managed-deepagents 0.4.2 → 0.4.3-dev.95

package/dist/runtime/auth.js

@@ -1,63 +1,74 @@
 import { Auth, HTTPException, isStudioUser, } from "@langchain/langgraph-sdk/auth";
+import { trustedMessagingProviders } from "../channels/messaging-registry.js";
 import { trustedChannelSourceProviders } from "../channels/registry-store.js";
-import { buildRuntimeIdentity, memoryIdentitySegments, } from "./identity-runtime.js";
+import {} from "../identity/index.js";
+import { buildRuntimeIdentity } from "./identity-runtime.js";
 import { resolveValidatedTokenUser } from "./validated-token.js";
 /**
- * Reserved transport for the trusted-backend ingress mode. Actor/tenant travel
- * as reserved headers (mapped into `config.configurable` by the generated
+ * Reserved transport for the trusted-backend ingress mode. User identity
+ * travels as reserved headers (mapped into `config.configurable` by the generated
  * `langgraph.json` allowlist); the ingress secret is validated here and is
  * deliberately **not** allowlisted, so it never reaches `config.configurable`.
  */
 /** Trusted-backend / channel-loopback identity headers (single source of truth). */
-export const ACTOR_HEADER = "x-mda-actor-id";
-export const TENANT_HEADER = "x-mda-tenant-id";
+export const USER_HEADER = "x-mda-user-id";
 export const INGRESS_SECRET_HEADER = "x-mda-ingress-secret";
 /**
- * Internal channel handoff headers. Accepted only after the ingress secret
- * validates — never part of the public HTTP identity surface, and deliberately
- * not allowlisted into `config.configurable`.
+ * Internal channel handoff headers. Accepted only after a server API key or
+ * legacy ingress secret validates — never part of the public HTTP identity
+ * surface, and deliberately not allowlisted into `config.configurable`.
  */
 export const SOURCE_PROVIDER_HEADER = "x-mda-source-provider";
 export const SOURCE_THREAD_HEADER = "x-mda-source-thread-id";
 /** Deployment env var carrying the shared secret the trusted backend presents. */
 export const INGRESS_SECRET_ENV = "MDA_INGRESS_SECRET";
+/** Deploy/dev-owned credential used only for internal identity handoffs. */
+export const HANDOFF_SECRET_ENV = "MDA_HANDOFF_SECRET";
+export const HANDOFF_SECRET_HEADER = "x-mda-handoff-secret";
+/** Platform-owned LangSmith auth configuration. */
+export const LANGSMITH_AUTH_ENDPOINT_ENV = "LANGSMITH_AUTH_ENDPOINT";
+export const LANGSMITH_TENANT_ID_ENV = "LANGSMITH_TENANT_ID";
+export const LANGSMITH_API_KEY_HEADER = "x-api-key";
+export const LANGSMITH_API_KEY_ENV = "LANGSMITH_API_KEY";
 /**
  * Set to `"1"` by `mda dev` so local Studio / API clients can exercise
  * `trusted_backend` identity without injecting ingress headers. Never set in
  * deploy.
  */
 const LOCAL_DEV_ENV = "MDA_LOCAL_DEV";
-/** Synthetic actor for local `mda dev` when ingress headers are absent. */
-const LOCAL_DEV_ACTOR = "mda:local-dev";
-/** Path MDA exposes for anonymous guest token issuance (must stay public). */
-const GUEST_ISSUANCE_PATH = "/identity/guest";
+/** Synthetic user for local `mda dev` when ingress headers are absent. */
+const LOCAL_DEV_USER = "mda:local-dev";
 /**
  * Provider OAuth/OIDC callbacks must stay public (IdP redirects the browser
  * here). Path shape: `/identity/{provider}/callback`.
  */
 const IDENTITY_PROVIDER_CALLBACK_PATH = /^\/identity\/[^/]+\/callback\/?$/;
 /**
- * Channel Events routes authenticate via provider signatures (Slack HMAC), not
- * MDA ingress. Path shape: `/channels/{name}/events`.
+ * Channel Events routes authenticate via provider signatures (Slack HMAC),
+ * not MDA ingress. Path shape: `/channels/{name}/events`.
  */
 const CHANNEL_EVENTS_PATH = /^\/channels\/[^/]+\/events\/?$/;
-/** First-party channel providers always allowed for loopback (registry may load later). */
+/**
+ * Connector Events routes authenticate via provider signatures (GitHub HMAC),
+ * not MDA ingress. Path shape: `/connectors/{name}/events`.
+ */
+const CONNECTOR_EVENTS_PATH = /^\/connectors\/[^/]+\/events\/?$/;
+/** First-party ingress providers always allowed for loopback (registry may load later). */
 const BUILTIN_CHANNEL_SOURCE_PROVIDERS = new Set(["slack", "github"]);
 function isTrustedSourceProvider(provider) {
     return (BUILTIN_CHANNEL_SOURCE_PROVIDERS.has(provider) ||
+        trustedMessagingProviders().has(provider) ||
         trustedChannelSourceProviders().has(provider));
 }
-/** Synthetic actor used only to satisfy auth middleware on the issuance route. */
-const GUEST_ISSUER_ACTOR = "mda:guest-issuer";
-/** Synthetic actor so middleware_first allows unsigned Slack Events ingress. */
-const CHANNEL_EVENTS_ACTOR = "mda:channel-events";
+/** Synthetic user used only to satisfy auth middleware on public routes. */
+const PUBLIC_ROUTE_USER = "mda:public-route";
+/** Synthetic user so middleware_first allows unsigned Slack Events ingress. */
+const CHANNEL_EVENTS_USER = "mda:channel-events";
 /**
  * Build the managed LangGraph custom-auth handler from a declared identity.
