@monocloud/auth-nextjs 0.1.1 → 0.1.2

package/dist/client/index.cjs

@@ -1,4 +1,4 @@
-const require_client = require('../client-BjnSJS59.cjs');
+const require_client = require('../client-Be6A2vEn.cjs');
 
 exports.protectPage = require_client.protectPage;
 exports.useAuth = require_client.useAuth;

package/dist/client/index.d.mts

@@ -1,4 +1,4 @@
-import { i as ExtraAuthParams, o as GroupOptions } from "../types-BleaXQUP.mjs";
+import { a as GroupOptions, i as ExtraAuthParams } from "../types-DOfZTKa6.mjs";
 import { MonoCloudUser } from "@monocloud/auth-node-core";
 import React, { ComponentType, JSX } from "react";
 
@@ -25,11 +25,88 @@ interface AuthState {
   user?: MonoCloudUser;
   /**
    * Function to refetch the authentication state.
+   *
    */
-  refetch?: () => void;
+  refetch: (refresh?: boolean) => void;
 }
 /**
+ *
+ * Hook for getting the user's profile on client components
+ *
  * @returns Authentication State
+ *
+ * @example App Router
+ *
+ * ```tsx
+ * "use client";
+ *
+ * import { useAuth } from "@monocloud/auth-nextjs/client";
+ *
+ * export default function Home() {
+ *   const { user } = useAuth();
+ *
+ *   return <>User Id: {user?.sub}</>;
+ * }
+ * ```
+ *
+ * @example App Router - Refetch user from Userinfo endpoint
+ *
+ * Calling `refetch(true)` will force refresh the user's profile from the userinfo endpoint.
+ * If you do not intent to refersh from your tenants userinfo endpoint, use just `refetch()`
+ *
+ * **Note⚠️: You need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for force refresh to work**
+ *
+ * ```tsx
+ * "use client";
+ *
+ * import { useAuth } from "@monocloud/auth-nextjs/client";
+ *
+ * export default function Home() {
+ *   const { user, refetch } = useAuth();
+ *
+ *   return (
+ *     <>
+ *       <pre>{JSON.stringify(user)}</pre>
+ *       <button onClick={() => refetch(true)}>Refresh</button>
+ *     </>
+ *   );
+ * }
+ * ```
+ *
+ * @example Pages Router
+ *
+ * ```tsx
+ * import { useAuth } from "@monocloud/auth-nextjs/client";
+ *
+ * export default function Home() {
+ *   const { user } = useAuth();
+ *
+ *   return <>User Id: {user?.sub}</>;
+ * }
+ * ```
+ *
+ * @example Pages Router - Refetch user from Userinfo endpoint
+ *
+ *  Calling `refetch(true)` will force refresh the user's profile from the userinfo endpoint.
+ * If you do not intent to refersh from your tenants userinfo endpoint, use just `refetch()`
+ *
+ * **Note⚠️: You need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for force refresh to work**
+ *
+ * ```tsx
+ * import { useAuth } from "@monocloud/auth-nextjs/client";
+ *
+ * export default function Home() {
+ *   const { user, refetch } = useAuth();
+ *
+ *   return (
+ *     <>
+ *       <pre>{JSON.stringify(user)}</pre>
+ *       <button onClick={() => refetch(true)}>Refresh</button>
+ *     </>
+ *   );
+ * }
+ * ```
+ *
  */
 declare const useAuth: () => AuthState;
 //#endregion
@@ -63,10 +140,66 @@ type ProtectPageOptions = {
  * Function to protect a client rendered page component.
  * Ensures that only authenticated users can access the component.
  *
+ * **Note⚠️: Since `window.location` is set as `returnUrl` query param by default, you need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for returning to the same page.**
+ *
  * @param Component - The component to protect.
  * @param options - The options.
  *
- * @returns Protected clinet rendered page component.
+ * @returns Protected client rendered page component.
+ *
+ * @example App Router
+ *
+ * ```tsx
+ * "use client";
+ *
+ * import { protectPage } from "@monocloud/auth-nextjs/client";
+ *
+ * export default protectPage(function Home() {
+ *   return <>You are signed in</>;
+ * });
+ * ```
+ *
+ * @example App Router with options
+ *
+ * See {@link ProtectPageOptions} for more options.
+ *
+ * ```tsx
+ * "use client";
+ *
+ * import { protectPage } from "@monocloud/auth-nextjs/client";
+ *
+ * export default protectPage(
+ *   function Home() {
+ *     return <>You are signed in</>;
+ *   },
+ *   { returnUrl: "/dashboard", authParams: { loginHint: "username" } }
+ * );
+ * ```
+
+* @example Pages Router
+ *
+ * ```tsx
+ * import { protectPage } from "@monocloud/auth-nextjs/client";
+ *
+ * export default protectPage(function Home() {
+ *   return <>You are signed in</>;
+ * });
+ * ```
+ *
+ * @example Pages Router with options
+ *
+ * See {@link ProtectPageOptions} for more options.
+ *
+ * ```tsx
+ * import { protectPage } from "@monocloud/auth-nextjs/client";
+ *
+ * export default protectPage(
+ *   function Home() {
+ *     return <>You are signed in</>;
+ *   },
+ *   { returnUrl: "/dashboard", authParams: { loginHint: "username" } }
+ * );
+ * ```
  */
 declare const protectPage: <P extends object>(Component: ComponentType<P & {
   user: MonoCloudUser;

package/dist/client/index.mjs

@@ -1,3 +1,3 @@
-import { r as useAuth, t as protectPage } from "../client-0gaUvMR7.mjs";
+import { r as useAuth, t as protectPage } from "../client-CnvBgZM-.mjs";
 
 export { protectPage, useAuth };

package/dist/{client-BjnSJS59.cjs → client-Be6A2vEn.cjs}

@@ -6,29 +6,112 @@ let react = require("react");
 react = require_chunk.__toESM(react);
 
