@authticon/client 0.0.0-beta37 → 0.0.0-beta39

package/dist/session.js

@@ -0,0 +1,273 @@
+import { createAuthClient } from "./clients/auth.js";
+import { createUserClient } from "./clients/user.js";
+import { AuthticonError } from "./errors.js";
+import { createTokenStorage } from "./tokens.js";
+export const createSessionUser = (tokenPayload) => {
+    const { authticon, ...rest } = tokenPayload;
+    const { iat, exp, nbf, iss, sub, aud, jti, ...userPayload } = rest;
+    return {
+        id: authticon.userId,
+        sessionId: authticon.sessionId,
+        projectId: authticon.projectId,
+        role: authticon.role,
+        isGuest: authticon.role === "guest",
+        challenges: authticon.challenges,
+        payload: userPayload,
+        raw: tokenPayload,
+    };
+};
+export const createSession = async (deps, cookies, tokenStorageOptions) => {
+    const storage = createTokenStorage(cookies, tokenStorageOptions, deps.logger?.child({ authticon: "token-storage" }));
+    const { projectId, baseUrl, verifier, logger } = deps;
+    const authApi = createAuthClient({ projectId, baseUrl, logger });
+    let cachedUser = null;
+    const buildUserApi = () => {
+        const accessToken = storage.getAccessToken();
+        if (!accessToken) {
+            throw new AuthticonError("No access token available");
+        }
+        return createUserClient({ accessToken, baseUrl, logger });
+    };
+    const saveTokens = (tokens) => {
+        storage.setAccessToken(tokens.accessToken);
+        storage.setRefreshToken(tokens.refreshToken);
+        if (tokens.deviceId) {
+            storage.setDeviceId(tokens.deviceId);
+        }
+    };
+    const verifyAndBuildUser = async (token) => {
+        const accessToken = token ?? storage.getAccessToken();
+        if (!accessToken) {
+            throw new AuthticonError("No access token found");
+        }
+        const payload = await verifier.verifyToken(accessToken);
+        return createSessionUser(payload);
+    };
+    const tryRefresh = async () => {
+        const refreshToken = storage.getRefreshToken();
+        if (!refreshToken)
+            return null;
+        try {
+            const userApi = buildUserApi();
+            const result = await userApi.refresh(refreshToken);
+            if (result) {
+                storage.setAccessToken(result.accessToken);
+                storage.setRefreshToken(result.refreshToken);
+                return result.accessToken;
+            }
+            return null;
+        }
+        catch {
+            storage.clear();
+            return null;
+        }
+    };
+    const resolveUser = async () => {
+        const accessToken = storage.getAccessToken();
+        if (!accessToken)
+            return null;
+        try {
+            return await verifyAndBuildUser(accessToken);
+        }
+        catch {
+            const newToken = await tryRefresh();
+            if (!newToken)
+                return null;
+            return verifyAndBuildUser(newToken);
+        }
+    };
+    cachedUser = await resolveUser();
+    const login = async (params) => {
+        const result = await authApi.login(params);
+        if (!result)
+            throw new AuthticonError("Login failed: no response data");
+        saveTokens(result);
+        cachedUser = await verifyAndBuildUser(result.accessToken);
+        return cachedUser;
+    };
+    const register = async (params) => {
+        const result = await authApi.register(params);
+        if (!result)
+            throw new AuthticonError("Register failed: no response data");
+        return result;
+    };
+    const sendMagicLink = async (params) => {
+        await authApi.sendMagicLink(params);
+    };
+    const loginWithMagicLink = async (params) => {
+        const result = await authApi.verifyMagicLink(params);
+        if (!result)
+            throw new AuthticonError("Magic link verification failed");
+        if ("accessToken" in result) {
+            saveTokens(result);
+            cachedUser = await verifyAndBuildUser(result.accessToken);
+            return cachedUser;
+        }
+        throw new AuthticonError("2FA challenge required");
+    };
+    const forgotPassword = async (params) => {
+        await authApi.forgotPassword(params);
+    };
+    const verifyEmail = async (params) => {
+        await authApi.verifyEmail(params);
+    };
+    const createGuest = async (params) => {
+        const result = await authApi.createGuestUser(params);
