@tinyrack/tinyauth-server 0.5.1 → 0.6.0

package/dist/entrypoints/app.d.ts

@@ -6,7 +6,269 @@ import { type InitializeServicesOptions } from '../services/container.ts';
 export type CreateAppOptions = TinyAuthRuntimeConfigInput;
 export type CreateAppRuntimeOptions = InitializeServicesOptions;
 export declare function createApp(options: CreateAppOptions, runtimeOptions?: CreateAppRuntimeOptions): Promise<{
-    app: import("hono/hono-base").HonoBase<import("../middleware/logger.ts").LoggerEnv & import("../middleware/session.ts").SessionEnv & import("../middleware/services.ts").ServicesEnv, import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
+    app: import("hono/hono-base").HonoBase<import("../middleware/logger.ts").LoggerEnv & import("../middleware/session.ts").SessionEnv & import("../middleware/services.ts").ServicesEnv, import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<import("hono/types").BlankSchema, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
+        "/admin/me": {
+            $get: {
+                input: {};
+                output: {
+                    user: {
+                        managed_by: "database" | "config";
+                        sub: string;
+                        email: string;
+                        role: "user" | "admin";
+                        email_verified: boolean;
+                        email_verification_required: boolean;
+                        has_password: boolean;
+                        totp_registered: boolean;
+                        totp_recovery_codes_missing: boolean;
+                        second_factor_required: boolean;
+                        passkey_count: number;
+                    };
+                };
+                outputFormat: "json";
+                status: 200;
+            };
+        };
+    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
+        "/admin/users": {
+            $get: {
+                input: {
+                    query: {
+                        query?: string | string[];
+                        page?: string | string[];
+                        page_size?: string | string[];
+                        include_deleted?: string | string[];
+                        managed_by?: string | string[];
+                        role?: string | string[];
+                    };
+                };
+                output: {
+                    users: {
+                        managed_by: "database" | "config";
+                        sub: string;
+                        email: string;
+                        role: "user" | "admin";
+                        email_verified: boolean;
+                        email_verification_required: boolean;
+                        has_password: boolean;
+                        totp_registered: boolean;
+                        totp_recovery_codes_missing: boolean;
+                        second_factor_required: boolean;
+                        passkey_count: number;
+                        deleted_at: string | null;
+                    }[];
+                    pagination: {
+                        page: number;
+                        page_size: number;
+                        total: number;
+                    };
+                };
+                outputFormat: "json";
+                status: 200;
+            };
+        };
+    } & {
+        "/admin/users": {
+            $post: {
+                input: {
+                    json: {
+                        email: string;
+                        password: string;
+                        role?: "user" | "admin" | undefined;
+                        email_verified?: boolean | undefined;
+                    };
+                };
+                output: {
+                    user: {
+                        managed_by: "database" | "config";
+                        sub: string;
+                        email: string;
+                        role: "user" | "admin";
+                        email_verified: boolean;
+                        email_verification_required: boolean;
+                        has_password: boolean;
+                        totp_registered: boolean;
+                        totp_recovery_codes_missing: boolean;
+                        second_factor_required: boolean;
+                        passkey_count: number;
+                        deleted_at: string | null;
+                    };
+                };
+                outputFormat: "json";
+                status: 201;
+            };
+        };
+    } & {
+        "/admin/users/:sub": {
+            $get: {
+                input: {
+                    param: {
+                        sub: string;
+                    };
+                };
+                output: {
+                    user: {
+                        managed_by: "database" | "config";
+                        sub: string;
+                        email: string;
+                        role: "user" | "admin";
+                        email_verified: boolean;
+                        email_verification_required: boolean;
+                        has_password: boolean;
+                        totp_registered: boolean;
+                        totp_recovery_codes_missing: boolean;
+                        second_factor_required: boolean;
+                        passkey_count: number;
+                        deleted_at: string | null;
+                    };
+                };
+                outputFormat: "json";
+                status: 200;
+            };
+        };
+    } & {
+        "/admin/users/:sub": {
+            $patch: {
+                input: {
+                    json: {
