@econneq/gql-auth 1.2.11 → 2.0.2

package/dist/index.d.ts

@@ -1,51 +1,12 @@
-import { queryServerGraphQL } from './query-server.js';
-import { ApiFactory } from './api-factory.js';
-import { uploadGraphQLMutation } from './upload-gql.js';
-export { queryServerGraphQL, ApiFactory, uploadGraphQLMutation };
-export type ConfigType = {
-    Subdomains: SubdomainItem[];
-    fonts: string[];
-};
-export type SubdomainItem = {
-    id: number;
-    subdomain: string;
-    processId: string;
-    widgetID?: string;
-};
-export type ApolloOptions = {
-    csrfToken?: string;
-    cookie?: string;
-};
-export interface InterLoginData {
-    username: string;
-    password: string;
-    parent?: boolean;
-}
-export interface JwtPayload {
-    iss?: string;
-    sub?: string;
-    aud?: string[] | string;
-    exp: number;
-    nbf?: number;
-    iat?: number;
-    jti?: string;
-    user_id?: number;
-    username?: string;
-    matricle?: string;
-    photo?: string;
-    is_superuser?: boolean;
-    is_staff?: boolean;
-    is_active?: boolean;
-    is_hod?: boolean;
-    role?: string;
-    depts?: string[] | any;
-    page?: string[] | any;
-    school?: number[] | any;
-    domain?: number[] | any;
-    permissions?: string[];
-    language?: string[];
-    last_login?: any;
-}
-export { getToken, getUser, logout, removeEmptyFields, } from './functions.js';
-export { getServerToken, getServerUser, getPermissions } from './authServer.js';
+export type { ConfigType, SubdomainItem, ApolloOptions, JwtPayload, InterLoginData, TenantParams, AlertOptions, ApiFactoryOptions, UploadGraphQLArgs, ServerQueryArgs, ServerMutationArgs, } from "./types.js";
+export { Env, isServer, internalGraphQLUrl, externalGraphQLUrl, externalBaseUrl } from "./env.js";
+export { resolveTenant, buildTenantHeaders, assertTenant } from "./tenant.js";
+export type { ResolvedTenant } from "./tenant.js";
+export { getApolloClient, registerCookiesFn } from "./client.js";
+export { getToken, getUser, logout, removeEmptyFields } from "./functions.js";
+export { getServerToken, getServerUser, getServerCookieString, getPermissions, } from "./authServer.js";
+export { queryServerGraphQL, mutateServerGraphQL } from "./query-server.js";
+export { uploadGraphQLMutation } from "./upload-gql.js";
+export { ApiFactory } from "./api-factory.js";
+export { parseGraphQLErrors } from "./errors.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,qBAAqB,EAAE,CAAC;AAIjE,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAGD,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,GAAG,CAAC;CAClB;AAGD,OAAO,EACL,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,GAC7C,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,cAAc,EAAE,aAAa,EAAE,cAAc,EAC9C,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,YAAY,EACV,UAAU,EACV,aAAa,EACb,aAAa,EACb,UAAU,EACV,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,kBAAkB,GACnB,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAIlG,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC9E,YAAY,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIjE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAI9E,OAAO,EACL,cAAc,EACd,aAAa,EACb,qBAAqB,EACrB,cAAc,GACf,MAAM,iBAAiB,CAAC;AAIzB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAI5E,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAIxD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAI9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,6 +1,22 @@
-import { queryServerGraphQL } from './query-server.js';
-import { ApiFactory } from './api-factory.js';
-import { uploadGraphQLMutation } from './upload-gql.js';
-export { queryServerGraphQL, ApiFactory, uploadGraphQLMutation };
-export { getToken, getUser, logout, removeEmptyFields, } from './functions.js';
-export { getServerToken, getServerUser, getPermissions } from './authServer.js';
+// ============================================================
+// @econneq/gql-auth — Public API
+// ============================================================
+// ─── Environment ─────────────────────────────────────────────
+export { Env, isServer, internalGraphQLUrl, externalGraphQLUrl, externalBaseUrl } from "./env.js";
+// ─── Tenant ──────────────────────────────────────────────────
+export { resolveTenant, buildTenantHeaders, assertTenant } from "./tenant.js";
+// ─── Apollo client ────────────────────────────────────────────
+export { getApolloClient, registerCookiesFn } from "./client.js";
+// ─── Client-side utils ───────────────────────────────────────
+export { getToken, getUser, logout, removeEmptyFields } from "./functions.js";
+// ─── Server-side auth ────────────────────────────────────────
+export { getServerToken, getServerUser, getServerCookieString, getPermissions, } from "./authServer.js";
+// ─── GraphQL — server ─────────────────────────────────────────
+export { queryServerGraphQL, mutateServerGraphQL } from "./query-server.js";
+// ─── GraphQL — client (upload / multipart) ────────────────────
+export { uploadGraphQLMutation } from "./upload-gql.js";
+// ─── ApiFactory ───────────────────────────────────────────────
+export { ApiFactory } from "./api-factory.js";
+// ─── Error helpers ────────────────────────────────────────────
+export { parseGraphQLErrors } from "./errors.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,iCAAiC;AACjC,+DAA+D;AAkB/D,gEAAgE;AAEhE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAElG,gEAAgE;AAEhE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG9E,iEAAiE;AAEjE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEjE,gEAAgE;AAEhE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE9E,gEAAgE;AAEhE,OAAO,EACL,cAAc,EACd,aAAa,EACb,qBAAqB,EACrB,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB,iEAAiE;AAEjE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAE5E,iEAAiE;AAEjE,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAExD,iEAAiE;AAEjE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,iEAAiE;AAEjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/query-server.d.ts

