stitchkit 0.55.0 → 0.56.0

package/dist/{index-v4bbq3p4.js → index-j3dem06f.js}

@@ -1,7 +1,7 @@
 import {
   AppError,
   isUnsafeKey
-} from "./index-h60df7rj.js";
+} from "./index-5r13htq1.js";
 import {
   isRecord,
   resolveTraceContext

package/dist/{index-qx84bqzk.js → index-jcc611vh.js}

@@ -1,6 +1,6 @@
 import {
   isUnsafeKey
-} from "./index-h60df7rj.js";
+} from "./index-5r13htq1.js";
 import {
   isRecord
 } from "./index-7eq9va6e.js";

package/dist/{index-npye5kt7.js → index-n4nfa7gh.js}

@@ -7,7 +7,7 @@ import {
   defaultSignalSource,
   guardSignalCallback,
   reportSignalError
-} from "./index-pzc32v75.js";
+} from "./index-sm2tjx06.js";
 import {
   errorCode,
   extractIp,
@@ -23,13 +23,13 @@ import {
   setRequestError,
   validateDeclaredOutput,
   zodIssues
-} from "./index-v4bbq3p4.js";
+} from "./index-j3dem06f.js";
 import {
   AppError,
   badRequest,
   isUnsafeKey,
   safeJsonParse
-} from "./index-h60df7rj.js";
+} from "./index-5r13htq1.js";
 import {
   isRecord,
   parseTrailingWildcard,

package/dist/{index-pzc32v75.js → index-sm2tjx06.js}

@@ -1,7 +1,7 @@
 import {
   isUnsafeKey,
   mergeMeta
-} from "./index-h60df7rj.js";
+} from "./index-5r13htq1.js";
 import {
   callRuntimeHandler,
   isRecord,
@@ -267,7 +267,41 @@ var RUNTIME_CONTEXT_RESERVED_KEYS = new Set([
 function contributionError(scope, reason) {
   return new TypeError(`[stitchkit] auth: invalid context contribution for scope ${JSON.stringify(scope)}: ${reason}`);
 }
-function mergeContextContribution(ctx, value, scope) {
+function descriptorsEqual(left, right) {
+  if (!left || !right)
+    return left === right;
+  if (left.enumerable !== right.enumerable || left.configurable !== right.configurable || left.writable !== right.writable) {
+    return false;
+  }
+  if ("value" in left || "value" in right) {
+    return "value" in left && "value" in right && Object.is(left.value, right.value);
+  }
+  return left.get === right.get && left.set === right.set;
+}
+function contextContributionDelta(original, shadow, scope) {
+  if (Object.getPrototypeOf(shadow) !== Object.getPrototypeOf(original)) {
+    throw contributionError(scope, "context prototype changes are not supported");
+  }
+  const originalKeys = Reflect.ownKeys(original);
+  const shadowKeys = Reflect.ownKeys(shadow);
+  const shadowKeySet = new Set(shadowKeys);
+  for (const key of originalKeys) {
+    if (!shadowKeySet.has(key)) {
+      const printable = typeof key === "string" ? JSON.stringify(key) : "a symbol key";
+      throw contributionError(scope, `context key ${printable} may not be deleted`);
+    }
+  }
+  const contribution = Object.create(null);
+  for (const key of shadowKeys) {
+    const originalDescriptor = Object.getOwnPropertyDescriptor(original, key);
+    const shadowDescriptor = Object.getOwnPropertyDescriptor(shadow, key);
+    if (!shadowDescriptor || descriptorsEqual(originalDescriptor, shadowDescriptor))
+      continue;
+    Object.defineProperty(contribution, key, shadowDescriptor);
+  }
+  return contribution;
+}
+function prepareContextContribution(value, scope) {
   if (typeof value !== "object" || value === null || Array.isArray(value)) {
     throw contributionError(scope, "expected a plain record");
   }
@@ -301,7 +335,10 @@ function mergeContextContribution(ctx, value, scope) {
     }
     prepared[key] = descriptor.value;
   }
-  Object.assign(ctx, prepared);
+  return prepared;
+}
+function mergeContextContribution(ctx, value, scope) {
+  Object.assign(ctx, prepareContextContribution(value, scope));
 }
 
 // src/server/process-signal-common.ts
@@ -333,4 +370,4 @@ function guardSignalCallback(run, phase, onError) {
   }
 }
 
-export { RUNTIME_CONTEXT_RESERVED_KEYS, mergeContextContribution, DEFAULT_CORS_ALLOW_HEADERS, DEFAULT_CORS_EXPOSE_HEADERS, assertCorsConfig, corsHeaders, corsPreflightResponse, defineMultipartStream, createMultipartStream, contractOnlyService, implement, createImplement, createScopedImplement, createScopedImplementRegistry, implementRegistry, createImplementRegistry, DEFAULT_PROCESS_SIGNALS, defaultSignalSource, reportSignalError, guardSignalCallback };
+export { RUNTIME_CONTEXT_RESERVED_KEYS, contextContributionDelta, prepareContextContribution, mergeContextContribution, DEFAULT_CORS_ALLOW_HEADERS, DEFAULT_CORS_EXPOSE_HEADERS, assertCorsConfig, corsHeaders, corsPreflightResponse, defineMultipartStream, createMultipartStream, contractOnlyService, implement, createImplement, createScopedImplement, createScopedImplementRegistry, implementRegistry, createImplementRegistry, DEFAULT_PROCESS_SIGNALS, defaultSignalSource, reportSignalError, guardSignalCallback };

