@lenne.tech/nest-server 11.6.1 → 11.7.0

package/dist/core/modules/better-auth/core-better-auth.resolver.js

@@ -0,0 +1,538 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var CoreBetterAuthResolver_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CoreBetterAuthResolver = void 0;
+const common_1 = require("@nestjs/common");
+const graphql_1 = require("@nestjs/graphql");
+const roles_decorator_1 = require("../../common/decorators/roles.decorator");
+const role_enum_1 = require("../../common/enums/role.enum");
+const auth_guard_strategy_enum_1 = require("../auth/auth-guard-strategy.enum");
+const auth_guard_1 = require("../auth/guards/auth.guard");
+const better_auth_auth_model_1 = require("./better-auth-auth.model");
+const better_auth_models_1 = require("./better-auth-models");
+const better_auth_user_mapper_1 = require("./better-auth-user.mapper");
+const better_auth_service_1 = require("./better-auth.service");
+const better_auth_types_1 = require("./better-auth.types");
+let CoreBetterAuthResolver = CoreBetterAuthResolver_1 = class CoreBetterAuthResolver {
+    constructor(betterAuthService, userMapper) {
+        this.betterAuthService = betterAuthService;
+        this.userMapper = userMapper;
+        this.logger = new common_1.Logger(CoreBetterAuthResolver_1.name);
+    }
+    async betterAuthSession(ctx) {
+        if (!this.betterAuthService.isEnabled()) {
+            return null;
+        }
+        const { session, user } = await this.betterAuthService.getSession(ctx.req);
+        if (!session || !user) {
+            return null;
+        }
+        return {
+            expiresAt: session.expiresAt,
+            id: session.id,
+            user: {
+                email: user.email,
+                emailVerified: user.emailVerified,
+                id: user.id,
+                name: user.name,
+            },
+        };
+    }
+    betterAuthEnabled() {
+        return this.betterAuthService.isEnabled();
+    }
+    betterAuthFeatures() {
+        return {
+            enabled: this.betterAuthService.isEnabled(),
+            jwt: this.betterAuthService.isJwtEnabled(),
+            passkey: this.betterAuthService.isPasskeyEnabled(),
+            socialProviders: this.betterAuthService.getEnabledSocialProviders(),
+            twoFactor: this.betterAuthService.isTwoFactorEnabled(),
+        };
+    }
+    async betterAuthSignIn(email, password, _ctx) {
+        this.ensureEnabled();
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            throw new common_1.BadRequestException('Better-Auth API not available');
+        }
+        try {
+            const response = (await api.signInEmail({
+                body: { email, password },
+            }));
+            if (!response) {
+                throw new common_1.UnauthorizedException('Invalid credentials');
+            }
+            if ((0, better_auth_types_1.requires2FA)(response)) {
+                return {
+                    requiresTwoFactor: true,
+                    success: false,
+                    user: null,
+                };
+            }
+            if ((0, better_auth_types_1.hasUser)(response)) {
+                const sessionUser = response.user;
+                const mappedUser = await this.userMapper.mapSessionUser(sessionUser);
+                const token = this.betterAuthService.isJwtEnabled() ? response.token : undefined;
+                return {
+                    requiresTwoFactor: false,
+                    session: (0, better_auth_types_1.hasSession)(response) ? this.mapSessionInfo(response.session) : null,
+                    success: true,
+                    token,
+                    user: mappedUser ? this.mapToUserModel(mappedUser) : null,
+                };
+            }
+            throw new common_1.UnauthorizedException('Invalid credentials');
+        }
+        catch (error) {
+            this.logger.debug(`Sign-in error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            throw new common_1.UnauthorizedException('Invalid credentials');
+        }
+    }
+    async betterAuthSignUp(email, password, name) {
+        this.ensureEnabled();
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            throw new common_1.BadRequestException('Better-Auth API not available');
+        }
+        try {
+            const response = (await api.signUpEmail({
+                body: {
+                    email,
+                    name: name || email.split('@')[0],
+                    password,
+                },
+            }));
+            if (!response) {
+                throw new common_1.BadRequestException('Sign-up failed');
+            }
+            if ((0, better_auth_types_1.hasUser)(response)) {
+                const sessionUser = response.user;
