@paperclipai/server 0.2.2

package/dist/index.js

@@ -0,0 +1,439 @@
+/// <reference path="./types/express.d.ts" />
+import { existsSync, readFileSync, rmSync } from "node:fs";
+import { createServer } from "node:http";
+import { resolve } from "node:path";
+import { createInterface } from "node:readline/promises";
+import { stdin, stdout } from "node:process";
+import { and, eq } from "drizzle-orm";
+import { createDb, ensurePostgresDatabase, inspectMigrations, applyPendingMigrations, reconcilePendingMigrationHistory, authUsers, companies, companyMemberships, instanceUserRoles, } from "@paperclipai/db";
+import detectPort from "detect-port";
+import { createApp } from "./app.js";
+import { loadConfig } from "./config.js";
+import { logger } from "./middleware/logger.js";
+import { setupLiveEventsWebSocketServer } from "./realtime/live-events-ws.js";
+import { heartbeatService } from "./services/index.js";
+import { createStorageServiceFromConfig } from "./storage/index.js";
+import { printStartupBanner } from "./startup-banner.js";
+import { getBoardClaimWarningUrl, initializeBoardClaimChallenge } from "./board-claim.js";
+import { createBetterAuthHandler, createBetterAuthInstance, resolveBetterAuthSession, resolveBetterAuthSessionFromHeaders, } from "./auth/better-auth.js";
+const config = loadConfig();
+if (process.env.PAPERCLIP_SECRETS_PROVIDER === undefined) {
+    process.env.PAPERCLIP_SECRETS_PROVIDER = config.secretsProvider;
+}
+if (process.env.PAPERCLIP_SECRETS_STRICT_MODE === undefined) {
+    process.env.PAPERCLIP_SECRETS_STRICT_MODE = config.secretsStrictMode ? "true" : "false";
+}
+if (process.env.PAPERCLIP_SECRETS_MASTER_KEY_FILE === undefined) {
+    process.env.PAPERCLIP_SECRETS_MASTER_KEY_FILE = config.secretsMasterKeyFilePath;
+}
+function formatPendingMigrationSummary(migrations) {
+    if (migrations.length === 0)
+        return "none";
+    return migrations.length > 3
+        ? `${migrations.slice(0, 3).join(", ")} (+${migrations.length - 3} more)`
+        : migrations.join(", ");
+}
+async function promptApplyMigrations(migrations) {
+    if (process.env.PAPERCLIP_MIGRATION_PROMPT === "never")
+        return false;
+    if (process.env.PAPERCLIP_MIGRATION_AUTO_APPLY === "true")
+        return true;
+    if (!stdin.isTTY || !stdout.isTTY)
+        return true;
+    const prompt = createInterface({ input: stdin, output: stdout });
+    try {
+        const answer = (await prompt.question(`Apply pending migrations (${formatPendingMigrationSummary(migrations)}) now? (y/N): `)).trim().toLowerCase();
+        return answer === "y" || answer === "yes";
+    }
+    finally {
+        prompt.close();
+    }
+}
+async function ensureMigrations(connectionString, label, opts) {
+    const autoApply = opts?.autoApply === true;
+    let state = await inspectMigrations(connectionString);
+    if (state.status === "needsMigrations" && state.reason === "pending-migrations") {
+        const repair = await reconcilePendingMigrationHistory(connectionString);
+        if (repair.repairedMigrations.length > 0) {
+            logger.warn({ repairedMigrations: repair.repairedMigrations }, `${label} had drifted migration history; repaired migration journal entries from existing schema state.`);
+            state = await inspectMigrations(connectionString);
+            if (state.status === "upToDate")
+                return "already applied";
+        }
+    }
+    if (state.status === "upToDate")
+        return "already applied";
+    if (state.status === "needsMigrations" && state.reason === "no-migration-journal-non-empty-db") {
+        logger.warn({ tableCount: state.tableCount }, `${label} has existing tables but no migration journal. Run migrations manually to sync schema.`);
+        const apply = autoApply ? true : await promptApplyMigrations(state.pendingMigrations);
+        if (!apply) {
+            logger.warn({ pendingMigrations: state.pendingMigrations }, `${label} has pending migrations; continuing without applying. Run pnpm db:migrate to apply before startup.`);
+            return "pending migrations skipped";
+        }
+        logger.info({ pendingMigrations: state.pendingMigrations }, `Applying ${state.pendingMigrations.length} pending migrations for ${label}`);
+        await applyPendingMigrations(connectionString);
+        return "applied (pending migrations)";
+    }
+    const apply = autoApply ? true : await promptApplyMigrations(state.pendingMigrations);
+    if (!apply) {
+        logger.warn({ pendingMigrations: state.pendingMigrations }, `${label} has pending migrations; continuing without applying. Run pnpm db:migrate to apply before startup.`);
+        return "pending migrations skipped";
+    }
+    logger.info({ pendingMigrations: state.pendingMigrations }, `Applying ${state.pendingMigrations.length} pending migrations for ${label}`);
+    await applyPendingMigrations(connectionString);
+    return "applied (pending migrations)";
+}
+function isLoopbackHost(host) {
+    const normalized = host.trim().toLowerCase();
+    return normalized === "127.0.0.1" || normalized === "localhost" || normalized === "::1";
+}
+const LOCAL_BOARD_USER_ID = "local-board";
+const LOCAL_BOARD_USER_EMAIL = "local@paperclip.local";
+const LOCAL_BOARD_USER_NAME = "Board";
+async function ensureLocalTrustedBoardPrincipal(db) {
+    const now = new Date();
+    const existingUser = await db
+        .select({ id: authUsers.id })
+        .from(authUsers)
+        .where(eq(authUsers.id, LOCAL_BOARD_USER_ID))
+        .then((rows) => rows[0] ?? null);
+    if (!existingUser) {
+        await db.insert(authUsers).values({
+            id: LOCAL_BOARD_USER_ID,
