node-server-engine 1.11.1 → 1.12.0

package/README.md

@@ -80,12 +80,14 @@ Framework used to develop Node backend services. This package ships with a lot o
     - [User Resolver](#user-resolver)
     - [Gemini File Upload](#gemini-file-upload)
     - [Check Permission Middleware](#check-permission-middleware)
+    - [Verification Token Middleware](#verification-token-middleware)
   - [Utilities](#utilities)
     - [Request](#request)
     - [TLS Request](#tls-request)
     - [TLS Config](#tls-config)
     - [Send Push Notification](#send-push-notification)
     - [Send Email](#send-email)
+    - [Verification Token](#verification-token)
     - [Parameters](#parameters)
     - [Return Status](#return-status)
     - [Gemini File Upload](#gemini-file-upload-1)
@@ -1976,6 +1978,42 @@ checkPermission(['admin', 'moderator'])
 };
 ```
 
+---
+
+### Verification Token Middleware
+
+⚠️ **Must be used in combination with AuthType.JWT**
+
+Generates a short-lived verification flow for sensitive operations (for example: delete account, change email, payout). The middleware verifies a signed verification token and the OTP provided by the user, and binds it to a specific action.
+
+#### Flow Summary
+
+1. Generate a verification token + OTP using the utility (server-side).
+2. Send the OTP to the user (SMS/WhatsApp/email).
+3. Call the sensitive endpoint with both `x-verification-token` and `x-verification-otp`.
+
+#### Middleware Usage
+
+```javascript
+import { Endpoint, middleware, AuthType, Method } from 'node-server-engine';
+
+new Endpoint({
+  path: '/users/:id',
+  method: Method.DELETE,
+  authType: AuthType.JWT,
+  middleware: [middleware.verificationToken('DELETE ACCOUNT', { requireSubject: true })],
+  handler: (req, res) => {
+    res.json({ ok: true });
+  }
+});
+```
+
+#### Defaults
+
+- Token header: `x-verification-token`
+- OTP header: `x-verification-otp`
+- Body/query fields: `verificationToken`, `verificationOtp`
+
 ## Utilities
 
 The server engine ships with a handful of utility functions that are commonly used by servers
@@ -2104,6 +2142,46 @@ The function returns an object with the following status options:
 
 ---
 
+### Verification Token
+
+Generate and verify a short-lived verification token + OTP for sensitive operations.
+
+```javascript
+import { createVerificationToken, verifyVerificationToken } from 'node-server-engine';
+
+// Generate token + OTP
+const { token, otp, expiresAt } = createVerificationToken({
+  action: 'DELETE ACCOUNT',
+  subject: userId,
+  otpLength: 6,
+  expiresInSeconds: 300
+});
+
+// Later, verify token + OTP
+const payload = verifyVerificationToken(token, {
+  action: 'DELETE ACCOUNT',
+  otp,
+  subject: userId
+});
+```
+
+#### Environment Variables
+
+- `VERIFICATION_TOKEN_SECRET` (required)
+- `VERIFICATION_TOKEN_OTP_SECRET` (optional, defaults to `VERIFICATION_TOKEN_SECRET`)
+- `VERIFICATION_TOKEN_ISSUER` (optional, default: `node-server-engine`)
+- `VERIFICATION_TOKEN_AUDIENCE` (optional, used when `audience` is not provided)
+
+#### Multi-service setup
+
+If you generate verification tokens in one service and verify them in another, **all services must share the same verification secrets** for the same environment:
+
+- Use the same `VERIFICATION_TOKEN_SECRET` in every service.
+- If you set `VERIFICATION_TOKEN_OTP_SECRET`, use the same value everywhere.
+- Keep `VERIFICATION_TOKEN_ISSUER` and `VERIFICATION_TOKEN_AUDIENCE` consistent across services.
+
+---
+
 ### Gemini File Upload
 
 Upload a file to Google Gemini AI.

package/dist/entities/Server/Server.js

@@ -104,7 +104,7 @@ let Server = exports.Server = /*#__PURE__*/function () {
     this.app = (0, _express.default)();
     this.app.use((0, _cors.default)({
       origin: process.env.CORS_ORIGIN ?? '*',
-      methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],
+      methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],
       allowedHeaders: ['Content-Type', 'Authorization']
     }));
     this.registerMiddleware(this.app);

package/dist/entities/Server/Server.js.map

@@ -1 +1 @@
-{"version":3,"file":"Server.js","names":["_fs","_interopRequireDefault","require","_path","_promises","_express","_cors","_ws","_SocketClient","_Server2","_Endpoint","_EngineError","_LifecycleController","_PubSub","_SecretManager","_utils","_jwt","_report","_tlsConfig","namespace","Server","exports","config","_classCallCheck2","default","_defineProperty2","AbortController","validate","reportDebug","message","endpoints","globalMiddleware","errorMiddleware","initCallbacks","shutdownCallbacks","syncCallbacks","cron","auth","noFetch","secretManagerConfig","secretManager","checkEnvironment","process","env","RUN_MIGRATION","UNDO_MIGRATION","SQL_HOST","envAssert","isHost","SQL_USER","isString","SQL_PASSWORD","SQL_DB","NODE_ENV","PORT","isPort","SECONDARY_PORT","app","express","use","cors","origin","CORS_ORIGIN","methods","allowedHeaders","registerMiddleware","httpServer","createHttpServer","secondaryApp","secondaryMiddleware","defaultErrorMiddleware","forEach","middleware","secondaryHttpServer","disable","server","headersTimeout","keepAliveTimeout","webSocket","attachWebSocket","_createClass2","key","value","setupGlobalErrorLogging","on","err","reportError","reportInfo","setTimeout","exit","reason","Error","String","init","SecretManager","initKeySets","callback","runCallback","Promise","all","map","PubSub","job","runCronJob","resolve","listen","data","port","secondaryPort","nodeEnv","handleSignal","watchTlsCaFileChange","shutdown","reject","listening","address","close","error","wss","clients","socket","socketKillTimeout","WEBSOCKET_CLOSE_TIMEOUT","parseInt","setTimeoutPromise","readyState","CLOSING","OPEN","terminate","LifecycleController","shutdownRunningInstances","abortController","abort","fileWatchers","watcher","shutdownKeySets","shutdownSignals","signal","removeAllListeners","getApp","getSecondaryApp","defaultMiddleware","path","endpoint","register","options","WebSocketServer","request","SocketClient","client","isShuttingDown","then","catch","file","fs","watch","event","loadTlsConfig","setSecureContext","tlsConfig","push","handler","name","interval","undefined","function","apply","parameters","some","Endpoint","EngineError","Object","values","validator","Array"],"sources":["../../../src/entities/Server/Server.ts"],"sourcesContent":["import fs from 'fs';\nimport http from 'http';\nimport https from 'https';\nimport { AddressInfo } from 'net';\nimport path from 'path';\nimport { setTimeout as setTimeoutPromise } from 'timers/promises';\nimport { ValidatorSpec } from 'envalid';\nimport express, { Application } from 'express';\nimport cors from 'cors';\nimport { Server as WebSocketServer } from 'ws';\nimport { SocketClient } from '../SocketClient';\nimport {\n  defaultMiddleware,\n  defaultErrorMiddleware,\n  secondaryMiddleware,\n  shutdownSignals\n} from './Server.const';\nimport {\n  ServerOptions,\n  ServerCronJon,\n  ServerAuthConfig,\n  ServerWebSocketConfig,\n  ServerGlobalMiddleware,\n  ServerErrorMiddleWare,\n  ServerCallback\n} from './Server.types';\nimport { Endpoint } from 'entities/Endpoint';\nimport { EngineError } from 'entities/EngineError';\nimport { LifecycleController } from 'entities/LifecycleController';\nimport { PubSub } from 'entities/PubSub';\nimport { SecretManager } from 'entities/SecretManager';\nimport { checkEnvironment, envAssert, createHttpServer } from 'utils';\nimport { initKeySets, shutdownKeySets } from 'utils/jwt';\nimport { reportInfo, reportError, reportDebug } from 'utils/report';\nimport { tlsConfig, loadTlsConfig, TlsConfig } from 'utils/tlsConfig';\n\nconst namespace = 'engine:Server';\n\n/** Main server class */\nexport class Server {\n  /** The express application powering the main endpoints */\n  private app: Application;\n  /** The node HTTP(S) server, serving the main express application */\n  private httpServer: http.Server | https.Server;\n  /** The express application powering the support endpoints */\n  private secondaryApp: Application;\n  /** The node HTTP(S) server, serving the secondary express application */\n  private secondaryHttpServer: http.Server | https.Server;\n  /** List of endpoint instances that the server should handle */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  private endpoints: Array<Endpoint<any>>;\n  /** Mapping of env variable name with functions that should run to check their validity */\n  private checkEnvironment: Record<string, ValidatorSpec<unknown>>;\n  /** Middleware that should run on every request before the endpoint specific logic */\n  private globalMiddleware: Array<ServerGlobalMiddleware>;\n  /** Error middleware that should run on every request after the endpoint specific logic, but before the generic global middleware */\n  private errorMiddleware: Array<\n    ServerGlobalMiddleware | ServerErrorMiddleWare\n  >;\n  /** Functions that should be called on server startup */\n  private initCallbacks: Array<ServerCallback>;\n  /** Functions that should be called on server shutdown */\n  private shutdownCallbacks: Array<ServerCallback>;\n  /** When set to true, this indicates that init callbacks should run synchronously in the order they are declared. By default they all run in parallel */\n  private syncCallbacks: boolean;\n  /** Config to set regularly running jobs on the server */\n  private cron?: Array<ServerCronJon>;\n  /** Global auth related configuration */\n  private auth: ServerAuthConfig;\n  /** Secret Manager configuration */\n  private secretManagerConfig?: ServerOptions['secretManager'];\n  /** WebSocket server instance, if configured */\n  private wss?: WebSocketServer;\n  /** Abort controller that handles signals for the server */\n  private abortController = new AbortController();\n  /** File system watchers for TLS certificate changes */\n  private fileWatchers: Array<fs.FSWatcher> = [];\n\n  /** Create a server */\n  public constructor(config: ServerOptions) {\n    this.validate(config);\n\n    reportDebug({\n      namespace,\n      message: `Creating server`\n    });\n\n    this.endpoints = config.endpoints;\n    this.globalMiddleware = config.globalMiddleware ?? [];\n    this.errorMiddleware = config.errorMiddleware ?? [];\n    this.initCallbacks = config.initCallbacks ?? [];\n    this.shutdownCallbacks = config.shutdownCallbacks ?? [];\n    this.syncCallbacks = config.syncCallbacks ?? false;\n    this.cron = config.cron;\n    this.auth = { noFetch: false, ...config.auth };\n    this.secretManagerConfig = config.secretManager;\n\n    // The minimal environment check is different between the migration modes of execution and the regular server execution mode\n    // When running in migration mode, we only check that we have SQL related environment variables\n    this.checkEnvironment =\n      process.env.RUN_MIGRATION === 'true' ||\n      process.env.UNDO_MIGRATION === 'true'\n        ? {\n            SQL_HOST: envAssert.isHost(),\n            SQL_USER: envAssert.isString(),\n            SQL_PASSWORD: envAssert.isString(),\n            SQL_DB: envAssert.isString()\n          }\n        : {\n            NODE_ENV: envAssert.isString(),\n            PORT: envAssert.isPort(),\n            SECONDARY_PORT: envAssert.isPort(),\n            ...config.checkEnvironment\n          };\n\n    checkEnvironment(this.checkEnvironment);\n\n    // Create the primary express core that serves the business logic\n    this.app = express();\n    this.app.use(\n      cors({\n        origin: process.env.CORS_ORIGIN ?? '*',\n        methods: ['GET', 'POST', 'PUT', 'DELETE', 'OPTIONS'],\n        allowedHeaders: ['Content-Type', 'Authorization']\n      })\n    );\n    this.registerMiddleware(this.app);\n    this.httpServer = createHttpServer(this.app);\n\n    // Create a secondary express core that servers metrics and analytics\n    // This will be served on a different port, allowing to specify different firewall rules for these routes\n    this.secondaryApp = express();\n    [...secondaryMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (middleware) this.secondaryApp.use(middleware);\n      }\n    );\n    this.secondaryHttpServer = createHttpServer(this.secondaryApp);\n\n    // Remove the express headers\n    this.app.disable('x-powered-by');\n    this.secondaryApp.disable('x-powered-by');\n\n    // We remove all node timeout on connections and requests\n    // This responsibility is delegated to the front-facing load balancer\n    [this.httpServer, this.secondaryHttpServer].forEach((server) => {\n      server.headersTimeout = 0;\n      server.keepAliveTimeout = 0;\n    });\n\n    if (config.webSocket) {\n      this.attachWebSocket(config.webSocket);\n    }\n  }\n\n  /**\n   * Setup global error handlers for uncaught exceptions and unhandled rejections\n   */\n  private setupGlobalErrorLogging(): void {\n    process.on('uncaughtException', (err) => {\n      reportError(err);\n      reportInfo('💥 Uncaught exception - process will exit');\n      // Give time for logs to flush before exiting\n      setTimeout(() => process.exit(1), 1000);\n    });\n    \n    process.on('unhandledRejection', (reason: unknown) => {\n      reportError(reason instanceof Error ? reason : new Error(String(reason)));\n      reportInfo('💥 Unhandled rejection - process will exit');\n      // Give time for logs to flush before exiting\n      setTimeout(() => process.exit(1), 1000);\n    });\n  }\n\n  /** Start the server */\n  public async init(): Promise<void> {\n    this.setupGlobalErrorLogging();\n    reportDebug({ namespace, message: `Starting Server` });\n    \n    // Load secrets from Secret Manager FIRST (before anything else that might need them)\n    if (this.secretManagerConfig) {\n      await SecretManager.init(this.secretManagerConfig);\n    }\n    \n    // Fetch the keys for JWT authentication\n    // Ignore in test environment as we do symmetrical token signing\n    if (process.env.NODE_ENV !== 'test' && !this.auth.noFetch)\n      await initKeySets();\n    // Run all the init callbacks\n    // We can either run them all 1/1 synchronously or run them all in parallel (default)\n    // Callback can either be direct function or an object with function and parameters attributes\n\n    if (this.syncCallbacks) {\n      for (const callback of this.initCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.initCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Initialize the Pub/Sub module\n    await PubSub.init();\n    // Run all the cronjob\n    if (this.cron) {\n      this.cron.forEach((job) => {\n        this.runCronJob(job);\n      });\n    }\n\n    // Start listening to requests\n    await Promise.all([\n      new Promise<void>((resolve) =>\n        this.httpServer.listen(process.env.PORT, () => {\n          resolve();\n        })\n      ),\n      new Promise<void>((resolve) =>\n        this.secondaryHttpServer.listen(process.env.SECONDARY_PORT, () => {\n          resolve();\n        })\n      )\n    ]);\n    reportInfo({\n      message: 'SERVER_RUNNING',\n      data: {\n        port: process.env.PORT,\n        secondaryPort: process.env.SECONDARY_PORT,\n        nodeEnv: process.env.NODE_ENV\n      }\n    });\n\n    this.handleSignal();\n\n    // Watch TSL config files changing\n    this.watchTlsCaFileChange();\n  }\n\n  /** Graceful shutdown */\n  public async shutdown(): Promise<void> {\n    reportDebug({ namespace, message: `Shutting down Server` });\n\n    // Stop listening to HTTP requests\n    await Promise.all(\n      [this.httpServer, this.secondaryHttpServer].map(\n        (server) =>\n          new Promise<void>((resolve, reject) => {\n            // Ignore if the server was already stopped\n            // We have observed cases where SIGTERM was thrown multiple times\n            if (!server.listening) {\n              resolve();\n              return;\n            }\n            \n            const { port } = server.address() as AddressInfo;\n            \n            server.close((error) => {\n              if (error) {\n                reportError(error);\n                reject(error);\n              } else {\n                reportInfo({\n                  message: `Stopped listening to requests on port ${port}`\n                });\n                resolve();\n              }\n            });\n          })\n      )\n    );\n\n    // Close all socket connections\n    if (this.wss) {\n      // First ask them to close gracefully\n      this.wss.clients.forEach((socket) => {\n        socket.close();\n      });\n      \n      // Hard terminate all connections still open after a defined time\n      const socketKillTimeout = process.env.WEBSOCKET_CLOSE_TIMEOUT\n        ? parseInt(process.env.WEBSOCKET_CLOSE_TIMEOUT, 10)\n        : 5000;\n        \n      await setTimeoutPromise(socketKillTimeout);\n      \n      this.wss.clients.forEach((socket) => {\n        if (\n          socket.readyState === socket.CLOSING ||\n          socket.readyState === socket.OPEN\n        ) {\n          socket.terminate();\n        }\n      });\n      \n      // Close the WebSocket server itself\n      await new Promise<void>((resolve, reject) => {\n        this.wss?.close((error) => {\n          if (error) {\n            reportError(error);\n            reject(error);\n          } else {\n            reportInfo({ message: 'WebSocket server closed' });\n            resolve();\n          }\n        });\n      });\n    }\n\n    // Run all the shutdown callback\n    if (this.syncCallbacks) {\n      for (const callback of this.shutdownCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.shutdownCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Shutdown all the running entities\n    await LifecycleController.shutdownRunningInstances();\n\n    // Abort all the cronjob\n    if (this.abortController) this.abortController.abort();\n\n    // Close all file watchers\n    this.fileWatchers.forEach((watcher) => watcher.close());\n\n    // Stop the keyset timers\n    shutdownKeySets();\n\n    shutdownSignals.forEach((signal) => process.removeAllListeners(signal));\n  }\n\n  /** Get the express app instance of the server */\n  public getApp(): Application {\n    return this.app;\n  }\n\n  /** Get the express app instance of the server */\n  public getSecondaryApp(): Application {\n    return this.secondaryApp;\n  }\n\n  /** Registers all the middleware with the express app */\n  private registerMiddleware(app: Application): void {\n    // Global middleware can specify a path to which they apply\n    [...defaultMiddleware, ...this.globalMiddleware].forEach((middleware) => {\n      if (typeof middleware === 'function') {\n        app.use(middleware);\n      } else {\n        app.use(middleware.path, middleware.middleware);\n      }\n    });\n    // Call the register method of each endpoint\n    this.endpoints.forEach((endpoint) => {\n      endpoint.register(app);\n    });\n    // Add error middleware\n    [...this.errorMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (typeof middleware === 'function') {\n          app.use(middleware);\n        } else {\n          app.use(middleware.path, middleware.middleware);\n        }\n      }\n    );\n  }\n\n  /** Add a handler for WebSocket connections */\n  private attachWebSocket(options: ServerWebSocketConfig): void {\n    this.wss = new WebSocketServer({\n      ...options.server,\n      server: this.httpServer\n    })\n      .on('connection', (webSocket, request) => {\n        new SocketClient(webSocket, request, options.client);\n      })\n      .on('error', (error) => {\n        reportError(error);\n      });\n  }\n\n  /** Call shutdown if signal gets sent to the process */\n  private handleSignal(): void {\n    let isShuttingDown = false;\n    \n    shutdownSignals.forEach((signal) =>\n      process.on(signal, () => {\n        // Prevent multiple shutdown attempts\n        if (isShuttingDown) {\n          reportInfo(`Already shutting down, ignoring ${signal}`);\n          return;\n        }\n        \n        isShuttingDown = true;\n        reportInfo(`Received shutdown signal [${signal}]`);\n        \n        this.shutdown()\n          .then(() => {\n            reportInfo('Graceful shutdown completed successfully');\n            process.exit(0);\n          })\n          .catch((error) => {\n            reportError(error);\n            process.exit(1);\n          });\n      })\n    );\n  }\n\n  /** Watch the TLS certificate change event */\n  private watchTlsCaFileChange(): void {\n    [\n      'TLS_REQUEST_KEY',\n      'TLS_REQUEST_CERT',\n      'TLS_REQUEST_CA',\n      'TLS_SERVER_KEY',\n      'TLS_SERVER_CERT',\n      'TLS_CA'\n    ].forEach((key) => {\n      const file = process.env[key];\n      if (file) {\n        const watcher = fs.watch(path.resolve(file), (event) => {\n          if (event !== 'change') return;\n          reportInfo(`Reloading TLS config [${file} changed]`);\n          loadTlsConfig();\n          (this.httpServer as https.Server).setSecureContext(\n            tlsConfig as TlsConfig\n          );\n        });\n        this.fileWatchers.push(watcher);\n      }\n    });\n  }\n\n  /** Executes a recurring job */\n  private runCronJob(job: ServerCronJon): void {\n    (async (): Promise<void> => {\n      reportInfo({ message: `Starting scheduled job \"${job.handler.name}\"` });\n      try {\n        await job.handler();\n        reportInfo({\n          message: `Job \"${job.handler.name}\" finished, starting again in ${job.interval} seconds`\n        });\n        await setTimeoutPromise(job.interval * 1000, undefined, {\n          signal: this.abortController.signal\n        });\n        this.runCronJob(job);\n      } catch (error) {\n        if (error instanceof Error && error.name === 'AbortError') {\n          reportDebug({\n            namespace,\n            message: `Scheduled job \"${job.handler?.name}\" has been aborted`\n          });\n        } else {\n          throw error;\n        }\n      }\n    })().catch((error) => {\n      reportError(error);\n    });\n  }\n\n  /** Run a shutdown/init callback */\n  private runCallback(callback: ServerCallback): unknown {\n    return typeof callback === 'function'\n      ? callback()\n      : callback.function.apply(null, callback.parameters ?? []);\n  }\n\n  /**\n   * Validate the Server constructor configuration\n   */\n  private validate(config: ServerOptions): void {\n    if (\n      !config.endpoints ||\n      config.endpoints.some((endpoint) => !(endpoint instanceof Endpoint))\n    )\n      throw new EngineError(\n        'Server endpoints should be declared and all be Endpoint instances'\n      );\n\n    if (\n      config.checkEnvironment &&\n      Object.values(config.checkEnvironment).some(\n        (validator) => typeof validator !== 'function'\n      )\n    )\n      throw new EngineError(\n        'Some of the environment checks are not valid functions'\n      );\n\n    if (\n      config.initCallbacks &&\n      (!(config.initCallbacks instanceof Array) ||\n        config.initCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Init callbacks is not a list of functions');\n\n    if (\n      config.shutdownCallbacks &&\n      (!(config.shutdownCallbacks instanceof Array) ||\n        config.shutdownCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Shutdown callbacks is not a list of functions');\n  }\n}\n"],"mappings":";;;;;;;;;;AAAA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIA,IAAAC,KAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AAEA,IAAAG,QAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,KAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,GAAA,GAAAL,OAAA;AACA,IAAAM,aAAA,GAAAN,OAAA;AACA,IAAAO,QAAA,GAAAP,OAAA;AAeA,IAAAQ,SAAA,GAAAR,OAAA;AACA,IAAAS,YAAA,GAAAT,OAAA;AACA,IAAAU,oBAAA,GAAAV,OAAA;AACA,IAAAW,OAAA,GAAAX,OAAA;AACA,IAAAY,cAAA,GAAAZ,OAAA;AACA,IAAAa,MAAA,GAAAb,OAAA;AACA,IAAAc,IAAA,GAAAd,OAAA;AACA,IAAAe,OAAA,GAAAf,OAAA;AACA,IAAAgB,UAAA,GAAAhB,OAAA;AAEA,MAAMiB,SAAS,GAAG,eAAe;;AAEjC;AAAA,IACaC,MAAM,GAAAC,OAAA,CAAAD,MAAA;EAuCjB;EACA,SAAAA,OAAmBE,MAAqB,EAAE;IAAA,IAAAC,gBAAA,CAAAC,OAAA,QAAAJ,MAAA;IAvC1C;IAAA,IAAAK,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IACA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAIA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA,2BAC0B,IAAIE,eAAe,CAAC,CAAC;IAC/C;IAAA,IAAAD,gBAAA,CAAAD,OAAA,wBAC4C,EAAE;IAI5C,IAAI,CAACG,QAAQ,CAACL,MAAM,CAAC;IAErB,IAAAM,mBAAW,EAAC;MACVT,SAAS;MACTU,OAAO,EAAE;IACX,CAAC,CAAC;IAEF,IAAI,CAACC,SAAS,GAAGR,MAAM,CAACQ,SAAS;IACjC,IAAI,CAACC,gBAAgB,GAAGT,MAAM,CAACS,gBAAgB,IAAI,EAAE;IACrD,IAAI,CAACC,eAAe,GAAGV,MAAM,CAACU,eAAe,IAAI,EAAE;IACnD,IAAI,CAACC,aAAa,GAAGX,MAAM,CAACW,aAAa,IAAI,EAAE;IAC/C,IAAI,CAACC,iBAAiB,GAAGZ,MAAM,CAACY,iBAAiB,IAAI,EAAE;IACvD,IAAI,CAACC,aAAa,GAAGb,MAAM,CAACa,aAAa,IAAI,KAAK;IAClD,IAAI,CAACC,IAAI,GAAGd,MAAM,CAACc,IAAI;IACvB,IAAI,CAACC,IAAI,GAAG;MAAEC,OAAO,EAAE,KAAK;MAAE,GAAGhB,MAAM,CAACe;IAAK,CAAC;IAC9C,IAAI,CAACE,mBAAmB,GAAGjB,MAAM,CAACkB,aAAa;;IAE/C;IACA;IACA,IAAI,CAACC,gBAAgB,GACnBC,OAAO,CAACC,GAAG,CAACC,aAAa,KAAK,MAAM,IACpCF,OAAO,CAACC,GAAG,CAACE,cAAc,KAAK,MAAM,GACjC;MACEC,QAAQ,EAAEC,gBAAS,CAACC,MAAM,CAAC,CAAC;MAC5BC,QAAQ,EAAEF,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BC,YAAY,EAAEJ,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAClCE,MAAM,EAAEL,gBAAS,CAACG,QAAQ,CAAC;IAC7B,CAAC,GACD;MACEG,QAAQ,EAAEN,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BI,IAAI,EAAEP,gBAAS,CAACQ,MAAM,CAAC,CAAC;MACxBC,cAAc,EAAET,gBAAS,CAACQ,MAAM,CAAC,CAAC;MAClC,GAAGjC,MAAM,CAACmB;IACZ,CAAC;IAEP,IAAAA,uBAAgB,EAAC,IAAI,CAACA,gBAAgB,CAAC;;IAEvC;IACA,IAAI,CAACgB,GAAG,GAAG,IAAAC,gBAAO,EAAC,CAAC;IACpB,IAAI,CAACD,GAAG,CAACE,GAAG,CACV,IAAAC,aAAI,EAAC;MACHC,MAAM,EAAEnB,OAAO,CAACC,GAAG,CAACmB,WAAW,IAAI,GAAG;MACtCC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC;MACpDC,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe;IAClD,CAAC,CACH,CAAC;IACD,IAAI,CAACC,kBAAkB,CAAC,IAAI,CAACR,GAAG,CAAC;IACjC,IAAI,CAACS,UAAU,GAAG,IAAAC,uBAAgB,EAAC,IAAI,CAACV,GAAG,CAAC;;IAE5C;IACA;IACA,IAAI,CAACW,YAAY,GAAG,IAAAV,gBAAO,EAAC,CAAC;IAC7B,CAAC,GAAGW,4BAAmB,EAAE,GAAGC,+BAAsB,CAAC,CAACC,OAAO,CACxDC,UAAU,IAAK;MACd,IAAIA,UAAU,EAAE,IAAI,CAACJ,YAAY,CAACT,GAAG,CAACa,UAAU,CAAC;IACnD,CACF,CAAC;IACD,IAAI,CAACC,mBAAmB,GAAG,IAAAN,uBAAgB,EAAC,IAAI,CAACC,YAAY,CAAC;;IAE9D;IACA,IAAI,CAACX,GAAG,CAACiB,OAAO,CAAC,cAAc,CAAC;IAChC,IAAI,CAACN,YAAY,CAACM,OAAO,CAAC,cAAc,CAAC;;IAEzC;IACA;IACA,CAAC,IAAI,CAACR,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAACF,OAAO,CAAEI,MAAM,IAAK;MAC9DA,MAAM,CAACC,cAAc,GAAG,CAAC;MACzBD,MAAM,CAACE,gBAAgB,GAAG,CAAC;IAC7B,CAAC,CAAC;IAEF,IAAIvD,MAAM,CAACwD,SAAS,EAAE;MACpB,IAAI,CAACC,eAAe,CAACzD,MAAM,CAACwD,SAAS,CAAC;IACxC;EACF;;EAEA;AACF;AACA;EAFE,WAAAE,aAAA,CAAAxD,OAAA,EAAAJ,MAAA;IAAA6D,GAAA;IAAAC,KAAA,EAGA,SAAQC,uBAAuBA,CAAA,EAAS;MACtCzC,OAAO,CAAC0C,EAAE,CAAC,mBAAmB,EAAGC,GAAG,IAAK;QACvC,IAAAC,mBAAW,EAACD,GAAG,CAAC;QAChB,IAAAE,kBAAU,EAAC,2CAA2C,CAAC;QACvD;QACAC,UAAU,CAAC,MAAM9C,OAAO,CAAC+C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;MACzC,CAAC,CAAC;MAEF/C,OAAO,CAAC0C,EAAE,CAAC,oBAAoB,EAAGM,MAAe,IAAK;QACpD,IAAAJ,mBAAW,EAACI,MAAM,YAAYC,KAAK,GAAGD,MAAM,GAAG,IAAIC,KAAK,CAACC,MAAM,CAACF,MAAM,CAAC,CAAC,CAAC;QACzE,IAAAH,kBAAU,EAAC,4CAA4C,CAAC;QACxD;QACAC,UAAU,CAAC,MAAM9C,OAAO,CAAC+C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;MACzC,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAAR,GAAA;IAAAC,KAAA,EACA,eAAaW,IAAIA,CAAA,EAAkB;MACjC,IAAI,CAACV,uBAAuB,CAAC,CAAC;MAC9B,IAAAvD,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAkB,CAAC,CAAC;;MAEtD;MACA,IAAI,IAAI,CAACU,mBAAmB,EAAE;QAC5B,MAAMuD,4BAAa,CAACD,IAAI,CAAC,IAAI,CAACtD,mBAAmB,CAAC;MACpD;;MAEA;MACA;MACA,IAAIG,OAAO,CAACC,GAAG,CAACU,QAAQ,KAAK,MAAM,IAAI,CAAC,IAAI,CAAChB,IAAI,CAACC,OAAO,EACvD,MAAM,IAAAyD,gBAAW,EAAC,CAAC;MACrB;MACA;MACA;;MAEA,IAAI,IAAI,CAAC5D,aAAa,EAAE;QACtB,KAAK,MAAM6D,QAAQ,IAAI,IAAI,CAAC/D,aAAa,EAAE;UACzC,MAAM,IAAI,CAACgE,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAAClE,aAAa,CAACmE,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACjE,CAAC;MACH;;MAEA;MACA,MAAMK,cAAM,CAACR,IAAI,CAAC,CAAC;MACnB;MACA,IAAI,IAAI,CAACzD,IAAI,EAAE;QACb,IAAI,CAACA,IAAI,CAACmC,OAAO,CAAE+B,GAAG,IAAK;UACzB,IAAI,CAACC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC;MACJ;;MAEA;MACA,MAAMJ,OAAO,CAACC,GAAG,CAAC,CAChB,IAAID,OAAO,CAAQM,OAAO,IACxB,IAAI,CAACtC,UAAU,CAACuC,MAAM,CAAC/D,OAAO,CAACC,GAAG,CAACW,IAAI,EAAE,MAAM;QAC7CkD,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,EACD,IAAIN,OAAO,CAAQM,OAAO,IACxB,IAAI,CAAC/B,mBAAmB,CAACgC,MAAM,CAAC/D,OAAO,CAACC,GAAG,CAACa,cAAc,EAAE,MAAM;QAChEgD,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,CACF,CAAC;MACF,IAAAjB,kBAAU,EAAC;QACT1D,OAAO,EAAE,gBAAgB;QACzB6E,IAAI,EAAE;UACJC,IAAI,EAAEjE,OAAO,CAACC,GAAG,CAACW,IAAI;UACtBsD,aAAa,EAAElE,OAAO,CAACC,GAAG,CAACa,cAAc;UACzCqD,OAAO,EAAEnE,OAAO,CAACC,GAAG,CAACU;QACvB;MACF,CAAC,CAAC;MAEF,IAAI,CAACyD,YAAY,CAAC,CAAC;;MAEnB;MACA,IAAI,CAACC,oBAAoB,CAAC,CAAC;IAC7B;;IAEA;EAAA;IAAA9B,GAAA;IAAAC,KAAA,EACA,eAAa8B,QAAQA,CAAA,EAAkB;MACrC,IAAApF,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAuB,CAAC,CAAC;;MAE3D;MACA,MAAMqE,OAAO,CAACC,GAAG,CACf,CAAC,IAAI,CAACjC,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAAC2B,GAAG,CAC5CzB,MAAM,IACL,IAAIuB,OAAO,CAAO,CAACM,OAAO,EAAES,MAAM,KAAK;QACrC;QACA;QACA,IAAI,CAACtC,MAAM,CAACuC,SAAS,EAAE;UACrBV,OAAO,CAAC,CAAC;UACT;QACF;QAEA,MAAM;UAAEG;QAAK,CAAC,GAAGhC,MAAM,CAACwC,OAAO,CAAC,CAAgB;QAEhDxC,MAAM,CAACyC,KAAK,CAAEC,KAAK,IAAK;UACtB,IAAIA,KAAK,EAAE;YACT,IAAA/B,mBAAW,EAAC+B,KAAK,CAAC;YAClBJ,MAAM,CAACI,KAAK,CAAC;UACf,CAAC,MAAM;YACL,IAAA9B,kBAAU,EAAC;cACT1D,OAAO,EAAE,yCAAyC8E,IAAI;YACxD,CAAC,CAAC;YACFH,OAAO,CAAC,CAAC;UACX;QACF,CAAC,CAAC;MACJ,CAAC,CACL,CACF,CAAC;;MAED;MACA,IAAI,IAAI,CAACc,GAAG,EAAE;QACZ;QACA,IAAI,CAACA,GAAG,CAACC,OAAO,CAAChD,OAAO,CAAEiD,MAAM,IAAK;UACnCA,MAAM,CAACJ,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;;QAEF;QACA,MAAMK,iBAAiB,GAAG/E,OAAO,CAACC,GAAG,CAAC+E,uBAAuB,GACzDC,QAAQ,CAACjF,OAAO,CAACC,GAAG,CAAC+E,uBAAuB,EAAE,EAAE,CAAC,GACjD,IAAI;QAER,MAAM,IAAAE,oBAAiB,EAACH,iBAAiB,CAAC;QAE1C,IAAI,CAACH,GAAG,CAACC,OAAO,CAAChD,OAAO,CAAEiD,MAAM,IAAK;UACnC,IACEA,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACM,OAAO,IACpCN,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACO,IAAI,EACjC;YACAP,MAAM,CAACQ,SAAS,CAAC,CAAC;UACpB;QACF,CAAC,CAAC;;QAEF;QACA,MAAM,IAAI9B,OAAO,CAAO,CAACM,OAAO,EAAES,MAAM,KAAK;UAC3C,IAAI,CAACK,GAAG,EAAEF,KAAK,CAAEC,KAAK,IAAK;YACzB,IAAIA,KAAK,EAAE;cACT,IAAA/B,mBAAW,EAAC+B,KAAK,CAAC;cAClBJ,MAAM,CAACI,KAAK,CAAC;YACf,CAAC,MAAM;cACL,IAAA9B,kBAAU,EAAC;gBAAE1D,OAAO,EAAE;cAA0B,CAAC,CAAC;cAClD2E,OAAO,CAAC,CAAC;YACX;UACF,CAAC,CAAC;QACJ,CAAC,CAAC;MACJ;;MAEA;MACA,IAAI,IAAI,CAACrE,aAAa,EAAE;QACtB,KAAK,MAAM6D,QAAQ,IAAI,IAAI,CAAC9D,iBAAiB,EAAE;UAC7C,MAAM,IAAI,CAAC+D,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAACjE,iBAAiB,CAACkE,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACrE,CAAC;MACH;;MAEA;MACA,MAAMiC,wCAAmB,CAACC,wBAAwB,CAAC,CAAC;;MAEpD;MACA,IAAI,IAAI,CAACC,eAAe,EAAE,IAAI,CAACA,eAAe,CAACC,KAAK,CAAC,CAAC;;MAEtD;MACA,IAAI,CAACC,YAAY,CAAC9D,OAAO,CAAE+D,OAAO,IAAKA,OAAO,CAAClB,KAAK,CAAC,CAAC,CAAC;;MAEvD;MACA,IAAAmB,oBAAe,EAAC,CAAC;MAEjBC,wBAAe,CAACjE,OAAO,CAAEkE,MAAM,IAAK/F,OAAO,CAACgG,kBAAkB,CAACD,MAAM,CAAC,CAAC;IACzE;;IAEA;EAAA;IAAAxD,GAAA;IAAAC,KAAA,EACA,SAAOyD,MAAMA,CAAA,EAAgB;MAC3B,OAAO,IAAI,CAAClF,GAAG;IACjB;;IAEA;EAAA;IAAAwB,GAAA;IAAAC,KAAA,EACA,SAAO0D,eAAeA,CAAA,EAAgB;MACpC,OAAO,IAAI,CAACxE,YAAY;IAC1B;;IAEA;EAAA;IAAAa,GAAA;IAAAC,KAAA,EACA,SAAQjB,kBAAkBA,CAACR,GAAgB,EAAQ;MACjD;MACA,CAAC,GAAGoF,0BAAiB,EAAE,GAAG,IAAI,CAAC9G,gBAAgB,CAAC,CAACwC,OAAO,CAAEC,UAAU,IAAK;QACvE,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC;QACrB,CAAC,MAAM;UACLf,GAAG,CAACE,GAAG,CAACa,UAAU,CAACsE,IAAI,EAAEtE,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CAAC,CAAC;MACF;MACA,IAAI,CAAC1C,SAAS,CAACyC,OAAO,CAAEwE,QAAQ,IAAK;QACnCA,QAAQ,CAACC,QAAQ,CAACvF,GAAG,CAAC;MACxB,CAAC,CAAC;MACF;MACA,CAAC,GAAG,IAAI,CAACzB,eAAe,EAAE,GAAGsC,+BAAsB,CAAC,CAACC,OAAO,CACzDC,UAAU,IAAK;QACd,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC;QACrB,CAAC,MAAM;UACLf,GAAG,CAACE,GAAG,CAACa,UAAU,CAACsE,IAAI,EAAEtE,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CACF,CAAC;IACH;;IAEA;EAAA;IAAAS,GAAA;IAAAC,KAAA,EACA,SAAQH,eAAeA,CAACkE,OAA8B,EAAQ;MAC5D,IAAI,CAAC3B,GAAG,GAAG,IAAI4B,UAAe,CAAC;QAC7B,GAAGD,OAAO,CAACtE,MAAM;QACjBA,MAAM,EAAE,IAAI,CAACT;MACf,CAAC,CAAC,CACCkB,EAAE,CAAC,YAAY,EAAE,CAACN,SAAS,EAAEqE,OAAO,KAAK;QACxC,IAAIC,0BAAY,CAACtE,SAAS,EAAEqE,OAAO,EAAEF,OAAO,CAACI,MAAM,CAAC;MACtD,CAAC,CAAC,CACDjE,EAAE,CAAC,OAAO,EAAGiC,KAAK,IAAK;QACtB,IAAA/B,mBAAW,EAAC+B,KAAK,CAAC;MACpB,CAAC,CAAC;IACN;;IAEA;EAAA;IAAApC,GAAA;IAAAC,KAAA,EACA,SAAQ4B,YAAYA,CAAA,EAAS;MAC3B,IAAIwC,cAAc,GAAG,KAAK;MAE1Bd,wBAAe,CAACjE,OAAO,CAAEkE,MAAM,IAC7B/F,OAAO,CAAC0C,EAAE,CAACqD,MAAM,EAAE,MAAM;QACvB;QACA,IAAIa,cAAc,EAAE;UAClB,IAAA/D,kBAAU,EAAC,mCAAmCkD,MAAM,EAAE,CAAC;UACvD;QACF;QAEAa,cAAc,GAAG,IAAI;QACrB,IAAA/D,kBAAU,EAAC,6BAA6BkD,MAAM,GAAG,CAAC;QAElD,IAAI,CAACzB,QAAQ,CAAC,CAAC,CACZuC,IAAI,CAAC,MAAM;UACV,IAAAhE,kBAAU,EAAC,0CAA0C,CAAC;UACtD7C,OAAO,CAAC+C,IAAI,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CACD+D,KAAK,CAAEnC,KAAK,IAAK;UAChB,IAAA/B,mBAAW,EAAC+B,KAAK,CAAC;UAClB3E,OAAO,CAAC+C,IAAI,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC;MACN,CAAC,CACH,CAAC;IACH;;IAEA;EAAA;IAAAR,GAAA;IAAAC,KAAA,EACA,SAAQ6B,oBAAoBA,CAAA,EAAS;MACnC,CACE,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,QAAQ,CACT,CAACxC,OAAO,CAAEU,GAAG,IAAK;QACjB,MAAMwE,IAAI,GAAG/G,OAAO,CAACC,GAAG,CAACsC,GAAG,CAAC;QAC7B,IAAIwE,IAAI,EAAE;UACR,MAAMnB,OAAO,GAAGoB,WAAE,CAACC,KAAK,CAACb,aAAI,CAACtC,OAAO,CAACiD,IAAI,CAAC,EAAGG,KAAK,IAAK;YACtD,IAAIA,KAAK,KAAK,QAAQ,EAAE;YACxB,IAAArE,kBAAU,EAAC,yBAAyBkE,IAAI,WAAW,CAAC;YACpD,IAAAI,wBAAa,EAAC,CAAC;YACd,IAAI,CAAC3F,UAAU,CAAkB4F,gBAAgB,CAChDC,oBACF,CAAC;UACH,CAAC,CAAC;UACF,IAAI,CAAC1B,YAAY,CAAC2B,IAAI,CAAC1B,OAAO,CAAC;QACjC;MACF,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAArD,GAAA;IAAAC,KAAA,EACA,SAAQqB,UAAUA,CAACD,GAAkB,EAAQ;MAC3C,CAAC,YAA2B;QAC1B,IAAAf,kBAAU,EAAC;UAAE1D,OAAO,EAAE,2BAA2ByE,GAAG,CAAC2D,OAAO,CAACC,IAAI;QAAI,CAAC,CAAC;QACvE,IAAI;UACF,MAAM5D,GAAG,CAAC2D,OAAO,CAAC,CAAC;UACnB,IAAA1E,kBAAU,EAAC;YACT1D,OAAO,EAAE,QAAQyE,GAAG,CAAC2D,OAAO,CAACC,IAAI,iCAAiC5D,GAAG,CAAC6D,QAAQ;UAChF,CAAC,CAAC;UACF,MAAM,IAAAvC,oBAAiB,EAACtB,GAAG,CAAC6D,QAAQ,GAAG,IAAI,EAAEC,SAAS,EAAE;YACtD3B,MAAM,EAAE,IAAI,CAACN,eAAe,CAACM;UAC/B,CAAC,CAAC;UACF,IAAI,CAAClC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC,OAAOe,KAAK,EAAE;UACd,IAAIA,KAAK,YAAY1B,KAAK,IAAI0B,KAAK,CAAC6C,IAAI,KAAK,YAAY,EAAE;YACzD,IAAAtI,mBAAW,EAAC;cACVT,SAAS;cACTU,OAAO,EAAE,kBAAkByE,GAAG,CAAC2D,OAAO,EAAEC,IAAI;YAC9C,CAAC,CAAC;UACJ,CAAC,MAAM;YACL,MAAM7C,KAAK;UACb;QACF;MACF,CAAC,EAAE,CAAC,CAACmC,KAAK,CAAEnC,KAAK,IAAK;QACpB,IAAA/B,mBAAW,EAAC+B,KAAK,CAAC;MACpB,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAApC,GAAA;IAAAC,KAAA,EACA,SAAQe,WAAWA,CAACD,QAAwB,EAAW;MACrD,OAAO,OAAOA,QAAQ,KAAK,UAAU,GACjCA,QAAQ,CAAC,CAAC,GACVA,QAAQ,CAACqE,QAAQ,CAACC,KAAK,CAAC,IAAI,EAAEtE,QAAQ,CAACuE,UAAU,IAAI,EAAE,CAAC;IAC9D;;IAEA;AACF;AACA;EAFE;IAAAtF,GAAA;IAAAC,KAAA,EAGA,SAAQvD,QAAQA,CAACL,MAAqB,EAAQ;MAC5C,IACE,CAACA,MAAM,CAACQ,SAAS,IACjBR,MAAM,CAACQ,SAAS,CAAC0I,IAAI,CAAEzB,QAAQ,IAAK,EAAEA,QAAQ,YAAY0B,kBAAQ,CAAC,CAAC,EAEpE,MAAM,IAAIC,wBAAW,CACnB,mEACF,CAAC;MAEH,IACEpJ,MAAM,CAACmB,gBAAgB,IACvBkI,MAAM,CAACC,MAAM,CAACtJ,MAAM,CAACmB,gBAAgB,CAAC,CAAC+H,IAAI,CACxCK,SAAS,IAAK,OAAOA,SAAS,KAAK,UACtC,CAAC,EAED,MAAM,IAAIH,wBAAW,CACnB,wDACF,CAAC;MAEH,IACEpJ,MAAM,CAACW,aAAa,KACnB,EAAEX,MAAM,CAACW,aAAa,YAAY6I,KAAK,CAAC,IACvCxJ,MAAM,CAACW,aAAa,CAACuI,IAAI,CACtBxE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAEqE,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,2CAA2C,CAAC;MAEpE,IACEpJ,MAAM,CAACY,iBAAiB,KACvB,EAAEZ,MAAM,CAACY,iBAAiB,YAAY4I,KAAK,CAAC,IAC3CxJ,MAAM,CAACY,iBAAiB,CAACsI,IAAI,CAC1BxE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAEqE,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,+CAA+C,CAAC;IAC1E;EAAC;AAAA","ignoreList":[]}
+{"version":3,"file":"Server.js","names":["_fs","_interopRequireDefault","require","_path","_promises","_express","_cors","_ws","_SocketClient","_Server2","_Endpoint","_EngineError","_LifecycleController","_PubSub","_SecretManager","_utils","_jwt","_report","_tlsConfig","namespace","Server","exports","config","_classCallCheck2","default","_defineProperty2","AbortController","validate","reportDebug","message","endpoints","globalMiddleware","errorMiddleware","initCallbacks","shutdownCallbacks","syncCallbacks","cron","auth","noFetch","secretManagerConfig","secretManager","checkEnvironment","process","env","RUN_MIGRATION","UNDO_MIGRATION","SQL_HOST","envAssert","isHost","SQL_USER","isString","SQL_PASSWORD","SQL_DB","NODE_ENV","PORT","isPort","SECONDARY_PORT","app","express","use","cors","origin","CORS_ORIGIN","methods","allowedHeaders","registerMiddleware","httpServer","createHttpServer","secondaryApp","secondaryMiddleware","defaultErrorMiddleware","forEach","middleware","secondaryHttpServer","disable","server","headersTimeout","keepAliveTimeout","webSocket","attachWebSocket","_createClass2","key","value","setupGlobalErrorLogging","on","err","reportError","reportInfo","setTimeout","exit","reason","Error","String","init","SecretManager","initKeySets","callback","runCallback","Promise","all","map","PubSub","job","runCronJob","resolve","listen","data","port","secondaryPort","nodeEnv","handleSignal","watchTlsCaFileChange","shutdown","reject","listening","address","close","error","wss","clients","socket","socketKillTimeout","WEBSOCKET_CLOSE_TIMEOUT","parseInt","setTimeoutPromise","readyState","CLOSING","OPEN","terminate","LifecycleController","shutdownRunningInstances","abortController","abort","fileWatchers","watcher","shutdownKeySets","shutdownSignals","signal","removeAllListeners","getApp","getSecondaryApp","defaultMiddleware","path","endpoint","register","options","WebSocketServer","request","SocketClient","client","isShuttingDown","then","catch","file","fs","watch","event","loadTlsConfig","setSecureContext","tlsConfig","push","handler","name","interval","undefined","function","apply","parameters","some","Endpoint","EngineError","Object","values","validator","Array"],"sources":["../../../src/entities/Server/Server.ts"],"sourcesContent":["import fs from 'fs';\nimport http from 'http';\nimport https from 'https';\nimport { AddressInfo } from 'net';\nimport path from 'path';\nimport { setTimeout as setTimeoutPromise } from 'timers/promises';\nimport { ValidatorSpec } from 'envalid';\nimport express, { Application } from 'express';\nimport cors from 'cors';\nimport { Server as WebSocketServer } from 'ws';\nimport { SocketClient } from '../SocketClient';\nimport {\n  defaultMiddleware,\n  defaultErrorMiddleware,\n  secondaryMiddleware,\n  shutdownSignals\n} from './Server.const';\nimport {\n  ServerOptions,\n  ServerCronJon,\n  ServerAuthConfig,\n  ServerWebSocketConfig,\n  ServerGlobalMiddleware,\n  ServerErrorMiddleWare,\n  ServerCallback\n} from './Server.types';\nimport { Endpoint } from 'entities/Endpoint';\nimport { EngineError } from 'entities/EngineError';\nimport { LifecycleController } from 'entities/LifecycleController';\nimport { PubSub } from 'entities/PubSub';\nimport { SecretManager } from 'entities/SecretManager';\nimport { checkEnvironment, envAssert, createHttpServer } from 'utils';\nimport { initKeySets, shutdownKeySets } from 'utils/jwt';\nimport { reportInfo, reportError, reportDebug } from 'utils/report';\nimport { tlsConfig, loadTlsConfig, TlsConfig } from 'utils/tlsConfig';\n\nconst namespace = 'engine:Server';\n\n/** Main server class */\nexport class Server {\n  /** The express application powering the main endpoints */\n  private app: Application;\n  /** The node HTTP(S) server, serving the main express application */\n  private httpServer: http.Server | https.Server;\n  /** The express application powering the support endpoints */\n  private secondaryApp: Application;\n  /** The node HTTP(S) server, serving the secondary express application */\n  private secondaryHttpServer: http.Server | https.Server;\n  /** List of endpoint instances that the server should handle */\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  private endpoints: Array<Endpoint<any>>;\n  /** Mapping of env variable name with functions that should run to check their validity */\n  private checkEnvironment: Record<string, ValidatorSpec<unknown>>;\n  /** Middleware that should run on every request before the endpoint specific logic */\n  private globalMiddleware: Array<ServerGlobalMiddleware>;\n  /** Error middleware that should run on every request after the endpoint specific logic, but before the generic global middleware */\n  private errorMiddleware: Array<\n    ServerGlobalMiddleware | ServerErrorMiddleWare\n  >;\n  /** Functions that should be called on server startup */\n  private initCallbacks: Array<ServerCallback>;\n  /** Functions that should be called on server shutdown */\n  private shutdownCallbacks: Array<ServerCallback>;\n  /** When set to true, this indicates that init callbacks should run synchronously in the order they are declared. By default they all run in parallel */\n  private syncCallbacks: boolean;\n  /** Config to set regularly running jobs on the server */\n  private cron?: Array<ServerCronJon>;\n  /** Global auth related configuration */\n  private auth: ServerAuthConfig;\n  /** Secret Manager configuration */\n  private secretManagerConfig?: ServerOptions['secretManager'];\n  /** WebSocket server instance, if configured */\n  private wss?: WebSocketServer;\n  /** Abort controller that handles signals for the server */\n  private abortController = new AbortController();\n  /** File system watchers for TLS certificate changes */\n  private fileWatchers: Array<fs.FSWatcher> = [];\n\n  /** Create a server */\n  public constructor(config: ServerOptions) {\n    this.validate(config);\n\n    reportDebug({\n      namespace,\n      message: `Creating server`\n    });\n\n    this.endpoints = config.endpoints;\n    this.globalMiddleware = config.globalMiddleware ?? [];\n    this.errorMiddleware = config.errorMiddleware ?? [];\n    this.initCallbacks = config.initCallbacks ?? [];\n    this.shutdownCallbacks = config.shutdownCallbacks ?? [];\n    this.syncCallbacks = config.syncCallbacks ?? false;\n    this.cron = config.cron;\n    this.auth = { noFetch: false, ...config.auth };\n    this.secretManagerConfig = config.secretManager;\n\n    // The minimal environment check is different between the migration modes of execution and the regular server execution mode\n    // When running in migration mode, we only check that we have SQL related environment variables\n    this.checkEnvironment =\n      process.env.RUN_MIGRATION === 'true' ||\n      process.env.UNDO_MIGRATION === 'true'\n        ? {\n            SQL_HOST: envAssert.isHost(),\n            SQL_USER: envAssert.isString(),\n            SQL_PASSWORD: envAssert.isString(),\n            SQL_DB: envAssert.isString()\n          }\n        : {\n            NODE_ENV: envAssert.isString(),\n            PORT: envAssert.isPort(),\n            SECONDARY_PORT: envAssert.isPort(),\n            ...config.checkEnvironment\n          };\n\n    checkEnvironment(this.checkEnvironment);\n\n    // Create the primary express core that serves the business logic\n    this.app = express();\n    this.app.use(\n      cors({\n        origin: process.env.CORS_ORIGIN ?? '*',\n        methods: ['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'],\n        allowedHeaders: ['Content-Type', 'Authorization']\n      })\n    );\n    this.registerMiddleware(this.app);\n    this.httpServer = createHttpServer(this.app);\n\n    // Create a secondary express core that servers metrics and analytics\n    // This will be served on a different port, allowing to specify different firewall rules for these routes\n    this.secondaryApp = express();\n    [...secondaryMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (middleware) this.secondaryApp.use(middleware);\n      }\n    );\n    this.secondaryHttpServer = createHttpServer(this.secondaryApp);\n\n    // Remove the express headers\n    this.app.disable('x-powered-by');\n    this.secondaryApp.disable('x-powered-by');\n\n    // We remove all node timeout on connections and requests\n    // This responsibility is delegated to the front-facing load balancer\n    [this.httpServer, this.secondaryHttpServer].forEach((server) => {\n      server.headersTimeout = 0;\n      server.keepAliveTimeout = 0;\n    });\n\n    if (config.webSocket) {\n      this.attachWebSocket(config.webSocket);\n    }\n  }\n\n  /**\n   * Setup global error handlers for uncaught exceptions and unhandled rejections\n   */\n  private setupGlobalErrorLogging(): void {\n    process.on('uncaughtException', (err) => {\n      reportError(err);\n      reportInfo('💥 Uncaught exception - process will exit');\n      // Give time for logs to flush before exiting\n      setTimeout(() => process.exit(1), 1000);\n    });\n    \n    process.on('unhandledRejection', (reason: unknown) => {\n      reportError(reason instanceof Error ? reason : new Error(String(reason)));\n      reportInfo('💥 Unhandled rejection - process will exit');\n      // Give time for logs to flush before exiting\n      setTimeout(() => process.exit(1), 1000);\n    });\n  }\n\n  /** Start the server */\n  public async init(): Promise<void> {\n    this.setupGlobalErrorLogging();\n    reportDebug({ namespace, message: `Starting Server` });\n    \n    // Load secrets from Secret Manager FIRST (before anything else that might need them)\n    if (this.secretManagerConfig) {\n      await SecretManager.init(this.secretManagerConfig);\n    }\n    \n    // Fetch the keys for JWT authentication\n    // Ignore in test environment as we do symmetrical token signing\n    if (process.env.NODE_ENV !== 'test' && !this.auth.noFetch)\n      await initKeySets();\n    // Run all the init callbacks\n    // We can either run them all 1/1 synchronously or run them all in parallel (default)\n    // Callback can either be direct function or an object with function and parameters attributes\n\n    if (this.syncCallbacks) {\n      for (const callback of this.initCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.initCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Initialize the Pub/Sub module\n    await PubSub.init();\n    // Run all the cronjob\n    if (this.cron) {\n      this.cron.forEach((job) => {\n        this.runCronJob(job);\n      });\n    }\n\n    // Start listening to requests\n    await Promise.all([\n      new Promise<void>((resolve) =>\n        this.httpServer.listen(process.env.PORT, () => {\n          resolve();\n        })\n      ),\n      new Promise<void>((resolve) =>\n        this.secondaryHttpServer.listen(process.env.SECONDARY_PORT, () => {\n          resolve();\n        })\n      )\n    ]);\n    reportInfo({\n      message: 'SERVER_RUNNING',\n      data: {\n        port: process.env.PORT,\n        secondaryPort: process.env.SECONDARY_PORT,\n        nodeEnv: process.env.NODE_ENV\n      }\n    });\n\n    this.handleSignal();\n\n    // Watch TSL config files changing\n    this.watchTlsCaFileChange();\n  }\n\n  /** Graceful shutdown */\n  public async shutdown(): Promise<void> {\n    reportDebug({ namespace, message: `Shutting down Server` });\n\n    // Stop listening to HTTP requests\n    await Promise.all(\n      [this.httpServer, this.secondaryHttpServer].map(\n        (server) =>\n          new Promise<void>((resolve, reject) => {\n            // Ignore if the server was already stopped\n            // We have observed cases where SIGTERM was thrown multiple times\n            if (!server.listening) {\n              resolve();\n              return;\n            }\n            \n            const { port } = server.address() as AddressInfo;\n            \n            server.close((error) => {\n              if (error) {\n                reportError(error);\n                reject(error);\n              } else {\n                reportInfo({\n                  message: `Stopped listening to requests on port ${port}`\n                });\n                resolve();\n              }\n            });\n          })\n      )\n    );\n\n    // Close all socket connections\n    if (this.wss) {\n      // First ask them to close gracefully\n      this.wss.clients.forEach((socket) => {\n        socket.close();\n      });\n      \n      // Hard terminate all connections still open after a defined time\n      const socketKillTimeout = process.env.WEBSOCKET_CLOSE_TIMEOUT\n        ? parseInt(process.env.WEBSOCKET_CLOSE_TIMEOUT, 10)\n        : 5000;\n        \n      await setTimeoutPromise(socketKillTimeout);\n      \n      this.wss.clients.forEach((socket) => {\n        if (\n          socket.readyState === socket.CLOSING ||\n          socket.readyState === socket.OPEN\n        ) {\n          socket.terminate();\n        }\n      });\n      \n      // Close the WebSocket server itself\n      await new Promise<void>((resolve, reject) => {\n        this.wss?.close((error) => {\n          if (error) {\n            reportError(error);\n            reject(error);\n          } else {\n            reportInfo({ message: 'WebSocket server closed' });\n            resolve();\n          }\n        });\n      });\n    }\n\n    // Run all the shutdown callback\n    if (this.syncCallbacks) {\n      for (const callback of this.shutdownCallbacks) {\n        await this.runCallback(callback);\n      }\n    } else {\n      await Promise.all(\n        this.shutdownCallbacks.map((callback) => this.runCallback(callback))\n      );\n    }\n\n    // Shutdown all the running entities\n    await