alepha 0.21.2 → 0.22.0

package/dist/security/index.browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.browser.js","names":[],"sources":["../../src/security/atoms/currentTenantAtom.ts","../../src/security/schemas/userAccountInfoSchema.ts","../../src/security/atoms/currentUserAtom.ts","../../src/security/errors/InvalidCredentialsError.ts","../../src/security/errors/InvalidPermissionError.ts","../../src/security/errors/SecurityError.ts","../../src/security/primitives/$secure.browser.ts","../../src/security/schemas/permissionSchema.ts","../../src/security/schemas/roleSchema.ts","../../src/security/index.browser.ts"],"sourcesContent":["import { $atom, t } from \"alepha\";\n\n/**\n * Atom storing the active tenant for the current request.\n *\n * Transport-agnostic — works with HTTP, MCP, pipelines, jobs, and any context\n * that sets the atom before calling tenant-scoped logic.\n *\n * Typically set by an app-level middleware that resolves the tenant from the\n * request `Host` header (or another signal) and writes the resolved id to the\n * store. Framework code that reads this atom:\n *\n * - Repository scoping: `withOrganization` / `stampOrganization` prefer this\n *   value over `currentUserAtom.organization` so cross-tenant users (admins,\n *   agency operators) are scoped to the tenant they are currently acting in\n *   rather than the one they belong to.\n * - Session creation: the value is persisted into the JWT as a `tenant` claim,\n *   and the issuer resolver rejects tokens whose claim does not match the\n *   tenant resolved from the current request.\n *\n * `id` is a free-form string so the framework stays neutral on tenant identity\n * (slug, UUID, composite). Pick whatever matches the column marked with\n * `PG_ORGANIZATION` in your entities.\n */\nexport const currentTenantAtom = $atom({\n  name: \"alepha.security.tenant\",\n  schema: t.optional(\n    t.object({\n      id: t.text({\n        description: \"Tenant identifier (slug, UUID, or composite).\",\n      }),\n    }),\n  ),\n});\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const userAccountInfoSchema = t.object({\n  id: t.text({\n    description: \"Unique identifier for the user.\",\n  }),\n\n  name: t.optional(\n    t.text({\n      description: \"Full name of the user.\",\n    }),\n  ),\n\n  email: t.optional(\n    t.text({\n      description: \"Email address of the user.\",\n      format: \"email\",\n    }),\n  ),\n\n  username: t.optional(\n    t.text({\n      description: \"Preferred username of the user.\",\n    }),\n  ),\n\n  picture: t.optional(\n    t.text({\n      description: \"URL to the user's profile picture.\",\n    }),\n  ),\n\n  sessionId: t.optional(\n    t.text({\n      description: \"Session identifier for the user, if applicable.\",\n    }),\n  ),\n\n  // -------------------------------------------------------------------------------------------------------------------\n\n  organization: t.optional(\n    t.uuid({\n      description: \"Organization the user belongs to.\",\n    }),\n  ),\n\n  roles: t.optional(\n    t.array(t.text(), {\n      description: \"List of roles assigned to the user.\",\n    }),\n  ),\n\n  realm: t.optional(\n    t.text({\n      description: \"The realm (issuer) the user was authenticated from.\",\n    }),\n  ),\n});\n\nexport type UserAccount = Static<typeof userAccountInfoSchema>;\n","import { $atom, t } from \"alepha\";\nimport { userAccountInfoSchema } from \"../schemas/userAccountInfoSchema.ts\";\n\n/**\n * Atom storing the current authenticated user.\n *\n * Transport-agnostic — works with HTTP, MCP, pipelines, jobs, and any context\n * that sets the atom before calling secured logic.\n */\nexport const currentUserAtom = $atom({\n  name: \"alepha.security.user\",\n  schema: t.optional(userAccountInfoSchema),\n});\n","import { UnauthorizedError } from \"alepha/server\";\n\n/**\n * Error thrown when the provided credentials are invalid.\n *\n * Message can not be changed to avoid leaking information.\n * Cause is omitted for the same reason.\n */\nexport class InvalidCredentialsError extends UnauthorizedError {\n  readonly name = \"UnauthorizedError\";\n  constructor() {\n    super(\"Invalid credentials\");\n  }\n}\n","export class InvalidPermissionError extends Error {\n  constructor(name: string) {\n    super(`Permission '${name}' is invalid`);\n  }\n}\n","export class SecurityError extends Error {\n  public name = \"SecurityError\";\n  public readonly status = 403;\n}\n","import { createMiddleware, type Middleware } from \"alepha\";\nimport { currentUserAtom } from \"../atoms/currentUserAtom.ts\";\nimport type { UserAccountToken } from \"../interfaces/UserAccountToken.ts\";\nimport type { SecureOptions } from \"./$secure.ts\";\n\nexport type { SecureOptions };\n\n/**\n * Browser-side middleware that enforces authentication and authorization.\n *\n * Resolves the user from `currentUserAtom` only (no HTTP header resolution).\n * Checks roles from the user object and permissions from the user's roles.\n *\n * In the browser, an unauthenticated or unauthorized user is not an exception —\n * the middleware short-circuits by returning `undefined` and the handler is not called.\n * Components should use `action.can()` to conditionally render UI elements.\n *\n * ```typescript\n * class OrderController {\n *   getOrders = $action({\n *     use: [$secure()],\n *     handler: async ({ query }) => { ... },\n *   });\n *\n *   deleteOrder = $action({\n *     use: [$secure({ permissions: [\"orders:delete\"] })],\n *     handler: async ({ params }) => { ... },\n *   });\n * }\n * ```\n */\nexport function $secure(options?: SecureOptions): Middleware {\n  return createMiddleware({\n    name: \"$secure\",\n    options: (options as unknown as Record<string, unknown>) ?? undefined,\n    handler: ({ alepha, next }) => {\n      return async (...args: any[]) => {\n        const user: UserAccountToken | undefined =\n          alepha.store.get(currentUserAtom);\n\n        if (!user) {\n          return undefined;\n        }\n\n        // Issuer check\n        if (options?.issuers?.length) {\n          if (!user.realm || !options.issuers.includes(user.realm)) {\n            return undefined;\n          }\n        }\n\n        // Role check\n        if (options?.roles?.length) {\n          const hasRole = options.roles.some((role) =>\n            user.roles?.includes(role),\n          );\n          if (!hasRole) {\n            return undefined;\n          }\n        }\n\n        // Permission check (browser-side: check against user roles)\n        // Server-side permissions are enforced by the API — the browser version\n        // trusts that the API registry already filtered actions by permission.\n\n        // Custom guard\n        if (options?.guard) {\n          if (!options.guard(user)) {\n            return undefined;\n          }\n        }\n\n        return next(...args);\n      };\n    },\n  });\n}\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const permissionSchema = t.object({\n  name: t.text({\n    description: \"Name of the permission.\",\n  }),\n\n  group: t.optional(\n    t.text({\n      description: \"Group of the permission.\",\n    }),\n  ),\n\n  description: t.optional(\n    t.text({\n      description: \"Describe the permission.\",\n    }),\n  ),\n\n  // HTTP Only\n\n  method: t.optional(\n    t.text({\n      description: \"HTTP method of the permission. When available.\",\n    }),\n  ),\n\n  path: t.optional(\n    t.text({\n      description: \"Pathname of the permission. When available.\",\n    }),\n  ),\n});\n\nexport type Permission = Static<typeof permissionSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const roleSchema = t.object({\n  name: t.text({\n    description: \"Name of the role.\",\n  }),\n\n  description: t.optional(\n    t.text({\n      description: \"Describe the role.\",\n    }),\n  ),\n\n  default: t.optional(\n    t.boolean({\n      description:\n        \"If true, this role will be assigned to all users by default.\",\n    }),\n  ),\n\n  permissions: t.array(\n    t.object({\n      name: t.text({\n        description: \"Name of the permission.\",\n      }),\n      ownership: t.optional(\n        t.boolean({\n          description:\n            \"If true, user will only have access to it's own resources.\",\n        }),\n      ),\n      exclude: t.optional(\n        t.array(t.text(), {\n          description:\n            \"Exclude some permissions. Useful when 'name' is a wildcard.