@monocloud/auth-nextjs 0.0.0-canary-20251223204300

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 MonoCloud
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,152 @@
+![MonoCloud Logo](https://raw.githubusercontent.com/monocloud/auth-js/refs/heads/main/MonoCloud.png)
+
+## Introduction
+
+**MonoCloud Auth Next.js SDK – secure authentication and session management for Next.js applications.**
+
+[MonoCloud](https://www.monocloud.com?utm_source=github&utm_medium=auth_js) is a modern, developer-friendly Identity & Access Management platform.
+
+This SDK is designed specifically for **Next.js**, providing first-class integration with both the **App Router** and **Pages Router**. It leverages **Next.js Middleware**, **Server Components**, and **Edge-compatible APIs** to deliver secure, server-side authentication with minimal configuration.
+
+## 📘 Documentation
+
+- **Quickstart:**  [https://www.monocloud.com/docs/quickstarts/nextjs-app-router](https://www.monocloud.com/docs/quickstarts/nextjs-app-router?utm_source=github&utm_medium=auth_js)
+- **SDK Reference:**  [https://www.monocloud.com/docs/sdk-reference/nextjs](https://www.monocloud.com/docs/sdk-reference/nextjs/index?utm_source=github&utm_medium=auth_js)
+
+## Supported Platforms
+
+- **Next.js ≥ 13.0.0** (App Router & Pages Router)
+- **Node.js ≥ 16.0.0**
+- **Edge Runtime** (where supported by Next.js)
+
+## 🚀 Getting Started
+
+### Requirements
+
+- A **MonoCloud Tenant**
+- A **Client ID** and **Client Secret**
+- A **Random secret** (32+ characters) for encrypting session cookies
+
+## 📦 Installation
+
+```bash
+npm install @monocloud/auth-nextjs
+```
+
+### Initialization
+
+### Set up environment variables
+
+Create a `.env.local` file in your project root. The SDK automatically reads variables prefixed with `MONOCLOUD_AUTH__`.
+
+```env
+MONOCLOUD_AUTH_TENANT_DOMAIN=https://<your-tenant-domain>
+MONOCLOUD_AUTH_CLIENT_ID=<your-client-id>
+MONOCLOUD_AUTH_CLIENT_SECRET=<your-client-secret>
+MONOCLOUD_AUTH_COOKIE_SECRET=<long-random-string>
+MONOCLOUD_AUTH_APP_URL=http://localhost:3000
+```
+
+Generate a secure cookie secret:
+
+```bash
+openssl rand -hex 32
+```
+
+⚠️ Security Note: Never commit secrets to source control. Always load them from environment variables.
+
+### Create Next Client
+
+Create a shared MonoCloud client instance (for example, `lib/monocloud.ts`) and reuse it throughout your application.
+
+```typescript
+import { MonoCloudNextClient } from '@monocloud/auth-nextjs';
+
+// Environment variables are picked up automatically
+export const monoCloud = new MonoCloudNextClient();
+```
+
+⚠️ Security Note: Never commit your credentials to version control. Load them from environment variables.
+
+### Add MonoCloud Middleware
+
+Protect your application by registering the MonoCloud middleware. Authentication routes, redirects, and callbacks are handled automatically.
+
+‼️ Important (Next.js v16+): Starting with Next.js 16, authentication middleware is implemented using a **proxy-based approach** rather than traditional middleware files. MonoCloud follows this recommended proxy pattern for handling authentication flows.
+
+```typescript
+import { monoCloud } from '<shared-instance>';
+
+export default monoCloud.authMiddleware();
+
+// Allow static files
+export const config = {
+  matcher: ['/((?!.+\\.[\\w]+$|_next).*)', '/', '/(api|trpc)(.*)'],
+};
+```
+
+### Get Session (Server-side)
+
+Retrieve the authenticated session in **Server Components, Route Handlers, or API routes**.
+
+```tsx
+import { monoCloud } from '<shared-instance>';
+
+export default async function Page() {
+  const session = await monoCloud.getSession();
+
+  return (
+    <div>
+      <h1>Welcome, {session?.user?.name}</h1>
+      <p>Email: {session?.user?.email}</p>
+    </div>
+  );
+}
+```
+
+### Get User (Client-side)
+
+Access user data in **Client Components** using the provided hook.
+
+```tsx
+'use client';
+
+import { useAuth } from '@monocloud/auth-nextjs/client';
+
+export default function Page() {
+  const { user } = useAuth();
+
+  return (
+    <div>
+      <h1>Welcome, {user?.name}</h1>
+      <p>Email: {user?.email}</p>
+    </div>
+  );
+}
+```
+## When should I use `auth-nextjs`?
+
+Use **`@monocloud/auth-nextjs`** if you are building a **Next.js application** and want a secure authentication solution with minimal configuration.
+
+This package is a good fit if you:
+
+- Are using **Next.js (App Router or Pages Router)**
+- Want **secure, cookie-based sessions** managed for you
+- Need authentication in **Server Components, Route Handlers, API routes, and middleware/proxy**
+- Prefer **framework-native helpers and React hooks**
+- Want an **opinionated, batteries-included** authentication experience
+
+## 🤝 Contributing & Support
+
+### Issues & Feedback
+
+- Use **GitHub Issues** for bug reports and feature requests.
+- For tenant or account-specific help, contact MonoCloud Support through your dashboard.
+
+### Security
+
+Do **not** report security issues publicly. Please follow the contact instructions at: [https://www.monocloud.com/contact](https://www.monocloud.com/contact?utm_source=github&utm_medium=auth_js)
+
+## 📄 License
+
+Licensed under the **MIT License**. See the included [`LICENSE`](https://github.com/monocloud/auth-js/blob/main/LICENSE) file.

