@mulverse/mulguard-core 1.0.0

package/adapters.js

@@ -0,0 +1,170 @@
+/**
+ * Auth.js can be integrated with _any_ data layer (database, ORM, or backend API, HTTP client)
+ * in order to automatically create users, handle account linking automatically, support passwordless login,
+ * and to store session information.
+ *
+ * This module contains utility functions and types to create an Auth.js compatible adapter.
+ *
+ * Auth.js supports 2 session strategies to persist the login state of a user.
+ * The default is to use a cookie + {@link https://authjs.dev/concepts/session-strategies#jwt-session JWT}
+ * based session store (`strategy: "jwt"`),
+ * but you can also use a database adapter to store the session in a database.
+ *
+ * Before you continue, Auth.js has a list of {@link https://adapters.authjs.dev official database adapters}. If your database is listed there, you
+ * probably do not need to create your own. If you are using a data solution that cannot be integrated with an official adapter, this module will help you create a compatible adapter.
+ *
+ * :::caution Note
+ * Although `@mulverse/mulguard-core` _is_ framework/runtime agnostic, an adapter might rely on a client/ORM package,
+ * that is not yet compatible with your framework/runtime (e.g. it might rely on [Node.js APIs](https://nodejs.org/docs/latest/api)).
+ * Related issues should be reported to the corresponding package maintainers.
+ * :::
+ *
+ * ## Installation
+ *
+ * ```bash npm2yarn
+ * npm install @mulverse/mulguard-core
+ * ```
+ *
+ * Then, you can import this submodule from `@mulverse/mulguard-core/adapters`.
+ *
+ * ## Usage
+ *
+ * Each adapter method and its function signature is documented in the {@link Adapter} interface.
+ *
+ * ```ts title=my-adapter.ts
+ * import { type Adapter } from "@mulverse/mulguard-core/adapters"
+ *
+ * // 1. Simplest form, a plain object.
+ * export const MyAdapter: Adapter {
+ *  // implement the adapter methods here
+ * }
+ *
+ * // or
+ *
+ * // 2. A function that returns an object. Official adapters use this pattern.
+ * export function MyAdapter(config: any): Adapter {
+ *  // Instantiate a client/ORM here with the provided config, or pass it in as a parameter.
+ *  // Usually, you might already have a client instance elsewhere in your application,
+ *  // so you should only create a new instance if you need to or you don't have one.
+ *
+ *  return {
+ *    // implement the adapter methods
+ *  }
+ * }
+ *
+ * ```
+ *
+ * Then, you can pass your adapter to Auth.js as the `adapter` option.
+ *
+ * ```ts title=index.ts
+ * import { MyAdapter } from "./my-adapter"
+ *
+ * const response = await Auth(..., {
+ *   adapter: MyAdapter, // 1.
+ *   // or
+ *   adapter: MyAdapter({ /* config *\/ }), // 2.
+ *   ...
+ * })
+ * ```
+ *
+ * Note, you might be able to tweak an existing adapter to work with your data layer, instead of creating one from scratch.
+ *
+ * ```ts title=my-adapter.ts
+ * import { type Adapter } from "@mulverse/mulguard-core/adapters"
+ * import { PrismaAdapter } from "@auth/prisma-adapter"
+ * import { PrismaClient } from "@prisma/client"
+ *
+ * const prisma = new PrismaClient()
+ *
+ * const adapter: Adapter = {
+ *   ...PrismaAdapter(prisma),
+ *   // Add your custom methods here
+ * }
+ *
+ * const request = new Request("https://example.com")
+ * const response = await Auth(request, { adapter, ... })
+ * ```
+ *
+ * ## Models
+ *
+ * Auth.js can be used with any database. Models tell you what structures Auth.js expects from your database. Models will vary slightly depending on which adapter you use, but in general, will have a similar structure to the graph below. Each model can be extended with additional fields.
+ *
+ * :::note
+ * Auth.js / NextAuth.js uses `camelCase` for its database rows while respecting the conventional `snake_case` formatting for OAuth-related values. If the mixed casing is an issue for you, most adapters have a dedicated documentation section on how to force a casing convention.