\",\n        }),\n      ),\n    }),\n  ),\n});\n\nexport type Role = Static<typeof roleSchema>;\n","import { $module } from \"alepha\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./atoms/currentTenantAtom.ts\";\nexport * from \"./atoms/currentUserAtom.ts\";\nexport * from \"./errors/InvalidCredentialsError.ts\";\nexport * from \"./errors/InvalidPermissionError.ts\";\nexport * from \"./errors/SecurityError.ts\";\nexport * from \"./interfaces/UserAccountToken.ts\";\nexport * from \"./primitives/$secure.browser.ts\";\nexport * from \"./schemas/permissionSchema.ts\";\nexport * from \"./schemas/roleSchema.ts\";\nexport * from \"./schemas/userAccountInfoSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport const AlephaSecurity = $module({\n  name: \"alepha.security\",\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAa,oBAAoB,MAAM;CACrC,MAAM;CACN,QAAQ,EAAE,SACR,EAAE,OAAO,EACP,IAAI,EAAE,KAAK,EACT,aAAa,iDACd,CAAC,EACH,CAAC,CACH;CACF,CAAC;;;AC9BF,MAAa,wBAAwB,EAAE,OAAO;CAC5C,IAAI,EAAE,KAAK,EACT,aAAa,mCACd,CAAC;CAEF,MAAM,EAAE,SACN,EAAE,KAAK,EACL,aAAa,0BACd,CAAC,CACH;CAED,OAAO,EAAE,SACP,EAAE,KAAK;EACL,aAAa;EACb,QAAQ;EACT,CAAC,CACH;CAED,UAAU,EAAE,SACV,EAAE,KAAK,EACL,aAAa,mCACd,CAAC,CACH;CAED,SAAS,EAAE,SACT,EAAE,KAAK,EACL,aAAa,sCACd,CAAC,CACH;CAED,WAAW,EAAE,SACX,EAAE,KAAK,EACL,aAAa,mDACd,CAAC,CACH;CAID,cAAc,EAAE,SACd,EAAE,KAAK,EACL,aAAa,qCACd,CAAC,CACH;CAED,OAAO,EAAE,SACP,EAAE,MAAM,EAAE,MAAM,EAAE,EAChB,aAAa,uCACd,CAAC,CACH;CAED,OAAO,EAAE,SACP,EAAE,KAAK,EACL,aAAa,uDACd,CAAC,CACH;CACF,CAAC;;;;;;;;;ACjDF,MAAa,kBAAkB,MAAM;CACnC,MAAM;CACN,QAAQ,EAAE,SAAS,sBAAsB;CAC1C,CAAC;;;;;;;;;ACJF,IAAa,0BAAb,cAA6C,kBAAkB;CAC7D,OAAgB;CAChB,cAAc;EACZ,MAAM,sBAAsB;;;;;ACXhC,IAAa,yBAAb,cAA4C,MAAM;CAChD,YAAY,MAAc;EACxB,MAAM,eAAe,KAAK,cAAc;;;;;ACF5C,IAAa,gBAAb,cAAmC,MAAM;CACvC,OAAc;CACd,SAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC6B3B,SAAgB,QAAQ,SAAqC;CAC3D,OAAO,iBAAiB;EACtB,MAAM;EACN,SAAU,WAAkD,KAAA;EAC5D,UAAU,EAAE,QAAQ,WAAW;GAC7B,OAAO,OAAO,GAAG,SAAgB;IAC/B,MAAM,OACJ,OAAO,MAAM,IAAI,gBAAgB;IAEnC,IAAI,CAAC,MACH;IAIF,IAAI,SAAS,SAAS;SAChB,CAAC,KAAK,SAAS,CAAC,QAAQ,QAAQ,SAAS,KAAK,MAAM,EACtD;;IAKJ,IAAI,SAAS,OAAO;SAId,CAHY,QAAQ,MAAM,MAAM,SAClC,KAAK,OAAO,SAAS,KAAK,CAEhB,EACV;;IASJ,IAAI,SAAS;SACP,CAAC,QAAQ,MAAM,KAAK,EACtB;;IAIJ,OAAO,KAAK,GAAG,KAAK;;;EAGzB,CAAC;;;;ACxEJ,MAAa,mBAAmB,EAAE,OAAO;CACvC,MAAM,EAAE,KAAK,EACX,aAAa,2BACd,CAAC;CAEF,OAAO,EAAE,SACP,EAAE,KAAK,EACL,aAAa,4BACd,CAAC,CACH;CAED,aAAa,EAAE,SACb,EAAE,KAAK,EACL,aAAa,4BACd,CAAC,CACH;CAID,QAAQ,EAAE,SACR,EAAE,KAAK,EACL,aAAa,kDACd,CAAC,CACH;CAED,MAAM,EAAE,SACN,EAAE,KAAK,EACL,aAAa,+CACd,CAAC,CACH;CACF,CAAC;;;AC9BF,MAAa,aAAa,EAAE,OAAO;CACjC,MAAM,EAAE,KAAK,EACX,aAAa,qBACd,CAAC;CAEF,aAAa,EAAE,SACb,EAAE,KAAK,EACL,aAAa,sBACd,CAAC,CACH;CAED,SAAS,EAAE,SACT,EAAE,QAAQ,EACR,aACE,gEACH,CAAC,CACH;CAED,aAAa,EAAE,MACb,EAAE,OAAO;EACP,MAAM,EAAE,KAAK,EACX,aAAa,2BACd,CAAC;EACF,WAAW,EAAE,SACX,EAAE,QAAQ,EACR,aACE,8DACH,CAAC,CACH;EACD,SAAS,EAAE,SACT,EAAE,MAAM,EAAE,MAAM,EAAE,EAChB,aACE,+DACH,CAAC,CACH;EACF,CAAC,CACH;CACF,CAAC;;;ACvBF,MAAa,iBAAiB,QAAQ,EACpC,MAAM,mBACP,CAAC"}
+{"version":3,"file":"index.browser.js","names":[],"sources":["../../src/security/atoms/currentTenantAtom.ts","../../src/security/schemas/userAccountInfoSchema.ts","../../src/security/atoms/currentUserAtom.ts","../../src/security/errors/InvalidCredentialsError.ts","../../src/security/errors/InvalidPermissionError.ts","../../src/security/errors/SecurityError.ts","../../src/security/primitives/$secure.browser.ts","../../src/security/schemas/permissionSchema.ts","../../src/security/schemas/roleSchema.ts","../../src/security/index.browser.ts"],"sourcesContent":["import { $atom, t } from \"alepha\";\n\n/**\n * Atom storing the active tenant for the current request.\n *\n * Transport-agnostic — works with HTTP, MCP, pipelines, jobs, and any context\n * that sets the atom before calling tenant-scoped logic.\n *\n * Typically set by an app-level middleware that resolves the tenant from the\n * request `Host` header (or another signal) and writes the resolved id to the\n * store. Framework code that reads this atom:\n *\n * - Repository scoping: `withOrganization` / `stampOrganization` prefer this\n *   value over `currentUserAtom.organization` so cross-tenant users (admins,\n *   agency operators) are scoped to the tenant they are currently acting in\n *   rather than the one they belong to.\n * - Session creation: the value is persisted into the JWT as a `tenant` claim,\n *   and the issuer resolver rejects tokens whose claim does not match the\n *   tenant resolved from the current request.\n *\n * `id` is a free-form string so the framework stays neutral on tenant identity\n * (slug, UUID, composite). Pick whatever matches the column marked with\n * `PG_ORGANIZATION` in your entities.\n */\nexport const currentTenantAtom = $atom({\n  name: \"alepha.security.tenant\",\n  schema: t.optional(\n    t.object({\n      id: t.text({\n        description: \"Tenant identifier (slug, UUID, or composite).\",\n      }),\n    }),\n  ),\n});\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const userAccountInfoSchema = t.object({\n  id: t.text({\n    description: \"Unique identifier for the user.\",\n  }),\n\n  name: t.optional(\n    t.text({\n      description: \"Full name of the user.\",\n    }),\n  ),\n\n  email: t.optional(\n    t.text({\n      description: \"Email address of the user.\",\n      format: \"email\",\n    }),\n  ),\n\n  username: t.optional(\n    t.text({\n      description: \"Preferred username of the user.\",\n    }),\n  ),\n\n  picture: t.optional(\n    t.text({\n      description: \"URL to the user's profile picture.\",\n    }),\n  ),\n\n  sessionId: t.optional(\n    t.text({\n      description: \"Session identifier for the user, if applicable.\",\n    }),\n  ),\n\n  // -------------------------------------------------------------------------------------------------------------------\n\n  organization: t.optional(\n    t.uuid({\n      description: \"Organization the user belongs to.\",\n    }),\n  ),\n\n  roles: t.optional(\n    t.array(t.text(), {\n      description: \"List of roles assigned to the user.\",\n    }),\n  ),\n\n  realm: t.optional(\n    t.text({\n      description: \"The realm (issuer) the user was authenticated from.\",\n    }),\n  ),\n});\n\nexport type UserAccount = Static<typeof userAccountInfoSchema>;\n","import { $atom, t } from \"alepha\";\nimport { userAccountInfoSchema } from \"../schemas/userAccountInfoSchema.ts\";\n\n/**\n * Atom storing the current authenticated user.\n *\n * Transport-agnostic — works with HTTP, MCP, pipelines, jobs, and any context\n * that sets the atom before calling secured logic.\n */\nexport const currentUserAtom = $atom({\n  name: \"alepha.security.user\",\n  schema: t.optional(userAccountInfoSchema),\n});\n","import { UnauthorizedError } from \"alepha/server\";\n\n/**\n * Error thrown when the provided credentials are invalid.\n *\n * Message can not be changed to avoid leaking information.\n * Cause is omitted for the same reason.\n */\nexport class InvalidCredentialsError extends UnauthorizedError {\n  readonly name = \"UnauthorizedError\";\n  constructor() {\n    super(\"Invalid credentials\");\n  }\n}\n","export class InvalidPermissionError extends Error {\n  constructor(name: string) {\n    super(`Permission '${name}' is invalid`);\n  }\n}\n","export class SecurityError extends Error {\n  public name = \"SecurityError\";\n  public readonly status = 403;\n}\n","import { createMiddleware, type Middleware } from \"alepha\";\nimport { currentUserAtom } from \"../atoms/currentUserAtom.ts\";\nimport type { UserAccountToken } from \"../interfaces/UserAccountToken.ts\";\nimport type { SecureOptions } from \"./$secure.ts\";\n\nexport type { SecureOptions };\n\n/**\n * Browser-side middleware that enforces authentication and authorization.\n *\n * Resolves the user from `currentUserAtom` only (no HTTP header resolution).\n * Checks roles from the user object and permissions from the user's roles.\n *\n * In the browser, an unauthenticated or unauthorized user is not an exception —\n * the middleware short-circuits by returning `undefined` and the handler is not called.\n * Components should use `action.can()` to conditionally render UI elements.\n *\n * ```typescript\n * class OrderController {\n *   getOrders = $action({\n *     use: [$secure()],\n *     handler: async ({ query }) => { ... },\n *   });\n *\n *   deleteOrder = $action({\n *     use: [$secure({ permissions: [\"orders:delete\"] })],\n *     handler: async ({ params }) => { ... },\n *   });\n * }\n * ```\n */\nexport function $secure(options?: SecureOptions): Middleware {\n  return createMiddleware({\n    name: \"$secure\",\n    options: (options as unknown as Record<string, unknown>) ?? undefined,\n    handler: ({ alepha, next }) => {\n      return async (...args: any[]) => {\n        const user: UserAccountToken | undefined =\n          alepha.store.get(currentUserAtom);\n\n        if (!user) {\n          return undefined;\n        }\n\n        // Issuer check\n        if (options?.issuers?.length) {\n          if (!user.realm || !options.issuers.includes(user.realm)) {\n            return undefined;\n          }\n        }\n\n        // Role check\n        if (options?.roles?.length) {\n          const hasRole = options.roles.some((role) =>\n            user.roles?.includes(role),\n          );\n          if (!hasRole) {\n            return undefined;\n          }\n        }\n\n        // Permission check (browser-side: check against user roles)\n        // Server-side permissions are enforced by the API — the browser version\n        // trusts that the API registry already filtered actions by permission.