ugly-app 0.1.516 → 0.1.517
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/cli/version.d.ts +1 -1
- package/dist/cli/version.js +1 -1
- package/dist/server/adapter/workers/createWorkersApp.d.ts +17 -0
- package/dist/server/adapter/workers/createWorkersApp.d.ts.map +1 -1
- package/dist/server/adapter/workers/createWorkersApp.js +39 -5
- package/dist/server/adapter/workers/createWorkersApp.js.map +1 -1
- package/dist/server/auth/workersMagicLink.d.ts +54 -0
- package/dist/server/auth/workersMagicLink.d.ts.map +1 -0
- package/dist/server/auth/workersMagicLink.js +234 -0
- package/dist/server/auth/workersMagicLink.js.map +1 -0
- package/package.json +1 -1
- package/src/cli/version.ts +1 -1
- package/src/server/adapter/workers/createWorkersApp.ts +75 -5
- package/src/server/auth/workersMagicLink.ts +319 -0
- package/test-results/.last-run.json +2 -4
- package/test-results/test-pages--test-audio-TTS-68f5e--audio-when-Play-is-clicked-chromium/error-context.md +0 -17
package/dist/cli/version.d.ts
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
|
-
export declare const CLI_VERSION = "0.1.
|
|
1
|
+
export declare const CLI_VERSION = "0.1.517";
|
|
2
2
|
//# sourceMappingURL=version.d.ts.map
|
package/dist/cli/version.js
CHANGED
|
@@ -125,6 +125,15 @@ export interface CreateWorkersAppOptions<R extends AppRegistryBase> {
|
|
|
125
125
|
* the E2E proves the broadcast pipeline without a real Postgres.
|
|
126
126
|
*/
|
|
127
127
|
db?: DbAdapter;
|
|
128
|
+
/**
|
|
129
|
+
* Mode B (self-host auth) only: invoked when the magic-link flow
|
|
130
|
+
* mints a brand-new user. Same shape as `OnUserCreate` on Node.
|
|
131
|
+
* Mode A apps don't need this — sign-in goes through ugly.bot which
|
|
132
|
+
* runs the app's webhook to seed the user row out-of-band.
|
|
133
|
+
*/
|
|
134
|
+
onUserCreate?: (userId: string, initial: {
|
|
135
|
+
email: string;
|
|
136
|
+
}, db: TypedDB<any>) => Promise<void>;
|
|
128
137
|
}
|
|
129
138
|
/**
|
|
130
139
|
* Workers-side configurator. Mirrors the subset of `AppConfigurator`
|
|
@@ -152,6 +161,14 @@ export interface WorkersConfigurator {
|
|
|
152
161
|
* both runtimes.
|
|
153
162
|
*/
|
|
154
163
|
addSocketMessageHandler(handler: WorkersSocketMessageHandler): void;
|
|
164
|
+
/**
|
|
165
|
+
* Mode B (self-host) only: register the hook called when the
|
|
166
|
+
* magic-link flow upserts a brand-new user. Wire your app's user
|
|
167
|
+
* row creation here. No-op in Mode A.
|
|
168
|
+
*/
|
|
169
|
+
setOnUserCreate(handler: (userId: string, initial: {
|
|
170
|
+
email: string;
|
|
171
|
+
}, db: TypedDB<any>) => Promise<void>): void;
|
|
155
172
|
}
|
|
156
173
|
export interface WorkersApp {
|
|
157
174
|
fetch(request: Request, env: WorkersEnv, ctx: ExecutionContext): Promise<Response>;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"createWorkersApp.d.ts","sourceRoot":"","sources":["../../../../src/server/adapter/workers/createWorkersApp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAGH,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,SAAS,IAAI,WAAW,EACzB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,cAAc,EACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,KAAK,EAAE,SAAS,EAAiB,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;
|
|
1
|
+
{"version":3,"file":"createWorkersApp.d.ts","sourceRoot":"","sources":["../../../../src/server/adapter/workers/createWorkersApp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAGH,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,mBAAmB,EACnB,SAAS,IAAI,WAAW,EACzB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAgB,KAAK,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAGvD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,cAAc,EACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAEnE,OAAO,KAAK,EAAE,SAAS,EAAiB,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3E,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AASlD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAQrD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,MAAM,2BAA2B,GAAG,CACxC,EAAE,EAAE;IAAE,IAAI,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,EACzD,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,OAAO,KACT,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEhC,UAAU,UAAU;IAClB,MAAM,EAAE,SAAS,CAAC;IAClB,OAAO,EAAE,aAAa,GAAG,IAAI,CAAC;IAC9B,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAChD,wEAAwE;IACxE,WAAW,EAAE,qBAAqB,CAAC;IACnC,2EAA2E;IAE3E,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAC7B,iEAAiE;IACjE,qBAAqB,EAAE,2BAA2B,EAAE,CAAC;CACtD;AAmDD,wBAAgB,aAAa,IAAI,UAAU,CAE1C;AA0CD,qBAAa,SAAS;IACpB,OAAO,CAAC,KAAK,CAAqB;IAClC,OAAO,CAAC,GAAG,CAAa;IACxB,OAAO,CAAC,QAAQ,CAA4B;IAC5C,sEAAsE;IACtE,OAAO,CAAC,OAAO,CAAuC;gBAE1C,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,UAAU;IAUhD,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAiB1C,gBAAgB,CACpB,EAAE,EAAE,WAAW,EACf,MAAM,EAAE,WAAW,GAAG,MAAM,GAC3B,OAAO,CAAC,IAAI,CAAC;IAyXhB,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;IAYtC,cAAc,CAAC,GAAG,EAAE,WAAW,GAAG,IAAI;CAGvC;AAID,OAAO,EAAE,YAAY,EAAE,CAAC;AAKxB,MAAM,WAAW,uBAAuB,CAAC,CAAC,SAAS,eAAe;IAChE,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClD;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CACf,MAAM,EACN,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAC5D,CAAC;IACF;;;;;OAKG;IACH,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD;;;;OAIG;IACH,EAAE,CAAC,EAAE,SAAS,CAAC;IACf;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CACb,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,EAE1B,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,KACb,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,CAAC,SAAS,gBAAgB,EACrC,KAAK,EAAE,CAAC,EACR,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,GACxB,IAAI,CAAC;IACR,UAAU,CAAC,CAAC,SAAS,cAAc,EACjC,OAAO,EAAE,CAAC,EACV,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC,GAC1B,IAAI,CAAC;IACR;;;;;;;;;;;;OAYG;IACH,uBAAuB,CAAC,OAAO,EAAE,2BAA2B,GAAG,IAAI,CAAC;IACpE;;;;OAIG;IACH,eAAe,CACb,OAAO,EAAE,CACP,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,EAE1B,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,KACb,OAAO,CAAC,IAAI,CAAC,GACjB,IAAI,CAAC;CACT;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,CACH,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,SAAS,CACP,KAAK,EAAE,mBAAmB,EAC1B,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,KAAK,CACH,KAAK,EAAE,YAAY,CAAC,YAAY,CAAC,EACjC,GAAG,EAAE,UAAU,EACf,GAAG,EAAE,gBAAgB,GACpB,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,eAAe,EACxD,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC,GAC/B,UAAU,CAAC;AACd,wBAAgB,gBAAgB,CAAC,CAAC,SAAS,eAAe,EACxD,QAAQ,EAAE,CAAC,EACX,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EACjD,OAAO,EAAE,qBAAqB,EAC9B,SAAS,CAAC,EAAE,CAAC,YAAY,EAAE,mBAAmB,KAAK,IAAI,GACtD,UAAU,CAAC"}
|
|
@@ -49,14 +49,27 @@ import { createTypedDB } from '../../DB.js';
|
|
|
49
49
|
import { createStoreHandlers } from '../../StoreHandlers.js';
|
|
50
50
|
import { pgGetDocs } from '../../PostgresDoc.js';
|
|
51
51
|
import { userContextStore } from '../../auth/userContext.js';
|
|
52
|
+
import { registerWorkersMagicLinkRoutes } from '../../auth/workersMagicLink.js';
|
|
52
53
|
/**
|
|
53
|
-
* Default verifyToken implementation
|
|
54
|
-
*
|
|
55
|
-
*
|
|
56
|
-
*
|
|
57
|
-
*
|
|
54
|
+
* Default verifyToken implementation. Dual-mode, matching
|
|
55
|
+
* `src/server/Auth.ts`:
|
|
56
|
+
* Mode B (UGLY_APP_AUTH_MODE=self): verify the JWT locally with the
|
|
57
|
+
* same secret the magic-link provider mints under (AUTH_SECRET →
|
|
58
|
+
* JWT_SECRET). Uses `jose` because `jsonwebtoken` doesn't run
|
|
59
|
+
* under workerd's nodejs_compat.
|
|
60
|
+
* Mode A (default): round-trip to ugly.bot's `/verify`.
|
|
61
|
+
* Inlined here so the Workers bundle doesn't pull in `Auth.ts`
|
|
62
|
+
* (which has an `import express` at the top, breaking workerd).
|
|
58
63
|
*/
|
|
59
64
|
async function defaultVerifyToken(token) {
|
|
65
|
+
if (process.env['UGLY_APP_AUTH_MODE'] === 'self') {
|
|
66
|
+
const secret = process.env['AUTH_SECRET'] ?? process.env['JWT_SECRET'] ?? '';
|
|
67
|
+
if (!secret) {
|
|
68
|
+
throw new Error('Mode=self requires AUTH_SECRET (or JWT_SECRET) to verify session JWTs');
|
|
69
|
+
}
|
|
70
|
+
const { verifySessionJwt } = await import('../../auth/workersMagicLink.js');
|
|
71
|
+
return verifySessionJwt(token, secret);
|
|
72
|
+
}
|
|
60
73
|
const verifyUrl = `${getUglyBotUrl()}/verify`;
|
|
61
74
|
const res = await fetch(verifyUrl, {
|
|
62
75
|
headers: { Authorization: `Bearer ${token}` },
|
|
@@ -442,6 +455,12 @@ export function createWorkersApp(optsOrRegistry, handlersArg, appDefsArg, config
|
|
|
442
455
|
handlers: handlersArg,
|
|
443
456
|
}
|
|
444
457
|
: optsOrRegistry;
|
|
458
|
+
// Mode B (self-host) user-create hook. Defaults to no-op so the
|
|
459
|
+
// magic-link upsert still mints a userId; apps wire their own user
|
|
460
|
+
// row by calling `cfg.setOnUserCreate(...)` in the configurator OR
|
|
461
|
+
// by setting `opts.onUserCreate`. The opts override wins when both
|
|
462
|
+
// are set (matches `verifyToken` precedence).
|
|
463
|
+
let onUserCreate = async () => { };
|
|
445
464
|
// Drive the configurator if the caller passed one. We don't have
|
|
446
465
|
// typed access to the user's collections here — `appDefs` is held
|
|
447
466
|
// only to keep the call sites' types honest; the Workers-side
|
|
@@ -484,6 +503,9 @@ export function createWorkersApp(optsOrRegistry, handlersArg, appDefsArg, config
|
|
|
484
503
|
addSocketMessageHandler(handler) {
|
|
485
504
|
ctx.socketMessageHandlers.push(handler);
|
|
486
505
|
},
|
|
506
|
+
setOnUserCreate(handler) {
|
|
507
|
+
onUserCreate = handler;
|
|
508
|
+
},
|
|
487
509
|
};
|
|
488
510
|
configure(cfg);
|
|
489
511
|
}
|
|
@@ -575,8 +597,20 @@ export function createWorkersApp(optsOrRegistry, handlersArg, appDefsArg, config
|
|
|
575
597
|
ctx.verifyToken = opts.verifyToken;
|
|
576
598
|
if (opts.db)
|
|
577
599
|
dbOverride = opts.db;
|
|
600
|
+
if (opts.onUserCreate)
|
|
601
|
+
onUserCreate = opts.onUserCreate;
|
|
578
602
|
const hono = new Hono();
|
|
579
603
|
hono.get('/_health', (c) => c.json({ ok: true, kind: 'workers' }));
|
|
604
|
+
// ── Mode B (self-host) magic-link routes ──────────────────────────────
|
|
605
|
+
// Register synchronously at construction time; the handlers
|
|
606
|
+
// themselves are no-ops in Mode A (anti-enumeration 200/401 pair
|
|
607
|
+
// matches Mode B behaviour for unauthenticated callers). The Mode A
|
|
608
|
+
// OAuth routes below live at different paths so there's no overlap.