+ * :::
+ *
+ * ```mermaid
+ * erDiagram
+ *     User ||--|{ Account : ""
+ *     User {
+ *       string id
+ *       string name
+ *       string email
+ *       timestamp emailVerified
+ *       string image
+ *     }
+ *     User ||--|{ Session : ""
+ *     Session {
+ *       string id
+ *       timestamp expires
+ *       string sessionToken
+ *       string userId
+ *     }
+ *     Account {
+ *       string id
+ *       string userId
+ *       string type
+ *       string provider
+ *       string providerAccountId
+ *       string refresh_token
+ *       string access_token
+ *       int expires_at
+ *       string token_type
+ *       string scope
+ *       string id_token
+ *       string session_state
+ *     }
+ *     User ||--|{ VerificationToken : ""
+ *     VerificationToken {
+ *       string identifier
+ *       string token
+ *       timestamp expires
+ *     }
+ * ```
+ *
+ * ## Testing
+ *
+ * There is a test suite [available](https://github.com/nextauthjs/next-auth/blob/main/packages/utils/adapter.ts)
+ * to ensure that your adapter is compatible with Auth.js.
+ *
+ * ## Known issues
+ *
+ * The following are missing built-in features in Auth.js but can be solved in user land. If you would like to help implement these features, please reach out.
+ *
+ * ### Token rotation
+ *
+ * Auth.js _currently_ does not support {@link https://authjs.dev/concepts/oauth `access_token` rotation} out of the box.
+ * The necessary information (`refresh_token`, expiry, etc.) is being stored in the database, but the logic to rotate the token is not implemented
+ * in the core library.
+ * [This guide](https://authjs.dev/guides/refresh-token-rotation#database-strategy) should provide the necessary steps to do this in user land.
+ *
+ * ### Federated logout
+ *
+ * Auth.js _currently_ does not support federated logout out of the box.
+ * This means that even if an active session is deleted from the database, the user will still be signed in to the identity provider,
+ * they will only be signed out of the application.
+ * Eg. if you use Google as an identity provider, and you delete the session from the database,
+ * the user will still be signed in to Google, but they will be signed out of your application.
+ *
+ * If your users might be using the application from a publicly shared computer (eg: library), you might want to implement federated logout.
+ *
+ * @module adapters
+ */
+// https://github.com/honeinc/is-iso-date/blob/master/index.js
+const isoDateRE = /(\d{4}-[01]\d-[0-3]\dT[0-2]\d:[0-5]\d:[0-5]\d\.\d+([+-][0-2]\d:[0-5]\d|Z))|(\d{4}-[01]\d-[0-3]\dT[0-2]\d:[0-5]\d:[0-5]\d([+-][0-2]\d:[0-5]\d|Z))|(\d{4}-[01]\d-[0-3]\dT[0-2]\d:[0-5]\d([+-][0-2]\d:[0-5]\d|Z))/;
+/** Determines if a given value can be parsed into `Date` */
+export function isDate(value) {
+    return (typeof value === "string" &&
+        isoDateRE.test(value) &&
+        !isNaN(Date.parse(value)));
+}

package/errors.d.ts

@@ -0,0 +1,429 @@
+type ErrorType = "AccessDenied" | "AdapterError" | "CallbackRouteError" | "ErrorPageLoop" | "EventError" | "InvalidCallbackUrl" | "CredentialsSignin" | "InvalidEndpoints" | "InvalidCheck" | "JWTSessionError" | "MissingAdapter" | "MissingAdapterMethods" | "MissingAuthorize" | "MissingSecret" | "OAuthAccountNotLinked" | "OAuthCallbackError" | "OAuthProfileParseError" | "SessionTokenError" | "OAuthSignInError" | "EmailSignInError" | "SignOutError" | "UnknownAction" | "UnsupportedStrategy" | "InvalidProvider" | "UntrustedHost" | "Verification" | "MissingCSRF" | "AccountNotLinked" | "DuplicateConditionalUI" | "MissingWebAuthnAutocomplete" | "WebAuthnVerificationError" | "ExperimentalFeatureNotEnabled";
+/**
+ * Base error class for all Auth.js errors.
+ * It's optimized to be printed in the server logs in a nicely formatted way
+ * via the [`logger.error`](https://authjs.dev/reference/core#logger) option.
+ * @noInheritDoc
+ */
+export declare class AuthError extends Error {
+    type: ErrorType;
+    cause?: Record<string, unknown> & {
+        err?: Error;
+    };
+}
+/**
+ * Thrown when the user's sign-in attempt failed.
+ * @noInheritDoc
+ */
+export declare class SignInError extends AuthError {
+}
+/**
+ * One of the database [`Adapter` methods](https://authjs.dev/reference/core/adapters#methods)
+ * failed during execution.
