@voyant-travel/auth 0.140.2 → 0.141.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/node-runtime.d.ts +24 -0
- package/dist/node-runtime.js +80 -5
- package/dist/node-runtime.js.map +1 -1
- package/dist/server.d.ts +38 -2
- package/dist/server.js +8 -2
- package/dist/server.js.map +1 -1
- package/dist/storefront-customer-auth-resolver.d.ts +46 -1
- package/dist/storefront-customer-auth-resolver.js +88 -7
- package/dist/storefront-customer-auth-resolver.js.map +1 -1
- package/dist/storefront-local-adapter.js +27 -2
- package/dist/storefront-local-adapter.js.map +1 -1
- package/dist/storefront-runtime-port.d.ts +6 -0
- package/dist/storefront-runtime-port.js +1 -0
- package/dist/storefront-runtime-port.js.map +1 -1
- package/package.json +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"storefront-local-adapter.js","sourceRoot":"","sources":["../src/storefront-local-adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAML,iBAAiB,EACjB,iCAAiC,EACjC,WAAW,GACZ,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAA;AAE3C,OAAO,EAEL,kCAAkC,GACnC,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,gCAAgC,EAChC,iCAAiC,EACjC,wCAAwC,EACxC,sCAAsC,EACtC,oBAAoB,GACrB,MAAM,yBAAyB,CAAA;AAahC,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,SAAS,eAAe,CAAC,GAAqB;IAC5C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;QAC1B,cAAc,EAAE,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC;QACvC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA2B;IAC9C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;QACtB,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;QACjD,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;QAC/C,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAO5C;IACC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAA;IAEjC,yEAAyE;IACzE,KAAK,UAAU,sBAAsB,CACnC,OAAiC,EACjC,YAAoB;QAEpB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;aAC3B,MAAM,EAAE;aACR,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,YAAY,CAAC,EAChC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CACvD,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,CAAA;QACrE,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,UAAU,yCAAyC,CACtD,OAAiC,EACjC,YAAoB,EACpB,OAAiC;QAEjC,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAA;QAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE;aAC1B,MAAM,CAAC,EAAE,QAAQ,EAAE,iCAAiC,CAAC,QAAQ,EAAE,CAAC;aAChE,IAAI,CAAC,iCAAiC,CAAC;aACvC,KAAK,CAAC,EAAE,CAAC,iCAAiC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;QAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC3D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,oBAAoB,CAC5B,0BAA0B,QAAQ,iDAAiD,CACpF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,sBAAsB,CACnC,OAAiC,EACjC,YAAoB,EACpB,KAAgC;QAEhC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;aAC3B,MAAM,CAAC,WAAW,CAAC;aACnB,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aACxC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,YAAY,CAAC,EAChC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CACvD,CACF;aACA,SAAS,EAAE,CAAA;QACd,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,CAAA;QACrE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,OAAiC,EACjC,UAA4B,EAC5B,IAAiC,EACjC,IAAoB;QAEpB,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAA;QACtD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;aAC3B,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CAAC;YACN,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,IAAI;YACJ,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI;SAC3B,CAAC;aACD,SAAS,EAAE,CAAA;QACd,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,CAAC,CAAA;QAClF,OAAO,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAA;IACxD,CAAC;IAED,OAAO;QACL,KAAK,CAAC,eAAe,CAAC,OAAO;YAC3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC1B,MAAM,EAAE;iBACR,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;iBAC7D,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAA;YACvC,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAClC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY;YACvC,OAAO,eAAe,CAAC,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;QAC7E,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK;YACnC,MAAM,OAAO,GAAG,sCAAsC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACrE,IAAI,gCAAgC,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,oBAAoB,CAC5B,wFAAwF,CACzF,CAAA;YACH,CAAC;YACD,MAAM,aAAa,GAAG,wCAAwC,CAC5D,KAAK,CAAC,aAAa,IAAI;gBACrB,YAAY,EAAE,CAAC,UAAU,CAAC;gBAC1B,cAAc,EAAE,MAAM;gBACtB,kBAAkB,EAAE,UAAU;aAC/B,CACF,CAAA;YACD,MAAM,cAAc,GAAG,iCAAiC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;YAC9E,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACrD,MAAM,IAAI,oBAAoB,CAAC,uDAAuD,CAAC,CAAA;YACzF,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YAC9B,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,oBAAoB,CAAC,8BAA8B,CAAC,CAAA;YACzE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC3B,MAAM,CAAC,WAAW,CAAC;iBACnB,MAAM,CAAC;gBACN,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBACvB,IAAI;gBACJ,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,KAAK,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC1E,OAAO;gBACP,aAAa;gBACb,cAAc;gBACd,eAAe,EAAE,IAAI;aACtB,CAAC;iBACD,SAAS,EAAE,CAAA;YACd,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,oBAAoB,CAAC,8BAA8B,CAAC,CAAA;YACxE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;QAC7B,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK;YACjD,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,MAAM,GAA8B,EAAE,CAAA;YAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YAC7D,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,CAAC,cAAc,GAAG,iCAAiC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;YACjF,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,CAAC,aAAa,GAAG,wCAAwC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;YACtF,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,sCAAsC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACrE,MAAM,yCAAyC,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;gBAC/E,MAAM,CAAC,OAAO,GAAG,OAAO,CAAA;YAC1B,CAAC;YACD,OAAO,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;QAC9D,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY;YAC1C,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,OAAO,CAAC,EAAE;iBACb,MAAM,CAAC,WAAW,CAAC;iBACnB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,YAAY,CAAC,EAChC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CACvD,CACF,CAAA;QACL,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO;YACpD,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,OAAO,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE;gBACnD,cAAc,EAAE,iCAAiC,CAAC,OAAO,CAAC;aAC3D,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY;YACrC,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC1B,MAAM,EAAE;iBACR,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;iBACvD,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAA;YAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC9B,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI;YACjD,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACtE,OAAO,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACrD,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK;YAC7C,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACtE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAChC,MAAM,EAAE;iBACR,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CACvF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,oBAAoB,CAAC,sCAAsC,CAAC,CAAA;YACrF,MAAM,OAAO,CAAC,EAAE;iBACb,MAAM,CAAC,iBAAiB,CAAC;iBACzB,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACrD,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;YACzC,OAAO,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;QACvE,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK;YAC7C,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,OAAO,CAAC,EAAE;iBACb,MAAM,CAAC,iBAAiB,CAAC;iBACzB,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACrD,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CACvF,CAAA;QACL,CAAC;QAED,KAAK,CAAC,yBAAyB,CAC7B,OAAiC,EACjC,KAAa;YAEb,IAAI,wBAAwB,CAAC,KAAK,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAA;YACzD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAA;YACnD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC3B,MAAM,EAAE;iBACR,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;iBACjD,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAA;YACtC,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAClC,MAAM,EAAE;iBACR,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;iBAC3C,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAA;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,EAAE;qBACb,MAAM,CAAC,iBAAiB,CAAC;qBACzB,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;qBAC/B,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAA;QAC3E,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM;YACrD,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,OAAO,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE;gBACnD,aAAa,EAAE,wCAAwC,CAAC,MAAM,CAAC;aAChE,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO;YAChD,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,UAAU,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAA;YAClE,MAAM,yCAAyC,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAA;YAClF,OAAO,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAA;QAC/E,CAAC;QAED,KAAK,CAAC,uBAAuB,CAAC,OAAO,EAAE,YAAY;YACjD,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC1B,MAAM,EAAE;iBACR,IAAI,CAAC,iCAAiC,CAAC;iBACvC,KAAK,CAAC,EAAE,CAAC,iCAAiC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;YAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,CAGxB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;YACzC,OAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAW,CAAC,GAAG,CACnD,CAAC,QAAQ,EAAyC,EAAE;gBAClD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACpC,OAAO;oBACL,QAAQ;oBACR,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC;oBACxB,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,IAAI;iBAChD,CAAA;YACH,CAAC,CACF,CAAA;QACH,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW;YACtE,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACtE,MAAM,MAAM,GAAG,kCAAkC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;YACxE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;YACvF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAChC,MAAM,CAAC,EAAE,EAAE,EAAE,iCAAiC,CAAC,EAAE,EAAE,CAAC;iBACpD,IAAI,CAAC,iCAAiC,CAAC;iBACvC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iCAAiC,CAAC,YAAY,EAAE,YAAY,CAAC,EAChE,EAAE,CAAC,iCAAiC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACzD,CACF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,OAAO,CAAC,EAAE;qBACb,MAAM,CAAC,iCAAiC,CAAC;qBACzC,GAAG,CAAC,EAAE,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;qBAC/D,KAAK,CAAC,EAAE,CAAC,iCAAiC,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;gBAC/D,OAAM;YACR,CAAC;YACD,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC,MAAM,CAAC;gBAChE,YAAY;gBACZ,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,QAAQ;gBACR,oBAAoB,EAAE,SAAS;aAChC,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,wBAAwB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ;YAC5D,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,OAAO,CAAC,EAAE;iBACb,MAAM,CAAC,iCAAiC,CAAC;iBACzC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iCAAiC,CAAC,YAAY,EAAE,YAAY,CAAC,EAChE,EAAE,CAAC,iCAAiC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACzD,CACF,CAAA;QACL,CAAC;QAED,KAAK,CAAC,0BAA0B,CAC9B,OAAiC,EACjC,YAAoB,EACpB,SAA0D;YAE1D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAA;YACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC1B,MAAM,EAAE;iBACR,IAAI,CAAC,iCAAiC,CAAC;iBACvC,KAAK,CAAC,EAAE,CAAC,iCAAiC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;YAC1E,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC9C,MAAM,QAAQ,GAA0C,EAAE,CAAA;YAC1D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,SAAQ;gBAC/C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;gBAChE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA2B,CAAA;YAC1E,CAAC;YACD,OAAO,QAAQ,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["/**\n * Local storefront runtime provider — backs {@link storefrontRuntimePort} with\n * the deployment's own runtime DB (self-host). Mirrors the team-management\n * local adapter: every operator write is bounded to `context.organizationId`,\n * and request-time resolution (`resolveStorefrontByApiKey`) is org-agnostic.\n */\nimport {\n type InsertStorefront,\n type SelectStorefront,\n type SelectStorefrontApiKey,\n type SelectStorefrontCustomerAuthCredential,\n type StorefrontCustomerAuthSocialProvider,\n storefrontApiKeys,\n storefrontCustomerAuthCredentials,\n storefronts,\n} from \"@voyant-travel/db/schema/iam\"\nimport { and, desc, eq } from \"drizzle-orm\"\n\nimport {\n type StorefrontCredentialCipher,\n validateStorefrontCredentialBundle,\n} from \"./storefront-credentials.js\"\nimport {\n classifyStorefrontApiKey,\n generateStorefrontApiKey,\n hashStorefrontApiKey,\n} from \"./storefront-keys.js\"\nimport {\n enabledStorefrontSocialProviders,\n normalizeStorefrontAllowedOrigins,\n normalizeStorefrontCustomerAccountPolicy,\n normalizeStorefrontCustomerAuthMethods,\n StorefrontInputError,\n} from \"./storefront-origins.js\"\nimport type {\n IssuedStorefrontApiKeyDto,\n ResolvedStorefrontApiKey,\n ResolvedStorefrontProviderCredentials,\n StorefrontApiKeyDto,\n StorefrontDto,\n StorefrontProviderCredentialStatusDto,\n StorefrontRequestContext,\n StorefrontResolveContext,\n StorefrontRuntimeProvider,\n} from \"./storefront-runtime-port.js\"\n\nexport { isStorefrontOriginAllowed } from \"./storefront-origins.js\"\n\nfunction toStorefrontDto(row: SelectStorefront): StorefrontDto {\n return {\n id: row.id,\n organizationId: row.organizationId,\n name: row.name,\n slug: row.slug,\n hostingKind: row.hostingKind,\n siteId: row.siteId ?? null,\n allowedOrigins: [...row.allowedOrigins],\n methods: row.methods,\n accountPolicy: row.accountPolicy,\n hostOnlyCookies: row.hostOnlyCookies,\n createdAt: row.createdAt.toISOString(),\n updatedAt: row.updatedAt.toISOString(),\n }\n}\n\nfunction toApiKeyDto(row: SelectStorefrontApiKey): StorefrontApiKeyDto {\n return {\n id: row.id,\n storefrontId: row.storefrontId,\n kind: row.kind,\n tokenPreview: row.tokenPreview,\n name: row.name ?? null,\n lastUsedAt: row.lastUsedAt?.toISOString() ?? null,\n revokedAt: row.revokedAt?.toISOString() ?? null,\n createdAt: row.createdAt.toISOString(),\n }\n}\n\nexport function createLocalStorefrontAdapter(options: {\n /**\n * Resolve the KMS-backed credential cipher for a deployment. Called with the\n * request bindings so per-deployment KMS config is honoured; the self-host\n * host passes `createKmsStorefrontCredentialCipher(env)`.\n */\n resolveCipher: (bindings: Record<string, unknown>) => StorefrontCredentialCipher\n}): StorefrontRuntimeProvider {\n const { resolveCipher } = options\n\n /** Load a storefront and prove it belongs to the acting organization. */\n async function requireOwnedStorefront(\n context: StorefrontRequestContext,\n storefrontId: string,\n ): Promise<SelectStorefront> {\n const [row] = await context.db\n .select()\n .from(storefronts)\n .where(\n and(\n eq(storefronts.id, storefrontId),\n eq(storefronts.organizationId, context.organizationId),\n ),\n )\n .limit(1)\n if (!row) throw new StorefrontInputError(\"Storefront was not found.\")\n return row\n }\n\n async function requireCredentialsForEnabledSocialMethods(\n context: StorefrontRequestContext,\n storefrontId: string,\n methods: StorefrontDto[\"methods\"],\n ): Promise<void> {\n const providers = enabledStorefrontSocialProviders(methods)\n if (providers.length === 0) return\n const rows = await context.db\n .select({ provider: storefrontCustomerAuthCredentials.provider })\n .from(storefrontCustomerAuthCredentials)\n .where(eq(storefrontCustomerAuthCredentials.storefrontId, storefrontId))\n const configured = new Set(rows.map((row) => row.provider))\n for (const provider of providers) {\n if (!configured.has(provider)) {\n throw new StorefrontInputError(\n `Customer auth provider ${provider} cannot be enabled without a stored credential.