+            name: LOCAL_BOARD_USER_NAME,
+            email: LOCAL_BOARD_USER_EMAIL,
+            emailVerified: true,
+            image: null,
+            createdAt: now,
+            updatedAt: now,
+        });
+    }
+    const role = await db
+        .select({ id: instanceUserRoles.id })
+        .from(instanceUserRoles)
+        .where(and(eq(instanceUserRoles.userId, LOCAL_BOARD_USER_ID), eq(instanceUserRoles.role, "instance_admin")))
+        .then((rows) => rows[0] ?? null);
+    if (!role) {
+        await db.insert(instanceUserRoles).values({
+            userId: LOCAL_BOARD_USER_ID,
+            role: "instance_admin",
+        });
+    }
+    const companyRows = await db.select({ id: companies.id }).from(companies);
+    for (const company of companyRows) {
+        const membership = await db
+            .select({ id: companyMemberships.id })
+            .from(companyMemberships)
+            .where(and(eq(companyMemberships.companyId, company.id), eq(companyMemberships.principalType, "user"), eq(companyMemberships.principalId, LOCAL_BOARD_USER_ID)))
+            .then((rows) => rows[0] ?? null);
+        if (membership)
+            continue;
+        await db.insert(companyMemberships).values({
+            companyId: company.id,
+            principalType: "user",
+            principalId: LOCAL_BOARD_USER_ID,
+            status: "active",
+            membershipRole: "owner",
+        });
+    }
+}
+let db;
+let embeddedPostgres = null;
+let embeddedPostgresStartedByThisProcess = false;
+let migrationSummary = "skipped";
+let startupDbInfo;
+if (config.databaseUrl) {
+    migrationSummary = await ensureMigrations(config.databaseUrl, "PostgreSQL");
+    db = createDb(config.databaseUrl);
+    logger.info("Using external PostgreSQL via DATABASE_URL/config");
+    startupDbInfo = { mode: "external-postgres", connectionString: config.databaseUrl };
+}
+else {
+    const moduleName = "embedded-postgres";
+    let EmbeddedPostgres;
+    try {
+        const mod = await import(moduleName);
+        EmbeddedPostgres = mod.default;
+    }
+    catch {
+        throw new Error("Embedded PostgreSQL mode requires optional dependency `embedded-postgres`. Install optional dependencies or set DATABASE_URL for external Postgres.");
+    }
+    const dataDir = resolve(config.embeddedPostgresDataDir);
+    const configuredPort = config.embeddedPostgresPort;
+    let port = configuredPort;
+    const embeddedPostgresLogBuffer = [];
+    const EMBEDDED_POSTGRES_LOG_BUFFER_LIMIT = 120;
+    const verboseEmbeddedPostgresLogs = process.env.PAPERCLIP_EMBEDDED_POSTGRES_VERBOSE === "true";
+    const appendEmbeddedPostgresLog = (message) => {
+        const text = typeof message === "string" ? message : message instanceof Error ? message.message : String(message ?? "");
+        for (const lineRaw of text.split(/\r?\n/)) {
+            const line = lineRaw.trim();
+            if (!line)
+                continue;
+            embeddedPostgresLogBuffer.push(line);
+            if (embeddedPostgresLogBuffer.length > EMBEDDED_POSTGRES_LOG_BUFFER_LIMIT) {
+                embeddedPostgresLogBuffer.splice(0, embeddedPostgresLogBuffer.length - EMBEDDED_POSTGRES_LOG_BUFFER_LIMIT);
+            }
+            if (verboseEmbeddedPostgresLogs) {
+                logger.info({ embeddedPostgresLog: line }, "embedded-postgres");
+            }
+        }
+    };
+    const logEmbeddedPostgresFailure = (phase, err) => {
+        if (embeddedPostgresLogBuffer.length > 0) {
+            logger.error({
+                phase,
+                recentLogs: embeddedPostgresLogBuffer,
+                err,
+            }, "Embedded PostgreSQL failed; showing buffered startup logs");
+        }
+    };
+    if (config.databaseMode === "postgres") {
+        logger.warn("Database mode is postgres but no connection string was set; falling back to embedded PostgreSQL");
+    }
+    const clusterVersionFile = resolve(dataDir, "PG_VERSION");
+    const clusterAlreadyInitialized = existsSync(clusterVersionFile);
+    const postmasterPidFile = resolve(dataDir, "postmaster.pid");
+    const isPidRunning = (pid) => {
+        try {
+            process.kill(pid, 0);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    };
+    const getRunningPid = () => {
+        if (!existsSync(postmasterPidFile))
+            return null;
+        try {
+            const pidLine = readFileSync(postmasterPidFile, "utf8").split("\n")[0]?.trim();
+            const pid = Number(pidLine);
+            if (!Number.isInteger(pid) || pid <= 0)
+                return null;
+            if (!isPidRunning(pid))
+                return null;
+            return pid;
+        }
+        catch {
+            return null;
+        }
+    };
+    const runningPid = getRunningPid();
+    if (runningPid) {
+        logger.warn(`Embedded PostgreSQL already running; reusing existing process (pid=${runningPid}, port=${port})`);
+    }
+    else {
+        const detectedPort = await detectPort(configuredPort);
+        if (detectedPort !== configuredPort) {
+            logger.warn(`Embedded PostgreSQL port is in use; using next free port (requestedPort=${configuredPort}, selectedPort=${detectedPort})`);
+        }
+        port = detectedPort;
+        logger.info(`Using embedded PostgreSQL because no DATABASE_URL set (dataDir=${dataDir}, port=${port})`);
+        embeddedPostgres = new EmbeddedPostgres({
+            databaseDir: dataDir,
+            user: "paperclip",
+            password: "paperclip",
+            port,
+            persistent: true,
+            onLog: appendEmbeddedPostgresLog,
+            onError: appendEmbeddedPostgresLog,
+        });
