@fuzdev/fuz_app 0.114.0 → 0.116.0

package/dist/ui/CLAUDE.md

@@ -77,9 +77,125 @@ pattern rather than reintroducing prop-drilling.
 
 - `AppShell.svelte` — sidebar-and-main shell. Props: `children`,
   `sidebar` (Snippet), `sidebar_width = 180`, `sidebar_state?`,
-  `keyboard_shortcut?`, `show_toggle?`, `toggle_button?`.
-  Provisions `sidebar_state_context` internally (creates a fresh
-  `SidebarState` if `sidebar_state` prop is not supplied).
+  `keyboard_shortcut?`, `show_toggle?`, `toggle_button?` (receives
+  `{title, show_sidebar, toggle, sidebar_id}`). Provisions
+  `sidebar_state_context` internally (creates one `SidebarState` if the
+  `sidebar_state` prop is not supplied). Requires the SvelteKit runtime
+  (`afterNavigate` from `$app/navigation`). The toggle renders only while
+  `show_toggle && sidebar_state.enabled`, before the sidebar in the DOM;
+  the built-in one is a disclosure (`aria-expanded` + `aria-controls`
+  pointing at the sidebar's `$props.id()` id) with the static name
+  `aria-label="sidebar"`, a dynamic `title`, `aria-keyshortcuts` when
+  `keyboard_shortcut` is set, and a `←` glyph CSS mirrors when closed.
+  The shortcut acts only while the sidebar is enabled, on the current
+  mode's field (so it drives the overlay at narrow widths).
+  - **Custom toggles** (`toggle_button`): give the button
+    `class="app-shell-toggle"` — it renders as a direct child of the root,
+    where a `:global` rule (the snippet's markup carries no scope hash)
+    stacks it one above the sidebar; the z-index applies only to a
+    positioned button, so position it (e.g. `position: fixed`, like the
+    built-in one) — and `aria-controls={sidebar_id}`, which the
+    focus fallback looks up (the first match that takes focus wins).
+    `show_sidebar` is viewport-dependent (the server renders it as wide):
+    attributes are repaired on hydration, but visible content keyed on it
+    changes at narrow widths, so key visible content on CSS or the
+    viewport-free fields.
+  - **Two modes, split by `SidebarState.narrow_query`.** Wide: the sidebar
+    sits beside the content (padded by `--sidebar_offset`) and follows
+    `show_sidebar_wide`. Narrow: it starts closed and opens as an overlay
+    (capped at `85vw`) over a scrim, following `show_sidebar_narrow`; the
+    content is `inert` while open. The overlay closes on navigation
+    (`afterNavigate` inside `AppShell` — consumers write nothing), Escape,
+    a scrim click, and widening out of narrow mode (a crossing `$effect`).
+    Not `role="dialog"` — the same element is the persistent sidebar at
+    wide, so no focus trap.
+  - **Escape** is a window `keydown` listener registered by an `$effect`
+    only while the overlay is open, so listeners registered earlier (a
+    contextmenu's, mounted with the page) see Escape first and can swallow
+    it. It never calls `preventDefault`, so the browser's close requests
+    (dialog `cancel`, `popover="auto"`) stay intact, and it bails while a
+    modal is open (`document.querySelector(':modal')` matches). An open
+    `popover="auto"` isn't `:modal`, so one Escape closes it and the overlay
+    together. Closing is `flushSync`ed so the content leaves `inert` before
+    focus returns. When focus was inside the sidebar or had fallen to `body`
+    (opening from the content makes it `inert`, which drops focus there), it
+    goes back to the opener if still connected and focusable, else to the
+    first `[aria-controls="<sidebar_id>"]` that takes focus (Safari doesn't
+    focus a clicked button, so the opener can be `null`). A narrow-mode
+    close from `keyboard_shortcut` goes through the same close-and-return
+    path; wide mode just toggles. The shortcut bails on an open modal too,
+    so pressing it inside a dialog opened from the overlay doesn't close the
+    overlay behind it.
+  - **No hydration flash.** The mode rules sit in two cascade layers
+    nested under `fuz_app`. `@layer fuz_app.app_shell_base` in the scoped
+    `<style>` holds the base and state rules, which apply in both modes;
+    the narrow overrides are one `<style media={narrow_query}>` in
+    `<svelte:head>` (Svelte attribute-escapes the query; the CSS text is
+    constant), inside `@layer fuz_app.app_shell_narrow`, rendered only
+    while `narrow_query` isn't `null`. Both sheets open with
+    `@layer fuz_app.app_shell_base, fuz_app.app_shell_narrow;`, so the
+    narrow layer wins whatever the selectors' specificity (the scoped ones
+    carry the hash) and whichever sheet the browser meets first — a
+    client-mounted shell appending its head style late changes nothing.
+    The root's state classes read only the viewport-free fields, so the
+    server render and hydration agree and CSS picks the mode; `narrow` only
+    drives `inert`, ARIA, and input routing. The narrow rules are unscoped
+    (they match every `.app-shell` by plain class names), so shells mounted
+    at the same time must share a `narrow_query`. CSP: needs
+    `style-src-elem 'unsafe-inline'` (fuz_ui's CSP default allows it) or
+    the style's hash.
+  - **Layer names are namespaced** under one top-level `fuz_app` layer, so