  *
- * Handles both ingress modes: `trusted_backend` (reserved headers behind a
- * shared ingress secret) and `validated_token` (browser-direct IdP tokens
- * verified via JWKS / introspection / MDA-signed guest). Also registers thread
- * and store scoping with a studio bypass.
+ * Handles trusted-backend, LangSmith API-key, and validated-token ingress.
+ * Also registers thread and store scoping with a studio bypass.
  */
 export function buildManagedAuth(identity) {
     const cfg = identity.config;
@@ -69,27 +80,34 @@ export function buildManagedAuth(identity) {
         if (isChannelEventsRequest(request)) {
             return channelEventsBypassUser();
         }
+        // Provider OAuth/OIDC callback requests bypass auth (the IdP redirects the
+        // browser here with no MDA token to present).
         if (isIdentityProviderCallbackRequest(request)) {
-            return guestIssuanceBypassUser();
+            return publicRouteBypassUser();
         }
-        if (isGuestIssuanceRequest(request, cfg)) {
-            return guestIssuanceBypassUser();
+        // Deploy/dev inject a private handoff credential. A local server API key
+        // remains compatible, as does the legacy trusted-backend ingress secret.
+        const managedHandoff = resolveManagedHandoffUser(request);
+        if (managedHandoff) {
+            return managedHandoff;
         }
-        // Channel loopback (and other trusted handoffs) stamp the ingress secret
-        // even when public HTTP ingress is validated_token (e.g. Supabase web).
-        if (http === "trusted_backend" || hasValidIngressSecret(request)) {
+        if (http === "backend" || hasValidIngressSecret(request)) {
             return resolveTrustedBackendUser(cfg, request);
         }
+        rejectUntrustedHandoffHeaders(request);
+        if (isLangSmithApiKeyAuth(http)) {
+            return resolveLangSmithApiKeyUser(request);
+        }
         return resolveValidatedTokenUser(cfg, http, request);
     });
     auth.on("threads", ({ user, value }) => {
         if (isStudioUser(user) || isLocalDevUnscopedUser(user)) {
             return true;
         }
-        const key = threadOwnerKey(cfg, user);
+        const key = threadOwnerKey(user);
         if (value && typeof value === "object") {
             const container = value;
-            container.metadata = { ...(container.metadata ?? {}), owner: key };
+            container.metadata = { ...container.metadata, owner: key };
         }
         return { owner: key };
     });
@@ -99,7 +117,7 @@ export function buildManagedAuth(identity) {
         if (isStudioUser(user) || isLocalDevUnscopedUser(user)) {
             return true;
         }
-        assertStoreAccess(cfg, user, value);
+        assertStoreAccess(user, value);
         return true;
     });
     return auth;
@@ -115,12 +133,20 @@ export function buildManagedAuth(identity) {
  */
 export async function resolveRequestIdentity(cfg, request) {
     const http = cfg.ingress.http;
-    const user = http === "trusted_backend" || hasValidIngressSecret(request)
-        ? resolveTrustedBackendUser(cfg, request)
-        : await resolveValidatedTokenUser(cfg, http, request);
+    const managedHandoff = resolveManagedHandoffUser(request);
+    const trustedHandoff = managedHandoff !== null || hasValidIngressSecret(request);
+    if (!managedHandoff && http !== "backend" && !trustedHandoff) {
+        rejectUntrustedHandoffHeaders(request);
+    }
+    const user = managedHandoff
+        ? managedHandoff
+        : http === "backend" || trustedHandoff
+            ? resolveTrustedBackendUser(cfg, request)
+            : isLangSmithApiKeyAuth(http)
+                ? await resolveLangSmithApiKeyUser(request)
+                : await resolveValidatedTokenUser(cfg, http, request);
     // Preserve trusted channel source stamps; default public HTTP to "http".
-    const sourceProvider = user.mda_source_provider ??
-        (hasValidIngressSecret(request) ? undefined : "http");
+    const sourceProvider = user.mda_source_provider ?? (trustedHandoff ? undefined : "http");
     const identity = buildRuntimeIdentity({
         langgraph_auth_user: {
             ...user,
@@ -132,11 +158,11 @@ export async function resolveRequestIdentity(cfg, request) {
     }
     return identity;
 }
-/** LangGraph Store namespace prefix for Slack ↔ actor account links. */
+/** LangGraph Store namespace prefix for Slack ↔ user account links. */
 export const IDENTITY_LINKS_STORE_PREFIX = "mda_identity_links";
 /**
  * LangGraph Store namespace prefix for Connect-with-GitHub OAuth tokens.
- * Deployment-wide (keyed by actor id inside the namespace); only the trusted
+ * Deployment-wide (keyed by user id inside the namespace); only the trusted
  * identity-links service principal may read/write it.
  */
 export const GITHUB_CREDENTIALS_STORE_PREFIX = "mda_github_credentials";
@@ -144,17 +170,21 @@ export const GITHUB_CREDENTIALS_STORE_PREFIX = "mda_github_credentials";
  * Trusted service principal for {@link IDENTITY_LINKS_STORE_PREFIX} Store ops.
