@portel/photon 1.4.1 → 1.6.0

package/dist/serv/db/d1-client.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Cloudflare D1 Database Client
+ *
+ * Provides typed access to D1 SQLite database
+ */
+/**
+ * Cloudflare D1 Database interface
+ * Compatible with @cloudflare/workers-types D1Database
+ */
+export interface D1Database {
+    prepare(query: string): D1PreparedStatement;
+    batch<T = unknown>(statements: D1PreparedStatement[]): Promise<D1Result<T>[]>;
+    exec(query: string): Promise<D1ExecResult>;
+}
+export interface D1PreparedStatement {
+    bind(...values: unknown[]): D1PreparedStatement;
+    first<T = unknown>(column?: string): Promise<T | null>;
+    all<T = unknown>(): Promise<D1Result<T>>;
+    run(): Promise<D1Result>;
+}
+export interface D1Result<T = unknown> {
+    results?: T[];
+    success: boolean;
+    meta?: {
+        duration: number;
+        changes: number;
+        last_row_id: number;
+    };
+}
+export interface D1ExecResult {
+    count: number;
+    duration: number;
+}
+export declare const SCHEMA = "\n-- Tenants\nCREATE TABLE IF NOT EXISTS tenants (\n  id TEXT PRIMARY KEY,\n  name TEXT NOT NULL,\n  slug TEXT UNIQUE NOT NULL,\n  region TEXT NOT NULL DEFAULT 'global',\n  plan TEXT NOT NULL DEFAULT 'free',\n  encryption_key_id TEXT NOT NULL,\n  settings TEXT NOT NULL DEFAULT '{}',\n  created_at TEXT NOT NULL DEFAULT (datetime('now'))\n);\n\nCREATE INDEX IF NOT EXISTS idx_tenants_slug ON tenants(slug);\n\n-- Users (global)\nCREATE TABLE IF NOT EXISTS users (\n  id TEXT PRIMARY KEY,\n  email TEXT UNIQUE NOT NULL,\n  email_verified INTEGER NOT NULL DEFAULT 0,\n  created_at TEXT NOT NULL DEFAULT (datetime('now'))\n);\n\nCREATE INDEX IF NOT EXISTS idx_users_email ON users(email);\n\n-- Memberships\nCREATE TABLE IF NOT EXISTS memberships (\n  tenant_id TEXT NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,\n  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,\n  role TEXT NOT NULL DEFAULT 'member',\n  status TEXT NOT NULL DEFAULT 'active',\n  invited_by TEXT REFERENCES users(id),\n  joined_at TEXT NOT NULL DEFAULT (datetime('now')),\n  PRIMARY KEY (tenant_id, user_id)\n);\n\nCREATE INDEX IF NOT EXISTS idx_memberships_user ON memberships(user_id);\n\n-- OAuth Grants\nCREATE TABLE IF NOT EXISTS photon_grants (\n  id TEXT PRIMARY KEY,\n  tenant_id TEXT NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,\n  user_id TEXT REFERENCES users(id) ON DELETE CASCADE,\n  photon_id TEXT NOT NULL,\n  provider TEXT NOT NULL,\n  scopes TEXT NOT NULL,\n  access_token_encrypted TEXT NOT NULL,\n  refresh_token_encrypted TEXT,\n  token_expires_at TEXT NOT NULL,\n  created_at TEXT NOT NULL DEFAULT (datetime('now')),\n  updated_at TEXT NOT NULL DEFAULT (datetime('now')),\n  UNIQUE (tenant_id, user_id, photon_id, provider)\n);\n\nCREATE INDEX IF NOT EXISTS idx_grants_tenant ON photon_grants(tenant_id);\nCREATE INDEX IF NOT EXISTS idx_grants_lookup ON photon_grants(tenant_id, photon_id, provider);\n\n-- Elicitation Requests (short-lived)\nCREATE TABLE IF NOT EXISTS elicitation_requests (\n  id TEXT PRIMARY KEY,\n  session_id TEXT NOT NULL,\n  photon_id TEXT NOT NULL,\n  provider TEXT NOT NULL,\n  required_scopes TEXT NOT NULL,\n  status TEXT NOT NULL DEFAULT 'pending',\n  redirect_uri TEXT NOT NULL,\n  code_verifier TEXT,\n  created_at TEXT NOT NULL DEFAULT (datetime('now')),\n  expires_at TEXT NOT NULL\n);\n\nCREATE INDEX IF NOT EXISTS idx_elicitation_session ON elicitation_requests(session_id);\nCREATE INDEX IF NOT EXISTS idx_elicitation_expires ON elicitation_requests(expires_at);\n";
+export declare class D1Client {
+    private db;
+    constructor(db: D1Database);
+    /**
+     * Initialize the database schema
+     */
+    initialize(): Promise<void>;
+    /**
+     * Execute a query and return first result
+     */
+    first<T>(query: string, ...params: unknown[]): Promise<T | null>;
+    /**
+     * Execute a query and return all results
+     */
+    all<T>(query: string, ...params: unknown[]): Promise<T[]>;
+    /**
+     * Execute a query (INSERT, UPDATE, DELETE)
+     */
+    run(query: string, ...params: unknown[]): Promise<{
+        changes: number;
+        lastRowId: number;
+    }>;
+    /**
+     * Execute multiple queries in a batch
+     */
+    batch(queries: Array<{
+        sql: string;
+        params: unknown[];
+    }>): Promise<void>;
+}
+//# sourceMappingURL=d1-client.d.ts.map

