@arcblock/did-connect-service 4.1.6 → 4.1.8

package/dist/oauth-adapters/apple.js

@@ -55,30 +55,61 @@ export class AppleAdapter {
         if (!params.store) {
             throw new Error("D1Store required for Apple OIDC id_token verification");
         }
-        // Verify with either serviceId or bundleId as audience
-        const audiences = [clientId];
-        if (config.bundleId && config.bundleId !== clientId)
-            audiences.push(config.bundleId);
-        let payload = null;
-        for (const aud of audiences) {
-            try {
-                payload = await verifyIdToken(tokens.id_token, APPLE_JWKS_URL, params.store, aud);
-                break;
-            }
-            catch {
-                // Try next audience
-            }
+        return verifyAppleIdToken(tokens.id_token, config, params.store);
+    }
+    /**
+     * Verify a native Apple id_token (iOS ASAuthorizationController). The native
+     * flow has no authorization code, so the app posts the id_token directly.
+     * A native id_token's `aud` is the app bundle id (not the web serviceId).
+     */
+    async verifyIdToken(params) {
+        const config = params.config;
+        if (!params.store) {
+            throw new Error("D1Store required for Apple OIDC id_token verification");
+        }
+        return verifyAppleIdToken(params.idToken, config, params.store);
+    }
+}
+/**
+ * Candidate audiences for an Apple id_token. Web id_tokens carry the serviceId
+ * (client_id); native id_tokens carry the app bundle id. `bundleId` is stored
+ * as a comma-separated list (an instance may ship multiple apps), so split it
+ * and try each.
+ */
+function appleAudiences(config) {
+    const auds = [];
+    const clientId = config.serviceId || config.clientId;
+    if (clientId)
+        auds.push(clientId);
+    if (config.bundleId) {
+        for (const b of config.bundleId.split(",").map((s) => s.trim()).filter(Boolean)) {
+            if (!auds.includes(b))
+                auds.push(b);
         }
-        if (!payload)
-            throw new Error("Apple id_token verification failed");
-        const sub = payload.sub;
-        if (!sub)
-            throw new Error("Apple id_token missing sub claim");
-        return {
-            sub: `appleid|${sub}`,
-            email: payload.email,
-        };
     }
+    return auds;
+}
+/** Verify an Apple id_token against every configured audience; return profile. */
+async function verifyAppleIdToken(idToken, config, store) {
+    let payload = null;
+    for (const aud of appleAudiences(config)) {
+        try {
+            payload = await verifyIdToken(idToken, APPLE_JWKS_URL, store, aud);
+            break;
+        }
+        catch {
+            // Try next audience
+        }
+    }
+    if (!payload)
+        throw new Error("Apple id_token verification failed");
+    const sub = payload.sub;
+    if (!sub)
+        throw new Error("Apple id_token missing sub claim");
+    return {
+        sub: `appleid|${sub}`,
+        email: payload.email,
+    };
 }
 /**
  * Generate Apple client_secret JWT (ES256, 6-month validity).

package/dist/oauth-adapters/apple.js.map

@@ -1 +1 @@
-{"version":3,"file":"apple.js","sourceRoot":"","sources":["../../src/oauth-adapters/apple.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAClE,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAC/D,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAC7D,MAAM,aAAa,GAAG,YAAY,CAAC;AAenC,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,OAAO,CAAC;IAExB,mBAAmB,CAAC,MAInB;QACC,MAAM,MAAM,GAAG,MAAM,CAAC,MAA6B,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,qBAAqB,IAAI,cAAc,CAAC,CAAC;QACpE,2DAA2D;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC;QAC7D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAKlB;QACC,MAAM,MAAM,GAAG,MAAM,CAAC,MAA6B,CAAC;QACpD,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC;QAErD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,eAAe,EAAE;YACzE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,YAAY,EAAE,0CAA0C;gBACxD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY;gBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,UAAU,EAAE,oBAAoB;aACjC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,gCAAgC,aAAa,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,MAAM,GAAuB,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,uDAAuD;QACvD,MAAM,SAAS,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAErF,IAAI,OAAO,GAAmC,IAAI,CAAC;QACnD,KAAK,MAAM,GAAG,IAAI,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAClF,MAAM;YACR,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAEpE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAa,CAAC;QAClC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAE9D,OAAO;YACL,GAAG,EAAE,WAAW,GAAG,EAAE;YACrB,KAAK,EAAE,OAAO,CAAC,KAA2B;SAC3C,CAAC;IACJ,CAAC;CACF;AAED;;;GAGG;AACH,KAAK,UAAU,yBAAyB,CAAC,MAA2B;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,QAAQ,EAAE,YAAY;QACjC,GAAG,EAAE,2BAA2B;QAChC,GAAG,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ;KACzC,CAAC;IAEF,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAElD,yBAAyB;IACzB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACvC,CAAC;IAEF,OAAO,GAAG,YAAY,IAAI,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,KAA0B;IACjD,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjF,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,GAAG;SAChB,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE;QAC5F,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"apple.js","sourceRoot":"","sources":["../../src/oauth-adapters/apple.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAGhD,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAClE,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAC/D,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAC7D,MAAM,aAAa,GAAG,YAAY,CAAC;AAenC,MAAM,OAAO,YAAY;IACd,IAAI,GAAG,OAAO,CAAC;IAExB,mBAAmB,CAAC,MAInB;QACC,MAAM,MAAM,GAAG,MAAM,CAAC,MAA6B,CAAC;QACpD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,qBAAqB,IAAI,cAAc,CAAC,CAAC;QACpE,2DAA2D;QAC3D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC;QAC7D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;QACnD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAKlB;QACC,MAAM,MAAM,GAAG,MAAM,CAAC,MAA6B,CAAC;QACpD,MAAM,YAAY,GAAG,MAAM,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC;QAErD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,aAAa,IAAI,eAAe,EAAE;YACzE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;gBACnD,YAAY,EAAE,0CAA0C;gBACxD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,QAAQ;gBACnB,aAAa,EAAE,YAAY;gBAC3B,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,YAAY,EAAE,MAAM,CAAC,WAAW;gBAChC,UAAU,EAAE,oBAAoB;aACjC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,gCAAgC,aAAa,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,MAAM,GAAuB,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,aAAa,CAAC,MAInB;QACC,MAAM,MAAM,GAAG,MAAM,CAAC,MAA6B,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,OAAO,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,cAAc,CAAC,MAA2B;IACjD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC;IACrD,IAAI,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAChF,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,kBAAkB,CAC/B,OAAe,EACf,MAA2B,EAC3B,KAA6C;IAE7C,IAAI,OAAO,GAAmC,IAAI,CAAC;IACnD,KAAK,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;YACnE,MAAM;QACR,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAEpE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAa,CAAC;IAClC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAE9D,OAAO;QACL,GAAG,EAAE,WAAW,GAAG,EAAE;QACrB,KAAK,EAAE,OAAO,CAAC,KAA2B;KAC3C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,yBAAyB,CAAC,MAA2B;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,MAAM,CAAC,MAAM;QAClB,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,QAAQ,EAAE,YAAY;QACjC,GAAG,EAAE,2BAA2B;QAChC,GAAG,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ;KACzC,CAAC;IAEF,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,YAAY,GAAG,GAAG,SAAS,IAAI,UAAU,EAAE,CAAC;IAElD,yBAAyB;IACzB,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAClC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,GAAG,EACH,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CACvC,CAAC;IAEF,OAAO,GAAG,YAAY,IAAI,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,KAA0B;IACjD,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACjF,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAW;IACvC,MAAM,OAAO,GAAG,GAAG;SAChB,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC;SAChC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACtB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE;QAC5F,MAAM;KACP,CAAC,CAAC;AACL,CAAC"}

package/dist/oauth-adapters/types.d.ts

@@ -56,5 +56,19 @@ export interface OAuthAdapter {
         /** D1Store for JWKS caching (Google/Apple). */
         store?: import("../store/d1-store.js").D1Store;
     }): Promise<OAuthProfile>;
+    /**
+     * Verify a native id_token and return the normalized profile.
+     *
+     * Native flows (e.g. Apple Sign In on iOS via ASAuthorizationController)
+     * yield an id_token directly and have NO authorization code, so they can't
+     * use `exchangeCode`. Optional — only providers that support native token
+     * login implement this.
+     */
+    verifyIdToken?(params: {
+        config: OAuthProviderConfig;
+        idToken: string;
+        /** D1Store for JWKS caching. */
+        store?: import("../store/d1-store.js").D1Store;
+    }): Promise<OAuthProfile>;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/oauth-adapters/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/oauth-adapters/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,0DAA0D;IAC1D,mBAAmB,CAAC,MAAM,EAAE;QAC1B,MAAM,EAAE,mBAAmB,CAAC;QAC5B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,MAAM,CAAC;IAEX;;;OAGG;IACH,YAAY,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,mBAAmB,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,+CAA+C;QAC/C,KAAK,CAAC,EAAE,OAAO,sBAAsB,EAAE,OAAO,CAAC;KAChD,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC3B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/oauth-adapters/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,sDAAsD;AACtD,MAAM,WAAW,YAAY;IAC3B,8EAA8E;IAC9E,GAAG,EAAE,MAAM,CAAC;IACZ,oBAAoB;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,+DAA+D;AAC/D,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,mEAAmE;AACnE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qDAAqD;AACrD,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,0DAA0D;IAC1D,mBAAmB,CAAC,MAAM,EAAE;QAC1B,MAAM,EAAE,mBAAmB,CAAC;QAC5B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;KACf,GAAG,MAAM,CAAC;IAEX;;;OAGG;IACH,YAAY,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,mBAAmB,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,WAAW,EAAE,MAAM,CAAC;QACpB,+CAA+C;QAC/C,KAAK,CAAC,EAAE,OAAO,sBAAsB,EAAE,OAAO,CAAC;KAChD,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAE1B;;;;;;;OAOG;IACH,aAAa,CAAC,CAAC,MAAM,EAAE;QACrB,MAAM,EAAE,mBAAmB,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC;QAChB,gCAAgC;QAChC,KAAK,CAAC,EAAE,OAAO,sBAAsB,EAAE,OAAO,CAAC;KAChD,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;CAC3B"}

package/dist/pages/admin/index.js

@@ -67,7 +67,7 @@ export function buildAdminPageHTML(data) {
   <meta charset="utf-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1" />
   <title>${data.appName ? `${escapeForHTML(data.appName)} — ` : ""}${t(isUserPage ? "header.userTitle" : "header.title")}</title>
-  <link rel="icon" href="/.well-known/service/blocklet/logo-favicon" type="image/png" />
+  <link rel="icon" href="/.well-known/service/blocklet/logo-favicon" />
   <link rel="stylesheet" href="/.well-known/service/theme/styles.css" />
   <script src="/.well-known/service/theme/init.js"></script>
   <link rel="stylesheet" href="${assetUrl("design.css")}" />

package/dist/pages/admin/scripts/api-client.d.ts

@@ -2,5 +2,5 @@
  * API client — fetch wrapper with error handling.
  * Handles 401 → clear cookie + redirect, 403 BLOCKED → same.
  */
-export declare const API_CLIENT_SCRIPT = "\nasync function api(method, path, body) {\n  try {\n    var opts = {\n      method: method,\n      headers: {},\n    };\n    if (body !== undefined) {\n      opts.headers[\"Content-Type\"] = \"application/json\";\n      opts.body = JSON.stringify(body);\n    }\n    var res = await fetch(window.__BASE_PATH + path, opts);\n    var data = await res.json();\n\n    if (res.status === 401) {\n      location.href = \"/.well-known/service/api/did/logout\";\n      return { ok: false, error: \"Session expired\", code: \"UNAUTHENTICATED\" };\n    }\n    if (res.status === 403 && data.code === \"BLOCKED\") {\n      location.href = \"/.well-known/service/api/did/logout\";\n      return { ok: false, error: \"Account blocked\", code: \"BLOCKED\" };\n    }\n    if (!res.ok) {\n      showToast(data.error || \"Request failed\", \"error\");\n      return { ok: false, error: data.error, code: data.code };\n    }\n    return data;\n  } catch (err) {\n    showToast(\"Network error\", \"error\");\n    return { ok: false, error: err.message, code: \"NETWORK_ERROR\" };\n  }\n}\n";
+export declare const API_CLIENT_SCRIPT = "\n// opts.silent: suppress the global error toast on failure. Use for best-effort\n// calls whose failure is expected and handled by the caller (e.g. system-admin-only\n// enhancements probed from a lower-privilege context).\nasync function api(method, path, body, callOpts) {\n  callOpts = callOpts || {};\n  try {\n    var opts = {\n      method: method,\n      headers: {},\n    };\n    if (body !== undefined) {\n      opts.headers[\"Content-Type\"] = \"application/json\";\n      opts.body = JSON.stringify(body);\n    }\n    var res = await fetch(window.__BASE_PATH + path, opts);\n    var data = await res.json();\n\n    if (res.status === 401) {\n      location.href = \"/.well-known/service/api/did/logout\";\n      return { ok: false, error: \"Session expired\", code: \"UNAUTHENTICATED\" };\n    }\n    if (res.status === 403 && data.code === \"BLOCKED\") {\n      location.href = \"/.well-known/service/api/did/logout\";\n      return { ok: false, error: \"Account blocked\", code: \"BLOCKED\" };\n    }\n    if (!res.ok) {\n      if (!callOpts.silent) showToast(data.error || \"Request failed\", \"error\");\n      return { ok: false, error: data.error, code: data.code };\n    }\n    return data;\n  } catch (err) {\n    if (!callOpts.silent) showToast(\"Network error\", \"error\");\n    return { ok: false, error: err.message, code: \"NETWORK_ERROR\" };\n  }\n}\n";
 //# sourceMappingURL=api-client.d.ts.map