 //#region src/client/use-auth.tsx
+const fetchUser = async (url) => {
+	const res = await fetch(url, { credentials: "include" });
+	if (res.status === 204) return;
+	if (res.ok) return res.json();
+	throw new Error("Failed to fetch user");
+};
 /**
+*
+* Hook for getting the user's profile on client components
+*
 * @returns Authentication State
+*
+* @example App Router
+*
+* ```tsx
+* "use client";
+*
+* import { useAuth } from "@monocloud/auth-nextjs/client";
+*
+* export default function Home() {
+*   const { user } = useAuth();
+*
+*   return <>User Id: {user?.sub}</>;
+* }
+* ```
+*
+* @example App Router - Refetch user from Userinfo endpoint
+*
+* Calling `refetch(true)` will force refresh the user's profile from the userinfo endpoint.
+* If you do not intent to refersh from your tenants userinfo endpoint, use just `refetch()`
+*
+* **Note⚠️: You need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for force refresh to work**
+*
+* ```tsx
+* "use client";
+*
+* import { useAuth } from "@monocloud/auth-nextjs/client";
+*
+* export default function Home() {
+*   const { user, refetch } = useAuth();
+*
+*   return (
+*     <>
+*       <pre>{JSON.stringify(user)}</pre>
+*       <button onClick={() => refetch(true)}>Refresh</button>
+*     </>
+*   );
+* }
+* ```
+*
+* @example Pages Router
+*
+* ```tsx
+* import { useAuth } from "@monocloud/auth-nextjs/client";
+*
+* export default function Home() {
+*   const { user } = useAuth();
+*
+*   return <>User Id: {user?.sub}</>;
+* }
+* ```
+*
+* @example Pages Router - Refetch user from Userinfo endpoint
+*
+*  Calling `refetch(true)` will force refresh the user's profile from the userinfo endpoint.
+* If you do not intent to refersh from your tenants userinfo endpoint, use just `refetch()`
+*
+* **Note⚠️: You need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for force refresh to work**
+*
+* ```tsx
+* import { useAuth } from "@monocloud/auth-nextjs/client";
+*
+* export default function Home() {
+*   const { user, refetch } = useAuth();
+*
+*   return (
+*     <>
+*       <pre>{JSON.stringify(user)}</pre>
+*       <button onClick={() => refetch(true)}>Refresh</button>
+*     </>
+*   );
+* }
+* ```
+*
 */
 const useAuth = () => {
-	const { data, error, isLoading, mutate } = (0, swr.default)(process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_USER_INFO_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ""}/api/auth/userinfo`, async (url) => {
-		const res = await fetch(url, { credentials: "include" });
-		if (res.status === 204) return;
-		if (res.ok) return res.json();
-		throw new Error("Failed to fetch user");
-	});
+	const key = process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_USER_INFO_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ""}/api/auth/userinfo`;
+	const { data, error, isLoading, mutate } = (0, swr.default)(key, fetchUser);
+	const refetch = (refresh) => {
+		const url = new URL(key, "https://dummy");
+		if (refresh) url.searchParams.set("refresh", "true");
+		mutate(async () => await fetchUser(url.pathname + url.search), { revalidate: false });
+	};
 	if (error) return {
 		user: void 0,
 		isLoading: false,
 		isAuthenticated: false,
 		error,
-		refetch: () => mutate()
+		refetch
 	};
 	if (data) return {
 		user: data,
 		isLoading,
 		isAuthenticated: !!data && Object.keys(data).length > 0,
 		error: void 0,
-		refetch: () => mutate()
+		refetch
 	};
 	return {
 		user: void 0,
@@ -64,11 +147,67 @@ const handlePageError = (error, options) => {
 /**
 * Function to protect a client rendered page component.
 * Ensures that only authenticated users can access the component.
+* 
+* **Note⚠️: Since `window.location` is set as `returnUrl` query param by default, you need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for returning to the same page.**
 *
 * @param Component - The component to protect.
 * @param options - The options.
 *
-* @returns Protected clinet rendered page component.
+* @returns Protected client rendered page component.
+*
+* @example App Router
+*
+* ```tsx
+* "use client";
+*
+* import { protectPage } from "@monocloud/auth-nextjs/client";
+*
+* export default protectPage(function Home() {
+*   return <>You are signed in</>;
+* });
+* ```
+*
+* @example App Router with options
+* 
+* See {@link ProtectPageOptions} for more options.
+*
+* ```tsx
+* "use client";
+*
+* import { protectPage } from "@monocloud/auth-nextjs/client";
+*
+* export default protectPage(
+*   function Home() {
+*     return <>You are signed in</>;
+*   },
+*   { returnUrl: "/dashboard", authParams: { loginHint: "username" } }
+* );
+* ```
+
+* @example Pages Router
+*
+* ```tsx
+* import { protectPage } from "@monocloud/auth-nextjs/client";
+*
+* export default protectPage(function Home() {
+*   return <>You are signed in</>;
+* });
+* ```
+*
+* @example Pages Router with options
+* 
+* See {@link ProtectPageOptions} for more options.
+*
+* ```tsx
+* import { protectPage } from "@monocloud/auth-nextjs/client";
+*
+* export default protectPage(
+*   function Home() {
+*     return <>You are signed in</>;
+*   },
+*   { returnUrl: "/dashboard", authParams: { loginHint: "username" } }
+* );
+* ```
 */
 const protectPage = (Component, options) => {
 	return (props) => {
@@ -122,4 +261,4 @@ Object.defineProperty(exports, 'useAuth', {
     return useAuth;
   }
 });
-//# sourceMappingURL=client-BjnSJS59.cjs.map
+//# sourceMappingURL=client-Be6A2vEn.cjs.map

