@raybase/api 0.0.0 → 0.1.0

package/dist/api.js

@@ -0,0 +1,375 @@
+import { ActionDeniedError, ActionInputValidationError, ActionOutputValidationError, actionInputJsonSchema, actionOutputJsonSchema, actorAuditRef, authSecret, createRaybaseAuthContextRuntime, createRaybaseDb, defineRaybaseModule, disabledRaybaseAI, executeAction, randomId, recordAudit, unsupportedRaybaseAgentInvocationRuntime, unsupportedRaybaseJobsRuntime, validateActionExposure } from "@raybase/core";
+import { authenticateApiRequest, recordApiKeyEvent } from "./auth.js";
+import { ApiHttpError, apiErrorResponse, errorMessage } from "./errors.js";
+import { createApiAdminRoutes } from "./admin-routes.js";
+import { matchApiPath } from "./path.js";
+import { raybaseApiSystemTables } from "./system-tables.js";
+export function apiOperation(action, options) {
+    if ("handler" in options) {
+        throw new Error("apiOperation() adapts a Raybase action and does not accept a handler.");
+    }
+    return {
+        kind: "raybase.api.operation",
+        action,
+        method: normalizeMethod(options.method),
+        path: normalizeRelativePath(options.path),
+        scopes: normalizeScopes(options.scopes),
+        summary: options.summary,
+        description: options.description,
+        tags: options.tags ?? [],
+        idempotency: options.idempotency,
+        parseRequest: options.parseRequest,
+        serializeResponse: options.serializeResponse,
+        examples: options.examples ?? []
+    };
+}
+export function defineApiOperations(operations) {
+    validateApiOperations(operations, defaultApiPrefix);
+    return operations;
+}
+export function apiKeyScopes(...scopes) {
+    return normalizeScopes(scopes);
+}
+export function apiModule(options) {
+    const prefix = normalizePrefix(options.prefix ?? defaultApiPrefix);
+    validateApiOperations(options.operations, prefix);
+    const operations = Object.entries(options.operations);
+    const routes = operations.map(([name, operation]) => {
+        const fullPath = joinPaths(prefix, operation.path);
+        return {
+            method: operation.method,
+            path: fullPath,
+            auth: "public",
+            csrf: "bypass",
+            handle: (ctx) => handleApiOperation(ctx, name, operation, fullPath, options.keys)
+        };
+    });
+    return defineRaybaseModule({
+        id: "api",
+        packageName: "@raybase/api",
+        version: "0.1.0",
+        runtime: () => ({
+            systemTables: raybaseApiSystemTables,
+            routes,
+            adminRoutes: options.admin?.enabled === false
+                ? []
+                : createApiAdminRoutes({
+                    prefix,
+                    operations: operationSummaries(prefix, options.operations),
+                    keys: options.keys,
+                    docsTitle: options.docs?.title ?? "Raybase API"
+                })
+        })
+    });
+}
+export function operationSummaries(prefix, operations) {
+    return Object.entries(operations).map(([name, operation]) => ({
+        name,
+        actionName: operation.action.name,
+        method: operation.method,
+        path: joinPaths(prefix, operation.path),
+        scopes: operation.scopes,
+        summary: operation.summary ?? operation.action.annotations?.title ?? operation.action.name,
+        description: operation.description ?? operation.action.description,
+        tags: operation.tags,
+        inputSchema: actionInputJsonSchema(operation.action),
+        outputSchema: actionOutputJsonSchema(operation.action),
+        examples: operation.examples
+    }));
+}
+export const defaultApiPrefix = "/api/v1";
+const reservedApiPrefixes = [
+    "/api",
+    "/api/data",
+    "/api/files",
+    "/api/admin",
+    "/api/auth",
+    "/api/health",
+    "/api/search",
+    "/api/realtime",
+    "/api/raybase",
+    "/api/guide",
+    "/api/ai",
+    "/mcp",
+    "/admin",
+    "/login",
+    "/signup",
+    "/setup",
+    "/invite"
+];
+function validateApiOperations(operations, prefix) {
+    normalizePrefix(prefix);
+    const names = new Set();
+    const routes = new Set();
+    for (const [name, operation] of Object.entries(operations)) {
+        if (!/^[A-Za-z][A-Za-z0-9_.:-]{0,127}$/.test(name))
+            throw new Error(`Invalid API operation name: ${name}`);
+        if (names.has(name))
+            throw new Error(`Duplicate API operation name: ${name}`);
+        names.add(name);
+        if (operation.kind !== "raybase.api.operation")
+            throw new Error(`Invalid API operation declaration: ${name}`);
