@shohaghinfo/aerojs 0.1.0

package/dist/auth/guards/jwt-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-guard.js","sourceRoot":"","sources":["../../../src/auth/guards/jwt-guard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAuB,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAwCzD,MAAM,OAAO,QAAQ;IACX,KAAK,GAAoB,IAAI,CAAC;IAC9B,QAAQ,GAAG,KAAK,CAAC;IACR,MAAM,CAAiB;IAChC,GAAG,CAAc;IAEzB,YAAY,GAAgB,EAAE,MAAsB;QAClD,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEM,IAAI;QACT,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,KAAK;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;IAC7B,CAAC;IAED;;OAEG;IACK,YAAY;QAClB,MAAM,EAAE,WAAW,GAAG,QAAQ,EAAE,UAAU,GAAG,YAAY,EAAE,UAAU,GAAG,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QAEhG,IAAI,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;QAC9C,CAAC;QAED,IAAI,WAAW,KAAK,OAAO,EAAE,CAAC;YAC5B,OAAQ,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAY,IAAI,IAAI,CAAC;QACxD,CAAC;QAED,yCAAyC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC1B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY;QACvB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,iBAAiB,CAAC,0BAA0B,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QAElC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,iBAAiB,CAAC,kCAAkC,CAAC,CAAC;QAClE,CAAC;QAED,IAAI,OAA0D,CAAC;QAC/D,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAmB,CAAC;QAChE,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,MAAM,GAAG,GAAG,GAAG,EAAE,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,yCAAyC,CAAC,CAAC,CAAC,eAAe,CAAC;YAC5G,MAAM,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACnC,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACjB,MAAM,IAAI,iBAAiB,CAAC,uCAAuC,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,8BAA8B,CAAC,CAAC;QAC9D,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,WAAW;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,QAAQ,CAAC,IAAc,EAAE,UAA0B,EAAE;QAC1D,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC;QACrE,MAAM,KAAK,GAAG,IAAI,CAChB;YACE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,GAAG,IAAI;SACR,EACD,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB,EAAE,SAAS,EAAE,GAAG,OAAO,EAAE,CAC1B,CAAC;QAEF,OAAO;YACL,WAAW,EAAE,KAAK;YAClB,SAAS;YACT,SAAS,EAAE,QAAQ;SACpB,CAAC;IACJ,CAAC;CACF"}

package/dist/auth/guards/session-guard.d.ts

@@ -0,0 +1,57 @@
+/**
+ * @file session-guard.ts
+ * @description Server-side Session Authentication Guard for AeroJS.
+ * Handles cashier terminal sessions, doctor portal logins, and multi-shift management.
+ * Hospital use-case: Cashier logs in → session tagged with Shift_Session_ID + Terminal_ID.
+ */
+import type { AeroContext } from '../../core/context.js';
+import type { GuardContract, AuthUser, LoginOptions } from './guard.js';
+import type { SessionManager } from '../../session/session-manager.js';
+export interface SessionGuardConfig {
+    /**
+     * Session key where user data is stored. Default: 'auth_user'
+     */
+    userKey?: string;
+    /**
+     * Callback to fetch user by ID from your database.
+     * Example: (id) => User.find(id)
+     */
+    provider: (id: string | number) => Promise<AuthUser | null>;
+}
+export declare class SessionGuard implements GuardContract {
+    private _user;
+    private _checked;
+    private readonly userKey;
+    private readonly provider;
+    private session;
+    private ctx;
+    constructor(ctx: AeroContext, session: SessionManager, config: SessionGuardConfig);
+    user(): AuthUser | null;
+    check(): boolean;
+    /**
+     * Authenticates the user from the session, throws if not authenticated.
+     */
+    authenticate(): Promise<AuthUser>;
+    /**
+     * Silently checks authentication without throwing.
+     */
+    silentCheck(): Promise<boolean>;
+    /**
+     * Logs a user into the session.
+     * Hospital use: cashier.login(user, { remember: false }) — terminates on browser close.
+     */
+    login(user: AuthUser, options?: LoginOptions): Promise<void>;
+    /**
+     * Logs the authenticated user out and destroys their session.
+     * Hospital use: cashier shift end → session destroyed, terminal freed.
+     */
+    logout(): Promise<void>;
+    /**
+     * Attempts login with a password credential check.
+     * Returns true on success, false on failure (never throws for wrong password).
+     */
+    attempt(user: AuthUser & {
+        password: string;
+    }, plainPassword: string, options?: LoginOptions): Promise<boolean>;
+}
+//# sourceMappingURL=session-guard.d.ts.map

