@oneunit/auth 2.0.0

package/dist/providers.js

@@ -0,0 +1,471 @@
+import { createHash, randomBytes } from "node:crypto";
+import { ProviderError, ValidationError } from "./errors.js";
+import { buildUrl, formEncode, requestJson } from "./utils.js";
+export function pkceVerifier() {
+    return randomBytes(32).toString("base64url");
+}
+export function pkceChallenge(verifier) {
+    return createHash("sha256").update(verifier).digest("base64url");
+}
+function requireConfig(config, keys) {
+    for (const key of keys) {
+        if (!config[key]) {
+            throw new ValidationError(`OAuth provider is missing ${String(key)}`);
+        }
+    }
+}
+function mapProfile(source, mapping) {
+    const profile = {};
+    const record = isRecord(source) ? source : {};
+    for (const [key, path] of Object.entries(mapping)) {
+        profile[key] = typeof path === "function" ? path(record) : getPath(record, path);
+    }
+    return profile;
+}
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function getPath(object, path) {
+    if (!path) {
+        return undefined;
+    }
+    return String(path).split(".").reduce((acc, key) => {
+        if (!isRecord(acc) && !Array.isArray(acc)) {
+            return undefined;
+        }
+        return acc[key];
+    }, object);
+}
+function errorMessage(body, fallback) {
+    if (isRecord(body)) {
+        if (typeof body.error_description === "string")
+            return body.error_description;
+        if (typeof body.error === "string")
+            return body.error;
+    }
+    return fallback;
+}
+export function createProvider(definition) {
+    const { id, name = id, authorizationUrl, tokenUrl, userInfoUrl, scopes = [], profileMap = {}, tokenAuthMethod = "body", pkce = false, extraAuthParams = {}, extraTokenParams = {}, userInfoHeaders = {}, parseProfile, } = definition;
+    if (!id || !authorizationUrl || !tokenUrl) {
+        throw new ValidationError("Provider requires id, authorizationUrl, and tokenUrl");
+    }
+    return {
+        id,
+        name,
+        authorizationUrl,
+        tokenUrl,
+        userInfoUrl,
+        scopes,
+        pkce,
+        tokenAuthMethod,
+        createAuthorizationUrl(config, { state, redirectUri, codeVerifier, extraParams = {} } = {}) {
+            requireConfig(config, ["clientId"]);
+            const params = {
+                client_id: config.clientId,
+                redirect_uri: redirectUri ?? config.redirectUri,
+                response_type: "code",
+                scope: (config.scopes ?? scopes).join(" "),
+                state,
+                ...extraAuthParams,
+                ...(config.extraAuthParams ?? {}),
+                ...extraParams,
+            };
+            let verifier;
+            if (pkce || config.pkce) {
+                verifier = codeVerifier ?? pkceVerifier();
+                params.code_challenge = pkceChallenge(verifier);
+                params.code_challenge_method = "S256";
+            }
+            return {
+                url: buildUrl(authorizationUrl, "", params),
+                state,
+                codeVerifier: verifier,
+            };
+        },
+        async exchangeCode(config, { code, redirectUri, codeVerifier } = {}) {
+            requireConfig(config, ["clientId"]);
+            if (!code) {
+                throw new ValidationError("Authorization code is required");
+            }
+            const body = {
+                grant_type: "authorization_code",
+                code,
+                redirect_uri: redirectUri ?? config.redirectUri,
+                ...extraTokenParams,
+                ...(config.extraTokenParams ?? {}),
+            };
+            if (codeVerifier) {
+                body.code_verifier = codeVerifier;
+            }
+            const headers = {
+                "content-type": "application/x-www-form-urlencoded",
+                accept: "application/json",
+            };
+            if ((config.tokenAuthMethod ?? tokenAuthMethod) === "basic") {
+                const credentials = Buffer.from(`${config.clientId}:${config.clientSecret ?? ""}`).toString("base64");
+                headers.authorization = `Basic ${credentials}`;
+            }
+            else {
+                body.client_id = config.clientId;
