@musnows/scriverse 0.2.0 → 0.3.0

package/dist/user-auth.js

@@ -0,0 +1,489 @@
+import { createHash, randomBytes, randomUUID, scryptSync, timingSafeEqual } from "node:crypto";
+import { PLATFORM_AI_WORK_ID } from "./database.js";
+import { AppError, notFound } from "./errors.js";
+import { runWithRequestActor } from "./request-context.js";
+const sessionCookieName = "scriverse_session";
+const sessionLifetimeMs = 30 * 24 * 60 * 60_000;
+const apiKeyPrefix = "scrv_";
+function sha256(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function safeEqual(left, right) {
+    const leftBuffer = Buffer.from(left);
+    const rightBuffer = Buffer.from(right);
+    return leftBuffer.length === rightBuffer.length && timingSafeEqual(leftBuffer, rightBuffer);
+}
+function normalizeUsername(value) {
+    return value.normalize("NFKC").trim().toLocaleLowerCase("zh-CN");
+}
+function parseCookies(header) {
+    const result = new Map();
+    for (const part of header?.split(";") ?? []) {
+        const separator = part.indexOf("=");
+        if (separator < 0)
+            continue;
+        const name = part.slice(0, separator).trim();
+        try {
+            result.set(name, decodeURIComponent(part.slice(separator + 1).trim()));
+        }
+        catch {
+            // 无效 Cookie 不参与身份验证。
+        }
+    }
+    return result;
+}
+function apiKeyCredential(request) {
+    const direct = request.get("x-scriverse-api-key")?.trim();
+    if (direct)
+        return direct;
+    const authorization = request.get("authorization");
+    if (!authorization?.startsWith("Bearer "))
+        return null;
+    return authorization.slice(7).trim();
+}
+function mapUser(row) {
+    const avatarSha256 = row.avatar_sha256 === null || row.avatar_sha256 === undefined
+        ? null
+        : String(row.avatar_sha256);
+    return {
+        userId: String(row.id),
+        username: String(row.username),
+        displayName: String(row.display_name),
+        role: String(row.role) === "admin" ? "admin" : "user",
+        status: String(row.status) === "disabled" ? "disabled" : "active",
+        createdAt: String(row.created_at),
+        avatarUrl: avatarSha256
+            ? `/api/user-avatars/${encodeURIComponent(String(row.id))}?v=${encodeURIComponent(avatarSha256)}`
+            : null
+    };
+}
+function passwordDigest(password, salt) {
+    return scryptSync(password, salt, 64, { N: 16_384, r: 8, p: 1, maxmem: 64 * 1024 * 1024 }).toString("base64");
+}
+function workIdFromPath(database, pathname) {
+    const decoded = pathname.split("/").map((part) => {
+        try {
+            return decodeURIComponent(part);
+        }
+        catch {
+            return part;
+        }
+    });
+    if (decoded[1] !== "api")
+        return null;
+    if (decoded[2] === "works" && decoded[3] && decoded[3] !== "import")
+        return decoded[3];
+    const tableByResource = {
+        volumes: "volumes",
+        chapters: "chapters",
+        settings: "settings",
+        characters: "characters",
+        races: "races",
+        organizations: "organizations",
+        "timeline-tracks": "timeline_tracks",
+        timeline: "timeline_events",
+        relationships: "relationships",
+        foreshadows: "foreshadows",
+        reviews: "review_items",
+        tasks: "analysis_tasks",
+        "ai-conversations": "ai_conversations",
+        suggestions: "ai_suggestions"
+    };
+    const table = tableByResource[decoded[2] ?? ""];
+    if (table && decoded[3]) {
+        const row = database.get(`SELECT work_id FROM ${table} WHERE id = ?`, decoded[3]);
+        if (row)
+            return row.work_id;
+        if (table === "chapters") {
+            const version = database.get("SELECT work_id FROM chapter_versions WHERE chapter_id = ? LIMIT 1", decoded[3]);
+            if (version)
+                return version.work_id;
+        }
+        if (table === "characters") {
+            const version = database.get("SELECT work_id FROM character_versions WHERE character_id = ? LIMIT 1", decoded[3]);
+            if (version)
+                return version.work_id;
+        }
+        throw notFound("记录");
+    }
+    if (decoded[2] === "foreshadow-occurrences" && decoded[3]) {
+        const row = database.get(`SELECT foreshadow.work_id FROM foreshadow_occurrences occurrence
+       JOIN foreshadows foreshadow ON foreshadow.id = occurrence.foreshadow_id WHERE occurrence.id = ?`, decoded[3]);
+        if (!row)
+            throw notFound("伏笔出现点");
+        return row.work_id;
+    }
+    if (decoded[2] === "entity-versions" && decoded[3] && decoded[4]) {
+        const row = database.get("SELECT work_id FROM entity_versions WHERE entity_type = ? AND entity_id = ? LIMIT 1", decoded[3], decoded[4]);
+        if (!row)
+            throw notFound("版本记录");
+        return row.work_id;
+    }
+    return null;
+}
+export class UserAuthService {
+    database;
+    constructor(database) {
+        this.database = database;
+    }
+    resolveWorkId(pathname) {
+        return workIdFromPath(this.database, pathname);
+    }
+    hasUsers() {
+        return Number(this.database.get("SELECT COUNT(*) AS count FROM users")?.count ?? 0) > 0;
+    }
+    createSession(userId) {
+        const token = randomBytes(32).toString("base64url");
+        const csrfToken = randomBytes(24).toString("base64url");
+        const sessionId = randomUUID();
+        const timestamp = new Date();
+        this.database.run(`INSERT INTO user_sessions (id, user_id, token_hash, csrf_token, created_at, expires_at, last_seen_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?)`, sessionId, userId, sha256(token), csrfToken, timestamp.toISOString(), new Date(timestamp.getTime() + sessionLifetimeMs).toISOString(), timestamp.toISOString());
