@syncello/auth 2.5.1

package/README.md

@@ -0,0 +1,187 @@
+# @syncello/auth
+
+Authentication library for Hono + Drizzle + Cloudflare Workers.
+
+## Features
+
+- Password hashing with bcrypt + HMAC-SHA256 pepper
+- Session management with sliding expiration
+- Two-factor authentication (TOTP + backup codes)
+- Account lockout protection
+- Rate limiting (KV-based)
+- CSRF protection
+- Email verification
+- Password reset
+- OAuth support (Google, Microsoft)
+- Mobile PKCE support
+
+## Installation
+
+```bash
+npm install @syncello/auth --registry=https://npm.pkg.github.com
+```
+
+Configure `.npmrc`:
+```
+@syncello:registry=https://npm.pkg.github.com
+```
+
+## Quick Start
+
+```typescript
+import { createAuth } from '@syncello/auth';
+import { users, sessions } from '@syncello/auth/schema';
+
+const auth = createAuth({
+  database: db,
+  email: {
+    send: async (to, subject, html, text) => {
+      await resend.emails.send({ to, subject, html, text });
+    },
+  },
+  env: {
+    passwordPepper: process.env.PASSWORD_PEPPER_V1,
+    appUrl: process.env.APP_URL,
+    appName: 'My App',
+  },
+});
+
+// Mount routes
+app.route('/v1/auth', auth.routes);
+
+// Use middleware
+app.use('/api/*', auth.middleware.requireAuth);
+```
+
+## Schema
+
+Import and use the auth schema in your Drizzle config:
+
+```typescript
+import {
+  users,
+  sessions,
+  user2faMethods,
+  userBackupCodes,
+  userTrustedDevices,
+  emailVerificationTokens,
+  passwordResetTokens,
+  oauthAccounts,
+  securityAuditLog,
+} from '@syncello/auth/schema';
+
+export {
+  users,
+  sessions,
+  // ... other tables
+};
+```
+
+## Configuration
+
+```typescript
+interface CreateAuthOptions {
+  // Database (required)
+  database: DrizzleDB | ((c: Context) => DrizzleDB);
+
+  // Email adapter (required)
+  email: {
+    send(to: string, subject: string, html: string, text?: string): Promise<void>;
+  };
+
+  // Environment configuration
+  env: {
+    passwordPepper: string;
+    appUrl: string;
+    appName?: string;
+    sessionTtlDays?: number;
+    lockoutDurationMinutes?: number;
+    lockoutMaxAttempts?: number;
+  };
+
+  // Optional custom email templates
+  templates?: {
+    verification?: EmailTemplate;
+    passwordReset?: EmailTemplate;
+    twoFactorCode?: EmailTemplate;
+  };
+
+  // Optional KV bindings
+  kv?: {
+    rateLimit?: KVNamespace | ((c: Context) => KVNamespace);
+    challenges?: KVNamespace | ((c: Context) => KVNamespace);
+  };
+
+  // Optional Turnstile verification
+  turnstile?: {
+    secretKey: string;
+    enabled?: boolean;
+  };
+}
+```
+
+## Middleware
+
+```typescript
+// Require authentication
+app.use('/api/*', auth.middleware.requireAuth);
+
+// Optional authentication (sets userId if logged in)
+app.use('/api/*', auth.middleware.optionalAuth);
+
+// Require verified email
+app.use('/api/*', auth.middleware.requireVerifiedEmail);
+
+// CSRF protection
+app.use('/api/*', auth.middleware.csrf);
+
+// Rate limiting
+app.use('/api/login', auth.middleware.rateLimit({
+  identifier: (c) => c.req.header('cf-connecting-ip') || 'unknown',
+  action: 'login',
+  maxAttempts: 5,
+  windowMs: 15 * 60 * 1000, // 15 minutes
+}));
+```
+
+## Utilities
+
+```typescript
+// Password hashing
+const hash = await auth.utils.hashPassword('password123');
+const isValid = await auth.utils.verifyPassword('password123', hash);
+
+// Password validation
+const validation = auth.utils.validatePassword('password123');
+if (!validation.valid) {
+  console.error(validation.error);
+}
+
+// Session management
+const sessionId = await auth.utils.createSession(db, userId);
+await auth.utils.deleteSession(db, sessionId);
+```
+
+## Direct Imports
+
+For advanced usage, you can import utilities directly:
+
+```typescript
+import {
+  hashPassword,
+  verifyPassword,
+  validatePassword,
+  validatePasswordWithBreachCheck,
+  createSession,
+  deleteSession,
+  generateSecureToken,
+  hashToken,
+  generateTotpSecret,
+  verifyTotpCode,
+  generateBackupCodes,
+} from '@syncello/auth';
+```
+
+## License
+
+UNLICENSED - Syncello Internal Use Only

package/dist/chunk-OZ26T3ZA.js

@@ -0,0 +1,263 @@
+// src/schema/definitions.ts
+var SCHEMA_VERSION = "2026.05.1";
+var enums = {
+  identifierType: {
+    name: "identifier_type_enum",
+    values: ["email", "ip"]
+  },
+  twoFactorMethod: {
+    name: "two_factor_method",
+    values: ["totp", "email"]