|
|
609
|
+
registerWorkersMagicLinkRoutes(hono, {
|
|
610
|
+
expiresMin: 15,
|
|
611
|
+
db: typedDb,
|
|
612
|
+
onUserCreate: (...args) => onUserCreate(...args),
|
|
613
|
+
});
|
|
580
614
|
// ── Auth routes — mirror server/Auth.ts on the Node side ──────────────
|
|
581
615
|
// The framework's SPA client hits these to drive the ugly.bot OAuth
|
|
582
616
|
// popup flow:
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"createWorkersApp.js","sourceRoot":"","sources":["../../../../src/server/adapter/workers/createWorkersApp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAkB,MAAM,iBAAiB,CAAC;AAY/D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAG9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAsD7D;;;;;;GAMG;AACH,KAAK,UAAU,kBAAkB,CAAC,KAAa;IAC7C,MAAM,SAAS,GAAG,GAAG,aAAa,EAAE,SAAS,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACjC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;KAC9C,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACvD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,MAAM,GAAG,GAAe;IACtB,qEAAqE;IACrE,mEAAmE;IACnE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE;IAC3C,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,IAAI;IACT,WAAW,EAAE,kBAAkB;IAC/B,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,IAAI;IACb,qBAAqB,EAAE,EAAE;CAC1B,CAAC;AAEF,MAAM,UAAU,aAAa;IAC3B,OAAO,GAAG,CAAC;AACb,CAAC;AA0CD,MAAM,OAAO,SAAS;IACZ,KAAK,CAAqB;IAC1B,GAAG,CAAa;IAChB,QAAQ,GAAuB,IAAI,CAAC;IAC5C,sEAAsE;IAC9D,OAAO,GAA6B,IAAI,GAAG,EAAE,CAAC;IAEtD,YAAY,KAAyB,EAAE,GAAe;QACpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,+DAA+D;QAC/D,iEAAiE;QACjE,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,QAAQ,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;YAC1B,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;SACO,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;SACQ,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,EAAe,EACf,MAA4B;QAE5B,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CACd,OAAO,MAAM,KAAK,QAAQ;gBACxB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAClB,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GACT,EAAE,CAAC,qBAAqB,EAA0B,IAAI;YACrD,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;SAChB,CAAC;QAEJ,yCAAyC;QACzC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,KAAK,GAAI,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAwB,IAAI,EAAE,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;gBACvB,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;gBACzB,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBAC/B,iEAAiE;gBACjE,kDAAkD;gBAClD,6DAA6D;gBAC7D,iEAAiE;gBACjE,2DAA2D;gBAC3D,0DAA0D;gBAC1D,oDAAoD;gBACpD,2DAA2D;gBAC3D,sDAAsD;gBACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBACrB,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;gBAC1C,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,IAAI,EAAE,MAAM;oBACZ,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE;wBACN,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;wBAC7B,GAAG,CAAC,QAAQ;4BACV,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACpC,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF,CAAC,CACH,CAAC;gBACF,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,IAAI,EAAE,OAAO;oBACb,KAAK,EAAG,GAAa,CAAC,OAAO;iBAC9B,CAAC,CACH,CAAC;gBACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,oDAAoD;YACpD,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,eAAe;aACvB,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,mEAAmE;QACnE,+DAA+D;QAC/D,6DAA6D;QAC7D,+DAA+D;QAC/D,IAAI,GAAG,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,6DAA6D;YAC7D,gEAAgE;YAChE,6CAA6C;YAC7C,MAAM,MAAM,GAAyD;gBACnE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC7B,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,CAAC;aAC/B,CAAC;YACF,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;gBAChD,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;oBAC3D,IAAI,QAAQ;wBAAE,OAAO;gBACvB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,sCAAsC;oBACtC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;oBACxD,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;wBACb,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,IAAI,EAAE,OAAO;wBACb,KAAK,EAAG,GAAa,CAAC,OAAO;qBAC9B,CAAC,CACH,CAAC;oBACF,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAClD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAGzC,CAAC;gBACF,8DAA8D;gBAC9D,4DAA4D;gBAC5D,+DAA+D;gBAC/D,2DAA2D;gBAC3D,2BAA2B;gBAC3B,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxB,mEAAmE;gBACnE,6DAA6D;gBAC7D,2DAA2D;gBAC3D,2DAA2D;gBAC3D,0DAA0D;gBAC1D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CACvC;oBACE,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,EACD,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CACtD,CAAC;gBACF,8DAA8D;gBAC9D,+DAA+D;gBAC/D,2DAA2D;gBAC3D,MAAM,qBAAqB,EAAE,CAAC;gBAC9B,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CACzD,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC5B,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAInD,CAAC;gBACF,2CAA2C;gBAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC;wBACH,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChB,CAAC;oBAAC,MAAM,CAAC;wBACP,YAAY;oBACd,CAAC;gBACH,CAAC;gBACD,6DAA6D;gBAC7D,6DAA6D;gBAC7D,oDAAoD;gBACpD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;gBAChC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB,EAAE,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,UAAU,EAAE,CAAC,CACtD,CAAC;gBACF,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBAC1D,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;iBAClC,CAAC,CAED,CAAC;gBACF,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;gBACnC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;wBACb,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,oCAAoC;qBAC5C,CAAC,CACH,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,EAAkC,EAAE,EAAE;oBACxE,gEAAgE;oBAChE,MAAM,IAAI,GACR,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ;wBACzB,CAAC,CAAC,EAAE,CAAC,IAAI;wBACT,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;oBACxC,IAAI,MAA8C,CAAC;oBACnD,IAAI,CAAC;wBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAGvB,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO;oBACT,CAAC;oBACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG;wBAAE,OAAO;oBACnD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC;oBAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC7B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBAChE,CAAC;yBAAM,CAAC;wBACN,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;4BACb,IAAI,EAAE,OAAO;4BACb,KAAK;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI;yBAClB,CAAC,CACH,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,2DAA2D;gBAC3D,8CAA8C;gBAC9C,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,GAAG,EAAE,WAAW;oBAChB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;iBAC5B,CAAC,CACH,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAChC,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC/D,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,0DAA0D;gBAC1D,uDAAuD;gBACvD,2DAA2D;gBAC3D,sBAAsB;gBACtB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAQjC,CAAC;gBACF,MAAM,EACJ,UAAU,EACV,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,KAAK,GACN,GAAG,OAAO,CAAC;gBACZ,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAExB,8DAA8D;gBAC9D,MAAM,WAAW,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC3D,MAAM,YAAY,GAAG;oBACnB,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAA2B;oBACzD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxC,CAAC;gBAEF,MAAM,cAAc,GAAG,KAAK,IAAmB,EAAE;oBAC/C,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,UAAU,EACV,WAAW,EACX,YAAY,CACb,CAAC;wBACF,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBAChE,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,sCAAsC;wBACtC,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC,CAAC;gBAEF,oBAAoB;gBACpB,MAAM,cAAc,EAAE,CAAC;gBAEvB,6CAA6C;gBAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC;wBACH,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChB,CAAC;oBAAC,MAAM,CAAC;wBACP,YAAY;oBACd,CAAC;gBACH,CAAC;gBAED,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;gBAChC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB,EAAE,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,UAAU,EAAE,CAAC,CACtD,CAAC;gBACF,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBAC1D,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;iBAClC,CAAC,CAA2C,CAAC;gBAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;gBACnC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;wBACb,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,kDAAkD;qBAC1D,CAAC,CACH,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,gBAAgB,CACrB,SAAS,EACT,CAAC,EAAkC,EAAE,EAAE;oBACrC,2DAA2D;oBAC3D,4DAA4D;oBAC5D,6BAA6B;oBAC7B,KAAK,EAAE,CAAC;oBACR,KAAK,cAAc,EAAE,CAAC;gBACxB,CAAC,CACF,CAAC;gBAEF,8CAA8C;gBAC9C,6DAA6D;gBAC7D,0DAA0D;gBAC1D,+DAA+D;gBAC/D,yBAAyB;gBACzB,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC1C,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;4BACb,GAAG,EAAE,WAAW;4BAChB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE;yBACpD,CAAC,CACH,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAC9D,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAChC,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC/D,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAI,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAwB,IAAI,EAAE,CAAC;gBACnE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACvC,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC;wBACH,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,CAAC;oBAAC,MAAM,CAAC;wBACP,YAAY;oBACd,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7B,CAAC;gBACD,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC/D,CAAC;gBACF,OAAO;YACT,CAAC;YAED,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,6BAA6B,GAAG,CAAC,IAAI,GAAG;aAChD,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,OAAO;gBACb,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,cAAc,CAAC,GAAgB;QAC7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,cAAc,CAAC,GAAgB;QAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,sEAAsE;AACtE,iEAAiE;AACjE,OAAO,EAAE,YAAY,EAAE,CAAC;AA8GxB,MAAM,UAAU,gBAAgB,CAC9B,cAA8C,EAC9C,WAAqD,EACrD,UAAkC,EAClC,SAAuD;IAEvD,kEAAkE;IAClE,mDAAmD;IACnD,MAAM,OAAO,GAA0B,UAAU,IAAI,EAAE,CAAC;IACxD,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC;IAC1B,6DAA6D;IAC7D,MAAM,IAAI,GACR,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC;YACE,QAAQ,EAAG,cAAoB,CAAC,QAAQ;YACxC,QAAQ,EAAE,WAAW;SACtB;QACH,CAAC,CAAE,cAA6C,CAAC;IAErD,iEAAiE;IACjE,kEAAkE;IAClE,8DAA8D;IAC9D,mEAAmE;IACnE,2DAA2D;IAC3D,sCAAsC;IACtC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,GAAG,GAAwB;YAC/B,YAAY,CAAC,KAAK,EAAE,QAAQ;gBAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChD,MAAM,QAAQ,GAAI,GAA6B,CAAC,QAAQ,IAAI,EAAE,CAAC;oBAC/D,IAAI,CAAC,QAAQ;wBAAE,SAAS;oBACxB,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE;wBACrB,IAAI;wBACJ,QAAQ;wBACR,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAmC;qBAC1D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,UAAU,CAAC,OAAO,EAAE,QAAQ;gBAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAClD,MAAM,QAAQ,GAAI,GAA6B,CAAC,QAAQ,CAAC;oBACzD,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE;wBACvB,IAAI;wBACJ,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAoD;wBAC1E,QAAQ;qBACT,CAAC,CAAC;oBACH,IAAI,QAAQ,EAAE,CAAC;wBACb,YAAY,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE;4BACjC,IAAI,EAAE,UAAU,IAAI,EAAE;4BACtB,QAAQ;4BACR,OAAO,EAAE,KAAK,IAAI,EAAE;gCAClB,MAAO,QAAQ,CAAC,IAAI,CAAqD,CAAC,SAAS,CAAC,CAAC;4BACvF,CAAC;yBACF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YACD,uBAAuB,CAAC,OAAO;gBAC7B,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,CAAC;SACF,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,+DAA+D;IAC/D,+DAA+D;IAC/D,8DAA8D;IAC9D,uCAAuC;IACvC,8DAA8D;IAC9D,MAAM,OAAO,GAAiB,aAAa,CAAC,OAAgB,CAAC,CAAC;IAC9D,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IAEtB,4DAA4D;IAC5D,oEAAoE;IACpE,8DAA8D;IAC9D,MAAM,kBAAkB,GAAwB,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,8DAA8D;QAC9D,kBAAkB,CAAC,IAAI,CAAC,GAAI,GAAW,CAAC,IAAI,IAAI,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,aAAa,GAAG,mBAAmB;IACvC,8DAA8D;IAC9D,kBAAyB,EACzB,OAAO,CACR,CAAC;IAEF,iEAAiE;IACjE,kEAAkE;IAClE,6DAA6D;IAC7D,gEAAgE;IAChE,mDAAmD;IACnD,MAAM,eAAe,GAGjB;QACF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YAClC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAG1C,CAAC;YACF,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAChE,8DAA8D;YAC9D,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CACrD,QAAiB,EACjB,EAAE,KAAK,EAAE,KAAc,EAAE,CAC1B,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACnC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAGxC,CAAC;YACF,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAC9D,KAAK,EAAE,KAAc;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,EAAE,CAAC;QACjB,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAGvC,CAAC;YACF,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC5C,6BAA6B,CAC9B,CAAC;YACF,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;gBAC1C,KAAK;gBACL,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAGpC,CAAC;YACF,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC5C,6BAA6B,CAC9B,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC;gBAC5D,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,CAAC;gBACjC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;aACpC,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAsB,CAAC;YACxD,