`,\n )\n }\n }\n }\n\n async function persistStorefrontPatch(\n context: StorefrontRequestContext,\n storefrontId: string,\n patch: Partial<InsertStorefront>,\n ): Promise<StorefrontDto> {\n const [row] = await context.db\n .update(storefronts)\n .set({ ...patch, updatedAt: new Date() })\n .where(\n and(\n eq(storefronts.id, storefrontId),\n eq(storefronts.organizationId, context.organizationId),\n ),\n )\n .returning()\n if (!row) throw new StorefrontInputError(\"Storefront was not found.\")\n return toStorefrontDto(row)\n }\n\n async function issueKeyRow(\n context: StorefrontRequestContext,\n storefront: SelectStorefront,\n kind: StorefrontApiKeyDto[\"kind\"],\n name?: string | null,\n ): Promise<IssuedStorefrontApiKeyDto> {\n const generated = await generateStorefrontApiKey(kind)\n const [row] = await context.db\n .insert(storefrontApiKeys)\n .values({\n storefrontId: storefront.id,\n organizationId: storefront.organizationId,\n kind,\n tokenHash: generated.tokenHash,\n tokenPreview: generated.tokenPreview,\n name: name?.trim() || null,\n })\n .returning()\n if (!row) throw new StorefrontInputError(\"Failed to issue storefront access key.\")\n return { ...toApiKeyDto(row), token: generated.token }\n }\n\n return {\n async listStorefronts(context) {\n const rows = await context.db\n .select()\n .from(storefronts)\n .where(eq(storefronts.organizationId, context.organizationId))\n .orderBy(desc(storefronts.createdAt))\n return rows.map(toStorefrontDto)\n },\n\n async getStorefront(context, storefrontId) {\n return toStorefrontDto(await requireOwnedStorefront(context, storefrontId))\n },\n\n async createStorefront(context, input) {\n const methods = normalizeStorefrontCustomerAuthMethods(input.methods)\n if (enabledStorefrontSocialProviders(methods).length > 0) {\n throw new StorefrontInputError(\n \"Add the provider credential before creating a storefront with a social method enabled.\",\n )\n }\n const accountPolicy = normalizeStorefrontCustomerAccountPolicy(\n input.accountPolicy ?? {\n allowedKinds: [\"personal\"],\n personalSignup: \"open\",\n businessOnboarding: \"disabled\",\n },\n )\n const allowedOrigins = normalizeStorefrontAllowedOrigins(input.allowedOrigins)\n if (input.hostingKind === \"external\" && input.siteId) {\n throw new StorefrontInputError(\"External storefronts cannot reference a hosting site.\")\n }\n const slug = input.slug.trim()\n if (!slug) throw new StorefrontInputError(\"Storefront slug is required.\")\n const [row] = await context.db\n .insert(storefronts)\n .values({\n organizationId: context.organizationId,\n name: input.name.trim(),\n slug,\n hostingKind: input.hostingKind,\n siteId: input.hostingKind === \"cloud_site\" ? (input.siteId ?? null) : null,\n methods,\n accountPolicy,\n allowedOrigins,\n hostOnlyCookies: true,\n })\n .returning()\n if (!row) throw new StorefrontInputError(\"Failed to create storefront.\")\n return toStorefrontDto(row)\n },\n\n async updateStorefront(context, storefrontId, patch) {\n await requireOwnedStorefront(context, storefrontId)\n const update: Partial<InsertStorefront> = {}\n if (patch.name !== undefined) update.name = patch.name.trim()\n if (patch.allowedOrigins !== undefined) {\n update.allowedOrigins = normalizeStorefrontAllowedOrigins(patch.allowedOrigins)\n }\n if (patch.accountPolicy !== undefined) {\n update.accountPolicy = normalizeStorefrontCustomerAccountPolicy(patch.accountPolicy)\n }\n if (patch.methods !== undefined) {\n const methods = normalizeStorefrontCustomerAuthMethods(patch.methods)\n await requireCredentialsForEnabledSocialMethods(context, storefrontId, methods)\n update.methods = methods\n }\n return persistStorefrontPatch(context, storefrontId, update)\n },\n\n async deleteStorefront(context, storefrontId) {\n await requireOwnedStorefront(context, storefrontId)\n await context.db\n .delete(storefronts)\n .where(\n and(\n eq(storefronts.id, storefrontId),\n eq(storefronts.organizationId, context.organizationId),\n ),\n )\n },\n\n async setAllowedOrigins(context, storefrontId, origins) {\n await requireOwnedStorefront(context, storefrontId)\n return persistStorefrontPatch(context, storefrontId, {\n allowedOrigins: normalizeStorefrontAllowedOrigins(origins),\n })\n },\n\n async listApiKeys(context, storefrontId) {\n await requireOwnedStorefront(context, storefrontId)\n const rows = await context.db\n .select()\n .from(storefrontApiKeys)\n .where(eq(storefrontApiKeys.storefrontId, storefrontId))\n .orderBy(desc(storefrontApiKeys.createdAt))\n return rows.map(toApiKeyDto)\n },\n\n async issueApiKey(context, storefrontId, kind, name) {\n const storefront = await requireOwnedStorefront(context, storefrontId)\n return issueKeyRow(context, storefront, kind, name)\n },\n\n async rotateApiKey(context, storefrontId, keyId) {\n const storefront = await requireOwnedStorefront(context, storefrontId)\n const [existing] = await context.db\n .select()\n .from(storefrontApiKeys)\n .where(\n and(eq(storefrontApiKeys.id, keyId), eq(storefrontApiKeys.storefrontId, storefrontId)),\n )\n .limit(1)\n if (!existing) throw new StorefrontInputError(\"Storefront access key was not found.\")\n await context.db\n .update(storefrontApiKeys)\n .set({ revokedAt: new Date(), updatedAt: new Date() })\n .where(eq(storefrontApiKeys.id, keyId))\n return issueKeyRow(context, storefront, existing.kind, existing.name)\n },\n\n async revokeApiKey(context, storefrontId, keyId) {\n await requireOwnedStorefront(context, storefrontId)\n await context.db\n .update(storefrontApiKeys)\n .set({ revokedAt: new Date(), updatedAt: new Date() })\n .where(\n and(eq(storefrontApiKeys.id, keyId), eq(storefrontApiKeys.storefrontId, storefrontId)),\n )\n },\n\n async resolveStorefrontByApiKey(\n context: StorefrontResolveContext,\n token: string,\n ): Promise<ResolvedStorefrontApiKey | null> {\n if (classifyStorefrontApiKey(token) === null) return null\n const tokenHash = await hashStorefrontApiKey(token)\n const [key] = await context.db\n .select()\n .from(storefrontApiKeys)\n .where(eq(storefrontApiKeys.tokenHash, tokenHash))\n .limit(1)\n if (!key || key.revokedAt) return null\n const [storefront] = await context.db\n .select()\n .from(storefronts)\n .where(eq(storefronts.id, key.storefrontId))\n .limit(1)\n if (!storefront) return null\n try {\n await context.db\n .update(storefrontApiKeys)\n .set({ lastUsedAt: new Date() })\n .where(eq(storefrontApiKeys.id, key.id))\n } catch {\n // Best-effort usage stamping; never fail the request on it.