@vibesdotdev/auth 0.0.0-stage → 1.0.0-rc.4

package/dist/features/permissions/definitions/roles.js

@@ -0,0 +1,176 @@
+import { ALL_PERMISSION_NAMES } from "./catalog.js";
+export const systemRoleNames = {
+    SUPER_ADMIN: 'superadmin',
+    ADMIN: 'admin',
+    USER: 'user',
+    READ_ONLY: 'readonly',
+    PROJECT_ADMIN: 'project_admin',
+    DEVELOPER: 'developer'
+};
+export const DEFAULT_ROLE_NAME = systemRoleNames.USER;
+export const ADMIN_ROLE_NAMES = [systemRoleNames.ADMIN, systemRoleNames.SUPER_ADMIN];
+const roleDefinitions = [
+    {
+        name: systemRoleNames.SUPER_ADMIN,
+        description: 'Full system access with all permissions',
+        isSystemRole: true,
+        permissions: ['admin:all']
+    },
+    {
+        name: systemRoleNames.ADMIN,
+        description: 'System administrator with most permissions',
+        isSystemRole: true,
+        permissions: [
+            'users:read',
+            'users:write',
+            'users:delete',
+            'projects:read',
+            'projects:write',
+            'projects:delete',
+            'projects:manage:members',
+            'system:read',
+            'system:write',
+            'system:monitor',
+            'roles:read',
+            'roles:write',
+            'permissions:assign',
+            'billing:read',
+            'billing:write',
+            'secrets:read',
+            'secrets:write',
+            'secrets:delete'
+        ]
+    },
+    {
+        name: systemRoleNames.USER,
+        description: 'Standard user with basic permissions',
+        isSystemRole: true,
+        permissions: [
+            'users:read:own',
+            'users:write:own',
+            'projects:read:own',
+            'projects:write:own',
+            'projects:delete:own',
+            'agents:read:own',
+            'agents:write:own',
+            'agents:delete:own',
+            'agents:execute',
+            'models:read',
+            'tools:read',
+            'tools:execute',
+            'images:generate',
+            'images:read:own',
+            'images:delete:own',
+            'chat:read',
+            'chat:write',
+            'chat:delete:own',
+            'knowledge:read',
+            'knowledge:write',
+            'knowledge:search',
+            'billing:read:own',
+            'billing:write:own',
+            'secrets:read'
+        ]
+    },
+    {
+        name: systemRoleNames.READ_ONLY,
+        description: 'Read-only access to user content',
+        isSystemRole: true,
+        permissions: [
+            'users:read:own',
+            'projects:read:own',
+            'agents:read:own',
+            'models:read',
+            'tools:read',
+            'images:read:own',
+            'chat:read',
+            'knowledge:read',
+            'knowledge:search',
+            'billing:read:own'
+        ]
+    },
+    {
+        name: systemRoleNames.PROJECT_ADMIN,
+        description: 'Administrator for specific projects',
+        isSystemRole: true,
+        permissions: [
+            'users:read:own',
+            'users:write:own',
+            'projects:read:own',
+            'projects:write:own',
+            'projects:manage:members',
+            'agents:read',
+            'agents:write',
+            'agents:delete',
+            'agents:execute',
+            'models:read',
+            'models:write',
+            'tools:read',
+            'tools:write',
+            'tools:execute',
+            'images:generate',
+            'images:read',
+            'images:delete',
+            'chat:read',
+            'chat:write',
+            'chat:delete',
+            'chat:moderate',
+            'knowledge:read',
+            'knowledge:write',
+            'knowledge:delete',
+            'knowledge:search',
+            'billing:read:own',
+            'billing:write:own',
+            'secrets:read',
+            'secrets:write',
+            'secrets:delete'
+        ]
+    },
+    {
+        name: systemRoleNames.DEVELOPER,
+        description: 'Developer with enhanced AI and tool access',
+        isSystemRole: true,
+        permissions: [
+            'users:read:own',
+            'users:write:own',
+            'projects:read:own',
+            'projects:write:own',
+            'projects:delete:own',
+            'agents:read',
+            'agents:write',
+            'agents:delete:own',
+            'agents:execute',
+            'models:read',
+            'models:write',
+            'models:train',
+            'providers:read',
+            'providers:write',
+            'tools:read',
+            'tools:write',
+            'tools:delete:own',
+            'tools:execute',
+            'images:generate',
+            'images:read:own',
+            'images:delete:own',
+            'chat:read',
+            'chat:write',
+            'chat:delete:own',
+            'knowledge:read',
+            'knowledge:write',
+            'knowledge:delete',
+            'knowledge:search',
+            'billing:read:own',
+            'billing:write:own',
+            'secrets:read',
+            'secrets:write'
+        ]
+    }
+];
+const missingRolePermissions = roleDefinitions.flatMap((role) => role.permissions
+    .filter((permissionName) => !ALL_PERMISSION_NAMES.has(permissionName))
+    .map((permissionName) => `${role.name}:${permissionName}`));
+if (missingRolePermissions.length > 0) {
+    throw new Error(`Invalid auth role definitions: ${missingRolePermissions.join(', ')}`);
+}
+export const STANDARD_ROLES = roleDefinitions;
+//# sourceMappingURL=roles.js.map

