@hadoku/task-ui-components 4.22.7 → 4.23.0

package/dist/components/ConnectedSettings.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ConnectedSettings.d.ts","sourceRoot":"","sources":["../../src/components/ConnectedSettings.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAA0D,MAAM,OAAO,CAAA;AAI9E,OAAO,EAWL,KAAK,IAAI,EACV,MAAM,uBAAuB,CAAA;AAC9B,OAAO,mBAAmB,CAAA;AAE1B,MAAM,WAAW,sBAAsB;IACrC;;;;;;+EAM2E;IAC3E,QAAQ,CAAC,EAAE,IAAI,CAAA;IACf,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,mEAAmE;IACnE,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAA;IAC5C;;;;;4EAKwE;IACxE,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC1B;;6EAEyE;IACzE,OAAO,CAAC,EAAE,cAAc,EAAE,CAAA;CAC3B;AAED,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,KAAK,CAAC,SAAS,CAAA;CAC9B;AAmID,wBAAgB,iBAAiB,CAAC,EAChC,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,QAAQ,EACd,YAAY,EACZ,QAAQ,EACR,OAAO,EACR,EAAE,sBAAsB,qBAwwBxB"}
+{"version":3,"file":"ConnectedSettings.d.ts","sourceRoot":"","sources":["../../src/components/ConnectedSettings.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,KAA0D,MAAM,OAAO,CAAA;AAU9E,OAAO,EAWL,KAAK,IAAI,EACV,MAAM,uBAAuB,CAAA;AAC9B,OAAO,mBAAmB,CAAA;AAE1B,MAAM,WAAW,sBAAsB;IACrC;;;;;;+EAM2E;IAC3E,QAAQ,CAAC,EAAE,IAAI,CAAA;IACf,uEAAuE;IACvE,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,mEAAmE;IACnE,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAA;IAC5C;;;;;4EAKwE;IACxE,QAAQ,CAAC,EAAE,KAAK,CAAC,SAAS,CAAA;IAC1B;;6EAEyE;IACzE,OAAO,CAAC,EAAE,cAAc,EAAE,CAAA;CAC3B;AAED,sDAAsD;AACtD,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,KAAK,CAAC,SAAS,CAAA;CAC9B;AAmID,wBAAgB,iBAAiB,CAAC,EAChC,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,QAAQ,EACd,YAAY,EACZ,QAAQ,EACR,OAAO,EACR,EAAE,sBAAsB,qBAqyBxB"}

package/dist/components/ConnectedSettings.js

@@ -1,10 +1,13 @@
 import { jsxs, jsx, Fragment } from "react/jsx-runtime";
-import { useState, useRef, useId, useCallback, useEffect } from "react";
+import React, { useState, useRef, useId, useCallback, useEffect } from "react";
 import { useSettingsTab } from "@wolffm/themes";
 import { SettingsIcon } from "./ThemeIcons.js";
 import { AvatarPicker } from "./AvatarPicker.js";
 import { passkeysSupported, prefetchSettings, setDisplayName, loadSignIn, switchKeyHref, loadSignInClient, passkeyHref, setContentLevel, deleteOwnAccount } from "../lib/settingsClient.js";
 /* empty css                */
+const ServiceAccess = React.lazy(
+  () => import("./ServiceAccess.js").then((m) => ({ default: m.ServiceAccess }))
+);
 function untilAborted(signal) {
   return new Promise((_, reject) => {
     const fail = () => reject(new Error("cancelled"));
@@ -142,6 +145,8 @@ function ConnectedSettings({
   const passkeyCtl = useRef(null);
   const cancelPasskey = useCallback((reason) => passkeyCtl.current?.abort(reason), []);
   const [avatarOpen, setAvatarOpen] = useState(false);
+  const [serviceGrants, setServiceGrants] = useState(0);
+  const [serviceOpen, setServiceOpen] = useState(false);
   const [content, setContent] = useState(null);
   const [levelSaving, setLevelSaving] = useState(false);
   const [resolving, setResolving] = useState(true);
@@ -195,9 +200,10 @@ function ConnectedSettings({
   }, [nameProp]);
   useEffect(() => {
     let live = true;
-    prefetchSettings({ userType: userTypeProp, name: nameProp }).then(({ identity, content: state, passkeys }) => {
+    prefetchSettings({ userType: userTypeProp, name: nameProp }).then(({ identity, content: state, passkeys, serviceGrants: grants }) => {
       if (!live) return;
       setPasskeyCount(passkeys);
+      setServiceGrants(grants);
       if (userTypeProp === void 0) {
         setUserType(identity.userType);
         setResolvedName(identity.name);
@@ -482,6 +488,22 @@ function ConnectedSettings({
                   )
                 ] }),
                 avatarOpen && /* @__PURE__ */ jsx(AvatarPicker, {})
+              ] }),
+              !resolving && serviceGrants > 0 && /* @__PURE__ */ jsxs("section", { className: "settings-popout__row settings-popout__row--stack", children: [
+                /* @__PURE__ */ jsxs("span", { className: "settings-popout__inline", children: [
+                  /* @__PURE__ */ jsx("span", { className: "settings-popout__label settings-popout__label--grow", children: "Service access" }),
+                  /* @__PURE__ */ jsx(
+                    "button",
+                    {
+                      type: "button",
+                      className: "settings-popout__btn",
+                      "aria-expanded": serviceOpen,
+                      onClick: () => setServiceOpen((v) => !v),
+                      children: serviceOpen ? "Done" : "Open"
+                    }
+                  )
+                ] }),
+                serviceOpen && /* @__PURE__ */ jsx(React.Suspense, { fallback: /* @__PURE__ */ jsx("span", { className: "settings-popout__hint", children: "…" }), children: /* @__PURE__ */ jsx(ServiceAccess, {}) })
               ] })
             ] }),
             activeTab === "content" && /* @__PURE__ */ jsxs("section", { className: "settings-popout__row settings-popout__row--stack", children: [

package/dist/components/ConnectedSettings.js.map

@@ -1 +1 @@
-{"version":3,"file":"ConnectedSettings.js","sources":["../../src/components/ConnectedSettings.tsx"],"sourcesContent":["/**\n * ConnectedSettings — the unified per-user settings control for the hadoku\n * ecosystem: a gear button that opens a popout housing everything that is a\n * property of the PERSON (not the app):\n *   - current access tier (read-only, friendly label)\n *   - display name (inline edit → POST /session/name)\n *   - avatar: picture and character, chosen in place (AvatarPicker)\n *   - global content-visibility level (tiered pill → PUT /prefs/api/v1/content-level)\n *   - switch key (an inline sign-in form, on the site's own sign-in client)\n *\n * Those are grouped into tabs (Profile, Content, Account), followed by the\n * app's own: `children` as one \"App\" tab, `appTabs` as one tab each. The open\n * tab is remembered per user and per app (useSettingsTab, @wolffm/themes).\n *\n * \"Connected\" (parallel to ConnectedThemePicker): it self-wires to the\n * hadoku.me edge-router via same-origin fetches (see lib/settingsClient), so\n * dropping `<ConnectedSettings />` into any app under hadoku.me needs zero\n * props. Identity is resolved via whoami() unless the host passes `userType` /\n * `name` (avoids a redundant fetch when the app already knows).\n *\n * All of that is resolved AT MOUNT via `prefetchSettings()`, never on\n * gear-click — opening the popout must cost zero requests. See the effect\n * below, and `e2e/settings-prefetch.spec.ts` in hadoku-task, which fails if the\n * fetch moves back behind the click.\n *\n * Mirrors ThemePicker's controlled-popout pattern: owns its own `open` state +\n * a full-viewport overlay for click-outside dismiss. The content pill renders\n * `maxLevel` segments (friend ⇒ 3, admin ⇒ 4) and is hidden for public callers.\n * maxLevel comes from the server so the tier ceiling is never trusted from the\n * client.\n */\nimport React, { useCallback, useEffect, useId, useRef, useState } from 'react'\nimport { useSettingsTab } from '@wolffm/themes'\nimport { SettingsIcon } from './ThemeIcons'\nimport { AvatarPicker } from './AvatarPicker'\nimport {\n  deleteOwnAccount,\n  prefetchSettings,\n  setContentLevel,\n  setDisplayName,\n  loadSignIn,\n  loadSignInClient,\n  passkeyHref,\n  passkeysSupported,\n  switchKeyHref,\n  type ContentLevelState,\n  type Tier\n} from '../lib/settingsClient'\nimport '../app-header.css'\n\nexport interface ConnectedSettingsProps {\n  /** Caller's tier. Omit to self-resolve via whoami().\n   *\n   *  This exists for apps that CANNOT reach `/session/whoami` — conjure sits\n   *  behind a path-prefixed shim that serves nothing outside `/conjure`, so\n   *  whoami 404s and the tier would fall back to guest. It is an identity\n   *  hint, not a way to present a different tier than the edge assigns: every\n   *  gate that matters is enforced server-side off the edge-stamped tier. */\n  userType?: Tier\n  /** Display name. Omit to self-resolve via whoami(). Same rationale. */\n  name?: string | null\n  /** Notify the host (e.g. a \"Signed in as …\" label) of a rename. */\n  onNameChange?: (name: string | null) => void\n  /** App-specific settings as ONE tab, labelled \"App\", after the site's own\n   *  tabs — so an app with its own preferences keeps one unified gear instead\n   *  of a second control. For more than one section, use `appTabs`.\n   *\n   *  This slot is deliberately unconstrained — put whatever the app needs in\n   *  it. The constraint is only that it cannot change the site's tabs. */\n  children?: React.ReactNode\n  /** App-specific settings as tabs of their own, after `children`'s \"App\" tab\n   *  if both are given. `id` is stable and unique within the app: the last-open\n   *  tab is remembered by it. `render` runs only while its tab is open. */\n  appTabs?: AppSettingsTab[]\n}\n\n/** One app-contributed tab in the settings popout. */\nexport interface AppSettingsTab {\n  id: string\n  label: string\n  render: () => React.ReactNode\n}\n\n/** Rejects once `signal` aborts, so a call that ignores the signal (an older\n *  site client, a prompt that never settles) still lets the UI go. */\nfunction untilAborted(signal: AbortSignal): Promise<never> {\n  return new Promise((_, reject) => {\n    const fail = () => reject(new Error('cancelled'))\n    if (signal.aborted) fail()\n    else signal.addEventListener('abort', fail, { once: true })\n  })\n}\n\n/** Abort reason when the popout closes: a dismissal, not an error to show. */\nconst CLOSED = 'closed'\n\n/** Rejection sink for fire-and-forget settings actions. The client helpers\n *  already resolve to null on failure (state reflects it), so this only trips\n *  on truly unexpected throws — log rather than swallow silently. */\nfunction reportErr(err: unknown) {\n  // task-ui-components v2 dropped its logger; keep the package dependency-free.\n  console.error('[ConnectedSettings] action failed', (err as Error)?.message ?? err)\n}\n\n/** Inline, not in app-header.css: every app runs this component from the\n *  site's shared vendor module, but compiles app-header.css into its own\n *  stylesheet at ITS build, so a new rule reaches an app only when it rebuilds. */\nconst PASSKEY_DOT: React.CSSProperties = {\n  position: 'absolute',\n  top: 2,\n  right: 2,\n  width: 8,\n  height: 8,\n  borderRadius: '50%',\n  background: 'var(--color-primary)',\n  pointerEvents: 'none'\n}\n\n/** Save passkey pulses while the dot is asking for it. Keyframes cannot be\n *  inline, so the rule is injected once into the document instead, for the\n *  same reason PASSKEY_DOT is inline. */\nconst PASSKEY_PULSE_CLASS = 'settings-popout__btn--pulse'\nconst PASSKEY_PULSE_CSS = `\n@keyframes settings-passkey-pulse {\n  0% { box-shadow: 0 0 0 0 color-mix(in srgb, var(--color-primary) 70%, transparent); }\n  70% { box-shadow: 0 0 0 8px color-mix(in srgb, var(--color-primary) 0%, transparent); }\n  100% { box-shadow: 0 0 0 0 color-mix(in srgb, var(--color-primary) 0%, transparent); }\n}\n@media (prefers-reduced-motion: no-preference) {\n  .${PASSKEY_PULSE_CLASS}:not(:disabled) {\n    animation: settings-passkey-pulse 1.6s ease-out infinite;\n  }\n}\n`\n\n/** The tab strip and its panels. Injected for the same reason as the pulse:\n *  an app's copy of app-header.css predates the tabs until it rebuilds. The\n *  strip stays pinned while a long tab scrolls, and scrolls sideways itself\n *  when the tabs outgrow a phone-width panel. */\nconst TABS_CSS = `\n.settings-popout__top {\n  position: sticky;\n  top: -16px;\n  z-index: 1;\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  margin: -16px -16px 0;\n  padding: 16px 16px 0;\n  background: var(--color-bg-card);\n  border-bottom: 1px solid var(--color-border);\n}\n.settings-popout__tabs {\n  display: flex;\n  gap: 2px;\n  margin: 0 -16px -1px;\n  padding: 0 16px;\n  overflow-x: auto;\n  scrollbar-width: thin;\n}\n.settings-popout__tab {\n  position: relative;\n  flex: none;\n  padding: 6px 10px;\n  border: 0;\n  border-bottom: 2px solid transparent;\n  background: transparent;\n  color: var(--color-text-secondary);\n  font: inherit;\n  font-size: 0.8rem;\n  font-weight: 600;\n  white-space: nowrap;\n  cursor: pointer;\n}\n.settings-popout__tab:hover {\n  color: var(--color-text);\n}\n.settings-popout__tab[aria-selected='true'] {\n  color: var(--color-text);\n  border-bottom-color: var(--color-primary);\n}\n.settings-popout__tab:focus-visible {\n  outline: 2px solid var(--color-primary);\n  outline-offset: -2px;\n  border-radius: 6px 6px 0 0;\n}\n.settings-popout__tabpanel {\n  display: flex;\n  flex-direction: column;\n  gap: 14px;\n}\n`\n\nfunction useInjectedStyle(id: string, css: string, active: boolean) {\n  useEffect(() => {\n    if (!active || document.getElementById(id)) return\n    const el = document.createElement('style')\n    el.id = id\n    el.textContent = css\n    document.head.appendChild(el)\n  }, [id, css, active])\n}\n\nconst TIER_LABEL: Record<Tier, string> = {\n  admin: 'Administrator',\n  wife: 'Wife',\n  service: 'Service',\n  friend: 'Friend',\n  member: 'Member',\n  public: 'Guest'\n}\n\nexport function ConnectedSettings({\n  userType: userTypeProp,\n  name: nameProp,\n  onNameChange,\n  children,\n  appTabs\n}: ConnectedSettingsProps) {\n  const [open, setOpen] = useState(false)\n  const rootRef = useRef<HTMLDivElement>(null)\n  const tabIdBase = useId()\n  const tabRefs = useRef(new Map<string, HTMLButtonElement>())\n  const [savedTab, saveTab] = useSettingsTab()\n  // This visit's pick; wins over the saved one while it is still offered.\n  const [pickedTab, setPickedTab] = useState<string | null>(null)\n\n  // Identity — from props if supplied, else resolved lazily via whoami().\n  const [userType, setUserType] = useState<Tier>(userTypeProp ?? 'public')\n  const [resolvedName, setResolvedName] = useState<string | null>(nameProp ?? null)\n\n  // Name editing\n  const [nameDraft, setNameDraft] = useState(resolvedName ?? '')\n  const [editingName, setEditingName] = useState(false)\n  const [nameSaving, setNameSaving] = useState(false)\n  const [nameError, setNameError] = useState<string | null>(null)\n  const [displayName, setLocalName] = useState<string | null>(resolvedName)\n\n  // Key swap. The draft lives only in this state and the input: it is never\n  // logged, stored or sent anywhere but the site's sign-in client.\n  const [keyFormOpen, setKeyFormOpen] = useState(false)\n  const [keyDraft, setKeyDraft] = useState('')\n  const [keyBusy, setKeyBusy] = useState(false)\n  const [keyError, setKeyError] = useState<string | null>(null)\n\n  // Passkeys, through the same site client: save one while signed in, or\n  // sign in with one from the key form. One prompt at a time, and always\n  // cancellable: a password manager can dismiss the browser's prompt without\n  // ever answering it, so Cancel, closing the popout and the site client's own\n  // time limit each end the wait.\n  const [passkeyMode, setPasskeyMode] = useState<'save' | 'signin' | null>(null)\n  const [passkeySaved, setPasskeySaved] = useState(false)\n  // How many passkeys sign this person in, from whoami; null = unknown.\n  const [passkeyCount, setPasskeyCount] = useState<number | null>(null)\n  const [passkeyError, setPasskeyError] = useState<string | null>(null)\n  // Delete account: one click arms it, a second, separate button confirms.\n  const [deleteStage, setDeleteStage] = useState<'idle' | 'confirm' | 'busy'>('idle')\n  const [deleteError, setDeleteError] = useState<string | null>(null)\n  const passkeyCtl = useRef<AbortController | null>(null)\n  const cancelPasskey = useCallback((reason?: string) => passkeyCtl.current?.abort(reason), [])\n\n  // Avatar: the picker loads only when opened, never at mount (AvatarPicker).\n  const [avatarOpen, setAvatarOpen] = useState(false)\n\n  // Content level\n  const [content, setContent] = useState<ContentLevelState | null>(null)\n  const [levelSaving, setLevelSaving] = useState(false)\n\n  // One flag for the whole prefetch, not one per request — the panel body\n  // reveals when everything has settled, so nothing pops in a beat late. In\n  // practice the user never sees it: the prefetch starts at mount and is long\n  // done by the time the gear is clicked. It only shows if they click within\n  // the first moments of the page.\n  const [resolving, setResolving] = useState(true)\n\n  // Everyone who is SIGNED IN, expressed as \"not public\" rather than as a list\n  // of tiers. The list form (`=== 'admin' || === 'friend' || === 'service'`)\n  // is an exact-match allowlist: it silently excluded `wife` the moment that\n  // tier existed, which is the failure the rank model is meant to prevent.\n  // There is no rank helper in this bundle, but \"above public\" needs none.\n  const showContentPill = userType !== 'public'\n\n  // Signed in on a key with no passkey: the gear carries a dot and Save passkey\n  // is the primary action until one is saved. Unknown counts never prompt.\n  const needsPasskey =\n    !resolving &&\n    userType !== 'public' &&\n    passkeyCount === 0 &&\n    !passkeySaved &&\n    passkeysSupported()\n  useInjectedStyle('settings-passkey-pulse', PASSKEY_PULSE_CSS, needsPasskey)\n  useInjectedStyle('settings-tabs', TABS_CSS, open)\n\n  // The site's own groups first, then the app's. App ids are namespaced so an\n  // app tab called \"account\" can never collide with the site's.\n  const tabs: { id: string; label: string; dot?: boolean }[] = [\n    { id: 'profile', label: 'Profile' },\n    ...(!resolving && showContentPill ? [{ id: 'content', label: 'Content' }] : []),\n    // The gear's dot asks for a passkey; this one says where Save passkey is.\n    { id: 'account', label: 'Account', dot: needsPasskey },\n    ...(children ? [{ id: 'app:', label: 'App' }] : []),\n    ...