\n }\n return { storefront: toStorefrontDto(storefront), key: toApiKeyDto(key) }\n },\n\n async updateAccountPolicy(context, storefrontId, policy) {\n await requireOwnedStorefront(context, storefrontId)\n return persistStorefrontPatch(context, storefrontId, {\n accountPolicy: normalizeStorefrontCustomerAccountPolicy(policy),\n })\n },\n\n async updateMethods(context, storefrontId, methods) {\n await requireOwnedStorefront(context, storefrontId)\n const normalized = normalizeStorefrontCustomerAuthMethods(methods)\n await requireCredentialsForEnabledSocialMethods(context, storefrontId, normalized)\n return persistStorefrontPatch(context, storefrontId, { methods: normalized })\n },\n\n async listProviderCredentials(context, storefrontId) {\n await requireOwnedStorefront(context, storefrontId)\n const rows = await context.db\n .select()\n .from(storefrontCustomerAuthCredentials)\n .where(eq(storefrontCustomerAuthCredentials.storefrontId, storefrontId))\n const byProvider = new Map<\n StorefrontCustomerAuthSocialProvider,\n SelectStorefrontCustomerAuthCredential\n >(rows.map((row) => [row.provider, row]))\n return ([\"google\", \"facebook\", \"apple\"] as const).map(\n (provider): StorefrontProviderCredentialStatusDto => {\n const row = byProvider.get(provider)\n return {\n provider,\n configured: Boolean(row),\n updatedAt: row?.updatedAt.toISOString() ?? null,\n }\n },\n )\n },\n\n async putProviderCredential(context, storefrontId, provider, credentials) {\n const storefront = await requireOwnedStorefront(context, storefrontId)\n const bundle = validateStorefrontCredentialBundle(provider, credentials)\n const encrypted = await resolveCipher(context.bindings).encrypt(JSON.stringify(bundle))\n const [existing] = await context.db\n .select({ id: storefrontCustomerAuthCredentials.id })\n .from(storefrontCustomerAuthCredentials)\n .where(\n and(\n eq(storefrontCustomerAuthCredentials.storefrontId, storefrontId),\n eq(storefrontCustomerAuthCredentials.provider, provider),\n ),\n )\n .limit(1)\n if (existing) {\n await context.db\n .update(storefrontCustomerAuthCredentials)\n .set({ encryptedCredentials: encrypted, updatedAt: new Date() })\n .where(eq(storefrontCustomerAuthCredentials.id, existing.id))\n return\n }\n await context.db.insert(storefrontCustomerAuthCredentials).values({\n storefrontId,\n organizationId: storefront.organizationId,\n provider,\n encryptedCredentials: encrypted,\n })\n },\n\n async deleteProviderCredential(context, storefrontId, provider) {\n await requireOwnedStorefront(context, storefrontId)\n await context.db\n .delete(storefrontCustomerAuthCredentials)\n .where(\n and(\n eq(storefrontCustomerAuthCredentials.storefrontId, storefrontId),\n eq(storefrontCustomerAuthCredentials.provider, provider),\n ),\n )\n },\n\n async resolveProviderCredentials(\n context: StorefrontResolveContext,\n storefrontId: string,\n providers: readonly StorefrontCustomerAuthSocialProvider[],\n ): Promise<ResolvedStorefrontProviderCredentials> {\n if (providers.length === 0) return {}\n const rows = await context.db\n .select()\n .from(storefrontCustomerAuthCredentials)\n .where(eq(storefrontCustomerAuthCredentials.storefrontId, storefrontId))\n const cipher = resolveCipher(context.bindings)\n const resolved: ResolvedStorefrontProviderCredentials = {}\n for (const row of rows) {\n if (!providers.includes(row.provider)) continue\n const plaintext = await cipher.decrypt(row.encryptedCredentials)\n resolved[row.provider] = JSON.parse(plaintext) as Record<string, string>\n }\n return resolved\n },\n }\n}\n"]}
|
|
1
|
+
{"version":3,"file":"storefront-local-adapter.js","sourceRoot":"","sources":["../src/storefront-local-adapter.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAML,iBAAiB,EACjB,iCAAiC,EACjC,WAAW,GACZ,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AAEhD,OAAO,EAEL,kCAAkC,GACnC,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EACL,gCAAgC,EAChC,yBAAyB,EACzB,iCAAiC,EACjC,wCAAwC,EACxC,sCAAsC,EACtC,oBAAoB,GACrB,MAAM,yBAAyB,CAAA;AAahC,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAA;AAEnE,SAAS,eAAe,CAAC,GAAqB;IAC5C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,cAAc,EAAE,GAAG,CAAC,cAAc;QAClC,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;QAC1B,cAAc,EAAE,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC;QACvC,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;QACtC,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAA2B;IAC9C,OAAO;QACL,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,YAAY,EAAE,GAAG,CAAC,YAAY;QAC9B,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,IAAI;QACtB,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,IAAI;QACjD,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI;QAC/C,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE;KACvC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAO5C;IACC,MAAM,EAAE,aAAa,EAAE,GAAG,OAAO,CAAA;IAEjC,yEAAyE;IACzE,KAAK,UAAU,sBAAsB,CACnC,OAAiC,EACjC,YAAoB;QAEpB,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;aAC3B,MAAM,EAAE;aACR,IAAI,CAAC,WAAW,CAAC;aACjB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,YAAY,CAAC,EAChC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CACvD,CACF;aACA,KAAK,CAAC,CAAC,CAAC,CAAA;QACX,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,CAAA;QACrE,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,KAAK,UAAU,yCAAyC,CACtD,OAAiC,EACjC,YAAoB,EACpB,OAAiC;QAEjC,MAAM,SAAS,GAAG,gCAAgC,CAAC,OAAO,CAAC,CAAA;QAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,OAAM;QAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE;aAC1B,MAAM,CAAC,EAAE,QAAQ,EAAE,iCAAiC,CAAC,QAAQ,EAAE,CAAC;aAChE,IAAI,CAAC,iCAAiC,CAAC;aACvC,KAAK,CAAC,EAAE,CAAC,iCAAiC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;QAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAA;QAC3D,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,oBAAoB,CAC5B,0BAA0B,QAAQ,iDAAiD,CACpF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,UAAU,sBAAsB,CACnC,OAAiC,EACjC,YAAoB,EACpB,KAAgC;QAEhC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;aAC3B,MAAM,CAAC,WAAW,CAAC;aACnB,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;aACxC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,YAAY,CAAC,EAChC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CACvD,CACF;aACA,SAAS,EAAE,CAAA;QACd,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,oBAAoB,CAAC,2BAA2B,CAAC,CAAA;QACrE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;IAC7B,CAAC;IAED,KAAK,UAAU,WAAW,CACxB,OAAiC,EACjC,UAA4B,EAC5B,IAAiC,EACjC,IAAoB;QAEpB,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,CAAA;QACtD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;aAC3B,MAAM,CAAC,iBAAiB,CAAC;aACzB,MAAM,CAAC;YACN,YAAY,EAAE,UAAU,CAAC,EAAE;YAC3B,cAAc,EAAE,UAAU,CAAC,cAAc;YACzC,IAAI;YACJ,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI;SAC3B,CAAC;aACD,SAAS,EAAE,CAAA;QACd,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,oBAAoB,CAAC,wCAAwC,CAAC,CAAA;QAClF,OAAO,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,CAAA;IACxD,CAAC;IAED,OAAO;QACL,KAAK,CAAC,eAAe,CAAC,OAAO;YAC3B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC1B,MAAM,EAAE;iBACR,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;iBAC7D,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAA;YACvC,OAAO,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA;QAClC,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY;YACvC,OAAO,eAAe,CAAC,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAA;QAC7E,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK;YACnC,MAAM,OAAO,GAAG,sCAAsC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;YACrE,IAAI,gCAAgC,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,oBAAoB,CAC5B,wFAAwF,CACzF,CAAA;YACH,CAAC;YACD,MAAM,aAAa,GAAG,wCAAwC,CAC5D,KAAK,CAAC,aAAa,IAAI;gBACrB,YAAY,EAAE,CAAC,UAAU,CAAC;gBAC1B,cAAc,EAAE,MAAM;gBACtB,kBAAkB,EAAE,UAAU;aAC/B,CACF,CAAA;YACD,MAAM,cAAc,GAAG,iCAAiC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;YAC9E,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBACrD,MAAM,IAAI,oBAAoB,CAAC,uDAAuD,CAAC,CAAA;YACzF,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YAC9B,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,oBAAoB,CAAC,8BAA8B,CAAC,CAAA;YACzE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC3B,MAAM,CAAC,WAAW,CAAC;iBACnB,MAAM,CAAC;gBACN,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE;gBACvB,IAAI;gBACJ,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,MAAM,EAAE,KAAK,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC1E,OAAO;gBACP,aAAa;gBACb,cAAc;gBACd,eAAe,EAAE,IAAI;aACtB,CAAC;iBACD,SAAS,EAAE,CAAA;YACd,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,oBAAoB,CAAC,8BAA8B,CAAC,CAAA;YACxE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;QAC7B,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK;YACjD,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,MAAM,GAA8B,EAAE,CAAA;YAC5C,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAA;YAC7D,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,CAAC,cAAc,GAAG,iCAAiC