+        const user = this.getUser(userId);
+        return { token, session: { id: sessionId, user, csrfToken } };
+    }
+    register(input) {
+        const normalizedUsername = normalizeUsername(input.username);
+        const timestamp = new Date().toISOString();
+        const userId = randomUUID();
+        const salt = randomBytes(16).toString("base64url");
+        return this.database.transaction(() => {
+            const role = Number(this.database.get("SELECT COUNT(*) AS count FROM users")?.count ?? 0) === 0 ? "admin" : "user";
+            this.database.run(`INSERT INTO users (id, username, normalized_username, display_name, password_hash, password_salt, role, status, created_at, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, 'active', ?, ?)`, userId, input.username.trim(), normalizedUsername, input.username.trim(), passwordDigest(input.password, salt), salt, role, timestamp, timestamp);
+            if (role === "admin") {
+                this.database.run("UPDATE works SET owner_user_id = ? WHERE owner_user_id IS NULL AND id <> ?", userId, PLATFORM_AI_WORK_ID);
+                this.database.run(`INSERT OR IGNORE INTO work_memberships (work_id, user_id, role, invited_by_user_id, created_at)
+           SELECT id, ?, 'owner', ?, ? FROM works WHERE owner_user_id = ? AND id <> ?`, userId, userId, timestamp, userId, PLATFORM_AI_WORK_ID);
+            }
+            return this.createSession(userId);
+        });
+    }
+    login(username, password) {
+        const row = this.database.get("SELECT * FROM users WHERE normalized_username = ?", normalizeUsername(username));
+        const fallbackSalt = "invalid-login-salt";
+        const calculated = passwordDigest(password, String(row?.password_salt ?? fallbackSalt));
+        const valid = row && safeEqual(calculated, String(row.password_hash));
+        if (!valid)
+            throw new AppError(401, "INVALID_CREDENTIALS", "用户名或密码不正确");
+        const user = mapUser(row);
+        if (user.status !== "active")
+            throw new AppError(403, "ACCOUNT_DISABLED", "该账户已被停用");
+        this.database.run("UPDATE users SET last_login_at = ?, updated_at = ? WHERE id = ?", new Date().toISOString(), new Date().toISOString(), user.userId);
+        return this.createSession(user.userId);
+    }
+    authenticate(request) {
+        const token = parseCookies(request.get("cookie")).get(sessionCookieName);
+        if (!token)
+            return null;
+        const row = this.database.get(`SELECT session.id AS session_id, session.csrf_token, session.expires_at, session.revoked_at,
+       user.* FROM user_sessions session JOIN users user ON user.id = session.user_id WHERE session.token_hash = ?`, sha256(token));
+        if (!row || row.revoked_at || String(row.expires_at) <= new Date().toISOString())
+            return null;
+        const user = mapUser(row);
+        if (user.status !== "active")
+            return null;
+        this.database.run("UPDATE user_sessions SET last_seen_at = ? WHERE id = ?", new Date().toISOString(), String(row.session_id));
+        return { id: String(row.session_id), csrfToken: String(row.csrf_token), user };
+    }
+    authenticateApiKey(request) {
+        const key = apiKeyCredential(request);
+        if (!key || !key.startsWith(apiKeyPrefix) || key.length > 200)
+            return null;
+        const row = this.database.get(`SELECT api_key.key_prefix, user.* FROM user_api_keys api_key
+       JOIN users user ON user.id = api_key.user_id WHERE api_key.key_hash = ?`, sha256(key));
+        if (!row)
+            return null;
+        const user = mapUser(row);
+        if (user.status !== "active")
+            return null;
+        this.database.run("UPDATE user_api_keys SET last_used_at = ? WHERE user_id = ?", new Date().toISOString(), user.userId);
+        return { user, prefix: String(row.key_prefix) };
+    }
+    hasApiKeyCredential(request) {
+        return apiKeyCredential(request) !== null;
+    }
+    getApiKeyStatus(userId) {
+        this.getUser(userId);
+        const row = this.database.get("SELECT * FROM user_api_keys WHERE user_id = ?", userId);
+        if (!row) {
+            return { configured: false, prefix: null, createdAt: null, rotatedAt: null, lastUsedAt: null };
+        }
+        return {
+            configured: true,
+            prefix: String(row.key_prefix),
+            createdAt: String(row.created_at),
+            rotatedAt: String(row.rotated_at),
+            lastUsedAt: row.last_used_at === null ? null : String(row.last_used_at)
+        };
+    }
+    resetApiKey(userId) {
+        this.getUser(userId);
+        const apiKey = `${apiKeyPrefix}${randomBytes(32).toString("base64url")}`;
+        const prefix = apiKey.slice(0, 13);
+        const timestamp = new Date().toISOString();
+        this.database.run(`INSERT INTO user_api_keys (user_id, key_hash, key_prefix, created_at, rotated_at, last_used_at)
+       VALUES (?, ?, ?, ?, ?, NULL)
+       ON CONFLICT(user_id) DO UPDATE SET
+         key_hash = excluded.key_hash,
+         key_prefix = excluded.key_prefix,
+         rotated_at = excluded.rotated_at,
+         last_used_at = NULL`, userId, sha256(apiKey), prefix, timestamp, timestamp);
+        return { ...this.getApiKeyStatus(userId), apiKey };
+    }
+    revoke(sessionId) {
+        this.database.run("UPDATE user_sessions SET revoked_at = ? WHERE id = ?", new Date().toISOString(), sessionId);
+    }
+    getUser(userId) {
+        const row = this.database.get("SELECT * FROM users WHERE id = ?", userId);
+        if (!row)
+            throw notFound("用户");
+        return mapUser(row);
+    }
+    listUsers() {
+        return this.database.all("SELECT * FROM users ORDER BY created_at, username").map(mapUser);