+        validateActionExposure(operation.action, { requirePolicy: true });
+        operation.method = normalizeMethod(operation.method);
+        operation.path = normalizeRelativePath(operation.path);
+        operation.scopes = normalizeScopes(operation.scopes);
+        const routeKey = `${operation.method} ${routeShape(joinPaths(prefix, operation.path))}`;
+        if (routes.has(routeKey))
+            throw new Error(`Duplicate API operation route: ${routeKey}`);
+        routes.add(routeKey);
+    }
+}
+function normalizeMethod(method) {
+    const normalized = method.toUpperCase();
+    if (!["GET", "POST", "PUT", "PATCH", "DELETE"].includes(normalized)) {
+        throw new Error(`Unsupported API operation method: ${method}`);
+    }
+    return normalized;
+}
+function normalizeRelativePath(path) {
+    if (typeof path !== "string" || !path.startsWith("/"))
+        throw new Error("API operation path must start with /.");
+    if (path.includes("?") || path.includes("#"))
+        throw new Error("API operation path must not include query or hash.");
+    const normalized = `/${path.split("/").filter(Boolean).join("/")}`;
+    return normalized === "/" ? "/" : normalized;
+}
+function normalizePrefix(prefix) {
+    if (typeof prefix !== "string" || !prefix.startsWith("/"))
+        throw new Error("API prefix must start with /.");
+    if (prefix.includes("?") || prefix.includes("#"))
+        throw new Error("API prefix must not include query or hash.");
+    const normalized = `/${prefix.split("/").filter(Boolean).join("/")}`;
+    for (const reserved of reservedApiPrefixes) {
+        if (reserved === "/api") {
+            if (normalized === "/api")
+                throw new Error("API prefix /api overlaps Raybase-owned API infrastructure.");
+            continue;
+        }
+        if (normalized === reserved || normalized.startsWith(`${reserved}/`)) {
+            throw new Error(`API prefix ${normalized} overlaps Raybase-owned route prefix ${reserved}.`);
+        }
+    }
+    return normalized;
+}
+function normalizeScopes(scopes) {
+    if (!Array.isArray(scopes) || scopes.length === 0)
+        throw new Error("API operation scopes must not be empty.");
+    const normalized = Array.from(new Set(scopes.map((scope) => String(scope ?? "").trim()).filter(Boolean)));
+    for (const scope of normalized) {
+        if (!/^[a-z][a-z0-9_.-]{0,63}:(read|write|delete|[a-z][a-z0-9_.-]{0,31})$/.test(scope)) {
+            throw new Error(`Invalid API operation scope: ${scope}`);
+        }
+    }
+    return normalized;
+}
+function joinPaths(prefix, path) {
+    const joined = `${prefix.replace(/\/+$/g, "")}/${path.replace(/^\/+/g, "")}`;
+    return joined.replace(/\/+$/g, "") || "/";
+}
+function routeShape(path) {
+    return path
+        .split("/")
+        .map((part) => (part.startsWith(":") ? ":" : part))
+        .join("/");
+}
+async function handleApiOperation(ctx, operationName, operation, route, keyOptions) {
+    const requestId = ctx.request.headers.get("cf-ray") ?? randomId("api_req");
+    let actorId = null;
+    let apiKeyId = null;
+    let servicePrincipalId = null;
+    try {
+        const params = matchApiPath(route, new URL(ctx.request.url).pathname);
+        if (!params)
+            throw new ApiHttpError(404, "not_found", "API operation not found.");
+        const authenticated = await authenticateApiRequest(ctx, {
+            scopes: operation.scopes,
+            operationName,
+            route: `${operation.method} ${route}`,
+            requestId
+        });
+        actorId = authenticated.user.id;
+        apiKeyId = authenticated.key.id;
+        servicePrincipalId = authenticated.servicePrincipal.id;
+        const body = await readRequestBody(ctx.request, operation.method);
+        const parts = {
+            request: ctx.request,
+            params,
+            query: queryObject(ctx.request),
+            body,
+            headers: ctx.request.headers,
+            method: operation.method,
+            path: route,
+            requestId
+        };
+        const rawInput = operation.parseRequest ? operation.parseRequest(parts) : defaultActionInput(parts);
+        const db = createRaybaseDb(ctx.env, ctx.schema, ctx.appMigrations).for({
+            user: authenticated.user,
+            source: {
+                surface: "api",
+                route,
+                requestId,
+                actionName: operation.action.name,
+                apiKeyId: authenticated.key.id,
+                servicePrincipalId: authenticated.servicePrincipal.id,
