHERE id = ?`)\n      .run(...values);\n\n    return this.findUserById(userId);\n  }\n\n  async deleteUser(userId: string): Promise<boolean> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const result = this.stmt(\"deleteUser\").run(userId);\n    return result.changes > 0;\n  }\n\n  async hashPassword(password: string): Promise<string> {\n    return bcrypt.hash(password, this.saltRounds);\n  }\n\n  async verifyPassword(password: string, hash: string): Promise<boolean> {\n    return bcrypt.compare(password, hash);\n  }\n\n  async createSession(\n    userId: string,\n    data: {\n      ipAddress?: string;\n      userAgent?: string;\n    } = {},\n  ): Promise<Session> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const id = randomBytes(32).toString(\"hex\");\n    const token = randomBytes(32).toString(\"base64url\");\n    const refreshToken = randomBytes(32).toString(\"base64url\");\n    const now = new Date();\n    const expiresAt = new Date(now.getTime() + 86400000).toISOString();\n\n    const session: Session = {\n      id,\n      userId,\n      token,\n      refreshToken,\n      expiresAt,\n      createdAt: now.toISOString(),\n      ipAddress: data.ipAddress,\n      userAgent: data.userAgent,\n    };\n\n    this.db\n      .prepare(\n        `INSERT INTO kyro_sessions (id, user_id, token, refresh_token, expires_at, created_at, ip_address, user_agent)\n         VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n      )\n      .run(\n        session.id,\n        session.userId,\n        session.token,\n        session.refreshToken,\n        session.expiresAt,\n        session.createdAt,\n        session.ipAddress,\n        session.userAgent,\n      );\n\n    return session;\n  }\n\n  async findSessionByToken(token: string): Promise<Session | null> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const row = this.stmt(\"findSessionByToken\").get(token) as\n      | Record<string, unknown>\n      | undefined;\n\n    if (!row) return null;\n    return this.rowToSession(row);\n  }\n\n  async findSessionByRefreshToken(\n    refreshToken: string,\n  ): Promise<Session | null> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const row = this.stmt(\"findSessionByRefreshToken\").get(refreshToken) as\n      | Record<string, unknown>\n      | undefined;\n\n    if (!row) return null;\n    return this.rowToSession(row);\n  }\n\n  async deleteSession(sessionId: string): Promise<boolean> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const result = this.stmt(\"deleteSession\").run(sessionId, sessionId);\n    return result.changes > 0;\n  }\n\n  async deleteUserSessions(userId: string): Promise<number> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const result = this.stmt(\"deleteUserSessions\").run(userId);\n    return result.changes;\n  }\n\n  async hasAnyUsers(): Promise<boolean> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const row = this.stmt(\"countUsers\").get() as { count: number };\n    return row.count > 0;\n  }\n\n  async addPasswordToHistory(\n    userId: string,\n    passwordHash: string,\n  ): Promise<void> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    this.stmt(\"addPasswordHistory\").run(\n      userId,\n      passwordHash,\n      new Date().toISOString(),\n    );\n    this.stmt(\"trimPasswordHistory\").run(userId);\n  }\n\n  async getPasswordHistory(\n    userId: string,\n    count: number = 5,\n  ): Promise<string[]> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const rows = this.stmt(\"getPasswordHistory\").all(userId, count) as Array<{\n      password_hash: string;\n    }>;\n\n    return rows.map((r) => r.password_hash);\n  }\n\n  async isPasswordInHistory(\n    password: string,\n    userId: string,\n    historyCount: number = 5,\n  ): Promise<boolean> {\n    const history = await this.getPasswordHistory(userId, historyCount);\n    for (const hash of history) {\n      if (await bcrypt.compare(password, hash)) {\n        return true;\n      }\n    }\n    return false;\n  }\n\n  async recordFailedAttempt(userId: string): Promise<void> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const now = Date.now();\n    const lockout = this.stmt(\"getLockout\").get(userId) as\n      | { attempts: number; locked_until: number | null }\n      | undefined;\n\n    const attempts = (lockout?.attempts || 0) + 1;\n    const lockedUntil =\n      attempts >= 5 ? now + 15 * 60 * 1000 : lockout?.locked_until || null;\n\n    this.stmt(\"upsertLockout\").run(\n      userId,\n      attempts,\n      now,\n      lockedUntil !