package/dist/pages/admin/scripts/api-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../../src/pages/admin/scripts/api-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,iBAAiB,ojCAgC7B,CAAC"}
+{"version":3,"file":"api-client.d.ts","sourceRoot":"","sources":["../../../../src/pages/admin/scripts/api-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,eAAO,MAAM,iBAAiB,w2CAoC7B,CAAC"}

package/dist/pages/admin/scripts/api-client.js

@@ -3,7 +3,11 @@
  * Handles 401 → clear cookie + redirect, 403 BLOCKED → same.
  */
 export const API_CLIENT_SCRIPT = /* js */ `
-async function api(method, path, body) {
+// opts.silent: suppress the global error toast on failure. Use for best-effort
+// calls whose failure is expected and handled by the caller (e.g. system-admin-only
+// enhancements probed from a lower-privilege context).
+async function api(method, path, body, callOpts) {
+  callOpts = callOpts || {};
   try {
     var opts = {
       method: method,
@@ -25,12 +29,12 @@ async function api(method, path, body) {
       return { ok: false, error: "Account blocked", code: "BLOCKED" };
     }
     if (!res.ok) {
-      showToast(data.error || "Request failed", "error");
+      if (!callOpts.silent) showToast(data.error || "Request failed", "error");
       return { ok: false, error: data.error, code: data.code };
     }
     return data;
   } catch (err) {
-    showToast("Network error", "error");
+    if (!callOpts.silent) showToast("Network error", "error");
     return { ok: false, error: err.message, code: "NETWORK_ERROR" };
   }
 }

package/dist/pages/admin/scripts/api-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../../../src/pages/admin/scripts/api-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCzC,CAAC"}
+{"version":3,"file":"api-client.js","sourceRoot":"","sources":["../../../../src/pages/admin/scripts/api-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCzC,CAAC"}

