@nestjs-kit/better-auth 0.0.0-stage → 2.1.0

package/dist/principal-readings-Ied2staw.mjs

@@ -0,0 +1,191 @@
+import { c as isConfigurationError, n as BetterAuthConfigurationError } from "./auth-errors-C3rbTV9p.mjs";
+import { IntrinsicException } from "@nestjs/common";
+//#region src/principal-readings.ts
+const RESOLUTION = Symbol.for("@nestjs-kit/better-auth:resolution");
+const TEST_STAMP = Symbol.for("@nestjs-kit/better-auth:test-stamp");
+function object(value) {
+	return value !== null && (typeof value === "object" || typeof value === "function");
+}
+function records(target, create = false) {
+	let value = Reflect.get(target, RESOLUTION);
+	if (!value && create) {
+		value = {
+			own: /* @__PURE__ */ new Map(),
+			positions: /* @__PURE__ */ new Map()
+		};
+		Object.defineProperty(target, RESOLUTION, { value });
+	}
+	return value;
+}
+function sameElements(stamp, args) {
+	return stamp.elements.length === args.length && stamp.elements.every((value, index) => value === args[index]);
+}
+/**
+* The stamp of this invocation: the one on the args array itself (WS, RPC and GraphQL guards and interceptors share
+* that array), or one on its elements when the elements identify the invocation. That takes at least two object
+* elements (an HTTP request and its response): a lone object, such as a WS socket beside a primitive payload, is shared
+* by every message on its connection, so a stamp found only through it may belong to another invocation.
+*/
+function matchingStamp(args) {
+	const own = Reflect.get(args, TEST_STAMP);
+	if (own && sameElements(own, args)) return own;
+	const objects = args.filter(object);
+	if (objects.length < 2) return;
+	for (const target of objects) {
+		const stamp = Reflect.get(target, TEST_STAMP);
+		if (stamp && sameElements(stamp, args)) return stamp;
+	}
+}
+function lineageFromArgs(args) {
+	const targets = [args, ...args.filter(object)];
+	for (const target of targets) {
+		const own = records(target)?.invocationLineage;
+		if (own) return own;
+	}
+	for (const target of targets) {
+		const carrier = records(target)?.lineage;
+		if (!carrier) continue;
+		for (const position of carrier.enclosing(args)) return {
+			...carrier,
+			position
+		};
+	}
+}
+/** The intrinsic twin suppresses Nest's repeated log, while retaining the safe wire shape. */
+var RepeatedReaderError = class extends IntrinsicException {
+	constructor(error) {
+		super(error.message);
+		Object.defineProperties(this, Object.getOwnPropertyDescriptors(error));
+	}
+};
+var PrincipalReadings = class {
+	scope;
+	constructor(scope) {
+		this.scope = scope;
+	}
+	record(call, reading) {
+		const record = records(call.invocation, true);
+		record.own.set(reading.instance, reading);
+		if (call.lineage) {
+			record.invocationLineage = call.lineage;
+			this.recordLineage(call.lineage, reading);
+		}
+	}
+	recordLineage(lineage, reading) {
+		const value = records(lineage.carrier, true);
+		value.positions.set(lineage.position, reading);
+		value.lineage = lineage;
+	}
+	enclosing(lineage, args) {
+		const positions = records(lineage.carrier)?.positions;
+		for (const position of lineage.enclosing(args)) {
+			const reading = positions?.get(position);
+			if (reading) return reading;
+		}
+	}
+	read(input) {
+		const { plan, args, call } = input;
+		const lineage = input.lineage ?? call?.lineage;
+		let resolvedInstance = plan?.instance;
+		try {
+			if (plan?.access === "public") return {
+				outcome: "no-identity",
+				instance: plan.instance
+			};
+			let reading;
+			let validation = lineage ?? lineageFromArgs(args);
+			if (plan?.access === "inherit") reading = lineage && this.enclosing(lineage, args);
+			else {
+				const targets = call ? [call.invocation] : [args, ...args.filter(object)];
+				for (const target of targets) {
+					const own = records(target)?.own;
+					reading = plan ? own?.get(plan.instance) : own?.size === 1 ? own.values().next().value : void 0;
+					if (reading) break;
+				}
+				if (!reading && !plan) for (const target of [args, ...args.filter(object)]) {
+					const candidate = records(target)?.lineage;
+					if (!candidate) continue;
+					reading = this.enclosing(candidate, args);
+					if (reading) {
+						validation = candidate;
+						break;
+					}
+				}
+			}
+			if (!reading) {
+				const stamp = matchingStamp(args);
+				const instance = plan?.instance ?? "default";
+				const result = stamp?.results.get(instance);
+				if (result) reading = {
+					...result,
+					instance
+				};
+			}
+			if (!reading) throw BetterAuthConfigurationError.atRequest(input.beforeGuard && plan?.access !== "inherit" ? "PRINCIPAL_READ_BEFORE_GUARD" : "NO_AUTH_RESULT", "No authentication result: BetterAuthGuard did not run for this invocation", {
+				site: plan?.site ?? input.site,
+				hint: "Run BetterAuthGuard before reading a principal; test replacements must stampPrincipal()."