package/dist/serv/db/d1-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1-client.d.ts","sourceRoot":"","sources":["../../../src/serv/db/d1-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAMH;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAAC;IAC5C,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,mBAAmB,CAAC;IAChD,KAAK,CAAC,CAAC,GAAG,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvD,GAAG,CAAC,CAAC,GAAG,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC;CAC1B;AAED,MAAM,WAAW,QAAQ,CAAC,CAAC,GAAG,OAAO;IACnC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE;QACL,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAMD,eAAO,MAAM,MAAM,q9EAyElB,CAAC;AAMF,qBAAa,QAAQ;IACP,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,UAAU;IAElC;;OAEG;IACG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC;IAIjC;;OAEG;IACG,KAAK,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAOtE;;OAEG;IACG,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAQ/D;;OAEG;IACG,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAW/F;;OAEG;IACG,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAI/E"}

package/dist/serv/db/d1-client.js

@@ -0,0 +1,137 @@
+/**
+ * Cloudflare D1 Database Client
+ *
+ * Provides typed access to D1 SQLite database
+ */
+// ============================================================================
+// Schema
+// ============================================================================
+export const SCHEMA = `
+-- Tenants
+CREATE TABLE IF NOT EXISTS tenants (
+  id TEXT PRIMARY KEY,
+  name TEXT NOT NULL,
+  slug TEXT UNIQUE NOT NULL,
+  region TEXT NOT NULL DEFAULT 'global',
+  plan TEXT NOT NULL DEFAULT 'free',
+  encryption_key_id TEXT NOT NULL,
+  settings TEXT NOT NULL DEFAULT '{}',
+  created_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_tenants_slug ON tenants(slug);
+
+-- Users (global)
+CREATE TABLE IF NOT EXISTS users (
+  id TEXT PRIMARY KEY,
+  email TEXT UNIQUE NOT NULL,
+  email_verified INTEGER NOT NULL DEFAULT 0,
+  created_at TEXT NOT NULL DEFAULT (datetime('now'))
+);
+
+CREATE INDEX IF NOT EXISTS idx_users_email ON users(email);
+
+-- Memberships
+CREATE TABLE IF NOT EXISTS memberships (
+  tenant_id TEXT NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
+  user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  role TEXT NOT NULL DEFAULT 'member',
+  status TEXT NOT NULL DEFAULT 'active',
+  invited_by TEXT REFERENCES users(id),
+  joined_at TEXT NOT NULL DEFAULT (datetime('now')),
+  PRIMARY KEY (tenant_id, user_id)
+);
+
+CREATE INDEX IF NOT EXISTS idx_memberships_user ON memberships(user_id);
+
+-- OAuth Grants
+CREATE TABLE IF NOT EXISTS photon_grants (
+  id TEXT PRIMARY KEY,
+  tenant_id TEXT NOT NULL REFERENCES tenants(id) ON DELETE CASCADE,
+  user_id TEXT REFERENCES users(id) ON DELETE CASCADE,
+  photon_id TEXT NOT NULL,
+  provider TEXT NOT NULL,
+  scopes TEXT NOT NULL,
+  access_token_encrypted TEXT NOT NULL,
+  refresh_token_encrypted TEXT,
+  token_expires_at TEXT NOT NULL,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  updated_at TEXT NOT NULL DEFAULT (datetime('now')),
+  UNIQUE (tenant_id, user_id, photon_id, provider)
+);
+
+CREATE INDEX IF NOT EXISTS idx_grants_tenant ON photon_grants(tenant_id);
+CREATE INDEX IF NOT EXISTS idx_grants_lookup ON photon_grants(tenant_id, photon_id, provider);
+
+-- Elicitation Requests (short-lived)
+CREATE TABLE IF NOT EXISTS elicitation_requests (
+  id TEXT PRIMARY KEY,
+  session_id TEXT NOT NULL,
+  photon_id TEXT NOT NULL,
+  provider TEXT NOT NULL,
+  required_scopes TEXT NOT NULL,
+  status TEXT NOT NULL DEFAULT 'pending',
+  redirect_uri TEXT NOT NULL,
+  code_verifier TEXT,
+  created_at TEXT NOT NULL DEFAULT (datetime('now')),
+  expires_at TEXT NOT NULL
+);
+
+CREATE INDEX IF NOT EXISTS idx_elicitation_session ON elicitation_requests(session_id);
+CREATE INDEX IF NOT EXISTS idx_elicitation_expires ON elicitation_requests(expires_at);
+`;
+// ============================================================================
+// D1 Client Wrapper
+// ============================================================================
+export class D1Client {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Initialize the database schema
+     */
+    async initialize() {
+        await this.db.exec(SCHEMA);
+    }
+    /**
+     * Execute a query and return first result
+     */
+    async first(query, ...params) {
+        return this.db
+            .prepare(query)
+            .bind(...params)
+            .first();
+    }
+    /**
+     * Execute a query and return all results
+     */
+    async all(query, ...params) {
+        const result = await this.db
+            .prepare(query)
+            .bind(...params)
+            .all();
+        return result.results ?? [];
+    }
+    /**
+     * Execute a query (INSERT, UPDATE, DELETE)
+     */
+    async run(query, ...params) {
