@oneunit/auth 2.0.0

package/dist/adapters.d.ts

@@ -0,0 +1,51 @@
+import type { Auth } from "./auth.js";
+import type { ExpressNext, ExpressRequestLike, ExpressResponseLike, ExtractTokenOptions, FastifyLike, KoaContextLike, UwsHandler, UwsHttpRequest, UwsHttpResponse, UwsRequestSnapshot } from "./types.js";
+export declare function expressAdapter(auth: Auth): {
+    initialize(): (req: ExpressRequestLike, _res: ExpressResponseLike, next?: ExpressNext) => void;
+    authenticate(options?: ExtractTokenOptions): (req: ExpressRequestLike, res: ExpressResponseLike, next?: ExpressNext) => Promise<void>;
+    requirePermission(...permissions: string[]): (req: ExpressRequestLike, res: ExpressResponseLike, next?: ExpressNext) => void;
+    requireRole(...roles: string[]): (req: ExpressRequestLike, res: ExpressResponseLike, next?: ExpressNext) => void;
+};
+export declare function fastifyAdapter(auth: Auth): (fastify: FastifyLike, options?: ExtractTokenOptions) => Promise<void>;
+export declare function koaAdapter(auth: Auth): {
+    authenticate(options?: ExtractTokenOptions): (ctx: KoaContextLike, next: () => Promise<void>) => Promise<void>;
+    requirePermission(...permissions: string[]): (ctx: KoaContextLike, next: () => Promise<void>) => Promise<void>;
+};
+declare function jsonResponse(res: UwsHttpResponse, status: number, body: unknown): void;
+export declare function snapshotUwsRequest(res: UwsHttpResponse, req: UwsHttpRequest, extra?: Partial<UwsRequestSnapshot>): UwsRequestSnapshot;
+export declare function uwsAdapter(auth: Auth): {
+    snapshot: typeof snapshotUwsRequest;
+    authenticate(options?: ExtractTokenOptions): (handler: UwsHandler) => UwsHandler;
+    requirePermission(...permissions: string[]): (handler: UwsHandler) => UwsHandler;
+    requireRole(...roles: string[]): (handler: UwsHandler) => UwsHandler;
+    json: typeof jsonResponse;
+};
+export declare function createAdapters(auth: Auth): {
+    express: {
+        initialize(): (req: ExpressRequestLike, _res: ExpressResponseLike, next?: ExpressNext) => void;
+        authenticate(options?: ExtractTokenOptions): (req: ExpressRequestLike, res: ExpressResponseLike, next?: ExpressNext) => Promise<void>;
+        requirePermission(...permissions: string[]): (req: ExpressRequestLike, res: ExpressResponseLike, next?: ExpressNext) => void;
+        requireRole(...roles: string[]): (req: ExpressRequestLike, res: ExpressResponseLike, next?: ExpressNext) => void;
+    };
+    fastify: (fastify: FastifyLike, options?: ExtractTokenOptions) => Promise<void>;
+    koa: {
+        authenticate(options?: ExtractTokenOptions): (ctx: KoaContextLike, next: () => Promise<void>) => Promise<void>;
+        requirePermission(...permissions: string[]): (ctx: KoaContextLike, next: () => Promise<void>) => Promise<void>;
+    };
+    uws: {
+        snapshot: typeof snapshotUwsRequest;
+        authenticate(options?: ExtractTokenOptions): (handler: UwsHandler) => UwsHandler;
+        requirePermission(...permissions: string[]): (handler: UwsHandler) => UwsHandler;
+        requireRole(...roles: string[]): (handler: UwsHandler) => UwsHandler;
+        json: typeof jsonResponse;
+    };
+    uWebSockets: {
+        snapshot: typeof snapshotUwsRequest;
+        authenticate(options?: ExtractTokenOptions): (handler: UwsHandler) => UwsHandler;
+        requirePermission(...permissions: string[]): (handler: UwsHandler) => UwsHandler;
+        requireRole(...roles: string[]): (handler: UwsHandler) => UwsHandler;
+        json: typeof jsonResponse;
+    };
+};
+export {};
+//# sourceMappingURL=adapters.d.ts.map

package/dist/adapters.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.d.ts","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,EACV,WAAW,EACX,kBAAkB,EAClB,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EAGX,cAAc,EACd,UAAU,EACV,cAAc,EACd,eAAe,EACf,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAmCpB,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI;mBAG3B,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,EAAE,OAAO,WAAW;2BAM1D,mBAAmB,IACzB,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,OAAO,WAAW;sCAoBnD,MAAM,EAAE,IAChC,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,OAAO,WAAW;0BAazD,MAAM,EAAE,IACpB,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,OAAO,WAAW;EAelF;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,IACV,SAAS,WAAW,EAAE,UAAS,mBAAwB,mBAyCrF;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI;2BAEX,mBAAmB,IACzB,KAAK,cAAc,EAAE,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC;sCAqB5B,MAAM,EAAE,IAC1B,KAAK,cAAc,EAAE,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC;EAejE;AAED,iBAAS,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAe/E;AAYD,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,eAAe,EACpB,GAAG,EAAE,cAAc,EACnB,KAAK,GAAE,OAAO,CAAC,kBAAkB,CAAM,GACtC,kBAAkB,CAqBpB;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,IAAI;;2BAIX,mBAAmB,IAC/B,SAAS,UAAU,KAAG,UAAU;sCA+BR,MAAM,EAAE,IAEhC,SAAS,UAAU,KAAG,UAAU;0BAcpB,MAAM,EAAE,IAEpB,SAAS,UAAU,KAAG,UAAU;;EAgB7C;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI;;uBA/Q3B,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,EAAE,OAAO,WAAW;+BAM1D,mBAAmB,IACzB,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,OAAO,WAAW;0CAoBnD,MAAM,EAAE,IAChC,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,OAAO,WAAW;8BAazD,MAAM,EAAE,IACpB,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,OAAO,WAAW;;uBAkB3C,WAAW,YAAW,mBAAmB;;+BA6CvD,mBAAmB,IACzB,KAAK,cAAc,EAAE,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC;0CAqB5B,MAAM,EAAE,IAC1B,KAAK,cAAc,EAAE,MAAM,MAAM,OAAO,CAAC,IAAI,CAAC;;;;+BA2ExC,mBAAmB,IAC/B,SAAS,UAAU,KAAG,UAAU;0CA+BR,MAAM,EAAE,IAEhC,SAAS,UAAU,KAAG,UAAU;8BAcpB,MAAM,EAAE,IAEpB,SAAS,UAAU,KAAG,UAAU;;;;;+BAlDpB,mBAAmB,IAC/B,SAAS,UAAU,KAAG,UAAU;0CA+BR,MAAM,EAAE,IAEhC,SAAS,UAAU,KAAG,UAAU;8BAcpB,MAAM,EAAE,IAEpB,SAAS,UAAU,KAAG,UAAU;;;EA0B7C"}

package/dist/adapters.js

@@ -0,0 +1,301 @@
+import { AuthError, ForbiddenError, UnauthorizedError } from "./errors.js";
+function sendError(reply, error) {
+    const err = error;
+    const status = err.status ?? 401;
+    const body = {
+        error: err.code ?? "AUTH_ERROR",
+        message: err.message,
+    };
+    if (typeof reply.status === "function" && typeof reply.send === "function") {
+        const next = reply.status(status);
+        if (next && typeof next.send === "function") {
+            next.send(body);
+        }
+        else {
+            reply.send(body);
+        }
+        return;
+    }
+    if (typeof reply.code === "function") {
+        const coded = reply.code(status);
+        const send = coded.send ?? reply.send;
+        if (typeof send === "function") {
+            send.call(coded, body);
+            return;
+        }
+    }
+    if (typeof reply.status === "function") {
+        reply.status(status);
+        reply.body = body;
+        return;
+    }
+    throw error;
+}
+export function expressAdapter(auth) {
+    return {
+        initialize() {
+            return (req, _res, next) => {
+                req.auth = auth;
+                next?.();
+            };
+        },
+        authenticate(options = {}) {
+            return async (req, res, next) => {
+                try {
+                    req.user = await auth.verifyRequest(req, options);
+                    req.token = auth.extractToken(req, options);
+                    next?.();
+                }
+                catch (error) {
+                    if (options.optional && error instanceof UnauthorizedError) {
+                        req.user = null;
+                        next?.();
+                        return;
+                    }
+                    if (options.passthrough) {
+                        next?.(error);
+                        return;
+                    }
+                    sendError(res, error);
+                }
+            };
+        },
+        requirePermission(...permissions) {
+            return (req, res, next) => {
+                try {
+                    if (!req.user) {
+                        throw new UnauthorizedError("Authentication required");
+                    }
+                    auth.authorize(req.user, permissions);
+                    next?.();
+                }
+                catch (error) {
+                    sendError(res, error);
+                }
+            };
+        },
+        requireRole(...roles) {
+            return (req, res, next) => {
+                try {
+                    if (!req.user) {
+                        throw new UnauthorizedError("Authentication required");
+                    }
+                    if (!auth.hasRole(req.user, roles)) {
+                        throw new ForbiddenError("Insufficient role");
+                    }
+                    next?.();
+                }
+                catch (error) {
+                    sendError(res, error);
+                }
+            };
+        },
+    };
+}
+export function fastifyAdapter(auth) {
+    return async function plugin(fastify, options = {}) {
+        fastify.decorate("auth", auth);
+        fastify.decorateRequest("user", null);
+        fastify.decorate("authenticate", (opts = {}) => async (request, reply) => {
+            // Merge once so the error path sees the same options as the verify path;
+            // reading `opts.optional` alone ignored plugin-level configuration.
