expxagents 0.25.1 → 0.25.2

package/dist/server/api/webhook-routes.js

@@ -0,0 +1,82 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import YAML from 'yaml';
+import { findSquadDir } from '../services/squad-registry.js';
+function readWebhookSecret(squadsDir, squadName) {
+    try {
+        const squadDir = findSquadDir(squadsDir, squadName);
+        const yamlPath = squadDir ? path.join(squadDir, 'squad.yaml') : path.join(squadsDir, squadName, 'squad.yaml');
+        if (!fs.existsSync(yamlPath))
+            return undefined;
+        const parsed = YAML.parse(fs.readFileSync(yamlPath, 'utf-8'));
+        return parsed?.squad?.webhooks?.secret;
+    }
+    catch {
+        return undefined;
+    }
+}
+// Deduplication — prevents double-spawn when callers retry on slow 202 responses
+const DEDUP_WINDOW_MS = 30_000;
+const pendingRequests = new Map();
+function deduplicationHash(squadName, body) {
+    // Normalize body: remove timestamp-like fields that vary between retries
+    const clean = {};
+    const raw = (body ?? {});
+    for (const [k, v] of Object.entries(raw)) {
+        if (/timestamp|time|date|_at$/i.test(k))
+            continue;
+        clean[k] = v;
+    }
+    return crypto
+        .createHash('sha256')
+        .update(`${squadName}:${JSON.stringify(clean)}`)
+        .digest('hex')
+        .slice(0, 16);
+}
+function pruneExpired() {
+    const now = Date.now();
+    for (const [hash, entry] of pendingRequests) {
+        if (now - entry.triggeredAt > DEDUP_WINDOW_MS) {
+            pendingRequests.delete(hash);
+        }
+    }
+}
+export async function webhookRoutes(app, opts) {
+    const { jobRunner, squadsDir } = opts;
+    app.post('/api/webhooks/:squadName', async (request, reply) => {
+        const { squadName } = request.params;
+        if (!findSquadDir(squadsDir, squadName)) {
+            return reply.code(404).send({ error: `Squad "${squadName}" not found` });
+        }
+        const configuredSecret = readWebhookSecret(squadsDir, squadName);
+        if (configuredSecret) {
+            const provided = request.headers['x-webhook-secret'];
+            if (provided !== configuredSecret) {
+                return reply.code(401).send({ error: 'Invalid or missing webhook secret' });
+            }
+        }
+        // Deduplication: return 202 immediately if an identical request is in-flight
+        pruneExpired();
+        const hash = deduplicationHash(squadName, request.body);
+        if (pendingRequests.has(hash)) {
+            return reply.code(202).send({ status: 'already_triggered', squadName, deduplicated: true });
+        }
+        pendingRequests.set(hash, { squadName, triggeredAt: Date.now() });
+        // Auto-remove after the dedup window
+        setTimeout(() => pendingRequests.delete(hash), DEDUP_WINDOW_MS);
+        const prompt = request.body?.prompt ?? `Execute the "${squadName}" squad pipeline`;
+        // Fire and forget — don't await
+        jobRunner.run({
+            squadName,
+            prompt,
+            timeoutMinutes: 60,
+            retryOnFailure: 0,
+            attempt: 1,
+        }).catch((err) => {
+            console.error(`[webhook] Squad "${squadName}" run failed:`, err.message);
+        });
+        return reply.code(202).send({ status: 'triggered', squadName });
+    });
+}
+//# sourceMappingURL=webhook-routes.js.map

package/dist/server/api/webhook-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-routes.js","sourceRoot":"","sources":["../../src/api/webhook-routes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAO7D,SAAS,iBAAiB,CAAC,SAAiB,EAAE,SAAiB;IAC7D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QAC9G,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAwB,CAAC;QACrF,OAAO,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAA4B,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,MAAM,eAAe,GAAG,IAAI,GAAG,EAAwB,CAAC;AAExD,SAAS,iBAAiB,CAAC,SAAiB,EAAE,IAAa;IACzD,yEAAyE;IACzE,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IACpD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QAClD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACf,CAAC;IACD,OAAO,MAAM;SACV,UAAU,CAAC,QAAQ,CAAC;SACpB,MAAM,CAAC,GAAG,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;SAC/C,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC;QAC5C,IAAI,GAAG,GAAG,KAAK,CAAC,WAAW,GAAG,eAAe,EAAE,CAAC;YAC9C,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAoB,EACpB,IAA0B;IAE1B,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAEtC,GAAG,CAAC,IAAI,CAGL,0BAA0B,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACtD,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAErC,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,SAAS,aAAa,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QACjE,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YACrD,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;gBAClC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,YAAY,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAClE,qCAAqC;QACrC,UAAU,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,IAAI,gBAAgB,SAAS,kBAAkB,CAAC;QAEnF,gCAAgC;QAChC,SAAS,CAAC,GAAG,CAAC;YACZ,SAAS;YACT,MAAM;YACN,cAAc,EAAE,EAAE;YAClB,cAAc,EAAE,CAAC;YACjB,OAAO,EAAE,CAAC;SACX,CAAC,CAAC,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;YACtB,OAAO,CAAC,KAAK,CAAC,oBAAoB,SAAS,eAAe,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3E,CAAC,CAAC,CAAC;QAEH,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/app.d.ts