+                await this.userMapper.linkOrCreateUser(sessionUser);
+                const mappedUser = await this.userMapper.mapSessionUser(sessionUser);
+                return {
+                    requiresTwoFactor: false,
+                    session: (0, better_auth_types_1.hasSession)(response) ? this.mapSessionInfo(response.session) : null,
+                    success: true,
+                    user: mappedUser ? this.mapToUserModel(mappedUser) : null,
+                };
+            }
+            throw new common_1.BadRequestException('Sign-up failed');
+        }
+        catch (error) {
+            const errorMessage = error instanceof Error ? error.message : 'Unknown error';
+            this.logger.debug(`Sign-up error: ${errorMessage}`);
+            if (errorMessage.includes('already exists')) {
+                throw new common_1.BadRequestException('User with this email already exists');
+            }
+            throw new common_1.BadRequestException('Sign-up failed');
+        }
+    }
+    async betterAuthSignOut(ctx) {
+        if (!this.betterAuthService.isEnabled()) {
+            return false;
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            return false;
+        }
+        try {
+            const headers = this.convertHeaders(ctx.req.headers);
+            await api.signOut({ headers });
+            return true;
+        }
+        catch (error) {
+            this.logger.debug(`Sign-out error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return false;
+        }
+    }
+    async betterAuthVerify2FA(code, ctx) {
+        this.ensureEnabled();
+        if (!this.betterAuthService.isTwoFactorEnabled()) {
+            throw new common_1.BadRequestException('Two-factor authentication is not enabled');
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            throw new common_1.BadRequestException('Better-Auth API not available');
+        }
+        try {
+            const headers = this.convertHeaders(ctx.req.headers);
+            const twoFactorApi = api.twoFactor;
+            if (!twoFactorApi?.verifyTotp) {
+                throw new common_1.BadRequestException('2FA verification method not available');
+            }
+            const response = await twoFactorApi.verifyTotp({
+                body: { code },
+                headers,
+            });
+            if (response && (0, better_auth_types_1.hasUser)(response)) {
+                const sessionUser = response.user;
+                const mappedUser = await this.userMapper.mapSessionUser(sessionUser);
+                return {
+                    requiresTwoFactor: false,
+                    success: true,
+                    user: mappedUser ? this.mapToUserModel(mappedUser) : null,
+                };
+            }
+            throw new common_1.UnauthorizedException('Invalid 2FA code');
+        }
+        catch (error) {
+            this.logger.debug(`2FA verification error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            throw new common_1.UnauthorizedException('Invalid 2FA code');
+        }
+    }
+    async betterAuthEnable2FA(password, ctx) {
+        this.ensureEnabled();
+        if (!this.betterAuthService.isTwoFactorEnabled()) {
+            return { error: 'Two-factor authentication is not enabled on this server', success: false };
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            return { error: 'Better-Auth API not available', success: false };
+        }
+        try {
+            const headers = this.convertHeaders(ctx.req.headers);
+            const twoFactorApi = api.twoFactor;
+            if (!twoFactorApi?.enable) {
+                return { error: '2FA enable method not available', success: false };
+            }
+            const response = await twoFactorApi.enable({
+                body: { password },
+                headers,
+            });
+            return {
+                backupCodes: response.backupCodes,
+                success: true,
+                totpUri: response.totpURI,
+            };
+        }
+        catch (error) {
+            this.logger.debug(`2FA enable error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return { error: error instanceof Error ? error.message : 'Failed to enable 2FA', success: false };
+        }
+    }
+    async betterAuthDisable2FA(password, ctx) {
+        this.ensureEnabled();
+        if (!this.betterAuthService.isTwoFactorEnabled()) {
+            throw new common_1.BadRequestException('Two-factor authentication is not enabled on this server');
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            return false;
+        }
+        try {
+            const headers = this.convertHeaders(ctx.req.headers);
+            const twoFactorApi = api.twoFactor;
+            if (!twoFactorApi?.disable) {
