@loom-framework/core 0.1.0-alpha.15 → 0.1.0-alpha.151

package/dist/backend/routes/ai-config.js

@@ -0,0 +1,171 @@
+/**
+ * AI Model Configuration Routes
+ *
+ * GET  /api/v1/ai/models  — list available models (authToken masked)
+ * PUT  /api/v1/ai/models  — update model list (saved to loom.config.ts ai.claudeCode.models)
+ */
+import { promises as fs } from 'fs';
+import path from 'path';
+import os from 'os';
+import { loadConfig } from '../../config.js';
+/** Mask authToken for display: show first 4 chars + *** */
+function maskToken(token) {
+    if (!token)
+        return undefined;
+    if (token.length <= 4)
+        return '****';
+    return token.slice(0, 4) + '****';
+}
+/** Read models from loom.config.ts via loadConfig() */
+async function readModels(projectRoot) {
+    try {
+        const config = await loadConfig(projectRoot);
+        return config.ai?.claudeCode?.models || [];
+    }
+    catch {
+        return [];
+    }
+}
+/** Seed models from ~/.claude/settings.json if loom.config.ts has no models */
+async function seedModelsFromSettings(projectRoot) {
+    const seedModels = [];
+    try {
+        const homeDir = process.env.HOME || os.homedir();
+        const settingsPath = path.join(homeDir, '.claude', 'settings.json');
+        const content = await fs.readFile(settingsPath, 'utf-8');
+        const settings = JSON.parse(content);
+        if (settings?.env?.ANTHROPIC_MODEL) {
+            seedModels.push({
+                name: settings.env.ANTHROPIC_MODEL,
+                authToken: settings.env.ANTHROPIC_AUTH_TOKEN || undefined,
+                baseUrl: settings.env.ANTHROPIC_BASE_URL || undefined,
+                isDefault: true,
+            });
+        }
+    }
+    catch { /* no settings found */ }
+    return seedModels;
+}
+/**
+ * Write models array to loom.config.ts using text replacement.
+ * Preserves file formatting, comments, and other config fields.
+ */
+async function writeModelsToConfig(projectRoot, models) {
+    const configPath = path.join(projectRoot, 'loom.config.ts');
+    let content = await fs.readFile(configPath, 'utf-8');
+    // Generate the new models array text (6-space base indent inside claudeCode)
+    const modelsStr = JSON.stringify(models, null, 2)
+        .split('\n')
+        .map((line, i) => i === 0 ? line : '      ' + line) // 6-space indent for array contents
+        .join('\n');
+    const modelsText = `models: ${modelsStr}`;
+    // Try to replace existing models field inside claudeCode
+    // Match: models: [...] — using bracket-depth counting to find the closing bracket
+    const modelsStartRegex = /(\bclaudeCode:\s*\{[\s\S]*?)models:\s*\[/;
+    const match = modelsStartRegex.exec(content);
+    if (match) {
+        // Find the opening bracket position
+        const arrayStart = match.index + match[0].length - 1; // position of '['
+        // Count bracket depth to find matching ']'
+        let depth = 1;
+        let pos = arrayStart + 1;
+        while (pos < content.length && depth > 0) {
+            if (content[pos] === '[')
+                depth++;
+            else if (content[pos] === ']')
+                depth--;
+            pos++;
+        }
+        const arrayEnd = pos; // position after closing ']'
+        // Replace the entire models: [...] section
+        const prefix = match[1]; // everything from claudeCode: { up to models:
+        content = content.slice(0, match.index) + prefix + modelsText + content.slice(arrayEnd);
+    }
+    else {
+        // No models field yet — check if claudeCode object exists
+        const claudeCodeMatch = content.match(/(claudeCode:\s*\{)/);
+        if (claudeCodeMatch) {
+            // Insert after claudeCode: {
+            const insertPos = claudeCodeMatch.index + claudeCodeMatch[0].length;
+            const needsComma = !content.slice(insertPos).match(/^\s*\}/);
+            content = content.slice(0, insertPos) +
+                '\n      ' + modelsText + (needsComma ? ',' : '') +
+                content.slice(insertPos);
+        }
+        else {
+            // No claudeCode object — need to add the entire ai section
+            // Check if ai object exists
+            const aiMatch = content.match(/(ai:\s*\{)/);
+            if (aiMatch) {
+                const insertPos = aiMatch.index + aiMatch[0].length;
+                content = content.slice(0, insertPos) +
+                    '\n    claudeCode: {\n      ' + modelsText + ',\n    },' +
+                    content.slice(insertPos);
+            }
+            else {
+                // No ai section at all — insert before the closing of defineConfig