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC5C,6BAA6B,CAC9B,CAAC;YACF,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACzC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAsB,CAAC;YACxD,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC5C,6BAA6B,CAC9B,CAAC;YACF,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC;IACF,iEAAiE;IACjE,6BAA6B;IAC7B,MAAM,gBAAgB,GAGlB,EAAE,GAAG,aAAa,EAAE,GAAG,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;IAEvE,MAAM,MAAM,GAAG,YAAY,CACzB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,QAAQ,EACb,gBAAgB,CACjB,CAAC;IACF,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IACpB,IAAI,IAAI,CAAC,WAAW;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACzD,IAAI,IAAI,CAAC,EAAE;QAAE,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC;IAElC,MAAM,IAAI,GAAG,IAAI,IAAI,EAA4B,CAAC;IAElD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAEnE,yEAAyE;IACzE,oEAAoE;IACpE,cAAc;IACd,iDAAiD;IACjD,+DAA+D;IAC/D,2DAA2D;IAC3D,2CAA2C;IAC3C,oEAAoE;IACpE,iDAAiD;IACjD,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU;IAC5D,SAAS,WAAW,CAAC,KAAa,EAAE,OAA4B,EAAE;QAChE,MAAM,KAAK,GAAG,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,EAAE,CACrD,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,SAAS,aAAa,CAAC,CAAyD;QAC9E,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,YAAY;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,GAAG,EAAE,GAAG,aAAa,EAAE,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,EAAE;SACrE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAEjD,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAG,GAAG,aAAa,EAAE,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE;oBACpD,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBACzB,CAAC,CAAC;gBACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,EAAE,GAAG,CAAC,CAAC;YACxE,CAAC;YACD,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;QAC9B,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,sDAAsD;IACtD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAEjD,CAAC;QACF,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,6DAA6D;QAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,KAAK,GACT,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,aAAa,CAAC,CAAC,CAAC;YAChB,EAAE,CAAC;QACL,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,iEAAiE;YACjE,kEAAkE;YAClE,iEAAiE;YACjE,+DAA+D;YAC/D,kDAAkD;YAClD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CACvC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI,EAAE,EACpC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAChD,CAAC;YACF,gEAAgE;YAChE,8DAA8D;YAC9D,6DAA6D;YAC7D,gDAAgD;YAChD,MAAM,qBAAqB,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,oEAAoE;IACpE,mEAAmE;IACnE,mEAAmE;IACnE,qCAAqC;IACrC,MAAM,eAAe,GAAG,KAAK,EAC3B,CAAqI,EAClH,EAAE;QACrB,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,WAAW,EAAE,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC;QAC3D,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,YAAY,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAC7B,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CACvC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG;aACtB,GAAkD,CAAC;QACtD,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAwB,CAAC;IAChE,CAAC,CAAC;IACF,8DAA8D;IAC9D,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,eAAsB,CAAC,CAAC;IACzC,8DAA8D;IAC9D,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAsB,CAAC,CAAC;IAE5C,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;YAC9B,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO;YACjC,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1C,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;oBACxB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,sCAAsC;wBACtC,OAAO,CAAC,KAAK,CACX,4BAA4B,KAAK,CAAC,IAAI,WAAW,EACjD,GAAG,CACJ,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO;YAC7B,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC/B,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;gBACrC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,CAAC,CAAC,GAAG,EAAE,CAAC;oBACR,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC3B,CAAC,CAAC,GAAG,EAAE,CAAC;gBACV,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,sCAAsC;oBACtC,OAAO,CAAC,KAAK,CACX,+BAA+B,UAAU,WAAW,EACpD,GAAG,CACJ,CAAC;oBACF,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,IAAI,UAAU,GAAqB,IAAI,CAAC;AAExC,SAAS,aAAa,CAAC,GAAe;IACpC,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG;QAAE,OAAO;IAC3C,iEAAiE;IACjE,gEAAgE;IAChE,+DAA+D;IAC/D,6DAA6D;IAC7D,4CAA4C;IAC5C,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG;YACZ,cAAc;YACd,gBAAgB;YAChB,iBAAiB;YACjB,mBAAmB;YACnB,gBAAgB;YAChB,kBAAkB;YAClB,kBAAkB;YAClB,oBAAoB;YACpB,oBAAoB;YACpB,aAAa;YACb,cAAc;YACd,YAAY;YACZ,oBAAoB;SACZ,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAI,GAA0C,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IACD,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,yDAAyD;IACzD,IAAI,WAAW,EAAE,EAAE,CAAC;QAClB,GAAG,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;QACd,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,UAAU,EAAE,CAAC;QACf,gEAAgE;QAChE,+DAA+D;QAC/D,2DAA2D;QAC3D,sCAAsC;QACrC,OAA6B,CAAC,EAAE,GAAG,UAAU,CAAC;IACjD,CAAC;IACD,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;AAChB,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,IAAI,CAAC,GAAG,UAAU,KAAK,CAAC,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC"}
|
|
1
|
+
{"version":3,"file":"createWorkersApp.js","sourceRoot":"","sources":["../../../../src/server/adapter/workers/createWorkersApp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAS5B,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAkB,MAAM,iBAAiB,CAAC;AAY/D,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAG9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,8BAA8B,EAAE,MAAM,gCAAgC,CAAC;AAsDhF;;;;;;;;;;GAUG;AACH,KAAK,UAAU,kBAAkB,CAAC,KAAa;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,MAAM,EAAE,CAAC;QACjD,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAChE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CACvC,gCAAgC,CACjC,CAAC;QACF,OAAO,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,aAAa,EAAE,SAAS,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;QACjC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE;KAC9C,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,kCAAkC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAwB,CAAC;IACvD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,MAAM,GAAG,GAAe;IACtB,qEAAqE;IACrE,mEAAmE;IACnE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE;IAC3C,OAAO,EAAE,IAAI;IACb,GAAG,EAAE,IAAI;IACT,WAAW,EAAE,kBAAkB;IAC/B,WAAW,EAAE,EAAE;IACf,OAAO,EAAE,IAAI;IACb,qBAAqB,EAAE,EAAE;CAC1B,CAAC;AAEF,MAAM,UAAU,aAAa;IAC3B,OAAO,GAAG,CAAC;AACb,CAAC;AA0CD,MAAM,OAAO,SAAS;IACZ,KAAK,CAAqB;IAC1B,GAAG,CAAa;IAChB,QAAQ,GAAuB,IAAI,CAAC;IAC5C,sEAAsE;IAC9D,OAAO,GAA6B,IAAI,GAAG,EAAE,CAAC;IAEtD,YAAY,KAAyB,EAAE,GAAe;QACpD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,+DAA+D;QAC/D,iEAAiE;QACjE,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,WAAW,EAAE,CAAC;YACnD,OAAO,IAAI,QAAQ,CAAC,4BAA4B,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;YAC1B,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;SACO,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACxB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;SACQ,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,EAAe,EACf,MAA4B;QAE5B,IAAI,GAAoB,CAAC;QACzB,IAAI,CAAC;YACH,GAAG,GAAG,IAAI,CAAC,KAAK,CACd,OAAO,MAAM,KAAK,QAAQ;gBACxB,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAClB,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GACT,EAAE,CAAC,qBAAqB,EAA0B,IAAI;YACrD,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,IAAI;SAChB,CAAC;QAEJ,yCAAyC;QACzC,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,KAAK,GAAI,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAwB,IAAI,EAAE,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;gBAC5C,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC;gBACvB,MAAM,CAAC,SAAS,GAAG,KAAK,CAAC;gBACzB,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;gBAC/B,iEAAiE;gBACjE,kDAAkD;gBAClD,6DAA6D;gBAC7D,iEAAiE;gBACjE,2DAA2D;gBAC3D,0DAA0D;gBAC1D,oDAAoD;gBACpD,2DAA2D;gBAC3D,sDAAsD;gBACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;gBACrB,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;gBAC1C,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,IAAI,EAAE,MAAM;oBACZ,EAAE,EAAE,IAAI;oBACR,MAAM,EAAE;wBACN,IAAI,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE;wBAC7B,GAAG,CAAC,QAAQ;4BACV,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE;4BACpC,CAAC,CAAC,EAAE,CAAC;qBACR;iBACF,CAAC,CACH,CAAC;gBACF,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;YAC7C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;oBACb,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,IAAI,EAAE,OAAO;oBACb,KAAK,EAAG,GAAa,CAAC,OAAO;iBAC9B,CAAC,CACH,CAAC;gBACF,EAAE,CAAC,KAAK,EAAE,CAAC;YACb,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,oDAAoD;YACpD,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,eAAe;aACvB,CAAC,CACH,CAAC;YACF,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,mEAAmE;QACnE,+DAA+D;QAC/D,6DAA6D;QAC7D,+DAA+D;QAC/D,IAAI,GAAG,CAAC,qBAAqB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,6DAA6D;YAC7D,gEAAgE;YAChE,6CAA6C;YAC7C,MAAM,MAAM,GAAyD;gBACnE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC7B,UAAU,EAAE,EAAE,CAAC,UAAU,IAAI,CAAC;aAC/B,CAAC;YACF,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,qBAAqB,EAAE,CAAC;gBAChD,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;oBAC3D,IAAI,QAAQ;wBAAE,OAAO;gBACvB,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,sCAAsC;oBACtC,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,GAAG,CAAC,CAAC;oBACxD,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;wBACb,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,IAAI,EAAE,OAAO;wBACb,KAAK,EAAG,GAAa,CAAC,OAAO;qBAC9B,CAAC,CACH,CAAC;oBACF,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAClD,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAGzC,CAAC;gBACF,8DAA8D;gBAC9D,4DAA4D;gBAC5D,+DAA+D;gBAC/D,2DAA2D;gBAC3D,2BAA2B;gBAC3B,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACxB,mEAAmE;gBACnE,6DAA6D;gBAC7D,2DAA2D;gBAC3D,2DAA2D;gBAC3D,0DAA0D;gBAC1D,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CACvC;oBACE,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;iBAC5B,EACD,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CACtD,CAAC;gBACF,8DAA8D;gBAC9D,+DAA+D;gBAC/D,2DAA2D;gBAC3D,MAAM,qBAAqB,EAAE,CAAC;gBAC9B,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CACzD,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC5B,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAInD,CAAC;gBACF,2CAA2C;gBAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC;wBACH,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChB,CAAC;oBAAC,MAAM,CAAC;wBACP,YAAY;oBACd,CAAC;gBACH,CAAC;gBACD,6DAA6D;gBAC7D,6DAA6D;gBAC7D,oDAAoD;gBACpD,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;gBAChC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB,EAAE,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,UAAU,EAAE,CAAC,CACtD,CAAC;gBACF,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBAC1D,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;iBAClC,CAAC,CAED,CAAC;gBACF,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;gBACnC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;wBACb,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,oCAAoC;qBAC5C,CAAC,CACH,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,CAAC,EAAkC,EAAE,EAAE;oBACxE,gEAAgE;oBAChE,MAAM,IAAI,GACR,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ;wBACzB,CAAC,CAAC,EAAE,CAAC,IAAI;wBACT,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;oBACxC,IAAI,MAA8C,CAAC;oBACnD,IAAI,CAAC;wBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAGvB,CAAC;oBACJ,CAAC;oBAAC,MAAM,CAAC;wBACP,OAAO;oBACT,CAAC;oBACD,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG;wBAAE,OAAO;oBACnD,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC;oBAC1B,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;wBAC7B,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBAChE,CAAC;yBAAM,CAAC;wBACN,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;4BACb,IAAI,EAAE,OAAO;4BACb,KAAK;4BACL,IAAI,EAAE,MAAM,CAAC,IAAI;yBAClB,CAAC,CACH,CAAC;oBACJ,CAAC;gBACH,CAAC,CAAC,CAAC;gBACH,2DAA2D;gBAC3D,8CAA8C;gBAC9C,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;oBACb,GAAG,EAAE,WAAW;oBAChB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE;iBAC5B,CAAC,CACH,CAAC;gBACF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAChC,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC/D,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1D,0DAA0D;gBAC1D,uDAAuD;gBACvD,2DAA2D;gBAC3D,sBAAsB;gBACtB,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAQjC,CAAC;gBACF,MAAM,EACJ,UAAU,EACV,IAAI,EACJ,MAAM,EACN,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,KAAK,GACN,GAAG,OAAO,CAAC;gBACZ,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAExB,8DAA8D;gBAC9D,MAAM,WAAW,GAAG,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC3D,MAAM,YAAY,GAAG;oBACnB,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAA2B;oBACzD,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxC,CAAC;gBAEF,MAAM,cAAc,GAAG,KAAK,IAAmB,EAAE;oBAC/C,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,SAAS,CAC1B,UAAU,EACV,WAAW,EACX,YAAY,CACb,CAAC;wBACF,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;oBAChE,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,sCAAsC;wBACtC,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,GAAG,CAAC