+ *
+ * :::tip
+ * If `debug: true` is set, you can check out `[auth][debug]` in the logs to learn more about the failed adapter method execution.
+ * @example
+ * ```sh
+ * [auth][debug]: adapter_getUserByEmail
+ * { "args": [undefined] }
+ * ```
+ * :::
+ * @noInheritDoc
+ */
+export declare class AdapterError extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when the execution of the [`signIn` callback](https://authjs.dev/reference/core/types#signin) fails
+ * or if it returns `false`.
+ * @noInheritDoc
+ */
+export declare class AccessDenied extends AuthError {
+    static type: string;
+}
+/**
+ * This error occurs when the user cannot finish login.
+ * Depending on the provider type, this could have happened for multiple reasons.
+ *
+ * :::tip
+ * Check out `[auth][details]` in the logs to know which provider failed.
+ * @example
+ * ```sh
+ * [auth][details]: { "provider": "github" }
+ * ```
+ * :::
+ *
+ * For an [OAuth provider](https://authjs.dev/getting-started/authentication/oauth), possible causes are:
+ * - The user denied access to the application
+ * - There was an error parsing the OAuth Profile:
+ *   Check out the provider's `profile` or `userinfo.request` method to make sure
+ *   it correctly fetches the user's profile.
+ * - The `signIn` or `jwt` callback methods threw an uncaught error:
+ *   Check the callback method implementations.
+ *
+ * For an [Email provider](https://authjs.dev/getting-started/authentication/email), possible causes are:
+ * - The provided email/token combination was invalid/missing:
+ *   Check if the provider's `sendVerificationRequest` method correctly sends the email.
+ * - The provided email/token combination has expired:
+ *   Ask the user to log in again.
+ * - There was an error with the database:
+ *   Check the database logs.
+ *
+ * For a [Credentials provider](https://authjs.dev/getting-started/authentication/credentials), possible causes are:
+ * - The `authorize` method threw an uncaught error:
+ *   Check the provider's `authorize` method.
+ * - The `signIn` or `jwt` callback methods threw an uncaught error:
+ *   Check the callback method implementations.
+ *
+ * :::tip
+ * Check out `[auth][cause]` in the error message for more details.
+ * It will show the original stack trace.
+ * :::
+ * @noInheritDoc
+ */
+export declare class CallbackRouteError extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when Auth.js is misconfigured and accidentally tried to require authentication on a custom error page.
+ * To prevent an infinite loop, Auth.js will instead render its default error page.
+ *
+ * To fix this, make sure that the `error` page does not require authentication.
+ *
+ * Learn more at [Guide: Error pages](https://authjs.dev/guides/pages/error)
+ * @noInheritDoc
+ */
+export declare class ErrorPageLoop extends AuthError {
+    static type: string;
+}
+/**
+ * One of the [`events` methods](https://authjs.dev/reference/core/types#eventcallbacks)
+ * failed during execution.
+ *
+ * Make sure that the `events` methods are implemented correctly and uncaught errors are handled.
+ *
+ * Learn more at [`events`](https://authjs.dev/reference/core/types#eventcallbacks)
+ * @noInheritDoc
+ */
+export declare class EventError extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when Auth.js is unable to verify a `callbackUrl` value.
+ * The browser either disabled cookies or the `callbackUrl` is not a valid URL.
+ *
+ * Somebody might have tried to manipulate the callback URL that Auth.js uses to redirect the user back to the configured `callbackUrl`/page.
+ * This could be a malicious hacker trying to redirect the user to a phishing site.
+ * To prevent this, Auth.js checks if the callback URL is valid and throws this error if it is not.
+ *
+ * There is no action required, but it might be an indicator that somebody is trying to attack your application.
+ * @noInheritDoc
+ */
+export declare class InvalidCallbackUrl extends AuthError {
+    static type: string;
+}
+/**
+ * Can be thrown from the `authorize` callback of the Credentials provider.
+ * When an error occurs during the `authorize` callback, two things can happen:
+ * 1. The user is redirected to the signin page, with `error=CredentialsSignin&code=credentials` in the URL. `code` is configurable.
+ * 2. If you throw this error in a framework that handles form actions server-side, this error is thrown, instead of redirecting the user, so you'll need to handle.