  * Stamped by the managed link client together with the ingress secret.
  */
-export const IDENTITY_LINKS_SERVICE_ACTOR = "mda:identity-links";
+export const IDENTITY_LINKS_SERVICE_USER = "mda:identity-links";
 /**
- * Fail-closed (403) unless the store `namespace` contains the identity segments
- * the memory scope requires as a contiguous ordered prefix (typically after the
- * deployment id). `agent`/`none` scopes carry no per-identity restriction.
+ * Fail-closed (403) on the managed reserved namespaces.
+ *
+ * `mda_identity_links` and `mda_github_credentials` are deployment-wide managed
+ * tables — account links and OAuth tokens for every caller — so only the trusted
+ * identity-links service principal may touch them. This check deliberately does
+ * not consult memory: it used to sit behind a per-caller memory check, which left
+ * the tables open to any authenticated caller on deployments without a user
+ * slice.
+ *
+ * There is no per-caller store partition to enforce beyond that, because no
+ * declaration mounts per-caller state in this release.
  */
-export function assertStoreAccess(cfg, user, value) {
-    const required = memoryIdentitySegments(cfg.scoping.memory, cfg.tenancy, user.mda_actor_id ? String(user.mda_actor_id) : undefined, user.mda_tenant_id ? String(user.mda_tenant_id) : undefined);
-    if (required.length === 0) {
-        return;
-    }
+export function assertStoreAccess(user, value) {
     const namespace = value &&
         typeof value === "object" &&
         Array.isArray(value.namespace)
@@ -165,18 +195,13 @@ export function assertStoreAccess(cfg, user, value) {
     // may read/write them — not ordinary authenticated users via the Store API.
     if (namespace[0] === IDENTITY_LINKS_STORE_PREFIX ||
         namespace[0] === GITHUB_CREDENTIALS_STORE_PREFIX) {
-        if (user.mda_actor_id === IDENTITY_LINKS_SERVICE_ACTOR) {
+        if (user.mda_user_id === IDENTITY_LINKS_SERVICE_USER) {
             return;
         }
         throw new HTTPException(403, {
             message: "store namespace is outside the caller's identity boundary",
         });
     }
-    if (!namespaceHasOrderedSegments(namespace, required)) {
-        throw new HTTPException(403, {
-            message: "store namespace is outside the caller's identity boundary",
-        });
-    }
 }
 /** True when `required` appears as a contiguous ordered subsequence of `namespace`. */
 export function namespaceHasOrderedSegments(namespace, required) {
@@ -195,8 +220,8 @@ export function namespaceHasOrderedSegments(namespace, required) {
 }
 /**
  * Resolve the caller identity for `trusted_backend`: validate the shared ingress
- * secret, then trust the reserved actor/tenant headers. Fail-closed (401) on a
- * missing/invalid secret, a missing actor, or a missing tenant under multi.
+ * secret, then trust the reserved user headers. Fail-closed (401) on a
+ * missing/invalid secret or a missing user.
  *
  * Under `mda dev` (`MDA_LOCAL_DEV=1`), requests without a valid ingress secret
  * resolve to a synthetic local service principal so LangGraph Studio can talk
@@ -212,12 +237,14 @@ export function resolveTrustedBackendUser(cfg, request) {
         return local;
     }
     requireIngressSecret(request);
-    const actor = request.headers.get(ACTOR_HEADER);
-    if (!actor) {
-        throw new HTTPException(401, { message: `missing ${ACTOR_HEADER}` });
+    return trustedHeadersUser(request);
+}
+/** Resolve headers only after the caller has established a trusted credential. */
+function trustedHeadersUser(request) {
+    const userId = trustedUserId(request);
+    if (!userId) {
+        throw new HTTPException(401, { message: `missing ${USER_HEADER}` });
     }
-    const tenant = request.headers.get(TENANT_HEADER) ?? undefined;
-    assertTenantPresentIfMulti(cfg, tenant);
     const sourceProvider = request.headers.get(SOURCE_PROVIDER_HEADER) ?? undefined;
     const sourceThread = request.headers.get(SOURCE_THREAD_HEADER) ?? undefined;
     if (sourceProvider !== undefined) {
@@ -237,11 +264,15 @@ export function resolveTrustedBackendUser(cfg, request) {
             message: `missing ${SOURCE_PROVIDER_HEADER}`,
         });
     }
+    // Only the fixed Slack agent principal is a service. Connected Slack Events
+    // loopback as the linked person (`sourceProvider: "slack"`) and must stay
+    // kind=person so credentials/memory follow the caller.