package/dist/{index-js7yexng.js → index-xy8fmh6w.js}

@@ -1,6 +1,8 @@
 import {
-  mergeContextContribution
-} from "./index-pzc32v75.js";
+  contextContributionDelta,
+  mergeContextContribution,
+  prepareContextContribution
+} from "./index-sm2tjx06.js";
 import {
   base64UrlToBytes,
   bytesToBase64Url,
@@ -8,7 +10,7 @@ import {
   isUnsafeKey,
   safeJsonParse,
   unauthorized
-} from "./index-h60df7rj.js";
+} from "./index-5r13htq1.js";
 import {
   isRecord
 } from "./index-7eq9va6e.js";
@@ -160,6 +162,17 @@ function isThenable(value) {
     return false;
   }
 }
+var scopedAuthHookBrand = Symbol("stitchkit.scoped-auth-hook");
+var authOwnershipPlans = new WeakMap;
+function createShadowContext(ctx) {
+  const shadow = {
+    params: ctx.params,
+    input: ctx.input,
+    source: ctx.source
+  };
+  Object.defineProperties(shadow, Object.getOwnPropertyDescriptors(ctx));
+  return shadow;
+}
 function createAuthHook(config) {
   const onAnonymous = config.onAnonymous ?? (() => unauthorized());
   const onForbidden = config.onForbidden ?? (() => forbidden());
@@ -198,8 +211,74 @@ function createAuthHook(config) {
       return;
     mergeContextContribution(ctx, result, scope);
   }
+  auth[scopedAuthHookBrand] = () => {
+    return;
+  };
+  authOwnershipPlans.set(auth, {
+    defaultScope: config.defaultScope,
+    hook: auth,
+    scopes: new Set(Object.keys(config.rules))
+  });
   return auth;
 }
+function composeAuthHooks(config) {
+  const plans = [];
+  for (const hook of config.hooks) {
+    const plan = authOwnershipPlans.get(hook);
+    if (!plan) {
+      throw new TypeError("[stitchkit] auth: composeAuthHooks accepts only hooks created by createAuthHook or composeAuthHooks");
+    }
+    if (plan.defaultScope !== undefined && plan.defaultScope !== config.defaultScope) {
+      throw new TypeError(`[stitchkit] auth: child default scope ${JSON.stringify(plan.defaultScope)} must match the composite default scope`);
+    }
+    plans.push(plan);
+  }
+  const defaultScope = config.defaultScope;
+  if (defaultScope !== undefined && !plans.some((plan) => plan.scopes.has(defaultScope))) {
+    throw new TypeError(`[stitchkit] auth: composite default scope ${JSON.stringify(defaultScope)} has no owner`);
+  }
+  const ownedScopes = new Set;
+  for (const plan of plans) {
+    for (const scope of plan.scopes)
+      ownedScopes.add(scope);
+  }
+  async function composed(ctx, endpoint) {
+    const scope = endpoint.scope ?? config.defaultScope;
+    if (!scope)
+      return;
+    const owners = plans.filter((plan) => plan.scopes.has(scope));
+    if (owners.length === 0) {
+      throw new Error(`[stitchkit] auth: no rule for scope "${scope}"`);
+    }
+    const scopedEndpoint = { ...endpoint, scope };
+    const contribution = Object.create(null);
+    const contributionOwners = new Set;
+    for (const owner of owners) {
+      ctx.signal?.throwIfAborted();
+      const shadow = createShadowContext(ctx);
+      await owner.hook(shadow, scopedEndpoint);
+      const ownerContribution = prepareContextContribution(contextContributionDelta(ctx, shadow, scope), scope);
+      for (const key of Object.keys(ownerContribution)) {
+        if (contributionOwners.has(key)) {
+          throw new TypeError(`[stitchkit] auth: multiple owners contributed context key ${JSON.stringify(key)} for scope ${JSON.stringify(scope)}`);
+        }
+        contributionOwners.add(key);
+      }
+      Object.assign(contribution, ownerContribution);
+    }
+    ctx.signal?.throwIfAborted();
+    mergeContextContribution(ctx, contribution, scope);
+  }
+  composed[scopedAuthHookBrand] = () => {
+    return;
+  };
+  authOwnershipPlans.set(composed, {
+    defaultScope: config.defaultScope,
+    hook: composed,
+    scopes: ownedScopes
+  });
+  return composed;
+}
 function createBearerResolver(config) {
   return async (req) => {
     const token = extractToken(req);
@@ -221,4 +300,4 @@ async function verifyPkce(verifier, challenge) {
   return derived === challenge;
 }
 
-export { parseCookies, serializeCookie, defineCookie, verifyJwt, signJwt, extractToken, createAuthHook, createBearerResolver, deriveCodeChallenge, verifyPkce };
+export { parseCookies, serializeCookie, defineCookie, verifyJwt, signJwt, extractToken, createAuthHook, composeAuthHooks, createBearerResolver, deriveCodeChallenge, verifyPkce };