+ * @noInheritDoc
+ */
+export declare class CredentialsSignin extends SignInError {
+    static type: string;
+    /**
+     * The error code that is set in the `code` query parameter of the redirect URL.
+     *
+     *
+     * ⚠ NOTE: This property is going to be included in the URL, so make sure it does not hint at sensitive errors.
+     *
+     * The full error is always logged on the server, if you need to debug.
+     *
+     * Generally, we don't recommend hinting specifically if the user had either a wrong username or password specifically,
+     * try rather something like "Invalid credentials".
+     */
+    code: string;
+}
+/**
+ * One of the configured OAuth or OIDC providers is missing the `authorization`, `token` or `userinfo`, or `issuer` configuration.
+ * To perform OAuth or OIDC sign in, at least one of these endpoints is required.
+ *
+ * Learn more at [`OAuth2Config`](https://authjs.dev/reference/core/providers#oauth2configprofile) or [Guide: OAuth Provider](https://authjs.dev/guides/configuring-oauth-providers)
+ * @noInheritDoc
+ */
+export declare class InvalidEndpoints extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when a PKCE, state or nonce OAuth check could not be performed.
+ * This could happen if the OAuth provider is configured incorrectly or if the browser is blocking cookies.
+ *
+ * Learn more at [`checks`](https://authjs.dev/reference/core/providers#checks)
+ * @noInheritDoc
+ */
+export declare class InvalidCheck extends AuthError {
+    static type: string;
+}
+/**
+ * Logged on the server when Auth.js could not decode or encode a JWT-based (`strategy: "jwt"`) session.
+ *
+ * Possible causes are either a misconfigured `secret` or a malformed JWT or `encode/decode` methods.
+ *
+ * :::note
+ * When this error is logged, the session cookie is destroyed.
+ * :::
+ *
+ * Learn more at [`secret`](https://authjs.dev/reference/core#secret), [`jwt.encode`](https://authjs.dev/reference/core/jwt#encode-1) or [`jwt.decode`](https://authjs.dev/reference/core/jwt#decode-2) for more information.
+ * @noInheritDoc
+ */
+export declare class JWTSessionError extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown if Auth.js is misconfigured. This could happen if you configured an Email provider but did not set up a database adapter,
+ * or tried using a `strategy: "database"` session without a database adapter.
+ * In both cases, make sure you either remove the configuration or add the missing adapter.
+ *
+ * Learn more at [Database Adapters](https://authjs.dev/getting-started/database), [Email provider](https://authjs.dev/getting-started/authentication/email) or [Concept: Database session strategy](https://authjs.dev/concepts/session-strategies#database-session)
+ * @noInheritDoc
+ */
+export declare class MissingAdapter extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown similarily to [`MissingAdapter`](https://authjs.dev/reference/core/errors#missingadapter), but only some required methods were missing.
+ *
+ * Make sure you either remove the configuration or add the missing methods to the adapter.
+ *
+ * Learn more at [Database Adapters](https://authjs.dev/getting-started/database)
+ * @noInheritDoc
+ */
+export declare class MissingAdapterMethods extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when a Credentials provider is missing the `authorize` configuration.
+ * To perform credentials sign in, the `authorize` method is required.
+ *
+ * Learn more at [Credentials provider](https://authjs.dev/getting-started/authentication/credentials)
+ * @noInheritDoc
+ */
+export declare class MissingAuthorize extends AuthError {
+    static type: string;
+}
+/**
+ * Auth.js requires a secret or multiple secrets to be set, but none was not found. This is used to encrypt cookies, JWTs and other sensitive data.
+ *
+ * :::note
+ * If you are using a framework like Next.js, we try to automatically infer the secret from the `AUTH_SECRET`, `AUTH_SECRET_1`, etc. environment variables.
+ * Alternatively, you can also explicitly set the [`AuthConfig.secret`](https://authjs.dev/reference/core#secret) option.
+ * :::
+ *
+ *
+ * :::tip
+ * To generate a random string, you can use the Auth.js CLI: `npx auth secret`
+ * :::
+ * @noInheritDoc
+ */
+export declare class MissingSecret extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when an Email address is already associated with an account
+ * but the user is trying an OAuth account that is not linked to it.
+ *
+ * For security reasons, Auth.js does not automatically link OAuth accounts to existing accounts if the user is not signed in.