+			});
+			resolvedInstance = reading.instance;
+			if (reading.outcome === "authenticated") validation?.assertReadable?.(args);
+			return reading;
+		} catch (error) {
+			if (isConfigurationError(error)) throw this.deliver(error, input, resolvedInstance);
+			throw error;
+		}
+	}
+	current() {
+		const state = this.scope.current();
+		if (!state?.reading) throw BetterAuthConfigurationError.atRequest("NO_AUTH_SCOPE", "Principal readers require a handler scope");
+		return state.reading();
+	}
+	project(reading, spec, input) {
+		if (reading.outcome === "no-identity" || reading.outcome === "absent") return null;
+		if (reading.outcome === "rejected") throw reading.failure;
+		if (spec.kind && reading.principal.kind !== spec.kind) {
+			const error = BetterAuthConfigurationError.atRequest(spec.reason ?? "PRINCIPAL_KIND_REQUIRED", `This reader requires principal kind ${spec.kind}`, {
+				site: spec.site,
+				hint: "Use @CurrentPrincipal() or getPrincipal() and narrow p.kind."
+			});
+			throw this.deliver(error, input, reading.instance);
+		}
+		return spec.project(reading.principal);
+	}
+	deliver(error, input, instance) {
+		const state = this.scope.current();
+		const call = state?.call ?? input?.call;
+		const lineage = call?.lineage ?? input?.lineage ?? (input && lineageFromArgs(input.args));
+		const key = call?.key ?? lineage?.carrier ?? input?.args;
+		if (!key) return error;
+		return this.scope.surfaced(key, error, {
+			instance: instance ?? state?.plan?.instance ?? input?.plan?.instance ?? "default",
+			site: error.site ?? input?.site ?? input?.plan?.site ?? "principal reader",
+			lineage
+		}) ? new RepeatedReaderError(error) : error;
+	}
+	stamp(args, instance, result) {
+		stampResult(args, instance, result);
+	}
+};
+/** Test stamps are verified by array or element identity (see matchingStamp), so a stamp never leaks into another invocation. */
+function stampResult(args, instance, result) {
+	const stamp = matchingStamp(args) ?? {
+		elements: [...args],
+		results: /* @__PURE__ */ new Map()
+	};
+	stamp.results.set(instance, result);
+	for (const target of [args, ...args]) if (object(target) && Object.isExtensible(target)) Object.defineProperty(target, TEST_STAMP, {
+		value: stamp,
+		configurable: true
+	});
+}
+function stampedReading(args, instance) {
+	const result = matchingStamp(args)?.results.get(instance);
+	return result ? {
+		...result,
+		instance
+	} : void 0;
+}
+//#endregion
+export { stampResult as n, stampedReading as r, PrincipalReadings as t };
+
+//# sourceMappingURL=principal-readings-Ied2staw.mjs.map

package/dist/principal-readings-Ied2staw.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal-readings-Ied2staw.mjs","names":[],"sources":["../src/principal-readings.ts"],"sourcesContent":["import { IntrinsicException } from \"@nestjs/common\";\nimport type {\n  InvocationLineage,\n  PrincipalReading,\n  PrincipalResult,\n  RoutePlan,\n  TransportCall,\n} from \"./auth-contracts.js\";\nimport {\n  BetterAuthConfigurationError,\n  isConfigurationError,\n} from \"./auth-errors.js\";\nimport type { AuthPrincipal } from \"./auth-types.js\";\nimport { RequestScope } from \"./request-scope.js\";\n\nconst RESOLUTION = Symbol.for(\"@nestjs-kit/better-auth:resolution\");\nconst TEST_STAMP = Symbol.for(\"@nestjs-kit/better-auth:test-stamp\");\ninterface Records {\n  own: Map<string, PrincipalReading>;\n  positions: Map<string, PrincipalReading>;\n  lineage?: InvocationLineage;\n  invocationLineage?: InvocationLineage;\n}\ninterface TestStamp {\n  elements: readonly unknown[];\n  results: Map<string, PrincipalResult>;\n}\nexport interface ReadingInput {\n  readonly args: readonly unknown[];\n  readonly call?: TransportCall;\n  readonly lineage?: InvocationLineage;\n  readonly plan?: Pick<RoutePlan, \"access\" | \"instance\" | \"site\">;\n  readonly beforeGuard?: boolean;\n  readonly site?: string;\n}\n\nfunction object(value: unknown): value is object {\n  return (\n    value !