+                throw new common_1.BadRequestException('2FA disable method not available');
+            }
+            const response = await twoFactorApi.disable({
+                body: { password },
+                headers,
+            });
+            return response?.status === true;
+        }
+        catch (error) {
+            this.logger.debug(`2FA disable error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return false;
+        }
+    }
+    async betterAuthGenerateBackupCodes(ctx) {
+        this.ensureEnabled();
+        if (!this.betterAuthService.isTwoFactorEnabled()) {
+            throw new common_1.BadRequestException('Two-factor authentication is not enabled on this server');
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            return null;
+        }
+        try {
+            const headers = this.convertHeaders(ctx.req.headers);
+            const twoFactorApi = api.twoFactor;
+            if (!twoFactorApi?.generateBackupCodes) {
+                throw new common_1.BadRequestException('Generate backup codes method not available');
+            }
+            const response = await twoFactorApi.generateBackupCodes({ headers });
+            return response?.backupCodes || null;
+        }
+        catch (error) {
+            this.logger.debug(`Generate backup codes error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return null;
+        }
+    }
+    async betterAuthGetPasskeyChallenge(ctx) {
+        this.ensureEnabled();
+        if (!this.betterAuthService.isPasskeyEnabled()) {
+            return { error: 'Passkey authentication is not enabled on this server', success: false };
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            return { error: 'Better-Auth API not available', success: false };
+        }
+        try {
+            const headers = this.convertHeaders(ctx.req.headers);
+            const passkeyApi = api.passkey;
+            if (!passkeyApi?.generateRegisterOptions) {
+                return { error: 'Passkey registration method not available', success: false };
+            }
+            const challenge = await passkeyApi.generateRegisterOptions({ headers });
+            return {
+                challenge: JSON.stringify(challenge),
+                success: true,
+            };
+        }
+        catch (error) {
+            this.logger.debug(`Passkey challenge error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return { error: error instanceof Error ? error.message : 'Failed to get passkey challenge', success: false };
+        }
+    }
+    async betterAuthListPasskeys(ctx) {
+        if (!this.betterAuthService.isEnabled() || !this.betterAuthService.isPasskeyEnabled()) {
+            return null;
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            return null;
+        }
+        try {
+            const headers = this.convertHeaders(ctx.req.headers);
+            const passkeyApi = api.passkey;
+            if (!passkeyApi?.listUserPasskeys) {
+                return null;
+            }
+            const passkeys = await passkeyApi.listUserPasskeys({ headers });
+            return passkeys.map((pk) => ({
+                createdAt: pk.createdAt,
+                credentialId: pk.credentialID,
+                id: pk.id,
+                name: pk.name,
+            }));
+        }
+        catch (error) {
+            this.logger.debug(`List passkeys error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return null;
+        }
+    }
+    async betterAuthDeletePasskey(passkeyId, ctx) {
+        this.ensureEnabled();
+        if (!this.betterAuthService.isPasskeyEnabled()) {
+            throw new common_1.BadRequestException('Passkey authentication is not enabled on this server');
+        }
+        const api = this.betterAuthService.getApi();
+        if (!api) {
+            return false;
+        }
+        try {
+            const headers = this.convertHeaders(ctx.req.headers);
+            const passkeyApi = api.passkey;
+            if (!passkeyApi?.deletePasskey) {
+                throw new common_1.BadRequestException('Delete passkey method not available');
+            }
+            const response = await passkeyApi.deletePasskey({
+                body: { id: passkeyId },
+                headers,
+            });
+            return response?.status === true;
+        }
+        catch (error) {
+            this.logger.debug(`Delete passkey error: ${error instanceof Error ? error.message : 'Unknown error'}`);
+            return false;
+        }
+    }
+    ensureEnabled() {
+        if (!this.betterAuthService.isEnabled()) {
+            throw new common_1.BadRequestException('Better-Auth is not enabled. Check that betterAuth.enabled is not set to false in your environment.');
+        }
+    }
+    convertHeaders(headers) {
