@openora/core 0.4.0 → 0.4.1-canary.100

package/dist/pam/identity/admin-user-directory.js

@@ -1,6 +1,6 @@
-import { KycStatusSchema, UserRoleSchema } from '@openora/core/contracts';
+import { KycStatusSchema, normalizeKycStatus, UuidSchema } from '@openora/core/contracts';
 import { pageToOffset } from '@openora/core/server';
-import { count, desc, eq, ilike, inArray } from 'drizzle-orm';
+import { asc, count, desc, eq, ilike, inArray, or, sql, and } from 'drizzle-orm';
 import { user } from './schema/index.js';
 // Read-only cross-domain read of the player/profile table via the public /schema
 // subpath (allowed per ADR-0020) so back-office lists can label players by
@@ -15,7 +15,7 @@ function toRow(r) {
         name: r.name ?? null,
         createdAt: r.createdAt,
         isActive: r.isActive,
-        role: UserRoleSchema.parse(r.role),
+        role: r.role,
         failedLoginAttempts: r.failedLoginAttempts,
         lockoutUntil: r.lockoutUntil,
     };
@@ -31,15 +31,31 @@ export class DrizzleAdminUserDirectory {
         const [r] = await this.drizzle.db.select({ n: count() }).from(user);
         return Number(r?.n ?? 0);
     }
-    async list({ page, limit, search }) {
+    async list({ page, limit, search, sortBy, sortOrder }) {
         const db = this.drizzle.db;
         const where = search ? ilike(user.email, `%${search}%`) : undefined;
+        const dir = (sortOrder ?? 'desc') === 'asc' ? asc : desc;
+        const USER_SORT_COLS = {
+            createdAt: user.createdAt,
+            email: user.email,
+            name: user.name,
+            role: user.role,
+            isActive: user.isActive,
+            lastLockoutAt: user.lastLockoutAt,
+        };
+        const col = USER_SORT_COLS[sortBy === 'email' ||
+            sortBy === 'name' ||
+            sortBy === 'role' ||
+            sortBy === 'isActive' ||
+            sortBy === 'lastLockoutAt'
+            ? sortBy
+            : 'createdAt'];
         const [rows, [{ n }]] = await Promise.all([
             db
                 .select()
                 .from(user)
                 .where(where)
-                .orderBy(desc(user.createdAt))
+                .orderBy(dir(col), desc(user.id))
                 .limit(limit)
                 .offset(pageToOffset(page, limit)),
             db.select({ n: count() }).from(user).where(where),
@@ -50,73 +66,119 @@ export class DrizzleAdminUserDirectory {
         const [r] = await this.drizzle.db.select().from(user).where(eq(user.id, id));
         return r ? toRow(r) : null;
     }
-    async update(id, patch, actorId) {
+    async lookupUsers(userIds) {
+        if (userIds.length === 0) {
+            return [];
+        }
+        const rows = await this.drizzle.db
+            .select()
+            .from(user)
+            .where(inArray(user.id, [...userIds]));
+        return rows.map(toRow);
+    }
+    async update(id, patch, actorId, meta) {
         const [existing] = await this.drizzle.db.select().from(user).where(eq(user.id, id));
-        if (!existing)
+        if (!existing) {
             return null;
+        }
         const set = {};
-        if (patch.isActive !== undefined)
+        if (patch.isActive !== undefined) {
             set.isActive = patch.isActive;
-        if (patch.role !== undefined)
+        }
+        if (patch.role !== undefined) {
             set.role = patch.role;
+        }
         const [r] = await this.drizzle.db.update(user).set(set).where(eq(user.id, id)).returning();
-        if (!r)
+        if (!r) {
             return null;
+        }
         // Emit only on an actual active-status flip, after the commit. Literal topics
         // (not a ternary) so the catalog generator's emit-scanner picks them up.
         if (patch.isActive !== undefined && patch.isActive !== existing.isActive) {
-            if (patch.isActive)
-                this.events.emit('identity.user.reactivated', { userId: id, actorId });
-            else
-                this.events.emit('identity.user.deactivated', { userId: id, actorId });
+            const ip = meta?.ip ?? null;
+            const userAgent = meta?.userAgent ?? null;
+            if (patch.isActive) {
+                this.events.emit('identity.user.reactivated', { userId: id, actorId, ip, userAgent });
+            }
+            else {
+                this.events.emit('identity.user.deactivated', { userId: id, actorId, ip, userAgent });
+            }
         }
         return toRow(r);
     }
     async lookupPlayers(userIds) {
-        if (userIds.length === 0)
+        if (userIds.length === 0) {
             return [];
+        }
         const rows = await this.drizzle.db
             .select({
+            playerId: player.id,
             userId: player.userId,
-            username: player.displayName,
+            username: user.username,
             kycStatus: player.kycStatus,
             email: user.email,
+            language: user.language,
+            avatarUrl: user.image,
+            createdAt: player.createdAt,
+            level: player.level,
+            currency: player.currency,
         })
             .from(player)
             .innerJoin(user, eq(player.userId, user.id))
-            .where(inArray(player.userId, [...userIds]));
+            .where(and(inArray(player.userId, [...userIds]), eq(user.role, 'player')));
         return rows.map((r) => {
             // The player table stores kycStatus as free text; coerce unknown values to null
-            // so the port's KycStatus contract holds without a cast.