+        if (!result)
+            throw new AuthticonError("Guest creation failed");
+        storage.setAccessToken(result.token);
+        cachedUser = await verifyAndBuildUser(result.token);
+        return cachedUser;
+    };
+    const acceptInvitation = async (params) => {
+        const result = await authApi.acceptInvitation(params);
+        if (!result)
+            throw new AuthticonError("Invitation acceptance failed");
+        saveTokens(result);
+        cachedUser = await verifyAndBuildUser(result.accessToken);
+        return cachedUser;
+    };
+    const resendConfirmation = async (params) => {
+        await authApi.resendConfirmation(params);
+    };
+    const getMe = async () => {
+        const userApi = buildUserApi();
+        return userApi.getMe();
+    };
+    const getUser = () => cachedUser;
+    const requireUser = () => {
+        if (!cachedUser)
+            throw new AuthticonError("User is not authenticated");
+        return cachedUser;
+    };
+    const getFirstChallenge = () => {
+        if (!cachedUser)
+            throw new AuthticonError("User is not authenticated");
+        return cachedUser.challenges[0];
+    };
+    const isLoggedIn = () => storage.getAccessToken() !== null;
+    const logout = async () => {
+        const refreshToken = storage.getRefreshToken();
+        if (refreshToken) {
+            try {
+                const userApi = buildUserApi();
+                await userApi.logout(refreshToken);
+            }
+            catch {
+                // Best-effort server-side logout
+            }
+        }
+        storage.clear();
+        cachedUser = null;
+    };
+    const refreshSession = async () => {
+        const newToken = await tryRefresh();
+        if (!newToken)
+            throw new AuthticonError("Token refresh failed");
+        cachedUser = await verifyAndBuildUser(newToken);
+    };
+    const changeEmail = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.changeEmail(params);
+    };
+    const changePassword = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.changePassword(params);
+    };
+    const setPassword = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.setPassword(params);
+    };
+    const changePhone = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.changePhone(params);
+    };
+    const verifyPhone = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.verifyPhone(params);
+    };
+    const getTwoFaSecret = async () => {
+        const userApi = buildUserApi();
+        const result = await userApi.getTwoFaSecret();
+        if (!result)
+            throw new AuthticonError("Failed to get 2FA secret");
+        return result;
+    };
+    const enableTwoFa = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.enableTwoFa(params);
+    };
+    const disableTwoFa = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.disableTwoFa(params);
+    };
+    const sendTwoFaCode = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.sendTwoFaCode(params);
+    };
+    const completeTwoFaChallenge = async (code, remember = false) => {
+        const userApi = buildUserApi();
+        const result = await userApi.verifyTwoFa({ code, remember });
+        if (!result)
+            throw new AuthticonError("2FA verification failed");
+        cachedUser = await resolveUser();
+        if (!cachedUser)
+            throw new AuthticonError("User is not authenticated");
+        return cachedUser;
+    };
+    const createInvitation = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.createInvitation(params);
+    };
+    const deleteInvitation = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.deleteInvitation(params);
+    };
+    const tokens = {
+        getAccessToken: () => storage.getAccessToken(),
+        getRefreshToken: () => storage.getRefreshToken(),
+        verify: async (token) => {
+            const accessToken = token ?? storage.getAccessToken();
+            if (!accessToken)
+                throw new AuthticonError("No access token found");
+            return verifier.verifyToken(accessToken);
+        },
+        clear: () => {
+            storage.clear();
+            cachedUser = null;
+        },
+    };
+    return {
+        getFirstChallenge,
+        getMe,
+        login,
+        register,
+        sendMagicLink,
+        loginWithMagicLink,
+        forgotPassword,
+        verifyEmail,
+        createGuest,
