@estifanos-sh/convex-auth 0.0.2 → 0.0.4

package/README.md

@@ -2,10 +2,10 @@
 
 Authentication and authorization for Convex applications.
 
-This is a preview release. Install it from the `preview` channel:
+Install the published package:
 
 ```sh
-pnpm add @estifanos-sh/convex-auth@preview
+npm install @estifanos-sh/convex-auth
 ```
 
 Configure the component in `convex/convex.config.ts`:
@@ -13,8 +13,13 @@ Configure the component in `convex/convex.config.ts`:
 ```ts
 import auth from "@estifanos-sh/convex-auth/convex.config";
 import { defineApp } from "convex/server";
+import { v } from "convex/values";
 
-const app = defineApp();
+const app = defineApp({
+  env: {
+    CONVEX_SITE_URL: v.string(),
+  },
+});
 app.use(auth);
 
 export default app;
@@ -37,16 +42,34 @@ export const auth = defineAuth(components.auth, {
   permissions,
   providers: [password(), webauthn()],
 });
+
+export const { signIn, signOut, store } = auth;
+```
+
+Pass the generated actions directly to the browser client. The provider IDs,
+custom credential validators, action results, and enabled factor helpers are
+inferred without a generic or type assertion.
+
+```ts
+import { client } from "@estifanos-sh/convex-auth/browser";
+import { api } from "../convex/_generated/api";
+
+export const authClient = client({ convex, api: api.auth });
 ```
 
+Convex Auth owns users, provider accounts, credential secrets, passkeys,
+recovery continuations, and sessions. Application tables should reference the
+branded auth `userId`; they should not mirror those records or manufacture auth
+IDs in tests.
+
 Read the [installation guide](https://estifanos.sh/convex-auth/getting-started/installation/)
 for the complete setup, generated files, environment variables, client bindings,
 and provider configuration.
 
 ## Links
 
-- [Documentation](https://estifanos.sh/convex-auth/)
-- [Source](https://github.com/estifanos-sh/convex-auth)
-- [Issues](https://github.com/estifanos-sh/convex-auth/issues)
+Read the [documentation](https://estifanos.sh/convex-auth/), browse the
+[source](https://github.com/estifanos-sh/convex-auth), or report an
+[issue](https://github.com/estifanos-sh/convex-auth/issues).
 
 Apache-2.0

package/dist/bin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire } from "node:module";
 import { execFileSync } from "node:child_process";
-import { existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "node:fs";
+import { existsSync, lstatSync, mkdtempSync, readFileSync, readdirSync, unlinkSync, writeFileSync } from "node:fs";
 import os, { tmpdir } from "node:os";
 import path, { dirname, join } from "node:path";
 import process$1, { stdin, stdout } from "node:process";
@@ -6537,7 +6537,6 @@ async function runSetup(options) {
 	await configureConvexConfig(config);
 	await initializeAuth(config);
 	await initializeHttp(config);
-	await initializeAuthCore(config);
 	await initializeAuthConfig(config);
 	if (options.variables !== void 0) await configureOtherVariables(config, options.variables);
 	else printFinalSuccessMessage(config);
@@ -6800,9 +6799,8 @@ async function configureConvexConfig(config) {
 	const sourceTemplate = `\
 import { defineApp } from "convex/server";
 import auth from "@estifanos-sh/convex-auth/convex.config";
-import { authEnv } from "@estifanos-sh/convex-auth/server";
 
-const app = defineApp({ env: authEnv });
+const app = defineApp();
 
 app.use(auth);
 
@@ -6888,36 +6886,6 @@ export default auth.http();
 		O.success(`Created ${newPath}`);
 	}
 }
-async function initializeAuthCore(config) {
-	logStep(config, "Initialize auth/core file");
-	const sourceTemplate = `\
-import { createAuthContext } from "@estifanos-sh/convex-auth/core";
-import { components } from "../_generated/api";
-
-export const auth = createAuthContext(components.auth);
-`;
-	const source = templateToSource(sourceTemplate);
-	const authDir = path.join(config.convexFolderPath, "auth");
-	const corePath = path.join(authDir, "core");
-	const existingPath = existingNonEmptySourcePath(corePath);
-	if (existingPath !== null) if (doesAlreadyMatchTemplate(readFileSync(existingPath, "utf8"), sourceTemplate)) O.success(`${existingPath} is already set up.`);
-	else {
-		O.info(`You already have ${existingPath}. Make sure it uses createAuthContext:`);
-		O.message(indent(`\n${source}\n`));
-		const ready = await ot({ message: "Ready to continue?" });
-		handleCancel(ready);
-		if (!ready) {
-			pt("Setup cancelled.");
-			process$1.exit(1);
-		}
-	}
-	else {
-		if (!existsSync(authDir)) mkdirSync(authDir, { recursive: true });
-		const newPath = config.usesTypeScript ? `${corePath}.ts` : `${corePath}.js`;
-		writeFileSync(newPath, source);
-		O.success(`Created ${newPath}`);
-	}
-}
 async function initializeAuthConfig(config) {
 	logStep(config, "Initialize auth.config file");
 	const sourceTemplate = `\

package/dist/browser/index.d.ts

@@ -16,7 +16,7 @@ import "../client/index.js";
  *   available on the returned client.
  * @returns A browser auth client with the configured auth helpers.
  */
-declare function client<Api extends AuthApiRefs<boolean, boolean, boolean> = AuthApiRefs>(options: ClientOptions<Api>): PlatformAuthClient<Api>;
+declare function client<Api extends AuthApiRefs = AuthApiRefs>(options: ClientOptions<Api>): PlatformAuthClient<Api>;
 //#endregion
-export { type AuthApiRefs, type PlatformAuthClient as AuthClient, type ClientOptions, client };
+export { type PlatformAuthClient as AuthClient, type ClientOptions, client };
 //# sourceMappingURL=index.d.ts.map

package/dist/browser/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/browser/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;iBAsCgB,MAAA,aAAmB,WAAA,8BAAyC,WAAA,CAAA,CAC1E,OAAA,EAAS,aAAA,CAAc,GAAA,IACtB,kBAAA,CAAmB,GAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/browser/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;iBAsCgB,MAAA,aAAmB,WAAA,GAAc,WAAA,CAAA,CAC/C,OAAA,EAAS,aAAA,CAAc,GAAA,IACtB,kBAAA,CAAmB,GAAA"}

package/dist/browser/index.js

@@ -28,17 +28,23 @@ import { ConvexHttpClient } from "convex/browser";
 * @returns A browser auth client with the configured auth helpers.
 */
 function client(options) {
-	const proxyMode = options.proxyPath !== void 0;
-	const url = proxyMode ? void 0 : options.url ?? resolveUrl(options.convex);
+	const runtime = mergeBrowserRuntime(options.runtime);
+	const adapterFactories = {
+		...options.adapterFactories,
+		webauthn: options.adapterFactories?.webauthn ?? ((deps) => createWebAuthnClient(deps))
+	};
+	if (options.proxyPath !== void 0) return client$1({
+		...options,
+		storage: options.storage ?? null,
+		runtime,
+		adapterFactories
+	});
+	const url = options.url ?? resolveUrl(options.convex);
 	return client$1({
 		...options,
-		storage: options.storage === void 0 && proxyMode ? null : options.storage,
-		runtime: mergeBrowserRuntime(options.runtime),
-		adapterFactories: {
-			...options.adapterFactories,
-			webauthn: options.adapterFactories?.webauthn ?? ((deps) => createWebAuthnClient(deps))
-		},
-		httpClient: proxyMode ? null : options.httpClient ?? (url ? new ConvexHttpClient(url) : null)
+		runtime,
+		adapterFactories,
+		httpClient: options.httpClient ?? new ConvexHttpClient(url)
 	});
 }
 function mergeBrowserRuntime(runtime) {