package/dist/pages/admin/tab-members.d.ts

@@ -3,6 +3,6 @@
  */
 type TFn = (key: string, params?: Record<string, string>) => string;
 export declare function membersTabHtml(t: TFn): string;
-export declare const MEMBERS_TAB_SCRIPT = "\nvar membersPage = 1;\nvar membersPageSize = 20;\nvar memberSearchTimeout = null;\nvar currentMembersList = [];\nvar selectedMember = null;\nvar __membersAggregated = false;\n// Sort state: empty string = default (server decides + self-first on client).\n// Three-state click cycle: (none) \u2192 desc \u2192 asc \u2192 (none).\n// Persisted in location.search as sortBy/sortOrder so it survives refresh + share.\nvar membersSortBy = \"\";\nvar membersSortOrder = \"\";\nvar MEMBERS_SORT_VALID = [\"name\", \"role\", \"status\", \"source\", \"joined\"];\n\n/** Populate module sort state from the current URL query string. Idempotent. */\nfunction readMembersSortFromURL() {\n  membersSortBy = \"\";\n  membersSortOrder = \"\";\n  var params = new URLSearchParams(location.search);\n  var by = params.get(\"sortBy\");\n  var order = params.get(\"sortOrder\");\n  if (by && MEMBERS_SORT_VALID.indexOf(by) >= 0) {\n    membersSortBy = by;\n    membersSortOrder = (order === \"asc\" || order === \"desc\") ? order : \"desc\";\n  }\n}\n\n/** Write current sort state back to location.search without reloading. */\nfunction writeMembersSortToURL() {\n  var params = new URLSearchParams(location.search);\n  if (membersSortBy) {\n    params.set(\"sortBy\", membersSortBy);\n    params.set(\"sortOrder\", membersSortOrder || \"desc\");\n  } else {\n    params.delete(\"sortBy\");\n    params.delete(\"sortOrder\");\n  }\n  var qs = params.toString();\n  var newUrl = location.pathname + (qs ? \"?\" + qs : \"\") + location.hash;\n  history.replaceState(null, \"\", newUrl);\n}\n\n/** Cycle sort state for a column key and reload. */\nfunction toggleSort(key) {\n  if (membersSortBy !== key) {\n    membersSortBy = key;\n    membersSortOrder = \"desc\";\n  } else if (membersSortOrder === \"desc\") {\n    membersSortOrder = \"asc\";\n  } else {\n    // Third click \u2014 back to default.\n    membersSortBy = \"\";\n    membersSortOrder = \"\";\n  }\n  writeMembersSortToURL();\n  loadMembers(1);\n}\n\n/** Render a <th> with click-to-sort behavior. */\nfunction sortableTh(key, label, extraClass) {\n  var isActive = membersSortBy === key;\n  var arrow;\n  if (isActive) {\n    arrow = membersSortOrder === \"asc\"\n      ? '<span class=\"sort-arrow sort-arrow-active\">\\u2191</span>'\n      : '<span class=\"sort-arrow sort-arrow-active\">\\u2193</span>';\n  } else {\n    arrow = '<span class=\"sort-arrow\">\\u2195</span>';\n  }\n  var cls = \"sortable\" + (isActive ? \" sort-active\" : \"\") + (extraClass ? \" \" + extraClass : \"\");\n  return '<th class=\"' + cls + '\" onclick=\"toggleSort(\\'' + key + '\\')\">' + label + arrow + '</th>';\n}\n\nfunction providerLabel(sp) {\n  if (!sp) return \"\\u2014\";\n  var key = \"members.providers.\" + sp;\n  var val = __t(key);\n  return val !== key ? val : sp;\n}\n\nfunction debouncedMemberSearch() {\n  clearTimeout(memberSearchTimeout);\n  memberSearchTimeout = setTimeout(function() { loadMembers(1); }, 300);\n}\n\n// Load registered instances for the filter dropdown (system admin only)\nvar __instanceNames = {};\nvar __instanceFilterInitialized = false;\nasync function initInstanceFilter() {\n  if (__instanceFilterInitialized) return;\n  try {\n    var data = await api(\"GET\", \"/../admin/instances\");\n    if (data.ok && data.instances && data.instances.length > 0) {\n      __instanceFilterInitialized = true;\n      var sel = document.getElementById(\"members-instance-filter\");\n      data.instances.forEach(function(inst) {\n        __instanceNames[inst.instanceDid] = inst.appName || inst.instanceDid.substring(0, 16);\n        var opt = document.createElement(\"option\");\n        opt.value = inst.instanceDid;\n        opt.textContent = __instanceNames[inst.instanceDid];\n        sel.appendChild(opt);\n      });\n      sel.style.display = \"\";\n    }\n  } catch(e) { /* not admin or no instances */ }\n}\n\n// Also support specific instance filter via query param\n// When ?instance=z1xxx, team handler needs to use that instanceDid\n\nasync function loadMembers(page) {\n  membersPage = page || 1;\n  var instanceFilter = document.getElementById(\"members-instance-filter\").value;\n  var qs = \"?page=\" + membersPage + \"&pageSize=\" + membersPageSize;\n  // System view (\"\") \u2192 use defaultInstanceDid so we query membership, not global users\n  if (instanceFilter === \"\" && __pageData.instanceDid) {\n    qs += \"&instance=\" + encodeURIComponent(__pageData.instanceDid);\n  } else if (instanceFilter) {\n    qs += \"&instance=\" + encodeURIComponent(instanceFilter);\n  }\n  var search = document.getElementById(\"members-search\").value.trim();\n  if (search) qs += \"&search=\" + encodeURIComponent(search);\n  var role = document.getElementById(\"members-role-filter\").value;\n  if (role) qs += \"&role=\" + encodeURIComponent(role);\n  var status = document.getElementById(\"members-status-filter\").value;\n  if (status !== \"\") qs += \"&approved=\" + status;\n  var source = document.getElementById(\"members-source-filter\").value;\n  if (source) qs += \"&sourceProvider=\" + encodeURIComponent(source);\n  if (membersSortBy) {\n    qs += \"&sortBy=\" + encodeURIComponent(membersSortBy);\n    qs += \"&sortOrder=\" + encodeURIComponent(membersSortOrder || \"desc\");\n  }\n\n  document.getElementById(\"members-table-wrap\").innerHTML = skeletonTable(8, 6);\n  document.getElementById(\"members-pagination\").innerHTML = \"\";\n  var data = await api(\"GET\", \"/members\" + qs);\n  if (!data.ok) {\n    document.getElementById(\"members-table-wrap\").innerHTML = '<div class=\"empty-state\"><div class=\"empty-state-icon\"><svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><path d=\"M12 8v4m0 4h.01\"/></svg></div><div class=\"empty-state-title\">' + __t(\"members.loadFailed\") + '</div></div>';\n    return;\n  }\n  __membersAggregated = !!data.aggregated;\n  // Only pin the caller to the top when using the default (server) order.\n  // Under explicit sort, honor the user's intent without re-shuffling.\n  if (membersSortBy) {\n    currentMembersList = data.users || [];\n  } else {\n    currentMembersList = (data.users || []).slice().sort(function(a, b) {\n      if (a.did === __caller.did) return -1;\n      if (b.did === __caller.did) return 1;\n      return (a.createdAt || 0) - (b.createdAt || 0);\n    });\n  }\n  renderMembersTable(currentMembersList, data.paging);\n  updateTransferSection(data.users);\n}\n\nfunction renderMembersTable(users, paging) {\n  var wrap = document.getElementById(\"members-table-wrap\");\n  if (!users || users.length === 0) {\n    wrap.innerHTML = '<div class=\"empty-state\"><div class=\"empty-state-icon\"><svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><path d=\"M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2\"/><circle cx=\"9\" cy=\"7\" r=\"4\"/></svg></div><div class=\"empty-state-title\">' + __t(\"members.noMembers\") + '</div><div class=\"empty-state-desc\">' + __t(\"members.noMembersHint\") + '</div></div>';\n    document.getElementById(\"members-pagination\").innerHTML = \"\";\n    return;\n  }\n\n  var instanceSel = document.getElementById(\"members-instance-filter\");\n  var instanceVisible = instanceSel && instanceSel.style.display !== 'none';\n  var showInstance = instanceVisible && instanceSel.value === \"all\";\n  var html = '<table class=\"table\"><thead><tr>';\n  html += sortableTh(\"name\", __t(\"members.col.member\"));\n  html += sortableTh(\"role\", __t(\"members.col.role\"));\n  if (showInstance) html += '<th>' + __t(\"members.col.instance\") + '</th>';\n  html += sortableTh(\"source\", __t(\"members.col.source\"), \"col-hide-sm\");\n  html += sortableTh(\"status\", __t(\"members.col.status\"), \"col-hide-sm\");\n  html += sortableTh(\"joined\", __t(\"members.col.joined\"), \"col-hide-md\");\n  // Registered/Last Login From columns removed \u2014 domain info not meaningful in Worker context\n  html += '<th></th></tr></thead><tbody>';\n  users.forEach(function(u) {\n    var userDid = u.did || u.user_did || '';\n    var av = renderAvatar(u.avatar, u.fullName, \"sm\");\n    var name = u.fullName ? escapeHtml(u.fullName) : '<span class=\"text-muted\">(unnamed)</span>';\n    var did = '<did-address did=\"' + escapeHtml(userDid) + '\" compact></did-address>';\n    var roleBadge = '<span class=\"badge badge-' + (u.role || \"guest\") + '\">' + __t(\"common.\" + (u.role || \"guest\")) + '</span>';\n    var statusBadge = u.approved !== undefined ? (u.approved ? '<span class=\"badge badge-active\">' + __t(\"common.active\") + '</span>' : '<span class=\"badge badge-blocked\">' + __t(\"common.blocked\") + '</span>') : '<span class=\"text-muted\">\u2014</span>';\n    var joined = (u.createdAt || u.joined_at) ? '<span class=\"cell-date\">' + escapeHtml(relativeTime(u.createdAt || u.joined_at)) + '</span>' : '<span class=\"text-muted\">\u2014</span>';\n    html += '<tr style=\"cursor:pointer\" onclick=\"openMemberDetail(\\'' + escapeHtml(userDid) + '\\')\">';\n    html += '<td><div class=\"member-identity\">' + av + '<div><div class=\"member-name\">' + name + '</div><div class=\"member-email\">' + did + '</div></div></div></td>';\n    html += '<td>' + roleBadge + '</td>';\n    if (showInstance) {\n      if (__membersAggregated && u.instance_count > 1) {\n        html += '<td><a href=\"javascript:void(0)\" onclick=\"event.stopPropagation();openMemberDetail(\\'' + escapeHtml(userDid) + '\\')\" style=\"color:var(--blue);font-size:14px;text-decoration:none\">' + u.instance_count + ' ' + __t(\"members.instances\") + '</a></td>';\n      } else {\n        var instDid = (__membersAggregated && u.instances && u.instances.length === 1) ? u.instances[0].instance_did : (u.instance_did || '');\n        var instName = __instanceNames[instDid] || '';\n        if (!instName) instName = instDid ? __t(\"members.currentInstance\") : '\u2014';\n        html += '<td><div>' + escapeHtml(instName);\n        if (instDid) html += '<div style=\"font-size:11px;color:var(--text-secondary);margin-top:2px\" onclick=\"event.stopPropagation()\"><did-address did=\"' + escapeHtml(instDid) + '\" compact></did-address></div>';\n        html += '</div></td>';\n      }\n    }\n    var sourceBadge = '<span class=\"text-muted\">' + escapeHtml(providerLabel(u.sourceProvider)) + '</span>';\n    html += '<td class=\"col-hide-sm\">' + sourceBadge + '</td>';\n    html += '<td class=\"col-hide-sm\">' + statusBadge + '</td>';\n    html += '<td class=\"col-hide-md\">' + joined + '</td>';\n    // Actions: only for current instance members, not cross-instance\n    var canOperate = !instanceVisible || (instanceVisible && instanceSel.value === '');\n    // In aggregated mode, only allow actions on users whose instance matches current system\n    if (__membersAggregated) canOperate = false;\n    html += '<td class=\"action-cell\">' + (canOperate ? renderMemberActions(u) : '') + '</td>';\n    html += '</tr>';\n  });\n  html += '</tbody></table>';\n  wrap.innerHTML = html;\n\n  renderPagination(\"members-pagination\", paging, loadMembers);\n}\n\nfunction renderMemberActions(u) {\n  var isOwner = __caller.role === \"owner\";\n  var isAdmin = __caller.role === \"admin\";\n  var isSelf = u.did === __caller.did;\n  var ROLE_LEVEL = { owner: 3, admin: 2, member: 1, guest: 0 };\n  var callerLevel = ROLE_LEVEL[__caller.role] || 0;\n  var targetLevel = ROLE_LEVEL[u.role] || 0;\n  // Can only act on members with lower privilege\n  var canManage = !isSelf && targetLevel < callerLevel;\n  var items = [];\n\n  // Change role: can manage lower-level members\n  if (canManage) {\n    items.push('<button class=\"action-menu-item\" onclick=\"event.stopPropagation();openChangeRoleForDid(\\'' + escapeHtml(u.did) + '\\')\">' + __t(\"members.changeRole\") + '</button>');\n  }\n  if (canManage && u.approved) {\n    items.push('<button class=\"action-menu-item\" onclick=\"event.stopPropagation();blockMember(\\'' + escapeHtml(u.did) + '\\',\\'' + escapeHtml(u.fullName || u.did) + '\\')\">' + __t(\"members.block\") + '</button>');\n  }\n  if (canManage && !u.approved) {\n    items.push('<button class=\"action-menu-item\" onclick=\"event.stopPropagation();unblockMember(\\'' + escapeHtml(u.did) + '\\',\\'' + escapeHtml(u.fullName || u.did) + '\\')\">' + __t(\"members.unblock\") + '</button>');\n  }\n  if (items.length > 0 && canManage) {\n    items.push('<div class=\"action-menu-sep\"></div>');\n  }\n  if (canManage) {\n    items.push('<button class=\"action-menu-item danger\" onclick=\"event.stopPropagation();removeMember(\\'' + escapeHtml(u.did) + '\\',\\'' + escapeHtml(u.fullName || u.did) + '\\')\">' + __t(\"members.remove\") + '</button>');\n  }\n\n  if (items.length === 0) return \"\";\n  return '<button class=\"action-trigger\" onclick=\"event.stopPropagation();toggleActionMenu(this)\">\u22EF</button><div class=\"action-menu\">' + items.join(\"\") + '</div>';\n}\n\nfunction toggleActionMenu(trigger) {\n  var menu = trigger.nextElementSibling;\n  var wasOpen = menu.classList.contains(\"open\");\n  // Close all menus first\n  document.querySelectorAll(\".action-menu.open\").forEach(function(m) { m.classList.remove(\"open\"); });\n  if (!wasOpen) menu.classList.toggle(\"open\");\n}\n\nasync function openMemberDetail(did) {\n  var u = currentMembersList.find(function(m) { return m.did === did; });\n  if (!u) return;\n  selectedMember = u;\n\n  // Fetch full member info (with connectedAccounts) from API.