@kyro-cms/core 0.10.3 → 0.10.5

package/dist/chunk-CJX74IYK.js

@@ -1,489 +0,0 @@
-import { users, sessions, passwordHistory, lockouts, auditLogs, emailVerifications, passwordResets } from './chunk-UUDTPZX6.js';
-import { sql, eq, desc, and, gt } from 'drizzle-orm';
-import bcrypt from 'bcryptjs';
-import { randomBytes } from 'crypto';
-
-var _tablesEnsured = false;
-var PostgresAuthAdapter = class {
-  db;
-  prefix;
-  sessionTTL;
-  refreshTokenTTL;
-  constructor(options) {
-    this.db = options.db;
-    this.prefix = options.prefix || "kyro:";
-    this.sessionTTL = options.sessionTTL || 86400;
-    this.refreshTokenTTL = options.refreshTokenTTL || 604800;
-  }
-  async connect() {
-    if (_tablesEnsured) return;
-    await this.db.execute(sql`
-      CREATE TABLE IF NOT EXISTS "users" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "name" VARCHAR(255),
-        "email" VARCHAR(255) NOT NULL,
-        "password_hash" VARCHAR(255),
-        "role" VARCHAR(50) NOT NULL DEFAULT 'customer',
-        "tenant_id" UUID,
-        "email_verified" BOOLEAN DEFAULT false,
-        "locked" BOOLEAN DEFAULT false,
-        "last_login" TIMESTAMP,
-        "failed_login_attempts" INTEGER DEFAULT 0,
-        "metadata" JSONB,
-        "avatar" VARCHAR(255),
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
-        "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `);
-    await this.db.execute(sql`ALTER TABLE "users" ADD COLUMN IF NOT EXISTS "avatar" VARCHAR(255)`);
-    await this.db.execute(sql`CREATE UNIQUE INDEX IF NOT EXISTS "users_email_idx" ON "users" ("email")`);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "users_tenant_idx" ON "users" ("tenant_id")`);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "users_role_idx" ON "users" ("role")`);
-    await this.db.execute(sql`
-      CREATE TABLE IF NOT EXISTS "sessions" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "token" VARCHAR(512) NOT NULL UNIQUE,
-        "refresh_token" VARCHAR(512),
-        "ip_address" VARCHAR(45),
-        "user_agent" TEXT,
-        "expires_at" TIMESTAMP NOT NULL,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "sessions_user_idx" ON "sessions" ("user_id")`);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "sessions_token_idx" ON "sessions" ("token")`);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "sessions_expires_idx" ON "sessions" ("expires_at")`);
-    await this.db.execute(sql`
-      CREATE TABLE IF NOT EXISTS "audit_logs" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "action" VARCHAR(100) NOT NULL,
-        "user_id" UUID REFERENCES "users"("id") ON DELETE SET NULL,
-        "user_email" VARCHAR(255),
-        "role" VARCHAR(50),
-        "resource" VARCHAR(100) NOT NULL,
-        "resource_id" VARCHAR(255),
-        "changes" JSONB,
-        "ip_address" VARCHAR(45),
-        "user_agent" TEXT,
-        "success" BOOLEAN NOT NULL DEFAULT true,
-        "error" TEXT,
-        "metadata" JSONB,
-        "timestamp" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `);
-    await this.db.execute(sql`ALTER TABLE "audit_logs" ALTER COLUMN "resource_id" TYPE VARCHAR(255)`);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "audit_logs_user_idx" ON "audit_logs" ("user_id")`);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "audit_logs_action_idx" ON "audit_logs" ("action")`);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "audit_logs_resource_idx" ON "audit_logs" ("resource")`);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "audit_logs_timestamp_idx" ON "audit_logs" ("timestamp")`);
-    await this.db.execute(sql`
-      CREATE TABLE IF NOT EXISTS "password_history" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "password_hash" VARCHAR(255) NOT NULL,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "password_history_user_idx" ON "password_history" ("user_id")`);
-    await this.db.execute(sql`
-      CREATE TABLE IF NOT EXISTS "lockouts" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "ip_address" VARCHAR(45),
-        "reason" VARCHAR(255),
-        "locked_until" TIMESTAMP NOT NULL,
-        "released_at" TIMESTAMP,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "lockouts_user_idx" ON "lockouts" ("user_id")`);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "lockouts_locked_until_idx" ON "lockouts" ("locked_until")`);
-    await this.db.execute(sql`
-      CREATE TABLE IF NOT EXISTS "roles" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "name" VARCHAR(100) NOT NULL UNIQUE,
-        "level" INTEGER NOT NULL DEFAULT 0,
-        "inherits" TEXT[],
-        "description" TEXT,
-        "permissions" JSONB DEFAULT '[]',
-        "is_system" BOOLEAN DEFAULT false,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
-        "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `);
-    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS "roles_level_idx" ON "roles" ("level")`);
-    await this.db.execute(sql`
-      CREATE TABLE IF NOT EXISTS "tenants" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "name" VARCHAR(255) NOT NULL,
-        "slug" VARCHAR(100) NOT NULL UNIQUE,
-        "settings" JSONB DEFAULT '{}',
-        "is_active" BOOLEAN DEFAULT true,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW(),
-        "updated_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `);
-    await this.db.execute(sql`
-      CREATE TABLE IF NOT EXISTS "api_keys" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "name" VARCHAR(255) NOT NULL,
-        "key" VARCHAR(64) NOT NULL UNIQUE,
-        "key_prefix" VARCHAR(8) NOT NULL,
-        "permissions" JSONB DEFAULT '[]',
-        "last_used_at" TIMESTAMP,
-        "expires_at" TIMESTAMP,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `);
-    await this.db.execute(sql`
-      CREATE TABLE IF NOT EXISTS "email_verifications" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "token" VARCHAR(64) NOT NULL UNIQUE,
-        "expires_at" TIMESTAMP NOT NULL,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `);
-    await this.db.execute(sql`
-      CREATE TABLE IF NOT EXISTS "password_resets" (
-        "id" UUID PRIMARY KEY DEFAULT gen_random_uuid(),
-        "user_id" UUID NOT NULL REFERENCES "users"("id") ON DELETE CASCADE,
-        "token" VARCHAR(64) NOT NULL UNIQUE,
-        "expires_at" TIMESTAMP NOT NULL,
-        "used_at" TIMESTAMP,
-        "created_at" TIMESTAMP NOT NULL DEFAULT NOW()
-      )
-    `);
-    _tablesEnsured = true;
-  }
-  async disconnect() {
-  }
-  async createUser(data) {
-    const passwordHash = await this.hashPassword(data.password);
-    const [user] = await this.db.insert(users).values({
-      email: data.email.toLowerCase(),
-      name: data.name,
-      passwordHash,
-      role: data.role || "customer",
-      avatar: data.avatar,
-      tenantId: data.tenantId
-    }).returning();
-    return this.userToAuthUser(user);
-  }
-  async findUserByEmail(email) {
-    const [user] = await this.db.select().from(users).where(eq(users.email, email.toLowerCase())).limit(1);
-    return user ? this.userToAuthUser(user) : null;
-  }
-  async findUserById(id) {
-    const [user] = await this.db.select().from(users).where(eq(users.id, id)).limit(1);
-    return user ? this.userToAuthUser(user) : null;
-  }
-  async updateUser(id, data) {
-    const dbData = { updatedAt: /* @__PURE__ */ new Date() };
-    if (data.name !== void 0) dbData.name = data.name;
-    if (data.email !== void 0) dbData.email = data.email;
-    if (data.passwordHash !== void 0)
-      dbData.passwordHash = data.passwordHash;
-    if (data.role !== void 0) dbData.role = data.role;
-    if (data.tenantId !== void 0) dbData.tenantId = data.tenantId;
-    if (data.avatar !== void 0) dbData.avatar = data.avatar;
-    if (data.emailVerified !== void 0)
-      dbData.emailVerified = data.emailVerified;
-    if (data.locked !== void 0) dbData.locked = data.locked;
-    if (data.lastLogin !== void 0)
-      dbData.lastLogin = data.lastLogin ? new Date(data.lastLogin) : null;
-    if (data.failedLoginAttempts !== void 0)
-      dbData.failedLoginAttempts = data.failedLoginAttempts;
-    const [user] = await this.db.update(users).set(dbData).where(eq(users.id, id)).returning();
-    return user ? this.userToAuthUser(user) : null;
-  }
-  async deleteUser(id) {
-    await this.db.delete(users).where(eq(users.id, id));
-    return true;
-  }
-  async findUsers(options = {}) {
-    const page = options.page ?? 1;
-    const limit = options.limit ?? 10;
-    const offset = (page - 1) * limit;
-    const search = options.search;
-    if (search) {
