@vorionsys/security 1.0.0

package/dist/security/token-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-lifecycle.js","sourceRoot":"","sources":["../../src/security/token-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,4BAA4B,EAA+B,MAAM,+BAA+B,CAAC;AAC1G,OAAO,EAAE,sBAAsB,EAA4B,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,eAAe,EAAqB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,gBAAgB,EAAsB,MAAM,uBAAuB,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAEL,sBAAsB,GACvB,MAAM,6BAA6B,CAAC;AAIrC,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,CAAC,CAAC;AAE9D,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,oBAAoB,GAAG,IAAI,OAAO,CAAC;IACvC,IAAI,EAAE,+CAA+C;IACrD,IAAI,EAAE,wCAAwC;IAC9C,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAU;IAC3C,SAAS,EAAE,CAAC,cAAc,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAAG,IAAI,OAAO,CAAC;IACtC,IAAI,EAAE,qDAAqD;IAC3D,IAAI,EAAE,8BAA8B;IACpC,UAAU,EAAE,CAAC,MAAM,CAAU,EAAE,iCAAiC;IAChE,SAAS,EAAE,CAAC,cAAc,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,IAAI,SAAS,CAAC;IACvC,IAAI,EAAE,oDAAoD;IAC1D,IAAI,EAAE,wCAAwC;IAC9C,UAAU,EAAE,CAAC,WAAW,CAAU;IAClC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;IACpD,SAAS,EAAE,CAAC,cAAc,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,qBAAqB,GAAG,IAAI,KAAK,CAAC;IACtC,IAAI,EAAE,2CAA2C;IACjD,IAAI,EAAE,oDAAoD;IAC1D,SAAS,EAAE,CAAC,cAAc,CAAC;CAC5B,CAAC,CAAC;AAsFH,MAAM,cAAc,GAAmC;IACrD,YAAY,EAAE,IAAI;IAClB,iBAAiB,EAAE,yBAAyB;IAC5C,oBAAoB,EAAE,IAAI,EAAE,iBAAiB;CAC9C,CAAC;AAiBF,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,mBAAoB,SAAQ,WAAW;IACzC,IAAI,GAAG,uBAAuB,CAAC;IAC/B,UAAU,GAAG,GAAG,CAAC;IAE1B,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,gFAAgF;AAChF,0BAA0B;AAC1B,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAiC;IACvC,KAAK,GAAiB,IAAI,CAAC;IAC3B,UAAU,GAAiB,IAAI,CAAC;IAChC,YAAY,GAAY,KAAK,CAAC;IACrB,UAAU,CAAS;IAE5B,sBAAsB,CAAyB;IAC/C,mBAAmB,CAAsB;IACzC,YAAY,CAAe;IAC3B,aAAa,CAAgB;IAC7B,cAAc,CAAsB;IAE5C,YACE,SAA+B,EAAE,EACjC,IAMC;QAED,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,cAAc,EAAE,GAAG,MAAM,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAEtC,sBAAsB;QACtB,IAAI,CAAC,sBAAsB,GAAG,IAAI,EAAE,sBAAsB,IAAI,4BAA4B,EAAE,CAAC;QAC7F,IAAI,CAAC,mBAAmB,GAAG,IAAI,EAAE,mBAAmB,IAAI,sBAAsB,EAAE,CAAC;QACjF,IAAI,CAAC,YAAY,GAAG,IAAI,EAAE,YAAY,IAAI,eAAe,EAAE,CAAC;QAC5D,IAAI,CAAC,aAAa,GAAG,IAAI,EAAE,aAAa,IAAI,gBAAgB,EAAE,CAAC;QAC/D,IAAI,CAAC,cAAc,GAAG,IAAI,EAAE,cAAc,IAAI,sBAAsB,EAAE,CAAC;QAEvE,MAAM,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,qCAAqC,CAAC,CAAC;IACtF,CAAC;IAED,8EAA8E;IAC9E,0BAA0B;IAC1B,8EAA8E;IAE9E;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,mBAAmB,CACvB,MAAc,EACd,QAAgB,EAChB,OAA0B;QAE1B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAE5B,MAAM,MAAM,GAAyB;YACnC,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;YACnB,2BAA2B,EAAE,CAAC;YAC9B,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,CAAC;YAClB,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,IAAI;SACd,CAAC;QAEF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAElF,MAAM,CAAC,IAAI,CACT,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,EACxD,yCAAyC,CAC1C,CAAC;QAEF,IAAI,CAAC;YACH,8DAA8D;YAC9D,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC/B,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;oBACvE,MAAM,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,gDAAgD;oBAC7E,mBAAmB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBACzC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,uCAAuC,CAAC,CAAC;gBACpE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACrD,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC;gBACjE,CAAC;YACH,CAAC;YAED,mCAAmC;YACnC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,CAC3D,MAAM,EACN,QAAQ,EACR,oBAAoB,OAAO,CAAC,MAAM,EAAE,EACpC,OAAO,CAAC,SAAS,CAClB,CAAC;oBACF,MAAM,CAAC,2BAA2B,GAAG,KAAK,CAAC;oBAC3C,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC;oBAC7B,mBAAmB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;oBACpD,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;gBACpE,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACzD,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,iCAAiC,CAAC,CAAC;gBACrE,CAAC;YACH,CAAC;YAED,qBAAqB;YACrB,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,CACpD,MAAM,EACN,oBAAoB,OAAO,CAAC,MAAM,EAAE,EACpC,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,gBAAgB,CACzB,CAAC;oBACF,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC;oBAC/B,MAAM,CAAC,YAAY,IAAI,KAAK,CAAC;oBAC7B,mBAAmB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC,CAAC;oBACpD,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,kBAAkB,CAAC,CAAC;gBACtD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACzD,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YAED,6EAA6E;YAC7E,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/E,IAAI,CAAC;oBACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;oBAChF,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;wBACvB,IAAI,CAAC;4BACH,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAC7B,GAAG,CAAC,EAAE,EACN,QAAQ,EACR,OAAO,CAAC,SAAS,EACjB,oBAAoB,OAAO,CAAC,MAAM,EAAE,CACrC,CAAC;4BACF,MAAM,CAAC,cAAc,EAAE,CAAC;4BACxB,mBAAmB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;wBAC/C,CAAC;wBAAC,OAAO,QAAQ,EAAE,CAAC;4BAClB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,qCAAqC,CAAC,CAAC;wBACzF,CAAC;oBACH,CAAC;oBACD,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,cAAc,CAAC;oBAC7C,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,cAAc,EAAE,EAAE,kBAAkB,CAAC,CAAC;gBAC7E,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;oBACzD,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,2BAA2B,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;YAED,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC3C,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;YAE5C,2DAA2D;YAC3D,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,sBAAsB,CAAC;oBAChC,IAAI,EAAE,UAAU;oBAChB,MAAM;oBACN,QAAQ;oBACR,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