package/dist/features/permissions/definitions/roles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roles.js","sourceRoot":"","sources":["../../../../src/features/permissions/definitions/roles.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC9B,WAAW,EAAE,YAAY;IACzB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,UAAU;IACrB,aAAa,EAAE,eAAe;IAC9B,SAAS,EAAE,WAAW;CACb,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAC,IAAI,CAAC;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,eAAe,CAAC,KAAK,EAAE,eAAe,CAAC,WAAW,CAAU,CAAC;AAE9F,MAAM,eAAe,GAAqB;IACzC;QACC,IAAI,EAAE,eAAe,CAAC,WAAW;QACjC,WAAW,EAAE,yCAAyC;QACtD,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE,CAAC,WAAW,CAAC;KAC1B;IACD;QACC,IAAI,EAAE,eAAe,CAAC,KAAK;QAC3B,WAAW,EAAE,4CAA4C;QACzD,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE;YACZ,YAAY;YACZ,aAAa;YACb,cAAc;YACd,eAAe;YACf,gBAAgB;YAChB,iBAAiB;YACjB,yBAAyB;YACzB,aAAa;YACb,cAAc;YACd,gBAAgB;YAChB,YAAY;YACZ,aAAa;YACb,oBAAoB;YACpB,cAAc;YACd,eAAe;YACf,cAAc;YACd,eAAe;YACf,gBAAgB;SAChB;KACD;IACD;QACC,IAAI,EAAE,eAAe,CAAC,IAAI;QAC1B,WAAW,EAAE,sCAAsC;QACnD,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE;YACZ,gBAAgB;YAChB,iBAAiB;YACjB,mBAAmB;YACnB,oBAAoB;YACpB,qBAAqB;YACrB,iBAAiB;YACjB,kBAAkB;YAClB,mBAAmB;YACnB,gBAAgB;YAChB,aAAa;YACb,YAAY;YACZ,eAAe;YACf,iBAAiB;YACjB,iBAAiB;YACjB,mBAAmB;YACnB,WAAW;YACX,YAAY;YACZ,iBAAiB;YACjB,gBAAgB;YAChB,iBAAiB;YACjB,kBAAkB;YAClB,kBAAkB;YAClB,mBAAmB;YACnB,cAAc;SACd;KACD;IACD;QACC,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,WAAW,EAAE,kCAAkC;QAC/C,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE;YACZ,gBAAgB;YAChB,mBAAmB;YACnB,iBAAiB;YACjB,aAAa;YACb,YAAY;YACZ,iBAAiB;YACjB,WAAW;YACX,gBAAgB;YAChB,kBAAkB;YAClB,kBAAkB;SAClB;KACD;IACD;QACC,IAAI,EAAE,eAAe,CAAC,aAAa;QACnC,WAAW,EAAE,qCAAqC;QAClD,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE;YACZ,gBAAgB;YAChB,iBAAiB;YACjB,mBAAmB;YACnB,oBAAoB;YACpB,yBAAyB;YACzB,aAAa;YACb,cAAc;YACd,eAAe;YACf,gBAAgB;YAChB,aAAa;YACb,cAAc;YACd,YAAY;YACZ,aAAa;YACb,eAAe;YACf,iBAAiB;YACjB,aAAa;YACb,eAAe;YACf,WAAW;YACX,YAAY;YACZ,aAAa;YACb,eAAe;YACf,gBAAgB;YAChB,iBAAiB;YACjB,kBAAkB;YAClB,kBAAkB;YAClB,kBAAkB;YAClB,mBAAmB;YACnB,cAAc;YACd,eAAe;YACf,gBAAgB;SAChB;KACD;IACD;QACC,IAAI,EAAE,eAAe,CAAC,SAAS;QAC/B,WAAW,EAAE,4CAA4C;QACzD,YAAY,EAAE,IAAI;QAClB,WAAW,EAAE;YACZ,gBAAgB;YAChB,iBAAiB;YACjB,mBAAmB;YACnB,oBAAoB;YACpB,qBAAqB;YACrB,aAAa;YACb,cAAc;YACd,mBAAmB;YACnB,gBAAgB;YAChB,aAAa;YACb,cAAc;YACd,cAAc;YACd,gBAAgB;YAChB,iBAAiB;YACjB,YAAY;YACZ,aAAa;YACb,kBAAkB;YAClB,eAAe;YACf,iBAAiB;YACjB,iBAAiB;YACjB,mBAAmB;YACnB,WAAW;YACX,YAAY;YACZ,iBAAiB;YACjB,gBAAgB;YAChB,iBAAiB;YACjB,kBAAkB;YAClB,kBAAkB;YAClB,kBAAkB;YAClB,mBAAmB;YACnB,cAAc;YACd,eAAe;SACf;KACD;CACD,CAAC;AAEF,MAAM,sBAAsB,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAC/D,IAAI,CAAC,WAAW;KACd,MAAM,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;KACrE,GAAG,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,EAAE,CAAC,CAC3D,CAAC;AAEF,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;IACvC,MAAM,IAAI,KAAK,CACd,kCAAkC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,cAAc,GAAqB,eAAe,CAAC"}