+            // so the port's KycStatus contract holds without a cast. Normalize the deprecated
+            // `verified` value to `approved` here - the single read boundary every admin
+            // consumer (wallet queue filter, tag evaluation, admin-console) goes through -
+            // so a legacy row is indistinguishable from a fresh one downstream.
             const kyc = KycStatusSchema.safeParse(r.kycStatus);
             return {
-                userId: r.userId,
-                username: r.username,
-                email: r.email,
-                kycStatus: kyc.success ? kyc.data : null,
+                ...r,
+                kycStatus: kyc.success ? normalizeKycStatus(kyc.data) : null,
             };
         });
     }
-    // Substring search is index-backed by the pg_trgm GIN indexes on user.email and
-    // player.display_name; the 1000 cap is a safety bound on the id set, not a perf
-    // crutch - it is effectively unreachable for a real admin search term.
-    async findPlayerIds(query) {
+    async getPlayerByUsername(username) {
+        const rows = await this.drizzle.db
+            .select({
+            playerId: player.id,
+            userId: player.userId,
+            username: user.username,
+            kycStatus: player.kycStatus,
+            email: user.email,
+            language: user.language,
+            avatarUrl: user.image,
+            createdAt: player.createdAt,
+            level: player.level,
+            currency: player.currency,
+        })
+            .from(player)
+            .innerJoin(user, eq(player.userId, user.id))
+            // Exact, case-insensitive match - ILIKE would let % and _ in `username` act as
+            // wildcards, letting a caller-supplied pattern select an arbitrary matching player.
+            .where(eq(sql `lower(${user.username})`, username.toLowerCase()))
+            .limit(1);
+        const [row] = rows;
+        if (!row) {
+            return null;
+        }
+        const kyc = KycStatusSchema.safeParse(row.kycStatus);
+        return { ...row, kycStatus: kyc.success ? normalizeKycStatus(kyc.data) : null };
+    }
+    async findPlayerIds(query, limit = 1000) {
         const term = `%${query}%`;
-        const cap = 1000;
-        const [byEmail, byName] = await Promise.all([
-            this.drizzle.db.select({ id: user.id }).from(user).where(ilike(user.email, term)).limit(cap),
-            this.drizzle.db
-                .select({ userId: player.userId })
-                .from(player)
-                .where(ilike(player.displayName, term))
-                .limit(cap),
-        ]);
-        const ids = new Set();
-        for (const r of byEmail)
-            ids.add(r.id);
-        for (const r of byName)
-            ids.add(r.userId);
-        return [...ids].slice(0, cap);
+        const conditions = [ilike(user.email, term), ilike(user.username, term)];
+        if (UuidSchema.safeParse(query).success) {
+            conditions.push(eq(player.id, query), eq(player.userId, query));
+        }
+        const rows = await this.drizzle.db
+            .selectDistinct({ id: user.id })
+            .from(user)
+            .leftJoin(player, eq(player.userId, user.id))
+            .where(or(...conditions))
+            .limit(limit);
+        return rows.map((r) => r.id);
     }
 }
 //# sourceMappingURL=admin-user-directory.js.map

package/dist/pam/identity/admin-user-directory.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-user-directory.js","sourceRoot":"","sources":["../../../src/pam/identity/admin-user-directory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAkB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,iFAAiF;AACjF,2EAA2E;AAC3E,oEAAoE;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAE1D,uEAAuE;AACvE,gGAAgG;AAChG,SAAS,KAAK,CAAC,CAA2B;IACxC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;QAC1C,YAAY,EAAE,CAAC,CAAC,YAAY;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,yBAAyB;IAEjB;IACA;IAFnB,YACmB,OAAuB,EACvB,MAAgB;QADhB,YAAO,GAAP,OAAO,CAAgB;QACvB,WAAM,GAAN,MAAM,CAAU;IAChC,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAwB;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,EAAE;iBACC,MAAM,EAAE;iBACR,IAAI,CAAC,IAAI,CAAC;iBACV,KAAK,CAAC,KAAK,CAAC;iBACZ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;iBAC7B,KAAK,CAAC,KAAK,CAAC;iBACZ,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACpC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,KAA4C,EAAE,OAAe;QACpF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3B,MAAM,GAAG,GAAsC,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChE,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;YAAE,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACpD,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC3F,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAEpB,8EAA8E;QAC9E,yEAAyE;QACzE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACzE,IAAI,KAAK,CAAC,QAAQ;gBAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;;gBACtF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC;YACN,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,MAAM,CAAC,WAAW;YAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;aACD,IAAI,CAAC,MAAM,CAAC;aACZ,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC3C,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,gFAAgF;YAChF,yDAAyD;YACzD,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACnD,OAAO;gBACL,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;aACzC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,gFAAgF;IAChF,gFAAgF;IAChF,uEAAuE;IACvE,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,MAAM,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC;QAC1B,MAAM,GAAG,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1C,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;YAC5F,IAAI,CAAC,OAAO,CAAC,EAAE;iBACZ,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;iBACjC,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;iBACtC,KAAK,CAAC,GAAG,CAAC;SACd,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChC,CAAC;CACF"}