+                apiOperationName: operationName
+            },
+            audit: (entry) => recordAudit(ctx.control, { actor: actorAuditRef(authenticated.user.id), action: entry.action, target: entry.target, metadata: entry.metadata, source: entry.source })
+        });
+        const apiMetadata = {
+            requestId,
+            operationName,
+            actionName: operation.action.name,
+            route: `${operation.method} ${route}`,
+            servicePrincipalId: authenticated.servicePrincipal.id,
+            apiKeyId: authenticated.key.id,
+            scopes: authenticated.scopes
+        };
+        await recordAudit(ctx.control, {
+            actor: actorAuditRef(authenticated.user.id),
+            action: "api.operation.invoke",
+            target: { type: "raybase_api_operation", id: operationName },
+            metadata: {
+                ...apiMetadata,
+                requiredScopes: operation.scopes
+            },
+            source: { surface: "api", route, requestId }
+        });
+        const result = await executeAction(operation.action, rawInput, {
+            request: ctx.request,
+            env: ctx.env,
+            user: authenticated.user,
+            principal: { kind: "user", user: authenticated.user },
+            db,
+            auth: createRaybaseAuthContextRuntime({
+                db: ctx.control,
+                secret: authSecret(ctx.env),
+                config: ctx.config,
+                sessionAuthenticated: false,
+                principal: { kind: "user", user: authenticated.user },
+                request: ctx.request,
+                audit: (entry) => recordAudit(ctx.control, {
+                    actor: actorAuditRef(authenticated.user.id),
+                    action: entry.action,
+                    target: entry.target,
+                    metadata: entry.metadata,
+                    source: entry.source
+                })
+            }),
+            agents: unsupportedRaybaseAgentInvocationRuntime,
+            ai: disabledRaybaseAI,
+            jobs: unsupportedRaybaseJobsRuntime,
+            settings: ctx.settings,
+            route,
+            surface: "api",
+            requestId,
+            audit: (entry) => recordAudit(ctx.control, { actor: actorAuditRef(authenticated.user.id), action: entry.action, target: entry.target, metadata: entry.metadata, source: entry.source })
+        }, {
+            surface: "api",
+            requirePolicy: true,
+            idempotencyKey: resolveIdempotencyKey(ctx.request, operation, rawInput, apiMetadata)
+        });
+        const response = serializeOperationResponse(operation, result, {
+            requestId,
+            operationName,
+            actionName: operation.action.name,
+            status: "ok"
+        });
+        await recordAudit(ctx.control, {
+            actor: actorAuditRef(authenticated.user.id),
+            action: "api.operation.success",
+            target: { type: "raybase_api_operation", id: operationName },
+            metadata: {
+                ...apiMetadata,
+                status: response.status
+            },
+            source: { surface: "api", route, requestId }
+        });
+        await recordApiKeyEvent(ctx.control, {
+            keyId: authenticated.key.id,
+            servicePrincipalId: authenticated.servicePrincipal.id,
+            ownerUserId: authenticated.user.id,
+            event: "operation.success",
+            requestId,
+            metadata: { operationName, actionName: operation.action.name, route, status: response.status }
+        });
+        return response;
+    }
+    catch (error) {
+        const mapped = mapApiError(error);
+        if (!(mapped instanceof ApiHttpError && mapped.status === 401 && mapped.code === "authentication_required")) {
+            await recordAudit(ctx.control, {
+                actor: actorAuditRef(actorId),
+                action: "api.operation.error",
+                target: { type: "raybase_api_operation", id: operationName },
+                metadata: { requestId, route, apiKeyId, servicePrincipalId, error: errorMessage(error), status: mapped.status },
+                source: { surface: "api", route, requestId }
+            }).catch(() => undefined);
+        }
+        return apiErrorResponse(mapped, requestId);
+    }
+}
+function resolveIdempotencyKey(request, operation, input, metadata) {
+    const headerName = operation.idempotency?.header ?? "Idempotency-Key";
+    const headerValue = request.headers.get(headerName) ?? undefined;
