@paneljs/paneljs 0.1.0 → 0.2.1

package/CHANGELOG.md

@@ -0,0 +1,55 @@
+# Changelog
+
+## [0.3.0] - 2026-08-22
+
+Admin operations now live in core. Transports call `AdminService` instead of reimplementing CRUD, actions, and delete rules.
+
+### Added
+
+- `AdminService` with `list`, `get`, `create`, `update`, `delete`, `deletePreview`, `deleteSelected`, and `runAction`.
+- `admin.service`, available after `admin.initialize()`.
+- `validateSelectedIds` for bulk-action ID rules: non-empty, unique, and at most 100.
+- `loadDeletePreviewRelations` and `assertNoRestrictedRelations`, moved out of `@paneljs/express`.
+
+### Changed
+
+- Permission, scope, hook, audit, and referential-delete orchestration run in `AdminService`, so Express no longer owns that behavior.
+
+## [0.2.2] - 2026-08-21
+
+### Breaking
+
+- The package name is now `paneljs`, replacing `@paneljs/paneljs`. Update imports to `from "paneljs"` when upgrading.
+
+## [0.2.1] - 2026-08-20
+
+### Changed
+
+- Delete confirmation lists related rows for Cascade, SetNull, and Restrict, not only Cascade.
+- Restrict / Protect relations disable Confirm delete and explain that related records still reference the row.
+
+## [0.2.0] - 2026-08-19
+
+ORM-agnostic core contract. Adapters speak PanelJS query types; Express and the UI do not.
+
+### Breaking
+
+- `ModelResource` methods now take typed PanelJS queries (`FindManyQuery`, `FindFirstQuery`, `CreateQuery`, and the rest), not Prisma-shaped `Record<string, unknown>` args.
+- Custom action `where` is `{ scope, ids }`, not a Prisma `where` object. Combine it yourself when calling Prisma (or use `prismaActionWhere` from `@paneljs/prisma`).
+- `buildListWhere` was removed. List search/filters are fields on `findMany` / `count`.
+- `databaseProvider` on `createAdmin` is ignored. Search folding belongs to the data adapter.
+
+### Added
+
+- Query types: `FindManyQuery`, `FindFirstQuery`, `CountQuery`, `CreateQuery`, `UpdateManyQuery`, `DeleteManyQuery`, `FieldSelect`, `FieldFilters`, `SearchQuery`, `ActionWhere`.
+- `AdminAuthStore` plus core login helpers (`loginWithPassword`, `authenticateBuiltInRequest`, `resolveAuthStore`, session cookie helpers).
+- Optional `DataAdapter.createAuthStore` for built-in login.
+
+### Changed
+
+- List select builders return `FieldSelect` (`fields` + `relations`), not a Prisma `select`.
+- `parseListQuery` returns PanelJS filters and `{ text, fields }` search only.
+
+## [0.1.0]
+
+Initial public release.

package/dist/adapter.d.ts

@@ -1,14 +1,16 @@
+import type { AdminAuthStore, AuthStoreOptions } from "./authStore.js";
 import type { AdminModelMeta } from "./types.js";
+import type { CountQuery, CreateQuery, DeleteManyQuery, FindFirstQuery, FindManyQuery, UpdateManyQuery } from "./query.js";
 /** The subset of CRUD a host ORM must implement for one model. */
 export interface ModelResource {
-    findMany(args: Record<string, unknown>): Promise<Record<string, unknown>[]>;
-    findFirst(args: Record<string, unknown>): Promise<Record<string, unknown> | null>;
-    count(args: Record<string, unknown>): Promise<number>;
-    create(args: Record<string, unknown>): Promise<Record<string, unknown>>;
-    updateMany(args: Record<string, unknown>): Promise<{
+    findMany(query: FindManyQuery): Promise<Record<string, unknown>[]>;
+    findFirst(query: FindFirstQuery): Promise<Record<string, unknown> | null>;
+    count(query: CountQuery): Promise<number>;
+    create(query: CreateQuery): Promise<Record<string, unknown>>;
+    updateMany(query: UpdateManyQuery): Promise<{
         count: number;
     }>;
-    deleteMany(args: Record<string, unknown>): Promise<{
+    deleteMany(query: DeleteManyQuery): Promise<{
         count: number;
     }>;
 }
@@ -21,4 +23,6 @@ export interface DataAdapter {
     readonly client: unknown;
     introspect(): Promise<Map<string, AdminModelMeta>>;
     resource(meta: AdminModelMeta): ModelResource;
+    /** Optional. Built-in login uses this when `auth.store` is not set. */
+    createAuthStore?(options: AuthStoreOptions): AdminAuthStore;
 }