+            const settings = { ...options, ...opts };
+            try {
+                request.user = await auth.verifyRequest(request, settings);
+            }
+            catch (error) {
+                if (settings.optional && error instanceof UnauthorizedError) {
+                    request.user = null;
+                    return;
+                }
+                const err = error;
+                return reply.code(err.status ?? 401).send({
+                    error: err.code ?? "AUTH_ERROR",
+                    message: err.message,
+                });
+            }
+        });
+        fastify.decorate("requirePermission", (...permissions) => async (request, reply) => {
+            if (!request.user) {
+                return reply.code(401).send({ error: "UNAUTHORIZED", message: "Authentication required" });
+            }
+            if (!auth.can(request.user, permissions)) {
+                return reply.code(403).send({ error: "FORBIDDEN", message: "Missing permission" });
+            }
+        });
+        fastify.decorate("requireRole", (...roles) => async (request, reply) => {
+            if (!request.user) {
+                return reply.code(401).send({ error: "UNAUTHORIZED", message: "Authentication required" });
+            }
+            if (!auth.hasRole(request.user, roles)) {
+                return reply.code(403).send({ error: "FORBIDDEN", message: "Insufficient role" });
+            }
+        });
+    };
+}
+export function koaAdapter(auth) {
+    return {
+        authenticate(options = {}) {
+            return async (ctx, next) => {
+                try {
+                    ctx.state.user = await auth.verifyRequest(ctx.request, options);
+                    ctx.state.token = auth.extractToken(ctx.request, options);
+                }
+                catch (error) {
+                    if (options.optional && error instanceof UnauthorizedError) {
+                        ctx.state.user = null;
+                        await next();
+                        return;
+                    }
+                    const err = error;
+                    ctx.status = err.status ?? 401;
+                    ctx.body = { error: err.code ?? "AUTH_ERROR", message: err.message };
+                    return;
+                }
+                // `next()` stays outside the try so downstream handler errors propagate
+                // to Koa's own error handling instead of being reported as auth failures.
