exisjs 0.1.2

package/dist/auth/jwt.d.ts

@@ -0,0 +1,20 @@
+import { HttpError } from '../utils/errors';
+export interface JWTOptions {
+    expiresIn?: number;
+}
+/**
+ * Sign a payload to create a JWT token.
+ * @param payload Object to encode
+ * @param secret The signing secret
+ * @param options JWTOptions (e.g. expiresIn)
+ */
+export declare function signJWT(payload: Record<string, unknown>, secret: string, options?: JWTOptions): string;
+export declare class TokenExpiredError extends HttpError {
+    constructor(message?: string);
+}
+/**
+ * Verify a JWT token and extract its payload.
+ * Throws HttpError(401) if the token is invalid or TokenExpiredError if expired.
+ */
+export declare function verifyJWT<T = unknown>(token: string, secret: string): T;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/auth/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/auth/jwt.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAE3C,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAeD;;;;;GAKG;AACH,wBAAgB,OAAO,CACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,UAAU,GACnB,MAAM,CAgBR;AAED,qBAAa,iBAAkB,SAAQ,SAAS;gBAClC,OAAO,SAAkB;CAItC;AAED;;;GAGG;AACH,wBAAgB,SAAS,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,CAAC,CA2CvE"}

package/dist/auth/jwt.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenExpiredError = void 0;
+exports.signJWT = signJWT;
+exports.verifyJWT = verifyJWT;
+const node_crypto_1 = require("node:crypto");
+const errors_1 = require("../utils/errors");
+function base64url(str) {
+    const base64 = Buffer.isBuffer(str)
+        ? str.toString('base64')
+        : Buffer.from(str).toString('base64');
+    return base64.replace(/=/g, '').replace(/\+/g, '-').replace(/\//g, '_');
+}
+function fromBase64url(str) {
+    const base64 = str.replace(/-/g, '+').replace(/_/g, '/');
+    return Buffer.from(base64, 'base64').toString('utf8');
+}
+/**
+ * Sign a payload to create a JWT token.
+ * @param payload Object to encode
+ * @param secret The signing secret
+ * @param options JWTOptions (e.g. expiresIn)
+ */
+function signJWT(payload, secret, options) {
+    const header = { alg: 'HS256', typ: 'JWT' };
+    const expPayload = { ...payload };
+    if (options?.expiresIn) {
+        expPayload.exp = Math.floor(Date.now() / 1000) + options.expiresIn;
+    }
+    const encodedHeader = base64url(JSON.stringify(header));
+    const encodedPayload = base64url(JSON.stringify(expPayload));
+    const signature = (0, node_crypto_1.createHmac)('sha256', secret)
+        .update(`${encodedHeader}.${encodedPayload}`)
+        .digest();
+    return `${encodedHeader}.${encodedPayload}.${base64url(signature)}`;
+}
+class TokenExpiredError extends errors_1.HttpError {
+    constructor(message = 'Token expired') {
+        super(message, 401, 'TOKEN_EXPIRED');
+        this.name = 'TokenExpiredError';
+    }
+}
+exports.TokenExpiredError = TokenExpiredError;
+/**
+ * Verify a JWT token and extract its payload.
+ * Throws HttpError(401) if the token is invalid or TokenExpiredError if expired.
+ */
+function verifyJWT(token, secret) {
+    if (!token || typeof token !== 'string') {
+        throw errors_1.HttpError.unauthorized('Invalid token format');
+    }
+    const parts = token.split('.');
+    if (parts.length !== 3) {
+        throw errors_1.HttpError.unauthorized('Invalid token format');
+    }
+    const [encodedHeader, encodedPayload, encodedSignature] = parts;
+    const expectedSignature = base64url((0, node_crypto_1.createHmac)('sha256', secret)
+        .update(`${encodedHeader}.${encodedPayload}`)
+        .digest());
+    const expectedBuf = Buffer.from(expectedSignature);
+    const actualBuf = Buffer.from(encodedSignature);
+    if (expectedBuf.length !== actualBuf.length ||
+        !(0, node_crypto_1.timingSafeEqual)(expectedBuf, actualBuf)) {
+        throw errors_1.HttpError.unauthorized('Invalid token signature');
+    }
+    let payload;
+    try {
+        payload = JSON.parse(fromBase64url(encodedPayload));
+    }
+    catch {
+        throw errors_1.HttpError.unauthorized('Malformed token payload');
+    }
+    if (typeof payload.exp === 'number' &&
+        Math.floor(Date.now() / 1000) > payload.exp) {
+        throw new TokenExpiredError();
+    }
+    return payload;
+}
+//# sourceMappingURL=jwt.js.map