+                        email?: string | undefined;
+                        role?: "user" | "admin" | undefined;
+                        email_verified?: boolean | undefined;
+                    };
+                } & {
+                    param: {
+                        sub: string;
+                    };
+                };
+                output: {
+                    user: {
+                        managed_by: "database" | "config";
+                        sub: string;
+                        email: string;
+                        role: "user" | "admin";
+                        email_verified: boolean;
+                        email_verification_required: boolean;
+                        has_password: boolean;
+                        totp_registered: boolean;
+                        totp_recovery_codes_missing: boolean;
+                        second_factor_required: boolean;
+                        passkey_count: number;
+                        deleted_at: string | null;
+                    };
+                };
+                outputFormat: "json";
+                status: 200;
+            };
+        };
+    } & {
+        "/admin/users/:sub": {
+            $delete: {
+                input: {
+                    param: {
+                        sub: string;
+                    };
+                };
+                output: {
+                    user: {
+                        managed_by: "database" | "config";
+                        sub: string;
+                        email: string;
+                        role: "user" | "admin";
+                        email_verified: boolean;
+                        email_verification_required: boolean;
+                        has_password: boolean;
+                        totp_registered: boolean;
+                        totp_recovery_codes_missing: boolean;
+                        second_factor_required: boolean;
+                        passkey_count: number;
+                        deleted_at: string | null;
+                    };
+                };
+                outputFormat: "json";
+                status: 200;
+            };
+        };
+    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
+        "/auth/accounts": {
+            $get: {
+                input: {
+                    query: {
+                        client_id?: string | string[];
+                    };
+                };
+                output: {
+                    active_sub: string | null;
+                    accounts: {
+                        sub: import("@mikro-orm/core").Opt<string>;
+                        email: string;
+                        role: import("@mikro-orm/core").Opt<NonNullable<"user" | "admin">>;
+                        current: boolean;
+                        authenticated_at: number;
+                        last_used_at: number;
+                    }[];
+                    allow_add_account: boolean;
+                    allow_remove_account: boolean;
+                };
+                outputFormat: "json";
+                status: 200;
+            };
+        };
+    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
+        "/auth/accounts/select": {
+            $post: {
+                input: {
+                    json: {
+                        sub: string;
+                    };
+                };
+                output: {
+                    code: string;
+                    message: string;
+                };
+                outputFormat: "json";
+                status: 400;
+            } | {
+                input: {
+                    json: {
+                        sub: string;
+                    };
+                };
+                output: {
+                    ok: true;
+                    active_sub: string;
+                };
+                outputFormat: "json";
+                status: 200;
+            };
+        };
+    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
+        "/auth/accounts/remove": {
+            $post: {
+                input: {
+                    json: {
+                        sub: string;
+                    };
+                };
+                output: {
+                    code: string;
+                    message: string;
+                };
+                outputFormat: "json";
+                status: 400;
+            } | {
+                input: {
+                    json: {
+                        sub: string;
+                    };
+                };
+                output: {
+                    ok: true;
+                };
+                outputFormat: "json";
+                status: 200;
+            };
+        };
+    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
         "/auth/login": {
             $post: {
                 input: {
@@ -20,6 +282,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         managed_by: "database" | "config";
                         sub: string;
                         email: string;
+                        role: "user" | "admin";
                         email_verified: boolean;
                         email_verification_required: boolean;
                         has_password: boolean;
@@ -67,6 +330,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         managed_by: "database" | "config";
                         sub: string;
                         email: string;
+                        role: "user" | "admin";
                         email_verified: boolean;
                         email_verification_required: boolean;
                         has_password: boolean;