package/dist/browser/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":["createClient"],"sources":["../../src/browser/index.ts"],"sourcesContent":["/**\n * Browser-first auth client for `@estifanos-sh/convex-auth/browser`.\n *\n * This entrypoint wraps the framework-agnostic `client(...)`\n * helper with browser defaults such as `ConvexHttpClient`, local storage, URL\n * replacement, OAuth launching, and WebAuthn adapters.\n *\n * @module\n */\n\nimport { ConvexHttpClient } from \"convex/browser\";\n\nimport {\n  client as createClient,\n  resolveUrl,\n  type AuthApiRefs,\n  type ClientOptions,\n  type PlatformAuthClient,\n} from \"../client/index\";\nimport { createWebAuthnClient } from \"./webauthn\";\nimport { createBrowserRuntime } from \"./runtime\";\n\nexport type { AuthApiRefs, PlatformAuthClient as AuthClient, ClientOptions } from \"../client/index\";\n\n/**\n * Create a browser-configured auth client.\n *\n * Applies browser runtime defaults (`ConvexHttpClient` transport, local\n * storage, URL cleanup, OAuth launch, WebAuthn support) on top of the\n * framework-agnostic `client(...)` helper, then returns it directly — the core\n * owns OAuth launch/completion and initialization, driven by the injected\n * browser runtime.\n *\n * @param options - Browser client configuration. See {@link ClientOptions}.\n * @typeParam Api - Auth API references that control which factor helpers are\n *   available on the returned client.\n * @returns A browser auth client with the configured auth helpers.\n */\nexport function client<Api extends AuthApiRefs<boolean, boolean, boolean> = AuthApiRefs>(\n  options: ClientOptions<Api>,\n): PlatformAuthClient<Api> {\n  const proxyMode = options.proxyPath !== undefined;\n  const url = proxyMode ? undefined : (options.url ?? resolveUrl(options.convex));\n\n  return createClient({\n    ...options,\n    storage: options.storage === undefined && proxyMode ? null : options.storage,\n    runtime: mergeBrowserRuntime(options.runtime),\n    adapterFactories: {\n      ...options.adapterFactories,\n      webauthn: options.adapterFactories?.webauthn ?? ((deps) => createWebAuthnClient(deps)),\n    },\n    httpClient: proxyMode ? null : (options.httpClient ?? (url ? new ConvexHttpClient(url) : null)),\n  }) as PlatformAuthClient<Api>;\n}\n\nfunction mergeBrowserRuntime(\n  runtime: ClientOptions[\"runtime\"],\n): NonNullable<ClientOptions[\"runtime\"]> {\n  const defaults = createBrowserRuntime();\n  return {\n    ...defaults,\n    ...runtime,\n    environment: runtime?.environment ?? defaults.environment,\n    proxy: runtime?.proxy ?? defaults.proxy,\n    storage: runtime?.storage === undefined ? defaults.storage : runtime.storage,\n    location: runtime?.location ?? defaults.location,\n    oauth: runtime?.oauth ?? defaults.oauth,\n    sync: runtime?.sync ?? defaults.sync,\n    mutex: runtime?.mutex ?? defaults.mutex,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,SAAgB,OACd,SACyB;CACzB,MAAM,YAAY,QAAQ,cAAc;CACxC,MAAM,MAAM,YAAY,SAAa,QAAQ,OAAO,WAAW,QAAQ,OAAO;AAE9E,QAAOA,SAAa;EAClB,GAAG;EACH,SAAS,QAAQ,YAAY,UAAa,YAAY,OAAO,QAAQ;EACrE,SAAS,oBAAoB,QAAQ,QAAQ;EAC7C,kBAAkB;GAChB,GAAG,QAAQ;GACX,UAAU,QAAQ,kBAAkB,cAAc,SAAS,qBAAqB,KAAK;GACtF;EACD,YAAY,YAAY,OAAQ,QAAQ,eAAe,MAAM,IAAI,iBAAiB,IAAI,GAAG;EAC1F,CAAC;;AAGJ,SAAS,oBACP,SACuC;CACvC,MAAM,WAAW,sBAAsB;AACvC,QAAO;EACL,GAAG;EACH,GAAG;EACH,aAAa,SAAS,eAAe,SAAS;EAC9C,OAAO,SAAS,SAAS,SAAS;EAClC,SAAS,SAAS,YAAY,SAAY,SAAS,UAAU,QAAQ;EACrE,UAAU,SAAS,YAAY,SAAS;EACxC,OAAO,SAAS,SAAS,SAAS;EAClC,MAAM,SAAS,QAAQ,SAAS;EAChC,OAAO,SAAS,SAAS,SAAS;EACnC"}
+{"version":3,"file":"index.js","names":["createClient"],"sources":["../../src/browser/index.ts"],"sourcesContent":["/**\n * Browser-first auth client for `@estifanos-sh/convex-auth/browser`.\n *\n * This entrypoint wraps the framework-agnostic `client(...)`\n * helper with browser defaults such as `ConvexHttpClient`, local storage, URL\n * replacement, OAuth launching, and WebAuthn adapters.\n *\n * @module\n */\n\nimport { ConvexHttpClient } from \"convex/browser\";\n\nimport {\n  client as createClient,\n  resolveUrl,\n  type ClientOptions,\n  type PlatformAuthClient,\n} from \"../client/index\";\nimport type { AuthApiRefs } from \"../client/core/types\";\nimport { createWebAuthnClient } from \"./webauthn\";\nimport { createBrowserRuntime } from \"./runtime\";\n\nexport type { PlatformAuthClient as AuthClient, ClientOptions } from \"../client/index\";\n\n/**\n * Create a browser-configured auth client.\n *\n * Applies browser runtime defaults (`ConvexHttpClient` transport, local\n * storage, URL cleanup, OAuth launch, WebAuthn support) on top of the\n * framework-agnostic `client(...)` helper, then returns it directly — the core\n * owns OAuth launch/completion and initialization, driven by the injected\n * browser runtime.\n *\n * @param options - Browser client configuration. See {@link ClientOptions}.\n * @typeParam Api - Auth API references that control which factor helpers are\n *   available on the returned client.\n * @returns A browser auth client with the configured auth helpers.\n */\nexport function client<Api extends AuthApiRefs = AuthApiRefs>(\n  options: ClientOptions<Api>,\n): PlatformAuthClient<Api> {\n  const runtime = mergeBrowserRuntime(options.runtime);\n  const adapterFactories = {\n    ...options.adapterFactories,\n    webauthn: options.adapterFactories?.webauthn ?? ((deps) => createWebAuthnClient(deps)),\n  };\n\n  if (options.proxyPath !== undefined) {\n    return createClient<Api>({\n      ...options,\n      storage: options.storage ?? null,\n      runtime,\n      adapterFactories,\n    }) as unknown as PlatformAuthClient<Api>;\n  }\n\n  const url = options.url ?? resolveUrl(options.convex);\n  return createClient<Api>({\n    ...options,\n    runtime,\n    adapterFactories,\n    httpClient: options.httpClient ?? new ConvexHttpClient(url),\n  }) as unknown as PlatformAuthClient<Api>;\n}\n\nfunction mergeBrowserRuntime(\n  runtime: ClientOptions[\"runtime\"],\n): NonNullable<ClientOptions[\"runtime\"]> {\n  const defaults = createBrowserRuntime();\n  return {\n    ...defaults,\n    ...runtime,\n    environment: runtime?.environment ?? defaults.environment,\n    proxy: runtime?.proxy ?? defaults.proxy,\n    storage: runtime?.storage === undefined ? defaults.storage : runtime.storage,\n    location: runtime?.location ?? defaults.location,\n    oauth: runtime?.oauth ?? defaults.oauth,\n    sync: runtime?.sync ?? defaults.sync,\n    mutex: runtime?.mutex ?? defaults.mutex,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCA,SAAgB,OACd,SACyB;CACzB,MAAM,UAAU,oBAAoB,QAAQ,QAAQ;CACpD,MAAM,mBAAmB;EACvB,GAAG,QAAQ;EACX,UAAU,QAAQ,kBAAkB,cAAc,SAAS,qBAAqB,KAAK;EACtF;AAED,KAAI,QAAQ,cAAc,OACxB,QAAOA,SAAkB;EACvB,GAAG;EACH,SAAS,QAAQ,WAAW;EAC5B;EACA;EACD,CAAC;CAGJ,MAAM,MAAM,QAAQ,OAAO,WAAW,QAAQ,OAAO;AACrD,QAAOA,SAAkB;EACvB,GAAG;EACH;EACA;EACA,YAAY,QAAQ,cAAc,IAAI,iBAAiB,IAAI;EAC5D,CAAC;;AAGJ,SAAS,oBACP,SACuC;CACvC,MAAM,WAAW,sBAAsB;AACvC,QAAO;EACL,GAAG;EACH,GAAG;EACH,aAAa,SAAS,eAAe,SAAS;EAC9C,OAAO,SAAS,SAAS,SAAS;EAClC,SAAS,SAAS,YAAY,SAAY,SAAS,UAAU,QAAQ;EACrE,UAAU,SAAS,YAAY,SAAS;EACxC,OAAO,SAAS,SAAS,SAAS;EAClC,MAAM,SAAS,QAAQ,SAAS;EAChC,OAAO,SAAS,SAAS,SAAS;EACnC"}