+        if (!clusterAlreadyInitialized) {
+            try {
+                await embeddedPostgres.initialise();
+            }
+            catch (err) {
+                logEmbeddedPostgresFailure("initialise", err);
+                throw err;
+            }
+        }
+        else {
+            logger.info(`Embedded PostgreSQL cluster already exists (${clusterVersionFile}); skipping init`);
+        }
+        if (existsSync(postmasterPidFile)) {
+            logger.warn("Removing stale embedded PostgreSQL lock file");
+            rmSync(postmasterPidFile, { force: true });
+        }
+        try {
+            await embeddedPostgres.start();
+        }
+        catch (err) {
+            logEmbeddedPostgresFailure("start", err);
+            throw err;
+        }
+        embeddedPostgresStartedByThisProcess = true;
+    }
+    const embeddedAdminConnectionString = `postgres://paperclip:paperclip@127.0.0.1:${port}/postgres`;
+    const dbStatus = await ensurePostgresDatabase(embeddedAdminConnectionString, "paperclip");
+    if (dbStatus === "created") {
+        logger.info("Created embedded PostgreSQL database: paperclip");
+    }
+    const embeddedConnectionString = `postgres://paperclip:paperclip@127.0.0.1:${port}/paperclip`;
+    const shouldAutoApplyFirstRunMigrations = !clusterAlreadyInitialized || dbStatus === "created";
+    if (shouldAutoApplyFirstRunMigrations) {
+        logger.info("Detected first-run embedded PostgreSQL setup; applying pending migrations automatically");
+    }
+    migrationSummary = await ensureMigrations(embeddedConnectionString, "Embedded PostgreSQL", {
+        autoApply: shouldAutoApplyFirstRunMigrations,
+    });
+    db = createDb(embeddedConnectionString);
+    logger.info("Embedded PostgreSQL ready");
+    startupDbInfo = { mode: "embedded-postgres", dataDir, port };
+}
+if (config.deploymentMode === "local_trusted" && !isLoopbackHost(config.host)) {
+    throw new Error(`local_trusted mode requires loopback host binding (received: ${config.host}). ` +
+        "Use authenticated mode for non-loopback deployments.");
+}
+if (config.deploymentMode === "local_trusted" && config.deploymentExposure !== "private") {
+    throw new Error("local_trusted mode only supports private exposure");
+}
+if (config.deploymentMode === "authenticated") {
+    if (config.authBaseUrlMode === "explicit" && !config.authPublicBaseUrl) {
+        throw new Error("auth.baseUrlMode=explicit requires auth.publicBaseUrl");
+    }
+    if (config.deploymentExposure === "public") {
+        if (config.authBaseUrlMode !== "explicit") {
+            throw new Error("authenticated public exposure requires auth.baseUrlMode=explicit");
+        }
+        if (!config.authPublicBaseUrl) {
+            throw new Error("authenticated public exposure requires auth.publicBaseUrl");
+        }
+    }
+}
+let authReady = config.deploymentMode === "local_trusted";
+let betterAuthHandler;
+let resolveSession;
+let resolveSessionFromHeaders;
+if (config.deploymentMode === "local_trusted") {
+    await ensureLocalTrustedBoardPrincipal(db);
+}
+if (config.deploymentMode === "authenticated") {
+    const betterAuthSecret = process.env.BETTER_AUTH_SECRET?.trim() ?? process.env.PAPERCLIP_AGENT_JWT_SECRET?.trim();
+    if (!betterAuthSecret) {
+        throw new Error("authenticated mode requires BETTER_AUTH_SECRET (or PAPERCLIP_AGENT_JWT_SECRET) to be set");
+    }
+    const auth = createBetterAuthInstance(db, config);
+    betterAuthHandler = createBetterAuthHandler(auth);
+    resolveSession = (req) => resolveBetterAuthSession(auth, req);
+    resolveSessionFromHeaders = (headers) => resolveBetterAuthSessionFromHeaders(auth, headers);
+    await initializeBoardClaimChallenge(db, { deploymentMode: config.deploymentMode });
+    authReady = true;
+}
+const uiMode = config.uiDevMiddleware ? "vite-dev" : config.serveUi ? "static" : "none";
+const storageService = createStorageServiceFromConfig(config);
+const app = await createApp(db, {
+    uiMode,
+    storageService,
+    deploymentMode: config.deploymentMode,
+    deploymentExposure: config.deploymentExposure,
+    allowedHostnames: config.allowedHostnames,
+    bindHost: config.host,
+    authReady,
+    companyDeletionEnabled: config.companyDeletionEnabled,
+    betterAuthHandler,
+    resolveSession,
+});
+const server = createServer(app);
+const listenPort = await detectPort(config.port);
+if (listenPort !== config.port) {
+    logger.warn(`Requested port is busy; using next free port (requestedPort=${config.port}, selectedPort=${listenPort})`);
+}
+const runtimeListenHost = config.host;
+const runtimeApiHost = runtimeListenHost === "0.0.0.0" || runtimeListenHost === "::"
+    ? "localhost"
+    : runtimeListenHost;
+process.env.PAPERCLIP_LISTEN_HOST = runtimeListenHost;
+process.env.PAPERCLIP_LISTEN_PORT = String(listenPort);
+process.env.PAPERCLIP_API_URL = `http://${runtimeApiHost}:${listenPort}`;
+setupLiveEventsWebSocketServer(server, db, {
+    deploymentMode: config.deploymentMode,
+    resolveSessionFromHeaders,
+});
+if (config.heartbeatSchedulerEnabled) {
+    const heartbeat = heartbeatService(db);
+    // Reap orphaned runs at startup (no threshold -- runningProcesses is empty)
+    void heartbeat.reapOrphanedRuns().catch((err) => {
+        logger.error({ err }, "startup reap of orphaned heartbeat runs failed");
+    });
+    setInterval(() => {
+        void heartbeat
+            .tickTimers(new Date())
+            .then((result) => {
+            if (result.enqueued > 0) {
+                logger.info({ ...result }, "heartbeat timer tick enqueued runs");
+            }
+        })
+            .catch((err) => {
