@qwickapps/server 1.5.2 → 1.6.1

package/dist/plugins/api-keys/stores/usage-log-store.js

@@ -0,0 +1,246 @@
+/**
+ * API Key Usage Log Store - PostgreSQL Implementation
+ *
+ * Tracks all API calls made with API keys for audit trails and usage analytics.
+ * Uses table partitioning for efficient storage and querying of large log volumes.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+/**
+ * PostgreSQL implementation of UsageLogStore
+ */
+export function createPostgresUsageLogStore(config) {
+    const tableName = config.tableName || 'api_key_usage_logs';
+    const schema = config.schema || 'public';
+    const tableFullName = `"${schema}"."${tableName}"`;
+    const autoCreateTables = config.autoCreateTables !== false;
+    const enablePartitioning = config.enablePartitioning !== false;
+    const partitionIntervalDays = config.partitionIntervalDays || 30;
+    /**
+     * Get PostgreSQL pool (lazy initialization support)
+     */
+    function getPool() {
+        if (typeof config.pool === 'function') {
+            return config.pool();
+        }
+        return config.pool;
+    }
+    /**
+     * Create partition for a specific date range
+     */
+    async function createPartition(pool, startDate, endDate) {
+        const partitionName = `${tableName}_${startDate.toISOString().slice(0, 7).replace('-', '_')}`;
+        const partitionFullName = `"${schema}"."${partitionName}"`;
+        try {
+            await pool.query(`
+        CREATE TABLE IF NOT EXISTS ${partitionFullName}
+        PARTITION OF ${tableFullName}
+        FOR VALUES FROM ('${startDate.toISOString()}') TO ('${endDate.toISOString()}');
+      `);
+        }
+        catch (error) {
+            // Ignore if partition already exists
+            if (error.message?.includes('already exists')) {
+                return;
+            }
+            throw error;
+        }
+    }
+    /**
+     * Create partitions for the next N days
+     */
+    async function createUpcomingPartitions(pool, days) {
+        const now = new Date();
+        const intervals = Math.ceil(days / partitionIntervalDays);
+        for (let i = 0; i < intervals; i++) {
+            const startDate = new Date(now);
+            startDate.setDate(startDate.getDate() + (i * partitionIntervalDays));
+            startDate.setUTCHours(0, 0, 0, 0);
+            const endDate = new Date(startDate);
+            endDate.setDate(endDate.getDate() + partitionIntervalDays);
+            await createPartition(pool, startDate, endDate);
+        }
+    }
+    return {
+        name: 'postgres',
+        async initialize() {
+            if (!autoCreateTables)
+                return;
+            const pool = getPool();
+            if (enablePartitioning) {
+                // Create partitioned table
+                await pool.query(`
+          CREATE TABLE IF NOT EXISTS ${tableFullName} (
+            id UUID DEFAULT gen_random_uuid(),
+            key_id UUID NOT NULL,
+            endpoint VARCHAR(500) NOT NULL,
+            method VARCHAR(10) NOT NULL,
+            status_code INTEGER,
+            ip_address INET,
+            user_agent TEXT,
+            timestamp TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+
+            CONSTRAINT valid_status_code CHECK (status_code >= 100 AND status_code < 600),
+            PRIMARY KEY (id, timestamp)
+          ) PARTITION BY RANGE (timestamp);
+        `);
+                // Create default partition for current and future data
+                await pool.query(`
+          CREATE TABLE IF NOT EXISTS "${schema}"."${tableName}_default"
+          PARTITION OF ${tableFullName}
+          DEFAULT;
+        `);
+                // Create partitions for the next 90 days
+                await createUpcomingPartitions(pool, 90);
+            }
+            else {
+                // Create regular table (no partitioning)
+                await pool.query(`
+          CREATE TABLE IF NOT EXISTS ${tableFullName} (
+            id UUID PRIMARY KEY DEFAULT gen_random_uuid(),
+            key_id UUID NOT NULL,
+            endpoint VARCHAR(500) NOT NULL,
+            method VARCHAR(10) NOT NULL,
+            status_code INTEGER,
+            ip_address INET,
+            user_agent TEXT,
+            timestamp TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+
