happy2 0.0.5

package/packages/happy2-server/dist/modules/auth/service.js

@@ -0,0 +1,208 @@
+import { createId } from "@paralleldrive/cuid2";
+import { Database } from "../database.js";
+import { hashPassword, randomToken, verifyPassword } from "./crypto.js";
+import { smtpTransport } from "./email.js";
+import { bearerToken, requestMetadata } from "./metadata.js";
+import { cloudflareAccessIdentity } from "./cloudflare-access.js";
+import { authorizationUrl, exchangeCode } from "./oidc.js";
+import { TokenService } from "./tokens.js";
+export class AuthService {
+    config;
+    database;
+    tokens;
+    passwordPepper;
+    constructor(config, database, tokens) {
+        this.config = config;
+        this.database = database;
+        this.tokens = tokens;
+        this.passwordPepper = config.auth.password.enabled
+            ? process.env.HAPPY2_PASSWORD_PEPPER
+            : undefined;
+        if (config.auth.password.enabled && !this.passwordPepper)
+            throw new Error("HAPPY2_PASSWORD_PEPPER must be initialized before starting password authentication");
+    }
+    /** Account authentication is reserved for account-management paths such as creating a profile. */
+    async authenticateAccount(request) {
+        const token = bearerToken(request);
+        if (token) {
+            try {
+                const claims = await this.tokens.verify(token);
+                const session = await this.database.findActiveSession(claims.sessionId);
+                return session && session.accountId === claims.accountId
+                    ? { session, accountId: claims.accountId }
+                    : undefined;
+            }
+            catch {
+                return undefined;
+            }
+        }
+        const identity = await cloudflareAccessIdentity(request, this.config.auth.cloudflareAccess);
+        if (!identity)
+            return undefined;
+        const provider = `cloudflare-access:${this.config.auth.cloudflareAccess.teamDomain}`;
+        const account = (await this.database.findOidcAccount(provider, identity.subject)) ??
+            (await this.database.findOrCreateOidcAccount(provider, identity.subject, identity.email));
+        return account.bannedAt || account.deletedAt
+            ? undefined
+            : { accountId: account.id, cloudflareAccess: identity };
+    }
+    /** Product routes use active Users, never bare authentication accounts. */
+    async authenticate(request) {
+        const account = await this.authenticateAccount(request);
+        if (!account)
+            return undefined;
+        const user = await this.database.findActiveUserByAccount(account.accountId);
+        if (!user)
+            return undefined;
+        await this.database.touchAccess(account.session?.id, user.id);
+        return { ...account, user };
+    }
+    async registerPassword(body, request) {
+        const accountEmail = email(body);
+        const accountPassword = validatedPassword(body);
+        if (!accountEmail || !accountPassword)
+            return "invalid";
+        const account = await this.database.createPasswordAccount(accountEmail, await hashPassword(accountPassword, this.passwordPepper));
+        return this.issue(account.id, request);
+    }
+    async loginPassword(body, request) {
+        const accountEmail = email(body);
+        const accountPassword = value(body, "password");
+        if (!accountEmail || !accountPassword)
+            return undefined;
+        const account = await this.database.findPasswordAccount(accountEmail);
+        if (!account?.passwordHash ||
+            account.bannedAt ||
+            account.deletedAt ||
+            !(await verifyPassword(accountPassword, account.passwordHash, this.passwordPepper)))
+            return undefined;
+        return this.issue(account.id, request);
+    }
+    async createProfile(body, request) {
+        const account = await this.authenticateAccount(request);
+        if (!account)
+            return "unauthorized";
+        const profile = validatedProfile(body);
+        return profile ? this.database.createProfile(account.accountId, profile) : "invalid";
+    }
+    async updateProfile(body, request) {
+        const current = await this.authenticate(request);
+        if (!current)
+            return "unauthorized";
+        const profile = validatedProfile(body);
+        if (!profile)
+            return "invalid";
+        return (await this.database.updateProfile(current.user.id, profile)) ?? "unauthorized";
+    }
+    async requestMagicLink(body) {
+        const accountEmail = email(body);
+        if (!accountEmail)
+            return;
+        const token = randomToken();