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;YACjF,CAAC;YACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,CAAC,aAAa,GAAG,wCAAwC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAA;YACtF,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAChC,MAAM,OAAO,GAAG,sCAAsC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;gBACrE,MAAM,yCAAyC,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,CAAA;gBAC/E,MAAM,CAAC,OAAO,GAAG,OAAO,CAAA;YAC1B,CAAC;YACD,OAAO,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,CAAA;QAC9D,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY;YAC1C,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,OAAO,CAAC,EAAE;iBACb,MAAM,CAAC,WAAW,CAAC;iBACnB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,YAAY,CAAC,EAChC,EAAE,CAAC,WAAW,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,CACvD,CACF,CAAA;QACL,CAAC;QAED,KAAK,CAAC,iBAAiB,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO;YACpD,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,OAAO,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE;gBACnD,cAAc,EAAE,iCAAiC,CAAC,OAAO,CAAC;aAC3D,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY;YACrC,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC1B,MAAM,EAAE;iBACR,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;iBACvD,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC,CAAA;YAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAA;QAC9B,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI;YACjD,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACtE,OAAO,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,CAAA;QACrD,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK;YAC7C,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACtE,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAChC,MAAM,EAAE;iBACR,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CACvF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,oBAAoB,CAAC,sCAAsC,CAAC,CAAA;YACrF,MAAM,OAAO,CAAC,EAAE;iBACb,MAAM,CAAC,iBAAiB,CAAC;iBACzB,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACrD,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAA;YACzC,OAAO,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAA;QACvE,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK;YAC7C,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,OAAO,CAAC,EAAE;iBACb,MAAM,CAAC,iBAAiB,CAAC;iBACzB,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;iBACrD,KAAK,CACJ,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CACvF,CAAA;QACL,CAAC;QAED,KAAK,CAAC,yBAAyB,CAC7B,OAAiC,EACjC,KAAa;YAEb,IAAI,wBAAwB,CAAC,KAAK,CAAC,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAA;YACzD,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAA;YACnD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC3B,MAAM,EAAE;iBACR,IAAI,CAAC,iBAAiB,CAAC;iBACvB,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;iBACjD,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAA;YACtC,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAClC,MAAM,EAAE;iBACR,IAAI,CAAC,WAAW,CAAC;iBACjB,KAAK,CAAC,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;iBAC3C,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAA;YAC5B,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,EAAE;qBACb,MAAM,CAAC,iBAAiB,CAAC;qBACzB,GAAG,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;qBAC/B,KAAK,CAAC,EAAE,CAAC,iBAAiB,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,eAAe,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAA;QAC3E,CAAC;QAED,KAAK,CAAC,yBAAyB,CAC7B,OAAiC,EACjC,MAAc;YAEd,mEAAmE;YACnE,0EAA0E;YAC1E,uEAAuE;YACvE,uEAAuE;YACvE,iEAAiE;YACjE,MAAM,CAAC,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAClC,MAAM,EAAE;iBACR,IAAI,CAAC,WAAW,CAAC;gBAClB,iIAAiI;iBAChI,KAAK,CAAC,GAAG,CAAA,GAAG,WAAW,CAAC,cAAc,aAAa,MAAM,WAAW,CAAC;iBACrE,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,UAAU;gBAAE,OAAO,eAAe,CAAC,UAAU,CAAC,CAAA;YAElD,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,EAAE;iBACxC,MAAM,EAAE;iBACR,IAAI,CAAC,WAAW,CAAC;gBAClB,8HAA8H;iBAC7H,KAAK,CACJ,GAAG,CAAA,gCAAgC,WAAW,CAAC,cAAc,oCAAoC,CAClG,CAAA;YACH,KAAK,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;gBACrC,IAAI,yBAAyB,CAAC,MAAM,EAAE,GAAG,CAAC,cAAc,CAAC;oBAAE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAA;YACxF,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,EAAE,MAAM;YACrD,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,OAAO,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE;gBACnD,aAAa,EAAE,wCAAwC,CAAC,MAAM,CAAC;aAChE,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO;YAChD,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,UAAU,GAAG,sCAAsC,CAAC,OAAO,CAAC,CAAA;YAClE,MAAM,yCAAyC,CAAC,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,CAAA;YAClF,OAAO,sBAAsB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAA;QAC/E,CAAC;QAED,KAAK,CAAC,uBAAuB,CAAC,OAAO,EAAE,YAAY;YACjD,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC1B,MAAM,EAAE;iBACR,IAAI,CAAC,iCAAiC,CAAC;iBACvC,KAAK,CAAC,EAAE,CAAC,iCAAiC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;YAC1E,MAAM,UAAU,GAAG,IAAI,GAAG,CAGxB,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAA;YACzC,OAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAW,CAAC,GAAG,CACnD,CAAC,QAAQ,EAAyC,EAAE;gBAClD,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;gBACpC,OAAO;oBACL,QAAQ;oBACR,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC;oBACxB,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,WAAW,EAAE,IAAI,IAAI;iBAChD,CAAA;YACH,CAAC,CACF,CAAA;QACH,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW;YACtE,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACtE,MAAM,MAAM,GAAG,kCAAkC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAA;YACxE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;YACvF,MAAM,CAAC,QAAQ,CAAC,GAAG,MAAM,OAAO,CAAC,EAAE;iBAChC,MAAM,CAAC,EAAE,EAAE,EAAE,iCAAiC,CAAC,EAAE,EAAE,CAAC;iBACpD,IAAI,CAAC,iCAAiC,CAAC;iBACvC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iCAAiC,CAAC,YAAY,EAAE,YAAY,CAAC,EAChE,EAAE,CAAC,iCAAiC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACzD,CACF;iBACA,KAAK,CAAC,CAAC,CAAC,CAAA;YACX,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,OAAO,CAAC,EAAE;qBACb,MAAM,CAAC,iCAAiC,CAAC;qBACzC,GAAG,CAAC,EAAE,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;qBAC/D,KAAK,CAAC,EAAE,CAAC,iCAAiC,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;gBAC/D,OAAM;YACR,CAAC;YACD,MAAM,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,iCAAiC,CAAC,CAAC,MAAM,CAAC;gBAChE,YAAY;gBACZ,cAAc,EAAE,UAAU,CAAC,cAAc;gBACzC,QAAQ;gBACR,oBAAoB,EAAE,SAAS;aAChC,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,wBAAwB,CAAC,OAAO,EAAE,YAAY,EAAE,QAAQ;YAC5D,MAAM,sBAAsB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YACnD,MAAM,OAAO,CAAC,EAAE;iBACb,MAAM,CAAC,iCAAiC,CAAC;iBACzC,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,iCAAiC,CAAC,YAAY,EAAE,YAAY,CAAC,EAChE,EAAE,CAAC,iCAAiC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CACzD,CACF,CAAA;QACL,CAAC;QAED,KAAK,CAAC,0BAA0B,CAC9B,OAAiC,EACjC,YAAoB,EACpB,SAA0D;YAE1D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAA;YACrC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,EAAE;iBAC1B,MAAM,EAAE;iBACR,IAAI,CAAC,iCAAiC,CAAC;iBACvC,KAAK,CAAC,EAAE,CAAC,iCAAiC,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC,CAAA;YAC1E,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC9C,MAAM,QAAQ,GAA0C,EAAE,CAAA;YAC1D,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;oBAAE,SAAQ;gBAC/C,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAA;gBAChE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAA2B,CAAA;YAC1E,CAAC;YACD,OAAO,QAAQ,CAAA;QACjB,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["/**\n * Local storefront runtime provider — backs {@link storefrontRuntimePort} with\n * the deployment's own runtime DB (self-host). Mirrors the team-management\n * local adapter: every operator write is bounded to `context.organizationId`,\n * and request-time resolution (`resolveStorefrontByApiKey`) is org-agnostic.