@antelopejs/interface-dms 0.3.5 → 0.3.6

package/dist/auth/internal/request-authenticators.js

@@ -0,0 +1,82 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAuthenticatedRequestTenantId = getAuthenticatedRequestTenantId;
+exports.resolveRequestPrincipal = resolveRequestPrincipal;
+const interface_api_1 = require("@antelopejs/interface-api");
+const HTTP_UNAUTHORIZED = 401;
+const requestPrincipals = new WeakMap();
+const pendingAuthentications = new WeakMap();
+function unauthorized() {
+    return new interface_api_1.HTTPResult(HTTP_UNAUTHORIZED, "Unauthorized");
+}
+/** @internal Read only a successfully authenticated, unchanged request's tenant. */
+function getAuthenticatedRequestTenantId(ctx) {
+    const state = requestPrincipals.get(ctx.rawRequest);
+    if (!state)
+        return undefined;
+    if (!state.principal ||
+        state.authorization !== ctx.rawRequest.headers.authorization) {
+        throw unauthorized();
+    }
+    return state.principal.tenantId;
+}
+function readBearerToken(authorization) {
+    const match = authorization?.match(/^Bearer\s+(\S+)$/i);
+    if (!match)
+        throw unauthorized();
+    return match[1];
+}
+function assertPrincipal(principal, previous) {
+    if (typeof principal?.user?._id !== "string" ||
+        !principal?.user?._id ||
+        typeof principal.tenantId !== "string" ||
+        !principal.tenantId) {
+        throw unauthorized();
+    }
+    if (previous &&
+        (previous.userId !== principal.user._id ||
+            previous.tenantId !== principal.tenantId)) {
+        throw unauthorized();
+    }
+}
+/** @internal Revalidate on every call; failures poison tenant resolution for this request. */
+async function resolveRequestPrincipal(ctx, authenticators, authenticateJwt) {
+    const pending = pendingAuthentications.get(ctx.rawRequest) ?? Promise.resolve();
+    const result = pending.then(() => verifyRequestPrincipal(ctx, authenticators, authenticateJwt));
+    pendingAuthentications.set(ctx.rawRequest, result);
+    try {
+        return await result;
+    }
+    finally {
+        if (pendingAuthentications.get(ctx.rawRequest) === result) {
+            pendingAuthentications.delete(ctx.rawRequest);
+        }
+    }
+}
+async function verifyRequestPrincipal(ctx, authenticators, authenticateJwt) {
+    const request = ctx.rawRequest;
+    const authorization = request.headers.authorization;
+    const previous = requestPrincipals.get(request);
+    const state = { authorization };
+    requestPrincipals.set(request, state);
+    if (previous &&
+        (!previous.principal || previous.authorization !== authorization)) {
+        throw unauthorized();
+    }
+    const token = readBearerToken(authorization);
+    const handlers = authenticators.filter((handler) => handler.recognizes(token));
+    if (handlers.length > 1)
+        throw unauthorized();
+    const principal = handlers.length
+        ? await handlers[0].authenticate(token)
+        : await authenticateJwt(token);
+    assertPrincipal(principal, previous?.principal);
+    if (requestPrincipals.get(request) !== state ||
+        request.headers.authorization !== authorization) {
+        throw unauthorized();
+    }
+    const snapshot = { tenantId: principal.tenantId, userId: principal.user._id };
+    requestPrincipals.set(request, { authorization, principal: snapshot });
+    return principal;
+}
+//# sourceMappingURL=request-authenticators.js.map

package/dist/auth/internal/request-authenticators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-authenticators.js","sourceRoot":"","sources":["../../../src/auth/internal/request-authenticators.ts"],"names":[],"mappings":";;AAiCA,0EAYC;AA8BD,0DAkBC;AA5FD,6DAA4E;AAM5E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAY9B,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAGlC,CAAC;AACJ,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAGvC,CAAC;AAEJ,SAAS,YAAY;IACnB,OAAO,IAAI,0BAAU,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;AAC3D,CAAC;AAED,oFAAoF;AACpF,SAAgB,+BAA+B,CAC7C,GAAmB;IAEnB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IACE,CAAC,KAAK,CAAC,SAAS;QAChB,KAAK,CAAC,aAAa,KAAK,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,EAC5D,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,aAAiC;IACxD,MAAM,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,MAAM,YAAY,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CACtB,SAA2B,EAC3B,QAA0B;IAE1B,IACE,OAAO,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,QAAQ;QACxC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG;QACrB,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QACtC,CAAC,SAAS,CAAC,QAAQ,EACnB,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,IACE,QAAQ;QACR,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,GAAG;YACrC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC,EAC3C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,8FAA8F;AACvF,KAAK,UAAU,uBAAuB,CAC3C,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GACX,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAC/B,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAC7D,CAAC;IACF,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,EAAE,CAAC;YAC1D,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAA+B,EAAE,aAAa,EAAE,CAAC;IAC5D,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,IACE,QAAQ;QACR,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,aAAa,CAAC,EACjE,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACjD,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAC1B,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,YAAY,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM;QAC/B,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;QACvC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,IACE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK;QACxC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,aAAa,EAC/C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9E,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/auth/internal/request-principal.d.ts