+{"version":3,"file":"admin-user-directory.js","sourceRoot":"","sources":["../../../src/pam/identity/admin-user-directory.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC1F,OAAO,EAAkB,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AACzC,iFAAiF;AACjF,2EAA2E;AAC3E,oEAAoE;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,kCAAkC,CAAC;AAE1D,uEAAuE;AACvE,gGAAgG;AAChG,SAAS,KAAK,CAAC,CAA2B;IACxC,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI;QACpB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,mBAAmB,EAAE,CAAC,CAAC,mBAAmB;QAC1C,YAAY,EAAE,CAAC,CAAC,YAAY;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,yBAAyB;IAEjB;IACA;IAFnB,YACmB,OAAuB,EACvB,MAAgB;QADhB,YAAO,GAAP,OAAO,CAAgB;QACvB,WAAM,GAAN,MAAM,CAAU;IAChC,CAAC;IAEJ,KAAK,CAAC,KAAK;QACT,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,OAAO,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAwB;QACzE,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,MAAM,GAAG,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACzD,MAAM,cAAc,GAAG;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;SACzB,CAAC;QACX,MAAM,GAAG,GACP,cAAc,CACZ,MAAM,KAAK,OAAO;YAClB,MAAM,KAAK,MAAM;YACjB,MAAM,KAAK,MAAM;YACjB,MAAM,KAAK,UAAU;YACrB,MAAM,KAAK,eAAe;YACxB,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,WAAW,CAChB,CAAC;QACJ,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACxC,EAAE;iBACC,MAAM,EAAE;iBACR,IAAI,CAAC,IAAI,CAAC;iBACV,KAAK,CAAC,KAAK,CAAC;iBACZ,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;iBAChC,KAAK,CAAC,KAAK,CAAC;iBACZ,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACpC,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC;SAClD,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7E,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAA0B;QAC1C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,EAAU,EACV,KAA4C,EAC5C,OAAe,EACf,IAAiB;QAEjB,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAsC,EAAE,CAAC;QAClD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YACjC,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC7B,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,CAAC;QACD,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC3F,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QAED,8EAA8E;QAC9E,yEAAyE;QACzE,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACzE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC;YAC5B,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC;YAC1C,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACxF,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA0B;QAC5C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC;YACN,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;aACD,IAAI,CAAC,MAAM,CAAC;aACZ,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC3C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC7E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACpB,gFAAgF;YAChF,kFAAkF;YAClF,6EAA6E;YAC7E,+EAA+E;YAC/E,oEAAoE;YACpE,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YACnD,OAAO;gBACL,GAAG,CAAC;gBACJ,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;aAC7D,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,MAAM,CAAC;YACN,QAAQ,EAAE,MAAM,CAAC,EAAE;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,SAAS,EAAE,IAAI,CAAC,KAAK;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC1B,CAAC;aACD,IAAI,CAAC,MAAM,CAAC;aACZ,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5C,+EAA+E;YAC/E,oFAAoF;aACnF,KAAK,CAAC,EAAE,CAAC,GAAG,CAAA,SAAS,IAAI,CAAC,QAAQ,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;aAC/D,KAAK,CAAC,CAAC,CAAC,CAAC;QACZ,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,OAAO,EAAE,GAAG,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,KAAK,GAAG,IAAI;QAC7C,MAAM,IAAI,GAAG,IAAI,KAAK,GAAG,CAAC;QAC1B,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACzE,IAAI,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;YACxC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QAClE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,EAAE;aAC/B,cAAc,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;aAC/B,IAAI,CAAC,IAAI,CAAC;aACV,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;aAC5C,KAAK,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC;aACxB,KAAK,CAAC,KAAK,CAAC,CAAC;QAChB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/dist/pam/identity/contract/index.d.ts

@@ -1,22 +1,50 @@
 import * as z from 'zod';
+export declare const SessionSchema: z.ZodObject<{
+    token: z.ZodString;
+    expiresAt: z.ZodISODateTime;
+}, z.core.$strip>;