+        const result = new Headers();
+        for (const [key, value] of Object.entries(headers)) {
+            if (typeof value === 'string') {
+                result.set(key, value);
+            }
+            else if (Array.isArray(value)) {
+                result.set(key, value.join(', '));
+            }
+        }
+        return result;
+    }
+    mapSessionInfo(session) {
+        return {
+            expiresAt: session.expiresAt,
+            id: session.id,
+            token: session.token,
+        };
+    }
+    mapToUserModel(user) {
+        return {
+            email: user.email,
+            emailVerified: user.emailVerified,
+            iamId: user.iamId,
+            id: user.id,
+            name: user.name,
+            roles: user.roles,
+            verified: user.verified,
+        };
+    }
+};
+exports.CoreBetterAuthResolver = CoreBetterAuthResolver;
+__decorate([
+    (0, graphql_1.Query)(() => better_auth_models_1.BetterAuthSessionModel, {
+        description: 'Get current Better-Auth session',
+        nullable: true,
+    }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_USER),
+    (0, common_1.UseGuards)((0, auth_guard_1.AuthGuard)(auth_guard_strategy_enum_1.AuthGuardStrategy.JWT)),
+    __param(0, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthSession", null);
+__decorate([
+    (0, graphql_1.Query)(() => Boolean, { description: 'Check if Better-Auth is enabled' }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", Boolean)
+], CoreBetterAuthResolver.prototype, "betterAuthEnabled", null);
+__decorate([
+    (0, graphql_1.Query)(() => better_auth_models_1.BetterAuthFeaturesModel, { description: 'Get enabled Better-Auth features' }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", []),
+    __metadata("design:returntype", better_auth_models_1.BetterAuthFeaturesModel)
+], CoreBetterAuthResolver.prototype, "betterAuthFeatures", null);
+__decorate([
+    (0, graphql_1.Mutation)(() => better_auth_auth_model_1.BetterAuthAuthModel, {
+        description: 'Sign in via Better-Auth (email/password)',
+    }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __param(0, (0, graphql_1.Args)('email')),
+    __param(1, (0, graphql_1.Args)('password')),
+    __param(2, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthSignIn", null);
+__decorate([
+    (0, graphql_1.Mutation)(() => better_auth_auth_model_1.BetterAuthAuthModel, {
+        description: 'Sign up via Better-Auth (email/password)',
+    }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __param(0, (0, graphql_1.Args)('email')),
+    __param(1, (0, graphql_1.Args)('password')),
+    __param(2, (0, graphql_1.Args)('name', { nullable: true })),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, String, String]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthSignUp", null);
+__decorate([
+    (0, graphql_1.Mutation)(() => Boolean, { description: 'Sign out via Better-Auth' }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_USER),
+    (0, common_1.UseGuards)((0, auth_guard_1.AuthGuard)(auth_guard_strategy_enum_1.AuthGuardStrategy.JWT)),
+    __param(0, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthSignOut", null);
+__decorate([
+    (0, graphql_1.Mutation)(() => better_auth_auth_model_1.BetterAuthAuthModel, {
+        description: 'Verify 2FA code during sign-in',
+    }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_EVERYONE),
+    __param(0, (0, graphql_1.Args)('code')),
+    __param(1, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthVerify2FA", null);
+__decorate([
+    (0, graphql_1.Mutation)(() => better_auth_models_1.BetterAuth2FASetupModel, {
+        description: 'Enable 2FA for the current user',
+    }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_USER),
+    (0, common_1.UseGuards)((0, auth_guard_1.AuthGuard)(auth_guard_strategy_enum_1.AuthGuardStrategy.JWT)),
+    __param(0, (0, graphql_1.Args)('password')),
+    __param(1, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthEnable2FA", null);
+__decorate([
+    (0, graphql_1.Mutation)(() => Boolean, {
+        description: 'Disable 2FA for the current user',
+    }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_USER),
+    (0, common_1.UseGuards)((0, auth_guard_1.AuthGuard)(auth_guard_strategy_enum_1.AuthGuardStrategy.JWT)),
+    __param(0, (0, graphql_1.Args)('password')),
+    __param(1, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthDisable2FA", null);
+__decorate([
+    (0, graphql_1.Mutation)(() => [String], {
+        description: 'Generate new backup codes for 2FA',
+        nullable: true,
+    }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_USER),
+    (0, common_1.UseGuards)((0, auth_guard_1.AuthGuard)(auth_guard_strategy_enum_1.AuthGuardStrategy.JWT)),