@@ -0,0 +1,9 @@
+import type { FastifyInstance } from 'fastify';
+import { type Config } from './config.js';
+import { JobRunner } from './scheduler/job-runner.js';
+export interface BuildAppOptions {
+    config?: Partial<Config>;
+    jobRunner?: JobRunner;
+}
+export declare function buildApp(opts?: BuildAppOptions): Promise<FastifyInstance>;
+//# sourceMappingURL=app.d.ts.map

package/dist/server/app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAS/C,OAAO,EAAc,KAAK,MAAM,EAAE,MAAM,aAAa,CAAC;AActD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAiCtD,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED,wBAAsB,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC,CAqO/E"}

package/dist/server/app.js

@@ -0,0 +1,265 @@
+import Fastify from 'fastify';
+import cors from '@fastify/cors';
+import cookie from '@fastify/cookie';
+import rateLimit from '@fastify/rate-limit';
+import fastifyStatic from '@fastify/static';
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { loadConfig } from './config.js';
+import { getDb } from './db/connection.js';
+import { seedDefaultAdmin } from './db/migrations.js';
+import { registerAuthMiddleware } from './auth/auth-middleware.js';
+import { healthRoutes } from './api/health-routes.js';
+import { authRoutes } from './auth/auth-routes.js';
+import { squadsRoutes } from './api/squads-routes.js';
+import { usersRoutes } from './api/users-routes.js';
+import { registerWebSocket } from './ws/ws-handler.js';
+import { createFileWatcher } from './watcher/file-watcher.js';
+import { conversationRoutes } from './routes/conversations.js';
+import { activityRoutes } from './api/activity-routes.js';
+import { EngineManager } from './bridge/engine-manager.js';
+import { ChatHandler } from './bridge/chat-handler.js';
+import { JobRunner } from './scheduler/job-runner.js';
+import { SchedulerService } from './scheduler/scheduler-service.js';
+import { schedulerRoutes } from './scheduler/scheduler-routes.js';
+import { chatApiRoutes } from './api/chat-api-routes.js';
+import { leadRoutes } from './email/lead-routes.js';
+import { campaignRoutes } from './email/campaign-routes.js';
+import { snsWebhookRoutes } from './email/sns-webhook.js';
+import { createSesClient } from './email/ses-client.js';
+import { EmailQueueWorker } from './email/email-queue-worker.js';
+import { settingsRoutes } from './api/settings-routes.js';
+import { orgchartRoutes } from './api/orgchart-routes.js';
+import { teamRoutes } from './api/team-routes.js';
+import { integrationRoutes } from './api/integration-routes.js';
+import { graphRoutes } from './api/graph-routes.js';
+import { filesRoutes } from './api/files-routes.js';
+import { kanbanRoutes } from './api/kanban-routes.js';
+import { registryRoutes } from './api/registry-routes.js';
+import { knowledgeRoutes } from './api/knowledge-routes.js';
+import { costRoutes } from './api/cost-routes.js';
+import { logRoutes } from './api/log-routes.js';
+import { runKnowledgeMigrations, IngestPipeline, createMockEmbedder, createKnowledgeWatcher } from 'expxagents-knowledge';
+import { getActiveActivityId, markTaskExecutingByPosition, markTaskDoneByPosition, } from './services/pipeline-task-service.js';
+import { systemRoutes } from './api/system-routes.js';
+import { webhookRoutes } from './api/webhook-routes.js';
+import { dashboardRoutes } from './api/dashboard-routes.js';
+import { permissionsRoutes } from './api/permissions-routes.js';
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+export async function buildApp(opts) {
+    const config = { ...loadConfig(), ...opts?.config };
+    const app = Fastify({
+        logger: {
+            level: config.nodeEnv === 'production' ? 'info' : 'debug',
+        },
+    });
+    // Plugins
+    await app.register(cors, { origin: config.corsOrigin, credentials: true });
+    await app.register(cookie);
+    await app.register(rateLimit, {
+        global: false,
+    });
+    // Database
+    const db = getDb(config.dataDir);
+    await seedDefaultAdmin(db);
+    // Knowledge schema tables
+    runKnowledgeMigrations(db);
+    db.exec('CREATE TABLE IF NOT EXISTS chunk_embeddings_store (chunk_id TEXT PRIMARY KEY, embedding TEXT NOT NULL)');
+    // Expose db on the app instance for testability
+    app.decorate('db', db);