+                await next();
+            };
+        },
+        requirePermission(...permissions) {
+            return async (ctx, next) => {
+                if (!ctx.state.user) {
+                    ctx.status = 401;
+                    ctx.body = { error: "UNAUTHORIZED", message: "Authentication required" };
+                    return;
+                }
+                if (!auth.can(ctx.state.user, permissions)) {
+                    ctx.status = 403;
+                    ctx.body = { error: "FORBIDDEN", message: "Missing permission" };
+                    return;
+                }
+                await next();
+            };
+        },
+    };
+}
+function jsonResponse(res, status, body) {
+    if (typeof res.cork === "function") {
+        res.cork(() => {
+            res.writeStatus?.(String(status));
+            res.writeHeader?.("Content-Type", "application/json; charset=utf-8");
+            res.end?.(JSON.stringify(body));
+        });
+        return;
+    }
+    if (typeof res.writeStatus === "function") {
+        res.writeStatus(String(status));
+        res.writeHeader?.("Content-Type", "application/json; charset=utf-8");
+        res.end?.(JSON.stringify(body));
+    }
+}
+function attachAbort(res) {
+    let aborted = false;
+    if (typeof res.onAborted === "function") {
+        res.onAborted(() => {
+            aborted = true;
+        });
+    }
+    return () => aborted;
+}
+export function snapshotUwsRequest(res, req, extra = {}) {
+    const headers = {};
+    if (typeof req.forEach === "function") {
+        req.forEach((key, value) => {
+            headers[key] = value;
+        });
+    }
+    else {
+        const authorization = req.getHeader?.("authorization");
+        const cookie = req.getHeader?.("cookie");
+        if (authorization)
+            headers.authorization = authorization;
+        if (cookie)
+            headers.cookie = cookie;
+    }
+    return {
+        method: req.getMethod?.() ?? extra.method,
+        url: req.getUrl?.() ?? extra.url,
+        query: req.getQuery?.() ?? extra.query,
+        headers,
+        cookies: extra.cookies,
+        res,
+    };
+}
+export function uwsAdapter(auth) {
+    return {
+        snapshot: snapshotUwsRequest,
+        authenticate(options = {}) {
+            return (handler) => async (res, req) => {
+                const aborted = attachAbort(res);
+                const request = snapshotUwsRequest(res, req);
+                try {
+                    request.user = await auth.verifyRequest(request, options);
+                    request.token = auth.extractToken(request, options);
+                    if (aborted()) {
+                        return;
+                    }
+                    return await handler(res, req, request);
+                }
+                catch (error) {
+                    if (options.optional && error instanceof UnauthorizedError) {
+                        request.user = null;
+                        if (aborted()) {
+                            return;
+                        }
+                        return await handler(res, req, request);
+                    }
+                    if (aborted()) {
+                        return;
+                    }
+                    const err = error;
+                    jsonResponse(res, err.status ?? 401, {
+                        error: err.code ?? "AUTH_ERROR",
+                        message: err.message,
+                    });
+                }
+            };
+        },
+        requirePermission(...permissions) {
+            const requested = permissions.flat();
+            return (handler) => async (res, req, request) => {
+                const snapshot = request ?? snapshotUwsRequest(res, req);
+                if (!snapshot.user) {
+                    jsonResponse(res, 401, { error: "UNAUTHORIZED", message: "Authentication required" });
+                    return;
+                }
+                if (!auth.can(snapshot.user, requested)) {
+                    jsonResponse(res, 403, { error: "FORBIDDEN", message: "Missing permission" });
+                    return;
+                }
+                return await handler(res, req, snapshot);
+            };
+        },
+        requireRole(...roles) {
+            const requested = roles.flat();
+            return (handler) => async (res, req, request) => {
+                const snapshot = request ?? snapshotUwsRequest(res, req);
+                if (!snapshot.user) {
+                    jsonResponse(res, 401, { error: "UNAUTHORIZED", message: "Authentication required" });
+                    return;
+                }
+                if (!auth.hasRole(snapshot.user, requested)) {
+                    jsonResponse(res, 403, { error: "FORBIDDEN", message: "Insufficient role" });
+                    return;
+                }
+                return await handler(res, req, snapshot);
+            };
+        },
+        json: jsonResponse,
+    };
+}
+export function createAdapters(auth) {
+    return {
+        express: expressAdapter(auth),
+        fastify: fastifyAdapter(auth),
+        koa: koaAdapter(auth),
+        uws: uwsAdapter(auth),
+        uWebSockets: uwsAdapter(auth),
+    };
+}
+//# sourceMappingURL=adapters.js.map