+                const configEnd = content.lastIndexOf('});');
+                if (configEnd !== -1) {
+                    content = content.slice(0, configEnd) +
+                        '  ai: {\n    claudeCode: {\n      ' + modelsText + ',\n    },\n  },\n' +
+                        content.slice(configEnd);
+                }
+            }
+        }
+    }
+    await fs.writeFile(configPath, content, 'utf-8');
+}
+export function registerAIConfigRoutes(fastify, options) {
+    const { projectRoot, eventBus } = options;
+    // GET /api/v1/ai/models
+    fastify.get('/api/v1/ai/models', async () => {
+        let models = await readModels(projectRoot);
+        // If no models in config, seed from ~/.claude/settings.json
+        if (models.length === 0) {
+            models = await seedModelsFromSettings(projectRoot);
+            if (models.length > 0) {
+                await writeModelsToConfig(projectRoot, models);
+            }
+        }
+        // Return models with masked authTokens
+        return models.map(m => ({
+            name: m.name,
+            authToken: maskToken(m.authToken),
+            hasAuthToken: !!m.authToken,
+            baseUrl: m.baseUrl,
+            isDefault: m.isDefault || false,
+        }));
+    });
+    // PUT /api/v1/ai/models
+    fastify.put('/api/v1/ai/models', async (request) => {
+        const body = request.body;
+        if (!body.models || !Array.isArray(body.models)) {
+            return { error: 'models array is required' };
+        }
+        const existingModels = await readModels(projectRoot);
+        const models = body.models.map((m) => {
+            // If authToken looks masked (ends with ****), preserve the existing one
+            let authToken = m.authToken;
+            if (authToken && authToken.endsWith('****')) {
+                const existing = existingModels.find(e => e.name === m.name);
+                authToken = existing?.authToken;
+            }
+            return {
+                name: m.name,
+                authToken: authToken || undefined,
+                baseUrl: m.baseUrl || undefined,
+                isDefault: m.isDefault || false,
+            };
+        });
+        await writeModelsToConfig(projectRoot, models);
+        void eventBus?.emit('ai:models_updated', { count: models.length }, { source: 'server' });
+        return models.map(m => ({
+            name: m.name,
+            authToken: maskToken(m.authToken),
+            hasAuthToken: !!m.authToken,
+            baseUrl: m.baseUrl,
+            isDefault: m.isDefault || false,
+        }));
+    });
+}
+//# sourceMappingURL=ai-config.js.map

package/dist/backend/routes/ai-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-config.js","sourceRoot":"","sources":["../../../src/backend/routes/ai-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,IAAI,CAAC;AACpC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAQ7C,2DAA2D;AAC3D,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACrC,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;AACpC,CAAC;AAED,uDAAuD;AACvD,KAAK,UAAU,UAAU,CAAC,WAAmB;IAC3C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,MAAM,IAAI,EAAE,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,sBAAsB,CAAC,WAAmB;IACvD,MAAM,UAAU,GAAkB,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;QACjD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;QACpE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC;YACnC,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,eAAe;gBAClC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,oBAAoB,IAAI,SAAS;gBACzD,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,kBAAkB,IAAI,SAAS;gBACrD,SAAS,EAAE,IAAI;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,uBAAuB,CAAC,CAAC;IACnC,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAAC,WAAmB,EAAE,MAAqB;IAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAC5D,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAErD,6EAA6E;IAC7E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;SAC9C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAE,oCAAoC;SACxF,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,MAAM,UAAU,GAAG,WAAW,SAAS,EAAE,CAAC;IAE1C,yDAAyD;IACzD,kFAAkF;IAClF,MAAM,gBAAgB,GAAG,0CAA0C,CAAC;IACpE,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE7C,IAAI,KAAK,EAAE,CAAC;QACV,oCAAoC;QACpC,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,kBAAkB;QACxE,2CAA2C;QAC3C,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,GAAG,UAAU,GAAG,CAAC,CAAC;QACzB,OAAO,GAAG,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACzC,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;iBAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG;gBAAE,KAAK,EAAE,CAAC;YACvC,GAAG,EAAE,CAAC;QACR,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,6BAA6B;QAEnD,2CAA2C;QAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,8CAA8C;QACvE,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC1F,CAAC;SAAM,CAAC;QACN,0DAA0D;QAC1D,MAAM,eAAe,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC5D,IAAI,eAAe,EAAE,CAAC;YACpB,6BAA6B;YAC7B,MAAM,SAAS,GAAG,eAAe,CAAC,KAAM,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;YACrE,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7D,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;gBACnC,UAAU,GAAG,UAAU,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,2DAA2D;YAC3D,4BAA4B;YAC5B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YAC5C,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,SAAS,GAAG,OAAO,CAAC,KAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBACrD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;oBACnC,6BAA6B,GAAG,UAAU,GAAG,WAAW;oBACxD,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,mEAAmE;gBACnE,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC7C,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;oBACrB,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;wBACnC,oCAAoC,GAAG,UAAU,GAAG,mBAAmB;wBACvE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,OAAwB,EACxB,OAA6B;IAE7B,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAE1C,wBAAwB;IACxB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,IAAI,EAAE;QAC1C,IAAI,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;QAE3C,4DAA4D;QAC5D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;YACnD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtB,MAAM,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACjC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK;SAChC,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,wBAAwB;IACxB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAMjB,CAAC;QAEL,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC;QAC/C,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,CAAC;QAErD,MAAM,MAAM,GAAkB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YAClD,wEAAwE;YACxE,IAAI,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;YAC5B,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC7D,SAAS,GAAG,QAAQ,EAAE,SAAS,CAAC;YAClC,CAAC;YAED,OAAO;gBACL,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,SAAS,EAAE,SAAS,IAAI,SAAS;gBACjC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,SAAS;gBAC/B,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK;aAChC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,MAAM,mBAAmB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAE/C,KAAK,QAAQ,EAAE,IAAI,CAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEzF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YACjC,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;YAC3B,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,KAAK;SAChC,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/backend/routes/auth-routes.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Authentication Routes
+ *
+ * POST /api/v1/auth/login      - Login with username/password
+ * POST /api/v1/auth/register   - Register new user (admin only)
+ * POST /api/v1/auth/logout     - Logout (revoke refresh token)
+ * POST /api/v1/auth/refresh    - Refresh access token
+ * GET  /api/v1/auth/whoami     - Current user info
+ * GET  /api/v1/auth/roles      - List roles + permissions
+ * GET  /api/v1/auth/users      - List users (admin only)
+ * POST /api/v1/auth/users      - Create user (admin only)
+ * GET  /api/v1/auth/users/:id  - Get user
+ * PUT  /api/v1/auth/users/:id  - Update user (admin only)
+ * DELETE /api/v1/auth/users/:id - Delete user (admin only)
+ */
+import type { FastifyInstance } from 'fastify';
+import type { AuthConfig } from '../../types/auth.js';
+import type { UserStore } from '../auth/user-store.js';
+import type { TokenStore } from '../auth/token-store.js';
+import type { EventBus } from '../events/event-bus.js';
+export interface AuthRouteOptions {
+    config: AuthConfig;
+    userStore: UserStore;
+    tokenStore: TokenStore;
+    eventBus?: EventBus;
+}
+export declare function registerAuthRoutes(fastify: FastifyInstance, options: AuthRouteOptions): void;
+//# sourceMappingURL=auth-routes.d.ts.map

package/dist/backend/routes/auth-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.d.ts","sourceRoot":"","sources":["../../../src/backend/routes/auth-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAMvD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,QAAQ,CAAC,EAAE,QAAQ,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAgV5F"}