package/dist/client-Be6A2vEn.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-Be6A2vEn.cjs","names":[],"sources":["../src/client/use-auth.tsx","../src/client/protect.tsx"],"sourcesContent":["'use client';\n\nimport type { MonoCloudUser } from '@monocloud/auth-node-core';\nimport useSWR from 'swr';\n\n/**\n * Authentication State returned by `useAuth` hook.\n */\nexport interface AuthState {\n  /**\n   * Flag indicating if the authentication state is still loading.\n   */\n  isLoading: boolean;\n  /**\n   * Flag indicating if the user is authenticated.\n   */\n  isAuthenticated: boolean;\n  /**\n   * Error encountered during authentication, if any.\n   */\n  error?: Error;\n  /**\n   *  The authenticated user's information, if available.\n   */\n  user?: MonoCloudUser;\n  /**\n   * Function to refetch the authentication state.\n   *\n   */\n  refetch: (refresh?: boolean) => void;\n}\n\nconst fetchUser = async (url: string): Promise<MonoCloudUser | undefined> => {\n  const res = await fetch(url, { credentials: 'include' });\n\n  if (res.status === 204) {\n    return undefined;\n  }\n\n  if (res.ok) {\n    return res.json();\n  }\n\n  throw new Error('Failed to fetch user');\n};\n\n/**\n *\n * Hook for getting the user's profile on client components\n *\n * @returns Authentication State\n *\n * @example App Router\n *\n * ```tsx\n * \"use client\";\n *\n * import { useAuth } from \"@monocloud/auth-nextjs/client\";\n *\n * export default function Home() {\n *   const { user } = useAuth();\n *\n *   return <>User Id: {user?.sub}</>;\n * }\n * ```\n *\n * @example App Router - Refetch user from Userinfo endpoint\n *\n * Calling `refetch(true)` will force refresh the user's profile from the userinfo endpoint.\n * If you do not intent to refersh from your tenants userinfo endpoint, use just `refetch()`\n *\n * **Note⚠️: You need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for force refresh to work**\n *\n * ```tsx\n * \"use client\";\n *\n * import { useAuth } from \"@monocloud/auth-nextjs/client\";\n *\n * export default function Home() {\n *   const { user, refetch } = useAuth();\n *\n *   return (\n *     <>\n *       <pre>{JSON.stringify(user)}</pre>\n *       <button onClick={() => refetch(true)}>Refresh</button>\n *     </>\n *   );\n * }\n * ```\n *\n * @example Pages Router\n *\n * ```tsx\n * import { useAuth } from \"@monocloud/auth-nextjs/client\";\n *\n * export default function Home() {\n *   const { user } = useAuth();\n *\n *   return <>User Id: {user?.sub}</>;\n * }\n * ```\n *\n * @example Pages Router - Refetch user from Userinfo endpoint\n *\n *  Calling `refetch(true)` will force refresh the user's profile from the userinfo endpoint.\n * If you do not intent to refersh from your tenants userinfo endpoint, use just `refetch()`\n *\n * **Note⚠️: You need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for force refresh to work**\n *\n * ```tsx\n * import { useAuth } from \"@monocloud/auth-nextjs/client\";\n *\n * export default function Home() {\n *   const { user, refetch } = useAuth();\n *\n *   return (\n *     <>\n *       <pre>{JSON.stringify(user)}</pre>\n *       <button onClick={() => refetch(true)}>Refresh</button>\n *     </>\n *   );\n * }\n * ```\n *\n */\nexport const useAuth = (): AuthState => {\n  const key =\n    process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_USER_INFO_URL ??\n    // eslint-disable-next-line no-underscore-dangle\n    `${process.env.__NEXT_ROUTER_BASEPATH ?? ''}/api/auth/userinfo`;\n\n  const { data, error, isLoading, mutate } = useSWR<MonoCloudUser | undefined>(\n    key,\n    fetchUser\n  );\n\n  const refetch = (refresh?: boolean): void => {\n    const url = new URL(key, 'https://dummy');\n    if (refresh) {\n      url.searchParams.set('refresh', 'true');\n    }\n\n    void mutate(async () => await fetchUser(url.pathname + url.search), {\n      revalidate: false,\n    });\n  };\n\n  if (error) {\n    return {\n      user: undefined,\n      isLoading: false,\n      isAuthenticated: false,\n      error: error as Error,\n      refetch,\n    };\n  }\n\n  if (data) {\n    return {\n      user: data,\n      isLoading,\n      isAuthenticated: !!data && Object.keys(data).length > 0,\n      error: undefined,\n      refetch,\n    };\n  }\n\n  return {\n    user: undefined,\n    isLoading,\n    isAuthenticated: false,\n    error: undefined,\n    /* v8 ignore next -- @preserve */\n    refetch: (): void => {},\n  };\n};\n","/* eslint-disable react/display-name */\n'use client';\n\nimport React, { ComponentType, JSX, useEffect } from 'react';\nimport type { MonoCloudUser } from '@monocloud/auth-node-core';\nimport { isUserInGroup } from '@monocloud/auth-node-core/utils';\nimport { useAuth } from './use-auth';\nimport { ExtraAuthParams, GroupOptions } from '../types';\n\n/**\n * Options for configuring page protection.\n */\nexport type ProtectPageOptions = {\n  /**\n   *The url where the user will be redirected to after sign in\n   */\n  returnUrl?: string;\n\n  /**\n   * A custom react element to render when the user is not authenticated or is not a member of the specified groups.\n   */\n  onAccessDenied?: (user?: MonoCloudUser) => JSX.Element;\n\n  /**\n   * Authorization parameters to be used during authentication.\n   */\n  authParams?: ExtraAuthParams;\n\n  /**\n   * Callback function to handle errors.\n   * If not provided, errors will be thrown.\n   *\n   * @param error - The error object.\n   * @returns JSX element to handle the error.\n   */\n  onError?: (error: Error) => JSX.Element;\n} & GroupOptions;\n\nexport const redirectToSignIn = (\n  options: { returnUrl?: string } & ExtraAuthParams\n): void => {\n  const searchParams = new URLSearchParams(window.location.search);\n  searchParams.set(\n    'return_url',\n    options.returnUrl ?? window.location.toString()\n  );\n\n  if (options?.scopes) {\n    searchParams.set('scope', options.scopes);\n  }\n  if (options?.resource) {\n    searchParams.set('resource', options.resource);\n  }\n\n  if (options?.acrValues) {\n    searchParams.set('acr_values', options.acrValues.join(' '));\n  }\n\n  if (options?.display) {\n    searchParams.set('display', options.display);\n  }\n\n  if (options?.prompt) {\n    searchParams.set('prompt', options.prompt);\n  }\n\n  if (options?.authenticatorHint) {\n    searchParams.set('authenticator_hint', options.authenticatorHint);\n  }\n\n  if (options?.uiLocales) {\n    searchParams.set('ui_locales', options.uiLocales);\n  }\n\n  if (options?.maxAge) {\n    searchParams.set('max_age', options.maxAge.toString());\n  }\n\n  if (options?.loginHint) {\n    searchParams.set('login_hint', options.loginHint);\n  }\n\n  window.location.assign(\n    // eslint-disable-next-line no-underscore-dangle\n    `${process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_SIGNIN_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ''}/api/auth/signin`}?