+        await this.database.createMagicLink(accountEmail, token);
+        const link = new URL(this.config.auth.magicLink.redirectUrl);
+        link.searchParams.set("token", token);
+        await smtpTransport().sendMail({
+            from: process.env.EMAIL_FROM ?? this.config.auth.magicLink.from,
+            to: accountEmail,
+            subject: "Sign in to Happy (2)",
+            text: `Open this sign-in link in Happy (2). It expires in 15 minutes:\n${link}`,
+        });
+    }
+    async verifyMagicLink(body, request) {
+        const token = value(body, "token");
+        if (!token)
+            return undefined;
+        const account = await this.database.consumeMagicLink(token);
+        return account && !account.bannedAt && !account.deletedAt
+            ? this.issue(account.id, request)
+            : undefined;
+    }
+    async startOidc(providerName) {
+        const provider = this.config.auth.oidc.get(providerName);
+        if (!provider)
+            return undefined;
+        const state = createId();
+        const verifier = randomToken();
+        const nonce = randomToken();
+        const redirectUri = `${this.config.server.publicUrl}${provider.redirectPath}`;
+        await this.database.createOidcState(state, provider.id, verifier, nonce, redirectUri);
+        return authorizationUrl(provider, redirectUri, state, verifier, nonce);
+    }
+    async completeOidc(providerName, query, request) {
+        const provider = this.config.auth.oidc.get(providerName);
+        if (!provider || !query.code || !query.state || query.error)
+            return "authorization_failed";
+        const state = await this.database.consumeOidcState(query.state);
+        if (!state || state.provider !== provider.id)
+            return "invalid_state";
+        const identity = await exchangeCode(provider, query.code, state.verifier, state.redirectUri, state.nonce);
+        const account = await this.database.findOrCreateOidcAccount(provider.id, identity.subject, identity.email);
+        if (account.bannedAt || account.deletedAt)
+            return "authorization_failed";
+        return this.issue(account.id, request);
+    }
+    async refresh(request) {
+        const account = await this.authenticateAccount(request);
+        if (!account?.session)
+            return undefined;
+        const session = await this.database.refreshSession(account.session.id, expiry(this.config), requestMetadata(request));
+        return session
+            ? {
+                token: await this.tokens.issue(session.id, session.accountId),
+                expiresAt: session.expiresAt.toISOString(),
+            }
+            : undefined;
+    }
+    async logout(request) {
+        const account = await this.authenticateAccount(request);
+        if (!account)
+            return false;
+        if (!account.session)
+            return "managed_by_cloudflare_access";
+        await this.database.revokeSession(account.session.id, requestMetadata(request));
+        return true;
+    }
+    async issue(accountId, request) {
+        const session = await this.database.createSession(accountId, expiry(this.config), requestMetadata(request));
+        return {
+            token: await this.tokens.issue(session.id, accountId),
+            expiresAt: session.expiresAt.toISOString(),
+        };
+    }
+}
+function value(body, key) {
+    const found = body?.[key];
+    return typeof found === "string" ? found : undefined;
+}
+function email(body) {
+    const result = value(body, "email")?.trim().toLowerCase();
+    return result && /^[^\s@]+@[^\s@]+\.[^\s@]+$/.test(result) && result.length <= 320
+        ? result
+        : undefined;
+}
+function validatedPassword(body) {
+    const result = value(body, "password");
+    return result && result.length >= 12 && result.length <= 1024 ? result : undefined;
+}
+function optional(value, maximum) {
+    const normalized = value?.trim();
+    return normalized && normalized.length <= maximum ? normalized : undefined;
+}
+function validatedProfile(body) {
+    const firstName = optional(value(body, "firstName"), 100);
+    const username = optional(value(body, "username"), 32)?.toLowerCase();
+    if (!firstName || !username || !/^[a-z0-9][a-z0-9_-]{2,31}$/.test(username))
+        return undefined;
+    const lastName = optional(value(body, "lastName"), 100);
+    const suppliedEmail = value(body, "email");
+    const profileEmail = suppliedEmail ? email(body) : undefined;
+    if (suppliedEmail && !profileEmail)
+        return undefined;
+    const phone = optional(value(body, "phone"), 32);
+    return { firstName, lastName, username, email: profileEmail, phone };
+}
+function expiry(config) {
