@kyro-cms/core 0.9.0 → 0.9.2

package/dist/{chunk-YVUJBEXE.cjs → chunk-5PMQQFRE.cjs}

@@ -1,7 +1,7 @@
 'use strict';
 
-var chunkIA6AU5PI_cjs = require('./chunk-IA6AU5PI.cjs');
-var chunkI7HHI6QV_cjs = require('./chunk-I7HHI6QV.cjs');
+var chunkY7AQK4R4_cjs = require('./chunk-Y7AQK4R4.cjs');
+var chunkIDVRRRAK_cjs = require('./chunk-IDVRRRAK.cjs');
 
 // src/auth/bootstrap.ts
 async function bootstrapAdmin(config) {
@@ -13,7 +13,7 @@ async function bootstrapAdmin(config) {
     emailConfig,
     sendWelcomeEmail = false
   } = config;
-  const authAdapter = config.authAdapter || new chunkI7HHI6QV_cjs.SQLiteAuthAdapter({
+  const authAdapter = config.authAdapter || new chunkIDVRRRAK_cjs.SQLiteAuthAdapter({
     path: config.authDbPath || "./data/auth.db"
   });
   try {
@@ -24,7 +24,7 @@ async function bootstrapAdmin(config) {
       error: "Failed to connect to auth storage"
     };
   }
-  const passwordPolicy = new chunkIA6AU5PI_cjs.PasswordPolicy();
+  const passwordPolicy = new chunkY7AQK4R4_cjs.PasswordPolicy();
   const passwordValidation = passwordPolicy.validate(adminPassword);
   if (!passwordValidation.valid) {
     await authAdapter.disconnect?.();
@@ -49,7 +49,7 @@ async function bootstrapAdmin(config) {
       tenantId
     });
     if (sendWelcomeEmail && emailConfig) {
-      const emailTransport = new chunkIA6AU5PI_cjs.EmailTransport(emailConfig);
+      const emailTransport = new chunkY7AQK4R4_cjs.EmailTransport(emailConfig);
       const templates = emailTransport.getTemplates();
       const welcomeTemplate = templates.welcome(adminEmail.split("@")[0]);
       await emailTransport.send({
@@ -111,6 +111,15 @@ async function autoBootstrap(authAdapter) {
   if (authAdapter) {
     config.authAdapter = authAdapter;
   }
+  try {
+    await config.authAdapter?.connect?.();
+    const existingUser = await config.authAdapter?.findUserByEmail(config.adminEmail);
+    if (existingUser) {
+      await config.authAdapter?.disconnect?.();
+      return { success: false, error: "Admin user already exists" };
+    }
+  } catch {
+  }
   console.log("Auto-bootstrapping admin user...");
   const result = await bootstrapAdmin(config);
   if (result.success) {
@@ -146,5 +155,5 @@ exports.bootstrapAdmin = bootstrapAdmin;
 exports.bootstrapWithRetry = bootstrapWithRetry;
 exports.checkBootstrapRequired = checkBootstrapRequired;
 exports.getBootstrapFromEnv = getBootstrapFromEnv;
-//# sourceMappingURL=chunk-YVUJBEXE.cjs.map
-//# sourceMappingURL=chunk-YVUJBEXE.cjs.map
+//# sourceMappingURL=chunk-5PMQQFRE.cjs.map
+//# sourceMappingURL=chunk-5PMQQFRE.cjs.map

package/dist/chunk-5PMQQFRE.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/auth/bootstrap.ts"],"names":["SQLiteAuthAdapter","PasswordPolicy","EmailTransport"],"mappings":";;;;;;AAsBA,eAAsB,eACpB,MAAA,EAC0B;AAC1B,EAAA,MAAM;AAAA,IACJ,UAAA;AAAA,IACA,aAAA;AAAA,IACA,SAAA,GAAY,aAAA;AAAA,IACZ,QAAA;AAAA,IACA,WAAA;AAAA,IACA,gBAAA,GAAmB;AAAA,GACrB,GAAI,MAAA;AAEJ,EAAA,MAAM,WAAA,GACJ,MAAA,CAAO,WAAA,IACP,IAAIA,mCAAA,CAAkB;AAAA,IACpB,IAAA,EAAM,OAAO,UAAA,IAAc;AAAA,GAC5B,CAAA;AAEH,EAAA,IAAI;AACF,IAAA,MAAM,YAAY,OAAA,IAAU;AAAA,EAC9B,SAAS,KAAA,EAAO;AACd,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,MAAM,cAAA,GAAiB,IAAIC,gCAAA,EAAe;AAC1C,EAAA,MAAM,kBAAA,GAAqB,cAAA,CAAe,QAAA,CAAS,aAAa,CAAA;AAChE,EAAA,IAAI,CAAC,mBAAmB,KAAA,EAAO;AAC7B,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,OAAO,CAAA,kBAAA,EAAqB,kBAAA,CAAmB,MAAA,CAAO,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KAClE;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GAAe,MAAM,WAAA,CAAY,eAAA,CAAgB,UAAU,CAAA;AACjE,EAAA,IAAI,YAAA,EAAc;AAChB,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,MAAM,WAAA,CAAY,UAAA,CAAW;AAAA,MACxC,KAAA,EAAO,UAAA;AAAA,MACP,QAAA,EAAU,aAAA;AAAA,MACV,MAAO,SAAA,IAA0B,OAAA;AAAA,MACjC;AAAA,KACD,CAAA;AAED,IAAA,IAAI,oBAAoB,WAAA,EAAa;AACnC,MAAA,MAAM,cAAA,GAAiB,IAAIC,gCAAA,CAAe,WAAW,CAAA;AACrD,MAAA,MAAM,SAAA,GAAY,eAAe,YAAA,EAAa;AAC9C,MAAA,MAAM,eAAA,GAAkB,UAAU,OAAA,CAAQ,UAAA,CAAW,MAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA;AAClE,MAAA,MAAM,eAAe,IAAA,CAAK;AAAA,QACxB,EAAA,EAAI,UAAA;AAAA,QACJ,GAAG;AAAA,OACJ,CAAA;AAAA,IACH;AAEA,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAA;AAAA,MACT;AAAA,KACF;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,YAAY,UAAA,IAAa;AAC/B,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,KAAA;AAAA,MACT,KAAA,EACE,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU;AAAA,KAC7C;AAAA,EACF;AACF;AAEA,eAAsB,sBAAA,CACpB,aACA,UAAA,EACkB;AAClB,EAAA,MAAM,YAAA,GAAe,MAAM,WAAA,CAAY,eAAA,CAAgB,UAAU,CAAA;AACjE,EAAA,OAAO,CAAC,YAAA;AACV;AAEO,SAAS,mBAAA,GAA8C;AAC5D,EAAA,MAAM,KAAA,GAAQ,QAAQ,GAAA,CAAI,gBAAA;AAC1B,EAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,mBAAA;AAE7B,EAAA,IAAI,CAAC,KAAA,IAAS,CAAC,QAAA,EAAU;AACvB,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,OAAA,CAAQ,GAAA,CAAI,iBAAA,IAAqB,gBAAA;AAAA,IAC7C,UAAA,EAAY,KAAA;AAAA,IACZ,aAAA,EAAe,QAAA;AAAA,IACf,SAAA,EAAW,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,aAAA;AAAA,IAC1C,QAAA,EAAU,QAAQ,GAAA,CAAI,oBAAA;AAAA,IACtB,WAAA,EAAa,OAAA,CAAQ,GAAA,CAAI,SAAA,GACrB;AAAA,MACE,QAAA,EAAU,MAAA;AAAA,MACV,IAAA,EAAM;AAAA,QACJ,IAAA,EAAM,QAAQ,GAAA,CAAI,SAAA;AAAA,QAClB,MAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,OAAO,EAAE,CAAA;AAAA,QACjD,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,KAAgB,MAAA;AAAA,QACpC,IAAA,EAAM;AAAA,UACJ,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,EAAA;AAAA,UAC/B,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa;AAAA;AACjC,OACF;AAAA,MACA,IAAA,EAAM,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,qBAAA;AAAA,MAC/B,QAAA,EAAU,QAAQ,GAAA,CAAI;AAAA,KACxB,GACA,MAAA;AAAA,IACJ,gBAAA,EAAkB,OAAA,CAAQ,GAAA,CAAI,uBAAA,KAA4B;AAAA,GAC5D;AACF;AAEA,eAAsB,cACpB,WAAA,EACiC;AACjC,EAAA,MAAM,SAAS,mBAAA,EAAoB;AACnC,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,WAAA,EAAa;AACf,IAAA,MAAA,CAAO,WAAA,GAAc,WAAA;AAAA,EACvB;AAGA,EAAA,IAAI;AACF,IAAA,MAAM,MAAA,CAAO,aAAa,OAAA,IAAU;AACpC,IAAA,MAAM,eAAe,MAAM,MAAA,CAAO,WAAA,EAAa,eAAA,CAAgB,OAAO,UAAU,CAAA;AAChF,IAAA,IAAI,YAAA,EAAc;AAChB,MAAA,MAAM,MAAA,CAAO,aAAa,UAAA,IAAa;AACvC,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,2BAAA,EAA4B;AAAA,IAC9D;AAAA,EACF,CAAA,CAAA,MAAQ;AAAA,EAER;AAEA,EAAA,OAAA,CAAQ,IAAI,kCAAkC,CAAA;AAC9C,EAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,MAAM,CAAA;AAE1C,EAAA,IAAI,OAAO,OAAA,EAAS;AAClB,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,oBAAA,EAAuB,MAAA,CAAO,UAAU,CAAA,CAAE,CAAA;AAAA,EACxD,CAAA,MAAO;AACL,IAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,kBAAA,EAAqB,MAAA,CAAO,KAAK,CAAA,CAAE,CAAA;AAAA,EACnD;AAEA,EAAA,OAAO,MAAA;AACT;AAEA,eAAsB,kBAAA,CACpB,MAAA,EACA,UAAA,GAAqB,CAAA,EACrB,eAAuB,GAAA,EACG;AAC1B,EAAA,IAAI,SAAA,GAAoB,EAAA;AAExB,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,UAAA,EAAY,CAAA,EAAA,EAAK;AACnC,IAAA,MAAM,MAAA,GAAS,MAAM,cAAA,CAAe,MAAM,CAAA;AAE1C,IAAA,IAAI,OAAO,OAAA,EAAS;AAClB,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,SAAA,GAAY,OAAO,KAAA,IAAS,eAAA;AAE5B,IAAA,IAAI,SAAA,CAAU,QAAA,CAAS,gBAAgB,CAAA,EAAG;AACxC,MAAA,OAAO,MAAA;AAAA,IACT;AAEA,IAAA,IAAI,CAAA,GAAI,aAAa,CAAA,EAAG;AACtB,MAAA,MAAM,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,YAAY,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,OAAA,EAAS,KAAA;AAAA,IACT,KAAA,EAAO,CAAA,aAAA,EAAgB,UAAU,CAAA,UAAA,EAAa,SAAS,CAAA;AAAA,GACzD;AACF","file":"chunk-5PMQQFRE.cjs","sourcesContent":["import { SQLiteAuthAdapter } from \"./sqlite-adapter.js\";\nimport { EmailTransport, type EmailConfig } from \"./nodemailer-transport.js\";\nimport { PasswordPolicy } from \"./security/password-policy.js\";\nimport type { AuthUser, UserRole, AuthAdapter } from \"./types.js\";\n\nexport interface BootstrapConfig {\n  authAdapter?: AuthAdapter;\n  authDbPath?: string;\n  adminEmail: string;\n  adminPassword: string;\n  adminRole?: string;\n  tenantId?: string;\n  emailConfig?: EmailConfig;\n  sendWelcomeEmail?: boolean;\n}\n\nexport interface BootstrapResult {\n  success: boolean;\n  user?: AuthUser;\n  error?: string;\n}\n\nexport async function bootstrapAdmin(\n  config: BootstrapConfig,\n): Promise<BootstrapResult> {\n  const {\n    adminEmail,\n    adminPassword,\n    adminRole = \"super_admin\",\n    tenantId,\n    emailConfig,\n    sendWelcomeEmail = false,\n  } = config;\n\n  const authAdapter =\n    config.authAdapter ||\n    new SQLiteAuthAdapter({\n      path: config.authDbPath || \"./data/auth.db\",\n    });\n\n  try {\n    await authAdapter.connect?.();\n  } catch (error) {\n    return {\n      success: false,\n      error: \"Failed to connect to auth storage\",\n    };\n  }\n\n  const passwordPolicy = new PasswordPolicy();\n  const passwordValidation = passwordPolicy.validate(adminPassword);\n  if (!passwordValidation.valid) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error: `Invalid password: ${passwordValidation.errors.join(\", \")}`,\n    };\n  }\n\n  const existingUser = await authAdapter.findUserByEmail(adminEmail);\n  if (existingUser) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error: \"Admin user already exists\",\n    };\n  }\n\n  try {\n    const user = await authAdapter.createUser({\n      email: adminEmail,\n      password: adminPassword,\n      role: (adminRole as UserRole) || \"admin\",\n      tenantId,\n    });\n\n    if (sendWelcomeEmail && emailConfig) {\n      const emailTransport = new EmailTransport(emailConfig);\n      const templates = emailTransport.getTemplates();\n      const welcomeTemplate = templates.welcome(adminEmail.split(\"@\")[0]);\n      await emailTransport.send({\n        to: adminEmail,\n        ...welcomeTemplate,\n      });\n    }\n\n    await authAdapter.disconnect?.();\n    return {\n      success: true,\n      user,\n    };\n  } catch (error) {\n    await authAdapter.disconnect?.();\n    return {\n      success: false,\n      error:\n        error instanceof Error ? error.message : \"Failed to create admin user\",\n    };\n  }\n}\n\nexport async function checkBootstrapRequired(\n  authAdapter: AuthAdapter,\n  adminEmail: string,\n): Promise<boolean> {\n  const existingUser = await authAdapter.findUserByEmail(adminEmail);\n  return !existingUser;\n}\n\nexport function getBootstrapFromEnv(): BootstrapConfig | null {\n  const email = process.env.KYRO_ADMIN_EMAIL;\n  const password = process.env.KYRO_ADMIN_PASSWORD;\n\n  if (!email || !password) {\n    return null;\n  }\n\n  return {\n    authDbPath: process.env.KYRO_AUTH_DB_PATH || \"./data/auth.db\",\n    adminEmail: email,\n    adminPassword: password,\n    adminRole: process.env.KYRO_ADMIN_ROLE || \"super_admin\",\n    tenantId: process.env.KYRO_ADMIN_TENANT_ID,\n    emailConfig: process.env.SMTP_HOST\n      ? {\n          provider: \"smtp\",\n          smtp: {\n            host: process.env.SMTP_HOST,\n            port: parseInt(process.env.SMTP_PORT || \"587\", 10),\n            secure: process.env.SMTP_SECURE === \"true\",\n            auth: {\n              user: process.env.SMTP_USER || \"\",\n              pass: process.env.SMTP_PASS || \"\",\n            },\n          },\n          from: process.env.SMTP_FROM || \"noreply@example.com\",\n          fromName: process.env.SMTP_FROM_NAME,\n        }\n      : undefined,\n    sendWelcomeEmail: process.env.KYRO_ADMIN_SEND_WELCOME === \"true\",\n  };\n}\n\nexport async function autoBootstrap(\n  authAdapter?: AuthAdapter,\n): Promise<BootstrapResult | null> {\n  const config = getBootstrapFromEnv();\n  if (!config) {\n    return null;\n  }\n\n  if (authAdapter) {\n    config.authAdapter = authAdapter;\n  }\n\n  // Check if bootstrap is actually needed before connecting\n  try {\n    await config.authAdapter?.connect?.();\n    const existingUser = await config.authAdapter?.findUserByEmail(config.adminEmail);\n    if (existingUser) {\n      await config.authAdapter?.disconnect?.();\n      return { success: false, error: \"Admin user already exists\" };\n    }\n  } catch {\n    // Connection failed — let bootstrapAdmin handle the error\n  }\n\n  console.log(\"Auto-bootstrapping admin user...\");\n  const result = await bootstrapAdmin(config);\n\n  if (result.success) {\n    console.log(`Admin user created: ${config.adminEmail}`);\n  } else {\n    console.error(`Bootstrap failed: ${result.error}`);\n  }\n\n  return result;\n}\n\nexport async function bootstrapWithRetry(\n  config: BootstrapConfig,\n  maxRetries: number = 3,\n  retryDelayMs: number = 2000,\n): Promise<BootstrapResult> {\n  let lastError: string = \"\";\n\n  for (let i = 0; i < maxRetries; i++) {\n    const result = await bootstrapAdmin(config);\n\n    if (result.success) {\n      return result;\n    }\n\n    lastError = result.error || \"Unknown error\";\n\n    if (lastError.includes(\"already exists\")) {\n      return result;\n    }\n\n    if (i < maxRetries - 1) {\n      await new Promise((resolve) => setTimeout(resolve, retryDelayMs));\n    }\n  }\n\n  return {\n    success: false,\n    error: `Failed after ${maxRetries} retries: ${lastError}`,\n  };\n}\n"]}

package/dist/{chunk-57P6MJKC.js → chunk-6UNONDW7.js}

@@ -2,10 +2,10 @@ import { settings } from './chunk-YT7HXXVN.js';
 
 // src/config/ConfigService.ts
 var _settingsTableEnsured = false;
-var _loaded = false;
 var ConfigService = class _ConfigService {
   db;
   cache = {};
+  loaded = false;
   static SENSITIVE_KEYS = [
     "storage.s3.secret_access_key",
     "storage.r2.secret_access_key",
@@ -32,7 +32,7 @@ var ConfigService = class _ConfigService {
    * Initialize the service by loading all settings from the database
    */
   async load() {
-    if (_loaded) return;
+    if (this.loaded) return;
     await this.ensureSettingsTable();
     try {
       if (typeof this.db?.select === "function") {
@@ -41,15 +41,14 @@ var ConfigService = class _ConfigService {
           acc[row.key] = row.value;
           return acc;
         }, {});
-      } else {
-        await this.loadFromGlobals();
       }
+      await this.loadFromGlobals();
     } catch (error) {
       console.warn(
         "ConfigService: Could not load settings from database, using environment fallbacks."