+            logger.error({ err }, "heartbeat timer tick failed");
+        });
+        // Periodically reap orphaned runs (5-min staleness threshold)
+        void heartbeat
+            .reapOrphanedRuns({ staleThresholdMs: 5 * 60 * 1000 })
+            .catch((err) => {
+            logger.error({ err }, "periodic reap of orphaned heartbeat runs failed");
+        });
+    }, config.heartbeatSchedulerIntervalMs);
+}
+server.listen(listenPort, config.host, () => {
+    logger.info(`Server listening on ${config.host}:${listenPort}`);
+    if (process.env.PAPERCLIP_OPEN_ON_LISTEN === "true") {
+        const openHost = config.host === "0.0.0.0" || config.host === "::" ? "127.0.0.1" : config.host;
+        const url = `http://${openHost}:${listenPort}`;
+        void import("open")
+            .then((mod) => mod.default(url))
+            .then(() => {
+            logger.info(`Opened browser at ${url}`);
+        })
+            .catch((err) => {
+            logger.warn({ err, url }, "Failed to open browser on startup");
+        });
+    }
+    printStartupBanner({
+        host: config.host,
+        deploymentMode: config.deploymentMode,
+        deploymentExposure: config.deploymentExposure,
+        authReady,
+        requestedPort: config.port,
+        listenPort,
+        uiMode,
+        db: startupDbInfo,
+        migrationSummary,
+        heartbeatSchedulerEnabled: config.heartbeatSchedulerEnabled,
+        heartbeatSchedulerIntervalMs: config.heartbeatSchedulerIntervalMs,
+    });
+    const boardClaimUrl = getBoardClaimWarningUrl(config.host, listenPort);
+    if (boardClaimUrl) {
+        const red = "\x1b[41m\x1b[30m";
+        const yellow = "\x1b[33m";
+        const reset = "\x1b[0m";
+        console.log([
+            `${red}  BOARD CLAIM REQUIRED  ${reset}`,
+            `${yellow}This instance was previously local_trusted and still has local-board as the only admin.${reset}`,
+            `${yellow}Sign in with a real user and open this one-time URL to claim ownership:${reset}`,
+            `${yellow}${boardClaimUrl}${reset}`,
+            `${yellow}If you are connecting over Tailscale, replace the host in this URL with your Tailscale IP/MagicDNS name.${reset}`,
+        ].join("\n"));
+    }
+});
+if (embeddedPostgres && embeddedPostgresStartedByThisProcess) {
+    const shutdown = async (signal) => {
+        logger.info({ signal }, "Stopping embedded PostgreSQL");
+        try {
+            await embeddedPostgres?.stop();
+        }
+        catch (err) {
+            logger.error({ err }, "Failed to stop embedded PostgreSQL cleanly");
+        }
+        finally {
+            process.exit(0);
+        }
+    };
+    process.once("SIGINT", () => {
+        void shutdown("SIGINT");
+    });
+    process.once("SIGTERM", () => {
+        void shutdown("SIGTERM");
+    });
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EACL,QAAQ,EACR,sBAAsB,EACtB,iBAAiB,EACjB,sBAAsB,EACtB,gCAAgC,EAChC,SAAS,EACT,SAAS,EACT,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,UAAU,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,8BAA8B,EAAE,MAAM,8BAA8B,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,8BAA8B,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAC1F,OAAO,EACL,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,mCAAmC,GACpC,MAAM,uBAAuB,CAAC;AAkB/B,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,SAAS,EAAE,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,0BAA0B,GAAG,MAAM,CAAC,eAAe,CAAC;AAClE,CAAC;AACD,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,SAAS,EAAE,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;AAC1F,CAAC;AACD,IAAI,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,SAAS,EAAE,CAAC;IAChE,OAAO,CAAC,GAAG,CAAC,iCAAiC,GAAG,MAAM,CAAC,wBAAwB,CAAC;AAClF,CAAC;AASD,SAAS,6BAA6B,CAAC,UAAoB;IACzD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3C,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC;QAC1B,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,GAAG,CAAC,QAAQ;QACzE,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,UAAoB;IACvD,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CACnC,6BAA6B,6BAA6B,CAAC,UAAU,CAAC,gBAAgB,CACvF,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACxB,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,KAAK,CAAC;IAC5C,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAMD,KAAK,UAAU,gBAAgB,CAC7B,gBAAwB,EACxB,KAAa,EACb,IAA8B;IAE9B,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,KAAK,IAAI,CAAC;IAC3C,IAAI,KAAK,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IACtD,IAAI,KAAK,CAAC,MAAM,KAAK,iBAAiB,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QAChF,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,gBAAgB,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CACT,EAAE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB,EAAE,EACjD,GAAG,KAAK,gGAAgG,CACzG,CAAC;YACF,KAAK,GAAG,MAAM,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,iBAAiB,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,OAAO,iBAAiB,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,iBAAiB,IAAI,KAAK,CAAC,MAAM,KAAK,mCAAmC,EAAE,CAAC;QAC/F,MAAM,CAAC,IAAI,CACT,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAChC,GAAG,KAAK,wFAAwF,CACjG,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACtF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CACT,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,EAC9C,GAAG,KAAK,oGAAoG,CAC7G,CAAC;YACF,OAAO,4BAA4B,CAAC;QACtC,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,EAAE,YAAY,KAAK,CAAC,iBAAiB,CAAC,MAAM,2BAA2B,KAAK,EAAE,CAAC,CAAC;QAC1I,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,OAAO,8BAA8B,CAAC;IACxC,CAAC;IAED,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