\n\n        // Custom guard\n        if (options?.guard) {\n          if (!options.guard(user)) {\n            return undefined;\n          }\n        }\n\n        return next(...args);\n      };\n    },\n  });\n}\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const permissionSchema = t.object({\n  name: t.text({\n    description: \"Name of the permission.\",\n  }),\n\n  group: t.optional(\n    t.text({\n      description: \"Group of the permission.\",\n    }),\n  ),\n\n  description: t.optional(\n    t.text({\n      description: \"Describe the permission.\",\n    }),\n  ),\n\n  // HTTP Only\n\n  method: t.optional(\n    t.text({\n      description: \"HTTP method of the permission. When available.\",\n    }),\n  ),\n\n  path: t.optional(\n    t.text({\n      description: \"Pathname of the permission. When available.\",\n    }),\n  ),\n});\n\nexport type Permission = Static<typeof permissionSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const roleSchema = t.object({\n  name: t.text({\n    description: \"Name of the role.\",\n  }),\n\n  description: t.optional(\n    t.text({\n      description: \"Describe the role.\",\n    }),\n  ),\n\n  default: t.optional(\n    t.boolean({\n      description:\n        \"If true, this role will be assigned to all users by default.\",\n    }),\n  ),\n\n  permissions: t.array(\n    t.object({\n      name: t.text({\n        description: \"Name of the permission.\",\n      }),\n      ownership: t.optional(\n        t.boolean({\n          description:\n            \"If true, user will only have access to it's own resources.\",\n        }),\n      ),\n      exclude: t.optional(\n        t.array(t.text(), {\n          description:\n            \"Exclude some permissions. Useful when 'name' is a wildcard.\",\n        }),\n      ),\n    }),\n  ),\n});\n\nexport type Role = Static<typeof roleSchema>;\n","import { $module } from \"alepha\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./atoms/currentTenantAtom.ts\";\nexport * from \"./atoms/currentUserAtom.ts\";\nexport * from \"./errors/InvalidCredentialsError.ts\";\nexport * from \"./errors/InvalidPermissionError.ts\";\nexport * from \"./errors/SecurityError.ts\";\nexport * from \"./interfaces/UserAccountToken.ts\";\nexport * from \"./primitives/$secure.browser.ts\";\nexport * from \"./schemas/permissionSchema.ts\";\nexport * from \"./schemas/roleSchema.ts\";\nexport * from \"./schemas/userAccountInfoSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport const AlephaSecurity = $module({\n  name: \"alepha.security\",\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAwBA,MAAa,oBAAoB,MAAM;CACrC,MAAM;CACN,QAAQ,EAAE,SACR,EAAE,OAAO,EACP,IAAI,EAAE,KAAK,EACT,aAAa,gDACf,CAAC,EACH,CAAC,CACH;AACF,CAAC;;;AC9BD,MAAa,wBAAwB,EAAE,OAAO;CAC5C,IAAI,EAAE,KAAK,EACT,aAAa,kCACf,CAAC;CAED,MAAM,EAAE,SACN,EAAE,KAAK,EACL,aAAa,yBACf,CAAC,CACH;CAEA,OAAO,EAAE,SACP,EAAE,KAAK;EACL,aAAa;EACb,QAAQ;CACV,CAAC,CACH;CAEA,UAAU,EAAE,SACV,EAAE,KAAK,EACL,aAAa,kCACf,CAAC,CACH;CAEA,SAAS,EAAE,SACT,EAAE,KAAK,EACL,aAAa,qCACf,CAAC,CACH;CAEA,WAAW,EAAE,SACX,EAAE,KAAK,EACL,aAAa,kDACf,CAAC,CACH;CAIA,cAAc,EAAE,SACd,EAAE,KAAK,EACL,aAAa,oCACf,CAAC,CACH;CAEA,OAAO,EAAE,SACP,EAAE,MAAM,EAAE,KAAK,GAAG,EAChB,aAAa,sCACf,CAAC,CACH;CAEA,OAAO,EAAE,SACP,EAAE,KAAK,EACL,aAAa,sDACf,CAAC,CACH;AACF,CAAC;;;;;;;;;ACjDD,MAAa,kBAAkB,MAAM;CACnC,MAAM;CACN,QAAQ,EAAE,SAAS,qBAAqB;AAC1C,CAAC;;;;;;;;;ACJD,IAAa,0BAAb,cAA6C,kBAAkB;CAC7D,OAAgB;CAChB,cAAc;EACZ,MAAM,qBAAqB;CAC7B;AACF;;;ACbA,IAAa,yBAAb,cAA4C,MAAM;CAChD,YAAY,MAAc;EACxB,MAAM,eAAe,KAAK,aAAa;CACzC;AACF;;;ACJA,IAAa,gBAAb,cAAmC,MAAM;CACvC,OAAc;CACd,SAAyB;AAC3B;;;;;;;;;;;;;;;;;;;;;;;;;;;AC4BA,SAAgB,QAAQ,SAAqC;CAC3D,OAAO,iBAAiB;EACtB,MAAM;EACN,SAAU,WAAkD,KAAA;EAC5D,UAAU,EAAE,QAAQ,WAAW;GAC7B,OAAO,OAAO,GAAG,SAAgB;IAC/B,MAAM,OACJ,OAAO,MAAM,IAAI,eAAe;IAElC,IAAI,CAAC,MACH;IAIF,IAAI,SAAS,SAAS;SAChB,CAAC,KAAK,SAAS,CAAC,QAAQ,QAAQ,SAAS,KAAK,KAAK,GACrD;IAAA;IAKJ,IAAI,SAAS,OAAO;SAId,CAHY,QAAQ,MAAM,MAAM,SAClC,KAAK,OAAO,SAAS,IAAI,CAEhB,GACT;IAAA;IASJ,IAAI,SAAS;SACP,CAAC,QAAQ,MAAM,IAAI,GACrB;IAAA;IAIJ,OAAO,KAAK,GAAG,IAAI;GACrB;EACF;CACF,CAAC;AACH;;;ACzEA,MAAa,mBAAmB,EAAE,OAAO;CACvC,MAAM,EAAE,KAAK,EACX,aAAa,0BACf,CAAC;CAED,OAAO,EAAE,SACP,EAAE,KAAK,EACL,aAAa,2BACf,CAAC,CACH;CAEA,aAAa,EAAE,SACb,EAAE,KAAK,EACL,aAAa,2BACf,CAAC,CACH;CAIA,QAAQ,EAAE,SACR,EAAE,KAAK,EACL,aAAa,iDACf,CAAC,CACH;CAEA,MAAM,EAAE,SACN,EAAE,KAAK,EACL,aAAa,8CACf,CAAC,CACH;AACF,CAAC;;;AC9BD,MAAa,aAAa,EAAE,OAAO;CACjC,MAAM,EAAE,KAAK,EACX,aAAa,oBACf,CAAC;CAED,aAAa,EAAE,SACb,EAAE,KAAK,EACL,aAAa,qBACf,CAAC,CACH;CAEA,SAAS,EAAE,SACT,EAAE,QAAQ,EACR,aACE,+DACJ,CAAC,CACH;CAEA,aAAa,EAAE,MACb,EAAE,OAAO;EACP,MAAM,EAAE,KAAK,EACX,aAAa,0BACf,CAAC;EACD,WAAW,EAAE,SACX,EAAE,QAAQ,EACR,aACE,6DACJ,CAAC,CACH;EACA,SAAS,EAAE,SACT,EAAE,MAAM,EAAE,KAAK,GAAG,EAChB,aACE,8DACJ,CAAC,CACH;CACF,CAAC,CACH;AACF,CAAC;;;ACvBD,MAAa,iBAAiB,QAAQ,EACpC,MAAM,kBACR,CAAC"}

package/dist/security/index.d.ts

@@ -1,23 +1,20 @@
-import * as _$alepha from "alepha";
 import { Alepha, KIND, Middleware, Primitive, Static } from "alepha";
 import { DateTimeProvider, Duration, DurationLike } from "alepha/datetime";
-import * as _$alepha_logger0 from "alepha/logger";
 import { CryptoProvider, SecretProvider } from "alepha/crypto";
 import { FetchOptions, ServerRequest, UnauthorizedError } from "alepha/server";
-import * as _$typebox from "typebox";
 export * from "alepha/crypto";
 
 //#region ../../src/security/schemas/userAccountInfoSchema.d.ts
-declare const userAccountInfoSchema: _$typebox.TObject<{
-  id: _$typebox.TString;
-  name: _$typebox.TOptional<_$typebox.TString>;
-  email: _$typebox.TOptional<_$typebox.TString>;
-  username: _$typebox.TOptional<_$typebox.TString>;
-  picture: _$typebox.TOptional<_$typebox.TString>;
-  sessionId: _$typebox.TOptional<_$typebox.TString>;
-  organization: _$typebox.TOptional<_$typebox.TString>;
-  roles: _$typebox.TOptional<_$typebox.TArray<_$typebox.TString>>;
-  realm: _$typebox.TOptional<_$typebox.TString>;
+declare const userAccountInfoSchema: import("typebox").TObject<{
+  id: import("typebox").TString;
+  name: import("typebox").TOptional<import("typebox").TString>;
+  email: import("typebox").TOptional<import("typebox").TString>;
+  username: import("typebox").TOptional<import("typebox").TString>;
+  picture: import("typebox").TOptional<import("typebox").TString>;
+  sessionId: import("typebox").TOptional<import("typebox").TString>;
+  organization: import("typebox").TOptional<import("typebox").TString>;
+  roles: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
+  realm: import("typebox").TOptional<import("typebox").TString>;
 }>;
 type UserAccount = Static<typeof userAccountInfoSchema>;
 //#endregion
@@ -65,8 +62,8 @@ interface UserAccountToken extends UserAccount {
  * (slug, UUID, composite). Pick whatever matches the column marked with
  * `PG_ORGANIZATION` in your entities.
  */
-declare const currentTenantAtom: _$alepha.Atom<_$typebox.TOptional<_$typebox.TObject<{
-  id: _$typebox.TString;
+declare const currentTenantAtom: import("alepha").Atom<import("typebox").TOptional<import("typebox").TObject<{
+  id: import("typebox").TString;
 }>>, "alepha.security.tenant">;
 //#endregion
 //#region ../../src/security/atoms/currentUserAtom.d.ts
@@ -76,16 +73,16 @@ declare const currentTenantAtom: _$alepha.Atom<_$typebox.TOptional<_$typebox.TOb
  * Transport-agnostic — works with HTTP, MCP, pipelines, jobs, and any context
  * that sets the atom before calling secured logic.
  */
-declare const currentUserAtom: _$alepha.Atom<_$typebox.TOptional<_$typebox.TObject<{
-  id: _$typebox.TString;
-  name: _$typebox.TOptional<_$typebox.TString>;
-  email: _$typebox.TOptional<_$typebox.TString>;
-  username: _$typebox.TOptional<_$typebox.TString>;
-  picture: _$typebox.TOptional<_$typebox.TString>;
-  sessionId: _$typebox.TOptional<_$typebox.TString>;
-  organization: _$typebox.TOptional<_$typebox.TString>;
-  roles: _$typebox.TOptional<_$typebox.TArray<_$typebox.TString>>;
-  realm: _$typebox.TOptional<_$typebox.TString>;
+declare const currentUserAtom: import("alepha").Atom<import("typebox").TOptional<import("typebox").TObject<{
+  id: import("typebox").TString;
+  name: import("typebox").TOptional<import("typebox").TString>;
+  email: import("typebox").TOptional<import("typebox").TString>;
+  username: import("typebox").TOptional<import("typebox").TString>;
+  picture: import("typebox").TOptional<import("typebox").TString>;
+  sessionId: import("typebox").TOptional<import("typebox").TString>;
+  organization: import("typebox").TOptional<import("typebox").TString>;
+  roles: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
+  realm: import("typebox").TOptional<import("typebox").TString>;
 }>>, "alepha.security.user">;
 //#endregion
 //#region ../../src/security/errors/InvalidCredentialsError.d.ts
@@ -487,7 +484,7 @@ interface JWTVerifyOptions extends VerifyOptions, JWTClaimVerificationOptions {}
  * Provides utilities for working with JSON Web Tokens (JWT).