@@ -0,0 +1,10 @@
+import { type RequestContext } from "@antelopejs/interface-api";
+import type { RequestAuthenticator, RequestPrincipal } from "../request-authenticators";
+/**
+ * Authenticate with route-local credential handlers, otherwise the existing JWT interfaces.
+ * Recognized failures and ambiguous handlers never fall back to JWT. Every call revalidates;
+ * repeat calls must retain the same credential, user and tenant. No permissions are granted.
+ *
+ * @internal
+ */
+export declare function authenticateRequestPrincipal(ctx: RequestContext, authenticators?: readonly RequestAuthenticator[]): Promise<RequestPrincipal>;

package/dist/auth/internal/request-principal.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateRequestPrincipal = authenticateRequestPrincipal;
+const interface_api_1 = require("@antelopejs/interface-api");
+const constants_1 = require("../../constants");
+const request_authenticators_1 = require("./request-authenticators");
+const auth_1 = require("../../auth");
+const HTTP_UNAUTHORIZED = 401;
+const UNAUTHORIZED_MESSAGE = "Unauthorized";
+/**
+ * Authenticate with route-local credential handlers, otherwise the existing JWT interfaces.
+ * Recognized failures and ambiguous handlers never fall back to JWT. Every call revalidates;
+ * repeat calls must retain the same credential, user and tenant. No permissions are granted.
+ *
+ * @internal
+ */
+async function authenticateRequestPrincipal(ctx, authenticators = []) {
+    return (0, request_authenticators_1.resolveRequestPrincipal)(ctx, authenticators, async (token) => {
+        const decoded = await auth_1.internal.AuthUserAuthenticator(token);
+        const user = await auth_1.internal.AuthUserValidator(decoded);
+        if (!user || typeof user === "boolean") {
+            throw new interface_api_1.HTTPResult(HTTP_UNAUTHORIZED, UNAUTHORIZED_MESSAGE);
+        }
+        return { user, tenantId: decoded.tenantId || constants_1.DEFAULT_TENANT_ID };
+    });
+}
+//# sourceMappingURL=request-principal.js.map

package/dist/auth/internal/request-principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-principal.js","sourceRoot":"","sources":["../../../src/auth/internal/request-principal.ts"],"names":[],"mappings":";;AAmBA,oEAYC;AA/BD,6DAA4E;AAC5E,+CAAoD;AAKpD,qEAAmE;AACnE,qCAAsC;AAEtC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAC9B,MAAM,oBAAoB,GAAG,cAAc,CAAC;AAE5C;;;;;;GAMG;AACI,KAAK,UAAU,4BAA4B,CAChD,GAAmB,EACnB,iBAAkD,EAAE;IAEpD,OAAO,IAAA,gDAAuB,EAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;QAClE,MAAM,OAAO,GAAG,MAAM,eAAQ,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,eAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,SAAS,EAAE,CAAC;YACvC,MAAM,IAAI,0BAAU,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,6BAAiB,EAAE,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/auth/internal/user-agent.d.ts

@@ -0,0 +1,10 @@
+/** @internal */
+export type DeviceType = "mobile" | "tablet" | "desktop";
+/** @internal */
+export interface ParsedUserAgent {
+    browserName: string;
+    browserVersion: string;
+    osName: string;
+    osVersion: string;
+    deviceType: DeviceType;
+}

package/dist/auth/internal/user-agent.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=user-agent.js.map

package/dist/auth/internal/user-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agent.js","sourceRoot":"","sources":["../../../src/auth/internal/user-agent.ts"],"names":[],"mappings":""}