LifecycleController.shutdownRunningInstances();\n\n    // Abort all the cronjob\n    if (this.abortController) this.abortController.abort();\n\n    // Close all file watchers\n    this.fileWatchers.forEach((watcher) => watcher.close());\n\n    // Stop the keyset timers\n    shutdownKeySets();\n\n    shutdownSignals.forEach((signal) => process.removeAllListeners(signal));\n  }\n\n  /** Get the express app instance of the server */\n  public getApp(): Application {\n    return this.app;\n  }\n\n  /** Get the express app instance of the server */\n  public getSecondaryApp(): Application {\n    return this.secondaryApp;\n  }\n\n  /** Registers all the middleware with the express app */\n  private registerMiddleware(app: Application): void {\n    // Global middleware can specify a path to which they apply\n    [...defaultMiddleware, ...this.globalMiddleware].forEach((middleware) => {\n      if (typeof middleware === 'function') {\n        app.use(middleware);\n      } else {\n        app.use(middleware.path, middleware.middleware);\n      }\n    });\n    // Call the register method of each endpoint\n    this.endpoints.forEach((endpoint) => {\n      endpoint.register(app);\n    });\n    // Add error middleware\n    [...this.errorMiddleware, ...defaultErrorMiddleware].forEach(\n      (middleware) => {\n        if (typeof middleware === 'function') {\n          app.use(middleware);\n        } else {\n          app.use(middleware.path, middleware.middleware);\n        }\n      }\n    );\n  }\n\n  /** Add a handler for WebSocket connections */\n  private attachWebSocket(options: ServerWebSocketConfig): void {\n    this.wss = new WebSocketServer({\n      ...options.server,\n      server: this.httpServer\n    })\n      .on('connection', (webSocket, request) => {\n        new SocketClient(webSocket, request, options.client);\n      })\n      .on('error', (error) => {\n        reportError(error);\n      });\n  }\n\n  /** Call shutdown if signal gets sent to the process */\n  private handleSignal(): void {\n    let isShuttingDown = false;\n    \n    shutdownSignals.forEach((signal) =>\n      process.on(signal, () => {\n        // Prevent multiple shutdown attempts\n        if (isShuttingDown) {\n          reportInfo(`Already shutting down, ignoring ${signal}`);\n          return;\n        }\n        \n        isShuttingDown = true;\n        reportInfo(`Received shutdown signal [${signal}]`);\n        \n        this.shutdown()\n          .then(() => {\n            reportInfo('Graceful shutdown completed successfully');\n            process.exit(0);\n          })\n          .catch((error) => {\n            reportError(error);\n            process.exit(1);\n          });\n      })\n    );\n  }\n\n  /** Watch the TLS certificate change event */\n  private watchTlsCaFileChange(): void {\n    [\n      'TLS_REQUEST_KEY',\n      'TLS_REQUEST_CERT',\n      'TLS_REQUEST_CA',\n      'TLS_SERVER_KEY',\n      'TLS_SERVER_CERT',\n      'TLS_CA'\n    ].forEach((key) => {\n      const file = process.env[key];\n      if (file) {\n        const watcher = fs.watch(path.resolve(file), (event) => {\n          if (event !== 'change') return;\n          reportInfo(`Reloading TLS config [${file} changed]`);\n          loadTlsConfig();\n          (this.httpServer as https.Server).setSecureContext(\n            tlsConfig as TlsConfig\n          );\n        });\n        this.fileWatchers.push(watcher);\n      }\n    });\n  }\n\n  /** Executes a recurring job */\n  private runCronJob(job: ServerCronJon): void {\n    (async (): Promise<void> => {\n      reportInfo({ message: `Starting scheduled job \"${job.handler.name}\"` });\n      try {\n        await job.handler();\n        reportInfo({\n          message: `Job \"${job.handler.name}\" finished, starting again in ${job.interval} seconds`\n        });\n        await setTimeoutPromise(job.interval * 1000, undefined, {\n          signal: this.abortController.signal\n        });\n        this.runCronJob(job);\n      } catch (error) {\n        if (error instanceof Error && error.name === 'AbortError') {\n          reportDebug({\n            namespace,\n            message: `Scheduled job \"${job.handler?.name}\" has been aborted`\n          });\n        } else {\n          throw error;\n        }\n      }\n    })().catch((error) => {\n      reportError(error);\n    });\n  }\n\n  /** Run a shutdown/init callback */\n  private runCallback(callback: ServerCallback): unknown {\n    return typeof callback === 'function'\n      ? callback()\n      : callback.function.apply(null, callback.parameters ?? []);\n  }\n\n  /**\n   * Validate the Server constructor configuration\n   */\n  private validate(config: ServerOptions): void {\n    if (\n      !config.endpoints ||\n      config.endpoints.some((endpoint) => !(endpoint instanceof Endpoint))\n    )\n      throw new EngineError(\n        'Server endpoints should be declared and all be Endpoint instances'\n      );\n\n    if (\n      config.checkEnvironment &&\n      Object.values(config.checkEnvironment).some(\n        (validator) => typeof validator !== 'function'\n      )\n    )\n      throw new EngineError(\n        'Some of the environment checks are not valid functions'\n      );\n\n    if (\n      config.initCallbacks &&\n      (!(config.initCallbacks instanceof Array) ||\n        config.initCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Init callbacks is not a list of functions');\n\n    if (\n      config.shutdownCallbacks &&\n      (!(config.shutdownCallbacks instanceof Array) ||\n        config.shutdownCallbacks.some(\n          (callback) =>\n            !(\n              typeof callback === 'function' ||\n              typeof callback?.function === 'function'\n            )\n        ))\n    )\n      throw new EngineError('Shutdown callbacks is not a list of functions');\n  }\n}\n"],"mappings":";;;;;;;;;;AAAA,IAAAA,GAAA,GAAAC,sBAAA,CAAAC,OAAA;AAIA,IAAAC,KAAA,GAAAF,sBAAA,CAAAC,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AAEA,IAAAG,QAAA,GAAAJ,sBAAA,CAAAC,OAAA;AACA,IAAAI,KAAA,GAAAL,sBAAA,CAAAC,OAAA;AACA,IAAAK,GAAA,GAAAL,OAAA;AACA,IAAAM,aAAA,GAAAN,OAAA;AACA,IAAAO,QAAA,GAAAP,OAAA;AAeA,IAAAQ,SAAA,GAAAR,OAAA;AACA,IAAAS,YAAA,GAAAT,OAAA;AACA,IAAAU,oBAAA,GAAAV,OAAA;AACA,IAAAW,OAAA,GAAAX,OAAA;AACA,IAAAY,cAAA,GAAAZ,OAAA;AACA,IAAAa,MAAA,GAAAb,OAAA;AACA,IAAAc,IAAA,GAAAd,OAAA;AACA,IAAAe,OAAA,GAAAf,OAAA;AACA,IAAAgB,UAAA,GAAAhB,OAAA;AAEA,MAAMiB,SAAS,GAAG,eAAe;;AAEjC;AAAA,IACaC,MAAM,GAAAC,OAAA,CAAAD,MAAA;EAuCjB;EACA,SAAAA,OAAmBE,MAAqB,EAAE;IAAA,IAAAC,gBAAA,CAAAC,OAAA,QAAAJ,MAAA;IAvC1C;IAAA,IAAAK,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IACA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAIA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA;IAEA;IAAA,IAAAC,gBAAA,CAAAD,OAAA,2BAC0B,IAAIE,eAAe,CAAC,CAAC;IAC/C;IAAA,IAAAD,gBAAA,CAAAD,OAAA,wBAC4C,EAAE;IAI5C,IAAI,CAACG,QAAQ,CAACL,MAAM,CAAC;IAErB,IAAAM,mBAAW,EAAC;MACVT,SAAS;MACTU,OAAO,EAAE;IACX,CAAC,CAAC;IAEF,IAAI,CAACC,SAAS,GAAGR,MAAM,CAACQ,SAAS;IACjC,IAAI,CAACC,gBAAgB,GAAGT,MAAM,CAACS,gBAAgB,IAAI,EAAE;IACrD,IAAI,CAACC,eAAe,GAAGV,MAAM,CAACU,eAAe,IAAI,EAAE;IACnD,IAAI,CAACC,aAAa,GAAGX,MAAM,CAACW,aAAa,IAAI,EAAE;IAC/C,IAAI,CAACC,iBAAiB,GAAGZ,MAAM,CAACY,iBAAiB,IAAI,EAAE;IACvD,IAAI,CAACC,aAAa,GAAGb,MAAM,CAACa,aAAa,IAAI,KAAK;IAClD,IAAI,CAACC,IAAI,GAAGd,MAAM,CAACc,IAAI;IACvB,IAAI,CAACC,IAAI,GAAG;MAAEC,OAAO,EAAE,KAAK;MAAE,GAAGhB,MAAM,CAACe;IAAK,CAAC;IAC9C,IAAI,CAACE,mBAAmB,GAAGjB,MAAM,CAACkB,aAAa;;IAE/C;IACA;IACA,IAAI,CAACC,gBAAgB,GACnBC,OAAO,CAACC,GAAG,CAACC,aAAa,KAAK,MAAM,IACpCF,OAAO,CAACC,GAAG,CAACE,cAAc,KAAK,MAAM,GACjC;MACEC,QAAQ,EAAEC,gBAAS,CAACC,MAAM,CAAC,CAAC;MAC5BC,QAAQ,EAAEF,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BC,YAAY,EAAEJ,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAClCE,MAAM,EAAEL,gBAAS,CAACG,QAAQ,CAAC;IAC7B,CAAC,GACD;MACEG,QAAQ,EAAEN,gBAAS,CAACG,QAAQ,CAAC,CAAC;MAC9BI,IAAI,EAAEP,gBAAS,CAACQ,MAAM,CAAC,CAAC;MACxBC,cAAc,EAAET,gBAAS,CAACQ,MAAM,CAAC,CAAC;MAClC,GAAGjC,MAAM,CAACmB;IACZ,CAAC;IAEP,IAAAA,uBAAgB,EAAC,IAAI,CAACA,gBAAgB,CAAC;;IAEvC;IACA,IAAI,CAACgB,GAAG,GAAG,IAAAC,gBAAO,EAAC,CAAC;IACpB,IAAI,CAACD,GAAG,CAACE,GAAG,CACV,IAAAC,aAAI,EAAC;MACHC,MAAM,EAAEnB,OAAO,CAACC,GAAG,CAACmB,WAAW,IAAI,GAAG;MACtCC,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;MAC7DC,cAAc,EAAE,CAAC,cAAc,EAAE,eAAe;IAClD,CAAC,CACH,CAAC;IACD,IAAI,CAACC,kBAAkB,CAAC,IAAI,CAACR,GAAG,CAAC;IACjC,IAAI,CAACS,UAAU,GAAG,IAAAC,uBAAgB,EAAC,IAAI,CAACV,GAAG,CAAC;;IAE5C;IACA;IACA,IAAI,CAACW,YAAY,GAAG,IAAAV,gBAAO,EAAC,CAAC;IAC7B,CAAC,GAAGW,4BAAmB,EAAE,GAAGC,+BAAsB,CAAC,CAACC,OAAO,CACxDC,UAAU,IAAK;MACd,IAAIA,UAAU,EAAE,IAAI,CAACJ,YAAY,CAACT,GAAG,CAACa,UAAU,CAAC;IACnD,CACF,CAAC;IACD,IAAI,CAACC,mBAAmB,GAAG,IAAAN,uBAAgB,EAAC,IAAI,CAACC,YAAY,CAAC;;IAE9D;IACA,IAAI,CAACX,GAAG,CAACiB,OAAO,CAAC,cAAc,CAAC;IAChC,IAAI,CAACN,YAAY,CAACM,OAAO,CAAC,cAAc,CAAC;;IAEzC;IACA;IACA,CAAC,IAAI,CAACR,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAACF,OAAO,CAAEI,MAAM,IAAK;MAC9DA,MAAM,CAACC,cAAc,GAAG,CAAC;MACzBD,MAAM,CAACE,gBAAgB,GAAG,CAAC;IAC7B,CAAC,CAAC;IAEF,IAAIvD,MAAM,CAACwD,SAAS,EAAE;MACpB,IAAI,CAACC,eAAe,CAACzD,MAAM,CAACwD,SAAS,CAAC;IACxC;EACF;;EAEA;AACF;AACA;EAFE,WAAAE,aAAA,CAAAxD,OAAA,EAAAJ,MAAA;IAAA6D,GAAA;IAAAC,KAAA,EAGA,SAAQC,uBAAuBA,CAAA,EAAS;MACtCzC,OAAO,CAAC0C,EAAE,CAAC,mBAAmB,EAAGC,GAAG,IAAK;QACvC,IAAAC,mBAAW,EAACD,GAAG,CAAC;QAChB,IAAAE,kBAAU,EAAC,2CAA2C,CAAC;QACvD;QACAC,UAAU,CAAC,MAAM9C,OAAO,CAAC+C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;MACzC,CAAC,CAAC;MAEF/C,OAAO,CAAC0C,EAAE,CAAC,oBAAoB,EAAGM,MAAe,IAAK;QACpD,IAAAJ,mBAAW,EAACI,MAAM,YAAYC,KAAK,GAAGD,MAAM,GAAG,IAAIC,KAAK,CAACC,MAAM,CAACF,MAAM,CAAC,CAAC,CAAC;QACzE,IAAAH,kBAAU,EAAC,4CAA4C,CAAC;QACxD;QACAC,UAAU,CAAC,MAAM9C,OAAO,CAAC+C,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;MACzC,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAAR,GAAA;IAAAC,KAAA,EACA,eAAaW,IAAIA,CAAA,EAAkB;MACjC,IAAI,CAACV,uBAAuB,CAAC,CAAC;MAC9B,IAAAvD,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAkB,CAAC,CAAC;;MAEtD;MACA,IAAI,IAAI,CAACU,mBAAmB,EAAE;QAC5B,MAAMuD,4BAAa,CAACD,IAAI,CAAC,IAAI,CAACtD,mBAAmB,CAAC;MACpD;;MAEA;MACA;MACA,IAAIG,OAAO,CAACC,GAAG,CAACU,QAAQ,KAAK,MAAM,IAAI,CAAC,IAAI,CAAChB,IAAI,CAACC,OAAO,EACvD,MAAM,IAAAyD,gBAAW,EAAC,CAAC;MACrB;MACA;MACA;;MAEA,IAAI,IAAI,CAAC5D,aAAa,EAAE;QACtB,KAAK,MAAM6D,QAAQ,IAAI,IAAI,CAAC/D,aAAa,EAAE;UACzC,MAAM,IAAI,CAACgE,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAAClE,aAAa,CAACmE,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACjE,CAAC;MACH;;MAEA;MACA,MAAMK,cAAM,CAACR,IAAI,CAAC,CAAC;MACnB;MACA,IAAI,IAAI,CAACzD,IAAI,EAAE;QACb,IAAI,CAACA,IAAI,CAACmC,OAAO,CAAE+B,GAAG,IAAK;UACzB,IAAI,CAACC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC;MACJ;;MAEA;MACA,MAAMJ,OAAO,CAACC,GAAG,CAAC,CAChB,IAAID,OAAO,CAAQM,OAAO,IACxB,IAAI,CAACtC,UAAU,CAACuC,MAAM,CAAC/D,OAAO,CAACC,GAAG,CAACW,IAAI,EAAE,MAAM;QAC7CkD,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,EACD,IAAIN,OAAO,CAAQM,OAAO,IACxB,IAAI,CAAC/B,mBAAmB,CAACgC,MAAM,CAAC/D,OAAO,CAACC,GAAG,CAACa,cAAc,EAAE,MAAM;QAChEgD,OAAO,CAAC,CAAC;MACX,CAAC,CACH,CAAC,CACF,CAAC;MACF,IAAAjB,kBAAU,EAAC;QACT1D,OAAO,EAAE,gBAAgB;QACzB6E,IAAI,EAAE;UACJC,IAAI,EAAEjE,OAAO,CAACC,GAAG,CAACW,IAAI;UACtBsD,aAAa,EAAElE,OAAO,CAACC,GAAG,CAACa,cAAc;UACzCqD,OAAO,EAAEnE,OAAO,CAACC,GAAG,CAACU;QACvB;MACF,CAAC,CAAC;MAEF,IAAI,CAACyD,YAAY,CAAC,CAAC;;MAEnB;MACA,IAAI,CAACC,oBAAoB,CAAC,CAAC;IAC7B;;IAEA;EAAA;IAAA9B,GAAA;IAAAC,KAAA,EACA,eAAa8B,QAAQA,CAAA,EAAkB;MACrC,IAAApF,mBAAW,EAAC;QAAET,SAAS;QAAEU,OAAO,EAAE;MAAuB,CAAC,CAAC;;MAE3D;MACA,MAAMqE,OAAO,CAACC,GAAG,CACf,CAAC,IAAI,CAACjC,UAAU,EAAE,IAAI,CAACO,mBAAmB,CAAC,CAAC2B,GAAG,CAC5CzB,MAAM,IACL,IAAIuB,OAAO,CAAO,CAACM,OAAO,EAAES,MAAM,KAAK;QACrC;QACA;QACA,IAAI,CAACtC,MAAM,CAACuC,SAAS,EAAE;UACrBV,OAAO,CAAC,CAAC;UACT;QACF;QAEA,MAAM;UAAEG;QAAK,CAAC,GAAGhC,MAAM,CAACwC,OAAO,CAAC,CAAgB;QAEhDxC,MAAM,CAACyC,KAAK,CAAEC,KAAK,IAAK;UACtB,IAAIA,KAAK,EAAE;YACT,IAAA/B,mBAAW,EAAC+B,KAAK,CAAC;YAClBJ,MAAM,CAACI,KAAK,CAAC;UACf,CAAC,MAAM;YACL,IAAA9B,kBAAU,EAAC;cACT1D,OAAO,EAAE,yCAAyC8E,IAAI;YACxD,CAAC,CAAC;YACFH,OAAO,CAAC,CAAC;UACX;QACF,CAAC,CAAC;MACJ,CAAC,CACL,CACF,CAAC;;MAED;MACA,IAAI,IAAI,CAACc,GAAG,EAAE;QACZ;QACA,IAAI,CAACA,GAAG,CAACC,OAAO,CAAChD,OAAO,CAAEiD,MAAM,IAAK;UACnCA,MAAM,CAACJ,KAAK,CAAC,CAAC;QAChB,CAAC,CAAC;;QAEF;QACA,MAAMK,iBAAiB,GAAG/E,OAAO,CAACC,GAAG,CAAC+E,uBAAuB,GACzDC,QAAQ,CAACjF,OAAO,CAACC,GAAG,CAAC+E,uBAAuB,EAAE,EAAE,CAAC,GACjD,IAAI;QAER,MAAM,IAAAE,oBAAiB,EAACH,iBAAiB,CAAC;QAE1C,IAAI,CAACH,GAAG,CAACC,OAAO,CAAChD,OAAO,CAAEiD,MAAM,IAAK;UACnC,IACEA,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACM,OAAO,IACpCN,MAAM,CAACK,UAAU,KAAKL,MAAM,CAACO,IAAI,EACjC;YACAP,MAAM,CAACQ,SAAS,CAAC,CAAC;UACpB;QACF,CAAC,CAAC;;QAEF;QACA,MAAM,IAAI9B,OAAO,CAAO,CAACM,OAAO,EAAES,MAAM,KAAK;UAC3C,IAAI,CAACK,GAAG,EAAEF,KAAK,CAAEC,KAAK,IAAK;YACzB,IAAIA,KAAK,EAAE;cACT,IAAA/B,mBAAW,EAAC+B,KAAK,CAAC;cAClBJ,MAAM,CAACI,KAAK,CAAC;YACf,CAAC,MAAM;cACL,IAAA9B,kBAAU,EAAC;gBAAE1D,OAAO,EAAE;cAA0B,CAAC,CAAC;cAClD2E,OAAO,CAAC,CAAC;YACX;UACF,CAAC,CAAC;QACJ,CAAC,CAAC;MACJ;;MAEA;MACA,IAAI,IAAI,CAACrE,aAAa,EAAE;QACtB,KAAK,MAAM6D,QAAQ,IAAI,IAAI,CAAC9D,iBAAiB,EAAE;UAC7C,MAAM,IAAI,CAAC+D,WAAW,CAACD,QAAQ,CAAC;QAClC;MACF,CAAC,MAAM;QACL,MAAME,OAAO,CAACC,GAAG,CACf,IAAI,CAACjE,iBAAiB,CAACkE,GAAG,CAAEJ,QAAQ,IAAK,IAAI,CAACC,WAAW,CAACD,QAAQ,CAAC,CACrE,CAAC;MACH;;MAEA;MACA,MAAMiC,wCAAmB,CAACC,wBAAwB,CAAC,CAAC;;MAEpD;MACA,IAAI,IAAI,CAACC,eAAe,EAAE,IAAI,CAACA,eAAe,CAACC,KAAK,CAAC,CAAC;;MAEtD;MACA,IAAI,CAACC,YAAY,CAAC9D,OAAO,CAAE+D,OAAO,IAAKA,OAAO,CAAClB,KAAK,CAAC,CAAC,CAAC;;MAEvD;MACA,IAAAmB,oBAAe,EAAC,CAAC;MAEjBC,wBAAe,CAACjE,OAAO,CAAEkE,MAAM,IAAK/F,OAAO,CAACgG,kBAAkB,CAACD,MAAM,CAAC,CAAC;IACzE;;IAEA;EAAA;IAAAxD,GAAA;IAAAC,KAAA,EACA,SAAOyD,MAAMA,CAAA,EAAgB;MAC3B,OAAO,IAAI,CAAClF,GAAG;IACjB;;IAEA;EAAA;IAAAwB,GAAA;IAAAC,KAAA,EACA,SAAO0D,eAAeA,CAAA,EAAgB;MACpC,OAAO,IAAI,CAACxE,YAAY;IAC1B;;IAEA;EAAA;IAAAa,GAAA;IAAAC,KAAA,EACA,SAAQjB,kBAAkBA,CAACR,GAAgB,EAAQ;MACjD;MACA,CAAC,GAAGoF,0BAAiB,EAAE,GAAG,IAAI,CAAC9G,gBAAgB,CAAC,CAACwC,OAAO,CAAEC,UAAU,IAAK;QACvE,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC;QACrB,CAAC,MAAM;UACLf,GAAG,CAACE,GAAG,CAACa,UAAU,CAACsE,IAAI,EAAEtE,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CAAC,CAAC;MACF;MACA,IAAI,CAAC1C,SAAS,CAACyC,OAAO,CAAEwE,QAAQ,IAAK;QACnCA,QAAQ,CAACC,QAAQ,CAACvF,GAAG,CAAC;MACxB,CAAC,CAAC;MACF;MACA,CAAC,GAAG,IAAI,CAACzB,eAAe,EAAE,GAAGsC,+BAAsB,CAAC,CAACC,OAAO,CACzDC,UAAU,IAAK;QACd,IAAI,OAAOA,UAAU,KAAK,UAAU,EAAE;UACpCf,GAAG,CAACE,GAAG,CAACa,UAAU,CAAC;QACrB,CAAC,MAAM;UACLf,GAAG,CAACE,GAAG,CAACa,UAAU,CAACsE,IAAI,EAAEtE,UAAU,CAACA,UAAU,CAAC;QACjD;MACF,CACF,CAAC;IACH;;IAEA;EAAA;IAAAS,GAAA;IAAAC,KAAA,EACA,SAAQH,eAAeA,CAACkE,OAA8B,EAAQ;MAC5D,IAAI,CAAC3B,GAAG,GAAG,IAAI4B,UAAe,CAAC;QAC7B,GAAGD,OAAO,CAACtE,MAAM;QACjBA,MAAM,EAAE,IAAI,CAACT;MACf,CAAC,CAAC,CACCkB,EAAE,CAAC,YAAY,EAAE,CAACN,SAAS,EAAEqE,OAAO,KAAK;QACxC,IAAIC,0BAAY,CAACtE,SAAS,EAAEqE,OAAO,EAAEF,OAAO,CAACI,MAAM,CAAC;MACtD,CAAC,CAAC,CACDjE,EAAE,CAAC,OAAO,EAAGiC,KAAK,IAAK;QACtB,IAAA/B,mBAAW,EAAC+B,KAAK,CAAC;MACpB,CAAC,CAAC;IACN;;IAEA;EAAA;IAAApC,GAAA;IAAAC,KAAA,EACA,SAAQ4B,YAAYA,CAAA,EAAS;MAC3B,IAAIwC,cAAc,GAAG,KAAK;MAE1Bd,wBAAe,CAACjE,OAAO,CAAEkE,MAAM,IAC7B/F,OAAO,CAAC0C,EAAE,CAACqD,MAAM,EAAE,MAAM;QACvB;QACA,IAAIa,cAAc,EAAE;UAClB,IAAA/D,kBAAU,EAAC,mCAAmCkD,MAAM,EAAE,CAAC;UACvD;QACF;QAEAa,cAAc,GAAG,IAAI;QACrB,IAAA/D,kBAAU,EAAC,6BAA6BkD,MAAM,GAAG,CAAC;QAElD,IAAI,CAACzB,QAAQ,CAAC,CAAC,CACZuC,IAAI,CAAC,MAAM;UACV,IAAAhE,kBAAU,EAAC,0CAA0C,CAAC;UACtD7C,OAAO,CAAC+C,IAAI,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC,CACD+D,KAAK,CAAEnC,KAAK,IAAK;UAChB,IAAA/B,mBAAW,EAAC+B,KAAK,CAAC;UAClB3E,OAAO,CAAC+C,IAAI,CAAC,CAAC,CAAC;QACjB,CAAC,CAAC;MACN,CAAC,CACH,CAAC;IACH;;IAEA;EAAA;IAAAR,GAAA;IAAAC,KAAA,EACA,SAAQ6B,oBAAoBA,CAAA,EAAS;MACnC,CACE,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,QAAQ,CACT,CAACxC,OAAO,CAAEU,GAAG,IAAK;QACjB,MAAMwE,IAAI,GAAG/G,OAAO,CAACC,GAAG,CAACsC,GAAG,CAAC;QAC7B,IAAIwE,IAAI,EAAE;UACR,MAAMnB,OAAO,GAAGoB,WAAE,CAACC,KAAK,CAACb,aAAI,CAACtC,OAAO,CAACiD,IAAI,CAAC,EAAGG,KAAK,IAAK;YACtD,IAAIA,KAAK,KAAK,QAAQ,EAAE;YACxB,IAAArE,kBAAU,EAAC,yBAAyBkE,IAAI,WAAW,CAAC;YACpD,IAAAI,wBAAa,EAAC,CAAC;YACd,IAAI,CAAC3F,UAAU,CAAkB4F,gBAAgB,CAChDC,oBACF,CAAC;UACH,CAAC,CAAC;UACF,IAAI,CAAC1B,YAAY,CAAC2B,IAAI,CAAC1B,OAAO,CAAC;QACjC;MACF,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAArD,GAAA;IAAAC,KAAA,EACA,SAAQqB,UAAUA,CAACD,GAAkB,EAAQ;MAC3C,CAAC,YAA2B;QAC1B,IAAAf,kBAAU,EAAC;UAAE1D,OAAO,EAAE,2BAA2ByE,GAAG,CAAC2D,OAAO,CAACC,IAAI;QAAI,CAAC,CAAC;QACvE,IAAI;UACF,MAAM5D,GAAG,CAAC2D,OAAO,CAAC,CAAC;UACnB,IAAA1E,kBAAU,EAAC;YACT1D,OAAO,EAAE,QAAQyE,GAAG,CAAC2D,OAAO,CAACC,IAAI,iCAAiC5D,GAAG,CAAC6D,QAAQ;UAChF,CAAC,CAAC;UACF,MAAM,IAAAvC,oBAAiB,EAACtB,GAAG,CAAC6D,QAAQ,GAAG,IAAI,EAAEC,SAAS,EAAE;YACtD3B,MAAM,EAAE,IAAI,CAACN,eAAe,CAACM;UAC/B,CAAC,CAAC;UACF,IAAI,CAAClC,UAAU,CAACD,GAAG,CAAC;QACtB,CAAC,CAAC,OAAOe,KAAK,EAAE;UACd,IAAIA,KAAK,YAAY1B,KAAK,IAAI0B,KAAK,CAAC6C,IAAI,KAAK,YAAY,EAAE;YACzD,IAAAtI,mBAAW,EAAC;cACVT,SAAS;cACTU,OAAO,EAAE,kBAAkByE,GAAG,CAAC2D,OAAO,EAAEC,IAAI;YAC9C,CAAC,CAAC;UACJ,CAAC,MAAM;YACL,MAAM7C,KAAK;UACb;QACF;MACF,CAAC,EAAE,CAAC,CAACmC,KAAK,CAAEnC,KAAK,IAAK;QACpB,IAAA/B,mBAAW,EAAC+B,KAAK,CAAC;MACpB,CAAC,CAAC;IACJ;;IAEA;EAAA;IAAApC,GAAA;IAAAC,KAAA,EACA,SAAQe,WAAWA,CAACD,QAAwB,EAAW;MACrD,OAAO,OAAOA,QAAQ,KAAK,UAAU,GACjCA,QAAQ,CAAC,CAAC,GACVA,QAAQ,CAACqE,QAAQ,CAACC,KAAK,CAAC,IAAI,EAAEtE,QAAQ,CAACuE,UAAU,IAAI,EAAE,CAAC;IAC9D;;IAEA;AACF;AACA;EAFE;IAAAtF,GAAA;IAAAC,KAAA,EAGA,SAAQvD,QAAQA,CAACL,MAAqB,EAAQ;MAC5C,IACE,CAACA,MAAM,CAACQ,SAAS,IACjBR,MAAM,CAACQ,SAAS,CAAC0I,IAAI,CAAEzB,QAAQ,IAAK,EAAEA,QAAQ,YAAY0B,kBAAQ,CAAC,CAAC,EAEpE,MAAM,IAAIC,wBAAW,CACnB,mEACF,CAAC;MAEH,IACEpJ,MAAM,CAACmB,gBAAgB,IACvBkI,MAAM,CAACC,MAAM,CAACtJ,MAAM,CAACmB,gBAAgB,CAAC,CAAC+H,IAAI,CACxCK,SAAS,IAAK,OAAOA,SAAS,KAAK,UACtC,CAAC,EAED,MAAM,IAAIH,wBAAW,CACnB,wDACF,CAAC;MAEH,IACEpJ,MAAM,CAACW,aAAa,KACnB,EAAEX,MAAM,CAACW,aAAa,YAAY6I,KAAK,CAAC,IACvCxJ,MAAM,CAACW,aAAa,CAACuI,IAAI,CACtBxE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAEqE,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,2CAA2C,CAAC;MAEpE,IACEpJ,MAAM,CAACY,iBAAiB,KACvB,EAAEZ,MAAM,CAACY,iBAAiB,YAAY4I,KAAK,CAAC,IAC3CxJ,MAAM,CAACY,iBAAiB,CAACsI,IAAI,CAC1BxE,QAAQ,IACP,EACE,OAAOA,QAAQ,KAAK,UAAU,IAC9B,OAAOA,QAAQ,EAAEqE,QAAQ,KAAK,UAAU,CAE9C,CAAC,CAAC,EAEJ,MAAM,IAAIK,wBAAW,CAAC,+CAA+C,CAAC;IAC1E;EAAC;AAAA","ignoreList":[]}