-      const pattern = `%${search}%`;
-      const [rows2, [{ count: count2 }]] = await Promise.all([
-        this.db.select().from(users).where(sql`${users.email} ILIKE ${pattern}`).orderBy(desc(users.createdAt)).limit(limit).offset(offset),
-        this.db.select({ count: sql`count(*)` }).from(users).where(sql`${users.email} ILIKE ${pattern}`)
-      ]);
-      return {
-        users: rows2.map((r) => this.userToAuthUser(r)),
-        total: Number(count2)
-      };
-    }
-    const [rows, [{ count }]] = await Promise.all([
-      this.db.select().from(users).orderBy(desc(users.createdAt)).limit(limit).offset(offset),
-      this.db.select({ count: sql`count(*)` }).from(users)
-    ]);
-    return {
-      users: rows.map((r) => this.userToAuthUser(r)),
-      total: Number(count)
-    };
-  }
-  async verifyPassword(email, password) {
-    const user = await this.findUserByEmail(email);
-    if (!user) return null;
-    const [stored] = await this.db.select().from(users).where(eq(users.email, email.toLowerCase())).limit(1);
-    if (!stored?.passwordHash) return null;
-    const valid = await bcrypt.compare(password, stored.passwordHash);
-    return valid ? user : null;
-  }
-  async hashPassword(password) {
-    return bcrypt.hash(password, 12);
-  }
-  async createSession(userId, data) {
-    const token = randomBytes(32).toString("base64url");
-    const refreshToken = randomBytes(32).toString("base64url");
-    const expiresAt = new Date(Date.now() + this.sessionTTL * 1e3);
-    new Date(Date.now() + this.refreshTokenTTL * 1e3);
-    const [session] = await this.db.insert(sessions).values({
-      userId,
-      token,
-      refreshToken,
-      ipAddress: data?.ipAddress,
-      userAgent: data?.userAgent,
-      expiresAt
-    }).returning();
-    return this.sessionToSession(session);
-  }
-  async findSessionByToken(token) {
-    const [session] = await this.db.select().from(sessions).where(and(eq(sessions.token, token), gt(sessions.expiresAt, /* @__PURE__ */ new Date()))).limit(1);
-    return session ? this.sessionToSession(session) : null;
-  }
-  async findSessionByRefreshToken(refreshToken) {
-    const [session] = await this.db.select().from(sessions).where(
-      and(
-        eq(sessions.refreshToken, refreshToken),
-        gt(sessions.expiresAt, /* @__PURE__ */ new Date())
-      )
-    ).limit(1);
-    return session ? this.sessionToSession(session) : null;
-  }
-  async deleteSession(sessionId) {
-    await this.db.delete(sessions).where(eq(sessions.id, sessionId));
-    return true;
-  }
-  async deleteUserSessions(userId) {
-    await this.db.delete(sessions).where(eq(sessions.userId, userId));
-    return 1;
-  }
-  async addPasswordToHistory(userId, passwordHash) {
-    await this.db.insert(passwordHistory).values({
-      userId,
-      passwordHash
-    });
-  }
-  async getPasswordHistory(userId, count = 5) {
-    const history = await this.db.select({ passwordHash: passwordHistory.passwordHash }).from(passwordHistory).where(eq(passwordHistory.userId, userId)).orderBy(desc(passwordHistory.createdAt)).limit(count);
-    return history.map((h) => h.passwordHash);
-  }
-  async isPasswordInHistory(password, userId, historyCount = 5) {
-    const history = await this.getPasswordHistory(userId, historyCount);
-    for (const hash of history) {
-      if (await this.verifyPassword(password, hash)) {
-        return true;
-      }
-    }
-    return false;
-  }
-  async isLocked(userId) {
-    const [lockout] = await this.db.select().from(lockouts).where(
-      and(eq(lockouts.userId, userId), gt(lockouts.lockedUntil, /* @__PURE__ */ new Date()))
-    ).limit(1);
-    return !!lockout;
-  }
-  async getLockout(userId) {
-    const [lockout] = await this.db.select().from(lockouts).where(
-      and(eq(lockouts.userId, userId), gt(lockouts.lockedUntil, /* @__PURE__ */ new Date()))
-    ).limit(1);
-    return lockout ? { lockedUntil: lockout.lockedUntil } : null;
-  }
-  async recordFailedAttempt(userId, ipAddress) {
-    const user = await this.findUserById(userId);
-    const attempts = (user?.failedLoginAttempts || 0) + 1;
-    await this.updateUser(userId, { failedLoginAttempts: attempts });
-    const maxAttempts = 5;
-    const locked = attempts >= maxAttempts;
-    if (locked) {
-      const lockoutDuration = 15 * 60 * 1e3;
-      await this.db.insert(lockouts).values({
-        userId,
-        ipAddress,
-        reason: "Too many failed login attempts",
-        lockedUntil: new Date(Date.now() + lockoutDuration)
-      });
-    }
-    return { attempts, locked };
-  }
-  async resetAttempts(userId) {
-    await this.updateUser(userId, { failedLoginAttempts: 0 });
-  }
-  async findAuditLogs(filter) {
-    const {
-      limit = 50,
-      offset = 0,
-      userId,
-      action,
-      resource,
-      resourceId,
-      success,
-      startDate,
-      endDate
-    } = filter;
-    const conditions = [];
-    if (userId) conditions.push(eq(auditLogs.userId, userId));
-    if (action) {
-      if (Array.isArray(action)) {
-        conditions.push(sql`${auditLogs.action} = ANY(${action})`);
-      } else {
-        conditions.push(eq(auditLogs.action, action));
-      }
-    }
-    if (resource) conditions.push(eq(auditLogs.resource, resource));
-    if (resourceId) conditions.push(eq(auditLogs.resourceId, resourceId));
-    if (success !== void 0) conditions.push(eq(auditLogs.success, success));
-    if (startDate) conditions.push(sql`${auditLogs.timestamp} >= ${startDate}`);
-    if (endDate) conditions.push(sql`${auditLogs.timestamp} <= ${endDate}`);
-    const whereClause = conditions.length > 0 ? and(...conditions) : void 0;
-    const countResult = await this.db.select({ count: sql`count(*)` }).from(auditLogs).where(whereClause);
-    const logs = await this.db.select().from(auditLogs).where(whereClause).orderBy(desc(auditLogs.timestamp)).limit(limit).offset(offset);
-    return {
-      logs: logs.map((log) => ({
-        id: log.id,
-        timestamp: log.timestamp,
-        action: log.action,
-        userId: log.userId || void 0,
-        userEmail: log.userEmail || void 0,
-        role: log.role || void 0,
-        resource: log.resource,
-        resourceId: log.resourceId || void 0,
-        changes: log.changes || void 0,
-        ipAddress: log.ipAddress || void 0,
-        userAgent: log.userAgent || void 0,
-        success: log.success,
-        error: log.error || void 0,
-        metadata: log.metadata || void 0
-      })),
-      total: Number(countResult[0]?.count || 0)
-    };
-  }
-  async createAuditLog(data) {
-    const id = crypto.randomUUID();
-    const timestamp = /* @__PURE__ */ new Date();
-    await this.db.insert(auditLogs).values({
-      id,
-      action: data.action,
-      userId: data.userId ?? null,
-      userEmail: data.userEmail ?? null,
-      role: data.role ?? null,
-      resource: data.resource,
-      resourceId: data.resourceId ?? null,
-      changes: data.changes ?? null,
-      ipAddress: data.ipAddress ?? null,
-      userAgent: data.userAgent ?? null,
-      success: data.success,
-      error: data.error ?? null,
-      metadata: data.metadata ?? null,
-      timestamp
-    });
-    return {
-      ...data,
-      id,
-      timestamp
-    };
-  }
-  userToAuthUser(user) {
-    return {
-      id: user.id,
-      name: user.name || void 0,
-      email: user.email,
-      passwordHash: user.passwordHash || void 0,
-      role: user.role,
-      avatar: user.avatar && typeof user.avatar === "object" ? user.avatar.id || void 0 : user.avatar || void 0,
-      tenantId: user.tenantId || void 0,
-      emailVerified: user.emailVerified || false,
-      locked: user.locked || false,
-      lastLogin: user.lastLogin ? new Date(user.lastLogin).toISOString() : void 0,
-      failedLoginAttempts: user.failedLoginAttempts || 0,
-      createdAt: new Date(user.createdAt).toISOString(),
-      updatedAt: new Date(user.updatedAt).toISOString()
-    };
-  }
-  sessionToSession(session) {
-    return {
-      id: session.id,
-      userId: session.userId,
-      token: session.token,
-      refreshToken: session.refreshToken || void 0,
-      expiresAt: new Date(session.expiresAt).toISOString(),
-      createdAt: new Date(session.createdAt).toISOString(),
-      ipAddress: session.ipAddress || void 0,
-      userAgent: session.userAgent || void 0
-    };
-  }
-  async createEmailVerificationToken(userId) {
-    const token = randomBytes(32).toString("hex");
-    const expiresAt = new Date(Date.now() + 24 * 60 * 60 * 1e3);
-    await this.db.insert(emailVerifications).values({