\n  // Falls back to in-memory list data if the request fails.\n  var detail = u;\n  try {\n    var resp = await api(\"GET\", \"/members/\" + encodeURIComponent(did));\n    if (resp && resp.ok && resp.user) {\n      // Merge: in-memory list has fields the API may omit (instances, passkeyCount in some paths).\n      detail = Object.assign({}, u, resp.user);\n      selectedMember = detail;\n    }\n  } catch (e) {}\n\n  var body = document.getElementById(\"member-detail-body\");\n  var html = '<div class=\"profile-header\">' + renderAvatar(detail.avatar, detail.fullName) + '<div>';\n  html += '<div style=\"font-weight:500;font-size:16px;color:var(--text-white)\">' + escapeHtml(detail.fullName || \"(unnamed)\") + '</div>';\n  html += '<did-address did=\"' + escapeHtml(detail.did) + '\" compact></did-address>';\n  html += '</div></div>';\n\n  html += '<div class=\"settings-card\" style=\"margin-top:16px\">';\n  html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailRole\") + '</span><span class=\"settings-value\"><span class=\"badge badge-' + (detail.role || \"guest\") + '\">' + __t(\"common.\" + (detail.role || \"guest\")) + '</span></span></div>';\n  html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailStatus\") + '</span><span class=\"settings-value\">' + (detail.approved ? '<span class=\"badge badge-active\">' + __t(\"common.active\") + '</span>' : '<span class=\"badge badge-blocked\">' + __t(\"common.blocked\") + '</span>') + '</span></div>';\n  html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailSource\") + '</span><span class=\"settings-value\">' + escapeHtml(providerLabel(detail.sourceProvider)) + '</span></div>';\n  if (detail.email) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailEmail\") + '</span><span class=\"settings-value\">' + escapeHtml(detail.email) + '</span></div>';\n  if (detail.inviterName) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailInvitedBy\") + '</span><span class=\"settings-value\">' + escapeHtml(detail.inviterName) + '</span></div>';\n  if (detail.createdAt) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailJoined\") + '</span><span class=\"settings-value\">' + escapeHtml(absoluteTime(detail.createdAt)) + '</span></div>';\n  if (detail.lastLoginAt) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailLastLogin\") + '</span><span class=\"settings-value\">' + escapeHtml(absoluteTime(detail.lastLoginAt)) + '</span></div>';\n  if (detail.sourceDomain) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailRegisteredFrom\") + '</span><span class=\"settings-value\">' + escapeHtml(detail.sourceDomain) + '</span></div>';\n  if (detail.lastLoginDomain) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailLastLoginFrom\") + '</span><span class=\"settings-value\">' + escapeHtml(detail.lastLoginDomain) + '</span></div>';\n  if (detail.passkeyCount !== undefined) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailPasskeys\") + '</span><span class=\"settings-value\">' + detail.passkeyCount + '</span></div>';\n  html += '</div>';\n\n  // Connected Accounts (read-only)\n  if (detail.connectedAccounts && detail.connectedAccounts.length > 0) {\n    html += '<div class=\"settings-card\" style=\"margin-top:16px\">';\n    html += '<div class=\"settings-card-header\"><span>' + __t(\"members.detailConnectedAccounts\") + ' (' + detail.connectedAccounts.length + ')</span></div>';\n    html += '<div style=\"max-height:240px;overflow-y:auto\">';\n    detail.connectedAccounts.forEach(function(a) {\n      var label = providerLabel(a.provider);\n      var info = '';\n      if (a.userInfo && a.userInfo.name) info = a.userInfo.name;\n      else if (a.userInfo && a.userInfo.email) info = a.userInfo.email;\n      else if (a.id) info = a.id;\n      html += '<div class=\"settings-row\" style=\"gap:12px;align-items:flex-start\">';\n      html += '<div style=\"flex:1;min-width:0\">';\n      html += '<div style=\"font-size:14px;font-weight:500;color:var(--text)\">' + escapeHtml(label);\n      if (a.isMain) html += ' <span class=\"badge badge-active\" style=\"font-size:10px;padding:1px 6px;\">' + __t(\"profile.mainAccount\") + '</span>';\n      html += '</div>';\n      if (info) html += '<div style=\"font-size:12px;color:var(--text-secondary);margin-top:2px\">' + escapeHtml(info) + '</div>';\n      if (a.did) html += '<div style=\"font-size:11px;color:var(--text-secondary);margin-top:2px\"><did-address did=\"' + escapeHtml(a.did) + '\" compact></did-address></div>';\n      html += '</div>';\n      if (a.lastLoginAt) html += '<div style=\"font-size:12px;color:var(--text-secondary);flex-shrink:0\">' + escapeHtml(relativeTime(a.lastLoginAt)) + '</div>';\n      html += '</div>';\n    });\n    html += '</div></div>';\n  }\n\n  // Instance memberships (aggregated mode)\n  if (detail.instances && detail.instances.length > 0) {\n    html += '<div class=\"settings-card\" style=\"margin-top:16px\">';\n    html += '<div class=\"settings-card-header\"><span>' + __t(\"members.instanceMemberships\") + ' (' + detail.instances.length + ')</span></div>';\n    html += '<div style=\"max-height:240px;overflow-y:auto\">';\n    detail.instances.forEach(function(inst) {\n      var instName = __instanceNames[inst.instance_did] || '';\n      var instDid = inst.instance_did || '';\n      html += '<div class=\"settings-row\" style=\"gap:12px\">';\n      html += '<div style=\"flex:1;min-width:0\"><div style=\"font-size:14px;font-weight:500;color:var(--text)\">' + escapeHtml(instName || __t(\"members.currentInstance\")) + '</div>';\n      if (instDid) html += '<div style=\"font-size:11px;color:var(--text-secondary);margin-top:2px\"><did-address did=\"' + escapeHtml(instDid) + '\" compact></did-address></div>';\n      html += '</div>';\n      html += '<div style=\"display:flex;align-items:center;gap:8px;flex-shrink:0\"><span class=\"badge badge-' + inst.role + '\">' + __t(\"common.\" + inst.role) + '</span>';\n      if (inst.joined_at) html += '<span style=\"font-size:12px;color:var(--text-secondary)\">' + escapeHtml(relativeTime(inst.joined_at)) + '</span>';\n      html += '</div></div>';\n    });\n    html += '</div></div>';\n  }\n\n  body.innerHTML = html;\n\n  // Change role: mirror list's canOperate + renderMemberActions logic exactly.\n  // Use post-merge detail so role/did reflect the latest API response.\n  var changeRoleBtn = document.getElementById(\"member-detail-change-role\");\n  var instanceSel = document.getElementById(\"members-instance-filter\");\n  var instanceVisible = instanceSel && instanceSel.style.display !== 'none';\n  var canOperate = !instanceVisible || (instanceVisible && instanceSel.value === '');\n  if (__membersAggregated) canOperate = false;\n  var isSelf = detail.did === __caller.did;\n  var ROLE_LEVEL = { owner: 3, admin: 2, member: 1, guest: 0 };\n  var callerLevel = ROLE_LEVEL[__caller.role] || 0;\n  var targetLevel = ROLE_LEVEL[detail.role] || 0;\n  var canChangeRole = canOperate && !isSelf && targetLevel < callerLevel;\n  if (canChangeRole) {\n    changeRoleBtn.classList.remove(\"hidden\");\n  } else {\n    changeRoleBtn.classList.add(\"hidden\");\n  }\n\n  showDialog(\"member-detail-dialog\");\n}\n\nfunction openChangeRoleForDid(did) {\n  var u = currentMembersList.find(function(m) { return m.did === did; });\n  if (!u) return;\n  selectedMember = u;\n  openChangeRoleDialog();\n}\n\nfunction openChangeRoleDialog() {\n  if (!selectedMember) return;\n  document.getElementById(\"change-role-title\").textContent = __t(\"members.changeRole\");\n  document.getElementById(\"change-role-subtitle\").textContent = __t(\"members.changeRoleFor\", { name: selectedMember.fullName || truncateDid(selectedMember.did) });\n  // Show/hide role options based on caller's level (only owner can assign admin)\n  var radios = document.querySelectorAll('input[name=\"new-role\"]');\n  radios.forEach(function(r) {\n    r.checked = r.value === selectedMember.role;\n    var label = r.closest('label');\n    if (label) {\n      if (r.value === 'admin' && __caller.role !== 'owner') label.style.display = 'none';\n      else label.style.display = '';\n    }\n  });\n  closeDialog(\"member-detail-dialog\");\n  showDialog(\"change-role-dialog\");\n}\n\nasync function saveRoleChange() {\n  if (!selectedMember) return;\n  var selected = document.querySelector('input[name=\"new-role\"]:checked');\n  if (!selected) return;\n  var newRole = selected.value;\n  var data = await api(\"PUT\", \"/members/\" + encodeURIComponent(selectedMember.did) + \"/role\", { role: newRole });\n  if (data.ok) {\n    showToast(__t(\"members.roleUpdated\"), \"success\");\n    closeDialog(\"change-role-dialog\");\n    loadMembers(membersPage);\n  }\n}\n\nasync function blockMember(did, name) {\n  var ok = await confirmDialog({ title: __t(\"members.blockTitle\"), message: __t(\"members.blockMsg\", { name: name }), confirmLabel: __t(\"members.blockBtn\"), danger: true });\n  if (!ok) return;\n  var data = await api(\"PUT\", \"/members/\" + encodeURIComponent(did) + \"/approval\", { approved: false });\n  if (data.ok) { showToast(__t(\"members.blockSuccess\"), \"success\"); loadMembers(membersPage); }\n}\n\nasync function unblockMember(did, name) {\n  var ok = await confirmDialog({ title: __t(\"members.unblockTitle\"), message: __t(\"members.unblockMsg\", { name: name }), confirmLabel: __t(\"members.unblock\") });\n  if (!ok) return;\n  var data = await api(\"PUT\", \"/members/\" + encodeURIComponent(did) + \"/approval\", { approved: true });\n  if (data.ok) { showToast(__t(\"members.unblockSuccess\"), \"success\"); loadMembers(membersPage); }\n}\n\nasync function removeMember(did, name) {\n  var ok = await confirmDialog({ title: __t(\"members.removeTitle\"), message: __t(\"members.removeMsg\", { name: name }), confirmLabel: __t(\"members.remove\"), danger: true });\n  if (!ok) return;\n  var data = await api(\"DELETE\", \"/members/\" + encodeURIComponent(did));\n  if (data.ok) { showToast(__t(\"members.removeSuccess\"), \"success\"); loadMembers(membersPage); }\n}\n\nfunction updateTransferSection(users) {\n  var section = document.getElementById(\"ownership-transfer-section\");\n  if (__caller.role !== \"owner\") {\n    section.classList.add(\"hidden\");\n    return;\n  }\n  section.classList.remove(\"hidden\");\n  var select = document.getElementById(\"transfer-target\");\n  var html = '<option value=\"\">' + __t(\"members.transferSelect\") + '</option>';\n  users.forEach(function(u) {\n    if (u.did !== __caller.did && u.approved && u.role !== \"owner\") {\n      html += '<option value=\"' + escapeHtml(u.did) + '\">' + escapeHtml(u.fullName || truncateDid(u.did)) + ' (' + u.role + ')</option>';\n    }\n  });\n  select.innerHTML = html;\n}\n\nasync function handleTransferOwnership() {\n  var target = document.getElementById(\"transfer-target\").value;\n  if (!target) { showToast(__t(\"members.selectMemberFirst\"), \"error\"); return; }\n  var targetUser = currentMembersList.find(function(u) { return u.did === target; });\n  var name = targetUser ? (targetUser.fullName || truncateDid(target)) : truncateDid(target);\n  var ok = await confirmDialog({\n    title: __t(\"members.transferTitle\"),\n    message: __t(\"members.transferMsg\", { name: name }),\n    confirmLabel: __t(\"members.transferConfirm\"),\n    danger: true,\n  });\n  if (!ok) return;\n  var data = await api(\"POST\", \"/transfer-ownership\", { targetDid: target });\n  if (data.ok) {\n    showToast(__t(\"members.transferSuccess\"), \"success\");\n    setTimeout(function() { location.reload(); }, 1000);\n  }\n}\n\n// Close action menus on outside click\ndocument.addEventListener(\"click\", function() {\n  document.querySelectorAll(\".action-menu.open\").forEach(function(m) { m.classList.remove(\"open\"); });\n});\n\nregisterTab(\"members\", function() {\n  initInstanceFilter().then(function() {\n    // Auto-select instance from URL query (e.g., ?instance=z1xxx)\n    var urlInstance = new URLSearchParams(window.location.search).get(\"instance\");\n    if (urlInstance) {\n      var sel = document.getElementById(\"members-instance-filter\");\n      if (sel) sel.value = urlInstance;\n    }\n    // Restore sort state from URL (sortBy / sortOrder) on tab enter.\n    readMembersSortFromURL();\n    loadMembers(1);\n  });\n});\n";