package/dist/middleware/index.d.ts

@@ -16,3 +16,4 @@ export * from './version';
 export * from './geminiFileUploader';
 export * from './checkPermission';
 export * from './multiPartFileUploader';
+export * from './verificationToken';

package/dist/middleware/index.js

@@ -201,4 +201,15 @@ Object.keys(_multiPartFileUploader).forEach(function (key) {
     }
   });
 });
+var _verificationToken = require("./verificationToken");
+Object.keys(_verificationToken).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _verificationToken[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _verificationToken[key];
+    }
+  });
+});
 //# sourceMappingURL=index.js.map

package/dist/middleware/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_error","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_healthCheck","_validate","_fourOhFour","_authJwt","_authHmac","_authStatic","_swaggerDocs","_authTls","_userResolver","_fileUploader","_metrics","_requestMetrics","_requestLogger","_version","_geminiFileUploader","_checkPermission","_multiPartFileUploader"],"sources":["../../src/middleware/index.ts"],"sourcesContent":["export * from './error';\nexport * from './healthCheck';\nexport * from './validate';\nexport * from './fourOhFour';\nexport * from './authJwt';\nexport * from './authHmac';\nexport * from './authStatic';\nexport * from './swaggerDocs';\nexport * from './authTls';\nexport * from './userResolver';\nexport * from './fileUploader';\nexport * from './metrics';\nexport * from './requestMetrics';\nexport * from './requestLogger';\nexport * from './version';\nexport * from './geminiFileUploader';\nexport * from './checkPermission';\nexport * from './multiPartFileUploader';\n"],"mappings":";;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,MAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,MAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,MAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,YAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,YAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,YAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,YAAA,CAAAL,GAAA;IAAA;EAAA;AAAA;AACA,IAAAM,SAAA,GAAAV,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAQ,SAAA,EAAAP,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAM,SAAA,CAAAN,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,SAAA,CAAAN,GAAA;IAAA;EAAA;AAAA;AACA,IAAAO,WAAA,GAAAX,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAS,WAAA,EAAAR,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAO,WAAA,CAAAP,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAG,WAAA,CAAAP,GAAA;IAAA;EAAA;AAAA;AACA,IAAAQ,QAAA,GAAAZ,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAU,QAAA,EAAAT,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAQ,QAAA,CAAAR,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAI,QAAA,CAAAR,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,SAAA,GAAAb,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAW,SAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAS,SAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAK,SAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AACA,IAAAU,WAAA,GAAAd,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAY,WAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAU,WAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAM,WAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AACA,IAAAW,YAAA,GAAAf,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAa,YAAA,EAAAZ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAW,YAAA,CAAAX,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAO,YAAA,CAAAX,GAAA;IAAA;EAAA;AAAA;AACA,IAAAY,QAAA,GAAAhB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAc,QAAA,EAAAb,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAY,QAAA,CAAAZ,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAQ,QAAA,CAAAZ,GAAA;IAAA;EAAA;AAAA;AACA,IAAAa,aAAA,GAAAjB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAe,aAAA,EAAAd,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAa,aAAA,CAAAb,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAS,aAAA,CAAAb,GAAA;IAAA;EAAA;AAAA;AACA,IAAAc,aAAA,GAAAlB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAgB,aAAA,EAAAf,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAc,aAAA,CAAAd,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAU,aAAA,CAAAd,GAAA;IAAA;EAAA;AAAA;AACA,IAAAe,QAAA,GAAAnB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAiB,QAAA,EAAAhB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAe,QAAA,CAAAf,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAW,QAAA,CAAAf,GAAA;IAAA;EAAA;AAAA;AACA,IAAAgB,eAAA,GAAApB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAkB,eAAA,EAAAjB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAgB,eAAA,CAAAhB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAY,eAAA,CAAAhB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAiB,cAAA,GAAArB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAmB,cAAA,EAAAlB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAiB,cAAA,CAAAjB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAa,cAAA,CAAAjB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAkB,QAAA,GAAAtB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAoB,QAAA,EAAAnB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAkB,QAAA,CAAAlB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAc,QAAA,CAAAlB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAmB,mBAAA,GAAAvB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAqB,mBAAA,EAAApB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAmB,mBAAA,CAAAnB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAe,mBAAA,CAAAnB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAoB,gBAAA,GAAAxB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAsB,gBAAA,EAAArB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAoB,gBAAA,CAAApB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAgB,gBAAA,CAAApB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAqB,sBAAA,GAAAzB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAuB,sBAAA,EAAAtB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAqB,sBAAA,CAAArB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAiB,sBAAA,CAAArB,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_error","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_healthCheck","_validate","_fourOhFour","_authJwt","_authHmac","_authStatic","_swaggerDocs","_authTls","_userResolver","_fileUploader","_metrics","_requestMetrics","_requestLogger","_version","_geminiFileUploader","_checkPermission","_multiPartFileUploader","_verificationToken"],"sources":["../../src/middleware/index.ts"],"sourcesContent":["export * from './error';\nexport * from './healthCheck';\nexport * from './validate';\nexport * from './fourOhFour';\nexport * from './authJwt';\nexport * from './authHmac';\nexport * from './authStatic';\nexport * from './swaggerDocs';\nexport * from './authTls';\nexport * from './userResolver';\nexport * from './fileUploader';\nexport * from './metrics';\nexport * from './requestMetrics';\nexport * from './requestLogger';\nexport * from './version';\nexport * from './geminiFileUploader';\nexport * from './checkPermission';\nexport * from './multiPartFileUploader';\nexport * from './verificationToken';"],"mappings":";;;;;AAAA,IAAAA,MAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,MAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,MAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,MAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,YAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,YAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,YAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,YAAA,CAAAL,GAAA;IAAA;EAAA;AAAA;AACA,IAAAM,SAAA,GAAAV,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAQ,SAAA,EAAAP,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAM,SAAA,CAAAN,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,SAAA,CAAAN,GAAA;IAAA;EAAA;AAAA;AACA,IAAAO,WAAA,GAAAX,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAS,WAAA,EAAAR,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAO,WAAA,CAAAP,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAG,WAAA,CAAAP,GAAA;IAAA;EAAA;AAAA;AACA,IAAAQ,QAAA,GAAAZ,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAU,QAAA,EAAAT,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAQ,QAAA,CAAAR,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAI,QAAA,CAAAR,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,SAAA,GAAAb,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAW,SAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAS,SAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAK,SAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AACA,IAAAU,WAAA,GAAAd,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAY,WAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAU,WAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAM,WAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AACA,IAAAW,YAAA,GAAAf,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAa,YAAA,EAAAZ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAW,YAAA,CAAAX,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAO,YAAA,CAAAX,GAAA;IAAA;EAAA;AAAA;AACA,IAAAY,QAAA,GAAAhB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAc,QAAA,EAAAb,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAY,QAAA,CAAAZ,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAQ,QAAA,CAAAZ,GAAA;IAAA;EAAA;AAAA;AACA,IAAAa,aAAA,GAAAjB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAe,aAAA,EAAAd,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAa,aAAA,CAAAb,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAS,aAAA,CAAAb,GAAA;IAAA;EAAA;AAAA;AACA,IAAAc,aAAA,GAAAlB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAgB,aAAA,EAAAf,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAc,aAAA,CAAAd,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAU,aAAA,CAAAd,GAAA;IAAA;EAAA;AAAA;AACA,IAAAe,QAAA,GAAAnB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAiB,QAAA,EAAAhB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAe,QAAA,CAAAf,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAW,QAAA,CAAAf,GAAA;IAAA;EAAA;AAAA;AACA,IAAAgB,eAAA,GAAApB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAkB,eAAA,EAAAjB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAgB,eAAA,CAAAhB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAY,eAAA,CAAAhB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAiB,cAAA,GAAArB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAmB,cAAA,EAAAlB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAiB,cAAA,CAAAjB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAa,cAAA,CAAAjB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAkB,QAAA,GAAAtB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAoB,QAAA,EAAAnB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAkB,QAAA,CAAAlB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAc,QAAA,CAAAlB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAmB,mBAAA,GAAAvB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAqB,mBAAA,EAAApB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAmB,mBAAA,CAAAnB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAe,mBAAA,CAAAnB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAoB,gBAAA,GAAAxB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAsB,gBAAA,EAAArB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAoB,gBAAA,CAAApB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAgB,gBAAA,CAAApB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAqB,sBAAA,GAAAzB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAuB,sBAAA,EAAAtB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAqB,sBAAA,CAAArB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAiB,sBAAA,CAAArB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAsB,kBAAA,GAAA1B,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAwB,kBAAA,EAAAvB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAsB,kBAAA,CAAAtB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAkB,kBAAA,CAAAtB,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/dist/middleware/verificationToken/index.d.ts

@@ -0,0 +1,2 @@
+export * from './verificationToken';
+export * from './verificationToken.types';

package/dist/middleware/verificationToken/index.js

@@ -0,0 +1,28 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+var _verificationToken = require("./verificationToken");
+Object.keys(_verificationToken).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _verificationToken[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _verificationToken[key];
+    }
+  });
+});
+var _verificationToken2 = require("./verificationToken.types");
+Object.keys(_verificationToken2).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _verificationToken2[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _verificationToken2[key];
+    }
+  });
+});
+//# sourceMappingURL=index.js.map

package/dist/middleware/verificationToken/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["_verificationToken","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_verificationToken2"],"sources":["../../../src/middleware/verificationToken/index.ts"],"sourcesContent":["export * from './verificationToken';\nexport * from './verificationToken.types';\n"],"mappings":";;;;;AAAA,IAAAA,kBAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,kBAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,kBAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,kBAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,mBAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,mBAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,mBAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,mBAAA,CAAAL,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/dist/middleware/verificationToken/verificationToken.d.ts

@@ -0,0 +1,3 @@
+import { Request, Response, NextFunction } from 'express';
+import { VerificationTokenMiddlewareOptions } from './verificationToken.types';
+export declare function verificationToken(action: string, options?: VerificationTokenMiddlewareOptions): (request: Request, response: Response, next: NextFunction) => void;

package/dist/middleware/verificationToken/verificationToken.js

@@ -0,0 +1,96 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.verificationToken = verificationToken;
+var _WebError = require("../../entities/WebError");
+var _report = require("../../utils/report");
+var _verificationToken = require("../../utils/verificationToken");
+const namespace = 'engine:middleware:verificationToken';
+const DEFAULT_TOKEN_HEADER = 'x-verification-token';
+const DEFAULT_OTP_HEADER = 'x-verification-otp';
+const DEFAULT_TOKEN_FIELD = 'verificationToken';
+const DEFAULT_OTP_FIELD = 'verificationOtp';
+function readString(request, headerName, fieldName) {