package/client/package.json

@@ -0,0 +1,5 @@
+{
+  "main": "../dist/client/index.cjs",
+  "module": "../dist/client/index.mjs",
+  "types": "../dist/client/index.d.mts"
+}

package/components/client/package.json

@@ -0,0 +1,5 @@
+{
+  "main": "../../dist/components/client/index.cjs",
+  "module": "../../dist/components/client/index.mjs",
+  "types": "../../dist/components/client/index.d.mts"
+}

package/components/package.json

@@ -0,0 +1,5 @@
+{
+  "main": "../dist/components/index.cjs",
+  "module": "../dist/components/index.mjs",
+  "types": "../dist/components/index.d.mts"
+}

package/dist/chunk-CbDLau6x.cjs

@@ -0,0 +1,34 @@
+//#region rolldown:runtime
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") {
+		for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+			key = keys[i];
+			if (!__hasOwnProp.call(to, key) && key !== except) {
+				__defProp(to, key, {
+					get: ((k) => from[k]).bind(null, key),
+					enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+				});
+			}
+		}
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+
+//#endregion
+
+Object.defineProperty(exports, '__toESM', {
+  enumerable: true,
+  get: function () {
+    return __toESM;
+  }
+});

package/dist/client/index.cjs

@@ -0,0 +1,4 @@
+const require_client = require('../client-BjnSJS59.cjs');
+
+exports.protectPage = require_client.protectPage;
+exports.useAuth = require_client.useAuth;

package/dist/client/index.d.mts

@@ -0,0 +1,76 @@
+import { i as ExtraAuthParams, o as GroupOptions } from "../types-BleaXQUP.mjs";
+import { MonoCloudUser } from "@monocloud/auth-node-core";
+import React, { ComponentType, JSX } from "react";
+
+//#region src/client/use-auth.d.ts
+/**
+ * Authentication State returned by `useAuth` hook.
+ */
+interface AuthState {
+  /**
+   * Flag indicating if the authentication state is still loading.
+   */
+  isLoading: boolean;
+  /**
+   * Flag indicating if the user is authenticated.
+   */
+  isAuthenticated: boolean;
+  /**
+   * Error encountered during authentication, if any.
+   */
+  error?: Error;
+  /**
+   *  The authenticated user's information, if available.
+   */
+  user?: MonoCloudUser;
+  /**
+   * Function to refetch the authentication state.
+   */
+  refetch?: () => void;
+}
+/**
+ * @returns Authentication State
+ */
+declare const useAuth: () => AuthState;
+//#endregion
+//#region src/client/protect.d.ts
+/**
+ * Options for configuring page protection.
+ */
+type ProtectPageOptions = {
+  /**
+   *The url where the user will be redirected to after sign in
+   */
+  returnUrl?: string;
+  /**
+   * A custom react element to render when the user is not authenticated or is not a member of the specified groups.
+   */
+  onAccessDenied?: (user?: MonoCloudUser) => JSX.Element;
+  /**
+   * Authorization parameters to be used during authentication.
+   */
+  authParams?: ExtraAuthParams;
+  /**
+   * Callback function to handle errors.
+   * If not provided, errors will be thrown.
+   *
+   * @param error - The error object.
+   * @returns JSX element to handle the error.
+   */
+  onError?: (error: Error) => JSX.Element;
+} & GroupOptions;
+/**
+ * Function to protect a client rendered page component.
+ * Ensures that only authenticated users can access the component.
+ *
+ * @param Component - The component to protect.
+ * @param options - The options.
+ *
+ * @returns Protected clinet rendered page component.
+ */
+declare const protectPage: <P extends object>(Component: ComponentType<P & {
+  user: MonoCloudUser;
+}>, options?: ProtectPageOptions) => React.FC<P>;
+//#endregion
+export { type AuthState, type ProtectPageOptions, protectPage, useAuth };
+//# sourceMappingURL=index.d.mts.map

package/dist/client/index.mjs

@@ -0,0 +1,3 @@
+import { r as useAuth, t as protectPage } from "../client-0gaUvMR7.mjs";
+
+export { protectPage, useAuth };

