@powerhousedao/reactor-api 6.0.0-dev.153 → 6.0.0-dev.155

package/dist/src/server.d.ts

@@ -1,55 +0,0 @@
-import type { PGlite } from "@electric-sql/pglite";
-import type { IDocumentModelRegistry, IReactorClient, ISyncManager, ReactorClientModule } from "@powerhousedao/reactor";
-import type { DocumentModelModule } from "@powerhousedao/shared/document-model";
-import type { Pool } from "pg";
-import { type ProcessorApp } from "@powerhousedao/shared/processors";
-import { type ILogger } from "document-model";
-import { DocumentPermissionService } from "./services/document-permission.service.js";
-import type { API, IPackageLoader, ProcessorFactoryBuilder } from "./types.js";
-type Options = {
-    port?: number;
-    dbPath: string | undefined;
-    client?: PGlite | typeof Pool | undefined;
-    configFile?: string;
-    packages?: string[];
-    auth?: {
-        enabled: boolean;
-        admins: string[];
-    };
-    https?: {
-        keyPath: string;
-        certPath: string;
-    } | boolean | undefined;
-    packageLoaders?: IPackageLoader[];
-    processors?: Record<string, ProcessorInitializer[]>;
-    mcp?: boolean;
-    processorConfig?: Map<string, unknown>;
-    /**
-     * Document permission service instance.
-     * When provided, the Auth subgraph is registered and document permission
-     * checks are enforced on document operations.
-     * If not provided, can be auto-created by setting DOCUMENT_PERMISSIONS_ENABLED=true
-     * environment variable.
-     */
-    documentPermissionService?: DocumentPermissionService;
-    enableDocumentModelSubgraphs?: boolean;
-    logger?: ILogger;
-};
-type ProcessorInitializer = ProcessorFactoryBuilder;
-/**
- * Initializes and starts the API server using an initializer function.
- * This function first loads packages to get document models, then calls the initializer function
- * to create the reactor client module with the appropriate dependencies.
- *
- * @param clientInitializer - Initializer function that creates the reactor client module with document models.
- * @param options - Additional options for server configuration.
- *
- * @returns The API server components along with the created client instances.
- */
-export declare function initializeAndStartAPI(clientInitializer: (documentModels: DocumentModelModule[]) => Promise<ReactorClientModule>, options: Options, processorApp: ProcessorApp): Promise<API & {
-    client: IReactorClient;
-    syncManager: ISyncManager;
-    documentModelRegistry: IDocumentModelRegistry;
-}>;
-export {};
-//# sourceMappingURL=server.d.ts.map

package/dist/src/server.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAInD,OAAO,KAAK,EACV,sBAAsB,EACtB,cAAc,EAEd,YAAY,EACZ,mBAAmB,EAEpB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAGhF,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC;AAG/B,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAe,KAAK,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAqB3D,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AAEtF,OAAO,KAAK,EACV,GAAG,EACH,cAAc,EAGd,uBAAuB,EACxB,MAAM,YAAY,CAAC;AASpB,KAAK,OAAO,GAAG;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,IAAI,GAAG,SAAS,CAAC;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,IAAI,CAAC,EAAE;QACL,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,EAAE,CAAC;KAClB,CAAC;IACF,KAAK,CAAC,EACF;QACE,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;KAClB,GACD,OAAO,GACP,SAAS,CAAC;IACd,cAAc,CAAC,EAAE,cAAc,EAAE,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,EAAE,CAAC,CAAC;IACpD,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC;;;;;;OAMG;IACH,yBAAyB,CAAC,EAAE,yBAAyB,CAAC;IACtD,4BAA4B,CAAC,EAAE,OAAO,CAAC;IACvC,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,KAAK,oBAAoB,GAAG,uBAAuB,CAAC;AAggBpD;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACzC,iBAAiB,EAAE,CACjB,cAAc,EAAE,mBAAmB,EAAE,KAClC,OAAO,CAAC,mBAAmB,CAAC,EACjC,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,YAAY,GACzB,OAAO,CACR,GAAG,GAAG;IACJ,MAAM,EAAE,cAAc,CAAC;IACvB,WAAW,EAAE,YAAY,CAAC;IAC1B,qBAAqB,EAAE,sBAAsB,CAAC;CAC/C,CACF,CA8EA"}

package/dist/src/server.js

@@ -1,351 +0,0 @@
-import { PostgresAnalyticsStore } from "@powerhousedao/analytics-engine-pg";
-import { getConfig } from "@powerhousedao/config/node";
-import { setupMcpServer } from "@powerhousedao/reactor-mcp";
-import { WebSocketServer } from "ws";
-// Import tracing - initializes OpenTelemetry and provides stub functions for backwards compatibility
-import { createRelationalDb, } from "@powerhousedao/shared/processors";
-import { childLogger } from "document-model";
-import { config, DefaultCoreSubgraphs } from "./config.js";
-import { AuthSubgraph } from "./graphql/auth/subgraph.js";
-import { createAuthFetchMiddleware, } from "./graphql/gateway/auth-middleware.js";
-import { createGatewayAdapter, createHttpAdapter, } from "./graphql/gateway/factory.js";
-import { GraphQLManager } from "./graphql/graphql-manager.js";
-import { renderGraphqlPlayground } from "./graphql/playground.js";
-import { ReactorSubgraph } from "./graphql/reactor/subgraph.js";
-import { runMigrations } from "./migrations/index.js";
-import { ImportPackageLoader } from "./packages/import-loader.js";