-      userId,
-      token,
-      expiresAt
-    });
-    return { token, expiresAt };
-  }
-  async verifyEmailToken(token) {
-    const [verification] = await this.db.select().from(emailVerifications).where(eq(emailVerifications.token, token)).limit(1);
-    if (!verification) {
-      return { success: false, error: "Invalid verification token" };
-    }
-    if (verification.expiresAt < /* @__PURE__ */ new Date()) {
-      return { success: false, error: "Verification token has expired" };
-    }
-    await this.db.update(users).set({ emailVerified: true }).where(eq(users.id, verification.userId));
-    await this.db.delete(emailVerifications).where(eq(emailVerifications.id, verification.id));
-    return { success: true, userId: verification.userId };
-  }
-  async createPasswordResetToken(email) {
-    const user = await this.findUserByEmail(email);
-    if (!user) {
-      return { token: "", expiresAt: /* @__PURE__ */ new Date(), error: "User not found" };
-    }
-    const token = randomBytes(32).toString("hex");
-    const expiresAt = new Date(Date.now() + 60 * 60 * 1e3);
-    await this.db.insert(passwordResets).values({
-      userId: user.id,
-      token,
-      expiresAt
-    });
-    return { token, expiresAt };
-  }
-  async resetPasswordWithToken(token, newPassword) {
-    const [reset] = await this.db.select().from(passwordResets).where(eq(passwordResets.token, token)).limit(1);
-    if (!reset) {
-      return { success: false, error: "Invalid reset token" };
-    }
-    if (reset.expiresAt < /* @__PURE__ */ new Date()) {
-      return { success: false, error: "Reset token has expired" };
-    }
-    if (reset.usedAt) {
-      return { success: false, error: "Reset token has already been used" };
-    }
-    const passwordHash = await this.hashPassword(newPassword);
-    await this.db.update(users).set({ passwordHash, updatedAt: /* @__PURE__ */ new Date() }).where(eq(users.id, reset.userId));
-    await this.db.update(passwordResets).set({ usedAt: /* @__PURE__ */ new Date() }).where(eq(passwordResets.id, reset.id));
-    await this.db.delete(sessions).where(eq(sessions.userId, reset.userId));
-    return { success: true };
-  }
-};
-
-export { PostgresAuthAdapter };
-//# sourceMappingURL=chunk-CJX74IYK.js.map
-//# sourceMappingURL=chunk-CJX74IYK.js.map

package/dist/chunk-CJX74IYK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/database/drizzle/postgres-auth-adapter.ts"],"names":["rows","count"],"mappings":";;;;;AAoCA,IAAI,cAAA,GAAiB,KAAA;AAEd,IAAM,sBAAN,MAAiD;AAAA,EAC9C,EAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA;AAAA,EAER,YAAY,OAAA,EAAqC;AAC/C,IAAA,IAAA,CAAK,KAAK,OAAA,CAAQ,EAAA;AAClB,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,MAAA,IAAU,OAAA;AAChC,IAAA,IAAA,CAAK,UAAA,GAAa,QAAQ,UAAA,IAAc,KAAA;AACxC,IAAA,IAAA,CAAK,eAAA,GAAkB,QAAQ,eAAA,IAAmB,MAAA;AAAA,EACpD;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAI,cAAA,EAAgB;AACpB,IAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAiBrB,CAAA;AACD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,kEAAA,CAAuE,CAAA;AAC7F,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,wEAAA,CAA6E,CAAA;AACnG,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,sEAAA,CAA2E,CAAA;AACjG,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,+DAAA,CAAoE,CAAA;AAE1F,IAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAWrB,CAAA;AACD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,wEAAA,CAA6E,CAAA;AACnG,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,uEAAA,CAA4E,CAAA;AAClG,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,8EAAA,CAAmF,CAAA;AAEzG,IAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAiBrB,CAAA;AACD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,qEAAA,CAA0E,CAAA;AAChG,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,4EAAA,CAAiF,CAAA;AACvG,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,6EAAA,CAAkF,CAAA;AACxG,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,iFAAA,CAAsF,CAAA;AAC5G,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,mFAAA,CAAwF,CAAA;AAE9G,IAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAOrB,CAAA;AACD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,wFAAA,CAA6F,CAAA;AAEnH,IAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAUrB,CAAA;AACD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,wEAAA,CAA6E,CAAA;AACnG,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,qFAAA,CAA0F,CAAA;AAEhH,IAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAYrB,CAAA;AACD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,GAAA,CAAA,iEAAA,CAAsE,CAAA;AAE5F,IAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAUrB,CAAA;AAED,IAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAYrB,CAAA;AAED,IAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAQrB,CAAA;AAED,IAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CASrB,CAAA;AACD,IAAA,cAAA,GAAiB,IAAA;AAAA,EACnB;AAAA,EAEA,MAAM,UAAA,GAA4B;AAAA,EAClC;AAAA,EAEA,MAAM,WAAW,IAAA,EAOK;AACpB,IAAA,MAAM,YAAA,GAAe,MAAM,IAAA,CAAK,YAAA,CAAa,KAAK,QAAQ,CAAA;AAC1D,IAAA,MAAM,CAAC,IAAI,CAAA,GAAI,MAAM,KAAK,EAAA,CACvB,MAAA,CAAO,KAAK,CAAA,CACZ,MAAA,CAAO;AAAA,MACN,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,WAAA,EAAY;AAAA,MAC9B,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,YAAA;AAAA,MACA,IAAA,EAAO,KAAK,IAAA,IAAQ,UAAA;AAAA,MACpB,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,UAAU,IAAA,CAAK;AAAA,KAChB,EACA,SAAA,EAAU;AAEb,IAAA,OAAO,IAAA,CAAK,eAAe,IAAI,CAAA;AAAA,EACjC;AAAA,EAEA,MAAM,gBAAgB,KAAA,EAAyC;AAC7D,IAAA,MAAM,CAAC,IAAI,CAAA,GAAI,MAAM,KAAK,EAAA,CACvB,MAAA,GACA,IAAA,CAAK,KAAK,EACV,KAAA,CAAM,EAAA,CAAG,MAAM,KAAA,EAAO,KAAA,CAAM,aAAa,CAAC,CAAA,CAC1C,KAAA,CAAM,CAAC,CAAA;AAEV,IAAA,OAAO,IAAA,GAAO,IAAA,CAAK,cAAA,CAAe,IAAI,CAAA,GAAI,IAAA;AAAA,EAC5C;AAAA,EAEA,MAAM,aAAa,EAAA,EAAsC;AACvD,IAAA,MAAM,CAAC,IAAI,CAAA,GAAI,MAAM,IAAA,CAAK,EAAA,CACvB,QAAO,CACP,IAAA,CAAK,KAAK,CAAA,CACV,KAAA,CAAM,GAAG,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA,CACtB,MAAM,CAAC,CAAA;AAEV,IAAA,OAAO,IAAA,GAAO,IAAA,CAAK,cAAA,CAAe,IAAI,CAAA,GAAI,IAAA;AAAA,EAC5C;AAAA,EAEA,MAAM,UAAA,CACJ,EAAA,EACA,IAAA,EAC0B;AAC1B,IAAA,MAAM,MAAA,GAAkC,EAAE,SAAA,kBAAW,IAAI,MAAK,EAAE;AAChE,IAAA,IAAI,IAAA,CAAK,IAAA,KAAS,MAAA,EAAW,MAAA,CAAO,OAAO,IAAA,CAAK,IAAA;AAChD,IAAA,IAAI,IAAA,CAAK,KAAA,KAAU,MAAA,EAAW,MAAA,CAAO,QAAQ,IAAA,CAAK,KAAA;AAClD,IAAA,IAAI,KAAK,YAAA,KAAiB,MAAA;AACxB,MAAA,MAAA,CAAO,eAAe,IAAA,CAAK,YAAA;AAC7B,IAAA,IAAI,IAAA,CAAK,IAAA,KAAS,MAAA,EAAW,MAAA,CAAO,OAAO,IAAA,CAAK,IAAA;AAChD,IAAA,IAAI,IAAA,CAAK,QAAA,KAAa,MAAA,EAAW,MAAA,CAAO,WAAW,IAAA,CAAK,QAAA;AACxD,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,MAAA,EAAW,MAAA,CAAO,SAAS,IAAA,CAAK,MAAA;AACpD,IAAA,IAAI,KAAK,aAAA,KAAkB,MAAA;AACzB,MAAA,MAAA,CAAO,gBAAgB,IAAA,CAAK,aAAA;AAC9B,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,MAAA,EAAW,MAAA,CAAO,SAAS,IAAA,CAAK,MAAA;AACpD,IAAA,IAAI,KAAK,SAAA,KAAc,MAAA;AACrB,MAAA,MAAA,CAAO,YAAY,IAAA,CAAK,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,GAAI,IAAA;AACjE,IAAA,IAAI,KAAK,mBAAA,KAAwB,MAAA;AAC/B,MAAA,MAAA,CAAO,sBAAsB,IAAA,CAAK,mBAAA;AAEpC,IAAA,MAAM,CAAC,IAAI,CAAA,GAAI,MAAM,IAAA,CAAK,EAAA,CACvB,OAAO,KAAK,CAAA,CACZ,IAAI,MAAM,CAAA,CACV,MAAM,EAAA,CAAG,KAAA,CAAM,IAAI,EAAE,CAAC,EACtB,SAAA,EAAU;AAEb,IAAA,OAAO,IAAA,GAAO,IAAA,CAAK,cAAA,CAAe,IAAI,CAAA,GAAI,IAAA;AAAA,EAC5C;AAAA,EAEA,MAAM,WAAW,EAAA,EAA8B;AAC7C,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,KAAK,CAAA,CAAE,MAAM,EAAA,CAAG,KAAA,CAAM,EAAA,EAAI,EAAE,CAAC,CAAA;AAClD,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,SAAA,CACJ,OAAA,GAII,EAAC,EAC0C;AAC/C,IAAA,MAAM,IAAA,GAAO,QAAQ,IAAA,IAAQ,CAAA;AAC7B,IAAA,MAAM,KAAA,GAAQ,QAAQ,KAAA,IAAS,EAAA;AAC/B,IAAA,MAAM,MAAA,GAAA,CAAU,OAAO,CAAA,IAAK,KAAA;AAC5B,IAAA,MAAM,SAAS,OAAA,CAAQ,MAAA;AAEvB,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,OAAA,GAAU,IAAI,MAAM,CAAA,CAAA,CAAA;AAC1B,MAAA,MAAM,CAACA,KAAAA,EAAM,CAAC,EAAE,KAAA,EAAAC,MAAAA,EAAO,CAAC,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI;AAAA,QAC5C,IAAA,CAAK,EAAA,CACF,MAAA,EAAO,CACP,IAAA,CAAK,KAAK,CAAA,CACV,KAAA,CAAM,GAAA,CAAA,EAAM,KAAA,CAAM,KAAK,CAAA,OAAA,EAAU,OAAO,CAAA,CAAE,CAAA,CAC1C,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,SAAS,CAAC,CAAA,CAC7B,KAAA,CAAM,KAAK,CAAA,CACX,MAAA,CAAO,MAAM,CAAA;AAAA,QAChB,KAAK,EAAA,CACF,MAAA,CAAO,EAAE,KAAA,EAAO,eAAuB,CAAA,CACvC,IAAA,CAAK,KAAK,EACV,KAAA,CAAM,GAAA,CAAA,EAAM,MAAM,KAAK,CAAA,OAAA,EAAU,OAAO,CAAA,CAAE;AAAA,OAC9C,CAAA;AACD,MAAA,OAAO;AAAA,QACL,KAAA,EAAOD,MAAK,GAAA,CAAI,CAAC,MAAM,IAAA,CAAK,cAAA,CAAe,CAAC,CAAC,CAAA;AAAA,QAC7C,KAAA,EAAO,OAAOC,MAAK;AAAA,OACrB;AAAA,IACF;AAEA,IAAA,MAAM,CAAC,IAAA,EAAM,CAAC,EAAE,KAAA,EAAO,CAAC,CAAA,GAAI,MAAM,OAAA,CAAQ,GAAA,CAAI;AAAA,MAC5C,KAAK,EAAA,CACF,MAAA,EAAO,CACP,IAAA,CAAK,KAAK,CAAA,CACV,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,SAAS,CAAC,CAAA,CAC7B,MAAM,KAAK,CAAA,CACX,OAAO,MAAM,CAAA;AAAA,MAChB,IAAA,CAAK,GAAG,MAAA,CAAO,EAAE,OAAO,GAAA,CAAA,QAAA,CAAA,EAAuB,CAAA,CAAE,IAAA,CAAK,KAAK;AAAA,KAC5D,CAAA;AACD,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAK,GAAA,CAAI,CAAC,MAAM,IAAA,CAAK,cAAA,CAAe,CAAC,CAAC,CAAA;AAAA,MAC7C,KAAA,EAAO,OAAO,KAAK;AAAA,KACrB;AAAA,EACF;AAAA,EAEA,MAAM,cAAA,CACJ,KAAA,EACA,QAAA,EAC0B;AAC1B,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,eAAA,CAAgB,KAAK,CAAA;AAC7C,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,IAAA,MAAM,CAAC,MAAM,CAAA,GAAI,MAAM,KAAK,EAAA,CACzB,MAAA,GACA,IAAA,CAAK,KAAK,EACV,KAAA,CAAM,EAAA,CAAG,MAAM,KAAA,EAAO,KAAA,CAAM,aAAa,CAAC,CAAA,CAC1C,KAAA,CAAM,CAAC,CAAA;AACV,IAAA,IAAI,CAAC,MAAA,EAAQ,YAAA,EAAc,OAAO,IAAA;AAClC,IAAA,MAAM,QAAQ,MAAM,MAAA,CAAO,OAAA,CAAQ,QAAA,EAAU,OAAO,YAAY,CAAA;AAChE,IAAA,OAAO,QAAQ,IAAA,GAAO,IAAA;AAAA,EACxB;AAAA,EAEA,MAAM,aAAa,QAAA,EAAmC;AACpD,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,QAAA,EAAU,EAAE,CAAA;AAAA,EACjC;AAAA,EAEA,MAAM,aAAA,CACJ,MAAA,EACA,IAAA,EACkB;AAClB,IAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,EAAE,CAAA,CAAE,SAAS,WAAW,CAAA;AAClD,IAAA,MAAM,YAAA,GAAe,WAAA,CAAY,EAAE,CAAA,CAAE,SAAS,WAAW,CAAA;AACzD,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,KAAI,GAAI,IAAA,CAAK,aAAa,GAAI,CAAA;AAC9D,IAAyB,IAAI,IAAA,CAAK,IAAA,CAAK,KAAI,GAAI,IAAA,CAAK,kBAAkB,GAAI;AAE1E,IAAA,MAAM,CAAC,OAAO,CAAA,GAAI,MAAM,KAAK,EAAA,CAC1B,MAAA,CAAO,QAAQ,CAAA,CACf,MAAA,CAAO;AAAA,MACN,MAAA;AAAA,MACA,KAAA;AAAA,MACA,YAAA;AAAA,MACA,WAAW,IAAA,EAAM,SAAA;AAAA,MACjB,WAAW,IAAA,EAAM,SAAA;AAAA,MACjB;AAAA,KACD,EACA,SAAA,EAAU;AAEb,IAAA,OAAO,IAAA,CAAK,iBAAiB,OAAO,CAAA;AAAA,EACtC;AAAA,EAEA,MAAM,mBAAmB,KAAA,EAAwC;AAC/D,IAAA,MAAM,CAAC,OAAO,CAAA,GAAI,MAAM,IAAA,CAAK,EAAA,CAC1B,MAAA,EAAO,CACP,IAAA,CAAK,QAAQ,CAAA,CACb,KAAA,CAAM,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS,KAAA,EAAO,KAAK,CAAA,EAAG,EAAA,CAAG,QAAA,CAAS,SAAA,kBAAW,IAAI,IAAA,EAAM,CAAC,CAAC,CAAA,CACxE,KAAA,CAAM,CAAC,CAAA;AAEV,IAAA,OAAO,OAAA,GAAU,IAAA,CAAK,gBAAA,CAAiB,OAAO,CAAA,GAAI,IAAA;AAAA,EACpD;AAAA,EAEA,MAAM,0BACJ,YAAA,EACyB;AACzB,IAAA,MAAM,CAAC,OAAO,CAAA,GAAI,MAAM,IAAA,CAAK,GAC1B,MAAA,EAAO,CACP,IAAA,CAAK,QAAQ,CAAA,CACb,KAAA;AAAA,MACC,GAAA;AAAA,QACE,EAAA,CAAG,QAAA,CAAS,YAAA,EAAc,YAAY,CAAA;AAAA,QACtC,EAAA,CAAG,QAAA,CAAS,SAAA,kBAAW,IAAI,MAAM;AAAA;AACnC,KACF,CACC,MAAM,CAAC,CAAA;AAEV,IAAA,OAAO,OAAA,GAAU,IAAA,CAAK,gBAAA,CAAiB,OAAO,CAAA,GAAI,IAAA;AAAA,EACpD;AAAA,EAEA,MAAM,cAAc,SAAA,EAAqC;AACvD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,QAAQ,CAAA,CAAE,MAAM,EAAA,CAAG,QAAA,CAAS,EAAA,EAAI,SAAS,CAAC,CAAA;AAC/D,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEA,MAAM,mBAAmB,MAAA,EAAiC;AACxD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,QAAQ,CAAA,CAAE,MAAM,EAAA,CAAG,QAAA,CAAS,MAAA,EAAQ,MAAM,CAAC,CAAA;AAChE,IAAA,OAAO,CAAA;AAAA,EACT;AAAA,EAEA,MAAM,oBAAA,CACJ,MAAA,EACA,YAAA,EACe;AACf,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,eAAe,EAAE,MAAA,CAAO;AAAA,MAC3C,MAAA;AAAA,MACA;AAAA,KACD,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,kBAAA,CACJ,MAAA,EACA,KAAA,GAAgB,CAAA,EACG;AACnB,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,EAAA,CACxB,MAAA,CAAO,EAAE,YAAA,EAAc,eAAA,CAAgB,YAAA,EAAc,CAAA,CACrD,IAAA,CAAK,eAAe,CAAA,CACpB,KAAA,CAAM,EAAA,CAAG,eAAA,CAAgB,MAAA,EAAQ,MAAM,CAAC,CAAA,CACxC,OAAA,CAAQ,IAAA,CAAK,eAAA,CAAgB,SAAS,CAAC,CAAA,CACvC,KAAA,CAAM,KAAK,CAAA;AAEd,IAAA,OAAO,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,YAAY,CAAA;AAAA,EAC1C;AAAA,EAEA,MAAM,mBAAA,CACJ,QAAA,EACA,MAAA,EACA,eAAuB,CAAA,EACL;AAClB,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,kBAAA,CAAmB,QAAQ,YAAY,CAAA;AAElE,IAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,MAAA,IAAI,MAAM,IAAA,CAAK,cAAA,CAAe,QAAA,EAAU,IAAI,CAAA,EAAG;AAC7C,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF;AAEA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,MAAM,SAAS,MAAA,EAAkC;AAC/C,IAAA,MAAM,CAAC,OAAO,CAAA,GAAI,MAAM,IAAA,CAAK,GAC1B,MAAA,EAAO,CACP,IAAA,CAAK,QAAQ,CAAA,CACb,KAAA;AAAA,MACC,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS,MAAA,EAAQ,MAAM,CAAA,EAAG,EAAA,CAAG,QAAA,CAAS,WAAA,kBAAa,IAAI,IAAA,EAAM,CAAC;AAAA,KACvE,CACC,MAAM,CAAC,CAAA;AAEV,IAAA,OAAO,CAAC,CAAC,OAAA;AAAA,EACX;AAAA,EAEA,MAAM,WAAW,MAAA,EAAuD;AACtE,IAAA,MAAM,CAAC,OAAO,CAAA,GAAI,MAAM,IAAA,CAAK,GAC1B,MAAA,EAAO,CACP,IAAA,CAAK,QAAQ,CAAA,CACb,KAAA;AAAA,MACC,GAAA,CAAI,EAAA,CAAG,QAAA,CAAS,MAAA,EAAQ,MAAM,CAAA,EAAG,EAAA,CAAG,QAAA,CAAS,WAAA,kBAAa,IAAI,IAAA,EAAM,CAAC;AAAA,KACvE,CACC,MAAM,CAAC,CAAA;AAEV,IAAA,OAAO,OAAA,GAAU,EAAE,WAAA,EAAa,OAAA,CAAQ,aAAY,GAAI,IAAA;AAAA,EAC1D;AAAA,EAEA,MAAM,mBAAA,CACJ,MAAA,EACA,SAAA,EACgD;AAChD,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,YAAA,CAAa,MAAM,CAAA;AAC3C,IAAA,MAAM,QAAA,GAAA,CAAY,IAAA,EAAM,mBAAA,IAAuB,CAAA,IAAK,CAAA;AAEpD,IAAA,MAAM,KAAK,UAAA,CAAW,MAAA,EAAQ,EAAE,mBAAA,EAAqB,UAAU,CAAA;AAE/D,IAAA,MAAM,WAAA,GAAc,CAAA;AACpB,IAAA,MAAM,SAAS,QAAA,IAAY,WAAA;AAE3B,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,MAAM,eAAA,GAAkB,KAAK,EAAA,GAAK,GAAA;AAClC,MAAA,MAAM,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,QAAQ,EAAE,MAAA,CAAO;AAAA,QACpC,MAAA;AAAA,QACA,SAAA;AAAA,QACA,MAAA,EAAQ,gCAAA;AAAA,QACR,aAAa,IAAI,IAAA,CAAK,IAAA,CAAK,GAAA,KAAQ,eAAe;AAAA,OACnD,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,EAAE,UAAU,MAAA,EAAO;AAAA,EAC5B;AAAA,EAEA,MAAM,cAAc,MAAA,EAA+B;AACjD,IAAA,MAAM,KAAK,UAAA,CAAW,MAAA,EAAQ,EAAE,mBAAA,EAAqB,GAAG,CAAA;AAAA,EAC1D;AAAA,EAEA,MAAM,cACJ,MAAA,EAC8C;AAC9C,IAAA,MAAM;AAAA,MACJ,KAAA,GAAQ,EAAA;AAAA,MACR,MAAA,GAAS,CAAA;AAAA,MACT,MAAA;AAAA,MACA,MAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,OAAA;AAAA,MACA,SAAA;AAAA,MACA;AAAA,KACF,GAAI,MAAA;AAEJ,IAAA,MAAM,aAAa,EAAC;AACpB,IAAA,IAAI,QAAQ,UAAA,CAAW,IAAA,CAAK,GAAG,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC,CAAA;AACxD,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AACzB,QAAA,UAAA,CAAW,KAAK,GAAA,CAAA,EAAM,SAAA,CAAU,MAAM,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,CAAG,CAAA;AAAA,MAC3D,CAAA,MAAO;AACL,QAAA,UAAA,CAAW,IAAA,CAAK,EAAA,CAAG,SAAA,CAAU,MAAA,EAAQ,MAAM,CAAC,CAAA;AAAA,MAC9C;AAAA,IACF;AACA,IAAA,IAAI,UAAU,UAAA,CAAW,IAAA,CAAK,GAAG,SAAA,CAAU,QAAA,EAAU,QAAQ,CAAC,CAAA;AAC9D,IAAA,IAAI,YAAY,UAAA,CAAW,IAAA,CAAK,GAAG,SAAA,CAAU,UAAA,EAAY,UAAU,CAAC,CAAA;AACpE,IAAA,IAAI,OAAA,KAAY,QAAW,UAAA,CAAW,IAAA,CAAK,GAAG,SAAA,CAAU,OAAA,EAAS,OAAO,CAAC,CAAA;AACzE,IAAA,IAAI,SAAA,aAAsB,IAAA,CAAK,GAAA,CAAA,EAAM,UAAU,SAAS,CAAA,IAAA,EAAO,SAAS,CAAA,CAAE,CAAA;AAC1E,IAAA,IAAI,OAAA,aAAoB,IAAA,CAAK,GAAA,CAAA,EAAM,UAAU,SAAS,CAAA,IAAA,EAAO,OAAO,CAAA,CAAE,CAAA;AAEtE,IAAA,MAAM,cAAc,UAAA,CAAW,MAAA,GAAS,IAAI,GAAA,CAAI,GAAG,UAAU,CAAA,GAAI,MAAA;AAEjE,IAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,EAAA,CAC5B,OAAO,EAAE,KAAA,EAAO,GAAA,CAAA,QAAA,CAAA,EAAuB,CAAA,CACvC,IAAA,CAAK,SAAS,CAAA,CACd,MAAM,WAAW,CAAA;AAEpB,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,EAAA,CACrB,QAAO,CACP,IAAA,CAAK,SAAS,CAAA,CACd,KAAA,CAAM,WAAW,EACjB,OAAA,CAAQ,IAAA,CAAK,UAAU,SAAS,CAAC,EACjC,KAAA,CAAM,KAAK,CAAA,CACX,MAAA,CAAO,MAAM,CAAA;AAEhB,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,MAAS;AAAA,QACvB,IAAI,GAAA,CAAI,EAAA;AAAA,QACR,WAAW,GAAA,CAAI,SAAA;AAAA,QACf,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,MAAA,EAAQ,IAAI,MAAA,IAAU,MAAA;AAAA,QACtB,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA,QAC5B,IAAA,EAAM,IAAI,IAAA,IAAQ,MAAA;AAAA,QAClB,UAAU,GAAA,CAAI,QAAA;AAAA,QACd,UAAA,EAAY,IAAI,UAAA,IAAc,MAAA;AAAA,QAC9B,OAAA,EAAS,IAAI,OAAA,IAAW,MAAA;AAAA,QACxB,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA,QAC5B,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA,QAC5B,SAAS,GAAA,CAAI,OAAA;AAAA,QACb,KAAA,EAAO,IAAI,KAAA,IAAS,MAAA;AAAA,QACpB,QAAA,EAAU,IAAI,QAAA,IAAY;AAAA,OAC5B,CAAE,CAAA;AAAA,MACF,OAAO,MAAA,CAAO,WAAA,CAAY,CAAC,CAAA,EAAG,SAAS,CAAC;AAAA,KAC1C;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,IAAA,EACmB;AACnB,IAAA,MAAM,EAAA,GAAK,OAAO,UAAA,EAAW;AAC7B,IAAA,MAAM,SAAA,uBAAgB,IAAA,EAAK;AAE3B,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,SAAS,EAAE,MAAA,CAAO;AAAA,MACrC,EAAA;AAAA,MACA,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,MAAA,EAAQ,KAAK,MAAA,IAAU,IAAA;AAAA,MACvB,SAAA,EAAW,KAAK,SAAA,IAAa,IAAA;AAAA,MAC7B,IAAA,EAAM,KAAK,IAAA,IAAQ,IAAA;AAAA,MACnB,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,UAAA,EAAY,KAAK,UAAA,IAAc,IAAA;AAAA,MAC/B,OAAA,EAAS,KAAK,OAAA,IAAW,IAAA;AAAA,MACzB,SAAA,EAAW,KAAK,SAAA,IAAa,IAAA;AAAA,MAC7B,SAAA,EAAW,KAAK,SAAA,IAAa,IAAA;AAAA,MAC7B,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,KAAA,EAAO,KAAK,KAAA,IAAS,IAAA;AAAA,MACrB,QAAA,EAAU,KAAK,QAAA,IAAY,IAAA;AAAA,MAC3B;AAAA,KACD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,GAAG,IAAA;AAAA