+  },
+  deviceType: {
+    name: "device_type",
+    values: ["desktop", "mobile", "tablet"]
+  }
+};
+var tables = {
+  users: {
+    columns: {
+      id: { type: "uuid", primaryKey: true, default: "gen_random_uuid()" },
+      email: { type: "varchar", length: 255, notNull: true, unique: true },
+      name: { type: "text" },
+      hashedPassword: { type: "varchar", length: 255 },
+      pepperKid: { type: "varchar", length: 10, default: "v1" },
+      emailVerified: { type: "boolean", default: false },
+      isAdmin: { type: "boolean", default: false, notNull: true },
+      sessionVersion: { type: "integer", default: 1 },
+      lockedUntil: { type: "bigint", mode: "number" },
+      failedLoginCount: { type: "integer", default: 0 },
+      emailBounced: { type: "boolean", default: false, notNull: true },
+      emailBouncedAt: { type: "timestamp", withTimezone: true },
+      emailComplained: { type: "boolean", default: false, notNull: true },
+      emailComplainedAt: { type: "timestamp", withTimezone: true },
+      activatedAt: { type: "timestamp", withTimezone: true },
+      deletedAt: { type: "timestamp", withTimezone: true },
+      scheduledPurgeAt: { type: "timestamp", withTimezone: true },
+      createdAt: { type: "timestamp", withTimezone: true, default: "now()" },
+      updatedAt: { type: "timestamp", withTimezone: true, default: "now()" }
+    },
+    indexes: [{ name: "idx_users_email", columns: ["email"] }]
+  },
+  sessions: {
+    columns: {
+      id: { type: "varchar", length: 128, primaryKey: true },
+      userId: {
+        type: "uuid",
+        notNull: true,
+        references: { table: "users", column: "id", onDelete: "cascade" }
+      },
+      expiresAt: { type: "bigint", mode: "number", notNull: true },
+      createdAt: { type: "bigint", mode: "number", notNull: true },
+      lastActiveAt: { type: "bigint", mode: "number" },
+      fingerprint: { type: "varchar", length: 64 },
+      ipAddress: { type: "varchar", length: 45 }
+    },
+    indexes: [
+      { name: "idx_sessions_expires", columns: ["expiresAt"] },
+      { name: "idx_sessions_user", columns: ["userId"] }
+    ]
+  },
+  user2faMethods: {
+    columns: {
+      id: { type: "uuid", primaryKey: true, default: "gen_random_uuid()" },
+      userId: {
+        type: "uuid",
+        notNull: true,
+        references: { table: "users", column: "id", onDelete: "cascade" }
+      },
+      method: { type: "two_factor_method", notNull: true },
+      totpSecret: { type: "varchar", length: 256 },
+      lastTotpCounter: { type: "bigint", mode: "number" },
+      isPrimary: { type: "boolean", default: false, notNull: true },
+      verifiedAt: { type: "bigint", mode: "number", notNull: true },
+      createdAt: { type: "bigint", mode: "number", notNull: true }
+    },
+    indexes: [
+      { name: "user_2fa_methods_user_method_idx", columns: ["userId", "method"], unique: true },
+      { name: "user_2fa_methods_user_idx", columns: ["userId"] }
+    ]
+  },
+  userBackupCodes: {
+    columns: {
+      id: { type: "uuid", primaryKey: true, default: "gen_random_uuid()" },
+      userId: {
+        type: "uuid",
+        notNull: true,
+        references: { table: "users", column: "id", onDelete: "cascade" }
+      },
+      codeHash: { type: "varchar", length: 255, notNull: true },
+      usedAt: { type: "bigint", mode: "number" },
+      createdAt: { type: "bigint", mode: "number", notNull: true }
+    },
+    indexes: [{ name: "user_backup_codes_user_idx", columns: ["userId"] }]
+  },
+  userTrustedDevices: {
+    columns: {
+      id: { type: "uuid", primaryKey: true, default: "gen_random_uuid()" },
+      userId: {
+        type: "uuid",
+        notNull: true,
+        references: { table: "users", column: "id", onDelete: "cascade" }
+      },
+      tokenHash: { type: "varchar", length: 128, notNull: true },
+      deviceName: { type: "varchar", length: 255, notNull: true },
+      deviceType: { type: "device_type", notNull: true, default: "desktop" },
+      ipAddress: { type: "varchar", length: 45, notNull: true },
+      expiresAt: { type: "bigint", mode: "number", notNull: true },
+      lastUsedAt: { type: "bigint", mode: "number", notNull: true },
+      createdAt: { type: "bigint", mode: "number", notNull: true }
+    },
+    indexes: [
+      { name: "user_trusted_devices_user_idx", columns: ["userId"] },