package/dist/adminService.d.ts

@@ -0,0 +1,49 @@
+import type { DataAdapter } from "./adapter.js";
+import { type DeletePreviewRelation } from "./deleteRelations.js";
+import type { FieldFilters, FindManyQuery, SearchQuery } from "./query.js";
+import type { FullRegisteredModel } from "./registry.js";
+import type { AdminUser, AuditConfig, PaginatedResponse } from "./types.js";
+export type AdminListInput = {
+    page?: number;
+    perPage?: number;
+    filters?: FieldFilters;
+    search?: SearchQuery;
+    sort?: FindManyQuery["sort"];
+};
+export type DeletePreview = {
+    records: Record<string, unknown>[];
+    relations: DeletePreviewRelation[];
+};
+export type DeleteSelectedResult = {
+    requestedIds: Array<string | number>;
+    deletedIds: Array<string | number>;
+    partial: boolean;
+};
+export interface AdminServiceOptions {
+    models: Map<string, FullRegisteredModel>;
+    adapter: DataAdapter;
+    audit?: AuditConfig;
+}
+/** Framework-neutral CRUD, action, scope, hook, and audit orchestration. */
+export declare class AdminService {
+    private readonly models;
+    private readonly adapter;
+    private readonly audit;
+    constructor(options: AdminServiceOptions);
+    list(model: FullRegisteredModel, adminUser: AdminUser, input?: AdminListInput): Promise<PaginatedResponse<Record<string, unknown>>>;
+    get(model: FullRegisteredModel, adminUser: AdminUser, id: string | number): Promise<Record<string, unknown>>;
+    create(model: FullRegisteredModel, adminUser: AdminUser, body: unknown): Promise<Record<string, unknown>>;
+    update(model: FullRegisteredModel, adminUser: AdminUser, id: string | number, body: unknown): Promise<Record<string, unknown>>;
+    delete(model: FullRegisteredModel, adminUser: AdminUser, id: string | number): Promise<void>;
+    deletePreview(model: FullRegisteredModel, adminUser: AdminUser, requestedIds: Array<string | number>): Promise<DeletePreview>;
+    deleteSelected(model: FullRegisteredModel, adminUser: AdminUser, requestedIds: Array<string | number>): Promise<DeleteSelectedResult>;
+    runAction(model: FullRegisteredModel, adminUser: AdminUser, actionName: string, requestedIds: Array<string | number>): Promise<{
+        message: string;
+    }>;
+    private authorize;
+    private validateCreateData;
+    private validateUpdateData;
+    private loadSelected;
+    private writeAuditSafely;
+}
+export declare function validateSelectedIds(ids: Array<string | number>): void;