+                if (config.clientSecret) {
+                    body.client_secret = config.clientSecret;
+                }
+            }
+            const response = await requestJson(tokenUrl, {
+                method: "POST",
+                headers,
+                body: formEncode(body),
+            });
+            if (!response.ok) {
+                throw new ProviderError(errorMessage(response.body, `${name} token exchange failed`), {
+                    status: response.status,
+                });
+            }
+            return (isRecord(response.body) ? response.body : {});
+        },
+        async fetchProfile(config, tokens) {
+            if (typeof parseProfile === "function") {
+                return parseProfile(tokens, config);
+            }
+            if (!userInfoUrl) {
+                return { provider: id, ...mapProfile(tokens, profileMap) };
+            }
+            const accessToken = tokens?.access_token;
+            if (!accessToken) {
+                throw new ProviderError(`${name} did not return an access token`);
+            }
+            const response = await requestJson(userInfoUrl, {
+                method: "GET",
+                headers: {
+                    authorization: `Bearer ${accessToken}`,
+                    ...userInfoHeaders,
+                    ...(config.userInfoHeaders ?? {}),
+                },
+            });
+            if (!response.ok) {
+                throw new ProviderError(errorMessage(response.body, `${name} profile fetch failed`), {
+                    status: response.status,
+                });
+            }
+            return {
+                raw: response.body,
+                provider: id,
+                ...mapProfile(response.body, profileMap),
+            };
+        },
+    };
+}
+export const google = createProvider({
+    id: "google",
+    name: "Google",
+    authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+    tokenUrl: "https://oauth2.googleapis.com/token",
+    userInfoUrl: "https://openidconnect.googleapis.com/v1/userinfo",
+    scopes: ["openid", "email", "profile"],
+    extraAuthParams: { access_type: "offline", prompt: "consent" },
+    profileMap: {
+        id: "sub",
+        email: "email",
+        emailVerified: "email_verified",
+        name: "name",
+        firstName: "given_name",
+        lastName: "family_name",
+        avatar: "picture",
+        locale: "locale",
+    },
+});
+export const github = createProvider({
+    id: "github",
+    name: "GitHub",
+    authorizationUrl: "https://github.com/login/oauth/authorize",
+    tokenUrl: "https://github.com/login/oauth/access_token",
+    userInfoUrl: "https://api.github.com/user",
+    scopes: ["read:user", "user:email"],
+    userInfoHeaders: { "user-agent": "@oneunit/auth" },
+    async parseProfile(tokens) {
+        const accessToken = tokens?.access_token;
+        if (!accessToken) {
+            throw new ProviderError("GitHub did not return an access token");
+        }
+        const headers = {
+            authorization: `Bearer ${accessToken}`,
+            "user-agent": "@oneunit/auth",
+            accept: "application/vnd.github+json",
+        };
+        const userRes = await requestJson("https://api.github.com/user", { headers });
+        if (!userRes.ok) {
+            throw new ProviderError("GitHub profile fetch failed", { status: userRes.status });
+        }
+        const data = isRecord(userRes.body) ? userRes.body : {};
+        let email = typeof data.email === "string" ? data.email : undefined;
+        if (!email) {
+            const emailsRes = await requestJson("https://api.github.com/user/emails", { headers });
+            if (emailsRes.ok && Array.isArray(emailsRes.body)) {
+                const emails = emailsRes.body;
+                const primary = emails.find((item) => item.primary && item.verified)
+                    ?? emails.find((item) => item.verified)
+                    ?? emails[0];
+                email = primary?.email;
+            }
+        }
+        return {
+            provider: "github",
+            id: data.id,
+            username: data.login,
+            name: data.name,
+            email,
+            avatar: data.avatar_url,