package/dist/adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapters.js","sourceRoot":"","sources":["../src/adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAiB3E,SAAS,SAAS,CAAC,KAA0B,EAAE,KAAc;IAC3D,MAAM,GAAG,GAAG,KAAkB,CAAC;IAC/B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;IACjC,MAAM,IAAI,GAAG;QACX,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,YAAY;QAC/B,OAAO,EAAE,GAAG,CAAC,OAAO;KACrB,CAAC;IAEF,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC3E,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC;QACtC,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACvB,OAAO;QACT,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACvC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QAClB,OAAO;IACT,CAAC;IACD,MAAM,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAU;IACvC,OAAO;QACL,UAAU;YACR,OAAO,CAAC,GAAuB,EAAE,IAAyB,EAAE,IAAkB,EAAE,EAAE;gBAChF,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;gBAChB,IAAI,EAAE,EAAE,CAAC;YACX,CAAC,CAAC;QACJ,CAAC;QAED,YAAY,CAAC,UAA+B,EAAE;YAC5C,OAAO,KAAK,EAAE,GAAuB,EAAE,GAAwB,EAAE,IAAkB,EAAE,EAAE;gBACrF,IAAI,CAAC;oBACH,GAAG,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBAClD,GAAG,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;oBAC5C,IAAI,EAAE,EAAE,CAAC;gBACX,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,CAAC,QAAQ,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;wBAC3D,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;wBAChB,IAAI,EAAE,EAAE,CAAC;wBACT,OAAO;oBACT,CAAC;oBACD,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;wBACxB,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;wBACd,OAAO;oBACT,CAAC;oBACD,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QAED,iBAAiB,CAAC,GAAG,WAAqB;YACxC,OAAO,CAAC,GAAuB,EAAE,GAAwB,EAAE,IAAkB,EAAE,EAAE;gBAC/E,IAAI,CAAC;oBACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;wBACd,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;oBACzD,CAAC;oBACD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;oBACtC,IAAI,EAAE,EAAE,CAAC;gBACX,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QAED,WAAW,CAAC,GAAG,KAAe;YAC5B,OAAO,CAAC,GAAuB,EAAE,GAAwB,EAAE,IAAkB,EAAE,EAAE;gBAC/E,IAAI,CAAC;oBACH,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;wBACd,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;oBACzD,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;wBACnC,MAAM,IAAI,cAAc,CAAC,mBAAmB,CAAC,CAAC;oBAChD,CAAC;oBACD,IAAI,EAAE,EAAE,CAAC;gBACX,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACxB,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAU;IACvC,OAAO,KAAK,UAAU,MAAM,CAAC,OAAoB,EAAE,UAA+B,EAAE;QAClF,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC/B,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEtC,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC,OAA4B,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,OAA2B,EAAE,KAAuB,EAAE,EAAE;YAClI,yEAAyE;YACzE,oEAAoE;YACpE,MAAM,QAAQ,GAAwB,EAAE,GAAG,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;YAC9D,IAAI,CAAC;gBACH,OAAO,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC7D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,QAAQ,CAAC,QAAQ,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;oBAC5D,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;oBACpB,OAAO;gBACT,CAAC;gBACD,MAAM,GAAG,GAAG,KAAkB,CAAC;gBAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC;oBACxC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,YAAY;oBAC/B,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,QAAQ,CAAC,mBAAmB,EAAE,CAAC,GAAG,WAAqB,EAAE,EAAE,CAAC,KAAK,EAAE,OAA2B,EAAE,KAAuB,EAAE,EAAE;YACjI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;gBACzC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;YACrF,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,OAAO,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,KAAe,EAAE,EAAE,CAAC,KAAK,EAAE,OAA2B,EAAE,KAAuB,EAAE,EAAE;YACrH,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAClB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;YAC7F,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;YACpF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAU;IACnC,OAAO;QACL,YAAY,CAAC,UAA+B,EAAE;YAC5C,OAAO,KAAK,EAAE,GAAmB,EAAE,IAAyB,EAAE,EAAE;gBAC9D,IAAI,CAAC;oBACH,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAChE,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5D,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,CAAC,QAAQ,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;wBAC3D,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;wBACtB,MAAM,IAAI,EAAE,CAAC;wBACb,OAAO;oBACT,CAAC;oBACD,MAAM,GAAG,GAAG,KAAkB,CAAC;oBAC/B,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC;oBAC/B,GAAG,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;oBACrE,OAAO;gBACT,CAAC;gBACD,wEAAwE;gBACxE,0EAA0E;gBAC1E,MAAM,IAAI,EAAE,CAAC;YACf,CAAC,CAAC;QACJ,CAAC;QAED,iBAAiB,CAAC,GAAG,WAAqB;YACxC,OAAO,KAAK,EAAE,GAAmB,EAAE,IAAyB,EAAE,EAAE;gBAC9D,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;oBACpB,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;oBACjB,GAAG,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC;oBACzE,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,CAAC;oBAC3C,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC;oBACjB,GAAG,CAAC,IAAI,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;oBACjE,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,EAAE,CAAC;YACf,CAAC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,GAAoB,EAAE,MAAc,EAAE,IAAa;IACvE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE;YACZ,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,GAAG,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;YACrE,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QAC1C,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAChC,GAAG,CAAC,WAAW,EAAE,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;QACrE,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClC,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAoB;IACvC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACxC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE;YACjB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,GAAoB,EACpB,GAAmB,EACnB,QAAqC,EAAE;IAEvC,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,GAAG,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YACzB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACvB,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,aAAa,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,GAAG,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;QACzC,IAAI,aAAa;YAAE,OAAO,CAAC,aAAa,GAAG,aAAa,CAAC;QACzD,IAAI,MAAM;YAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC;IACtC,CAAC;IAED,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,KAAK,CAAC,MAAM;QACzC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,KAAK,CAAC,GAAG;QAChC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,KAAK,CAAC,KAAK;QACtC,OAAO;QACP,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,IAAU;IACnC,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAE5B,YAAY,CAAC,UAA+B,EAAE;YAC5C,OAAO,CAAC,OAAmB,EAAc,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC7D,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;gBACjC,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAE7C,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBAC1D,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;oBACpD,IAAI,OAAO,EAAE,EAAE,CAAC;wBACd,OAAO;oBACT,CAAC;oBACD,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;gBAC1C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,OAAO,CAAC,QAAQ,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;wBAC3D,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;wBACpB,IAAI,OAAO,EAAE,EAAE,CAAC;4BACd,OAAO;wBACT,CAAC;wBACD,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;oBAC1C,CAAC;oBACD,IAAI,OAAO,EAAE,EAAE,CAAC;wBACd,OAAO;oBACT,CAAC;oBACD,MAAM,GAAG,GAAG,KAAkB,CAAC;oBAC/B,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE;wBACnC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,YAAY;wBAC/B,OAAO,EAAE,GAAG,CAAC,OAAO;qBACrB,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;QAED,iBAAiB,CAAC,GAAG,WAAqB;YACxC,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;YACrC,OAAO,CAAC,OAAmB,EAAc,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;gBACtE,MAAM,QAAQ,GAAG,OAAO,IAAI,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACzD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;oBACtF,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;oBACxC,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAC;oBAC9E,OAAO;gBACT,CAAC;gBACD,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC3C,CAAC,CAAC;QACJ,CAAC;QAED,WAAW,CAAC,GAAG,KAAe;YAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAC/B,OAAO,CAAC,OAAmB,EAAc,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;gBACtE,MAAM,QAAQ,GAAG,OAAO,IAAI,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBACzD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;oBACtF,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;oBAC5C,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;oBAC7E,OAAO;gBACT,CAAC;gBACD,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;YAC3C,CAAC,CAAC;QACJ,CAAC;QAED,IAAI,EAAE,YAAY;KACnB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAU;IACvC,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;QAC7B,OAAO,EAAE,cAAc,CAAC,IAAI,CAAC;QAC7B,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;QACrB,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC;QACrB,WAAW,EAAE,UAAU,CAAC,IAAI,CAAC;KAC9B,CAAC;AACJ,CAAC"}

package/dist/auth.d.ts

@@ -0,0 +1,59 @@
+import { RBAC } from "./rbac.js";
+import { OAuth } from "./oauth.js";
+import type { AuthHookHandler, AuthHookName, AuthOptions, AuthSubject, ExtractTokenOptions, JwtPayload, JwtSignOptions, JwtVerifyOptions, LoginOptions, LoginResult, OAuthAuthorizeOptions, PasswordOptions, RefreshStore, Secret, UserRecord, UserStore } from "./types.js";
+type ClaimExtractor = (user: UserRecord) => unknown;
+export declare class Auth {
+    secret: Secret;
+    refreshSecret: Secret;
+    issuer?: string;
+    audience?: string | string[];
+    algorithm: string;
+    accessTokenTtl: string | number;
+    refreshTokenTtl: string | number;
+    clockTolerance: number;
+    trustUserPermissions: boolean;
+    userStore: UserStore | null;
+    refreshStore: RefreshStore;
+    onLogin: AuthOptions["onLogin"];
+    onLink: AuthOptions["onLink"];
+    rbac: RBAC;
+    oauth: OAuth;
+    claimExtractors: Map<string, ClaimExtractor>;
+    hooks: Record<AuthHookName, AuthHookHandler[]>;
+    constructor(options?: Partial<AuthOptions>);
+    registerExtractor(name: string, extractor: ClaimExtractor): this;
+    hook(event: AuthHookName, handler: AuthHookHandler): this;
+    login(user: UserRecord, options?: LoginOptions): Promise<LoginResult>;
+    loginWithPassword(identifier: string, password: string, options?: LoginOptions): Promise<LoginResult>;
+    register(input?: Record<string, unknown>, options?: LoginOptions): Promise<LoginResult>;
+    verify(token: string, options?: JwtVerifyOptions): Promise<JwtPayload>;
+    verifyRequest(request: unknown, options?: ExtractTokenOptions): Promise<JwtPayload>;
+    extractToken(request: unknown, options?: ExtractTokenOptions): string | null;
+    refresh(refreshToken: string, options?: LoginOptions): Promise<LoginResult>;
+    /**
+     * Rotation only reaches this when `consume` is absent, so `revoke` is the only
+     * thing that can do the job.
