@motherbase/client 1.5.0 → 1.5.2

package/dist/passkey.js

@@ -0,0 +1,87 @@
+import { toError } from './http.js';
+import { pluginGet, pluginPost } from './plugin-endpoint.js';
+const R = {
+    registerOptions: '/api/auth/passkey/generate-register-options',
+    verifyRegistration: '/api/auth/passkey/verify-registration',
+    authenticateOptions: '/api/auth/passkey/generate-authenticate-options',
+    verifyAuthentication: '/api/auth/passkey/verify-authentication',
+    list: '/api/auth/passkey/list-user-passkeys',
+    update: '/api/auth/passkey/update-passkey',
+    delete: '/api/auth/passkey/delete-passkey',
+};
+// The plugin keeps the WebAuthn challenge in a signed cookie between the options
+// call and the verify call; cross-origin, fetch only stores and resends it with
+// `include` (the same constraint as the OAuth state cookie).
+const CEREMONY = { credentials: 'include' };
+export class PasskeyClient {
+    constructor(http) {
+        this.http = http;
+    }
+    /** Create a passkey on this device for the signed-in user. Prompts the browser's passkey UI. */
+    async register(params = {}) {
+        const unsupported = webAuthnUnsupported();
+        if (unsupported)
+            return unsupported;
+        const options = await pluginGet(this.http, R.registerOptions, params, CEREMONY);
+        if (options.error)
+            return { data: null, error: options.error };
+        const credential = await runCeremony(() => navigator.credentials.create({ publicKey: PublicKeyCredential.parseCreationOptionsFromJSON(options.data) }));
+        if (credential.error)
+            return { data: null, error: credential.error };
+        return pluginPost(this.http, R.verifyRegistration, { response: credential.data, name: params.name }, CEREMONY);
+    }
+    list() {
+        return pluginGet(this.http, R.list);
+    }
+    /** Rename a passkey. */
+    update(params) {
+        return pluginPost(this.http, R.update, params);
+    }
+    delete(params) {
+        return pluginPost(this.http, R.delete, params);
+    }
+}
+/**
+ * The sign-in half of the ceremony, for `AuthClient.signInWithPasskey`, which
+ * owns persisting the session. Resolves with the Better Auth session token.
+ */
+export async function authenticateWithPasskey(http) {
+    const unsupported = webAuthnUnsupported();
+    if (unsupported)
+        return unsupported;
+    // Anonymous on purpose: with a session attached, the server narrows the
+    // allowed credentials to that user's, which is a re-authentication, not a sign-in.
+    const ceremony = { ...CEREMONY, anonymous: true };
+    const options = await pluginGet(http, R.authenticateOptions, {}, ceremony);
+    if (options.error)
+        return { data: null, error: options.error };
+    const credential = await runCeremony(() => navigator.credentials.get({ publicKey: PublicKeyCredential.parseRequestOptionsFromJSON(options.data) }));
+    if (credential.error)
+        return { data: null, error: credential.error };
+    const verified = await pluginPost(http, R.verifyAuthentication, { response: credential.data }, ceremony);
+    if (verified.error)
+        return { data: null, error: verified.error };
+    return { data: { token: verified.data.session.token, user: verified.data.user }, error: null };
+}
+function webAuthnUnsupported() {
+    const supported = typeof navigator !== 'undefined' &&
+        typeof navigator.credentials !== 'undefined' &&
+        typeof PublicKeyCredential !== 'undefined' &&
+        typeof PublicKeyCredential.parseCreationOptionsFromJSON === 'function';
+    return supported
+        ? null
+        : { data: null, error: { message: 'Passkeys need a browser with WebAuthn JSON support.' } };
+}
+/** Run the browser prompt. A dismissed prompt is a `NotAllowedError`, reported as the error result. */
+async function runCeremony(prompt) {
+    try {
+        const credential = (await prompt());
+        if (!credential)
+            return { data: null, error: { message: 'No passkey was selected.' } };
+        return { data: credential.toJSON(), error: null };
+    }
+    catch (err) {
+        return { data: null, error: toError(err) };
+    }
+}
+//# sourceMappingURL=passkey.js.map