       );
     }
-    _loaded = true;
+    this.loaded = true;
   }
   async ensureSettingsTable() {
     if (_settingsTableEnsured) return;
@@ -85,7 +84,28 @@ var ConfigService = class _ConfigService {
    */
   async loadFromGlobals() {
     try {
-      const row = this.db.prepare(`SELECT * FROM "_globals_storage-settings" LIMIT 1`).get();
+      let row = null;
+      if (typeof this.db?.execute === "function") {
+        const { sql } = await import('drizzle-orm');
+        const variants = ['"_globals_storage-settings"', '"_globals_storage_settings"', '"global_storage_settings"'];
+        for (const name of variants) {
+          try {
+            const result = await this.db.execute(sql`SELECT * FROM ${sql.raw(name)} LIMIT 1`);
+            row = Array.isArray(result) ? result[0] : result?.rows ? result.rows[0] : null;
+            if (row) break;
+          } catch {
+          }
+        }
+      } else if (typeof this.db?.prepare === "function") {
+        const variants = ['"_globals_storage-settings"', '"_globals_storage_settings"', '"global_storage_settings"'];
+        for (const name of variants) {
+          try {
+            row = this.db.prepare(`SELECT * FROM ${name} LIMIT 1`).get();
+            if (row) break;
+          } catch {
+          }
+        }
+      }
       if (!row) return;
       const parseJSON = (val) => {
         if (!val) return null;
@@ -142,7 +162,71 @@ var ConfigService = class _ConfigService {
         this.cache["storage.ftp.prefix"] = ftp?.prefix || "";
       }
     } catch (error) {
-      console.warn("ConfigService: Could not load from globals table:", error);
+      console.warn("ConfigService: Could not load storage settings from globals table:", error);
+    }
+    try {
+      let row = null;
+      if (typeof this.db?.execute === "function") {
+        const { sql } = await import('drizzle-orm');
+        const variants = ['"_globals_email-settings"', '"_globals_email_settings"', '"global_email_settings"'];
+        for (const name of variants) {
+          try {
+            const result = await this.db.execute(sql`SELECT * FROM ${sql.raw(name)} LIMIT 1`);
+            row = Array.isArray(result) ? result[0] : result?.rows ? result.rows[0] : null;
+            if (row) break;
+          } catch {
+          }
+        }
+      } else if (typeof this.db?.prepare === "function") {
+        const variants = ['"_globals_email-settings"', '"_globals_email_settings"', '"global_email_settings"'];
+        for (const name of variants) {
+          try {
+            row = this.db.prepare(`SELECT * FROM ${name} LIMIT 1`).get();
+            if (row) break;
+          } catch {
+          }
+        }
+      }
+      if (row) {
+        const parseJSON = (val) => {
+          if (!val) return null;
+          if (typeof val === "string") {
+            try {
+              return JSON.parse(val);
+            } catch {
+              return null;
+            }
+          }
+          return val;
+        };
+        this.cache["email.provider"] = row.provider || "smtp";
+        this.cache["email.smtp.from"] = row.fromEmail || "";
+        this.cache["email.smtp.from_name"] = row.fromName || "";
+        this.cache["email.smtp.reply_to"] = row.replyTo || "";
+        if (row.provider === "smtp") {
+          const smtp = parseJSON(row.smtp);
+          this.cache["email.smtp.host"] = smtp?.host || "";
+          this.cache["email.smtp.port"] = String(smtp?.port || "587");
+          this.cache["email.smtp.user"] = smtp?.username || "";
+          this.cache["email.smtp.pass"] = smtp?.password || "";
+          this.cache["email.smtp.secure"] = smtp?.secure ? "true" : "false";
+        } else if (row.provider === "resend") {
+          const resend = parseJSON(row.resend);
+          this.cache["email.smtp.pass"] = resend?.apiKey || "";
+        } else if (row.provider === "sendgrid") {
+          const sendgrid = parseJSON(row.sendgrid);
+          this.cache["email.smtp.pass"] = sendgrid?.apiKey || "";
+        } else if (row.provider === "mailgun") {
+          const mailgun = parseJSON(row.mailgun);
+          this.cache["email.smtp.pass"] = mailgun?.apiKey || "";
+        } else if (row.provider === "ses") {
+          const ses = parseJSON(row.ses);
+          this.cache["email.smtp.user"] = ses?.accessKeyId || "";
+          this.cache["email.smtp.pass"] = ses?.secretAccessKey || "";
+        }
+      }
+    } catch (error) {
+      console.warn("ConfigService: Could not load email settings from globals table:", error);
     }
   }
   /**
@@ -270,7 +354,7 @@ var ConfigService = class _ConfigService {
         signKey: this.get("storage.imgix.sign_key", "IMGIX_SIGN_KEY")
       },
       local: {
-        uploadDir: this.get("storage.local.dir", "STORAGE_LOCAL_DIR"),
+        uploadDir: this.get("storage.local.dir", "STORAGE_LOCAL_DIR", "./public/uploads"),
         baseUrl: this.get("storage.local.url", "STORAGE_LOCAL_URL", "/uploads")
       }
     };
@@ -1056,5 +1140,5 @@ var PasswordPolicy = class {
 };
 
 export { ConfigService, EmailTransport, PasswordPolicy };
-//# sourceMappingURL=chunk-57P6MJKC.js.map
-//# sourceMappingURL=chunk-57P6MJKC.js.map
+//# sourceMappingURL=chunk-6UNONDW7.js.map
+//# sourceMappingURL=chunk-6UNONDW7.js.map

package/dist/chunk-6UNONDW7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/config/ConfigService.ts","../src/auth/nodemailer-transport.ts","../src/auth/security/password-policy.ts"],"names":[],"mappings":";;;AAGA,IAAI,qBAAA,GAAwB,KAAA;AA+FrB,IAAM,aAAA,GAAN,MAAM,cAAA,CAAc;AAAA,EACjB,EAAA;AAAA,EACA,QAAgC,EAAC;AAAA,EACjC,MAAA,GAAS,KAAA;AAAA,EACjB,OAAwB,cAAA,GAAiB;AAAA,IACvC,8BAAA;AAAA,IACA,8BAAA;AAAA,IACA,yBAAA;AAAA,IACA,mCAAA;AAAA,IACA,kCAAA;AAAA,IACA,sBAAA;AAAA,IACA,uBAAA;AAAA,IACA,+BAAA;AAAA,IACA,wBAAA;AAAA,IACA,iBAAA;AAAA,IACA,iBAAA;AAAA,IACA,oBAAA;AAAA,IACA,oBAAA;AAAA,IACA,iBAAA;AAAA,IACA,cAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACF;AAAA,EAEA,YAAY,EAAA,EAAS;AACnB,IAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AAAA,EACZ;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,IAAA,GAAsB;AAC1B,IAAA,IAAI,KAAK,MAAA,EAAQ;AAEjB,IAAA,MAAM,KAAK,mBAAA,EAAoB;AAE/B,IAAA,IAAI;AACF,MAAA,IAAI,OAAO,IAAA,CAAK,EAAA,EAAI,MAAA,KAAW,UAAA,EAAY;AACzC,QAAA,MAAM,cAAc,MAAM,IAAA,CAAK,GAAG,MAAA,EAAO,CAAE,KAAK,QAAc,CAAA;AAC9D,QAAA,IAAA,CAAK,KAAA,GAAQ,WAAA,CAAY,MAAA,CAAO,CAAC,KAAU,GAAA,KAAa;AACtD,UAAA,GAAA,CAAI,GAAA,CAAI,GAAG,CAAA,GAAI,GAAA,CAAI,KAAA;AACnB,UAAA,OAAO,GAAA;AAAA,QACT,CAAA,EAAG,EAAE,CAAA;AAAA,MACP;AAGA,MAAA,MAAM,KAAK,eAAA,EAAgB;AAAA,IAC7B,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,IAAA;AAAA,QACN;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS,IAAA;AAAA,EAChB;AAAA,EAEA,MAAc,mBAAA,GAAqC;AACjD,IAAA,IAAI,qBAAA,EAAuB;AAE3B,IAAA,IAAI;AACF,MAAA,IAAI,OAAO,IAAA,CAAK,EAAA,EAAI,OAAA,KAAY,UAAA,EAAY;AAC1C,QAAA,MAAM,EAAE,GAAA,EAAI,GAAI,MAAM,OAAO,aAAa,CAAA;AAC1C,QAAA,MAAM,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAAA,CAOrB,CAAA;AACD,QAAA,qBAAA,GAAwB,IAAA;AAAA,MAC1B,CAAA,MAAA,IAAW,OAAO,IAAA,CAAK,EAAA,EAAI,SAAS,UAAA,EAAY;AAC9C,QAAA,IAAA,CAAK,GAAG,IAAA,CAAK;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,QAAA,CAOZ,CAAA;AACD,QAAA,qBAAA,GAAwB,IAAA;AAAA,MAC1B;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAc,eAAA,GAAiC;AAC7C,IAAA,IAAI;AACF,MAAA,IAAI,GAAA,GAAW,IAAA;AACf,MAAA,IAAI,OAAO,IAAA,CAAK,EAAA,EAAI,OAAA,KAAY,UAAA,EAAY;AAC1C,QAAA,MAAM,EAAE,GAAA,EAAI,GAAI,MAAM,OAAO,aAAa,CAAA;AAC1C,QAAA,MAAM,QAAA,GAAW,CAAC,6BAAA,EAA+B,6BAAA,EAA+B,2BAA2B,CAAA;AAC3G,QAAA,KAAA,MAAW,QAAQ,QAAA,EAAU;AAC3B,UAAA,IAAI;AACF,YAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,oBAAoB,GAAA,CAAI,GAAA,CAAI,IAAI,CAAC,CAAA,QAAA,CAAU,CAAA;AAChF,YAAA,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GAAI,MAAA,CAAO,CAAC,CAAA,GAAK,MAAA,EAAQ,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,GAAI,IAAA;AAC3E,YAAA,IAAI,GAAA,EAAK;AAAA,UACX,CAAA,CAAA,MAAQ;AAAA,UAAC;AAAA,QACX;AAAA,MACF,CAAA,MAAA,IAAW,OAAO,IAAA,CAAK,EAAA,EAAI,YAAY,UAAA,EAAY;AACjD,QAAA,MAAM,QAAA,GAAW,CAAC,6BAAA,EAA+B,6BAAA,EAA+B,2BAA2B,CAAA;AAC3G,QAAA,KAAA,MAAW,QAAQ,QAAA,EAAU;AAC3B,UAAA,IAAI;AACF,YAAA,GAAA,GAAM,KAAK,EAAA,CAAG,OAAA,CAAQ,iBAAiB,IAAI,CAAA,QAAA,CAAU,EAAE,GAAA,EAAI;AAC3D,YAAA,IAAI,GAAA,EAAK;AAAA,UACX,CAAA,CAAA,MAAQ;AAAA,UAAC;AAAA,QACX;AAAA,MACF;AAEA,MAAA,IAAI,CAAC,GAAA,EAAK;AAEV,MAAA,MAAM,SAAA,GAAY,CAAC,GAAA,KAAa;AAC9B,QAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,QAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,UAAA,IAAI;AACF,YAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,UACvB,CAAA,CAAA,MAAQ;AACN,YAAA,OAAO,IAAA;AAAA,UACT;AAAA,QACF;AACA,QAAA,OAAO,GAAA;AAAA,MACT,CAAA;AAEA,MAAA,MAAM,QAAA,GAAW,IAAI,QAAA,IAAY,OAAA;AACjC,MAAA,IAAA,CAAK,KAAA,CAAM,cAAc,CAAA,GAAI,QAAA,KAAa,QAAQ,IAAA,GAAO,QAAA;AAEzD,MAAA,IAAI,aAAa,OAAA,EAAS;AACxB,QAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,GAAA,CAAI,KAAK,CAAA;AACjC,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAC5B,KAAA,EAAO,SAAA,IAAa,kBAAA;AACtB,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,KAAA,EAAO,OAAA,IAAW,UAAA;AAAA,MACtD;AAEA,MAAA,IAAI,aAAa,KAAA,EAAO;AACtB,QAAA,MAAM,GAAA,GAAM,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA;AAC7B,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,GAAA,EAAK,MAAA,IAAU,EAAA;AACjD,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,GAAA,EAAK,MAAA,IAAU,WAAA;AACjD,QAAA,IAAA,CAAK,KAAA,CAAM,0BAA0B,CAAA,GAAI,GAAA,EAAK,WAAA,IAAe,EAAA;AAC7D,QAAA,IAAA,CAAK,KAAA,CAAM,8BAA8B,CAAA,GAAI,GAAA,EAAK,eAAA,IAAmB,EAAA;AACrE,QAAA,IAAA,CAAK,KAAA,CAAM,qBAAqB,CAAA,GAAI,GAAA,EAAK,QAAA,IAAY,EAAA;AACrD,QAAA,IAAA,CAAK,KAAA,CAAM,oBAAoB,CAAA,GAAI,GAAA,EAAK,MAAA,IAAU,EAAA;AAClD,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,GAAA,EAAK,MAAA,IAAU,EAAA;AAAA,MACnD;AAEA,MAAA,IAAI,aAAa,IAAA,EAAM;AACrB,QAAA,MAAM,EAAA,GAAK,SAAA,CAAU,GAAA,CAAI,EAAE,CAAA;AAC3B,QAAA,IAAA,CAAK,KAAA,CAAM,uBAAuB,CAAA,GAAI,EAAA,EAAI,SAAA,IAAa,EAAA;AACvD,QAAA,IAAA,CAAK,KAAA,CAAM,0BAA0B,CAAA,GAAI,EAAA,EAAI,WAAA,IAAe,EAAA;AAC5D,QAAA,IAAA,CAAK,KAAA,CAAM,8BAA8B,CAAA,GAAI,EAAA,EAAI,eAAA,IAAmB,EAAA;AACpE,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,EAAA,EAAI,MAAA,IAAU,EAAA;AAChD,QAAA,IAAA,CAAK,KAAA,CAAM,oBAAoB,CAAA,GAAI,EAAA,EAAI,MAAA,IAAU,EAAA;AACjD,QAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,EAAA,EAAI,MAAA,IAAU,EAAA;AAAA,MAClD;AAEA,MAAA,IAAI,aAAa,YAAA,EAAc;AAC7B,QAAA,MAAM,UAAA,GAAa,SAAA,CAAU,GAAA,CAAI,UAAU,CAAA;AAC3C,QAAA,IAAA,CAAK,KAAA,CAAM,+BAA+B,CAAA,GACxC,UAAA,EAAY,SAAA,IAAa,EAAA;AAC3B,QAAA,IAAA,CAAK,KAAA,CAAM,4BAA4B,CAAA,GAAI,UAAA,EAAY,MAAA,IAAU,EAAA;AACjE,QAAA,IAAA,CAAK,KAAA,CAAM,+BAA+B,CAAA,GACxC,UAAA,EAAY,SAAA,IAAa,EAAA;AAC3B,QAAA,IAAA,CAAK,KAAA,CAAM,2BAA2B,CAAA,GAAI,UAAA,EAAY,MAAA,IAAU,EAAA;AAAA,MAClE;AAEA,MAAA,IAAI,aAAa,KAAA,EAAO;AACtB,QAAA,MAAM,GAAA,GAAM,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA;AAC7B,QAAA,IAAA,CAAK,KAAA,CAAM,kBAAkB,CAAA,GAAI,GAAA,EAAK,IAAA,IAAQ,EAAA;AAC9C,QAAA,IAAA,CAAK,MAAM,kBAAkB,CAAA,GAAI,MAAA,CAAO,GAAA,EAAK,QAAQ,IAAI,CAAA;AACzD,QAAA,IAAA,CAAK,KAAA,CAAM,kBAAkB,CAAA,GAAI,GAAA,EAAK,IAAA,IAAQ,EAAA;AAC9C,QAAA,IAAA,CAAK,KAAA,CAAM,sBAAsB,CAAA,GAAI,GAAA,EAAK,QAAA,IAAY,EAAA;AACtD,QAAA,IAAA,CAAK,KAAA,CAAM,oBAAoB,CAAA,GAAI,GAAA,EAAK,SAAS,MAAA,GAAS,OAAA;AAC1D,QAAA,IAAA,CAAK,KAAA,CAAM,sBAAsB,CAAA,GAAI,GAAA,EAAK,OAAA,IAAW,EAAA;AACrD,QAAA,IAAA,CAAK,KAAA,CAAM,oBAAoB,CAAA,GAAI,GAAA,EAAK,MAAA,IAAU,EAAA;AAAA,MACpD;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,IAAA,CAAK,sEAAsE,KAAK,CAAA;AAAA,IAC1F;AAGA,IAAA,IAAI;AACF,MAAA,IAAI,GAAA,GAAW,IAAA;AACf,MAAA,IAAI,OAAO,IAAA,CAAK,EAAA,EAAI,OAAA,KAAY,UAAA,EAAY;AAC1C,QAAA,MAAM,EAAE,GAAA,EAAI,GAAI,MAAM,OAAO,aAAa,CAAA;AAC1C,QAAA,MAAM,QAAA,GAAW,CAAC,2BAAA,EAA6B,2BAAA,EAA6B,yBAAyB,CAAA;AACrG,QAAA,KAAA,MAAW,QAAQ,QAAA,EAAU;AAC3B,UAAA,IAAI;AACF,YAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,EAAA,CAAG,OAAA,CAAQ,oBAAoB,GAAA,CAAI,GAAA,CAAI,IAAI,CAAC,CAAA,QAAA,CAAU,CAAA;AAChF,YAAA,GAAA,GAAM,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,GAAI,MAAA,CAAO,CAAC,CAAA,GAAK,MAAA,EAAQ,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,GAAI,IAAA;AAC3E,YAAA,IAAI,GAAA,EAAK;AAAA,UACX,CAAA,CAAA,MAAQ;AAAA,UAAC;AAAA,QACX;AAAA,MACF,CAAA,MAAA,IAAW,OAAO,IAAA,CAAK,EAAA,EAAI,YAAY,UAAA,EAAY;AACjD,QAAA,MAAM,QAAA,GAAW,CAAC,2BAAA,EAA6B,2BAAA,EAA6B,yBAAyB,CAAA;AACrG,QAAA,KAAA,MAAW,QAAQ,QAAA,EAAU;AAC3B,UAAA,IAAI;AACF,YAAA,GAAA,GAAM,KAAK,EAAA,CAAG,OAAA,CAAQ,iBAAiB,IAAI,CAAA,QAAA,CAAU,EAAE,GAAA,EAAI;AAC3D,YAAA,IAAI,GAAA,EAAK;AAAA,UACX,CAAA,CAAA,MAAQ;AAAA,UAAC;AAAA,QACX;AAAA,MACF;AAEA,MAAA,IAAI,GAAA,EAAK;AACP,QAAA,MAAM,SAAA,GAAY,CAAC,GAAA,KAAa;AAC9B,UAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,UAAA,IAAI,OAAO,QAAQ,QAAA,EAAU;AAC3B,YAAA,IAAI;AAAE,cAAA,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,YAAG,CAAA,CAAA,MAAQ;AAAE,cAAA,OAAO,IAAA;AAAA,YAAM;AAAA,UACvD;AACA,UAAA,OAAO,GAAA;AAAA,QACT,CAAA;AAEA,QAAA,IAAA,CAAK,KAAA,CAAM,gBAAgB,CAAA,GAAI,GAAA,CAAI,QAAA,IAAY,MAAA;AAC/C,QAAA,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAA,GAAI,GAAA,CAAI,SAAA,IAAa,EAAA;AACjD,QAAA,IAAA,CAAK,KAAA,CAAM,sBAAsB,CAAA,GAAI,GAAA,CAAI,QAAA,IAAY,EAAA;AACrD,QAAA,IAAA,CAAK,KAAA,CAAM,qBAAqB,CAAA,GAAI,GAAA,CAAI,OAAA,IAAW,EAAA;AAEnD,QAAA,IAAI,GAAA,CAAI,aAAa,MAAA,EAAQ;AAC3B,UAAA,MAAM,IAAA,GAAO,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AAC/B,UAAA,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAA,GAAI,IAAA,EAAM,IAAA,IAAQ,EAAA;AAC9C,UAAA,IAAA,CAAK,MAAM,iBAAiB,CAAA,GAAI,MAAA,CAAO,IAAA,EAAM,QAAQ,KAAK,CAAA;AAC1D,UAAA,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAA,GAAI,IAAA,EAAM,QAAA,IAAY,EAAA;AAClD,UAAA,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAA,GAAI,IAAA,EAAM,QAAA,IAAY,EAAA;AAClD,UAAA,IAAA,CAAK,KAAA,CAAM,mBAAmB,CAAA,GAAI,IAAA,EAAM,SAAS,MAAA,GAAS,OAAA;AAAA,QAC5D,CAAA,MAAA,IAAW,GAAA,CAAI,QAAA,KAAa,QAAA,EAAU;AACpC,UAAA,MAAM,MAAA,GAAS,SAAA,CAAU,GAAA,CAAI,MAAM,CAAA;AACnC,UAAA,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAA,GAAI,MAAA,EAAQ,MAAA,IAAU,EAAA;AAAA,QACpD,CAAA,MAAA,IAAW,GAAA,CAAI,QAAA,KAAa,UAAA,EAAY;AACtC,UAAA,MAAM,QAAA,GAAW,SAAA,CAAU,GAAA,CAAI,QAAQ,CAAA;AACvC,UAAA,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAA,GAAI,QAAA,EAAU,MAAA,IAAU,EAAA;AAAA,QACtD,CAAA,MAAA,IAAW,GAAA,CAAI,QAAA,KAAa,SAAA,EAAW;AACrC,UAAA,MAAM,OAAA,GAAU,SAAA,CAAU,GAAA,CAAI,OAAO,CAAA;AACrC,UAAA,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAA,GAAI,OAAA,EAAS,MAAA,IAAU,EAAA;AAAA,QACrD,CAAA,MAAA,IAAW,GAAA,CAAI,QAAA,KAAa,KAAA,EAAO;AACjC,UAAA,MAAM,GAAA,GAAM,SAAA,CAAU,GAAA,CAAI,GAAG,CAAA;AAC7B,UAAA,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAA,GAAI,GAAA,EAAK,WAAA,IAAe,EAAA;AACpD,UAAA,IAAA,CAAK,KAAA,CAAM,iBAAiB,CAAA,GAAI,GAAA,EAAK,eAAA,IAAmB,EAAA;AAAA,QAC1D;AAAA,MACF;AAAA,IACF,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,IAAA,CAAK,oEAAoE,KAAK,CAAA;AAAA,IACxF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,GAAA,CAAI,GAAA,EAAa,MAAA,EAAiB,YAAA,EAA2C;AAE3E,IAAA,IAAI,KAAK,KAAA,CAAM,GAAG,GAAG,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAG1C,IAAA,IAAI,MAAA,IAAU,QAAQ,GAAA,CAAI,MAAM,GAAG,OAAO,OAAA,CAAQ,IAAI,MAAM,CAAA;AAG5D,IAAA,OAAO,YAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,gBAAA,GAAkC;AAChC,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,cAAA,EAAgB,gBAAgB,OAAO,CAAA;AAAA,MACtD,EAAA,EAAI;AAAA,QACF,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,gBAAgB,CAAA;AAAA,QACtD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,kBAAkB,WAAW,CAAA;AAAA,QACnE,aAAa,IAAA,CAAK,GAAA;AAAA,UAChB,0BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,iBAAiB,IAAA,CAAK,GAAA;AAAA,UACpB,8BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,qBAAA,EAAuB,kBAAkB,CAAA;AAAA,QAC5D,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,iBAAiB,CAAA;AAAA,QACxD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,gBAAgB;AAAA,OACxD;AAAA,MACA,EAAA,EAAI;AAAA,QACF,SAAA,EAAW,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,eAAe,CAAA;AAAA,QAC5D,WAAA,EAAa,IAAA,CAAK,GAAA,CAAI,0BAAA,EAA4B,kBAAkB,CAAA;AAAA,QACpE,iBAAiB,IAAA,CAAK,GAAA;AAAA,UACpB,8BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,WAAW,CAAA;AAAA,QACjD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,YAAY,CAAA;AAAA,QACnD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,WAAW;AAAA,OACnD;AAAA,MACA,GAAA,EAAK;AAAA,QACH,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,YAAY,CAAA;AAAA,QACnD,SAAA,EAAW,IAAA,CAAK,GAAA,CAAI,wBAAA,EAA0B,gBAAgB,CAAA;AAAA,QAC9D,WAAA,EAAa,IAAA,CAAK,GAAA,CAAI,0BAAA,EAA4B,kBAAkB,CAAA;AAAA,QACpE,UAAA,EAAY,IAAA,CAAK,GAAA,CAAI,yBAAA,EAA2B,iBAAiB,CAAA;AAAA,QACjE,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,qBAAA,EAAuB,aAAa,CAAA;AAAA,QACrD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,YAAY;AAAA,OACrD;AAAA,MACA,YAAA,EAAc;AAAA,QACZ,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,6BAAA,EAA+B,WAAW,CAAA;AAAA,QAC3D,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,6BAAA,EAA+B,aAAa,MAAM,CAAA;AAAA,QACnE,aAAa,IAAA,CAAK,GAAA;AAAA,UAChB,oCAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,iBAAiB,IAAA,CAAK,GAAA;AAAA,UACpB,wCAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,8BAAA,EAAgC,YAAY,CAAA;AAAA,QAC7D,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,6BAAA,EAA+B,WAAW;AAAA,OAC7D;AAAA,MACA,SAAA,EAAW;AAAA,QACT,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,0BAAA,EAA4B,WAAW,CAAA;AAAA,QACxD,SAAA,EAAW,IAAA,CAAK,GAAA,CAAI,8BAAA,EAAgC,eAAe,CAAA;AAAA,QACnE,kBAAkB,IAAA,CAAK,GAAA;AAAA,UACrB,sCAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,gBAAgB,IAAA,CAAK,GAAA;AAAA,UACnB,mCAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,2BAAA,EAA6B,YAAY,CAAA;AAAA,QAC1D,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,0BAAA,EAA4B,WAAW;AAAA,OAC1D;AAAA,MACA,MAAA,EAAQ;AAAA,QACN,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,eAAe,CAAA;AAAA,QACzD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,iBAAiB,WAAW,CAAA;AAAA,QACtE,aAAa,IAAA,CAAK,GAAA;AAAA,UAChB,8BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,iBAAiB,IAAA,CAAK,GAAA;AAAA,UACpB,kCAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,wBAAA,EAA0B,gBAAgB,CAAA;AAAA,QAC3D,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,eAAe;AAAA,OAC3D;AAAA,MACA,KAAA,EAAO;AAAA,QACL,aAAa,IAAA,CAAK,GAAA;AAAA,UAChB,4BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,eAAe,CAAA;AAAA,QACzD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,uBAAA,EAAyB,eAAe,CAAA;AAAA,QACzD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,sBAAA,EAAwB,cAAc;AAAA,OACzD;AAAA,MACA,GAAA,EAAK;AAAA,QACH,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,kBAAA,EAAoB,UAAU,CAAA;AAAA,QAC7C,IAAA,EAAM,SAAS,IAAA,CAAK,GAAA,CAAI,oBAAoB,UAAA,EAAY,IAAI,GAAI,EAAE,CAAA;AAAA,QAClE,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,kBAAA,EAAoB,UAAU,CAAA;AAAA,QAC7C,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,sBAAA,EAAwB,cAAc,CAAA;AAAA,QACzD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,YAAY,CAAA,KAAM,MAAA;AAAA,QACzD,OAAA,EAAS,IAAA,CAAK,GAAA,CAAI,sBAAA,EAAwB,cAAc,CAAA;AAAA,QACxD,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,oBAAA,EAAsB,YAAY;AAAA,OACrD;AAAA,MACA,UAAA,EAAY;AAAA,QACV,WAAW,IAAA,CAAK,GAAA;AAAA,UACd,+BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,4BAAA,EAA8B,oBAAoB,CAAA;AAAA,QACnE,WAAW,IAAA,CAAK,GAAA;AAAA,UACd,+BAAA;AAAA,UACA;AAAA,SACF;AAAA,QACA,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,2BAAA,EAA6B,mBAAmB;AAAA,OACnE;AAAA,MACA,KAAA,EAAO;AAAA,QACL,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,sBAAA,EAAwB,cAAc,CAAA;AAAA,QACvD,OAAA,EAAS,IAAA,CAAK,GAAA,CAAI,wBAAA,EAA0B,gBAAgB;AAAA,OAC9D;AAAA,MACA,KAAA,EAAO;AAAA,QACL,SAAA,EAAW,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,qBAAqB,kBAAkB,CAAA;AAAA,QAChF,OAAA,EAAS,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,qBAAqB,UAAU;AAAA;AACxE,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,cAAA,GAA8B;AAC5B,IAAA,OAAO;AAAA,MACL,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,gBAAA,EAAkB,kBAAkB,MAAM,CAAA;AAAA,MAC7D,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,iBAAA,EAAmB,WAAW,CAAA;AAAA,MAC7C,IAAA,EAAM,SAAS,IAAA,CAAK,GAAA,CAAI,mBAAmB,WAAA,EAAa,KAAK,GAAI,EAAE,CAAA;AAAA,MACnE,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,mBAAA,EAAqB,aAAa,CAAA,KAAM,MAAA;AAAA,MACzD,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,iBAAA,EAAmB,WAAW,CAAA;AAAA,MAC7C,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,iBAAA,EAAmB,WAAW,CAAA;AAAA,MAC7C,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,iBAAA,EAAmB,aAAa,qBAAqB,CAAA;AAAA,MACpE,QAAA,EAAU,IAAA,CAAK,GAAA,CAAI,sBAAA,EAAwB,kBAAkB,UAAU,CAAA;AAAA,MACvE,OAAA,EAAS,IAAA,CAAK,GAAA,CAAI,qBAAA,EAAuB,eAAe;AAAA,KAC1D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,aAAA,CAAc,KAAa,KAAA,EAA+C;AACxE,IAAA,IAAI,CAAC,OAAO,OAAO,KAAA;AACnB,IAAA,IAAI,cAAA,CAAc,cAAA,CAAe,QAAA,CAAS,GAAG,CAAA,EAAG;AAC9C,MAAA,OAAO,UAAA;AAAA,IACT;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,GAAA,CAAI,GAAA,EAAa,KAAA,EAAe,WAAA,EAAqC;AACzE,IAAA,MAAM,IAAA,CAAK,EAAA,CACR,MAAA,CAAO,QAAc,EACrB,MAAA,CAAO;AAAA,MACN,GAAA;AAAA,MACA,KAAA;AAAA,MACA,WAAA;AAAA,MACA,SAAA,sBAAe,IAAA;AAAK,KACrB,EACA,kBAAA,CAAmB;AAAA,MAClB,MAAA,EAAQ,CAAC,QAAA,CAAe,GAAG,CAAA;AAAA,MAC3B,KAAK,EAAE,KAAA,EAAO,aAAa,SAAA,kBAAW,IAAI,MAAK;AAAE,KAClD,CAAA;AACH,IAAA,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,GAAI,KAAA;AAAA,EACpB;AACF;;;ACvcA,IAAM,gBAAA,GAAmC;AAAA,EACvC,WAAA,EAAa,CAAC,IAAA,EAAM,QAAA,GAAW,MAAA,MAAY;AAAA,IACzC,OAAA,EAAS,2BAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAA,EAgBe,QAAQ,CAAA;AAAA;AAAA;AAAA,qBAAA,EAGV,IAAI,CAAA;AAAA;AAAA;AAAA,yDAAA,EAGgC,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAS3D,IAAA,EAAM,WAAW,QAAQ,CAAA;;AAAA,gDAAA,EAAwD,IAAI;;AAAA;;AAAA,kEAAA;AAAA,GACvF,CAAA;AAAA,EAEA,aAAA,EAAe,CAAC,IAAA,EAAM,QAAA,GAAW,MAAA,MAAY;AAAA,IAC3C,OAAA,EAAS,qBAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAkBW,QAAQ,CAAA;AAAA;AAAA;AAAA,qBAAA,EAGN,IAAI,CAAA;AAAA;AAAA;AAAA,yDAAA,EAGgC,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAW3D,IAAA,EAAM,CAAA;;AAAA,MAAA,EAAmC,QAAQ,CAAA;;AAAA,wFAAA,EAAgG,IAAI;;AAAA;;AAAA,iEAAA;AAAA,GACvJ,CAAA;AAAA,EAEA,OAAA,EAAS,CAAC,QAAA,GAAW,MAAA,MAAY;AAAA,IAC/B,OAAA,EAAS,qBAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mCAAA,EAe2B,QAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAiBzC,IAAA,EAAM,wBAAwB,QAAQ,CAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA,2CAAA;AAAA,GACxC,CAAA;AAAA,EAEA,aAAA,EAAe,CAAC,QAAA,EAAU,QAAA,EAAU,WAAW,MAAA,MAAY;AAAA,IACzD,OAAA,EAAS,yCAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAiBW,QAAQ,CAAA;AAAA;AAAA;AAAA,gCAAA,EAGK,QAAQ,CAAA;AAAA,iCAAA,EACP,IAAA,CAAK,KAAA,CAAM,QAAA,GAAW,GAAK,CAAC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAgB3D,IAAA,EAAM,CAAA;;AAAA,MAAA,EAAmC,QAAQ,CAAA;;AAAA,gFAAA,EAAwF,QAAQ,CAAA;;AAAA,kBAAA,EAA2B,IAAA,CAAK,KAAA,CAAM,QAAA,GAAW,GAAK,CAAC,CAAA;;AAAA;;AAAA,iEAAA;AAAA,GAC1M,CAAA;AAAA,EAEA,eAAA,EAAiB,CAAC,QAAA,GAAW,MAAA,MAAY;AAAA,IACvC,OAAA,EAAS,gCAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAgBW,QAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAUzB,IAAA,EAAM,CAAA;;AAAA,MAAA,EAA6B,QAAQ,CAAA;;AAAA;;AAAA;;AAAA,uEAAA;AAAA,GAC7C,CAAA;AAAA,EAEA,QAAA,EAAU,CAAC,QAAA,EAAU,IAAA,EAAM,WAAW,MAAA,MAAY;AAAA,IAChD,OAAA,EAAS,2BAAA;AAAA,IACT,IAAA,EAAM;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,mBAAA,EAiBW,QAAQ,CAAA;AAAA;AAAA;AAAA,0CAAA,EAGe,QAAQ,CAAA;AAAA,sCAAA,EACZ,IAAI,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAAA,CAAA;AAAA,IAgBxC,IAAA,EAAM,CAAA;;AAAA,MAAA,EAA+B,QAAQ,CAAA;;AAAA;;AAAA,UAAA,EAA8D,QAAQ;AAAA,MAAA,EAAW,IAAI;;AAAA,gFAAA;AAAA,GACpI;AACF,CAAA;AAIO,IAAM,cAAA,GAAN,MAAM,eAAA,CAAe;AAAA,EAClB,WAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,sBAAA,GAAkC,KAAA;AAAA,EAE1C,WAAA,CAAY,QAAqB,SAAA,EAAqC;AACpE,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,EAAE,GAAG,gBAAA,EAAkB,GAAG,SAAA,EAAU;AAAA,EACvD;AAAA,EAEA,MAAc,iBAAA,GAA2D;AACvE,IAAA,IAAI,KAAK,sBAAA,EAAwB;AAC/B,MAAA,OAAO,IAAA,CAAK,WAAA;AAAA,IACd;AAEA,IAAA,MAAM,EAAE,OAAA,EAAS,UAAA,EAAW,GAAI,MAAM,OAAO,YAAY,CAAA;AAEzD,IAAA,IAAI,KAAK,MAAA,CAAO,QAAA,KAAa,MAAA,IAAU,IAAA,CAAK,OAAO,IAAA,EAAM;AACvD,MAAA,IAAA,CAAK,WAAA,GAAc,WAAW,eAAA,CAAgB;AAAA,QAC5C,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA;AAAA,QACvB,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA;AAAA,QACvB,MAAA,EAAQ,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,MAAA;AAAA,QACzB,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK;AAAA,OACxB,CAAA;AAAA,IACH,WAAW,IAAA,CAAK,MAAA,CAAO,aAAa,KAAA,IAAS,IAAA,CAAK,OAAO,GAAA,EAAK;AAC5D,MAAA,IAAA,CAAK,WAAA,GAAc,WAAW,eAAA,CAAgB;AAAA,QAC5C,IAAA,EAAM,CAAA,WAAA,EAAc,IAAA,CAAK,MAAA,CAAO,IAAI,MAAM,CAAA,cAAA,CAAA;AAAA,QAC1C,IAAA,EAAM,GAAA;AAAA,QACN,MAAA,EAAQ,KAAA;AAAA,QACR,IAAA,EAAM;AAAA,UACJ,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI,WAAA;AAAA,UACtB,IAAA,EAAM,IAAA,CAAK,MAAA,CAAO,GAAA,CAAI;AAAA;AACxB,OACD,CAAA;AAAA,IACH;AAEA,IAAA,IAAA,CAAK,sBAAA,GAAyB,IAAA;AAC9B,IAAA,OAAO,IAAA,CAAK,WAAA;AAAA,EACd;AAAA,EAEA,MAAM,KAAK,OAAA,EAAqC;AAC9C,IAAA,MAAM,EAAE,QAAA,EAAU,IAAA,EAAM,UAAU,OAAA,EAAS,aAAA,KAAkB,IAAA,CAAK,MAAA;AAClE,IAAA,MAAM,QAAA,GAAW,CAAA,CAAA,EAAI,QAAA,IAAY,UAAU,MAAM,IAAI,CAAA,CAAA,CAAA;AACrD,IAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,IAAW,aAAA;AAEnC,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,mCAAA,EAAsC,QAAQ,CAAA,GAAA,CAAK,CAAA;AAC/D,IAAA,OAAA,CAAQ,GAAA;AAAA,MACN,CAAA,qBAAA,EAAwB,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA,GAAI,OAAA,CAAQ,EAAA,CAAG,IAAA,CAAK,IAAI,CAAA,GAAI,OAAA,CAAQ,EAAE,CAAA;AAAA,KACxF;AACA,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,0BAAA,EAA6B,OAAA,CAAQ,OAAO,CAAA,CAAE,CAAA;AAE1D,IAAA,IAAI;AACF,MAAA,IAAI,MAAA;AACJ,MAAA,QAAQ,QAAA;AAAU,QAChB,KAAK,MAAA;AAAA,QACL,KAAK,KAAA;AACH,UAAA;AACE,YAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,iBAAA,EAAkB;AACjD,YAAA,IAAI,CAAC,WAAA;AACH,cAAA,MAAM,IAAI,KAAA,CAAM,CAAA,EAAG,QAAQ,CAAA,4BAAA,CAA8B,CAAA;AAC3D,YAAA,MAAA,GAAS,MAAM,YAAY,QAAA,CAAS;AAAA,cAClC,IAAA,EAAM,QAAA;AAAA,cACN,EAAA,EAAI,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA,GACxB,OAAA,CAAQ,EAAA,CAAG,IAAA,CAAK,IAAI,CAAA,GACpB,OAAA,CAAQ,EAAA;AAAA,cACZ,SAAS,OAAA,CAAQ,OAAA;AAAA,cACjB,MAAM,OAAA,CAAQ,IAAA;AAAA,cACd,MAAM,OAAA,CAAQ,IAAA;AAAA,cACd;AAAA,aACD,CAAA;AAAA,UACH;AACA,UAAA;AAAA,QAEF,KAAK,QAAA;AACH,UAAA,MAAA,GAAS,MAAM,IAAA,CAAK,aAAA,CAAc,QAAA,EAAU,SAAS,OAAO,CAAA;AAC5D,UAAA;AAAA,QAEF,KAAK,UAAA;AACH,UAAA,MAAA,GAAS,MAAM,IAAA,CAAK,eAAA,CAAgB,QAAA,EAAU,SAAS,OAAO,CAAA;AAC9D,UAAA;AAAA,QAEF,KAAK,SAAA;AACH,UAAA,MAAA,GAAS,MAAM,IAAA,CAAK,cAAA,CAAe,QAAA,EAAU,SAAS,OAAO,CAAA;AAC7D,UAAA;AAAA,QAEF;AACE,UAAA,MAAM,IAAI,KAAA,CAAM,CAAA,4BAAA,EAA+B,QAAQ,CAAA,CAAE,CAAA;AAAA;AAE7D,MAAA,OAAA,CAAQ,IAAI,CAAA,qDAAA,CAAuD,CAAA;AACnE,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,KAAA,EAAY;AACnB,MAAA,OAAA,CAAQ,KAAA,CAAM,CAAA,sCAAA,CAAA,EAA0C,KAAA,CAAM,OAAO,CAAA;AACrE,MAAA,IAAI,MAAM,QAAA,EAAU;AAClB,QAAA,OAAA,CAAQ,KAAA;AAAA,UACN,CAAA,uCAAA,CAAA;AAAA,UACA,IAAA,CAAK,SAAA,CAAU,KAAA,CAAM,QAAA,EAAU,MAAM,CAAC;AAAA,SACxC;AAAA,MACF;AACA,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF;AAAA,EAEA,MAAc,aAAA,CACZ,IAAA,EACA,OAAA,EACA,OAAA,EACA;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,MAAA;AACnC,IAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAErD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,IAAA;AAAA,MACA,IAAI,OAAA,CAAQ,EAAA;AAAA,MACZ,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,MAAM,OAAA,CAAQ,IAAA;AAAA,MACd,QAAA,EAAU;AAAA,KACZ;AAEA,IAAA,OAAA,CAAQ,IAAI,CAAA,sCAAA,CAAwC,CAAA;AACpD,IAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,+BAAA,EAAiC;AAAA,MACxD,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,UAAU,MAAM,CAAA,CAAA;AAAA,QAC/B,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAED,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,IAAA,EAAK;AAC9B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,KAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,IAC1D;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACnB;AAAA,EAEA,MAAc,eAAA,CACZ,IAAA,EACA,OAAA,EACA,OAAA,EACA;AACA,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,MAAA;AACrC,IAAA,IAAI,CAAC,MAAA,EAAQ,MAAM,IAAI,MAAM,0BAA0B,CAAA;AAEvD,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,gBAAA,EAAkB;AAAA,QAChB;AAAA,UACE,EAAA,EAAI,MAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA,GACxB,OAAA,CAAQ,GAAG,GAAA,CAAI,CAAC,WAAW,EAAE,KAAA,GAAQ,CAAA,GACrC,CAAC,EAAE,KAAA,EAAO,OAAA,CAAQ,IAAI;AAAA;AAC5B,OACF;AAAA,MACA,IAAA,EAAM;AAAA,QACJ,OAAO,IAAA,CAAK,KAAA,CAAM,QAAQ,CAAA,GAAI,CAAC,CAAA,IAAK,IAAA;AAAA,QACpC,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,QAAQ,IAAI,CAAC;AAAA,OAChC;AAAA,MACA,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,OAAA,EAAS;AAAA,QACP,EAAE,IAAA,EAAM,YAAA,EAAc,KAAA,EAAO,OAAA,CAAQ,QAAQ,EAAA,EAAG;AAAA,QAChD,EAAE,IAAA,EAAM,WAAA,EAAa,KAAA,EAAO,QAAQ,IAAA;AAAK,OAC3C;AAAA,MACA,QAAA,EAAU,OAAA,GAAU,EAAE,KAAA,EAAO,SAAQ,GAAI;AAAA,KAC3C;AAEA,IAAA,OAAA,CAAQ,IAAI,CAAA,wCAAA,CAA0C,CAAA;AACtD,IAAA,MAAM,IAAA,GAAO,MAAM,KAAA,CAAM,uCAAA,EAAyC;AAAA,MAChE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,UAAU,MAAM,CAAA,CAAA;AAAA,QAC/B,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,IAAI;AAAA,KAC1B,CAAA;AAED,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,IAAA,EAAK;AAC9B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,KAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,IAC5D;AACA,IAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,EACzB;AAAA,EAEA,MAAc,cAAA,CACZ,IAAA,EACA,OAAA,EACA,OAAA,EACA;AACA,IAAA,MAAM,EAAE,QAAQ,MAAA,EAAQ,MAAA,KAAW,IAAA,CAAK,MAAA,CAAO,WAAW,EAAC;AAC3D,IAAA,IAAI,CAAC,MAAA,IAAU,CAAC,QAAQ,MAAM,IAAI,MAAM,wBAAwB,CAAA;AAEhE,IAAA,MAAM,IAAA,GAAO,MAAA,KAAW,IAAA,GAAO,oBAAA,GAAuB,iBAAA;AACtD,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,CAAA,IAAA,EAAO,MAAM,CAAA,CAAE,CAAA;AAEjC,IAAA,MAAM,QAAA,GAAW,IAAI,eAAA,EAAgB;AACrC,IAAA,QAAA,CAAS,MAAA,CAAO,QAAQ,IAAI,CAAA;AAC5B,IAAA,MAAM,EAAA,GAAK,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,EAAE,CAAA,GAAI,OAAA,CAAQ,EAAA,CAAG,IAAA,CAAK,IAAI,CAAA,GAAI,OAAA,CAAQ,EAAA;AACvE,IAAA,QAAA,CAAS,MAAA,CAAO,MAAM,EAAE,CAAA;AACxB,IAAA,QAAA,CAAS,MAAA,CAAO,SAAA,EAAW,OAAA,CAAQ,OAAO,CAAA;AAC1C,IAAA,QAAA,CAAS,MAAA,CAAO,MAAA,EAAQ,OAAA,CAAQ,IAAI,CAAA;AACpC,IAAA,IAAI,QAAQ,IAAA,EAAM,QAAA,CAAS,MAAA,CAAO,MAAA,EAAQ,QAAQ,IAAI,CAAA;AACtD,IAAA,IAAI,OAAA,EAAS,QAAA,CAAS,MAAA,CAAO,YAAA,EAAc,OAAO,CAAA;AAElD,IAAA,OAAA,CAAQ,GAAA,CAAI,CAAA,sCAAA,EAAyC,MAAA,IAAU,IAAI,CAAA,IAAA,CAAM,CAAA;AACzE,IAAA,MAAM,OAAO,MAAM,KAAA,CAAM,WAAW,IAAI,CAAA,IAAA,EAAO,MAAM,CAAA,SAAA,CAAA,EAAa;AAAA,MAChE,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS;AAAA,QACP,aAAA,EAAe,SAAS,IAAI,CAAA,CAAA;AAAA,QAC5B,cAAA,EAAgB;AAAA,OAClB;AAAA,MACA,IAAA,EAAM;AAAA,KACP,CAAA;AAED,IAAA,IAAI,CAAC,KAAK,EAAA,EAAI;AACZ,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,IAAA,EAAK;AAC9B,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,eAAA,EAAkB,KAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAE,CAAA;AAAA,IAC3D;AACA,IAAA,OAAO,KAAK,IAAA,EAAK;AAAA,EACnB;AAAA,EAEA,YAAA,GAA+B;AAC7B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA,EAEA,MAAM,gBAAA,GAAqC;AACzC,IAAA,IAAI,KAAK,MAAA,CAAO,QAAA,KAAa,UAAU,IAAA,CAAK,MAAA,CAAO,aAAa,KAAA,EAAO;AACrE,MAAA,IAAI;AACF,QAAA,MAAM,WAAA,GAAc,MAAM,IAAA,CAAK,iBAAA,EAAkB;AACjD,QAAA,IAAI,WAAA,EAAa;AACf,UAAA,MAAM,YAAY,MAAA,EAAO;AACzB,UAAA,OAAO,IAAA;AAAA,QACT;AAAA,MACF,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,OAAO,CAAC,EACN,IAAA,CAAK,MAAA,CAAO,MAAA,EAAQ,MAAA,IACpB,IAAA,CAAK,MAAA,CAAO,QAAA,EAAU,MAAA,IACtB,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,MAAA,CAAA;AAAA,EAEzB;AAAA,EAEA,aAAa,WAAW,EAAA,EAAyC;AAC/D,IAAA,MAAM,aAAA,GAAgB,IAAI,aAAA,CAAc,EAAE,CAAA;AAC1C,IAAA,MAAM,cAAc,IAAA,EAAK;AACzB,IAAA,MAAM,MAAA,GAAS,cAAc,cAAA,EAAe;AAE5C,IAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AACpB,MAAA,OAAO,KAAK,OAAA,EAAQ;AAAA,IACtB;AAEA,IAAA,MAAM,WAAA,GAA2B;AAAA,MAC/B,QAAA,EAAW,OAAO,QAAA,IAAoB,MAAA;AAAA,MACtC,IAAA,EAAM,OAAO,IAAA,IAAQ,qBAAA;AAAA,MACrB,UAAU,MAAA,CAAO,QAAA;AAAA,MACjB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,IAAA,EACE,MAAA,CAAO,QAAA,KAAa,MAAA,GAChB;AAAA,QACE,IAAA,EAAM,OAAO,IAAA,IAAQ,EAAA;AAAA,QACrB,IAAA,EAAM,OAAO,IAAA,IAAQ,GAAA;AAAA,QACrB,MAAA,EAAQ,OAAO,MAAA,IAAU,KAAA;AAAA,QACzB,IAAA,EAAM,EAAE,IAAA,EAAM,MAAA,CAAO,QAAQ,EAAA,EAAI,IAAA,EAAM,MAAA,CAAO,IAAA,IAAQ,EAAA;AAAG,OAC3D,GACA,MAAA;AAAA,MACN,MAAA,EACE,OAAO,QAAA,KAAa,QAAA,GAChB,EAAE,MAAA,EAAQ,MAAA,CAAO,IAAA,IAAQ,EAAA,EAAG,GAC5B,MAAA;AAAA,MACN,QAAA,EACE,OAAO,QAAA,KAAa,UAAA,GAChB,EAAE,MAAA,EAAQ,MAAA,CAAO,IAAA,IAAQ,EAAA,EAAG,GAC5B,MAAA;AAAA,MACN,OAAA,EACE,MAAA,CAAO,QAAA,KAAa,SAAA,GAChB;AAAA,QACE,MAAA,EAAQ,OAAO,IAAA,IAAQ,EAAA;AAAA,QACvB,MAAA,EAAQ,OAAO,IAAA,IAAQ,EAAA;AAAA,QACvB,MAAA,EAAS,MAAA,CAAO,MAAA,GAAS,IAAA,GAAO;AAAA,OAClC,GACA,MAAA;AAAA,MACN,GAAA,EACE,MAAA,CAAO,QAAA,KAAa,KAAA,GAChB;AAAA,QACE,WAAA,EAAa,OAAO,IAAA,IAAQ,EAAA;AAAA,QAC5B,eAAA,EAAiB,OAAO,IAAA,IAAQ,EAAA;AAAA,QAChC,MAAA,EAAQ,OAAO,IAAA,IAAQ;AAAA,OACzB,GACA;AAAA,KACR;AAEA,IAAA,OAAO,IAAI,gBAAe,WAAW,CAAA;AAAA,EACvC;AAAA,EAEA,OAAO,OAAA,GAAiC;AACtC,IAAA,MAAM,QAAA,GAAY,OAAA,CAAQ,GAAA,CAAI,cAAA,IAA0B,MAAA;AACxD,IAAA,MAAM,OACJ,OAAA,CAAQ,GAAA,CAAI,SAAA,IACZ,OAAA,CAAQ,IAAI,YAAA,IACZ,qBAAA;AACF,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,cAAA,IAAkB,UAAA;AAC/C,IAAA,MAAM,OAAA,GAAU,QAAQ,GAAA,CAAI,aAAA;AAE5B,IAAA,IAAI,aAAa,MAAA,EAAQ;AACvB,MAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,SAAA;AACzB,MAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,SAAA;AACzB,MAAA,MAAM,IAAA,GAAO,QAAQ,GAAA,CAAI,SAAA;AACzB,MAAA,IAAI,CAAC,IAAA,IAAQ,CAAC,IAAA,IAAQ,CAAC,MAAM,OAAO,IAAA;AAEpC,MAAA,OAAO,IAAI,eAAA,CAAe;AAAA,QACxB,QAAA,EAAU,MAAA;AAAA,QACV,IAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,IAAA,EAAM;AAAA,UACJ,IAAA;AAAA,UACA,MAAM,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,SAAA,IAAa,OAAO,EAAE,CAAA;AAAA,UACjD,MAAA,EAAQ,OAAA,CAAQ,GAAA,CAAI,WAAA,KAAgB,MAAA;AAAA,UACpC,IAAA,EAAM,EAAE,IAAA,EAAM,IAAA;AAAK;AACrB,OACD,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,aAAa,QAAA,EAAU;AACzB,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,cAAA,IAAkB,QAAQ,GAAA,CAAI,SAAA;AACzD,MAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,MAAA,OAAO,IAAI,eAAA,CAAe;AAAA,QACxB,QAAA,EAAU,QAAA;AAAA,QACV,IAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,MAAA,EAAQ,EAAE,MAAA;AAAO,OAClB,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,aAAa,UAAA,EAAY;AAC3B,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,gBAAA,IAAoB,QAAQ,GAAA,CAAI,SAAA;AAC3D,MAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AACpB,MAAA,OAAO,IAAI,eAAA,CAAe;AAAA,QACxB,QAAA,EAAU,UAAA;AAAA,QACV,IAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,QAAA,EAAU,EAAE,MAAA;AAAO,OACpB,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,aAAa,SAAA,EAAW;AAC1B,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,eAAA,IAAmB,QAAQ,GAAA,CAAI,SAAA;AAC1D,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,GAAA,CAAI,cAAA,IAAkB,QAAQ,GAAA,CAAI,SAAA;AACzD,MAAA,IAAI,CAAC,MAAA,IAAU,CAAC,MAAA,EAAQ,OAAO,IAAA;AAC/B,MAAA,OAAO,IAAI,eAAA,CAAe;AAAA,QACxB,QAAA,EAAU,SAAA;AAAA,QACV,IAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,OAAA,EAAS;AAAA,UACP,MAAA;AAAA,UACA,MAAA;AAAA,UACA,MAAA,EAAS,QAAQ,GAAA,CAAI,cAAA,KAClB,QAAQ,GAAA,CAAI,WAAA,KAAgB,SAAS,IAAA,GAAO,IAAA;AAAA;AACjD,OACD,CAAA;AAAA,IACH;AAEA,IAAA,IAAI,aAAa,KAAA,EAAO;AACtB,MAAA,MAAM,WAAA,GACJ,OAAA,CAAQ,GAAA,CAAI,iBAAA,IAAqB,QAAQ,GAAA,CAAI,SAAA;AAC/C,MAAA,MAAM,eAAA,GACJ,OAAA,CAAQ,GAAA,CAAI,qBAAA,IAAyB,QAAQ,GAAA,CAAI,SAAA;AACnD,MAAA,MAAM,SACJ,OAAA,CAAQ,GAAA,CAAI,UAAA,IAAc,OAAA,CAAQ,IAAI,SAAA,IAAa,WAAA;AACrD,MAAA,IAAI,CAAC,WAAA,IAAe,CAAC,eAAA,EAAiB,OAAO,IAAA;AAC7C,MAAA,OAAO,IAAI,eAAA,CAAe;AAAA,QACxB,QAAA,EAAU,KAAA;AAAA,QACV,IAAA;AAAA,QACA,QAAA;AAAA,QACA,OAAA;AAAA,QACA,GAAA,EAAK,EAAE,WAAA,EAAa,eAAA,EAAiB,MAAA;AAAO,OAC7C,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;AClqBO,IAAM,uBAAA,GAAgD;AAAA,EAC3D,SAAA,EAAW,EAAA;AAAA,EACX,gBAAA,EAAkB,IAAA;AAAA,EAClB,gBAAA,EAAkB,IAAA;AAAA,EAClB,cAAA,EAAgB,IAAA;AAAA,EAChB,mBAAA,EAAqB,IAAA;AAAA,EACrB,YAAA,EAAc,CAAA;AAAA,EACd,SAAA,EAAW;AACb,CAAA;AAEO,IAAM,iBAAN,MAAqB;AAAA,EAClB,MAAA;AAAA,EAER,WAAA,CAAY,MAAA,GAAwC,EAAC,EAAG;AACtD,IAAA,IAAA,CAAK,MAAA,GAAS,EAAE,GAAG,uBAAA,EAAyB,GAAG,MAAA,EAAO;AAAA,EACxD;AAAA,EAEA,SAAS,QAAA,EAAoC;AAC3C,IAAA,MAAM,SAAmB,EAAC;AAE1B,IAAA,IAAI,KAAK,MAAA,CAAO,SAAA,IAAa,SAAS,MAAA,GAAS,IAAA,CAAK,OAAO,SAAA,EAAW;AACpE,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,CAAA,yBAAA,EAA4B,IAAA,CAAK,MAAA,CAAO,SAAS,CAAA,WAAA;AAAA,OACnD;AAAA,IACF;AAEA,IAAA,IAAI,QAAA,CAAS,MAAA,GAAS,IAAA,CAAK,MAAA,CAAO,SAAA,EAAW;AAC3C,MAAA,MAAA,CAAO,IAAA;AAAA,QACL,CAAA,0BAAA,EAA6B,IAAA,CAAK,MAAA,CAAO,SAAS,CAAA,WAAA;AAAA,OACpD;AAAA,IACF;AAEA,IAAA,IAAI,KAAK,MAAA,CAAO,gBAAA,IAAoB,CAAC,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC3D,MAAA,MAAA,CAAO,KAAK,qDAAqD,CAAA;AAAA,IACnE;AAEA,IAAA,IAAI,KAAK,MAAA,CAAO,gBAAA,IAAoB,CAAC,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC3D,MAAA,MAAA,CAAO,KAAK,qDAAqD,CAAA;AAAA,IACnE;AAEA,IAAA,IAAI,KAAK,MAAA,CAAO,cAAA,IAAkB,CAAC,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG;AACzD,MAAA,MAAA,CAAO,KAAK,2CAA2C,CAAA;AAAA,IACzD;AAEA,IAAA,IACE,KAAK,MAAA,CAAO,mBAAA,IACZ,CAAC,uCAAA,CAAwC,IAAA,CAAK,QAAQ,CAAA,EACtD;AACA,MAAA,MAAA,CAAO,KAAK,sDAAsD,CAAA;AAAA,IACpE;AAEA,IAAA,MAAM,eAAA,GAAkB;AAAA,MACtB,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA,SAAA;AAAA,MACA,SAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,WAAA;AAAA,MACA,QAAA;AAAA,MACA,QAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,IAAI,eAAA,CAAgB,QAAA,CAAS,QAAA,CAAS,WAAA,EAAa,CAAA,EAAG;AACpD,MAAA,MAAA,CAAO,IAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,cAAc,IAAA,CAAK,QAAQ,KAAK,UAAA,CAAW,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC7D,MAAA,MAAA,CAAO,IAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IAAI,WAAA,CAAY,IAAA,CAAK,QAAQ,CAAA,EAAG;AAC9B,MAAA,MAAA,CAAO,IAAA;AAAA,QACL;AAAA,OACF;AAAA,IACF;AAEA,IAAA,IACE,+EAAA,CAAgF,IAAA;AAAA,MAC9E;AAAA,KACF,EACA;AACA,MAAA,MAAA,CAAO,KAAK,yDAAyD,CAAA;AAAA,IACvE;AAEA,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,OAAO,MAAA,KAAW,CAAA;AAAA,MACzB;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,CACJ,YAAA,EACA,OAAA,EACA,QAAA,EAC2B;AAC3B,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,IAAA;AAAA,MACP,QAAQ;AAAC,KACX;AAAA,EACF;AAAA,EAEA,MAAM,WAAA,CACJ,QAAA,EACA,OAAA,EACA,QAAA,EACkB;AAClB,IAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,MAAA,IAAI,MAAM,QAAA,CAAS,QAAA,EAAU,IAAI,CAAA,EAAG;AAClC,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,gBAAA,CAAiB,SAAiB,EAAA,EAAY;AAC5C,IAAA,MAAM,SAAA,GAAY,4BAAA;AAClB,IAAA,MAAM,SAAA,GAAY,4BAAA;AAClB,IAAA,MAAM,OAAA,GAAU,YAAA;AAChB,IAAA,MAAM,OAAA,GAAU,4BAAA;AAEhB,IAAA,IAAI,QAAA,GAAW,EAAA;AAEf,IAAA,QAAA,IAAY,SAAA,CAAU,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,SAAA,CAAU,MAAM,CAAC,CAAA;AAClE,IAAA,QAAA,IAAY,SAAA,CAAU,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,SAAA,CAAU,MAAM,CAAC,CAAA;AAClE,IAAA,QAAA,IAAY,OAAA,CAAQ,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,OAAA,CAAQ,MAAM,CAAC,CAAA;AAC9D,IAAA,QAAA,IAAY,OAAA,CAAQ,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,OAAA,CAAQ,MAAM,CAAC,CAAA;AAE9D,IAAA,MAAM,QAAA,GAAW,SAAA,GAAY,SAAA,GAAY,OAAA,GAAU,OAAA;AACnD,IAAA,KAAA,IAAS,CAAA,GAAI,QAAA,CAAS,MAAA,EAAQ,CAAA,GAAI,QAAQ,CAAA,EAAA,EAAK;AAC7C,MAAA,QAAA,IAAY,QAAA,CAAS,KAAK,KAAA,CAAM,IAAA,CAAK,QAAO,GAAI,QAAA,CAAS,MAAM,CAAC,CAAA;AAAA,IAClE;AAEA,IAAA,OAAO,QAAA,CACJ,KAAA,CAAM,EAAE,CAAA,CACR,IAAA,CAAK,MAAM,IAAA,CAAK,MAAA,EAAO,GAAI,GAAG,CAAA,CAC9B,IAAA,CAAK,EAAE,CAAA;AAAA,EACZ;AAAA,EAEA,YAAY,QAAA,EAIV;AACA,IAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,IAAA,MAAM,WAAqB,EAAC;AAE5B,IAAA,IAAI,QAAA,CAAS,MAAA,IAAU,CAAA,EAAG,KAAA,IAAS,CAAA;AACnC,IAAA,IAAI,QAAA,CAAS,MAAA,IAAU,EAAA,EAAI,KAAA,IAAS,CAAA;AACpC,IAAA,IAAI,QAAA,CAAS,MAAA,IAAU,EAAA,EAAI,KAAA,IAAS,CAAA;AAEpC,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AACrC,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AACrC,IAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AACrC,IAAA,IAAI,iCAAA,CAAkC,IAAA,CAAK,QAAQ,CAAA,EAAG,KAAA,IAAS,CAAA;AAE/D,IAAA,IAAI,QAAA,CAAS,MAAA,GAAS,CAAA,EAAG,KAAA,IAAS,CAAA;AAClC,IAAA,IAAI,QAAA,CAAS,MAAA,GAAS,EAAA,EAAI,KAAA,IAAS,CAAA;AAEnC,IAAA,MAAM,WAAA,GAAc,IAAI,GAAA,CAAI,QAAQ,CAAA,CAAE,IAAA;AACtC,IAAA,IAAI,WAAA,GAAc,GAAG,KAAA,IAAS,CAAA;AAC9B,IAAA,IAAI,WAAA,GAAc,IAAI,KAAA,IAAS,CAAA;AAE/B,IAAA,IAAI,KAAA;AACJ,IAAA,IAAI,SAAS,CAAA,EAAG;AACd,MAAA,KAAA,GAAQ,MAAA;AACR,MAAA,QAAA,CAAS,KAAK,qBAAqB,CAAA;AACnC,MAAA,QAAA,CAAS,KAAK,yCAAyC,CAAA;AAAA,IACzD,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,MAAA,KAAA,GAAQ,MAAA;AACR,MAAA,QAAA,CAAS,KAAK,wBAAwB,CAAA;AACtC,MAAA,QAAA,CAAS,KAAK,2BAA2B,CAAA;AAAA,IAC3C,CAAA,MAAA,IAAW,SAAS,CAAA,EAAG;AACrB,MAAA,KAAA,GAAQ,MAAA;AACR,MAAA,QAAA,CAAS,KAAK,8CAA8C,CAAA;AAAA,IAC9D,CAAA,MAAO;AACL,MAAA,KAAA,GAAQ,QAAA;AAAA,IACV;AAEA,IAAA,OAAO,EAAE,KAAA,EAAO,KAAA,EAAO,QAAA,EAAS;AAAA,EAClC;AAAA,EAEA,UAAU,MAAA,EAA6C;AACrD,IAAA,IAAA,CAAK,SAAS,EAAE,GAAG,IAAA,CAAK,MAAA,EAAQ,GAAG,MAAA,EAAO;AAAA,EAC5C;AAAA,EAEA,SAAA,GAAkC;AAChC,IAAA,OAAO,EAAE,GAAG,IAAA,CAAK,MAAA,EAAO;AAAA,EAC1B;AACF","file":"chunk-6UNONDW7.js","sourcesContent":["import { eq } from \"drizzle-orm\";\nimport { settings as settingsSchema } from \"../database/drizzle/schema/settings.js\";\n\nlet _settingsTableEnsured = false;\n\nexport interface S3CompatibleConfig {\n  bucket?: string;\n  region?: string;\n  accessKeyId?: string;\n  secretAccessKey?: string;\n  endpoint?: string;\n  cdnUrl?: string;\n  prefix?: string;\n}\n\nexport interface R2Config {\n  accountId?: string;\n  accessKeyId?: string;\n  secretAccessKey?: string;\n  bucket?: string;\n  cdnUrl?: string;\n  prefix?: string;\n  publicDevUrl?: string;\n}\n\nexport interface GCSConfig {\n  bucket?: string;\n  projectId?: string;\n  clientEmail?: string;\n  privateKey?: string;\n  cdnUrl?: string;\n  prefix?: string;\n}\n\nexport interface BackblazeConfig {\n  bucket?: string;\n  accountId?: string;\n  applicationKeyId?: string;\n  applicationKey?: string;\n  cdnUrl?: string;\n  prefix?: string;\n}\n\nexport interface BunnyConfig {\n  storageZone?: string;\n  apiKey?: string;\n  cdnUrl?: string;\n  prefix?: string;\n}\n\nexport interface FTPConfig {\n  host?: string;\n  port?: number;\n  user?: string;\n  password?: string;\n  secure?: boolean;\n  baseUrl?: string;\n  prefix?: string;\n}\n\nexport interface StorageConfig {\n  type: string;\n  s3: S3CompatibleConfig;\n  r2: R2Config;\n  gcs: GCSConfig;\n  digitalocean: S3CompatibleConfig;\n  backblaze: BackblazeConfig;\n  wasabi: S3CompatibleConfig;\n  bunny: BunnyConfig;\n  ftp: FTPConfig;\n  cloudinary: {\n    cloudName?: string;\n    apiKey?: string;\n    apiSecret?: string;\n    folder?: string;\n  };\n  imgix: {\n    domain?: string;\n    signKey?: string;\n  };\n  local: {\n    uploadDir?: string;\n    baseUrl?: string;\n  };\n}\n\nexport interface EmailConfig {\n  provider?: string;\n  host?: string;\n  port?: number;\n  secure?: boolean;\n  user?: string;\n  pass?: string;\n  from?: string;\n  fromName?: string;\n  replyTo?: string;\n}\n\nexport class ConfigService {\n  private db: any;\n  private cache: Record<string, string> = {};\n  private loaded = false;\n  private static readonly SENSITIVE_KEYS = [\n    \"storage.s3.secret_access_key\",\n    \"storage.r2.secret_access_key\",\n    \"storage.gcs.private_key\",\n    \"storage.backblaze.application_key\",\n    \"storage.wasabi.secret_access_key\",\n    \"storage.ftp.password\",\n    \"storage.bunny.api_key\",\n    \"storage.cloudinary.api_secret\",\n    \"storage.imgix.sign_key\",\n    \"email.smtp.pass\",\n    \"auth.jwt_secret\",\n    \"auth.github_secret\",\n    \"auth.google_secret\",\n    \"auth.app_secret\",\n    \"database.url\",\n    \"redis.url\",\n    \"auth.admin_password\",\n  ];\n\n  constructor(db: any) {\n    this.db = db;\n  }\n\n  /**\n   * Initialize the service by loading all settings from the database\n   */\n  async load(): Promise<void> {\n    if (this.loaded) return;\n\n    await this.ensureSettingsTable();\n\n    try {\n      if (typeof this.db?.select === \"function\") {\n        const allSettings = await this.db.select().from(settingsSchema);\n        this.cache = allSettings.reduce((acc: any, row: any) => {\n          acc[row.key] = row.value;\n          return acc;\n        }, {});\n      }\n      \n      // Always try to load from globals to pick up CMS-configured storage settings\n      await this.loadFromGlobals();\n    } catch (error) {\n      console.warn(\n        \"ConfigService: Could not load settings from database, using environment fallbacks.\",\n      );\n    }\n\n    this.loaded = true;\n  }\n\n  private async ensureSettingsTable(): Promise<void> {\n    if (_settingsTableEnsured) return;\n\n    try {\n      if (typeof this.db?.execute === \"function\") {\n        const { sql } = await import(\"drizzle-orm\");\n        await this.db.execute(sql`\n          CREATE TABLE IF NOT EXISTS \"settings\" (\n            \"key\" VARCHAR(255) PRIMARY KEY,\n            \"value\" TEXT NOT NULL,\n            \"description\" TEXT,\n            \"updated_at\" TIMESTAMP DEFAULT NOW()\n          )\n        `);\n        _settingsTableEnsured = true;\n      } else if (typeof this.db?.exec === \"function\") {\n        this.db.exec(`\n          CREATE TABLE IF NOT EXISTS settings (\n            key TEXT PRIMARY KEY,\n            value TEXT NOT NULL,\n            description TEXT,\n            updated_at TEXT\n          )\n        `);\n        _settingsTableEnsured = true;\n      }\n    } catch {\n      // Table creation failed — will fall back to env vars\n    }\n  }\n\n  /**\n   * Load settings from the _globals_storage-settings table (SQLite fallback)\n   * Maps nested global structure to flat key-value cache\n   */\n  private async loadFromGlobals(): Promise<void> {\n    try {\n      let row: any = null;\n      if (typeof this.db?.execute === \"function\") {\n        const { sql } = await import(\"drizzle-orm\");\n        const variants = ['\"_globals_storage-settings\"', '\"_globals_storage_settings\"', '\"global_storage_settings\"'];\n        for (const name of variants) {\n          try {\n            const result = await this.db.execute(sql`SELECT * FROM ${sql.raw(name)} LIMIT 1`);\n            row = Array.isArray(result) ? result[0] : (result?.rows ? result.rows[0] : null);\n            if (row) break;\n          } catch {}\n        }\n      } else if (typeof this.db?.prepare === \"function\") {\n        const variants = ['\"_globals_storage-settings\"', '\"_globals_storage_settings\"', '\"global_storage_settings\"'];\n        for (const name of variants) {\n          try {\n            row = this.db.prepare(`SELECT * FROM ${name} LIMIT 1`).get();\n            if (row) break;\n          } catch {}\n        }\n      }\n\n      if (!row) return;\n\n      const parseJSON = (val: any) => {\n        if (!val) return null;\n        if (typeof val === \"string\") {\n          try {\n            return JSON.parse(val);\n          } catch {\n            return null;\n          }\n        }\n        return val;\n      };\n\n      const provider = row.provider || \"local\";\n      this.cache[\"storage.type\"] = provider === \"aws\" ? \"s3\" : provider;\n\n      if (provider === \"local\") {\n        const local = parseJSON(row.local);\n        this.cache[\"storage.local.dir\"] =\n          local?.uploadDir || \"./public/uploads\";\n        this.cache[\"storage.local.url\"] = local?.baseUrl || \"/uploads\";\n      }\n\n      if (provider === \"aws\") {\n        const aws = parseJSON(row.aws);\n        this.cache[\"storage.s3.bucket\"] = aws?.bucket || \"\";\n        this.cache[\"storage.s3.region\"] = aws?.region || \"us-east-1\";\n        this.cache[\"storage.s3.access_key_id\"] = aws?.accessKeyId || \"\";\n        this.cache[\"storage.s3.secret_access_key\"] = aws?.secretAccessKey || \"\";\n        this.cache[\"storage.s3.endpoint\"] = aws?.endpoint || \"\";\n        this.cache[\"storage.s3.cdn_url\"] = aws?.cdnUrl || \"\";\n        this.cache[\"storage.s3.prefix\"] = aws?.prefix || \"\";\n      }\n\n      if (provider === \"r2\") {\n        const r2 = parseJSON(row.r2);\n        this.cache[\"storage.r2.account_id\"] = r2?.accountId || \"\";\n        this.cache[\"storage.r2.access_key_id\"] = r2?.accessKeyId || \"\";\n        this.cache[\"storage.r2.secret_access_key\"] = r2?.secretAccessKey || \"\";\n        this.cache[\"storage.r2.bucket\"] = r2?.bucket || \"\";\n        this.cache[\"storage.r2.cdn_url\"] = r2?.cdnUrl || \"\";\n        this.cache[\"storage.r2.prefix\"] = r2?.prefix || \"\";\n      }\n\n      if (provider === \"cloudinary\") {\n        const cloudinary = parseJSON(row.cloudinary);\n        this.cache[\"storage.cloudinary.cloud_name\"] =\n          cloudinary?.cloudName || \"\";\n        this.cache[\"storage.cloudinary.api_key\"] = cloudinary?.apiKey || \"\";\n        this.cache[\"storage.cloudinary.api_secret\"] =\n          cloudinary?.apiSecret || \"\";\n        this.cache[\"storage.cloudinary.folder\"] = cloudinary?.folder || \"\";\n      }\n\n      if (provider === \"ftp\") {\n        const ftp = parseJSON(row.ftp);\n        this.cache[\"storage.ftp.host\"] = ftp?.host || \"\";\n        this.cache[\"storage.ftp.port\"] = String(ftp?.port || \"21\");\n        this.cache[\"storage.ftp.user\"] = ftp?.user || \"\";\n        this.cache[\"storage.ftp.password\"] = ftp?.password || \"\";\n        this.cache[\"storage.ftp.secure\"] = ftp?.secure ? \"true\" : \"false\";\n        this.cache[\"storage.ftp.base_url\"] = ftp?.baseUrl || \"\";\n        this.cache[\"storage.ftp.prefix\"] = ftp?.prefix || \"\";\n      }\n    } catch (error) {\n      console.warn(\"ConfigService: Could not load storage settings from globals table:\", error);\n    }\n\n    // Also load email-settings\n    try {\n      let row: any = null;\n      if (typeof this.db?.execute === \"function\") {\n        const { sql } = await import(\"drizzle-orm\");\n        const variants = ['\"_globals_email-settings\"', '\"_globals_email_settings\"', '\"global_email_settings\"'];\n        for (const name of variants) {\n          try {\n            const result = await this.db.execute(sql`SELECT * FROM ${sql.raw(name)} LIMIT 1`);\n            row = Array.isArray(result) ? result[0] : (result?.rows ? result.rows[0] : null);\n            if (row) break;\n          } catch {}\n        }\n      } else if (typeof this.db?.prepare === \"function\") {\n        const variants = ['\"_globals_email-settings\"', '\"_globals_email_settings\"', '\"global_email_settings\"'];\n        for (const name of variants) {\n          try {\n            row = this.db.prepare(`SELECT * FROM ${name} LIMIT 1`).get();\n            if (row) break;\n          } catch {}\n        }\n      }\n\n      if (row) {\n        const parseJSON = (val: any) => {\n          if (!val) return null;\n          if (typeof val === \"string\") {\n            try { return JSON.parse(val); } catch { return null; }\n          }\n          return val;\n        };\n\n        this.cache[\"email.provider\"] = row.provider || \"smtp\";\n        this.cache[\"email.smtp.from\"] = row.fromEmail || \"\";\n        this.cache[\"email.smtp.from_name\"] = row.fromName || \"\";\n        this.cache[\"email.smtp.reply_to\"] = row.replyTo || \"\";\n\n        if (row.provider === \"smtp\") {\n          const smtp = parseJSON(row.smtp);\n          this.cache[\"email.smtp.host\"] = smtp?.host || \"\";\n          this.cache[\"email.smtp.port\"] = String(smtp?.port || \"587\");\n          