+    // Auth middleware
+    registerAuthMiddleware(app, config.jwtSecret);
+    // Routes
+    await app.register(healthRoutes, { db });
+    await app.register(authRoutes, { db, jwtSecret: config.jwtSecret });
+    await app.register(squadsRoutes, { squadsDir: config.squadsDir, db });
+    await app.register(usersRoutes, { db });
+    await app.register(conversationRoutes, { db });
+    await app.register(activityRoutes, { db });
+    await app.register(settingsRoutes);
+    await app.register(orgchartRoutes, { squadsDir: config.squadsDir });
+    await app.register(teamRoutes, { db });
+    await app.register(integrationRoutes, { db });
+    await app.register(graphRoutes, { squadsDir: config.squadsDir });
+    await app.register(filesRoutes, { squadsDir: config.squadsDir });
+    await app.register(kanbanRoutes, { db });
+    await app.register(registryRoutes, { squadsDir: config.squadsDir });
+    await app.register(knowledgeRoutes, { db });
+    await app.register(costRoutes, { db });
+    await app.register(logRoutes, { db });
+    await app.register(permissionsRoutes, { db });
+    // Kill registry: populated after bridges are created below
+    const killRegistry = { fn: (_squadCode) => { } };
+    // Engine Manager (hot-swap support) — created before systemRoutes
+    const engineManager = new EngineManager();
+    await app.register(dashboardRoutes, { db, kill: (code) => killRegistry.fn(code) });
+    await app.register(systemRoutes, {
+        packageVersion: process.env.EXPXAGENTS_VERSION ?? '0.0.0',
+        engineManager,
+    });
+    // WebSocket
+    const wsContext = await registerWebSocket(app, config.jwtSecret, config.squadsDir);
+    // Chat Bridge — use getter so hot-swap is reflected
+    const chatHandler = new ChatHandler({
+        db,
+        bridge: () => engineManager.engine,
+        broadcast: (squadName, message) => {
+            wsContext.broadcastToSquad(squadName, message);
+        },
+        broadcastToAll: (message) => {
+            wsContext.broadcastToAll(message);
+        },
+        squadsDir: config.squadsDir,
+    });
+    wsContext.setChatHandler(chatHandler);
+    // REST API for MCP server and programmatic access
+    await app.register(chatApiRoutes, () => wsContext.getChatHandler());
+    // Scheduler — reuse the engine manager
+    const jobRunner = opts?.jobRunner ?? new JobRunner({
+        db,
+        bridge: () => engineManager.engine,
+        broadcast: (squadName, message) => {
+            wsContext.broadcastToSquad(squadName, message);
+        },
+        broadcastToAll: (message) => {
+            wsContext.broadcastToAll(message);
+        },
+        squadsDir: config.squadsDir,
+    });
+    await app.register(webhookRoutes, { jobRunner, squadsDir: config.squadsDir });
+    // Populate kill registry (jobRunner uses the shared bridge)
+    killRegistry.fn = (squadCode) => {
+        engineManager.engine.kill(squadCode);
+    };
+    const schedulerService = new SchedulerService({
+        db,
+        jobRunner,
+        squadsDir: config.squadsDir,
+        broadcast: (squadName, message) => {
+            wsContext.broadcastToSquad(squadName, message);
+        },
+    });
+    schedulerService.start();
+    await app.register(schedulerRoutes, { db, schedulerService });
+    // Email Engine
+    const sesClient = createSesClient({
+        region: config.awsRegion,
+        accessKeyId: config.awsAccessKeyId,
+        secretAccessKey: config.awsSecretAccessKey,
+    });
+    let emailWorker = null;
+    if (sesClient.isConfigured()) {
+        emailWorker = new EmailQueueWorker({
+            db,
+            ses: sesClient,
+            rateLimit: config.sesRateLimit,
+            jwtSecret: config.jwtSecret,
+            serverUrl: config.serverUrl,
+            broadcast: (message) => {
+                wsContext.broadcastToAll(message);
+            },
+        });
+        emailWorker.start();
+    }
+    await app.register(leadRoutes, { db });
+    await app.register(campaignRoutes, { db });
+    await app.register(snsWebhookRoutes, { db, jwtSecret: config.jwtSecret });
+    // File Watcher
+    const watcher = createFileWatcher(config.squadsDir, (event) => {
+        if (event.type === 'squad:state') {
+            wsContext.broadcastToSquad(event.squadName, event);
