@hexclave/js 1.0.103 → 1.0.105

package/dist/lib/hexclave-app/apps/implementations/server-app-impl.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-app-impl.js","names":["_HexclaveClientAppImplIncomplete","Result","KnownErrors","HexclaveServerInterface","HexclaveAssertionError","opts","WebAuthnError","InternalSession"],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/server-app-impl.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { HexclaveServerInterface, KnownErrors } from \"@hexclave/shared\";\nimport type { AnalyticsQueryOptions, AnalyticsQueryResponse } from \"@hexclave/shared/dist/interface/crud/analytics\";\nimport { ContactChannelsCrud } from \"@hexclave/shared/dist/interface/crud/contact-channels\";\nimport { ItemCrud } from \"@hexclave/shared/dist/interface/crud/items\";\nimport { NotificationPreferenceCrud } from \"@hexclave/shared/dist/interface/crud/notification-preferences\";\nimport { OAuthProviderCrud } from \"@hexclave/shared/dist/interface/crud/oauth-providers\";\nimport type { CustomerProductsListResponse } from \"@hexclave/shared/dist/interface/crud/products\";\nimport { TeamApiKeysCrud, UserApiKeysCrud, teamApiKeysCreateOutputSchema, userApiKeysCreateOutputSchema } from \"@hexclave/shared/dist/interface/crud/project-api-keys\";\nimport { ProjectPermissionDefinitionsCrud, ProjectPermissionsCrud } from \"@hexclave/shared/dist/interface/crud/project-permissions\";\nimport { TeamInvitationCrud } from \"@hexclave/shared/dist/interface/crud/team-invitation\";\nimport { TeamMemberProfilesCrud } from \"@hexclave/shared/dist/interface/crud/team-member-profiles\";\nimport { TeamPermissionDefinitionsCrud, TeamPermissionsCrud } from \"@hexclave/shared/dist/interface/crud/team-permissions\";\nimport { TeamsCrud } from \"@hexclave/shared/dist/interface/crud/teams\";\nimport { UsersCrud } from \"@hexclave/shared/dist/interface/crud/users\";\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport type { AsyncCache } from \"@hexclave/shared/dist/utils/caches\";\nimport { HexclaveAssertionError, captureError, throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { ProviderType } from \"@hexclave/shared/dist/utils/oauth\";\nimport { runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { suspend } from \"@hexclave/shared/dist/utils/react\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { isUuid } from \"@hexclave/shared/dist/utils/uuids\";\nimport { WebAuthnError, startRegistration } from \"@simplewebauthn/browser\";\nimport * as yup from \"yup\";\nimport { constructRedirectUrl } from \"../../../../utils/url\";\nimport { ApiKey, ApiKeyCreationOptions, ApiKeyUpdateOptions, apiKeyCreationOptionsToCrud, apiKeyUpdateOptionsToCrud } from \"../../api-keys\";\nimport { ConvexCtx, GetCurrentUserOptions } from \"../../common\";\nimport { DeprecatedOAuthConnection, OAuthConnection } from \"../../connected-accounts\";\nimport { ServerContactChannel, ServerContactChannelCreateOptions, ServerContactChannelUpdateOptions, serverContactChannelCreateOptionsToCrud, serverContactChannelUpdateOptionsToCrud } from \"../../contact-channels\";\nimport { Customer, CustomerProductsList, CustomerProductsRequestOptions, InlineProduct, ServerItem } from \"../../customers\";\nimport { DataVaultStore } from \"../../data-vault\";\nimport { EmailDeliveryInfo, SendEmailOptions } from \"../../email\";\nimport { NotificationCategory } from \"../../notification-categories\";\nimport { scopePasskeyRegistrationToHostname } from \"../../passkey-rp-id\";\nimport { AdminProjectPermissionDefinition, AdminTeamPermission, AdminTeamPermissionDefinition } from \"../../permissions\";\nimport { EditableTeamMemberProfile, ReceivedTeamInvitation, SentTeamInvitation, ServerListTeamsOptions, ServerListUsersOptions, ServerTeam, ServerTeamCreateOptions, ServerTeamUpdateOptions, ServerTeamUser, Team, serverTeamCreateOptionsToCrud, serverTeamUpdateOptionsToCrud } from \"../../teams\";\nimport { ProjectCurrentServerUser, ServerOAuthProvider, ServerUser, ServerUserCreateOptions, ServerUserUpdateOptions, serverUserCreateOptionsToCrud, serverUserUpdateOptionsToCrud, withUserDestructureGuard } from \"../../users\";\nimport { StackServerAppConstructorOptions } from \"../interfaces/server-app\";\nimport { _HexclaveClientAppImplIncomplete } from \"./client-app-impl\";\nimport { clientVersion, createCache, createCacheBySession, getDefaultExtraRequestHeaders, getDefaultProjectId, getDefaultPublishableClientKey, getDefaultSecretServerKey, resolveApiUrls, resolveConstructorOptions } from \"./common\";\n\n\nexport class _HexclaveServerAppImplIncomplete<HasTokenStore extends boolean, ProjectId extends string> extends _HexclaveClientAppImplIncomplete<HasTokenStore, ProjectId> {\n  declare protected _interface: HexclaveServerInterface;\n\n  // TODO override the client user cache to use the server user cache, so we save some requests\n  private readonly _currentServerUserCache = createCacheBySession(async (session) => {\n    if (session.isKnownToBeInvalid()) {\n      // see comment in _currentUserCache for more details on why we do this\n      return null;\n    }\n    return await this._interface.getServerUserByToken(session);\n  });\n  private readonly _serverUsersCache = createCache<[\n    cursor?: string,\n    limit?: number,\n    orderBy?: 'signedUpAt' | 'lastActiveAt',\n    desc?: boolean,\n    query?: string,\n    includeRestricted?: boolean,\n    includeAnonymous?: boolean,\n    onlyAnonymous?: boolean,\n    teamId?: string,\n    excludedEmailDomains?: string,\n  ], UsersCrud['Server']['List']>(async ([cursor, limit, orderBy, desc, query, includeRestricted, includeAnonymous, onlyAnonymous, teamId, excludedEmailDomains]) => {\n    if (onlyAnonymous && !includeAnonymous) {\n      throw new HexclaveAssertionError(\"onlyAnonymous=true requires includeAnonymous=true\");\n    }\n    const excludedEmailDomainList = excludedEmailDomains?.split(\",\");\n    if (onlyAnonymous) {\n      return await this._interface.listServerUsers({ cursor, limit, orderBy, desc, query, excludedEmailDomains: excludedEmailDomainList, includeRestricted, includeAnonymous: true, onlyAnonymous: true, teamId });\n    }\n    return await this._interface.listServerUsers({ cursor, limit, orderBy, desc, query, excludedEmailDomains: excludedEmailDomainList, includeRestricted, includeAnonymous, teamId });\n  });\n  private readonly _serverUserCache = createCache<string[], UsersCrud['Server']['Read'] | null>(async ([userId]) => {\n    const user = await this._interface.getServerUserById(userId);\n    return Result.or(user, null);\n  });\n  private readonly _serverTeamsCache = createCache<[\n    userId?: string,\n    orderBy?: 'createdAt',\n    desc?: boolean,\n    cursor?: string,\n    limit?: number,\n    query?: string,\n  ], TeamsCrud['Server']['List']>(async ([userId, orderBy, desc, cursor, limit, query]) => {\n    return await this._interface.listServerTeamsPaginated({ userId, orderBy, desc, cursor, limit, query });\n  });\n  private readonly _serverTeamCache = createCache<string[], TeamsCrud['Server']['Read'] | null>(async ([teamId]) => {\n    // The previous list-and-find implementation treated unknown or malformed IDs as null; preserve that behavior without making an invalid request.\n    if (!isUuid(teamId)) {\n      return null;\n    }\n    try {\n      return await this._interface.getServerTeam(teamId);\n    } catch (error) {\n      if (KnownErrors.TeamNotFound.isInstance(error)) {\n        return null;\n      }\n      throw error;\n    }\n  });\n\n  protected async _refreshTeamMembership(teamId: string, userId: string) {\n    await Promise.all([\n      this._serverTeamMemberProfilesCache.refresh([teamId]),\n      this._serverTeamsCache.refreshWhere(([u]) => u === userId || u === undefined),\n      this._serverUsersCache.refreshWhere((key) => key[8] === teamId),\n    ]);\n  }\n  private readonly _serverUserTeamInvitationsCache = createCache<string[], TeamInvitationCrud['Client']['Read'][]>(async ([userId]) => {\n    return await this._interface.listServerUserTeamInvitations(userId);\n  });\n  private readonly _serverTeamUserPermissionsCache = createCache<\n    [string, string, boolean],\n    TeamPermissionsCrud['Server']['Read'][]\n  >(async ([teamId, userId, recursive]) => {\n    return await this._interface.listServerTeamPermissions({ teamId, userId, recursive }, null);\n  });\n  // Bulk variant: one request returning permissions for every member of a\n  // team. Used by the dashboard's team-member table to avoid N per-row\n  // calls. Keyed without userId so it's a distinct cache entry from the\n  // per-user lookup above.\n  private readonly _serverAllTeamMemberPermissionsCache = createCache<\n    [string, boolean],\n    TeamPermissionsCrud['Server']['Read'][]\n  >(async ([teamId, recursive]) => {\n    return await this._interface.listServerTeamPermissions({ teamId, recursive }, null);\n  });\n  private readonly _serverUserProjectPermissionsCache = createCache<\n    [string, boolean],\n    ProjectPermissionsCrud['Server']['Read'][]\n  >(async ([userId, recursive]) => {\n    return await this._interface.listServerProjectPermissions({ userId, recursive }, null);\n  });\n  /** @deprecated Used by legacy getConnectedAccount(providerId) — uses old per-provider access token endpoint */\n  private readonly _serverUserOAuthConnectionAccessTokensCache = createCache<[string, string, string], { accessToken: string } | null>(\n    async ([userId, providerId, scope]) => {\n      try {\n        const result = await this._interface.createServerProviderAccessToken(userId, providerId, scope || \"\");\n        return { accessToken: result.access_token };\n      } catch (err) {\n        if (!(KnownErrors.OAuthAccessTokenNotAvailable.isInstance(err) || KnownErrors.OAuthConnectionDoesNotHaveRequiredScope.isInstance(err) || KnownErrors.OAuthConnectionNotConnectedToUser.isInstance(err))) {\n          throw err;\n        }\n      }\n      return null;\n    }\n  );\n  /** @deprecated Used by legacy getConnectedAccount(providerId) — combines token check + redirect */\n  private readonly _serverUserOAuthConnectionCache = createCache<[string, ProviderType, string, boolean], DeprecatedOAuthConnection | null>(\n    async ([userId, providerId, scope, redirect]) => {\n      return await this._getUserOAuthConnectionCacheFn({\n        getUser: async () => Result.orThrow(await this._serverUserCache.getOrWait([userId], \"write-only\")),\n        getOrWaitOAuthToken: async () => Result.orThrow(await this._serverUserOAuthConnectionAccessTokensCache.getOrWait([userId, providerId, scope || \"\"] as const, \"write-only\")),\n        providerId,\n        scope,\n        redirect,\n        session: null,\n      });\n    }\n  );\n  private readonly _serverUserConnectedAccountsCache = createCache<[string], OAuthConnection[]>(\n    async ([userId]) => {\n      const result = await this._interface.listServerConnectedAccounts(userId);\n      return result.items.map((item) => this._createServerOAuthConnectionFromCrudItem(userId, item));\n    }\n  );\n  private readonly _serverUserOAuthConnectionAccessTokensByAccountCache = createCache<[string, string, string, string], { accessToken: string } | null>(\n    async ([userId, providerId, providerAccountId, scope]) => {\n      try {\n        const result = await this._interface.createServerProviderAccessTokenByAccount(userId, providerId, providerAccountId, scope || \"\");\n        return { accessToken: result.access_token };\n      } catch (err) {\n        if (!(KnownErrors.OAuthAccessTokenNotAvailable.isInstance(err) || KnownErrors.OAuthConnectionDoesNotHaveRequiredScope.isInstance(err) || KnownErrors.OAuthConnectionNotConnectedToUser.isInstance(err))) {\n          throw err;\n        }\n      }\n      return null;\n    }\n  );\n  private readonly _serverTeamMemberProfilesCache = createCache<[string], TeamMemberProfilesCrud['Server']['Read'][]>(\n    async ([teamId]) => {\n      return await this._interface.listServerTeamMemberProfiles({ teamId });\n    }\n  );\n  private readonly _serverTeamInvitationsCache = createCache<[string], TeamInvitationCrud['Server']['Read'][]>(\n    async ([teamId]) => {\n      return await this._interface.listServerTeamInvitations({ teamId });\n    }\n  );\n  private readonly _serverUserTeamProfileCache = createCache<[string, string], TeamMemberProfilesCrud['Client']['Read']>(\n    async ([teamId, userId]) => {\n      return await this._interface.getServerTeamMemberProfile({ teamId, userId });\n    }\n  );\n  private readonly _serverContactChannelsCache = createCache<[string], ContactChannelsCrud['Server']['Read'][]>(\n    async ([userId]) => {\n      return await this._interface.listServerContactChannels(userId);\n    }\n  );\n  private readonly _serverNotificationCategoriesCache = createCache<[string], NotificationPreferenceCrud['Server']['Read'][]>(\n    async ([userId]) => {\n      return await this._interface.listServerNotificationCategories(userId);\n    }\n  );\n  private readonly _serverDataVaultStoreValueCache = createCache<[string, string, string], string | null>(async ([storeId, key, secret]) => {\n    return await this._interface.getDataVaultStoreValue(secret, storeId, key);\n  });\n\n  private readonly _emailDeliveryInfoCache = createCache(async () => {\n    return await this._interface.getEmailDeliveryInfo();\n  });\n\n  private readonly _serverUserApiKeysCache = createCache<[string], UserApiKeysCrud['Server']['Read'][]>(\n    async ([userId]) => {\n      const result = await this._interface.listProjectApiKeys({\n        user_id: userId,\n      }, null, \"server\");\n      return result as UserApiKeysCrud['Server']['Read'][];\n    }\n  );\n\n  private readonly _serverTeamApiKeysCache = createCache<[string], TeamApiKeysCrud['Server']['Read'][]>(\n    async ([teamId]) => {\n      const result = await this._interface.listProjectApiKeys({\n        team_id: teamId,\n      }, null, \"server\");\n      return result as TeamApiKeysCrud['Server']['Read'][];\n    }\n  );\n\n  private readonly _convexIdentitySubjectCache = createCache<[ConvexCtx], string | null>(\n    async ([ctx]) => {\n      const identity = await ctx.auth.getUserIdentity();\n      return identity ? identity.subject : null;\n    }\n  );\n\n  private readonly _serverCheckApiKeyCache = createCache<[\"user\" | \"team\", string], UserApiKeysCrud['Server']['Read'] | TeamApiKeysCrud['Server']['Read'] | null>(async ([type, apiKey]) => {\n    const result = await this._interface.checkProjectApiKey(\n      type,\n      apiKey,\n      null,\n      \"server\",\n    );\n    return result;\n  });\n\n  private readonly _serverOAuthProvidersCache = createCache<[string], OAuthProviderCrud['Server']['Read'][]>(\n    async ([userId]) => {\n      return await this._interface.listServerOAuthProviders({ user_id: userId });\n    }\n  );\n\n  private readonly _serverTeamItemsCache = createCache<[string, string], ItemCrud['Client']['Read']>(\n    async ([teamId, itemId]) => {\n      return await this._interface.getItem({ teamId, itemId }, null, \"server\");\n    }\n  );\n\n  private readonly _serverUserItemsCache = createCache<[string, string], ItemCrud['Client']['Read']>(\n    async ([userId, itemId]) => {\n      return await this._interface.getItem({ userId, itemId }, null, \"server\");\n    }\n  );\n\n  private readonly _serverCustomItemsCache = createCache<[string, string], ItemCrud['Client']['Read']>(\n    async ([customCustomerId, itemId]) => {\n      return await this._interface.getItem({ customCustomerId, itemId }, null, \"server\");\n    }\n  );\n\n  private readonly _serverUserProductsCache = createCache<[string, string | null, number | null], CustomerProductsListResponse>(\n    async ([userId, cursor, limit]) => {\n      return await this._interface.listProducts({\n        customer_type: \"user\",\n        customer_id: userId,\n        cursor: cursor ?? undefined,\n        limit: limit ?? undefined,\n      }, null, \"server\");\n    }\n  );\n\n  private readonly _serverTeamProductsCache = createCache<[string, string | null, number | null], CustomerProductsListResponse>(\n    async ([teamId, cursor, limit]) => {\n      return await this._interface.listProducts({\n        customer_type: \"team\",\n        customer_id: teamId,\n        cursor: cursor ?? undefined,\n        limit: limit ?? undefined,\n      }, null, \"server\");\n    }\n  );\n\n  private readonly _serverCustomProductsCache = createCache<[string, string | null, number | null], CustomerProductsListResponse>(\n    async ([customCustomerId, cursor, limit]) => {\n      return await this._interface.listProducts({\n        customer_type: \"custom\",\n        customer_id: customCustomerId,\n        cursor: cursor ?? undefined,\n        limit: limit ?? undefined,\n      }, null, \"server\");\n    }\n  );\n\n  protected _createServerCustomer(userIdOrTeamId: string, type: \"user\" | \"team\"): Omit<Customer<true>, \"id\"> {\n    const app = this;\n    const productsCache = type === \"user\" ? app._serverUserProductsCache : app._serverTeamProductsCache;\n    const customerOptions = type === \"user\" ? { userId: userIdOrTeamId } : { teamId: userIdOrTeamId };\n    return {\n      ...this._createCustomer(userIdOrTeamId, type, null),\n      async getItem(itemId: string) {\n        return await app.getItem({ itemId, ...customerOptions });\n      },\n      async grantProduct(productOptions: { productId: string, quantity?: number } | { product: InlineProduct, quantity?: number }) {\n        if (type === \"user\") {\n          if (\"productId\" in productOptions) {\n            await app.grantProduct({ userId: userIdOrTeamId, productId: productOptions.productId, quantity: productOptions.quantity });\n          } else {\n            await app.grantProduct({ userId: userIdOrTeamId, product: productOptions.product, quantity: productOptions.quantity });\n          }\n        } else {\n          if (\"productId\" in productOptions) {\n            await app.grantProduct({ teamId: userIdOrTeamId, productId: productOptions.productId, quantity: productOptions.quantity });\n          } else {\n            await app.grantProduct({ teamId: userIdOrTeamId, product: productOptions.product, quantity: productOptions.quantity });\n          }\n        }\n        await productsCache.refresh([userIdOrTeamId, null, null]);\n      },\n      async createCheckoutUrl(options: { productId: string, returnUrl?: string } | { product: InlineProduct, returnUrl?: string }) {\n        const productIdOrInline = \"productId\" in options ? options.productId : options.product;\n        return await app._interface.createCheckoutUrl(type, userIdOrTeamId, productIdOrInline, null, options.returnUrl, \"server\");\n      },\n    };\n  }\n\n  private async _updateServerUser(userId: string, update: ServerUserUpdateOptions): Promise<UsersCrud['Server']['Read']> {\n    const result = await this._interface.updateServerUser(userId, serverUserUpdateOptionsToCrud(update));\n    await this._refreshUsers();\n    return result;\n  }\n\n  protected _serverEditableTeamProfileFromCrud(crud: TeamMemberProfilesCrud['Client']['Read']): EditableTeamMemberProfile {\n    const app = this;\n    return {\n      displayName: crud.display_name,\n      profileImageUrl: crud.profile_image_url,\n      async update(update: { displayName?: string, profileImageUrl?: string }) {\n        await app._interface.updateServerTeamMemberProfile({\n          teamId: crud.team_id,\n          userId: crud.user_id,\n          profile: {\n            display_name: update.displayName,\n            profile_image_url: update.profileImageUrl,\n          },\n        });\n        await app._serverUserTeamProfileCache.refresh([crud.team_id, crud.user_id]);\n      }\n    };\n  }\n\n  protected _serverContactChannelFromCrud(userId: string, crud: ContactChannelsCrud['Server']['Read']): ServerContactChannel {\n    const app = this;\n    return {\n      id: crud.id,\n      value: crud.value,\n      type: crud.type,\n      isVerified: crud.is_verified,\n      isPrimary: crud.is_primary,\n      usedForAuth: crud.used_for_auth,\n      async sendVerificationEmail(options?: { callbackUrl?: string }) {\n        await app._interface.sendServerContactChannelVerificationEmail(userId, crud.id, options?.callbackUrl ?? constructRedirectUrl(app._getUrls().emailVerification, \"callbackUrl\"));\n      },\n      async update(data: ServerContactChannelUpdateOptions) {\n        await app._interface.updateServerContactChannel(userId, crud.id, serverContactChannelUpdateOptionsToCrud(data));\n        await Promise.all([\n          app._serverContactChannelsCache.refresh([userId]),\n          app._serverUserCache.refresh([userId])\n        ]);\n      },\n      async delete() {\n        await app._interface.deleteServerContactChannel(userId, crud.id);\n        await Promise.all([\n          app._serverContactChannelsCache.refresh([userId]),\n          app._serverUserCache.refresh([userId])\n        ]);\n      },\n    };\n  }\n\n  protected _serverNotificationCategoryFromCrud(userId: string, crud: NotificationPreferenceCrud['Server']['Read']): NotificationCategory {\n    const app = this;\n    return {\n      id: crud.notification_category_id,\n      name: crud.notification_category_name,\n      enabled: crud.enabled,\n      canDisable: crud.can_disable,\n\n      async setEnabled(enabled: boolean) {\n        await app._interface.setServerNotificationsEnabled(userId, crud.notification_category_id, enabled);\n        await app._serverNotificationCategoriesCache.refresh([userId]);\n      },\n    };\n  }\n\n  protected _serverOAuthProviderFromCrud(crud: OAuthProviderCrud['Server']['Read']) {\n    const app = this;\n    return {\n      id: crud.id,\n      type: crud.type,\n      userId: crud.user_id,\n      accountId: crud.account_id,\n      email: crud.email,\n      allowSignIn: crud.allow_sign_in,\n      allowConnectedAccounts: crud.allow_connected_accounts,\n\n      async update(data: { accountId?: string, email?: string, allowSignIn?: boolean, allowConnectedAccounts?: boolean }): Promise<Result<void,\n        InstanceType<typeof KnownErrors.OAuthProviderAccountIdAlreadyUsedForSignIn>\n      >> {\n        try {\n          await app._interface.updateServerOAuthProvider(crud.user_id, crud.id, {\n            account_id: data.accountId,\n            email: data.email,\n            allow_sign_in: data.allowSignIn,\n            allow_connected_accounts: data.allowConnectedAccounts,\n          });\n          await Promise.all([\n            app._serverOAuthProvidersCache.refresh([crud.user_id]),\n            app._serverUserConnectedAccountsCache.refresh([crud.user_id]),\n          ]);\n          return Result.ok(undefined);\n        } catch (error) {\n          if (KnownErrors.OAuthProviderAccountIdAlreadyUsedForSignIn.isInstance(error)) {\n            return Result.error(error);\n          }\n          throw error;\n        }\n      },\n\n      async delete() {\n        await app._interface.deleteServerOAuthProvider(crud.user_id, crud.id);\n        await Promise.all([\n          app._serverOAuthProvidersCache.refresh([crud.user_id]),\n          app._serverUserConnectedAccountsCache.refresh([crud.user_id]),\n        ]);\n      },\n    };\n  }\n\n  constructor(options: StackServerAppConstructorOptions<HasTokenStore, ProjectId>, extraOptions?: { uniqueIdentifier?: string, checkString?: string, interface?: HexclaveServerInterface }) {\n    const resolvedOptions = resolveConstructorOptions(options);\n\n    const publishableClientKey = resolvedOptions.publishableClientKey ?? getDefaultPublishableClientKey();\n\n    super(resolvedOptions, {\n      ...extraOptions,\n      interface: extraOptions?.interface ?? (() => {\n        const apiUrls = resolveApiUrls(resolvedOptions.baseUrl);\n        return new HexclaveServerInterface({\n          getBaseUrl: () => apiUrls()[0],\n          getApiUrls: apiUrls,\n          projectId: resolvedOptions.projectId ?? getDefaultProjectId(),\n          extraRequestHeaders: resolvedOptions.extraRequestHeaders ?? getDefaultExtraRequestHeaders(),\n          clientVersion,\n          ...(publishableClientKey != null ? { publishableClientKey } : {}),\n          secretServerKey: resolvedOptions.secretServerKey ?? getDefaultSecretServerKey(),\n        });\n      })(),\n    });\n  }\n\n\n  protected _serverApiKeyFromCrud(crud: TeamApiKeysCrud['Client']['Read']): ApiKey<\"team\">;\n  protected _serverApiKeyFromCrud(crud: UserApiKeysCrud['Client']['Read']): ApiKey<\"user\">;\n  protected _serverApiKeyFromCrud(crud: yup.InferType<typeof teamApiKeysCreateOutputSchema>): ApiKey<\"team\", true>;\n  protected _serverApiKeyFromCrud(crud: yup.InferType<typeof userApiKeysCreateOutputSchema>): ApiKey<\"user\", true>;\n  protected _serverApiKeyFromCrud(crud: TeamApiKeysCrud['Client']['Read'] | UserApiKeysCrud['Client']['Read'] | yup.InferType<typeof teamApiKeysCreateOutputSchema> | yup.InferType<typeof userApiKeysCreateOutputSchema>): ApiKey<\"user\" | \"team\", boolean> {\n    return {\n      ...this._baseApiKeyFromCrud(crud),\n      async revoke() {\n        await this.update({ revoked: true });\n      },\n      update: async (options: ApiKeyUpdateOptions) => {\n        await this._interface.updateProjectApiKey(\n          crud.type === \"team\" ? { team_id: crud.team_id } : { user_id: crud.user_id },\n          crud.id,\n          await apiKeyUpdateOptionsToCrud(crud.type, options),\n          null,\n          \"server\");\n        if (crud.type === \"team\") {\n          await this._serverTeamApiKeysCache.refresh([crud.team_id]);\n        } else {\n          await this._serverUserApiKeysCache.refresh([crud.user_id]);\n        }\n      },\n    };\n  }\n\n  protected _createServerOAuthConnectionFromCrudItem(\n    userId: string,\n    item: { provider: string, provider_account_id: string },\n  ): OAuthConnection {\n    const app = this;\n    const providerId = item.provider;\n    const providerAccountId = item.provider_account_id;\n    return {\n      id: providerId, // deprecated, for backward compat\n      provider: providerId,\n      providerAccountId,\n      async getAccessToken(options?: { scopes?: string[] }) {\n        const scopeString = options?.scopes?.join(\" \") ?? \"\";\n        const result = Result.orThrow(await app._serverUserOAuthConnectionAccessTokensByAccountCache.getOrWait([userId, providerId, providerAccountId, scopeString], \"write-only\"));\n        if (!result) {\n          const scopeDetail = scopeString ? `The requested scopes [${scopeString}] are not available on the existing token.` : \"The OAuth refresh token has likely been revoked or expired.\";\n          return Result.error(new KnownErrors.OAuthAccessTokenNotAvailable(providerId, `${scopeDetail} The user needs to re-authorize by calling \\`linkConnectedAccount\\` or using \\`getOrLinkConnectedAccount\\`.`));\n        }\n        return Result.ok(result);\n      },\n    };\n  }\n\n  protected _serverUserFromCrud(crud: UsersCrud['Server']['Read']): ServerUser {\n    const app = this;\n\n    /** @deprecated The string-based overloads are deprecated. Use `getConnectedAccount({ provider, providerAccountId })` for existence check. */\n    async function getConnectedAccount(id: ProviderType, options?: { scopes?: string[] }): Promise<DeprecatedOAuthConnection | null>;\n    async function getConnectedAccount(id: ProviderType, options: { or: 'redirect', scopes?: string[] }): Promise<DeprecatedOAuthConnection>;\n    async function getConnectedAccount(account: { provider: string, providerAccountId: string }): Promise<OAuthConnection | null>;\n    async function getConnectedAccount(\n      idOrAccount: ProviderType | { provider: string, providerAccountId: string },\n      options?: { or?: 'redirect', scopes?: string[] }\n    ): Promise<DeprecatedOAuthConnection | OAuthConnection | null> {\n      const scopeString = options?.scopes?.join(\" \") ?? \"\";\n\n      // Check if it's the new object-based API\n      if (typeof idOrAccount === 'object' && 'provider' in idOrAccount && 'providerAccountId' in idOrAccount) {\n        const { provider, providerAccountId } = idOrAccount;\n        // Check if the account exists in the connected accounts list\n        const connectedAccounts = Result.orThrow(await app._serverUserConnectedAccountsCache.getOrWait([crud.id], \"write-only\"));\n        const found = connectedAccounts.find(\n          a => a.provider === provider && a.providerAccountId === providerAccountId\n        );\n        if (!found) {\n          return null;\n        }\n        return found;\n      }\n\n      // Original behavior: by provider ID (returns first match)\n      return Result.orThrow(await app._serverUserOAuthConnectionCache.getOrWait([crud.id, idOrAccount, scopeString, options?.or === 'redirect'], \"write-only\"));\n    }\n\n\n    const serverUser = withUserDestructureGuard({\n      ...super._createBaseUser(crud),\n      lastActiveAt: new Date(crud.last_active_at_millis),\n      serverMetadata: crud.server_metadata,\n      restrictedByAdminPrivateDetails: crud.restricted_by_admin_private_details,\n      countryCode: crud.country_code,\n      riskScores: {\n        signUp: {\n          bot: crud.risk_scores.sign_up.bot,\n          freeTrialAbuse: crud.risk_scores.sign_up.free_trial_abuse,\n        },\n      },\n      async setPrimaryEmail(email: string | null, options?: { verified?: boolean }) {\n        await app._updateServerUser(crud.id, { primaryEmail: email, primaryEmailVerified: options?.verified });\n      },\n      async grantPermission(scopeOrPermissionId: Team | string, permissionId?: string): Promise<void> {\n        if (scopeOrPermissionId && typeof scopeOrPermissionId !