+        acceptInvitation,
+        resendConfirmation,
+        getUser,
+        requireUser,
+        hasSession: isLoggedIn,
+        logout,
+        refresh: refreshSession,
+        changeEmail,
+        changePassword,
+        setPassword,
+        changePhone,
+        verifyPhone,
+        getTwoFaSecret,
+        enableTwoFa,
+        disableTwoFa,
+        sendTwoFaCode,
+        completeTwoFaChallenge,
+        createInvitation,
+        deleteInvitation,
+        tokens,
+        cookies,
+    };
+};
+//# sourceMappingURL=session.js.map

package/dist/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../src/session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAsBrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAsB,MAAM,aAAa,CAAC;AAgBrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAG/B,YAAyC,EACnB,EAAE;IACxB,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,YAAY,CAAC;IAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;IAEnE,OAAO;QACL,EAAE,EAAE,SAAS,CAAC,MAAM;QACpB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,OAAO,EAAE,SAAS,CAAC,IAAI,KAAK,OAAO;QACnC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,OAAO,EAAE,WAAiC;QAC1C,GAAG,EAAE,YAAY;KAClB,CAAC;AACJ,CAAC,CAAC;AAKF,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,EAGhC,IAAuB,EACvB,OAAsB,EACtB,mBAAyC,EACzC,EAAE;IACF,MAAM,OAAO,GAAG,kBAAkB,CAChC,OAAO,EACP,mBAAmB,EACnB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CACnD,CAAC;IACF,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEtD,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAEjE,IAAI,UAAU,GAAgC,IAAI,CAAC;IAEnD,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,gBAAgB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,MAInB,EAAQ,EAAE;QACT,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,KAAc,EACiB,EAAE;QACjC,MAAM,WAAW,GAAG,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QACtD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,cAAc,CAAC,uBAAuB,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACxD,OAAO,iBAAiB,CAAU,OAAsC,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAA4B,EAAE;QACpD,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QAC/C,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACnD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC3C,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC7C,OAAO,MAAM,CAAC,WAAW,CAAC;YAC5B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,IAA0C,EAAE;QACnE,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAE9B,IAAI,CAAC;YACH,OAAO,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC;IAEF,UAAU,GAAG,MAAM,WAAW,EAAE,CAAC;IAEjC,MAAM,KAAK,GAAG,KAAK,EAAE,MAAyB,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;QACxE,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1D,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAA4B,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,mCAAmC,CAAC,CAAC;QAC3E,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,MAAiC,EAAE,EAAE;QAChE,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,MAAmC,EAAE,EAAE;QACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;QACxE,IAAI,aAAa,IAAI,MAAM,EAAE,CAAC;YAC5B,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1D,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,wBAAwB,CAAC,CAAC;IACrD,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,MAAkC,EAAE,EAAE;QAClE,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAAmC,EAAE,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,uBAAuB,CAAC,CAAC;QAC/D,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,MAAoC,EAAE,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,8BAA8B,CAAC,CAAC;QACtE,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1D,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,MAA2C,EAC3C,EAAE;QACF,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,IAAI,EAAE;QACvB,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAgC,EAAE,CAAC,UAAU,CAAC;IAE9D,MAAM,WAAW,GAAG,GAAyB,EAAE;QAC7C,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACvE,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,GAA0B,EAAE;QACpD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACvE,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,IAAI,CAAC;IAE3D,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QAC/C,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;gBAC/B,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAChE,UAAU,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,MAAkC,EAAE,EAAE;QAClE