@authrim/sveltekit 0.1.0

package/dist/client.js

@@ -0,0 +1,411 @@
+/**
+ * Authrim Svelte SDK Main Entry Point
+ */
+import { authResultToResponse, wrapWithAuthResponse, success, } from "./utils/response.js";
+import { PasskeyAuthImpl } from "./direct-auth/passkey.js";
+import { EmailCodeAuthImpl } from "./direct-auth/email-code.js";
+import { SocialAuthImpl } from "./direct-auth/social.js";
+import { SessionAuthImpl } from "./direct-auth/session.js";
+import { ConsentApiImpl } from "./direct-auth/consent.js";
+import { DeviceFlowApiImpl } from "./direct-auth/device-flow.js";
+import { CIBAApiImpl } from "./direct-auth/ciba.js";
+import { LoginChallengeApiImpl } from "./direct-auth/login-challenge.js";
+import { BrowserHttpClient } from "./providers/http.js";
+import { BrowserCryptoProvider } from "./providers/crypto.js";
+import { createBrowserStorage, } from "./providers/storage.js";
+import { createAuthStores, toAuthError, } from "./stores/auth.js";
+/**
+ * Event emitter for auth events
+ */
+class AuthEventEmitter {
+    handlers = new Map();
+    on(event, handler) {
+        if (!this.handlers.has(event)) {
+            this.handlers.set(event, new Set());
+        }
+        this.handlers.get(event).add(handler);
+        return () => {
+            this.handlers
+                .get(event)
+                ?.delete(handler);
+        };
+    }
+    emit(event, payload) {
+        const eventHandlers = this.handlers.get(event);
+        if (eventHandlers) {
+            for (const handler of eventHandlers) {
+                try {
+                    handler(payload);
+                }
+                catch (error) {
+                    console.error(`Error in event handler for ${event}:`, error);
+                }
+            }
+        }
+    }
+}
+/**
+ * Create Authrim client for Svelte
+ *
+ * @example
+ * ```typescript
+ * import { createAuthrim } from '@authrim/sveltekit';
+ *
+ * const auth = await createAuthrim({
+ *   issuer: 'https://auth.example.com',
+ *   clientId: 'your-client-id',
+ * });
+ *
+ * // Passkey login
+ * const { data, error } = await auth.passkey.login();
+ *
+ * // Reactive stores
+ * const { session, user, isAuthenticated } = auth.stores;
+ * ```
+ */
+export async function createAuthrim(config) {
+    // Initialize providers
+    const http = new BrowserHttpClient();
+    const crypto = new BrowserCryptoProvider();
+    const storageOptions = config.storage ?? {};
+    const storage = createBrowserStorage(storageOptions);
+    // Initialize event emitter
+    const emitter = new AuthEventEmitter();
+    // Initialize stores
+    const internalStores = createAuthStores();
+    // Create session manager
+    const sessionManager = new SessionAuthImpl({
+        issuer: config.issuer,
+        clientId: config.clientId,
+        http,
+    });
+    // Token exchange callback
+    const exchangeToken = async (authCode, codeVerifier) => {
+        return sessionManager.exchangeToken(authCode, codeVerifier);
+    };
+    // Create Direct Auth implementations
+    const passkeyImpl = new PasskeyAuthImpl({
+        issuer: config.issuer,
+        clientId: config.clientId,
+        http,
+        crypto,
+        exchangeToken,
+    });
+    const emailCodeImpl = new EmailCodeAuthImpl({
+        issuer: config.issuer,
+        clientId: config.clientId,
+        http,
+        crypto,
+        exchangeToken,
+    });
+    const socialImpl = new SocialAuthImpl({
+        issuer: config.issuer,
+        clientId: config.clientId,
+        crypto,
+        storage,
+        exchangeToken,
+    });
+    // ==========================================================================
+    // Store updater helpers (イベント→Store の projection)
+    // ==========================================================================
+    function updateStoresOnLogin(session, user) {
+        internalStores._session.set(session);
+        internalStores._user.set(user);
+        internalStores._loadingState.set("idle");
+        internalStores._error.set(null);
+    }
+    function updateStoresOnLogout() {
+        internalStores._session.set(null);
+        internalStores._user.set(null);
+        internalStores._loadingState.set("idle");
+        internalStores._error.set(null);
+    }
+    function updateStoresOnError(error) {
+        if (error) {
+            internalStores._error.set(toAuthError(error));
+        }
+        internalStores._loadingState.set("idle");
+    }
+    function setLoadingState(state) {
+        internalStores._loadingState.set(state);
+    }
+    // ==========================================================================
+    // Event→Store projection
+    // ==========================================================================
+    emitter.on("auth:login", (payload) => {
+        updateStoresOnLogin(payload.session, payload.user);
+    });
+    emitter.on("auth:logout", () => {
+        updateStoresOnLogout();
+    });
+    emitter.on("auth:error", (payload) => {
+        updateStoresOnError(payload.error);
+    });
+    emitter.on("session:changed", (payload) => {
+        internalStores._session.set(payload.session);
+        internalStores._user.set(payload.user);
+    });