+      { name: "user_trusted_devices_token_idx", columns: ["tokenHash"] },
+      { name: "user_trusted_devices_expires_idx", columns: ["expiresAt"] }
+    ]
+  },
+  emailVerificationTokens: {
+    columns: {
+      tokenHash: { type: "varchar", length: 128, primaryKey: true },
+      userId: {
+        type: "uuid",
+        notNull: true,
+        references: { table: "users", column: "id", onDelete: "cascade" }
+      },
+      email: { type: "varchar", length: 255, notNull: true },
+      expiresAt: { type: "bigint", mode: "number", notNull: true },
+      createdAt: { type: "bigint", mode: "number", notNull: true }
+    },
+    indexes: [
+      { name: "idx_email_verification_user", columns: ["userId"] },
+      { name: "idx_email_verification_expires", columns: ["expiresAt"] }
+    ]
+  },
+  passwordResetTokens: {
+    columns: {
+      tokenHash: { type: "varchar", length: 128, primaryKey: true },
+      userId: {
+        type: "uuid",
+        notNull: true,
+        references: { table: "users", column: "id", onDelete: "cascade" }
+      },
+      expiresAt: { type: "bigint", mode: "number", notNull: true },
+      used: { type: "boolean", default: false },
+      createdAt: { type: "bigint", mode: "number", notNull: true }
+    },
+    indexes: [
+      { name: "idx_password_reset_user", columns: ["userId"] },
+      { name: "idx_password_reset_expires", columns: ["expiresAt"] }
+    ]
+  },
+  emailChangeTokens: {
+    columns: {
+      id: { type: "uuid", primaryKey: true, default: "gen_random_uuid()" },
+      userId: {
+        type: "uuid",
+        notNull: true,
+        references: { table: "users", column: "id", onDelete: "cascade" }
+      },
+      newEmail: { type: "varchar", length: 255, notNull: true },
+      tokenHash: { type: "varchar", length: 128, notNull: true },
+      cancelTokenHash: { type: "varchar", length: 128, notNull: true },
+      expiresAt: { type: "bigint", mode: "number", notNull: true },
+      createdAt: { type: "bigint", mode: "number", notNull: true }
+    },
+    indexes: [
+      { name: "idx_email_change_tokens_user", columns: ["userId"], unique: true },
+      { name: "idx_email_change_tokens_token", columns: ["tokenHash"] },
+      { name: "idx_email_change_tokens_cancel", columns: ["cancelTokenHash"] },
+      { name: "idx_email_change_tokens_expires", columns: ["expiresAt"] }
+    ]
+  },
+  emailEvents: {
+    columns: {
+      id: { type: "uuid", primaryKey: true, default: "gen_random_uuid()" },
+      emailId: { type: "text", notNull: true },
+      userId: {
+        type: "uuid",
+        references: { table: "users", column: "id", onDelete: "cascade" }
+      },
+      eventType: { type: "text", notNull: true },
+      emailAddress: { type: "text", notNull: true },
+      metadata: { type: "json" },
+      createdAt: { type: "timestamp", withTimezone: true, default: "now()", notNull: true }
+    },
+    indexes: [
+      { name: "email_events_email_address_idx", columns: ["emailAddress"] },
+      { name: "email_events_user_id_idx", columns: ["userId"] },
+      { name: "email_events_email_id_event_type_idx", columns: ["emailId", "eventType"], unique: true }
+    ]
+  },
+  failedLoginAttempts: {
+    columns: {
+      id: { type: "serial", primaryKey: true },
+      identifier: { type: "varchar", length: 255, notNull: true },
+      identifierType: { type: "identifier_type_enum", notNull: true },
+      attemptedAt: { type: "bigint", mode: "number", notNull: true }
+    },
+    indexes: [
+      { name: "idx_failed_attempts_identifier", columns: ["identifier", "attemptedAt"] },
+      { name: "idx_failed_attempts_time", columns: ["attemptedAt"] }
+    ]
+  },
+  securityAuditLog: {
+    columns: {
+      id: { type: "serial", primaryKey: true },
+      userId: {
+        type: "uuid",
+        references: { table: "users", column: "id", onDelete: "set null" }
+      },
+      eventType: { type: "varchar", length: 50, notNull: true },
+      eventData: { type: "json" },
+      ipAddress: { type: "varchar", length: 45 },
+      userAgent: { type: "text" },
+      success: { type: "boolean", notNull: true },
+      createdAt: { type: "timestamp", withTimezone: true, default: "now()" }
+    },
+    indexes: [
+      { name: "idx_audit_user", columns: ["userId"] },
+      { name: "idx_audit_event", columns: ["eventType"] },
+      { name: "idx_audit_created", columns: ["createdAt"] }
