covara 0.0.1 → 0.6.0

package/dist/auth/middleware.js

@@ -0,0 +1,116 @@
+import { deleteCookie } from "hono/cookie";
+import { UnauthorizedError } from "../resource/error.js";
+import { getClientIP } from "../server/request.js";
+export const createAuthMiddleware = (adapter, options = {}) => {
+    return async (c, next) => {
+        if (options.skipPaths) {
+            for (const path of options.skipPaths) {
+                if (c.req.path.startsWith(path)) {
+                    return next();
+                }
+            }
+        }
+        const extractor = options.extractCredentials ?? adapter.extractCredentials.bind(adapter);
+        const credentials = extractor(c);
+        if (!credentials) {
+            return next();
+        }
+        const result = await adapter.validateCredentials(credentials);
+        if (!result.success) {
+            throw new UnauthorizedError(result.error ?? options.unauthorizedMessage ?? "Invalid credentials");
+        }
+        c.set("user", result.user);
+        if (credentials.type === "session" && credentials.sessionId) {
+            c.set("session", (await adapter.getSession(credentials.sessionId)) ?? undefined);
+        }
+        else if (credentials.type === "bearer" && credentials.token) {
+            c.set("session", (await adapter.getSession(credentials.token)) ?? undefined);
+        }
+        return next();
+    };
+};
+export const requireAuth = (options = {}) => {
+    return async (c, next) => {
+        if (!c.get("user")) {
+            throw new UnauthorizedError(options.message ?? "Authentication required");
+        }
+        return next();
+    };
+};
+export const optionalAuth = () => {
+    return async (_c, next) => next();
+};
+export const requirePermission = (permission) => {
+    return async (c, next) => {
+        const user = c.get("user");
+        if (!user) {
+            throw new UnauthorizedError("Authentication required");
+        }
+        const permissions = user.metadata?.permissions;
+        if (!Array.isArray(permissions) || !permissions.includes(permission)) {
+            throw new UnauthorizedError(`Permission '${permission}' required`);
+        }
+        return next();
+    };
+};
+export const requireRole = (...roles) => {
+    return async (c, next) => {
+        const user = c.get("user");
+        if (!user) {
+            throw new UnauthorizedError("Authentication required");
+        }
+        const userRole = user.metadata?.role;
+        if (typeof userRole !== "string" || !roles.includes(userRole)) {
+            throw new UnauthorizedError(`One of roles [${roles.join(", ")}] required`);
+        }
+        return next();
+    };
+};
+export const requireOwnership = (getResourceOwnerId, options = {}) => {
+    return async (c, next) => {
+        const user = c.get("user");
+        if (!user) {
+            throw new UnauthorizedError("Authentication required");
+        }
+        if (options.allowAdmin && options.adminCheck?.(c)) {
+            return next();
+        }
+        const ownerId = await getResourceOwnerId(c);
+        if (ownerId !== user.id) {
+            throw new UnauthorizedError("You don't own this resource");
+        }
+        return next();
+    };
+};
+export const refreshSession = (adapter) => {
+    return async (c, next) => {
+        const session = c.get("session");
+        if (session && adapter.refreshSession) {
+            const refreshed = await adapter.refreshSession(session.id);
+            if (refreshed) {
+                c.set("session", refreshed);
+            }
+        }
+        return next();
+    };
+};
+export const createLogoutHandler = (adapter) => {
+    return async (c) => {
+        const session = c.get("session");
+        if (session) {
+            await adapter.invalidateSession(session.id);
+        }
+        deleteCookie(c, "session");
+        return c.json({ success: true });
+    };
+};
+export const getUser = (c) => {
+    return c.get("user");
+};
+export const getSession = (c) => {
+    return c.get("session");
+};
+export const rateByUser = (c) => {
+    return c.get("user")?.id ?? getClientIP(c);
+};
+//# sourceMappingURL=middleware.js.map

