@motherbase/client 1.5.0 → 1.5.2

package/README.md

@@ -285,7 +285,31 @@ upload.findPreviousUploads().then(previous => {
 });
 ```
 
-## Social sign-in (OAuth)
+## Password sign-in with MFA
+
+When the account requires a second factor, password sign-in returns
+`twoFactorRequired: true` and the available `twoFactorMethods`. It does not
+create a local session until verification succeeds.
+
+```ts
+const { data, error } = await client.auth.signInWithPassword({ email, password });
+if (error) throw new Error(error.message);
+
+if (data?.twoFactorRequired) {
+  // Show a code field. For an email/SMS OTP, call mfa.challenge({ channel }) first.
+  const { error: verifyError } = await client.auth.mfa.verify({ code });
+  if (verifyError) throw new Error(verifyError.message);
+}
+
+// The verified session is now available through client.auth.getSession().
+```
+
+The SDK includes the challenge cookie on sign-in and verification requests.
+The project's CORS and cookie settings must allow the app's origin when the
+app and API are on different sites. A UI toggle cannot bypass a second factor
+required by the server.
+
+## Social sign-in (OAuth)
 
 A provider callback is a browser redirect, so it cannot answer the SDK with a
 session the way a password sign-in does. Two calls, not one:

package/dist/admin.d.ts

@@ -0,0 +1,131 @@
+import type { HttpClient } from './http.js';
+import type { MotherbaseResponse, User } from './types.js';
+/**
+ * `client.auth.admin`, shaped like `supabase.auth.admin`.
+ *
+ * Every method here needs a **secret** project API key, so the client it hangs
+ * off must have been built with one. A publishable key gets a 401 from the
+ * server, which is the correct outcome: these calls create and delete users
+ * without being any user.
+ *
+ * Two differences from supabase-js worth knowing before you port code:
+ *
+ *   * Scope. This is user administration only. Supabase's service key also opens
+ *     SQL and DDL; here those stay behind operator authentication, so a leaked
+ *     application key cannot drop a table.
+ *   * `generateLink` covers signup, invite, magiclink and recovery. Recovery is
+ *     code-based here, so it returns `email_otp` and no `action_link`, and the
+ *     `email_change_*` types are refused.
+ */
+export interface AdminListUsersParams {
+    page?: number;
+    perPage?: number;
+}
+export interface AdminUserList {
+    users: User[];
+    page: number;
+    perPage: number;
+    total: number;
+}
+export interface AdminCreateUserParams {
+    email: string;
+    password?: string;
+    username?: string;
+    role?: 'ADMIN' | 'USER';
+    /** Mark the address verified without sending a confirmation. */
+    email_confirm?: boolean;
+    /** Also email the temporary password. `invite()` is the same thing, named. */
+    sendInvite?: boolean;
+}
+export interface AdminCreatedUser {
+    user: User;
+    /** Generated when no password was supplied. Never logged by the SDK. */
+    temporaryPassword: string;
+    invited: boolean;
+}
+export interface AdminUpdateUserParams {
+    password?: string;
+    role?: 'ADMIN' | 'USER';
+    username?: string;
+    firstName?: string;
+    lastName?: string;
+    status?: string;
+}
+export interface AdminGenerateLinkParams {
+    type: 'signup' | 'invite' | 'magiclink' | 'recovery' | 'email_change_current' | 'email_change_new';
+    email: string;
+    /** Required for `signup`. */
+    password?: string;
+    newEmail?: string;
+    options?: {
+        redirectTo?: string;
+        data?: Record<string, unknown>;
+    };
+}
+export interface AdminGeneratedLink {
+    properties: {
+        /** The link the email would carry. Null for `recovery`, which is code-based here. */
+        action_link: string | null;
+        email_otp: string | null;
+        hashed_token: string | null;
+        redirect_to: string | null;
+        verification_type: string;
+    };
+    user: User | null;
+}
+/** A supabase-js `Factor`: TOTP from two-factor, and each passkey as `webauthn`. */
+export interface AdminMfaFactor {
+    id: string;
+    factor_type: 'totp' | 'webauthn';
+    status: 'verified' | 'unverified';
+    friendly_name: string;
+    created_at: string | null;
+    updated_at: string | null;
+}
+/** `auth.admin.mfa`, shaped like supabase-js. */
+export declare class AuthAdminMfaClient {
+    private readonly http;
+    constructor(http: HttpClient);
+    listFactors(params: {
+        userId: string;
+    }): Promise<MotherbaseResponse<{
+        factors: AdminMfaFactor[];
+    }>>;
+    deleteFactor(params: {
+        userId: string;
+        id: string;
+    }): Promise<MotherbaseResponse<{
+        id: string;
+    }>>;
+}
+export declare class AuthAdminClient {
+    private readonly http;
+    readonly mfa: AuthAdminMfaClient;