+    // ==========================================================================
+    // Passkey Namespace
+    // ==========================================================================
+    const passkey = {
+        async login(options) {
+            setLoadingState("authenticating");
+            const result = await passkeyImpl.login(options);
+            const response = authResultToResponse(result);
+            if (response.data) {
+                emitter.emit("auth:login", {
+                    session: response.data.session,
+                    user: response.data.user,
+                    method: "passkey",
+                });
+            }
+            else if (response.error) {
+                emitter.emit("auth:error", { error: response.error });
+            }
+            return response;
+        },
+        async signUp(options) {
+            setLoadingState("authenticating");
+            const result = await passkeyImpl.signUp(options);
+            const response = authResultToResponse(result);
+            if (response.data) {
+                emitter.emit("auth:login", {
+                    session: response.data.session,
+                    user: response.data.user,
+                    method: "passkey",
+                });
+            }
+            else if (response.error) {
+                emitter.emit("auth:error", { error: response.error });
+            }
+            return response;
+        },
+        async register(options) {
+            return wrapWithAuthResponse(() => passkeyImpl.register(options), "AR003000");
+        },
+        isSupported() {
+            return passkeyImpl.isSupported();
+        },
+        isConditionalUIAvailable() {
+            return passkeyImpl.isConditionalUIAvailable();
+        },
+        cancelConditionalUI() {
+            passkeyImpl.cancelConditionalUI();
+        },
+    };
+    // ==========================================================================
+    // Email Code Namespace
+    // ==========================================================================
+    const emailCode = {
+        async send(email, options) {
+            return wrapWithAuthResponse(async () => emailCodeImpl.send(email, options), "AR002000");
+        },
+        async verify(email, code, options) {
+            setLoadingState("authenticating");
+            const result = await emailCodeImpl.verify(email, code, options);
+            const response = authResultToResponse(result);
+            if (response.data) {
+                emitter.emit("auth:login", {
+                    session: response.data.session,
+                    user: response.data.user,
+                    method: "emailCode",
+                });
+            }
+            else if (response.error) {
+                emitter.emit("auth:error", { error: response.error });
+            }
+            return response;
+        },
+        hasPendingVerification(email) {
+            return emailCodeImpl.hasPendingVerification(email);
+        },
+        getRemainingTime(email) {
+            return emailCodeImpl.getRemainingTime(email);
+        },
+        clearPendingVerification(email) {
+            emailCodeImpl.clearPendingVerification(email);
+        },
+    };
+    // ==========================================================================
+    // Social Namespace
+    // ==========================================================================
+    const social = {
+        async loginWithPopup(provider, options) {
+            setLoadingState("authenticating");
+            const result = await socialImpl.loginWithPopup(provider, options);
+            const response = authResultToResponse(result);
+            if (response.data) {
+                emitter.emit("auth:login", {
+                    session: response.data.session,
+                    user: response.data.user,
+                    method: "social",
+                });
+            }
+            else if (response.error) {
+                emitter.emit("auth:error", { error: response.error });
+            }
+            return response;
+        },
+        async loginWithRedirect(provider, options) {
+            setLoadingState("authenticating");
+            await socialImpl.loginWithRedirect(provider, options);
+        },
+        async handleCallback() {
+            setLoadingState("authenticating");
+            const result = await socialImpl.handleCallback();
+            const response = authResultToResponse(result);
+            if (response.data) {
+                emitter.emit("auth:login", {
+                    session: response.data.session,
+                    user: response.data.user,
+                    method: "social",
+                });
+            }
+            else if (response.error) {
+                emitter.emit("auth:error", { error: response.error });
+            }
+            return response;
+        },
+        hasCallbackParams() {
+            return socialImpl.hasCallbackParams();
+        },
+        getSupportedProviders() {
+            return socialImpl.getSupportedProviders();
+        },
+    };
+    // ==========================================================================
+    // Session Namespace