+    they can't collide with a consumer's and a consumer that layers its own
+    CSS has one name to order against: `@layer fuz_app, overrides;` in a
+    sheet that loads before the shell puts `overrides` above it.
+  - **Never layer a property the reset sets.** fuz_css's reset
+    (`*, ::before, ::after, ::backdrop`) sets `box-sizing`, `border`,
+    `margin`, and `padding`, and it's unlayered, so it beats every layered
+    declaration of those at any specificity. The shell routes such a value
+    through a custom property the layers set and one unlayered rule reads.
+    The content offset is the one case: the layers set `--sidebar_offset`
+    on `.app-shell-content` (`--sidebar_width` under `.wide-open`, `0px`
+    otherwise and in the narrow layer), and
+    `:global(div:where(.app-shell > .app-shell-content)) { padding-left: var(--sidebar_offset, 0px) }`
+    reads it, unscoped at (0,0,1) — above the reset's (0,0,0), below any
+    class selector. The SSR test fails any layered `padding*`, `margin*`,
+    `border*`, or `box-sizing` declaration. No other layered declaration
+    overlaps the reset or fuz_css's element base rules (the sidebar, scrim,
+    and content are `div`s and the glyph a `span`, which fuz_css leaves
+    unstyled; the toggle's only layered property is `z-index`, which
+    `button`'s base rule doesn't set).
+  - **Public class hooks**: `.app-shell` (state classes `.wide-open` /
+    `.narrow-open`), `.app-shell-content`, `.app-shell-sidebar`,
+    `.app-shell-scrim`, `.app-shell-toggle`, `.app-shell-toggle-glyph`.
+    **Any unlayered rule overrides the shell**, at any specificity and in
+    any sheet order, so no specificity matching is needed. The flip side
+    is the reset case above: an unlayered rule that sets a property the
+    shell layers wins over it, which is why the shell keeps reset-owned
+    properties out of its layers. A consumer's own layered rules order
+    against `fuz_app` by first appearance in the document, so keep
+    overrides unlayered or order `fuz_app` first. The rules that must
+    reach consumer markup are `:global` under the scoped root: the toggle's
+    z-index (`.app-shell > .app-shell-toggle`), the glyph mirroring
+    (`.app-shell > .app-shell-toggle .app-shell-toggle-glyph`, so a custom
+    toggle can reuse `.app-shell-toggle-glyph` inside its
+    `.app-shell-toggle`; going through the root's own toggle keeps an outer
+    shell's state off a nested shell's glyph), and
+    `.app-shell-sidebar :modal { visibility: visible }`, which keeps a
+    top-layer dialog opened from the sidebar shown while the sidebar hides.
+  - **CSS variables**: `--sidebar_width` (always the configured width, set
+    from the prop — not the effective offset), `--sidebar_offset` (the
+    effective offset, set on `.app-shell-content`: `--sidebar_width` while
+    the wide sidebar is open, else `0px`; the content's descendants can
+    read it, e.g. to inset a fixed header), `--sidebar_bg` (default
+    `--shade_05`), `--sidebar_z_index` (default `200` in both modes; the
+    scrim shares it, the toggle sits one above), `--sidebar_scrim_bg`
+    (default `--darken_40`). Override the offset by setting
+    `--sidebar_offset` or writing a `padding-left` rule on
+    `.app-shell-content`; a consumer `padding` shorthand there overrides it
+    too. Either applies in both modes and open or closed, since the state
+    classes don't track the viewport — wrap it in the narrow query's negation
+    to keep narrow mode at `0px`. To change only the wide open offset, target
+    `.app-shell.wide-open > .app-shell-content`, also inside that negation.
 - `ColumnLayout.svelte` — fixed `aside` column + fluid `children`
   column; `column_width = '280px'`.
 - `MenuLink.svelte` — SvelteKit `<a>` with `selected` derived from
@@ -87,13 +203,30 @@ pattern rather than reintroducing prop-drilling.
   Exact matches additionally get `aria-current="page"`. Takes `path`
   (resolved via `resolve` from `$app/paths`). The `.highlighted` name is
   intentionally free for orthogonal emphasis (badges, recent activity).
-- `sidebar_state.svelte.ts` — `SidebarState` (with `activate()` cleanup
-  pattern, optional reactive `enabled` getter), `sidebar_state_context`.
+- `sidebar_state.svelte.ts` — `SidebarState`, `sidebar_state_context`,
+  `SIDEBAR_NARROW_QUERY_DEFAULT` (`'(max-width: 800px)'`). Options:
+  `enabled?` (reactive getter overriding the internal field) and
+  `narrow_query?` (`null` disables narrow mode; must contain parentheses
+  since it feeds both CSS `media` and `MediaQuery`, which would auto-wrap a
+  paren-less query while CSS wouldn't — throws in DEV). Visibility is two
+  viewport-free fields, `show_sidebar_wide` (default `true`, the desktop
+  preference narrow interactions never touch) and `show_sidebar_narrow`
+  (default `false`). `narrow` is the viewport match (`false` in SSR);
+  `show_sidebar` is the effective visibility for the current mode and its
+  setter writes that mode's field, as does `toggle_sidebar` (routed at call
+  time). `close_narrow()` closes the overlay. `activate()` enables and
+  shows wide; its disposer clears `enabled` and both fields — pair with
+  `$effect` for scoped activation.
 