,qBAAqB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACtF,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,IAAI,CACT,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,EAC9C,GAAG,KAAK,oGAAoG,CAC7G,CAAC;QACF,OAAO,4BAA4B,CAAC;IACtC,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB,EAAE,EAAE,YAAY,KAAK,CAAC,iBAAiB,CAAC,MAAM,2BAA2B,KAAK,EAAE,CAAC,CAAC;IAC1I,MAAM,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IAC/C,OAAO,8BAA8B,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,KAAK,CAAC;AAC1F,CAAC;AAED,MAAM,mBAAmB,GAAG,aAAa,CAAC;AAC1C,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AACvD,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAEtC,KAAK,UAAU,gCAAgC,CAAC,EAAO;IACrD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,MAAM,YAAY,GAAG,MAAM,EAAE;SAC1B,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;SAC5B,IAAI,CAAC,SAAS,CAAC;SACf,KAAK,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;SAC5C,IAAI,CAAC,CAAC,IAA2B,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAE1D,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;YAChC,EAAE,EAAE,mBAAmB;YACvB,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,sBAAsB;YAC7B,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,IAAI;YACX,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,EAAE;SAClB,MAAM,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC;SACpC,IAAI,CAAC,iBAAiB,CAAC;SACvB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;SAC3G,IAAI,CAAC,CAAC,IAA2B,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC;YACxC,MAAM,EAAE,mBAAmB;YAC3B,IAAI,EAAE,gBAAgB;SACvB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1E,KAAK,MAAM,OAAO,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,UAAU,GAAG,MAAM,EAAE;aACxB,MAAM,CAAC,EAAE,EAAE,EAAE,kBAAkB,CAAC,EAAE,EAAE,CAAC;aACrC,IAAI,CAAC,kBAAkB,CAAC;aACxB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC,EAC5C,EAAE,CAAC,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,EAC5C,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,mBAAmB,CAAC,CACxD,CACF;aACA,IAAI,CAAC,CAAC,IAA2B,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAC1D,IAAI,UAAU;YAAE,SAAS;QACzB,MAAM,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC;YACzC,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,aAAa,EAAE,MAAM;YACrB,WAAW,EAAE,mBAAmB;YAChC,MAAM,EAAE,QAAQ;YAChB,cAAc,EAAE,OAAO;SACxB,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC;AACP,IAAI,gBAAgB,GAAoC,IAAI,CAAC;AAC7D,IAAI,oCAAoC,GAAG,KAAK,CAAC;AACjD,IAAI,gBAAgB,GAAqB,SAAS,CAAC;AACnD,IAAI,aAE4D,CAAC;AACjE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAE5E,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAClC,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;IACjE,aAAa,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;AACtF,CAAC;KAAM,CAAC;IACN,MAAM,UAAU,GAAG,mBAAmB,CAAC;IACvC,IAAI,gBAAsC,CAAC;IAC3C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;QACrC,gBAAgB,GAAG,GAAG,CAAC,OAA+B,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,qJAAqJ,CACtJ,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,MAAM,CAAC,oBAAoB,CAAC;IACnD,IAAI,IAAI,GAAG,cAAc,CAAC;IAC1B,MAAM,yBAAyB,GAAa,EAAE,CAAC;IAC/C,MAAM,kCAAkC,GAAG,GAAG,CAAC;IAC/C,MAAM,2BAA2B,GAAG,OAAO,CAAC,GAAG,CAAC,mCAAmC,KAAK,MAAM,CAAC;IAC/F,MAAM,yBAAyB,GAAG,CAAC,OAAgB,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACxH,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;YAC5B,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,yBAAyB,CAAC,MAAM,GAAG,kCAAkC,EAAE,CAAC;gBAC1E,yBAAyB,CAAC,MAAM,CAAC,CAAC,EAAE,yBAAyB,CAAC,MAAM,GAAG,kCAAkC,CAAC,CAAC;YAC7G,CAAC;YACD,IAAI,2BAA2B,EAAE,CAAC;gBAChC,MAAM,CAAC,IAAI,CAAC,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAC;YAClE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,0BAA0B,GAAG,CAAC,KAA6B,EAAE,GAAY,EAAE,EAAE;QACjF,IAAI,yBAAyB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,KAAK,CACV;gBACE,KAAK;gBACL,UAAU,EAAE,yBAAyB;gBACrC,GAAG;aACJ,EACD,2DAA2D,CAC5D,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,MAAM,CAAC,YAAY,KAAK,UAAU,EAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,iGAAiG,CAAC,CAAC;IACjH,CAAC;IAED,MAAM,kBAAkB,GAAG,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC1D,MAAM,yBAAyB,GAAG,UAAU,CAAC,kBAAkB,CAAC,CAAC;IACjE,MAAM,iBAAiB,GAAG,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IAC7D,MAAM,YAAY,GAAG,CAAC,GAAW,EAAW,EAAE;QAC5C,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,GAAkB,EAAE;QACxC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YAC/E,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YACpC,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;IACnC,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,sEAAsE,UAAU,UAAU,IAAI,GAAG,CAAC,CAAC;IACjH,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,YAAY,KAAK,cAAc,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC,2EAA2E,cAAc,kBAAkB,YAAY,GAAG,CAAC,CAAC;QAC1I,CAAC;QACD,IAAI,GAAG,YAAY,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,kEAAkE,OAAO,UAAU,IAAI,GAAG,CAAC,CAAC;QACxG,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;YACtC,WAAW,EAAE,OAAO;YACpB,IAAI,EAAE,WAAW;YACjB,QAAQ,EAAE,WAAW;YACrB,IAAI;YACJ,UAAU,EAAE,IAAI;YAChB,KAAK,EAAE,yBAAyB;YAChC,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;QAEH,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,gBAAgB,CAAC,UAAU,EAAE,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,0BAA0B,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBAC9C,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,+CAA+C,kBAAkB,kBAAkB,CAAC,CAAC;QACnG,CAAC;QAED,IAAI,UAAU,CAAC,iBAAiB,CAAC,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC5D,MAAM,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC;YACH,MAAM,gBAAgB,CAAC,KAAK,