package/dist/client-0gaUvMR7.mjs

@@ -0,0 +1,105 @@
+import { isUserInGroup } from "@monocloud/auth-node-core/utils";
+import useSWR from "swr";
+import React, { useEffect } from "react";
+
+//#region src/client/use-auth.tsx
+/**
+* @returns Authentication State
+*/
+const useAuth = () => {
+	const { data, error, isLoading, mutate } = useSWR(process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_USER_INFO_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ""}/api/auth/userinfo`, async (url) => {
+		const res = await fetch(url, { credentials: "include" });
+		if (res.status === 204) return;
+		if (res.ok) return res.json();
+		throw new Error("Failed to fetch user");
+	});
+	if (error) return {
+		user: void 0,
+		isLoading: false,
+		isAuthenticated: false,
+		error,
+		refetch: () => mutate()
+	};
+	if (data) return {
+		user: data,
+		isLoading,
+		isAuthenticated: !!data && Object.keys(data).length > 0,
+		error: void 0,
+		refetch: () => mutate()
+	};
+	return {
+		user: void 0,
+		isLoading,
+		isAuthenticated: false,
+		error: void 0,
+		refetch: () => {}
+	};
+};
+
+//#endregion
+//#region src/client/protect.tsx
+const redirectToSignIn = (options) => {
+	const searchParams = new URLSearchParams(window.location.search);
+	searchParams.set("return_url", options.returnUrl ?? window.location.toString());
+	if (options === null || options === void 0 ? void 0 : options.scopes) searchParams.set("scope", options.scopes);
+	if (options === null || options === void 0 ? void 0 : options.resource) searchParams.set("resource", options.resource);
+	if (options === null || options === void 0 ? void 0 : options.acrValues) searchParams.set("acr_values", options.acrValues.join(" "));
+	if (options === null || options === void 0 ? void 0 : options.display) searchParams.set("display", options.display);
+	if (options === null || options === void 0 ? void 0 : options.prompt) searchParams.set("prompt", options.prompt);
+	if (options === null || options === void 0 ? void 0 : options.authenticatorHint) searchParams.set("authenticator_hint", options.authenticatorHint);
+	if (options === null || options === void 0 ? void 0 : options.uiLocales) searchParams.set("ui_locales", options.uiLocales);
+	if (options === null || options === void 0 ? void 0 : options.maxAge) searchParams.set("max_age", options.maxAge.toString());
+	if (options === null || options === void 0 ? void 0 : options.loginHint) searchParams.set("login_hint", options.loginHint);
+	window.location.assign(`${process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_SIGNIN_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ""}/api/auth/signin`}?${searchParams.toString()}`);
+};
+const handlePageError = (error, options) => {
+	/* v8 ignore else -- @preserve */
+	if (options === null || options === void 0 ? void 0 : options.onError) return options.onError(error);
+	/* v8 ignore next -- @preserve */
+	throw error;
+};
+/**
+* Function to protect a client rendered page component.
+* Ensures that only authenticated users can access the component.
+*
+* @param Component - The component to protect.
+* @param options - The options.
+*
+* @returns Protected clinet rendered page component.
+*/
+const protectPage = (Component, options) => {
+	return (props) => {
+		const { user, error, isLoading } = useAuth();
+		useEffect(() => {
+			if (!user && !isLoading && !error) {
+				if (options === null || options === void 0 ? void 0 : options.onAccessDenied) return;
+				const authParams = (options === null || options === void 0 ? void 0 : options.authParams) ?? {};
+				redirectToSignIn({
+					returnUrl: options === null || options === void 0 ? void 0 : options.returnUrl,
+					...authParams
+				});
+			}
+		}, [
+			user,
+			isLoading,
+			error
+		]);
+		if (error) return handlePageError(error, options);
+		if (!user && !isLoading && (options === null || options === void 0 ? void 0 : options.onAccessDenied)) return options.onAccessDenied();
+		if (user) {
+			if ((options === null || options === void 0 ? void 0 : options.groups) && !isUserInGroup(user, options.groups, options.groupsClaim ?? process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_GROUPS_CLAIM, options.matchAll)) {
+				const { onAccessDenied = () => /* @__PURE__ */ React.createElement("div", null, "Access Denied") } = options;
+				return onAccessDenied(user);
+			}
+			return /* @__PURE__ */ React.createElement(Component, {
+				user,
+				...props
+			});
+		}
+		return null;
+	};
+};
+
+//#endregion
+export { redirectToSignIn as n, useAuth as r, protectPage as t };
+//# sourceMappingURL=client-0gaUvMR7.mjs.map