+            CONSTRAINT valid_status_code CHECK (status_code >= 100 AND status_code < 600)
+          );
+        `);
+            }
+            // Create indexes for performance
+            await pool.query(`
+        CREATE INDEX IF NOT EXISTS idx_${tableName}_key_id_timestamp
+        ON ${tableFullName}(key_id, timestamp DESC);
+
+        CREATE INDEX IF NOT EXISTS idx_${tableName}_timestamp
+        ON ${tableFullName}(timestamp DESC);
+
+        CREATE INDEX IF NOT EXISTS idx_${tableName}_endpoint
+        ON ${tableFullName}(endpoint);
+      `);
+        },
+        async log(entry) {
+            const pool = getPool();
+            await pool.query(`INSERT INTO ${tableFullName} (key_id, endpoint, method, status_code, ip_address, user_agent, timestamp)
+         VALUES ($1, $2, $3, $4, $5, $6, COALESCE($7, NOW()))`, [
+                entry.key_id,
+                entry.endpoint,
+                entry.method,
+                entry.status_code || null,
+                entry.ip_address || null,
+                entry.user_agent || null,
+                entry.timestamp || null,
+            ]);
+        },
+        async logBatch(entries) {
+            if (entries.length === 0)
+                return;
+            const pool = getPool();
+            const values = entries.map((entry, index) => {
+                const baseIndex = index * 7;
+                return `($${baseIndex + 1}, $${baseIndex + 2}, $${baseIndex + 3}, $${baseIndex + 4}, $${baseIndex + 5}, $${baseIndex + 6}, COALESCE($${baseIndex + 7}, NOW()))`;
+            }).join(', ');
+            const params = entries.flatMap(entry => [
+                entry.key_id,
+                entry.endpoint,
+                entry.method,
+                entry.status_code || null,
+                entry.ip_address || null,
+                entry.user_agent || null,
+                entry.timestamp || null,
+            ]);
+            await pool.query(`INSERT INTO ${tableFullName} (key_id, endpoint, method, status_code, ip_address, user_agent, timestamp)
+         VALUES ${values}`, params);
+        },
+        async getKeyUsage(keyId, options = {}) {
+            const pool = getPool();
+            const conditions = ['key_id = $1'];
+            const params = [keyId];
+            let paramIndex = 2;
+            if (options.since) {
+                conditions.push(`timestamp >= $${paramIndex++}`);
+                params.push(options.since);
+            }
+            if (options.until) {
+                conditions.push(`timestamp <= $${paramIndex++}`);
+                params.push(options.until);
+            }
+            if (options.endpoint) {
+                conditions.push(`endpoint LIKE $${paramIndex++}`);
+                params.push(`%${options.endpoint}%`);
+            }
+            if (options.method) {
+                conditions.push(`method = $${paramIndex++}`);
+                params.push(options.method.toUpperCase());
+            }
+            if (options.statusCode) {
+                conditions.push(`status_code = $${paramIndex++}`);
+                params.push(options.statusCode);
+            }
+            const limit = options.limit || 100;
+            const offset = options.offset || 0;
+            const result = await pool.query(`SELECT id, key_id, endpoint, method, status_code, ip_address, user_agent, timestamp
+         FROM ${tableFullName}
+         WHERE ${conditions.join(' AND ')}
+         ORDER BY timestamp DESC
+         LIMIT ${limit} OFFSET ${offset}`, params);
+            return result.rows;
+        },
+        async getKeyStats(keyId, options = {}) {
+            const pool = getPool();
+            const conditions = ['key_id = $1'];
+            const params = [keyId];
+            let paramIndex = 2;
+            if (options.since) {
+                conditions.push(`timestamp >= $${paramIndex++}`);
+                params.push(options.since);
+            }
+            if (options.until) {
+                conditions.push(`timestamp <= $${paramIndex++}`);
+                params.push(options.until);
+            }
+            // Get total calls and last used
+            const totalResult = await pool.query(`SELECT COUNT(*)::text as total, MAX(timestamp) as last_used
+         FROM ${tableFullName}
