@rc-tool/unified-auth-hosted-service 0.2.0

package/README.md

@@ -0,0 +1,5 @@
+# @rc-tool/unified-auth-hosted-service
+
+Hosted Auth runtime for Unified Auth.
+
+Use this package to mount SDK-provided login pages, OAuth routes, session APIs, file/memory stores, and the `unified-auth` CLI.

package/dist/cli/env.d.ts

@@ -0,0 +1,40 @@
+export type AuthProvider = "feishu" | "github" | "google";
+export type AuthStoreProvider = "file" | "prisma";
+export type CheckStatus = "fail" | "pass" | "warn";
+export interface InitAuthEnvOptions {
+    app?: string;
+    cwd?: string;
+    envFile?: string;
+    exampleFile?: string;
+    name?: string;
+    port?: number;
+    providers?: AuthProvider[];
+    redirectURI?: string;
+    serviceURL?: string;
+    store?: AuthStoreProvider;
+}
+export interface DoctorAuthEnvOptions {
+    cwd?: string;
+    envFile?: string;
+}
+export interface EnvWriteSummary {
+    added: string[];
+    path: string;
+    updated: string[];
+}
+export interface InitAuthEnvResult {
+    env: EnvWriteSummary;
+    example: EnvWriteSummary;
+    gitignore: EnvWriteSummary;
+}
+export interface DoctorCheck {
+    message: string;
+    status: CheckStatus;
+}
+export interface DoctorAuthEnvResult {
+    checks: DoctorCheck[];
+    ok: boolean;
+}
+export declare function initAuthEnv(options?: InitAuthEnvOptions): InitAuthEnvResult;
+export declare function doctorAuthEnv(options?: DoctorAuthEnvOptions): DoctorAuthEnvResult;
+//# sourceMappingURL=env.d.ts.map

package/dist/cli/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/cli/env.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAC1D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,QAAQ,CAAC;AAClD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEnD,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,YAAY,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,oBAAoB;IACnC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,eAAe,CAAC;IACrB,OAAO,EAAE,eAAe,CAAC;IACzB,SAAS,EAAE,eAAe,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,WAAW,EAAE,CAAC;IACtB,EAAE,EAAE,OAAO,CAAC;CACb;AAgBD,wBAAgB,WAAW,CAAC,OAAO,GAAE,kBAAuB,GAAG,iBAAiB,CAY/E;AAED,wBAAgB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,mBAAmB,CA4BrF"}