+    ]
+  },
+  oauthAccounts: {
+    columns: {
+      id: { type: "uuid", primaryKey: true, default: "gen_random_uuid()" },
+      userId: {
+        type: "uuid",
+        notNull: true,
+        references: { table: "users", column: "id", onDelete: "cascade" }
+      },
+      provider: { type: "varchar", length: 50, notNull: true },
+      providerUserId: { type: "varchar", length: 255, notNull: true },
+      email: { type: "varchar", length: 255, notNull: true },
+      createdAt: { type: "timestamp", withTimezone: true, default: "now()", notNull: true }
+    },
+    indexes: [
+      { name: "oauth_accounts_user_provider_idx", columns: ["userId", "provider"], unique: true },
+      { name: "oauth_accounts_provider_user_idx", columns: ["provider", "providerUserId"], unique: true }
+    ]
+  }
+};
+var tableNames = {
+  users: "users",
+  sessions: "sessions",
+  user2faMethods: "user_2fa_methods",
+  userBackupCodes: "user_backup_codes",
+  userTrustedDevices: "user_trusted_devices",
+  emailVerificationTokens: "email_verification_tokens",
+  passwordResetTokens: "password_reset_tokens",
+  emailChangeTokens: "email_change_tokens",
+  emailEvents: "email_events",
+  failedLoginAttempts: "failed_login_attempts",
+  securityAuditLog: "security_audit_log",
+  oauthAccounts: "oauth_accounts"
+};
+
+export {
+  SCHEMA_VERSION,
+  enums,
+  tables,
+  tableNames
+};
+//# sourceMappingURL=chunk-OZ26T3ZA.js.map

package/dist/chunk-OZ26T3ZA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/schema/definitions.ts"],"sourcesContent":["/**\n * @syncello/auth Schema Definitions\n * Plain TypeScript objects for CLI-based Drizzle code generation\n */\n\nexport const SCHEMA_VERSION = '2026.05.1';\n\n// ====================================\n// TYPE DEFINITIONS\n// ====================================\n\nexport type ColumnType =\n\t| 'uuid'\n\t| 'varchar'\n\t| 'text'\n\t| 'boolean'\n\t| 'integer'\n\t| 'bigint'\n\t| 'timestamp'\n\t| 'json'\n\t| 'serial';\n\nexport type ColumnDefinition = {\n\ttype: ColumnType | string; // string allows enum references\n\tlength?: number;\n\tprimaryKey?: boolean;\n\tnotNull?: boolean;\n\tunique?: boolean;\n\tdefault?: string | number | boolean | null;\n\treferences?: {\n\t\ttable: string;\n\t\tcolumn: string;\n\t\tonDelete?: 'cascade' | 'set null' | 'restrict' | 'no action';\n\t};\n\tmode?: 'number'; // for bigint\n\twithTimezone?: boolean; // for timestamp\n};\n\nexport type IndexDefinition = {\n\tname: string;\n\tcolumns: string[];\n\tunique?: boolean;\n};\n\nexport type TableDefinition = {\n\tcolumns: Record<string, ColumnDefinition>;\n\tindexes?: IndexDefinition[];\n};\n\nexport type EnumDefinition = {\n\tname: string;\n\tvalues: readonly string[];\n};\n\n// ====================================\n// ENUMS\n// ====================================\n\nexport const enums = {\n\tidentifierType: {\n\t\tname: 'identifier_type_enum',\n\t\tvalues: ['email', 'ip'] as const,\n\t},\n\ttwoFactorMethod: {\n\t\tname: 'two_factor_method',\n\t\tvalues: ['totp', 'email'] as const,\n\t},\n\tdeviceType: {\n\t\tname: 'device_type',\n\t\tvalues: ['desktop', 'mobile', 'tablet'] as const,\n\t},\n} as const satisfies Record<string, EnumDefinition>;\n\n// ====================================\n// TABLE DEFINITIONS\n// ====================================\n\nexport const tables = {\n\tusers: {\n\t\tcolumns: {\n\t\t\tid: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' },\n\t\t\temail: { type: 'varchar', length: 255, notNull: true, unique: true },\n\t\t\tname: { type: 'text' },\n\t\t\thashedPassword: { type: 'varchar', length: 255 },\n\t\t\tpepperKid: { type: 'varchar', length: 10, default: 'v1' },\n\t\t\temailVerified: { type: 'boolean', default: false },\n\t\t\tisAdmin: { type: 'boolean', default: false, notNull: true },\n\t\t\tsessionVersion: { type: 'integer', default: 1 },\n\t\t\tlockedUntil: { type: 'bigint', mode: 'number' },\n\t\t\tfailedLoginCount: { type: 'integer', default: 0 },\n\t\t\temailBounced: { type: 'boolean', default: false, notNull: true },\n\t\t\temailBouncedAt: { type: 'timestamp', withTimezone: true },\n\t\t\temailComplained: { type: 'boolean', default: false, notNull: true },\n\t\t\temailComplainedAt: { type: 'timestamp', withTimezone: true },\n\t\t\tactivatedAt: { type: 'timestamp', withTimezone: true },\n\t\t\tdeletedAt: { type: 'timestamp', withTimezone: true },\n\t\t\tscheduledPurgeAt: { type: 