 ## Auth forms
 
 All four consume `auth_state_context.get()`; all three form-driven ones
-attach a `FormState` for Enter-advance + blur-touched validation.
+attach a `FormState` for Enter-advance + blur-touched validation. While a
+submit is in flight their fields are `readonly` and the `PendingButton` is
+`aria-disabled` (with `disabled={false}` overriding its disable-while-pending
+default), never `disabled` — disabling the focused element drops focus to
+`<body>`. So the handler guards re-entry itself (`if (auth_state.verifying)
+return;`), since Enter and clicks still reach it.
 
 - `LoginForm.svelte` — props `username_label = 'username or email'`,
   `redirect_on_login`. Clears `auth_state.verify_error` on input.
@@ -170,13 +303,18 @@ destructive actions.
   to a specific actor on the recipient account; default account-grain),
   `roles: Array<string>` (pre-filtered upstream by admin-grant-path —
   `RoleSpec.grant_paths` includes `'admin'`),
-  `scope_id = null`, `on_created?`, `format_role?`. Surfaces five
-  reason codes with friendly copy: `ERROR_ROLE_GRANT_OFFER_SELF_TARGET`,
+  `scope_kind` + `scope_id` (`RoleGrantOfferScope` — together, or neither
+  for a global offer; the prop types refuse one alone), `on_created?`,
+  `format_role?`. Surfaces the RPC error reasons with friendly copy:
+  `ERROR_ROLE_GRANT_OFFER_SELF_TARGET`,
   `ERROR_ROLE_GRANT_OFFER_ROLE_NOT_GRANTABLE`, `ERROR_ROLE_GRANT_OFFER_NOT_AUTHORIZED`,
+  `ERROR_ROLE_GRANT_BUILTIN_SCOPED`,
   `ERROR_ROLE_GRANT_OFFER_ACTOR_ACCOUNT_MISMATCH`, `ERROR_ROLE_GRANT_OFFER_ACTOR_MISMATCH`
-  — imported from `auth/role_grant_offer_action_specs.js` (see
+  — imported from `auth/role_grant_offer_action_specs.ts` (see
   `auth/CLAUDE.md` for `role_grant_offer_action_specs.ts` +
-  `role_grant_offer_actions.ts`).
+  `role_grant_offer_actions.ts`). Submits like the auth forms (`readonly`
+  textarea, `aria-disabled` button, re-entry guard); its select stays
+  `disabled`, having no `readonly` — safe, since the button has focus.
 - `RoleGrantOfferHistory.svelte` — both-directions history (recipient +
   grantor, including terminal). Props: `current_actor_id: string | null`
   (classifies row as "sent" vs "received"), `format_actor?`,
@@ -259,8 +397,10 @@ destructive actions.
   Methods: `form()` (returns a Svelte `Attachment` for the form
   element), `show(field)` (touched OR attempted), `is_touched(field)`,
   `touch(field)` (programmatic), `focus(field)` (queries by `name`),
-  `attempt()`, `reset()`. In DEV throws if an input loses focus
-  without a `name` attribute — all tracked inputs must be named.
+  `attempt()`, `reset()`. Generic over its field names —
+  `new FormState<'username' | 'password'>()` makes a misspelled field a
+  compile error (defaults to `string`). In DEV throws if an input loses
+  focus without a `name` attribute — all tracked inputs must be named.
 - `sidebar_state.svelte.ts` — see Shell + layout above.
 
 ## Per-domain state modules

package/dist/ui/LoginForm.svelte

@@ -34,12 +34,15 @@
 	} = $props();
 
 	const auth_state = auth_state_context.get();
-	const form_state = new FormState();
+	const form_state = new FormState<'username' | 'password'>();
 
 	let username = $state.raw('');
 	let password = $state.raw('');
 
 	const handle_login = async (): Promise<void> => {
+		// while verifying the fields are `readonly` and the button `aria-disabled` —
+		// `disabled` would drop focus to `<body>` — so Enter and clicks still land here
+		if (auth_state.verifying) return;
 		const u = username.trim();
 		const p = password;
 		if (!u) {
@@ -79,7 +82,7 @@
 			bind:value={username}
 			placeholder={username_label}
 			autocomplete="username"
-			disabled={auth_state.verifying}
+			readonly={auth_state.verifying}
 			{@attach autofocus()}
 		/>
 	</label>
@@ -91,13 +94,14 @@
 			bind:value={password}
 			placeholder="password"
 			autocomplete="current-password"
-			disabled={auth_state.verifying}
+			readonly={auth_state.verifying}
 		/>
 	</label>
 	<div class="row gap_sm">
 		<PendingButton
 			pending={auth_state.verifying}
-			disabled={auth_state.verifying}
+			disabled={false}
+			aria-disabled={auth_state.verifying}
 			onclick={handle_login}
 			class={auth_state.verify_error ? 'color_c' : ''}
 		>