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,0BAA0B,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,MAAgC,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,MAAiC,EAAE,EAAE;QAChE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,sBAAsB,GAAG,KAAK,EAAE,IAAY,EAAE,QAAQ,GAAG,KAAK,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC,CAAC;QACjE,UAAU,GAAG,MAAM,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACvE,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,MAAoC,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,MAAoC,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG;QACb,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE;QAC9C,eAAe,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE;QAChD,MAAM,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAC/B,MAAM,WAAW,GAAG,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACtD,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,cAAc,CAAC,uBAAuB,CAAC,CAAC;YACpE,OAAO,QAAQ,CAAC,WAAW,CAAC,WAAW,CAEtC,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;KACF,CAAC;IAEF,OAAO;QACL,iBAAiB;QACjB,KAAK;QACL,KAAK;QACL,QAAQ;QACR,aAAa;QACb,kBAAkB;QAClB,cAAc;QACd,WAAW;QACX,WAAW;QACX,gBAAgB;QAChB,kBAAkB;QAClB,OAAO;QACP,WAAW;QACX,UAAU,EAAE,UAAU;QACtB,MAAM;QACN,OAAO,EAAE,cAAc;QACvB,WAAW;QACX,cAAc;QACd,WAAW;QACX,WAAW;QACX,WAAW;QACX,cAAc;QACd,WAAW;QACX,YAAY;QACZ,aAAa;QACb,sBAAsB;QACtB,gBAAgB;QAChB,gBAAgB;QAChB,MAAM;QACN,OAAO;KACR,CAAC;AACJ,CAAC,CAAC"}

package/dist/sessionClient.d.ts

@@ -0,0 +1,53 @@
+import type { Logger } from "pino";
+import type { AcceptInvitationData, ChangeEmailData, ChangePasswordData, ChangePhoneData, CreateGuestUserData, CreateInvitationData, DeleteInvitationData, DisableTwoFaData, EnableTwoFaData, ForgotPasswordData, LoginData, RegisterData, ResendEmailConfirmationData, SendMagicLinkData, SendTwoFaCodeData, SetPasswordData, VerifyEmailData, VerifyMagicLinkData, VerifyPhoneData } from "./clients/generated/types.gen.js";
+import { type TokenVerifier } from "./tokens.js";
+import type { AccessTokenPayload, Challenge, CookieAdapter, SessionUser, TokenStorageOptions } from "./types.js";
+export type SessionClientDeps = {
+    readonly projectId: string;
+    readonly baseUrl: string;
+    readonly verifier: TokenVerifier<any>;
+    readonly logger?: Logger;
+};
+export declare const createSessionUser: <Payload extends Record<string, any> = Record<string, any>>(tokenPayload: AccessTokenPayload<Payload>) => SessionUser<Payload>;
+export type SessionClient<Payload extends Record<string, any> = Record<string, any>> = Awaited<ReturnType<typeof createSessionClient<Payload>>>;
+export declare const createSessionClient: <Payload extends Record<string, any> = Record<string, any>>(deps: SessionClientDeps, cookies: CookieAdapter, tokenStorageOptions?: TokenStorageOptions) => Promise<{
+    getFirstChallenge: () => Challenge | undefined;
+    login: (params: LoginData["body"]) => Promise<SessionUser<Payload>>;
+    register: (params: RegisterData["body"]) => Promise<{
+        userId: string;
+    }>;
+    sendMagicLink: (params: SendMagicLinkData["body"]) => Promise<void>;
+    loginWithMagicLink: (params: VerifyMagicLinkData["body"]) => Promise<SessionUser<Payload>>;
+    forgotPassword: (params: ForgotPasswordData["body"]) => Promise<void>;
+    verifyEmail: (params: VerifyEmailData["body"]) => Promise<void>;
+    createGuest: (params: CreateGuestUserData["body"]) => Promise<SessionUser<Payload>>;
+    acceptInvitation: (params: AcceptInvitationData["body"]) => Promise<SessionUser<Payload>>;
+    resendConfirmation: (params: ResendEmailConfirmationData["body"]) => Promise<void>;
+    getUser: () => SessionUser<Payload> | null;
+    requireUser: () => SessionUser<Payload>;
+    hasSession: () => boolean;
+    logout: () => Promise<void>;
+    refresh: () => Promise<void>;
+    changeEmail: (params: ChangeEmailData["body"]) => Promise<void>;
+    changePassword: (params: ChangePasswordData["body"]) => Promise<void>;
+    setPassword: (params: SetPasswordData["body"]) => Promise<void>;
+    changePhone: (params: ChangePhoneData["body"]) => Promise<void>;
+    verifyPhone: (params: VerifyPhoneData["body"]) => Promise<void>;
+    getTwoFaSecret: () => Promise<{
+        secret: string;
+        uri: string;
+    }>;
+    enableTwoFa: (params: EnableTwoFaData["body"]) => Promise<void>;
+    disableTwoFa: (params: DisableTwoFaData["body"]) => Promise<void>;
+    sendTwoFaCode: (params: SendTwoFaCodeData["body"]) => Promise<void>;