'timestamp', withTimezone: true },\n\t\t\tcreatedAt: { type: 'timestamp', withTimezone: true, default: 'now()' },\n\t\t\tupdatedAt: { type: 'timestamp', withTimezone: true, default: 'now()' },\n\t\t},\n\t\tindexes: [{ name: 'idx_users_email', columns: ['email'] }],\n\t},\n\n\tsessions: {\n\t\tcolumns: {\n\t\t\tid: { type: 'varchar', length: 128, primaryKey: true },\n\t\t\tuserId: {\n\t\t\t\ttype: 'uuid',\n\t\t\t\tnotNull: true,\n\t\t\t\treferences: { table: 'users', column: 'id', onDelete: 'cascade' },\n\t\t\t},\n\t\t\texpiresAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t\tcreatedAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t\tlastActiveAt: { type: 'bigint', mode: 'number' },\n\t\t\tfingerprint: { type: 'varchar', length: 64 },\n\t\t\tipAddress: { type: 'varchar', length: 45 },\n\t\t},\n\t\tindexes: [\n\t\t\t{ name: 'idx_sessions_expires', columns: ['expiresAt'] },\n\t\t\t{ name: 'idx_sessions_user', columns: ['userId'] },\n\t\t],\n\t},\n\n\tuser2faMethods: {\n\t\tcolumns: {\n\t\t\tid: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' },\n\t\t\tuserId: {\n\t\t\t\ttype: 'uuid',\n\t\t\t\tnotNull: true,\n\t\t\t\treferences: { table: 'users', column: 'id', onDelete: 'cascade' },\n\t\t\t},\n\t\t\tmethod: { type: 'two_factor_method', notNull: true },\n\t\t\ttotpSecret: { type: 'varchar', length: 256 },\n\t\t\tlastTotpCounter: { type: 'bigint', mode: 'number' },\n\t\t\tisPrimary: { type: 'boolean', default: false, notNull: true },\n\t\t\tverifiedAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t\tcreatedAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t},\n\t\tindexes: [\n\t\t\t{ name: 'user_2fa_methods_user_method_idx', columns: ['userId', 'method'], unique: true },\n\t\t\t{ name: 'user_2fa_methods_user_idx', columns: ['userId'] },\n\t\t],\n\t},\n\n\tuserBackupCodes: {\n\t\tcolumns: {\n\t\t\tid: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' },\n\t\t\tuserId: {\n\t\t\t\ttype: 'uuid',\n\t\t\t\tnotNull: true,\n\t\t\t\treferences: { table: 'users', column: 'id', onDelete: 'cascade' },\n\t\t\t},\n\t\t\tcodeHash: { type: 'varchar', length: 255, notNull: true },\n\t\t\tusedAt: { type: 'bigint', mode: 'number' },\n\t\t\tcreatedAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t},\n\t\tindexes: [{ name: 'user_backup_codes_user_idx', columns: ['userId'] }],\n\t},\n\n\tuserTrustedDevices: {\n\t\tcolumns: {\n\t\t\tid: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' },\n\t\t\tuserId: {\n\t\t\t\ttype: 'uuid',\n\t\t\t\tnotNull: true,\n\t\t\t\treferences: { table: 'users', column: 'id', onDelete: 'cascade' },\n\t\t\t},\n\t\t\ttokenHash: { type: 'varchar', length: 128, notNull: true },\n\t\t\tdeviceName: { type: 'varchar', length: 255, notNull: true },\n\t\t\tdeviceType: { type: 'device_type', notNull: true, default: 'desktop' },\n\t\t\tipAddress: { type: 'varchar', length: 45, notNull: true },\n\t\t\texpiresAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t\tlastUsedAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t\tcreatedAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t},\n\t\tindexes: [\n\t\t\t{ name: 'user_trusted_devices_user_idx', columns: ['userId'] },\n\t\t\t{ name: 'user_trusted_devices_token_idx', columns: ['tokenHash'] },\n\t\t\t{ name: 'user_trusted_devices_expires_idx', columns: ['expiresAt'] },\n\t\t],\n\t},\n\n\temailVerificationTokens: {\n\t\tcolumns: {\n\t\t\ttokenHash: { type: 'varchar', length: 128, primaryKey: true },\n\t\t\tuserId: {\n\t\t\t\ttype: 'uuid',\n\t\t\t\tnotNull: true,\n\t\t\t\treferences: { table: 'users', column: 'id', onDelete: 'cascade' },\n\t\t\t},\n\t\t\temail: { type: 'varchar', length: 255, notNull: true },\n\t\t\texpiresAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t\tcreatedAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t},\n\t\tindexes: [\n\t\t\t{ name: 'idx_email_verification_user', columns: ['userId'] },\n\t\t\t{ name: 'idx_email_verification_expires', columns: ['expiresAt'] },\n\t\t],\n\t},\n\n\tpasswordResetTokens: {\n\t\tcolumns: {\n\t\t\ttokenHash: { type: 'varchar', length: 128, primaryKey: true },\n\t\t\tuserId: {\n\t\t\t\ttype: 'uuid',\n\t\t\t\tnotNull: true,\n\t\t\t\treferences: { table: 'users', column: 'id', onDelete: 'cascade' },\n\t\t\t},\n\t\t\texpiresAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t\tused: { type: 'boolean', default: false },\n\t\t\tcreatedAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t},\n\t\tindexes: [\n\t\t\t{ name: 'idx_password_reset_user', columns: ['userId'] },\n\t\t\t{ name: 'idx_password_reset_expires', columns: ['expiresAt'] },\n\t\t],\n\t},\n\n\temailChangeTokens: {\n\t\tcolumns: {\n\t\t\tid: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' },\n\t\t\tuserId: {\n\t\t\t\ttype: 'uuid',\n\t\t\t\tnotNull: true,\n\t\t\t\treferences: { table: 'users', column: 'id', onDelete: 'cascade' },\n\t\t\t},\n\t\t\tnewEmail: { type: 'varchar', length: 255, notNull: true },\n\t\t\ttokenHash: { type: 'varchar', length: 128, notNull: true },\n\t\t\tcancelTokenHash: { type: 'varchar', length: 128, notNull: true },\n\t\t\texpiresAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t\tcreatedAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t},\n\t\tindexes: [\n\t\t\t{ name: 'idx_email_change_tokens_user', columns: ['userId'], unique: true },\n\t\t\t{ name: 'idx_email_change_tokens_token', columns: ['tokenHash'] },\n\t\t\t{ name: 'idx_email_change_tokens_cancel', columns: ['cancelTokenHash'] },\n\t\t\t{ name: 'idx_email_change_tokens_expires', columns: ['expiresAt'] },\n\t\t],\n\t},\n\n\temailEvents: {\n\t\tcolumns: {\n\t\t\tid: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' },\n\t\t\temailId: { type: 'text', notNull: true },\n\t\t\tuserId: {\n\t\t\t\ttype: 'uuid',\n\t\t\t\treferences: { table: 'users', column: 'id', onDelete: 'cascade' },\n\t\t\t},\n\t\t\teventType: { type: 'text', notNull: true },\n\t\t\temailAddress: { type: 'text', notNull: true },\n\t\t\tmetadata: { type: 'json' },\n\t\t\tcreatedAt: { type: 'timestamp', withTimezone: true, default: 'now()', notNull: true },\n\t\t},\n\t\tindexes: [\n\t\t\t{ name: 'email_events_email_address_idx', columns: ['emailAddress'] },\n\t\t\t{ name: 'email_events_user_id_idx', columns: ['userId'] },\n\t\t\t{ name: 'email_events_email_id_event_type_idx', columns: ['emailId', 'eventType'], unique: true },\n\t\t],\n\t},\n\n\tfailedLoginAttempts: {\n\t\tcolumns: {\n\t\t\tid: { type: 'serial', primaryKey: true },\n\t\t\tidentifier: { type: 'varchar', length: 255, notNull: true },\n\t\t\tidentifierType: { type: 'identifier_type_enum', notNull: true },\n\t\t\tattemptedAt: { type: 'bigint', mode: 'number', notNull: true },\n\t\t},\n\t\tindexes: [\n\t\t\t{ name: 'idx_failed_attempts_identifier', columns: ['identifier', 'attemptedAt'] },\n\t\t\t{ name: 'idx_failed_attempts_time', columns: ['attemptedAt'] },\n\t\t],\n\t},\n\n\tsecurityAuditLog: {\n\t\tcolumns: {\n\t\t\tid: { type: 'serial', primaryKey: true },\n\t\t\tuserId: {\n\t\t\t\ttype: 'uuid',\n\t\t\t\treferences: { table: 'users', column: 'id', onDelete: 'set null' },\n\t\t\t},\n\t\t\teventType: { type: 'varchar', length: 50, notNull: true },\n\t\t\teventData: { type: 'json' },\n\t\t\tipAddress: { type: 'varchar', length: 45 },\n\t\t\tuserAgent: { type: 'text' },\n\t\t\tsuccess: { type: 'boolean', notNull: true },\n\t\t\tcreatedAt: { type: 'timestamp', withTimezone: true, default: 'now()' },\n\t\t},\n\t\tindexes: [\n\t\t\t{ name: 'idx_audit_user', columns: ['userId'] },\n\t\t\t{ name: 'idx_audit_event', columns: ['eventType'] },\n\t\t\t{ name: 'idx_audit_created', columns: ['createdAt'] },\n\t\t],\n\t},\n\n\toauthAccounts: {\n\t\tcolumns: {\n\t\t\tid: { type: 'uuid', primaryKey: true, default: 'gen_random_uuid()' },\n\t\t\tuserId: {\n\t\t\t\ttype: 'uuid',\n\t\t\t\tnotNull: true,\n\t\t\t\treferences: { table: 'users', column: 'id', onDelete: 'cascade' },\n\t\t\t},\n\t\t\tprovider: { type: 'varchar', length: 50, notNull: true },\n\t\t\tproviderUserId: { type: 'varchar', length: 255, notNull: true },\n\t\t\temail: { type: 'varchar', length: 255, notNull: true },\n\t\t\tcreatedAt: { type: 'timestamp', withTimezone: true, default: 'now()', notNull: true },\n\t\t},\n\t\tindexes: [\n\t\t\t{ name: 'oauth_accounts_user_provider_idx', columns: ['userId', 'provider'], unique: true },\n\t\t\t{ name: 'oauth_accounts_provider_user_idx', columns: ['provider', 'providerUserId'], unique: true },\n\t\t],\n\t},\n} as const satisfies Record<string, TableDefinition>;\n\n// ====================================\n// TABLE NAME MAPPING\n// ====================================\n\nexport const tableNames = {\n\tusers: 'users',\n\tsessions: 'sessions',\n\tuser2faMethods: 'user_2fa_methods',\n\tuserBackupCodes: 'user_backup_codes',\n\tuserTrustedDevices: 'user_trusted_devices',\n\temailVerificationTokens: 'email_verification_tokens',\n\tpasswordResetTokens: 