package/dist/backend/routes/auth-routes.js

@@ -0,0 +1,308 @@
+/**
+ * Authentication Routes
+ *
+ * POST /api/v1/auth/login      - Login with username/password
+ * POST /api/v1/auth/register   - Register new user (admin only)
+ * POST /api/v1/auth/logout     - Logout (revoke refresh token)
+ * POST /api/v1/auth/refresh    - Refresh access token
+ * GET  /api/v1/auth/whoami     - Current user info
+ * GET  /api/v1/auth/roles      - List roles + permissions
+ * GET  /api/v1/auth/users      - List users (admin only)
+ * POST /api/v1/auth/users      - Create user (admin only)
+ * GET  /api/v1/auth/users/:id  - Get user
+ * PUT  /api/v1/auth/users/:id  - Update user (admin only)
+ * DELETE /api/v1/auth/users/:id - Delete user (admin only)
+ */
+import { validatePasswordStrength } from '../auth/password.js';
+import { signAccessToken, signRefreshToken, refreshAccessToken } from '../auth/jwt.js';
+import { resolvePermission, hasPermission } from '../auth/rbac.js';
+import { issueServiceToken } from '../auth/service-token.js';
+export function registerAuthRoutes(fastify, options) {
+    const { config, userStore, tokenStore, eventBus } = options;
+    const isAdmin = (role) => hasPermission(resolvePermission('*', role, config), 'admin');
+    // POST /api/v1/auth/login
+    fastify.post('/api/v1/auth/login', async (req, reply) => {
+        const { username, password } = req.body;
+        if (!username || !password) {
+            reply.code(400).send({ error: 'Username and password are required' });
+            return;
+        }
+        const user = await userStore.verifyCredentials(username, password);
+        if (!user) {
+            reply.code(401).send({ error: 'Invalid credentials' });
+            return;
+        }
+        const payload = { userId: user.userId, username: user.username, role: user.role };
+        const accessToken = signAccessToken(payload, config);
+        const refreshToken = signRefreshToken(payload, config);
+        // Store refresh token
+        const ttl = config.refreshTokenTtl ?? 604800;
+        const expiresAt = new Date(Date.now() + ttl * 1000).toISOString();
+        await tokenStore.store(refreshToken, user.userId, expiresAt);
+        req.log.info({ userId: user.userId, username: user.username, role: user.role }, 'Auth: login');
+        void eventBus?.emit('user:login', { userId: user.userId, username: user.username, role: user.role }, { userId: user.userId, source: 'server' });
+        reply.send({
+            accessToken,
+            refreshToken,
+            user: { userId: user.userId, username: user.username, role: user.role },
+        });
+    });
+    // POST /api/v1/auth/register (admin only — requires authentication)
+    fastify.post('/api/v1/auth/register', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Authentication required' });
+            return;
+        }
+        // Only admin can register new users with arbitrary roles
+        const adminLevel = resolvePermission('*', req.user.role, config);
+        if (!hasPermission(adminLevel, 'admin')) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        const { username, password, role } = req.body;
+        if (!username || !password) {
+            reply.code(400).send({ error: 'Username and password are required' });
+            return;
+        }
+        const validation = validatePasswordStrength(password);
+        if (!validation.valid) {
+            reply.code(400).send({ error: validation.message });
+            return;
+        }
+        // Default to the last (least-privileged) defined role if not specified
+        const defaultRole = config.roles.length > 0 ? config.roles[config.roles.length - 1].role : 'viewer';
+        const assignedRole = role ?? defaultRole;
+        try {
+            const user = await userStore.createUser({ username, password, role: assignedRole });
+            const serviceToken = issueServiceToken(user.userId, user.username, user.role, config);
+            req.log.info({ username, role: assignedRole }, 'Auth: user registered');
+            void eventBus?.emit('user:created', { userId: user.userId, username: user.username, role: user.role }, { userId: req.user?.userId, source: 'server' });
+            reply.code(201).send({ user, serviceToken });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'Registration failed';
+            reply.code(400).send({ error: message });
+        }
+    });
+    // POST /api/v1/auth/logout
+    fastify.post('/api/v1/auth/logout', async (req, reply) => {
+        const { refreshToken } = req.body;
+        if (refreshToken) {