\n */\nimport {\n type InsertStorefront,\n type SelectStorefront,\n type SelectStorefrontApiKey,\n type SelectStorefrontCustomerAuthCredential,\n type StorefrontCustomerAuthSocialProvider,\n storefrontApiKeys,\n storefrontCustomerAuthCredentials,\n storefronts,\n} from \"@voyant-travel/db/schema/iam\"\nimport { and, desc, eq, sql } from \"drizzle-orm\"\n\nimport {\n type StorefrontCredentialCipher,\n validateStorefrontCredentialBundle,\n} from \"./storefront-credentials.js\"\nimport {\n classifyStorefrontApiKey,\n generateStorefrontApiKey,\n hashStorefrontApiKey,\n} from \"./storefront-keys.js\"\nimport {\n enabledStorefrontSocialProviders,\n isStorefrontOriginAllowed,\n normalizeStorefrontAllowedOrigins,\n normalizeStorefrontCustomerAccountPolicy,\n normalizeStorefrontCustomerAuthMethods,\n StorefrontInputError,\n} from \"./storefront-origins.js\"\nimport type {\n IssuedStorefrontApiKeyDto,\n ResolvedStorefrontApiKey,\n ResolvedStorefrontProviderCredentials,\n StorefrontApiKeyDto,\n StorefrontDto,\n StorefrontProviderCredentialStatusDto,\n StorefrontRequestContext,\n StorefrontResolveContext,\n StorefrontRuntimeProvider,\n} from \"./storefront-runtime-port.js\"\n\nexport { isStorefrontOriginAllowed } from \"./storefront-origins.js\"\n\nfunction toStorefrontDto(row: SelectStorefront): StorefrontDto {\n return {\n id: row.id,\n organizationId: row.organizationId,\n name: row.name,\n slug: row.slug,\n hostingKind: row.hostingKind,\n siteId: row.siteId ?? null,\n allowedOrigins: [...row.allowedOrigins],\n methods: row.methods,\n accountPolicy: row.accountPolicy,\n hostOnlyCookies: row.hostOnlyCookies,\n createdAt: row.createdAt.toISOString(),\n updatedAt: row.updatedAt.toISOString(),\n }\n}\n\nfunction toApiKeyDto(row: SelectStorefrontApiKey): StorefrontApiKeyDto {\n return {\n id: row.id,\n storefrontId: row.storefrontId,\n kind: row.kind,\n tokenPreview: row.tokenPreview,\n name: row.name ?? null,\n lastUsedAt: row.lastUsedAt?.toISOString() ?? null,\n revokedAt: row.revokedAt?.toISOString() ?? null,\n createdAt: row.createdAt.toISOString(),\n }\n}\n\nexport function createLocalStorefrontAdapter(options: {\n /**\n * Resolve the KMS-backed credential cipher for a deployment. Called with the\n * request bindings so per-deployment KMS config is honoured; the self-host\n * host passes `createKmsStorefrontCredentialCipher(env)`.\n */\n resolveCipher: (bindings: Record<string, unknown>) => StorefrontCredentialCipher\n}): StorefrontRuntimeProvider {\n const { resolveCipher } = options\n\n /** Load a storefront and prove it belongs to the acting organization. */\n async function requireOwnedStorefront(\n context: StorefrontRequestContext,\n storefrontId: string,\n ): Promise<SelectStorefront> {\n const [row] = await context.db\n .select()\n .from(storefronts)\n .where(\n and(\n eq(storefronts.id, storefrontId),\n eq(storefronts.organizationId, context.organizationId),\n ),\n )\n .limit(1)\n if (!row) throw new StorefrontInputError(\"Storefront was not found.\")\n return row\n }\n\n async function requireCredentialsForEnabledSocialMethods(\n context: StorefrontRequestContext,\n storefrontId: string,\n methods: StorefrontDto[\"methods\"],\n ): Promise<void> {\n const providers = enabledStorefrontSocialProviders(methods)\n if (providers.length === 0) return\n const rows = await context.db\n .select({ provider: storefrontCustomerAuthCredentials.provider })\n .from(storefrontCustomerAuthCredentials)\n .where(eq(storefrontCustomerAuthCredentials.storefrontId, storefrontId))\n const configured = new Set(rows.map((row) => row.provider))\n for (const provider of providers) {\n if (!configured.has(provider)) {\n throw new StorefrontInputError(\n `Customer auth provider ${provider} cannot be enabled without a stored credential.`,\n )\n }\n }\n }\n\n async function persistStorefrontPatch(\n context: StorefrontRequestContext,\n storefrontId: string,\n patch: Partial<InsertStorefront>,\n ): Promise<StorefrontDto> {\n const [row] = await context.db\n .update(storefronts)\n .set({ ...patch, updatedAt: new Date() })\n .where(\n and(\n eq(storefronts.id, storefrontId),\n eq(storefronts.organizationId, context.organizationId),\n ),\n )\n .returning()\n if (!row) throw new StorefrontInputError(\"Storefront was not found.\")\n return toStorefrontDto(row)\n }\n\n async function issueKeyRow(\n context: StorefrontRequestContext,\n storefront: SelectStorefront,\n kind: StorefrontApiKeyDto[\"kind\"],\n name?: string | null,\n ): Promise<IssuedStorefrontApiKeyDto> {\n const generated = await generateStorefrontApiKey(kind)\n const [row] = await context.db\n .insert(storefrontApiKeys)\n .values({\n storefrontId: storefront.id,\n organizationId: storefront.organizationId,\n kind,\n tokenHash: generated.tokenHash,\n tokenPreview: generated.tokenPreview,\n name: name?.trim() || null,\n })\n .returning()\n if (!row) throw new StorefrontInputError(\"Failed to issue storefront access key.\")\n return { ...toApiKeyDto(row), token: generated.token }\n }\n\n return {\n async listStorefronts(context) {\n const rows = await context.db\n .select()\n .from(storefronts)\n .where(eq(storefronts.organizationId, context.organizationId))\n .orderBy(desc(storefronts.createdAt))\n return rows.map(toStorefrontDto)\n },\n\n async getStorefront(context, storefrontId) {\n return toStorefrontDto(await requireOwnedStorefront(context, storefrontId))\n },\n\n async createStorefront(context, input) {\n const methods = normalizeStorefrontCustomerAuthMethods(input.methods)\n if (enabledStorefrontSocialProviders(methods).length > 0) {\n throw new StorefrontInputError(\n \"Add the provider credential before creating a storefront with a social method enabled.\",\n )\n }\n const accountPolicy = normalizeStorefrontCustomerAccountPolicy(\n input.accountPolicy ?? {\n allowedKinds: [\"personal\"],\n personalSignup: \"open\",\n businessOnboarding: \"disabled\",\n },\n )\n const allowedOrigins = normalizeStorefrontAllowedOrigins(input.allowedOrigins)\n if (input.hostingKind === \"external\" && input.siteId) {\n throw new StorefrontInputError(\"External storefronts cannot reference a hosting site.\")\n }\n const slug = input.slug.trim()\n if (!slug) throw new StorefrontInputError(\"Storefront slug is required.\")\n const [row] = await context.db\n .insert(storefronts)\n .values({\n organizationId: context.organizationId,\n name: input.name.trim(),\n slug,\n hostingKind: input.hostingKind,\n siteId: input.hostingKind === \"cloud_site\" ? (input.siteId ?? null) : null,\n methods,\n accountPolicy,\n allowedOrigins,\n hostOnlyCookies: true,\n })\n .returning()\n if (!row) throw new StorefrontInputError(\"Failed to create storefront.\")\n return toStorefrontDto(row)\n },\n\n async updateStorefront(context, storefrontId, patch) {\n await requireOwnedStorefront(context, storefrontId)\n const update: Partial<InsertStorefront> = {}\n if (patch.name !== undefined) update.name = patch.name.trim()\n if (patch.allowedOrigins !== undefined) {\n update.allowedOrigins = normalizeStorefrontAllowedOrigins(patch.allowedOrigins)\n }\n if (patch.accountPolicy !== undefined) {\n update.accountPolicy = normalizeStorefrontCustomerAccountPolicy(patch.accountPolicy)\n }\n if (patch.methods !