+    if (operation.idempotency?.key)
+        return operation.idempotency.key(input, metadata);
+    return headerValue;
+}
+function serializeOperationResponse(operation, output, metadata) {
+    const serialized = operation.serializeResponse ? operation.serializeResponse(output, metadata) : { data: output };
+    if (serialized instanceof Response)
+        return serialized;
+    if (isSerializedResponse(serialized)) {
+        return Response.json(serialized.body ?? null, { status: serialized.status ?? 200, headers: serialized.headers });
+    }
+    return Response.json(serialized ?? null);
+}
+function isSerializedResponse(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return false;
+    return "body" in value || "status" in value || "headers" in value;
+}
+function mapApiError(error) {
+    if (error instanceof ApiHttpError)
+        return error;
+    if (error instanceof ActionInputValidationError)
+        return new ApiHttpError(400, "invalid_request", "Request input is invalid.");
+    if (error instanceof ActionDeniedError)
+        return new ApiHttpError(403, "policy_denied", "Action policy denied this request.");
+    if (error instanceof ActionOutputValidationError)
+        return new ApiHttpError(500, "internal_error", "The API request could not be completed.");
+    return new ApiHttpError(500, "internal_error", "The API request could not be completed.");
+}
+async function readRequestBody(request, method) {
+    if (method === "GET" || method === "DELETE")
+        return undefined;
+    const text = await request.text();
+    if (!text.trim())
+        return {};
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new ApiHttpError(400, "invalid_request", "Request body must be valid JSON.");
+    }
+}
+function defaultActionInput(parts) {
+    const query = parts.query;
+    if (parts.method === "GET" || parts.method === "DELETE")
+        return { ...parts.params, ...query };
+    if (parts.body && typeof parts.body === "object" && !Array.isArray(parts.body)) {
+        return { ...parts.params, ...query, ...parts.body };
+    }
+    return { ...parts.params, ...query, body: parts.body };
+}
+function queryObject(request) {
+    const url = new URL(request.url);
+    const result = {};
+    for (const key of new Set(url.searchParams.keys())) {
+        const values = url.searchParams.getAll(key);
+        result[key] = values.length > 1 ? values : values[0] ?? "";
+    }
+    return result;
+}
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,0BAA0B,EAC1B,2BAA2B,EAC3B,qBAAqB,EACrB,sBAAsB,EACtB,aAAa,EACb,UAAU,EACV,+BAA+B,EAC/B,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EAEb,QAAQ,EACR,WAAW,EACX,wCAAwC,EACxC,6BAA6B,EAC7B,sBAAsB,EAMvB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAsB,MAAM,WAAW,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAuG5D,MAAM,UAAU,YAAY,CAC1B,MAAyC,EACzC,OAAiE;IAEjE,IAAI,SAAS,IAAK,OAAmC,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,MAAM;QACN,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,IAAI,EAAE,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE;KACjC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAwD,UAAa;IACtG,qBAAqB,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACpD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAG,MAAgB;IAC9C,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,SAAS,CAAgB,OAA8B;IACrE,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,MAAM,IAAI,gBAAgB,CAAC,CAAC;IACnE,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtD,MAAM,MAAM,GAA8B,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE;QAC7E,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QACnD,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC;SAClF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC;QACzB,EAAE,EAAE,KAAK;QACT,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,OAAO;QAChB,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;YACd,YAAY,EAAE,sBAAsB;YACpC,MAAM;YACN,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK;gBAC3C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,oBAAoB,CAAC;oBACnB,MAAM;oBACN,UAAU,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC;oBAC1D,IAAI,EAAE,OAAO,CAAC,IAAI;oBAClB,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,IAAI,aAAa;iBAChD,CAAC;SACP,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,MAAc,EACd,UAAuD;IAEvD,OAAO,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI;QACJ,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI;QACjC,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC;QACvC,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