@@ -1,11 +1,33 @@
-type ServerQueryArgs = {
-    query: any;
-    variables?: Record<string, any>;
-    domain?: string | null;
-    config: {
-        Subdomains: any[];
-    };
-};
+import type { ServerMutationArgs, ServerQueryArgs } from "./types";
+/**
+ * Run a GraphQL **query** from the server side.
+ *
+ * @example
+ * ```ts
+ * const data = await queryServerGraphQL<MyQuery>({
+ *   query: MY_QUERY_GQL,
+ *   variables: { id: "1" },
+ *   domain: params.domain,   // omit for single-tenant
+ *   config,
+ * });
+ * ```
+ */
 export declare function queryServerGraphQL<T = any>({ query, variables, domain, config, }: ServerQueryArgs): Promise<T | null>;
-export {};
+/**
+ * Run a GraphQL **mutation** from the server side.
+ *
+ * Useful in Server Actions or Route Handlers where you need to
+ * write data without going through the browser proxy.
+ *
+ * @example
+ * ```ts
+ * const data = await mutateServerGraphQL<MyMutation>({
+ *   query: MY_MUTATION_GQL,
+ *   variables: { input: { name: "Alice" } },
+ *   domain: "acme",
+ *   config,
+ * });
+ * ```
+ */
+export declare function mutateServerGraphQL<T = any>({ query, variables, domain, config, }: ServerMutationArgs): Promise<T | null>;
 //# sourceMappingURL=query-server.d.ts.map