package/dist/auth/password.d.ts

@@ -1,3 +1,22 @@
+/**
+ * The DMS password policy, shared by every flow that sets a password: the DMS
+ * signup, admin onboarding and password recovery, and any module owning its
+ * own registration flow (a SaaS public signup, for instance). Plain values and
+ * a pure function: nothing here needs the DMS to be loaded.
+ */
+/** Minimum number of characters a password must have. */
 export declare const PASSWORD_MIN_LENGTH = 8;
+/**
+ * The character rules of the policy, without the length: at least one
+ * uppercase letter, one digit and one of `@$!%*?&`, and only ASCII letters,
+ * digits and those special characters.
+ */
 export declare const PASSWORD_PATTERN: RegExp;
+/**
+ * Whether a password satisfies the DMS password policy: at least
+ * `PASSWORD_MIN_LENGTH` characters and every rule of `PASSWORD_PATTERN`.
+ *
+ * @param password Candidate password, in clear
+ * @returns True when the DMS would accept the password
+ */
 export declare function isPasswordCompliant(password: string): boolean;

package/dist/auth/password.js

@@ -1,10 +1,33 @@
 "use strict";
+/**
+ * The DMS password policy, shared by every flow that sets a password: the DMS
+ * signup, admin onboarding and password recovery, and any module owning its
+ * own registration flow (a SaaS public signup, for instance). Plain values and
+ * a pure function: nothing here needs the DMS to be loaded.
+ */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.PASSWORD_PATTERN = exports.PASSWORD_MIN_LENGTH = void 0;
 exports.isPasswordCompliant = isPasswordCompliant;
+/** Minimum number of characters a password must have. */
 exports.PASSWORD_MIN_LENGTH = 8;
+/**
+ * The special characters a password may contain. A password needs at least
+ * one of them, and no other non-alphanumeric character is allowed.
+ */
 const ALLOWED_SPECIAL_CHARS = "@$!%*?&";
+/**
+ * The character rules of the policy, without the length: at least one
+ * uppercase letter, one digit and one of `@$!%*?&`, and only ASCII letters,
+ * digits and those special characters.
+ */
 exports.PASSWORD_PATTERN = new RegExp(`^(?=.*[A-Z])(?=.*\\d)(?=.*[${ALLOWED_SPECIAL_CHARS}])[A-Za-z\\d${ALLOWED_SPECIAL_CHARS}]+$`);
+/**
+ * Whether a password satisfies the DMS password policy: at least
+ * `PASSWORD_MIN_LENGTH` characters and every rule of `PASSWORD_PATTERN`.
+ *
+ * @param password Candidate password, in clear
+ * @returns True when the DMS would accept the password
+ */
 function isPasswordCompliant(password) {
     return (password.length >= exports.PASSWORD_MIN_LENGTH && exports.PASSWORD_PATTERN.test(password));
 }

package/dist/auth/password.js.map

@@ -1 +1 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":";;;AAgCA,kDAIC;AA5BY,QAAA,mBAAmB,GAAG,CAAC,CAAC;AAMrC,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAO3B,QAAA,gBAAgB,GAAG,IAAI,MAAM,CACxC,8BAA8B,qBAAqB,eAAe,qBAAqB,KAAK,CAC7F,CAAC;AASF,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,OAAO,CACL,QAAQ,CAAC,MAAM,IAAI,2BAAmB,IAAI,wBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC1E,CAAC;AACJ,CAAC"}
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/auth/password.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AA2BH,kDAIC;AA7BD,yDAAyD;AAC5C,QAAA,mBAAmB,GAAG,CAAC,CAAC;AAErC;;;GAGG;AACH,MAAM,qBAAqB,GAAG,SAAS,CAAC;AAExC;;;;GAIG;AACU,QAAA,gBAAgB,GAAG,IAAI,MAAM,CACxC,8BAA8B,qBAAqB,eAAe,qBAAqB,KAAK,CAC7F,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,OAAO,CACL,QAAQ,CAAC,MAAM,IAAI,2BAAmB,IAAI,wBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAC1E,CAAC;AACJ,CAAC"}

package/dist/auth/request-authenticators.d.ts

@@ -1,12 +1,13 @@
-import { type RequestContext } from "@antelopejs/interface-api";
 import type { User } from "./db";
+/** Identity and tenant established together by a verified credential, not authorization. */
 export interface RequestPrincipal {
     user: User;
     tenantId: string;
 }
+/** A route-local credential handler. Recognition must include malformed owned credentials. */
 export interface RequestAuthenticator {
+    /** Claim this credential family without treating its contents as trusted. */
     recognizes(token: string): boolean;
+    /** Verify the credential and reload its user; throw on invalid, expired or revoked credentials. */
     authenticate(token: string): Promise<RequestPrincipal>;
 }
-export declare function getAuthenticatedRequestTenantId(ctx: RequestContext): string | undefined;
-export declare function resolveRequestPrincipal(ctx: RequestContext, authenticators: readonly RequestAuthenticator[], authenticateJwt: (token: string) => Promise<RequestPrincipal>): Promise<RequestPrincipal>;