+    // ==========================================================================
+    const session = {
+        async get() {
+            const sessionData = await sessionManager.get();
+            if (!sessionData) {
+                return success(null);
+            }
+            const user = await sessionManager.getUser();
+            if (!user) {
+                return success(null);
+            }
+            // Update stores with fetched session
+            internalStores._session.set(sessionData);
+            internalStores._user.set(user);
+            return success({
+                session: sessionData,
+                user,
+            });
+        },
+        validate() {
+            return sessionManager.validate();
+        },
+        getUser() {
+            return sessionManager.getUser();
+        },
+        async refresh() {
+            setLoadingState("refreshing");
+            const result = await sessionManager.refresh();
+            internalStores._loadingState.set("idle");
+            return result;
+        },
+        isAuthenticated() {
+            return sessionManager.isAuthenticated();
+        },
+        clearCache() {
+            sessionManager.clearCache();
+        },
+    };
+    // ==========================================================================
+    // Flow API Implementations (Consent, Device Flow, CIBA, Login Challenge)
+    // ==========================================================================
+    const consentImpl = new ConsentApiImpl({ issuer: config.issuer, http });
+    const deviceFlowImpl = new DeviceFlowApiImpl({ issuer: config.issuer, http });
+    const cibaImpl = new CIBAApiImpl({ issuer: config.issuer, http });
+    const loginChallengeImpl = new LoginChallengeApiImpl({
+        issuer: config.issuer,
+        http,
+    });
+    const consent = {
+        getData: (challengeId) => consentImpl.getData(challengeId),
+        submit: (challengeId, options) => consentImpl.submit(challengeId, options),
+    };
+    const deviceFlow = {
+        submit: (userCode, approve) => deviceFlowImpl.submit(userCode, approve),
+    };
+    const ciba = {
+        getData: (loginHint) => cibaImpl.getData(loginHint),
+        approve: (authReqId, userId, sub) => cibaImpl.approve(authReqId, userId, sub),
+        reject: (authReqId, reason) => cibaImpl.reject(authReqId, reason),
+    };
+    const loginChallenge = {
+        getData: (challengeId) => loginChallengeImpl.getData(challengeId),
+    };
+    // ==========================================================================
+    // Sign Out
+    // ==========================================================================
+    async function signOut(options) {
+        setLoadingState("signing_out");
+        await sessionManager.logout(options);
+        emitter.emit("auth:logout", { redirectUri: options?.redirectUri });
+    }
+    // ==========================================================================
+    // Event System
+    // ==========================================================================
+    function on(event, handler) {
+        return emitter.on(event, handler);
+    }
+    // ==========================================================================
+    // Stores
+    // ==========================================================================
+    const stores = internalStores.public;
+    // ==========================================================================
+    // SSR Sync (internal API for AuthProvider)
+    // ==========================================================================
+    /**
+     * Sync session and user from SSR data directly to stores.
+     * This is used by AuthProvider to avoid hydration mismatch.
+     * @internal
+     */
+    function _syncFromSSR(session, user) {
+        internalStores._session.set(session);
+        internalStores._user.set(user);
+    }
+    // ==========================================================================
+    // Destroy (cleanup resources)
+    // ==========================================================================
+    /**
+     * Cleanup resources (event listeners, timers, etc.)
+     * IMPORTANT: If not using AuthProvider, you must call this method
+     * manually when the auth client is no longer needed.
+     */
+    function destroy() {
+        // Cleanup social auth (message event listener)
+        socialImpl.destroy();
+        // Cleanup email code auth (cleanup timer)
+        emailCodeImpl.destroy();
+    }
+    // ==========================================================================
+    // Return client
+    // ==========================================================================
+    return {
+        passkey,
+        emailCode,
+        social,
+        session,
+        consent,
+        deviceFlow,
+        ciba,
+        loginChallenge,
+        signIn: {
+            passkey: (options) => passkey.login(options),
+            social: (provider, options) => social.loginWithPopup(provider, options),
+        },
+        signUp: {
+            passkey: (options) => passkey.signUp(options),
+        },
+        signOut,
+        on,
+        stores,
+        _syncFromSSR,
+        destroy,
+    };
+}