+    }
+    directory(query) {
+        const escapedQuery = query.trim().slice(0, 100).replace(/[\\%_]/gu, (character) => `\\${character}`);
+        const pattern = `%${escapedQuery}%`;
+        return this.database.all(`SELECT * FROM users WHERE status = 'active' AND (username LIKE ? ESCAPE '\\' OR display_name LIKE ? ESCAPE '\\')
+       ORDER BY username LIMIT 50`, pattern, pattern).map((row) => {
+            const user = mapUser(row);
+            return { userId: user.userId, username: user.username, displayName: user.displayName, avatarUrl: user.avatarUrl };
+        });
+    }
+    updateUser(actor, userId, input) {
+        const current = this.getUser(userId);
+        const nextRole = input.role ?? current.role;
+        const nextStatus = input.status ?? current.status;
+        if (actor.userId === userId && (nextRole !== "admin" || nextStatus !== "active")) {
+            throw new AppError(409, "CANNOT_DISABLE_SELF", "不能停用自己或移除自己的管理员身份");
+        }
+        if (current.role === "admin" && current.status === "active" && (nextRole !== "admin" || nextStatus !== "active")) {
+            const activeAdmins = Number(this.database.get("SELECT COUNT(*) AS count FROM users WHERE role = 'admin' AND status = 'active'")?.count ?? 0);
+            if (activeAdmins <= 1)
+                throw new AppError(409, "LAST_ADMIN_REQUIRED", "系统至少需要保留一名可用管理员");
+        }
+        this.database.run("UPDATE users SET role = ?, status = ?, updated_at = ? WHERE id = ?", nextRole, nextStatus, new Date().toISOString(), userId);
+        if (nextStatus === "disabled")
+            this.database.run("UPDATE user_sessions SET revoked_at = ? WHERE user_id = ? AND revoked_at IS NULL", new Date().toISOString(), userId);
+        return this.getUser(userId);
+    }
+    updateProfile(userId, displayName) {
+        this.database.run("UPDATE users SET display_name = ?, updated_at = ? WHERE id = ?", displayName.trim(), new Date().toISOString(), userId);
+        return this.getUser(userId);
+    }
+    setAvatar(userId, input) {
+        this.getUser(userId);
+        const timestamp = new Date().toISOString();
+        const digest = createHash("sha256").update(input.content).digest("hex");
+        this.database.transaction(() => {
+            this.database.run(`INSERT INTO user_avatars (user_id, mime_type, content, byte_length, sha256, width, height, updated_at)
+         VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT(user_id) DO UPDATE SET mime_type = excluded.mime_type, content = excluded.content,
+         byte_length = excluded.byte_length, sha256 = excluded.sha256, width = excluded.width,
+         height = excluded.height, updated_at = excluded.updated_at`, userId, input.mimeType, input.content, input.content.byteLength, digest, input.width, input.height, timestamp);
+            this.database.run("UPDATE users SET avatar_updated_at = ?, avatar_sha256 = ?, updated_at = ? WHERE id = ?", timestamp, digest, timestamp, userId);
+        });
+        return this.getUser(userId);
+    }
+    getAvatar(userId) {
+        this.getUser(userId);
+        const row = this.database.get("SELECT * FROM user_avatars WHERE user_id = ?", userId);
+        if (!row)
+            throw notFound("用户头像");
+        return {
+            mimeType: String(row.mime_type),
+            content: Buffer.from(row.content),
+            byteLength: Number(row.byte_length),
+            sha256: String(row.sha256),
+            width: Number(row.width),
+            height: Number(row.height),
+            updatedAt: String(row.updated_at)
+        };
+    }
+    deleteAvatar(userId) {
+        this.getUser(userId);
+        this.database.transaction(() => {
+            this.database.run("DELETE FROM user_avatars WHERE user_id = ?", userId);
+            this.database.run("UPDATE users SET avatar_updated_at = NULL, avatar_sha256 = NULL, updated_at = ? WHERE id = ?", new Date().toISOString(), userId);
+        });
+        return this.getUser(userId);
+    }
+    changePassword(userId, sessionId, currentPassword, newPassword) {
+        const row = this.database.get("SELECT * FROM users WHERE id = ?", userId);
+        if (!row)
+            throw notFound("用户");
+        const calculated = passwordDigest(currentPassword, String(row.password_salt));
+        if (!safeEqual(calculated, String(row.password_hash)))
+            throw new AppError(401, "INVALID_CURRENT_PASSWORD", "当前密码不正确");
+        const salt = randomBytes(16).toString("base64url");
+        const timestamp = new Date().toISOString();
+        this.database.transaction(() => {
+            this.database.run("UPDATE users SET password_hash = ?, password_salt = ?, updated_at = ? WHERE id = ?", passwordDigest(newPassword, salt), salt, timestamp, userId);
+            this.database.run("UPDATE user_sessions SET revoked_at = ? WHERE user_id = ? AND id <> ? AND revoked_at IS NULL", timestamp, userId, sessionId);
+        });
+    }
+    listMembers(workId) {
+        return this.database.all(`SELECT membership.role, membership.created_at, user.id, user.username, user.display_name, user.status, user.avatar_sha256
+       FROM work_memberships membership JOIN users user ON user.id = membership.user_id
+       WHERE membership.work_id = ? ORDER BY CASE membership.role WHEN 'owner' THEN 0 ELSE 1 END, user.username`, workId).map((row) => ({
+            userId: String(row.id), username: String(row.username), displayName: String(row.display_name),
+            role: String(row.role), status: String(row.status), createdAt: String(row.created_at),
+            avatarUrl: row.avatar_sha256
+                ? `/api/user-avatars/${encodeURIComponent(String(row.id))}?v=${encodeURIComponent(String(row.avatar_sha256))}`
+                : null
+        }));