this.cache[\"email.smtp.user\"] = smtp?.username || \"\";\n          this.cache[\"email.smtp.pass\"] = smtp?.password || \"\";\n          this.cache[\"email.smtp.secure\"] = smtp?.secure ? \"true\" : \"false\";\n        } else if (row.provider === \"resend\") {\n          const resend = parseJSON(row.resend);\n          this.cache[\"email.smtp.pass\"] = resend?.apiKey || \"\"; // We might use pass as apiKey\n        } else if (row.provider === \"sendgrid\") {\n          const sendgrid = parseJSON(row.sendgrid);\n          this.cache[\"email.smtp.pass\"] = sendgrid?.apiKey || \"\";\n        } else if (row.provider === \"mailgun\") {\n          const mailgun = parseJSON(row.mailgun);\n          this.cache[\"email.smtp.pass\"] = mailgun?.apiKey || \"\";\n        } else if (row.provider === \"ses\") {\n          const ses = parseJSON(row.ses);\n          this.cache[\"email.smtp.user\"] = ses?.accessKeyId || \"\";\n          this.cache[\"email.smtp.pass\"] = ses?.secretAccessKey || \"\";\n        }\n      }\n    } catch (error) {\n      console.warn(\"ConfigService: Could not load email settings from globals table:\", error);\n    }\n  }\n\n  /**\n   * Get a settings value with environment fallback\n   */\n  get(key: string, envKey?: string, defaultValue?: string): string | undefined {\n    // 1. Check database cache\n    if (this.cache[key]) return this.cache[key];\n\n    // 2. Check environment variable\n    if (envKey && process.env[envKey]) return process.env[envKey];\n\n    // 3. Return default\n    return defaultValue;\n  }\n\n  /**\n   * Get storage configuration\n   */\n  getStorageConfig(): StorageConfig {\n    return {\n      type: this.get(\"storage.type\", \"STORAGE_TYPE\", \"local\")!,\n      s3: {\n        bucket: this.get(\"storage.s3.bucket\", \"STORAGE_BUCKET\"),\n        region: this.get(\"storage.s3.region\", \"STORAGE_REGION\", \"us-east-1\"),\n        accessKeyId: this.get(\n          \"storage.s3.access_key_id\",\n          \"STORAGE_ACCESS_KEY_ID\",\n        ),\n        secretAccessKey: this.get(\n          \"storage.s3.secret_access_key\",\n          \"STORAGE_SECRET_ACCESS_KEY\",\n        ),\n        endpoint: this.get(\"storage.s3.endpoint\", \"STORAGE_ENDPOINT\"),\n        cdnUrl: this.get(\"storage.s3.cdn_url\", \"STORAGE_CDN_URL\"),\n        prefix: this.get(\"storage.s3.prefix\", \"STORAGE_PREFIX\"),\n      },\n      r2: {\n        accountId: this.get(\"storage.r2.account_id\", \"R2_ACCOUNT_ID\"),\n        accessKeyId: this.get(\"storage.r2.access_key_id\", \"R2_ACCESS_KEY_ID\"),\n        secretAccessKey: this.get(\n          \"storage.r2.secret_access_key\",\n          \"R2_SECRET_ACCESS_KEY\",\n        ),\n        bucket: this.get(\"storage.r2.bucket\", \"R2_BUCKET\"),\n        cdnUrl: this.get(\"storage.r2.cdn_url\", \"R2_CDN_URL\"),\n        prefix: this.get(\"storage.r2.prefix\", \"R2_PREFIX\"),\n      },\n      gcs: {\n        bucket: this.get(\"storage.gcs.bucket\", \"GCS_BUCKET\"),\n        projectId: this.get(\"storage.gcs.project_id\", \"GCS_PROJECT_ID\"),\n        clientEmail: this.get(\"storage.gcs.client_email\", \"GCS_CLIENT_EMAIL\"),\n        privateKey: this.get(\"storage.gcs.private_key\", \"GCS_PRIVATE_KEY\"),\n        cdnUrl: this.get(\"storage.gcs.cdn_url\", \"GCS_CDN_URL\"),\n        prefix: this.get(\"storage.gcs.prefix\", \"GCS_PREFIX\"),\n      },\n      digitalocean: {\n        bucket: this.get(\"storage.digitalocean.bucket\", \"DO_BUCKET\"),\n        region: this.get(\"storage.digitalocean.region\", \"DO_REGION\", \"nyc3\"),\n        accessKeyId: this.get(\n          \"storage.digitalocean.access_key_id\",\n          \"DO_ACCESS_KEY_ID\",\n        ),\n        secretAccessKey: this.get(\n          \"storage.digitalocean.secret_access_key\",\n          \"DO_SECRET_ACCESS_KEY\",\n        ),\n        cdnUrl: this.get(\"storage.digitalocean.cdn_url\", \"DO_CDN_URL\"),\n        prefix: this.get(\"storage.digitalocean.prefix\", \"DO_PREFIX\"),\n      },\n      backblaze: {\n        bucket: this.get(\"storage.backblaze.bucket\", \"BB_BUCKET\"),\n        accountId: this.get(\"storage.backblaze.account_id\", \"BB_ACCOUNT_ID\"),\n        applicationKeyId: this.get(\n          \"storage.backblaze.application_key_id\",\n          \"BB_APPLICATION_KEY_ID\",\n        ),\n        applicationKey: this.get(\n          \"storage.backblaze.application_key\",\n          \"BB_APPLICATION_KEY\",\n        ),\n        cdnUrl: this.get(\"storage.backblaze.cdn_url\", \"BB_CDN_URL\"),\n        prefix: this.get(\"storage.backblaze.prefix\", \"BB_PREFIX\"),\n      },\n      wasabi: {\n        bucket: this.get(\"storage.wasabi.bucket\", \"WASABI_BUCKET\"),\n        region: this.get(\"storage.wasabi.region\", \"WASABI_REGION\", \"us-east-1\"),\n        accessKeyId: this.get(\n          \"storage.wasabi.access_key_id\",\n          \"WASABI_ACCESS_KEY_ID\",\n        ),\n        secretAccessKey: this.get(\n          \"storage.wasabi.secret_access_key\",\n          \"WASABI_SECRET_ACCESS_KEY\",\n        ),\n        cdnUrl: this.get(\"storage.wasabi.cdn_url\", \"WASABI_CDN_URL\"),\n        prefix: this.get(\"storage.wasabi.prefix\", \"WASABI_PREFIX\"),\n      },\n      bunny: {\n        storageZone: this.get(\n          \"storage.bunny.storage_zone\",\n          \"BUNNY_STORAGE_ZONE\",\n        ),\n        apiKey: this.get(\"storage.bunny.api_key\", \"BUNNY_API_KEY\"),\n        cdnUrl: this.get(\"storage.bunny.cdn_url\", \"BUNNY_CDN_URL\"),\n        prefix: this.get(\"storage.bunny.prefix\", \"BUNNY_PREFIX\"),\n      },\n      ftp: {\n        host: this.get(\"storage.ftp.host\", \"FTP_HOST\"),\n        port: parseInt(this.get(\"storage.ftp.port\", \"FTP_PORT\", \"21\")!, 10),\n        user: this.get(\"storage.ftp.user\", \"FTP_USER\"),\n        password: this.get(\"storage.ftp.password\", \"FTP_PASSWORD\"),\n        secure: this.get(\"storage.ftp.secure\", \"FTP_SECURE\") === \"true\",\n        baseUrl: this.get(\"storage.ftp.base_url\", \"FTP_BASE_URL\"),\n        prefix: this.get(\"storage.ftp.prefix\", \"FTP_PREFIX\"),\n      },\n      cloudinary: {\n        cloudName: this.get(\n          \"storage.cloudinary.cloud_name\",\n          \"CLOUDINARY_CLOUD_NAME\",\n        ),\n        apiKey: this.get(\"storage.cloudinary.api_key\", \"CLOUDINARY_API_KEY\"),\n        apiSecret: this.get(\n          \"storage.cloudinary.api_secret\",\n          \"CLOUDINARY_API_SECRET\",\n        ),\n        folder: this.get(\"storage.cloudinary.folder\", \"CLOUDINARY_FOLDER\"),\n      },\n      imgix: {\n        domain: this.get(\"storage.imgix.domain\", \"IMGIX_DOMAIN\"),\n        signKey: this.get(\"storage.imgix.sign_key\", \"IMGIX_SIGN_KEY\"),\n      },\n      local: {\n        uploadDir: this.get(\"storage.local.dir\", \"STORAGE_LOCAL_DIR\", \"./public/uploads\"),\n        baseUrl: this.get(\"storage.local.url\", \"STORAGE_LOCAL_URL\", \"/uploads\"),\n      },\n    };\n  }\n\n  /**\n   * Get email configuration\n   */\n  getEmailConfig(): EmailConfig {\n    return {\n      provider: this.get(\"email.provider\", \"EMAIL_PROVIDER\", \"smtp\"),\n      host: this.get(\"email.smtp.host\", \"SMTP_HOST\"),\n      port: parseInt(this.get(\"email.smtp.port\", \"SMTP_PORT\", \"587\")!, 10),\n      secure: this.get(\"email.smtp.secure\", \"SMTP_SECURE\") === \"true\",\n      user: this.get(\"email.smtp.user\", \"SMTP_USER\"),\n      pass: this.get(\"email.smtp.pass\", \"SMTP_PASS\"),\n      from: this.get(\"email.smtp.from\", \"SMTP_FROM\", \"noreply@example.com\"),\n      fromName: this.get(\"email.smtp.from_name\", \"SMTP_FROM_NAME\", \"Kyro CMS\"),\n      replyTo: this.get(\"email.smtp.reply_to\", \"SMTP_REPLY_TO\"),\n    };\n  }\n\n  /**\n   * Mask sensitive values for display\n   */\n  maskSensitive(key: string, value: string | undefined): string | undefined {\n    if (!value) return value;\n    if (ConfigService.SENSITIVE_KEYS.includes(key)) {\n      return \"********\";\n    }\n    return value;\n  }\n\n  /**\n   * Update a setting in the database\n   */\n  async set(key: string, value: string, description?: string): Promise<void> {\n    await this.db\n      .insert(settingsSchema)\n      .values({\n        key,\n        value,\n        description,\n        updatedAt: new Date(),\n      })\n      .onConflictDoUpdate({\n        target: [settingsSchema.key],\n        set: { value, description, updatedAt: new Date() },\n      });\n    this.cache[key] = value;\n  }\n}\n","import type { Transporter, SentMessageInfo } from \"nodemailer\";\n\nexport interface EmailConfig {\n  provider: \"smtp\" | \"resend\" | \"sendgrid\" | \"mailgun\" | \"ses\";\n  from: string;\n  fromName?: string;\n  replyTo?: string;\n  smtp?: {\n    host: string;\n    port: number;\n    secure: boolean;\n    auth: {\n      user: string;\n      pass: string;\n    };\n  };\n  resend?: {\n    apiKey: string;\n  };\n  sendgrid?: {\n    apiKey: string;\n  };\n  mailgun?: {\n    apiKey: string;\n    domain: string;\n    region?: \"us\" | \"eu\";\n  };\n  ses?: {\n    accessKeyId: string;\n    secretAccessKey: string;\n    region: string;\n  };\n}\n\nexport interface EmailOptions {\n  to: string | string[];\n  subject: string;\n  html: string;\n  text?: string;\n  replyTo?: string;\n}\n\nexport interface EmailTemplates {\n  verifyEmail: (\n    link: string,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n  resetPassword: (\n    link: string,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n  welcome: (userName?: string) => {\n    subject: string;\n    html: string;\n    text: string;\n  };\n  accountLocked: (\n    attempts: number,\n    duration: number,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n  passwordChanged: (userName?: string) => {\n    subject: string;\n    html: string;\n    text: string;\n  };\n  newLogin: (\n    location: string,\n    time: string,\n    userName?: string,\n  ) => { subject: string; html: string; text: string };\n}\n\nconst defaultTemplates: EmailTemplates = {\n  verifyEmail: (link, userName = \"User\") => ({\n    subject: \"Verify your email address\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Verify Email</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .button { display: inline-block; padding: 12px 24px; background: #0b1222; color: white; text-decoration: none; border-radius: 6px; font-weight: 600; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Welcome, ${userName}!</h1>\n          <p>Please verify your email address by clicking the button below:</p>\n          <p style=\"text-align: center; margin: 30px 0;\">\n            <a href=\"${link}\" class=\"button\">Verify Email</a>\n          </p>\n          <p>Or copy and paste this link into your browser:</p>\n          <p style=\"word-break: break-all; color: #666;\">${link}</p>\n          <p>This link will expire in 24 hours.</p>\n          <div class=\"footer\">\n            <p>If you didn't create an account, you can safely ignore this email.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Welcome ${userName}!\\n\\nPlease verify your email by clicking this link: ${link}\\n\\nThis link will expire in 24 hours.\\n\\nIf you didn't create an account, you can safely ignore this email.`,\n  }),\n\n  resetPassword: (link, userName = \"User\") => ({\n    subject: \"Reset your password\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Reset Password</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .button { display: inline-block; padding: 12px 24px; background: #dc2626; color: white; text-decoration: none; border-radius: 6px; font-weight: 600; }\n          .warning { background: #fef3c7; border: 1px solid #f59e0b; padding: 12px; border-radius: 6px; margin: 20px 0; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Password Reset Request</h1>\n          <p>Hello ${userName},</p>\n          <p>We received a request to reset your password. Click the button below to create a new password:</p>\n          <p style=\"text-align: center; margin: 30px 0;\">\n            <a href=\"${link}\" class=\"button\">Reset Password</a>\n          </p>\n          <p>Or copy and paste this link into your browser:</p>\n          <p style=\"word-break: break-all; color: #666;\">${link}</p>\n          <div class=\"warning\">\n            <strong>⚠️ Important:</strong> This link will expire in 1 hour. If you didn't request a password reset, please ignore this email or contact support if you have concerns.\n          </div>\n          <div class=\"footer\">\n            <p>For security reasons, please don't share this email with anyone.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Password Reset Request\\n\\nHello ${userName},\\n\\nWe received a request to reset your password. Click this link to create a new password: ${link}\\n\\nThis link will expire in 1 hour.\\n\\nIf you didn't request a password reset, please ignore this email.`,\n  }),\n\n  welcome: (userName = \"User\") => ({\n    subject: \"Welcome to Kyro CMS\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Welcome</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .button { display: inline-block; padding: 12px 24px; background: #0b1222; color: white; text-decoration: none; border-radius: 6px; font-weight: 600; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Welcome to Kyro CMS, ${userName}!</h1>\n          <p>Your account has been created successfully.</p>\n          <p>You can now:</p>\n          <ul>\n            <li>Manage your content collections</li>\n            <li>Upload and organize media</li>\n            <li>Configure settings</li>\n            <li>And much more...</li>\n          </ul>\n          <p style=\"text-align: center; margin: 30px 0;\">\n            <a href=\"#\" class=\"button\">Get Started</a>\n          </p>\n          <p>If you have any questions, feel free to reach out to our support team.</p>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Welcome to Kyro CMS, ${userName}!\\n\\nYour account has been created successfully.\\n\\nYou can now:\\n- Manage your content collections\\n- Upload and organize media\\n- Configure settings\\n- And much more...\\n\\nGet started by logging into your dashboard.`,\n  }),\n\n  accountLocked: (attempts, duration, userName = \"User\") => ({\n    subject: \"Account Security Alert - Account Locked\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Account Locked</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .alert { background: #fef2f2; border: 1px solid #ef4444; padding: 16px; border-radius: 8px; margin: 20px 0; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Account Security Alert</h1>\n          <p>Hello ${userName},</p>\n          <div class=\"alert\">\n            <p><strong>⚠️ Your account has been temporarily locked due to multiple failed login attempts.</strong></p>\n            <p>Failed attempts: ${attempts}</p>\n            <p>Lockout duration: ${Math.round(duration / 60000)} minutes</p>\n          </div>\n          <p>Your account will automatically unlock after the lockout period expires.</p>\n          <p>If this wasn't you, we recommend:</p>\n          <ul>\n            <li>Using a strong, unique password</li>\n            <li>Enabling two-factor authentication (coming soon)</li>\n            <li>Reviewing your recent account activity</li>\n          </ul>\n          <div class=\"footer\">\n            <p>If you need immediate assistance, please contact support.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Account Security Alert\\n\\nHello ${userName},\\n\\nYour account has been temporarily locked due to multiple failed login attempts (${attempts}).\\n\\nLockout duration: ${Math.round(duration / 60000)} minutes\\n\\nYour account will automatically unlock after this period.\\n\\nIf this wasn't you, we recommend using a strong, unique password.`,\n  }),\n\n  passwordChanged: (userName = \"User\") => ({\n    subject: \"Your password has been changed\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>Password Changed</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .info { background: #f0fdf4; border: 1px solid #22c55e; padding: 12px; border-radius: 6px; margin: 20px 0; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>Password Changed</h1>\n          <p>Hello ${userName},</p>\n          <div class=\"info\">\n            <p>Your password was recently changed.</p>\n          </div>\n          <p>If you did this, you can safely ignore this email.</p>\n          <p><strong>If you didn't change your password</strong>, please contact our support team immediately as your account may have been compromised.</p>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `Password Changed\\n\\nHello ${userName},\\n\\nYour password was recently changed.\\n\\nIf you did this, you can safely ignore this email.\\n\\nIf you didn't change your password, please contact support immediately.