@tonycodes/auth-express 1.1.0

package/dist/index.d.ts

@@ -0,0 +1,82 @@
+import { Router } from 'express';
+import type { RequestHandler } from 'express';
+export interface AuthConfig {
+    /** Client ID for this app (e.g., "rag-platform") */
+    clientId: string;
+    /** Client secret for token exchange (plaintext, NOT the hash) */
+    clientSecret: string;
+    /** Auth service URL. Defaults to https://auth.tony.codes */
+    authUrl?: string;
+    /**
+     * Cookie domain for refresh tokens.
+     * If not specified, auto-derived from request hostname:
+     * - *.tony.codes → .tony.codes (shared SSO)
+     * - myapp.test → .myapp.test
+     * - api.myapp.test → .myapp.test
+     */
+    cookieDomain?: string;
+    /** Frontend app URL — required when API and frontend are on different hosts (e.g., api.autopilot.test vs autopilot.test) */
+    appUrl?: string;
+}
+export interface AuthUser {
+    userId: string;
+    email: string;
+    name: string | null;
+    avatarUrl: string | null;
+    orgId: string | null;
+    orgName: string | null;
+    orgSlug: string | null;
+    orgRole: string | null;
+    isSuperAdmin: boolean;
+}
+declare global {
+    namespace Express {
+        interface Request {
+            auth?: AuthUser;
+            apiKey?: {
+                id: string;
+                name: string;
+                scopes: string[];
+            };
+        }
+    }
+}
+export declare function createAuthMiddleware(config: AuthConfig): {
+    middleware: () => RequestHandler;
+    requireOrg: () => RequestHandler;
+    requireSuperAdmin: () => RequestHandler;
+    requireOrgRole: (...roles: string[]) => RequestHandler;
+    requireScope: (...scopes: string[]) => RequestHandler;
+    callbackHandler: () => RequestHandler;
+    refreshProxy: () => RequestHandler;
+    switchOrgProxy: () => RequestHandler;
+    logoutProxy: () => RequestHandler;
+    routes: () => Router;
+    config: {
+        authUrl: string;
+        clientId: string;
+    };
+};
+interface CallbackPageConfig {
+    /** Client ID for token exchange */
+    clientId: string;
+    /** Client secret for token exchange */
+    clientSecret: string;
+    /** Auth service URL. Defaults to https://auth.tony.codes */
+    authUrl?: string;
+}
+/**
+ * Standalone callback handler for hosted login page mode.
+ * Exchanges the authorization code for tokens, sets cookies, and redirects.
+ *
+ * Use this when you don't need the full SDK — just redirect to /authorize
+ * and mount this single route:
+ *
+ *   app.get('/auth/callback', createCallbackPage({
+ *     clientId: 'my-app',
+ *     clientSecret: process.env.AUTH_SECRET!,
+ *   }));
+ */
+export declare function createCallbackPage(config: CallbackPageConfig): RequestHandler;
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,EAAmC,cAAc,EAAE,MAAM,SAAS,CAAC;AAK/E,MAAM,WAAW,UAAU;IACzB,oDAAoD;IACpD,QAAQ,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4HAA4H;IAC5H,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAgCD,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;CACvB;AAGD,OAAO,CAAC,MAAM,CAAC;IACb,UAAU,OAAO,CAAC;QAChB,UAAU,OAAO;YACf,IAAI,CAAC,EAAE,QAAQ,CAAC;YAChB,MAAM,CAAC,EAAE;gBACP,EAAE,EAAE,MAAM,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC;gBACb,MAAM,EAAE,MAAM,EAAE,CAAC;aAClB,CAAC;SACH;KACF;CACF;AAoCD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,UAAU;sBAuB9B,cAAc;sBAkCd,cAAc;6BA2BP,cAAc;+BA0BV,MAAM,EAAE,KAAG,cAAc;8BAiB1B,MAAM,EAAE,KAAG,cAAc;2BAkB9B,cAAc;wBAiEjB,cAAc;0BAiDZ,cAAc;uBAmDjB,cAAc;kBAgCnB,MAAM;;;;;EAsB1B;AAID,UAAU,kBAAkB;IAC1B,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,uCAAuC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,cAAc,CA+E7E"}

package/dist/index.js

@@ -0,0 +1,448 @@
+import { Router } from 'express';
+import * as jose from 'jose';
+// ─── Cookie Domain Helper ─────────────────────────────────────────────────
+/**
+ * Derive cookie domain from hostname if not explicitly configured.