+            await tokenStore.delete(refreshToken);
+        }
+        // Also delete all tokens for the user if they want full logout
+        if (req.user) {
+            await tokenStore.deleteByUserId(req.user.userId);
+        }
+        req.log.info({ userId: req.user?.userId }, 'Auth: logout');
+        void eventBus?.emit('user:logout', { userId: req.user?.userId }, { userId: req.user?.userId, source: 'server' });
+        reply.send({ message: 'Logged out' });
+    });
+    // POST /api/v1/auth/refresh
+    fastify.post('/api/v1/auth/refresh', async (req, reply) => {
+        const { refreshToken } = req.body;
+        if (!refreshToken) {
+            reply.code(400).send({ error: 'Refresh token is required' });
+            return;
+        }
+        // Check if token is still in store (not revoked)
+        const stored = await tokenStore.find(refreshToken);
+        if (!stored) {
+            reply.code(401).send({ error: 'Refresh token has been revoked' });
+            return;
+        }
+        try {
+            const newAccessToken = refreshAccessToken(refreshToken, config);
+            reply.send({ accessToken: newAccessToken });
+        }
+        catch {
+            reply.code(401).send({ error: 'Invalid refresh token' });
+        }
+    });
+    // GET /api/v1/auth/whoami
+    fastify.get('/api/v1/auth/whoami', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        const user = await userStore.readUser(req.user.userId);
+        if (!user) {
+            reply.code(404).send({ error: 'User not found' });
+            return;
+        }
+        reply.send({ user });
+    });
+    // GET /api/v1/auth/roles
+    fastify.get('/api/v1/auth/roles', async (_req, reply) => {
+        reply.send({
+            roles: config.roles.map(r => ({
+                role: r.role,
+                permissions: r.permissions,
+            })),
+            defaults: config.permissions.defaults,
+        });
+    });
+    // ── User Management (admin-only) ──
+    // GET /api/v1/auth/users
+    fastify.get('/api/v1/auth/users', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        // Only admin can list users
+        if (!isAdmin(req.user.role)) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        const users = await userStore.listUsers();
+        reply.send({ users });
+    });
+    // POST /api/v1/auth/users
+    fastify.post('/api/v1/auth/users', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        if (!isAdmin(req.user.role)) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        const { username, password, role } = req.body;
+        if (!username || !password) {
+            reply.code(400).send({ error: 'Username and password are required' });
+            return;
+        }
+        const validation = validatePasswordStrength(password);
+        if (!validation.valid) {
+            reply.code(400).send({ error: validation.message });
+            return;
+        }
+        try {
+            const user = await userStore.createUser({ username, password, role: role ?? 'viewer' });
+            const serviceToken = issueServiceToken(user.userId, user.username, user.role, config);
+            void eventBus?.emit('user:created', { userId: user.userId, username: user.username, role: user.role }, { userId: req.user?.userId, source: 'server' });
+            reply.code(201).send({ user, serviceToken });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'User creation failed';
+            reply.code(400).send({ error: message });
+        }
+    });
+    // GET /api/v1/auth/users/:id
+    fastify.get('/api/v1/auth/users/:id', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        const { id } = req.params;
+        // Allow users to view their own profile
+        if (req.user.userId === id) {
+            const user = await userStore.readUser(id);
+            if (!user) {
+                reply.code(404).send({ error: 'User not found' });
+                return;
+            }
+            reply.send({ user });
+            return;
+        }
+        // Admin can view any user
+        if (!isAdmin(req.user.role)) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        const user = await userStore.readUser(id);
+        if (!user) {
+            reply.code(404).send({ error: 'User not found' });
+            return;
+        }
+        reply.send({ user });
+    });
+    // PUT /api/v1/auth/users/:id
+    fastify.put('/api/v1/auth/users/:id', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        const { id } = req.params;
+        const updates = req.body;
+        const userIsAdmin = isAdmin(req.user.role);