package/dist/components/AuthProvider.svelte

@@ -0,0 +1,56 @@
+<!--
+  AuthProvider Component
+
+  Responsibilities (strictly limited):
+  - Wire auth instance into Svelte context
+  - Sync initial session from SSR (synchronously to avoid hydration mismatch)
+
+  It must NOT implement business logic.
+-->
+<script lang="ts">
+  import { onMount, onDestroy } from 'svelte';
+  import { setAuthContext } from '../utils/context.js';
+  import type { AuthrimClient } from '../types.js';
+  import type { Session, User } from '@authrim/core';
+
+  /** Authrim client instance */
+  export let auth: AuthrimClient;
+
+  /** Initial session from SSR (optional) */
+  export let initialSession: Session | null = null;
+
+  /** Initial user from SSR (optional) */
+  export let initialUser: User | null = null;
+
+  // Set auth context for child components
+  setAuthContext(auth);
+
+  // Sync initial session from SSR synchronously to avoid hydration mismatch
+  // This must happen before the first render
+  if (initialSession && initialUser) {
+    auth._syncFromSSR(initialSession, initialUser);
+  }
+
+  // Optionally validate session in the background after hydration
+  onMount(() => {
+    if (initialSession && initialUser) {
+      // Session already synced above, optionally revalidate in background
+      // This ensures the session is still valid on the server
+      auth.session.get().catch((error) => {
+        console.warn('[Authrim] Failed to revalidate session:', error);
+      });
+    } else if (!initialSession && !initialUser) {
+      // No SSR session provided, check if there's a session in storage
+      auth.session.get().catch((error) => {
+        console.warn('[Authrim] Failed to fetch session:', error);
+      });
+    }
+  });
+
+  // Cleanup on destroy
+  onDestroy(() => {
+    auth.destroy();
+  });
+</script>
+
+<slot />

package/dist/components/AuthProvider.svelte.d.ts

@@ -0,0 +1,34 @@
+import type { AuthrimClient } from '../types.js';
+import type { Session, User } from '@authrim/core';
+interface $$__sveltets_2_IsomorphicComponent<Props extends Record<string, any> = any, Events extends Record<string, any> = any, Slots extends Record<string, any> = any, Exports = {}, Bindings = string> {
+    new (options: import('svelte').ComponentConstructorOptions<Props>): import('svelte').SvelteComponent<Props, Events, Slots> & {
+        $$bindings?: Bindings;
+    } & Exports;
+    (internal: unknown, props: Props & {
+        $$events?: Events;
+        $$slots?: Slots;
+    }): Exports & {
+        $set?: any;
+        $on?: any;
+    };
+    z_$$bindings?: Bindings;
+}
+type $$__sveltets_2_PropsWithChildren<Props, Slots> = Props & (Slots extends {
+    default: any;
+} ? Props extends Record<string, never> ? any : {
+    children?: any;
+} : {});
+declare const AuthProvider: $$__sveltets_2_IsomorphicComponent<$$__sveltets_2_PropsWithChildren<{
+    /** Authrim client instance */ auth: AuthrimClient;
+    /** Initial session from SSR (optional) */ initialSession?: Session | null;
+    /** Initial user from SSR (optional) */ initialUser?: User | null;
+}, {
+    default: {};
+}>, {
+    [evt: string]: CustomEvent<any>;
+}, {
+    default: {};
+}, {}, string>;
+type AuthProvider = InstanceType<typeof AuthProvider>;
+export default AuthProvider;
+//# sourceMappingURL=AuthProvider.svelte.d.ts.map