+ *
+ * :::tip
+ * If you trust the OAuth provider to have verified the user's email address,
+ * you can enable automatic account linking by setting [`allowDangerousEmailAccountLinking: true`](https://authjs.dev/reference/core/providers#allowdangerousemailaccountlinking)
+ * in the provider configuration.
+ * :::
+ * @noInheritDoc
+ */
+export declare class OAuthAccountNotLinked extends SignInError {
+    static type: string;
+}
+/**
+ * Thrown when an OAuth provider returns an error during the sign in process.
+ * This could happen for example if the user denied access to the application or there was a configuration error.
+ *
+ * For a full list of possible reasons, check out the specification [Authorization Code Grant: Error Response](https://www.rfc-editor.org/rfc/rfc6749#section-4.1.2.1)
+ * @noInheritDoc
+ */
+export declare class OAuthCallbackError extends SignInError {
+    static type: string;
+}
+/**
+ * This error occurs during an OAuth sign in attempt when the provider's
+ * response could not be parsed. This could for example happen if the provider's API
+ * changed, or the [`OAuth2Config.profile`](https://authjs.dev/reference/core/providers#oauth2configprofile) method is not implemented correctly.
+ * @noInheritDoc
+ */
+export declare class OAuthProfileParseError extends AuthError {
+    static type: string;
+}
+/**
+ * Logged on the server when Auth.js could not retrieve a session from the database (`strategy: "database"`).
+ *
+ * The database adapter might be misconfigured or the database is not reachable.
+ *
+ * Learn more at [Concept: Database session strategy](https://authjs.dev/concepts/session-strategies#database)
+ * @noInheritDoc
+ */
+export declare class SessionTokenError extends AuthError {
+    static type: string;
+}
+/**
+ * Happens when login by [OAuth](https://authjs.dev/getting-started/authentication/oauth) could not be started.
+ *
+ * Possible causes are:
+ * - The Authorization Server is not compliant with the [OAuth 2.0](https://www.ietf.org/rfc/rfc6749.html) or the [OIDC](https://openid.net/specs/openid-connect-core-1_0.html) specification.
+ *   Check the details in the error message.
+ *
+ * :::tip
+ * Check out `[auth][details]` in the logs to know which provider failed.
+ * @example
+ * ```sh
+ * [auth][details]: { "provider": "github" }
+ * ```
+ * :::
+ * @noInheritDoc
+ */
+export declare class OAuthSignInError extends SignInError {
+    static type: string;
+}
+/**
+ * Happens when the login by an [Email provider](https://authjs.dev/getting-started/authentication/email) could not be started.
+ *
+ * Possible causes are:
+ * - The email sent from the client is invalid, could not be normalized by [`EmailConfig.normalizeIdentifier`](https://authjs.dev/reference/core/providers/email#normalizeidentifier)
+ * - The provided email/token combination has expired:
+ *   Ask the user to log in again.
+ * - There was an error with the database:
+ *   Check the database logs.
+ * @noInheritDoc
+ */
+export declare class EmailSignInError extends SignInError {
+    static type: string;
+}
+/**
+ * Represents an error that occurs during the sign-out process. This error
+ * is logged when there are issues in terminating a user's session, either
+ * by failing to delete the session from the database (in database session
+ * strategies) or encountering issues during other parts of the sign-out
+ * process, such as emitting sign-out events or clearing session cookies.
+ *
+ * The session cookie(s) are emptied even if this error is logged.
+ * @noInheritDoc
+ */
+export declare class SignOutError extends AuthError {
+    static type: string;
+}
+/**
+ * Auth.js was requested to handle an operation that it does not support.
+ *
+ * See [`AuthAction`](https://authjs.dev/reference/core/types#authaction) for the supported actions.
+ * @noInheritDoc
+ */
+export declare class UnknownAction extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when a Credentials provider is present but the JWT strategy (`strategy: "jwt"`) is not enabled.
+ *
+ * Learn more at [`strategy`](https://authjs.dev/reference/core#strategy) or [Credentials provider](https://authjs.dev/getting-started/authentication/credentials)
+ * @noInheritDoc
+ */
+export declare class UnsupportedStrategy extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when an endpoint was incorrectly called without a provider, or with an unsupported provider.
+ * @noInheritDoc
+ */
+export declare class InvalidProvider extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when the `trustHost` option was not set to `true`.
+ *
+ * Auth.js requires the `trustHost` option to be set to `true` since it's relying on the request headers' `host` value.