package/dist/auth/guards/session-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-guard.d.ts","sourceRoot":"","sources":["../../../src/auth/guards/session-guard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAIvE,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;CAC7D;AAED,qBAAa,YAAa,YAAW,aAAa;IAChD,OAAO,CAAC,KAAK,CAAyB;IACtC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoD;IAC7E,OAAO,CAAC,OAAO,CAAiB;IAChC,OAAO,CAAC,GAAG,CAAc;gBAEb,GAAG,EAAE,WAAW,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB;IAO1E,IAAI,IAAI,QAAQ,GAAG,IAAI;IAIvB,KAAK,IAAI,OAAO;IAIvB;;OAEG;IACU,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC;IAuB9C;;OAEG;IACU,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAS5C;;;OAGG;IACU,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,GAAE,YAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAc7E;;;OAGG;IACU,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;IAOpC;;;OAGG;IACU,OAAO,CAClB,IAAI,EAAE,QAAQ,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,EACrC,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,YAAiB,GACzB,OAAO,CAAC,OAAO,CAAC;CASpB"}

package/dist/auth/guards/session-guard.js

@@ -0,0 +1,101 @@
+/**
+ * @file session-guard.ts
+ * @description Server-side Session Authentication Guard for AeroJS.
+ * Handles cashier terminal sessions, doctor portal logins, and multi-shift management.
+ * Hospital use-case: Cashier logs in → session tagged with Shift_Session_ID + Terminal_ID.
+ */
+import { UnauthorizedError, ForbiddenError } from '../../core/errors.js';
+import { hash, hashVerify } from '../../security/hash.js';
+export class SessionGuard {
+    _user = null;
+    _checked = false;
+    userKey;
+    provider;
+    session;
+    ctx;
+    constructor(ctx, session, config) {
+        this.ctx = ctx;
+        this.session = session;
+        this.userKey = config.userKey ?? 'auth_user';
+        this.provider = config.provider;
+    }
+    user() {
+        return this._user;
+    }
+    check() {
+        return this._user !== null;
+    }
+    /**
+     * Authenticates the user from the session, throws if not authenticated.
+     */
+    async authenticate() {
+        if (this._checked) {
+            if (!this._user)
+                throw new UnauthorizedError('Session expired or not authenticated');
+            return this._user;
+        }
+        this._checked = true;
+        const sessionData = await this.session.get(this.userKey);
+        if (!sessionData?.id) {
+            throw new UnauthorizedError('Not authenticated. Please log in.');
+        }
+        const user = await this.provider(sessionData.id);
+        if (!user) {
+            await this.session.forget(this.userKey);
+            throw new UnauthorizedError('User account not found or deactivated.');
+        }
+        this._user = user;
+        return user;
+    }
+    /**
+     * Silently checks authentication without throwing.
+     */
+    async silentCheck() {
+        try {
+            await this.authenticate();
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
+    /**
+     * Logs a user into the session.
+     * Hospital use: cashier.login(user, { remember: false }) — terminates on browser close.
+     */
+    async login(user, options = {}) {
+        await this.session.put(this.userKey, { id: user.id });
+        if (options.remember) {
+            const duration = options.rememberDuration ?? 30 * 24 * 60 * 60; // 30 days
+            await this.session.setExpiry(duration);
+        }
+        // Regenerate session ID to prevent fixation attacks
+        await this.session.regenerate();
+        this._user = user;
+        this._checked = true;
+    }
+    /**
+     * Logs the authenticated user out and destroys their session.
+     * Hospital use: cashier shift end → session destroyed, terminal freed.
+     */
+    async logout() {
+        await this.session.forget(this.userKey);
+        await this.session.regenerate();
+        this._user = null;
+        this._checked = false;
+    }
+    /**
+     * Attempts login with a password credential check.
+     * Returns true on success, false on failure (never throws for wrong password).
+     */
+    async attempt(user, plainPassword, options = {}) {
+        const valid = await hashVerify(user.password, plainPassword);
+        if (!valid)
+            return false;
+        // Strip password before storing
+        const { password: _pw, ...safeUser } = user;
+        await this.login(safeUser, options);
+        return true;
+    }
+}
+//# sourceMappingURL=session-guard.js.map