 export declare const SessionItemSchema: z.ZodObject<{
     id: z.ZodUUID;
     expiresAt: z.ZodISODateTime;
     createdAt: z.ZodISODateTime;
+    updatedAt: z.ZodISODateTime;
     ipAddress: z.ZodOptional<z.ZodNullable<z.ZodString>>;
     userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    current: z.ZodBoolean;
 }, z.core.$strip>;
 export type SessionItem = z.infer<typeof SessionItemSchema>;
+export declare const SESSION_SORT_BY_VALUES: readonly ["createdAt", "expiresAt", "updatedAt"];
+export declare const SessionSortBySchema: z.ZodDefault<z.ZodEnum<{
+    createdAt: "createdAt";
+    updatedAt: "updatedAt";
+    expiresAt: "expiresAt";
+}>>;
+export type SessionSortBy = z.infer<typeof SessionSortBySchema>;
 export declare const identityContract: {
     register: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         email: z.ZodEmail;
         password: z.ZodString;
-        name: z.ZodString;
+        username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+        acceptedTerms: z.ZodLiteral<true>;
+        acceptedAge: z.ZodLiteral<true>;
     }, z.core.$strip>, z.ZodObject<{
-        user: z.ZodObject<{
+        status: z.ZodLiteral<"check-email">;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    usernameAvailable: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    }, z.core.$strip>, z.ZodObject<{
+        available: z.ZodBoolean;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    login: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        email: z.ZodEmail;
+        password: z.ZodString;
+        rememberMe: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>, z.ZodObject<{
+        user: z.ZodOptional<z.ZodObject<{
             id: z.ZodUUID;
             email: z.ZodEmail;
             name: z.ZodString;
+            username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
             emailVerified: z.ZodBoolean;
             image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
             theme: z.ZodEnum<{
@@ -25,19 +53,37 @@ export declare const identityContract: {
                 system: "system";
             }>;
             language: z.ZodString;
+            phoneNumber: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            phoneVerified: z.ZodOptional<z.ZodBoolean>;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
-        }, z.core.$strip>;
+        }, z.core.$strip>>;
+        session: z.ZodOptional<z.ZodObject<{
+            token: z.ZodString;
+            expiresAt: z.ZodISODateTime;
+        }, z.core.$strip>>;
+        twoFactorRedirect: z.ZodOptional<z.ZodBoolean>;
+        security: z.ZodOptional<z.ZodObject<{
+            attemptsRemaining: z.ZodNumber;
+            lockoutUntil: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
-    login: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-        email: z.ZodEmail;
-        password: z.ZodString;
+    phoneLoginRequest: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        phone: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        expiresAt: z.ZodISODateTime;
+        resendAfter: z.ZodISODateTime;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    phoneLoginVerify: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        phone: z.ZodString;
+        code: z.ZodString;
         rememberMe: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>, z.ZodObject<{
-        user: z.ZodOptional<z.ZodObject<{
+        user: z.ZodObject<{
             id: z.ZodUUID;
             email: z.ZodEmail;
             name: z.ZodString;
+            username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
             emailVerified: z.ZodBoolean;
             image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
             theme: z.ZodEnum<{
@@ -46,14 +92,19 @@ export declare const identityContract: {
                 system: "system";
             }>;
             language: z.ZodString;
+            phoneNumber: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            phoneVerified: z.ZodOptional<z.ZodBoolean>;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
-        }, z.core.$strip>>;
-        session: z.ZodOptional<z.ZodObject<{
+        }, z.core.$strip>;
+        session: z.ZodObject<{
             token: z.ZodString;
             expiresAt: z.ZodISODateTime;
-        }, z.core.$strip>>;
-        twoFactorRedirect: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>;
+        security: z.ZodObject<{
+            attemptsRemaining: z.ZodNumber;
+            lockoutUntil: z.ZodNullable<z.ZodISODateTime>;
+        }, z.core.$strip>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     logout: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
         success: z.ZodLiteral<true>;
@@ -62,6 +113,7 @@ export declare const identityContract: {
         id: z.ZodUUID;
         email: z.ZodEmail;
         name: z.ZodString;
+        username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
         emailVerified: z.ZodBoolean;
         image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
         theme: z.ZodEnum<{
@@ -70,13 +122,19 @@ export declare const identityContract: {
             system: "system";
         }>;
         language: z.ZodString;
+        phoneNumber: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        phoneVerified: z.ZodOptional<z.ZodBoolean>;