package/dist/auth/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/auth/jwt.ts"],"names":[],"mappings":";;;AA0BA,0BAoBC;AAaD,8BA2CC;AAtGD,6CAAyD;AACzD,4CAA2C;AAM3C,SAAS,SAAS,CAAC,GAAoB;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACjC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAEvC,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAA;AACzE,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;AACvD,CAAC;AAED;;;;;GAKG;AACH,SAAgB,OAAO,CACrB,OAAgC,EAChC,MAAc,EACd,OAAoB;IAEpB,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;IAE3C,MAAM,UAAU,GAAG,EAAE,GAAG,OAAO,EAAE,CAAA;IACjC,IAAI,OAAO,EAAE,SAAS,EAAE,CAAC;QACvB,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,CAAA;IACpE,CAAC;IAED,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IACvD,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAA;IAE5D,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC;SAC3C,MAAM,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;SAC5C,MAAM,EAAE,CAAA;IAEX,OAAO,GAAG,aAAa,IAAI,cAAc,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,CAAA;AACrE,CAAC;AAED,MAAa,iBAAkB,SAAQ,kBAAS;IAC9C,YAAY,OAAO,GAAG,eAAe;QACnC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,CAAA;QACpC,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAA;IACjC,CAAC;CACF;AALD,8CAKC;AAED;;;GAGG;AACH,SAAgB,SAAS,CAAc,KAAa,EAAE,MAAc;IAClE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,kBAAS,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,kBAAS,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,CAAC,aAAa,EAAE,cAAc,EAAE,gBAAgB,CAAC,GAAG,KAAK,CAAA;IAE/D,MAAM,iBAAiB,GAAG,SAAS,CACjC,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC;SACzB,MAAM,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;SAC5C,MAAM,EAAE,CACZ,CAAA;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAA;IAE/C,IACE,WAAW,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;QACvC,CAAC,IAAA,6BAAe,EAAC,WAAW,EAAE,SAAS,CAAC,EACxC,CAAC;QACD,MAAM,kBAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAA;IACzD,CAAC;IAED,IAAI,OAAgC,CAAA;IACpC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAA;IACrD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,kBAAS,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAA;IACzD,CAAC;IAED,IACE,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;QAC/B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,EAC3C,CAAC;QACD,MAAM,IAAI,iBAAiB,EAAE,CAAA;IAC/B,CAAC;IAED,OAAO,OAAY,CAAA;AACrB,CAAC"}

package/dist/auth/password.d.ts

@@ -0,0 +1,25 @@
+export interface HashOptions {
+    /** The length of the salt in bytes. Default: 16 */
+    saltLength?: number;
+    /** The length of the derived key in bytes. Default: 64 */
+    keyLength?: number;
+    /** CPU/memory cost parameter (N). Must be a power of 2 greater than 1. Default: 16384 */
+    cost?: number;
+    /** Block size parameter (r). Default: 8 */
+    blockSize?: number;
+    /** Parallelization parameter (p). Default: 1 */
+    parallelization?: number;
+}
+/**
+ * Hash a password using scrypt.
+ * Returns a string formatted as: `scrypt:N:r:p:keylen:salt:hash`
+ * This ensures the options are securely stored alongside the hash for future verification.
+ */
+export declare function hashPassword(password: string, options?: HashOptions): Promise<string>;
+/**
+ * Verify a password against a stored scrypt hash.
+ * @param password The plaintext password to verify.
+ * @param storedHash The stored hash string generated by `hashPassword`.
+ */
+export declare function verifyPassword(password: string, storedHash: string): Promise<boolean>;
+//# sourceMappingURL=password.d.ts.map