package/dist/auth/middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"middleware.js","sourceRoot":"","sources":["../../src/auth/middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAK3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAClC,OAAoB,EACpB,UAAiC,EAAE,EAChB,EAAE;IACrB,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;gBACrC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;oBAChC,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzF,MAAM,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAEjC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAE9D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,iBAAiB,CACzB,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,mBAAmB,IAAI,qBAAqB,CACrE,CAAC;QACJ,CAAC;QAED,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAE3B,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,EAAE,CAAC;YAC5D,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;QACnF,CAAC;aAAM,IAAI,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;YAC9D,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,CAAC;QAC/E,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CACzB,UAAgC,EAAE,EACf,EAAE;IACrB,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,iBAAiB,CAAC,OAAO,CAAC,OAAO,IAAI,yBAAyB,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,YAAY,GAAG,GAAsB,EAAE;IAClD,OAAO,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;AACpC,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,UAAkB,EAAqB,EAAE;IACzE,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACrE,MAAM,IAAI,iBAAiB,CAAC,eAAe,UAAU,YAAY,CAAC,CAAC;QACrE,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAG,KAAe,EAAqB,EAAE;IACnE,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC;QACrC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,iBAAiB,CAAC,iBAAiB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7E,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAC9B,kBAA4D,EAC5D,UAA0E,EAAE,EACzD,EAAE;IACrB,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QACzD,CAAC;QAED,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAO,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;YACxB,MAAM,IAAI,iBAAiB,CAAC,6BAA6B,CAAC,CAAC;QAC7D,CAAC;QAED,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAAoB,EAAqB,EAAE;IACxE,OAAO,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE;QACvB,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,OAAO,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACtC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC3D,IAAI,SAAS,EAAE,CAAC;gBACd,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,OAAoB,EAAE,EAAE;IAC1D,OAAO,KAAK,EAAE,CAAU,EAAqB,EAAE;QAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACjC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9C,CAAC;QAED,YAAY,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QAE3B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAU,EAA2B,EAAE;IAC7D,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvB,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAU,EAAE,EAAE;IACvC,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAU,EAAU,EAAE;IAC/C,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC,CAAC"}

package/dist/auth/password-policy.d.ts

@@ -0,0 +1,18 @@
+export interface PasswordPolicyOptions {
+    minLength?: number;
+    maxLength?: number;
+    requireUppercase?: boolean;
+    requireLowercase?: boolean;
+    requireNumber?: boolean;
+    requireSymbol?: boolean;
+    denylist?: string[];
+    useBuiltInDenylist?: boolean;
+}
+export interface PasswordStrengthResult {
+    valid: boolean;
+    errors: string[];
+}
+export declare const validatePasswordStrength: (password: string, options?: PasswordPolicyOptions) => PasswordStrengthResult;
+export declare const enforcePasswordStrength: (password: string, options?: PasswordPolicyOptions) => void;
+export declare const builtInPasswordDenylist: () => string[];
+//# sourceMappingURL=password-policy.d.ts.map

package/dist/auth/password-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-policy.d.ts","sourceRoot":"","sources":["../../src/auth/password-policy.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B;AAkCD,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,eAAO,MAAM,wBAAwB,GACnC,UAAU,MAAM,EAChB,UAAS,qBAA0B,KAClC,sBAsCF,CAAC;AAEF,eAAO,MAAM,uBAAuB,GAClC,UAAU,MAAM,EAChB,UAAS,qBAA0B,KAClC,IAOF,CAAC;AAEF,eAAO,MAAM,uBAAuB,QAAO,MAAM,EAA4B,CAAC"}