== null ? now : null,\n      lockedUntil,\n    );\n  }\n\n  async resetAttempts(userId: string): Promise<void> {\n    if (!this.db) throw new Error(\"Not connected\");\n    this.stmt(\"resetLockout\").run(userId);\n  }\n\n  async checkLockout(userId: string): Promise<{\n    locked: boolean;\n    attemptsRemaining: number;\n    lockedUntil?: Date;\n    totalAttempts: number;\n  }> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    this.stmt(\"cleanupExpiredLockouts\").run(Date.now());\n\n    const lockout = this.stmt(\"getLockout\").get(userId) as\n      | { attempts: number; locked_until: number | null }\n      | undefined;\n\n    if (!lockout) {\n      return {\n        locked: false,\n        attemptsRemaining: 5,\n        totalAttempts: 0,\n      };\n    }\n\n    if (lockout.locked_until !== null && lockout.locked_until > Date.now()) {\n      return {\n        locked: true,\n        attemptsRemaining: 0,\n        lockedUntil: new Date(lockout.locked_until),\n        totalAttempts: lockout.attempts,\n      };\n    }\n\n    return {\n      locked: false,\n      attemptsRemaining: Math.max(0, 5 - lockout.attempts),\n      totalAttempts: lockout.attempts,\n    };\n  }\n\n  async logAudit(data: {\n    action: string;\n    userId?: string;\n    userEmail?: string;\n    role?: string;\n    resource: string;\n    resourceId?: string;\n    ipAddress?: string;\n    userAgent?: string;\n    success: boolean;\n    error?: string;\n    metadata?: Record<string, unknown>;\n  }): Promise<string> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const id = randomBytes(16).toString(\"hex\");\n    const timestamp = new Date().toISOString();\n\n    this.db\n      .prepare(\n        `INSERT INTO kyro_audit_logs (\n          id, timestamp, action, user_id, user_email, role, resource, resource_id,\n          ip_address, user_agent, success, error, metadata, created_at\n        ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n      )\n      .run(\n        id,\n        timestamp,\n        data.action,\n        data.userId || null,\n        data.userEmail || null,\n        data.role || null,\n        data.resource,\n        data.resourceId || null,\n        data.ipAddress || null,\n        data.userAgent || null,\n        data.success ? 1 : 0,\n        data.error || null,\n        data.metadata ? JSON.stringify(data.metadata) : null,\n        new Date().toISOString(),\n      );\n\n    return id;\n  }\n\n  async queryAuditLogs(\n    options: {\n      action?: string;\n      userId?: string;\n      resource?: string;\n      success?: boolean;\n      startDate?: Date;\n      endDate?: Date;\n      limit?: number;\n      offset?: number;\n    } = {},\n  ): Promise<{\n    logs: Array<{\n      id: string;\n      timestamp: Date;\n      action: string;\n      userId?: string;\n      userEmail?: string;\n      resource: string;\n      resourceId?: string;\n      ipAddress?: string;\n      userAgent?: string;\n      success: boolean;\n      error?: string;\n      metadata?: Record<string, unknown>;\n    }>;\n    total: number;\n  }> {\n    if (!this.db) throw new Error(\"Not connected\");\n\n    const conditions: string[] = [];\n    const params: unknown[] = [];\n\n    if (options.action) {\n      conditions.push(\"action = ?\");\n      params.push(options.action);\n    }\n    if (options.userId) {\n      conditions.push(\"user_id = ?\");\n      params.push(options.userId);\n    }\n    if (options.resource) {\n      conditions.push(\"resource = ?\");\n      params.push(options.resource);\n    }\n    if (options.success !== undefined) {\n      conditions.push(\"success = ?\");\n      params.push(options.success ? 1 : 0);\n    }\n    if (options.startDate) {\n      conditions.push(\"timestamp >= ?