+    constructor(http: HttpClient);
+    /** The link (or code) an auth email would carry, returned instead of sent. */
+    generateLink(params: AdminGenerateLinkParams): Promise<MotherbaseResponse<AdminGeneratedLink>>;
+    listUsers(params?: AdminListUsersParams): Promise<MotherbaseResponse<AdminUserList>>;
+    getUserById(id: string): Promise<MotherbaseResponse<{
+        user: User | null;
+    }>>;
+    createUser(params: AdminCreateUserParams): Promise<MotherbaseResponse<AdminCreatedUser>>;
+    updateUserById(id: string, params: AdminUpdateUserParams): Promise<MotherbaseResponse<{
+        user: User | null;
+    }>>;
+    deleteUser(id: string): Promise<MotherbaseResponse<{
+        id: string;
+    }>>;
+    /** End every session this user holds, everywhere. */
+    signOut(userId: string): Promise<MotherbaseResponse<{
+        id: string;
+    }>>;
+    /** Create the account and email the temporary password to it. */
+    inviteUserByEmail(email: string, options?: {
+        username?: string;
+        role?: 'ADMIN' | 'USER';
+    }): Promise<MotherbaseResponse<{
+        user: User;
+        invited: boolean;
+    }>>;
+}
+//# sourceMappingURL=admin.d.ts.map

package/dist/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAE3D;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,gEAAgE;IAChE,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,8EAA8E;IAC9E,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,IAAI,CAAC;IACX,wEAAwE;IACxE,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,sBAAsB,GAAG,kBAAkB,CAAC;IACnG,KAAK,EAAE,MAAM,CAAC;IACd,6BAA6B;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CACnE;AAED,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE;QACV,qFAAqF;QACrF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;QAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,iBAAiB,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;CACnB;AAED,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,GAAG,UAAU,CAAC;IACjC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAID,iDAAiD;AACjD,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,UAAU;IAEvC,WAAW,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,OAAO,EAAE,cAAc,EAAE,CAAA;KAAE,CAAC,CAAC;IAWnG,YAAY,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAWxG;AAED,qBAAa,eAAe;IAGd,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,CAAC;gBAEJ,IAAI,EAAE,UAAU;IAI7C,8EAA8E;IACxE,YAAY,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,kBAAkB,CAAC,CAAC;IAS9F,SAAS,CAAC,MAAM,GAAE,oBAAyB,GAAG,OAAO,CAAC,kBAAkB,CAAC,aAAa,CAAC,CAAC;IAaxF,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAS3E,UAAU,CAAC,MAAM,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,CAAC;IASxF,cAAc,CAClB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,qBAAqB,GAC5B,OAAO,CAAC,kBAAkB,CAAC;QAAE,IAAI,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAY/C,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IASzE,qDAAqD;IAC/C,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAS1E,iEAAiE;IAC3D,iBAAiB,CACrB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,GAAG,MAAM,CAAA;KAAO,GAC3D,OAAO,CAAC,kBAAkB,CAAC;QAAE,IAAI,EAAE,IAAI,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CAWjE"}

package/dist/admin.js

@@ -0,0 +1,121 @@
+import { toError } from './http.js';
+import { HTTP_ROUTES } from '@motherbase/contracts';
+const BASE = HTTP_ROUTES.authAdmin;
+/** `auth.admin.mfa`, shaped like supabase-js. */
+export class AuthAdminMfaClient {
+    constructor(http) {
+        this.http = http;
+    }
+    async listFactors(params) {
+        try {
+            const data = await this.http.request(`${BASE}/users/${encodeURIComponent(params.userId)}/factors`);
+            return { data, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    async deleteFactor(params) {
+        try {
+            const data = await this.http.request(`${BASE}/users/${encodeURIComponent(params.userId)}/factors/${encodeURIComponent(params.id)}`, { method: 'DELETE' });
+            return { data, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+}
+export class AuthAdminClient {
+    constructor(http) {
+        this.http = http;
+        this.mfa = new AuthAdminMfaClient(http);
+    }
+    /** The link (or code) an auth email would carry, returned instead of sent. */
+    async generateLink(params) {
+        try {
+            const data = await this.http.request(`${BASE}/generate-link`, { method: 'POST', body: params });
+            return { data, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    async listUsers(params = {}) {
+        const query = new URLSearchParams();
+        if (params.page !== undefined)
+            query.set('page', String(params.page));
+        if (params.perPage !== undefined)
+            query.set('per_page', String(params.perPage));