package/dist/auth/password.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.d.ts","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,yFAAyF;IACzF,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAUD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,MAAM,CAAC,CAajB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,OAAO,CAAC,CAwClB"}

package/dist/auth/password.js

@@ -0,0 +1,93 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hashPassword = hashPassword;
+exports.verifyPassword = verifyPassword;
+const node_crypto_1 = require("node:crypto");
+const scryptAsync = (password, salt, keylen, options) => {
+    return new Promise((resolve, reject) => {
+        if (options) {
+            (0, node_crypto_1.scrypt)(password, salt, keylen, options, (err, derivedKey) => {
+                if (err)
+                    reject(err);
+                else
+                    resolve(derivedKey);
+            });
+        }
+        else {
+            (0, node_crypto_1.scrypt)(password, salt, keylen, (err, derivedKey) => {
+                if (err)
+                    reject(err);
+                else
+                    resolve(derivedKey);
+            });
+        }
+    });
+};
+const DEFAULT_OPTIONS = {
+    saltLength: 16,
+    keyLength: 64,
+    cost: 16384,
+    blockSize: 8,
+    parallelization: 1,
+};
+/**
+ * Hash a password using scrypt.
+ * Returns a string formatted as: `scrypt:N:r:p:keylen:salt:hash`
+ * This ensures the options are securely stored alongside the hash for future verification.
+ */
+async function hashPassword(password, options) {
+    const opts = { ...DEFAULT_OPTIONS, ...options };
+    const salt = (0, node_crypto_1.randomBytes)(opts.saltLength).toString('hex');
+    const derivedKey = (await scryptAsync(password, salt, opts.keyLength, {
+        N: opts.cost,
+        r: opts.blockSize,
+        p: opts.parallelization,
+    }));
+    // Store the parameters used to create the hash so we can verify it later
+    // Format: scrypt:cost:blockSize:parallelization:keyLength:salt:hash
+    return `scrypt:${opts.cost}:${opts.blockSize}:${opts.parallelization}:${opts.keyLength}:${salt}:${derivedKey.toString('hex')}`;
+}
+/**
+ * Verify a password against a stored scrypt hash.
+ * @param password The plaintext password to verify.
+ * @param storedHash The stored hash string generated by `hashPassword`.
+ */
+async function verifyPassword(password, storedHash) {
+    if (!password || !storedHash || typeof storedHash !== 'string') {
+        return false;
+    }
+    // Backwards compatibility with the old simple format `salt:hash`
+    const parts = storedHash.split(':');
+    if (parts.length === 2) {
+        const [salt, key] = parts;
+        if (!salt || !key)
+            return false;
+        const keyBuffer = Buffer.from(key, 'hex');
+        const derivedKey = (await scryptAsync(password, salt, 64));
+        if (keyBuffer.length !== derivedKey.length)
+            return false;
+        return (0, node_crypto_1.timingSafeEqual)(keyBuffer, derivedKey);
+    }
+    // New format: scrypt:N:r:p:keylen:salt:hash
+    if (parts.length === 7 && parts[0] === 'scrypt') {
+        const cost = parseInt(parts[1], 10);
+        const blockSize = parseInt(parts[2], 10);
+        const parallelization = parseInt(parts[3], 10);
+        const keyLength = parseInt(parts[4], 10);
+        const salt = parts[5];
+        const key = parts[6];
+        if (!salt || !key)
+            return false;
+        const keyBuffer = Buffer.from(key, 'hex');
+        const derivedKey = (await scryptAsync(password, salt, keyLength, {
+            N: cost,
+            r: blockSize,
+            p: parallelization,
+        }));
+        if (keyBuffer.length !== derivedKey.length)
+            return false;
+        return (0, node_crypto_1.timingSafeEqual)(keyBuffer, derivedKey);
+    }
+    return false;
+}
+//# sourceMappingURL=password.js.map