package/dist/ui/LoginForm.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LoginForm.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/LoginForm.svelte"],"names":[],"mappings":"AAmBC,KAAK,gBAAgB,GAAI;IACxB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAsEH,QAAA,MAAM,SAAS,sDAAwC,CAAC;AACxD,KAAK,SAAS,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;AAC9C,eAAe,SAAS,CAAC"}
+{"version":3,"file":"LoginForm.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/LoginForm.svelte"],"names":[],"mappings":"AAmBC,KAAK,gBAAgB,GAAI;IACxB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAyEH,QAAA,MAAM,SAAS,sDAAwC,CAAC;AACxD,KAAK,SAAS,GAAG,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;AAC9C,eAAe,SAAS,CAAC"}

package/dist/ui/RoleGrantOfferForm.svelte

@@ -4,22 +4,29 @@
 	 *
 	 * Caller supplies `to_account_id`, the subset of roles the grantor may
 	 * offer (typically filtered by admin-grant-path — `RoleSpec.grant_paths`
-	 * includes `'admin'`), an optional `scope_id`,
-	 * and an optional `on_created` callback for post-submit UX. Errors from
-	 * the RPC surface the three distinct reason codes — self-target,
-	 * role-not-grantable, not-authorized — so consumers can render them
+	 * includes `'admin'`), an optional scope — `scope_kind` and `scope_id`
+	 * together, or neither for a global offer — and an optional `on_created`
+	 * callback for post-submit UX. Errors from the RPC surface their distinct
+	 * reason codes (self-target, role-not-grantable, not-authorized, a scoped
+	 * builtin role, actor mismatches) so consumers can render them
 	 * appropriately.
+	 *
+	 * @module
 	 */
 
 	import PendingButton from '@fuzdev/fuz_ui/PendingButton.svelte';
 
-	import { role_grant_offers_state_context } from './role_grant_offers_state.svelte.js';
+	import {
+		role_grant_offers_state_context,
+		type RoleGrantOfferScope
+	} from './role_grant_offers_state.svelte.js';
 	import { FormState } from './form_state.svelte.js';
 	import {
 		ROLE_GRANT_OFFER_MESSAGE_LENGTH_MAX,
 		type RoleGrantOfferJson
 	} from '../auth/role_grant_offer_schema.js';
 	import {
+		ERROR_ROLE_GRANT_BUILTIN_SCOPED,
 		ERROR_ROLE_GRANT_OFFER_ACTOR_ACCOUNT_MISMATCH,
 		ERROR_ROLE_GRANT_OFFER_ACTOR_MISMATCH,
 		ERROR_ROLE_GRANT_OFFER_NOT_AUTHORIZED,
@@ -27,13 +34,15 @@
 		ERROR_ROLE_GRANT_OFFER_SELF_TARGET
 	} from '../auth/role_grant_offer_action_specs.js';
 
+	// `scope` is the offer's resource scope, `RoleGrantOfferScope`: `scope_kind`
+	// and `scope_id` together, or neither (the default) for a global offer
 	const {
 		to_account_id,
 		to_actor_id = null,
 		roles,
-		scope_id = null,
 		on_created,
-		format_role = (role: string) => role
+		format_role = (role: string) => role,
+		...scope
 	}: {
 		to_account_id: string;
 		/**
@@ -44,14 +53,12 @@
 		to_actor_id?: string | null;
 		/** Roles the caller may offer — caller filters upstream (default: admin-grant-path). */
 		roles: Array<string>;
-		/** Resource scope for the offer; `null` (default) yields a global offer. */
-		scope_id?: string | null;
 		on_created?: (offer: RoleGrantOfferJson) => void;
 		format_role?: (role: string) => string;
-	} = $props();
+	} & RoleGrantOfferScope = $props();
 
 	const role_grant_offers = role_grant_offers_state_context.get();
-	const form_state = new FormState();
+	const form_state = new FormState<'role' | 'message'>();
 
 	let role: string | undefined = $state.raw();
 	const selected_role = $derived(role ?? roles[0] ?? '');
@@ -68,6 +75,8 @@
 				return 'That role cannot be offered through this form.';
 			case ERROR_ROLE_GRANT_OFFER_NOT_AUTHORIZED:
 				return 'You are not authorized to offer that role.';
+			case ERROR_ROLE_GRANT_BUILTIN_SCOPED:
+				return 'That role can only be offered globally, not within a scope.';
 			case ERROR_ROLE_GRANT_OFFER_ACTOR_ACCOUNT_MISMATCH:
 				return 'That actor is not on the recipient account.';
 			case ERROR_ROLE_GRANT_OFFER_ACTOR_MISMATCH:
@@ -78,6 +87,9 @@
 	};
 