+        const suffix = query.toString();
+        try {
+            const data = await this.http.request(`${BASE}/users${suffix ? `?${suffix}` : ''}`);
+            return { data, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    async getUserById(id) {
+        try {
+            const data = await this.http.request(`${BASE}/users/${encodeURIComponent(id)}`);
+            return { data, error: null };
+        }
+        catch (err) {
+            return { data: { user: null }, error: toError(err) };
+        }
+    }
+    async createUser(params) {
+        try {
+            const data = await this.http.request(`${BASE}/users`, { method: 'POST', body: params });
+            return { data, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    async updateUserById(id, params) {
+        try {
+            const data = await this.http.request(`${BASE}/users/${encodeURIComponent(id)}`, {
+                method: 'PATCH',
+                body: params,
+            });
+            return { data, error: null };
+        }
+        catch (err) {
+            return { data: { user: null }, error: toError(err) };
+        }
+    }
+    async deleteUser(id) {
+        try {
+            await this.http.request(`${BASE}/users/${encodeURIComponent(id)}`, { method: 'DELETE' });
+            return { data: { id }, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /** End every session this user holds, everywhere. */
+    async signOut(userId) {
+        try {
+            await this.http.request(`${BASE}/users/${encodeURIComponent(userId)}/sign-out`, { method: 'POST' });
+            return { data: { id: userId }, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+    /** Create the account and email the temporary password to it. */
+    async inviteUserByEmail(email, options = {}) {
+        try {
+            const data = await this.http.request(`${BASE}/invite`, {
+                method: 'POST',
+                body: { email, ...options },
+            });
+            return { data, error: null };
+        }
+        catch (err) {
+            return { data: null, error: toError(err) };
+        }
+    }
+}
+//# sourceMappingURL=admin.js.map

package/dist/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../src/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AA4FpD,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC;AAEnC,iDAAiD;AACjD,MAAM,OAAO,kBAAkB;IAC7B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,KAAK,CAAC,WAAW,CAAC,MAA0B;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAClC,GAAG,IAAI,UAAU,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAC7D,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAsC;QACvD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAClC,GAAG,IAAI,UAAU,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAC7F,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;YACF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,eAAe;IAG1B,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;QAC3C,IAAI,CAAC,GAAG,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,8EAA8E;IAC9E,KAAK,CAAC,YAAY,CAAC,MAA+B;QAChD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAqB,GAAG,IAAI,gBAAgB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YACpH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,SAA+B,EAAE;QAC/C,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAgB,GAAG,IAAI,SAAS,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAClG,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAU;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAiB,GAAG,IAAI,UAAU,kBAAkB,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAChG,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,MAA6B;QAC5C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAmB,GAAG,IAAI,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;YAC1G,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,EAAU,EACV,MAA6B;QAE7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAiB,GAAG,IAAI,UAAU,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;gBAC9F,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,EAAU;QACzB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,UAAU,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;YACzF,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,qDAAqD;IACrD,KAAK,CAAC,OAAO,CAAC,MAAc;QAC1B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,UAAU,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpG,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,iBAAiB,CACrB,KAAa,EACb,UAA0D,EAAE;QAE5D,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAmC,GAAG,IAAI,SAAS,EAAE;gBACvF,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE;aAC5B,CAAC,CAAC;YACH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,IAAa,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;CACF"}