-import { PackageManager } from "./packages/package-manager.js";
-import { AuthService } from "./services/auth.service.js";
-import { AuthorizationService } from "./services/authorization.service.js";
-import { DocumentPermissionService } from "./services/document-permission.service.js";
-import { initTracing, isTracingEnabled, trace } from "./tracing.js";
-import { getDbClient, initAnalyticsStoreSql, } from "./utils/db.js";
-const defaultLogger = childLogger(["reactor-api", "server"]);
-const DEFAULT_PORT = 4000;
-/**
- * Initializes the database and analytics store
- */
-async function initializeDatabaseAndAnalytics(dbPath) {
-    const { db, knex } = getDbClient(dbPath);
-    const relationalDb = createRelationalDb(db);
-    const analyticsStore = new PostgresAnalyticsStore({
-        knex,
-    });
-    for (const sql of initAnalyticsStoreSql) {
-        await knex.raw(sql);
-    }
-    return { relationalDb, analyticsStore };
-}
-/**
- * Sets up the subgraph manager and registers subgraphs
- */
-async function setupGraphQLManager(httpAdapter, authFetchMiddleware, httpServer, wsServer, client, relationalDb, analyticsStore, syncManager, subgraphs, logger, auth, documentPermissionService, enableDocumentModelSubgraphs, port, authorizationService) {
-    const graphqlManager = new GraphQLManager(config.basePath, httpServer, wsServer, client, relationalDb, analyticsStore, syncManager, logger, httpAdapter, createGatewayAdapter("apollo", logger), {
-        enabled: auth?.enabled ?? false,
-        admins: auth?.admins ?? [],
-    }, documentPermissionService, {
-        enableDocumentModelSubgraphs,
-    }, port, authorizationService);
-    await graphqlManager.init(subgraphs.core, authFetchMiddleware);
-    for (const [, collection] of subgraphs.extended.entries()) {
-        for (const subgraph of collection) {
-            await graphqlManager.registerSubgraph(subgraph, "graphql");
-        }
-    }
-    await graphqlManager.updateRouter();
-    return graphqlManager;
-}
-/**
- * Sets up event listeners for package manager changes
- */
-function setupEventListeners(pkgManager, graphqlManager, reactorProcessorManager, module, documentModelRegistry) {
-    pkgManager.onDocumentModelsChange((packagedModels) => {
-        if (documentModelRegistry) {
-            const newModules = Object.values(packagedModels).flat();
-            const registeredModules = documentModelRegistry.getAllModules();
-            const registeredTypes = new Set(registeredModules.map((m) => m.documentModel.global.id));
-            for (const mod of newModules) {
-                const docType = mod.documentModel.global.id;
-                if (!registeredTypes.has(docType)) {
-                    defaultLogger.info(`Registering new document model: ${docType}`);
-                    documentModelRegistry.registerModules(mod);
-                }
-            }
-        }
-        void graphqlManager.regenerateDocumentModelSubgraphs();
-    });
-    pkgManager.onSubgraphsChange(async (packagedSubgraphs) => {
-        for (const [, subgraphs] of packagedSubgraphs) {
-            for (const subgraph of subgraphs) {
-                await graphqlManager.registerSubgraph(subgraph, "graphql");
-            }
-        }
-        await graphqlManager.updateRouter();
-    });
-    pkgManager.onProcessorsChange(async (processors) => {
-        for (const [packageName, fns] of processors) {
-            await reactorProcessorManager.unregisterFactory(packageName);
-            const factories = fns.map((fn) => fn(module));
-            const validBuilders = factories.filter((factory) => factory !== null && typeof factory === "function");
-            if (!validBuilders.length) {
-                continue;
-            }
-            await reactorProcessorManager.registerFactory(packageName, async (driveHeader) => (await Promise.all(validBuilders.map(async (driveFactory) => {
-                try {
-                    const result = await driveFactory(driveHeader);
-                    return result;
-                }
-                catch (e) {
-                    const logger = defaultLogger;
-                    logger.error(`Error creating processor for drive ${driveHeader.id}:`, e);
-                    return [];
-                }
-            }))).flat());
-        }
-    });
-}
-/**
- * Starts the server (HTTP or HTTPS) and attaches WebSocket server
- */
-async function startServer(httpAdapter, port, httpsOptions, logger) {
-    const tls = httpsOptions === true
-        ? true
-        : typeof httpsOptions === "object"
-            ? { keyPath: httpsOptions.keyPath, certPath: httpsOptions.certPath }
-            : undefined;
-    const httpServer = await httpAdapter.listen(port, tls);
-    const wsServer = new WebSocketServer({
-        server: httpServer,
-        path: "/graphql/subscriptions",
-    });
-    logger.info("WebSocket server available at /graphql/subscriptions");
-    return { httpServer, wsServer };
-}
-/**
- * Private helper function that sets up common infrastructure before API initialization.
- * This includes auth configuration, database setup, and package manager initialization.