+            profileUrl: data.html_url,
+            raw: data,
+        };
+    },
+});
+export const instagram = createProvider({
+    id: "instagram",
+    name: "Instagram",
+    authorizationUrl: "https://api.instagram.com/oauth/authorize",
+    tokenUrl: "https://api.instagram.com/oauth/access_token",
+    userInfoUrl: "https://graph.instagram.com/me?fields=id,username,account_type,name",
+    scopes: ["user_profile"],
+    profileMap: {
+        id: "id",
+        username: "username",
+        name: "name",
+        accountType: "account_type",
+    },
+});
+export const facebook = createProvider({
+    id: "facebook",
+    name: "Facebook",
+    authorizationUrl: "https://www.facebook.com/v21.0/dialog/oauth",
+    tokenUrl: "https://graph.facebook.com/v21.0/oauth/access_token",
+    userInfoUrl: "https://graph.facebook.com/me?fields=id,name,email,picture.type(large)",
+    scopes: ["email", "public_profile"],
+    profileMap: {
+        id: "id",
+        name: "name",
+        email: "email",
+        avatar: (data) => {
+            const picture = data.picture;
+            if (isRecord(picture) && isRecord(picture.data)) {
+                return picture.data.url;
+            }
+            return undefined;
+        },
+    },
+});
+export const twitter = createProvider({
+    id: "twitter",
+    name: "X",
+    authorizationUrl: "https://twitter.com/i/oauth2/authorize",
+    tokenUrl: "https://api.twitter.com/2/oauth2/token",
+    userInfoUrl: "https://api.twitter.com/2/users/me?user.fields=profile_image_url,name,username",
+    scopes: ["tweet.read", "users.read", "offline.access"],
+    pkce: true,
+    tokenAuthMethod: "basic",
+    extraAuthParams: { code_challenge_method: "S256" },
+    profileMap: {
+        id: "data.id",
+        username: "data.username",
+        name: "data.name",
+        avatar: "data.profile_image_url",
+    },
+});
+export const discord = createProvider({
+    id: "discord",
+    name: "Discord",
+    authorizationUrl: "https://discord.com/oauth2/authorize",
+    tokenUrl: "https://discord.com/api/oauth2/token",
+    userInfoUrl: "https://discord.com/api/users/@me",
+    scopes: ["identify", "email"],
+    profileMap: {
+        id: "id",
+        username: "username",
+        email: "email",
+        emailVerified: "verified",
+        avatar: (data) => typeof data.avatar === "string"
+            ? `https://cdn.discordapp.com/avatars/${String(data.id)}/${data.avatar}.png`
+            : undefined,
+        locale: "locale",
+    },
+});
+const APPLE_ISSUER = "https://appleid.apple.com";
+export const apple = createProvider({
+    id: "apple",
+    name: "Apple",
+    authorizationUrl: "https://appleid.apple.com/auth/authorize",
+    tokenUrl: "https://appleid.apple.com/auth/token",
+    scopes: ["name", "email"],
+    extraAuthParams: { response_mode: "form_post" },
+    parseProfile(tokens, config) {
+        const idToken = tokens?.id_token;
+        if (!idToken) {
+            return { provider: "apple", raw: tokens };
+        }
+        // Apple is the only built-in provider whose profile comes from a token in
+        // the response rather than a server-side userinfo call, so the claims are
+        // checked here instead. See ARCHITECTURE.md for the signature caveat.
+        const payload = JSON.parse(Buffer.from(idToken.split(".")[1], "base64url").toString("utf8"));
+        const iss = typeof payload.iss === "string" ? payload.iss : undefined;
+        if (iss !== APPLE_ISSUER) {
+            throw new ProviderError(`Apple id_token has an unexpected issuer: ${String(iss)}`);
+        }
+        const aud = payload.aud;
+        const clientId = config.clientId;
+        if (clientId) {
+            const matches = Array.isArray(aud) ? aud.includes(clientId) : aud === clientId;
+            if (!matches) {
+                throw new ProviderError("Apple id_token audience does not match the configured clientId");
+            }
+        }
+        if (typeof payload.exp === "number" && payload.exp <= Math.floor(Date.now() / 1000)) {
+            throw new ProviderError("Apple id_token has expired");
+        }
+        return {
+            provider: "apple",
+            id: payload.sub,
+            email: payload.email,