+  const headerValue = request.headers[headerName.toLowerCase()];
+  if (typeof headerValue === 'string') return headerValue;
+  if (Array.isArray(headerValue)) return headerValue[0];
+  const bodyValue = request.body && typeof request.body === 'object' ? request.body[fieldName] : undefined;
+  if (typeof bodyValue === 'string') return bodyValue;
+  const queryValue = request.query && typeof request.query === 'object' ? request.query[fieldName] : undefined;
+  if (typeof queryValue === 'string') return queryValue;
+  if (Array.isArray(queryValue)) return queryValue[0];
+  return undefined;
+}
+function verificationToken(action, options = {}) {
+  return (request, _response, next) => {
+    const tokenHeader = options.tokenHeader ?? DEFAULT_TOKEN_HEADER;
+    const otpHeader = options.otpHeader ?? DEFAULT_OTP_HEADER;
+    const tokenField = options.tokenField ?? DEFAULT_TOKEN_FIELD;
+    const otpField = options.otpField ?? DEFAULT_OTP_FIELD;
+    const requireOtp = options.requireOtp !== false;
+    const token = readString(request, tokenHeader, tokenField);
+    if (!token) {
+      throw new _WebError.WebError({
+        errorCode: 'verification_token_missing',
+        statusCode: 400,
+        message: 'Verification token is required',
+        data: {
+          tokenHeader,
+          tokenField
+        }
+      });
+    }
+    const otp = readString(request, otpHeader, otpField);
+    if (requireOtp && !otp) {
+      throw new _WebError.WebError({
+        errorCode: 'verification_otp_missing',
+        statusCode: 400,
+        message: 'Verification OTP is required',
+        data: {
+          otpHeader,
+          otpField
+        }
+      });
+    }
+    const resolvedSubject = options.subjectResolver ? options.subjectResolver(request) : request.user?.id ?? request.user?.sub;
+    const payload = (0, _verificationToken.verifyVerificationToken)(token, {
+      action,
+      otp: requireOtp ? otp : undefined,
+      issuer: options.issuer,
+      audience: options.audience
+    });
+    if (resolvedSubject) {
+      if (!payload.sub && options.requireSubject) {
+        throw new _WebError.WebError({
+          errorCode: 'verification_failed',
+          statusCode: 403,
+          message: 'Verification token missing subject'
+        });
+      }
+      if (payload.sub && payload.sub !== resolvedSubject) {
+        throw new _WebError.WebError({
+          errorCode: 'verification_failed',
+          statusCode: 403,
+          message: 'Verification subject mismatch',
+          data: {
+            expected: resolvedSubject,
+            actual: payload.sub
+          }
+        });
+      }
+    }
+    request.verification = payload;
+    (0, _report.reportDebug)({
+      namespace,
+      message: 'Verification token validated',
+      data: {
+        action: payload.act,
+        subject: payload.sub
+      }
+    });
+    next();
+  };
+}
+//# sourceMappingURL=verificationToken.js.map

package/dist/middleware/verificationToken/verificationToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationToken.js","names":["_WebError","require","_report","_verificationToken","namespace","DEFAULT_TOKEN_HEADER","DEFAULT_OTP_HEADER","DEFAULT_TOKEN_FIELD","DEFAULT_OTP_FIELD","readString","request","headerName","fieldName","headerValue","headers","toLowerCase","Array","isArray","bodyValue","body","undefined","queryValue","query","verificationToken","action","options","_response","next","tokenHeader","otpHeader","tokenField","otpField","requireOtp","token","WebError","errorCode","statusCode","message","data","otp","resolvedSubject","subjectResolver","user","id","sub","payload","verifyVerificationToken","issuer","audience","requireSubject","expected","actual","verification","reportDebug","act","subject"],"sources":["../../../src/middleware/verificationToken/verificationToken.ts"],"sourcesContent":["import { Request, Response, NextFunction } from 'express';\nimport { WebError } from 'entities/WebError';\nimport { reportDebug } from 'utils/report';\nimport { verifyVerificationToken } from 'utils/verificationToken';\nimport { VerificationTokenMiddlewareOptions } from './verificationToken.types';\n\nconst namespace = 'engine:middleware:verificationToken';\n\nconst DEFAULT_TOKEN_HEADER = 'x-verification-token';\nconst DEFAULT_OTP_HEADER = 'x-verification-otp';\nconst DEFAULT_TOKEN_FIELD = 'verificationToken';\nconst DEFAULT_OTP_FIELD = 'verificationOtp';\n\nfunction readString(\n  request: Request,\n  headerName: string,\n  fieldName: string\n): string | undefined {\n  const headerValue = request.headers[headerName.toLowerCase()];\n  if (typeof headerValue === 'string') return headerValue;\n  if (Array.isArray(headerValue)) return headerValue[0];\n\n  const bodyValue =\n    request.body && typeof request.body === 'object'\n      ? (request.body as Record<string, unknown>)[fieldName]\n      : undefined;\n  if (typeof bodyValue === 'string') return bodyValue;\n\n  const queryValue =\n    request.query && typeof request.query === 'object'\n      ? (request.query as Record<string, unknown>)[fieldName]\n      : undefined;\n  if (typeof queryValue === 'string') return queryValue;\n  if (Array.isArray(queryValue)) return queryValue[0];\n\n  return undefined;\n}\n\nexport function verificationToken(\n  action: string,\n  options: VerificationTokenMiddlewareOptions = {}\n): (request: Request, response: Response, next: NextFunction) => void {\n  return (request: Request, _response: Response, next: NextFunction): void => {\n    const tokenHeader = options.tokenHeader ?? DEFAULT_TOKEN_HEADER;\n    const otpHeader = options.otpHeader ?? DEFAULT_OTP_HEADER;\n    const tokenField = options.tokenField ?? DEFAULT_TOKEN_FIELD;\n    const otpField = options.otpField ?? DEFAULT_OTP_FIELD;\n    const requireOtp = options.requireOtp !== false;\n\n    const token = readString(request, tokenHeader, tokenField);\n    if (!token) {\n      throw new WebError({\n        errorCode: 'verification_token_missing',\n        statusCode: 400,\n        message: 'Verification token is required',\n        data: { tokenHeader, tokenField }\n      });\n    }\n\n    const otp = readString(request, otpHeader, otpField);\n    if (requireOtp && !otp) {\n      throw new WebError({\n        errorCode: 'verification_otp_missing',\n        statusCode: 400,\n        message: 'Verification OTP is required',\n        data: { otpHeader, otpField }\n      });\n    }\n\n    const resolvedSubject = options.subjectResolver\n      ? options.subjectResolver(request)\n      : (request.user?.id as string | undefined) ??\n        (request.user?.sub as string | undefined);\n\n    const payload = verifyVerificationToken(token, {\n      action,\n      otp: requireOtp ? otp : undefined,\n      issuer: options.issuer,\n      audience: options.audience\n    });\n\n    if (resolvedSubject) {\n      if (!payload.sub && options.requireSubject) {\n        throw new WebError({\n          errorCode: 'verification_failed',\n          statusCode: 403,\n          message: 'Verification token missing subject'\n        });\n      }\n      if (payload.sub && payload.sub !== resolvedSubject) {\n        throw new WebError({\n          errorCode: 'verification_failed',\n          statusCode: 403,\n          message: 'Verification subject mismatch',\n          data: { expected: resolvedSubject, actual: payload.sub }\n        });\n      }\n    }\n\n    request.verification = payload;\n    reportDebug({\n      namespace,\n      message: 'Verification token validated',\n      data: { action: payload.act, subject: payload.sub }\n    });\n\n    next();\n  };\n}\n"],"mappings":";;;;;;AACA,IAAAA,SAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,kBAAA,GAAAF,OAAA;AAGA,MAAMG,SAAS,GAAG,qCAAqC;AAEvD,MAAMC,oBAAoB,GAAG,sBAAsB;AACnD,MAAMC,kBAAkB,GAAG,oBAAoB;AAC/C,MAAMC,mBAAmB,GAAG,mBAAmB;AAC/C,MAAMC,iBAAiB,GAAG,iBAAiB;AAE3C,SAASC,UAAUA,CACjBC,OAAgB,EAChBC,UAAkB,EAClBC,SAAiB,EACG;EACpB,MAAMC,WAAW,GAAGH,OAAO,CAACI,OAAO,CAACH,UAAU,CAACI,WAAW,CAAC,CAAC,CAAC;EAC7D,IAAI,OAAOF,WAAW,KAAK,QAAQ,EAAE,OAAOA,WAAW;EACvD,IAAIG,KAAK,CAACC,OAAO,CAACJ,WAAW,CAAC,EAAE,OAAOA,WAAW,CAAC,CAAC,CAAC;EAErD,MAAMK,SAAS,GACbR,OAAO,CAACS,IAAI,IAAI,OAAOT,OAAO,CAACS,IAAI,KAAK,QAAQ,GAC3CT,OAAO,CAACS,IAAI,CAA6BP,SAAS,CAAC,GACpDQ,SAAS;EACf,IAAI,OAAOF,SAAS,KAAK,QAAQ,EAAE,OAAOA,SAAS;EAEnD,MAAMG,UAAU,GACdX,OAAO,CAACY,KAAK,IAAI,OAAOZ,OAAO,CAACY,KAAK,KAAK,QAAQ,GAC7CZ,OAAO,CAACY,KAAK,CAA6BV,SAAS,CAAC,GACrDQ,SAAS;EACf,IAAI,OAAOC,UAAU,KAAK,QAAQ,EAAE,OAAOA,UAAU;EACrD,IAAIL,KAAK,CAACC,OAAO,CAACI,UAAU,CAAC,EAAE,OAAOA,UAAU,CAAC,CAAC,CAAC;EAEnD,OAAOD,SAAS;AAClB;AAEO,SAASG,iBAAiBA,CAC/BC,MAAc,EACdC,OAA2C,GAAG,CAAC,CAAC,EACoB;EACpE,OAAO,CAACf,OAAgB,EAAEgB,SAAmB,EAAEC,IAAkB,KAAW;IAC1E,MAAMC,WAAW,GAAGH,OAAO,CAACG,WAAW,IAAIvB,oBAAoB;IAC/D,MAAMwB,SAAS,GAAGJ,OAAO,CAACI,SAAS,IAAIvB,kBAAkB;IACzD,MAAMwB,UAAU,GAAGL,OAAO,CAACK,UAAU,IAAIvB,mBAAmB;IAC5D,MAAMwB,QAAQ,GAAGN,OAAO,CAACM,QAAQ,IAAIvB,iBAAiB;IACtD,MAAMwB,UAAU,GAAGP,OAAO,CAACO,UAAU,KAAK,KAAK;IAE/C,MAAMC,KAAK,GAAGxB,UAAU,CAACC,OAAO,EAAEkB,WAAW,EAAEE,UAAU,CAAC;IAC1D,IAAI,CAACG,KAAK,EAAE;MACV,MAAM,IAAIC,kBAAQ,CAAC;QACjBC,SAAS,EAAE,4BAA4B;QACvCC,UAAU,EAAE,GAAG;QACfC,OAAO,EAAE,gCAAgC;QACzCC,IAAI,EAAE;UAAEV,WAAW;UAAEE;QAAW;MAClC,CAAC,CAAC;IACJ;IAEA,MAAMS,GAAG,GAAG9B,UAAU,CAACC,OAAO,EAAEmB,SAAS,EAAEE,QAAQ,CAAC;IACpD,IAAIC,UAAU,IAAI,CAACO,GAAG,EAAE;MACtB,MAAM,IAAIL,kBAAQ,CAAC;QACjBC,SAAS,EAAE,0BAA0B;QACrCC,UAAU,EAAE,GAAG;QACfC,OAAO,EAAE,8BAA8B;QACvCC,IAAI,EAAE;UAAET,SAAS;UAAEE;QAAS;MAC9B,CAAC,CAAC;IACJ;IAEA,MAAMS,eAAe,GAAGf,OAAO,CAACgB,eAAe,GAC3ChB,OAAO,CAACgB,eAAe,CAAC/B,OAAO,CAAC,GAC/BA,OAAO,CAACgC,IAAI,EAAEC,EAAE,IAChBjC,OAAO,CAACgC,IAAI,EAAEE,GAA0B;IAE7C,MAAMC,OAAO,GAAG,IAAAC,0CAAuB,EAACb,KAAK,EAAE;MAC7CT,MAAM;MACNe,GAAG,EAAEP,UAAU,GAAGO,GAAG,GAAGnB,SAAS;MACjC2B,MAAM,EAAEtB,OAAO,CAACsB,MAAM;MACtBC,QAAQ,EAAEvB,OAAO,CAACuB;IACpB,CAAC,CAAC;IAEF,IAAIR,eAAe,EAAE;MACnB,IAAI,CAACK,OAAO,CAACD,GAAG,IAAInB,OAAO,CAACwB,cAAc,EAAE;QAC1C,MAAM,IAAIf,kBAAQ,CAAC;UACjBC,SAAS,EAAE,qBAAqB;UAChCC,UAAU,EAAE,GAAG;UACfC,OAAO,EAAE;QACX,CAAC,CAAC;MACJ;MACA,IAAIQ,OAAO,CAACD,GAAG,IAAIC,OAAO,CAACD,GAAG,KAAKJ,eAAe,EAAE;QAClD,MAAM,IAAIN,kBAAQ,CAAC;UACjBC,SAAS,EAAE,qBAAqB;UAChCC,UAAU,EAAE,GAAG;UACfC,OAAO,EAAE,+BAA+B;UACxCC,IAAI,EAAE;YAAEY,QAAQ,EAAEV,eAAe;YAAEW,MAAM,EAAEN,OAAO,CAACD;UAAI;QACzD,CAAC,CAAC;MACJ;IACF;IAEAlC,OAAO,CAAC0C,YAAY,GAAGP,OAAO;IAC9B,IAAAQ,mBAAW,EAAC;MACVjD,SAAS;MACTiC,OAAO,EAAE,8BAA8B;MACvCC,IAAI,EAAE;QAAEd,MAAM,EAAEqB,OAAO,CAACS,GAAG;QAAEC,OAAO,EAAEV,OAAO,CAACD;MAAI;IACpD,CAAC,CAAC;IAEFjB,IAAI,CAAC,CAAC;EACR,CAAC;AACH","ignoreList":[]}

package/dist/middleware/verificationToken/verificationToken.types.d.ts

@@ -0,0 +1,31 @@
+import type { Request } from 'express';
+import type { VerificationTokenPayload } from '../../utils/verificationToken';
+export interface VerificationTokenMiddlewareOptions {
+    /** Header name to read verification token from */
+    tokenHeader?: string;
+    /** Header name to read OTP from */
+    otpHeader?: string;
+    /** Body or query field name to read token from */
+    tokenField?: string;
+    /** Body or query field name to read OTP from */
+    otpField?: string;
+    /** Resolve subject to verify against token sub */
+    subjectResolver?: (request: Request) => string | undefined;
+    /** Require OTP for verification */
+    requireOtp?: boolean;
+    /** Override token issuer */
+    issuer?: string;
+    /** Optional audience */
+    audience?: string | string[];
+    /** Enforce that token contains a subject when subjectResolver returns one */
+    requireSubject?: boolean;
+}
+export {};
+declare global {
+    namespace Express {
+        /** Express request object */
+        interface Request {
+            verification?: VerificationTokenPayload;
+        }
+    }
+}

package/dist/middleware/verificationToken/verificationToken.types.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=verificationToken.types.js.map

package/dist/middleware/verificationToken/verificationToken.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationToken.types.js","names":[],"sources":["../../../src/middleware/verificationToken/verificationToken.types.ts"],"sourcesContent":["import type { Request } from 'express';\nimport type { VerificationTokenPayload } from 'utils/verificationToken';\n\nexport interface VerificationTokenMiddlewareOptions {\n  /** Header name to read verification token from */\n  tokenHeader?: string;\n  /** Header name to read OTP from */\n  otpHeader?: string;\n  /** Body or query field name to read token from */\n  tokenField?: string;\n  /** Body or query field name to read OTP from */\n  otpField?: string;\n  /** Resolve subject to verify against token sub */\n  subjectResolver?: (request: Request) => string | undefined;\n  /** Require OTP for verification */\n  requireOtp?: boolean;\n  /** Override token issuer */\n  issuer?: string;\n  /** Optional audience */\n  audience?: string | string[];\n  /** Enforce that token contains a subject when subjectResolver returns one */\n  requireSubject?: boolean;\n}\n\nexport {};\n\n// Override the Express request object to add the verification payload\ndeclare global {\n  // eslint-disable-next-line @typescript-eslint/no-namespace\n  namespace Express {\n    /** Express request object */\n    interface Request {\n      verification?: VerificationTokenPayload;\n    }\n  }\n}\n"],"mappings":"","ignoreList":[]}

package/dist/utils/index.d.ts

@@ -7,6 +7,7 @@ export * from './envAssert';
 export * from './createSortedObject';
 export * from './jwt';
 export * from './hmac';
+export * from './verificationToken';
 export * from './createHttpServer';
 export * from './request';
 export * from './tlsConfig';

package/dist/utils/index.js

@@ -102,6 +102,17 @@ Object.keys(_hmac).forEach(function (key) {
     }
   });
 });
+var _verificationToken = require("./verificationToken");
+Object.keys(_verificationToken).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _verificationToken[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _verificationToken[key];
+    }
+  });
+});
 var _createHttpServer = require("./createHttpServer");
 Object.keys(_createHttpServer).forEach(function (key) {
   if (key === "default" || key === "__esModule") return;