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 export { type ClientConfig, type ClientContract, type ClientFetch, type ClientRegistryValue, type ContractClientConfig, contractEndpointMatchers, createClient, createClients, createScopedClients, createScopedUrlBuilders, createUrlBuilder, createUrlBuilders, type PathPrefixArgs, type RegistryScope, type ScopeClientConfigs, type ScopedClientRegistry, type ScopedUrlBuilderRegistry, type UrlBuilderConfig, } from './browser/client';
 export { ApiError, type ApiEvent, type ApiEventListener, type ConfiguredHttpClient, createHttpClient, type HeaderProvider, type HttpClient, type HttpClientConfig, type RequestOptions, type UnauthorizedMatcher, } from './browser/http';
-export type { RealtimeClient, RealtimeClientOptions, SocketEventMap, SocketIOClient, SocketIOClientConfig, } from './browser/socket-io';
-export { createRealtimeClient, createSocketIOClient } from './browser/socket-io';
+export type { BindRealtimeClientOptions, BoundRealtimeClient, RealtimeClient, RealtimeClientOptions, RealtimeClientTransport, SocketEventMap, SocketIOClient, SocketIOClientConfig, } from './browser/socket-io';
+export { bindRealtimeClient, createRealtimeClient, createSocketIOClient, } from './browser/socket-io';
 export { type ParseSSEOptions, parseSSE } from './browser/stream';
 export * from './contract';
 export type { StitchLogger } from './logger';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,QAAQ,EACR,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,cAAc,EACd,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAClE,cAAc,YAAY,CAAC;AAC3B,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,uBAAuB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,wBAAwB,EACxB,YAAY,EACZ,aAAa,EACb,mBAAmB,EACnB,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EACjB,KAAK,cAAc,EACnB,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,gBAAgB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,QAAQ,EACR,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,gBAAgB,EAChB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,yBAAyB,EACzB,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAClE,cAAc,YAAY,CAAC;AAC3B,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EACL,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,YAAY,GAClB,MAAM,uBAAuB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -19,7 +19,7 @@ import {
   parseTrailingWildcard,
   rateLimited,
   unauthorized
-} from "./index-rgd18hx3.js";
+} from "./index-28cqssm3.js";
 import {
   isRecord,
   mapObject,
@@ -1120,8 +1120,18 @@ function toIoAuth(auth) {
     Promise.resolve().then(auth).then(cb, () => cb({}));
   };
 }
-function createRealtimeClient(contract, { onRejected, logger, ...config }) {
-  const transport = createSocketIOClient(config);
+function assertRealtimeClientTransport(transport) {
+  for (const capability of ["on", "emit", "emitWithAck", "onConnectionChange"]) {
+    if (typeof Reflect.get(transport, capability) !== "function") {
+      throw new TypeError(`Realtime client transport does not implement ${capability}()`);
+    }
+  }
+  if (typeof transport.connected !== "boolean") {
+    throw new TypeError("Realtime client transport does not expose boolean connected");
+  }
+}
+function bindRealtimeClient(contract, transport, { onRejected, logger } = {}) {
+  assertRealtimeClientTransport(transport);
   const events = createValidatedRealtimeSocket({
     target: transport,
     inbound: contract.serverToClient,
@@ -1165,13 +1175,23 @@ function createRealtimeClient(contract, { onRejected, logger, ...config }) {
   }
   return {
     ...events,
-    connect: transport.connect,
-    disconnect: transport.disconnect,
     get connected() {
       return transport.connected;
     },
     request,
-    onConnectionChange: transport.onConnectionChange
+    onConnectionChange: (listener) => transport.onConnectionChange(listener)
+  };
+}
+function createRealtimeClient(contract, { onRejected, logger, ...config }) {
+  const transport = createSocketIOClient(config);
+  const bound = bindRealtimeClient(contract, transport, { onRejected, logger });
+  return {
+    ...bound,
+    get connected() {
+      return bound.connected;
+    },
+    connect: transport.connect,
+    disconnect: transport.disconnect
   };
 }
 function createSocketIOClient(config) {
@@ -1382,6 +1402,7 @@ export {
   STITCH_ERROR_STATUS,
   appError,
   badRequest,
+  bindRealtimeClient,
   childSpan,
   conflict,
   contractEndpointMatchers,

package/dist/node.js

@@ -8,7 +8,7 @@ import {
   createHandler,
   createServerLifecycle,
   createSocketIOServer
-} from "./index-npye5kt7.js";
+} from "./index-n4nfa7gh.js";
 import {
   createImplement,
   createImplementRegistry,
@@ -17,8 +17,9 @@ import {
   createScopedImplementRegistry,
   implement,
   implementRegistry
-} from "./index-pzc32v75.js";
-import"./index-v4bbq3p4.js";
+} from "./index-sm2tjx06.js";
+import"./index-557by2db.js";
+import"./index-j3dem06f.js";
 import {
   AppError,
   appError,
@@ -28,7 +29,7 @@ import {
   notFound,
   rateLimited,
   unauthorized
-} from "./index-h60df7rj.js";
+} from "./index-5r13htq1.js";
 import"./index-6k1937bx.js";
 import"./index-7eq9va6e.js";
 import"./index-1bx83sw4.js";

package/dist/observability/index.js

@@ -3,7 +3,7 @@ import {
   redact,
   sanitizePayload,
   truncatePreview
-} from "../index-qx84bqzk.js";
+} from "../index-jcc611vh.js";
 import {
   getRequestContext,
   getTraceId,
@@ -15,8 +15,8 @@ import {
   setRequestError,
   setRequestUser,
   wrapInRequestContext
-} from "../index-v4bbq3p4.js";
-import"../index-h60df7rj.js";
+} from "../index-j3dem06f.js";
+import"../index-5r13htq1.js";
 import"../index-6k1937bx.js";
 import {
   childSpan,

package/dist/remote.js

@@ -6,7 +6,7 @@ import"./index-48ffdxgk.js";
 import {
   AppError,
   mergeMeta
-} from "./index-h60df7rj.js";
+} from "./index-5r13htq1.js";
 import"./index-6k1937bx.js";
 import {
   isRecord

package/dist/server/context-contribution.d.ts

@@ -1,6 +1,14 @@
 import type { RuntimeContext } from '../contract';
 /** Keys whose value is owned by a transport/runtime boundary, never by application enrichment. */
 export declare const RUNTIME_CONTEXT_RESERVED_KEYS: Set<string>;
+/**
+ * Return the application-owned fields changed on an isolated context. The
+ * descriptors are preserved so the regular contribution validator can reject
+ * accessors and symbols without invoking consumer code.
+ */
+export declare function contextContributionDelta(original: RuntimeContext, shadow: RuntimeContext, scope: string): Record<string, unknown>;
+/** Validate and copy a contribution without mutating a runtime context. */
+export declare function prepareContextContribution(value: unknown, scope: string): Record<string, unknown>;
 /**
  * Validate the complete contribution before mutating the runtime context.
  * Accessors, exotic prototypes and transport-owned keys fail closed so a