package/dist/features/permissions/definitions/system.d.ts

@@ -0,0 +1,3 @@
+import type { PermissionDefinition } from '../schemas/server.ts';
+export declare const SYSTEM_PERMISSIONS: PermissionDefinition[];
+//# sourceMappingURL=system.d.ts.map

package/dist/features/permissions/definitions/system.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.d.ts","sourceRoot":"","sources":["../../../../src/features/permissions/definitions/system.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjE,eAAO,MAAM,kBAAkB,EAAE,oBAAoB,EA2JpD,CAAC"}

package/dist/features/permissions/definitions/system.js

@@ -0,0 +1,157 @@
+export const SYSTEM_PERMISSIONS = [
+    {
+        name: 'admin:all',
+        resource: '*',
+        action: '*',
+        description: 'Full system administration access',
+        isSystemPermission: true
+    },
+    {
+        name: 'users:read',
+        resource: 'users',
+        action: 'read',
+        description: 'View user profiles and information',
+        isSystemPermission: true
+    },
+    {
+        name: 'users:read:own',
+        resource: 'users',
+        action: 'read:own',
+        description: 'View own user profile',
+        isSystemPermission: true
+    },
+    {
+        name: 'users:write',
+        resource: 'users',
+        action: 'write',
+        description: 'Create and update user profiles',
+        isSystemPermission: true
+    },
+    {
+        name: 'users:write:own',
+        resource: 'users',
+        action: 'write:own',
+        description: 'Update own user profile',
+        isSystemPermission: true
+    },
+    {
+        name: 'users:delete',
+        resource: 'users',
+        action: 'delete',
+        description: 'Delete user accounts',
+        isSystemPermission: true
+    },
+    {
+        name: 'users:impersonate',
+        resource: 'users',
+        action: 'impersonate',
+        description: 'Impersonate other users (admin only)',
+        isSystemPermission: true
+    },
+    {
+        name: 'projects:read',
+        resource: 'projects',
+        action: 'read',
+        description: 'View all projects',
+        isSystemPermission: true
+    },
+    {
+        name: 'projects:read:own',
+        resource: 'projects',
+        action: 'read:own',
+        description: 'View own projects',
+        isSystemPermission: true
+    },
+    {
+        name: 'projects:write',
+        resource: 'projects',
+        action: 'write',
+        description: 'Create and update projects',
+        isSystemPermission: true
+    },
+    {
+        name: 'projects:write:own',
+        resource: 'projects',
+        action: 'write:own',
+        description: 'Update own projects',
+        isSystemPermission: true
+    },
+    {
+        name: 'projects:delete',
+        resource: 'projects',
+        action: 'delete',
+        description: 'Delete projects',
+        isSystemPermission: true
+    },
+    {
+        name: 'projects:delete:own',
+        resource: 'projects',
+        action: 'delete:own',
+        description: 'Delete own projects',
+        isSystemPermission: true
+    },
+    {
+        name: 'projects:manage:members',
+        resource: 'projects',
+        action: 'manage:members',
+        description: 'Manage project members and permissions',
+        isSystemPermission: true
+    },
+    {
+        name: 'system:read',
+        resource: 'system',
+        action: 'read',
+        description: 'View system settings and configuration',
+        isSystemPermission: true
+    },
+    {
+        name: 'system:write',
+        resource: 'system',