package/dist/client-0gaUvMR7.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-0gaUvMR7.mjs","names":[],"sources":["../src/client/use-auth.tsx","../src/client/protect.tsx"],"sourcesContent":["'use client';\n\nimport { MonoCloudUser } from '@monocloud/auth-node-core';\nimport useSWR from 'swr';\n\n/**\n * Authentication State returned by `useAuth` hook.\n */\nexport interface AuthState {\n  /**\n   * Flag indicating if the authentication state is still loading.\n   */\n  isLoading: boolean;\n  /**\n   * Flag indicating if the user is authenticated.\n   */\n  isAuthenticated: boolean;\n  /**\n   * Error encountered during authentication, if any.\n   */\n  error?: Error;\n  /**\n   *  The authenticated user's information, if available.\n   */\n  user?: MonoCloudUser;\n  /**\n   * Function to refetch the authentication state.\n   */\n  refetch?: () => void;\n}\n\n/**\n * @returns Authentication State\n */\nexport const useAuth = (): AuthState => {\n  const { data, error, isLoading, mutate } = useSWR<MonoCloudUser | undefined>(\n    process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_USER_INFO_URL ??\n      // eslint-disable-next-line no-underscore-dangle\n      `${process.env.__NEXT_ROUTER_BASEPATH ?? ''}/api/auth/userinfo`,\n    async (url: string) => {\n      const res = await fetch(url, { credentials: 'include' });\n\n      if (res.status === 204) {\n        return undefined;\n      }\n\n      if (res.ok) {\n        return res.json();\n      }\n\n      throw new Error('Failed to fetch user');\n    }\n  );\n\n  if (error) {\n    return {\n      user: undefined,\n      isLoading: false,\n      isAuthenticated: false,\n      error: error as Error,\n      refetch: () => mutate(),\n    };\n  }\n\n  if (data) {\n    return {\n      user: data,\n      isLoading,\n      isAuthenticated: !!data && Object.keys(data).length > 0,\n      error: undefined,\n      refetch: () => mutate(),\n    };\n  }\n\n  return {\n    user: undefined,\n    isLoading,\n    isAuthenticated: false,\n    error: undefined,\n    /* v8 ignore next -- @preserve */\n    refetch: (): void => {},\n  };\n};\n","/* eslint-disable react/display-name */\n'use client';\n\nimport React, { ComponentType, JSX, useEffect } from 'react';\nimport type { MonoCloudUser } from '@monocloud/auth-node-core';\nimport { isUserInGroup } from '@monocloud/auth-node-core/utils';\nimport { useAuth } from './use-auth';\nimport { ExtraAuthParams, GroupOptions } from '../types';\n\n/**\n * Options for configuring page protection.\n */\nexport type ProtectPageOptions = {\n  /**\n   *The url where the user will be redirected to after sign in\n   */\n  returnUrl?: string;\n\n  /**\n   * A custom react element to render when the user is not authenticated or is not a member of the specified groups.\n   */\n  onAccessDenied?: (user?: MonoCloudUser) => JSX.Element;\n\n  /**\n   * Authorization parameters to be used during authentication.\n   */\n  authParams?: ExtraAuthParams;\n\n  /**\n   * Callback function to handle errors.\n   * If not provided, errors will be thrown.\n   *\n   * @param error - The error object.\n   * @returns JSX element to handle the error.\n   */\n  onError?: (error: Error) => JSX.Element;\n} & GroupOptions;\n\nexport const redirectToSignIn = (\n  options: { returnUrl?: string } & ExtraAuthParams\n): void => {\n  const searchParams = new URLSearchParams(window.location.search);\n  searchParams.set(\n    'return_url',\n    options.returnUrl ?? window.location.toString()\n  );\n\n  if (options?.scopes) {\n    searchParams.set('scope', options.scopes);\n  }\n  if (options?.resource) {\n    searchParams.set('resource', options.resource);\n  }\n\n  if (options?.acrValues) {\n    searchParams.set('acr_values', options.acrValues.join(' '));\n  }\n\n  if (options?.display) {\n    searchParams.set('display', options.display);\n  }\n\n  if (options?.prompt) {\n    searchParams.set('prompt', options.prompt);\n  }\n\n  if (options?.authenticatorHint) {\n    searchParams.set('authenticator_hint', options.authenticatorHint);\n  }\n\n  if (options?.uiLocales) {\n    searchParams.set('ui_locales', options.uiLocales);\n  }\n\n  if (options?.maxAge) {\n    searchParams.set('max_age', options.maxAge.toString());\n  }\n\n  if (options?.loginHint) {\n    searchParams.set('login_hint', options.loginHint);\n  }\n\n  window.location.assign(\n    // eslint-disable-next-line no-underscore-dangle\n    `${process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_SIGNIN_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ''}/api/auth/signin`}?