@hexclave/shared 1.0.30 → 1.0.33

package/dist/esm/interface/server-interface.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-interface.js","names":[],"sources":["../../../src/interface/server-interface.ts"],"sourcesContent":["import * as yup from \"yup\";\nimport { decryptValue, encryptValue, hashKey } from \"../helpers/vault/client-side\";\nimport { KnownErrors } from \"../known-errors\";\nimport { inlineProductSchema } from \"../schema-fields\";\nimport { AccessToken, InternalSession, RefreshToken } from \"../sessions\";\nimport { HexclaveAssertionError } from \"../utils/errors\";\nimport { filterUndefined } from \"../utils/objects\";\nimport { Result } from \"../utils/results\";\nimport { urlString } from \"../utils/urls\";\nimport {\n  ClientInterfaceOptions,\n  HexclaveClientInterface\n} from \"./client-interface\";\nimport { ConnectedAccountAccessTokenCrud, ConnectedAccountCrud } from \"./crud/connected-accounts\";\nimport { ContactChannelsCrud } from \"./crud/contact-channels\";\nimport { CurrentUserCrud } from \"./crud/current-user\";\nimport { ItemCrud } from \"./crud/items\";\nimport { NotificationPreferenceCrud } from \"./crud/notification-preferences\";\nimport { OAuthProviderCrud } from \"./crud/oauth-providers\";\nimport { ProjectPermissionsCrud } from \"./crud/project-permissions\";\nimport { SessionsCrud } from \"./crud/sessions\";\nimport { TeamInvitationCrud } from \"./crud/team-invitation\";\nimport { TeamMemberProfilesCrud } from \"./crud/team-member-profiles\";\nimport { TeamMembershipsCrud } from \"./crud/team-memberships\";\nimport { TeamPermissionsCrud } from \"./crud/team-permissions\";\nimport { TeamsCrud } from \"./crud/teams\";\nimport { UsersCrud } from \"./crud/users\";\n\nexport type ServerAuthApplicationOptions = (\n  & ClientInterfaceOptions\n  & (\n    | {\n      readonly secretServerKey: string,\n    }\n    | {\n      readonly projectOwnerSession: InternalSession | (() => Promise<string | null>),\n    }\n  )\n);\n\nexport class HexclaveServerInterface extends HexclaveClientInterface {\n  constructor(public override options: ServerAuthApplicationOptions) {\n    super(options);\n  }\n\n  protected async sendServerRequest(path: string, options: RequestInit, session: InternalSession | null, requestType: \"server\" | \"admin\" = \"server\") {\n    return await this.sendClientRequest(\n      path,\n      {\n        ...options,\n        headers: {\n          // Hexclave rebrand: emit x-hexclave-* request header; the backend proxy dual-accepts both names.\n          \"x-hexclave-secret-server-key\": \"secretServerKey\" in this.options ? this.options.secretServerKey : \"\",\n          ...options.headers,\n        },\n      },\n      session,\n      requestType,\n    );\n  }\n\n  override async getCustomerBilling(\n    customerType: \"user\" | \"team\",\n    customerId: string,\n    session: InternalSession | null,\n  ): Promise<{\n    has_customer: boolean,\n    default_payment_method: {\n      id: string,\n      brand: string | null,\n      last4: string | null,\n      exp_month: number | null,\n      exp_year: number | null,\n    } | null,\n  }> {\n    const response = await this.sendServerRequest(\n      urlString`/payments/billing/${customerType}/${customerId}`,\n      {},\n      session,\n    );\n    return await response.json();\n  }\n\n  override async createCustomerPaymentMethodSetupIntent(\n    customerType: \"user\" | \"team\",\n    customerId: string,\n    session: InternalSession | null,\n  ): Promise<{\n    client_secret: string,\n    stripe_account_id: string,\n  }> {\n    const response = await this.sendServerRequest(\n      urlString`/payments/payment-method/${customerType}/${customerId}/setup-intent`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      session,\n    );\n    return await response.json();\n  }\n\n  override async setDefaultCustomerPaymentMethodFromSetupIntent(\n    customerType: \"user\" | \"team\",\n    customerId: string,\n    setupIntentId: string,\n    session: InternalSession | null,\n  ): Promise<{\n    default_payment_method: {\n      id: string,\n      brand: string | null,\n      last4: string | null,\n      exp_month: number | null,\n      exp_year: number | null,\n    },\n  }> {\n    const response = await this.sendServerRequest(\n      urlString`/payments/payment-method/${customerType}/${customerId}/set-default`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({\n          setup_intent_id: setupIntentId,\n        }),\n      },\n      session,\n    );\n    return await response.json();\n  }\n\n\n  protected async sendServerRequestAndCatchKnownError<E extends typeof KnownErrors[keyof KnownErrors]>(\n    path: string,\n    requestOptions: RequestInit,\n    tokenStoreOrNull: InternalSession | null,\n    errorsToCatch: readonly E[],\n  ): Promise<Result<\n    Response & {\n      usedTokens: {\n        accessToken: AccessToken,\n        refreshToken: RefreshToken | null,\n      } | null,\n    },\n    InstanceType<E>\n  >> {\n    try {\n      return Result.ok(await this.sendServerRequest(path, requestOptions, tokenStoreOrNull));\n    } catch (e) {\n      for (const errorType of errorsToCatch) {\n        if (errorType.isInstance(e)) {\n          return Result.error(e as InstanceType<E>);\n        }\n      }\n      throw e;\n    }\n  }\n\n  async createServerUser(data: UsersCrud['Server']['Create']): Promise<UsersCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      \"/users\",\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async getServerUserByToken(session: InternalSession): Promise<CurrentUserCrud['Server']['Read'] | null> {\n    const responseOrError = await this.sendServerRequestAndCatchKnownError(\n      \"/users/me\",\n      {},\n      session,\n      [KnownErrors.CannotGetOwnUserWithoutUser],\n    );\n    if (responseOrError.status === \"error\") {\n      if (KnownErrors.CannotGetOwnUserWithoutUser.isInstance(responseOrError.error)) {\n        return null;\n      } else {\n        throw new HexclaveAssertionError(\"Unexpected uncaught error\", { cause: responseOrError.error });\n      }\n    }\n    const response = responseOrError.data;\n    const user: CurrentUserCrud['Server']['Read'] = await response.json();\n    if (!(user as any)) throw new HexclaveAssertionError(\"User endpoint returned null; this should never happen\");\n    return user;\n  }\n\n  async getServerUserById(userId: string): Promise<Result<UsersCrud['Server']['Read']>> {\n    const responseOrError = await this.sendServerRequestAndCatchKnownError(\n      urlString`/users/${userId}`,\n      {},\n      null,\n      [KnownErrors.UserNotFound],\n    );\n    if (responseOrError.status === \"error\") {\n      return Result.error(responseOrError.error);\n    }\n    const user: UsersCrud['Server']['Read'] = await responseOrError.data.json();\n    return Result.ok(user);\n  }\n\n  async listServerTeamInvitations(options: {\n    teamId: string,\n  }): Promise<TeamInvitationCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      urlString`/team-invitations?team_id=${options.teamId}`,\n      {},\n      null,\n    );\n    const result = await response.json() as TeamInvitationCrud['Server']['List'];\n    return result.items;\n  }\n\n  async revokeServerTeamInvitation(invitationId: string, teamId: string) {\n    await this.sendServerRequest(\n      urlString`/team-invitations/${invitationId}?team_id=${teamId}`,\n      { method: \"DELETE\" },\n      null,\n    );\n  }\n\n  async listServerTeamMemberProfiles(\n    options: {\n      teamId: string,\n    },\n  ): Promise<TeamMemberProfilesCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      urlString`/team-member-profiles?team_id=${options.teamId}`,\n      {},\n      null,\n    );\n    const result = await response.json() as TeamMemberProfilesCrud['Server']['List'];\n    return result.items;\n  }\n\n  async getServerTeamMemberProfile(\n    options: {\n      teamId: string,\n      userId: string,\n    },\n  ): Promise<TeamMemberProfilesCrud['Client']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/team-member-profiles/${options.teamId}/${options.userId}`,\n      {},\n      null,\n    );\n    return await response.json();\n  }\n\n  async listServerTeamPermissions(\n    options: {\n      userId?: string,\n      teamId?: string,\n      recursive: boolean,\n    },\n    session: InternalSession | null,\n  ): Promise<TeamPermissionsCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      `/team-permissions?${new URLSearchParams(filterUndefined({\n        user_id: options.userId,\n        team_id: options.teamId,\n        recursive: options.recursive.toString(),\n      }))}`,\n      {},\n      session,\n    );\n    const result = await response.json() as TeamPermissionsCrud['Server']['List'];\n    return result.items;\n  }\n\n  async listServerProjectPermissions(\n    options: {\n      userId?: string,\n      recursive: boolean,\n    },\n    session: InternalSession | null,\n  ): Promise<ProjectPermissionsCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      `/project-permissions?${new URLSearchParams(filterUndefined({\n        user_id: options.userId,\n        recursive: options.recursive.toString(),\n      }))}`,\n      {},\n      session,\n    );\n    const result = await response.json() as ProjectPermissionsCrud['Server']['List'];\n    return result.items;\n  }\n\n  async listServerUsers(options: (\n    & {\n      cursor?: string,\n      limit?: number,\n      orderBy?: 'signedUpAt' | 'lastActiveAt',\n      desc?: boolean,\n      query?: string,\n      includeRestricted?: boolean,\n      teamId?: string,\n    }\n    & (\n      {\n        includeAnonymous?: boolean,\n        onlyAnonymous?: false,\n      }\n      | {\n        includeAnonymous: true,\n        onlyAnonymous: true,\n      }\n    )\n  )): Promise<UsersCrud['Server']['List']> {\n    const searchParams = new URLSearchParams(filterUndefined({\n      cursor: options.cursor,\n      limit: options.limit?.toString(),\n      desc: options.desc?.toString(),\n      team_id: options.teamId,\n      ...options.orderBy ? {\n        order_by: {\n          signedUpAt: \"signed_up_at\",\n          lastActiveAt: \"last_active_at\",\n        }[options.orderBy],\n      } : {},\n      ...options.query ? {\n        query: options.query,\n      } : {},\n      ...options.includeRestricted ? {\n        include_restricted: 'true',\n      } : {},\n      ...options.includeAnonymous ? {\n        include_anonymous: 'true',\n      } : {},\n      ...options.onlyAnonymous ? {\n        only_anonymous: 'true',\n      } : {},\n    }));\n    const response = await this.sendServerRequest(\"/users?\" + searchParams.toString(), {}, null);\n    return await response.json();\n  }\n\n  async listServerTeams(options?: {\n    userId?: string,\n  }): Promise<TeamsCrud['Server']['Read'][]> {\n    const result = await this.listServerTeamsPaginated(options);\n    return result.items;\n  }\n\n  async listServerTeamsPaginated(options?: {\n    userId?: string,\n    orderBy?: 'createdAt',\n    desc?: boolean,\n    cursor?: string,\n    limit?: number,\n    query?: string,\n  }): Promise<TeamsCrud['Server']['List']> {\n    const response = await this.sendServerRequest(\n      `/teams?${new URLSearchParams(filterUndefined({\n        user_id: options?.userId,\n        // SDK option uses camelCase `createdAt`; backend uses snake_case.\n        order_by: options?.orderBy === 'createdAt' ? 'created_at' : options?.orderBy,\n        desc: options?.desc !