package/dist/auth/password-policy.js

@@ -0,0 +1,72 @@
+import { ValidationError } from "../resource/error.js";
+const BUILT_IN_DENYLIST = [
+    "password",
+    "password1",
+    "123456",
+    "12345678",
+    "123456789",
+    "qwerty",
+    "abc123",
+    "111111",
+    "letmein",
+    "iloveyou",
+    "admin",
+    "welcome",
+    "monkey",
+    "dragon",
+    "sunshine",
+    "princess",
+    "football",
+    "654321",
+    "passw0rd",
+    "changeme",
+];
+const DEFAULTS = {
+    minLength: 8,
+    requireUppercase: false,
+    requireLowercase: false,
+    requireNumber: false,
+    requireSymbol: false,
+    useBuiltInDenylist: true,
+};
+export const validatePasswordStrength = (password, options = {}) => {
+    const errors = [];
+    const minLength = options.minLength ?? DEFAULTS.minLength;
+    if (typeof password !== "string" || password.length < minLength) {
+        errors.push(`Password must be at least ${minLength} characters long`);
+    }
+    if (options.maxLength !== undefined && password.length > options.maxLength) {
+        errors.push(`Password must be at most ${options.maxLength} characters long`);
+    }
+    if (options.requireUppercase && !/[A-Z]/.test(password)) {
+        errors.push("Password must contain an uppercase letter");
+    }
+    if (options.requireLowercase && !/[a-z]/.test(password)) {
+        errors.push("Password must contain a lowercase letter");
+    }
+    if (options.requireNumber && !/[0-9]/.test(password)) {
+        errors.push("Password must contain a number");
+    }
+    if (options.requireSymbol && !/[^A-Za-z0-9]/.test(password)) {
+        errors.push("Password must contain a symbol");
+    }
+    const useBuiltIn = options.useBuiltInDenylist ?? DEFAULTS.useBuiltInDenylist;
+    const denylist = [
+        ...(useBuiltIn ? BUILT_IN_DENYLIST : []),
+        ...(options.denylist ?? []),
+    ];
+    if (denylist.some((entry) => entry.toLowerCase() === password.toLowerCase())) {
+        errors.push("Password is too common");
+    }
+    return { valid: errors.length === 0, errors };
+};
+export const enforcePasswordStrength = (password, options = {}) => {
+    const result = validatePasswordStrength(password, options);
+    if (!result.valid) {
+        throw new ValidationError("Password does not meet requirements", {
+            errors: result.errors.map((message) => ({ field: "password", message })),
+        });
+    }
+};
+export const builtInPasswordDenylist = () => [...BUILT_IN_DENYLIST];
+//# sourceMappingURL=password-policy.js.map

package/dist/auth/password-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-policy.js","sourceRoot":"","sources":["../../src/auth/password-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAanD,MAAM,iBAAiB,GAAG;IACxB,UAAU;IACV,WAAW;IACX,QAAQ;IACR,UAAU;IACV,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,UAAU;IACV,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,UAAU;IACV,UAAU;IACV,QAAQ;IACR,UAAU;IACV,UAAU;CACX,CAAC;AAEF,MAAM,QAAQ,GAAG;IACf,SAAS,EAAE,CAAC;IACZ,gBAAgB,EAAE,KAAK;IACvB,gBAAgB,EAAE,KAAK;IACvB,aAAa,EAAE,KAAK;IACpB,aAAa,EAAE,KAAK;IACpB,kBAAkB,EAAE,IAAI;CAChB,CAAC;AAOX,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,QAAgB,EAChB,UAAiC,EAAE,EACX,EAAE;IAC1B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC;IAE1D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,6BAA6B,SAAS,kBAAkB,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QAC3E,MAAM,CAAC,IAAI,CAAC,4BAA4B,OAAO,CAAC,SAAS,kBAAkB,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IAC1D,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5D,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,CAAC,kBAAkB,IAAI,QAAQ,CAAC,kBAAkB,CAAC;IAC7E,MAAM,QAAQ,GAAG;QACf,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;QACxC,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;KAC5B,CAAC;IACF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CACrC,QAAgB,EAChB,UAAiC,EAAE,EAC7B,EAAE;IACR,MAAM,MAAM,GAAG,wBAAwB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClB,MAAM,IAAI,eAAe,CAAC,qCAAqC,EAAE;YAC/D,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;SACzE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAa,EAAE,CAAC,CAAC,GAAG,iBAAiB,CAAC,CAAC"}

