alepha 0.22.0 → 0.24.0

package/dist/security/index.d.ts

@@ -3,19 +3,20 @@ import { DateTimeProvider, Duration, DurationLike } from "alepha/datetime";
 import { CryptoProvider, SecretProvider } from "alepha/crypto";
 import { FetchOptions, ServerRequest, UnauthorizedError } from "alepha/server";
 export * from "alepha/crypto";
-
 //#region ../../src/security/schemas/userAccountInfoSchema.d.ts
-declare const userAccountInfoSchema: import("typebox").TObject<{
-  id: import("typebox").TString;
-  name: import("typebox").TOptional<import("typebox").TString>;
-  email: import("typebox").TOptional<import("typebox").TString>;
-  username: import("typebox").TOptional<import("typebox").TString>;
-  picture: import("typebox").TOptional<import("typebox").TString>;
-  sessionId: import("typebox").TOptional<import("typebox").TString>;
-  organization: import("typebox").TOptional<import("typebox").TString>;
-  roles: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-  realm: import("typebox").TOptional<import("typebox").TString>;
-}>;
+declare const userAccountInfoSchema: import("zod").ZodObject<{
+  id: import("zod").ZodString;
+  name: import("zod").ZodOptional<import("zod").ZodString>;
+  firstName: import("zod").ZodOptional<import("zod").ZodString>;
+  lastName: import("zod").ZodOptional<import("zod").ZodString>;
+  email: import("zod").ZodOptional<import("zod").ZodString>;
+  username: import("zod").ZodOptional<import("zod").ZodString>;
+  picture: import("zod").ZodOptional<import("zod").ZodString>;
+  sessionId: import("zod").ZodOptional<import("zod").ZodString>;
+  organization: import("zod").ZodOptional<import("zod").ZodString>;
+  roles: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+  realm: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 type UserAccount = Static<typeof userAccountInfoSchema>;
 //#endregion
 //#region ../../src/security/interfaces/UserAccountToken.d.ts
@@ -62,9 +63,9 @@ interface UserAccountToken extends UserAccount {
  * (slug, UUID, composite). Pick whatever matches the column marked with
  * `PG_ORGANIZATION` in your entities.
  */
-declare const currentTenantAtom: import("alepha").Atom<import("typebox").TOptional<import("typebox").TObject<{
-  id: import("typebox").TString;
-}>>, "alepha.security.tenant">;
+declare const currentTenantAtom: import("alepha").Atom<import("zod").ZodOptional<import("zod").ZodObject<{
+  id: import("zod").ZodString;
+}, import("zod/v4/core").$strip>>, "alepha.security.tenant">;
 //#endregion
 //#region ../../src/security/atoms/currentUserAtom.d.ts
 /**
@@ -73,17 +74,19 @@ declare const currentTenantAtom: import("alepha").Atom<import("typebox").TOption
  * Transport-agnostic — works with HTTP, MCP, pipelines, jobs, and any context
  * that sets the atom before calling secured logic.
  */
-declare const currentUserAtom: import("alepha").Atom<import("typebox").TOptional<import("typebox").TObject<{
-  id: import("typebox").TString;
-  name: import("typebox").TOptional<import("typebox").TString>;
-  email: import("typebox").TOptional<import("typebox").TString>;
-  username: import("typebox").TOptional<import("typebox").TString>;
-  picture: import("typebox").TOptional<import("typebox").TString>;
-  sessionId: import("typebox").TOptional<import("typebox").TString>;
-  organization: import("typebox").TOptional<import("typebox").TString>;
-  roles: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-  realm: import("typebox").TOptional<import("typebox").TString>;
-}>>, "alepha.security.user">;
+declare const currentUserAtom: import("alepha").Atom<import("zod").ZodOptional<import("zod").ZodObject<{
+  id: import("zod").ZodString;
+  name: import("zod").ZodOptional<import("zod").ZodString>;
+  firstName: import("zod").ZodOptional<import("zod").ZodString>;
+  lastName: import("zod").ZodOptional<import("zod").ZodString>;
+  email: import("zod").ZodOptional<import("zod").ZodString>;
+  username: import("zod").ZodOptional<import("zod").ZodString>;
+  picture: import("zod").ZodOptional<import("zod").ZodString>;
+  sessionId: import("zod").ZodOptional<import("zod").ZodString>;
+  organization: import("zod").ZodOptional<import("zod").ZodString>;
+  roles: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+  realm: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>>, "alepha.security.user">;
 //#endregion
 //#region ../../src/security/errors/InvalidCredentialsError.d.ts
 /**
@@ -486,6 +489,7 @@ interface JWTVerifyOptions extends VerifyOptions, JWTClaimVerificationOptions {}
 declare class JwtProvider {
   protected readonly log: import("alepha/logger").Logger;
   protected readonly keystore: KeyLoaderHolder[];
+  protected readonly signers: Map<string, SignerHolder>;
   protected readonly dateTimeProvider: DateTimeProvider;
   protected readonly encoder: TextEncoder;
   /**
@@ -495,6 +499,24 @@ declare class JwtProvider {
    * @param secretKeyOrJwks
    */
   setKeyLoader(name: string, secretKeyOrJwks: string | JSONWebKeySet): void;
+  /**
+   * Configure an asymmetric signing key for a realm/issuer. Tokens minted for
+   * `name` are then signed with `alg` + `kid`, and a local verify loader is
+   * registered so this process can verify its own tokens (refresh tokens,
+   * authorization codes, id_tokens). Public keys are published via `getJwks`.
+   *
+   * `privateKey` is a PKCS#8 PEM (from env). When it is empty/undefined an
+   * **ephemeral per-process keypair** is generated so dev/test work with no env
+   * key configured — the published JWKS still resolves; tokens just don't
+   * survive a restart. Additive: realms without a signing key keep the HS256
+   * path untouched.
+   */
+  setSigningKey(name: string, signing: SigningConfig): Promise<void>;
+  /**
+   * Public JWK Set for a realm/issuer configured with an asymmetric signing
+   * key. Returns an empty set for HS256 / external (URL-based) realms.
+   */
+  getJwks(name: string): Promise<JSONWebKeySet>;
   /**
    * Retrieves the payload from a JSON Web Token (JWT).