+        }
+        else if (event.type === 'squad:inactive') {
+            wsContext.broadcastToSquad(event.squadName, event);
+        }
+        else if (event.type === 'agent:status') {
+            wsContext.broadcastToAll(event);
+        }
+        else if (event.type === 'chat:agent_dm') {
+            wsContext.broadcastToAll(event);
+        }
+        else if (event.type === 'agent:step_start') {
+            wsContext.broadcastToSquad(event.squadName, event);
+            // Update kanban task: mark this step as executing
+            // stepIndex is 1-based (from state.json), kanban position is 0-based
+            const startActivityId = getActiveActivityId(db, event.squadName);
+            if (startActivityId) {
+                markTaskExecutingByPosition(db, { activityId: startActivityId, position: event.stepIndex - 1 });
+                wsContext.broadcastToAll({ type: 'kanban:task_updated', squadName: event.squadName, activityId: startActivityId });
+            }
+        }
+        else if (event.type === 'agent:step_complete') {
+            wsContext.broadcastToSquad(event.squadName, event);
+            // Update kanban task: mark this step as done
+            const completeActivityId = getActiveActivityId(db, event.squadName);
+            if (completeActivityId) {
+                markTaskDoneByPosition(db, { activityId: completeActivityId, position: event.stepIndex - 1 });
+                wsContext.broadcastToAll({ type: 'kanban:task_updated', squadName: event.squadName, activityId: completeActivityId });
+            }
+        }
+        else if (event.type === 'squad:checkpoint') {
+            wsContext.broadcastToSquad(event.squadName, event);
+        }
+        else if (event.type === 'a2ui:update') {
+            wsContext.broadcastToSquad(event.squadName, {
+                type: 'a2ui:update',
+                squadName: event.squadName,
+                components: event.components,
+            });
+        }
+        else if (event.type === 'squad:config_changed') {
+            schedulerService.reload(event.squadName);
+        }
+    });
+    await watcher.ready;
+    // Knowledge Watcher — auto-ingest files from configured paths
+    let knowledgeWatcher = null;
+    if (config.knowledgeWatchPaths.length > 0) {
+        const embedder = createMockEmbedder(384);
+        const knowledgePipeline = new IngestPipeline(db, embedder, { max_tokens: 512, overlap: 0.2 });
+        knowledgeWatcher = createKnowledgeWatcher(config.knowledgeWatchPaths, knowledgePipeline);
+        app.log.info({ paths: config.knowledgeWatchPaths }, 'Knowledge watcher started');
+    }
+    // Cleanup on close
+    app.addHook('onClose', async () => {
+        if (knowledgeWatcher)
+            knowledgeWatcher.stop();
+        if (emailWorker)
+            emailWorker.stop();
+        schedulerService.stop();
+        watcher.stop();
+    });
+    // Serve static files (production serves dashboard, dev serves status page)
+    const dashboardDist = process.env.DASHBOARD_DIST ?? path.resolve(__dirname, '..', '..', 'dashboard', 'dist');
+    const hasDashboard = existsSync(path.join(dashboardDist, 'index.html'));
+    if (hasDashboard) {
+        await app.register(fastifyStatic, {
+            root: dashboardDist,
+            prefix: '/',
+            wildcard: false,
+        });
+        app.setNotFoundHandler(async (request, reply) => {
+            if (request.url.startsWith('/api/') || request.url.startsWith('/ws')) {
+                return reply.code(404).send({ error: 'Not found' });
+            }
+            const staticExtPattern = /\.(js|css|map|png|jpg|jpeg|gif|svg|ico|woff2?|ttf|eot)$/i;
+            if (staticExtPattern.test(request.url)) {
+                return reply.code(404).send({ error: 'Not found' });
+            }
+            return reply.sendFile('index.html');
+        });
+    }
+    else {
+        // No dashboard build available — serve a simple status JSON on root
+        app.get('/', async () => ({
+            name: 'ExpxAgents Server',
+            status: 'running',
+            env: config.nodeEnv,
+            dashboard: 'not built — run "npm run build" in dashboard/',
+            api: '/api/health',
+        }));
+    }
+    return app;
+}
+//# sourceMappingURL=app.js.map