== undefined ? String(options.desc) : undefined,\n        cursor: options?.cursor,\n        limit: options?.limit?.toString(),\n        query: options?.query,\n      }))}`,\n      {},\n      null\n    );\n    return await response.json() as TeamsCrud['Server']['List'];\n  }\n\n  async getServerTeam(teamId: string): Promise<TeamsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      `/teams/${teamId}`,\n      {},\n      null\n    );\n    return await response.json();\n  }\n\n  async listServerTeamUsers(teamId: string): Promise<UsersCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(`/users?team_id=${teamId}`, {}, null);\n    const result = await response.json() as UsersCrud['Server']['List'];\n    return result.items;\n  }\n\n  /* when passing a session, the user will be added to the team */\n  async createServerTeam(data: TeamsCrud['Server']['Create']): Promise<TeamsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      \"/teams\",\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null\n    );\n    return await response.json();\n  }\n\n  async updateServerTeam(teamId: string, data: TeamsCrud['Server']['Update']): Promise<TeamsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/teams/${teamId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async deleteServerTeam(teamId: string): Promise<void> {\n    await this.sendServerRequest(\n      urlString`/teams/${teamId}`,\n      { method: \"DELETE\" },\n      null,\n    );\n  }\n\n  async addServerUserToTeam(options: {\n    userId: string,\n    teamId: string,\n  }): Promise<TeamMembershipsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/team-memberships/${options.teamId}/${options.userId}`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async removeServerUserFromTeam(options: {\n    userId: string,\n    teamId: string,\n  }) {\n    await this.sendServerRequest(\n      urlString`/team-memberships/${options.teamId}/${options.userId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async listServerUserTeamInvitations(userId: string): Promise<TeamInvitationCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      \"/team-invitations?\" + new URLSearchParams({ user_id: userId }),\n      {},\n      null,\n    );\n    const result = await response.json() as TeamInvitationCrud['Server']['List'];\n    return result.items;\n  }\n\n  async acceptServerTeamInvitationById(\n    invitationId: string,\n    userId: string,\n  ) {\n    await this.sendServerRequest(\n      urlString`/team-invitations/${invitationId}/accept` + \"?\" + new URLSearchParams({ user_id: userId }),\n      { method: \"POST\" },\n      null,\n    );\n  }\n\n  async updateServerUser(userId: string, update: UsersCrud['Server']['Update']): Promise<UsersCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/users/${userId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(update),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async createServerProviderAccessToken(\n    userId: string,\n    provider: string,\n    scope: string,\n  ): Promise<ConnectedAccountAccessTokenCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/connected-accounts/${userId}/${provider}/access-token`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({ scope }),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  /**\n   * Get access token for a specific connected account by provider ID and provider account ID.\n   * This is the preferred method when dealing with multiple accounts of the same provider.\n   */\n  async createServerProviderAccessTokenByAccount(\n    userId: string,\n    providerId: string,\n    providerAccountId: string,\n    scope: string,\n  ): Promise<ConnectedAccountAccessTokenCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/connected-accounts/${userId}/${providerId}/${providerAccountId}/access-token`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({ scope }),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  /**\n   * List all connected accounts for a user.\n   */\n  async listServerConnectedAccounts(\n    userId: string,\n  ): Promise<ConnectedAccountCrud['Server']['List']> {\n    const response = await this.sendServerRequest(\n      urlString`/connected-accounts/${userId}`,\n      { method: \"GET\" },\n      null,\n    );\n    return await response.json();\n  }\n\n  async createServerUserSession(userId: string, expiresInMillis: number, isImpersonation: boolean): Promise<{ accessToken: string, refreshToken: string }> {\n    const response = await this.sendServerRequest(\n      \"/auth/sessions\",\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({\n          user_id: userId,\n          expires_in_millis: expiresInMillis,\n          is_impersonation: isImpersonation,\n        }),\n      },\n      null,\n    );\n    const result = await response.json();\n    return {\n      accessToken: result.access_token,\n      refreshToken: result.refresh_token,\n    };\n  }\n\n  async leaveServerTeam(\n    options: {\n      teamId: string,\n      userId: string,\n    },\n  ) {\n    await this.sendClientRequest(\n      urlString`/team-memberships/${options.teamId}/${options.userId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async updateServerTeamMemberProfile(options: {\n    teamId: string,\n    userId: string,\n    profile: TeamMemberProfilesCrud['Server']['Update'],\n  }) {\n    await this.sendServerRequest(\n      urlString`/team-member-profiles/${options.teamId}/${options.userId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(options.profile),\n      },\n      null,\n    );\n  }\n\n  async grantServerTeamUserPermission(teamId: string, userId: string, permissionId: string) {\n    await this.sendServerRequest(\n      urlString`/team-permissions/${teamId}/${userId}/${permissionId}`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async grantServerProjectPermission(userId: string, permissionId: string) {\n    await this.sendServerRequest(\n      urlString`/project-permissions/${userId}/${permissionId}`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async revokeServerTeamUserPermission(teamId: string, userId: string, permissionId: string) {\n    await this.sendServerRequest(\n      urlString`/team-permissions/${teamId}/${userId}/${permissionId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async revokeServerProjectPermission(userId: string, permissionId: string) {\n    await this.sendServerRequest(\n      urlString`/project-permissions/${userId}/${permissionId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async deleteServerUser(userId: string) {\n    await this.sendServerRequest(\n      urlString`/users/${userId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async createServerContactChannel(\n    data: ContactChannelsCrud['Server']['Create'],\n  ): Promise<ContactChannelsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      \"/contact-channels\",\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async updateServerContactChannel(\n    userId: string,\n    contactChannelId: string,\n    data: ContactChannelsCrud['Server']['Update'],\n  ): Promise<ContactChannelsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/contact-channels/${userId}/${contactChannelId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async deleteServerContactChannel(\n    userId: string,\n    contactChannelId: string,\n  ): Promise<void> {\n    await this.sendServerRequest(\n      urlString`/contact-channels/${userId}/${contactChannelId}`,\n      {\n        method: \"DELETE\",\n      },\n      null,\n    );\n  }\n\n  async listServerContactChannels(\n    userId: string,\n  ): Promise<ContactChannelsCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      urlString`/contact-channels?user_id=${userId}`,\n      {\n        method: \"GET\",\n      },\n      null,\n    );\n    const json = await response.json() as ContactChannelsCrud['Server']['List'];\n    return json.items;\n  }\n\n  async listServerNotificationCategories(\n    userId: string,\n  ): Promise<NotificationPreferenceCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      urlString`/emails/notification-preference/${userId}`,\n      {\n        method: \"GET\",\n      },\n      null,\n    );\n    const json = await response.json() as NotificationPreferenceCrud['Server']['List'];\n    return json.items;\n  }\n\n  async setServerNotificationsEnabled(\n    userId: string,\n    notificationCategoryId: string,\n    enabled: boolean,\n  ): Promise<void> {\n    await this.sendServerRequest(\n      urlString`/emails/notification-preference/${userId}/${notificationCategoryId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({\n          enabled,\n        }),\n      },\n      null,\n    );\n  }\n\n  async sendServerContactChannelVerificationEmail(\n    userId: string,\n    contactChannelId: string,\n    callbackUrl: string,\n  ): Promise<void> {\n    await this.sendServerRequest(\n      urlString`/contact-channels/${userId}/${contactChannelId}/send-verification-code`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({ callback_url: callbackUrl }),\n      },\n      null,\n    );\n  }\n\n\n  async listServerSessions(userId: string): Promise<SessionsCrud['Server']['List']> {\n    const response = await this.sendServerRequest(\n      urlString`/auth/sessions?user_id=${userId}`,\n      {\n        method: \"GET\",\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async deleteServerSession(sessionId: string) {\n    await this.sendServerRequest(\n      urlString`/auth/sessions/${sessionId}`,\n      {\n        method: \"DELETE\",\n      },\n      null,\n    );\n  }\n\n\n  async sendServerTeamInvitation(options: {\n    email: string,\n    teamId: string,\n    callbackUrl: string,\n  }): Promise<void> {\n    await this.sendServerRequest(\n      \"/team-invitations/send-code\",\n      {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\"\n        },\n        body: JSON.stringify({\n          email: options.email,\n          team_id: options.teamId,\n          callback_url: options.callbackUrl,\n        }),\n      },\n      null,\n    );\n  }\n\n  async updatePassword(\n    options: { oldPassword: string, newPassword: string },\n  ): Promise<KnownErrors[\"PasswordConfirmationMismatch\"] | KnownErrors[\"PasswordRequirementsNotMet\"] | undefined> {\n    const res = await this.sendServerRequestAndCatchKnownError(\n      \"/auth/password/update\",\n      {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\"\n        },\n        body: JSON.stringify({\n          old_password: options.oldPassword,\n          new_password: options.newPassword,\n        }),\n      },\n      null,\n      [KnownErrors.PasswordConfirmationMismatch, KnownErrors.PasswordRequirementsNotMet]\n    );\n\n    if (res.status === \"error\") {\n      return res.error;\n    }\n  }\n\n  // OAuth Providers CRUD operations\n  async createServerOAuthProvider(\n    data: OAuthProviderCrud['Server']['Create'],\n  ): Promise<OAuthProviderCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      \"/oauth-providers\",\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n\n  async listServerOAuthProviders(\n    options: {\n      user_id?: string,\n    } = {},\n  ): Promise<OAuthProviderCrud['Server']['Read'][]> {\n    const queryParams = new URLSearchParams(filterUndefined(options));\n    const response = await this.sendServerRequest(\n      `/oauth-providers${queryParams.toString() ? `?