    *
@@ -527,6 +549,25 @@ interface KeyLoaderHolder {
   keyLoader: KeyLoader;
   secretKey?: string;
 }
+interface SignerHolder {
+  alg: string;
+  kid: string;
+  key: CryptoKey | KeyObject;
+  publicJwk: JWK;
+}
+/**
+ * Asymmetric signing config for a realm/issuer. `privateKey` is a PKCS#8 PEM
+ * (typically injected from env). EdDSA preferred; RS256 acceptable.
+ */
+interface SigningConfig {
+  alg: "EdDSA" | "RS256";
+  /**
+   * PKCS#8 PEM private key. Empty/undefined → an ephemeral per-process keypair
+   * is generated (dev/test convenience; tokens don't survive a restart).
+   */
+  privateKey?: string;
+  kid: string;
+}
 interface JwtSignOptions {
   header?: Partial<JWTHeaderParameters>;
 }
@@ -546,26 +587,26 @@ interface JwtParseResult {
 }
 //#endregion
 //#region ../../src/security/schemas/permissionSchema.d.ts
-declare const permissionSchema: import("typebox").TObject<{
-  name: import("typebox").TString;
-  group: import("typebox").TOptional<import("typebox").TString>;
-  description: import("typebox").TOptional<import("typebox").TString>;
-  method: import("typebox").TOptional<import("typebox").TString>;
-  path: import("typebox").TOptional<import("typebox").TString>;
-}>;
+declare const permissionSchema: import("zod").ZodObject<{
+  name: import("zod").ZodString;
+  group: import("zod").ZodOptional<import("zod").ZodString>;
+  description: import("zod").ZodOptional<import("zod").ZodString>;
+  method: import("zod").ZodOptional<import("zod").ZodString>;
+  path: import("zod").ZodOptional<import("zod").ZodString>;
+}, import("zod/v4/core").$strip>;
 type Permission = Static<typeof permissionSchema>;
 //#endregion
 //#region ../../src/security/schemas/roleSchema.d.ts
-declare const roleSchema: import("typebox").TObject<{
-  name: import("typebox").TString;
-  description: import("typebox").TOptional<import("typebox").TString>;
-  default: import("typebox").TOptional<import("typebox").TBoolean>;
-  permissions: import("typebox").TArray<import("typebox").TObject<{
-    name: import("typebox").TString;
-    ownership: import("typebox").TOptional<import("typebox").TBoolean>;
-    exclude: import("typebox").TOptional<import("typebox").TArray<import("typebox").TString>>;
-  }>>;
-}>;
+declare const roleSchema: import("zod").ZodObject<{
+  name: import("zod").ZodString;
+  description: import("zod").ZodOptional<import("zod").ZodString>;
+  default: import("zod").ZodOptional<import("zod").ZodBoolean>;
+  permissions: import("zod").ZodArray<import("zod").ZodObject<{
+    name: import("zod").ZodString;
+    ownership: import("zod").ZodOptional<import("zod").ZodBoolean>;
+    exclude: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+  }, import("zod/v4/core").$strip>>;
+}, import("zod/v4/core").$strip>;
 type Role = Static<typeof roleSchema>;
 //#endregion
 //#region ../../src/security/providers/SecurityProvider.d.ts
@@ -703,6 +744,22 @@ declare class SecurityProvider {
    */
   storeUserInContext(user: UserAccountToken): void;
   getRealms(): Realm[];
+  /**
+   * Resolve the realm an authenticated admin action is allowed to operate on.
+   *
+   * Admin endpoints accept a client-supplied target realm (e.g. a
+   * `userRealmName` query param). Without scoping, a realm-A admin could act on
+   * realm-B resources by simply naming realm B — a cross-tenant escalation
+   * whenever realms are used as tenant boundaries. This binds the target realm
+   * to the caller's own realm: omitting the target means "my realm"; naming a
+   * *different* realm than the caller's is refused.
+   *
+   * Returns the effective realm to use (may be `undefined` in single-realm apps
+   * where neither the caller nor the request carries a realm).
+   */
+  assertRealmScope(user: {
+    realm?: string;
+  } | undefined, requestedRealm: string | undefined): string | undefined;
   /**
    * Retrieves the user account from the provided user ID.
    *
@@ -766,6 +823,12 @@ interface Realm {
    * Can be also a JWKS URL.
    */
   secret?: string | JSONWebKeySet | (() => string);
+  /**
+   * Asymmetric signing config. When set, this realm signs its tokens with an
+   * asymmetric key and publishes the public keys via JWKS (see
+   * `JwtProvider.getJwks`). Takes precedence over `secret`.
+   */
+  signing?: SigningConfig;
   /**
    * Create the user account info based on the raw JWT payload.
    * By default, SecurityProvider has his own implementation, but this method allow to override it.
@@ -818,6 +881,12 @@ type IssuerPrimitiveOptions = {
    * Custom resolvers (in addition to default JWT resolver).
    */
   resolvers?: IssuerResolver[];
+  /**
+   * Asymmetric signing config. When set, this issuer's tokens are signed with
+   * the given alg + kid and its public keys are published via JWKS. When
+   * omitted, the HS256 `secret` path is used (default, backward compatible).