+ * - Production: *.tony.codes → .tony.codes (shared SSO)
+ * - Local: myapp.test → .myapp.test (isolated per app)
+ * - Subdomains: api.myapp.test → .myapp.test
+ */
+function deriveCookieDomain(hostname) {
+    // Production: use shared .tony.codes domain
+    if (hostname.endsWith('.tony.codes') || hostname === 'tony.codes') {
+        return '.tony.codes';
+    }
+    // Local .test domains: derive app-specific domain
+    if (hostname.endsWith('.test')) {
+        const parts = hostname.split('.');
+        // myapp.test → .myapp.test
+        // api.myapp.test → .myapp.test
+        if (parts.length >= 2) {
+            // Get the last two parts before .test (or just the app name)
+            const appPart = parts.length === 2 ? parts[0] : parts[parts.length - 2];
+            return `.${appPart}.test`;
+        }
+    }
+    // Unknown domain structure — don't set domain (browser default)
+    return undefined;
+}
+// ─── JWKS Cache ──────────────────────────────────────────────────────────
+let jwksCache = null;
+let jwksCacheExpiry = 0;
+const JWKS_CACHE_TTL = 5 * 60 * 1000; // 5 minutes
+async function getJWKS(authUrl) {
+    const now = Date.now();
+    if (jwksCache && now < jwksCacheExpiry) {
+        return jwksCache;
+    }
+    const res = await fetch(`${authUrl}/.well-known/jwks.json`);
+    if (!res.ok) {
+        throw new Error(`Failed to fetch JWKS: ${res.status}`);
+    }
+    jwksCache = (await res.json());
+    jwksCacheExpiry = now + JWKS_CACHE_TTL;
+    return jwksCache;
+}
+async function verifyToken(token, authUrl) {
+    const jwks = await getJWKS(authUrl);
+    const JWKS = jose.createLocalJWKSet(jwks);
+    const { payload } = await jose.jwtVerify(token, JWKS, {
+        issuer: 'auth.tony.codes',
+        audience: 'tony.codes',
+    });
+    return payload;
+}
+// ─── Middleware Factory ──────────────────────────────────────────────────
+export function createAuthMiddleware(config) {
+    const { authUrl = 'https://auth.tony.codes', clientId, clientSecret, cookieDomain: configuredDomain, appUrl, } = config;
+    /**
+     * Get the effective cookie domain for a request.
+     * Uses configured domain if provided, otherwise derives from hostname.
