@m5kdev/backend 0.7.0 → 0.8.0

package/dist/src/modules/auth/auth.lib.mjs

@@ -0,0 +1,232 @@
+import { logger } from "../../utils/logger.mjs";
+import { posthogCapture } from "../../utils/posthog.mjs";
+import { auth_db_exports } from "./auth.db.mjs";
+import { createOrganizationAndTeam, getActiveOrganizationAndTeam } from "./auth.utils.mjs";
+import { and, desc, eq, gte } from "drizzle-orm";
+import { betterAuth } from "better-auth";
+import { drizzleAdapter } from "better-auth/adapters/drizzle";
+import { getOAuthState } from "better-auth/api";
+import { admin, apiKey, lastLoginMethod, magicLink, organization } from "better-auth/plugins";
+//#region src/modules/auth/auth.lib.ts
+({ ...auth_db_exports });
+function createBetterAuth({ orm, schema, services, hooks, options, config }) {
+	const { email: emailService, billing: billingService } = services;
+	const { waitlist = false, provisionedAccountEmailDomain } = config ?? {};
+	const normalizedProvisionedAccountEmailDomain = provisionedAccountEmailDomain ? provisionedAccountEmailDomain.toLowerCase().replace(/^@/, "") : null;
+	const logger$1 = logger.child({ layer: "betterAuth" });
+	const getWaitlistInvitationCode = async (ctx) => {
+		let code = ctx?.headers?.get("waitlist-invitation-code");
+		if (code) return code;
+		const oauthState = await getOAuthState();
+		if (oauthState) code = oauthState.waitlistInvitationCode;
+		return code;
+	};
+	const isProvisionedAccountEmail = (email) => {
+		if (!normalizedProvisionedAccountEmailDomain) return false;
+		return email.toLowerCase().endsWith(`@${normalizedProvisionedAccountEmailDomain}`);
+	};
+	return betterAuth({
+		...options,
+		baseURL: process.env.VITE_SERVER_URL,
+		session: {
+			expiresIn: 3600 * 24 * 7,
+			updateAge: 3600 * 24,
+			cookieCache: {
+				enabled: true,
+				maxAge: 300
+			},
+			additionalFields: {
+				activeOrganizationRole: {
+					type: "string",
+					required: false,
+					defaultValue: null
+				},
+				activeTeamRole: {
+					type: "string",
+					required: false,
+					defaultValue: null
+				}
+			}
+		},
+		user: {
+			deleteUser: {
+				enabled: true,
+				sendDeleteAccountVerification: async ({ user, url }) => {
+					const result = await emailService?.sendDeleteAccountVerification(user.email, url);
+					if (result?.isErr()) {
+						logger$1.error(result.error);
+						hooks?.onError?.(result.error);
+						throw result.error;
+					}
+				}
+			},
+			additionalFields: {
+				onboarding: {
+					type: "number",
+					required: false,
+					defaultValue: null
+				},
+				preferences: {
+					type: "string",
+					required: false,
+					defaultValue: null
+				},
+				flags: {
+					type: "string",
+					required: false,
+					defaultValue: null
+				},
+				stripeCustomerId: {
+					type: "string",
+					required: false,
+					defaultValue: null,
+					input: false
+				},
+				paymentCustomerId: {
+					type: "string",
+					required: false,
+					defaultValue: null,
+					input: false
+				},
+				paymentPlanTier: {