package/dist/auth/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":";;AAiDA,oCAgBC;AAOD,wCA2CC;AAnHD,6CAAkE;AAElE,MAAM,WAAW,GAAG,CAClB,QAAyB,EACzB,IAAqB,EACrB,MAAc,EACd,OAA6C,EAC5B,EAAE;IACnB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,EAAE,CAAC;YACZ,IAAA,oBAAM,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE;gBAC1D,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAA;;oBACf,OAAO,CAAC,UAAU,CAAC,CAAA;YAC1B,CAAC,CAAC,CAAA;QACJ,CAAC;aAAM,CAAC;YACN,IAAA,oBAAM,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE;gBACjD,IAAI,GAAG;oBAAE,MAAM,CAAC,GAAG,CAAC,CAAA;;oBACf,OAAO,CAAC,UAAU,CAAC,CAAA;YAC1B,CAAC,CAAC,CAAA;QACJ,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA;AAeD,MAAM,eAAe,GAA0B;IAC7C,UAAU,EAAE,EAAE;IACd,SAAS,EAAE,EAAE;IACb,IAAI,EAAE,KAAK;IACX,SAAS,EAAE,CAAC;IACZ,eAAe,EAAE,CAAC;CACnB,CAAA;AAED;;;;GAIG;AACI,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,OAAqB;IAErB,MAAM,IAAI,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,OAAO,EAAE,CAAA;IAC/C,MAAM,IAAI,GAAG,IAAA,yBAAW,EAAC,IAAI,CAAC,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAEzD,MAAM,UAAU,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE;QACpE,CAAC,EAAE,IAAI,CAAC,IAAI;QACZ,CAAC,EAAE,IAAI,CAAC,SAAS;QACjB,CAAC,EAAE,IAAI,CAAC,eAAe;KACxB,CAAC,CAAW,CAAA;IAEb,yEAAyE;IACzE,oEAAoE;IACpE,OAAO,UAAU,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;AAChI,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,cAAc,CAClC,QAAgB,EAChB,UAAkB;IAElB,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;QAC/D,OAAO,KAAK,CAAA;IACd,CAAC;IAED,iEAAiE;IACjE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAEnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,KAAK,CAAA;QACzB,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAA;QAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACzC,MAAM,UAAU,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAW,CAAA;QACpE,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACxD,OAAO,IAAA,6BAAe,EAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAC/C,CAAC;IAED,4CAA4C;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACnC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACxC,MAAM,eAAe,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;QAEpB,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAA;QAE/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACzC,MAAM,UAAU,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE;YAC/D,CAAC,EAAE,IAAI;YACP,CAAC,EAAE,SAAS;YACZ,CAAC,EAAE,eAAe;SACnB,CAAC,CAAW,CAAA;QAEb,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACxD,OAAO,IAAA,6BAAe,EAAC,SAAS,EAAE,UAAU,CAAC,CAAA;IAC/C,CAAC;IAED,OAAO,KAAK,CAAA;AACd,CAAC"}

package/dist/auth/rbac.d.ts

@@ -0,0 +1,10 @@
+import type { Request, Response, NextFunction } from '../types';
+/**
+ * Middleware that ensures the authenticated user has one of the required roles.
+ * Expects `req.user` to be populated (e.g., by a previous session or JWT middleware),
+ * and expects `req.user.role` to be a string or array of strings.
+ *
+ * @param allowedRoles A single role string or an array of allowed roles.
+ */
+export declare function requireRole(allowedRoles: string | string[]): (req: Request, res: Response, next: NextFunction) => void;
+//# sourceMappingURL=rbac.d.ts.map

package/dist/auth/rbac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.d.ts","sourceRoot":"","sources":["../../src/auth/rbac.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE/D;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,EAAE,IAGjD,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,UA8BxD"}