\");\n      params.push(options.startDate.toISOString());\n    }\n    if (options.endDate) {\n      conditions.push(\"timestamp <= ?\");\n      params.push(options.endDate.toISOString());\n    }\n\n    const where =\n      conditions.length > 0 ? \"WHERE \" + conditions.join(\" AND \") : \"\";\n    const limit = options.limit || 50;\n    const offset = options.offset || 0;\n\n    const totalResult = this.db\n      .prepare(`SELECT COUNT(*) as count FROM kyro_audit_logs ${where}`)\n      .get(...params) as { count: number };\n\n    const rows = this.db\n      .prepare(\n        `SELECT * FROM kyro_audit_logs ${where} ORDER BY timestamp DESC LIMIT ? OFFSET ?`,\n      )\n      .all(...params, limit, offset) as Array<Record<string, unknown>>;\n\n    return {\n      total: totalResult.count,\n      logs: rows.map((row) => ({\n        id: row.id as string,\n        timestamp: new Date(row.timestamp as string),\n        action: row.action as string,\n        userId: (row.user_id as string) || undefined,\n        userEmail: (row.user_email as string) || undefined,\n        resource: row.resource as string,\n        resourceId: (row.resource_id as string) || undefined,\n        ipAddress: (row.ip_address as string) || undefined,\n        userAgent: (row.user_agent as string) || undefined,\n        success: (row.success as number) === 1,\n        error: (row.error as string) || undefined,\n        metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n      })),\n    };\n  }\n\n  private rowToUser(row: Record<string, unknown>): AuthUser {\n    return {\n      id: row.id as string,\n      email: row.email as string,\n      passwordHash: row.password_hash as string,\n      role: row.role as UserRole,\n      tenantId: row.tenant_id as string | undefined,\n      emailVerified: (row.email_verified as number) === 1,\n      locked: (row.locked as number) === 1,\n      lastLogin: row.last_login as string | undefined,\n      failedLoginAttempts: (row.failed_login_attempts as number) || 0,\n      createdAt: row.created_at as string,\n      updatedAt: row.updated_at as string,\n    };\n  }\n\n  private rowToSession(row: Record<string, unknown>): Session {\n    return {\n      id: row.id as string,\n      userId: row.user_id as string,\n      token: row.token as string,\n      refreshToken: row.refresh_token as string | undefined,\n      expiresAt: row.expires_at as string,\n      createdAt: row.created_at as string,\n      ipAddress: row.ip_address as string | undefined,\n      userAgent: row.user_agent as string | undefined,\n    };\n  }\n}\n","import nodemailer, { Transporter } from \"nodemailer\";\nimport type { SentMessageInfo } from \"nodemailer\";\n\nexport interface EmailConfig {\n  host: string;\n  port: number;\n  secure: boolean;\n  auth: {\n    user: string;\n    pass: string;\n  };\n  from: string;\n  fromName?: string;\n}\n\nexport interface EmailOptions {\n  to: string | string[];\n  subject: string;\n  html: string;\n  text?: string;\n}\n\nexport interface EmailTemplates {\n  verifyEmail: (\n    link: string,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n  resetPassword: (\n    link: string,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n  welcome: (userName?: string) => {\n    subject: string;\n    html: string;\n    text: string;\n  };\n  accountLocked: (\n    attempts: number,\n    duration: number,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n  passwordChanged: (userName?: string) => {\n    subject: string;\n    html: string;\n    text: string;\n  };\n  newLogin: (\n    location: string,\n    time: string,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n}\n\nconst defaultTemplates: EmailTemplates = {\n  verifyEmail: (link, userName = \"User\") => ({\n    subject: \"Verify your email address\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Verify Email</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .button { display: inline-block; padding: 12px 24px; background: #0b1222; color: white; text-decoration: none; border-radius: 6px; font-weight: 600; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Welcome, ${userName}!