+        const result = await this.db
+            .prepare(query)
+            .bind(...params)
+            .run();
+        return {
+            changes: result.meta?.changes ?? 0,
+            lastRowId: result.meta?.last_row_id ?? 0,
+        };
+    }
+    /**
+     * Execute multiple queries in a batch
+     */
+    async batch(queries) {
+        const statements = queries.map((q) => this.db.prepare(q.sql).bind(...q.params));
+        await this.db.batch(statements);
+    }
+}
+//# sourceMappingURL=d1-client.js.map

package/dist/serv/db/d1-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1-client.js","sourceRoot":"","sources":["../../../src/serv/db/d1-client.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAsCH,+EAA+E;AAC/E,SAAS;AACT,+EAA+E;AAE/E,MAAM,CAAC,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyErB,CAAC;AAEF,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E,MAAM,OAAO,QAAQ;IACC;IAApB,YAAoB,EAAc;QAAd,OAAE,GAAF,EAAE,CAAY;IAAG,CAAC;IAEtC;;OAEG;IACH,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAI,KAAa,EAAE,GAAG,MAAiB;QAChD,OAAO,IAAI,CAAC,EAAE;aACX,OAAO,CAAC,KAAK,CAAC;aACd,IAAI,CAAC,GAAG,MAAM,CAAC;aACf,KAAK,EAAK,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAI,KAAa,EAAE,GAAG,MAAiB;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,OAAO,CAAC,KAAK,CAAC;aACd,IAAI,CAAC,GAAG,MAAM,CAAC;aACf,GAAG,EAAK,CAAC;QACZ,OAAO,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,GAAG,MAAiB;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE;aACzB,OAAO,CAAC,KAAK,CAAC;aACd,IAAI,CAAC,GAAG,MAAM,CAAC;aACf,GAAG,EAAE,CAAC;QACT,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC;YAClC,SAAS,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,CAAC;SACzC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK,CAAC,OAAkD;QAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAChF,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClC,CAAC;CACF"}

package/dist/serv/db/d1-stores.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Cloudflare D1 Store Implementations
+ *
+ * Production-ready stores using D1 SQLite database
+ */
+import type { Tenant, User, Membership, PhotonGrant, ElicitationRequest } from '../types/index.js';
+import type { TenantStore } from '../middleware/tenant.js';
+import type { UserStore, MembershipStore } from '../middleware/auth.js';
+import type { ElicitationStore, GrantStore } from '../auth/oauth.js';
+import type { D1Client } from './d1-client.js';
+export declare class D1TenantStore implements TenantStore {
+    private db;
+    constructor(db: D1Client);
+    findBySlug(slug: string): Promise<Tenant | null>;
+    findByCustomDomain(domain: string): Promise<Tenant | null>;
+    findById(id: string): Promise<Tenant | null>;
+    create(tenant: Omit<Tenant, 'createdAt'>): Promise<Tenant>;
+    update(id: string, data: Partial<Tenant>): Promise<void>;
+    delete(id: string): Promise<void>;
+    private rowToTenant;
+}
+export declare class D1UserStore implements UserStore {
+    private db;
+    constructor(db: D1Client);
+    findById(id: string): Promise<User | null>;
+    findByEmail(email: string): Promise<User | null>;
+    create(user: Omit<User, 'createdAt'>): Promise<User>;
+    update(id: string, data: Partial<User>): Promise<void>;
+    private rowToUser;
+}
+export declare class D1MembershipStore implements MembershipStore {
+    private db;
+    constructor(db: D1Client);
+    find(tenantId: string, userId: string): Promise<Membership | null>;
+    findByUser(userId: string): Promise<Membership[]>;
+    findByTenant(tenantId: string): Promise<Membership[]>;
+    create(membership: Omit<Membership, 'joinedAt'>): Promise<Membership>;
+    update(tenantId: string, userId: string, data: Partial<Membership>): Promise<void>;
+    delete(tenantId: string, userId: string): Promise<void>;
+    private rowToMembership;
+}
+export declare class D1GrantStore implements GrantStore {
+    private db;
+    constructor(db: D1Client);
+    find(tenantId: string, photonId: string, provider: string, userId?: string): Promise<PhotonGrant | null>;
+    create(grant: Omit<PhotonGrant, 'id' | 'createdAt' | 'updatedAt'>): Promise<PhotonGrant>;
+    update(id: string, data: Partial<PhotonGrant>): Promise<void>;
+    delete(id: string): Promise<void>;
+    findByUser(tenantId: string, userId: string): Promise<PhotonGrant[]>;
+    private rowToGrant;
+}
+export declare class D1ElicitationStore implements ElicitationStore {
+    private db;
+    constructor(db: D1Client);
+    create(data: Omit<ElicitationRequest, 'id' | 'createdAt'>): Promise<ElicitationRequest>;
+    get(id: string): Promise<ElicitationRequest | null>;
