@atlasauth/react 0.4.1 → 0.5.0

package/dist/api-keys.d.ts

@@ -0,0 +1,63 @@
+import { type ReactNode } from 'react';
+import { type CreateUserApiKeyInput, type CreatedUserApiKey, type UserApiKey } from '@atlasauth/js';
+import { useReverification } from './reverification';
+/**
+ * End-user API key self-service — the signed-in user's OWN `ak_` keys (or, with
+ * `organizationId`, their active organization's), over `/v1/client/me/api_keys`.
+ *
+ * `useApiKeys()` is the headless half: list + create + rename + revoke, with the
+ * step-up wired in — creating a key on a stale session parks the call and flips
+ * `reverification.needsReverification`; `completeReverification({ strategy:
+ * 'password', password })` re-authenticates in place and finishes the create.
+ * `<ApiKeys/>` is the drop-in UI built on it.
+ */
+export type ApiKeysStatus = 'loading' | 'ready' | 'disabled' | 'error';
+export interface UseApiKeysResult {
+    status: ApiKeysStatus;
+    keys: UserApiKey[];
+    /** The scopes / claim names a new key may carry (instance allowlists). */
+    allowedScopes: string[];
+    allowedClaims: string[];
+    maxActiveKeys: number;
+    activeCount: number;
+    error: string | null;
+    reload(): Promise<void>;
+    /** Create a key. Resolves with the one-time `secret`; parks for reverification on a stale session. */
+    createKey(input?: Omit<CreateUserApiKeyInput, 'organizationId'>): Promise<CreatedUserApiKey>;
+    renameKey(id: string, name: string | null): Promise<UserApiKey>;
+    revokeKey(id: string): Promise<void>;
+    reverification: ReturnType<typeof useReverification>;
+}
+export declare function useApiKeys(options?: {
+    organizationId?: string;
+}): UseApiKeysResult;
+/** What a claims slot receives: the draft claims and a setter, scoped to the allowlist. */
+export interface ApiKeyClaimsFieldsContext {
+    claims: Record<string, unknown>;
+    /** Set (or, with `undefined`, remove) one claim on the key being created. */
+    setClaim(name: string, value: unknown): void;
+    /** The claim names the application lets a user set. Others are refused by the server. */
+    allowedClaims: string[];
+}
+export interface ApiKeysProps {
+    /** Manage this (active) organization's keys instead of the user's own. */
+    organizationId?: string;
+    /**
+     * Extra create-form fields whose values go into the key's `claims` — e.g. a
+     * spend limit. Only claim names the application allows are accepted.
+     */
+    renderClaimsFields?: (ctx: ApiKeyClaimsFieldsContext) => ReactNode;
+    /** Alias of `renderClaimsFields`. */
+    claimsForm?: (ctx: ApiKeyClaimsFieldsContext) => ReactNode;
+    /** Called with the newly created key (including its one-time `secret`). */
+    onCreate?: (key: CreatedUserApiKey) => void;
+    /** Expiry choices offered, in days. `0` means never. Default `[0, 30, 90, 365]`. */
+    expiryOptionsDays?: number[];
+}
+/**
+ * Drop-in API key manager: list, create (with the reverification prompt when the
+ * session is stale), show the new secret once with a copy button, rename, and
+ * revoke with a confirmation step.
+ */
+export declare function ApiKeys(props: ApiKeysProps): import("react").JSX.Element | null;
+export type { CreateUserApiKeyInput, CreatedUserApiKey, UserApiKey } from '@atlasauth/js';

package/dist/api-keys.js

@@ -0,0 +1,227 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.useApiKeys = useApiKeys;
+exports.ApiKeys = ApiKeys;
+const jsx_runtime_1 = require("react/jsx-runtime");
+const react_1 = require("react");
+const js_1 = require("@atlasauth/js");
+const reverification_1 = require("./reverification");
+const components_shared_1 = require("./components-shared");
+function useApiKeys(options = {}) {
+    const { organizationId } = options;
+    const client = (0, components_shared_1.useMeClient)();
+    const reverification = (0, reverification_1.useReverification)();
+    const { withReverification } = reverification;
+    const [status, setStatus] = (0, react_1.useState)('loading');
+    const [error, setError] = (0, react_1.useState)(null);
+    const [list, setList] = (0, react_1.useState)({ data: [], allowedScopes: [], allowedClaims: [], maxActiveKeys: 0, activeCount: 0 });
+    const reload = (0, react_1.useCallback)(async () => {
+        try {
+            const next = await (0, js_1.listApiKeys)(client, { organizationId });
+            setList(next);
+            setStatus('ready');
+            setError(null);
+        }
+        catch (err) {
+            // A 403 on the LIST means the feature is off (or org keys are, or the role
+            // lacks the permission) — render nothing actionable rather than an error.
+            if (err instanceof js_1.ApiKeyRequestError && err.status === 403) {
+                setStatus('disabled');
+                setError(err.message);
+                return;
+            }
+            setStatus('error');
+            setError(err instanceof Error ? err.message : String(err));
+        }
+    }, [client, organizationId]);
+    (0, react_1.useEffect)(() => {
+        void reload();
+    }, [reload]);
+    const createKey = (0, react_1.useCallback)(async (input = {}) => {
+        const created = await withReverification(() => (0, js_1.createApiKey)(client, { ...input, ...(organizationId ? { organizationId } : {}) }));
+        await reload();
+        return created;
+    }, [client, organizationId, reload, withReverification]);
+    const renameKey = (0, react_1.useCallback)(async (id, name) => {
+        const updated = await (0, js_1.updateApiKey)(client, id, { name });
+        await reload();
+        return updated;
+    }, [client, reload]);
+    const revokeKey = (0, react_1.useCallback)(async (id) => {
+        await (0, js_1.revokeApiKey)(client, id);
+        await reload();
+    }, [client, reload]);
+    return {
+        status,
+        keys: list.data,
+        allowedScopes: list.allowedScopes,
+        allowedClaims: list.allowedClaims,
+        maxActiveKeys: list.maxActiveKeys,
+        activeCount: list.activeCount,
+        error,
+        reload,
+        createKey,
+        renameKey,
+        revokeKey,
+        reverification,
+    };
+}
+function formatLimit(value) {
+    if (value === null || value === undefined)
+        return '—';
+    if (typeof value === 'object')
+        return JSON.stringify(value);
+    return String(value);
+}
+/**
+ * Drop-in API key manager: list, create (with the reverification prompt when the
+ * session is stale), show the new secret once with a copy button, rename, and
+ * revoke with a confirmation step.