== 'string' && permissionId) {\n          const scope = scopeOrPermissionId;\n          await app._interface.grantServerTeamUserPermission(scope.id, crud.id, permissionId);\n\n          for (const recursive of [true, false]) {\n            await app._serverTeamUserPermissionsCache.refresh([scope.id, crud.id, recursive]);\n            await app._serverAllTeamMemberPermissionsCache.refresh([scope.id, recursive]);\n          }\n        } else {\n          const pId = scopeOrPermissionId as string;\n          await app._interface.grantServerProjectPermission(crud.id, pId);\n\n          for (const recursive of [true, false]) {\n            await app._serverUserProjectPermissionsCache.refresh([crud.id, recursive]);\n          }\n        }\n      },\n      async revokePermission(scopeOrPermissionId: Team | string, permissionId?: string): Promise<void> {\n        if (scopeOrPermissionId && typeof scopeOrPermissionId !== 'string' && permissionId) {\n          const scope = scopeOrPermissionId;\n          await app._interface.revokeServerTeamUserPermission(scope.id, crud.id, permissionId);\n\n          for (const recursive of [true, false]) {\n            await app._serverTeamUserPermissionsCache.refresh([scope.id, crud.id, recursive]);\n            await app._serverAllTeamMemberPermissionsCache.refresh([scope.id, recursive]);\n          }\n        } else {\n          const pId = scopeOrPermissionId as string;\n          await app._interface.revokeServerProjectPermission(crud.id, pId);\n\n          for (const recursive of [true, false]) {\n            await app._serverUserProjectPermissionsCache.refresh([crud.id, recursive]);\n          }\n        }\n      },\n      async delete() {\n        const res = await app._interface.deleteServerUser(crud.id);\n        await app._refreshUsers();\n        return res;\n      },\n      async createSession(options: { expiresInMillis?: number, isImpersonation?: boolean }) {\n        // TODO this should also refresh the access token when it expires (like InternalSession)\n        const tokens = await app._interface.createServerUserSession(crud.id, options.expiresInMillis ?? 1000 * 60 * 60 * 24 * 365, options.isImpersonation ?? false);\n        return {\n          async getTokens() {\n            return tokens;\n          },\n        };\n      },\n\n      async getActiveSessions() {\n        const sessions = await app._interface.listServerSessions(crud.id);\n        return sessions.items.map((session) => app._clientSessionFromCrud(session));\n      },\n\n      async revokeSession(sessionId: string) {\n        await app._interface.deleteServerSession(sessionId);\n      },\n      async setDisplayName(displayName: string | null) {\n        return await this.update({ displayName });\n      },\n      async setClientMetadata(metadata: Record<string, any>) {\n        return await this.update({ clientMetadata: metadata });\n      },\n      async setClientReadOnlyMetadata(metadata: Record<string, any>) {\n        return await this.update({ clientReadOnlyMetadata: metadata });\n      },\n      async setServerMetadata(metadata: Record<string, any>) {\n        return await this.update({ serverMetadata: metadata });\n      },\n      async setSelectedTeam(team: Team | string | null) {\n        return await this.update({ selectedTeamId: typeof team === 'string' ? team : team?.id ?? null });\n      },\n      getConnectedAccount,\n      async listConnectedAccounts() {\n        return Result.orThrow(await app._serverUserConnectedAccountsCache.getOrWait([crud.id], \"write-only\"));\n      },\n      async linkConnectedAccount(): Promise<void> {\n        throw new HexclaveAssertionError(\"linkConnectedAccount is not available for server users. OAuth flows must be initiated on the client side.\");\n      },\n      async getOrLinkConnectedAccount(): Promise<OAuthConnection> {\n        throw new HexclaveAssertionError(\"getOrLinkConnectedAccount is not available for server users. OAuth flows must be initiated on the client side.\");\n      },\n      selectedTeam: crud.selected_team ? app._serverTeamFromCrud(crud.selected_team) : null,\n      // Unlike the app-level getTeam/useTeam (which fetch any team by id),\n      // the user-scoped variants search the user's own team list on purpose:\n      // they must return null for teams the user is not a member of, and some\n      // callers rely on that as a membership check.\n      async getTeam(teamId: string) {\n        const teams = await this.listTeams();\n        return teams.find((t) => t.id === teamId) ?? null;\n      },\n      async listTeams(options?: ServerListTeamsOptions): Promise<ServerTeam[] & { nextCursor: string | null }> {\n        const result = Result.orThrow(await app._serverTeamsCache.getOrWait([crud.id, options?.orderBy, options?.desc, options?.cursor, options?.limit, options?.query] as const, \"write-only\"));\n        const teams: any = result.items.map((t) => app._serverTeamFromCrud(t));\n        teams.nextCursor = result.pagination?.next_cursor ?? null;\n        return teams as any;\n      },\n      createTeam: async (data: Omit<ServerTeamCreateOptions, \"creatorUserId\">) => {\n        const team = await app._interface.createServerTeam(serverTeamCreateOptionsToCrud({\n          creatorUserId: crud.id,\n          ...data,\n        }));\n        await app._serverTeamsCache.refreshWhere(() => true);\n        await app._updateServerUser(crud.id, { selectedTeamId: team.id });\n        return app._serverTeamFromCrud(team);\n      },\n      leaveTeam: async (team: Team) => {\n        await app._interface.leaveServerTeam({ teamId: team.id, userId: crud.id });\n        await app._refreshTeamMembership(team.id, crud.id);\n      },\n      async listTeamInvitations() {\n        const invitations = Result.orThrow(await app._serverUserTeamInvitationsCache.getOrWait([crud.id], \"write-only\"));\n        return invitations.map((inv) => app._serverReceivedTeamInvitationFromCrud(crud.id, inv));\n      },\n      async listPermissions(scopeOrOptions?: Team | { recursive?: boolean }, options?: { recursive?: boolean }): Promise<AdminTeamPermission[]> {\n        if (scopeOrOptions && 'id' in scopeOrOptions) {\n          const scope = scopeOrOptions;\n          const recursive = options?.recursive ?? true;\n          const permissions = Result.orThrow(await app._serverTeamUserPermissionsCache.getOrWait([scope.id, crud.id, recursive], \"write-only\"));\n          return permissions.map((crud) => app._serverPermissionFromCrud(crud));\n        } else {\n          const opts = scopeOrOptions;\n          const recursive = opts?.recursive ?? true;\n          const permissions = Result.orThrow(await app._serverUserProjectPermissionsCache.getOrWait([crud.id, recursive], \"write-only\"));\n          return permissions.map((crud) => app._serverPermissionFromCrud(crud));\n        }\n      },\n      async getPermission(scopeOrPermissionId: Team | string, permissionId?: string): Promise<AdminTeamPermission | null> {\n        if (scopeOrPermissionId && typeof scopeOrPermissionId !== 'string') {\n          const scope = scopeOrPermissionId;\n          const permissions = await this.listPermissions(scope);\n          return permissions.find((p) => p.id === permissionId) ?? null;\n        } else {\n          const pid = scopeOrPermissionId;\n          const permissions = await this.listPermissions();\n          return permissions.find((p) => p.id === pid) ?? null;\n        }\n      },\n      async hasPermission(scopeOrPermissionId: Team | string, permissionId?: string): Promise<boolean> {\n        if (scopeOrPermissionId && typeof scopeOrPermissionId !== 'string') {\n          const scope = scopeOrPermissionId;\n          return (await this.getPermission(scope, permissionId as string)) !== null;\n        } else {\n          const pid = scopeOrPermissionId;\n          return (await this.getPermission(pid)) !== null;\n        }\n      },\n      async update(update: ServerUserUpdateOptions) {\n        await app._updateServerUser(crud.id, update);\n      },\n      async sendVerificationEmail() {\n        return await app._checkFeatureSupport(\"sendVerificationEmail() on ServerUser\", {});\n      },\n      async updatePassword(options: { oldPassword: string, newPassword: string }) {\n        const result = await app._interface.updatePassword(options);\n        await app._serverUserCache.refresh([crud.id]);\n        return result;\n      },\n      async setPassword(options: { password: string }) {\n        const result = await this.update(options);\n        await app._serverUserCache.refresh([crud.id]);\n        return result;\n      },\n      async getTeamProfile(team: Team) {\n        const result = Result.orThrow(await app._serverUserTeamProfileCache.getOrWait([team.id, crud.id], \"write-only\"));\n        return app._serverEditableTeamProfileFromCrud(result);\n      },\n      async listContactChannels() {\n        const result = Result.orThrow(await app._serverContactChannelsCache.getOrWait([crud.id], \"write-only\"));\n        return result.map((data) => app._serverContactChannelFromCrud(crud.id, data));\n      },\n      createContactChannel: async (data: ServerContactChannelCreateOptions) => {\n        const contactChannel = await app._interface.createServerContactChannel(serverContactChannelCreateOptionsToCrud(crud.id, data));\n        await Promise.all([\n          app._serverContactChannelsCache.refresh([crud.id]),\n          app._serverUserCache.refresh([crud.id])\n        ]);\n        return app._serverContactChannelFromCrud(crud.id, contactChannel);\n      },\n      async listNotificationCategories() {\n        const results = Result.orThrow(await app._serverNotificationCategoriesCache.getOrWait([crud.id], \"write-only\"));\n        return results.map((category) => app._serverNotificationCategoryFromCrud(crud.id, category));\n      },\n      async listApiKeys() {\n        const result = Result.orThrow(await app._serverUserApiKeysCache.getOrWait([crud.id], \"write-only\"));\n        return result.map((apiKey) => app._serverApiKeyFromCrud(apiKey));\n      },\n      async createApiKey(options: ApiKeyCreationOptions<\"user\">) {\n        const result = await app._interface.createProjectApiKey(\n          await apiKeyCreationOptionsToCrud(\"user\", crud.id, options),\n          null,\n          \"server\",\n        );\n        await app._serverUserApiKeysCache.refresh([crud.id]);\n        return app._serverApiKeyFromCrud(result);\n      },\n\n      async listOAuthProviders() {\n        const results = Result.orThrow(await app._serverOAuthProvidersCache.getOrWait([crud.id], \"write-only\"));\n        return results.map((oauthCrud) => app._serverOAuthProviderFromCrud(oauthCrud));\n      },\n\n      async getOAuthProvider(id: string) {\n        const providers = await this.listOAuthProviders();\n        return providers.find((p) => p.id === id) ?? null;\n      },\n      async registerPasskey(options?: { hostname?: string }): Promise<Result<undefined, KnownErrors[\"PasskeyRegistrationFailed\"] | KnownErrors[\"PasskeyWebAuthnError\"]>> {\n        const hostname = options?.hostname || (await app._getCurrentUrl())?.hostname;\n        if (!hostname) {\n          throw new HexclaveAssertionError(\"hostname must be provided if the Stack App does not have a redirect method\");\n        }\n\n        // Use server interface to initiate passkey registration for this specific user\n        const initiationResult = await app._interface.initiateServerPasskeyRegistration(crud.id);\n\n        if (initiationResult.status !== \"ok\") {\n          return Result.error(new KnownErrors.PasskeyRegistrationFailed(\"Failed to get initiation options for passkey registration\"));\n        }\n\n        const { options_json, code } = initiationResult.data;\n\n        scopePasskeyRegistrationToHostname(options_json, hostname);\n\n        let attResp;\n        try {\n          attResp = await startRegistration({ optionsJSON: options_json });\n        } catch (error: any) {\n          if (error instanceof WebAuthnError) {\n            return Result.error(new KnownErrors.PasskeyWebAuthnError(error.message, error.name));\n          } else {\n            // This should never happen\n            captureError(\"passkey-registration-failed\", error);\n            return Result.error(new KnownErrors.PasskeyRegistrationFailed(\"Failed to start passkey registration due to unknown error\"));\n          }\n        }\n\n        // Create a temporary session to complete the registration\n        // TODO instead of creating a new session, this should just call the endpoint in a way in which it doesn't require a session\n        // (currently this shows up on session history etc... not ideal)\n        const { accessToken, refreshToken } = await app._interface.createServerUserSession(crud.id, 60000 * 2, false);\n        const tempSession = new InternalSession({\n          accessToken,\n          refreshToken,\n          refreshAccessTokenCallback: async () => null,\n        });\n\n        const registrationResult = await app._interface.registerPasskey({ credential: attResp, code }, tempSession);\n\n        await app._serverUserCache.refresh([crud.id]);\n        return registrationResult;\n      },\n      ...app._createServerCustomer(crud.id, \"user\"),\n    } satisfies ServerUser);\n\n    return serverUser;\n  }\n\n  protected _serverTeamUserFromCrud(crud: TeamMemberProfilesCrud[\"Server\"][\"Read\"]): ServerTeamUser {\n    const teamUser = withUserDestructureGuard({\n      ...this._serverUserFromCrud(crud.user),\n      teamProfile: {\n        displayName: crud.display_name,\n        profileImageUrl: crud.profile_image_url,\n      },\n    } satisfies ServerTeamUser);\n\n    return teamUser;\n  }\n\n  protected _serverSentTeamInvitationFromCrud(crud: TeamInvitationCrud['Server']['Read']): SentTeamInvitation {\n    return {\n      id: crud.id,\n      recipientEmail: crud.recipient_email,\n      expiresAt: new Date(crud.expires_at_millis),\n      revoke: async () => {\n        await this._interface.revokeServerTeamInvitation(crud.id, crud.team_id);\n        await this._serverTeamInvitationsCache.refresh([crud.team_id]);\n      },\n    };\n  }\n\n  protected _serverReceivedTeamInvitationFromCrud(userId: string, crud: TeamInvitationCrud['Client']['Read']): ReceivedTeamInvitation {\n    const app = this;\n    return {\n      id: crud.id,\n      teamId: crud.team_id,\n      teamDisplayName: crud.team_display_name,\n      recipientEmail: crud.recipient_email,\n      expiresAt: new Date(crud.expires_at_millis),\n      accept: async () => {\n        await app._interface.acceptServerTeamInvitationById(crud.id, userId);\n        await Promise.all([\n          app._serverUserTeamInvitationsCache.refresh([userId]),\n          app._serverTeamInvitationsCache.refresh([crud.team_id]),\n          app._refreshTeamMembership(crud.team_id, userId),\n        ]);\n      },\n    };\n  }\n\n  protected override _currentUserFromCrud(crud: UsersCrud['Server']['Read'], session: InternalSession): ProjectCurrentServerUser<ProjectId> {\n    const currentUser = withUserDestructureGuard({\n      ...this._serverUserFromCrud(crud),\n      ...this._createAuth(session),\n      ...this._isInternalProject() ? this._createInternalUserExtra(session) : {},\n    } satisfies ServerUser);\n\n    return currentUser as ProjectCurrentServerUser<ProjectId>;\n  }\n\n  protected _serverTeamFromCrud(crud: TeamsCrud['Server']['Read']): ServerTeam {\n    const app = this;\n    return {\n      id: crud.id,\n      displayName: crud.display_name,\n      profileImageUrl: crud.profile_image_url,\n      createdAt: new Date(crud.created_at_millis),\n      clientMetadata: crud.client_metadata,\n      clientReadOnlyMetadata: crud.client_read_only_metadata,\n      serverMetadata: crud.server_metadata,\n      async update(update: Partial<ServerTeamUpdateOptions>) {\n        await app._interface.updateServerTeam(crud.id, serverTeamUpdateOptionsToCrud(update));\n        await Promise.all([\n          app._serverTeamCache.refresh([crud.id]),\n          app._serverTeamsCache.refreshWhere(() => true),\n          app._serverUsersCache.refreshWhere(() => true),\n        ]);\n      },\n      async delete() {\n        await app._interface.deleteServerTeam(crud.id);\n        await Promise.all([\n          app._serverTeamCache.refresh([crud.id]),\n          app._serverTeamsCache.refreshWhere(() => true),\n          app._serverUsersCache.refreshWhere(() => true),\n        ]);\n      },\n      async listUsers() {\n        const result = Result.orThrow(await app._serverTeamMemberProfilesCache.getOrWait([crud.id], \"write-only\"));\n        return result.map(u => app._serverTeamUserFromCrud(u));\n      },\n      async addUser(userId) {\n        await app._interface.addServerUserToTeam({\n          teamId: crud.id,\n          userId,\n        });\n        await app._refreshTeamMembership(crud.id, userId);\n      },\n      async removeUser(userId) {\n        await app._interface.removeServerUserFromTeam({\n          teamId: crud.id,\n          userId,\n        });\n        await app._refreshTeamMembership(crud.id, userId);\n      },\n      async inviteUser(options: { email: string, callbackUrl?: string }) {\n        await app._interface.sendServerTeamInvitation({\n          teamId: crud.id,\n          email: options.email,\n          callbackUrl: options.callbackUrl ?? constructRedirectUrl(app._getUrls().teamInvitation, \"callbackUrl\"),\n        });\n        await app._serverTeamInvitationsCache.refresh([crud.id]);\n      },\n      async listInvitations() {\n        const result = Result.orThrow(await app._serverTeamInvitationsCache.getOrWait([crud.id], \"write-only\"));\n        return result.map((crud) => app._serverSentTeamInvitationFromCrud(crud));\n      },\n      async listApiKeys() {\n        const result = Result.orThrow(await app._serverTeamApiKeysCache.getOrWait([crud.id], \"write-only\"));\n        return result.map((apiKey) => app._serverApiKeyFromCrud(apiKey));\n      },\n      async createApiKey(options: ApiKeyCreationOptions<\"team\">) {\n        const result = await app._interface.createProjectApiKey(\n          await apiKeyCreationOptionsToCrud(\"team\", crud.id, options),\n          null,\n          \"server\",\n        );\n        await app._serverTeamApiKeysCache.refresh([crud.id]);\n        return app._serverApiKeyFromCrud(result);\n      },\n      ...app._createServerCustomer(crud.id, \"team\"),\n    };\n  }\n\n  protected _serverItemFromCrud(customer: { type: \"user\" | \"team\" | \"custom\", id: string }, crud: ItemCrud['Client']['Read']): ServerItem {\n    const app = this;\n    return {\n      displayName: crud.display_name,\n      quantity: crud.quantity,\n      nonNegativeQuantity: Math.max(0, crud.quantity),\n      increaseQuantity: async (delta: number) => {\n        const updateOptions = customer.type === \"user\"\n          ? { itemId: crud.id, userId: customer.id }\n          : customer.type === \"team\"\n            ? { itemId: crud.id, teamId: customer.id }\n            : { itemId: crud.id, customCustomerId: customer.id };\n        await app._interface.updateItemQuantity(updateOptions, { delta });\n        if (customer.type === \"user\") await app._serverUserItemsCache.refresh([customer.id, crud.id]);\n        else if (customer.type === \"team\") await app._serverTeamItemsCache.refresh([customer.id, crud.id]);\n        else await app._serverCustomItemsCache.refresh([customer.id, crud.id]);\n      },\n      decreaseQuantity: async (delta: number) => {\n        const updateOptions = customer.type === \"user\"\n          ? { itemId: crud.id, userId: customer.id }\n          : customer.type === \"team\"\n            ? { itemId: crud.id, teamId: customer.id }\n            : { itemId: crud.id, customCustomerId: customer.id };\n        await app._interface.updateItemQuantity(updateOptions, { delta: -delta, allow_negative: true });\n        if (customer.type === \"user\") await app._serverUserItemsCache.refresh([customer.id, crud.id]);\n        else if (customer.type === \"team\") await app._serverTeamItemsCache.refresh([customer.id, crud.id]);\n        else await app._serverCustomItemsCache.refresh([customer.id, crud.id]);\n      },\n      tryDecreaseQuantity: async (delta: number) => {\n        try {\n          const updateOptions = customer.type === \"user\"\n            ? { itemId: crud.id, userId: customer.id }\n            : customer.type === \"team\"\n              ? { itemId: crud.id, teamId: customer.id }\n              : { itemId: crud.id, customCustomerId: customer.id };\n          await app._interface.updateItemQuantity(updateOptions, { delta: -delta });\n          if (customer.type === \"user\") await app._serverUserItemsCache.refresh([customer.id, crud.id]);\n          else if (customer.type === \"team\") await app._serverTeamItemsCache.refresh([customer.id, crud.id]);\n          else await app._serverCustomItemsCache.refresh([customer.id, crud.id]);\n          return true;\n        } catch (error) {\n          if (error instanceof KnownErrors.ItemQuantityInsufficientAmount) {\n            return false;\n          }\n          throw error;\n        }\n      },\n    };\n  }\n\n  protected async _getUserApiKey(options: { apiKey: string }): Promise<ApiKey<\"user\"> | null> {\n    const crud = Result.orThrow(await this._serverCheckApiKeyCache.getOrWait([\"user\", options.apiKey], \"write-only\")) as UserApiKeysCrud['Server']['Read'] | null;\n    return crud ? this._serverApiKeyFromCrud(crud) : null;\n  }\n\n  protected async _getTeamApiKey(options: { apiKey: string }): Promise<ApiKey<\"team\"> | null> {\n    const crud = Result.orThrow(await this._serverCheckApiKeyCache.getOrWait([\"team\", options.apiKey], \"write-only\")) as TeamApiKeysCrud['Server']['Read'] | null;\n    return crud ? this._serverApiKeyFromCrud(crud) : null;\n  }\n  protected async _getUserByApiKey(apiKey: string): Promise<ServerUser | null> {\n    const apiKeyObject = await this._getUserApiKey({ apiKey });\n    if (apiKeyObject === null) {\n      return null;\n    }\n    return await this.getServerUserById(apiKeyObject.userId);\n  }\n\n  protected async _getUserByConvex(ctx: ConvexCtx, includeAnonymous: boolean): Promise<ServerUser | null> {\n    const identity = await ctx.auth.getUserIdentity();\n    if (identity === null) {\n      return null;\n    }\n    const user = await this.getServerUserById(identity.subject);\n    if (user?.isAnonymous && !includeAnonymous) {\n      return null;\n    }\n    return user;\n  }\n\n  protected async _getTeamByApiKey(apiKey: string): Promise<ServerTeam | null> {\n    const apiKeyObject = await this._getTeamApiKey({ apiKey });\n    if (apiKeyObject === null) {\n      return null;\n    }\n    return await this.getTeam(apiKeyObject.teamId);\n  }\n\n  async createUser(options: ServerUserCreateOptions): Promise<ServerUser> {\n    const crud = await this._interface.createServerUser(serverUserCreateOptionsToCrud(options));\n    await this._refreshUsers();\n    return this._serverUserFromCrud(crud);\n  }\n\n  async getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'redirect' }): Promise<ProjectCurrentServerUser<ProjectId>>;\n  async getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'throw' }): Promise<ProjectCurrentServerUser<ProjectId>>;\n  async getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'anonymous' }): Promise<ProjectCurrentServerUser<ProjectId>>;\n  async getUser(options?: GetCurrentUserOptions<HasTokenStore>): Promise<ProjectCurrentServerUser<ProjectId> | null>;\n  async getUser(id: string): Promise<ServerUser | null>;\n  async getUser(options: { apiKey: string }): Promise<ServerUser | null>;\n  async getUser(options: { from: \"convex\", ctx: ConvexCtx, or?: \"return-null\" | \"anonymous\" }): Promise<ServerUser | null>;\n  async getUser(options?: string | GetCurrentUserOptions<HasTokenStore> | { apiKey: string } | { from: \"convex\", ctx: ConvexCtx }): Promise<ProjectCurrentServerUser<ProjectId> | ServerUser | null> {\n    if (typeof options === \"string\") {\n      return await this.getServerUserById(options);\n    } else if (typeof options === \"object\" && \"apiKey\" in options) {\n      return await this._getUserByApiKey(options.apiKey);\n    } else if (typeof options === \"object\" && \"from\" in options && options.from as string === \"convex\") {\n      return await this._getUserByConvex(options.ctx, \"or\" in options && options.or === \"anonymous\");\n    } else {\n      options = options as GetCurrentUserOptions<HasTokenStore> | undefined;\n\n      // Validate that includeRestricted: false and or: 'anonymous' are mutually exclusive\n      if (options?.or === 'anonymous' && options.includeRestricted === false) {\n        throw new Error(\"Cannot use { or: 'anonymous' } with { includeRestricted: false }. Anonymous users implicitly include restricted users.