package/dist/query-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"query-server.d.ts","sourceRoot":"","sources":["../src/query-server.ts"],"names":[],"mappings":"AAKA,KAAK,eAAe,GAAG;IACrB,KAAK,EAAE,GAAG,CAAC;IACX,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE;QACN,UAAU,EAAE,GAAG,EAAE,CAAC;KACnB,CAAC;CACH,CAAC;AAEF,wBAAsB,kBAAkB,CAAC,CAAC,GAAG,GAAG,EAAE,EAChD,KAAK,EACL,SAAc,EACd,MAAM,EACN,MAAM,GACP,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAyBrC"}
+{"version":3,"file":"query-server.d.ts","sourceRoot":"","sources":["../src/query-server.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAKnE;;;;;;;;;;;;GAYG;AACH,wBAAsB,kBAAkB,CAAC,CAAC,GAAG,GAAG,EAAE,EAChD,KAAK,EACL,SAAc,EACd,MAAM,EACN,MAAM,GACP,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAerC;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,mBAAmB,CAAC,CAAC,GAAG,GAAG,EAAE,EACjD,KAAK,EACL,SAAc,EACd,MAAM,EACN,MAAM,GACP,EAAE,kBAAkB,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAexC"}

package/dist/query-server.js

@@ -1,22 +1,74 @@
-// src/server-query.ts
-'use server';
-import { cookies } from 'next/headers';
-import getApolloClient from './client.js';
+// ============================================================
+// @econneq/gql-auth — Server-side GraphQL helpers
+// ============================================================
+//
+// These functions are intended for use in Next.js Server
+// Components, Server Actions, and API Routes.
+//
+// They connect through the internal Docker network and forward
+// the caller's cookie string so Django session auth works.
+// ─────────────────────────────────────────────────────────────
+"use server";
+import { getApolloClient } from "./client";
+// ─── Query ───────────────────────────────────────────────────
+/**
+ * Run a GraphQL **query** from the server side.
+ *
+ * @example
+ * ```ts
+ * const data = await queryServerGraphQL<MyQuery>({
+ *   query: MY_QUERY_GQL,
+ *   variables: { id: "1" },
+ *   domain: params.domain,   // omit for single-tenant
+ *   config,
+ * });
+ * ```
+ */
 export async function queryServerGraphQL({ query, variables = {}, domain, config, }) {
     try {
-        const cookieStore = await cookies();
-        const cookieString = cookieStore.toString();
-        const client = await getApolloClient({ cookie: cookieString }, domain, config);
-        if (!client)
-            return null;
+        const client = await getApolloClient({ domain, config });
         const result = await client.query({
             query,
             variables,
-            fetchPolicy: 'no-cache',
+            fetchPolicy: "no-cache",
         });
-        return result?.data;
+        return result?.data ?? null;
     }
     catch (err) {
+        console.error("[@econneq/gql-auth] queryServerGraphQL error:", err);
         return null;
     }
 }
+// ─── Mutation ─────────────────────────────────────────────────
+/**
+ * Run a GraphQL **mutation** from the server side.
+ *
+ * Useful in Server Actions or Route Handlers where you need to
+ * write data without going through the browser proxy.
+ *
+ * @example
+ * ```ts
+ * const data = await mutateServerGraphQL<MyMutation>({
+ *   query: MY_MUTATION_GQL,
+ *   variables: { input: { name: "Alice" } },
+ *   domain: "acme",
+ *   config,
+ * });
+ * ```
+ */
+export async function mutateServerGraphQL({ query, variables = {}, domain, config, }) {
+    try {
+        const client = await getApolloClient({ domain, config });
+        const result = await client.mutate({
+            mutation: query,
+            variables,
+            fetchPolicy: "no-cache",
+        });
+        return result?.data ?? null;
+    }
+    catch (err) {
+        console.error("[@econneq/gql-auth] mutateServerGraphQL error:", err);
+        return null;
+    }
+}
+//# sourceMappingURL=query-server.js.map