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,0BAA0B,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACzC,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,oCAAoC,GAAG,IAAI,CAAC;IAC9C,CAAC;IAED,MAAM,6BAA6B,GAAG,4CAA4C,IAAI,WAAW,CAAC;IAClG,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,6BAA6B,EAAE,WAAW,CAAC,CAAC;IAC1F,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,wBAAwB,GAAG,4CAA4C,IAAI,YAAY,CAAC;IAC9F,MAAM,iCAAiC,GAAG,CAAC,yBAAyB,IAAI,QAAQ,KAAK,SAAS,CAAC;IAC/F,IAAI,iCAAiC,EAAE,CAAC;QACtC,MAAM,CAAC,IAAI,CAAC,yFAAyF,CAAC,CAAC;IACzG,CAAC;IACD,gBAAgB,GAAG,MAAM,gBAAgB,CAAC,wBAAwB,EAAE,qBAAqB,EAAE;QACzF,SAAS,EAAE,iCAAiC;KAC7C,CAAC,CAAC;IAEH,EAAE,GAAG,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IACxC,MAAM,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACzC,aAAa,GAAG,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC/D,CAAC;AAED,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IAC9E,MAAM,IAAI,KAAK,CACb,gEAAgE,MAAM,CAAC,IAAI,KAAK;QAC9E,sDAAsD,CACzD,CAAC;AACJ,CAAC;AAED,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,IAAI,MAAM,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;IACzF,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;AACvE,CAAC;AAED,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,EAAE,CAAC;IAC9C,IAAI,MAAM,CAAC,eAAe,KAAK,UAAU,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,kBAAkB,KAAK,QAAQ,EAAE,CAAC;QAC3C,IAAI,MAAM,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,SAAS,GAAG,MAAM,CAAC,cAAc,KAAK,eAAe,CAAC;AAC1D,IAAI,iBAAyE,CAAC;AAC9E,IAAI,cAES,CAAC;AACd,IAAI,yBAES,CAAC;AACd,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,EAAE,CAAC;IAC9C,MAAM,gCAAgC,CAAC,EAAS,CAAC,CAAC;AACpD,CAAC;AACD,IAAI,MAAM,CAAC,cAAc,KAAK,eAAe,EAAE,CAAC;IAC9C,MAAM,gBAAgB,GACpB,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAC3F,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,wBAAwB,CAAC,EAAS,EAAE,MAAM,CAAC,CAAC;IACzD,iBAAiB,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;IAClD,cAAc,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC9D,yBAAyB,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,mCAAmC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5F,MAAM,6BAA6B,CAAC,EAAS,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC;IAC1F,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,MAAM,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AACxF,MAAM,cAAc,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,EAAS,EAAE;IACrC,MAAM;IACN,cAAc;IACd,cAAc,EAAE,MAAM,CAAC,cAAc;IACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;IAC7C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;IACzC,QAAQ,EAAE,MAAM,CAAC,IAAI;IACrB,SAAS;IACT,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;IACrD,iBAAiB;IACjB,cAAc;CACf,CAAC,CAAC;AACH,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;AACjC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAEjD,IAAI,UAAU,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,MAAM,CAAC,IAAI,CAAC,+DAA+D,MAAM,CAAC,IAAI,kBAAkB,UAAU,GAAG,CAAC,CAAC;AACzH,CAAC;AAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC;AACtC,MAAM,cAAc,GAClB,iBAAiB,KAAK,SAAS,IAAI,iBAAiB,KAAK,IAAI;IAC3D,CAAC,CAAC,WAAW;IACb,CAAC,CAAC,iBAAiB,CAAC;AACxB,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,iBAAiB,CAAC;AACtD,OAAO,CAAC,GAAG,CAAC,qBAAqB,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;AACvD,OAAO,CAAC,GAAG,CAAC,iBAAiB,GAAG,UAAU,cAAc,IAAI,UAAU,EAAE,CAAC;AAEzE,8BAA8B,CAAC,MAAM,EAAE,EAAS,EAAE;IAChD,cAAc,EAAE,MAAM,CAAC,cAAc;IACrC,yBAAyB;CAC1B,CAAC,CAAC;AAEH,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;IACrC,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAS,CAAC,CAAC;IAE9C,4EAA4E;IAC5E,KAAK,SAAS,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QAC9C,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,gDAAgD,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,WAAW,CAAC,GAAG,EAAE;QACf,KAAK,SAAS;aACX,UAAU,CAAC,IAAI,IAAI,EAAE,CAAC;aACtB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,MAAM,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,MAAM,EAAE,EAAE,oCAAoC,CAAC,CAAC;YACnE,CAAC;QACH,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,6BAA6B,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEL,8DAA8D;QAC9D,KAAK,SAAS;aACX,gBAAgB,CAAC,EAAE,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;aACrD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iDAAiD,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;IACP,CAAC,EAAE,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;IAC1C,MAAM,CAAC,IAAI,CAAC,uBAAuB,MAAM,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC,CAAC;IAChE,IAAI,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,MAAM,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;QAC/F,MAAM,GAAG,GAAG,UAAU,QAAQ,IAAI,UAAU,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,MAAM,CAAC;aAChB,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;aAC/B,IAAI,CAAC,GAAG,EAAE;YACT,MAAM,CAAC,IAAI,CAAC,qBAAqB,GAAG,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACb,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,mCAAmC,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACP,CAAC;IACD,kBAAkB,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,SAAS;QACT,aAAa,EAAE,MAAM,CAAC,IAAI;QAC1B,UAAU;QACV,MAAM;QACN,EAAE,EAAE,aAAa;QACjB,gBAAgB;QAChB,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;QAC3D,4BAA4B,EAAE,MAAM,CAAC,4BAA4B;KAClE,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,uBAAuB,CAAC,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvE,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,kBAAkB,CAAC;QAC/B,MAAM,MAAM,GAAG,UAAU,CAAC;QAC1B,MAAM,KAAK,GAAG,SAAS,CAAC;QACxB,OAAO,CAAC,GAAG,CACT;YACE,GAAG,GAAG,2BAA2B,KAAK,EAAE;YACxC,GAAG,MAAM,0FAA0F,KAAK,EAAE;YAC1G,GAAG,MAAM,0EAA0E,KAAK,EAAE;YAC1F,GAAG,MAAM,GAAG,aAAa,GAAG,KAAK,EAAE;YACnC,GAAG,MAAM,2GAA2G,KAAK,EAAE;SAC5H,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,IAAI,gBAAgB,IAAI,oCAAoC,EAAE,CAAC;IAC7D,MAAM,QAAQ,GAAG,KAAK,EAAE,MAA4B,EAAE,EAAE;QACtD,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,gBAAgB,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,4CAA4C,CAAC,CAAC;QACtE,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC;IAEF,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;QAC1B,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE;QAC3B,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/middleware/auth.d.ts

