@hexclave/js 1.0.0

package/dist/lib/stack-app/url-targets.test.d.ts

@@ -0,0 +1 @@
+export { };

package/dist/lib/stack-app/url-targets.test.js

@@ -0,0 +1,213 @@
+const require_chunk = require('../../chunk-BE-pF4vm.js');
+let vitest = require("vitest");
+let __url_targets_js = require("./url-targets.js");
+
+//#region src/lib/stack-app/url-targets.test.ts
+(0, vitest.describe)("handler URL targets", () => {
+	(0, vitest.afterEach)(() => {
+		vitest.vi.unstubAllEnvs();
+	});
+	(0, vitest.it)("treats handler-component targets the same as omitted values", () => {
+		(0, vitest.expect)((0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: {
+				handler: "/custom-handler",
+				signIn: { type: "handler-component" }
+			}
+		}).signIn).toBe("/custom-handler/sign-in");
+	});
+	(0, vitest.it)("treats custom v0 page targets like legacy string targets", () => {
+		const urls = (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: {
+				handler: "/custom-handler",
+				signIn: { type: "handler-component" },
+				signUp: {
+					type: "custom",
+					url: "/sign-up-explicit",
+					version: 0
+				}
+			}
+		});
+		(0, vitest.expect)(urls.signIn).toBe("/custom-handler/sign-in");
+		(0, vitest.expect)(urls.signUp).toBe("/sign-up-explicit");
+	});
+	(0, vitest.it)("throws on v0 custom target for handler page", () => {
+		(0, vitest.expect)(() => (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { handler: {
+				type: "custom",
+				url: "/custom-handler",
+				version: 0
+			} }
+		})).toThrowError(/cannot be a custom page/);
+	});
+	(0, vitest.it)("supports the latest documented custom target version", () => {
+		const signInPrompt = (0, __url_targets_js.getPagePrompt)("signIn");
+		if (signInPrompt == null) throw new Error("Expected signIn prompt metadata to exist");
+		(0, vitest.expect)((0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { signIn: {
+				type: "custom",
+				url: "/custom-sign-in",
+				version: signInPrompt.latestVersion
+			} }
+		}).signIn).toBe("/custom-sign-in");
+	});
+	(0, vitest.it)("throws on custom target versions newer than the latest supported version", () => {
+		const signInPrompt = (0, __url_targets_js.getPagePrompt)("signIn");
+		if (signInPrompt == null) throw new Error("Expected signIn prompt metadata to exist");
+		(0, vitest.expect)(() => (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { signIn: {
+				type: "custom",
+				url: "/custom-sign-in",
+				version: signInPrompt.latestVersion + 1
+			} }
+		})).toThrowError(/Unsupported custom page version/);
+	});
+	(0, vitest.it)("throws on non-zero custom version for handler page", () => {
+		(0, vitest.expect)(() => (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { handler: {
+				type: "custom",
+				url: "/custom-handler",
+				version: 1
+			} }
+		})).toThrowError(/cannot be a custom page/);
+	});
+	(0, vitest.it)("uses hosted defaults for unspecified URLs", () => {
+		vitest.vi.stubEnv("NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX", ".example-stack-hosted.test");
+		const urls = (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: {
+				signUp: "/sign-up",
+				default: { type: "hosted" }
+			}
+		});
+		(0, vitest.expect)(urls.signUp).toBe("/sign-up");
+		(0, vitest.expect)(urls.signIn).toBe("https://project-id.example-stack-hosted.test/handler/sign-in");
+		(0, vitest.expect)(urls.cliAuthConfirm).toBe("https://project-id.example-stack-hosted.test/handler/cli-auth-confirm");
+	});
+	(0, vitest.it)("rejects absolute OAuth callback string targets", () => {
+		(0, vitest.expect)(() => (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { oauthCallback: "https://app.example.test/oauth-callback" }
+		})).toThrowErrorMatchingInlineSnapshot(`
+      [HexclaveAssertionError: OAuth callback URLs must be relative.
+
+      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]
+    `);
+	});
+	(0, vitest.it)("rejects absolute OAuth callback custom targets", () => {
+		(0, vitest.expect)(() => (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { oauthCallback: {
+				type: "custom",
+				url: "https://app.example.test/oauth-callback",
+				version: 0
+			} }
+		})).toThrowErrorMatchingInlineSnapshot(`
+      [HexclaveAssertionError: OAuth callback URLs must be relative.
+
+      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]
+    `);
+	});
+	(0, vitest.it)("inherits a hosted default target for the OAuth callback", () => {
+		vitest.vi.stubEnv("NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX", ".example-stack-hosted.test");
+		const urls = (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { default: { type: "hosted" } }
+		});
+		(0, vitest.expect)(urls.signIn).toBe("https://project-id.example-stack-hosted.test/handler/sign-in");
+		(0, vitest.expect)(urls.oauthCallback).toBe("https://project-id.example-stack-hosted.test/handler/oauth-callback");
+	});
+	(0, vitest.it)("supports custom CLI auth confirmation targets", () => {
+		const cliAuthConfirmPrompt = (0, __url_targets_js.getPagePrompt)("cliAuthConfirm");
+		if (cliAuthConfirmPrompt == null) throw new Error("Expected cliAuthConfirm prompt metadata to exist");
+		(0, vitest.expect)((0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { cliAuthConfirm: {
+				type: "custom",
+				url: "/cli/authorize",
+				version: cliAuthConfirmPrompt.latestVersion
+			} }
+		}).cliAuthConfirm).toBe("/cli/authorize");
+	});
+	(0, vitest.it)("builds CLI auth login URLs from the resolved confirmation target", () => {
+		(0, vitest.expect)((0, __url_targets_js.buildCliAuthConfirmUrl)({
+			cliAuthConfirmUrl: "/cli/authorize",
+			appUrl: "https://app.example.test/base",
+			loginCode: "login-code"
+		})).toBe("https://app.example.test/cli/authorize?login_code=login-code");
+	});
+	(0, vitest.it)("uses default target for unknown /handler/* pages", () => {
+		vitest.vi.stubEnv("NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX", ".example-stack-hosted.test");
+		(0, vitest.expect)((0, __url_targets_js.resolveUnknownHandlerPathFallbackUrl)({
+			defaultTarget: { type: "hosted" },
+			projectId: "project-id",
+			unknownPath: "custom-page"
+		})).toBe("https://project-id.example-stack-hosted.test/handler/custom-page");
+	});
+	(0, vitest.it)("uses the full hosted handler URL template when configured", () => {
+		vitest.vi.stubEnv("NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE", "http://{projectId}.localhost:${NEXT_PUBLIC_STACK_PORT_PREFIX:-81}09/{hostedPath}");
+		vitest.vi.stubEnv("NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX", "93");
+		const urls = (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { default: { type: "hosted" } }
+		});
+		(0, vitest.expect)(urls.signIn).toBe("http://project-id.localhost:9309/handler/sign-in");
+		(0, vitest.expect)(urls.accountSettings).toBe("http://project-id.localhost:9309/handler/account-settings");
+	});
+	(0, vitest.it)("validates the hosted handler URL template placeholders", () => {
+		vitest.vi.stubEnv("NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE", "http://localhost:9309/{projectId}/handler");
+		(0, vitest.expect)(() => (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { default: { type: "hosted" } }
+		})).toThrowError(/\{projectId\} and \{hostedPath\}/);
+	});
+	(0, vitest.it)("rejects hosted handler URL templates that put the project ID in the path", () => {
+		vitest.vi.stubEnv("NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE", "http://localhost:9309/{projectId}/{hostedPath}");
+		(0, vitest.expect)(() => (0, __url_targets_js.resolveHandlerUrls)({
+			projectId: "project-id",
+			urls: { default: { type: "hosted" } }
+		})).toThrowErrorMatchingInlineSnapshot(`
+      [HexclaveAssertionError: The hosted handler URL template must put {projectId} in the hostname.