package/dist/auth/rbac.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.requireRole = requireRole;
+const errors_1 = require("../utils/errors");
+/**
+ * Middleware that ensures the authenticated user has one of the required roles.
+ * Expects `req.user` to be populated (e.g., by a previous session or JWT middleware),
+ * and expects `req.user.role` to be a string or array of strings.
+ *
+ * @param allowedRoles A single role string or an array of allowed roles.
+ */
+function requireRole(allowedRoles) {
+    const roles = Array.isArray(allowedRoles) ? allowedRoles : [allowedRoles];
+    return (req, res, next) => {
+        // 1. Ensure user is authenticated
+        if (!req.user) {
+            return next(errors_1.HttpError.unauthorized('Authentication required to access this resource'));
+        }
+        // 2. Ensure user has a role property
+        if (!req.user.role) {
+            return next(errors_1.HttpError.forbidden('Access denied: No role assigned'));
+        }
+        const userRoles = Array.isArray(req.user.role)
+            ? req.user.role
+            : [req.user.role];
+        // 3. Check for intersection between user roles and allowed roles
+        const hasRole = userRoles.some((role) => roles.includes(role));
+        if (!hasRole) {
+            return next(errors_1.HttpError.forbidden('Access denied: Insufficient permissions'));
+        }
+        next();
+    };
+}
+//# sourceMappingURL=rbac.js.map

package/dist/auth/rbac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rbac.js","sourceRoot":"","sources":["../../src/auth/rbac.ts"],"names":[],"mappings":";;AAUA,kCAiCC;AA3CD,4CAA2C;AAG3C;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,YAA+B;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;IAEzE,OAAO,CAAC,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QACzD,kCAAkC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,IAAI,CACT,kBAAS,CAAC,YAAY,CACpB,iDAAiD,CAClD,CACF,CAAA;QACH,CAAC;QAED,qCAAqC;QACrC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,kBAAS,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAC,CAAA;QACrE,CAAC;QAED,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAC5C,CAAC,CAAE,GAAG,CAAC,IAAI,CAAC,IAAiB;YAC7B,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAc,CAAC,CAAA;QAE7B,iEAAiE;QACjE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA;QAE9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CACT,kBAAS,CAAC,SAAS,CAAC,yCAAyC,CAAC,CAC/D,CAAA;QACH,CAAC;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC"}

package/dist/auth/session.d.ts

@@ -0,0 +1,23 @@
+import type { Request, Response, NextFunction } from '../types';
+export type SessionData = Record<string, unknown>;
+export interface SessionStore {
+    get(sessionId: string): Promise<SessionData | null> | SessionData | null;
+    set(sessionId: string, data: SessionData, ttl?: number): Promise<void> | void;
+    destroy(sessionId: string): Promise<void> | void;
+}
+export declare class MemorySessionStore implements SessionStore {
+    private sessions;
+    get(sessionId: string): SessionData | null;
+    set(sessionId: string, data: SessionData, ttl?: number): void;
+    destroy(sessionId: string): void;
+}
+export interface SessionOptions {
+    secret: string;
+    store?: SessionStore;
+    cookieName?: string;
+    ttl?: number;
+    secure?: boolean;
+    sameSite?: 'Strict' | 'Lax' | 'None';
+}
+export declare function session(options: SessionOptions): (req: Request, res: Response, next: NextFunction) => Promise<void>;
+//# sourceMappingURL=session.d.ts.map

package/dist/auth/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/auth/session.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE/D,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEjD,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,WAAW,GAAG,IAAI,CAAA;IACxE,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;IAC7E,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CACjD;AAED,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,QAAQ,CAA8D;IAE9E,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAU1C,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,GAAE,MAAqB,GAAG,IAAI;IAO3E,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CAGjC;AAED,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,YAAY,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAA;CACrC;AAuBD,wBAAgB,OAAO,CAAC,OAAO,EAAE,cAAc,IAW/B,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,YAAY,mBAmD9D"}