+    return new Date(Date.now() + config.jwt.expiryDays * 86_400_000);
+}
+//# sourceMappingURL=service.js.map

package/packages/happy2-server/dist/modules/auth/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../sources/modules/auth/service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,OAAO,EAAE,QAAQ,EAAqD,MAAM,gBAAgB,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAiC,MAAM,wBAAwB,CAAC;AACjG,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAgB3C,MAAM,OAAO,WAAW;IAGC,MAAM;IACN,QAAQ;IACR,MAAM;IAJV,cAAc,CAAqB;IACpD,YACqB,MAAoB,EACpB,QAAkB,EAClB,MAAoB;sBAFpB,MAAM;wBACN,QAAQ;sBACR,MAAM;QAEvB,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO;YAC9C,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB;YACpC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc;YACpD,MAAM,IAAI,KAAK,CACX,oFAAoF,CACvF,CAAC;IACV,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,mBAAmB,CAAC,OAAuB;QAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,CAAC;YACR,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACxE,OAAO,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS;oBACpD,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE;oBAC1C,CAAC,CAAC,SAAS,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,SAAS,CAAC;YACrB,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAC5F,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,QAAQ,GAAG,qBAAqB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,CAAC;QACrF,MAAM,OAAO,GACT,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;YACjE,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CACxC,QAAQ,EACR,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,KAAK,CACjB,CAAC,CAAC;QACP,OAAO,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS;YACxC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;IAChE,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,YAAY,CAAC,OAAuB;QACtC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5E,IAAI,CAAC,IAAI;YAAE,OAAO,SAAS,CAAC;QAC5B,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9D,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAa,EAAE,OAAuB;QACzD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,eAAe,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe;YAAE,OAAO,SAAS,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CACrD,YAAY,EACZ,MAAM,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,cAAe,CAAC,CAC5D,CAAC;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,IAAa,EAAE,OAAuB;QACtD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,eAAe,GAAG,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe;YAAE,OAAO,SAAS,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACtE,IACI,CAAC,OAAO,EAAE,YAAY;YACtB,OAAO,CAAC,QAAQ;YAChB,OAAO,CAAC,SAAS;YACjB,CAAC,CAAC,MAAM,cAAc,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,cAAe,CAAC,CAAC;YAEpF,OAAO,SAAS,CAAC;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,aAAa,CACf,IAAa,EACb,OAAuB;QAEvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO;YAAE,OAAO,cAAc,CAAC;QACpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,CAAC;IACD,KAAK,CAAC,aAAa,CACf,IAAa,EACb,OAAuB;QAEvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO;YAAE,OAAO,cAAc,CAAC;QACpC,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QAC/B,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,cAAc,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,IAAa;QAChC,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,YAAY;YAAE,OAAO;QAC1B,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAY,CAAC,CAAC;QAC9D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACtC,MAAM,aAAa,EAAE,CAAC,QAAQ,CAAC;YAC3B,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI;YAC/D,EAAE,EAAE,YAAY;YAChB,OAAO,EAAE,sBAAsB;YAC/B,IAAI,EAAE,mEAAmE,IAAI,EAAE;SAClF,CAAC,CAAC;IACP,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,IAAa,EAAE,OAAuB;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,SAAS;YACrD,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC;YACjC,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,YAAoB;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC;QAC9E,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QACtF,OAAO,gBAAgB,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,CAAC,YAAY,CACd,YAAoB,EACpB,KAAwD,EACxD,OAAuB;QAEvB,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK;YAAE,OAAO,sBAAsB,CAAC;QAC3F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,EAAE;YAAE,OAAO,eAAe,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAC/B,QAAQ,EACR,KAAK,CAAC,IAAI,EACV,KAAK,CAAC,QAAQ,EACd,KAAK,CAAC,WAAW,EACjB,KAAK,CAAC,KAAK,CACd,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CACvD,QAAQ,CAAC,EAAE,EACX,QAAQ,CAAC,OAAO,EAChB,QAAQ,CAAC,KAAK,CACjB,CAAC;QACF,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,SAAS;YAAE,OAAO,sBAAsB,CAAC;QACzE,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,OAAuB;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,EAAE,OAAO;YAAE,OAAO,SAAS,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,cAAc,CAC9C,OAAO,CAAC,OAAO,CAAC,EAAE,EAClB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EACnB,eAAe,CAAC,OAAO,CAAC,CAC3B,CAAC;QACF,OAAO,OAAO;YACV,CAAC,CAAC;gBACI,KAAK,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC;gBAC7D,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;aAC7C;YACH,CAAC,CAAC,SAAS,CAAC;IACpB,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,OAAuB;QAChC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,IAAI,CAAC,OAAO,CAAC,OAAO;YAAE,OAAO,8BAA8B,CAAC;QAC5D,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,OAAO,IAAI,CAAC;IAChB,CAAC;IACO,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,OAAuB;QAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAC7C,SAAS,EACT,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EACnB,eAAe,CAAC,OAAO,CAAC,CAC3B,CAAC;QACF,OAAO;YACH,KAAK,EAAE,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC;YACrD,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE;SAC7C,CAAC;IACN,CAAC;CACJ;AAED,SAAS,KAAK,CAAC,IAAa,EAAE,GAAW;IACrC,MAAM,KAAK,GAAI,IAAyB,EAAE,CAAC,GAAG,CAAC,CAAC;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AACD,SAAS,KAAK,CAAC,IAAa;IACxB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC1D,OAAO,MAAM,IAAI,4BAA4B,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;QAC9E,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,SAAS,CAAC;AACpB,CAAC;AACD,SAAS,iBAAiB,CAAC,IAAa;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACvC,OAAO,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AACD,SAAS,QAAQ,CAAC,KAAyB,EAAE,OAAe;IACxD,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,OAAO,UAAU,IAAI,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/E,CAAC;AACD,SAAS,gBAAgB,CAAC,IAAa;IACnC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;IACtE,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9F,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,MAAM,aAAa,GAAG,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,IAAI,aAAa,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC;IACjD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AACzE,CAAC;AACD,SAAS,MAAM,CAAC,MAAoB;IAChC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC,CAAC;AACrE,CAAC"}

package/packages/happy2-server/dist/modules/auth/tokens.d.ts

@@ -0,0 +1,21 @@
+import type { ServerConfig } from "../config/type.js";
+export interface SessionClaims {
+    sessionId: string;
+    accountId: string;
+}
+export interface TokenKeyPair {
+    privateKey?: string;
+    publicKey: string;
+}
+export declare class TokenService {
+    private readonly config;
+    private readonly publicKey;
+    private readonly privateKey?;
+    private constructor();
+    static create(config: ServerConfig, keys?: TokenKeyPair): Promise<TokenService>;
+    issue(sessionId: string, accountId: string): Promise<string>;
+    verify(token: string): Promise<SessionClaims>;
+    issueFileUrlToken(fileId: string, expiresInSeconds: number): Promise<string>;
+    verifyFileUrlToken(token: string): Promise<string>;
+}
+//# sourceMappingURL=tokens.d.ts.map

package/packages/happy2-server/dist/modules/auth/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../../../sources/modules/auth/tokens.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,aAAa;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,YAAY;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACrB;AAGD,qBAAa,YAAY;IAEjB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;IAHhC,OAAO,eAIH;IAEJ,OAAa,MAAM,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAkBpF;IAEK,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAUjE;IAEK,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CASlD;IAEK,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAUjF;IAEK,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQvD;CACJ"}

package/packages/happy2-server/dist/modules/auth/tokens.js

@@ -0,0 +1,79 @@
+import { readFile } from "node:fs/promises";
+import { importPKCS8, importSPKI, jwtVerify, SignJWT } from "jose";
+export class TokenService {
+    config;
+    publicKey;
+    privateKey;
+    constructor(config, publicKey, privateKey) {
+        this.config = config;
+        this.publicKey = publicKey;
+        this.privateKey = privateKey;
+    }
+    static async create(config, keys) {
+        const privatePem = keys?.privateKey ??
+            (config.jwt.privateKeyPath
+                ? await readFile(config.jwt.privateKeyPath, "utf8")
+                : environmentPem("HAPPY2_JWT_PRIVATE_KEY"));
+        const publicPem = keys?.publicKey ??