package/dist/server/context-contribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context-contribution.d.ts","sourceRoot":"","sources":["../../src/server/context-contribution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,kGAAkG;AAClG,eAAO,MAAM,6BAA6B,aAexC,CAAC;AAQH;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,IAAI,CAuCN"}
+{"version":3,"file":"context-contribution.d.ts","sourceRoot":"","sources":["../../src/server/context-contribution.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAGlD,kGAAkG;AAClG,eAAO,MAAM,6BAA6B,aAexC,CAAC;AA0BH;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,cAAc,EACxB,MAAM,EAAE,cAAc,EACtB,KAAK,EAAE,MAAM,GACZ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED,2EAA2E;AAC3E,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuCzB;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,cAAc,EACnB,KAAK,EAAE,OAAO,EACd,KAAK,EAAE,MAAM,GACZ,IAAI,CAEN"}

package/dist/server/index.d.ts

@@ -10,7 +10,7 @@ export { type ByteRange, parseByteRange, type ServeFileOptions, serveFile, stati
 export { createImplement, createImplementRegistry, createMultipartStream, createScopedImplement, createScopedImplementRegistry, defineMultipartStream, type ExactRegistryHandlers, type ExactScopedRegistryHandlers, type ImplementationRegistry, implement, implementRegistry, type KeyedServices, type MultipartStreamConfig, type RegistryHandlers, type ScopedImplementationRegistry, type ScopedRegistryHandlers, type StreamScope, } from './implement';
 export { composeLifecycleHooks } from './lifecycle';
 export type { LogFormat } from './logger';
-export { type AuthHook, type AuthHookConfig, type AuthRule, type AuthRuleContribution, type AuthRules, type AuthScopes, type BearerResolverConfig, createAuthHook, createBearerResolver, extractToken, type JwtPayload, type RuleScopes, type ScopedAuthHook, type ScopedAuthRule, type SignJwtOptions, signJwt, type VerifyJwtOptions, verifyJwt, } from './middleware/auth';
+export { type AuthHook, type AuthHookConfig, type AuthRule, type AuthRuleContribution, type AuthRules, type AuthScopes, type BearerResolverConfig, type ComposeAuthHooksConfig, type ComposedAuthScopes, composeAuthHooks, createAuthHook, createBearerResolver, extractToken, type JwtPayload, type RuleScopes, type ScopedAuthHook, type ScopedAuthRule, type SignJwtOptions, signJwt, type VerifyJwtOptions, verifyJwt, } from './middleware/auth';
 export { type CookieDef, type CookieOptions, defineCookie, parseCookies, serializeCookie, } from './middleware/cookies';
 export { type CorsConfig, corsHeaders, corsPreflightResponse, DEFAULT_CORS_ALLOW_HEADERS, DEFAULT_CORS_EXPOSE_HEADERS, } from './middleware/cors';
 export { deriveCodeChallenge, type PkceMethod, verifyPkce } from './middleware/pkce';

package/dist/server/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,SAAS,EACT,cAAc,EACd,cAAc,EACd,KAAK,eAAe,EACpB,SAAS,GACV,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EACL,KAAK,mBAAmB,IAAI,gBAAgB,EAC5C,KAAK,eAAe,IAAI,YAAY,EACpC,KAAK,gBAAgB,IAAI,aAAa,EACtC,KAAK,WAAW,IAAI,QAAQ,EAC5B,KAAK,kBAAkB,IAAI,eAAe,EAC1C,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,SAAS,EACd,cAAc,EACd,KAAK,gBAAgB,EACrB,SAAS,EACT,WAAW,EACX,QAAQ,GACT,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,EAC7B,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,SAAS,EACT,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,EAC3B,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,OAAO,EACP,KAAK,gBAAgB,EACrB,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,UAAU,EACf,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,eAAe,EACpB,SAAS,EACT,eAAe,EACf,aAAa,EACb,eAAe,EACf,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrE,YAAY,EACV,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,QAAQ,EACR,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gCAAgC,GACjC,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,QAAQ,EACR,SAAS,EACT,iBAAiB,EACjB,QAAQ,EACR,WAAW,EACX,mBAAmB,EACnB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,SAAS,EACT,cAAc,EACd,cAAc,EACd,KAAK,eAAe,EACpB,SAAS,GACV,MAAM,oBAAoB,CAAC;AAG5B,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EACL,KAAK,mBAAmB,IAAI,gBAAgB,EAC5C,KAAK,eAAe,IAAI,YAAY,EACpC,KAAK,gBAAgB,IAAI,aAAa,EACtC,KAAK,WAAW,IAAI,QAAQ,EAC5B,KAAK,kBAAkB,IAAI,eAAe,EAC1C,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,GACtB,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,KAAK,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,aAAa,GACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,KAAK,eAAe,EACpB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,YAAY,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,KAAK,SAAS,EACd,cAAc,EACd,KAAK,gBAAgB,EACrB,SAAS,EACT,WAAW,EACX,QAAQ,GACT,MAAM,QAAQ,CAAC;AAChB,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,6BAA6B,EAC7B,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,SAAS,EACT,iBAAiB,EACjB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,4BAA4B,EACjC,KAAK,sBAAsB,EAC3B,KAAK,WAAW,GACjB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,YAAY,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EACL,KAAK,QAAQ,EACb,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,oBAAoB,EACzB,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,KAAK,UAAU,EACf,KAAK,UAAU,EACf,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,OAAO,EACP,KAAK,gBAAgB,EACrB,SAAS,GACV,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,YAAY,EACZ,YAAY,EACZ,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,KAAK,UAAU,EACf,WAAW,EACX,qBAAqB,EACrB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,mBAAmB,EAAE,KAAK,UAAU,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACrF,OAAO,EAAE,KAAK,kBAAkB,EAAE,KAAK,eAAe,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC5F,OAAO,EACL,uBAAuB,EACvB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,YAAY,GACb,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,kBAAkB,EAClB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,YAAY,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,iBAAiB,EAAE,KAAK,eAAe,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AAC9D,OAAO,EACL,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,wBAAwB,EAC7B,KAAK,oBAAoB,GAC1B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,KAAK,eAAe,EACpB,SAAS,EACT,eAAe,EACf,aAAa,EACb,eAAe,EACf,cAAc,GACf,MAAM,WAAW,CAAC;AACnB,OAAO,EACL,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,qBAAqB,EACrB,KAAK,cAAc,EACnB,oBAAoB,EACpB,KAAK,aAAa,EAClB,mBAAmB,EACnB,KAAK,cAAc,EACnB,oBAAoB,GACrB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,KAAK,eAAe,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AACrE,YAAY,EACV,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,QAAQ,EACR,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,uBAAuB,EACvB,iBAAiB,EACjB,UAAU,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,YAAY,EACZ,gCAAgC,GACjC,MAAM,SAAS,CAAC;AACjB,OAAO,EACL,KAAK,YAAY,EACjB,wBAAwB,EACxB,KAAK,sBAAsB,EAC3B,KAAK,aAAa,EAClB,aAAa,GACd,MAAM,aAAa,CAAC"}