@@ -0,0 +1,12 @@
+import type { Request, RequestHandler } from "express";
+import type { Db } from "@paperclipai/db";
+import type { DeploymentMode } from "@paperclipai/shared";
+import type { BetterAuthSessionResult } from "../auth/better-auth.js";
+interface ActorMiddlewareOptions {
+    deploymentMode: DeploymentMode;
+    resolveSession?: (req: Request) => Promise<BetterAuthSessionResult | null>;
+}
+export declare function actorMiddleware(db: Db, opts: ActorMiddlewareOptions): RequestHandler;
+export declare function requireBoard(req: Express.Request): boolean;
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/middleware/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEvD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AAG1C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAOtE,UAAU,sBAAsB;IAC9B,cAAc,EAAE,cAAc,CAAC;IAC/B,cAAc,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;CAC5E;AAED,wBAAgB,eAAe,CAAC,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,sBAAsB,GAAG,cAAc,CAoIpF;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,WAEhD"}

package/dist/middleware/auth.js

@@ -0,0 +1,124 @@
+import { createHash } from "node:crypto";
+import { and, eq, isNull } from "drizzle-orm";
+import { agentApiKeys, agents, companyMemberships, instanceUserRoles } from "@paperclipai/db";
+import { verifyLocalAgentJwt } from "../agent-auth-jwt.js";
+import { logger } from "./logger.js";
+function hashToken(token) {
+    return createHash("sha256").update(token).digest("hex");
+}
+export function actorMiddleware(db, opts) {
+    return async (req, _res, next) => {
+        req.actor =
+            opts.deploymentMode === "local_trusted"
+                ? { type: "board", userId: "local-board", isInstanceAdmin: true, source: "local_implicit" }
+                : { type: "none", source: "none" };
+        const runIdHeader = req.header("x-paperclip-run-id");
+        const authHeader = req.header("authorization");
+        if (!authHeader?.toLowerCase().startsWith("bearer ")) {
+            if (opts.deploymentMode === "authenticated" && opts.resolveSession) {
+                let session = null;
+                try {
+                    session = await opts.resolveSession(req);
+                }
+                catch (err) {
+                    logger.warn({ err, method: req.method, url: req.originalUrl }, "Failed to resolve auth session from request headers");
+                }
+                if (session?.user?.id) {
+                    const userId = session.user.id;
+                    const [roleRow, memberships] = await Promise.all([
+                        db
+                            .select({ id: instanceUserRoles.id })
+                            .from(instanceUserRoles)
+                            .where(and(eq(instanceUserRoles.userId, userId), eq(instanceUserRoles.role, "instance_admin")))
+                            .then((rows) => rows[0] ?? null),
+                        db
+                            .select({ companyId: companyMemberships.companyId })
+                            .from(companyMemberships)
+                            .where(and(eq(companyMemberships.principalType, "user"), eq(companyMemberships.principalId, userId), eq(companyMemberships.status, "active"))),
+                    ]);
+                    req.actor = {
+                        type: "board",
+                        userId,
+                        companyIds: memberships.map((row) => row.companyId),
+                        isInstanceAdmin: Boolean(roleRow),
+                        runId: runIdHeader ?? undefined,
+                        source: "session",
+                    };
+                    next();
+                    return;
+                }
+            }
+            if (runIdHeader)
+                req.actor.runId = runIdHeader;
+            next();
+            return;
+        }
+        const token = authHeader.slice("bearer ".length).trim();
+        if (!token) {
+            next();
+            return;
+        }
+        const tokenHash = hashToken(token);
+        const key = await db
+            .select()
+            .from(agentApiKeys)
+            .where(and(eq(agentApiKeys.keyHash, tokenHash), isNull(agentApiKeys.revokedAt)))
+            .then((rows) => rows[0] ?? null);
+        if (!key) {
+            const claims = verifyLocalAgentJwt(token);
+            if (!claims) {
+                next();
+                return;
+            }
+            const agentRecord = await db
+                .select()
+                .from(agents)
+                .where(eq(agents.id, claims.sub))
+                .then((rows) => rows[0] ?? null);
+            if (!agentRecord || agentRecord.companyId !== claims.company_id) {
+                next();
+                return;
+            }
+            if (agentRecord.status === "terminated" || agentRecord.status === "pending_approval") {
+                next();
+                return;
+            }
+            req.actor = {
+                type: "agent",