</h1>\n          <p>Please verify your email address by clicking the button below:</p>\n          <p style=\"text-align: center; margin: 30px 0;\">\n            <a href=\"${link}\" class=\"button\">Verify Email</a>\n          </p>\n          <p>Or copy and paste this link into your browser:</p>\n          <p style=\"word-break: break-all; color: #666;\">${link}</p>\n          <p>This link will expire in 24 hours.</p>\n          <div class=\"footer\">\n            <p>If you didn't create an account, you can safely ignore this email.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Welcome ${userName}!\\n\\nPlease verify your email by clicking this link: ${link}\\n\\nThis link will expire in 24 hours.\\n\\nIf you didn't create an account, you can safely ignore this email.`,\n  }),\n\n  resetPassword: (link, userName = \"User\") => ({\n    subject: \"Reset your password\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Reset Password</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .button { display: inline-block; padding: 12px 24px; background: #dc2626; color: white; text-decoration: none; border-radius: 6px; font-weight: 600; }\n          .warning { background: #fef3c7; border: 1px solid #f59e0b; padding: 12px; border-radius: 6px; margin: 20px 0; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Password Reset Request</h1>\n          <p>Hello ${userName},</p>\n          <p>We received a request to reset your password. Click the button below to create a new password:</p>\n          <p style=\"text-align: center; margin: 30px 0;\">\n            <a href=\"${link}\" class=\"button\">Reset Password</a>\n          </p>\n          <p>Or copy and paste this link into your browser:</p>\n          <p style=\"word-break: break-all; color: #666;\">${link}</p>\n          <div class=\"warning\">\n            <strong>⚠️ Important:</strong> This link will expire in 1 hour. If you didn't request a password reset, please ignore this email or contact support if you have concerns.\n          </div>\n          <div class=\"footer\">\n            <p>For security reasons, please don't share this email with anyone.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Password Reset Request\\n\\nHello ${userName},\\n\\nWe received a request to reset your password. Click this link to create a new password: ${link}\\n\\nThis link will expire in 1 hour.\\n\\nIf you didn't request a password reset, please ignore this email.`,\n  }),\n\n  welcome: (userName = \"User\") => ({\n    subject: \"Welcome to Kyro CMS\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Welcome</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .button { display: inline-block; padding: 12px 24px; background: #0b1222; color: white; text-decoration: none; border-radius: 6px; font-weight: 600; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Welcome to Kyro CMS, ${userName}!</h1>\n          <p>Your account has been created successfully.</p>\n          <p>You can now:</p>\n          <ul>\n            <li>Manage your content collections</li>\n            <li>Upload and organize media</li>\n            <li>Configure settings</li>\n            <li>And much more...</li>\n          </ul>\n          <p style=\"text-align: center; margin: 30px 0;\">\n            <a href=\"#\" class=\"button\">Get Started</a>\n          </p>\n          <p>If you have any questions, feel free to reach out to our support team.</p>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Welcome to Kyro CMS, ${userName}!\\n\\nYour account has been created successfully.\\n\\nYou can now:\\n- Manage your content collections\\n- Upload and organize media\\n- Configure settings\\n- And much more...\\n\\nGet started by logging into your dashboard.`,\n  }),\n\n  accountLocked: (attempts, duration, userName = \"User\") => ({\n    subject: \"Account Security Alert - Account Locked\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Account Locked</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .alert { background: #fef2f2; border: 1px solid #ef4444; padding: 16px; border-radius: 8px; margin: 20px 0; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Account Security Alert</h1>\n          <p>Hello ${userName},</p>\n          <div class=\"alert\">\n            <p><strong>⚠️ Your account has been temporarily locked due to multiple failed login attempts.