\");\n      }\n\n      // TODO this code is duplicated from the client app; fix that\n      this._ensurePersistentTokenStore(options?.tokenStore);\n      const session = await this._getSession(options?.tokenStore);\n      let crud = Result.orThrow(await this._currentServerUserCache.getOrWait([session], \"write-only\"));\n      const includeAnonymous = options?.or === \"anonymous\" || options?.or === \"anonymous-if-exists[deprecated]\";\n      const includeRestricted = options?.includeRestricted === true || includeAnonymous;\n\n      if (crud === null || (crud.is_anonymous && !includeAnonymous) || (crud.is_restricted && !includeRestricted)) {\n        switch (options?.or) {\n          case 'redirect': {\n            if (!crud?.is_anonymous && crud?.is_restricted) {\n              await this.redirectToOnboarding({ replace: true });\n            } else {\n              await this.redirectToSignIn({ replace: true });\n            }\n            // TODO: see client-app-impl. We probably want to `await neverResolve()` here instead of returning null\n            break;\n          }\n          case 'throw': {\n            throw new Error(\"User is not signed in but getUser was called with { or: 'throw' }\");\n          }\n          case 'anonymous': {\n            const tokens = await this._signUpAnonymously();\n            return await this.getUser({ tokenStore: tokens, or: \"anonymous-if-exists[deprecated]\", includeRestricted: true }) ?? throwErr(\"Something went wrong while signing up anonymously\");\n          }\n          case undefined:\n          case \"anonymous-if-exists[deprecated]\":\n          case \"return-null\": {\n            return null;\n          }\n        }\n      }\n\n      return crud && this._currentUserFromCrud(crud, session);\n    }\n  }\n\n  async getServerUser(): Promise<ProjectCurrentServerUser<ProjectId> | null> {\n    console.warn(\"hexclaveServerApp.getServerUser is deprecated; use hexclaveServerApp.getUser instead\");\n    return await this.getUser();\n  }\n\n  async getServerUserById(userId: string): Promise<ServerUser | null> {\n    const crud = Result.orThrow(await this._serverUserCache.getOrWait([userId], \"write-only\"));\n    return crud && this._serverUserFromCrud(crud);\n  }\n\n\n  async listUsers(options?: ServerListUsersOptions): Promise<ServerUser[] & { nextCursor: string | null }> {\n    const excludedEmailDomains = options?.excludedEmailDomains && options.excludedEmailDomains.length > 0 ? options.excludedEmailDomains.join(\",\") : undefined;\n    const crud = Result.orThrow(await this._serverUsersCache.getOrWait([options?.cursor, options?.limit, options?.orderBy, options?.desc, options?.query, options?.includeRestricted, options?.includeAnonymous, options?.onlyAnonymous, options?.teamId, excludedEmailDomains], \"write-only\"));\n    const result: any = crud.items.map((j) => this._serverUserFromCrud(j));\n    result.nextCursor = crud.pagination?.next_cursor ?? null;\n    return result as any;\n  }\n\n\n  _serverPermissionFromCrud(crud: TeamPermissionsCrud['Server']['Read'] | ProjectPermissionsCrud['Server']['Read']): AdminTeamPermission {\n    return {\n      id: crud.id,\n    };\n  }\n\n  _serverTeamPermissionDefinitionFromCrud(crud: TeamPermissionDefinitionsCrud['Admin']['Read']): AdminTeamPermissionDefinition {\n    return {\n      id: crud.id,\n      description: crud.description,\n      containedPermissionIds: crud.contained_permission_ids,\n    };\n  }\n\n  _serverProjectPermissionDefinitionFromCrud(crud: ProjectPermissionDefinitionsCrud['Admin']['Read']): AdminProjectPermissionDefinition {\n    return {\n      id: crud.id,\n      description: crud.description,\n      containedPermissionIds: crud.contained_permission_ids,\n    };\n  }\n\n  async getItem(options: { itemId: string, userId: string } | { itemId: string, teamId: string } | { itemId: string, customCustomerId: string }): Promise<ServerItem> {\n    if (\"userId\" in options) {\n      const result = Result.orThrow(await this._serverUserItemsCache.getOrWait([options.userId, options.itemId], \"write-only\"));\n      return this._serverItemFromCrud({ type: \"user\", id: options.userId }, result);\n    } else if (\"teamId\" in options) {\n      const result = Result.orThrow(await this._serverTeamItemsCache.getOrWait([options.teamId, options.itemId], \"write-only\"));\n      return this._serverItemFromCrud({ type: \"team\", id: options.teamId }, result);\n    } else {\n      const result = Result.orThrow(await this._serverCustomItemsCache.getOrWait([options.customCustomerId, options.itemId], \"write-only\"));\n      return this._serverItemFromCrud({ type: \"custom\", id: options.customCustomerId }, result);\n    }\n  }\n\n  protected async _refreshItemCache(customerType: \"user\" | \"team\" | \"custom\", customerId: string, itemId: string): Promise<void> {\n    if (customerType === \"user\") {\n      await this._serverUserItemsCache.refresh([customerId, itemId]);\n    } else if (customerType === \"team\") {\n      await this._serverTeamItemsCache.refresh([customerId, itemId]);\n    } else {\n      await this._serverCustomItemsCache.refresh([customerId, itemId]);\n    }\n  }\n\n  async listProducts(options: CustomerProductsRequestOptions): Promise<CustomerProductsList> {\n    if (\"userId\" in options) {\n      const response = Result.orThrow(await this._serverUserProductsCache.getOrWait([options.userId, options.cursor ?? null, options.limit ?? null], \"write-only\"));\n      return this._customerProductsFromResponse(response);\n    } else if (\"teamId\" in options) {\n      const response = Result.orThrow(await this._serverTeamProductsCache.getOrWait([options.teamId, options.cursor ?? null, options.limit ?? null], \"write-only\"));\n      return this._customerProductsFromResponse(response);\n    }\n    const response = Result.orThrow(await this._serverCustomProductsCache.getOrWait([options.customCustomerId, options.cursor ?? null, options.limit ?? null], \"write-only\"));\n    return this._customerProductsFromResponse(response);\n  }\n\n  private _resolveCustomer(\n    options: { userId: string } | { teamId: string } | { customCustomerId: string }\n  ): { customerType: \"user\" | \"team\" | \"custom\", customerId: string } {\n    if (\"userId\" in options) {\n      return { customerType: \"user\", customerId: options.userId };\n    }\n    if (\"teamId\" in options) {\n      return { customerType: \"team\", customerId: options.teamId };\n    }\n    return { customerType: \"custom\", customerId: options.customCustomerId };\n  }\n\n  async grantProduct(options: (\n    ({ userId: string } | { teamId: string } | { customCustomerId: string }) &\n    ({ productId: string } | { product: InlineProduct }) &\n    { quantity?: number }\n  )): Promise<void> {\n    const { customerType, customerId } = this._resolveCustomer(options);\n\n    await this._interface.grantProduct({\n      customerType,\n      customerId,\n      productId: \"productId\" in options ? options.productId : undefined,\n      product: \"product\" in options ? options.product : undefined,\n      quantity: options.quantity,\n    });\n\n    const cache = customerType === \"user\"\n      ? this._serverUserProductsCache\n      : customerType === \"team\"\n        ? this._serverTeamProductsCache\n        : this._serverCustomProductsCache;\n    await cache.refresh([customerId, null, null]);\n  }\n\n  async createCheckoutUrl(options: (\n    ({ userId: string } | { teamId: string } | { customCustomerId: string }) &\n    ({ productId: string } | { product: InlineProduct }) &\n    { returnUrl?: string }\n  )): Promise<string> {\n    const { customerType, customerId } = this._resolveCustomer(options);\n\n    const productIdOrInline = \"productId\" in options ? options.productId : options.product;\n    return await this._interface.createCheckoutUrl(customerType, customerId, productIdOrInline, null, options.returnUrl, \"server\");\n  }\n\n  async createTeam(data: ServerTeamCreateOptions): Promise<ServerTeam> {\n    const team = await this._interface.createServerTeam(serverTeamCreateOptionsToCrud(data));\n    await this._serverTeamCache.refresh([team.id]);\n    await this._serverTeamsCache.refreshWhere(() => true);\n    return this._serverTeamFromCrud(team);\n  }\n\n  async listTeams(options?: ServerListTeamsOptions): Promise<ServerTeam[] & { nextCursor: string | null }> {\n    const crud = Result.orThrow(await this._serverTeamsCache.getOrWait([undefined, options?.orderBy, options?.desc, options?.cursor, options?.limit, options?.query] as const, \"write-only\"));\n    const teams: any = crud.items.map((t) => this._serverTeamFromCrud(t));\n    teams.nextCursor = crud.pagination?.next_cursor ?? null;\n    return teams as any;\n  }\n\n\n  async listTeamMemberPermissions(teamId: string, options?: { recursive?: boolean }): Promise<{ userId: string, permissionId: string }[]> {\n    const recursive = options?.recursive ?? false;\n    const rows = Result.orThrow(await this._serverAllTeamMemberPermissionsCache.getOrWait([teamId, recursive] as const, \"write-only\"));\n    return rows.map((r) => ({ userId: r.user_id, permissionId: r.id }));\n  }\n\n\n  async getTeam(options: { apiKey: string }): Promise<ServerTeam | null>;\n  async getTeam(teamId: string): Promise<ServerTeam | null>;\n  async getTeam(options?: { apiKey: string } | string): Promise<ServerTeam | null> {\n    if (typeof options === \"object\" && \"apiKey\" in options) {\n      return await this._getTeamByApiKey(options.apiKey);\n    } else {\n      const teamId = options;\n      if (teamId == null) {\n        return null;\n      }\n      const team = Result.orThrow(await this._serverTeamCache.getOrWait([teamId], \"write-only\"));\n      return team == null ? null : this._serverTeamFromCrud(team);\n    }\n  }\n\n\n  protected _createServerDataVaultStore(id: string): DataVaultStore {\n    const validateOptions = (options: { secret: string }) => {\n      if (typeof options.secret !== \"string\") throw new Error(\"secret must be a string, got \" + typeof options.secret);\n    };\n    return {\n      id,\n      setValue: async (key, value, options) => {\n        validateOptions(options);\n        await this._interface.setDataVaultStoreValue(options.secret, id, key, value);\n      },\n      getValue: async (key, options) => {\n        validateOptions(options);\n        return Result.orThrow(await this._serverDataVaultStoreValueCache.getOrWait([id, key, options.secret], \"write-only\"));\n      },\n    };\n  }\n\n  async getDataVaultStore(id: string): Promise<DataVaultStore> {\n    return this._createServerDataVaultStore(id);\n  }\n\n\n  async sendEmail(options: SendEmailOptions): Promise<void> {\n    await this._interface.sendEmail(options);\n    await this._emailDeliveryInfoCache.refresh([]);\n  }\n\n  async getEmailDeliveryStats(): Promise<EmailDeliveryInfo> {\n    return Result.orThrow(await this._emailDeliveryInfoCache.getOrWait([], \"write-only\"));\n  }\n\n\n  async activateEmailCapacityBoost(): Promise<void> {\n    await this._interface.activateEmailCapacityBoost();\n    // Refresh the cache so UI updates immediately\n    await this._emailDeliveryInfoCache.refresh([]);\n  }\n\n  async queryAnalytics(options: AnalyticsQueryOptions): Promise<AnalyticsQueryResponse> {\n    return await this._interface.queryAnalytics(options);\n  }\n\n  protected override async _refreshSession(session: InternalSession) {\n    await Promise.all([\n      super._refreshUser(session),\n      this._currentServerUserCache.refresh([session]),\n    ]);\n  }\n\n  protected override async _refreshUsers() {\n    await Promise.all([\n      super._refreshUsers(),\n      this._serverUserCache.refreshWhere(() => true),\n      this._serverUsersCache.refreshWhere(() => true),\n      this._serverContactChannelsCache.refreshWhere(() => true),\n      this._serverOAuthProvidersCache.refreshWhere(() => true),\n      this._serverUserConnectedAccountsCache.refreshWhere(() => true),\n    ]);\n  }\n\n  async createOAuthProvider(options: {\n    userId: string,\n    providerConfigId: string,\n    accountId: string,\n    email: string,\n    allowSignIn: boolean,\n    allowConnectedAccounts: boolean,\n  }): Promise<Result<ServerOAuthProvider, InstanceType<typeof KnownErrors.OAuthProviderAccountIdAlreadyUsedForSignIn>>> {\n    try {\n      const crud = await this._interface.createServerOAuthProvider({\n        user_id: options.userId,\n        provider_config_id: options.providerConfigId,\n        account_id: options.accountId,\n        email: options.email,\n        allow_sign_in: options.allowSignIn,\n        allow_connected_accounts: options.allowConnectedAccounts,\n      });\n\n      await Promise.all([\n        this._serverOAuthProvidersCache.refresh([options.userId]),\n        this._serverUserConnectedAccountsCache.refresh([options.userId]),\n      ]);\n      return Result.ok(this._serverOAuthProviderFromCrud(crud));\n    } catch (error) {\n      if (KnownErrors.OAuthProviderAccountIdAlreadyUsedForSignIn.isInstance(error)) {\n        return Result.error(error);\n      }\n      throw error;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AA8CA,IAAa,mCAAb,cAA+GA,qBAAAA,iCAA2D;CA6DxK,MAAgB,uBAAuB,QAAgB,QAAgB;EACrE,MAAM,QAAQ,IAAI;GAChB,KAAK,+BAA+B,QAAQ,CAAC,MAAM,CAAC;GACpD,KAAK,kBAAkB,cAAc,CAAC,OAAO,MAAM,UAAU,MAAM,KAAA,CAAS;GAC5E,KAAK,kBAAkB,cAAc,QAAQ,IAAI,OAAO,MAAM;EAChE,CAAC;CACH;CAqMA,sBAAgC,gBAAwB,MAAmD;EACzG,MAAM,MAAM;EACZ,MAAM,gBAAgB,SAAS,SAAS,IAAI,2BAA2B,IAAI;EAC3E,MAAM,kBAAkB,SAAS,SAAS,EAAE,QAAQ,eAAe,IAAI,EAAE,QAAQ,eAAe;EAChG,OAAO;GACL,GAAG,KAAK,gBAAgB,gBAAgB,MAAM,IAAI;GAClD,MAAM,QAAQ,QAAgB;IAC5B,OAAO,MAAM,IAAI,QAAQ;KAAE;KAAQ,GAAG;IAAgB,CAAC;GACzD;GACA,MAAM,aAAa,gBAA0G;IAC3H,IAAI,SAAS,QACX,IAAI,eAAe,gBACjB,MAAM,IAAI,aAAa;KAAE,QAAQ;KAAgB,WAAW,eAAe;KAAW,UAAU,eAAe;IAAS,CAAC;SAEzH,MAAM,IAAI,aAAa;KAAE,QAAQ;KAAgB,SAAS,eAAe;KAAS,UAAU,eAAe;IAAS,CAAC;SAGvH,IAAI,eAAe,gBACjB,MAAM,IAAI,aAAa;KAAE,QAAQ;KAAgB,WAAW,eAAe;KAAW,UAAU,eAAe;IAAS,CAAC;SAEzH,MAAM,IAAI,aAAa;KAAE,QAAQ;KAAgB,SAAS,eAAe;KAAS,UAAU,eAAe;IAAS,CAAC;IAGzH,MAAM,cAAc,QAAQ;KAAC;KAAgB;KAAM;IAAI,CAAC;GAC1D;GACA,MAAM,kBAAkB,SAAqG;IAC3H,MAAM,oBAAoB,eAAe,UAAU,QAAQ,YAAY,QAAQ;IAC/E,OAAO,MAAM,IAAI,WAAW,kBAAkB,MAAM,gBAAgB,mBAAmB,MAAM,QAAQ,WAAW,QAAQ;GAC1H;EACF;CACF;CAEA,MAAc,kBAAkB,QAAgB,QAAuE;EACrH,MAAM,SAAS,MAAM,KAAK,WAAW,iBAAiB,SAAA,GAAA,qBAAA,8BAAA,CAAsC,MAAM,CAAC;EACnG,MAAM,KAAK,cAAc;EACzB,OAAO;CACT;CAEA,mCAA6C,MAA2E;EACtH,MAAM,MAAM;EACZ,OAAO;GACL,aAAa,KAAK;GAClB,iBAAiB,KAAK;GACtB,MAAM,OAAO,QAA4D;IACvE,MAAM,IAAI,WAAW,8BAA8B;KACjD,QAAQ,KAAK;KACb,QAAQ,KAAK;KACb,SAAS;MACP,cAAc,OAAO;MACrB,mBAAmB,OAAO;KAC5B;IACF,CAAC;IACD,MAAM,IAAI,4BAA4B,QAAQ,CAAC,KAAK,SAAS,KAAK,OAAO,CAAC;GAC5E;EACF;CACF;CAEA,8BAAwC,QAAgB,MAAmE;EACzH,MAAM,MAAM;EACZ,OAAO;GACL,IAAI,KAAK;GACT,OAAO,KAAK;GACZ,MAAM,KAAK;GACX,YAAY,KAAK;GACjB,WAAW,KAAK;GAChB,aAAa,KAAK;GAClB,MAAM,sBAAsB,SAAoC;IAC9D,MAAM,IAAI,WAAW,0CAA0C,QAAQ,KAAK,IAAI,SAAS,gBAAA,GAAA,yBAAA,qBAAA,CAAoC,IAAI,SAAS,CAAC,CAAC,mBAAmB,aAAa,CAAC;GAC/K;GACA,MAAM,OAAO,MAAyC;IACpD,MAAM,IAAI,WAAW,2BAA2B,QAAQ,KAAK,KAAA,GAAA,gCAAA,wCAAA,CAA4C,IAAI,CAAC;IAC9G,MAAM,QAAQ,IAAI,CAChB,IAAI,4BAA4B,QAAQ,CAAC,MAAM,CAAC,GAChD,IAAI,iBAAiB,QAAQ,CAAC,MAAM,CAAC,CACvC,CAAC;GACH;GACA,MAAM,SAAS;IACb,MAAM,IAAI,WAAW,2BAA2B,QAAQ,KAAK,EAAE;IAC/D,MAAM,QAAQ,IAAI,CAChB,IAAI,4BAA4B,QAAQ,CAAC,MAAM,CAAC,GAChD,IAAI,iBAAiB,QAAQ,CAAC,MAAM,CAAC,CACvC,CAAC;GACH;EACF;CACF;CAEA,oCAA8C,QAAgB,MAA0E;EACtI,MAAM,MAAM;EACZ,OAAO;GACL,IAAI,KAAK;GACT,MAAM,KAAK;GACX,SAAS,KAAK;GACd,YAAY,KAAK;GAEjB,MAAM,WAAW,SAAkB;IACjC,MAAM,IAAI,WAAW,8BAA8B,QAAQ,KAAK,0BAA0B,OAAO;IACjG,MAAM,IAAI,mCAAmC,QAAQ,CAAC,MAAM,CAAC;GAC/D;EACF;CACF;CAEA,6BAAuC,MAA2C;EAChF,MAAM,MAAM;EACZ,OAAO;GACL,IAAI,KAAK;GACT,MAAM,KAAK;GACX,QAAQ,KAAK;GACb,WAAW,KAAK;GAChB,OAAO,KAAK;GACZ,aAAa,KAAK;GAClB,wBAAwB,KAAK;GAE7B,MAAM,OAAO,MAEV;IACD,IAAI;KACF,MAAM,IAAI,WAAW,0BAA0B,KAAK,SAAS,KAAK,IAAI;MACpE,YAAY,KAAK;MACjB,OAAO,KAAK;MACZ,eAAe,KAAK;MACpB,0BAA0B,KAAK;KACjC,CAAC;KACD,MAAM,QAAQ,IAAI,CAChB,IAAI,2BAA2B,QAAQ,CAAC,KAAK,OAAO,CAAC,GACrD,IAAI,kCAAkC,QAAQ,CAAC,KAAK,OAAO,CAAC,CAC9D,CAAC;KACD,OAAOC,oCAAAA,OAAO,GAAG,KAAA,CAAS;IAC5B,SAAS,OAAO;KACd,IAAIC,iBAAAA,YAAY,2CAA2C,WAAW,KAAK,GACzE,OAAOD,oCAAAA,OAAO,MAAM,KAAK;KAE3B,MAAM;IACR;GACF;GAEA,MAAM,SAAS;IACb,MAAM,IAAI,WAAW,0BAA0B,KAAK,SAAS,KAAK,EAAE;IACpE,MAAM,QAAQ,IAAI,CAChB,IAAI,2BAA2B,QAAQ,CAAC,KAAK,OAAO,CAAC,GACrD,IAAI,kCAAkC,QAAQ,CAAC,KAAK,OAAO,CAAC,CAC9D,CAAC;GACH;EACF;CACF;CAEA,YAAY,SAAqE,cAAyG;EACxL,MAAM,mBAAA,GAAA,YAAA,0BAAA,CAA4C,OAAO;EAEzD,MAAM,uBAAuB,gBAAgB,yBAAA,GAAA,YAAA,+BAAA,CAAuD;EAEpG,MAAM,iBAAiB;GACrB,GAAG;GACH,WAAW,cAAc,oBAAoB;IAC3C,MAAM,WAAA,GAAA,YAAA,eAAA,CAAyB,gBAAgB,OAAO;IACtD,OAAO,IAAIE,iBAAAA,wBAAwB;KACjC,kBAAkB,QAAQ,CAAC,CAAC;KAC5B,YAAY;KACZ,WAAW,gBAAgB,cAAA,GAAA,YAAA,oBAAA,CAAiC;KAC5D,qBAAqB,gBAAgB,wBAAA,GAAA,YAAA,8BAAA,CAAqD;KAC1F,eAAA,YAAA;KACA,GAAI,wBAAwB,OAAO,EAAE,qBAAqB,IAAI,CAAC;KAC/D,iBAAiB,gBAAgB,oBAAA,GAAA,YAAA,0BAAA,CAA6C;IAChF,CAAC;GACH,EAAA,CAAG;EACL,CAAC;uEAxa6D,OAAO,YAAY;GACjF,IAAI,QAAQ,mBAAmB,GAE7B,OAAO;GAET,OAAO,MAAM,KAAK,WAAW,qBAAqB,OAAO;EAC3D,CAAC;wDAY+B,OAAO,CAAC,QAAQ,OAAO,SAAS,MAAM,OAAO,mBAAmB,kBAAkB,eAAe,QAAQ,0BAA0B;GACjK,IAAI,iBAAiB,CAAC,kBACpB,MAAM,IAAIC,mCAAAA,uBAAuB,mDAAmD;GAEtF,MAAM,0BAA0B,sBAAsB,MAAM,GAAG;GAC/D,IAAI,eACF,OAAO,MAAM,KAAK,WAAW,gBAAgB;IAAE;IAAQ;IAAO;IAAS;IAAM;IAAO,sBAAsB;IAAyB;IAAmB,kBAAkB;IAAM,eAAe;IAAM;GAAO,CAAC;GAE7M,OAAO,MAAM,KAAK,WAAW,gBAAgB;IAAE;IAAQ;IAAO;IAAS;IAAM;IAAO,sBAAsB;IAAyB;IAAmB;IAAkB;GAAO,CAAC;EAClL,CAAC;uDAC6F,OAAO,CAAC,YAAY;GAChH,MAAM,OAAO,MAAM,KAAK,WAAW,kBAAkB,MAAM;GAC3D,OAAOH,oCAAAA,OAAO,GAAG,MAAM,IAAI;EAC7B,CAAC;wDAQ+B,OAAO,CAAC,QAAQ,SAAS,MAAM,QAAQ,OAAO,WAAW;GACvF,OAAO,MAAM,KAAK,WAAW,yBAAyB;IAAE;IAAQ;IAAS;IAAM;IAAQ;IAAO;GAAM,CAAC;EACvG,CAAC;uDAC6F,OAAO,CAAC,YAAY;GAEhH,IAAI,EAAA,GAAA,kCAAA,OAAA,CAAQ,MAAM,GAChB,OAAO;GAET,IAAI;IACF,OAAO,MAAM,KAAK,WAAW,cAAc,MAAM;GACnD,SAAS,OAAO;IACd,IAAIC,iBAAAA,YAAY,aAAa,WAAW,KAAK,GAC3C,OAAO;IAET,MAAM;GACR;EACF,CAAC;sEASgH,OAAO,CAAC,YAAY;GACnI,OAAO,MAAM,KAAK,WAAW,8BAA8B,MAAM;EACnE,CAAC;sEAIC,OAAO,CAAC,QAAQ,QAAQ,eAAe;GACvC,OAAO,MAAM,KAAK,WAAW,0BAA0B;IAAE;IAAQ;IAAQ;GAAU,GAAG,IAAI;EAC5F,CAAC;2EAQC,OAAO,CAAC,QAAQ,eAAe;GAC/B,OAAO,MAAM,KAAK,WAAW,0BAA0B;IAAE;IAAQ;GAAU,GAAG,IAAI;EACpF,CAAC;yEAIC,OAAO,CAAC,QAAQ,eAAe;GAC/B,OAAO,MAAM,KAAK,WAAW,6BAA6B;IAAE;IAAQ;GAAU,GAAG,IAAI;EACvF,CAAC;kFAGC,OAAO,CAAC,QAAQ,YAAY,WAAW;GACrC,IAAI;IAEF,OAAO,EAAE,cAAa,MADD,KAAK,WAAW,gCAAgC,QAAQ,YAAY,SAAS,EAAE,EAAA,CACvE,aAAa;GAC5C,SAAS,KAAK;IACZ,IAAI,EAAEA,iBAAAA,YAAY,6BAA6B,WAAW,GAAG,KAAKA,iBAAAA,YAAY,wCAAwC,WAAW,GAAG,KAAKA,iBAAAA,YAAY,kCAAkC,WAAW,GAAG,IACnM,MAAM;GAEV;GACA,OAAO;EACT,CACF;sEAGE,OAAO,CAAC,QAAQ,YAAY,OAAO,cAAc;GAC/C,OAAO,MAAM,KAAK,+BAA+B;IAC/C,SAAS,YAAYD,oCAAAA,OAAO,QAAQ,MAAM,KAAK,iBAAiB,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC;IACjG,qBAAqB,YAAYA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,4CAA4C,UAAU;KAAC;KAAQ;KAAY,SAAS;IAAE,GAAY,YAAY,CAAC;IAC1K;IACA;IACA;IACA,SAAS;GACX,CAAC;EACH,CACF;wEAEE,OAAO,CAAC,YAAY;GAElB,QAAO,MADc,KAAK,WAAW,4BAA4B,MAAM,EAAA,CACzD,MAAM,KAAK,SAAS,KAAK,yCAAyC,QAAQ,IAAI,CAAC;EAC/F,CACF;2FAEE,OAAO,CAAC,QAAQ,YAAY,mBAAmB,WAAW;GACxD,IAAI;IAEF,OAAO,EAAE,cAAa,MADD,KAAK,WAAW,yCAAyC,QAAQ,YAAY,mBAAmB,SAAS,EAAE,EAAA,CACnG,aAAa;GAC5C,SAAS,KAAK;IACZ,IAAI,EAAEC,iBAAAA,YAAY,6BAA6B,WAAW,GAAG,KAAKA,iBAAAA,YAAY,wCAAwC,WAAW,GAAG,KAAKA,iBAAAA,YAAY,kCAAkC,WAAW,GAAG,IACnM,MAAM;GAEV;GACA,OAAO;EACT,CACF;qEAEE,OAAO,CAAC,YAAY;GAClB,OAAO,MAAM,KAAK,WAAW,6BAA6B,EAAE,OAAO,CAAC;EACtE,CACF;kEAEE,OAAO,CAAC,YAAY;GAClB,OAAO,MAAM,KAAK,WAAW,0BAA0B,EAAE,OAAO,CAAC;EACnE,CACF;kEAEE,OAAO,CAAC,QAAQ,YAAY;GAC1B,OAAO,MAAM,KAAK,WAAW,2BAA2B;IAAE;IAAQ;GAAO,CAAC;EAC5E,CACF;kEAEE,OAAO,CAAC,YAAY;GAClB,OAAO,MAAM,KAAK,WAAW,0BAA0B,MAAM;EAC/D,CACF;yEAEE,OAAO,CAAC,YAAY;GAClB,OAAO,MAAM,KAAK,WAAW,iCAAiC,MAAM;EACtE,CACF;sEACwG,OAAO,CAAC,SAAS,KAAK,YAAY;GACxI,OAAO,MAAM,KAAK,WAAW,uBAAuB,QAAQ,SAAS,GAAG;EAC1E,CAAC;8DAEsD,YAAY;GACjE,OAAO,MAAM,KAAK,WAAW,qBAAqB;EACpD,CAAC;8DAGC,OAAO,CAAC,YAAY;GAIlB,OAAO,MAHc,KAAK,WAAW,mBAAmB,EACtD,SAAS,OACX,GAAG,MAAM,QAAQ;EAEnB,CACF;8DAGE,OAAO,CAAC,YAAY;GAIlB,OAAO,MAHc,KAAK,WAAW,mBAAmB,EACtD,SAAS,OACX,GAAG,MAAM,QAAQ;EAEnB,CACF;kEAGE,OAAO,CAAC,SAAS;GACf,MAAM,WAAW,MAAM,IAAI,KAAK,gBAAgB;GAChD,OAAO,WAAW,SAAS,UAAU;EACvC,CACF;8DAEgK,OAAO,CAAC,MAAM,YAAY;GAOxL,OAAO,MANc,KAAK,WAAW,mBACnC,MACA,QACA,MACA,QACF;EAEF,CAAC;iEAGC,OAAO,CAAC,YAAY;GAClB,OAAO,MAAM,KAAK,WAAW,yBAAyB,EAAE,SAAS,OAAO,CAAC;EAC3E,CACF;4DAGE,OAAO,CAAC,QAAQ,YAAY;GAC1B,OAAO,MAAM,KAAK,WAAW,QAAQ;IAAE;IAAQ;GAAO,GAAG,MAAM,QAAQ;EACzE,CACF;4DAGE,OAAO,CAAC,QAAQ,YAAY;GAC1B,OAAO,MAAM,KAAK,WAAW,QAAQ;IAAE;IAAQ;GAAO,GAAG,MAAM,QAAQ;EACzE,CACF;8DAGE,OAAO,CAAC,kBAAkB,YAAY;GACpC,OAAO,MAAM,KAAK,WAAW,QAAQ;IAAE;IAAkB;GAAO,GAAG,MAAM,QAAQ;EACnF,CACF;+DAGE,OAAO,CAAC,QAAQ,QAAQ,WAAW;GACjC,OAAO,MAAM,KAAK,WAAW,aAAa;IACxC,eAAe;IACf,aAAa;IACb,QAAQ,UAAU,KAAA;IAClB,OAAO,SAAS,KAAA;GAClB,GAAG,MAAM,QAAQ;EACnB,CACF;+DAGE,OAAO,CAAC,QAAQ,QAAQ,WAAW;GACjC,OAAO,MAAM,KAAK,WAAW,aAAa;IACxC,eAAe;IACf,aAAa;IACb,QAAQ,UAAU,KAAA;IAClB,OAAO,SAAS,KAAA;GAClB,GAAG,MAAM,QAAQ;EACnB,CACF;iEAGE,OAAO,CAAC,kBAAkB,QAAQ,WAAW;GAC3C,OAAO,MAAM,KAAK,WAAW,aAAa;IACxC,eAAe;IACf,aAAa;IACb,QAAQ,UAAU,KAAA;IAClB,OAAO,SAAS,KAAA;GAClB,GAAG,MAAM,QAAQ;EACnB,CACF;CAuKA;CAOA,sBAAgC,MAA2N;EACzP,OAAO;GACL,GAAG,KAAK,oBAAoB,IAAI;GAChC,MAAM,SAAS;IACb,MAAM,KAAK,OAAO,EAAE,SAAS,KAAK,CAAC;GACrC;GACA,QAAQ,OAAO,YAAiC;IAC9C,MAAM,KAAK,WAAW,oBACpB,KAAK,SAAS,SAAS,EAAE,SAAS,KAAK,QAAQ,IAAI,EAAE,SAAS,KAAK,QAAQ,GAC3E,KAAK,IACL,OAAA,GAAA,wBAAA,0BAAA,CAAgC,KAAK,MAAM,OAAO,GAClD,MACA,QAAQ;IACV,IAAI,KAAK,SAAS,QAChB,MAAM,KAAK,wBAAwB,QAAQ,CAAC,KAAK,OAAO,CAAC;SAEzD,MAAM,KAAK,wBAAwB,QAAQ,CAAC,KAAK,OAAO,CAAC;GAE7D;EACF;CACF;CAEA,yCACE,QACA,MACiB;EACjB,MAAM,MAAM;EACZ,MAAM,aAAa,KAAK;EACxB,MAAM,oBAAoB,KAAK;EAC/B,OAAO;GACL,IAAI;GACJ,UAAU;GACV;GACA,MAAM,eAAe,SAAiC;IACpD,MAAM,cAAc,SAAS,QAAQ,KAAK,GAAG,KAAK;IAClD,MAAM,SAASD,oCAAAA,OAAO,QAAQ,MAAM,IAAI,qDAAqD,UAAU;KAAC;KAAQ;KAAY;KAAmB;IAAW,GAAG,YAAY,CAAC;IAC1K,IAAI,CAAC,QAAQ;KACX,MAAM,cAAc,cAAc,yBAAyB,YAAY,8CAA8C;KACrH,OAAOA,oCAAAA,OAAO,MAAM,IAAIC,iBAAAA,YAAY,6BAA6B,YAAY,GAAG,YAAY,4GAA4G,CAAC;IAC3M;IACA,OAAOD,oCAAAA,OAAO,GAAG,MAAM;GACzB;EACF;CACF;CAEA,oBAA8B,MAA+C;EAC3E,MAAM,MAAM;EAMZ,eAAe,oBACb,aACA,SAC6D;GAC7D,MAAM,cAAc,SAAS,QAAQ,KAAK,GAAG,KAAK;GAGlD,IAAI,OAAO,gBAAgB,YAAY,cAAc,eAAe,uBAAuB,aAAa;IACtG,MAAM,EAAE,UAAU,sBAAsB;IAGxC,MAAM,QADoBA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,kCAAkC,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACxF,CAAC,CAAC,MAC9B,MAAK,EAAE,aAAa,YAAY,EAAE,sBAAsB,iBAC1D;IACA,IAAI,CAAC,OACH,OAAO;IAET,OAAO;GACT;GAGA,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,gCAAgC,UAAU;IAAC,KAAK;IAAI;IAAa;IAAa,SAAS,OAAO;GAAU,GAAG,YAAY,CAAC;EAC1J;EAkRA,QAAA,GAAA,qBAAA,yBAAA,CA/Q4C;GAC1C,GAAG,MAAM,gBAAgB,IAAI;GAC7B,cAAc,IAAI,KAAK,KAAK,qBAAqB;GACjD,gBAAgB,KAAK;GACrB,iCAAiC,KAAK;GACtC,aAAa,KAAK;GAClB,YAAY,EACV,QAAQ;IACN,KAAK,KAAK,YAAY,QAAQ;IAC9B,gBAAgB,KAAK,YAAY,QAAQ;GAC3C,EACF;GACA,MAAM,gBAAgB,OAAsB,SAAkC;IAC5E,MAAM,IAAI,kBAAkB,KAAK,IAAI;KAAE,cAAc;KAAO,sBAAsB,SAAS;IAAS,CAAC;GACvG;GACA,MAAM,gBAAgB,qBAAoC,cAAsC;IAC9F,IAAI,uBAAuB,OAAO,wBAAwB,YAAY,cAAc;KAClF,MAAM,QAAQ;KACd,MAAM,IAAI,WAAW,8BAA8B,MAAM,IAAI,KAAK,IAAI,YAAY;KAElF,KAAK,MAAM,aAAa,CAAC,MAAM,KAAK,GAAG;MACrC,MAAM,IAAI,gCAAgC,QAAQ;OAAC,MAAM;OAAI,KAAK;OAAI;MAAS,CAAC;MAChF,MAAM,IAAI,qCAAqC,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC;KAC9E;IACF,OAAO;KACL,MAAM,MAAM;KACZ,MAAM,IAAI,WAAW,6BAA6B,KAAK,IAAI,GAAG;KAE9D,KAAK,MAAM,aAAa,CAAC,MAAM,KAAK,GAClC,MAAM,IAAI,mCAAmC,QAAQ,CAAC,KAAK,IAAI,SAAS,CAAC;IAE7E;GACF;GACA,MAAM,iBAAiB,qBAAoC,cAAsC;IAC/F,IAAI,uBAAuB,OAAO,wBAAwB,YAAY,cAAc;KAClF,MAAM,QAAQ;KACd,MAAM,IAAI,WAAW,+BAA+B,MAAM,IAAI,KAAK,IAAI,YAAY;KAEnF,KAAK,MAAM,aAAa,CAAC,MAAM,KAAK,GAAG;MACrC,MAAM,IAAI,gCAAgC,QAAQ;OAAC,MAAM;OAAI,KAAK;OAAI;MAAS,CAAC;MAChF,MAAM,IAAI,qCAAqC,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC;KAC9E;IACF,OAAO;KACL,MAAM,MAAM;KACZ,MAAM,IAAI,WAAW,8BAA8B,KAAK,IAAI,GAAG;KAE/D,KAAK,MAAM,aAAa,CAAC,MAAM,KAAK,GAClC,MAAM,IAAI,mCAAmC,QAAQ,CAAC,KAAK,IAAI,SAAS,CAAC;IAE7E;GACF;GACA,MAAM,SAAS;IACb,MAAM,MAAM,MAAM,IAAI,WAAW,iBAAiB,KAAK,EAAE;IACzD,MAAM,IAAI,cAAc;IACxB,OAAO;GACT;GACA,MAAM,cAAc,SAAkE;IAEpF,MAAM,SAAS,MAAM,IAAI,WAAW,wBAAwB,KAAK,IAAI,QAAQ,mBAAmB,MAAO,KAAK,KAAK,KAAK,KAAK,QAAQ,mBAAmB,KAAK;IAC3J,OAAO,EACL,MAAM,YAAY;KAChB,OAAO;IACT,EACF;GACF;GAEA,MAAM,oBAAoB;IAExB,QAAO,MADgB,IAAI,WAAW,mBAAmB,KAAK,EAAE,EAAA,CAChD,MAAM,KAAK,YAAY,IAAI,uBAAuB,OAAO,CAAC;GAC5E;GAEA,MAAM,cAAc,WAAmB;IACrC,MAAM,IAAI,WAAW,oBAAoB,SAAS;GACpD;GACA,MAAM,eAAe,aAA4B;IAC/C,OAAO,MAAM,KAAK,OAAO,EAAE,YAAY,CAAC;GAC1C;GACA,MAAM,kBAAkB,UAA+B;IACrD,OAAO,MAAM,KAAK,OAAO,EAAE,gBAAgB,SAAS,CAAC;GACvD;GACA,MAAM,0BAA0B,UAA+B;IAC7D,OAAO,MAAM,KAAK,OAAO,EAAE,wBAAwB,SAAS,CAAC;GAC/D;GACA,MAAM,kBAAkB,UAA+B;IACrD,OAAO,MAAM,KAAK,OAAO,EAAE,gBAAgB,SAAS,CAAC;GACvD;GACA,MAAM,gBAAgB,MAA4B;IAChD,OAAO,MAAM,KAAK,OAAO,EAAE,gBAAgB,OAAO,SAAS,WAAW,OAAO,MAAM,MAAM,KAAK,CAAC;GACjG;GACA;GACA,MAAM,wBAAwB;IAC5B,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,kCAAkC,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CAAC;GACtG;GACA,MAAM,uBAAsC;IAC1C,MAAM,IAAIG,mCAAAA,uBAAuB,2GAA2G;GAC9I;GACA,MAAM,4BAAsD;IAC1D,MAAM,IAAIA,mCAAAA,uBAAuB,gHAAgH;GACnJ;GACA,cAAc,KAAK,gBAAgB,IAAI,oBAAoB,KAAK,aAAa,IAAI;GAKjF,MAAM,QAAQ,QAAgB;IAE5B,QAAO,MADa,KAAK,UAAU,EAAA,CACtB,MAAM,MAAM,EAAE,OAAO,MAAM,KAAK;GAC/C;GACA,MAAM,UAAU,SAAyF;IACvG,MAAM,SAASH,oCAAAA,OAAO,QAAQ,MAAM,IAAI,kBAAkB,UAAU;KAAC,KAAK;KAAI,SAAS;KAAS,SAAS;KAAM,SAAS;KAAQ,SAAS;KAAO,SAAS;IAAK,GAAY,YAAY,CAAC;IACvL,MAAM,QAAa,OAAO,MAAM,KAAK,MAAM,IAAI,oBAAoB,CAAC,CAAC;IACrE,MAAM,aAAa,OAAO,YAAY,eAAe;IACrD,OAAO;GACT;GACA,YAAY,OAAO,SAAyD;IAC1E,MAAM,OAAO,MAAM,IAAI,WAAW,kBAAA,GAAA,qBAAA,8BAAA,CAA+C;KAC/E,eAAe,KAAK;KACpB,GAAG;IACL,CAAC,CAAC;IACF,MAAM,IAAI,kBAAkB,mBAAmB,IAAI;IACnD,MAAM,IAAI,kBAAkB,KAAK,IAAI,EAAE,gBAAgB,KAAK,GAAG,CAAC;IAChE,OAAO,IAAI,oBAAoB,IAAI;GACrC;GACA,WAAW,OAAO,SAAe;IAC/B,MAAM,IAAI,WAAW,gBAAgB;KAAE,QAAQ,KAAK;KAAI,QAAQ,KAAK;IAAG,CAAC;IACzE,MAAM,IAAI,uBAAuB,KAAK,IAAI,KAAK,EAAE;GACnD;GACA,MAAM,sBAAsB;IAE1B,OADoBA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,gCAAgC,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CAC7F,CAAC,CAAC,KAAK,QAAQ,IAAI,sCAAsC,KAAK,IAAI,GAAG,CAAC;GACzF;GACA,MAAM,gBAAgB,gBAAiD,SAAmE;IACxI,IAAI,kBAAkB,QAAQ,gBAAgB;KAC5C,MAAM,QAAQ;KACd,MAAM,YAAY,SAAS,aAAa;KAExC,OADoBA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,gCAAgC,UAAU;MAAC,MAAM;MAAI,KAAK;MAAI;KAAS,GAAG,YAAY,CAClH,CAAC,CAAC,KAAK,SAAS,IAAI,0BAA0B,IAAI,CAAC;IACtE,OAAO;KAEL,MAAM,YAAYI,gBAAM,aAAa;KAErC,OADoBJ,oCAAAA,OAAO,QAAQ,MAAM,IAAI,mCAAmC,UAAU,CAAC,KAAK,IAAI,SAAS,GAAG,YAAY,CAC3G,CAAC,CAAC,KAAK,SAAS,IAAI,0BAA0B,IAAI,CAAC;IACtE;GACF;GACA,MAAM,cAAc,qBAAoC,cAA4D;IAClH,IAAI,uBAAuB,OAAO,wBAAwB,UAAU;KAClE,MAAM,QAAQ;KAEd,QAAO,MADmB,KAAK,gBAAgB,KAAK,EAAA,CACjC,MAAM,MAAM,EAAE,OAAO,YAAY,KAAK;IAC3D,OAAO;KACL,MAAM,MAAM;KAEZ,QAAO,MADmB,KAAK,gBAAgB,EAAA,CAC5B,MAAM,MAAM,EAAE,OAAO,GAAG,KAAK;IAClD;GACF;GACA,MAAM,cAAc,qBAAoC,cAAyC;IAC/F,IAAI,uBAAuB,OAAO,wBAAwB,UAAU;KAClE,MAAM,QAAQ;KACd,OAAQ,MAAM,KAAK,cAAc,OAAO,YAAsB,MAAO;IACvE,OAAO;KACL,MAAM,MAAM;KACZ,OAAQ,MAAM,KAAK,cAAc,GAAG,MAAO;IAC7C;GACF;GACA,MAAM,OAAO,QAAiC;IAC5C,MAAM,IAAI,kBAAkB,KAAK,IAAI,MAAM;GAC7C;GACA,MAAM,wBAAwB;IAC5B,OAAO,MAAM,IAAI,qBAAqB,yCAAyC,CAAC,CAAC;GACnF;GACA,MAAM,eAAe,SAAuD;IAC1E,MAAM,SAAS,MAAM,IAAI,WAAW,eAAe,OAAO;IAC1D,MAAM,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC5C,OAAO;GACT;GACA,MAAM,YAAY,SAA+B;IAC/C,MAAM,SAAS,MAAM,KAAK,OAAO,OAAO;IACxC,MAAM,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC5C,OAAO;GACT;GACA,MAAM,eAAe,MAAY;IAC/B,MAAM,SAASA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,4BAA4B,UAAU,CAAC,KAAK,IAAI,KAAK,EAAE,GAAG,YAAY,CAAC;IAC/G,OAAO,IAAI,mCAAmC,MAAM;GACtD;GACA,MAAM,sBAAsB;IAE1B,OADeA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,4BAA4B,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACzF,CAAC,CAAC,KAAK,SAAS,IAAI,8BAA8B,KAAK,IAAI,IAAI,CAAC;GAC9E;GACA,sBAAsB,OAAO,SAA4C;IACvE,MAAM,iBAAiB,MAAM,IAAI,WAAW,4BAAA,GAAA,gCAAA,wCAAA,CAAmE,KAAK,IAAI,IAAI,CAAC;IAC7H,MAAM,QAAQ,IAAI,CAChB,IAAI,4BAA4B,QAAQ,CAAC,KAAK,EAAE,CAAC,GACjD,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC,CACxC,CAAC;IACD,OAAO,IAAI,8BAA8B,KAAK,IAAI,cAAc;GAClE;GACA,MAAM,6BAA6B;IAEjC,OADgBA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,mCAAmC,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CAChG,CAAC,CAAC,KAAK,aAAa,IAAI,oCAAoC,KAAK,IAAI,QAAQ,CAAC;GAC7F;GACA,MAAM,cAAc;IAElB,OADeA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,wBAAwB,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACrF,CAAC,CAAC,KAAK,WAAW,IAAI,sBAAsB,MAAM,CAAC;GACjE;GACA,MAAM,aAAa,SAAwC;IACzD,MAAM,SAAS,MAAM,IAAI,WAAW,oBAClC,OAAA,GAAA,wBAAA,4BAAA,CAAkC,QAAQ,KAAK,IAAI,OAAO,GAC1D,MACA,QACF;IACA,MAAM,IAAI,wBAAwB,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnD,OAAO,IAAI,sBAAsB,MAAM;GACzC;GAEA,MAAM,qBAAqB;IAEzB,OADgBA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,2BAA2B,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACxF,CAAC,CAAC,KAAK,cAAc,IAAI,6BAA6B,SAAS,CAAC;GAC/E;GAEA,MAAM,iBAAiB,IAAY;IAEjC,QAAO,MADiB,KAAK,mBAAmB,EAAA,CAC/B,MAAM,MAAM,EAAE,OAAO,EAAE,KAAK;GAC/C;GACA,MAAM,gBAAgB,SAA6I;IACjK,MAAM,WAAW,SAAS,aAAa,MAAM,IAAI,eAAe,EAAA,EAAI;IACpE,IAAI,CAAC,UACH,MAAM,IAAIG,mCAAAA,uBAAuB,4EAA4E;IAI/G,MAAM,mBAAmB,MAAM,IAAI,WAAW,kCAAkC,KAAK,EAAE;IAEvF,IAAI,iBAAiB,WAAW,MAC9B,OAAOH,oCAAAA,OAAO,MAAM,IAAIC,iBAAAA,YAAY,0BAA0B,2DAA2D,CAAC;IAG5H,MAAM,EAAE,cAAc,SAAS,iBAAiB;IAEhD,CAAA,GAAA,uBAAA,mCAAA,CAAmC,cAAc,QAAQ;IAEzD,IAAI;IACJ,IAAI;KACF,UAAU,OAAA,GAAA,wBAAA,kBAAA,CAAwB,EAAE,aAAa,aAAa,CAAC;IACjE,SAAS,OAAY;KACnB,IAAI,iBAAiBI,wBAAAA,eACnB,OAAOL,oCAAAA,OAAO,MAAM,IAAIC,iBAAAA,YAAY,qBAAqB,MAAM,SAAS,MAAM,IAAI,CAAC;UAC9E;MAEL,CAAA,GAAA,mCAAA,aAAA,CAAa,+BAA+B,KAAK;MACjD,OAAOD,oCAAAA,OAAO,MAAM,IAAIC,iBAAAA,YAAY,0BAA0B,2DAA2D,CAAC;KAC5H;IACF;IAKA,MAAM,EAAE,aAAa,iBAAiB,MAAM,IAAI,WAAW,wBAAwB,KAAK,IAAI,MAAQ,GAAG,KAAK;IAC5G,MAAM,cAAc,IAAIK,+BAAAA,gBAAgB;KACtC;KACA;KACA,4BAA4B,YAAY;IAC1C,CAAC;IAED,MAAM,qBAAqB,MAAM,IAAI,WAAW,gBAAgB;KAAE,YAAY;KAAS;IAAK,GAAG,WAAW;IAE1G,MAAM,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC5C,OAAO;GACT;GACA,GAAG,IAAI,sBAAsB,KAAK,IAAI,MAAM;EAC9C,CAEgB;CAClB;CAEA,wBAAkC,MAAgE;EAShG,QAAA,GAAA,qBAAA,yBAAA,CAR0C;GACxC,GAAG,KAAK,oBAAoB,KAAK,IAAI;GACrC,aAAa;IACX,aAAa,KAAK;IAClB,iBAAiB,KAAK;GACxB;EACF,CAEc;CAChB;CAEA,kCAA4C,MAAgE;EAC1G,OAAO;GACL,IAAI,KAAK;GACT,gBAAgB,KAAK;GACrB,WAAW,IAAI,KAAK,KAAK,iBAAiB;GAC1C,QAAQ,YAAY;IAClB,MAAM,KAAK,WAAW,2BAA2B,KAAK,IAAI,KAAK,OAAO;IACtE,MAAM,KAAK,4BAA4B,QAAQ,CAAC,KAAK,OAAO,CAAC;GAC/D;EACF;CACF;CAEA,sCAAgD,QAAgB,MAAoE;EAClI,MAAM,MAAM;EACZ,OAAO;GACL,IAAI,KAAK;GACT,QAAQ,KAAK;GACb,iBAAiB,KAAK;GACtB,gBAAgB,KAAK;GACrB,WAAW,IAAI,KAAK,KAAK,iBAAiB;GAC1C,QAAQ,YAAY;IAClB,MAAM,IAAI,WAAW,+BAA+B,KAAK,IAAI,MAAM;IACnE,MAAM,QAAQ,IAAI;KAChB,IAAI,gCAAgC,QAAQ,CAAC,MAAM,CAAC;KACpD,IAAI,4BAA4B,QAAQ,CAAC,KAAK,OAAO,CAAC;KACtD,IAAI,uBAAuB,KAAK,SAAS,MAAM;IACjD,CAAC;GACH;EACF;CACF;CAEA,qBAAwC,MAAmC,SAA+D;EAOxI,QAAA,GAAA,qBAAA,yBAAA,CAN6C;GAC3C,GAAG,KAAK,oBAAoB,IAAI;GAChC,GAAG,KAAK,YAAY,OAAO;GAC3B,GAAG,KAAK,mBAAmB,IAAI,KAAK,yBAAyB,OAAO,IAAI,CAAC;EAC3E,CAEiB;CACnB;CAEA,oBAA8B,MAA+C;EAC3E,MAAM,MAAM;EACZ,OAAO;GACL,IAAI,KAAK;GACT,aAAa,KAAK;GAClB,iBAAiB,KAAK;GACtB,WAAW,IAAI,KAAK,KAAK,iBAAiB;GAC1C,gBAAgB,KAAK;GACrB,wBAAwB,KAAK;GAC7B,gBAAgB,KAAK;GACrB,MAAM,OAAO,QAA0C;IACrD,MAAM,IAAI,WAAW,iBAAiB,KAAK,KAAA,GAAA,qBAAA,8BAAA,CAAkC,MAAM,CAAC;IACpF,MAAM,QAAQ,IAAI;KAChB,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;KACtC,IAAI,kBAAkB,mBAAmB,IAAI;KAC7C,IAAI,kBAAkB,mBAAmB,IAAI;IAC/C,CAAC;GACH;GACA,MAAM,SAAS;IACb,MAAM,IAAI,WAAW,iBAAiB,KAAK,EAAE;IAC7C,MAAM,QAAQ,IAAI;KAChB,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;KACtC,IAAI,kBAAkB,mBAAmB,IAAI;KAC7C,IAAI,kBAAkB,mBAAmB,IAAI;IAC/C,CAAC;GACH;GACA,MAAM,YAAY;IAEhB,OADeN,oCAAAA,OAAO,QAAQ,MAAM,IAAI,+BAA+B,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CAC5F,CAAC,CAAC,KAAI,MAAK,IAAI,wBAAwB,CAAC,CAAC;GACvD;GACA,MAAM,QAAQ,QAAQ;IACpB,MAAM,IAAI,WAAW,oBAAoB;KACvC,QAAQ,KAAK;KACb;IACF,CAAC;IACD,MAAM,IAAI,uBAAuB,KAAK,IAAI,MAAM;GAClD;GACA,MAAM,WAAW,QAAQ;IACvB,MAAM,IAAI,WAAW,yBAAyB;KAC5C,QAAQ,KAAK;KACb;IACF,CAAC;IACD,MAAM,IAAI,uBAAuB,KAAK,IAAI,MAAM;GAClD;GACA,MAAM,WAAW,SAAkD;IACjE,MAAM,IAAI,WAAW,yBAAyB;KAC5C,QAAQ,KAAK;KACb,OAAO,QAAQ;KACf,aAAa,QAAQ,gBAAA,GAAA,yBAAA,qBAAA,CAAoC,IAAI,SAAS,CAAC,CAAC,gBAAgB,aAAa;IACvG,CAAC;IACD,MAAM,IAAI,4BAA4B,QAAQ,CAAC,KAAK,EAAE,CAAC;GACzD;GACA,MAAM,kBAAkB;IAEtB,OADeA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,4BAA4B,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACzF,CAAC,CAAC,KAAK,SAAS,IAAI,kCAAkC,IAAI,CAAC;GACzE;GACA,MAAM,cAAc;IAElB,OADeA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,wBAAwB,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACrF,CAAC,CAAC,KAAK,WAAW,IAAI,sBAAsB,MAAM,CAAC;GACjE;GACA,MAAM,aAAa,SAAwC;IACzD,MAAM,SAAS,MAAM,IAAI,WAAW,oBAClC,OAAA,GAAA,wBAAA,4BAAA,CAAkC,QAAQ,KAAK,IAAI,OAAO,GAC1D,MACA,QACF;IACA,MAAM,IAAI,wBAAwB,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnD,OAAO,IAAI,sBAAsB,MAAM;GACzC;GACA,GAAG,IAAI,sBAAsB,KAAK,IAAI,MAAM;EAC9C;CACF;CAEA,oBAA8B,UAA4D,MAA8C;EACtI,MAAM,MAAM;EACZ,OAAO;GACL,aAAa,KAAK;GAClB,UAAU,KAAK;GACf,qBAAqB,KAAK,IAAI,GAAG,KAAK,QAAQ;GAC9C,kBAAkB,OAAO,UAAkB;IACzC,MAAM,gBAAgB,SAAS,SAAS,SACpC;KAAE,QAAQ,KAAK;KAAI,QAAQ,SAAS;IAAG,IACvC,SAAS,SAAS,SAChB;KAAE,QAAQ,KAAK;KAAI,QAAQ,SAAS;IAAG,IACvC;KAAE,QAAQ,KAAK;KAAI,kBAAkB,SAAS;IAAG;IACvD,MAAM,IAAI,WAAW,mBAAmB,eAAe,EAAE,MAAM,CAAC;IAChE,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;SACvF,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;SAC5F,MAAM,IAAI,wBAAwB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;GACvE;GACA,kBAAkB,OAAO,UAAkB;IACzC,MAAM,gBAAgB,SAAS,SAAS,SACpC;KAAE,QAAQ,KAAK;KAAI,QAAQ,SAAS;IAAG,IACvC,SAAS,SAAS,SAChB;KAAE,QAAQ,KAAK;KAAI,QAAQ,SAAS;IAAG,IACvC;KAAE,QAAQ,KAAK;KAAI,kBAAkB,SAAS;IAAG;IACvD,MAAM,IAAI,WAAW,mBAAmB,eAAe;KAAE,OAAO,CAAC;KAAO,gBAAgB;IAAK,CAAC;IAC9F,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;SACvF,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;SAC5F,MAAM,IAAI,wBAAwB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;GACvE;GACA,qBAAqB,OAAO,UAAkB;IAC5C,IAAI;KACF,MAAM,gBAAgB,SAAS,SAAS,SACpC;MAAE,QAAQ,KAAK;MAAI,QAAQ,SAAS;KAAG,IACvC,SAAS,SAAS,SAChB;MAAE,QAAQ,KAAK;MAAI,QAAQ,SAAS;KAAG,IACvC;MAAE,QAAQ,KAAK;MAAI,kBAAkB,SAAS;KAAG;KACvD,MAAM,IAAI,WAAW,mBAAmB,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC;KACxE,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;UACvF,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;UAC5F,MAAM,IAAI,wBAAwB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;KACrE,OAAO;IACT,SAAS,OAAO;KACd,IAAI,iBAAiBC,iBAAAA,YAAY,gCAC/B,OAAO;KAET,MAAM;IACR;GACF;EACF;CACF;CAEA,MAAgB,eAAe,SAA6D;EAC1F,MAAM,OAAOD,oCAAAA,OAAO,QAAQ,MAAM,KAAK,wBAAwB,UAAU,CAAC,QAAQ,QAAQ,MAAM,GAAG,YAAY,CAAC;EAChH,OAAO,OAAO,KAAK,sBAAsB,IAAI,IAAI;CACnD;CAEA,MAAgB,eAAe,SAA6D;EAC1F,MAAM,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,wBAAwB,UAAU,CAAC,QAAQ,QAAQ,MAAM,GAAG,YAAY,CAAC;EAChH,OAAO,OAAO,KAAK,sBAAsB,IAAI,IAAI;CACnD;CACA,MAAgB,iBAAiB,QAA4C;EAC3E,MAAM,eAAe,MAAM,KAAK,eAAe,EAAE,OAAO,CAAC;EACzD,IAAI,iBAAiB,MACnB,OAAO;EAET,OAAO,MAAM,KAAK,kBAAkB,aAAa,MAAM;CACzD;CAEA,MAAgB,iBAAiB,KAAgB,kBAAuD;EACtG,MAAM,WAAW,MAAM,IAAI,KAAK,gBAAgB;EAChD,IAAI,aAAa,MACf,OAAO;EAET,MAAM,OAAO,MAAM,KAAK,kBAAkB,SAAS,OAAO;EAC1D,IAAI,MAAM,eAAe,CAAC,kBACxB,OAAO;EAET,OAAO;CACT;CAEA,MAAgB,iBAAiB,QAA4C;EAC3E,MAAM,eAAe,MAAM,KAAK,eAAe,EAAE,OAAO,CAAC;EACzD,IAAI,iBAAiB,MACnB,OAAO;EAET,OAAO,MAAM,KAAK,QAAQ,aAAa,MAAM;CAC/C;CAEA,MAAM,WAAW,SAAuD;EACtE,MAAM,OAAO,MAAM,KAAK,WAAW,kBAAA,GAAA,qBAAA,8BAAA,CAA+C,OAAO,CAAC;EAC1F,MAAM,KAAK,cAAc;EACzB,OAAO,KAAK,oBAAoB,IAAI;CACtC;CASA,MAAM,QAAQ,SAAqL;EACjM,IAAI,OAAO,YAAY,UACrB,OAAO,MAAM,KAAK,kBAAkB,OAAO;OACtC,IAAI,OAAO,YAAY,YAAY,YAAY,SACpD,OAAO,MAAM,KAAK,iBAAiB,QAAQ,MAAM;OAC5C,IAAI,OAAO,YAAY,YAAY,UAAU,WAAW,QAAQ,SAAmB,UACxF,OAAO,MAAM,KAAK,iBAAiB,QAAQ,KAAK,QAAQ,WAAW,QAAQ,OAAO,WAAW;OACxF;GACL,UAAU;GAGV,IAAI,SAAS,OAAO,eAAe,QAAQ,sBAAsB,OAC/D,MAAM,IAAI,MAAM,wHAAwH;GAI1I,KAAK,4BAA4B,SAAS,UAAU;GACpD,MAAM,UAAU,MAAM,KAAK,YAAY,SAAS,UAAU;GAC1D,IAAI,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,wBAAwB,UAAU,CAAC,OAAO,GAAG,YAAY,CAAC;GAC/F,MAAM,mBAAmB,SAAS,OAAO,eAAe,SAAS,OAAO;GACxE,MAAM,oBAAoB,SAAS,sBAAsB,QAAQ;GAEjE,IAAI,SAAS,QAAS,KAAK,gBAAgB,CAAC,oBAAsB,KAAK,iBAAiB,CAAC,mBACvF,QAAQ,SAAS,IAAjB;IACE,KAAK;KACH,IAAI,CAAC,MAAM,gBAAgB,MAAM,eAC/B,MAAM,KAAK,qBAAqB,EAAE,SAAS,KAAK,CAAC;UAEjD,MAAM,KAAK,iBAAiB,EAAE,SAAS,KAAK,CAAC;KAG/C;IAEF,KAAK,SACH,MAAM,IAAI,MAAM,mEAAmE;IAErF,KAAK,aAAa;KAChB,MAAM,SAAS,MAAM,KAAK,mBAAmB;KAC7C,OAAO,MAAM,KAAK,QAAQ;MAAE,YAAY;MAAQ,IAAI;MAAmC,mBAAmB;KAAK,CAAC,MAAA,GAAA,mCAAA,SAAA,CAAc,mDAAmD;IACnL;IACA,KAAK,KAAA;IACL,KAAK;IACL,KAAK,eACH,OAAO;GAEX;GAGF,OAAO,QAAQ,KAAK,qBAAqB,MAAM,OAAO;EACxD;CACF;CAEA,MAAM,gBAAqE;EACzE,QAAQ,KAAK,sFAAsF;EACnG,OAAO,MAAM,KAAK,QAAQ;CAC5B;CAEA,MAAM,kBAAkB,QAA4C;EAClE,MAAM,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,iBAAiB,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC;EACzF,OAAO,QAAQ,KAAK,oBAAoB,IAAI;CAC9C;CAGA,MAAM,UAAU,SAAyF;EACvG,MAAM,uBAAuB,SAAS,wBAAwB,QAAQ,qBAAqB,SAAS,IAAI,QAAQ,qBAAqB,KAAK,GAAG,IAAI,KAAA;EACjJ,MAAM,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,kBAAkB,UAAU;GAAC,SAAS;GAAQ,SAAS;GAAO,SAAS;GAAS,SAAS;GAAM,SAAS;GAAO,SAAS;GAAmB,SAAS;GAAkB,SAAS;GAAe,SAAS;GAAQ;EAAoB,GAAG,YAAY,CAAC;EAC1R,MAAM,SAAc,KAAK,MAAM,KAAK,MAAM,KAAK,oBAAoB,CAAC,CAAC;EACrE,OAAO,aAAa,KAAK,YAAY,eAAe;EACpD,OAAO;CACT;CAGA,0BAA0B,MAA6G;EACrI,OAAO,EACL,IAAI,KAAK,GACX;CACF;CAEA,wCAAwC,MAAqF;EAC3H,OAAO;GACL,IAAI,KAAK;GACT,aAAa,KAAK;GAClB,wBAAwB,KAAK;EAC/B;CACF;CAEA,2CAA2C,MAA2F;EACpI,OAAO;GACL,IAAI,KAAK;GACT,aAAa,KAAK;GAClB,wBAAwB,KAAK;EAC/B;CACF;CAEA,MAAM,QAAQ,SAAsJ;EAClK,IAAI,YAAY,SAAS;GACvB,MAAM,SAASA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,sBAAsB,UAAU,CAAC,QAAQ,QAAQ,QAAQ,MAAM,GAAG,YAAY,CAAC;GACxH,OAAO,KAAK,oBAAoB;IAAE,MAAM;IAAQ,IAAI,QAAQ;GAAO,GAAG,MAAM;EAC9E,OAAO,IAAI,YAAY,SAAS;GAC9B,MAAM,SAASA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,sBAAsB,UAAU,CAAC,QAAQ,QAAQ,QAAQ,MAAM,GAAG,YAAY,CAAC;GACxH,OAAO,KAAK,oBAAoB;IAAE,MAAM;IAAQ,IAAI,QAAQ;GAAO,GAAG,MAAM;EAC9E,OAAO;GACL,MAAM,SAASA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,wBAAwB,UAAU,CAAC,QAAQ,kBAAkB,QAAQ,MAAM,GAAG,YAAY,CAAC;GACpI,OAAO,KAAK,oBAAoB;IAAE,MAAM;IAAU,IAAI,QAAQ;GAAiB,GAAG,MAAM;EAC1F;CACF;CAEA,MAAgB,kBAAkB,cAA0C,YAAoB,QAA+B;EAC7H,IAAI,iBAAiB,QACnB,MAAM,KAAK,sBAAsB,QAAQ,CAAC,YAAY,MAAM,CAAC;OACxD,IAAI,iBAAiB,QAC1B,MAAM,KAAK,sBAAsB,QAAQ,CAAC,YAAY,MAAM,CAAC;OAE7D,MAAM,KAAK,wBAAwB,QAAQ,CAAC,YAAY,MAAM,CAAC;CAEnE;CAEA,MAAM,aAAa,SAAwE;EACzF,IAAI,YAAY,SAAS;GACvB,MAAM,WAAWA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,yBAAyB,UAAU;IAAC,QAAQ;IAAQ,QAAQ,UAAU;IAAM,QAAQ,SAAS;GAAI,GAAG,YAAY,CAAC;GAC5J,OAAO,KAAK,8BAA8B,QAAQ;EACpD,OAAO,IAAI,YAAY,SAAS;GAC9B,MAAM,WAAWA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,yBAAyB,UAAU;IAAC,QAAQ;IAAQ,QAAQ,UAAU;IAAM,QAAQ,SAAS;GAAI,GAAG,YAAY,CAAC;GAC5J,OAAO,KAAK,8BAA8B,QAAQ;EACpD;EACA,MAAM,WAAWA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,2BAA2B,UAAU;GAAC,QAAQ;GAAkB,QAAQ,UAAU;GAAM,QAAQ,SAAS;EAAI,GAAG,YAAY,CAAC;EACxK,OAAO,KAAK,8BAA8B,QAAQ;CACpD;CAEA,iBACE,SACkE;EAClE,IAAI,YAAY,SACd,OAAO;GAAE,cAAc;GAAQ,YAAY,QAAQ;EAAO;EAE5D,IAAI,YAAY,SACd,OAAO;GAAE,cAAc;GAAQ,YAAY,QAAQ;EAAO;EAE5D,OAAO;GAAE,cAAc;GAAU,YAAY,QAAQ;EAAiB;CACxE;CAEA,MAAM,aAAa,SAID;EAChB,MAAM,EAAE,cAAc,eAAe,KAAK,iBAAiB,OAAO;EAElE,MAAM,KAAK,WAAW,aAAa;GACjC;GACA;GACA,WAAW,eAAe,UAAU,QAAQ,YAAY,KAAA;GACxD,SAAS,aAAa,UAAU,QAAQ,UAAU,KAAA;GAClD,UAAU,QAAQ;EACpB,CAAC;EAOD,OALc,iBAAiB,SAC3B,KAAK,2BACL,iBAAiB,SACf,KAAK,2BACL,KAAK,2BAAA,CACC,QAAQ;GAAC;GAAY;GAAM;EAAI,CAAC;CAC9C;CAEA,MAAM,kBAAkB,SAIJ;EAClB,MAAM,EAAE,cAAc,eAAe,KAAK,iBAAiB,OAAO;EAElE,MAAM,oBAAoB,eAAe,UAAU,QAAQ,YAAY,QAAQ;EAC/E,OAAO,MAAM,KAAK,WAAW,kBAAkB,cAAc,YAAY,mBAAmB,MAAM,QAAQ,WAAW,QAAQ;CAC/H;CAEA,MAAM,WAAW,MAAoD;EACnE,MAAM,OAAO,MAAM,KAAK,WAAW,kBAAA,GAAA,qBAAA,8BAAA,CAA+C,IAAI,CAAC;EACvF,MAAM,KAAK,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;EAC7C,MAAM,KAAK,kBAAkB,mBAAmB,IAAI;EACpD,OAAO,KAAK,oBAAoB,IAAI;CACtC;CAEA,MAAM,UAAU,SAAyF;EACvG,MAAM,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,kBAAkB,UAAU;GAAC,KAAA;GAAW,SAAS;GAAS,SAAS;GAAM,SAAS;GAAQ,SAAS;GAAO,SAAS;EAAK,GAAY,YAAY,CAAC;EACxL,MAAM,QAAa,KAAK,MAAM,KAAK,MAAM,KAAK,oBAAoB,CAAC,CAAC;EACpE,MAAM,aAAa,KAAK,YAAY,eAAe;EACnD,OAAO;CACT;CAGA,MAAM,0BAA0B,QAAgB,SAAwF;EACtI,MAAM,YAAY,SAAS,aAAa;EAExC,OADaA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,qCAAqC,UAAU,CAAC,QAAQ,SAAS,GAAY,YAAY,CACtH,CAAC,CAAC,KAAK,OAAO;GAAE,QAAQ,EAAE;GAAS,cAAc,EAAE;EAAG,EAAE;CACpE;CAKA,MAAM,QAAQ,SAAmE;EAC/E,IAAI,OAAO,YAAY,YAAY,YAAY,SAC7C,OAAO,MAAM,KAAK,iBAAiB,QAAQ,MAAM;OAC5C;GACL,MAAM,SAAS;GACf,IAAI,UAAU,MACZ,OAAO;GAET,MAAM,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,iBAAiB,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC;GACzF,OAAO,QAAQ,OAAO,OAAO,KAAK,oBAAoB,IAAI;EAC5D;CACF;CAGA,4BAAsC,IAA4B;EAChE,MAAM,mBAAmB,YAAgC;GACvD,IAAI,OAAO,QAAQ,WAAW,UAAU,MAAM,IAAI,MAAM,kCAAkC,OAAO,QAAQ,MAAM;EACjH;EACA,OAAO;GACL;GACA,UAAU,OAAO,KAAK,OAAO,YAAY;IACvC,gBAAgB,OAAO;IACvB,MAAM,KAAK,WAAW,uBAAuB,QAAQ,QAAQ,IAAI,KAAK,KAAK;GAC7E;GACA,UAAU,OAAO,KAAK,YAAY;IAChC,gBAAgB,OAAO;IACvB,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,gCAAgC,UAAU;KAAC;KAAI;KAAK,QAAQ;IAAM,GAAG,YAAY,CAAC;GACrH;EACF;CACF;CAEA,MAAM,kBAAkB,IAAqC;EAC3D,OAAO,KAAK,4BAA4B,EAAE;CAC5C;CAGA,MAAM,UAAU,SAA0C;EACxD,MAAM,KAAK,WAAW,UAAU,OAAO;EACvC,MAAM,KAAK,wBAAwB,QAAQ,CAAC,CAAC;CAC/C;CAEA,MAAM,wBAAoD;EACxD,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,wBAAwB,UAAU,CAAC,GAAG,YAAY,CAAC;CACtF;CAGA,MAAM,6BAA4C;EAChD,MAAM,KAAK,WAAW,2BAA2B;EAEjD,MAAM,KAAK,wBAAwB,QAAQ,CAAC,CAAC;CAC/C;CAEA,MAAM,eAAe,SAAiE;EACpF,OAAO,MAAM,KAAK,WAAW,eAAe,OAAO;CACrD;CAEA,MAAyB,gBAAgB,SAA0B;EACjE,MAAM,QAAQ,IAAI,CAChB,MAAM,aAAa,OAAO,GAC1B,KAAK,wBAAwB,QAAQ,CAAC,OAAO,CAAC,CAChD,CAAC;CACH;CAEA,MAAyB,gBAAgB;EACvC,MAAM,QAAQ,IAAI;GAChB,MAAM,cAAc;GACpB,KAAK,iBAAiB,mBAAmB,IAAI;GAC7C,KAAK,kBAAkB,mBAAmB,IAAI;GAC9C,KAAK,4BAA4B,mBAAmB,IAAI;GACxD,KAAK,2BAA2B,mBAAmB,IAAI;GACvD,KAAK,kCAAkC,mBAAmB,IAAI;EAChE,CAAC;CACH;CAEA,MAAM,oBAAoB,SAO4F;EACpH,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,WAAW,0BAA0B;IAC3D,SAAS,QAAQ;IACjB,oBAAoB,QAAQ;IAC5B,YAAY,QAAQ;IACpB,OAAO,QAAQ;IACf,eAAe,QAAQ;IACvB,0BAA0B,QAAQ;GACpC,CAAC;GAED,MAAM,QAAQ,IAAI,CAChB,KAAK,2BAA2B,QAAQ,CAAC,QAAQ,MAAM,CAAC,GACxD,KAAK,kCAAkC,QAAQ,CAAC,QAAQ,MAAM,CAAC,CACjE,CAAC;GACD,OAAOA,oCAAAA,OAAO,GAAG,KAAK,6BAA6B,IAAI,CAAC;EAC1D,SAAS,OAAO;GACd,IAAIC,iBAAAA,YAAY,2CAA2C,WAAW,KAAK,GACzE,OAAOD,oCAAAA,OAAO,MAAM,KAAK;GAE3B,MAAM;EACR;CACF;AACF"}
+{"version":3,"file":"server-app-impl.js","names":["_HexclaveClientAppImplIncomplete","Result","KnownErrors","HexclaveServerInterface","HexclaveAssertionError","opts","WebAuthnError","InternalSession"],"sources":["../../../../../src/lib/hexclave-app/apps/implementations/server-app-impl.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport { HexclaveServerInterface, KnownErrors } from \"@hexclave/shared\";\nimport type { AnalyticsQueryOptions, AnalyticsQueryResponse } from \"@hexclave/shared/dist/interface/crud/analytics\";\nimport type { AdminGetSessionReplayChunkEventsResponse } from \"@hexclave/shared/dist/interface/crud/session-replays\";\nimport type { AdminSessionReplay, AdminSessionReplayChunk, ListSessionReplayChunksOptions, ListSessionReplayChunksResult, ListSessionReplaysOptions, ListSessionReplaysResult, SessionReplayAllEventsResult } from \"../../session-replays\";\nimport { ContactChannelsCrud } from \"@hexclave/shared/dist/interface/crud/contact-channels\";\nimport { ItemCrud } from \"@hexclave/shared/dist/interface/crud/items\";\nimport { NotificationPreferenceCrud } from \"@hexclave/shared/dist/interface/crud/notification-preferences\";\nimport { OAuthProviderCrud } from \"@hexclave/shared/dist/interface/crud/oauth-providers\";\nimport type { CustomerProductsListResponse } from \"@hexclave/shared/dist/interface/crud/products\";\nimport { TeamApiKeysCrud, UserApiKeysCrud, teamApiKeysCreateOutputSchema, userApiKeysCreateOutputSchema } from \"@hexclave/shared/dist/interface/crud/project-api-keys\";\nimport { ProjectPermissionDefinitionsCrud, ProjectPermissionsCrud } from \"@hexclave/shared/dist/interface/crud/project-permissions\";\nimport { TeamInvitationCrud } from \"@hexclave/shared/dist/interface/crud/team-invitation\";\nimport { TeamMemberProfilesCrud } from \"@hexclave/shared/dist/interface/crud/team-member-profiles\";\nimport { TeamPermissionDefinitionsCrud, TeamPermissionsCrud } from \"@hexclave/shared/dist/interface/crud/team-permissions\";\nimport { TeamsCrud } from \"@hexclave/shared/dist/interface/crud/teams\";\nimport { UsersCrud } from \"@hexclave/shared/dist/interface/crud/users\";\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport type { AsyncCache } from \"@hexclave/shared/dist/utils/caches\";\nimport { HexclaveAssertionError, captureError, throwErr } from \"@hexclave/shared/dist/utils/errors\";\nimport { ProviderType } from \"@hexclave/shared/dist/utils/oauth\";\nimport { runAsynchronously } from \"@hexclave/shared/dist/utils/promises\";\nimport { suspend } from \"@hexclave/shared/dist/utils/react\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { isUuid } from \"@hexclave/shared/dist/utils/uuids\";\nimport { WebAuthnError, startRegistration } from \"@simplewebauthn/browser\";\nimport * as yup from \"yup\";\nimport { constructRedirectUrl } from \"../../../../utils/url\";\nimport { ApiKey, ApiKeyCreationOptions, ApiKeyUpdateOptions, apiKeyCreationOptionsToCrud, apiKeyUpdateOptionsToCrud } from \"../../api-keys\";\nimport { ConvexCtx, GetCurrentUserOptions } from \"../../common\";\nimport { DeprecatedOAuthConnection, OAuthConnection } from \"../../connected-accounts\";\nimport { ServerContactChannel, ServerContactChannelCreateOptions, ServerContactChannelUpdateOptions, serverContactChannelCreateOptionsToCrud, serverContactChannelUpdateOptionsToCrud } from \"../../contact-channels\";\nimport { Customer, CustomerProductsList, CustomerProductsRequestOptions, InlineProduct, ServerItem } from \"../../customers\";\nimport { DataVaultStore } from \"../../data-vault\";\nimport { EmailDeliveryInfo, SendEmailOptions } from \"../../email\";\nimport { NotificationCategory } from \"../../notification-categories\";\nimport { scopePasskeyRegistrationToHostname } from \"../../passkey-rp-id\";\nimport { AdminProjectPermissionDefinition, AdminTeamPermission, AdminTeamPermissionDefinition } from \"../../permissions\";\nimport { EditableTeamMemberProfile, ReceivedTeamInvitation, SentTeamInvitation, ServerListTeamsOptions, ServerListUsersOptions, ServerTeam, ServerTeamCreateOptions, ServerTeamUpdateOptions, ServerTeamUser, Team, serverTeamCreateOptionsToCrud, serverTeamUpdateOptionsToCrud } from \"../../teams\";\nimport { ProjectCurrentServerUser, ServerOAuthProvider, ServerUser, ServerUserCreateOptions, ServerUserUpdateOptions, serverUserCreateOptionsToCrud, serverUserUpdateOptionsToCrud, withUserDestructureGuard } from \"../../users\";\nimport { StackServerAppConstructorOptions } from \"../interfaces/server-app\";\nimport { _HexclaveClientAppImplIncomplete } from \"./client-app-impl\";\nimport { clientVersion, createCache, createCacheBySession, getDefaultExtraRequestHeaders, getDefaultProjectId, getDefaultPublishableClientKey, getDefaultSecretServerKey, resolveApiUrls, resolveConstructorOptions } from \"./common\";\n\n\nexport class _HexclaveServerAppImplIncomplete<HasTokenStore extends boolean, ProjectId extends string> extends _HexclaveClientAppImplIncomplete<HasTokenStore, ProjectId> {\n  declare protected _interface: HexclaveServerInterface;\n\n  // TODO override the client user cache to use the server user cache, so we save some requests\n  private readonly _currentServerUserCache = createCacheBySession(async (session) => {\n    if (session.isKnownToBeInvalid()) {\n      // see comment in _currentUserCache for more details on why we do this\n      return null;\n    }\n    return await this._interface.getServerUserByToken(session);\n  });\n  private readonly _serverUsersCache = createCache<[\n    cursor?: string,\n    limit?: number,\n    orderBy?: 'signedUpAt' | 'lastActiveAt',\n    desc?: boolean,\n    query?: string,\n    includeRestricted?: boolean,\n    includeAnonymous?: boolean,\n    onlyAnonymous?: boolean,\n    teamId?: string,\n    excludedEmailDomains?: string,\n  ], UsersCrud['Server']['List']>(async ([cursor, limit, orderBy, desc, query, includeRestricted, includeAnonymous, onlyAnonymous, teamId, excludedEmailDomains]) => {\n    if (onlyAnonymous && !includeAnonymous) {\n      throw new HexclaveAssertionError(\"onlyAnonymous=true requires includeAnonymous=true\");\n    }\n    const excludedEmailDomainList = excludedEmailDomains?.split(\",\");\n    if (onlyAnonymous) {\n      return await this._interface.listServerUsers({ cursor, limit, orderBy, desc, query, excludedEmailDomains: excludedEmailDomainList, includeRestricted, includeAnonymous: true, onlyAnonymous: true, teamId });\n    }\n    return await this._interface.listServerUsers({ cursor, limit, orderBy, desc, query, excludedEmailDomains: excludedEmailDomainList, includeRestricted, includeAnonymous, teamId });\n  });\n  private readonly _serverUserCache = createCache<string[], UsersCrud['Server']['Read'] | null>(async ([userId]) => {\n    const user = await this._interface.getServerUserById(userId);\n    return Result.or(user, null);\n  });\n  private readonly _serverTeamsCache = createCache<[\n    userId?: string,\n    orderBy?: 'createdAt',\n    desc?: boolean,\n    cursor?: string,\n    limit?: number,\n    query?: string,\n  ], TeamsCrud['Server']['List']>(async ([userId, orderBy, desc, cursor, limit, query]) => {\n    return await this._interface.listServerTeamsPaginated({ userId, orderBy, desc, cursor, limit, query });\n  });\n  private readonly _serverTeamCache = createCache<string[], TeamsCrud['Server']['Read'] | null>(async ([teamId]) => {\n    // The previous list-and-find implementation treated unknown or malformed IDs as null; preserve that behavior without making an invalid request.\n    if (!isUuid(teamId)) {\n      return null;\n    }\n    try {\n      return await this._interface.getServerTeam(teamId);\n    } catch (error) {\n      if (KnownErrors.TeamNotFound.isInstance(error)) {\n        return null;\n      }\n      throw error;\n    }\n  });\n\n  protected async _refreshTeamMembership(teamId: string, userId: string) {\n    await Promise.all([\n      this._serverTeamMemberProfilesCache.refresh([teamId]),\n      this._serverTeamsCache.refreshWhere(([u]) => u === userId || u === undefined),\n      this._serverUsersCache.refreshWhere((key) => key[8] === teamId),\n    ]);\n  }\n  private readonly _serverUserTeamInvitationsCache = createCache<string[], TeamInvitationCrud['Client']['Read'][]>(async ([userId]) => {\n    return await this._interface.listServerUserTeamInvitations(userId);\n  });\n  private readonly _serverTeamUserPermissionsCache = createCache<\n    [string, string, boolean],\n    TeamPermissionsCrud['Server']['Read'][]\n  >(async ([teamId, userId, recursive]) => {\n    return await this._interface.listServerTeamPermissions({ teamId, userId, recursive }, null);\n  });\n  // Bulk variant: one request returning permissions for every member of a\n  // team. Used by the dashboard's team-member table to avoid N per-row\n  // calls. Keyed without userId so it's a distinct cache entry from the\n  // per-user lookup above.\n  private readonly _serverAllTeamMemberPermissionsCache = createCache<\n    [string, boolean],\n    TeamPermissionsCrud['Server']['Read'][]\n  >(async ([teamId, recursive]) => {\n    return await this._interface.listServerTeamPermissions({ teamId, recursive }, null);\n  });\n  private readonly _serverUserProjectPermissionsCache = createCache<\n    [string, boolean],\n    ProjectPermissionsCrud['Server']['Read'][]\n  >(async ([userId, recursive]) => {\n    return await this._interface.listServerProjectPermissions({ userId, recursive }, null);\n  });\n  /** @deprecated Used by legacy getConnectedAccount(providerId) — uses old per-provider access token endpoint */\n  private readonly _serverUserOAuthConnectionAccessTokensCache = createCache<[string, string, string], { accessToken: string } | null>(\n    async ([userId, providerId, scope]) => {\n      try {\n        const result = await this._interface.createServerProviderAccessToken(userId, providerId, scope || \"\");\n        return { accessToken: result.access_token };\n      } catch (err) {\n        if (!(KnownErrors.OAuthAccessTokenNotAvailable.isInstance(err) || KnownErrors.OAuthConnectionDoesNotHaveRequiredScope.isInstance(err) || KnownErrors.OAuthConnectionNotConnectedToUser.isInstance(err))) {\n          throw err;\n        }\n      }\n      return null;\n    }\n  );\n  /** @deprecated Used by legacy getConnectedAccount(providerId) — combines token check + redirect */\n  private readonly _serverUserOAuthConnectionCache = createCache<[string, ProviderType, string, boolean], DeprecatedOAuthConnection | null>(\n    async ([userId, providerId, scope, redirect]) => {\n      return await this._getUserOAuthConnectionCacheFn({\n        getUser: async () => Result.orThrow(await this._serverUserCache.getOrWait([userId], \"write-only\")),\n        getOrWaitOAuthToken: async () => Result.orThrow(await this._serverUserOAuthConnectionAccessTokensCache.getOrWait([userId, providerId, scope || \"\"] as const, \"write-only\")),\n        providerId,\n        scope,\n        redirect,\n        session: null,\n      });\n    }\n  );\n  private readonly _serverUserConnectedAccountsCache = createCache<[string], OAuthConnection[]>(\n    async ([userId]) => {\n      const result = await this._interface.listServerConnectedAccounts(userId);\n      return result.items.map((item) => this._createServerOAuthConnectionFromCrudItem(userId, item));\n    }\n  );\n  private readonly _serverUserOAuthConnectionAccessTokensByAccountCache = createCache<[string, string, string, string], { accessToken: string } | null>(\n    async ([userId, providerId, providerAccountId, scope]) => {\n      try {\n        const result = await this._interface.createServerProviderAccessTokenByAccount(userId, providerId, providerAccountId, scope || \"\");\n        return { accessToken: result.access_token };\n      } catch (err) {\n        if (!(KnownErrors.OAuthAccessTokenNotAvailable.isInstance(err) || KnownErrors.OAuthConnectionDoesNotHaveRequiredScope.isInstance(err) || KnownErrors.OAuthConnectionNotConnectedToUser.isInstance(err))) {\n          throw err;\n        }\n      }\n      return null;\n    }\n  );\n  private readonly _serverTeamMemberProfilesCache = createCache<[string], TeamMemberProfilesCrud['Server']['Read'][]>(\n    async ([teamId]) => {\n      return await this._interface.listServerTeamMemberProfiles({ teamId });\n    }\n  );\n  private readonly _serverTeamInvitationsCache = createCache<[string], TeamInvitationCrud['Server']['Read'][]>(\n    async ([teamId]) => {\n      return await this._interface.listServerTeamInvitations({ teamId });\n    }\n  );\n  private readonly _serverUserTeamProfileCache = createCache<[string, string], TeamMemberProfilesCrud['Client']['Read']>(\n    async ([teamId, userId]) => {\n      return await this._interface.getServerTeamMemberProfile({ teamId, userId });\n    }\n  );\n  private readonly _serverContactChannelsCache = createCache<[string], ContactChannelsCrud['Server']['Read'][]>(\n    async ([userId]) => {\n      return await this._interface.listServerContactChannels(userId);\n    }\n  );\n  private readonly _serverNotificationCategoriesCache = createCache<[string], NotificationPreferenceCrud['Server']['Read'][]>(\n    async ([userId]) => {\n      return await this._interface.listServerNotificationCategories(userId);\n    }\n  );\n  private readonly _serverDataVaultStoreValueCache = createCache<[string, string, string], string | null>(async ([storeId, key, secret]) => {\n    return await this._interface.getDataVaultStoreValue(secret, storeId, key);\n  });\n\n  private readonly _emailDeliveryInfoCache = createCache(async () => {\n    return await this._interface.getEmailDeliveryInfo();\n  });\n\n  private readonly _serverUserApiKeysCache = createCache<[string], UserApiKeysCrud['Server']['Read'][]>(\n    async ([userId]) => {\n      const result = await this._interface.listProjectApiKeys({\n        user_id: userId,\n      }, null, \"server\");\n      return result as UserApiKeysCrud['Server']['Read'][];\n    }\n  );\n\n  private readonly _serverTeamApiKeysCache = createCache<[string], TeamApiKeysCrud['Server']['Read'][]>(\n    async ([teamId]) => {\n      const result = await this._interface.listProjectApiKeys({\n        team_id: teamId,\n      }, null, \"server\");\n      return result as TeamApiKeysCrud['Server']['Read'][];\n    }\n  );\n\n  private readonly _convexIdentitySubjectCache = createCache<[ConvexCtx], string | null>(\n    async ([ctx]) => {\n      const identity = await ctx.auth.getUserIdentity();\n      return identity ? identity.subject : null;\n    }\n  );\n\n  private readonly _serverCheckApiKeyCache = createCache<[\"user\" | \"team\", string], UserApiKeysCrud['Server']['Read'] | TeamApiKeysCrud['Server']['Read'] | null>(async ([type, apiKey]) => {\n    const result = await this._interface.checkProjectApiKey(\n      type,\n      apiKey,\n      null,\n      \"server\",\n    );\n    return result;\n  });\n\n  private readonly _serverOAuthProvidersCache = createCache<[string], OAuthProviderCrud['Server']['Read'][]>(\n    async ([userId]) => {\n      return await this._interface.listServerOAuthProviders({ user_id: userId });\n    }\n  );\n\n  private readonly _serverTeamItemsCache = createCache<[string, string], ItemCrud['Client']['Read']>(\n    async ([teamId, itemId]) => {\n      return await this._interface.getItem({ teamId, itemId }, null, \"server\");\n    }\n  );\n\n  private readonly _serverUserItemsCache = createCache<[string, string], ItemCrud['Client']['Read']>(\n    async ([userId, itemId]) => {\n      return await this._interface.getItem({ userId, itemId }, null, \"server\");\n    }\n  );\n\n  private readonly _serverCustomItemsCache = createCache<[string, string], ItemCrud['Client']['Read']>(\n    async ([customCustomerId, itemId]) => {\n      return await this._interface.getItem({ customCustomerId, itemId }, null, \"server\");\n    }\n  );\n\n  private readonly _serverUserProductsCache = createCache<[string, string | null, number | null], CustomerProductsListResponse>(\n    async ([userId, cursor, limit]) => {\n      return await this._interface.listProducts({\n        customer_type: \"user\",\n        customer_id: userId,\n        cursor: cursor ?? undefined,\n        limit: limit ?? undefined,\n      }, null, \"server\");\n    }\n  );\n\n  private readonly _serverTeamProductsCache = createCache<[string, string | null, number | null], CustomerProductsListResponse>(\n    async ([teamId, cursor, limit]) => {\n      return await this._interface.listProducts({\n        customer_type: \"team\",\n        customer_id: teamId,\n        cursor: cursor ?? undefined,\n        limit: limit ?? undefined,\n      }, null, \"server\");\n    }\n  );\n\n  private readonly _serverCustomProductsCache = createCache<[string, string | null, number | null], CustomerProductsListResponse>(\n    async ([customCustomerId, cursor, limit]) => {\n      return await this._interface.listProducts({\n        customer_type: \"custom\",\n        customer_id: customCustomerId,\n        cursor: cursor ?? undefined,\n        limit: limit ?? undefined,\n      }, null, \"server\");\n    }\n  );\n\n  protected _createServerCustomer(userIdOrTeamId: string, type: \"user\" | \"team\"): Omit<Customer<true>, \"id\"> {\n    const app = this;\n    const productsCache = type === \"user\" ? app._serverUserProductsCache : app._serverTeamProductsCache;\n    const customerOptions = type === \"user\" ? { userId: userIdOrTeamId } : { teamId: userIdOrTeamId };\n    return {\n      ...this._createCustomer(userIdOrTeamId, type, null),\n      async getItem(itemId: string) {\n        return await app.getItem({ itemId, ...customerOptions });\n      },\n      async grantProduct(productOptions: { productId: string, quantity?: number } | { product: InlineProduct, quantity?: number }) {\n        if (type === \"user\") {\n          if (\"productId\" in productOptions) {\n            await app.grantProduct({ userId: userIdOrTeamId, productId: productOptions.productId, quantity: productOptions.quantity });\n          } else {\n            await app.grantProduct({ userId: userIdOrTeamId, product: productOptions.product, quantity: productOptions.quantity });\n          }\n        } else {\n          if (\"productId\" in productOptions) {\n            await app.grantProduct({ teamId: userIdOrTeamId, productId: productOptions.productId, quantity: productOptions.quantity });\n          } else {\n            await app.grantProduct({ teamId: userIdOrTeamId, product: productOptions.product, quantity: productOptions.quantity });\n          }\n        }\n        await productsCache.refresh([userIdOrTeamId, null, null]);\n      },\n      async createCheckoutUrl(options: { productId: string, returnUrl?: string } | { product: InlineProduct, returnUrl?: string }) {\n        const productIdOrInline = \"productId\" in options ? options.productId : options.product;\n        return await app._interface.createCheckoutUrl(type, userIdOrTeamId, productIdOrInline, null, options.returnUrl, \"server\");\n      },\n    };\n  }\n\n  private async _updateServerUser(userId: string, update: ServerUserUpdateOptions): Promise<UsersCrud['Server']['Read']> {\n    const result = await this._interface.updateServerUser(userId, serverUserUpdateOptionsToCrud(update));\n    await this._refreshUsers();\n    return result;\n  }\n\n  protected _serverEditableTeamProfileFromCrud(crud: TeamMemberProfilesCrud['Client']['Read']): EditableTeamMemberProfile {\n    const app = this;\n    return {\n      displayName: crud.display_name,\n      profileImageUrl: crud.profile_image_url,\n      async update(update: { displayName?: string, profileImageUrl?: string }) {\n        await app._interface.updateServerTeamMemberProfile({\n          teamId: crud.team_id,\n          userId: crud.user_id,\n          profile: {\n            display_name: update.displayName,\n            profile_image_url: update.profileImageUrl,\n          },\n        });\n        await app._serverUserTeamProfileCache.refresh([crud.team_id, crud.user_id]);\n      }\n    };\n  }\n\n  protected _serverContactChannelFromCrud(userId: string, crud: ContactChannelsCrud['Server']['Read']): ServerContactChannel {\n    const app = this;\n    return {\n      id: crud.id,\n      value: crud.value,\n      type: crud.type,\n      isVerified: crud.is_verified,\n      isPrimary: crud.is_primary,\n      usedForAuth: crud.used_for_auth,\n      async sendVerificationEmail(options?: { callbackUrl?: string }) {\n        await app._interface.sendServerContactChannelVerificationEmail(userId, crud.id, options?.callbackUrl ?? constructRedirectUrl(app._getUrls().emailVerification, \"callbackUrl\"));\n      },\n      async update(data: ServerContactChannelUpdateOptions) {\n        await app._interface.updateServerContactChannel(userId, crud.id, serverContactChannelUpdateOptionsToCrud(data));\n        await Promise.all([\n          app._serverContactChannelsCache.refresh([userId]),\n          app._serverUserCache.refresh([userId])\n        ]);\n      },\n      async delete() {\n        await app._interface.deleteServerContactChannel(userId, crud.id);\n        await Promise.all([\n          app._serverContactChannelsCache.refresh([userId]),\n          app._serverUserCache.refresh([userId])\n        ]);\n      },\n    };\n  }\n\n  protected _serverNotificationCategoryFromCrud(userId: string, crud: NotificationPreferenceCrud['Server']['Read']): NotificationCategory {\n    const app = this;\n    return {\n      id: crud.notification_category_id,\n      name: crud.notification_category_name,\n      enabled: crud.enabled,\n      canDisable: crud.can_disable,\n\n      async setEnabled(enabled: boolean) {\n        await app._interface.setServerNotificationsEnabled(userId, crud.notification_category_id, enabled);\n        await app._serverNotificationCategoriesCache.refresh([userId]);\n      },\n    };\n  }\n\n  protected _serverOAuthProviderFromCrud(crud: OAuthProviderCrud['Server']['Read']) {\n    const app = this;\n    return {\n      id: crud.id,\n      type: crud.type,\n      userId: crud.user_id,\n      accountId: crud.account_id,\n      email: crud.email,\n      allowSignIn: crud.allow_sign_in,\n      allowConnectedAccounts: crud.allow_connected_accounts,\n\n      async update(data: { accountId?: string, email?: string, allowSignIn?: boolean, allowConnectedAccounts?: boolean }): Promise<Result<void,\n        InstanceType<typeof KnownErrors.OAuthProviderAccountIdAlreadyUsedForSignIn>\n      >> {\n        try {\n          await app._interface.updateServerOAuthProvider(crud.user_id, crud.id, {\n            account_id: data.accountId,\n            email: data.email,\n            allow_sign_in: data.allowSignIn,\n            allow_connected_accounts: data.allowConnectedAccounts,\n          });\n          await Promise.all([\n            app._serverOAuthProvidersCache.refresh([crud.user_id]),\n            app._serverUserConnectedAccountsCache.refresh([crud.user_id]),\n          ]);\n          return Result.ok(undefined);\n        } catch (error) {\n          if (KnownErrors.OAuthProviderAccountIdAlreadyUsedForSignIn.isInstance(error)) {\n            return Result.error(error);\n          }\n          throw error;\n        }\n      },\n\n      async delete() {\n        await app._interface.deleteServerOAuthProvider(crud.user_id, crud.id);\n        await Promise.all([\n          app._serverOAuthProvidersCache.refresh([crud.user_id]),\n          app._serverUserConnectedAccountsCache.refresh([crud.user_id]),\n        ]);\n      },\n    };\n  }\n\n  constructor(options: StackServerAppConstructorOptions<HasTokenStore, ProjectId>, extraOptions?: { uniqueIdentifier?: string, checkString?: string, interface?: HexclaveServerInterface }) {\n    const resolvedOptions = resolveConstructorOptions(options);\n\n    const publishableClientKey = resolvedOptions.publishableClientKey ?? getDefaultPublishableClientKey();\n\n    super(resolvedOptions, {\n      ...extraOptions,\n      interface: extraOptions?.interface ?? (() => {\n        const apiUrls = resolveApiUrls(resolvedOptions.baseUrl);\n        return new HexclaveServerInterface({\n          getBaseUrl: () => apiUrls()[0],\n          getApiUrls: apiUrls,\n          projectId: resolvedOptions.projectId ?? getDefaultProjectId(),\n          extraRequestHeaders: resolvedOptions.extraRequestHeaders ?? getDefaultExtraRequestHeaders(),\n          clientVersion,\n          ...(publishableClientKey != null ? { publishableClientKey } : {}),\n          secretServerKey: resolvedOptions.secretServerKey ?? getDefaultSecretServerKey(),\n        });\n      })(),\n    });\n  }\n\n\n  protected _serverApiKeyFromCrud(crud: TeamApiKeysCrud['Client']['Read']): ApiKey<\"team\">;\n  protected _serverApiKeyFromCrud(crud: UserApiKeysCrud['Client']['Read']): ApiKey<\"user\">;\n  protected _serverApiKeyFromCrud(crud: yup.InferType<typeof teamApiKeysCreateOutputSchema>): ApiKey<\"team\", true>;\n  protected _serverApiKeyFromCrud(crud: yup.InferType<typeof userApiKeysCreateOutputSchema>): ApiKey<\"user\", true>;\n  protected _serverApiKeyFromCrud(crud: TeamApiKeysCrud['Client']['Read'] | UserApiKeysCrud['Client']['Read'] | yup.InferType<typeof teamApiKeysCreateOutputSchema> | yup.InferType<typeof userApiKeysCreateOutputSchema>): ApiKey<\"user\" | \"team\", boolean> {\n    return {\n      ...this._baseApiKeyFromCrud(crud),\n      async revoke() {\n        await this.update({ revoked: true });\n      },\n      update: async (options: ApiKeyUpdateOptions) => {\n        await this._interface.updateProjectApiKey(\n          crud.type === \"team\" ? { team_id: crud.team_id } : { user_id: crud.user_id },\n          crud.id,\n          await apiKeyUpdateOptionsToCrud(crud.type, options),\n          null,\n          \"server\");\n        if (crud.type === \"team\") {\n          await this._serverTeamApiKeysCache.refresh([crud.team_id]);\n        } else {\n          await this._serverUserApiKeysCache.refresh([crud.user_id]);\n        }\n      },\n    };\n  }\n\n  protected _createServerOAuthConnectionFromCrudItem(\n    userId: string,\n    item: { provider: string, provider_account_id: string },\n  ): OAuthConnection {\n    const app = this;\n    const providerId = item.provider;\n    const providerAccountId = item.provider_account_id;\n    return {\n      id: providerId, // deprecated, for backward compat\n      provider: providerId,\n      providerAccountId,\n      async getAccessToken(options?: { scopes?: string[] }) {\n        const scopeString = options?.scopes?.join(\" \") ?? \"\";\n        const result = Result.orThrow(await app._serverUserOAuthConnectionAccessTokensByAccountCache.getOrWait([userId, providerId, providerAccountId, scopeString], \"write-only\"));\n        if (!result) {\n          const scopeDetail = scopeString ? `The requested scopes [${scopeString}] are not available on the existing token.` : \"The OAuth refresh token has likely been revoked or expired.\";\n          return Result.error(new KnownErrors.OAuthAccessTokenNotAvailable(providerId, `${scopeDetail} The user needs to re-authorize by calling \\`linkConnectedAccount\\` or using \\`getOrLinkConnectedAccount\\`.`));\n        }\n        return Result.ok(result);\n      },\n    };\n  }\n\n  protected _serverUserFromCrud(crud: UsersCrud['Server']['Read']): ServerUser {\n    const app = this;\n\n    /** @deprecated The string-based overloads are deprecated. Use `getConnectedAccount({ provider, providerAccountId })` for existence check. */\n    async function getConnectedAccount(id: ProviderType, options?: { scopes?: string[] }): Promise<DeprecatedOAuthConnection | null>;\n    async function getConnectedAccount(id: ProviderType, options: { or: 'redirect', scopes?: string[] }): Promise<DeprecatedOAuthConnection>;\n    async function getConnectedAccount(account: { provider: string, providerAccountId: string }): Promise<OAuthConnection | null>;\n    async function getConnectedAccount(\n      idOrAccount: ProviderType | { provider: string, providerAccountId: string },\n      options?: { or?: 'redirect', scopes?: string[] }\n    ): Promise<DeprecatedOAuthConnection | OAuthConnection | null> {\n      const scopeString = options?.scopes?.join(\" \") ?? \"\";\n\n      // Check if it's the new object-based API\n      if (typeof idOrAccount === 'object' && 'provider' in idOrAccount && 'providerAccountId' in idOrAccount) {\n        const { provider, providerAccountId } = idOrAccount;\n        // Check if the account exists in the connected accounts list\n        const connectedAccounts = Result.orThrow(await app._serverUserConnectedAccountsCache.getOrWait([crud.id], \"write-only\"));\n        const found = connectedAccounts.find(\n          a => a.provider === provider && a.providerAccountId === providerAccountId\n        );\n        if (!found) {\n          return null;\n        }\n        return found;\n      }\n\n      // Original behavior: by provider ID (returns first match)\n      return Result.orThrow(await app._serverUserOAuthConnectionCache.getOrWait([crud.id, idOrAccount, scopeString, options?.or === 'redirect'], \"write-only\"));\n    }\n\n\n    const serverUser = withUserDestructureGuard({\n      ...super._createBaseUser(crud),\n      lastActiveAt: new Date(crud.last_active_at_millis),\n      serverMetadata: crud.server_metadata,\n      restrictedByAdminPrivateDetails: crud.restricted_by_admin_private_details,\n      countryCode: crud.country_code,\n      riskScores: {\n        signUp: {\n          bot: crud.risk_scores.sign_up.bot,\n          freeTrialAbuse: crud.risk_scores.sign_up.free_trial_abuse,\n        },\n      },\n      async setPrimaryEmail(email: string | null, options?: { verified?: boolean }) {\n        await app._updateServerUser(crud.id, { primaryEmail: email, primaryEmailVerified: options?.verified });\n      },\n      async grantPermission(scopeOrPermissionId: Team | string, permissionId?: string): Promise<void> {\n        if (scopeOrPermissionId && typeof scopeOrPermissionId !== 'string' && permissionId) {\n          const scope = scopeOrPermissionId;\n          await app._interface.grantServerTeamUserPermission(scope.id, crud.id, permissionId);\n\n          for (const recursive of [true, false]) {\n            await app._serverTeamUserPermissionsCache.refresh([scope.id, crud.id, recursive]);\n            await app._serverAllTeamMemberPermissionsCache.refresh([scope.id, recursive]);\n          }\n        } else {\n          const pId = scopeOrPermissionId as string;\n          await app._interface.grantServerProjectPermission(crud.id, pId);\n\n          for (const recursive of [true, false]) {\n            await app._serverUserProjectPermissionsCache.refresh([crud.id, recursive]);\n          }\n        }\n      },\n      async revokePermission(scopeOrPermissionId: Team | string, permissionId?: string): Promise<void> {\n        if (scopeOrPermissionId && typeof scopeOrPermissionId !== 'string' && permissionId) {\n          const scope = scopeOrPermissionId;\n          await app._interface.revokeServerTeamUserPermission(scope.id, crud.id, permissionId);\n\n          for (const recursive of [true, false]) {\n            await app._serverTeamUserPermissionsCache.refresh([scope.id, crud.id, recursive]);\n            await app._serverAllTeamMemberPermissionsCache.refresh([scope.id, recursive]);\n          }\n        } else {\n          const pId = scopeOrPermissionId as string;\n          await app._interface.revokeServerProjectPermission(crud.id, pId);\n\n          for (const recursive of [true, false]) {\n            await app._serverUserProjectPermissionsCache.refresh([crud.id, recursive]);\n          }\n        }\n      },\n      async delete() {\n        const res = await app._interface.deleteServerUser(crud.id);\n        await app._refreshUsers();\n        return res;\n      },\n      async createSession(options: { expiresInMillis?: number, isImpersonation?: boolean }) {\n        // TODO this should also refresh the access token when it expires (like InternalSession)\n        const tokens = await app._interface.createServerUserSession(crud.id, options.expiresInMillis ?? 1000 * 60 * 60 * 24 * 365, options.isImpersonation ?? false);\n        return {\n          async getTokens() {\n            return tokens;\n          },\n        };\n      },\n\n      async getActiveSessions() {\n        const sessions = await app._interface.listServerSessions(crud.id);\n        return sessions.items.map((session) => app._clientSessionFromCrud(session));\n      },\n\n      async revokeSession(sessionId: string) {\n        await app._interface.deleteServerSession(sessionId);\n      },\n      async setDisplayName(displayName: string | null) {\n        return await this.update({ displayName });\n      },\n      async setClientMetadata(metadata: Record<string, any>) {\n        return await this.update({ clientMetadata: metadata });\n      },\n      async setClientReadOnlyMetadata(metadata: Record<string, any>) {\n        return await this.update({ clientReadOnlyMetadata: metadata });\n      },\n      async setServerMetadata(metadata: Record<string, any>) {\n        return await this.update({ serverMetadata: metadata });\n      },\n      async setSelectedTeam(team: Team | string | null) {\n        return await this.update({ selectedTeamId: typeof team === 'string' ? team : team?.id ?? null });\n      },\n      getConnectedAccount,\n      async listConnectedAccounts() {\n        return Result.orThrow(await app._serverUserConnectedAccountsCache.getOrWait([crud.id], \"write-only\"));\n      },\n      async linkConnectedAccount(): Promise<void> {\n        throw new HexclaveAssertionError(\"linkConnectedAccount is not available for server users. OAuth flows must be initiated on the client side.\");\n      },\n      async getOrLinkConnectedAccount(): Promise<OAuthConnection> {\n        throw new HexclaveAssertionError(\"getOrLinkConnectedAccount is not available for server users. OAuth flows must be initiated on the client side.\");\n      },\n      selectedTeam: crud.selected_team ? app._serverTeamFromCrud(crud.selected_team) : null,\n      // Unlike the app-level getTeam/useTeam (which fetch any team by id),\n      // the user-scoped variants search the user's own team list on purpose:\n      // they must return null for teams the user is not a member of, and some\n      // callers rely on that as a membership check.\n      async getTeam(teamId: string) {\n        const teams = await this.listTeams();\n        return teams.find((t) => t.id === teamId) ?? null;\n      },\n      async listTeams(options?: ServerListTeamsOptions): Promise<ServerTeam[] & { nextCursor: string | null }> {\n        const result = Result.orThrow(await app._serverTeamsCache.getOrWait([crud.id, options?.orderBy, options?.desc, options?.cursor, options?.limit, options?.query] as const, \"write-only\"));\n        const teams: any = result.items.map((t) => app._serverTeamFromCrud(t));\n        teams.nextCursor = result.pagination?.next_cursor ?? null;\n        return teams as any;\n      },\n      createTeam: async (data: Omit<ServerTeamCreateOptions, \"creatorUserId\">) => {\n        const team = await app._interface.createServerTeam(serverTeamCreateOptionsToCrud({\n          creatorUserId: crud.id,\n          ...data,\n        }));\n        await app._serverTeamsCache.refreshWhere(() => true);\n        await app._updateServerUser(crud.id, { selectedTeamId: team.id });\n        return app._serverTeamFromCrud(team);\n      },\n      leaveTeam: async (team: Team) => {\n        await app._interface.leaveServerTeam({ teamId: team.id, userId: crud.id });\n        await app._refreshTeamMembership(team.id, crud.id);\n      },\n      async listTeamInvitations() {\n        const invitations = Result.orThrow(await app._serverUserTeamInvitationsCache.getOrWait([crud.id], \"write-only\"));\n        return invitations.map((inv) => app._serverReceivedTeamInvitationFromCrud(crud.id, inv));\n      },\n      async listPermissions(scopeOrOptions?: Team | { recursive?: boolean }, options?: { recursive?: boolean }): Promise<AdminTeamPermission[]> {\n        if (scopeOrOptions && 'id' in scopeOrOptions) {\n          const scope = scopeOrOptions;\n          const recursive = options?.recursive ?? true;\n          const permissions = Result.orThrow(await app._serverTeamUserPermissionsCache.getOrWait([scope.id, crud.id, recursive], \"write-only\"));\n          return permissions.map((crud) => app._serverPermissionFromCrud(crud));\n        } else {\n          const opts = scopeOrOptions;\n          const recursive = opts?.recursive ?? true;\n          const permissions = Result.orThrow(await app._serverUserProjectPermissionsCache.getOrWait([crud.id, recursive], \"write-only\"));\n          return permissions.map((crud) => app._serverPermissionFromCrud(crud));\n        }\n      },\n      async getPermission(scopeOrPermissionId: Team | string, permissionId?: string): Promise<AdminTeamPermission | null> {\n        if (scopeOrPermissionId && typeof scopeOrPermissionId !== 'string') {\n          const scope = scopeOrPermissionId;\n          const permissions = await this.listPermissions(scope);\n          return permissions.find((p) => p.id === permissionId) ?? null;\n        } else {\n          const pid = scopeOrPermissionId;\n          const permissions = await this.listPermissions();\n          return permissions.find((p) => p.id === pid) ?? null;\n        }\n      },\n      async hasPermission(scopeOrPermissionId: Team | string, permissionId?: string): Promise<boolean> {\n        if (scopeOrPermissionId && typeof scopeOrPermissionId !== 'string') {\n          const scope = scopeOrPermissionId;\n          return (await this.getPermission(scope, permissionId as string)) !== null;\n        } else {\n          const pid = scopeOrPermissionId;\n          return (await this.getPermission(pid)) !== null;\n        }\n      },\n      async update(update: ServerUserUpdateOptions) {\n        await app._updateServerUser(crud.id, update);\n      },\n      async sendVerificationEmail() {\n        return await app._checkFeatureSupport(\"sendVerificationEmail() on ServerUser\", {});\n      },\n      async updatePassword(options: { oldPassword: string, newPassword: string }) {\n        const result = await app._interface.updatePassword(options);\n        await app._serverUserCache.refresh([crud.id]);\n        return result;\n      },\n      async setPassword(options: { password: string }) {\n        const result = await this.update(options);\n        await app._serverUserCache.refresh([crud.id]);\n        return result;\n      },\n      async getTeamProfile(team: Team) {\n        const result = Result.orThrow(await app._serverUserTeamProfileCache.getOrWait([team.id, crud.id], \"write-only\"));\n        return app._serverEditableTeamProfileFromCrud(result);\n      },\n      async listContactChannels() {\n        const result = Result.orThrow(await app._serverContactChannelsCache.getOrWait([crud.id], \"write-only\"));\n        return result.map((data) => app._serverContactChannelFromCrud(crud.id, data));\n      },\n      createContactChannel: async (data: ServerContactChannelCreateOptions) => {\n        const contactChannel = await app._interface.createServerContactChannel(serverContactChannelCreateOptionsToCrud(crud.id, data));\n        await Promise.all([\n          app._serverContactChannelsCache.refresh([crud.id]),\n          app._serverUserCache.refresh([crud.id])\n        ]);\n        return app._serverContactChannelFromCrud(crud.id, contactChannel);\n      },\n      async listNotificationCategories() {\n        const results = Result.orThrow(await app._serverNotificationCategoriesCache.getOrWait([crud.id], \"write-only\"));\n        return results.map((category) => app._serverNotificationCategoryFromCrud(crud.id, category));\n      },\n      async listApiKeys() {\n        const result = Result.orThrow(await app._serverUserApiKeysCache.getOrWait([crud.id], \"write-only\"));\n        return result.map((apiKey) => app._serverApiKeyFromCrud(apiKey));\n      },\n      async createApiKey(options: ApiKeyCreationOptions<\"user\">) {\n        const result = await app._interface.createProjectApiKey(\n          await apiKeyCreationOptionsToCrud(\"user\", crud.id, options),\n          null,\n          \"server\",\n        );\n        await app._serverUserApiKeysCache.refresh([crud.id]);\n        return app._serverApiKeyFromCrud(result);\n      },\n\n      async listOAuthProviders() {\n        const results = Result.orThrow(await app._serverOAuthProvidersCache.getOrWait([crud.id], \"write-only\"));\n        return results.map((oauthCrud) => app._serverOAuthProviderFromCrud(oauthCrud));\n      },\n\n      async getOAuthProvider(id: string) {\n        const providers = await this.listOAuthProviders();\n        return providers.find((p) => p.id === id) ?? null;\n      },\n      async registerPasskey(options?: { hostname?: string }): Promise<Result<undefined, KnownErrors[\"PasskeyRegistrationFailed\"] | KnownErrors[\"PasskeyWebAuthnError\"]>> {\n        const hostname = options?.hostname || (await app._getCurrentUrl())?.hostname;\n        if (!hostname) {\n          throw new HexclaveAssertionError(\"hostname must be provided if the Stack App does not have a redirect method\");\n        }\n\n        // Use server interface to initiate passkey registration for this specific user\n        const initiationResult = await app._interface.initiateServerPasskeyRegistration(crud.id);\n\n        if (initiationResult.status !== \"ok\") {\n          return Result.error(new KnownErrors.PasskeyRegistrationFailed(\"Failed to get initiation options for passkey registration\"));\n        }\n\n        const { options_json, code } = initiationResult.data;\n\n        scopePasskeyRegistrationToHostname(options_json, hostname);\n\n        let attResp;\n        try {\n          attResp = await startRegistration({ optionsJSON: options_json });\n        } catch (error: any) {\n          if (error instanceof WebAuthnError) {\n            return Result.error(new KnownErrors.PasskeyWebAuthnError(error.message, error.name));\n          } else {\n            // This should never happen\n            captureError(\"passkey-registration-failed\", error);\n            return Result.error(new KnownErrors.PasskeyRegistrationFailed(\"Failed to start passkey registration due to unknown error\"));\n          }\n        }\n\n        // Create a temporary session to complete the registration\n        // TODO instead of creating a new session, this should just call the endpoint in a way in which it doesn't require a session\n        // (currently this shows up on session history etc... not ideal)\n        const { accessToken, refreshToken } = await app._interface.createServerUserSession(crud.id, 60000 * 2, false);\n        const tempSession = new InternalSession({\n          accessToken,\n          refreshToken,\n          refreshAccessTokenCallback: async () => null,\n        });\n\n        const registrationResult = await app._interface.registerPasskey({ credential: attResp, code }, tempSession);\n\n        await app._serverUserCache.refresh([crud.id]);\n        return registrationResult;\n      },\n      ...app._createServerCustomer(crud.id, \"user\"),\n    } satisfies ServerUser);\n\n    return serverUser;\n  }\n\n  protected _serverTeamUserFromCrud(crud: TeamMemberProfilesCrud[\"Server\"][\"Read\"]): ServerTeamUser {\n    const teamUser = withUserDestructureGuard({\n      ...this._serverUserFromCrud(crud.user),\n      teamProfile: {\n        displayName: crud.display_name,\n        profileImageUrl: crud.profile_image_url,\n      },\n    } satisfies ServerTeamUser);\n\n    return teamUser;\n  }\n\n  protected _serverSentTeamInvitationFromCrud(crud: TeamInvitationCrud['Server']['Read']): SentTeamInvitation {\n    return {\n      id: crud.id,\n      recipientEmail: crud.recipient_email,\n      expiresAt: new Date(crud.expires_at_millis),\n      revoke: async () => {\n        await this._interface.revokeServerTeamInvitation(crud.id, crud.team_id);\n        await this._serverTeamInvitationsCache.refresh([crud.team_id]);\n      },\n    };\n  }\n\n  protected _serverReceivedTeamInvitationFromCrud(userId: string, crud: TeamInvitationCrud['Client']['Read']): ReceivedTeamInvitation {\n    const app = this;\n    return {\n      id: crud.id,\n      teamId: crud.team_id,\n      teamDisplayName: crud.team_display_name,\n      recipientEmail: crud.recipient_email,\n      expiresAt: new Date(crud.expires_at_millis),\n      accept: async () => {\n        await app._interface.acceptServerTeamInvitationById(crud.id, userId);\n        await Promise.all([\n          app._serverUserTeamInvitationsCache.refresh([userId]),\n          app._serverTeamInvitationsCache.refresh([crud.team_id]),\n          app._refreshTeamMembership(crud.team_id, userId),\n        ]);\n      },\n    };\n  }\n\n  protected override _currentUserFromCrud(crud: UsersCrud['Server']['Read'], session: InternalSession): ProjectCurrentServerUser<ProjectId> {\n    const currentUser = withUserDestructureGuard({\n      ...this._serverUserFromCrud(crud),\n      ...this._createAuth(session),\n      ...this._isInternalProject() ? this._createInternalUserExtra(session) : {},\n    } satisfies ServerUser);\n\n    return currentUser as ProjectCurrentServerUser<ProjectId>;\n  }\n\n  protected _serverTeamFromCrud(crud: TeamsCrud['Server']['Read']): ServerTeam {\n    const app = this;\n    return {\n      id: crud.id,\n      displayName: crud.display_name,\n      profileImageUrl: crud.profile_image_url,\n      createdAt: new Date(crud.created_at_millis),\n      clientMetadata: crud.client_metadata,\n      clientReadOnlyMetadata: crud.client_read_only_metadata,\n      serverMetadata: crud.server_metadata,\n      async update(update: Partial<ServerTeamUpdateOptions>) {\n        await app._interface.updateServerTeam(crud.id, serverTeamUpdateOptionsToCrud(update));\n        await Promise.all([\n          app._serverTeamCache.refresh([crud.id]),\n          app._serverTeamsCache.refreshWhere(() => true),\n          app._serverUsersCache.refreshWhere(() => true),\n        ]);\n      },\n      async delete() {\n        await app._interface.deleteServerTeam(crud.id);\n        await Promise.all([\n          app._serverTeamCache.refresh([crud.id]),\n          app._serverTeamsCache.refreshWhere(() => true),\n          app._serverUsersCache.refreshWhere(() => true),\n        ]);\n      },\n      async listUsers() {\n        const result = Result.orThrow(await app._serverTeamMemberProfilesCache.getOrWait([crud.id], \"write-only\"));\n        return result.map(u => app._serverTeamUserFromCrud(u));\n      },\n      async addUser(userId) {\n        await app._interface.addServerUserToTeam({\n          teamId: crud.id,\n          userId,\n        });\n        await app._refreshTeamMembership(crud.id, userId);\n      },\n      async removeUser(userId) {\n        await app._interface.removeServerUserFromTeam({\n          teamId: crud.id,\n          userId,\n        });\n        await app._refreshTeamMembership(crud.id, userId);\n      },\n      async inviteUser(options: { email: string, callbackUrl?: string }) {\n        await app._interface.sendServerTeamInvitation({\n          teamId: crud.id,\n          email: options.email,\n          callbackUrl: options.callbackUrl ?? constructRedirectUrl(app._getUrls().teamInvitation, \"callbackUrl\"),\n        });\n        await app._serverTeamInvitationsCache.refresh([crud.id]);\n      },\n      async listInvitations() {\n        const result = Result.orThrow(await app._serverTeamInvitationsCache.getOrWait([crud.id], \"write-only\"));\n        return result.map((crud) => app._serverSentTeamInvitationFromCrud(crud));\n      },\n      async listApiKeys() {\n        const result = Result.orThrow(await app._serverTeamApiKeysCache.getOrWait([crud.id], \"write-only\"));\n        return result.map((apiKey) => app._serverApiKeyFromCrud(apiKey));\n      },\n      async