${searchParams.toString()}`\n  );\n};\n\nconst handlePageError = (\n  error: Error,\n  options?: ProtectPageOptions\n): JSX.Element => {\n  /* v8 ignore else -- @preserve */\n  if (options?.onError) {\n    return options.onError(error);\n  }\n\n  /* v8 ignore next -- @preserve */\n  throw error;\n};\n\n/**\n * Function to protect a client rendered page component.\n * Ensures that only authenticated users can access the component.\n *\n * @param Component - The component to protect.\n * @param options - The options.\n *\n * @returns Protected clinet rendered page component.\n */\nexport const protectPage = <P extends object>(\n  Component: ComponentType<P & { user: MonoCloudUser }>,\n  options?: ProtectPageOptions\n): React.FC<P> => {\n  return props => {\n    const { user, error, isLoading } = useAuth();\n\n    useEffect(() => {\n      if (!user && !isLoading && !error) {\n        if (options?.onAccessDenied) {\n          return;\n        }\n\n        const authParams = options?.authParams ?? {};\n        redirectToSignIn({\n          returnUrl: options?.returnUrl,\n          ...authParams,\n        });\n      }\n    }, [user, isLoading, error]);\n\n    if (error) {\n      return handlePageError(error, options);\n    }\n\n    if (!user && !isLoading && options?.onAccessDenied) {\n      return options.onAccessDenied();\n    }\n\n    if (user) {\n      if (\n        options?.groups &&\n        !isUserInGroup(\n          user,\n          options.groups,\n          options.groupsClaim ??\n            process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_GROUPS_CLAIM,\n          options.matchAll\n        )\n      ) {\n        const { onAccessDenied = (): JSX.Element => <div>Access Denied</div> } =\n          options;\n        return onAccessDenied(user);\n      }\n\n      return <Component user={user} {...props} />;\n    }\n\n    return null;\n  };\n};\n"],"mappings":";;;;;;;;AAkCA,MAAa,gBAA2B;CACtC,MAAM,EAAE,MAAM,OAAO,WAAW,WAAW,OACzC,QAAQ,IAAI,4CAEV,GAAG,QAAQ,IAAI,0BAA0B,GAAG,qBAC9C,OAAO,QAAgB;EACrB,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE,aAAa,WAAW,CAAC;AAExD,MAAI,IAAI,WAAW,IACjB;AAGF,MAAI,IAAI,GACN,QAAO,IAAI,MAAM;AAGnB,QAAM,IAAI,MAAM,uBAAuB;GAE1C;AAED,KAAI,MACF,QAAO;EACL,MAAM;EACN,WAAW;EACX,iBAAiB;EACV;EACP,eAAe,QAAQ;EACxB;AAGH,KAAI,KACF,QAAO;EACL,MAAM;EACN;EACA,iBAAiB,CAAC,CAAC,QAAQ,OAAO,KAAK,KAAK,CAAC,SAAS;EACtD,OAAO;EACP,eAAe,QAAQ;EACxB;AAGH,QAAO;EACL,MAAM;EACN;EACA,iBAAiB;EACjB,OAAO;EAEP,eAAqB;EACtB;;;;;AC3CH,MAAa,oBACX,YACS;CACT,MAAM,eAAe,IAAI,gBAAgB,OAAO,SAAS,OAAO;AAChE,cAAa,IACX,cACA,QAAQ,aAAa,OAAO,SAAS,UAAU,CAChD;AAED,uDAAI,QAAS,OACX,cAAa,IAAI,SAAS,QAAQ,OAAO;AAE3C,uDAAI,QAAS,SACX,cAAa,IAAI,YAAY,QAAQ,SAAS;AAGhD,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU,KAAK,IAAI,CAAC;AAG7D,uDAAI,QAAS,QACX,cAAa,IAAI,WAAW,QAAQ,QAAQ;AAG9C,uDAAI,QAAS,OACX,cAAa,IAAI,UAAU,QAAQ,OAAO;AAG5C,uDAAI,QAAS,kBACX,cAAa,IAAI,sBAAsB,QAAQ,kBAAkB;AAGnE,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU;AAGnD,uDAAI,QAAS,OACX,cAAa,IAAI,WAAW,QAAQ,OAAO,UAAU,CAAC;AAGxD,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU;AAGnD,QAAO,SAAS,OAEd,GAAG,QAAQ,IAAI,yCAAyC,GAAG,QAAQ,IAAI,0BAA0B,GAAG,kBAAkB,GAAG,aAAa,UAAU,GACjJ;;AAGH,MAAM,mBACJ,OACA,YACgB;;AAEhB,uDAAI,QAAS,QACX,QAAO,QAAQ,QAAQ,MAAM;;AAI/B,OAAM;;;;;;;;;;;AAYR,MAAa,eACX,WACA,YACgB;AAChB,SAAO,UAAS;EACd,MAAM,EAAE,MAAM,OAAO,cAAc,SAAS;AAE5C,kBAAgB;AACd,OAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO;AACjC,0DAAI,QAAS,eACX;IAGF,MAAM,gEAAa,QAAS,eAAc,EAAE;AAC5C,qBAAiB;KACf,6DAAW,QAAS;KACpB,GAAG;KACJ,CAAC;;KAEH;GAAC;GAAM;GAAW;GAAM,CAAC;AAE5B,MAAI,MACF,QAAO,gBAAgB,OAAO,QAAQ;AAGxC,MAAI,CAAC,QAAQ,CAAC,gEAAa,QAAS,gBAClC,QAAO,QAAQ,gBAAgB;AAGjC,MAAI,MAAM;AACR,0DACE,QAAS,WACT,CAAC,cACC,MACA,QAAQ,QACR,QAAQ,eACN,QAAQ,IAAI,yCACd,QAAQ,SACT,EACD;IACA,MAAM,EAAE,uBAAoC,oCAAC,aAAI,gBAAmB,KAClE;AACF,WAAO,eAAe,KAAK;;AAG7B,UAAO,oCAAC;IAAgB;IAAM,GAAI;KAAS;;AAG7C,SAAO"}