+
+      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]
+    `);
+	});
+});
+(0, vitest.describe)("isLocalHandlerUrlTarget", () => {
+	(0, vitest.it)("treats relative handler URLs as local targets", () => {
+		(0, vitest.expect)((0, __url_targets_js.isLocalHandlerUrlTarget)({
+			targetUrl: "/handler/sign-in",
+			handlerPath: "/handler",
+			currentOrigin: "http://p91.localhost:9101"
+		})).toBe(true);
+	});
+	(0, vitest.it)("treats same-origin absolute handler URLs as local targets", () => {
+		(0, vitest.expect)((0, __url_targets_js.isLocalHandlerUrlTarget)({
+			targetUrl: "http://p91.localhost:9101/handler/sign-in",
+			handlerPath: "/handler",
+			currentOrigin: "http://p91.localhost:9101"
+		})).toBe(true);
+	});
+	(0, vitest.it)("treats cross-origin absolute handler URLs as non-local targets", () => {
+		(0, vitest.expect)((0, __url_targets_js.isLocalHandlerUrlTarget)({
+			targetUrl: "https://project-id.built-with-hexclave.com/handler/sign-in",
+			handlerPath: "/handler",
+			currentOrigin: "http://p91.localhost:9101"
+		})).toBe(false);
+	});
+	(0, vitest.it)("treats non-handler paths as non-local targets", () => {
+		(0, vitest.expect)((0, __url_targets_js.isLocalHandlerUrlTarget)({
+			targetUrl: "/projects",
+			handlerPath: "/handler",
+			currentOrigin: "http://p91.localhost:9101"
+		})).toBe(false);
+	});
+});
+
+//#endregion
+//# sourceMappingURL=url-targets.test.js.map

package/dist/lib/stack-app/url-targets.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-targets.test.js","names":[],"sources":["../../../src/lib/stack-app/url-targets.test.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY, INSTEAD EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { afterEach, describe, expect, it, vi } from \"vitest\";\nimport { buildCliAuthConfirmUrl, getPagePrompt, isLocalHandlerUrlTarget, resolveHandlerUrls, resolveUnknownHandlerPathFallbackUrl } from \"./url-targets\";\n\ndescribe(\"handler URL targets\", () => {\n  afterEach(() => {\n    vi.unstubAllEnvs();\n  });\n\n  it(\"treats handler-component targets the same as omitted values\", () => {\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: \"/custom-handler\",\n        signIn: { type: \"handler-component\" },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"/custom-handler/sign-in\");\n  });\n\n  it(\"treats custom v0 page targets like legacy string targets\", () => {\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: \"/custom-handler\",\n        signIn: { type: \"handler-component\" },\n        signUp: { type: \"custom\", url: \"/sign-up-explicit\", version: 0 },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"/custom-handler/sign-in\");\n    expect(urls.signUp).toBe(\"/sign-up-explicit\");\n  });\n\n  it(\"throws on v0 custom target for handler page\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: { type: \"custom\", url: \"/custom-handler\", version: 0 },\n      },\n    })).toThrowError(/cannot be a custom page/);\n  });\n\n  it(\"supports the latest documented custom target version\", () => {\n    const signInPrompt = getPagePrompt(\"signIn\");\n    if (signInPrompt == null) {\n      throw new Error(\"Expected signIn prompt metadata to exist\");\n    }\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        signIn: { type: \"custom\", url: \"/custom-sign-in\", version: signInPrompt.latestVersion },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"/custom-sign-in\");\n  });\n\n  it(\"throws on custom target versions newer than the latest supported version\", () => {\n    const signInPrompt = getPagePrompt(\"signIn\");\n    if (signInPrompt == null) {\n      throw new Error(\"Expected signIn prompt metadata to exist\");\n    }\n\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        signIn: { type: \"custom\", url: \"/custom-sign-in\", version: signInPrompt.latestVersion + 1 },\n      },\n    })).toThrowError(/Unsupported custom page version/);\n  });\n\n  it(\"throws on non-zero custom version for handler page\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        handler: { type: \"custom\", url: \"/custom-handler\", version: 1 },\n      },\n    })).toThrowError(/cannot be a custom page/);\n  });\n\n  it(\"uses hosted defaults for unspecified URLs\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX\", \".example-stack-hosted.test\");\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        signUp: \"/sign-up\",\n        default: { type: \"hosted\" },\n      },\n    });\n\n    expect(urls.signUp).toBe(\"/sign-up\");\n    expect(urls.signIn).toBe(\"https://project-id.example-stack-hosted.test/handler/sign-in\");\n    expect(urls.cliAuthConfirm).toBe(\"https://project-id.example-stack-hosted.test/handler/cli-auth-confirm\");\n  });\n\n  it(\"rejects absolute OAuth callback string targets\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        oauthCallback: \"https://app.example.test/oauth-callback\",\n      },\n    })).toThrowErrorMatchingInlineSnapshot(`\n      [HexclaveAssertionError: OAuth callback URLs must be relative.\n\n      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]\n    `);\n  });\n\n  it(\"rejects absolute OAuth callback custom targets\", () => {\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        oauthCallback: { type: \"custom\", url: \"https://app.example.test/oauth-callback\", version: 0 },\n      },\n    })).toThrowErrorMatchingInlineSnapshot(`\n      [HexclaveAssertionError: OAuth callback URLs must be relative.