+         WHERE ${conditions.join(' AND ')}`, params);
+            // Get calls by status code
+            const statusResult = await pool.query(`SELECT status_code, COUNT(*)::text as count
+         FROM ${tableFullName}
+         WHERE ${conditions.join(' AND ')} AND status_code IS NOT NULL
+         GROUP BY status_code`, params);
+            // Get calls by endpoint (top 10)
+            const endpointResult = await pool.query(`SELECT endpoint, COUNT(*)::text as count
+         FROM ${tableFullName}
+         WHERE ${conditions.join(' AND ')}
+         GROUP BY endpoint
+         ORDER BY count DESC
+         LIMIT 10`, params);
+            const callsByStatus = {};
+            statusResult.rows.forEach(row => {
+                callsByStatus[row.status_code] = parseInt(row.count, 10);
+            });
+            const callsByEndpoint = {};
+            endpointResult.rows.forEach(row => {
+                callsByEndpoint[row.endpoint] = parseInt(row.count, 10);
+            });
+            return {
+                totalCalls: parseInt(totalResult.rows[0]?.total || '0', 10),
+                lastUsed: totalResult.rows[0]?.last_used,
+                callsByStatus,
+                callsByEndpoint,
+            };
+        },
+        async deleteOlderThan(date) {
+            const pool = getPool();
+            const result = await pool.query(`DELETE FROM ${tableFullName} WHERE timestamp < $1`, [date]);
+            return result.rowCount || 0;
+        },
+        async shutdown() {
+            // No cleanup needed
+        },
+    };
+}
+//# sourceMappingURL=usage-log-store.js.map

package/dist/plugins/api-keys/stores/usage-log-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-log-store.js","sourceRoot":"","sources":["../../../../src/plugins/api-keys/stores/usage-log-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAyHH;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAAmC;IAEnC,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,oBAAoB,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC;IACzC,MAAM,aAAa,GAAG,IAAI,MAAM,MAAM,SAAS,GAAG,CAAC;IACnD,MAAM,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,KAAK,KAAK,CAAC;IAC3D,MAAM,kBAAkB,GAAG,MAAM,CAAC,kBAAkB,KAAK,KAAK,CAAC;IAC/D,MAAM,qBAAqB,GAAG,MAAM,CAAC,qBAAqB,IAAI,EAAE,CAAC;IAEjE;;OAEG;IACH,SAAS,OAAO;QACd,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACtC,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;QACvB,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,eAAe,CAAC,IAAU,EAAE,SAAe,EAAE,OAAa;QACvE,MAAM,aAAa,GAAG,GAAG,SAAS,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;QAC9F,MAAM,iBAAiB,GAAG,IAAI,MAAM,MAAM,aAAa,GAAG,CAAC;QAE3D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC;qCACc,iBAAiB;uBAC/B,aAAa;4BACR,SAAS,CAAC,WAAW,EAAE,WAAW,OAAO,CAAC,WAAW,EAAE;OAC5E,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qCAAqC;YACrC,IAAK,KAAe,CAAC,OAAO,EAAE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;gBACzD,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,UAAU,wBAAwB,CAAC,IAAU,EAAE,IAAY;QAC9D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC,CAAC;QAE1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;YAChC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,CAAC;YACrE,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAElC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC;YACpC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,qBAAqB,CAAC,CAAC;YAE3D,MAAM,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,UAAU;QAEhB,KAAK,CAAC,UAAU;YACd,IAAI,CAAC,gBAAgB;gBAAE,OAAO;YAE9B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YAEvB,IAAI,kBAAkB,EAAE,CAAC;gBACvB,2BAA2B;gBAC3B,MAAM,IAAI,CAAC,KAAK,CAAC;uCACc,aAAa;;;;;;;;;;;;;SAa3C,CAAC,CAAC;gBAEH,uDAAuD;gBACvD,MAAM,IAAI,CAAC,KAAK,CAAC;wCACe,MAAM,MAAM,SAAS;yBACpC,aAAa;;SAE7B,CAAC,CAAC;gBAEH,yCAAyC;gBACzC,MAAM,wBAAwB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,yCAAyC;gBACzC,MAAM,IAAI,CAAC,KAAK,CAAC;uCACc,aAAa;;;;;;;;;;;;SAY3C,CAAC,CAAC;YACL,CAAC;YAED,iCAAiC;YACjC,MAAM,IAAI,CAAC,KAAK,CAAC;yCACkB,SAAS;aACrC,aAAa;;yCAEe,SAAS;aACrC,aAAa;;yCAEe,SAAS;aACrC,aAAa;OACnB,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,KAAoB;YAC5B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,KAAK,CACd,eAAe,aAAa;8DAC0B,EACtD;gBACE,KAAK,CAAC,MAAM;gBACZ,KAAK,CAAC,QAAQ;gBACd,KAAK,CAAC,MAAM;gBACZ,KAAK,CAAC,WAAW,IAAI,IAAI;gBACzB,KAAK,CAAC,UAAU,IAAI,IAAI;gBACxB,KAAK,CAAC,UAAU,IAAI,IAAI;gBACxB,KAAK,CAAC,SAAS,IAAI,IAAI;aACxB,CACF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,QAAQ,CAAC,OAAwB;YACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAEjC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;gBAC1C,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC;gBAC5B,OAAO,KAAK,SAAS,GAAG,CAAC,MAAM,SAAS,GAAG,CAAC,MAAM,SAAS,GAAG,CAAC,MAAM,SAAS,GAAG,CAAC,MAAM,SAAS,GAAG,CAAC,MAAM,SAAS,GAAG,CAAC,eAAe,SAAS,GAAG,CAAC,WAAW,CAAC;YAClK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEd,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,KAAK,CAAC,MAAM;gBACZ,KAAK,CAAC,QAAQ;gBACd,KAAK,CAAC,MAAM;gBACZ,KAAK,CAAC,WAAW,IAAI,IAAI;gBACzB,KAAK,CAAC,UAAU,IAAI,IAAI;gBACxB,KAAK,CAAC,UAAU,IAAI,IAAI;gBACxB,KAAK,CAAC,SAAS,IAAI,IAAI;aACxB,CAAC,CAAC;YAEH,MAAM,IAAI,CAAC,KAAK,CACd,eAAe,aAAa;kBAClB,MAAM,EAAE,EAClB,MAAM,CACP,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,UAAgC,EAAE;YACjE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,UAAU,GAAa,CAAC,aAAa,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAc,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC,iBAAiB,UAAU,EAAE,EAAE,CAAC,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC,iBAAiB,UAAU,EAAE,EAAE,CAAC,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YAED,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,UAAU,CAAC,IAAI,CAAC,kBAAkB,UAAU,EAAE,EAAE,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACvC,CAAC;YAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;gBACnB,UAAU,CAAC,IAAI,CAAC,aAAa,UAAU,EAAE,EAAE,CAAC,CAAC;gBAC7C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;YAC5C,CAAC;YAED,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;gBACvB,UAAU,CAAC,IAAI,CAAC,kBAAkB,UAAU,EAAE,EAAE,CAAC,CAAC;gBAClD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAClC,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC;YACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;YAEnC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B;gBACQ,aAAa;iBACZ,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;iBAExB,KAAK,WAAW,MAAM,EAAE,EACjC,MAAM,CACP,CAAC;YAEF,OAAO,MAAM,CAAC,IAAI,CAAC;QACrB,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,UAAyD,EAAE;YAC1F,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,UAAU,GAAa,CAAC,aAAa,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAc,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,UAAU,GAAG,CAAC,CAAC;YAEnB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC,iBAAiB,UAAU,EAAE,EAAE,CAAC,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YAED,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,UAAU,CAAC,IAAI,CAAC,iBAAiB,UAAU,EAAE,EAAE,CAAC,CAAC;gBACjD,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC;YAED,gCAAgC;YAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAClC;gBACQ,aAAa;iBACZ,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EACnC,MAAM,CACP,CAAC;YAEF,2BAA2B;YAC3B,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,KAAK,CACnC;gBACQ,aAAa;iBACZ,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;8BACX,EACtB,MAAM,CACP,CAAC;YAEF,iCAAiC;YACjC,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,KAAK,CACrC;gBACQ,aAAa;iBACZ,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;;;kBAGvB,EACV,MAAM,CACP,CAAC;YAEF,MAAM,aAAa,GAA2B,EAAE,CAAC;YACjD,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;gBAC9B,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3D,CAAC,CAAC,CAAC;YAEH,MAAM,eAAe,GAA2B,EAAE,CAAC;YACnD,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE;gBAChC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC1D,CAAC,CAAC,CAAC;YAEH,OAAO;gBACL,UAAU,EAAE,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,GAAG,EAAE,EAAE,CAAC;gBAC3D,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS;gBACxC,aAAa;gBACb,eAAe;aAChB,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,IAAU;YAC9B,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,eAAe,aAAa,uBAAuB,EACnD,CAAC,IAAI,CAAC,CACP,CAAC;YACF,OAAO,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC9B,CAAC;QAED,KAAK,CAAC,QAAQ;YACZ,oBAAoB;QACtB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/plugins/api-keys/types.d.ts

@@ -0,0 +1,309 @@
+/**
+ * API Keys Plugin Types
+ *
+ * Type definitions for API key authentication and management.