package/dist/passkey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.js","sourceRoot":"","sources":["../src/passkey.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAgC7D,MAAM,CAAC,GAAG;IACR,eAAe,EAAE,6CAA6C;IAC9D,kBAAkB,EAAE,uCAAuC;IAC3D,mBAAmB,EAAE,iDAAiD;IACtE,oBAAoB,EAAE,yCAAyC;IAC/D,IAAI,EAAE,sCAAsC;IAC5C,MAAM,EAAE,kCAAkC;IAC1C,MAAM,EAAE,kCAAkC;CAClC,CAAC;AAEX,iFAAiF;AACjF,gFAAgF;AAChF,6DAA6D;AAC7D,MAAM,QAAQ,GAAG,EAAE,WAAW,EAAE,SAAS,EAAW,CAAC;AAErD,MAAM,OAAO,aAAa;IACxB,YAA6B,IAAgB;QAAhB,SAAI,GAAJ,IAAI,CAAY;IAAG,CAAC;IAEjD,gGAAgG;IAChG,KAAK,CAAC,QAAQ,CACZ,SAAqF,EAAE;QAEvF,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;QAC1C,IAAI,WAAW;YAAE,OAAO,WAAW,CAAC;QAEpC,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,IAAI,CAAC,IAAI,EACT,CAAC,CAAC,eAAe,EACjB,MAAM,EACN,QAAQ,CACT,CAAC;QACF,IAAI,OAAO,CAAC,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAE/D,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CACxC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,mBAAmB,CAAC,4BAA4B,CAAC,OAAO,CAAC,IAAK,CAAC,EAAE,CAAC,CAC7G,CAAC;QACF,IAAI,UAAU,CAAC,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;QAErE,OAAO,UAAU,CACf,IAAI,CAAC,IAAI,EACT,CAAC,CAAC,kBAAkB,EACpB,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,EAChD,QAAQ,CACT,CAAC;IACJ,CAAC;IAED,IAAI;QACF,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,wBAAwB;IACxB,MAAM,CAAC,MAAoC;QACzC,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,CAAC,MAAsB;QAC3B,OAAO,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAgB;IAEhB,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;IAC1C,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IAEpC,wEAAwE;IACxE,mFAAmF;IACnF,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,SAAS,CAC7B,IAAI,EACJ,CAAC,CAAC,mBAAmB,EACrB,EAAE,EACF,QAAQ,CACT,CAAC;IACF,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAE/D,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,CACxC,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,mBAAmB,CAAC,2BAA2B,CAAC,OAAO,CAAC,IAAK,CAAC,EAAE,CAAC,CACzG,CAAC;IACF,IAAI,UAAU,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IAErE,MAAM,QAAQ,GAAG,MAAM,UAAU,CAC/B,IAAI,EACJ,CAAC,CAAC,oBAAoB,EACtB,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,EAC7B,QAAQ,CACT,CAAC;IACF,IAAI,QAAQ,CAAC,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,IAAK,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAK,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACnG,CAAC;AAED,SAAS,mBAAmB;IAC1B,MAAM,SAAS,GACb,OAAO,SAAS,KAAK,WAAW;QAChC,OAAO,SAAS,CAAC,WAAW,KAAK,WAAW;QAC5C,OAAO,mBAAmB,KAAK,WAAW;QAC1C,OAAO,mBAAmB,CAAC,4BAA4B,KAAK,UAAU,CAAC;IACzE,OAAO,SAAS;QACd,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,EAAE,CAAC;AAChG,CAAC;AAED,uGAAuG;AACvG,KAAK,UAAU,WAAW,CACxB,MAAwC;IAExC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,CAAC,MAAM,MAAM,EAAE,CAA+B,CAAC;QAClE,IAAI,CAAC,UAAU;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,CAAC;QACvF,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/pkce.d.ts

@@ -0,0 +1,13 @@
+import type { KeyValueStorageAdapter } from './types.js';
+/** 56 unreserved characters (RFC 7636 allows 43 to 128). */
+export declare function generateCodeVerifier(): string;
+export declare function codeChallengeFor(verifier: string): Promise<string>;
+/** Append the challenge to the redirect URL, which is where the server looks for it. */
+export declare function withCodeChallenge(redirectTo: string, challenge: string): string;
+export interface VerifierStore {
+    get(): Promise<string | null>;
+    set(verifier: string): Promise<void>;
+    clear(): Promise<void>;
+}
+export declare function verifierStore(storageKey: string, storage?: KeyValueStorageAdapter): VerifierStore;
+//# sourceMappingURL=pkce.d.ts.map

package/dist/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../src/pkce.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAqBzD,4DAA4D;AAC5D,wBAAgB,oBAAoB,IAAI,MAAM,CAG7C;AAED,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAGxE;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAM/E;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC9B,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAWD,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,sBAAsB,GAAG,aAAa,CASjG"}

package/dist/pkce.js

@@ -0,0 +1,52 @@
+/**
+ * The client half of the PKCE flow (`flowType: 'pkce'`).
+ *
+ * `signInWithOAuth` makes a verifier, keeps it, and sends only its SHA-256
+ * challenge on the redirect URL. The provider callback comes back with
+ * `?code=`, and `exchangeCodeForSession(code)` proves possession of the
+ * verifier to get the session. The verifier has to outlive a full-page
+ * navigation, so it lives in the key/value storage the app passed, or in
+ * localStorage, the way supabase-js keeps `<storageKey>-code-verifier`.
+ */
+const VERIFIER_ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~';
+function base64Url(bytes) {
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/** 56 unreserved characters (RFC 7636 allows 43 to 128). */
+export function generateCodeVerifier() {
+    const bytes = crypto.getRandomValues(new Uint8Array(56));
+    return Array.from(bytes, b => VERIFIER_ALPHABET[b % VERIFIER_ALPHABET.length]).join('');
+}
+export async function codeChallengeFor(verifier) {
+    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(verifier));
+    return base64Url(new Uint8Array(digest));
+}
+/** Append the challenge to the redirect URL, which is where the server looks for it. */
+export function withCodeChallenge(redirectTo, challenge) {
+    const hash = redirectTo.indexOf('#');
+    const base = hash === -1 ? redirectTo : redirectTo.slice(0, hash);
+    const fragment = hash === -1 ? '' : redirectTo.slice(hash);
+    const separator = base.includes('?') ? '&' : '?';
+    return `${base}${separator}code_challenge=${encodeURIComponent(challenge)}&code_challenge_method=s256${fragment}`;
+}
+function inMemory() {
+    const values = new Map();
+    return {
+        getItem: key => values.get(key) ?? null,
+        setItem: (key, value) => void values.set(key, value),
+        removeItem: key => void values.delete(key),
+    };
+}
+export function verifierStore(storageKey, storage) {
+    const backing = storage ?? globalThis.localStorage ?? inMemory();
+    const key = `${storageKey}-code-verifier`;
+    return {
+        get: async () => (await backing.getItem(key)) ?? null,
+        set: async (verifier) => { await backing.setItem(key, verifier); },
+        clear: async () => { await backing.removeItem(key); },
+    };
+}
+//# sourceMappingURL=pkce.js.map