\n\n      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]\n    `);\n  });\n\n  it(\"inherits a hosted default target for the OAuth callback\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX\", \".example-stack-hosted.test\");\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"https://project-id.example-stack-hosted.test/handler/sign-in\");\n    expect(urls.oauthCallback).toBe(\"https://project-id.example-stack-hosted.test/handler/oauth-callback\");\n  });\n\n  it(\"supports custom CLI auth confirmation targets\", () => {\n    const cliAuthConfirmPrompt = getPagePrompt(\"cliAuthConfirm\");\n    if (cliAuthConfirmPrompt == null) {\n      throw new Error(\"Expected cliAuthConfirm prompt metadata to exist\");\n    }\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        cliAuthConfirm: { type: \"custom\", url: \"/cli/authorize\", version: cliAuthConfirmPrompt.latestVersion },\n      },\n    });\n\n    expect(urls.cliAuthConfirm).toBe(\"/cli/authorize\");\n  });\n\n  it(\"builds CLI auth login URLs from the resolved confirmation target\", () => {\n    expect(buildCliAuthConfirmUrl({\n      cliAuthConfirmUrl: \"/cli/authorize\",\n      appUrl: \"https://app.example.test/base\",\n      loginCode: \"login-code\",\n    })).toBe(\"https://app.example.test/cli/authorize?login_code=login-code\");\n  });\n\n  it(\"uses default target for unknown /handler/* pages\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_DOMAIN_SUFFIX\", \".example-stack-hosted.test\");\n\n    const url = resolveUnknownHandlerPathFallbackUrl({\n      defaultTarget: { type: \"hosted\" },\n      projectId: \"project-id\",\n      unknownPath: \"custom-page\",\n    });\n\n    expect(url).toBe(\"https://project-id.example-stack-hosted.test/handler/custom-page\");\n  });\n\n  it(\"uses the full hosted handler URL template when configured\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE\", \"http://{projectId}.localhost:${NEXT_PUBLIC_STACK_PORT_PREFIX:-81}09/{hostedPath}\");\n    vi.stubEnv(\"NEXT_PUBLIC_HEXCLAVE_PORT_PREFIX\", \"93\");\n\n    const urls = resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    });\n\n    expect(urls.signIn).toBe(\"http://project-id.localhost:9309/handler/sign-in\");\n    expect(urls.accountSettings).toBe(\"http://project-id.localhost:9309/handler/account-settings\");\n  });\n\n  it(\"validates the hosted handler URL template placeholders\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE\", \"http://localhost:9309/{projectId}/handler\");\n\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    })).toThrowError(/\\{projectId\\} and \\{hostedPath\\}/);\n  });\n\n  it(\"rejects hosted handler URL templates that put the project ID in the path\", () => {\n    vi.stubEnv(\"NEXT_PUBLIC_STACK_HOSTED_HANDLER_URL_TEMPLATE\", \"http://localhost:9309/{projectId}/{hostedPath}\");\n\n    expect(() => resolveHandlerUrls({\n      projectId: \"project-id\",\n      urls: {\n        default: { type: \"hosted\" },\n      },\n    })).toThrowErrorMatchingInlineSnapshot(`\n      [HexclaveAssertionError: The hosted handler URL template must put {projectId} in the hostname.\n\n      This is likely an error in Hexclave. Please make sure you are running the newest version and report it.]\n    `);\n  });\n});\n\ndescribe(\"isLocalHandlerUrlTarget\", () => {\n  it(\"treats relative handler URLs as local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"/handler/sign-in\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(true);\n  });\n\n  it(\"treats same-origin absolute handler URLs as local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"http://p91.localhost:9101/handler/sign-in\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(true);\n  });\n\n  it(\"treats cross-origin absolute handler URLs as non-local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"https://project-id.built-with-hexclave.com/handler/sign-in\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(false);\n  });\n\n  it(\"treats non-handler paths as non-local targets\", () => {\n    expect(isLocalHandlerUrlTarget({\n      targetUrl: \"/projects\",\n      handlerPath: \"/handler\",\n      currentOrigin: \"http://p91.localhost:9101\",\n    })).toBe(false);\n  });\n});\n"],"mappings":";;;;;qBAOS,6BAA6B;AACpC,6BAAgB;AACd,YAAG,eAAe;GAClB;AAEF,gBAAG,qEAAqE;AAStE,8DARgC;GAC9B,WAAW;GACX,MAAM;IACJ,SAAS;IACT,QAAQ,EAAE,MAAM,qBAAqB;IACtC;GACF,CAAC,CAEU,OAAO,CAAC,KAAK,0BAA0B;GACnD;AAEF,gBAAG,kEAAkE;EACnE,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM;IACJ,SAAS;IACT,QAAQ,EAAE,MAAM,qBAAqB;IACrC,QAAQ;KAAE,MAAM;KAAU,KAAK;KAAqB,SAAS;KAAG;IACjE;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,0BAA0B;AACnD,qBAAO,KAAK,OAAO,CAAC,KAAK,oBAAoB;GAC7C;AAEF,gBAAG,qDAAqD;AACtD,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS;IAAG,EAChE;GACF,CAAC,CAAC,CAAC,aAAa,0BAA0B;GAC3C;AAEF,gBAAG,8DAA8D;EAC/D,MAAM,mDAA6B,SAAS;AAC5C,MAAI,gBAAgB,KAClB,OAAM,IAAI,MAAM,2CAA2C;AAU7D,8DAPgC;GAC9B,WAAW;GACX,MAAM,EACJ,QAAQ;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS,aAAa;IAAe,EACxF;GACF,CAAC,CAEU,OAAO,CAAC,KAAK,kBAAkB;GAC3C;AAEF,gBAAG,kFAAkF;EACnF,MAAM,mDAA6B,SAAS;AAC5C,MAAI,gBAAgB,KAClB,OAAM,IAAI,MAAM,2CAA2C;AAG7D,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,QAAQ;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS,aAAa,gBAAgB;IAAG,EAC5F;GACF,CAAC,CAAC,CAAC,aAAa,kCAAkC;GACnD;AAEF,gBAAG,4DAA4D;AAC7D,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS;IAAE,MAAM;IAAU,KAAK;IAAmB,SAAS;IAAG,EAChE;GACF,CAAC,CAAC,CAAC,aAAa,0BAA0B;GAC3C;AAEF,gBAAG,mDAAmD;AACpD,YAAG,QAAQ,kDAAkD,6BAA6B;EAE1F,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM;IACJ,QAAQ;IACR,SAAS,EAAE,MAAM,UAAU;IAC5B;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,WAAW;AACpC,qBAAO,KAAK,OAAO,CAAC,KAAK,+DAA+D;AACxF,qBAAO,KAAK,eAAe,CAAC,KAAK,wEAAwE;GACzG;AAEF,gBAAG,wDAAwD;AACzD,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,eAAe,2CAChB;GACF,CAAC,CAAC,CAAC,mCAAmC;;;;MAIrC;GACF;AAEF,gBAAG,wDAAwD;AACzD,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,eAAe;IAAE,MAAM;IAAU,KAAK;IAA2C,SAAS;IAAG,EAC9F;GACF,CAAC,CAAC,CAAC,mCAAmC;;;;MAIrC;GACF;AAEF,gBAAG,iEAAiE;AAClE,YAAG,QAAQ,kDAAkD,6BAA6B;EAE1F,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,+DAA+D;AACxF,qBAAO,KAAK,cAAc,CAAC,KAAK,sEAAsE;GACtG;AAEF,gBAAG,uDAAuD;EACxD,MAAM,2DAAqC,iBAAiB;AAC5D,MAAI,wBAAwB,KAC1B,OAAM,IAAI,MAAM,mDAAmD;AAUrE,8DAPgC;GAC9B,WAAW;GACX,MAAM,EACJ,gBAAgB;IAAE,MAAM;IAAU,KAAK;IAAkB,SAAS,qBAAqB;IAAe,EACvG;GACF,CAAC,CAEU,eAAe,CAAC,KAAK,iBAAiB;GAClD;AAEF,gBAAG,0EAA0E;AAC3E,kEAA8B;GAC5B,mBAAmB;GACnB,QAAQ;GACR,WAAW;GACZ,CAAC,CAAC,CAAC,KAAK,+DAA+D;GACxE;AAEF,gBAAG,0DAA0D;AAC3D,YAAG,QAAQ,kDAAkD,6BAA6B;AAQ1F,gFANiD;GAC/C,eAAe,EAAE,MAAM,UAAU;GACjC,WAAW;GACX,aAAa;GACd,CAAC,CAES,CAAC,KAAK,mEAAmE;GACpF;AAEF,gBAAG,mEAAmE;AACpE,YAAG,QAAQ,iDAAiD,mFAAmF;AAC/I,YAAG,QAAQ,oCAAoC,KAAK;EAEpD,MAAM,gDAA0B;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC;AAEF,qBAAO,KAAK,OAAO,CAAC,KAAK,mDAAmD;AAC5E,qBAAO,KAAK,gBAAgB,CAAC,KAAK,4DAA4D;GAC9F;AAEF,gBAAG,gEAAgE;AACjE,YAAG,QAAQ,iDAAiD,4CAA4C;AAExG,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC,CAAC,CAAC,aAAa,mCAAmC;GACpD;AAEF,gBAAG,kFAAkF;AACnF,YAAG,QAAQ,iDAAiD,iDAAiD;AAE7G,oEAAgC;GAC9B,WAAW;GACX,MAAM,EACJ,SAAS,EAAE,MAAM,UAAU,EAC5B;GACF,CAAC,CAAC,CAAC,mCAAmC;;;;MAIrC;GACF;EACF;qBAEO,iCAAiC;AACxC,gBAAG,uDAAuD;AACxD,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,KAAK;GACd;AAEF,gBAAG,mEAAmE;AACpE,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,KAAK;GACd;AAEF,gBAAG,wEAAwE;AACzE,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,MAAM;GACf;AAEF,gBAAG,uDAAuD;AACxD,mEAA+B;GAC7B,WAAW;GACX,aAAa;GACb,eAAe;GAChB,CAAC,CAAC,CAAC,KAAK,MAAM;GACf;EACF"}

package/dist/lib/stack-app/users/index.d.ts

@@ -0,0 +1,357 @@
+import { AsyncStoreProperty, AuthLike } from "../common.js";
+import { Customer } from "../customers/index.js";
+import { AdminTeamPermission, TeamPermission } from "../permissions/index.js";
+import { ApiKeyCreationOptions, UserApiKey, UserApiKeyFirstView } from "../api-keys/index.js";
+import { DeprecatedOAuthConnection, OAuthConnection } from "../connected-accounts/index.js";
+import { ContactChannel, ContactChannelCreateOptions, ServerContactChannel, ServerContactChannelCreateOptions } from "../contact-channels/index.js";
+import { NotificationCategory } from "../notification-categories/index.js";
+import { EditableTeamMemberProfile, ReceivedTeamInvitation, ServerListTeamsOptions, ServerTeam, ServerTeamCreateOptions, Team, TeamCreateOptions } from "../teams/index.js";
+import { AdminOwnedProject, AdminProjectCreateOptions } from "../projects/index.js";
+import { KnownErrors } from "@hexclave/shared";
+import { CurrentUserCrud } from "@hexclave/shared/dist/interface/crud/current-user";
+import { Result } from "@hexclave/shared/dist/utils/results";
+import { ProviderType } from "@hexclave/shared/dist/utils/oauth";
+import { RestrictedReason } from "@hexclave/shared/dist/schema-fields";
+import { InternalSession } from "@hexclave/shared/dist/sessions";
+import { ReadonlyJson } from "@hexclave/shared/dist/utils/json";
+import { UsersCrud } from "@hexclave/shared/dist/interface/crud/users";
+import { GeoInfo } from "@hexclave/shared/dist/utils/geo";
+
+//#region src/lib/stack-app/users/index.d.ts
+declare function withUserDestructureGuard<T extends object>(target: T): T;
+type OAuthProvider = {
+  readonly id: string;
+  readonly type: string;
+  readonly userId: string;
+  readonly accountId?: string;
+  readonly email?: string;
+  readonly allowSignIn: boolean;
+  readonly allowConnectedAccounts: boolean;
+  update(data: {
+    allowSignIn?: boolean;
+    allowConnectedAccounts?: boolean;
+  }): Promise<Result<void, InstanceType<typeof KnownErrors.OAuthProviderAccountIdAlreadyUsedForSignIn>>>;
+  delete(): Promise<void>;
+};
+type ServerOAuthProvider = {
+  readonly id: string;
+  readonly type: string;
+  readonly userId: string;
+  readonly accountId: string;
+  readonly email?: string;
+  readonly allowSignIn: boolean;
+  readonly allowConnectedAccounts: boolean;
+  update(data: {
+    accountId?: string;
+    email?: string;
+    allowSignIn?: boolean;
+    allowConnectedAccounts?: boolean;
+  }): Promise<Result<void, InstanceType<typeof KnownErrors.OAuthProviderAccountIdAlreadyUsedForSignIn>>>;
+  delete(): Promise<void>;
+};
+/**
+ * Contains everything related to the current user session.
+ */
+type Auth = AuthLike<{}> & {
+  readonly _internalSession: InternalSession;
+  readonly currentSession: {
+    getTokens(): Promise<{
+      accessToken: string | null;
+      refreshToken: string | null;
+    }>;
+  };
+};
+/**
+ * ```
+ * +----------+-------------+-------------------+
+ * |    \     |   !Server   |      Server       |
+ * +----------+-------------+-------------------+
+ * | !Session | User        | ServerUser        |
+ * | Session  | CurrentUser | CurrentServerUser |
+ * +----------+-------------+-------------------+
+ * ```
+ *
+ * The fields on each of these types are available iff:
+ * BaseUser: true
+ * Auth: Session
+ * ServerBaseUser: Server
+ * UserExtra: Session OR Server
+ *
+ * The types are defined as follows (in the typescript manner):
+ * User = BaseUser
+ * CurrentUser = BaseUser & Auth & UserExtra
+ * ServerUser = BaseUser & ServerBaseUser & UserExtra
+ * CurrentServerUser = BaseUser & ServerBaseUser & Auth & UserExtra
+ **/
+type BaseUser = {
+  readonly id: string;
+  readonly displayName: string | null;
+  /**
+   * The user's email address.
+   *
+   * Note: This might NOT be unique across multiple users, so always use `id` for unique identification.
+   */
+  readonly primaryEmail: string | null;
+  readonly primaryEmailVerified: boolean;
+  readonly profileImageUrl: string | null;
+  readonly signedUpAt: Date;
+  readonly clientMetadata: any;
+  readonly clientReadOnlyMetadata: any;
+  /**
+   * Whether the user has a password set.
+   */
+  readonly hasPassword: boolean;
+  readonly otpAuthEnabled: boolean;
+  readonly passkeyAuthEnabled: boolean;
+  readonly isMultiFactorRequired: boolean;
+  readonly isAnonymous: boolean;
+  /**
+   * Whether the user is in restricted state (signed up but hasn't completed onboarding requirements).