+        // Users can update their own password, admin can update everything
+        if (req.user.userId === id) {
+            if (updates.role && !userIsAdmin) {
+                reply.code(403).send({ error: 'Cannot change your own role' });
+                return;
+            }
+            if (updates.password) {
+                // Self-password-change requires current password verification
+                if (!updates.currentPassword) {
+                    reply.code(400).send({ error: 'Current password is required' });
+                    return;
+                }
+                const verified = await userStore.verifyCredentials(req.user.username, updates.currentPassword);
+                if (!verified) {
+                    reply.code(400).send({ error: 'Current password is incorrect' });
+                    return;
+                }
+                const validation = validatePasswordStrength(updates.password);
+                if (!validation.valid) {
+                    reply.code(400).send({ error: validation.message });
+                    return;
+                }
+            }
+            const { currentPassword: _, ...safeUpdates } = updates;
+            const user = await userStore.updateUser(id, safeUpdates);
+            if (!user) {
+                reply.code(404).send({ error: 'User not found' });
+                return;
+            }
+            void eventBus?.emit('user:updated', { userId: id, username: user.username, role: user.role }, { userId: req.user?.userId, source: 'server' });
+            reply.send({ user });
+            return;
+        }
+        if (!userIsAdmin) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        if (updates.password) {
+            const validation = validatePasswordStrength(updates.password);
+            if (!validation.valid) {
+                reply.code(400).send({ error: validation.message });
+                return;
+            }
+        }
+        const user = await userStore.updateUser(id, updates);
+        if (!user) {
+            reply.code(404).send({ error: 'User not found' });
+            return;
+        }
+        void eventBus?.emit('user:updated', { userId: id, username: user.username, role: user.role }, { userId: req.user?.userId, source: 'server' });
+        reply.send({ user });
+    });
+    // DELETE /api/v1/auth/users/:id
+    fastify.delete('/api/v1/auth/users/:id', async (req, reply) => {
+        if (!req.user) {
+            reply.code(401).send({ error: 'Not authenticated' });
+            return;
+        }
+        const { id } = req.params;
+        const userIsAdmin = isAdmin(req.user.role);
+        if (!userIsAdmin) {
+            reply.code(403).send({ error: 'Admin access required' });
+            return;
+        }
+        if (req.user.userId === id) {
+            reply.code(400).send({ error: 'Cannot delete your own account' });
+            return;
+        }
+        const deleted = await userStore.deleteUser(id);
+        if (!deleted) {
+            reply.code(404).send({ error: 'User not found' });
+            return;
+        }
+        // Revoke all tokens for deleted user
+        await tokenStore.deleteByUserId(id);
+        void eventBus?.emit('user:deleted', { userId: id }, { userId: req.user?.userId, source: 'server' });
+        reply.send({ message: 'User deleted' });
+    });
+}
+//# sourceMappingURL=auth-routes.js.map

package/dist/backend/routes/auth-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.js","sourceRoot":"","sources":["../../../src/backend/routes/auth-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACvF,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAS7D,MAAM,UAAU,kBAAkB,CAAC,OAAwB,EAAE,OAAyB;IACpF,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;IAE5D,MAAM,OAAO,GAAG,CAAC,IAAY,EAAW,EAAE,CACxC,aAAa,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;IAE/D,0BAA0B;IAC1B,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,IAAgD,CAAC;QAEpF,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,WAAW,GAAG,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAEvD,sBAAsB;QACtB,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,IAAI,MAAM,CAAC;QAC7C,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClE,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAE7D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,aAAa,CAAC,CAAC;QAE/F,KAAK,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEhJ,KAAK,CAAC,IAAI,CAAC;YACT,WAAW;YACX,YAAY;YACZ,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;SACxE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,MAAM,UAAU,GAAG,