+export declare const MEMBERS_TAB_SCRIPT = "\nvar membersPage = 1;\nvar membersPageSize = 20;\nvar memberSearchTimeout = null;\nvar currentMembersList = [];\nvar selectedMember = null;\nvar __membersAggregated = false;\n// Sort state: empty string = default (server decides + self-first on client).\n// Three-state click cycle: (none) \u2192 desc \u2192 asc \u2192 (none).\n// Persisted in location.search as sortBy/sortOrder so it survives refresh + share.\nvar membersSortBy = \"\";\nvar membersSortOrder = \"\";\nvar MEMBERS_SORT_VALID = [\"name\", \"role\", \"status\", \"source\", \"joined\"];\n\n/** Populate module sort state from the current URL query string. Idempotent. */\nfunction readMembersSortFromURL() {\n  membersSortBy = \"\";\n  membersSortOrder = \"\";\n  var params = new URLSearchParams(location.search);\n  var by = params.get(\"sortBy\");\n  var order = params.get(\"sortOrder\");\n  if (by && MEMBERS_SORT_VALID.indexOf(by) >= 0) {\n    membersSortBy = by;\n    membersSortOrder = (order === \"asc\" || order === \"desc\") ? order : \"desc\";\n  }\n}\n\n/** Write current sort state back to location.search without reloading. */\nfunction writeMembersSortToURL() {\n  var params = new URLSearchParams(location.search);\n  if (membersSortBy) {\n    params.set(\"sortBy\", membersSortBy);\n    params.set(\"sortOrder\", membersSortOrder || \"desc\");\n  } else {\n    params.delete(\"sortBy\");\n    params.delete(\"sortOrder\");\n  }\n  var qs = params.toString();\n  var newUrl = location.pathname + (qs ? \"?\" + qs : \"\") + location.hash;\n  history.replaceState(null, \"\", newUrl);\n}\n\n/** Cycle sort state for a column key and reload. */\nfunction toggleSort(key) {\n  if (membersSortBy !== key) {\n    membersSortBy = key;\n    membersSortOrder = \"desc\";\n  } else if (membersSortOrder === \"desc\") {\n    membersSortOrder = \"asc\";\n  } else {\n    // Third click \u2014 back to default.\n    membersSortBy = \"\";\n    membersSortOrder = \"\";\n  }\n  writeMembersSortToURL();\n  loadMembers(1);\n}\n\n/** Render a <th> with click-to-sort behavior. */\nfunction sortableTh(key, label, extraClass) {\n  var isActive = membersSortBy === key;\n  var arrow;\n  if (isActive) {\n    arrow = membersSortOrder === \"asc\"\n      ? '<span class=\"sort-arrow sort-arrow-active\">\\u2191</span>'\n      : '<span class=\"sort-arrow sort-arrow-active\">\\u2193</span>';\n  } else {\n    arrow = '<span class=\"sort-arrow\">\\u2195</span>';\n  }\n  var cls = \"sortable\" + (isActive ? \" sort-active\" : \"\") + (extraClass ? \" \" + extraClass : \"\");\n  return '<th class=\"' + cls + '\" onclick=\"toggleSort(\\'' + key + '\\')\">' + label + arrow + '</th>';\n}\n\nfunction providerLabel(sp) {\n  if (!sp) return \"\\u2014\";\n  var key = \"members.providers.\" + sp;\n  var val = __t(key);\n  return val !== key ? val : sp;\n}\n\nfunction debouncedMemberSearch() {\n  clearTimeout(memberSearchTimeout);\n  memberSearchTimeout = setTimeout(function() { loadMembers(1); }, 300);\n}\n\n// Load registered instances for the filter dropdown (system admin only)\nvar __instanceNames = {};\nvar __instanceFilterInitialized = false;\nasync function initInstanceFilter() {\n  if (__instanceFilterInitialized) return;\n  try {\n    // Best-effort: this endpoint is system-admin-only. Instance-scoped owners/admins\n    // get 403 here, which is expected \u2014 fail silently (no error toast).\n    var data = await api(\"GET\", \"/../admin/instances\", undefined, { silent: true });\n    if (data.ok && data.instances && data.instances.length > 0) {\n      __instanceFilterInitialized = true;\n      var sel = document.getElementById(\"members-instance-filter\");\n      data.instances.forEach(function(inst) {\n        __instanceNames[inst.instanceDid] = inst.appName || inst.instanceDid.substring(0, 16);\n        var opt = document.createElement(\"option\");\n        opt.value = inst.instanceDid;\n        opt.textContent = __instanceNames[inst.instanceDid];\n        sel.appendChild(opt);\n      });\n      sel.style.display = \"\";\n    }\n  } catch(e) { /* not admin or no instances */ }\n}\n\n// Also support specific instance filter via query param\n// When ?instance=z1xxx, team handler needs to use that instanceDid\n\nasync function loadMembers(page) {\n  membersPage = page || 1;\n  var instanceFilter = document.getElementById(\"members-instance-filter\").value;\n  var qs = \"?page=\" + membersPage + \"&pageSize=\" + membersPageSize;\n  // System view (\"\") \u2192 use defaultInstanceDid so we query membership, not global users\n  if (instanceFilter === \"\" && __pageData.instanceDid) {\n    qs += \"&instance=\" + encodeURIComponent(__pageData.instanceDid);\n  } else if (instanceFilter) {\n    qs += \"&instance=\" + encodeURIComponent(instanceFilter);\n  }\n  var search = document.getElementById(\"members-search\").value.trim();\n  if (search) qs += \"&search=\" + encodeURIComponent(search);\n  var role = document.getElementById(\"members-role-filter\").value;\n  if (role) qs += \"&role=\" + encodeURIComponent(role);\n  var status = document.getElementById(\"members-status-filter\").value;\n  if (status !== \"\") qs += \"&approved=\" + status;\n  var source = document.getElementById(\"members-source-filter\").value;\n  if (source) qs += \"&sourceProvider=\" + encodeURIComponent(source);\n  if (membersSortBy) {\n    qs += \"&sortBy=\" + encodeURIComponent(membersSortBy);\n    qs += \"&sortOrder=\" + encodeURIComponent(membersSortOrder || \"desc\");\n  }\n\n  document.getElementById(\"members-table-wrap\").innerHTML = skeletonTable(8, 6);\n  document.getElementById(\"members-pagination\").innerHTML = \"\";\n  var data = await api(\"GET\", \"/members\" + qs);\n  if (!data.ok) {\n    document.getElementById(\"members-table-wrap\").innerHTML = '<div class=\"empty-state\"><div class=\"empty-state-icon\"><svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><path d=\"M12 8v4m0 4h.01\"/></svg></div><div class=\"empty-state-title\">' + __t(\"members.loadFailed\") + '</div></div>';\n    return;\n  }\n  __membersAggregated = !!data.aggregated;\n  // Only pin the caller to the top when using the default (server) order.\n  // Under explicit sort, honor the user's intent without re-shuffling.\n  if (membersSortBy) {\n    currentMembersList = data.users || [];\n  } else {\n    currentMembersList = (data.users || []).slice().sort(function(a, b) {\n      if (a.did === __caller.did) return -1;\n      if (b.did === __caller.did) return 1;\n      return (a.createdAt || 0) - (b.createdAt || 0);\n    });\n  }\n  renderMembersTable(currentMembersList, data.paging);\n  updateTransferSection(data.users);\n}\n\nfunction renderMembersTable(users, paging) {\n  var wrap = document.getElementById(\"members-table-wrap\");\n  if (!users || users.length === 0) {\n    wrap.innerHTML = '<div class=\"empty-state\"><div class=\"empty-state-icon\"><svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\"><path d=\"M17 21v-2a4 4 0 0 0-4-4H5a4 4 0 0 0-4 4v2\"/><circle cx=\"9\" cy=\"7\" r=\"4\"/></svg></div><div class=\"empty-state-title\">' + __t(\"members.noMembers\") + '</div><div class=\"empty-state-desc\">' + __t(\"members.noMembersHint\") + '</div></div>';\n    document.getElementById(\"members-pagination\").innerHTML = \"\";\n    return;\n  }\n\n  var instanceSel = document.getElementById(\"members-instance-filter\");\n  var instanceVisible = instanceSel && instanceSel.style.display !== 'none';\n  var showInstance = instanceVisible && instanceSel.value === \"all\";\n  var html = '<table class=\"table\"><thead><tr>';\n  html += sortableTh(\"name\", __t(\"members.col.member\"));\n  html += sortableTh(\"role\", __t(\"members.col.role\"));\n  if (showInstance) html += '<th>' + __t(\"members.col.instance\") + '</th>';\n  html += sortableTh(\"source\", __t(\"members.col.source\"), \"col-hide-sm\");\n  html += sortableTh(\"status\", __t(\"members.col.status\"), \"col-hide-sm\");\n  html += sortableTh(\"joined\", __t(\"members.col.joined\"), \"col-hide-md\");\n  // Registered/Last Login From columns removed \u2014 domain info not meaningful in Worker context\n  html += '<th></th></tr></thead><tbody>';\n  users.forEach(function(u) {\n    var userDid = u.did || u.user_did || '';\n    var av = renderAvatar(u.avatar, u.fullName, \"sm\");\n    var name = u.fullName ? escapeHtml(u.fullName) : '<span class=\"text-muted\">(unnamed)</span>';\n    var did = '<did-address did=\"' + escapeHtml(userDid) + '\" compact></did-address>';\n    var roleBadge = '<span class=\"badge badge-' + (u.role || \"guest\") + '\">' + __t(\"common.\" + (u.role || \"guest\")) + '</span>';\n    var statusBadge = u.approved !== undefined ? (u.approved ? '<span class=\"badge badge-active\">' + __t(\"common.active\") + '</span>' : '<span class=\"badge badge-blocked\">' + __t(\"common.blocked\") + '</span>') : '<span class=\"text-muted\">\u2014</span>';\n    var joined = (u.createdAt || u.joined_at) ? '<span class=\"cell-date\">' + escapeHtml(relativeTime(u.createdAt || u.joined_at)) + '</span>' : '<span class=\"text-muted\">\u2014</span>';\n    html += '<tr style=\"cursor:pointer\" onclick=\"openMemberDetail(\\'' + escapeHtml(userDid) + '\\')\">';\n    html += '<td><div class=\"member-identity\">' + av + '<div><div class=\"member-name\">' + name + '</div><div class=\"member-email\">' + did + '</div></div></div></td>';\n    html += '<td>' + roleBadge + '</td>';\n    if (showInstance) {\n      if (__membersAggregated && u.instance_count > 1) {\n        html += '<td><a href=\"javascript:void(0)\" onclick=\"event.stopPropagation();openMemberDetail(\\'' + escapeHtml(userDid) + '\\')\" style=\"color:var(--blue);font-size:14px;text-decoration:none\">' + u.instance_count + ' ' + __t(\"members.instances\") + '</a></td>';\n      } else {\n        var instDid = (__membersAggregated && u.instances && u.instances.length === 1) ? u.instances[0].instance_did : (u.instance_did || '');\n        var instName = __instanceNames[instDid] || '';\n        if (!instName) instName = instDid ? __t(\"members.currentInstance\") : '\u2014';\n        html += '<td><div>' + escapeHtml(instName);\n        if (instDid) html += '<div style=\"font-size:11px;color:var(--text-secondary);margin-top:2px\" onclick=\"event.stopPropagation()\"><did-address did=\"' + escapeHtml(instDid) + '\" compact></did-address></div>';\n        html += '</div></td>';\n      }\n    }\n    var sourceBadge = '<span class=\"text-muted\">' + escapeHtml(providerLabel(u.sourceProvider)) + '</span>';\n    html += '<td class=\"col-hide-sm\">' + sourceBadge + '</td>';\n    html += '<td class=\"col-hide-sm\">' + statusBadge + '</td>';\n    html += '<td class=\"col-hide-md\">' + joined + '</td>';\n    // Actions: only for current instance members, not cross-instance\n    var canOperate = !instanceVisible || (instanceVisible && instanceSel.value === '');\n    // In aggregated mode, only allow actions on users whose instance matches current system\n    if (__membersAggregated) canOperate = false;\n    html += '<td class=\"action-cell\">' + (canOperate ? renderMemberActions(u) : '') + '</td>';\n    html += '</tr>';\n  });\n  html += '</tbody></table>';\n  wrap.innerHTML = html;\n\n  renderPagination(\"members-pagination\", paging, loadMembers);\n}\n\nfunction renderMemberActions(u) {\n  var isOwner = __caller.role === \"owner\";\n  var isAdmin = __caller.role === \"admin\";\n  var isSelf = u.did === __caller.did;\n  var ROLE_LEVEL = { owner: 3, admin: 2, member: 1, guest: 0 };\n  var callerLevel = ROLE_LEVEL[__caller.role] || 0;\n  var targetLevel = ROLE_LEVEL[u.role] || 0;\n  // Can only act on members with lower privilege\n  var canManage = !isSelf && targetLevel < callerLevel;\n  var items = [];\n\n  // Change role: can manage lower-level members\n  if (canManage) {\n    items.push('<button class=\"action-menu-item\" onclick=\"event.stopPropagation();openChangeRoleForDid(\\'' + escapeHtml(u.did) + '\\')\">' + __t(\"members.changeRole\") + '</button>');\n  }\n  if (canManage && u.approved) {\n    items.push('<button class=\"action-menu-item\" onclick=\"event.stopPropagation();blockMember(\\'' + escapeHtml(u.did) + '\\',\\'' + escapeHtml(u.fullName || u.did) + '\\')\">' + __t(\"members.block\") + '</button>');\n  }\n  if (canManage && !u.approved) {\n    items.push('<button class=\"action-menu-item\" onclick=\"event.stopPropagation();unblockMember(\\'' + escapeHtml(u.did) + '\\',\\'' + escapeHtml(u.fullName || u.did) + '\\')\">' + __t(\"members.unblock\") + '</button>');\n  }\n  if (items.length > 0 && canManage) {\n    items.push('<div class=\"action-menu-sep\"></div>');\n  }\n  if (canManage) {\n    items.push('<button class=\"action-menu-item danger\" onclick=\"event.stopPropagation();removeMember(\\'' + escapeHtml(u.did) + '\\',\\'' + escapeHtml(u.fullName || u.did) + '\\')\">' + __t(\"members.remove\") + '</button>');\n  }\n\n  if (items.length === 0) return \"\";\n  return '<button class=\"action-trigger\" onclick=\"event.stopPropagation();toggleActionMenu(this)\">\u22EF</button><div class=\"action-menu\">' + items.join(\"\") + '</div>';\n}\n\nfunction toggleActionMenu(trigger) {\n  var menu = trigger.nextElementSibling;\n  var wasOpen = menu.classList.contains(\"open\");\n  // Close all menus first\n  document.querySelectorAll(\".action-menu.open\").forEach(function(m) { m.classList.remove(\"open\"); });\n  if (!wasOpen) menu.classList.toggle(\"open\");\n}\n\nasync function openMemberDetail(did) {\n  var u = currentMembersList.find(function(m) { return m.did === did; });\n  if (!u) return;\n  selectedMember = u;\n\n  // Fetch full member info (with connectedAccounts) from API.