package/dist/query-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"query-server.js","sourceRoot":"","sources":["../src/query-server.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,kDAAkD;AAClD,+DAA+D;AAC/D,EAAE;AACF,yDAAyD;AACzD,8CAA8C;AAC9C,EAAE;AACF,+DAA+D;AAC/D,2DAA2D;AAC3D,gEAAgE;AAEhE,YAAY,CAAC;AAGb,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAE3C,gEAAgE;AAEhE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAU,EAChD,KAAK,EACL,SAAS,GAAG,EAAE,EACd,MAAM,EACN,MAAM,GACU;IAChB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,KAAK,CAAI;YACnC,KAAK;YACL,SAAS;YACT,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QAEH,OAAO,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iEAAiE;AAEjE;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAU,EACjD,KAAK,EACL,SAAS,GAAG,EAAE,EACd,MAAM,EACN,MAAM,GACa;IACnB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAI;YACpC,QAAQ,EAAE,KAAK;YACf,SAAS;YACT,WAAW,EAAE,UAAU;SACxB,CAAC,CAAC;QAEH,OAAO,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC;IAC9B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAC;QACrE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/tenant.d.ts

@@ -0,0 +1,21 @@
+import type { ConfigType, SubdomainItem, TenantParams } from "./types";
+export type ResolvedTenant = SubdomainItem | null;
+/**
+ * Resolves a tenant from the config.
+ *
+ * - Multi-tenant: matches params.domain against Subdomains[].subdomain
+ * - Single-tenant: returns Subdomains[0] when no domain is provided
+ * - Returns null when the Subdomains list is empty
+ */
+export declare function resolveTenant(config: ConfigType, params?: TenantParams): ResolvedTenant;
+/**
+ * Build the HTTP headers that identify a tenant to the backend.
+ * Returns an empty object when no tenant is resolved (public routes).
+ */
+export declare function buildTenantHeaders(tenant: ResolvedTenant, apiKey?: string): Record<string, string>;
+/**
+ * Throw when a multi-tenant setup cannot resolve the requested domain.
+ * Safe to call even in single-tenant mode (domain is undefined → no throw).
+ */
+export declare function assertTenant(tenant: ResolvedTenant, domain?: string): asserts tenant is SubdomainItem;
+//# sourceMappingURL=tenant.d.ts.map

package/dist/tenant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.d.ts","sourceRoot":"","sources":["../src/tenant.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvE,MAAM,MAAM,cAAc,GAAG,aAAa,GAAG,IAAI,CAAC;AAElD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,UAAU,EAClB,MAAM,CAAC,EAAE,YAAY,GACpB,cAAc,CAchB;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASxB;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,cAAc,EACtB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,IAAI,aAAa,CAOjC"}

package/dist/tenant.js

@@ -0,0 +1,50 @@
+// ============================================================
+// @econneq/gql-auth — Tenant resolver
+// ============================================================
+//
+// Works for both single-tenant (no domain supplied) and
+// multi-tenant (domain matched against Subdomains list).
+// ─────────────────────────────────────────────────────────────
+/**
+ * Resolves a tenant from the config.
+ *
+ * - Multi-tenant: matches params.domain against Subdomains[].subdomain
+ * - Single-tenant: returns Subdomains[0] when no domain is provided
+ * - Returns null when the Subdomains list is empty
+ */
+export function resolveTenant(config, params) {
+    const { Subdomains } = config;
+    if (!Subdomains?.length)
+        return null;
+    const domain = params?.domain?.toLowerCase();
+    if (domain) {
+        return (Subdomains.find((s) => s.subdomain.toLowerCase() === domain) ?? null);
+    }
+    // Single-tenant fallback — use the first entry
+    return Subdomains[0] ?? null;
+}
+/**
+ * Build the HTTP headers that identify a tenant to the backend.
+ * Returns an empty object when no tenant is resolved (public routes).
+ */
+export function buildTenantHeaders(tenant, apiKey) {
+    if (!tenant)
+        return {};
+    return {
+        "X-Tenant-ID": tenant.subdomain,
+        "X-Process-ID": tenant.processId ?? "",
+        "X-Widget-ID": tenant.widgetID ?? "",
+        ...(apiKey ? { "X-API-KEY": apiKey } : {}),
+    };
+}
+/**
+ * Throw when a multi-tenant setup cannot resolve the requested domain.
+ * Safe to call even in single-tenant mode (domain is undefined → no throw).
+ */
+export function assertTenant(tenant, domain) {
+    if (!tenant) {
+        throw new Error(`[@econneq/gql-auth] No tenant found${domain ? ` for domain "${domain}"` : ""}. ` +
+            `Check your config.Subdomains list.`);
+    }
+}
+//# sourceMappingURL=tenant.js.map