+   * For example, if email verification is required but the user hasn't verified their email yet.
+   */
+  readonly isRestricted: boolean;
+  /**
+   * The reason why the user is restricted, e.g., { type: "email_not_verified" }, { type: "anonymous" }, or { type: "restricted_by_administrator" }.
+   * Null if the user is not restricted.
+   */
+  readonly restrictedReason: RestrictedReason | null;
+  toClientJson(): CurrentUserCrud["Client"]["Read"];
+  /**
+   * @deprecated, use contact channel's usedForAuth instead
+   */
+  readonly emailAuthEnabled: boolean;
+  /**
+   * @deprecated
+   */
+  readonly oauthProviders: readonly {
+    id: string;
+  }[];
+};
+type UserExtra = {
+  setDisplayName(displayName: string | null): Promise<void>; /** @deprecated Use contact channel's sendVerificationEmail instead */
+  sendVerificationEmail(): Promise<KnownErrors["EmailAlreadyVerified"] | void>;
+  setClientMetadata(metadata: any): Promise<void>;
+  updatePassword(options: {
+    oldPassword: string;
+    newPassword: string;
+  }): Promise<KnownErrors["PasswordConfirmationMismatch"] | KnownErrors["PasswordRequirementsNotMet"] | void>;
+  setPassword(options: {
+    password: string;
+  }): Promise<KnownErrors["PasswordRequirementsNotMet"] | void>;
+  /**
+   * A shorthand method to update multiple fields of the user at once.
+   */
+  update(update: UserUpdateOptions): Promise<void>;
+  listContactChannels(): Promise<ContactChannel[]>;
+  createContactChannel(data: ContactChannelCreateOptions): Promise<ContactChannel>;
+  listNotificationCategories(): Promise<NotificationCategory[]>;
+  delete(): Promise<void>; /** @deprecated Use `getOrLinkConnectedAccount` for redirect behavior, or `getConnectedAccount({ provider, providerAccountId })` for existence check. */
+  getConnectedAccount(id: ProviderType, options: {
+    or: 'redirect';
+    scopes?: string[];
+  }): Promise<DeprecatedOAuthConnection>; /** @deprecated Use `getConnectedAccount({ provider, providerAccountId })` for existence check, or `getOrLinkConnectedAccount` for redirect behavior. */
+  getConnectedAccount(id: ProviderType, options?: {
+    or?: 'redirect' | 'throw' | 'return-null';
+    scopes?: string[];
+  }): Promise<DeprecatedOAuthConnection | null>; /** Get a specific connected account by provider and providerAccountId. Returns null if not found. */
+  getConnectedAccount(account: {
+    provider: string;
+    providerAccountId: string;
+  }): Promise<OAuthConnection | null>; /** List all connected accounts for this user (only those with allowConnectedAccounts enabled). */
+  listConnectedAccounts(): Promise<OAuthConnection[]>;
+  /** React hook to list all connected accounts. */
+  /** Redirect the user to the OAuth flow to link a new connected account. Always redirects, never returns. */
+  linkConnectedAccount(provider: string, options?: {
+    scopes?: string[];
+  }): Promise<void>; /** Get a connected account for the given provider, or redirect to link one if none exists or the token/scopes are insufficient. */
+  getOrLinkConnectedAccount(provider: string, options?: {
+    scopes?: string[];
+  }): Promise<OAuthConnection>; /** React hook: get a connected account for the given provider, or redirect to link one if none exists or the token/scopes are insufficient. */
+  hasPermission(scope: Team, permissionId: string): Promise<boolean>;
+  hasPermission(permissionId: string): Promise<boolean>;
+  getPermission(scope: Team, permissionId: string): Promise<TeamPermission | null>;
+  getPermission(permissionId: string): Promise<TeamPermission | null>;
+  listPermissions(scope: Team, options?: {
+    recursive?: boolean;
+  }): Promise<TeamPermission[]>;
+  listPermissions(options?: {
+    recursive?: boolean;
+  }): Promise<TeamPermission[]>;
+  readonly selectedTeam: Team | null;
+  setSelectedTeam(teamOrId: string | Team | null): Promise<void>;
+  createTeam(data: TeamCreateOptions): Promise<Team>;
+  leaveTeam(team: Team): Promise<void>;
+  /**
+   * Lists all pending team invitations sent to any of the current user's verified email addresses.
+   *
+   * This allows the user to discover which teams have invited them, even if they haven't
+   * joined those teams yet. Only invitations sent to verified email addresses are included.
+   *
+   * @returns An array of `ReceivedTeamInvitation` objects, each containing the team ID, team
+   * display name, recipient email, and expiration date.
+   *
+   * @example
+   * ```ts
+   * const invitations = await user.listTeamInvitations();
+   * for (const invitation of invitations) {
+   *   console.log(`Invited to ${invitation.teamDisplayName} via ${invitation.recipientEmail}`);
+   * }
+   * ```
+   */
+  listTeamInvitations(): Promise<ReceivedTeamInvitation[]>;
+  /**
+   * Lists all pending team invitations sent to any of the current user's verified email addresses.
+   *
+   * React hook version of `listTeamInvitations()`. Automatically re-renders when invitations change.