== undefined) {\n const methods = normalizeStorefrontCustomerAuthMethods(patch.methods)\n await requireCredentialsForEnabledSocialMethods(context, storefrontId, methods)\n update.methods = methods\n }\n return persistStorefrontPatch(context, storefrontId, update)\n },\n\n async deleteStorefront(context, storefrontId) {\n await requireOwnedStorefront(context, storefrontId)\n await context.db\n .delete(storefronts)\n .where(\n and(\n eq(storefronts.id, storefrontId),\n eq(storefronts.organizationId, context.organizationId),\n ),\n )\n },\n\n async setAllowedOrigins(context, storefrontId, origins) {\n await requireOwnedStorefront(context, storefrontId)\n return persistStorefrontPatch(context, storefrontId, {\n allowedOrigins: normalizeStorefrontAllowedOrigins(origins),\n })\n },\n\n async listApiKeys(context, storefrontId) {\n await requireOwnedStorefront(context, storefrontId)\n const rows = await context.db\n .select()\n .from(storefrontApiKeys)\n .where(eq(storefrontApiKeys.storefrontId, storefrontId))\n .orderBy(desc(storefrontApiKeys.createdAt))\n return rows.map(toApiKeyDto)\n },\n\n async issueApiKey(context, storefrontId, kind, name) {\n const storefront = await requireOwnedStorefront(context, storefrontId)\n return issueKeyRow(context, storefront, kind, name)\n },\n\n async rotateApiKey(context, storefrontId, keyId) {\n const storefront = await requireOwnedStorefront(context, storefrontId)\n const [existing] = await context.db\n .select()\n .from(storefrontApiKeys)\n .where(\n and(eq(storefrontApiKeys.id, keyId), eq(storefrontApiKeys.storefrontId, storefrontId)),\n )\n .limit(1)\n if (!existing) throw new StorefrontInputError(\"Storefront access key was not found.\")\n await context.db\n .update(storefrontApiKeys)\n .set({ revokedAt: new Date(), updatedAt: new Date() })\n .where(eq(storefrontApiKeys.id, keyId))\n return issueKeyRow(context, storefront, existing.kind, existing.name)\n },\n\n async revokeApiKey(context, storefrontId, keyId) {\n await requireOwnedStorefront(context, storefrontId)\n await context.db\n .update(storefrontApiKeys)\n .set({ revokedAt: new Date(), updatedAt: new Date() })\n .where(\n and(eq(storefrontApiKeys.id, keyId), eq(storefrontApiKeys.storefrontId, storefrontId)),\n )\n },\n\n async resolveStorefrontByApiKey(\n context: StorefrontResolveContext,\n token: string,\n ): Promise<ResolvedStorefrontApiKey | null> {\n if (classifyStorefrontApiKey(token) === null) return null\n const tokenHash = await hashStorefrontApiKey(token)\n const [key] = await context.db\n .select()\n .from(storefrontApiKeys)\n .where(eq(storefrontApiKeys.tokenHash, tokenHash))\n .limit(1)\n if (!key || key.revokedAt) return null\n const [storefront] = await context.db\n .select()\n .from(storefronts)\n .where(eq(storefronts.id, key.storefrontId))\n .limit(1)\n if (!storefront) return null\n try {\n await context.db\n .update(storefrontApiKeys)\n .set({ lastUsedAt: new Date() })\n .where(eq(storefrontApiKeys.id, key.id))\n } catch {\n // Best-effort usage stamping; never fail the request on it.\n }\n return { storefront: toStorefrontDto(storefront), key: toApiKeyDto(key) }\n },\n\n async resolveStorefrontByOrigin(\n context: StorefrontResolveContext,\n origin: string,\n ): Promise<StorefrontDto | null> {\n // Preflight authorization is keyless, so it cannot select a single\n // storefront up front. Exact-origin entries are filtered in SQL via array\n // containment; wildcard (`https://*.host`) declarations are matched in\n // memory over the small self-host storefront set. First match wins — a\n // browser origin resolves to at most one storefront in practice.\n const [exactMatch] = await context.db\n .select()\n .from(storefronts)\n // agent-quality: raw-sql reviewed -- Postgres text[] containment authorizes the exact declared origin without loading every row.\n .where(sql`${storefronts.allowedOrigins} @> ARRAY[${origin}]::text[]`)\n .limit(1)\n if (exactMatch) return toStorefrontDto(exactMatch)\n\n const wildcardCandidates = await context.db\n .select()\n .from(storefronts)\n // agent-quality: raw-sql reviewed -- Only rows carrying a wildcard origin declaration are considered for the in-memory match.\n .where(\n sql`EXISTS (SELECT 1 FROM unnest(${storefronts.allowedOrigins}) AS o WHERE o LIKE 'https://*.%')`,\n )\n for (const row of wildcardCandidates) {\n if (isStorefrontOriginAllowed(origin, row.allowedOrigins)) return toStorefrontDto(row)\n }\n return null\n },\n\n async updateAccountPolicy(context, storefrontId, policy) {\n await requireOwnedStorefront(context, storefrontId)\n return persistStorefrontPatch(context, storefrontId, {\n accountPolicy: normalizeStorefrontCustomerAccountPolicy(policy),\n })\n },\n\n async updateMethods(context, storefrontId, methods) {\n await requireOwnedStorefront(context, storefrontId)\n const normalized = normalizeStorefrontCustomerAuthMethods(methods)\n await requireCredentialsForEnabledSocialMethods(context, storefrontId, normalized)\n return persistStorefrontPatch(context, storefrontId, { methods: normalized })\n },\n\n async listProviderCredentials(context, storefrontId) {\n await requireOwnedStorefront(context, storefrontId)\n const rows = await context.db\n .select()\n .from(storefrontCustomerAuthCredentials)\n .where(eq(storefrontCustomerAuthCredentials.storefrontId, storefrontId))\n const byProvider = new Map<\n StorefrontCustomerAuthSocialProvider,\n SelectStorefrontCustomerAuthCredential\n >(rows.map((row) => [row.provider, row]))\n return ([\"google\", \"facebook\", \"apple\"] as const).map(\n (provider): StorefrontProviderCredentialStatusDto => {\n const row = byProvider.get(provider)\n return {\n provider,\n configured: Boolean(row),\n updatedAt: row?.updatedAt.toISOString() ?? null,\n }\n },\n )\n },\n\n async putProviderCredential(context, storefrontId, provider, credentials) {\n const storefront = await requireOwnedStorefront(context, storefrontId)\n const bundle = validateStorefrontCredentialBundle(provider, credentials)\n const encrypted = await resolveCipher(context.bindings).encrypt(JSON.stringify(bundle))\n const [existing] = await context.db\n .select({ id: storefrontCustomerAuthCredentials.id })\n .from(storefrontCustomerAuthCredentials)\n .where(\n and(\n eq(storefrontCustomerAuthCredentials.storefrontId, storefrontId),\n eq(storefrontCustomerAuthCredentials.provider, provider),\n ),\n )\n .limit(1)\n if (existing) {\n await context.db\n .update(storefrontCustomerAuthCredentials)\n .set({ encryptedCredentials: encrypted, updatedAt: new Date() })\n .where(eq(storefrontCustomerAuthCredentials.id, existing.id))\n return\n }\n await context.db.insert(storefrontCustomerAuthCredentials).values({\n storefrontId,\n organizationId: storefront.organizationId,\n provider,\n encryptedCredentials: encrypted,\n })\n },\n\n async deleteProviderCredential(context, storefrontId, provider) {\n await requireOwnedStorefront(context, storefrontId)\n await context.db\n .delete(storefrontCustomerAuthCredentials)\n .where(\n and(\n eq(storefrontCustomerAuthCredentials.storefrontId, storefrontId),\n eq(storefrontCustomerAuthCredentials.provider, provider),\n ),\n )\n },\n\n async resolveProviderCredentials(\n context: StorefrontResolveContext,\n storefrontId: string,\n providers: readonly StorefrontCustomerAuthSocialProvider[],\n ): Promise<ResolvedStorefrontProviderCredentials> {\n if (providers.length === 0) return {}\n const rows = await context.db\n .select()\n .from(storefrontCustomerAuthCredentials)\n .where(eq(storefrontCustomerAuthCredentials.storefrontId, storefrontId))\n const cipher = resolveCipher(context.bindings)\n const resolved: ResolvedStorefrontProviderCredentials = {}\n for (const row of rows) {\n if (!providers.includes(row.provider)) continue\n const plaintext = await cipher.decrypt(row.encryptedCredentials)\n resolved[row.provider] = JSON.parse(plaintext) as Record<string, string>\n }\n return resolved\n },\n }\n}\n"]}
|
|
@@ -82,6 +82,12 @@ export interface StorefrontRuntimeProvider {
|
|
|
82
82
|
rotateApiKey(context: StorefrontRequestContext, storefrontId: string, keyId: string): Promise<IssuedStorefrontApiKeyDto>;
|
|
83
83
|
revokeApiKey(context: StorefrontRequestContext, storefrontId: string, keyId: string): Promise<void>;
|
|
84
84
|
resolveStorefrontByApiKey(context: StorefrontResolveContext, token: string): Promise<ResolvedStorefrontApiKey | null>;
|
|
85
|
+
/**
|
|
86
|
+
* Resolve a storefront that declares `origin` as an allowed browser origin
|
|
87
|
+
* (exact or `https://*.host` wildcard). Used to authorize keyless CORS
|
|
88
|
+
* preflight requests, which carry an `Origin` but no storefront key.