package/dist/cli/env.js

@@ -0,0 +1,350 @@
+import { randomBytes } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { basename, dirname, join, resolve } from "node:path";
+const defaultProviders = ["feishu", "google", "github"];
+const envSectionHeader = "# Unified Auth Service";
+export function initAuthEnv(options = {}) {
+    const cwd = resolve(options.cwd ?? process.cwd());
+    const envPath = resolve(cwd, options.envFile ?? ".env.local");
+    const examplePath = resolve(cwd, options.exampleFile ?? ".env.example");
+    const gitignorePath = resolve(cwd, ".gitignore");
+    const config = resolveInitConfig(cwd, options);
+    return {
+        env: writeEnvFile(envPath, buildRuntimeEntries(config)),
+        example: writeEnvFile(examplePath, buildExampleEntries(config)),
+        gitignore: ensureGitignore(gitignorePath),
+    };
+}
+export function doctorAuthEnv(options = {}) {
+    const cwd = resolve(options.cwd ?? process.cwd());
+    const envPath = resolve(cwd, options.envFile ?? ".env.local");
+    const env = readMergedEnv(cwd, envPath);
+    const checks = [];
+    if (existsSync(envPath)) {
+        checks.push(pass(`${relativePath(cwd, envPath)} exists`));
+    }
+    else {
+        checks.push(fail(`${relativePath(cwd, envPath)} is missing; run unified-auth init`));
+    }
+    requireValue(checks, env, "AUTH_SERVICE_URL");
+    requireValue(checks, env, "AUTH_CLIENT_ID");
+    requireValue(checks, env, "AUTH_ALLOWED_REDIRECT_URI");
+    checkURL(checks, env, "AUTH_SERVICE_URL");
+    checkURL(checks, env, "AUTH_ALLOWED_REDIRECT_URI");
+    checkSessionSecret(checks, env.AUTH_SESSION_SECRET);
+    checkStore(checks, env);
+    checkProvider(checks, env, "feishu", "FEISHU_APP_ID", "FEISHU_APP_SECRET", "FEISHU_REDIRECT_URI");
+    checkProvider(checks, env, "google", "GOOGLE_CLIENT_ID", "GOOGLE_CLIENT_SECRET", "GOOGLE_REDIRECT_URI");
+    checkProvider(checks, env, "github", "GITHUB_CLIENT_ID", "GITHUB_CLIENT_SECRET", "GITHUB_REDIRECT_URI");
+    checkGitignore(checks, cwd);
+    return {
+        checks,
+        ok: !checks.some((check) => check.status === "fail"),
+    };
+}
+function resolveInitConfig(cwd, options) {
+    const redirectURI = options.redirectURI ?? "http://localhost:3004/";
+    const serviceURL = trimTrailingSlash(options.serviceURL ?? getURLOrigin(redirectURI) ?? `http://localhost:${options.port ?? 3005}`);
+    const port = options.port ?? getURLPort(serviceURL) ?? 3005;
+    const clientId = options.app ?? inferClientId(cwd);
+    return {
+        clientId,
+        name: options.name ?? titleFromClientId(clientId),
+        port,
+        providers: options.providers ?? defaultProviders,
+        redirectURI,
+        serviceURL,
+        store: options.store ?? "file",
+    };
+}
+function buildRuntimeEntries(config) {
+    return [
+        { key: "AUTH_SERVICE_PORT", value: String(config.port) },
+        { key: "AUTH_SERVICE_URL", value: config.serviceURL },
+        { key: "AUTH_CLIENT_ID", value: config.clientId },
+        { key: "AUTH_CLIENT_NAME", value: config.name },
+        { key: "AUTH_ALLOWED_REDIRECT_URI", value: config.redirectURI },
+        { key: "AUTH_SESSION_SECRET", sensitive: true, value: randomBytes(32).toString("base64url") },
+        { key: "AUTH_ALLOW_DEV_LOGIN", value: "true" },
+        { key: "AUTH_STORE_PROVIDER", value: config.store },
+        ...buildStoreEntries(config.store, false),
+        ...buildProviderEntries(config.serviceURL, config.providers, false),
+    ];
+}
+function buildExampleEntries(config) {
+    return [
+        { key: "AUTH_SERVICE_PORT", value: String(config.port) },
+        { key: "AUTH_SERVICE_URL", value: config.serviceURL },
+        { key: "AUTH_CLIENT_ID", value: config.clientId },
+        { key: "AUTH_CLIENT_NAME", value: config.name },
+        { key: "AUTH_ALLOWED_REDIRECT_URI", value: config.redirectURI },
+        { key: "AUTH_SESSION_SECRET", sensitive: true, value: "please-change-this-to-a-long-random-string" },
+        { key: "AUTH_ALLOW_DEV_LOGIN", value: "true" },
+        { key: "AUTH_STORE_PROVIDER", value: config.store },
+        ...buildStoreEntries(config.store, true),
+        ...buildProviderEntries(config.serviceURL, config.providers, true),
+    ];
+}
+function buildStoreEntries(store, example) {
+    if (store === "prisma") {
+        return [
+            {