 	const handle_submit = async (): Promise<void> => {
+		// while submitting the textarea is `readonly` and the button `aria-disabled` —
+		// `disabled` would drop focus to `<body>` — so clicks still land here
+		if (submitting) return;
 		form_state.attempt();
 		local_error = null;
 		if (!selected_role) {
@@ -88,7 +100,7 @@
 			to_account_id,
 			to_actor_id,
 			role: selected_role,
-			scope_id,
+			...scope,
 			message: message.trim() || null
 		});
 		if (offer) {
@@ -115,6 +127,8 @@
 >
 	<label>
 		<div class="title">role</div>
+		<!-- a select has no `readonly`, but disabling it can't drop focus: the only
+			submit is the button, which has focus when the select disables -->
 		<select
 			name="role"
 			value={selected_role}
@@ -134,13 +148,14 @@
 			bind:value={message}
 			maxlength={ROLE_GRANT_OFFER_MESSAGE_LENGTH_MAX}
 			placeholder="optional note for the recipient"
-			disabled={submitting}></textarea>
+			readonly={submitting}></textarea>
 	</label>
 
 	<div class="row gap_sm">
 		<PendingButton
 			pending={submitting}
-			disabled={submitting || !selected_role}
+			disabled={!selected_role}
+			aria-disabled={submitting}
 			onclick={handle_submit}
 		>
 			send offer

package/dist/ui/RoleGrantOfferForm.svelte.d.ts

@@ -1,3 +1,4 @@
+import { type RoleGrantOfferScope } from './role_grant_offers_state.svelte.js';
 import { type RoleGrantOfferJson } from '../auth/role_grant_offer_schema.js';
 type $$ComponentProps = {
     to_account_id: string;
@@ -9,11 +10,9 @@ type $$ComponentProps = {
     to_actor_id?: string | null;
     /** Roles the caller may offer — caller filters upstream (default: admin-grant-path). */
     roles: Array<string>;
-    /** Resource scope for the offer; `null` (default) yields a global offer. */
-    scope_id?: string | null;
     on_created?: (offer: RoleGrantOfferJson) => void;
     format_role?: (role: string) => string;
-};
+} & RoleGrantOfferScope;
 declare const RoleGrantOfferForm: import("svelte").Component<$$ComponentProps, {}, "">;
 type RoleGrantOfferForm = ReturnType<typeof RoleGrantOfferForm>;
 export default RoleGrantOfferForm;

package/dist/ui/RoleGrantOfferForm.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"RoleGrantOfferForm.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/RoleGrantOfferForm.svelte"],"names":[],"mappings":"AAkBA,OAAO,EAEL,KAAK,kBAAkB,EACvB,MAAM,oCAAoC,CAAC;AAS5C,KAAK,gBAAgB,GAAI;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,wFAAwF;IACxF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACjD,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACvC,CAAC;AA0GH,QAAA,MAAM,kBAAkB,sDAAwC,CAAC;AACjE,KAAK,kBAAkB,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAChE,eAAe,kBAAkB,CAAC"}
+{"version":3,"file":"RoleGrantOfferForm.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/RoleGrantOfferForm.svelte"],"names":[],"mappings":"AAmBA,OAAO,EAEL,KAAK,mBAAmB,EACxB,MAAM,qCAAqC,CAAC;AAE9C,OAAO,EAEL,KAAK,kBAAkB,EACvB,MAAM,oCAAoC,CAAC;AAU5C,KAAK,gBAAgB,GAAI;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,wFAAwF;IACxF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACrB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACjD,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACvC,GAAG,mBAAmB,CAAC;AAkHzB,QAAA,MAAM,kBAAkB,sDAAwC,CAAC;AACjE,KAAK,kBAAkB,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAChE,eAAe,kBAAkB,CAAC"}

package/dist/ui/SignupForm.svelte

@@ -16,7 +16,7 @@
 	import PendingButton from '@fuzdev/fuz_ui/PendingButton.svelte';
 	import { autofocus } from '@fuzdev/fuz_ui/autofocus.svelte.ts';
 
-	import { Username } from '../primitive_schemas.js';
+	import { Username, USERNAME_LENGTH_MAX, USERNAME_LENGTH_MIN } from '../primitive_schemas.js';
 	import { PASSWORD_LENGTH_MIN } from '../auth/password.js';
 	import { auth_state_context } from './auth_state.svelte.js';
 	import { FormState } from './form_state.svelte.js';
@@ -32,7 +32,7 @@
 	} = $props();
 
 	const auth_state = auth_state_context.get();
-	const form_state = new FormState();
+	const form_state = new FormState<'username' | 'email' | 'password' | 'password_confirm'>();
 
 	let username = $state.raw('');
 	let email = $state.raw('');
@@ -42,14 +42,13 @@
 	const username_valid = $derived(Username.safeParse(username).success);
 	const passwords_match = $derived(password === password_confirm);
 	const can_submit = $derived(
-		username.trim() &&
-			username_valid &&
-			password.length >= PASSWORD_LENGTH_MIN &&
-			passwords_match &&
-			!auth_state.verifying
+		username.trim() && username_valid && password.length >= PASSWORD_LENGTH_MIN && passwords_match
 	);
 