createApiKey(options: ApiKeyCreationOptions<\"team\">) {\n        const result = await app._interface.createProjectApiKey(\n          await apiKeyCreationOptionsToCrud(\"team\", crud.id, options),\n          null,\n          \"server\",\n        );\n        await app._serverTeamApiKeysCache.refresh([crud.id]);\n        return app._serverApiKeyFromCrud(result);\n      },\n      ...app._createServerCustomer(crud.id, \"team\"),\n    };\n  }\n\n  protected _serverItemFromCrud(customer: { type: \"user\" | \"team\" | \"custom\", id: string }, crud: ItemCrud['Client']['Read']): ServerItem {\n    const app = this;\n    return {\n      displayName: crud.display_name,\n      quantity: crud.quantity,\n      nonNegativeQuantity: Math.max(0, crud.quantity),\n      increaseQuantity: async (delta: number) => {\n        const updateOptions = customer.type === \"user\"\n          ? { itemId: crud.id, userId: customer.id }\n          : customer.type === \"team\"\n            ? { itemId: crud.id, teamId: customer.id }\n            : { itemId: crud.id, customCustomerId: customer.id };\n        await app._interface.updateItemQuantity(updateOptions, { delta });\n        if (customer.type === \"user\") await app._serverUserItemsCache.refresh([customer.id, crud.id]);\n        else if (customer.type === \"team\") await app._serverTeamItemsCache.refresh([customer.id, crud.id]);\n        else await app._serverCustomItemsCache.refresh([customer.id, crud.id]);\n      },\n      decreaseQuantity: async (delta: number) => {\n        const updateOptions = customer.type === \"user\"\n          ? { itemId: crud.id, userId: customer.id }\n          : customer.type === \"team\"\n            ? { itemId: crud.id, teamId: customer.id }\n            : { itemId: crud.id, customCustomerId: customer.id };\n        await app._interface.updateItemQuantity(updateOptions, { delta: -delta, allow_negative: true });\n        if (customer.type === \"user\") await app._serverUserItemsCache.refresh([customer.id, crud.id]);\n        else if (customer.type === \"team\") await app._serverTeamItemsCache.refresh([customer.id, crud.id]);\n        else await app._serverCustomItemsCache.refresh([customer.id, crud.id]);\n      },\n      tryDecreaseQuantity: async (delta: number) => {\n        try {\n          const updateOptions = customer.type === \"user\"\n            ? { itemId: crud.id, userId: customer.id }\n            : customer.type === \"team\"\n              ? { itemId: crud.id, teamId: customer.id }\n              : { itemId: crud.id, customCustomerId: customer.id };\n          await app._interface.updateItemQuantity(updateOptions, { delta: -delta });\n          if (customer.type === \"user\") await app._serverUserItemsCache.refresh([customer.id, crud.id]);\n          else if (customer.type === \"team\") await app._serverTeamItemsCache.refresh([customer.id, crud.id]);\n          else await app._serverCustomItemsCache.refresh([customer.id, crud.id]);\n          return true;\n        } catch (error) {\n          if (error instanceof KnownErrors.ItemQuantityInsufficientAmount) {\n            return false;\n          }\n          throw error;\n        }\n      },\n    };\n  }\n\n  protected async _getUserApiKey(options: { apiKey: string }): Promise<ApiKey<\"user\"> | null> {\n    const crud = Result.orThrow(await this._serverCheckApiKeyCache.getOrWait([\"user\", options.apiKey], \"write-only\")) as UserApiKeysCrud['Server']['Read'] | null;\n    return crud ? this._serverApiKeyFromCrud(crud) : null;\n  }\n\n  protected async _getTeamApiKey(options: { apiKey: string }): Promise<ApiKey<\"team\"> | null> {\n    const crud = Result.orThrow(await this._serverCheckApiKeyCache.getOrWait([\"team\", options.apiKey], \"write-only\")) as TeamApiKeysCrud['Server']['Read'] | null;\n    return crud ? this._serverApiKeyFromCrud(crud) : null;\n  }\n  protected async _getUserByApiKey(apiKey: string): Promise<ServerUser | null> {\n    const apiKeyObject = await this._getUserApiKey({ apiKey });\n    if (apiKeyObject === null) {\n      return null;\n    }\n    return await this.getServerUserById(apiKeyObject.userId);\n  }\n\n  protected async _getUserByConvex(ctx: ConvexCtx, includeAnonymous: boolean): Promise<ServerUser | null> {\n    const identity = await ctx.auth.getUserIdentity();\n    if (identity === null) {\n      return null;\n    }\n    const user = await this.getServerUserById(identity.subject);\n    if (user?.isAnonymous && !includeAnonymous) {\n      return null;\n    }\n    return user;\n  }\n\n  protected async _getTeamByApiKey(apiKey: string): Promise<ServerTeam | null> {\n    const apiKeyObject = await this._getTeamApiKey({ apiKey });\n    if (apiKeyObject === null) {\n      return null;\n    }\n    return await this.getTeam(apiKeyObject.teamId);\n  }\n\n  async createUser(options: ServerUserCreateOptions): Promise<ServerUser> {\n    const crud = await this._interface.createServerUser(serverUserCreateOptionsToCrud(options));\n    await this._refreshUsers();\n    return this._serverUserFromCrud(crud);\n  }\n\n  async getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'redirect' }): Promise<ProjectCurrentServerUser<ProjectId>>;\n  async getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'throw' }): Promise<ProjectCurrentServerUser<ProjectId>>;\n  async getUser(options: GetCurrentUserOptions<HasTokenStore> & { or: 'anonymous' }): Promise<ProjectCurrentServerUser<ProjectId>>;\n  async getUser(options?: GetCurrentUserOptions<HasTokenStore>): Promise<ProjectCurrentServerUser<ProjectId> | null>;\n  async getUser(id: string): Promise<ServerUser | null>;\n  async getUser(options: { apiKey: string }): Promise<ServerUser | null>;\n  async getUser(options: { from: \"convex\", ctx: ConvexCtx, or?: \"return-null\" | \"anonymous\" }): Promise<ServerUser | null>;\n  async getUser(options?: string | GetCurrentUserOptions<HasTokenStore> | { apiKey: string } | { from: \"convex\", ctx: ConvexCtx }): Promise<ProjectCurrentServerUser<ProjectId> | ServerUser | null> {\n    if (typeof options === \"string\") {\n      return await this.getServerUserById(options);\n    } else if (typeof options === \"object\" && \"apiKey\" in options) {\n      return await this._getUserByApiKey(options.apiKey);\n    } else if (typeof options === \"object\" && \"from\" in options && options.from as string === \"convex\") {\n      return await this._getUserByConvex(options.ctx, \"or\" in options && options.or === \"anonymous\");\n    } else {\n      options = options as GetCurrentUserOptions<HasTokenStore> | undefined;\n\n      // Validate that includeRestricted: false and or: 'anonymous' are mutually exclusive\n      if (options?.or === 'anonymous' && options.includeRestricted === false) {\n        throw new Error(\"Cannot use { or: 'anonymous' } with { includeRestricted: false }. Anonymous users implicitly include restricted users.\");\n      }\n\n      // TODO this code is duplicated from the client app; fix that\n      this._ensurePersistentTokenStore(options?.tokenStore);\n      const session = await this._getSession(options?.tokenStore);\n      let crud = Result.orThrow(await this._currentServerUserCache.getOrWait([session], \"write-only\"));\n      const includeAnonymous = options?.or === \"anonymous\" || options?.or === \"anonymous-if-exists[deprecated]\";\n      const includeRestricted = options?.includeRestricted === true || includeAnonymous;\n\n      if (crud === null || (crud.is_anonymous && !includeAnonymous) || (crud.is_restricted && !includeRestricted)) {\n        switch (options?.or) {\n          case 'redirect': {\n            if (!crud?.is_anonymous && crud?.is_restricted) {\n              await this.redirectToOnboarding({ replace: true });\n            } else {\n              await this.redirectToSignIn({ replace: true });\n            }\n            // TODO: see client-app-impl. We probably want to `await neverResolve()` here instead of returning null\n            break;\n          }\n          case 'throw': {\n            throw new Error(\"User is not signed in but getUser was called with { or: 'throw' }\");\n          }\n          case 'anonymous': {\n            const tokens = await this._signUpAnonymously();\n            return await this.getUser({ tokenStore: tokens, or: \"anonymous-if-exists[deprecated]\", includeRestricted: true }) ?? throwErr(\"Something went wrong while signing up anonymously\");\n          }\n          case undefined:\n          case \"anonymous-if-exists[deprecated]\":\n          case \"return-null\": {\n            return null;\n          }\n        }\n      }\n\n      return crud && this._currentUserFromCrud(crud, session);\n    }\n  }\n\n  async getServerUser(): Promise<ProjectCurrentServerUser<ProjectId> | null> {\n    console.warn(\"hexclaveServerApp.getServerUser is deprecated; use hexclaveServerApp.getUser instead\");\n    return await this.getUser();\n  }\n\n  async getServerUserById(userId: string): Promise<ServerUser | null> {\n    const crud = Result.orThrow(await this._serverUserCache.getOrWait([userId], \"write-only\"));\n    return crud && this._serverUserFromCrud(crud);\n  }\n\n\n  async listUsers(options?: ServerListUsersOptions): Promise<ServerUser[] & { nextCursor: string | null }> {\n    const excludedEmailDomains = options?.excludedEmailDomains && options.excludedEmailDomains.length > 0 ? options.excludedEmailDomains.join(\",\") : undefined;\n    const crud = Result.orThrow(await this._serverUsersCache.getOrWait([options?.cursor, options?.limit, options?.orderBy, options?.desc, options?.query, options?.includeRestricted, options?.includeAnonymous, options?.onlyAnonymous, options?.teamId, excludedEmailDomains], \"write-only\"));\n    const result: any = crud.items.map((j) => this._serverUserFromCrud(j));\n    result.nextCursor = crud.pagination?.next_cursor ?? null;\n    return result as any;\n  }\n\n\n  _serverPermissionFromCrud(crud: TeamPermissionsCrud['Server']['Read'] | ProjectPermissionsCrud['Server']['Read']): AdminTeamPermission {\n    return {\n      id: crud.id,\n    };\n  }\n\n  _serverTeamPermissionDefinitionFromCrud(crud: TeamPermissionDefinitionsCrud['Admin']['Read']): AdminTeamPermissionDefinition {\n    return {\n      id: crud.id,\n      description: crud.description,\n      containedPermissionIds: crud.contained_permission_ids,\n    };\n  }\n\n  _serverProjectPermissionDefinitionFromCrud(crud: ProjectPermissionDefinitionsCrud['Admin']['Read']): AdminProjectPermissionDefinition {\n    return {\n      id: crud.id,\n      description: crud.description,\n      containedPermissionIds: crud.contained_permission_ids,\n    };\n  }\n\n  async getItem(options: { itemId: string, userId: string } | { itemId: string, teamId: string } | { itemId: string, customCustomerId: string }): Promise<ServerItem> {\n    if (\"userId\" in options) {\n      const result = Result.orThrow(await this._serverUserItemsCache.getOrWait([options.userId, options.itemId], \"write-only\"));\n      return this._serverItemFromCrud({ type: \"user\", id: options.userId }, result);\n    } else if (\"teamId\" in options) {\n      const result = Result.orThrow(await this._serverTeamItemsCache.getOrWait([options.teamId, options.itemId], \"write-only\"));\n      return this._serverItemFromCrud({ type: \"team\", id: options.teamId }, result);\n    } else {\n      const result = Result.orThrow(await this._serverCustomItemsCache.getOrWait([options.customCustomerId, options.itemId], \"write-only\"));\n      return this._serverItemFromCrud({ type: \"custom\", id: options.customCustomerId }, result);\n    }\n  }\n\n  protected async _refreshItemCache(customerType: \"user\" | \"team\" | \"custom\", customerId: string, itemId: string): Promise<void> {\n    if (customerType === \"user\") {\n      await this._serverUserItemsCache.refresh([customerId, itemId]);\n    } else if (customerType === \"team\") {\n      await this._serverTeamItemsCache.refresh([customerId, itemId]);\n    } else {\n      await this._serverCustomItemsCache.refresh([customerId, itemId]);\n    }\n  }\n\n  async listProducts(options: CustomerProductsRequestOptions): Promise<CustomerProductsList> {\n    if (\"userId\" in options) {\n      const response = Result.orThrow(await this._serverUserProductsCache.getOrWait([options.userId, options.cursor ?? null, options.limit ?? null], \"write-only\"));\n      return this._customerProductsFromResponse(response);\n    } else if (\"teamId\" in options) {\n      const response = Result.orThrow(await this._serverTeamProductsCache.getOrWait([options.teamId, options.cursor ?? null, options.limit ?? null], \"write-only\"));\n      return this._customerProductsFromResponse(response);\n    }\n    const response = Result.orThrow(await this._serverCustomProductsCache.getOrWait([options.customCustomerId, options.cursor ?? null, options.limit ?? null], \"write-only\"));\n    return this._customerProductsFromResponse(response);\n  }\n\n  private _resolveCustomer(\n    options: { userId: string } | { teamId: string } | { customCustomerId: string }\n  ): { customerType: \"user\" | \"team\" | \"custom\", customerId: string } {\n    if (\"userId\" in options) {\n      return { customerType: \"user\", customerId: options.userId };\n    }\n    if (\"teamId\" in options) {\n      return { customerType: \"team\", customerId: options.teamId };\n    }\n    return { customerType: \"custom\", customerId: options.customCustomerId };\n  }\n\n  async grantProduct(options: (\n    ({ userId: string } | { teamId: string } | { customCustomerId: string }) &\n    ({ productId: string } | { product: InlineProduct }) &\n    { quantity?: number }\n  )): Promise<void> {\n    const { customerType, customerId } = this._resolveCustomer(options);\n\n    await this._interface.grantProduct({\n      customerType,\n      customerId,\n      productId: \"productId\" in options ? options.productId : undefined,\n      product: \"product\" in options ? options.product : undefined,\n      quantity: options.quantity,\n    });\n\n    const cache = customerType === \"user\"\n      ? this._serverUserProductsCache\n      : customerType === \"team\"\n        ? this._serverTeamProductsCache\n        : this._serverCustomProductsCache;\n    await cache.refresh([customerId, null, null]);\n  }\n\n  async createCheckoutUrl(options: (\n    ({ userId: string } | { teamId: string } | { customCustomerId: string }) &\n    ({ productId: string } | { product: InlineProduct }) &\n    { returnUrl?: string }\n  )): Promise<string> {\n    const { customerType, customerId } = this._resolveCustomer(options);\n\n    const productIdOrInline = \"productId\" in options ? options.productId : options.product;\n    return await this._interface.createCheckoutUrl(customerType, customerId, productIdOrInline, null, options.returnUrl, \"server\");\n  }\n\n  async createTeam(data: ServerTeamCreateOptions): Promise<ServerTeam> {\n    const team = await this._interface.createServerTeam(serverTeamCreateOptionsToCrud(data));\n    await this._serverTeamCache.refresh([team.id]);\n    await this._serverTeamsCache.refreshWhere(() => true);\n    return this._serverTeamFromCrud(team);\n  }\n\n  async listTeams(options?: ServerListTeamsOptions): Promise<ServerTeam[] & { nextCursor: string | null }> {\n    const crud = Result.orThrow(await this._serverTeamsCache.getOrWait([undefined, options?.orderBy, options?.desc, options?.cursor, options?.limit, options?.query] as const, \"write-only\"));\n    const teams: any = crud.items.map((t) => this._serverTeamFromCrud(t));\n    teams.nextCursor = crud.pagination?.next_cursor ?? null;\n    return teams as any;\n  }\n\n\n  async listTeamMemberPermissions(teamId: string, options?: { recursive?: boolean }): Promise<{ userId: string, permissionId: string }[]> {\n    const recursive = options?.recursive ?? false;\n    const rows = Result.orThrow(await this._serverAllTeamMemberPermissionsCache.getOrWait([teamId, recursive] as const, \"write-only\"));\n    return rows.map((r) => ({ userId: r.user_id, permissionId: r.id }));\n  }\n\n\n  async getTeam(options: { apiKey: string }): Promise<ServerTeam | null>;\n  async getTeam(teamId: string): Promise<ServerTeam | null>;\n  async getTeam(options?: { apiKey: string } | string): Promise<ServerTeam | null> {\n    if (typeof options === \"object\" && \"apiKey\" in options) {\n      return await this._getTeamByApiKey(options.apiKey);\n    } else {\n      const teamId = options;\n      if (teamId == null) {\n        return null;\n      }\n      const team = Result.orThrow(await this._serverTeamCache.getOrWait([teamId], \"write-only\"));\n      return team == null ? null : this._serverTeamFromCrud(team);\n    }\n  }\n\n\n  protected _createServerDataVaultStore(id: string): DataVaultStore {\n    const validateOptions = (options: { secret: string }) => {\n      if (typeof options.secret !== \"string\") throw new Error(\"secret must be a string, got \" + typeof options.secret);\n    };\n    return {\n      id,\n      setValue: async (key, value, options) => {\n        validateOptions(options);\n        await this._interface.setDataVaultStoreValue(options.secret, id, key, value);\n      },\n      getValue: async (key, options) => {\n        validateOptions(options);\n        return Result.orThrow(await this._serverDataVaultStoreValueCache.getOrWait([id, key, options.secret], \"write-only\"));\n      },\n    };\n  }\n\n  async getDataVaultStore(id: string): Promise<DataVaultStore> {\n    return this._createServerDataVaultStore(id);\n  }\n\n\n  async sendEmail(options: SendEmailOptions): Promise<void> {\n    await this._interface.sendEmail(options);\n    await this._emailDeliveryInfoCache.refresh([]);\n  }\n\n  async getEmailDeliveryStats(): Promise<EmailDeliveryInfo> {\n    return Result.orThrow(await this._emailDeliveryInfoCache.getOrWait([], \"write-only\"));\n  }\n\n\n  async activateEmailCapacityBoost(): Promise<void> {\n    await this._interface.activateEmailCapacityBoost();\n    // Refresh the cache so UI updates immediately\n    await this._emailDeliveryInfoCache.refresh([]);\n  }\n\n  async queryAnalytics(options: AnalyticsQueryOptions): Promise<AnalyticsQueryResponse> {\n    return await this._interface.queryAnalytics(options);\n  }\n\n  async listSessionReplays(options?: ListSessionReplaysOptions): Promise<ListSessionReplaysResult> {\n    const response = await this._interface.listSessionReplays({\n      cursor: options?.cursor,\n      limit: options?.limit,\n      user_ids: options?.userIds,\n      team_ids: options?.teamIds,\n      duration_ms_min: options?.durationMsMin,\n      duration_ms_max: options?.durationMsMax,\n      last_event_at_from_millis: options?.lastEventAtFromMillis,\n      last_event_at_to_millis: options?.lastEventAtToMillis,\n      click_count_min: options?.clickCountMin,\n    });\n\n    const items: AdminSessionReplay[] = response.items.map((r) => ({\n      id: r.id,\n      refreshTokenId: r.refresh_token_id,\n      projectUser: {\n        id: r.project_user.id,\n        displayName: r.project_user.display_name,\n        primaryEmail: r.project_user.primary_email,\n      },\n      startedAt: new Date(r.started_at_millis),\n      lastEventAt: new Date(r.last_event_at_millis),\n      chunkCount: r.chunk_count,\n      eventCount: r.event_count,\n    }));\n\n    return {\n      items,\n      nextCursor: response.pagination.next_cursor,\n    };\n  }\n\n  async getSessionReplay(sessionReplayId: string): Promise<AdminSessionReplay> {\n    const response = await this._interface.getSessionReplay(sessionReplayId);\n    return {\n      id: response.id,\n      refreshTokenId: response.refresh_token_id,\n      projectUser: {\n        id: response.project_user.id,\n        displayName: response.project_user.display_name,\n        primaryEmail: response.project_user.primary_email,\n      },\n      startedAt: new Date(response.started_at_millis),\n      lastEventAt: new Date(response.last_event_at_millis),\n      chunkCount: response.chunk_count,\n      eventCount: response.event_count,\n    };\n  }\n\n  async listSessionReplayChunks(sessionReplayId: string, options?: ListSessionReplayChunksOptions): Promise<ListSessionReplayChunksResult> {\n    const response = await this._interface.listSessionReplayChunks(sessionReplayId, {\n      cursor: options?.cursor,\n      limit: options?.limit,\n    });\n\n    const items: AdminSessionReplayChunk[] = response.items.map((c) => ({\n      id: c.id,\n      batchId: c.batch_id,\n      sessionReplaySegmentId: c.session_replay_segment_id,\n      browserSessionId: c.browser_session_id,\n      eventCount: c.event_count,\n      byteLength: c.byte_length,\n      firstEventAt: new Date(c.first_event_at_millis),\n      lastEventAt: new Date(c.last_event_at_millis),\n      createdAt: new Date(c.created_at_millis),\n    }));\n\n    return {\n      items,\n      nextCursor: response.pagination.next_cursor,\n    };\n  }\n\n  async getSessionReplayChunkEvents(sessionReplayId: string, chunkId: string): Promise<AdminGetSessionReplayChunkEventsResponse> {\n    return await this._interface.getSessionReplayChunkEvents(sessionReplayId, chunkId);\n  }\n\n  async getSessionReplayEvents(sessionReplayId: string, options?: { offset?: number, limit?: number }): Promise<SessionReplayAllEventsResult> {\n    const response = await this._interface.getSessionReplayEvents(sessionReplayId, options);\n    return {\n      chunks: response.chunks.map((c) => ({\n        id: c.id,\n        batchId: c.batch_id,\n        sessionReplaySegmentId: c.session_replay_segment_id,\n        eventCount: c.event_count,\n        byteLength: c.byte_length,\n        firstEventAt: new Date(c.first_event_at_millis),\n        lastEventAt: new Date(c.last_event_at_millis),\n        createdAt: new Date(c.created_at_millis),\n      })),\n      chunkEvents: response.chunk_events.map((ce) => ({\n        chunkId: ce.chunk_id,\n        events: ce.events,\n      })),\n    };\n  }\n\n  protected override async _refreshSession(session: InternalSession) {\n    await Promise.all([\n      super._refreshUser(session),\n      this._currentServerUserCache.refresh([session]),\n    ]);\n  }\n\n  protected override async _refreshUsers() {\n    await Promise.all([\n      super._refreshUsers(),\n      this._serverUserCache.refreshWhere(() => true),\n      this._serverUsersCache.refreshWhere(() => true),\n      this._serverContactChannelsCache.refreshWhere(() => true),\n      this._serverOAuthProvidersCache.refreshWhere(() => true),\n      this._serverUserConnectedAccountsCache.refreshWhere(() => true),\n    ]);\n  }\n\n  async createOAuthProvider(options: {\n    userId: string,\n    providerConfigId: string,\n    accountId: string,\n    email: string,\n    allowSignIn: boolean,\n    allowConnectedAccounts: boolean,\n  }): Promise<Result<ServerOAuthProvider, InstanceType<typeof KnownErrors.OAuthProviderAccountIdAlreadyUsedForSignIn>>> {\n    try {\n      const crud = await this._interface.createServerOAuthProvider({\n        user_id: options.userId,\n        provider_config_id: options.providerConfigId,\n        account_id: options.accountId,\n        email: options.email,\n        allow_sign_in: options.allowSignIn,\n        allow_connected_accounts: options.allowConnectedAccounts,\n      });\n\n      await Promise.all([\n        this._serverOAuthProvidersCache.refresh([options.userId]),\n        this._serverUserConnectedAccountsCache.refresh([options.userId]),\n      ]);\n      return Result.ok(this._serverOAuthProviderFromCrud(crud));\n    } catch (error) {\n      if (KnownErrors.OAuthProviderAccountIdAlreadyUsedForSignIn.isInstance(error)) {\n        return Result.error(error);\n      }\n      throw error;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgDA,IAAa,mCAAb,cAA+GA,qBAAAA,iCAA2D;CA6DxK,MAAgB,uBAAuB,QAAgB,QAAgB;EACrE,MAAM,QAAQ,IAAI;GAChB,KAAK,+BAA+B,QAAQ,CAAC,MAAM,CAAC;GACpD,KAAK,kBAAkB,cAAc,CAAC,OAAO,MAAM,UAAU,MAAM,KAAA,CAAS;GAC5E,KAAK,kBAAkB,cAAc,QAAQ,IAAI,OAAO,MAAM;EAChE,CAAC;CACH;CAqMA,sBAAgC,gBAAwB,MAAmD;EACzG,MAAM,MAAM;EACZ,MAAM,gBAAgB,SAAS,SAAS,IAAI,2BAA2B,IAAI;EAC3E,MAAM,kBAAkB,SAAS,SAAS,EAAE,QAAQ,eAAe,IAAI,EAAE,QAAQ,eAAe;EAChG,OAAO;GACL,GAAG,KAAK,gBAAgB,gBAAgB,MAAM,IAAI;GAClD,MAAM,QAAQ,QAAgB;IAC5B,OAAO,MAAM,IAAI,QAAQ;KAAE;KAAQ,GAAG;IAAgB,CAAC;GACzD;GACA,MAAM,aAAa,gBAA0G;IAC3H,IAAI,SAAS,QACX,IAAI,eAAe,gBACjB,MAAM,IAAI,aAAa;KAAE,QAAQ;KAAgB,WAAW,eAAe;KAAW,UAAU,eAAe;IAAS,CAAC;SAEzH,MAAM,IAAI,aAAa;KAAE,QAAQ;KAAgB,SAAS,eAAe;KAAS,UAAU,eAAe;IAAS,CAAC;SAGvH,IAAI,eAAe,gBACjB,MAAM,IAAI,aAAa;KAAE,QAAQ;KAAgB,WAAW,eAAe;KAAW,UAAU,eAAe;IAAS,CAAC;SAEzH,MAAM,IAAI,aAAa;KAAE,QAAQ;KAAgB,SAAS,eAAe;KAAS,UAAU,eAAe;IAAS,CAAC;IAGzH,MAAM,cAAc,QAAQ;KAAC;KAAgB;KAAM;IAAI,CAAC;GAC1D;GACA,MAAM,kBAAkB,SAAqG;IAC3H,MAAM,oBAAoB,eAAe,UAAU,QAAQ,YAAY,QAAQ;IAC/E,OAAO,MAAM,IAAI,WAAW,kBAAkB,MAAM,gBAAgB,mBAAmB,MAAM,QAAQ,WAAW,QAAQ;GAC1H;EACF;CACF;CAEA,MAAc,kBAAkB,QAAgB,QAAuE;EACrH,MAAM,SAAS,MAAM,KAAK,WAAW,iBAAiB,SAAA,GAAA,qBAAA,8BAAA,CAAsC,MAAM,CAAC;EACnG,MAAM,KAAK,cAAc;EACzB,OAAO;CACT;CAEA,mCAA6C,MAA2E;EACtH,MAAM,MAAM;EACZ,OAAO;GACL,aAAa,KAAK;GAClB,iBAAiB,KAAK;GACtB,MAAM,OAAO,QAA4D;IACvE,MAAM,IAAI,WAAW,8BAA8B;KACjD,QAAQ,KAAK;KACb,QAAQ,KAAK;KACb,SAAS;MACP,cAAc,OAAO;MACrB,mBAAmB,OAAO;KAC5B;IACF,CAAC;IACD,MAAM,IAAI,4BAA4B,QAAQ,CAAC,KAAK,SAAS,KAAK,OAAO,CAAC;GAC5E;EACF;CACF;CAEA,8BAAwC,QAAgB,MAAmE;EACzH,MAAM,MAAM;EACZ,OAAO;GACL,IAAI,KAAK;GACT,OAAO,KAAK;GACZ,MAAM,KAAK;GACX,YAAY,KAAK;GACjB,WAAW,KAAK;GAChB,aAAa,KAAK;GAClB,MAAM,sBAAsB,SAAoC;IAC9D,MAAM,IAAI,WAAW,0CAA0C,QAAQ,KAAK,IAAI,SAAS,gBAAA,GAAA,yBAAA,qBAAA,CAAoC,IAAI,SAAS,CAAC,CAAC,mBAAmB,aAAa,CAAC;GAC/K;GACA,MAAM,OAAO,MAAyC;IACpD,MAAM,IAAI,WAAW,2BAA2B,QAAQ,KAAK,KAAA,GAAA,gCAAA,wCAAA,CAA4C,IAAI,CAAC;IAC9G,MAAM,QAAQ,IAAI,CAChB,IAAI,4BAA4B,QAAQ,CAAC,MAAM,CAAC,GAChD,IAAI,iBAAiB,QAAQ,CAAC,MAAM,CAAC,CACvC,CAAC;GACH;GACA,MAAM,SAAS;IACb,MAAM,IAAI,WAAW,2BAA2B,QAAQ,KAAK,EAAE;IAC/D,MAAM,QAAQ,IAAI,CAChB,IAAI,4BAA4B,QAAQ,CAAC,MAAM,CAAC,GAChD,IAAI,iBAAiB,QAAQ,CAAC,MAAM,CAAC,CACvC,CAAC;GACH;EACF;CACF;CAEA,oCAA8C,QAAgB,MAA0E;EACtI,MAAM,MAAM;EACZ,OAAO;GACL,IAAI,KAAK;GACT,MAAM,KAAK;GACX,SAAS,KAAK;GACd,YAAY,KAAK;GAEjB,MAAM,WAAW,SAAkB;IACjC,MAAM,IAAI,WAAW,8BAA8B,QAAQ,KAAK,0BAA0B,OAAO;IACjG,MAAM,IAAI,mCAAmC,QAAQ,CAAC,MAAM,CAAC;GAC/D;EACF;CACF;CAEA,6BAAuC,MAA2C;EAChF,MAAM,MAAM;EACZ,OAAO;GACL,IAAI,KAAK;GACT,MAAM,KAAK;GACX,QAAQ,KAAK;GACb,WAAW,KAAK;GAChB,OAAO,KAAK;GACZ,aAAa,KAAK;GAClB,wBAAwB,KAAK;GAE7B,MAAM,OAAO,MAEV;IACD,IAAI;KACF,MAAM,IAAI,WAAW,0BAA0B,KAAK,SAAS,KAAK,IAAI;MACpE,YAAY,KAAK;MACjB,OAAO,KAAK;MACZ,eAAe,KAAK;MACpB,0BAA0B,KAAK;KACjC,CAAC;KACD,MAAM,QAAQ,IAAI,CAChB,IAAI,2BAA2B,QAAQ,CAAC,KAAK,OAAO,CAAC,GACrD,IAAI,kCAAkC,QAAQ,CAAC,KAAK,OAAO,CAAC,CAC9D,CAAC;KACD,OAAOC,oCAAAA,OAAO,GAAG,KAAA,CAAS;IAC5B,SAAS,OAAO;KACd,IAAIC,iBAAAA,YAAY,2CAA2C,WAAW,KAAK,GACzE,OAAOD,oCAAAA,OAAO,MAAM,KAAK;KAE3B,MAAM;IACR;GACF;GAEA,MAAM,SAAS;IACb,MAAM,IAAI,WAAW,0BAA0B,KAAK,SAAS,KAAK,EAAE;IACpE,MAAM,QAAQ,IAAI,CAChB,IAAI,2BAA2B,QAAQ,CAAC,KAAK,OAAO,CAAC,GACrD,IAAI,kCAAkC,QAAQ,CAAC,KAAK,OAAO,CAAC,CAC9D,CAAC;GACH;EACF;CACF;CAEA,YAAY,SAAqE,cAAyG;EACxL,MAAM,mBAAA,GAAA,YAAA,0BAAA,CAA4C,OAAO;EAEzD,MAAM,uBAAuB,gBAAgB,yBAAA,GAAA,YAAA,+BAAA,CAAuD;EAEpG,MAAM,iBAAiB;GACrB,GAAG;GACH,WAAW,cAAc,oBAAoB;IAC3C,MAAM,WAAA,GAAA,YAAA,eAAA,CAAyB,gBAAgB,OAAO;IACtD,OAAO,IAAIE,iBAAAA,wBAAwB;KACjC,kBAAkB,QAAQ,CAAC,CAAC;KAC5B,YAAY;KACZ,WAAW,gBAAgB,cAAA,GAAA,YAAA,oBAAA,CAAiC;KAC5D,qBAAqB,gBAAgB,wBAAA,GAAA,YAAA,8BAAA,CAAqD;KAC1F,eAAA,YAAA;KACA,GAAI,wBAAwB,OAAO,EAAE,qBAAqB,IAAI,CAAC;KAC/D,iBAAiB,gBAAgB,oBAAA,GAAA,YAAA,0BAAA,CAA6C;IAChF,CAAC;GACH,EAAA,CAAG;EACL,CAAC;uEAxa6D,OAAO,YAAY;GACjF,IAAI,QAAQ,mBAAmB,GAE7B,OAAO;GAET,OAAO,MAAM,KAAK,WAAW,qBAAqB,OAAO;EAC3D,CAAC;wDAY+B,OAAO,CAAC,QAAQ,OAAO,SAAS,MAAM,OAAO,mBAAmB,kBAAkB,eAAe,QAAQ,0BAA0B;GACjK,IAAI,iBAAiB,CAAC,kBACpB,MAAM,IAAIC,mCAAAA,uBAAuB,mDAAmD;GAEtF,MAAM,0BAA0B,sBAAsB,MAAM,GAAG;GAC/D,IAAI,eACF,OAAO,MAAM,KAAK,WAAW,gBAAgB;IAAE;IAAQ;IAAO;IAAS;IAAM;IAAO,sBAAsB;IAAyB;IAAmB,kBAAkB;IAAM,eAAe;IAAM;GAAO,CAAC;GAE7M,OAAO,MAAM,KAAK,WAAW,gBAAgB;IAAE;IAAQ;IAAO;IAAS;IAAM;IAAO,sBAAsB;IAAyB;IAAmB;IAAkB;GAAO,CAAC;EAClL,CAAC;uDAC6F,OAAO,CAAC,YAAY;GAChH,MAAM,OAAO,MAAM,KAAK,WAAW,kBAAkB,MAAM;GAC3D,OAAOH,oCAAAA,OAAO,GAAG,MAAM,IAAI;EAC7B,CAAC;wDAQ+B,OAAO,CAAC,QAAQ,SAAS,MAAM,QAAQ,OAAO,WAAW;GACvF,OAAO,MAAM,KAAK,WAAW,yBAAyB;IAAE;IAAQ;IAAS;IAAM;IAAQ;IAAO;GAAM,CAAC;EACvG,CAAC;uDAC6F,OAAO,CAAC,YAAY;GAEhH,IAAI,EAAA,GAAA,kCAAA,OAAA,CAAQ,MAAM,GAChB,OAAO;GAET,IAAI;IACF,OAAO,MAAM,KAAK,WAAW,cAAc,MAAM;GACnD,SAAS,OAAO;IACd,IAAIC,iBAAAA,YAAY,aAAa,WAAW,KAAK,GAC3C,OAAO;IAET,MAAM;GACR;EACF,CAAC;sEASgH,OAAO,CAAC,YAAY;GACnI,OAAO,MAAM,KAAK,WAAW,8BAA8B,MAAM;EACnE,CAAC;sEAIC,OAAO,CAAC,QAAQ,QAAQ,eAAe;GACvC,OAAO,MAAM,KAAK,WAAW,0BAA0B;IAAE;IAAQ;IAAQ;GAAU,GAAG,IAAI;EAC5F,CAAC;2EAQC,OAAO,CAAC,QAAQ,eAAe;GAC/B,OAAO,MAAM,KAAK,WAAW,0BAA0B;IAAE;IAAQ;GAAU,GAAG,IAAI;EACpF,CAAC;yEAIC,OAAO,CAAC,QAAQ,eAAe;GAC/B,OAAO,MAAM,KAAK,WAAW,6BAA6B;IAAE;IAAQ;GAAU,GAAG,IAAI;EACvF,CAAC;kFAGC,OAAO,CAAC,QAAQ,YAAY,WAAW;GACrC,IAAI;IAEF,OAAO,EAAE,cAAa,MADD,KAAK,WAAW,gCAAgC,QAAQ,YAAY,SAAS,EAAE,EAAA,CACvE,aAAa;GAC5C,SAAS,KAAK;IACZ,IAAI,EAAEA,iBAAAA,YAAY,6BAA6B,WAAW,