  */
 declare class JwtProvider {
-  protected readonly log: _$alepha_logger0.Logger;
+  protected readonly log: import("alepha/logger").Logger;
   protected readonly keystore: KeyLoaderHolder[];
   protected readonly dateTimeProvider: DateTimeProvider;
   protected readonly encoder: TextEncoder;
@@ -549,24 +546,24 @@ interface JwtParseResult {
 }
 //#endregion
 //#region ../../src/security/schemas/permissionSchema.d.ts
-declare const permissionSchema: _$typebox.TObject<{
-  name: _$typebox.TString;
-  group: _$typebox.TOptional<_$typebox.TString>;
-  description: _$typebox.TOptional<_$typebox.TString>;
-  method: _$typebox.TOptional<_$typebox.TString>;
-  path: _$typebox.TOptional<_$typebox.TString>;
+declare const permissionSchema: import("typebox").TObject<{
+  name: import("typebox").TString;
+  group: import("typebox").TOptional<import("typebox").TString>;
+  description: import("typebox").TOptional<import("typebox").TString>;
+  method: import("typebox").TOptional<import("typebox").TString>;
+  path: import("typebox").TOptional<import("typebox").TString>;
 }>;
 type Permission = Static<typeof permissionSchema>;
 //#endregion
 //#region ../../src/security/schemas/roleSchema.d.ts
-declare const roleSchema: _$typebox.TObject<{
-  name: _$typebox.TString;
-  description: _$typebox.TOptional<_$typebox.TString>;
-  default: _$typebox.TOptional<_$typebox.TBoolean>;
-  permissions: _$typebox.TArray<_$typebox.TObject<{
-    name: _$typebox.TString;
-    ownership: _$typebox.TOptional<_$typebox.TBoolean>;
-    exclude: _$typebox.TOptional<_$typebox.TArray<_$typebox.TString>>;
+declare const roleSchema: import("typebox").TObject<{
+  name: import("typebox").TString;
+  description: import("typebox").TOptional<import("typebox").TString>;
+  default: import("typebox").TOptional<import("typebox").TBoolean>;
+  permissions: import("typebox").TArray<import("typebox").TObject<{
+    name: import("typebox").TString;
+    ownership: import("typebox").TOptional<import("typebox").TBoolean>;
+    exclude: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
   }>>;
 }>;
 type Role = Static<typeof roleSchema>;
@@ -576,7 +573,7 @@ declare class SecurityProvider {
   protected readonly UNKNOWN_USER_NAME = "Anonymous User";
   protected readonly PERMISSION_REGEXP: RegExp;
   protected readonly PERMISSION_REGEXP_WILDCARD: RegExp;
-  protected readonly log: _$alepha_logger0.Logger;
+  protected readonly log: import("alepha/logger").Logger;
   protected readonly jwt: JwtProvider;
   protected readonly alepha: Alepha;
   protected readonly secretProvider: SecretProvider;
@@ -589,7 +586,7 @@ declare class SecurityProvider {
    * The realms configured for the security provider.
    */
   protected readonly realms: Realm[];
-  protected start: _$alepha.HookPrimitive<"start">;
+  protected start: import("alepha").HookPrimitive<"start">;
   /**
    * Creates a default JWT resolver for a realm.
    */
@@ -873,7 +870,7 @@ declare class IssuerPrimitive extends Primitive<IssuerPrimitiveOptions> {
   protected readonly securityProvider: SecurityProvider;
   protected readonly dateTimeProvider: DateTimeProvider;
   protected readonly jwt: JwtProvider;
-  protected readonly log: _$alepha_logger0.Logger;
+  protected readonly log: import("alepha/logger").Logger;
   get name(): string;
   get accessTokenExpiration(): Duration;
   get refreshTokenExpiration(): Duration;
@@ -1142,15 +1139,15 @@ interface ServiceAccountStore {
 //#endregion
 //#region ../../src/security/providers/ServerSecurityProvider.d.ts
 declare class ServerSecurityProvider {
-  protected readonly log: _$alepha_logger0.Logger;
+  protected readonly log: import("alepha/logger").Logger;
   protected readonly securityProvider: SecurityProvider;
   protected readonly jwtProvider: JwtProvider;
   protected readonly alepha: Alepha;
   protected readonly crypto: CryptoProvider;
-  protected readonly onServerRequest: _$alepha.HookPrimitive<"server:onRequest">;
-  protected readonly onActionRequest: _$alepha.HookPrimitive<"action:onRequest">;
+  protected readonly onServerRequest: import("alepha").HookPrimitive<"server:onRequest">;
+  protected readonly onActionRequest: import("alepha").HookPrimitive<"action:onRequest">;
   protected createTestUser(): UserAccountToken;
-  protected readonly onClientRequest: _$alepha.HookPrimitive<"client:onRequest">;
+  protected readonly onClientRequest: import("alepha").HookPrimitive<"client:onRequest">;
 }
 type ServerSecurityUserResolver = (request: ServerRequest) => Promise<UserAccountToken | undefined>;
 //#endregion
@@ -1220,7 +1217,7 @@ declare module "alepha/server" {
  *
  * @module alepha.security
  */
-declare const AlephaSecurity: _$alepha.Service<_$alepha.Module>;
+declare const AlephaSecurity: import("alepha").Service<import("alepha").Module>;
 //#endregion
 export { $basicAuth, $issuer, $permission, $role, $secure, $serviceAccount, AccessTokenResponse, AlephaSecurity, BasicAuthOptions, CreateTokenOptions, ExtendedJWTPayload, InvalidCredentialsError, InvalidPermissionError, IssuerExternal, IssuerInternal, IssuerPrimitive, IssuerPrimitiveOptions, IssuerResolver, IssuerSettings, JwtParseResult, JwtProvider, JwtSignOptions, KeyLoader, KeyLoaderHolder, Oauth2ServiceAccountPrimitiveOptions, Permission, PermissionPrimitive, PermissionPrimitiveOptions, Realm, Role, RolePrimitive, RolePrimitiveOptions, SecureOptions, SecurityCheckResult, SecurityError, SecurityProvider, ServerSecurityProvider, ServerSecurityUserResolver, ServiceAccountPrimitive, ServiceAccountPrimitiveOptions, ServiceAccountStore, UserAccount, UserAccountToken, UserInfo, currentTenantAtom, currentUserAtom, permissionSchema, roleSchema, userAccountInfoSchema };