+ * Supports PostgreSQL with Row-Level Security (RLS) for data isolation.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import { z } from 'zod';
+/**
+ * API key scope type
+ *
+ * Scopes follow the format: 'plugin-id:action' (e.g., 'qwickbrain:execute')
+ *
+ * Legacy scopes ('read', 'write', 'admin') are automatically converted to
+ * 'system:read', 'system:write', 'system:admin' for backwards compatibility.
+ */
+export type ApiKeyScope = string;
+/**
+ * Validate scope name format
+ *
+ * Valid formats:
+ * - Plugin scope: 'plugin-id:action' (e.g., 'qwickbrain:execute')
+ * - Legacy scope: 'read', 'write', 'admin' (converted to 'system:*')
+ *
+ * @param scope Scope name to validate
+ * @returns True if scope format is valid
+ */
+export declare function isValidScopeFormat(scope: string): boolean;
+/**
+ * Normalize scope to new format
+ *
+ * Converts legacy scopes ('read', 'write', 'admin') to new format ('system:*')
+ *
+ * @param scope Scope to normalize
+ * @returns Normalized scope
+ */
+export declare function normalizeScope(scope: string): string;
+/**
+ * System scopes for backwards compatibility
+ */
+export declare const SystemScopes: {
+    readonly READ: "system:read";
+    readonly WRITE: "system:write";
+    readonly ADMIN: "system:admin";
+};
+/**
+ * API key type (M2M = machine-to-machine, PAT = personal access token)
+ */
+export type ApiKeyType = 'm2m' | 'pat';
+/**
+ * API key record in the database
+ */
+export interface ApiKey {
+    /** Primary key - UUID */
+    id: string;
+    /** User ID (foreign key to users table) */
+    user_id: string;
+    /** Human-readable name for the key */
+    name: string;
+    /** Hashed API key (SHA-256) */
+    key_hash: string;
+    /** Key prefix for identification (e.g., 'qk_live_') - stored in plaintext */
+    key_prefix: string;
+    /** Key type: m2m (machine-to-machine) or pat (personal access token) */
+    key_type: ApiKeyType;
+    /** Scopes granted to this key */
+    scopes: ApiKeyScope[];
+    /** Last time this key was used */
+    last_used_at: Date | null;
+    /** Expiration date (null = never expires) */
+    expires_at: Date | null;
+    /** Whether the key is active */
+    is_active: boolean;
+    /** When the key was created */
+    created_at: Date;
+    /** When the key was last updated */
+    updated_at: Date;
+}
+/**
+ * API key creation parameters
+ */
+export interface CreateApiKeyParams {
+    /** User ID who owns this key */
+    user_id: string;
+    /** Human-readable name for the key */
+    name: string;
+    /** Key type: m2m or pat */
+    key_type: ApiKeyType;
+    /** Scopes to grant */
+    scopes: ApiKeyScope[];
+    /** Optional expiration date */
+    expires_at?: Date;
+}
+/**
+ * API key update parameters
+ */
+export interface UpdateApiKeyParams {
+    /** New name (optional) */
+    name?: string;
+    /** New scopes (optional) */
+    scopes?: ApiKeyScope[];
+    /** New expiration date (optional) */
+    expires_at?: Date;
+    /** Activate/deactivate key (optional) */
+    is_active?: boolean;
+}
+/**
+ * API key with plaintext key (only returned on creation)
+ */
+export interface ApiKeyWithPlaintext extends ApiKey {
+    /** Plaintext API key - only available on creation */
+    plaintext_key: string;
+}
+/**
+ * API key store interface - all storage backends must implement this
+ */
+export interface ApiKeyStore {
+    /** Store name (e.g., 'postgres', 'memory') */
+    name: string;
+    /**
+     * Initialize the store (create tables, RLS policies, etc.)