 	const handle_signup = async (): Promise<void> => {
+		// while verifying the fields are `readonly` and the button `aria-disabled` —
+		// `disabled` would drop focus to `<body>` — so Enter and clicks still land here
+		if (auth_state.verifying) return;
 		form_state.attempt();
 		if (!can_submit) {
 			if (!username.trim() || !username_valid) form_state.focus('username');
@@ -84,13 +83,14 @@
 			bind:value={username}
 			placeholder="username"
 			autocomplete="username"
-			disabled={auth_state.verifying}
+			readonly={auth_state.verifying}
 			{@attach autofocus()}
 		/>
 	</label>
 	{#if form_state.show('username') && username && !username_valid}
 		<p class="color_c_50 font_size_sm mt_0 mb_xs">
-			3-39 chars, starts with a letter, ends with letter/number, middle allows dash/underscore
+			{USERNAME_LENGTH_MIN}-{USERNAME_LENGTH_MAX} chars, starts with a letter, ends with
+			letter/number, middle allows dash/underscore
 		</p>
 	{/if}
 	<label>
@@ -101,7 +101,7 @@
 			bind:value={email}
 			placeholder="email"
 			autocomplete="email"
-			disabled={auth_state.verifying}
+			readonly={auth_state.verifying}
 		/>
 	</label>
 	<fieldset>
@@ -113,7 +113,7 @@
 				bind:value={password}
 				placeholder="password"
 				autocomplete="new-password"
-				disabled={auth_state.verifying}
+				readonly={auth_state.verifying}
 			/>
 		</label>
 		{#if form_state.show('password') && password && password.length < PASSWORD_LENGTH_MIN}
@@ -129,7 +129,7 @@
 				bind:value={password_confirm}
 				placeholder="confirm password"
 				autocomplete="new-password"
-				disabled={auth_state.verifying}
+				readonly={auth_state.verifying}
 			/>
 		</label>
 		{#if form_state.show('password_confirm') && password && password_confirm && !passwords_match}
@@ -139,7 +139,8 @@
 	<div class="row gap_sm">
 		<PendingButton
 			pending={auth_state.verifying}
-			disabled={auth_state.verifying}
+			disabled={false}
+			aria-disabled={auth_state.verifying}
 			onclick={handle_signup}
 			class={auth_state.verify_error ? 'color_c' : ''}
 		>

package/dist/ui/form_state.svelte.d.ts

@@ -12,13 +12,21 @@
  * button is `type="button"`, as `PendingButton` is. Hidden inputs don't count, and an Enter that commits
  * IME composition is left alone.
  *
+ * While a submit is in flight, make the fields `readonly` rather than `disabled`
+ * (and the button `aria-disabled`, guarding the handler against re-entry) —
+ * disabling the focused element drops focus to `<body>`. Enter still advances
+ * through and submits from `readonly` inputs.
+ *
+ * The type parameter names the form's fields, so `focus`, `show`, `touch`,
+ * and `is_touched` reject a misspelled field at compile time.
+ *
  * All trackable inputs must have a `name` attribute — an error is thrown in dev
  * if an input without `name` loses focus.
  *
  * @example
  * ```svelte
- * <script>
- *   const form_state = new FormState();
+ * <script lang="ts">
+ *   const form_state = new FormState<'username'>();
  *   let username = $state.raw('');
  *   const username_valid = $derived(Username.safeParse(username).success);
  *   const can_submit = $derived(username.trim() && username_valid);
@@ -45,7 +53,7 @@
  * @module
  */
 import type { Attachment } from 'svelte/attachments';
-export declare class FormState {
+export declare class FormState<TField extends string = string> {
     #private;
     /**
      * Whether a submit attempt has been made.
@@ -65,22 +73,22 @@ export declare class FormState {
     /**
      * Whether a field has been blurred at least once.
      */
-    is_touched(field: string): boolean;
+    is_touched(field: TField): boolean;
     /**
      * Whether to show validation errors for a field.
      * Returns `true` if the field has been blurred or a submit attempt was made.
      */
-    show(field: string): boolean;
+    show(field: TField): boolean;
     /**
      * Programmatically marks a field as touched without requiring a blur event.
      *
      * @mutates `this`
      */
-    touch(field: string): void;
+    touch(field: TField): void;
     /**
      * Focuses the named input within the form.
      */
-    focus(field: string): void;
+    focus(field: TField): void;
     /**
      * Marks the form as having been submitted, causing all field errors to show.
      *

package/dist/ui/form_state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"form_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/form_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAUrD,qBAAa,SAAS;;IAKrB;;OAEG;IACH,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;;;;;;OASG;IACH,IAAI,IAAI,UAAU,CAAC,eAAe,CAAC;IAmDnC;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAIlC;;;OAGG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAI5B;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI1B;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAiB1B;;;;OAIG;IACH,OAAO,IAAI,IAAI;IAIf;;;;OAIG;IACH,KAAK,IAAI,IAAI;CAIb"}
+{"version":3,"file":"form_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/form_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAUrD,qBAAa,SAAS,CAAC,MAAM,SAAS,MAAM,GAAG,MAAM;;IAKpD;;OAEG;IACH,IAAI,SAAS,IAAI,OAAO,CAEvB;IAED;;;;;;;;;OASG;IACH,IAAI,IAAI,UAAU,CAAC,eAAe,CAAC;IAmDnC;;OAEG;IACH,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAIlC;;;OAGG;IACH,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAI5B;;;;OAIG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI1B;;OAEG;IACH,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAiB1B;;;;OAIG;IACH,OAAO,IAAI,IAAI;IAIf;;;;OAIG;IACH,KAAK,IAAI,IAAI;CAIb"}

package/dist/ui/form_state.svelte.js

@@ -12,13 +12,21 @@
  * button is `type="button"`, as `PendingButton` is. Hidden inputs don't count, and an Enter that commits
  * IME composition is left alone.
  *
+ * While a submit is in flight, make the fields `readonly` rather than `disabled`
+ * (and the button `aria-disabled`, guarding the handler against re-entry) —
+ * disabling the focused element drops focus to `<body>`. Enter still advances
+ * through and submits from `readonly` inputs.
+ *
+ * The type parameter names the form's fields, so `focus`, `show`, `touch`,
+ * and `is_touched` reject a misspelled field at compile time.
+ *
  * All trackable inputs must have a `name` attribute — an error is thrown in dev
  * if an input without `name` loses focus.
  *
  * @example
  * ```svelte
- * <script>
- *   const form_state = new FormState();
+ * <script lang="ts">
+ *   const form_state = new FormState<'username'>();
  *   let username = $state.raw('');
  *   const username_valid = $derived(Username.safeParse(username).success);
  *   const can_submit = $derived(username.trim() && username_valid);