package/dist/server/app.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../src/app.ts"],"names":[],"mappings":"AAAA,OAAO,OAAO,MAAM,SAAS,CAAC;AAE9B,OAAO,IAAI,MAAM,eAAe,CAAC;AACjC,OAAO,MAAM,MAAM,iBAAiB,CAAC;AACrC,OAAO,SAAS,MAAM,qBAAqB,CAAC;AAC5C,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,UAAU,EAAe,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC1H,OAAO,EACL,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,GACvB,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAEhE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAO/D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAsB;IACnD,MAAM,MAAM,GAAG,EAAE,GAAG,UAAU,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,CAAC;IAEpD,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,MAAM,EAAE;YACN,KAAK,EAAE,MAAM,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;SAC1D;KACF,CAAC,CAAC;IAEH,UAAU;IACV,MAAM,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE;QAC5B,MAAM,EAAE,KAAK;KACd,CAAC,CAAC;IAEH,WAAW;IACX,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAE3B,0BAA0B;IAC1B,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAC3B,EAAE,CAAC,IAAI,CAAC,wGAAwG,CAAC,CAAC;IAElH,gDAAgD;IAChD,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IAEvB,kBAAkB;IAClB,sBAAsB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAE9C,SAAS;IACT,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACpE,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACxC,MAAM,GAAG,CAAC,QAAQ,CAAC,kBAAkB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/C,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACnC,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACpE,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9C,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACjE,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACjE,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACpE,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5C,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtC,MAAM,GAAG,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAE9C,2DAA2D;IAC3D,MAAM,YAAY,GAAG,EAAE,EAAE,EAAE,CAAC,UAAkB,EAAE,EAAE,GAAE,CAAC,EAAE,CAAC;IAExD,kEAAkE;IAClE,MAAM,aAAa,GAAG,IAAI,aAAa,EAAE,CAAC;IAE1C,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnF,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE;QAC/B,cAAc,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,OAAO;QACzD,aAAa;KACd,CAAC,CAAC;IAEH,YAAY;IACZ,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAEnF,oDAAoD;IACpD,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC;QAClC,EAAE;QACF,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM;QAClC,SAAS,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;YAChC,SAAS,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;YAC1B,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,SAAS,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAEtC,kDAAkD;IAClD,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,CAAC;IAEpE,uCAAuC;IACvC,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,IAAI,SAAS,CAAC;QACjD,EAAE;QACF,MAAM,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM;QAClC,SAAS,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;YAChC,SAAS,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,cAAc,EAAE,CAAC,OAAO,EAAE,EAAE;YAC1B,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QACD,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAE9E,4DAA4D;IAC5D,YAAY,CAAC,EAAE,GAAG,CAAC,SAAiB,EAAE,EAAE;QACtC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,gBAAgB,CAAC;QAC5C,EAAE;QACF,SAAS;QACT,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;YAChC,SAAS,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;KACF,CAAC,CAAC;IACH,gBAAgB,CAAC,KAAK,EAAE,CAAC;IACzB,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAE9D,eAAe;IACf,MAAM,SAAS,GAAG,eAAe,CAAC;QAChC,MAAM,EAAE,MAAM,CAAC,SAAS;QACxB,WAAW,EAAE,MAAM,CAAC,cAAc;QAClC,eAAe,EAAE,MAAM,CAAC,kBAAkB;KAC3C,CAAC,CAAC;IAEH,IAAI,WAAW,GAA4B,IAAI,CAAC;IAChD,IAAI,SAAS,CAAC,YAAY,EAAE,EAAE,CAAC;QAC7B,WAAW,GAAG,IAAI,gBAAgB,CAAC;YACjC,EAAE;YACF,GAAG,EAAE,SAAS;YACd,SAAS,EAAE,MAAM,CAAC,YAAY;YAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;gBACrB,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;YACpC,CAAC;SACF,CAAC,CAAC;QACH,WAAW,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,GAAG,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,GAAG,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IAE1E,eAAe;IACf,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,EAAE;QAC5D,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACjC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAC3C,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACzC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;YAC1C,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAClC,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC7C,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACnD,kDAAkD;YAClD,qEAAqE;YACrE,MAAM,eAAe,GAAG,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACjE,IAAI,eAAe,EAAE,CAAC;gBACpB,2BAA2B,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC,CAAC;gBAChG,SAAS,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,CAAC,CAAC;YACrH,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YAChD,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YACnD,6CAA6C;YAC7C,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;YACpE,IAAI,kBAAkB,EAAE,CAAC;gBACvB,sBAAsB,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,QAAQ,EAAE,KAAK,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC9F,SAAS,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACxH,CAAC;QACH,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YAC7C,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACrD,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACxC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE;gBAC1C,IAAI,EAAE,aAAa;gBACnB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;aAC7B,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YACjD,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,CAAC,KAAK,CAAC;IAEpB,8DAA8D;IAC9D,IAAI,gBAAgB,GAAgC,IAAI,CAAC;IACzD,IAAI,MAAM,CAAC,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,iBAAiB,GAAG,IAAI,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9F,gBAAgB,GAAG,sBAAsB,CAAC,MAAM,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC;QACzF,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,mBAAmB,EAAE,EAAE,2BAA2B,CAAC,CAAC;IACnF,CAAC;IAED,mBAAmB;IACnB,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;QAChC,IAAI,gBAAgB;YAAE,gBAAgB,CAAC,IAAI,EAAE,CAAC;QAC9C,IAAI,WAAW;YAAE,WAAW,CAAC,IAAI,EAAE,CAAC;QACpC,gBAAgB,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC7G,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;IAExE,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;YAChC,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,GAAG;YACX,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,GAAG,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;YAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,MAAM,gBAAgB,GAAG,0DAA0D,CAAC;YACpF,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACtD,CAAC;YACD,OAAO,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,oEAAoE;QACpE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACxB,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,SAAS;YACjB,GAAG,EAAE,MAAM,CAAC,OAAO;YACnB,SAAS,EAAE,+CAA+C;YAC1D,GAAG,EAAE,aAAa;SACnB,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/server/auth/auth-middleware.d.ts