+    update(id: string, data: Partial<ElicitationRequest>): Promise<void>;
+    delete(id: string): Promise<void>;
+    cleanup(): Promise<number>;
+    private rowToElicitation;
+}
+//# sourceMappingURL=d1-stores.d.ts.map

package/dist/serv/db/d1-stores.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1-stores.d.ts","sourceRoot":"","sources":["../../../src/serv/db/d1-stores.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EACV,MAAM,EAEN,IAAI,EACJ,UAAU,EACV,WAAW,EACX,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAgE/C,qBAAa,aAAc,YAAW,WAAW;IACnC,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAE1B,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAKhD,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAS1D,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAK5C,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAiB1D,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBxD,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvC,OAAO,CAAC,WAAW;CAYpB;AAMD,qBAAa,WAAY,YAAW,SAAS;IAC/B,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAE1B,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAK1C,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IAQhD,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAapD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAe5D,OAAO,CAAC,SAAS;CAQlB;AAMD,qBAAa,iBAAkB,YAAW,eAAe;IAC3C,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAE1B,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IASlE,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAQjD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC;IAQrD,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC;IAerE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAsBlF,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7D,OAAO,CAAC,eAAe;CAUxB;AAMD,qBAAa,YAAa,YAAW,UAAU;IACjC,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAE1B,IAAI,CACR,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAYxB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,WAAW,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,WAAW,CAAC;IA4BxF,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB7D,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAS1E,OAAO,CAAC,UAAU;CAenB;AAMD,qBAAa,kBAAmB,YAAW,gBAAgB;IAC7C,OAAO,CAAC,EAAE;gBAAF,EAAE,EAAE,QAAQ;IAE1B,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,kBAAkB,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAyBvF,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IAkBnD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBpE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC;IAQhC,OAAO,CAAC,gBAAgB;CAczB"}

package/dist/serv/db/d1-stores.js

@@ -0,0 +1,307 @@
+/**
+ * Cloudflare D1 Store Implementations
+ *
+ * Production-ready stores using D1 SQLite database
+ */
+import { randomUUID } from 'crypto';
+// ============================================================================
+// D1 Tenant Store
+// ============================================================================
+export class D1TenantStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async findBySlug(slug) {
+        const row = await this.db.first('SELECT * FROM tenants WHERE slug = ?', slug);
+        return row ? this.rowToTenant(row) : null;
+    }
+    async findByCustomDomain(domain) {
+        // Query tenants where settings.customDomain matches
+        const rows = await this.db.all("SELECT * FROM tenants WHERE json_extract(settings, '$.customDomain') = ?", domain);
+        return rows.length > 0 ? this.rowToTenant(rows[0]) : null;
+    }
+    async findById(id) {
+        const row = await this.db.first('SELECT * FROM tenants WHERE id = ?', id);
+        return row ? this.rowToTenant(row) : null;
+    }
+    async create(tenant) {
+        const now = new Date().toISOString();
+        await this.db.run(`INSERT INTO tenants (id, name, slug, region, plan, encryption_key_id, settings, created_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?)`, tenant.id, tenant.name, tenant.slug, tenant.region, tenant.plan, tenant.encryptionKeyId, JSON.stringify(tenant.settings), now);
+        return { ...tenant, createdAt: new Date(now) };
+    }
+    async update(id, data) {
+        const updates = [];
+        const params = [];
+        if (data.name !== undefined) {
+            updates.push('name = ?');
+            params.push(data.name);
+        }
+        if (data.plan !== undefined) {
+            updates.push('plan = ?');
+            params.push(data.plan);
+        }
+        if (data.settings !== undefined) {
+            updates.push('settings = ?');
+            params.push(JSON.stringify(data.settings));
+        }
+        if (updates.length === 0)