         createdAt: z.ZodISODateTime;
         updatedAt: z.ZodISODateTime;
     }, z.core.$strip>>, Record<never, never>, Record<never, never>>;
     streamSession: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, import("@orpc/contract").Schema<AsyncIteratorObject<{
         type: "revoked";
+    } | {
+        type: "unlocked";
     }, unknown, void>, import("@orpc/contract").AsyncIteratorClass<{
         type: "revoked";
+    } | {
+        type: "unlocked";
     }, unknown, void>>, Record<never, never>, Record<never, never>>;
     enable2fa: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         password: z.ZodString;
@@ -99,8 +157,16 @@ export declare const identityContract: {
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    verifyPasswordResetOtp: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        email: z.ZodEmail;
+        otp: z.ZodString;
+    }, z.core.$strip>, z.ZodObject<{
+        success: z.ZodLiteral<true>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     resetPassword: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
-        token: z.ZodString;
+        email: z.ZodEmail;
+        otp: z.ZodString;
+        token: z.ZodOptional<z.ZodString>;
         newPassword: z.ZodString;
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
@@ -138,6 +204,7 @@ export declare const identityContract: {
             id: z.ZodUUID;
             email: z.ZodEmail;
             name: z.ZodString;
+            username: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
             emailVerified: z.ZodBoolean;
             image: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
             theme: z.ZodEnum<{
@@ -146,6 +213,8 @@ export declare const identityContract: {
                 system: "system";
             }>;
             language: z.ZodString;
+            phoneNumber: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+            phoneVerified: z.ZodOptional<z.ZodBoolean>;
             createdAt: z.ZodISODateTime;
             updatedAt: z.ZodISODateTime;
         }, z.core.$strip>;
@@ -155,18 +224,34 @@ export declare const identityContract: {
     }, z.core.$strip>, z.ZodObject<{
         success: z.ZodLiteral<true>;
     }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    adminRequestPasswordReset: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+        userId: z.ZodUUID;
+    }, z.core.$strip>, z.ZodObject<{
+        success: z.ZodLiteral<true>;
+    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     sessions: {
         list: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
             page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
             limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
             userId: z.ZodUUID;
+            sortBy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                createdAt: "createdAt";
+                updatedAt: "updatedAt";
+                expiresAt: "expiresAt";
+            }>>>;
+            sortOrder: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>>;
         }, z.core.$strip>, z.ZodObject<{
             items: z.ZodArray<z.ZodObject<{
                 id: z.ZodUUID;
                 expiresAt: z.ZodISODateTime;
                 createdAt: z.ZodISODateTime;
+                updatedAt: z.ZodISODateTime;
                 ipAddress: z.ZodOptional<z.ZodNullable<z.ZodString>>;
                 userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                current: z.ZodBoolean;
             }, z.core.$strip>>;
             total: z.ZodNumber;
             page: z.ZodNumber;
@@ -183,6 +268,37 @@ export declare const identityContract: {
         }, z.core.$strip>, z.ZodObject<{
             success: z.ZodLiteral<true>;
         }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        listMine: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            page: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+            limit: z.ZodDefault<z.ZodCoercedNumber<unknown>>;
+            sortBy: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                createdAt: "createdAt";
+                updatedAt: "updatedAt";
+                expiresAt: "expiresAt";
+            }>>>;
+            sortOrder: z.ZodOptional<z.ZodDefault<z.ZodEnum<{
+                asc: "asc";
+                desc: "desc";
+            }>>>;
+        }, z.core.$strip>, z.ZodObject<{
+            items: z.ZodArray<z.ZodObject<{
+                id: z.ZodUUID;
+                expiresAt: z.ZodISODateTime;
+                createdAt: z.ZodISODateTime;
+                updatedAt: z.ZodISODateTime;
+                ipAddress: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                userAgent: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+                current: z.ZodBoolean;
+            }, z.core.$strip>>;
+            total: z.ZodNumber;
+            page: z.ZodNumber;
+            limit: z.ZodNumber;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+        revokeMine: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
+            id: z.ZodUUID;
+        }, z.core.$strip>, z.ZodObject<{
+            success: z.ZodLiteral<true>;
+        }, z.core.$strip>, Record<never, never>, Record<never, never>>;