+     */
+    initialize(): Promise<void>;
+    /**
+     * Create a new API key
+     * Returns the key with plaintext value (only time plaintext is accessible)
+     */
+    create(params: CreateApiKeyParams): Promise<ApiKeyWithPlaintext>;
+    /**
+     * Get all API keys for a user
+     */
+    list(userId: string): Promise<ApiKey[]>;
+    /**
+     * Get a specific API key by ID
+     * Returns null if key doesn't exist or doesn't belong to user
+     */
+    get(userId: string, keyId: string): Promise<ApiKey | null>;
+    /**
+     * Verify an API key and return the associated key record
+     * Returns null if key is invalid, expired, or inactive
+     */
+    verify(plaintextKey: string): Promise<ApiKey | null>;
+    /**
+     * Update an API key
+     * Returns the updated key or null if key doesn't exist
+     */
+    update(userId: string, keyId: string, params: UpdateApiKeyParams): Promise<ApiKey | null>;
+    /**
+     * Delete an API key
+     * Returns true if key was deleted, false if it didn't exist
+     */
+    delete(userId: string, keyId: string): Promise<boolean>;
+    /**
+     * Record key usage (updates last_used_at timestamp)
+     */
+    recordUsage(keyId: string): Promise<void>;
+    /**
+     * Shutdown the store
+     */
+    shutdown(): Promise<void>;
+}
+/**
+ * PostgreSQL API key store configuration
+ */
+export interface PostgresApiKeyStoreConfig {
+    /** PostgreSQL pool instance or a function that returns one (for lazy initialization) */
+    pool: unknown | (() => unknown);
+    /** Table name (default: 'api_keys') */
+    tableName?: string;
+    /** Schema name (default: 'public') */
+    schema?: string;
+    /** Auto-create tables on init (default: true) */
+    autoCreateTables?: boolean;
+    /** Enable RLS (default: true) */
+    enableRLS?: boolean;
+    /** Key expiration in days (default: 90, null = never expires) */
+    defaultExpirationDays?: number | null;
+    /** Environment for key prefix (default: from NODE_ENV, 'test' in non-production, 'live' in production) */
+    environment?: 'test' | 'live';
+}
+/**
+ * API keys API configuration
+ */
+export interface ApiKeysApiConfig {
+    /** API route prefix (default: '/api-keys') */
+    prefix?: string;
+    /** Enable API endpoints (default: true) */
+    enabled?: boolean;
+}
+/**
+ * API keys plugin configuration
+ */
+export interface ApiKeysPluginConfig {
+    /** API key storage backend */
+    store: ApiKeyStore;
+    /** Plugin scope storage backend (optional, for Phase 2) */
+    scopeStore?: import('./stores/plugin-scope-store.js').PluginScopeStore;
+    /** Usage log storage backend (optional, for Phase 2) */
+    usageStore?: import('./stores/usage-log-store.js').UsageLogStore;
+    /** API configuration */
+    api?: ApiKeysApiConfig;
+    /** Enable debug logging */
+    debug?: boolean;
+}
+/**
+ * Zod schema for API key scope
+ *
+ * Validates scope format:
+ * - Plugin scope: 'plugin-id:action' (e.g., 'qwickbrain:execute')
+ * - Legacy scope: 'read', 'write', 'admin'
+ */
+export declare const ApiKeyScopeSchema: z.ZodEffects<z.ZodString, string, string>;
+/**
+ * Zod schema for API key type
+ */
+export declare const ApiKeyTypeSchema: z.ZodEnum<["m2m", "pat"]>;
+/**
+ * Zod schema for creating an API key
+ */
+export declare const CreateApiKeySchema: z.ZodObject<{
+    name: z.ZodString;
+    key_type: z.ZodEnum<["m2m", "pat"]>;
+    scopes: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    expires_at: z.ZodOptional<z.ZodDate>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    key_type: "m2m" | "pat";
+    scopes: string[];
+    expires_at?: Date | undefined;
+}, {
+    name: string;
+    key_type: "m2m" | "pat";
+    scopes: string[];
+    expires_at?: Date | undefined;
+}>;
+/**
+ * Zod schema for updating an API key
+ */
+export declare const UpdateApiKeySchema: z.ZodEffects<z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    scopes: z.ZodOptional<z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">>;
+    expires_at: z.ZodOptional<z.ZodDate>;
+    is_active: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    name?: string | undefined;
+    scopes?: string[] | undefined;
+    expires_at?: Date | undefined;
+    is_active?: boolean | undefined;
+}, {
+    name?: string | undefined;
+    scopes?: string[] | undefined;
+    expires_at?: Date | undefined;
+    is_active?: boolean | undefined;