package/dist/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../src/pkce.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AAEH,MAAM,iBAAiB,GAAG,oEAAoE,CAAC;AAE/F,SAAS,SAAS,CAAC,KAAiB;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,oBAAoB;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,iBAAiB,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IACrD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,OAAO,SAAS,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,UAAkB,EAAE,SAAiB;IACrE,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,OAAO,GAAG,IAAI,GAAG,SAAS,kBAAkB,kBAAkB,CAAC,SAAS,CAAC,8BAA8B,QAAQ,EAAE,CAAC;AACpH,CAAC;AAQD,SAAS,QAAQ;IACf,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI;QACvC,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;QACpD,UAAU,EAAE,GAAG,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,UAAkB,EAAE,OAAgC;IAChF,MAAM,OAAO,GACX,OAAO,IAAK,UAAwD,CAAC,YAAY,IAAI,QAAQ,EAAE,CAAC;IAClG,MAAM,GAAG,GAAG,GAAG,UAAU,gBAAgB,CAAC;IAC1C,OAAO;QACL,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI;QACrD,GAAG,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAChE,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KACtD,CAAC;AACJ,CAAC"}

package/dist/plugin-endpoint.d.ts

@@ -0,0 +1,20 @@
+import type { HttpClient, RequestOptions } from './http.js';
+import type { MotherbaseResponse } from './types.js';
+/**
+ * Transport for the Better Auth plugin namespaces: `auth.organization`,
+ * `auth.passkey` and `auth.sso`.
+ *
+ * Those namespaces are thin on purpose. Their methods and parameters keep Better
+ * Auth's own names, so its plugin documentation stays accurate for them, and
+ * the SDK adds only what an app would otherwise have to wire itself: the
+ * session's bearer token, and the `{ data, error }` result every other SDK call
+ * returns. supabase-js has no equivalent for any of them, so there is no shape
+ * to be compatible with beyond that result.
+ */
+type PluginRequestOptions = Pick<RequestOptions, 'anonymous' | 'credentials'>;
+export declare function pluginGet<T>(http: HttpClient, path: string, 
+/** Scalar values only. `undefined` and `null` are left out rather than sent as text. */
+query?: object, options?: PluginRequestOptions): Promise<MotherbaseResponse<T>>;
+export declare function pluginPost<T>(http: HttpClient, path: string, body?: object, options?: PluginRequestOptions): Promise<MotherbaseResponse<T>>;
+export {};
+//# sourceMappingURL=plugin-endpoint.d.ts.map

package/dist/plugin-endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-endpoint.d.ts","sourceRoot":"","sources":["../src/plugin-endpoint.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC5D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD;;;;;;;;;;GAUG;AAEH,KAAK,oBAAoB,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,GAAG,aAAa,CAAC,CAAC;AAE9E,wBAAgB,SAAS,CAAC,CAAC,EACzB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM;AACZ,wFAAwF;AACxF,KAAK,GAAE,MAAW,EAClB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAOhC;AAED,wBAAgB,UAAU,CAAC,CAAC,EAC1B,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,MAAW,EACjB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAEhC"}

package/dist/plugin-endpoint.js

@@ -0,0 +1,24 @@
+import { toError } from './http.js';
+export function pluginGet(http, path, 
+/** Scalar values only. `undefined` and `null` are left out rather than sent as text. */
+query = {}, options = {}) {
+    const search = new URLSearchParams();
+    for (const [key, value] of Object.entries(query)) {
+        if (value !== undefined && value !== null)
+            search.set(key, String(value));
+    }
+    const suffix = search.toString();
+    return send(http, suffix ? `${path}?${suffix}` : path, options);
+}
+export function pluginPost(http, path, body = {}, options = {}) {
+    return send(http, path, { ...options, method: 'POST', body });
+}
+async function send(http, path, options) {
+    try {
+        return { data: await http.request(path, { ...options, raw: true }), error: null };
+    }
+    catch (err) {
+        return { data: null, error: toError(err) };
+    }
+}
+//# sourceMappingURL=plugin-endpoint.js.map