- */
-async function _setupCommonInfrastructure(options) {
-    // Initialize OpenTelemetry tracing
-    if (isTracingEnabled()) {
-        await initTracing();
-    }
-    const port = options.port ?? DEFAULT_PORT;
-    const { adapter: httpAdapter } = createHttpAdapter("express");
-    // Setup auth configuration
-    let admins = [];
-    let authEnabled = false;
-    if (options.configFile) {
-        const config = getConfig(options.configFile);
-        admins = config.auth?.admins?.map((a) => a.toLowerCase()) ?? [];
-        authEnabled = config.auth?.enabled ?? false;
-    }
-    else if (options.auth) {
-        admins = options.auth?.admins?.map((a) => a.toLowerCase()) ?? [];
-        authEnabled = options.auth?.enabled ?? false;
-    }
-    const { AUTH_ENABLED, ADMINS, DEFAULT_PROTECTION, DOCUMENT_PERMISSIONS_ENABLED, SKIP_CREDENTIAL_VERIFICATION, } = process.env;
-    if (AUTH_ENABLED !== undefined) {
-        authEnabled = AUTH_ENABLED === "true";
-    }
-    if (ADMINS !== undefined) {
-        admins = ADMINS.split(",").map((a) => a.toLowerCase());
-    }
-    let defaultProtection = false;
-    if (DEFAULT_PROTECTION !== undefined) {
-        defaultProtection = DEFAULT_PROTECTION.toLowerCase() === "true";
-    }
-    // Warn about deprecated env vars
-    const { USERS, GUESTS, FREE_ENTRY } = process.env;
-    if (USERS || GUESTS || FREE_ENTRY) {
-        console.warn("[DEPRECATION WARNING] The USERS, GUESTS, and FREE_ENTRY environment variables are no longer supported. " +
-            "Access control is now managed per-document via the DocumentProtection system. " +
-            "Use DEFAULT_PROTECTION=true for strict mode, or manage protection per document via the GraphQL API. " +
-            "See the auth documentation for migration guidance.");
-    }
-    let skipCredentialVerification = false;
-    if (SKIP_CREDENTIAL_VERIFICATION !== undefined) {
-        skipCredentialVerification = SKIP_CREDENTIAL_VERIFICATION === "true";
-    }
-    const logger = options.logger ?? defaultLogger;
-    // Health check endpoint (registered directly on adapter, before auth)
-    httpAdapter.getRoute("/health", () => new Response("OK", { status: 200 }));
-    // Explorer route
-    const explorerPrefix = `${config.basePath}/explorer`;
-    httpAdapter.getRoute(`${explorerPrefix}/:endpoint?`, (request) => {
-        const url = new URL(request.url);
-        // Strip the prefix to find the optional :endpoint segment
-        const suffix = url.pathname.slice(explorerPrefix.length).replace(/^\//, "");
-        const endpoint = suffix ? `/${suffix}` : "/graphql";
-        const query = url.searchParams.get("query") ?? undefined;
-        return new Response(renderGraphqlPlayground(endpoint, query), {
-            headers: { "Content-Type": "text/html" },
-        });
-    });
-    // Create auth fetch middleware if auth is enabled
-    let authFetchMiddleware;
-    if (authEnabled) {
-        logger.info("Setting up Auth middleware");
-        const authService = new AuthService({
-            enabled: authEnabled,
-            admins,
-            skipCredentialVerification,
-        });
-        authFetchMiddleware = createAuthFetchMiddleware(authService);
-    }
-    // Initialize database and analytics store
-    const { relationalDb, analyticsStore } = await trace("reactor-api.init.database", { tags: { "resource.name": "database" } }, () => initializeDatabaseAndAnalytics(options.dbPath));
-    // Use provided document permission service, or create one if env var is set
-    let documentPermissionService = options.documentPermissionService;
-    if (!documentPermissionService && DOCUMENT_PERMISSIONS_ENABLED === "true") {
-        const { db } = getDbClient(options.dbPath);
-        // Run document permission migrations
-        await runMigrations(db);
-        logger.info("Document permission migrations completed");
-        documentPermissionService = new DocumentPermissionService(db, { defaultProtection });
-        logger.info("Document permission service initialized");
-    }
-    // Create AuthorizationService when document permission service is available
-    let authorizationService;
-    if (documentPermissionService) {
-        authorizationService = new AuthorizationService(documentPermissionService, {
-            admins,
-            defaultProtection,
-        });
-        logger.info("Authorization service initialized");
-    }
-    // Initialize package manager
-    const loaders = options.packageLoaders ?? [
-        new ImportPackageLoader(),
-    ];
-    const packages = new PackageManager(loaders, {
-        configFile: options.configFile,
-        packages: options.packages ?? [],
-    });
-    return {
-        port,
-        httpAdapter,
-        authFetchMiddleware,
-        auth: {
-            enabled: authEnabled,
-            admins,
-        },
-        relationalDb,
-        analyticsStore,
-        documentPermissionService,
-        authorizationService,
-        packages,
-    };
-}
-/**
- * Private helper function containing common setup logic for API initialization
- */