+        action: 'write',
+        description: 'Modify system settings and configuration',
+        isSystemPermission: true
+    },
+    {
+        name: 'system:backup',
+        resource: 'system',
+        action: 'backup',
+        description: 'Create and restore system backups',
+        isSystemPermission: true
+    },
+    {
+        name: 'system:monitor',
+        resource: 'system',
+        action: 'monitor',
+        description: 'Access system monitoring and logs',
+        isSystemPermission: true
+    },
+    {
+        name: 'roles:read',
+        resource: 'roles',
+        action: 'read',
+        description: 'View roles and permissions',
+        isSystemPermission: true
+    },
+    {
+        name: 'roles:write',
+        resource: 'roles',
+        action: 'write',
+        description: 'Create and modify roles',
+        isSystemPermission: true
+    },
+    {
+        name: 'roles:delete',
+        resource: 'roles',
+        action: 'delete',
+        description: 'Delete roles',
+        isSystemPermission: true
+    },
+    {
+        name: 'permissions:assign',
+        resource: 'permissions',
+        action: 'assign',
+        description: 'Assign and revoke user permissions',
+        isSystemPermission: true
+    }
+];
+//# sourceMappingURL=system.js.map

package/dist/features/permissions/definitions/system.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system.js","sourceRoot":"","sources":["../../../../src/features/permissions/definitions/system.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACzD;QACC,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,GAAG;QACb,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,mCAAmC;QAChD,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,oCAAoC;QACjD,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,uBAAuB;QACpC,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,iCAAiC;QAC9C,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,yBAAyB;QACtC,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,sBAAsB;QACnC,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,aAAa;QACrB,WAAW,EAAE,sCAAsC;QACnD,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,mBAAmB;QAChC,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,mBAAmB;QAChC,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,4BAA4B;QACzC,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,WAAW;QACnB,WAAW,EAAE,qBAAqB;QAClC,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,iBAAiB;QAC9B,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,qBAAqB;QAC3B,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,YAAY;QACpB,WAAW,EAAE,qBAAqB;QAClC,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,yBAAyB;QAC/B,QAAQ,EAAE,UAAU;QACpB,MAAM,EAAE,gBAAgB;QACxB,WAAW,EAAE,wCAAwC;QACrD,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,wCAAwC;QACrD,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,0CAA0C;QACvD,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,mCAAmC;QAChD,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,QAAQ;QAClB,MAAM,EAAE,SAAS;QACjB,WAAW,EAAE,mCAAmC;QAChD,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,MAAM;QACd,WAAW,EAAE,4BAA4B;QACzC,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,aAAa;QACnB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,OAAO;QACf,WAAW,EAAE,yBAAyB;QACtC,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,cAAc;QACpB,QAAQ,EAAE,OAAO;QACjB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,cAAc;QAC3B,kBAAkB,EAAE,IAAI;KACxB;IACD;QACC,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,oCAAoC;QACjD,kBAAkB,EAAE,IAAI;KACxB;CACD,CAAC"}