,SAAS,EAAE,OAAO,CAAC,SAAS;oBAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,cAAc,EAAE,IAAI,CAAC,UAAU;iBAChC,CAAC,CAAC;YACL,CAAC;YAED,YAAY;YACZ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC3D,MAAM,IAAI,CAAC,cAAc,CAAC,sBAAsB,CAC9C,KAAK,EACL,MAAM,EACN,MAAM,CAAC,YAAY,EACnB,oBAAoB,OAAO,CAAC,MAAM,EAAE,CACrC,CAAC;YAEF,UAAU;YACV,oBAAoB,CAAC,GAAG,CAAC;gBACvB,OAAO,EAAE,OAAO,CAAC,MAAM;gBACvB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aAChD,CAAC,CAAC;YACH,kBAAkB,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;YAEvF,MAAM,CAAC,IAAI,CACT;gBACE,MAAM;gBACN,QAAQ;gBACR,MAAM,EAAE;oBACN,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;oBACzC,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;oBAC/D,eAAe,EAAE,MAAM,CAAC,eAAe;oBACvC,cAAc,EAAE,MAAM,CAAC,cAAc;oBACrC,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM;iBAC7B;aACF,EACD,0CAA0C,CAC3C,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE7B,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,6BAA6B,CAAC,CAAC;QAE1D,IAAI,CAAC;YACH,4BAA4B;YAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,kCAAkC,CAAC,CAAC;gBAC/D,OAAO,KAAK,CAAC;YACf,CAAC;YAED,qBAAqB;YACrB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,6BAA6B,EAAE,QAAQ,CAAC,CAAC;YAEnG,IAAI,OAAO,EAAE,CAAC;gBACZ,mBAAmB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;gBAE7C,2BAA2B;gBAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;oBAC7B,MAAM,IAAI,CAAC,sBAAsB,CAAC;wBAChC,IAAI,EAAE,SAAS;wBACf,MAAM,EAAE,OAAO,CAAC,MAAM;wBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;wBAC1B,SAAS;wBACT,MAAM,EAAE,mBAAmB;wBAC3B,SAAS,EAAE,QAAQ;wBACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;wBACrB,cAAc,EAAE,IAAI,CAAC,UAAU;qBAChC,CAAC,CAAC;gBACL,CAAC;gBAED,kBAAkB,CAAC,OAAO,CACxB,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAClC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAChC,CAAC;gBAEF,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,8BAA8B,CAAC,CAAC;YACrF,CAAC;YAED,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,0BAA0B,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,cAAc,CAAC,MAAc,EAAE,QAAgB;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAE5B,MAAM,MAAM,GAAyB;YACnC,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;YACnB,2BAA2B,EAAE,CAAC;YAC9B,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,CAAC;YAClB,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,IAAI;SACd,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,4BAA4B,CAAC,CAAC;QAEhE,IAAI,CAAC;YACH,mDAAmD;YACnD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAC3E,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;oBAC9B,IAAI,MAAM,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;wBAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,YAAY,CACzD,MAAM,CAAC,QAAQ,EACf,mBAAmB,EACnB,QAAQ,CACT,CAAC;wBACF,IAAI,OAAO,EAAE,CAAC;4BACZ,MAAM,CAAC,2BAA2B,EAAE,CAAC;4BACrC,mBAAmB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;wBAC/C,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,2BAA2B,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACzD,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,4CAA4C,CAAC,CAAC;YAC1F,CAAC;YAED,qCAAqC;YACrC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBACpE,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;oBAC/B,IAAI,OAAO,CAAC,iBAAiB,KAAK,QAAQ,EAAE,CAAC;wBAC3C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAC5C,OAAO,CAAC,EAAE,EACV,mBAAmB,EACnB,QAAQ,CACT,CAAC;wBACF,IAAI,OAAO,EAAE,CAAC;4BACZ,MAAM,CAAC,eAAe,EAAE,CAAC;4BACzB,mBAAmB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;wBAC/C,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,eAAe,CAAC;YAChD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACzD,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,sCAAsC,CAAC,CAAC;YACpF,CAAC;YAED,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC3C,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;YAE5C,2BAA2B;YAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,sBAAsB,CAAC;oBAChC,IAAI,EAAE,QAAQ;oBACd,MAAM;oBACN,QAAQ,EAAE,EAAE,EAAE,2CAA2C;oBACzD,QAAQ;oBACR,MAAM,EAAE,gBAAgB;oBACxB,SAAS,EAAE,QAAQ;oBACnB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,cAAc,EAAE,IAAI,CAAC,UAAU;iBAChC,CAAC,CAAC;YACL,CAAC;YAED,kBAAkB,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;YAExF,MAAM,CAAC,IAAI,CACT;gBACE,MAAM;gBACN,QAAQ;gBACR,MAAM,EAAE;oBACN,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,2BAA2B,EAAE,MAAM,CAAC,2BAA2B;oBAC/D,eAAe,EAAE,MAAM,CAAC,eAAe;iBACxC;aACF,EACD,mCAAmC,CACpC,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,8BAA8B;IAC9B,8EAA8E;IAE9E;;;;;;;;;;OAUG;IACH,KAAK,CAAC,uBAAuB,CAC3B,OAA0B,EAC1B,OAIC;QAED,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,qCAAqC,CAAC,CAAC;QAEzE,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,mBAAmB;gBACtB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,0CAA0C,CAAC,CAAC;oBACrE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,6DAA6D;gBAC7D,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE;oBAChE,MAAM,EAAE,aAAa;oBACrB,SAAS,EAAE,QAAQ;oBACnB,UAAU,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,sCAAsC;oBACtE,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YAEL,KAAK,eAAe;gBAClB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,4CAA4C,CAAC,CAAC;oBACvE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,0CAA0C;gBAC1C,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE;oBAChE,MAAM,EAAE,eAAe;oBACvB,SAAS,EAAE,QAAQ;oBACnB,UAAU,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;oBACpD,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YAEL,KAAK,cAAc;gBACjB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,2CAA2C,CAAC,CAAC;oBACtE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,yCAAyC;gBACzC,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE;oBAChE,MAAM,EAAE,cAAc;oBACtB,SAAS,EAAE,QAAQ;oBACnB,UAAU,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;oBACpD,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YAEL,KAAK,uBAAuB;gBAC1B,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