-async function _setupAPI(reactorClient, syncManager, reactorProcessorManager, httpAdapter, authFetchMiddleware, port, packages, relationalDb, analyticsStore, documentPermissionService, processors, subgraphs, options, auth, processorApp, authorizationService, documentModelRegistry) {
-    const hostModule = {
-        relationalDb,
-        analyticsStore,
-        processorApp,
-        config: options.processorConfig,
-        reactorClient,
-    };
-    const mcpServerEnabled = options.mcp ?? true;
-    const logger = options.logger ?? defaultLogger;
-    // initialize processors
-    const configuredProcessorEntries = Object.entries(options.processors ?? {});
-    const processorEntries = [
-        ...processors.entries(),
-        ...configuredProcessorEntries,
-    ];
-    for (const [packageName, fns] of processorEntries) {
-        const factories = await Promise.allSettled(fns.map(async (fn) => {
-            try {
-                return fn(hostModule);
-            }
-            catch (e) {
-                logger.error(`Error initializing processor factory for package ${packageName}:`, e);
-                return null;
-            }
-        }));
-        const validFactories = factories.filter((factory) => factory.status === "fulfilled" &&
-            factory.value !== null &&
-            typeof factory.value === "function");
-        if (!validFactories.length) {
-            continue;
-        }
-        // Register with the reactor ProcessorManager
-        // Cast the results to ReactorProcessorRecord since the loaded factories
-        // implement the reactor interface
-        await reactorProcessorManager.registerFactory(packageName, async (driveHeader) => (await Promise.all(validFactories.map(async ({ value: driveFactory }) => {
-            try {
-                const result = await driveFactory(driveHeader);
-                return result;
-            }
-            catch (e) {
-                logger.error(`Error creating processor for drive ${driveHeader.id}:`, e);
-                return [];
-            }
-        }))).flat());
-    }
-    // Start the server
-    const { httpServer, wsServer } = await startServer(httpAdapter, port, options.https, logger);
-    // set up subgraph manager
-    const coreSubgraphs = DefaultCoreSubgraphs.slice();
-    coreSubgraphs.push(ReactorSubgraph);
-    // Register Auth subgraph when document permission service is available
-    if (documentPermissionService) {
-        coreSubgraphs.push(AuthSubgraph);
-        logger.info("Auth subgraph registered (document permissions enabled)");
-    }
-    const graphqlManager = await setupGraphQLManager(httpAdapter, authFetchMiddleware, httpServer, wsServer, reactorClient, relationalDb, analyticsStore, syncManager, {
-        extended: subgraphs,
-        core: coreSubgraphs,
-    }, logger.child(["graphql-manager"]), auth, documentPermissionService, options.enableDocumentModelSubgraphs, port, authorizationService);
-    // Set up event listeners
-    setupEventListeners(packages, graphqlManager, reactorProcessorManager, hostModule, documentModelRegistry);
-    if (mcpServerEnabled) {
-        await setupMcpServer({ client: reactorClient, syncManager }, httpAdapter);
-        logger.info(`MCP server available at http://localhost:${port}/mcp`);
-    }
-    return {
-        httpAdapter,
-        graphqlManager,
-        packages,
-    };
-}
-/**
- * Initializes and starts the API server using an initializer function.
- * This function first loads packages to get document models, then calls the initializer function
- * to create the reactor client module with the appropriate dependencies.
- *
- * @param clientInitializer - Initializer function that creates the reactor client module with document models.
- * @param options - Additional options for server configuration.
- *
- * @returns The API server components along with the created client instances.
- */
-export async function initializeAndStartAPI(clientInitializer, options, processorApp) {
-    const { port, httpAdapter, authFetchMiddleware, auth, relationalDb, analyticsStore, documentPermissionService, authorizationService, packages, } = await trace("reactor-api.setup.infrastructure", { tags: { "resource.name": "infrastructure" } }, () => _setupCommonInfrastructure(options));
-    const { documentModels, processors, subgraphs } = await trace("reactor-api.packages.init", { tags: { "resource.name": "packages" } }, () => packages.init());
-    const reactorClientModule = await trace("reactor-api.reactor-client.init", { tags: { "resource.name": "reactor-client" } }, () => clientInitializer(documentModels));
-    // Extract client and syncManager from the module
-    const reactorClient = reactorClientModule.client;
-    const syncManager = reactorClientModule.reactorModule?.syncModule?.syncManager;
-    if (!syncManager) {
-        throw new Error("SyncManager not available from ReactorClientModule");
-    }
-    const reactorProcessorManager = reactorClientModule.reactorModule?.processorManager;
-    if (!reactorProcessorManager) {
-        throw new Error("ProcessorManager not available from ReactorClientModule");
-    }
-    const documentModelRegistry = reactorClientModule.reactorModule?.documentModelRegistry;
-    if (!documentModelRegistry) {