+                key: "AUTH_DATABASE_URL",
+                sensitive: true,
+                value: example ? "postgresql://user:password@localhost:5432/unified_auth?schema=public" : "",
+            },
+        ];
+    }
+    return [{ key: "AUTH_STORE_FILE", value: ".auth/unified-auth-store.json" }];
+}
+function buildProviderEntries(serviceURL, providers, example) {
+    const callbackBase = trimTrailingSlash(serviceURL);
+    const entries = [];
+    if (providers.includes("feishu")) {
+        entries.push({ key: "FEISHU_APP_ID", value: "" }, { key: "FEISHU_APP_SECRET", sensitive: true, value: "" }, { key: "FEISHU_REDIRECT_URI", value: `${callbackBase}/api/auth/feishu/callback` });
+    }
+    if (providers.includes("google")) {
+        entries.push({ key: "GOOGLE_CLIENT_ID", value: "" }, { key: "GOOGLE_CLIENT_SECRET", sensitive: true, value: "" }, { key: "GOOGLE_REDIRECT_URI", value: `${callbackBase}/api/auth/google/callback` });
+    }
+    if (providers.includes("github")) {
+        entries.push({ key: "GITHUB_CLIENT_ID", value: "" }, { key: "GITHUB_CLIENT_SECRET", sensitive: true, value: "" }, { key: "GITHUB_REDIRECT_URI", value: `${callbackBase}/api/auth/github/callback` });
+    }
+    if (example) {
+        return entries.map((entry) => entry.sensitive ? { ...entry, value: entry.value || "" } : entry);
+    }
+    return entries;
+}
+function writeEnvFile(path, entries) {
+    const lines = readLines(path);
+    const assignments = parseAssignments(lines);
+    const added = [];
+    const updated = [];
+    const pending = [];
+    for (const entry of entries) {
+        const existing = assignments.get(entry.key);
+        if (!existing) {
+            pending.push(formatEntry(entry));
+            added.push(entry.key);
+            continue;
+        }
+        if (!entry.sensitive && !existing.value && entry.value) {
+            lines[existing.index] = formatEntry(entry);
+            updated.push(entry.key);
+        }
+        if (entry.key === "AUTH_SESSION_SECRET" && isPlaceholderSecret(existing.value) && entry.value) {
+            lines[existing.index] = formatEntry(entry);
+            updated.push(entry.key);
+        }
+    }
+    if (pending.length) {
+        if (lines.length && lines[lines.length - 1] !== "") {
+            lines.push("");
+        }
+        if (!lines.includes(envSectionHeader)) {
+            lines.push(envSectionHeader);
+        }
+        lines.push(...pending);
+    }
+    if (added.length || updated.length || !existsSync(path)) {
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, `${lines.join("\n").replace(/\n*$/, "")}\n`);
+    }
+    return { added, path, updated };
+}
+function ensureGitignore(path) {
+    const lines = readLines(path);
+    const required = [".auth", ".env", ".env.*", "!.env.example"];
+    const added = required.filter((item) => !lines.includes(item));
+    if (added.length) {
+        if (lines.length && lines[lines.length - 1] !== "") {
+            lines.push("");
+        }
+        lines.push(...added);
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, `${lines.join("\n").replace(/\n*$/, "")}\n`);
+    }
+    else if (!existsSync(path)) {
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, "");
+    }
+    return { added, path, updated: [] };
+}
+function readMergedEnv(cwd, envPath) {
+    const env = {};
+    for (const path of [envPath, join(cwd, ".env")]) {
+        for (const [key, assignment] of parseAssignments(readLines(path))) {
+            if (!(key in env)) {
+                env[key] = assignment.value;
+            }
+        }
+    }
+    return env;
+}
+function readLines(path) {
+    if (!existsSync(path)) {
+        return [];
+    }
+    return readFileSync(path, "utf8").replace(/\r\n/g, "\n").split("\n").filter((line, index, list) => {
+        return index < list.length - 1 || line.length > 0;
+    });
+}
+function parseAssignments(lines) {
+    const assignments = new Map();
+    lines.forEach((line, index) => {
+        const match = /^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*)\s*$/.exec(line);
+        if (match) {
+            assignments.set(match[1], {
+                index,
+                value: unquoteEnvValue(match[2]),
+            });
+        }
+    });
+    return assignments;
+}
+function formatEntry(entry) {
+    return `${entry.key}=${entry.value}`;
+}
+function unquoteEnvValue(value) {