package/dist/auth/session.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemorySessionStore = void 0;
+exports.session = session;
+const node_crypto_1 = require("node:crypto");
+class MemorySessionStore {
+    constructor() {
+        this.sessions = new Map();
+    }
+    get(sessionId) {
+        const session = this.sessions.get(sessionId);
+        if (!session)
+            return null;
+        if (session.expiresAt < Date.now()) {
+            this.sessions.delete(sessionId);
+            return null;
+        }
+        return session.data;
+    }
+    set(sessionId, data, ttl = 86400 * 1000) {
+        this.sessions.set(sessionId, {
+            data,
+            expiresAt: Date.now() + ttl,
+        });
+    }
+    destroy(sessionId) {
+        this.sessions.delete(sessionId);
+    }
+}
+exports.MemorySessionStore = MemorySessionStore;
+function signCookie(val, secret) {
+    const signature = (0, node_crypto_1.createHmac)('sha256', secret).update(val).digest('base64url');
+    return `${val}.${signature}`;
+}
+function unsignCookie(val, secret) {
+    const parts = val.split('.');
+    if (parts.length !== 2)
+        return false;
+    const [str, signature] = parts;
+    const expectedSignature = (0, node_crypto_1.createHmac)('sha256', secret)
+        .update(str)
+        .digest('base64url');
+    const sigBuf = Buffer.from(signature);
+    const expectedBuf = Buffer.from(expectedSignature);
+    if (sigBuf.length !== expectedBuf.length)
+        return false;
+    if (!(0, node_crypto_1.timingSafeEqual)(sigBuf, expectedBuf))
+        return false;
+    return str;
+}
+function session(options) {
+    if (!options.secret || options.secret.length < 32) {
+        throw new Error('session options.secret must be at least 32 characters long');
+    }
+    const store = options.store || new MemorySessionStore();
+    const cookieName = options.cookieName || 'exis_sid';
+    const ttl = options.ttl || 86400 * 1000; // 1 day
+    return async (req, res, next) => {
+        let sessionId;
+        // 1. Try to get session ID from cookie
+        const cookieVal = req.cookies?.[cookieName];
+        if (cookieVal) {
+            const unsigned = unsignCookie(cookieVal, options.secret);
+            if (unsigned) {
+                sessionId = unsigned;
+            }
+        }
+        // 2. Load session data or create new
+        let sessionData = {};
+        if (sessionId) {
+            const data = await store.get(sessionId);
+            if (data) {
+                sessionData = data;
+            }
+            else {
+                sessionId = undefined; // Invalid or expired
+            }
+        }
+        if (!sessionId) {
+            sessionId = (0, node_crypto_1.randomBytes)(24).toString('base64url');
+            // Only set cookie if we created a new session ID
+            res.cookie(cookieName, signCookie(sessionId, options.secret), {
+                maxAge: ttl / 1000, // cookie maxAge is typically in seconds in Exis, wait let me check (usually seconds or ms depending on framework, Exis parses it to ms in Date if not Careful, let's assume seconds based on typical node frameworks, or ms? Let's pass ms or let users deal with it. We'll use maxAge: ttl)
+                // Let's use expires for safety
+                expires: new Date(Date.now() + ttl),
+                httpOnly: true,
+                secure: options.secure ?? process.env.NODE_ENV === 'production',
+                sameSite: options.sameSite ?? 'Lax',
+                path: '/',
+            });
+        }
+        // 3. Attach session to request
+        req.session = sessionData;
+        // 4. Hook into res.raw.end to save the session automatically
+        const originalEnd = res.raw.end.bind(res.raw);
+        res.raw.end = function (...args) {
+            store.set(sessionId, sessionData, ttl);
+            // eslint-disable-next-line @typescript-eslint/ban-ts-comment
+            // @ts-ignore
+            return originalEnd(...args);
+        };
+        next();
+    };
+}
+//# sourceMappingURL=session.js.map