,CAAC;oBAC7D,CAAC;gBACH,CAAC,CAAC;gBAEF,oBAAoB;gBACpB,MAAM,cAAc,EAAE,CAAC;gBAEvB,6CAA6C;gBAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACtC,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC;wBACH,KAAK,CAAC,KAAK,EAAE,CAAC;oBAChB,CAAC;oBAAC,MAAM,CAAC;wBACP,YAAY;oBACd,CAAC;gBACH,CAAC;gBAED,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC;gBAChC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CACjB,EAAE,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,UAAU,EAAE,CAAC,CACtD,CAAC;gBACF,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,sBAAsB,EAAE;oBAC1D,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE;iBAClC,CAAC,CAA2C,CAAC;gBAC9C,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC;gBACnC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;wBACb,EAAE,EAAE,GAAG,CAAC,EAAE;wBACV,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,kDAAkD;qBAC1D,CAAC,CACH,CAAC;oBACF,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,MAAM,EAAE,CAAC;gBAChB,MAAM,CAAC,gBAAgB,CACrB,SAAS,EACT,CAAC,EAAkC,EAAE,EAAE;oBACrC,2DAA2D;oBAC3D,4DAA4D;oBAC5D,6BAA6B;oBAC7B,KAAK,EAAE,CAAC;oBACR,KAAK,cAAc,EAAE,CAAC;gBACxB,CAAC,CACF,CAAC;gBAEF,8CAA8C;gBAC9C,6DAA6D;gBAC7D,0DAA0D;gBAC1D,+DAA+D;gBAC/D,yBAAyB;gBACzB,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACzC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;wBAC1C,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;4BACb,GAAG,EAAE,WAAW;4BAChB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE;yBACpD,CAAC,CACH,CAAC;oBACJ,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAC9D,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;gBAChC,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC/D,CAAC;gBACF,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC/B,MAAM,KAAK,GAAI,GAAG,CAAC,OAAO,EAAE,CAAC,OAAO,CAAwB,IAAI,EAAE,CAAC;gBACnE,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBACvC,IAAI,MAAM,EAAE,CAAC;oBACX,IAAI,CAAC;wBACH,MAAM,CAAC,KAAK,EAAE,CAAC;oBACjB,CAAC;oBAAC,MAAM,CAAC;wBACP,YAAY;oBACd,CAAC;oBACD,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7B,CAAC;gBACD,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAC/D,CAAC;gBACF,OAAO;YACT,CAAC;YAED,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,6BAA6B,GAAG,CAAC,IAAI,GAAG;aAChD,CAAC,CACH,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,IAAI,CACL,IAAI,CAAC,SAAS,CAAC;gBACb,EAAE,EAAE,GAAG,CAAC,EAAE;gBACV,IAAI,EAAE,OAAO;gBACb,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,cAAc,CAAC,GAAgB;QAC7B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,CAAC,KAAK,EAAE,CAAC;YACjB,CAAC;YAAC,MAAM,CAAC;gBACP,YAAY;YACd,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,cAAc,CAAC,GAAgB;QAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;CACF;AAED,sEAAsE;AACtE,iEAAiE;AACjE,OAAO,EAAE,YAAY,EAAE,CAAC;AAuIxB,MAAM,UAAU,gBAAgB,CAC9B,cAA8C,EAC9C,WAAqD,EACrD,UAAkC,EAClC,SAAuD;IAEvD,kEAAkE;IAClE,mDAAmD;IACnD,MAAM,OAAO,GAA0B,UAAU,IAAI,EAAE,CAAC;IACxD,GAAG,CAAC,WAAW,GAAG,OAAO,CAAC;IAC1B,6DAA6D;IAC7D,MAAM,IAAI,GACR,WAAW,KAAK,SAAS;QACvB,CAAC,CAAC;YACE,QAAQ,EAAG,cAAoB,CAAC,QAAQ;YACxC,QAAQ,EAAE,WAAW;SACtB;QACH,CAAC,CAAE,cAA6C,CAAC;IAErD,gEAAgE;IAChE,mEAAmE;IACnE,mEAAmE;IACnE,mEAAmE;IACnE,8CAA8C;IAC9C,IAAI,YAAY,GAKK,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;IAEpC,iEAAiE;IACjE,kEAAkE;IAClE,8DAA8D;IAC9D,mEAAmE;IACnE,2DAA2D;IAC3D,sCAAsC;IACtC,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,GAAG,GAAwB;YAC/B,YAAY,CAAC,KAAK,EAAE,QAAQ;gBAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAChD,MAAM,QAAQ,GAAI,GAA6B,CAAC,QAAQ,IAAI,EAAE,CAAC;oBAC/D,IAAI,CAAC,QAAQ;wBAAE,SAAS;oBACxB,YAAY,CAAC,GAAG,CAAC,IAAI,EAAE;wBACrB,IAAI;wBACJ,QAAQ;wBACR,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAmC;qBAC1D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YACD,UAAU,CAAC,OAAO,EAAE,QAAQ;gBAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;oBAClD,MAAM,QAAQ,GAAI,GAA6B,CAAC,QAAQ,CAAC;oBACzD,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE;wBACvB,IAAI;wBACJ,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAoD;wBAC1E,QAAQ;qBACT,CAAC,CAAC;oBACH,IAAI,QAAQ,EAAE,CAAC;wBACb,YAAY,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE;4BACjC,IAAI,EAAE,UAAU,IAAI,EAAE;4BACtB,QAAQ;4BACR,OAAO,EAAE,KAAK,IAAI,EAAE;gCAClB,MAAO,QAAQ,CAAC,IAAI,CAAqD,CAAC,SAAS,CAAC,CAAC;4BACvF,CAAC;yBACF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;YACH,CAAC;YACD,uBAAuB,CAAC,OAAO;gBAC7B,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1C,CAAC;YACD,eAAe,CAAC,OAAO;gBACrB,YAAY,GAAG,OAAO,CAAC;YACzB,CAAC;SACF,CAAC;QACF,SAAS,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC;IAED,+DAA+D;IAC/D,+DAA+D;IAC/D,8DAA8D;IAC9D,uCAAuC;IACvC,8DAA8D;IAC9D,MAAM,OAAO,GAAiB,aAAa,CAAC,OAAgB,CAAC,CAAC;IAC9D,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IAEtB,4DAA4D;IAC5D,oEAAoE;IACpE,8DAA8D;IAC9D,MAAM,kBAAkB,GAAwB,EAAE,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,8DAA8D;QAC9D,kBAAkB,CAAC,IAAI,CAAC,GAAI,GAAW,CAAC,IAAI,IAAI,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,aAAa,GAAG,mBAAmB;IACvC,8DAA8D;IAC9D,kBAAyB,EACzB,OAAO,CACR,CAAC;IAEF,iEAAiE;IACjE,kEAAkE;IAClE,6DAA6D;IAC7D,gEAAgE;IAChE,mDAAmD;IACnD,MAAM,eAAe,GAGjB;QACF,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YAClC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAG1C,CAAC;YACF,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAChE,8DAA8D;YAC9D,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CAAC,QAAQ,CACrD,QAAiB,EACjB,EAAE,KAAK,EAAE,KAAc,EAAE,CAC1B,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;QACD,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACnC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAGxC,CAAC;YACF,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAC9D,KAAK,EAAE,KAAc;aACtB,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,EAAE,CAAC;QACjB,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACrC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAGvC,CAAC;YACF,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC5C,6BAA6B,CAC9B,CAAC;YACF,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;gBAC1C,KAAK;gBACL,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAGpC,CAAC;YACF,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC5C,6BAA6B,CAC9B,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC;gBAC5D,GAAG,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,GAAG,EAAE,CAAC;gBACjC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,IAAI,EAAE,CAAC;aACpC,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,CAAC;QACrB,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAsB,CAAC;YACxD,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC5C,6BAA6B,CAC9B,CAAC;YACF,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE;YACzC,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAsB,CAAC;YACxD,MAAM,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAC5C,6BAA6B,CAC9B,CAAC;YACF,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7D,CAAC;KACF,CAAC;IACF,iEAAiE;IACjE,6BAA6B;IAC7B,MAAM,gBAAgB,GAGlB,EAAE,GAAG,aAAa,EAAE,GAAG,eAAe,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;IAEvE,MAAM,MAAM,GAAG,YAAY,CACzB,IAAI,CAAC,QAAQ,EACb,IAAI,CAAC,QAAQ,EACb,gBAAgB,CACjB,CAAC;IACF,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;IACpB,IAAI,IAAI,CAAC,WAAW;QAAE,GAAG,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IACzD,IAAI,IAAI,CAAC,EAAE;QAAE,UAAU,GAAG,IAAI,CAAC,EAAE,CAAC;IAClC,IAAI,IAAI,CAAC,YAAY;QAAE,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IAExD,MAAM,IAAI,GAAG,IAAI,IAAI,EAA4B,CAAC;IAElD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IAEnE,yEAAyE;IACzE,4DAA4D;IAC5D,iEAAiE;IACjE,oEAAoE;IACpE,oEAAoE;IACpE,8BAA8B,CAAC,IAAI,EAAE;QACnC,UAAU,EAAE,EAAE;QACd,EAAE,EAAE,OAAO;QACX,YAAY,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC;KACjD,CAAC,CAAC;IAEH,yEAAyE;IACzE,oEAAoE;IACpE,cAAc;IACd,iDAAiD;IACjD,+DAA+D;IAC/D,2DAA2D;IAC3D,2CAA2C;IAC3C,oEAAoE;IACpE,iDAAiD;IACjD,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,UAAU;IAC5D,SAAS,WAAW,CAAC,KAAa,EAAE,OAA4B,EAAE;QAChE,MAAM,KAAK,GAAG,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,EAAE,CACrD,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,SAAS,aAAa,CAAC,CAAyD;QAC9E,MAAM,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAC/B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/C,IAAI,IAAI,KAAK,YAAY;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE;QAC1B,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC,IAAI,CAAC;YACZ,GAAG,EAAE,GAAG,aAAa,EAAE,iBAAiB,kBAAkB,CAAC,MAAM,CAAC,EAAE;SACrE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAEjD,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YAC9D,MAAM,SAAS,GAAG,GAAG,aAAa,EAAE,sBAAsB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,sCAAsC;gBACtC,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE;oBACpD,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;iBACzB,CAAC,CAAC;gBACH,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;YACzD,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAChB,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,EAAE,GAAG,CAAC,CAAC;YACxE,CAAC;YACD,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAChD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;YAC1C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,MAAM,KAAK,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC7B,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACzD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,EAAE;QAC9B,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,sDAAsD;IACtD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAClC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAEjD,CAAC;QACF,+DAA+D;QAC/D,iEAAiE;QACjE,mEAAmE;QACnE,6DAA6D;QAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;QACjD,MAAM,KAAK,GACT,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,aAAa,CAAC,CAAC,CAAC;YAChB,EAAE,CAAC;QACL,IAAI,MAAM,GAAkB,IAAI,CAAC;QACjC,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,GAAG,IAAI,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,iEAAiE;YACjE,kEAAkE;YAClE,iEAAiE;YACjE,+DAA+D;YAC/D,kDAAkD;YAClD,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CACvC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,IAAI,IAAI,EAAE,EACpC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAChD,CAAC;YACF,gEAAgE;YAChE,8DAA8D;YAC9D,6DAA6D;YAC7D,gDAAgD;YAChD,MAAM,qBAAqB,EAAE,CAAC;YAC9B,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,EAAE,GAAG,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,oEAAoE;IACpE,mEAAmE;IACnE,mEAAmE;IACnE,qCAAqC;IACrC,MAAM,eAAe,GAAG,KAAK,EAC3B,CAAqI,EAClH,EAAE;QACrB,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,WAAW,EAAE,CAAC;YAC5C,OAAO,CAAC,CAAC,IAAI,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,MAAM,CAAC;QAC3D,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,YAAY,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAC7B,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,CACvC,CAAC;QACF,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG;aACtB,GAAkD,CAAC;QACtD,OAAO,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAwB,CAAC;IAChE,CAAC,CAAC;IACF,8DAA8D;IAC9D,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,eAAsB,CAAC,CAAC;IACzC,8DAA8D;IAC9D,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,eAAsB,CAAC,CAAC;IAE5C,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM;YAC9B,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO;YACjC,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1C,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC;oBACxB,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,sCAAsC;wBACtC,OAAO,CAAC,KAAK,CACX,4BAA4B,KAAK,CAAC,IAAI,WAAW,EACjD,GAAG,CACJ,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO;YAC7B,aAAa,CAAC,GAAG,CAAC,CAAC;YACnB,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;gBAC/B,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC;gBACrC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,CAAC,CAAC,GAAG,EAAE,CAAC;oBACR,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;oBAC3B,CAAC,CAAC,GAAG,EAAE,CAAC;gBACV,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,sCAAsC;oBACtC,OAAO,CAAC,KAAK,CACX,+BAA+B,UAAU,WAAW,EACpD,GAAG,CACJ,CAAC;oBACF,CAAC,CAAC,KAAK,EAAE,CAAC;gBACZ,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,IAAI,UAAU,GAAqB,IAAI,CAAC;AAExC,SAAS,aAAa,CAAC,GAAe;IACpC,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,GAAG,KAAK,GAAG;QAAE,OAAO;IAC3C,iEAAiE;IACjE,gEAAgE;IAChE,+DAA+D;IAC/D,6DAA6D;IAC7D,4CAA4C;IAC5C,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG;YACZ,cAAc;YACd,gBAAgB;YAChB,iBAAiB;YACjB,mBAAmB;YACnB,gBAAgB;YAChB,kBAAkB;YAClB,kBAAkB;YAClB,oBAAoB;YACpB,oBAAoB;YACpB,aAAa;YACb,cAAc;YACd,YAAY;YACZ,oBAAoB;SACZ,CAAC;QACX,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,CAAC,GAAI,GAA0C,CAAC,IAAI,CAAC,CAAC;YAC5D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;IACH,CAAC;IACD,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,yDAAyD;IACzD,IAAI,WAAW,EAAE,EAAE,CAAC;QAClB,GAAG,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;QAC3B,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;QACd,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAC1C,IAAI,UAAU,EAAE,CAAC;QACf,gEAAgE;QAChE,+DAA+D;QAC/D,2DAA2D;QAC3D,sCAAsC;QACrC,OAA6B,CAAC,EAAE,GAAG,UAAU,CAAC;IACjD,CAAC;IACD,UAAU,CAAC,OAAO,CAAC,CAAC;IACpB,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACtB,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC;AAChB,CAAC;AAED,SAAS,IAAI,CAAC,CAAS;IACrB,IAAI,CAAC,GAAG,UAAU,KAAK,CAAC,CAAC;IACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC"}
|
|
@@ -0,0 +1,54 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Workers-runtime port of `magicLinkProvider.ts`.