package/dist/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["_report","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_filter","_semverCompare","_dbMigration","_checkEnvironment","_envAssert","_createSortedObject","_jwt","_hmac","_createHttpServer","_request","_tlsConfig","_sendPush","_sendEmail","_trimPathSlash","_geminiFileUpload"],"sources":["../../src/utils/index.ts"],"sourcesContent":["// general\nexport * from './report';\nexport * from './filter';\nexport * from './semverCompare';\nexport * from './dbMigration';\n\n// env\nexport * from './checkEnvironment';\nexport * from './envAssert';\n\n// auth\nexport * from './createSortedObject';\nexport * from './jwt';\nexport * from './hmac';\n\n// Networking\nexport * from './createHttpServer';\nexport * from './request';\nexport * from './tlsConfig';\nexport * from './sendPush';\nexport * from './sendEmail';\n\n// String manipulation\nexport * from './trimPathSlash';\n\n// File Upload\nexport * from './geminiFileUpload';\n"],"mappings":";;;;;AACA,IAAAA,OAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,OAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,OAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,OAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,OAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,OAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,OAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,OAAA,CAAAL,GAAA;IAAA;EAAA;AAAA;AACA,IAAAM,cAAA,GAAAV,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAQ,cAAA,EAAAP,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAM,cAAA,CAAAN,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,cAAA,CAAAN,GAAA;IAAA;EAAA;AAAA;AACA,IAAAO,YAAA,GAAAX,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAS,YAAA,EAAAR,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAO,YAAA,CAAAP,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAG,YAAA,CAAAP,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAQ,iBAAA,GAAAZ,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAU,iBAAA,EAAAT,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAQ,iBAAA,CAAAR,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAI,iBAAA,CAAAR,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,UAAA,GAAAb,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAW,UAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAS,UAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAK,UAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAU,mBAAA,GAAAd,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAY,mBAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAU,mBAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAM,mBAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AACA,IAAAW,IAAA,GAAAf,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAa,IAAA,EAAAZ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAW,IAAA,CAAAX,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAO,IAAA,CAAAX,GAAA;IAAA;EAAA;AAAA;AACA,IAAAY,KAAA,GAAAhB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAc,KAAA,EAAAb,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAY,KAAA,CAAAZ,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAQ,KAAA,CAAAZ,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAa,iBAAA,GAAAjB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAe,iBAAA,EAAAd,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAa,iBAAA,CAAAb,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAS,iBAAA,CAAAb,GAAA;IAAA;EAAA;AAAA;AACA,IAAAc,QAAA,GAAAlB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAgB,QAAA,EAAAf,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAc,QAAA,CAAAd,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAU,QAAA,CAAAd,GAAA;IAAA;EAAA;AAAA;AACA,IAAAe,UAAA,GAAAnB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAiB,UAAA,EAAAhB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAe,UAAA,CAAAf,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAW,UAAA,CAAAf,GAAA;IAAA;EAAA;AAAA;AACA,IAAAgB,SAAA,GAAApB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAkB,SAAA,EAAAjB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAgB,SAAA,CAAAhB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAY,SAAA,CAAAhB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAiB,UAAA,GAAArB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAmB,UAAA,EAAAlB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAiB,UAAA,CAAAjB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAa,UAAA,CAAAjB,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAkB,cAAA,GAAAtB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAoB,cAAA,EAAAnB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAkB,cAAA,CAAAlB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAc,cAAA,CAAAlB,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAmB,iBAAA,GAAAvB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAqB,iBAAA,EAAApB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAmB,iBAAA,CAAAnB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAe,iBAAA,CAAAnB,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}
+{"version":3,"file":"index.js","names":["_report","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_filter","_semverCompare","_dbMigration","_checkEnvironment","_envAssert","_createSortedObject","_jwt","_hmac","_verificationToken","_createHttpServer","_request","_tlsConfig","_sendPush","_sendEmail","_trimPathSlash","_geminiFileUpload"],"sources":["../../src/utils/index.ts"],"sourcesContent":["// general\nexport * from './report';\nexport * from './filter';\nexport * from './semverCompare';\nexport * from './dbMigration';\n\n// env\nexport * from './checkEnvironment';\nexport * from './envAssert';\n\n// auth\nexport * from './createSortedObject';\nexport * from './jwt';\nexport * from './hmac';\nexport * from './verificationToken';\n\n// Networking\nexport * from './createHttpServer';\nexport * from './request';\nexport * from './tlsConfig';\nexport * from './sendPush';\nexport * from './sendEmail';\n\n// String manipulation\nexport * from './trimPathSlash';\n\n// File Upload\nexport * from './geminiFileUpload';\n"],"mappings":";;;;;AACA,IAAAA,OAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,OAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,OAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,OAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,OAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,OAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,OAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,OAAA,CAAAL,GAAA;IAAA;EAAA;AAAA;AACA,IAAAM,cAAA,GAAAV,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAQ,cAAA,EAAAP,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAM,cAAA,CAAAN,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAE,cAAA,CAAAN,GAAA;IAAA;EAAA;AAAA;AACA,IAAAO,YAAA,GAAAX,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAS,YAAA,EAAAR,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAO,YAAA,CAAAP,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAG,YAAA,CAAAP,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAQ,iBAAA,GAAAZ,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAU,iBAAA,EAAAT,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAQ,iBAAA,CAAAR,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAI,iBAAA,CAAAR,GAAA;IAAA;EAAA;AAAA;AACA,IAAAS,UAAA,GAAAb,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAW,UAAA,EAAAV,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAS,UAAA,CAAAT,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAK,UAAA,CAAAT,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAU,mBAAA,GAAAd,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAY,mBAAA,EAAAX,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAU,mBAAA,CAAAV,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAM,mBAAA,CAAAV,GAAA;IAAA;EAAA;AAAA;AACA,IAAAW,IAAA,GAAAf,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAa,IAAA,EAAAZ,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAW,IAAA,CAAAX,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAO,IAAA,CAAAX,GAAA;IAAA;EAAA;AAAA;AACA,IAAAY,KAAA,GAAAhB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAc,KAAA,EAAAb,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAY,KAAA,CAAAZ,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAQ,KAAA,CAAAZ,GAAA;IAAA;EAAA;AAAA;AACA,IAAAa,kBAAA,GAAAjB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAe,kBAAA,EAAAd,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAa,kBAAA,CAAAb,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAS,kBAAA,CAAAb,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAc,iBAAA,GAAAlB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAgB,iBAAA,EAAAf,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAc,iBAAA,CAAAd,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAU,iBAAA,CAAAd,GAAA;IAAA;EAAA;AAAA;AACA,IAAAe,QAAA,GAAAnB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAiB,QAAA,EAAAhB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAe,QAAA,CAAAf,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAW,QAAA,CAAAf,GAAA;IAAA;EAAA;AAAA;AACA,IAAAgB,UAAA,GAAApB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAkB,UAAA,EAAAjB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAgB,UAAA,CAAAhB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAY,UAAA,CAAAhB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAiB,SAAA,GAAArB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAmB,SAAA,EAAAlB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAiB,SAAA,CAAAjB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAa,SAAA,CAAAjB,GAAA;IAAA;EAAA;AAAA;AACA,IAAAkB,UAAA,GAAAtB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAoB,UAAA,EAAAnB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAkB,UAAA,CAAAlB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAc,UAAA,CAAAlB,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAmB,cAAA,GAAAvB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAqB,cAAA,EAAApB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAmB,cAAA,CAAAnB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAe,cAAA,CAAAnB,GAAA;IAAA;EAAA;AAAA;AAGA,IAAAoB,iBAAA,GAAAxB,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAsB,iBAAA,EAAArB,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAoB,iBAAA,CAAApB,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAgB,iBAAA,CAAApB,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/dist/utils/verificationToken/index.d.ts

@@ -0,0 +1,2 @@
+export * from './verificationToken';
+export * from './verificationToken.types';

package/dist/utils/verificationToken/index.js

@@ -0,0 +1,28 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+var _verificationToken = require("./verificationToken");
+Object.keys(_verificationToken).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _verificationToken[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _verificationToken[key];
+    }
+  });
+});
+var _verificationToken2 = require("./verificationToken.types");
+Object.keys(_verificationToken2).forEach(function (key) {
+  if (key === "default" || key === "__esModule") return;
+  if (key in exports && exports[key] === _verificationToken2[key]) return;
+  Object.defineProperty(exports, key, {
+    enumerable: true,
+    get: function () {
+      return _verificationToken2[key];
+    }
+  });
+});
+//# sourceMappingURL=index.js.map

package/dist/utils/verificationToken/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":["_verificationToken","require","Object","keys","forEach","key","exports","defineProperty","enumerable","get","_verificationToken2"],"sources":["../../../src/utils/verificationToken/index.ts"],"sourcesContent":["export * from './verificationToken';\nexport * from './verificationToken.types';\n"],"mappings":";;;;;AAAA,IAAAA,kBAAA,GAAAC,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAH,kBAAA,EAAAI,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAL,kBAAA,CAAAK,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAT,kBAAA,CAAAK,GAAA;IAAA;EAAA;AAAA;AACA,IAAAK,mBAAA,GAAAT,OAAA;AAAAC,MAAA,CAAAC,IAAA,CAAAO,mBAAA,EAAAN,OAAA,WAAAC,GAAA;EAAA,IAAAA,GAAA,kBAAAA,GAAA;EAAA,IAAAA,GAAA,IAAAC,OAAA,IAAAA,OAAA,CAAAD,GAAA,MAAAK,mBAAA,CAAAL,GAAA;EAAAH,MAAA,CAAAK,cAAA,CAAAD,OAAA,EAAAD,GAAA;IAAAG,UAAA;IAAAC,GAAA,WAAAA,CAAA;MAAA,OAAAC,mBAAA,CAAAL,GAAA;IAAA;EAAA;AAAA","ignoreList":[]}

package/dist/utils/verificationToken/verificationToken.d.ts

@@ -0,0 +1,4 @@
+import { VerificationTokenPayload, VerificationTokenOptions, VerificationTokenResult, VerifyVerificationTokenOptions } from './verificationToken.types';
+export declare function createVerificationToken(options: VerificationTokenOptions): VerificationTokenResult;
+export declare const verificationToken: typeof createVerificationToken;
+export declare function verifyVerificationToken(token: string, options?: VerifyVerificationTokenOptions): VerificationTokenPayload;

package/dist/utils/verificationToken/verificationToken.js

@@ -0,0 +1,192 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.createVerificationToken = createVerificationToken;
+exports.verificationToken = void 0;
+exports.verifyVerificationToken = verifyVerificationToken;
+var _crypto = require("crypto");
+var _jsonwebtoken = require("jsonwebtoken");
+var _EngineError = require("../../entities/EngineError");
+var _WebError = require("../../entities/WebError");
+var _checkEnvironment = require("../checkEnvironment");
+var _envAssert = require("../envAssert");
+const DEFAULT_OTP_LENGTH = 6;
+const DEFAULT_EXPIRES_IN_SECONDS = 5 * 60;
+const DEFAULT_ISSUER = 'node-server-engine';
+function normalizeAction(action) {
+  if (!action || typeof action !== 'string') {
+    throw new _EngineError.EngineError({
+      message: 'Verification token action must be a non-empty string',
+      data: {
+        action
+      }
+    });
+  }
+  return action.trim().toUpperCase();
+}
+function resolveOtpLength(length) {
+  if (length === undefined) return DEFAULT_OTP_LENGTH;
+  if (!Number.isInteger(length) || length < 4 || length > 10) {
+    throw new _EngineError.EngineError({
+      message: 'OTP length must be an integer between 4 and 10',
+      data: {
+        length
+      }
+    });
+  }
+  return length;
+}
+function resolveExpiresInSeconds(expiresInSeconds) {
+  if (expiresInSeconds === undefined) return DEFAULT_EXPIRES_IN_SECONDS;
+  if (!Number.isInteger(expiresInSeconds) || expiresInSeconds < 30) {
+    throw new _EngineError.EngineError({
+      message: 'Verification token expiration must be at least 30 seconds',
+      data: {
+        expiresInSeconds
+      }
+    });
+  }
+  return expiresInSeconds;
+}
+function getTokenSecret() {
+  const secret = process.env.VERIFICATION_TOKEN_SECRET;
+  if (!secret) {
+    (0, _checkEnvironment.assertEnvironment)({
+      VERIFICATION_TOKEN_SECRET: _envAssert.envAssert.isString()
+    });
+  }
+  return secret;
+}
+function getOtpSecret() {
+  return process.env.VERIFICATION_TOKEN_OTP_SECRET ?? getTokenSecret();
+}
+function hashOtp(otp, secret) {
+  return (0, _crypto.createHmac)('sha256', secret).update(otp).digest('hex');
+}
+function generateOtp(length) {
+  let otp = '';
+  for (let index = 0; index < length; index += 1) {
+    otp += (0, _crypto.randomInt)(0, 10).toString();
+  }
+  return otp;
+}
+function buildIssuer(issuer) {
+  return issuer ?? process.env.VERIFICATION_TOKEN_ISSUER ?? DEFAULT_ISSUER;
+}
+function buildSignOptions(options) {
+  const signOptions = {
+    algorithm: 'HS256',
+    expiresIn: resolveExpiresInSeconds(options.expiresInSeconds),
+    issuer: buildIssuer(options.issuer)
+  };
+  if (options.audience) {
+    signOptions.audience = options.audience;
+  } else if (process.env.VERIFICATION_TOKEN_AUDIENCE) {
+    signOptions.audience = process.env.VERIFICATION_TOKEN_AUDIENCE;
+  }
+  return signOptions;
+}
+function normalizeAudience(audience) {
+  if (!audience) return undefined;
+  if (Array.isArray(audience)) {
+    if (audience.length === 0) return undefined;
+    return [audience[0], ...audience.slice(1)];
+  }
+  return audience;
+}
+function buildVerifyOptions(options) {
+  const verifyOptions = {
+    algorithms: ['HS256'],
+    issuer: buildIssuer(options.issuer)
+  };
+  const normalizedAudience = normalizeAudience(options.audience ?? process.env.VERIFICATION_TOKEN_AUDIENCE);
+  if (normalizedAudience) verifyOptions.audience = normalizedAudience;
+  return verifyOptions;
+}
+function createVerificationToken(options) {
+  const action = normalizeAction(options.action);
+  const otpLength = resolveOtpLength(options.otpLength);
+  const tokenSecret = getTokenSecret();
+  const otpSecret = getOtpSecret();
+  const otp = generateOtp(otpLength);
+  const signOptions = buildSignOptions(options);
+  const payload = {
+    act: action,
+    otp: hashOtp(otp, otpSecret),
+    jti: (0, _crypto.randomUUID)(),
+    sub: options.subject
+  };
+  const token = (0, _jsonwebtoken.sign)(payload, tokenSecret, signOptions);
+  const expiresInSeconds = signOptions.expiresIn;
+  return {
+    token,
+    otp,
+    expiresAt: Date.now() + expiresInSeconds * 1000,
+    action
+  };
+}
+const verificationToken = exports.verificationToken = createVerificationToken;
+function verifyVerificationToken(token, options = {}) {
+  const tokenSecret = getTokenSecret();
+  let payload;
+  try {
+    payload = (0, _jsonwebtoken.verify)(token, tokenSecret, buildVerifyOptions(options));
+  } catch (error) {
+    throw new _WebError.WebError({
+      errorCode: 'unauthorized',
+      statusCode: 401,
+      message: 'Invalid verification token supplied',
+      data: {
+        token
+      },
+      error: error instanceof Error ? error : undefined
+    });
+  }
+  if (!payload?.act || !payload?.otp || !payload?.jti) {
+    throw new _WebError.WebError({
+      errorCode: 'unauthorized',
+      statusCode: 401,
+      message: 'Malformed verification token payload'
+    });
+  }
+  if (options.action) {
+    const action = normalizeAction(options.action);
+    if (payload.act !== action) {
+      throw new _WebError.WebError({
+        errorCode: 'verification_failed',
+        statusCode: 403,
+        message: 'Verification action mismatch',
+        data: {
+          expected: action,
+          actual: payload.act
+        }
+      });
+    }
+  }
+  if (options.subject && payload.sub !== options.subject) {
+    throw new _WebError.WebError({
+      errorCode: 'verification_failed',
+      statusCode: 403,
+      message: 'Verification subject mismatch',
+      data: {
+        expected: options.subject,
+        actual: payload.sub
+      }
+    });
+  }
+  if (options.otp) {
+    const otpSecret = getOtpSecret();
+    const expectedHash = hashOtp(options.otp, otpSecret);
+    if (payload.otp !== expectedHash) {
+      throw new _WebError.WebError({
+        errorCode: 'verification_failed',
+        statusCode: 403,