+ */
+function ApiKeys(props) {
+    const { organizationId, onCreate, expiryOptionsDays = [0, 30, 90, 365] } = props;
+    const renderClaims = props.renderClaimsFields ?? props.claimsForm;
+    const api = useApiKeys({ organizationId });
+    const t = (0, components_shared_1.useText)();
+    const cardClass = (0, components_shared_1.useClass)('card', 'atlas-card');
+    const cls = (0, components_shared_1.useClasses)();
+    const [creating, setCreating] = (0, react_1.useState)(false);
+    const [name, setName] = (0, react_1.useState)('');
+    const [expiryDays, setExpiryDays] = (0, react_1.useState)(expiryOptionsDays[0] ?? 0);
+    const [scopes, setScopes] = (0, react_1.useState)([]);
+    const [claims, setClaims] = (0, react_1.useState)({});
+    const [busy, setBusy] = (0, react_1.useState)(false);
+    const [formError, setFormError] = (0, react_1.useState)(null);
+    const [secret, setSecret] = (0, react_1.useState)(null);
+    const [copied, setCopied] = (0, react_1.useState)(false);
+    const [renaming, setRenaming] = (0, react_1.useState)(null);
+    const [confirmRevoke, setConfirmRevoke] = (0, react_1.useState)(null);
+    const [password, setPassword] = (0, react_1.useState)('');
+    const [reauthError, setReauthError] = (0, react_1.useState)(null);
+    const claimsCtx = (0, react_1.useMemo)(() => ({
+        claims,
+        allowedClaims: api.allowedClaims,
+        setClaim: (claim, value) => setClaims((prev) => {
+            const next = { ...prev };
+            if (value === undefined)
+                delete next[claim];
+            else
+                next[claim] = value;
+            return next;
+        }),
+    }), [claims, api.allowedClaims]);
+    if (api.status === 'loading')
+        return null;
+    if (api.status === 'disabled') {
+        return ((0, jsx_runtime_1.jsxs)("section", { className: cardClass, "data-atlas": "api-keys", children: [(0, jsx_runtime_1.jsx)("h2", { className: cls('sectionTitle', 'atlas-section-title'), children: t('apiKeys.title') }), (0, jsx_runtime_1.jsx)("p", { className: cls('text', 'atlas-text'), "data-atlas": "api-keys-disabled", children: t('apiKeys.disabled') })] }));
+    }
+    const now = Date.now();
+    const atCap = api.maxActiveKeys > 0 && api.activeCount >= api.maxActiveKeys;
+    const resetForm = () => {
+        setCreating(false);
+        setName('');
+        setExpiryDays(expiryOptionsDays[0] ?? 0);
+        setScopes([]);
+        setClaims({});
+        setFormError(null);
+    };
+    const submit = async () => {
+        setBusy(true);
+        setFormError(null);
+        try {
+            const created = await api.createKey({
+                ...(name.trim() ? { name: name.trim() } : {}),
+                ...(expiryDays > 0 ? { expiresInSeconds: expiryDays * 24 * 60 * 60 } : {}),
+                ...(scopes.length > 0 ? { scopes } : {}),
+                ...(Object.keys(claims).length > 0 ? { claims } : {}),
+            });
+            setSecret(created.secret);
+            setCopied(false);
+            resetForm();
+            onCreate?.(created);
+        }
+        catch (err) {
+            // A cancelled reverification is not an error worth showing.
+            if (!(err instanceof Error && err.message === 'Reverification cancelled.')) {
+                setFormError(err instanceof Error ? err.message : t('error.generic'));
+            }
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    const confirmIdentity = async () => {
+        setReauthError(null);
+        try {
+            await api.reverification.completeReverification({ strategy: 'password', password });
+            setPassword('');
+        }
+        catch (err) {
+            setReauthError(err instanceof Error ? err.message : t('error.generic'));
+        }
+    };
+    const copy = async () => {
+        if (!secret)
+            return;
+        try {
+            await navigator.clipboard?.writeText(secret);
+            setCopied(true);
+        }
+        catch {
+            /* the secret stays visible for manual copy */
+        }
+    };
+    const saveRename = async () => {
+        if (!renaming)
+            return;
+        setBusy(true);
+        try {
+            await api.renameKey(renaming.id, renaming.name.trim() || null);
+            setRenaming(null);
+        }
+        catch (err) {
+            setFormError(err instanceof Error ? err.message : t('error.generic'));
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    const revoke = async (id) => {
+        setBusy(true);
+        try {
+            await api.revokeKey(id);
+            setConfirmRevoke(null);
+        }
+        catch (err) {
+            setFormError(err instanceof Error ? err.message : t('error.generic'));
+        }
+        finally {
+            setBusy(false);
+        }
+    };
+    const statusOf = (key) => {
+        if (key.revoked_at)
+            return t('apiKeys.revoked');
+        if (key.expires_at && key.expires_at <= now)
+            return t('apiKeys.expired');
+        return null;
+    };
+    return ((0, jsx_runtime_1.jsxs)("section", { className: cardClass, "data-atlas": "api-keys", children: [(0, jsx_runtime_1.jsx)("h2", { className: cls('sectionTitle', 'atlas-section-title'), children: t('apiKeys.title') }), (0, jsx_runtime_1.jsx)("p", { className: cls('text', 'atlas-text'), children: t(organizationId ? 'apiKeys.organizationSubtitle' : 'apiKeys.subtitle') }), api.error && api.status === 'error' ? ((0, jsx_runtime_1.jsx)("p", { className: cls('alert', 'atlas-alert'), role: "alert", children: api.error })) : null, secret ? ((0, jsx_runtime_1.jsxs)("div", { "data-atlas": "api-key-secret", role: "status", children: [(0, jsx_runtime_1.jsx)("p", { className: cls('text', 'atlas-text'), children: (0, jsx_runtime_1.jsx)("strong", { children: t('apiKeys.secretTitle') }) }), (0, jsx_runtime_1.jsx)("p", { className: cls('text', 'atlas-text'), children: t('apiKeys.secretHint') }), (0, jsx_runtime_1.jsx)("code", { "data-atlas": "api-key-secret-value", children: secret }), (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonSecondary', 'atlas-button-secondary'), type: "button", onClick: () => void copy(), children: copied ? t('apiKeys.copied') : t('apiKeys.copy') }), (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonSecondary', 'atlas-button-secondary'), type: "button", onClick: () => setSecret(null), children: t('apiKeys.done') })] })) : null, api.reverification.needsReverification ? ((0, jsx_runtime_1.jsxs)("div", { "data-atlas": "api-keys-reverification", role: "dialog", "aria-label": t('reverification.title'), children: [(0, jsx_runtime_1.jsx)("p", { className: cls('text', 'atlas-text'), children: (0, jsx_runtime_1.jsx)("strong", { children: t('reverification.title') }) }), (0, jsx_runtime_1.jsx)("p", { className: cls('text', 'atlas-text'), children: t('reverification.subtitle') }), (0, jsx_runtime_1.jsxs)("label", { className: cls('formField', 'atlas-field'), children: [(0, jsx_runtime_1.jsx)("span", { className: cls('formFieldLabel', 'atlas-field-label'), children: t('reverification.passwordLabel') }), (0, jsx_runtime_1.jsx)("input", { className: cls('formFieldInput', 'atlas-account-input'), type: "password", autoComplete: "current-password", value: password, onChange: (e) => setPassword(e.target.value) })] }), reauthError ? (0, jsx_runtime_1.jsx)("p", { className: cls('formFieldError', 'atlas-error'), role: "alert", children: reauthError }) : null, (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonPrimary', 'atlas-button'), type: "button", onClick: () => void confirmIdentity(), children: t('reverification.submit') }), (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonSecondary', 'atlas-button-secondary'), type: "button", onClick: () => {
+                            setPassword('');
+                            setReauthError(null);
+                            api.reverification.cancelReverification();
+                        }, children: t('reverification.cancel') })] })) : null, api.keys.length === 0 ? ((0, jsx_runtime_1.jsx)("p", { className: cls('text', 'atlas-text'), "data-atlas": "api-keys-empty", children: t('apiKeys.empty') })) : ((0, jsx_runtime_1.jsx)("ul", { className: cls('list', 'atlas-list'), "data-atlas": "api-keys-list", children: api.keys.map((key) => {
+                    const state = statusOf(key);
+                    const limits = key.limits && typeof key.limits === 'object' ? Object.entries(key.limits) : [];
+                    return ((0, jsx_runtime_1.jsxs)("li", { className: cls('listItem', 'atlas-list-item'), "data-atlas": "api-key", children: [renaming?.id === key.id ? ((0, jsx_runtime_1.jsxs)("span", { children: [(0, jsx_runtime_1.jsx)("input", { className: cls('formFieldInput', 'atlas-account-input'), "aria-label": t('apiKeys.nameLabel'), value: renaming.name, onChange: (e) => setRenaming({ id: key.id, name: e.target.value }) }), (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonSecondary', 'atlas-button-secondary'), type: "button", disabled: busy, onClick: () => void saveRename(), children: t('apiKeys.save') }), (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonSecondary', 'atlas-button-secondary'), type: "button", onClick: () => setRenaming(null), children: t('apiKeys.cancel') })] })) : ((0, jsx_runtime_1.jsx)("strong", { children: key.name ?? t('apiKeys.unnamed') })), ' ', (0, jsx_runtime_1.jsxs)("code", { children: [key.prefix, "\u2026"] }), state ? (0, jsx_runtime_1.jsxs)("em", { children: [" \u2014 ", state] }) : null, (0, jsx_runtime_1.jsx)("div", { className: cls('text', 'atlas-text'), children: [
+                                    key.last_used_at
+                                        ? t('apiKeys.lastUsed', { date: new Date(key.last_used_at).toLocaleDateString() })
+                                        : t('apiKeys.neverUsed'),
+                                    key.expires_at ? t('apiKeys.expiresOn', { date: new Date(key.expires_at).toLocaleDateString() }) : null,
+                                    key.scopes && key.scopes.length > 0 ? key.scopes.join(', ') : null,
+                                ]
+                                    .filter(Boolean)
+                                    .join(' · ') }), limits.length > 0 ? ((0, jsx_runtime_1.jsxs)("div", { className: cls('text', 'atlas-text'), "data-atlas": "api-key-limits", children: [t('apiKeys.limits'), ": ", limits.map(([k, v]) => `${k} ${formatLimit(v)}`).join(' · ')] })) : null, !key.revoked_at && renaming?.id !== key.id ? (confirmRevoke === key.id ? ((0, jsx_runtime_1.jsxs)("span", { "data-atlas": "api-key-revoke-confirm", children: [(0, jsx_runtime_1.jsx)("span", { className: cls('text', 'atlas-text'), children: t('apiKeys.revokeConfirm') }), (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonSecondary', 'atlas-button-secondary'), type: "button", disabled: busy, onClick: () => void revoke(key.id), children: t('apiKeys.revokeConfirmButton') }), (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonSecondary', 'atlas-button-secondary'), type: "button", onClick: () => setConfirmRevoke(null), children: t('apiKeys.cancel') })] })) : ((0, jsx_runtime_1.jsxs)("span", { children: [(0, jsx_runtime_1.jsx)("button", { className: cls('formButtonSecondary', 'atlas-button-secondary'), type: "button", onClick: () => setRenaming({ id: key.id, name: key.name ?? '' }), children: t('apiKeys.rename') }), (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonSecondary', 'atlas-button-secondary'), type: "button", onClick: () => setConfirmRevoke(key.id), children: t('apiKeys.revoke') })] }))) : null] }, key.id));
+                }) })), formError ? (0, jsx_runtime_1.jsx)("p", { className: cls('alert', 'atlas-alert'), role: "alert", children: formError }) : null, creating ? ((0, jsx_runtime_1.jsxs)("div", { "data-atlas": "api-key-create", children: [(0, jsx_runtime_1.jsxs)("label", { className: cls('formField', 'atlas-field'), children: [(0, jsx_runtime_1.jsx)("span", { className: cls('formFieldLabel', 'atlas-field-label'), children: t('apiKeys.nameLabel') }), (0, jsx_runtime_1.jsx)("input", { className: cls('formFieldInput', 'atlas-account-input'), value: name, maxLength: 100, placeholder: t('apiKeys.namePlaceholder'), onChange: (e) => setName(e.target.value) })] }), (0, jsx_runtime_1.jsxs)("label", { className: cls('formField', 'atlas-field'), children: [(0, jsx_runtime_1.jsx)("span", { className: cls('formFieldLabel', 'atlas-field-label'), children: t('apiKeys.expiresLabel') }), (0, jsx_runtime_1.jsx)("select", { className: cls('formFieldInput', 'atlas-account-input'), value: String(expiryDays), onChange: (e) => setExpiryDays(Number(e.target.value)), children: expiryOptionsDays.map((days) => ((0, jsx_runtime_1.jsx)("option", { value: String(days), children: days > 0 ? t('apiKeys.expiresDays', { days: String(days) }) : t('apiKeys.expiresNever') }, days))) })] }), api.allowedScopes.length > 0 ? ((0, jsx_runtime_1.jsxs)("fieldset", { className: cls('formField', 'atlas-field'), children: [(0, jsx_runtime_1.jsx)("legend", { className: cls('formFieldLabel', 'atlas-field-label'), children: t('apiKeys.scopesLabel') }), api.allowedScopes.map((scope) => ((0, jsx_runtime_1.jsxs)("label", { children: [(0, jsx_runtime_1.jsx)("input", { type: "checkbox", checked: scopes.includes(scope), onChange: (e) => setScopes((prev) => (e.target.checked ? [...prev, scope] : prev.filter((s) => s !