+					type: "string",
+					required: false,
+					defaultValue: null,
+					input: false
+				},
+				paymentPlanExpiresAt: {
+					type: "number",
+					required: false,
+					defaultValue: null,
+					input: false
+				}
+			}
+		},
+		database: drizzleAdapter(orm, {
+			provider: "sqlite",
+			schema,
+			usePlural: true
+		}),
+		emailAndPassword: {
+			enabled: true,
+			requireEmailVerification: !waitlist,
+			sendResetPassword: async ({ user, url }) => {
+				const result = await emailService?.sendResetPassword(user.email, url);
+				if (result?.isErr()) {
+					logger$1.error(result.error);
+					hooks?.onError?.(result.error);
+					throw result.error;
+				}
+			}
+		},
+		emailVerification: { sendVerificationEmail: async ({ user, url }) => {
+			const result = await emailService?.sendVerification(user.email, url);
+			if (result?.isErr()) {
+				logger$1.error(result.error);
+				hooks?.onError?.(result.error);
+				throw result.error;
+			}
+		} },
+		plugins: [
+			...options?.plugins ?? [],
+			magicLink({
+				disableSignUp: true,
+				sendMagicLink: async ({ email, url, token }) => {
+					const [user] = await orm.select({ id: schema.users.id }).from(schema.users).where(eq(schema.users.email, email.toLowerCase())).limit(1);
+					if (!user) return;
+					const [claim] = await orm.select({ id: schema.waitlist.id }).from(schema.waitlist).where(and(eq(schema.waitlist.type, "ACCOUNT_CLAIM"), eq(schema.waitlist.claimUserId, user.id), eq(schema.waitlist.status, "INVITED"), gte(schema.waitlist.expiresAt, /* @__PURE__ */ new Date()))).orderBy(desc(schema.waitlist.createdAt)).limit(1);
+					if (claim) await orm.insert(schema.accountClaimMagicLinks).values({
+						claimId: claim.id,
+						userId: user.id,
+						email: email.toLowerCase(),
+						token,
+						url,
+						expiresAt: new Date(Date.now() + 1e3 * 60 * 5)
+					});
+				}
+			}),
+			admin(),
+			lastLoginMethod(),
+			organization({
+				allowUserToCreateOrganization: false,
+				teams: {
+					enabled: true,
+					allowRemovingAllTeams: false
+				},
+				sendInvitationEmail: async (data) => {
+					const invitationUrl = `${process.env.VITE_APP_URL}/organization/accept-invitation?id=${data.id}`;
+					const inviterName = data.inviter.user.name || data.inviter.user.email;
+					const result = await emailService?.sendOrganizationInvite(data.email, data.organization.name, inviterName, data.role, invitationUrl);
+					if (result?.isErr()) {
+						logger$1.error(result.error);
+						hooks?.onError?.(result.error);
+						throw result.error;
+					}
+				},
+				schema: {
+					team: { modelName: "team" },
+					teamMember: {
+						modelName: "teamMember",
+						additionalFields: { role: {
+							type: "string",
+							required: true
+						} }
+					},
+					member: { modelName: "member" },
+					invitation: { modelName: "invitation" },
+					organization: { modelName: "organization" }
+				}
+			}),
+			apiKey()
+		],
+		trustedOrigins: [process.env.VITE_APP_URL, process.env.VITE_SERVER_URL],