package/dist/adminService.js

@@ -0,0 +1,307 @@
+import { writeAuditEvent } from "./audit.js";
+import { assertNoRestrictedRelations, loadDeletePreviewRelations, } from "./deleteRelations.js";
+import { DELETE_SELECTED_ACTION } from "./defaultActions.js";
+import { PermissionDeniedError, RecordNotFoundError } from "./errors.js";
+import { hasModelPermission, hasRegisteredActionPermission, } from "./permissions.js";
+import { idSelect } from "./query.js";
+import { assertSelectedRelationsAreVisible, buildListRecordSelect, buildRecordSelect, } from "./recordSelection.js";
+import { applyCreateScope, assertScopeFieldsUnchanged, collectScopeFieldNames, resolveScope, } from "./scope.js";
+import { assertRequiredCreateFields, RequestValidationError, validateHookPayload, validateWritePayload, } from "./validation.js";
+const MAX_ACTION_RECORDS = 100;
+/** Framework-neutral CRUD, action, scope, hook, and audit orchestration. */
+export class AdminService {
+    models;
+    adapter;
+    audit;
+    constructor(options) {
+        this.models = options.models;
+        this.adapter = options.adapter;
+        this.audit = options.audit;
+    }
+    async list(model, adminUser, input = {}) {
+        this.authorize(model, adminUser, "list");
+        const page = input.page ?? 1;
+        const perPage = input.perPage ?? model.resolved.perPage;
+        assertPagination(page, perPage);
+        const scope = await resolveScope(model.raw, adminUser);
+        const delegate = this.adapter.resource(model.meta);
+        const filters = input.filters ?? {};
+        const sort = input.sort ?? model.resolved.defaultSort;
+        const [records, total] = await Promise.all([
+            delegate.findMany({
+                scope,
+                filters,
+                search: input.search,
+                sort,
+                skip: (page - 1) * perPage,
+                take: perPage,
+                select: buildListRecordSelect(model.meta, model),
+            }),
+            delegate.count({ scope, filters, search: input.search }),
+        ]);
+        return {
+            records,
+            total,
+            page,
+            perPage,
+            totalPages: Math.ceil(total / perPage),
+        };
+    }
+    async get(model, adminUser, id) {
+        this.authorize(model, adminUser, "view");
+        const scope = await resolveScope(model.raw, adminUser);
+        const record = await this.adapter.resource(model.meta).findFirst({
+            scope,
+            id,
+            select: buildRecordSelect(model.meta, model),
+        });
+        if (!record)
+            throw new RecordNotFoundError();
+        return record;
+    }
+    async create(model, adminUser, body) {
+        this.authorize(model, adminUser, "create");
+        const scope = await resolveScope(model.raw, adminUser);
+        let data = applyCreateScope(validateWritePayload(model.meta, model.raw, adminUser, body), scope);
+        await this.validateCreateData(model, adminUser, data);
+        if (model.raw.beforeCreate) {
+            const hookData = await model.raw.beforeCreate(data);
+            const scopeFieldNames = new Set(Object.keys(scope));
+            data = validateHookPayload(model.meta, Object.fromEntries(Object.entries(hookData).filter(([fieldName]) => !scopeFieldNames.has(fieldName))));
+            data = applyCreateScope(data, scope);
+            await this.validateCreateData(model, adminUser, data);
+        }
+        const record = await this.adapter.resource(model.meta).create({
+            data,
+            select: buildRecordSelect(model.meta, model),
+        });
+        if (model.raw.afterCreate) {
+            await runPostCommit("afterCreate", () => model.raw.afterCreate(record));
+        }
+        const recordId = record[model.meta.idField];
+        await this.writeAuditSafely(adminUser, {
+            type: "create",
+            modelName: model.meta.name,
+            recordIds: typeof recordId === "string" || typeof recordId === "number"
+                ? [recordId]
+                : [],
+        });
+        return record;
+    }
+    async update(model, adminUser, id, body) {
+        this.authorize(model, adminUser, "update");
+        const scope = await resolveScope(model.raw, adminUser);
+        const delegate = this.adapter.resource(model.meta);
+        const existing = await delegate.findFirst({
+            scope,
+            id,
+            select: idSelect(model.meta.idField),
+        });
+        if (!existing)