GAAG,KAAKA,iBAAAA,YAAY,wCAAwC,WAAW,GAAG,KAAKA,iBAAAA,YAAY,kCAAkC,WAAW,GAAG,IACnM,MAAM;GAEV;GACA,OAAO;EACT,CACF;sEAGE,OAAO,CAAC,QAAQ,YAAY,OAAO,cAAc;GAC/C,OAAO,MAAM,KAAK,+BAA+B;IAC/C,SAAS,YAAYD,oCAAAA,OAAO,QAAQ,MAAM,KAAK,iBAAiB,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC;IACjG,qBAAqB,YAAYA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,4CAA4C,UAAU;KAAC;KAAQ;KAAY,SAAS;IAAE,GAAY,YAAY,CAAC;IAC1K;IACA;IACA;IACA,SAAS;GACX,CAAC;EACH,CACF;wEAEE,OAAO,CAAC,YAAY;GAElB,QAAO,MADc,KAAK,WAAW,4BAA4B,MAAM,EAAA,CACzD,MAAM,KAAK,SAAS,KAAK,yCAAyC,QAAQ,IAAI,CAAC;EAC/F,CACF;2FAEE,OAAO,CAAC,QAAQ,YAAY,mBAAmB,WAAW;GACxD,IAAI;IAEF,OAAO,EAAE,cAAa,MADD,KAAK,WAAW,yCAAyC,QAAQ,YAAY,mBAAmB,SAAS,EAAE,EAAA,CACnG,aAAa;GAC5C,SAAS,KAAK;IACZ,IAAI,EAAEC,iBAAAA,YAAY,6BAA6B,WAAW,GAAG,KAAKA,iBAAAA,YAAY,wCAAwC,WAAW,GAAG,KAAKA,iBAAAA,YAAY,kCAAkC,WAAW,GAAG,IACnM,MAAM;GAEV;GACA,OAAO;EACT,CACF;qEAEE,OAAO,CAAC,YAAY;GAClB,OAAO,MAAM,KAAK,WAAW,6BAA6B,EAAE,OAAO,CAAC;EACtE,CACF;kEAEE,OAAO,CAAC,YAAY;GAClB,OAAO,MAAM,KAAK,WAAW,0BAA0B,EAAE,OAAO,CAAC;EACnE,CACF;kEAEE,OAAO,CAAC,QAAQ,YAAY;GAC1B,OAAO,MAAM,KAAK,WAAW,2BAA2B;IAAE;IAAQ;GAAO,CAAC;EAC5E,CACF;kEAEE,OAAO,CAAC,YAAY;GAClB,OAAO,MAAM,KAAK,WAAW,0BAA0B,MAAM;EAC/D,CACF;yEAEE,OAAO,CAAC,YAAY;GAClB,OAAO,MAAM,KAAK,WAAW,iCAAiC,MAAM;EACtE,CACF;sEACwG,OAAO,CAAC,SAAS,KAAK,YAAY;GACxI,OAAO,MAAM,KAAK,WAAW,uBAAuB,QAAQ,SAAS,GAAG;EAC1E,CAAC;8DAEsD,YAAY;GACjE,OAAO,MAAM,KAAK,WAAW,qBAAqB;EACpD,CAAC;8DAGC,OAAO,CAAC,YAAY;GAIlB,OAAO,MAHc,KAAK,WAAW,mBAAmB,EACtD,SAAS,OACX,GAAG,MAAM,QAAQ;EAEnB,CACF;8DAGE,OAAO,CAAC,YAAY;GAIlB,OAAO,MAHc,KAAK,WAAW,mBAAmB,EACtD,SAAS,OACX,GAAG,MAAM,QAAQ;EAEnB,CACF;kEAGE,OAAO,CAAC,SAAS;GACf,MAAM,WAAW,MAAM,IAAI,KAAK,gBAAgB;GAChD,OAAO,WAAW,SAAS,UAAU;EACvC,CACF;8DAEgK,OAAO,CAAC,MAAM,YAAY;GAOxL,OAAO,MANc,KAAK,WAAW,mBACnC,MACA,QACA,MACA,QACF;EAEF,CAAC;iEAGC,OAAO,CAAC,YAAY;GAClB,OAAO,MAAM,KAAK,WAAW,yBAAyB,EAAE,SAAS,OAAO,CAAC;EAC3E,CACF;4DAGE,OAAO,CAAC,QAAQ,YAAY;GAC1B,OAAO,MAAM,KAAK,WAAW,QAAQ;IAAE;IAAQ;GAAO,GAAG,MAAM,QAAQ;EACzE,CACF;4DAGE,OAAO,CAAC,QAAQ,YAAY;GAC1B,OAAO,MAAM,KAAK,WAAW,QAAQ;IAAE;IAAQ;GAAO,GAAG,MAAM,QAAQ;EACzE,CACF;8DAGE,OAAO,CAAC,kBAAkB,YAAY;GACpC,OAAO,MAAM,KAAK,WAAW,QAAQ;IAAE;IAAkB;GAAO,GAAG,MAAM,QAAQ;EACnF,CACF;+DAGE,OAAO,CAAC,QAAQ,QAAQ,WAAW;GACjC,OAAO,MAAM,KAAK,WAAW,aAAa;IACxC,eAAe;IACf,aAAa;IACb,QAAQ,UAAU,KAAA;IAClB,OAAO,SAAS,KAAA;GAClB,GAAG,MAAM,QAAQ;EACnB,CACF;+DAGE,OAAO,CAAC,QAAQ,QAAQ,WAAW;GACjC,OAAO,MAAM,KAAK,WAAW,aAAa;IACxC,eAAe;IACf,aAAa;IACb,QAAQ,UAAU,KAAA;IAClB,OAAO,SAAS,KAAA;GAClB,GAAG,MAAM,QAAQ;EACnB,CACF;iEAGE,OAAO,CAAC,kBAAkB,QAAQ,WAAW;GAC3C,OAAO,MAAM,KAAK,WAAW,aAAa;IACxC,eAAe;IACf,aAAa;IACb,QAAQ,UAAU,KAAA;IAClB,OAAO,SAAS,KAAA;GAClB,GAAG,MAAM,QAAQ;EACnB,CACF;CAuKA;CAOA,sBAAgC,MAA2N;EACzP,OAAO;GACL,GAAG,KAAK,oBAAoB,IAAI;GAChC,MAAM,SAAS;IACb,MAAM,KAAK,OAAO,EAAE,SAAS,KAAK,CAAC;GACrC;GACA,QAAQ,OAAO,YAAiC;IAC9C,MAAM,KAAK,WAAW,oBACpB,KAAK,SAAS,SAAS,EAAE,SAAS,KAAK,QAAQ,IAAI,EAAE,SAAS,KAAK,QAAQ,GAC3E,KAAK,IACL,OAAA,GAAA,wBAAA,0BAAA,CAAgC,KAAK,MAAM,OAAO,GAClD,MACA,QAAQ;IACV,IAAI,KAAK,SAAS,QAChB,MAAM,KAAK,wBAAwB,QAAQ,CAAC,KAAK,OAAO,CAAC;SAEzD,MAAM,KAAK,wBAAwB,QAAQ,CAAC,KAAK,OAAO,CAAC;GAE7D;EACF;CACF;CAEA,yCACE,QACA,MACiB;EACjB,MAAM,MAAM;EACZ,MAAM,aAAa,KAAK;EACxB,MAAM,oBAAoB,KAAK;EAC/B,OAAO;GACL,IAAI;GACJ,UAAU;GACV;GACA,MAAM,eAAe,SAAiC;IACpD,MAAM,cAAc,SAAS,QAAQ,KAAK,GAAG,KAAK;IAClD,MAAM,SAASD,oCAAAA,OAAO,QAAQ,MAAM,IAAI,qDAAqD,UAAU;KAAC;KAAQ;KAAY;KAAmB;IAAW,GAAG,YAAY,CAAC;IAC1K,IAAI,CAAC,QAAQ;KACX,MAAM,cAAc,cAAc,yBAAyB,YAAY,8CAA8C;KACrH,OAAOA,oCAAAA,OAAO,MAAM,IAAIC,iBAAAA,YAAY,6BAA6B,YAAY,GAAG,YAAY,4GAA4G,CAAC;IAC3M;IACA,OAAOD,oCAAAA,OAAO,GAAG,MAAM;GACzB;EACF;CACF;CAEA,oBAA8B,MAA+C;EAC3E,MAAM,MAAM;EAMZ,eAAe,oBACb,aACA,SAC6D;GAC7D,MAAM,cAAc,SAAS,QAAQ,KAAK,GAAG,KAAK;GAGlD,IAAI,OAAO,gBAAgB,YAAY,cAAc,eAAe,uBAAuB,aAAa;IACtG,MAAM,EAAE,UAAU,sBAAsB;IAGxC,MAAM,QADoBA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,kCAAkC,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACxF,CAAC,CAAC,MAC9B,MAAK,EAAE,aAAa,YAAY,EAAE,sBAAsB,iBAC1D;IACA,IAAI,CAAC,OACH,OAAO;IAET,OAAO;GACT;GAGA,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,gCAAgC,UAAU;IAAC,KAAK;IAAI;IAAa;IAAa,SAAS,OAAO;GAAU,GAAG,YAAY,CAAC;EAC1J;EAkRA,QAAA,GAAA,qBAAA,yBAAA,CA/Q4C;GAC1C,GAAG,MAAM,gBAAgB,IAAI;GAC7B,cAAc,IAAI,KAAK,KAAK,qBAAqB;GACjD,gBAAgB,KAAK;GACrB,iCAAiC,KAAK;GACtC,aAAa,KAAK;GAClB,YAAY,EACV,QAAQ;IACN,KAAK,KAAK,YAAY,QAAQ;IAC9B,gBAAgB,KAAK,YAAY,QAAQ;GAC3C,EACF;GACA,MAAM,gBAAgB,OAAsB,SAAkC;IAC5E,MAAM,IAAI,kBAAkB,KAAK,IAAI;KAAE,cAAc;KAAO,sBAAsB,SAAS;IAAS,CAAC;GACvG;GACA,MAAM,gBAAgB,qBAAoC,cAAsC;IAC9F,IAAI,uBAAuB,OAAO,wBAAwB,YAAY,cAAc;KAClF,MAAM,QAAQ;KACd,MAAM,IAAI,WAAW,8BAA8B,MAAM,IAAI,KAAK,IAAI,YAAY;KAElF,KAAK,MAAM,aAAa,CAAC,MAAM,KAAK,GAAG;MACrC,MAAM,IAAI,gCAAgC,QAAQ;OAAC,MAAM;OAAI,KAAK;OAAI;MAAS,CAAC;MAChF,MAAM,IAAI,qCAAqC,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC;KAC9E;IACF,OAAO;KACL,MAAM,MAAM;KACZ,MAAM,IAAI,WAAW,6BAA6B,KAAK,IAAI,GAAG;KAE9D,KAAK,MAAM,aAAa,CAAC,MAAM,KAAK,GAClC,MAAM,IAAI,mCAAmC,QAAQ,CAAC,KAAK,IAAI,SAAS,CAAC;IAE7E;GACF;GACA,MAAM,iBAAiB,qBAAoC,cAAsC;IAC/F,IAAI,uBAAuB,OAAO,wBAAwB,YAAY,cAAc;KAClF,MAAM,QAAQ;KACd,MAAM,IAAI,WAAW,+BAA+B,MAAM,IAAI,KAAK,IAAI,YAAY;KAEnF,KAAK,MAAM,aAAa,CAAC,MAAM,KAAK,GAAG;MACrC,MAAM,IAAI,gCAAgC,QAAQ;OAAC,MAAM;OAAI,KAAK;OAAI;MAAS,CAAC;MAChF,MAAM,IAAI,qCAAqC,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC;KAC9E;IACF,OAAO;KACL,MAAM,MAAM;KACZ,MAAM,IAAI,WAAW,8BAA8B,KAAK,IAAI,GAAG;KAE/D,KAAK,MAAM,aAAa,CAAC,MAAM,KAAK,GAClC,MAAM,IAAI,mCAAmC,QAAQ,CAAC,KAAK,IAAI,SAAS,CAAC;IAE7E;GACF;GACA,MAAM,SAAS;IACb,MAAM,MAAM,MAAM,IAAI,WAAW,iBAAiB,KAAK,EAAE;IACzD,MAAM,IAAI,cAAc;IACxB,OAAO;GACT;GACA,MAAM,cAAc,SAAkE;IAEpF,MAAM,SAAS,MAAM,IAAI,WAAW,wBAAwB,KAAK,IAAI,QAAQ,mBAAmB,MAAO,KAAK,KAAK,KAAK,KAAK,QAAQ,mBAAmB,KAAK;IAC3J,OAAO,EACL,MAAM,YAAY;KAChB,OAAO;IACT,EACF;GACF;GAEA,MAAM,oBAAoB;IAExB,QAAO,MADgB,IAAI,WAAW,mBAAmB,KAAK,EAAE,EAAA,CAChD,MAAM,KAAK,YAAY,IAAI,uBAAuB,OAAO,CAAC;GAC5E;GAEA,MAAM,cAAc,WAAmB;IACrC,MAAM,IAAI,WAAW,oBAAoB,SAAS;GACpD;GACA,MAAM,eAAe,aAA4B;IAC/C,OAAO,MAAM,KAAK,OAAO,EAAE,YAAY,CAAC;GAC1C;GACA,MAAM,kBAAkB,UAA+B;IACrD,OAAO,MAAM,KAAK,OAAO,EAAE,gBAAgB,SAAS,CAAC;GACvD;GACA,MAAM,0BAA0B,UAA+B;IAC7D,OAAO,MAAM,KAAK,OAAO,EAAE,wBAAwB,SAAS,CAAC;GAC/D;GACA,MAAM,kBAAkB,UAA+B;IACrD,OAAO,MAAM,KAAK,OAAO,EAAE,gBAAgB,SAAS,CAAC;GACvD;GACA,MAAM,gBAAgB,MAA4B;IAChD,OAAO,MAAM,KAAK,OAAO,EAAE,gBAAgB,OAAO,SAAS,WAAW,OAAO,MAAM,MAAM,KAAK,CAAC;GACjG;GACA;GACA,MAAM,wBAAwB;IAC5B,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,kCAAkC,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CAAC;GACtG;GACA,MAAM,uBAAsC;IAC1C,MAAM,IAAIG,mCAAAA,uBAAuB,2GAA2G;GAC9I;GACA,MAAM,4BAAsD;IAC1D,MAAM,IAAIA,mCAAAA,uBAAuB,gHAAgH;GACnJ;GACA,cAAc,KAAK,gBAAgB,IAAI,oBAAoB,KAAK,aAAa,IAAI;GAKjF,MAAM,QAAQ,QAAgB;IAE5B,QAAO,MADa,KAAK,UAAU,EAAA,CACtB,MAAM,MAAM,EAAE,OAAO,MAAM,KAAK;GAC/C;GACA,MAAM,UAAU,SAAyF;IACvG,MAAM,SAASH,oCAAAA,OAAO,QAAQ,MAAM,IAAI,kBAAkB,UAAU;KAAC,KAAK;KAAI,SAAS;KAAS,SAAS;KAAM,SAAS;KAAQ,SAAS;KAAO,SAAS;IAAK,GAAY,YAAY,CAAC;IACvL,MAAM,QAAa,OAAO,MAAM,KAAK,MAAM,IAAI,oBAAoB,CAAC,CAAC;IACrE,MAAM,aAAa,OAAO,YAAY,eAAe;IACrD,OAAO;GACT;GACA,YAAY,OAAO,SAAyD;IAC1E,MAAM,OAAO,MAAM,IAAI,WAAW,kBAAA,GAAA,qBAAA,8BAAA,CAA+C;KAC/E,eAAe,KAAK;KACpB,GAAG;IACL,CAAC,CAAC;IACF,MAAM,IAAI,kBAAkB,mBAAmB,IAAI;IACnD,MAAM,IAAI,kBAAkB,KAAK,IAAI,EAAE,gBAAgB,KAAK,GAAG,CAAC;IAChE,OAAO,IAAI,oBAAoB,IAAI;GACrC;GACA,WAAW,OAAO,SAAe;IAC/B,MAAM,IAAI,WAAW,gBAAgB;KAAE,QAAQ,KAAK;KAAI,QAAQ,KAAK;IAAG,CAAC;IACzE,MAAM,IAAI,uBAAuB,KAAK,IAAI,KAAK,EAAE;GACnD;GACA,MAAM,sBAAsB;IAE1B,OADoBA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,gCAAgC,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CAC7F,CAAC,CAAC,KAAK,QAAQ,IAAI,sCAAsC,KAAK,IAAI,GAAG,CAAC;GACzF;GACA,MAAM,gBAAgB,gBAAiD,SAAmE;IACxI,IAAI,kBAAkB,QAAQ,gBAAgB;KAC5C,MAAM,QAAQ;KACd,MAAM,YAAY,SAAS,aAAa;KAExC,OADoBA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,gCAAgC,UAAU;MAAC,MAAM;MAAI,KAAK;MAAI;KAAS,GAAG,YAAY,CAClH,CAAC,CAAC,KAAK,SAAS,IAAI,0BAA0B,IAAI,CAAC;IACtE,OAAO;KAEL,MAAM,YAAYI,gBAAM,aAAa;KAErC,OADoBJ,oCAAAA,OAAO,QAAQ,MAAM,IAAI,mCAAmC,UAAU,CAAC,KAAK,IAAI,SAAS,GAAG,YAAY,CAC3G,CAAC,CAAC,KAAK,SAAS,IAAI,0BAA0B,IAAI,CAAC;IACtE;GACF;GACA,MAAM,cAAc,qBAAoC,cAA4D;IAClH,IAAI,uBAAuB,OAAO,wBAAwB,UAAU;KAClE,MAAM,QAAQ;KAEd,QAAO,MADmB,KAAK,gBAAgB,KAAK,EAAA,CACjC,MAAM,MAAM,EAAE,OAAO,YAAY,KAAK;IAC3D,OAAO;KACL,MAAM,MAAM;KAEZ,QAAO,MADmB,KAAK,gBAAgB,EAAA,CAC5B,MAAM,MAAM,EAAE,OAAO,GAAG,KAAK;IAClD;GACF;GACA,MAAM,cAAc,qBAAoC,cAAyC;IAC/F,IAAI,uBAAuB,OAAO,wBAAwB,UAAU;KAClE,MAAM,QAAQ;KACd,OAAQ,MAAM,KAAK,cAAc,OAAO,YAAsB,MAAO;IACvE,OAAO;KACL,MAAM,MAAM;KACZ,OAAQ,MAAM,KAAK,cAAc,GAAG,MAAO;IAC7C;GACF;GACA,MAAM,OAAO,QAAiC;IAC5C,MAAM,IAAI,kBAAkB,KAAK,IAAI,MAAM;GAC7C;GACA,MAAM,wBAAwB;IAC5B,OAAO,MAAM,IAAI,qBAAqB,yCAAyC,CAAC,CAAC;GACnF;GACA,MAAM,eAAe,SAAuD;IAC1E,MAAM,SAAS,MAAM,IAAI,WAAW,eAAe,OAAO;IAC1D,MAAM,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC5C,OAAO;GACT;GACA,MAAM,YAAY,SAA+B;IAC/C,MAAM,SAAS,MAAM,KAAK,OAAO,OAAO;IACxC,MAAM,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC5C,OAAO;GACT;GACA,MAAM,eAAe,MAAY;IAC/B,MAAM,SAASA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,4BAA4B,UAAU,CAAC,KAAK,IAAI,KAAK,EAAE,GAAG,YAAY,CAAC;IAC/G,OAAO,IAAI,mCAAmC,MAAM;GACtD;GACA,MAAM,sBAAsB;IAE1B,OADeA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,4BAA4B,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACzF,CAAC,CAAC,KAAK,SAAS,IAAI,8BAA8B,KAAK,IAAI,IAAI,CAAC;GAC9E;GACA,sBAAsB,OAAO,SAA4C;IACvE,MAAM,iBAAiB,MAAM,IAAI,WAAW,4BAAA,GAAA,gCAAA,wCAAA,CAAmE,KAAK,IAAI,IAAI,CAAC;IAC7H,MAAM,QAAQ,IAAI,CAChB,IAAI,4BAA4B,QAAQ,CAAC,KAAK,EAAE,CAAC,GACjD,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC,CACxC,CAAC;IACD,OAAO,IAAI,8BAA8B,KAAK,IAAI,cAAc;GAClE;GACA,MAAM,6BAA6B;IAEjC,OADgBA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,mCAAmC,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CAChG,CAAC,CAAC,KAAK,aAAa,IAAI,oCAAoC,KAAK,IAAI,QAAQ,CAAC;GAC7F;GACA,MAAM,cAAc;IAElB,OADeA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,wBAAwB,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACrF,CAAC,CAAC,KAAK,WAAW,IAAI,sBAAsB,MAAM,CAAC;GACjE;GACA,MAAM,aAAa,SAAwC;IACzD,MAAM,SAAS,MAAM,IAAI,WAAW,oBAClC,OAAA,GAAA,wBAAA,4BAAA,CAAkC,QAAQ,KAAK,IAAI,OAAO,GAC1D,MACA,QACF;IACA,MAAM,IAAI,wBAAwB,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnD,OAAO,IAAI,sBAAsB,MAAM;GACzC;GAEA,MAAM,qBAAqB;IAEzB,OADgBA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,2BAA2B,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACxF,CAAC,CAAC,KAAK,cAAc,IAAI,6BAA6B,SAAS,CAAC;GAC/E;GAEA,MAAM,iBAAiB,IAAY;IAEjC,QAAO,MADiB,KAAK,mBAAmB,EAAA,CAC/B,MAAM,MAAM,EAAE,OAAO,EAAE,KAAK;GAC/C;GACA,MAAM,gBAAgB,SAA6I;IACjK,MAAM,WAAW,SAAS,aAAa,MAAM,IAAI,eAAe,EAAA,EAAI;IACpE,IAAI,CAAC,UACH,MAAM,IAAIG,mCAAAA,uBAAuB,4EAA4E;IAI/G,MAAM,mBAAmB,MAAM,IAAI,WAAW,kCAAkC,KAAK,EAAE;IAEvF,IAAI,iBAAiB,WAAW,MAC9B,OAAOH,oCAAAA,OAAO,MAAM,IAAIC,iBAAAA,YAAY,0BAA0B,2DAA2D,CAAC;IAG5H,MAAM,EAAE,cAAc,SAAS,iBAAiB;IAEhD,CAAA,GAAA,uBAAA,mCAAA,CAAmC,cAAc,QAAQ;IAEzD,IAAI;IACJ,IAAI;KACF,UAAU,OAAA,GAAA,wBAAA,kBAAA,CAAwB,EAAE,aAAa,aAAa,CAAC;IACjE,SAAS,OAAY;KACnB,IAAI,iBAAiBI,wBAAAA,eACnB,OAAOL,oCAAAA,OAAO,MAAM,IAAIC,iBAAAA,YAAY,qBAAqB,MAAM,SAAS,MAAM,IAAI,CAAC;UAC9E;MAEL,CAAA,GAAA,mCAAA,aAAA,CAAa,+BAA+B,KAAK;MACjD,OAAOD,oCAAAA,OAAO,MAAM,IAAIC,iBAAAA,YAAY,0BAA0B,2DAA2D,CAAC;KAC5H;IACF;IAKA,MAAM,EAAE,aAAa,iBAAiB,MAAM,IAAI,WAAW,wBAAwB,KAAK,IAAI,MAAQ,GAAG,KAAK;IAC5G,MAAM,cAAc,IAAIK,+BAAAA,gBAAgB;KACtC;KACA;KACA,4BAA4B,YAAY;IAC1C,CAAC;IAED,MAAM,qBAAqB,MAAM,IAAI,WAAW,gBAAgB;KAAE,YAAY;KAAS;IAAK,GAAG,WAAW;IAE1G,MAAM,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;IAC5C,OAAO;GACT;GACA,GAAG,IAAI,sBAAsB,KAAK,IAAI,MAAM;EAC9C,CAEgB;CAClB;CAEA,wBAAkC,MAAgE;EAShG,QAAA,GAAA,qBAAA,yBAAA,CAR0C;GACxC,GAAG,KAAK,oBAAoB,KAAK,IAAI;GACrC,aAAa;IACX,aAAa,KAAK;IAClB,iBAAiB,KAAK;GACxB;EACF,CAEc;CAChB;CAEA,kCAA4C,MAAgE;EAC1G,OAAO;GACL,IAAI,KAAK;GACT,gBAAgB,KAAK;GACrB,WAAW,IAAI,KAAK,KAAK,iBAAiB;GAC1C,QAAQ,YAAY;IAClB,MAAM,KAAK,WAAW,2BAA2B,KAAK,IAAI,KAAK,OAAO;IACtE,MAAM,KAAK,4BAA4B,QAAQ,CAAC,KAAK,OAAO,CAAC;GAC/D;EACF;CACF;CAEA,sCAAgD,QAAgB,MAAoE;EAClI,MAAM,MAAM;EACZ,OAAO;GACL,IAAI,KAAK;GACT,QAAQ,KAAK;GACb,iBAAiB,KAAK;GACtB,gBAAgB,KAAK;GACrB,WAAW,IAAI,KAAK,KAAK,iBAAiB;GAC1C,QAAQ,YAAY;IAClB,MAAM,IAAI,WAAW,+BAA+B,KAAK,IAAI,MAAM;IACnE,MAAM,QAAQ,IAAI;KAChB,IAAI,gCAAgC,QAAQ,CAAC,MAAM,CAAC;KACpD,IAAI,4BAA4B,QAAQ,CAAC,KAAK,OAAO,CAAC;KACtD,IAAI,uBAAuB,KAAK,SAAS,MAAM;IACjD,CAAC;GACH;EACF;CACF;CAEA,qBAAwC,MAAmC,SAA+D;EAOxI,QAAA,GAAA,qBAAA,yBAAA,CAN6C;GAC3C,GAAG,KAAK,oBAAoB,IAAI;GAChC,GAAG,KAAK,YAAY,OAAO;GAC3B,GAAG,KAAK,mBAAmB,IAAI,KAAK,yBAAyB,OAAO,IAAI,CAAC;EAC3E,CAEiB;CACnB;CAEA,oBAA8B,MAA+C;EAC3E,MAAM,MAAM;EACZ,OAAO;GACL,IAAI,KAAK;GACT,aAAa,KAAK;GAClB,iBAAiB,KAAK;GACtB,WAAW,IAAI,KAAK,KAAK,iBAAiB;GAC1C,gBAAgB,KAAK;GACrB,wBAAwB,KAAK;GAC7B,gBAAgB,KAAK;GACrB,MAAM,OAAO,QAA0C;IACrD,MAAM,IAAI,WAAW,iBAAiB,KAAK,KAAA,GAAA,qBAAA,8BAAA,CAAkC,MAAM,CAAC;IACpF,MAAM,QAAQ,IAAI;KAChB,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;KACtC,IAAI,kBAAkB,mBAAmB,IAAI;KAC7C,IAAI,kBAAkB,mBAAmB,IAAI;IAC/C,CAAC;GACH;GACA,MAAM,SAAS;IACb,MAAM,IAAI,WAAW,iBAAiB,KAAK,EAAE;IAC7C,MAAM,QAAQ,IAAI;KAChB,IAAI,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;KACtC,IAAI,kBAAkB,mBAAmB,IAAI;KAC7C,IAAI,kBAAkB,mBAAmB,IAAI;IAC/C,CAAC;GACH;GACA,MAAM,YAAY;IAEhB,OADeN,oCAAAA,OAAO,QAAQ,MAAM,IAAI,+BAA+B,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CAC5F,CAAC,CAAC,KAAI,MAAK,IAAI,wBAAwB,CAAC,CAAC;GACvD;GACA,MAAM,QAAQ,QAAQ;IACpB,MAAM,IAAI,WAAW,oBAAoB;KACvC,QAAQ,KAAK;KACb;IACF,CAAC;IACD,MAAM,IAAI,uBAAuB,KAAK,IAAI,MAAM;GAClD;GACA,MAAM,WAAW,QAAQ;IACvB,MAAM,IAAI,WAAW,yBAAyB;KAC5C,QAAQ,KAAK;KACb;IACF,CAAC;IACD,MAAM,IAAI,uBAAuB,KAAK,IAAI,MAAM;GAClD;GACA,MAAM,WAAW,SAAkD;IACjE,MAAM,IAAI,WAAW,yBAAyB;KAC5C,QAAQ,KAAK;KACb,OAAO,QAAQ;KACf,aAAa,QAAQ,gBAAA,GAAA,yBAAA,qBAAA,CAAoC,IAAI,SAAS,CAAC,CAAC,gBAAgB,aAAa;IACvG,CAAC;IACD,MAAM,IAAI,4BAA4B,QAAQ,CAAC,KAAK,EAAE,CAAC;GACzD;GACA,MAAM,kBAAkB;IAEtB,OADeA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,4BAA4B,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACzF,CAAC,CAAC,KAAK,SAAS,IAAI,kCAAkC,IAAI,CAAC;GACzE;GACA,MAAM,cAAc;IAElB,OADeA,oCAAAA,OAAO,QAAQ,MAAM,IAAI,wBAAwB,UAAU,CAAC,KAAK,EAAE,GAAG,YAAY,CACrF,CAAC,CAAC,KAAK,WAAW,IAAI,sBAAsB,MAAM,CAAC;GACjE;GACA,MAAM,aAAa,SAAwC;IACzD,MAAM,SAAS,MAAM,IAAI,WAAW,oBAClC,OAAA,GAAA,wBAAA,4BAAA,CAAkC,QAAQ,KAAK,IAAI,OAAO,GAC1D,MACA,QACF;IACA,MAAM,IAAI,wBAAwB,QAAQ,CAAC,KAAK,EAAE,CAAC;IACnD,OAAO,IAAI,sBAAsB,MAAM;GACzC;GACA,GAAG,IAAI,sBAAsB,KAAK,IAAI,MAAM;EAC9C;CACF;CAEA,oBAA8B,UAA4D,MAA8C;EACtI,MAAM,MAAM;EACZ,OAAO;GACL,aAAa,KAAK;GAClB,UAAU,KAAK;GACf,qBAAqB,KAAK,IAAI,GAAG,KAAK,QAAQ;GAC9C,kBAAkB,OAAO,UAAkB;IACzC,MAAM,gBAAgB,SAAS,SAAS,SACpC;KAAE,QAAQ,KAAK;KAAI,QAAQ,SAAS;IAAG,IACvC,SAAS,SAAS,SAChB;KAAE,QAAQ,KAAK;KAAI,QAAQ,SAAS;IAAG,IACvC;KAAE,QAAQ,KAAK;KAAI,kBAAkB,SAAS;IAAG;IACvD,MAAM,IAAI,WAAW,mBAAmB,eAAe,EAAE,MAAM,CAAC;IAChE,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;SACvF,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;SAC5F,MAAM,IAAI,wBAAwB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;GACvE;GACA,kBAAkB,OAAO,UAAkB;IACzC,MAAM,gBAAgB,SAAS,SAAS,SACpC;KAAE,QAAQ,KAAK;KAAI,QAAQ,SAAS;IAAG,IACvC,SAAS,SAAS,SAChB;KAAE,QAAQ,KAAK;KAAI,QAAQ,SAAS;IAAG,IACvC;KAAE,QAAQ,KAAK;KAAI,kBAAkB,SAAS;IAAG;IACvD,MAAM,IAAI,WAAW,mBAAmB,eAAe;KAAE,OAAO,CAAC;KAAO,gBAAgB;IAAK,CAAC;IAC9F,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;SACvF,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;SAC5F,MAAM,IAAI,wBAAwB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;GACvE;GACA,qBAAqB,OAAO,UAAkB;IAC5C,IAAI;KACF,MAAM,gBAAgB,SAAS,SAAS,SACpC;MAAE,QAAQ,KAAK;MAAI,QAAQ,SAAS;KAAG,IACvC,SAAS,SAAS,SAChB;MAAE,QAAQ,KAAK;MAAI,QAAQ,SAAS;KAAG,IACvC;MAAE,QAAQ,KAAK;MAAI,kBAAkB,SAAS;KAAG;KACvD,MAAM,IAAI,WAAW,mBAAmB,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC;KACxE,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;UACvF,IAAI,SAAS,SAAS,QAAQ,MAAM,IAAI,sBAAsB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;UAC5F,MAAM,IAAI,wBAAwB,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;KACrE,OAAO;IACT,SAAS,OAAO;KACd,IAAI,iBAAiBC,iBAAAA,YAAY,gCAC/B,OAAO;KAET,MAAM;IACR;GACF;EACF;CACF;CAEA,MAAgB,eAAe,SAA6D;EAC1F,MAAM,OAAOD,oCAAAA,OAAO,QAAQ,MAAM,KAAK,wBAAwB,UAAU,CAAC,QAAQ,QAAQ,MAAM,GAAG,YAAY,CAAC;EAChH,OAAO,OAAO,KAAK,sBAAsB,IAAI,IAAI;CACnD;CAEA,MAAgB,eAAe,SAA6D;EAC1F,MAAM,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,wBAAwB,UAAU,CAAC,QAAQ,QAAQ,MAAM,GAAG,YAAY,CAAC;EAChH,OAAO,OAAO,KAAK,sBAAsB,IAAI,IAAI;CACnD;CACA,MAAgB,iBAAiB,QAA4C;EAC3E,MAAM,eAAe,MAAM,KAAK,eAAe,EAAE,OAAO,CAAC;EACzD,IAAI,iBAAiB,MACnB,OAAO;EAET,OAAO,MAAM,KAAK,kBAAkB,aAAa,MAAM;CACzD;CAEA,MAAgB,iBAAiB,KAAgB,kBAAuD;EACtG,MAAM,WAAW,MAAM,IAAI,KAAK,gBAAgB;EAChD,IAAI,aAAa,MACf,OAAO;EAET,MAAM,OAAO,MAAM,KAAK,kBAAkB,SAAS,OAAO;EAC1D,IAAI,MAAM,eAAe,CAAC,kBACxB,OAAO;EAET,OAAO;CACT;CAEA,MAAgB,iBAAiB,QAA4C;EAC3E,MAAM,eAAe,MAAM,KAAK,eAAe,EAAE,OAAO,CAAC;EACzD,IAAI,iBAAiB,MACnB,OAAO;EAET,OAAO,MAAM,KAAK,QAAQ,aAAa,MAAM;CAC/C;CAEA,MAAM,WAAW,SAAuD;EACtE,MAAM,OAAO,MAAM,KAAK,WAAW,kBAAA,GAAA,qBAAA,8BAAA,CAA+C,OAAO,CAAC;EAC1F,MAAM,KAAK,cAAc;EACzB,OAAO,KAAK,oBAAoB,IAAI;CACtC;CASA,MAAM,QAAQ,SAAqL;EACjM,IAAI,OAAO,YAAY,UACrB,OAAO,MAAM,KAAK,kBAAkB,OAAO;OACtC,IAAI,OAAO,YAAY,YAAY,YAAY,SACpD,OAAO,MAAM,KAAK,iBAAiB,QAAQ,MAAM;OAC5C,IAAI,OAAO,YAAY,YAAY,UAAU,WAAW,QAAQ,SAAmB,UACxF,OAAO,MAAM,KAAK,iBAAiB,QAAQ,KAAK,QAAQ,WAAW,QAAQ,OAAO,WAAW;OACxF;GACL,UAAU;GAGV,IAAI,SAAS,OAAO,eAAe,QAAQ,sBAAsB,OAC/D,MAAM,IAAI,MAAM,wHAAwH;GAI1I,KAAK,4BAA4B,SAAS,UAAU;GACpD,MAAM,UAAU,MAAM,KAAK,YAAY,SAAS,UAAU;GAC1D,IAAI,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,wBAAwB,UAAU,CAAC,OAAO,GAAG,YAAY,CAAC;GAC/F,MAAM,mBAAmB,SAAS,OAAO,eAAe,SAAS,OAAO;GACxE,MAAM,oBAAoB,SAAS,sBAAsB,QAAQ;GAEjE,IAAI,SAAS,QAAS,KAAK,gBAAgB,CAAC,oBAAsB,KAAK,iBAAiB,CAAC,mBACvF,QAAQ,SAAS,IAAjB;IACE,KAAK;KACH,IAAI,CAAC,MAAM,gBAAgB,MAAM,eAC/B,MAAM,KAAK,qBAAqB,EAAE,SAAS,KAAK,CAAC;UAEjD,MAAM,KAAK,iBAAiB,EAAE,SAAS,KAAK,CAAC;KAG/C;IAEF,KAAK,SACH,MAAM,IAAI,MAAM,mEAAmE;IAErF,KAAK,aAAa;KAChB,MAAM,SAAS,MAAM,KAAK,mBAAmB;KAC7C,OAAO,MAAM,KAAK,QAAQ;MAAE,YAAY;MAAQ,IAAI;MAAmC,mBAAmB;KAAK,CAAC,MAAA,GAAA,mCAAA,SAAA,CAAc,mDAAmD;IACnL;IACA,KAAK,KAAA;IACL,KAAK;IACL,KAAK,eACH,OAAO;GAEX;GAGF,OAAO,QAAQ,KAAK,qBAAqB,MAAM,OAAO;EACxD;CACF;CAEA,MAAM,gBAAqE;EACzE,QAAQ,KAAK,sFAAsF;EACnG,OAAO,MAAM,KAAK,QAAQ;CAC5B;CAEA,MAAM,kBAAkB,QAA4C;EAClE,MAAM,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,iBAAiB,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC;EACzF,OAAO,QAAQ,KAAK,oBAAoB,IAAI;CAC9C;CAGA,MAAM,UAAU,SAAyF;EACvG,MAAM,uBAAuB,SAAS,wBAAwB,QAAQ,qBAAqB,SAAS,IAAI,QAAQ,qBAAqB,KAAK,GAAG,IAAI,KAAA;EACjJ,MAAM,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,kBAAkB,UAAU;GAAC,SAAS;GAAQ,SAAS;GAAO,SAAS;GAAS,SAAS;GAAM,SAAS;GAAO,SAAS;GAAmB,SAAS;GAAkB,SAAS;GAAe,SAAS;GAAQ;EAAoB,GAAG,YAAY,CAAC;EAC1R,MAAM,SAAc,KAAK,MAAM,KAAK,MAAM,KAAK,oBAAoB,CAAC,CAAC;EACrE,OAAO,aAAa,KAAK,YAAY,eAAe;EACpD,OAAO;CACT;CAGA,0BAA0B,MAA6G;EACrI,OAAO,EACL,IAAI,KAAK,GACX;CACF;CAEA,wCAAwC,MAAqF;EAC3H,OAAO;GACL,IAAI,KAAK;GACT,aAAa,KAAK;GAClB,wBAAwB,KAAK;EAC/B;CACF;CAEA,2CAA2C,MAA2F;EACpI,OAAO;GACL,IAAI,KAAK;GACT,aAAa,KAAK;GAClB,wBAAwB,KAAK;EAC/B;CACF;CAEA,MAAM,QAAQ,SAAsJ;EAClK,IAAI,YAAY,SAAS;GACvB,MAAM,SAASA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,sBAAsB,UAAU,CAAC,QAAQ,QAAQ,QAAQ,MAAM,GAAG,YAAY,CAAC;GACxH,OAAO,KAAK,oBAAoB;IAAE,MAAM;IAAQ,IAAI,QAAQ;GAAO,GAAG,MAAM;EAC9E,OAAO,IAAI,YAAY,SAAS;GAC9B,MAAM,SAASA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,sBAAsB,UAAU,CAAC,QAAQ,QAAQ,QAAQ,MAAM,GAAG,YAAY,CAAC;GACxH,OAAO,KAAK,oBAAoB;IAAE,MAAM;IAAQ,IAAI,QAAQ;GAAO,GAAG,MAAM;EAC9E,OAAO;GACL,MAAM,SAASA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,wBAAwB,UAAU,CAAC,QAAQ,kBAAkB,QAAQ,MAAM,GAAG,YAAY,CAAC;GACpI,OAAO,KAAK,oBAAoB;IAAE,MAAM;IAAU,IAAI,QAAQ;GAAiB,GAAG,MAAM;EAC1F;CACF;CAEA,MAAgB,kBAAkB,cAA0C,YAAoB,QAA+B;EAC7H,IAAI,iBAAiB,QACnB,MAAM,KAAK,sBAAsB,QAAQ,CAAC,YAAY,MAAM,CAAC;OACxD,IAAI,iBAAiB,QAC1B,MAAM,KAAK,sBAAsB,QAAQ,CAAC,YAAY,MAAM,CAAC;OAE7D,MAAM,KAAK,wBAAwB,QAAQ,CAAC,YAAY,MAAM,CAAC;CAEnE;CAEA,MAAM,aAAa,SAAwE;EACzF,IAAI,YAAY,SAAS;GACvB,MAAM,WAAWA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,yBAAyB,UAAU;IAAC,QAAQ;IAAQ,QAAQ,UAAU;IAAM,QAAQ,SAAS;GAAI,GAAG,YAAY,CAAC;GAC5J,OAAO,KAAK,8BAA8B,QAAQ;EACpD,OAAO,IAAI,YAAY,SAAS;GAC9B,MAAM,WAAWA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,yBAAyB,UAAU;IAAC,QAAQ;IAAQ,QAAQ,UAAU;IAAM,QAAQ,SAAS;GAAI,GAAG,YAAY,CAAC;GAC5J,OAAO,KAAK,8BAA8B,QAAQ;EACpD;EACA,MAAM,WAAWA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,2BAA2B,UAAU;GAAC,QAAQ;GAAkB,QAAQ,UAAU;GAAM,QAAQ,SAAS;EAAI,GAAG,YAAY,CAAC;EACxK,OAAO,KAAK,8BAA8B,QAAQ;CACpD;CAEA,iBACE,SACkE;EAClE,IAAI,YAAY,SACd,OAAO;GAAE,cAAc;GAAQ,YAAY,QAAQ;EAAO;EAE5D,IAAI,YAAY,SACd,OAAO;GAAE,cAAc;GAAQ,YAAY,QAAQ;EAAO;EAE5D,OAAO;GAAE,cAAc;GAAU,YAAY,QAAQ;EAAiB;CACxE;CAEA,MAAM,aAAa,SAID;EAChB,MAAM,EAAE,cAAc,eAAe,KAAK,iBAAiB,OAAO;EAElE,MAAM,KAAK,WAAW,aAAa;GACjC;GACA;GACA,WAAW,eAAe,UAAU,QAAQ,YAAY,KAAA;GACxD,SAAS,aAAa,UAAU,QAAQ,UAAU,KAAA;GAClD,UAAU,QAAQ;EACpB,CAAC;EAOD,OALc,iBAAiB,SAC3B,KAAK,2BACL,iBAAiB,SACf,KAAK,2BACL,KAAK,2BAAA,CACC,QAAQ;GAAC;GAAY;GAAM;EAAI,CAAC;CAC9C;CAEA,MAAM,kBAAkB,SAIJ;EAClB,MAAM,EAAE,cAAc,eAAe,KAAK,iBAAiB,OAAO;EAElE,MAAM,oBAAoB,eAAe,UAAU,QAAQ,YAAY,QAAQ;EAC/E,OAAO,MAAM,KAAK,WAAW,kBAAkB,cAAc,YAAY,mBAAmB,MAAM,QAAQ,WAAW,QAAQ;CAC/H;CAEA,MAAM,WAAW,MAAoD;EACnE,MAAM,OAAO,MAAM,KAAK,WAAW,kBAAA,GAAA,qBAAA,8BAAA,CAA+C,IAAI,CAAC;EACvF,MAAM,KAAK,iBAAiB,QAAQ,CAAC,KAAK,EAAE,CAAC;EAC7C,MAAM,KAAK,kBAAkB,mBAAmB,IAAI;EACpD,OAAO,KAAK,oBAAoB,IAAI;CACtC;CAEA,MAAM,UAAU,SAAyF;EACvG,MAAM,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,kBAAkB,UAAU;GAAC,KAAA;GAAW,SAAS;GAAS,SAAS;GAAM,SAAS;GAAQ,SAAS;GAAO,SAAS;EAAK,GAAY,YAAY,CAAC;EACxL,MAAM,QAAa,KAAK,MAAM,KAAK,MAAM,KAAK,oBAAoB,CAAC,CAAC;EACpE,MAAM,aAAa,KAAK,YAAY,eAAe;EACnD,OAAO;CACT;CAGA,MAAM,0BAA0B,QAAgB,SAAwF;EACtI,MAAM,YAAY,SAAS,aAAa;EAExC,OADaA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,qCAAqC,UAAU,CAAC,QAAQ,SAAS,GAAY,YAAY,CACtH,CAAC,CAAC,KAAK,OAAO;GAAE,QAAQ,EAAE;GAAS,cAAc,EAAE;EAAG,EAAE;CACpE;CAKA,MAAM,QAAQ,SAAmE;EAC/E,IAAI,OAAO,YAAY,YAAY,YAAY,SAC7C,OAAO,MAAM,KAAK,iBAAiB,QAAQ,MAAM;OAC5C;GACL,MAAM,SAAS;GACf,IAAI,UAAU,MACZ,OAAO;GAET,MAAM,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,iBAAiB,UAAU,CAAC,MAAM,GAAG,YAAY,CAAC;GACzF,OAAO,QAAQ,OAAO,OAAO,KAAK,oBAAoB,IAAI;EAC5D;CACF;CAGA,4BAAsC,IAA4B;EAChE,MAAM,mBAAmB,YAAgC;GACvD,IAAI,OAAO,QAAQ,WAAW,UAAU,MAAM,IAAI,MAAM,kCAAkC,OAAO,QAAQ,MAAM;EACjH;EACA,OAAO;GACL;GACA,UAAU,OAAO,KAAK,OAAO,YAAY;IACvC,gBAAgB,OAAO;IACvB,MAAM,KAAK,WAAW,uBAAuB,QAAQ,QAAQ,IAAI,KAAK,KAAK;GAC7E;GACA,UAAU,OAAO,KAAK,YAAY;IAChC,gBAAgB,OAAO;IACvB,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,gCAAgC,UAAU;KAAC;KAAI;KAAK,QAAQ;IAAM,GAAG,YAAY,CAAC;GACrH;EACF;CACF;CAEA,MAAM,kBAAkB,IAAqC;EAC3D,OAAO,KAAK,4BAA4B,EAAE;CAC5C;CAGA,MAAM,UAAU,SAA0C;EACxD,MAAM,KAAK,WAAW,UAAU,OAAO;EACvC,MAAM,KAAK,wBAAwB,QAAQ,CAAC,CAAC;CAC/C;CAEA,MAAM,wBAAoD;EACxD,OAAOA,oCAAAA,OAAO,QAAQ,MAAM,KAAK,wBAAwB,UAAU,CAAC,GAAG,YAAY,CAAC;CACtF;CAGA,MAAM,6BAA4C;EAChD,MAAM,KAAK,WAAW,2BAA2B;EAEjD,MAAM,KAAK,wBAAwB,QAAQ,CAAC,CAAC;CAC/C;CAEA,MAAM,eAAe,SAAiE;EACpF,OAAO,MAAM,KAAK,WAAW,eAAe,OAAO;CACrD;CAEA,MAAM,mBAAmB,SAAwE;EAC/F,MAAM,WAAW,MAAM,KAAK,WAAW,mBAAmB;GACxD,QAAQ,SAAS;GACjB,OAAO,SAAS;GAChB,UAAU,SAAS;GACnB,UAAU,SAAS;GACnB,iBAAiB,SAAS;GAC1B,iBAAiB,SAAS;GAC1B,2BAA2B,SAAS;GACpC,yBAAyB,SAAS;GAClC,iBAAiB,SAAS;EAC5B,CAAC;EAgBD,OAAO;GACL,OAfkC,SAAS,MAAM,KAAK,OAAO;IAC7D,IAAI,EAAE;IACN,gBAAgB,EAAE;IAClB,aAAa;KACX,IAAI,EAAE,aAAa;KACnB,aAAa,EAAE,aAAa;KAC5B,cAAc,EAAE,aAAa;IAC/B;IACA,WAAW,IAAI,KAAK,EAAE,iBAAiB;IACvC,aAAa,IAAI,KAAK,EAAE,oBAAoB;IAC5C,YAAY,EAAE;IACd,YAAY,EAAE;GAChB,EAGM;GACJ,YAAY,SAAS,WAAW;EAClC;CACF;CAEA,MAAM,iBAAiB,iBAAsD;EAC3E,MAAM,WAAW,MAAM,KAAK,WAAW,iBAAiB,eAAe;EACvE,OAAO;GACL,IAAI,SAAS;GACb,gBAAgB,SAAS;GACzB,aAAa;IACX,IAAI,SAAS,aAAa;IAC1B,aAAa,SAAS,aAAa;IACnC,cAAc,SAAS,aAAa;GACtC;GACA,WAAW,IAAI,KAAK,SAAS,iBAAiB;GAC9C,aAAa,IAAI,KAAK,SAAS,oBAAoB;GACnD,YAAY,SAAS;GACrB,YAAY,SAAS;EACvB;CACF;CAEA,MAAM,wBAAwB,iBAAyB,SAAkF;EACvI,MAAM,WAAW,MAAM,KAAK,WAAW,wBAAwB,iBAAiB;GAC9E,QAAQ,SAAS;GACjB,OAAO,SAAS;EAClB,CAAC;EAcD,OAAO;GACL,OAbuC,SAAS,MAAM,KAAK,OAAO;IAClE,IAAI,EAAE;IACN,SAAS,EAAE;IACX,wBAAwB,EAAE;IAC1B,kBAAkB,EAAE;IACpB,YAAY,EAAE;IACd,YAAY,EAAE;IACd,cAAc,IAAI,KAAK,EAAE,qBAAqB;IAC9C,aAAa,IAAI,KAAK,EAAE,oBAAoB;IAC5C,WAAW,IAAI,KAAK,EAAE,iBAAiB;GACzC,EAGM;GACJ,YAAY,SAAS,WAAW;EAClC;CACF;CAEA,MAAM,4BAA4B,iBAAyB,SAAoE;EAC7H,OAAO,MAAM,KAAK,WAAW,4BAA4B,iBAAiB,OAAO;CACnF;CAEA,MAAM,uBAAuB,iBAAyB,SAAsF;EAC1I,MAAM,WAAW,MAAM,KAAK,WAAW,uBAAuB,iBAAiB,OAAO;EACtF,OAAO;GACL,QAAQ,SAAS,OAAO,KAAK,OAAO;IAClC,IAAI,EAAE;IACN,SAAS,EAAE;IACX,wBAAwB,EAAE;IAC1B,YAAY,EAAE;IACd,YAAY,EAAE;IACd,cAAc,IAAI,KAAK,EAAE,qBAAqB;IAC9C,aAAa,IAAI,KAAK,EAAE,oBAAoB;IAC5C,WAAW,IAAI,KAAK,EAAE,iBAAiB;GACzC,EAAE;GACF,aAAa,SAAS,aAAa,KAAK,QAAQ;IAC9C,SAAS,GAAG;IACZ,QAAQ,GAAG;GACb,EAAE;EACJ;CACF;CAEA,MAAyB,gBAAgB,SAA0B;EACjE,MAAM,QAAQ,IAAI,CAChB,MAAM,aAAa,OAAO,GAC1B,KAAK,wBAAwB,QAAQ,CAAC,OAAO,CAAC,CAChD,CAAC;CACH;CAEA,MAAyB,gBAAgB;EACvC,MAAM,QAAQ,IAAI;GAChB,MAAM,cAAc;GACpB,KAAK,iBAAiB,mBAAmB,IAAI;GAC7C,KAAK,kBAAkB,mBAAmB,IAAI;GAC9C,KAAK,4BAA4B,mBAAmB,IAAI;GACxD,KAAK,2BAA2B,mBAAmB,IAAI;GACvD,KAAK,kCAAkC,mBAAmB,IAAI;EAChE,CAAC;CACH;CAEA,MAAM,oBAAoB,SAO4F;EACpH,IAAI;GACF,MAAM,OAAO,MAAM,KAAK,WAAW,0BAA0B;IAC3D,SAAS,QAAQ;IACjB,oBAAoB,QAAQ;IAC5B,YAAY,QAAQ;IACpB,OAAO,QAAQ;IACf,eAAe,QAAQ;IACvB,0BAA0B,QAAQ;GACpC,CAAC;GAED,MAAM,QAAQ,IAAI,CAChB,KAAK,2BAA2B,QAAQ,CAAC,QAAQ,MAAM,CAAC,GACxD,KAAK,kCAAkC,QAAQ,CAAC,QAAQ,MAAM,CAAC,CACjE,CAAC;GACD,OAAOA,oCAAAA,OAAO,GAAG,KAAK,6BAA6B,IAAI,CAAC;EAC1D,SAAS,OAAO;GACd,IAAIC,iBAAAA,YAAY,2CAA2C,WAAW,KAAK,GACzE,OAAOD,oCAAAA,OAAO,MAAM,KAAK;GAE3B,MAAM;EACR;CACF;AACF"}

package/dist/lib/hexclave-app/apps/index.d.ts

@@ -1,2 +1,2 @@
-import { B as StackServerAppConstructor, D as HexclaveAdminApp, F as StackAdminAppConstructorOptions, I as HexclaveServerApp, L as HexclaveServerAppConstructor, N as StackAdminApp, O as HexclaveAdminAppConstructor, P as StackAdminAppConstructor, R as HexclaveServerAppConstructorOptions, V as StackServerAppConstructorOptions, a as StackClientApp, c as StackClientAppJson, i as HexclaveClientAppJson, k as HexclaveAdminAppConstructorOptions, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, r as HexclaveClientAppConstructorOptions, s as StackClientAppConstructorOptions, t as HexclaveClientApp, z as StackServerApp } from "../../../client-app-CdAaCL3p.js";
+import { B as StackServerAppConstructor, D as HexclaveAdminApp, F as StackAdminAppConstructorOptions, I as HexclaveServerApp, L as HexclaveServerAppConstructor, N as StackAdminApp, O as HexclaveAdminAppConstructor, P as StackAdminAppConstructor, R as HexclaveServerAppConstructorOptions, V as StackServerAppConstructorOptions, a as StackClientApp, c as StackClientAppJson, i as HexclaveClientAppJson, k as HexclaveAdminAppConstructorOptions, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, r as HexclaveClientAppConstructorOptions, s as StackClientAppConstructorOptions, t as HexclaveClientApp, z as StackServerApp } from "../../../client-app-Cri37vaC.js";
 export { HexclaveAdminApp, type HexclaveAdminAppConstructor, type HexclaveAdminAppConstructorOptions, HexclaveClientApp, type HexclaveClientAppConstructor, type HexclaveClientAppConstructorOptions, type HexclaveClientAppJson, HexclaveServerApp, type HexclaveServerAppConstructor, type HexclaveServerAppConstructorOptions, StackAdminApp, type StackAdminAppConstructor, type StackAdminAppConstructorOptions, StackClientApp, type StackClientAppConstructor, type StackClientAppConstructorOptions, type StackClientAppJson, StackServerApp, type StackServerAppConstructor, type StackServerAppConstructorOptions };

package/dist/lib/hexclave-app/apps/interfaces/admin-app.d.ts

@@ -1,4 +1,3 @@
 import { a as AdminWorkflowRunState, c as AdminWorkflowStepAttempt, d as AdminWorkflowUpgradeResult, f as AdminWorkflowVersion, i as AdminWorkflowRunDetails, l as AdminWorkflowSyncResult, n as AdminWorkflowDivergenceDiagnostic, o as AdminWorkflowRunsFilter, r as AdminWorkflowRun, s as AdminWorkflowStep, t as AdminWorkflow, u as AdminWorkflowTrigger } from "../../../../workflows-2-MBWbGl.js";
-import { A as ManagedEmailProviderListItem, D as HexclaveAdminApp, E as EmailOutboxUpdateOptions, F as StackAdminAppConstructorOptions, M as ManagedEmailProviderStatus, N as StackAdminApp, O as HexclaveAdminAppConstructor, P as StackAdminAppConstructor, T as EmailOutboxListResult, j as ManagedEmailProviderSetupResult, k as HexclaveAdminAppConstructorOptions, w as EmailOutboxListOptions } from "../../../../client-app-CdAaCL3p.js";
-import { a as ListSessionReplaysOptions, i as ListSessionReplayChunksResult, n as AdminSessionReplayChunk, o as ListSessionReplaysResult, r as ListSessionReplayChunksOptions, s as SessionReplayAllEventsResult, t as AdminSessionReplay } from "../../../../index-Cf1wOohp.js";
-export { type AdminSessionReplay, type AdminSessionReplayChunk, type AdminWorkflow, type AdminWorkflowDivergenceDiagnostic, type AdminWorkflowRun, type AdminWorkflowRunDetails, type AdminWorkflowRunState, type AdminWorkflowRunsFilter, type AdminWorkflowStep, type AdminWorkflowStepAttempt, type AdminWorkflowSyncResult, type AdminWorkflowTrigger, type AdminWorkflowUpgradeResult, type AdminWorkflowVersion, EmailOutboxListOptions, EmailOutboxListResult, EmailOutboxUpdateOptions, HexclaveAdminApp, HexclaveAdminAppConstructor, HexclaveAdminAppConstructorOptions, type ListSessionReplayChunksOptions, type ListSessionReplayChunksResult, type ListSessionReplaysOptions, type ListSessionReplaysResult, ManagedEmailProviderListItem, ManagedEmailProviderSetupResult, ManagedEmailProviderStatus, type SessionReplayAllEventsResult, StackAdminApp, StackAdminAppConstructor, StackAdminAppConstructorOptions };