@@ -0,0 +1,13 @@
+import type { FastifyInstance } from 'fastify';
+import { type AccessTokenPayload } from './jwt.js';
+declare module 'fastify' {
+    interface FastifyInstance {
+        requireAuth: (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+        requireRole: (role: string) => (request: FastifyRequest, reply: FastifyReply) => Promise<void>;
+    }
+    interface FastifyRequest {
+        user: AccessTokenPayload;
+    }
+}
+export declare function registerAuthMiddleware(app: FastifyInstance, jwtSecret: string): void;
+//# sourceMappingURL=auth-middleware.d.ts.map

package/dist/server/auth/auth-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-middleware.d.ts","sourceRoot":"","sources":["../../src/auth/auth-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAgC,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAqB,KAAK,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAEtE,OAAO,QAAQ,SAAS,CAAC;IACvB,UAAU,eAAe;QACvB,WAAW,EAAE,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7E,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAChG;IACD,UAAU,cAAc;QACtB,IAAI,EAAE,kBAAkB,CAAC;KAC1B;CACF;AAED,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CA0BpF"}

package/dist/server/auth/auth-middleware.js

@@ -0,0 +1,25 @@
+import { verifyAccessToken } from './jwt.js';
+export function registerAuthMiddleware(app, jwtSecret) {
+    app.decorateRequest('user', null);
+    app.decorate('requireAuth', async function (request, reply) {
+        const token = request.cookies?.access_token ||
+            request.headers.authorization?.replace('Bearer ', '');
+        if (!token) {
+            return reply.code(401).send({ error: 'Authentication required' });
+        }
+        try {
+            request.user = verifyAccessToken(token, jwtSecret);
+        }
+        catch {
+            return reply.code(401).send({ error: 'Invalid or expired token' });
+        }
+    });
+    app.decorate('requireRole', function (role) {
+        return async function (request, reply) {
+            if (request.user.role !== role) {
+                return reply.code(403).send({ error: 'Insufficient permissions' });
+            }
+        };
+    });
+}
+//# sourceMappingURL=auth-middleware.js.map

package/dist/server/auth/auth-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-middleware.js","sourceRoot":"","sources":["../../src/auth/auth-middleware.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAA2B,MAAM,UAAU,CAAC;AAYtE,MAAM,UAAU,sBAAsB,CAAC,GAAoB,EAAE,SAAiB;IAC5E,GAAG,CAAC,eAAe,CAAC,MAAM,EAAE,IAAqC,CAAC,CAAC;IAEnE,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,WAAW,OAAuB,EAAE,KAAmB;QACtF,MAAM,KAAK,GACT,OAAO,CAAC,OAAO,EAAE,YAAY;YAC7B,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAExD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,GAAG,iBAAiB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE,UAAU,IAAY;QAChD,OAAO,KAAK,WAAW,OAAuB,EAAE,KAAmB;YACjE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/auth/auth-routes.d.ts

@@ -0,0 +1,9 @@
+import type { FastifyInstance, FastifyPluginOptions } from 'fastify';
+import type Database from 'better-sqlite3';
+interface AuthRoutesOptions extends FastifyPluginOptions {
+    db: Database.Database;
+    jwtSecret: string;
+}
+export declare function authRoutes(app: FastifyInstance, opts: AuthRoutesOptions): Promise<void>;
+export {};
+//# sourceMappingURL=auth-routes.d.ts.map

package/dist/server/auth/auth-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.d.ts","sourceRoot":"","sources":["../../src/auth/auth-routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AACrE,OAAO,KAAK,QAAQ,MAAM,gBAAgB,CAAC;AAM3C,UAAU,iBAAkB,SAAQ,oBAAoB;IACtD,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAYD,wBAAsB,UAAU,CAC9B,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC,IAAI,CAAC,CAuNf"}