+            throw new RecordNotFoundError();
+        let data = validateWritePayload(model.meta, model.raw, adminUser, body);
+        await this.validateUpdateData(model, adminUser, scope, data);
+        if (model.raw.beforeUpdate) {
+            data = validateHookPayload(model.meta, await model.raw.beforeUpdate(String(id), data));
+            await this.validateUpdateData(model, adminUser, scope, data);
+        }
+        const result = await delegate.updateMany({ scope, id, data });
+        if (result.count === 0)
+            throw new RecordNotFoundError();
+        const record = await delegate.findFirst({
+            scope,
+            id,
+            select: buildRecordSelect(model.meta, model),
+        });
+        if (!record) {
+            throw new Error(`[paneljs] Updated record "${model.meta.name}/${id}" could not be reloaded.`);
+        }
+        if (model.raw.afterUpdate) {
+            await runPostCommit("afterUpdate", () => model.raw.afterUpdate(record));
+        }
+        await this.writeAuditSafely(adminUser, {
+            type: "update",
+            modelName: model.meta.name,
+            recordIds: [id],
+        });
+        return record;
+    }
+    async delete(model, adminUser, id) {
+        this.authorize(model, adminUser, "delete");
+        const scope = await resolveScope(model.raw, adminUser);
+        const delegate = this.adapter.resource(model.meta);
+        const record = await delegate.findFirst({
+            scope,
+            id,
+            select: buildRecordSelect(model.meta, model),
+        });
+        if (!record)
+            throw new RecordNotFoundError();
+        if (model.raw.beforeDelete)
+            await model.raw.beforeDelete(String(id));
+        await assertNoRestrictedRelations(model, this.models, this.adapter, adminUser, [id]);
+        const result = await delegate.deleteMany({ scope, id });
+        if (result.count === 0)
+            throw new RecordNotFoundError();
+        if (model.raw.afterDelete) {
+            await runPostCommit("afterDelete", () => model.raw.afterDelete(String(id)));
+        }
+        await this.writeAuditSafely(adminUser, {
+            type: "delete",
+            modelName: model.meta.name,
+            recordIds: [id],
+        });
+    }
+    async deletePreview(model, adminUser, requestedIds) {
+        this.authorize(model, adminUser, "delete");
+        validateSelectedIds(requestedIds);
+        const { records, ids } = await this.loadSelected(model, adminUser, requestedIds, buildListRecordSelect(model.meta, model));
+        const relations = await loadDeletePreviewRelations(model, this.models, this.adapter, adminUser, ids);
+        return { records, relations };
+    }
+    async deleteSelected(model, adminUser, requestedIds) {
+        this.authorize(model, adminUser, "list");
+        this.authorize(model, adminUser, "delete");
+        validateSelectedIds(requestedIds);
+        const { ids } = await this.loadSelected(model, adminUser, requestedIds, idSelect(model.meta.idField));
+        await assertNoRestrictedRelations(model, this.models, this.adapter, adminUser, ids);
+        const scope = await resolveScope(model.raw, adminUser);
+        const delegate = this.adapter.resource(model.meta);
+        const deletedIds = [];
+        for (const id of ids) {
+            if (model.raw.beforeDelete)
+                await model.raw.beforeDelete(String(id));
+            const result = await delegate.deleteMany({ scope, id });
+            if (result.count !== 1)
+                continue;
+            deletedIds.push(id);
+            if (model.raw.afterDelete) {
+                await runPostCommit("afterDelete", () => model.raw.afterDelete(String(id)));
+            }
+        }
+        if (deletedIds.length > 0) {
+            await this.writeAuditSafely(adminUser, {
+                type: "delete",
+                modelName: model.meta.name,
+                recordIds: deletedIds,
+            });
+        }
+        return {
+            requestedIds,
+            deletedIds,
+            partial: deletedIds.length !== ids.length,
+        };
+    }
+    async runAction(model, adminUser, actionName, requestedIds) {
+        if (actionName === DELETE_SELECTED_ACTION.name) {
+            const result = await this.deleteSelected(model, adminUser, requestedIds);
+            return {
+                message: result.partial
+                    ? `Deleted ${result.deletedIds.length} ${pluralRecord(result.deletedIds.length)}; some records changed before deletion.`