,8CAA8C,CAAC,CAAC;oBACzE,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,wDAAwD;gBACxD,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE;oBAChE,MAAM,EAAE,iBAAiB;oBACzB,SAAS,EAAE,QAAQ;oBACnB,UAAU,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC;oBACzC,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YAEL,KAAK,kBAAkB;gBACrB,gDAAgD;gBAChD,OAAO,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YAEpF,KAAK,mBAAmB;gBACtB,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;oBACpB,uBAAuB;oBACvB,OAAO,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,EAAE,mBAAmB,EAAE,QAAQ,CAAC,CAAC;gBACrF,CAAC;gBACD,yBAAyB;gBACzB,OAAO,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,EAAE;oBAChE,MAAM,EAAE,mBAAmB;oBAC3B,SAAS,EAAE,QAAQ;oBACnB,UAAU,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;oBACpD,QAAQ,EAAE,OAAO,CAAC,QAAQ;iBAC3B,CAAC,CAAC;YAEL;gBACE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,EAAE,oCAAoC,CAAC,CAAC;gBAC/D,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,qBAAqB,CACzB,QAAgB,EAChB,MAAwB,EACxB,SAAiB;QAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAE5B,MAAM,MAAM,GAAyB;YACnC,YAAY,EAAE,CAAC;YACf,gBAAgB,EAAE,CAAC;YACnB,2BAA2B,EAAE,CAAC;YAC9B,cAAc,EAAE,CAAC;YACjB,eAAe,EAAE,CAAC;YAClB,UAAU,EAAE,CAAC;YACb,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,IAAI;SACd,CAAC;QAEF,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,uCAAuC,CAAC,CAAC;QAE3E,IAAI,CAAC;YACH,sDAAsD;YACtD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;gBACvC,MAAM,gBAAgB,GAAG,MAAM,KAAK,CAAC,gBAAgB,CACnD,QAAQ,EACR,sBAAsB,MAAM,EAAE,CAC/B,CAAC;gBACF,MAAM,CAAC,cAAc,GAAG,gBAAgB,CAAC;gBACzC,MAAM,CAAC,YAAY,IAAI,gBAAgB,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC/D,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,+CAA+C,CAAC,CAAC;YACrF,CAAC;YAED,6CAA6C;YAC7C,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACpC,MAAM,GAAG,GAAG,yBAAyB,QAAQ,EAAE,CAAC;gBAChD,iDAAiD;gBACjD,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;gBACnE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,8BAA8B,CAAC,CAAC;YAC5D,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBACxE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC/D,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,wCAAwC,CAAC,CAAC;YAC9E,CAAC;YAED,kCAAkC;YAClC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,sBAAsB,CAAC;oBAChC,IAAI,EAAE,QAAQ;oBACd,QAAQ;oBACR,MAAM;oBACN,SAAS;oBACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,cAAc,EAAE,IAAI,CAAC,UAAU;iBAChC,CAAC,CAAC;YACL,CAAC;YAED,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAC3C,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;YAE5C,oBAAoB,CAAC,GAAG,CAAC;gBACvB,OAAO,EAAE,MAAM;gBACf,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aAChD,CAAC,CAAC;YACH,kBAAkB,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;YAErF,MAAM,CAAC,IAAI,CACT,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EACzE,wCAAwC,CACzC,CAAC;YAEF,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,qBAAqB,CAAC,GAAG,EAAE,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,6BAA6B;IAC7B,8EAA8E;IAE9E;;;;;OAKG;IACH,KAAK,CAAC,eAAe,CAAC,QAAgB;QACpC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,yBAAyB,QAAQ,EAAE,CAAC;YAChD,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,MAAM,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,0CAA0C,CAAC,CAAC;YAC9E,OAAO,KAAK,CAAC,CAAC,kDAAkD;QAClE,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAAc,EAAE,QAAc;QACrD,OAAO,IAAI,CAAC,sBAAsB,CAAC,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1E,CAAC;IAED,8EAA8E;IAC9E,gBAAgB;IAChB,8EAA8E;IAE9E;;OAEG;IACK,KAAK,CAAC,QAAQ;QACpB,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,KAAK,GAAG,QAAQ,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB;QAClC,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,GAAG,QAAQ,EAAE,CAAC,SAAS,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAE/D,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE;gBACjD,IAAI,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;oBAC9C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,0CAA0C,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED;;OAEG;IACK,qBAAqB,CAAC,OAAe;QAC3C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAoB,CAAC;YAErD,+BAA+B;YAC/B,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC7C,OAAO;YACT,CAAC;YAED,MAAM,CAAC,KAAK,CACV,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EACpE,iDAAiD,CAClD,CAAC;YAEF,sEAAsE;YACtE,qCAAqC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,kCAAkC,CAAC,CAAC;QAClG,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,sBAAsB,CAAC,KAAsB;QACzD,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,UAAU;IACV,8EAA8E;IAE9E;;OAEG;IACK,mBAAmB,CAAC,MAAwB;QAClD,MAAM,aAAa,GAAuB;YACxC,eAAe;YACf,cAAc;YACd,kBAAkB;YAClB,mBAAmB;SACpB,CAAC;QACF,OAAO,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED;;OAEG;IACK,UAAU,CAAC,OAAe,EAAE,QAAgB;QAClD,OAAO;YACL,IAAI,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;YAC9C,EAAE,EAAE,OAAO;YACX,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;YACjE,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YAC7B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC5B,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IACjD,CAAC;CACF;AAED,gFAAgF;AAChF,sBAAsB;AACtB,gFAAgF;AAEhF,IAAI,qBAAqB,GAAiC,IAAI,CAAC;AAE/D;;GAEG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAA6B;IACpE,IAAI,CAAC,qBAAqB,EAAE,CAAC;QAC3B,qBAAqB,GAAG,IAAI,qBAAqB,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAA6B,EAC7B,IAMC;IAED,OAAO,IAAI,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACjD,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B;IAC9C,IAAI,qBAAqB,EAAE,CAAC;QAC1B,MAAM,qBAAqB,CAAC,IAAI,EAAE,CAAC;QACnC,qBAAqB,GAAG,IAAI,CAAC;IAC/B,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;AACzD,CAAC"}

package/dist/security/token-lifetime.d.ts

@@ -0,0 +1,206 @@
+/**
+ * Token Lifetime Enforcement Service
+ *
+ * Implements token lifetime constraints for CAR ID security hardening.