+    const isService = userId === "mda:slack";
     return {
-        identity: actor,
+        identity: userId,
         permissions: [],
-        mda_actor_id: actor,
-        ...(tenant ? { mda_tenant_id: tenant } : {}),
+        mda_user_id: userId,
+        ...(isService ? { mda_user_kind: "service" } : {}),
         ...(sourceProvider
             ? {
                 mda_source_provider: sourceProvider,
@@ -250,6 +281,121 @@ export function resolveTrustedBackendUser(cfg, request) {
             : {}),
     };
 }
+/** Resolve reserved identity headers authenticated by an internal credential. */
+function resolveManagedHandoffUser(request) {
+    if (!hasHandoffHeaders(request) ||
+        (!hasValidHandoffSecret(request) && !hasServerApiKey(request))) {
+        return null;
+    }
+    return trustedHeadersUser(request);
+}
+function hasValidHandoffSecret(request) {
+    const expected = process.env[HANDOFF_SECRET_ENV]?.trim();
+    const provided = request.headers.get(HANDOFF_SECRET_HEADER)?.trim();
+    return Boolean(expected && provided && constantTimeEquals(expected, provided));
+}
+function hasHandoffHeaders(request) {
+    return (request.headers.has(USER_HEADER) ||
+        request.headers.has(SOURCE_PROVIDER_HEADER) ||
+        request.headers.has(SOURCE_THREAD_HEADER));
+}
+function rejectUntrustedHandoffHeaders(request) {
+    if (hasHandoffHeaders(request)) {
+        throw new HTTPException(401, {
+            message: "reserved MDA identity headers require a trusted server credential",
+        });
+    }
+}
+function hasServerApiKey(request) {
+    const expected = process.env[LANGSMITH_API_KEY_ENV]?.trim();
+    const provided = request.headers.get(LANGSMITH_API_KEY_HEADER)?.trim();
+    return Boolean(expected && provided && constantTimeEquals(expected, provided));
+}
+/** Verify a LangSmith API key without replacing MDA's authorization hooks. */
+export async function resolveLangSmithApiKeyUser(request) {
+    const apiKey = request.headers.get(LANGSMITH_API_KEY_HEADER)?.trim();
+    const endpoint = process.env[LANGSMITH_AUTH_ENDPOINT_ENV]?.trim();
+    const expectedTenant = process.env[LANGSMITH_TENANT_ID_ENV]?.trim();
+    if (process.env[LOCAL_DEV_ENV] === "1" && (!endpoint || !expectedTenant)) {
+        return localDevServiceUser(request);
+    }
+    if (!apiKey) {
+        throw new HTTPException(401, { message: "missing x-api-key" });
+    }
+    if (!endpoint || !expectedTenant) {
+        throw new HTTPException(500, {
+            message: "LangSmith API-key authentication is not configured",
+        });
+    }
+    const headers = new Headers({ "x-api-key": apiKey });
+    const tenantHeader = request.headers.get("x-tenant-id");
+    if (tenantHeader) {
+        headers.set("x-tenant-id", tenantHeader);
+    }
+    let response;
+    try {
+        response = await fetch(new URL("/auth/public", endpoint), {
+            headers,
+            signal: AbortSignal.timeout(2_000),
+        });
+    }
+    catch {
+        throw new HTTPException(503, {
+            message: "LangSmith API-key verification unavailable",
+        });
+    }
+    if (response.status === 401) {
+        throw new HTTPException(401, { message: "invalid API key" });
+    }
+    if (response.status === 403) {
+        throw new HTTPException(403, { message: "API key is forbidden" });
+    }
+    if (!response.ok) {
+        throw new HTTPException(503, {
+            message: "LangSmith API-key verification unavailable",
+        });
+    }
+    let verified;
+    try {
+        verified = await response.json();
+    }
+    catch {
+        throw new HTTPException(503, {
+            message: "LangSmith API-key verification returned an invalid response",
+        });
+    }
+    if (!isJsonObject(verified)) {
+        throw new HTTPException(503, {
+            message: "LangSmith API-key verification returned an invalid response",
+        });
+    }
+    if (typeof verified.tenant_id !== "string" ||
+        verified.tenant_id !== expectedTenant) {
+        throw new HTTPException(403, { message: "API key tenant mismatch" });
+    }
+    const userId = typeof verified.user_id === "string" && verified.user_id.trim()
+        ? `langsmith:user:${verified.user_id.trim()}`
+        : `langsmith:tenant:${verified.tenant_id}`;
+    return {
+        identity: userId,
+        permissions: [],
+        mda_user_id: userId,
+        mda_user_kind: "service",
+        ...(typeof verified.user_email === "string" && verified.user_email.trim()
+            ? { mda_user_email: verified.user_email.trim() }
+            : {}),
+    };
+}
+function isJsonObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isLangSmithApiKeyAuth(http) {
+    return typeof http === "object" && http.mode === "langsmith_api_key";
+}
+/** Caller id from the trusted headers. */
+function trustedUserId(request) {
+    return request.headers.get(USER_HEADER) ?? undefined;
+}
 /**
  * Under `mda dev`, synthetic local/Companion service principals are unscoped
  * for thread search + store so authors can see Studio-created Local threads.
@@ -262,13 +408,13 @@ export function isLocalDevUnscopedUser(user) {
     if (!user || typeof user !== "object") {
         return false;
     }
-    const actor = user.mda_actor_id;
-    if (typeof actor !== "string" || !actor) {
+    const userId = user.mda_user_id;
+    if (typeof userId !== "string" || !userId) {
         return false;
     }
-    return (actor === LOCAL_DEV_ACTOR ||
-        actor === "mda:companion" ||
-        user.mda_actor_type === "service");
+    return (userId === LOCAL_DEV_USER ||
+        userId === "mda:companion" ||
+        user.mda_user_kind === "service");
 }
 /**
  * When `MDA_LOCAL_DEV=1` and the request does not present a valid ingress
@@ -276,42 +422,27 @@ export function isLocalDevUnscopedUser(user) {
  * Returns `null` when local-dev mode is off or real ingress credentials are
  * present (so the normal trusted-backend path runs).