package/dist/auth/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/auth/session.ts"],"names":[],"mappings":";;;AAkEA,0BA8DC;AAhID,6CAAsE;AAWtE,MAAa,kBAAkB;IAA/B;QACU,aAAQ,GAAG,IAAI,GAAG,EAAoD,CAAA;IAsBhF,CAAC;IApBC,GAAG,CAAC,SAAiB;QACnB,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAC5C,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAA;QACzB,IAAI,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACnC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;YAC/B,OAAO,IAAI,CAAA;QACb,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAA;IACrB,CAAC;IAED,GAAG,CAAC,SAAiB,EAAE,IAAiB,EAAE,MAAc,KAAK,GAAG,IAAI;QAClE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE;YAC3B,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG;SAC5B,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,CAAC,SAAiB;QACvB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACjC,CAAC;CACF;AAvBD,gDAuBC;AAWD,SAAS,UAAU,CAAC,GAAW,EAAE,MAAc;IAC7C,MAAM,SAAS,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC9E,OAAO,GAAG,GAAG,IAAI,SAAS,EAAE,CAAA;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,GAAW,EAAE,MAAc;IAC/C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC5B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACpC,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,GAAG,KAAK,CAAA;IAC9B,MAAM,iBAAiB,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC;SACnD,MAAM,CAAC,GAAG,CAAC;SACX,MAAM,CAAC,WAAW,CAAC,CAAA;IAEtB,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACrC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;IAElD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACtD,IAAI,CAAC,IAAA,6BAAe,EAAC,MAAM,EAAE,WAAW,CAAC;QAAE,OAAO,KAAK,CAAA;IACvD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,SAAgB,OAAO,CAAC,OAAuB;IAC7C,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,kBAAkB,EAAE,CAAA;IACvD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,UAAU,CAAA;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,KAAK,GAAG,IAAI,CAAA,CAAC,QAAQ;IAEhD,OAAO,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,IAAkB,EAAE,EAAE;QAC/D,IAAI,SAA6B,CAAA;QAEjC,uCAAuC;QACvC,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAA;QAC3C,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAA;YACxD,IAAI,QAAQ,EAAE,CAAC;gBACb,SAAS,GAAG,QAAQ,CAAA;YACtB,CAAC;QACH,CAAC;QAED,qCAAqC;QACrC,IAAI,WAAW,GAAgB,EAAE,CAAA;QACjC,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;YACvC,IAAI,IAAI,EAAE,CAAC;gBACT,WAAW,GAAG,IAAI,CAAA;YACpB,CAAC;iBAAM,CAAC;gBACN,SAAS,GAAG,SAAS,CAAA,CAAC,qBAAqB;YAC7C,CAAC;QACH,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,IAAA,yBAAW,EAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;YACjD,iDAAiD;YACjD,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;gBAC5D,MAAM,EAAE,GAAG,GAAG,IAAI,EAAE,6RAA6R;gBACjT,+BAA+B;gBAC/B,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC;gBACnC,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;gBAC/D,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,KAAK;gBACnC,IAAI,EAAE,GAAG;aACV,CAAC,CAAA;QACJ,CAAC;QAED,+BAA+B;QAC/B,GAAG,CAAC,OAAO,GAAG,WAAW,CAAA;QAEzB,6DAA6D;QAC7D,MAAM,WAAW,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC7C,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,UAAU,GAAG,IAAe;YACxC,KAAK,CAAC,GAAG,CAAC,SAAmB,EAAE,WAAW,EAAE,GAAG,CAAC,CAAA;YAChD,6DAA6D;YAC7D,aAAa;YACb,OAAO,WAAW,CAAC,GAAG,IAAI,CAAC,CAAA;QAC7B,CAAC,CAAA;QAED,IAAI,EAAE,CAAA;IACR,CAAC,CAAA;AACH,CAAC"}

package/dist/cache/index.d.ts

@@ -0,0 +1,2 @@
+export declare function revalidateTag(tag: string): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/cache/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":"AAEA,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG9D"}

package/dist/cache/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.revalidateTag = revalidateTag;
+const store_1 = require("./store");
+async function revalidateTag(tag) {
+    const store = (0, store_1.getCacheStore)();
+    await store.revalidateTag(tag);
+}
+//# sourceMappingURL=index.js.map