|
|
3
|
+
*
|
|
4
|
+
* Wires the same three routes onto a Hono app instead of an Express
|
|
5
|
+
* router, and mints session JWTs with `jose` (which works under
|
|
6
|
+
* workerd's nodejs_compat layer; `jsonwebtoken` does not). The HMAC
|
|
7
|
+
* helpers in `./hmac.ts` use `node:crypto` which IS supported under
|
|
8
|
+
* nodejs_compat, so they're reused unchanged.
|
|
9
|
+
*
|
|
10
|
+
* Mounted by `createWorkersApp` only when `UGLY_APP_AUTH_MODE === 'self'`.
|
|
11
|
+
* In Mode A (uglybot) the framework's `/auth/url` + `/auth/verify` flow
|
|
12
|
+
* handles sign-in and these routes stay unmounted.
|
|
13
|
+
*/
|
|
14
|
+
import type { Hono } from 'hono';
|
|
15
|
+
import { type TypedDB } from '../../shared/DB.js';
|
|
16
|
+
import { type OnUserCreate } from './userUpsert.js';
|
|
17
|
+
export interface WorkersMagicLinkConfig {
|
|
18
|
+
/** Magic-link lifetime in minutes (1..1440). */
|
|
19
|
+
expiresMin: number;
|
|
20
|
+
/** Friendly app name baked into the email subject + body. */
|
|
21
|
+
appName?: string;
|
|
22
|
+
/** Origin to build the magic-link URL with (defaults to PUBLIC_APP_URL env). */
|
|
23
|
+
publicAppUrl?: string;
|
|
24
|
+
/**
|
|
25
|
+
* TypedDB instance used to read/write `BUILTIN_DEFS.authMagicLink` +
|
|
26
|
+
* `BUILTIN_DEFS.authIdentity`. The Workers app already builds one over
|
|
27
|
+
* the user collections — pass that here (collection-name lookups on
|
|
28
|
+
* unknown defs degrade gracefully — meta defaults are fine).
|
|
29
|
+
*/
|
|
30
|
+
db: TypedDB<any>;
|
|
31
|
+
/** Hook the framework invokes when a brand-new user is minted. */
|
|
32
|
+
onUserCreate: OnUserCreate;
|
|
33
|
+
}
|
|
34
|
+
/**
|
|
35
|
+
* Mint a self-host session JWT. Carries `{ sub: userId }` so
|
|
36
|
+
* `verifySessionJwt` (and the Node-side `verifyToken`) both see the
|
|
37
|
+
* same shape `jsonwebtoken` produced.
|
|
38
|
+
*/
|
|
39
|
+
export declare function mintSessionJwt(userId: string, secret: string, ttlSec?: number): Promise<string>;
|
|
40
|
+
/** Verify a self-host session JWT and return the userId. Throws on invalid. */
|
|
41
|
+
export declare function verifySessionJwt(token: string, secret: string): Promise<string>;
|
|
42
|
+
/**
|
|
43
|
+
* Register the three magic-link routes on a Hono app.
|
|
44
|
+
*
|
|
45
|
+
* POST /auth/magic-link/request — body { email } → sends email
|
|
46
|
+
* GET /auth/magic-link/verify — HTML bridge that POSTs to itself
|
|
47
|
+
* POST /auth/magic-link/verify — body { id, sig } → sets cookie
|
|
48
|
+
*
|
|
49
|
+
* The behaviour matches `magicLinkProvider.ts` exactly: anti-enumeration
|
|
50
|
+
* (always 200 on request), in-memory rate limits, single-use tokens,
|
|
51
|
+
* HMAC-SHA256 short signatures, JWT mint on success.
|
|
52
|
+
*/
|
|
53
|
+
export declare function registerWorkersMagicLinkRoutes(hono: Hono<any>, config: WorkersMagicLinkConfig): void;
|
|
54
|
+
//# sourceMappingURL=workersMagicLink.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"workersMagicLink.d.ts","sourceRoot":"","sources":["../../../src/server/auth/workersMagicLink.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAW,IAAI,EAAE,MAAM,MAAM,CAAC;AAK1C,OAAO,EAA4B,KAAK,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAI5E,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAkBxE,MAAM,WAAW,sBAAsB;IACrC,gDAAgD;IAChD,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IAEH,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,kEAAkE;IAClE,YAAY,EAAE,YAAY,CAAC;CAC5B;AA+DD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,MAA+B,GACtC,OAAO,CAAC,MAAM,CAAC,CAOjB;AAED,+EAA+E;AAC/E,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAOjB;AAYD;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAE5C,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EACf,MAAM,EAAE,sBAAsB,GAC7B,IAAI,CA8IN"}
|
|
@@ -0,0 +1,234 @@
|
|
|
1
|
+
import { SignJWT, jwtVerify } from 'jose';
|
|
2
|
+
import { nanoid } from 'nanoid';
|
|
3
|
+
import crypto from 'node:crypto';
|
|
4
|
+
import { z } from 'zod';
|
|
5
|
+
import { BUILTIN_DEFS, dbDefaults } from '../../shared/DB.js';
|
|
6
|
+
import { emailSend } from '../Email.js';
|
|
7
|
+
import { signMagicLink, verifyMagicLink } from './hmac.js';
|
|
8
|
+
import { magicLinkEmail } from './magicLinkTemplate.js';
|
|
9
|
+
import { upsertAuthIdentity } from './userUpsert.js';
|
|
10
|
+
/** 30 days, in seconds. Mirrors `Auth.ts` + `magicLinkProvider.ts`. */
|
|
11
|
+
const COOKIE_MAX_AGE_SECONDS = 30 * 24 * 60 * 60;
|
|
12
|
+
const HOUR_MS = 60 * 60 * 1000;
|
|
13
|
+
const MAX_REQUESTS_PER_IP_PER_HOUR = 20;
|
|
14
|
+
const MAX_REQUESTS_PER_EMAIL_PER_HOUR = 5;
|
|
15
|
+
const requestBodySchema = z.object({
|
|
16
|
+
email: z.string().email().max(254),
|
|
17
|
+
});
|
|
18
|
+
const verifyBodySchema = z.object({
|
|
19
|
+
id: z.string().min(1).max(128),
|
|
20
|
+
sig: z.string().min(1).max(128),
|
|
21
|
+
});
|
|
22
|
+
function getAuthSecret() {
|
|
23
|
+
const s = process.env['AUTH_SECRET'] ?? process.env['JWT_SECRET'] ?? '';
|
|
24
|
+
if (!s) {
|
|
25
|
+
throw new Error('[Auth] AUTH_SECRET (or JWT_SECRET) is required for Mode B (self-host auth).');
|
|
26
|
+
}
|
|
27
|
+
return s;
|
|
28
|
+
}
|
|
29
|
+
function getAppPublicUrl(c, override) {
|
|
30
|
+
const explicit = override ?? process.env['PUBLIC_APP_URL'];
|
|
31
|
+
if (explicit)
|
|
32
|
+
return explicit.replace(/\/+$/, '');
|
|
33
|
+
// Fall back to the request's own origin — works for workers.dev and
|
|
34
|
+
// custom-domain deploys without needing a redeploy to set the URL.
|
|
35
|
+
const fwdProto = c.req.header('x-forwarded-proto');
|
|
36
|
+
const host = c.req.header('host');
|
|
37
|
+
if (host) {
|
|
38
|
+
const proto = fwdProto || 'https';
|
|
39
|
+
return `${proto}://${host}`.replace(/\/+$/, '');
|
|
40
|
+
}
|
|
41
|
+
throw new Error('[Auth] PUBLIC_APP_URL is required to build magic-link URLs.');
|
|
42
|
+
}
|
|
43
|
+
function sha256Hex(s) {
|
|
44
|
+
return crypto.createHash('sha256').update(s).digest('hex');
|
|
45
|
+
}
|
|
46
|
+
function getClientIp(c) {
|
|
47
|
+
const fwd = c.req.header('x-forwarded-for');
|
|
48
|
+
if (fwd) {
|
|
49
|
+
const first = fwd.split(',')[0]?.trim();
|
|
50
|
+
if (first)
|
|
51
|
+
return first;
|
|
52
|
+
}
|
|
53
|
+
const real = c.req.header('cf-connecting-ip');
|
|
54
|
+
if (real)
|
|
55
|
+
return real;
|
|
56
|
+
return 'unknown';
|
|
57
|
+
}
|
|
58
|
+
function makeBucketLimiter(maxPerWindow, windowMs) {
|
|
59
|
+
const buckets = new Map();
|
|
60
|
+
return (key) => {
|
|
61
|
+
const now = Date.now();
|
|
62
|
+
const b = buckets.get(key);
|
|
63
|
+
if (!b || now - b.windowStart >= windowMs) {
|
|
64
|
+
buckets.set(key, { windowStart: now, count: 1 });
|
|
65
|
+
return true;
|
|
66
|
+
}
|
|
67
|
+
if (b.count >= maxPerWindow)
|
|
68
|
+
return false;
|
|
69
|
+
b.count += 1;
|
|
70
|
+
return true;
|
|
71
|
+
};
|
|
72
|
+
}
|
|
73
|
+
/**
|
|
74
|
+
* Mint a self-host session JWT. Carries `{ sub: userId }` so
|
|
75
|
+
* `verifySessionJwt` (and the Node-side `verifyToken`) both see the
|
|
76
|
+
* same shape `jsonwebtoken` produced.
|
|
77
|
+
*/
|
|
78
|
+
export async function mintSessionJwt(userId, secret, ttlSec = COOKIE_MAX_AGE_SECONDS) {
|
|
79
|
+
const key = new TextEncoder().encode(secret);
|
|
80
|
+
return new SignJWT({ sub: userId })
|
|
81
|
+
.setProtectedHeader({ alg: 'HS256' })
|
|
82
|
+
.setIssuedAt()
|
|
83
|
+
.setExpirationTime(Math.floor(Date.now() / 1000) + ttlSec)
|
|
84
|
+
.sign(key);
|
|
85
|
+
}
|
|
86
|
+
/** Verify a self-host session JWT and return the userId. Throws on invalid. */
|
|
87
|
+
export async function verifySessionJwt(token, secret) {
|
|
88
|
+
const key = new TextEncoder().encode(secret);
|
|
89
|
+
const { payload } = await jwtVerify(token, key);
|
|
90
|
+
if (typeof payload.sub !== 'string' || !payload.sub) {
|
|
91
|
+
throw new Error('Invalid token (no sub)');
|
|
92
|
+
}
|
|
93
|
+
return payload.sub;
|
|
94
|
+
}
|
|
95
|
+
function buildAuthCookie(token, opts = {}) {
|
|
96
|
+
const parts = [`auth_token=${opts.clear ? '' : token}`];
|
|
97
|
+
parts.push('Path=/');
|
|
98
|
+
parts.push('HttpOnly');
|
|
99
|
+
parts.push('Secure');
|
|
100
|
+
parts.push('SameSite=Lax');
|
|
101
|
+
parts.push(`Max-Age=${opts.clear ? 0 : COOKIE_MAX_AGE_SECONDS}`);
|
|
102
|
+
return parts.join('; ');
|
|
103
|
+
}
|
|
104
|
+
/**
|
|
105
|
+
* Register the three magic-link routes on a Hono app.
|
|
106
|
+
*
|
|
107
|
+
* POST /auth/magic-link/request — body { email } → sends email
|
|
108
|
+
* GET /auth/magic-link/verify — HTML bridge that POSTs to itself
|
|
109
|
+
* POST /auth/magic-link/verify — body { id, sig } → sets cookie
|
|
110
|
+
*
|
|
111
|
+
* The behaviour matches `magicLinkProvider.ts` exactly: anti-enumeration
|
|
112
|
+
* (always 200 on request), in-memory rate limits, single-use tokens,
|
|
113
|
+
* HMAC-SHA256 short signatures, JWT mint on success.