${searchParams.toString()}`\n  );\n};\n\nconst handlePageError = (\n  error: Error,\n  options?: ProtectPageOptions\n): JSX.Element => {\n  /* v8 ignore else -- @preserve */\n  if (options?.onError) {\n    return options.onError(error);\n  }\n\n  /* v8 ignore next -- @preserve */\n  throw error;\n};\n\n/**\n * Function to protect a client rendered page component.\n * Ensures that only authenticated users can access the component.\n * \n * **Note⚠️: Since `window.location` is set as `returnUrl` query param by default, you need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for returning to the same page.**\n *\n * @param Component - The component to protect.\n * @param options - The options.\n *\n * @returns Protected client rendered page component.\n *\n * @example App Router\n *\n * ```tsx\n * \"use client\";\n *\n * import { protectPage } from \"@monocloud/auth-nextjs/client\";\n *\n * export default protectPage(function Home() {\n *   return <>You are signed in</>;\n * });\n * ```\n *\n * @example App Router with options\n * \n * See {@link ProtectPageOptions} for more options.\n *\n * ```tsx\n * \"use client\";\n *\n * import { protectPage } from \"@monocloud/auth-nextjs/client\";\n *\n * export default protectPage(\n *   function Home() {\n *     return <>You are signed in</>;\n *   },\n *   { returnUrl: \"/dashboard\", authParams: { loginHint: \"username\" } }\n * );\n * ```\n\n* @example Pages Router\n *\n * ```tsx\n * import { protectPage } from \"@monocloud/auth-nextjs/client\";\n *\n * export default protectPage(function Home() {\n *   return <>You are signed in</>;\n * });\n * ```\n *\n * @example Pages Router with options\n * \n * See {@link ProtectPageOptions} for more options.\n *\n * ```tsx\n * import { protectPage } from \"@monocloud/auth-nextjs/client\";\n *\n * export default protectPage(\n *   function Home() {\n *     return <>You are signed in</>;\n *   },\n *   { returnUrl: \"/dashboard\", authParams: { loginHint: \"username\" } }\n * );\n * ```\n */\nexport const protectPage = <P extends object>(\n  Component: ComponentType<P & { user: MonoCloudUser }>,\n  options?: ProtectPageOptions\n): React.FC<P> => {\n  return props => {\n    const { user, error, isLoading } = useAuth();\n\n    useEffect(() => {\n      if (!user && !isLoading && !error) {\n        if (options?.onAccessDenied) {\n          return;\n        }\n\n        const authParams = options?.authParams ?? {};\n        redirectToSignIn({\n          returnUrl: options?.returnUrl,\n          ...authParams,\n        });\n      }\n    }, [user, isLoading, error]);\n\n    if (error) {\n      return handlePageError(error, options);\n    }\n\n    if (!user && !isLoading && options?.onAccessDenied) {\n      return options.onAccessDenied();\n    }\n\n    if (user) {\n      if (\n        options?.groups &&\n        !isUserInGroup(\n          user,\n          options.groups,\n          options.groupsClaim ??\n            process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_GROUPS_CLAIM,\n          options.matchAll\n        )\n      ) {\n        const { onAccessDenied = (): JSX.Element => <div>Access Denied</div> } =\n          options;\n        return onAccessDenied(user);\n      }\n\n      return <Component user={user} {...props} />;\n    }\n\n    return null;\n  };\n};\n"],"mappings":";;;;;;;;AAgCA,MAAM,YAAY,OAAO,QAAoD;CAC3E,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE,aAAa,WAAW,CAAC;AAExD,KAAI,IAAI,WAAW,IACjB;AAGF,KAAI,IAAI,GACN,QAAO,IAAI,MAAM;AAGnB,OAAM,IAAI,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkFzC,MAAa,gBAA2B;CACtC,MAAM,MACJ,QAAQ,IAAI,4CAEZ,GAAG,QAAQ,IAAI,0BAA0B,GAAG;CAE9C,MAAM,EAAE,MAAM,OAAO,WAAW,4BAC9B,KACA,UACD;CAED,MAAM,WAAW,YAA4B;EAC3C,MAAM,MAAM,IAAI,IAAI,KAAK,gBAAgB;AACzC,MAAI,QACF,KAAI,aAAa,IAAI,WAAW,OAAO;AAGzC,EAAK,OAAO,YAAY,MAAM,UAAU,IAAI,WAAW,IAAI,OAAO,EAAE,EAClE,YAAY,OACb,CAAC;;AAGJ,KAAI,MACF,QAAO;EACL,MAAM;EACN,WAAW;EACX,iBAAiB;EACV;EACP;EACD;AAGH,KAAI,KACF,QAAO;EACL,MAAM;EACN;EACA,iBAAiB,CAAC,CAAC,QAAQ,OAAO,KAAK,KAAK,CAAC,SAAS;EACtD,OAAO;EACP;EACD;AAGH,QAAO;EACL,MAAM;EACN;EACA,iBAAiB;EACjB,OAAO;EAEP,eAAqB;EACtB;;;;;ACxIH,MAAa,oBACX,YACS;CACT,MAAM,eAAe,IAAI,gBAAgB,OAAO,SAAS,OAAO;AAChE,cAAa,IACX,cACA,QAAQ,aAAa,OAAO,SAAS,UAAU,CAChD;AAED,uDAAI,QAAS,OACX,cAAa,IAAI,SAAS,QAAQ,OAAO;AAE3C,uDAAI,QAAS,SACX,cAAa,IAAI,YAAY,QAAQ,SAAS;AAGhD,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU,KAAK,IAAI,CAAC;AAG7D,uDAAI,QAAS,QACX,cAAa,IAAI,WAAW,QAAQ,QAAQ;AAG9C,uDAAI,QAAS,OACX,cAAa,IAAI,UAAU,QAAQ,OAAO;AAG5C,uDAAI,QAAS,kBACX,cAAa,IAAI,sBAAsB,QAAQ,kBAAkB;AAGnE,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU;AAGnD,uDAAI,QAAS,OACX,cAAa,IAAI,WAAW,QAAQ,OAAO,UAAU,CAAC;AAGxD,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU;AAGnD,QAAO,SAAS,OAEd,GAAG,QAAQ,IAAI,yCAAyC,GAAG,QAAQ,IAAI,0BAA0B,GAAG,kBAAkB,GAAG,aAAa,UAAU,GACjJ;;AAGH,MAAM,mBACJ,OACA,YACgB;;AAEhB,uDAAI,QAAS,QACX,QAAO,QAAQ,QAAQ,MAAM;;AAI/B,OAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoER,MAAa,eACX,WACA,YACgB;AAChB,SAAO,UAAS;EACd,MAAM,EAAE,MAAM,OAAO,cAAc,SAAS;AAE5C,6BAAgB;AACd,OAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO;AACjC,0DAAI,QAAS,eACX;IAGF,MAAM,gEAAa,QAAS,eAAc,EAAE;AAC5C,qBAAiB;KACf,6DAAW,QAAS;KACpB,GAAG;KACJ,CAAC;;KAEH;GAAC;GAAM;GAAW;GAAM,CAAC;AAE5B,MAAI,MACF,QAAO,gBAAgB,OAAO,QAAQ;AAGxC,MAAI,CAAC,QAAQ,CAAC,gEAAa,QAAS,gBAClC,QAAO,QAAQ,gBAAgB;AAGjC,MAAI,MAAM;AACR,0DACE,QAAS,WACT,oDACE,MACA,QAAQ,QACR,QAAQ,eACN,QAAQ,IAAI,yCACd,QAAQ,SACT,EACD;IACA,MAAM,EAAE,uBAAoC,4CAAC,aAAI,gBAAmB,KAClE;AACF,WAAO,eAAe,KAAK;;AAG7B,UAAO,4CAAC;IAAgB;IAAM,GAAI;KAAS;;AAG7C,SAAO"}