,MACH,EAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEQ,eAAe,IAAA,EAA6B;AAClD,IAAA,OAAO;AAAA,MACL,IAAI,IAAA,CAAK,EAAA;AAAA,MACT,IAAA,EAAM,KAAK,IAAA,IAAQ,MAAA;AAAA,MACnB,OAAO,IAAA,CAAK,KAAA;AAAA,MACZ,YAAA,EAAc,KAAK,YAAA,IAAgB,MAAA;AAAA,MACnC,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,MAAA,EAAQ,IAAA,CAAK,MAAA,IAAU,OAAO,IAAA,CAAK,MAAA,KAAW,QAAA,GACzC,IAAA,CAAK,MAAA,CAAe,EAAA,IAAM,MAAA,GAC1B,IAAA,CAAK,MAAA,IAAU,MAAA;AAAA,MACpB,QAAA,EAAU,KAAK,QAAA,IAAY,MAAA;AAAA,MAC3B,aAAA,EAAe,KAAK,aAAA,IAAiB,KAAA;AAAA,MACrC,MAAA,EAAQ,KAAK,MAAA,IAAU,KAAA;AAAA,MACvB,SAAA,EAAW,KAAK,SAAA,GAAY,IAAI,KAAK,IAAA,CAAK,SAAS,CAAA,CAAE,WAAA,EAAY,GAAI,MAAA;AAAA,MACrE,mBAAA,EAAqB,KAAK,mBAAA,IAAuB,CAAA;AAAA,MACjD,WAAW,IAAI,IAAA,CAAK,IAAA,CAAK,SAAS,EAAE,WAAA,EAAY;AAAA,MAChD,WAAW,IAAI,IAAA,CAAK,IAAA,CAAK,SAAS,EAAE,WAAA;AAAY,KAClD;AAAA,EACF;AAAA,EAEQ,iBAAiB,OAAA,EAAgD;AACvE,IAAA,OAAO;AAAA,MACL,IAAI,OAAA,CAAQ,EAAA;AAAA,MACZ,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,OAAO,OAAA,CAAQ,KAAA;AAAA,MACf,YAAA,EAAc,QAAQ,YAAA,IAAgB,MAAA;AAAA,MACtC,WAAW,IAAI,IAAA,CAAK,OAAA,CAAQ,SAAS,EAAE,WAAA,EAAY;AAAA,MACnD,WAAW,IAAI,IAAA,CAAK,OAAA,CAAQ,SAAS,EAAE,WAAA,EAAY;AAAA,MACnD,SAAA,EAAW,QAAQ,SAAA,IAAa,MAAA;AAAA,MAChC,SAAA,EAAW,QAAQ,SAAA,IAAa;AAAA,KAClC;AAAA,EACF;AAAA,EAEA,MAAM,6BAA6B,MAAA,EAA6D;AAC9F,IAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,EAAE,CAAA,CAAE,SAAS,KAAK,CAAA;AAC5C,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,KAAI,GAAI,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAI,CAAA;AAE3D,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,kBAAkB,EAAE,MAAA,CAAO;AAAA,MAC9C,MAAA;AAAA,MACA,KAAA;AAAA,MACA;AAAA,KACD,CAAA;AAED,IAAA,OAAO,EAAE,OAAO,SAAA,EAAU;AAAA,EAC5B;AAAA,EAEA,MAAM,iBAAiB,KAAA,EAA+E;AACpG,IAAA,MAAM,CAAC,YAAY,CAAA,GAAI,MAAM,IAAA,CAAK,EAAA,CAC/B,QAAO,CACP,IAAA,CAAK,kBAAkB,CAAA,CACvB,KAAA,CAAM,GAAG,kBAAA,CAAmB,KAAA,EAAO,KAAK,CAAC,CAAA,CACzC,MAAM,CAAC,CAAA;AAEV,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,4BAAA,EAA6B;AAAA,IAC/D;AAEA,IAAA,IAAI,YAAA,CAAa,SAAA,mBAAY,IAAI,IAAA,EAAK,EAAG;AACvC,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,gCAAA,EAAiC;AAAA,IACnE;AAEA,IAAA,MAAM,KAAK,EAAA,CACR,MAAA,CAAO,KAAK,CAAA,CACZ,IAAI,EAAE,aAAA,EAAe,IAAA,EAAM,EAC3B,KAAA,CAAM,EAAA,CAAG,MAAM,EAAA,EAAI,YAAA,CAAa,MAAM,CAAC,CAAA;AAE1C,IAAA,MAAM,IAAA,CAAK,EAAA,CACR,MAAA,CAAO,kBAAkB,CAAA,CACzB,KAAA,CAAM,EAAA,CAAG,kBAAA,CAAmB,EAAA,EAAI,YAAA,CAAa,EAAE,CAAC,CAAA;AAEnD,IAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,MAAA,EAAQ,aAAa,MAAA,EAAO;AAAA,EACtD;AAAA,EAEA,MAAM,yBAAyB,KAAA,EAA4E;AACzG,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,eAAA,CAAgB,KAAK,CAAA;AAC7C,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,OAAO,EAAE,OAAO,EAAA,EAAI,SAAA,sBAAe,IAAA,EAAK,EAAG,OAAO,gBAAA,EAAiB;AAAA,IACrE;AAEA,IAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,EAAE,CAAA,CAAE,SAAS,KAAK,CAAA;AAC5C,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,KAAI,GAAI,EAAA,GAAK,KAAK,GAAI,CAAA;AAEtD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,cAAc,EAAE,MAAA,CAAO;AAAA,MAC1C,QAAQ,IAAA,CAAK,EAAA;AAAA,MACb,KAAA;AAAA,MACA;AAAA,KACD,CAAA;AAED,IAAA,OAAO,EAAE,OAAO,SAAA,EAAU;AAAA,EAC5B;AAAA,EAEA,MAAM,sBAAA,CAAuB,KAAA,EAAe,WAAA,EAAoE;AAC9G,IAAA,MAAM,CAAC,KAAK,CAAA,GAAI,MAAM,IAAA,CAAK,EAAA,CACxB,QAAO,CACP,IAAA,CAAK,cAAc,CAAA,CACnB,KAAA,CAAM,GAAG,cAAA,CAAe,KAAA,EAAO,KAAK,CAAC,CAAA,CACrC,MAAM,CAAC,CAAA;AAEV,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,qBAAA,EAAsB;AAAA,IACxD;AAEA,IAAA,IAAI,KAAA,CAAM,SAAA,mBAAY,IAAI,IAAA,EAAK,EAAG;AAChC,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,yBAAA,EAA0B;AAAA,IAC5D;AAEA,IAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,mCAAA,EAAoC;AAAA,IACtE;AAEA,IAAA,MAAM,YAAA,GAAe,MAAM,IAAA,CAAK,YAAA,CAAa,WAAW,CAAA;AAExD,IAAA,MAAM,IAAA,CAAK,GACR,MAAA,CAAO,KAAK,EACZ,GAAA,CAAI,EAAE,cAAc,SAAA,kBAAW,IAAI,MAAK,EAAG,EAC3C,KAAA,CAAM,EAAA,CAAG,MAAM,EAAA,EAAI,KAAA,CAAM,MAAM,CAAC,CAAA;AAEnC,IAAA,MAAM,KAAK,EAAA,CACR,MAAA,CAAO,cAAc,CAAA,CACrB,GAAA,CAAI,EAAE,MAAA,kBAAQ,IAAI,MAAK,EAAG,EAC1B,KAAA,CAAM,EAAA,CAAG,eAAe,EAAA,EAAI,KAAA,CAAM,EAAE,CAAC,CAAA;AAExC,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,MAAA,CAAO,QAAQ,CAAA,CAAE,KAAA,CAAM,EAAA,CAAG,QAAA,CAAS,MAAA,EAAQ,KAAA,CAAM,MAAM,CAAC,CAAA;AAEtE,IAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,EACzB;AACF","file":"chunk-CJX74IYK.js","sourcesContent":["import type { PostgresJsDatabase } from \"drizzle-orm/postgres-js\";\nimport { eq, and, gt, desc, sql } from \"drizzle-orm\";\nimport bcrypt from \"bcryptjs\";\nimport { randomBytes, randomUUID } from \"crypto\";\nimport type {\n  AuthAdapter,\n  AuthUser,\n  Session,\n  UserRole,\n} from \"../../auth/types.js\";\nimport {\n  users,\n  sessions,\n  passwordHistory,\n  auditLogs,\n  lockouts,\n  roles,\n  permissions,\n  tenants,\n  apiKeys,\n  emailVerifications,\n  passwordResets,\n  type AuthUser as AuthUserRow,\n} from \"./schema/auth.js\";\nimport type {\n  AuditLog,\n  AuditLogFilter,\n} from \"../../auth/security/audit-log.js\";\n\nexport interface PostgresAuthAdapterOptions {\n  db: PostgresJsDatabase;\n  prefix?: string;\n  sessionTTL?: number;\n  refreshTokenTTL?: number;\n}\n\nlet _tablesEnsured = false;\n\nexport class PostgresAuthAdapter implements AuthAdapter {\n  private db: PostgresJsDatabase;\n  private prefix: string;\n  private sessionTTL: number;\n  private refreshTokenTTL: number;\n\n  constructor(options: PostgresAuthAdapterOptions) {\n    this.db = options.db;\n    this.prefix = options.prefix || \"kyro:\";\n    this.sessionTTL = options.sessionTTL || 86400;\n    this.refreshTokenTTL = options.refreshTokenTTL || 604800;\n  }\n\n  async connect(): Promise<void> {\n    if (_tablesEnsured) return;\n    await this.db.execute(sql`\n      CREATE TABLE IF NOT EXISTS \"users\" (\n        \"id\" UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n        \"name\" VARCHAR(255),\n        \"email\" VARCHAR(255) NOT NULL,\n        \"password_hash\" VARCHAR(255),\n        \"role\" VARCHAR(50) NOT NULL DEFAULT 'customer',\n        \"tenant_id\" UUID,\n        \"email_verified\" BOOLEAN DEFAULT false,\n        \"locked\" BOOLEAN DEFAULT false,\n        \"last_login\" TIMESTAMP,\n        \"failed_login_attempts\" INTEGER DEFAULT 0,\n        \"metadata\" JSONB,\n        \"avatar\" VARCHAR(255),\n        \"created_at\" TIMESTAMP NOT NULL DEFAULT NOW(),\n        \"updated_at\" TIMESTAMP NOT NULL DEFAULT NOW()\n      )\n    `);\n    await this.db.execute(sql`ALTER TABLE \"users\" ADD COLUMN IF NOT EXISTS \"avatar\" VARCHAR(255)`);\n    await this.db.execute(sql`CREATE UNIQUE INDEX IF NOT EXISTS \"users_email_idx\" ON \"users\" (\"email\")`);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"users_tenant_idx\" ON \"users\" (\"tenant_id\")`);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"users_role_idx\" ON \"users\" (\"role\")`);\n\n    await this.db.execute(sql`\n      CREATE TABLE IF NOT EXISTS \"sessions\" (\n        \"id\" UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n        \"user_id\" UUID NOT NULL REFERENCES \"users\"(\"id\") ON DELETE CASCADE,\n        \"token\" VARCHAR(512) NOT NULL UNIQUE,\n        \"refresh_token\" VARCHAR(512),\n        \"ip_address\" VARCHAR(45),\n        \"user_agent\" TEXT,\n        \"expires_at\" TIMESTAMP NOT NULL,\n        \"created_at\" TIMESTAMP NOT NULL DEFAULT NOW()\n      )\n    `);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"sessions_user_idx\" ON \"sessions\" (\"user_id\")`);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"sessions_token_idx\" ON \"sessions\" (\"token\")`);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"sessions_expires_idx\" ON \"sessions\" (\"expires_at\")`);\n\n    await this.db.execute(sql`\n      CREATE TABLE IF NOT EXISTS \"audit_logs\" (\n        \"id\" UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n        \"action\" VARCHAR(100) NOT NULL,\n        \"user_id\" UUID REFERENCES \"users\"(\"id\") ON DELETE SET NULL,\n        \"user_email\" VARCHAR(255),\n        \"role\" VARCHAR(50),\n        \"resource\" VARCHAR(100) NOT NULL,\n        \"resource_id\" VARCHAR(255),\n        \"changes\" JSONB,\n        \"ip_address\" VARCHAR(45),\n        \"user_agent\" TEXT,\n        \"success\" BOOLEAN NOT NULL DEFAULT true,\n        \"error\" TEXT,\n        \"metadata\" JSONB,\n        \"timestamp\" TIMESTAMP NOT NULL DEFAULT NOW()\n      )\n    `);\n    await this.db.execute(sql`ALTER TABLE \"audit_logs\" ALTER COLUMN \"resource_id\" TYPE VARCHAR(255)`);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"audit_logs_user_idx\" ON \"audit_logs\" (\"user_id\")`);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"audit_logs_action_idx\" ON \"audit_logs\" (\"action\")`);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"audit_logs_resource_idx\" ON \"audit_logs\" (\"resource\")`);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"audit_logs_timestamp_idx\" ON \"audit_logs\" (\"timestamp\")`);\n\n    await this.db.execute(sql`\n      CREATE TABLE IF NOT EXISTS \"password_history\" (\n        \"id\" UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n        \"user_id\" UUID NOT NULL REFERENCES \"users\"(\"id\") ON DELETE CASCADE,\n        \"password_hash\" VARCHAR(255) NOT NULL,\n        \"created_at\" TIMESTAMP NOT NULL DEFAULT NOW()\n      )\n    `);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"password_history_user_idx\" ON \"password_history\" (\"user_id\")`);\n\n    await this.db.execute(sql`\n      CREATE TABLE IF NOT EXISTS \"lockouts\" (\n        \"id\" UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n        \"user_id\" UUID NOT NULL REFERENCES \"users\"(\"id\") ON DELETE CASCADE,\n        \"ip_address\" VARCHAR(45),\n        \"reason\" VARCHAR(255),\n        \"locked_until\" TIMESTAMP NOT NULL,\n        \"released_at\" TIMESTAMP,\n        \"created_at\" TIMESTAMP NOT NULL DEFAULT NOW()\n      )\n    `);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"lockouts_user_idx\" ON \"lockouts\" (\"user_id\")`);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"lockouts_locked_until_idx\" ON \"lockouts\" (\"locked_until\")`);\n\n    await this.db.execute(sql`\n      CREATE TABLE IF NOT EXISTS \"roles\" (\n        \"id\" UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n        \"name\" VARCHAR(100) NOT NULL UNIQUE,\n        \"level\" INTEGER NOT NULL DEFAULT 0,\n        \"inherits\" TEXT[],\n        \"description\" TEXT,\n        \"permissions\" JSONB DEFAULT '[]',\n        \"is_system\" BOOLEAN DEFAULT false,\n        \"created_at\" TIMESTAMP NOT NULL DEFAULT NOW(),\n        \"updated_at\" TIMESTAMP NOT NULL DEFAULT NOW()\n      )\n    `);\n    await this.db.execute(sql`CREATE INDEX IF NOT EXISTS \"roles_level_idx\" ON \"roles\" (\"level\")`);\n\n    await this.db.execute(sql`\n      CREATE TABLE IF NOT EXISTS \"tenants\" (\n        \"id\" UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n        \"name\" VARCHAR(255) NOT NULL,\n        \"slug\" VARCHAR(100) NOT NULL UNIQUE,\n        \"settings\" JSONB DEFAULT '{}',\n        \"is_active\" BOOLEAN DEFAULT true,\n        \"created_at\" TIMESTAMP NOT NULL DEFAULT NOW(),\n        \"updated_at\" TIMESTAMP NOT NULL DEFAULT NOW()\n      )\n    `);\n\n    await this.db.execute(sql`\n      CREATE TABLE IF NOT EXISTS \"api_keys\" (\n        \"id\" UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n        \"user_id\" UUID NOT NULL REFERENCES \"users\"(\"id\") ON DELETE CASCADE,\n        \"name\" VARCHAR(255) NOT NULL,\n        \"key\" VARCHAR(64) NOT NULL UNIQUE,\n        \"key_prefix\" VARCHAR(8) NOT NULL,\n        \"permissions\" JSONB DEFAULT '[]',\n        \"last_used_at\" TIMESTAMP,\n        \"expires_at\" TIMESTAMP,\n        \"created_at\" TIMESTAMP NOT NULL DEFAULT NOW()\n      )\n    `);\n\n    await this.db.execute(sql`\n      CREATE TABLE IF NOT EXISTS \"email_verifications\" (\n        \"id\" UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n        \"user_id\" UUID NOT NULL REFERENCES \"users\"(\"id\") ON DELETE CASCADE,\n        \"token\" VARCHAR(64) NOT NULL UNIQUE,\n        \"expires_at\" TIMESTAMP NOT NULL,\n        \"created_at\" TIMESTAMP NOT NULL DEFAULT NOW()\n      )\n    `);\n\n    await this.db.execute(sql`\n      CREATE TABLE IF NOT EXISTS \"password_resets\" (\n        \"id\" UUID PRIMARY KEY DEFAULT gen_random_uuid(),\n        \"user_id\" UUID NOT NULL REFERENCES \"users\"(\"id\") ON DELETE CASCADE,\n        \"token\" VARCHAR(64) NOT NULL UNIQUE,\n        \"expires_at\" TIMESTAMP NOT NULL,\n        \"used_at\" TIMESTAMP,\n        \"created_at\" TIMESTAMP NOT NULL DEFAULT NOW()\n      )\n    `);\n    _tablesEnsured = true;\n  }\n\n  async disconnect(): Promise<void> {\n  }\n\n  async createUser(data: {\n    email: string;\n    password: string;\n    name?: string;\n    role?: UserRole;\n    avatar?: string;\n    tenantId?: string;\n  }): Promise<AuthUser> {\n    const passwordHash = await this.hashPassword(data.password);\n    const [user] = await this.db\n      .insert(users)\n      .values({\n        email: data.email.toLowerCase(),\n        name: data.name,\n        passwordHash,\n        role: (data.role || \"customer\") as string,\n        avatar: data.avatar,\n        tenantId: data.tenantId,\n      })\n      .returning();\n\n    return this.userToAuthUser(user);\n  }\n\n  async findUserByEmail(email: string): Promise<AuthUser | null> {\n    const [user] = await this.db\n      .select()\n      .from(users)\n      .where(eq(users.email, email.toLowerCase()))\n      .limit(1);\n\n    return user ? this.userToAuthUser(user) : null;\n  }\n\n  async findUserById(id: string): Promise<AuthUser | null> {\n    const [user] = await this.db\n      .select()\n      .from(users)\n      .where(eq(users.id, id))\n      .limit(1);\n\n    return user ? this.userToAuthUser(user) : null;\n  }\n\n  async updateUser(\n    id: string,\n    data: Partial<AuthUser>,\n  ): Promise<AuthUser | null> {\n    const dbData: Record<string, unknown> = { updatedAt: new Date() };\n    if (data.name !== undefined) dbData.name = data.name;\n    if (data.email !== undefined) dbData.email = data.email;\n    if (data.passwordHash !== undefined)\n      dbData.passwordHash = data.passwordHash;\n    if (data.role !== undefined) dbData.role = data.role;\n    if (data.tenantId !== undefined) dbData.tenantId = data.tenantId;\n    if (data.avatar !== undefined) dbData.avatar = data.avatar;\n    if (data.emailVerified !== undefined)\n      dbData.emailVerified = data.emailVerified;\n    if (data.locked !== undefined) dbData.locked = data.locked;\n    if (data.lastLogin !== undefined)\n      dbData.lastLogin = data.lastLogin ? new Date(data.lastLogin) : null;\n    if (data.failedLoginAttempts !== undefined)\n      dbData.failedLoginAttempts = data.failedLoginAttempts;\n\n    const [user] = await this.db\n      .update(users)\n      .set(dbData)\n      .where(eq(users.id, id))\n      .returning();\n\n    return user ? this.userToAuthUser(user) : null;\n  }\n\n  async deleteUser(id: string): Promise<boolean> {\n    await this.db.delete(users).where(eq(users.id, id));\n    return true;\n  }\n\n  async findUsers(\n    options: {\n      page?: number;\n      limit?: number;\n      search?: string;\n    } = {},\n  ): Promise<{ users: AuthUser[]; total: number }> {\n    const page = options.page ?? 1;\n    const limit = options.limit ?? 10;\n    const offset = (page - 1) * limit;\n    const search = options.search;\n\n    if (search) {\n      const pattern = `%${search}%`;\n      const [rows, [{ count }]] = await Promise.all([\n        this.db\n          .select()\n          .from(users)\n          .where(sql`${users.email} ILIKE ${pattern}`)\n          .orderBy(desc(users.createdAt))\n          .limit(limit)\n          .offset(offset),\n        this.db\n          .select({ count: sql<number>`count(*)` })\n          .from(users)\n          .where(sql`${users.email} ILIKE ${pattern}`),\n      ]);\n      return {\n        users: rows.map((r) => this.userToAuthUser(r)),\n        total: Number(count),\n      };\n    }\n\n    const [rows, [{ count }]] = await Promise.all([\n      this.db\n        .select()\n        .from(users)\n        .orderBy(desc(users.createdAt))\n        .limit(limit)\n        .offset(offset),\n      this.db.select({ count: sql<number>`count(*)` }).from(users),\n    ]);\n    return {\n      users: rows.map((r) => this.userToAuthUser(r)),\n      total: Number(count),\n    };\n  }\n\n  async verifyPassword(\n    email: string,\n    password: string,\n  ): Promise<AuthUser | null> {\n    const user = await this.findUserByEmail(email);\n    if (!user) return null;\n    const [stored] = await this.db\n      .select()\n      .from(users)\n      .where(eq(users.email, email.toLowerCase()))\n      .limit(1);\n    if (!stored?.passwordHash) return null;\n    const valid = await bcrypt.compare(password, stored.passwordHash);\n    return valid ? user : null;\n  }\n\n  async hashPassword(password: string): Promise<string> {\n    return bcrypt.hash(password, 12);\n  }\n\n  async createSession(\n    userId: string,\n    data?: { ipAddress?: string; userAgent?: string },\n  ): Promise<Session> {\n    const token = randomBytes(32).toString(\"base64url\");\n    const refreshToken = randomBytes(32).toString(\"base64url\");\n    