+ *
+ * :::note
+ * Official Auth.js libraries might attempt to automatically set the `trustHost` option to `true` if the request is coming from a trusted host on a trusted platform.
+ * :::
+ *
+ * Learn more at [`trustHost`](https://authjs.dev/reference/core#trusthost) or [Guide: Deployment](https://authjs.dev/getting-started/deployment)
+ * @noInheritDoc
+ */
+export declare class UntrustedHost extends AuthError {
+    static type: string;
+}
+/**
+ * The user's email/token combination was invalid.
+ * This could be because the email/token combination was not found in the database,
+ * or because the token has expired. Ask the user to log in again.
+ * @noInheritDoc
+ */
+export declare class Verification extends AuthError {
+    static type: string;
+}
+/**
+ * Error for missing CSRF tokens in client-side actions (`signIn`, `signOut`, `useSession#update`).
+ * Thrown when actions lack the double submit cookie, essential for CSRF protection.
+ *
+ * CSRF ([Cross-Site Request Forgery](https://owasp.org/www-community/attacks/csrf))
+ * is an attack leveraging authenticated user credentials for unauthorized actions.
+ *
+ * Double submit cookie pattern, a CSRF defense, requires matching values in a cookie
+ * and request parameter. More on this at [MDN Web Docs](https://developer.mozilla.org/en-US/docs/Glossary/CSRF).
+ * @noInheritDoc
+ */
+export declare class MissingCSRF extends SignInError {
+    static type: string;
+}
+/**
+ * Thrown when multiple providers have `enableConditionalUI` set to `true`.
+ * Only one provider can have this option enabled at a time.
+ * @noInheritDoc
+ */
+export declare class DuplicateConditionalUI extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when a WebAuthn provider has `enableConditionalUI` set to `true` but no formField has `webauthn` in its autocomplete param.
+ *
+ * The `webauthn` autocomplete param is required for conditional UI to work.
+ * @noInheritDoc
+ */
+export declare class MissingWebAuthnAutocomplete extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when a WebAuthn provider fails to verify a client response.
+ * @noInheritDoc
+ */
+export declare class WebAuthnVerificationError extends AuthError {
+    static type: string;
+}
+/**
+ * Thrown when an Email address is already associated with an account
+ * but the user is trying an account that is not linked to it.
+ *
+ * For security reasons, Auth.js does not automatically link accounts to existing accounts if the user is not signed in.
+ * @noInheritDoc
+ */
+export declare class AccountNotLinked extends SignInError {
+    static type: string;
+}
+/**
+ * Thrown when an experimental feature is used but not enabled.
+ * @noInheritDoc
+ */
+export declare class ExperimentalFeatureNotEnabled extends AuthError {
+    static type: string;
+}
+export {};
+//# sourceMappingURL=errors.d.ts.map