+ * Enforces maximum TTLs for different token types and triggers proactive
+ * refresh when tokens approach expiration.
+ *
+ * Default TTLs per CAR ID spec:
+ * - Access tokens: 300 seconds (5 minutes)
+ * - Refresh tokens: 86400 seconds (24 hours)
+ * - ID tokens: 300 seconds (5 minutes)
+ * - High-value operations: 60 seconds (1 minute)
+ *
+ * @packageDocumentation
+ */
+import { VorionError } from '../common/errors.js';
+import { type TokenLifetimeConfig, type ActionRequest, type TrustTier } from './types.js';
+/**
+ * Token lifetime error
+ */
+export declare class TokenLifetimeError extends VorionError {
+    code: string;
+    statusCode: number;
+    constructor(message: string, details?: Record<string, unknown>);
+}
+/**
+ * Token expired error
+ */
+export declare class TokenExpiredError extends TokenLifetimeError {
+    code: string;
+    constructor(tokenType: string, expiresAt: Date);
+}
+/**
+ * Token TTL too long error
+ */
+export declare class TokenTTLTooLongError extends TokenLifetimeError {
+    code: string;
+    constructor(tokenType: string, actualTTL: number, maxTTL: number);
+}
+/**
+ * Token type enumeration
+ */
+export type TokenType = 'access' | 'refresh' | 'id';
+/**
+ * JWT payload with standard claims
+ */
+export interface JWTPayload {
+    /** Subject identifier */
+    sub?: string;
+    /** Issuer */
+    iss?: string;
+    /** Audience */
+    aud?: string | string[];
+    /** Expiration time (Unix timestamp) */
+    exp?: number;
+    /** Issued at (Unix timestamp) */
+    iat?: number;
+    /** Not before (Unix timestamp) */
+    nbf?: number;
+    /** JWT ID */
+    jti?: string;
+    /** Additional claims */
+    [key: string]: unknown;
+}
+/**
+ * Token lifetime validation result
+ */
+export interface TokenLifetimeValidationResult {
+    /** Whether the token lifetime is valid */
+    valid: boolean;
+    /** Remaining TTL in seconds */
+    remainingTTL: number;
+    /** Whether refresh is recommended */
+    shouldRefresh: boolean;
+    /** Error message if invalid */
+    error?: string;
+    /** Error code */
+    errorCode?: 'EXPIRED' | 'TTL_TOO_LONG' | 'MISSING_EXP' | 'MISSING_IAT';
+}
+/**
+ * High-value operation types that require shorter token TTL
+ */
+export declare const HIGH_VALUE_OPERATIONS: readonly ["financial_transaction", "pii_access", "external_api_call", "data_export", "privilege_escalation", "delegation_creation", "admin_action", "security_config_change"];
+export type HighValueOperation = (typeof HIGH_VALUE_OPERATIONS)[number];
+/**
+ * Token Lifetime Service for enforcing token TTL constraints
+ *
+ * @example
+ * ```typescript
+ * const tokenLifetime = new TokenLifetimeService({
+ *   accessTokenMaxTTL: 300, // 5 minutes
+ *   refreshTokenMaxTTL: 86400, // 24 hours
+ *   idTokenMaxTTL: 300, // 5 minutes
+ *   highValueOperationTTL: 60, // 1 minute
+ *   refreshThreshold: 0.2, // Refresh when 20% TTL remaining
+ * });
+ *
+ * // Validate token lifetime
+ * const valid = tokenLifetime.validateLifetime(tokenPayload, 'access');
+ *
+ * // Check if refresh needed
+ * const shouldRefresh = tokenLifetime.shouldRefresh(tokenPayload);
+ *
+ * // Check if introspection required
+ * const needsIntrospection = tokenLifetime.requiresIntrospection(request, tier);
+ * ```
+ */
+export declare class TokenLifetimeService {
+    private config;
+    /**
+     * Create a new token lifetime service
+     *
+     * @param config - Token lifetime configuration
+     */
+    constructor(config?: Partial<TokenLifetimeConfig>);
+    /**
+     * Get maximum TTL for a token type
+     *
+     * @param tokenType - Type of token
+     * @param isHighValue - Whether this is for a high-value operation
+     * @returns Maximum TTL in seconds
+     */
+    getMaxTTL(tokenType: TokenType, isHighValue?: boolean): number;
+    /**
+     * Validate token lifetime
+     *
+     * Checks that:
+     * 1. Token has required exp and iat claims
+     * 2. Token is not expired
+     * 3. Token TTL does not exceed maximum allowed
+     *
+     * @param token - JWT payload
+     * @param tokenType - Type of token
+     * @param isHighValue - Whether this is for a high-value operation
+     * @returns Validation result
+     */
+    validateLifetime(token: JWTPayload, tokenType: TokenType, isHighValue?: boolean): TokenLifetimeValidationResult;
+    /**
+     * Check if token should be refreshed
+     *
+     * Returns true if remaining TTL is below the refresh threshold.
+     *
+     * @param token - JWT payload
+     * @returns Whether token should be refreshed
+     */
+    shouldRefresh(token: JWTPayload): boolean;
+    /**
+     * Check if introspection is required for an operation
+     *
+     * Introspection is required for:
+     * - High-value operations (L3+)
+     * - Operations from T4+ trust tiers
+     * - Operations accessing sensitive data
+     *
+     * @param operation - Action request
+     * @param tier - Trust tier
+     * @returns Whether introspection is required
+     */
+    requiresIntrospection(operation: ActionRequest, tier: TrustTier): boolean;
+    /**
+     * Check if an operation is high-value
+     *
+     * @param operation - Action request
+     * @returns Whether operation is high-value
+     */
+    isHighValueOperation(operation: ActionRequest): boolean;
+    /**
+     * Get remaining TTL for a token
+     *
+     * @param token - JWT payload
+     * @returns Remaining TTL in seconds (0 if expired or invalid)
+     */
+    getRemainingTTL(token: JWTPayload): number;
+    /**
+     * Check if a token is expired
+     *
+     * @param token - JWT payload
+     * @returns Whether token is expired
+     */
+    isExpired(token: JWTPayload): boolean;
+    /**
+     * Calculate when a token should be refreshed
+     *
+     * @param token - JWT payload
+     * @returns Timestamp when refresh should occur (null if already should refresh)
+     */
+    getRefreshTime(token: JWTPayload): Date | null;
+    /**
+     * Validate token for high-value operation
+     *
+     * Enforces stricter TTL requirements for high-value operations.