+            return;
+        params.push(id);
+        await this.db.run(`UPDATE tenants SET ${updates.join(', ')} WHERE id = ?`, ...params);
+    }
+    async delete(id) {
+        await this.db.run('DELETE FROM tenants WHERE id = ?', id);
+    }
+    rowToTenant(row) {
+        return {
+            id: row.id,
+            name: row.name,
+            slug: row.slug,
+            region: row.region,
+            plan: row.plan,
+            encryptionKeyId: row.encryption_key_id,
+            settings: JSON.parse(row.settings),
+            createdAt: new Date(row.created_at),
+        };
+    }
+}
+// ============================================================================
+// D1 User Store
+// ============================================================================
+export class D1UserStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async findById(id) {
+        const row = await this.db.first('SELECT * FROM users WHERE id = ?', id);
+        return row ? this.rowToUser(row) : null;
+    }
+    async findByEmail(email) {
+        const row = await this.db.first('SELECT * FROM users WHERE email = ?', email.toLowerCase());
+        return row ? this.rowToUser(row) : null;
+    }
+    async create(user) {
+        const now = new Date().toISOString();
+        await this.db.run(`INSERT INTO users (id, email, email_verified, created_at)
+       VALUES (?, ?, ?, ?)`, user.id, user.email.toLowerCase(), user.emailVerified ? 1 : 0, now);
+        return { ...user, createdAt: new Date(now) };
+    }
+    async update(id, data) {
+        const updates = [];
+        const params = [];
+        if (data.emailVerified !== undefined) {
+            updates.push('email_verified = ?');
+            params.push(data.emailVerified ? 1 : 0);
+        }
+        if (updates.length === 0)
+            return;
+        params.push(id);
+        await this.db.run(`UPDATE users SET ${updates.join(', ')} WHERE id = ?`, ...params);
+    }
+    rowToUser(row) {
+        return {
+            id: row.id,
+            email: row.email,
+            emailVerified: row.email_verified === 1,
+            createdAt: new Date(row.created_at),
+        };
+    }
+}
+// ============================================================================
+// D1 Membership Store
+// ============================================================================
+export class D1MembershipStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async find(tenantId, userId) {
+        const row = await this.db.first('SELECT * FROM memberships WHERE tenant_id = ? AND user_id = ?', tenantId, userId);
+        return row ? this.rowToMembership(row) : null;
+    }
+    async findByUser(userId) {
+        const rows = await this.db.all('SELECT * FROM memberships WHERE user_id = ?', userId);
+        return rows.map((r) => this.rowToMembership(r));
+    }
+    async findByTenant(tenantId) {
+        const rows = await this.db.all('SELECT * FROM memberships WHERE tenant_id = ?', tenantId);
+        return rows.map((r) => this.rowToMembership(r));
+    }
+    async create(membership) {
+        const now = new Date().toISOString();
+        await this.db.run(`INSERT INTO memberships (tenant_id, user_id, role, status, invited_by, joined_at)
+       VALUES (?, ?, ?, ?, ?, ?)`, membership.tenantId, membership.userId, membership.role, membership.status, membership.invitedBy ?? null, now);
+        return { ...membership, joinedAt: new Date(now) };
+    }
+    async update(tenantId, userId, data) {
+        const updates = [];
+        const params = [];
+        if (data.role !== undefined) {
+            updates.push('role = ?');
+            params.push(data.role);
+        }
+        if (data.status !== undefined) {
+            updates.push('status = ?');
+            params.push(data.status);
+        }
+        if (updates.length === 0)
+            return;
+        params.push(tenantId, userId);
+        await this.db.run(`UPDATE memberships SET ${updates.join(', ')} WHERE tenant_id = ? AND user_id = ?`, ...params);
+    }
+    async delete(tenantId, userId) {
+        await this.db.run('DELETE FROM memberships WHERE tenant_id = ? AND user_id = ?', tenantId, userId);
+    }
+    rowToMembership(row) {
+        return {
+            tenantId: row.tenant_id,
+            userId: row.user_id,
+            role: row.role,
+            status: row.status,
+            invitedBy: row.invited_by ?? undefined,
+            joinedAt: new Date(row.joined_at),
+        };
+    }
+}
+// ============================================================================
+// D1 Grant Store