package/dist/client-CnvBgZM-.mjs

@@ -0,0 +1,244 @@
+import { isUserInGroup } from "@monocloud/auth-node-core/utils";
+import useSWR from "swr";
+import React, { useEffect } from "react";
+
+//#region src/client/use-auth.tsx
+const fetchUser = async (url) => {
+	const res = await fetch(url, { credentials: "include" });
+	if (res.status === 204) return;
+	if (res.ok) return res.json();
+	throw new Error("Failed to fetch user");
+};
+/**
+*
+* Hook for getting the user's profile on client components
+*
+* @returns Authentication State
+*
+* @example App Router
+*
+* ```tsx
+* "use client";
+*
+* import { useAuth } from "@monocloud/auth-nextjs/client";
+*
+* export default function Home() {
+*   const { user } = useAuth();
+*
+*   return <>User Id: {user?.sub}</>;
+* }
+* ```
+*
+* @example App Router - Refetch user from Userinfo endpoint
+*
+* Calling `refetch(true)` will force refresh the user's profile from the userinfo endpoint.
+* If you do not intent to refersh from your tenants userinfo endpoint, use just `refetch()`
+*
+* **Note⚠️: You need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for force refresh to work**
+*
+* ```tsx
+* "use client";
+*
+* import { useAuth } from "@monocloud/auth-nextjs/client";
+*
+* export default function Home() {
+*   const { user, refetch } = useAuth();
+*
+*   return (
+*     <>
+*       <pre>{JSON.stringify(user)}</pre>
+*       <button onClick={() => refetch(true)}>Refresh</button>
+*     </>
+*   );
+* }
+* ```
+*
+* @example Pages Router
+*
+* ```tsx
+* import { useAuth } from "@monocloud/auth-nextjs/client";
+*
+* export default function Home() {
+*   const { user } = useAuth();
+*
+*   return <>User Id: {user?.sub}</>;
+* }
+* ```
+*
+* @example Pages Router - Refetch user from Userinfo endpoint
+*
+*  Calling `refetch(true)` will force refresh the user's profile from the userinfo endpoint.
+* If you do not intent to refersh from your tenants userinfo endpoint, use just `refetch()`
+*
+* **Note⚠️: You need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for force refresh to work**
+*
+* ```tsx
+* import { useAuth } from "@monocloud/auth-nextjs/client";
+*
+* export default function Home() {
+*   const { user, refetch } = useAuth();
+*
+*   return (
+*     <>
+*       <pre>{JSON.stringify(user)}</pre>
+*       <button onClick={() => refetch(true)}>Refresh</button>
+*     </>
+*   );
+* }
+* ```
+*
+*/
+const useAuth = () => {
+	const key = process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_USER_INFO_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ""}/api/auth/userinfo`;
+	const { data, error, isLoading, mutate } = useSWR(key, fetchUser);
+	const refetch = (refresh) => {
+		const url = new URL(key, "https://dummy");
+		if (refresh) url.searchParams.set("refresh", "true");
+		mutate(async () => await fetchUser(url.pathname + url.search), { revalidate: false });
+	};
+	if (error) return {
+		user: void 0,
+		isLoading: false,
+		isAuthenticated: false,
+		error,
+		refetch
+	};
+	if (data) return {
+		user: data,
+		isLoading,
+		isAuthenticated: !!data && Object.keys(data).length > 0,
+		error: void 0,
+		refetch
+	};
+	return {
+		user: void 0,
+		isLoading,
+		isAuthenticated: false,
+		error: void 0,
+		refetch: () => {}
+	};
+};
+
+//#endregion
+//#region src/client/protect.tsx
+const redirectToSignIn = (options) => {
+	const searchParams = new URLSearchParams(window.location.search);
+	searchParams.set("return_url", options.returnUrl ?? window.location.toString());
+	if (options === null || options === void 0 ? void 0 : options.scopes) searchParams.set("scope", options.scopes);
+	if (options === null || options === void 0 ? void 0 : options.resource) searchParams.set("resource", options.resource);
+	if (options === null || options === void 0 ? void 0 : options.acrValues) searchParams.set("acr_values", options.acrValues.join(" "));
+	if (options === null || options === void 0 ? void 0 : options.display) searchParams.set("display", options.display);
+	if (options === null || options === void 0 ? void 0 : options.prompt) searchParams.set("prompt", options.prompt);
+	if (options === null || options === void 0 ? void 0 : options.authenticatorHint) searchParams.set("authenticator_hint", options.authenticatorHint);
+	if (options === null || options === void 0 ? void 0 : options.uiLocales) searchParams.set("ui_locales", options.uiLocales);
+	if (options === null || options === void 0 ? void 0 : options.maxAge) searchParams.set("max_age", options.maxAge.toString());
+	if (options === null || options === void 0 ? void 0 : options.loginHint) searchParams.set("login_hint", options.loginHint);
+	window.location.assign(`${process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_SIGNIN_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ""}/api/auth/signin`}?${searchParams.toString()}`);
+};
+const handlePageError = (error, options) => {
+	/* v8 ignore else -- @preserve */
+	if (options === null || options === void 0 ? void 0 : options.onError) return options.onError(error);
+	/* v8 ignore next -- @preserve */
+	throw error;
+};
+/**
+* Function to protect a client rendered page component.
+* Ensures that only authenticated users can access the component.
+* 
+* **Note⚠️: Since `window.location` is set as `returnUrl` query param by default, you need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for returning to the same page.**
+*
+* @param Component - The component to protect.
+* @param options - The options.
+*
+* @returns Protected client rendered page component.
+*
+* @example App Router
+*
+* ```tsx
+* "use client";
+*
+* import { protectPage } from "@monocloud/auth-nextjs/client";
+*
+* export default protectPage(function Home() {
+*   return <>You are signed in</>;
+* });
+* ```
+*
+* @example App Router with options
+* 
+* See {@link ProtectPageOptions} for more options.
+*
+* ```tsx
+* "use client";
+*
+* import { protectPage } from "@monocloud/auth-nextjs/client";
+*
+* export default protectPage(
+*   function Home() {
+*     return <>You are signed in</>;
+*   },
+*   { returnUrl: "/dashboard", authParams: { loginHint: "username" } }
+* );
+* ```
+
+* @example Pages Router
+*
+* ```tsx
+* import { protectPage } from "@monocloud/auth-nextjs/client";
+*
+* export default protectPage(function Home() {
+*   return <>You are signed in</>;
+* });
+* ```
+*
+* @example Pages Router with options
+* 
+* See {@link ProtectPageOptions} for more options.
+*
+* ```tsx
+* import { protectPage } from "@monocloud/auth-nextjs/client";
+*
+* export default protectPage(
+*   function Home() {
+*     return <>You are signed in</>;
+*   },
+*   { returnUrl: "/dashboard", authParams: { loginHint: "username" } }
+* );
+* ```
+*/
+const protectPage = (Component, options) => {
+	return (props) => {
+		const { user, error, isLoading } = useAuth();
+		useEffect(() => {
+			if (!user && !isLoading && !error) {
+				if (options === null || options === void 0 ? void 0 : options.onAccessDenied) return;
+				const authParams = (options === null || options === void 0 ? void 0 : options.authParams) ?? {};
+				redirectToSignIn({
+					returnUrl: options === null || options === void 0 ? void 0 : options.returnUrl,
+					...authParams
+				});
+			}
+		}, [
+			user,
+			isLoading,
+			error
+		]);
+		if (error) return handlePageError(error, options);
+		if (!user && !isLoading && (options === null || options === void 0 ? void 0 : options.onAccessDenied)) return options.onAccessDenied();
+		if (user) {
+			if ((options === null || options === void 0 ? void 0 : options.groups) && !isUserInGroup(user, options.groups, options.groupsClaim ?? process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_GROUPS_CLAIM, options.matchAll)) {
+				const { onAccessDenied = () => /* @__PURE__ */ React.createElement("div", null, "Access Denied") } = options;
+				return onAccessDenied(user);
+			}
+			return /* @__PURE__ */ React.createElement(Component, {
+				user,
+				...props
+			});
+		}
+		return null;
+	};
+};
+
+//#endregion
+export { redirectToSignIn as n, useAuth as r, protectPage as t };
+//# sourceMappingURL=client-CnvBgZM-.mjs.map