 //# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":["JWKParameters","kty","alg","key_ops","ext","use","x5c","x5t","x5u","kid","JWK_OKP_Public","crv","x","JWK_OKP_Private","d","JWK_AKP_Public","pub","JWK_AKP_Private","priv","JWK_EC_Public","y","JWK_EC_Private","JWK_RSA_Public","e","n","JWK_RSA_Private","dp","dq","p","q","qi","JWK_oct","k","JWK","GenericGetKeyFunction","IProtectedHeader","IToken","ReturnKeyTypes","Promise","protectedHeader","token","GetKeyFunction","CryptoKey","KeyObject","Uint8Array","FlattenedJWSInput","JWSHeaderParameters","header","payload","protected","signature","GeneralJWSInput","Omit","signatures","FlattenedJWS","Partial","GeneralJWS","JoseHeaderParameters","Pick","jku","jwk","typ","cty","b64","crit","propName","JWEKeyManagementHeaderParameters","apu","apv","p2c","p2s","iv","epk","FlattenedJWE","JWEHeaderParameters","aad","ciphertext","encrypted_key","tag","unprotected","GeneralJWE","recipients","enc","zip","CritOption","DecryptOptions","keyManagementAlgorithms","contentEncryptionAlgorithms","maxPBES2Count","maxDecompressedLength","EncryptOptions","JWTClaimVerificationOptions","Date","audience","clockTolerance","issuer","maxTokenAge","subject","currentDate","requiredClaims","VerifyOptions","algorithms","SignOptions","JWTPayload","iss","sub","aud","jti","nbf","exp","iat","FlattenedDecryptResult","additionalAuthenticatedData","plaintext","sharedUnprotectedHeader","unprotectedHeader","GeneralDecryptResult","CompactDecryptResult","CompactJWEHeaderParameters","FlattenedVerifyResult","GeneralVerifyResult","CompactVerifyResult","CompactJWSHeaderParameters","JWTVerifyResult","PayloadType","JWTHeaderParameters","JWTDecryptResult","ResolvedKey","key","JSONWebKeySet","keys","type","crypto","subtle","generateKey","ReturnType","Awaited","Extract","ProduceJWT","setIssuer","setSubject","setAudience","setJti","jwtId","setNotBefore","input","setExpirationTime","setIssuedAt","types","JWTVerifyOptions","VerifyOptions","JWTClaimVerificationOptions","JWTVerifyGetKey","JWTHeaderParameters","FlattenedJWSInput","CryptoKey","KeyObject","JWK","Uint8Array","GenericGetKeyFunction","jwtVerify","PayloadType","JWTPayload","JWTVerifyResult","Promise","jwt","key","options","ResolvedKey","getKey"],"sources":["../../src/security/schemas/userAccountInfoSchema.ts","../../src/security/interfaces/UserAccountToken.ts","../../src/security/atoms/currentTenantAtom.ts","../../src/security/atoms/currentUserAtom.ts","../../src/security/errors/InvalidCredentialsError.ts","../../src/security/errors/InvalidPermissionError.ts","../../src/security/errors/SecurityError.ts","../../src/security/interfaces/IssuerResolver.ts","../../src/security/primitives/$basicAuth.ts","../../../../node_modules/jose/dist/types/types.d.ts","../../../../node_modules/jose/dist/types/jwt/verify.d.ts","../../src/security/providers/JwtProvider.ts","../../src/security/schemas/permissionSchema.ts","../../src/security/schemas/roleSchema.ts","../../src/security/providers/SecurityProvider.ts","../../src/security/primitives/$issuer.ts","../../src/security/primitives/$permission.ts","../../src/security/primitives/$role.ts","../../src/security/primitives/$secure.ts","../../src/security/primitives/$serviceAccount.ts","../../src/security/providers/ServerSecurityProvider.ts","../../src/security/index.ts"],"x_google_ignoreList":[9,10],"mappings":";;;;;;;;;;cAGa,qBAAA,YAAqB,OAAA;MAuDhC,SAAA,CAAA,OAAA;;;;;;;;;;KAEU,WAAA,GAAc,MAAA,QAAc,qBAAA;;;;;;;UCtDvB,gBAAA,SAAyB,WAAA;;;;EAIxC,KAAA;;ADPF;;ECYE,KAAA;ED2CA;;;;ECrCA,SAAA;AAAA;;;;;;;;;;;;;;ADlBF;;;;;;;;;;;cEqBa,iBAAA,EAAiB,QAAA,CAAA,IAAA,CAAA,SAAA,CAAA,SAAA,WAAA,OAAA;MAS5B,SAAA,CAAA,OAAA;AAAA;;;;;;;;;cCxBW,eAAA,EAAe,QAAA,CAAA,IAAA,CAAA,SAAA,CAAA,SAAA,WAAA,OAAA;MAG1B,SAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;cCJW,uBAAA,SAAgC,iBAAA;EAAA,SAClC,IAAA;;;;;cCTE,sBAAA,SAA+B,KAAA;cAC9B,IAAA;AAAA;;;cCDD,aAAA,SAAsB,KAAA;EAC1B,IAAA;EAAA,SACS,MAAA;AAAA;;;;;;;KCKN,QAAA,GAAW,IAAA,CAAK,WAAA;EAC1B,SAAA;AAAA;;;APLF;UOWiB,cAAA;;;;EAIf,QAAA;;;;;;EAOA,SAAA,GAAY,GAAA,EAAK,aAAA,KAAkB,OAAA,CAAQ,QAAA;AAAA;;;UCrB5B,gBAAA;EACf,QAAA;EACA,QAAA;AAAA;;;;;;;ARHF;;;;;;;;;iBQqBgB,UAAA,CAAW,OAAA,EAAS,gBAAA,GAAmB,UAAA;;;;UCvBtCA,aAAAA;;EAEfC,GAAAA;;;;;;EAMAC,GAAAA;;EAEAC,OAAAA;ET+CA;ES7CAC,GAAAA;ET6CA;ES3CAC,GAAAA;;EAEAC,GAAAA;;EAEAC,GAAAA;;EAEA,UAAA;;EAEAC,GAAAA;;EAEAC,GAAAA;AAAAA;;;;ANhBF;;;;;;;;;;;UM2GiBwB,GAAAA,SAAYjC,aAAAA;;;;;EAK3BW,GAAAA;;;;;;EAMAG,CAAAA;ENtH0B;EMwH1BY,EAAAA;ENxH0B;EM0H1BC,EAAAA;EN1H0B;EM4H1BJ,CAAAA;;EAEAS,CAAAA;;EAEAR,CAAAA;;EAEAI,CAAAA;;EAEAC,CAAAA;;EAEAC,EAAAA;;;;;EAKAlB,CAAAA;;EAEAQ,CAAAA;;EAEAJ,GAAAA;;EAEAE,IAAAA;AAAAA;;;;AH1JF;UG+LiB2B,iBAAAA;;;;;;;EAOfE,MAAAA,GAASD,mBAAAA;;;AF/LX;;EEqMEE,OAAAA,WAAkBJ,UAAAA;EFrMG;;;;;EE4MrBK,SAAAA;;EAGAC,SAAAA;AAAAA;;UAyCeO,oBAAAA;EA9OfnD;EAgPAG,GAAAA;EA1OAD;EA6OAD,GAAAA;EA3OG;EA8OHD,GAAAA;;EAGAE,GAAAA;EAjJAG;EAoJAgD,GAAAA;EA1IAhC;EA6IAiC,GAAAA,GAAMF,IAAAA,CAAKzB,GAAAA;EAvIXT;EA0IAqC,GAAAA;EApIA/B;EAuIAgC,GAAAA;AAAAA;;UAIehB,mBAAAA,SAA4BW,oBAAAA;EAhIvC;AAqCN;;;;EAiGEvD,GAAAA;EApFA8C;;;;EA0FAe,GAAAA;EAvCF;EA0CEC,IAAAA;EAzBU;EAAA,CA4BTC,QAAAA;AAAAA;;UAmIcmB,UAAAA;;;AEtZjB;;;;;;;;;;;;;;;;EFyaEpB,IAAAA;IAAAA,CACGC,QAAAA;EAAAA;AAAAA;;UA0CY0B,2BAAAA;EEtUZ;;;;;EF4UHE,QAAAA;;;;;;;;;AEpUF;EF+UEC,cAAAA;EE9UgB;;;;;EFqVhBC,MAAAA;EElVkC;;;;;;;;EF4VlCC,WAAAA;EEpViB;;;AAGnB;;EFwVEC,OAAAA;EEvVA;;;;;EF8VApC,GAAAA;;EAGAqC,WAAAA,GAAcN,IAAAA;EG/fd;;;;;;;;EHygBAO,cAAAA;AAAAA;;UAIeC,aAAAA,SAAsBhB,UAAAA;EG3iBV;;;;;;;EHmjB3BiB,UAAAA;AAAAA;;UAOeE,UAAAA;;;;AG1hBjB;;EHgiBEC,GAAAA;EGhiBqD;;;;AChCvD;EJukBEC,GAAAA;EIliBA;;;;;EJyiBAC,GAAAA;;;;;;EAOAC,GAAAA;EIrlBqB;;;;;EJ4lBrBC,GAAAA;;;;;;EAOAC,GAAAA;;;;;;EAOAC,GAAAA;;GAGC7C,QAAAA;AAAAA;;UA0Dc0D,eAAAA,eAA8BpB,UAAAA;EK8JlC;EL5JXvD,OAAAA,EAAS4E,WAAAA,GAAcrB,UAAAA;EKsMZ;ELnMXhE,eAAAA,EAAiBsF,mBAAAA;AAAAA;;UAmBFH,0BAAAA,SAAmC5E,mBAAAA;EAClD5C,GAAAA;AAAAA;;UAIe2H,mBAAAA,SAA4BH,0BAAAA;EAC3C3D,GAAAA;AAAAA;;UAUekE,aAAAA;EACfC,IAAAA,EAAMjG,GAAAA;AAAAA;;;;;;UAQSU,SAAAA;EACfwF,IAAAA;AAAAA;;;;;;;KASUzF,SAAAA,GAAY+F,OAAAA,CACtBD,OAAAA,CAAQD,UAAAA,QAAkBH,MAAAA,CAAOC,MAAAA,CAAOC,WAAAA;EACtCH,IAAAA;AAAAA;;;;UChuBakB,gBAAAA,SAAyBD,aAAAA,EAAqBA,2BAAAA;;;;;;cCkBlD,WAAA;EAAA,mBACQ,GAAA,EADG,gBAAA,CACA,MAAA;EAAA,mBACH,QAAA,EAAU,eAAA;EAAA,mBACV,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,OAAA,EAAO,WAAA;EX1Bf;;;;;;EWkCJ,YAAA,CAAa,IAAA,UAAc,eAAA,WAA0B,aAAA;;;;;;;;EAiC/C,KAAA,CACX,KAAA,UACA,OAAA,WACA,OAAA,GAAU,gBAAA,GACT,OAAA,CAAQ,cAAA;;;;;;;;;;EAwDE,MAAA,CACX,OAAA,EAAS,kBAAA,EACT,OAAA,WACA,WAAA,GAAc,cAAA,GACb,OAAA;;;;;;;YAyBO,WAAA,CAAY,GAAA;AAAA;AAAA,KAKZ,SAAA,IACV,eAAA,GAAkB,mBAAA,EAClB,KAAA,GAAQ,iBAAA,KACL,OAAA,CAAQ,SAAA,GAAY,SAAA;AAAA,UAER,eAAA;EACf,IAAA;EACA,SAAA,EAAW,SAAA;EACX,SAAA;AAAA;AAAA,UAGe,cAAA;EACf,MAAA,GAAS,OAAA,CAAQ,mBAAA;AAAA;AAAA,UAGF,kBAAA,SAA2B,UAAA;EAC1C,GAAA;EAEA,IAAA;EACA,KAAA;EACA,KAAA;EACA,YAAA;EAEA,YAAA;IAAiB,KAAA;EAAA;AAAA;AAAA,UAGF,cAAA;EACf,OAAA;EACA,MAAA,EAAQ,eAAA,CAAgB,kBAAA;AAAA;;;cC7Lb,gBAAA,YAAgB,OAAA;QA8B3B,SAAA,CAAA,OAAA;;;;;;KAEU,UAAA,GAAa,MAAA,QAAc,gBAAA;;;cChC1B,UAAA,YAAU,OAAA;QAqCrB,SAAA,CAAA,OAAA;;;;;;;;;KAEU,IAAA,GAAO,MAAA,QAAc,UAAA;;;cCdpB,gBAAA;EAAA,mBACQ,iBAAA;EAAA,mBACA,iBAAA,EAAiB,MAAA;EAAA,mBACjB,0BAAA,EAA0B,MAAA;EAAA,mBAG1B,GAAA,EAH0B,gBAAA,CAGvB,MAAA;EAAA,mBACH,GAAA,EAAG,WAAA;EAAA,mBACH,MAAA,EAAM,MAAA;EAAA,mBACN,cAAA,EAAc,cAAA;EAAA,IAEtB,SAAA,CAAA;;;;qBAOQ,WAAA,EAAa,UAAA;;;;qBAKb,MAAA,EAAQ,KAAA;EAAA,UAmBjB,KAAA,EAnBsB,QAAA,CAmBjB,aAAA;;;;YAwBL,wBAAA,CAAyB,SAAA,WAAoB,cAAA;;;;;;;EAgDhD,UAAA,CAAW,IAAA,EAAM,IAAA,KAAS,MAAA,aAAmB,IAAA;;;;;;EAgE7C,gBAAA,CAAiB,GAAA,EAAK,UAAA,YAAsB,UAAA;EA0D5C,WAAA,CAAY,KAAA,EAAO,KAAA;;;;;;;;;EAiBb,WAAA,CAAY,KAAA,UAAe,KAAA,EAAO,IAAA,KAAS,OAAA;;;;;;;;;EAuBjD,qBAAA,CACL,OAAA,EAAS,UAAA,EACT,SAAA,YACC,WAAA;;AdvPL;;;Ec8RS,UAAA,CACL,QAAA,EAAU,QAAA,EACV,OAAA;IACE,KAAA;IACA,UAAA,GAAa,UAAA;EAAA,IAEd,gBAAA;;Ab1VL;;;Ea8XS,gBAAA,CAAiB,QAAA,EAAU,cAAA,EAAgB,SAAA;Eb9XV;;;;Ea4YjC,QAAA,CAAS,SAAA,YAAqB,KAAA;Eb7X5B;;;;ACGX;;;;;EY+Ye,4BAAA,CACX,GAAA;IAAO,GAAA,EAAK,GAAA;IAAc,OAAA;MAAW,aAAA;IAAA;EAAA,GACrC,OAAA;IACE,KAAA;IACA,UAAA,GAAa,UAAA;EAAA,IAEd,OAAA,CAAQ,gBAAA;;;;;;AXpab;;;EW8dS,eAAA,CACL,cAAA,WAAyB,UAAA,KACtB,WAAA,aACF,mBAAA;;;;EAwFU,mBAAA,CACX,aAAA,WACA,OAAA;IACE,UAAA,GAAa,UAAA;IACb,KAAA;IACA,MAAA,GAAS,gBAAA;EAAA,IAEV,OAAA,CAAQ,gBAAA;;;;;;;;EA2DJ,GAAA,CAAI,QAAA,UAAkB,UAAA,WAAqB,UAAA;;;;EAO3C,SAAA,CACL,QAAA,UACA,UAAA,WAAqB,UAAA;EXpoBG;;;;;EW8oBnB,kBAAA,CAAmB,UAAA,EAAY,UAAA;;;;EAoB/B,YAAA,CAAa,IAAA,EAAM,gBAAA,EAAkB,OAAA;;;;EAWrC,kBAAA,CAAmB,IAAA,EAAM,gBAAA;EAOzB,SAAA,CAAA,GAAa,KAAA;;;;;;EASb,QAAA,CAAS,KAAA,YAAiB,IAAA;;;;;;;;EAe1B,cAAA,CAAe,IAAA;IACpB,KAAA,GAAQ,KAAA,CAAM,IAAA;IACd,KAAA;EAAA,IACE,UAAA;;;;;;AVhtBN;EU+yBS,gBAAA,CAAiB,OAAA,EAAS,MAAA;EAgB1B,uBAAA,CACL,OAAA,EAAS,MAAA;EVh0BiD;;;;;EU+0BrD,mBAAA,CAAoB,OAAA,EAAS,MAAA;EAI7B,qBAAA,CACL,OAAA,EAAS,MAAA;EAqBJ,sBAAA,CACL,OAAA,EAAS,MAAA;EAiBJ,mBAAA,CAAoB,OAAA,EAAS,MAAA;ETn4BzB;;;;;;ESq5BJ,kBAAA,CAAmB,OAAA,EAAS,MAAA;EAmB5B,0BAAA,CACL,OAAA,EAAS,MAAA;ETx6Ba;;;;ACD1B;;;EQ27BS,oBAAA,CACL,OAAA,EAAS,MAAA;AAAA;;;;UAiBI,KAAA;EACf,IAAA;EAEA,KAAA,EAAO,IAAA;;APz8BT;;;;EOg9BE,MAAA,YAAkB,aAAA;EPh9BQ;;;;EOs9B1B,OAAA,IAAW,GAAA,EAAK,MAAA,kBAAwB,WAAA;EP/8BX;;;EOo9B7B,SAAA,GAAY,cAAA;AAAA;AAAA,UAGG,mBAAA;EACf,YAAA;EACA,SAAA;AAAA;;;;;;Adp+BF;;;ce2Ba,OAAA;EAAA,UAAoB,sBAAA,GAAyB,eAAA;EAAA;;KAM9C,sBAAA;;;;;EAKV,IAAA;;;;EAKA,WAAA;;;;EAKA,KAAA,GAAQ,KAAA,UAAe,IAAA;;;;EAKvB,QAAA,GAAW,cAAA;;;;EAKX,OAAA,IAAW,UAAA,EAAY,MAAA,kBAAwB,WAAA;;;;EAK/C,SAAA,GAAY,cAAA;AAAA,KACT,cAAA,GAAiB,cAAA;AAAA,UAEL,cAAA;EACf,WAAA;;;;;IAKE,UAAA,GAAa,YAAA;EAAA;EAGf,YAAA;;;;;IAKE,UAAA,GAAa,YAAA;EAAA;EAUf,eAAA,IACE,IAAA,EAAM,WAAA,EACN,MAAA;IACE,SAAA;;;;AfpCN;;Ie0CM,QAAA;EAAA,MAEC,OAAA;IACH,YAAA;IACA,SAAA;EAAA;EAGF,gBAAA,IAAoB,YAAA,aAAyB,OAAA;IAC3C,IAAA,EAAM,WAAA;IACN,SAAA;IACA,SAAA;EAAA;EAGF,eAAA,IAAmB,YAAA,aAAyB,OAAA;AAAA;AAAA,KAGlC,cAAA;EdjGV;;;EcqGA,MAAA;AAAA;AAAA,UAGe,cAAA;EbrGJ;;;EayGX,IAAA,mBAAuB,aAAA;AAAA;AAAA,cAKZ,eAAA,SAAwB,SAAA,CAAU,sBAAA;EAAA,mBAC1B,MAAA,EAAM,MAAA;EAAA,mBACN,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,GAAA,EAAG,WAAA;EAAA,mBACH,GAAA,EADG,gBAAA,CACA,MAAA;EAAA,IAEX,IAAA,CAAA;EAAA,IAIA,qBAAA,CAAA,GAAyB,QAAA;EAAA,IAMzB,sBAAA,CAAA,GAA0B,QAAA;EAAA,UAM3B,MAAA,CAAA;;;;YAkCA,iBAAA,CAAA,GAAqB,cAAA;EZtLpB;;;;EYsNJ,gBAAA,CAAiB,QAAA,EAAU,cAAA;;;;EAO3B,QAAA,CAAA,GAAY,IAAA;;;;EAON,QAAA,CAAS,KAAA,EAAO,IAAA,KAAS,OAAA;;;;EAO/B,aAAA,CAAc,IAAA,WAAe,IAAA;EAQvB,UAAA,CAAW,KAAA,WAAgB,OAAA,CAAQ,UAAA;;;;EAQnC,WAAA,CACX,IAAA,EAAM,WAAA,EACN,YAAA;IACE,GAAA;IACA,aAAA;IACA,wBAAA;EAAA,GAEF,OAAA;IZlQwB;;;;IYuQtB,QAAA;EAAA,IAED,OAAA,CAAQ,mBAAA;EA4FE,YAAA,CACX,YAAA,UACA,WAAA,YACC,OAAA;IACD,MAAA,EAAQ,mBAAA;IACR,IAAA,EAAM,WAAA;EAAA;AAAA;AAAA,UAoEO,kBAAA;EACf,GAAA;EACA,KAAA;EACA,KAAA;AAAA;AAAA,UAGe,mBAAA;EACf,YAAA;EACA,UAAA;EACA,UAAA;EACA,SAAA;EACA,aAAA;EACA,wBAAA;EACA,KAAA;AAAA;;;;;;cC7bW,WAAA;EAAA,WACF,0BAAA,GACR,mBAAA;EAAA;;UAMc,0BAAA;EhBZJ;;;EgBgBX,IAAA;;;;EAKA,KAAA;;;;EAKA,WAAA;AAAA;AAAA,cAKW,mBAAA,SAA4B,SAAA,CAAU,0BAAA;EAAA,mBAC9B,gBAAA,EAAgB,gBAAA;EAAA,IAExB,IAAA,CAAA;EAAA,IAIA,KAAA,CAAA;EAIJ,QAAA,CAAA;EAAA,UAIG,MAAA,CAAA;;;;EAWH,GAAA,CAAI,IAAA,GAAO,WAAA;AAAA;;;;;;cCpDP,KAAA;EAAA,WAAkB,oBAAA,GAA4B,aAAA;EAAA;;UAM1C,oBAAA;EjB4Cf;;;EiBxCA,IAAA;;;;EAKA,WAAA;EAEA,MAAA,YAAkB,eAAA;EAElB,WAAA,GAAc,KAAA;IAGR,IAAA;IACA,SAAA;IACA,OAAA;EAAA;AAAA;AAAA,cAKK,aAAA,SAAsB,SAAA,CAAU,oBAAA;EAAA,mBACxB,gBAAA,EAAgB,gBAAA;EAAA,IAExB,IAAA,CAAA;EAAA,UAID,MAAA,CAAA;;;;MAoBC,MAAA,CAAA,YAAmB,eAAA;EAIvB,GAAA,CAAI,UAAA,WAAqB,mBAAA;EAIzB,KAAA,CAAM,UAAA,WAAqB,mBAAA,GAAmB,mBAAA;AAAA;;;UCjEtC,aAAA;;;;;EAKf,OAAA;;;AlBTF;EkBcE,KAAA;;;;EAKA,WAAA,aAAwB,UAAA;;;;;EAMxB,KAAA,IAAS,IAAA,EAAM,gBAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AlBgCjB;;;;;;;;ACtDA;;;;iBiB+EgB,OAAA,CAAQ,OAAA,GAAU,aAAA,GAAgB,UAAA;;;;;;;;;;;;AlBlFlD;;;;;;;;;;;;;;;;;;;cmB8Ba,eAAA,GACX,OAAA,EAAS,8BAAA,KACR,uBAAA;AAAA,KAqHS,8BAAA;EACV,WAAA;AAAA;EAGI,MAAA,EAAQ,oCAAA;AAAA;EAGR,MAAA,EAAQ,eAAA;EACR,IAAA,EAAM,WAAA;AAAA;AAAA,UAIK,oCAAA;;;;EAIf,GAAA;;;;EAKA,QAAA;;;;EAKA,YAAA;AAAA;AAAA,UAGe,uBAAA;EACf,KAAA,QAAa,OAAA;AAAA;AAAA,UAGE,mBAAA;EACf,QAAA,GAAW,mBAAA;AAAA;;;cCjLA,sBAAA;EAAA,mBACQ,GAAA,EADc,gBAAA,CACX,MAAA;EAAA,mBACH,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,WAAA,EAAW,WAAA;EAAA,mBACX,MAAA,EAAM,MAAA;EAAA,mBACN,MAAA,EAAM,cAAA;EAAA,mBAEN,eAAA,EAFM,QAAA,CAES,aAAA;EAAA,mBA8Bf,eAAA,EA9Be,QAAA,CA8BA,aAAA;EAAA,UA0BxB,cAAA,CAAA,GAAkB,gBAAA;EAAA,mBAQT,eAAA,EARyB,QAAA,CAQV,aAAA;AAAA;AAAA,KAmCxB,0BAAA,IACV,OAAA,EAAS,aAAA,KACN,OAAA,CAAQ,gBAAA;;;;YC9ED,KAAA;IACR,uBAAA;MACE,KAAA;MACA,IAAA,EAAM,WAAA;IAAA;EAAA;EAAA,UAIA,KAAA;;;;;;;IAOR,6BAAA,GAAgC,gBAAA;;;;IAKhC,sBAAA,GAAyB,WAAA;;;;;;;;IASzB,wBAAA;MAA6B,EAAA;IAAA;EAAA;AAAA;AAAA;EAAA,UAKrB,aAAA;IACR,IAAA,GAAO,gBAAA;EAAA;EAAA,UAGC,mBAAA;IACR,IAAA,EAAM,gBAAA;EAAA;EAAA,UAGE,oBAAA,SAA6B,YAAA;;;;ArBpBzC;;;;IqB4BI,IAAA,GAAO,gBAAA;EAAA;AAAA;;ApBlFX;;;;;;;;;;;;;ACkBA;;cmBsFa,cAAA,EAAc,QAAA,CAAA,OAAA,CAKzB,QAAA,CALyB,MAAA"}