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAA+D,CAAC;QAEzG,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,uEAAuE;QACvE,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;QACpG,MAAM,YAAY,GAAG,IAAI,IAAI,WAAW,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;YACpF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,uBAAuB,CAAC,CAAC;YACxE,KAAK,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvJ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;YAC3E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,2BAA2B;IAC3B,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAiC,CAAC;QAE/D,IAAI,YAAY,EAAE,CAAC;YACjB,MAAM,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;QAED,+DAA+D;QAC/D,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,MAAM,UAAU,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC;QAE3D,KAAK,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAEjH,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACxD,MAAM,EAAE,YAAY,EAAE,GAAG,GAAG,CAAC,IAAiC,CAAC;QAE/D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,kBAAkB,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;YAChE,KAAK,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9C,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,yBAAyB;IACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACtD,KAAK,CAAC,IAAI,CAAC;YACT,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;aAC3B,CAAC,CAAC;YACH,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ;SACtC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,qCAAqC;IAErC,yBAAyB;IACzB,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACrD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACtD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,IAA+D,CAAC;QACzG,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;YACxF,MAAM,YAAY,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YACtF,KAAK,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvJ,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAE5C,wCAAwC;QACxC,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,0BAA0B;QAC1B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,6BAA6B;IAC7B,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QACzD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,IAAyF,CAAC;QAE9G,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC;QAE5C,mEAAmE;QACnE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC3B,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,8DAA8D;gBAC9D,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;oBAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;oBAChE,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;gBAC/F,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;oBACjE,OAAO;gBACT,CAAC;gBACD,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;gBAC9D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;oBACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;oBACpD,OAAO;gBACT,CAAC;YACH,CAAC;YACD,MAAM,EAAE,eAAe,EAAE,CAAC,EAAE,GAAG,WAAW,EAAE,GAAG,OAAO,CAAC;YACvD,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,IAAI,EAAE,CAAC;gBAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACzE,KAAK,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9I,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACrB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC9D,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;gBACtB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC9I,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAChC,OAAO,CAAC,MAAM,CAAC,wBAAwB,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5D,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QAED,MAAM,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,MAAwB,CAAC;QAC5C,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,CAAC;QAE5C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YACzD,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC3B,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gCAAgC,EAAE,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAClD,OAAO;QACT,CAAC;QAED,qCAAqC;QACrC,MAAM,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACpC,KAAK,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpG,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/backend/routes/chat-sse.d.ts

@@ -0,0 +1,17 @@
+/**
+ * SSE Helpers - Server-Sent Events utility functions for chat streaming
+ */
+import type { FastifyReply } from 'fastify';
+import type { SSEChatEvent } from '../../types/chat.js';
+export interface SSEConnectionState {
+    heartbeat: NodeJS.Timeout;
+    timeout: NodeJS.Timeout;
+    clientConnected: boolean;
+}
+export declare function startHeartbeat(reply: FastifyReply): NodeJS.Timeout;