package/dist/auth/guards/session-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-guard.js","sourceRoot":"","sources":["../../../src/auth/guards/session-guard.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAe1D,MAAM,OAAO,YAAY;IACf,KAAK,GAAoB,IAAI,CAAC;IAC9B,QAAQ,GAAG,KAAK,CAAC;IACR,OAAO,CAAS;IAChB,QAAQ,CAAoD;IACrE,OAAO,CAAiB;IACxB,GAAG,CAAc;IAEzB,YAAY,GAAgB,EAAE,OAAuB,EAAE,MAA0B;QAC/E,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,WAAW,CAAC;QAC7C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAClC,CAAC;IAEM,IAAI;QACT,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAEM,KAAK;QACV,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;IAC7B,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY;QACvB,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,KAAK;gBAAE,MAAM,IAAI,iBAAiB,CAAC,sCAAsC,CAAC,CAAC;YACrF,OAAO,IAAI,CAAC,KAAK,CAAC;QACpB,CAAC;QAED,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAA0B,IAAI,CAAC,OAAO,CAAC,CAAC;QAElF,IAAI,CAAC,WAAW,EAAE,EAAE,EAAE,CAAC;YACrB,MAAM,IAAI,iBAAiB,CAAC,mCAAmC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,MAAM,IAAI,iBAAiB,CAAC,wCAAwC,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,WAAW;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,KAAK,CAAC,IAAc,EAAE,UAAwB,EAAE;QAC3D,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAEtD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU;YAC1E,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,oDAAoD;QACpD,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,MAAM;QACjB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;IACxB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,OAAO,CAClB,IAAqC,EACrC,aAAqB,EACrB,UAAwB,EAAE;QAE1B,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QAEzB,gCAAgC;QAChC,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAC;QAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/auth/index.d.ts

@@ -0,0 +1,2 @@
+export * from './policy.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}

package/dist/auth/index.js

@@ -0,0 +1,2 @@
+export * from './policy.js';
+//# sourceMappingURL=index.js.map

package/dist/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/auth/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC"}

package/dist/auth/policy.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @file policy.ts
+ * @description Typed Permission Policy Engine for AeroJS.
+ * Handles 3-Tier authorization: Module -> Action -> Data Scope.
+ */
+export type PolicyFunction = (user: any, resource?: any) => boolean | Promise<boolean>;
+export declare class PolicyEngine {
+    private policies;
+    /**
+     * Defines a policy for a specific module and action.
+     * Format: `define('module:action', callback)`
+     */
+    define(moduleAction: string, policyFn: PolicyFunction): this;
+    /**
+     * Checks if a user is authorized for the given module and action.
+     */
+    check(user: any, module: string, action: string, resource?: any): Promise<boolean>;
+}
+export declare function policyPlugin(engine: PolicyEngine): (app: any) => void;
+//# sourceMappingURL=policy.d.ts.map