package/dist/server/auth/auth-routes.js

@@ -0,0 +1,152 @@
+import crypto from 'node:crypto';
+import { hashPassword, verifyPassword } from './password.js';
+import { signAccessToken, signRefreshToken, verifyRefreshToken } from './jwt.js';
+import { getUserSquads, getUserPages } from '../services/permissions-service.js';
+export async function authRoutes(app, opts) {
+    const { db, jwtSecret } = opts;
+    // --- POST /api/auth/login ---
+    app.post('/api/auth/login', {
+        config: {
+            rateLimit: { max: 5, timeWindow: '1 minute' },
+        },
+        schema: {
+            body: {
+                type: 'object',
+                required: ['username', 'password'],
+                properties: {
+                    username: { type: 'string', minLength: 1 },
+                    password: { type: 'string', minLength: 1 },
+                },
+            },
+        },
+    }, async (request, reply) => {
+        const { username, password } = request.body;
+        const user = db.prepare('SELECT * FROM users WHERE username = ?').get(username);
+        if (!user || !(await verifyPassword(password, user.password_hash))) {
+            return reply.code(401).send({ error: 'Invalid username or password' });
+        }
+        // Create session
+        const sessionId = crypto.randomUUID();
+        const refreshToken = signRefreshToken({ sessionId, userId: user.id }, jwtSecret);
+        const tokenHash = crypto.createHash('sha256').update(refreshToken).digest('hex');
+        const expiresAt = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000).toISOString();
+        db.prepare('INSERT INTO sessions (id, user_id, token_hash, expires_at, created_at) VALUES (?, ?, ?, ?, ?)').run(sessionId, user.id, tokenHash, expiresAt, new Date().toISOString());
+        // Update last_login
+        db.prepare('UPDATE users SET last_login = ? WHERE id = ?').run(new Date().toISOString(), user.id);
+        // Audit log
+        db.prepare('INSERT INTO audit_log (user_id, action, details, created_at) VALUES (?, ?, ?, ?)').run(user.id, 'login', JSON.stringify({ ip: request.ip }), new Date().toISOString());
+        const accessToken = signAccessToken({ userId: user.id, role: user.role }, jwtSecret);
+        const isSecure = request.protocol === 'https';
+        reply
+            .setCookie('access_token', accessToken, {
+            httpOnly: true,
+            secure: isSecure,
+            sameSite: 'strict',
+            path: '/',
+            maxAge: 24 * 60 * 60, // 24h
+        })
+            .setCookie('refresh_token', refreshToken, {
+            httpOnly: true,
+            secure: isSecure,
+            sameSite: 'strict',
+            path: '/api/auth/refresh',
+            maxAge: 30 * 24 * 60 * 60, // 30d
+        });
+        return {
+            user: {
+                id: user.id,
+                username: user.username,
+                email: user.email,
+                role: user.role,
+            },
+        };
+    });
+    // --- POST /api/auth/register (admin only) ---
+    app.post('/api/auth/register', {
+        preHandler: [app.requireAuth, app.requireRole('admin')],
+        schema: {
+            body: {
+                type: 'object',
+                required: ['username', 'password'],
+                properties: {
+                    username: { type: 'string', minLength: 1 },
+                    password: { type: 'string', minLength: 6 },
+                    email: { type: 'string' },
+                    role: { type: 'string', enum: ['admin', 'operator', 'viewer'] },
+                },
+            },
+        },
+    }, async (request, reply) => {
+        const { username, password, email, role } = request.body;
+        const validRoles = ['admin', 'operator', 'viewer'];
+        const userRole = role && validRoles.includes(role) ? role : 'operator';
+        const existing = db.prepare('SELECT id FROM users WHERE username = ?').get(username);
+        if (existing) {
+            return reply.code(409).send({ error: 'Username already exists' });
+        }
+        const id = crypto.randomUUID();
+        const passwordHash = await hashPassword(password);
+        db.prepare('INSERT INTO users (id, username, email, password_hash, role, created_at) VALUES (?, ?, ?, ?, ?, ?)').run(id, username, email || null, passwordHash, userRole, new Date().toISOString());
+        // Audit log
+        db.prepare('INSERT INTO audit_log (user_id, action, details, created_at) VALUES (?, ?, ?, ?)').run(request.user.userId, 'create_user', JSON.stringify({ newUserId: id, username, role: userRole }), new Date().toISOString());
+        return reply.code(201).send({
+            user: { id, username, email: email || null, role: userRole },
+        });
+    });
+    // --- POST /api/auth/refresh ---
+    app.post('/api/auth/refresh', async (request, reply) => {
+        const refreshToken = request.cookies?.refresh_token;
+        if (!refreshToken) {
+            return reply.code(401).send({ error: 'Refresh token required' });
+        }
+        try {
+            const payload = verifyRefreshToken(refreshToken, jwtSecret);
+            const tokenHash = crypto.createHash('sha256').update(refreshToken).digest('hex');
+            const session = db
+                .prepare('SELECT * FROM sessions WHERE id = ? AND token_hash = ?')
+                .get(payload.sessionId, tokenHash);
+            if (!session || new Date(session.expires_at) < new Date()) {
+                return reply.code(401).send({ error: 'Invalid or expired session' });
+            }
+            const user = db.prepare('SELECT * FROM users WHERE id = ?').get(session.user_id);
+            if (!user) {
+                return reply.code(401).send({ error: 'User not found' });
+            }
+            const accessToken = signAccessToken({ userId: user.id, role: user.role }, jwtSecret);
+            const isSecure = request.protocol === 'https';
+            reply.setCookie('access_token', accessToken, {
+                httpOnly: true,
+                secure: isSecure,
+                sameSite: 'strict',
+                path: '/',
+                maxAge: 24 * 60 * 60,
+            });
+            return { user: { id: user.id, username: user.username, role: user.role } };
+        }
+        catch {
+            return reply.code(401).send({ error: 'Invalid refresh token' });
+        }
+    });
+    // --- POST /api/auth/logout ---
+    app.post('/api/auth/logout', { preHandler: [app.requireAuth] }, async (request, reply) => {
+        // Delete all sessions for user
+        db.prepare('DELETE FROM sessions WHERE user_id = ?').run(request.user.userId);
+        reply
+            .clearCookie('access_token', { path: '/' })
+            .clearCookie('refresh_token', { path: '/api/auth/refresh' });
+        return { ok: true };
+    });
+    // --- GET /api/auth/me ---
+    app.get('/api/auth/me', { preHandler: [app.requireAuth] }, async (request) => {
+        const user = db
+            .prepare('SELECT id, username, email, role, created_at, last_login FROM users WHERE id = ?')
+            .get(request.user.userId);
+        if (!user) {
+            return { error: 'User not found' };
+        }
+        const squads = user.role === 'admin' ? ['*'] : getUserSquads(db, user.id);
+        const pages = user.role === 'admin' ? ['*'] : getUserPages(db, user.id);
+        return { user: { ...user, squads, pages } };
+    });
+}
+//# sourceMappingURL=auth-routes.js.map