== scope))) }), ' ', scope] }, scope)))] })) : null, renderClaims ? renderClaims(claimsCtx) : null, (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonPrimary', 'atlas-button'), type: "button", disabled: busy, onClick: () => void submit(), children: t('apiKeys.submit') }), (0, jsx_runtime_1.jsx)("button", { className: cls('formButtonSecondary', 'atlas-button-secondary'), type: "button", onClick: resetForm, children: t('apiKeys.cancel') })] })) : atCap ? ((0, jsx_runtime_1.jsx)("p", { className: cls('text', 'atlas-text'), "data-atlas": "api-keys-limit", children: t('apiKeys.limitReached', { max: String(api.maxActiveKeys) }) })) : ((0, jsx_runtime_1.jsx)("button", { className: cls('formButtonPrimary', 'atlas-button'), type: "button", onClick: () => setCreating(true), children: t('apiKeys.create') }))] }));
+}
+//# sourceMappingURL=api-keys.js.map

package/dist/api-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api-keys.js","sourceRoot":"","sources":["../src/api-keys.tsx"],"names":[],"mappings":";;AA4CA,gCAgFC;AAsCD,0BAuUC;;AAzeD,iCAAkF;AAClF,sCASuB;AACvB,qDAAqD;AACrD,2DAAiF;AAgCjF,SAAgB,UAAU,CAAC,UAAuC,EAAE;IAClE,MAAM,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IACnC,MAAM,MAAM,GAAG,IAAA,+BAAW,GAAE,CAAC;IAC7B,MAAM,cAAc,GAAG,IAAA,kCAAiB,GAAE,CAAC;IAC3C,MAAM,EAAE,kBAAkB,EAAE,GAAG,cAAc,CAAC;IAC9C,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAA,gBAAQ,EAAgB,SAAS,CAAC,CAAC;IAC/D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,IAAA,gBAAQ,EAAgB,IAAI,CAAC,CAAC;IACxD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAA,gBAAQ,EAM7B,EAAE,IAAI,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAEzF,MAAM,MAAM,GAAG,IAAA,mBAAW,EAAC,KAAK,IAAI,EAAE;QACpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAA,gBAAW,EAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,QAAQ,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,2EAA2E;YAC3E,0EAA0E;YAC1E,IAAI,GAAG,YAAY,uBAAkB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5D,SAAS,CAAC,UAAU,CAAC,CAAC;gBACtB,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,SAAS,CAAC,OAAO,CAAC,CAAC;YACnB,QAAQ,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;IAE7B,IAAA,iBAAS,EAAC,GAAG,EAAE;QACb,KAAK,MAAM,EAAE,CAAC;IAChB,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,MAAM,SAAS,GAAG,IAAA,mBAAW,EAC3B,KAAK,EAAE,QAAuD,EAAE,EAAE,EAAE;QAClE,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,CAC5C,IAAA,iBAAY,EAAC,MAAM,EAAE,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAClF,CAAC;QACF,MAAM,MAAM,EAAE,CAAC;QACf,OAAO,OAAO,CAAC;IACjB,CAAC,EACD,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,kBAAkB,CAAC,CACrD,CAAC;IAEF,MAAM,SAAS,GAAG,IAAA,mBAAW,EAC3B,KAAK,EAAE,EAAU,EAAE,IAAmB,EAAE,EAAE;QACxC,MAAM,OAAO,GAAG,MAAM,IAAA,iBAAY,EAAC,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,EAAE,CAAC;QACf,OAAO,OAAO,CAAC;IACjB,CAAC,EACD,CAAC,MAAM,EAAE,MAAM,CAAC,CACjB,CAAC;IAEF,MAAM,SAAS,GAAG,IAAA,mBAAW,EAC3B,KAAK,EAAE,EAAU,EAAE,EAAE;QACnB,MAAM,IAAA,iBAAY,EAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/B,MAAM,MAAM,EAAE,CAAC;IACjB,CAAC,EACD,CAAC,MAAM,EAAE,MAAM,CAAC,CACjB,CAAC;IAEF,OAAO;QACL,MAAM;QACN,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK;QACL,MAAM;QACN,SAAS;QACT,SAAS;QACT,SAAS;QACT,cAAc;KACf,CAAC;AACJ,CAAC;AA2BD,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;GAIG;AACH,SAAgB,OAAO,CAAC,KAAmB;IACzC,MAAM,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC;IACjF,MAAM,YAAY,GAAG,KAAK,CAAC,kBAAkB,IAAI,KAAK,CAAC,UAAU,CAAC;IAClE,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,IAAA,2BAAO,GAAE,CAAC;IACpB,MAAM,SAAS,GAAG,IAAA,4BAAQ,EAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAA,8BAAU,GAAE,CAAC;IAEzB,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,IAAA,gBAAQ,EAAC,KAAK,CAAC,CAAC;IAChD,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAA,gBAAQ,EAAC,EAAE,CAAC,CAAC;IACrC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,IAAA,gBAAQ,EAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAA,gBAAQ,EAAW,EAAE,CAAC,CAAC;IACnD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAA,gBAAQ,EAA0B,EAAE,CAAC,CAAC;IAClE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,IAAA,gBAAQ,EAAC,KAAK,CAAC,CAAC;IACxC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,IAAA,gBAAQ,EAAgB,IAAI,CAAC,CAAC;IAChE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAA,gBAAQ,EAAgB,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAA,gBAAQ,EAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,IAAA,gBAAQ,EAAsC,IAAI,CAAC,CAAC;IACpF,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,GAAG,IAAA,gBAAQ,EAAgB,IAAI,CAAC,CAAC;IACxE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,IAAA,gBAAQ,EAAC,EAAE,CAAC,CAAC;IAC7C,MAAM,CAAC,WAAW,EAAE,cAAc,CAAC,GAAG,IAAA,gBAAQ,EAAgB,IAAI,CAAC,CAAC;IAEpE,MAAM,SAAS,GAAG,IAAA,eAAO,EACvB,GAAG,EAAE,CAAC,CAAC;QACL,MAAM;QACN,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACzB,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE;YACjB,MAAM,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;;gBACvC,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC;YACzB,OAAO,IAAI,CAAC;QACd,CAAC,CAAC;KACL,CAAC,EACF,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,CAAC,CAC5B,CAAC;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1C,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC9B,OAAO,CACL,qCAAS,SAAS,EAAE,SAAS,gBAAa,UAAU,aAClD,+BAAI,SAAS,EAAE,GAAG,CAAC,cAAc,EAAE,qBAAqB,CAAC,YAAG,CAAC,CAAC,eAAe,CAAC,GAAM,EACpF,8BAAG,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,gBAAa,mBAAmB,YAAE,CAAC,CAAC,kBAAkB,CAAC,GAAK,IAC3F,CACX,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,KAAK,GAAG,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,aAAa,CAAC;IAC5E,MAAM,SAAS,GAAG,GAAG,EAAE;QACrB,WAAW,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,CAAC,EAAE,CAAC,CAAC;QACZ,aAAa,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACzC,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,SAAS,CAAC,EAAE,CAAC,CAAC;QACd,YAAY,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,UAAU,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1E,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtD,CAAC,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1B,SAAS,CAAC,KAAK,CAAC,CAAC;YACjB,SAAS,EAAE,CAAC;YACZ,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4DAA4D;YAC5D,IAAI,CAAC,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,OAAO,KAAK,2BAA2B,CAAC,EAAE,CAAC;gBAC3E,YAAY,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;QACjC,