+   */
+  signing?: SigningConfig;
 } & (IssuerInternal | IssuerExternal);
 interface IssuerSettings {
   accessToken?: {
@@ -1219,5 +1288,5 @@ declare module "alepha/server" {
  */
 declare const AlephaSecurity: import("alepha").Service<import("alepha").Module>;
 //#endregion
-export { $basicAuth, $issuer, $permission, $role, $secure, $serviceAccount, AccessTokenResponse, AlephaSecurity, BasicAuthOptions, CreateTokenOptions, ExtendedJWTPayload, InvalidCredentialsError, InvalidPermissionError, IssuerExternal, IssuerInternal, IssuerPrimitive, IssuerPrimitiveOptions, IssuerResolver, IssuerSettings, JwtParseResult, JwtProvider, JwtSignOptions, KeyLoader, KeyLoaderHolder, Oauth2ServiceAccountPrimitiveOptions, Permission, PermissionPrimitive, PermissionPrimitiveOptions, Realm, Role, RolePrimitive, RolePrimitiveOptions, SecureOptions, SecurityCheckResult, SecurityError, SecurityProvider, ServerSecurityProvider, ServerSecurityUserResolver, ServiceAccountPrimitive, ServiceAccountPrimitiveOptions, ServiceAccountStore, UserAccount, UserAccountToken, UserInfo, currentTenantAtom, currentUserAtom, permissionSchema, roleSchema, userAccountInfoSchema };
+export { $basicAuth, $issuer, $permission, $role, $secure, $serviceAccount, AccessTokenResponse, AlephaSecurity, BasicAuthOptions, CreateTokenOptions, ExtendedJWTPayload, InvalidCredentialsError, InvalidPermissionError, IssuerExternal, IssuerInternal, IssuerPrimitive, IssuerPrimitiveOptions, IssuerResolver, IssuerSettings, JwtParseResult, JwtProvider, JwtSignOptions, KeyLoader, KeyLoaderHolder, Oauth2ServiceAccountPrimitiveOptions, Permission, PermissionPrimitive, PermissionPrimitiveOptions, Realm, Role, RolePrimitive, RolePrimitiveOptions, SecureOptions, SecurityCheckResult, SecurityError, SecurityProvider, ServerSecurityProvider, ServerSecurityUserResolver, ServiceAccountPrimitive, ServiceAccountPrimitiveOptions, ServiceAccountStore, SignerHolder, SigningConfig, UserAccount, UserAccountToken, UserInfo, currentTenantAtom, currentUserAtom, permissionSchema, roleSchema, userAccountInfoSchema };
 //# sourceMappingURL=index.d.ts.map

package/dist/security/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":["kty","alg","key_ops","ext","use","x5c","x5t","x5u","kid","JWKParameters","crv","x","JWK_OKP_Public","d","pub","JWK_AKP_Public","priv","y","JWK_EC_Public","e","n","JWK_RSA_Public","dp","dq","p","q","qi","k","IProtectedHeader","IToken","ReturnKeyTypes","protectedHeader","token","Promise","GenericGetKeyFunction","CryptoKey","KeyObject","JWK","Uint8Array","header","JWSHeaderParameters","payload","protected","signature","signatures","Omit","FlattenedJWSInput","Partial","jku","jwk","Pick","typ","cty","JoseHeaderParameters","b64","crit","propName","apu","apv","p2c","p2s","iv","epk","aad","ciphertext","encrypted_key","JWEHeaderParameters","tag","unprotected","FlattenedJWE","recipients","enc","zip","CritOption","keyManagementAlgorithms","contentEncryptionAlgorithms","maxPBES2Count","maxDecompressedLength","audience","clockTolerance","issuer","maxTokenAge","subject","currentDate","Date","requiredClaims","algorithms","iss","sub","aud","jti","nbf","exp","iat","additionalAuthenticatedData","plaintext","sharedUnprotectedHeader","unprotectedHeader","FlattenedDecryptResult","CompactJWEHeaderParameters","FlattenedVerifyResult","CompactJWSHeaderParameters","PayloadType","JWTPayload","JWTHeaderParameters","key","keys","type","Extract","Awaited","ReturnType","crypto","subtle","generateKey","setIssuer","setSubject","setAudience","setJti","jwtId","setNotBefore","input","setExpirationTime","setIssuedAt","types","VerifyOptions","JWTClaimVerificationOptions","GenericGetKeyFunction","JWTHeaderParameters","FlattenedJWSInput","CryptoKey","KeyObject","JWK","Uint8Array","PayloadType","JWTPayload","jwt","key","JWTVerifyOptions","options","Promise","JWTVerifyResult","JWTVerifyGetKey","getKey","ResolvedKey"],"sources":["../../src/security/schemas/userAccountInfoSchema.ts","../../src/security/interfaces/UserAccountToken.ts","../../src/security/atoms/currentTenantAtom.ts","../../src/security/atoms/currentUserAtom.ts","../../src/security/errors/InvalidCredentialsError.ts","../../src/security/errors/InvalidPermissionError.ts","../../src/security/errors/SecurityError.ts","../../src/security/interfaces/IssuerResolver.ts","../../src/security/primitives/$basicAuth.ts","../../../../node_modules/jose/dist/types/types.d.ts","../../../../node_modules/jose/dist/types/jwt/verify.d.ts","../../src/security/providers/JwtProvider.ts","../../src/security/schemas/permissionSchema.ts","../../src/security/schemas/roleSchema.ts","../../src/security/providers/SecurityProvider.ts","../../src/security/primitives/$issuer.ts","../../src/security/primitives/$permission.ts","../../src/security/primitives/$role.ts","../../src/security/primitives/$secure.ts","../../src/security/primitives/$serviceAccount.ts","../../src/security/providers/ServerSecurityProvider.ts","../../src/security/index.ts"],"x_google_ignoreList":[9,10],"mappings":";;;;;;;cAGa,qBAAA,oBAAqB,OAAA;;;;;;;;;;;KAyDtB,WAAA,GAAc,MAAM,QAAQ,qBAAA;;;;;;;UCtDvB,gBAAA,SAAyB,WAAW;;;ADHrD;ECOE,KAAA;;;;EAKA,KAAA;;;;;EAMA,SAAA;AAAA;;;;;;;;;;;ADlBF;;;;;;;;;;;;;;cEqBa,iBAAA,mBAAiB,IAAA,mBAAA,SAAA,mBAAA,OAAA;;;;;;;;;;;cCfjB,eAAA,mBAAe,IAAA,mBAAA,SAAA,mBAAA,OAAA;;;;;;;;;;;;;;;;;;;cCDf,uBAAA,SAAgC,iBAAiB;EAAA,SACnD,IAAA;;;;;cCTE,sBAAA,SAA+B,KAAK;cACnC,IAAA;AAAA;;;cCDD,aAAA,SAAsB,KAAK;EAC/B,IAAA;EAAA,SACS,MAAA;AAAA;;;;;;;KCKN,QAAA,GAAW,IAAI,CAAC,WAAA;EAC1B,SAAA;AAAA;;;;UAMe,cAAA;;;;EAIf,QAAA;;;;;;EAOA,SAAA,GAAY,GAAA,EAAK,aAAA,KAAkB,OAAA,CAAQ,QAAA;AAAA;;;UCrB5B,gBAAA;EACf,QAAA;EACA,QAAQ;AAAA;;;;ARHV;;;;;;;;;;;;iBQqBgB,UAAA,CAAW,OAAA,EAAS,gBAAA,GAAmB,UAAU;;;;UCvBhD,aAAA;;EAEfA,GAAAA;;;;;ATAF;ESMEC,GAAAA;;EAEAC,OAAAA;ETRgC;ESUhCC,GAAAA;;EAEAC,GAAAA;;EAEAC,GAAAA;;EAEAC,GAAAA;;EAEA,UAAA;;EAEAC,GAAAA;;EAEAC,GAAAA;AAAAA;;;;;;;;;;;;;;;UA2Fe,GAAA,SAAY,aAAa;EL5GL;;;;EKiHnCE,GAAAA;;;;;;EAMAG,CAAAA;EJ/HF;EIiIES,EAAAA;;EAEAC,EAAAA;EJnI0C;EIqI1CJ,CAAAA;EJpIY;EIsIZQ,CAAAA;EJtIwB;EIwIxBP,CAAAA;;EAEAI,CAAAA;EH3IF;EG6IEC,CAAAA;;EAEAC,EAAAA;EH/IiC;;;;EGoJjCf,CAAAA;;EAEAM,CAAAA;;EAEAH,GAAAA;EFjJkB;EEmJlBE,IAAAA;AAAAA;;;;;UAqCe,iBAAA;EDvKgD;AAAA;;;;ACvBjE;EAqMEuB,MAAAA,GAAS,mBAAA;EArMmB;;;;EA2M5BE,OAAAA,WAAkB,UAAU;EA3L5BpC;;;;;EAkMAqC,SAAAA;EA/FF;EAkGEC,SAAAA;AAAAA;;UAyCe,oBAAA;EAiBTO;EAfN1C,GAAAA;EAqBA4C;EAlBA9C,GAAAA;EAsBF;EAnBED,GAAAA;EAmB+D;EAhB/DE,GAAAA;EA4BA+C;EAzBAN,GAAAA;EA+BiB;EA5BjBC,GAAAA,GAAM,IAAI,CAAC,GAAA;EA+Jc;EA5JzBE,GAAAA;EAgLmB;EA7KnBC,GAAAA;AAAAA;;UAIe,mBAAA,SAA4B,oBAAoB;EAoO/D2B;;;;;EA9NA9E,GAAAA;EA0QAoF;;AAAc;AAIhB;EAxQE/B,GAAAA;EAwQqCmB;EArQrClB,IAAAA;EAoRyB;EAAA,CAjRxBC,QAAAA;AAAAA;;UAmIc,UAAA;EE1