package/dist/features/permissions/schemas/common.d.ts

@@ -0,0 +1,110 @@
+import * as z from 'zod/v4';
+export declare const permissionActionSchema: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+export type PermissionAction = z.infer<typeof permissionActionSchema>;
+export declare const permissionResourceSchema: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+export type PermissionResource = z.infer<typeof permissionResourceSchema>;
+export declare const permissionSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    name: z.ZodString;
+    resource: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+    action: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+    description: z.ZodNullable<z.ZodString>;
+    isSystemPermission: z.ZodBoolean;
+    createdAt: z.ZodDate;
+}, z.core.$strip>;
+export type Permission = z.infer<typeof permissionSchema>;
+export declare const roleSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    projectId: z.ZodNullable<z.ZodUUID>;
+    isSystemRole: z.ZodBoolean;
+    createdAt: z.ZodDate;
+    updatedAt: z.ZodDate;
+}, z.core.$strip>;
+export type Role = z.infer<typeof roleSchema>;
+export declare const rolePermissionSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    roleId: z.ZodUUID;
+    permissionId: z.ZodUUID;
+    grantedAt: z.ZodDate;
+}, z.core.$strip>;
+export type RolePermission = z.infer<typeof rolePermissionSchema>;
+export declare const userRoleSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    userId: z.ZodUUID;
+    roleId: z.ZodUUID;
+    projectId: z.ZodNullable<z.ZodUUID>;
+    assignedAt: z.ZodDate;
+}, z.core.$strip>;
+export type UserRole = z.infer<typeof userRoleSchema>;
+export declare const roleWithPermissionsSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    name: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    projectId: z.ZodNullable<z.ZodUUID>;
+    isSystemRole: z.ZodBoolean;
+    createdAt: z.ZodDate;
+    updatedAt: z.ZodDate;
+    permissions: z.ZodArray<z.ZodObject<{
+        id: z.ZodUUID;
+        name: z.ZodString;
+        resource: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+        action: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+        description: z.ZodNullable<z.ZodString>;
+        isSystemPermission: z.ZodBoolean;
+        createdAt: z.ZodDate;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type RoleWithPermissions = z.infer<typeof roleWithPermissionsSchema>;
+export declare const userRoleWithDetailsSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    userId: z.ZodUUID;
+    roleId: z.ZodUUID;
+    projectId: z.ZodNullable<z.ZodUUID>;
+    assignedAt: z.ZodDate;
+    role: z.ZodObject<{
+        id: z.ZodUUID;
+        name: z.ZodString;
+        description: z.ZodNullable<z.ZodString>;
+        projectId: z.ZodNullable<z.ZodUUID>;
+        isSystemRole: z.ZodBoolean;
+        createdAt: z.ZodDate;
+        updatedAt: z.ZodDate;
+    }, z.core.$strip>;
+    project: z.ZodNullable<z.ZodObject<{
+        id: z.ZodUUID;
+        name: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type UserRoleWithDetails = z.infer<typeof userRoleWithDetailsSchema>;
+export declare const permissionCheckSchema: z.ZodObject<{
+    allowed: z.ZodBoolean;
+    resource: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+    action: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+    roleId: z.ZodOptional<z.ZodUUID>;
+    projectId: z.ZodNullable<z.ZodUUID>;
+}, z.core.$strip>;
+export type PermissionCheck = z.infer<typeof permissionCheckSchema>;
+export declare const systemRoles: {
+    readonly SUPER_ADMIN: "superadmin";
+    readonly ADMIN: "admin";
+    readonly USER: "user";
+    readonly READ_ONLY: "readonly";
+    readonly PROJECT_ADMIN: "project_admin";
+    readonly DEVELOPER: "developer";
+};
+export type SystemRole = (typeof systemRoles)[keyof typeof systemRoles];
+export declare const isSystemRole: (roleName: string) => roleName is SystemRole;
+export declare const userPermissionSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    name: z.ZodString;
+    resource: z.ZodString;
+    action: z.ZodString;
+    description: z.ZodNullable<z.ZodString>;
+    roleId: z.ZodUUID;
+    roleName: z.ZodString;
+    projectId: z.ZodNullable<z.ZodUUID>;
+}, z.core.$strip>;
+export type UserPermission = z.infer<typeof userPermissionSchema>;
+//# sourceMappingURL=common.d.ts.map