package/dist/ui/role_grant_offers_state.svelte.d.ts

@@ -26,6 +26,26 @@
  */
 import { AsyncSlot } from './async_slot.svelte.js';
 import type { RoleGrantOfferJson } from '../auth/role_grant_offer_schema.js';
+/**
+ * The scope of an offer: global (both absent / `null`) or scoped (both set).
+ * `scope_kind` and `scope_id` are paired on the wire — a lone `scope_id` is an
+ * `invalid_params` refusal — so the pair is one union rather than two optional
+ * fields.
+ */
+export type RoleGrantOfferScope = {
+    scope_kind?: null;
+    scope_id?: null;
+} | {
+    scope_kind: string;
+    scope_id: string;
+};
+/** Params for creating an offer — `RoleGrantOffersRpc.create` and `submit_create`. */
+export type RoleGrantOfferCreateParams = {
+    to_account_id: string;
+    to_actor_id?: string | null;
+    role: string;
+    message?: string | null;
+} & RoleGrantOfferScope;
 /**
  * Svelte context for `RoleGrantOffersState`.
  * Use `role_grant_offers_state_context.set(state)` in the provider and
@@ -52,13 +72,7 @@ export interface RoleGrantOffersRpc {
     }) => Promise<{
         offers: Array<RoleGrantOfferJson>;
     }>;
-    create: (params: {
-        to_account_id: string;
-        to_actor_id?: string | null;
-        role: string;
-        scope_id?: string | null;
-        message?: string | null;
-    }) => Promise<{
+    create: (params: RoleGrantOfferCreateParams) => Promise<{
         offer: RoleGrantOfferJson;
     }>;
     accept: (offer_id: string) => Promise<{
@@ -135,15 +149,11 @@ export declare class RoleGrantOffersState {
      *
      * `to_actor_id` (optional) narrows the offer to a specific actor on
      * `to_account_id`; omit / null for the account-grain default (any actor
-     * on the recipient account may accept).
+     * on the recipient account may accept). A scoped offer passes `scope_kind`
+     * and `scope_id` together; an unpaired scope (reachable from untyped
+     * callers) fails with `GRANT_SCOPE_PAIRED_MESSAGE` without an RPC.
      */
-    submit_create(params: {
-        to_account_id: string;
-        to_actor_id?: string | null;
-        role: string;
-        scope_id?: string | null;
-        message?: string | null;
-    }): Promise<RoleGrantOfferJson | undefined>;
+    submit_create(params: RoleGrantOfferCreateParams): Promise<RoleGrantOfferJson | undefined>;
     /** Accept an offer; stamps it terminal in the cache and drops any siblings the server superseded. */
     submit_accept(offer_id: string): Promise<void>;
     submit_decline(offer_id: string, reason?: string | null): Promise<void>;