+    completeTwoFaChallenge: (code: string, remember?: boolean) => Promise<SessionUser<Payload>>;
+    createInvitation: (params: CreateInvitationData["body"]) => Promise<void>;
+    deleteInvitation: (params: DeleteInvitationData["path"]) => Promise<void>;
+    tokens: {
+        getAccessToken: () => string | null;
+        getRefreshToken: () => string | null;
+        verify: (token?: string) => Promise<AccessTokenPayload<Payload>>;
+        clear: () => void;
+    };
+}>;
+//# sourceMappingURL=sessionClient.d.ts.map

package/dist/sessionClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionClient.d.ts","sourceRoot":"","sources":["../src/sessionClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAC;AAEnC,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,YAAY,EACZ,2BAA2B,EAC3B,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,eAAe,EAChB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,aAAa,CAAC;AACrE,OAAO,KAAK,EACV,kBAAkB,EAClB,SAAS,EACT,aAAa,EACb,WAAW,EACX,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC;IACtC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,eAAO,MAAM,iBAAiB,GAC5B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAEzD,cAAc,kBAAkB,CAAC,OAAO,CAAC,KACxC,WAAW,CAAC,OAAO,CAcrB,CAAC;AAEF,MAAM,MAAM,aAAa,CACvB,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IACvD,OAAO,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE7D,eAAO,MAAM,mBAAmB,GAC9B,OAAO,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAEzD,MAAM,iBAAiB,EACvB,SAAS,aAAa,EACtB,sBAAsB,mBAAmB;6BAgJX,SAAS,GAAG,SAAS;oBAlEtB,SAAS,CAAC,MAAM,CAAC;uBAQd,YAAY,CAAC,MAAM,CAAC;;;4BAMf,iBAAiB,CAAC,MAAM,CAAC;iCAIpB,mBAAmB,CAAC,MAAM,CAAC;6BAW/B,kBAAkB,CAAC,MAAM,CAAC;0BAI7B,eAAe,CAAC,MAAM,CAAC;0BAIvB,mBAAmB,CAAC,MAAM,CAAC;+BAQtB,oBAAoB,CAAC,MAAM,CAAC;iCAS1D,2BAA2B,CAAC,MAAM,CAAC;mBAKzB,WAAW,CAAC,OAAO,CAAC,GAAG,IAAI;uBAEvB,WAAW,CAAC,OAAO,CAAC;;;;0BAgCT,eAAe,CAAC,MAAM,CAAC;6BAKpB,kBAAkB,CAAC,MAAM,CAAC;0BAK7B,eAAe,CAAC,MAAM,CAAC;0BAKvB,eAAe,CAAC,MAAM,CAAC;0BAKvB,eAAe,CAAC,MAAM,CAAC;;;;;0BAYvB,eAAe,CAAC,MAAM,CAAC;2BAKtB,gBAAgB,CAAC,MAAM,CAAC;4BAKvB,iBAAiB,CAAC,MAAM,CAAC;mCAKlB,MAAM;+BASV,oBAAoB,CAAC,MAAM,CAAC;+BAK5B,oBAAoB,CAAC,MAAM,CAAC;;;;yBAQ3C,MAAM;;;EA2ChC,CAAC"}

package/dist/sessionClient.js

@@ -0,0 +1,267 @@
+import { createAuthClient } from "./clients/auth.js";
+import { createUserClient } from "./clients/user.js";
+import { AuthticonError } from "./errors.js";
+import { createTokenStorage } from "./tokens.js";
+export const createSessionUser = (tokenPayload) => {
+    const { authticon, ...rest } = tokenPayload;
+    const { iat, exp, nbf, iss, sub, aud, jti, ...userPayload } = rest;
+    return {
+        id: authticon.userId,
+        sessionId: authticon.sessionId,
+        projectId: authticon.projectId,
+        role: authticon.role,
+        isGuest: authticon.role === "guest",
+        challenges: authticon.challenges,
+        payload: userPayload,
+        raw: tokenPayload,
+    };
+};
+export const createSessionClient = async (deps, cookies, tokenStorageOptions) => {
+    const storage = createTokenStorage(cookies, tokenStorageOptions, deps.logger?.child({ authticon: "token-storage" }));
+    const { projectId, baseUrl, verifier, logger } = deps;
+    const authApi = createAuthClient({ projectId, baseUrl, logger });
+    let cachedUser = null;
+    const buildUserApi = () => {
+        const accessToken = storage.getAccessToken();
+        if (!accessToken) {
+            throw new AuthticonError("No access token available");
+        }
+        return createUserClient({ accessToken, baseUrl, logger });
+    };
+    const saveTokens = (tokens) => {
+        storage.setAccessToken(tokens.accessToken);
+        storage.setRefreshToken(tokens.refreshToken);
+        if (tokens.deviceId) {
+            storage.setDeviceId(tokens.deviceId);
+        }
+    };
+    const verifyAndBuildUser = async (token) => {
+        const accessToken = token ?? storage.getAccessToken();
+        if (!accessToken) {
+            throw new AuthticonError("No access token found");
+        }
+        const payload = await verifier.verifyToken(accessToken);
+        return createSessionUser(payload);
+    };
+    const tryRefresh = async () => {
+        const refreshToken = storage.getRefreshToken();
+        if (!refreshToken)
+            return null;
+        try {
+            const userApi = buildUserApi();
+            const result = await userApi.refresh(refreshToken);
+            if (result) {