package/dist/auth/password-reset.d.ts

@@ -0,0 +1,13 @@
+import { VerificationTokenStore } from "./verification.js";
+export interface PasswordResetOptions {
+    store: VerificationTokenStore;
+    ttlMs?: number;
+    hashTokens?: boolean;
+}
+export declare const issuePasswordResetToken: (identifier: string, options: PasswordResetOptions) => Promise<{
+    token: string;
+    expiresAt: Date;
+}>;
+export declare const verifyPasswordResetToken: (identifier: string, token: string, options: PasswordResetOptions) => Promise<boolean>;
+export declare const hashNewPassword: (password: string) => Promise<string>;
+//# sourceMappingURL=password-reset.d.ts.map

package/dist/auth/password-reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.d.ts","sourceRoot":"","sources":["../../src/auth/password-reset.ts"],"names":[],"mappings":"AACA,OAAO,EACL,sBAAsB,EAGvB,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,sBAAsB,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAID,eAAO,MAAM,uBAAuB,GAClC,YAAY,MAAM,EAClB,SAAS,oBAAoB,KAC5B,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAAE,CAI5C,CAAC;AAEF,eAAO,MAAM,wBAAwB,GACnC,YAAY,MAAM,EAClB,OAAO,MAAM,EACb,SAAS,oBAAoB,KAC5B,OAAO,CAAC,OAAO,CAIjB,CAAC;AAEF,eAAO,MAAM,eAAe,GAAU,UAAU,MAAM,KAAG,OAAO,CAAC,MAAM,CAEtE,CAAC"}

package/dist/auth/password-reset.js

@@ -0,0 +1,17 @@
+import { hashPassword } from "./password.js";
+import { issueToken, verifyToken, } from "./verification.js";
+const DEFAULT_TTL_MS = 60 * 60 * 1000;
+export const issuePasswordResetToken = async (identifier, options) => {
+    return issueToken(options.store, identifier, options.ttlMs ?? DEFAULT_TTL_MS, {
+        hash: options.hashTokens,
+    });
+};
+export const verifyPasswordResetToken = async (identifier, token, options) => {
+    return verifyToken(options.store, identifier, token, {
+        hash: options.hashTokens,
+    });
+};
+export const hashNewPassword = async (password) => {
+    return hashPassword(password);
+};
+//# sourceMappingURL=password-reset.js.map

package/dist/auth/password-reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password-reset.js","sourceRoot":"","sources":["../../src/auth/password-reset.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAEL,UAAU,EACV,WAAW,GACZ,MAAM,gBAAgB,CAAC;AAQxB,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEtC,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,EAC1C,UAAkB,EAClB,OAA6B,EACgB,EAAE;IAC/C,OAAO,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,KAAK,IAAI,cAAc,EAAE;QAC5E,IAAI,EAAE,OAAO,CAAC,UAAU;KACzB,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,EAC3C,UAAkB,EAClB,KAAa,EACb,OAA6B,EACX,EAAE;IACpB,OAAO,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE;QACnD,IAAI,EAAE,OAAO,CAAC,UAAU;KACzB,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,QAAgB,EAAmB,EAAE;IACzE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC,CAAC"}

package/dist/auth/password.d.ts

@@ -0,0 +1,11 @@
+export interface PasswordHashOptions {
+    N?: number;
+    r?: number;
+    p?: number;
+    keylen?: number;
+    saltlen?: number;
+}
+export declare function hashPassword(password: string, options?: PasswordHashOptions): Promise<string>;
+export declare function verifyPassword(password: string, stored: string): Promise<boolean>;
+export declare function needsRehash(stored: string, options?: PasswordHashOptions): boolean;
+//# sourceMappingURL=password.d.ts.map

package/dist/auth/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,mBAAmB;IAClC,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAsCD,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,mBAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC,CAWjB;AAgDD,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAgBvF;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CASlF"}