(appTabs ?? []).map(t => ({ id: `app:${t.id}`, label: t.label }))\n  ]\n  const tabIds = tabs.map(t => t.id)\n  // Nothing remembered: open on the app's first tab, which is usually why the\n  // gear was clicked inside an app.\n  const defaultTab = tabIds.find(id => id.startsWith('app:')) ?? 'profile'\n  const activeTab =\n    [pickedTab, savedTab].find((id): id is string => id !== null && tabIds.includes(id)) ??\n    defaultTab\n  const appTab = appTabs?.find(t => `app:${t.id}` === activeTab)\n  const tabDomId = (id: string) => `${tabIdBase}tab-${id}`\n  const panelDomId = `${tabIdBase}panel`\n\n  const selectTab = useCallback(\n    (id: string) => {\n      setPickedTab(id)\n      saveTab(id)\n    },\n    [saveTab]\n  )\n\n  // Arrow keys, Home and End move between tabs and open the one they land on\n  // (the ARIA tablist pattern with automatic activation).\n  const onTabKey = (e: React.KeyboardEvent) => {\n    const i = tabIds.indexOf(activeTab)\n    const n = tabIds.length\n    const next =\n      e.key === 'ArrowRight'\n        ? tabIds[(i + 1) % n]\n        : e.key === 'ArrowLeft'\n          ? tabIds[(i - 1 + n) % n]\n          : e.key === 'Home'\n            ? tabIds[0]\n            : e.key === 'End'\n              ? tabIds[n - 1]\n              : undefined\n    if (next === undefined) return\n    e.preventDefault()\n    selectTab(next)\n    tabRefs.current.get(next)?.focus()\n  }\n\n  // A remembered tab past the edge of a narrow strip is scrolled into sight.\n  // jsdom implements no scrollIntoView, and every consumer's unit test that\n  // renders the popout runs there, so the call is optional.\n  useEffect(() => {\n    if (open)\n      tabRefs.current.get(activeTab)?.scrollIntoView?.({ block: 'nearest', inline: 'nearest' })\n  }, [open, activeTab])\n\n  // Keep local identity in sync when the host controls it via props.\n  useEffect(() => {\n    if (userTypeProp !== undefined) setUserType(userTypeProp)\n  }, [userTypeProp])\n  useEffect(() => {\n    if (nameProp !== undefined) {\n      setResolvedName(nameProp)\n      setLocalName(nameProp)\n      setNameDraft(nameProp ?? '')\n    }\n  }, [nameProp])\n\n  // Resolve everything the panel shows AT MOUNT — not on open.\n  //\n  // This used to be gated on `open`, which made the gear the trigger for\n  // whoami + content-level (167ms / 186ms on prod, concurrent) — a round trip\n  // the user waited out with the panel already on screen and blank. Nothing\n  // about that data depends on the click:\n  // it's the signed-in user's own identity, settled at boot and unchanged for\n  // the life of the page. So it rides along with the app's boot traffic, and\n  // clicking the gear costs zero requests. `e2e/settings-prefetch.spec.ts` in\n  // hadoku-task pins that.\n  //\n  // The client memoises across callers, so mounting this in several places (or\n  // remounting it) does not multiply requests, and on hadoku.me the identity\n  // half is free — it awaits the whoami the shell already had in flight.\n  useEffect(() => {\n    let live = true\n    prefetchSettings({ userType: userTypeProp, name: nameProp })\n      .then(({ identity, content: state, passkeys }) => {\n        if (!live) return\n        setPasskeyCount(passkeys)\n        // Props stay authoritative: the host passed them because it can see an\n        // identity this component can't resolve for itself.\n        if (userTypeProp === undefined) {\n          setUserType(identity.userType)\n          setResolvedName(identity.name)\n          setLocalName(identity.name)\n          setNameDraft(identity.name ?? '')\n        }\n        if (state) setContent(state)\n      })\n      .catch(reportErr)\n      .finally(() => {\n        if (live) setResolving(false)\n      })\n    return () => {\n      live = false\n    }\n    // Hints are read once, on the first mount that gets there — the prefetch is\n    // page-scoped and a later prop change cannot un-issue it. Identity changes\n    // arrive through the sync effects above, and a key swap reloads the page.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [])\n\n  // Escape closes.\n  useEffect(() => {\n    if (!open) return\n    const onKey = (e: KeyboardEvent) => {\n      if (e.key === 'Escape') setOpen(false)\n    }\n    window.addEventListener('keydown', onKey)\n    return () => window.removeEventListener('keydown', onKey)\n  }, [open])\n\n  const saveName = useCallback(async () => {\n    const trimmed = nameDraft.trim()\n    if (!trimmed || trimmed === displayName) {\n      setEditingName(false)\n      return\n    }\n    setNameSaving(true)\n    const result = await setDisplayName(trimmed)\n    setNameSaving(false)\n    // A refusal keeps the editor open on the draft, saying why.\n    if (!result.ok) {\n      setNameError(result.error)\n      return\n    }\n    setNameError(null)\n    setLocalName(result.name)\n    setNameDraft(result.name ?? '')\n    if (result.name !== null) onNameChange?.(result.name)\n    setEditingName(false)\n  }, [nameDraft, displayName, onNameChange])\n\n  // Open the form AND start loading the site's sign-in client, which begins its\n  // fingerprint collection as it evaluates — so it is ready by submit. Where the\n  // client cannot load at all (not on hadoku.me), the page-level /auth flow is\n  // the only way to sign in, so go there.\n  const openKeyForm = useCallback(() => {\n    setKeyFormOpen(true)\n    setKeyError(null)\n    loadSignIn()\n      .then(signIn => {\n        if (!signIn) window.location.assign(switchKeyHref())\n      })\n      .catch(reportErr)\n  }, [])\n\n  const submitKey = useCallback(async () => {\n    setKeyBusy(true)\n    setKeyError(null)\n    const signIn = await loadSignIn()\n    if (!signIn) {\n      window.location.assign(switchKeyHref())\n      return\n    }\n    try {\n      await signIn(keyDraft)\n    } catch (err) {\n      // A refused key is an inline error, never a redirect.\n      setKeyError((err as Error)?.message || 'Invalid key')\n      setKeyBusy(false)\n      return\n    }\n    // The page now acts for a different identity: everything must re-mount.\n    // Busy stays on through the reload so the form can't be resubmitted.\n    window.location.reload()\n  }, [keyDraft])\n\n  const savePasskey = useCallback(async () => {\n    const ctl = new AbortController()\n    passkeyCtl.current = ctl\n    setPasskeyMode('save')\n    setPasskeyError(null)\n    try {\n      const client = await Promise.race([loadSignInClient(), untilAborted(ctl.signal)])\n      if (!client?.addPasskey) {\n        window.location.assign(passkeyHref('add'))\n        return\n      }\n      await Promise.race([client.addPasskey({ signal: ctl.signal }), untilAborted(ctl.signal)])\n      setPasskeySaved(true)\n    } catch (err) {\n      if (ctl.signal.reason !== CLOSED) {\n        setPasskeyError(\n          ctl.signal.aborted ? 'Passkey not saved' : (err as Error)?.message || 'Passkey not saved'\n        )\n      }\n    } finally {\n      if (passkeyCtl.current === ctl) passkeyCtl.current = null\n      setPasskeyMode(null)\n    }\n  }, [])\n\n  const signInWithPasskey = useCallback(async () => {\n    const ctl = new AbortController()\n    passkeyCtl.current = ctl\n    setPasskeyMode('signin')\n    setKeyBusy(true)\n    setKeyError(null)\n    let leaving = false\n    try {\n      const client = await Promise.race([loadSignInClient(), untilAborted(ctl.signal)])\n      if (!client?.signInWithPasskey) {\n        leaving = true\n        window.location.assign(passkeyHref('signin'))\n        return\n      }\n      await Promise.race([\n        client.signInWithPasskey({ signal: ctl.signal }),\n        untilAborted(ctl.signal)\n      ])\n      // The page now acts for a different identity: everything must re-mount.\n      // Busy stays on through the reload so nothing can be resubmitted.\n      leaving = true\n      window.location.reload()\n    } catch (err) {\n      if (ctl.signal.reason !== CLOSED) {\n        setKeyError(\n          ctl.signal.aborted\n            ? 'Passkey sign-in cancelled'\n            : (err as Error)?.message || 'Passkey sign-in cancelled'\n        )\n      }\n    } finally {\n      if (passkeyCtl.current === ctl) passkeyCtl.current = null\n      if (!leaving) {\n        setPasskeyMode(null)\n        setKeyBusy(false)\n      }\n    }\n  }, [])\n\n  // Closing the popout (or leaving the page) abandons an open prompt.\n  useEffect(() => {\n    if (!open) cancelPasskey(CLOSED)\n  }, [open, cancelPasskey])\n  useEffect(() => () => cancelPasskey(CLOSED), [cancelPasskey])\n\n  const pickLevel = useCallback(\n    async (level: number) => {\n      if (!content || level === content.level || levelSaving) return\n      const prev = content\n      setContent({ ...content, level }) // optimistic\n      setLevelSaving(true)\n      const result = await setContentLevel(level)\n      setLevelSaving(false)\n      setContent(result ?? prev) // adopt server truth, or revert\n    },\n    [content, levelSaving]\n  )\n\n  // No caller-supplied class on the root. The four rows below are the\n  // platform's, not the app's, and a className here is enough to restyle or\n  // hide any of them — which is the drift this component exists to prevent.\n  // Apps extend via `children` and `appTabs`, never by reaching into this markup.\n  return (\n    <div className=\"settings-popout\" ref={rootRef}>\n      <button\n        type=\"button\"\n        className=\"app-header__icon-btn settings-toggle-btn\"\n        aria-label={needsPasskey ? 'User settings, no passkey saved' : 'User settings'}\n        style={needsPasskey ? { position: 'relative' } : undefined}\n        aria-expanded={open}\n        onClick={() => setOpen(v => !v)}\n      >\n        <SettingsIcon />\n        {needsPasskey && (\n          <span className=\"settings-toggle-btn__dot\" style={PASSKEY_DOT} aria-hidden=\"true\" />\n        )}\n      </button>\n\n      {open && <div className=\"settings-popout__overlay\" onClick={() => setOpen(false)} />}\n\n      {open && (\n        <div className=\"settings-popout__panel\" role=\"dialog\" aria-label=\"User settings\">\n          <div className=\"settings-popout__top\">\n            <div className=\"settings-popout__header\">Settings</div>\n            <div\n              className=\"settings-popout__tabs\"\n              role=\"tablist\"\n              aria-label=\"Settings sections\"\n              onKeyDown={onTabKey}\n            >\n              {tabs.map(t => (\n                <button\n                  key={t.id}\n                  ref={el => {\n                    if (el) tabRefs.current.set(t.id, el)\n                    else tabRefs.current.delete(t.id)\n                  }}\n                  type=\"button\"\n                  role=\"tab\"\n                  id={tabDomId(t.id)}\n                  className=\"settings-popout__tab\"\n                  aria-selected={t.id === activeTab}\n                  aria-controls={panelDomId}\n                  tabIndex={t.id === activeTab ? 0 : -1}\n                  onClick={() => selectTab(t.id)}\n                >\n                  {t.label}\n                  {t.dot && <span style={PASSKEY_DOT} aria-hidden=\"true\" />}\n                </button>\n              ))}\n            </div>\n          </div>\n\n          <div\n            className=\"settings-popout__tabpanel\"\n            role=\"tabpanel\"\n            id={panelDomId}\n            aria-labelledby={tabDomId(activeTab)}\n          >\n            {activeTab === 'profile' && (\n              <>\n                {/* Access tier. While resolving, the state still says 'public' —\n              rendering \"Guest\" there would be a wrong answer that corrects\n              itself a moment later, which reads exactly like the lag this\n              placeholder exists to remove. */}\n                <section className=\"settings-popout__row\">\n                  <span className=\"settings-popout__label\">Access tier</span>\n                  {resolving ? (\n                    <span className=\"settings-popout__value\">…</span>\n                  ) : (\n                    <span className={`settings-popout__tier settings-popout__tier--${userType}`}>\n                      {TIER_LABEL[userType]}\n                    </span>\n                  )}\n                </section>\n\n                {/* Display name */}\n                <section className=\"settings-popout__row\">\n                  <span className=\"settings-popout__label\">Display name</span>\n                  {resolving ? (\n                    <span className=\"settings-popout__value\">…</span>\n                  ) : editingName ? (\n                    <span className=\"settings-popout__inline\">\n                      <input\n                        className=\"settings-popout__input\"\n                        value={nameDraft}\n                        maxLength={64}\n                        autoFocus\n                        disabled={nameSaving}\n                        aria-invalid={nameError !== null}\n                        aria-describedby={nameError ? 'settings-popout-name-error' : undefined}\n                        onChange={e => {\n                          setNameDraft(e.target.value)\n                          setNameError(null)\n                        }}\n                        onKeyDown={e => {\n                          if (e.key === 'Enter') {\n                            saveName().catch(reportErr)\n                          }\n                          if (e.key === 'Escape') {\n                            // The edit's Escape, not the popout's (window listener).\n                            e.stopPropagation()\n                            setEditingName(false)\n                            setNameError(null)\n                            setNameDraft(displayName ?? '')\n                          }\n                        }}\n                      />\n                      <button\n                        type=\"button\"\n                        className=\"settings-popout__btn settings-popout__btn--primary\"\n                        disabled={nameSaving}\n                        onClick={() => {\n                          saveName().catch(reportErr)\n                        }}\n                      >\n                        {nameSaving ? '…' : 'Save'}\n                      </button>\n                      {nameError && (\n                        <span\n                          id=\"settings-popout-name-error\"\n                          className=\"settings-popout__error\"\n                          role=\"alert\"\n                        >\n                          {nameError}\n                        </span>\n                      )}\n                    </span>\n                  ) : (\n                    <button\n                      type=\"button\"\n                      className=\"settings-popout__value settings-popout__value--editable\"\n                      aria-label=\"Edit display name\"\n                      onClick={() => {\n                        setNameDraft(displayName ?? '')\n                        setEditingName(true)\n                      }}\n                    >\n                      {displayName || 'Unnamed'}\n                    </button>\n                  )}\n                </section>\n\n                {/* Avatar: picture and character, chosen in place (AvatarPicker).\n              Collapsed until Change, so opening the gear costs no request and no\n              page load reads the avatar. Hidden for public callers, like the\n              content pill: an avatar needs a session. */}\n                {!resolving && userType !== 'public' && (\n                  <section className=\"settings-popout__row settings-popout__row--stack\">\n                    <span className=\"settings-popout__inline\">\n                      <span className=\"settings-popout__label settings-popout__label--grow\">\n                        Avatar\n                      </span>\n                      <button\n                        type=\"button\"\n                        className=\"settings-popout__btn\"\n                        aria-expanded={avatarOpen}\n                        onClick={() => setAvatarOpen(v => !v)}\n                      >\n                        {avatarOpen ? 'Done' : 'Change'}\n                      </button>\n                    </span>\n                    {avatarOpen && <AvatarPicker />}\n                  </section>\n                )}\n              </>\n            )}\n\n            {/* Content visibility level. Held back until the first-open fetch\n              settles, so it lands in the same paint as the tier and name\n              rather than a round trip behind them. `content` is fetched\n              concurrently with whoami(), so by then it is already here. */}\n            {activeTab === 'content' && (\n              <section className=\"settings-popout__row settings-popout__row--stack\">\n                <span className=\"settings-popout__label\">Content visibility</span>\n                {content ? (\n                  <>\n                    <div\n                      className=\"settings-popout__pill\"\n                      role=\"radiogroup\"\n                      aria-label=\"Content visibility level\"\n                    >\n                      {Array.from({ length: content.maxLevel }, (_, i) => i + 1).map(lvl => (\n                        <button\n                          key={lvl}\n                          type=\"button\"\n                          role=\"radio\"\n                          aria-checked={lvl === content.level}\n                          aria-label={`Level ${lvl}`}\n                          className={`settings-popout__seg${\n                            lvl <= content.level ? ' settings-popout__seg--filled' : ''\n                          }`}\n                          disabled={levelSaving}\n                          onClick={() => {\n                            pickLevel(lvl).catch(reportErr)\n                          }}\n                        >\n                          {lvl}\n                        </button>\n                      ))}\n                    </div>\n                    <span className=\"settings-popout__hint\">\n                      Higher levels reveal more mature content across apps. Level 1 is\n                      safe-for-everyone.