${queryParams.toString()}` : ''}`,\n      {\n        method: \"GET\",\n      },\n      null,\n    );\n    const result = await response.json();\n    return result.items;\n  }\n\n  async updateServerOAuthProvider(\n    userId: string,\n    providerId: string,\n    data: OAuthProviderCrud['Server']['Update'],\n  ): Promise<OAuthProviderCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/oauth-providers/${userId}/${providerId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async deleteServerOAuthProvider(\n    userId: string,\n    providerId: string,\n  ): Promise<void> {\n    const response = await this.sendServerRequest(\n      urlString`/oauth-providers/${userId}/${providerId}`,\n      {\n        method: \"DELETE\",\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async sendEmail(options: {\n    userIds?: string[],\n    allUsers?: true,\n    themeId?: string | null | false,\n    html?: string,\n    subject?: string,\n    notificationCategoryName?: string,\n    templateId?: string,\n    variables?: Record<string, any>,\n    draftId?: string,\n    scheduledAt?: Date,\n  }): Promise<Result<void, KnownErrors[\"RequiresCustomEmailServer\"] | KnownErrors[\"SchemaError\"] | KnownErrors[\"UserIdDoesNotExist\"]>> {\n    const res = await this.sendServerRequest(\n      \"/emails/send-email\",\n      {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\"\n        },\n        body: JSON.stringify({\n          user_ids: options.userIds,\n          all_users: options.allUsers,\n          theme_id: options.themeId,\n          html: options.html,\n          subject: options.subject,\n          notification_category_name: options.notificationCategoryName,\n          template_id: options.templateId,\n          variables: options.variables,\n          draft_id: options.draftId,\n          scheduled_at_millis: options.scheduledAt?.getTime(),\n        }),\n      },\n      null,\n    );\n    return Result.ok(undefined);\n  }\n\n  async getEmailDeliveryInfo(): Promise<{\n    stats: {\n      hour: { sent: number, bounced: number, marked_as_spam: number },\n      day: { sent: number, bounced: number, marked_as_spam: number },\n      week: { sent: number, bounced: number, marked_as_spam: number },\n      month: { sent: number, bounced: number, marked_as_spam: number },\n    },\n    capacity: {\n      rate_per_second: number,\n      boost_multiplier: number,\n      penalty_factor: number,\n      is_boost_active: boolean,\n      boost_expires_at: string | null,\n    },\n  }> {\n    const res = await this.sendServerRequest(\n      \"/emails/delivery-info\",\n      {\n        method: \"GET\",\n        headers: {\n          \"Content-Type\": \"application/json\"\n        },\n      },\n      null,\n    );\n    return await res.json();\n  }\n\n  async activateEmailCapacityBoost(): Promise<{ expires_at: string }> {\n    const res = await this.sendServerRequest(\n      \"/emails/capacity-boost\",\n      {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\"\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n    return await res.json();\n  }\n\n  async updateItemQuantity(\n    options: (\n      { itemId: string, userId: string } |\n      { itemId: string, teamId: string } |\n      { itemId: string, customCustomerId: string }\n    ),\n    data: ItemCrud['Server']['Update'],\n  ): Promise<void> {\n    let customerType: \"user\" | \"team\" | \"custom\";\n    let customerId: string;\n    const itemId: string = options.itemId;\n\n    if (\"userId\" in options) {\n      customerType = \"user\";\n      customerId = options.userId;\n    } else if (\"teamId\" in options) {\n      customerType = \"team\";\n      customerId = options.teamId;\n    } else if (\"customCustomerId\" in options) {\n      customerType = \"custom\";\n      customerId = options.customCustomerId;\n    } else {\n      throw new HexclaveAssertionError(\"updateItemQuantity requires one of userId, teamId, or customCustomerId\");\n    }\n\n    const queryParams = new URLSearchParams({ allow_negative: (data.allow_negative ?? false).toString() });\n    await this.sendServerRequest(\n      `/payments/items/${customerType}/${customerId}/${itemId}/update-quantity?${queryParams.toString()}`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ delta: data.delta, expires_at: data.expires_at, description: data.description }),\n      },\n      null\n    );\n  }\n\n  async grantProduct(\n    options: {\n      customerType: \"user\" | \"team\" | \"custom\",\n      customerId: string,\n      productId?: string,\n      product?: yup.InferType<typeof inlineProductSchema>,\n      quantity?: number,\n    },\n  ): Promise<void> {\n    if (!options.productId && !options.product) {\n      throw new HexclaveAssertionError(\"grantProduct requires either productId or product\");\n    }\n    if (options.productId && options.product) {\n      throw new HexclaveAssertionError(\"grantProduct should not receive both productId and product\");\n    }\n    const body = filterUndefined({\n      product_id: options.productId,\n      product_inline: options.product,\n      quantity: options.quantity,\n    });\n    await this.sendServerRequest(\n      urlString`/payments/products/${options.customerType}/${options.customerId}`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify(body),\n      },\n      null,\n    );\n  }\n\n  async getDataVaultStoreValue(secret: string, storeId: string, key: string) {\n    const hashedKey = await hashKey(secret, key);\n    const response = await this.sendServerRequestAndCatchKnownError(\n      `/data-vault/stores/${storeId}/get`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ hashed_key: hashedKey }),\n      },\n      null,\n      [KnownErrors.DataVaultStoreHashedKeyDoesNotExist] as const,\n    );\n    if (response.status === \"error\") {\n      if (KnownErrors.DataVaultStoreHashedKeyDoesNotExist.isInstance(response.error)) {\n        return null;\n      } else {\n        throw new HexclaveAssertionError(\"Unexpected uncaught error\", { cause: response.error });\n      }\n    }\n    const json = await response.data.json();\n    const encryptedValue = json.encrypted_value;\n    if (typeof encryptedValue !== \"string\") throw new HexclaveAssertionError(\"encrypted_value is not a string\", { type: typeof encryptedValue });\n    return await decryptValue(secret, key, encryptedValue);\n  }\n\n  async setDataVaultStoreValue(secret: string, storeId: string, key: string, value: string) {\n    const hashedKey = await hashKey(secret, key);\n    const encryptedValue = await encryptValue(secret, key, value);\n    await this.sendServerRequest(\n      `/data-vault/stores/${storeId}/set`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ hashed_key: hashedKey, encrypted_value: encryptedValue }),\n      },\n      null,\n    );\n  }\n\n  async initiateServerPasskeyRegistration(userId: string): Promise<Result<{ options_json: any, code: string }, KnownErrors[]>> {\n    // Create a temporary session for this user to use for passkey registration\n    // TODO instead of creating a new session, this should just call the endpoint in a way in which it doesn't require a session\n    // (currently this shows up on session history etc... not ideal)\n    const { accessToken, refreshToken } = await this.createServerUserSession(userId, 60000 * 2, false); // 2 minute session\n    const tempSession = new InternalSession({\n      accessToken,\n      refreshToken,\n      refreshAccessTokenCallback: async () => null, // No refresh for temporary sessions\n    });\n\n    // Use the existing initiatePasskeyRegistration method with the temporary session\n    return await this.initiatePasskeyRegistration({}, tempSession);\n  }\n}\n"],"mappings":";;;;;;;;;;AAwCA,IAAa,0BAAb,cAA6C,wBAAwB;CACnE,YAAY,AAAgB,SAAuC;AACjE,QAAM,QAAQ;EADY;;CAI5B,MAAgB,kBAAkB,MAAc,SAAsB,SAAiC,cAAkC,UAAU;AACjJ,SAAO,MAAM,KAAK,kBAChB,MACA;GACE,GAAG;GACH,SAAS;IAEP,gCAAgC,qBAAqB,KAAK,UAAU,KAAK,QAAQ,kBAAkB;IACnG,GAAG,QAAQ;IACZ;GACF,EACD,SACA,YACD;;CAGH,MAAe,mBACb,cACA,YACA,SAUC;AAMD,SAAO,OALU,MAAM,KAAK,kBAC1B,SAAS,qBAAqB,aAAa,GAAG,cAC9C,EAAE,EACF,QACD,EACqB,MAAM;;CAG9B,MAAe,uCACb,cACA,YACA,SAIC;AAYD,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,4BAA4B,aAAa,GAAG,WAAW,gBAChE;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,QACD,EACqB,MAAM;;CAG9B,MAAe,+CACb,cACA,YACA,eACA,SASC;AAcD,SAAO,OAbU,MAAM,KAAK,kBAC1B,SAAS,4BAA4B,aAAa,GAAG,WAAW,eAChE;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EACnB,iBAAiB,eAClB,CAAC;GACH,EACD,QACD,EACqB,MAAM;;CAI9B,MAAgB,oCACd,MACA,gBACA,kBACA,eASC;AACD,MAAI;AACF,UAAO,OAAO,GAAG,MAAM,KAAK,kBAAkB,MAAM,gBAAgB,iBAAiB,CAAC;WAC/E,GAAG;AACV,QAAK,MAAM,aAAa,cACtB,KAAI,UAAU,WAAW,EAAE,CACzB,QAAO,OAAO,MAAM,EAAqB;AAG7C,SAAM;;;CAIV,MAAM,iBAAiB,MAA2E;AAYhG,SAAO,OAXU,MAAM,KAAK,kBAC1B,UACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,qBAAqB,SAA6E;EACtG,MAAM,kBAAkB,MAAM,KAAK,oCACjC,aACA,EAAE,EACF,SACA,CAAC,YAAY,4BAA4B,CAC1C;AACD,MAAI,gBAAgB,WAAW,QAC7B,KAAI,YAAY,4BAA4B,WAAW,gBAAgB,MAAM,CAC3E,QAAO;MAEP,OAAM,IAAI,uBAAuB,6BAA6B,EAAE,OAAO,gBAAgB,OAAO,CAAC;EAInG,MAAM,OAA0C,MAD/B,gBAAgB,KAC8B,MAAM;AACrE,MAAI,CAAE,KAAc,OAAM,IAAI,uBAAuB,wDAAwD;AAC7G,SAAO;;CAGT,MAAM,kBAAkB,QAA8D;EACpF,MAAM,kBAAkB,MAAM,KAAK,oCACjC,SAAS,UAAU,UACnB,EAAE,EACF,MACA,CAAC,YAAY,aAAa,CAC3B;AACD,MAAI,gBAAgB,WAAW,QAC7B,QAAO,OAAO,MAAM,gBAAgB,MAAM;EAE5C,MAAM,OAAoC,MAAM,gBAAgB,KAAK,MAAM;AAC3E,SAAO,OAAO,GAAG,KAAK;;CAGxB,MAAM,0BAA0B,SAEoB;AAOlD,UADe,OALE,MAAM,KAAK,kBAC1B,SAAS,6BAA6B,QAAQ,UAC9C,EAAE,EACF,KACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,2BAA2B,cAAsB,QAAgB;AACrE,QAAM,KAAK,kBACT,SAAS,qBAAqB,aAAa,WAAW,UACtD,EAAE,QAAQ,UAAU,EACpB,KACD;;CAGH,MAAM,6BACJ,SAGqD;AAOrD,UADe,OALE,MAAM,KAAK,kBAC1B,SAAS,iCAAiC,QAAQ,UAClD,EAAE,EACF,KACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,2BACJ,SAImD;AAMnD,SAAO,OALU,MAAM,KAAK,kBAC1B,SAAS,yBAAyB,QAAQ,OAAO,GAAG,QAAQ,UAC5D,EAAE,EACF,KACD,EACqB,MAAM;;CAG9B,MAAM,0BACJ,SAKA,SACkD;AAWlD,UADe,OATE,MAAM,KAAK,kBAC1B,qBAAqB,IAAI,gBAAgB,gBAAgB;GACvD,SAAS,QAAQ;GACjB,SAAS,QAAQ;GACjB,WAAW,QAAQ,UAAU,UAAU;GACxC,CAAC,CAAC,IACH,EAAE,EACF,QACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,6BACJ,SAIA,SACqD;AAUrD,UADe,OARE,MAAM,KAAK,kBAC1B,wBAAwB,IAAI,gBAAgB,gBAAgB;GAC1D,SAAS,QAAQ;GACjB,WAAW,QAAQ,UAAU,UAAU;GACxC,CAAC,CAAC,IACH,EAAE,EACF,QACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,gBAAgB,SAoBmB;EACvC,MAAM,eAAe,IAAI,gBAAgB,gBAAgB;GACvD,QAAQ,QAAQ;GAChB,OAAO,QAAQ,OAAO,UAAU;GAChC,MAAM,QAAQ,MAAM,UAAU;GAC9B,SAAS,QAAQ;GACjB,GAAG,QAAQ,UAAU,EACnB,UAAU;IACR,YAAY;IACZ,cAAc;IACf,CAAC,QAAQ,UACX,GAAG,EAAE;GACN,GAAG,QAAQ,QAAQ,EACjB,OAAO,QAAQ,OAChB,GAAG,EAAE;GACN,GAAG,QAAQ,oBAAoB,EAC7B,oBAAoB,QACrB,GAAG,EAAE;GACN,GAAG,QAAQ,mBAAmB,EAC5B,mBAAmB,QACpB,GAAG,EAAE;GACN,GAAG,QAAQ,gBAAgB,EACzB,gBAAgB,QACjB,GAAG,EAAE;GACP,CAAC,CAAC;AAEH,SAAO,OADU,MAAM,KAAK,kBAAkB,YAAY,aAAa,UAAU,EAAE,EAAE,EAAE,KAAK,EACtE,MAAM;;CAG9B,MAAM,gBAAgB,SAEqB;AAEzC,UADe,MAAM,KAAK,yBAAyB,QAAQ,EAC7C;;CAGhB,MAAM,yBAAyB,SAOU;AAcvC,SAAO,OAbU,MAAM,KAAK,kBAC1B,UAAU,IAAI,gBAAgB,gBAAgB;GAC5C,SAAS,SAAS;GAElB,UAAU,SAAS,YAAY,cAAc,eAAe,SAAS;GACrE,MAAM,SAAS,SAAS,SAAY,OAAO,QAAQ,KAAK,GAAG;GAC3D,QAAQ,SAAS;GACjB,OAAO,SAAS,OAAO,UAAU;GACjC,OAAO,SAAS;GACjB,CAAC,CAAC,IACH,EAAE,EACF,KACD,EACqB,MAAM;;CAG9B,MAAM,cAAc,QAAsD;AAMxE,SAAO,OALU,MAAM,KAAK,kBAC1B,UAAU,UACV,EAAE,EACF,KACD,EACqB,MAAM;;CAG9B,MAAM,oBAAoB,QAAwD;AAGhF,UADe,OADE,MAAM,KAAK,kBAAkB,kBAAkB,UAAU,EAAE,EAAE,KAAK,EACrD,MAAM,EACtB;;CAIhB,MAAM,iBAAiB,MAA2E;AAYhG,SAAO,OAXU,MAAM,KAAK,kBAC1B,UACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,iBAAiB,QAAgB,MAA2E;AAYhH,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,UAAU,UACnB;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,iBAAiB,QAA+B;AACpD,QAAM,KAAK,kBACT,SAAS,UAAU,UACnB,EAAE,QAAQ,UAAU,EACpB,KACD;;CAGH,MAAM,oBAAoB,SAGyB;AAYjD,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,qBAAqB,QAAQ,OAAO,GAAG,QAAQ,UACxD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,yBAAyB,SAG5B;AACD,QAAM,KAAK,kBACT,SAAS,qBAAqB,QAAQ,OAAO,GAAG,QAAQ,UACxD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,8BAA8B,QAAiE;AAOnG,UADe,OALE,MAAM,KAAK,kBAC1B,uBAAuB,IAAI,gBAAgB,EAAE,SAAS,QAAQ,CAAC,EAC/D,EAAE,EACF,KACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,+BACJ,cACA,QACA;AACA,QAAM,KAAK,kBACT,SAAS,qBAAqB,aAAa,WAAW,MAAM,IAAI,gBAAgB,EAAE,SAAS,QAAQ,CAAC,EACpG,EAAE,QAAQ,QAAQ,EAClB,KACD;;CAGH,MAAM,iBAAiB,QAAgB,QAA6E;AAYlH,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,UAAU,UACnB;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,OAAO;GAC7B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,gCACJ,QACA,UACA,OAC4D;AAY5D,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,uBAAuB,OAAO,GAAG,SAAS,gBACnD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;GAChC,EACD,KACD,EACqB,MAAM;;;;;;CAO9B,MAAM,yCACJ,QACA,YACA,mBACA,OAC4D;AAY5D,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,uBAAuB,OAAO,GAAG,WAAW,GAAG,kBAAkB,gBAC1E;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;GAChC,EACD,KACD,EACqB,MAAM;;;;;CAM9B,MAAM,4BACJ,QACiD;AAMjD,SAAO,OALU,MAAM,KAAK,kBAC1B,SAAS,uBAAuB,UAChC,EAAE,QAAQ,OAAO,EACjB,KACD,EACqB,MAAM;;CAG9B,MAAM,wBAAwB,QAAgB,iBAAyB,iBAAkF;EAgBvJ,MAAM,SAAS,OAfE,MAAM,KAAK,kBAC1B,kBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU;IACnB,SAAS;IACT,mBAAmB;IACnB,kBAAkB;IACnB,CAAC;GACH,EACD,KACD,EAC6B,MAAM;