+                    : `Deleted ${result.deletedIds.length} ${pluralRecord(result.deletedIds.length)}.`,
+            };
+        }
+        this.authorize(model, adminUser, "list");
+        const action = model.raw.actions?.find((candidate) => candidate.name === actionName);
+        if (!action ||
+            !hasRegisteredActionPermission(adminUser, model.resolved.permissions, action)) {
+            throw new PermissionDeniedError();
+        }
+        validateSelectedIds(requestedIds);
+        const { ids } = await this.loadSelected(model, adminUser, requestedIds, idSelect(model.meta.idField));
+        const scope = await resolveScope(model.raw, adminUser);
+        const result = await action.handler({
+            ids,
+            adminUser,
+            client: this.adapter.client,
+            where: { scope, ids },
+        });
+        await this.writeAuditSafely(adminUser, {
+            type: "action",
+            modelName: model.meta.name,
+            recordIds: ids,
+            metadata: { action: action.name },
+        });
+        return result;
+    }
+    authorize(model, adminUser, operation) {
+        if (!hasModelPermission(adminUser, model.resolved.permissions, operation)) {
+            throw new PermissionDeniedError();
+        }
+    }
+    async validateCreateData(model, adminUser, data) {
+        assertRequiredCreateFields(model.meta, model.raw, adminUser, data);
+        await assertSelectedRelationsAreVisible(data, model, this.models, this.adapter, adminUser);
+    }
+    async validateUpdateData(model, adminUser, scope, data) {
+        assertScopeFieldsUnchanged(data, scope);
+        assertScopeRelationsUnchanged(data, model, scope);
+        await assertSelectedRelationsAreVisible(data, model, this.models, this.adapter, adminUser);
+    }
+    async loadSelected(model, adminUser, requestedIds, select) {
+        const scope = await resolveScope(model.raw, adminUser);
+        const records = await this.adapter.resource(model.meta).findMany({
+            scope,
+            filters: {},
+            ids: requestedIds,
+            select,
+        });
+        const ids = records
+            .map((record) => record[model.meta.idField])
+            .filter((id) => typeof id === "string" || typeof id === "number");
+        if (ids.length !== requestedIds.length) {
+            throw new RequestValidationError("One or more selected records are unavailable.");
+        }
+        return { records, ids };
+    }
+    async writeAuditSafely(actor, event) {
+        await runPostCommit("audit.write", () => writeAuditEvent(this.audit, actor, event));
+    }
+}
+export function validateSelectedIds(ids) {
+    if (ids.length === 0) {
+        throw new RequestValidationError("Action requests require at least one record ID.");
+    }
+    if (ids.length > MAX_ACTION_RECORDS) {
+        throw new RequestValidationError(`Actions can target at most ${MAX_ACTION_RECORDS} records at once.`);
+    }
+    if (new Set(ids).size !== ids.length) {
+        throw new RequestValidationError("Action record IDs must be unique.");
+    }
+}
+function assertPagination(page, perPage) {
+    if (!Number.isSafeInteger(page) || page < 1) {
+        throw new RequestValidationError("Page must be a positive integer.");
+    }
+    if (!Number.isSafeInteger(perPage) || perPage < 1 || perPage > 200) {
+        throw new RequestValidationError("Records per page must be an integer from 1 to 200.");
+    }
+}
+function pluralRecord(count) {
+    return count === 1 ? "record" : "records";
+}
+async function runPostCommit(name, task) {
+    try {
+        await task();
+    }
+    catch {
+        console.error(`[paneljs] ${name} failed after the database write committed.`);
+    }
+}
+function assertScopeRelationsUnchanged(data, model, scope) {
+    const referencedNames = collectScopeFieldNames(scope);
+    for (const field of model.meta.fields) {
+        const relation = field.relation;
+        if (field.type !== "relation" ||
+            relation?.kind !== "belongsTo" ||
+            !referencedNames.has(field.name)) {
+            continue;
+        }
+        for (const foreignKeyField of relation.foreignKeyFields) {
+            if (data[foreignKeyField] !== undefined) {
+                throw new RequestValidationError(`Field "${foreignKeyField}" is controlled by the configured scope and cannot be updated through the admin.`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=adminService.js.map