+            emailVerified: payload.email_verified === "true" || payload.email_verified === true,
+            raw: { tokens, claims: payload },
+        };
+    },
+});
+export const linkedin = createProvider({
+    id: "linkedin",
+    name: "LinkedIn",
+    authorizationUrl: "https://www.linkedin.com/oauth/v2/authorization",
+    tokenUrl: "https://www.linkedin.com/oauth/v2/accessToken",
+    userInfoUrl: "https://api.linkedin.com/v2/userinfo",
+    scopes: ["openid", "profile", "email"],
+    profileMap: {
+        id: "sub",
+        name: "name",
+        email: "email",
+        emailVerified: "email_verified",
+        avatar: "picture",
+        locale: "locale",
+    },
+});
+export const microsoft = createProvider({
+    id: "microsoft",
+    name: "Microsoft",
+    authorizationUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
+    tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
+    userInfoUrl: "https://graph.microsoft.com/oidc/userinfo",
+    scopes: ["openid", "profile", "email", "offline_access"],
+    profileMap: {
+        id: "sub",
+        email: "email",
+        name: "name",
+        firstName: "given_name",
+        lastName: "family_name",
+        avatar: "picture",
+    },
+});
+export const reddit = createProvider({
+    id: "reddit",
+    name: "Reddit",
+    authorizationUrl: "https://www.reddit.com/api/v1/authorize",
+    tokenUrl: "https://www.reddit.com/api/v1/access_token",
+    userInfoUrl: "https://oauth.reddit.com/api/v1/me",
+    scopes: ["identity"],
+    tokenAuthMethod: "basic",
+    extraAuthParams: { duration: "permanent" },
+    userInfoHeaders: { "user-agent": "@oneunit/auth" },
+    profileMap: {
+        id: "id",
+        username: "name",
+        avatar: "icon_img",
+    },
+});
+export const twitch = createProvider({
+    id: "twitch",
+    name: "Twitch",
+    authorizationUrl: "https://id.twitch.tv/oauth2/authorize",
+    tokenUrl: "https://id.twitch.tv/oauth2/token",
+    userInfoUrl: "https://api.twitch.tv/helix/users",
+    scopes: ["user:read:email"],
+    profileMap: {
+        id: "data.0.id",
+        username: "data.0.login",
+        name: "data.0.display_name",
+        email: "data.0.email",
+        avatar: "data.0.profile_image_url",
+    },
+});
+export const slack = createProvider({
+    id: "slack",
+    name: "Slack",
+    authorizationUrl: "https://slack.com/oauth/v2/authorize",
+    tokenUrl: "https://slack.com/api/oauth.v2.access",
+    userInfoUrl: "https://slack.com/api/users.identity",
+    scopes: ["identity.basic", "identity.email", "identity.avatar"],
+    profileMap: {
+        id: "user.id",
+        name: "user.name",
+        email: "user.email",
+        avatar: "user.image_512",
+    },
+});
+export const spotify = createProvider({
+    id: "spotify",
+    name: "Spotify",
+    authorizationUrl: "https://accounts.spotify.com/authorize",
+    tokenUrl: "https://accounts.spotify.com/api/token",
+    userInfoUrl: "https://api.spotify.com/v1/me",
+    scopes: ["user-read-email", "user-read-private"],
+    tokenAuthMethod: "basic",
+    profileMap: {
+        id: "id",
+        email: "email",
+        name: "display_name",
+        avatar: (data) => {
+            const images = data.images;
+            if (Array.isArray(images) && isRecord(images[0])) {
+                return images[0].url;
+            }
+            return undefined;
+        },
+        profileUrl: "external_urls.spotify",
+    },
+});
+export const tiktok = createProvider({
+    id: "tiktok",
+    name: "TikTok",
+    authorizationUrl: "https://www.tiktok.com/v2/auth/authorize/",
+    tokenUrl: "https://open.tiktokapis.com/v2/oauth/token/",
+    userInfoUrl: "https://open.tiktokapis.com/v2/user/info/?fields=open_id,union_id,avatar_url,display_name",
+    scopes: ["user.info.basic"],
+    extraAuthParams: { response_type: "code" },
+    profileMap: {
+        id: "data.user.open_id",
+        name: "data.user.display_name",
+        avatar: "data.user.avatar_url",
+    },
+});
+export const builtinProviders = Object.freeze({
+    google,
+    github,
+    instagram,
+    facebook,
+    twitter,
+    x: twitter,
+    discord,
+    apple,
+    linkedin,
+    microsoft,
+    reddit,
+    twitch,
+    slack,
+    spotify,
+    tiktok,
+});
+export function getProvider(id) {