\n                    </span>\n                  </>\n                ) : (\n                  // Not \"Loading…\" — the fetch has already settled by the time\n                  // this section renders at all, so a null here means it failed.\n                  <span className=\"settings-popout__hint\">Currently unavailable.</span>\n                )}\n              </section>\n            )}\n\n            {/* Switch key. Signs in inline through the SITE's sign-in client\n              (the /auth page's own code path), never a post of ours. A real\n              <form> with a username + current-password pair, so password\n              managers offer and save the key. */}\n            {activeTab === 'account' && (\n              <>\n                {keyFormOpen ? (\n                  <section className=\"settings-popout__row settings-popout__row--stack\">\n                    <form\n                      className=\"settings-popout__key-form\"\n                      onSubmit={e => {\n                        e.preventDefault()\n                        submitKey().catch(reportErr)\n                      }}\n                    >\n                      <input\n                        type=\"text\"\n                        name=\"username\"\n                        autoComplete=\"username\"\n                        value=\"hadoku\"\n                        readOnly\n                        hidden\n                      />\n                      <label className=\"settings-popout__label\" htmlFor=\"settings-popout-key\">\n                        Access key\n                      </label>\n                      <span className=\"settings-popout__inline\">\n                        <input\n                          id=\"settings-popout-key\"\n                          className=\"settings-popout__input\"\n                          type=\"password\"\n                          name=\"password\"\n                          autoComplete=\"current-password\"\n                          autoCapitalize=\"none\"\n                          spellCheck={false}\n                          autoFocus\n                          value={keyDraft}\n                          disabled={keyBusy}\n                          aria-invalid={keyError !== null}\n                          aria-describedby={keyError ? 'settings-popout-key-error' : undefined}\n                          onChange={e => setKeyDraft(e.target.value)}\n                        />\n                        <button\n                          type=\"submit\"\n                          className=\"settings-popout__btn settings-popout__btn--primary\"\n                          disabled={keyBusy}\n                        >\n                          {keyBusy ? 'Signing in…' : 'Sign in'}\n                        </button>\n                      </span>\n                      {passkeysSupported() && (\n                        <span className=\"settings-popout__inline\">\n                          <button\n                            type=\"button\"\n                            className=\"settings-popout__btn\"\n                            disabled={keyBusy}\n                            onClick={() => {\n                              signInWithPasskey().catch(reportErr)\n                            }}\n                          >\n                            {passkeyMode === 'signin' ? 'Waiting for passkey…' : 'Use a passkey'}\n                          </button>\n                        </span>\n                      )}\n                      {/* Cancel on a line of its own: in the row it would slide under\n                    the pointer, and a double click would cancel what it started. */}\n                      {passkeyMode === 'signin' && (\n                        <span className=\"settings-popout__inline\">\n                          <button\n                            type=\"button\"\n                            className=\"settings-popout__btn\"\n                            onClick={() => cancelPasskey()}\n                          >\n                            Cancel\n                          </button>\n                        </span>\n                      )}\n                      {keyError && (\n                        <span\n                          id=\"settings-popout-key-error\"\n                          className=\"settings-popout__error\"\n                          role=\"alert\"\n                        >\n                          {keyError}\n                        </span>\n                      )}\n                    </form>\n                  </section>\n                ) : (\n                  <section className=\"settings-popout__row settings-popout__row--stack\">\n                    <span className=\"settings-popout__inline\">\n                      <span className=\"settings-popout__label settings-popout__label--grow\">\n                        Access key\n                      </span>\n                      {/* Signed-in people only: the site refuses to save one for anyone else. */}\n                      {!resolving && userType !== 'public' && passkeysSupported() && (\n                        <button\n                          type=\"button\"\n                          className={`settings-popout__btn${needsPasskey ? ` settings-popout__btn--primary ${PASSKEY_PULSE_CLASS}` : ''}`}\n                          disabled={passkeyMode !== null || passkeySaved}\n                          onClick={() => {\n                            savePasskey().catch(reportErr)\n                          }}\n                        >\n                          {passkeySaved\n                            ? 'Passkey saved'\n                            : passkeyMode === 'save'\n                              ? 'Saving…'\n                              : 'Save passkey'}\n                        </button>\n                      )}\n                      <button\n                        type=\"button\"\n                        className=\"settings-popout__btn\"\n                        disabled={passkeyMode === 'save'}\n                        onClick={openKeyForm}\n                      >\n                        Switch key\n                      </button>\n                    </span>\n                    {/* Its own line, so nothing moves under a double click. */}\n                    {passkeyMode === 'save' && (\n                      <span className=\"settings-popout__inline\">\n                        <button\n                          type=\"button\"\n                          className=\"settings-popout__btn\"\n                          onClick={() => cancelPasskey()}\n                        >\n                          Cancel\n                        </button>\n                      </span>\n                    )}\n                    {passkeyError && (\n                      <span className=\"settings-popout__error\" role=\"alert\">\n                        {passkeyError}\n                      </span>\n                    )}\n                  </section>\n                )}\n\n                {/* A self-made account (member) can delete itself. The confirm is a\n              separate button on its own line, so a double click on Delete\n              never confirms. */}\n                {!resolving && userType === 'member' && (\n                  <section className=\"settings-popout__row settings-popout__row--stack\">\n                    <span className=\"settings-popout__inline\">\n                      <span className=\"settings-popout__label settings-popout__label--grow\">\n                        Account\n                      </span>\n                      {deleteStage === 'idle' ? (\n                        <button\n                          type=\"button\"\n                          className=\"settings-popout__btn\"\n                          onClick={() => {\n                            setDeleteError(null)\n                            setDeleteStage('confirm')\n                          }}\n                        >\n                          Delete account\n                        </button>\n                      ) : (\n                        <button\n                          type=\"button\"\n                          className=\"settings-popout__btn\"\n                          disabled={deleteStage === 'busy'}\n                          onClick={() => setDeleteStage('idle')}\n                        >\n                          Keep\n                        </button>\n                      )}\n                    </span>\n                    {deleteStage !== 'idle' && (\n                      <span className=\"settings-popout__inline\">\n                        <button\n                          type=\"button\"\n                          className=\"settings-popout__btn settings-popout__btn--primary\"\n                          disabled={deleteStage === 'busy'}\n                          onClick={() => {\n                            setDeleteStage('busy')\n                            deleteOwnAccount()\n                              .then(deleted => {\n                                if (!deleted) {\n                                  setDeleteError('Account not deleted')\n                                  setDeleteStage('confirm')\n                                  return\n                                }\n                                localStorage.removeItem('hadoku_session_id')\n                                localStorage.removeItem('hadoku_user_type')\n                                window.location.assign('/')\n                              })\n                              .catch(reportErr)\n                          }}\n                        >\n                          {deleteStage === 'busy' ? 'Deleting…' : 'Delete for good'}\n                        </button>\n                      </span>\n                    )}\n                    {deleteError && (\n                      <span className=\"settings-popout__error\" role=\"alert\">\n                        {deleteError}\n                      </span>\n                    )}\n                  </section>\n                )}\n              </>\n            )}\n\n            {/* App-specific settings (optional) — same popout, one gear. */}\n            {activeTab === 'app:' && (\n              <section className=\"settings-popout__row settings-popout__row--stack\">\n                {children}\n              </section>\n            )}\n            {appTab && (\n              <section className=\"settings-popout__row settings-popout__row--stack\">\n                {appTab.render()}\n              </section>\n            )}\n          </div>\n        </div>\n      )}\n    </div>\n  )\n}\n"],"names":[],"mappings":";;;;;;;AAqFA,SAAS,aAAa,QAAqC;AACzD,SAAO,IAAI,QAAQ,CAAC,GAAG,WAAW;AAChC,UAAM,OAAO,MAAM,OAAO,IAAI,MAAM,WAAW,CAAC;AAChD,QAAI,OAAO,QAAS,MAAA;AAAA,gBACR,iBAAiB,SAAS,MAAM,EAAE,MAAM,MAAM;AAAA,EAC5D,CAAC;AACH;AAGA,MAAM,SAAS;AAKf,SAAS,UAAU,KAAc;AAE/B,UAAQ,MAAM,qCAAsC,KAAe,WAAW,GAAG;AACnF;AAKA,MAAM,cAAmC;AAAA,EACvC,UAAU;AAAA,EACV,KAAK;AAAA,EACL,OAAO;AAAA,EACP,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,eAAe;AACjB;AAKA,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAOrB,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAUxB,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsDjB,SAAS,iBAAiB,IAAY,KAAa,QAAiB;AAClE,YAAU,MAAM;AACd,QAAI,CAAC,UAAU,SAAS,eAAe,EAAE,EAAG;AAC5C,UAAM,KAAK,SAAS,cAAc,OAAO;AACzC,OAAG,KAAK;AACR,OAAG,cAAc;AACjB,aAAS,KAAK,YAAY,EAAE;AAAA,EAC9B,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC;AACtB;AAEA,MAAM,aAAmC;AAAA,EACvC,OAAO;AAAA,EACP,MAAM;AAAA,EACN,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,SAAS,kBAAkB;AAAA,EAChC,UAAU;AAAA,EACV,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AACF,GAA2B;AACzB,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,UAAU,OAAuB,IAAI;AAC3C,QAAM,YAAY,MAAA;AAClB,QAAM,UAAU,OAAO,oBAAI,KAAgC;AAC3D,QAAM,CAAC,UAAU,OAAO,IAAI,eAAA;AAE5B,QAAM,CAAC,WAAW,YAAY,IAAI,SAAwB,IAAI;AAG9D,QAAM,CAAC,UAAU,WAAW,IAAI,SAAe,gBAAgB,QAAQ;AACvE,QAAM,CAAC,cAAc,eAAe,IAAI,SAAwB,YAAY,IAAI;AAGhF,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,gBAAgB,EAAE;AAC7D,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AACpD,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAwB,IAAI;AAC9D,QAAM,CAAC,aAAa,YAAY,IAAI,SAAwB,YAAY;AAIxE,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AACpD,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAwB,IAAI;AAO5D,QAAM,CAAC,aAAa,cAAc,IAAI,SAAmC,IAAI;AAC7E,QAAM,CAAC,cAAc,eAAe,IAAI,SAAS,KAAK;AAEtD,QAAM,CAAC,cAAc,eAAe,IAAI,SAAwB,IAAI;AACpE,QAAM,CAAC,cAAc,eAAe,IAAI,SAAwB,IAAI;AAEpE,QAAM,CAAC,aAAa,cAAc,IAAI,SAAsC,MAAM;AAClF,QAAM,CAAC,aAAa,cAAc,IAAI,SAAwB,IAAI;AAClE,QAAM,aAAa,OAA+B,IAAI;AACtD,QAAM,gBAAgB,YAAY,CAAC,WAAoB,WAAW,SAAS,MAAM,MAAM,GAAG,EAAE;AAG5F,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAGlD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAmC,IAAI;AACrE,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AAOpD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,IAAI;AAO/C,QAAM,kBAAkB,aAAa;AAIrC,QAAM,eACJ,CAAC,aACD,aAAa,YACb,iBAAiB,KACjB,CAAC,gBACD,kBAAA;AACF,mBAAiB,0BAA0B,mBAAmB,YAAY;AAC1E,mBAAiB,iBAAiB,UAAU,IAAI;AAIhD,QAAM,OAAuD;AAAA,IAC3D,EAAE,IAAI,WAAW,OAAO,UAAA;AAAA,IACxB,GAAI,CAAC,aAAa,kBAAkB,CAAC,EAAE,IAAI,WAAW,OAAO,UAAA,CAAW,IAAI,CAAA;AAAA;AAAA,IAE5E,EAAE,IAAI,WAAW,OAAO,WAAW,KAAK,aAAA;AAAA,IACxC,GAAI,WAAW,CAAC,EAAE,IAAI,QAAQ,OAAO,MAAA,CAAO,IAAI,CAAA;AAAA,IAChD,IAAI,WAAW,CAAA,GAAI,IAAI,CAAA,OAAM,EAAE,IAAI,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,QAAQ;AAAA,EAAA;AAErE,QAAM,SAAS,KAAK,IAAI,CAAA,MAAK,EAAE,EAAE;AAGjC,QAAM,aAAa,OAAO,KAAK,CAAA,OAAM,GAAG,WAAW,MAAM,CAAC,KAAK;AAC/D,QAAM,YACJ,CAAC,WAAW,QAAQ,EAAE,KAAK,CAAC,OAAqB,OAAO,QAAQ,OAAO,SAAS,EAAE,CAAC,KACnF;AACF,QAAM,SAAS,SAAS,KAAK,CAAA,MAAK,OAAO,EAAE,EAAE,OAAO,SAAS;AAC7D,QAAM,WAAW,CAAC,OAAe,GAAG,SAAS,OAAO,EAAE;AACtD,QAAM,aAAa,GAAG,SAAS;AAE/B,QAAM,YAAY;AAAA,IAChB,CAAC,OAAe;AACd,mBAAa,EAAE;AACf,cAAQ,EAAE;AAAA,IACZ;AAAA,IACA,CAAC,OAAO;AAAA,EAAA;AAKV,QAAM,WAAW,CAAC,MAA2B;AAC3C,UAAM,IAAI,OAAO,QAAQ,SAAS;AAClC,UAAM,IAAI,OAAO;AACjB,UAAM,OACJ,EAAE,QAAQ,eACN,QAAQ,IAAI,KAAK,CAAC,IAClB,EAAE,QAAQ,cACR,QAAQ,IAAI,IAAI,KAAK,CAAC,IACtB,EAAE,QAAQ,SACR,OAAO,CAAC,IACR,EAAE,QAAQ,QACR,OAAO,IAAI,CAAC,IACZ;AACZ,QAAI,SAAS,OAAW;AACxB,MAAE,eAAA;AACF,cAAU,IAAI;AACd,YAAQ,QAAQ,IAAI,IAAI,GAAG,MAAA;AAAA,EAC7B;AAKA,YAAU,MAAM;AACd,QAAI;AACF,cAAQ,QAAQ,IAAI,SAAS,GAAG,iBAAiB,EAAE,OAAO,WAAW,QAAQ,WAAW;AAAA,EAC5F,GAAG,CAAC,MAAM,SAAS,CAAC;AAGpB,YAAU,MAAM;AACd,QAAI,iBAAiB,OAAW,aAAY,YAAY;AAAA,EAC1D,GAAG,CAAC,YAAY,CAAC;AACjB,YAAU,MAAM;AACd,QAAI,aAAa,QAAW;AAC1B,sBAAgB,QAAQ;AACxB,mBAAa,QAAQ;AACrB,mBAAa,YAAY,EAAE;AAAA,IAC7B;AAAA,EACF,GAAG,CAAC,QAAQ,CAAC;AAgBb,YAAU,MAAM;AACd,QAAI,OAAO;AACX,qBAAiB,EAAE,UAAU,cAAc,MAAM,UAAU,EACxD,KAAK,CAAC,EAAE,UAAU,SAAS,OAAO,eAAe;AAChD,UAAI,CAAC,KAAM;AACX,sBAAgB,QAAQ;AAGxB,UAAI,iBAAiB,QAAW;AAC9B,oBAAY,SAAS,QAAQ;AAC7B,wBAAgB,SAAS,IAAI;AAC7B,qBAAa,SAAS,IAAI;AAC1B,qBAAa,SAAS,QAAQ,EAAE;AAAA,MAClC;AACA,UAAI,kBAAkB,KAAK;AAAA,IAC7B,CAAC,EACA,MAAM,SAAS,EACf,QAAQ,MAAM;AACb,UAAI,mBAAmB,KAAK;AAAA,IAC9B,CAAC;AACH,WAAO,MAAM;AACX,aAAO;AAAA,IACT;AAAA,EAKF,GAAG,CAAA,CAAE;AAGL,YAAU,MAAM;AACd,QAAI,CAAC,KAAM;AACX,UAAM,QAAQ,CAAC,MAAqB;AAClC,UAAI,EAAE,QAAQ,SAAU,SAAQ,KAAK;AAAA,IACvC;AACA,WAAO,iBAAiB,WAAW,KAAK;AACxC,WAAO,MAAM,OAAO,oBAAoB,WAAW,KAAK;AAAA,EAC1D,GAAG,CAAC,IAAI,CAAC;AAET,QAAM,WAAW,YAAY,YAAY;AACvC,UAAM,UAAU,UAAU,KAAA;AAC1B,QAAI,CAAC,WAAW,YAAY,aAAa;AACvC,qBAAe,KAAK;AACpB;AAAA,IACF;AACA,kBAAc,IAAI;AAClB,UAAM,SAAS,MAAM,eAAe,OAAO;AAC3C,kBAAc,KAAK;AAEnB,QAAI,CAAC,OAAO,IAAI;AACd,mBAAa,OAAO,KAAK;AACzB;AAAA,IACF;AACA,iBAAa,IAAI;AACjB,iBAAa,OAAO,IAAI;AACxB,iBAAa,OAAO,QAAQ,EAAE;AAC9B,QAAI,OAAO,SAAS,KAAM,gBAAe,OAAO,IAAI;AACpD,mBAAe,KAAK;AAAA,EACtB,GAAG,CAAC,WAAW,aAAa,YAAY,CAAC;AAMzC,QAAM,cAAc,YAAY,MAAM;AACpC,mBAAe,IAAI;AACnB,gBAAY,IAAI;AAChB,eAAA,EACG,KAAK,CAAA,WAAU;AACd,UAAI,CAAC,OAAQ,QAAO,SAAS,OAAO,eAAe;AAAA,IACrD,CAAC,EACA,MAAM,SAAS;AAAA,EACpB,GAAG,CAAA,CAAE;AAEL,QAAM,YAAY,YAAY,YAAY;AACxC,eAAW,IAAI;AACf,gBAAY,IAAI;AAChB,UAAM,SAAS,MAAM,WAAA;AACrB,QAAI,CAAC,QAAQ;AACX,aAAO,SAAS,OAAO,eAAe;AACtC;AAAA,IACF;AACA,QAAI;AACF,YAAM,OAAO,QAAQ;AAAA,IACvB,SAAS,KAAK;AAEZ,kBAAa,KAAe,WAAW,aAAa;AACpD,iBAAW,KAAK;AAChB;AAAA,IACF;AAGA,WAAO,SAAS,OAAA;AAAA,EAClB,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,cAAc,YAAY,YAAY;AAC1C,UAAM,MAAM,IAAI,gBAAA;AAChB,eAAW,UAAU;AACrB,mBAAe,MAAM;AACrB,oBAAgB,IAAI;AACpB,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,iBAAA,GAAoB,aAAa,IAAI,MAAM,CAAC,CAAC;AAChF,UAAI,CAAC,QAAQ,YAAY;AACvB,eAAO,SAAS,OAAO,YAAY,KAAK,CAAC;AACzC;AAAA,MACF;AACA,YAAM,QAAQ,KAAK,CAAC,OAAO,WAAW,EAAE,QAAQ,IAAI,OAAA,CAAQ,GAAG,aAAa,IAAI,MAAM,CAAC,CAAC;AACxF,sBAAgB,IAAI;AAAA,IACtB,SAAS,KAAK;AACZ,UAAI,IAAI,OAAO,WAAW,QAAQ;AAChC;AAAA,UACE,IAAI,OAAO,UAAU,sBAAuB,KAAe,WAAW;AAAA,QAAA;AAAA,MAE1E;AAAA,IACF,UAAA;AACE,UAAI,WAAW,YAAY,IAAK,YAAW,UAAU;AACrD,qBAAe,IAAI;AAAA,IACrB;AAAA,EACF,GAAG,CAAA,CAAE;AAEL,QAAM,oBAAoB,YAAY,YAAY;AAChD,UAAM,MAAM,IAAI,gBAAA;AAChB,eAAW,UAAU;AACrB,mBAAe,QAAQ;AACvB,eAAW,IAAI;AACf,gBAAY,IAAI;AAChB,QAAI,UAAU;AACd,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,iBAAA,GAAoB,aAAa,IAAI,MAAM,CAAC,CAAC;AAChF,UAAI,CAAC,QAAQ,mBAAmB;AAC9B,kBAAU;AACV,eAAO,SAAS,OAAO,YAAY,QAAQ,CAAC;AAC5C;AAAA,MACF;AACA,YAAM,QAAQ,KAAK;AAAA,QACjB,OAAO,kBAAkB,EAAE,QAAQ,IAAI,QAAQ;AAAA,QAC/C,aAAa,IAAI,MAAM;AAAA,MAAA,CACxB;AAGD,gBAAU;AACV,aAAO,SAAS,OAAA;AAAA,IAClB,SAAS,KAAK;AACZ,UAAI,IAAI,OAAO,WAAW,QAAQ;AAChC;AAAA,UACE,IAAI,OAAO,UACP,8BACC,KAAe,WAAW;AAAA,QAAA;AAAA,MAEnC;AAAA,IACF,UAAA;AACE,UAAI,WAAW,YAAY,IAAK,YAAW,UAAU;AACrD,UAAI,CAAC,SAAS;AACZ,uBAAe,IAAI;AACnB,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF,GAAG,CAAA,CAAE;AAGL,YAAU,MAAM;AACd,QAAI,CAAC,KAAM,eAAc,MAAM;AAAA,EACjC,GAAG,CAAC,MAAM,aAAa,CAAC;AACxB,YAAU,MAAM,MAAM,cAAc,MAAM,GAAG,CAAC,aAAa,CAAC;AAE5D,QAAM,YAAY;AAAA,IAChB,OAAO,UAAkB;AACvB,UAAI,CAAC,WAAW,UAAU,QAAQ,SAAS,YAAa;AACxD,YAAM,OAAO;AACb,iBAAW,EAAE,GAAG,SAAS,OAAO;AAChC,qBAAe,IAAI;AACnB,YAAM,SAAS,MAAM,gBAAgB,KAAK;AAC1C,qBAAe,KAAK;AACpB,iBAAW,UAAU,IAAI;AAAA,IAC3B;AAAA,IACA,CAAC,SAAS,WAAW;AAAA,EAAA;AAOvB,SACE,qBAAC,OAAA,EAAI,WAAU,mBAAkB,KAAK,SACpC,UAAA;AAAA,IAAA;AAAA,MAAC;AAAA,MAAA;AAAA,QACC,MAAK;AAAA,QACL,WAAU;AAAA,QACV,cAAY,eAAe,oCAAoC;AAAA,QAC/D,OAAO,eAAe,EAAE,UAAU,eAAe;AAAA,QACjD,iBAAe;AAAA,QACf,SAAS,MAAM,QAAQ,CAAA,MAAK,CAAC,CAAC;AAAA,QAE9B,UAAA;AAAA,UAAA,oBAAC,cAAA,EAAa;AAAA,UACb,oCACE,QAAA,EAAK,WAAU,4BAA2B,OAAO,aAAa,eAAY,OAAA,CAAO;AAAA,QAAA;AAAA,MAAA;AAAA,IAAA;AAAA,IAIrF,4BAAS,OAAA,EAAI,WAAU,4BAA2B,SAAS,MAAM,QAAQ,KAAK,GAAG;AAAA,IAEjF,6BACE,OAAA,EAAI,WAAU,0BAAyB,MAAK,UAAS,cAAW,iBAC/D,UAAA;AAAA,MAAA,qBAAC,OAAA,EAAI,WAAU,wBACb,UAAA;AAAA,QAAA,oBAAC,OAAA,EAAI,WAAU,2BAA0B,UAAA,YAAQ;AAAA,QACjD;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,WAAU;AAAA,YACV,MAAK;AAAA,YACL,cAAW;AAAA,YACX,WAAW;AAAA,YAEV,UAAA,KAAK,IAAI,CAAA,MACR;AAAA,cAAC;AAAA,cAAA;AAAA,gBAEC,KAAK,CAAA,OAAM;AACT,sBAAI,GAAI,SAAQ,QAAQ,IAAI,EAAE,IAAI,EAAE;AAAA,sBAC/B,SAAQ,QAAQ,OAAO,EAAE,EAAE;AAAA,gBAClC;AAAA,gBACA,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,IAAI,SAAS,EAAE,EAAE;AAAA,gBACjB,WAAU;AAAA,gBACV,iBAAe,EAAE,OAAO;AAAA,gBACxB,iBAAe;AAAA,gBACf,UAAU,EAAE,OAAO,YAAY,IAAI;AAAA,gBACnC,SAAS,MAAM,UAAU,EAAE,EAAE;AAAA,gBAE5B,UAAA;AAAA,kBAAA,EAAE;AAAA,kBACF,EAAE,OAAO,oBAAC,UAAK,OAAO,aAAa,eAAY,OAAA,CAAO;AAAA,gBAAA;AAAA,cAAA;AAAA,cAflD,EAAE;AAAA,YAAA,CAiBV;AAAA,UAAA;AAAA,QAAA;AAAA,MACH,GACF;AAAA,MAEA;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,WAAU;AAAA,UACV,MAAK;AAAA,UACL,IAAI;AAAA,UACJ,mBAAiB,SAAS,SAAS;AAAA,UAElC,UAAA;AAAA,YAAA,cAAc,aACb,qBAAA,UAAA,EAKE,UAAA;AAAA,cAAA,qBAAC,WAAA,EAAQ,WAAU,wBACjB,UAAA;AAAA,gBAAA,oBAAC,QAAA,EAAK,WAAU,0BAAyB,UAAA,eAAW;AAAA,gBACnD,YACC,oBAAC,QAAA,EAAK,WAAU,0BAAyB,UAAA,IAAA,CAAC,IAE1C,oBAAC,QAAA,EAAK,WAAW,gDAAgD,QAAQ,IACtE,UAAA,WAAW,QAAQ,EAAA,CACtB;AAAA,cAAA,GAEJ;AAAA,cAGA,qBAAC,WAAA,EAAQ,WAAU,wBACjB,UAAA;AAAA,gBAAA,oBAAC,QAAA,EAAK,WAAU,0BAAyB,UAAA,gBAAY;AAAA,gBACpD,YACC,oBAAC,QAAA,EAAK,WAAU,0BAAyB,UAAA,IAAA,CAAC,IACxC,cACF,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAA;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,WAAU;AAAA,sBACV,OAAO;AAAA,sBACP,WAAW;AAAA,sBACX,WAAS;AAAA,sBACT,UAAU;AAAA,sBACV,gBAAc,cAAc;AAAA,sBAC5B,oBAAkB,YAAY,+BAA+B;AAAA,sBAC7D,UAAU,CAAA,MAAK;AACb,qCAAa,EAAE,OAAO,KAAK;AAC3B,qCAAa,IAAI;AAAA,sBACnB;AAAA,sBACA,WAAW,CAAA,MAAK;AACd,4BAAI,EAAE,QAAQ,SAAS;AACrB,mCAAA,EAAW,MAAM,SAAS;AAAA,wBAC5B;AACA,4BAAI,EAAE,QAAQ,UAAU;AAEtB,4BAAE,gBAAA;AACF,yCAAe,KAAK;AACpB,uCAAa,IAAI;AACjB,uCAAa,eAAe,EAAE;AAAA,wBAChC;AAAA,sBACF;AAAA,oBAAA;AAAA,kBAAA;AAAA,kBAEF;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,UAAU;AAAA,sBACV,SAAS,MAAM;AACb,iCAAA,EAAW,MAAM,SAAS;AAAA,sBAC5B;AAAA,sBAEC,uBAAa,MAAM;AAAA,oBAAA;AAAA,kBAAA;AAAA,kBAErB,aACC;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,IAAG;AAAA,sBACH,WAAU;AAAA,sBACV,MAAK;AAAA,sBAEJ,UAAA;AAAA,oBAAA;AAAA,kBAAA;AAAA,gBACH,EAAA,CAEJ,IAEA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV,cAAW;AAAA,oBACX,SAAS,MAAM;AACb,mCAAa,eAAe,EAAE;AAC9B,qCAAe,IAAI;AAAA,oBACrB;AAAA,oBAEC,UAAA,eAAe;AAAA,kBAAA;AAAA,gBAAA;AAAA,cAClB,GAEJ;AAAA,cAMC,CAAC,aAAa,aAAa,YAC1B,qBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,gBAAA,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAA,oBAAC,QAAA,EAAK,WAAU,uDAAsD,UAAA,UAEtE;AAAA,kBACA;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,iBAAe;AAAA,sBACf,SAAS,MAAM,cAAc,CAAA,MAAK,CAAC,CAAC;AAAA,sBAEnC,uBAAa,SAAS;AAAA,oBAAA;AAAA,kBAAA;AAAA,gBACzB,GACF;AAAA,gBACC,kCAAe,cAAA,CAAA,CAAa;AAAA,cAAA,EAAA,CAC/B;AAAA,YAAA,GAEJ;AAAA,YAOD,cAAc,aACb,qBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,cAAA,oBAAC,QAAA,EAAK,WAAU,0BAAyB,UAAA,sBAAkB;AAAA,cAC1D,UACC,qBAAA,UAAA,EACE,UAAA;AAAA,gBAAA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,WAAU;AAAA,oBACV,MAAK;AAAA,oBACL,cAAW;AAAA,oBAEV,UAAA,MAAM,KAAK,EAAE,QAAQ,QAAQ,SAAA,GAAY,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,CAAA,QAC7D;AAAA,sBAAC;AAAA,sBAAA;AAAA,wBAEC,MAAK;AAAA,wBACL,MAAK;AAAA,wBACL,gBAAc,QAAQ,QAAQ;AAAA,wBAC9B,cAAY,SAAS,GAAG;AAAA,wBACxB,WAAW,uBACT,OAAO,QAAQ,QAAQ,kCAAkC,EAC3D;AAAA,wBACA,UAAU;AAAA,wBACV,SAAS,MAAM;AACb,oCAAU,GAAG,EAAE,MAAM,SAAS;AAAA,wBAChC;AAAA,wBAEC,UAAA;AAAA,sBAAA;AAAA,sBAbI;AAAA,oBAAA,CAeR;AAAA,kBAAA;AAAA,gBAAA;AAAA,gBAEH,oBAAC,QAAA,EAAK,WAAU,yBAAwB,UAAA,sFAAA,CAGxC;AAAA,cAAA,GACF;AAAA;AAAA;AAAA,gBAIA,oBAAC,QAAA,EAAK,WAAU,yBAAwB,UAAA,yBAAA,CAAsB;AAAA;AAAA,YAAA,GAElE;AAAA,YAOD,cAAc,aACb,qBAAA,UAAA,EACG,UAAA;AAAA,cAAA,cACC,oBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,gBAAC;AAAA,gBAAA;AAAA,kBACC,WAAU;AAAA,kBACV,UAAU,CAAA,MAAK;AACb,sBAAE,eAAA;AACF,8BAAA,EAAY,MAAM,SAAS;AAAA,kBAC7B;AAAA,kBAEA,UAAA;AAAA,oBAAA;AAAA,sBAAC;AAAA,sBAAA;AAAA,wBACC,MAAK;AAAA,wBACL,MAAK;AAAA,wBACL,cAAa;AAAA,wBACb,OAAM;AAAA,wBACN,UAAQ;AAAA,wBACR,QAAM;AAAA,sBAAA;AAAA,oBAAA;AAAA,wCAEP,SAAA,EAAM,WAAU,0BAAyB,SAAQ,uBAAsB,UAAA,cAExE;AAAA,oBACA,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,sBAAA;AAAA,wBAAC;AAAA,wBAAA;AAAA,0BACC,IAAG;AAAA,0BACH,WAAU;AAAA,0BACV,MAAK;AAAA,0BACL,MAAK;AAAA,0BACL,cAAa;AAAA,0BACb,gBAAe;AAAA,0BACf,YAAY;AAAA,0BACZ,WAAS;AAAA,0BACT,OAAO;AAAA,0BACP,UAAU;AAAA,0BACV,gBAAc,aAAa;AAAA,0BAC3B,oBAAkB,WAAW,8BAA8B;AAAA,0BAC3D,UAAU,CAAA,MAAK,YAAY,EAAE,OAAO,KAAK;AAAA,wBAAA;AAAA,sBAAA;AAAA,sBAE3C;AAAA,wBAAC;AAAA,wBAAA;AAAA,0BACC,MAAK;AAAA,0BACL,WAAU;AAAA,0BACV,UAAU;AAAA,0BAET,oBAAU,gBAAgB;AAAA,wBAAA;AAAA,sBAAA;AAAA,oBAC7B,GACF;AAAA,oBACC,kBAAA,KACC,oBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,sBAAC;AAAA,sBAAA;AAAA,wBACC,MAAK;AAAA,wBACL,WAAU;AAAA,wBACV,UAAU;AAAA,wBACV,SAAS,MAAM;AACb,4CAAA,EAAoB,MAAM,SAAS;AAAA,wBACrC;AAAA,wBAEC,UAAA,gBAAgB,WAAW,yBAAyB;AAAA,sBAAA;AAAA,oBAAA,GAEzD;AAAA,oBAID,gBAAgB,YACf,oBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,sBAAC;AAAA,sBAAA;AAAA,wBACC,MAAK;AAAA,wBACL,WAAU;AAAA,wBACV,SAAS,MAAM,cAAA;AAAA,wBAChB,UAAA;AAAA,sBAAA;AAAA,oBAAA,GAGH;AAAA,oBAED,YACC;AAAA,sBAAC;AAAA,sBAAA;AAAA,wBACC,IAAG;AAAA,wBACH,WAAU;AAAA,wBACV,MAAK;AAAA,wBAEJ,UAAA;AAAA,sBAAA;AAAA,oBAAA;AAAA,kBACH;AAAA,gBAAA;AAAA,cAAA,EAEJ,CACF,IAEA,qBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,gBAAA,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAA,oBAAC,QAAA,EAAK,WAAU,uDAAsD,UAAA,cAEtE;AAAA,kBAEC,CAAC,aAAa,aAAa,YAAY,uBACtC;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAW,uBAAuB,eAAe,kCAAkC,mBAAmB,KAAK,EAAE;AAAA,sBAC7G,UAAU,gBAAgB,QAAQ;AAAA,sBAClC,SAAS,MAAM;AACb,oCAAA,EAAc,MAAM,SAAS;AAAA,sBAC/B;AAAA,sBAEC,UAAA,eACG,kBACA,gBAAgB,SACd,YACA;AAAA,oBAAA;AAAA,kBAAA;AAAA,kBAGV;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,UAAU,gBAAgB;AAAA,sBAC1B,SAAS;AAAA,sBACV,UAAA;AAAA,oBAAA;AAAA,kBAAA;AAAA,gBAED,GACF;AAAA,gBAEC,gBAAgB,UACf,oBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV,SAAS,MAAM,cAAA;AAAA,oBAChB,UAAA;AAAA,kBAAA;AAAA,gBAAA,GAGH;AAAA,gBAED,gBACC,oBAAC,QAAA,EAAK,WAAU,0BAAyB,MAAK,SAC3C,UAAA,aAAA,CACH;AAAA,cAAA,GAEJ;AAAA,cAMD,CAAC,aAAa,aAAa,YAC1B,qBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,gBAAA,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAA,oBAAC,QAAA,EAAK,WAAU,uDAAsD,UAAA,WAEtE;AAAA,kBACC,gBAAgB,SACf;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,SAAS,MAAM;AACb,uCAAe,IAAI;AACnB,uCAAe,SAAS;AAAA,sBAC1B;AAAA,sBACD,UAAA;AAAA,oBAAA;AAAA,kBAAA,IAID;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,UAAU,gBAAgB;AAAA,sBAC1B,SAAS,MAAM,eAAe,MAAM;AAAA,sBACrC,UAAA;AAAA,oBAAA;AAAA,kBAAA;AAAA,gBAED,GAEJ;AAAA,gBACC,gBAAgB,UACf,oBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV,UAAU,gBAAgB;AAAA,oBAC1B,SAAS,MAAM;AACb,qCAAe,MAAM;AACrB,uCAAA,EACG,KAAK,CAAA,YAAW;AACf,4BAAI,CAAC,SAAS;AACZ,yCAAe,qBAAqB;AACpC,yCAAe,SAAS;AACxB;AAAA,wBACF;AACA,qCAAa,WAAW,mBAAmB;AAC3C,qCAAa,WAAW,kBAAkB;AAC1C,+BAAO,SAAS,OAAO,GAAG;AAAA,sBAC5B,CAAC,EACA,MAAM,SAAS;AAAA,oBACpB;AAAA,oBAEC,UAAA,gBAAgB,SAAS,cAAc;AAAA,kBAAA;AAAA,gBAAA,GAE5C;AAAA,gBAED,eACC,oBAAC,QAAA,EAAK,WAAU,0BAAyB,MAAK,SAC3C,UAAA,YAAA,CACH;AAAA,cAAA,EAAA,CAEJ;AAAA,YAAA,GAEJ;AAAA,YAID,cAAc,UACb,oBAAC,WAAA,EAAQ,WAAU,oDAChB,UACH;AAAA,YAED,UACC,oBAAC,WAAA,EAAQ,WAAU,oDAChB,UAAA,OAAO,SAAO,CACjB;AAAA,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,IAEJ,EAAA,CACF;AAAA,EAAA,GAEJ;AAEJ;"}
+{"version":3,"file":"ConnectedSettings.js","sources":["../../src/components/ConnectedSettings.tsx"],"sourcesContent":["/**\n * ConnectedSettings — the unified per-user settings control for the hadoku\n * ecosystem: a gear button that opens a popout housing everything that is a\n * property of the PERSON (not the app):\n *   - current access tier (read-only, friendly label)\n *   - display name (inline edit → POST /session/name)\n *   - avatar: picture and character, chosen in place (AvatarPicker)\n *   - global content-visibility level (tiered pill → PUT /prefs/api/v1/content-level)\n *   - switch key (an inline sign-in form, on the site's own sign-in client)\n *\n * Those are grouped into tabs (Profile, Content, Account), followed by the\n * app's own: `children` as one \"App\" tab, `appTabs` as one tab each. The open\n * tab is remembered per user and per app (useSettingsTab, @wolffm/themes).\n *\n * \"Connected\" (parallel to ConnectedThemePicker): it self-wires to the\n * hadoku.me edge-router via same-origin fetches (see lib/settingsClient), so\n * dropping `<ConnectedSettings />` into any app under hadoku.me needs zero\n * props. Identity is resolved via whoami() unless the host passes `userType` /\n * `name` (avoids a redundant fetch when the app already knows).\n *\n * All of that is resolved AT MOUNT via `prefetchSettings()`, never on\n * gear-click — opening the popout must cost zero requests. See the effect\n * below, and `e2e/settings-prefetch.spec.ts` in hadoku-task, which fails if the\n * fetch moves back behind the click.\n *\n * Mirrors ThemePicker's controlled-popout pattern: owns its own `open` state +\n * a full-viewport overlay for click-outside dismiss. The content pill renders\n * `maxLevel` segments (friend ⇒ 3, admin ⇒ 4) and is hidden for public callers.\n * maxLevel comes from the server so the tier ceiling is never trusted from the\n * client.\n */\nimport React, { useCallback, useEffect, useId, useRef, useState } from 'react'\nimport { useSettingsTab } from '@wolffm/themes'\nimport { SettingsIcon } from './ThemeIcons'\nimport { AvatarPicker } from './AvatarPicker'\n\n// A grantee's own service credentials, with a QR encoder for TOTP enrolment:\n// its own chunk, fetched only when a grantee opens it.\nconst ServiceAccess = React.lazy(() =>\n  import('./ServiceAccess').then(m => ({ default: m.ServiceAccess }))\n)\nimport {\n  deleteOwnAccount,\n  prefetchSettings,\n  setContentLevel,\n  setDisplayName,\n  loadSignIn,\n  loadSignInClient,\n  passkeyHref,\n  passkeysSupported,\n  switchKeyHref,\n  type ContentLevelState,\n  type Tier\n} from '../lib/settingsClient'\nimport '../app-header.css'\n\nexport interface ConnectedSettingsProps {\n  /** Caller's tier. Omit to self-resolve via whoami().\n   *\n   *  This exists for apps that CANNOT reach `/session/whoami` — conjure sits\n   *  behind a path-prefixed shim that serves nothing outside `/conjure`, so\n   *  whoami 404s and the tier would fall back to guest. It is an identity\n   *  hint, not a way to present a different tier than the edge assigns: every\n   *  gate that matters is enforced server-side off the edge-stamped tier. */\n  userType?: Tier\n  /** Display name. Omit to self-resolve via whoami(). Same rationale. */\n  name?: string | null\n  /** Notify the host (e.g. a \"Signed in as …\" label) of a rename. */\n  onNameChange?: (name: string | null) => void\n  /** App-specific settings as ONE tab, labelled \"App\", after the site's own\n   *  tabs — so an app with its own preferences keeps one unified gear instead\n   *  of a second control. For more than one section, use `appTabs`.\n   *\n   *  This slot is deliberately unconstrained — put whatever the app needs in\n   *  it. The constraint is only that it cannot change the site's tabs. */\n  children?: React.ReactNode\n  /** App-specific settings as tabs of their own, after `children`'s \"App\" tab\n   *  if both are given. `id` is stable and unique within the app: the last-open\n   *  tab is remembered by it. `render` runs only while its tab is open. */\n  appTabs?: AppSettingsTab[]\n}\n\n/** One app-contributed tab in the settings popout. */\nexport interface AppSettingsTab {\n  id: string\n  label: string\n  render: () => React.ReactNode\n}\n\n/** Rejects once `signal` aborts, so a call that ignores the signal (an older\n *  site client, a prompt that never settles) still lets the UI go. */\nfunction untilAborted(signal: AbortSignal): Promise<never> {\n  return new Promise((_, reject) => {\n    const fail = () => reject(new Error('cancelled'))\n    if (signal.aborted) fail()\n    else signal.addEventListener('abort', fail, { once: true })\n  })\n}\n\n/** Abort reason when the popout closes: a dismissal, not an error to show. */\nconst CLOSED = 'closed'\n\n/** Rejection sink for fire-and-forget settings actions. The client helpers\n *  already resolve to null on failure (state reflects it), so this only trips\n *  on truly unexpected throws — log rather than swallow silently. */\nfunction reportErr(err: unknown) {\n  // task-ui-components v2 dropped its logger; keep the package dependency-free.\n  console.error('[ConnectedSettings] action failed', (err as Error)?.message ?? err)\n}\n\n/** Inline, not in app-header.css: every app runs this component from the\n *  site's shared vendor module, but compiles app-header.css into its own\n *  stylesheet at ITS build, so a new rule reaches an app only when it rebuilds. */\nconst PASSKEY_DOT: React.CSSProperties = {\n  position: 'absolute',\n  top: 2,\n  right: 2,\n  width: 8,\n  height: 8,\n  borderRadius: '50%',\n  background: 'var(--color-primary)',\n  pointerEvents: 'none'\n}\n\n/** Save passkey pulses while the dot is asking for it. Keyframes cannot be\n *  inline, so the rule is injected once into the document instead, for the\n *  same reason PASSKEY_DOT is inline. */\nconst PASSKEY_PULSE_CLASS = 'settings-popout__btn--pulse'\nconst PASSKEY_PULSE_CSS = `\n@keyframes settings-passkey-pulse {\n  0% { box-shadow: 0 0 0 0 color-mix(in srgb, var(--color-primary) 70%, transparent); }\n  70% { box-shadow: 0 0 0 8px color-mix(in srgb, var(--color-primary) 0%, transparent); }\n  100% { box-shadow: 0 0 0 0 color-mix(in srgb, var(--color-primary) 0%, transparent); }\n}\n@media (prefers-reduced-motion: no-preference) {\n  .${PASSKEY_PULSE_CLASS}:not(:disabled) {\n    animation: settings-passkey-pulse 1.6s ease-out infinite;\n  }\n}\n`\n\n/** The tab strip and its panels. Injected for the same reason as the pulse:\n *  an app's copy of app-header.css predates the tabs until it rebuilds. The\n *  strip stays pinned while a long tab scrolls, and scrolls sideways itself\n *  when the tabs outgrow a phone-width panel. */\nconst TABS_CSS = `\n.settings-popout__top {\n  position: sticky;\n  top: -16px;\n  z-index: 1;\n  display: flex;\n  flex-direction: column;\n  gap: 10px;\n  margin: -16px -16px 0;\n  padding: 16px 16px 0;\n  background: var(--color-bg-card);\n  border-bottom: 1px solid var(--color-border);\n}\n.settings-popout__tabs {\n  display: flex;\n  gap: 2px;\n  margin: 0 -16px -1px;\n  padding: 0 16px;\n  overflow-x: auto;\n  scrollbar-width: thin;\n}\n.settings-popout__tab {\n  position: relative;\n  flex: none;\n  padding: 6px 10px;\n  border: 0;\n  border-bottom: 2px solid transparent;\n  background: transparent;\n  color: var(--color-text-secondary);\n  font: inherit;\n  font-size: 0.8rem;\n  font-weight: 600;\n  white-space: nowrap;\n  cursor: pointer;\n}\n.settings-popout__tab:hover {\n  color: var(--color-text);\n}\n.settings-popout__tab[aria-selected='true'] {\n  color: var(--color-text);\n  border-bottom-color: var(--color-primary);\n}\n.settings-popout__tab:focus-visible {\n  outline: 2px solid var(--color-primary);\n  outline-offset: -2px;\n  border-radius: 6px 6px 0 0;\n}\n.settings-popout__tabpanel {\n  display: flex;\n  flex-direction: column;\n  gap: 14px;\n}\n`\n\nfunction useInjectedStyle(id: string, css: string, active: boolean) {\n  useEffect(() => {\n    if (!active || document.getElementById(id)) return\n    const el = document.createElement('style')\n    el.id = id\n    el.textContent = css\n    document.head.appendChild(el)\n  }, [id, css, active])\n}\n\nconst TIER_LABEL: Record<Tier, string> = {\n  admin: 'Administrator',\n  wife: 'Wife',\n  service: 'Service',\n  friend: 'Friend',\n  member: 'Member',\n  public: 'Guest'\n}\n\nexport function ConnectedSettings({\n  userType: userTypeProp,\n  name: nameProp,\n  onNameChange,\n  children,\n  appTabs\n}: ConnectedSettingsProps) {\n  const [open, setOpen] = useState(false)\n  const rootRef = useRef<HTMLDivElement>(null)\n  const tabIdBase = useId()\n  const tabRefs = useRef(new Map<string, HTMLButtonElement>())\n  const [savedTab, saveTab] = useSettingsTab()\n  // This visit's pick; wins over the saved one while it is still offered.\n  const [pickedTab, setPickedTab] = useState<string | null>(null)\n\n  // Identity — from props if supplied, else resolved lazily via whoami().\n  const [userType, setUserType] = useState<Tier>(userTypeProp ?? 'public')\n  const [resolvedName, setResolvedName] = useState<string | null>(nameProp ?? null)\n\n  // Name editing\n  const [nameDraft, setNameDraft] = useState(resolvedName ?? '')\n  const [editingName, setEditingName] = useState(false)\n  const [nameSaving, setNameSaving] = useState(false)\n  const [nameError, setNameError] = useState<string | null>(null)\n  const [displayName, setLocalName] = useState<string | null>(resolvedName)\n\n  // Key swap. The draft lives only in this state and the input: it is never\n  // logged, stored or sent anywhere but the site's sign-in client.\n  const [keyFormOpen, setKeyFormOpen] = useState(false)\n  const [keyDraft, setKeyDraft] = useState('')\n  const [keyBusy, setKeyBusy] = useState(false)\n  const [keyError, setKeyError] = useState<string | null>(null)\n\n  // Passkeys, through the same site client: save one while signed in, or\n  // sign in with one from the key form. One prompt at a time, and always\n  // cancellable: a password manager can dismiss the browser's prompt without\n  // ever answering it, so Cancel, closing the popout and the site client's own\n  // time limit each end the wait.