     };
 };
 //# sourceMappingURL=index.d.ts.map

package/dist/pam/identity/contract/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/contract/index.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAOzB,eAAO,MAAM,iBAAiB;;;;;;iBAM5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgG5B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/pam/identity/contract/index.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,eAAO,MAAM,aAAa;;;iBAGxB,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;iBAW5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,sBAAsB,kDAAmD,CAAC;AACvF,eAAO,MAAM,mBAAmB;;;;GAAsD,CAAC;AACvF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0J5B,CAAC"}

package/dist/pam/identity/contract/index.js

@@ -1,8 +1,8 @@
 import { oc, eventIterator } from '@orpc/contract';
-import { UserSchema, UuidSchema, LoginInputSchema, RegisterInputSchema, Enable2faInputSchema, Enable2faResultSchema, Verify2faInputSchema, Disable2faInputSchema, RequestPasswordResetInputSchema, ResetPasswordInputSchema, VerifyEmailInputSchema, UpdateProfileInputSchema, ChangePasswordInputSchema, ChangeEmailInputSchema, IdentitySuccessSchema, TimestampSchema, } from '@openora/core/contracts';
-import { PageQuerySchema, paginated } from '@openora/core/contracts/kit';
+import { UserSchema, UuidSchema, LoginInputSchema, RegisterInputSchema, RegisterOutputSchema, UsernameAvailabilityInputSchema, UsernameAvailabilityOutputSchema, Enable2faInputSchema, Enable2faResultSchema, Verify2faInputSchema, Disable2faInputSchema, RequestPasswordResetInputSchema, VerifyPasswordResetOtpInputSchema, ResetPasswordInputSchema, VerifyEmailInputSchema, UpdateProfileInputSchema, ChangePasswordInputSchema, ChangeEmailInputSchema, IdentitySuccessSchema, TimestampSchema, PhoneLoginRequestInputSchema, PhoneLoginRequestOutputSchema, PhoneLoginVerifyInputSchema, LoginSecurityStateSchema, } from '@openora/core/contracts';
+import { PageQuerySchema, SortOrderSchema, paginated } from '@openora/core/contracts/kit';
 import * as z from 'zod';
-const SessionSchema = z.object({
+export const SessionSchema = z.object({
     token: z.string(),
     expiresAt: TimestampSchema,
 });
@@ -10,14 +10,25 @@ export const SessionItemSchema = z.object({
     id: UuidSchema,
     expiresAt: TimestampSchema,
     createdAt: TimestampSchema,
+    // Last time better-auth refreshed the session - "last used" in a device list.
+    updatedAt: TimestampSchema,
     ipAddress: z.string().nullable().optional(),
     userAgent: z.string().nullable().optional(),
+    // True for the session making the request; false everywhere it cannot be known
+    // (eg an admin listing someone else's devices).
+    current: z.boolean(),
 });
+export const SESSION_SORT_BY_VALUES = ['createdAt', 'expiresAt', 'updatedAt'];
+export const SessionSortBySchema = z.enum(SESSION_SORT_BY_VALUES).default('createdAt');
 export const identityContract = {
     register: oc
         .route({ method: 'POST', path: '/identity/register' })
         .input(RegisterInputSchema)
-        .output(z.object({ user: UserSchema })),
+        .output(RegisterOutputSchema),
+    usernameAvailable: oc
+        .route({ method: 'GET', path: '/identity/username-available' })
+        .input(UsernameAvailabilityInputSchema)
+        .output(UsernameAvailabilityOutputSchema),
     // When 2FA is enabled, better-auth withholds the session and signals `twoFactorRedirect`; client must then call verify2fa.
     login: oc
         .route({ method: 'POST', path: '/identity/login' })
@@ -26,12 +37,24 @@ export const identityContract = {
         user: UserSchema.optional(),
         session: SessionSchema.optional(),
         twoFactorRedirect: z.boolean().optional(),
+        security: LoginSecurityStateSchema.optional(),
     })),
+    phoneLoginRequest: oc
+        .route({ method: 'POST', path: '/identity/phone-login/request' })
+        .input(PhoneLoginRequestInputSchema)
+        .output(PhoneLoginRequestOutputSchema),
+    phoneLoginVerify: oc
+        .route({ method: 'POST', path: '/identity/phone-login/verify' })
+        .input(PhoneLoginVerifyInputSchema)
+        .output(z.object({ user: UserSchema, session: SessionSchema, security: LoginSecurityStateSchema })),
     logout: oc.route({ method: 'POST', path: '/identity/logout' }).output(IdentitySuccessSchema),
     me: oc.route({ method: 'GET', path: '/identity/me' }).output(UserSchema.nullable()),
     streamSession: oc
         .route({ method: 'GET', path: '/identity/session/stream' })
-        .output(eventIterator(z.object({ type: z.literal('revoked') }))),
+        .output(eventIterator(z.discriminatedUnion('type', [
+        z.object({ type: z.literal('revoked') }),
+        z.object({ type: z.literal('unlocked') }),
+    ]))),
     enable2fa: oc
         .route({ method: 'POST', path: '/identity/2fa/enable' })
         .input(Enable2faInputSchema)
@@ -48,6 +71,10 @@ export const identityContract = {
         .route({ method: 'POST', path: '/identity/password/forgot' })
         .input(RequestPasswordResetInputSchema)
         .output(IdentitySuccessSchema),
+    verifyPasswordResetOtp: oc
+        .route({ method: 'POST', path: '/identity/password/verify-otp' })
+        .input(VerifyPasswordResetOtpInputSchema)