+            (config.jwt.publicKeyPath
+                ? await readFile(config.jwt.publicKeyPath, "utf8")
+                : environmentPem("HAPPY2_JWT_PUBLIC_KEY"));
+        if (!publicPem)
+            throw new Error("A JWT public key is required (jwt.public_key_path or HAPPY2_JWT_PUBLIC_KEY_B64)");
+        const publicKey = await importSPKI(publicPem, "RS256");
+        const privateKey = privatePem ? await importPKCS8(privatePem, "RS256") : undefined;
+        return new TokenService(config, publicKey, privateKey);
+    }
+    async issue(sessionId, accountId) {
+        if (!this.privateKey)
+            throw new Error("This server has no JWT signing key");
+        return new SignJWT({ sid: sessionId })
+            .setProtectedHeader({ alg: "RS256", kid: this.config.jwt.keyId, typ: "JWT" })
+            .setIssuer(this.config.jwt.issuer)
+            .setAudience(this.config.jwt.audience)
+            .setSubject(accountId)
+            .setIssuedAt()
+            .setExpirationTime(`${this.config.jwt.expiryDays}d`)
+            .sign(this.privateKey);
+    }
+    async verify(token) {
+        const { payload } = await jwtVerify(token, this.publicKey, {
+            issuer: this.config.jwt.issuer,
+            audience: this.config.jwt.audience,
+            algorithms: ["RS256"],
+        });
+        if (typeof payload.sid !== "string" || typeof payload.sub !== "string")
+            throw new Error("JWT has invalid session claims");
+        return { sessionId: payload.sid, accountId: payload.sub };
+    }
+    async issueFileUrlToken(fileId, expiresInSeconds) {
+        if (!this.privateKey)
+            throw new Error("This server has no JWT signing key");
+        return new SignJWT()
+            .setProtectedHeader({ alg: "RS256", kid: this.config.jwt.keyId, typ: "happy2-file" })
+            .setIssuer(this.config.jwt.issuer)
+            .setAudience(`${this.config.jwt.audience}/file`)
+            .setSubject(fileId)
+            .setIssuedAt()
+            .setExpirationTime(`${expiresInSeconds}s`)
+            .sign(this.privateKey);
+    }
+    async verifyFileUrlToken(token) {
+        const { payload } = await jwtVerify(token, this.publicKey, {
+            issuer: this.config.jwt.issuer,
+            audience: `${this.config.jwt.audience}/file`,
+            algorithms: ["RS256"],
+        });
+        if (typeof payload.sub !== "string")
+            throw new Error("JWT has invalid file claims");
+        return payload.sub;
+    }
+}
+function environmentPem(name) {
+    const direct = process.env[name];
+    if (direct)
+        return direct.replace(/\\n/g, "\n");
+    const encoded = process.env[`${name}_B64`];
+    return encoded ? Buffer.from(encoded, "base64").toString("utf8") : undefined;
+}
+//# sourceMappingURL=tokens.js.map

package/packages/happy2-server/dist/modules/auth/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../../../sources/modules/auth/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAanE,MAAM,OAAO,YAAY;IAEA,MAAM;IACN,SAAS;IACT,UAAU;IAH/B,YACqB,MAAoB,EACpB,SAAqB,EACrB,UAAuB;sBAFvB,MAAM;yBACN,SAAS;0BACT,UAAU;IAC5B,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAoB,EAAE,IAAmB;QACzD,MAAM,UAAU,GACZ,IAAI,EAAE,UAAU;YAChB,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc;gBACtB,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC;gBACnD,CAAC,CAAC,cAAc,CAAC,wBAAwB,CAAC,CAAC,CAAC;QACpD,MAAM,SAAS,GACX,IAAI,EAAE,SAAS;YACf,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa;gBACrB,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC;gBAClD,CAAC,CAAC,cAAc,CAAC,uBAAuB,CAAC,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS;YACV,MAAM,IAAI,KAAK,CACX,iFAAiF,CACpF,CAAC;QACN,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnF,OAAO,IAAI,YAAY,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,SAAiB;QAC5C,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5E,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;aACjC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;aAC5E,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;aACjC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;aACrC,UAAU,CAAC,SAAS,CAAC;aACrB,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACtB,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM;YAC9B,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ;YAClC,UAAU,EAAE,CAAC,OAAO,CAAC;SACxB,CAAC,CAAC;QACH,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAClE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACtD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,MAAc,EAAE,gBAAwB;QAC5D,IAAI,CAAC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC5E,OAAO,IAAI,OAAO,EAAE;aACf,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;aACpF,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;aACjC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,OAAO,CAAC;aAC/C,UAAU,CAAC,MAAM,CAAC;aAClB,WAAW,EAAE;aACb,iBAAiB,CAAC,GAAG,gBAAgB,GAAG,CAAC;aACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAa;QAClC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE;YACvD,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM;YAC9B,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,OAAO;YAC5C,UAAU,EAAE,CAAC,OAAO,CAAC;SACxB,CAAC,CAAC;QACH,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACpF,OAAO,OAAO,CAAC,GAAG,CAAC;IACvB,CAAC;CACJ;AAED,SAAS,cAAc,CAAC,IAAY;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC"}

package/packages/happy2-server/dist/modules/automation/repository.d.ts

@@ -0,0 +1,127 @@
+import { type Client } from "@libsql/client";
+import type { CollaborationRepository } from "../collaboration/repository.js";
+import { type MutationHint } from "../collaboration/types.js";
+type ModerationAction = "warn" | "restrict" | "remove_message" | "remove_file" | "ban" | "unban" | "delete_user";
+export interface AutomationRepositoryOptions {
+    authToken?: string;
+    moderate?: (input: {
+        actorUserId: string;
+        reportId: string;
+        action: ModerationAction;
+        reason?: string;
+        expiresAt?: string;
+        metadata?: Record<string, unknown>;
+        automationRunId: string;
+    }) => Promise<{
+        sync?: MutationHint;
+    }>;
+}
+export interface AutomationSummary {
+    id: string;
+    name: string;
+    chatId?: string;
+    botId?: string;
+    triggerType: "schedule" | "event" | "webhook";
+    triggerConfig: Record<string, unknown>;
+    actionType: "send_message" | "call_webhook" | "moderate";
+    actionConfig: Record<string, unknown>;
+    timezone?: string;
+    nextRunAt?: string;
+    active: boolean;
+    lastRunAt?: string;
+    lastError?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface ScheduledMessageSummary {
+    id: string;
+    chatId: string;
+    text: string;
+    attachmentFileIds: string[];
+    scheduledFor: string;
+    timezone?: string;
+    status: "scheduled" | "publishing" | "published" | "cancelled" | "failed";
+    publishedMessageId?: string;
+    lastError?: string;
+    createdAt: string;
+    updatedAt: string;
+}
+export declare class AutomationRepository {
+    private readonly collaboration;
+    private readonly options;
+    private readonly client;
+    private readonly db;
+    private readonly ownsClient;
+    constructor(source: string | Client, collaboration: CollaborationRepository, options?: AutomationRepositoryOptions);
+    close(): void;
+    listAutomations(actorUserId: string): Promise<AutomationSummary[]>;
+    createAutomation(input: {
+        actorUserId: string;
+        name: string;
+        chatId?: string;
+        botId?: string;
+        triggerType: "schedule" | "event" | "webhook";
+        triggerConfig: Record<string, unknown>;
+        actionType: "send_message" | "call_webhook" | "moderate";
+        actionConfig: Record<string, unknown>;
+        timezone?: string;
+        nextRunAt?: string;
+    }): Promise<{
+        automation: AutomationSummary;
+        hint: MutationHint;
+        webhookToken?: string;
+    }>;
+    updateAutomation(input: {
+        actorUserId: string;
+        automationId: string;
+        active?: boolean;
+        name?: string;
+        triggerConfig?: Record<string, unknown>;
+        actionConfig?: Record<string, unknown>;
+        nextRunAt?: string | null;
+    }): Promise<{
+        automation: AutomationSummary;
+        hint: MutationHint;
+    }>;
+    deleteAutomation(actorUserId: string, automationId: string): Promise<MutationHint>;
+    runAutomationNow(actorUserId: string, automationId: string, triggerEventId?: string): Promise<{
+        hint?: MutationHint;
+        runId: string;
+    }>;
+    runWebhookAutomation(token: string, idempotencyKey?: string): Promise<{
+        hint?: MutationHint;
+        runId: string;
+    }>;
+    runDueAutomations(limit?: number): Promise<MutationHint[]>;
+    /** Processes durable sync events after the event-automation cursor, including after restart. */