\n  // Falls back to in-memory list data if the request fails.\n  var detail = u;\n  try {\n    var resp = await api(\"GET\", \"/members/\" + encodeURIComponent(did));\n    if (resp && resp.ok && resp.user) {\n      // Merge: in-memory list has fields the API may omit (instances, passkeyCount in some paths).\n      detail = Object.assign({}, u, resp.user);\n      selectedMember = detail;\n    }\n  } catch (e) {}\n\n  var body = document.getElementById(\"member-detail-body\");\n  var html = '<div class=\"profile-header\">' + renderAvatar(detail.avatar, detail.fullName) + '<div>';\n  html += '<div style=\"font-weight:500;font-size:16px;color:var(--text-white)\">' + escapeHtml(detail.fullName || \"(unnamed)\") + '</div>';\n  html += '<did-address did=\"' + escapeHtml(detail.did) + '\" compact></did-address>';\n  html += '</div></div>';\n\n  html += '<div class=\"settings-card\" style=\"margin-top:16px\">';\n  html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailRole\") + '</span><span class=\"settings-value\"><span class=\"badge badge-' + (detail.role || \"guest\") + '\">' + __t(\"common.\" + (detail.role || \"guest\")) + '</span></span></div>';\n  html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailStatus\") + '</span><span class=\"settings-value\">' + (detail.approved ? '<span class=\"badge badge-active\">' + __t(\"common.active\") + '</span>' : '<span class=\"badge badge-blocked\">' + __t(\"common.blocked\") + '</span>') + '</span></div>';\n  html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailSource\") + '</span><span class=\"settings-value\">' + escapeHtml(providerLabel(detail.sourceProvider)) + '</span></div>';\n  if (detail.email) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailEmail\") + '</span><span class=\"settings-value\">' + escapeHtml(detail.email) + '</span></div>';\n  if (detail.inviterName) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailInvitedBy\") + '</span><span class=\"settings-value\">' + escapeHtml(detail.inviterName) + '</span></div>';\n  if (detail.createdAt) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailJoined\") + '</span><span class=\"settings-value\">' + escapeHtml(absoluteTime(detail.createdAt)) + '</span></div>';\n  if (detail.lastLoginAt) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailLastLogin\") + '</span><span class=\"settings-value\">' + escapeHtml(absoluteTime(detail.lastLoginAt)) + '</span></div>';\n  if (detail.sourceDomain) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailRegisteredFrom\") + '</span><span class=\"settings-value\">' + escapeHtml(detail.sourceDomain) + '</span></div>';\n  if (detail.lastLoginDomain) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailLastLoginFrom\") + '</span><span class=\"settings-value\">' + escapeHtml(detail.lastLoginDomain) + '</span></div>';\n  if (detail.passkeyCount !== undefined) html += '<div class=\"settings-row\"><span class=\"settings-label\">' + __t(\"members.detailPasskeys\") + '</span><span class=\"settings-value\">' + detail.passkeyCount + '</span></div>';\n  html += '</div>';\n\n  // Connected Accounts (read-only)\n  if (detail.connectedAccounts && detail.connectedAccounts.length > 0) {\n    html += '<div class=\"settings-card\" style=\"margin-top:16px\">';\n    html += '<div class=\"settings-card-header\"><span>' + __t(\"members.detailConnectedAccounts\") + ' (' + detail.connectedAccounts.length + ')</span></div>';\n    html += '<div style=\"max-height:240px;overflow-y:auto\">';\n    detail.connectedAccounts.forEach(function(a) {\n      var label = providerLabel(a.provider);\n      var info = '';\n      if (a.userInfo && a.userInfo.name) info = a.userInfo.name;\n      else if (a.userInfo && a.userInfo.email) info = a.userInfo.email;\n      else if (a.id) info = a.id;\n      html += '<div class=\"settings-row\" style=\"gap:12px;align-items:flex-start\">';\n      html += '<div style=\"flex:1;min-width:0\">';\n      html += '<div style=\"font-size:14px;font-weight:500;color:var(--text)\">' + escapeHtml(label);\n      if (a.isMain) html += ' <span class=\"badge badge-active\" style=\"font-size:10px;padding:1px 6px;\">' + __t(\"profile.mainAccount\") + '</span>';\n      html += '</div>';\n      if (info) html += '<div style=\"font-size:12px;color:var(--text-secondary);margin-top:2px\">' + escapeHtml(info) + '</div>';\n      if (a.did) html += '<div style=\"font-size:11px;color:var(--text-secondary);margin-top:2px\"><did-address did=\"' + escapeHtml(a.did) + '\" compact></did-address></div>';\n      html += '</div>';\n      if (a.lastLoginAt) html += '<div style=\"font-size:12px;color:var(--text-secondary);flex-shrink:0\">' + escapeHtml(relativeTime(a.lastLoginAt)) + '</div>';\n      html += '</div>';\n    });\n    html += '</div></div>';\n  }\n\n  // Instance memberships (aggregated mode)\n  if (detail.instances && detail.instances.length > 0) {\n    html += '<div class=\"settings-card\" style=\"margin-top:16px\">';\n    html += '<div class=\"settings-card-header\"><span>' + __t(\"members.instanceMemberships\") + ' (' + detail.instances.length + ')</span></div>';\n    html += '<div style=\"max-height:240px;overflow-y:auto\">';\n    detail.instances.forEach(function(inst) {\n      var instName = __instanceNames[inst.instance_did] || '';\n      var instDid = inst.instance_did || '';\n      html += '<div class=\"settings-row\" style=\"gap:12px\">';\n      html += '<div style=\"flex:1;min-width:0\"><div style=\"font-size:14px;font-weight:500;color:var(--text)\">' + escapeHtml(instName || __t(\"members.currentInstance\")) + '</div>';\n      if (instDid) html += '<div style=\"font-size:11px;color:var(--text-secondary);margin-top:2px\"><did-address did=\"' + escapeHtml(instDid) + '\" compact></did-address></div>';\n      html += '</div>';\n      html += '<div style=\"display:flex;align-items:center;gap:8px;flex-shrink:0\"><span class=\"badge badge-' + inst.role + '\">' + __t(\"common.\" + inst.role) + '</span>';\n      if (inst.joined_at) html += '<span style=\"font-size:12px;color:var(--text-secondary)\">' + escapeHtml(relativeTime(inst.joined_at)) + '</span>';\n      html += '</div></div>';\n    });\n    html += '</div></div>';\n  }\n\n  body.innerHTML = html;\n\n  // Change role: mirror list's canOperate + renderMemberActions logic exactly.\n  // Use post-merge detail so role/did reflect the latest API response.\n  var changeRoleBtn = document.getElementById(\"member-detail-change-role\");\n  var instanceSel = document.getElementById(\"members-instance-filter\");\n  var instanceVisible = instanceSel && instanceSel.style.display !== 'none';\n  var canOperate = !instanceVisible || (instanceVisible && instanceSel.value === '');\n  if (__membersAggregated) canOperate = false;\n  var isSelf = detail.did === __caller.did;\n  var ROLE_LEVEL = { owner: 3, admin: 2, member: 1, guest: 0 };\n  var callerLevel = ROLE_LEVEL[__caller.role] || 0;\n  var targetLevel = ROLE_LEVEL[detail.role] || 0;\n  var canChangeRole = canOperate && !isSelf && targetLevel < callerLevel;\n  if (canChangeRole) {\n    changeRoleBtn.classList.remove(\"hidden\");\n  } else {\n    changeRoleBtn.classList.add(\"hidden\");\n  }\n\n  showDialog(\"member-detail-dialog\");\n}\n\nfunction openChangeRoleForDid(did) {\n  var u = currentMembersList.find(function(m) { return m.did === did; });\n  if (!u) return;\n  selectedMember = u;\n  openChangeRoleDialog();\n}\n\nfunction openChangeRoleDialog() {\n  if (!selectedMember) return;\n  document.getElementById(\"change-role-title\").textContent = __t(\"members.changeRole\");\n  document.getElementById(\"change-role-subtitle\").textContent = __t(\"members.changeRoleFor\", { name: selectedMember.fullName || truncateDid(selectedMember.did) });\n  // Show/hide role options based on caller's level (only owner can assign admin)\n  var radios = document.querySelectorAll('input[name=\"new-role\"]');\n  radios.forEach(function(r) {\n    r.checked = r.value === selectedMember.role;\n    var label = r.closest('label');\n    if (label) {\n      if (r.value === 'admin' && __caller.role !== 'owner') label.style.display = 'none';\n      else label.style.display = '';\n    }\n  });\n  closeDialog(\"member-detail-dialog\");\n  showDialog(\"change-role-dialog\");\n}\n\nasync function saveRoleChange() {\n  if (!selectedMember) return;\n  var selected = document.querySelector('input[name=\"new-role\"]:checked');\n  if (!selected) return;\n  var newRole = selected.value;\n  var data = await api(\"PUT\", \"/members/\" + encodeURIComponent(selectedMember.did) + \"/role\", { role: newRole });\n  if (data.ok) {\n    showToast(__t(\"members.roleUpdated\"), \"success\");\n    closeDialog(\"change-role-dialog\");\n    loadMembers(membersPage);\n  }\n}\n\nasync function blockMember(did, name) {\n  var ok = await confirmDialog({ title: __t(\"members.blockTitle\"), message: __t(\"members.blockMsg\", { name: name }), confirmLabel: __t(\"members.blockBtn\"), danger: true });\n  if (!ok) return;\n  var data = await api(\"PUT\", \"/members/\" + encodeURIComponent(did) + \"/approval\", { approved: false });\n  if (data.ok) { showToast(__t(\"members.blockSuccess\"), \"success\"); loadMembers(membersPage); }\n}\n\nasync function unblockMember(did, name) {\n  var ok = await confirmDialog({ title: __t(\"members.unblockTitle\"), message: __t(\"members.unblockMsg\", { name: name }), confirmLabel: __t(\"members.unblock\") });\n  if (!ok) return;\n  var data = await api(\"PUT\", \"/members/\" + encodeURIComponent(did) + \"/approval\", { approved: true });\n  if (data.ok) { showToast(__t(\"members.unblockSuccess\"), \"success\"); loadMembers(membersPage); }\n}\n\nasync function removeMember(did, name) {\n  var ok = await confirmDialog({ title: __t(\"members.removeTitle\"), message: __t(\"members.removeMsg\", { name: name }), confirmLabel: __t(\"members.remove\"), danger: true });\n  if (!ok) return;\n  var data = await api(\"DELETE\", \"/members/\" + encodeURIComponent(did));\n  if (data.ok) { showToast(__t(\"members.removeSuccess\"), \"success\"); loadMembers(membersPage); }\n}\n\nfunction updateTransferSection(users) {\n  var section = document.getElementById(\"ownership-transfer-section\");\n  if (__caller.role !== \"owner\") {\n    section.classList.add(\"hidden\");\n    return;\n  }\n  section.classList.remove(\"hidden\");\n  var select = document.getElementById(\"transfer-target\");\n  var html = '<option value=\"\">' + __t(\"members.transferSelect\") + '</option>';\n  users.forEach(function(u) {\n    if (u.did !== __caller.did && u.approved && u.role !== \"owner\") {\n      html += '<option value=\"' + escapeHtml(u.did) + '\">' + escapeHtml(u.fullName || truncateDid(u.did)) + ' (' + u.role + ')</option>';\n    }\n  });\n  select.innerHTML = html;\n}\n\nasync function handleTransferOwnership() {\n  var target = document.getElementById(\"transfer-target\").value;\n  if (!target) { showToast(__t(\"members.selectMemberFirst\"), \"error\"); return; }\n  var targetUser = currentMembersList.find(function(u) { return u.did === target; });\n  var name = targetUser ? (targetUser.fullName || truncateDid(target)) : truncateDid(target);\n  var ok = await confirmDialog({\n    title: __t(\"members.transferTitle\"),\n    message: __t(\"members.transferMsg\", { name: name }),\n    confirmLabel: __t(\"members.transferConfirm\"),\n    danger: true,\n  });\n  if (!ok) return;\n  var data = await api(\"POST\", \"/transfer-ownership\", { targetDid: target });\n  if (data.ok) {\n    showToast(__t(\"members.transferSuccess\"), \"success\");\n    setTimeout(function() { location.reload(); }, 1000);\n  }\n}\n\n// Close action menus on outside click\ndocument.addEventListener(\"click\", function() {\n  document.querySelectorAll(\".action-menu.open\").forEach(function(m) { m.classList.remove(\"open\"); });\n});\n\nregisterTab(\"members\", function() {\n  initInstanceFilter().then(function() {\n    // Auto-select instance from URL query (e.g., ?instance=z1xxx)\n    var urlInstance = new URLSearchParams(window.location.search).get(\"instance\");\n    if (urlInstance) {\n      var sel = document.getElementById(\"members-instance-filter\");\n      if (sel) sel.value = urlInstance;\n    }\n    // Restore sort state from URL (sortBy / sortOrder) on tab enter.\n    readMembersSortFromURL();\n    loadMembers(1);\n  });\n});\n";
 export {};
 //# sourceMappingURL=tab-members.d.ts.map