</strong></p>\n            <p>Failed attempts: ${attempts}</p>\n            <p>Lockout duration: ${Math.round(duration / 60000)} minutes</p>\n          </div>\n          <p>Your account will automatically unlock after the lockout period expires.</p>\n          <p>If this wasn't you, we recommend:</p>\n          <ul>\n            <li>Using a strong, unique password</li>\n            <li>Enabling two-factor authentication (coming soon)</li>\n            <li>Reviewing your recent account activity</li>\n          </ul>\n          <div class=\"footer\">\n            <p>If you need immediate assistance, please contact support.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Account Security Alert\\n\\nHello ${userName},\\n\\nYour account has been temporarily locked due to multiple failed login attempts (${attempts}).\\n\\nLockout duration: ${Math.round(duration / 60000)} minutes\\n\\nYour account will automatically unlock after this period.\\n\\nIf this wasn't you, we recommend using a strong, unique password.`,\n  }),\n\n  passwordChanged: (userName = \"User\") => ({\n    subject: \"Your password has been changed\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Password Changed</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .info { background: #f0fdf4; border: 1px solid #22c55e; padding: 12px; border-radius: 6px; margin: 20px 0; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Password Changed</h1>\n          <p>Hello ${userName},</p>\n          <div class=\"info\">\n            <p>Your password was recently changed.</p>\n          </div>\n          <p>If you did this, you can safely ignore this email.</p>\n          <p><strong>If you didn't change your password</strong>, please contact our support team immediately as your account may have been compromised.</p>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Password Changed\\n\\nHello ${userName},\\n\\nYour password was recently changed.\\n\\nIf you did this, you can safely ignore this email.\\n\\nIf you didn't change your password, please contact support immediately.`,\n  }),\n\n  newLogin: (location, time, userName = \"User\") => ({\n    subject: \"New login to your account\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>New Login</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .info-box { background: #f8fafc; border: 1px solid #e2e8f0; padding: 16px; border-radius: 8px; margin: 20px 0; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>New Login Detected</h1>\n          <p>Hello ${userName},</p>\n          <p>We detected a new login to your account:</p>\n          <div class=\"info-box\">\n            <p><strong>Location:</strong> ${location}</p>\n            <p><strong>Time:</strong> ${time}</p>\n          </div>\n          <p><strong>If this was you</strong>, no action is needed.</p>\n          <p><strong>If this wasn't you</strong>, your account may be compromised. Please:</p>\n          <ol>\n            <li>Change your password immediately</li>\n            <li>Review your recent account activity</li>\n            <li>Contact support if needed</li>\n          </ol>\n          <div class=\"footer\">\n            <p>This is an automated security notification.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `New Login Detected\\n\\nHello ${userName},\\n\\nWe detected a new login to your account:\\n\\nLocation: ${location}\\nTime: ${time}\\n\\nIf this wasn't you, please change your password immediately and contact support.