package/dist/tenant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tenant.js","sourceRoot":"","sources":["../src/tenant.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,sCAAsC;AACtC,+DAA+D;AAC/D,EAAE;AACF,wDAAwD;AACxD,yDAAyD;AACzD,gEAAgE;AAMhE;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAkB,EAClB,MAAqB;IAErB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;IAC9B,IAAI,CAAC,UAAU,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,MAAM,GAAG,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAE7C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,CACL,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CACrE,CAAC;IACJ,CAAC;IAED,+CAA+C;IAC/C,OAAO,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAsB,EACtB,MAAe;IAEf,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,SAAS;QAC/B,cAAc,EAAE,MAAM,CAAC,SAAS,IAAI,EAAE;QACtC,aAAa,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;QACpC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,MAAsB,EACtB,MAAe;IAEf,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,sCAAsC,MAAM,CAAC,CAAC,CAAC,gBAAgB,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;YAC/E,oCAAoC,CACvC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,124 @@
+export type SubdomainItem = {
+    id: number;
+    subdomain: string;
+    processId: string;
+    widgetID?: string;
+};
+export type ConfigType = {
+    Subdomains: SubdomainItem[];
+    fonts?: string[];
+};
+export type ApolloOptions = {
+    csrfToken?: string;
+    cookie?: string;
+};
+export interface JwtPayload {
+    iss?: string;
+    sub?: string;
+    aud?: string[] | string;
+    exp: number;
+    nbf?: number;
+    iat?: number;
+    jti?: string;
+    user_id?: number;
+    username?: string;
+    matricle?: string;
+    photo?: string;
+    is_superuser?: boolean;
+    is_staff?: boolean;
+    is_active?: boolean;
+    is_hod?: boolean;
+    role?: string;
+    depts?: string[] | any;
+    page?: string[] | any;
+    school?: number[] | any;
+    domain?: number[] | any;
+    permissions?: string[];
+    language?: string[];
+    last_login?: any;
+}
+export interface InterLoginData {
+    username: string;
+    password: string;
+    parent?: boolean;
+}
+/**
+ * Describes which tenant is being targeted.
+ * For single-tenant setups, domain can be omitted — the first
+ * Subdomain entry will be used as a fallback.
+ */
+export type TenantParams = {
+    domain?: string;
+    [key: string]: any;
+};
+export type AlertOptions = {
+    title: string;
+    status: boolean;
+    duration: number;
+};
+export type ApiFactoryOptions = {
+    /** New data (single object or array). */
+    newData?: any;
+    /** Existing data to update (merged with newData when present). */
+    editData?: any;
+    /** The top-level GraphQL mutation name, e.g. "createUser". */
+    mutationName: string;
+    /** The nested model key inside the mutation response, e.g. "user". */
+    modelName: string;
+    /** Which field from the result to display in the success alert. Default: "title". */
+    successField?: string;
+    /** The GraphQL DocumentNode (gql``). */
+    query: any;
+    /** Tenant routing params — domain can be omitted for single-tenant. */
+    params?: TenantParams;
+    /** Next.js router (or any object with a push() method). */
+    router?: any;
+    /** JWT bearer token. Falls back to cookie-based token when omitted. */
+    token?: string;
+    /** Package config with Subdomains list. */
+    config: ConfigType;
+    /** Callback for user-visible alerts. */
+    onAlert: (options: AlertOptions) => void;
+    /** Redirect after success? Requires redirectPath. */
+    redirect?: boolean;
+    /** Path to push to after a successful mutation. */
+    redirectPath?: string;
+    /**
+     * When true, returns the `successField` value from the first result
+     * instead of triggering alert/reload.
+     */
+    returnResponseField?: boolean;
+    /**
+     * When true, returns the full mutation response object
+     * instead of triggering alert/reload.
+     */
+    returnResponseObject?: boolean;
+    /** Reload the page after success? Default: true. */
+    reload?: boolean;
+    /**
+     * Map variables keys → File objects for multipart uploads.
+     * Called once per item in a batch.
+     */
+    getFileMap?: (item: any) => Record<string, File>;
+};
+export type UploadGraphQLArgs = {
+    query: string;
+    variables: Record<string, any>;
+    fileMap?: Record<string, File>;
+    token?: string;
+    params?: TenantParams;
+    config: ConfigType;
+};
+export type ServerQueryArgs<V = Record<string, any>> = {
+    query: any;
+    variables?: V;
+    domain?: string | null;
+    config: ConfigType;
+};
+export type ServerMutationArgs<V = Record<string, any>> = {
+    query: any;
+    variables?: V;
+    domain?: string | null;
+    config: ConfigType;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAIF,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC;AAIF,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACxB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,GAAG,CAAC;CAClB;AAID,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAID;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;CACpB,CAAC;AAIF,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,yCAAyC;IACzC,OAAO,CAAC,EAAE,GAAG,CAAC;IACd,kEAAkE;IAClE,QAAQ,CAAC,EAAE,GAAG,CAAC;IACf,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wCAAwC;IACxC,KAAK,EAAE,GAAG,CAAC;IACX,uEAAuE;IACvE,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,MAAM,EAAE,UAAU,CAAC;IACnB,wCAAwC;IACxC,OAAO,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC;IACzC,qDAAqD;IACrD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,mDAAmD;IACnD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;OAGG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,oDAAoD;IACpD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,KAAK,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;CAClD,CAAC;AAIF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAIF,MAAM,MAAM,eAAe,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI;IACrD,KAAK,EAAE,GAAG,CAAC;IACX,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC;AAIF,MAAM,MAAM,kBAAkB,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI;IACxD,KAAK,EAAE,GAAG,CAAC;IACX,SAAS,CAAC,EAAE,CAAC,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,UAAU,CAAC;CACpB,CAAC"}