+   */
+  getActiveSessions(): Promise<ActiveSession[]>;
+  revokeSession(sessionId: string): Promise<void>;
+  getTeamProfile(team: Team): Promise<EditableTeamMemberProfile>;
+  createApiKey(options: ApiKeyCreationOptions<"user">): Promise<UserApiKeyFirstView>;
+  listOAuthProviders(): Promise<OAuthProvider[]>;
+  getOAuthProvider(id: string): Promise<OAuthProvider | null>;
+  registerPasskey(options?: {
+    hostname?: string;
+  }): Promise<Result<undefined, KnownErrors["PasskeyRegistrationFailed"] | KnownErrors["PasskeyWebAuthnError"]>>;
+} & AsyncStoreProperty<"apiKeys", [], UserApiKey[], true> & AsyncStoreProperty<"team", [id: string], Team | null, false> & AsyncStoreProperty<"teams", [], Team[], true> & AsyncStoreProperty<"teamInvitations", [], ReceivedTeamInvitation[], true> & AsyncStoreProperty<"permission", [scope: Team, permissionId: string, options?: {
+  recursive?: boolean;
+}], TeamPermission | null, false> & AsyncStoreProperty<"permissions", [scope: Team, options?: {
+  recursive?: boolean;
+}], TeamPermission[], true>;
+type InternalUserExtra = {
+  createProject(newProject: AdminProjectCreateOptions): Promise<AdminOwnedProject>;
+  transferProject(projectIdToTransfer: string, newTeamId: string): Promise<void>;
+} & AsyncStoreProperty<"ownedProjects", [], AdminOwnedProject[], true>;
+type User = BaseUser;
+type CurrentUser = BaseUser & Auth & UserExtra & Customer;
+type CurrentInternalUser = CurrentUser & InternalUserExtra;
+type ProjectCurrentUser<ProjectId> = ProjectId extends "internal" ? CurrentInternalUser : CurrentUser;
+type TokenPartialUser = Pick<User, "id" | "displayName" | "primaryEmail" | "primaryEmailVerified" | "isAnonymous" | "isMultiFactorRequired" | "isRestricted" | "restrictedReason">;
+type SyncedPartialUser = TokenPartialUser & Pick<User, "id" | "displayName" | "primaryEmail" | "primaryEmailVerified" | "profileImageUrl" | "signedUpAt" | "clientMetadata" | "clientReadOnlyMetadata" | "isAnonymous" | "hasPassword" | "isRestricted" | "restrictedReason">;
+type ActiveSession = {
+  id: string;
+  userId: string;
+  createdAt: Date;
+  isImpersonation: boolean;
+  lastUsedAt: Date | undefined;
+  isCurrentSession: boolean;
+  geoInfo?: GeoInfo;
+};
+type UserUpdateOptions = {
+  displayName?: string | null;
+  clientMetadata?: ReadonlyJson;
+  selectedTeamId?: string | null;
+  totpMultiFactorSecret?: Uint8Array | null;
+  profileImageUrl?: string | null;
+  otpAuthEnabled?: boolean;
+  passkeyAuthEnabled?: boolean;
+  primaryEmail?: string | null;
+};
+declare function userUpdateOptionsToCrud(options: UserUpdateOptions): CurrentUserCrud["Client"]["Update"];
+type ServerBaseUser = {
+  setPrimaryEmail(email: string | null, options?: {
+    verified?: boolean | undefined;
+  }): Promise<void>;
+  readonly lastActiveAt: Date;
+  readonly serverMetadata: any;
+  setServerMetadata(metadata: any): Promise<void>;
+  setClientReadOnlyMetadata(metadata: any): Promise<void>; /** Whether the user is restricted by an administrator. Can be set manually or by sign-up rules. */
+  readonly restrictedByAdmin: boolean; /** Public reason shown to the user explaining why they are restricted. Optional. */
+  readonly restrictedByAdminReason: string | null; /** Private details about the restriction (e.g., which sign-up rule triggered). Only visible to server access and above. */
+  readonly restrictedByAdminPrivateDetails: string | null; /** Best-effort ISO country code captured at sign-up time from request geo headers. */
+  readonly countryCode: string | null; /** Server-only risk scores used during sign-up risk evaluation. */
+  readonly riskScores: {
+    readonly signUp: {
+      readonly bot: number;
+      readonly freeTrialAbuse: number;
+    };
+  };
+  createTeam(data: Omit<ServerTeamCreateOptions, "creatorUserId">): Promise<ServerTeam>;
+  listContactChannels(): Promise<ServerContactChannel[]>;
+  createContactChannel(data: ServerContactChannelCreateOptions): Promise<ServerContactChannel>;
+  update(user: ServerUserUpdateOptions): Promise<void>;
+  grantPermission(scope: Team, permissionId: string): Promise<void>;
+  grantPermission(permissionId: string): Promise<void>;
+  revokePermission(scope: Team, permissionId: string): Promise<void>;
+  revokePermission(permissionId: string): Promise<void>;
+  getPermission(scope: Team, permissionId: string): Promise<TeamPermission | null>;
+  getPermission(permissionId: string): Promise<TeamPermission | null>;
+  hasPermission(scope: Team, permissionId: string): Promise<boolean>;
+  hasPermission(permissionId: string): Promise<boolean>;
+  listPermissions(scope: Team, options?: {
+    recursive?: boolean;
+  }): Promise<TeamPermission[]>;
+  listPermissions(options?: {
+    recursive?: boolean;
+  }): Promise<TeamPermission[]>;