+    const provider = builtinProviders[String(id).toLowerCase()];
+    if (!provider) {
+        throw new ValidationError(`Unknown OAuth provider: ${id}`);
+    }
+    return provider;
+}
+//# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAY7D,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE/D,MAAM,UAAU,YAAY;IAC1B,OAAO,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,aAAa,CAAC,MAA2B,EAAE,IAAsC;IACxF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,6BAA6B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,MAAe,EAAE,OAAwC;IAC3E,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,OAAO,CAAC,MAAe,EAAE,IAAY;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAQ,GAA+B,CAAC,GAAG,CAAC,CAAC;IAC/C,CAAC,EAAE,MAAM,CAAC,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,IAAa,EAAE,QAAgB;IACnD,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,OAAO,IAAI,CAAC,iBAAiB,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,iBAAiB,CAAC;QAC9E,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;IACxD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAA8B;IAC3D,MAAM,EACJ,EAAE,EACF,IAAI,GAAG,EAAE,EACT,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,MAAM,GAAG,EAAE,EACX,UAAU,GAAG,EAAE,EACf,eAAe,GAAG,MAAM,EACxB,IAAI,GAAG,KAAK,EACZ,eAAe,GAAG,EAAE,EACpB,gBAAgB,GAAG,EAAE,EACrB,eAAe,GAAG,EAAE,EACpB,YAAY,GACb,GAAG,UAAU,CAAC;IAEf,IAAI,CAAC,EAAE,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,eAAe,CAAC,sDAAsD,CAAC,CAAC;IACpF,CAAC;IAED,OAAO;QACL,EAAE;QACF,IAAI;QACJ,gBAAgB;QAChB,QAAQ;QACR,WAAW;QACX,MAAM;QACN,IAAI;QACJ,eAAe;QAEf,sBAAsB,CACpB,MAA2B,EAC3B,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,GAAG,EAAE,KAA8B,EAAE;YAEpF,aAAa,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YACpC,MAAM,MAAM,GAA4B;gBACtC,SAAS,EAAE,MAAM,CAAC,QAAQ;gBAC1B,YAAY,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW;gBAC/C,aAAa,EAAE,MAAM;gBACrB,KAAK,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC1C,KAAK;gBACL,GAAG,eAAe;gBAClB,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;gBACjC,GAAG,WAAW;aACf,CAAC;YAEF,IAAI,QAA4B,CAAC;YACjC,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;gBACxB,QAAQ,GAAG,YAAY,IAAI,YAAY,EAAE,CAAC;gBAC1C,MAAM,CAAC,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAChD,MAAM,CAAC,qBAAqB,GAAG,MAAM,CAAC;YACxC,CAAC;YAED,OAAO;gBACL,GAAG,EAAE,QAAQ,CAAC,gBAAgB,EAAE,EAAE,EAAE,MAAM,CAAC;gBAC3C,KAAK;gBACL,YAAY,EAAE,QAAQ;aACvB,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,YAAY,CAChB,MAA2B,EAC3B,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,KAA0B,EAAE;YAE7D,aAAa,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YACpC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,eAAe,CAAC,gCAAgC,CAAC,CAAC;YAC9D,CAAC;YAED,MAAM,IAAI,GAA4B;gBACpC,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,YAAY,EAAE,WAAW,IAAI,MAAM,CAAC,WAAW;gBAC/C,GAAG,gBAAgB;gBACnB,GAAG,CAAC,MAAM,CAAC,gBAAgB,IAAI,EAAE,CAAC;aACnC,CAAC;YAEF,IAAI,YAAY,EAAE,CAAC;gBACjB,IAAI,CAAC,aAAa,GAAG,YAAY,CAAC;YACpC,CAAC;YAED,MAAM,OAAO,GAA2B;gBACtC,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B,CAAC;YAEF,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,eAAe,CAAC,KAAK,OAAO,EAAE,CAAC;gBAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACtG,OAAO,CAAC,aAAa,GAAG,SAAS,WAAW,EAAE,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC;gBACjC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;oBACxB,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC;gBAC3C,CAAC;YACH,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;aACvB,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,wBAAwB,CAAC,EAAE;oBACpF,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACxB,CAAC,CAAC;YACL,CAAC;YAED,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAgB,CAAC;QACvE,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,MAA2B,EAAE,MAAmB;YACjE,IAAI,OAAO,YAAY,KAAK,UAAU,EAAE,CAAC;gBACvC,OAAO,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACtC,CAAC;YAED,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;YAC7D,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,EAAE,YAAY,CAAC;YACzC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,aAAa,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;YACpE,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE;gBAC9C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,WAAW,EAAE;oBACtC,GAAG,eAAe;oBAClB,GAAG,