package/dist/ui/role_grant_offers_state.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"role_grant_offers_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/role_grant_offers_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAU7E;;;;GAIG;AACH,eAAO,MAAM,+BAA+B;;;;CAAyC,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;KAAE,CAAC,CAAC;IAC3D,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;KAAE,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,MAAM,EAAE;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;IAC7C,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,kBAAkB,CAAC;QAC1B,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;KACpC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC7E,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;CACrD;AAED,yFAAyF;AACzF,MAAM,WAAW,0BAA0B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CAChB;AAED,qFAAqF;AACrF,MAAM,MAAM,uBAAuB,GAAG,CACrC,OAAO,EAAE,CAAC,YAAY,EAAE,0BAA0B,KAAK,IAAI,KACvD,MAAM,IAAI,CAAC;AAEhB,MAAM,WAAW,2BAA2B;IAC3C,GAAG,EAAE,kBAAkB,CAAC;IACxB,oFAAoF;IACpF,UAAU,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAChC;;;OAGG;IACH,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC9B;AAQD,qBAAa,oBAAoB;;IAKhC,QAAQ,CAAC,IAAI,0BAAyB;IACtC,QAAQ,CAAC,YAAY,0BAAyB;IAC9C,QAAQ,CAAC,MAAM;;;;;;;;;;;;;;;;;eAAuC;IACtD,QAAQ,CAAC,MAAM,0BAAyB;IACxC,QAAQ,CAAC,OAAO,0BAAyB;IACzC,QAAQ,CAAC,OAAO,0BAAyB;IAIzC,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAezC;IAEH,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAczC;IAEH,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAIxC;IAEH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAkC;gBAErD,OAAO,EAAE,2BAA2B;IAMhD,4DAA4D;IACtD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,6DAA6D;IACvD,aAAa,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAOjF;;;;;;OAMG;IACG,aAAa,CAAC,MAAM,EAAE;QAC3B,aAAa,EAAE,MAAM,CAAC;QACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACxB,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAQ3C,qGAAqG;IAC/F,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa9C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvE,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOrD;;;OAGG;IACH,SAAS,CAAC,YAAY,EAAE,uBAAuB,GAAG,MAAM,IAAI;IAM5D;;;;;;OAMG;IACH,kBAAkB,CAAC,YAAY,EAAE,0BAA0B,GAAG,IAAI;IAwBlE,4CAA4C;IAC5C,KAAK,IAAI,IAAI;CAwBb"}
+{"version":3,"file":"role_grant_offers_state.svelte.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/ui/role_grant_offers_state.svelte.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAIH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAc7E;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAC9B;IAAE,UAAU,CAAC,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnF,sFAAsF;AACtF,MAAM,MAAM,0BAA0B,GAAG;IACxC,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB,GAAG,mBAAmB,CAAC;AAExB;;;;GAIG;AACH,eAAO,MAAM,+BAA+B;;;;CAAyC,CAAC;AAEtF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,MAAM,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;KAAE,CAAC,CAAC;IAC3D,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;QACnB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KAChB,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAAA;KAAE,CAAC,CAAC;IACrD,MAAM,EAAE,CAAC,MAAM,EAAE,0BAA0B,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;IACvF,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QACrC,aAAa,EAAE,MAAM,CAAC;QACtB,KAAK,EAAE,kBAAkB,CAAC;QAC1B,oBAAoB,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;KACpC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;IAC7E,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC,CAAC;CACrD;AAED,yFAAyF;AACzF,MAAM,WAAW,0BAA0B;IAC1C,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CAChB;AAED,qFAAqF;AACrF,MAAM,MAAM,uBAAuB,GAAG,CACrC,OAAO,EAAE,CAAC,YAAY,EAAE,0BAA0B,KAAK,IAAI,KACvD,MAAM,IAAI,CAAC;AAEhB,MAAM,WAAW,2BAA2B;IAC3C,GAAG,EAAE,kBAAkB,CAAC;IACxB,oFAAoF;IACpF,UAAU,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAChC;;;OAGG;IACH,QAAQ,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC9B;AAQD,qBAAa,oBAAoB;;IAKhC,QAAQ,CAAC,IAAI,0BAAyB;IACtC,QAAQ,CAAC,YAAY,0BAAyB;IAC9C,QAAQ,CAAC,MAAM;;;;;;;;;;;;;;;;;eAAuC;IACtD,QAAQ,CAAC,MAAM,0BAAyB;IACxC,QAAQ,CAAC,OAAO,0BAAyB;IACzC,QAAQ,CAAC,OAAO,0BAAyB;IAIzC,sEAAsE;IACtE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAezC;IAEH,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAczC;IAEH,qFAAqF;IACrF,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,kBAAkB,CAAC,CAIxC;IAEH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAkC;gBAErD,OAAO,EAAE,2BAA2B;IAMhD,4DAA4D;IACtD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAO5B,6DAA6D;IACvD,aAAa,CAAC,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAOjF;;;;;;;;OAQG;IACG,aAAa,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC;IAWhG,qGAAqG;IAC/F,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa9C,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAOvE,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAOrD;;;OAGG;IACH,SAAS,CAAC,YAAY,EAAE,uBAAuB,GAAG,MAAM,IAAI;IAM5D;;;;;;OAMG;IACH,kBAAkB,CAAC,YAAY,EAAE,0BAA0B,GAAG,IAAI;IAwBlE,4CAA4C;IAC5C,KAAK,IAAI,IAAI;CAwBb"}