package/dist/auth/request-authenticators.js

@@ -1,80 +1,3 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getAuthenticatedRequestTenantId = getAuthenticatedRequestTenantId;
-exports.resolveRequestPrincipal = resolveRequestPrincipal;
-const interface_api_1 = require("@antelopejs/interface-api");
-const HTTP_UNAUTHORIZED = 401;
-const requestPrincipals = new WeakMap();
-const pendingAuthentications = new WeakMap();
-function unauthorized() {
-    return new interface_api_1.HTTPResult(HTTP_UNAUTHORIZED, "Unauthorized");
-}
-function getAuthenticatedRequestTenantId(ctx) {
-    const state = requestPrincipals.get(ctx.rawRequest);
-    if (!state)
-        return undefined;
-    if (!state.principal ||
-        state.authorization !== ctx.rawRequest.headers.authorization) {
-        throw unauthorized();
-    }
-    return state.principal.tenantId;
-}
-function readBearerToken(authorization) {
-    const match = authorization?.match(/^Bearer\s+(\S+)$/i);
-    if (!match)
-        throw unauthorized();
-    return match[1];
-}
-function assertPrincipal(principal, previous) {
-    if (typeof principal?.user?._id !== "string" ||
-        !principal?.user?._id ||
-        typeof principal.tenantId !== "string" ||
-        !principal.tenantId) {
-        throw unauthorized();
-    }
-    if (previous &&
-        (previous.userId !== principal.user._id ||
-            previous.tenantId !== principal.tenantId)) {
-        throw unauthorized();
-    }
-}
-async function resolveRequestPrincipal(ctx, authenticators, authenticateJwt) {
-    const pending = pendingAuthentications.get(ctx.rawRequest) ?? Promise.resolve();
-    const result = pending.then(() => verifyRequestPrincipal(ctx, authenticators, authenticateJwt));
-    pendingAuthentications.set(ctx.rawRequest, result);
-    try {
-        return await result;
-    }
-    finally {
-        if (pendingAuthentications.get(ctx.rawRequest) === result) {
-            pendingAuthentications.delete(ctx.rawRequest);
-        }
-    }
-}
-async function verifyRequestPrincipal(ctx, authenticators, authenticateJwt) {
-    const request = ctx.rawRequest;
-    const authorization = request.headers.authorization;
-    const previous = requestPrincipals.get(request);
-    const state = { authorization };
-    requestPrincipals.set(request, state);
-    if (previous &&
-        (!previous.principal || previous.authorization !== authorization)) {
-        throw unauthorized();
-    }
-    const token = readBearerToken(authorization);
-    const handlers = authenticators.filter((handler) => handler.recognizes(token));
-    if (handlers.length > 1)
-        throw unauthorized();
-    const principal = handlers.length
-        ? await handlers[0].authenticate(token)
-        : await authenticateJwt(token);
-    assertPrincipal(principal, previous?.principal);
-    if (requestPrincipals.get(request) !== state ||
-        request.headers.authorization !== authorization) {
-        throw unauthorized();
-    }
-    const snapshot = { tenantId: principal.tenantId, userId: principal.user._id };
-    requestPrincipals.set(request, { authorization, principal: snapshot });
-    return principal;
-}
 //# sourceMappingURL=request-authenticators.js.map