+{"version":3,"file":"index.d.ts","names":["kty","alg","key_ops","ext","use","x5c","x5t","x5u","kid","JWKParameters","crv","x","JWK_OKP_Public","d","pub","JWK_AKP_Public","priv","y","JWK_EC_Public","e","n","JWK_RSA_Public","dp","dq","p","q","qi","k","IProtectedHeader","IToken","ReturnKeyTypes","protectedHeader","token","Promise","GenericGetKeyFunction","CryptoKey","KeyObject","JWK","Uint8Array","header","JWSHeaderParameters","payload","protected","signature","signatures","Omit","FlattenedJWSInput","Partial","jku","jwk","Pick","typ","cty","JoseHeaderParameters","b64","crit","propName","apu","apv","p2c","p2s","iv","epk","aad","ciphertext","encrypted_key","JWEHeaderParameters","tag","unprotected","FlattenedJWE","recipients","enc","zip","CritOption","keyManagementAlgorithms","contentEncryptionAlgorithms","maxPBES2Count","maxDecompressedLength","audience","clockTolerance","issuer","maxTokenAge","subject","currentDate","Date","requiredClaims","algorithms","iss","sub","aud","jti","nbf","exp","iat","additionalAuthenticatedData","plaintext","sharedUnprotectedHeader","unprotectedHeader","FlattenedDecryptResult","CompactJWEHeaderParameters","FlattenedVerifyResult","CompactJWSHeaderParameters","PayloadType","JWTPayload","JWTHeaderParameters","key","keys","type","Extract","Awaited","ReturnType","crypto","subtle","generateKey","setIssuer","setSubject","setAudience","setJti","jwtId","setNotBefore","input","setExpirationTime","setIssuedAt","types","VerifyOptions","JWTClaimVerificationOptions","GenericGetKeyFunction","JWTHeaderParameters","FlattenedJWSInput","CryptoKey","KeyObject","JWK","Uint8Array","PayloadType","JWTPayload","jwt","key","JWTVerifyOptions","options","Promise","JWTVerifyResult","JWTVerifyGetKey","getKey","ResolvedKey"],"sources":["../../src/security/schemas/userAccountInfoSchema.ts","../../src/security/interfaces/UserAccountToken.ts","../../src/security/atoms/currentTenantAtom.ts","../../src/security/atoms/currentUserAtom.ts","../../src/security/errors/InvalidCredentialsError.ts","../../src/security/errors/InvalidPermissionError.ts","../../src/security/errors/SecurityError.ts","../../src/security/interfaces/IssuerResolver.ts","../../src/security/primitives/$basicAuth.ts","../../../../node_modules/jose/dist/types/types.d.ts","../../../../node_modules/jose/dist/types/jwt/verify.d.ts","../../src/security/providers/JwtProvider.ts","../../src/security/schemas/permissionSchema.ts","../../src/security/schemas/roleSchema.ts","../../src/security/providers/SecurityProvider.ts","../../src/security/primitives/$issuer.ts","../../src/security/primitives/$permission.ts","../../src/security/primitives/$role.ts","../../src/security/primitives/$secure.ts","../../src/security/primitives/$serviceAccount.ts","../../src/security/providers/ServerSecurityProvider.ts","../../src/security/index.ts"],"x_google_ignoreList":[9,10],"mappings":";;;;;;;cAGa,qBAAA,oBAAqB,OAAA;;;;;;;;;;;KAyDtB,WAAA,GAAc,MAAM,QAAQ,qBAAA;;;;;;;UCtDvB,gBAAA,SAAyB,WAAW;;;ADHrD;ECOE,KAAA;;;;EAKA,KAAA;;;;;EAMA,SAAA;AAAA;;;;;;;;;;;ADlBF;;;;;;;;;;;;;;cEqBa,iBAAA,mBAAiB,IAAA,mBAAA,SAAA,mBAAA,OAAA;;;;;;;;;;;cCfjB,eAAA,mBAAe,IAAA,mBAAA,SAAA,mBAAA,OAAA;;;;;;;;;;;;;;;;;;;cCDf,uBAAA,SAAgC,iBAAiB;EAAA,SACnD,IAAA;;;;;cCTE,sBAAA,SAA+B,KAAK;cACnC,IAAA;AAAA;;;cCDD,aAAA,SAAsB,KAAK;EAC/B,IAAA;EAAA,SACS,MAAA;AAAA;;;;;;;KCKN,QAAA,GAAW,IAAI,CAAC,WAAA;EAC1B,SAAA;AAAA;;;;UAMe,cAAA;;;;EAIf,QAAA;;;;;;EAOA,SAAA,GAAY,GAAA,EAAK,aAAA,KAAkB,OAAA,CAAQ,QAAA;AAAA;;;UCrB5B,gBAAA;EACf,QAAA;EACA,QAAQ;AAAA;;;;ARHV;;;;;;;;;;;;iBQqBgB,UAAA,CAAW,OAAA,EAAS,gBAAA,GAAmB,UAAU;;;;UCvBhD,aAAA;;EAEfA,GAAAA;;;;;ATAF;ESMEC,GAAAA;;EAEAC,OAAAA;ETRgC;ESUhCC,GAAAA;;EAEAC,GAAAA;;EAEAC,GAAAA;;EAEAC,GAAAA;;EAEA,UAAA;;EAEAC,GAAAA;;EAEAC,GAAAA;AAAAA;;;;;;;;;;;;;;;UA2Fe,GAAA,SAAY,aAAa;EL5GL;;;;EKiHnCE,GAAAA;;;;;;EAMAG,CAAAA;EJ/HF;EIiIES,EAAAA;;EAEAC,EAAAA;EJnI0C;EIqI1CJ,CAAAA;EJpIY;EIsIZQ,CAAAA;EJtIwB;EIwIxBP,CAAAA;;EAEAI,CAAAA;EH3IF;EG6IEC,CAAAA;;EAEAC,EAAAA;EH/IiC;;;;EGoJjCf,CAAAA;;EAEAM,CAAAA;;EAEAH,GAAAA;EFjJkB;EEmJlBE,IAAAA;AAAAA;;;;;UAqCe,iBAAA;EDvKgD;AAAA;;;;ACvBjE;EAqMEuB,MAAAA,GAAS,mBAAA;EArMmB;;;;EA2M5BE,OAAAA,WAAkB,UAAU;EA3L5BpC;;;;;EAkMAqC,SAAAA;EA/FF;EAkGEC,SAAAA;AAAAA;;UAyCe,oBAAA;EAiBTO;EAfN1C,GAAAA;EAqBA4C;EAlBA9C,GAAAA;EAsBF;EAnBED,GAAAA;EAmB+D;EAhB/DE,GAAAA;EA4BA+C;EAzBAN,GAAAA;EA+BiB;EA5BjBC,GAAAA,GAAM,IAAI,CAAC,GAAA;EA+Jc;EA5JzBE,GAAAA;EAgLmB;EA7KnBC,GAAAA;AAAAA;;UAIe,mBAAA,SAA4B,oBAAoB;EAoO/D2B;;;;;EA9NA9E,GAAAA;EA0QAoF;;AAAc;AAIhB;EAxQE/B,GAAAA;EAwQqCmB;EArQrClB,IAAAA;EAoRyB;EAAA,CAjRxBC,QAAAA;AAAAA;;UAmIc,UAAA;EE1QG;;;;;;;;;;;;;;;AAEc;AAElC;;EFyRED,IAAAA;IAAAA,CACGC,QAAgB;EAAA;AAAA;;UA0CJ,2BAAA;EG1ejB;;;;;EHgfEsB,QAAAA;;;;;;;;;;EAWAC,cAAAA;;;;AG3dF;;EHkeEC,MAAAA;EGleqD;;;;AChCvD;;;;EJ4gBEC,WAAAA;;;;;;EAOAC,OAAAA;;;;;;EAOA/B,GAAAA;;EAGAgC,WAAAA,GAAc,IAAI;;;;;AItfpB;;;;EJggBEE,cAAAA;AAAAA;;UAIe,aAAA,SAAsB,UAAU;EKlhBpB;;;;;;;EL0hB3BC,UAAU;AAAA;;UAOK,UAAA;EKpSgC;;;;;EL0S/CC,GAAAA;EK/LkC;;;;;ELsMlCC,GAAAA;EKhGG;;;;;ELuGHC,GAAAA;EKsEsC;;;;;EL/DtCC,GAAAA;EKgII;;;;;ELzHJC,GAAAA;EKsTmC;;;;;EL/SnCC,GAAAA;EKxkBoC;;;;;EL+kBpCC,GAAAA;EKzkBmB;EAAA,CL4kBlBrC,QAAAA;AAAAA;;UA0Dc,eAAA,eAA8B,UAAA;EKjQ3C;ELmQFf,OAAAA,EAAS,WAAA,GAAc,UAAA;EKrMhB;ELwMPV,eAAAA,EAAiB,mBAAA;AAAA;;UAmBF,0BAAA,SAAmC,mBAAmB;EACrE9B,GAAG;AAAA;;UAIY,mBAAA,SAA4B,0BAA0B;EACrEqD,GAAG;AAAA;;UAUY,aAAA;EACfoD,IAAAA,EAAM,GAAG;AAAA;;;;;;UAQM,SAAA;EACfC,IAAI;AAAA;;;;;;;KASM,SAAA,GAAY,OAAA,CACtB,OAAA,CAAQ,UAAA,QAAkB,MAAA,CAAO,MAAA,CAAO,WAAA;EACtCA,IAAAA;AAAAA;;;;UChuBa,gBAAA,SAAyB,aAAA,EAAqB,2BAAiC;;;;;;cCkBnF,WAAA;EAAA,mBACQ,GAAA,0BAAG,MAAA;EAAA,mBACH,QAAA,EAAU,eAAA;EAAA,mBACV,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,OAAA,EAAO,WAAA;EX6B1B;;;;;;EWrBO,YAAA,CAAa,IAAA,UAAc,eAAA,WAA0B,aAAA;;;;;;;;EAiC/C,KAAA,CACX,KAAA,UACA,OAAA,WACA,OAAA,GAAU,gBAAA,GACT,OAAA,CAAQ,cAAA;;;;;;;;;;EAwDE,MAAA,CACX,OAAA,EAAS,kBAAA,EACT,OAAA,WACA,WAAA,GAAc,cAAA,GACb,OAAA;;;;;;;YAyBO,WAAA,CAAY,GAAA;AAAA;AAAA,KAKZ,SAAA,IACV,eAAA,GAAkB,mBAAA,EAClB,KAAA,GAAQ,iBAAA,KACL,OAAA