\n  const [passkeyMode, setPasskeyMode] = useState<'save' | 'signin' | null>(null)\n  const [passkeySaved, setPasskeySaved] = useState(false)\n  // How many passkeys sign this person in, from whoami; null = unknown.\n  const [passkeyCount, setPasskeyCount] = useState<number | null>(null)\n  const [passkeyError, setPasskeyError] = useState<string | null>(null)\n  // Delete account: one click arms it, a second, separate button confirms.\n  const [deleteStage, setDeleteStage] = useState<'idle' | 'confirm' | 'busy'>('idle')\n  const [deleteError, setDeleteError] = useState<string | null>(null)\n  const passkeyCtl = useRef<AbortController | null>(null)\n  const cancelPasskey = useCallback((reason?: string) => passkeyCtl.current?.abort(reason), [])\n\n  // Avatar: the picker loads only when opened, never at mount (AvatarPicker).\n  const [avatarOpen, setAvatarOpen] = useState(false)\n  // Service identities this person may mint for (whoami.serviceGrants).\n  const [serviceGrants, setServiceGrants] = useState(0)\n  const [serviceOpen, setServiceOpen] = useState(false)\n\n  // Content level\n  const [content, setContent] = useState<ContentLevelState | null>(null)\n  const [levelSaving, setLevelSaving] = useState(false)\n\n  // One flag for the whole prefetch, not one per request — the panel body\n  // reveals when everything has settled, so nothing pops in a beat late. In\n  // practice the user never sees it: the prefetch starts at mount and is long\n  // done by the time the gear is clicked. It only shows if they click within\n  // the first moments of the page.\n  const [resolving, setResolving] = useState(true)\n\n  // Everyone who is SIGNED IN, expressed as \"not public\" rather than as a list\n  // of tiers. The list form (`=== 'admin' || === 'friend' || === 'service'`)\n  // is an exact-match allowlist: it silently excluded `wife` the moment that\n  // tier existed, which is the failure the rank model is meant to prevent.\n  // There is no rank helper in this bundle, but \"above public\" needs none.\n  const showContentPill = userType !== 'public'\n\n  // Signed in on a key with no passkey: the gear carries a dot and Save passkey\n  // is the primary action until one is saved. Unknown counts never prompt.\n  const needsPasskey =\n    !resolving &&\n    userType !== 'public' &&\n    passkeyCount === 0 &&\n    !passkeySaved &&\n    passkeysSupported()\n  useInjectedStyle('settings-passkey-pulse', PASSKEY_PULSE_CSS, needsPasskey)\n  useInjectedStyle('settings-tabs', TABS_CSS, open)\n\n  // The site's own groups first, then the app's. App ids are namespaced so an\n  // app tab called \"account\" can never collide with the site's.\n  const tabs: { id: string; label: string; dot?: boolean }[] = [\n    { id: 'profile', label: 'Profile' },\n    ...(!resolving && showContentPill ? [{ id: 'content', label: 'Content' }] : []),\n    // The gear's dot asks for a passkey; this one says where Save passkey is.\n    { id: 'account', label: 'Account', dot: needsPasskey },\n    ...(children ? [{ id: 'app:', label: 'App' }] : []),\n    ...(appTabs ?? []).map(t => ({ id: `app:${t.id}`, label: t.label }))\n  ]\n  const tabIds = tabs.map(t => t.id)\n  // Nothing remembered: open on the app's first tab, which is usually why the\n  // gear was clicked inside an app.\n  const defaultTab = tabIds.find(id => id.startsWith('app:')) ?? 'profile'\n  const activeTab =\n    [pickedTab, savedTab].find((id): id is string => id !== null && tabIds.includes(id)) ??\n    defaultTab\n  const appTab = appTabs?.find(t => `app:${t.id}` === activeTab)\n  const tabDomId = (id: string) => `${tabIdBase}tab-${id}`\n  const panelDomId = `${tabIdBase}panel`\n\n  const selectTab = useCallback(\n    (id: string) => {\n      setPickedTab(id)\n      saveTab(id)\n    },\n    [saveTab]\n  )\n\n  // Arrow keys, Home and End move between tabs and open the one they land on\n  // (the ARIA tablist pattern with automatic activation).\n  const onTabKey = (e: React.KeyboardEvent) => {\n    const i = tabIds.indexOf(activeTab)\n    const n = tabIds.length\n    const next =\n      e.key === 'ArrowRight'\n        ? tabIds[(i + 1) % n]\n        : e.key === 'ArrowLeft'\n          ? tabIds[(i - 1 + n) % n]\n          : e.key === 'Home'\n            ? tabIds[0]\n            : e.key === 'End'\n              ? tabIds[n - 1]\n              : undefined\n    if (next === undefined) return\n    e.preventDefault()\n    selectTab(next)\n    tabRefs.current.get(next)?.focus()\n  }\n\n  // A remembered tab past the edge of a narrow strip is scrolled into sight.\n  // jsdom implements no scrollIntoView, and every consumer's unit test that\n  // renders the popout runs there, so the call is optional.\n  useEffect(() => {\n    if (open)\n      tabRefs.current.get(activeTab)?.scrollIntoView?.({ block: 'nearest', inline: 'nearest' })\n  }, [open, activeTab])\n\n  // Keep local identity in sync when the host controls it via props.\n  useEffect(() => {\n    if (userTypeProp !== undefined) setUserType(userTypeProp)\n  }, [userTypeProp])\n  useEffect(() => {\n    if (nameProp !== undefined) {\n      setResolvedName(nameProp)\n      setLocalName(nameProp)\n      setNameDraft(nameProp ?? '')\n    }\n  }, [nameProp])\n\n  // Resolve everything the panel shows AT MOUNT — not on open.\n  //\n  // This used to be gated on `open`, which made the gear the trigger for\n  // whoami + content-level (167ms / 186ms on prod, concurrent) — a round trip\n  // the user waited out with the panel already on screen and blank. Nothing\n  // about that data depends on the click:\n  // it's the signed-in user's own identity, settled at boot and unchanged for\n  // the life of the page. So it rides along with the app's boot traffic, and\n  // clicking the gear costs zero requests. `e2e/settings-prefetch.spec.ts` in\n  // hadoku-task pins that.\n  //\n  // The client memoises across callers, so mounting this in several places (or\n  // remounting it) does not multiply requests, and on hadoku.me the identity\n  // half is free — it awaits the whoami the shell already had in flight.\n  useEffect(() => {\n    let live = true\n    prefetchSettings({ userType: userTypeProp, name: nameProp })\n      .then(({ identity, content: state, passkeys, serviceGrants: grants }) => {\n        if (!live) return\n        setPasskeyCount(passkeys)\n        setServiceGrants(grants)\n        // Props stay authoritative: the host passed them because it can see an\n        // identity this component can't resolve for itself.\n        if (userTypeProp === undefined) {\n          setUserType(identity.userType)\n          setResolvedName(identity.name)\n          setLocalName(identity.name)\n          setNameDraft(identity.name ?? '')\n        }\n        if (state) setContent(state)\n      })\n      .catch(reportErr)\n      .finally(() => {\n        if (live) setResolving(false)\n      })\n    return () => {\n      live = false\n    }\n    // Hints are read once, on the first mount that gets there — the prefetch is\n    // page-scoped and a later prop change cannot un-issue it. Identity changes\n    // arrive through the sync effects above, and a key swap reloads the page.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [])\n\n  // Escape closes.\n  useEffect(() => {\n    if (!open) return\n    const onKey = (e: KeyboardEvent) => {\n      if (e.key === 'Escape') setOpen(false)\n    }\n    window.addEventListener('keydown', onKey)\n    return () => window.removeEventListener('keydown', onKey)\n  }, [open])\n\n  const saveName = useCallback(async () => {\n    const trimmed = nameDraft.trim()\n    if (!trimmed || trimmed === displayName) {\n      setEditingName(false)\n      return\n    }\n    setNameSaving(true)\n    const result = await setDisplayName(trimmed)\n    setNameSaving(false)\n    // A refusal keeps the editor open on the draft, saying why.\n    if (!result.ok) {\n      setNameError(result.error)\n      return\n    }\n    setNameError(null)\n    setLocalName(result.name)\n    setNameDraft(result.name ?? '')\n    if (result.name !== null) onNameChange?.(result.name)\n    setEditingName(false)\n  }, [nameDraft, displayName, onNameChange])\n\n  // Open the form AND start loading the site's sign-in client, which begins its\n  // fingerprint collection as it evaluates — so it is ready by submit. Where the\n  // client cannot load at all (not on hadoku.me), the page-level /auth flow is\n  // the only way to sign in, so go there.\n  const openKeyForm = useCallback(() => {\n    setKeyFormOpen(true)\n    setKeyError(null)\n    loadSignIn()\n      .then(signIn => {\n        if (!signIn) window.location.assign(switchKeyHref())\n      })\n      .catch(reportErr)\n  }, [])\n\n  const submitKey = useCallback(async () => {\n    setKeyBusy(true)\n    setKeyError(null)\n    const signIn = await loadSignIn()\n    if (!signIn) {\n      window.location.assign(switchKeyHref())\n      return\n    }\n    try {\n      await signIn(keyDraft)\n    } catch (err) {\n      // A refused key is an inline error, never a redirect.\n      setKeyError((err as Error)?.message || 'Invalid key')\n      setKeyBusy(false)\n      return\n    }\n    // The page now acts for a different identity: everything must re-mount.\n    // Busy stays on through the reload so the form can't be resubmitted.\n    window.location.reload()\n  }, [keyDraft])\n\n  const savePasskey = useCallback(async () => {\n    const ctl = new AbortController()\n    passkeyCtl.current = ctl\n    setPasskeyMode('save')\n    setPasskeyError(null)\n    try {\n      const client = await Promise.race([loadSignInClient(), untilAborted(ctl.signal)])\n      if (!client?.addPasskey) {\n        window.location.assign(passkeyHref('add'))\n        return\n      }\n      await Promise.race([client.addPasskey({ signal: ctl.signal }), untilAborted(ctl.signal)])\n      setPasskeySaved(true)\n    } catch (err) {\n      if (ctl.signal.reason !== CLOSED) {\n        setPasskeyError(\n          ctl.signal.aborted ? 'Passkey not saved' : (err as Error)?.message || 'Passkey not saved'\n        )\n      }\n    } finally {\n      if (passkeyCtl.current === ctl) passkeyCtl.current = null\n      setPasskeyMode(null)\n    }\n  }, [])\n\n  const signInWithPasskey = useCallback(async () => {\n    const ctl = new AbortController()\n    passkeyCtl.current = ctl\n    setPasskeyMode('signin')\n    setKeyBusy(true)\n    setKeyError(null)\n    let leaving = false\n    try {\n      const client = await Promise.race([loadSignInClient(), untilAborted(ctl.signal)])\n      if (!client?.signInWithPasskey) {\n        leaving = true\n        window.location.assign(passkeyHref('signin'))\n        return\n      }\n      await Promise.race([\n        client.signInWithPasskey({ signal: ctl.signal }),\n        untilAborted(ctl.signal)\n      ])\n      // The page now acts for a different identity: everything must re-mount.\n      // Busy stays on through the reload so nothing can be resubmitted.\n      leaving = true\n      window.location.reload()\n    } catch (err) {\n      if (ctl.signal.reason !== CLOSED) {\n        setKeyError(\n          ctl.signal.aborted\n            ? 'Passkey sign-in cancelled'\n            : (err as Error)?.message || 'Passkey sign-in cancelled'\n        )\n      }\n    } finally {\n      if (passkeyCtl.current === ctl) passkeyCtl.current = null\n      if (!leaving) {\n        setPasskeyMode(null)\n        setKeyBusy(false)\n      }\n    }\n  }, [])\n\n  // Closing the popout (or leaving the page) abandons an open prompt.\n  useEffect(() => {\n    if (!open) cancelPasskey(CLOSED)\n  }, [open, cancelPasskey])\n  useEffect(() => () => cancelPasskey(CLOSED), [cancelPasskey])\n\n  const pickLevel = useCallback(\n    async (level: number) => {\n      if (!content || level === content.level || levelSaving) return\n      const prev = content\n      setContent({ ...content, level }) // optimistic\n      setLevelSaving(true)\n      const result = await setContentLevel(level)\n      setLevelSaving(false)\n      setContent(result ?? prev) // adopt server truth, or revert\n    },\n    [content, levelSaving]\n  )\n\n  // No caller-supplied class on the root. The four rows below are the\n  // platform's, not the app's, and a className here is enough to restyle or\n  // hide any of them — which is the drift this component exists to prevent.\n  // Apps extend via `children` and `appTabs`, never by reaching into this markup.\n  return (\n    <div className=\"settings-popout\" ref={rootRef}>\n      <button\n        type=\"button\"\n        className=\"app-header__icon-btn settings-toggle-btn\"\n        aria-label={needsPasskey ? 'User settings, no passkey saved' : 'User settings'}\n        style={needsPasskey ? { position: 'relative' } : undefined}\n        aria-expanded={open}\n        onClick={() => setOpen(v => !v)}\n      >\n        <SettingsIcon />\n        {needsPasskey && (\n          <span className=\"settings-toggle-btn__dot\" style={PASSKEY_DOT} aria-hidden=\"true\" />\n        )}\n      </button>\n\n      {open && <div className=\"settings-popout__overlay\" onClick={() => setOpen(false)} />}\n\n      {open && (\n        <div className=\"settings-popout__panel\" role=\"dialog\" aria-label=\"User settings\">\n          <div className=\"settings-popout__top\">\n            <div className=\"settings-popout__header\">Settings</div>\n            <div\n              className=\"settings-popout__tabs\"\n              role=\"tablist\"\n              aria-label=\"Settings sections\"\n              onKeyDown={onTabKey}\n            >\n              {tabs.map(t => (\n                <button\n                  key={t.id}\n                  ref={el => {\n                    if (el) tabRefs.current.set(t.id, el)\n                    else tabRefs.current.delete(t.id)\n                  }}\n                  type=\"button\"\n                  role=\"tab\"\n                  id={tabDomId(t.id)}\n                  className=\"settings-popout__tab\"\n                  aria-selected={t.id === activeTab}\n                  aria-controls={panelDomId}\n                  tabIndex={t.id === activeTab ? 0 : -1}\n                  onClick={() => selectTab(t.id)}\n                >\n                  {t.label}\n                  {t.dot && <span style={PASSKEY_DOT} aria-hidden=\"true\" />}\n                </button>\n              ))}\n            </div>\n          </div>\n\n          <div\n            className=\"settings-popout__tabpanel\"\n            role=\"tabpanel\"\n            id={panelDomId}\n            aria-labelledby={tabDomId(activeTab)}\n          >\n            {activeTab === 'profile' && (\n              <>\n                {/* Access tier. While resolving, the state still says 'public' —\n              rendering \"Guest\" there would be a wrong answer that corrects\n              itself a moment later, which reads exactly like the lag this\n              placeholder exists to remove. */}\n                <section className=\"settings-popout__row\">\n                  <span className=\"settings-popout__label\">Access tier</span>\n                  {resolving ? (\n                    <span className=\"settings-popout__value\">…</span>\n                  ) : (\n                    <span className={`settings-popout__tier settings-popout__tier--${userType}`}>\n                      {TIER_LABEL[userType]}\n                    </span>\n                  )}\n                </section>\n\n                {/* Display name */}\n                <section className=\"settings-popout__row\">\n                  <span className=\"settings-popout__label\">Display name</span>\n                  {resolving ? (\n                    <span className=\"settings-popout__value\">…</span>\n                  ) : editingName ? (\n                    <span className=\"settings-popout__inline\">\n                      <input\n                        className=\"settings-popout__input\"\n                        value={nameDraft}\n                        maxLength={64}\n                        autoFocus\n                        disabled={nameSaving}\n                        aria-invalid={nameError !== null}\n                        aria-describedby={nameError ? 'settings-popout-name-error' : undefined}\n                        onChange={e => {\n                          setNameDraft(e.target.value)\n                          setNameError(null)\n                        }}\n                        onKeyDown={e => {\n                          if (e.key === 'Enter') {\n                            saveName().catch(reportErr)\n                          }\n                          if (e.key === 'Escape') {\n                            // The edit's Escape, not the popout's (window listener).\n                            e.stopPropagation()\n                            setEditingName(false)\n                            setNameError(null)\n                            setNameDraft(displayName ?? '')\n                          }\n                        }}\n                      />\n                      <button\n                        type=\"button\"\n                        className=\"settings-popout__btn settings-popout__btn--primary\"\n                        disabled={nameSaving}\n                        onClick={() => {\n                          saveName().catch(reportErr)\n                        }}\n                      >\n                        {nameSaving ? '…' : 'Save'}\n                      </button>\n                      {nameError && (\n                        <span\n                          id=\"settings-popout-name-error\"\n                          className=\"settings-popout__error\"\n                          role=\"alert\"\n                        >\n                          {nameError}\n                        </span>\n                      )}\n                    </span>\n                  ) : (\n                    <button\n                      type=\"button\"\n                      className=\"settings-popout__value settings-popout__value--editable\"\n                      aria-label=\"Edit display name\"\n                      onClick={() => {\n                        setNameDraft(displayName ?? '')\n                        setEditingName(true)\n                      }}\n                    >\n                      {displayName || 'Unnamed'}\n                    </button>\n                  )}\n                </section>\n\n                {/* Avatar: picture and character, chosen in place (AvatarPicker).