package/dist/client-CnvBgZM-.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-CnvBgZM-.mjs","names":[],"sources":["../src/client/use-auth.tsx","../src/client/protect.tsx"],"sourcesContent":["'use client';\n\nimport type { MonoCloudUser } from '@monocloud/auth-node-core';\nimport useSWR from 'swr';\n\n/**\n * Authentication State returned by `useAuth` hook.\n */\nexport interface AuthState {\n  /**\n   * Flag indicating if the authentication state is still loading.\n   */\n  isLoading: boolean;\n  /**\n   * Flag indicating if the user is authenticated.\n   */\n  isAuthenticated: boolean;\n  /**\n   * Error encountered during authentication, if any.\n   */\n  error?: Error;\n  /**\n   *  The authenticated user's information, if available.\n   */\n  user?: MonoCloudUser;\n  /**\n   * Function to refetch the authentication state.\n   *\n   */\n  refetch: (refresh?: boolean) => void;\n}\n\nconst fetchUser = async (url: string): Promise<MonoCloudUser | undefined> => {\n  const res = await fetch(url, { credentials: 'include' });\n\n  if (res.status === 204) {\n    return undefined;\n  }\n\n  if (res.ok) {\n    return res.json();\n  }\n\n  throw new Error('Failed to fetch user');\n};\n\n/**\n *\n * Hook for getting the user's profile on client components\n *\n * @returns Authentication State\n *\n * @example App Router\n *\n * ```tsx\n * \"use client\";\n *\n * import { useAuth } from \"@monocloud/auth-nextjs/client\";\n *\n * export default function Home() {\n *   const { user } = useAuth();\n *\n *   return <>User Id: {user?.sub}</>;\n * }\n * ```\n *\n * @example App Router - Refetch user from Userinfo endpoint\n *\n * Calling `refetch(true)` will force refresh the user's profile from the userinfo endpoint.\n * If you do not intent to refersh from your tenants userinfo endpoint, use just `refetch()`\n *\n * **Note⚠️: You need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for force refresh to work**\n *\n * ```tsx\n * \"use client\";\n *\n * import { useAuth } from \"@monocloud/auth-nextjs/client\";\n *\n * export default function Home() {\n *   const { user, refetch } = useAuth();\n *\n *   return (\n *     <>\n *       <pre>{JSON.stringify(user)}</pre>\n *       <button onClick={() => refetch(true)}>Refresh</button>\n *     </>\n *   );\n * }\n * ```\n *\n * @example Pages Router\n *\n * ```tsx\n * import { useAuth } from \"@monocloud/auth-nextjs/client\";\n *\n * export default function Home() {\n *   const { user } = useAuth();\n *\n *   return <>User Id: {user?.sub}</>;\n * }\n * ```\n *\n * @example Pages Router - Refetch user from Userinfo endpoint\n *\n *  Calling `refetch(true)` will force refresh the user's profile from the userinfo endpoint.\n * If you do not intent to refersh from your tenants userinfo endpoint, use just `refetch()`\n *\n * **Note⚠️: You need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for force refresh to work**\n *\n * ```tsx\n * import { useAuth } from \"@monocloud/auth-nextjs/client\";\n *\n * export default function Home() {\n *   const { user, refetch } = useAuth();\n *\n *   return (\n *     <>\n *       <pre>{JSON.stringify(user)}</pre>\n *       <button onClick={() => refetch(true)}>Refresh</button>\n *     </>\n *   );\n * }\n * ```\n *\n */\nexport const useAuth = (): AuthState => {\n  const key =\n    process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_USER_INFO_URL ??\n    // eslint-disable-next-line no-underscore-dangle\n    `${process.env.__NEXT_ROUTER_BASEPATH ?? ''}/api/auth/userinfo`;\n\n  const { data, error, isLoading, mutate } = useSWR<MonoCloudUser | undefined>(\n    key,\n    fetchUser\n  );\n\n  const refetch = (refresh?: boolean): void => {\n    const url = new URL(key, 'https://dummy');\n    if (refresh) {\n      url.searchParams.set('refresh', 'true');\n    }\n\n    void mutate(async () => await fetchUser(url.pathname + url.search), {\n      revalidate: false,\n    });\n  };\n\n  if (error) {\n    return {\n      user: undefined,\n      isLoading: false,\n      isAuthenticated: false,\n      error: error as Error,\n      refetch,\n    };\n  }\n\n  if (data) {\n    return {\n      user: data,\n      isLoading,\n      