+    __param(0, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthGenerateBackupCodes", null);
+__decorate([
+    (0, graphql_1.Mutation)(() => better_auth_models_1.BetterAuthPasskeyChallengeModel, {
+        description: 'Get passkey registration challenge for WebAuthn',
+    }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_USER),
+    (0, common_1.UseGuards)((0, auth_guard_1.AuthGuard)(auth_guard_strategy_enum_1.AuthGuardStrategy.JWT)),
+    __param(0, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthGetPasskeyChallenge", null);
+__decorate([
+    (0, graphql_1.Query)(() => [better_auth_models_1.BetterAuthPasskeyModel], {
+        description: 'List passkeys for the current user',
+        nullable: true,
+    }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_USER),
+    (0, common_1.UseGuards)((0, auth_guard_1.AuthGuard)(auth_guard_strategy_enum_1.AuthGuardStrategy.JWT)),
+    __param(0, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthListPasskeys", null);
+__decorate([
+    (0, graphql_1.Mutation)(() => Boolean, {
+        description: 'Delete a passkey by ID',
+    }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.S_USER),
+    (0, common_1.UseGuards)((0, auth_guard_1.AuthGuard)(auth_guard_strategy_enum_1.AuthGuardStrategy.JWT)),
+    __param(0, (0, graphql_1.Args)('passkeyId')),
+    __param(1, (0, graphql_1.Context)()),
+    __metadata("design:type", Function),
+    __metadata("design:paramtypes", [String, Object]),
+    __metadata("design:returntype", Promise)
+], CoreBetterAuthResolver.prototype, "betterAuthDeletePasskey", null);
+exports.CoreBetterAuthResolver = CoreBetterAuthResolver = CoreBetterAuthResolver_1 = __decorate([
+    (0, graphql_1.Resolver)(() => better_auth_auth_model_1.BetterAuthAuthModel, { isAbstract: true }),
+    (0, roles_decorator_1.Roles)(role_enum_1.RoleEnum.ADMIN),
+    __metadata("design:paramtypes", [better_auth_service_1.BetterAuthService,
+        better_auth_user_mapper_1.BetterAuthUserMapper])
+], CoreBetterAuthResolver);
+//# sourceMappingURL=core-better-auth.resolver.js.map

package/dist/core/modules/better-auth/core-better-auth.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-better-auth.resolver.js","sourceRoot":"","sources":["../../../../src/core/modules/better-auth/core-better-auth.resolver.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAA+F;AAC/F,6CAA2E;AAG3E,6EAAgE;AAChE,4DAAwD;AACxD,+EAAqE;AACrE,0DAAsD;AACtD,qEAA+D;AAC/D,6DAO8B;AAC9B,uEAAoG;AACpG,+DAA0D;AAC1D,2DAO6B;AAsCtB,IAAM,sBAAsB,8BAA5B,MAAM,sBAAsB;IAGjC,YACqB,iBAAoC,EACpC,UAAgC;QADhC,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,eAAU,GAAV,UAAU,CAAsB;QAJlC,WAAM,GAAG,IAAI,eAAM,CAAC,wBAAsB,CAAC,IAAI,CAAC,CAAC;IAKjE,CAAC;IAeE,AAAN,KAAK,CAAC,iBAAiB,CAAY,GAAqB;QACtD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAE3E,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,IAAI,EAAE;gBACJ,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB;SACF,CAAC;IACJ,CAAC;IAOD,iBAAiB;QACf,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,CAAC;IAC5C,CAAC;IAOD,kBAAkB;QAChB,OAAO;YACL,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE;YAC3C,GAAG,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE;YAC1C,OAAO,EAAE,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE;YAClD,eAAe,EAAE,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,EAAE;YACnE,SAAS,EAAE,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE;SACvD,CAAC;IACJ,CAAC;IAkBK,AAAN,KAAK,CAAC,gBAAgB,CACL,KAAa,EACV,QAAgB,EAEvB,IAAqC;QAEhD,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,4BAAmB,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YAEH,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC;gBACtC,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE;aAC1B,CAAC,CAAoC,CAAC;YAEvC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;YACzD,CAAC;YAGD,IAAI,IAAA,+BAAW,EAAC,QAAQ,CAAC,EAAE,CAAC;gBAC1B,OAAO;oBACL,iBAAiB,EAAE,IAAI;oBACvB,OAAO,EAAE,KAAK;oBACd,IAAI,EAAE,IAAI;iBACX,CAAC;YACJ,CAAC;YAGD,IAAI,IAAA,2BAAO,EAAC,QAAQ,CAAC,EAAE,CAAC;gBACtB,MAAM,WAAW,GAA0B,QAAQ,CAAC,IAAI,CAAC;gBACzD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBAGrE,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;gBAEjF,OAAO;oBACL,iBAAiB,EAAE,KAAK;oBACxB,OAAO,EAAE,IAAA,8BAAU,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;oBAC5E,OAAO,EAAE,IAAI;oBACb,KAAK;oBACL,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;iBAC1D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAChG,MAAM,IAAI,8BAAqB,CAAC,qBAAqB,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAWK,AAAN,KAAK,CAAC,gBAAgB,CACL,KAAa,EACV,QAAgB,EACA,IAAa;QAE/C,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,4BAAmB,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC;gBACtC,IAAI,EAAE;oBACJ,KAAK;oBACL,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;oBACjC,QAAQ;iBACT;aACF,CAAC,CAAoC,CAAC;YAEvC