+    runPendingEventAutomations(limit?: number): Promise<MutationHint[]>;
+    runEventAutomations(sequence: number): Promise<MutationHint[]>;
+    scheduleMessage(input: {
+        actorUserId: string;
+        chatId: string;
+        text: string;
+        attachmentFileIds: string[];
+        scheduledFor: string;
+        timezone?: string;
+        quotedMessageId?: string;
+        threadRootMessageId?: string;
+        clientMutationId?: string;
+    }): Promise<{
+        message: ScheduledMessageSummary;
+        hint?: MutationHint;
+    }>;
+    listScheduledMessages(actorUserId: string): Promise<ScheduledMessageSummary[]>;
+    cancelScheduledMessage(actorUserId: string, scheduledMessageId: string): Promise<MutationHint>;
+    publishDueScheduledMessages(limit?: number): Promise<MutationHint[]>;
+    private executeAutomation;
+    private getScheduledMessageWith;
+    private requireAdmin;
+    private chatExists;
+    private botExists;
+    private nextSequence;
+    private insertSyncEvent;
+    private appendAudit;
+    private write;
+}
+export {};
+//# sourceMappingURL=repository.d.ts.map

package/packages/happy2-server/dist/modules/automation/repository.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repository.d.ts","sourceRoot":"","sources":["../../../sources/modules/automation/repository.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAG3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAuBlF,KAAK,gBAAgB,GACf,MAAM,GACN,UAAU,GACV,gBAAgB,GAChB,aAAa,GACb,KAAK,GACL,OAAO,GACP,aAAa,CAAC;AAEpB,MAAM,WAAW,2BAA2B;IACxC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,gBAAgB,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACnC,eAAe,EAAE,MAAM,CAAC;KAC3B,KAAK,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,YAAY,CAAA;KAAE,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,iBAAiB;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;IAC9C,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,UAAU,EAAE,cAAc,GAAG,cAAc,GAAG,UAAU,CAAC;IACzD,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC1E,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACrB;AAID,qBAAa,oBAAoB;IAOzB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAP5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IAErC,YACI,MAAM,EAAE,MAAM,GAAG,MAAM,EACN,aAAa,EAAE,uBAAuB,EACtC,OAAO,GAAE,2BAAgC,EAQ7D;IAED,KAAK,IAAI,IAAI,CAEZ;IAEK,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CASvE;IAEK,gBAAgB,CAAC,KAAK,EAAE;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;QAC9C,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvC,UAAU,EAAE,cAAc,GAAG,cAAc,GAAG,UAAU,CAAC;QACzD,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACtC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,SAAS,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,iBAAiB,CAAC;QAAC,IAAI,EAAE,YAAY,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAkDxF;IAEK,gBAAgB,CAAC,KAAK,EAAE;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,YAAY,EAAE,MAAM,CAAC;QACrB,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACvC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,GAAG,OAAO,CAAC;QAAE,UAAU,EAAE,iBAAiB,CAAC;QAAC,IAAI,EAAE,YAAY,CAAA;KAAE,CAAC,CAsDjE;IAEK,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAwBvF;IAEK,gBAAgB,CAClB,WAAW,EAAE,MAAM,EACnB,YAAY,EAAE,MAAM,EACpB,cAAc,SAAyB,GACxC,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAGjD;IAEK,oBAAoB,CACtB,KAAK,EAAE,MAAM,EACb,cAAc,CAAC,EAAE,MAAM,GACxB,OAAO,CAAC;QAAE,IAAI,CAAC,EAAE,YAAY,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAgCjD;IAEK,iBAAiB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAkC3D;IAED,gGAAgG;IAC1F,0BAA0B,CAAC,KAAK,SAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAuBrE;IAEK,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAwEnE;IAEK,eAAe,CAAC,KAAK,EAAE;QACzB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,iBAAiB,EAAE,MAAM,EAAE,CAAC;QAC5B,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC7B,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,uBAAuB,CAAC;QAAC,IAAI,CAAC,EAAE,YAAY,CAAA;KAAE,CAAC,CAyDrE;IAEK,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAUnF;IAEK,sBAAsB,CACxB,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,MAAM,GAC3B,OAAO,CAAC,YAAY,CAAC,CA6BvB;IAEK,2BAA2B,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAkHrE;YAEa,iBAAiB;YA8JjB,uBAAuB;YAmCvB,YAAY;YAkBZ,UAAU;YAYV,SAAS;YAkBT,YAAY;YAUZ,eAAe;YAmBf,WAAW;IAezB,OAAO,CAAC,KAAK;CAGhB"}