+		databaseHooks: {
+			user: { create: {
+				before: async (_user, ctx) => {
+					if (waitlist) {
+						const waitlistCode = await getWaitlistInvitationCode(ctx);
+						if (waitlistCode) {
+							const [waitlistInvitation] = await orm.select().from(schema.waitlist).where(and(eq(schema.waitlist.code, waitlistCode), eq(schema.waitlist.type, "WAITLIST"), eq(schema.waitlist.status, "INVITED"), gte(schema.waitlist.expiresAt, /* @__PURE__ */ new Date()))).limit(1);
+							if (!waitlistInvitation) return false;
+							await orm.update(schema.waitlist).set({
+								status: "ACCEPTED",
+								updatedAt: /* @__PURE__ */ new Date()
+							}).where(eq(schema.waitlist.id, waitlistInvitation.id));
+							return;
+						}
+					}
+					if (waitlist) return false;
+				},
+				after: async (user) => {
+					await createOrganizationAndTeam(orm, schema, user);
+					if (!isProvisionedAccountEmail(user.email)) await billingService?.createUserHook({ user });
+					posthogCapture({
+						distinctId: user.id,
+						event: "user_created",
+						properties: {
+							email: user.email,
+							name: user.name,
+							role: user.role,
+							image: user.image
+						}
+					});
+					if (hooks?.afterCreateUser) await hooks.afterCreateUser(user);
+				}
+			} },
+			session: { create: { before: async (session) => {
+				const { organizationId, teamId, organizationRole, teamRole } = await getActiveOrganizationAndTeam(orm, schema, session.userId);
+				return { data: {
+					...session,
+					activeOrganizationId: organizationId,
+					activeTeamId: teamId,
+					activeOrganizationRole: organizationRole,
+					activeTeamRole: teamRole
+				} };
+			} } }
+		}
+	});
+}
+//#endregion
+export { createBetterAuth };
+
+//# sourceMappingURL=auth.lib.mjs.map

package/dist/src/modules/auth/auth.lib.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.lib.mjs","names":["auth","logger","rootLogger"],"sources":["../../../../src/modules/auth/auth.lib.ts"],"sourcesContent":["import { type BetterAuthOptions, betterAuth } from \"better-auth\";\r\nimport { drizzleAdapter } from \"better-auth/adapters/drizzle\";\r\nimport { getOAuthState } from \"better-auth/api\";\r\nimport { admin, apiKey, lastLoginMethod, magicLink, organization } from \"better-auth/plugins\";\r\nimport { and, desc, eq, gte, type InferSelectModel } from \"drizzle-orm\";\r\nimport type { LibSQLDatabase } from \"drizzle-orm/libsql\";\r\nimport { logger as rootLogger } from \"../../utils/logger\";\r\nimport { posthogCapture } from \"../../utils/posthog\";\r\nimport type { BillingService } from \"../billing/billing.service\";\r\nimport type { EmailService } from \"../email/email.service\";\r\nimport * as auth from \"./auth.db\";\r\nimport { createOrganizationAndTeam, getActiveOrganizationAndTeam } from \"./auth.utils\";\r\n\r\nconst schema = { ...auth };\r\ntype Schema = typeof schema;\r\nexport type Orm = LibSQLDatabase<Schema>;\r\n\r\nexport type User = InferSelectModel<typeof