+                agentId: claims.sub,
+                companyId: claims.company_id,
+                keyId: undefined,
+                runId: runIdHeader || claims.run_id || undefined,
+                source: "agent_jwt",
+            };
+            next();
+            return;
+        }
+        await db
+            .update(agentApiKeys)
+            .set({ lastUsedAt: new Date() })
+            .where(eq(agentApiKeys.id, key.id));
+        const agentRecord = await db
+            .select()
+            .from(agents)
+            .where(eq(agents.id, key.agentId))
+            .then((rows) => rows[0] ?? null);
+        if (!agentRecord || agentRecord.status === "terminated" || agentRecord.status === "pending_approval") {
+            next();
+            return;
+        }
+        req.actor = {
+            type: "agent",
+            agentId: key.agentId,
+            companyId: key.companyId,
+            keyId: key.id,
+            runId: runIdHeader || undefined,
+            source: "agent_key",
+        };
+        next();
+    };
+}
+export function requireBoard(req) {
+    return req.actor.type === "board";
+}
+//# sourceMappingURL=auth.js.map

package/dist/middleware/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE9C,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAG3D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAOD,MAAM,UAAU,eAAe,CAAC,EAAM,EAAE,IAA4B;IAClE,OAAO,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC/B,GAAG,CAAC,KAAK;YACP,IAAI,CAAC,cAAc,KAAK,eAAe;gBACrC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE;gBAC3F,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAEvC,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QAErD,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QAC/C,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrD,IAAI,IAAI,CAAC,cAAc,KAAK,eAAe,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;gBACnE,IAAI,OAAO,GAAmC,IAAI,CAAC;gBACnD,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,IAAI,CACT,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,WAAW,EAAE,EACjD,qDAAqD,CACtD,CAAC;gBACJ,CAAC;gBACD,IAAI,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;oBACtB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC/B,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;wBAC/C,EAAE;6BACC,MAAM,CAAC,EAAE,EAAE,EAAE,iBAAiB,CAAC,EAAE,EAAE,CAAC;6BACpC,IAAI,CAAC,iBAAiB,CAAC;6BACvB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;6BAC9F,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;wBAClC,EAAE;6BACC,MAAM,CAAC,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,EAAE,CAAC;6BACnD,IAAI,CAAC,kBAAkB,CAAC;6BACxB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,kBAAkB,CAAC,aAAa,EAAE,MAAM,CAAC,EAC5C,EAAE,CAAC,kBAAkB,CAAC,WAAW,EAAE,MAAM,CAAC,EAC1C,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CACxC,CACF;qBACJ,CAAC,CAAC;oBACH,GAAG,CAAC,KAAK,GAAG;wBACV,IAAI,EAAE,OAAO;wBACb,MAAM;wBACN,UAAU,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;wBACnD,eAAe,EAAE,OAAO,CAAC,OAAO,CAAC;wBACjC,KAAK,EAAE,WAAW,IAAI,SAAS;wBAC/B,MAAM,EAAE,SAAS;qBAClB,CAAC;oBACF,IAAI,EAAE,CAAC;oBACP,OAAO;gBACT,CAAC;YACH,CAAC;YACD,IAAI,WAAW;gBAAE,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC;YAC/C,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACxD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,EAAE;aACjB,MAAM,EAAE;aACR,IAAI,CAAC,YAAY,CAAC;aAClB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;aAC/E,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAEnC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,MAAM,EAAE;iBACzB,MAAM,EAAE;iBACR,IAAI,CAAC,MAAM,CAAC;iBACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;iBAChC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;YAEnC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,SAAS,KAAK,MAAM,CAAC,UAAU,EAAE,CAAC;gBAChE,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YAED,IAAI,WAAW,CAAC,MAAM,KAAK,YAAY,IAAI,WAAW,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;gBACrF,IAAI,EAAE,CAAC;gBACP,OAAO;YACT,CAAC;YAED,GAAG,CAAC,KAAK,GAAG;gBACV,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,MAAM,CAAC,GAAG;gBACnB,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,KAAK,EAAE,SAAS;gBAChB,KAAK,EAAE,WAAW,IAAI,MAAM,CAAC,MAAM,IAAI,SAAS;gBAChD,MAAM,EAAE,WAAW;aACpB,CAAC;YACF,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,EAAE;aACL,MAAM,CAAC,YAAY,CAAC;aACpB,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aAC/B,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAEtC,MAAM,WAAW,GAAG,MAAM,EAAE;aACzB,MAAM,EAAE;aACR,IAAI,CAAC,MAAM,CAAC;aACZ,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;aACjC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAEnC,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,YAAY,IAAI,WAAW,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;YACrG,IAAI,EAAE,CAAC;YACP,OAAO;QACT,CAAC;QAED,GAAG,CAAC,KAAK,GAAG;YACV,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,KAAK,EAAE,GAAG,CAAC,EAAE;YACb,KAAK,EAAE,WAAW,IAAI,SAAS;YAC/B,MAAM,EAAE,WAAW;SACpB,CAAC;QAEF,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAoB;IAC/C,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;AACpC,CAAC"}

package/dist/middleware/board-mutation-guard.d.ts

@@ -0,0 +1,3 @@
+import type { RequestHandler } from "express";
+export declare function boardMutationGuard(): RequestHandler;
+//# sourceMappingURL=board-mutation-guard.d.ts.map

package/dist/middleware/board-mutation-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"board-mutation-guard.d.ts","sourceRoot":"","sources":["../../src/middleware/board-mutation-guard.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAW,cAAc,EAAE,MAAM,SAAS,CAAC;AAuCvD,wBAAgB,kBAAkB,IAAI,cAAc,CA2BnD"}