package/dist/auth/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/auth/policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,MAAM,MAAM,cAAc,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,CAAC,EAAE,GAAG,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEvF,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAqC;IAErD;;;OAGG;IACI,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,IAAI;IAKnE;;OAEG;IACU,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC;CAoBhG;AAID,wBAAgB,YAAY,CAAC,MAAM,EAAE,YAAY,SACjB,GAAG,UAMlC"}

package/dist/auth/policy.js

@@ -0,0 +1,49 @@
+/**
+ * @file policy.ts
+ * @description Typed Permission Policy Engine for AeroJS.
+ * Handles 3-Tier authorization: Module -> Action -> Data Scope.
+ */
+import { ForbiddenError } from '../core/errors.js';
+export class PolicyEngine {
+    policies = new Map();
+    /**
+     * Defines a policy for a specific module and action.
+     * Format: `define('module:action', callback)`
+     */
+    define(moduleAction, policyFn) {
+        this.policies.set(moduleAction, policyFn);
+        return this;
+    }
+    /**
+     * Checks if a user is authorized for the given module and action.
+     */
+    async check(user, module, action, resource) {
+        if (!user)
+            return false;
+        // Check wildcard action for module (e.g. 'Patient:*')
+        const wildcardKey = `${module}:*`;
+        if (this.policies.has(wildcardKey)) {
+            const fn = this.policies.get(wildcardKey);
+            if (await fn(user, resource))
+                return true;
+        }
+        // Check specific action
+        const key = `${module}:${action}`;
+        if (this.policies.has(key)) {
+            const fn = this.policies.get(key);
+            return await fn(user, resource);
+        }
+        // Default deny if no policy matches
+        return false;
+    }
+}
+import { SKIP_OVERRIDE } from '../plugins/plugin.js';
+export function policyPlugin(engine) {
+    const plugin = function (app) {
+        // Bind to the container for access inside Context
+        app.container.singleton('policyEngine', () => engine);
+    };
+    plugin[SKIP_OVERRIDE] = true;
+    return plugin;
+}
+//# sourceMappingURL=policy.js.map

package/dist/auth/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/auth/policy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAInD,MAAM,OAAO,YAAY;IACf,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAErD;;;OAGG;IACI,MAAM,CAAC,YAAoB,EAAE,QAAwB;QAC1D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK,CAAC,IAAS,EAAE,MAAc,EAAE,MAAc,EAAE,QAAc;QAC1E,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QAExB,sDAAsD;QACtD,MAAM,WAAW,GAAG,GAAG,MAAM,IAAI,CAAC;QAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACnC,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;YAC3C,IAAI,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC5C,CAAC;QAED,wBAAwB;QACxB,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YACnC,OAAO,MAAM,EAAE,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClC,CAAC;QAED,oCAAoC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,MAAM,GAAG,UAAU,GAAQ;QAC/B,kDAAkD;QAClD,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,cAAc,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC,CAAC;IACD,MAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IACtC,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/body-parser.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @file body-parser.ts
+ * @description Stream-based HTTP request body parsers with size limit enforcement.
+ */
+import type { IncomingMessage } from 'node:http';
+/**
+ * Options for configuring body parser limits.
+ */
+export interface BodyParserOptions {
+    /**
+     * Maximum allowed body size in bytes (defaults to 1MB = 1048576).
+     */
+    limit?: number;
+}
+/**
+ * Reads raw stream data from an IncomingMessage up to the specified byte limit.
+ *
+ * @param req - IncomingMessage stream.
+ * @param limit - Maximum byte limit.
+ * @returns Complete raw Buffer.
+ * @throws PayloadTooLargeError if payload exceeds limit.
+ */
+export declare function readRawBody(req: IncomingMessage, limit?: number): Promise<Buffer>;
+/**
+ * Parses URL-encoded form data into a key-value dictionary.
+ *
+ * @param text - URL-encoded form string.
+ * @returns Parsed object.
+ */
+export declare function parseUrlEncoded(text: string): Record<string, string | string[]>;
+/**
+ * Main parser entry point that examines the `Content-Type` header and parses
+ * JSON, URL-encoded forms, and plain text.
+ *
+ * @param req - Node.js IncomingMessage.
+ * @param options - Body parser configuration options.
+ * @returns Parsed body object, string, or undefined if no body.
+ */
+export declare function parseBody(req: IncomingMessage, options?: BodyParserOptions): Promise<unknown>;
+//# sourceMappingURL=body-parser.d.ts.map