+// ============================================================================
+export class D1GrantStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async find(tenantId, photonId, provider, userId) {
+        const row = await this.db.first(`SELECT * FROM photon_grants
+       WHERE tenant_id = ? AND photon_id = ? AND provider = ? AND user_id IS ?`, tenantId, photonId, provider, userId ?? null);
+        return row ? this.rowToGrant(row) : null;
+    }
+    async create(grant) {
+        const id = randomUUID();
+        const now = new Date().toISOString();
+        await this.db.run(`INSERT INTO photon_grants
+       (id, tenant_id, user_id, photon_id, provider, scopes, access_token_encrypted,
+        refresh_token_encrypted, token_expires_at, created_at, updated_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, id, grant.tenantId, grant.userId ?? null, grant.photonId, grant.provider, JSON.stringify(grant.scopes), grant.accessTokenEncrypted, grant.refreshTokenEncrypted ?? null, grant.tokenExpiresAt.toISOString(), now, now);
+        return {
+            ...grant,
+            id,
+            createdAt: new Date(now),
+            updatedAt: new Date(now),
+        };
+    }
+    async update(id, data) {
+        const updates = ['updated_at = ?'];
+        const params = [new Date().toISOString()];
+        if (data.accessTokenEncrypted !== undefined) {
+            updates.push('access_token_encrypted = ?');
+            params.push(data.accessTokenEncrypted);
+        }
+        if (data.refreshTokenEncrypted !== undefined) {
+            updates.push('refresh_token_encrypted = ?');
+            params.push(data.refreshTokenEncrypted);
+        }
+        if (data.scopes !== undefined) {
+            updates.push('scopes = ?');
+            params.push(JSON.stringify(data.scopes));
+        }
+        if (data.tokenExpiresAt !== undefined) {
+            updates.push('token_expires_at = ?');
+            params.push(data.tokenExpiresAt.toISOString());
+        }
+        params.push(id);
+        await this.db.run(`UPDATE photon_grants SET ${updates.join(', ')} WHERE id = ?`, ...params);
+    }
+    async delete(id) {
+        await this.db.run('DELETE FROM photon_grants WHERE id = ?', id);
+    }
+    async findByUser(tenantId, userId) {
+        const rows = await this.db.all('SELECT * FROM photon_grants WHERE tenant_id = ? AND user_id = ?', tenantId, userId);
+        return rows.map((r) => this.rowToGrant(r));
+    }
+    rowToGrant(row) {
+        return {
+            id: row.id,
+            tenantId: row.tenant_id,
+            userId: row.user_id ?? undefined,
+            photonId: row.photon_id,
+            provider: row.provider,
+            scopes: JSON.parse(row.scopes),
+            accessTokenEncrypted: row.access_token_encrypted,
+            refreshTokenEncrypted: row.refresh_token_encrypted ?? undefined,
+            tokenExpiresAt: new Date(row.token_expires_at),
+            createdAt: new Date(row.created_at),
+            updatedAt: new Date(row.updated_at),
+        };
+    }
+}
+// ============================================================================
+// D1 Elicitation Store
+// ============================================================================
+export class D1ElicitationStore {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    async create(data) {
+        const id = randomUUID();
+        const now = new Date().toISOString();
+        await this.db.run(`INSERT INTO elicitation_requests
+       (id, session_id, photon_id, provider, required_scopes, status, redirect_uri, code_verifier, created_at, expires_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, id, data.sessionId, data.photonId, data.provider, JSON.stringify(data.requiredScopes), data.status, data.redirectUri, data.codeVerifier ?? null, now, data.expiresAt.toISOString());
+        return {
+            ...data,
+            id,
+            createdAt: new Date(now),
+        };
+    }
+    async get(id) {
+        const row = await this.db.first('SELECT * FROM elicitation_requests WHERE id = ?', id);
+        if (!row)
+            return null;
+        const request = this.rowToElicitation(row);
+        // Check expiry
+        if (request.expiresAt.getTime() < Date.now()) {
+            await this.delete(id);
+            return null;
+        }
+        return request;
+    }
+    async update(id, data) {
+        const updates = [];
+        const params = [];
+        if (data.status !== undefined) {
+            updates.push('status = ?');
+            params.push(data.status);
+        }
+        if (updates.length === 0)
+            return;
+        params.push(id);