,OAAO,EAAE,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI;QAC1F,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,SAAS,CAAC,MAAM,CAAC,WAAW;QAClE,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,WAAW,EAAE,qBAAqB,CAAC,SAAS,CAAC,MAAM,CAAC;QACpD,YAAY,EAAE,sBAAsB,CAAC,SAAS,CAAC,MAAM,CAAC;QACtD,QAAQ,EAAE,SAAS,CAAC,QAAQ;KAC7B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAE1C,MAAM,mBAAmB,GAAG;IAC1B,MAAM;IACN,WAAW;IACX,YAAY;IACZ,YAAY;IACZ,WAAW;IACX,aAAa;IACb,aAAa;IACb,eAAe;IACf,cAAc;IACd,YAAY;IACZ,SAAS;IACT,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;CACV,CAAC;AAEF,SAAS,qBAAqB,CAAM,UAAuD,EAAE,MAAc;IACzG,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,EAAE,CAAC,CAAC;QAC3G,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QAC9E,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,SAAS,CAAC,IAAI,KAAK,uBAAuB;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,EAAE,CAAC,CAAC;QAC9G,sBAAsB,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,SAAS,CAAC,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrD,SAAS,CAAC,IAAI,GAAG,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACvD,SAAS,CAAC,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,GAAG,SAAS,CAAC,MAAM,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACxF,IAAI,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;QACxF,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACvB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,UAA2B,CAAC;AACrC,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAY;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAChH,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACpH,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACnE,OAAO,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/C,CAAC;AAED,SAAS,eAAe,CAAC,MAAc;IACrC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC5G,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChH,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,KAAK,MAAM,QAAQ,IAAI,mBAAmB,EAAE,CAAC;QAC3C,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;YACxB,IAAI,UAAU,KAAK,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YACzG,SAAS;QACX,CAAC;QACD,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,KAAK,CAAC,cAAc,UAAU,wCAAwC,QAAQ,GAAG,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,MAAgB;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC9G,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1G,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC,qEAAqE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACvF,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,SAAS,CAAC,MAAc,EAAE,IAAY;IAC7C,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC;IAC7E,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAClD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,GAAmC,EACnC,aAAqB,EACrB,SAAsC,EACtC,KAAa,EACb,UAAqC;IAErC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC3E,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,QAAQ,GAAkB,IAAI,CAAC;IACnC,IAAI,kBAAkB,GAAkB,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,WAAW,EAAE,0BAA0B,CAAC,CAAC;QAClF,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,GAAG,EAAE;YACtD,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,aAAa;YACb,KAAK,EAAE,GAAG,SAAS,CAAC,MAAM,IAAI,KAAK,EAAE;YACrC,SAAS;SACV,CAAC,CAAC;QACH,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,kBAAkB,GAAG,aAAa,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAClE,MAAM,KAAK,GAAoB;YAC7B,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,MAAM;YACN,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;YAC/B,IAAI;YACJ,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO;YAC5B,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,IAAI,EAAE,KAAK;YACX,SAAS;SACV,CAAC;QACF,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACpG,MAAM,EAAE,GAAG,eAAe,CAAC,GAAG,CAAC,GAAY,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC;YAC9E,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,MAAM,EAAE;gBACN,OAAO,EAAE,KAAK;gBACd,KAAK;gBACL,SAAS;gBACT,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI;gBACjC,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE;gBAC9B,kBAAkB,EAAE,aAAa,CAAC,gBAAgB,CAAC,EAAE;gBACrD,gBAAgB,EAAE,aAAa;aAChC;YACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SACxL,CAAC,CAAC;QACH,MAAM,WAAW,GAAuB;YACtC,SAAS;YACT,aAAa;YACb,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI;YACjC,KAAK,EAAE,GAAG,SAAS,CAAC,MAAM,IAAI,KAAK,EAAE;YACrC,kBAAkB,EAAE,aAAa,CAAC,gBAAgB,CAAC,EAAE;YACrD,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE;YAC9B,MAAM,EAAE,aAAa,CAAC,MAAM;SAC7B,CAAC;QACF,