AACpC,SAAO;GACL,aAAa,OAAO;GACpB,cAAc,OAAO;GACtB;;CAGH,MAAM,gBACJ,SAIA;AACA,QAAM,KAAK,kBACT,SAAS,qBAAqB,QAAQ,OAAO,GAAG,QAAQ,UACxD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,8BAA8B,SAIjC;AACD,QAAM,KAAK,kBACT,SAAS,yBAAyB,QAAQ,OAAO,GAAG,QAAQ,UAC5D;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,QAAQ,QAAQ;GACtC,EACD,KACD;;CAGH,MAAM,8BAA8B,QAAgB,QAAgB,cAAsB;AACxF,QAAM,KAAK,kBACT,SAAS,qBAAqB,OAAO,GAAG,OAAO,GAAG,gBAClD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,6BAA6B,QAAgB,cAAsB;AACvE,QAAM,KAAK,kBACT,SAAS,wBAAwB,OAAO,GAAG,gBAC3C;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,+BAA+B,QAAgB,QAAgB,cAAsB;AACzF,QAAM,KAAK,kBACT,SAAS,qBAAqB,OAAO,GAAG,OAAO,GAAG,gBAClD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,8BAA8B,QAAgB,cAAsB;AACxE,QAAM,KAAK,kBACT,SAAS,wBAAwB,OAAO,GAAG,gBAC3C;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,iBAAiB,QAAgB;AACrC,QAAM,KAAK,kBACT,SAAS,UAAU,UACnB;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,2BACJ,MACgD;AAYhD,SAAO,OAXU,MAAM,KAAK,kBAC1B,qBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,2BACJ,QACA,kBACA,MACgD;AAYhD,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,qBAAqB,OAAO,GAAG,oBACxC;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,2BACJ,QACA,kBACe;AACf,QAAM,KAAK,kBACT,SAAS,qBAAqB,OAAO,GAAG,oBACxC,EACE,QAAQ,UACT,EACD,KACD;;CAGH,MAAM,0BACJ,QACkD;AASlD,UADa,OAPI,MAAM,KAAK,kBAC1B,SAAS,6BAA6B,UACtC,EACE,QAAQ,OACT,EACD,KACD,EAC2B,MAAM,EACtB;;CAGd,MAAM,iCACJ,QACyD;AASzD,UADa,OAPI,MAAM,KAAK,kBAC1B,SAAS,mCAAmC,UAC5C,EACE,QAAQ,OACT,EACD,KACD,EAC2B,MAAM,EACtB;;CAGd,MAAM,8BACJ,QACA,wBACA,SACe;AACf,QAAM,KAAK,kBACT,SAAS,mCAAmC,OAAO,GAAG,0BACtD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EACnB,SACD,CAAC;GACH,EACD,KACD;;CAGH,MAAM,0CACJ,QACA,kBACA,aACe;AACf,QAAM,KAAK,kBACT,SAAS,qBAAqB,OAAO,GAAG,iBAAiB,0BACzD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,cAAc,aAAa,CAAC;GACpD,EACD,KACD;;CAIH,MAAM,mBAAmB,QAAyD;AAQhF,SAAO,OAPU,MAAM,KAAK,kBAC1B,SAAS,0BAA0B,UACnC,EACE,QAAQ,OACT,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,oBAAoB,WAAmB;AAC3C,QAAM,KAAK,kBACT,SAAS,kBAAkB,aAC3B,EACE,QAAQ,UACT,EACD,KACD;;CAIH,MAAM,yBAAyB,SAIb;AAChB,QAAM,KAAK,kBACT,+BACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU;IACnB,OAAO,QAAQ;IACf,SAAS,QAAQ;IACjB,cAAc,QAAQ;IACvB,CAAC;GACH,EACD,KACD;;CAGH,MAAM,eACJ,SAC8G;EAC9G,MAAM,MAAM,MAAM,KAAK,oCACrB,yBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU;IACnB,cAAc,QAAQ;IACtB,cAAc,QAAQ;IACvB,CAAC;GACH,EACD,MACA,CAAC,YAAY,8BAA8B,YAAY,2BAA2B,CACnF;AAED,MAAI,IAAI,WAAW,QACjB,QAAO,IAAI;;CAKf,MAAM,0BACJ,MAC8C;AAY9C,SAAO,OAXU,MAAM,KAAK,kBAC1B,oBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAI9B,MAAM,yBACJ,UAEI,EAAE,EAC0C;EAChD,MAAM,cAAc,IAAI,gBAAgB,gBAAgB,QAAQ,CAAC;AASjE,UADe,OAPE,MAAM,KAAK,kBAC1B,mBAAmB,YAAY,UAAU,GAAG,IAAI,YAAY,UAAU,KAAK,MAC3E,EACE,QAAQ,OACT,EACD,KACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,0BACJ,QACA,YACA,MAC8C;AAY9C,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,oBAAoB,OAAO,GAAG,cACvC;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,0BACJ,QACA,YACe;AAQf,SAAO,OAPU,MAAM,KAAK,kBAC1B,SAAS,oBAAoB,OAAO,GAAG,cACvC,EACE,QAAQ,UACT,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,UAAU,SAWqH;AACvH,QAAM,KAAK,kBACrB,sBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU;IACnB,UAAU,QAAQ;IAClB,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,MAAM,QAAQ;IACd,SAAS,QAAQ;IACjB,4BAA4B,QAAQ;IACpC,aAAa,QAAQ;IACrB,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,qBAAqB,QAAQ,aAAa,SAAS;IACpD,CAAC;GACH,EACD,KACD;AACD,SAAO,OAAO,GAAG,OAAU;;CAG7B,MAAM,uBAcH;AAWD,SAAO,OAVK,MAAM,KAAK,kBACrB,yBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACF,EACD,KACD,EACgB,MAAM;;CAGzB,MAAM,6BAA8D;AAYlE,SAAO,OAXK,MAAM,KAAK,kBACrB,0BACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD,EACgB,MAAM;;CAGzB,MAAM,mBACJ,SAKA,MACe;EACf,IAAI;EACJ,IAAI;EACJ,MAAM,SAAiB,QAAQ;AAE/B,MAAI,YAAY,SAAS;AACvB,kBAAe;AACf,gBAAa,QAAQ;aACZ,YAAY,SAAS;AAC9B,kBAAe;AACf,gBAAa,QAAQ;aACZ,sBAAsB,SAAS;AACxC,kBAAe;AACf,gBAAa,QAAQ;QAErB,OAAM,IAAI,uBAAuB,yEAAyE;EAG5G,MAAM,cAAc,IAAI,gBAAgB,EAAE,iBAAiB,KAAK,kBAAkB,OAAO,UAAU,EAAE,CAAC;AACtG,QAAM,KAAK,kBACT,mBAAmB,aAAa,GAAG,WAAW,GAAG,OAAO,mBAAmB,YAAY,UAAU,IACjG;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU;IAAE,OAAO,KAAK;IAAO,YAAY,KAAK;IAAY,aAAa,KAAK;IAAa,CAAC;GACxG,EACD,KACD;;CAGH,MAAM,aACJ,SAOe;AACf,MAAI,CAAC,QAAQ,aAAa,CAAC,QAAQ,QACjC,OAAM,IAAI,uBAAuB,oDAAoD;AAEvF,MAAI,QAAQ,aAAa,QAAQ,QAC/B,OAAM,IAAI,uBAAuB,6DAA6D;EAEhG,MAAM,OAAO,gBAAgB;GAC3B,YAAY,QAAQ;GACpB,gBAAgB,QAAQ;GACxB,UAAU,QAAQ;GACnB,CAAC;AACF,QAAM,KAAK,kBACT,SAAS,sBAAsB,QAAQ,aAAa,GAAG,QAAQ,cAC/D;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD;;CAGH,MAAM,uBAAuB,QAAgB,SAAiB,KAAa;EACzE,MAAM,YAAY,MAAM,QAAQ,QAAQ,IAAI;EAC5C,MAAM,WAAW,MAAM,KAAK,oCAC1B,sBAAsB,QAAQ,OAC9B;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU,EAAE,YAAY,WAAW,CAAC;GAChD,EACD,MACA,CAAC,YAAY,oCAAoC,CAClD;AACD,MAAI,SAAS,WAAW,QACtB,KAAI,YAAY,oCAAoC,WAAW,SAAS,MAAM,CAC5E,QAAO;MAEP,OAAM,IAAI,uBAAuB,6BAA6B,EAAE,OAAO,SAAS,OAAO,CAAC;EAI5F,MAAM,kBADO,MAAM,SAAS,KAAK,MAAM,EACX;AAC5B,MAAI,OAAO,mBAAmB,SAAU,OAAM,IAAI,uBAAuB,mCAAmC,EAAE,MAAM,OAAO,gBAAgB,CAAC;AAC5I,SAAO,MAAM,aAAa,QAAQ,KAAK,eAAe;;CAGxD,MAAM,uBAAuB,QAAgB,SAAiB,KAAa,OAAe;EACxF,MAAM,YAAY,MAAM,QAAQ,QAAQ,IAAI;EAC5C,MAAM,iBAAiB,MAAM,aAAa,QAAQ,KAAK,MAAM;AAC7D,QAAM,KAAK,kBACT,sBAAsB,QAAQ,OAC9B;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU;IAAE,YAAY;IAAW,iBAAiB;IAAgB,CAAC;GACjF,EACD,KACD;;CAGH,MAAM,kCAAkC,QAAqF;EAI3H,MAAM,EAAE,aAAa,iBAAiB,MAAM,KAAK,wBAAwB,QAAQ,MAAQ,GAAG,MAAM;EAClG,MAAM,cAAc,IAAI,gBAAgB;GACtC;GACA;GACA,4BAA4B,YAAY;GACzC,CAAC;AAGF,SAAO,MAAM,KAAK,4BAA4B,EAAE,EAAE,YAAY"}
+{"version":3,"file":"server-interface.js","names":[],"sources":["../../../src/interface/server-interface.ts"],"sourcesContent":["import * as yup from \"yup\";\nimport { decryptValue, encryptValue, hashKey } from \"../helpers/vault/client-side\";\nimport { KnownErrors } from \"../known-errors\";\nimport { inlineProductSchema } from \"../schema-fields\";\nimport { AccessToken, InternalSession, RefreshToken } from \"../sessions\";\nimport { HexclaveAssertionError } from \"../utils/errors\";\nimport { filterUndefined } from \"../utils/objects\";\nimport { Result } from \"../utils/results\";\nimport { urlString } from \"../utils/urls\";\nimport {\n  ClientInterfaceOptions,\n  HexclaveClientInterface\n} from \"./client-interface\";\nimport { ConnectedAccountAccessTokenCrud, ConnectedAccountCrud } from \"./crud/connected-accounts\";\nimport { ContactChannelsCrud } from \"./crud/contact-channels\";\nimport { CurrentUserCrud } from \"./crud/current-user\";\nimport { ItemCrud } from \"./crud/items\";\nimport { NotificationPreferenceCrud } from \"./crud/notification-preferences\";\nimport { OAuthProviderCrud } from \"./crud/oauth-providers\";\nimport { ProjectPermissionsCrud } from \"./crud/project-permissions\";\nimport { SessionsCrud } from \"./crud/sessions\";\nimport { TeamInvitationCrud } from \"./crud/team-invitation\";\nimport { TeamMemberProfilesCrud } from \"./crud/team-member-profiles\";\nimport { TeamMembershipsCrud } from \"./crud/team-memberships\";\nimport { TeamPermissionsCrud } from \"./crud/team-permissions\";\nimport { TeamsCrud } from \"./crud/teams\";\nimport { UsersCrud } from \"./crud/users\";\n\nexport type ServerAuthApplicationOptions = (\n  & ClientInterfaceOptions\n  & (\n    | {\n      readonly secretServerKey: string,\n    }\n    | {\n      readonly projectOwnerSession: InternalSession | (() => Promise<string | null>),\n    }\n  )\n);\n\nexport class HexclaveServerInterface extends HexclaveClientInterface {\n  constructor(public override options: ServerAuthApplicationOptions) {\n    super(options);\n  }\n\n  protected async sendServerRequest(path: string, options: RequestInit, session: InternalSession | null, requestType: \"server\" | \"admin\" = \"server\") {\n    return await this.sendClientRequest(\n      path,\n      {\n        ...options,\n        headers: {\n          // Hexclave rebrand: emit x-hexclave-* request header; the backend proxy dual-accepts both names.\n          \"x-hexclave-secret-server-key\": \"secretServerKey\" in this.options ? this.options.secretServerKey : \"\",\n          ...options.headers,\n        },\n      },\n      session,\n      requestType,\n    );\n  }\n\n  override async getCustomerBilling(\n    customerType: \"user\" | \"team\",\n    customerId: string,\n    session: InternalSession | null,\n  ): Promise<{\n    has_customer: boolean,\n    default_payment_method: {\n      id: string,\n      brand: string | null,\n      last4: string | null,\n      exp_month: number | null,\n      exp_year: number | null,\n    } | null,\n  }> {\n    const response = await this.sendServerRequest(\n      urlString`/payments/billing/${customerType}/${customerId}`,\n      {},\n      session,\n    );\n    return await response.json();\n  }\n\n  override async createCustomerPaymentMethodSetupIntent(\n    customerType: \"user\" | \"team\",\n    customerId: string,\n    session: InternalSession | null,\n  ): Promise<{\n    client_secret: string,\n    stripe_account_id: string,\n  }> {\n    const response = await this.sendServerRequest(\n      urlString`/payments/payment-method/${customerType}/${customerId}/setup-intent`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      session,\n    );\n    return await response.json();\n  }\n\n  override async setDefaultCustomerPaymentMethodFromSetupIntent(\n    customerType: \"user\" | \"team\",\n    customerId: string,\n    setupIntentId: string,\n    session: InternalSession | null,\n  ): Promise<{\n    default_payment_method: {\n      id: string,\n      brand: string | null,\n      last4: string | null,\n      exp_month: number | null,\n      exp_year: number | null,\n    },\n  }> {\n    const response = await this.sendServerRequest(\n      urlString`/payments/payment-method/${customerType}/${customerId}/set-default`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({\n          setup_intent_id: setupIntentId,\n        }),\n      },\n      session,\n    );\n    return await response.json();\n  }\n\n\n  protected async sendServerRequestAndCatchKnownError<E extends typeof KnownErrors[keyof KnownErrors]>(\n    path: string,\n    requestOptions: RequestInit,\n    tokenStoreOrNull: InternalSession | null,\n    errorsToCatch: readonly E[],\n  ): Promise<Result<\n    Response & {\n      usedTokens: {\n        accessToken: AccessToken,\n        refreshToken: RefreshToken | null,\n      } | null,\n    },\n    InstanceType<E>\n  >> {\n    try {\n      return Result.ok(await this.sendServerRequest(path, requestOptions, tokenStoreOrNull));\n    } catch (e) {\n      for (const errorType of errorsToCatch) {\n        if (errorType.isInstance(e)) {\n          return Result.error(e as InstanceType<E>);\n        }\n      }\n      throw e;\n    }\n  }\n\n  async createServerUser(data: UsersCrud['Server']['Create']): Promise<UsersCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      \"/users\",\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async getServerUserByToken(session: InternalSession): Promise<CurrentUserCrud['Server']['Read'] | null> {\n    const responseOrError = await this.sendServerRequestAndCatchKnownError(\n      \"/users/me\",\n      {},\n      session,\n      [KnownErrors.CannotGetOwnUserWithoutUser],\n    );\n    if (responseOrError.status === \"error\") {\n      if (KnownErrors.CannotGetOwnUserWithoutUser.isInstance(responseOrError.error)) {\n        return null;\n      } else {\n        throw new HexclaveAssertionError(\"Unexpected uncaught error\", { cause: responseOrError.error });\n      }\n    }\n    const response = responseOrError.data;\n    const user: CurrentUserCrud['Server']['Read'] = await response.json();\n    if (!