package/dist/server/auth/auth-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-routes.js","sourceRoot":"","sources":["../../src/auth/auth-routes.ts"],"names":[],"mappings":"AAEA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAiBjF,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAoB,EACpB,IAAuB;IAEvB,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAE/B,+BAA+B;IAC/B,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE;QAC1B,MAAM,EAAE;YACN,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE;SAC9C;QACD,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;gBAClC,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;oBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;iBAC3C;aACF;SACF;KACF,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,IAA8C,CAAC;QAEtF,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAEjE,CAAC;QAEd,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACnE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,iBAAiB;QACjB,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,gBAAgB,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAEhF,EAAE,CAAC,OAAO,CACR,+FAA+F,CAChG,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAE1E,oBAAoB;QACpB,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAC5D,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EACxB,IAAI,CAAC,EAAE,CACR,CAAC;QAEF,YAAY;QACZ,EAAE,CAAC,OAAO,CACR,kFAAkF,CACnF,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEtF,MAAM,WAAW,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;QAErF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAE9C,KAAK;aACF,SAAS,CAAC,cAAc,EAAE,WAAW,EAAE;YACtC,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM;SAC7B,CAAC;aACD,SAAS,CAAC,eAAe,EAAE,YAAY,EAAE;YACxC,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,QAAQ;YAClB,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,MAAM;SAClC,CAAC,CAAC;QAEL,OAAO;YACL,IAAI,EAAE;gBACJ,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;aAChB;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,+CAA+C;IAC/C,GAAG,CAAC,IAAI,CACN,oBAAoB,EACpB;QACE,UAAU,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACvD,MAAM,EAAE;YACN,IAAI,EAAE;gBACJ,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;gBAClC,UAAU,EAAE;oBACV,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;oBAC1C,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;oBAC1C,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE;iBAChE;aACF;SACF;KACF,EACD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAKnD,CAAC;QAEF,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;QAEvE,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrF,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAC/B,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;QAElD,EAAE,CAAC,OAAO,CACR,oGAAoG,CACrG,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,IAAI,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAErF,YAAY;QACZ,EAAE,CAAC,OAAO,CACR,kFAAkF,CACnF,CAAC,GAAG,CACH,OAAO,CAAC,IAAI,CAAC,MAAM,EACnB,aAAa,EACb,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAC3D,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CACzB,CAAC;QAEF,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;YAC1B,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,IAAI,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE;SAC7D,CAAC,CAAC;IACL,CAAC,CACF,CAAC;IAEF,iCAAiC;IACjC,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACrD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC;QACpD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,kBAAkB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAEjF,MAAM,OAAO,GAAG,EAAE;iBACf,OAAO,CAAC,wDAAwD,CAAC;iBACjE,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAwD,CAAC;YAE5F,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;gBAC1D,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YACvE,CAAC;YAED,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAElE,CAAC;YAEd,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC3D,CAAC;YAED,MAAM,WAAW,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,SAAS,CAAC,CAAC;YACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;YAE9C,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,WAAW,EAAE;gBAC3C,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,QAAQ;gBAChB,QAAQ,EAAE,QAAQ;gBAClB,IAAI,EAAE,GAAG;gBACT,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;aACrB,CAAC,CAAC;YAEH,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;QAC7E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,gCAAgC;IAChC,GAAG,CAAC,IAAI,CACN,kBAAkB,EAClB,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EACjC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,+BAA+B;QAC/B,EAAE,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAE9E,KAAK;aACF,WAAW,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;aAC1C,WAAW,CAAC,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAE/D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC,CACF,CAAC;IAEF,2BAA2B;IAC3B,GAAG,CAAC,GAAG,CACL,cAAc,EACd,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,EACjC,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,EAAE;aACZ,OAAO,CAAC,kFAAkF,CAAC;aAC3F,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAA+C,CAAC;QAE1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACxE,OAAO,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;IAC9C,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/server/auth/jwt.d.ts

@@ -0,0 +1,14 @@
+import { type SignOptions } from 'jsonwebtoken';
+export interface AccessTokenPayload {
+    userId: string;
+    role: string;
+}
+export interface RefreshTokenPayload {
+    sessionId: string;
+    userId: string;
+}
+export declare function signAccessToken(payload: AccessTokenPayload, secret: string, expiresIn?: SignOptions['expiresIn']): string;
+export declare function verifyAccessToken(token: string, secret: string): AccessTokenPayload;
+export declare function signRefreshToken(payload: RefreshTokenPayload, secret: string, expiresIn?: SignOptions['expiresIn']): string;
+export declare function verifyRefreshToken(token: string, secret: string): RefreshTokenPayload;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/server/auth/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../src/auth/jwt.ts"],"names":[],"mappings":"AAAA,OAAY,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAErD,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,eAAe,CAC7B,OAAO,EAAE,kBAAkB,EAC3B,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,WAAW,CAAC,WAAW,CAAS,GAC1C,MAAM,CAER;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAGnF;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,WAAW,CAAC,WAAW,CAAS,GAC1C,MAAM,CAER;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAGrF"}