+    const trimmed = value.trim();
+    if ((trimmed.startsWith("\"") && trimmed.endsWith("\"")) ||
+        (trimmed.startsWith("'") && trimmed.endsWith("'"))) {
+        return trimmed.slice(1, -1);
+    }
+    return trimmed;
+}
+function requireValue(checks, env, key) {
+    if (env[key]) {
+        checks.push(pass(`${key} is set`));
+    }
+    else {
+        checks.push(fail(`${key} is missing`));
+    }
+}
+function checkURL(checks, env, key) {
+    if (!env[key]) {
+        return;
+    }
+    try {
+        new URL(env[key]);
+        checks.push(pass(`${key} is a valid URL`));
+    }
+    catch {
+        checks.push(fail(`${key} is not a valid URL`));
+    }
+}
+function checkSessionSecret(checks, secret) {
+    if (!secret) {
+        checks.push(fail("AUTH_SESSION_SECRET is missing"));
+        return;
+    }
+    if (isPlaceholderSecret(secret) || secret.length < 32) {
+        checks.push(fail("AUTH_SESSION_SECRET must be replaced with a long random value"));
+        return;
+    }
+    checks.push(pass("AUTH_SESSION_SECRET looks usable"));
+}
+function checkStore(checks, env) {
+    const store = env.AUTH_STORE_PROVIDER || "file";
+    if (store === "prisma") {
+        if (env.AUTH_DATABASE_URL || env.DATABASE_URL) {
+            checks.push(pass("Prisma store has a database URL"));
+        }
+        else {
+            checks.push(fail("AUTH_STORE_PROVIDER=prisma requires AUTH_DATABASE_URL"));
+        }
+        return;
+    }
+    if (store === "file") {
+        checks.push(env.AUTH_STORE_FILE ? pass("File store path is set") : warn("AUTH_STORE_FILE is missing; the service will use its default path"));
+        return;
+    }
+    checks.push(fail(`Unsupported AUTH_STORE_PROVIDER: ${store}`));
+}
+function checkProvider(checks, env, provider, idKey, secretKey, redirectKey) {
+    const hasId = Boolean(env[idKey]);
+    const hasSecret = Boolean(env[secretKey]);
+    if (!hasId && !hasSecret) {
+        checks.push(warn(`${provider} provider is disabled`));
+        return;
+    }
+    if (!hasId || !hasSecret) {
+        checks.push(fail(`${provider} provider needs both ${idKey} and ${secretKey}`));
+        return;
+    }
+    checks.push(pass(`${provider} provider credentials are set`));
+    if (env[redirectKey]) {
+        checkURL(checks, env, redirectKey);
+    }
+    else {
+        checks.push(warn(`${redirectKey} is missing; the service will use its default callback URL`));
+    }
+}
+function checkGitignore(checks, cwd) {
+    const path = join(cwd, ".gitignore");
+    const lines = readLines(path);
+    if (lines.includes(".env.*") && lines.includes("!.env.example")) {
+        checks.push(pass(".gitignore keeps local env files private"));
+    }
+    else {
+        checks.push(warn(".gitignore should include .env.* and !.env.example"));
+    }
+}
+function pass(message) {
+    return { message, status: "pass" };
+}
+function warn(message) {
+    return { message, status: "warn" };
+}
+function fail(message) {
+    return { message, status: "fail" };
+}
+function isPlaceholderSecret(value) {
+    return value === "please-change-this-to-a-long-random-string" || value === "unified-auth-local-secret";
+}
+function inferClientId(cwd) {
+    const id = basename(cwd)
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, "-")
+        .replace(/^-+|-+$/g, "");
+    return id || "app";
+}
+function titleFromClientId(clientId) {
+    return clientId
+        .split(/[-_]/g)
+        .filter(Boolean)
+        .map((part) => `${part.slice(0, 1).toUpperCase()}${part.slice(1)}`)
+        .join(" ") || "Application";
+}
+function trimTrailingSlash(value) {
+    return value.endsWith("/") ? value.slice(0, -1) : value;
+}
+function getURLOrigin(value) {
+    try {
+        return new URL(value).origin;
+    }
+    catch {
+        return undefined;
+    }
+}
+function getURLPort(value) {
+    try {
+        const url = new URL(value);
+        if (url.port) {
+            return Number(url.port);
+        }
+        if (url.protocol === "https:") {
+            return 443;
+        }
+        if (url.protocol === "http:") {
+            return 80;
+        }
+    }
+    catch {
+        return undefined;
+    }
+    return undefined;
+}
+function relativePath(cwd, path) {
+    return path.startsWith(cwd) ? path.slice(cwd.length + 1) : path;
+}
+//# sourceMappingURL=env.js.map