auth.users>;\r\nexport type Session = InferSelectModel<typeof auth.sessions>;\r\n\r\nexport type BetterAuth = ReturnType<typeof betterAuth>;\r\n\r\ntype CreateBetterAuthParams<\r\n  O extends Orm,\r\n  S extends Schema,\r\n  E extends EmailService,\r\n  B extends BillingService,\r\n> = {\r\n  orm: O;\r\n  schema: S;\r\n  services: {\r\n    email?: E;\r\n    billing?: B;\r\n  };\r\n  hooks?: {\r\n    onError?: (error: unknown) => void;\r\n    afterCreateUser?: (\r\n      user: Pick<User, \"id\" | \"email\" | \"emailVerified\" | \"name\" | \"createdAt\" | \"updatedAt\">\r\n    ) => Promise<void>;\r\n  };\r\n  options?: BetterAuthOptions;\r\n  config?: {\r\n    waitlist: boolean;\r\n    provisionedAccountEmailDomain?: string;\r\n  };\r\n};\r\n\r\nexport function createBetterAuth<\r\n  O extends Orm,\r\n  S extends Schema,\r\n  E extends EmailService,\r\n  B extends BillingService,\r\n>({ orm, schema, services, hooks, options, config }: CreateBetterAuthParams<O, S, E, B>) {\r\n  const { email: emailService, billing: billingService } = services;\r\n  const { waitlist = false, provisionedAccountEmailDomain } = config ?? {};\r\n  const normalizedProvisionedAccountEmailDomain = provisionedAccountEmailDomain\r\n    ? provisionedAccountEmailDomain.toLowerCase().replace(/^@/, \"\")\r\n    : null;\r\n\r\n  const logger = rootLogger.child({ layer: \"betterAuth\" });\r\n\r\n  const getWaitlistInvitationCode = async (ctx?: { headers?: Headers | null } | null) => {\r\n    let code = ctx?.headers?.get(\"waitlist-invitation-code\");\r\n    if (code) return code;\r\n    const oauthState = await getOAuthState();\r\n    if (oauthState) {\r\n      code = oauthState.waitlistInvitationCode;\r\n    }\r\n    return code;\r\n  };\r\n\r\n  const isProvisionedAccountEmail = (email: string) => {\r\n    if (!normalizedProvisionedAccountEmailDomain) return false;\r\n    return email.toLowerCase().endsWith(`@${normalizedProvisionedAccountEmailDomain}`);\r\n  };\r\n\r\n  return betterAuth({\r\n    ...options,\r\n    baseURL: process.env.VITE_SERVER_URL!,\r\n    session: {\r\n      expiresIn: 60 * 60 * 24 * 7,\r\n      updateAge: 60 * 60 * 24,\r\n      cookieCache: {\r\n        enabled: true,\r\n        maxAge: 60 * 5,\r\n      },\r\n      additionalFields: {\r\n        activeOrganizationRole: {\r\n          type: \"string\",\r\n          required: false,\r\n          defaultValue: null,\r\n        },\r\n        activeTeamRole: {\r\n          type: \"string\",\r\n          required: false,\r\n          defaultValue: null,\r\n        },\r\n      },\r\n    },\r\n    user: {\r\n      deleteUser: {\r\n        enabled: true,\r\n        sendDeleteAccountVerification: async ({ user, url }) => {\r\n          const result = await emailService?.sendDeleteAccountVerification(user.email, url);\r\n          if (result?.isErr()) {\r\n            logger.error(result.error);\r\n            hooks?.onError?.