+    }
+    addMember(workId, userId, invitedByUserId) {
+        const user = this.getUser(userId);
+        if (user.status !== "active")
+            throw new AppError(409, "USER_DISABLED", "不能邀请已停用用户");
+        this.database.run(`INSERT INTO work_memberships (work_id, user_id, role, invited_by_user_id, created_at)
+       VALUES (?, ?, 'editor', ?, ?) ON CONFLICT(work_id, user_id) DO UPDATE SET role = 'editor', invited_by_user_id = excluded.invited_by_user_id`, workId, userId, invitedByUserId, new Date().toISOString());
+        return this.listMembers(workId);
+    }
+    removeMember(workId, userId) {
+        const work = this.database.get("SELECT owner_user_id FROM works WHERE id = ?", workId);
+        if (!work)
+            throw notFound("作品");
+        if (String(work.owner_user_id ?? "") === userId)
+            throw new AppError(409, "OWNER_REQUIRED", "不能移除作品创建者");
+        this.database.run("DELETE FROM work_memberships WHERE work_id = ? AND user_id = ?", workId, userId);
+        return this.listMembers(workId);
+    }
+    workRole(user, workId, allowAdminAccess = true) {
+        if (allowAdminAccess && user.role === "admin")
+            return "admin";
+        const work = this.database.get("SELECT owner_user_id FROM works WHERE id = ?", workId);
+        if (!work)
+            throw notFound("作品");
+        if (String(work.owner_user_id ?? "") === user.userId)
+            return "owner";
+        const membership = this.database.get("SELECT role FROM work_memberships WHERE work_id = ? AND user_id = ?", workId, user.userId);
+        return String(membership?.role ?? "") === "editor" ? "editor" : null;
+    }
+    assertWorkAccess(user, workId, write = false, ownerOnly = false, allowAdminAccess = true) {
+        if (workId === PLATFORM_AI_WORK_ID && (!allowAdminAccess || user.role !== "admin"))
+            throw new AppError(403, "ADMIN_REQUIRED", "该操作仅限系统管理员");
+        const role = this.workRole(user, workId, allowAdminAccess);
+        if (!role)
+            throw new AppError(403, "WORK_ACCESS_DENIED", "你没有访问这部作品的权限");
+        if (ownerOnly && role !== "admin" && role !== "owner")
+            throw new AppError(403, "WORK_OWNER_REQUIRED", "该操作仅限作品创建者或系统管理员");
+        if (write && !["admin", "owner", "editor"].includes(role))
+            throw new AppError(403, "WORK_EDIT_DENIED", "你没有编辑这部作品的权限");
+    }
+}
+export function setSessionCookie(response, token, secure) {
+    response.cookie(sessionCookieName, token, {
+        httpOnly: true,
+        sameSite: "lax",
+        secure,
+        path: "/",
+        maxAge: sessionLifetimeMs
+    });
+}
+export function clearSessionCookie(response, secure) {
+    response.clearCookie(sessionCookieName, { httpOnly: true, sameSite: "lax", secure, path: "/" });
+}
+export function createUserSessionMiddleware(auth, disabled = false) {
+    return (request, response, next) => {
+        if (disabled)
+            return runWithRequestActor(null, next);
+        const apiKey = auth.authenticateApiKey(request);
+        if (auth.hasApiKeyCredential(request) && !apiKey) {
+            response.status(401).json({ error: { code: "API_KEY_INVALID", message: "API Key 无效或已失效" } });
+            return;
+        }
+        const session = apiKey ? null : auth.authenticate(request);
+        if (apiKey) {
+            request.authApiKey = apiKey;
+            request.authUser = apiKey.user;
+            request.authMethod = "api-key";
+        }
+        else if (session) {
+            request.authSession = session;
+            request.authUser = session.user;
+            request.authMethod = "session";
+        }
+        const isPublic = request.path === "/api/health"
+            || request.path === "/api/auth/session"
+            || (request.path === "/api/auth/register" && request.method === "POST")
+            || (request.path === "/api/auth/login" && request.method === "POST")
+            || !request.path.startsWith("/api/");
+        if (!session && !apiKey && !isPublic) {
+            response.status(401).json({ error: { code: "AUTH_REQUIRED", message: "请先登录" } });
+            return;
+        }
+        if (session && !["GET", "HEAD", "OPTIONS"].includes(request.method) && request.path !== "/api/auth/login" && request.path !== "/api/auth/register") {
+            const csrf = request.get("x-csrf-token") ?? "";
+            if (!safeEqual(csrf, session.csrfToken)) {
+                response.status(403).json({ error: { code: "CSRF_TOKEN_INVALID", message: "请求校验失败，请刷新页面后重试" } });
+                return;
+            }
+        }
+        const user = apiKey?.user ?? session?.user ?? null;
+        return runWithRequestActor(user ? { ...user, authentication: apiKey ? "api-key" : "session" } : null, next);
+    };
+}
+const cliApiRules = [
+    { methods: ["GET"], path: /^\/api\/cli\/session$/u },
+    { methods: ["GET", "POST"], path: /^\/api\/works$/u },
+    { methods: ["GET", "PATCH"], path: /^\/api\/works\/[^/]+$/u },
+    { methods: ["GET"], path: /^\/api\/works\/[^/]+\/(?:outlines|foreshadows|settings|characters|races|organizations|timeline-tracks|timeline|relationships|search|export|audit-logs)$/u },
+    { methods: ["POST"], path: /^\/api\/works\/[^/]+\/(?:volumes|chapters|foreshadows|settings|characters|races|organizations|timeline-tracks|timeline|relationships)$/u },
+    { methods: ["GET", "PATCH"], path: /^\/api\/volumes\/[^/]+$/u },
+    { methods: ["GET", "PATCH"], path: /^\/api\/chapters\/[^/]+$/u },
+    { methods: ["GET"], path: /^\/api\/chapters\/[^/]+\/(?:versions|outline)$/u },
+    { methods: ["POST"], path: /^\/api\/chapters\/[^/]+\/(?:restore|move)$/u },
+    { methods: ["PUT"], path: /^\/api\/chapters\/[^/]+\/outline$/u },