+     *
+     * @param token - JWT payload
+     * @returns Whether token is valid for high-value operation
+     */
+    validateForHighValueOperation(token: JWTPayload): TokenLifetimeValidationResult;
+    /**
+     * Get current configuration
+     */
+    getConfig(): Readonly<TokenLifetimeConfig>;
+}
+/**
+ * Create a token lifetime service with default configuration for CAR ID
+ */
+export declare function createTokenLifetimeService(config?: Partial<TokenLifetimeConfig>): TokenLifetimeService;
+//# sourceMappingURL=token-lifetime.d.ts.map

package/dist/security/token-lifetime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-lifetime.d.ts","sourceRoot":"","sources":["../../src/security/token-lifetime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,aAAa,EAClB,KAAK,SAAS,EAGf,MAAM,YAAY,CAAC;AAyCpB;;GAEG;AACH,qBAAa,kBAAmB,SAAQ,WAAW;IACxC,IAAI,SAA0B;IAC9B,UAAU,SAAO;gBAEd,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;CAI/D;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,kBAAkB;IAC9C,IAAI,SAAmB;gBAEpB,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI;CAI/C;AAED;;GAEG;AACH,qBAAa,oBAAqB,SAAQ,kBAAkB;IACjD,IAAI,SAAwB;gBAEzB,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAQjE;AAMD;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,IAAI,CAAC;AAEpD;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB,yBAAyB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,eAAe;IACf,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACxB,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iCAAiC;IACjC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,aAAa;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,6BAA6B;IAC5C,0CAA0C;IAC1C,KAAK,EAAE,OAAO,CAAC;IACf,+BAA+B;IAC/B,YAAY,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,aAAa,EAAE,OAAO,CAAC;IACvB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iBAAiB;IACjB,SAAS,CAAC,EAAE,SAAS,GAAG,cAAc,GAAG,aAAa,GAAG,aAAa,CAAC;CACxE;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB,+KASxB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAMxE;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,MAAM,CAAsB;IAEpC;;;;OAIG;gBACS,MAAM,GAAE,OAAO,CAAC,mBAAmB,CAAM;IAkBrD;;;;;;OAMG;IACH,SAAS,CAAC,SAAS,EAAE,SAAS,EAAE,WAAW,GAAE,OAAe,GAAG,MAAM;IAkBrE;;;;;;;;;;;;OAYG;IACH,gBAAgB,CACd,KAAK,EAAE,UAAU,EACjB,SAAS,EAAE,SAAS,EACpB,WAAW,GAAE,OAAe,GAC3B,6BAA6B;IA6EhC;;;;;;;OAOG;IACH,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO;IAazC;;;;;;;;;;;OAWG;IACH,qBAAqB,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO;IAsBzE;;;;;OAKG;IACH,oBAAoB,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO;IAsBvD;;;;;OAKG;IACH,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM;IAS1C;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO;IASrC;;;;;OAKG;IACH,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,GAAG,IAAI;IAiB9C;;;;;;;OAOG;IACH,6BAA6B,CAAC,KAAK,EAAE,UAAU,GAAG,6BAA6B;IAI/E;;OAEG;IACH,SAAS,IAAI,QAAQ,CAAC,mBAAmB,CAAC;CAG3C;AAED;;GAEG;AACH,wBAAgB,0BAA0B,CACxC,MAAM,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC,GACpC,oBAAoB,CAEtB"}

package/dist/security/token-lifetime.js

@@ -0,0 +1,388 @@
+/**
+ * Token Lifetime Enforcement Service
+ *
+ * Implements token lifetime constraints for CAR ID security hardening.
+ * Enforces maximum TTLs for different token types and triggers proactive
+ * refresh when tokens approach expiration.
+ *
+ * Default TTLs per CAR ID spec:
+ * - Access tokens: 300 seconds (5 minutes)
+ * - Refresh tokens: 86400 seconds (24 hours)
+ * - ID tokens: 300 seconds (5 minutes)
+ * - High-value operations: 60 seconds (1 minute)
+ *
+ * @packageDocumentation
+ */
+import { createLogger } from '../common/logger.js';
+import { VorionError } from '../common/errors.js';
+import { Counter, Histogram } from 'prom-client';
+import { vorionRegistry } from '../common/metrics-registry.js';
+import { DEFAULT_TOKEN_LIFETIME_CONFIG, tokenLifetimeConfigSchema, } from './types.js';
+const logger = createLogger({ component: 'security-token-lifetime' });
+// =============================================================================
+// Metrics
+// =============================================================================
+const tokenLifetimeValidations = new Counter({
+    name: 'vorion_security_token_lifetime_validations_total',
+    help: 'Total token lifetime validations',
+    labelNames: ['type', 'result'], // type: access/refresh/id, result: valid/expired/too_long
+    registers: [vorionRegistry],
+});
+const tokenTTLRemaining = new Histogram({
+    name: 'vorion_security_token_ttl_remaining_seconds',
+    help: 'Distribution of remaining TTL when tokens are validated',
+    labelNames: ['type'],
+    buckets: [0, 10, 30, 60, 120, 300, 600, 1800, 3600],
+    registers: [vorionRegistry],
+});
+const tokenRefreshRecommendations = new Counter({
+    name: 'vorion_security_token_refresh_recommendations_total',
+    help: 'Total times token refresh was recommended',
+    labelNames: ['type'],
+    registers: [vorionRegistry],
+});
+const introspectionRequirements = new Counter({
+    name: 'vorion_security_introspection_requirements_total',
+    help: 'Total times introspection was required for operations',
+    labelNames: ['operation_type', 'tier'],
+    registers: [vorionRegistry],
+});
+// =============================================================================
+// Errors
+// =============================================================================
+/**
+ * Token lifetime error
+ */
+export class TokenLifetimeError extends VorionError {
+    code = 'TOKEN_LIFETIME_ERROR';
+    statusCode = 401;
+    constructor(message, details) {
+        super(message, details);
+        this.name = 'TokenLifetimeError';
+    }
+}
+/**
+ * Token expired error
+ */
+export class TokenExpiredError extends TokenLifetimeError {
+    code = 'TOKEN_EXPIRED';
+    constructor(tokenType, expiresAt) {
+        super(`${tokenType} token has expired`, { tokenType, expiresAt: expiresAt.toISOString() });
+        this.name = 'TokenExpiredError';
+    }
+}
+/**
+ * Token TTL too long error
+ */
+export class TokenTTLTooLongError extends TokenLifetimeError {
+    code = 'TOKEN_TTL_TOO_LONG';
+    constructor(tokenType, actualTTL, maxTTL) {