isAuthenticated: !!data && Object.keys(data).length > 0,\n      error: undefined,\n      refetch,\n    };\n  }\n\n  return {\n    user: undefined,\n    isLoading,\n    isAuthenticated: false,\n    error: undefined,\n    /* v8 ignore next -- @preserve */\n    refetch: (): void => {},\n  };\n};\n","/* eslint-disable react/display-name */\n'use client';\n\nimport React, { ComponentType, JSX, useEffect } from 'react';\nimport type { MonoCloudUser } from '@monocloud/auth-node-core';\nimport { isUserInGroup } from '@monocloud/auth-node-core/utils';\nimport { useAuth } from './use-auth';\nimport { ExtraAuthParams, GroupOptions } from '../types';\n\n/**\n * Options for configuring page protection.\n */\nexport type ProtectPageOptions = {\n  /**\n   *The url where the user will be redirected to after sign in\n   */\n  returnUrl?: string;\n\n  /**\n   * A custom react element to render when the user is not authenticated or is not a member of the specified groups.\n   */\n  onAccessDenied?: (user?: MonoCloudUser) => JSX.Element;\n\n  /**\n   * Authorization parameters to be used during authentication.\n   */\n  authParams?: ExtraAuthParams;\n\n  /**\n   * Callback function to handle errors.\n   * If not provided, errors will be thrown.\n   *\n   * @param error - The error object.\n   * @returns JSX element to handle the error.\n   */\n  onError?: (error: Error) => JSX.Element;\n} & GroupOptions;\n\nexport const redirectToSignIn = (\n  options: { returnUrl?: string } & ExtraAuthParams\n): void => {\n  const searchParams = new URLSearchParams(window.location.search);\n  searchParams.set(\n    'return_url',\n    options.returnUrl ?? window.location.toString()\n  );\n\n  if (options?.scopes) {\n    searchParams.set('scope', options.scopes);\n  }\n  if (options?.resource) {\n    searchParams.set('resource', options.resource);\n  }\n\n  if (options?.acrValues) {\n    searchParams.set('acr_values', options.acrValues.join(' '));\n  }\n\n  if (options?.display) {\n    searchParams.set('display', options.display);\n  }\n\n  if (options?.prompt) {\n    searchParams.set('prompt', options.prompt);\n  }\n\n  if (options?.authenticatorHint) {\n    searchParams.set('authenticator_hint', options.authenticatorHint);\n  }\n\n  if (options?.uiLocales) {\n    searchParams.set('ui_locales', options.uiLocales);\n  }\n\n  if (options?.maxAge) {\n    searchParams.set('max_age', options.maxAge.toString());\n  }\n\n  if (options?.loginHint) {\n    searchParams.set('login_hint', options.loginHint);\n  }\n\n  window.location.assign(\n    // eslint-disable-next-line no-underscore-dangle\n    `${process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_SIGNIN_URL ?? `${process.env.__NEXT_ROUTER_BASEPATH ?? ''}/api/auth/signin`}?${searchParams.toString()}`\n  );\n};\n\nconst handlePageError = (\n  error: Error,\n  options?: ProtectPageOptions\n): JSX.Element => {\n  /* v8 ignore else -- @preserve */\n  if (options?.onError) {\n    return options.onError(error);\n  }\n\n  /* v8 ignore next -- @preserve */\n  throw error;\n};\n\n/**\n * Function to protect a client rendered page component.\n * Ensures that only authenticated users can access the component.\n * \n * **Note⚠️: Since `window.location` is set as `returnUrl` query param by default, you need to set the env `MONOCLOUD_AUTH_ALLOW_QUERY_PARAM_OVERRIDES=true` or `allowQueryParamOverrides` should be `true` in the client initialization for returning to the same page.**\n *\n * @param Component - The component to protect.\n * @param options - The options.\n *\n * @returns Protected client rendered page component.\n *\n * @example App Router\n *\n * ```tsx\n * \"use client\";\n *\n * import { protectPage } from \"@monocloud/auth-nextjs/client\";\n *\n * export default protectPage(function Home() {\n *   return <>You are signed in</>;\n * });\n * ```\n *\n * @example App Router with options\n * \n * See {@link ProtectPageOptions} for more options.