package/dist/adminService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adminService.js","sourceRoot":"","sources":["../src/adminService.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EACL,kBAAkB,EAClB,6BAA6B,GAE9B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAOtC,OAAO,EACL,iCAAiC,EACjC,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,sBAAsB,EACtB,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,kBAAkB,GAAG,GAAG,CAAC;AA2B/B,4EAA4E;AAC5E,MAAM,OAAO,YAAY;IACN,MAAM,CAAmC;IACzC,OAAO,CAAc;IACrB,KAAK,CAA0B;IAEhD,YAAY,OAA4B;QACtC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAC7B,CAAC;IAED,KAAK,CAAC,IAAI,CACR,KAA0B,EAC1B,SAAoB,EACpB,QAAwB,EAAE;QAE1B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QACxD,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACtD,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACzC,QAAQ,CAAC,QAAQ,CAAC;gBAChB,KAAK;gBACL,OAAO;gBACP,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,IAAI;gBACJ,IAAI,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO;gBAC1B,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;aACjD,CAAC;YACF,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SACzD,CAAC,CAAC;QAEH,OAAO;YACL,OAAO;YACP,KAAK;YACL,IAAI;YACJ,OAAO;YACP,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CACP,KAA0B,EAC1B,SAAoB,EACpB,EAAmB;QAEnB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC;YAC/D,KAAK;YACL,EAAE;YACF,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAA0B,EAC1B,SAAoB,EACpB,IAAa;QAEb,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,IAAI,GAAG,gBAAgB,CACzB,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,EAC5D,KAAK,CACN,CAAC;QACF,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QAEtD,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC3B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YACpD,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACpD,IAAI,GAAG,mBAAmB,CACxB,KAAK,CAAC,IAAI,EACV,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAC7B,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CACjD,CACF,CACF,CAAC;YACF,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACrC,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;YAC5D,IAAI;YACJ,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,aAAa,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE;YACrC,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;YAC1B,SAAS,EACP,OAAO,QAAQ,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAC1D,CAAC,CAAC,CAAC,QAAQ,CAAC;gBACZ,CAAC,CAAC,EAAE;SACT,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAA0B,EAC1B,SAAoB,EACpB,EAAmB,EACnB,IAAa;QAEb,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC;YACxC,KAAK;YACL,EAAE;YACF,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;SACrC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAE/C,IAAI,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACxE,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC7D,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;YAC3B,IAAI,GAAG,mBAAmB,CACxB,KAAK,CAAC,IAAI,EACV,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAC/C,CAAC;YACF,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAC/D,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;YAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC;YACtC,KAAK;YACL,EAAE;YACF,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,6BAA6B,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,0BAA0B,CAC7E,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,aAAa,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,WAAY,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE;YACrC,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;YAC1B,SAAS,EAAE,CAAC,EAAE,CAAC;SAChB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,MAAM,CACV,KAA0B,EAC1B,SAAoB,EACpB,EAAmB;QAEnB,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC;YACtC,KAAK;YACL,EAAE;YACF,MAAM,EAAE,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC;SAC7C,CAAC,CAAC;QACH,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;QAC7C,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY;YAAE,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,2BAA2B,CAC/B,KAAK,EACL,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,EACZ,SAAS,EACT,CAAC,EAAE,CAAC,CACL,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;YAAE,MAAM,IAAI,mBAAmB,EAAE,CAAC;QACxD,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,aAAa,CAAC,aAAa,EAAE,GAAG,EAAE,CACtC,KAAK,CAAC,GAAG,CAAC,WAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACnC,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE;YACrC,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;YAC1B,SAAS,EAAE,CAAC,EAAE,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,KAA0B,EAC1B,SAAoB,EACpB,YAAoC;QAEpC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3C,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CAC9C,KAAK,EACL,SAAS,EACT,YAAY,EACZ,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CACzC,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,0BAA0B,CAChD,KAAK,EACL,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,EACZ,SAAS,EACT,GAAG,CACJ,CAAC;QACF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAA0B,EAC1B,SAAoB,EACpB,YAAoC;QAEpC