+     */
+    function getCookieDomain(req) {
+        if (configuredDomain)
+            return configuredDomain;
+        const hostname = req.get('host')?.split(':')[0]; // Remove port if present
+        return hostname ? deriveCookieDomain(hostname) : undefined;
+    }
+    /**
+     * Base middleware — verifies JWT if present, attaches req.auth
+     * Does NOT reject unauthenticated requests
+     */
+    function middleware() {
+        return async (req, _res, next) => {
+            const authHeader = req.headers.authorization;
+            if (!authHeader?.startsWith('Bearer ')) {
+                return next();
+            }
+            const token = authHeader.substring(7);
+            try {
+                const payload = await verifyToken(token, authUrl);
+                const org = payload.org;
+                req.auth = {
+                    userId: payload.sub,
+                    email: payload.email,
+                    name: payload.name || null,
+                    avatarUrl: payload.avatarUrl || null,
+                    orgId: org?.id || null,
+                    orgName: org?.name || null,
+                    orgSlug: org?.slug || null,
+                    orgRole: org?.role || null,
+                    isSuperAdmin: payload.isSuperAdmin || false,
+                };
+            }
+            catch {
+                // Invalid token — continue without auth
+            }
+            next();
+        };
+    }
+    /**
+     * Require authenticated user with active organization
+     * Super admins can use X-Org-Id header to access any org
+     */
+    function requireOrg() {
+        return async (req, res, next) => {
+            if (!req.auth) {
+                res.status(401).json({ error: 'Unauthorized' });
+                return;
+            }
+            // Super admins can override org via header
+            const headerOrgId = req.headers['x-org-id'];
+            if (req.auth.isSuperAdmin && headerOrgId) {
+                req.auth.orgId = headerOrgId;
+                req.auth.orgRole = 'admin';
+                return next();
+            }
+            if (!req.auth.orgId) {
+                res.status(403).json({ error: 'No organization selected' });
+                return;
+            }
+            next();
+        };
+    }
+    /**
+     * Require super admin access
+     */
+    function requireSuperAdmin() {
+        return (req, res, next) => {
+            if (!req.auth) {
+                res.status(401).json({ error: 'Unauthorized' });
+                return;
+            }
+            if (!req.auth.isSuperAdmin) {
+                res.status(403).json({ error: 'Super admin access required' });
+                return;
+            }
+            // Super admins can set org via header
+            const headerOrgId = req.headers['x-org-id'];
+            if (headerOrgId) {
+                req.auth.orgId = headerOrgId;
+                req.auth.orgRole = 'admin';
+            }
+            next();
+        };
+    }
+    /**
+     * Require specific organization role
+     */
+    function requireOrgRole(...roles) {
+        return (req, res, next) => {
+            if (req.auth?.isSuperAdmin)
+                return next();
+            if (req.apiKey)
+                return next(); // API key auth uses scopes, not roles
+            if (!req.auth?.orgRole || !roles.includes(req.auth.orgRole)) {
+                res.status(403).json({ error: `Requires role: ${roles.join(' or ')}` });
+                return;
+            }
+            next();
+        };
+    }
+    /**
+     * Require specific API key scopes (session auth passes automatically)
+     */
+    function requireScope(...scopes) {
+        return (req, res, next) => {
+            if (!req.apiKey)
+                return next(); // Session auth has all scopes
+            const hasScope = scopes.some((s) => req.apiKey.scopes.includes(s));
+            if (!hasScope) {
+                res.status(403).json({ error: `Requires scope: ${scopes.join(' or ')}` });
+                return;
+            }
+            next();
+        };
+    }
+    /**
+     * Handle auth callback — exchanges authorization code for tokens
+     * Mount at GET /api/auth/callback (not /auth/callback, which is for SPA routing)
+     */
+    function callbackHandler() {
+        return async (req, res) => {
+            const { code, state } = req.query;
+            if (!code || typeof code !== 'string') {
+                res.status(400).json({ error: 'Missing authorization code' });
+                return;
+            }
+            try {
+                const redirectUri = appUrl
+                    ? `${appUrl}/auth/callback`
+                    : `${req.protocol}://${req.get('host')}/auth/callback`;
+                const tokenRes = await fetch(`${authUrl}/api/token`, {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({
+                        grant_type: 'authorization_code',
+                        code,
+                        client_id: clientId,
+                        client_secret: clientSecret,
+                        redirect_uri: redirectUri,
+                    }),
+                });
+                if (!tokenRes.ok) {
+                    const err = (await tokenRes.json());
+                    res.status(401).json({ error: err.error || 'Token exchange failed' });
+                    return;
+                }
+                const tokens = (await tokenRes.json());
+                // Set refresh token as httpOnly cookie on the derived/configured domain