package/dist/auth/request-authenticators.js.map

@@ -1 +1 @@
-{"version":3,"file":"request-authenticators.js","sourceRoot":"","sources":["../../src/auth/request-authenticators.ts"],"names":[],"mappings":";;AA4CA,0EAYC;AA8BD,0DAkBC;AAvGD,6DAA4E;AAG5E,MAAM,iBAAiB,GAAG,GAAG,CAAC;AA0B9B,MAAM,iBAAiB,GAAG,IAAI,OAAO,EAGlC,CAAC;AACJ,MAAM,sBAAsB,GAAG,IAAI,OAAO,EAGvC,CAAC;AAEJ,SAAS,YAAY;IACnB,OAAO,IAAI,0BAAU,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;AAC3D,CAAC;AAGD,SAAgB,+BAA+B,CAC7C,GAAmB;IAEnB,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IACE,CAAC,KAAK,CAAC,SAAS;QAChB,KAAK,CAAC,aAAa,KAAK,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,EAC5D,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;AAClC,CAAC;AAED,SAAS,eAAe,CAAC,aAAiC;IACxD,MAAM,KAAK,GAAG,aAAa,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,MAAM,YAAY,EAAE,CAAC;IACjC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CACtB,SAA2B,EAC3B,QAA0B;IAE1B,IACE,OAAO,SAAS,EAAE,IAAI,EAAE,GAAG,KAAK,QAAQ;QACxC,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG;QACrB,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ;QACtC,CAAC,SAAS,CAAC,QAAQ,EACnB,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,IACE,QAAQ;QACR,CAAC,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,CAAC,GAAG;YACrC,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,QAAQ,CAAC,EAC3C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAGM,KAAK,UAAU,uBAAuB,CAC3C,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GACX,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAC/B,sBAAsB,CAAC,GAAG,EAAE,cAAc,EAAE,eAAe,CAAC,CAC7D,CAAC;IACF,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC;IACtB,CAAC;YAAS,CAAC;QACT,IAAI,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,MAAM,EAAE,CAAC;YAC1D,sBAAsB,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,sBAAsB,CACnC,GAAmB,EACnB,cAA+C,EAC/C,eAA6D;IAE7D,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC;IAC/B,MAAM,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC;IACpD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,KAAK,GAA+B,EAAE,aAAa,EAAE,CAAC;IAC5D,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,IACE,QAAQ;QACR,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,aAAa,CAAC,EACjE,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,KAAK,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CACjD,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,CAC1B,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,YAAY,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM;QAC/B,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;QACvC,CAAC,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;IACjC,eAAe,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IAChD,IACE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK;QACxC,OAAO,CAAC,OAAO,CAAC,aAAa,KAAK,aAAa,EAC/C,CAAC;QACD,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9E,iBAAiB,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC"}
+{"version":3,"file":"request-authenticators.js","sourceRoot":"","sources":["../../src/auth/request-authenticators.ts"],"names":[],"mappings":""}