+        super(`${tokenType} token TTL exceeds maximum allowed`, {
+            tokenType,
+            actualTTL,
+            maxTTL,
+        });
+        this.name = 'TokenTTLTooLongError';
+    }
+}
+/**
+ * High-value operation types that require shorter token TTL
+ */
+export const HIGH_VALUE_OPERATIONS = [
+    'financial_transaction',
+    'pii_access',
+    'external_api_call',
+    'data_export',
+    'privilege_escalation',
+    'delegation_creation',
+    'admin_action',
+    'security_config_change',
+];
+// =============================================================================
+// Token Lifetime Service
+// =============================================================================
+/**
+ * Token Lifetime Service for enforcing token TTL constraints
+ *
+ * @example
+ * ```typescript
+ * const tokenLifetime = new TokenLifetimeService({
+ *   accessTokenMaxTTL: 300, // 5 minutes
+ *   refreshTokenMaxTTL: 86400, // 24 hours
+ *   idTokenMaxTTL: 300, // 5 minutes
+ *   highValueOperationTTL: 60, // 1 minute
+ *   refreshThreshold: 0.2, // Refresh when 20% TTL remaining
+ * });
+ *
+ * // Validate token lifetime
+ * const valid = tokenLifetime.validateLifetime(tokenPayload, 'access');
+ *
+ * // Check if refresh needed
+ * const shouldRefresh = tokenLifetime.shouldRefresh(tokenPayload);
+ *
+ * // Check if introspection required
+ * const needsIntrospection = tokenLifetime.requiresIntrospection(request, tier);
+ * ```
+ */
+export class TokenLifetimeService {
+    config;
+    /**
+     * Create a new token lifetime service
+     *
+     * @param config - Token lifetime configuration
+     */
+    constructor(config = {}) {
+        const parsed = tokenLifetimeConfigSchema.parse({
+            ...DEFAULT_TOKEN_LIFETIME_CONFIG,
+            ...config,
+        });
+        this.config = { ...DEFAULT_TOKEN_LIFETIME_CONFIG, ...parsed };
+        logger.info({
+            accessTokenMaxTTL: this.config.accessTokenMaxTTL,
+            refreshTokenMaxTTL: this.config.refreshTokenMaxTTL,
+            highValueOperationTTL: this.config.highValueOperationTTL,
+            refreshThreshold: this.config.refreshThreshold,
+        }, 'Token lifetime service initialized');
+    }
+    /**
+     * Get maximum TTL for a token type
+     *
+     * @param tokenType - Type of token
+     * @param isHighValue - Whether this is for a high-value operation
+     * @returns Maximum TTL in seconds
+     */
+    getMaxTTL(tokenType, isHighValue = false) {
+        // High-value operations always use the shortest TTL
+        if (isHighValue && tokenType === 'access') {
+            return this.config.highValueOperationTTL;
+        }
+        switch (tokenType) {
+            case 'access':
+                return this.config.accessTokenMaxTTL;
+            case 'refresh':
+                return this.config.refreshTokenMaxTTL;
+            case 'id':
+                return this.config.idTokenMaxTTL;
+            default:
+                return this.config.accessTokenMaxTTL;
+        }
+    }
+    /**
+     * Validate token lifetime
+     *
+     * Checks that:
+     * 1. Token has required exp and iat claims
+     * 2. Token is not expired
+     * 3. Token TTL does not exceed maximum allowed
+     *
+     * @param token - JWT payload
+     * @param tokenType - Type of token
+     * @param isHighValue - Whether this is for a high-value operation
+     * @returns Validation result
+     */
+    validateLifetime(token, tokenType, isHighValue = false) {
+        // Check for required claims
+        if (token.exp === undefined) {
+            tokenLifetimeValidations.inc({ type: tokenType, result: 'missing_exp' });
+            return {
+                valid: false,
+                remainingTTL: 0,
+                shouldRefresh: false,
+                error: 'Token missing exp claim',
+                errorCode: 'MISSING_EXP',
+            };
+        }
+        if (token.iat === undefined) {
+            tokenLifetimeValidations.inc({ type: tokenType, result: 'missing_iat' });
+            return {
+                valid: false,
+                remainingTTL: 0,
+                shouldRefresh: false,
+                error: 'Token missing iat claim',
+                errorCode: 'MISSING_IAT',
+            };
+        }
+        const now = Math.floor(Date.now() / 1000);
+        const remainingTTL = token.exp - now;
+        const totalTTL = token.exp - token.iat;
+        const maxTTL = this.getMaxTTL(tokenType, isHighValue);
+        // Record TTL metric
+        tokenTTLRemaining.observe({ type: tokenType }, Math.max(0, remainingTTL));
+        // Check if expired
+        if (remainingTTL <= 0) {
+            tokenLifetimeValidations.inc({ type: tokenType, result: 'expired' });
+            return {
+                valid: false,
+                remainingTTL: 0,
+                shouldRefresh: false,
+                error: 'Token has expired',
+                errorCode: 'EXPIRED',
+            };
+        }
+        // Check if TTL exceeds maximum
+        if (totalTTL > maxTTL) {
+            tokenLifetimeValidations.inc({ type: tokenType, result: 'too_long' });
+            logger.warn({ tokenType, totalTTL, maxTTL, jti: token.jti }, 'Token TTL exceeds maximum allowed');
+            return {
+                valid: false,
+                remainingTTL,
+                shouldRefresh: true,
+                error: `Token TTL (${totalTTL}s) exceeds maximum (${maxTTL}s)`,
+                errorCode: 'TTL_TOO_LONG',
+            };
+        }
+        // Check if refresh should be recommended
+        const refreshThreshold = totalTTL * this.config.refreshThreshold;
+        const shouldRefresh = remainingTTL <= refreshThreshold;
+        if (shouldRefresh) {
+            tokenRefreshRecommendations.inc({ type: tokenType });
+        }
+        tokenLifetimeValidations.inc({ type: tokenType, result: 'valid' });
+        return {
+            valid: true,
+            remainingTTL,
+            shouldRefresh,
+        };
+    }
+    /**
+     * Check if token should be refreshed
+     *
+     * Returns true if remaining TTL is below the refresh threshold.