package/dist/server/index.js

@@ -12,8 +12,9 @@ import {
   parseMultipart,
   socketIoLane,
   webSocketLane
-} from "../index-npye5kt7.js";
+} from "../index-n4nfa7gh.js";
 import {
+  composeAuthHooks,
   createAuthHook,
   createBearerResolver,
   defineCookie,
@@ -24,7 +25,7 @@ import {
   signJwt,
   verifyJwt,
   verifyPkce
-} from "../index-js7yexng.js";
+} from "../index-xy8fmh6w.js";
 import {
   DEFAULT_CORS_ALLOW_HEADERS,
   DEFAULT_CORS_EXPOSE_HEADERS,
@@ -38,11 +39,12 @@ import {
   defineMultipartStream,
   implement,
   implementRegistry
-} from "../index-pzc32v75.js";
+} from "../index-sm2tjx06.js";
 import {
   isWithinDir,
   realPathWithinDir
 } from "../index-sbdmyz75.js";
+import"../index-557by2db.js";
 import {
   jsonSchemaFields,
   toJsonSchema
@@ -61,7 +63,7 @@ import {
   resolveSocketIp,
   resolveTraceId,
   zodIssues
-} from "../index-v4bbq3p4.js";
+} from "../index-j3dem06f.js";
 import {
   AppError,
   STITCH_ERROR_STATUS,
@@ -73,7 +75,7 @@ import {
   notFound,
   rateLimited,
   unauthorized
-} from "../index-h60df7rj.js";
+} from "../index-5r13htq1.js";
 import"../index-6k1937bx.js";
 import {
   isRecord,
@@ -1027,6 +1029,7 @@ export {
   bindProcessSignals,
   bindRealtimeServer,
   cacheHeaders,
+  composeAuthHooks,
   composeLifecycleHooks,
   composeWebSocketHandlers,
   conflict,