(result.error);\r\n            throw result.error;\r\n          }\r\n        },\r\n      },\r\n      additionalFields: {\r\n        onboarding: {\r\n          type: \"number\",\r\n          required: false,\r\n          defaultValue: null,\r\n        },\r\n        preferences: {\r\n          type: \"string\",\r\n          required: false,\r\n          defaultValue: null,\r\n        },\r\n        flags: {\r\n          type: \"string\",\r\n          required: false,\r\n          defaultValue: null,\r\n        },\r\n        stripeCustomerId: {\r\n          type: \"string\",\r\n          required: false,\r\n          defaultValue: null,\r\n          input: false,\r\n        },\r\n        paymentCustomerId: {\r\n          type: \"string\",\r\n          required: false,\r\n          defaultValue: null,\r\n          input: false,\r\n        },\r\n        paymentPlanTier: {\r\n          type: \"string\",\r\n          required: false,\r\n          defaultValue: null,\r\n          input: false,\r\n        },\r\n        paymentPlanExpiresAt: {\r\n          type: \"number\",\r\n          required: false,\r\n          defaultValue: null,\r\n          input: false,\r\n        },\r\n      },\r\n    },\r\n    database: drizzleAdapter(orm, {\r\n      provider: \"sqlite\",\r\n      schema,\r\n      usePlural: true,\r\n    }),\r\n    emailAndPassword: {\r\n      enabled: true,\r\n      requireEmailVerification: !waitlist,\r\n      sendResetPassword: async ({ user, url }) => {\r\n        const result = await emailService?.sendResetPassword(user.email, url);\r\n        if (result?.isErr()) {\r\n          logger.error(result.error);\r\n          hooks?.onError?.(result.error);\r\n          throw result.error;\r\n        }\r\n      },\r\n    },\r\n    emailVerification: {\r\n      sendVerificationEmail: async ({ user, url }) => {\r\n        const result = await emailService?.sendVerification(user.email, url);\r\n        if (result?.isErr()) {\r\n          logger.error(result.error);\r\n          hooks?.onError?.(result.error);\r\n          throw result.error;\r\n        }\r\n      },\r\n    },\r\n    plugins: [\r\n      ...(options?.plugins ?? []),\r\n      magicLink({\r\n        disableSignUp: true,\r\n        sendMagicLink: async ({ email, url, token }) => {\r\n          const [user] = await orm\r\n            .select({ id: schema.users.id })\r\n            .from(schema.users)\r\n            .where(eq(schema.users.email, email.toLowerCase()))\r\n            .limit(1);\r\n\r\n          if (!user) return;\r\n\r\n          const [claim] = await orm\r\n            .select({ id: schema.waitlist.id })\r\n            .from(schema.waitlist)\r\n            .where(\r\n              and(\r\n                eq(schema.waitlist.type, \"ACCOUNT_CLAIM\"),\r\n                eq(schema.waitlist.claimUserId, user.id),\r\n                eq(schema.waitlist.status, \"INVITED\"),\r\n                gte(schema.waitlist.expiresAt, new Date())\r\n              )\r\n            )\r\n            .orderBy(desc(schema.waitlist.createdAt))\r\n            .limit(1);\r\n          if (claim) {\r\n            