CAAC,MAAM,CAAC,eAAe,IAAI,EAAE,CAAC;iBAClC;aACF,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,aAAa,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,IAAI,uBAAuB,CAAC,EAAE;oBACnF,MAAM,EAAE,QAAQ,CAAC,MAAM;iBACxB,CAAC,CAAC;YACL,CAAC;YAED,OAAO;gBACL,GAAG,EAAE,QAAQ,CAAC,IAAI;gBAClB,QAAQ,EAAE,EAAE;gBACZ,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;aACzC,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC;IACnC,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,QAAQ;IACd,gBAAgB,EAAE,8CAA8C;IAChE,QAAQ,EAAE,qCAAqC;IAC/C,WAAW,EAAE,kDAAkD;IAC/D,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;IACtC,eAAe,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE;IAC9D,UAAU,EAAE;QACV,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,gBAAgB;QAC/B,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,QAAQ;KACjB;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC;IACnC,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,QAAQ;IACd,gBAAgB,EAAE,0CAA0C;IAC5D,QAAQ,EAAE,6CAA6C;IACvD,WAAW,EAAE,6BAA6B;IAC1C,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC;IACnC,eAAe,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE;IAClD,KAAK,CAAC,YAAY,CAAC,MAAM;QACvB,MAAM,WAAW,GAAG,MAAM,EAAE,YAAY,CAAC;QACzC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,aAAa,CAAC,uCAAuC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,UAAU,WAAW,EAAE;YACtC,YAAY,EAAE,eAAe;YAC7B,MAAM,EAAE,6BAA6B;SACtC,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,6BAA6B,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,aAAa,CAAC,6BAA6B,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,oCAAoC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YACvF,IAAI,SAAS,CAAC,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAClD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAwE,CAAC;gBAClG,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC;uBAC/D,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC;uBACpC,MAAM,CAAC,CAAC,CAAC,CAAC;gBACf,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;YACzB,CAAC;QACH,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,EAAE,EAAE,IAAI,CAAC,EAAiC;YAC1C,QAAQ,EAAE,IAAI,CAAC,KAA2B;YAC1C,IAAI,EAAE,IAAI,CAAC,IAA0B;YACrC,KAAK;YACL,MAAM,EAAE,IAAI,CAAC,UAAgC;YAC7C,UAAU,EAAE,IAAI,CAAC,QAA8B;YAC/C,GAAG,EAAE,IAAI;SACV,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,cAAc,CAAC;IACtC,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,WAAW;IACjB,gBAAgB,EAAE,2CAA2C;IAC7D,QAAQ,EAAE,8CAA8C;IACxD,WAAW,EAAE,qEAAqE;IAClF,MAAM,EAAE,CAAC,cAAc,CAAC;IACxB,UAAU,EAAE;QACV,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,MAAM;QACZ,WAAW,EAAE,cAAc;KAC5B;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,cAAc,CAAC;IACrC,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,gBAAgB,EAAE,6CAA6C;IAC/D,QAAQ,EAAE,qDAAqD;IAC/D,WAAW,EAAE,wEAAwE;IACrF,MAAM,EAAE,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,UAAU,EAAE;QACV,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,OAAO;QACd,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACf,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;YAC7B,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,OAAO,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YAC1B,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;KACF;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,cAAc,CAAC;IACpC,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,GAAG;IACT,gBAAgB,EAAE,wCAAwC;IAC1D,QAAQ,EAAE,wCAAwC;IAClD,WAAW,EAAE,gFAAgF;IAC7F,MAAM,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,gBAAgB,CAAC;IACtD,IAAI,EAAE,IAAI;IACV,eAAe,EAAE,OAAO;IACxB,eAAe,EAAE,EAAE,qBAAqB,EAAE,MAAM,EAAE;IAClD,UAAU,EAAE;QACV,EAAE,EAAE,SAAS;QACb,QAAQ,EAAE,eAAe;QACzB,IAAI,EAAE,WAAW;QACjB,MAAM,EAAE,wBAAwB;KACjC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,cAAc,CAAC;IACpC,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE,sCAAsC;IACxD,QAAQ,EAAE,sCAAsC;IAChD,WAAW,EAAE,mCAAmC;IAChD,MAAM,EAAE,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,UAAU,EAAE;QACV,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,UAAU;QACzB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACf,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;YAC7B,CAAC,CAAC,sCAAsC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,MAAM;YAC5E,CAAC,CAAC,SAAS;QACf,MAAM,EAAE,QAAQ;KACjB;CACF,