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;YAClD,CAAC;YAED,IAAI,IAAA,2BAAO,EAAC,QAAQ,CAAC,EAAE,CAAC;gBACtB,MAAM,WAAW,GAA0B,QAAQ,CAAC,IAAI,CAAC;gBAGzD,MAAM,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;gBACpD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBAErE,OAAO;oBACL,iBAAiB,EAAE,KAAK;oBACxB,OAAO,EAAE,IAAA,8BAAU,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;oBAC5E,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;iBAC1D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,YAAY,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YAC9E,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,YAAY,EAAE,CAAC,CAAC;YACpD,IAAI,YAAY,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBAC5C,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;YACvE,CAAC;YACD,MAAM,IAAI,4BAAmB,CAAC,gBAAgB,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAQK,AAAN,KAAK,CAAC,iBAAiB,CAAY,GAAqB;QACtD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACrD,MAAM,GAAG,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACjG,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IASK,AAAN,KAAK,CAAC,mBAAmB,CACT,IAAY,EACf,GAAqB;QAEhC,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,4BAAmB,CAAC,0CAA0C,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,4BAAmB,CAAC,+BAA+B,CAAC,CAAC;QACjE,CAAC;QAED,IAAI,CAAC;YAEH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAIrD,MAAM,YAAY,GAAI,GAA+B,CAAC,SAIjD,CAAC;YAEN,IAAI,CAAC,YAAY,EAAE,UAAU,EAAE,CAAC;gBAC9B,MAAM,IAAI,4BAAmB,CAAC,uCAAuC,CAAC,CAAC;YACzE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,CAAC;gBAC7C,IAAI,EAAE,EAAE,IAAI,EAAE;gBACd,OAAO;aACR,CAAC,CAAC;YAEH,IAAI,QAAQ,IAAI,IAAA,2BAAO,EAAC,QAAQ,CAAC,EAAE,CAAC;gBAClC,MAAM,WAAW,GAA0B,QAAQ,CAAC,IAAI,CAAC;gBACzD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBAErE,OAAO;oBACL,iBAAiB,EAAE,KAAK;oBACxB,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;iBAC1D,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,8BAAqB,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACzG,MAAM,IAAI,8BAAqB,CAAC,kBAAkB,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAeK,AAAN,KAAK,CAAC,mBAAmB,CACL,QAAgB,EACvB,GAAqB;QAEhC,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACjD,OAAO,EAAE,KAAK,EAAE,yDAAyD,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC9F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACpE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErD,MAAM,YAAY,GAAI,GAA+B,CAAC,SAOjD,CAAC;YAEN,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;gBAC1B,OAAO,EAAE,KAAK,EAAE,iCAAiC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACtE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC;gBACzC,IAAI,EAAE,EAAE,QAAQ,EAAE;gBAClB,OAAO;aACR,CAAC,CAAC;YAEH,OAAO;gBACL,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACnG,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACpG,CAAC;IACH,CAAC;IAUK,AAAN,KAAK,CAAC,oBAAoB,CAAmB,QAAgB,EAAa,GAAqB;QAC7F,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,4BAAmB,CAAC,yDAAyD,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErD,MAAM,YAAY,GAAI,GAA+B,CAAC,SAIjD,CAAC;YAEN,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;gBAC3B,MAAM,IAAI,4BAAmB,CAAC,kCAAkC,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC;gBAC1C,IAAI,EAAE,EAAE,QAAQ,EAAE;gBAClB,OAAO;aACR,CAAC,CAAC;YAEH,OAAO,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACpG,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAWK,AAAN,KAAK,CAAC,6BAA6B,CAAY,GAAqB;QAClE,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,4BAAmB,CAAC,yDAAyD,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErD,MAAM,YAAY,GAAI,GAA+B,CAAC,SAIjD,CAAC;YAEN,IAAI,CAAC,YAAY,EAAE,mBAAmB,EAAE,CAAC;gBACvC,MAAM,IAAI,4BAAmB,CAAC,4CAA4C,CAAC,CAAC;YAC9E,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,mBAAmB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAErE,OAAO,QAAQ,EAAE,WAAW,IAAI,IAAI,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAC9G,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAeK,AAAN,KAAK,CAAC,6BAA6B,CAAY,GAAqB;QAClE,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC/C,OAAO,EAAE,KAAK,EAAE,sDAAsD,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC3F,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,KAAK,EAAE,+BAA+B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACpE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErD,MAAM,UAAU,GAAI,GAA+B,CAAC,OAI/C,CAAC;YAEN,IAAI,CAAC,UAAU,EAAE,uBAAuB,EAAE,CAAC;gBACzC,OAAO,EAAE,KAAK,EAAE,2CAA2C,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAChF,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,uBAAuB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAExE,OAAO;gBACL,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;gBACpC,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YAC1G,OAAO,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iCAAiC