  */
-export function tryLocalDevTrustedUser(cfg, request) {
+export function tryLocalDevTrustedUser(_cfg, request) {
     if (process.env[LOCAL_DEV_ENV] !== "1") {
         return null;
     }
     if (hasValidIngressSecret(request)) {
         return null;
     }
-    const actor = request.headers.get(ACTOR_HEADER) ?? LOCAL_DEV_ACTOR;
-    const tenant = request.headers.get(TENANT_HEADER) ??
-        (cfg.tenancy === "multi" ? "mda:local-dev-tenant" : undefined);
+    return localDevServiceUser(request);
+}
+function localDevServiceUser(request) {
+    const userId = trustedUserId(request) ?? LOCAL_DEV_USER;
     return {
-        identity: actor,
+        identity: userId,
         permissions: [],
-        mda_actor_id: actor,
-        mda_actor_type: "service",
-        ...(tenant ? { mda_tenant_id: tenant } : {}),
+        mda_user_id: userId,
+        mda_user_kind: "service",
     };
 }
-/** Derive the owner value `@auth.on.threads` filters on, per the `threads` axis. */
-export function threadOwnerKey(cfg, user) {
-    const scope = cfg.scoping.threads ?? "actor";
-    const actor = String(user.mda_actor_id ?? "");
-    const tenant = user.mda_tenant_id ? String(user.mda_tenant_id) : undefined;
-    if (scope === "tenant") {
-        return tenant ?? actor;
-    }
-    if (scope === "channel") {
-        const channel = user.mda_source_thread_id;
-        // Slack (and other channel sources) own by source thread; web callers
-        // without a source stamp fall back to actor-owned threads.
-        if (channel && String(channel).length > 0) {
-            return String(channel);
-        }
-        return actor;
-    }
-    return actor;
+/** Derive the owner value `@auth.on.threads` filters on (the caller user id). */
+export function threadOwnerKey(user) {
+    return String(user.mda_user_id ?? "");
 }
 function requireIngressSecret(request) {
     if (!hasValidIngressSecret(request)) {
@@ -325,35 +456,13 @@ function hasValidIngressSecret(request) {
     const provided = request.headers.get(INGRESS_SECRET_HEADER);
     return Boolean(expected && provided && constantTimeEquals(expected, provided));
 }
-function assertTenantPresentIfMulti(cfg, tenant) {
-    if (cfg.tenancy === "multi" && !tenant) {
-        throw new HTTPException(401, {
-            message: "missing tenant for multi-tenant deployment",
-        });
-    }
-}
-/** True when this deployment exposes guest issuance and the request targets it. */
-export function isGuestIssuanceRequest(request, cfg) {
-    if (request.method !== "POST") {
-        return false;
-    }
-    const { pathname } = new URL(request.url);
-    if (pathname !== GUEST_ISSUANCE_PATH) {
-        return false;
-    }
-    const http = cfg.ingress.http;
-    if (http === "trusted_backend") {
-        return false;
-    }
-    return http.providers.some((provider) => provider.guest?.issue);
-}
-/** True when the request targets a public channel Events ingress route. */
+/** True when the request targets a public channel/connector Events ingress route. */
 export function isChannelEventsRequest(request) {
     if (request.method !== "POST") {
         return false;
     }
     const { pathname } = new URL(request.url);
-    return CHANNEL_EVENTS_PATH.test(pathname);
+    return (CHANNEL_EVENTS_PATH.test(pathname) || CONNECTOR_EVENTS_PATH.test(pathname));
 }
 /** True when the request is a public identity-provider OAuth/OIDC callback. */
 export function isIdentityProviderCallbackRequest(request) {
@@ -363,20 +472,20 @@ export function isIdentityProviderCallbackRequest(request) {
     const { pathname } = new URL(request.url);
     return IDENTITY_PROVIDER_CALLBACK_PATH.test(pathname);
 }
-/** Placeholder identity so LangGraph auth middleware allows tokenless issuance. */
-export function guestIssuanceBypassUser() {
+/** Placeholder identity so LangGraph auth middleware allows public routes. */
+export function publicRouteBypassUser() {
     return {
-        identity: GUEST_ISSUER_ACTOR,
+        identity: PUBLIC_ROUTE_USER,
         permissions: [],
-        mda_actor_id: GUEST_ISSUER_ACTOR,
+        mda_user_id: PUBLIC_ROUTE_USER,
     };
 }
 /** Placeholder identity so middleware allows provider-signed channel Events. */
 export function channelEventsBypassUser() {
     return {
-        identity: CHANNEL_EVENTS_ACTOR,
+        identity: CHANNEL_EVENTS_USER,
         permissions: [],
-        mda_actor_id: CHANNEL_EVENTS_ACTOR,
+        mda_user_id: CHANNEL_EVENTS_USER,
     };
 }
 function constantTimeEquals(a, b) {

package/dist/runtime/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,aAAa,EACb,YAAY,GACb,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAM9E,OAAO,EACL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE;;;;;GAKG;AACH,oFAAoF;AACpF,MAAM,CAAC,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,iBAAiB,CAAC;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAC5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAE7D,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD;;;;GAIG;AACH,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,2EAA2E;AAC3E,MAAM,eAAe,GAAG,eAAe,CAAC;AAExC,8EAA8E;AAC9E,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAE9C;;;GAGG;AACH,MAAM,+BAA+B,GAAG,kCAAkC,CAAC;AAE3E;;;GAGG;AACH,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AAE7D,2FAA2F;AAC3F,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEtE,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,CACL,gCAAgC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9C,6BAA6B,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,kFAAkF;AAClF,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAE9C,gFAAgF;AAChF,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAqBlD;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA4B;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAgB,EAAwB,EAAE;QACjE,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,iCAAiC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,IAAI,sBAAsB,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YACzC,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,IAAI,KAAK,iBAAiB,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YACjE,OAAO,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,IAA8B,CAAC,CAAC;QAChE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,KAA+C,CAAC;YAClE,SAAS,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,+BAA+B;IAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACnC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iBAAiB,CAAC,GAAG,EAAE,IAA8B,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAmB,EACnB,OAAgB;IAEhB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GACR,IAAI,KAAK,iBAAiB,IAAI,qBAAqB,CAAC,OAAO,CAAC;QAC1D,CAAC,CAAC,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC;QACzC,CAAC,CAAC,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1D,yEAAyE;IACzE,MAAM,cAAc,GAClB,IAAI,CAAC,mBAAmB;QACxB,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,mBAAmB,EAAE;YACnB,GAAG,IAAI;YACP,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAAoB,CAAC;AAEjE;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAmB,EACnB,IAAiB,EACjB,KAAc;IAEd,MAAM,QAAQ,GAAG,sBAAsB,CACrC,GAAG,CAAC,OAAO,CAAC,MAAM,EAClB,GAAG,CAAC,OAAO,EACX,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,SAAS,EACzD,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAC5D,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,MAAM,SAAS,GACb,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,SAAS,CAAC;QACzD,CAAC,CAAE,KAAkC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IACT,4EAA4E;IAC5E,gFAAgF;IAChF,4EAA4E;IAC5E,IACE,SAAS,CAAC,CAAC,CAAC,KAAK,2BAA2B;QAC5C,SAAS,CAAC,CAAC,CAAC,KAAK,+BAA+B,EAChD,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,KAAK,4BAA4B,EAAE,CAAC;YACvD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,2BAA2B,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,2BAA2B,CACzC,SAAmB,EACnB,QAAkB;IAElB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,IACE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,OAAO,CAAC,EACxE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,OAAgB;IAEhB,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,YAAY,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS,CAAC;IAC/D,0BAA0B,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAExC,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,SAAS,CAAC;IAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,SAAS,CAAC;IAC5E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,eAAe,sBAAsB,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,WAAW,oBAAoB,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,WAAW,sBAAsB,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,KAAK;QACnB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,cAAc;YAChB,CAAC,CAAC;gBACE,mBAAmB,EAAE,cAAc;gBACnC,oBAAoB,EAAE,YAAY;aACnC;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,KAAK,GAAI,IAAoB,CAAC,YAAY,CAAC;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,KAAK,KAAK,eAAe;QACzB,KAAK,KAAK,eAAe;QACxB,IAAoB,CAAC,cAAc,KAAK,SAAS,CACnD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,GAAmB,EACnB,OAAgB;IAEhB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,eAAe,CAAC;IACnE,MAAM,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QAClC,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEjE,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,KAAK;QACnB,cAAc,EAAE,SAAS;QACzB,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,cAAc,CAAC,GAAmB,EAAE,IAAiB;IACnE,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,OAAO,MAAM,IAAI,KAAK,CAAC;IACzB,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,IAAI,CAAC,oBAAoB,CAAC;QAC1C,sEAAsE;QACtE,2DAA2D;QAC3D,IAAI,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB;IAC5C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC5D,OAAO,OAAO,CACZ,QAAQ,IAAI,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CACjC,GAAmB,EACnB,MAA0B;IAE1B,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,sBAAsB,CACpC,OAAgB,EAChB,GAAmB;IAEnB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,mBAAmB,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC5C,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iCAAiC,CAAC,OAAgB;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,QAAQ,EAAE,kBAAkB;QAC5B,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,kBAAkB;KACjC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,QAAQ,EAAE,oBAAoB;QAC9B,WAAW,EAAE,EAAE;QACf,YAAY,EAAE,oBAAoB;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC"}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/runtime/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,IAAI,EACJ,aAAa,EACb,YAAY,GACb,MAAM,+BAA+B,CAAC;AAEvC,OAAO,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAKN,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,sBAAsB,CAAC;AAEjE;;;;;GAKG;AACH,oFAAoF;AACpF,MAAM,CAAC,MAAM,WAAW,GAAG,eAAe,CAAC;AAC3C,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAC5D;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,uBAAuB,CAAC;AAC9D,MAAM,CAAC,MAAM,oBAAoB,GAAG,wBAAwB,CAAC;AAE7D,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AACvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,sBAAsB,CAAC;AAE5D,mDAAmD;AACnD,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AACrE,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,WAAW,CAAC;AACpD,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,aAAa,GAAG,eAAe,CAAC;AAEtC,0EAA0E;AAC1E,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC;;;GAGG;AACH,MAAM,+BAA+B,GAAG,kCAAkC,CAAC;AAE3E;;;GAGG;AACH,MAAM,mBAAmB,GAAG,gCAAgC,CAAC;AAE7D;;;GAGG;AACH,MAAM,qBAAqB,GAAG,kCAAkC,CAAC;AAEjE,2FAA2F;AAC3F,MAAM,gCAAgC,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEtE,SAAS,uBAAuB,CAAC,QAAgB;IAC/C,OAAO,CACL,gCAAgC,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC9C,yBAAyB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC;QACzC,6BAA6B,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAC9C,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C,+EAA+E;AAC