package/dist/cli/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/cli/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyD7D,MAAM,gBAAgB,GAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;AACxE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAElD,MAAM,UAAU,WAAW,CAAC,UAA8B,EAAE;IAC1D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;IACxE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAE/C,OAAO;QACL,GAAG,EAAE,YAAY,CAAC,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;QACvD,OAAO,EAAE,YAAY,CAAC,WAAW,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAC/D,SAAS,EAAE,eAAe,CAAC,aAAa,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,UAAgC,EAAE;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,IAAI,YAAY,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC;IACvF,CAAC;IAED,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC9C,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,gBAAgB,CAAC,CAAC;IAC5C,YAAY,CAAC,MAAM,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;IACvD,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,2BAA2B,CAAC,CAAC;IACnD,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACpD,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACxB,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,eAAe,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC;IAClG,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,qBAAqB,CAAC,CAAC;IACxG,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,qBAAqB,CAAC,CAAC;IACxG,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE5B,OAAO;QACL,MAAM;QACN,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,OAA2B;IACjE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,wBAAwB,CAAC;IACpE,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC,WAAW,CAAC,IAAI,oBAAoB,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;IACpI,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;IAEnD,OAAO;QACL,QAAQ;QACR,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,iBAAiB,CAAC,QAAQ,CAAC;QACjD,IAAI;QACJ,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,gBAAgB;QAChD,WAAW;QACX,UAAU;QACV,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA4C;IACvE,OAAO;QACL,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QACxD,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE;QACrD,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE;QACjD,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE;QAC/C,EAAE,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE;QAC/D,EAAE,GAAG,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE;QAC7F,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE;QAC9C,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;QACnD,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC;QACzC,GAAG,oBAAoB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,MAA4C;IACvE,OAAO;QACL,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;QACxD,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE;QACrD,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE;QACjD,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE;QAC/C,EAAE,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE;QAC/D,EAAE,GAAG,EAAE,qBAAqB,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,4CAA4C,EAAE;QACpG,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,MAAM,EAAE;QAC9C,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;QACnD,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC;QACxC,GAAG,oBAAoB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAwB,EAAE,OAAgB;IACnE,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO;YACL;gBACE,GAAG,EAAE,mBAAmB;gBACxB,SAAS,EAAE,IAAI;gBACf,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,sEAAsE,CAAC,CAAC,CAAC,EAAE;aAC7F;SACF,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,oBAAoB,CAAC,UAAkB,EAAE,SAAyB,EAAE,OAAgB;IAC3F,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,OAAO,GAAe,EAAE,CAAC;IAE/B,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CACV,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,EAAE,EAAE,EACnC,EAAE,GAAG,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EACxD,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,GAAG,YAAY,2BAA2B,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CACV,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,EACtC,EAAE,GAAG,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAC3D,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,GAAG,YAAY,2BAA2B,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CACV,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,EACtC,EAAE,GAAG,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAC3D,EAAE,GAAG,EAAE,qBAAqB,EAAE,KAAK,EAAE,GAAG,YAAY,2BAA2B,EAAE,CAClF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,OAAmB;IACrD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACvD,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,IAAI,mBAAmB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YAC9F,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC/B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;IACzB,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/D,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;QACrB,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,OAAe;IACjD,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;QAChD,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAClE,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC;gBAClB,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QAChG,OAAO,KAAK,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAe;IACvC,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAExD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAC5B,MAAM,KAAK,GAAG,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEvE,IAAI,KAAK,EAAE,CAAC;YACV,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;gBACxB,KAAK;gBACL,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;aACjC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,WAAW,CAAC,KAAe;IAClC,OAAO,GAAG,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE7B,IACE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAClD,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC9B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,MAAqB,EAAE,GAA2B,EAAE,GAAW;IACnF,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,MAAqB,EAAE,GAA2B,EAAE,GAAW;IAC/E,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACd,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,qBAAqB,CAAC,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,MAAqB,EAAE,MAA0B;IAC3E,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC,CAAC;QACpD,OAAO;IACT,CAAC;IACD,IAAI,mBAAmB,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC,CAAC;QACnF,OAAO;IACT,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAC,MAAqB,EAAE,GAA2B;IACpE,MAAM,KAAK,GAAG,GAAG,CAAC,mBAAmB,IAAI,MAAM,CAAC;IAEhD,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,IAAI,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,YAAY,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO;IACT,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC,CAAC;QAC9I,OAAO;IACT,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oCAAoC,KAAK,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,aAAa,CACpB,MAAqB,EACrB,GAA2B,EAC3B,QAAgB,EAChB,KAAa,EACb,SAAiB,EACjB,WAAmB;IAEnB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IAE1C,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,uBAAuB,CAAC,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,wBAAwB,KAAK,QAAQ,SAAS,EAAE,CAAC,CAAC,CAAC;QAC/E,OAAO;IACT,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,+BAA+B,CAAC,CAAC,CAAC;IAC9D,IAAI,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,4DAA4D,CAAC,CAAC,CAAC;IAChG,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAqB,EAAE,GAAW;IACxD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE9B,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,IAAI,CAAC,OAAe;IAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,KAAK,KAAK,4CAA4C,IAAI,KAAK,KAAK,2BAA2B,CAAC;AACzG,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC;SACrB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAE3B,OAAO,EAAE,IAAI,KAAK,CAAC;AACrB,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,QAAQ;SACZ,KAAK,CAAC,OAAO,CAAC;SACd,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,IAAI,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC;AAChC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1D,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAE3B,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACb,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC;QACb,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,IAAY;IAC7C,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC"}