|
|
114
|
+
*/
|
|
115
|
+
export function registerWorkersMagicLinkRoutes(
|
|
116
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
117
|
+
hono, config) {
|
|
118
|
+
const expiresMin = config.expiresMin;
|
|
119
|
+
if (!Number.isInteger(expiresMin) || expiresMin < 1 || expiresMin > 1440) {
|
|
120
|
+
throw new Error(`[Auth] registerWorkersMagicLinkRoutes: expiresMin must be 1..1440 (got ${expiresMin})`);
|
|
121
|
+
}
|
|
122
|
+
const appName = config.appName ?? process.env['APP_NAME'] ?? 'this app';
|
|
123
|
+
const ipLimiter = makeBucketLimiter(MAX_REQUESTS_PER_IP_PER_HOUR, HOUR_MS);
|
|
124
|
+
const emailLimiter = makeBucketLimiter(MAX_REQUESTS_PER_EMAIL_PER_HOUR, HOUR_MS);
|
|
125
|
+
hono.post('/auth/magic-link/request', async (c) => {
|
|
126
|
+
if (process.env['UGLY_APP_AUTH_MODE'] !== 'self') {
|
|
127
|
+
return c.json({ error: 'Not found' }, 404);
|
|
128
|
+
}
|
|
129
|
+
const body = await c.req.json().catch(() => null);
|
|
130
|
+
const parsed = requestBodySchema.safeParse(body);
|
|
131
|
+
if (!parsed.success)
|
|
132
|
+
return c.json({ ok: true });
|
|
133
|
+
const email = parsed.data.email.toLowerCase();
|
|
134
|
+
const ip = getClientIp(c);
|
|
135
|
+
const ipOk = ipLimiter(ip);
|
|
136
|
+
const emailOk = emailLimiter(email);
|
|
137
|
+
if (!ipOk || !emailOk)
|
|
138
|
+
return c.json({ ok: true });
|
|
139
|
+
try {
|
|
140
|
+
const secret = getAuthSecret();
|
|
141
|
+
const tokenId = nanoid(40);
|
|
142
|
+
const expiresAt = Date.now() + expiresMin * 60_000;
|
|
143
|
+
const sig = signMagicLink(tokenId, email, expiresAt, secret);
|
|
144
|
+
const tokenHash = sha256Hex(tokenId);
|
|
145
|
+
await config.db.setDoc(BUILTIN_DEFS.authMagicLink, {
|
|
146
|
+
_id: tokenHash,
|
|
147
|
+
...dbDefaults(),
|
|
148
|
+
email,
|
|
149
|
+
tokenHash,
|
|
150
|
+
expiresAt,
|
|
151
|
+
consumedAt: null,
|
|
152
|
+
requestIp: ip,
|
|
153
|
+
requestedAt: Date.now(),
|
|
154
|
+
});
|
|
155
|
+
const base = getAppPublicUrl(c, config.publicAppUrl);
|
|
156
|
+
const url = `${base}/auth/magic-link/verify?id=${encodeURIComponent(tokenId)}&sig=${encodeURIComponent(sig)}`;
|
|
157
|
+
const tpl = magicLinkEmail(url, appName, expiresMin);
|
|
158
|
+
await emailSend({
|
|
159
|
+
to: email,
|
|
160
|
+
subject: tpl.subject,
|
|
161
|
+
html: tpl.html,
|
|
162
|
+
text: tpl.text,
|
|
163
|
+
id: 'magic-link',
|
|
164
|
+
});
|
|
165
|
+
}
|
|
166
|
+
catch (err) {
|
|
167
|
+
// eslint-disable-next-line no-console
|
|
168
|
+
console.error('[Auth] magic-link request failed', err);
|
|
169
|
+
}
|
|
170
|
+
return c.json({ ok: true });
|
|
171
|
+
});
|
|
172
|
+
hono.get('/auth/magic-link/verify', (c) => {
|
|
173
|
+
if (process.env['UGLY_APP_AUTH_MODE'] !== 'self') {
|
|
174
|
+
return c.json({ error: 'Not found' }, 404);
|
|
175
|
+
}
|
|
176
|
+
const id = c.req.query('id') ?? '';
|
|
177
|
+
const sig = c.req.query('sig') ?? '';
|
|
178
|
+
const idJson = JSON.stringify(id);
|
|
179
|
+
const sigJson = JSON.stringify(sig);
|
|
180
|
+
const html = `<!doctype html><html><head><meta charset="utf-8"><title>Signing in…</title></head><body style="font-family:system-ui,sans-serif;padding:24px;text-align:center"><p>Signing you in…</p><script>
|
|
181
|
+
(async function(){
|
|
182
|
+
try {
|
|
183
|
+
const r = await fetch('/auth/magic-link/verify', {
|
|
184
|
+
method: 'POST',
|
|
185
|
+
headers: {'Content-Type': 'application/json'},
|
|
186
|
+
credentials: 'same-origin',
|
|
187
|
+
body: JSON.stringify({ id: ${idJson}, sig: ${sigJson} }),
|
|
188
|
+
});
|
|
189
|
+
if (r.ok) { window.location.replace('/'); }
|
|
190
|
+
else { document.body.innerText = 'This sign-in link is invalid or has expired.'; }
|
|
191
|
+
} catch (e) { document.body.innerText = 'Sign-in failed. Please try again.'; }
|
|
192
|
+
})();
|
|
193
|
+
</script></body></html>`;
|
|
194
|
+
return c.html(html);
|
|
195
|
+
});
|
|
196
|
+
hono.post('/auth/magic-link/verify', async (c) => {
|
|
197
|
+
if (process.env['UGLY_APP_AUTH_MODE'] !== 'self') {
|
|
198
|
+
return c.json({ error: 'Not found' }, 404);
|
|
199
|
+
}
|
|
200
|
+
const body = await c.req.json().catch(() => null);
|
|
201
|
+
const parsed = verifyBodySchema.safeParse(body);
|
|
202
|
+
if (!parsed.success)
|
|
203
|
+
return c.json({ error: 'Invalid link' }, 401);
|
|
204
|
+
const { id, sig } = parsed.data;
|
|
205
|
+
try {
|
|
206
|
+
const secret = getAuthSecret();
|
|
207
|
+
const tokenHash = sha256Hex(id);
|
|
208
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
209
|
+
const doc = (await config.db.getDoc(BUILTIN_DEFS.authMagicLink, tokenHash));
|
|
210
|
+
if (!doc)
|
|
211
|
+
return c.json({ error: 'Invalid link' }, 401);
|
|
212
|
+
if (doc.consumedAt !== null)
|
|
213
|
+
return c.json({ error: 'Link already used' }, 401);
|
|
214
|
+
if (doc.expiresAt <= Date.now())
|
|
215
|
+
return c.json({ error: 'Link expired' }, 401);
|
|
216
|
+
if (!verifyMagicLink(id, doc.email, doc.expiresAt, sig, secret)) {
|
|
217
|
+
return c.json({ error: 'Invalid link' }, 401);
|
|
218
|
+
}
|
|
219
|
+
const { userId } = await upsertAuthIdentity(config.db, 'magic-link', doc.email, null, config.onUserCreate);
|
|
220
|
+
await config.db.setDocFields(BUILTIN_DEFS.authMagicLink, tokenHash, {
|
|
221
|
+
consumedAt: Date.now(),
|
|
222
|
+
});
|
|
223
|
+
const token = await mintSessionJwt(userId, secret);
|
|
224
|
+
c.header('Set-Cookie', buildAuthCookie(token));
|
|
225
|
+
return c.json({ ok: true, token });
|
|
226
|
+
}
|
|
227
|
+
catch (err) {
|
|
228
|
+
// eslint-disable-next-line no-console
|
|
229
|
+
console.error('[Auth] magic-link verify failed', err);
|
|
230
|
+
return c.json({ error: 'Invalid link' }, 401);
|
|
231
|
+
}
|
|
232
|
+
});
|
|
233
|
+
}
|
|
234
|
+
//# sourceMappingURL=workersMagicLink.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"workersMagicLink.js","sourceRoot":"","sources":["../../../src/server/auth/workersMagicLink.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAgB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAqB,MAAM,iBAAiB,CAAC;AAExE,uEAAuE;AACvE,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAEjD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/B,MAAM,4BAA4B,GAAG,EAAE,CAAC;AACxC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAE1C,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAChC,CAAC,CAAC;AAqBH,SAAS,aAAa;IACpB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IACxE,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,eAAe,CAAC,CAAU,EAAE,QAAiB;IACpD,MAAM,QAAQ,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAC3D,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,oEAAoE;IACpE,mEAAmE;IACnE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,QAAQ,IAAI,OAAO,CAAC;QAClC,OAAO,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,WAAW,CAAC,CAAU;IAC7B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC5C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QACxC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC9C,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IACtB,OAAO,SAAS,CAAC;AACnB,CAAC;AAOD,SAAS,iBAAiB,CAAC,YAAoB,EAAE,QAAgB;IAC/D,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,OAAO,CAAC,GAAW,EAAW,EAAE;QAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,WAAW,IAAI,QAAQ,EAAE,CAAC;YAC1C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,IAAI,YAAY;YAAE,OAAO,KAAK,CAAC;QAC1C,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,MAAc,EACd,SAAiB,sBAAsB;IAEvC,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,OAAO,IAAI,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;SAChC,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;SACpC,WAAW,EAAE;SACb,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC;SACzD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,MAAc;IAEd,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChD,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa,EAAE,OAA4B,EAAE;IACpE,MAAM,KAAK,GAAG,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,8BAA8B;AAC5C,8DAA8D;AAC9D,IAAe,EACf,MAA8B;IAE9B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACrC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,IAAI,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CACb,0EAA0E,UAAU,GAAG,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC;IAE1D,MAAM,SAAS,GAAG,iBAAiB,CAAC,4BAA4B,EAAE,OAAO,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,iBAAiB,CACpC,+BAA+B,EAC/B,OAAO,CACR,CAAC;IAEF,IAAI,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAChD,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,MAAM,EAAE,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAE1B,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAEnD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;YAC/B,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,GAAG,MAAM,CAAC;YACnD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;YAE7D,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;YACrC,MAAM,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE;gBACjD,GAAG,EAAE,SAAS;gBACd,GAAG,UAAU,EAAE;gBACf,KAAK;gBACL,SAAS;gBACT,SAAS;gBACT,UAAU,EAAE,IAAI;gBAChB,SAAS,EAAE,EAAE;gBACb,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;aACxB,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,GAAG,IAAI,8BAA8B,kBAAkB,CAAC,OAAO,CAAC,QAAQ,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAE9G,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YACrD,MAAM,SAAS,CAAC;gBACd,EAAE,EAAE,KAAK;gBACT,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,EAAE,EAAE,YAAY;aACjB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,CAAC,EAAE,EAAE;QACxC,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,MAAM,EAAE,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG;;;;;;;mCAOkB,MAAM,UAAU,OAAO;;;;;;wBAMlC,CAAC;QACrB,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;QAC/C,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,KAAK,MAAM,EAAE,CAAC;YACjD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QACnE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;QAEhC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;YAC/B,MAAM,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;YAChC,8DAA8D;YAC9D,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,EAAE,CAAC,MAAM,CACjC,YAAY,CAAC,aAAa,EAC1B,SAAS,CACV,CAMO,CAAC;YACT,IAAI,CAAC,GAAG;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YACxD,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;YAChF,IAAI,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;gBAAE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YAC/E,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;gBAChE,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;YAChD,CAAC;YAED,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,CACzC,MAAM,CAAC,EAAE,EACT,YAAY,EACZ,GAAG,CAAC,KAAK,EACT,IAAI,EACJ,MAAM,CAAC,YAAY,CACpB,CAAC;YAEF,MAAM,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,aAAa,EAAE,SAAS,EAAE;gBAClE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE;aACvB,CAAC,CAAC;YAEH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACnD,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/C,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sCAAsC;YACtC,OAAO,CAAC,KAAK,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;YACtD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}
|
package/package.json
CHANGED
package/src/cli/version.ts
CHANGED
|
@@ -1,2 +1,2 @@
|
|
|
1
1
|
// Auto-generated by prebuild — do not edit manually
|
|
2
|
-
export const CLI_VERSION = "0.1.
|
|
2
|
+
export const CLI_VERSION = "0.1.517";
|
|
@@ -71,6 +71,7 @@ import { createTypedDB } from '../../DB.js';
|
|
|
71
71
|
import { createStoreHandlers } from '../../StoreHandlers.js';
|
|
72
72
|
import { pgGetDocs } from '../../PostgresDoc.js';
|
|
73
73
|
import { userContextStore } from '../../auth/userContext.js';
|
|
74
|
+
import { registerWorkersMagicLinkRoutes } from '../../auth/workersMagicLink.js';
|
|
74
75
|
import type { TypedDB } from '../../../shared/DB.js';
|
|
75
76
|
|
|
76
77
|
// ────────────────────────────────────────────────────────────────────────
|
|
@@ -125,13 +126,30 @@ interface AppContext {
|
|
|
125
126
|
}
|
|
126
127
|
|
|
127
128
|
/**
|
|
128
|
-
* Default verifyToken implementation
|
|
129
|
-
*
|
|
130
|
-
*
|
|
131
|
-
*
|
|
132
|
-
*
|
|
129
|
+
* Default verifyToken implementation. Dual-mode, matching
|
|
130
|
+
* `src/server/Auth.ts`:
|
|
131
|
+
* Mode B (UGLY_APP_AUTH_MODE=self): verify the JWT locally with the
|
|
132
|
+
* same secret the magic-link provider mints under (AUTH_SECRET →
|
|
133
|
+
* JWT_SECRET). Uses `jose` because `jsonwebtoken` doesn't run
|
|
134
|
+
* under workerd's nodejs_compat.
|
|
135
|
+
* Mode A (default): round-trip to ugly.bot's `/verify`.
|
|
136
|
+
* Inlined here so the Workers bundle doesn't pull in `Auth.ts`
|
|
137
|
+
* (which has an `import express` at the top, breaking workerd).