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,2BAA2B,CAAC;AAEjD,MAAM,CAAC,MAAM,KAAK,GAAG,cAAc,CAAC;IAClC,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,gBAAgB,EAAE,0CAA0C;IAC5D,QAAQ,EAAE,sCAAsC;IAChD,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,eAAe,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE;IAC/C,YAAY,CAAC,MAAM,EAAE,MAAM;QACzB,MAAM,OAAO,GAAG,MAAM,EAAE,QAAQ,CAAC;QACjC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAC5C,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAA4B,CAAC;QAExH,MAAM,GAAG,GAAG,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;YACzB,MAAM,IAAI,aAAa,CAAC,4CAA4C,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QACjC,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC;YAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,aAAa,CAAC,gEAAgE,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAED,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YACpF,MAAM,IAAI,aAAa,CAAC,4BAA4B,CAAC,CAAC;QACxD,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,OAAO;YACjB,EAAE,EAAE,OAAO,CAAC,GAAyB;YACrC,KAAK,EAAE,OAAO,CAAC,KAA2B;YAC1C,aAAa,EAAE,OAAO,CAAC,cAAc,KAAK,MAAM,IAAI,OAAO,CAAC,cAAc,KAAK,IAAI;YACnF,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;SACjC,CAAC;IACJ,CAAC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,cAAc,CAAC;IACrC,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,UAAU;IAChB,gBAAgB,EAAE,iDAAiD;IACnE,QAAQ,EAAE,+CAA+C;IACzD,WAAW,EAAE,sCAAsC;IACnD,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;IACtC,UAAU,EAAE;QACV,EAAE,EAAE,KAAK;QACT,IAAI,EAAE,MAAM;QACZ,KAAK,EAAE,OAAO;QACd,aAAa,EAAE,gBAAgB;QAC/B,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,QAAQ;KACjB;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,SAAS,GAAG,cAAc,CAAC;IACtC,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,WAAW;IACjB,gBAAgB,EAAE,gEAAgE;IAClF,QAAQ,EAAE,4DAA4D;IACtE,WAAW,EAAE,2CAA2C;IACxD,MAAM,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC;IACxD,UAAU,EAAE;QACV,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,MAAM;QACZ,SAAS,EAAE,YAAY;QACvB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,SAAS;KAClB;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC;IACnC,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,QAAQ;IACd,gBAAgB,EAAE,yCAAyC;IAC3D,QAAQ,EAAE,4CAA4C;IACtD,WAAW,EAAE,oCAAoC;IACjD,MAAM,EAAE,CAAC,UAAU,CAAC;IACpB,eAAe,EAAE,OAAO;IACxB,eAAe,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC1C,eAAe,EAAE,EAAE,YAAY,EAAE,eAAe,EAAE;IAClD,UAAU,EAAE;QACV,EAAE,EAAE,IAAI;QACR,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,UAAU;KACnB;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC;IACnC,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,QAAQ;IACd,gBAAgB,EAAE,uCAAuC;IACzD,QAAQ,EAAE,mCAAmC;IAC7C,WAAW,EAAE,mCAAmC;IAChD,MAAM,EAAE,CAAC,iBAAiB,CAAC;IAC3B,UAAU,EAAE;QACV,EAAE,EAAE,WAAW;QACf,QAAQ,EAAE,cAAc;QACxB,IAAI,EAAE,qBAAqB;QAC3B,KAAK,EAAE,cAAc;QACrB,MAAM,EAAE,0BAA0B;KACnC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,KAAK,GAAG,cAAc,CAAC;IAClC,EAAE,EAAE,OAAO;IACX,IAAI,EAAE,OAAO;IACb,gBAAgB,EAAE,sCAAsC;IACxD,QAAQ,EAAE,uCAAuC;IACjD,WAAW,EAAE,sCAAsC;IACnD,MAAM,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,CAAC;IAC/D,UAAU,EAAE;QACV,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,gBAAgB;KACzB;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAAG,cAAc,CAAC;IACpC,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,gBAAgB,EAAE,wCAAwC;IAC1D,QAAQ,EAAE,wCAAwC;IAClD,WAAW,EAAE,+BAA+B;IAC5C,MAAM,EAAE,CAAC,iBAAiB,EAAE,mBAAmB,CAAC;IAChD,eAAe,EAAE,OAAO;IACxB,UAAU,EAAE;QACV,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,OAAO;QACd,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACf,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACvB,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,UAAU,EAAE,uBAAuB;KACpC;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,MAAM,GAAG,cAAc,CAAC;IACnC,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,QAAQ;IACd,gBAAgB,EAAE,2CAA2C;IAC7D,QAAQ,EAAE,6CAA6C;IACvD,WAAW,EAAE,2FAA2F;IACxG,MAAM,EAAE,CAAC,iBAAiB,CAAC;IAC3B,eAAe,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE;IAC1C,UAAU,EAAE;QACV,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,wBAAwB;QAC9B,MAAM,EAAE,sBAAsB;KAC/B;CACF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5C,MAAM;IACN,MAAM;IACN,SAAS;IACT,QAAQ;IACR,OAAO;IACP,CAAC,EAAE,OAAO;IACV,OAAO;IACP,KAAK;IACL,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,KAAK;IACL,OAAO;IACP,MAAM;CACP,CAAyC,CAAC;AAE3C,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,EAAmC,CAAC,CAAC;IAC7F,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,eAAe,CAAC,2BAA2B,EAAE,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/rbac.d.ts