`,\n  }),\n};\n\nexport class EmailTransport {\n  private transporter: Transporter<SentMessageInfo>;\n  private from: string;\n  private fromName: string;\n  private templates: EmailTemplates;\n\n  constructor(config: EmailConfig, templates?: Partial<EmailTemplates>) {\n    this.transporter = nodemailer.createTransport({\n      host: config.host,\n      port: config.port,\n      secure: config.secure,\n      auth: config.auth,\n    });\n\n    this.from = config.from;\n    this.fromName = config.fromName || \"Kyro CMS\";\n    this.templates = { ...defaultTemplates, ...templates };\n  }\n\n  async send(options: EmailOptions): Promise<SentMessageInfo> {\n    return this.transporter.sendMail({\n      from: `\"${this.fromName}\" <${this.from}>`,\n      to: Array.isArray(options.to) ? options.to.join(\", \") : options.to,\n      subject: options.subject,\n      html: options.html,\n      text: options.text,\n    });\n  }\n\n  getTemplates(): EmailTemplates {\n    return this.templates;\n  }\n\n  async verifyConnection(): Promise<boolean> {\n    try {\n      await this.transporter.verify();\n      return true;\n    } catch {\n      return false;\n    }\n  }\n\n  static fromEnv(): EmailTransport | null {\n    const host = process.env.SMTP_HOST;\n    const port = parseInt(process.env.SMTP_PORT || \"587\", 10);\n    const secure = process.env.SMTP_SECURE === \"true\";\n    const user = process.env.SMTP_USER;\n    const pass = process.env.SMTP_PASS;\n    const from =\n      process.env.SMTP_FROM ||\n      process.env.DEFAULT_FROM ||\n      \"noreply@example.com\";\n    const fromName = process.env.SMTP_FROM_NAME || \"Kyro CMS\";\n\n    if (!host || !user || !pass) {\n      return null;\n    }\n\n    return new EmailTransport({\n      host,\n      port,\n      secure,\n      auth: { user, pass },\n      from,\n      fromName,\n    });\n  }\n}\n","export interface PasswordPolicyConfig {\n  minLength: number;\n  requireUppercase: boolean;\n  requireLowercase: boolean;\n  requireNumbers: boolean;\n  requireSpecialChars: boolean;\n  preventReuse: number;\n  maxLength?: number;\n}\n\nexport interface ValidationResult {\n  valid: boolean;\n  errors: string[];\n}\n\nexport const DEFAULT_PASSWORD_POLICY: PasswordPolicyConfig = {\n  minLength: 12,\n  requireUppercase: true,\n  requireLowercase: true,\n  requireNumbers: true,\n  requireSpecialChars: true,\n  preventReuse: 5,\n  maxLength: 128,\n};\n\nexport class PasswordPolicy {\n  private config: PasswordPolicyConfig;\n\n  constructor(config: Partial<PasswordPolicyConfig> = {}) {\n    this.config = { ...DEFAULT_PASSWORD_POLICY, ...config };\n  }\n\n  validate(password: string): ValidationResult {\n    const errors: string[] = [];\n\n    if (this.config.maxLength && password.length > this.config.maxLength) {\n      errors.push(\n        `Password must not exceed ${this.config.maxLength} characters`,\n      );\n    }\n\n    if (password.length < this.config.minLength) {\n      errors.push(\n        `Password must be at least ${this.config.minLength} characters`,\n      );\n    }\n\n    if (this.config.requireUppercase && !/[A-Z]/.test(password)) {\n      errors.push(\"Password must contain at least one uppercase letter\");\n    }\n\n    if (this.config.requireLowercase && !/[a-z]/.test(password)) {\n      errors.push(\"Password must contain at least one lowercase letter\");\n    }\n\n    if (this.config.requireNumbers && !/[0-9]/.test(password)) {\n      errors.push(\"Password must contain at least one number\");\n    }\n\n    if (\n      this.config.requireSpecialChars &&\n      !/[!@#$%^&*()_+\\-=\\[\\]{};':\"\\\\|,.<>\\/?]/.test(password)\n    ) {\n      errors.push(\"Password must contain at least one special character\");\n    }\n\n    const commonPasswords = [\n      \"password\",\n      \"123456\",\n      \"12345678\",\n      \"qwerty\",\n      \"abc123\",\n      \"monkey\",\n      \"1234567\",\n      \"letmein\",\n      \"trustno1\",\n      \"dragon\",\n      \"baseball\",\n      \"iloveyou\",\n      \"master\",\n      \"sunshine\",\n      \"ashley\",\n      \"football\",\n      \"password1\",\n      \"shadow\",\n      \"123123\",\n      \"654321\",\n    ];\n\n    if (commonPasswords.includes(password.toLowerCase())) {\n      errors.push(\n        \"This password is too common. Please choose a more secure password\",\n      );\n    }\n\n    if (/^[a-zA-Z]+$/.test(password) || /^[0-9]+$/.test(password)) {\n      errors.push(\n        \"Password must contain a mix of letters, numbers, and/or special characters\",\n      );\n    }\n\n    if (/(.)