|
|
133
138
|
*/
|
|
134
139
|
async function defaultVerifyToken(token: string): Promise<string> {
|
|
140
|
+
if (process.env['UGLY_APP_AUTH_MODE'] === 'self') {
|
|
141
|
+
const secret =
|
|
142
|
+
process.env['AUTH_SECRET'] ?? process.env['JWT_SECRET'] ?? '';
|
|
143
|
+
if (!secret) {
|
|
144
|
+
throw new Error(
|
|
145
|
+
'Mode=self requires AUTH_SECRET (or JWT_SECRET) to verify session JWTs',
|
|
146
|
+
);
|
|
147
|
+
}
|
|
148
|
+
const { verifySessionJwt } = await import(
|
|
149
|
+
'../../auth/workersMagicLink.js'
|
|
150
|
+
);
|
|
151
|
+
return verifySessionJwt(token, secret);
|
|
152
|
+
}
|
|
135
153
|
const verifyUrl = `${getUglyBotUrl()}/verify`;
|
|
136
154
|
const res = await fetch(verifyUrl, {
|
|
137
155
|
headers: { Authorization: `Bearer ${token}` },
|
|
@@ -664,6 +682,18 @@ export interface CreateWorkersAppOptions<R extends AppRegistryBase> {
|
|
|
664
682
|
* the E2E proves the broadcast pipeline without a real Postgres.
|
|
665
683
|
*/
|
|
666
684
|
db?: DbAdapter;
|
|
685
|
+
/**
|
|
686
|
+
* Mode B (self-host auth) only: invoked when the magic-link flow
|
|
687
|
+
* mints a brand-new user. Same shape as `OnUserCreate` on Node.
|
|
688
|
+
* Mode A apps don't need this — sign-in goes through ugly.bot which
|
|
689
|
+
* runs the app's webhook to seed the user row out-of-band.
|
|
690
|
+
*/
|
|
691
|
+
onUserCreate?: (
|
|
692
|
+
userId: string,
|
|
693
|
+
initial: { email: string },
|
|
694
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
695
|
+
db: TypedDB<any>,
|
|
696
|
+
) => Promise<void>;
|
|
667
697
|
}
|
|
668
698
|
|
|
669
699
|
/**
|
|
@@ -698,6 +728,19 @@ export interface WorkersConfigurator {
|
|
|
698
728
|
* both runtimes.
|
|
699
729
|
*/
|
|
700
730
|
addSocketMessageHandler(handler: WorkersSocketMessageHandler): void;
|
|
731
|
+
/**
|
|
732
|
+
* Mode B (self-host) only: register the hook called when the
|
|
733
|
+
* magic-link flow upserts a brand-new user. Wire your app's user
|
|
734
|
+
* row creation here. No-op in Mode A.
|
|
735
|
+
*/
|
|
736
|
+
setOnUserCreate(
|
|
737
|
+
handler: (
|
|
738
|
+
userId: string,
|
|
739
|
+
initial: { email: string },
|
|
740
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
741
|
+
db: TypedDB<any>,
|
|
742
|
+
) => Promise<void>,
|
|
743
|
+
): void;
|
|
701
744
|
}
|
|
702
745
|
|
|
703
746
|
export interface WorkersApp {
|
|
@@ -762,6 +805,18 @@ export function createWorkersApp<R extends AppRegistryBase>(
|
|
|
762
805
|
}
|
|
763
806
|
: (optsOrRegistry as CreateWorkersAppOptions<R>);
|
|
764
807
|
|
|
808
|
+
// Mode B (self-host) user-create hook. Defaults to no-op so the
|
|
809
|
+
// magic-link upsert still mints a userId; apps wire their own user
|
|
810
|
+
// row by calling `cfg.setOnUserCreate(...)` in the configurator OR
|
|
811
|
+
// by setting `opts.onUserCreate`. The opts override wins when both
|
|
812
|
+
// are set (matches `verifyToken` precedence).
|
|
813
|
+
let onUserCreate: (
|
|
814
|
+
userId: string,
|
|
815
|
+
initial: { email: string },
|
|
816
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
817
|
+
db: TypedDB<any>,
|
|
818
|
+
) => Promise<void> = async () => {};
|
|
819
|
+
|
|
765
820
|
// Drive the configurator if the caller passed one. We don't have
|
|
766
821
|
// typed access to the user's collections here — `appDefs` is held
|
|
767
822
|
// only to keep the call sites' types honest; the Workers-side
|
|
@@ -803,6 +858,9 @@ export function createWorkersApp<R extends AppRegistryBase>(
|
|
|
803
858
|
addSocketMessageHandler(handler) {
|
|
804
859
|
ctx.socketMessageHandlers.push(handler);
|
|
805
860
|
},
|
|
861
|
+
setOnUserCreate(handler) {
|
|
862
|
+
onUserCreate = handler;
|
|
863
|
+
},
|
|
806
864
|
};
|
|
807
865
|
configure(cfg);
|
|
808
866
|
}
|
|
@@ -925,11 +983,23 @@ export function createWorkersApp<R extends AppRegistryBase>(
|
|
|
925
983
|
ctx.router = router;
|
|
926
984
|
if (opts.verifyToken) ctx.verifyToken = opts.verifyToken;
|
|
927
985
|
if (opts.db) dbOverride = opts.db;
|
|
986
|
+
if (opts.onUserCreate) onUserCreate = opts.onUserCreate;
|
|
928
987
|
|
|
929
988
|
const hono = new Hono<{ Bindings: WorkersEnv }>();
|
|
930
989
|
|
|
931
990
|
hono.get('/_health', (c) => c.json({ ok: true, kind: 'workers' }));
|
|
932
991
|
|
|
992
|
+
// ── Mode B (self-host) magic-link routes ──────────────────────────────
|
|
993
|
+
// Register synchronously at construction time; the handlers
|
|
994
|
+
// themselves are no-ops in Mode A (anti-enumeration 200/401 pair
|
|
995
|
+
// matches Mode B behaviour for unauthenticated callers). The Mode A
|
|
996
|
+
// OAuth routes below live at different paths so there's no overlap.
|
|
997
|
+
registerWorkersMagicLinkRoutes(hono, {
|
|
998
|
+
expiresMin: 15,
|
|
999
|
+
db: typedDb,
|
|
1000
|
+
onUserCreate: (...args) => onUserCreate(...args),
|
|
1001
|
+
});
|
|
1002
|
+
|
|
933
1003
|
// ── Auth routes — mirror server/Auth.ts on the Node side ──────────────
|
|
934
1004
|
// The framework's SPA client hits these to drive the ugly.bot OAuth
|
|
935
1005
|
// popup flow:
|
|
@@ -0,0 +1,319 @@
|
|
|
1
|
+
/**
|
|
2
|
+
* Workers-runtime port of `magicLinkProvider.ts`.
|
|
3
|
+
*
|
|
4
|
+
* Wires the same three routes onto a Hono app instead of an Express
|
|
5
|
+
* router, and mints session JWTs with `jose` (which works under
|
|
6
|
+
* workerd's nodejs_compat layer; `jsonwebtoken` does not). The HMAC
|
|
7
|
+
* helpers in `./hmac.ts` use `node:crypto` which IS supported under
|
|
8
|
+
* nodejs_compat, so they're reused unchanged.
|
|
9
|
+
*
|
|
10
|
+
* Mounted by `createWorkersApp` only when `UGLY_APP_AUTH_MODE === 'self'`.
|
|
11
|
+
* In Mode A (uglybot) the framework's `/auth/url` + `/auth/verify` flow
|
|
12
|
+
* handles sign-in and these routes stay unmounted.
|
|
13
|
+
*/
|
|
14
|
+
import type { Context, Hono } from 'hono';
|
|
15
|
+
import { SignJWT, jwtVerify } from 'jose';
|
|
16
|
+
import { nanoid } from 'nanoid';
|
|
17
|
+
import crypto from 'node:crypto';
|
|
18
|
+
import { z } from 'zod';
|
|
19
|
+
import { BUILTIN_DEFS, dbDefaults, type TypedDB } from '../../shared/DB.js';
|
|
20
|
+
import { emailSend } from '../Email.js';
|
|
21
|
+
import { signMagicLink, verifyMagicLink } from './hmac.js';
|
|
22
|
+
import { magicLinkEmail } from './magicLinkTemplate.js';
|
|
23
|
+
import { upsertAuthIdentity, type OnUserCreate } from './userUpsert.js';
|
|
24
|
+
|
|
25
|
+
/** 30 days, in seconds. Mirrors `Auth.ts` + `magicLinkProvider.ts`. */
|
|
26
|
+
const COOKIE_MAX_AGE_SECONDS = 30 * 24 * 60 * 60;
|
|
27
|
+
|
|
28
|
+
const HOUR_MS = 60 * 60 * 1000;
|
|
29
|
+
const MAX_REQUESTS_PER_IP_PER_HOUR = 20;
|
|
30
|
+
const MAX_REQUESTS_PER_EMAIL_PER_HOUR = 5;
|
|
31
|
+
|
|
32
|
+
const requestBodySchema = z.object({
|
|
33
|
+
email: z.string().email().max(254),
|
|
34
|
+
});
|
|
35
|
+
|
|
36
|
+
const verifyBodySchema = z.object({
|
|
37
|
+
id: z.string().min(1).max(128),
|
|
38
|
+
sig: z.string().min(1).max(128),
|
|
39
|
+
});
|
|
40
|
+
|
|
41
|
+
export interface WorkersMagicLinkConfig {
|
|
42
|
+
/** Magic-link lifetime in minutes (1..1440). */
|
|
43
|
+
expiresMin: number;
|
|
44
|
+
/** Friendly app name baked into the email subject + body. */
|
|
45
|
+
appName?: string;
|
|
46
|
+
/** Origin to build the magic-link URL with (defaults to PUBLIC_APP_URL env). */
|
|
47
|
+
publicAppUrl?: string;
|
|
48
|
+
/**
|
|
49
|
+
* TypedDB instance used to read/write `BUILTIN_DEFS.authMagicLink` +
|
|
50
|
+
* `BUILTIN_DEFS.authIdentity`. The Workers app already builds one over
|
|
51
|
+
* the user collections — pass that here (collection-name lookups on
|
|
52
|
+
* unknown defs degrade gracefully — meta defaults are fine).
|
|
53
|
+
*/
|
|
54
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
55
|
+
db: TypedDB<any>;
|
|
56
|
+
/** Hook the framework invokes when a brand-new user is minted. */
|
|
57
|
+
onUserCreate: OnUserCreate;
|
|
58
|
+
}
|
|
59
|
+
|
|
60
|
+
function getAuthSecret(): string {
|
|
61
|
+
const s = process.env['AUTH_SECRET'] ?? process.env['JWT_SECRET'] ?? '';
|
|
62
|
+
if (!s) {
|
|
63
|
+
throw new Error(
|
|
64
|
+
'[Auth] AUTH_SECRET (or JWT_SECRET) is required for Mode B (self-host auth).',
|
|
65
|
+
);
|
|
66
|
+
}
|
|
67
|
+
return s;
|
|
68
|
+
}
|
|
69
|
+
|
|
70
|
+
function getAppPublicUrl(c: Context, override?: string): string {
|
|
71
|
+
const explicit = override ?? process.env['PUBLIC_APP_URL'];
|
|
72
|
+
if (explicit) return explicit.replace(/\/+$/, '');
|
|
73
|
+
// Fall back to the request's own origin — works for workers.dev and
|
|
74
|
+
// custom-domain deploys without needing a redeploy to set the URL.
|
|
75
|
+
const fwdProto = c.req.header('x-forwarded-proto');
|
|
76
|
+
const host = c.req.header('host');
|
|
77
|
+
if (host) {
|
|
78
|
+
const proto = fwdProto || 'https';
|
|
79
|
+
return `${proto}://${host}`.replace(/\/+$/, '');
|
|
80
|
+
}
|
|
81
|
+
throw new Error(
|
|
82
|
+
'[Auth] PUBLIC_APP_URL is required to build magic-link URLs.',
|
|
83
|
+
);
|
|
84
|
+
}
|
|
85
|
+
|
|
86
|
+
function sha256Hex(s: string): string {
|
|
87
|
+
return crypto.createHash('sha256').update(s).digest('hex');
|
|
88
|
+
}
|
|
89
|
+
|
|
90
|
+
function getClientIp(c: Context): string {
|
|
91
|
+
const fwd = c.req.header('x-forwarded-for');
|
|
92
|
+
if (fwd) {
|
|
93
|
+
const first = fwd.split(',')[0]?.trim();
|
|
94
|
+
if (first) return first;
|
|
95
|
+
}
|
|
96
|
+
const real = c.req.header('cf-connecting-ip');
|
|
97
|
+
if (real) return real;
|
|
98
|
+
return 'unknown';
|
|
99
|
+
}
|
|
100
|
+
|
|
101
|
+
interface Bucket {
|
|
102
|
+
windowStart: number;
|
|
103
|
+
count: number;
|
|
104
|
+
}
|
|
105
|
+
|
|
106
|
+
function makeBucketLimiter(maxPerWindow: number, windowMs: number) {
|
|
107
|
+
const buckets = new Map<string, Bucket>();
|
|
108
|
+
return (key: string): boolean => {
|
|
109
|
+
const now = Date.now();
|
|
110
|
+
const b = buckets.get(key);
|
|
111
|
+
if (!b || now - b.windowStart >= windowMs) {
|
|
112
|
+
buckets.set(key, { windowStart: now, count: 1 });
|
|
113
|
+
return true;
|
|
114
|
+
}
|
|
115
|
+
if (b.count >= maxPerWindow) return false;
|
|
116
|
+
b.count += 1;
|
|
117
|
+
return true;
|
|
118
|
+
};
|
|
119
|
+
}
|
|
120
|
+
|
|
121
|
+
/**
|
|
122
|
+
* Mint a self-host session JWT. Carries `{ sub: userId }` so
|
|
123
|
+
* `verifySessionJwt` (and the Node-side `verifyToken`) both see the
|
|
124
|
+
* same shape `jsonwebtoken` produced.