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC/G,CAAC;IACH,CAAC;IAWK,AAAN,KAAK,CAAC,sBAAsB,CAAY,GAAqB;QAC3D,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,EAAE,CAAC;YACtF,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErD,MAAM,UAAU,GAAI,GAA+B,CAAC,OAM/C,CAAC;YAEN,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,CAAC;gBAClC,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;YAEhE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;gBAC3B,SAAS,EAAE,EAAE,CAAC,SAAS;gBACvB,YAAY,EAAE,EAAE,CAAC,YAAY;gBAC7B,EAAE,EAAE,EAAE,CAAC,EAAE;gBACT,IAAI,EAAE,EAAE,CAAC,IAAI;aACd,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACtG,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAUK,AAAN,KAAK,CAAC,uBAAuB,CACR,SAAiB,EACzB,GAAqB;QAEhC,IAAI,CAAC,aAAa,EAAE,CAAC;QAErB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,EAAE,EAAE,CAAC;YAC/C,MAAM,IAAI,4BAAmB,CAAC,sDAAsD,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAErD,MAAM,UAAU,GAAI,GAA+B,CAAC,OAI/C,CAAC;YAEN,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC;gBAC/B,MAAM,IAAI,4BAAmB,CAAC,qCAAqC,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,aAAa,CAAC;gBAC9C,IAAI,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE;gBACvB,OAAO;aACR,CAAC,CAAC;YAEH,OAAO,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAC;QACnC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC;YACvG,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IASS,aAAa;QACrB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,CAAC;YACxC,MAAM,IAAI,4BAAmB,CAC3B,oGAAoG,CACrG,CAAC;QACJ,CAAC;IACH,CAAC;IAKS,cAAc,CAAC,OAAsD;QAC7E,MAAM,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;iBAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YACpC,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAKS,cAAc,CAAC,OAA4E;QAKnG,OAAO;YACL,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB,CAAC;IACJ,CAAC;IAKS,cAAc,CAAC,IAAgB;QACvC,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;IACJ,CAAC;CACF,CAAA;AAhoBY,wDAAsB;AAqB3B;IANL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,2CAAsB,EAAE;QACnC,WAAW,EAAE,iCAAiC;QAC9C,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,MAAM,CAAC;IACtB,IAAA,kBAAS,EAAC,IAAA,sBAAS,EAAC,4CAAiB,CAAC,GAAG,CAAC,CAAC;IACnB,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;+DAqBjC;AAOD;IAFC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC;IACxE,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;;;;+DAG1B;AAOD;IAFC,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,4CAAuB,EAAE,EAAE,WAAW,EAAE,kCAAkC,EAAE,CAAC;IACzF,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;;;oCACL,4CAAuB;gEAQ5C;AAkBK;IAJL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,4CAAmB,EAAE;QACnC,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;IAExB,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,WAAA,IAAA,cAAI,EAAC,UAAU,CAAC,CAAA;IAEhB,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;8DAkDX;AAWK;IAJL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,4CAAmB,EAAE;QACnC,WAAW,EAAE,0CAA0C;KACxD,CAAC;IACD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;IAExB,WAAA,IAAA,cAAI,EAAC,OAAO,CAAC,CAAA;IACb,WAAA,IAAA,cAAI,EAAC,UAAU,CAAC,CAAA;IAChB,WAAA,IAAA,cAAI,EAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;;;;8DA8ClC;AAQK;IAHL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAC;IACpE,IAAA,uBAAK,EAAC,oBAAQ,CAAC,MAAM,CAAC;IACtB,IAAA,kBAAS,EAAC,IAAA,sBAAS,EAAC,4CAAiB,CAAC,GAAG,CAAC,CAAC;IACnB,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;+DAkBjC;AASK;IAJL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,4CAAmB,EAAE;QACnC,WAAW,EAAE,gCAAgC;KAC9C,CAAC;IACD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,UAAU,CAAC;IAExB,WAAA,IAAA,cAAI,EAAC,MAAM,CAAC,CAAA;IACZ,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;iEAkDX;AAeK;IALL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,4CAAuB,EAAE;QACvC,WAAW,EAAE,iCAAiC;KAC/C,CAAC;IACD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,MAAM,CAAC;IACtB,IAAA,kBAAS,EAAC,IAAA,sBAAS,EAAC,4CAAiB,CAAC,GAAG,CAAC,CAAC;IAEzC,WAAA,IAAA,cAAI,EAAC,UAAU,CAAC,CAAA;IAChB,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;iEA2CX;AAUK;IALL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE;QACvB,WAAW,EAAE,kCAAkC;KAChD,CAAC;IACD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,MAAM,CAAC;IACtB,IAAA,kBAAS,EAAC,IAAA,sBAAS,EAAC,4CAAiB,CAAC,GAAG,CAAC,CAAC;IAChB,WAAA,IAAA,cAAI,EAAC,UAAU,CAAC,CAAA;IAAoB,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;kEAmCxE;AAWK;IANL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE;QACxB,WAAW,EAAE,mCAAmC;QAChD,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,MAAM,CAAC;IACtB,IAAA,kBAAS,EAAC,IAAA,sBAAS,EAAC,4CAAiB,CAAC,GAAG,CAAC,CAAC;IACP,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;2EAgC7C;AAeK;IALL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,oDAA+B,EAAE;QAC/C,WAAW,EAAE,