package/dist/features/permissions/schemas/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../../../src/features/permissions/schemas/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAO5B,eAAO,MAAM,sBAAsB,uDAAmD,CAAC;AACvF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAGtE,eAAO,MAAM,wBAAwB,uDAAmD,CAAC;AACzF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAG1E,eAAO,MAAM,gBAAgB;;;;;;;;iBAQ3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,UAAU;;;;;;;;iBAQrB,CAAC;AACH,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAG9C,eAAO,MAAM,oBAAoB;;;;;iBAK/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,cAAc;;;;;;iBAMzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAKtD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;iBAEpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAG5E,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;iBAQpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAG5E,eAAO,MAAM,qBAAqB;;;;;;iBAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,WAAW;;;;;;;CAOd,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAIxE,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,KAAG,QAAQ,IAAI,UAA6C,CAAC;AAG1G,eAAO,MAAM,oBAAoB;;;;;;;;;iBAS/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/features/permissions/schemas/common.js

@@ -0,0 +1,89 @@
+import * as z from 'zod/v4';
+// Base schemas - primary source of truth
+const permissionTokenSchema = z.string().regex(/^[a-z][a-z0-9_]*(?::[a-z][a-z0-9_]*)*$/);
+// Permission actions support scoped verbs like `read:own` and wildcard admin access.
+export const permissionActionSchema = z.union([z.literal('*'), permissionTokenSchema]);
+// Permission resources support wildcard access and runtime-owned slices.
+export const permissionResourceSchema = z.union([z.literal('*'), permissionTokenSchema]);
+// Permission schema
+export const permissionSchema = z.object({
+    id: z.uuid(),
+    name: z.string(),
+    resource: permissionResourceSchema,
+    action: permissionActionSchema,
+    description: z.string().nullable(),
+    isSystemPermission: z.boolean(),
+    createdAt: z.date()
+});
+// Role schema
+export const roleSchema = z.object({
+    id: z.uuid(),
+    name: z.string(),
+    description: z.string().nullable(),
+    projectId: z.uuid().nullable(), // NULL for global roles
+    isSystemRole: z.boolean(),
+    createdAt: z.date(),
+    updatedAt: z.date()
+});
+// Role-permission association
+export const rolePermissionSchema = z.object({
+    id: z.uuid(),
+    roleId: z.uuid(),
+    permissionId: z.uuid(),
+    grantedAt: z.date()
+});
+// User-role assignment
+export const userRoleSchema = z.object({
+    id: z.uuid(),
+    userId: z.uuid(),
+    roleId: z.uuid(),
+    projectId: z.uuid().nullable(), // NULL for global assignments
+    assignedAt: z.date()
+});
+// Composite types
+// Role with permissions
+export const roleWithPermissionsSchema = roleSchema.extend({
+    permissions: z.array(permissionSchema)
+});
+// User role assignment with details
+export const userRoleWithDetailsSchema = userRoleSchema.extend({
+    role: roleSchema,
+    project: z
+        .object({
+        id: z.uuid(),
+        name: z.string()
+    })
+        .nullable()
+});
+// Permission check result
+export const permissionCheckSchema = z.object({
+    allowed: z.boolean(),
+    resource: permissionResourceSchema,
+    action: permissionActionSchema,
+    roleId: z.uuid().optional(),
+    projectId: z.uuid().nullable()
+});
+// Predefined system roles
+export const systemRoles = {
+    SUPER_ADMIN: 'superadmin',
+    ADMIN: 'admin',
+    USER: 'user',
+    READ_ONLY: 'readonly',
+    PROJECT_ADMIN: 'project_admin',
+    DEVELOPER: 'developer'
+};
+// Helper function to check if a role is a system role
+const SYSTEM_ROLE_NAMES = new Set(Object.values(systemRoles));
+export const isSystemRole = (roleName) => SYSTEM_ROLE_NAMES.has(roleName);
+// User permission with role details (for query results)
+export const userPermissionSchema = z.object({
+    id: z.uuid(),
+    name: z.string(),
+    resource: z.string(),
+    action: z.string(),
+    description: z.string().nullable(),
+    roleId: z.uuid(),
+    roleName: z.string(),
+    projectId: z.uuid().nullable()
+});
+//# sourceMappingURL=common.js.map