QG;;;;;;;;;;;;;;;AAEc;AAElC;;EFyRED,IAAAA;IAAAA,CACGC,QAAgB;EAAA;AAAA;;UA0CJ,2BAAA;EG1ejB;;;;;EHgfEsB,QAAAA;;;;;;;;;;EAWAC,cAAAA;;;;AG3dF;;EHkeEC,MAAAA;EGleqD;;;;AChCvD;;;;EJ4gBEC,WAAAA;;;;;;EAOAC,OAAAA;;;;;;EAOA/B,GAAAA;;EAGAgC,WAAAA,GAAc,IAAI;;;;;AItfpB;;;;EJggBEE,cAAAA;AAAAA;;UAIe,aAAA,SAAsB,UAAU;EKlhBpB;;;;;;;EL0hB3BC,UAAU;AAAA;;UAOK,UAAA;EKpSgC;;;;;EL0S/CC,GAAAA;EK/LkC;;;;;ELsMlCC,GAAAA;EKhGG;;;;;ELuGHC,GAAAA;EKsEsC;;;;;EL/DtCC,GAAAA;EKgII;;;;;ELzHJC,GAAAA;EKsTmC;;;;;EL/SnCC,GAAAA;EKxkBoC;;;;;EL+kBpCC,GAAAA;EKzkBmB;EAAA,CL4kBlBrC,QAAAA;AAAAA;;UA0Dc,eAAA,eAA8B,UAAA;EKjQ3C;ELmQFf,OAAAA,EAAS,WAAA,GAAc,UAAA;EKrMhB;ELwMPV,eAAAA,EAAiB,mBAAA;AAAA;;UAmBF,0BAAA,SAAmC,mBAAmB;EACrE9B,GAAG;AAAA;;UAIY,mBAAA,SAA4B,0BAA0B;EACrEqD,GAAG;AAAA;;UAUY,aAAA;EACfoD,IAAAA,EAAM,GAAG;AAAA;;;;;;UAQM,SAAA;EACfC,IAAI;AAAA;;;;;;;KASM,SAAA,GAAY,OAAA,CACtB,OAAA,CAAQ,UAAA,QAAkB,MAAA,CAAO,MAAA,CAAO,WAAA;EACtCA,IAAAA;AAAAA;;;;UChuBa,gBAAA,SAAyB,aAAA,EAAqB,2BAAiC;;;;;;cCkBnF,WAAA;EAAA,mBACQ,GAAA,0BAAG,MAAA;EAAA,mBACH,QAAA,EAAU,eAAA;EAAA,mBACV,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,OAAA,EAAO,WAAA;EX6B1B;;;;;;EWrBO,YAAA,CAAa,IAAA,UAAc,eAAA,WAA0B,aAAA;;;;;;;;EAiC/C,KAAA,CACX,KAAA,UACA,OAAA,WACA,OAAA,GAAU,gBAAA,GACT,OAAA,CAAQ,cAAA;;;;;;;;;;EAwDE,MAAA,CACX,OAAA,EAAS,kBAAA,EACT,OAAA,WACA,WAAA,GAAc,cAAA,GACb,OAAA;;;;;;;YAyBO,WAAA,CAAY,GAAA;AAAA;AAAA,KAKZ,SAAA,IACV,eAAA,GAAkB,mBAAA,EAClB,KAAA,GAAQ,iBAAA,KACL,OAAA,CAAQ,SAAA,GAAY,SAAA;AAAA,UAER,eAAA;EACf,IAAA;EACA,SAAA,EAAW,SAAS;EACpB,SAAA;AAAA;AAAA,UAGe,cAAA;EACf,MAAA,GAAS,OAAO,CAAC,mBAAA;AAAA;AAAA,UAGF,kBAAA,SAA2B,UAAU;EACpD,GAAA;EAEA,IAAA;EACA,KAAA;EACA,KAAA;EACA,YAAA;EAEA,YAAA;IAAiB,KAAA;EAAA;AAAA;AAAA,UAGF,cAAA;EACf,OAAA;EACA,MAAA,EAAQ,eAAe,CAAC,kBAAA;AAAA;;;cC7Lb,gBAAA,oBAAgB,OAAA;;;;;;;KAgCjB,UAAA,GAAa,MAAM,QAAQ,gBAAA;;;cChC1B,UAAA,oBAAU,OAAA;;;;;;;;;;KAuCX,IAAA,GAAO,MAAM,QAAQ,UAAA;;;cCdpB,gBAAA;EAAA,mBACQ,iBAAA;EAAA,mBACA,iBAAA,EAAiB,MAAA;EAAA,mBACjB,0BAAA,EAA0B,MAAA;EAAA,mBAG1B,GAAA,0BAAG,MAAA;EAAA,mBACH,GAAA,EAAG,WAAA;EAAA,mBACH,MAAA,EAAM,MAAA;EAAA,mBACN,cAAA,EAAc,cAAA;EAAA,IAEtB,SAAA;;;;qBAOQ,WAAA,EAAa,UAAA;;;;qBAKb,MAAA,EAAQ,KAAA;EAAA,UAmBjB,KAAA,mBAAK,aAAA;;;;YAwBL,wBAAA,CAAyB,SAAA,WAAoB,cAAA;;;;;;;EAgDhD,UAAA,CAAW,IAAA,EAAM,IAAA,KAAS,MAAA,aAAmB,IAAA;;;;AdlFtD;;EckJS,gBAAA,CAAiB,GAAA,EAAK,UAAA,YAAsB,UAAA;EA0D5C,WAAA,CAAY,KAAA,EAAO,KAAA;Ed5MiC;;;;ACtD7D;;;;EamRe,WAAA,CAAY,KAAA,UAAe,KAAA,EAAO,IAAA,KAAS,OAAA;Eb/QxD;;;;AAWS;;;;Ea2RF,qBAAA,CACL,OAAA,EAAS,UAAA,EACT,SAAA,YACC,WAAA;EZlRH;;;;EYyTO,UAAA,CACL,QAAA,EAAU,QAAA,EACV,OAAA;IACE,KAAA;IACA,UAAA,GAAa,UAAA;EAAA,IAEd,gBAAA;;;;;EAoCI,gBAAA,CAAiB,QAAA,EAAU,cAAA,EAAgB,SAAA;EX3XvC;;;;EWyYJ,QAAA,CAAS,SAAA,YAAqB,KAAA;EXzYX;;;;;;;;;EW8Zb,4BAAA,CACX,GAAA;IAAO,GAAA,EAAK,GAAA;IAAc,OAAA;MAAW,aAAA;IAAA;EAAA,GACrC,OAAA;IACE,KAAA;IACA,UAAA,GAAa,UAAA;EAAA,IAEd,OAAA,CAAQ,gBAAA;;;;;;;;;EA0DJ,eAAA,CACL,cAAA,WAAyB,UAAA,KACtB,WAAA,aACF,mBAAA;;;;EAwFU,mBAAA,CACX,aAAA,WACA,OAAA;IACE,UAAA,GAAa,UAAA;IACb,KAAA;IACA,MAAA,GAAS,gBAAA;EAAA,IAEV,OAAA,CAAQ,gBAAA;EVjkBwB;;;;;;;EU4nB5B,GAAA,CAAI,QAAA,UAAkB,UAAA,WAAqB,UAAA;;;;EAO3C,SAAA,CACL,QAAA,UACA,UAAA,WAAqB,UAAA;ET7oBW;;;;;ESupB3B,kBAAA,CAAmB,UAAA,EAAY,UAAA;ETtpBd;AAAA;;ES0qBjB,YAAA,CAAa,IAAA,EAAM,gBAAA,EAAkB,OAAA;;AR3qB9C;;EQsrBS,kBAAA,CAAmB,IAAA,EAAM,gBAAA;EAOzB,SAAA,IAAa,KAAA;ER7rBa;;;;AAEX;EQosBf,QAAA,CAAS,KAAA,YAAiB,IAAA;;;AP/rBnC;;;;;EO8sBS,cAAA,CAAe,IAAA;IACpB,KAAA,GAAQ,KAAA,CAAM,IAAA;IACd,KAAA;EAAA,IACE,UAAA;EP1sBW;;;;;;EOyyBR,gBAAA,CAAiB,OAAA,EAAS,MAAA;EAgB1B,uBAAA,CACL,OAAA,EAAS,MAAA;EPtzBX;;;;;EOq0BO,mBAAA,CAAoB,OAAA,EAAS,MAAA;EAI7B,qBAAA,CACL,OAAA,EAAS,MAAA;EAqBJ,sBAAA,CACL,OAAA,EAAS,MAAA;EAiBJ,mBAAA,CAAoB,OAAA,EAAS,MAAA;;;AN/3BtC;;;;EMi5BS,kBAAA,CAAmB,OAAA,EAAS,MAAA;EAmB5B,0BAAA,CACL,OAAA,EAAS,MAAA;ENj5Ba;;;;;;;EMm6BjB,oBAAA,CACL,OAAA,EAAS,MAAA;AAAA;;;AL37Bb;UK48BiB,KAAA;EACf,IAAA;EAEA,KAAA,EAAO,IAAA;EL78BP3G;;;;;EKo9BA,MAAA,YAAkB,aAAA;ELp8BlBM;;;;EK08BA,OAAA,IAAW,GAAA,EAAK,MAAA,kBAAwB,WAAA;ELp8BrC;AA2FL;;EK82BE,SAAA,GAAY,cAAA;AAAA;AAAA,UAGG,mBAAA;EACf,YAAA;EACA,SAAS;AAAA;;;Adp+BX;;;;;;AAAA,ce2Ba,OAAA;EAAA,UAAoB,sBAAA,GAAyB,eAAA;EAAA;;KAM9C,sBAAA;;;;;EAKV,IAAA;;;;EAKA,WAAA;;;;EAKA,KAAA,GAAQ,KAAA,UAAe,IAAA;;;;EAKvB,QAAA,GAAW,cAAA;;;;EAKX,OAAA,IAAW,UAAA,EAAY,MAAA,kBAAwB,WAAA;;;AfDjD;EeME,SAAA,GAAY,cAAA;AAAA,KACT,cAAA,GAAiB,cAAA;AAAA,UAEL,cAAA;EACf,WAAA;;;;AdhEF;IcqEI,UAAA,GAAa,YAAA;EAAA;EAGf,YAAA;IdxEwC;;;;Ic6EtC,UAAA,GAAa,YAAA;EAAA;EAUf,eAAA,IACE,IAAA,EAAM,WAAA,EACN,MAAA;IACE,SAAA;;AbxEN;;;;Ia8EM,QAAA;EAAA,MAEC,OAAA;IACH,YAAA;IACA,SAAA;EAAA;EAGF,gBAAA,IAAoB,YAAA,aAAyB,OAAA;IAC3C,IAAA,EAAM,WAAA;IACN,SAAA;IACA,SAAA;EAAA;EAGF,eAAA,IAAmB,YAAA,aAAyB,OAAA;AAAA;AAAA,KAGlC,cAAA;EZ1GV;;;EY8GA,MAAM;AAAA;AAAA,UAGS,cAAA;;;;EAIf,IAAA,mBAAuB,aAAa;AAAA;AAAA,cAKzB,eAAA,SAAwB,SAAA,CAAU,sBAAA;EAAA,mBAC1B,MAAA,EAAM,MAAA;EAAA,mBACN,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,GAAA,EAAG,WAAA;EAAA,mBACH,GAAA,0BAAG,MAAA;EAAA,IAEX,IAAA;EAAA,IAIA,qBAAA,IAAyB,QAAA;EAAA,IAMzB,sBAAA,IAA0B,QAAA;EAAA,UAM3B,MAAA;;;;YAkCA,iBAAA,IAAqB,cAAA;;;;;EAgCxB,gBAAA,CAAiB,QAAA,EAAU,cAAA;;;;EAO3B,QAAA,IAAY,IAAA;;;AX9NrB;EWqOe,QAAA,CAAS,KAAA,EAAO,IAAA,KAAS,OAAA;;;;EAO/B,aAAA,CAAc,IAAA,WAAe,IAAA;EAQvB,UAAA,CAAW,KAAA,WAAgB,OAAA,CAAQ,UAAA;;;;EAQnC,WAAA,CACX,IAAA,EAAM,WAAA,EACN,YAAA;IACE,GAAA;IACA,aAAA;IACA,wBAAA;EAAA,GAEF,OAAA;IV3Q6C;;;;IUgR3C,QAAA;EAAA,IAED,OAAA,CAAQ,mBAAA;EA4FE,YAAA,CACX,YAAA,UACA,WAAA,YACC,OAAA;IACD,MAAA,EAAQ,mBAAA;IACR,IAAA,EAAM,WAAA;EAAA;AAAA;AAAA,UAoEO,kBAAA;EACf,GAAA;EACA,KAAA;EACA,KAAA;AAAA;AAAA,UAGe,mBAAA;EACf,YAAA;EACA,UAAA;EACA,UAAA;EACA,SAAA;EACA,aAAA;EACA,wBAAA;EACA,KAAA;AAAA;;;;;;cC7bW,WAAA;EAAA,WACF,0BAAA,GACR,mBAAA;EAAA;;UAMc,0BAAA;EhB2Cf;;;EgBvCA,IAAA;;;;EAKA,KAAA;;;;EAKA,WAAA;AAAA;AAAA,cAKW,mBAAA,SAA4B,SAAA,CAAU,0BAAA;EAAA,mBAC9B,gBAAA,EAAgB,gBAAA;EAAA,IAExB,IAAA;EAAA,IAIA,KAAA;EAIJ,QAAA;EAAA,UAIG,MAAA;;;;EAWH,GAAA,CAAI,IAAA,GAAO,WAAA;AAAA;;;;;;cCpDP,KAAA;EAAA,WAAkB,oBAAA,GAA4B,aAAA;EAAA;;UAM1C,oBAAA;EjBXiB;;;EiBehC,IAAA;;;;EAKA,WAAA;EAEA,MAAA,YAAkB,eAAA;EAElB,WAAA,GAAc,KAAK;IAGb,IAAA;IACA,SAAA;IACA,OAAA;EAAA;AAAA;AAAA,cAKK,aAAA,SAAsB,SAAA,CAAU,oBAAA;EAAA,mBACxB,gBAAA,EAAgB,gBAAA;EAAA,IAExB,IAAA;EAAA,UAID,MAAA;;;;MAoBC,MAAA,aAAmB,eAAA;EAIvB,GAAA,CAAI,UAAA,WAAqB,mBAAA;EAIzB,KAAA,CAAM,UAAA,WAAqB,mBAAA,GAAmB,mBAAA;AAAA;;;UCjEtC,aAAA;;;;;EAKf,OAAA;ElB8CA;;;EkBzCA,KAAA;;;;EAKA,WAAA,aAAwB,UAAA;;;;;EAMxB,KAAA,IAAS,IAAA,EAAM,gBAAgB;AAAA;;;;;;;;;;;;;;;;;;;;AlBgCjC;;;;AAA6D;;;;ACtD7D;;;;;;;;;AAeW;;;;ACGX;;;;;;;;;;;;;;iBgB6DgB,OAAA,CAAQ,OAAA,GAAU,aAAA,GAAgB,UAAU;;;;;;;;;AlBlF5D;;;;;;;;;;;;;;;;;;;;;;cmB8Ba,eAAA,GACX,OAAA,EAAS,8BAAA,KACR,uBAmHF;AAAA,KAEW,8BAAA;EACV,WAAA;AAAA;EAGI,MAAA,EAAQ,oCAAA;AAAA;EAGR,MAAA,EAAQ,eAAA;EACR,IAAA,EAAM,WAAA;AAAA;AAAA,UAIK,oCAAA;;;AnBxGjB;EmB4GE,GAAA;;;AnB5G2D;EmBiH3D,QAAA;;;AlBvKF;EkB4KE,YAAA;AAAA;AAAA,UAGe,uBAAA;EACf,KAAA,QAAa,OAAO;AAAA;AAAA,UAGL,mBAAA;EACf,QAAA,GAAW,mBAAmB;AAAA;;;cCjLnB,sBAAA;EAAA,mBACQ,GAAA,0BAAG,MAAA;EAAA,mBACH,gBAAA,EAAgB,gBAAA;EAAA,mBAChB,WAAA,EAAW,WAAA;EAAA,mBACX,MAAA,EAAM,MAAA;EAAA,mBACN,MAAA,EAAM,cAAA;EAAA,mBAEN,eAAA,mBAAe,aAAA;EAAA,mBA8Bf,eAAA,mBAAe,aAAA;EAAA,UA0BxB,cAAA,IAAkB,gBAAA;EAAA,mBAQT,eAAA,mBAAe,aAAA;AAAA;AAAA,KAmCxB,0BAAA,IACV,OAAA,EAAS,aAAA,KACN,OAAA,CAAQ,gBAAA;;;;YC9ED,KAAA;IACR,uBAAA;MACE,KAAA;MACA,IAAA,EAAM,WAAA;IAAA;EAAA;EAAA,UAIA,KAAA;;;;;;;IAOR,6BAAA,GAAgC,gBAAA;;;;IAKhC,sBAAA,GAAyB,WAAA;IrBEjB;;;;AAAiD;;;IqBOzD,wBAAA;MAA6B,EAAA;IAAA;EAAA;AAAA;AAAA;EAAA,UAKrB,aAAA;IACR,IAAA,GAAO,gBAAA;EAAA;EAAA,UAGC,mBAAA;IACR,IAAA,EAAM,gBAAA;EAAA;EAAA,UAGE,oBAAA,SAA6B,YAAA;;AnBxDzC;;;;;;ImBgEI,IAAA,GAAO,gBAAA;EAAA;AAAA;;;;;;AlB/EX;;;;;;;;;;;ckBqGa,cAAA,mBAAc,OAAA,kBAAA,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/security/schemas/userAccountInfoSchema.ts","../../src/security/interfaces/UserAccountToken.ts","../../src/security/atoms/currentTenantAtom.ts","../../src/security/atoms/currentUserAtom.ts","../../src/security/errors/InvalidCredentialsError.ts","../../src/security/errors/InvalidPermissionError.ts","../../src/security/errors/SecurityError.ts","../../src/security/interfaces/IssuerResolver.ts","../../src/security/primitives/$basicAuth.ts","../../../../node_modules/jose/dist/types/types.d.ts","../../../../node_modules/jose/dist/types/jwt/verify.d.ts","../../src/security/providers/JwtProvider.ts","../../src/security/schemas/permissionSchema.ts","../../src/security/schemas/roleSchema.ts","../../src/security/providers/SecurityProvider.ts","../../src/security/primitives/$issuer.ts","../../src/security/primitives/$permission.ts","../../src/security/primitives/$role.ts","../../src/security/primitives/$secure.ts","../../src/security/primitives/$serviceAccount.ts","../../src/security/providers/ServerSecurityProvider.ts","../../src/security/index.ts"],"x_google_ignoreList":[9,10],"mappings":";;;;;;cAGa,qCAAqB;;;;;;;;;;;;;KAmEtB,cAAc,cAAc;;;;;;;UChEvB,yBAAyB;;;;EAIxC;;;;EAKA;;;;;EAMA;;;;;;;;;;;;;;;;;;;;;;;;;;cCGW,oCAAiB,mBAAA,0BAAA;;;;;;;;;;;cCfjB,kCAAe,mBAAA,0BAAA;;;;;;;;;;;;;;;;;;;;;cCDf,gCAAgC;WAClC;EACT;;;;cCVW,+BAA+B;EAC1C,YAAY;;;;cCDD,sBAAsB;EAC1B;WACS;;;;;;;;KCKN,WAAW,KAAK;EAC1B;;;;;UAMe;;;;EAIf;;;;;;EAOA,YAAY,KAAK,kBAAkB,QAAQ;;;;UCrB5B;EACf;EACA;;;;;;;;;;;;;;;;;iBAkBc,WAAW,SAAS,mBAAmB;;;;UCvBtC;;EAEf;;;;;;EAMA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;;;;;;;;;;;;;;;UA2Fe,YAAY;;;;;EAK3B;;;;;;EAMA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;EAEA;;;;;EAKA;;EAEA;;EAEA;;EAEA;;;;;;UAqCe;;;;;;;EAOf,SAAS;;;;;EAMT,kBAAkB;;;;;;EAOlB;;EAGA;;;UAyCe;;EAEf;;EAGA;;EAGA;;EAGA;;EAGA;;EAGA,MAAM,KAAK;;EAGX;;EAGA;;;UAIe,4BAA4B;;;;;;EAM3C;;;;;EAMA;;EAGA;;GAGC;;;UAmIc;;;;;;;;;;;;;;;;;;;EAmBf;KACG;;;;UA0CY;;;;;;EAMf;;;;;;;;;;EAWA;;;;;;EAOA;;;;;;;;;EAUA;;;;;;EAOA;;;;;;EAOA;;EAGA,cAAc;;;;;;;;;EAUd;;;UAIe,sBAAsB;;;;;;;;EAQrC;;;UAOe;;;;;;EAMf;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;GAGC;;;UA0Dc,gBAAgB,cAAc;;EAE7C,SAAS,cAAc;;EAGvB,iBAAiB;;;UAmBF,mCAAmC;EAClD;;;UAIe,4BAA4B;EAC3C;;;UAUe;EACf,MAAM;;;;;;;UAQS;EACf;;;;;;;;KASU,YAAY,QACtB,QAAQ,kBAAkB,OAAO,OAAO;EACtC;;;;;UChuBa,yBAAyB,eAAqB;;;;;;cCsBlD;qBACQ,6BAAG;qBACH,UAAU;qBACV,SAAO,YAAA;qBACP,kBAAgB;qBAChB,SAAO;;;;;;;EAQnB,aAAa,cAAc,0BAA0B;;;;;;;;;;;;;EAsC/C