package/dist/auth/password.js

@@ -0,0 +1,98 @@
+import { randomBytes, scrypt, timingSafeEqual } from "node:crypto";
+const DEFAULTS = {
+    N: 16384,
+    r: 8,
+    p: 1,
+    keylen: 64,
+    saltlen: 16,
+};
+const ALGORITHM = "scrypt";
+function deriveKey(password, salt, params, keylen) {
+    return new Promise((resolve, reject) => {
+        scrypt(password, salt, keylen, { N: params.N, r: params.r, p: params.p, maxmem: 256 * params.N * params.r }, (err, derivedKey) => {
+            if (err)
+                reject(err);
+            else
+                resolve(derivedKey);
+        });
+    });
+}
+export async function hashPassword(password, options) {
+    const N = options?.N ?? DEFAULTS.N;
+    const r = options?.r ?? DEFAULTS.r;
+    const p = options?.p ?? DEFAULTS.p;
+    const keylen = options?.keylen ?? DEFAULTS.keylen;
+    const saltlen = options?.saltlen ?? DEFAULTS.saltlen;
+    const salt = randomBytes(saltlen);
+    const hash = await deriveKey(password, salt, { N, r, p }, keylen);
+    return `${ALGORITHM}$N=${N},r=${r},p=${p}$${salt.toString("base64")}$${hash.toString("base64")}`;
+}
+function parseStored(stored) {
+    if (typeof stored !== "string")
+        return null;
+    const parts = stored.split("$");
+    if (parts.length !== 4)
+        return null;
+    const [algorithm, paramStr, saltB64, hashB64] = parts;
+    if (algorithm !== ALGORITHM)
+        return null;
+    const params = parseParams(paramStr);
+    if (!params)
+        return null;
+    let salt;
+    let hash;
+    try {
+        salt = Buffer.from(saltB64, "base64");
+        hash = Buffer.from(hashB64, "base64");
+    }
+    catch {
+        return null;
+    }
+    if (salt.length === 0 || hash.length === 0)
+        return null;
+    return { algorithm, params, salt, hash };
+}
+function parseParams(paramStr) {
+    const out = {};
+    for (const segment of paramStr.split(",")) {
+        const [key, value] = segment.split("=");
+        const num = Number(value);
+        if (!Number.isInteger(num) || num <= 0)
+            return null;
+        if (key === "N")
+            out.N = num;
+        else if (key === "r")
+            out.r = num;
+        else if (key === "p")
+            out.p = num;
+        else
+            return null;
+    }
+    if (out.N === undefined || out.r === undefined || out.p === undefined)
+        return null;
+    return { N: out.N, r: out.r, p: out.p };
+}
+export async function verifyPassword(password, stored) {
+    const parsed = parseStored(stored);
+    if (!parsed)
+        return false;
+    try {
+        const candidate = await deriveKey(password, parsed.salt, parsed.params, parsed.hash.length);
+        if (candidate.length !== parsed.hash.length)
+            return false;
+        return timingSafeEqual(candidate, parsed.hash);
+    }
+    catch {
+        return false;
+    }
+}
+export function needsRehash(stored, options) {
+    const parsed = parseStored(stored);
+    if (!parsed)
+        return true;
+    const targetN = options?.N ?? DEFAULTS.N;
+    const targetR = options?.r ?? DEFAULTS.r;
+    const targetP = options?.p ?? DEFAULTS.p;
+    return parsed.params.N < targetN || parsed.params.r < targetR || parsed.params.p < targetP;
+}
+//# sourceMappingURL=password.js.map