package/dist/body-parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-parser.d.ts","sourceRoot":"","sources":["../src/body-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAGjD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,eAAe,EACpB,KAAK,GAAE,MAA2B,GACjC,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,CAgB/E;AAED;;;;;;;GAOG;AACH,wBAAsB,SAAS,CAC7B,GAAG,EAAE,eAAe,EACpB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,OAAO,CAAC,CAyClB"}

package/dist/body-parser.js

@@ -0,0 +1,99 @@
+/**
+ * @file body-parser.ts
+ * @description Stream-based HTTP request body parsers with size limit enforcement.
+ */
+import { BadRequestError, PayloadTooLargeError } from './errors.js';
+const DEFAULT_BODY_LIMIT = 1024 * 1024; // 1MB
+/**
+ * Reads raw stream data from an IncomingMessage up to the specified byte limit.
+ *
+ * @param req - IncomingMessage stream.
+ * @param limit - Maximum byte limit.
+ * @returns Complete raw Buffer.
+ * @throws PayloadTooLargeError if payload exceeds limit.
+ */
+export async function readRawBody(req, limit = DEFAULT_BODY_LIMIT) {
+    const contentLengthHeader = req.headers['content-length'];
+    if (contentLengthHeader) {
+        const contentLength = parseInt(contentLengthHeader, 10);
+        if (!isNaN(contentLength) && contentLength > limit) {
+            throw new PayloadTooLargeError(`Payload size of ${contentLength} bytes exceeds limit of ${limit} bytes`);
+        }
+    }
+    const chunks = [];
+    let totalBytes = 0;
+    for await (const chunk of req) {
+        const bufferChunk = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
+        totalBytes += bufferChunk.length;
+        if (totalBytes > limit) {
+            throw new PayloadTooLargeError(`Payload size exceeded limit of ${limit} bytes`);
+        }
+        chunks.push(bufferChunk);
+    }
+    return Buffer.concat(chunks);
+}
+/**
+ * Parses URL-encoded form data into a key-value dictionary.
+ *
+ * @param text - URL-encoded form string.
+ * @returns Parsed object.
+ */
+export function parseUrlEncoded(text) {
+    const params = new URLSearchParams(text);
+    const result = {};
+    for (const [key, value] of params.entries()) {
+        const existing = result[key];
+        if (existing === undefined) {
+            result[key] = value;
+        }
+        else if (Array.isArray(existing)) {
+            existing.push(value);
+        }
+        else {
+            result[key] = [existing, value];
+        }
+    }
+    return result;
+}
+/**
+ * Main parser entry point that examines the `Content-Type` header and parses
+ * JSON, URL-encoded forms, and plain text.
+ *
+ * @param req - Node.js IncomingMessage.
+ * @param options - Body parser configuration options.
+ * @returns Parsed body object, string, or undefined if no body.
+ */
+export async function parseBody(req, options = {}) {
+    const contentType = req.headers['content-type'];
+    if (!contentType) {
+        return undefined;
+    }
+    const limit = options.limit ?? DEFAULT_BODY_LIMIT;
+    const mimeType = contentType.split(';')[0]?.trim().toLowerCase();
+    // If no supported body type or empty body
+    if (!mimeType) {
+        return undefined;
+    }
+    const rawBuffer = await readRawBody(req, limit);
+    if (rawBuffer.length === 0) {
+        return undefined;
+    }
+    const textContent = rawBuffer.toString('utf-8');
+    if (mimeType === 'application/json') {
+        try {
+            return JSON.parse(textContent);
+        }
+        catch (err) {
+            throw new BadRequestError(`Malformed JSON payload: ${err instanceof Error ? err.message : String(err)}`);
+        }
+    }
+    if (mimeType === 'application/x-www-form-urlencoded') {
+        return parseUrlEncoded(textContent);
+    }
+    if (mimeType === 'text/plain') {
+        return textContent;
+    }
+    // Fallback to raw buffer for other binary types
+    return rawBuffer;
+}
+//# sourceMappingURL=body-parser.js.map