`,\n  }),\n\n  newLogin: (location, time, userName = \"User\") => ({\n    subject: \"New login to your account\",\n    html: `\n      <!DOCTYPE html>\n      <html>\n      <head>\n        <meta charset=\"utf-8\">\n        <meta name=\"viewport\" content=\"width=device-width, initial-scale=1\">\n        <title>New Login</title>\n        <style>\n          body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; line-height: 1.6; color: #333; }\n          .container { max-width: 600px; margin: 0 auto; padding: 20px; }\n          .info-box { background: #f8fafc; border: 1px solid #e2e8f0; padding: 16px; border-radius: 8px; margin: 20px 0; }\n          .footer { margin-top: 30px; font-size: 12px; color: #666; }\n        </style>\n      </head>\n      <body>\n        <div class=\"container\">\n          <h1>New Login Detected</h1>\n          <p>Hello ${userName},</p>\n          <p>We detected a new login to your account:</p>\n          <div class=\"info-box\">\n            <p><strong>Location:</strong> ${location}</p>\n            <p><strong>Time:</strong> ${time}</p>\n          </div>\n          <p><strong>If this was you</strong>, no action is needed.</p>\n          <p><strong>If this wasn't you</strong>, your account may be compromised. Please:</p>\n          <ol>\n            <li>Change your password immediately</li>\n            <li>Review your recent account activity</li>\n            <li>Contact support if needed</li>\n          </ol>\n          <div class=\"footer\">\n            <p>This is an automated security notification.</p>\n          </div>\n        </div>\n      </body>\n      </html>\n    `,\n    text: `New Login Detected\\n\\nHello ${userName},\\n\\nWe detected a new login to your account:\\n\\nLocation: ${location}\\nTime: ${time}\\n\\nIf this wasn't you, please change your password immediately and contact support.`,\n  }),\n};\n\nimport { ConfigService } from \"../config/ConfigService.js\";\n\nexport class EmailTransport {\n  private transporter?: Transporter<SentMessageInfo>;\n  private config: EmailConfig;\n  private templates: EmailTemplates;\n  private transporterInitialized: boolean = false;\n\n  constructor(config: EmailConfig, templates?: Partial<EmailTemplates>) {\n    this.config = config;\n    this.templates = { ...defaultTemplates, ...templates };\n  }\n\n  private async ensureTransporter(): Promise<Transporter<SentMessageInfo>> {\n    if (this.transporterInitialized) {\n      return this.transporter!;\n    }\n\n    const { default: nodemailer } = await import(\"nodemailer\");\n\n    if (this.config.provider === \"smtp\" && this.config.smtp) {\n      this.transporter = nodemailer.createTransport({\n        host: this.config.smtp.host,\n        port: this.config.smtp.port,\n        secure: this.config.smtp.secure,\n        auth: this.config.smtp.auth,\n      });\n    } else if (this.config.provider === \"ses\" && this.config.ses) {\n      this.transporter = nodemailer.createTransport({\n        host: `email-smtp.${this.config.ses.region}.amazonaws.com`,\n        port: 587,\n        secure: false,\n        auth: {\n          user: this.config.ses.accessKeyId,\n          pass: this.config.ses.secretAccessKey,\n        },\n      });\n    }\n\n    this.transporterInitialized = true;\n    return this.transporter!;\n  }\n\n  async send(options: EmailOptions): Promise<any> {\n    const { provider, from, fromName, replyTo: configReplyTo } = this.config;\n    const fromFull = `\"${fromName || \"Kyro CMS\"}\" <${from}>`;\n    const replyTo = options.replyTo || configReplyTo;\n\n    console.log(`[EmailTransport] Sending email via ${provider}...`);\n    console.log(\n      `[EmailTransport] To: ${Array.isArray(options.to) ? options.to.join(\", \") : options.to}`,\n    );\n    console.log(`[EmailTransport] Subject: ${options.subject}`);\n\n    try {\n      let result;\n      switch (provider) {\n        case \"smtp\":\n        case \"ses\":\n          {\n            const transporter = await this.ensureTransporter();\n            if (!transporter)\n              throw new Error(`${provider} transporter not initialized`);\n            result = await transporter.sendMail({\n              from: fromFull,\n              to: Array.isArray(options.to)\n                ? options.to.join(\", \")\n                : options.to,\n              subject: options.subject,\n              html: options.html,\n              text: options.text,\n              replyTo,\n            });\n          }\n          break;\n\n        case \"resend\":\n          result = await this.sendViaResend(fromFull, options, replyTo);\n          break;\n\n        case \"sendgrid\":\n          result = await this.sendViaSendGrid(fromFull, options, replyTo);\n          break;\n\n        case \"mailgun\":\n          result = await this.sendViaMailgun(fromFull, options, replyTo);\n          break;\n\n        default:\n          throw new Error(`Unsupported email provider: ${provider}`);\n      }\n      console.log(`[EmailTransport] Success! Provider response received.`);\n      return result;\n    } catch (error: any) {\n      console.error(`[EmailTransport] FAILED to send email:`, error.message);\n      if (error.response) {\n        console.error(\n          `[EmailTransport] Provider Error Detail:`,\n          JSON.stringify(error.response, null, 2),\n        );\n      }\n      throw error;\n    }\n  }\n\n  private async sendViaResend(\n    from: string,\n    options: EmailOptions,\n    replyTo?: string,\n  ) {\n    const apiKey = this.config.resend?.apiKey;\n    if (!apiKey) throw new Error(\"Resend API Key missing\");\n\n    const body = {\n      from,\n      to: options.to,\n      subject: options.subject,\n      html: options.html,\n      text: options.text,\n      reply_to: replyTo,\n    };\n\n    console.log(`[EmailTransport] Calling Resend API...`);\n    const resp = await fetch(\"https://api.resend.com/emails\", {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${apiKey}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(body),\n    });\n\n    if (!resp.ok) {\n      const error = await resp.json();\n      throw new Error(`Resend Error: ${JSON.stringify(error)}`);\n    }\n    return resp.json();\n  }\n\n  private async sendViaSendGrid(\n    from: string,\n    options: EmailOptions,\n    replyTo?: string,\n  ) {\n    const apiKey = this.config.sendgrid?.apiKey;\n    if (!apiKey) throw new Error(\"SendGrid API Key missing\");\n\n    const body = {\n      personalizations: [\n        {\n          to: Array.isArray(options.to)\n            ? options.to.map((email) => ({ email }))\n            : [{ email: options.to }],\n        },\n      ],\n      from: {\n        email: from.match(/<(.+)>/)?.[1] || from,\n        name: from.match(/\"(.+)\"/)?.[1],\n      },\n      subject: options.subject,\n      content: [\n        { type: \"text/plain\", value: options.text || \"\" },\n        { type: \"text/html\", value: options.html },\n      ],\n      reply_to: replyTo ? { email: replyTo } : undefined,\n    };\n\n    console.log(`[EmailTransport] Calling SendGrid API...`);\n    const resp = await fetch(\"https://api.sendgrid.com/v3/mail/send\", {\n      method: \"POST\",\n      headers: {\n        Authorization: `Bearer ${apiKey}`,\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(body),\n    });\n\n    if (!resp.ok) {\n      const error = await resp.json();\n      throw new Error(`SendGrid Error: ${JSON.stringify(error)}`);\n    }\n    return { success: true };\n  }\n\n  private async sendViaMailgun(\n    from: string,\n    options: EmailOptions,\n    replyTo?: string,\n  ) {\n    const { apiKey, domain, region } = this.config.mailgun || {};\n    if (!apiKey || !domain) throw new Error(\"Mailgun config missing\");\n\n    const base = region === \"eu\" ? \"api.eu.mailgun.net\" : \"api.mailgun.net\";\n    const auth = btoa(`api:${apiKey}`);\n\n    const formData = new URLSearchParams();\n    formData.append(\"from\", from);\n    const to = Array.isArray(options.to) ? options.to.join(\", \") : options.to;\n    formData.append(\"to\", to);\n    formData.append(\"subject\", options.subject);\n    formData.append(\"html\", options.html);\n    if (options.text) formData.append(\"text\", options.text);\n    if (replyTo) formData.append(\"h:Reply-To\", replyTo);\n\n    console.log(`[EmailTransport] Calling Mailgun API (${region || \"us\"})...`);\n    const resp = await fetch(`https://${base}/v3/${domain}/messages`, {\n      method: \"POST\",\n      headers: {\n        Authorization: `Basic ${auth}`,\n        \"Content-Type\": \"application/x-www-form-urlencoded\",\n      },\n      body: formData,\n    });\n\n    if (!resp.ok) {\n      const error = await resp.json();\n      throw new Error(`Mailgun Error: ${JSON.stringify(error)}`);\n    }\n    return resp.json();\n  }\n\n  getTemplates(): EmailTemplates {\n    return this.templates;\n  }\n\n  async verifyConnection(): Promise<boolean> {\n    if (this.config.provider === \"smtp\" || this.config.provider === \"ses\") {\n      try {\n        const transporter = await this.ensureTransporter();\n        if (transporter) {\n          await transporter.verify();\n          return true;\n        }\n      } catch {\n        return false;\n      }\n    }\n    return !!(\n      this.config.resend?.apiKey ||\n      this.config.sendgrid?.apiKey ||\n      this.config.mailgun?.apiKey\n    );\n  }\n\n  static async fromConfig(db: any): Promise<EmailTransport | null> {\n    const configService = new ConfigService(db);\n    await configService.load();\n    const config = configService.getEmailConfig();\n\n    if (!config.provider) {\n      return this.fromEnv();\n    }\n\n    const transformed: EmailConfig = {\n      provider: (config.provider as any) || \"smtp\",\n      from: config.from || \"noreply@example.com\",\n      fromName: config.fromName,\n      replyTo: config.replyTo,\n      smtp:\n        config.provider === \"smtp\"\n          ? {\n              host: config.host || \"\",\n              port: config.port || 587,\n              secure: config.secure || false,\n              auth: { user: config.user || \"\", pass: config.pass || \"\" },\n            }\n          : undefined,\n      resend:\n        config.provider === \"resend\"\n          ? { apiKey: config.pass || \"\" }\n          : undefined,\n      sendgrid:\n        config.provider === \"sendgrid\"\n          ? { apiKey: config.pass || \"\" }\n          : undefined,\n      mailgun:\n        config.provider === \"mailgun\"\n          ? {\n              apiKey: config.pass || \"\",\n              domain: config.host || \"\",\n              region: (config.secure ? \"eu\" : \"us\") as any,\n            }\n          : undefined,\n      ses:\n        config.provider === \"ses\"\n          ? {\n              accessKeyId: config.user || \"\",\n              secretAccessKey: config.pass || \"\",\n              region: config.host || \"us-east-1\",\n            }\n          : undefined,\n    };\n\n    return new EmailTransport(transformed);\n  }\n\n  static fromEnv(): EmailTransport | null {\n    const provider = (process.env.EMAIL_PROVIDER as any) || \"smtp\";\n    const from =\n      process.env.SMTP_FROM ||\n      process.env.DEFAULT_FROM ||\n      \"noreply@example.com\";\n    const fromName = process.env.SMTP_FROM_NAME || \"Kyro CMS\";\n    const replyTo = process.env.SMTP_REPLY_TO;\n\n    if (provider === \"smtp\") {\n      const host = process.env.SMTP_HOST;\n      const user = process.env.SMTP_USER;\n      const pass = process.env.SMTP_PASS;\n      if (!host || !user || !pass) return null;\n\n      return new EmailTransport({\n        provider: \"smtp\",\n        from,\n        fromName,\n        replyTo,\n        smtp: {\n          host,\n          port: parseInt(process.env.SMTP_PORT || \"587\", 10),\n          secure: process.env.SMTP_SECURE === \"true\",\n          auth: { user, pass },\n        },\n      });\n    }\n\n    if (provider === \"resend\") {\n      const apiKey = process.env.RESEND_API_KEY || process.env.SMTP_PASS;\n      if (!apiKey) return null;\n      return new EmailTransport({\n        provider: \"resend\",\n        from,\n        fromName,\n        replyTo,\n        resend: { apiKey },\n      });\n    }\n\n    if (provider === \"sendgrid\") {\n      const apiKey = process.env.SENDGRID_API_KEY || process.env.SMTP_PASS;\n      if (!apiKey) return null;\n      return new EmailTransport({\n        provider: \"sendgrid\",\n        from,\n        fromName,\n        replyTo,\n        sendgrid: { apiKey },\n      });\n    }\n\n    if (provider === \"mailgun\") {\n      const apiKey = process.env.MAILGUN_API_KEY || process.env.SMTP_PASS;\n      const domain = process.env.MAILGUN_DOMAIN || process.env.SMTP_HOST;\n      if (!apiKey || !domain) return null;\n      return new EmailTransport({\n        provider: \"mailgun\",\n        from,\n        fromName,\n        replyTo,\n        mailgun: {\n          apiKey,\n          domain,\n          region: (process.env.MAILGUN_REGION ||\n            (process.env.SMTP_SECURE === \"true\" ? \"eu\" : \"us\")) as any,\n        },\n      });\n    }\n\n    if (provider === \"ses\") {\n      const accessKeyId =\n        process.env.AWS_ACCESS_KEY_ID || process.env.SMTP_USER;\n      const secretAccessKey =\n        process.env.AWS_SECRET_ACCESS_KEY || process.env.SMTP_PASS;\n      const region =\n        process.env.AWS_REGION || process.env.SMTP_HOST || \"us-east-1\";\n      if (!accessKeyId || !secretAccessKey) return null;\n      return new EmailTransport({\n        provider: \"ses\",\n        from,\n        fromName,\n        replyTo,\n        ses: { accessKeyId, secretAccessKey, region },\n      });\n    }\n\n    return null;\n  }\n}\n","export interface PasswordPolicyConfig {\n  minLength: number;\n  requireUppercase: boolean;\n  requireLowercase: boolean;\n  requireNumbers: boolean;\n  requireSpecialChars: boolean;\n  preventReuse: number;\n  maxLength?: number;\n}\n\nexport interface ValidationResult {\n  valid: boolean;\n  errors: string[];\n}\n\nexport const DEFAULT_PASSWORD_POLICY: PasswordPolicyConfig = {\n  minLength: 12,\n  requireUppercase: true,\n  requireLowercase: true,\n  requireNumbers: true,\n  requireSpecialChars: true,\n  preventReuse: 5,\n  maxLength: 128,\n};\n\nexport class PasswordPolicy {\n  private config: PasswordPolicyConfig;\n\n  constructor(config: Partial<PasswordPolicyConfig> = {}) {\n    this.config = { ...DEFAULT_PASSWORD_POLICY, ...config };\n  }\n\n  validate(password: string): ValidationResult {\n    const errors: string[] = [];\n\n    if (this.config.maxLength && password.length > this.config.maxLength) {\n      errors.push(\n        `Password must not exceed ${this.config.maxLength} characters`,\n      );\n    }\n\n    if (password.length < this.config.minLength) {\n      errors.push(\n        `Password must be at least ${this.config.minLength} characters`,\n      );\n    }\n\n    if (this.config.requireUppercase && !/[A-Z]/.test(password)) {\n      errors.push(\"Password must contain at least one uppercase letter\");\n    }\n\n    if (this.config.requireLowercase && !/[a-z]/.test(password)) {\n      errors.push(\"Password must contain at least one lowercase letter\");\n    }\n\n    if (this.config.requireNumbers && !/[0-9]/.test(password)) {\n      errors.push(\"Password must contain at least one number\");\n    }\n\n    if (\n      this.config.requireSpecialChars &&\n      !/[!@#$%^&*()_+\\-=\\[\\]{};':\"\\\\|,.<>\\/?]/.test(password)\n    ) {\n      errors.push(\"Password must contain at least one special character\");\n    }\n\n    const commonPasswords = [\n      \"password\",\n      \"123456\",\n      \"12345678\",\n      \"qwerty\",\n      \"abc123\",\n      \"monkey\",\n      \"1234567\",\n      \"letmein\",\n      \"trustno1\",\n      \"dragon\",\n      \"baseball\",\n      \"iloveyou\",\n      \"master\",\n      \"sunshine\",\n      \"ashley\",\n      \"football\",\n      \"password1\",\n      \"shadow\",\n      \"123123\",\n      \"654321\",\n    ];\n\n    if (commonPasswords.includes(password.toLowerCase())) {\n      errors.push(\n        \"This password is too common. Please choose a more secure password\",\n      );\n    }\n\n    if (/^[a-zA-Z]+$/.test(password) || /^[0-9]+$/.test(password)) {\n      errors.push(\n        \"Password must contain a mix of letters, numbers, and/or special characters\",\n      );\n    }\n\n    if (/(.)\\1{2,}/.test(password)) {\n      errors.push(\n        \"Password must not contain more than 2 consecutive identical characters\",\n      );\n    }\n\n    if (\n      /^(012|123|234|345|456|567|678|789|890|098|987|876|765|654|543|432|321|210)+$/i.test(\n        password,\n      )\n    ) {\n      errors.push(\"Password must not contain sequential numbers or letters\");\n    }\n\n    return {\n      valid: errors.length === 0,\n      errors,\n    };\n  }\n\n  async checkReuse(\n    passwordHash: string,\n    history: string[],\n    verifyFn: (password: string, hash: string) => Promise<boolean>,\n  ): Promise<ValidationResult> {\n    return {\n      valid: true,\n      errors: [],\n    };\n  }\n\n  async isInHistory(\n    password: string,\n    history: string[],\n    verifyFn: (password: string, hash: string) => Promise<boolean>,\n  ): Promise<boolean> {\n    for (const hash of history) {\n      if (await verifyFn(password, hash)) {\n        return true;\n      }\n    }\n    return false;\n  }\n\n  generatePassword(length: number = 16): string {\n    const uppercase = \"ABCDEFGHIJKLMNOPQRSTUVWXYZ\";\n    const lowercase = \"abcdefghijklmnopqrstuvwxyz\";\n    const numbers = \"0123456789\";\n    const special = \"!