-        throw new Error("DocumentModelRegistry not available from ReactorClientModule");
-    }
-    const api = await _setupAPI(reactorClient, syncManager, reactorProcessorManager, httpAdapter, authFetchMiddleware, port, packages, relationalDb, analyticsStore, documentPermissionService, processors, subgraphs, options, auth, processorApp, authorizationService, documentModelRegistry);
-    return {
-        ...api,
-        client: reactorClient,
-        syncManager,
-        documentModelRegistry,
-    };
-}
-//# sourceMappingURL=server.js.map

package/dist/src/server.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/server.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,sBAAsB,EAAE,MAAM,oCAAoC,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAC;AASvD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAK5D,OAAO,EAAE,eAAe,EAAE,MAAM,IAAI,CAAC;AACrC,qGAAqG;AACrG,OAAO,EACL,kBAAkB,GAInB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAgB,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EACL,yBAAyB,GAE1B,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EACL,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,yBAAyB,EAAE,MAAM,2CAA2C,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAQpE,OAAO,EACL,WAAW,EACX,qBAAqB,GAEtB,MAAM,eAAe,CAAC;AAEvB,MAAM,aAAa,GAAG,WAAW,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;AAqC7D,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B;;GAEG;AACH,KAAK,UAAU,8BAA8B,CAC3C,MAA0B;IAK1B,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,kBAAkB,CAAU,EAAE,CAAC,CAAC;IACrD,MAAM,cAAc,GAAG,IAAI,sBAAsB,CAAC;QAChD,IAAI;KACL,CAAC,CAAC;IAEH,KAAK,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACxC,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,mBAAmB,CAChC,WAAyB,EACzB,mBAAoD,EACpD,UAAuB,EACvB,QAAyB,EACzB,MAAsB,EACtB,YAA2B,EAC3B,cAA+B,EAC/B,WAAyB,EACzB,SAGC,EACD,MAAe,EACf,IAGC,EACD,yBAAqD,EACrD,4BAAsC,EACtC,IAAa,EACb,oBAA2C;IAE3C,MAAM,cAAc,GAAG,IAAI,cAAc,CACvC,MAAM,CAAC,QAAQ,EACf,UAAU,EACV,QAAQ,EACR,MAAM,EACN,YAAY,EACZ,cAAc,EACd,WAAW,EACX,MAAM,EACN,WAAW,EACX,oBAAoB,CAAC,QAAQ,EAAE,MAAM,CAAC,EACtC;QACE,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK;QAC/B,MAAM,EAAE,IAAI,EAAE,MAAM,IAAI,EAAE;KAC3B,EACD,yBAAyB,EACzB;QACE,4BAA4B;KAC7B,EACD,IAAI,EACJ,oBAAoB,CACrB,CAAC;IAEF,MAAM,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAE/D,KAAK,MAAM,CAAC,EAAE,UAAU,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAC1D,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,MAAM,cAAc,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC;IAEpC,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,UAA0B,EAC1B,cAA8B,EAC9B,uBAAiD,EACjD,MAA4B,EAC5B,qBAA8C;IAE9C,UAAU,CAAC,sBAAsB,CAAC,CAAC,cAAc,EAAE,EAAE;QACnD,IAAI,qBAAqB,EAAE,CAAC;YAC1B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,aAAa,EAAE,CAAC;YAChE,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CACxD,CAAC;YAEF,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;gBAC7B,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBAClC,aAAa,CAAC,IAAI,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;oBACjE,qBAAqB,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,cAAc,CAAC,gCAAgC,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE;QACvD,KAAK,MAAM,CAAC,EAAE,SAAS,CAAC,IAAI,iBAAiB,EAAE,CAAC;YAC9C,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;gBACjC,MAAM,cAAc,CAAC,gBAAgB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,MAAM,cAAc,CAAC,YAAY,EAAE,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,UAAU,CAAC,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE;QACjD,KAAK,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,UAAU,EAAE,CAAC;YAC5C,MAAM,uBAAuB,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAE7D,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAE9C,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,CACpC,CAAC,OAAO,EAAoC,EAAE,CAC5C,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,UAAU,CACpD,CAAC;YAEF,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;gBAC1B,SAAS;YACX,CAAC;YAED,MAAM,uBAAuB,CAAC,eAAe,CAC3C,WAAW,EACX,KAAK,EAAE,WAAW,EAAE,EAAE,CACpB,CACE,MAAM,OAAO,CAAC,GAAG,CACf,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,EAAE,EAAE;gBACvC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;oBAC/C,OAAO,MAA6C,CAAC;gBACvD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,MAAM,MAAM,GAAG,aAAa,CAAC;oBAC7B,MAAM,CAAC,KAAK,CACV,sCAAsC,WAAW,CAAC,EAAE,GAAG,EACvD,CAAC,CACF,CAAC;oBACF,OAAO,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC,CAAC,CACH,CACF,CAAC,IAAI,EAAE,CACX,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,WAAW,CACxB,WAAyB,EACzB,IAAY,EACZ,YAA8B,EAC9B,MAAe;IAEf,MAAM,GAAG,GACP,YAAY,KAAK,IAAI;QACnB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,OAAO,YAAY,KAAK,QAAQ;YAChC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE;YACpE,CAAC,CAAC,SAAS,CAAC;IAElB,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC;QACnC,MAAM,EAAE,UAAU;QAClB,IAAI,EAAE,wBAAwB;KAC/B,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,sDAAsD,CAAC,CAAC;IAEpE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,0BAA0B,CAAC,OAAgB;IAcxD,mCAAmC;IACnC,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACvB,MAAM,WAAW,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,YAAY,CAAC;IAC1C,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAE9D,2BAA2B;IAC3B,IAAI,MAAM,GAAa,EAAE,CAAC;IAC1B,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAChE,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC;IAC9C,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACxB,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACjE,WAAW,GAAG,OAAO,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC;IAC/C,CAAC;IACD,MAAM,EACJ,YAAY,EACZ,MAAM,EACN,kBAAkB,EAClB,4BAA4B,EAC5B,4BAA4B,GAC7B,GAAG,OAAO,CAAC,GAAG,CAAC;IAChB,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,WAAW,GAAG,YAAY,KAAK,MAAM,CAAC;IACxC,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;QACrC,iBAAiB,GAAG,kBAAkB,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;IAClE,CAAC;IAED,iCAAiC;IACjC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAClD,IAAI,KAAK,IAAI,MAAM,IAAI,UAAU,EAAE,CAAC;QAClC,OAAO,CAAC,IAAI,CACV,yGAAyG;YACvG,gFAAgF;YAChF,sGAAsG;YACtG,oDAAoD,CACvD,CAAC;IACJ,CAAC;IAED,IAAI,0BAA0B,GAAG,KAAK,CAAC;IACvC,IAAI,4BAA4B,KAAK,SAAS,EAAE,CAAC;QAC/C,0BAA0B,GAAG,4BAA4B,KAAK,MAAM,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAE/C,sEAAsE;IACtE,WAAW,CAAC,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAE3E,iBAAiB;IACjB,MAAM,cAAc,GAAG,GAAG,MAAM,CAAC,QAAQ,WAAW,CAAC;IACrD,WAAW,CAAC,QAAQ,CAAC,GAAG,cAAc,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE;QAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,0DAA0D;QAC1D,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QACpD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC;QACzD,OAAO,IAAI,QAAQ,CAAC,uBAAuB,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;YAC5D,OAAO,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE;SACzC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,kDAAkD;IAClD,IAAI,mBAAoD,CAAC;IACzD,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;YAClC,OAAO,EAAE,WAAW;YACpB,MAAM;YACN,0BAA0B;SAC3B,CAAC,CAAC;QACH,mBAAmB,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IAC/D,CAAC;IAED,0CAA0C;IAC1C,MAAM,EAAE,YAAY,EAAE,cAAc,EAAE,GAAG,MAAM,KAAK,CAClD,2BAA2B,EAC3B,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,EACzC,GAAG,EAAE,CAAC,8BAA8B,CAAC,OAAO,CAAC,MAAM,CAAC,CACrD,CAAC;IAEF,4EAA4E;IAC5E,IAAI,yBAAyB,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAClE,IAAI,CAAC,yBAAyB,IAAI,4BAA4B,KAAK,MAAM,EAAE,CAAC;QAC1E,MAAM,EAAE,EAAE,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAC3C,qCAAqC;QACrC,MAAM,aAAa,CAAC,EAAqB,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;QACxD,yBAAyB,GAAG,IAAI,yBAAyB,CACvD,EAAwC,EACxC,EAAE,iBAAiB,EAAE,CACtB,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;IAED,4EAA4E;IAC5E,IAAI,oBAAsD,CAAC;IAC3D,IAAI,yBAAyB,EAAE,CAAC;QAC9B,oBAAoB,GAAG,IAAI,oBAAoB,CAAC,yBAAyB,EAAE;YACzE,MAAM;YACN,iBAAiB;SAClB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IACnD,CAAC;IAED,6BAA6B;IAC7B,MAAM,OAAO,GAAqB,OAAO,CAAC,cAAc,IAAI;QAC1D,IAAI,mBAAmB,EAAE;KAC1B,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC,OAAO,EAAE;QAC3C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;KACjC,CAAC,CAAC;IAEH,OAAO;QACL,IAAI;QACJ,WAAW;QACX,mBAAmB;QACnB,IAAI,EAAE;YACJ,OAAO,EAAE,WAAW;YACpB,MAAM;SACP;QACD,YAAY;QACZ,cAAc;QACd,yBAAyB;QACzB,oBAAoB;QACpB,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,SAAS,CACtB,aAA6B,EAC7B,WAAyB,EACzB,uBAAiD,EACjD,WAAyB,EACzB,mBAAoD,EACpD,IAAY,EACZ,QAAwB,EACxB,YAA2B,EAC3B,cAA+B,EAC/B,yBAAgE,EAChE,UAAkC,EAClC,SAAuC,EACvC,OAAgB,EAChB,IAGC,EACD,YAA0B,EAC1B,oBAA2C,EAC3C,qBAA8C;IAE9C,MAAM,UAAU,GAAyB;QACvC,YAAY;QACZ,cAAc;QACd,YAAY;QACZ,MAAM,EAAE,OAAO,CAAC,eAAe;QAC/B,aAAa;KACd,CAAC;IACF,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC;IAE7C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAE/C,wBAAwB;IACxB,MAAM,0BAA0B,GAAG,MAAM,CAAC,OAAO,CAC/C,OAAO,CAAC,UAAU,IAAI,EAAE,CACa,CAAC;IAExC,MAAM,gBAAgB,GAAG;QACvB,GAAG,UAAU,CAAC,OAAO,EAAE;QACvB,GAAG,0BAA0B;KACQ,CAAC;IAExC,KAAK,MAAM,CAAC,WAAW,EAAE,GAAG,CAAC,IAAI,gBAAgB,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,UAAU,CACxC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACnB,IAAI,CAAC;gBACH,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC;YACxB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CACV,oDAAoD,WAAW,GAAG,EAClE,CAAC,CACF,CAAC;gBAEF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CACrC,CAAC,OAAO,EAA4D,EAAE,CACpE,OAAO,CAAC,MAAM,KAAK,WAAW;YAC9B,OAAO,CAAC,KAAK,KAAK,IAAI;YACtB,OAAO,OAAO,CAAC,KAAK,KAAK,UAAU,CACtC,CAAC;QAEF,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC;YAC3B,SAAS;QACX,CAAC;QAED,6CAA6C;QAC7C,wEAAwE;QACxE,kCAAkC;QAClC,MAAM,uBAAuB,CAAC,eAAe,CAC3C,WAAW,EACX,KAAK,EAAE,WAAW,EAAE,EAAE,CACpB,CACE,MAAM,OAAO,CAAC,GAAG,CACf,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,EAAE;YACnD,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;gBAC/C,OAAO,MAA6C,CAAC;YACvD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,CACV,sCAAsC,WAAW,CAAC,EAAE,GAAG,EACvD,CAAC,CACF,CAAC;gBAEF,OAAO,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CACH,CACF,CAAC,IAAI,EAAE,CACX,CAAC;IACJ,CAAC;IAED,mBAAmB;IACnB,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,MAAM,WAAW,CAChD,WAAW,EACX,IAAI,EACJ,OAAO,CAAC,KAAK,EACb,MAAM,CACP,CAAC;IAEF,0BAA0B;IAC1B,MAAM,aAAa,GAAoB,oBAAoB,CAAC,KAAK,EAAE,CAAC;IACpE,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAEpC,uEAAuE;IACvE,IAAI,yBAAyB,EAAE,CAAC;QAC9B,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjC,MAAM,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,mBAAmB,CAC9C,WAAW,EACX,mBAAmB,EACnB,UAAU,EACV,QAAQ,EACR,aAAa,EACb,YAAY,EACZ,cAAc,EACd,WAAW,EACX;QACE,QAAQ,EAAE,SAAS;QACnB,IAAI,EAAE,aAAa;KACpB,EACD,MAAM,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC,EACjC,IAAI,EACJ,yBAAyB,EACzB,OAAO,CAAC,4BAA4B,EACpC,IAAI,EACJ,oBAAoB,CACrB,CAAC;IAEF,yBAAyB;IACzB,mBAAmB,CACjB,QAAQ,EACR,cAAc,EACd,uBAAuB,EACvB,UAAU,EACV,qBAAqB,CACtB,CAAC;IAEF,IAAI,gBAAgB,EAAE,CAAC;QACrB,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,CAAC;QAC1E,MAAM,CAAC,IAAI,CAAC,4CAA4C,IAAI,MAAM,CAAC,CAAC;IACtE,CAAC;IAED,OAAO;QACL,WAAW;QACX,cAAc;QACd,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,iBAEiC,EACjC,OAAgB,EAChB,YAA0B;IAQ1B,MAAM,EACJ,IAAI,EACJ,WAAW,EACX,mBAAmB,EACnB,IAAI,EACJ,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,oBAAoB,EACpB,QAAQ,GACT,GAAG,MAAM,KAAK,CACb,kCAAkC,EAClC,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,EAC/C,GAAG,EAAE,CAAC,0BAA0B,CAAC,OAAO,CAAC,CAC1C,CAAC;IAEF,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,CAC3D,2BAA2B,EAC3B,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,EACzC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC;IAEF,MAAM,mBAAmB,GAAG,MAAM,KAAK,CACrC,iCAAiC,EACjC,EAAE,IAAI,EAAE,EAAE,eAAe,EAAE,gBAAgB,EAAE,EAAE,EAC/C,GAAG,EAAE,CAAC,iBAAiB,CAAC,cAAc,CAAC,CACxC,CAAC;IAEF,iDAAiD;IACjD,MAAM,aAAa,GAAG,mBAAmB,CAAC,MAAM,CAAC;IAEjD,MAAM,WAAW,GACf,mBAAmB,CAAC,aAAa,EAAE,UAAU,EAAE,WAAW,CAAC;IAC7D,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,uBAAuB,GAC3B,mBAAmB,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACtD,IAAI,CAAC,uBAAuB,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,qBAAqB,GACzB,mBAAmB,CAAC,aAAa,EAAE,qBAAqB,CAAC;IAC3D,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,SAAS,CACzB,aAAa,EACb,WAAW,EACX,uBAAuB,EACvB,WAAW,EACX,mBAAmB,EACnB,IAAI,EACJ,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,UAAU,EACV,SAAS,EACT,OAAO,EACP,IAAI,EACJ,YAAY,EACZ,oBAAoB,EACpB,qBAAqB,CACtB,CAAC;IAEF,OAAO;QACL,GAAG,GAAG;QACN,MAAM,EAAE,aAAa;QACrB,WAAW;QACX,qBAAqB;KACtB,CAAC;AACJ,CAAC"}

package/dist/src/services/auth.service.d.ts

@@ -1,53 +0,0 @@
-export interface AuthConfig {
-    enabled: boolean;
-    admins: string[];
-    cacheTtl?: number;
-    skipCredentialVerification?: boolean;
-}
-export interface User {
-    address: string;
-    chainId: number;
-    networkId: string;
-}
-export interface AuthContext {
-    user?: User;
-    admins: string[];
-    auth_enabled: boolean;
-}
-export declare class AuthService {
-    private readonly config;
-    constructor(config: AuthConfig);
-    authenticateRequest(request: globalThis.Request): Promise<AuthContext | globalThis.Response>;
-    authenticateWebSocketConnection(connectionParams: Record<string, unknown>): Promise<User | null>;
-    /**
-     * Verify the auth bearer token
-     */
-    private verifyToken;
-    /**
-     * Extract user information from verification result
-     */
-    private extractUserFromVerification;
-    /**
-     * Get additional context fields for GraphQL
-     */
-    getAdditionalContextFields(): {
-        isAdmin: (address: string) => boolean;
-    };
-    /**
-     * Get user context for GraphQL
-     */
-    getUserContext(user?: User): {
-        user?: undefined;
-    } | {
-        user: {
-            address: string;
-            chainId: number;
-            networkId: string;
-        };
-    };
-    /**
-     * Verify that the credential still exists on the Renown API
-     */
-    private verifyCredentialExists;
-}
-//# sourceMappingURL=auth.service.d.ts.map

package/dist/src/services/auth.service.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.service.d.ts","sourceRoot":"","sources":["../../../src/services/auth.service.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0BAA0B,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,IAAI;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;gBAExB,MAAM,EAAE,UAAU;IAIxB,mBAAmB,CACvB,OAAO,EAAE,UAAU,CAAC,OAAO,GAC1B,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC;IAsDvC,+BAA+B,CACnC,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACxC,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC;IA4CvB;;OAEG;YACW,WAAW;IAIzB;;OAEG;IACH,OAAO,CAAC,2BAA2B;IAqBnC;;OAEG;IACH,0BAA0B;2BAQH,MAAM;;IAM7B;;OAEG;IACH,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI;;;;;;;;;IAY1B;;OAEG;YACW,sBAAsB;CAgCrC"}

package/dist/src/services/auth.service.js

@@ -1,165 +0,0 @@
-import { verifyAuthBearerToken, } from "@renown/sdk";
-export class AuthService {
-    config;
-    constructor(config) {
-        this.config = config;
-    }
-    async authenticateRequest(request) {
-        if (!this.config.enabled) {
-            return { user: undefined, admins: [], auth_enabled: false };
-        }
-        const method = request.method;
-        if (method === "OPTIONS" || method === "GET") {
-            return {
-                user: undefined,
-                admins: this.config.admins,
-                auth_enabled: true,
-            };
-        }
-        const token = request.headers.get("authorization")?.split(" ")[1];
-        if (!token) {
-            return {