package/dist/plugin-endpoint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-endpoint.js","sourceRoot":"","sources":["../src/plugin-endpoint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkBpC,MAAM,UAAU,SAAS,CACvB,IAAgB,EAChB,IAAY;AACZ,wFAAwF;AACxF,QAAgB,EAAE,EAClB,UAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IACjC,OAAO,IAAI,CAAI,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,IAAgB,EAChB,IAAY,EACZ,OAAe,EAAE,EACjB,UAAgC,EAAE;IAElC,OAAO,IAAI,CAAI,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACnE,CAAC;AAED,KAAK,UAAU,IAAI,CAAI,IAAgB,EAAE,IAAY,EAAE,OAAuB;IAC5E,IAAI,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,MAAM,IAAI,CAAC,OAAO,CAAI,IAAI,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/postgrest.d.ts

@@ -0,0 +1,326 @@
+import { HttpClient } from './http.js';
+import type { MotherbaseResponse } from './types.js';
+/**
+ * PostgREST query builder, supabase-js shaped.
+ *
+ * Everything in this file is about ONE thing: emitting the query string
+ * PostgREST (and the Motherbase REST dialect that mirrors it) reads. The
+ * builder is awaitable, resolves `{ data, error, count }` and never rejects for
+ * an expected API error. It has no runtime dependencies.
+ *
+ * Value encoding is the part that is easy to get wrong, so it lives in one
+ * place (`encodeLiteral` / `encodeArrayLiteral`) and every method routes
+ * through it:
+ *
+ *   - A string value containing `,` `.` `:` `(` `)` `{` `}` `"` `\` or
+ *     whitespace, or the empty string, is double quoted, with inner `"` and `\`
+ *     backslash escaped. That is what makes `in.("a,b",c)` a two element list
+ *     instead of three, and it is why a value containing a double quote is
+ *     expressible at all.
+ *   - Numbers and booleans are never quoted: their string form cannot contain a
+ *     reserved character, and quoting them would make every `eq.3.14` read as a
+ *     quoted literal for no gain.
+ *   - `not()` and `filter()` take their value verbatim when it is a string.
+ *     They are the escape hatches, so `not('id', 'in', '(1,2)')` has to reach
+ *     the server as written, exactly as in supabase-js.
+ */
+export type PostgrestPrimitive = string | number | boolean | null;
+/** Value accepted by the array/range operators (`cs`, `cd`, `ov`). */
+export type PostgrestArrayOperand = string | readonly PostgrestPrimitive[] | Record<string, unknown>;
+/** PostgREST's operator names. `filter()` also accepts modifier forms like `like(any)`. */
+export type PostgrestFilterOperator = 'eq' | 'neq' | 'gt' | 'gte' | 'lt' | 'lte' | 'like' | 'ilike' | 'match' | 'imatch' | 'in' | 'is' | 'isdistinct' | 'fts' | 'plfts' | 'phfts' | 'wfts' | 'cs' | 'cd' | 'ov' | 'sl' | 'sr' | 'nxr' | 'nxl' | 'adj';
+/** `is` reaches SQL NULL and the three-valued booleans, and nothing else. */
+export type PostgrestIsValue = null | boolean | 'null' | 'true' | 'false' | 'unknown';
+export type PostgrestCount = 'exact' | 'planned' | 'estimated';
+export type TextSearchType = 'plain' | 'phrase' | 'websearch';
+export interface ReferencedTableOption {
+    /** Scope the modifier to an embedded resource: `comments.limit=5`. */
+    referencedTable?: string;
+    /** supabase-js's pre-2.x name for `referencedTable`. Accepted for parity. */
+    foreignTable?: string;
+}
+export interface OrderOptions extends ReferencedTableOption {
+    ascending?: boolean;
+    nullsFirst?: boolean;
+}
+export interface PaginateOptions {
+    /** Rows per request. Capped server side by `api.rest.maxRows`. Default 1000. */
+    pageSize?: number;
+}
+export interface SelectOptions {
+    count?: PostgrestCount;
+    /** Send the request as HEAD: no rows come back, only the count. */
+    head?: boolean;
+}
+export interface InsertOptions {
+    count?: PostgrestCount;
+    /**
+     * `false` sends `Prefer: missing=default`, so columns absent from a row take
+     * their column default instead of NULL.
+     */
+    defaultToNull?: boolean;
+}
+export interface UpsertOptions extends InsertOptions {
+    /** Conflict target, defaulting server side to the primary key. */
+    onConflict?: string;
+    /** `true` sends `Prefer: resolution=ignore-duplicates`. */
+    ignoreDuplicates?: boolean;
+}
+export interface MutateOptions {
+    count?: PostgrestCount;
+}
+export interface ExplainOptions {
+    analyze?: boolean;
+    verbose?: boolean;
+    settings?: boolean;
+    buffers?: boolean;
+    wal?: boolean;
+    format?: 'text' | 'json';
+}
+/**
+ * The result a query resolves to. `count` is `null` unless `{ count }` was
+ * requested and the server answered with a `Content-Range` total.
+ */
+export interface PostgrestResponse<T> extends MotherbaseResponse<T> {
+    count: number | null;
+}
+/** One scalar value: quoted only when it has to be. */
+export declare function encodeLiteral(value: PostgrestPrimitive): string;
+/**
+ * PostgREST-style, chainable, thenable query builder mapping onto the backend's
+ * `/rest/v1/:model` query-param dialect. Awaiting it resolves to
+ * `{ data, error, count }` and never rejects for expected API errors (only for
+ * programmer misuse).
+ *
+ * @internal This is the implementation behind `client.from()`, not a surface to
+ * construct directly. The public, typed entry point is `client.from(table)`,
+ * whose return type (`TypedQuery`, from `database.ts`) is what user code should
+ * name. It is exported only so the type can be referenced where inference needs
+ * a name for it.
+ */
+export declare class PostgrestQueryBuilder<Row extends object = Record<string, unknown>> implements PromiseLike<PostgrestResponse<Row[]>> {
+    private readonly http;
+    private readonly model;
+    /** supabase-js semantic parity, from `createClient(..., { compat: 'supabase' })`. */