cAAc,CAAC,IAAI,CAAC,CAAC;QACrB,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,cAAc,CAAC,sBAAsB,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpF,WAAW,CAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,cAAc,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;QACtB,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;YAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACP,8CAA8C;QAChD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAAI,EAAE;QAC5B,IAAI,CAAC,QAAQ;YAAE,OAAO;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC;YAC/D,WAAW,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACxE,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,EAAU,EAAE,EAAE;QAClC,OAAO,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACxB,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;QACxE,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,GAAe,EAAiB,EAAE;QAClD,IAAI,GAAG,CAAC,UAAU;YAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAChD,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG;YAAE,OAAO,CAAC,CAAC,iBAAiB,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO,CACL,qCAAS,SAAS,EAAE,SAAS,gBAAa,UAAU,aAClD,+BAAI,SAAS,EAAE,GAAG,CAAC,cAAc,EAAE,qBAAqB,CAAC,YAAG,CAAC,CAAC,eAAe,CAAC,GAAM,EACpF,8BAAG,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,YACpC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,kBAAkB,CAAC,GACtE,EAEH,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,CACrC,8BAAG,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,IAAI,EAAC,OAAO,YAAE,GAAG,CAAC,KAAK,GAAK,CACxE,CAAC,CAAC,CAAC,IAAI,EAEP,MAAM,CAAC,CAAC,CAAC,CACR,+CAAgB,gBAAgB,EAAC,IAAI,EAAC,QAAQ,aAC5C,8BAAG,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,YAAE,6CAAS,CAAC,CAAC,qBAAqB,CAAC,GAAU,GAAI,EACxF,8BAAG,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,YAAG,CAAC,CAAC,oBAAoB,CAAC,GAAK,EACtE,+CAAiB,sBAAsB,YAAE,MAAM,GAAQ,EACvD,mCAAQ,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,YAC9G,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,GAC1C,EACT,mCAAQ,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,YAClH,CAAC,CAAC,cAAc,CAAC,GACX,IACL,CACP,CAAC,CAAC,CAAC,IAAI,EAEP,GAAG,CAAC,cAAc,CAAC,mBAAmB,CAAC,CAAC,CAAC,CACxC,+CAAgB,yBAAyB,EAAC,IAAI,EAAC,QAAQ,gBAAa,CAAC,CAAC,sBAAsB,CAAC,aAC3F,8BAAG,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,YAAE,6CAAS,CAAC,CAAC,sBAAsB,CAAC,GAAU,GAAI,EACzF,8BAAG,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,YAAG,CAAC,CAAC,yBAAyB,CAAC,GAAK,EAC3E,mCAAO,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,aAC/C,iCAAM,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,YAAG,CAAC,CAAC,8BAA8B,CAAC,GAAQ,EACvG,kCACE,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,EACvD,IAAI,EAAC,UAAU,EACf,YAAY,EAAC,kBAAkB,EAC/B,KAAK,EAAE,QAAQ,EACf,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAC5C,IACI,EACP,WAAW,CAAC,CAAC,CAAC,8BAAG,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,EAAE,IAAI,EAAC,OAAO,YAAE,WAAW,GAAK,CAAC,CAAC,CAAC,IAAI,EACxG,mCAAQ,SAAS,EAAE,GAAG,CAAC,mBAAmB,EAAE,cAAc,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,eAAe,EAAE,YAC7G,CAAC,CAAC,uBAAuB,CAAC,GACpB,EACT,mCACE,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAC/D,IAAI,EAAC,QAAQ,EACb,OAAO,EAAE,GAAG,EAAE;4BACZ,WAAW,CAAC,EAAE,CAAC,CAAC;4BAChB,cAAc,CAAC,IAAI,CAAC,CAAC;4BACrB,GAAG,CAAC,cAAc,CAAC,oBAAoB,EAAE,CAAC;wBAC5C,CAAC,YAEA,CAAC,CAAC,uBAAuB,CAAC,GACpB,IACL,CACP,CAAC,CAAC,CAAC,IAAI,EAEP,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CACvB,8BAAG,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,gBAAa,gBAAgB,YAAE,CAAC,CAAC,eAAe,CAAC,GAAK,CAC9F,CAAC,CAAC,CAAC,CACF,+BAAI,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,gBAAa,eAAe,YACjE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;oBACpB,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAC5B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9F,OAAO,CACL,gCAAI,SAAS,EAAE,GAAG,CAAC,UAAU,EAAE,iBAAiB,CAAC,gBAA0B,SAAS,aACjF,QAAQ,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CACzB,6CACE,kCACE,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,gBAC3C,CAAC,CAAC,mBAAmB,CAAC,EAClC,KAAK,EAAE,QAAQ,CAAC,IAAI,EACpB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,GAClE,EACF,mCAAQ,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,UAAU,EAAE,YACpI,CAAC,CAAC,cAAc,CAAC,GACX,EACT,mCAAQ,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,YACpH,CAAC,CAAC,gBAAgB,CAAC,GACb,IACJ,CACR,CAAC,CAAC,CAAC,CACF,6CAAS,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,iBAAiB,CAAC,GAAU,CACpD,EAAE,GAAG,EACN,6CAAO,GAAG,CAAC,MAAM,cAAS,EACzB,KAAK,CAAC,CAAC,CAAC,uDAAQ,KAAK,IAAM,CAAC,CAAC,CAAC,IAAI,EACnC,gCAAK,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,YACtC;oCACC,GAAG,CAAC,YAAY;wCACd,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC;wCAClF,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;oCAC1B,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;oCACvG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;iCACnE;qCACE,MAAM,CAAC,OAAO,CAAC;qCACf,IAAI,CAAC,KAAK,CAAC,GACV,EACL,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CACnB,iCAAK,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,gBAAa,gBAAgB,aACnE,CAAC,CAAC,gBAAgB,CAAC,QAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAChF,CACP,CAAC,CAAC,CAAC,IAAI,EACP,CAAC,GAAG,CAAC,UAAU,IAAI,QAAQ,EAAE,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAC5C,aAAa,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CACzB,gDAAiB,wBAAwB,aACvC,iCAAM,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,YAAG,CAAC,CAAC,uBAAuB,CAAC,GAAQ,EAC/E,mCAAQ,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,YACtI,CAAC,CAAC,6BAA6B,CAAC,GAC1B,EACT,mCAAQ,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,YACzH,CAAC,CAAC,gBAAgB,CAAC,GACb,IACJ,CACR,CAAC,CAAC,CAAC,CACF,6CACE,mCAAQ,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,YACpJ,CAAC,CAAC,gBAAgB,CAAC,GACb,EACT,mCAAQ,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,YAC3H,CAAC,CAAC,gBAAgB,CAAC,GACb,IACJ,CACR,CACF,CAAC,CAAC,CAAC,IAAI,KA1D8C,GAAG,CAAC,EAAE,CA2DzD,CACN,CAAC;gBACJ,CAAC,CAAC,GACC,CACN,EAEA,SAAS,CAAC,CAAC,CAAC,8BAAG,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,IAAI,EAAC,OAAO,YAAE,SAAS,GAAK,CAAC,CAAC,CAAC,IAAI,EAE1F,QAAQ,CAAC,CAAC,CAAC,CACV,+CAAgB,gBAAgB,aAC9B,mCAAO,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,aAC/C,iCAAM,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,YAAG,CAAC,CAAC,mBAAmB,CAAC,GAAQ,EAC5F,kCACE,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,EACvD,KAAK,EAAE,IAAI,EACX,SAAS,EAAE,GAAG,EACd,WAAW,EAAE,CAAC,CAAC,yBAAyB,CAAC,EACzC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GACxC,IACI,EACR,mCAAO,