@@ -128,6 +392,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         managed_by: "database" | "config";
                         sub: string;
                         email: string;
+                        role: "user" | "admin";
                         email_verified: boolean;
                         email_verification_required: boolean;
                         has_password: boolean;
@@ -173,6 +438,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         managed_by: "database" | "config";
                         sub: string;
                         email: string;
+                        role: "user" | "admin";
                         email_verified: boolean;
                         email_verification_required: boolean;
                         has_password: boolean;
@@ -199,6 +465,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         managed_by: "database" | "config";
                         sub: string;
                         email: string;
+                        role: "user" | "admin";
                         email_verified: boolean;
                         email_verification_required: boolean;
                         has_password: boolean;
@@ -265,6 +532,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         managed_by: "database" | "config";
                         sub: string;
                         email: string;
+                        role: "user" | "admin";
                         email_verified: boolean;
                         email_verification_required: boolean;
                         has_password: boolean;
@@ -315,6 +583,9 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                     email: {
                         enabled: boolean;
                     };
+                    admin: {
+                        enabled: boolean;
+                    };
                     auth: {
                         password: {
                             enabled: boolean;
@@ -393,6 +664,16 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         nonce?: string | undefined;
                         code_challenge?: string | undefined;
                         code_challenge_method?: "S256" | "plain" | undefined;
+                        prompt?: string | undefined;
+                        max_age?: unknown;
+                        display?: "page" | "popup" | "touch" | "wap" | undefined;
+                        response_mode?: "query" | "fragment" | "form_post" | undefined;
+                        login_hint?: string | undefined;
+                        ui_locales?: string | undefined;
+                        id_token_hint?: string | undefined;
+                        acr_values?: string | undefined;
+                        account_selected?: "1" | undefined;
+                        account_selection_state?: string | undefined;
                     };
                 };
                 output: {
@@ -465,6 +746,15 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                 status: 200;
             };
         };
+    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
+        "/docs": {
+            $get: {
+                input: {};
+                output: {};
+                outputFormat: string;
+                status: import("hono/utils/http-status").StatusCode;
+            };
+        };
     }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
         "/terms": {
             $get: {
@@ -517,15 +807,6 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                 status: 200;
             };
         };
-    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
-        "/docs": {
-            $get: {
-                input: {};
-                output: {};
-                outputFormat: string;
-                status: import("hono/utils/http-status").StatusCode;
-            };
-        };
     }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
         "/user": {
             $delete: {
@@ -555,6 +836,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         managed_by: "database" | "config";
                         sub: string;
                         email: string;
+                        role: "user" | "admin";
                         email_verified: boolean;
                         email_verification_required: boolean;
                         has_password: boolean;
@@ -673,6 +955,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         managed_by: "database" | "config";
                         sub: string;
                         email: string;
+                        role: "user" | "admin";
                         email_verified: boolean;
                         email_verification_required: boolean;
                         has_password: boolean;
@@ -830,6 +1113,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         managed_by: "database" | "config";
                         sub: string;
                         email: string;
+                        role: "user" | "admin";
                         email_verified: boolean;
                         email_verification_required: boolean;
                         has_password: boolean;
@@ -857,7 +1141,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                 status: 200;
             };
         };
-    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").BlankSchema | import("hono/types").MergeSchemaPath<{
+    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
         "/oauth/:provider/authorize": {
             $get: {
                 input: {
@@ -875,7 +1159,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                 status: 302;
             };