== null && (typeof value === \"object\" || typeof value === \"function\")\n  );\n}\nfunction records(target: object, create = false): Records | undefined {\n  let value = Reflect.get(target, RESOLUTION) as Records | undefined;\n  if (!value && create) {\n    value = { own: new Map(), positions: new Map() };\n    Object.defineProperty(target, RESOLUTION, { value });\n  }\n  return value;\n}\nfunction sameElements(stamp: TestStamp, args: readonly unknown[]): boolean {\n  return (\n    stamp.elements.length === args.length &&\n    stamp.elements.every((value, index) => value === args[index])\n  );\n}\n\n/**\n * The stamp of this invocation: the one on the args array itself (WS, RPC and GraphQL guards and interceptors share\n * that array), or one on its elements when the elements identify the invocation. That takes at least two object\n * elements (an HTTP request and its response): a lone object, such as a WS socket beside a primitive payload, is shared\n * by every message on its connection, so a stamp found only through it may belong to another invocation.\n */\nfunction matchingStamp(args: readonly unknown[]): TestStamp | undefined {\n  const own = Reflect.get(args, TEST_STAMP) as TestStamp | undefined;\n  if (own && sameElements(own, args)) {\n    return own;\n  }\n  const objects = args.filter(object);\n  if (objects.length < 2) {\n    return undefined;\n  }\n  for (const target of objects) {\n    const stamp = Reflect.get(target, TEST_STAMP) as TestStamp | undefined;\n    if (stamp && sameElements(stamp, args)) {\n      return stamp;\n    }\n  }\n  return undefined;\n}\n\nfunction lineageFromArgs(\n  args: readonly unknown[],\n): InvocationLineage | undefined {\n  const targets = [args, ...args.filter(object)];\n  for (const target of targets) {\n    const own = records(target)?.invocationLineage;\n    if (own) {\n      return own;\n    }\n  }\n  for (const target of targets) {\n    const carrier = records(target)?.lineage;\n    if (!carrier) {\n      continue;\n    }\n    // The recorded callback is structural, but its recorded position may belong\n    // to a sibling operation in the same batched GraphQL carrier.\n    for (const position of carrier.enclosing(args)) {\n      return { ...carrier, position };\n    }\n  }\n  return undefined;\n}\n\n/** The intrinsic twin suppresses Nest's repeated log, while retaining the safe wire shape. */\nexport class RepeatedReaderError extends IntrinsicException {\n  constructor(error: BetterAuthConfigurationError) {\n    super(error.message);\n    Object.defineProperties(this, Object.getOwnPropertyDescriptors(error));\n  }\n}\n\nexport class PrincipalReadings {\n  constructor(private readonly scope: RequestScope) {}\n\n  record(\n    call: Pick<TransportCall, \"invocation\" | \"lineage\">,\n    reading: PrincipalReading,\n  ): void {\n    const record = records(call.invocation, true)!;\n    record.own.set(reading.instance, reading);\n    if (call.lineage) {\n      record.invocationLineage = call.lineage;\n      this.recordLineage(call.lineage, reading);\n    }\n  }\n\n  recordLineage(lineage: InvocationLineage, reading: PrincipalReading): void {\n    const value = records(lineage.carrier, true)!;\n    value.positions.set(lineage.position, reading);\n    value.lineage = lineage;\n  }\n\n  enclosing(\n    lineage: InvocationLineage,\n    args: readonly unknown[],\n  ): PrincipalReading | undefined {\n    const positions = records(lineage.carrier)?.positions;\n    for (const position of lineage.enclosing(args)) {\n      const reading = positions?.get(position);\n      if (reading) {\n        return reading;\n      }\n    }\n    return undefined;\n  }\n\n  read(input: ReadingInput): PrincipalReading {\n    const { plan, args, call } = input;\n    const lineage = input.lineage ?? call?.lineage;\n    let resolvedInstance = plan?.instance;\n    try {\n      if (plan?.access === \"public\") {\n        return { outcome: \"no-identity\", instance: plan.instance };\n      }\n      let reading: PrincipalReading | undefined;\n      let validation = lineage ?? lineageFromArgs(args);\n      if (plan?.access === \"inherit\") {\n        reading = lineage && this.enclosing(lineage, args);\n      } else {\n        const targets = call\n          ? [call.invocation]\n          : [args, ...args.filter(object)];\n        for (const target of targets) {\n          const own = records(target)?.own;\n          reading = plan\n            ? own?.get(plan.instance)\n            : own?.size === 1\n              ? own.values().next().value\n              : undefined;\n          if (reading) {\n            break;\n          }\n        }\n        if (!reading && !plan) {\n          for (const target of [args, ...args.filter(object)]) {\n            