+  listOAuthProviders(): Promise<ServerOAuthProvider[]>;
+  getOAuthProvider(id: string): Promise<ServerOAuthProvider | null>;
+  /**
+   * Creates a new session object with a refresh token for this user. Can be used to impersonate them.
+   */
+  createSession(options?: {
+    expiresInMillis?: number;
+    isImpersonation?: boolean;
+  }): Promise<{
+    getTokens(): Promise<{
+      accessToken: string | null;
+      refreshToken: string | null;
+    }>;
+  }>;
+} & AsyncStoreProperty<"team", [id: string], ServerTeam | null, false> & AsyncStoreProperty<"teams", [options?: ServerListTeamsOptions], ServerTeam[] & {
+  nextCursor: string | null;
+}, true> & AsyncStoreProperty<"permission", [scope: Team, permissionId: string, options?: {
+  direct?: boolean;
+}], AdminTeamPermission | null, false> & AsyncStoreProperty<"permissions", [scope: Team, options?: {
+  direct?: boolean;
+}], AdminTeamPermission[], true>;
+/**
+ * A user including sensitive fields that should only be used on the server, never sent to the client
+ * (such as sensitive information and serverMetadata).
+ */
+type ServerUser = ServerBaseUser & BaseUser & UserExtra & Customer<true>;
+type CurrentServerUser = Auth & ServerUser;
+type CurrentInternalServerUser = CurrentServerUser & InternalUserExtra;
+type ProjectCurrentServerUser<ProjectId> = ProjectId extends "internal" ? CurrentInternalServerUser : CurrentServerUser;
+type SyncedPartialServerUser = SyncedPartialUser & Pick<ServerUser, "serverMetadata">;
+type ServerUserUpdateOptions = {
+  primaryEmail?: string | null;
+  primaryEmailVerified?: boolean;
+  primaryEmailAuthEnabled?: boolean;
+  clientReadOnlyMetadata?: ReadonlyJson;
+  serverMetadata?: ReadonlyJson;
+  password?: string;
+  restrictedByAdmin?: boolean;
+  restrictedByAdminReason?: string | null;
+  restrictedByAdminPrivateDetails?: string | null;
+  countryCode?: string | null;
+  riskScores?: {
+    signUp: {
+      bot: number;
+      freeTrialAbuse: number;
+    };
+  };
+} & UserUpdateOptions;
+declare function serverUserUpdateOptionsToCrud(options: ServerUserUpdateOptions): CurrentUserCrud["Server"]["Update"];
+type ServerUserCreateOptions = {
+  primaryEmail?: string | null;
+  primaryEmailAuthEnabled?: boolean;
+  password?: string;
+  otpAuthEnabled?: boolean;
+  displayName?: string;
+  primaryEmailVerified?: boolean;
+  clientMetadata?: any;
+  clientReadOnlyMetadata?: any;
+  serverMetadata?: any;
+  countryCode?: string | null;
+  riskScores?: {
+    signUp: {
+      bot: number;
+      freeTrialAbuse: number;
+    };
+  };
+};
+declare function serverUserCreateOptionsToCrud(options: ServerUserCreateOptions): UsersCrud["Server"]["Create"];
+//#endregion
+export { ActiveSession, Auth, BaseUser, CurrentInternalServerUser, CurrentInternalUser, CurrentServerUser, CurrentUser, InternalUserExtra, OAuthProvider, ProjectCurrentServerUser, ProjectCurrentUser, ServerBaseUser, ServerOAuthProvider, ServerUser, ServerUserCreateOptions, ServerUserUpdateOptions, SyncedPartialServerUser, SyncedPartialUser, TokenPartialUser, User, UserExtra, UserUpdateOptions, serverUserCreateOptionsToCrud, serverUserUpdateOptionsToCrud, userUpdateOptionsToCrud, withUserDestructureGuard };
+//# sourceMappingURL=index.d.ts.map

package/dist/lib/stack-app/users/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../../src/lib/stack-app/users/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;iBA0BgB,wBAAA,kBAAA,CAA2C,MAAA,EAAQ,CAAA,GAAI,CAAA;AAAA,KAgB3D,aAAA;EAAA,SACD,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA;EAAA,SACA,WAAA;EAAA,SACA,sBAAA;EACT,MAAA,CAAO,IAAA;IAAQ,WAAA;IAAuB,sBAAA;EAAA,IAAqC,OAAA,CAAQ,MAAA,OACjF,YAAA,QAAoB,WAAA,CAAY,0CAAA;EAElC,MAAA,IAAU,OAAA;AAAA;AAAA,KAGA,mBAAA;EAAA,SACD,EAAA;EAAA,SACA,IAAA;EAAA,SACA,MAAA;EAAA,SACA,SAAA;EAAA,SACA,KAAA;EAAA,SACA,WAAA;EAAA,SACA,sBAAA;EACT,MAAA,CAAO,IAAA;IAAQ,SAAA;IAAoB,KAAA;IAAgB,WAAA;IAAuB,sBAAA;EAAA,IAAqC,OAAA,CAAQ,MAAA,OACrH,YAAA,QAAoB,WAAA,CAAY,0CAAA;EAElC,MAAA,IAAU,OAAA;AAAA;;;;KAOA,IAAA,GAAO,QAAA;EAAA,SACR,gBAAA,EAAkB,eAAA;EAAA,SAClB,cAAA;IACP,SAAA,IAAa,OAAA;MAAU,WAAA;MAA4B,YAAA;IAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;KA2B3C,QAAA;EAAA,SACD,EAAA;EAAA,SAEA,WAAA;EA1Ca;;;;;EAAA,SAiDb,YAAA;EAAA,SACA,oBAAA;EAAA,SACA,eAAA;EAAA,SAEA,UAAA,EAAY,IAAA;EAAA,SAEZ,cAAA;EAAA,SACA,sBAAA;EA5CM;;;EAAA,SAiDN,WAAA;EAAA,SACA,cAAA;EAAA,SACA,kBAAA;EAAA,SAEA,qBAAA;EAAA,SACA,WAAA;EAtDM;;;;EAAA,SA2DN,YAAA;EAhCC;;;;EAAA,SAqCD,gBAAA,EAAkB,gBAAA;EAC3B,YAAA,IAAgB,eAAA;EAAe;;;EAAA,SAKtB,gBAAA;EAjCA;;;EAAA,SAqCA,cAAA;IAA2B,EAAA;EAAA;AAAA;AAAA,KAG1B,SAAA;EACV,cAAA,CAAe,WAAA,kBAA6B,OAAA,QA3BnC;EA6BT,qBAAA,IAAyB,OAAA,CAAQ,WAAA;EACjC,iBAAA,CAAkB,QAAA,QAAgB,OAAA;EAClC,cAAA,CAAe,OAAA;IAAW,WAAA;IAAqB,WAAA;EAAA,IAAuB,OAAA,CAAQ,WAAA,mCAA8C,WAAA;EAC5H,WAAA,CAAY,OAAA;IAAW,QAAA;EAAA,IAAqB,OAAA,CAAQ,WAAA;EAThB;;;EAcpC,MAAA,CAAO,MAAA,EAAQ,iBAAA,GAAoB,OAAA;EAEnC,mBAAA,IAAuB,OAAA,CAAQ,cAAA;EAC/B,oBAAA,CAAqB,IAAA,EAAM,2BAAA,GAA8B,OAAA,CAAQ,cAAA;EAEjE,0BAAA,IAA8B,OAAA,CAAQ,oBAAA;EAEtC,MAAA,IAAU,OAAA,QAfe;EAkBzB,mBAAA,CAAoB,EAAA,EAAI,YAAA,EAAc,OAAA;IAAW,EAAA;IAAgB,MAAA;EAAA,IAAsB,OAAA,CAAQ,yBAAA,GAf3C;EAiBpD,mBAAA,CAAoB,EAAA,EAAI,YAAA,EAAc,OAAA;IAAY,EAAA;IAA2C,MAAA;EAAA,IAAsB,OAAA,CAAQ,yBAAA,UAVpG;EAYvB,mBAAA,CAAoB,OAAA;IAAW,QAAA;IAAkB,iBAAA;EAAA,IAA8B,OAAA,CAAQ,eAAA,UATzD;EAa9B,qBAAA,IAAyB,OAAA,CAAQ,eAAA;EART;EAAuE;EAW/F,oBAAA,CAAqB,QAAA,UAAkB,OAAA;IAAY,MAAA;EAAA,IAAsB,OAAA,QAT0C;EAWnH,yBAAA,CAA0B,QAAA,UAAkB,OAAA;IAAY,MAAA;EAAA,IAAsB,OAAA,CAAQ,eAAA,GAL7D;EAQzB,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EAClD,aAAA,CAAc,YAAA,WAAuB,OAAA;EAErC,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAC1D,aAAA,CAAc,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAE7C,eAAA,CAAgB,KAAA,EAAO,IAAA,EAAM,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EACzE,eAAA,CAAgB,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EAAA,SAGnD,YAAA,EAAc,IAAA;EACvB,eAAA,CAAgB,QAAA,WAAmB,IAAA,UAAc,OAAA;EACjD,UAAA,CAAW,IAAA,EAAM,iBAAA,GAAoB,OAAA,CAAQ,IAAA;EAC7C,SAAA,CAAU,IAAA,EAAM,IAAA,GAAO,OAAA;EANqC;;;;;;;;;;;;;;;;;EAyB5D,mBAAA,IAAuB,OAAA,CAAQ,sBAAA;EAWT;;;;;EAJtB,iBAAA,IAAqB,OAAA,CAAQ,aAAA;EAC7B,aAAA,CAAc,SAAA,WAAoB,OAAA;EAClC,cAAA,CAAe,IAAA,EAAM,IAAA,GAAO,OAAA,CAAQ,yBAAA;EAEpC,YAAA,CAAa,OAAA,EAAS,qBAAA,WAAgC,OAAA,CAAQ,mBAAA;EAE9D,kBAAA,IAAsB,OAAA,CAAQ,aAAA;EAE9B,gBAAA,CAAiB,EAAA,WAAa,OAAA,CAAQ,aAAA;EAEtC,eAAA,CAAgB,OAAA;IAAY,QAAA;EAAA,IAAsB,OAAA,CAAQ,MAAA,YAAkB,WAAA,gCAA2C,WAAA;AAAA,IAEvH,kBAAA,gBAAkC,UAAA,YAClC,kBAAA,UAA4B,EAAA,WAAa,IAAA,kBACzC,kBAAA,cAAgC,IAAA,YAChC,kBAAA,wBAA0C,sBAAA,YAC1C,kBAAA,gBAAkC,KAAA,EAAO,IAAA,EAAM,YAAA,UAAsB,OAAA;EAAY,SAAA;AAAA,IAAwB,cAAA,kBACzG,kBAAA,iBAAmC,KAAA,EAAO,IAAA,EAAM,OAAA;EAAY,SAAA;AAAA,IAAwB,cAAA;AAAA,KAE1E,iBAAA;EAER,aAAA,CAAc,UAAA,EAAY,yBAAA,GAA4B,OAAA,CAAQ,iBAAA;EAC9D,eAAA,CAAgB,mBAAA,UAA6B,SAAA,WAAoB,OAAA;AAAA,IAEjE,kBAAA,sBAAwC,iBAAA;AAAA,KAEhC,IAAA,GAAO,QAAA;AAAA,KAEP,WAAA,GAAc,QAAA,GAAW,IAAA,GAAO,SAAA,GAAY,QAAA;AAAA,KAE5C,mBAAA,GAAsB,WAAA,GAAc,iBAAA;AAAA,KAEpC,kBAAA,cAAgC,SAAA,sBAA+B,mBAAA,GAAsB,WAAA;AAAA,KAErF,gBAAA,GAAmB,IAAA,CAC7B,IAAA;AAAA,KAWU,iBAAA,GAAoB,gBAAA,GAAmB,IAAA,CACjD,IAAA;AAAA,KAgBU,aAAA;EACV,EAAA;EACA,MAAA;EACA,SAAA,EAAW,IAAA;EACX,eAAA;EACA,UAAA,EAAY,IAAA;EACZ,gBAAA;EACA,OAAA,GAAU,OAAA;AAAA;AAAA,KAGA,iBAAA;EACV,WAAA;EACA,cAAA,GAAiB,YAAA;EACjB,cAAA;EACA,qBAAA,GAAwB,UAAA;EACxB,eAAA;EACA,cAAA;EACA,kBAAA;EACA,YAAA;AAAA;AAAA,iBAEc,uBAAA,CAAwB,OAAA,EAAS,iBAAA,GAAoB,eAAA;AAAA,KAczD,cAAA;EACV,eAAA,CAAgB,KAAA,iBAAsB,OAAA;IAAY,QAAA;EAAA,IAAmC,OAAA;EAAA,SAE5E,YAAA,EAAc,IAAA;EAAA,SAEd,cAAA;EACT,iBAAA,CAAkB,QAAA,QAAgB,OAAA;EAClC,yBAAA,CAA0B,QAAA,QAAgB,OAAA,QAtKrB;EAAA,SAyKZ,iBAAA,WAzKwD;EAAA,SA2KxD,uBAAA,iBAzKqB;EAAA,SA2KrB,+BAAA,iBAzKT;EAAA,SA2KS,WAAA,iBAxKT;EAAA,SA0KS,UAAA;IAAA,SACE,MAAA;MAAA,SACE,GAAA;MAAA,SACA,cAAA;IAAA;EAAA;EAIb,UAAA,CAAW,IAAA,EAAM,IAAA,CAAK,uBAAA,qBAA4C,OAAA,CAAQ,UAAA;EAE1E,mBAAA,IAAuB,OAAA,CAAQ,oBAAA;EAC/B,oBAAA,CAAqB,IAAA,EAAM,iCAAA,GAAoC,OAAA,CAAQ,oBAAA;EAEvE,MAAA,CAAO,IAAA,EAAM,uBAAA,GAA0B,OAAA;EAEvC,eAAA,CAAgB,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EACpD,eAAA,CAAgB,YAAA,WAAuB,OAAA;EAEvC,gBAAA,CAAiB,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EACrD,gBAAA,CAAiB,YAAA,WAAuB,OAAA;EAExC,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAC1D,aAAA,CAAc,YAAA,WAAuB,OAAA,CAAQ,cAAA;EAE7C,aAAA,CAAc,KAAA,EAAO,IAAA,EAAM,YAAA,WAAuB,OAAA;EAClD,aAAA,CAAc,YAAA,WAAuB,OAAA;EAErC,eAAA,CAAgB,KAAA,EAAO,IAAA,EAAM,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EACzE,eAAA,CAAgB,OAAA;IAAY,SAAA;EAAA,IAAwB,OAAA,CAAQ,cAAA;EAG5D,kBAAA,IAAsB,OAAA,CAAQ,mBAAA;EAE9B,gBAAA,CAAiB,EAAA,WAAa,OAAA,CAAQ,mBAAA;EA/La;;;EAoMnD,aAAA,CAAc,OAAA;IAAY,eAAA;IAA0B,eAAA;EAAA,IAA8B,OAAA;IAChF,SAAA,IAAa,OAAA;MAAU,WAAA;MAA4B,YAAA;IAAA;EAAA;AAAA,IAGrD,kBAAA,UAA4B,EAAA,WAAa,UAAA,kBACzC,kBAAA,WAA6B,OAAA,GAAU,sBAAA,GAAyB,UAAA;EAAiB,UAAA;AAAA,WACjF,kBAAA,gBAAkC,KAAA,EAAO,IAAA,EAAM,YAAA,UAAsB,OAAA;EAAY,MAAA;AAAA,IAAqB,mBAAA,kBACtG,kBAAA,iBAAmC,KAAA,EAAO,IAAA,EAAM,OAAA;EAAY,MAAA;AAAA,IAAqB,mBAAA;;;;;KAMvE,UAAA,GAAa,cAAA,GAAiB,QAAA,GAAW,SAAA,GAAY,QAAA;AAAA,KAErD,iBAAA,GAAoB,IAAA,GAAO,UAAA;AAAA,KAE3B,yBAAA,GAA4B,iBAAA,GAAoB,iBAAA;AAAA,KAEhD,wBAAA,cAAsC,SAAA,sBAA+B,yBAAA,GAA4B,iBAAA;AAAA,KAEjG,uBAAA,GAA0B,iBAAA,GAAoB,IAAA,CACxD,UAAA;AAAA,KAIU,uBAAA;EACV,YAAA;EACA,oBAAA;EACA,uBAAA;EACA,sBAAA,GAAyB,YAAA;EACzB,cAAA,GAAiB,YAAA;EACjB,QAAA;EACA,iBAAA;EACA,uBAAA;EACA,+BAAA;EACA,WAAA;EACA,UAAA;IACE,MAAA;MACE,GAAA;MACA,cAAA;IAAA;EAAA;AAAA,IAGF,iBAAA;AAAA,iBACY,6BAAA,CAA8B,OAAA,EAAS,uBAAA,GAA0B,eAAA;AAAA,KA+BrE,uBAAA;EACV,YAAA;EACA,uBAAA;EACA,QAAA;EACA,cAAA;EACA,WAAA;EACA,oBAAA;EACA,cAAA;EACA,sBAAA;EACA,cAAA;EACA,WAAA;EACA,UAAA;IACE,MAAA;MACE,GAAA;MACA,cAAA;IAAA;EAAA;AAAA;AAAA,iBAIU,6BAAA,CAA8B,OAAA,EAAS,uBAAA,GAA0B,SAAA"}