         };
-    }, "/"> | import("hono/types").MergeSchemaPath<{
+    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
         "/oauth/:provider/callback": {
             $get: {
                 input: {
@@ -914,7 +1198,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                 status: any;
             };
         };
-    }, "/"> | import("hono/types").MergeSchemaPath<{
+    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
         "/oauth/:provider/callback": {
             $post: {
                 input: {
@@ -953,7 +1237,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                 status: any;
             };
         };
-    }, "/"> | import("hono/types").MergeSchemaPath<{
+    }, "/">, "/"> | import("hono/types").MergeSchemaPath<import("hono/types").MergeSchemaPath<{
         "/oauth/:provider": {
             $delete: {
                 input: {
@@ -984,6 +1268,8 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                         prompt?: string | string[];
                         max_age?: string | string[];
                         reauthenticated?: string | string[];
+                        account_selected?: string | string[];
+                        account_selection_state?: string | string[];
                         display?: string | string[];
                         response_mode?: string | string[];
                         login_hint?: string | string[];
@@ -1033,7 +1319,8 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
             $post: {
                 input: {
                     form: {
-                        user_code: string;
+                        user_code: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
+                        decision?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
                     };
                 };
                 output: {
@@ -1080,7 +1367,7 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
             $post: {
                 input: {
                     form: {
-                        grant_type: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
+                        grant_type?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
                         code?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
                         redirect_uri?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
                         client_id?: import("hono/types").ParsedFormValue | import("hono/types").ParsedFormValue[];
@@ -1309,6 +1596,9 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                 enabled: boolean;
                 retention: string;
             };
+            admin: {
+                enabled: boolean;
+            };
             logging: {
                 level: "error" | "trace" | "debug" | "info" | "warn" | "fatal" | "silent";
                 format: "json" | "pretty";
@@ -1339,6 +1629,21 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                     rp_id?: string | undefined;
                     origins?: string[] | undefined;
                 };
+                account_selection: {
+                    enabled: boolean;
+                    mode: "always" | "oidc_prompt" | "disabled" | "smart";
+                    remember_accounts: {
+                        enabled: boolean;
+                        max_accounts: number;
+                        ttl: string;
+                    };
+                    allow_add_account: boolean;
+                    allow_remove_account: boolean;
+                    login_hint: {
+                        behavior: "prefer" | "ignore" | "require_match";
+                    };
+                    prompt_none_error: "login_required" | "account_selection_required";
+                };
             };
             security: {
                 session_secret: string;
@@ -1395,6 +1700,10 @@ export declare function createApp(options: CreateAppOptions, runtimeOptions?: Cr
                 skip_consent: boolean;
                 logo_uri?: string | undefined;
                 client_secret?: string | undefined;
+                account_selection?: {
+                    mode: "inherit" | "never" | "always" | "oidc_prompt" | "smart";
+                    allow_add_account?: boolean | undefined;
+                } | undefined;
             }[];
             users: {
                 sub: string;

package/dist/entrypoints/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/entrypoints/app.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,0BAA0B,EAEhC,MAAM,wBAAwB,CAAC;AAWhC,OAAO,EACL,KAAK,yBAAyB,EAE/B,MAAM,0BAA0B,CAAC;AAElC;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AAC1D,MAAM,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEhE,wBAAsB,SAAS,CAC7B,OAAO,EAAE,gBAAgB,EACzB,cAAc,GAAE,uBAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkF7C;AAED,MAAM,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/entrypoints/app.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,KAAK,0BAA0B,EAEhC,MAAM,wBAAwB,CAAC;AAYhC,OAAO,EACL,KAAK,yBAAyB,EAE/B,MAAM,0BAA0B,CAAC;AAElC;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG,0BAA0B,CAAC;AAC1D,MAAM,MAAM,uBAAuB,GAAG,yBAAyB,CAAC;AAEhE,wBAAsB,SAAS,CAC7B,OAAO,EAAE,gBAAgB,EACzB,cAAc,GAAE,uBAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyF7C;AAED,MAAM,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC"}

package/dist/entrypoints/app.js

@@ -2,6 +2,7 @@ import { RequestContext } from '@mikro-orm/core';
 import { Hono } from 'hono';
 import { generateSpecs } from 'hono-openapi';
 import { TinyAuthRuntimeConfigSchema, } from "../lib/config/index.js";
+import { parseDurationToMs } from "../lib/duration.js";