package/dist/client/core/types.d.ts

@@ -1,7 +1,8 @@
+import { AnonymousParams, CodeParams, ConnectionParams, EmailParams, OAuthParams, PasswordParams } from "../../shared/params.js";
 import { AuthParameters } from "../../shared/results.js";
 import { ErrorCode } from "../../shared/codes.js";
 import { Value } from "convex/values";
-import { FunctionReference } from "convex/server";
+import { FunctionArgs, FunctionReference } from "convex/server";
 
 //#region src/client/core/types.d.ts
 /**
@@ -141,8 +142,19 @@ type AuthSubscriber = (state: AuthState) => void;
  * @typeParam HasTotp - Whether the TOTP provider is configured.
  * @typeParam HasDevice - Whether the device provider is configured.
  */
-type AuthApiRefs<HasWebAuthn extends boolean = boolean, HasTotp extends boolean = boolean, HasDevice extends boolean = boolean> = {
-  signIn: FunctionReference<"action", "public", Record<string, Value>, unknown>;
+type DefaultSignInReference = FunctionReference<"action", "public", {
+  request: {
+    provider?: string;
+    params?: AuthParameters;
+    refreshToken?: string;
+  };
+  verifier?: string;
+  continuation?: string;
+  calledBy?: string;
+}, unknown>;
+type AnySignInReference = FunctionReference<"action", "public", any, any>;
+type AuthApiRefs<SignIn extends AnySignInReference = DefaultSignInReference> = {
+  signIn: SignIn;
   signOut: FunctionReference<"action", "public", Record<string, Value>, unknown>;
 };
 /**
@@ -379,14 +391,15 @@ interface DeviceClient {
  *
  * @typeParam Api - An AuthApiRefs type to extract capability flags from.
  */
-type InferCaps<Api extends AuthApiRefs<boolean, boolean, boolean>> = Api extends AuthApiRefs<infer P, infer T, infer D> ? {
-  webauthn: P;
-  totp: T;
-  device: D;
-} : {
-  webauthn: boolean;
-  totp: boolean;
-  device: boolean;
+type SignInRequest<Api extends AuthApiRefs> = FunctionArgs<Api["signIn"]> extends infer Args ? Args extends {
+  request: infer Request;
+} ? Request : Args : never;
+type ProviderIds<Api extends AuthApiRefs> = [Api["signIn"]] extends [never] ? string : SignInRequest<Api> extends infer Args ? Args extends unknown ? "provider" extends keyof Args ? Exclude<Args[keyof Args & "provider"], undefined> : never : never : never;
+type HasProvider<Api extends AuthApiRefs, Id extends string> = string extends ProviderIds<Api> ? boolean : Id extends ProviderIds<Api> ? true : false;
+type InferCaps<Api extends AuthApiRefs> = {
+  webauthn: HasProvider<Api, "webauthn">;
+  totp: HasProvider<Api, "totp">;
+  device: HasProvider<Api, "device">;
 };
 /**
  * Include a capability when configured, omit it when disabled, and keep it
@@ -415,72 +428,16 @@ interface PendingInvite {
     token: string;
   }>;
 }
-/**
- * Discriminated union of params for the password provider's flows.
- *
- * Each branch maps to one of the six password flows: `signUp`, `signIn`,
- * `reset`, `recover`, `verify`, `change`. Selecting a `flow` literal narrows the
- * accepted params automatically.
- */
-type PasswordParams = {
-  flow: "signUp";
-  email: string;
-  password: string;
-  redirectTo?: string;
-} | {
-  flow: "signIn";
-  email: string;
-  password: string;
-  redirectTo?: string;
-} | {
-  flow: "reset";
-  email: string;
-  redirectTo?: string;
-} | {
-  flow: "recover";
-  email: string;
-  code: string;
-  newPassword: string;
-  redirectTo?: string;
-} | {
-  flow: "verify";
-  email: string;
-  code: string;
-  redirectTo?: string;
-} | {
-  flow: "change";
-  email: string;
-  currentPassword: string;
-  newPassword: string;
-  redirectTo?: string;
-};
 /** Params for the email (magic link) provider's initiation step. */
-type EmailInitiateParams = {
-  email: string;
-  redirectTo?: string;
-};
+type EmailInitiateParams = EmailParams;
 /**
  * Params for completing a code-based flow (no provider). Used to finalise
  * email magic-link sign-ins and other provider-owned code flows when the
  * verification call is made without re-specifying the originating provider.
  */
-type CodeCompletionParams = {
-  code: string;
-  redirectTo?: string;