package/dist/auth/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAgBnE,MAAM,QAAQ,GAAG;IACf,CAAC,EAAE,KAAK;IACR,CAAC,EAAE,CAAC;IACJ,CAAC,EAAE,CAAC;IACJ,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,EAAE;CACH,CAAC;AAEX,MAAM,SAAS,GAAG,QAAQ,CAAC;AAE3B,SAAS,SAAS,CAChB,QAAgB,EAChB,IAAY,EACZ,MAAoB,EACpB,MAAc;IAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,CACJ,QAAQ,EACR,IAAI,EACJ,MAAM,EACN,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,EAC5E,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE;YAClB,IAAI,GAAG;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;;gBAChB,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3B,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,OAA6B;IAE7B,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,OAAO,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC;IAClD,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC;IAErD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAElE,OAAO,GAAG,SAAS,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACnG,CAAC;AASD,SAAS,WAAW,CAAC,MAAc;IACjC,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC;IACtD,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,IAAY,CAAC;IACjB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACtC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAExD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACpD,IAAI,GAAG,KAAK,GAAG;YAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;aACxB,IAAI,GAAG,KAAK,GAAG;YAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;aAC7B,IAAI,GAAG,KAAK,GAAG;YAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;;YAC7B,OAAO,IAAI,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS,IAAI,GAAG,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnF,OAAO,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,MAAc;IACnE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,SAAS,CAC/B,QAAQ,EACR,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,IAAI,CAAC,MAAM,CACnB,CAAC;QACF,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1D,OAAO,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,MAAc,EAAE,OAA6B;IACvE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC;IAEzC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC;AAC7F,CAAC"}

package/dist/auth/routes.d.ts

@@ -0,0 +1,111 @@
+import { Hono, type Context, type MiddlewareHandler } from "hono";
+import { AuthAdapter } from "./types.js";
+import { UserContext } from "../resource/types.js";
+import { type LoginThrottleOptions } from "./login-throttle.js";
+import { type CsrfOptions } from "./csrf.js";
+import { VerificationTokenStore } from "./verification.js";
+import { type TotpOptions } from "./totp.js";
+import { type PasswordPolicyOptions } from "./password-policy.js";
+export interface AuthUser {
+    id: string;
+    email?: string | null;
+    name?: string | null;
+    image?: string | null;
+}
+export interface UseAuthOptions {
+    adapter: AuthAdapter;
+    cookieName?: string;
+    cookieOptions?: {
+        httpOnly?: boolean;
+        secure?: boolean;
+        sameSite?: "strict" | "lax" | "none";
+        maxAge?: number;
+        path?: string;
+    };
+    login?: {
+        validateCredentials: (email: string, password: string) => Promise<AuthUser | null>;
+    };
+    signup?: {
+        createUser: (data: {
+            email: string;
+            password: string;
+            name?: string;
+        }) => Promise<AuthUser>;
+        validateEmail?: (email: string) => boolean | Promise<boolean>;
+        validatePassword?: (password: string) => boolean | Promise<boolean>;
+    };
+    serializeUser?: (user: UserContext) => Record<string, unknown>;
+    onLogin?: (user: UserContext, c: Context) => void | Promise<void>;
+    onLogout?: (user: UserContext | null, c: Context) => void | Promise<void>;
+    onSignup?: (user: AuthUser, c: Context) => void | Promise<void>;
+    csrf?: boolean | CsrfOptions;
+    throttle?: boolean | LoginThrottleOptions;
+    verification?: {
+        store: VerificationTokenStore;
+        sendToken: (params: {
+            identifier: string;
+            token: string;
+            expiresAt: Date;
+            c: Context;
+        }) => void | Promise<void>;
+        markVerified: (identifier: string) => void | Promise<void>;
+        ttlMs?: number;
+        hashTokens?: boolean;
+    };
+    passwordReset?: {
+        store: VerificationTokenStore;
+        sendToken: (params: {
+            identifier: string;
+            token: string;
+            expiresAt: Date;
+            c: Context;
+        }) => void | Promise<void>;
+        resetPassword: (identifier: string, passwordHash: string) => void | Promise<void>;
+        findUserByEmail?: (identifier: string) => Promise<{
+            id: string;
+        } | null>;
+        ttlMs?: number;
+        hashTokens?: boolean;
+        logoutEverywhere?: boolean;
+    };
+    passwordPolicy?: PasswordPolicyOptions;
+    mfa?: MfaOptions;
+    magicLink?: MagicLinkAuthOptions;
+}
+export interface MfaEnrollment {
+    secret: string;
+    enabled: boolean;
+    backupCodeHashes?: string[];
+}
+export interface MfaOptions {
+    issuer?: string;
+    totp?: TotpOptions;
+    backupCodeCount?: number;
+    requireOnLogin?: boolean;
+    getUserByEmail: (email: string) => Promise<(AuthUser & {
+        mfa?: MfaEnrollment | null;
+    }) | null>;
+    getEnrollment: (userId: string) => Promise<MfaEnrollment | null>;
+    saveEnrollment: (userId: string, enrollment: MfaEnrollment) => void | Promise<void>;
+    saveBackupCodeHashes?: (userId: string, hashes: string[]) => void | Promise<void>;
+    consumeBackupCode?: (userId: string, index: number) => void | Promise<void>;
+}
+export interface MagicLinkAuthOptions {
+    store: VerificationTokenStore;
+    sendLink: (params: {
+        identifier: string;
+        token: string;
+        expiresAt: Date;
+        c: Context;
+    }) => void | Promise<void>;
+    findUserByEmail: (identifier: string) => Promise<AuthUser | null>;
+    ttlMs?: number;
+    hashTokens?: boolean;
+}
+export interface AuthRouterResult {
+    router: Hono;
+    middleware: MiddlewareHandler;
+}
+export declare const useAuth: (options: UseAuthOptions) => AuthRouterResult;
+export declare const createAuthRoutes: (options: UseAuthOptions) => AuthRouterResult;
+//# sourceMappingURL=routes.d.ts.map