package/dist/types.js

@@ -0,0 +1,5 @@
+// ============================================================
+// @econneq/gql-auth — Shared Types
+// ============================================================
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,mCAAmC;AACnC,+DAA+D"}

package/dist/upload-gql.d.ts

@@ -1,18 +1,3 @@
-type UploadGraphQLArgs = {
-    query: string;
-    variables: Record<string, any>;
-    fileMap: Record<string, File>;
-    token?: string;
-    params: any;
-    config: {
-        Subdomains: {
-            subdomain: string;
-            id: string | number;
-            processId: string;
-            widgetID: string;
-        }[];
-    };
-};
-export declare function uploadGraphQLMutation({ query, variables, fileMap, token, params, config }: UploadGraphQLArgs): Promise<any>;
-export {};
+import type { UploadGraphQLArgs } from "./types";
+export declare function uploadGraphQLMutation({ query, variables, fileMap, token, params, config, }: UploadGraphQLArgs): Promise<any>;
 //# sourceMappingURL=upload-gql.d.ts.map

package/dist/upload-gql.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upload-gql.d.ts","sourceRoot":"","sources":["../src/upload-gql.ts"],"names":[],"mappings":"AAAA,KAAK,iBAAiB,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,GAAG,CAAC;IACZ,MAAM,EAAE;QACN,UAAU,EAAE;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAC;YAAC,QAAQ,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;KAC/F,CAAC;CACH,CAAC;AAEF,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,SAAS,EACT,OAAO,EACP,KAAK,EACL,MAAM,EACN,MAAM,EACP,EAAE,iBAAiB,gBAuEnB"}
+{"version":3,"file":"upload-gql.d.ts","sourceRoot":"","sources":["../src/upload-gql.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AASjD,wBAAsB,qBAAqB,CAAC,EAC1C,KAAK,EACL,SAAS,EACT,OAAY,EACZ,KAAK,EACL,MAAM,EACN,MAAM,GACP,EAAE,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,CA0ElC"}

package/dist/upload-gql.js

@@ -1,56 +1,75 @@
-export async function uploadGraphQLMutation({ query, variables, fileMap, token, params, config }) {
-    const isServer = typeof window === "undefined";
-    const { Subdomains } = config;
-    const BACKEND_URL_INT = process.env.BACKEND_URL_INT;
-    const API_KEY = process.env.API_KEY || "";
-    let API_LINK;
-    if (isServer) {
-        API_LINK = `${BACKEND_URL_INT}/graphql/`;
-    }
-    else {
-        API_LINK = `/api/graphql`;
-    }
-    const formData = new FormData();
+// ============================================================
+// @econneq/gql-auth — Multipart GraphQL upload mutation
+// ============================================================
+//
+// Implements the GraphQL multipart request spec:
+// https://github.com/jaydenseric/graphql-multipart-request-spec
+//
+// Works in both server (Docker-internal) and client (proxied)
+// environments.  Tenant resolution falls back to Subdomains[0]
+// for single-tenant setups.
+// ─────────────────────────────────────────────────────────────
+import { Env, externalGraphQLUrl, internalGraphQLUrl, isServer, } from "./env";
+import { assertTenant, buildTenantHeaders, resolveTenant } from "./tenant";
+export async function uploadGraphQLMutation({ query, variables, fileMap = {}, token, params, config, }) {
+    const server = isServer();
+    // ── Tenant ─────────────────────────────────────────────
+    const tenant = resolveTenant(config, params);
+    assertTenant(tenant, params?.domain);