package/dist/server/middleware/auth.d.ts

@@ -134,14 +134,15 @@ export interface AuthHook {
     (ctx: AuthorizationContext, endpoint: OperationIdentity): Promise<void>;
     (ctx: RuntimeContext, endpoint: OperationIdentity): Promise<void>;
 }
+declare const scopedAuthHookBrand: unique symbol;
 /**
  * An auth hook that carries its derived scope→context map at the type level.
  * The marker property never exists at runtime; it only lets {@link AuthScopes}
  * recover the map.
  */
 export interface ScopedAuthHook<TScopes extends Record<string, object>> extends AuthHook {
-    /** Type-only carrier for {@link AuthScopes}; never present at runtime. */
-    readonly '~scopes'?: TScopes;
+    /** Module-private nominal carrier for {@link AuthScopes}. */
+    readonly [scopedAuthHookBrand]: () => TScopes | undefined;
 }
 /**
  * The scope→context map a hook derived from its rules — feed it straight to
@@ -153,6 +154,25 @@ export interface ScopedAuthHook<TScopes extends Record<string, object>> extends
  * ```
  */
 export type AuthScopes<THook extends ScopedAuthHook<Record<string, object>>> = THook extends ScopedAuthHook<infer TScopes> ? TScopes : never;
+type ScopedHook = ScopedAuthHook<Record<string, object>>;
+type HookScopeMaps<THooks extends readonly ScopedHook[]> = THooks[number] extends infer THook ? THook extends ScopedHook ? AuthScopes<THook> : never : never;
+type ContributionsForScope<THooks extends readonly ScopedHook[], TScope extends PropertyKey> = THooks[number] extends infer THook ? THook extends ScopedHook ? TScope extends keyof AuthScopes<THook> ? AuthScopes<THook>[TScope] : never : never : never;
+type AnyRequiredKeys<T> = T extends object ? RequiredKeys<T> : never;
+type ComposeContributions<T extends object> = [UnionKeys<T>] extends [never] ? object : {
+    [K in AnyRequiredKeys<T>]: UnionValue<T, K>;
+} & {
+    [K in Exclude<UnionKeys<T>, AnyRequiredKeys<T>>]?: UnionValue<T, K>;
+};
+/** Scope→context map guaranteed by every owner selected for each scope. */
+export type ComposedAuthScopes<THooks extends readonly ScopedHook[]> = {
+    [TScope in UnionKeys<HookScopeMaps<THooks>>]: ComposeContributions<ContributionsForScope<THooks, TScope>>;
+};
+export interface ComposeAuthHooksConfig<THooks extends readonly [ScopedHook, ...ScopedHook[]]> {
+    /** Canonical hooks to route by their declared rule ownership. */
+    hooks: THooks;
+    /** The only default used by the composite. Must name an owned scope. */
+    defaultScope?: UnionKeys<HookScopeMaps<THooks>>;
+}
 /**
  * Build a scope authorization hook.
  *
@@ -167,6 +187,13 @@ export type AuthScopes<THook extends ScopedAuthHook<Record<string, object>>> = T
  * scoped tool call has no identity and **fails closed** (never silently passes).
  */
 export declare function createAuthHook<TIdentity, const TRules extends AuthRules<TIdentity> = AuthRules<TIdentity>>(config: AuthHookConfig<TIdentity, TRules>): ScopedAuthHook<RuleScopes<TRules>>;
+/**
+ * Compose independent auth domains without teaching either domain about the
+ * other's identities or scopes. Only owners of the selected scope run. Their
+ * context changes are staged independently and committed atomically after all
+ * owners pass.
+ */
+export declare function composeAuthHooks<const THooks extends readonly [ScopedHook, ...ScopedHook[]]>(config: ComposeAuthHooksConfig<THooks>): ScopedAuthHook<ComposedAuthScopes<THooks>>;
 /**
  * Bearer-token identity resolver — the MCP / API-key counterpart of the
  * cookie session hook. Strips `Authorization: Bearer <token>` and hands the

package/dist/server/middleware/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAMrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAGxE,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,8BAA8B;AAC9B,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAKD,wBAAsB,SAAS,CAC7B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAgErB;AAED,4BAA4B;AAC5B,MAAM,WAAW,cAAc;IAC7B,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,MAAM,CAAC,CA+BjB;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU7E;AAUD;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE3D,MAAM,MAAM,QAAQ,CAAC,SAAS,IAC1B,QAAQ,GACR,eAAe,GACf,CAAC,CACC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,EAC5B,GAAG,EAAE,cAAc,KAChB,OAAO,GAAG,oBAAoB,GAAG,OAAO,CAAC,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC;AAEnF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,cAAc,CAC7B,SAAS,EACT,OAAO,SAAS,oBAAoB,GAAG,oBAAoB;IAE3D,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1B,2FAA2F;IAC3F,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,GAAG;QAAE,IAAI,CAAC,EAAE,KAAK,CAAA;KAAE,CAAC;CAC5F;AAED,iFAAiF;AACjF,MAAM,MAAM,SAAS,CAAC,SAAS,IAAI,MAAM,CACvC,MAAM,EACN,QAAQ,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC,SAAS,EAAE,oBAAoB,CAAC,CACtE,CAAC;AAEF;;;;;;;;GAQG;AACH,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,SAAS;IAAE,IAAI,EAAE,MAAM,KAAK,CAAA;CAAE,GAAG,KAAK,GAAG,MAAM,CAAC;AAE5E,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,SAAS;IACrC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,MAAM,OAAO,SAAS,MAAM,CAAC;CAC5D,GACG,OAAO,GACP,MAAM,CAAC;AAEX,KAAK,UAAU,CAAC,KAAK,IAAI,KAAK,SAAS,CAAC,GAAG,IAAI,EAAE,MAAM,MAAM,KAAK,MAAM,OAAO,GAC3E,OAAO,CAAC,OAAO,CAAC,GAChB,IAAI,CAAC;AAET,KAAK,kBAAkB,CAAC,KAAK,IAC3B,UAAU,CAAC,KAAK,CAAC,SAAS,MAAM,OAAO,GAAG,CAAC,OAAO,SAAS,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;AAE/F,KAAK,SAAS,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,SAAS,OAAO,GAAG,MAAM,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC;AACzE,KAAK,UAAU,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,CAAC,GACnD,CAAC,SAAS,MAAM,CAAC,GACf,CAAC,CAAC,CAAC,CAAC,GACJ,KAAK,GACP,KAAK,CAAC;AACV,KAAK,iBAAiB,CAAC,CAAC,IAAI;KACzB,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK;CAClE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhB,KAAK,oBAAoB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACzD,MAAM,GACN;KACG,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;CAC9C,GAAG;KACD,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;CACtE,CAAC;AAEN,KAAK,gBAAgB,CAAC,KAAK,IACzB,IAAI,SAAS,UAAU,CAAC,KAAK,CAAC,GAC1B,OAAO,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,GACxD,oBAAoB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;AAEtD,KAAK,YAAY,CAAC,CAAC,IAAI,OAAO,CAC5B;KACG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;CACxD,CAAC,MAAM,CAAC,CAAC,EACV,MAAM,CACP,CAAC;AAEF,KAAK,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,MAAM,aAAa,GACzF,CAAC,SAAS,YAAY,CAAC,aAAa,CAAC,GACnC,aAAa,CAAC,CAAC,CAAC,GAChB,CAAC,SAAS,MAAM,KAAK,GACnB,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAC/C,aAAa,CAAC,CAAC,CAAC,GACpB,CAAC,SAAS,MAAM,KAAK,GACnB,KAAK,CAAC,CAAC,CAAC,GACR,KAAK,CAAC;AAEZ,KAAK,kBAAkB,CAAC,KAAK,SAAS,MAAM,EAAE,aAAa,SAAS,MAAM,IAAI;KAC3E,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,aAAa,CAAC,GAAG,WAAW,CACnE,KAAK,EACL,aAAa,EACb,CAAC,CACF;CACF,GAAG;KACD,CAAC,IAAI,OAAO,CACX,OAAO,CAAC,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,MAAM,CAAC,EAClD,YAAY,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,aAAa,CAAC,CAClD,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;CAC1C,CAAC;AAEF,KAAK,iBAAiB,CAAC,MAAM,IAAI,kBAAkB,CACjD,QAAQ,CAAC,MAAM,CAAC,EAChB,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CACjC,CAAC;AAEF,MAAM,MAAM,UAAU,CAAC,MAAM,IAAI;KAC9B,CAAC,IAAI,MAAM,MAAM,GAAG,MAAM,GAAG,QAAQ,SAAS,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,GAC7E,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GACrC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,WAAW,cAAc,CAC7B,SAAS,EACT,MAAM,SAAS,SAAS,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC;IAE1D,kEAAkE;IAClE,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC5D;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,SAAS,GAAG,IAAI,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC3F,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5E,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC;IAC1B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC;CAC3B;AAUD,MAAM,WAAW,QAAQ;IACvB,CAAC,GAAG,EAAE,oBAAoB,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAE,SAAQ,QAAQ;IACtF,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,CAAC,KAAK,SAAS,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IACzE,KAAK,SAAS,cAAc,CAAC,MAAM,OAAO,CAAC,GAAG,OAAO,GAAG,KAAK,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EACT,KAAK,CAAC,MAAM,SAAS,SAAS,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,EAChE,MAAM,EAAE,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CA2D/E;AAID;;;;GAIG;AACH,MAAM,WAAW,oBAAoB,CAAC,SAAS;IAC7C,4EAA4E;IAC5E,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;CACpE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAC5C,MAAM,EAAE,oBAAoB,CAAC,SAAS,CAAC,GACtC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAM7C"}
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/server/middleware/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAUrD,OAAO,KAAK,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAGxE,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,8BAA8B;AAC9B,MAAM,WAAW,gBAAgB;IAC/B,wEAAwE;IACxE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAKD,wBAAsB,SAAS,CAC7B,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,gBAAqB,GAC7B,OAAO,CAAC,UAAU,CAAC,CAgErB;AAED,4BAA4B;AAC5B,MAAM,WAAW,cAAc;IAC7B,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mBAAmB;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mBAAmB;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mBAAmB;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAsB,OAAO,CAC3B,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,cAAmB,GAC3B,OAAO,CAAC,MAAM,CAAC,CA+BjB;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAU7E;AAUD;;;;;;;GAOG;AACH,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE3D,MAAM,MAAM,QAAQ,CAAC,SAAS,IAC1B,QAAQ,GACR,eAAe,GACf,CAAC,CACC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,EAC5B,GAAG,EAAE,cAAc,KAChB,OAAO,GAAG,oBAAoB,GAAG,OAAO,CAAC,OAAO,GAAG,oBAAoB,CAAC,CAAC,CAAC;AAEnF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,cAAc,CAC7B,SAAS,EACT,OAAO,SAAS,oBAAoB,GAAG,oBAAoB;IAE3D,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1B,2FAA2F;IAC3F,MAAM,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,cAAc,KAAK,OAAO,GAAG;QAAE,IAAI,CAAC,EAAE,KAAK,CAAA;KAAE,CAAC;CAC5F;AAED,iFAAiF;AACjF,MAAM,MAAM,SAAS,CAAC,SAAS,IAAI,MAAM,CACvC,MAAM,EACN,QAAQ,CAAC,SAAS,CAAC,GAAG,cAAc,CAAC,SAAS,EAAE,oBAAoB,CAAC,CACtE,CAAC;AAEF;;;;;;;;GAQG;AACH,KAAK,MAAM,CAAC,MAAM,IAAI,MAAM,SAAS;IAAE,IAAI,EAAE,MAAM,KAAK,CAAA;CAAE,GAAG,KAAK,GAAG,MAAM,CAAC;AAE5E,KAAK,QAAQ,CAAC,MAAM,IAAI,MAAM,SAAS;IACrC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,MAAM,OAAO,SAAS,MAAM,CAAC;CAC5D,GACG,OAAO,GACP,MAAM,CAAC;AAEX,KAAK,UAAU,CAAC,KAAK,IAAI,KAAK,SAAS,CAAC,GAAG,IAAI,EAAE,MAAM,MAAM,KAAK,MAAM,OAAO,GAC3E,OAAO,CAAC,OAAO,CAAC,GAChB,IAAI,CAAC;AAET,KAAK,kBAAkB,CAAC,KAAK,IAC3B,UAAU,CAAC,KAAK,CAAC,SAAS,MAAM,OAAO,GAAG,CAAC,OAAO,SAAS,