package/dist/client-BjnSJS59.cjs

@@ -0,0 +1,125 @@
+const require_chunk = require('./chunk-CbDLau6x.cjs');
+let _monocloud_auth_node_core_utils = require("@monocloud/auth-node-core/utils");
+let swr = require("swr");
+swr = require_chunk.__toESM(swr);
+let react = require("react");
+react = require_chunk.__toESM(react);
+
+//#region src/client/use-auth.tsx
+/**
+* @returns Authentication State
+*/
+const useAuth = () => {
+	const { data, error, isLoading, mutate } = (0, swr.default)(process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_USER_INFO_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ""}/api/auth/userinfo`, async (url) => {
+		const res = await fetch(url, { credentials: "include" });
+		if (res.status === 204) return;
+		if (res.ok) return res.json();
+		throw new Error("Failed to fetch user");
+	});
+	if (error) return {
+		user: void 0,
+		isLoading: false,
+		isAuthenticated: false,
+		error,
+		refetch: () => mutate()
+	};
+	if (data) return {
+		user: data,
+		isLoading,
+		isAuthenticated: !!data && Object.keys(data).length > 0,
+		error: void 0,
+		refetch: () => mutate()
+	};
+	return {
+		user: void 0,
+		isLoading,
+		isAuthenticated: false,
+		error: void 0,
+		refetch: () => {}
+	};
+};
+
+//#endregion
+//#region src/client/protect.tsx
+const redirectToSignIn = (options) => {
+	const searchParams = new URLSearchParams(window.location.search);
+	searchParams.set("return_url", options.returnUrl ?? window.location.toString());
+	if (options === null || options === void 0 ? void 0 : options.scopes) searchParams.set("scope", options.scopes);
+	if (options === null || options === void 0 ? void 0 : options.resource) searchParams.set("resource", options.resource);
+	if (options === null || options === void 0 ? void 0 : options.acrValues) searchParams.set("acr_values", options.acrValues.join(" "));
+	if (options === null || options === void 0 ? void 0 : options.display) searchParams.set("display", options.display);
+	if (options === null || options === void 0 ? void 0 : options.prompt) searchParams.set("prompt", options.prompt);
+	if (options === null || options === void 0 ? void 0 : options.authenticatorHint) searchParams.set("authenticator_hint", options.authenticatorHint);
+	if (options === null || options === void 0 ? void 0 : options.uiLocales) searchParams.set("ui_locales", options.uiLocales);
+	if (options === null || options === void 0 ? void 0 : options.maxAge) searchParams.set("max_age", options.maxAge.toString());
+	if (options === null || options === void 0 ? void 0 : options.loginHint) searchParams.set("login_hint", options.loginHint);
+	window.location.assign(`${process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_SIGNIN_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ""}/api/auth/signin`}?${searchParams.toString()}`);
+};
+const handlePageError = (error, options) => {
+	/* v8 ignore else -- @preserve */
+	if (options === null || options === void 0 ? void 0 : options.onError) return options.onError(error);
+	/* v8 ignore next -- @preserve */
+	throw error;
+};
+/**
+* Function to protect a client rendered page component.
+* Ensures that only authenticated users can access the component.
+*
+* @param Component - The component to protect.
+* @param options - The options.
+*
+* @returns Protected clinet rendered page component.
+*/
+const protectPage = (Component, options) => {
+	return (props) => {
+		const { user, error, isLoading } = useAuth();
+		(0, react.useEffect)(() => {
+			if (!user && !isLoading && !error) {
+				if (options === null || options === void 0 ? void 0 : options.onAccessDenied) return;
+				const authParams = (options === null || options === void 0 ? void 0 : options.authParams) ?? {};
+				redirectToSignIn({
+					returnUrl: options === null || options === void 0 ? void 0 : options.returnUrl,
+					...authParams
+				});
+			}
+		}, [
+			user,
+			isLoading,
+			error
+		]);
+		if (error) return handlePageError(error, options);
+		if (!user && !isLoading && (options === null || options === void 0 ? void 0 : options.onAccessDenied)) return options.onAccessDenied();
+		if (user) {
+			if ((options === null || options === void 0 ? void 0 : options.groups) && !(0, _monocloud_auth_node_core_utils.isUserInGroup)(user, options.groups, options.groupsClaim ?? process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_GROUPS_CLAIM, options.matchAll)) {
+				const { onAccessDenied = () => /* @__PURE__ */ react.default.createElement("div", null, "Access Denied") } = options;
+				return onAccessDenied(user);
+			}
+			return /* @__PURE__ */ react.default.createElement(Component, {
+				user,
+				...props
+			});
+		}
+		return null;
+	};
+};
+
+//#endregion
+Object.defineProperty(exports, 'protectPage', {
+  enumerable: true,
+  get: function () {
+    return protectPage;
+  }
+});
+Object.defineProperty(exports, 'redirectToSignIn', {
+  enumerable: true,
+  get: function () {
+    return redirectToSignIn;
+  }
+});
+Object.defineProperty(exports, 'useAuth', {
+  enumerable: true,
+  get: function () {
+    return useAuth;
+  }
+});
+//# sourceMappingURL=client-BjnSJS59.cjs.map