,CAAQ,SAAA,GAAY,SAAA;AAAA,UAER,eAAA;EACf,IAAA;EACA,SAAA,EAAW,SAAS;EACpB,SAAA;AAAA;AAAA,UAGe,cAAA;EACf,MAAA,GAAS,OAAO,CAAC,mBAAA;AAAA;AAAA,UAGF,kBAAA,SAA2B,UAAU;EACpD,GAAA;EAEA,IAAA;EACA,KAAA;EACA,KAAA;EACA,YAAA;EAEA,YAAA;IAAiB,KAAA;EAAA;AAAA;AAAA,UAGF,cAAA;EACf,OAAA;EACA,MAAA,EAAQ,eAAe,CAAC,kBAAA;AAAA;;;cC7Lb,gBAAA,oBAAgB,OAAA;;;;;;;KAgCjB,UAAA,GAAa,MAAM,QAAQ,gBAAA;;;cChC1B,UAAA,oBAAU,OAAA;;;;;;;;;;KAuCX,IAAA,GAAO,MAAM,QAAQ,UAAA;;;cCdpB,gBAAA;EAAA,mBACQ,iBAAA;EAAA,mBACA,iBAAA,EAAiB,MAAA;EAAA,mBACjB,0BAAA,EAA0B,MAAA;EAAA,mBAG1B,GAAA,0BAAG,MAAA;EAAA,mBACH,GAAA,EAAG,WAAA;EAAA,mBACH,MAAA,EAAM,MAAA;EAAA,mBACN,cAAA,EAAc,cAAA;EAAA,IAEtB,SAAA;;;;qBAOQ,WAAA,EAAa,UAAA;;;;qBAKb,MAAA,EAAQ,KAAA;EAAA,UAmBjB,KAAA,mBAAK,aAAA;;;;YAwBL,wBAAA,CAAyB,SAAA,WAAoB,cAAA;;;;;;;EAgDhD,UAAA,CAAW,IAAA,EAAM,IAAA,KAAS,MAAA,aAAmB,IAAA;;;;AdlFtD;;EckJS,gBAAA,CAAiB,GAAA,EAAK,UAAA,YAAsB,UAAA;EA0D5C,WAAA,CAAY,KAAA,EAAO,KAAA;Ed5MiC;;;;ACtD7D;;;;EamRe,WAAA,CAAY,KAAA,UAAe,KAAA,EAAO,IAAA,KAAS,OAAA;Eb/QxD;;;;AAWS;;;;Ea2RF,qBAAA,CACL,OAAA,EAAS,UAAA,EACT,SAAA,YACC,WAAA;EZlRH;;;;EYyTO,UAAA,CACL,QAAA,EAAU,QAAA,EACV,OAAA;IACE,KAAA;IACA,UAAA,GAAa,UAAA;EAAA,IAEd,gBAAA;;;;;EAoCI,gBAAA,CAAiB,QAAA,EAAU,cAAA,EAAgB,SAAA;EX3XvC;;;;EWyYJ,QAAA,CAAS,SAAA,YAAqB,KAAA;EXzYX;;;;;;;;;EW8Zb,4BAAA,CACX,GAAA;IAAO,GAAA,EAAK,GAAA;IAAc,OAAA;MAAW,aAAA;IAAA;EAAA,GACrC,OAAA;IACE,KAAA;IACA,UAAA,GAAa,UAAA;EAAA,IAEd,OAAA,CAAQ,gBAAA;;;;;;;;;EA0DJ,eAAA,CACL,cAAA,WAAyB,UAAA,KACtB,WAAA,aACF,mBAAA;;;;EAwFU,mBAAA,CACX,aAAA,WACA,OAAA;IACE,UAAA,GAAa,UAAA;IACb,KAAA;IACA,MAAA,GAAS,gBAAA;EAAA,IAEV,OAAA,CAAQ,gBAAA;EVjkBwB;;;;;;;EU4nB5B,GAAA,CAAI,QAAA,UAAkB,UAAA,WAAqB,UAAA;;;;EAO3C,SAAA,CACL,QAAA,UACA,UAAA,WAAqB,UAAA;ET7oBW;;;;;ESupB3B,kBAAA,CAAmB,UAAA,EAAY,UAAA;ETtpBd;AAAA;;ES0qBjB,YAAA,CAAa,IAAA,EAAM,gBAAA,EAAkB,OAAA;;AR3qB9C;;EQsrBS,kBAAA,CAAmB,IAAA,EAAM,gBAAA;EAOzB,SAAA,IAAa,KAAA;ER7rBa;;;;AAEX;EQosBf,QAAA,CAAS,KAAA,YAAiB,IAAA;;;AP/rBnC;;;;;EO8sBS,cAAA,CAAe,IAAA;IACpB,KAAA,GAAQ,KAAA,CAAM,IAAA;IACd,KAAA;EAAA,IACE,UAAA;EP1sBW;;;;;;EOyyBR,gBAAA,CAAiB,OAAA,EAAS,MAAA;EAgB1B,uBAAA,CACL,OAAA,EAAS,MAAA;EPtzBX;;;;;EOq0BO,mBAAA,CAAoB,OAAA,EAAS,MAAA;EAI7B,qBAAA,CACL,OAAA,EAAS,MAAA;EAqBJ,sBAAA,CACL,OAAA,EAAS,MAAA;EAiBJ,mBAAA,CAAoB,OAAA,EAAS,MAAA;;;AN/3BtC;;;;EMi5BS,kBAAA,CAAmB,OAAA,EAAS,MAAA;EAmB5B,0BAAA,CACL,OAAA,EAAS,MAAA;ENj5Ba;;;;;;;EMm6BjB,oBAAA,CACL,OAAA,EAAS,MAAA;AAAA;;;AL37Bb;UK48BiB,KAAA;EACf,IAAA;EAEA,KAAA,EAAO,IAAA;EL78BP3G;;;;;EKo9BA,MAAA,YAAkB,aAAA;ELp8BlBM;;;;EK08BA,OAAA,IAAW,GAAA,EAAK,MAAA,kBAAwB,WAAA;ELp8BrC;AA2FL;;EK82BE,SAAA,GAAY,cAAA;AAAA;AAAA,UAGG,mBAAA;EACf,YAAA;EACA,SAAS;AAAA;;;Adp+BX;;;;;;AAAA,ce2Ba,OAAA;EAAA,UAAoB,sBAAA,GAAyB,eAAA;EAAA;;KAM9C,sBAAA;;;;;EAKV,IAAA;;;;EAKA,WAAA;;;;EAKA,KAAA,GAAQ,KAAA,UAAe,IAAA;;;;EAKvB,QAAA,GAAW,cAAA;;;;EAKX,OAAA,IAAW,UAAA,EAAY,MAAA,kBAAwB,WAAA;;;AfDjD;EeME,SAAA,GAAY,cAAA;AAAA,KACT,cAAA,GAAiB,cAAA;AAAA,UAEL,cAAA;EACf,WAAA;;;;AdhEF;IcqEI,UAAA,GAAa,YAAA;EAAA;EAGf,YAAA;IdxEwC;;;;Ic6EtC,UAAA,GAAa,YAAA;EAAA;EAUf,eAAA,IACE,IAAA,EAAM,WAAA,EACN,MAAA;IACE,SAAA;;AbxEN;;;;Ia8EM,QAAA;EAAA,MAEC,OAAA;IACH,YAAA;IACA,SAAA;EAAA;EAGF,gBAAA,IAAoB,YAAA,aAAyB,OAAA;IAC3C,IAAA,EAAM,WAAA;IACN,SAAA;IACA,SAAA;EAAA;EAGF,eAAA,IAAmB,YAAA,aAAyB,OAAA;AAAA;AAAA,KAGlC,cAAA;EZ1GV;;;EY8GA,MAAM;AAAA;AAAA,UAGS,cAAA;;;;EAIf,IAAA,mBAAuB,aAAa;AAAA;AAAA,cAKzB,eAAA,SAAwB,SAAA,CAAU,sBAAA;EAAA,mBAC1B,MAAA,EAAM,MAAA;EAAA,mBACN,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,GAAA,EAAG,WAAA;EAAA,mBACH,GAAA,0BAAG,MAAA;EAAA,IAEX,IAAA;EAAA,IAIA,qBAAA,IAAyB,QAAA;EAAA,IAMzB,sBAAA,IAA0B,QAAA;EAAA,UAM3B,MAAA;;;;YAkCA,iBAAA,IAAqB,cAAA;;;;;EAgCxB,gBAAA,CAAiB,QAAA,EAAU,cAAA;;;;EAO3B,QAAA,IAAY,IAAA;;;AX9NrB;EWqOe,QAAA,CAAS,KAAA,EAAO,IAAA,KAAS,OAAA;;;;EAO/B,aAAA,CAAc,IAAA,WAAe,IAAA;EAQvB,UAAA,CAAW,KAAA,WAAgB,OAAA,CAAQ,UAAA;;;;EAQnC,WAAA,CACX,IAAA,EAAM,WAAA,EACN,YAAA;IACE,GAAA;IACA,aAAA;IACA,wBAAA;EAAA,GAEF,OAAA;IV3Q6C;;;;IUgR3C,QAAA;EAAA,IAED,OAAA,CAAQ,mBAAA;EA4FE,YAAA,CACX,YAAA,UACA,WAAA,YACC,OAAA;IACD,MAAA,EAAQ,mBAAA;IACR,IAAA,EAAM,WAAA;EAAA;AAAA;AAAA,UAoEO,kBAAA;EACf,GAAA;EACA,KAAA;EACA,KAAA;AAAA;AAAA,UAGe,mBAAA;EACf,YAAA;EACA,UAAA;EACA,UAAA;EACA,SAAA;EACA,aAAA;EACA,wBAAA;EACA,KAAA;AAAA;;;;;;cC7bW,WAAA;EAAA,WACF,0BAAA,GACR,mBAAA;EAAA;;UAMc,0BAAA;EhB2Cf;;;EgBvCA,IAAA;;;;EAKA,KAAA;;;;EAKA,WAAA;AAAA;AAAA,cAKW,mBAAA,SAA4B,SAAA,CAAU,0BAAA;EAAA,mBAC9B,gBAAA,EAAgB,gBAAA;EAAA,IAExB,IAAA;EAAA,IAIA,KAAA;EAIJ,QAAA;EAAA,UAIG,MAAA;;;;EAWH,GAAA,CAAI,IAAA,GAAO,WAAA;AAAA;;;;;;cCpDP,KAAA;EAAA,WAAkB,oBAAA,GAA4B,aAAA;EAAA;;UAM1C,oBAAA;EjBXiB;;;EiBehC,IAAA;;;;EAKA,WAAA;EAEA,MAAA,YAAkB,eAAA;EAElB,WAAA,GAAc,KAAK;IAGb,IAAA;IACA,SAAA;IACA,OAAA;EAAA;AAAA;AAAA,cAKK,aAAA,SAAsB,SAAA,CAAU,oBAAA;EAAA,mBACxB,gBAAA,EAAgB,gBAAA;EAAA,IAExB,IAAA;EAAA,UAID,MAAA;;;;MAoBC,MAAA,aAAmB,eAAA;EAIvB,GAAA,CAAI,UAAA,WAAqB,mBAAA;EAIzB,KAAA,CAAM,UAAA,WAAqB,mBAAA,GAAmB,mBAAA;AAAA;;;UCjEtC,aAAA;;;;;EAKf,OAAA;ElB8CA;;;EkBzCA,KAAA;;;;EAKA,WAAA,aAAwB,UAAA;;;;;EAMxB,KAAA,IAAS,IAAA,EAAM,gBAAgB;AAAA;;;;;;;;;;;;;;;;;;;;AlBgCjC;;;;AAA6D;;;;ACtD7D;;;;;;;;;AAeW;;;;ACGX;;;;;;;;;;;;;;iBgB6DgB,OAAA,CAAQ,OAAA,GAAU,aAAA,GAAgB,UAAU;;;;;;;;;AlBlF5D;;;;;;;;;;;;;;;;;;;;;;cmB8Ba,eAAA,GACX,OAAA,EAAS,8BAAA,KACR,uBAmHF;AAAA,KAEW,8BAAA;EACV,WAAA;AAAA;EAGI,MAAA,EAAQ,oCAAA;AAAA;EAGR,MAAA,EAAQ,eAAA;EACR,IAAA,EAAM,WAAA;AAAA;AAAA,UAIK,oCAAA;;;AnBxGjB;EmB4GE,GAAA;;;AnB5G2D;EmBiH3D,QAAA;;;AlBvKF;EkB4KE,YAAA;AAAA;AAAA,UAGe,uBAAA;EACf,KAAA,QAAa,OAAO;AAAA;AAAA,UAGL,mBAAA;EACf,QAAA,GAAW,mBAAmB;AAAA;;;cCjLnB,sBAAA;EAAA,mBACQ,GAAA,0BAAG,MAAA;EAAA,mBACH,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,WAAA,EAAW,WAAA;EAAA,mBACX,MAAA,EAAM,MAAA;EAAA,mBACN,MAAA,EAAM,cAAA;EAAA,mBAEN,eAAA,mBAAe,aAAA;EAAA,mBA8Bf,eAAA,mBAAe,aAAA;EAAA,UA0BxB,cAAA,IAAkB,gBAAA;EAAA,mBAQT,eAAA,mBAAe,aAAA;AAAA;AAAA,KAmCxB,0BAAA,IACV,OAAA,EAAS,aAAA,KACN,OAAA,CAAQ,gBAAA;;;;YC9ED,KAAA;IACR,uBAAA;MACE,KAAA;MACA,IAAA,EAAM,WAAA;IAAA;EAAA;EAAA,UAIA,KAAA;;;;;;;IAOR,6BAAA,GAAgC,gBAAA;;;;IAKhC,sBAAA,GAAyB,WAAA;IrBEjB;;;;AAAiD;;;IqBOzD,wBAAA;MAA6B,EAAA;IAAA;EAAA;AAAA;AAAA;EAAA,UAKrB,aAAA;IACR,IAAA,GAAO,gBAAA;EAAA;EAAA,UAGC,mBAAA;IACR,IAAA,EAAM,gBAAA;EAAA;EAAA,UAGE,oBAAA,SAA6B,YAAA;;AnBxDzC;;;;;;ImBgEI,IAAA,GAAO,gBAAA;EAAA;AAAA;;;;;;AlB/EX;;;;;;;;;;;ckBqGa,cAAA,mBAAc,OAAA,kBAAA,MAAA"}