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,aAC/C,iCAAM,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,YAAG,CAAC,CAAC,sBAAsB,CAAC,GAAQ,EAC/F,mCACE,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,EACvD,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,EACzB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,YAErD,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAC/B,mCAAmB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,YACnC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAD7E,IAAI,CAER,CACV,CAAC,GACK,IACH,EACP,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAC9B,sCAAU,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,aAAa,CAAC,aAClD,mCAAQ,SAAS,EAAE,GAAG,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,YAAG,CAAC,CAAC,qBAAqB,CAAC,GAAU,EACjG,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAChC,8CACE,kCACE,IAAI,EAAC,UAAU,EACf,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAC/B,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CACd,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,GAE9F,EAAC,GAAG,EACL,KAAK,KARI,KAAK,CAST,CACT,CAAC,IACO,CACZ,CAAC,CAAC,CAAC,IAAI,EACP,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAC9C,mCAAQ,SAAS,EAAE,GAAG,CAAC,mBAAmB,EAAE,cAAc,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,MAAM,EAAE,YACpH,CAAC,CAAC,gBAAgB,CAAC,GACb,EACT,mCAAQ,SAAS,EAAE,GAAG,CAAC,qBAAqB,EAAE,wBAAwB,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,SAAS,YACtG,CAAC,CAAC,gBAAgB,CAAC,GACb,IACL,CACP,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CACV,8BAAG,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,gBAAa,gBAAgB,YACjE,CAAC,CAAC,sBAAsB,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,GAC5D,CACL,CAAC,CAAC,CAAC,CACF,mCAAQ,SAAS,EAAE,GAAG,CAAC,mBAAmB,EAAE,cAAc,CAAC,EAAE,IAAI,EAAC,QAAQ,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,YACxG,CAAC,CAAC,gBAAgB,CAAC,GACb,CACV,IACO,CACX,CAAC;AACJ,CAAC"}

package/dist/appearance.d.ts

@@ -29,6 +29,20 @@ export interface DesignTokens {
     borderRadius?: string;
     fontFamily?: string;
     spacingUnit?: string;
+    /**
+     * Text and icon colour on a `colorPrimary` fill (the primary button label,
+     * the avatar initials). Defaults to white or near-black, whichever contrasts
+     * more with the resolved `colorPrimary`. With a design active, an explicit
+     * value overrides the design's primary ink.
+     */
+    colorTextOnPrimary?: string;
+    /**
+     * The keyboard focus ring (a solid 2px outline on `:focus-visible`). Defaults
+     * to the resolved `colorPrimary`; pick a colour with at least 3:1 contrast
+     * against `colorBackground`. With a design active, an explicit value replaces
+     * the design's ring colour.
+     */
+    colorFocusRing?: string;
 }
 /**
  * Every element a customer may target. Named for what it IS, not where it sits.
@@ -134,6 +148,8 @@ export declare const THEMES: {
         readonly colorBackground: "#14171c";
         readonly colorBorder: "#242932";
         readonly colorPrimary: "#6ea8fe";
+        readonly colorTextOnPrimary: string;
+        readonly colorFocusRing: "#6ea8fe";
         readonly colorDanger: string;
         readonly borderRadius: string;
         readonly fontFamily: string;
@@ -141,6 +157,8 @@ export declare const THEMES: {
     };
     readonly neobrutalist: {
         readonly colorPrimary: "#ffe600";
+        readonly colorTextOnPrimary: string;
+        readonly colorFocusRing: "#000000";
         readonly colorText: "#000000";
         readonly colorBackground: "#ffffff";
         readonly colorBorder: "#000000";
@@ -156,6 +174,13 @@ export declare const THEMES: {
  * Later wins, and `undefined` never overwrites. A customer setting one variable
  * on the dark theme expects the other eleven to stay dark, not silently revert
  * to the light defaults.
+ *
+ * `colorTextOnPrimary` and `colorFocusRing` follow the RESOLVED `colorPrimary`
+ * unless set explicitly in `variables` (a theme's own values are for its own
+ * primary): the label flips to whichever of white / near-black contrasts more,
+ * and the focus ring takes the primary. A base theme whose primary would make a
+ * poor ring on its own background (neobrutalist yellow on white) keeps its ring
+ * while its primary is unchanged.
  */
 export declare function resolveTokens(appearance?: Appearance): Required<DesignTokens>;
 /** Tokens as CSS custom properties, for the host DOM to inherit. */

package/dist/appearance.js

@@ -26,6 +26,7 @@ exports.classFor = classFor;
 exports.explicitTokens = explicitTokens;
 exports.renderAppearance = renderAppearance;
 const runtime_1 = require("@atlasauth/design/runtime");
+const contrast_1 = require("./contrast");
 var runtime_2 = require("@atlasauth/design/runtime");
 Object.defineProperty(exports, "instanceDesignFrom", { enumerable: true, get: function () { return runtime_2.instanceDesignFrom; } });
 Object.defineProperty(exports, "warnOnce", { enumerable: true, get: function () { return runtime_2.warnOnce; } });
@@ -46,6 +47,9 @@ exports.DEFAULT_TOKENS = {
     borderRadius: '8px',
     fontFamily: 'ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif',
     spacingUnit: '4px',
+    // Both derived from colorPrimary by resolveTokens unless set explicitly.
+    colorTextOnPrimary: '#ffffff',
+    colorFocusRing: '#5b5bd6',
 };
 /**
  * §10.3: "prebuilt themes shipped (default, dark, neobrutalist as a demo of the
@@ -61,10 +65,14 @@ exports.THEMES = {
         colorBackground: '#14171c',
         colorBorder: '#242932',
         colorPrimary: '#6ea8fe',
+        colorTextOnPrimary: (0, contrast_1.textOnPrimary)('#6ea8fe'),
+        colorFocusRing: '#6ea8fe',
     },
     neobrutalist: {
         ...exports.DEFAULT_TOKENS,
         colorPrimary: '#ffe600',
+        colorTextOnPrimary: (0, contrast_1.textOnPrimary)('#ffe600'),
+        colorFocusRing: '#000000',
         colorText: '#000000',
         colorBackground: '#ffffff',
         colorBorder: '#000000',
@@ -78,6 +86,13 @@ exports.THEMES = {
  * Later wins, and `undefined` never overwrites. A customer setting one variable
  * on the dark theme expects the other eleven to stay dark, not silently revert
  * to the light defaults.
+ *
+ * `colorTextOnPrimary` and `colorFocusRing` follow the RESOLVED `colorPrimary`
+ * unless set explicitly in `variables` (a theme's own values are for its own
+ * primary): the label flips to whichever of white / near-black contrasts more,
+ * and the focus ring takes the primary. A base theme whose primary would make a
+ * poor ring on its own background (neobrutalist yellow on white) keeps its ring
+ * while its primary is unchanged.