(user as any)) throw new HexclaveAssertionError(\"User endpoint returned null; this should never happen\");\n    return user;\n  }\n\n  async getServerUserById(userId: string): Promise<Result<UsersCrud['Server']['Read']>> {\n    const responseOrError = await this.sendServerRequestAndCatchKnownError(\n      urlString`/users/${userId}`,\n      {},\n      null,\n      [KnownErrors.UserNotFound],\n    );\n    if (responseOrError.status === \"error\") {\n      return Result.error(responseOrError.error);\n    }\n    const user: UsersCrud['Server']['Read'] = await responseOrError.data.json();\n    return Result.ok(user);\n  }\n\n  async listServerTeamInvitations(options: {\n    teamId: string,\n  }): Promise<TeamInvitationCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      urlString`/team-invitations?team_id=${options.teamId}`,\n      {},\n      null,\n    );\n    const result = await response.json() as TeamInvitationCrud['Server']['List'];\n    return result.items;\n  }\n\n  async revokeServerTeamInvitation(invitationId: string, teamId: string) {\n    await this.sendServerRequest(\n      urlString`/team-invitations/${invitationId}?team_id=${teamId}`,\n      { method: \"DELETE\" },\n      null,\n    );\n  }\n\n  async listServerTeamMemberProfiles(\n    options: {\n      teamId: string,\n    },\n  ): Promise<TeamMemberProfilesCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      urlString`/team-member-profiles?team_id=${options.teamId}`,\n      {},\n      null,\n    );\n    const result = await response.json() as TeamMemberProfilesCrud['Server']['List'];\n    return result.items;\n  }\n\n  async getServerTeamMemberProfile(\n    options: {\n      teamId: string,\n      userId: string,\n    },\n  ): Promise<TeamMemberProfilesCrud['Client']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/team-member-profiles/${options.teamId}/${options.userId}`,\n      {},\n      null,\n    );\n    return await response.json();\n  }\n\n  async listServerTeamPermissions(\n    options: {\n      userId?: string,\n      teamId?: string,\n      recursive: boolean,\n    },\n    session: InternalSession | null,\n  ): Promise<TeamPermissionsCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      `/team-permissions?${new URLSearchParams(filterUndefined({\n        user_id: options.userId,\n        team_id: options.teamId,\n        recursive: options.recursive.toString(),\n      }))}`,\n      {},\n      session,\n    );\n    const result = await response.json() as TeamPermissionsCrud['Server']['List'];\n    return result.items;\n  }\n\n  async listServerProjectPermissions(\n    options: {\n      userId?: string,\n      recursive: boolean,\n    },\n    session: InternalSession | null,\n  ): Promise<ProjectPermissionsCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      `/project-permissions?${new URLSearchParams(filterUndefined({\n        user_id: options.userId,\n        recursive: options.recursive.toString(),\n      }))}`,\n      {},\n      session,\n    );\n    const result = await response.json() as ProjectPermissionsCrud['Server']['List'];\n    return result.items;\n  }\n\n  async listServerUsers(options: (\n    & {\n      cursor?: string,\n      limit?: number,\n      orderBy?: 'signedUpAt' | 'lastActiveAt',\n      desc?: boolean,\n      query?: string,\n      excludedEmailDomains?: string[],\n      includeRestricted?: boolean,\n      teamId?: string,\n    }\n    & (\n      {\n        includeAnonymous?: boolean,\n        onlyAnonymous?: false,\n      }\n      | {\n        includeAnonymous: true,\n        onlyAnonymous: true,\n      }\n    )\n  )): Promise<UsersCrud['Server']['List']> {\n    const searchParams = new URLSearchParams(filterUndefined({\n      cursor: options.cursor,\n      limit: options.limit?.toString(),\n      desc: options.desc?.toString(),\n      team_id: options.teamId,\n      ...options.orderBy ? {\n        order_by: {\n          signedUpAt: \"signed_up_at\",\n          lastActiveAt: \"last_active_at\",\n        }[options.orderBy],\n      } : {},\n      ...options.query ? {\n        query: options.query,\n      } : {},\n      ...options.excludedEmailDomains && options.excludedEmailDomains.length > 0 ? {\n        excluded_email_domains: options.excludedEmailDomains.join(\",\"), // backend expects comma-separated list of domains.\n      } : {},\n      ...options.includeRestricted ? {\n        include_restricted: 'true',\n      } : {},\n      ...options.includeAnonymous ? {\n        include_anonymous: 'true',\n      } : {},\n      ...options.onlyAnonymous ? {\n        only_anonymous: 'true',\n      } : {},\n    }));\n    const response = await this.sendServerRequest(\"/users?\" + searchParams.toString(), {}, null);\n    return await response.json();\n  }\n\n  async listServerTeams(options?: {\n    userId?: string,\n  }): Promise<TeamsCrud['Server']['Read'][]> {\n    const result = await this.listServerTeamsPaginated(options);\n    return result.items;\n  }\n\n  async listServerTeamsPaginated(options?: {\n    userId?: string,\n    orderBy?: 'createdAt',\n    desc?: boolean,\n    cursor?: string,\n    limit?: number,\n    query?: string,\n  }): Promise<TeamsCrud['Server']['List']> {\n    const response = await this.sendServerRequest(\n      `/teams?${new URLSearchParams(filterUndefined({\n        user_id: options?.userId,\n        // SDK option uses camelCase `createdAt`; backend uses snake_case.\n        order_by: options?.orderBy === 'createdAt' ? 'created_at' : options?.orderBy,\n        desc: options?.desc !== undefined ? String(options.desc) : undefined,\n        cursor: options?.cursor,\n        limit: options?.limit?.toString(),\n        query: options?.query,\n      }))}`,\n      {},\n      null\n    );\n    return await response.json() as TeamsCrud['Server']['List'];\n  }\n\n  async getServerTeam(teamId: string): Promise<TeamsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      `/teams/${teamId}`,\n      {},\n      null\n    );\n    return await response.json();\n  }\n\n  async listServerTeamUsers(teamId: string): Promise<UsersCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(`/users?team_id=${teamId}`, {}, null);\n    const result = await response.json() as UsersCrud['Server']['List'];\n    return result.items;\n  }\n\n  /* when passing a session, the user will be added to the team */\n  async createServerTeam(data: TeamsCrud['Server']['Create']): Promise<TeamsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      \"/teams\",\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null\n    );\n    return await response.json();\n  }\n\n  async updateServerTeam(teamId: string, data: TeamsCrud['Server']['Update']): Promise<TeamsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/teams/${teamId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async deleteServerTeam(teamId: string): Promise<void> {\n    await this.sendServerRequest(\n      urlString`/teams/${teamId}`,\n      { method: \"DELETE\" },\n      null,\n    );\n  }\n\n  async addServerUserToTeam(options: {\n    userId: string,\n    teamId: string,\n  }): Promise<TeamMembershipsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/team-memberships/${options.teamId}/${options.userId}`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async removeServerUserFromTeam(options: {\n    userId: string,\n    teamId: string,\n  }) {\n    await this.sendServerRequest(\n      urlString`/team-memberships/${options.teamId}/${options.userId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async listServerUserTeamInvitations(userId: string): Promise<TeamInvitationCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      \"/team-invitations?\" + new URLSearchParams({ user_id: userId }),\n      {},\n      null,\n    );\n    const result = await response.json() as TeamInvitationCrud['Server']['List'];\n    return result.items;\n  }\n\n  async acceptServerTeamInvitationById(\n    invitationId: string,\n    userId: string,\n  ) {\n    await this.sendServerRequest(\n      urlString`/team-invitations/${invitationId}/accept` + \"?\" + new URLSearchParams({ user_id: userId }),\n      { method: \"POST\" },\n      null,\n    );\n  }\n\n  async updateServerUser(userId: string, update: UsersCrud['Server']['Update']): Promise<UsersCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/users/${userId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(update),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async createServerProviderAccessToken(\n    userId: string,\n    provider: string,\n    scope: string,\n  ): Promise<ConnectedAccountAccessTokenCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/connected-accounts/${userId}/${provider}/access-token`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({ scope }),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  /**\n   * Get access token for a specific connected account by provider ID and provider account ID.\n   * This is the preferred method when dealing with multiple accounts of the same provider.\n   */\n  async createServerProviderAccessTokenByAccount(\n    userId: string,\n    providerId: string,\n    providerAccountId: string,\n    scope: string,\n  ): Promise<ConnectedAccountAccessTokenCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/connected-accounts/${userId}/${providerId}/${providerAccountId}/access-token`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({ scope }),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  /**\n   * List all connected accounts for a user.\n   */\n  async listServerConnectedAccounts(\n    userId: string,\n  ): Promise<ConnectedAccountCrud['Server']['List']> {\n    const response = await this.sendServerRequest(\n      urlString`/connected-accounts/${userId}`,\n      { method: \"GET\" },\n      null,\n    );\n    return await response.json();\n  }\n\n  async createServerUserSession(userId: string, expiresInMillis: number, isImpersonation: boolean): Promise<{ accessToken: string, refreshToken: string }> {\n    const response = await this.sendServerRequest(\n      \"/auth/sessions\",\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({\n          user_id: userId,\n          expires_in_millis: expiresInMillis,\n          is_impersonation: isImpersonation,\n        }),\n      },\n      null,\n    );\n    const result = await response.json();\n    return {\n      accessToken: result.access_token,\n      refreshToken: result.refresh_token,\n    };\n  }\n\n  async leaveServerTeam(\n    options: {\n      teamId: string,\n      userId: string,\n    },\n  ) {\n    await this.sendClientRequest(\n      urlString`/team-memberships/${options.teamId}/${options.userId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async updateServerTeamMemberProfile(options: {\n    teamId: string,\n    userId: string,\n    profile: TeamMemberProfilesCrud['Server']['Update'],\n  }) {\n    await this.sendServerRequest(\n      urlString`/team-member-profiles/${options.teamId}/${options.userId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(options.profile),\n      },\n      null,\n    );\n  }\n\n  async grantServerTeamUserPermission(teamId: string, userId: string, permissionId: string) {\n    await this.sendServerRequest(\n      urlString`/team-permissions/${teamId}/${userId}/${permissionId}`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async grantServerProjectPermission(userId: string, permissionId: string) {\n    await this.sendServerRequest(\n      urlString`/project-permissions/${userId}/${permissionId}`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async revokeServerTeamUserPermission(teamId: string, userId: string, permissionId: string) {\n    await this.sendServerRequest(\n      urlString`/team-permissions/${teamId}/${userId}/${permissionId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async revokeServerProjectPermission(userId: string, permissionId: string) {\n    await this.sendServerRequest(\n      urlString`/project-permissions/${userId}/${permissionId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async deleteServerUser(userId: string) {\n    await this.sendServerRequest(\n      urlString`/users/${userId}`,\n      {\n        method: \"DELETE\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n  }\n\n  async createServerContactChannel(\n    data: ContactChannelsCrud['Server']['Create'],\n  ): Promise<ContactChannelsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      \"/contact-channels\",\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async updateServerContactChannel(\n    userId: string,\n    contactChannelId: string,\n    data: ContactChannelsCrud['Server']['Update'],\n  ): Promise<ContactChannelsCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/contact-channels/${userId}/${contactChannelId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async deleteServerContactChannel(\n    userId: string,\n    contactChannelId: string,\n  ): Promise<void> {\n    await this.sendServerRequest(\n      urlString`/contact-channels/${userId}/${contactChannelId}`,\n      {\n        method: \"DELETE\",\n      },\n      null,\n    );\n  }\n\n  async listServerContactChannels(\n    userId: string,\n  ): Promise<ContactChannelsCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      urlString`/contact-channels?user_id=${userId}`,\n      {\n        method: \"GET\",\n      },\n      null,\n    );\n    const json = await response.json() as ContactChannelsCrud['Server']['List'];\n    return json.items;\n  }\n\n  async listServerNotificationCategories(\n    userId: string,\n  ): Promise<NotificationPreferenceCrud['Server']['Read'][]> {\n    const response = await this.sendServerRequest(\n      urlString`/emails/notification-preference/${userId}`,\n      {\n        method: \"GET\",\n      },\n      null,\n    );\n    const json = await response.json() as NotificationPreferenceCrud['Server']['List'];\n    return json.items;\n  }\n\n  async setServerNotificationsEnabled(\n    userId: string,\n    notificationCategoryId: string,\n    enabled: boolean,\n  ): Promise<void> {\n    await this.sendServerRequest(\n      urlString`/emails/notification-preference/${userId}/${notificationCategoryId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({\n          enabled,\n        }),\n      },\n      null,\n    );\n  }\n\n  async sendServerContactChannelVerificationEmail(\n    userId: string,\n    contactChannelId: string,\n    callbackUrl: string,\n  ): Promise<void> {\n    await this.sendServerRequest(\n      urlString`/contact-channels/${userId}/${contactChannelId}/send-verification-code`,\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify({ callback_url: callbackUrl }),\n      },\n      null,\n    );\n  }\n\n\n  async listServerSessions(userId: string): Promise<SessionsCrud['Server']['List']> {\n    const response = await this.sendServerRequest(\n      urlString`/auth/sessions?user_id=${userId}`,\n      {\n        method: \"GET\",\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async deleteServerSession(sessionId: string) {\n    await this.sendServerRequest(\n      urlString`/auth/sessions/${sessionId}`,\n      {\n        method: \"DELETE\",\n      },\n      null,\n    );\n  }\n\n\n  async sendServerTeamInvitation(options: {\n    email: string,\n    teamId: string,\n    callbackUrl: string,\n  }): Promise<void> {\n    await this.sendServerRequest(\n      \"/team-invitations/send-code\",\n      {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\"\n        },\n        body: JSON.stringify({\n          email: options.email,\n          team_id: options.teamId,\n          callback_url: options.callbackUrl,\n        }),\n      },\n      null,\n    );\n  }\n\n  async updatePassword(\n    options: { oldPassword: string, newPassword: string },\n  ): Promise<KnownErrors[\"PasswordConfirmationMismatch\"] | KnownErrors[\"PasswordRequirementsNotMet\"] | undefined> {\n    const res = await this.sendServerRequestAndCatchKnownError(\n      \"/auth/password/update\",\n      {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\"\n        },\n        body: JSON.stringify({\n          old_password: options.oldPassword,\n          new_password: options.newPassword,\n        }),\n      },\n      null,\n      [KnownErrors.PasswordConfirmationMismatch, KnownErrors.PasswordRequirementsNotMet]\n    );\n\n    if (res.status === \"error\") {\n      return res.error;\n    }\n  }\n\n  // OAuth Providers CRUD operations\n  async createServerOAuthProvider(\n    data: OAuthProviderCrud['Server']['Create'],\n  ): Promise<OAuthProviderCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      \"/oauth-providers\",\n      {\n        method: \"POST\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n\n  async listServerOAuthProviders(\n    options: {\n      user_id?: string,\n    } = {},\n  ): Promise<OAuthProviderCrud['Server']['Read'][]> {\n    const queryParams = new URLSearchParams(filterUndefined(options));\n    const response = await this.sendServerRequest(\n      `/oauth-providers${queryParams.toString() ? `?${queryParams.toString()}` : ''}`,\n      {\n        method: \"GET\",\n      },\n      null,\n    );\n    const result = await response.json();\n    return result.items;\n  }\n\n  async updateServerOAuthProvider(\n    userId: string,\n    providerId: string,\n    data: OAuthProviderCrud['Server']['Update'],\n  ): Promise<OAuthProviderCrud['Server']['Read']> {\n    const response = await this.sendServerRequest(\n      urlString`/oauth-providers/${userId}/${providerId}`,\n      {\n        method: \"PATCH\",\n        headers: {\n          \"content-type\": \"application/json\",\n        },\n        body: JSON.stringify(data),\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async deleteServerOAuthProvider(\n    userId: string,\n    providerId: string,\n  ): Promise<void> {\n    const response = await this.sendServerRequest(\n      urlString`/oauth-providers/${userId}/${providerId}`,\n      {\n        method: \"DELETE\",\n      },\n      null,\n    );\n    return await response.json();\n  }\n\n  async sendEmail(options: {\n    userIds?: string[],\n    allUsers?: true,\n    themeId?: string | null | false,\n    html?: string,\n    subject?: string,\n    notificationCategoryName?: string,\n    templateId?: string,\n    variables?: Record<string, any>,\n    draftId?: string,\n    scheduledAt?: Date,\n  }): Promise<Result<void, KnownErrors[\"RequiresCustomEmailServer\"] | KnownErrors[\"SchemaError\"] | KnownErrors[\"UserIdDoesNotExist\"]>> {\n    const res = await this.sendServerRequest(\n      \"/emails/send-email\",\n      {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\"\n        },\n        body: JSON.stringify({\n          user_ids: options.userIds,\n          all_users: options.allUsers,\n          theme_id: options.themeId,\n          html: options.html,\n          subject: options.subject,\n          notification_category_name: options.notificationCategoryName,\n          template_id: options.templateId,\n          variables: options.variables,\n          draft_id: options.draftId,\n          scheduled_at_millis: options.scheduledAt?.getTime(),\n        }),\n      },\n      null,\n    );\n    return Result.ok(undefined);\n  }\n\n  async getEmailDeliveryInfo(): Promise<{\n    stats: {\n      hour: { sent: number, bounced: number, marked_as_spam: number },\n      day: { sent: number, bounced: number, marked_as_spam: number },\n      week: { sent: number, bounced: number, marked_as_spam: number },\n      month: { sent: number, bounced: number, marked_as_spam: number },\n    },\n    capacity: {\n      rate_per_second: number,\n      boost_multiplier: number,\n      penalty_factor: number,\n      is_boost_active: boolean,\n      boost_expires_at: string | null,\n    },\n  }> {\n    const res = await this.sendServerRequest(\n      \"/emails/delivery-info\",\n      {\n        method: \"GET\",\n        headers: {\n          \"Content-Type\": \"application/json\"\n        },\n      },\n      null,\n    );\n    return await res.json();\n  }\n\n  async activateEmailCapacityBoost(): Promise<{ expires_at: string }> {\n    const res = await this.sendServerRequest(\n      \"/emails/capacity-boost\",\n      {\n        method: \"POST\",\n        headers: {\n          \"Content-Type\": \"application/json\"\n        },\n        body: JSON.stringify({}),\n      },\n      null,\n    );\n    return await res.json();\n  }\n\n  async updateItemQuantity(\n    options: (\n      { itemId: string, userId: string } |\n      { itemId: string, teamId: string } |\n      { itemId: string, customCustomerId: string }\n    ),\n    data: ItemCrud['Server']['Update'],\n  ): Promise<void> {\n    let customerType: \"user\" | \"team\" | \"custom\";\n    let customerId: string;\n    const itemId: string = options.itemId;\n\n    if (\"userId\" in options) {\n      customerType = \"user\";\n      customerId = options.userId;\n    } else if (\"teamId\" in options) {\n      customerType = \"team\";\n      customerId = options.teamId;\n    } else if (\"customCustomerId\" in options) {\n      customerType = \"custom\";\n      customerId = options.customCustomerId;\n    } else {\n      throw new HexclaveAssertionError(\"updateItemQuantity requires one of userId, teamId, or customCustomerId\");\n    }\n\n    const queryParams = new URLSearchParams({ allow_negative: (data.allow_negative ?? false).toString() });\n    await this.sendServerRequest(\n      `/payments/items/${customerType}/${customerId}/${itemId}/update-quantity?${queryParams.toString()}`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ delta: data.delta, expires_at: data.expires_at, description: data.description }),\n      },\n      null\n    );\n  }\n\n  async grantProduct(\n    options: {\n      customerType: \"user\" | \"team\" | \"custom\",\n      customerId: string,\n      productId?: string,\n      product?: yup.InferType<typeof inlineProductSchema>,\n      quantity?: number,\n    },\n  ): Promise<void> {\n    if (!options.productId && !options.product) {\n      throw new HexclaveAssertionError(\"grantProduct requires either productId or product\");\n    }\n    if (options.productId && options.product) {\n      throw new HexclaveAssertionError(\"grantProduct should not receive both productId and product\");\n    }\n    const body = filterUndefined({\n      product_id: options.productId,\n      product_inline: options.product,\n      quantity: options.quantity,\n    });\n    await this.sendServerRequest(\n      urlString`/payments/products/${options.customerType}/${options.customerId}`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify(body),\n      },\n      null,\n    );\n  }\n\n  async getDataVaultStoreValue(secret: string, storeId: string, key: string) {\n    const hashedKey = await hashKey(secret, key);\n    const response = await this.sendServerRequestAndCatchKnownError(\n      `/data-vault/stores/${storeId}/get`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ hashed_key: hashedKey }),\n      },\n      null,\n      [KnownErrors.DataVaultStoreHashedKeyDoesNotExist] as const,\n    );\n    if (response.status === \"error\") {\n      if (KnownErrors.DataVaultStoreHashedKeyDoesNotExist.isInstance(response.error)) {\n        return null;\n      } else {\n        throw new HexclaveAssertionError(\"Unexpected uncaught error\", { cause: response.error });\n      }\n    }\n    const json = await response.data.json();\n    const encryptedValue = json.encrypted_value;\n    if (typeof encryptedValue !