+}>, {
+    name?: string | undefined;
+    scopes?: string[] | undefined;
+    expires_at?: Date | undefined;
+    is_active?: boolean | undefined;
+}, {
+    name?: string | undefined;
+    scopes?: string[] | undefined;
+    expires_at?: Date | undefined;
+    is_active?: boolean | undefined;
+}>;
+/**
+ * Zod schema for API key record
+ */
+export declare const ApiKeySchema: z.ZodObject<{
+    id: z.ZodString;
+    user_id: z.ZodString;
+    name: z.ZodString;
+    key_hash: z.ZodString;
+    key_prefix: z.ZodString;
+    key_type: z.ZodEnum<["m2m", "pat"]>;
+    scopes: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    last_used_at: z.ZodNullable<z.ZodDate>;
+    expires_at: z.ZodNullable<z.ZodDate>;
+    is_active: z.ZodBoolean;
+    created_at: z.ZodDate;
+    updated_at: z.ZodDate;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    created_at: Date;
+    updated_at: Date;
+    key_type: "m2m" | "pat";
+    scopes: string[];
+    expires_at: Date | null;
+    is_active: boolean;
+    id: string;
+    user_id: string;
+    key_hash: string;
+    key_prefix: string;
+    last_used_at: Date | null;
+}, {
+    name: string;
+    created_at: Date;
+    updated_at: Date;
+    key_type: "m2m" | "pat";
+    scopes: string[];
+    expires_at: Date | null;
+    is_active: boolean;
+    id: string;
+    user_id: string;
+    key_hash: string;
+    key_prefix: string;
+    last_used_at: Date | null;
+}>;
+//# sourceMappingURL=types.d.ts.map

package/dist/plugins/api-keys/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/plugins/api-keys/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAUzD;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOpD;AAED;;GAEG;AACH,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AAEX;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,KAAK,CAAC;AAEvC;;GAEG;AACH,MAAM,WAAW,MAAM;IACrB,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,QAAQ,EAAE,UAAU,CAAC;IACrB,iCAAiC;IACjC,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,kCAAkC;IAClC,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;IAC1B,6CAA6C;IAC7C,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACxB,gCAAgC;IAChC,SAAS,EAAE,OAAO,CAAC;IACnB,+BAA+B;IAC/B,UAAU,EAAE,IAAI,CAAC;IACjB,oCAAoC;IACpC,UAAU,EAAE,IAAI,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,2BAA2B;IAC3B,QAAQ,EAAE,UAAU,CAAC;IACrB,sBAAsB;IACtB,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,+BAA+B;IAC/B,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,0BAA0B;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;IACvB,qCAAqC;IACrC,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,yCAAyC;IACzC,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAoB,SAAQ,MAAM;IACjD,qDAAqD;IACrD,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5B;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEjE;;OAEG;IACH,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAExC;;;OAGG;IACH,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE3D;;;OAGG;IACH,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAErD;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE1F;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAExD;;OAEG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1C;;OAEG;IACH,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,wFAAwF;IACxF,IAAI,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAC;IAChC,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,iCAAiC;IACjC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,iEAAiE;IACjE,qBAAqB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,8BAA8B;IAC9B,KAAK,EAAE,WAAW,CAAC;IACnB,2DAA2D;IAC3D,UAAU,CAAC,EAAE,OAAO,gCAAgC,EAAE,gBAAgB,CAAC;IACvE,wDAAwD;IACxD,UAAU,CAAC,EAAE,OAAO,6BAA6B,EAAE,aAAa,CAAC;IACjE,wBAAwB;IACxB,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAMD;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,2CAG7B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,gBAAgB,2BAAyB,CAAC;AAEvD;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;EAK7B,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;EAQ9B,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAavB,CAAC"}

package/dist/plugins/api-keys/types.js

@@ -0,0 +1,105 @@
+/**
+ * API Keys Plugin Types
+ *
+ * Type definitions for API key authentication and management.
+ * Supports PostgreSQL with Row-Level Security (RLS) for data isolation.
+ *
+ * Copyright (c) 2025 QwickApps.com. All rights reserved.