package/dist/pages/admin/tab-members.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tab-members.d.ts","sourceRoot":"","sources":["../../../src/pages/admin/tab-members.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC;AAEpE,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAiG7C;AAED,eAAO,MAAM,kBAAkB,ymzBAwd9B,CAAC"}
+{"version":3,"file":"tab-members.d.ts","sourceRoot":"","sources":["../../../src/pages/admin/tab-members.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,KAAK,GAAG,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,CAAC;AAEpE,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,GAAG,MAAM,CAiG7C;AAED,eAAO,MAAM,kBAAkB,4yzBA0d9B,CAAC"}

package/dist/pages/admin/tab-members.js

@@ -190,7 +190,9 @@ var __instanceFilterInitialized = false;
 async function initInstanceFilter() {
   if (__instanceFilterInitialized) return;
   try {
-    var data = await api("GET", "/../admin/instances");
+    // Best-effort: this endpoint is system-admin-only. Instance-scoped owners/admins
+    // get 403 here, which is expected — fail silently (no error toast).
+    var data = await api("GET", "/../admin/instances", undefined, { silent: true });
     if (data.ok && data.instances && data.instances.length > 0) {
       __instanceFilterInitialized = true;
       var sel = document.getElementById("members-instance-filter");

package/dist/pages/admin/tab-members.js.map

@@ -1 +1 @@
-{"version":3,"file":"tab-members.js","sourceRoot":"","sources":["../../../src/pages/admin/tab-members.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,UAAU,cAAc,CAAC,CAAM;IACnC,OAAO,UAAU,CAAC;;8BAEU,CAAC,CAAC,eAAe,CAAC;4BACpB,CAAC,CAAC,cAAc,CAAC;;;;;+EAKkC,CAAC,CAAC,gBAAgB,CAAC;;;4BAGtE,CAAC,CAAC,sBAAsB,CAAC;yBAC5B,CAAC,CAAC,yBAAyB,CAAC;;;yBAG5B,CAAC,CAAC,kBAAkB,CAAC;8BAChB,CAAC,CAAC,cAAc,CAAC;8BACjB,CAAC,CAAC,cAAc,CAAC;+BAChB,CAAC,CAAC,eAAe,CAAC;8BACnB,CAAC,CAAC,cAAc,CAAC;;;yBAGtB,CAAC,CAAC,mBAAmB,CAAC;0BACrB,CAAC,CAAC,eAAe,CAAC;0BAClB,CAAC,CAAC,gBAAgB,CAAC;;;yBAGpB,CAAC,CAAC,oBAAoB,CAAC;+BACjB,CAAC,CAAC,0BAA0B,CAAC;gCAC5B,CAAC,CAAC,2BAA2B,CAAC;8BAChC,CAAC,CAAC,yBAAyB,CAAC;+BAC3B,CAAC,CAAC,0BAA0B,CAAC;+BAC7B,CAAC,CAAC,0BAA0B,CAAC;8BAC9B,CAAC,CAAC,yBAAyB,CAAC;gCAC1B,CAAC,CAAC,2BAA2B,CAAC;iCAC7B,CAAC,CAAC,4BAA4B,CAAC;8BAClC,CAAC,CAAC,yBAAyB,CAAC;;;;;;;;;;;;8EAYoB,CAAC,CAAC,kBAAkB,CAAC;;;2EAGxB,CAAC,CAAC,sBAAsB,CAAC;;;sFAGd,CAAC,CAAC,qBAAqB,CAAC;;;;;;;;;;UAUpG,CAAC,CAAC,gBAAgB,CAAC;;;;sFAIyD,CAAC,CAAC,cAAc,CAAC;iGACN,CAAC,CAAC,oBAAoB,CAAC;;;;;;;iCAOvF,CAAC,CAAC,oBAAoB,CAAC;;;;qEAIa,CAAC,CAAC,mBAAmB,CAAC;;;sEAGrB,CAAC,CAAC,oBAAoB,CAAC;;;qEAGxB,CAAC,CAAC,mBAAmB,CAAC;;;;;oFAKP,CAAC,CAAC,eAAe,CAAC;qDACjD,CAAC,CAAC,oBAAoB,CAAC;;;CAG3E,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwd1C,CAAC"}
+{"version":3,"file":"tab-members.js","sourceRoot":"","sources":["../../../src/pages/admin/tab-members.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,UAAU,cAAc,CAAC,CAAM;IACnC,OAAO,UAAU,CAAC;;8BAEU,CAAC,CAAC,eAAe,CAAC;4BACpB,CAAC,CAAC,cAAc,CAAC;;;;;+EAKkC,CAAC,CAAC,gBAAgB,CAAC;;;4BAGtE,CAAC,CAAC,sBAAsB,CAAC;yBAC5B,CAAC,CAAC,yBAAyB,CAAC;;;yBAG5B,CAAC,CAAC,kBAAkB,CAAC;8BAChB,CAAC,CAAC,cAAc,CAAC;8BACjB,CAAC,CAAC,cAAc,CAAC;+BAChB,CAAC,CAAC,eAAe,CAAC;8BACnB,CAAC,CAAC,cAAc,CAAC;;;yBAGtB,CAAC,CAAC,mBAAmB,CAAC;0BACrB,CAAC,CAAC,eAAe,CAAC;0BAClB,CAAC,CAAC,gBAAgB,CAAC;;;yBAGpB,CAAC,CAAC,oBAAoB,CAAC;+BACjB,CAAC,CAAC,0BAA0B,CAAC;gCAC5B,CAAC,CAAC,2BAA2B,CAAC;8BAChC,CAAC,CAAC,yBAAyB,CAAC;+BAC3B,CAAC,CAAC,0BAA0B,CAAC;+BAC7B,CAAC,CAAC,0BAA0B,CAAC;8BAC9B,CAAC,CAAC,yBAAyB,CAAC;gCAC1B,CAAC,CAAC,2BAA2B,CAAC;iCAC7B,CAAC,CAAC,4BAA4B,CAAC;8BAClC,CAAC,CAAC,yBAAyB,CAAC;;;;;;;;;;;;8EAYoB,CAAC,CAAC,kBAAkB,CAAC;;;2EAGxB,CAAC,CAAC,sBAAsB,CAAC;;;sFAGd,CAAC,CAAC,qBAAqB,CAAC;;;;;;;;;;UAUpG,CAAC,CAAC,gBAAgB,CAAC;;;;sFAIyD,CAAC,CAAC,cAAc,CAAC;iGACN,CAAC,CAAC,oBAAoB,CAAC;;;;;;;iCAOvF,CAAC,CAAC,oBAAoB,CAAC;;;;qEAIa,CAAC,CAAC,mBAAmB,CAAC;;;sEAGrB,CAAC,CAAC,oBAAoB,CAAC;;;qEAGxB,CAAC,CAAC,mBAAmB,CAAC;;;;;oFAKP,CAAC,CAAC,eAAe,CAAC;qDACjD,CAAC,CAAC,oBAAoB,CAAC;;;CAG3E,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA0d1C,CAAC"}

package/dist/pages/login-page.js

@@ -50,7 +50,7 @@ export function renderLoginPage(config) {
   <meta charset="utf-8" />
   <meta name="viewport" content="width=device-width, initial-scale=1" />
   <title>${title}</title>
-  <link rel="icon" href="/.well-known/service/blocklet/logo-favicon" type="image/png" />
+  <link rel="icon" href="/.well-known/service/blocklet/logo-favicon" />
   <link rel="stylesheet" href="/.well-known/service/theme/styles.css" />
   <script src="/.well-known/service/theme/init.js"></script>
   <link rel="stylesheet" href="${assetUrl("login.css")}" />

package/dist/store/d1-store.d.ts

@@ -40,9 +40,9 @@ export declare class D1Store {
      *   forwarded to the primary (per Cloudflare D1 Sessions API).
      *
      *   `assumeMigrated` declares the schema is owned by the deploy-time
-     *   migrations (0001…0007 applied via `wrangler d1 migrations apply`) —
+     *   migrations (0001…0008 applied via `wrangler d1 migrations apply`) —
      *   {@link migrate} then becomes a no-op instead of replaying the full DDL
-     *   (CREATE batches + 8 always-failing ALTERs + seed INSERTs ≈ several
+     *   (CREATE batches + 14 always-failing ALTERs + seed INSERTs ≈ several
      *   serial D1 round-trips) on every fresh isolate's first handler build.
      *   ONLY safe on migrated databases: with it set, a missing schema fails
      *   loudly at the first real query instead of being silently created.
@@ -82,6 +82,7 @@ export declare class D1Store {
         ip?: string;
         domain?: string;
         emailVerified?: number;
+        createdBy?: string;
     }): Promise<void>;
     getUserByDid(did: string): Promise<StoredUser | null>;
     getUserByEmail(email: string): Promise<StoredUser | null>;
@@ -102,22 +103,24 @@ export declare class D1Store {
         total: number;
     }>;
     getMemberInfo(did: string): Promise<MemberInfo | null>;
-    updateUserRole(did: string, role: string): Promise<void>;
-    updateUserApproval(did: string, approved: boolean): Promise<void>;
+    updateUserRole(did: string, role: string, actor: string): Promise<void>;
+    updateUserApproval(did: string, approved: boolean, actor: string): Promise<void>;
     updateUserProfile(did: string, fields: {
         fullName?: string;
         email?: string;
         avatar?: string;
         emailVerified?: number;
-    }): Promise<void>;
+    }, actor: string): Promise<void>;
     removeUser(did: string): Promise<void>;
-    setUserInviter(did: string, inviterDid: string): Promise<void>;
+    setUserInviter(did: string, inviterDid: string, actor: string): Promise<void>;
     /**
      * Atomically transfer ownership: set target to owner, caller to admin.
      * Uses D1 batch for atomicity.
      */
-    transferOwnership(currentOwnerDid: string, newOwnerDid: string): Promise<void>;
-    createInvitation(input: CreateInvitationInput): Promise<StoredInvitation>;
+    transferOwnership(currentOwnerDid: string, newOwnerDid: string, actor: string): Promise<void>;
+    createInvitation(input: CreateInvitationInput & {
+        actor?: string;
+    }): Promise<StoredInvitation>;
     getInvitation(id: string): Promise<StoredInvitation | null>;
     getInvitations(opts: {
         page: number;
@@ -131,7 +134,7 @@ export declare class D1Store {
      * Atomically increment useCount. Returns false if maxUses already reached.
      */
     incrementInvitationUseCount(id: string): Promise<boolean>;
-    updateInvitationStatus(id: string, status: string): Promise<void>;
+    updateInvitationStatus(id: string, status: string, actor: string): Promise<void>;
     deleteInvitation(id: string): Promise<void>;
     purgeExpiredInvitations(): Promise<void>;
     createAuditLog(input: CreateAuditLogInput): Promise<void>;
@@ -157,6 +160,7 @@ export declare class D1Store {
         extra: string;
         userInfo: string;
         ip?: string;
+        actor?: string;
     }): Promise<void>;
     upsertConnectedAccount(account: {
         did: string;
@@ -165,6 +169,7 @@ export declare class D1Store {
         provider: string;
         id: string;
         userInfo?: string;
+        actor?: string;
     }): Promise<void>;
     getConnectedAccountById(credentialId: string): Promise<StoredConnectedAccount | null>;
     getConnectedAccountByDid(did: string): Promise<StoredConnectedAccount | null>;
@@ -174,7 +179,7 @@ export declare class D1Store {
     getConnectedAccountsByProviderAndUser(provider: string, userDid: string): Promise<StoredConnectedAccount[]>;
     getUserByDidOrConnectedAccount(did: string): Promise<StoredUser | null>;
     decrementPasskeyCount(did: string): Promise<void>;
-    updateConnectedAccountName(did: string, name: string): Promise<void>;
+    updateConnectedAccountName(did: string, name: string, actor: string): Promise<void>;
     deleteConnectedAccount(did: string): Promise<void>;
     createAccessKey(input: CreateAccessKeyInput): Promise<StoredAccessKey>;
     getAccessKeyById(accessKeyId: string): Promise<AccessKeyInfo | null>;
@@ -188,23 +193,23 @@ export declare class D1Store {
         keys: AccessKeyInfo[];
         total: number;
     }>;
-    updateAccessKey(accessKeyId: string, input: UpdateAccessKeyInput): Promise<AccessKeyInfo | null>;
+    updateAccessKey(accessKeyId: string, input: UpdateAccessKeyInput, actor: string): Promise<AccessKeyInfo | null>;
     deleteAccessKey(accessKeyId: string): Promise<void>;
     refreshAccessKeyLastUsed(accessKeyId: string): Promise<void>;
     ensureBuiltinPolicies(): Promise<void>;
     ensureDefaultRule(): Promise<void>;
     getAccessPolicies(instanceDid?: string): Promise<AccessPolicyInfo[]>;
     getAccessPolicy(id: string): Promise<AccessPolicyInfo | null>;
-    createAccessPolicy(input: CreateAccessPolicyInput): Promise<AccessPolicyInfo>;
-    updateAccessPolicy(id: string, input: UpdateAccessPolicyInput): Promise<AccessPolicyInfo>;
+    createAccessPolicy(input: CreateAccessPolicyInput, actor: string): Promise<AccessPolicyInfo>;
+    updateAccessPolicy(id: string, input: UpdateAccessPolicyInput, actor: string): Promise<AccessPolicyInfo>;
     deleteAccessPolicy(id: string): Promise<void>;
     getAccessPolicyRuleCount(id: string): Promise<number>;
     getSecurityRules(instanceDid?: string): Promise<SecurityRuleInfo[]>;
     getSecurityRule(id: string): Promise<SecurityRuleInfo | null>;
-    createSecurityRule(input: CreateSecurityRuleInput): Promise<SecurityRuleInfo>;
-    updateSecurityRule(id: string, input: UpdateSecurityRuleInput): Promise<SecurityRuleInfo>;
+    createSecurityRule(input: CreateSecurityRuleInput, actor: string): Promise<SecurityRuleInfo>;
+    updateSecurityRule(id: string, input: UpdateSecurityRuleInput, actor: string): Promise<SecurityRuleInfo>;
     deleteSecurityRule(id: string): Promise<void>;
-    createMembership(userDid: string, instanceDid: string, role: string, invitedBy?: string): Promise<void>;
+    createMembership(userDid: string, instanceDid: string, role: string, invitedBy: string | undefined, actor: string): Promise<void>;
     getMembership(userDid: string, instanceDid: string): Promise<{
         user_did: string;
         instance_did: string;
@@ -258,11 +263,11 @@ export declare class D1Store {
         createdAt: string | null;
         joined_at: string | null;
     }>>;
-    updateMembershipRole(userDid: string, instanceDid: string, role: string): Promise<void>;
+    updateMembershipRole(userDid: string, instanceDid: string, role: string, actor: string): Promise<void>;
     deleteMembership(userDid: string, instanceDid: string): Promise<void>;
     deleteMembershipsByInstance(instanceDid: string): Promise<void>;
     getSetting(instanceDid: string, key: string): Promise<string | null>;
-    setSetting(instanceDid: string, key: string, value: string): Promise<void>;
+    setSetting(instanceDid: string, key: string, value: string, actor: string): Promise<void>;
     listSettings(instanceDid: string): Promise<Array<{
         key: string;
         value: string | null;
@@ -292,7 +297,7 @@ export declare class D1Store {
     /** Bind a host to an instance. Idempotent; returns a conflict result if the
      *  host already belongs to a different instance. Uses a dedicated INSERT
      *  (not setSetting) so the host PK enforces one-host-one-instance. */
-    bindInstanceHost(instanceDid: string, host: string): Promise<BindHostResult>;
+    bindInstanceHost(instanceDid: string, host: string, actor: string): Promise<BindHostResult>;
     /** Remove a single host binding. */
     unbindInstanceHost(host: string): Promise<void>;
     /** List all hosts bound to an instance (normalized form). */