+                if (tokens.refresh_token) {
+                    res.cookie('refresh_token', tokens.refresh_token, {
+                        httpOnly: true,
+                        secure: true,
+                        sameSite: 'lax',
+                        domain: getCookieDomain(req),
+                        maxAge: 30 * 24 * 60 * 60 * 1000,
+                        path: '/',
+                    });
+                }
+                res.json({
+                    access_token: tokens.access_token,
+                    expires_in: tokens.expires_in,
+                });
+            }
+            catch (err) {
+                res.status(500).json({ error: 'Token exchange failed' });
+            }
+        };
+    }
+    /**
+     * Proxy refresh token requests to the auth service
+     * Mount at POST /auth/refresh
+     */
+    function refreshProxy() {
+        return async (req, res) => {
+            try {
+                const tokenRes = await fetch(`${authUrl}/api/token`, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        Cookie: req.headers.cookie || '',
+                    },
+                    body: JSON.stringify({ grant_type: 'refresh_token' }),
+                });
+                if (!tokenRes.ok) {
+                    res.status(tokenRes.status).json(await tokenRes.json());
+                    return;
+                }
+                const tokens = (await tokenRes.json());
+                // Set rotated refresh token cookie
+                if (tokens.refresh_token) {
+                    res.cookie('refresh_token', tokens.refresh_token, {
+                        httpOnly: true,
+                        secure: true,
+                        sameSite: 'lax',
+                        domain: getCookieDomain(req),
+                        maxAge: 30 * 24 * 60 * 60 * 1000,
+                        path: '/',
+                    });
+                }
+                res.json({
+                    access_token: tokens.access_token,
+                    expires_in: tokens.expires_in,
+                });
+            }
+            catch {
+                res.status(500).json({ error: 'Refresh failed' });
+            }
+        };
+    }
+    /**
+     * Proxy org switch requests to the auth service
+     * Mount at POST /auth/switch-org
+     */
+    function switchOrgProxy() {
+        return async (req, res) => {
+            const { org_id } = req.body;
+            try {
+                const tokenRes = await fetch(`${authUrl}/api/token`, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        Cookie: req.headers.cookie || '',
+                    },
+                    body: JSON.stringify({ grant_type: 'switch_organization', org_id }),
+                });
+                if (!tokenRes.ok) {
+                    res.status(tokenRes.status).json(await tokenRes.json());
+                    return;
+                }
+                const tokens = (await tokenRes.json());
+                // Set rotated refresh token cookie
+                if (tokens.refresh_token) {
+                    res.cookie('refresh_token', tokens.refresh_token, {
+                        httpOnly: true,
+                        secure: true,
+                        sameSite: 'lax',
+                        domain: getCookieDomain(req),
+                        maxAge: 30 * 24 * 60 * 60 * 1000,
+                        path: '/',
+                    });
+                }
+                res.json({
+                    access_token: tokens.access_token,
+                    expires_in: tokens.expires_in,
+                });
+            }
+            catch {
+                res.status(500).json({ error: 'Organization switch failed' });
+            }
+        };
+    }
+    /**
+     * Proxy logout requests to the auth service
+     * Mount at POST /auth/logout
+     */
+    function logoutProxy() {
+        return async (req, res) => {
+            try {
+                await fetch(`${authUrl}/api/logout`, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        Cookie: req.headers.cookie || '',
+                    },
+                });
+                // Clear refresh token cookie
+                res.clearCookie('refresh_token', {
+                    httpOnly: true,
+                    secure: true,
+                    sameSite: 'lax',
+                    domain: getCookieDomain(req),
+                    path: '/',
+                });
+                res.json({ ok: true });
+            }
+            catch {
+                res.status(500).json({ error: 'Logout failed' });
+            }
+        };
+    }
+    /**
+     * Returns an Express Router with all auth proxy routes pre-mounted.
+     * Replaces the need to mount each handler individually:
+     *   app.use(auth.routes())
+     */
+    function routes() {
+        const router = Router();
+        router.get('/api/auth/callback', callbackHandler());
+        router.post('/auth/refresh', refreshProxy());
+        router.post('/auth/switch-org', switchOrgProxy());
+        router.post('/auth/logout', logoutProxy());
+        return router;
+    }
+    return {
+        middleware,
+        requireOrg,
+        requireSuperAdmin,
+        requireOrgRole,
+        requireScope,
+        callbackHandler,
+        refreshProxy,
+        switchOrgProxy,
+        logoutProxy,
+        routes,
+        config: { authUrl, clientId },
+    };
+}
+/**
+ * Standalone callback handler for hosted login page mode.