/E,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AAsBjD;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA4B;IAC3D,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;IAExB,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAgB,EAAwB,EAAE;QACjE,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,uBAAuB,EAAE,CAAC;QACnC,CAAC;QACD,2EAA2E;QAC3E,8CAA8C;QAC9C,IAAI,iCAAiC,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,OAAO,qBAAqB,EAAE,CAAC;QACjC,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,MAAM,cAAc,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,cAAc,CAAC;QACxB,CAAC;QACD,IAAI,IAAI,KAAK,SAAS,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,OAAO,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjD,CAAC;QACD,6BAA6B,CAAC,OAAO,CAAC,CAAC;QACvC,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,OAAO,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACrC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,cAAc,CAAC,IAA8B,CAAC,CAAC;QAC3D,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YACvC,MAAM,SAAS,GAAG,KAA+C,CAAC;YAClE,SAAS,CAAC,QAAQ,GAAG,EAAE,GAAG,SAAS,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,+BAA+B;IAC/B,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;QACnC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,iBAAiB,CAAC,IAA8B,EAAE,KAAK,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAmB,EACnB,OAAgB;IAEhB,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,MAAM,cAAc,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,cAAc,GAClB,cAAc,KAAK,IAAI,IAAI,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,CAAC,cAAc,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,cAAc,EAAE,CAAC;QAC7D,6BAA6B,CAAC,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,IAAI,GAAG,cAAc;QACzB,CAAC,CAAC,cAAc;QAChB,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,cAAc;YACpC,CAAC,CAAC,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC;YACzC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC;gBAC3B,CAAC,CAAC,MAAM,0BAA0B,CAAC,OAAO,CAAC;gBAC3C,CAAC,CAAC,MAAM,yBAAyB,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5D,yEAAyE;IACzE,MAAM,cAAc,GAClB,IAAI,CAAC,mBAAmB,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,oBAAoB,CAAC;QACpC,mBAAmB,EAAE;YACnB,GAAG,IAAI;YACP,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE;KACF,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,wBAAwB,CAAC;AAExE;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,oBAAoB,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAiB,EAAE,KAAc;IACjE,MAAM,SAAS,GACb,KAAK;QACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,OAAO,CAAE,KAAiC,CAAC,SAAS,CAAC;QACzD,CAAC,CAAE,KAAkC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;QAC3D,CAAC,CAAC,EAAE,CAAC;IACT,4EAA4E;IAC5E,gFAAgF;IAChF,4EAA4E;IAC5E,IACE,SAAS,CAAC,CAAC,CAAC,KAAK,2BAA2B;QAC5C,SAAS,CAAC,CAAC,CAAC,KAAK,+BAA+B,EAChD,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,KAAK,2BAA2B,EAAE,CAAC;YACrD,OAAO;QACT,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,2DAA2D;SACrE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,2BAA2B,CACzC,SAAmB,EACnB,QAAkB;IAElB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,SAAS,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC5E,IACE,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,OAAO,CAAC,EACxE,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,yBAAyB,CACvC,GAAmB,EACnB,OAAgB;IAEhB,MAAM,KAAK,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,KAAK,CAAC;IACf,CAAC;IAED,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,kFAAkF;AAClF,SAAS,kBAAkB,CAAC,OAAgB;IAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,WAAW,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,SAAS,CAAC;IAC3D,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,SAAS,CAAC;IAC5E,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,uBAAuB,CAAC,cAAc,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,eAAe,sBAAsB,EAAE;aACjD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;gBAC3B,OAAO,EAAE,WAAW,oBAAoB,EAAE;aAC3C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,WAAW,sBAAsB,EAAE;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,4EAA4E;IAC5E,0EAA0E;IAC1E,uDAAuD;IACvD,MAAM,SAAS,GAAG,MAAM,KAAK,WAAW,CAAC;IAEzC,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,MAAM;QACnB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,SAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,cAAc;YAChB,CAAC,CAAC;gBACE,mBAAmB,EAAE,cAAc;gBACnC,oBAAoB,EAAE,YAAY;aACnC;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,yBAAyB,CAAC,OAAgB;IACjD,IACE,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAC3B,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,EAC9D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC;IACpE,OAAO,OAAO,CACZ,QAAQ,IAAI,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgB;IACzC,OAAO,CACL,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;QAChC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;QAC3C,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAC1C,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,OAAgB;IACrD,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EACL,mEAAmE;SACtE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,CAAC;IACvE,OAAO,OAAO,CACZ,QAAQ,IAAI,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,OAAgB;IAEhB,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,IAAI,EAAE,CAAC;IACrE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,CAAC;IAClE,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,CAAC;IAEpE,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;QACzE,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,CAAC,cAAc,EAAE,CAAC;QACjC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,oDAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,IAAI,YAAY,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE;YACxD,OAAO;YACP,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,4CAA4C;SACtD,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,6DAA6D;SACvE,