\n              Collapsed until Change, so opening the gear costs no request and no\n              page load reads the avatar. Hidden for public callers, like the\n              content pill: an avatar needs a session. */}\n                {!resolving && userType !== 'public' && (\n                  <section className=\"settings-popout__row settings-popout__row--stack\">\n                    <span className=\"settings-popout__inline\">\n                      <span className=\"settings-popout__label settings-popout__label--grow\">\n                        Avatar\n                      </span>\n                      <button\n                        type=\"button\"\n                        className=\"settings-popout__btn\"\n                        aria-expanded={avatarOpen}\n                        onClick={() => setAvatarOpen(v => !v)}\n                      >\n                        {avatarOpen ? 'Done' : 'Change'}\n                      </button>\n                    </span>\n                    {avatarOpen && <AvatarPicker />}\n                  </section>\n                )}\n\n                {/* Service access: only for someone the operator granted a\n              service identity. Collapsed until Open, like Avatar. */}\n                {!resolving && serviceGrants > 0 && (\n                  <section className=\"settings-popout__row settings-popout__row--stack\">\n                    <span className=\"settings-popout__inline\">\n                      <span className=\"settings-popout__label settings-popout__label--grow\">\n                        Service access\n                      </span>\n                      <button\n                        type=\"button\"\n                        className=\"settings-popout__btn\"\n                        aria-expanded={serviceOpen}\n                        onClick={() => setServiceOpen(v => !v)}\n                      >\n                        {serviceOpen ? 'Done' : 'Open'}\n                      </button>\n                    </span>\n                    {serviceOpen && (\n                      <React.Suspense fallback={<span className=\"settings-popout__hint\">…</span>}>\n                        <ServiceAccess />\n                      </React.Suspense>\n                    )}\n                  </section>\n                )}\n              </>\n            )}\n\n            {/* Content visibility level. Held back until the first-open fetch\n              settles, so it lands in the same paint as the tier and name\n              rather than a round trip behind them. `content` is fetched\n              concurrently with whoami(), so by then it is already here. */}\n            {activeTab === 'content' && (\n              <section className=\"settings-popout__row settings-popout__row--stack\">\n                <span className=\"settings-popout__label\">Content visibility</span>\n                {content ? (\n                  <>\n                    <div\n                      className=\"settings-popout__pill\"\n                      role=\"radiogroup\"\n                      aria-label=\"Content visibility level\"\n                    >\n                      {Array.from({ length: content.maxLevel }, (_, i) => i + 1).map(lvl => (\n                        <button\n                          key={lvl}\n                          type=\"button\"\n                          role=\"radio\"\n                          aria-checked={lvl === content.level}\n                          aria-label={`Level ${lvl}`}\n                          className={`settings-popout__seg${\n                            lvl <= content.level ? ' settings-popout__seg--filled' : ''\n                          }`}\n                          disabled={levelSaving}\n                          onClick={() => {\n                            pickLevel(lvl).catch(reportErr)\n                          }}\n                        >\n                          {lvl}\n                        </button>\n                      ))}\n                    </div>\n                    <span className=\"settings-popout__hint\">\n                      Higher levels reveal more mature content across apps. Level 1 is\n                      safe-for-everyone.\n                    </span>\n                  </>\n                ) : (\n                  // Not \"Loading…\" — the fetch has already settled by the time\n                  // this section renders at all, so a null here means it failed.\n                  <span className=\"settings-popout__hint\">Currently unavailable.</span>\n                )}\n              </section>\n            )}\n\n            {/* Switch key. Signs in inline through the SITE's sign-in client\n              (the /auth page's own code path), never a post of ours. A real\n              <form> with a username + current-password pair, so password\n              managers offer and save the key. */}\n            {activeTab === 'account' && (\n              <>\n                {keyFormOpen ? (\n                  <section className=\"settings-popout__row settings-popout__row--stack\">\n                    <form\n                      className=\"settings-popout__key-form\"\n                      onSubmit={e => {\n                        e.preventDefault()\n                        submitKey().catch(reportErr)\n                      }}\n                    >\n                      <input\n                        type=\"text\"\n                        name=\"username\"\n                        autoComplete=\"username\"\n                        value=\"hadoku\"\n                        readOnly\n                        hidden\n                      />\n                      <label className=\"settings-popout__label\" htmlFor=\"settings-popout-key\">\n                        Access key\n                      </label>\n                      <span className=\"settings-popout__inline\">\n                        <input\n                          id=\"settings-popout-key\"\n                          className=\"settings-popout__input\"\n                          type=\"password\"\n                          name=\"password\"\n                          autoComplete=\"current-password\"\n                          autoCapitalize=\"none\"\n                          spellCheck={false}\n                          autoFocus\n                          value={keyDraft}\n                          disabled={keyBusy}\n                          aria-invalid={keyError !== null}\n                          aria-describedby={keyError ? 'settings-popout-key-error' : undefined}\n                          onChange={e => setKeyDraft(e.target.value)}\n                        />\n                        <button\n                          type=\"submit\"\n                          className=\"settings-popout__btn settings-popout__btn--primary\"\n                          disabled={keyBusy}\n                        >\n                          {keyBusy ? 'Signing in…' : 'Sign in'}\n                        </button>\n                      </span>\n                      {passkeysSupported() && (\n                        <span className=\"settings-popout__inline\">\n                          <button\n                            type=\"button\"\n                            className=\"settings-popout__btn\"\n                            disabled={keyBusy}\n                            onClick={() => {\n                              signInWithPasskey().catch(reportErr)\n                            }}\n                          >\n                            {passkeyMode === 'signin' ? 'Waiting for passkey…' : 'Use a passkey'}\n                          </button>\n                        </span>\n                      )}\n                      {/* Cancel on a line of its own: in the row it would slide under\n                    the pointer, and a double click would cancel what it started. */}\n                      {passkeyMode === 'signin' && (\n                        <span className=\"settings-popout__inline\">\n                          <button\n                            type=\"button\"\n                            className=\"settings-popout__btn\"\n                            onClick={() => cancelPasskey()}\n                          >\n                            Cancel\n                          </button>\n                        </span>\n                      )}\n                      {keyError && (\n                        <span\n                          id=\"settings-popout-key-error\"\n                          className=\"settings-popout__error\"\n                          role=\"alert\"\n                        >\n                          {keyError}\n                        </span>\n                      )}\n                    </form>\n                  </section>\n                ) : (\n                  <section className=\"settings-popout__row settings-popout__row--stack\">\n                    <span className=\"settings-popout__inline\">\n                      <span className=\"settings-popout__label settings-popout__label--grow\">\n                        Access key\n                      </span>\n                      {/* Signed-in people only: the site refuses to save one for anyone else. */}\n                      {!resolving && userType !== 'public' && passkeysSupported() && (\n                        <button\n                          type=\"button\"\n                          className={`settings-popout__btn${needsPasskey ? ` settings-popout__btn--primary ${PASSKEY_PULSE_CLASS}` : ''}`}\n                          disabled={passkeyMode !== null || passkeySaved}\n                          onClick={() => {\n                            savePasskey().catch(reportErr)\n                          }}\n                        >\n                          {passkeySaved\n                            ? 'Passkey saved'\n                            : passkeyMode === 'save'\n                              ? 'Saving…'\n                              : 'Save passkey'}\n                        </button>\n                      )}\n                      <button\n                        type=\"button\"\n                        className=\"settings-popout__btn\"\n                        disabled={passkeyMode === 'save'}\n                        onClick={openKeyForm}\n                      >\n                        Switch key\n                      </button>\n                    </span>\n                    {/* Its own line, so nothing moves under a double click. */}\n                    {passkeyMode === 'save' && (\n                      <span className=\"settings-popout__inline\">\n                        <button\n                          type=\"button\"\n                          className=\"settings-popout__btn\"\n                          onClick={() => cancelPasskey()}\n                        >\n                          Cancel\n                        </button>\n                      </span>\n                    )}\n                    {passkeyError && (\n                      <span className=\"settings-popout__error\" role=\"alert\">\n                        {passkeyError}\n                      </span>\n                    )}\n                  </section>\n                )}\n\n                {/* A self-made account (member) can delete itself. The confirm is a\n              separate button on its own line, so a double click on Delete\n              never confirms. */}\n                {!resolving && userType === 'member' && (\n                  <section className=\"settings-popout__row settings-popout__row--stack\">\n                    <span className=\"settings-popout__inline\">\n                      <span className=\"settings-popout__label settings-popout__label--grow\">\n                        Account\n                      </span>\n                      {deleteStage === 'idle' ? (\n                        <button\n                          type=\"button\"\n                          className=\"settings-popout__btn\"\n                          onClick={() => {\n                            setDeleteError(null)\n                            setDeleteStage('confirm')\n                          }}\n                        >\n                          Delete account\n                        </button>\n                      ) : (\n                        <button\n                          type=\"button\"\n                          className=\"settings-popout__btn\"\n                          disabled={deleteStage === 'busy'}\n                          onClick={() => setDeleteStage('idle')}\n                        >\n                          Keep\n                        </button>\n                      )}\n                    </span>\n                    {deleteStage !== 'idle' && (\n                      <span className=\"settings-popout__inline\">\n                        <button\n                          type=\"button\"\n                          className=\"settings-popout__btn settings-popout__btn--primary\"\n                          disabled={deleteStage === 'busy'}\n                          onClick={() => {\n                            setDeleteStage('busy')\n                            deleteOwnAccount()\n                              .then(deleted => {\n                                if (!deleted) {\n                                  setDeleteError('Account not deleted')\n                                  setDeleteStage('confirm')\n                                  return\n                                }\n                                localStorage.removeItem('hadoku_session_id')\n                                localStorage.removeItem('hadoku_user_type')\n                                window.location.assign('/')\n                              })\n                              .catch(reportErr)\n                          }}\n                        >\n                          {deleteStage === 'busy' ? 'Deleting…' : 'Delete for good'}\n                        </button>\n                      </span>\n                    )}\n                    {deleteError && (\n                      <span className=\"settings-popout__error\" role=\"alert\">\n                        {deleteError}\n                      </span>\n                    )}\n                  </section>\n                )}\n              </>\n            )}\n\n            {/* App-specific settings (optional) — same popout, one gear. */}\n            {activeTab === 'app:' && (\n              <section className=\"settings-popout__row settings-popout__row--stack\">\n                {children}\n              </section>\n            )}\n            {appTab && (\n              <section className=\"settings-popout__row settings-popout__row--stack\">\n                {appTab.render()}\n              </section>\n            )}\n          </div>\n        </div>\n      )}\n    </div>\n  )\n}\n"],"names":[],"mappings":";;;;;;;AAsCA,MAAM,gBAAgB,MAAM;AAAA,EAAK,MAC/B,OAAO,oBAAiB,EAAE,KAAK,QAAM,EAAE,SAAS,EAAE,gBAAgB;AACpE;AAmDA,SAAS,aAAa,QAAqC;AACzD,SAAO,IAAI,QAAQ,CAAC,GAAG,WAAW;AAChC,UAAM,OAAO,MAAM,OAAO,IAAI,MAAM,WAAW,CAAC;AAChD,QAAI,OAAO,QAAS,MAAA;AAAA,gBACR,iBAAiB,SAAS,MAAM,EAAE,MAAM,MAAM;AAAA,EAC5D,CAAC;AACH;AAGA,MAAM,SAAS;AAKf,SAAS,UAAU,KAAc;AAE/B,UAAQ,MAAM,qCAAsC,KAAe,WAAW,GAAG;AACnF;AAKA,MAAM,cAAmC;AAAA,EACvC,UAAU;AAAA,EACV,KAAK;AAAA,EACL,OAAO;AAAA,EACP,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,eAAe;AACjB;AAKA,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,KAOrB,mBAAmB;AAAA;AAAA;AAAA;AAAA;AAUxB,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAsDjB,SAAS,iBAAiB,IAAY,KAAa,QAAiB;AAClE,YAAU,MAAM;AACd,QAAI,CAAC,UAAU,SAAS,eAAe,EAAE,EAAG;AAC5C,UAAM,KAAK,SAAS,cAAc,OAAO;AACzC,OAAG,KAAK;AACR,OAAG,cAAc;AACjB,aAAS,KAAK,YAAY,EAAE;AAAA,EAC9B,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC;AACtB;AAEA,MAAM,aAAmC;AAAA,EACvC,OAAO;AAAA,EACP,MAAM;AAAA,EACN,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AACV;AAEO,SAAS,kBAAkB;AAAA,EAChC,UAAU;AAAA,EACV,MAAM;AAAA,EACN;AAAA,EACA;AAAA,EACA;AACF,GAA2B;AACzB,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,UAAU,OAAuB,IAAI;AAC3C,QAAM,YAAY,MAAA;AAClB,QAAM,UAAU,OAAO,oBAAI,KAAgC;AAC3D,QAAM,CAAC,UAAU,OAAO,IAAI,eAAA;AAE5B,QAAM,CAAC,WAAW,YAAY,IAAI,SAAwB,IAAI;AAG9D,QAAM,CAAC,UAAU,WAAW,IAAI,SAAe,gBAAgB,QAAQ;AACvE,QAAM,CAAC,cAAc,eAAe,IAAI,SAAwB,YAAY,IAAI;AAGhF,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,gBAAgB,EAAE;AAC7D,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AACpD,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAClD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAwB,IAAI;AAC9D,QAAM,CAAC,aAAa,YAAY,IAAI,SAAwB,YAAY;AAIxE,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AACpD,QAAM,CAAC,UAAU,WAAW,IAAI,SAAS,EAAE;AAC3C,QAAM,CAAC,SAAS,UAAU,IAAI,SAAS,KAAK;AAC5C,QAAM,CAAC,UAAU,WAAW,IAAI,SAAwB,IAAI;AAO5D,QAAM,CAAC,aAAa,cAAc,IAAI,SAAmC,IAAI;AAC7E,QAAM,CAAC,cAAc,eAAe,IAAI,SAAS,KAAK;AAEtD,QAAM,CAAC,cAAc,eAAe,IAAI,SAAwB,IAAI;AACpE,QAAM,CAAC,cAAc,eAAe,IAAI,SAAwB,IAAI;AAEpE,QAAM,CAAC,aAAa,cAAc,IAAI,SAAsC,MAAM;AAClF,QAAM,CAAC,aAAa,cAAc,IAAI,SAAwB,IAAI;AAClE,QAAM,aAAa,OAA+B,IAAI;AACtD,QAAM,gBAAgB,YAAY,CAAC,WAAoB,WAAW,SAAS,MAAM,MAAM,GAAG,EAAE;AAG5F,QAAM,CAAC,YAAY,aAAa,IAAI,SAAS,KAAK;AAElD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,CAAC;AACpD,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AAGpD,QAAM,CAAC,SAAS,UAAU,IAAI,SAAmC,IAAI;AACrE,QAAM,CAAC,aAAa,cAAc,IAAI,SAAS,KAAK;AAOpD,QAAM,CAAC,WAAW,YAAY,IAAI,SAAS,IAAI;AAO/C,QAAM,kBAAkB,aAAa;AAIrC,QAAM,eACJ,CAAC,aACD,aAAa,YACb,iBAAiB,KACjB,CAAC,gBACD,kBAAA;AACF,mBAAiB,0BAA0B,mBAAmB,YAAY;AAC1E,mBAAiB,iBAAiB,UAAU,IAAI;AAIhD,QAAM,OAAuD;AAAA,IAC3D,EAAE,IAAI,WAAW,OAAO,UAAA;AAAA,IACxB,GAAI,CAAC,aAAa,kBAAkB,CAAC,EAAE,IAAI,WAAW,OAAO,UAAA,CAAW,IAAI,CAAA;AAAA;AAAA,IAE5E,EAAE,IAAI,WAAW,OAAO,WAAW,KAAK,aAAA;AAAA,IACxC,GAAI,WAAW,CAAC,EAAE,IAAI,QAAQ,OAAO,MAAA,CAAO,IAAI,CAAA;AAAA,IAChD,IAAI,WAAW,CAAA,GAAI,IAAI,CAAA,OAAM,EAAE,IAAI,OAAO,EAAE,EAAE,IAAI,OAAO,EAAE,QAAQ;AAAA,EAAA;AAErE,QAAM,SAAS,KAAK,IAAI,CAAA,MAAK,EAAE,EAAE;AAGjC,QAAM,aAAa,OAAO,KAAK,CAAA,OAAM,GAAG,WAAW,MAAM,CAAC,KAAK;AAC/D,QAAM,YACJ,CAAC,WAAW,QAAQ,EAAE,KAAK,CAAC,OAAqB,OAAO,QAAQ,OAAO,SAAS,EAAE,CAAC,KACnF;AACF,QAAM,SAAS,SAAS,KAAK,CAAA,MAAK,OAAO,EAAE,EAAE,OAAO,SAAS;AAC7D,QAAM,WAAW,CAAC,OAAe,GAAG,SAAS,OAAO,EAAE;AACtD,QAAM,aAAa,GAAG,SAAS;AAE/B,QAAM,YAAY;AAAA,IAChB,CAAC,OAAe;AACd,mBAAa,EAAE;AACf,cAAQ,EAAE;AAAA,IACZ;AAAA,IACA,CAAC,OAAO;AAAA,EAAA;AAKV,QAAM,WAAW,CAAC,MAA2B;AAC3C,UAAM,IAAI,OAAO,QAAQ,SAAS;AAClC,UAAM,IAAI,OAAO;AACjB,UAAM,OACJ,EAAE,QAAQ,eACN,QAAQ,IAAI,KAAK,CAAC,IAClB,EAAE,QAAQ,cACR,QAAQ,IAAI,IAAI,KAAK,CAAC,IACtB,EAAE,QAAQ,SACR,OAAO,CAAC,IACR,EAAE,QAAQ,QACR,OAAO,IAAI,CAAC,IACZ;AACZ,QAAI,SAAS,OAAW;AACxB,MAAE,eAAA;AACF,cAAU,IAAI;AACd,YAAQ,QAAQ,IAAI,IAAI,GAAG,MAAA;AAAA,EAC7B;AAKA,YAAU,MAAM;AACd,QAAI;AACF,cAAQ,QAAQ,IAAI,SAAS,GAAG,iBAAiB,EAAE,OAAO,WAAW,QAAQ,WAAW;AAAA,EAC5F,GAAG,CAAC,MAAM,SAAS,CAAC;AAGpB,YAAU,MAAM;AACd,QAAI,iBAAiB,OAAW,aAAY,YAAY;AAAA,EAC1D,GAAG,CAAC,YAAY,CAAC;AACjB,YAAU,MAAM;AACd,QAAI,aAAa,QAAW;AAC1B,sBAAgB,QAAQ;AACxB,mBAAa,QAAQ;AACrB,mBAAa,YAAY,EAAE;AAAA,IAC7B;AAAA,EACF,GAAG,CAAC,QAAQ,CAAC;AAgBb,YAAU,MAAM;AACd,QAAI,OAAO;AACX,qBAAiB,EAAE,UAAU,cAAc,MAAM,SAAA,CAAU,EACxD,KAAK,CAAC,EAAE,UAAU,SAAS,OAAO,UAAU,eAAe,aAAa;AACvE,UAAI,CAAC,KAAM;AACX,sBAAgB,QAAQ;AACxB,uBAAiB,MAAM;AAGvB,UAAI,iBAAiB,QAAW;AAC9B,oBAAY,SAAS,QAAQ;AAC7B,wBAAgB,SAAS,IAAI;AAC7B,qBAAa,SAAS,IAAI;AAC1B,qBAAa,SAAS,QAAQ,EAAE;AAAA,MAClC;AACA,UAAI,kBAAkB,KAAK;AAAA,IAC7B,CAAC,EACA,MAAM,SAAS,EACf,QAAQ,MAAM;AACb,UAAI,mBAAmB,KAAK;AAAA,IAC9B,CAAC;AACH,WAAO,MAAM;AACX,aAAO;AAAA,IACT;AAAA,EAKF,GAAG,CAAA,CAAE;AAGL,YAAU,MAAM;AACd,QAAI,CAAC,KAAM;AACX,UAAM,QAAQ,CAAC,MAAqB;AAClC,UAAI,EAAE,QAAQ,SAAU,SAAQ,KAAK;AAAA,IACvC;AACA,WAAO,iBAAiB,WAAW,KAAK;AACxC,WAAO,MAAM,OAAO,oBAAoB,WAAW,KAAK;AAAA,EAC1D,GAAG,CAAC,IAAI,CAAC;AAET,QAAM,WAAW,YAAY,YAAY;AACvC,UAAM,UAAU,UAAU,KAAA;AAC1B,QAAI,CAAC,WAAW,YAAY,aAAa;AACvC,qBAAe,KAAK;AACpB;AAAA,IACF;AACA,kBAAc,IAAI;AAClB,UAAM,SAAS,MAAM,eAAe,OAAO;AAC3C,kBAAc,KAAK;AAEnB,QAAI,CAAC,OAAO,IAAI;AACd,mBAAa,OAAO,KAAK;AACzB;AAAA,IACF;AACA,iBAAa,IAAI;AACjB,iBAAa,OAAO,IAAI;AACxB,iBAAa,OAAO,QAAQ,EAAE;AAC9B,QAAI,OAAO,SAAS,KAAM,gBAAe,OAAO,IAAI;AACpD,mBAAe,KAAK;AAAA,EACtB,GAAG,CAAC,WAAW,aAAa,YAAY,CAAC;AAMzC,QAAM,cAAc,YAAY,MAAM;AACpC,mBAAe,IAAI;AACnB,gBAAY,IAAI;AAChB,eAAA,EACG,KAAK,CAAA,WAAU;AACd,UAAI,CAAC,OAAQ,QAAO,SAAS,OAAO,eAAe;AAAA,IACrD,CAAC,EACA,MAAM,SAAS;AAAA,EACpB,GAAG,CAAA,CAAE;AAEL,QAAM,YAAY,YAAY,YAAY;AACxC,eAAW,IAAI;AACf,gBAAY,IAAI;AAChB,UAAM,SAAS,MAAM,WAAA;AACrB,QAAI,CAAC,QAAQ;AACX,aAAO,SAAS,OAAO,eAAe;AACtC;AAAA,IACF;AACA,QAAI;AACF,YAAM,OAAO,QAAQ;AAAA,IACvB,SAAS,KAAK;AAEZ,kBAAa,KAAe,WAAW,aAAa;AACpD,iBAAW,KAAK;AAChB;AAAA,IACF;AAGA,WAAO,SAAS,OAAA;AAAA,EAClB,GAAG,CAAC,QAAQ,CAAC;AAEb,QAAM,cAAc,YAAY,YAAY;AAC1C,UAAM,MAAM,IAAI,gBAAA;AAChB,eAAW,UAAU;AACrB,mBAAe,MAAM;AACrB,oBAAgB,IAAI;AACpB,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,iBAAA,GAAoB,aAAa,IAAI,MAAM,CAAC,CAAC;AAChF,UAAI,CAAC,QAAQ,YAAY;AACvB,eAAO,SAAS,OAAO,YAAY,KAAK,CAAC;AACzC;AAAA,MACF;AACA,YAAM,QAAQ,KAAK,CAAC,OAAO,WAAW,EAAE,QAAQ,IAAI,OAAA,CAAQ,GAAG,aAAa,IAAI,MAAM,CAAC,CAAC;AACxF,sBAAgB,IAAI;AAAA,IACtB,SAAS,KAAK;AACZ,UAAI,IAAI,OAAO,WAAW,QAAQ;AAChC;AAAA,UACE,IAAI,OAAO,UAAU,sBAAuB,KAAe,WAAW;AAAA,QAAA;AAAA,MAE1E;AAAA,IACF,UAAA;AACE,UAAI,WAAW,YAAY,IAAK,YAAW,UAAU;AACrD,qBAAe,IAAI;AAAA,IACrB;AAAA,EACF,GAAG,CAAA,CAAE;AAEL,QAAM,oBAAoB,YAAY,YAAY;AAChD,UAAM,MAAM,IAAI,gBAAA;AAChB,eAAW,UAAU;AACrB,mBAAe,QAAQ;AACvB,eAAW,IAAI;AACf,gBAAY,IAAI;AAChB,QAAI,UAAU;AACd,QAAI;AACF,YAAM,SAAS,MAAM,QAAQ,KAAK,CAAC,iBAAA,GAAoB,aAAa,IAAI,MAAM,CAAC,CAAC;AAChF,UAAI,CAAC,QAAQ,mBAAmB;AAC9B,kBAAU;AACV,eAAO,SAAS,OAAO,YAAY,QAAQ,CAAC;AAC5C;AAAA,MACF;AACA,YAAM,QAAQ,KAAK;AAAA,QACjB,OAAO,kBAAkB,EAAE,QAAQ,IAAI,QAAQ;AAAA,QAC/C,aAAa,IAAI,MAAM;AAAA,MAAA,CACxB;AAGD,gBAAU;AACV,aAAO,SAAS,OAAA;AAAA,IAClB,SAAS,KAAK;AACZ,UAAI,IAAI,OAAO,WAAW,QAAQ;AAChC;AAAA,UACE,IAAI,OAAO,UACP,8BACC,KAAe,WAAW;AAAA,QAAA;AAAA,MAEnC;AAAA,IACF,UAAA;AACE,UAAI,WAAW,YAAY,IAAK,YAAW,UAAU;AACrD,UAAI,CAAC,SAAS;AACZ,uBAAe,IAAI;AACnB,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AAAA,EACF,GAAG,CAAA,CAAE;AAGL,YAAU,MAAM;AACd,QAAI,CAAC,KAAM,eAAc,MAAM;AAAA,EACjC,GAAG,CAAC,MAAM,aAAa,CAAC;AACxB,YAAU,MAAM,MAAM,cAAc,MAAM,GAAG,CAAC,aAAa,CAAC;AAE5D,QAAM,YAAY;AAAA,IAChB,OAAO,UAAkB;AACvB,UAAI,CAAC,WAAW,UAAU,QAAQ,SAAS,YAAa;AACxD,YAAM,OAAO;AACb,iBAAW,EAAE,GAAG,SAAS,OAAO;AAChC,qBAAe,IAAI;AACnB,YAAM,SAAS,MAAM,gBAAgB,KAAK;AAC1C,qBAAe,KAAK;AACpB,iBAAW,UAAU,IAAI;AAAA,IAC3B;AAAA,IACA,CAAC,SAAS,WAAW;AAAA,EAAA;AAOvB,SACE,qBAAC,OAAA,EAAI,WAAU,mBAAkB,KAAK,SACpC,UAAA;AAAA,IAAA;AAAA,MAAC;AAAA,MAAA;AAAA,QACC,MAAK;AAAA,QACL,WAAU;AAAA,QACV,cAAY,eAAe,oCAAoC;AAAA,QAC/D,OAAO,eAAe,EAAE,UAAU,eAAe;AAAA,QACjD,iBAAe;AAAA,QACf,SAAS,MAAM,QAAQ,CAAA,MAAK,CAAC,CAAC;AAAA,QAE9B,UAAA;AAAA,UAAA,oBAAC,cAAA,EAAa;AAAA,UACb,oCACE,QAAA,EAAK,WAAU,4BAA2B,OAAO,aAAa,eAAY,OAAA,CAAO;AAAA,QAAA;AAAA,MAAA;AAAA,IAAA;AAAA,IAIrF,4BAAS,OAAA,EAAI,WAAU,4BAA2B,SAAS,MAAM,QAAQ,KAAK,GAAG;AAAA,IAEjF,6BACE,OAAA,EAAI,WAAU,0BAAyB,MAAK,UAAS,cAAW,iBAC/D,UAAA;AAAA,MAAA,qBAAC,OAAA,EAAI,WAAU,wBACb,UAAA;AAAA,QAAA,oBAAC,OAAA,EAAI,WAAU,2BAA0B,UAAA,YAAQ;AAAA,QACjD;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,WAAU;AAAA,YACV,MAAK;AAAA,YACL,cAAW;AAAA,YACX,WAAW;AAAA,YAEV,UAAA,KAAK,IAAI,CAAA,MACR;AAAA,cAAC;AAAA,cAAA;AAAA,gBAEC,KAAK,CAAA,OAAM;AACT,sBAAI,GAAI,SAAQ,QAAQ,IAAI,EAAE,IAAI,EAAE;AAAA,sBAC/B,SAAQ,QAAQ,OAAO,EAAE,EAAE;AAAA,gBAClC;AAAA,gBACA,MAAK;AAAA,gBACL,MAAK;AAAA,gBACL,IAAI,SAAS,EAAE,EAAE;AAAA,gBACjB,WAAU;AAAA,gBACV,iBAAe,EAAE,OAAO;AAAA,gBACxB,iBAAe;AAAA,gBACf,UAAU,EAAE,OAAO,YAAY,IAAI;AAAA,gBACnC,SAAS,MAAM,UAAU,EAAE,EAAE;AAAA,gBAE5B,UAAA;AAAA,kBAAA,EAAE;AAAA,kBACF,EAAE,OAAO,oBAAC,UAAK,OAAO,aAAa,eAAY,OAAA,CAAO;AAAA,gBAAA;AAAA,cAAA;AAAA,cAflD,EAAE;AAAA,YAAA,CAiBV;AAAA,UAAA;AAAA,QAAA;AAAA,MACH,GACF;AAAA,MAEA;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,WAAU;AAAA,UACV,MAAK;AAAA,UACL,IAAI;AAAA,UACJ,mBAAiB,SAAS,SAAS;AAAA,UAElC,UAAA;AAAA,YAAA,cAAc,aACb,qBAAA,UAAA,EAKE,UAAA;AAAA,cAAA,qBAAC,WAAA,EAAQ,WAAU,wBACjB,UAAA;AAAA,gBAAA,oBAAC,QAAA,EAAK,WAAU,0BAAyB,UAAA,eAAW;AAAA,gBACnD,YACC,oBAAC,QAAA,EAAK,WAAU,0BAAyB,UAAA,IAAA,CAAC,IAE1C,oBAAC,QAAA,EAAK,WAAW,gDAAgD,QAAQ,IACtE,UAAA,WAAW,QAAQ,EAAA,CACtB;AAAA,cAAA,GAEJ;AAAA,cAGA,qBAAC,WAAA,EAAQ,WAAU,wBACjB,UAAA;AAAA,gBAAA,oBAAC,QAAA,EAAK,WAAU,0BAAyB,UAAA,gBAAY;AAAA,gBACpD,YACC,oBAAC,QAAA,EAAK,WAAU,0BAAyB,UAAA,IAAA,CAAC,IACxC,cACF,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAA;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,WAAU;AAAA,sBACV,OAAO;AAAA,sBACP,WAAW;AAAA,sBACX,WAAS;AAAA,sBACT,UAAU;AAAA,sBACV,gBAAc,cAAc;AAAA,sBAC5B,oBAAkB,YAAY,+BAA+B;AAAA,sBAC7D,UAAU,CAAA,MAAK;AACb,qCAAa,EAAE,OAAO,KAAK;AAC3B,qCAAa,IAAI;AAAA,sBACnB;AAAA,sBACA,WAAW,CAAA,MAAK;AACd,4BAAI,EAAE,QAAQ,SAAS;AACrB,mCAAA,EAAW,MAAM,SAAS;AAAA,wBAC5B;AACA,4BAAI,EAAE,QAAQ,UAAU;AAEtB,4BAAE,gBAAA;AACF,yCAAe,KAAK;AACpB,uCAAa,IAAI;AACjB,uCAAa,eAAe,EAAE;AAAA,wBAChC;AAAA,sBACF;AAAA,oBAAA;AAAA,kBAAA;AAAA,kBAEF;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,UAAU;AAAA,sBACV,SAAS,MAAM;AACb,iCAAA,EAAW,MAAM,SAAS;AAAA,sBAC5B;AAAA,sBAEC,uBAAa,MAAM;AAAA,oBAAA;AAAA,kBAAA;AAAA,kBAErB,aACC;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,IAAG;AAAA,sBACH,WAAU;AAAA,sBACV,MAAK;AAAA,sBAEJ,UAAA;AAAA,oBAAA;AAAA,kBAAA;AAAA,gBACH,EAAA,CAEJ,IAEA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV,cAAW;AAAA,oBACX,SAAS,MAAM;AACb,mCAAa,eAAe,EAAE;AAC9B,qCAAe,IAAI;AAAA,oBACrB;AAAA,oBAEC,UAAA,eAAe;AAAA,kBAAA;AAAA,gBAAA;AAAA,cAClB,GAEJ;AAAA,cAMC,CAAC,aAAa,aAAa,YAC1B,qBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,gBAAA,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAA,oBAAC,QAAA,EAAK,WAAU,uDAAsD,UAAA,UAEtE;AAAA,kBACA;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,iBAAe;AAAA,sBACf,SAAS,MAAM,cAAc,CAAA,MAAK,CAAC,CAAC;AAAA,sBAEnC,uBAAa,SAAS;AAAA,oBAAA;AAAA,kBAAA;AAAA,gBACzB,GACF;AAAA,gBACC,kCAAe,cAAA,CAAA,CAAa;AAAA,cAAA,GAC/B;AAAA,cAKD,CAAC,aAAa,gBAAgB,KAC7B,qBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,gBAAA,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAA,oBAAC,QAAA,EAAK,WAAU,uDAAsD,UAAA,kBAEtE;AAAA,kBACA;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,iBAAe;AAAA,sBACf,SAAS,MAAM,eAAe,CAAA,MAAK,CAAC,CAAC;AAAA,sBAEpC,wBAAc,SAAS;AAAA,oBAAA;AAAA,kBAAA;AAAA,gBAC1B,GACF;AAAA,gBACC,eACC,oBAAC,MAAM,UAAN,EAAe,UAAU,oBAAC,QAAA,EAAK,WAAU,yBAAwB,UAAA,KAAC,GACjE,UAAA,oBAAC,iBAAc,EAAA,CACjB;AAAA,cAAA,EAAA,CAEJ;AAAA,YAAA,GAEJ;AAAA,YAOD,cAAc,aACb,qBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,cAAA,oBAAC,QAAA,EAAK,WAAU,0BAAyB,UAAA,sBAAkB;AAAA,cAC1D,UACC,qBAAA,UAAA,EACE,UAAA;AAAA,gBAAA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,WAAU;AAAA,oBACV,MAAK;AAAA,oBACL,cAAW;AAAA,oBAEV,UAAA,MAAM,KAAK,EAAE,QAAQ,QAAQ,SAAA,GAAY,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,CAAA,QAC7D;AAAA,sBAAC;AAAA,sBAAA;AAAA,wBAEC,MAAK;AAAA,wBACL,MAAK;AAAA,wBACL,gBAAc,QAAQ,QAAQ;AAAA,wBAC9B,cAAY,SAAS,GAAG;AAAA,wBACxB,WAAW,uBACT,OAAO,QAAQ,QAAQ,kCAAkC,EAC3D;AAAA,wBACA,UAAU;AAAA,wBACV,SAAS,MAAM;AACb,oCAAU,GAAG,EAAE,MAAM,SAAS;AAAA,wBAChC;AAAA,wBAEC,UAAA;AAAA,sBAAA;AAAA,sBAbI;AAAA,oBAAA,CAeR;AAAA,kBAAA;AAAA,gBAAA;AAAA,gBAEH,oBAAC,QAAA,EAAK,WAAU,yBAAwB,UAAA,sFAAA,CAGxC;AAAA,cAAA,GACF;AAAA;AAAA;AAAA,gBAIA,oBAAC,QAAA,EAAK,WAAU,yBAAwB,UAAA,yBAAA,CAAsB;AAAA;AAAA,YAAA,GAElE;AAAA,YAOD,cAAc,aACb,qBAAA,UAAA,EACG,UAAA;AAAA,cAAA,cACC,oBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,gBAAC;AAAA,gBAAA;AAAA,kBACC,WAAU;AAAA,kBACV,UAAU,CAAA,MAAK;AACb,sBAAE,eAAA;AACF,8BAAA,EAAY,MAAM,SAAS;AAAA,kBAC7B;AAAA,kBAEA,UAAA;AAAA,oBAAA;AAAA,sBAAC;AAAA,sBAAA;AAAA,wBACC,MAAK;AAAA,wBACL,MAAK;AAAA,wBACL,cAAa;AAAA,wBACb,OAAM;AAAA,wBACN,UAAQ;AAAA,wBACR,QAAM;AAAA,sBAAA;AAAA,oBAAA;AAAA,wCAEP,SAAA,EAAM,WAAU,0BAAyB,SAAQ,uBAAsB,UAAA,cAExE;AAAA,oBACA,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,sBAAA;AAAA,wBAAC;AAAA,wBAAA;AAAA,0BACC,IAAG;AAAA,0BACH,WAAU;AAAA,0BACV,MAAK;AAAA,0BACL,MAAK;AAAA,0BACL,cAAa;AAAA,0BACb,gBAAe;AAAA,0BACf,YAAY;AAAA,0BACZ,WAAS;AAAA,0BACT,OAAO;AAAA,0BACP,UAAU;AAAA,0BACV,gBAAc,aAAa;AAAA,0BAC3B,oBAAkB,WAAW,8BAA8B;AAAA,0BAC3D,UAAU,CAAA,MAAK,YAAY,EAAE,OAAO,KAAK;AAAA,wBAAA;AAAA,sBAAA;AAAA,sBAE3C;AAAA,wBAAC;AAAA,wBAAA;AAAA,0BACC,MAAK;AAAA,0BACL,WAAU;AAAA,0BACV,UAAU;AAAA,0BAET,oBAAU,gBAAgB;AAAA,wBAAA;AAAA,sBAAA;AAAA,oBAC7B,GACF;AAAA,oBACC,kBAAA,KACC,oBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,sBAAC;AAAA,sBAAA;AAAA,wBACC,MAAK;AAAA,wBACL,WAAU;AAAA,wBACV,UAAU;AAAA,wBACV,SAAS,MAAM;AACb,4CAAA,EAAoB,MAAM,SAAS;AAAA,wBACrC;AAAA,wBAEC,UAAA,gBAAgB,WAAW,yBAAyB;AAAA,sBAAA;AAAA,oBAAA,GAEzD;AAAA,oBAID,gBAAgB,YACf,oBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,sBAAC;AAAA,sBAAA;AAAA,wBACC,MAAK;AAAA,wBACL,WAAU;AAAA,wBACV,SAAS,MAAM,cAAA;AAAA,wBAChB,UAAA;AAAA,sBAAA;AAAA,oBAAA,GAGH;AAAA,oBAED,YACC;AAAA,sBAAC;AAAA,sBAAA;AAAA,wBACC,IAAG;AAAA,wBACH,WAAU;AAAA,wBACV,MAAK;AAAA,wBAEJ,UAAA;AAAA,sBAAA;AAAA,oBAAA;AAAA,kBACH;AAAA,gBAAA;AAAA,cAAA,EAEJ,CACF,IAEA,qBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,gBAAA,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAA,oBAAC,QAAA,EAAK,WAAU,uDAAsD,UAAA,cAEtE;AAAA,kBAEC,CAAC,aAAa,aAAa,YAAY,uBACtC;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAW,uBAAuB,eAAe,kCAAkC,mBAAmB,KAAK,EAAE;AAAA,sBAC7G,UAAU,gBAAgB,QAAQ;AAAA,sBAClC,SAAS,MAAM;AACb,oCAAA,EAAc,MAAM,SAAS;AAAA,sBAC/B;AAAA,sBAEC,UAAA,eACG,kBACA,gBAAgB,SACd,YACA;AAAA,oBAAA;AAAA,kBAAA;AAAA,kBAGV;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,UAAU,gBAAgB;AAAA,sBAC1B,SAAS;AAAA,sBACV,UAAA;AAAA,oBAAA;AAAA,kBAAA;AAAA,gBAED,GACF;AAAA,gBAEC,gBAAgB,UACf,oBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV,SAAS,MAAM,cAAA;AAAA,oBAChB,UAAA;AAAA,kBAAA;AAAA,gBAAA,GAGH;AAAA,gBAED,gBACC,oBAAC,QAAA,EAAK,WAAU,0BAAyB,MAAK,SAC3C,UAAA,aAAA,CACH;AAAA,cAAA,GAEJ;AAAA,cAMD,CAAC,aAAa,aAAa,YAC1B,qBAAC,WAAA,EAAQ,WAAU,oDACjB,UAAA;AAAA,gBAAA,qBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAA,oBAAC,QAAA,EAAK,WAAU,uDAAsD,UAAA,WAEtE;AAAA,kBACC,gBAAgB,SACf;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,SAAS,MAAM;AACb,uCAAe,IAAI;AACnB,uCAAe,SAAS;AAAA,sBAC1B;AAAA,sBACD,UAAA;AAAA,oBAAA;AAAA,kBAAA,IAID;AAAA,oBAAC;AAAA,oBAAA;AAAA,sBACC,MAAK;AAAA,sBACL,WAAU;AAAA,sBACV,UAAU,gBAAgB;AAAA,sBAC1B,SAAS,MAAM,eAAe,MAAM;AAAA,sBACrC,UAAA;AAAA,oBAAA;AAAA,kBAAA;AAAA,gBAED,GAEJ;AAAA,gBACC,gBAAgB,UACf,oBAAC,QAAA,EAAK,WAAU,2BACd,UAAA;AAAA,kBAAC;AAAA,kBAAA;AAAA,oBACC,MAAK;AAAA,oBACL,WAAU;AAAA,oBACV,UAAU,gBAAgB;AAAA,oBAC1B,SAAS,MAAM;AACb,qCAAe,MAAM;AACrB,uCAAA,EACG,KAAK,CAAA,YAAW;AACf,4BAAI,CAAC,SAAS;AACZ,yCAAe,qBAAqB;AACpC,yCAAe,SAAS;AACxB;AAAA,wBACF;AACA,qCAAa,WAAW,mBAAmB;AAC3C,qCAAa,WAAW,kBAAkB;AAC1C,+BAAO,SAAS,OAAO,GAAG;AAAA,sBAC5B,CAAC,EACA,MAAM,SAAS;AAAA,oBACpB;AAAA,oBAEC,UAAA,gBAAgB,SAAS,cAAc;AAAA,kBAAA;AAAA,gBAAA,GAE5C;AAAA,gBAED,eACC,oBAAC,QAAA,EAAK,WAAU,0BAAyB,MAAK,SAC3C,UAAA,YAAA,CACH;AAAA,cAAA,EAAA,CAEJ;AAAA,YAAA,GAEJ;AAAA,YAID,cAAc,UACb,oBAAC,WAAA,EAAQ,WAAU,oDAChB,UACH;AAAA,YAED,UACC,oBAAC,WAAA,EAAQ,WAAU,oDAChB,UAAA,OAAO,SAAO,CACjB;AAAA,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,IAEJ,EAAA,CACF;AAAA,EAAA,GAEJ;AAEJ;"}

package/dist/components/ServiceAccess.d.ts

@@ -0,0 +1,3 @@
+import React from 'react';
+export declare function ServiceAccess(): React.JSX.Element;
+//# sourceMappingURL=ServiceAccess.d.ts.map

package/dist/components/ServiceAccess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceAccess.d.ts","sourceRoot":"","sources":["../../src/components/ServiceAccess.tsx"],"names":[],"mappings":"AAAA,OAAO,KAA2C,MAAM,OAAO,CAAA;AA2E/D,wBAAgB,aAAa,sBA2M5B"}

package/dist/components/ServiceAccess.js

@@ -0,0 +1,216 @@
+import { jsx, jsxs } from "react/jsx-runtime";
+import { useState, useCallback, useEffect } from "react";
+import { renderSVG } from "../vendor/uqr/index.js";
+import { loadSignInClient } from "../lib/settingsClient.js";
+const BASE = "/session/service-access";
+const S = {
+  stack: { display: "flex", flexDirection: "column", gap: 8 },
+  line: { display: "flex", alignItems: "center", gap: 6, flexWrap: "wrap" },
+  grow: { flex: 1, minWidth: 0 },
+  mono: { fontFamily: "ui-monospace, monospace", fontSize: "0.75rem", wordBreak: "break-all" },
+  code: { width: "7ch", fontFamily: "ui-monospace, monospace", letterSpacing: "0.1em" },
+  qr: { width: 168, height: 168 }
+};
+async function call(path, body) {
+  const res = await fetch(`${BASE}${path}`, {
+    method: body === void 0 ? "GET" : "POST",
+    credentials: "same-origin",
+    headers: body === void 0 ? void 0 : { "Content-Type": "application/json" },
+    body: body === void 0 ? void 0 : JSON.stringify(body)
+  });
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) throw new Error(data.error ?? `HTTP ${res.status}`);
+  return data;
+}
+async function stepUp() {
+  const client = await loadSignInClient();
+  if (!client?.stepUpPasskey) throw new Error("Passkeys unavailable here");
+  return client.stepUpPasskey();
+}
+function left(expiresAt) {
+  if (expiresAt === null) return "";
+  const h = Math.floor((expiresAt - Date.now()) / 36e5);
+  return h >= 24 ? `${Math.floor(h / 24)}d left` : h >= 1 ? `${h}h left` : "under 1h left";
+}
+const message = (err) => err instanceof Error ? err.message : String(err);
+function ServiceAccess() {
+  const [state, setState] = useState(null);
+  const [error, setError] = useState(null);
+  const [busy, setBusy] = useState(false);
+  const [enrol, setEnrol] = useState(null);
+  const [code, setCode] = useState("");
+  const [minted, setMinted] = useState(
+    null
+  );
+  const load = useCallback(async () => {
+    setState(await call(""));
+  }, []);
+  useEffect(() => {
+    load().catch((err) => setError(message(err)));
+  }, [load]);
+  const run = async (work) => {
+    setBusy(true);
+    setError(null);
+    try {
+      await work();
+    } catch (err) {
+      setError(message(err));
+    } finally {
+      setBusy(false);
+    }
+  };
+  if (!state) {
+    return /* @__PURE__ */ jsx("span", { className: "settings-popout__hint", role: error ? "alert" : void 0, children: error ?? "…" });
+  }
+  const codeOk = /^\d{6}$/.test(code);
+  const codeInput = /* @__PURE__ */ jsx(
+    "input",
+    {
+      value: code,
+      onChange: (e) => setCode(e.target.value.replace(/\D/g, "").slice(0, 6)),
+      inputMode: "numeric",
+      autoComplete: "one-time-code",
+      placeholder: "123456",
+      "aria-label": "Authenticator code",
+      className: "settings-popout__input",
+      style: S.code
+    }
+  );
+  return /* @__PURE__ */ jsxs("div", { style: S.stack, children: [
+    state.totp !== "active" && !enrol && /* @__PURE__ */ jsxs("span", { style: S.line, children: [
+      /* @__PURE__ */ jsx("span", { className: "settings-popout__label", style: S.grow, children: "Authenticator" }),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          className: "settings-popout__btn settings-popout__btn--primary",
+          disabled: busy,
+          onClick: () => {
+            run(async () => {
+              setEnrol(
+                await call("/totp/start", {
+                  assertion: await stepUp()
+                })
+              );
+            }).catch(console.error);
+          },
+          children: "Set up"
+        }
+      )
+    ] }),
+    enrol && /* @__PURE__ */ jsxs("div", { style: S.stack, children: [
+      /* @__PURE__ */ jsx(
+        "span",
+        {
+          role: "img",
+          "aria-label": "Authenticator QR code",
+          style: S.qr,
+          dangerouslySetInnerHTML: { __html: renderSVG(enrol.uri) }
+        }
+      ),
+      /* @__PURE__ */ jsx("span", { style: S.mono, children: enrol.secret }),
+      /* @__PURE__ */ jsxs("span", { style: S.line, children: [
+        codeInput,
+        /* @__PURE__ */ jsx(
+          "button",
+          {
+            type: "button",