+    { methods: ["GET", "PATCH"], path: /^\/api\/(?:settings|characters|races|organizations|timeline-tracks|timeline|relationships|foreshadows)\/[^/]+$/u },
+    { methods: ["GET"], path: /^\/api\/characters\/[^/]+\/versions$/u },
+    { methods: ["POST"], path: /^\/api\/characters\/[^/]+\/restore$/u },
+    { methods: ["GET"], path: /^\/api\/entity-versions\/[^/]+\/[^/]+$/u },
+    { methods: ["POST"], path: /^\/api\/entity-versions\/[^/]+\/[^/]+\/restore$/u }
+];
+export function createCliApiScopeMiddleware(disabled = false) {
+    return (request, response, next) => {
+        if (disabled || request.authMethod !== "api-key")
+            return next();
+        if (cliApiRules.some((rule) => rule.methods.includes(request.method) && rule.path.test(request.path)))
+            return next();
+        response.status(403).json({ error: { code: "CLI_SCOPE_DENIED", message: "API Key 不能访问用户管理、系统管理或未开放给 CLI 的接口" } });
+    };
+}
+export function createWorkAuthorizationMiddleware(auth, disabled = false) {
+    return (request, _response, next) => {
+        if (disabled || !request.path.startsWith("/api/") || request.path.startsWith("/api/auth/") || request.path === "/api/health")
+            return next();
+        const user = request.authUser;
+        if (!user)
+            throw new AppError(401, "AUTH_REQUIRED", "请先登录");
+        if (request.path.startsWith("/api/platform/") || request.path.startsWith("/api/providers/") || request.path.startsWith("/api/models/")) {
+            if (user.role !== "admin")
+                throw new AppError(403, "ADMIN_REQUIRED", "该操作仅限系统管理员");
+            return next();
+        }
+        if (/^\/api\/works\/[^/]+\/providers/u.test(request.path)) {
+            if (user.role !== "admin")
+                throw new AppError(403, "ADMIN_REQUIRED", "该操作仅限系统管理员");
+            return next();
+        }
+        if (request.path.startsWith("/api/users") && !request.path.startsWith("/api/users/directory")) {
+            if (user.role !== "admin")
+                throw new AppError(403, "ADMIN_REQUIRED", "该操作仅限系统管理员");
+            return next();
+        }
+        const workId = auth.resolveWorkId(request.path);
+        if (!workId)
+            return next();
+        const write = !["GET", "HEAD", "OPTIONS"].includes(request.method);
+        const ownerOnly = write && (/^\/api\/works\/[^/]+$/u.test(request.path)
+            || /^\/api\/works\/[^/]+\/cover$/u.test(request.path)
+            || /^\/api\/works\/[^/]+\/members(?:\/[^/]+)?$/u.test(request.path));
+        auth.assertWorkAccess(user, workId, write, ownerOnly, request.authMethod !== "api-key");
+        next();
+    };
+}
+//# sourceMappingURL=user-auth.js.map

package/dist/user-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-auth.js","sourceRoot":"","sources":["../src/user-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE/F,OAAO,EAAY,mBAAmB,EAAY,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,mBAAmB,EAAqB,MAAM,sBAAsB,CAAC;AAgD9E,MAAM,iBAAiB,GAAG,mBAAmB,CAAC;AAC9C,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC;AAChD,MAAM,YAAY,GAAG,OAAO,CAAC;AAE7B,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,KAAa;IAC5C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM,IAAI,eAAe,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,YAAY,CAAC,MAA0B;IAC9C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,GAAG,CAAC;YAAE,SAAS;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAgB;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACnD,IAAI,CAAC,aAAa,EAAE,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,OAAO,CAAC,GAAQ;IACvB,MAAM,YAAY,GAAG,GAAG,CAAC,aAAa,KAAK,IAAI,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS;QAChF,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC9B,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;QACrC,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;QACrD,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;QACjE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,SAAS,EAAE,YAAY;YACrB,CAAC,CAAC,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,YAAY,CAAC,EAAE;YACjG,CAAC,CAAC,IAAI;KACT,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,IAAY;IACpD,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAChH,CAAC;AAED,SAAS,cAAc,CAAC,QAAkB,EAAE,QAAgB;IAC1D,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC/C,IAAI,CAAC;YAAC,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,eAAe,GAA2B;QAC9C,OAAO,EAAE,SAAS;QAClB,QAAQ,EAAE,UAAU;QACpB,QAAQ,EAAE,UAAU;QACpB,UAAU,EAAE,YAAY;QACxB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,eAAe;QAC9B,iBAAiB,EAAE,iBAAiB;QACpC,QAAQ,EAAE,iBAAiB;QAC3B,aAAa,EAAE,eAAe;QAC9B,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,cAAc;QACvB,KAAK,EAAE,gBAAgB;QACvB,kBAAkB,EAAE,kBAAkB;QACtC,WAAW,EAAE,gBAAgB;KAC9B,CAAC;IACF,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,KAAK,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAsB,uBAAuB,KAAK,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACvG,IAAI,GAAG;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;QAC5B,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAC1B,mEAAmE,EACnE,OAAO,CAAC,CAAC,CAAC,CACX,CAAC;YACF,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC;QACtC,CAAC;QACD,IAAI,KAAK,KAAK,YAAY,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAC1B,uEAAuE,EACvE,OAAO,CAAC,CAAC,CAAC,CACX,CAAC;YACF,IAAI,OAAO;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAC;QACtC,CAAC;QACD,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,wBAAwB,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CACtB;uGACiG,EACjG,OAAO,CAAC,CAAC,CAAC,CACX,CAAC;QACF,IAAI,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClC,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,iBAAiB,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CACtB,qFAAqF,EACrF,OAAO,CAAC,CAAC,CAAC,EACV,OAAO,CAAC,CAAC,CAAC,CACX,CAAC;QACF,IAAI,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,eAAe;IACG;IAA7B,YAA6B,QAAkB;QAAlB,aAAQ,GAAR,QAAQ,CAAU;IAAG,CAAC;IAEnD,aAAa,CAAC,QAAgB;QAC5B,OAAO,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED,QAAQ;QACN,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1F,CAAC;IAEO,aAAa,CAAC,MAAc;QAClC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf;oCAC8B,EAC9B,SAAS,EACT,MAAM,EACN,MAAM,CAAC,KAAK,CAAC,EACb,SAAS,EACT,SAAS,CAAC,WAAW,EAAE,EACvB,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,iBAAiB,CAAC,CAAC,WAAW,EAAE,EAC/D,SAAS,CAAC,WAAW,EAAE,CACxB,CAAC;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC;IAChE,CAAC;IAED,QAAQ,CAAC,KAA6C;QACpD,MAAM,kBAAkB,GAAG,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;YACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,qCAAqC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YACnH,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf;sDAC8C,EAC9C,MAAM,EACN,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EACrB,kBAAkB,EAClB,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EACrB,cAAc,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,EACpC,IAAI,EACJ,IAAI,EACJ,SAAS,EACT,SAAS,CACV,CAAC;YACF,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,4EAA4E,EAAE,MAAM,EAAE,mBAAmB,CAAC,CAAC;gBAC7H,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf;sFAC4E,EAC5E,MAAM,EACN,MAAM,EACN,SAAS,EACT,MAAM,EACN,mBAAmB,CACpB,CAAC;YACJ,CAAC;YACD,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAgB,EAAE,QAAgB;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAC3B,mDAAmD,EACnD,iBAAiB,CAAC,QAAQ,CAAC,CAC5B,CAAC;QACF,MAAM,YAAY,GAAG,oBAAoB,CAAC;QAC1C,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,aAAa,IAAI,YAAY,CAAC,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,GAAG,IAAI,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qBAAqB,EAAE,WAAW,CAAC,CAAC;QACxE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,kBAAkB,EAAE,SAAS,CAAC,CAAC;QACrF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,iEAAiE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACtJ,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,YAAY,CAAC,OAAgB;QAC3B,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAC3B;mHAC6G,EAC7G,MAAM,CAAC,KAAK,CAAC,CACd,CAAC;QACF,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9F,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,wDAAwD,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QAC9H,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC;IACjF,CAAC;IAED,kBAAkB,CAAC,OAAgB;QACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,IAAI,CAAC;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAC3B;+EACyE,EACzE,MAAM,CAAC,GAAG,CAAC,CACZ,CAAC;QACF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,6DAA6D,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACxH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;IAClD,CAAC;IAED,mBAAmB,CAAC,OAAgB;QAClC,OAAO,gBAAgB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC5C,CAAC;IAED,eAAe,CAAC,MAAc;QAC5B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,+CAA+C,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QACjG,CAAC;QACD,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;YAC9B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;YACjC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;YACjC,UAAU,EAAE,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;SACxE,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,MAAM,GAAG,GAAG,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf;;;;;;6BAMuB,EACvB,MAAM,EACN,MAAM,CAAC,MAAM,CAAC,EACd,MAAM,EACN,SAAS,EACT,SAAS,CACV,CAAC;QACF,OAAO,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IACrD,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,sDAAsD,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;IACjH,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7F,CAAC;IAED,SAAS,CAAC,KAAa;QACrB,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,IAAI,YAAY,GAAG,CAAC;QACpC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CACtB;kCAC4B,EAC5B,OAAO,EACP,OAAO,CACR,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YACZ,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACpH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,KAAe,EAAE,MAAc,EAAE,KAAkE;QAC5G,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;QAC5C,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,KAAK,QAAQ,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qBAAqB,EAAE,mBAAmB,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,UAAU,KAAK,QAAQ,CAAC,EAAE,CAAC;YACjH,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,gFAAgF,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC;YAC7I,IAAI,YAAY,IAAI,CAAC;gBAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qBAAqB,EAAE,iBAAiB,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,oEAAoE,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QAChJ,IAAI,UAAU,KAAK,UAAU;YAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,kFAAkF,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QACvK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,aAAa,CAAC,MAAc,EAAE,WAAmB;QAC/C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,gEAAgE,EAAE,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QAC1I,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,MAAc,EAAE,KAA8G;QACtI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf;;;;oEAI4D,EAC5D,MAAM,EACN,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,OAAO,CAAC,UAAU,EACxB,MAAM,EACN,KAAK,CAAC,KAAK,EACX,KAAK,CAAC,MAAM,EACZ,SAAS,CACV,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,wFAAwF,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACpJ,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,8CAA8C,EAAE,MAAM,CAAC,CAAC;QACtF,IAAI,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjC,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;YAC/B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAqB,CAAC;YAC/C,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC;YACnC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YACxB,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;YAC1B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;SAClC,CAAC;IACJ,CAAC;IAED,YAAY,CAAC,MAAc;QACzB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,4CAA4C,EAAE,MAAM,CAAC,CAAC;YACxE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,8FAA8F,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QACtJ,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAED,cAAc,CAAC,MAAc,EAAE,SAAiB,EAAE,eAAuB,EAAE,WAAmB;QAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG;YAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,UAAU,GAAG,cAAc,CAAC,eAAe,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,0BAA0B,EAAE,SAAS,CAAC,CAAC;QACtH,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;YAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,oFAAoF,EAAE,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YACpK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,8FAA8F,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAClJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,WAAW,CAAC,MAAc;QACxB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CACtB;;gHAE0G,EAC1G,MAAM,CACP,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACd,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC7F,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;YACrF,SAAS,EAAE,GAAG,CAAC,aAAa;gBAC1B,CAAC,CAAC,qBAAqB,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE;gBAC9G,CAAC,CAAC,IAAI;SACT,CAAC,CAAC,CAAC;IACN,CAAC;IAED,SAAS,CAAC,MAAc,EAAE,MAAc,EAAE,eAAuB;QAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,WAAW,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,CAAC,GAAG,CACf;mJAC6I,EAC7I,MAAM,EACN,MAAM,EACN,eAAe,EACf,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;QACF,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,YAAY,CAAC,MAAc,EAAE,MAAc;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,8CAA8C,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,CAAC,IAAI;YAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,KAAK,MAAM;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,WAAW,CAAC,CAAC;QACxG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,gEAAgE,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QACpG,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED,QAAQ,CAAC,IAAc,EAAE,MAAc,EAAE,gBAAgB,GAAG,IAAI;QAC9D,IAAI,gBAAgB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,OAAO,CAAC;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,8CAA8C,EAAE,MAAM,CAAC,CAAC;QACvF,IAAI,CAAC,IAAI;YAAE,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,EAAE,CAAC,KAAK,IAAI,CAAC,MAAM;YAAE,OAAO,OAAO,CAAC;QACrE,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,qEAAqE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QACjI,OAAO,MAAM,CAAC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,CAAC;IAED,gBAAgB,CAAC,IAAc,EAAE,MAAc,EAAE,KAAK,GAAG,KAAK,EAAE,SAAS,GAAG,KAAK,EAAE,gBAAgB,GAAG,IAAI;QACxG,IAAI,MAAM,KAAK,mBAAmB,IAAI,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;QAC5I,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAC3D,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,oBAAoB,EAAE,cAAc,CAAC,CAAC;QACzE,IAAI,SAAS,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;QAC1H,IAAI,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,kBAAkB,EAAE,cAAc,CAAC,CAAC;IACzH,CAAC;CACF;AAED,MAAM,UAAU,gBAAgB,CAAC,QAAkB,EAAE,KAAa,EAAE,MAAe;IACjF,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,KAAK,EAAE;QACxC,QAAQ,EAAE,IAAI;QACd,QAAQ,EAAE,KAAK;QACf,MAAM;QACN,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,iBAAiB;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAkB,EAAE,MAAe;IACpE,QAAQ,CAAC,WAAW,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,IAAqB,EAAE,QAAQ,GAAG,KAAK;IACjF,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,QAAQ;YAAE,OAAO,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjD,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC;YAC5B,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC;YAC/B,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;QACjC,CAAC;aAAM,IAAI,OAAO,EAAE,CAAC;YACnB,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC;YAC9B,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;YAChC,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;QACjC,CAAC;QACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,KAAK,aAAa;eAC1C,OAAO,CAAC,IAAI,KAAK,mBAAmB;eACpC,CAAC,OAAO,CAAC,IAAI,KAAK,oBAAoB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;eACpE,CAAC,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;eACjE,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,iBAAiB,IAAI,OAAO,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YACnJ,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC/C,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;gBACjG,OAAO;YACT,CAAC;QACH,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,OAAO,EAAE,IAAI,IAAI,IAAI,CAAC;QACnD,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9G,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,WAAW,GAA+C;IAC9D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACpD,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACrD,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAC7D,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,0JAA0J,EAAE;IACtL,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,yIAAyI,EAAE;IACtK,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC/D,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,iDAAiD,EAAE;IAC7E,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,6CAA6C,EAAE;IAC1E,