== \"string\") throw new HexclaveAssertionError(\"encrypted_value is not a string\", { type: typeof encryptedValue });\n    return await decryptValue(secret, key, encryptedValue);\n  }\n\n  async setDataVaultStoreValue(secret: string, storeId: string, key: string, value: string) {\n    const hashedKey = await hashKey(secret, key);\n    const encryptedValue = await encryptValue(secret, key, value);\n    await this.sendServerRequest(\n      `/data-vault/stores/${storeId}/set`,\n      {\n        method: \"POST\",\n        headers: { \"content-type\": \"application/json\" },\n        body: JSON.stringify({ hashed_key: hashedKey, encrypted_value: encryptedValue }),\n      },\n      null,\n    );\n  }\n\n  async initiateServerPasskeyRegistration(userId: string): Promise<Result<{ options_json: any, code: string }, KnownErrors[]>> {\n    // Create a temporary session for this user to use for passkey registration\n    // TODO instead of creating a new session, this should just call the endpoint in a way in which it doesn't require a session\n    // (currently this shows up on session history etc... not ideal)\n    const { accessToken, refreshToken } = await this.createServerUserSession(userId, 60000 * 2, false); // 2 minute session\n    const tempSession = new InternalSession({\n      accessToken,\n      refreshToken,\n      refreshAccessTokenCallback: async () => null, // No refresh for temporary sessions\n    });\n\n    // Use the existing initiatePasskeyRegistration method with the temporary session\n    return await this.initiatePasskeyRegistration({}, tempSession);\n  }\n}\n"],"mappings":";;;;;;;;;;AAwCA,IAAa,0BAAb,cAA6C,wBAAwB;CACnE,YAAY,AAAgB,SAAuC;AACjE,QAAM,QAAQ;EADY;;CAI5B,MAAgB,kBAAkB,MAAc,SAAsB,SAAiC,cAAkC,UAAU;AACjJ,SAAO,MAAM,KAAK,kBAChB,MACA;GACE,GAAG;GACH,SAAS;IAEP,gCAAgC,qBAAqB,KAAK,UAAU,KAAK,QAAQ,kBAAkB;IACnG,GAAG,QAAQ;IACZ;GACF,EACD,SACA,YACD;;CAGH,MAAe,mBACb,cACA,YACA,SAUC;AAMD,SAAO,OALU,MAAM,KAAK,kBAC1B,SAAS,qBAAqB,aAAa,GAAG,cAC9C,EAAE,EACF,QACD,EACqB,MAAM;;CAG9B,MAAe,uCACb,cACA,YACA,SAIC;AAYD,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,4BAA4B,aAAa,GAAG,WAAW,gBAChE;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,QACD,EACqB,MAAM;;CAG9B,MAAe,+CACb,cACA,YACA,eACA,SASC;AAcD,SAAO,OAbU,MAAM,KAAK,kBAC1B,SAAS,4BAA4B,aAAa,GAAG,WAAW,eAChE;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EACnB,iBAAiB,eAClB,CAAC;GACH,EACD,QACD,EACqB,MAAM;;CAI9B,MAAgB,oCACd,MACA,gBACA,kBACA,eASC;AACD,MAAI;AACF,UAAO,OAAO,GAAG,MAAM,KAAK,kBAAkB,MAAM,gBAAgB,iBAAiB,CAAC;WAC/E,GAAG;AACV,QAAK,MAAM,aAAa,cACtB,KAAI,UAAU,WAAW,EAAE,CACzB,QAAO,OAAO,MAAM,EAAqB;AAG7C,SAAM;;;CAIV,MAAM,iBAAiB,MAA2E;AAYhG,SAAO,OAXU,MAAM,KAAK,kBAC1B,UACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,qBAAqB,SAA6E;EACtG,MAAM,kBAAkB,MAAM,KAAK,oCACjC,aACA,EAAE,EACF,SACA,CAAC,YAAY,4BAA4B,CAC1C;AACD,MAAI,gBAAgB,WAAW,QAC7B,KAAI,YAAY,4BAA4B,WAAW,gBAAgB,MAAM,CAC3E,QAAO;MAEP,OAAM,IAAI,uBAAuB,6BAA6B,EAAE,OAAO,gBAAgB,OAAO,CAAC;EAInG,MAAM,OAA0C,MAD/B,gBAAgB,KAC8B,MAAM;AACrE,MAAI,CAAE,KAAc,OAAM,IAAI,uBAAuB,wDAAwD;AAC7G,SAAO;;CAGT,MAAM,kBAAkB,QAA8D;EACpF,MAAM,kBAAkB,MAAM,KAAK,oCACjC,SAAS,UAAU,UACnB,EAAE,EACF,MACA,CAAC,YAAY,aAAa,CAC3B;AACD,MAAI,gBAAgB,WAAW,QAC7B,QAAO,OAAO,MAAM,gBAAgB,MAAM;EAE5C,MAAM,OAAoC,MAAM,gBAAgB,KAAK,MAAM;AAC3E,SAAO,OAAO,GAAG,KAAK;;CAGxB,MAAM,0BAA0B,SAEoB;AAOlD,UADe,OALE,MAAM,KAAK,kBAC1B,SAAS,6BAA6B,QAAQ,UAC9C,EAAE,EACF,KACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,2BAA2B,cAAsB,QAAgB;AACrE,QAAM,KAAK,kBACT,SAAS,qBAAqB,aAAa,WAAW,UACtD,EAAE,QAAQ,UAAU,EACpB,KACD;;CAGH,MAAM,6BACJ,SAGqD;AAOrD,UADe,OALE,MAAM,KAAK,kBAC1B,SAAS,iCAAiC,QAAQ,UAClD,EAAE,EACF,KACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,2BACJ,SAImD;AAMnD,SAAO,OALU,MAAM,KAAK,kBAC1B,SAAS,yBAAyB,QAAQ,OAAO,GAAG,QAAQ,UAC5D,EAAE,EACF,KACD,EACqB,MAAM;;CAG9B,MAAM,0BACJ,SAKA,SACkD;AAWlD,UADe,OATE,MAAM,KAAK,kBAC1B,qBAAqB,IAAI,gBAAgB,gBAAgB;GACvD,SAAS,QAAQ;GACjB,SAAS,QAAQ;GACjB,WAAW,QAAQ,UAAU,UAAU;GACxC,CAAC,CAAC,IACH,EAAE,EACF,QACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,6BACJ,SAIA,SACqD;AAUrD,UADe,OARE,MAAM,KAAK,kBAC1B,wBAAwB,IAAI,gBAAgB,gBAAgB;GAC1D,SAAS,QAAQ;GACjB,WAAW,QAAQ,UAAU,UAAU;GACxC,CAAC,CAAC,IACH,EAAE,EACF,QACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,gBAAgB,SAqBmB;EACvC,MAAM,eAAe,IAAI,gBAAgB,gBAAgB;GACvD,QAAQ,QAAQ;GAChB,OAAO,QAAQ,OAAO,UAAU;GAChC,MAAM,QAAQ,MAAM,UAAU;GAC9B,SAAS,QAAQ;GACjB,GAAG,QAAQ,UAAU,EACnB,UAAU;IACR,YAAY;IACZ,cAAc;IACf,CAAC,QAAQ,UACX,GAAG,EAAE;GACN,GAAG,QAAQ,QAAQ,EACjB,OAAO,QAAQ,OAChB,GAAG,EAAE;GACN,GAAG,QAAQ,wBAAwB,QAAQ,qBAAqB,SAAS,IAAI,EAC3E,wBAAwB,QAAQ,qBAAqB,KAAK,IAAI,EAC/D,GAAG,EAAE;GACN,GAAG,QAAQ,oBAAoB,EAC7B,oBAAoB,QACrB,GAAG,EAAE;GACN,GAAG,QAAQ,mBAAmB,EAC5B,mBAAmB,QACpB,GAAG,EAAE;GACN,GAAG,QAAQ,gBAAgB,EACzB,gBAAgB,QACjB,GAAG,EAAE;GACP,CAAC,CAAC;AAEH,SAAO,OADU,MAAM,KAAK,kBAAkB,YAAY,aAAa,UAAU,EAAE,EAAE,EAAE,KAAK,EACtE,MAAM;;CAG9B,MAAM,gBAAgB,SAEqB;AAEzC,UADe,MAAM,KAAK,yBAAyB,QAAQ,EAC7C;;CAGhB,MAAM,yBAAyB,SAOU;AAcvC,SAAO,OAbU,MAAM,KAAK,kBAC1B,UAAU,IAAI,gBAAgB,gBAAgB;GAC5C,SAAS,SAAS;GAElB,UAAU,SAAS,YAAY,cAAc,eAAe,SAAS;GACrE,MAAM,SAAS,SAAS,SAAY,OAAO,QAAQ,KAAK,GAAG;GAC3D,QAAQ,SAAS;GACjB,OAAO,SAAS,OAAO,UAAU;GACjC,OAAO,SAAS;GACjB,CAAC,CAAC,IACH,EAAE,EACF,KACD,EACqB,MAAM;;CAG9B,MAAM,cAAc,QAAsD;AAMxE,SAAO,OALU,MAAM,KAAK,kBAC1B,UAAU,UACV,EAAE,EACF,KACD,EACqB,MAAM;;CAG9B,MAAM,oBAAoB,QAAwD;AAGhF,UADe,OADE,MAAM,KAAK,kBAAkB,kBAAkB,UAAU,EAAE,EAAE,KAAK,EACrD,MAAM,EACtB;;CAIhB,MAAM,iBAAiB,MAA2E;AAYhG,SAAO,OAXU,MAAM,KAAK,kBAC1B,UACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,iBAAiB,QAAgB,MAA2E;AAYhH,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,UAAU,UACnB;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,iBAAiB,QAA+B;AACpD,QAAM,KAAK,kBACT,SAAS,UAAU,UACnB,EAAE,QAAQ,UAAU,EACpB,KACD;;CAGH,MAAM,oBAAoB,SAGyB;AAYjD,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,qBAAqB,QAAQ,OAAO,GAAG,QAAQ,UACxD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,yBAAyB,SAG5B;AACD,QAAM,KAAK,kBACT,SAAS,qBAAqB,QAAQ,OAAO,GAAG,QAAQ,UACxD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,8BAA8B,QAAiE;AAOnG,UADe,OALE,MAAM,KAAK,kBAC1B,uBAAuB,IAAI,gBAAgB,EAAE,SAAS,QAAQ,CAAC,EAC/D,EAAE,EACF,KACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,+BACJ,cACA,QACA;AACA,QAAM,KAAK,kBACT,SAAS,qBAAqB,aAAa,WAAW,MAAM,IAAI,gBAAgB,EAAE,SAAS,QAAQ,CAAC,EACpG,EAAE,QAAQ,QAAQ,EAClB,KACD;;CAGH,MAAM,iBAAiB,QAAgB,QAA6E;AAYlH,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,UAAU,UACnB;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,OAAO;GAC7B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,gCACJ,QACA,UACA,OAC4D;AAY5D,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,uBAAuB,OAAO,GAAG,SAAS,gBACnD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;GAChC,EACD,KACD,EACqB,MAAM;;;;;;CAO9B,MAAM,yCACJ,QACA,YACA,mBACA,OAC4D;AAY5D,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,uBAAuB,OAAO,GAAG,WAAW,GAAG,kBAAkB,gBAC1E;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,OAAO,CAAC;GAChC,EACD,KACD,EACqB,MAAM;;;;;CAM9B,MAAM,4BACJ,QACiD;AAMjD,SAAO,OALU,MAAM,KAAK,kBAC1B,SAAS,uBAAuB,UAChC,EAAE,QAAQ,OAAO,EACjB,KACD,EACqB,MAAM;;CAG9B,MAAM,wBAAwB,QAAgB,iBAAyB,iBAAkF;EAgBvJ,MAAM,SAAS,OAfE,MAAM,KAAK,kBAC1B,kBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU;IACnB,SAAS;IACT,mBAAmB;IACnB,kBAAkB;IACnB,CAAC;GACH,EACD,KACD,EAC6B,MAAM;AACpC,SAAO;GACL,aAAa,OAAO;GACpB,cAAc,OAAO;GACtB;;CAGH,MAAM,gBACJ,SAIA;AACA,QAAM,KAAK,kBACT,SAAS,qBAAqB,QAAQ,OAAO,GAAG,QAAQ,UACxD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,8BAA8B,SAIjC;AACD,QAAM,KAAK,kBACT,SAAS,yBAAyB,QAAQ,OAAO,GAAG,QAAQ,UAC5D;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,QAAQ,QAAQ;GACtC,EACD,KACD;;CAGH,MAAM,8BAA8B,QAAgB,QAAgB,cAAsB;AACxF,QAAM,KAAK,kBACT,SAAS,qBAAqB,OAAO,GAAG,OAAO,GAAG,gBAClD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,6BAA6B,QAAgB,cAAsB;AACvE,QAAM,KAAK,kBACT,SAAS,wBAAwB,OAAO,GAAG,gBAC3C;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,+BAA+B,QAAgB,QAAgB,cAAsB;AACzF,QAAM,KAAK,kBACT,SAAS,qBAAqB,OAAO,GAAG,OAAO,GAAG,gBAClD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,8BAA8B,QAAgB,cAAsB;AACxE,QAAM,KAAK,kBACT,SAAS,wBAAwB,OAAO,GAAG,gBAC3C;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,iBAAiB,QAAgB;AACrC,QAAM,KAAK,kBACT,SAAS,UAAU,UACnB;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD;;CAGH,MAAM,2BACJ,MACgD;AAYhD,SAAO,OAXU,MAAM,KAAK,kBAC1B,qBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,2BACJ,QACA,kBACA,MACgD;AAYhD,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,qBAAqB,OAAO,GAAG,oBACxC;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,2BACJ,QACA,kBACe;AACf,QAAM,KAAK,kBACT,SAAS,qBAAqB,OAAO,GAAG,oBACxC,EACE,QAAQ,UACT,EACD,KACD;;CAGH,MAAM,0BACJ,QACkD;AASlD,UADa,OAPI,MAAM,KAAK,kBAC1B,SAAS,6BAA6B,UACtC,EACE,QAAQ,OACT,EACD,KACD,EAC2B,MAAM,EACtB;;CAGd,MAAM,iCACJ,QACyD;AASzD,UADa,OAPI,MAAM,KAAK,kBAC1B,SAAS,mCAAmC,UAC5C,EACE,QAAQ,OACT,EACD,KACD,EAC2B,MAAM,EACtB;;CAGd,MAAM,8BACJ,QACA,wBACA,SACe;AACf,QAAM,KAAK,kBACT,SAAS,mCAAmC,OAAO,GAAG,0BACtD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EACnB,SACD,CAAC;GACH,EACD,KACD;;CAGH,MAAM,0CACJ,QACA,kBACA,aACe;AACf,QAAM,KAAK,kBACT,SAAS,qBAAqB,OAAO,GAAG,iBAAiB,0BACzD;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,cAAc,aAAa,CAAC;GACpD,EACD,KACD;;CAIH,MAAM,mBAAmB,QAAyD;AAQhF,SAAO,OAPU,MAAM,KAAK,kBAC1B,SAAS,0BAA0B,UACnC,EACE,QAAQ,OACT,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,oBAAoB,WAAmB;AAC3C,QAAM,KAAK,kBACT,SAAS,kBAAkB,aAC3B,EACE,QAAQ,UACT,EACD,KACD;;CAIH,MAAM,yBAAyB,SAIb;AAChB,QAAM,KAAK,kBACT,+BACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU;IACnB,OAAO,QAAQ;IACf,SAAS,QAAQ;IACjB,cAAc,QAAQ;IACvB,CAAC;GACH,EACD,KACD;;CAGH,MAAM,eACJ,SAC8G;EAC9G,MAAM,MAAM,MAAM,KAAK,oCACrB,yBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU;IACnB,cAAc,QAAQ;IACtB,cAAc,QAAQ;IACvB,CAAC;GACH,EACD,MACA,CAAC,YAAY,8BAA8B,YAAY,2BAA2B,CACnF;AAED,MAAI,IAAI,WAAW,QACjB,QAAO,IAAI;;CAKf,MAAM,0BACJ,MAC8C;AAY9C,SAAO,OAXU,MAAM,KAAK,kBAC1B,oBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAI9B,MAAM,yBACJ,UAEI,EAAE,EAC0C;EAChD,MAAM,cAAc,IAAI,gBAAgB,gBAAgB,QAAQ,CAAC;AASjE,UADe,OAPE,MAAM,KAAK,kBAC1B,mBAAmB,YAAY,UAAU,GAAG,IAAI,YAAY,UAAU,KAAK,MAC3E,EACE,QAAQ,OACT,EACD,KACD,EAC6B,MAAM,EACtB;;CAGhB,MAAM,0BACJ,QACA,YACA,MAC8C;AAY9C,SAAO,OAXU,MAAM,KAAK,kBAC1B,SAAS,oBAAoB,OAAO,GAAG,cACvC;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,0BACJ,QACA,YACe;AAQf,SAAO,OAPU,MAAM,KAAK,kBAC1B,SAAS,oBAAoB,OAAO,GAAG,cACvC,EACE,QAAQ,UACT,EACD,KACD,EACqB,MAAM;;CAG9B,MAAM,UAAU,SAWqH;AACvH,QAAM,KAAK,kBACrB,sBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU;IACnB,UAAU,QAAQ;IAClB,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,MAAM,QAAQ;IACd,SAAS,QAAQ;IACjB,4BAA4B,QAAQ;IACpC,aAAa,QAAQ;IACrB,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,qBAAqB,QAAQ,aAAa,SAAS;IACpD,CAAC;GACH,EACD,KACD;AACD,SAAO,OAAO,GAAG,OAAU;;CAG7B,MAAM,uBAcH;AAWD,SAAO,OAVK,MAAM,KAAK,kBACrB,yBACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACF,EACD,KACD,EACgB,MAAM;;CAGzB,MAAM,6BAA8D;AAYlE,SAAO,OAXK,MAAM,KAAK,kBACrB,0BACA;GACE,QAAQ;GACR,SAAS,EACP,gBAAgB,oBACjB;GACD,MAAM,KAAK,UAAU,EAAE,CAAC;GACzB,EACD,KACD,EACgB,MAAM;;CAGzB,MAAM,mBACJ,SAKA,MACe;EACf,IAAI;EACJ,IAAI;EACJ,MAAM,SAAiB,QAAQ;AAE/B,MAAI,YAAY,SAAS;AACvB,kBAAe;AACf,gBAAa,QAAQ;aACZ,YAAY,SAAS;AAC9B,kBAAe;AACf,gBAAa,QAAQ;aACZ,sBAAsB,SAAS;AACxC,kBAAe;AACf,gBAAa,QAAQ;QAErB,OAAM,IAAI,uBAAuB,yEAAyE;EAG5G,MAAM,cAAc,IAAI,gBAAgB,EAAE,iBAAiB,KAAK,kBAAkB,OAAO,UAAU,EAAE,CAAC;AACtG,QAAM,KAAK,kBACT,mBAAmB,aAAa,GAAG,WAAW,GAAG,OAAO,mBAAmB,YAAY,UAAU,IACjG;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU;IAAE,OAAO,KAAK;IAAO,YAAY,KAAK;IAAY,aAAa,KAAK;IAAa,CAAC;GACxG,EACD,KACD;;CAGH,MAAM,aACJ,SAOe;AACf,MAAI,CAAC,QAAQ,aAAa,CAAC,QAAQ,QACjC,OAAM,IAAI,uBAAuB,oDAAoD;AAEvF,MAAI,QAAQ,aAAa,QAAQ,QAC/B,OAAM,IAAI,uBAAuB,6DAA6D;EAEhG,MAAM,OAAO,gBAAgB;GAC3B,YAAY,QAAQ;GACpB,gBAAgB,QAAQ;GACxB,UAAU,QAAQ;GACnB,CAAC;AACF,QAAM,KAAK,kBACT,SAAS,sBAAsB,QAAQ,aAAa,GAAG,QAAQ,cAC/D;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU,KAAK;GAC3B,EACD,KACD;;CAGH,MAAM,uBAAuB,QAAgB,SAAiB,KAAa;EACzE,MAAM,YAAY,MAAM,QAAQ,QAAQ,IAAI;EAC5C,MAAM,WAAW,MAAM,KAAK,oCAC1B,sBAAsB,QAAQ,OAC9B;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU,EAAE,YAAY,WAAW,CAAC;GAChD,EACD,MACA,CAAC,YAAY,oCAAoC,CAClD;AACD,MAAI,SAAS,WAAW,QACtB,KAAI,YAAY,oCAAoC,WAAW,SAAS,MAAM,CAC5E,QAAO;MAEP,OAAM,IAAI,uBAAuB,6BAA6B,EAAE,OAAO,SAAS,OAAO,CAAC;EAI5F,MAAM,kBADO,MAAM,SAAS,KAAK,MAAM,EACX;AAC5B,MAAI,OAAO,mBAAmB,SAAU,OAAM,IAAI,uBAAuB,mCAAmC,EAAE,MAAM,OAAO,gBAAgB,CAAC;AAC5I,SAAO,MAAM,aAAa,QAAQ,KAAK,eAAe;;CAGxD,MAAM,uBAAuB,QAAgB,SAAiB,KAAa,OAAe;EACxF,MAAM,YAAY,MAAM,QAAQ,QAAQ,IAAI;EAC5C,MAAM,iBAAiB,MAAM,aAAa,QAAQ,KAAK,MAAM;AAC7D,QAAM,KAAK,kBACT,sBAAsB,QAAQ,OAC9B;GACE,QAAQ;GACR,SAAS,EAAE,gBAAgB,oBAAoB;GAC/C,MAAM,KAAK,UAAU;IAAE,YAAY;IAAW,iBAAiB;IAAgB,CAAC;GACjF,EACD,KACD;;CAGH,MAAM,kCAAkC,QAAqF;EAI3H,MAAM,EAAE,aAAa,iBAAiB,MAAM,KAAK,wBAAwB,QAAQ,MAAQ,GAAG,MAAM;EAClG,MAAM,cAAc,IAAI,gBAAgB;GACtC;GACA;GACA,4BAA4B,YAAY;GACzC,CAAC;AAGF,SAAO,MAAM,KAAK,4BAA4B,EAAE,EAAE,YAAY"}