+        message: 'Verification OTP mismatch'
+      });
+    }
+  }
+  return payload;
+}
+//# sourceMappingURL=verificationToken.js.map

package/dist/utils/verificationToken/verificationToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationToken.js","names":["_crypto","require","_jsonwebtoken","_EngineError","_WebError","_checkEnvironment","_envAssert","DEFAULT_OTP_LENGTH","DEFAULT_EXPIRES_IN_SECONDS","DEFAULT_ISSUER","normalizeAction","action","EngineError","message","data","trim","toUpperCase","resolveOtpLength","length","undefined","Number","isInteger","resolveExpiresInSeconds","expiresInSeconds","getTokenSecret","secret","process","env","VERIFICATION_TOKEN_SECRET","assertEnvironment","envAssert","isString","getOtpSecret","VERIFICATION_TOKEN_OTP_SECRET","hashOtp","otp","createHmac","update","digest","generateOtp","index","randomInt","toString","buildIssuer","issuer","VERIFICATION_TOKEN_ISSUER","buildSignOptions","options","signOptions","algorithm","expiresIn","audience","VERIFICATION_TOKEN_AUDIENCE","normalizeAudience","Array","isArray","slice","buildVerifyOptions","verifyOptions","algorithms","normalizedAudience","createVerificationToken","otpLength","tokenSecret","otpSecret","payload","act","jti","randomUUID","sub","subject","token","sign","expiresAt","Date","now","verificationToken","exports","verifyVerificationToken","verify","error","WebError","errorCode","statusCode","Error","expected","actual","expectedHash"],"sources":["../../../src/utils/verificationToken/verificationToken.ts"],"sourcesContent":["import { randomInt, randomUUID, createHmac } from 'crypto';\nimport { sign, verify, SignOptions, VerifyOptions } from 'jsonwebtoken';\nimport { EngineError } from 'entities/EngineError';\nimport { WebError } from 'entities/WebError';\nimport { assertEnvironment } from 'utils/checkEnvironment';\nimport { envAssert } from 'utils/envAssert';\nimport {\n  VerificationTokenPayload,\n  VerificationTokenOptions,\n  VerificationTokenResult,\n  VerifyVerificationTokenOptions\n} from './verificationToken.types';\n\nconst DEFAULT_OTP_LENGTH = 6;\nconst DEFAULT_EXPIRES_IN_SECONDS = 5 * 60;\nconst DEFAULT_ISSUER = 'node-server-engine';\n\nfunction normalizeAction(action: string): string {\n  if (!action || typeof action !== 'string') {\n    throw new EngineError({\n      message: 'Verification token action must be a non-empty string',\n      data: { action }\n    });\n  }\n  return action.trim().toUpperCase();\n}\n\nfunction resolveOtpLength(length?: number): number {\n  if (length === undefined) return DEFAULT_OTP_LENGTH;\n  if (!Number.isInteger(length) || length < 4 || length > 10) {\n    throw new EngineError({\n      message: 'OTP length must be an integer between 4 and 10',\n      data: { length }\n    });\n  }\n  return length;\n}\n\nfunction resolveExpiresInSeconds(expiresInSeconds?: number): number {\n  if (expiresInSeconds === undefined) return DEFAULT_EXPIRES_IN_SECONDS;\n  if (!Number.isInteger(expiresInSeconds) || expiresInSeconds < 30) {\n    throw new EngineError({\n      message: 'Verification token expiration must be at least 30 seconds',\n      data: { expiresInSeconds }\n    });\n  }\n  return expiresInSeconds;\n}\n\nfunction getTokenSecret(): string {\n  const secret = process.env.VERIFICATION_TOKEN_SECRET;\n  if (!secret) {\n    assertEnvironment({ VERIFICATION_TOKEN_SECRET: envAssert.isString() });\n  }\n  return secret as string;\n}\n\nfunction getOtpSecret(): string {\n  return process.env.VERIFICATION_TOKEN_OTP_SECRET ?? getTokenSecret();\n}\n\nfunction hashOtp(otp: string, secret: string): string {\n  return createHmac('sha256', secret).update(otp).digest('hex');\n}\n\nfunction generateOtp(length: number): string {\n  let otp = '';\n  for (let index = 0; index < length; index += 1) {\n    otp += randomInt(0, 10).toString();\n  }\n  return otp;\n}\n\nfunction buildIssuer(issuer?: string): string {\n  return issuer ?? process.env.VERIFICATION_TOKEN_ISSUER ?? DEFAULT_ISSUER;\n}\n\nfunction buildSignOptions(options: VerificationTokenOptions): SignOptions {\n  const signOptions: SignOptions = {\n    algorithm: 'HS256',\n    expiresIn: resolveExpiresInSeconds(options.expiresInSeconds),\n    issuer: buildIssuer(options.issuer)\n  };\n  if (options.audience) {\n    signOptions.audience = options.audience;\n  } else if (process.env.VERIFICATION_TOKEN_AUDIENCE) {\n    signOptions.audience = process.env.VERIFICATION_TOKEN_AUDIENCE;\n  }\n  return signOptions;\n}\n\nfunction normalizeAudience(\n  audience?: string | string[]\n): VerifyOptions['audience'] | undefined {\n  if (!audience) return undefined;\n  if (Array.isArray(audience)) {\n    if (audience.length === 0) return undefined;\n    return [audience[0], ...audience.slice(1)];\n  }\n  return audience;\n}\n\nfunction buildVerifyOptions(options: VerifyVerificationTokenOptions): VerifyOptions {\n  const verifyOptions: VerifyOptions = {\n    algorithms: ['HS256'],\n    issuer: buildIssuer(options.issuer)\n  };\n  const normalizedAudience = normalizeAudience(\n    options.audience ?? process.env.VERIFICATION_TOKEN_AUDIENCE\n  );\n  if (normalizedAudience) verifyOptions.audience = normalizedAudience;\n  return verifyOptions;\n}\n\nexport function createVerificationToken(\n  options: VerificationTokenOptions\n): VerificationTokenResult {\n  const action = normalizeAction(options.action);\n  const otpLength = resolveOtpLength(options.otpLength);\n  const tokenSecret = getTokenSecret();\n  const otpSecret = getOtpSecret();\n  const otp = generateOtp(otpLength);\n  const signOptions = buildSignOptions(options);\n  const payload: VerificationTokenPayload = {\n    act: action,\n    otp: hashOtp(otp, otpSecret),\n    jti: randomUUID(),\n    sub: options.subject\n  };\n\n  const token = sign(payload, tokenSecret, signOptions);\n  const expiresInSeconds = signOptions.expiresIn as number;\n\n  return {\n    token,\n    otp,\n    expiresAt: Date.now() + expiresInSeconds * 1000,\n    action\n  };\n}\n\nexport const verificationToken = createVerificationToken;\n\nexport function verifyVerificationToken(\n  token: string,\n  options: VerifyVerificationTokenOptions = {}\n): VerificationTokenPayload {\n  const tokenSecret = getTokenSecret();\n  let payload: VerificationTokenPayload;\n\n  try {\n    payload = verify(token, tokenSecret, buildVerifyOptions(options)) as VerificationTokenPayload;\n  } catch (error: unknown) {\n    throw new WebError({\n      errorCode: 'unauthorized',\n      statusCode: 401,\n      message: 'Invalid verification token supplied',\n      data: { token },\n      error: error instanceof Error ? error : undefined\n    });\n  }\n\n  if (!payload?.act || !payload?.otp || !payload?.jti) {\n    throw new WebError({\n      errorCode: 'unauthorized',\n      statusCode: 401,\n      message: 'Malformed verification token payload'\n    });\n  }\n\n  if (options.action) {\n    const action = normalizeAction(options.action);\n    if (payload.act !== action) {\n      throw new WebError({\n        errorCode: 'verification_failed',\n        statusCode: 403,\n        message: 'Verification action mismatch',\n        data: { expected: action, actual: payload.act }\n      });\n    }\n  }\n\n  if (options.subject && payload.sub !== options.subject) {\n    throw new WebError({\n      errorCode: 'verification_failed',\n      statusCode: 403,\n      message: 'Verification subject mismatch',\n      data: { expected: options.subject, actual: payload.sub }\n    });\n  }\n\n  if (options.otp) {\n    const otpSecret = getOtpSecret();\n    const expectedHash = hashOtp(options.otp, otpSecret);\n    if (payload.otp !== expectedHash) {\n      throw new WebError({\n        errorCode: 'verification_failed',\n        statusCode: 403,\n        message: 'Verification OTP mismatch'\n      });\n    }\n  }\n\n  return payload;\n}\n"],"mappings":";;;;;;;;AAAA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,aAAA,GAAAD,OAAA;AACA,IAAAE,YAAA,GAAAF,OAAA;AACA,IAAAG,SAAA,GAAAH,OAAA;AACA,IAAAI,iBAAA,GAAAJ,OAAA;AACA,IAAAK,UAAA,GAAAL,OAAA;AAQA,MAAMM,kBAAkB,GAAG,CAAC;AAC5B,MAAMC,0BAA0B,GAAG,CAAC,GAAG,EAAE;AACzC,MAAMC,cAAc,GAAG,oBAAoB;AAE3C,SAASC,eAAeA,CAACC,MAAc,EAAU;EAC/C,IAAI,CAACA,MAAM,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IACzC,MAAM,IAAIC,wBAAW,CAAC;MACpBC,OAAO,EAAE,sDAAsD;MAC/DC,IAAI,EAAE;QAAEH;MAAO;IACjB,CAAC,CAAC;EACJ;EACA,OAAOA,MAAM,CAACI,IAAI,CAAC,CAAC,CAACC,WAAW,CAAC,CAAC;AACpC;AAEA,SAASC,gBAAgBA,CAACC,MAAe,EAAU;EACjD,IAAIA,MAAM,KAAKC,SAAS,EAAE,OAAOZ,kBAAkB;EACnD,IAAI,CAACa,MAAM,CAACC,SAAS,CAACH,MAAM,CAAC,IAAIA,MAAM,GAAG,CAAC,IAAIA,MAAM,GAAG,EAAE,EAAE;IAC1D,MAAM,IAAIN,wBAAW,CAAC;MACpBC,OAAO,EAAE,gDAAgD;MACzDC,IAAI,EAAE;QAAEI;MAAO;IACjB,CAAC,CAAC;EACJ;EACA,OAAOA,MAAM;AACf;AAEA,SAASI,uBAAuBA,CAACC,gBAAyB,EAAU;EAClE,IAAIA,gBAAgB,KAAKJ,SAAS,EAAE,OAAOX,0BAA0B;EACrE,IAAI,CAACY,MAAM,CAACC,SAAS,CAACE,gBAAgB,CAAC,IAAIA,gBAAgB,GAAG,EAAE,EAAE;IAChE,MAAM,IAAIX,wBAAW,CAAC;MACpBC,OAAO,EAAE,2DAA2D;MACpEC,IAAI,EAAE;QAAES;MAAiB;IAC3B,CAAC,CAAC;EACJ;EACA,OAAOA,gBAAgB;AACzB;AAEA,SAASC,cAAcA,CAAA,EAAW;EAChC,MAAMC,MAAM,GAAGC,OAAO,CAACC,GAAG,CAACC,yBAAyB;EACpD,IAAI,CAACH,MAAM,EAAE;IACX,IAAAI,mCAAiB,EAAC;MAAED,yBAAyB,EAAEE,oBAAS,CAACC,QAAQ,CAAC;IAAE,CAAC,CAAC;EACxE;EACA,OAAON,MAAM;AACf;AAEA,SAASO,YAAYA,CAAA,EAAW;EAC9B,OAAON,OAAO,CAACC,GAAG,CAACM,6BAA6B,IAAIT,cAAc,CAAC,CAAC;AACtE;AAEA,SAASU,OAAOA,CAACC,GAAW,EAAEV,MAAc,EAAU;EACpD,OAAO,IAAAW,kBAAU,EAAC,QAAQ,EAAEX,MAAM,CAAC,CAACY,MAAM,CAACF,GAAG,CAAC,CAACG,MAAM,CAAC,KAAK,CAAC;AAC/D;AAEA,SAASC,WAAWA,CAACrB,MAAc,EAAU;EAC3C,IAAIiB,GAAG,GAAG,EAAE;EACZ,KAAK,IAAIK,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGtB,MAAM,EAAEsB,KAAK,IAAI,CAAC,EAAE;IAC9CL,GAAG,IAAI,IAAAM,iBAAS,EAAC,CAAC,EAAE,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC;EACpC;EACA,OAAOP,GAAG;AACZ;AAEA,SAASQ,WAAWA,CAACC,MAAe,EAAU;EAC5C,OAAOA,MAAM,IAAIlB,OAAO,CAACC,GAAG,CAACkB,yBAAyB,IAAIpC,cAAc;AAC1E;AAEA,SAASqC,gBAAgBA,CAACC,OAAiC,EAAe;EACxE,MAAMC,WAAwB,GAAG;IAC/BC,SAAS,EAAE,OAAO;IAClBC,SAAS,EAAE5B,uBAAuB,CAACyB,OAAO,CAACxB,gBAAgB,CAAC;IAC5DqB,MAAM,EAAED,WAAW,CAACI,OAAO,CAACH,MAAM;EACpC,CAAC;EACD,IAAIG,OAAO,CAACI,QAAQ,EAAE;IACpBH,WAAW,CAACG,QAAQ,GAAGJ,OAAO,CAACI,QAAQ;EACzC,CAAC,MAAM,IAAIzB,OAAO,CAACC,GAAG,CAACyB,2BAA2B,EAAE;IAClDJ,WAAW,CAACG,QAAQ,GAAGzB,OAAO,CAACC,GAAG,CAACyB,2BAA2B;EAChE;EACA,OAAOJ,WAAW;AACpB;AAEA,SAASK,iBAAiBA,CACxBF,QAA4B,EACW;EACvC,IAAI,CAACA,QAAQ,EAAE,OAAOhC,SAAS;EAC/B,IAAImC,KAAK,CAACC,OAAO,CAACJ,QAAQ,CAAC,EAAE;IAC3B,IAAIA,QAAQ,CAACjC,MAAM,KAAK,CAAC,EAAE,OAAOC,SAAS;IAC3C,OAAO,CAACgC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAGA,QAAQ,CAACK,KAAK,CAAC,CAAC,CAAC,CAAC;EAC5C;EACA,OAAOL,QAAQ;AACjB;AAEA,SAASM,kBAAkBA,CAACV,OAAuC,EAAiB;EAClF,MAAMW,aAA4B,GAAG;IACnCC,UAAU,EAAE,CAAC,OAAO,CAAC;IACrBf,MAAM,EAAED,WAAW,CAACI,OAAO,CAACH,MAAM;EACpC,CAAC;EACD,MAAMgB,kBAAkB,GAAGP,iBAAiB,CAC1CN,OAAO,CAACI,QAAQ,IAAIzB,OAAO,CAACC,GAAG,CAACyB,2BAClC,CAAC;EACD,IAAIQ,kBAAkB,EAAEF,aAAa,CAACP,QAAQ,GAAGS,kBAAkB;EACnE,OAAOF,aAAa;AACtB;AAEO,SAASG,uBAAuBA,CACrCd,OAAiC,EACR;EACzB,MAAMpC,MAAM,GAAGD,eAAe,CAACqC,OAAO,CAACpC,MAAM,CAAC;EAC9C,MAAMmD,SAAS,GAAG7C,gBAAgB,CAAC8B,OAAO,CAACe,SAAS,CAAC;EACrD,MAAMC,WAAW,GAAGvC,cAAc,CAAC,CAAC;EACpC,MAAMwC,SAAS,GAAGhC,YAAY,CAAC,CAAC;EAChC,MAAMG,GAAG,GAAGI,WAAW,CAACuB,SAAS,CAAC;EAClC,MAAMd,WAAW,GAAGF,gBAAgB,CAACC,OAAO,CAAC;EAC7C,MAAMkB,OAAiC,GAAG;IACxCC,GAAG,EAAEvD,MAAM;IACXwB,GAAG,EAAED,OAAO,CAACC,GAAG,EAAE6B,SAAS,CAAC;IAC5BG,GAAG,EAAE,IAAAC,kBAAU,EAAC,CAAC;IACjBC,GAAG,EAAEtB,OAAO,CAACuB;EACf,CAAC;EAED,MAAMC,KAAK,GAAG,IAAAC,kBAAI,EAACP,OAAO,EAAEF,WAAW,EAAEf,WAAW,CAAC;EACrD,MAAMzB,gBAAgB,GAAGyB,WAAW,CAACE,SAAmB;EAExD,OAAO;IACLqB,KAAK;IACLpC,GAAG;IACHsC,SAAS,EAAEC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAGpD,gBAAgB,GAAG,IAAI;IAC/CZ;EACF,CAAC;AACH;AAEO,MAAMiE,iBAAiB,GAAAC,OAAA,CAAAD,iBAAA,GAAGf,uBAAuB;AAEjD,SAASiB,uBAAuBA,CACrCP,KAAa,EACbxB,OAAuC,GAAG,CAAC,CAAC,EAClB;EAC1B,MAAMgB,WAAW,GAAGvC,cAAc,CAAC,CAAC;EACpC,IAAIyC,OAAiC;EAErC,IAAI;IACFA,OAAO,GAAG,IAAAc,oBAAM,EAACR,KAAK,EAAER,WAAW,EAAEN,kBAAkB,CAACV,OAAO,CAAC,CAA6B;EAC/F,CAAC,CAAC,OAAOiC,KAAc,EAAE;IACvB,MAAM,IAAIC,kBAAQ,CAAC;MACjBC,SAAS,EAAE,cAAc;MACzBC,UAAU,EAAE,GAAG;MACftE,OAAO,EAAE,qCAAqC;MAC9CC,IAAI,EAAE;QAAEyD;MAAM,CAAC;MACfS,KAAK,EAAEA,KAAK,YAAYI,KAAK,GAAGJ,KAAK,GAAG7D;IAC1C,CAAC,CAAC;EACJ;EAEA,IAAI,CAAC8C,OAAO,EAAEC,GAAG,IAAI,CAACD,OAAO,EAAE9B,GAAG,IAAI,CAAC8B,OAAO,EAAEE,GAAG,EAAE;IACnD,MAAM,IAAIc,kBAAQ,CAAC;MACjBC,SAAS,EAAE,cAAc;MACzBC,UAAU,EAAE,GAAG;MACftE,OAAO,EAAE;IACX,CAAC,CAAC;EACJ;EAEA,IAAIkC,OAAO,CAACpC,MAAM,EAAE;IAClB,MAAMA,MAAM,GAAGD,eAAe,CAACqC,OAAO,CAACpC,MAAM,CAAC;IAC9C,IAAIsD,OAAO,CAACC,GAAG,KAAKvD,MAAM,EAAE;MAC1B,MAAM,IAAIsE,kBAAQ,CAAC;QACjBC,SAAS,EAAE,qBAAqB;QAChCC,UAAU,EAAE,GAAG;QACftE,OAAO,EAAE,8BAA8B;QACvCC,IAAI,EAAE;UAAEuE,QAAQ,EAAE1E,MAAM;UAAE2E,MAAM,EAAErB,OAAO,CAACC;QAAI;MAChD,CAAC,CAAC;IACJ;EACF;EAEA,IAAInB,OAAO,CAACuB,OAAO,IAAIL,OAAO,CAACI,GAAG,KAAKtB,OAAO,CAACuB,OAAO,EAAE;IACtD,MAAM,IAAIW,kBAAQ,CAAC;MACjBC,SAAS,EAAE,qBAAqB;MAChCC,UAAU,EAAE,GAAG;MACftE,OAAO,EAAE,+BAA+B;MACxCC,IAAI,EAAE;QAAEuE,QAAQ,EAAEtC,OAAO,CAACuB,OAAO;QAAEgB,MAAM,EAAErB,OAAO,CAACI;MAAI;IACzD,CAAC,CAAC;EACJ;EAEA,IAAItB,OAAO,CAACZ,GAAG,EAAE;IACf,MAAM6B,SAAS,GAAGhC,YAAY,CAAC,CAAC;IAChC,MAAMuD,YAAY,GAAGrD,OAAO,CAACa,OAAO,CAACZ,GAAG,EAAE6B,SAAS,CAAC;IACpD,IAAIC,OAAO,CAAC9B,GAAG,KAAKoD,YAAY,EAAE;MAChC,MAAM,IAAIN,kBAAQ,CAAC;QACjBC,SAAS,EAAE,qBAAqB;QAChCC,UAAU,EAAE,GAAG;QACftE,OAAO,EAAE;MACX,CAAC,CAAC;IACJ;EACF;EAEA,OAAOoD,OAAO;AAChB","ignoreList":[]}

package/dist/utils/verificationToken/verificationToken.types.d.ts

@@ -0,0 +1,45 @@
+export interface VerificationTokenPayload {
+    /** Action this verification token is bound to */
+    act: string;
+    /** Hashed OTP */
+    otp: string;
+    /** Unique token id */
+    jti: string;
+    /** Subject (user or entity id) */
+    sub?: string;
+    /** Issuer */
+    iss?: string;
+    /** Audience */
+    aud?: string | string[];
+    /** Issued at */
+    iat?: number;
+    /** Expiration */
+    exp?: number;
+}
+export interface VerificationTokenOptions {
+    /** Action to authorize (ex: "DELETE ACCOUNT") */
+    action: string;
+    /** Subject (user or entity id) */
+    subject?: string;
+    /** OTP length, defaults to 6 */
+    otpLength?: number;
+    /** Token lifetime in seconds, defaults to 300 */
+    expiresInSeconds?: number;
+    /** Override token issuer */
+    issuer?: string;
+    /** Optional audience */
+    audience?: string | string[];
+}
+export interface VerificationTokenResult {
+    token: string;
+    otp: string;
+    expiresAt: number;
+    action: string;
+}
+export interface VerifyVerificationTokenOptions {
+    action?: string;
+    subject?: string;
+    otp?: string;
+    issuer?: string;
+    audience?: string | string[];
+}

package/dist/utils/verificationToken/verificationToken.types.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=verificationToken.types.js.map

package/dist/utils/verificationToken/verificationToken.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verificationToken.types.js","names":[],"sources":["../../../src/utils/verificationToken/verificationToken.types.ts"],"sourcesContent":["export interface VerificationTokenPayload {\n  /** Action this verification token is bound to */\n  act: string;\n  /** Hashed OTP */\n  otp: string;\n  /** Unique token id */\n  jti: string;\n  /** Subject (user or entity id) */\n  sub?: string;\n  /** Issuer */\n  iss?: string;\n  /** Audience */\n  aud?: string | string[];\n  /** Issued at */\n  iat?: number;\n  /** Expiration */\n  exp?: number;\n}\n\nexport interface VerificationTokenOptions {\n  /** Action to authorize (ex: \"DELETE ACCOUNT\") */\n  action: string;\n  /** Subject (user or entity id) */\n  subject?: string;\n  /** OTP length, defaults to 6 */\n  otpLength?: number;\n  /** Token lifetime in seconds, defaults to 300 */\n  expiresInSeconds?: number;\n  /** Override token issuer */\n  issuer?: string;\n  /** Optional audience */\n  audience?: string | string[];\n}\n\nexport interface VerificationTokenResult {\n  token: string;\n  otp: string;\n  expiresAt: number;\n  action: string;\n}\n\nexport interface VerifyVerificationTokenOptions {\n  action?: string;\n  subject?: string;\n  otp?: string;\n  issuer?: string;\n  audience?: string | string[];\n}\n"],"mappings":"","ignoreList":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-server-engine",
-  "version": "1.11.1",
+  "version": "1.12.0",
   "description": "Framework used to develop backend services. This package ships with a lot of features to standardize the creation of services, letting you focus on the business logic.",
   "main": "dist/index.js",
   "scripts": {