package/dist/cli/index.d.ts

@@ -0,0 +1,4 @@
+type Output = Pick<typeof console, "error" | "log">;
+export declare function runCli(argv: string[], output?: Output): 0 | 1;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAGA,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,OAAO,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC;AA2BpD,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,GAAE,MAAgB,SAsC9D"}

package/dist/cli/index.js

@@ -0,0 +1,145 @@
+import { doctorAuthEnv, initAuthEnv } from "./env.js";
+const helpText = `Unified Auth CLI
+
+Usage:
+  unified-auth init [options]
+  unified-auth doctor [options]
+
+Options:
+  --app <id>             Auth client id. Defaults to the current folder name.
+  --name <name>          Display name for the auth application.
+  --port <port>          Local auth service port. Defaults to 3005.
+  --service-url <url>    Auth service base URL. Defaults to http://localhost:<port>.
+  --redirect <url>       Allowed app redirect URI. Defaults to http://localhost:3004/.
+  --providers <list>     Comma-separated providers: feishu,google,github.
+  --store <provider>     Store provider: file or prisma. Defaults to file.
+  --env-file <path>      Env file to update. Defaults to .env.local.
+  --example-file <path>  Example env file to update. Defaults to .env.example.
+  --cwd <path>           Project directory. Defaults to the current directory.
+  --help                 Show this help message.
+`;
+export function runCli(argv, output = console) {
+    const args = parseArgs(argv);
+    try {
+        if (!args.command || args.command === "help" || args.flags.has("help")) {
+            output.log(helpText.trimEnd());
+            return 0;
+        }
+        if (args.command === "init") {
+            const result = initAuthEnv(toInitOptions(args.flags));
+            output.log("Unified Auth env initialized.");
+            printWriteSummary(output, ".env.local", result.env);
+            printWriteSummary(output, ".env.example", result.example);
+            printWriteSummary(output, ".gitignore", result.gitignore);
+            output.log("Run unified-auth doctor to verify the project config.");
+            return 0;
+        }
+        if (args.command === "doctor") {
+            const result = doctorAuthEnv({
+                cwd: readString(args.flags, "cwd"),
+                envFile: readString(args.flags, "env-file"),
+            });
+            for (const check of result.checks) {
+                output.log(formatCheck(check));
+            }
+            return result.ok ? 0 : 1;
+        }
+        output.error(`Unknown command: ${args.command}`);
+        output.error("Run unified-auth --help for usage.");
+        return 1;
+    }
+    catch (error) {
+        output.error(error instanceof Error ? error.message : "Unified Auth CLI failed.");
+        return 1;
+    }
+}
+function parseArgs(argv) {
+    const flags = new Map();
+    let command = "";
+    for (let index = 0; index < argv.length; index += 1) {
+        const arg = argv[index];
+        if (!arg.startsWith("--")) {
+            command ||= arg;
+            continue;
+        }
+        const inline = /^--([^=]+)=(.*)$/.exec(arg);
+        if (inline) {
+            flags.set(inline[1], inline[2]);
+            continue;
+        }
+        const name = arg.slice(2);
+        const next = argv[index + 1];
+        if (!next || next.startsWith("--")) {
+            flags.set(name, true);
+            continue;
+        }
+        flags.set(name, next);
+        index += 1;
+    }
+    return { command, flags };
+}
+function toInitOptions(flags) {
+    return {
+        app: readString(flags, "app"),
+        cwd: readString(flags, "cwd"),
+        envFile: readString(flags, "env-file"),
+        exampleFile: readString(flags, "example-file"),
+        name: readString(flags, "name"),
+        port: readNumber(flags, "port"),
+        providers: readProviders(flags),
+        redirectURI: readString(flags, "redirect"),
+        serviceURL: readString(flags, "service-url"),
+        store: readStore(flags),
+    };
+}
+function readString(flags, name) {
+    const value = flags.get(name);
+    return typeof value === "string" && value.trim() ? value.trim() : undefined;
+}
+function readNumber(flags, name) {
+    const value = readString(flags, name);
+    if (!value) {
+        return undefined;
+    }
+    const parsed = Number(value);
+    if (!Number.isInteger(parsed) || parsed <= 0) {
+        throw new Error(`--${name} must be a positive integer.`);
+    }
+    return parsed;
+}
+function readProviders(flags) {
+    const value = readString(flags, "providers");
+    if (!value) {
+        return undefined;