  */
 function resolveTokens(appearance) {
     const base = appearance?.baseTheme ? exports.THEMES[appearance.baseTheme] : exports.DEFAULT_TOKENS;
@@ -87,6 +102,13 @@ function resolveTokens(appearance) {
         if (value !== undefined)
             resolved[key] = value;
     }
+    const primaryChanged = resolved.colorPrimary !== base.colorPrimary;
+    if (overrides.colorTextOnPrimary === undefined) {
+        resolved.colorTextOnPrimary = (0, contrast_1.textOnPrimary)(resolved.colorPrimary);
+    }
+    if (overrides.colorFocusRing === undefined && primaryChanged) {
+        resolved.colorFocusRing = resolved.colorPrimary;
+    }
     return resolved;
 }
 /** Tokens as CSS custom properties, for the host DOM to inherit. */
@@ -136,11 +158,44 @@ function explicitTokens(appearance) {
  * variables inline, no stylesheet, no attributes.
  */
 function renderAppearance(appearance, instanceDesign, options = {}) {
-    return (0, runtime_1.renderDesignAppearance)(appearance, instanceDesign, {
+    const out = (0, runtime_1.renderDesignAppearance)(appearance, instanceDesign, {
         tokens: explicitTokens(appearance),
         legacyStyle: () => cssVariables(resolveTokens(appearance)),
         frontendApi: options.frontendApi,
         warn: options.warn,
     });
+    if (!out.attributes['data-atlas-design'])
+        return out;
+    return { ...out, style: { ...out.style, ...designAccessibilityVariables(appearance, options.warn ?? runtime_1.warnOnce) } };
+}
+/** Characters an inline token may never contain (mirrors the design system's raw-token guard). */
+const UNSAFE_INLINE = /[;{}<>\\]|\/\*|url\s*\(|expression\s*\(|@import|javascript:/i;
+/**
+ * With a design active, the design supplies the primary ink and the focus ring,
+ * and the token defaults are not emitted. An EXPLICIT `colorTextOnPrimary` /
+ * `colorFocusRing` in `variables` still wins: they go inline on the root. The
+ * ring also sets `--atlas-focus-outline-color`, which the design-mode focus
+ * outline reads before falling back to the (solid) primary — the design's own
+ * `--atlas-color-focus-ring` is translucent, a glow colour, not an outline one.
+ */
+function designAccessibilityVariables(appearance, warn) {
+    const vars = {};
+    const safe = (key, value) => {
+        if (value === undefined)
+            return false;
+        if (typeof value === 'string' && value.length <= 200 && !UNSAFE_INLINE.test(value))
+            return true;
+        warn(`appearance.variables.${key} is not a safe CSS value; ignored.`);
+        return false;
+    };
+    const ink = appearance?.variables?.colorTextOnPrimary;
+    if (safe('colorTextOnPrimary', ink))
+        vars['--atlas-color-text-on-primary'] = ink;
+    const ring = appearance?.variables?.colorFocusRing;
+    if (safe('colorFocusRing', ring)) {
+        vars['--atlas-color-focus-ring'] = ring;
+        vars['--atlas-focus-outline-color'] = ring;
+    }
+    return vars;
 }
 //# sourceMappingURL=appearance.js.map

package/dist/appearance.js.map

@@ -1 +1 @@
-{"version":3,"file":"appearance.js","sourceRoot":"","sources":["../src/appearance.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AAgLH,sCASC;AAGD,oCAOC;AASD,4BAOC;AASD,wCASC;AAWD,4CAWC;AAzPD,uDAOmC;AAEnC,qDAAyE;AAAhE,6GAAA,kBAAkB,OAAA;AAAE,mGAAA,QAAQ,OAAA;AAgFrC,gDAAgD;AACnC,QAAA,YAAY,GAA0B;IACjD,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB;IAC9F,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,cAAc;IAC9F,kBAAkB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY;IACjG,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe;IACjG,aAAa,EAAE,cAAc,EAAE,OAAO;CACvC,CAAC;AAkCW,QAAA,cAAc,GAA2B;IACpD,YAAY,EAAE,SAAS;IACvB,SAAS,EAAE,SAAS;IACpB,eAAe,EAAE,SAAS;IAC1B,WAAW,EAAE,SAAS;IACtB,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,iEAAiE;IAC7E,WAAW,EAAE,KAAK;CACnB,CAAC;AAEF;;;;;GAKG;AACU,QAAA,MAAM,GAAG;IACpB,OAAO,EAAE,sBAAc;IACvB,IAAI,EAAE;QACJ,GAAG,sBAAc;QACjB,SAAS,EAAE,SAAS;QACpB,eAAe,EAAE,SAAS;QAC1B,WAAW,EAAE,SAAS;QACtB,YAAY,EAAE,SAAS;KACxB;IACD,YAAY,EAAE;QACZ,GAAG,sBAAc;QACjB,YAAY,EAAE,SAAS;QACvB,SAAS,EAAE,SAAS;QACpB,eAAe,EAAE,SAAS;QAC1B,WAAW,EAAE,SAAS;QACtB,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,wCAAwC;KACrD;CACwD,CAAC;AAE5D;;;;;;GAMG;AACH,SAAgB,aAAa,CAAC,UAAuB;IACnD,MAAM,IAAI,GAAG,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,cAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,sBAAc,CAAC;IACnF,MAAM,SAAS,GAAG,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC;IAE9C,MAAM,QAAQ,GAAG,EAAE,GAAG,sBAAc,EAAE,GAAG,IAAI,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAyB,CAAC,GAAG,KAAK,CAAC;IACvE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,SAAgB,YAAY,CAAC,MAA8B;IACzD,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,0EAA0E;QAC1E,IAAI,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,QAAQ,CACtB,OAAmB,EACnB,UAAkC,EAClC,IAAY;IAEZ,MAAM,QAAQ,GAAG,UAAU,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,mFAAmF;AAEnF;;;;GAIG;AACH,SAAgB,cAAc,CAAC,UAAuB;IACpD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,IAAI,UAAU,EAAE,SAAS,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QACvE,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAyB,CAAC,GAAG,KAAK,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAC9B,UAAkC,EAClC,cAAiD,EACjD,UAAuD,EAAE;IAEzD,OAAO,IAAA,gCAAsB,EAAC,UAAU,EAAE,cAAc,EAAE;QACxD,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC;QAClC,WAAW,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1D,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"appearance.js","sourceRoot":"","sources":["../src/appearance.