package/dist/components/AuthProvider.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthProvider.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/AuthProvider.svelte.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAwDnD,UAAU,kCAAkC,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,OAAO,GAAG,EAAE,EAAE,QAAQ,GAAG,MAAM;IACpM,KAAK,OAAO,EAAE,OAAO,QAAQ,EAAE,2BAA2B,CAAC,KAAK,CAAC,GAAG,OAAO,QAAQ,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG;QAAE,UAAU,CAAC,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC;IACjK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,GAAG;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,KAAK,CAAA;KAAC,GAAG,OAAO,GAAG;QAAE,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,GAAG,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IAC9G,YAAY,CAAC,EAAE,QAAQ,CAAC;CAC3B;AACD,KAAK,gCAAgC,CAAC,KAAK,EAAE,KAAK,IAAI,KAAK,GACvD,CAAC,KAAK,SAAS;IAAE,OAAO,EAAE,GAAG,CAAA;CAAE,GACzB,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GACnC,GAAG,GACH;IAAE,QAAQ,CAAC,EAAE,GAAG,CAAA;CAAE,GAClB,EAAE,CAAC,CAAC;AAId,QAAA,MAAM,YAAY;IAjBlB,8BAA8B,OAAM,aAAa;IACjD,0CAA0C,kBAAiB,OAAO,GAAG,IAAI;IACzE,uCAAuC,eAAc,IAAI,GAAG,IAAI;;;;;;;cAeuC,CAAC;AACtF,KAAK,YAAY,GAAG,YAAY,CAAC,OAAO,YAAY,CAAC,CAAC;AACxD,eAAe,YAAY,CAAC"}

package/dist/components/ProtectedRoute.svelte

@@ -0,0 +1,71 @@
+<!--
+  ProtectedRoute Component
+
+  Shows content only when user is authenticated.
+  Redirects or shows fallback when not authenticated.
+-->
+<script lang="ts">
+  import { onMount, tick } from 'svelte';
+  import { goto } from '$app/navigation';
+  import { getAuthContext } from '../utils/context.js';
+
+  /** Redirect URL for unauthenticated users (if not provided, shows fallback) */
+  export let redirectTo: string | undefined = undefined;
+
+  /** Include current path in redirect URL */
+  export let includeReturnPath: boolean = true;
+
+  /** Return path parameter name */
+  export let returnPathParam: string = 'redirectTo';
+
+  /** Custom class */
+  let className: string = '';
+  export { className as class };
+
+  const auth = getAuthContext();
+  const { isAuthenticated, loadingState } = auth.stores;
+
+  // State machine: 'loading' -> 'ready'
+  // Prevents race condition where redirect happens before session check completes
+  let state: 'loading' | 'ready' = 'loading';
+
+  onMount(async () => {
+    try {
+      // Check session on mount
+      await auth.session.get();
+    } catch (error) {
+      console.warn('[Authrim] Failed to check session:', error);
+    } finally {
+      // Wait for stores to update before changing state
+      await tick();
+      state = 'ready';
+    }
+  });
+
+  // Only perform redirect when:
+  // 1. Component has finished initialization (state === 'ready')
+  // 2. User is not authenticated
+  // 3. No async operation is in progress (loadingState === 'idle')
+  // 4. A redirect URL is configured
+  $: if (state === 'ready' && !$isAuthenticated && $loadingState === 'idle' && redirectTo) {
+    const url = new URL(redirectTo, window.location.origin);
+    if (includeReturnPath) {
+      url.searchParams.set(returnPathParam, window.location.pathname + window.location.search);
+    }
+    goto(url.toString());
+  }
+</script>
+
+{#if state === 'loading' || $loadingState === 'initializing'}
+  <slot name="loading">
+    <div class={className} {...$$restProps}>Loading...</div>
+  </slot>
+{:else if $isAuthenticated}
+  <slot />
+{:else if !redirectTo}
+  <slot name="unauthenticated">
+    <div class={className} {...$$restProps}>
+      <p>You must be signed in to view this content.</p>
+    </div>
+  </slot>
+{/if}

package/dist/components/ProtectedRoute.svelte.d.ts

@@ -0,0 +1,38 @@
+interface $$__sveltets_2_IsomorphicComponent<Props extends Record<string, any> = any, Events extends Record<string, any> = any, Slots extends Record<string, any> = any, Exports = {}, Bindings = string> {
+    new (options: import('svelte').ComponentConstructorOptions<Props>): import('svelte').SvelteComponent<Props, Events, Slots> & {
+        $$bindings?: Bindings;
+    } & Exports;
+    (internal: unknown, props: Props & {
+        $$events?: Events;
+        $$slots?: Slots;
+    }): Exports & {
+        $set?: any;
+        $on?: any;
+    };
+    z_$$bindings?: Bindings;
+}
+type $$__sveltets_2_PropsWithChildren<Props, Slots> = Props & (Slots extends {
+    default: any;
+} ? Props extends Record<string, never> ? any : {
+    children?: any;
+} : {});
+declare const ProtectedRoute: $$__sveltets_2_IsomorphicComponent<$$__sveltets_2_PropsWithChildren<{
+    [x: string]: any;
+    redirectTo?: string | undefined | undefined;
+    includeReturnPath?: boolean | undefined;
+    returnPathParam?: string | undefined;
+    class?: string | undefined;
+}, {
+    loading: {};
+    default: {};
+    unauthenticated: {};
+}>, {
+    [evt: string]: CustomEvent<any>;
+}, {
+    loading: {};
+    default: {};
+    unauthenticated: {};
+}, {}, string>;
+type ProtectedRoute = InstanceType<typeof ProtectedRoute>;
+export default ProtectedRoute;
+//# sourceMappingURL=ProtectedRoute.svelte.d.ts.map

package/dist/components/ProtectedRoute.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ProtectedRoute.svelte.d.ts","sourceRoot":"","sources":["../../src/lib/components/ProtectedRoute.svelte.ts"],"names":[],"mappings":"AAgFA,UAAU,kCAAkC,CAAC,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,MAAM,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,GAAG,EAAE,OAAO,GAAG,EAAE,EAAE,QAAQ,GAAG,MAAM;IACpM,KAAK,OAAO,EAAE,OAAO,QAAQ,EAAE,2BAA2B,CAAC,KAAK,CAAC,GAAG,OAAO,QAAQ,EAAE,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG;QAAE,UAAU,CAAC,EAAE,QAAQ,CAAA;KAAE,GAAG,OAAO,CAAC;IACjK,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,GAAG;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,KAAK,CAAA;KAAC,GAAG,OAAO,GAAG;QAAE,IAAI,CAAC,EAAE,GAAG,CAAC;QAAC,GAAG,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC;IAC9G,YAAY,CAAC,EAAE,QAAQ,CAAC;CAC3B;AACD,KAAK,gCAAgC,CAAC,KAAK,EAAE,KAAK,IAAI,KAAK,GACvD,CAAC,KAAK,SAAS;IAAE,OAAO,EAAE,GAAG,CAAA;CAAE,GACzB,KAAK,SAAS,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GACnC,GAAG,GACH;IAAE,QAAQ,CAAC,EAAE,GAAG,CAAA;CAAE,GAClB,EAAE,CAAC,CAAC;AAId,QAAA,MAAM,cAAc;;iBAlBwE,MAAM,GAAG,SAAS;wBAC/C,OAAO;sBACnB,MAAM;YAC9B,MAAM;;;;;;;;;;;cAe+F,CAAC;AAC/G,KAAK,cAAc,GAAG,YAAY,CAAC,OAAO,cAAc,CAAC,CAAC;AAC5D,eAAe,cAAc,CAAC"}