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC;AAE/F,KAAK,SAAS,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,SAAS,OAAO,GAAG,MAAM,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC,CAAC;AACzE,KAAK,UAAU,CAAC,CAAC,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,CAAC,GACnD,CAAC,SAAS,MAAM,CAAC,GACf,CAAC,CAAC,CAAC,CAAC,GACJ,KAAK,GACP,KAAK,CAAC;AACV,KAAK,iBAAiB,CAAC,CAAC,IAAI;KACzB,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK;CAClE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhB,KAAK,oBAAoB,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACzD,MAAM,GACN;KACG,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;CAC9C,GAAG;KACD,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;CACtE,CAAC;AAEN,KAAK,gBAAgB,CAAC,KAAK,IACzB,IAAI,SAAS,UAAU,CAAC,KAAK,CAAC,GAC1B,OAAO,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,GACxD,oBAAoB,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;AAEtD,KAAK,YAAY,CAAC,CAAC,IAAI,OAAO,CAC5B;KACG,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,SAAS,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC;CACxD,CAAC,MAAM,CAAC,CAAC,EACV,MAAM,CACP,CAAC;AAEF,KAAK,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,SAAS,WAAW,IAAI,CAAC,SAAS,MAAM,aAAa,GACzF,CAAC,SAAS,YAAY,CAAC,aAAa,CAAC,GACnC,aAAa,CAAC,CAAC,CAAC,GAChB,CAAC,SAAS,MAAM,KAAK,GACnB,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,GAC/C,aAAa,CAAC,CAAC,CAAC,GACpB,CAAC,SAAS,MAAM,KAAK,GACnB,KAAK,CAAC,CAAC,CAAC,GACR,KAAK,CAAC;AAEZ,KAAK,kBAAkB,CAAC,KAAK,SAAS,MAAM,EAAE,aAAa,SAAS,MAAM,IAAI;KAC3E,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,aAAa,CAAC,GAAG,WAAW,CACnE,KAAK,EACL,aAAa,EACb,CAAC,CACF;CACF,GAAG;KACD,CAAC,IAAI,OAAO,CACX,OAAO,CAAC,MAAM,KAAK,GAAG,MAAM,aAAa,EAAE,MAAM,CAAC,EAClD,YAAY,CAAC,KAAK,CAAC,GAAG,YAAY,CAAC,aAAa,CAAC,CAClD,CAAC,CAAC,EAAE,WAAW,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;CAC1C,CAAC;AAEF,KAAK,iBAAiB,CAAC,MAAM,IAAI,kBAAkB,CACjD,QAAQ,CAAC,MAAM,CAAC,EAChB,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CACjC,CAAC;AAEF,MAAM,MAAM,UAAU,CAAC,MAAM,IAAI;KAC9B,CAAC,IAAI,MAAM,MAAM,GAAG,MAAM,GAAG,QAAQ,SAAS,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,GAC7E,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GACrC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,WAAW,cAAc,CAC7B,SAAS,EACT,MAAM,SAAS,SAAS,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC;IAE1D,kEAAkE;IAClE,OAAO,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC5D;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,SAAS,GAAG,IAAI,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC3F,0DAA0D;IAC1D,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iEAAiE;IACjE,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,KAAK,IAAI,CAAC;IAC5E,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC;IAC1B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,KAAK,CAAC;CAC3B;AAUD,MAAM,WAAW,QAAQ;IACvB,CAAC,GAAG,EAAE,oBAAoB,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,GAAG,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED,QAAA,MAAM,mBAAmB,EAAE,OAAO,MAA6C,CAAC;AAoBhF;;;;GAIG;AACH,MAAM,WAAW,cAAc,CAAC,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAE,SAAQ,QAAQ;IACtF,6DAA6D;IAC7D,QAAQ,CAAC,CAAC,mBAAmB,CAAC,EAAE,MAAM,OAAO,GAAG,SAAS,CAAC;CAC3D;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,UAAU,CAAC,KAAK,SAAS,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IACzE,KAAK,SAAS,cAAc,CAAC,MAAM,OAAO,CAAC,GAAG,OAAO,GAAG,KAAK,CAAC;AAEhE,KAAK,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzD,KAAK,aAAa,CAAC,MAAM,SAAS,SAAS,UAAU,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,MAAM,KAAK,GACzF,KAAK,SAAS,UAAU,GACtB,UAAU,CAAC,KAAK,CAAC,GACjB,KAAK,GACP,KAAK,CAAC;AAEV,KAAK,qBAAqB,CACxB,MAAM,SAAS,SAAS,UAAU,EAAE,EACpC,MAAM,SAAS,WAAW,IACxB,MAAM,CAAC,MAAM,CAAC,SAAS,MAAM,KAAK,GAClC,KAAK,SAAS,UAAU,GACtB,MAAM,SAAS,MAAM,UAAU,CAAC,KAAK,CAAC,GACpC,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,GACzB,KAAK,GACP,KAAK,GACP,KAAK,CAAC;AAEV,KAAK,eAAe,CAAC,CAAC,IAAI,CAAC,SAAS,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;AAErE,KAAK,oBAAoB,CAAC,CAAC,SAAS,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GACxE,MAAM,GACN;KACG,CAAC,IAAI,eAAe,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;CAC5C,GAAG;KACD,CAAC,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC;CACpE,CAAC;AAEN,2EAA2E;AAC3E,MAAM,MAAM,kBAAkB,CAAC,MAAM,SAAS,SAAS,UAAU,EAAE,IAAI;KACpE,MAAM,IAAI,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,oBAAoB,CAChE,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,CACtC;CACF,CAAC;AAEF,MAAM,WAAW,sBAAsB,CACrC,MAAM,SAAS,SAAS,CAAC,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC;IAErD,iEAAiE;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,wEAAwE;IACxE,YAAY,CAAC,EAAE,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;CACjD;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAC5B,SAAS,EACT,KAAK,CAAC,MAAM,SAAS,SAAS,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,EAChE,MAAM,EAAE,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAiE/E;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,CAAC,MAAM,SAAS,SAAS,CAAC,UAAU,EAAE,GAAG,UAAU,EAAE,CAAC,EAC1F,MAAM,EAAE,sBAAsB,CAAC,MAAM,CAAC,GACrC,cAAc,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CA2E5C;AAID;;;;GAIG;AACH,MAAM,WAAW,oBAAoB,CAAC,SAAS;IAC7C,4EAA4E;IAC5E,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;CACpE;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAC5C,MAAM,EAAE,oBAAoB,CAAC,SAAS,CAAC,GACtC,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAM7C"}