 import { createLogger } from "../lib/logger.js";
 import { createOpenApiDocumentation } from "../lib/openapi.js";
 import { csrfProtection } from "../middleware/csrf.js";
@@ -25,12 +26,9 @@ export async function createApp(options, runtimeOptions = {}) {
         branding: config.branding,
         server: config.server,
     });
-    const app = new Hono()
-        .onError((err, c) => {
+    const handleError = (err, c) => {
         if (err instanceof TinyAuthError) {
-            if (err.code === 'insufficient_scope') {
-                c.header('WWW-Authenticate', 'Bearer error="insufficient_scope", scope="openid"');
-            }
+            setBearerAuthChallenge(c, err);
             if (c.req.path.startsWith('/oauth/')) {
                 return c.json(toOAuthErrorJson(err), err.status);
             }
@@ -39,10 +37,17 @@ export async function createApp(options, runtimeOptions = {}) {
         logger.error({ err }, 'Unhandled error');
         const internalErr = new e.InternalServerError.Error();
         return c.json(internalErr.toJson(), internalErr.status);
-    })
+    };
+    const app = new Hono()
+        .onError(handleError)
         .use('*', loggerMiddleware(logger))
         .use('*', firstPartyCors(config.server.public_origin))
-        .use('*', sessionMiddleware(config.security.session_secret, config.server.public_origin.startsWith('https')))
+        .use('*', sessionMiddleware(config.security.session_secret, config.server.public_origin.startsWith('https'), {
+        enabled: config.auth.account_selection.enabled &&
+            config.auth.account_selection.remember_accounts.enabled,
+        maxAccounts: config.auth.account_selection.remember_accounts.max_accounts,
+        ttlMs: parseDurationToMs(config.auth.account_selection.remember_accounts.ttl),
+    }))
         .use('*', trustedProxyGuard(config.server.trust_proxy))
         .use('/api/*', csrfProtection(config.server.public_origin))
         .use('/oauth/device', csrfProtection(config.server.public_origin))
@@ -95,6 +100,23 @@ function firstPartyCors(publicOrigin) {
         return undefined;
     };
 }
+function setBearerAuthChallenge(c, err) {
+    switch (err.code) {
+        case 'MISSING_AUTHORIZATION_HEADER':
+            c.header('WWW-Authenticate', 'Bearer');
+            return;
+        case 'INVALID_AUTHORIZATION_HEADER_FORMAT':
+        case 'MISSING_BEARER_TOKEN':
+        case 'INVALID_ACCESS_TOKEN':
+            c.header('WWW-Authenticate', 'Bearer error="invalid_token"');
+            return;
+        case 'insufficient_scope':
+            c.header('WWW-Authenticate', 'Bearer error="insufficient_scope", scope="openid"');
+            return;
+        default:
+            return;
+    }
+}
 function toOAuthErrorJson(err) {
     return {
         ...err.toJson(),
@@ -129,6 +151,10 @@ function toOAuthErrorCode(err) {
             return 'authorization_pending';
         case 'slow_down':
             return 'slow_down';
+        case 'expired_token':
+            return 'expired_token';
+        case 'access_denied':
+            return 'access_denied';
         default:
             return 'invalid_request';
     }

package/dist/entrypoints/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/entrypoints/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAEL,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAEL,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAQlC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAyB,EACzB,iBAA0C,EAAE;IAE5C,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAExE,sEAAsE;IACtE,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAEzD,sDAAsD;IACtD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CACpD,MAAM,EACN,MAAM,EACN,cAAc,CACf,CAAC;IACF,MAAM,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAClD,QAAQ,CAAC,UAAU,CAAC,eAAe,EAAE,CACtC,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE;SACnB,OAAO,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QAClB,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,IAAI,GAAG,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBACtC,CAAC,CAAC,MAAM,CACN,kBAAkB,EAClB,mDAAmD,CACpD,CAAC;YACJ,CAAC;YAED,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACnD,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC;SACD,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;SAClC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SACrD,GAAG,CACF,GAAG,EACH,iBAAiB,CACf,MAAM,CAAC,QAAQ,CAAC,cAAc,EAC9B,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,CAChD,CACF;SACA,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;SACtD,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SAC1D,GAAG,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SACjE,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;SACtC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC;SAC5B,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;SAClB,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEL,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE;YACpC,aAAa,EAAE,oBAAoB;SACpC,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAEjC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAID,SAAS,cAAc,CAAC,YAAoB;IAC1C,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAiC,EAAE;QACrE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,CAAC,CAAC,MAAM,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,MAAM,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,CAAC,CAAC,MAAM,CACN,8BAA8B,EAC9B,gCAAgC,CACjC,CAAC;YACF,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;YACtE,IAAI,cAAc,EAAE,CAAC;gBACnB,CAAC,CAAC,MAAM,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;gBACzD,