+        await this.db.run(`UPDATE elicitation_requests SET ${updates.join(', ')} WHERE id = ?`, ...params);
+    }
+    async delete(id) {
+        await this.db.run('DELETE FROM elicitation_requests WHERE id = ?', id);
+    }
+    async cleanup() {
+        const result = await this.db.run('DELETE FROM elicitation_requests WHERE expires_at < ?', new Date().toISOString());
+        return result.changes;
+    }
+    rowToElicitation(row) {
+        return {
+            id: row.id,
+            sessionId: row.session_id,
+            photonId: row.photon_id,
+            provider: row.provider,
+            requiredScopes: JSON.parse(row.required_scopes),
+            status: row.status,
+            redirectUri: row.redirect_uri,
+            codeVerifier: row.code_verifier ?? undefined,
+            createdAt: new Date(row.created_at),
+            expiresAt: new Date(row.expires_at),
+        };
+    }
+}
+//# sourceMappingURL=d1-stores.js.map

package/dist/serv/db/d1-stores.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"d1-stores.js","sourceRoot":"","sources":["../../../src/serv/db/d1-stores.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAwEpC,+EAA+E;AAC/E,kBAAkB;AAClB,+EAA+E;AAE/E,MAAM,OAAO,aAAa;IACJ;IAApB,YAAoB,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAEpC,KAAK,CAAC,UAAU,CAAC,IAAY;QAC3B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAY,sCAAsC,EAAE,IAAI,CAAC,CAAC;QACzF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,MAAc;QACrC,oDAAoD;QACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAC5B,0EAA0E,EAC1E,MAAM,CACP,CAAC;QACF,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAY,oCAAoC,EAAE,EAAE,CAAC,CAAC;QACrF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAiC;QAC5C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf;uCACiC,EACjC,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,eAAe,EACtB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,EAC/B,GAAG,CACJ,CAAC;QACF,OAAO,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,IAAqB;QAC5C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAc,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC7B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,MAAM,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IAC5D,CAAC;IAEO,WAAW,CAAC,GAAc;QAChC,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,IAAI,EAAE,GAAG,CAAC,IAAsB;YAChC,eAAe,EAAE,GAAG,CAAC,iBAAiB;YACtC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAmB;YACpD,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;SACpC,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E,MAAM,OAAO,WAAW;IACF;IAApB,YAAoB,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAEpC,KAAK,CAAC,QAAQ,CAAC,EAAU;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAU,kCAAkC,EAAE,EAAE,CAAC,CAAC;QACjF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa;QAC7B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAC7B,qCAAqC,EACrC,KAAK,CAAC,WAAW,EAAE,CACpB,CAAC;QACF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAA6B;QACxC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf;2BACqB,EACrB,IAAI,CAAC,EAAE,EACP,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,EACxB,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAC1B,GAAG,CACJ,CAAC;QACF,OAAO,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,IAAmB;QAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAc,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,MAAM,CAAC,CAAC;IACtF,CAAC;IAEO,SAAS,CAAC,GAAY;QAC5B,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,aAAa,EAAE,GAAG,CAAC,cAAc,KAAK,CAAC;YACvC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;SACpC,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E,MAAM,OAAO,iBAAiB;IACR;IAApB,YAAoB,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAEpC,KAAK,CAAC,IAAI,CAAC,QAAgB,EAAE,MAAc;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAC7B,+DAA+D,EAC/D,QAAQ,EACR,MAAM,CACP,CAAC;QACF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAAc;QAC7B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAC5B,6CAA6C,EAC7C,MAAM,CACP,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAC5B,+CAA+C,EAC/C,QAAQ,CACT,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAwC;QACnD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf;iCAC2B,EAC3B,UAAU,CAAC,QAAQ,EACnB,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,IAAI,EACf,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,SAAS,IAAI,IAAI,EAC5B,GAAG,CACJ,CAAC;QACF,OAAO,EAAE,GAAG,UAAU,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,MAAc,EAAE,IAAyB;QACtE,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAc,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9B,