@#$%^&*()_+-=[]{}|;:,.<>?\";\n\n    let password = \"\";\n\n    password += uppercase[Math.floor(Math.random() * uppercase.length)];\n    password += lowercase[Math.floor(Math.random() * lowercase.length)];\n    password += numbers[Math.floor(Math.random() * numbers.length)];\n    password += special[Math.floor(Math.random() * special.length)];\n\n    const allChars = uppercase + lowercase + numbers + special;\n    for (let i = password.length; i < length; i++) {\n      password += allChars[Math.floor(Math.random() * allChars.length)];\n    }\n\n    return password\n      .split(\"\")\n      .sort(() => Math.random() - 0.5)\n      .join(\"\");\n  }\n\n  getStrength(password: string): {\n    score: number;\n    label: string;\n    feedback: string[];\n  } {\n    let score = 0;\n    const feedback: string[] = [];\n\n    if (password.length >= 8) score += 1;\n    if (password.length >= 12) score += 1;\n    if (password.length >= 16) score += 1;\n\n    if (/[a-z]/.test(password)) score += 1;\n    if (/[A-Z]/.test(password)) score += 1;\n    if (/[0-9]/.test(password)) score += 1;\n    if (/[!@#$%^&*()_+\\-=\\[\\]{}|;:,.<>?]/.test(password)) score += 1;\n\n    if (password.length > 8) score += 1;\n    if (password.length > 12) score += 1;\n\n    const uniqueChars = new Set(password).size;\n    if (uniqueChars > 6) score += 1;\n    if (uniqueChars > 10) score += 1;\n\n    let label: string;\n    if (score <= 3) {\n      label = \"Weak\";\n      feedback.push(\"Add more characters\");\n      feedback.push(\"Include uppercase and lowercase letters\");\n    } else if (score <= 5) {\n      label = \"Fair\";\n      feedback.push(\"Add special characters\");\n      feedback.push(\"Consider making it longer\");\n    } else if (score <= 7) {\n      label = \"Good\";\n      feedback.push(\"Consider making it longer for extra security\");\n    } else {\n      label = \"Strong\";\n    }\n\n    return { score, label, feedback };\n  }\n\n  setConfig(config: Partial<PasswordPolicyConfig>): void {\n    this.config = { ...this.config, ...config };\n  }\n\n  getConfig(): PasswordPolicyConfig {\n    return { ...this.config };\n  }\n}\n"]}

package/dist/{chunk-Y3N7UUDO.js → chunk-7OGPN7MP.js}

@@ -51,6 +51,7 @@ var MongoDBAuthAdapter = class {
       email: data.email.toLowerCase(),
       passwordHash,
       role: data.role || "customer",
+      avatar: data.avatar || null,
       tenantId: data.tenantId || null,
       emailVerified: false,
       locked: false,
@@ -76,6 +77,7 @@ var MongoDBAuthAdapter = class {
     if (data.email !== void 0) setData.email = data.email;
     if (data.passwordHash !== void 0) setData.passwordHash = data.passwordHash;
     if (data.role !== void 0) setData.role = data.role;
+    if (data.avatar !== void 0) setData.avatar = data.avatar;
     if (data.tenantId !== void 0) setData.tenantId = data.tenantId;
     if (data.emailVerified !== void 0) setData.emailVerified = data.emailVerified;
     if (data.locked !== void 0) setData.locked = data.locked;
@@ -255,6 +257,7 @@ var MongoDBAuthAdapter = class {
       passwordHash: doc.passwordHash || void 0,
       role: doc.role,
       tenantId: doc.tenantId || void 0,
+      avatar: doc.avatar || void 0,
       emailVerified: doc.emailVerified || false,
       locked: doc.locked || false,
       lastLogin: doc.lastLogin?.toISOString?.() || doc.lastLogin || void 0,
@@ -345,5 +348,5 @@ function createMongoDBAuthAdapter(options) {
 }
 
 export { MongoDBAuthAdapter, createMongoDBAuthAdapter };
-//# sourceMappingURL=chunk-Y3N7UUDO.js.map
-//# sourceMappingURL=chunk-Y3N7UUDO.js.map
+//# sourceMappingURL=chunk-7OGPN7MP.js.map
+//# sourceMappingURL=chunk-7OGPN7MP.js.map

package/dist/chunk-7OGPN7MP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/database/mongodb/mongo-auth-adapter.ts"],"names":[],"mappings":";;;;AAoBO,IAAM,qBAAN,MAAgD;AAAA,EAC7C,EAAA;AAAA,EACA,MAAA;AAAA,EACA,UAAA;AAAA,EACA,eAAA;AAAA,EACA,cAAA,GAAiB,KAAA;AAAA,EAEzB,YAAY,OAAA,EAAoC;AAC9C,IAAA,IAAA,CAAK,KAAK,OAAA,CAAQ,EAAA;AAClB,IAAA,IAAA,CAAK,MAAA,GAAS,QAAQ,gBAAA,IAAoB,EAAA;AAC1C,IAAA,IAAA,CAAK,UAAA,GAAa,QAAQ,UAAA,IAAc,KAAA;AACxC,IAAA,IAAA,CAAK,eAAA,GAAkB,QAAQ,eAAA,IAAmB,MAAA;AAAA,EACpD;AAAA,EAEQ,IAAI,IAAA,EAAmB;AAC7B,IAAA,OAAO,IAAA,CAAK,GAAG,UAAA,CAAW,CAAA,EAAG,KAAK,MAAM,CAAA,EAAG,IAAI,CAAA,CAAE,CAAA;AAAA,EACnD;AAAA,EAEA,MAAM,OAAA,GAAyB;AAC7B,IAAA,IAAI,CAAC,KAAK,cAAA,EAAgB;AACxB,MAAA,MAAM,KAAK,aAAA,EAAc;AAAA,IAC3B;AAAA,EACF;AAAA,EAEA,MAAM,UAAA,GAA4B;AAAA,EAClC;AAAA,EAEA,MAAc,aAAA,GAA+B;AAC3C,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,CAAE,WAAA,CAAY,EAAE,KAAA,EAAO,CAAA,EAAE,EAAG,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AAClE,IAAA,MAAM,IAAA,CAAK,IAAI,OAAO,CAAA,CAAE,YAAY,EAAE,QAAA,EAAU,GAAG,CAAA;AACnD,IAAA,MAAM,IAAA,CAAK,IAAI,OAAO,CAAA,CAAE,YAAY,EAAE,IAAA,EAAM,GAAG,CAAA;AAE/C,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,CAAE,WAAA,CAAY,EAAE,KAAA,EAAO,CAAA,EAAE,EAAG,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AACrE,IAAA,MAAM,IAAA,CAAK,IAAI,UAAU,CAAA,CAAE,YAAY,EAAE,YAAA,EAAc,GAAG,CAAA;AAC1D,IAAA,MAAM,IAAA,CAAK,IAAI,UAAU,CAAA,CAAE,YAAY,EAAE,MAAA,EAAQ,GAAG,CAAA;AACpD,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,CAAE,WAAA,CAAY,EAAE,SAAA,EAAW,CAAA,EAAE,EAAG,EAAE,kBAAA,EAAoB,CAAA,EAAG,CAAA;AAElF,IAAA,MAAM,IAAA,CAAK,IAAI,YAAY,CAAA,CAAE,YAAY,EAAE,SAAA,EAAW,IAAI,CAAA;AAC1D,IAAA,MAAM,IAAA,CAAK,IAAI,YAAY,CAAA,CAAE,YAAY,EAAE,MAAA,EAAQ,GAAG,CAAA;AACtD,IAAA,MAAM,IAAA,CAAK,IAAI,YAAY,CAAA,CAAE,YAAY,EAAE,MAAA,EAAQ,GAAG,CAAA;AACtD,IAAA,MAAM,IAAA,CAAK,IAAI,YAAY,CAAA,CAAE,YAAY,EAAE,QAAA,EAAU,GAAG,CAAA;AAExD,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,CAAE,WAAA,CAAY,EAAE,MAAA,EAAQ,CAAA,EAAG,SAAA,EAAW,EAAA,EAAI,CAAA;AAE3E,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,CAAE,WAAA,CAAY,EAAE,MAAA,EAAQ,CAAA,EAAE,EAAG,EAAE,MAAA,EAAQ,IAAA,EAAM,CAAA;AACtE,IAAA,MAAM,IAAA,CAAK,IAAI,UAAU,CAAA,CAAE,YAAY,EAAE,WAAA,EAAa,GAAG,CAAA;AAEzD,IAAA,IAAA,CAAK,cAAA,GAAiB,IAAA;AAAA,EACxB;AAAA,EAEA,MAAM,WAAW,IAAA,EAOK;AACpB,IAAA,MAAM,KAAK,UAAA,EAAW;AACtB,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,MAAM,YAAA,GAAe,MAAM,IAAA,CAAK,YAAA,CAAa,KAAK,QAAQ,CAAA;AAC1D,IAAA,MAAM,IAAA,GAAO;AAAA,MACX,GAAA,EAAK,EAAA;AAAA,MACL,IAAA,EAAM,KAAK,IAAA,IAAQ,IAAA;AAAA,MACnB,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,WAAA,EAAY;AAAA,MAC9B,YAAA;AAAA,MACA,IAAA,EAAM,KAAK,IAAA,IAAQ,UAAA;AAAA,MACnB,MAAA,EAAQ,KAAK,MAAA,IAAU,IAAA;AAAA,MACvB,QAAA,EAAU,KAAK,QAAA,IAAY,IAAA;AAAA,MAC3B,aAAA,EAAe,KAAA;AAAA,MACf,MAAA,EAAQ,KAAA;AAAA,MACR,SAAA,EAAW,IAAA;AAAA,MACX,mBAAA,EAAqB,CAAA;AAAA,MACrB,SAAA,EAAW,GAAA;AAAA,MACX,SAAA,EAAW;AAAA,KACb;AACA,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,CAAE,UAAU,IAAI,CAAA;AACtC,IAAA,OAAO,IAAA,CAAK,cAAc,IAAI,CAAA;AAAA,EAChC;AAAA,EAEA,MAAM,gBAAgB,KAAA,EAAyC;AAC7D,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,CAAE,OAAA,CAAQ,EAAE,KAAA,EAAO,KAAA,CAAM,WAAA,EAAY,EAAG,CAAA;AAC1E,IAAA,OAAO,GAAA,GAAM,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA,GAAI,IAAA;AAAA,EACzC;AAAA,EAEA,MAAM,aAAa,EAAA,EAAsC;AACvD,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,OAAA,CAAQ,EAAE,GAAA,EAAK,EAAA,EAAI,CAAA;AACvD,IAAA,OAAO,GAAA,GAAM,IAAA,CAAK,aAAA,CAAc,GAAG,CAAA,GAAI,IAAA;AAAA,EACzC;AAAA,EAEA,MAAM,UAAA,CACJ,EAAA,EACA,IAAA,EAC0B;AAC1B,IAAA,MAAM,OAAA,GAAmC,EAAE,SAAA,kBAAW,IAAI,MAAK,EAAE;AACjE,IAAA,IAAI,IAAA,CAAK,IAAA,KAAS,MAAA,EAAW,OAAA,CAAQ,OAAO,IAAA,CAAK,IAAA;AACjD,IAAA,IAAI,IAAA,CAAK,KAAA,KAAU,MAAA,EAAW,OAAA,CAAQ,QAAQ,IAAA,CAAK,KAAA;AACnD,IAAA,IAAI,IAAA,CAAK,YAAA,KAAiB,MAAA,EAAW,OAAA,CAAQ,eAAe,IAAA,CAAK,YAAA;AACjE,IAAA,IAAI,IAAA,CAAK,IAAA,KAAS,MAAA,EAAW,OAAA,CAAQ,OAAO,IAAA,CAAK,IAAA;AACjD,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,MAAA,EAAW,OAAA,CAAQ,SAAS,IAAA,CAAK,MAAA;AACrD,IAAA,IAAI,IAAA,CAAK,QAAA,KAAa,MAAA,EAAW,OAAA,CAAQ,WAAW,IAAA,CAAK,QAAA;AACzD,IAAA,IAAI,IAAA,CAAK,aAAA,KAAkB,MAAA,EAAW,OAAA,CAAQ,gBAAgB,IAAA,CAAK,aAAA;AACnE,IAAA,IAAI,IAAA,CAAK,MAAA,KAAW,MAAA,EAAW,OAAA,CAAQ,SAAS,IAAA,CAAK,MAAA;AACrD,IAAA,IAAI,IAAA,CAAK,SAAA,KAAc,MAAA,EAAW,OAAA,CAAQ,SAAA,GAAY,IAAA,CAAK,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,SAAS,CAAA,GAAI,IAAA;AAClG,IAAA,IAAI,IAAA,CAAK,mBAAA,KAAwB,MAAA,EAAW,OAAA,CAAQ,sBAAsB,IAAA,CAAK,mBAAA;AAE/E,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,CAAE,gBAAA;AAAA,MACrC,EAAE,KAAK,EAAA,EAAG;AAAA,MACV,EAAE,MAAM,OAAA,EAAQ;AAAA,MAChB,EAAE,gBAAgB,OAAA;AAAQ,KAC5B;AACA,IAAA,OAAO,MAAA,GAAS,IAAA,CAAK,aAAA,CAAc,MAAM,CAAA,GAAI,IAAA;AAAA,EAC/C;AAAA,EAEA,MAAM,WAAW,EAAA,EAA8B;AAC7C,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,SAAA,CAAU,EAAE,GAAA,EAAK,EAAA,EAAI,CAAA;AAC5D,IAAA,OAAO,OAAO,YAAA,GAAe,CAAA;AAAA,EAC/B;AAAA,EAEA,MAAM,cAAA,CACJ,KAAA,EACA,QAAA,EAC0B;AAC1B,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,eAAA,CAAgB,KAAK,CAAA;AAC7C,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,IAAA,MAAM,GAAA,GAAM,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,CAAE,OAAA;AAAA,MAClC,EAAE,KAAA,EAAO,KAAA,CAAM,WAAA,EAAY,EAAE;AAAA,MAC7B,EAAE,UAAA,EAAY,EAAE,YAAA,EAAc,GAAE;AAAE,KACpC;AACA,IAAA,IAAI,CAAC,GAAA,EAAK,YAAA,EAAc,OAAO,IAAA;AAC/B,IAAA,MAAM,QAAQ,MAAM,MAAA,CAAO,OAAA,CAAQ,QAAA,EAAU,IAAI,YAAY,CAAA;AAC7D,IAAA,OAAO,QAAQ,IAAA,GAAO,IAAA;AAAA,EACxB;AAAA,EAEA,MAAM,aAAa,QAAA,EAAmC;AACpD,IAAA,OAAO,MAAA,CAAO,IAAA,CAAK,QAAA,EAAU,EAAE,CAAA;AAAA,EACjC;AAAA,EAEA,MAAM,aAAA,CACJ,MAAA,EACA,IAAA,EACkB;AAClB,IAAA,MAAM,KAAK,UAAA,EAAW;AACtB,IAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,EAAE,CAAA,CAAE,SAAS,WAAW,CAAA;AAClD,IAAA,MAAM,YAAA,GAAe,WAAA,CAAY,EAAE,CAAA,CAAE,SAAS,WAAW,CAAA;AACzD,IAAA,MAAM,GAAA,uBAAU,IAAA,EAAK;AACrB,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,GAAA,CAAI,SAAQ,GAAI,IAAA,CAAK,aAAa,GAAI,CAAA;AAEjE,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,GAAA,EAAK,EAAA;AAAA,MACL,MAAA;AAAA,MACA,KAAA;AAAA,MACA,YAAA;AAAA,MACA,SAAA,EAAW,MAAM,SAAA,IAAa,IAAA;AAAA,MAC9B,SAAA,EAAW,MAAM,SAAA,IAAa,IAAA;AAAA,MAC9B,SAAA;AAAA,MACA,SAAA,EAAW;AAAA,KACb;AAEA,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,CAAE,UAAU,OAAO,CAAA;AAC5C,IAAA,OAAO,IAAA,CAAK,aAAa,OAAO,CAAA;AAAA,EAClC;AAAA,EAEA,MAAM,mBAAmB,KAAA,EAAwC;AAC/D,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,GAAA,CAAI,UAAU,EAAE,OAAA,CAAQ;AAAA,MAC7C,KAAA;AAAA,MACA,SAAA,EAAW,EAAE,GAAA,kBAAK,IAAI,MAAK;AAAE,KAC9B,CAAA;AACD,IAAA,OAAO,GAAA,GAAM,IAAA,CAAK,YAAA,CAAa,GAAG,CAAA,GAAI,IAAA;AAAA,EACxC;AAAA,EAEA,MAAM,0BACJ,YAAA,EACyB;AACzB,IAAA,MAAM,MAAM,MAAM,IAAA,CAAK,GAAA,CAAI,UAAU,EAAE,OAAA,CAAQ;AAAA,MAC7C,YAAA;AAAA,MACA,SAAA,EAAW,EAAE,GAAA,kBAAK,IAAI,MAAK;AAAE,KAC9B,CAAA;AACD,IAAA,OAAO,GAAA,GAAM,IAAA,CAAK,YAAA,CAAa,GAAG,CAAA,GAAI,IAAA;AAAA,EACxC;AAAA,EAEA,MAAM,cAAc,SAAA,EAAqC;AACvD,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,GAAA,CAAI,UAAU,EAAE,SAAA,CAAU,EAAE,GAAA,EAAK,SAAA,EAAW,CAAA;AACtE,IAAA,OAAO,OAAO,YAAA,GAAe,CAAA;AAAA,EAC/B;AAAA,EAEA,MAAM,mBAAmB,MAAA,EAAiC;AACxD,IAAA,MAAM,MAAA,GAAS,MAAM,IAAA,CAAK,GAAA,CAAI,UAAU,CAAA,CAAE,UAAA,CAAW,EAAE,MAAA,EAAQ,CAAA;AAC/D,IAAA,OAAO,MAAA,CAAO,YAAA;AAAA,EAChB;AAAA,EAEA,MAAM,WAAA,GAAgC;AACpC,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,GAAA,CAAI,OAAO,EAAE,cAAA,EAAe;AACrD,IAAA,OAAO,KAAA,GAAQ,CAAA;AAAA,EACjB;AAAA,EAEA,MAAM,oBAAA,CACJ,MAAA,EACA,YAAA,EACe;AACf,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,CAAE,SAAA,CAAU;AAAA,MAC3C,MAAA;AAAA,MACA,YAAA;AAAA,MACA,SAAA,sBAAe,IAAA;AAAK,KACrB,CAAA;AAAA,EACH;AAAA,EAEA,MAAM,kBAAA,CACJ,MAAA,EACA,KAAA,GAAgB,CAAA,EACG;AACnB,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,GAAA,CAAI,kBAAkB,CAAA,CAC3C,IAAA,CAAK,EAAE,MAAA,EAAQ,EACf,IAAA,CAAK,EAAE,WAAW,EAAA,EAAI,EACtB,KAAA,CAAM,KAAK,EACX,OAAA,EAAQ;AACX,IAAA,OAAO,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,KAAW,EAAE,YAAY,CAAA;AAAA,EAC5C;AAAA,EAEA,MAAM,mBAAA,CACJ,QAAA,EACA,MAAA,EACA,eAAuB,CAAA,EACL;AAClB,IAAA,MAAM,OAAA,GAAU,MAAM,IAAA,CAAK,kBAAA,CAAmB,QAAQ,YAAY,CAAA;AAClE,IAAA,KAAA,MAAW,QAAQ,OAAA,EAAS;AAC1B,MAAA,IAAI,MAAM,MAAA,CAAO,OAAA,CAAQ,QAAA,EAAU,IAAI,CAAA,EAAG;AACxC,QAAA,OAAO,IAAA;AAAA,MACT;AAAA,IACF;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AAAA,EAEA,MAAM,cACJ,MAAA,EAC8C;AAC9C,IAAA,MAAM;AAAA,MACJ,KAAA,GAAQ,EAAA;AAAA,MACR,MAAA,GAAS,CAAA;AAAA,MACT,MAAA;AAAA,MACA,MAAA;AAAA,MACA,QAAA;AAAA,MACA,UAAA;AAAA,MACA,OAAA;AAAA,MACA,SAAA;AAAA,MACA;AAAA,KACF,GAAI,MAAA;AAEJ,IAAA,MAAM,QAA6B,EAAC;AACpC,IAAA,IAAI,MAAA,QAAc,MAAA,GAAS,MAAA;AAC3B,IAAA,IAAI,MAAA,EAAQ;AACV,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,MAAM,CAAA,EAAG;AACzB,QAAA,KAAA,CAAM,MAAA,GAAS,EAAE,GAAA,EAAK,MAAA,EAAO;AAAA,MAC/B,CAAA,MAAO;AACL,QAAA,KAAA,CAAM,MAAA,GAAS,MAAA;AAAA,MACjB;AAAA,IACF;AACA,IAAA,IAAI,QAAA,QAAgB,QAAA,GAAW,QAAA;AAC/B,IAAA,IAAI,UAAA,QAAkB,UAAA,GAAa,UAAA;AACnC,IAAA,IAAI,OAAA,KAAY,MAAA,EAAW,KAAA,CAAM,OAAA,GAAU,OAAA;AAC3C,IAAA,IAAI,aAAa,OAAA,EAAS;AACxB,MAAA,KAAA,CAAM,YAAY,EAAC;AACnB,MAAA,IAAI,SAAA,EAAW,KAAA,CAAM,SAAA,CAAU,IAAA,GAAO,SAAA;AACtC,MAAA,IAAI,OAAA,EAAS,KAAA,CAAM,SAAA,CAAU,IAAA,GAAO,OAAA;AAAA,IACtC;AAEA,IAAA,MAAM,QAAQ,MAAM,IAAA,CAAK,IAAI,YAAY,CAAA,CAAE,eAAe,KAAK,CAAA;AAC/D,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA,CACrC,IAAA,CAAK,KAAK,CAAA,CACV,IAAA,CAAK,EAAE,SAAA,EAAW,EAAA,EAAI,CAAA,CACtB,IAAA,CAAK,MAAM,CAAA,CACX,KAAA,CAAM,KAAK,CAAA,CACX,OAAA,EAAQ;AAEX,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,IAAA,CAAK,GAAA,CAAI,CAAC,GAAA,MAAc;AAAA,QAC5B,IAAI,GAAA,CAAI,GAAA;AAAA,QACR,WAAW,GAAA,CAAI,SAAA;AAAA,QACf,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,MAAA,EAAQ,IAAI,MAAA,IAAU,MAAA;AAAA,QACtB,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA,QAC5B,IAAA,EAAM,IAAI,IAAA,IAAQ,MAAA;AAAA,QAClB,UAAU,GAAA,CAAI,QAAA;AAAA,QACd,UAAA,EAAY,IAAI,UAAA,IAAc,MAAA;AAAA,QAC9B,OAAA,EAAS,IAAI,OAAA,IAAW,MAAA;AAAA,QACxB,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA,QAC5B,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA,QAC5B,SAAS,GAAA,CAAI,OAAA;AAAA,QACb,KAAA,EAAO,IAAI,KAAA,IAAS,MAAA;AAAA,QACpB,QAAA,EAAU,IAAI,QAAA,IAAY;AAAA,OAC5B,CAAE,CAAA;AAAA,MACF;AAAA,KACF;AAAA,EACF;AAAA,EAEA,MAAM,eACJ,IAAA,EACmB;AACnB,IAAA,MAAM,KAAK,UAAA,EAAW;AACtB,IAAA,MAAM,SAAA,uBAAgB,IAAA,EAAK;AAE3B,IAAA,MAAM,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA,CAAE,SAAA,CAAU;AAAA,MACrC,GAAA,EAAK,EAAA;AAAA,MACL,QAAQ,IAAA,CAAK,MAAA;AAAA,MACb,MAAA,EAAQ,KAAK,MAAA,IAAU,IAAA;AAAA,MACvB,SAAA,EAAW,KAAK,SAAA,IAAa,IAAA;AAAA,MAC7B,IAAA,EAAM,KAAK,IAAA,IAAQ,IAAA;AAAA,MACnB,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,UAAA,EAAY,KAAK,UAAA,IAAc,IAAA;AAAA,MAC/B,OAAA,EAAS,KAAK,OAAA,IAAW,IAAA;AAAA,MACzB,SAAA,EAAW,KAAK,SAAA,IAAa,IAAA;AAAA,MAC7B,SAAA,EAAW,KAAK,SAAA,IAAa,IAAA;AAAA,MAC7B,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,KAAA,EAAO,KAAK,KAAA,IAAS,IAAA;AAAA,MACrB,QAAA,EAAU,KAAK,QAAA,IAAY,IAAA;AAAA,MAC3B;AAAA,KACD,CAAA;AAED,IAAA,OAAO;AAAA,MACL,GAAG,IAAA;AAAA,MACH,EAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA,EAEQ,cAAc,GAAA,EAAoB;AACxC,IAAA,OAAO;AAAA,MACL,IAAI,GAAA,CAAI,GAAA;AAAA,MACR,IAAA,EAAM,IAAI,IAAA,IAAQ,MAAA;AAAA,MAClB,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,YAAA,EAAc,IAAI,YAAA,IAAgB,MAAA;AAAA,MAClC,MAAM,GAAA,CAAI,IAAA;AAAA,MACV,QAAA,EAAU,IAAI,QAAA,IAAY,MAAA;AAAA,MAC1B,MAAA,EAAQ,IAAI,MAAA,IAAU,MAAA;AAAA,MACtB,aAAA,EAAe,IAAI,aAAA,IAAiB,KAAA;AAAA,MACpC,MAAA,EAAQ,IAAI,MAAA,IAAU,KAAA;AAAA,MACtB,WAAW,GAAA,CAAI,SAAA,EAAW,WAAA,IAAc,IAAK,IAAI,SAAA,IAAa,MAAA;AAAA,MAC9D,mBAAA,EAAqB,IAAI,mBAAA,IAAuB,CAAA;AAAA,MAChD,SAAA,EAAW,GAAA,CAAI,SAAA,EAAW,WAAA,QAAmB,GAAA,CAAI,SAAA;AAAA,MACjD,SAAA,EAAW,GAAA,CAAI,SAAA,EAAW,WAAA,QAAmB,GAAA,CAAI;AAAA,KACnD;AAAA,EACF;AAAA,EAEQ,aAAa,GAAA,EAAmB;AACtC,IAAA,OAAO;AAAA,MACL,IAAI,GAAA,CAAI,GAAA;AAAA,MACR,QAAQ,GAAA,CAAI,MAAA;AAAA,MACZ,OAAO,GAAA,CAAI,KAAA;AAAA,MACX,YAAA,EAAc,IAAI,YAAA,IAAgB,MAAA;AAAA,MAClC,SAAA,EAAW,GAAA,CAAI,SAAA,EAAW,WAAA,QAAmB,GAAA,CAAI,SAAA;AAAA,MACjD,SAAA,EAAW,GAAA,CAAI,SAAA,EAAW,WAAA,QAAmB,GAAA,CAAI,SAAA;AAAA,MACjD,SAAA,EAAW,IAAI,SAAA,IAAa,MAAA;AAAA,MAC5B,SAAA,EAAW,IAAI,SAAA,IAAa;AAAA,KAC9B;AAAA,EACF;AAAA,EAEA,MAAM,6BAA6B,MAAA,EAA6D;AAC9F,IAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,EAAE,CAAA,CAAE,SAAS,KAAK,CAAA;AAC5C,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,KAAI,GAAI,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,GAAI,CAAA;AAE3D,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,qBAAqB,EAAE,SAAA,CAAU;AAAA,MACxD,QAAQ,IAAA,CAAK,MAAM,OAAO,SAAS,CAAA,EAAG,SAAS,MAAM,CAAA;AAAA,MACrD,KAAA;AAAA,MACA,SAAA;AAAA,MACA,SAAA,sBAAe,IAAA;AAAK,KACrB,CAAA;AAED,IAAA,OAAO,EAAE,OAAO,SAAA,EAAU;AAAA,EAC5B;AAAA,EAEA,MAAM,iBAAiB,KAAA,EAA+E;AACpG,IAAA,MAAM,YAAA,GAAe,MAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,qBAAqB,CAAA,CAAE,OAAA,CAAQ,EAAE,KAAA,EAAO,CAAA;AAEtF,IAAA,IAAI,CAAC,YAAA,EAAc;AACjB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,4BAAA,EAA6B;AAAA,IAC/D;AAEA,IAAA,IAAI,YAAA,CAAa,SAAA,mBAAY,IAAI,IAAA,EAAK,EAAG;AACvC,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,gCAAA,EAAiC;AAAA,IACnE;AAEA,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,OAAO,CAAA,CAAE,SAAA;AAAA,MAChC,EAAE,GAAA,EAAK,YAAA,CAAa,MAAA,EAAO;AAAA,MAC3B,EAAE,IAAA,EAAM,EAAE,aAAA,EAAe,MAAK;AAAE,KAClC;AAEA,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,qBAAqB,CAAA,CAAE,UAAU,EAAE,GAAA,EAAK,YAAA,CAAa,GAAA,EAAK,CAAA;AAEnF,IAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,QAAQ,YAAA,CAAa,MAAA,CAAO,UAAS,EAAE;AAAA,EACjE;AAAA,EAEA,MAAM,yBAAyB,KAAA,EAA4E;AACzG,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,CAAK,eAAA,CAAgB,KAAK,CAAA;AAC7C,IAAA,IAAI,CAAC,IAAA,EAAM;AACT,MAAA,OAAO,EAAE,OAAO,EAAA,EAAI,SAAA,sBAAe,IAAA,EAAK,EAAG,OAAO,gBAAA,EAAiB;AAAA,IACrE;AAEA,IAAA,MAAM,KAAA,GAAQ,WAAA,CAAY,EAAE,CAAA,CAAE,SAAS,KAAK,CAAA;AAC5C,IAAA,MAAM,SAAA,GAAY,IAAI,IAAA,CAAK,IAAA,CAAK,KAAI,GAAI,EAAA,GAAK,KAAK,GAAI,CAAA;AAEtD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,iBAAiB,EAAE,SAAA,CAAU;AAAA,MACpD,MAAA,EAAQ,KAAK,MAAM,OAAO,SAAS,CAAA,EAAG,QAAA,CAAS,KAAK,EAAE,CAAA;AAAA,MACtD,KAAA;AAAA,MACA,SAAA;AAAA,MACA,SAAA,sBAAe,IAAA;AAAK,KACrB,CAAA;AAED,IAAA,OAAO,EAAE,OAAO,SAAA,EAAU;AAAA,EAC5B;AAAA,EAEA,MAAM,sBAAA,CAAuB,KAAA,EAAe,WAAA,EAAoE;AAC9G,IAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,iBAAiB,CAAA,CAAE,OAAA,CAAQ,EAAE,KAAA,EAAO,CAAA;AAE3E,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,qBAAA,EAAsB;AAAA,IACxD;AAEA,IAAA,IAAI,KAAA,CAAM,SAAA,mBAAY,IAAI,IAAA,EAAK,EAAG;AAChC,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,yBAAA,EAA0B;AAAA,IAC5D;AAEA,IAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,MAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,KAAA,EAAO,mCAAA,EAAoC;AAAA,IACtE;AAEA,IAAA,MAAM,YAAA,GAAe,MAAM,IAAA,CAAK,YAAA,CAAa,WAAW,CAAA;AAExD,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,OAAO,CAAA,CAAE,SAAA;AAAA,MAChC,EAAE,GAAA,EAAK,KAAA,CAAM,MAAA,EAAO;AAAA,MACpB,EAAE,MAAM,EAAE,YAAA,EAAc,2BAAW,IAAI,IAAA,IAAO;AAAE,KAClD;AAEA,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,iBAAiB,CAAA,CAAE,SAAA;AAAA,MAC1C,EAAE,GAAA,EAAK,KAAA,CAAM,GAAA,EAAI;AAAA,MACjB,EAAE,IAAA,EAAM,EAAE,wBAAQ,IAAI,IAAA,IAAO;AAAE,KACjC;AAEA,IAAA,MAAM,IAAA,CAAK,EAAA,CAAG,UAAA,CAAW,UAAU,CAAA,CAAE,WAAW,EAAE,MAAA,EAAQ,KAAA,CAAM,MAAA,EAAQ,CAAA;AAExE,IAAA,OAAO,EAAE,SAAS,IAAA,EAAK;AAAA,EACzB;AACF;AAEO,SAAS,yBACd,OAAA,EACoB;AACpB,EAAA,OAAO,IAAI,mBAAmB,OAAO,CAAA;AACvC","file":"chunk-7OGPN7MP.js","sourcesContent":["import