package/dist/body-parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"body-parser.js","sourceRoot":"","sources":["../src/body-parser.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAYpE,MAAM,kBAAkB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM;AAE9C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAoB,EACpB,QAAgB,kBAAkB;IAElC,MAAM,mBAAmB,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC1D,IAAI,mBAAmB,EAAE,CAAC;QACxB,MAAM,aAAa,GAAG,QAAQ,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,KAAK,EAAE,CAAC;YACnD,MAAM,IAAI,oBAAoB,CAC5B,mBAAmB,aAAa,2BAA2B,KAAK,QAAQ,CACzE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,UAAU,GAAG,CAAC,CAAC;IAEnB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxE,UAAU,IAAI,WAAW,CAAC,MAAM,CAAC;QAEjC,IAAI,UAAU,GAAG,KAAK,EAAE,CAAC;YACvB,MAAM,IAAI,oBAAoB,CAC5B,kCAAkC,KAAK,QAAQ,CAChD,CAAC;QACJ,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,MAAM,GAAsC,EAAE,CAAC;IAErD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACnC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAoB,EACpB,UAA6B,EAAE;IAE/B,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,kBAAkB,CAAC;IAClD,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAEjE,0CAA0C;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAChD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEhD,IAAI,QAAQ,KAAK,kBAAkB,EAAE,CAAC;QACpC,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,eAAe,CACvB,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,KAAK,mCAAmC,EAAE,CAAC;QACrD,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,gDAAgD;IAChD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/cache/cache-driver.d.ts

@@ -0,0 +1,43 @@
+/**
+ * @file cache-driver.ts
+ * @description Defines the CacheDriver contract interface.
+ */
+export interface CacheDriver {
+    /**
+     * Retrieve an item from the cache by key.
+     */
+    get<T = any>(key: string): Promise<T | null>;
+    /**
+     * Store an item in the cache for a given number of seconds.
+     */
+    set(key: string, value: any, ttlSeconds?: number): Promise<void>;
+    /**
+     * Determine if an item exists in the cache.
+     */
+    has(key: string): Promise<boolean>;
+    /**
+     * Remove an item from the cache.
+     */
+    delete(key: string): Promise<boolean>;
+    /**
+     * Remove all items from the cache.
+     */
+    clear(): Promise<void>;
+    /**
+     * Retrieve multiple items from the cache by key.
+     */
+    getMany(keys: string[]): Promise<Record<string, any>>;
+    /**
+     * Store multiple items in the cache for a given number of seconds.
+     */
+    setMany(entries: Record<string, any>, ttlSeconds?: number): Promise<void>;
+    /**
+     * Increment the value of an item in the cache.
+     */
+    increment(key: string, value?: number): Promise<number>;
+    /**
+     * Decrement the value of an item in the cache.
+     */
+    decrement(key: string, value?: number): Promise<number>;
+}
+//# sourceMappingURL=cache-driver.d.ts.map