+                storage.setAccessToken(result.accessToken);
+                storage.setRefreshToken(result.refreshToken);
+                return result.accessToken;
+            }
+            return null;
+        }
+        catch {
+            storage.clear();
+            return null;
+        }
+    };
+    const resolveUser = async () => {
+        const accessToken = storage.getAccessToken();
+        if (!accessToken)
+            return null;
+        try {
+            return await verifyAndBuildUser(accessToken);
+        }
+        catch {
+            const newToken = await tryRefresh();
+            if (!newToken)
+                return null;
+            return verifyAndBuildUser(newToken);
+        }
+    };
+    cachedUser = await resolveUser();
+    const login = async (params) => {
+        const result = await authApi.login(params);
+        if (!result)
+            throw new AuthticonError("Login failed: no response data");
+        saveTokens(result);
+        cachedUser = await verifyAndBuildUser(result.accessToken);
+        return cachedUser;
+    };
+    const register = async (params) => {
+        const result = await authApi.register(params);
+        if (!result)
+            throw new AuthticonError("Register failed: no response data");
+        return result;
+    };
+    const sendMagicLink = async (params) => {
+        await authApi.sendMagicLink(params);
+    };
+    const loginWithMagicLink = async (params) => {
+        const result = await authApi.verifyMagicLink(params);
+        if (!result)
+            throw new AuthticonError("Magic link verification failed");
+        if ("accessToken" in result) {
+            saveTokens(result);
+            cachedUser = await verifyAndBuildUser(result.accessToken);
+            return cachedUser;
+        }
+        throw new AuthticonError("2FA challenge required");
+    };
+    const forgotPassword = async (params) => {
+        await authApi.forgotPassword(params);
+    };
+    const verifyEmail = async (params) => {
+        await authApi.verifyEmail(params);
+    };
+    const createGuest = async (params) => {
+        const result = await authApi.createGuestUser(params);
+        if (!result)
+            throw new AuthticonError("Guest creation failed");
+        storage.setAccessToken(result.token);
+        cachedUser = await verifyAndBuildUser(result.token);
+        return cachedUser;
+    };
+    const acceptInvitation = async (params) => {
+        const result = await authApi.acceptInvitation(params);
+        if (!result)
+            throw new AuthticonError("Invitation acceptance failed");
+        saveTokens(result);
+        cachedUser = await verifyAndBuildUser(result.accessToken);
+        return cachedUser;
+    };
+    const resendConfirmation = async (params) => {
+        await authApi.resendConfirmation(params);
+    };
+    const getUser = () => cachedUser;
+    const requireUser = () => {
+        if (!cachedUser)
+            throw new AuthticonError("User is not authenticated");
+        return cachedUser;
+    };
+    const getFirstChallenge = () => {
+        if (!cachedUser)
+            throw new AuthticonError("User is not authenticated");
+        return cachedUser.challenges[0];
+    };
+    const isLoggedIn = () => storage.getAccessToken() !== null;
+    const logout = async () => {
+        const refreshToken = storage.getRefreshToken();
+        if (refreshToken) {
+            try {
+                const userApi = buildUserApi();
+                await userApi.logout(refreshToken);
+            }
+            catch {
+                // Best-effort server-side logout
+            }
+        }
+        storage.clear();
+        cachedUser = null;
+    };
+    const refreshSession = async () => {
+        const newToken = await tryRefresh();
+        if (!newToken)
+            throw new AuthticonError("Token refresh failed");
+        cachedUser = await verifyAndBuildUser(newToken);
+    };
+    const changeEmail = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.changeEmail(params);
+    };
+    const changePassword = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.changePassword(params);
+    };
+    const setPassword = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.setPassword(params);
+    };
+    const changePhone = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.changePhone(params);
+    };
+    const verifyPhone = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.verifyPhone(params);