package/dist/base/activity-feed.d.ts

@@ -0,0 +1,210 @@
+import { ComponentBuilder } from "../component";
+import { z } from "zod";
+import { type BlockItemsSource, type BlockLinkAction } from "./display";
+import type { BaseComponentProps } from "./types";
+import { type Tone } from "./types/tone";
+/** One entry of an activity feed. */
+export interface ActivityFeedItem {
+    id?: string;
+    /** Icon of the entry's well, e.g. `i-ph-check-circle`. */
+    icon?: string;
+    tone?: Tone;
+    /** Title (i18n key with `$` or literal). */
+    title: string;
+    /** Details under the title, joined by "·". */
+    meta?: string[];
+    /**
+     * Values the title and the details interpolate (`{device}`) when they are
+     * i18n keys. A value written as a `$`-prefixed key is translated first,
+     * with the item's other values: `{ device: "$…device", browser: "Chrome",
+     * os: "Windows" }`.
+     */
+    params?: Record<string, string>;
+    /** ISO date: files the entry under its day and gives its time. */
+    date?: string;
+    /** Literal trailing text, in place of the formatted time. */
+    time?: string;
+    /** Accent dot after the time. */
+    unread?: boolean;
+    /** Path the entry links to. */
+    to?: string;
+}
+/**
+ * The options `ActivityFeed` takes. Its `fetchUrl` answers `{ items }`, newest
+ * first, like every list block.
+ */
+export interface ActivityFeedProps extends BaseComponentProps, BlockItemsSource {
+    /** Eyebrow title of the card head. */
+    title?: string;
+    /** Entries shown when no data source is set, newest first. */
+    items?: ActivityFeedItem[];
+    /**
+     * Files the entries under day separators ("Today · Sep 29") with their time.
+     * Off, each entry says how long ago it happened. Defaults to `true`.
+     */
+    groupByDay?: boolean;
+    /** Shows at most this many entries; `skeletonCount` never exceeds it. */
+    maxItems?: number;
+    /** Link buttons in the card head ("View all"). */
+    actions?: BlockLinkAction[];
+    /** Mono titles and details (paths, queries, request logs). */
+    mono?: boolean;
+    /** Card frame with a head. Defaults to `true`. */
+    card?: boolean;
+}
+/**
+ * ActivityFeed - a feed of events, grouped by day.
+ *
+ * Static entries or a data source; each entry has a tinted icon well, a title,
+ * dimmed details and its time. Shows a skeleton while loading, an empty state
+ * and a retry on error.
+ *
+ * @example
+ * ```typescript
+ * ActivityFeed({
+ *   title: "Activity",
+ *   fetchUrl: "/api/activity",
+ *   maxItems: 8,
+ *   actions: [{ label: "View all", to: "/audit" }],
+ * })
+ * ```
+ */
+export declare function ActivityFeed(options?: ActivityFeedProps): ComponentBuilder<ActivityFeedProps>;
+/** The options `ActivityFeed` accepts. */
+export declare const ActivityFeedSchema: z.ZodObject<{
+    mono: z.ZodOptional<z.ZodBoolean>;
+    card: z.ZodDefault<z.ZodBoolean>;
+    fetchUrl: z.ZodOptional<z.ZodString>;
+    fetchUrlMethod: z.ZodOptional<z.ZodNativeEnum<typeof import("./types").HttpMethod>>;
+    empty: z.ZodOptional<z.ZodObject<{
+        title: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        title: string;
+        description?: string | undefined;
+    }, {
+        title: string;
+        description?: string | undefined;
+    }>>;
+    skeletonCount: z.ZodOptional<z.ZodNumber>;
+    title: z.ZodOptional<z.ZodString>;
+    items: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+        tone: z.ZodOptional<z.ZodEnum<["primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral", ...("primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral")[]]>>;
+        title: z.ZodString;
+        meta: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        date: z.ZodOptional<z.ZodString>;
+        time: z.ZodOptional<z.ZodString>;
+        unread: z.ZodOptional<z.ZodBoolean>;
+        to: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        title: string;
+        date?: string | undefined;
+        time?: string | undefined;
+        params?: Record<string, string> | undefined;
+        id?: string | undefined;
+        icon?: string | undefined;
+        meta?: string[] | undefined;
+        to?: string | undefined;
+        tone?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+        unread?: boolean | undefined;
+    }, {
+        title: string;
+        date?: string | undefined;
+        time?: string | undefined;
+        params?: Record<string, string> | undefined;
+        id?: string | undefined;
+        icon?: string | undefined;
+        meta?: string[] | undefined;
+        to?: string | undefined;
+        tone?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+        unread?: boolean | undefined;
+    }>, "many">>;
+    groupByDay: z.ZodOptional<z.ZodBoolean>;
+    maxItems: z.ZodOptional<z.ZodNumber>;
+    actions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        label: z.ZodString;
+        to: z.ZodString;
+        icon: z.ZodOptional<z.ZodString>;
+        variant: z.ZodOptional<z.ZodEnum<["solid", "outline", "soft", "subtle", "ghost", "link"]>>;
+        color: z.ZodOptional<z.ZodEnum<["primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral", ...("primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral")[]]>>;
+    }, "strip", z.ZodTypeAny, {
+        label: string;
+        to: string;
+        icon?: string | undefined;
+        variant?: "link" | "solid" | "outline" | "soft" | "ghost" | "subtle" | undefined;
+        color?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+    }, {
+        label: string;
+        to: string;
+        icon?: string | undefined;
+        variant?: "link" | "solid" | "outline" | "soft" | "ghost" | "subtle" | undefined;
+        color?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    card: boolean;
+    items?: {
+        title: string;
+        date?: string | undefined;
+        time?: string | undefined;
+        params?: Record<string, string> | undefined;
+        id?: string | undefined;
+        icon?: string | undefined;
+        meta?: string[] | undefined;
+        to?: string | undefined;
+        tone?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+        unread?: boolean | undefined;
+    }[] | undefined;
+    maxItems?: number | undefined;
+    title?: string | undefined;
+    fetchUrl?: string | undefined;
+    fetchUrlMethod?: import("./types").HttpMethod | undefined;
+    mono?: boolean | undefined;
+    actions?: {
+        label: string;
+        to: string;
+        icon?: string | undefined;
+        variant?: "link" | "solid" | "outline" | "soft" | "ghost" | "subtle" | undefined;
+        color?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+    }[] | undefined;
+    groupByDay?: boolean | undefined;
+    empty?: {
+        title: string;
+        description?: string | undefined;
+    } | undefined;
+    skeletonCount?: number | undefined;
+}, {
+    items?: {
+        title: string;
+        date?: string | undefined;
+        time?: string | undefined;
+        params?: Record<string, string> | undefined;
+        id?: string | undefined;
+        icon?: string | undefined;
+        meta?: string[] | undefined;
+        to?: string | undefined;
+        tone?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+        unread?: boolean | undefined;
+    }[] | undefined;
+    maxItems?: number | undefined;
+    title?: string | undefined;
+    fetchUrl?: string | undefined;
+    fetchUrlMethod?: import("./types").HttpMethod | undefined;
+    card?: boolean | undefined;
+    mono?: boolean | undefined;
+    actions?: {
+        label: string;
+        to: string;
+        icon?: string | undefined;
+        variant?: "link" | "solid" | "outline" | "soft" | "ghost" | "subtle" | undefined;
+        color?: "primary" | "secondary" | "success" | "info" | "warning" | "error" | "neutral" | undefined;
+    }[] | undefined;
+    groupByDay?: boolean | undefined;
+    empty?: {
+        title: string;
+        description?: string | undefined;
+    } | undefined;
+    skeletonCount?: number | undefined;
+}>;