+ * Exchanges the authorization code for tokens, sets cookies, and redirects.
+ *
+ * Use this when you don't need the full SDK — just redirect to /authorize
+ * and mount this single route:
+ *
+ *   app.get('/auth/callback', createCallbackPage({
+ *     clientId: 'my-app',
+ *     clientSecret: process.env.AUTH_SECRET!,
+ *   }));
+ */
+export function createCallbackPage(config) {
+    const { clientId, clientSecret, authUrl = 'https://auth.tony.codes' } = config;
+    return async (req, res) => {
+        const { code, state } = req.query;
+        if (!code || typeof code !== 'string') {
+            res.status(400).send('Missing authorization code');
+            return;
+        }
+        // Derive redirect_uri from the current request URL
+        const redirectUri = `${req.protocol}://${req.get('host')}${req.path}`;
+        try {
+            const tokenRes = await fetch(`${authUrl}/api/token`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({
+                    grant_type: 'authorization_code',
+                    code,
+                    client_id: clientId,
+                    client_secret: clientSecret,
+                    redirect_uri: redirectUri,
+                }),
+            });
+            if (!tokenRes.ok) {
+                res.status(401).send('Authentication failed');
+                return;
+            }
+            const tokens = (await tokenRes.json());
+            // Set refresh token as httpOnly cookie
+            if (tokens.refresh_token) {
+                const hostname = req.get('host')?.split(':')[0];
+                const cookieDomain = hostname ? deriveCookieDomain(hostname) : undefined;
+                res.cookie('refresh_token', tokens.refresh_token, {
+                    httpOnly: true,
+                    secure: true,
+                    sameSite: 'lax',
+                    domain: cookieDomain,
+                    maxAge: 30 * 24 * 60 * 60 * 1000,
+                    path: '/',
+                });
+            }
+            // Set access token as a short-lived cookie for the app to read
+            res.cookie('access_token', tokens.access_token, {
+                secure: true,
+                sameSite: 'lax',
+                maxAge: tokens.expires_in * 1000,
+                path: '/',
+            });
+            // Parse returnTo from state, or default to /
+            let returnTo = '/';
+            if (state && typeof state === 'string') {
+                try {
+                    const parsed = JSON.parse(atob(state));
+                    if (parsed.returnTo && typeof parsed.returnTo === 'string') {
+                        returnTo = parsed.returnTo;
+                    }
+                }
+                catch {
+                    // Invalid state — ignore
+                }
+            }
+            res.redirect(returnTo);
+        }
+        catch {
+            res.status(500).send('Authentication failed');
+        }
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAuB7B,6EAA6E;AAE7E;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,QAAgB;IAC1C,4CAA4C;IAC5C,IAAI,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,KAAK,YAAY,EAAE,CAAC;QAClE,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,kDAAkD;IAClD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,2BAA2B;QAC3B,+BAA+B;QAC/B,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YACtB,6DAA6D;YAC7D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACxE,OAAO,IAAI,OAAO,OAAO,CAAC;QAC5B,CAAC;IACH,CAAC;IAED,gEAAgE;IAChE,OAAO,SAAS,CAAC;AACnB,CAAC;AA4BD,4EAA4E;AAE5E,IAAI,SAAS,GAA8B,IAAI,CAAC;AAChD,IAAI,eAAe,GAAG,CAAC,CAAC;AACxB,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,YAAY;AAElD,KAAK,UAAU,OAAO,CAAC,OAAe;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,SAAS,IAAI,GAAG,GAAG,eAAe,EAAE,CAAC;QACvC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,wBAAwB,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAuB,CAAC;IACrD,eAAe,GAAG,GAAG,GAAG,cAAc,CAAC;IACvC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,KAAa,EAAE,OAAe;IACvD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC1C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;QACpD,MAAM,EAAE,iBAAiB;QACzB,QAAQ,EAAE,YAAY;KACvB,CAAC,CAAC;IACH,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,4EAA4E;AAE5E,MAAM,UAAU,oBAAoB,CAAC,MAAkB;IACrD,MAAM,EACJ,OAAO,GAAG,yBAAyB,EACnC,QAAQ,EACR,YAAY,EACZ,YAAY,EAAE,gBAAgB,EAC9B,MAAM,GACP,GAAG,MAAM,CAAC;IAEX;;;OAGG;IACH,SAAS,eAAe,CAAC,GAAY;QACnC,IAAI,gBAAgB;YAAE,OAAO,gBAAgB,CAAC;QAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,yBAAyB;QAC1E,OAAO,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAED;;;OAGG;IACH,SAAS,UAAU;QACjB,OAAO,KAAK,EAAE,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;YAChE,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC;YAC7C,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBACvC,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAClD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAsE,CAAC;gBAE3F,GAAG,CAAC,IAAI,GAAG;oBACT,MAAM,EAAE,OAAO,CAAC,GAAI;oBACpB,KAAK,EAAE,OAAO,CAAC,KAAe;oBAC9B,IAAI,EAAG,OAAO,CAAC,IAAe,IAAI,IAAI;oBACtC,SAAS,EAAG,OAAO,CAAC,SAAoB,IAAI,IAAI;oBAChD,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,IAAI;oBACtB,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;oBAC1B,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;oBAC1B,OAAO,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI;oBAC1B,YAAY,EAAG,OAAO,CAAC,YAAwB,IAAI,KAAK;iBACzD,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,wCAAwC;YAC1C,CAAC;YACD,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,UAAU;QACjB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YAC/D,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,2CAA2C;YAC3C,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;YAClE,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,WAAW,EAAE,CAAC;gBACzC,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;gBAC3B,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACpB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBAC5D,OAAO;YACT,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,iBAAiB;QACxB,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACzD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;gBAC/D,OAAO;YACT,CAAC;YAED,sCAAsC;YACtC,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAuB,CAAC;YAClE,IAAI,WAAW,EAAE,CAAC;gBAChB,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;gBAC7B,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YAC7B,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,cAAc,CAAC,GAAG,KAAe;QACxC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACzD,IAAI,GAAG,CAAC,IAAI,EAAE,YAAY;gBAAE,OAAO,IAAI,EAAE,CAAC;YAC1C,IAAI,GAAG,CAAC,MAAM;gBAAE,OAAO,IAAI,EAAE,CAAC,CAAC,sCAAsC;YAErE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC5D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBACxE,OAAO;YACT,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,SAAS,YAAY,CAAC,GAAG,MAAgB;QACvC,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;YACzD,IAAI,CAAC,GAAG,CAAC,MAAM;gBAAE,OAAO,IAAI,EAAE,CAAC,CAAC,8BAA8B;YAE9D,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC1E,OAAO;YACT,CAAC;YAED,IAAI,EAAE,CAAC;QACT,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,eAAe;QACtB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YAC3C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;YAElC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;gBAC9D,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM;oBACxB,CAAC,CAAC,GAAG,MAAM,gBAAgB;oBAC3B,CAAC,CAAC,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAEzD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,YAAY,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,UAAU,EAAE,oBAAoB;wBAChC,IAAI;wBACJ,SAAS,EAAE,QAAQ;wBACnB,aAAa,EAAE,YAAY;wBAC3B,YAAY,EAAE,WAAW;qBAC1B,CAAC;iBACH,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,GAAG,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAsB,CAAC;oBACzD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,uBAAuB,EAAE,CAAC,CAAC;oBACtE,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAKpC,CAAC;gBAEF,wEAAwE;gBACxE,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,EAAE;wBAChD,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC;wBAC5B,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;wBAChC,IAAI,EAAE,GAAG;qBACV,CAAC,CAAC;gBACL,CAAC;gBAED,GAAG,CAAC,IAAI,CAAC;oBACP,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,YAAY;QACnB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YAC3C,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,YAAY,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE;qBACjC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC;iBACtD,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;oBACxD,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIpC,CAAC;gBAEF,mCAAmC;gBACnC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,EAAE;wBAChD,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC;wBAC5B,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;wBAChC,IAAI,EAAE,GAAG;qBACV,CAAC,CAAC;gBACL,CAAC;gBAED,GAAG,CAAC,IAAI,CAAC;oBACP,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,cAAc;QACrB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YAC3C,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;YAE5B,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,YAAY,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE;qBACjC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,qBAAqB,EAAE,MAAM,EAAE,CAAC;iBACpE,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;oBACxD,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIpC,CAAC;gBAEF,mCAAmC;gBACnC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,EAAE;wBAChD,QAAQ,EAAE,IAAI;wBACd,MAAM,EAAE,IAAI;wBACZ,QAAQ,EAAE,KAAK;wBACf,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC;wBAC5B,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;wBAChC,IAAI,EAAE,GAAG;qBACV,CAAC,CAAC;gBACL,CAAC;gBAED,GAAG,CAAC,IAAI,CAAC;oBACP,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,UAAU,EAAE,MAAM,CAAC,UAAU;iBAC9B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAChE,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,SAAS,WAAW;QAClB,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YAC3C,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,GAAG,OAAO,aAAa,EAAE;oBACnC,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE;qBACjC;iBACF,CAAC,CAAC;gBAEH,6BAA6B;gBAC7B,GAAG,CAAC,WAAW,CAAC,eAAe,EAAE;oBAC/B,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC;oBAC5B,IAAI,EAAE,GAAG;iBACV,CAAC,CAAC;gBAEH,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,SAAS,MAAM;QACb,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,CAAC,oBAAoB,EAAE,eAAe,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,cAAc,EAAE,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO;QACL,UAAU;QACV,UAAU;QACV,iBAAiB;QACjB,cAAc;QACd,YAAY;QACZ,eAAe;QACf,YAAY;QACZ,cAAc;QACd,WAAW;QACX,MAAM;QACN,MAAM,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;KAC9B,CAAC;AACJ,CAAC;AAaD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC3D,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,GAAG,yBAAyB,EAAE,GAAG,MAAM,CAAC;IAE/E,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC3C,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;QAElC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QAED,mDAAmD;QACnD,MAAM,WAAW,GAAG,GAAG,GAAG,CAAC,QAAQ,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QAEtE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,YAAY,EAAE;gBACnD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,UAAU,EAAE,oBAAoB;oBAChC,IAAI;oBACJ,SAAS,EAAE,QAAQ;oBACnB,aAAa,EAAE,YAAY;oBAC3B,YAAY,EAAE,WAAW;iBAC1B,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAIpC,CAAC;YAEF,uCAAuC;YACvC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;gBACzB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChD,MAAM,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBAEzE,GAAG,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,aAAa,EAAE;oBAChD,QAAQ,EAAE,IAAI;oBACd,MAAM,EAAE,IAAI;oBACZ,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,YAAY;oBACpB,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;oBAChC,IAAI,EAAE,GAAG;iBACV,CAAC,CAAC;YACL,CAAC;YAED,+DAA+D;YAC/D,GAAG,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE;gBAC9C,MAAM,EAAE,IAAI;gBACZ,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI;gBAChC,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;YAEH,6CAA6C;YAC7C,IAAI,QAAQ,GAAG,GAAG,CAAC;YACnB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACvC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;oBACvC,IAAI,MAAM,CAAC,QAAQ,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC3D,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;oBAC7B,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,yBAAyB;gBAC3B,CAAC;YACH,CAAC;YAED,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@tonycodes/auth-express",
+  "version": "1.1.0",
+  "description": "Express middleware for Tony Auth service",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "express",
+    "auth",
+    "authentication",
+    "middleware",
+    "sdk"
+  ],
+  "author": "Tony <tony@tony.codes>",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/tonycodes/auth-express.git"
+  },
+  "homepage": "https://github.com/tonycodes/auth-express#readme",
+  "bugs": {
+    "url": "https://github.com/tonycodes/auth-express/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "jose": "^6.0.11"
+  },
+  "peerDependencies": {
+    "express": ">=4.0.0 || >=5.0.0"
+  },
+  "devDependencies": {
+    "@types/express": "^5.0.0",
+    "typescript": "^5.3.2"
+  }
+}