\n *\n * ```tsx\n * \"use client\";\n *\n * import { protectPage } from \"@monocloud/auth-nextjs/client\";\n *\n * export default protectPage(\n *   function Home() {\n *     return <>You are signed in</>;\n *   },\n *   { returnUrl: \"/dashboard\", authParams: { loginHint: \"username\" } }\n * );\n * ```\n\n* @example Pages Router\n *\n * ```tsx\n * import { protectPage } from \"@monocloud/auth-nextjs/client\";\n *\n * export default protectPage(function Home() {\n *   return <>You are signed in</>;\n * });\n * ```\n *\n * @example Pages Router with options\n * \n * See {@link ProtectPageOptions} for more options.\n *\n * ```tsx\n * import { protectPage } from \"@monocloud/auth-nextjs/client\";\n *\n * export default protectPage(\n *   function Home() {\n *     return <>You are signed in</>;\n *   },\n *   { returnUrl: \"/dashboard\", authParams: { loginHint: \"username\" } }\n * );\n * ```\n */\nexport const protectPage = <P extends object>(\n  Component: ComponentType<P & { user: MonoCloudUser }>,\n  options?: ProtectPageOptions\n): React.FC<P> => {\n  return props => {\n    const { user, error, isLoading } = useAuth();\n\n    useEffect(() => {\n      if (!user && !isLoading && !error) {\n        if (options?.onAccessDenied) {\n          return;\n        }\n\n        const authParams = options?.authParams ?? {};\n        redirectToSignIn({\n          returnUrl: options?.returnUrl,\n          ...authParams,\n        });\n      }\n    }, [user, isLoading, error]);\n\n    if (error) {\n      return handlePageError(error, options);\n    }\n\n    if (!user && !isLoading && options?.onAccessDenied) {\n      return options.onAccessDenied();\n    }\n\n    if (user) {\n      if (\n        options?.groups &&\n        !isUserInGroup(\n          user,\n          options.groups,\n          options.groupsClaim ??\n            process.env.NEXT_PUBLIC_MONOCLOUD_AUTH_GROUPS_CLAIM,\n          options.matchAll\n        )\n      ) {\n        const { onAccessDenied = (): JSX.Element => <div>Access Denied</div> } =\n          options;\n        return onAccessDenied(user);\n      }\n\n      return <Component user={user} {...props} />;\n    }\n\n    return null;\n  };\n};\n"],"mappings":";;;;;AAgCA,MAAM,YAAY,OAAO,QAAoD;CAC3E,MAAM,MAAM,MAAM,MAAM,KAAK,EAAE,aAAa,WAAW,CAAC;AAExD,KAAI,IAAI,WAAW,IACjB;AAGF,KAAI,IAAI,GACN,QAAO,IAAI,MAAM;AAGnB,OAAM,IAAI,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkFzC,MAAa,gBAA2B;CACtC,MAAM,MACJ,QAAQ,IAAI,4CAEZ,GAAG,QAAQ,IAAI,0BAA0B,GAAG;CAE9C,MAAM,EAAE,MAAM,OAAO,WAAW,WAAW,OACzC,KACA,UACD;CAED,MAAM,WAAW,YAA4B;EAC3C,MAAM,MAAM,IAAI,IAAI,KAAK,gBAAgB;AACzC,MAAI,QACF,KAAI,aAAa,IAAI,WAAW,OAAO;AAGzC,EAAK,OAAO,YAAY,MAAM,UAAU,IAAI,WAAW,IAAI,OAAO,EAAE,EAClE,YAAY,OACb,CAAC;;AAGJ,KAAI,MACF,QAAO;EACL,MAAM;EACN,WAAW;EACX,iBAAiB;EACV;EACP;EACD;AAGH,KAAI,KACF,QAAO;EACL,MAAM;EACN;EACA,iBAAiB,CAAC,CAAC,QAAQ,OAAO,KAAK,KAAK,CAAC,SAAS;EACtD,OAAO;EACP;EACD;AAGH,QAAO;EACL,MAAM;EACN;EACA,iBAAiB;EACjB,OAAO;EAEP,eAAqB;EACtB;;;;;ACxIH,MAAa,oBACX,YACS;CACT,MAAM,eAAe,IAAI,gBAAgB,OAAO,SAAS,OAAO;AAChE,cAAa,IACX,cACA,QAAQ,aAAa,OAAO,SAAS,UAAU,CAChD;AAED,uDAAI,QAAS,OACX,cAAa,IAAI,SAAS,QAAQ,OAAO;AAE3C,uDAAI,QAAS,SACX,cAAa,IAAI,YAAY,QAAQ,SAAS;AAGhD,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU,KAAK,IAAI,CAAC;AAG7D,uDAAI,QAAS,QACX,cAAa,IAAI,WAAW,QAAQ,QAAQ;AAG9C,uDAAI,QAAS,OACX,cAAa,IAAI,UAAU,QAAQ,OAAO;AAG5C,uDAAI,QAAS,kBACX,cAAa,IAAI,sBAAsB,QAAQ,kBAAkB;AAGnE,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU;AAGnD,uDAAI,QAAS,OACX,cAAa,IAAI,WAAW,QAAQ,OAAO,UAAU,CAAC;AAGxD,uDAAI,QAAS,UACX,cAAa,IAAI,cAAc,QAAQ,UAAU;AAGnD,QAAO,SAAS,OAEd,GAAG,QAAQ,IAAI,yCAAyC,GAAG,QAAQ,IAAI,0BAA0B,GAAG,kBAAkB,GAAG,aAAa,UAAU,GACjJ;;AAGH,MAAM,mBACJ,OACA,YACgB;;AAEhB,uDAAI,QAAS,QACX,QAAO,QAAQ,QAAQ,MAAM;;AAI/B,OAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoER,MAAa,eACX,WACA,YACgB;AAChB,SAAO,UAAS;EACd,MAAM,EAAE,MAAM,OAAO,cAAc,SAAS;AAE5C,kBAAgB;AACd,OAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,OAAO;AACjC,0DAAI,QAAS,eACX;IAGF,MAAM,gEAAa,QAAS,eAAc,EAAE;AAC5C,qBAAiB;KACf,6DAAW,QAAS;KACpB,GAAG;KACJ,CAAC;;KAEH;GAAC;GAAM;GAAW;GAAM,CAAC;AAE5B,MAAI,MACF,QAAO,gBAAgB,OAAO,QAAQ;AAGxC,MAAI,CAAC,QAAQ,CAAC,gEAAa,QAAS,gBAClC,QAAO,QAAQ,gBAAgB;AAGjC,MAAI,MAAM;AACR,0DACE,QAAS,WACT,CAAC,cACC,MACA,QAAQ,QACR,QAAQ,eACN,QAAQ,IAAI,yCACd,QAAQ,SACT,EACD;IACA,MAAM,EAAE,uBAAoC,oCAAC,aAAI,gBAAmB,KAClE;AACF,WAAO,eAAe,KAAK;;AAG7B,UAAO,oCAAC;IAAgB;IAAM,GAAI;KAAS;;AAG7C,SAAO"}