package/dist/client-BjnSJS59.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-BjnSJS59.cjs","names":[],"sources":["../src/client/use-auth.tsx","../src/client/protect.tsx"],"sourcesContent":["'use client';\n\nimport { MonoCloudUser } from '@monocloud/auth-node-core';\nimport useSWR from 'swr';\n\n/**\n * Authentication State returned by `useAuth` hook.\n */\nexport interface AuthState {\n  /**\n   * Flag indicating if the authentication state is still loading.\n   */\n  isLoading: boolean;\n  /**\n   * Flag indicating if the user is authenticated.\n   */\n  isAuthenticated: boolean;\n  /**\n   * Error encountered during authentication, if any.\n   */\n  error?: Error;\n  /**\n   *  The authenticated user's information, if available.\n   */\n  user?: MonoCloudUser;\n  /**\n   * Function to refetch the authentication state.\n   */\n  refetch?: () => void;\n}\n\n/**\n * @returns Authentication State\n */\nexport const useAuth = (): AuthState => {\n  const { data, error, isLoading, mutate } = useSWR<MonoCloudUser | undefined>(\n    process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_USER_INFO_URL ??\n      // eslint-disable-next-line no-underscore-dangle\n      `${process.env.__NEXT_ROUTER_BASEPATH ?? ''}/api/auth/userinfo`,\n    async (url: string) => {\n      const res = await fetch(url, { credentials: 'include' });\n\n      if (res.status === 204) {\n        return undefined;\n      }\n\n      if (res.ok) {\n        return res.json();\n      }\n\n      throw new Error('Failed to fetch user');\n    }\n  );\n\n  if (error) {\n    return {\n      user: undefined,\n      isLoading: false,\n      isAuthenticated: false,\n      error: error as Error,\n      refetch: () => mutate(),\n    };\n  }\n\n  if (data) {\n    return {\n      user: data,\n      isLoading,\n      isAuthenticated: !!data && Object.keys(data).length > 0,\n      error: undefined,\n      refetch: () => mutate(),\n    };\n  }\n\n  return {\n    user: undefined,\n    isLoading,\n    isAuthenticated: false,\n    error: undefined,\n    /* v8 ignore next -- @preserve */\n    refetch: (): void => {},\n  };\n};\n","/* eslint-disable react/display-name */\n'use client';\n\nimport React, { ComponentType, JSX, useEffect } from 'react';\nimport type { MonoCloudUser } from '@monocloud/auth-node-core';\nimport { isUserInGroup } from '@monocloud/auth-node-core/utils';\nimport { useAuth } from './use-auth';\nimport { ExtraAuthParams, GroupOptions } from '../types';\n\n/**\n * Options for configuring page protection.\n */\nexport type ProtectPageOptions = {\n  /**\n   *The url where the user will be redirected to after sign in\n   */\n  returnUrl?: string;\n\n  /**\n   * A custom react element to render when the user is not authenticated or is not a member of the specified groups.\n   */\n  onAccessDenied?: (user?: MonoCloudUser) => JSX.Element;\n\n  /**\n   * Authorization parameters to be used during authentication.\n   */\n  authParams?: ExtraAuthParams;\n\n  /**\n   * Callback function to handle errors.\n   * If not provided, errors will be thrown.\n   *\n   * @param error - The error object.\n   * @returns JSX element to handle the error.\n   */\n  onError?: (error: Error) => JSX.Element;\n} & GroupOptions;\n\nexport const redirectToSignIn = (\n  options: { returnUrl?: string } & ExtraAuthParams\n): void => {\n  const searchParams = new URLSearchParams(window.location.search);\n  searchParams.set(\n    'return_url',\n    options.returnUrl ?? window.location.toString()\n  );\n\n  if (options?.scopes) {\n    searchParams.set('scope', options.scopes);\n  }\n  if (options?.resource) {\n    searchParams.set('resource', options.resource);\n  }\n\n  if (options?.acrValues) {\n    searchParams.set('acr_values', options.acrValues.join(' '));\n  }\n\n  if (options?.display) {\n    searchParams.set('display', options.display);\n  }\n\n  if (options?.prompt) {\n    searchParams.set('prompt', options.prompt);\n  }\n\n  if (options?.authenticatorHint) {\n    searchParams.set('authenticator_hint', options.authenticatorHint);\n  }\n\n  if (options?.uiLocales) {\n    searchParams.set('ui_locales', options.uiLocales);\n  }\n\n  if (options?.maxAge) {\n    searchParams.set('max_age', options.maxAge.toString());\n  }\n\n  if (options?.loginHint) {\n    searchParams.set('login_hint', options.loginHint);\n  }\n\n  window.location.assign(\n    // eslint-disable-next-line no-underscore-dangle\n    `${process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_SIGNIN_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ''}/api/auth/signin`}?${searchParams.toString()}`\n  );\n};\n\nconst handlePageError = (\n  error: Error,\n  options?: ProtectPageOptions\n): JSX.Element => {\n  /* v8 ignore else -- @preserve */\n  if (options?.onError) {\n    return options.onError(error);\n  }\n\n  /* v8 ignore next -- @preserve */\n  throw error;\n};\n\n/**\n * Function to protect a client rendered page component.\n * Ensures that only authenticated users can access the component.\n *\n * @param Component - The component to protect.\n * @param options - The options.\n *\n * @returns Protected clinet rendered page component.\n */\nexport const protectPage = <P extends object>(\n  Component: ComponentType<P & { user: MonoCloudUser }>,\n  options?: ProtectPageOptions\n): React.FC<P> => {\n  return props => {\n    const { user, error, isLoading } = useAuth();\n\n    useEffect(() => {\n      if (!user && !isLoading && !error) {\n        if (options?.onAccessDenied) {\n          return;\n        }\n\n        const authParams = options?.authParams ?? {};\n        redirectToSignIn({\n          returnUrl: options?.returnUrl,\n          ...authParams,\n        });\n      }\n    }, [user, isLoading, error]);\n\n    if (error) {\n      return handlePageError(error, options);\n    }\n\n    if (!user && !isLoading && options?.onAccessDenied) {\n      return options.onAccessDenied();\n    }\n\n    if (user) {\n      if (\n        options?.groups &&\n        !isUserInGroup(\n          user,\n          options.groups,\n          options.groupsClaim ??\n            process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_GROUPS_CLAIM,\n          options.matchAll\n        )\n      ) {\n        const { onAccessDenied = (): JSX.Element => <div>Access Denied</div> } =\n          options;\n        return onAccessDenied(user);\n      }\n\n      return <Component user={user} {...props} />;\n    }\n\n    return null;\n  };\n};\n"],"mappings":";;;;;;;;;;;AAkCA,MAAa,gBAA2B;CACtC,MAAM,EAAE,MAAM,OAAO,WAAW,4BAC9B,QAAQ,IAAI,4CAEV,GAAG,QAAQ,IAAI,0BAA0B,GAAG,qBAC9C,OAAO,QAAgB;EACrB,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE,aAAa,WAAW,CAAC;AAExD,MAAI,IAAI,WAAW,IACjB;AAGF,MAAI,IAAI,GACN,QAAO,IAAI,MAAM;AAGnB,QAAM,IAAI,MAAM,uBAAuB;GAE1C;AAED,KAAI,MACF,QAAO;EACL,MAAM;EACN,WAAW;EACX,iBAAiB;EACV;EACP,eAAe,QAAQ;EACxB;AAGH,KAAI,KACF,QAAO;EACL,MAAM;EACN;EACA,iBAAiB,CAAC,CAAC,QAAQ,OAAO,KAAK,KAAK,CAAC,SAAS;EACtD,OAAO;EACP,eAAe,QAAQ;EACxB;AAGH,QAAO;EACL,MAAM;EACN;EACA,iBAAiB;EACjB,OAAO;EAEP,eAAqB;EACtB;;;;;AC3CH,MAAa,oBACX,YACS;CACT,MAAM,eAAe,IAAI,gBAAgB,OAAO,SAAS,OAAO;AAChE,cAAa,IACX,cACA,QAAQ,aAAa,OAAO,SAAS,UAAU,CAChD;AAED,uDAAI,QAAS,OACX,cAAa,IAAI,SAAS,QAAQ,OAAO;AAE3C,uDAAI,QAAS,SACX,cAAa,IAAI,YAAY,QAAQ,SAAS;AAGhD,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU,KAAK,IAAI,CAAC;AAG7D,uDAAI,QAAS,QACX,cAAa,IAAI,WAAW,QAAQ,QAAQ;AAG9C,uDAAI,QAAS,OACX,cAAa,IAAI,UAAU,QAAQ,OAAO;AAG5C,uDAAI,QAAS,kBACX,cAAa,IAAI,sBAAsB,QAAQ,kBAAkB;AAGnE,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU;AAGnD,uDAAI,QAAS,OACX,cAAa,IAAI,WAAW,QAAQ,OAAO,UAAU,CAAC;AAGxD,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU;AAGnD,QAAO,SAAS,OAEd,GAAG,QAAQ,IAAI,yCAAyC,GAAG,QAAQ,IAAI,0BAA0B,GAAG,kBAAkB,GAAG,aAAa,UAAU,GACjJ;;AAGH,MAAM,mBACJ,OACA,YACgB;;AAEhB,uDAAI,QAAS,QACX,QAAO,QAAQ,QAAQ,MAAM;;AAI/B,OAAM;;;;;;;;;;;AAYR,MAAa,eACX,WACA,YACgB;AAChB,SAAO,UAAS;EACd,MAAM,EAAE,MAAM,OAAO,cAAc,SAAS;AAE5C,6BAAgB;AACd,OAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO;AACjC,0DAAI,QAAS,eACX;IAGF,MAAM,gEAAa,QAAS,eAAc,EAAE;AAC5C,qBAAiB;KACf,6DAAW,QAAS;KACpB,GAAG;KACJ,CAAC;;KAEH;GAAC;GAAM;GAAW;GAAM,CAAC;AAE5B,MAAI,MACF,QAAO,gBAAgB,OAAO,QAAQ;AAGxC,MAAI,CAAC,QAAQ,CAAC,gEAAa,QAAS,gBAClC,QAAO,QAAQ,gBAAgB;AAGjC,MAAI,MAAM;AACR,0DACE,QAAS,WACT,oDACE,MACA,QAAQ,QACR,QAAQ,eACN,QAAQ,IAAI,yCACd,QAAQ,SACT,EACD;IACA,MAAM,EAAE,uBAAoC,4CAAC,aAAI,gBAAmB,KAClE;AACF,WAAO,eAAe,KAAK;;AAG7B,UAAO,4CAAC;IAAgB;IAAM,GAAI;KAAS;;AAG7C,SAAO"}