+ */
+import { z } from 'zod';
+/**
+ * Validate scope name format
+ *
+ * Valid formats:
+ * - Plugin scope: 'plugin-id:action' (e.g., 'qwickbrain:execute')
+ * - Legacy scope: 'read', 'write', 'admin' (converted to 'system:*')
+ *
+ * @param scope Scope name to validate
+ * @returns True if scope format is valid
+ */
+export function isValidScopeFormat(scope) {
+    // Plugin scope format: plugin-id:action
+    if (/^[a-z0-9-]+:[a-z0-9-]+$/.test(scope)) {
+        return true;
+    }
+    // Legacy format: read, write, admin
+    if (['read', 'write', 'admin'].includes(scope)) {
+        return true;
+    }
+    return false;
+}
+/**
+ * Normalize scope to new format
+ *
+ * Converts legacy scopes ('read', 'write', 'admin') to new format ('system:*')
+ *
+ * @param scope Scope to normalize
+ * @returns Normalized scope
+ */
+export function normalizeScope(scope) {
+    const legacyMap = {
+        'read': 'system:read',
+        'write': 'system:write',
+        'admin': 'system:admin',
+    };
+    return legacyMap[scope] || scope;
+}
+/**
+ * System scopes for backwards compatibility
+ */
+export const SystemScopes = {
+    READ: 'system:read',
+    WRITE: 'system:write',
+    ADMIN: 'system:admin',
+};
+// ============================================================================
+// Zod Validation Schemas
+// ============================================================================
+/**
+ * Zod schema for API key scope
+ *
+ * Validates scope format:
+ * - Plugin scope: 'plugin-id:action' (e.g., 'qwickbrain:execute')
+ * - Legacy scope: 'read', 'write', 'admin'
+ */
+export const ApiKeyScopeSchema = z.string().refine((scope) => isValidScopeFormat(scope), { message: 'Scope must be in format "plugin-id:action" or a legacy scope (read, write, admin)' });
+/**
+ * Zod schema for API key type
+ */
+export const ApiKeyTypeSchema = z.enum(['m2m', 'pat']);
+/**
+ * Zod schema for creating an API key
+ */
+export const CreateApiKeySchema = z.object({
+    name: z.string().min(1).max(255),
+    key_type: ApiKeyTypeSchema,
+    scopes: z.array(ApiKeyScopeSchema).min(1),
+    expires_at: z.coerce.date().optional(),
+});
+/**
+ * Zod schema for updating an API key
+ */
+export const UpdateApiKeySchema = z.object({
+    name: z.string().min(1).max(255).optional(),
+    scopes: z.array(ApiKeyScopeSchema).min(1).optional(),
+    expires_at: z.coerce.date().optional(),
+    is_active: z.boolean().optional(),
+}).refine((data) => Object.keys(data).length > 0, { message: 'At least one field must be provided for update' });
+/**
+ * Zod schema for API key record
+ */
+export const ApiKeySchema = z.object({
+    id: z.string().uuid(),
+    user_id: z.string().uuid(),
+    name: z.string(),
+    key_hash: z.string(),
+    key_prefix: z.string(),
+    key_type: ApiKeyTypeSchema,
+    scopes: z.array(ApiKeyScopeSchema),
+    last_used_at: z.coerce.date().nullable(),
+    expires_at: z.coerce.date().nullable(),
+    is_active: z.boolean(),
+    created_at: z.coerce.date(),
+    updated_at: z.coerce.date(),
+});
+//# sourceMappingURL=types.js.map

package/dist/plugins/api-keys/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/plugins/api-keys/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,wCAAwC;IACxC,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,oCAAoC;IACpC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,MAAM,SAAS,GAA2B;QACxC,MAAM,EAAE,aAAa;QACrB,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,cAAc;KACxB,CAAC;IACF,OAAO,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,cAAc;IACrB,KAAK,EAAE,cAAc;CACb,CAAC;AAmLX,+EAA+E;AAC/E,yBAAyB;AACzB,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAChD,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,EACpC,EAAE,OAAO,EAAE,mFAAmF,EAAE,CACjG,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEvD;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,QAAQ,EAAE,gBAAgB;IAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAC3C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpD,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC,MAAM,CACP,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EACtC,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAC9D,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,QAAQ,EAAE,gBAAgB;IAC1B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE;CAC5B,CAAC,CAAC"}