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG;;;AA8MH,sCAgBC;AAGD,oCAOC;AASD,4BAOC;AASD,wCASC;AAWD,4CAaC;AAhSD,uDAQmC;AACnC,yCAA2C;AAE3C,qDAAyE;AAAhE,6GAAA,kBAAkB,OAAA;AAAE,mGAAA,QAAQ,OAAA;AA8FrC,gDAAgD;AACnC,QAAA,YAAY,GAA0B;IACjD,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,gBAAgB,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB;IAC9F,gBAAgB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,cAAc;IAC9F,kBAAkB,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY;IACjG,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe;IACjG,aAAa,EAAE,cAAc,EAAE,OAAO;CACvC,CAAC;AAkCW,QAAA,cAAc,GAA2B;IACpD,YAAY,EAAE,SAAS;IACvB,SAAS,EAAE,SAAS;IACpB,eAAe,EAAE,SAAS;IAC1B,WAAW,EAAE,SAAS;IACtB,WAAW,EAAE,SAAS;IACtB,YAAY,EAAE,KAAK;IACnB,UAAU,EAAE,iEAAiE;IAC7E,WAAW,EAAE,KAAK;IAClB,yEAAyE;IACzE,kBAAkB,EAAE,SAAS;IAC7B,cAAc,EAAE,SAAS;CAC1B,CAAC;AAEF;;;;;GAKG;AACU,QAAA,MAAM,GAAG;IACpB,OAAO,EAAE,sBAAc;IACvB,IAAI,EAAE;QACJ,GAAG,sBAAc;QACjB,SAAS,EAAE,SAAS;QACpB,eAAe,EAAE,SAAS;QAC1B,WAAW,EAAE,SAAS;QACtB,YAAY,EAAE,SAAS;QACvB,kBAAkB,EAAE,IAAA,wBAAa,EAAC,SAAS,CAAC;QAC5C,cAAc,EAAE,SAAS;KAC1B;IACD,YAAY,EAAE;QACZ,GAAG,sBAAc;QACjB,YAAY,EAAE,SAAS;QACvB,kBAAkB,EAAE,IAAA,wBAAa,EAAC,SAAS,CAAC;QAC5C,cAAc,EAAE,SAAS;QACzB,SAAS,EAAE,SAAS;QACpB,eAAe,EAAE,SAAS;QAC1B,WAAW,EAAE,SAAS;QACtB,YAAY,EAAE,KAAK;QACnB,UAAU,EAAE,wCAAwC;KACrD;CACwD,CAAC;AAE5D;;;;;;;;;;;;;GAaG;AACH,SAAgB,aAAa,CAAC,UAAuB;IACnD,MAAM,IAAI,GAAG,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,cAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,sBAAc,CAAC;IACnF,MAAM,SAAS,GAAG,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC;IAE9C,MAAM,QAAQ,GAAG,EAAE,GAAG,sBAAc,EAAE,GAAG,IAAI,EAAE,CAAC;IAChD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAyB,CAAC,GAAG,KAAK,CAAC;IACvE,CAAC;IACD,MAAM,cAAc,GAAG,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC;IACnE,IAAI,SAAS,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;QAC/C,QAAQ,CAAC,kBAAkB,GAAG,IAAA,wBAAa,EAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,SAAS,CAAC,cAAc,KAAK,SAAS,IAAI,cAAc,EAAE,CAAC;QAC7D,QAAQ,CAAC,cAAc,GAAG,QAAQ,CAAC,YAAY,CAAC;IAClD,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oEAAoE;AACpE,SAAgB,YAAY,CAAC,MAA8B;IACzD,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,0EAA0E;QAC1E,IAAI,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,QAAQ,CACtB,OAAmB,EACnB,UAAkC,EAClC,IAAY;IAEZ,MAAM,QAAQ,GAAG,UAAU,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACjD,CAAC;AAED,mFAAmF;AAEnF;;;;GAIG;AACH,SAAgB,cAAc,CAAC,UAAuB;IACpD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,IAAI,UAAU,EAAE,SAAS,IAAI,UAAU,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,cAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;IACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QACvE,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAyB,CAAC,GAAG,KAAK,CAAC;IAClE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,gBAAgB,CAC9B,UAAkC,EAClC,cAAiD,EACjD,UAAuD,EAAE;IAEzD,MAAM,GAAG,GAAG,IAAA,gCAAsB,EAAC,UAAU,EAAE,cAAc,EAAE;QAC7D,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC;QAClC,WAAW,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1D,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAAE,OAAO,GAAG,CAAC;IACrD,OAAO,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,EAAE,GAAG,4BAA4B,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,IAAI,kBAAQ,CAAC,EAAE,EAAE,CAAC;AACpH,CAAC;AAED,kGAAkG;AAClG,MAAM,aAAa,GAAG,8DAA8D,CAAC;AAErF;;;;;;;GAOG;AACH,SAAS,4BAA4B,CAAC,UAAkC,EAAE,IAAgB;IACxF,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,GAAuB,EAAE,KAAyB,EAAmB,EAAE;QACnF,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAChG,IAAI,CAAC,wBAAwB,GAAG,oCAAoC,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,GAAG,GAAG,UAAU,EAAE,SAAS,EAAE,kBAAkB,CAAC;IACtD,IAAI,IAAI,CAAC,oBAAoB,EAAE,GAAG,CAAC;QAAE,IAAI,CAAC,+BAA+B,CAAC,GAAG,GAAG,CAAC;IACjF,MAAM,IAAI,GAAG,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC;IACnD,IAAI,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,0BAA0B,CAAC,GAAG,IAAI,CAAC;QACxC,IAAI,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/captcha.d.ts

@@ -0,0 +1,43 @@
+import { type FlowCaptcha } from '@atlasauth/js';
+/**
+ * The captcha half of the prebuilt `<SignIn>`/`<SignUp>`.
+ *
+ * Driven entirely by the instance's settings (`captchaFlows` from
+ * `/v1/appearance`), so switching captcha on in the dashboard makes the
+ * components render it with no code change. The widget itself is the shared
+ * `@atlasauth/js` renderer the embed widget also uses.
+ *
+ * Lifecycle: a visible/managed widget is drawn as soon as its slot mounts, so
+ * the user can solve it while filling in the form; an invisible one is executed
+ * only when the form is submitted. Tokens are single-use, so after a submit
+ * spent one the caller `reset()`s, which draws a fresh widget.
+ */
+export interface CaptchaController {
+    /** Whether this flow renders a widget at all. */
+    needed: boolean;
+    /** Callback ref for the element the widget draws into. */
+    slotRef: (el: HTMLDivElement | null) => void;
+    /** The solved token, rendering/executing the widget first if needed. Null when
+     *  no captcha is needed, or the provider failed (the server then refuses with
+     *  CAPTCHA_REQUIRED, which the caller turns into a message). */
+    getToken(): Promise<string | null>;
+    /** Drop the (spent) widget and, for a visible one, draw a fresh one. */
+    reset(): void;
+}
+export declare function useCaptcha(flow: FlowCaptcha | undefined, options: {
+    /** Render at all — the caller's "this flow requires a token here" decision. */
+    active: boolean;
+    /** Draw the widget as soon as the slot mounts. Default: unless invisible. */
+    eager?: boolean;
+    /** Called with the token when an eagerly drawn widget is solved. */
+    onSolved?: (token: string) => void;
+}): CaptchaController;
+/** The element the widget draws into. Empty until the provider renders. */
+export declare function CaptchaSlot({ controller }: {
+    controller: CaptchaController;
+}): import("react").JSX.Element | null;
+/**
+ * Swap the server's captcha refusals (CAPTCHA_REQUIRED / CAPTCHA_FAILED) for a
+ * localized, form-level message. Shared with the other framework SDKs.
+ */
+export { localizeCaptchaErrors } from '@atlasauth/js';