+    // ── Endpoint ───────────────────────────────────────────
+    const apiLink = server ? internalGraphQLUrl() : externalGraphQLUrl();
+    // ── Build multipart body ────────────────────────────────
     const updatedVariables = { ...variables };
-    // 1. Prepare GraphQL Multipart Request (Spec compliant)
-    Object.keys(fileMap).forEach((key) => {
-        updatedVariables[key] = null;
-    });
-    const operations = { query, variables: updatedVariables };
-    const map = {};
     const fileKeys = Object.keys(fileMap);
-    fileKeys.forEach((key, index) => {
-        map[`${index}`] = [`variables.${key}`];
-    });
+    const hasFiles = fileKeys.length > 0;
+    if (hasFiles) {
+        for (const key of fileKeys) {
+            updatedVariables[key] = null;
+        }
+    }
+    const operations = {
+        query,
+        variables: updatedVariables,
+    };
+    const formData = new FormData();
     formData.append("operations", JSON.stringify(operations));
-    formData.append("map", JSON.stringify(map));
-    fileKeys.forEach((key, index) => {
-        formData.append(`${index}`, fileMap[key]);
-    });
-    // 2. Multi-tenant URL and Data Logic
-    const requestedDomain = params?.domain || "";
-    const tenantData = Subdomains.find((d) => d.subdomain.toLowerCase() === requestedDomain.toLowerCase());
-    // 3. Construct Headers
+    if (hasFiles) {
+        const map = {};
+        fileKeys.forEach((key, index) => {
+            map[`${index}`] = [`variables.${key}`];
+        });
+        formData.append("map", JSON.stringify(map));
+        fileKeys.forEach((key, index) => {
+            formData.append(`${index}`, fileMap[key]);
+        });
+    }
+    else {
+        // No files → still needs a map entry per spec
+        formData.append("map", JSON.stringify({}));
+    }
+    // ── Headers ─────────────────────────────────────────────
+    const tenantHeaders = buildTenantHeaders(tenant, Env.apiKey);
     const headers = {
-        ...(token ? { "Authorization": `Bearer ${token}` } : {}),
+        ...tenantHeaders,
+        ...(token ? { Authorization: `Bearer ${token}` } : {}),
+        // Note: do NOT set Content-Type here — browser/fetch sets it
+        //       automatically with the correct multipart boundary.
     };
-    if (isServer) {
-        headers["Host"] = BACKEND_URL_INT || "";
-    }
-    // Inject specific tenant metadata into headers for Django to read
-    if (tenantData) {
-        headers["X-Tenant-ID"] = String(tenantData.subdomain);
-        headers["X-Process-ID"] = tenantData.processId || "";
-        headers["X-Widget-ID"] = tenantData.widgetID || "";
-        headers["X-API-KEY"] = API_KEY || "";
+    if (server) {
+        // Host header helps Django route to the right backend service
+        headers["Host"] = Env.backendInt;
     }
-    if (!tenantData?.subdomain)
-        throw ("No Tenant Found ===================>");
-    const res = await fetch(API_LINK, {
+    // ── Fetch ────────────────────────────────────────────────
+    const res = await fetch(apiLink, {
         method: "POST",
         headers,
         body: formData,
         credentials: "include",
     });
-    return await res.json();
+    if (!res.ok) {
+        const text = await res.text().catch(() => res.statusText);
+        throw new Error(`[@econneq/gql-auth] uploadGraphQLMutation HTTP ${res.status}: ${text}`);
+    }
+    return res.json();
 }
+//# sourceMappingURL=upload-gql.js.map