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf,0BAA0B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,sCAAsC,EAClF,GAAG,MAAM,CACV,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,MAAc;QAC3C,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf,6DAA6D,EAC7D,QAAQ,EACR,MAAM,CACP,CAAC;IACJ,CAAC;IAEO,eAAe,CAAC,GAAkB;QACxC,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,MAAM,EAAE,GAAG,CAAC,OAAO;YACnB,IAAI,EAAE,GAAG,CAAC,IAA0B;YACpC,MAAM,EAAE,GAAG,CAAC,MAA8B;YAC1C,SAAS,EAAE,GAAG,CAAC,UAAU,IAAI,SAAS;YACtC,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;SAClC,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,MAAM,OAAO,YAAY;IACH;IAApB,YAAoB,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAEpC,KAAK,CAAC,IAAI,CACR,QAAgB,EAChB,QAAgB,EAChB,QAAgB,EAChB,MAAe;QAEf,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAC7B;+EACyE,EACzE,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,MAAM,IAAI,IAAI,CACf,CAAC;QACF,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAA0D;QACrE,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf;;;gDAG0C,EAC1C,EAAE,EACF,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,MAAM,IAAI,IAAI,EACpB,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,QAAQ,EACd,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,EAC5B,KAAK,CAAC,oBAAoB,EAC1B,KAAK,CAAC,qBAAqB,IAAI,IAAI,EACnC,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,EAClC,GAAG,EACH,GAAG,CACJ,CAAC;QACF,OAAO;YACL,GAAG,KAAK;YACR,EAAE;YACF,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;YACxB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;SACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,IAA0B;QACjD,MAAM,OAAO,GAAa,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAc,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAErD,IAAI,IAAI,CAAC,oBAAoB,KAAK,SAAS,EAAE,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC5C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,4BAA4B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,GAAG,MAAM,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,wCAAwC,EAAE,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,MAAc;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAC5B,iEAAiE,EACjE,QAAQ,EACR,MAAM,CACP,CAAC;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAEO,UAAU,CAAC,GAAa;QAC9B,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,SAAS;YAChC,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YAC9B,oBAAoB,EAAE,GAAG,CAAC,sBAAsB;YAChD,qBAAqB,EAAE,GAAG,CAAC,uBAAuB,IAAI,SAAS;YAC/D,cAAc,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC;YAC9C,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YACnC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;SACpC,CAAC;IACJ,CAAC;CACF;AAED,+EAA+E;AAC/E,uBAAuB;AACvB,+EAA+E;AAE/E,MAAM,OAAO,kBAAkB;IACT;IAApB,YAAoB,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAEpC,KAAK,CAAC,MAAM,CAAC,IAAkD;QAC7D,MAAM,EAAE,GAAG,UAAU,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf;;6CAEuC,EACvC,EAAE,EACF,IAAI,CAAC,SAAS,EACd,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,EACnC,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,WAAW,EAChB,IAAI,CAAC,YAAY,IAAI,IAAI,EACzB,GAAG,EACH,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAC7B,CAAC;QACF,OAAO;YACL,GAAG,IAAI;YACP,EAAE;YACF,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;SACzB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAU;QAClB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAC7B,iDAAiD,EACjD,EAAE,CACH,CAAC;QACF,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QAEtB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAE3C,eAAe;QACf,IAAI,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,IAAiC;QACxD,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAc,EAAE,CAAC;QAE7B,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAEjC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CACf,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,EACpE,GAAG,MAAM,CACV,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU;QACrB,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,+CAA+C,EAAE,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,GAAG,CAC9B,uDAAuD,EACvD,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;QACF,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAEO,gBAAgB,CAAC,GAAmB;QAC1C,OAAO;YACL,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,QAAQ,EAAE,GAAG,CAAC,SAAS;YACvB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC;YAC/C,MAAM,EAAE,GAAG,CAAC,MAAsC;YAClD,WAAW,EAAE,GAAG,CAAC,YAAY;YAC7B,YAAY,EAAE,GAAG,CAAC,aAAa,IAAI,SAAS;YAC5C,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;YACnC,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;SACpC,CAAC;IACJ,CAAC;CACF"}