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC3C,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC,KAAK,EACL,SAAS,EACT,YAAY,EACZ,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAC7B,CAAC;QACF,MAAM,2BAA2B,CAC/B,KAAK,EACL,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,EACZ,SAAS,EACT,GAAG,CACJ,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY;gBAAE,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC;gBAAE,SAAS;YACjC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,IAAI,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;gBAC1B,MAAM,aAAa,CAAC,aAAa,EAAE,GAAG,EAAE,CACtC,KAAK,CAAC,GAAG,CAAC,WAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CACnC,CAAC;YACJ,CAAC;QACH,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE;gBACrC,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;gBAC1B,SAAS,EAAE,UAAU;aACtB,CAAC,CAAC;QACL,CAAC;QACD,OAAO;YACL,YAAY;YACZ,UAAU;YACV,OAAO,EAAE,UAAU,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;SAC1C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAA0B,EAC1B,SAAoB,EACpB,UAAkB,EAClB,YAAoC;QAEpC,IAAI,UAAU,KAAK,sBAAsB,CAAC,IAAI,EAAE,CAAC;YAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;YACzE,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;oBACrB,CAAC,CAAC,WAAW,MAAM,CAAC,UAAU,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,yCAAyC;oBACxH,CAAC,CAAC,WAAW,MAAM,CAAC,UAAU,CAAC,MAAM,IAAI,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG;aACrF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CACpC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,UAAU,CAC7C,CAAC;QACF,IACE,CAAC,MAAM;YACP,CAAC,6BAA6B,CAC5B,SAAS,EACT,KAAK,CAAC,QAAQ,CAAC,WAAW,EAC1B,MAAM,CACP,EACD,CAAC;YACD,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACpC,CAAC;QACD,mBAAmB,CAAC,YAAY,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,YAAY,CACrC,KAAK,EACL,SAAS,EACT,YAAY,EACZ,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAC7B,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;YAClC,GAAG;YACH,SAAS;YACT,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;YAC3B,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,SAAS,EAAE;YACrC,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;YAC1B,SAAS,EAAE,GAAG;YACd,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE;SAClC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,SAAS,CACf,KAA0B,EAC1B,SAAoB,EACpB,SAAyB;QAEzB,IAAI,CAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,qBAAqB,EAAE,CAAC;QACpC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,KAA0B,EAC1B,SAAoB,EACpB,IAA6B;QAE7B,0BAA0B,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,iCAAiC,CACrC,IAAI,EACJ,KAAK,EACL,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,EACZ,SAAS,CACV,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,KAA0B,EAC1B,SAAoB,EACpB,KAA8B,EAC9B,IAA6B;QAE7B,0BAA0B,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxC,6BAA6B,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAClD,MAAM,iCAAiC,CACrC,IAAI,EACJ,KAAK,EACL,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,OAAO,EACZ,SAAS,CACV,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,YAAY,CACxB,KAA0B,EAC1B,SAAoB,EACpB,YAAoC,EACpC,MAAmB;QAKnB,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;YAC/D,KAAK;YACL,OAAO,EAAE,EAAE;YACX,GAAG,EAAE,YAAY;YACjB,MAAM;SACP,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,OAAO;aAChB,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;aAC3C,MAAM,CACL,CAAC,EAAE,EAAyB,EAAE,CAC5B,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,CACnD,CAAC;QACJ,IAAI,GAAG,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,sBAAsB,CAC9B,+CAA+C,CAChD,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAC5B,KAAgB,EAChB,KAA4C;QAE5C,MAAM,aAAa,CAAC,aAAa,EAAE,GAAG,EAAE,CACtC,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAC1C,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,mBAAmB,CAAC,GAA2B;IAC7D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,sBAAsB,CAC9B,iDAAiD,CAClD,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACpC,MAAM,IAAI,sBAAsB,CAC9B,8BAA8B,kBAAkB,mBAAmB,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,IAAI,sBAAsB,CAAC,mCAAmC,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAE,OAAe;IACrD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,sBAAsB,CAAC,kCAAkC,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,GAAG,EAAE,CAAC;QACnE,MAAM,IAAI,sBAAsB,CAC9B,oDAAoD,CACrD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,IAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,IAAI,EAAE,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,KAAK,CACX,aAAa,IAAI,6CAA6C,CAC/D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,6BAA6B,CACpC,IAA6B,EAC7B,KAA0B,EAC1B,KAA8B;IAE9B,MAAM,eAAe,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACtD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChC,IACE,KAAK,CAAC,IAAI,KAAK,UAAU;YACzB,QAAQ,EAAE,IAAI,KAAK,WAAW;YAC9B,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAChC,CAAC;YACD,SAAS;QACX,CAAC;QACD,KAAK,MAAM,eAAe,IAAI,QAAQ,CAAC,gBAAgB,EAAE,CAAC;YACxD,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;gBACxC,MAAM,IAAI,sBAAsB,CAC9B,UAAU,eAAe,kFAAkF,CAC5G,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/authStore.d.ts