+            className: "settings-popout__btn settings-popout__btn--primary",
+            disabled: busy || !codeOk,
+            onClick: () => {
+              run(async () => {
+                await call("/totp/confirm", { code });
+                setEnrol(null);
+                setCode("");
+                await load();
+              }).catch(console.error);
+            },
+            children: "Confirm"
+          }
+        )
+      ] })
+    ] }),
+    minted && /* @__PURE__ */ jsxs("div", { style: S.stack, children: [
+      /* @__PURE__ */ jsxs("span", { className: "settings-popout__label", children: [
+        minted.name,
+        " · shown once · ",
+        left(minted.expiresAt)
+      ] }),
+      /* @__PURE__ */ jsx("span", { style: S.mono, children: minted.key }),
+      /* @__PURE__ */ jsxs("span", { style: S.line, children: [
+        /* @__PURE__ */ jsx(
+          "button",
+          {
+            type: "button",
+            className: "settings-popout__btn",
+            onClick: () => {
+              navigator.clipboard.writeText(minted.key).catch(console.error);
+            },
+            children: "Copy"
+          }
+        ),
+        /* @__PURE__ */ jsx("button", { type: "button", className: "settings-popout__btn", onClick: () => setMinted(null), children: "Hide" })
+      ] })
+    ] }),
+    state.totp === "active" && /* @__PURE__ */ jsxs("span", { style: S.line, children: [
+      /* @__PURE__ */ jsx("span", { className: "settings-popout__label", style: S.grow, children: "Code" }),
+      codeInput
+    ] }),
+    state.totp === "active" && state.grants.map((g) => /* @__PURE__ */ jsxs("span", { style: S.line, children: [
+      /* @__PURE__ */ jsx("span", { className: "settings-popout__label", style: { ...S.grow, ...S.mono }, children: g.name ?? g.identityUserId }),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          className: "settings-popout__btn settings-popout__btn--primary",
+          disabled: busy || !codeOk,
+          onClick: () => {
+            run(async () => {
+              const assertion = await stepUp();
+              const out = await call(
+                "/mint",
+                {
+                  identityUserId: g.identityUserId,
+                  assertion,
+                  totp: code
+                }
+              );
+              setCode("");
+              setMinted(out);
+              await load();
+            }).catch(console.error);
+          },
+          children: "Mint"
+        }
+      )
+    ] }, g.identityUserId)),
+    state.credentials.filter((c) => c.live).map((c) => /* @__PURE__ */ jsxs("span", { style: S.line, children: [
+      /* @__PURE__ */ jsxs("span", { style: { ...S.grow, ...S.mono }, children: [
+        c.prefix,
+        "… ",
+        c.name
+      ] }),
+      /* @__PURE__ */ jsx("span", { className: "settings-popout__hint", children: left(c.expiresAt) }),
+      /* @__PURE__ */ jsx(
+        "button",
+        {
+          type: "button",
+          className: "settings-popout__btn",
+          disabled: busy,
+          onClick: () => {
+            run(async () => {
+              await call("/revoke", { prefix: c.prefix });
+              await load();
+            }).catch(console.error);
+          },
+          children: "Revoke"
+        }
+      )
+    ] }, c.prefix)),
+    error && /* @__PURE__ */ jsx("span", { className: "settings-popout__error", role: "alert", children: error })
+  ] });
+}
+export {
+  ServiceAccess
+};
+//# sourceMappingURL=ServiceAccess.js.map

package/dist/components/ServiceAccess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ServiceAccess.js","sources":["../../src/components/ServiceAccess.tsx"],"sourcesContent":["import React, { useCallback, useEffect, useState } from 'react'\nimport { renderSVG } from 'uqr'\nimport { loadSignInClient, type PasskeyAssertion } from '../lib/settingsClient'\n\n/**\n * Service access: a grantee's own credentials for the service identities the\n * operator granted them (hadoku_site docs/planning/service-grants-2026-10-31.md).\n *\n * Two steps, both behind a fresh passkey tap:\n *   1. enrol an authenticator app once (the QR is shown once, then confirmed\n *      with one code);\n *   2. mint a credential: passkey tap + a current code. The key is shown once\n *      and lives 7 days.\n *\n * Loaded only when opened (React.lazy in ConnectedSettings), so the QR encoder\n * costs a grantee one chunk and everyone else nothing.\n */\n\nconst BASE = '/session/service-access'\n\ninterface Grant {\n  identityUserId: string\n  name: string | null\n}\n\ninterface Credential {\n  prefix: string\n  identityUserId: string\n  name: string | null\n  expiresAt: number | null\n  lastSeenAt: number\n  live: boolean\n}\n\ninterface State {\n  grants: Grant[]\n  totp: 'none' | 'pending' | 'active'\n  credentials: Credential[]\n}\n\nconst S = {\n  stack: { display: 'flex', flexDirection: 'column', gap: 8 },\n  line: { display: 'flex', alignItems: 'center', gap: 6, flexWrap: 'wrap' },\n  grow: { flex: 1, minWidth: 0 },\n  mono: { fontFamily: 'ui-monospace, monospace', fontSize: '0.75rem', wordBreak: 'break-all' },\n  code: { width: '7ch', fontFamily: 'ui-monospace, monospace', letterSpacing: '0.1em' },\n  qr: { width: 168, height: 168 }\n} satisfies Record<string, React.CSSProperties>\n\nasync function call<T>(path: string, body?: unknown): Promise<T> {\n  const res = await fetch(`${BASE}${path}`, {\n    method: body === undefined ? 'GET' : 'POST',\n    credentials: 'same-origin',\n    headers: body === undefined ? undefined : { 'Content-Type': 'application/json' },\n    body: body === undefined ? undefined : JSON.stringify(body)\n  })\n  const data = (await res.json().catch(() => ({}))) as T & { error?: string }\n  if (!res.ok) throw new Error(data.error ?? `HTTP ${res.status}`)\n  return data\n}\n\nasync function stepUp(): Promise<PasskeyAssertion> {\n  const client = await loadSignInClient()\n  if (!client?.stepUpPasskey) throw new Error('Passkeys unavailable here')\n  return client.stepUpPasskey()\n}\n\nfunction left(expiresAt: number | null): string {\n  if (expiresAt === null) return ''\n  const h = Math.floor((expiresAt - Date.now()) / 3_600_000)\n  return h >= 24 ? `${Math.floor(h / 24)}d left` : h >= 1 ? `${h}h left` : 'under 1h left'\n}\n\nconst message = (err: unknown) => (err instanceof Error ? err.message : String(err))\n\nexport function ServiceAccess() {\n  const [state, setState] = useState<State | null>(null)\n  const [error, setError] = useState<string | null>(null)\n  const [busy, setBusy] = useState(false)\n  const [enrol, setEnrol] = useState<{ uri: string; secret: string } | null>(null)\n  const [code, setCode] = useState('')\n  const [minted, setMinted] = useState<{ key: string; name: string; expiresAt: number } | null>(\n    null\n  )\n\n  const load = useCallback(async () => {\n    setState(await call<State>(''))\n  }, [])\n\n  useEffect(() => {\n    load().catch((err: unknown) => setError(message(err)))\n  }, [load])\n\n  const run = async (work: () => Promise<void>) => {\n    setBusy(true)\n    setError(null)\n    try {\n      await work()\n    } catch (err) {\n      setError(message(err))\n    } finally {\n      setBusy(false)\n    }\n  }\n\n  if (!state) {\n    return (\n      <span className=\"settings-popout__hint\" role={error ? 'alert' : undefined}>\n        {error ?? '…'}\n      </span>\n    )\n  }\n\n  const codeOk = /^\\d{6}$/.test(code)\n  const codeInput = (\n    <input\n      value={code}\n      onChange={e => setCode(e.target.value.replace(/\\D/g, '').slice(0, 6))}\n      inputMode=\"numeric\"\n      autoComplete=\"one-time-code\"\n      placeholder=\"123456\"\n      aria-label=\"Authenticator code\"\n      className=\"settings-popout__input\"\n      style={S.code}\n    />\n  )\n\n  return (\n    <div style={S.stack}>\n      {state.totp !== 'active' && !enrol && (\n        <span style={S.line}>\n          <span className=\"settings-popout__label\" style={S.grow}>\n            Authenticator\n          </span>\n          <button\n            type=\"button\"\n            className=\"settings-popout__btn settings-popout__btn--primary\"\n            disabled={busy}\n            onClick={() => {\n              run(async () => {\n                setEnrol(\n                  await call<{ uri: string; secret: string }>('/totp/start', {\n                    assertion: await stepUp()\n                  })\n                )\n              }).catch(console.error)\n            }}\n          >\n            Set up\n          </button>\n        </span>\n      )}\n\n      {enrol && (\n        <div style={S.stack}>\n          <span\n            role=\"img\"\n            aria-label=\"Authenticator QR code\"\n            style={S.qr}\n            dangerouslySetInnerHTML={{ __html: renderSVG(enrol.uri) }}\n          />\n          <span style={S.mono}>{enrol.secret}</span>\n          <span style={S.line}>\n            {codeInput}\n            <button\n              type=\"button\"\n              className=\"settings-popout__btn settings-popout__btn--primary\"\n              disabled={busy || !codeOk}\n              onClick={() => {\n                run(async () => {\n                  await call('/totp/confirm', { code })\n                  setEnrol(null)\n                  setCode('')\n                  await load()\n                }).catch(console.error)\n              }}\n            >\n              Confirm\n            </button>\n          </span>\n        </div>\n      )}\n\n      {minted && (\n        <div style={S.stack}>\n          <span className=\"settings-popout__label\">\n            {minted.name} · shown once · {left(minted.expiresAt)}\n          </span>\n          <span style={S.mono}>{minted.key}</span>\n          <span style={S.line}>\n            <button\n              type=\"button\"\n              className=\"settings-popout__btn\"\n              onClick={() => {\n                navigator.clipboard.writeText(minted.key).catch(console.error)\n              }}\n            >\n              Copy\n            </button>\n            <button type=\"button\" className=\"settings-popout__btn\" onClick={() => setMinted(null)}>\n              Hide\n            </button>\n          </span>\n        </div>\n      )}\n\n      {state.totp === 'active' && (\n        <span style={S.line}>\n          <span className=\"settings-popout__label\" style={S.grow}>\n            Code\n          </span>\n          {codeInput}\n        </span>\n      )}\n\n      {state.totp === 'active' &&\n        state.grants.map(g => (\n          <span key={g.identityUserId} style={S.line}>\n            <span className=\"settings-popout__label\" style={{ ...S.grow, ...S.mono }}>\n              {g.name ?? g.identityUserId}\n            </span>\n            <button\n              type=\"button\"\n              className=\"settings-popout__btn settings-popout__btn--primary\"\n              disabled={busy || !codeOk}\n              onClick={() => {\n                run(async () => {\n                  const assertion = await stepUp()\n                  const out = await call<{ key: string; name: string; expiresAt: number }>(\n                    '/mint',\n                    {\n                      identityUserId: g.identityUserId,\n                      assertion,\n                      totp: code\n                    }\n                  )\n                  setCode('')\n                  setMinted(out)\n                  await load()\n                }).catch(console.error)\n              }}\n            >\n              Mint\n            </button>\n          </span>\n        ))}\n\n      {state.credentials\n        .filter(c => c.live)\n        .map(c => (\n          <span key={c.prefix} style={S.line}>\n            <span style={{ ...S.grow, ...S.mono }}>\n              {c.prefix}… {c.name}\n            </span>\n            <span className=\"settings-popout__hint\">{left(c.expiresAt)}</span>\n            <button\n              type=\"button\"\n              className=\"settings-popout__btn\"\n              disabled={busy}\n              onClick={() => {\n                run(async () => {\n                  await call('/revoke', { prefix: c.prefix })\n                  await load()\n                }).catch(console.error)\n              }}\n            >\n              Revoke\n            </button>\n          </span>\n        ))}\n\n      {error && (\n        <span className=\"settings-popout__error\" role=\"alert\">\n          {error}\n        </span>\n      )}\n    </div>\n  )\n}\n"],"names":[],"mappings":";;;;AAkBA,MAAM,OAAO;AAsBb,MAAM,IAAI;AAAA,EACR,OAAO,EAAE,SAAS,QAAQ,eAAe,UAAU,KAAK,EAAA;AAAA,EACxD,MAAM,EAAE,SAAS,QAAQ,YAAY,UAAU,KAAK,GAAG,UAAU,OAAA;AAAA,EACjE,MAAM,EAAE,MAAM,GAAG,UAAU,EAAA;AAAA,EAC3B,MAAM,EAAE,YAAY,2BAA2B,UAAU,WAAW,WAAW,YAAA;AAAA,EAC/E,MAAM,EAAE,OAAO,OAAO,YAAY,2BAA2B,eAAe,QAAA;AAAA,EAC5E,IAAI,EAAE,OAAO,KAAK,QAAQ,IAAA;AAC5B;AAEA,eAAe,KAAQ,MAAc,MAA4B;AAC/D,QAAM,MAAM,MAAM,MAAM,GAAG,IAAI,GAAG,IAAI,IAAI;AAAA,IACxC,QAAQ,SAAS,SAAY,QAAQ;AAAA,IACrC,aAAa;AAAA,IACb,SAAS,SAAS,SAAY,SAAY,EAAE,gBAAgB,mBAAA;AAAA,IAC5D,MAAM,SAAS,SAAY,SAAY,KAAK,UAAU,IAAI;AAAA,EAAA,CAC3D;AACD,QAAM,OAAQ,MAAM,IAAI,KAAA,EAAO,MAAM,OAAO,CAAA,EAAG;AAC/C,MAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,KAAK,SAAS,QAAQ,IAAI,MAAM,EAAE;AAC/D,SAAO;AACT;AAEA,eAAe,SAAoC;AACjD,QAAM,SAAS,MAAM,iBAAA;AACrB,MAAI,CAAC,QAAQ,cAAe,OAAM,IAAI,MAAM,2BAA2B;AACvE,SAAO,OAAO,cAAA;AAChB;AAEA,SAAS,KAAK,WAAkC;AAC9C,MAAI,cAAc,KAAM,QAAO;AAC/B,QAAM,IAAI,KAAK,OAAO,YAAY,KAAK,IAAA,KAAS,IAAS;AACzD,SAAO,KAAK,KAAK,GAAG,KAAK,MAAM,IAAI,EAAE,CAAC,WAAW,KAAK,IAAI,GAAG,CAAC,WAAW;AAC3E;AAEA,MAAM,UAAU,CAAC,QAAkB,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAE3E,SAAS,gBAAgB;AAC9B,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAuB,IAAI;AACrD,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAwB,IAAI;AACtD,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,KAAK;AACtC,QAAM,CAAC,OAAO,QAAQ,IAAI,SAAiD,IAAI;AAC/E,QAAM,CAAC,MAAM,OAAO,IAAI,SAAS,EAAE;AACnC,QAAM,CAAC,QAAQ,SAAS,IAAI;AAAA,IAC1B;AAAA,EAAA;AAGF,QAAM,OAAO,YAAY,YAAY;AACnC,aAAS,MAAM,KAAY,EAAE,CAAC;AAAA,EAChC,GAAG,CAAA,CAAE;AAEL,YAAU,MAAM;AACd,SAAA,EAAO,MAAM,CAAC,QAAiB,SAAS,QAAQ,GAAG,CAAC,CAAC;AAAA,EACvD,GAAG,CAAC,IAAI,CAAC;AAET,QAAM,MAAM,OAAO,SAA8B;AAC/C,YAAQ,IAAI;AACZ,aAAS,IAAI;AACb,QAAI;AACF,YAAM,KAAA;AAAA,IACR,SAAS,KAAK;AACZ,eAAS,QAAQ,GAAG,CAAC;AAAA,IACvB,UAAA;AACE,cAAQ,KAAK;AAAA,IACf;AAAA,EACF;AAEA,MAAI,CAAC,OAAO;AACV,WACE,oBAAC,UAAK,WAAU,yBAAwB,MAAM,QAAQ,UAAU,QAC7D,UAAA,SAAS,IAAA,CACZ;AAAA,EAEJ;AAEA,QAAM,SAAS,UAAU,KAAK,IAAI;AAClC,QAAM,YACJ;AAAA,IAAC;AAAA,IAAA;AAAA,MACC,OAAO;AAAA,MACP,UAAU,CAAA,MAAK,QAAQ,EAAE,OAAO,MAAM,QAAQ,OAAO,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;AAAA,MACpE,WAAU;AAAA,MACV,cAAa;AAAA,MACb,aAAY;AAAA,MACZ,cAAW;AAAA,MACX,WAAU;AAAA,MACV,OAAO,EAAE;AAAA,IAAA;AAAA,EAAA;AAIb,SACE,qBAAC,OAAA,EAAI,OAAO,EAAE,OACX,UAAA;AAAA,IAAA,MAAM,SAAS,YAAY,CAAC,8BAC1B,QAAA,EAAK,OAAO,EAAE,MACb,UAAA;AAAA,MAAA,oBAAC,UAAK,WAAU,0BAAyB,OAAO,EAAE,MAAM,UAAA,iBAExD;AAAA,MACA;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,UAAU;AAAA,UACV,SAAS,MAAM;AACb,gBAAI,YAAY;AACd;AAAA,gBACE,MAAM,KAAsC,eAAe;AAAA,kBACzD,WAAW,MAAM,OAAA;AAAA,gBAAO,CACzB;AAAA,cAAA;AAAA,YAEL,CAAC,EAAE,MAAM,QAAQ,KAAK;AAAA,UACxB;AAAA,UACD,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,IAED,GACF;AAAA,IAGD,SACC,qBAAC,OAAA,EAAI,OAAO,EAAE,OACZ,UAAA;AAAA,MAAA;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,MAAK;AAAA,UACL,cAAW;AAAA,UACX,OAAO,EAAE;AAAA,UACT,yBAAyB,EAAE,QAAQ,UAAU,MAAM,GAAG,EAAA;AAAA,QAAE;AAAA,MAAA;AAAA,0BAEzD,QAAA,EAAK,OAAO,EAAE,MAAO,gBAAM,QAAO;AAAA,MACnC,qBAAC,QAAA,EAAK,OAAO,EAAE,MACZ,UAAA;AAAA,QAAA;AAAA,QACD;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,MAAK;AAAA,YACL,WAAU;AAAA,YACV,UAAU,QAAQ,CAAC;AAAA,YACnB,SAAS,MAAM;AACb,kBAAI,YAAY;AACd,sBAAM,KAAK,iBAAiB,EAAE,MAAM;AACpC,yBAAS,IAAI;AACb,wBAAQ,EAAE;AACV,sBAAM,KAAA;AAAA,cACR,CAAC,EAAE,MAAM,QAAQ,KAAK;AAAA,YACxB;AAAA,YACD,UAAA;AAAA,UAAA;AAAA,QAAA;AAAA,MAED,EAAA,CACF;AAAA,IAAA,GACF;AAAA,IAGD,UACC,qBAAC,OAAA,EAAI,OAAO,EAAE,OACZ,UAAA;AAAA,MAAA,qBAAC,QAAA,EAAK,WAAU,0BACb,UAAA;AAAA,QAAA,OAAO;AAAA,QAAK;AAAA,QAAiB,KAAK,OAAO,SAAS;AAAA,MAAA,GACrD;AAAA,0BACC,QAAA,EAAK,OAAO,EAAE,MAAO,iBAAO,KAAI;AAAA,MACjC,qBAAC,QAAA,EAAK,OAAO,EAAE,MACb,UAAA;AAAA,QAAA;AAAA,UAAC;AAAA,UAAA;AAAA,YACC,MAAK;AAAA,YACL,WAAU;AAAA,YACV,SAAS,MAAM;AACb,wBAAU,UAAU,UAAU,OAAO,GAAG,EAAE,MAAM,QAAQ,KAAK;AAAA,YAC/D;AAAA,YACD,UAAA;AAAA,UAAA;AAAA,QAAA;AAAA,QAGD,oBAAC,UAAA,EAAO,MAAK,UAAS,WAAU,wBAAuB,SAAS,MAAM,UAAU,IAAI,GAAG,UAAA,OAAA,CAEvF;AAAA,MAAA,EAAA,CACF;AAAA,IAAA,GACF;AAAA,IAGD,MAAM,SAAS,iCACb,QAAA,EAAK,OAAO,EAAE,MACb,UAAA;AAAA,MAAA,oBAAC,UAAK,WAAU,0BAAyB,OAAO,EAAE,MAAM,UAAA,QAExD;AAAA,MACC;AAAA,IAAA,GACH;AAAA,IAGD,MAAM,SAAS,YACd,MAAM,OAAO,IAAI,CAAA,MACf,qBAAC,QAAA,EAA4B,OAAO,EAAE,MACpC,UAAA;AAAA,MAAA,oBAAC,QAAA,EAAK,WAAU,0BAAyB,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,EAAE,KAAA,GAC/D,UAAA,EAAE,QAAQ,EAAE,gBACf;AAAA,MACA;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,UAAU,QAAQ,CAAC;AAAA,UACnB,SAAS,MAAM;AACb,gBAAI,YAAY;AACd,oBAAM,YAAY,MAAM,OAAA;AACxB,oBAAM,MAAM,MAAM;AAAA,gBAChB;AAAA,gBACA;AAAA,kBACE,gBAAgB,EAAE;AAAA,kBAClB;AAAA,kBACA,MAAM;AAAA,gBAAA;AAAA,cACR;AAEF,sBAAQ,EAAE;AACV,wBAAU,GAAG;AACb,oBAAM,KAAA;AAAA,YACR,CAAC,EAAE,MAAM,QAAQ,KAAK;AAAA,UACxB;AAAA,UACD,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,IAED,KA1BS,EAAE,cA2Bb,CACD;AAAA,IAEF,MAAM,YACJ,OAAO,CAAA,MAAK,EAAE,IAAI,EAClB,IAAI,CAAA,MACH,qBAAC,QAAA,EAAoB,OAAO,EAAE,MAC5B,UAAA;AAAA,MAAA,qBAAC,QAAA,EAAK,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,EAAE,KAAA,GAC5B,UAAA;AAAA,QAAA,EAAE;AAAA,QAAO;AAAA,QAAG,EAAE;AAAA,MAAA,GACjB;AAAA,0BACC,QAAA,EAAK,WAAU,yBAAyB,UAAA,KAAK,EAAE,SAAS,GAAE;AAAA,MAC3D;AAAA,QAAC;AAAA,QAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,UAAU;AAAA,UACV,SAAS,MAAM;AACb,gBAAI,YAAY;AACd,oBAAM,KAAK,WAAW,EAAE,QAAQ,EAAE,QAAQ;AAC1C,oBAAM,KAAA;AAAA,YACR,CAAC,EAAE,MAAM,QAAQ,KAAK;AAAA,UACxB;AAAA,UACD,UAAA;AAAA,QAAA;AAAA,MAAA;AAAA,IAED,KAjBS,EAAE,MAkBb,CACD;AAAA,IAEF,SACC,oBAAC,QAAA,EAAK,WAAU,0BAAyB,MAAK,SAC3C,UAAA,MAAA,CACH;AAAA,EAAA,GAEJ;AAEJ;"}