+    }
+    const providers = value.split(",").map((provider) => provider.trim()).filter(Boolean);
+    const allowed = new Set(["feishu", "github", "google"]);
+    for (const provider of providers) {
+        if (!allowed.has(provider)) {
+            throw new Error(`Unsupported provider: ${provider}`);
+        }
+    }
+    return providers;
+}
+function readStore(flags) {
+    const value = readString(flags, "store");
+    if (!value) {
+        return undefined;
+    }
+    if (value === "file" || value === "prisma") {
+        return value;
+    }
+    throw new Error(`Unsupported store provider: ${value}`);
+}
+function printWriteSummary(output, label, summary) {
+    const changes = [
+        summary.added.length ? `${summary.added.length} added` : "",
+        summary.updated.length ? `${summary.updated.length} updated` : "",
+    ].filter(Boolean).join(", ") || "already up to date";
+    output.log(`${label}: ${changes} (${summary.path})`);
+}
+function formatCheck(check) {
+    const prefix = check.status === "pass" ? "[ok]" : check.status === "warn" ? "[warn]" : "[fail]";
+    return `${prefix} ${check.message}`;
+}
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAUtD,MAAM,QAAQ,GAAG;;;;;;;;;;;;;;;;;;CAkBhB,CAAC;AAEF,MAAM,UAAU,MAAM,CAAC,IAAc,EAAE,SAAiB,OAAO;IAC7D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE7B,IAAI,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,MAAM,GAAG,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAEtD,MAAM,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC5C,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;YACpD,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAC1D,iBAAiB,CAAC,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;YACpE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,MAAM,GAAG,aAAa,CAAC;gBAC3B,GAAG,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC;gBAClC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC;aAC5C,CAAC,CAAC;YAEH,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YACjC,CAAC;YAED,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,oBAAoB,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAClF,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAc;IAC/B,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,IAAI,OAAO,GAAG,EAAE,CAAC;IAEjB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAExB,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,GAAG,CAAC;YAChB,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAE5C,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAE7B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACtB,SAAS;QACX,CAAC;QAED,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtB,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,aAAa,CAAC,KAAiC;IACtD,OAAO;QACL,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;QAC7B,GAAG,EAAE,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC;QAC7B,OAAO,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;QACtC,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,cAAc,CAAC;QAC9C,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAC/B,IAAI,EAAE,UAAU,CAAC,KAAK,EAAE,MAAM,CAAC;QAC/B,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC;QAC/B,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC;QAC1C,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC;QAC5C,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAiC,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,KAAiC,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAEtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAE7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,KAAK,IAAI,8BAA8B,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAiC;IACtD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IAE7C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;IAExD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,SAAkD,CAAC;AAC5D,CAAC;AAED,SAAS,SAAS,CAAC,KAAiC;IAClD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAEzC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,+BAA+B,KAAK,EAAE,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB,CAAC,MAAc,EAAE,KAAa,EAAE,OAA6D;IACrH,MAAM,OAAO,GAAG;QACd,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE;QAC3D,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE;KAClE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC;IAErD,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,KAAK,OAAO,KAAK,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,KAAkB;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;IAEhG,OAAO,GAAG,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;AACtC,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+export {};
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":""}