+    private readonly compat;
+    private method;
+    private columns;
+    /**
+     * Repeated filters on one column must all survive: `?price=gt.10&price=lt.20`
+     * is two conditions ANDed together, which is why every filter is `append`ed
+     * and never `set`. Using `set` here (as this builder once did) silently
+     * dropped the first of the two.
+     */
+    private readonly filters;
+    /** Reserved params that are replaced rather than repeated (`columns`, `on_conflict`). */
+    private readonly extras;
+    /** Keyed by referenced table (`''` for the base relation). */
+    private readonly orderParts;
+    private readonly limits;
+    private readonly offsets;
+    private readonly prefer;
+    private accept?;
+    private responseKind;
+    private countOption?;
+    private headOnly;
+    private signal?;
+    private body?;
+    private rowMode;
+    private shouldThrow;
+    /** Set by `select()`, so a write can tell "rows asked for" from "no rows requested". */
+    private selectCalled;
+    constructor(http: HttpClient, model: string, 
+    /** supabase-js semantic parity, from `createClient(..., { compat: 'supabase' })`. */
+    compat?: boolean);
+    /**
+     * Choose the columns, and optionally ask for a row count.
+     *
+     * After a write, `.select()` is the supabase-js way of asking for the rows
+     * back, so it also sends `Prefer: return=representation`.
+     */
+    select(columns?: string, options?: SelectOptions): this;
+    insert(values: Partial<Row> | Array<Partial<Row>>, options?: InsertOptions): this;
+    /**
+     * `INSERT .. ON CONFLICT DO UPDATE`. The conflict target defaults to the
+     * primary key server side; `onConflict` names another unique constraint.
+     */
+    upsert(values: Partial<Row> | Array<Partial<Row>>, options?: UpsertOptions): this;
+    update(values: Partial<Row>, options?: MutateOptions): this;
+    delete(options?: MutateOptions): this;
+    /**
+     * A bulk write states its column set explicitly, so a key missing from one
+     * row is still written (as NULL, or as the column default under
+     * `missing=default`) instead of being inferred from the first row alone.
+     */
+    private applyColumns;
+    eq(column: string, value: PostgrestPrimitive): this;
+    neq(column: string, value: PostgrestPrimitive): this;
+    gt(column: string, value: PostgrestPrimitive): this;
+    gte(column: string, value: PostgrestPrimitive): this;
+    lt(column: string, value: PostgrestPrimitive): this;
+    lte(column: string, value: PostgrestPrimitive): this;
+    /** Case-sensitive LIKE. `*` is PostgREST's URL-friendly `%`. */
+    like(column: string, pattern: string): this;
+    ilike(column: string, pattern: string): this;
+    likeAllOf(column: string, patterns: readonly string[]): this;
+    likeAnyOf(column: string, patterns: readonly string[]): this;
+    ilikeAllOf(column: string, patterns: readonly string[]): this;
+    ilikeAnyOf(column: string, patterns: readonly string[]): this;
+    in(column: string, values: readonly PostgrestPrimitive[]): this;
+    is(column: string, value: PostgrestIsValue): this;
+    /** Every key equal to its value, ANDed together. */
+    match(query: Record<string, PostgrestPrimitive>): this;
+    /**
+     * Negate any operator: `not('status', 'eq', 'live')` emits
+     * `status=not.eq.live`. The value is passed through verbatim for a string, so
+     * composite operands (`not('id', 'in', '(1,2)')`) reach the server as written.
+     */
+    not(column: string, operator: PostgrestFilterOperator | (string & {}), value: PostgrestPrimitive | readonly PostgrestPrimitive[]): this;
+    /**
+     * The escape hatch: any operator, including the ones with no dedicated method
+     * (`match`, `imatch`, `isdistinct`) and the modifier forms (`like(any)`).
+     */
+    filter(column: string, operator: PostgrestFilterOperator | (string & {}), value: PostgrestPrimitive | readonly PostgrestPrimitive[]): this;
+    /**
+     * A disjunction, written in PostgREST's own syntax and nestable:
+     * `or('status.eq.live,and(price.gt.10,price.lt.20)')`.
+     */
+    or(filters: string, options?: ReferencedTableOption): this;
+    /** Full-text search. `type` picks the tsquery parser, `config` the dictionary. */
+    textSearch(column: string, query: string, options?: {
+        type?: TextSearchType;
+        config?: string;
+    }): this;
+    /** `@>`: the column contains the operand (array, range or jsonb). */
+    contains(column: string, value: PostgrestArrayOperand): this;
+    /** `<@`: the column is contained by the operand. */
+    containedBy(column: string, value: PostgrestArrayOperand): this;
+    /** `&&`: the column and the operand have an element (or a point) in common. */
+    overlaps(column: string, value: PostgrestArrayOperand): this;
+    /** `>>`: strictly right of the range. */
+    rangeGt(column: string, range: string): this;
+    /** `&>`: does not extend to the left of the range. */
+    rangeGte(column: string, range: string): this;
+    /** `<<`: strictly left of the range. */
+    rangeLt(column: string, range: string): this;
+    /** `&<`: does not extend to the right of the range. */
+    rangeLte(column: string, range: string): this;
+    /** `-|-`: adjacent to the range. */
+    rangeAdjacent(column: string, range: string): this;
+    private push;
+    order(column: string, options?: OrderOptions): this;
+    limit(count: number, options?: ReferencedTableOption): this;
+    /** Inclusive range -> offset/limit. `range(0, 9)` fetches 10 rows from offset 0. */
+    range(from: number, to: number, options?: ReferencedTableOption): this;
+    /**
+     * Every matching row, one page at a time.