-                user: undefined,
-                admins: this.config.admins,
-                auth_enabled: true,
-            };
-        }
-        try {
-            const verified = await this.verifyToken(token);
-            if (!verified) {
-                return new Response(JSON.stringify({ error: "Verification failed" }), {
-                    status: 401,
-                });
-            }
-            const user = this.extractUserFromVerification(verified);
-            if (!user) {
-                return new Response(JSON.stringify({ error: "Missing credentials" }), {
-                    status: 401,
-                });
-            }
-            if (!this.config.skipCredentialVerification) {
-                const credentialExists = await this.verifyCredentialExists(user.address, user.chainId, verified.issuer);
-                if (!credentialExists) {
-                    return new Response(JSON.stringify({ error: "Credentials no longer valid" }), { status: 401 });
-                }
-            }
-            return { user, admins: this.config.admins, auth_enabled: true };
-        }
-        catch {
-            return new Response(JSON.stringify({ error: "Authentication failed" }), {
-                status: 401,
-            });
-        }
-    }
-    async authenticateWebSocketConnection(connectionParams) {
-        if (!this.config.enabled) {
-            return null;
-        }
-        const authHeader = connectionParams.authorization;
-        if (!authHeader) {
-            throw new Error("Missing authorization in connection parameters");
-        }
-        const token = authHeader.split(" ")[1];
-        if (!token) {
-            throw new Error("Invalid authorization format");
-        }
-        const verified = await this.verifyToken(token);
-        if (!verified) {
-            throw new Error("Token verification failed");
-        }
-        const user = this.extractUserFromVerification(verified);
-        if (!user) {
-            throw new Error("Invalid credentials");
-        }
-        // Verify that the credentials still exist on the Renown API
-        // This can be skipped via config (useful for testing or when Renown API is unavailable)
-        if (!this.config.skipCredentialVerification) {
-            const credentialExists = await this.verifyCredentialExists(user.address, user.chainId, verified.issuer);
-            if (!credentialExists) {
-                throw new Error("Credentials no longer valid");
-            }
-        }
-        // Note: We no longer block based on global allowed lists.
-        // Authorization is handled at the resolver level based on document permissions.
-        return user;
-    }
-    /**
-     * Verify the auth bearer token
-     */
-    async verifyToken(token) {
-        return await verifyAuthBearerToken(token);
-    }
-    /**
-     * Extract user information from verification result
-     */
-    extractUserFromVerification(verified) {
-        try {
-            const { address, chainId, networkId } = verified.verifiableCredential.credentialSubject;
-            if (!address || !chainId || !networkId) {
-                return null;
-            }
-            return {
-                address,
-                chainId,
-                networkId,
-            };
-        }
-        catch {
-            return null;
-        }
-    }
-    /**
-     * Get additional context fields for GraphQL
-     */
-    getAdditionalContextFields() {
-        if (!this.config.enabled) {
-            return {
-                isAdmin: () => true,
-            };
-        }
-        return {
-            isAdmin: (address) => this.config.enabled &&
-                this.config.admins?.includes(address.toLowerCase()),
-        };
-    }
-    /**
-     * Get user context for GraphQL
-     */
-    getUserContext(user) {
-        if (!user)
-            return {};
-        return {
-            user: {
-                address: user.address.toLowerCase(),
-                chainId: user.chainId,
-                networkId: user.networkId,
-            },
-        };
-    }
-    /**
-     * Verify that the credential still exists on the Renown API
-     */
-    async verifyCredentialExists(address, chainId, appId) {
-        const url = `https://www.renown.id/api/auth/credential?address=${address}&chainId=${chainId}&connectId=${appId}&appId=${appId}`;
-        try {
-            const response = await fetch(url, {
-                method: "GET",
-            });
-            const body = (await response.json());
-            const credential = body.credential;
-            const appIdVerfied = credential.credentialSubject.id;
-            const addressVerfied = credential.issuer.id.split(":")[4];
-            const chainIdVerfied = credential.issuer.id.split(":")[3];
-            if (response.status !== 200) {
-                return false;
-            }
-            return (appIdVerfied === appId &&
-                addressVerfied.toLocaleLowerCase() === address.toLocaleLowerCase() &&
-                chainIdVerfied === chainId.toString());
-        }
-        catch {
-            return false;
-        }
-    }
-}
-//# sourceMappingURL=auth.service.js.map