+        .output(IdentitySuccessSchema),
     resetPassword: oc
         .route({ method: 'POST', path: '/identity/password/reset' })
         .input(ResetPasswordInputSchema)
@@ -75,10 +102,18 @@ export const identityContract = {
         .route({ method: 'POST', path: '/identity/unlock' })
         .input(z.object({ userId: UuidSchema }))
         .output(IdentitySuccessSchema),
+    adminRequestPasswordReset: oc
+        .route({ method: 'POST', path: '/identity/admin/password-reset' })
+        .input(z.object({ userId: UuidSchema }))
+        .output(IdentitySuccessSchema),
     sessions: {
         list: oc
             .route({ method: 'GET', path: '/identity/sessions' })
-            .input(PageQuerySchema.extend({ userId: UuidSchema }))
+            .input(PageQuerySchema.extend({
+            userId: UuidSchema,
+            sortBy: SessionSortBySchema.optional(),
+            sortOrder: SortOrderSchema.default('desc').optional(),
+        }))
             .output(paginated(SessionItemSchema)),
         revoke: oc
             .route({ method: 'POST', path: '/identity/sessions/revoke' })
@@ -88,6 +123,19 @@ export const identityContract = {
             .route({ method: 'POST', path: '/identity/sessions/revoke-all' })
             .input(z.object({ userId: UuidSchema }))
             .output(IdentitySuccessSchema),
+        // Self-service twins of the admin routes above: the caller's own devices only,
+        // scoped by the verified session rather than a `userId` input.
+        listMine: oc
+            .route({ method: 'GET', path: '/identity/sessions/me' })
+            .input(PageQuerySchema.extend({
+            sortBy: SessionSortBySchema.optional(),
+            sortOrder: SortOrderSchema.default('desc').optional(),
+        }))
+            .output(paginated(SessionItemSchema)),
+        revokeMine: oc
+            .route({ method: 'POST', path: '/identity/sessions/me/revoke' })
+            .input(z.object({ id: UuidSchema }))
+            .output(IdentitySuccessSchema),
     },
 };
 //# sourceMappingURL=index.js.map

package/dist/pam/identity/contract/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pam/identity/contract/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,+BAA+B,EAC/B,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,GAChB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,UAAU;IACd,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,EAAE;SACT,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;SACrD,KAAK,CAAC,mBAAmB,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAEzC,2HAA2H;IAC3H,KAAK,EAAE,EAAE;SACN,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;SAClD,KAAK,CAAC,gBAAgB,CAAC;SACvB,MAAM,CACL,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC3B,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;QACjC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KAC1C,CAAC,CACH;IAEH,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC;IAE5F,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IAEnF,aAAa,EAAE,EAAE;SACd,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;SAC1D,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAElE,SAAS,EAAE,EAAE;SACV,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;SACvD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,SAAS,EAAE,EAAE;SACV,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;SACvD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;SACxD,KAAK,CAAC,qBAAqB,CAAC;SAC5B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,oBAAoB,EAAE,EAAE;SACrB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;SAC5D,KAAK,CAAC,+BAA+B,CAAC;SACtC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,aAAa,EAAE,EAAE;SACd,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;SAC3D,KAAK,CAAC,wBAAwB,CAAC;SAC/B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,cAAc,EAAE,EAAE;SACf,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;SAC5D,KAAK,CAAC,yBAAyB,CAAC;SAChC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,qBAAqB,EAAE,EAAE;SACtB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;SAC9D,MAAM,CAAC,qBAAqB,CAAC;IAEhC,WAAW,EAAE,EAAE;SACZ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;SACzD,KAAK,CAAC,sBAAsB,CAAC;SAC7B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,WAAW,EAAE,EAAE;SACZ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;SACzD,KAAK,CAAC,sBAAsB,CAAC;SAC7B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,aAAa,EAAE,EAAE;SACd,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;SACrD,KAAK,CAAC,wBAAwB,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAEzC,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SACnD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,QAAQ,EAAE;QACR,IAAI,EAAE,EAAE;aACL,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;aACpD,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;aACrD,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAEvC,MAAM,EAAE,EAAE;aACP,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;aAC5D,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;aACvD,MAAM,CAAC,qBAAqB,CAAC;QAEhC,SAAS,EAAE,EAAE;aACV,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;aAChE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;aACvC,MAAM,CAAC,qBAAqB,CAAC;KACjC;CACF,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/pam/identity/contract/