-};
-/** Params for the `connection` provider — requires a connection ID. */
-type ConnectionParams = {
-  connectionId: string;
-  redirectTo?: string;
-};
-/** Params for the anonymous provider. Empty / `redirectTo` only. */
-type AnonymousParams = {
-  redirectTo?: string;
-};
+type CodeCompletionParams = CodeParams;
 /** Default params shape for OAuth-style providers (google, github, etc.). */
-type OAuthSignInParams = {
-  redirectTo?: string;
-};
+type OAuthSignInParams = OAuthParams;
 /**
  * Resolves the `params` argument shape from the `provider` literal.
  *
@@ -488,12 +445,21 @@ type OAuthSignInParams = {
  * Any other string falls back to OAuth-style params, since custom OAuth
  * providers can be registered under arbitrary IDs.
  */
-type ParamsForProvider<P> = P extends "password" ? PasswordParams : P extends "email" ? EmailInitiateParams : P extends "anonymous" ? AnonymousParams | undefined : P extends "connection" ? ConnectionParams : P extends "webauthn" ? never : P extends undefined ? CodeCompletionParams : OAuthSignInParams | undefined;
+type DefaultParamsForProvider<P> = P extends "password" ? PasswordParams : P extends "email" ? EmailInitiateParams : P extends "anonymous" ? AnonymousParams | undefined : P extends "connection" ? ConnectionParams : P extends "webauthn" ? never : P extends undefined ? CodeCompletionParams : OAuthSignInParams | undefined;
+type ConfiguredProviderArgs<Api extends AuthApiRefs, P> = SignInRequest<Api> extends infer Args ? (Args extends {
+  provider: P;
+} ? Args : never) : never;
+/** Resolve a provider's exact params from the generated auth action reference. */
+type ParamsForProvider<Api extends AuthApiRefs, P> = string extends ProviderIds<Api> ? DefaultParamsForProvider<P> : P extends "webauthn" | "totp" | "device" ? never : P extends "connection" ? ConnectionParams : [P] extends [undefined] ? CodeCompletionParams : ConfiguredProviderArgs<Api, P> extends infer Args ? [Args] extends [never] ? never : Args extends {
+  params: infer Params;
+} ? Params : Args extends {
+  params?: infer Params;
+} ? Params | undefined : undefined : never;
 /**
  * Tuple-rest helper that flips `params` between required and optional based
  * on whether `undefined` is in its resolved type.
  */
-type SignInArgs<P> = undefined extends ParamsForProvider<P> ? [params?: ParamsForProvider<P>] : [params: ParamsForProvider<P>];
+type SignInArgs<Api extends AuthApiRefs, P> = undefined extends ParamsForProvider<Api, P> ? [params?: ParamsForProvider<Api, P>] : [params: ParamsForProvider<Api, P>];
 /**
  * Public signature for `auth.signIn`. The provider literal discriminates the
  * params shape via {@link ParamsForProvider}, and the params slot is
@@ -506,9 +472,9 @@ type SignInArgs<P> = undefined extends ParamsForProvider<P> ? [params?: ParamsFo
  * auth.signIn("anonymous"); // params optional
  * ```
  */
-type SignInOverloads = <const P extends string | undefined>(provider: P, ...args: SignInArgs<P>) => Promise<SignInResult>;
+type SignInOverloads<Api extends AuthApiRefs = AuthApiRefs> = <const P extends ProviderIds<Api> | undefined>(provider: P, ...args: SignInArgs<Api, P>) => Promise<SignInResult>;
 /** Base auth client — always present. */
-interface AuthClientBase {
+interface AuthClientBase<Api extends AuthApiRefs> {
   /** Restore initial auth state for the current runtime. */
   initialize: () => Promise<void>;
   /** SSR-safe query-param reader. */
@@ -523,7 +489,7 @@ interface AuthClientBase {
     code: string;
   }) => Promise<OAuthCompletionResult>;
   /** Start a sign-in flow for a provider. */
-  signIn: SignInOverloads;
+  signIn: SignInOverloads<Api>;
   /** Sign out and clear local auth state. */
   signOut: () => Promise<void>;
   /** Subscribe to auth state changes; returns an unsubscribe. */
@@ -542,7 +508,7 @@ interface AuthClientBase {
  *
  * @typeParam Api - An AuthApiRefs type that determines which factor helpers are included.
  */
-type AuthClient<Api extends AuthApiRefs<boolean, boolean, boolean> = AuthApiRefs> = AuthClientBase & CapabilityClient<InferCaps<Api>["totp"], "totp", TotpClient> & CapabilityClient<InferCaps<Api>["device"], "device", DeviceClient>;