await orm.insert(schema.accountClaimMagicLinks).values({\r\n              claimId: claim.id,\r\n              userId: user.id,\r\n              email: email.toLowerCase(),\r\n              token,\r\n              url,\r\n              expiresAt: new Date(Date.now() + 1000 * 60 * 5),\r\n            });\r\n          }\r\n        },\r\n      }),\r\n      admin(),\r\n      lastLoginMethod(),\r\n      organization({\r\n        allowUserToCreateOrganization: false,\r\n        teams: {\r\n          enabled: true,\r\n          allowRemovingAllTeams: false,\r\n        },\r\n        sendInvitationEmail: async (data) => {\r\n          const invitationUrl = `${process.env.VITE_APP_URL}/organization/accept-invitation?id=${data.id}`;\r\n          const inviterName = data.inviter.user.name || data.inviter.user.email;\r\n          const result = await emailService?.sendOrganizationInvite(\r\n            data.email,\r\n            data.organization.name,\r\n            inviterName,\r\n            data.role,\r\n            invitationUrl\r\n          );\r\n          if (result?.isErr()) {\r\n            logger.error(result.error);\r\n            hooks?.onError?.(result.error);\r\n            throw result.error;\r\n          }\r\n        },\r\n        schema: {\r\n          team: {\r\n            modelName: \"team\",\r\n          },\r\n          teamMember: {\r\n            modelName: \"teamMember\",\r\n            additionalFields: {\r\n              role: {\r\n                type: \"string\",\r\n                required: true,\r\n              },\r\n            },\r\n          },\r\n          member: {\r\n            modelName: \"member\",\r\n          },\r\n          invitation: {\r\n            modelName: \"invitation\",\r\n          },\r\n          organization: {\r\n            modelName: \"organization\",\r\n          },\r\n        },\r\n      }),\r\n      apiKey(),\r\n    ],\r\n    trustedOrigins: [process.env.VITE_APP_URL!, process.env.VITE_SERVER_URL!],\r\n\r\n    databaseHooks: {\r\n      user: {\r\n        create: {\r\n          before: async (_user, ctx) => {\r\n            if (waitlist) {\r\n              const waitlistCode = await getWaitlistInvitationCode(ctx);\r\n              if (waitlistCode) {\r\n                const [waitlistInvitation] = await orm\r\n                  .select()\r\n                  .from(schema.waitlist)\r\n                  .where(\r\n                    and(\r\n                      eq(schema.waitlist.code, waitlistCode),\r\n                      eq(schema.waitlist.type, \"WAITLIST\"),\r\n                      eq(schema.waitlist.status, \"INVITED\"),\r\n                      gte(schema.waitlist.expiresAt, new Date())\r\n                    )\r\n                  )\r\n                  .limit(1);\r\n\r\n                if (!waitlistInvitation) {\r\n                  return false;\r\n                }\r\n                await orm\r\n                  .update(schema.waitlist)\r\n                  .set({\r\n                    status: \"ACCEPTED\",\r\n                    updatedAt: new Date(),\r\n                  })\r\n                  .where(eq(schema.waitlist.id, waitlistInvitation.id));\r\n                return;\r\n              }\r\n            }\r\n\r\n            if (waitlist) {\r\n              return false;\r\n            }\r\n            return;\r\n          },\r\n          after: async (user) => {\r\n            await createOrganizationAndTeam(orm, schema, user);\r\n            if (!isProvisionedAccountEmail(user.email)) {\r\n              await billingService?.createUserHook({ user });\r\n            }\r\n            posthogCapture({\r\n              distinctId: user.id,\r\n              event: \"user_created\",\r\n              properties: {\r\n                email: user.email,\r\n                name: user.name,\r\n                role: user.role,\r\n                image: user.image,\r\n              },\r\n            });\r\n            if (hooks?.afterCreateUser) await hooks.afterCreateUser(user);\r\n          },\r\n        },\r\n      },\r\n      session: {\r\n        create: {\r\n          before: async (session) => {\r\n            const { organizationId, teamId, organizationRole, teamRole } =\r\n              await getActiveOrganizationAndTeam(orm, schema, session.userId);\r\n            return {\r\n              data: {\r\n                ...session,\r\n                activeOrganizationId: organizationId,\r\n                activeTeamId: teamId,\r\n                activeOrganizationRole: organizationRole,\r\n                activeTeamRole: teamRole,\r\n              },\r\n            };\r\n          },\r\n        },\r\n      },\r\n    },\r\n  });\r\n}\r\n"],"mappings":";;;;;;;;;;CAae,EAAE,GAAGA,iBAAM;AAkC1B,SAAgB,iBAKd,EAAE,KAAK,QAAQ,UAAU,OAAO,SAAS,UAA8C;CACvF,MAAM,EAAE,OAAO,cAAc,SAAS,mBAAmB;CACzD,MAAM,EAAE,WAAW,OAAO,kCAAkC,UAAU,EAAE;CACxE,MAAM,0CAA0C,gCAC5C,8BAA8B,aAAa,CAAC,QAAQ,MAAM,GAAG,GAC7D;CAEJ,MAAMC,WAASC,OAAW,MAAM,EAAE,OAAO,cAAc,CAAC;CAExD,MAAM,4BAA4B,OAAO,QAA8C;EACrF,IAAI,OAAO,KAAK,SAAS,IAAI,2BAA2B;AACxD,MAAI,KAAM,QAAO;EACjB,MAAM,aAAa,MAAM,eAAe;AACxC,MAAI,WACF,QAAO,WAAW;AAEpB,SAAO;;CAGT,MAAM,6BAA6B,UAAkB;AACnD,MAAI,CAAC,wCAAyC,QAAO;AACrD,SAAO,MAAM,aAAa,CAAC,SAAS,IAAI,0CAA0C;;AAGpF,QAAO,WAAW;EAChB,GAAG;EACH,SAAS,QAAQ,IAAI;EACrB,SAAS;GACP,WAAW,OAAU,KAAK;GAC1B,WAAW,OAAU;GACrB,aAAa;IACX,SAAS;IACT,QAAQ;IACT;GACD,kBAAkB;IAChB,wBAAwB;KACtB,MAAM;KACN,UAAU;KACV,cAAc;KACf;IACD,gBAAgB;KACd,MAAM;KACN,UAAU;KACV,cAAc;KACf;IACF;GACF;EACD,MAAM;GACJ,YAAY;IACV,SAAS;IACT,+BAA+B,OAAO,EAAE,MAAM,UAAU;KACtD,MAAM,SAAS,MAAM,cAAc,8BAA8B,KAAK,OAAO,IAAI;AACjF,SAAI,QAAQ,OAAO,EAAE;AACnB,eAAO,MAAM,OAAO,MAAM;AAC1B,aAAO,UAAU,OAAO,MAAM;AAC9B,YAAM,OAAO;;;IAGlB;GACD,kBAAkB;IAChB,YAAY;KACV,MAAM;KACN,UAAU;KACV,cAAc;KACf;IACD,aAAa;KACX,MAAM;KACN,UAAU;KACV,cAAc;KACf;IACD,OAAO;KACL,MAAM;KACN,UAAU;KACV,cAAc;KACf;IACD,kBAAkB;KAChB,MAAM;KACN,UAAU;KACV,cAAc;KACd,OAAO;KACR;IACD,mBAAmB;KACjB,MAAM;KACN,UAAU;KACV,cAAc;KACd,OAAO;KACR;IACD,iBAAiB;KACf,MAAM;KACN,UAAU;KACV,cAAc;KACd,OAAO;KACR;IACD,