package/dist/base/activity-feed.js

@@ -0,0 +1,104 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActivityFeedSchema = void 0;
+exports.ActivityFeed = ActivityFeed;
+const component_1 = require("../component");
+const zod_1 = require("zod");
+const block_registry_1 = require("./block-registry");
+const display_1 = require("./display");
+const display_2 = require("./internal/display");
+const tone_1 = require("./types/tone");
+const ACTIVITY_FEED_COMPONENT_NAME = "dms-activity-feed-block";
+const DEFAULT_ICON = "i-ph-pulse";
+/**
+ * ActivityFeed - a feed of events, grouped by day.
+ *
+ * Static entries or a data source; each entry has a tinted icon well, a title,
+ * dimmed details and its time. Shows a skeleton while loading, an empty state
+ * and a retry on error.
+ *
+ * @example
+ * ```typescript
+ * ActivityFeed({
+ *   title: "Activity",
+ *   fetchUrl: "/api/activity",
+ *   maxItems: 8,
+ *   actions: [{ label: "View all", to: "/audit" }],
+ * })
+ * ```
+ */
+function ActivityFeed(options) {
+    return new component_1.ComponentBuilder(ACTIVITY_FEED_COMPONENT_NAME)
+        .options({ ...options })
+        .meta({
+        name: options?.title || "Activity feed",
+        icon: DEFAULT_ICON,
+    });
+}
+const ActivityFeedItemSchema = zod_1.z.object({
+    id: zod_1.z.string().optional(),
+    icon: (0, block_registry_1.ui)(zod_1.z.string().optional(), { label: "Icon", widget: "icon" }),
+    tone: (0, block_registry_1.ui)((0, display_2.toneEnum)(tone_1.TONES).optional(), {
+        label: "Tone",
+        widget: "select",
+    }),
+    title: (0, block_registry_1.ui)(zod_1.z.string(), { label: "Title" }),
+    meta: (0, block_registry_1.ui)(zod_1.z.array(zod_1.z.string()).optional(), { label: "Details" }),
+    params: (0, block_registry_1.ui)(zod_1.z.record(zod_1.z.string(), zod_1.z.string()).optional(), {
+        label: "Text values",
+        widget: "json",
+    }),
+    date: (0, block_registry_1.ui)(zod_1.z.string().optional().describe("ISO date of the event."), {
+        label: "Date",
+    }),
+    time: (0, block_registry_1.ui)(zod_1.z.string().optional(), { label: "Time text" }),
+    unread: (0, block_registry_1.ui)(zod_1.z.boolean().optional(), { label: "Unread", widget: "switch" }),
+    to: (0, block_registry_1.ui)(zod_1.z.string().optional(), { label: "Link", widget: "url" }),
+});
+/** The options `ActivityFeed` accepts. */
+exports.ActivityFeedSchema = zod_1.z.object({
+    title: (0, block_registry_1.ui)(zod_1.z.string().optional().describe("Eyebrow title of the card."), {
+        label: "Title",
+        group: "content",
+    }),
+    items: (0, block_registry_1.ui)(zod_1.z.array(ActivityFeedItemSchema).optional(), {
+        label: "Static entries",
+        group: "content",
+        widget: "json",
+    }),
+    groupByDay: (0, block_registry_1.ui)(zod_1.z
+        .boolean()
+        .optional()
+        .describe("Day separators with times, rather than relative times."), {
+        label: "Group by day",
+        group: "appearance",
+        widget: "switch",
+        initial: true,
+    }),
+    maxItems: (0, block_registry_1.ui)(zod_1.z.number().int().optional(), {
+        label: "Maximum entries",
+        group: "appearance",
+        widget: "number",
+        min: 1,
+    }),
+    actions: (0, display_1.blockActionsOption)("Link buttons in the card head."),
+    ...(0, display_1.blockItemsSourceOptions)(),
+    mono: (0, block_registry_1.ui)(zod_1.z.boolean().optional(), {
+        label: "Mono text",
+        group: "appearance",
+        widget: "switch",
+    }),
+    card: (0, display_1.blockCardOption)(true),
+});
+(0, block_registry_1.RegisterBlockType)({
+    type: "ActivityFeed",
+    componentName: ACTIVITY_FEED_COMPONENT_NAME,
+    schema: exports.ActivityFeedSchema,
+    meta: {
+        name: "Activity feed",
+        icon: DEFAULT_ICON,
+        description: "Recent events, grouped by day, from a list or a source.",
+        group: "data",
+    },
+});
+//# sourceMappingURL=activity-feed.js.map