+     *
+     * An unbounded `select()` stops at the server's `api.rest.maxRows` (1000 by
+     * default) and says nothing about it: the caller gets a full-looking array
+     * that is missing everything past the cap. This walks the result instead, so
+     * "give me all of them" is expressible without knowing the cap exists.
+     *
+     * ```ts
+     * for await (const row of client.from('events').select('*').stream()) { ... }
+     * ```
+     *
+     * The pages are separate requests, so rows inserted while the walk is running
+     * may be seen or missed depending on when they land. Order by a stable column
+     * if that matters.
+     */
+    stream(options?: PaginateOptions): AsyncGenerator<Row, void, undefined>;
+    /**
+     * Like `stream()`, a page at a time rather than a row at a time, with the
+     * total from `Content-Range` when the server sent one.
+     *
+     * An error ends the walk by throwing, unlike awaiting the builder, which
+     * resolves `{ data, error }`. A `for await` loop has nowhere to put an error
+     * value, and silently ending the iteration early would look exactly like
+     * reaching the last page.
+     */
+    paginate(options?: PaginateOptions): AsyncGenerator<{
+        rows: Row[];
+        from: number;
+        count: number | null;
+    }, void, undefined>;
+    /** Cancel the in-flight request when the signal aborts. */
+    abortSignal(signal: AbortSignal): this;
+    /**
+     * Re-type the rows. Purely a compile-time cast, for cases the generated
+     * `Database` cannot express (a computed column, an embedded shape).
+     */
+    returns<T extends object>(): PostgrestQueryBuilder<T>;
+    /** supabase-js's newer name for `returns()`. Also a compile-time cast only. */
+    overrideTypes<T extends object>(): PostgrestQueryBuilder<T>;
+    /**
+     * Reject the query instead of resolving `{ data: null, error }`.
+     *
+     * The `{ data, error }` envelope is the default in both SDKs because it makes
+     * a failure impossible to skip by accident. `throwOnError()` is the opt-out
+     * for code that would rather use try/catch, and ported Supabase code uses it
+     * widely enough that its absence is a `TypeError: … is not a function` on the
+     * first query.
+     */
+    throwOnError(): this;
+    /**
+     * Fail the write if it would touch more than `count` rows.
+     *
+     * A guard against the missing-filter class of accident (`update()` with a
+     * typo'd `.eq()`), sent as `Prefer: max-affected`. A server that does not
+     * implement it ignores the preference, so treat this as a safety net rather
+     * than a guarantee, and keep the filter correct.
+     */
+    maxAffected(count: number): this;
+    /**
+     * Roll the transaction back after running the query, so nothing is persisted.
+     * Useful for validating a write, or previewing what it would return.
+     */
+    rollback(): this;
+    /** Ask for GeoJSON instead of rows. The result resolves to the parsed object. */
+    geojson(): PostgrestExplainBuilder;
+    /** Ask for `text/csv` instead of JSON. The result resolves to a string. */
+    csv(): PostgrestTextBuilder;
+    /** Ask the server for the query plan. Admin-only, and off by default. */
+    explain(options?: ExplainOptions): PostgrestExplainBuilder;
+    single(): PostgrestSingleBuilder<Row>;
+    maybeSingle(): PostgrestSingleBuilder<Row>;
+    /** The URL path (with query string) this builder targets. Exposed for tests. */
+    toPath(): string;
+    /**
+     * The request this builder would send, as data.
+     *
+     * `client.transaction()` needs to describe several writes without issuing
+     * them, and the method and body are otherwise private. Exposed rather than
+     * reached into: a batch built from `(builder as any).method` would break the
+     * first time this class was refactored.
+     */
+    toRequest(): {
+        method: string;
+        model: string;
+        query: Record<string, string[]>;
+        body: unknown;
+    };
+    /** The headers this builder sends. Exposed for tests alongside `toPath()`. */
+    toHeaders(): Record<string, string>;
+    private execute;
+    private isWrite;
+    /** Apply `single()` / `maybeSingle()` to a row list. The one place row mode is read. */
+    private finish;
+    then<TResult1 = PostgrestResponse<Row[]>, TResult2 = never>(onfulfilled?: ((value: PostgrestResponse<Row[]>) => TResult1 | PromiseLike<TResult1>) | null, onrejected?: ((reason: unknown) => TResult2 | PromiseLike<TResult2>) | null): PromiseLike<TResult1 | TResult2>;
+}
+/** Same builder, typed to resolve a single row (from `.single()` / `.maybeSingle()`). */
+export interface PostgrestSingleBuilder<Row extends object> extends Omit<PostgrestQueryBuilder<Row>, 'then' | 'single' | 'maybeSingle' | 'returns'>, PromiseLike<PostgrestResponse<Row>> {
+    returns<T extends object>(): PostgrestSingleBuilder<T>;
+    then<TResult1 = PostgrestResponse<Row>, TResult2 = never>(onfulfilled?: ((value: PostgrestResponse<Row>) => TResult1 | PromiseLike<TResult1>) | null, onrejected?: ((reason: unknown) => TResult2 | PromiseLike<TResult2>) | null): PromiseLike<TResult1 | TResult2>;
+}
+/** The builder after `.csv()`: the body is text, not rows. */
+export interface PostgrestTextBuilder extends PromiseLike<PostgrestResponse<string>> {
+    toPath(): string;
+    toHeaders(): Record<string, string>;
+}
+/** The builder after `.explain()`: text, or the parsed plan for `format: 'json'`. */
+export interface PostgrestExplainBuilder extends PromiseLike<PostgrestResponse<unknown>> {
+    toPath(): string;
+    toHeaders(): Record<string, string>;
+}
+//# sourceMappingURL=postgrest.d.ts.map