package/dist/features/permissions/schemas/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../../../src/features/permissions/schemas/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B,yCAAyC;AAEzC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAEzF,qFAAqF;AACrF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAGvF,yEAAyE;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAGzF,oBAAoB;AACpB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,wBAAwB;IAClC,MAAM,EAAE,sBAAsB;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;CACnB,CAAC,CAAC;AAGH,cAAc;AACd,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,wBAAwB;IACxD,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;CACnB,CAAC,CAAC;AAGH,8BAA8B;AAC9B,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;IAChB,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE;IACtB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE;CACnB,CAAC,CAAC;AAGH,uBAAuB;AACvB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;IAChB,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;IAChB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,EAAE,8BAA8B;IAC9D,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE;CACpB,CAAC,CAAC;AAGH,kBAAkB;AAElB,wBAAwB;AACxB,MAAM,CAAC,MAAM,yBAAyB,GAAG,UAAU,CAAC,MAAM,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACtC,CAAC,CAAC;AAGH,oCAAoC;AACpC,MAAM,CAAC,MAAM,yBAAyB,GAAG,cAAc,CAAC,MAAM,CAAC;IAC9D,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,CAAC;SACR,MAAM,CAAC;QACP,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;QACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KAChB,CAAC;SACD,QAAQ,EAAE;CACZ,CAAC,CAAC;AAGH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,QAAQ,EAAE,wBAAwB;IAClC,MAAM,EAAE,sBAAsB;IAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC3B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,0BAA0B;AAC1B,MAAM,CAAC,MAAM,WAAW,GAAG;IAC1B,WAAW,EAAE,YAAY;IACzB,KAAK,EAAE,OAAO;IACd,IAAI,EAAE,MAAM;IACZ,SAAS,EAAE,UAAU;IACrB,aAAa,EAAE,eAAe;IAC9B,SAAS,EAAE,WAAW;CACb,CAAC;AAGX,sDAAsD;AACtD,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;AACnF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAAgB,EAA0B,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAE1G,wDAAwD;AACxD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE;IACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC"}

package/dist/features/permissions/schemas/forms.d.ts

@@ -0,0 +1,46 @@
+import * as z from 'zod/v4';
+export declare const createRoleSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    projectId: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
+    permissions: z.ZodOptional<z.ZodArray<z.ZodUUID>>;
+}, z.core.$strip>;
+export type CreateRoleInput = z.infer<typeof createRoleSchema>;
+export declare const updateRoleSchema: z.ZodObject<{
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodOptional<z.ZodString>>;
+    projectId: z.ZodOptional<z.ZodOptional<z.ZodNullable<z.ZodUUID>>>;
+    permissions: z.ZodOptional<z.ZodOptional<z.ZodArray<z.ZodUUID>>>;
+}, z.core.$strip>;
+export type UpdateRoleInput = z.infer<typeof updateRoleSchema>;
+export declare const assignRoleSchema: z.ZodObject<{
+    userId: z.ZodString;
+    roleId: z.ZodString;
+    projectId: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
+}, z.core.$strip>;
+export type AssignRoleInput = z.infer<typeof assignRoleSchema>;
+export declare const createPermissionSchema: z.ZodObject<{
+    name: z.ZodString;
+    resource: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+    action: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+    description: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type CreatePermissionInput = z.infer<typeof createPermissionSchema>;
+export declare const grantPermissionsSchema: z.ZodObject<{
+    roleId: z.ZodString;
+    permissionIds: z.ZodArray<z.ZodUUID>;
+}, z.core.$strip>;
+export type GrantPermissionsInput = z.infer<typeof grantPermissionsSchema>;
+export declare const revokePermissionsSchema: z.ZodObject<{
+    roleId: z.ZodString;
+    permissionIds: z.ZodArray<z.ZodUUID>;
+}, z.core.$strip>;
+export type RevokePermissionsInput = z.infer<typeof revokePermissionsSchema>;
+export declare const checkPermissionSchema: z.ZodObject<{
+    userId: z.ZodString;
+    resource: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+    action: z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>;
+    projectId: z.ZodOptional<z.ZodNullable<z.ZodUUID>>;
+}, z.core.$strip>;
+export type CheckPermissionInput = z.infer<typeof checkPermissionSchema>;
+//# sourceMappingURL=forms.d.ts.map