+export declare function startIdleTimeout(reply: FastifyReply, onTimeout: () => void): NodeJS.Timeout;
+export declare function refreshIdleTimeout(state: SSEConnectionState, reply: FastifyReply, onTimeout: () => void): void;
+export declare function cleanupSSE(state: SSEConnectionState): void;
+export declare function sendSSE(reply: FastifyReply, event: SSEChatEvent): Promise<boolean>;
+export declare function endSSE(reply: FastifyReply): void;
+//# sourceMappingURL=chat-sse.d.ts.map

package/dist/backend/routes/chat-sse.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-sse.d.ts","sourceRoot":"","sources":["../../../src/backend/routes/chat-sse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIxD,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAAC,OAAO,CAQlE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAS3F;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,IAAI,GAAG,IAAI,CAG9G;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAI1D;AAID,wBAAsB,OAAO,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAexF;AAED,wBAAgB,MAAM,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAMhD"}

package/dist/backend/routes/chat-sse.js

@@ -0,0 +1,60 @@
+/**
+ * SSE Helpers - Server-Sent Events utility functions for chat streaming
+ */
+export function startHeartbeat(reply) {
+    return setInterval(() => {
+        try {
+            reply.raw.write(':\n\n'); // SSE comment line - keeps connection alive
+        }
+        catch {
+            // Connection already closed
+        }
+    }, 30000);
+}
+export function startIdleTimeout(reply, onTimeout) {
+    return setTimeout(() => {
+        try {
+            reply.raw.end();
+        }
+        catch {
+            // Already closed
+        }
+        onTimeout();
+    }, 5 * 60 * 1000); // 5 minutes idle timeout
+}
+export function refreshIdleTimeout(state, reply, onTimeout) {
+    clearTimeout(state.timeout);
+    state.timeout = startIdleTimeout(reply, onTimeout);
+}
+export function cleanupSSE(state) {
+    clearInterval(state.heartbeat);
+    clearTimeout(state.timeout);
+    state.clientConnected = false;
+}
+// ── SSE Send Helpers ──
+export async function sendSSE(reply, event) {
+    try {
+        const ok = reply.raw.write(`data: ${JSON.stringify(event)}\n\n`);
+        if (!ok) {
+            // Backpressure: wait for drain or timeout after 5s
+            await new Promise((resolve) => {
+                const drainHandler = () => { reply.raw.off('drain', drainHandler); resolve(); };
+                reply.raw.once('drain', drainHandler);
+                setTimeout(() => { reply.raw.off('drain', drainHandler); resolve(); }, 5000);
+            });
+        }
+        return true;
+    }
+    catch {
+        return false; // Client disconnected
+    }
+}
+export function endSSE(reply) {
+    try {
+        reply.raw.end();
+    }
+    catch {
+        // Already closed
+    }
+}
+//# sourceMappingURL=chat-sse.js.map

package/dist/backend/routes/chat-sse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chat-sse.js","sourceRoot":"","sources":["../../../src/backend/routes/chat-sse.ts"],"names":[],"mappings":"AAAA;;GAEG;AAaH,MAAM,UAAU,cAAc,CAAC,KAAmB;IAChD,OAAO,WAAW,CAAC,GAAG,EAAE;QACtB,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4CAA4C;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC,EAAE,KAAK,CAAC,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAmB,EAAE,SAAqB;IACzE,OAAO,UAAU,CAAC,GAAG,EAAE;QACrB,IAAI,CAAC;YACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,SAAS,EAAE,CAAC;IACd,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,yBAAyB;AAC9C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAyB,EAAE,KAAmB,EAAE,SAAqB;IACtG,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,KAAK,CAAC,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAyB;IAClD,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC/B,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5B,KAAK,CAAC,eAAe,GAAG,KAAK,CAAC;AAChC,CAAC;AAED,yBAAyB;AAEzB,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAmB,EAAE,KAAmB;IACpE,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjE,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,mDAAmD;YACnD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAClC,MAAM,YAAY,GAAG,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;gBAChF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;gBACtC,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAC/E,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,CAAC,sBAAsB;IACtC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,KAAmB;IACxC,IAAI,CAAC;QACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC"}