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE;YAC7B,KAAK,EAAE,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,EAAE,sBAAsB;YAC9B,MAAM,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,aAAa,EAAE;YAC5D,QAAQ,EAAE;gBACR,GAAG,WAAW;gBACd,cAAc,EAAE,SAAS,CAAC,MAAM;aACjC;YACD,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE;SAC7C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE;YAC7D,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,IAAI,EAAE,aAAa,CAAC,IAAI;YACxB,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE;YACrD,EAAE;YACF,IAAI,EAAE,+BAA+B,CAAC;gBACpC,EAAE,EAAE,GAAG,CAAC,OAAO;gBACf,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,GAAY,CAAC;gBACpC,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,oBAAoB,EAAE,KAAK;gBAC3B,SAAS,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,IAAI,EAAE;gBACrD,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE;oBACzC,KAAK,EAAE,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC3C,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,MAAM,EAAE,KAAK,CAAC,MAAM;iBACrB,CAAC;aACH,CAAC;YACF,MAAM,EAAE,wCAAwC;YAChD,EAAE,EAAE,iBAAiB;YACrB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK;YACL,OAAO,EAAE,KAAK;YACd,SAAS;YACT,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;SACxL,EAAE;YACD,OAAO,EAAE,KAAK;YACd,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,CAAC;SACrF,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE;YAC7D,SAAS;YACT,aAAa;YACb,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI;YACjC,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QACH,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE;YAC7B,KAAK,EAAE,aAAa,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,EAAE,uBAAuB;YAC/B,MAAM,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,aAAa,EAAE;YAC5D,QAAQ,EAAE;gBACR,GAAG,WAAW;gBACd,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB;YACD,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE;SAC7C,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE;YACnC,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,EAAE;YAC3B,kBAAkB,EAAE,aAAa,CAAC,gBAAgB,CAAC,EAAE;YACrD,WAAW,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE;YAClC,KAAK,EAAE,mBAAmB;YAC1B,SAAS;YACT,QAAQ,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;SAC/F,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC;IAClB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,MAAM,YAAY,YAAY,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,yBAAyB,CAAC,EAAE,CAAC;YAC5G,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE;gBAC7B,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC;gBAC7B,MAAM,EAAE,qBAAqB;gBAC7B,MAAM,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,EAAE,EAAE,aAAa,EAAE;gBAC5D,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;gBAC/G,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE;aAC7C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAAgB,EAChB,SAA2C,EAC3C,KAAY,EACZ,QAA4B;IAE5B,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,EAAE,MAAM,IAAI,iBAAiB,CAAC;IACtE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC;IACjE,IAAI,SAAS,CAAC,WAAW,EAAE,GAAG;QAAE,OAAO,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,0BAA0B,CACjC,SAA2C,EAC3C,MAAc,EACd,QAA6B;IAE7B,MAAM,UAAU,GAAG,SAAS,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAClH,IAAI,UAAU,YAAY,QAAQ;QAAE,OAAO,UAAU,CAAC;IACtD,IAAI,oBAAoB,CAAC,UAAU,CAAC,EAAE,CAAC;QACrC,OAAO,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9E,OAAO,MAAM,IAAI,KAAK,IAAI,QAAQ,IAAI,KAAK,IAAI,SAAS,IAAI,KAAK,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,YAAY;QAAE,OAAO,KAAK,CAAC;IAChD,IAAI,KAAK,YAAY,0BAA0B;QAAE,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,2BAA2B,CAAC,CAAC;IAC9H,IAAI,KAAK,YAAY,iBAAiB;QAAE,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,eAAe,EAAE,oCAAoC,CAAC,CAAC;IAC5H,IAAI,KAAK,YAAY,2BAA2B;QAAE,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,yCAAyC,CAAC,CAAC;IAC5I,OAAO,IAAI,YAAY,CAAC,GAAG,EAAE,gBAAgB,EAAE,yCAAyC,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAgB,EAAE,MAAqB;IACpE,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CAAC,GAAG,EAAE,iBAAiB,EAAE,kCAAkC,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAsB;IAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,CAAC;IAC9F,IAAI,KAAK,CAAC,IAAI,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,GAAI,KAAK,CAAC,IAAgC,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AACzD,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,MAAM,GAAsC,EAAE,CAAC;IACrD,KAAK,MAAM,GAAG,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACnD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/auth.d.ts