iDAAiD;KAC/D,CAAC;IACD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,MAAM,CAAC;IACtB,IAAA,kBAAS,EAAC,IAAA,sBAAS,EAAC,4CAAiB,CAAC,GAAG,CAAC,CAAC;IACP,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;2EAmC7C;AAWK;IANL,IAAA,eAAK,EAAC,GAAG,EAAE,CAAC,CAAC,2CAAsB,CAAC,EAAE;QACrC,WAAW,EAAE,oCAAoC;QACjD,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,MAAM,CAAC;IACtB,IAAA,kBAAS,EAAC,IAAA,sBAAS,EAAC,4CAAiB,CAAC,GAAG,CAAC,CAAC;IACd,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;oEAqCtC;AAUK;IALL,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,OAAO,EAAE;QACvB,WAAW,EAAE,wBAAwB;KACtC,CAAC;IACD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,MAAM,CAAC;IACtB,IAAA,kBAAS,EAAC,IAAA,sBAAS,EAAC,4CAAiB,CAAC,GAAG,CAAC,CAAC;IAEzC,WAAA,IAAA,cAAI,EAAC,WAAW,CAAC,CAAA;IACjB,WAAA,IAAA,iBAAO,GAAE,CAAA;;;;qEAoCX;iCAnkBU,sBAAsB;IAFlC,IAAA,kBAAQ,EAAC,GAAG,EAAE,CAAC,4CAAmB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACzD,IAAA,uBAAK,EAAC,oBAAQ,CAAC,KAAK,CAAC;qCAKoB,uCAAiB;QACxB,8CAAoB;GAL1C,sBAAsB,CAgoBlC"}

package/dist/core/modules/better-auth/index.d.ts

@@ -0,0 +1,13 @@
+export * from './better-auth-auth.model';
+export * from './better-auth-models';
+export * from './better-auth-rate-limit.middleware';
+export * from './better-auth-rate-limiter.service';
+export * from './better-auth-user.mapper';
+export * from './better-auth.config';
+export * from './better-auth.middleware';
+export * from './better-auth.module';
+export * from './better-auth.resolver';
+export * from './better-auth.service';
+export * from './better-auth.types';
+export * from './core-better-auth.controller';
+export * from './core-better-auth.resolver';

package/dist/core/modules/better-auth/index.js

@@ -0,0 +1,30 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./better-auth-auth.model"), exports);
+__exportStar(require("./better-auth-models"), exports);
+__exportStar(require("./better-auth-rate-limit.middleware"), exports);
+__exportStar(require("./better-auth-rate-limiter.service"), exports);
+__exportStar(require("./better-auth-user.mapper"), exports);
+__exportStar(require("./better-auth.config"), exports);
+__exportStar(require("./better-auth.middleware"), exports);
+__exportStar(require("./better-auth.module"), exports);
+__exportStar(require("./better-auth.resolver"), exports);
+__exportStar(require("./better-auth.service"), exports);
+__exportStar(require("./better-auth.types"), exports);
+__exportStar(require("./core-better-auth.controller"), exports);
+__exportStar(require("./core-better-auth.resolver"), exports);
+//# sourceMappingURL=index.js.map

package/dist/core/modules/better-auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/core/modules/better-auth/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAmBA,2DAAyC;AACzC,uDAAqC;AACrC,sEAAoD;AACpD,qEAAmD;AACnD,4DAA0C;AAC1C,uDAAqC;AACrC,2DAAyC;AACzC,uDAAqC;AACrC,yDAAuC;AACvC,wDAAsC;AACtC,sDAAoC;AACpC,gEAA8C;AAC9C,8DAA4C"}

package/dist/core/modules/user/core-user.model.d.ts

@@ -19,6 +19,8 @@ export declare abstract class CoreUserModel extends CorePersistenceModel {
     verificationToken: string;
     verified: boolean;
     verifiedAt: Date;
+    iamId: string;
+    twoFactorEnabled: boolean;
     hasRole(roles: string | string[]): boolean;
     hasAllRoles(roles: string | string[]): boolean;
     init(): this;

package/dist/core/modules/user/core-user.model.js

@@ -32,6 +32,8 @@ let CoreUserModel = class CoreUserModel extends core_persistence_model_1.CorePer
         this.verificationToken = undefined;
         this.verified = undefined;
         this.verifiedAt = undefined;
+        this.iamId = undefined;
+        this.twoFactorEnabled = undefined;
     }
     hasRole(roles) {
         if (typeof roles === 'string') {
@@ -238,6 +240,25 @@ __decorate([
     }),
     __metadata("design:type", Date)
 ], CoreUserModel.prototype, "verifiedAt", void 0);
+__decorate([
+    (0, unified_field_decorator_1.UnifiedField)({
+        description: 'IAM provider user ID (used for Better-Auth or other IAM integration)',
+        isOptional: true,
+        mongoose: { index: true, sparse: true },
+        roles: role_enum_1.RoleEnum.S_NO_ONE,
+    }),
+    __metadata("design:type", String)
+], CoreUserModel.prototype, "iamId", void 0);
+__decorate([
+    (0, unified_field_decorator_1.UnifiedField)({
+        description: 'Whether Two-Factor Authentication is enabled',
+        isOptional: true,
+        mongoose: { type: Boolean },
+        roles: role_enum_1.RoleEnum.S_EVERYONE,
+        type: () => Boolean,
+    }),
+    __metadata("design:type", Boolean)
+], CoreUserModel.prototype, "twoFactorEnabled", void 0);
 exports.CoreUserModel = CoreUserModel = __decorate([
     (0, swagger_1.ApiExtraModels)(core_persistence_model_1.CorePersistenceModel),
     (0, mongoose_1.Schema)({ timestamps: true }),