package/dist/store/d1-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"d1-store.d.ts","sourceRoot":"","sources":["../../src/store/d1-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,eAAe,EAEf,sBAAsB,EACtB,gBAAgB,EAEhB,UAAU,EACV,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,aAAa,CAAC;AA4JrB,KAAK,eAAe,GAAG,KAAK,CAAC;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAsDH,kEAAkE;AAClE,wBAAgB,gBAAgB,IAAI,IAAI,CAKvC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,qBAAa,OAAO;IAmBN,OAAO,CAAC,EAAE;IAlBtB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IAEzC;;;;;;;;;;;;;;;OAeG;gBACiB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE;IAOjG;sFACkF;IAC5E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAyG9B,0DAA0D;IACpD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAM7B,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQlF,YAAY,CAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IASrE,sFAAsF;IAChF,mBAAmB,CACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAQ3E,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1C,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQvC,kBAAkB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA2B1D,UAAU,CAAC,MAAM,EAAE;QACvB,GAAG,EAAE,MAAM,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BX,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKrD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKzD,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzE,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjD,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAQ/B,QAAQ,CAAC,IAAI,EAAE;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;QAC1D,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAgE7C,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAetD,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxD,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAQjE,iBAAiB,CACrB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,GACrF,OAAO,CAAC,IAAI,CAAC;IAkCV,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAStC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpE;;;OAGG;IACG,iBAAiB,CAAC,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe9E,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2CzE,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQ3D,cAAc,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAoC7D;;OAEG;IACG,2BAA2B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAYzD,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQjE,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3C,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC;IAYxC,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBzD,YAAY,CAAC,IAAI,EAAE,iBAAiB,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC9E,IAAI,EAAE,YAAY,EAAE,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAgBI,uBAAuB,CAC3B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAInD,kHAAkH;YACpG,gBAAgB;IAsDxB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAgB9E,sBAAsB,CAAC,MAAM,EAAE;QACnC,GAAG,EAAE,MAAM,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,EAAE,CAAC,EAAE,MAAM,CAAC;KACb,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBX,sBAAsB,CAAC,OAAO,EAAE;QACpC,GAAG,EAAE,MAAM,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBX,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQrF,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQ7E,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ1D,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IASjF,oCAAoC,CACxC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQnC,qCAAqC,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAS9B,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAcvE,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjD,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpE,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOlD,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAmCtE,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAgBpE,aAAa,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA0D/C,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IA2B1B,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnD,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5D,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IA8CtC,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAclC,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAiDpE,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IA4B7D,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA8B7E,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAsCzF,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUrD,gBAAgB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAmCnE,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IA2B7D,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA0B7E,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyCzF,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,IAAI,CAAC;IAWV,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,IAAI,CAAC;IAeT,sEAAsE;IAChE,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAQ3D,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CACjD,KAAK,CAAC;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CACH;IAeK,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAC7D,KAAK,CAAC;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CACH;IAiCK,8BAA8B,IAAI,OAAO,CAC7C,KAAK,CAAC;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CACH;IAuBK,2BAA2B,IAAI,OAAO,CAC1C,KAAK,CAAC;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CACH;IAgCK,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASvF,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASrE,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/D,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASpE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyB1E,YAAY,CAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAStE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpE,iEAAiE;IAC3D,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxF,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAS5E,mGAAmG;IAC7F,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAWlG;2EACuE;IACvE,OAAO,CAAC,aAAa;IAarB,yFAAyF;IACnF,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAarE;;0EAEsE;IAChE,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAoBlF,oCAAoC;IAC9B,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOrD,6DAA6D;IACvD,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQ/D,+EAA+E;IACzE,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvD,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYjF,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAiBhF,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAanD,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU/C,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC;IASxC,iBAAiB,CACrB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,YAAY,CAAC,EAAE,MAAM,EACrB,UAAU,SAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAWV,cAAc,CAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAW1E,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhD,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC;IAKzC,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtC,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8DxD,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAyB9E;;;OAGG;IACG,0BAA0B,IAAI,OAAO,CAAC,eAAe,CAAC;IAqBtD,sBAAsB,CAAC,MAAM,EAAE;QACnC,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC;IAYX,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3C,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IAoBH,sBAAsB,CAC1B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,wBAAwB,EAAE,MAAM,CAAC;KAClC,GACA,OAAO,CAAC,IAAI,CAAC;IAUV,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQjD,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC;IASpD,2FAA2F;IACrF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAcnD,mFAAmF;IAC7E,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY7E,6BAA6B;IACvB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7C,oCAAoC;IAC9B,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQxC,oEAAoE;IAC9D,uBAAuB,IAAI,OAAO,CACtC,KAAK,CAAC;QACJ,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC,CACH;IAyBD;;;OAGG;IACG,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAc5D,yDAAyD;IACnD,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASvE,0DAA0D;IACpD,8BAA8B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQzE"}
+{"version":3,"file":"d1-store.d.ts","sourceRoot":"","sources":["../../src/store/d1-store.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AACvE,OAAO,KAAK,EACV,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,eAAe,EAEf,sBAAsB,EACtB,gBAAgB,EAEhB,UAAU,EACV,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACxB,MAAM,aAAa,CAAC;AAyKrB,KAAK,eAAe,GAAG,KAAK,CAAC;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC,CAAC;AAsDH,kEAAkE;AAClE,wBAAgB,gBAAgB,IAAI,IAAI,CAKvC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,EAAE,CAAC,EAAE,MAAM,CAAC;CACb;AAED,qBAAa,OAAO;IAmBN,OAAO,CAAC,EAAE;IAlBtB,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAU;IAEzC;;;;;;;;;;;;;;;OAeG;gBACiB,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE;IAOjG;sFACkF;IAC5E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IA2I9B,0DAA0D;IACpD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAM7B,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQlF,YAAY,CAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IASrE,sFAAsF;IAChF,mBAAmB,CACvB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAQ3E,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK1C,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQvC,kBAAkB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IA2B1D,UAAU,CAAC,MAAM,EAAE;QACvB,GAAG,EAAE,MAAM,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgCX,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKrD,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAKzD,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWzE,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjD,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAQ/B,QAAQ,CAAC,IAAI,EAAE;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAC;QAC1D,SAAS,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,UAAU,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAgE7C,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAetD,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQvE,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQhF,iBAAiB,CACrB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,EACtF,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;IAoCV,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAStC,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnF;;;OAGG;IACG,iBAAiB,CAAC,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAe7F,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAiD9F,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAQ3D,cAAc,CAAC,IAAI,EAAE;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,WAAW,EAAE,cAAc,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAoC7D;;OAEG;IACG,2BAA2B,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAYzD,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQhF,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK3C,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC;IAYxC,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAmBzD,YAAY,CAAC,IAAI,EAAE,iBAAiB,GAAG;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC9E,IAAI,EAAE,YAAY,EAAE,CAAC;QACrB,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAgBI,uBAAuB,CAC3B,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,iBAAiB,GACtB,OAAO,CAAC;QAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAInD,kHAAkH;YACpG,gBAAgB;IAsDxB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAgB9E,sBAAsB,CAAC,MAAM,EAAE;QACnC,GAAG,EAAE,MAAM,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,IAAI,CAAC;IA6BX,sBAAsB,CAAC,OAAO,EAAE;QACpC,GAAG,EAAE,MAAM,CAAC;QACZ,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,EAAE,EAAE,MAAM,CAAC;QACX,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,IAAI,CAAC;IAgCX,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQrF,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQ7E,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS1D,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IASjF,oCAAoC,CACxC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAQnC,qCAAqC,CACzC,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,sBAAsB,EAAE,CAAC;IAS9B,8BAA8B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAcvE,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUjD,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQnF,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOlD,eAAe,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,eAAe,CAAC;IAqCtE,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAgBpE,aAAa,CAAC,IAAI,EAAE;QACxB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC;QAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IA0D/C,eAAe,CACnB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IA6B1B,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKnD,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU5D,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IA8CtC,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAclC,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAiDpE,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IA4B7D,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAgC5F,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwCxG,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7C,wBAAwB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUrD,gBAAgB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAmCnE,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IA2B7D,kBAAkB,CAAC,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA4B5F,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA2CxG,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ7C,gBAAgB,CACpB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC;IAYV,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QACT,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,IAAI,CAAC;IAeT,sEAAsE;IAChE,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAQ3D,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CACjD,KAAK,CAAC;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC,CACH;IAeK,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAC7D,KAAK,CAAC;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CACH;IAiCK,8BAA8B,IAAI,OAAO,CAC7C,KAAK,CAAC;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,MAAM,CAAC;QACb,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CACH;IAuBK,2BAA2B,IAAI,OAAO,CAC1C,KAAK,CAAC;QACJ,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,MAAM,CAAC;QACvB,IAAI,EAAE,MAAM,CAAC;QACb,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CACH;IAgCK,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAStG,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASrE,2BAA2B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ/D,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IASpE,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAyBzF,YAAY,CAChB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAStE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQpE,iEAAiE;IAC3D,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxF,oBAAoB,CACxB,WAAW,EAAE,MAAM,EACnB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAS5E,mGAAmG;IAC7F,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAWlG;2EACuE;IACvE,OAAO,CAAC,aAAa;IAarB,yFAAyF;IACnF,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAarE;;0EAEsE;IAChE,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAsBjG,oCAAoC;IAC9B,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOrD,6DAA6D;IACvD,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAQ/D,+EAA+E;IACzE,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvD,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAYjF,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAiBhF,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAanD,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU/C,uBAAuB,IAAI,OAAO,CAAC,IAAI,CAAC;IASxC,iBAAiB,CACrB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,YAAY,CAAC,EAAE,MAAM,EACrB,UAAU,SAAM,GACf,OAAO,CAAC,IAAI,CAAC;IAWV,cAAc,CAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IAW1E,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAKhD,wBAAwB,IAAI,OAAO,CAAC,IAAI,CAAC;IAKzC,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQzD,qBAAqB,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtC,oBAAoB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA8DxD,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAyB9E;;;OAGG;IACG,0BAA0B,IAAI,OAAO,CAAC,eAAe,CAAC;IAqBtD,sBAAsB,CAAC,MAAM,EAAE;QACnC,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,IAAI,CAAC;IAYX,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC;QAC7C,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QAC7B,2BAA2B,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3C,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,IAAI,CAAC;IAoBH,sBAAsB,CAC1B,EAAE,EAAE,MAAM,EACV,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,wBAAwB,EAAE,MAAM,CAAC;KAClC,GACA,OAAO,CAAC,IAAI,CAAC;IAUV,sBAAsB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAQjD,6BAA6B,IAAI,OAAO,CAAC,IAAI,CAAC;IASpD,2FAA2F;IACrF,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAcnD,mFAAmF;IAC7E,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAY7E,6BAA6B;IACvB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK7C,oCAAoC;IAC9B,iBAAiB,IAAI,OAAO,CAAC,IAAI,CAAC;IAQxC,oEAAoE;IAC9D,uBAAuB,IAAI,OAAO,CACtC,KAAK,CAAC;QACJ,WAAW,EAAE,MAAM,CAAC;QACpB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,SAAS,EAAE,OAAO,CAAC;QACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;KAC7B,CAAC,CACH;IAyBD;;;OAGG;IACG,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAc5D,yDAAyD;IACnD,6BAA6B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASvE,0DAA0D;IACpD,8BAA8B,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQzE"}