\\1{2,}/.test(password)) {\n      errors.push(\n        \"Password must not contain more than 2 consecutive identical characters\",\n      );\n    }\n\n    if (\n      /^(012|123|234|345|456|567|678|789|890|098|987|876|765|654|543|432|321|210)+$/i.test(\n        password,\n      )\n    ) {\n      errors.push(\"Password must not contain sequential numbers or letters\");\n    }\n\n    return {\n      valid: errors.length === 0,\n      errors,\n    };\n  }\n\n  async checkReuse(\n    passwordHash: string,\n    history: string[],\n    verifyFn: (password: string, hash: string) => Promise<boolean>,\n  ): Promise<ValidationResult> {\n    return {\n      valid: true,\n      errors: [],\n    };\n  }\n\n  async isInHistory(\n    password: string,\n    history: string[],\n    verifyFn: (password: string, hash: string) => Promise<boolean>,\n  ): Promise<boolean> {\n    for (const hash of history) {\n      if (await verifyFn(password, hash)) {\n        return true;\n      }\n    }\n    return false;\n  }\n\n  generatePassword(length: number = 16): string {\n    const uppercase = \"ABCDEFGHIJKLMNOPQRSTUVWXYZ\";\n    const lowercase = \"abcdefghijklmnopqrstuvwxyz\";\n    const numbers = \"0123456789\";\n    const special = \"!@#$%^&*()_+-=[]{}|;:,.<>?\";\n\n    let password = \"\";\n\n    password += uppercase[Math.floor(Math.random() * uppercase.length)];\n    password += lowercase[Math.floor(Math.random() * lowercase.length)];\n    password += numbers[Math.floor(Math.random() * numbers.length)];\n    password += special[Math.floor(Math.random() * special.length)];\n\n    const allChars = uppercase + lowercase + numbers + special;\n    for (let i = password.length; i < length; i++) {\n      password += allChars[Math.floor(Math.random() * allChars.length)];\n    }\n\n    return password\n      .split(\"\")\n      .sort(() => Math.random() - 0.5)\n      .join(\"\");\n  }\n\n  getStrength(password: string): {\n    score: number;\n    label: string;\n    feedback: string[];\n  } {\n    let score = 0;\n    const feedback: string[] = [];\n\n    if (password.length >= 8) score += 1;\n    if (password.length >= 12) score += 1;\n    if (password.length >= 16) score += 1;\n\n    if (/[a-z]/.test(password)) score += 1;\n    if (/[A-Z]/.test(password)) score += 1;\n    if (/[0-9]/.test(password)) score += 1;\n    if (/[!@#$%^&*()_+\\-=\\[\\]{}|;:,.<>?]/.test(password)) score += 1;\n\n    if (password.length > 8) score += 1;\n    if (password.length > 12) score += 1;\n\n    const uniqueChars = new Set(password).size;\n    if (uniqueChars > 6) score += 1;\n    if (uniqueChars > 10) score += 1;\n\n    let label: string;\n    if (score <= 3) {\n      label = \"Weak\";\n      feedback.push(\"Add more characters\");\n      feedback.push(\"Include uppercase and lowercase letters\");\n    } else if (score <= 5) {\n      label = \"Fair\";\n      feedback.push(\"Add special characters\");\n      feedback.push(\"Consider making it longer\");\n    } else if (score <= 7) {\n      label = \"Good\";\n      feedback.push(\"Consider making it longer for extra security\");\n    } else {\n      label = \"Strong\";\n    }\n\n    return { score, label, feedback };\n  }\n\n  setConfig(config: Partial<PasswordPolicyConfig>): void {\n    this.config = { ...this.config, ...config };\n  }\n\n  getConfig(): PasswordPolicyConfig {\n    return { ...this.config };\n  }\n}\n","import { SQLiteAuthAdapter } from \"./sqlite-adapter.js\";\nimport { EmailTransport } from \"./nodemailer-transport.js\";\nimport { PasswordPolicy } from \"./security/password-policy.js\";\nimport type { AuthUser, UserRole, AuthAdapter } from \"./types.js\";\n\nexport interface BootstrapConfig {\n  authAdapter?: AuthAdapter;\n  authDbPath?: string;\n  adminEmail: string;\n  adminPassword: string;\n  adminRole?: string;\n  tenantId?: string;\n  emailConfig?: {\n    host: string;\n    port: number;\n    secure: boolean;\n    auth: { user: string; pass: string };\n    from: string;\n    fromName?: string;\n  };\n  sendWelcomeEmail?: boolean;\n}\n\nexport interface BootstrapResult {\n  success: boolean;\n  user?: AuthUser;\n  error?: string;\n}\n\nexport async function bootstrapAdmin(\n  config: BootstrapConfig,\n): Promise<BootstrapResult> {\n  const {\n    adminEmail,\n    adminPassword,\n    adminRole = \"super_admin\",\n    tenantId,\n    emailConfig,\n    sendWelcomeEmail = false,\n  } = config;\n\n  const authAdapter =\n    config.authAdapter ||\n    new SQLiteAuthAdapter({\n      path: config.authDbPath || \"./data/auth.db\",\n    });\n\n  try {\n    await authAdapter.connect?.