+type AuthClient<Api extends AuthApiRefs = AuthApiRefs> = AuthClientBase<Api> & CapabilityClient<InferCaps<Api>["totp"], "totp", TotpClient> & CapabilityClient<InferCaps<Api>["device"], "device", DeviceClient>;
 /**
  * Browser auth client return type.
  *
@@ -551,28 +517,18 @@ type AuthClient<Api extends AuthApiRefs<boolean, boolean, boolean> = AuthApiRefs
  *
  * @typeParam Api - An AuthApiRefs type that determines which factor helpers are included.
  */
-type PlatformAuthClient<Api extends AuthApiRefs<boolean, boolean, boolean> = AuthApiRefs> = AuthClient<Api> & CapabilityClient<InferCaps<Api>["webauthn"], "webauthn", WebAuthnClient>;
+type PlatformAuthClient<Api extends AuthApiRefs = AuthApiRefs> = AuthClient<Api> & CapabilityClient<InferCaps<Api>["webauthn"], "webauthn", WebAuthnClient>;
 /**
  * Options for {@link client}.
  *
  * @typeParam Api - An AuthApiRefs type.
  */
-type ClientOptions<Api extends AuthApiRefs<boolean, boolean, boolean> = AuthApiRefs> = {
+type ClientOptionsBase = {
   /** Any Convex client implementation used to run auth actions. */convex: ConvexTransport; /** Platform runtime implementation used by the client core. */
   runtime?: ClientRuntime; /** Platform-specific factor adapters supplied by higher-level entrypoints. */
   adapters?: ClientAdapters; /** Platform-specific adapter factories supplied by higher-level entrypoints. */
-  adapterFactories?: ClientAdapterFactories;
-  /**
-   * Typed auth function refs from your generated `api` object.
-   * Required outside proxy mode.
-   */
-  api?: Api; /** Explicit Convex deployment URL when it cannot be inferred from the client. */
+  adapterFactories?: ClientAdapterFactories; /** Explicit Convex deployment URL when it cannot be inferred from the client. */
   url?: string;
-  /**
-   * Optional action-only transport for direct code exchange outside proxy mode.
-   * Required in non-browser runtimes when `proxyPath` is not set.
-   */
-  httpClient?: ActionTransport | null;
   /**
    * Storage backend for persisted tokens.
    *
@@ -587,13 +543,7 @@ type ClientOptions<Api extends AuthApiRefs<boolean, boolean, boolean> = AuthApiR
    * persisted value from `storage` instead. Ongoing persistence always uses
    * `storage`.
    */
-  token?: string | null;
-  /**
-   * Proxy endpoint used instead of direct Convex auth calls.
-   * When set, provide `runtime.proxy` and omit direct `api`/`httpClient`
-   * transport requirements.
-   */
-  proxyPath?: string; /** SSR-safe URL source for reading query parameters. */
+  token?: string | null; /** SSR-safe URL source for reading query parameters. */
   location?: URL | (() => URL | null);
   /**
    * Default OAuth `redirectTo` applied to `signIn` calls that omit it. Platform
@@ -608,6 +558,27 @@ type ClientOptions<Api extends AuthApiRefs<boolean, boolean, boolean> = AuthApiR
    */
   handshakeTimeoutMs?: number;
 };
+/** Direct Convex mode. Generated auth references are the client contract. */
+type DirectClientOptions<Api extends AuthApiRefs = AuthApiRefs> = ClientOptionsBase & {
+  /** Typed auth function refs from the application's generated `api` object. */api: Api; /** Proxy transport and direct transport are mutually exclusive. */
+  proxyPath?: never;
+  /**
+   * Action-only transport used for direct code exchange. Browser and Expo
+   * entrypoints provide one automatically; headless runtimes must inject it.
+   */
+  httpClient?: ActionTransport | null;
+};
+/** HTTP proxy mode. The proxy owns the Convex function references. */
+type ProxyClientOptions = ClientOptionsBase & {
+  /** Proxy endpoint used instead of direct Convex auth calls. */proxyPath: string; /** Generated references belong to direct mode and cannot be mixed with a proxy. */
+  api?: never; /** Direct action transports belong to direct mode. */
+  httpClient?: never;
+};
+/**
+ * Client configuration. Selecting direct or proxy mode makes every required