@@ -0,0 +1,87 @@
+import { type RaybaseModuleRouteContext, type RaybaseUser, type SqlExecutor } from "@raybase/core";
+export type ApiKeyRecord = {
+    id: string;
+    name: string;
+    description: string | null;
+    servicePrincipalId: string;
+    ownerUserId: string;
+    principalLabel: string;
+    prefix: string;
+    hash: string;
+    scopesJson: string;
+    expiresAt: string | null;
+    revokedAt: string | null;
+    revokedBy: string | null;
+    revokedReason: string | null;
+    createdBy: string | null;
+    createdAt: string;
+    rotatedAt: string | null;
+    lastUsedAt: string | null;
+    lastUsedIpHash: string | null;
+    lastUsedUserAgent: string | null;
+};
+export type ApiServicePrincipalRecord = {
+    id: string;
+    label: string;
+    description: string | null;
+    ownerUserId: string;
+    defaultScopesJson: string;
+    disabledAt: string | null;
+    createdBy: string | null;
+    createdAt: string;
+    updatedAt: string;
+};
+export type AuthenticatedApiKey = {
+    key: ApiKeyRecord;
+    servicePrincipal: ApiServicePrincipalRecord;
+    user: RaybaseUser;
+    scopes: string[];
+};
+export type ApiKeyOptions = {
+    defaultExpiryDays?: number;
+    maxExpiryDays?: number;
+    prefix?: string;
+};
+export type CreateApiKeyInput = {
+    name?: unknown;
+    description?: unknown;
+    ownerUserId?: unknown;
+    servicePrincipalId?: unknown;
+    principalLabel?: unknown;
+    scopes?: unknown;
+    expiresAt?: unknown;
+};
+export type CreateApiKeyResult = {
+    key: ApiKeySummary;
+    token: string;
+};
+export type ApiKeySummary = Omit<ApiKeyRecord, "hash" | "scopesJson"> & {
+    scopes: string[];
+};
+export declare function apiKeySecret(env: unknown): string;
+export declare function authenticateApiRequest<Env>(ctx: RaybaseModuleRouteContext<Env>, input: {
+    scopes: string[];
+    operationName: string;
+    route: string;
+    requestId: string;
+}): Promise<AuthenticatedApiKey>;
+export declare function listApiKeys(control: SqlExecutor): Promise<ApiKeySummary[]>;
+export declare function createApiKey<Env>(ctx: RaybaseModuleRouteContext<Env>, input: CreateApiKeyInput, options?: ApiKeyOptions): Promise<CreateApiKeyResult>;
+export declare function rotateApiKey<Env>(ctx: RaybaseModuleRouteContext<Env>, keyId: string, options?: ApiKeyOptions): Promise<CreateApiKeyResult>;
+export declare function revokeApiKey<Env>(ctx: RaybaseModuleRouteContext<Env>, keyId: string, reason?: unknown): Promise<{
+    key: ApiKeySummary;
+}>;
+export declare function deleteApiKey<Env>(ctx: RaybaseModuleRouteContext<Env>, keyId: string): Promise<{
+    ok: true;
+}>;
+export declare function recordApiKeyEvent(control: SqlExecutor, input: {
+    keyId: string;
+    event: string;
+    servicePrincipalId?: string | null;
+    ownerUserId?: string | null;
+    actorUserId?: string | null;
+    requestId?: string | null;
+    metadata?: unknown;
+}): Promise<void>;
+export declare function summarizeApiKey(row: ApiKeyRecord): ApiKeySummary;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,yBAAyB,EAC9B,KAAK,WAAW,EAChB,KAAK,WAAW,EACjB,MAAM,eAAe,CAAC;AAYvB,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,GAAG,EAAE,YAAY,CAAC;IAClB,gBAAgB,EAAE,yBAAyB,CAAC;IAC5C,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,GAAG,EAAE,aAAa,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,YAAY,CAAC,GAAG;IACtE,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAEjD;AAED,wBAAsB,sBAAsB,CAAC,GAAG,EAC9C,GAAG,EAAE,yBAAyB,CAAC,GAAG,CAAC,EACnC,KAAK,EAAE;IACL,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,mBAAmB,CAAC,CAqD9B;AAED,wBAAsB,WAAW,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAGhF;AAED,wBAAsB,YAAY,CAAC,GAAG,EACpC,GAAG,EAAE,yBAAyB,CAAC,GAAG,CAAC,EACnC,KAAK,EAAE,iBAAiB,EACxB,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CA+D7B;AAED,wBAAsB,YAAY,CAAC,GAAG,EACpC,GAAG,EAAE,yBAAyB,CAAC,GAAG,CAAC,EACnC,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,aAAkB,GAC1B,OAAO,CAAC,kBAAkB,CAAC,CAgC7B;AAED,wBAAsB,YAAY,CAAC,GAAG,EACpC,GAAG,EAAE,yBAAyB,CAAC,GAAG,CAAC,EACnC,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,OAAO,GACf,OAAO,CAAC;IAAE,GAAG,EAAE,aAAa,CAAA;CAAE,CAAC,CA6BjC;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,GAAG,EAAE,yBAAyB,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,CAAC,CAqBjH;AAED,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE;IACL,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GACA,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,wBAAgB,eAAe,CAAC,GAAG,EAAE,YAAY,GAAG,aAAa,CAGhE"}