+    };
+    const getTwoFaSecret = async () => {
+        const userApi = buildUserApi();
+        const result = await userApi.getTwoFaSecret();
+        if (!result)
+            throw new AuthticonError("Failed to get 2FA secret");
+        return result;
+    };
+    const enableTwoFa = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.enableTwoFa(params);
+    };
+    const disableTwoFa = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.disableTwoFa(params);
+    };
+    const sendTwoFaCode = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.sendTwoFaCode(params);
+    };
+    const completeTwoFaChallenge = async (code, remember = false) => {
+        const userApi = buildUserApi();
+        const result = await userApi.verifyTwoFa({ code, remember });
+        if (!result)
+            throw new AuthticonError("2FA verification failed");
+        cachedUser = await resolveUser();
+        if (!cachedUser)
+            throw new AuthticonError("User is not authenticated");
+        return cachedUser;
+    };
+    const createInvitation = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.createInvitation(params);
+    };
+    const deleteInvitation = async (params) => {
+        const userApi = buildUserApi();
+        await userApi.deleteInvitation(params);
+    };
+    const tokens = {
+        getAccessToken: () => storage.getAccessToken(),
+        getRefreshToken: () => storage.getRefreshToken(),
+        verify: async (token) => {
+            const accessToken = token ?? storage.getAccessToken();
+            if (!accessToken)
+                throw new AuthticonError("No access token found");
+            return verifier.verifyToken(accessToken);
+        },
+        clear: () => {
+            storage.clear();
+            cachedUser = null;
+        },
+    };
+    return {
+        getFirstChallenge,
+        login,
+        register,
+        sendMagicLink,
+        loginWithMagicLink,
+        forgotPassword,
+        verifyEmail,
+        createGuest,
+        acceptInvitation,
+        resendConfirmation,
+        getUser,
+        requireUser,
+        hasSession: isLoggedIn,
+        logout,
+        refresh: refreshSession,
+        changeEmail,
+        changePassword,
+        setPassword,
+        changePhone,
+        verifyPhone,
+        getTwoFaSecret,
+        enableTwoFa,
+        disableTwoFa,
+        sendTwoFaCode,
+        completeTwoFaChallenge,
+        createInvitation,
+        deleteInvitation,
+        tokens,
+    };
+};
+//# sourceMappingURL=sessionClient.js.map

package/dist/sessionClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessionClient.js","sourceRoot":"","sources":["../src/sessionClient.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAsBrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAsB,MAAM,aAAa,CAAC;AAgBrE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAG/B,YAAyC,EACnB,EAAE;IACxB,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,YAAY,CAAC;IAC5C,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,WAAW,EAAE,GAAG,IAAI,CAAC;IAEnE,OAAO;QACL,EAAE,EAAE,SAAS,CAAC,MAAM;QACpB,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,OAAO,EAAE,SAAS,CAAC,IAAI,KAAK,OAAO;QACnC,UAAU,EAAE,SAAS,CAAC,UAAU;QAChC,OAAO,EAAE,WAAiC;QAC1C,GAAG,EAAE,YAAY;KAClB,CAAC;AACJ,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAGtC,IAAuB,EACvB,OAAsB,EACtB,mBAAyC,EACzC,EAAE;IACF,MAAM,OAAO,GAAG,kBAAkB,CAChC,OAAO,EACP,mBAAmB,EACnB,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,eAAe,EAAE,CAAC,CACnD,CAAC;IACF,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEtD,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAEjE,IAAI,UAAU,GAAgC,IAAI,CAAC;IAEnD,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACxD,CAAC;QACD,OAAO,gBAAgB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,CAAC,MAInB,EAAQ,EAAE;QACT,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC3C,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,KAAc,EACiB,EAAE;QACjC,MAAM,WAAW,GAAG,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QACtD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,cAAc,CAAC,uBAAuB,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACxD,OAAO,iBAAiB,CAAU,OAAsC,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,IAA4B,EAAE;QACpD,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QAC/C,IAAI,CAAC,YAAY;YAAE,OAAO,IAAI,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACnD,IAAI,MAAM,EAAE,CAAC;gBACX,