package/dist/esm/interface/webhooks.d.ts

@@ -20,9 +20,9 @@ declare const webhookEvents: readonly [WebhookEvent<yup$1.ObjectSchema<{
     client_metadata?: {} | null | undefined;
     client_read_only_metadata?: {} | null | undefined;
     server_metadata?: {} | null | undefined;
-    display_name: string;
     id: string;
     created_at_millis: number;
+    display_name: string;
     profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;
@@ -110,9 +110,9 @@ declare const webhookEvents: readonly [WebhookEvent<yup$1.ObjectSchema<{
     client_metadata?: {} | null | undefined;
     client_read_only_metadata?: {} | null | undefined;
     server_metadata?: {} | null | undefined;
-    display_name: string;
     id: string;
     created_at_millis: number;
+    display_name: string;
     profile_image_url: string | null;
   } | null;
   selected_team_id: string | null;

package/dist/esm/schema-fields.d.ts

@@ -203,6 +203,9 @@ declare const productPriceSchema: yup$1.ObjectSchema<{
   CAD: undefined;
 }, "">;
 declare const pricesSchema: yup$1.MixedSchema<Record<string, {
+  interval?: DayInterval | undefined;
+  freeTrial?: DayInterval | undefined;
+  serverOnly?: boolean | undefined;
   USD?: string | undefined;
   EUR?: string | undefined;
   GBP?: string | undefined;
@@ -210,9 +213,6 @@ declare const pricesSchema: yup$1.MixedSchema<Record<string, {
   INR?: string | undefined;
   AUD?: string | undefined;
   CAD?: string | undefined;
-  interval?: DayInterval | undefined;
-  serverOnly?: boolean | undefined;
-  freeTrial?: DayInterval | undefined;
 }>, yup$1.AnyObject, undefined, "">;
 declare const productSchema: yup$1.ObjectSchema<{
   displayName: string | undefined;
@@ -223,6 +223,9 @@ declare const productSchema: yup$1.ObjectSchema<{
   serverOnly: boolean | undefined;
   stackable: boolean | undefined;
   prices: Record<string, {
+    interval?: DayInterval | undefined;
+    freeTrial?: DayInterval | undefined;
+    serverOnly?: boolean | undefined;
     USD?: string | undefined;
     EUR?: string | undefined;
     GBP?: string | undefined;
@@ -230,9 +233,6 @@ declare const productSchema: yup$1.ObjectSchema<{
     INR?: string | undefined;
     AUD?: string | undefined;
     CAD?: string | undefined;
-    interval?: DayInterval | undefined;
-    serverOnly?: boolean | undefined;
-    freeTrial?: DayInterval | undefined;
   }>;
   includedItems: Record<string, {
     repeat?: "never" | DayInterval | undefined;
@@ -262,6 +262,9 @@ declare const productSchemaWithMetadata: yup$1.ObjectSchema<{
   serverOnly: boolean | undefined;
   stackable: boolean | undefined;
   prices: Record<string, {
+    interval?: DayInterval | undefined;
+    freeTrial?: DayInterval | undefined;
+    serverOnly?: boolean | undefined;
     USD?: string | undefined;
     EUR?: string | undefined;
     GBP?: string | undefined;
@@ -269,9 +272,6 @@ declare const productSchemaWithMetadata: yup$1.ObjectSchema<{
     INR?: string | undefined;
     AUD?: string | undefined;
     CAD?: string | undefined;
-    interval?: DayInterval | undefined;
-    serverOnly?: boolean | undefined;
-    freeTrial?: DayInterval | undefined;
   }>;
   includedItems: Record<string, {
     repeat?: "never" | DayInterval | undefined;
@@ -303,6 +303,7 @@ declare const inlineProductSchema: yup$1.ObjectSchema<{
   server_only: boolean;
   stackable: boolean;
   prices: Record<string, {
+    interval?: DayInterval | undefined;
     USD?: string | undefined;
     EUR?: string | undefined;
     GBP?: string | undefined;
@@ -310,12 +311,11 @@ declare const inlineProductSchema: yup$1.ObjectSchema<{
     INR?: string | undefined;
     AUD?: string | undefined;
     CAD?: string | undefined;
-    interval?: DayInterval | undefined;
     free_trial?: DayInterval | undefined;
   }>;
   included_items: Record<string, {
-    repeat?: "never" | DayInterval | undefined;
     quantity?: number | undefined;
+    repeat?: "never" | DayInterval | undefined;
     expires?: "never" | "when-purchase-expires" | "when-repeated" | undefined;
   }>;
   client_metadata: {} | null | undefined;
@@ -470,9 +470,9 @@ declare function yupDefinedAndNonEmptyWhen<S extends yup$1.StringSchema>(schema:
 declare const branchConfigSourceSchema: yup$1.MixedSchema<{
   workflow_path?: string | undefined;
   type: "pushed-from-github";
+  branch: string;
   owner: string;
   repo: string;
-  branch: string;
   commit_hash: string;
   config_file_path: string;
 } | {

package/dist/esm/sessions.d.ts

@@ -9,24 +9,24 @@ declare class AccessToken {
   private constructor();
   get payload(): {
     exp?: number | undefined;
+    name: string | null;
     sub: string;
-    project_id: string;
-    refresh_token_id: string;
-    email: string | null;
-    restricted_reason: {
-      type: "anonymous" | "email_not_verified" | "restricted_by_administrator";
-    } | null;
-    branch_id: string;
     iat: number;
     iss: string;
     aud: string;
+    project_id: string;
+    branch_id: string;
+    refresh_token_id: string;
     role: "authenticated";
-    name: string | null;
+    email: string | null;
     email_verified: boolean;
     selected_team_id: string | null;
     signed_up_at: number;
     is_anonymous: boolean;
     is_restricted: boolean;
+    restricted_reason: {
+      type: "anonymous" | "email_not_verified" | "restricted_by_administrator";
+    } | null;
     requires_totp_mfa: boolean;
   };
   get expiresAt(): Date;

package/dist/helpers/init-prompt.js

@@ -25,7 +25,7 @@ HEXCLAVE SETUP INSTRUCTIONS
 
 These instructions describe how to set up Hexclave.
 ${web ? `
-First of all, if you have access to a terminal, it is better to use \`npx @hexclave/cli init\`.
+First of all, use the full setup prompt below as the source of truth. Do not run the Hexclave CLI initializer unless the user explicitly asks for the CLI workflow.
 ` : ""}
 
 ${getCliProjectSetupContext(configPath)}

package/dist/helpers/init-prompt.js.map

@@ -1 +1 @@
-{"version":3,"file":"init-prompt.js","names":["aiSetupPrompt"],"sources":["../../src/helpers/init-prompt.ts"],"sourcesContent":["import { aiSetupPrompt } from \"../ai/unified-prompts/skill-site-prompt-parts/ai-setup-prompt\";\n\nfunction getCliProjectSetupContext(configPath?: string): string {\n  if (configPath != null) {\n    return `\nThe Hexclave CLI already created or linked this project to a local Hexclave development environment config file:\n\n\\`\\`\\`text\n${configPath}\n\\`\\`\\`\n\nDo not create or link another Hexclave project. When the SDK setup instructions mention creating \\`stack.config.ts\\` or wrapping the dev script with \\`stack dev --config-file\\`, use the config file path above.\n`;\n  }\n\n  return `\nThe Hexclave CLI already created or linked this project to a hosted Hexclave cloud project and wrote or printed the Hexclave environment variables.\n\nDo not create or link another Hexclave project. Use the existing environment variables in this workspace. If the variables were printed instead of written because the user declined to append them to an env file, tell the user exactly which variables still need to be added.\n`;\n}\n\nexport const createInitPrompt = (web: boolean, configPath?: string) => `=============================\nHEXCLAVE SETUP INSTRUCTIONS\n=============================\n\nThese instructions describe how to set up Hexclave.\n${web ? `\nFirst of all, if you have access to a terminal, it is better to use \\`npx @hexclave/cli init\\`.\n` : \"\"}\n\n${getCliProjectSetupContext(configPath)}\n\nUse the full setup guide below as the source of truth, with one important CLI-specific adjustment: the \"Setting up the project\" step is already complete. Use that section only to understand how the existing config/env files should connect to the SDK wiring; do not ask the user for project IDs or keys that the CLI already generated or linked.\n\nApply only the sections relevant to this project. For example, do not add Convex, Supabase, or command-line-app authentication unless the existing project already uses that surface or the user explicitly asked for it.\n\n${aiSetupPrompt}\n`;\n"],"mappings":";;;;;AAEA,SAAS,0BAA0B,YAA6B;AAC9D,KAAI,cAAc,KAChB,QAAO;;;;EAIT,WAAW;;;;;AAOX,QAAO;;;;;;AAOT,MAAa,oBAAoB,KAAc,eAAwB;;;;;EAKrE,MAAM;;IAEJ,GAAG;;EAEL,0BAA0B,WAAW,CAAC;;;;;;EAMtCA,+EAAc"}
+{"version":3,"file":"init-prompt.js","names":["aiSetupPrompt"],"sources":["../../src/helpers/init-prompt.ts"],"sourcesContent":["import { aiSetupPrompt } from \"../ai/unified-prompts/skill-site-prompt-parts/ai-setup-prompt\";\n\nfunction getCliProjectSetupContext(configPath?: string): string {\n  if (configPath != null) {\n    return `\nThe Hexclave CLI already created or linked this project to a local Hexclave development environment config file:\n\n\\`\\`\\`text\n${configPath}\n\\`\\`\\`\n\nDo not create or link another Hexclave project. When the SDK setup instructions mention creating \\`stack.config.ts\\` or wrapping the dev script with \\`stack dev --config-file\\`, use the config file path above.\n`;\n  }\n\n  return `\nThe Hexclave CLI already created or linked this project to a hosted Hexclave cloud project and wrote or printed the Hexclave environment variables.\n\nDo not create or link another Hexclave project. Use the existing environment variables in this workspace. If the variables were printed instead of written because the user declined to append them to an env file, tell the user exactly which variables still need to be added.\n`;\n}\n\nexport const createInitPrompt = (web: boolean, configPath?: string) => `=============================\nHEXCLAVE SETUP INSTRUCTIONS\n=============================\n\nThese instructions describe how to set up Hexclave.\n${web ? `\nFirst of all, use the full setup prompt below as the source of truth. Do not run the Hexclave CLI initializer unless the user explicitly asks for the CLI workflow.\n` : \"\"}\n\n${getCliProjectSetupContext(configPath)}\n\nUse the full setup guide below as the source of truth, with one important CLI-specific adjustment: the \"Setting up the project\" step is already complete. Use that section only to understand how the existing config/env files should connect to the SDK wiring; do not ask the user for project IDs or keys that the CLI already generated or linked.\n\nApply only the sections relevant to this project. For example, do not add Convex, Supabase, or command-line-app authentication unless the existing project already uses that surface or the user explicitly asked for it.\n\n${aiSetupPrompt}\n`;\n"],"mappings":";;;;;AAEA,SAAS,0BAA0B,YAA6B;AAC9D,KAAI,cAAc,KAChB,QAAO;;;;EAIT,WAAW;;;;;AAOX,QAAO;;;;;;AAOT,MAAa,oBAAoB,KAAc,eAAwB;;;;;EAKrE,MAAM;;IAEJ,GAAG;;EAEL,0BAA0B,WAAW,CAAC;;;;;;EAMtCA,+EAAc"}

package/dist/interface/admin-metrics.d.ts

@@ -150,17 +150,17 @@ declare const MetricsEmailOverviewSchema: yup.ObjectSchema<{
     activity: number;
   }[];
   daily_emails_by_status: {
-    error: number;
     date: string;
     ok: number;
+    error: number;
     in_progress: number;
   }[];
   emails_sent: number;
   recent_emails: {
-    status: string;
     id: string;
-    created_at_millis: number;
+    status: string;
     subject: string;
+    created_at_millis: number;
   }[];
   deliverability_status: {
     error: number;
@@ -292,16 +292,16 @@ declare const MetricsAnalyticsOverviewSchema: yup.ObjectSchema<{
     activity: number;
   }[];
   top_browsers: {
-    name: string;
     visitors: number;
+    name: string;
   }[];
   top_operating_systems: {
-    name: string;
     visitors: number;
+    name: string;
   }[];
   top_devices: {
-    name: string;
     visitors: number;
+    name: string;
   }[];
   conversion_rate: number | undefined;
   deltas: {} | undefined;
@@ -369,7 +369,7 @@ declare const UserActivityResponseBodySchema: yup.ObjectSchema<{
   data_points: undefined;
 }, "">;
 declare const AnalyticsClickmapKindSchema: yup.StringSchema<"team_user_hour_of_week" | "session_replay_clicks", yup.AnyObject, undefined, "">;
-declare const AnalyticsClickmapDeviceSchema: yup.StringSchema<"mobile" | "tv" | "widescreen" | "desktop" | "laptop" | "tablet", yup.AnyObject, undefined, "">;
+declare const AnalyticsClickmapDeviceSchema: yup.StringSchema<"tv" | "widescreen" | "desktop" | "laptop" | "tablet" | "mobile", yup.AnyObject, undefined, "">;
 declare const AnalyticsClickmapTokenResponseBodySchema: yup.ObjectSchema<{
   token: string;
   origin: string;
@@ -392,30 +392,30 @@ declare const AnalyticsClickmapResponseBodySchema: yup.ObjectSchema<{
   kind: "team_user_hour_of_week" | "session_replay_clicks";
   cells: {
     value: number;
-    hour: number;
     weekday: number;
+    hour: number;
   }[];
   sampling: number;
   routes: {
     path: string;
-    users: number;
     clicks: number;
+    users: number;
     replays: number;
   }[];
   users: {
-    primary_email: string | null;
-    display_name: string | null;
     id: string;
+    display_name: string | null;
+    primary_email: string | null;
     profile_image_url: string | null;
     clicks: number;
     replays: number;
     last_event_at_millis: number;
   }[];
   replays: {
-    user_id: string | null;
     id: string;
     clicks: number;
     last_event_at_millis: number;
+    user_id: string | null;
     route_path: string | null;
     viewport_width: number | null;
     viewport_height: number | null;
@@ -443,9 +443,9 @@ declare const AnalyticsClickmapResponseBodySchema: yup.ObjectSchema<{
   elements: never[];
 }, "">;
 declare const MetricsActiveUsersByCountrySchema: yup.MixedSchema<Record<string, {
-  primary_email: string | null;
-  display_name: string | null;
   id: string;
+  display_name: string | null;
+  primary_email: string | null;
   profile_image_url: string | null;
   signed_up_at_millis: number;
   last_active_at_millis: number | null;
@@ -471,25 +471,25 @@ declare const MetricsResponseBodySchema: yup.ObjectSchema<{
   }[];
   users_by_country: Record<string, number>;
   active_users_by_country: Record<string, {
-    primary_email: string | null;
-    display_name: string | null;
     id: string;
+    display_name: string | null;
+    primary_email: string | null;
     profile_image_url: string | null;
     signed_up_at_millis: number;
     last_active_at_millis: number | null;
   }[]>;
   recently_registered: {
-    primary_email: string | null;
-    display_name: string | null;
     id: string;
+    display_name: string | null;
+    primary_email: string | null;
     profile_image_url: string | null;
     signed_up_at_millis: number;
     last_active_at_millis: number | null;
   }[];
   recently_active: {
-    primary_email: string | null;
-    display_name: string | null;
     id: string;
+    display_name: string | null;
+    primary_email: string | null;
     profile_image_url: string | null;
     signed_up_at_millis: number;
     last_active_at_millis: number | null;
@@ -563,17 +563,17 @@ declare const MetricsResponseBodySchema: yup.ObjectSchema<{
     emails_by_status: Record<string, number>;
     total_emails: number;
     daily_emails_by_status: {
-      error: number;
       date: string;
       ok: number;
+      error: number;
       in_progress: number;
     }[];
     emails_sent: number;
     recent_emails: {
-      status: string;
       id: string;
-      created_at_millis: number;
+      status: string;
       subject: string;
+      created_at_millis: number;
     }[];
     deliverability_status: {
       error: number;
@@ -652,16 +652,16 @@ declare const MetricsResponseBodySchema: yup.ObjectSchema<{
       activity: number;
     }[];
     top_browsers: {
-      name: string;
       visitors: number;
+      name: string;
     }[];
     top_operating_systems: {
-      name: string;
       visitors: number;
+      name: string;
     }[];
     top_devices: {
-      name: string;
       visitors: number;
+      name: string;
     }[];
   };
 }, yup.AnyObject, {