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EACL,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,+BAA+B,EAC/B,gCAAgC,EAChC,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACrB,+BAA+B,EAC/B,iCAAiC,EACjC,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,yBAAyB,EACzB,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,4BAA4B,EAC5B,6BAA6B,EAC7B,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAC1F,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,UAAU;IACd,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,eAAe;IAC1B,8EAA8E;IAC9E,SAAS,EAAE,eAAe;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3C,+EAA+E;IAC/E,gDAAgD;IAChD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AACvF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAGvF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,EAAE;SACT,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;SACrD,KAAK,CAAC,mBAAmB,CAAC;SAC1B,MAAM,CAAC,oBAAoB,CAAC;IAE/B,iBAAiB,EAAE,EAAE;SAClB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;SAC9D,KAAK,CAAC,+BAA+B,CAAC;SACtC,MAAM,CAAC,gCAAgC,CAAC;IAE3C,2HAA2H;IAC3H,KAAK,EAAE,EAAE;SACN,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;SAClD,KAAK,CAAC,gBAAgB,CAAC;SACvB,MAAM,CACL,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,UAAU,CAAC,QAAQ,EAAE;QAC3B,OAAO,EAAE,aAAa,CAAC,QAAQ,EAAE;QACjC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;QACzC,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,EAAE;KAC9C,CAAC,CACH;IAEH,iBAAiB,EAAE,EAAE;SAClB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;SAChE,KAAK,CAAC,4BAA4B,CAAC;SACnC,MAAM,CAAC,6BAA6B,CAAC;IAExC,gBAAgB,EAAE,EAAE;SACjB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;SAC/D,KAAK,CAAC,2BAA2B,CAAC;SAClC,MAAM,CACL,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAC,CAC3F;IAEH,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,CAAC,qBAAqB,CAAC;IAE5F,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;IAEnF,aAAa,EAAE,EAAE;SACd,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;SAC1D,MAAM,CACL,aAAa,CACX,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QAC3B,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACxC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;KAC1C,CAAC,CACH,CACF;IAEH,SAAS,EAAE,EAAE;SACV,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;SACvD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,SAAS,EAAE,EAAE;SACV,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;SACvD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;SACxD,KAAK,CAAC,qBAAqB,CAAC;SAC5B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,oBAAoB,EAAE,EAAE;SACrB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;SAC5D,KAAK,CAAC,+BAA+B,CAAC;SACtC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,sBAAsB,EAAE,EAAE;SACvB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;SAChE,KAAK,CAAC,iCAAiC,CAAC;SACxC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,aAAa,EAAE,EAAE;SACd,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;SAC3D,KAAK,CAAC,wBAAwB,CAAC;SAC/B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,cAAc,EAAE,EAAE;SACf,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;SAC5D,KAAK,CAAC,yBAAyB,CAAC;SAChC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,qBAAqB,EAAE,EAAE;SACtB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC;SAC9D,MAAM,CAAC,qBAAqB,CAAC;IAEhC,WAAW,EAAE,EAAE;SACZ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;SACzD,KAAK,CAAC,sBAAsB,CAAC;SAC7B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,WAAW,EAAE,EAAE;SACZ,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;SACzD,KAAK,CAAC,sBAAsB,CAAC;SAC7B,MAAM,CAAC,qBAAqB,CAAC;IAEhC,aAAa,EAAE,EAAE;SACd,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;SACrD,KAAK,CAAC,wBAAwB,CAAC;SAC/B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IAEzC,UAAU,EAAE,EAAE;SACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;SACnD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,yBAAyB,EAAE,EAAE;SAC1B,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC;SACjE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;SACvC,MAAM,CAAC,qBAAqB,CAAC;IAEhC,QAAQ,EAAE;QACR,IAAI,EAAE,EAAE;aACL,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;aACpD,KAAK,CACJ,eAAe,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,UAAU;YAClB,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YACtC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;SACtD,CAAC,CACH;aACA,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAEvC,MAAM,EAAE,EAAE;aACP,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;aAC5D,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;aACvD,MAAM,CAAC,qBAAqB,CAAC;QAEhC,SAAS,EAAE,EAAE;aACV,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC;aAChE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;aACvC,MAAM,CAAC,qBAAqB,CAAC;QAEhC,+EAA+E;QAC/E,+DAA+D;QAC/D,QAAQ,EAAE,EAAE;aACT,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC;aACvD,KAAK,CACJ,eAAe,CAAC,MAAM,CAAC;YACrB,MAAM,EAAE,mBAAmB,CAAC,QAAQ,EAAE;YACtC,SAAS,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;SACtD,CAAC,CACH;aACA,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;QAEvC,UAAU,EAAE,EAAE;aACX,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC;aAC/D,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;aACnC,MAAM,CAAC,qBAAqB,CAAC;KACjC;CACF,CAAC"}