+     *
+     * @param token - JWT payload
+     * @returns Whether token should be refreshed
+     */
+    shouldRefresh(token) {
+        if (token.exp === undefined || token.iat === undefined) {
+            return true; // Refresh tokens with missing claims
+        }
+        const now = Math.floor(Date.now() / 1000);
+        const remainingTTL = token.exp - now;
+        const totalTTL = token.exp - token.iat;
+        const refreshThreshold = totalTTL * this.config.refreshThreshold;
+        return remainingTTL <= refreshThreshold;
+    }
+    /**
+     * Check if introspection is required for an operation
+     *
+     * Introspection is required for:
+     * - High-value operations (L3+)
+     * - Operations from T4+ trust tiers
+     * - Operations accessing sensitive data
+     *
+     * @param operation - Action request
+     * @param tier - Trust tier
+     * @returns Whether introspection is required
+     */
+    requiresIntrospection(operation, tier) {
+        // T4+ always requires introspection
+        if (tier >= 4) {
+            introspectionRequirements.inc({ operation_type: operation.actionType, tier: tier.toString() });
+            return true;
+        }
+        // High-value operations for T2+ require introspection
+        if (tier >= 2 && this.isHighValueOperation(operation)) {
+            introspectionRequirements.inc({ operation_type: operation.actionType, tier: tier.toString() });
+            return true;
+        }
+        // L3+ operations require introspection
+        if (operation.actionLevel >= 3) {
+            introspectionRequirements.inc({ operation_type: operation.actionType, tier: tier.toString() });
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Check if an operation is high-value
+     *
+     * @param operation - Action request
+     * @returns Whether operation is high-value
+     */
+    isHighValueOperation(operation) {
+        // Check explicit flag
+        if (operation.isHighValue) {
+            return true;
+        }
+        // Check operation type
+        const actionType = operation.actionType.toLowerCase();
+        for (const highValue of HIGH_VALUE_OPERATIONS) {
+            if (actionType.includes(highValue) || actionType === highValue) {
+                return true;
+            }
+        }
+        // Check action level
+        if (operation.actionLevel >= 3) {
+            return true;
+        }
+        return false;
+    }
+    /**
+     * Get remaining TTL for a token
+     *
+     * @param token - JWT payload
+     * @returns Remaining TTL in seconds (0 if expired or invalid)
+     */
+    getRemainingTTL(token) {
+        if (token.exp === undefined) {
+            return 0;
+        }
+        const now = Math.floor(Date.now() / 1000);
+        return Math.max(0, token.exp - now);
+    }
+    /**
+     * Check if a token is expired
+     *
+     * @param token - JWT payload
+     * @returns Whether token is expired
+     */
+    isExpired(token) {
+        if (token.exp === undefined) {
+            return true; // Treat tokens without exp as expired
+        }
+        const now = Math.floor(Date.now() / 1000);
+        return token.exp <= now;
+    }
+    /**
+     * Calculate when a token should be refreshed
+     *
+     * @param token - JWT payload
+     * @returns Timestamp when refresh should occur (null if already should refresh)
+     */
+    getRefreshTime(token) {
+        if (token.exp === undefined || token.iat === undefined) {
+            return null;
+        }
+        const totalTTL = token.exp - token.iat;
+        const refreshThreshold = totalTTL * this.config.refreshThreshold;
+        const refreshTime = token.exp - refreshThreshold;
+        const now = Math.floor(Date.now() / 1000);
+        if (refreshTime <= now) {
+            return null; // Should already refresh
+        }
+        return new Date(refreshTime * 1000);
+    }
+    /**
+     * Validate token for high-value operation
+     *
+     * Enforces stricter TTL requirements for high-value operations.
+     *
+     * @param token - JWT payload
+     * @returns Whether token is valid for high-value operation
+     */
+    validateForHighValueOperation(token) {
+        return this.validateLifetime(token, 'access', true);
+    }
+    /**
+     * Get current configuration
+     */
+    getConfig() {
+        return { ...this.config };
+    }
+}
+/**
+ * Create a token lifetime service with default configuration for CAR ID
+ */
+export function createTokenLifetimeService(config) {
+    return new TokenLifetimeService(config);
+}
+//# sourceMappingURL=token-lifetime.js.map

package/dist/security/token-lifetime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-lifetime.js","sourceRoot":"","sources":["../../src/security/token-lifetime.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAIL,6BAA6B,EAC7B,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,SAAS,EAAE,yBAAyB,EAAE,CAAC,CAAC;AAEtE,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,wBAAwB,GAAG,IAAI,OAAO,CAAC;IAC3C,IAAI,EAAE,kDAAkD;IACxD,IAAI,EAAE,kCAAkC;IACxC,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAU,EAAE,0DAA0D;IACnG,SAAS,EAAE,CAAC,cAAc,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,iBAAiB,GAAG,IAAI,SAAS,CAAC;IACtC,IAAI,EAAE,6CAA6C;IACnD,IAAI,EAAE,yDAAyD;IAC/D,UAAU,EAAE,CAAC,MAAM,CAAU;IAC7B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC;IACnD,SAAS,EAAE,CAAC,cAAc,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,2BAA2B,GAAG,IAAI,OAAO,CAAC;IAC9C,IAAI,EAAE,qDAAqD;IAC3D,IAAI,EAAE,2CAA2C;IACjD,UAAU,EAAE,CAAC,MAAM,CAAU;IAC7B,SAAS,EAAE,CAAC,cAAc,CAAC;CAC5B,CAAC,CAAC;AAEH,MAAM,yBAAyB,GAAG,IAAI,OAAO,CAAC;IAC5C,IAAI,EAAE,kDAAkD;IACxD,IAAI,EAAE,uDAAuD;IAC7D,UAAU,EAAE,CAAC,gBAAgB,EAAE,MAAM,CAAU;IAC/C,SAAS,EAAE,CAAC,cAAc,CAAC;CAC5B,CAAC,CAAC;AAEH,gFAAgF;AAChF,SAAS;AACT,gFAAgF;AAEhF;;GAEG;AACH,MAAM,OAAO,kBAAmB,SAAQ,WAAW;IACxC,IAAI,GAAG,sBAAsB,CAAC;IAC9B,UAAU,GAAG,GAAG,CAAC;IAE1B,YAAY,OAAe,EAAE,OAAiC;QAC5D,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,kBAAkB;IAC9C,IAAI,GAAG,eAAe,CAAC;IAEhC,YAAY,SAAiB,EAAE,SAAe;QAC5C,KAAK,CAAC,GAAG,SAAS,oBAAoB,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC3F,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,oBAAqB,SAAQ,kBAAkB;IACjD,IAAI,GAAG,oBAAoB,CAAC;IAErC,YAAY,SAAiB,EAAE,SAAiB,EAAE,MAAc;QAC9D,KAAK,CAAC,GAAG,SAAS,oCAAoC,EAAE;YACtD,SAAS;YACT,SAAS;YACT,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAiDD;;GAEG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,uBAAuB;IACvB,YAAY;IACZ,mBAAmB;IACnB,aAAa;IACb,sBAAsB;IACtB,qBAAqB;IACrB,cAAc;IACd,wBAAwB;CAChB,CAAC;AAIX,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,OAAO,oBAAoB;IACvB,MAAM,CAAsB;IAEpC;;;;OAIG;IACH,YAAY,SAAuC,EAAE;QACnD,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC;YAC7C,GAAG,6BAA6B;YAChC,GAAG,MAAM;SACV,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,EAAE,GAAG,6BAA6B,EAAE,GAAG,MAAM,EAAE,CAAC;QAE9D,MAAM,CAAC,IAAI,CACT;YACE,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB;YAChD,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB;YAClD,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,qBAAqB;YACxD,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;SAC/C,EACD,oCAAoC,CACrC,CAAC;IACJ,CAAC;IAED;;;;;;OAMG;IACH,SAAS,CAAC,SAAoB,EAAE,cAAuB,KAAK;QAC1D,oDAAoD;QACpD,IAAI,WAAW,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAC3C,CAAC;QAED,QAAQ,SAAS,EAAE,CAAC;YAClB,KAAK,QAAQ;gBACX,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;YACvC,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YACxC,KAAK,IAAI;gBACP,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC;YACnC;gBACE,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC;QACzC,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;OAYG;IACH,gBAAgB,CACd,KAAiB,EACjB,SAAoB,EACpB,cAAuB,KAAK;QAE5B,4BAA4B;QAC5B,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5B,wBAAwB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YACzE,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,YAAY,EAAE,CAAC;gBACf,aAAa,EAAE,KAAK;gBACpB,KAAK,EAAE,yBAAyB;gBAChC,SAAS,EAAE,aAAa;aACzB,CAAC;QACJ,CAAC;QAED,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5B,wBAAwB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;YACzE,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,YAAY,EAAE,CAAC;gBACf,aAAa,EAAE,KAAK;gBACpB,KAAK,EAAE,yBAAyB;gBAChC,SAAS,EAAE,aAAa;aACzB,CAAC;QACJ,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QAEtD,oBAAoB;QACpB,iBAAiB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC;QAE1E,mBAAmB;QACnB,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YACtB,wBAAwB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;YACrE,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,YAAY,EAAE,CAAC;gBACf,aAAa,EAAE,KAAK;gBACpB,KAAK,EAAE,mBAAmB;gBAC1B,SAAS,EAAE,SAAS;aACrB,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,IAAI,QAAQ,GAAG,MAAM,EAAE,CAAC;YACtB,wBAAwB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YACtE,MAAM,CAAC,IAAI,CACT,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAC/C,mCAAmC,CACpC,CAAC;YACF,OAAO;gBACL,KAAK,EAAE,KAAK;gBACZ,YAAY;gBACZ,aAAa,EAAE,IAAI;gBACnB,KAAK,EAAE,cAAc,QAAQ,uBAAuB,MAAM,IAAI;gBAC9D,SAAS,EAAE,cAAc;aAC1B,CAAC;QACJ,CAAC;QAED,yCAAyC;QACzC,MAAM,gBAAgB,GAAG,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACjE,MAAM,aAAa,GAAG,YAAY,IAAI,gBAAgB,CAAC;QAEvD,IAAI,aAAa,EAAE,CAAC;YAClB,2BAA2B,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACvD,CAAC;QAED,wBAAwB,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAEnE,OAAO;YACL,KAAK,EAAE,IAAI;YACX,YAAY;YACZ,aAAa;SACd,CAAC;IACJ,CAAC;IAED;;;;;;;OAOG;IACH,aAAa,CAAC,KAAiB;QAC7B,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,CAAC,qCAAqC;QACpD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACvC,MAAM,gBAAgB,GAAG,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QAEjE,OAAO,YAAY,IAAI,gBAAgB,CAAC;IAC1C,CAAC;IAED;;;;;;;;;;;OAWG;IACH,qBAAqB,CAAC,SAAwB,EAAE,IAAe;QAC7D,oCAAoC;QACpC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,yBAAyB,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC/F,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sDAAsD;QACtD,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,CAAC;YACtD,yBAAyB,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC/F,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uCAAuC;QACvC,IAAI,SAAS,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC;YAC/B,yBAAyB,CAAC,GAAG,CAAC,EAAE,cAAc,EAAE,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC/F,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,oBAAoB,CAAC,SAAwB;QAC3C,sBAAsB;QACtB,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,uBAAuB;QACvB,MAAM,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC;QACtD,KAAK,MAAM,SAAS,IAAI,qBAAqB,EAAE,CAAC;YAC9C,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC/D,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,qBAAqB;QACrB,IAAI,SAAS,CAAC,WAAW,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,KAAiB;QAC/B,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACtC,CAAC;IAED;;;;;OAKG;IACH,SAAS,CAAC,KAAiB;QACzB,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC,CAAC,sCAAsC;QACrD,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,cAAc,CAAC,KAAiB;QAC9B,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;QACvC,MAAM,gBAAgB,GAAG,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACjE,MAAM,WAAW,GAAG,KAAK,CAAC,GAAG,GAAG,gBAAgB,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAE1C,IAAI,WAAW,IAAI,GAAG,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC,CAAC,yBAAyB;QACxC,CAAC;QAED,OAAO,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACtC,CAAC;IAED;;;;;;;OAOG;IACH,6BAA6B,CAAC,KAAiB;QAC7C,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC5B,CAAC;CACF;AAED;;GAEG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAqC;IAErC,OAAO,IAAI,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC"}