const expiresAt = new Date(Date.now() + this.sessionTTL * 1000);\n    const refreshExpiresAt = new Date(Date.now() + this.refreshTokenTTL * 1000);\n\n    const [session] = await this.db\n      .insert(sessions)\n      .values({\n        userId,\n        token,\n        refreshToken,\n        ipAddress: data?.ipAddress,\n        userAgent: data?.userAgent,\n        expiresAt,\n      })\n      .returning();\n\n    return this.sessionToSession(session);\n  }\n\n  async findSessionByToken(token: string): Promise<Session | null> {\n    const [session] = await this.db\n      .select()\n      .from(sessions)\n      .where(and(eq(sessions.token, token), gt(sessions.expiresAt, new Date())))\n      .limit(1);\n\n    return session ? this.sessionToSession(session) : null;\n  }\n\n  async findSessionByRefreshToken(\n    refreshToken: string,\n  ): Promise<Session | null> {\n    const [session] = await this.db\n      .select()\n      .from(sessions)\n      .where(\n        and(\n          eq(sessions.refreshToken, refreshToken),\n          gt(sessions.expiresAt, new Date()),\n        ),\n      )\n      .limit(1);\n\n    return session ? this.sessionToSession(session) : null;\n  }\n\n  async deleteSession(sessionId: string): Promise<boolean> {\n    await this.db.delete(sessions).where(eq(sessions.id, sessionId));\n    return true;\n  }\n\n  async deleteUserSessions(userId: string): Promise<number> {\n    await this.db.delete(sessions).where(eq(sessions.userId, userId));\n    return 1;\n  }\n\n  async addPasswordToHistory(\n    userId: string,\n    passwordHash: string,\n  ): Promise<void> {\n    await this.db.insert(passwordHistory).values({\n      userId,\n      passwordHash,\n    });\n  }\n\n  async getPasswordHistory(\n    userId: string,\n    count: number = 5,\n  ): Promise<string[]> {\n    const history = await this.db\n      .select({ passwordHash: passwordHistory.passwordHash })\n      .from(passwordHistory)\n      .where(eq(passwordHistory.userId, userId))\n      .orderBy(desc(passwordHistory.createdAt))\n      .limit(count);\n\n    return history.map((h) => h.passwordHash);\n  }\n\n  async isPasswordInHistory(\n    password: string,\n    userId: string,\n    historyCount: number = 5,\n  ): Promise<boolean> {\n    const history = await this.getPasswordHistory(userId, historyCount);\n\n    for (const hash of history) {\n      if (await this.verifyPassword(password, hash)) {\n        return true;\n      }\n    }\n\n    return false;\n  }\n\n  async isLocked(userId: string): Promise<boolean> {\n    const [lockout] = await this.db\n      .select()\n      .from(lockouts)\n      .where(\n        and(eq(lockouts.userId, userId), gt(lockouts.lockedUntil, new Date())),\n      )\n      .limit(1);\n\n    return !!lockout;\n  }\n\n  async getLockout(userId: string): Promise<{ lockedUntil: Date } | null> {\n    const [lockout] = await this.db\n      .select()\n      .from(lockouts)\n      .where(\n        and(eq(lockouts.userId, userId), gt(lockouts.lockedUntil, new Date())),\n      )\n      .limit(1);\n\n    return lockout ? { lockedUntil: lockout.lockedUntil } : null;\n  }\n\n  async recordFailedAttempt(\n    userId: string,\n    ipAddress?: string,\n  ): Promise<{ attempts: number; locked: boolean }> {\n    const user = await this.findUserById(userId);\n    const attempts = (user?.failedLoginAttempts || 0) + 1;\n\n    await this.updateUser(userId, { failedLoginAttempts: attempts });\n\n    const maxAttempts = 5;\n    const locked = attempts >= maxAttempts;\n\n    if (locked) {\n      const lockoutDuration = 15 * 60 * 1000;\n      await this.db.insert(lockouts).values({\n        userId,\n        ipAddress,\n        reason: \"Too many failed login attempts\",\n        lockedUntil: new Date(Date.now() + lockoutDuration),\n      });\n    }\n\n    return { attempts, locked };\n  }\n\n  async resetAttempts(userId: string): Promise<void> {\n    await this.updateUser(userId, { failedLoginAttempts: 0 });\n  }\n\n  async findAuditLogs(\n    filter: AuditLogFilter,\n  ): Promise<{ logs: AuditLog[]; total: number }> {\n    const {\n      limit = 50,\n      offset = 0,\n      userId,\n      action,\n      resource,\n      resourceId,\n      success,\n      startDate,\n      endDate,\n    } = filter;\n\n    const conditions = [];\n    if (userId) conditions.push(eq(auditLogs.userId, userId));\n    if (action) {\n      if (Array.isArray(action)) {\n        conditions.push(sql`${auditLogs.action} = ANY(${action})`);\n      } else {\n        conditions.push(eq(auditLogs.action, action));\n      }\n    }\n    if (resource) conditions.push(eq(auditLogs.resource, resource));\n    if (resourceId) conditions.push(eq(auditLogs.resourceId, resourceId));\n    if (success !== undefined) conditions.push(eq(auditLogs.success, success));\n    if (startDate) conditions.push(sql`${auditLogs.timestamp} >= ${startDate}`);\n    if (endDate) conditions.push(sql`${auditLogs.timestamp} <= ${endDate}`);\n\n    const whereClause = conditions.length > 0 ? and(...conditions) : undefined;\n\n    const countResult = await this.db\n      .select({ count: sql<number>`count(*)` })\n      .from(auditLogs)\n      .where(whereClause);\n\n    const logs = await this.db\n      .select()\n      .from(auditLogs)\n      .where(whereClause)\n      .orderBy(desc(auditLogs.timestamp))\n      .limit(limit)\n      .offset(offset);\n\n    return {\n      logs: logs.map((log) => ({\n        id: log.id,\n        timestamp: log.timestamp,\n        action: log.action as AuditLog[\"action\"],\n        userId: log.userId || undefined,\n        userEmail: log.userEmail || undefined,\n        role: log.role || undefined,\n        resource: log.resource,\n        resourceId: log.resourceId || undefined,\n        changes: log.changes || undefined,\n        ipAddress: log.ipAddress || undefined,\n        userAgent: log.userAgent || undefined,\n        success: log.success,\n        error: log.error || undefined,\n        metadata: log.metadata || undefined,\n      })),\n      total: Number(countResult[0]?.count || 0),\n    };\n  }\n\n  async createAuditLog(\n    data: Omit<AuditLog, \"id\" | \"timestamp\">,\n  ): Promise<AuditLog> {\n    const id = crypto.randomUUID();\n    const timestamp = new Date();\n\n    await this.db.insert(auditLogs).values({\n      id,\n      action: data.action,\n      userId: data.userId ?? null,\n      userEmail: data.userEmail ?? null,\n      role: data.role ?? null,\n      resource: data.resource,\n      resourceId: data.resourceId ?? null,\n      changes: data.changes ?? null,\n      ipAddress: data.ipAddress ?? null,\n      userAgent: data.userAgent ?? null,\n      success: data.success,\n      error: data.error ?? null,\n      metadata: data.metadata ?? null,\n      timestamp,\n    });\n\n    return {\n      ...data,\n      id,\n      timestamp,\n    };\n  }\n\n  private userToAuthUser(user: AuthUserRow): AuthUser {\n    return {\n      id: user.id,\n      name: user.name || undefined,\n      email: user.email,\n      passwordHash: user.passwordHash || undefined,\n      role: user.role as UserRole,\n      avatar: user.avatar && typeof user.avatar === \"object\"\n        ? (user.avatar as any).id || undefined\n        : (user.avatar || undefined),\n      tenantId: user.tenantId || undefined,\n      emailVerified: user.emailVerified || false,\n      locked: user.locked || false,\n      lastLogin: user.lastLogin ? new Date(user.lastLogin).toISOString() : undefined,\n      failedLoginAttempts: user.failedLoginAttempts || 0,\n      createdAt: new Date(user.createdAt).toISOString(),\n      updatedAt: new Date(user.updatedAt).toISOString(),\n    };\n  }\n\n  private sessionToSession(session: typeof sessions.