package/dist/postgrest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgrest.d.ts","sourceRoot":"","sources":["../src/postgrest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAW,MAAM,WAAW,CAAC;AAEhD,OAAO,KAAK,EAAmB,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEtE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAElE,sEAAsE;AACtE,MAAM,MAAM,qBAAqB,GAC7B,MAAM,GACN,SAAS,kBAAkB,EAAE,GAC7B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5B,2FAA2F;AAC3F,MAAM,MAAM,uBAAuB,GAC/B,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,IAAI,GACJ,KAAK,GACL,MAAM,GACN,OAAO,GACP,OAAO,GACP,QAAQ,GACR,IAAI,GACJ,IAAI,GACJ,YAAY,GACZ,KAAK,GACL,OAAO,GACP,OAAO,GACP,MAAM,GACN,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,IAAI,GACJ,KAAK,GACL,KAAK,GACL,KAAK,CAAC;AAEV,6EAA6E;AAC7E,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAEtF,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,WAAW,CAAC;AAE/D,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE9D,MAAM,WAAW,qBAAqB;IACpC,sEAAsE;IACtE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAa,SAAQ,qBAAqB;IACzD,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,mEAAmE;IACnE,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAClD,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,cAAc,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB,CAAC,CAAC,CAAE,SAAQ,kBAAkB,CAAC,CAAC,CAAC;IACjE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAkBD,uDAAuD;AACvD,wBAAgB,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAK/D;AA4DD;;;;;;;;;;;GAWG;AACH,qBAAa,qBAAqB,CAAC,GAAG,SAAS,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAC7E,YAAW,WAAW,CAAC,iBAAiB,CAAC,GAAG,EAAE,CAAC,CAAC;IA8B9C,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,MAAM;IA/BzB,OAAO,CAAC,MAAM,CAAuD;IACrE,OAAO,CAAC,OAAO,CAAO;IACtB;;;;;OAKG;IACH,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,8DAA8D;IAC9D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA+B;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IACpD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,YAAY,CAAwB;IAC5C,OAAO,CAAC,WAAW,CAAC,CAAiB;IACrC,OAAO,CAAC,QAAQ,CAAS;IACzB,OAAO,CAAC,MAAM,CAAC,CAAc;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAU;IACvB,OAAO,CAAC,OAAO,CAAmB;IAClC,OAAO,CAAC,WAAW,CAAS;IAC5B,wFAAwF;IACxF,OAAO,CAAC,YAAY,CAAS;gBAGV,IAAI,EAAE,UAAU,EAChB,KAAK,EAAE,MAAM;IAC9B,qFAAqF;IACpE,MAAM,UAAQ;IAKjC;;;;;OAKG;IACH,MAAM,CAAC,OAAO,SAAM,EAAE,OAAO,GAAE,aAAkB,GAAG,IAAI;IAWxD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAE,aAAkB,GAAG,IAAI;IASrF;;;OAGG;IACH,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,GAAE,aAAkB,GAAG,IAAI;IAWrF,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,GAAE,aAAkB,GAAG,IAAI;IAO/D,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,IAAI;IAMzC;;;;OAIG;IACH,OAAO,CAAC,YAAY;IAapB,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI;IAGnD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI;IAGpD,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI;IAGnD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI;IAGpD,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI;IAGnD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB,GAAG,IAAI;IAGpD,gEAAgE;IAChE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAG3C,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI;IAG5C,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAG5D,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAG5D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAG7D,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI;IAG7D,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,kBAAkB,EAAE,GAAG,IAAI;IAG/D,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,IAAI;IAGjD,oDAAoD;IACpD,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,IAAI;IAKtD;;;;OAIG;IACH,GAAG,CACD,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,uBAAuB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,EACjD,KAAK,EAAE,kBAAkB,GAAG,SAAS,kBAAkB,EAAE,GACxD,IAAI;IAIP;;;OAGG;IACH,MAAM,CACJ,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,uBAAuB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,EACjD,KAAK,EAAE,kBAAkB,GAAG,SAAS,kBAAkB,EAAE,GACxD,IAAI;IAIP;;;OAGG;IACH,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,IAAI;IAI9D,kFAAkF;IAClF,UAAU,CACR,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,cAAc,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GACvD,IAAI;IAaP,qEAAqE;IACrE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAG5D,oDAAoD;IACpD,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAG/D,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,IAAI;IAI5D,yCAAyC;IACzC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAG5C,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAG7C,wCAAwC;IACxC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAG5C,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAG7C,oCAAoC;IACpC,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI;IAIlD,OAAO,CAAC,IAAI;IAOZ,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,YAAiB,GAAG,IAAI;IAWvD,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,IAAI;IAK/D,oFAAoF;IACpF,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,GAAE,qBAA0B,GAAG,IAAI;IAO1E;;;;;;;;;;;;;;;OAeG;IACI,MAAM,CAAC,OAAO,GAAE,eAAoB,GAAG,cAAc,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC;IAMlF;;;;;;;;OAQG;IACI,QAAQ,CACb,OAAO,GAAE,eAAoB,GAC5B,cAAc,CAAC;QAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,IAAI,EAAE,SAAS,CAAC;IA2BvF,2DAA2D;IAC3D,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAKtC;;;OAGG;IACH,OAAO,CAAC,CAAC,SAAS,MAAM,KAAK,qBAAqB,CAAC,CAAC,CAAC;IAIrD,+EAA+E;IAC/E,aAAa,CAAC,CAAC,SAAS,MAAM,KAAK,qBAAqB,CAAC,CAAC,CAAC;IAI3D;;;;;;;;OAQG;IACH,YAAY,IAAI,IAAI;IAKpB;;;;;;;OAOG;IACH,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAKhC;;;OAGG;IACH,QAAQ,IAAI,IAAI;IAKhB,iFAAiF;IACjF,OAAO,IAAI,uBAAuB;IAMlC,2EAA2E;IAC3E,GAAG,IAAI,oBAAoB;IAM3B,yEAAyE;IACzE,OAAO,CAAC,OAAO,GAAE,cAAmB,GAAG,uBAAuB;IAW9D,MAAM,IAAI,sBAAsB,CAAC,GAAG,CAAC;IAKrC,WAAW,IAAI,sBAAsB,CAAC,GAAG,CAAC;IAO1C,gFAAgF;IAChF,MAAM,IAAI,MAAM;IAmBhB;;;;;;;OAOG;IACH,SAAS,IAAI;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,IAAI,EAAE,OAAO,CAAA;KAAE;IAc9F,8EAA8E;IAC9E,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YAWrB,OAAO;IAgDrB,OAAO,CAAC,OAAO;IAIf,wFAAwF;IACxF,OAAO,CAAC,MAAM;IAiBd,IAAI,CAAC,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,CAAC,EAAE,QAAQ,GAAG,KAAK,EACxD,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,iBAAiB,CAAC,GAAG,EAAE,CAAC,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,EAC5F,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,GAC1E,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC;CAYpC;AAUD,yFAAyF;AACzF,MAAM,WAAW,sBAAsB,CAAC,GAAG,SAAS,MAAM,CACxD,SAAQ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,aAAa,GAAG,SAAS,CAAC,EACrF,WAAW,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,SAAS,MAAM,KAAK,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,KAAK,EACtD,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,iBAAiB,CAAC,GAAG,CAAC,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,EAC1F,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI,GAC1E,WAAW,CAAC,QAAQ,GAAG,QAAQ,CAAC,CAAC;CACrC;AAED,8DAA8D;AAC9D,MAAM,WAAW,oBAAqB,SAAQ,WAAW,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAClF,MAAM,IAAI,MAAM,CAAC;IACjB,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC;AAED,qFAAqF;AACrF,MAAM,WAAW,uBAAwB,SAAQ,WAAW,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACtF,MAAM,IAAI,MAAM,CAAC;IACjB,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACrC"}