package/dist/upload-gql.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload-gql.js","sourceRoot":"","sources":["../src/upload-gql.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,wDAAwD;AACxD,+DAA+D;AAC/D,EAAE;AACF,iDAAiD;AACjD,gEAAgE;AAChE,EAAE;AACF,8DAA8D;AAC9D,+DAA+D;AAC/D,4BAA4B;AAC5B,gEAAgE;AAGhE,OAAO,EACL,GAAG,EACH,kBAAkB,EAClB,kBAAkB,EAClB,QAAQ,GACT,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE3E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,EAC1C,KAAK,EACL,SAAS,EACT,OAAO,GAAG,EAAE,EACZ,KAAK,EACL,MAAM,EACN,MAAM,GACY;IAClB,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC;IAE1B,0DAA0D;IAC1D,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7C,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAErC,0DAA0D;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAErE,2DAA2D;IAC3D,MAAM,gBAAgB,GAAG,EAAE,GAAG,SAAS,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAErC,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC3B,gBAAgB,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,KAAK;QACL,SAAS,EAAE,gBAAgB;KAC5B,CAAC;IAEF,MAAM,QAAQ,GAAG,IAAI,QAAQ,EAAE,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IAE1D,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAA6B,EAAE,CAAC;QACzC,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC9B,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QACH,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YAC9B,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,8CAA8C;QAC9C,QAAQ,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,2DAA2D;IAC3D,MAAM,aAAa,GAAG,kBAAkB,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAE7D,MAAM,OAAO,GAA2B;QACtC,GAAG,aAAa;QAChB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,6DAA6D;QAC7D,2DAA2D;KAC5D,CAAC;IAEF,IAAI,MAAM,EAAE,CAAC;QACX,8DAA8D;QAC9D,OAAO,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC;IACnC,CAAC;IAED,4DAA4D;IAC5D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE;QAC/B,MAAM,EAAE,MAAM;QACd,OAAO;QACP,IAAI,EAAE,QAAQ;QACd,WAAW,EAAE,SAAS;KACvB,CAAC,CAAC;IAEH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,kDAAkD,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CACxE,CAAC;IACJ,CAAC;IAED,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC"}