package/dist/cache/cache-driver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-driver.d.ts","sourceRoot":"","sources":["../../src/cache/cache-driver.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,WAAW;IAC1B;;OAEG;IACH,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IAE7C;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjE;;OAEG;IACH,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEnC;;OAEG;IACH,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEtC;;OAEG;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvB;;OAEG;IACH,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAEtD;;OAEG;IACH,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE1E;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAExD;;OAEG;IACH,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACzD"}

package/dist/cache/cache-driver.js

@@ -0,0 +1,6 @@
+/**
+ * @file cache-driver.ts
+ * @description Defines the CacheDriver contract interface.
+ */
+export {};
+//# sourceMappingURL=cache-driver.js.map

package/dist/cache/cache-driver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-driver.js","sourceRoot":"","sources":["../../src/cache/cache-driver.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/cache/cache-manager.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @file cache-manager.ts
+ * @description Manages cache drivers and provides high-level cache operations.
+ */
+import type { CacheDriver } from './cache-driver.js';
+export declare class CacheManager {
+    private drivers;
+    private defaultDriverName;
+    constructor();
+    extend(name: string, driver: CacheDriver): void;
+    store(name?: string): CacheDriver;
+    get<T = any>(key: string): Promise<T | null>;
+    set(key: string, value: any, ttlSeconds?: number): Promise<void>;
+    has(key: string): Promise<boolean>;
+    delete(key: string): Promise<boolean>;
+    clear(): Promise<void>;
+    getMany(keys: string[]): Promise<Record<string, any>>;
+    setMany(entries: Record<string, any>, ttlSeconds?: number): Promise<void>;
+    increment(key: string, value?: number): Promise<number>;
+    decrement(key: string, value?: number): Promise<number>;
+    private inflightPromises;
+    /**
+     * Remember an item in the cache, computing it if missing. Prevent race conditions by holding a single Promise.
+     */
+    remember<T>(key: string, ttlSeconds: number, callback: () => Promise<T>): Promise<T>;
+    /**
+     * Tagged cache. Implemented via namespacing.
+     */
+    tags(names: string[]): {
+        set: (key: string, value: any, ttlSeconds?: number) => Promise<void>;
+        get: <T = any>(key: string) => Promise<T | null>;
+        has: (key: string) => Promise<boolean>;
+        remember: <T>(key: string, ttlSeconds: number, callback: () => Promise<T>) => Promise<T>;
+        flush: () => Promise<void>;
+    };
+    /**
+     * Atomic execution lock.
+     */
+    lock(name: string, seconds: number): {
+        get: <T>(callback: () => Promise<T | void>) => Promise<T | null>;
+    };
+}
+export declare const Cache: CacheManager;
+//# sourceMappingURL=cache-manager.d.ts.map

package/dist/cache/cache-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache-manager.d.ts","sourceRoot":"","sources":["../../src/cache/cache-manager.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAIrD,qBAAa,YAAY;IACvB,OAAO,CAAC,OAAO,CAAuC;IACtD,OAAO,CAAC,iBAAiB,CAAY;;IAM9B,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,IAAI;IAI/C,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW;IAS3B,GAAG,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAI5C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIhE,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIlC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAIrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAItB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAIrD,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzE,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIvD,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIpE,OAAO,CAAC,gBAAgB,CAAwC;IAEhE;;OAEG;IACU,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAwBjG;;OAEG;IACI,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE;mBAeN,MAAM,SAAS,GAAG,eAAe,MAAM;cAI5C,CAAC,aAAa,MAAM,KAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;mBAInC,MAAM,KAAG,OAAO,CAAC,OAAO,CAAC;mBAIzB,CAAC,OAAO,MAAM,cAAc,MAAM,YAAY,MAAM,OAAO,CAAC,CAAC,CAAC,KAAG,OAAO,CAAC,CAAC,CAAC;;;IAYhG;;OAEG;IACI,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;cAEzB,CAAC,YAAY,MAAM,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,KAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;;CAsCzE;AAGD,eAAO,MAAM,KAAK,cAAqB,CAAC"}