,cACX,cACA,SAAS,gBACR;;;;;EAuCU,QAAQ,eAAe,QAAQ;;;;;;;;EAY/B,MACX,eACA,kBACA,UAAU,mBACT,QAAQ;;;;;;;;;;EAwDE,OACX,SAAS,oBACT,kBACA,cAAc,iBACb;;;;;;;YAwCO,YAAY;;KAKZ,aACV,kBAAkB,qBAClB,QAAQ,sBACL,QAAQ,YAAY;UAER;EACf;EACA,WAAW;EACX;;UAGe;EACf;EACA;EACA,KAAK,YAAY;EACjB,WAAW;;;;;;UAOI;EACf;;;;;EAKA;EACA;;UAGe;EACf,SAAS,QAAQ;;UAGF,2BAA2B;EAC1C;EAEA;EACA;EACA;EACA;EAEA;IAAiB;;;UAGF;EACf;EACA,QAAQ,gBAAgB;;;;cCjSb,gCAAgB;;;;;;;KAgCjB,aAAa,cAAc;;;cChC1B,0BAAU;;;;;;;;;;KAiCX,OAAO,cAAc;;;cCRpB;qBACQ;qBACA,mBAAiB;qBACjB,4BAA0B;qBAG1B,6BAAG;qBACH,KAAG;qBACH,QAAM;qBACN,gBAAc;MAEtB;;;;qBAOQ,aAAa;;;;qBAKb,QAAQ;YAmBjB,wBAAK;;;;YA0BL,yBAAyB,oBAAoB;;;;;;;EAgDhD,WAAW,MAAM,SAAS,mBAAmB;;;;;;EAgE7C,iBAAiB,KAAK,sBAAsB;EA0D5C,YAAY,OAAO;;;;;;;;;EAiBb,YAAY,eAAe,OAAO,SAAS;;;;;;;;;EAuBjD,sBACL,SAAS,YACT,qBACC;;;;;EA6CI,WACL,UAAU,UACV;IACE;IACA,aAAa;MAEd;;;;;EAoCI,iBAAiB,UAAU,gBAAgB;;;;;EAc3C,SAAS,qBAAqB;;;;;;;;;;EAqBxB,6BACX;IAAO,KAAK;IAAc;MAAW;;KACrC;IACE;IACA,aAAa;MAEd,QAAQ;;;;;;;;;EA0DJ,gBACL,yBAAyB,eACtB,wBACF;;;;EAwFU,oBACX,wBACA;IACE,aAAa;IACb;IACA,SAAS;MAEV,QAAQ;;;;;;;;EA2DJ,IAAI,kBAAkB,qBAAqB;;;;EAO3C,UACL,kBACA,qBAAqB;;;;;;EAUhB,mBAAmB,YAAY;;;;EAoB/B,aAAa,MAAM,kBAAkB;;;;EAWrC,mBAAmB,MAAM;EAOzB,aAAa;;;;;;;;;;;;;;EAiBb,iBACL;IAAQ;iBACR;;;;;;EAgBK,SAAS,iBAAiB;;;;;;;;EAe1B,eAAe;IACpB,QAAQ,MAAM;IACd;MACE;;;;;;;EA+FG,iBAAiB,SAAS;EAgB1B,wBACL,SAAS;;;;;;EAeJ,oBAAoB,SAAS;EAI7B,sBACL,SAAS;EAqBJ,uBACL,SAAS;EAiBJ,oBAAoB,SAAS;;;;;;;EAkB7B,mBAAmB,SAAS;EAmB5B,2BACL,SAAS;;;;;;;;EAkBJ,qBACL,SAAS;;;;;UAiBI;EACf;EAEA,OAAO;;;;;;EAOP,kBAAkB;;;;;;EAOlB,UAAU;;;;;EAMV,WAAW,KAAK,wBAAwB;;;;EAKxC,YAAY;;UAGG;EACf;EACA;;;;;;;;;;cCl/BW;YAAoB,yBAAyB;;;KAM9C;;;;;EAKV;;;;EAKA;;;;EAKA,QAAQ,eAAe;;;;EAKvB,WAAW;;;;EAKX,WAAW,YAAY,wBAAwB;;;;EAK/C,YAAY;;;;;;EAOZ,UAAU;KACP,iBAAiB;UAEL;EACf;;;;;IAKE,aAAa;;EAGf;;;;;IAKE,aAAa;;EAUf,mBACE,MAAM,aACN;IACE;;;;;;IAMA;QAEC;IACH;IACA;;EAGF,oBAAoB,yBAAyB;IAC3C,MAAM;IACN;IACA;;EAGF,mBAAmB,yBAAyB;;KAGlC;;;;EAIV;;UAGe;;;;EAIf,uBAAuB;;cAKZ,wBAAwB,UAAU;qBAC1B,QAAM;qBACN,kBAAgB;qBAChB,kBAAgB;qBAChB,KAAG;qBACH,6BAAG;MAEX;MAIA,yBAAyB;MAMzB,0BAA0B;YAM3B;;;;YAmCA,qBAAqB;;;;;EAgCxB,iBAAiB,UAAU;;;;EAO3B,YAAY;;;;EAON,SAAS,OAAO,SAAS;;;;EAO/B,cAAc,eAAe;EAQvB,WAAW,gBAAgB,QAAQ;;;;EAQnC,YACX,MAAM,aACN;IACE;IACA;IACA;KAEF;;;;;IAKE;MAED,QAAQ;EA0GE,aACX,sBACA,uBACC;IACD,QAAQ;IACR,MAAM;;;UAoEO;EACf;EACA;EACA;;UAGe;EACf;EACA;EACA;EACA;EACA;EACA;EACA;;;;;;;cCndW;aACF,6BACR;;;UAMc;;;;EAIf;;;;EAKA;;;;EAKA;;cAKW,4BAA4B,UAAU;qBAC9B,kBAAgB;MAExB;MAIA;EAIJ;YAIG;;;;EAWH,IAAI,OAAO;;;;;;;cCpDP;aAAkB,uBAA4B;;;UAM1C;;;;EAIf;;;;EAKA;EAEA,kBAAkB;EAElB,cAAc;IAGR;IACA;IACA;;;cAKK,sBAAsB,UAAU;qBACxB,kBAAgB;MAExB;YAID;;;;MAoBC,mBAAmB;EAIvB,IAAI,qBAAqB;EAIzB,MAAM,qBAAqB,sBAAA;;;;UCjEnB;;;;;EAKf;;;;EAKA;;;;EAKA,wBAAwB;;;;;EAMxB,SAAS,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAyDD,QAAQ,UAAU,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cCpDrC,kBAAe,SACjB,mCACR;KAqHS;EACV;;EAGI,QAAQ;;EAGR,QAAQ;EACR,MAAM;;UAIK;;;;EAIf;;;;EAKA;;;;EAKA;;UAGe;EACf,aAAa;;UAGE;EACf,WAAW;;;;cCjLA;qBACQ,6BAAG;qBACH,kBAAgB;qBAChB,aAAW;qBACX,QAAM;qBACN,QAAM;qBAEN,kCAAe;qBA8Bf,kCAAe;YA0BxB,kBAAkB;qBAQT,kCAAe;;KAmCxB,8BACV,SAAS,kBACN,QAAQ;;;;YC9ED;IACR;MACE;MACA,MAAM;;;YAIA;;;;;;;IAOR,gCAAgC;;;;IAKhC,yBAAyB;;;;;;;;IASzB;MAA6B;;;;;YAKrB,cAAc;IACtB,OAAO;;YAGC,oBAAoB;IAC5B,MAAM;;YAGE,6BAA6B;;;;;;;;IAQrC,OAAO;;;;;;;;;;;;;;;;;;;cAsBE,iCAAc,yBAAA"}