|
|
89
|
+
*/
|
|
90
|
+
resolveStorefrontByOrigin(context: StorefrontResolveContext, origin: string): Promise<StorefrontDto | null>;
|
|
85
91
|
updateAccountPolicy(context: StorefrontRequestContext, storefrontId: string, policy: StorefrontCustomerAccountPolicy): Promise<StorefrontDto>;
|
|
86
92
|
updateMethods(context: StorefrontRequestContext, storefrontId: string, methods: StorefrontCustomerAuthMethods): Promise<StorefrontDto>;
|
|
87
93
|
listProviderCredentials(context: StorefrontRequestContext, storefrontId: string): Promise<StorefrontProviderCredentialStatusDto[]>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"storefront-runtime-port.js","sourceRoot":"","sources":["../src/storefront-runtime-port.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;
|
|
1
|
+
{"version":3,"file":"storefront-runtime-port.js","sourceRoot":"","sources":["../src/storefront-runtime-port.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAA;AAqLxD,MAAM,gBAAgB,GAAG;IACvB,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,aAAa;IACb,aAAa;IACb,cAAc;IACd,cAAc;IACd,2BAA2B;IAC3B,2BAA2B;IAC3B,qBAAqB;IACrB,eAAe;IACf,yBAAyB;IACzB,uBAAuB;IACvB,0BAA0B;IAC1B,4BAA4B;CACpB,CAAA;AAEV,MAAM,CAAC,MAAM,qBAAqB,GAAG,UAAU,CAA4B;IACzE,EAAE,EAAE,yBAAyB;IAC7B,IAAI,CAAC,QAAQ;QACX,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACxE,CAAC;QACD,MAAM,IAAI,GAAG,QAA8C,CAAA;QAC3D,KAAK,MAAM,MAAM,IAAI,gBAAgB,EAAE,CAAC;YACtC,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,UAAU,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,mDAAmD,MAAM,KAAK,CAAC,CAAA;YACjF,CAAC;QACH,CAAC;IACH,CAAC;CACF,CAAC,CAAA","sourcesContent":["import { definePort } from \"@voyant-travel/core/project\"\nimport type {\n StorefrontApiKeyKind,\n StorefrontCustomerAccountPolicy,\n StorefrontCustomerAuthMethods,\n StorefrontCustomerAuthSocialProvider,\n StorefrontHostingKind,\n} from \"@voyant-travel/db/schema/iam\"\nimport type { VoyantDb } from \"@voyant-travel/hono\"\n\nexport interface StorefrontDto {\n id: string\n organizationId: string\n name: string\n slug: string\n hostingKind: StorefrontHostingKind\n siteId: string | null\n allowedOrigins: string[]\n methods: StorefrontCustomerAuthMethods\n accountPolicy: StorefrontCustomerAccountPolicy\n hostOnlyCookies: boolean\n createdAt: string\n updatedAt: string\n}\n\nexport interface StorefrontApiKeyDto {\n id: string\n storefrontId: string\n kind: StorefrontApiKeyKind\n tokenPreview: string\n name: string | null\n lastUsedAt: string | null\n revokedAt: string | null\n createdAt: string\n}\n\n/** Issuance/rotation result: the plaintext token is present exactly once. */\nexport interface IssuedStorefrontApiKeyDto extends StorefrontApiKeyDto {\n token: string\n}\n\nexport interface StorefrontProviderCredentialStatusDto {\n provider: StorefrontCustomerAuthSocialProvider\n configured: boolean\n updatedAt: string | null\n}\n\nexport interface CreateStorefrontInput {\n name: string\n slug: string\n hostingKind: StorefrontHostingKind\n siteId?: string | null\n allowedOrigins: readonly string[]\n methods: StorefrontCustomerAuthMethods\n accountPolicy?: StorefrontCustomerAccountPolicy\n}\n\nexport interface UpdateStorefrontInput {\n name?: string\n allowedOrigins?: readonly string[]\n methods?: StorefrontCustomerAuthMethods\n accountPolicy?: StorefrontCustomerAccountPolicy\n}\n\n/** Operator-scoped admin context: every write is bounded to one organization. */\nexport interface StorefrontRequestContext {\n bindings: Record<string, unknown>\n db: VoyantDb\n organizationId: string\n}\n\n/**\n * Request-time resolve context. Customer-auth resolution runs without an\n * operator user, so no organization scope is present — a token selects its\n * storefront globally, then the declared-origin check authorizes it.\n */\nexport interface StorefrontResolveContext {\n bindings: Record<string, unknown>\n db: VoyantDb\n}\n\n/** A token resolved to its storefront + the key row it authenticated with. */\nexport interface ResolvedStorefrontApiKey {\n storefront: StorefrontDto\n key: StorefrontApiKeyDto\n}\n\n/** Decrypted provider secrets, keyed by provider, for enabled social methods. */\nexport type ResolvedStorefrontProviderCredentials = Partial<\n Record<StorefrontCustomerAuthSocialProvider, Record<string, string>>\n>\n\nexport interface StorefrontRuntimeProvider {\n // storefront CRUD ------------------------------------------------------\n listStorefronts(context: StorefrontRequestContext): Promise<StorefrontDto[]>\n getStorefront(context: StorefrontRequestContext, storefrontId: string): Promise<StorefrontDto>\n createStorefront(\n context: StorefrontRequestContext,\n input: CreateStorefrontInput,\n ): Promise<StorefrontDto>\n updateStorefront(\n context: StorefrontRequestContext,\n storefrontId: string,\n patch: UpdateStorefrontInput,\n ): Promise<StorefrontDto>\n deleteStorefront(context: StorefrontRequestContext, storefrontId: string): Promise<void>\n // allowed origins ------------------------------------------------------\n setAllowedOrigins(\n context: StorefrontRequestContext,\n storefrontId: string,\n origins: readonly string[],\n ): Promise<StorefrontDto>\n // access keys ----------------------------------------------------------\n listApiKeys(\n context: StorefrontRequestContext,\n storefrontId: string,\n ): Promise<StorefrontApiKeyDto[]>\n issueApiKey(\n context: StorefrontRequestContext,\n storefrontId: string,\n kind: StorefrontApiKeyKind,\n name?: string | null,\n ): Promise<IssuedStorefrontApiKeyDto>\n rotateApiKey(\n context: StorefrontRequestContext,\n storefrontId: string,\n keyId: string,\n ): Promise<IssuedStorefrontApiKeyDto>\n revokeApiKey(\n context: StorefrontRequestContext,\n storefrontId: string,\n keyId: string,\n ): Promise<void>\n resolveStorefrontByApiKey(\n context: StorefrontResolveContext,\n token: string,\n ): Promise<ResolvedStorefrontApiKey | null>\n /**\n * Resolve a storefront that declares `origin` as an allowed browser origin\n * (exact or `https://*.host` wildcard). Used to authorize keyless CORS\n * preflight requests, which carry an `Origin` but no storefront key.\n */\n resolveStorefrontByOrigin(\n context: StorefrontResolveContext,\n origin: string,\n ): Promise<StorefrontDto | null>\n // account policy + methods --------------------------------------------\n updateAccountPolicy(\n context: StorefrontRequestContext,\n storefrontId: string,\n policy: StorefrontCustomerAccountPolicy,\n ): Promise<StorefrontDto>\n updateMethods(\n context: StorefrontRequestContext,\n storefrontId: string,\n methods: StorefrontCustomerAuthMethods,\n ): Promise<StorefrontDto>\n // provider credentials -------------------------------------------------\n listProviderCredentials(\n context: StorefrontRequestContext,\n storefrontId: string,\n ): Promise<StorefrontProviderCredentialStatusDto[]>\n putProviderCredential(\n context: StorefrontRequestContext,\n storefrontId: string,\n provider: StorefrontCustomerAuthSocialProvider,\n credentials: Record<string, unknown>,\n ): Promise<void>\n deleteProviderCredential(\n context: StorefrontRequestContext,\n storefrontId: string,\n provider: StorefrontCustomerAuthSocialProvider,\n ): Promise<void>\n /** Decrypt the stored secrets for the given providers (request-time seam). */\n resolveProviderCredentials(\n context: StorefrontResolveContext,\n storefrontId: string,\n providers: readonly StorefrontCustomerAuthSocialProvider[],\n ): Promise<ResolvedStorefrontProviderCredentials>\n}\n\nconst REQUIRED_METHODS = [\n \"listStorefronts\",\n \"getStorefront\",\n \"createStorefront\",\n \"updateStorefront\",\n \"deleteStorefront\",\n \"setAllowedOrigins\",\n \"listApiKeys\",\n \"issueApiKey\",\n \"rotateApiKey\",\n \"revokeApiKey\",\n \"resolveStorefrontByApiKey\",\n \"resolveStorefrontByOrigin\",\n \"updateAccountPolicy\",\n \"updateMethods\",\n \"listProviderCredentials\",\n \"putProviderCredential\",\n \"deleteProviderCredential\",\n \"resolveProviderCredentials\",\n] as const\n\nexport const storefrontRuntimePort = definePort<StorefrontRuntimeProvider>({\n id: \"auth.storefront-runtime\",\n test(provider) {\n if (provider === null || typeof provider !== \"object\") {\n throw new Error(\"auth.storefront-runtime provider must be an object.\")\n }\n const impl = provider as unknown as Record<string, unknown>\n for (const method of REQUIRED_METHODS) {\n if (typeof impl[method] !== \"function\") {\n throw new Error(`auth.storefront-runtime provider must implement ${method}().`)\n }\n }\n },\n})\n"]}
|