'password_reset_tokens',\n\temailChangeTokens: 'email_change_tokens',\n\temailEvents: 'email_events',\n\tfailedLoginAttempts: 'failed_login_attempts',\n\tsecurityAuditLog: 'security_audit_log',\n\toauthAccounts: 'oauth_accounts',\n} as const;\n\nexport type TableName = keyof typeof tables;\nexport type EnumName = keyof typeof enums;\n"],"mappings":";AAKO,IAAM,iBAAiB;AAqDvB,IAAM,QAAQ;AAAA,EACpB,gBAAgB;AAAA,IACf,MAAM;AAAA,IACN,QAAQ,CAAC,SAAS,IAAI;AAAA,EACvB;AAAA,EACA,iBAAiB;AAAA,IAChB,MAAM;AAAA,IACN,QAAQ,CAAC,QAAQ,OAAO;AAAA,EACzB;AAAA,EACA,YAAY;AAAA,IACX,MAAM;AAAA,IACN,QAAQ,CAAC,WAAW,UAAU,QAAQ;AAAA,EACvC;AACD;AAMO,IAAM,SAAS;AAAA,EACrB,OAAO;AAAA,IACN,SAAS;AAAA,MACR,IAAI,EAAE,MAAM,QAAQ,YAAY,MAAM,SAAS,oBAAoB;AAAA,MACnE,OAAO,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,MAAM,QAAQ,KAAK;AAAA,MACnE,MAAM,EAAE,MAAM,OAAO;AAAA,MACrB,gBAAgB,EAAE,MAAM,WAAW,QAAQ,IAAI;AAAA,MAC/C,WAAW,EAAE,MAAM,WAAW,QAAQ,IAAI,SAAS,KAAK;AAAA,MACxD,eAAe,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,MACjD,SAAS,EAAE,MAAM,WAAW,SAAS,OAAO,SAAS,KAAK;AAAA,MAC1D,gBAAgB,EAAE,MAAM,WAAW,SAAS,EAAE;AAAA,MAC9C,aAAa,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,MAC9C,kBAAkB,EAAE,MAAM,WAAW,SAAS,EAAE;AAAA,MAChD,cAAc,EAAE,MAAM,WAAW,SAAS,OAAO,SAAS,KAAK;AAAA,MAC/D,gBAAgB,EAAE,MAAM,aAAa,cAAc,KAAK;AAAA,MACxD,iBAAiB,EAAE,MAAM,WAAW,SAAS,OAAO,SAAS,KAAK;AAAA,MAClE,mBAAmB,EAAE,MAAM,aAAa,cAAc,KAAK;AAAA,MAC3D,aAAa,EAAE,MAAM,aAAa,cAAc,KAAK;AAAA,MACrD,WAAW,EAAE,MAAM,aAAa,cAAc,KAAK;AAAA,MACnD,kBAAkB,EAAE,MAAM,aAAa,cAAc,KAAK;AAAA,MAC1D,WAAW,EAAE,MAAM,aAAa,cAAc,MAAM,SAAS,QAAQ;AAAA,MACrE,WAAW,EAAE,MAAM,aAAa,cAAc,MAAM,SAAS,QAAQ;AAAA,IACtE;AAAA,IACA,SAAS,CAAC,EAAE,MAAM,mBAAmB,SAAS,CAAC,OAAO,EAAE,CAAC;AAAA,EAC1D;AAAA,EAEA,UAAU;AAAA,IACT,SAAS;AAAA,MACR,IAAI,EAAE,MAAM,WAAW,QAAQ,KAAK,YAAY,KAAK;AAAA,MACrD,QAAQ;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAY,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,UAAU;AAAA,MACjE;AAAA,MACA,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,MAC3D,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,MAC3D,cAAc,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,MAC/C,aAAa,EAAE,MAAM,WAAW,QAAQ,GAAG;AAAA,MAC3C,WAAW,EAAE,MAAM,WAAW,QAAQ,GAAG;AAAA,IAC1C;AAAA,IACA,SAAS;AAAA,MACR,EAAE,MAAM,wBAAwB,SAAS,CAAC,WAAW,EAAE;AAAA,MACvD,EAAE,MAAM,qBAAqB,SAAS,CAAC,QAAQ,EAAE;AAAA,IAClD;AAAA,EACD;AAAA,EAEA,gBAAgB;AAAA,IACf,SAAS;AAAA,MACR,IAAI,EAAE,MAAM,QAAQ,YAAY,MAAM,SAAS,oBAAoB;AAAA,MACnE,QAAQ;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAY,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,UAAU;AAAA,MACjE;AAAA,MACA,QAAQ,EAAE,MAAM,qBAAqB,SAAS,KAAK;AAAA,MACnD,YAAY,EAAE,MAAM,WAAW,QAAQ,IAAI;AAAA,MAC3C,iBAAiB,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,MAClD,WAAW,EAAE,MAAM,WAAW,SAAS,OAAO,SAAS,KAAK;AAAA,MAC5D,YAAY,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,MAC5D,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,IAC5D;AAAA,IACA,SAAS;AAAA,MACR,EAAE,MAAM,oCAAoC,SAAS,CAAC,UAAU,QAAQ,GAAG,QAAQ,KAAK;AAAA,MACxF,EAAE,MAAM,6BAA6B,SAAS,CAAC,QAAQ,EAAE;AAAA,IAC1D;AAAA,EACD;AAAA,EAEA,iBAAiB;AAAA,IAChB,SAAS;AAAA,MACR,IAAI,EAAE,MAAM,QAAQ,YAAY,MAAM,SAAS,oBAAoB;AAAA,MACnE,QAAQ;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAY,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,UAAU;AAAA,MACjE;AAAA,MACA,UAAU,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,KAAK;AAAA,MACxD,QAAQ,EAAE,MAAM,UAAU,MAAM,SAAS;AAAA,MACzC,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,IAC5D;AAAA,IACA,SAAS,CAAC,EAAE,MAAM,8BAA8B,SAAS,CAAC,QAAQ,EAAE,CAAC;AAAA,EACtE;AAAA,EAEA,oBAAoB;AAAA,IACnB,SAAS;AAAA,MACR,IAAI,EAAE,MAAM,QAAQ,YAAY,MAAM,SAAS,oBAAoB;AAAA,MACnE,QAAQ;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAY,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,UAAU;AAAA,MACjE;AAAA,MACA,WAAW,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,KAAK;AAAA,MACzD,YAAY,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,KAAK;AAAA,MAC1D,YAAY,EAAE,MAAM,eAAe,SAAS,MAAM,SAAS,UAAU;AAAA,MACrE,WAAW,EAAE,MAAM,WAAW,QAAQ,IAAI,SAAS,KAAK;AAAA,MACxD,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,MAC3D,YAAY,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,MAC5D,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,IAC5D;AAAA,IACA,SAAS;AAAA,MACR,EAAE,MAAM,iCAAiC,SAAS,CAAC,QAAQ,EAAE;AAAA,MAC7D,EAAE,MAAM,kCAAkC,SAAS,CAAC,WAAW,EAAE;AAAA,MACjE,EAAE,MAAM,oCAAoC,SAAS,CAAC,WAAW,EAAE;AAAA,IACpE;AAAA,EACD;AAAA,EAEA,yBAAyB;AAAA,IACxB,SAAS;AAAA,MACR,WAAW,EAAE,MAAM,WAAW,QAAQ,KAAK,YAAY,KAAK;AAAA,MAC5D,QAAQ;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAY,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,UAAU;AAAA,MACjE;AAAA,MACA,OAAO,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,KAAK;AAAA,MACrD,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,MAC3D,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,IAC5D;AAAA,IACA,SAAS;AAAA,MACR,EAAE,MAAM,+BAA+B,SAAS,CAAC,QAAQ,EAAE;AAAA,MAC3D,EAAE,MAAM,kCAAkC,SAAS,CAAC,WAAW,EAAE;AAAA,IAClE;AAAA,EACD;AAAA,EAEA,qBAAqB;AAAA,IACpB,SAAS;AAAA,MACR,WAAW,EAAE,MAAM,WAAW,QAAQ,KAAK,YAAY,KAAK;AAAA,MAC5D,QAAQ;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAY,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,UAAU;AAAA,MACjE;AAAA,MACA,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,MAC3D,MAAM,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,MACxC,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,IAC5D;AAAA,IACA,SAAS;AAAA,MACR,EAAE,MAAM,2BAA2B,SAAS,CAAC,QAAQ,EAAE;AAAA,MACvD,EAAE,MAAM,8BAA8B,SAAS,CAAC,WAAW,EAAE;AAAA,IAC9D;AAAA,EACD;AAAA,EAEA,mBAAmB;AAAA,IAClB,SAAS;AAAA,MACR,IAAI,EAAE,MAAM,QAAQ,YAAY,MAAM,SAAS,oBAAoB;AAAA,MACnE,QAAQ;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAY,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,UAAU;AAAA,MACjE;AAAA,MACA,UAAU,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,KAAK;AAAA,MACxD,WAAW,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,KAAK;AAAA,MACzD,iBAAiB,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,KAAK;AAAA,MAC/D,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,MAC3D,WAAW,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,IAC5D;AAAA,IACA,SAAS;AAAA,MACR,EAAE,MAAM,gCAAgC,SAAS,CAAC,QAAQ,GAAG,QAAQ,KAAK;AAAA,MAC1E,EAAE,MAAM,iCAAiC,SAAS,CAAC,WAAW,EAAE;AAAA,MAChE,EAAE,MAAM,kCAAkC,SAAS,CAAC,iBAAiB,EAAE;AAAA,MACvE,EAAE,MAAM,mCAAmC,SAAS,CAAC,WAAW,EAAE;AAAA,IACnE;AAAA,EACD;AAAA,EAEA,aAAa;AAAA,IACZ,SAAS;AAAA,MACR,IAAI,EAAE,MAAM,QAAQ,YAAY,MAAM,SAAS,oBAAoB;AAAA,MACnE,SAAS,EAAE,MAAM,QAAQ,SAAS,KAAK;AAAA,MACvC,QAAQ;AAAA,QACP,MAAM;AAAA,QACN,YAAY,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,UAAU;AAAA,MACjE;AAAA,MACA,WAAW,EAAE,MAAM,QAAQ,SAAS,KAAK;AAAA,MACzC,cAAc,EAAE,MAAM,QAAQ,SAAS,KAAK;AAAA,MAC5C,UAAU,EAAE,MAAM,OAAO;AAAA,MACzB,WAAW,EAAE,MAAM,aAAa,cAAc,MAAM,SAAS,SAAS,SAAS,KAAK;AAAA,IACrF;AAAA,IACA,SAAS;AAAA,MACR,EAAE,MAAM,kCAAkC,SAAS,CAAC,cAAc,EAAE;AAAA,MACpE,EAAE,MAAM,4BAA4B,SAAS,CAAC,QAAQ,EAAE;AAAA,MACxD,EAAE,MAAM,wCAAwC,SAAS,CAAC,WAAW,WAAW,GAAG,QAAQ,KAAK;AAAA,IACjG;AAAA,EACD;AAAA,EAEA,qBAAqB;AAAA,IACpB,SAAS;AAAA,MACR,IAAI,EAAE,MAAM,UAAU,YAAY,KAAK;AAAA,MACvC,YAAY,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,KAAK;AAAA,MAC1D,gBAAgB,EAAE,MAAM,wBAAwB,SAAS,KAAK;AAAA,MAC9D,aAAa,EAAE,MAAM,UAAU,MAAM,UAAU,SAAS,KAAK;AAAA,IAC9D;AAAA,IACA,SAAS;AAAA,MACR,EAAE,MAAM,kCAAkC,SAAS,CAAC,cAAc,aAAa,EAAE;AAAA,MACjF,EAAE,MAAM,4BAA4B,SAAS,CAAC,aAAa,EAAE;AAAA,IAC9D;AAAA,EACD;AAAA,EAEA,kBAAkB;AAAA,IACjB,SAAS;AAAA,MACR,IAAI,EAAE,MAAM,UAAU,YAAY,KAAK;AAAA,MACvC,QAAQ;AAAA,QACP,MAAM;AAAA,QACN,YAAY,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,WAAW;AAAA,MAClE;AAAA,MACA,WAAW,EAAE,MAAM,WAAW,QAAQ,IAAI,SAAS,KAAK;AAAA,MACxD,WAAW,EAAE,MAAM,OAAO;AAAA,MAC1B,WAAW,EAAE,MAAM,WAAW,QAAQ,GAAG;AAAA,MACzC,WAAW,EAAE,MAAM,OAAO;AAAA,MAC1B,SAAS,EAAE,MAAM,WAAW,SAAS,KAAK;AAAA,MAC1C,WAAW,EAAE,MAAM,aAAa,cAAc,MAAM,SAAS,QAAQ;AAAA,IACtE;AAAA,IACA,SAAS;AAAA,MACR,EAAE,MAAM,kBAAkB,SAAS,CAAC,QAAQ,EAAE;AAAA,MAC9C,EAAE,MAAM,mBAAmB,SAAS,CAAC,WAAW,EAAE;AAAA,MAClD,EAAE,MAAM,qBAAqB,SAAS,CAAC,WAAW,EAAE;AAAA,IACrD;AAAA,EACD;AAAA,EAEA,eAAe;AAAA,IACd,SAAS;AAAA,MACR,IAAI,EAAE,MAAM,QAAQ,YAAY,MAAM,SAAS,oBAAoB;AAAA,MACnE,QAAQ;AAAA,QACP,MAAM;AAAA,QACN,SAAS;AAAA,QACT,YAAY,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,UAAU;AAAA,MACjE;AAAA,MACA,UAAU,EAAE,MAAM,WAAW,QAAQ,IAAI,SAAS,KAAK;AAAA,MACvD,gBAAgB,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,KAAK;AAAA,MAC9D,OAAO,EAAE,MAAM,WAAW,QAAQ,KAAK,SAAS,KAAK;AAAA,MACrD,WAAW,EAAE,MAAM,aAAa,cAAc,MAAM,SAAS,SAAS,SAAS,KAAK;AAAA,IACrF;AAAA,IACA,SAAS;AAAA,MACR,EAAE,MAAM,oCAAoC,SAAS,CAAC,UAAU,UAAU,GAAG,QAAQ,KAAK;AAAA,MAC1F,EAAE,MAAM,oCAAoC,SAAS,CAAC,YAAY,gBAAgB,GAAG,QAAQ,KAAK;AAAA,IACnG;AAAA,EACD;AACD;AAMO,IAAM,aAAa;AAAA,EACzB,OAAO;AAAA,EACP,UAAU;AAAA,EACV,gBAAgB;AAAA,EAChB,iBAAiB;AAAA,EACjB,oBAAoB;AAAA,EACpB,yBAAyB;AAAA,EACzB,qBAAqB;AAAA,EACrB,mBAAmB;AAAA,EACnB,aAAa;AAAA,EACb,qBAAqB;AAAA,EACrB,kBAAkB;AAAA,EAClB,eAAe;AAChB;","names":[]}