+ * transport explicit and prevents the two modes from being combined.
+ */
+type ClientOptions<Api extends AuthApiRefs = AuthApiRefs> = DirectClientOptions<Api> | ProxyClientOptions;
 type OAuthCompletionResult = {
   handled: false;
 } | {
@@ -615,5 +586,5 @@ type OAuthCompletionResult = {
   cleanupUrl: URL | null;
 };
 //#endregion
-export { AnonymousParams, AuthApiRefs, AuthClient, AuthState, ClientOptions, ClientRuntime, CodeCompletionParams, ConnectionParams, DeviceClient, DeviceCodeResult, DevicePollParams, DeviceVerifyParams, EmailInitiateParams, OAuthCompletionResult, OAuthSignInParams, ParamsForProvider, PasswordParams, PendingInvite, PlatformAuthClient, SignInOverloads, SignInResult, Storage, TotpClient, TotpConfirmParams, TotpSetupOptions, TotpSetupResult, TotpVerifyParams, WebAuthnClient, WebAuthnRegisterOptions, WebAuthnSignInOptions };
+export { AuthApiRefs, AuthClient, AuthState, AuthSubscriber, ClientOptions, ClientRuntime, CodeCompletionParams, DeviceClient, DeviceCodeResult, DevicePollParams, DeviceVerifyParams, EmailInitiateParams, OAuthCompletionResult, OAuthSignInParams, PendingInvite, PlatformAuthClient, SignInResult, Storage, TotpClient, TotpConfirmParams, TotpSetupOptions, TotpSetupResult, TotpVerifyParams, WebAuthnClient, WebAuthnRegisterOptions, WebAuthnSignInOptions };
 //# sourceMappingURL=types.d.ts.map

package/dist/client/core/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","names":[],"sources":["../../../src/client/core/types.ts"],"mappings":";;;;;;;;AAqBA;;;;;;;UAAiB,eAAA;EACf,MAAA,CAAO,MAAA,WAAiB,IAAA,YAAgB,OAAA,CAAQ,KAAA;EAChD,OAAA,CACE,UAAA,GAAa,IAAA;IAAQ,iBAAA;EAAA,MAAiC,OAAA,6BACtD,QAAA,IAAY,eAAA;EAEd,SAAA;AAAA;;UAIe,eAAA;EACf,MAAA,CAAO,MAAA,WAAiB,IAAA,YAAgB,OAAA,CAAQ,KAAA;AAAA;;UAOjC,OAAA;EACf,OAAA,CAAQ,GAAA,uCAA0C,OAAA;EAClD,OAAA,CAAQ,GAAA,UAAa,KAAA,kBAAuB,OAAA;EAC5C,UAAA,CAAW,GAAA,kBAAqB,OAAA;AAAA;;UAIxB,eAAA;EACR,GAAA,IAAO,GAAA;EACP,OAAA,CAAQ,WAAA,kBAA6B,OAAA;AAAA;;;;;;AATvC;;;UAoBU,YAAA;EACR,IAAA,CAAK,GAAA,EAAK,GAAA,mBAAsB,GAAA,GAAM,OAAA,iBAAwB,GAAA;AAAA;;UAItD,WAAA;EACR,SAAA,CACE,GAAA,UACA,QAAA,GAAW,KAAA,2BAAgC,OAAA;AAAA;;UAKrC,YAAA;EACR,OAAA,IAAW,GAAA,UAAa,QAAA,QAAgB,OAAA,CAAQ,CAAA,IAAK,OAAA,CAAQ,CAAA;AAAA;;UAIrD,YAAA;EACR,KAAA,CAAM,IAAA,EAAM,cAAA,EAAgB,SAAA,WAAoB,OAAA,CAAQ,QAAA;AAAA;;;AAnCzD;;;;UA4CgB,aAAA;EACf,WAAA;EACA,OAAA,GAAU,OAAA;EACV,QAAA,GAAW,eAAA;EACX,KAAA,GAAQ,YAAA;EACR,IAAA,GAAO,WAAA;EACP,KAAA,GAAQ,YAAA;EACR,KAAA,GAAQ,YAAA;AAAA;;UAIO,cAAA;EACf,QAAA,GAAW,cAAA;EACX,IAAA,GAAO,UAAA;EACP,MAAA,GAAS,YAAA;AAAA;;;;KAyDC,gBAAA;EACV,UAAA;EACA,QAAA;EACA,eAAA;EACA,uBAAA;EACA,SAAA;EACA,QAAA;AAAA;;;;;;;;;;AAjG0D;;;KAgHhD,YAAA;EACN,IAAA;AAAA;EACA,IAAA;EAAkB,QAAA,EAAU,GAAA;EAAK,QAAA;AAAA;EACjC,IAAA;EAAsB,QAAA;AAAA;EACtB,IAAA;EAAoB,UAAA,EAAY,gBAAA;AAAA;EAChC,IAAA;AAAA;EACA,IAAA;EAAgB,IAAA,EAAM,SAAA;AAAA;;KAWhB,SAAA;EACN,MAAA;EAAmB,KAAA;AAAA;EACnB,MAAA;EAAqB,KAAA;AAAA;EACrB,MAAA;EAAoB,KAAA;AAAA;;KAGd,cAAA,IAAkB,KAAA,EAAO,SAAA;;AAnHrC;;;;;;;KA6HY,WAAA;EAKV,MAAA,EAAQ,iBAAA,qBAAsC,MAAA,SAAe,KAAA;EAC7D,OAAA,EAAS,iBAAA,qBAAsC,MAAA,SAAe,KAAA;AAAA;;;;KAYpD,uBAAA;EA5IC,uEA8IX,IAAA,WA7IQ;EA+IR,QAAA,WA9IO;EAgJP,eAAA;AAAA;;;;KAMU,qBAAA;EAhJK,qDAkJf,KAAA;EAEA,QAAA;AAAA;;;;;;;UASe,cAAA;EA1Jf;;;;AAyDF;;;;;;;;EA8GE,WAAA;EAxGA;;;AAeF;;;;;;;;;EAuGE,mBAAA,IAAuB,OAAA;EArGD;;;;;;;;;;;;;;AAexB;;EAwGE,QAAA,CAAS,IAAA,GAAO,uBAAA,GAA0B,OAAA,CAAQ,YAAA;EAxG/B;;;;;;;;;AAMrB;;;;EAoHE,MAAA,CAAO,IAAA,GAAO,qBAAA,GAAwB,OAAA,CAAQ,YAAA;AAAA;;;;KAMpC,gBAAA;EA3GF,kDA6GR,IAAA,WA5G+C;EA8G/C,WAAA;AAAA;;KAIU,eAAA;EAtHV,8CAwHA,GAAA,UArHA;EAuHA,MAAA,UAvH8C;EAyH9C,QAAA,UAxHA;EA0HA,MAAA;AAAA;;KAIU,iBAAA;EA9HyD,gDAgInE,IAAA,UApHiC;EAsHjC,QAAA,UAtHiC;EAwHjC,MAAA;AAAA;;KAIU,gBAAA;EAtHK,gDAwHf,IAAA,UAlH+B;EAoH/B,QAAA;AAAA;;AAvGF;;;;;UAgHiB,UAAA;EAnE2B;;;;;;;;;;;;;;;;;;EAsF1C,KAAA,CAAM,IAAA,GAAO,gBAAA,GAAmB,OAAA,CAAQ,eAAA;EApEkB;;AAM5D;;;;;AAQA;;;;;;;;;;AAYA;EA8DE,OAAA,CAAQ,IAAA,EAAM,iBAAA,GAAoB,OAAA,CAAQ,YAAA;;;;;;;;AApD5C;;;;;AAaA;;;;;;;;EA6DE,MAAA,CAAO,IAAA,EAAM,gBAAA,GAAmB,OAAA,CAAQ,YAAA;AAAA;;KAI9B,gBAAA;EACV,IAAA,EAAM,gBAAA,EALiC;EAOvC,MAAA,GAAS,WAAA;AAAA;;KAIC,kBAAA;EAAuB,IAAA;AAAA;;;;;;;UAQlB,YAAA;EAnBiB;;;;AAIlC;;;;;;;;;