sBAAsB;KACpB,MAAM;KACN,UAAU;KACV,cAAc;KACd,OAAO;KACR;IACF;GACF;EACD,UAAU,eAAe,KAAK;GAC5B,UAAU;GACV;GACA,WAAW;GACZ,CAAC;EACF,kBAAkB;GAChB,SAAS;GACT,0BAA0B,CAAC;GAC3B,mBAAmB,OAAO,EAAE,MAAM,UAAU;IAC1C,MAAM,SAAS,MAAM,cAAc,kBAAkB,KAAK,OAAO,IAAI;AACrE,QAAI,QAAQ,OAAO,EAAE;AACnB,cAAO,MAAM,OAAO,MAAM;AAC1B,YAAO,UAAU,OAAO,MAAM;AAC9B,WAAM,OAAO;;;GAGlB;EACD,mBAAmB,EACjB,uBAAuB,OAAO,EAAE,MAAM,UAAU;GAC9C,MAAM,SAAS,MAAM,cAAc,iBAAiB,KAAK,OAAO,IAAI;AACpE,OAAI,QAAQ,OAAO,EAAE;AACnB,aAAO,MAAM,OAAO,MAAM;AAC1B,WAAO,UAAU,OAAO,MAAM;AAC9B,UAAM,OAAO;;KAGlB;EACD,SAAS;GACP,GAAI,SAAS,WAAW,EAAE;GAC1B,UAAU;IACR,eAAe;IACf,eAAe,OAAO,EAAE,OAAO,KAAK,YAAY;KAC9C,MAAM,CAAC,QAAQ,MAAM,IAClB,OAAO,EAAE,IAAI,OAAO,MAAM,IAAI,CAAC,CAC/B,KAAK,OAAO,MAAM,CAClB,MAAM,GAAG,OAAO,MAAM,OAAO,MAAM,aAAa,CAAC,CAAC,CAClD,MAAM,EAAE;AAEX,SAAI,CAAC,KAAM;KAEX,MAAM,CAAC,SAAS,MAAM,IACnB,OAAO,EAAE,IAAI,OAAO,SAAS,IAAI,CAAC,CAClC,KAAK,OAAO,SAAS,CACrB,MACC,IACE,GAAG,OAAO,SAAS,MAAM,gBAAgB,EACzC,GAAG,OAAO,SAAS,aAAa,KAAK,GAAG,EACxC,GAAG,OAAO,SAAS,QAAQ,UAAU,EACrC,IAAI,OAAO,SAAS,2BAAW,IAAI,MAAM,CAAC,CAC3C,CACF,CACA,QAAQ,KAAK,OAAO,SAAS,UAAU,CAAC,CACxC,MAAM,EAAE;AACX,SAAI,MACF,OAAM,IAAI,OAAO,OAAO,uBAAuB,CAAC,OAAO;MACrD,SAAS,MAAM;MACf,QAAQ,KAAK;MACb,OAAO,MAAM,aAAa;MAC1B;MACA;MACA,WAAW,IAAI,KAAK,KAAK,KAAK,GAAG,MAAO,KAAK,EAAE;MAChD,CAAC;;IAGP,CAAC;GACF,OAAO;GACP,iBAAiB;GACjB,aAAa;IACX,+BAA+B;IAC/B,OAAO;KACL,SAAS;KACT,uBAAuB;KACxB;IACD,qBAAqB,OAAO,SAAS;KACnC,MAAM,gBAAgB,GAAG,QAAQ,IAAI,aAAa,qCAAqC,KAAK;KAC5F,MAAM,cAAc,KAAK,QAAQ,KAAK,QAAQ,KAAK,QAAQ,KAAK;KAChE,MAAM,SAAS,MAAM,cAAc,uBACjC,KAAK,OACL,KAAK,aAAa,MAClB,aACA,KAAK,MACL,cACD;AACD,SAAI,QAAQ,OAAO,EAAE;AACnB,eAAO,MAAM,OAAO,MAAM;AAC1B,aAAO,UAAU,OAAO,MAAM;AAC9B,YAAM,OAAO;;;IAGjB,QAAQ;KACN,MAAM,EACJ,WAAW,QACZ;KACD,YAAY;MACV,WAAW;MACX,kBAAkB,EAChB,MAAM;OACJ,MAAM;OACN,UAAU;OACX,EACF;MACF;KACD,QAAQ,EACN,WAAW,UACZ;KACD,YAAY,EACV,WAAW,cACZ;KACD,cAAc,EACZ,WAAW,gBACZ;KACF;IACF,CAAC;GACF,QAAQ;GACT;EACD,gBAAgB,CAAC,QAAQ,IAAI,cAAe,QAAQ,IAAI,gBAAiB;EAEzE,eAAe;GACb,MAAM,EACJ,QAAQ;IACN,QAAQ,OAAO,OAAO,QAAQ;AAC5B,SAAI,UAAU;MACZ,MAAM,eAAe,MAAM,0BAA0B,IAAI;AACzD,UAAI,cAAc;OAChB,MAAM,CAAC,sBAAsB,MAAM,IAChC,QAAQ,CACR,KAAK,OAAO,SAAS,CACrB,MACC,IACE,GAAG,OAAO,SAAS,MAAM,aAAa,EACtC,GAAG,OAAO,SAAS,MAAM,WAAW,EACpC,GAAG,OAAO,SAAS,QAAQ,UAAU,EACrC,IAAI,OAAO,SAAS,2BAAW,IAAI,MAAM,CAAC,CAC3C,CACF,CACA,MAAM,EAAE;AAEX,WAAI,CAAC,mBACH,QAAO;AAET,aAAM,IACH,OAAO,OAAO,SAAS,CACvB,IAAI;QACH,QAAQ;QACR,2BAAW,IAAI,MAAM;QACtB,CAAC,CACD,MAAM,GAAG,OAAO,SAAS,IAAI,mBAAmB,GAAG,CAAC;AACvD;;;AAIJ,SAAI,SACF,QAAO;;IAIX,OAAO,OAAO,SAAS;AACrB,WAAM,0BAA0B,KAAK,QAAQ,KAAK;AAClD,SAAI,CAAC,0BAA0B,KAAK,MAAM,CACxC,OAAM,gBAAgB,eAAe,EAAE,MAAM,CAAC;AAEhD,oBAAe;MACb,YAAY,KAAK;MACjB,OAAO;MACP,YAAY;OACV,OAAO,KAAK;OACZ,MAAM,KAAK;OACX,MAAM,KAAK;OACX,OAAO,KAAK;OACb;MACF,CAAC;AACF,SAAI,OAAO,gBAAiB,OAAM,MAAM,gBAAgB,KAAK;;IAEhE,EACF;GACD,SAAS,EACP,QAAQ,EACN,QAAQ,OAAO,YAAY;IACzB,MAAM,EAAE,gBAAgB,QAAQ,kBAAkB,aAChD,MAAM,6BAA6B,KAAK,QAAQ,QAAQ,OAAO;AACjE,WAAO,EACL,MAAM;KACJ,GAAG;KACH,sBAAsB;KACtB,cAAc;KACd,wBAAwB;KACxB,gBAAgB;KACjB,EACF;MAEJ,EACF;GACF;EACF,CAAC"}