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ;QACtC,QAAQ,CAAC,SAAS,KAAK,cAAc,EACrC,CAAC;QACD,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,MAAM,GACV,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE;QAC7D,CAAC,CAAC,kBAAkB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE;QAC7C,CAAC,CAAC,oBAAoB,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC/C,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,SAAS;QACxB,GAAG,CAAC,OAAO,QAAQ,CAAC,UAAU,KAAK,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE;YACvE,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE;YAChD,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,qBAAqB,CAC5B,IAAuC;IAEvC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB,CAAC;AACvE,CAAC;AAED,0CAA0C;AAC1C,SAAS,aAAa,CAAC,OAAgB;IACrC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAI,IAAoB,CAAC,WAAW,CAAC;IACjD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,MAAM,KAAK,cAAc;QACzB,MAAM,KAAK,eAAe;QACzB,IAAoB,CAAC,aAAa,KAAK,SAAS,CAClD,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAoB,EACpB,OAAgB;IAEhB,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,GAAG,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC;IACxD,OAAO;QACL,QAAQ,EAAE,MAAM;QAChB,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,MAAM;QACnB,aAAa,EAAE,SAAS;KACzB,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,IAAiB;IAC9C,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,oBAAoB,CAAC,OAAgB;IAC5C,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,aAAa,CAAC,GAAG,EAAE;YAC3B,OAAO,EAAE,mCAAmC;SAC7C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAC5D,OAAO,OAAO,CACZ,QAAQ,IAAI,QAAQ,IAAI,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CAAC,OAAgB;IACrD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,CACL,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iCAAiC,CAAC,OAAgB;IAChE,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,qBAAqB;IACnC,OAAO;QACL,QAAQ,EAAE,iBAAiB;QAC3B,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,iBAAiB;KAC/B,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,QAAQ,EAAE,mBAAmB;QAC7B,WAAW,EAAE,EAAE;QACf,WAAW,EAAE,mBAAmB;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAS,EAAE,CAAS;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,QAAQ,KAAK,CAAC,CAAC;AACxB,CAAC"}

package/dist/runtime/backend.d.ts

@@ -40,7 +40,7 @@ export declare class LazyManagedSandboxBackend {
     glob(pattern: string, path?: string): Promise<import("deepagents").GlobResult>;
     write(filePath: string, content: string): Promise<import("deepagents").WriteResult>;
     edit(filePath: string, oldString: string, newString: string, replaceAll?: boolean): Promise<import("deepagents").EditResult>;
-    delete(filePath: string): Promise<unknown>;
+    delete(filePath: string): Promise<import("deepagents").DeleteResult | undefined>;
     uploadFiles(files: Array<[string, Uint8Array]>): Promise<import("deepagents").FileUploadResponse[] | undefined>;
     downloadFiles(paths: string[]): Promise<import("deepagents").FileDownloadResponse[] | undefined>;
     execute(command: string): Promise<import("deepagents").ExecuteResponse>;

package/dist/runtime/backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/runtime/backend.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAQhD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAMnD,KAAK,kBAAkB,GAAG;IACxB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACxC,UAAU,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IAC7C,QAAQ,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC1C,CAAC;AA+EF;;;GAGG;AACH,qBAAa,yBAAyB;IAElC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAHpC,OAAO,eAIH;IAEJ,gEAAgE;IAChE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,yBAAyB,CAMjE;IAED;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,yBAAyB,CAWtD;IAED,IAAI,EAAE,IAAI,MAAM,CAgBf;IAEK,EAAE,CAAC,IAAI,SAAM,0CAElB;IAEK,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,4CAE3D;IAEK,OAAO,CAAC,QAAQ,EAAE,MAAM,+CAE7B;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,4CAErE;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,4CAExC;IAEK,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,6CAE5C;IAEK,IAAI,CACR,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,UAAQ,4CAKnB;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,oBAE5B;IAEK,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,kEAEnD;IAEK,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,oEAElC;IAEK,OAAO,CAAC,OAAO,EAAE,MAAM,iDAE5B;IAED,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,SAAS;CAsBlB"}
+{"version":3,"file":"backend.d.ts","sourceRoot":"","sources":["../../src/runtime/backend.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAShD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAMnD,KAAK,kBAAkB,GAAG;IACxB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACxC,UAAU,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IAC7C,QAAQ,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAC1C,CAAC;AAuGF;;;GAGG;AACH,qBAAa,yBAAyB;IAElC,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,iBAAiB;IAHpC,OAAO,eAIH;IAEJ,gEAAgE;IAChE,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,kBAAkB,GAAG,yBAAyB,CAMjE;IAED;;;OAGG;IACH,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,yBAAyB,CAWtD;IAED,IAAI,EAAE,IAAI,MAAM,CAgBf;IAEK,EAAE,CAAC,IAAI,SAAM,0CAElB;IAEK,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,4CAE3D;IAEK,OAAO,CAAC,QAAQ,EAAE,MAAM,+CAE7B;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,4CAErE;IAEK,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,4CAExC;IAEK,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,6CAE5C;IAEK,IAAI,CACR,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,UAAU,UAAQ,4CAKnB;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,0DAE5B;IAEK,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,kEAEnD;IAEK,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,oEAElC;IAEK,OAAO,CAAC,OAAO,EAAE,MAAM,iDAE5B;IAED,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,SAAS;CAsBlB"}