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,oCAAoC,EAAE;IAChE,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,iHAAiH,EAAE;IACtJ,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,uCAAuC,EAAE;IACnE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,sCAAsC,EAAE;IACnE,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,yCAAyC,EAAE;IACrE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kDAAkD,EAAE;CAChF,CAAC;AAEF,MAAM,UAAU,2BAA2B,CAAC,QAAQ,GAAG,KAAK;IAC1D,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE;QACjC,IAAI,QAAQ,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,EAAE,CAAC;QAChE,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QACrH,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,oCAAoC,EAAE,EAAE,CAAC,CAAC;IACpH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,IAAqB,EAAE,QAAQ,GAAG,KAAK;IACvF,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE;QAClC,IAAI,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC,IAAI,KAAK,aAAa;YAAE,OAAO,IAAI,EAAE,CAAC;QAC5I,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC;QAC5D,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACvI,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;gBAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;YACnF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,kCAAkC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1D,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;gBAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;YACnF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAC9F,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;gBAAE,MAAM,IAAI,QAAQ,CAAC,GAAG,EAAE,gBAAgB,EAAE,YAAY,CAAC,CAAC;YACnF,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,KAAK,IAAI,CACzB,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;eACxC,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;eAClD,6CAA6C,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CACpE,CAAC;QACF,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC;QACxF,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/utils.js

@@ -0,0 +1,50 @@
+import { randomUUID } from "node:crypto";
+export function id(prefix) {
+    return `${prefix}_${randomUUID().replaceAll("-", "")}`;
+}
+export function now() {
+    return new Date().toISOString();
+}
+export function countWords(text) {
+    const compact = text.replace(/\s+/gu, "");
+    const chinese = compact.match(/[\p{Script=Han}]/gu)?.length ?? 0;
+    const withoutChinese = text.replace(/[\p{Script=Han}]/gu, " ");
+    const latin = withoutChinese.match(/[\p{L}\p{N}]+/gu)?.length ?? 0;
+    return chinese + latin;
+}
+export function normalizeParagraphSpacing(value) {
+    return value
+        .replace(/\r\n?/gu, "\n")
+        .replace(/[\t\p{Zs}\uFEFF]+$/gmu, "")
+        .replace(/^\n+/u, "")
+        .replace(/\n+$/u, "")
+        .replace(/\n{3,}/gu, "\n\n");
+}
+export function json(value, fallback) {
+    if (!value)
+        return fallback;
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        return fallback;
+    }
+}
+export function normalizeBaseUrl(value) {
+    return value.replace(/\/+$/u, "").replace(/\/chat\/completions$/u, "");
+}
+export function normalizeUploadFileName(value) {
+    if ([...value].some((character) => character.codePointAt(0) > 0xff))
+        return value;
+    const decoded = Buffer.from(value, "latin1").toString("utf8");
+    return decoded.includes("�") ? value : decoded;
+}
+export function maskSecret(secret) {
+    if (secret.length <= 8)
+        return "********";
+    return `${secret.slice(0, 3)}${"*".repeat(Math.min(12, secret.length - 7))}${secret.slice(-4)}`;
+}
+export function clamp(value, min, max) {
+    return Math.min(max, Math.max(min, value));
+}
+//# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,UAAU,EAAE,CAAC,MAAc;IAC/B,OAAO,GAAG,MAAM,IAAI,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,GAAG;IACjB,OAAO,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IACjE,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC;IACnE,OAAO,OAAO,GAAG,KAAK,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAa;IACrD,OAAO,KAAK;SACT,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC;SACxB,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC;SACpC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,IAAI,CAAI,KAAgC,EAAE,QAAW;IACnE,IAAI,CAAC,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAM,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC;IAClB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9D,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAC1C,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,KAAa,EAAE,GAAW,EAAE,GAAW;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@musnows/scriverse",
-  "version": "0.2.0",
-  "description": "Command-line client for the Scriverse long-form fiction workspace",
+  "version": "0.3.0",
+  "description": "Command-line client and local server for the Scriverse long-form fiction workspace",
   "license": "MIT",
   "author": "musnows",
   "homepage": "https://scriverse.top/",
@@ -20,12 +20,7 @@
   ],
   "type": "module",
   "files": [
-    "dist/cli.js",
-    "dist/cli.js.map",
-    "dist/cli-core.js",
-    "dist/cli-core.js.map",
-    "dist/cli-contract.js",
-    "dist/cli-contract.js.map"
+    "dist/**/*"
   ],
   "bin": {
     "scriverse": "dist/cli.js"
@@ -40,7 +35,7 @@
     "dev": "tsx watch src/server.ts",
     "cli": "tsx src/cli.ts",
     "clean": "node --input-type=module -e \"import { rmSync } from 'node:fs'; rmSync('dist', { recursive: true, force: true })\"",
-    "build": "npm run clean && tsc -p tsconfig.build.json",
+    "build": "npm run clean && tsc -p tsconfig.build.json && node scripts/copy-public.mjs",
     "prepack": "npm run build",
     "start": "node dist/server.js",
     "typecheck": "tsc -p tsconfig.json --noEmit",