@@ -0,0 +1,31 @@
+export declare const DEFAULT_AUTH_USER_MODEL = "ExpressAdminUser";
+export declare const DEFAULT_AUTH_SESSION_MODEL = "ExpressAdminSession";
+export type AuthStoreOptions = {
+    identifier: "email" | "username";
+    userModel?: string;
+    sessionModel?: string;
+};
+export interface BuiltInUserRecord {
+    id: string;
+    email?: string;
+    username?: string;
+    passwordHash: string;
+    role: string;
+    isActive: boolean;
+    tenantId?: string;
+}
+export interface BuiltInSessionRecord {
+    tokenHash: string;
+    expiresAt: Date;
+    user: BuiltInUserRecord;
+}
+export interface AdminAuthStore {
+    findUserByIdentifier(identifier: string): Promise<BuiltInUserRecord | null>;
+    findSessionWithUser(tokenHash: string): Promise<BuiltInSessionRecord | null>;
+    createSession(input: {
+        tokenHash: string;
+        userId: string;
+        expiresAt: Date;
+    }): Promise<void>;
+    deleteSessionByTokenHash(tokenHash: string): Promise<void>;
+}

package/dist/authStore.js

@@ -0,0 +1,3 @@
+export const DEFAULT_AUTH_USER_MODEL = "ExpressAdminUser";
+export const DEFAULT_AUTH_SESSION_MODEL = "ExpressAdminSession";
+//# sourceMappingURL=authStore.js.map

package/dist/authStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authStore.js","sourceRoot":"","sources":["../src/authStore.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAC1D,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC"}

package/dist/builtInAuth.d.ts

@@ -0,0 +1,49 @@
+import type { AdminAuthStore, BuiltInUserRecord } from "./authStore.js";
+import type { AdminHttpRequest, AdminUser, BuiltInAuthConfig } from "./types.js";
+import type { DataAdapter } from "./adapter.js";
+export declare const SESSION_COOKIE_NAME = "paneljs_session";
+export declare const DEFAULT_SESSION_TTL_SECONDS: number;
+export type SessionCookie = {
+    name: string;
+    value: string;
+    path: string;
+    httpOnly: true;
+    sameSite: "Lax";
+    maxAge: number;
+    expires: Date;
+    secure: boolean;
+};
+export type BuiltInLoginFailure = {
+    ok: false;
+    status: 401;
+    body: {
+        error: string;
+        code: string;
+    };
+};
+export type BuiltInLoginSuccess = {
+    ok: true;
+    status: 200;
+    body: {
+        ok: true;
+    };
+    cookie: SessionCookie;
+};
+export type BuiltInLoginResult = BuiltInLoginFailure | BuiltInLoginSuccess;
+export type BuiltInLogoutResult = {
+    status: 204;
+    cookie: SessionCookie;
+};
+export declare function hashSessionToken(token: string): string;
+export declare function readSessionToken(req: AdminHttpRequest): string | null;
+export declare function sessionCookie(token: string, config: BuiltInAuthConfig, basePath: string, expires: Date): SessionCookie;
+export declare function clearedSessionCookie(config: BuiltInAuthConfig, basePath: string): SessionCookie;
+export declare function builtInUserToAdminUser(user: BuiltInUserRecord): AdminUser | null;
+export declare function resolveAuthStore(adapter: DataAdapter, auth: BuiltInAuthConfig): AdminAuthStore;
+export declare function authenticateSession(store: AdminAuthStore, token: string | null): Promise<AdminUser | null>;
+export declare function authenticateBuiltInRequest(req: AdminHttpRequest, store: AdminAuthStore): Promise<AdminUser | null>;
+export declare function loginWithPassword(store: AdminAuthStore, config: BuiltInAuthConfig, credentials: {
+    identifier: string;
+    password: string;
+}, basePath: string): Promise<BuiltInLoginResult>;
+export declare function logoutBuiltIn(store: AdminAuthStore, req: AdminHttpRequest, config: BuiltInAuthConfig, basePath: string): Promise<BuiltInLogoutResult>;