+import { A as ManagedEmailProviderListItem, D as HexclaveAdminApp, E as EmailOutboxUpdateOptions, F as StackAdminAppConstructorOptions, M as ManagedEmailProviderStatus, N as StackAdminApp, O as HexclaveAdminAppConstructor, P as StackAdminAppConstructor, T as EmailOutboxListResult, j as ManagedEmailProviderSetupResult, k as HexclaveAdminAppConstructorOptions, w as EmailOutboxListOptions } from "../../../../client-app-Cri37vaC.js";
+export { type AdminWorkflow, type AdminWorkflowDivergenceDiagnostic, type AdminWorkflowRun, type AdminWorkflowRunDetails, type AdminWorkflowRunState, type AdminWorkflowRunsFilter, type AdminWorkflowStep, type AdminWorkflowStepAttempt, type AdminWorkflowSyncResult, type AdminWorkflowTrigger, type AdminWorkflowUpgradeResult, type AdminWorkflowVersion, EmailOutboxListOptions, EmailOutboxListResult, EmailOutboxUpdateOptions, HexclaveAdminApp, HexclaveAdminAppConstructor, HexclaveAdminAppConstructorOptions, ManagedEmailProviderListItem, ManagedEmailProviderSetupResult, ManagedEmailProviderStatus, StackAdminApp, StackAdminAppConstructor, StackAdminAppConstructorOptions };

package/dist/lib/hexclave-app/apps/interfaces/admin-app.js.map

@@ -1 +1 @@
-{"version":3,"file":"admin-app.js","names":["_HexclaveAdminAppImpl"],"sources":["../../../../../src/lib/hexclave-app/apps/interfaces/admin-app.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport type { AnalyticsClickmapOptions, AnalyticsClickmapResponse, AnalyticsClickmapTokenResponse } from \"@hexclave/shared/dist/interface/admin-metrics\";\nimport type { AdminGetSessionReplayChunkEventsResponse, AdminGetSessionReplayAllEventsResponse } from \"@hexclave/shared/dist/interface/crud/session-replays\";\nimport type { Transaction, TransactionType } from \"@hexclave/shared/dist/interface/crud/transactions\";\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport type { MoneyAmount } from \"@hexclave/shared/dist/utils/currency-constants\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { AsyncStoreProperty, EmailConfig } from \"../../common\";\nimport { AdminEmailOutbox, AdminSentEmail } from \"../../email\";\nimport { InternalApiKey, InternalApiKeyCreateOptions, InternalApiKeyFirstView } from \"../../internal-api-keys\";\nimport { AdminProjectPermission, AdminProjectPermissionDefinition, AdminProjectPermissionDefinitionCreateOptions, AdminProjectPermissionDefinitionUpdateOptions, AdminTeamPermission, AdminTeamPermissionDefinition, AdminTeamPermissionDefinitionCreateOptions, AdminTeamPermissionDefinitionUpdateOptions } from \"../../permissions\";\nimport type { PlanUsage } from \"../../plan-usage\";\nimport { AdminProject } from \"../../projects\";\nimport type { AdminWorkflow, AdminWorkflowRun, AdminWorkflowRunDetails, AdminWorkflowRunsFilter, AdminWorkflowSyncResult, AdminWorkflowUpgradeResult, AdminWorkflowVersion } from \"../../workflows\";\nimport { _HexclaveAdminAppImpl } from \"../implementations\";\nimport { StackServerApp, StackServerAppConstructorOptions } from \"./server-app\";\n\nexport type EmailOutboxListOptions = {\n  status?: string,\n  simpleStatus?: string,\n  userId?: string,\n  limit?: number,\n  cursor?: string,\n};\n\nexport type EmailOutboxListResult = {\n  items: AdminEmailOutbox[],\n  nextCursor: string | null,\n};\n\nexport type EmailOutboxUpdateOptions = {\n  isPaused?: boolean,\n  scheduledAtMillis?: number,\n  cancel?: boolean,\n  tsxSource?: string,\n  themeId?: string | null,\n};\n\nexport type ManagedEmailProviderSetupResult = {\n  domainId: string,\n  subdomain: string,\n  senderLocalPart: string,\n  nameServerRecords: string[],\n  status: ManagedEmailProviderStatus[\"status\"],\n};\n\nexport type ManagedEmailProviderStatus = {\n  status: \"pending_dns\" | \"pending_verification\" | \"verified\" | \"applied\" | \"failed\",\n};\n\nexport type ManagedEmailProviderListItem = {\n  domainId: string,\n  subdomain: string,\n  senderLocalPart: string,\n  status: ManagedEmailProviderStatus[\"status\"],\n  nameServerRecords: string[],\n};\n\nimport type { AdminSessionReplay, ListSessionReplayChunksOptions, ListSessionReplayChunksResult, ListSessionReplaysOptions, ListSessionReplaysResult, SessionReplayAllEventsResult } from \"../../session-replays\";\nexport type { AdminSessionReplay, AdminSessionReplayChunk, ListSessionReplaysOptions, ListSessionReplaysResult, ListSessionReplayChunksOptions, ListSessionReplayChunksResult, SessionReplayAllEventsResult } from \"../../session-replays\";\nexport type { AdminWorkflow, AdminWorkflowDivergenceDiagnostic, AdminWorkflowRun, AdminWorkflowRunDetails, AdminWorkflowRunsFilter, AdminWorkflowRunState, AdminWorkflowStep, AdminWorkflowStepAttempt, AdminWorkflowSyncResult, AdminWorkflowTrigger, AdminWorkflowUpgradeResult, AdminWorkflowVersion } from \"../../workflows\";\n\n\n/** @deprecated Use `HexclaveAdminAppConstructorOptions` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackAdminAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = (\n  & StackServerAppConstructorOptions<HasTokenStore, ProjectId>\n  & {\n    superSecretAdminKey?: string,\n    projectOwnerSession?: InternalSession | (() => Promise<string | null>),\n  }\n);\n\n\n/** @deprecated Use `HexclaveAdminApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackAdminApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = (\n  & AsyncStoreProperty<\"project\", [], AdminProject, false>\n  & AsyncStoreProperty<\"planUsage\", [], PlanUsage, false>\n  & AsyncStoreProperty<\"internalApiKeys\", [], InternalApiKey[], true>\n  & AsyncStoreProperty<\"teamPermissionDefinitions\", [], AdminTeamPermissionDefinition[], true>\n  & AsyncStoreProperty<\"projectPermissionDefinitions\", [], AdminProjectPermissionDefinition[], true>\n  & AsyncStoreProperty<\"emailThemes\", [], { id: string, displayName: string }[], true>\n  & AsyncStoreProperty<\"emailPreview\", [{ themeId?: string | null | false, themeTsxSource?: string, templateId?: string, templateTsxSource?: string }], string, false>\n  & AsyncStoreProperty<\"emailTemplates\", [], { id: string, displayName: string, themeId?: string, tsxSource: string }[], true>\n  & AsyncStoreProperty<\"emailDrafts\", [], { id: string, displayName: string, themeId: string | undefined | false, tsxSource: string, sentAt: Date | null }[], true>\n  & AsyncStoreProperty<\"workflows\", [], AdminWorkflow[], true>\n  & AsyncStoreProperty<\"stripeAccountInfo\", [], { account_id: string, charges_enabled: boolean, details_submitted: boolean, payouts_enabled: boolean } | null, false>\n  & AsyncStoreProperty<\n    \"transactions\",\n    [{\n      cursor?: string,\n      limit?: number,\n      type?: TransactionType,\n      customerType?: 'user' | 'team' | 'custom',\n      customerId?: string,\n    }],\n    { transactions: Transaction[], nextCursor: string | null },\n    true\n  >\n  & {\n    createInternalApiKey(options: InternalApiKeyCreateOptions): Promise<InternalApiKeyFirstView>,\n\n    createTeamPermissionDefinition(data: AdminTeamPermissionDefinitionCreateOptions): Promise<AdminTeamPermission>,\n    updateTeamPermissionDefinition(permissionId: string, data: AdminTeamPermissionDefinitionUpdateOptions): Promise<void>,\n    deleteTeamPermissionDefinition(permissionId: string): Promise<void>,\n    /**\n     * @param options.query Free-text search; matches against permission ID and description.\n     */\n    listTeamPermissionDefinitionsPaginated(options: { limit: number, cursor?: string, query?: string }): Promise<{ items: AdminTeamPermissionDefinition[], nextCursor: string | null }>,\n\n    createProjectPermissionDefinition(data: AdminProjectPermissionDefinitionCreateOptions): Promise<AdminProjectPermission>,\n    updateProjectPermissionDefinition(permissionId: string, data: AdminProjectPermissionDefinitionUpdateOptions): Promise<void>,\n    deleteProjectPermissionDefinition(permissionId: string): Promise<void>,\n\n\n    sendTestEmail(options: {\n      recipientEmail: string,\n      emailConfig: EmailConfig,\n    }): Promise<Result<undefined, { errorMessage: string }>>,\n\n    sendTestWebhook(options: { endpointId: string }): Promise<Result<undefined, { errorMessage: string }>>,\n\n    sendSignInInvitationEmail(email: string, callbackUrl: string): Promise<void>,\n\n    listSentEmails(): Promise<AdminSentEmail[]>,\n    setupManagedEmailProvider(options: { subdomain: string, senderLocalPart: string }): Promise<ManagedEmailProviderSetupResult>,\n    checkManagedEmailStatus(options: { domainId: string, subdomain: string, senderLocalPart: string }): Promise<ManagedEmailProviderStatus>,\n    listManagedEmailDomains(): Promise<ManagedEmailProviderListItem[]>,\n    applyManagedEmailProvider(options: { domainId: string }): Promise<{ status: \"applied\" }>,\n    deleteManagedEmailDomain(options: { resendDomainId: string }): Promise<{ status: \"deleted\" }>,\n\n    createEmailTheme(displayName: string): Promise<{ id: string }>,\n    updateEmailTheme(id: string, tsxSource: string): Promise<void>,\n    deleteEmailTheme(id: string): Promise<void>,\n    saveChatMessage(threadId: string, message: any): Promise<void>,\n    listChatMessages(threadId: string): Promise<{ messages: Array<any> }>,\n    rewriteTemplateSourceWithAI(templateTsxSource: string): Promise<{ tsxSource: string }>,\n    updateEmailTemplate(id: string, tsxSource: string, themeId: string | null | false): Promise<{ renderedHtml: string }>,\n    createEmailTemplate(displayName: string): Promise<{ id: string }>,\n    deleteEmailTemplate(id: string): Promise<void>,\n\n    // Workflows (internal-project gated; see the Workflows v1 spec). The\n    // management verbs live on the admin app only in v1.\n    createWorkflow(options: { id: string, displayName?: string, source: string }): Promise<AdminWorkflowSyncResult>,\n    updateWorkflowSource(workflowId: string, source: string): Promise<AdminWorkflowSyncResult>,\n    deleteWorkflow(workflowId: string): Promise<void>,\n    /** Pauses/resumes run creation. In-flight runs are unaffected. */\n    setWorkflowPaused(workflowId: string, isPaused: boolean): Promise<void>,\n    listWorkflowVersions(workflowId: string): Promise<AdminWorkflowVersion[]>,\n    listWorkflowRuns: {\n      (workflowId: string, filter: AdminWorkflowRunsFilter & { includeState: true }): Promise<{ runs: AdminWorkflowRunDetails[], nextCursor: string | null }>,\n      (workflowId: string, filter?: AdminWorkflowRunsFilter): Promise<{ runs: AdminWorkflowRun[], nextCursor: string | null }>,\n    },\n    getWorkflowRun(runId: string): Promise<AdminWorkflowRunDetails>,\n    cancelWorkflowRuns(workflowId: string, filter?: { runKey?: string, runId?: string, state?: \"queued\" | \"running\" | \"sleeping\", version?: number }): Promise<{ canceledCount: number }>,\n    upgradeWorkflowRuns(workflowId: string, options: { toVersion: number, runKey?: string, fromVersion?: number }): Promise<AdminWorkflowUpgradeResult>,\n    retryWorkflowRun(runId: string): Promise<void>,\n    sendWorkflowEvent(name: string, data?: unknown): Promise<{ eventId: string }>,\n\n    setupPayments(): Promise<{ url: string }>,\n    createStripeWidgetAccountSession(): Promise<{ client_secret: string }>,\n    getPaymentMethodConfigs(): Promise<{ configId: string, methods: Array<{ id: string, name: string, enabled: boolean, available: boolean, overridable: boolean }> } | null>,\n    updatePaymentMethodConfigs(configId: string, updates: Record<string, 'on' | 'off'>): Promise<void>,\n    createEmailDraft(options: { displayName: string, themeId?: string | undefined | false, tsxSource?: string }): Promise<{ id: string }>,\n    updateEmailDraft(id: string, data: { displayName?: string, themeId?: string | undefined | false, tsxSource?: string }): Promise<void>,\n    deleteEmailDraft(id: string): Promise<void>,\n    refreshEmailDrafts(): Promise<void>,\n    createItemQuantityChange(options: (\n      { userId: string, itemId: string, quantity: number, expiresAt?: string, description?: string } |\n      { teamId: string, itemId: string, quantity: number, expiresAt?: string, description?: string } |\n      { customCustomerId: string, itemId: string, quantity: number, expiresAt?: string, description?: string }\n    )): Promise<void>,\n    refundTransaction(options: {\n      type: \"subscription\" | \"one-time-purchase\",\n      id: string,\n      invoiceId?: string,\n      amountUsd: MoneyAmount,\n      endAction?: \"now\" | \"at-period-end\",\n    }): Promise<{ refundTransactionId: string }>,\n    getAnalyticsClickmap(options: AnalyticsClickmapOptions): Promise<AnalyticsClickmapResponse>,\n    createAnalyticsClickmapToken(options: { origin: string }): Promise<AnalyticsClickmapTokenResponse>,\n\n    listSessionReplays(options?: ListSessionReplaysOptions): Promise<ListSessionReplaysResult>,\n    getSessionReplay(sessionReplayId: string): Promise<AdminSessionReplay>,\n    listSessionReplayChunks(sessionReplayId: string, options?: ListSessionReplayChunksOptions): Promise<ListSessionReplayChunksResult>,\n    getSessionReplayChunkEvents(sessionReplayId: string, chunkId: string): Promise<AdminGetSessionReplayChunkEventsResponse>,\n    getSessionReplayEvents(sessionReplayId: string, options?: { offset?: number, limit?: number }): Promise<SessionReplayAllEventsResult>,\n\n    // Email Outbox methods\n    listOutboxEmails(options?: EmailOutboxListOptions): Promise<EmailOutboxListResult>,\n    getOutboxEmail(id: string): Promise<AdminEmailOutbox>,\n    updateOutboxEmail(id: string, options: EmailOutboxUpdateOptions): Promise<AdminEmailOutbox>,\n    pauseOutboxEmail(id: string): Promise<AdminEmailOutbox>,\n    unpauseOutboxEmail(id: string): Promise<AdminEmailOutbox>,\n    cancelOutboxEmail(id: string): Promise<AdminEmailOutbox>,\n  }\n  & StackServerApp<HasTokenStore, ProjectId>\n);\n/** @deprecated Use `HexclaveAdminAppConstructor` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackAdminAppConstructor = {\n  new <\n    HasTokenStore extends boolean,\n    ProjectId extends string\n  >(options: StackAdminAppConstructorOptions<HasTokenStore, ProjectId>): StackAdminApp<HasTokenStore, ProjectId>,\n  new(options: StackAdminAppConstructorOptions<boolean, string>): StackAdminApp<boolean, string>,\n};\nexport type HexclaveAdminAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = StackAdminAppConstructorOptions<HasTokenStore, ProjectId>;\nexport type HexclaveAdminApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = StackAdminApp<HasTokenStore, ProjectId>;\nexport type HexclaveAdminAppConstructor = StackAdminAppConstructor;\nexport const HexclaveAdminApp: HexclaveAdminAppConstructor = _HexclaveAdminAppImpl;\n/** @deprecated Use `HexclaveAdminApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport const StackAdminApp: StackAdminAppConstructor = HexclaveAdminApp;\n"],"mappings":";;AAmNA,MAAa,wDAAgDA,CAAAA,CAAAA;;AAE7D,MAAa,gBAA0C"}
+{"version":3,"file":"admin-app.js","names":["_HexclaveAdminAppImpl"],"sources":["../../../../../src/lib/hexclave-app/apps/interfaces/admin-app.ts"],"sourcesContent":["\n//===========================================\n// THIS FILE IS AUTO-GENERATED FROM TEMPLATE. DO NOT EDIT IT DIRECTLY UNLESS YOU ALSO EDIT THE CORRESPONDING FILE IN packages/template\n//===========================================\nimport type { AnalyticsClickmapOptions, AnalyticsClickmapResponse, AnalyticsClickmapTokenResponse } from \"@hexclave/shared/dist/interface/admin-metrics\";\nimport type { Transaction, TransactionType } from \"@hexclave/shared/dist/interface/crud/transactions\";\nimport { InternalSession } from \"@hexclave/shared/dist/sessions\";\nimport type { MoneyAmount } from \"@hexclave/shared/dist/utils/currency-constants\";\nimport { Result } from \"@hexclave/shared/dist/utils/results\";\nimport { AsyncStoreProperty, EmailConfig } from \"../../common\";\nimport { AdminEmailOutbox, AdminSentEmail } from \"../../email\";\nimport { InternalApiKey, InternalApiKeyCreateOptions, InternalApiKeyFirstView } from \"../../internal-api-keys\";\nimport { AdminProjectPermission, AdminProjectPermissionDefinition, AdminProjectPermissionDefinitionCreateOptions, AdminProjectPermissionDefinitionUpdateOptions, AdminTeamPermission, AdminTeamPermissionDefinition, AdminTeamPermissionDefinitionCreateOptions, AdminTeamPermissionDefinitionUpdateOptions } from \"../../permissions\";\nimport type { PlanUsage } from \"../../plan-usage\";\nimport { AdminProject } from \"../../projects\";\nimport type { AdminWorkflow, AdminWorkflowRun, AdminWorkflowRunDetails, AdminWorkflowRunsFilter, AdminWorkflowSyncResult, AdminWorkflowUpgradeResult, AdminWorkflowVersion } from \"../../workflows\";\nimport { _HexclaveAdminAppImpl } from \"../implementations\";\nimport { StackServerApp, StackServerAppConstructorOptions } from \"./server-app\";\n\nexport type EmailOutboxListOptions = {\n  status?: string,\n  simpleStatus?: string,\n  userId?: string,\n  limit?: number,\n  cursor?: string,\n};\n\nexport type EmailOutboxListResult = {\n  items: AdminEmailOutbox[],\n  nextCursor: string | null,\n};\n\nexport type EmailOutboxUpdateOptions = {\n  isPaused?: boolean,\n  scheduledAtMillis?: number,\n  cancel?: boolean,\n  tsxSource?: string,\n  themeId?: string | null,\n};\n\nexport type ManagedEmailProviderSetupResult = {\n  domainId: string,\n  subdomain: string,\n  senderLocalPart: string,\n  nameServerRecords: string[],\n  status: ManagedEmailProviderStatus[\"status\"],\n};\n\nexport type ManagedEmailProviderStatus = {\n  status: \"pending_dns\" | \"pending_verification\" | \"verified\" | \"applied\" | \"failed\",\n};\n\nexport type ManagedEmailProviderListItem = {\n  domainId: string,\n  subdomain: string,\n  senderLocalPart: string,\n  status: ManagedEmailProviderStatus[\"status\"],\n  nameServerRecords: string[],\n};\n\nexport type { AdminWorkflow, AdminWorkflowDivergenceDiagnostic, AdminWorkflowRun, AdminWorkflowRunDetails, AdminWorkflowRunsFilter, AdminWorkflowRunState, AdminWorkflowStep, AdminWorkflowStepAttempt, AdminWorkflowSyncResult, AdminWorkflowTrigger, AdminWorkflowUpgradeResult, AdminWorkflowVersion } from \"../../workflows\";\n\n\n/** @deprecated Use `HexclaveAdminAppConstructorOptions` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackAdminAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = (\n  & StackServerAppConstructorOptions<HasTokenStore, ProjectId>\n  & {\n    superSecretAdminKey?: string,\n    projectOwnerSession?: InternalSession | (() => Promise<string | null>),\n  }\n);\n\n\n/** @deprecated Use `HexclaveAdminApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackAdminApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = (\n  & AsyncStoreProperty<\"project\", [], AdminProject, false>\n  & AsyncStoreProperty<\"planUsage\", [], PlanUsage, false>\n  & AsyncStoreProperty<\"internalApiKeys\", [], InternalApiKey[], true>\n  & AsyncStoreProperty<\"teamPermissionDefinitions\", [], AdminTeamPermissionDefinition[], true>\n  & AsyncStoreProperty<\"projectPermissionDefinitions\", [], AdminProjectPermissionDefinition[], true>\n  & AsyncStoreProperty<\"emailThemes\", [], { id: string, displayName: string }[], true>\n  & AsyncStoreProperty<\"emailPreview\", [{ themeId?: string | null | false, themeTsxSource?: string, templateId?: string, templateTsxSource?: string }], string, false>\n  & AsyncStoreProperty<\"emailTemplates\", [], { id: string, displayName: string, themeId?: string, tsxSource: string }[], true>\n  & AsyncStoreProperty<\"emailDrafts\", [], { id: string, displayName: string, themeId: string | undefined | false, tsxSource: string, sentAt: Date | null }[], true>\n  & AsyncStoreProperty<\"workflows\", [], AdminWorkflow[], true>\n  & AsyncStoreProperty<\"stripeAccountInfo\", [], { account_id: string, charges_enabled: boolean, details_submitted: boolean, payouts_enabled: boolean } | null, false>\n  & AsyncStoreProperty<\n    \"transactions\",\n    [{\n      cursor?: string,\n      limit?: number,\n      type?: TransactionType,\n      customerType?: 'user' | 'team' | 'custom',\n      customerId?: string,\n    }],\n    { transactions: Transaction[], nextCursor: string | null },\n    true\n  >\n  & {\n    createInternalApiKey(options: InternalApiKeyCreateOptions): Promise<InternalApiKeyFirstView>,\n\n    createTeamPermissionDefinition(data: AdminTeamPermissionDefinitionCreateOptions): Promise<AdminTeamPermission>,\n    updateTeamPermissionDefinition(permissionId: string, data: AdminTeamPermissionDefinitionUpdateOptions): Promise<void>,\n    deleteTeamPermissionDefinition(permissionId: string): Promise<void>,\n    /**\n     * @param options.query Free-text search; matches against permission ID and description.\n     */\n    listTeamPermissionDefinitionsPaginated(options: { limit: number, cursor?: string, query?: string }): Promise<{ items: AdminTeamPermissionDefinition[], nextCursor: string | null }>,\n\n    createProjectPermissionDefinition(data: AdminProjectPermissionDefinitionCreateOptions): Promise<AdminProjectPermission>,\n    updateProjectPermissionDefinition(permissionId: string, data: AdminProjectPermissionDefinitionUpdateOptions): Promise<void>,\n    deleteProjectPermissionDefinition(permissionId: string): Promise<void>,\n\n\n    sendTestEmail(options: {\n      recipientEmail: string,\n      emailConfig: EmailConfig,\n    }): Promise<Result<undefined, { errorMessage: string }>>,\n\n    sendTestWebhook(options: { endpointId: string }): Promise<Result<undefined, { errorMessage: string }>>,\n\n    sendSignInInvitationEmail(email: string, callbackUrl: string): Promise<void>,\n\n    listSentEmails(): Promise<AdminSentEmail[]>,\n    setupManagedEmailProvider(options: { subdomain: string, senderLocalPart: string }): Promise<ManagedEmailProviderSetupResult>,\n    checkManagedEmailStatus(options: { domainId: string, subdomain: string, senderLocalPart: string }): Promise<ManagedEmailProviderStatus>,\n    listManagedEmailDomains(): Promise<ManagedEmailProviderListItem[]>,\n    applyManagedEmailProvider(options: { domainId: string }): Promise<{ status: \"applied\" }>,\n    deleteManagedEmailDomain(options: { resendDomainId: string }): Promise<{ status: \"deleted\" }>,\n\n    createEmailTheme(displayName: string): Promise<{ id: string }>,\n    updateEmailTheme(id: string, tsxSource: string): Promise<void>,\n    deleteEmailTheme(id: string): Promise<void>,\n    saveChatMessage(threadId: string, message: any): Promise<void>,\n    listChatMessages(threadId: string): Promise<{ messages: Array<any> }>,\n    rewriteTemplateSourceWithAI(templateTsxSource: string): Promise<{ tsxSource: string }>,\n    updateEmailTemplate(id: string, tsxSource: string, themeId: string | null | false): Promise<{ renderedHtml: string }>,\n    createEmailTemplate(displayName: string): Promise<{ id: string }>,\n    deleteEmailTemplate(id: string): Promise<void>,\n\n    // Workflows (internal-project gated; see the Workflows v1 spec). The\n    // management verbs live on the admin app only in v1.\n    createWorkflow(options: { id: string, displayName?: string, source: string }): Promise<AdminWorkflowSyncResult>,\n    updateWorkflowSource(workflowId: string, source: string): Promise<AdminWorkflowSyncResult>,\n    deleteWorkflow(workflowId: string): Promise<void>,\n    /** Pauses/resumes run creation. In-flight runs are unaffected. */\n    setWorkflowPaused(workflowId: string, isPaused: boolean): Promise<void>,\n    listWorkflowVersions(workflowId: string): Promise<AdminWorkflowVersion[]>,\n    listWorkflowRuns: {\n      (workflowId: string, filter: AdminWorkflowRunsFilter & { includeState: true }): Promise<{ runs: AdminWorkflowRunDetails[], nextCursor: string | null }>,\n      (workflowId: string, filter?: AdminWorkflowRunsFilter): Promise<{ runs: AdminWorkflowRun[], nextCursor: string | null }>,\n    },\n    getWorkflowRun(runId: string): Promise<AdminWorkflowRunDetails>,\n    cancelWorkflowRuns(workflowId: string, filter?: { runKey?: string, runId?: string, state?: \"queued\" | \"running\" | \"sleeping\", version?: number }): Promise<{ canceledCount: number }>,\n    upgradeWorkflowRuns(workflowId: string, options: { toVersion: number, runKey?: string, fromVersion?: number }): Promise<AdminWorkflowUpgradeResult>,\n    retryWorkflowRun(runId: string): Promise<void>,\n    sendWorkflowEvent(name: string, data?: unknown): Promise<{ eventId: string }>,\n\n    setupPayments(): Promise<{ url: string }>,\n    createStripeWidgetAccountSession(): Promise<{ client_secret: string }>,\n    getPaymentMethodConfigs(): Promise<{ configId: string, methods: Array<{ id: string, name: string, enabled: boolean, available: boolean, overridable: boolean }> } | null>,\n    updatePaymentMethodConfigs(configId: string, updates: Record<string, 'on' | 'off'>): Promise<void>,\n    createEmailDraft(options: { displayName: string, themeId?: string | undefined | false, tsxSource?: string }): Promise<{ id: string }>,\n    updateEmailDraft(id: string, data: { displayName?: string, themeId?: string | undefined | false, tsxSource?: string }): Promise<void>,\n    deleteEmailDraft(id: string): Promise<void>,\n    refreshEmailDrafts(): Promise<void>,\n    createItemQuantityChange(options: (\n      { userId: string, itemId: string, quantity: number, expiresAt?: string, description?: string } |\n      { teamId: string, itemId: string, quantity: number, expiresAt?: string, description?: string } |\n      { customCustomerId: string, itemId: string, quantity: number, expiresAt?: string, description?: string }\n    )): Promise<void>,\n    refundTransaction(options: {\n      type: \"subscription\" | \"one-time-purchase\",\n      id: string,\n      invoiceId?: string,\n      amountUsd: MoneyAmount,\n      endAction?: \"now\" | \"at-period-end\",\n    }): Promise<{ refundTransactionId: string }>,\n    getAnalyticsClickmap(options: AnalyticsClickmapOptions): Promise<AnalyticsClickmapResponse>,\n    createAnalyticsClickmapToken(options: { origin: string }): Promise<AnalyticsClickmapTokenResponse>,\n\n    // Email Outbox methods\n    listOutboxEmails(options?: EmailOutboxListOptions): Promise<EmailOutboxListResult>,\n    getOutboxEmail(id: string): Promise<AdminEmailOutbox>,\n    updateOutboxEmail(id: string, options: EmailOutboxUpdateOptions): Promise<AdminEmailOutbox>,\n    pauseOutboxEmail(id: string): Promise<AdminEmailOutbox>,\n    unpauseOutboxEmail(id: string): Promise<AdminEmailOutbox>,\n    cancelOutboxEmail(id: string): Promise<AdminEmailOutbox>,\n  }\n  & StackServerApp<HasTokenStore, ProjectId>\n);\n/** @deprecated Use `HexclaveAdminAppConstructor` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport type StackAdminAppConstructor = {\n  new <\n    HasTokenStore extends boolean,\n    ProjectId extends string\n  >(options: StackAdminAppConstructorOptions<HasTokenStore, ProjectId>): StackAdminApp<HasTokenStore, ProjectId>,\n  new(options: StackAdminAppConstructorOptions<boolean, string>): StackAdminApp<boolean, string>,\n};\nexport type HexclaveAdminAppConstructorOptions<HasTokenStore extends boolean, ProjectId extends string> = StackAdminAppConstructorOptions<HasTokenStore, ProjectId>;\nexport type HexclaveAdminApp<HasTokenStore extends boolean = boolean, ProjectId extends string = string> = StackAdminApp<HasTokenStore, ProjectId>;\nexport type HexclaveAdminAppConstructor = StackAdminAppConstructor;\nexport const HexclaveAdminApp: HexclaveAdminAppConstructor = _HexclaveAdminAppImpl;\n/** @deprecated Use `HexclaveAdminApp` from the `@hexclave/*` package instead — same symbol, new brand name. See https://docs.hexclave.com/migration. */\nexport const StackAdminApp: StackAdminAppConstructor = HexclaveAdminApp;\n"],"mappings":";;AA0MA,MAAa,wDAAgDA,CAAAA,CAAAA;;AAE7D,MAAa,gBAA0C"}

package/dist/lib/hexclave-app/apps/interfaces/client-app.d.ts

@@ -1,2 +1,2 @@
-import { a as StackClientApp, c as StackClientAppJson, i as HexclaveClientAppJson, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, r as HexclaveClientAppConstructorOptions, s as StackClientAppConstructorOptions, t as HexclaveClientApp } from "../../../../client-app-CdAaCL3p.js";
+import { a as StackClientApp, c as StackClientAppJson, i as HexclaveClientAppJson, n as HexclaveClientAppConstructor, o as StackClientAppConstructor, r as HexclaveClientAppConstructorOptions, s as StackClientAppConstructorOptions, t as HexclaveClientApp } from "../../../../client-app-Cri37vaC.js";
 export { HexclaveClientApp, HexclaveClientAppConstructor, HexclaveClientAppConstructorOptions, HexclaveClientAppJson, StackClientApp, StackClientAppConstructor, StackClientAppConstructorOptions, StackClientAppJson };