package/dist/cli.js

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+import { runCli } from "./cli/index.js";
+process.exitCode = runCli(process.argv.slice(2));
+//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAExC,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/hosted-service/applications.d.ts

@@ -0,0 +1,8 @@
+import type { HostedAuthApplication, HostedAuthServiceOptions } from "./types.js";
+export declare function normalizeBaseURL(baseURL: string): string;
+export declare function getApplication(options: HostedAuthServiceOptions, clientId?: string): HostedAuthApplication;
+export declare function getClientId(request: Request, options: HostedAuthServiceOptions): string;
+export declare function getRedirectURI(request: Request, app: HostedAuthApplication): string;
+export declare function isRedirectAllowed(redirectURI: string, app: HostedAuthApplication): boolean;
+export declare function createProviderStartUrl(authBaseURL: string, provider: "feishu" | "github" | "google", clientId: string, redirectURI: string): URL;
+//# sourceMappingURL=applications.d.ts.map

package/dist/hosted-service/applications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applications.d.ts","sourceRoot":"","sources":["../../src/hosted-service/applications.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,wBAAwB,EAAE,MAAM,YAAY,CAAC;AAElF,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,UAE/C;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,wBAAwB,EAAE,QAAQ,CAAC,EAAE,MAAM,yBAQlF;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,UAI9E;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,qBAAqB,UAI1E;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,qBAAqB,WAMhF;AAED,wBAAgB,sBAAsB,CACpC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,EACxC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,OAQpB"}

package/dist/hosted-service/applications.js

@@ -0,0 +1,33 @@
+import { DEFAULT_CLIENT_ID } from "./constants.js";
+export function normalizeBaseURL(baseURL) {
+    return baseURL.endsWith("/") ? baseURL.slice(0, -1) : baseURL;
+}
+export function getApplication(options, clientId) {
+    const applications = options.applications ?? [];
+    const fallback = {
+        clientId: clientId || DEFAULT_CLIENT_ID,
+        name: clientId || "Application",
+    };
+    return applications.find((app) => app.clientId === clientId) ?? applications[0] ?? fallback;
+}
+export function getClientId(request, options) {
+    const url = new URL(request.url);
+    return url.searchParams.get("client_id") ?? getApplication(options).clientId;
+}
+export function getRedirectURI(request, app) {
+    const url = new URL(request.url);
+    return url.searchParams.get("redirect_uri") ?? app.redirectURI ?? app.allowedRedirectURIs?.[0] ?? "/";
+}
+export function isRedirectAllowed(redirectURI, app) {
+    if (!app.allowedRedirectURIs?.length) {
+        return true;
+    }
+    return app.allowedRedirectURIs.includes(redirectURI);
+}
+export function createProviderStartUrl(authBaseURL, provider, clientId, redirectURI) {
+    const startUrl = new URL(`/api/auth/${provider}/start`, authBaseURL);
+    startUrl.searchParams.set("client_id", clientId);
+    startUrl.searchParams.set("redirect_uri", redirectURI);
+    return startUrl;
+}
+//# sourceMappingURL=applications.js.map