package/dist/auth/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/auth/routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,KAAK,OAAO,EAAE,KAAK,iBAAiB,EAAE,MAAM,MAAM,CAAC;AAGlE,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAAiB,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAwC,KAAK,WAAW,EAAE,MAAM,QAAQ,CAAC;AAChF,OAAO,EACL,sBAAsB,EAGvB,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,QAAQ,CAAC;AAEhB,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,WAAW,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QACd,QAAQ,CAAC,EAAE,OAAO,CAAC;QACnB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;QACrC,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;KACf,CAAC;IACF,KAAK,CAAC,EAAE;QACN,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;KACpF,CAAC;IACF,MAAM,CAAC,EAAE;QACP,UAAU,EAAE,CAAC,IAAI,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC5F,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;KACrE,CAAC;IACF,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/D,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,GAAG,oBAAoB,CAAC;IAC1C,YAAY,CAAC,EAAE;QACb,KAAK,EAAE,sBAAsB,CAAC;QAC9B,SAAS,EAAE,CAAC,MAAM,EAAE;YAClB,UAAU,EAAE,MAAM,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC;YACd,SAAS,EAAE,IAAI,CAAC;YAChB,CAAC,EAAE,OAAO,CAAC;SACZ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,aAAa,CAAC,EAAE;QACd,KAAK,EAAE,sBAAsB,CAAC;QAC9B,SAAS,EAAE,CAAC,MAAM,EAAE;YAClB,UAAU,EAAE,MAAM,CAAC;YACnB,KAAK,EAAE,MAAM,CAAC;YACd,SAAS,EAAE,IAAI,CAAC;YAChB,CAAC,EAAE,OAAO,CAAC;SACZ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3B,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAClF,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC,CAAC;QACzE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;IACF,cAAc,CAAC,EAAE,qBAAqB,CAAC;IACvC,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAClC;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,QAAQ,GAAG;QAAE,GAAG,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;KAAE,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/F,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACjE,cAAc,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpF,oBAAoB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClF,iBAAiB,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,sBAAsB,CAAC;IAC9B,QAAQ,EAAE,CAAC,MAAM,EAAE;QACjB,UAAU,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,IAAI,CAAC;QAChB,CAAC,EAAE,OAAO,CAAC;KACZ,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,eAAe,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,IAAI,CAAC;IACb,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAiCD,eAAO,MAAM,OAAO,GAAI,SAAS,cAAc,KAAG,gBAyfjD,CAAC;AAEF,eAAO,MAAM,gBAAgB,YA3fI,cAAc,KAAG,gBA2fX,CAAC"}