package/dist/cache/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cache/index.ts"],"names":[],"mappings":";;AAEA,sCAGC;AALD,mCAAuC;AAEhC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,KAAK,GAAG,IAAA,qBAAa,GAAE,CAAA;IAC7B,MAAM,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAA;AAChC,CAAC"}

package/dist/cache/store.d.ts

@@ -0,0 +1,48 @@
+export interface CacheItem {
+    data: any;
+    tags: string[];
+    createdAt: number;
+}
+export interface CacheStore {
+    get(key: string): Promise<CacheItem | null>;
+    set(key: string, data: any, tags: string[], ttlMs?: number): Promise<void>;
+    revalidateTag(tag: string): Promise<void>;
+    getTags(): Promise<Record<string, number>>;
+}
+export declare class FileSystemCacheStore implements CacheStore {
+    private cacheDir;
+    private tagsPath;
+    constructor(cwd: string);
+    private ensureDir;
+    private hashKey;
+    getTags(): Promise<Record<string, number>>;
+    get(key: string): Promise<CacheItem | null>;
+    set(key: string, data: any, tags: string[], _ttlMs?: number): Promise<void>;
+    revalidateTag(tag: string): Promise<void>;
+}
+export declare class MemoryCacheStore implements CacheStore {
+    private items;
+    private tags;
+    get(key: string): Promise<CacheItem | null>;
+    set(key: string, data: any, tags: string[], _ttlMs?: number): Promise<void>;
+    revalidateTag(tag: string): Promise<void>;
+    getTags(): Promise<Record<string, number>>;
+}
+export interface MinimalRedisClient {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string, mode: string, duration: number): Promise<unknown>;
+    del(key: string): Promise<number>;
+    flushdb(): Promise<unknown>;
+}
+export declare class RedisCacheStore implements CacheStore {
+    private client;
+    private prefix;
+    constructor(client: MinimalRedisClient, prefix?: string);
+    getTags(): Promise<Record<string, number>>;
+    get(key: string): Promise<CacheItem | null>;
+    set(key: string, data: any, tags: string[], ttlMs?: number): Promise<void>;
+    revalidateTag(tag: string): Promise<void>;
+}
+export declare function getCacheStore(): CacheStore;
+export declare function setCacheStore(store: CacheStore): void;
+//# sourceMappingURL=store.d.ts.map

package/dist/cache/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/cache/store.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,GAAG,CAAA;IACT,IAAI,EAAE,MAAM,EAAE,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAA;IAC3C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1E,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;CAC3C;AAED,qBAAa,oBAAqB,YAAW,UAAU;IACrD,OAAO,CAAC,QAAQ,CAAQ;IACxB,OAAO,CAAC,QAAQ,CAAQ;gBAEZ,GAAG,EAAE,MAAM;YAKT,SAAS;IAQvB,OAAO,CAAC,OAAO;IAIT,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAS1C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAwB3C,GAAG,CACP,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,EACT,IAAI,EAAE,MAAM,EAAE,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAYV,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAMhD;AAED,qBAAa,gBAAiB,YAAW,UAAU;IACjD,OAAO,CAAC,KAAK,CAA+B;IAC5C,OAAO,CAAC,IAAI,CAA6B;IAEnC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAY3C,GAAG,CACP,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,EACT,IAAI,EAAE,MAAM,EAAE,EACd,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAIV,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAGjD;AAED,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAA;IACxC,GAAG,CACD,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,OAAO,CAAC,CAAA;IACnB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IACjC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAA;CAC5B;AAED,qBAAa,eAAgB,YAAW,UAAU;IAChD,OAAO,CAAC,MAAM,CAAoB;IAClC,OAAO,CAAC,MAAM,CAAQ;gBAEV,MAAM,EAAE,kBAAkB,EAAE,MAAM,SAAgB;IAKxD,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAU1C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;IAkB3C,GAAG,CACP,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,GAAG,EACT,IAAI,EAAE,MAAM,EAAE,EACd,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC;IAyBV,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAchD;AAKD,wBAAgB,aAAa,IAAI,UAAU,CAK1C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,QAE9C"}