();\n  } catch (error) {\n    return {\n      success: false,\n      error: \"Failed to connect to auth storage\",\n    };\n  }\n\n  const passwordPolicy = new PasswordPolicy();\n  const passwordValidation = passwordPolicy.validate(adminPassword);\n  if (!passwordValidation.valid) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error: `Invalid password: ${passwordValidation.errors.join(\", \")}`,\n    };\n  }\n\n  const existingUser = await authAdapter.findUserByEmail(adminEmail);\n  if (existingUser) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error: \"Admin user already exists\",\n    };\n  }\n\n  try {\n    const passwordHash = await authAdapter.hashPassword(adminPassword);\n    const user = await authAdapter.createUser({\n      email: adminEmail,\n      passwordHash,\n      role: (adminRole as UserRole) || \"admin\",\n      tenantId,\n    });\n\n    if (sendWelcomeEmail && emailConfig) {\n      const emailTransport = new EmailTransport(emailConfig);\n      const templates = emailTransport.getTemplates();\n      const welcomeTemplate = templates.welcome(adminEmail.split(\"@\")[0]);\n      await emailTransport.send({\n        to: adminEmail,\n        ...welcomeTemplate,\n      });\n    }\n\n    await authAdapter.disconnect?.();\n    return {\n      success: true,\n      user,\n    };\n  } catch (error) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error:\n        error instanceof Error ? error.message : \"Failed to create admin user\",\n    };\n  }\n}\n\nexport async function checkBootstrapRequired(\n  authAdapter: AuthAdapter,\n  adminEmail: string,\n): Promise<boolean> {\n  const existingUser = await authAdapter.findUserByEmail(adminEmail);\n  return !existingUser;\n}\n\nexport function getBootstrapFromEnv(): BootstrapConfig | null {\n  const email = process.env.KYRO_ADMIN_EMAIL;\n  const password = process.env.KYRO_ADMIN_PASSWORD;\n\n  if (!email || !password) {\n    return null;\n  }\n\n  return {\n    authDbPath: process.env.KYRO_AUTH_DB_PATH || \"./data/auth.db\",\n    adminEmail: email,\n    adminPassword: password,\n    adminRole: process.env.KYRO_ADMIN_ROLE || \"super_admin\",\n    tenantId: process.env.KYRO_ADMIN_TENANT_ID,\n    emailConfig: process.env.SMTP_HOST\n      ? {\n          host: process.env.SMTP_HOST,\n          port: parseInt(process.env.SMTP_PORT || \"587\", 10),\n          secure: process.env.SMTP_SECURE === \"true\",\n          auth: {\n            user: process.env.SMTP_USER || \"\",\n            pass: process.env.SMTP_PASS || \"\",\n          },\n          from: process.env.SMTP_FROM || \"noreply@example.com\",\n          fromName: process.env.SMTP_FROM_NAME,\n        }\n      : undefined,\n    sendWelcomeEmail: process.env.KYRO_ADMIN_SEND_WELCOME === \"true\",\n  };\n}\n\nexport async function autoBootstrap(): Promise<BootstrapResult | null> {\n  const config = getBootstrapFromEnv();\n  if (!config) {\n    return null;\n  }\n\n  console.log(\"Auto-bootstrapping admin user...\");\n  const result = await bootstrapAdmin(config);\n\n  if (result.success) {\n    console.log(`Admin user created: ${config.adminEmail}`);\n  } else {\n    console.error(`Bootstrap failed: ${result.error}`);\n  }\n\n  return result;\n}\n\nexport async function bootstrapWithRetry(\n  config: BootstrapConfig,\n  maxRetries: number = 3,\n  retryDelayMs: number = 2000,\n): Promise<BootstrapResult> {\n  let lastError: string = \"\";\n\n  for (let i = 0; i < maxRetries; i++) {\n    const result = await bootstrapAdmin(config);\n\n    if (result.success) {\n      return result;\n    }\n\n    lastError = result.error || \"Unknown error\";\n\n    if (lastError.includes(\"already exists\")) {\n      return result;\n    }\n\n    if (i < maxRetries - 1) {\n      await new Promise((resolve) => setTimeout(resolve, retryDelayMs));\n    }\n  }\n\n  return {\n    success: false,\n    error: `Failed after ${maxRetries} retries: ${lastError}`,\n  };\n}\n"]}