package/dist/components/client/index.cjs

@@ -0,0 +1,47 @@
+const require_chunk = require('../../chunk-CbDLau6x.cjs');
+const require_client = require('../../client-BjnSJS59.cjs');
+let _monocloud_auth_node_core_utils = require("@monocloud/auth-node-core/utils");
+let react = require("react");
+react = require_chunk.__toESM(react);
+
+//#region src/components/client/redirect-to-signin.tsx
+/**
+* A client side component that will redirect users to the sign in page.
+*
+* @type RedirectToSignInProps
+*/
+const RedirectToSignIn = ({ returnUrl, ...authParams }) => {
+	(0, react.useEffect)(() => {
+		require_client.redirectToSignIn({
+			returnUrl,
+			...authParams
+		});
+	}, [authParams, returnUrl]);
+	return null;
+};
+
+//#endregion
+//#region src/components/client/protected.tsx
+/**
+* A wrapper component that conditionally renders its children based on the user's authentication
+* status and group membership.
+*
+* @param props - The properties for the Protected component.
+*
+* @returns The children if authorized, the `onAccessDenied` content if unauthorized,
+* or `null` while loading.
+*/
+const Protected = ({ children, groups, groupsClaim, matchAllGroups = false, onAccessDenied = null }) => {
+	const { isLoading, error, isAuthenticated, user } = require_client.useAuth();
+	if (isLoading) return null;
+	if (error || !isAuthenticated || !user) {
+		if (onAccessDenied) return /* @__PURE__ */ react.default.createElement(react.default.Fragment, null, onAccessDenied);
+		return null;
+	}
+	return /* @__PURE__ */ react.default.createElement(react.default.Fragment, null, !groups || (0, _monocloud_auth_node_core_utils.isUserInGroup)(user, groups, groupsClaim ?? process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_GROUPS_CLAIM, matchAllGroups) ? children : onAccessDenied);
+};
+
+//#endregion
+exports.Protected = Protected;
+exports.RedirectToSignIn = RedirectToSignIn;
+//# sourceMappingURL=index.cjs.map

package/dist/components/client/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["useAuth"],"sources":["../../../src/components/client/redirect-to-signin.tsx","../../../src/components/client/protected.tsx"],"sourcesContent":["'use client';\n\nimport { useEffect } from 'react';\nimport { redirectToSignIn } from '../../client/protect';\nimport { ExtraAuthParams } from '../../types';\n\n/**\n * Props for the `<RedirectToSignIn />` Component\n */\nexport interface RedirectToSignInProps extends ExtraAuthParams {\n  /**\n   * The url where the user will be redirected to after sign in.\n   */\n  returnUrl?: string;\n}\n\n/**\n * A client side component that will redirect users to the sign in page.\n *\n * @type RedirectToSignInProps\n */\nexport const RedirectToSignIn = ({\n  returnUrl,\n  ...authParams\n}: RedirectToSignInProps): null => {\n  useEffect(() => {\n    redirectToSignIn({ returnUrl, ...authParams });\n  }, [authParams, returnUrl]);\n  return null;\n};\n","import { isUserInGroup } from '@monocloud/auth-node-core/utils';\nimport React, { JSX } from 'react';\nimport { useAuth } from '../../client';\n\nexport interface ProtectedComponentProps {\n  /**\n   * Components that should be rendered if the user is authenticated.\n   */\n  children: React.ReactNode;\n\n  /**\n   * A list of group names or IDs to which the user must belong to. The user should belong to atleast one of the specified groups.\n   */\n  groups?: string[];\n\n  /**\n   * Name of the claim of user's groups. default: `groups`.\n   */\n  groupsClaim?: string;\n\n  /**\n   * Flag indicating if all groups specified should be present in the users profile. default: false.\n   */\n  matchAllGroups?: boolean;\n\n  /**\n   * A fallback component that should render if the user is not authenticated.\n   */\n  onAccessDenied?: React.ReactNode;\n}\n\n/**\n * A wrapper component that conditionally renders its children based on the user's authentication\n * status and group membership.\n *\n * @param props - The properties for the Protected component.\n *\n * @returns The children if authorized, the `onAccessDenied` content if unauthorized,\n * or `null` while loading.\n */\nexport const Protected = ({\n  children,\n  groups,\n  groupsClaim,\n  matchAllGroups = false,\n  onAccessDenied = null,\n}: ProtectedComponentProps): JSX.Element | null => {\n  const { isLoading, error, isAuthenticated, user } = useAuth();\n\n  if (isLoading) {\n    return null;\n  }\n\n  if (error || !isAuthenticated || !user) {\n    if (onAccessDenied) {\n      return <>{onAccessDenied}</>;\n    }\n\n    return null;\n  }\n\n  return (\n    <>\n      {!groups ||\n      isUserInGroup(\n        user,\n        groups,\n        groupsClaim ?? process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_GROUPS_CLAIM,\n        matchAllGroups\n      )\n        ? children\n        : onAccessDenied}\n    </>\n  );\n};\n"],"mappings":";;;;;;;;;;;;AAqBA,MAAa,oBAAoB,EAC/B,WACA,GAAG,iBAC8B;AACjC,4BAAgB;AACd,kCAAiB;GAAE;GAAW,GAAG;GAAY,CAAC;IAC7C,CAAC,YAAY,UAAU,CAAC;AAC3B,QAAO;;;;;;;;;;;;;;ACYT,MAAa,aAAa,EACxB,UACA,QACA,aACA,iBAAiB,OACjB,iBAAiB,WACgC;CACjD,MAAM,EAAE,WAAW,OAAO,iBAAiB,SAASA,wBAAS;AAE7D,KAAI,UACF,QAAO;AAGT,KAAI,SAAS,CAAC,mBAAmB,CAAC,MAAM;AACtC,MAAI,eACF,QAAO,0EAAG,eAAkB;AAG9B,SAAO;;AAGT,QACE,0EACG,CAAC,6DAEA,MACA,QACA,eAAe,QAAQ,IAAI,yCAC3B,eACD,GACG,WACA,eACH"}