;AAOA;;;;;AAQA;;;;EAwBE,IAAA,CAAK,IAAA,EAAM,gBAAA,GAAmB,OAAA;EAiBjB;;;;;;;;;;;;;;AACd;EADC,MAAA,CAAO,IAAA,EAAM,kBAAA,GAAqB,OAAA;AAAA;;;;;;KAQ/B,SAAA,aAAsB,WAAA,+BACzB,GAAA,SAAY,WAAA;EACN,QAAA,EAAU,CAAA;EAAG,IAAA,EAAM,CAAA;EAAG,MAAA,EAAQ,CAAA;AAAA;EAC9B,QAAA;EAAmB,IAAA;EAAe,MAAA;AAAA;;;;;KAMrC,gBAAA,0DAA0E,OAAA,4CAIxD,OAAA,cACP,IAAA,IAAQ,MAAA,eACR,IAAA,GAAO,MAAA;;UAGN,aAAA;EATI;;;;EAAA,SAcV,KAAA;EATa;;;;EAAA,SAcb,KAAA;EAnBW;;;;;;EA0BpB,MAAA,IAAU,OAAA;IAAU,KAAA;EAAA;AAAA;;;;AAjBtB;;;;KA2BY,cAAA;EACN,IAAA;EAAgB,KAAA;EAAe,QAAA;EAAkB,UAAA;AAAA;EACjD,IAAA;EAAgB,KAAA;EAAe,QAAA;EAAkB,UAAA;AAAA;EACjD,IAAA;EAAe,KAAA;EAAe,UAAA;AAAA;EAC9B,IAAA;EAAiB,KAAA;EAAe,IAAA;EAAc,WAAA;EAAqB,UAAA;AAAA;EACnE,IAAA;EAAgB,KAAA;EAAe,IAAA;EAAc,UAAA;AAAA;EAE7C,IAAA;EACA,KAAA;EACA,eAAA;EACA,WAAA;EACA,UAAA;AAAA;;KAIM,mBAAA;EAAwB,KAAA;EAAe,UAAA;AAAA;;AAAnD;;;;KAOY,oBAAA;EAAyB,IAAA;EAAc,UAAA;AAAA;;KAGvC,gBAAA;EAAqB,YAAA;EAAsB,UAAA;AAAA;;KAG3C,eAAA;EAAoB,UAAA;AAAA;;KAGpB,iBAAA;EAAsB,UAAA;AAAA;;;;;AASlC;;;KAAY,iBAAA,MAAuB,CAAA,sBAC/B,cAAA,GACA,CAAA,mBACE,mBAAA,GACA,CAAA,uBACE,eAAA,eACA,CAAA,wBACE,gBAAA,GACA,CAAA,8BAEE,CAAA,qBACE,oBAAA,GACA,iBAAA;;;;;KAMF,UAAA,wBACQ,iBAAA,CAAkB,CAAA,KAC/B,MAAA,GAAS,iBAAA,CAAkB,CAAA,MAC3B,MAAA,EAAQ,iBAAA,CAAkB,CAAA;;;;;;;;;;;;;KAcrB,eAAA,wCACV,QAAA,EAAU,CAAA,KACP,IAAA,EAAM,UAAA,CAAW,CAAA,MACjB,OAAA,CAAQ,YAAA;;UAYH,cAAA;EA5CF;EA8CN,UAAA,QAAkB,OAAA;EA5CV;EA8CR,KAAA,GAAQ,IAAA;EA3CI;;;;EAAA,SAgDH,MAAA,EAAQ,aAAA;EAzCG;EA2CpB,aAAA,GAAgB,KAAA,EAAO,GAAA;IAAiB,IAAA;EAAA,MAAmB,OAAA,CAAQ,qBAAA;EAzCnC;EA2ChC,MAAA,EAAQ,eAAA;EA1CuB;EA4C/B,OAAA,QAAe,OAAA;EA5Ce;EA8C9B,SAAA,GAAY,OAAA,EAAS,cAAA;EAjDA;EAmDrB,WAAA,QAAmB,SAAA;EAlDiB;EAoDpC,OAAA;AAAA;;;;;;;AApCF;;;KAgDY,UAAA,aAAuB,WAAA,8BAAyC,WAAA,IAC1E,cAAA,GACE,gBAAA,CAAiB,SAAA,CAAU,GAAA,mBAAsB,UAAA,IACjD,gBAAA,CAAiB,SAAA,CAAU,GAAA,uBAA0B,YAAA;;;;;;;;;KAU7C,kBAAA,aAA+B,WAAA,8BAAyC,WAAA,IAClF,UAAA,CAAW,GAAA,IAAO,gBAAA,CAAiB,SAAA,CAAU,GAAA,2BAA8B,cAAA;;;;;;KAOjE,aAAA,aAA0B,WAAA,8BAAyC,WAAA;EAlEtD,iEAoEvB,MAAA,EAAQ,eAAA,EAxDc;EA0DtB,OAAA,GAAU,aAAA,EAxDQ;EA0DlB,QAAA,GAAW,cAAA,EAjDY;EAmDvB,gBAAA,GAAmB,sBAAA;EAnDwC;;;;EAwD3D,GAAA,GAAM,GAAA,EAhDsB;EAkD5B,GAAA;EAnEA;;;;EAwEA,UAAA,GAAa,eAAA;EAjEI;;;;;EAuEjB,OAAA,GAAU,OAAA;EArEyD;;;;;;;;EA8EnE,KAAA;EAtEmB;;;;AAcrB;EA8DE,SAAA,WA9DoB;EAgEpB,QAAA,GAAW,GAAA,UAAa,GAAA;EAhEkD;;;;;EAsE1E,eAAA;EAnE6B;;;;;EAyE7B,kBAAA;AAAA;AAAA,KAGU,qBAAA;EAA0B,OAAA;AAAA;EAAqB,OAAA;EAAe,UAAA,EAAY,GAAA;AAAA"}
+{"version":3,"file":"types.d.ts","names":[],"sources":["../../../src/client/core/types.ts"],"mappings":";;;;;;;;;AA6BA;;;;;;;UAAiB,eAAA;EACf,MAAA,CAAO,MAAA,WAAiB,IAAA,YAAgB,OAAA,CAAQ,KAAA;EAChD,OAAA,CACE,UAAA,GAAa,IAAA;IAAQ,iBAAA;EAAA,MAAiC,OAAA,6BACtD,QAAA,IAAY,eAAA;EAEd,SAAA;AAAA;;UAIe,eAAA;EACf,MAAA,CAAO,MAAA,WAAiB,IAAA,YAAgB,OAAA,CAAQ,KAAA;AAAA;;UAOjC,OAAA;EACf,OAAA,CAAQ,GAAA,uCAA0C,OAAA;EAClD,OAAA,CAAQ,GAAA,UAAa,KAAA,kBAAuB,OAAA;EAC5C,UAAA,CAAW,GAAA,kBAAqB,OAAA;AAAA;;UAIxB,eAAA;EACR,GAAA,IAAO,GAAA;EACP,OAAA,CAAQ,WAAA,kBAA6B,OAAA;AAAA;;;;;;AATvC;;;UAoBU,YAAA;EACR,IAAA,CAAK,GAAA,EAAK,GAAA,mBAAsB,GAAA,GAAM,OAAA,iBAAwB,GAAA;AAAA;;UAItD,WAAA;EACR,SAAA,CACE,GAAA,UACA,QAAA,GAAW,KAAA,2BAAgC,OAAA;AAAA;;UAKrC,YAAA;EACR,OAAA,IAAW,GAAA,UAAa,QAAA,QAAgB,OAAA,CAAQ,CAAA,IAAK,OAAA,CAAQ,CAAA;AAAA;;UAIrD,YAAA;EACR,KAAA,CAAM,IAAA,EAAM,cAAA,EAAgB,SAAA,WAAoB,OAAA,CAAQ,QAAA;AAAA;;;AAnCzD;;;;UA4CgB,aAAA;EACf,WAAA;EACA,OAAA,GAAU,OAAA;EACV,QAAA,GAAW,eAAA;EACX,KAAA,GAAQ,YAAA;EACR,IAAA,GAAO,WAAA;EACP,KAAA,GAAQ,YAAA;EACR,KAAA,GAAQ,YAAA;AAAA;;UAIO,cAAA;EACf,QAAA,GAAW,cAAA;EACX,IAAA,GAAO,UAAA;EACP,MAAA,GAAS,YAAA;AAAA;;;;KA8DC,gBAAA;EACV,UAAA;EACA,QAAA;EACA,eAAA;EACA,uBAAA;EACA,SAAA;EACA,QAAA;AAAA;;;;;;;;;;AAtG0D;;;KAqHhD,YAAA;EACN,IAAA;AAAA;EACA,IAAA;EAAkB,QAAA,EAAU,GAAA;EAAK,QAAA;AAAA;EACjC,IAAA;EAAsB,QAAA;AAAA;EACtB,IAAA;EAAoB,UAAA,EAAY,gBAAA;AAAA;EAChC,IAAA;AAAA;EACA,IAAA;EAAgB,IAAA,EAAM,SAAA;AAAA;;KAWhB,SAAA;EACN,MAAA;EAAmB,KAAA;AAAA;EACnB,MAAA;EAAqB,KAAA;AAAA;EACrB,MAAA;EAAoB,KAAA;AAAA;;KAGd,cAAA,IAAkB,KAAA,EAAO,SAAA;;AAxHrC;;;;;;;KAkIK,sBAAA,GAAyB,iBAAA;EAI1B,OAAA;IACE,QAAA;IACA,MAAA,GAAS,cAAA;IACT,YAAA;EAAA;EAEF,QAAA;EACA,YAAA;EACA,QAAA;AAAA;AAAA,KAKC,kBAAA,GAAqB,iBAAA;AAAA,KAEd,WAAA,gBAA2B,kBAAA,GAAqB,sBAAA;EAC1D,MAAA,EAAQ,MAAA;EACR,OAAA,EAAS,iBAAA,qBAAsC,MAAA,SAAe,KAAA;AAAA;;;;KAMpD,uBAAA;EAjJK,uEAmJf,IAAA;EAEA,QAAA,WAnJO;EAqJP,eAAA;AAAA;;;;KAMU,qBAAA;EA3JH,qDA6JP,KAAA,WA5JS;EA8JT,QAAA;AAAA;AAhGF;;;;;;AAAA,UAyGiB,cAAA;EArGf;;;;;AAiBF;;;;;;;EAiGE,WAAA;EAhGI;;;;;;;;;;;;EA8GJ,mBAAA,IAAuB,OAAA;EAzGG;;;AAW5B;;;;;;;;;;;;AAMA;EA0GE,QAAA,CAAS,IAAA,GAAO,uBAAA,GAA0B,OAAA,CAAQ,YAAA;;;;AA1GI;;;;;;;;;;EA+HtD,MAAA,CAAO,IAAA,GAAO,qBAAA,GAAwB,OAAA,CAAQ,YAAA;AAAA;;;;KAMpC,gBAAA;EA3GW,kDA6GrB,IAAA,WA7GwB;EA+GxB,WAAA;AAAA;;KAIU,eAAA;EAjH2B,8CAmHrC,GAAA,UAlHQ;EAoHR,MAAA,UAnH+C;EAqH/C,QAAA,UArH0B;EAuH1B,MAAA;AAAA;;KAIU,iBAAA;EA5HV,gDA8HA,IAAA,UA7HA;EA+HA,QAAA,UA/H+C;EAiI/C,MAAA;AAAA;;KAIU,gBAAA;EA/HuB,gDAiIjC,IAAA,UAjIiC;EAmIjC,QAAA;AAAA;;;;AAvHF;;;UAgIiB,UAAA;EA5HP;AASV;;;;;;;;;;;;;;;;;EAsIE,KAAA,CAAM,IAAA,GAAO,gBAAA,GAAmB,OAAA,CAAQ,eAAA;EAzFE;;;;;;;;;AA2B5C;;;;;AAQA;;;;EA0EE,OAAA,CAAQ,IAAA,EAAM,iBAAA,GAAoB,OAAA,CAAQ,YAAA;EAtE1C;;;;;AAQF;;;;;;;;;AAUA;;;;;AAaA;EA6DE,MAAA,CAAO,IAAA,EAAM,gBAAA,GAAmB,OAAA,CAAQ,YAAA;AAAA;;KAI9B,gBAAA;EACV,IAAA,EAAM,gBAAA,EA3BQ;EA6Bd,MAAA,GAAS,WAAA;AAAA;;KAIC,kBAAA;EAAuB,IAAA;AAAA;;;;;;;UAQlB,YAAA;EAzCD;;;;;;;;;;;AA0BhB;;;;;;;;;;AAOA;;EAgCE,IAAA,CAAK,IAAA,EAAM,gBAAA,GAAmB,OAAA;EAhCG;;AAQnC;;;;;;;;;;;;;EAyCE,MAAA,CAAO,IAAA,EAAM,kBAAA,GAAqB,OAAA;AAAA;;;;;AACnC;KAOI,aAAA,aAA0B,WAAA,IAC7B,YAAA,CAAa,GAAA,iCACT,IAAA;EAAe,OAAA;AAAA,IACb,OAAA,GACA,IAAA;AAAA,KAGH,WAAA,aAAwB,WAAA,KAAgB,GAAA,uCAEzC,aAAA,CAAc,GAAA,uBACZ,IAAA,4CAC2B,IAAA,GACvB,OAAA,CAAQ,IAAA,OAAW,IAAA;AAAA,KAKxB,WAAA,aAAwB,WAAA,sCACZ,WAAA,CAAY,GAAA,cAAiB,EAAA,SAAW,WAAA,CAAY,GAAA;AAAA,KAEhE,SAAA,aAAsB,WAAA;EACzB,QAAA,EAAU,WAAA,CAAY,GAAA;EACtB,IAAA,EAAM,WAAA,CAAY,GAAA;EAClB,MAAA,EAAQ,WAAA,CAAY,GAAA;AAAA;;;;;KAOjB,gBAAA,0DAA0E,OAAA,4CAIxD,OAAA,cACP,IAAA,IAAQ,MAAA,eACR,IAAA,GAAO,MAAA;;UAGN,aAAA;EAhC4B;;;;EAAA,SAqClC,KAAA;EAhCkB;;;;EAAA,SAqClB,KAAA;EA1CkB;;;;;;EAiD3B,MAAA,IAAU,OAAA;IAAU,KAAA;EAAA;AAAA;;KAaV,mBAAA,GAAsB,WAAA;;;;;;KAOtB,oBAAA,GAAuB,UAAA;;KASvB,iBAAA,GAAoB,WAAA;;AAnEwC;;;;;;KA4EnE,wBAAA,MAA8B,CAAA,sBAC/B,cAAA,GACA,CAAA,mBACE,mBAAA,GACA,CAAA,uBACE,eAAA,eACA,CAAA,wBACE,gBAAA,GACA,CAAA,8BAEE,CAAA,qBACE,oBAAA,GACA,iBAAA;AAAA,KAET,sBAAA,aAAmC,WAAA,OACtC,aAAA,CAAc,GAAA,wBAA2B,IAAA;EAAe,QAAA,EAAU,CAAA;AAAA,IAAM,IAAA;;KAG9D,iBAAA,aAA8B,WAAA,sBACzB,WAAA,CAAY,GAAA,IACvB,wBAAA,CAAyB,CAAA,IACzB,CAAA,kDAEE,CAAA,wBACE,gBAAA,IACC,CAAA,wBACC,oBAAA,GACA,sBAAA,CAAuB,GAAA,EAAK,CAAA,wBACzB,IAAA,4BAEC,IAAA;EAAe,MAAA;AAAA,IACb,MAAA,GACA,IAAA;EAAe,MAAA;AAAA,IACb,MAAA;;;;;KAQR,UAAA,aAAuB,WAAA,yBACf,iBAAA,CAAkB,GAAA,EAAK,CAAA,KACpC,MAAA,GAAS,iBAAA,CAAkB,GAAA,EAAK,CAAA,MAChC,MAAA,EAAQ,iBAAA,CAAkB,GAAA,EAAK,CAAA;;;;;AAnHb;;;;;;;;KAiIb,eAAA,aAA4B,WAAA,GAAc,WAAA,qBACpC,WAAA,CAAY,GAAA,eAE5B,QAAA,EAAU,CAAA,KACP,IAAA,EAAM,UAAA,CAAW,GAAA,EAAK,CAAA,MACtB,OAAA,CAAQ,YAAA;;UAYH,cAAA,aAA2B,WAAA;EA3If;EA6IpB,UAAA,QAAkB,OAAA;EA7IgD;EA+IlE,KAAA,GAAQ,IAAA;EA3Ia;;;;EAAA,SAgJZ,MAAA,EAAQ,aAAA;EA9IH;EAgJd,aAAA,GAAgB,KAAA,EAAO,GAAA;IAAiB,IAAA;EAAA,MAAmB,OAAA,CAAQ,qBAAA;EA7IpD;EA+If,MAAA,EAAQ,eAAA,CAAgB,GAAA;;EAExB,OAAA,QAAe,OAAA;EA5IN;EA8IT,SAAA,GAAY,OAAA,EAAS,cAAA;EAlIrB;EAoIA,WAAA,QAAmB,SAAA;EApIC;EAsIpB,OAAA;AAAA;AAzHF;;;;;AAOA;;;;AAPA,KAqIY,UAAA,aAAuB,WAAA,GAAc,WAAA,IAAe,cAAA,CAAe,GAAA,IAC7E,gBAAA,CAAiB,SAAA,CAAU,GAAA,mBAAsB,UAAA,IACjD,gBAAA,CAAiB,SAAA,CAAU,GAAA,uBAA0B,YAAA;AAvHvD;;;;;AAA4C;;;AAA5C,KAiIY,kBAAA,aAA+B,WAAA,GAAc,WAAA,IAAe,UAAA,CAAW,GAAA,IACjF,gBAAA,CAAiB,SAAA,CAAU,GAAA,2BAA8B,cAAA;;;;;;KAOtD,iBAAA;EAzHK,iEA2HR,MAAA,EAAQ,eAAA,EAxHE;EA0HV,OAAA,GAAU,aAAA,EAxHE;EA0HZ,QAAA,GAAW,cAAA,EA1HkB;EA4H7B,gBAAA,GAAmB,sBAAA,EAxIc;EA0IjC,GAAA;EAxIE;;;;;EA8IF,OAAA,GAAU,OAAA;EAxIF;;;;;;AAIqB;;EA6I7B,KAAA,kBA3IsC;EA6ItC,QAAA,GAAW,GAAA,UAAa,GAAA;EA5IxB;;;;;EAkJA,eAAA;EAnJmD;;;;;EAyJnD,kBAAA;AAAA;;KAIU,mBAAA,aAAgC,WAAA,GAAc,WAAA,IAAe,iBAAA;EA5JK,8EA8J5E,GAAA,EAAK,GAAA,EA3JsB;EA6J3B,SAAA;EA7JwC;;;;EAkKxC,UAAA,GAAa,eAAA;AAAA;;KAIH,kBAAA,GAAqB,iBAAA;EA/JtB,+DAiKT,SAAA,UA/JiC;EAiKjC,GAAA,UAjKU;EAmKV,UAAA;AAAA;;;;;KAOU,aAAA,aAA0B,WAAA,GAAc,WAAA,IAChD,mBAAA,CAAoB,GAAA,IACpB,kBAAA;AAAA,KAEQ,qBAAA;EAA0B,OAAA;AAAA;EAAqB,OAAA;EAAe,UAAA,EAAY,GAAA;AAAA"}