|
|
125
|
+
*/
|
|
126
|
+
export async function mintSessionJwt(
|
|
127
|
+
userId: string,
|
|
128
|
+
secret: string,
|
|
129
|
+
ttlSec: number = COOKIE_MAX_AGE_SECONDS,
|
|
130
|
+
): Promise<string> {
|
|
131
|
+
const key = new TextEncoder().encode(secret);
|
|
132
|
+
return new SignJWT({ sub: userId })
|
|
133
|
+
.setProtectedHeader({ alg: 'HS256' })
|
|
134
|
+
.setIssuedAt()
|
|
135
|
+
.setExpirationTime(Math.floor(Date.now() / 1000) + ttlSec)
|
|
136
|
+
.sign(key);
|
|
137
|
+
}
|
|
138
|
+
|
|
139
|
+
/** Verify a self-host session JWT and return the userId. Throws on invalid. */
|
|
140
|
+
export async function verifySessionJwt(
|
|
141
|
+
token: string,
|
|
142
|
+
secret: string,
|
|
143
|
+
): Promise<string> {
|
|
144
|
+
const key = new TextEncoder().encode(secret);
|
|
145
|
+
const { payload } = await jwtVerify(token, key);
|
|
146
|
+
if (typeof payload.sub !== 'string' || !payload.sub) {
|
|
147
|
+
throw new Error('Invalid token (no sub)');
|
|
148
|
+
}
|
|
149
|
+
return payload.sub;
|
|
150
|
+
}
|
|
151
|
+
|
|
152
|
+
function buildAuthCookie(token: string, opts: { clear?: boolean } = {}): string {
|
|
153
|
+
const parts = [`auth_token=${opts.clear ? '' : token}`];
|
|
154
|
+
parts.push('Path=/');
|
|
155
|
+
parts.push('HttpOnly');
|
|
156
|
+
parts.push('Secure');
|
|
157
|
+
parts.push('SameSite=Lax');
|
|
158
|
+
parts.push(`Max-Age=${opts.clear ? 0 : COOKIE_MAX_AGE_SECONDS}`);
|
|
159
|
+
return parts.join('; ');
|
|
160
|
+
}
|
|
161
|
+
|
|
162
|
+
/**
|
|
163
|
+
* Register the three magic-link routes on a Hono app.
|
|
164
|
+
*
|
|
165
|
+
* POST /auth/magic-link/request — body { email } → sends email
|
|
166
|
+
* GET /auth/magic-link/verify — HTML bridge that POSTs to itself
|
|
167
|
+
* POST /auth/magic-link/verify — body { id, sig } → sets cookie
|
|
168
|
+
*
|
|
169
|
+
* The behaviour matches `magicLinkProvider.ts` exactly: anti-enumeration
|
|
170
|
+
* (always 200 on request), in-memory rate limits, single-use tokens,
|
|
171
|
+
* HMAC-SHA256 short signatures, JWT mint on success.
|
|
172
|
+
*/
|
|
173
|
+
export function registerWorkersMagicLinkRoutes(
|
|
174
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
175
|
+
hono: Hono<any>,
|
|
176
|
+
config: WorkersMagicLinkConfig,
|
|
177
|
+
): void {
|
|
178
|
+
const expiresMin = config.expiresMin;
|
|
179
|
+
if (!Number.isInteger(expiresMin) || expiresMin < 1 || expiresMin > 1440) {
|
|
180
|
+
throw new Error(
|
|
181
|
+
`[Auth] registerWorkersMagicLinkRoutes: expiresMin must be 1..1440 (got ${expiresMin})`,
|
|
182
|
+
);
|
|
183
|
+
}
|
|
184
|
+
const appName =
|
|
185
|
+
config.appName ?? process.env['APP_NAME'] ?? 'this app';
|
|
186
|
+
|
|
187
|
+
const ipLimiter = makeBucketLimiter(MAX_REQUESTS_PER_IP_PER_HOUR, HOUR_MS);
|
|
188
|
+
const emailLimiter = makeBucketLimiter(
|
|
189
|
+
MAX_REQUESTS_PER_EMAIL_PER_HOUR,
|
|
190
|
+
HOUR_MS,
|
|
191
|
+
);
|
|
192
|
+
|
|
193
|
+
hono.post('/auth/magic-link/request', async (c) => {
|
|
194
|
+
if (process.env['UGLY_APP_AUTH_MODE'] !== 'self') {
|
|
195
|
+
return c.json({ error: 'Not found' }, 404);
|
|
196
|
+
}
|
|
197
|
+
const body = await c.req.json().catch(() => null);
|
|
198
|
+
const parsed = requestBodySchema.safeParse(body);
|
|
199
|
+
if (!parsed.success) return c.json({ ok: true });
|
|
200
|
+
const email = parsed.data.email.toLowerCase();
|
|
201
|
+
const ip = getClientIp(c);
|
|
202
|
+
|
|
203
|
+
const ipOk = ipLimiter(ip);
|
|
204
|
+
const emailOk = emailLimiter(email);
|
|
205
|
+
if (!ipOk || !emailOk) return c.json({ ok: true });
|
|
206
|
+
|
|
207
|
+
try {
|
|
208
|
+
const secret = getAuthSecret();
|
|
209
|
+
const tokenId = nanoid(40);
|
|
210
|
+
const expiresAt = Date.now() + expiresMin * 60_000;
|
|
211
|
+
const sig = signMagicLink(tokenId, email, expiresAt, secret);
|
|
212
|
+
|
|
213
|
+
const tokenHash = sha256Hex(tokenId);
|
|
214
|
+
await config.db.setDoc(BUILTIN_DEFS.authMagicLink, {
|
|
215
|
+
_id: tokenHash,
|
|
216
|
+
...dbDefaults(),
|
|
217
|
+
email,
|
|
218
|
+
tokenHash,
|
|
219
|
+
expiresAt,
|
|
220
|
+
consumedAt: null,
|
|
221
|
+
requestIp: ip,
|
|
222
|
+
requestedAt: Date.now(),
|
|
223
|
+
});
|
|
224
|
+
|
|
225
|
+
const base = getAppPublicUrl(c, config.publicAppUrl);
|
|
226
|
+
const url = `${base}/auth/magic-link/verify?id=${encodeURIComponent(tokenId)}&sig=${encodeURIComponent(sig)}`;
|
|
227
|
+
|
|
228
|
+
const tpl = magicLinkEmail(url, appName, expiresMin);
|
|
229
|
+
await emailSend({
|
|
230
|
+
to: email,
|
|
231
|
+
subject: tpl.subject,
|
|
232
|
+
html: tpl.html,
|
|
233
|
+
text: tpl.text,
|
|
234
|
+
id: 'magic-link',
|
|
235
|
+
});
|
|
236
|
+
} catch (err) {
|
|
237
|
+
// eslint-disable-next-line no-console
|
|
238
|
+
console.error('[Auth] magic-link request failed', err);
|
|
239
|
+
}
|
|
240
|
+
return c.json({ ok: true });
|
|
241
|
+
});
|
|
242
|
+
|
|
243
|
+
hono.get('/auth/magic-link/verify', (c) => {
|
|
244
|
+
if (process.env['UGLY_APP_AUTH_MODE'] !== 'self') {
|
|
245
|
+
return c.json({ error: 'Not found' }, 404);
|
|
246
|
+
}
|
|
247
|
+
const id = c.req.query('id') ?? '';
|
|
248
|
+
const sig = c.req.query('sig') ?? '';
|
|
249
|
+
const idJson = JSON.stringify(id);
|
|
250
|
+
const sigJson = JSON.stringify(sig);
|
|
251
|
+
const html = `<!doctype html><html><head><meta charset="utf-8"><title>Signing in…</title></head><body style="font-family:system-ui,sans-serif;padding:24px;text-align:center"><p>Signing you in…</p><script>
|
|
252
|
+
(async function(){
|
|
253
|
+
try {
|
|
254
|
+
const r = await fetch('/auth/magic-link/verify', {
|
|
255
|
+
method: 'POST',
|
|
256
|
+
headers: {'Content-Type': 'application/json'},
|
|
257
|
+
credentials: 'same-origin',
|
|
258
|
+
body: JSON.stringify({ id: ${idJson}, sig: ${sigJson} }),
|
|
259
|
+
});
|
|
260
|
+
if (r.ok) { window.location.replace('/'); }
|
|
261
|
+
else { document.body.innerText = 'This sign-in link is invalid or has expired.'; }
|
|
262
|
+
} catch (e) { document.body.innerText = 'Sign-in failed. Please try again.'; }
|
|
263
|
+
})();
|
|
264
|
+
</script></body></html>`;
|
|
265
|
+
return c.html(html);
|
|
266
|
+
});
|
|
267
|
+
|
|
268
|
+
hono.post('/auth/magic-link/verify', async (c) => {
|
|
269
|
+
if (process.env['UGLY_APP_AUTH_MODE'] !== 'self') {
|
|
270
|
+
return c.json({ error: 'Not found' }, 404);
|
|
271
|
+
}
|
|
272
|
+
const body = await c.req.json().catch(() => null);
|
|
273
|
+
const parsed = verifyBodySchema.safeParse(body);
|
|
274
|
+
if (!parsed.success) return c.json({ error: 'Invalid link' }, 401);
|
|
275
|
+
const { id, sig } = parsed.data;
|
|
276
|
+
|
|
277
|
+
try {
|
|
278
|
+
const secret = getAuthSecret();
|
|
279
|
+
const tokenHash = sha256Hex(id);
|
|
280
|
+
// eslint-disable-next-line @typescript-eslint/no-explicit-any
|
|
281
|
+
const doc = (await config.db.getDoc<any>(
|
|
282
|
+
BUILTIN_DEFS.authMagicLink,
|
|
283
|
+
tokenHash,
|
|
284
|
+
)) as
|
|
285
|
+
| {
|
|
286
|
+
email: string;
|
|
287
|
+
expiresAt: number;
|
|
288
|
+
consumedAt: number | null;
|
|
289
|
+
}
|
|
290
|
+
| null;
|
|
291
|
+
if (!doc) return c.json({ error: 'Invalid link' }, 401);
|
|
292
|
+
if (doc.consumedAt !== null) return c.json({ error: 'Link already used' }, 401);
|
|
293
|
+
if (doc.expiresAt <= Date.now()) return c.json({ error: 'Link expired' }, 401);
|
|
294
|
+
if (!verifyMagicLink(id, doc.email, doc.expiresAt, sig, secret)) {
|
|
295
|
+
return c.json({ error: 'Invalid link' }, 401);
|
|
296
|
+
}
|
|
297
|
+
|
|
298
|
+
const { userId } = await upsertAuthIdentity(
|
|
299
|
+
config.db,
|
|
300
|
+
'magic-link',
|
|
301
|
+
doc.email,
|
|
302
|
+
null,
|
|
303
|
+
config.onUserCreate,
|
|
304
|
+
);
|
|
305
|
+
|
|
306
|
+
await config.db.setDocFields(BUILTIN_DEFS.authMagicLink, tokenHash, {
|
|
307
|
+
consumedAt: Date.now(),
|
|
308
|
+
});
|
|
309
|
+
|
|
310
|
+
const token = await mintSessionJwt(userId, secret);
|
|
311
|
+
c.header('Set-Cookie', buildAuthCookie(token));
|
|
312
|
+
return c.json({ ok: true, token });
|
|
313
|
+
} catch (err) {
|
|
314
|
+
// eslint-disable-next-line no-console
|
|
315
|
+
console.error('[Auth] magic-link verify failed', err);
|
|
316
|
+
return c.json({ error: 'Invalid link' }, 401);
|
|
317
|
+
}
|
|
318
|
+
});
|
|
319
|
+
}
|
|
@@ -1,17 +0,0 @@
|
|
|
1
|
-
# Page snapshot
|
|
2
|
-
|
|
3
|
-
```yaml
|
|
4
|
-
- generic [ref=e2]:
|
|
5
|
-
- generic [ref=e5]:
|
|
6
|
-
- banner [ref=e6]:
|
|
7
|
-
- link "← Tests" [ref=e8] [cursor=pointer]:
|
|
8
|
-
- /url: /test
|
|
9
|
-
- main [ref=e10]:
|
|
10
|
-
- generic [ref=e11]:
|
|
11
|
-
- heading "Audio Test — TTS & STT" [level=1] [ref=e12]
|
|
12
|
-
- generic [ref=e13]:
|
|
13
|
-
- button "Speech-to-Text" [ref=e14]
|
|
14
|
-
- button "Text-to-Speech" [ref=e15]
|
|
15
|
-
- paragraph [ref=e16]: UglyBot socket not available. Make sure the app is configured with an app token.
|
|
16
|
-
- button "Feedback" [ref=e17] [cursor=pointer]
|
|
17
|
-
```
|