+     */
+    private requireRevokeSupport;
+    revoke(refreshToken?: string | null): Promise<boolean>;
+    logout(refreshToken?: string | null): Promise<boolean>;
+    getAuthorizationUrl(provider: string, options?: OAuthAuthorizeOptions): Promise<{
+        url: string;
+        state: string;
+        provider: string;
+        codeVerifier?: string;
+    }>;
+    loginWithOAuth(provider: string, params: string | Record<string, string>, options?: LoginOptions): Promise<LoginResult>;
+    can(subject: AuthSubject | string | null | undefined, permission: string | string[]): boolean;
+    authorize(subject: AuthSubject | string | null | undefined, permission: string | string[]): true;
+    hasRole(subject: AuthSubject | string | null | undefined, roles: string | string[]): boolean;
+    hashPassword(password: string, options?: PasswordOptions): Promise<string>;
+    verifyPassword(password: string, hash: string): Promise<boolean>;
+    sign(payload: object, options?: JwtSignOptions): string;
+    collectClaims(user: UserRecord, extractorNames?: string[]): Promise<Record<string, unknown>>;
+    runHooks(event: AuthHookName, payload: unknown): Promise<void>;
+}
+export declare function createMemoryRefreshStore(): RefreshStore;
+export declare function createAuth(options: AuthOptions): Auth;
+export { Auth as auth };
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,OAAO,KAAK,EACV,eAAe,EACf,YAAY,EACZ,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,qBAAqB,EACrB,eAAe,EAGf,YAAY,EAGZ,MAAM,EACN,UAAU,EACV,SAAS,EACV,MAAM,YAAY,CAAC;AAoCpB,KAAK,cAAc,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC;AAEpD,qBAAa,IAAI;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,eAAe,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,SAAS,EAAE,SAAS,GAAG,IAAI,CAAC;IAC5B,YAAY,EAAE,YAAY,CAAC;IAC3B,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC;IAChC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC9B,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,KAAK,CAAC;IACb,eAAe,8BAAqC;IACpD,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,eAAe,EAAE,CAAC,CAI5C;gBAEU,OAAO,GAAE,OAAO,CAAC,WAAW,CAAM;IA2B9C,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,GAAG,IAAI;IAchE,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,eAAe,GAAG,IAAI;IAWnD,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAkGzE,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IA0BzG,QAAQ,CAAC,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IAwB/F,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,gBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC;IAsB1E,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,mBAAwB,GAAG,OAAO,CAAC,UAAU,CAAC;IAQ7F,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,mBAAwB,GAAG,MAAM,GAAG,IAAI;IAuB1E,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC;IA6CrF;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAQtB,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAiCtD,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC;IAI5D,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B;;;;;;IAInE,cAAc,CAClB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACvC,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,WAAW,CAAC;IA0DvB,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO;IAI7F,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI;IAIhG,OAAO,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO;IAI5F,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;IAI1E,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIhE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,cAAmB,GAAG,MAAM;IAUrD,aAAa,CAAC,IAAI,EAAE,UAAU,EAAE,cAAc,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IA6BhG,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;CAKrE;AAiFD,wBAAgB,wBAAwB,IAAI,YAAY,CAgCvD;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,IAAI,CAErD;AAED,OAAO,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC"}