$inferSelect): Session {\n    return {\n      id: session.id,\n      userId: session.userId,\n      token: session.token,\n      refreshToken: session.refreshToken || undefined,\n      expiresAt: new Date(session.expiresAt).toISOString(),\n      createdAt: new Date(session.createdAt).toISOString(),\n      ipAddress: session.ipAddress || undefined,\n      userAgent: session.userAgent || undefined,\n    };\n  }\n\n  async createEmailVerificationToken(userId: string): Promise<{ token: string; expiresAt: Date }> {\n    const token = randomBytes(32).toString(\"hex\");\n    const expiresAt = new Date(Date.now() + 24 * 60 * 60 * 1000);\n\n    await this.db.insert(emailVerifications).values({\n      userId,\n      token,\n      expiresAt,\n    });\n\n    return { token, expiresAt };\n  }\n\n  async verifyEmailToken(token: string): Promise<{ success: boolean; userId?: string; error?: string }> {\n    const [verification] = await this.db\n      .select()\n      .from(emailVerifications)\n      .where(eq(emailVerifications.token, token))\n      .limit(1);\n\n    if (!verification) {\n      return { success: false, error: \"Invalid verification token\" };\n    }\n\n    if (verification.expiresAt < new Date()) {\n      return { success: false, error: \"Verification token has expired\" };\n    }\n\n    await this.db\n      .update(users)\n      .set({ emailVerified: true })\n      .where(eq(users.id, verification.userId));\n\n    await this.db\n      .delete(emailVerifications)\n      .where(eq(emailVerifications.id, verification.id));\n\n    return { success: true, userId: verification.userId };\n  }\n\n  async createPasswordResetToken(email: string): Promise<{ token: string; expiresAt: Date; error?: string }> {\n    const user = await this.findUserByEmail(email);\n    if (!user) {\n      return { token: \"\", expiresAt: new Date(), error: \"User not found\" };\n    }\n\n    const token = randomBytes(32).toString(\"hex\");\n    const expiresAt = new Date(Date.now() + 60 * 60 * 1000);\n\n    await this.db.insert(passwordResets).values({\n      userId: user.id,\n      token,\n      expiresAt,\n    });\n\n    return { token, expiresAt };\n  }\n\n  async resetPasswordWithToken(token: string, newPassword: string): Promise<{ success: boolean; error?: string }> {\n    const [reset] = await this.db\n      .select()\n      .from(passwordResets)\n      .where(eq(passwordResets.token, token))\n      .limit(1);\n\n    if (!reset) {\n      return { success: false, error: \"Invalid reset token\" };\n    }\n\n    if (reset.expiresAt < new Date()) {\n      return { success: false, error: \"Reset token has expired\" };\n    }\n\n    if (reset.usedAt) {\n      return { success: false, error: \"Reset token has already been used\" };\n    }\n\n    const passwordHash = await this.hashPassword(newPassword);\n\n    await this.db\n      .update(users)\n      .set({ passwordHash, updatedAt: new Date() })\n      .where(eq(users.id, reset.userId));\n\n    await this.db\n      .update(passwordResets)\n      .set({ usedAt: new Date() })\n      .where(eq(passwordResets.id, reset.id));\n\n    await this.db.delete(sessions).where(eq(sessions.userId, reset.userId));\n\n    return { success: true };\n  }\n}\n"]}

package/dist/chunk-CKVOU6MX.cjs

@@ -1,52 +0,0 @@
-'use strict';
-
-var pgCore = require('drizzle-orm/pg-core');
-
-// src/database/drizzle/schema/media.ts
-var media = pgCore.pgTable(
-  "media",
-  {
-    id: pgCore.uuid("id").primaryKey().defaultRandom(),
-    filename: pgCore.varchar("filename", { length: 255 }).notNull().unique(),
-    title: pgCore.varchar("title", { length: 255 }),
-    originalName: pgCore.varchar("original_name", { length: 255 }).notNull(),
-    mimeType: pgCore.varchar("mime_type", { length: 100 }).notNull(),
-    fileSize: pgCore.integer("file_size").notNull(),
-    width: pgCore.integer("width"),
-    height: pgCore.integer("height"),
-    url: pgCore.text("url").notNull().unique(),
-    thumbnailUrl: pgCore.text("thumbnail_url"),
-    folder: pgCore.varchar("folder", { length: 255 }),
-    provider: pgCore.varchar("provider", { length: 50 }).notNull(),
-    alt: pgCore.text("alt"),
-    caption: pgCore.text("caption"),
-    type: pgCore.varchar("type", { length: 50 }).notNull().default("other"),
-    status: pgCore.varchar("status", { length: 20 }).notNull().default("active"),
-    metadata: pgCore.jsonb("metadata").$type(),
-    createdAt: pgCore.timestamp("created_at").defaultNow().notNull(),
-    updatedAt: pgCore.timestamp("updated_at").defaultNow().notNull()
-  },
-  (table) => [
-    pgCore.index("media_folder_idx").on(table.folder),
-    pgCore.index("media_provider_idx").on(table.provider),
-    pgCore.index("media_filename_idx").on(table.filename)
-  ]
-);
-var mediaFolders = pgCore.pgTable(
-  "media_folders",
-  {
-    path: pgCore.varchar("path", { length: 500 }).primaryKey(),
-    // e.g. "documents/2024"
-    name: pgCore.varchar("name", { length: 255 }).notNull(),
-    parentPath: pgCore.varchar("parent_path", { length: 500 }),
-    createdAt: pgCore.timestamp("created_at").defaultNow().notNull()
-  },
-  (table) => [
-    pgCore.index("media_folders_parent_idx").on(table.parentPath)
-  ]
-);
-
-exports.media = media;
-exports.mediaFolders = mediaFolders;
-//# sourceMappingURL=chunk-CKVOU6MX.cjs.map
-//# sourceMappingURL=chunk-CKVOU6MX.cjs.map

package/dist/chunk-CKVOU6MX.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/database/drizzle/schema/media.ts"],"names":["pgTable","uuid","varchar","integer","text","jsonb","timestamp","index"],"mappings":";;;;;AAWO,IAAM,KAAA,GAAQA,cAAA;AAAA,EACnB,OAAA;AAAA,EACA;AAAA,IACE,IAAIC,WAAA,CAAK,IAAI,CAAA,CAAE,UAAA,GAAa,aAAA,EAAc;AAAA,IAC1C,QAAA,EAAUC,cAAA,CAAQ,UAAA,EAAY,EAAE,MAAA,EAAQ,KAAK,CAAA,CAAE,OAAA,EAAQ,CAAE,MAAA,EAAO;AAAA,IAChE,OAAOA,cAAA,CAAQ,OAAA,EAAS,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA,IACvC,YAAA,EAAcA,eAAQ,eAAA,EAAiB,EAAE,QAAQ,GAAA,EAAK,EAAE,OAAA,EAAQ;AAAA,IAChE,QAAA,EAAUA,eAAQ,WAAA,EAAa,EAAE,QAAQ,GAAA,EAAK,EAAE,OAAA,EAAQ;AAAA,IACxD,QAAA,EAAUC,cAAA,CAAQ,WAAW,CAAA,CAAE,OAAA,EAAQ;AAAA,IACvC,KAAA,EAAOA,eAAQ,OAAO,CAAA;AAAA,IACtB,MAAA,EAAQA,eAAQ,QAAQ,CAAA;AAAA,IACxB,KAAKC,WAAA,CAAK,KAAK,CAAA,CAAE,OAAA,GAAU,MAAA,EAAO;AAAA,IAClC,YAAA,EAAcA,YAAK,eAAe,CAAA;AAAA,IAClC,QAAQF,cAAA,CAAQ,QAAA,EAAU,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA,IACzC,QAAA,EAAUA,eAAQ,UAAA,EAAY,EAAE,QAAQ,EAAA,EAAI,EAAE,OAAA,EAAQ;AAAA,IACtD,GAAA,EAAKE,YAAK,KAAK,CAAA;AAAA,IACf,OAAA,EAASA,YAAK,SAAS,CAAA;AAAA,IACvB,IAAA,EAAMF,cAAA,CAAQ,MAAA,EAAQ,EAAE,MAAA,EAAQ,EAAA,EAAI,CAAA,CAAE,OAAA,EAAQ,CAAE,OAAA,CAAQ,OAAO,CAAA;AAAA,IAC/D,MAAA,EAAQA,cAAA,CAAQ,QAAA,EAAU,EAAE,MAAA,EAAQ,EAAA,EAAI,CAAA,CAAE,OAAA,EAAQ,CAAE,OAAA,CAAQ,QAAQ,CAAA;AAAA,IACpE,QAAA,EAAUG,YAAA,CAAM,UAAU,CAAA,CAAE,KAAA,EAA+B;AAAA,IAC3D,WAAWC,gBAAA,CAAU,YAAY,CAAA,CAAE,UAAA,GAAa,OAAA,EAAQ;AAAA,IACxD,WAAWA,gBAAA,CAAU,YAAY,CAAA,CAAE,UAAA,GAAa,OAAA;AAAQ,GAC1D;AAAA,EACA,CAAC,KAAA,KAAU;AAAA,IACTC,YAAA,CAAM,kBAAkB,CAAA,CAAE,EAAA,CAAG,MAAM,MAAM,CAAA;AAAA,IACzCA,YAAA,CAAM,oBAAoB,CAAA,CAAE,EAAA,CAAG,MAAM,QAAQ,CAAA;AAAA,IAC7CA,YAAA,CAAM,oBAAoB,CAAA,CAAE,EAAA,CAAG,MAAM,QAAQ;AAAA;AAEjD;AAEO,IAAM,YAAA,GAAeP,cAAA;AAAA,EAC1B,eAAA;AAAA,EACA;AAAA,IACE,IAAA,EAAME,eAAQ,MAAA,EAAQ,EAAE,QAAQ,GAAA,EAAK,EAAE,UAAA,EAAW;AAAA;AAAA,IAClD,IAAA,EAAMA,eAAQ,MAAA,EAAQ,EAAE,QAAQ,GAAA,EAAK,EAAE,OAAA,EAAQ;AAAA,IAC/C,YAAYA,cAAA,CAAQ,aAAA,EAAe,EAAE,MAAA,EAAQ,KAAK,CAAA;AAAA,IAClD,WAAWI,gBAAA,CAAU,YAAY,CAAA,CAAE,UAAA,GAAa,OAAA;AAAQ,GAC1D;AAAA,EACA,CAAC,KAAA,KAAU;AAAA,IACTC,YAAA,CAAM,0BAA0B,CAAA,CAAE,EAAA,CAAG,MAAM,UAAU;AAAA;AAEzD","file":"chunk-CKVOU6MX.cjs","sourcesContent":["import {\n  pgTable,\n  uuid,\n  varchar,\n  timestamp,\n  integer,\n  text,\n  jsonb,\n  index,\n} from \"drizzle-orm/pg-core\";\n\nexport const media = pgTable(\n  \"media\",\n  {\n    id: uuid(\"id\").primaryKey().defaultRandom(),\n    filename: varchar(\"filename\", { length: 255 }).notNull().unique(),\n    title: varchar(\"title\", { length: 255 }),\n    originalName: varchar(\"original_name\", { length: 255 }).notNull(),\n    mimeType: varchar(\"mime_type\", { length: 100 }).notNull(),\n    fileSize: integer(\"file_size\").notNull(),\n    width: integer(\"width\"),\n    height: integer(\"height\"),\n    url: text(\"url\").notNull().unique(),\n    thumbnailUrl: text(\"thumbnail_url\"),\n    folder: varchar(\"folder\", { length: 255 }),\n    provider: varchar(\"provider\", { length: 50 }).notNull(),\n    alt: text(\"alt\"),\n    caption: text(\"caption\"),\n    type: varchar(\"type\", { length: 50 }).notNull().default(\"other\"),\n    status: varchar(\"status\", { length: 20 }).notNull().default(\"active\"),\n    metadata: jsonb(\"metadata\").$type<Record<string, unknown>>(),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n    updatedAt: timestamp(\"updated_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"media_folder_idx\").on(table.folder),\n    index(\"media_provider_idx\").on(table.provider),\n    index(\"media_filename_idx\").on(table.filename),\n  ],\n);\n\nexport const mediaFolders = pgTable(\n  \"media_folders\",\n  {\n    path: varchar(\"path\", { length: 500 }).primaryKey(), // e.g. \"documents/2024\"\n    name: varchar(\"name\", { length: 255 }).notNull(),\n    parentPath: varchar(\"parent_path\", { length: 500 }),\n    createdAt: timestamp(\"created_at\").defaultNow().notNull(),\n  },\n  (table) => [\n    index(\"media_folders_parent_idx\").on(table.parentPath),\n  ]\n);\n\nexport type Media = typeof media.$inferSelect;\nexport type NewMedia = typeof media.$inferInsert;\n"]}