package/dist/features/permissions/schemas/forms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.d.ts","sourceRoot":"","sources":["../../../../src/features/permissions/schemas/forms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAI5B,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG/D,eAAO,MAAM,gBAAgB;;;;;iBAA6B,CAAC;AAC3D,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG/D,eAAO,MAAM,gBAAgB;;;;iBAI3B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG/D,eAAO,MAAM,sBAAsB;;;;;iBAKjC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAG3E,eAAO,MAAM,sBAAsB;;;iBAGjC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAG3E,eAAO,MAAM,uBAAuB;;;iBAGlC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAG7E,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/features/permissions/schemas/forms.js

@@ -0,0 +1,42 @@
+import * as z from 'zod/v4';
+import { permissionActionSchema, permissionResourceSchema } from "./common.js";
+// Create role form
+export const createRoleSchema = z.object({
+    name: z.string().min(1, 'Role name is required').max(50, 'Role name is too long'),
+    description: z.string().max(500, 'Description is too long').optional(),
+    projectId: z.uuid().nullable().optional(), // NULL for global roles
+    permissions: z.array(z.uuid()).optional() // Array of permission IDs
+});
+// Update role form
+export const updateRoleSchema = createRoleSchema.partial();
+// Assign role to user form
+export const assignRoleSchema = z.object({
+    userId: z.string().uuid('Invalid user ID'),
+    roleId: z.string().uuid('Invalid role ID'),
+    projectId: z.uuid().nullable().optional() // NULL for global assignments
+});
+// Create permission form (usually for admin use)
+export const createPermissionSchema = z.object({
+    name: z.string().min(1, 'Permission name is required'),
+    resource: permissionResourceSchema,
+    action: permissionActionSchema,
+    description: z.string().max(500, 'Description is too long').optional()
+});
+// Grant permissions to role form
+export const grantPermissionsSchema = z.object({
+    roleId: z.string().uuid('Invalid role ID'),
+    permissionIds: z.array(z.uuid()).min(1, 'At least one permission is required')
+});
+// Revoke permissions from role form
+export const revokePermissionsSchema = z.object({
+    roleId: z.string().uuid('Invalid role ID'),
+    permissionIds: z.array(z.uuid()).min(1, 'At least one permission is required')
+});
+// Check permission form
+export const checkPermissionSchema = z.object({
+    userId: z.string().uuid('Invalid user ID'),
+    resource: permissionResourceSchema,
+    action: permissionActionSchema,
+    projectId: z.uuid().nullable().optional()
+});
+//# sourceMappingURL=forms.js.map

package/dist/features/permissions/schemas/forms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forms.js","sourceRoot":"","sources":["../../../../src/features/permissions/schemas/forms.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE/E,mBAAmB;AACnB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,uBAAuB,CAAC;IACjF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,QAAQ,EAAE;IACtE,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,wBAAwB;IACnE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,0BAA0B;CACpE,CAAC,CAAC;AAGH,mBAAmB;AACnB,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,OAAO,EAAE,CAAC;AAG3D,2BAA2B;AAC3B,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,8BAA8B;CACxE,CAAC,CAAC;AAGH,iDAAiD;AACjD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,6BAA6B,CAAC;IACtD,QAAQ,EAAE,wBAAwB;IAClC,MAAM,EAAE,sBAAsB;IAC9B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,yBAAyB,CAAC,CAAC,QAAQ,EAAE;CACtE,CAAC,CAAC;AAGH,iCAAiC;AACjC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAC1C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,qCAAqC,CAAC;CAC9E,CAAC,CAAC;AAGH,oCAAoC;AACpC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAC1C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,qCAAqC,CAAC;CAC9E,CAAC,CAAC;AAGH,wBAAwB;AACxB,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,iBAAiB,CAAC;IAC1C,QAAQ,EAAE,wBAAwB;IAClC,MAAM,EAAE,sBAAsB;IAC9B,SAAS,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC"}