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,gCAAgC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,OAAO;QACL,GAAG,GAAG,CAAC,MAAM,EAAE;QACf,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAC5B,iBAAiB,EAAE,GAAG,CAAC,OAAO;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,4BAA4B,CAAC;QAClC,KAAK,wBAAwB;YAC3B,OAAO,gBAAgB,CAAC;QAC1B,KAAK,wBAAwB;YAC3B,OAAO,wBAAwB,CAAC;QAClC,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;QACzB,KAAK,4BAA4B,CAAC;QAClC,KAAK,qBAAqB,CAAC;QAC3B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,oBAAoB;YACvB,OAAO,eAAe,CAAC;QACzB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,8BAA8B,CAAC;QACpC,KAAK,qCAAqC,CAAC;QAC3C,KAAK,sBAAsB;YACzB,OAAO,eAAe,CAAC;QACzB,KAAK,oBAAoB;YACvB,OAAO,oBAAoB,CAAC;QAC9B,KAAK,uBAAuB;YAC1B,OAAO,uBAAuB,CAAC;QACjC,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB;YACE,OAAO,iBAAiB,CAAC;IAC7B,CAAC;AACH,CAAC"}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/entrypoints/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAEL,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAEL,kBAAkB,GACnB,MAAM,0BAA0B,CAAC;AAQlC,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAyB,EACzB,iBAA0C,EAAE;IAE5C,MAAM,MAAM,GAAG,2BAA2B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,oBAAoB,GAAG,0BAA0B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAExE,sEAAsE;IACtE,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAEzD,sDAAsD;IACtD,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,kBAAkB,CACpD,MAAM,EACN,MAAM,EACN,cAAc,CACf,CAAC;IACF,MAAM,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,EAAE,CAClD,QAAQ,CAAC,UAAU,CAAC,eAAe,EAAE,CACtC,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,CAAC,GAAU,EAAE,CAAU,EAAE,EAAE;QAC7C,IAAI,GAAG,YAAY,aAAa,EAAE,CAAC;YACjC,sBAAsB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YAE/B,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACrC,OAAO,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACnD,CAAC;YAED,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;QACzC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACtD,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE;SACnB,OAAO,CAAC,WAAW,CAAC;SACpB,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC;SAClC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SACrD,GAAG,CACF,GAAG,EACH,iBAAiB,CACf,MAAM,CAAC,QAAQ,CAAC,cAAc,EAC9B,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,OAAO,CAAC,EAC/C;QACE,OAAO,EACL,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO;YACrC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,OAAO;QACzD,WAAW,EACT,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,YAAY;QAC9D,KAAK,EAAE,iBAAiB,CACtB,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,GAAG,CACpD;KACF,CACF,CACF;SACA,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;SACtD,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SAC1D,GAAG,CAAC,eAAe,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;SACjE,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,QAAQ,CAAC,CAAC;SACtC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC;SAC5B,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC;SAClB,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEL,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE;YACpC,aAAa,EAAE,oBAAoB;SACpC,CAAC,CAAC;QAEH,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,kBAAkB;IAClB,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IAEjC,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAID,SAAS,cAAc,CAAC,YAAoB;IAC1C,OAAO,KAAK,EAAE,CAAU,EAAE,IAAU,EAAiC,EAAE;QACrE,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;YAC5B,MAAM,IAAI,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,CAAC,CAAC,MAAM,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC,CAAC,MAAM,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;QACrD,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAE3B,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,CAAC,CAAC,MAAM,CACN,8BAA8B,EAC9B,gCAAgC,CACjC,CAAC;YACF,MAAM,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;YACtE,IAAI,cAAc,EAAE,CAAC;gBACnB,CAAC,CAAC,MAAM,CAAC,8BAA8B,EAAE,cAAc,CAAC,CAAC;gBACzD,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,gCAAgC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACvE,CAAC;YACD,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,IAAI,EAAE,CAAC;QACb,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,CAAU,EAAE,GAAkB;IAC5D,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,8BAA8B;YACjC,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YACvC,OAAO;QACT,KAAK,qCAAqC,CAAC;QAC3C,KAAK,sBAAsB,CAAC;QAC5B,KAAK,sBAAsB;YACzB,CAAC,CAAC,MAAM,CAAC,kBAAkB,EAAE,8BAA8B,CAAC,CAAC;YAC7D,OAAO;QACT,KAAK,oBAAoB;YACvB,CAAC,CAAC,MAAM,CACN,kBAAkB,EAClB,mDAAmD,CACpD,CAAC;YACF,OAAO;QACT;YACE,OAAO;IACX,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,OAAO;QACL,GAAG,GAAG,CAAC,MAAM,EAAE;QACf,KAAK,EAAE,gBAAgB,CAAC,GAAG,CAAC;QAC5B,iBAAiB,EAAE,GAAG,CAAC,OAAO;KAC/B,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,4BAA4B,CAAC;QAClC,KAAK,wBAAwB;YAC3B,OAAO,gBAAgB,CAAC;QAC1B,KAAK,wBAAwB;YAC3B,OAAO,wBAAwB,CAAC;QAClC,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;QACzB,KAAK,4BAA4B,CAAC;QAClC,KAAK,qBAAqB,CAAC;QAC3B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,uBAAuB,CAAC;QAC7B,KAAK,oBAAoB;YACvB,OAAO,eAAe,CAAC;QACzB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,8BAA8B,CAAC;QACpC,KAAK,qCAAqC,CAAC;QAC3C,KAAK,sBAAsB;YACzB,OAAO,eAAe,CAAC;QACzB,KAAK,oBAAoB;YACvB,OAAO,oBAAoB,CAAC;QAC9B,KAAK,uBAAuB;YAC1B,OAAO,uBAAuB,CAAC;QACjC,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;QACzB,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;QACzB;YACE,OAAO,iBAAiB,CAAC;IAC7B,CAAC;AACH,CAAC"}