package/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["src/errors.ts"],"names":[],"mappings":"AAEA,KAAK,SAAS,GACV,cAAc,GACd,cAAc,GACd,oBAAoB,GACpB,eAAe,GACf,YAAY,GACZ,oBAAoB,GACpB,mBAAmB,GACnB,kBAAkB,GAClB,cAAc,GACd,iBAAiB,GACjB,gBAAgB,GAChB,uBAAuB,GACvB,kBAAkB,GAClB,eAAe,GACf,uBAAuB,GACvB,oBAAoB,GACpB,wBAAwB,GACxB,mBAAmB,GACnB,kBAAkB,GAClB,kBAAkB,GAClB,cAAc,GACd,eAAe,GACf,qBAAqB,GACrB,iBAAiB,GACjB,eAAe,GACf,cAAc,GACd,aAAa,GACb,kBAAkB,GAClB,wBAAwB,GACxB,6BAA6B,GAC7B,2BAA2B,GAC3B,+BAA+B,CAAA;AAEnC;;;;;GAKG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,IAAI,EAAE,SAAS,CAAA;IAQf,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,GAAG,CAAC,EAAE,KAAK,CAAA;KAAE,CAAA;CA6BlD;AAED;;;GAGG;AACH,qBAAa,WAAY,SAAQ,SAAS;CAGzC;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,YAAa,SAAQ,SAAS;IACzC,MAAM,CAAC,IAAI,SAAiB;CAC7B;AAED;;;;GAIG;AACH,qBAAa,YAAa,SAAQ,SAAS;IACzC,MAAM,CAAC,IAAI,SAAiB;CAC7B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AACH,qBAAa,kBAAmB,SAAQ,SAAS;IAC/C,MAAM,CAAC,IAAI,SAAuB;CACnC;AAED;;;;;;;;GAQG;AACH,qBAAa,aAAc,SAAQ,SAAS;IAC1C,MAAM,CAAC,IAAI,SAAkB;CAC9B;AAED;;;;;;;;GAQG;AACH,qBAAa,UAAW,SAAQ,SAAS;IACvC,MAAM,CAAC,IAAI,SAAe;CAC3B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,kBAAmB,SAAQ,SAAS;IAC/C,MAAM,CAAC,IAAI,SAAuB;CACnC;AAED;;;;;;GAMG;AACH,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,MAAM,CAAC,IAAI,SAAsB;IACjC;;;;;;;;;;OAUG;IACH,IAAI,EAAE,MAAM,CAAgB;CAC7B;AAED;;;;;;GAMG;AACH,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,MAAM,CAAC,IAAI,SAAqB;CACjC;AAED;;;;;;GAMG;AACH,qBAAa,YAAa,SAAQ,SAAS;IACzC,MAAM,CAAC,IAAI,SAAiB;CAC7B;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,MAAM,CAAC,IAAI,SAAoB;CAChC;AAED;;;;;;;GAOG;AACH,qBAAa,cAAe,SAAQ,SAAS;IAC3C,MAAM,CAAC,IAAI,SAAmB;CAC/B;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,SAAS;IAClD,MAAM,CAAC,IAAI,SAA0B;CACtC;AAED;;;;;;GAMG;AACH,qBAAa,gBAAiB,SAAQ,SAAS;IAC7C,MAAM,CAAC,IAAI,SAAqB;CACjC;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,aAAc,SAAQ,SAAS;IAC1C,MAAM,CAAC,IAAI,SAAkB;CAC9B;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAsB,SAAQ,WAAW;IACpD,MAAM,CAAC,IAAI,SAA0B;CACtC;AAED;;;;;;GAMG;AACH,qBAAa,kBAAmB,SAAQ,WAAW;IACjD,MAAM,CAAC,IAAI,SAAuB;CACnC;AAED;;;;;GAKG;AACH,qBAAa,sBAAuB,SAAQ,SAAS;IACnD,MAAM,CAAC,IAAI,SAA2B;CACvC;AAED;;;;;;;GAOG;AACH,qBAAa,iBAAkB,SAAQ,SAAS;IAC9C,MAAM,CAAC,IAAI,SAAsB;CAClC;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,MAAM,CAAC,IAAI,SAAqB;CACjC;AAED;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,MAAM,CAAC,IAAI,SAAqB;CACjC;AAED;;;;;;;;;GASG;AACH,qBAAa,YAAa,SAAQ,SAAS;IACzC,MAAM,CAAC,IAAI,SAAiB;CAC7B;AAED;;;;;GAKG;AACH,qBAAa,aAAc,SAAQ,SAAS;IAC1C,MAAM,CAAC,IAAI,SAAkB;CAC9B;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,SAAS;IAChD,MAAM,CAAC,IAAI,SAAwB;CACpC;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,SAAS;IAC5C,MAAM,CAAC,IAAI,SAAoB;CAChC;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,aAAc,SAAQ,SAAS;IAC1C,MAAM,CAAC,IAAI,SAAkB;CAC9B;AAED;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,SAAS;IACzC,MAAM,CAAC,IAAI,SAAiB;CAC7B;AAED;;;;;;;;;;GAUG;AACH,qBAAa,WAAY,SAAQ,WAAW;IAC1C,MAAM,CAAC,IAAI,SAAgB;CAC5B;AAuBD;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,SAAS;IACnD,MAAM,CAAC,IAAI,SAA2B;CACvC;AAED;;;;;GAKG;AACH,qBAAa,2BAA4B,SAAQ,SAAS;IACxD,MAAM,CAAC,IAAI,SAAgC;CAC5C;AAED;;;GAGG;AACH,qBAAa,yBAA0B,SAAQ,SAAS;IACtD,MAAM,CAAC,IAAI,SAA8B;CAC1C;AAED;;;;;;GAMG;AACH,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,MAAM,CAAC,IAAI,SAAqB;CACjC;AAED;;;GAGG;AACH,qBAAa,6BAA8B,SAAQ,SAAS;IAC1D,MAAM,CAAC,IAAI,SAAkC;CAC9C"}