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAC3C,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC7C,OAAO,MAAM,CAAC,WAAW,CAAC;YAC5B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,IAA0C,EAAE;QACnE,MAAM,WAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC7C,IAAI,CAAC,WAAW;YAAE,OAAO,IAAI,CAAC;QAE9B,IAAI,CAAC;YACH,OAAO,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;YACpC,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC3B,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;IACH,CAAC,CAAC;IAEF,UAAU,GAAG,MAAM,WAAW,EAAE,CAAC;IAEjC,MAAM,KAAK,GAAG,KAAK,EAAE,MAAyB,EAAE,EAAE;QAChD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;QACxE,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1D,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAA4B,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,mCAAmC,CAAC,CAAC;QAC3E,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,MAAiC,EAAE,EAAE;QAChE,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,MAAmC,EAAE,EAAE;QACvE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;QACxE,IAAI,aAAa,IAAI,MAAM,EAAE,CAAC;YAC5B,UAAU,CAAC,MAAM,CAAC,CAAC;YACnB,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1D,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,IAAI,cAAc,CAAC,wBAAwB,CAAC,CAAC;IACrD,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,MAAkC,EAAE,EAAE;QAClE,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAAmC,EAAE,EAAE;QAChE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,uBAAuB,CAAC,CAAC;QAC/D,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrC,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpD,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,MAAoC,EAAE,EAAE;QACtE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,8BAA8B,CAAC,CAAC;QACtE,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,UAAU,GAAG,MAAM,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC1D,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,MAA2C,EAC3C,EAAE;QACF,MAAM,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAgC,EAAE,CAAC,UAAU,CAAC;IAE9D,MAAM,WAAW,GAAG,GAAyB,EAAE;QAC7C,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACvE,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,GAA0B,EAAE;QACpD,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACvE,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,IAAI,CAAC;IAE3D,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;QAC/C,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;gBAC/B,MAAM,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,iCAAiC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,MAAM,QAAQ,GAAG,MAAM,UAAU,EAAE,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAChE,UAAU,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,MAAkC,EAAE,EAAE;QAClE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,IAAI,EAAE;QAChC,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,0BAA0B,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,MAA+B,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,MAAgC,EAAE,EAAE;QAC9D,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,MAAiC,EAAE,EAAE;QAChE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,sBAAsB,GAAG,KAAK,EAAE,IAAY,EAAE,QAAQ,GAAG,KAAK,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,cAAc,CAAC,yBAAyB,CAAC,CAAC;QACjE,UAAU,GAAG,MAAM,WAAW,EAAE,CAAC;QACjC,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;QACvE,OAAO,UAAU,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,MAAoC,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,MAAoC,EAAE,EAAE;QACtE,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;QAC/B,MAAM,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG;QACb,cAAc,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE;QAC9C,eAAe,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE;QAChD,MAAM,EAAE,KAAK,EAAE,KAAc,EAAE,EAAE;YAC/B,MAAM,WAAW,GAAG,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACtD,IAAI,CAAC,WAAW;gBAAE,MAAM,IAAI,cAAc,CAAC,uBAAuB,CAAC,CAAC;YACpE,OAAO,QAAQ,CAAC,WAAW,CAAC,WAAW,CAEtC,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,OAAO,CAAC,KAAK,EAAE,CAAC;YAChB,UAAU,GAAG,IAAI,CAAC;QACpB,CAAC;KACF,CAAC;IAEF,OAAO;QACL,iBAAiB;QACjB,KAAK;QACL,QAAQ;QACR,aAAa;QACb,kBAAkB;QAClB,cAAc;QACd,WAAW;QACX,WAAW;QACX,gBAAgB;QAChB,kBAAkB;QAClB,OAAO;QACP,WAAW;QACX,UAAU,EAAE,UAAU;QACtB,MAAM;QACN,OAAO,EAAE,cAAc;QACvB,WAAW;QACX,cAAc;QACd,WAAW;QACX,WAAW;QACX,WAAW;QACX,cAAc;QACd,WAAW;QACX,YAAY;QACZ,aAAa;QACb,sBAAsB;QACtB,gBAAgB;QAChB,gBAAgB;QAChB,MAAM;KACP,CAAC;AACJ,CAAC,CAAC"}