package/dist/base/activity-feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-feed.js","sourceRoot":"","sources":["../../src/base/activity-feed.ts"],"names":[],"mappings":";;;AAsFA,oCASC;AA/FD,4CAAgD;AAChD,6BAAwB;AACxB,qDAA+E;AAC/E,uCAMmB;AACnB,gDAA8C;AAE9C,uCAAgD;AAsDhD,MAAM,4BAA4B,GAAG,yBAAyB,CAAC;AAC/D,MAAM,YAAY,GAAG,YAAY,CAAC;AAElC;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,YAAY,CAC1B,OAA2B;IAE3B,OAAO,IAAI,4BAAgB,CAAoB,4BAA4B,CAAC;SACzE,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC;SACvB,IAAI,CAAC;QACJ,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,eAAe;QACvC,IAAI,EAAE,YAAY;KACnB,CAAC,CAAC;AACP,CAAC;AAED,MAAM,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzB,IAAI,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IAClE,IAAI,EAAE,IAAA,mBAAE,EAAC,IAAA,kBAAQ,EAAC,YAAK,CAAC,CAAC,QAAQ,EAAE,EAAE;QACnC,KAAK,EAAE,MAAM;QACb,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,KAAK,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACzC,IAAI,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9D,MAAM,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE;QACtD,KAAK,EAAE,aAAa;QACpB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,IAAI,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE;QACjE,KAAK,EAAE,MAAM;KACd,CAAC;IACF,IAAI,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IACvD,MAAM,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACzE,EAAE,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;CAChE,CAA6C,CAAC;AAE/C,0CAA0C;AAC7B,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE;QACtE,KAAK,EAAE,OAAO;QACd,KAAK,EAAE,SAAS;KACjB,CAAC;IACF,KAAK,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,QAAQ,EAAE,EAAE;QACpD,KAAK,EAAE,gBAAgB;QACvB,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,MAAM;KACf,CAAC;IACF,UAAU,EAAE,IAAA,mBAAE,EACZ,OAAC;SACE,OAAO,EAAE;SACT,QAAQ,EAAE;SACV,QAAQ,CAAC,wDAAwD,CAAC,EACrE;QACE,KAAK,EAAE,cAAc;QACrB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,IAAI;KACd,CACF;IACD,QAAQ,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE;QACxC,KAAK,EAAE,iBAAiB;QACxB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,QAAQ;QAChB,GAAG,EAAE,CAAC;KACP,CAAC;IACF,OAAO,EAAE,IAAA,4BAAkB,EAAC,gCAAgC,CAAC;IAC7D,GAAG,IAAA,iCAAuB,GAAE;IAC5B,IAAI,EAAE,IAAA,mBAAE,EAAC,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE;QAC/B,KAAK,EAAE,WAAW;QAClB,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,IAAI,EAAE,IAAA,yBAAe,EAAC,IAAI,CAAC;CAC5B,CAA8C,CAAC;AAEhD,IAAA,kCAAiB,EAAC;IAChB,IAAI,EAAE,cAAc;IACpB,aAAa,EAAE,4BAA4B;IAC3C,MAAM,EAAE,0BAAkB;IAC1B,IAAI,EAAE;QACJ,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,yDAAyD;QACtE,KAAK,EAAE,MAAM;KACd;CACF,CAAC,CAAC"}