bcrypt from \"bcryptjs\";\nimport { randomBytes, randomUUID } from \"crypto\";\nimport type {\n  AuthAdapter,\n  AuthUser,\n  Session,\n  UserRole,\n} from \"../../auth/types.js\";\nimport type {\n  AuditLog,\n  AuditLogFilter,\n} from \"../../auth/security/audit-log.js\";\n\nexport interface MongoDBAuthAdapterOptions {\n  db: any;\n  collectionPrefix?: string;\n  sessionTTL?: number;\n  refreshTokenTTL?: number;\n}\n\nexport class MongoDBAuthAdapter implements AuthAdapter {\n  private db: any;\n  private prefix: string;\n  private sessionTTL: number;\n  private refreshTokenTTL: number;\n  private indexesEnsured = false;\n\n  constructor(options: MongoDBAuthAdapterOptions) {\n    this.db = options.db;\n    this.prefix = options.collectionPrefix || \"\";\n    this.sessionTTL = options.sessionTTL || 86400;\n    this.refreshTokenTTL = options.refreshTokenTTL || 604800;\n  }\n\n  private col(name: string): any {\n    return this.db.collection(`${this.prefix}${name}`);\n  }\n\n  async connect(): Promise<void> {\n    if (!this.indexesEnsured) {\n      await this.ensureIndexes();\n    }\n  }\n\n  async disconnect(): Promise<void> {\n  }\n\n  private async ensureIndexes(): Promise<void> {\n    await this.col(\"users\").createIndex({ email: 1 }, { unique: true });\n    await this.col(\"users\").createIndex({ tenantId: 1 });\n    await this.col(\"users\").createIndex({ role: 1 });\n\n    await this.col(\"sessions\").createIndex({ token: 1 }, { unique: true });\n    await this.col(\"sessions\").createIndex({ refreshToken: 1 });\n    await this.col(\"sessions\").createIndex({ userId: 1 });\n    await this.col(\"sessions\").createIndex({ expiresAt: 1 }, { expireAfterSeconds: 0 });\n\n    await this.col(\"audit_logs\").createIndex({ timestamp: -1 });\n    await this.col(\"audit_logs\").createIndex({ userId: 1 });\n    await this.col(\"audit_logs\").createIndex({ action: 1 });\n    await this.col(\"audit_logs\").createIndex({ resource: 1 });\n\n    await this.col(\"password_history\").createIndex({ userId: 1, createdAt: -1 });\n\n    await this.col(\"lockouts\").createIndex({ userId: 1 }, { unique: true });\n    await this.col(\"lockouts\").createIndex({ lockedUntil: 1 });\n\n    this.indexesEnsured = true;\n  }\n\n  async createUser(data: {\n    email: string;\n    password: string;\n    name?: string;\n    role?: UserRole;\n    avatar?: string;\n    tenantId?: string;\n  }): Promise<AuthUser> {\n    const id = randomUUID();\n    const now = new Date();\n    const passwordHash = await this.hashPassword(data.password);\n    const user = {\n      _id: id,\n      name: data.name || null,\n      email: data.email.toLowerCase(),\n      passwordHash,\n      role: data.role || \"customer\",\n      avatar: data.avatar || null,\n      tenantId: data.tenantId || null,\n      emailVerified: false,\n      locked: false,\n      lastLogin: null,\n      failedLoginAttempts: 0,\n      createdAt: now,\n      updatedAt: now,\n    };\n    await this.col(\"users\").insertOne(user);\n    return this.docToAuthUser(user);\n  }\n\n  async findUserByEmail(email: string): Promise<AuthUser | null> {\n    const doc = await this.col(\"users\").findOne({ email: email.toLowerCase() });\n    return doc ? this.docToAuthUser(doc) : null;\n  }\n\n  async findUserById(id: string): Promise<AuthUser | null> {\n    const doc = await this.col(\"users\").findOne({ _id: id });\n    return doc ? this.docToAuthUser(doc) : null;\n  }\n\n  async updateUser(\n    id: string,\n    data: Partial<AuthUser>,\n  ): Promise<AuthUser | null> {\n    const setData: Record<string, unknown> = { updatedAt: new Date() };\n    if (data.name !== undefined) setData.name = data.name;\n    if (data.email !== undefined) setData.email = data.email;\n    if (data.passwordHash !== undefined) setData.passwordHash = data.passwordHash;\n    if (data.role !== undefined) setData.role = data.role;\n    if (data.avatar !== undefined) setData.avatar = data.avatar;\n    if (data.tenantId !== undefined) setData.tenantId = data.tenantId;\n    if (data.emailVerified !== undefined) setData.emailVerified = data.emailVerified;\n    if (data.locked !== undefined) setData.locked = data.locked;\n    if (data.lastLogin !== undefined) setData.lastLogin = data.lastLogin ? new Date(data.lastLogin) : null;\n    if (data.failedLoginAttempts !== undefined) setData.failedLoginAttempts = data.failedLoginAttempts;\n\n    const result = await this.col(\"users\").findOneAndUpdate(\n      { _id: id },\n      { $set: setData },\n      { returnDocument: \"after\" },\n    );\n    return result ? this.docToAuthUser(result) : null;\n  }\n\n  async deleteUser(id: string): Promise<boolean> {\n    const result = await this.col(\"users\").deleteOne({ _id: id });\n    return result.deletedCount > 0;\n  }\n\n  async verifyPassword(\n    email: string,\n    password: string,\n  ): Promise<AuthUser | null> {\n    const user = await this.findUserByEmail(email);\n    if (!user) return null;\n    const doc = await this.col(\"users\").findOne(\n      { email: email.toLowerCase() },\n      { projection: { passwordHash: 1 } },\n    );\n    if (!doc?.passwordHash) return null;\n    const valid = await bcrypt.compare(password, doc.passwordHash);\n    return valid ? user : null;\n  }\n\n  async hashPassword(password: string): Promise<string> {\n    return bcrypt.hash(password, 12);\n  }\n\n  async createSession(\n    userId: string,\n    data?: { ipAddress?: string; userAgent?: string },\n  ): Promise<Session> {\n    const id = randomUUID();\n    const token = randomBytes(32).toString(\"base64url\");\n    const refreshToken = randomBytes(32).toString(\"base64url\");\n    const now = new Date();\n    const expiresAt = new Date(now.getTime() + this.sessionTTL * 1000);\n\n    const session = {\n      _id: id,\n      userId,\n      token,\n      refreshToken,\n      ipAddress: data?.ipAddress || null,\n      userAgent: data?.userAgent || null,\n      expiresAt,\n      createdAt: now,\n    };\n\n    await this.col(\"sessions\").insertOne(session);\n    return this.docToSession(session);\n  }\n\n  async findSessionByToken(token: string): Promise<Session | null> {\n    const doc = await this.col(\"sessions\").findOne({\n      token,\n      expiresAt: { $gt: new Date() },\n    });\n    return doc ? this.docToSession(doc) : null;\n  }\n\n  async findSessionByRefreshToken(\n    refreshToken: string,\n  ): Promise<Session | null> {\n    const doc = await this.col(\"sessions\").findOne({\n      refreshToken,\n      expiresAt: { $gt: new Date() },\n    });\n    return doc ? this.docToSession(doc) : null;\n  }\n\n  async deleteSession(sessionId: string): Promise<boolean> {\n    const result = await this.col(\"sessions\").deleteOne({ _id: sessionId });\n    return result.deletedCount > 0;\n  }\n\n  async deleteUserSessions(userId: string): Promise<number> {\n    const result = await this.col(\"sessions\").deleteMany({ userId });\n    return result.deletedCount;\n  }\n\n  async hasAnyUsers(): Promise<boolean> {\n    const count = await this.col(\"users\").countDocuments();\n    return count > 0;\n  }\n\n  async addPasswordToHistory(\n    userId: string,\n    passwordHash: string,\n  ): Promise<void> {\n    await this.col(\"password_history\").insertOne({\n      userId,\n      passwordHash,\n      createdAt: new Date(),\n    });\n  }\n\n  async getPasswordHistory(\n    userId: string,\n    count: number = 5,\n  ): Promise<string[]> {\n    const docs = await this.col(\"password_history\")\n      .find({ userId })\n      .sort({ createdAt: -1 })\n      .limit(count)\n      .toArray();\n    return docs.map((d: any) => d.passwordHash);\n  }\n\n  async isPasswordInHistory(\n    password: string,\n    userId: string,\n    historyCount: number = 5,\n  ): Promise<boolean> {\n    const history = await this.getPasswordHistory(userId, historyCount);\n    for (const hash of history) {\n      if (await bcrypt.compare(password, hash)) {\n        return true;\n      }\n    }\n    return false;\n  }\n\n  async findAuditLogs(\n    filter: AuditLogFilter,\n  ): Promise<{ logs: AuditLog[]; total: number }> {\n    const {\n      limit = 50,\n      offset = 0,\n      userId,\n      action,\n      resource,\n      resourceId,\n      success,\n      startDate,\n      endDate,\n    } = filter;\n\n    const query: Record<string, any> = {};\n    if (userId) query.userId = userId;\n    if (action) {\n      if (Array.isArray(action)) {\n        query.action = { $in: action };\n      } else {\n        query.action = action;\n      }\n    }\n    if (resource) query.resource = resource;\n    if (resourceId) query.resourceId = resourceId;\n    if (success !== undefined) query.success = success;\n    if (startDate || endDate) {\n      query.timestamp = {};\n      if (startDate) query.timestamp.$gte = startDate;\n      if (endDate) query.timestamp.$lte = endDate;\n    }\n\n    const total = await this.col(\"audit_logs\").countDocuments(query);\n    const docs = await this.col(\"audit_logs\")\n      .find(query)\n      .sort({ timestamp: -1 })\n      .skip(offset)\n      .limit(limit)\n      .toArray();\n\n    return {\n      logs: docs.map((doc: any) => ({\n        id: doc._id,\n        timestamp: doc.timestamp,\n        action: doc.action as AuditLog[\"action\"],\n        userId: doc.userId || undefined,\n        userEmail: doc.userEmail || undefined,\n        role: doc.role || undefined,\n        resource: doc.resource,\n        resourceId: doc.resourceId || undefined,\n        changes: doc.changes || undefined,\n        ipAddress: doc.ipAddress || undefined,\n        userAgent: doc.userAgent || undefined,\n        success: doc.success,\n        error: doc.error || undefined,\n        metadata: doc.metadata || undefined,\n      })),\n      total,\n    };\n  }\n\n  async createAuditLog(\n    data: Omit<AuditLog, \"id\" | \"timestamp\">,\n  ): Promise<AuditLog> {\n    const id = randomUUID();\n    const timestamp = new Date();\n\n    await this.col(\"audit_logs\").insertOne({\n      _id: id,\n      action: data.action,\n      userId: data.userId || null,\n      userEmail: data.userEmail || null,\n      role: data.role || null,\n      resource: data.resource,\n      resourceId: data.resourceId || null,\n      changes: data.changes || null,\n      ipAddress: data.ipAddress || null,\n      userAgent: data.userAgent || null,\n      success: data.success,\n      error: data.error || null,\n      metadata: data.metadata || null,\n      timestamp,\n    });\n\n    return {\n      ...data,\n      id,\n      timestamp,\n    };\n  }\n\n  private docToAuthUser(doc: any): AuthUser {\n    return {\n      id: doc._id,\n      name: doc.name || undefined,\n      email: doc.email,\n      passwordHash: doc.passwordHash || undefined,\n      role: doc.role as UserRole,\n      tenantId: doc.tenantId || undefined,\n      avatar: doc.avatar || undefined,\n      emailVerified: doc.emailVerified || false,\n      locked: doc.locked || false,\n      lastLogin: doc.lastLogin?.toISOString?.() || doc.lastLogin || undefined,\n      failedLoginAttempts: doc.failedLoginAttempts || 0,\n      createdAt: doc.createdAt?.toISOString?.() || doc.createdAt,\n      updatedAt: doc.updatedAt?.toISOString?.() || doc.updatedAt,\n    };\n  }\n\n  private docToSession(doc: any): Session {\n    return {\n      id: doc._id,\n      userId: doc.userId,\n      token: doc.token,\n      refreshToken: doc.refreshToken || undefined,\n      expiresAt: doc.expiresAt?.toISOString?.() || doc.expiresAt,\n      createdAt: doc.createdAt?.toISOString?.() || doc.createdAt,\n      ipAddress: doc.ipAddress || undefined,\n      userAgent: doc.userAgent || undefined,\n    };\n  }\n\n  async createEmailVerificationToken(userId: string): Promise<{ token: string; expiresAt: Date }> {\n    const token = randomBytes(32).toString(\"hex\");\n    const expiresAt = new Date(Date.now() + 24 * 60 * 60 * 1000);\n\n    await this.db.collection(\"email_verifications\").insertOne({\n      userId: new (await import(\"mongodb\")).ObjectId(userId),\n      token,\n      expiresAt,\n      createdAt: new Date(),\n    });\n\n    return { token, expiresAt };\n  }\n\n  async verifyEmailToken(token: string): Promise<{ success: boolean; userId?: string; error?: string }> {\n    const verification = await this.db.collection(\"email_verifications\").findOne({ token });\n\n    if (!verification) {\n      return { success: false, error: \"Invalid verification token\" };\n    }\n\n    if (verification.expiresAt < new Date()) {\n      return { success: false, error: \"Verification token has expired\" };\n    }\n\n    await this.db.collection(\"users\").updateOne(\n      { _id: verification.userId },\n      { $set: { emailVerified: true } }\n    );\n\n    await this.db.collection(\"email_verifications\").deleteOne({ _id: verification._id });\n\n    return { success: true, userId: verification.userId.toString() };\n  }\n\n  async createPasswordResetToken(email: string): Promise<{ token: string; expiresAt: Date; error?: string }> {\n    const user = await this.findUserByEmail(email);\n    if (!user) {\n      return { token: \"\", expiresAt: new Date(), error: \"User not found\" };\n    }\n\n    const token = randomBytes(32).toString(\"hex\");\n    const expiresAt = new Date(Date.now() + 60 * 60 * 1000);\n\n    await this.db.collection(\"password_resets\").insertOne({\n      userId: new (await import(\"mongodb\")).ObjectId(user.id),\n      token,\n      expiresAt,\n      createdAt: new Date(),\n    });\n\n    return { token, expiresAt };\n  }\n\n  async resetPasswordWithToken(token: string, newPassword: string): Promise<{ success: boolean; error?: string }> {\n    const reset = await this.db.collection(\"password_resets\").findOne({ token });\n\n    if (!reset) {\n      return { success: false, error: \"Invalid reset token\" };\n    }\n\n    if (reset.expiresAt < new Date()) {\n      return { success: false, error: \"Reset token has expired\" };\n    }\n\n    if (reset.usedAt) {\n      return { success: false, error: \"Reset token has already been used\" };\n    }\n\n    const passwordHash = await this.hashPassword(newPassword);\n\n    await this.db.collection(\"users\").updateOne(\n      { _id: reset.userId },\n      { $set: { passwordHash, updatedAt: new Date() } }\n    );\n\n    await this.db.collection(\"password_resets\").updateOne(\n      { _id: reset._id },\n      { $set: { usedAt: new Date() } }\n    );\n\n    await this.db.collection(\"sessions\").deleteMany({ userId: reset.userId });\n\n    return { success: true };\n  }\n}\n\nexport function createMongoDBAuthAdapter(\n  options: MongoDBAuthAdapterOptions,\n): MongoDBAuthAdapter {\n  return new MongoDBAuthAdapter(options);\n}\n"]}