@@ -0,0 +1,40 @@
+import type { AuthSubject, RBACOptions, RoleDefinition, StoredRole } from "./types.js";
+export declare class RBAC {
+    roles: Map<string, StoredRole>;
+    permissions: Set<string>;
+    rolePermissions: Map<string, Set<string>>;
+    roleParents: Map<string, string[]>;
+    defaultRole: string | null;
+    constructor(options?: RBACOptions);
+    addPermission(permission: string): this;
+    addRole(role: string | RoleDefinition, config?: RoleDefinition): this;
+    grant(role: string, permissions: string | string[]): this;
+    revoke(role: string, permissions: string | string[]): this;
+    inherit(role: string, parents: string | string[]): this;
+    hasRole(role: string): boolean;
+    requireRole(role: string): string;
+    getRoles(): string[];
+    getPermissions(role?: string): string[];
+    resolveParents(role: string, seen?: Set<string>): string[];
+    resolvePermissions(role: string): Set<string>;
+    subjectRoles(subject?: AuthSubject | string | null): string[];
+    subjectPermissions(subject?: AuthSubject | string | null): Set<string>;
+    can(subject: AuthSubject | string | null | undefined, permission: string | string[]): boolean;
+    cannot(subject: AuthSubject | string | null | undefined, permission: string | string[]): boolean;
+    authorize(subject: AuthSubject | string | null | undefined, permission: string | string[]): true;
+    hasAnyRole(subject: AuthSubject | string | null | undefined, roles: string | string[]): boolean;
+    hasAllRoles(subject: AuthSubject | string | null | undefined, roles: string | string[]): boolean;
+    snapshot(): {
+        defaultRole: string | null;
+        permissions: string[];
+        roles: Record<string, {
+            description: string;
+            permissions: string[];
+            inherits: string[];
+        }>;
+    };
+}
+export declare function matchPermission(granted: string, needed: string): boolean;
+export declare function createRBAC(options?: RBACOptions): RBAC;
+export declare function defineRoles(roles: RBACOptions["roles"]): RBAC;
+//# sourceMappingURL=rbac.d.ts.map

package/dist/rbac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.d.ts","sourceRoot":"","sources":["../src/rbac.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAavF,qBAAa,IAAI;IACf,KAAK,0BAAiC;IACtC,WAAW,cAAqB;IAChC,eAAe,2BAAkC;IACjD,WAAW,wBAA+B;IAC1C,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEf,OAAO,GAAE,WAAgB;IAoBrC,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI;IASvC,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,MAAM,GAAE,cAAmB,GAAG,IAAI;IAgCzE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI;IAYzD,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI;IAU1D,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI;IAUvD,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAI9B,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAQjC,QAAQ,IAAI,MAAM,EAAE;IAIpB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE;IAOvC,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,cAAoB,GAAG,MAAM,EAAE;IAchE,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAW7C,YAAY,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,MAAM,EAAE;IAqB7D,kBAAkB,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC;IAYtE,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO;IAiB7F,MAAM,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO;IAIhG,SAAS,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI;IAOhG,UAAU,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO;IAK/F,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,OAAO;IAMhG,QAAQ,IAAI;QACV,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,WAAW,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;KAC3F;CAeF;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAqBxE;AAED,wBAAgB,UAAU,CAAC,OAAO,GAAE,WAAgB,GAAG,IAAI,CAE1D;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI,CAE7D"}