const candidate = records(target)?.lineage;\n            if (!candidate) {\n              continue;\n            }\n            reading = this.enclosing(candidate, args);\n            if (reading) {\n              validation = candidate;\n              break;\n            }\n          }\n        }\n      }\n      if (!reading) {\n        const stamp = matchingStamp(args);\n        const instance = plan?.instance ?? \"default\";\n        const result = stamp?.results.get(instance);\n        if (result) {\n          reading = { ...result, instance };\n        }\n      }\n      if (!reading) {\n        throw BetterAuthConfigurationError.atRequest(\n          input.beforeGuard && plan?.access !== \"inherit\"\n            ? \"PRINCIPAL_READ_BEFORE_GUARD\"\n            : \"NO_AUTH_RESULT\",\n          \"No authentication result: BetterAuthGuard did not run for this invocation\",\n          {\n            site: plan?.site ?? input.site,\n            hint: \"Run BetterAuthGuard before reading a principal; test replacements must stampPrincipal().\",\n          },\n        );\n      }\n      resolvedInstance = reading.instance;\n      if (reading.outcome === \"authenticated\") {\n        validation?.assertReadable?.(args);\n      }\n      return reading;\n    } catch (error) {\n      if (isConfigurationError(error)) {\n        throw this.deliver(error, input, resolvedInstance);\n      }\n      throw error;\n    }\n  }\n\n  current(): PrincipalReading {\n    const state = this.scope.current();\n    if (!state?.reading) {\n      throw BetterAuthConfigurationError.atRequest(\n        \"NO_AUTH_SCOPE\",\n        \"Principal readers require a handler scope\",\n      );\n    }\n    return state.reading();\n  }\n\n  project<T>(\n    reading: PrincipalReading,\n    spec: {\n      kind?: string;\n      reason?: string;\n      site: string;\n      project: (principal: AuthPrincipal) => T;\n    },\n    input?: ReadingInput,\n  ): T | null {\n    if (reading.outcome === \"no-identity\" || reading.outcome === \"absent\") {\n      return null;\n    }\n    if (reading.outcome === \"rejected\") {\n      throw reading.failure;\n    }\n    if (spec.kind && reading.principal.kind !== spec.kind) {\n      const error = BetterAuthConfigurationError.atRequest(\n        spec.reason ?? \"PRINCIPAL_KIND_REQUIRED\",\n        `This reader requires principal kind ${spec.kind}`,\n        {\n          site: spec.site,\n          hint: \"Use @CurrentPrincipal() or getPrincipal() and narrow p.kind.\",\n        },\n      );\n      throw this.deliver(error, input, reading.instance);\n    }\n    return spec.project(reading.principal);\n  }\n\n  deliver(\n    error: BetterAuthConfigurationError,\n    input?: ReadingInput,\n    instance?: string,\n  ): BetterAuthConfigurationError | RepeatedReaderError {\n    const state = this.scope.current();\n    const call = state?.call ?? input?.call;\n    const lineage =\n      call?.lineage ?? input?.lineage ?? (input && lineageFromArgs(input.args));\n    const key = call?.key ?? lineage?.carrier ?? input?.args;\n    if (!key) {\n      return error;\n    }\n    const repeated = this.scope.surfaced(key, error, {\n      instance:\n        instance ?? state?.plan?.instance ?? input?.plan?.instance ?? \"default\",\n      site:\n        error.site ?? input?.site ?? input?.plan?.site ?? \"principal reader\",\n      lineage,\n    });\n    return repeated ? new RepeatedReaderError(error) : error;\n  }\n\n  stamp(\n    args: readonly unknown[],\n    instance: string,\n    result: PrincipalResult,\n  ): void {\n    stampResult(args, instance, result);\n  }\n}\n\n/** Test stamps are verified by array or element identity (see matchingStamp), so a stamp never leaks into another invocation. */\nexport function stampResult(\n  args: readonly unknown[],\n  instance: string,\n  result: PrincipalResult,\n): void {\n  const stamp = matchingStamp(args) ?? {\n    elements: [...args],\n    results: new Map(),\n  };\n  stamp.results.set(instance, result);\n  for (const target of [args, ...args]) {\n    if (object(target) && Object.isExtensible(target)) {\n      Object.defineProperty(target, TEST_STAMP, {\n        value: stamp,\n        configurable: true,\n      });\n    }\n  }\n}\n\nexport function stampedReading(\n  args: readonly unknown[],\n  instance: string,\n): PrincipalReading | undefined {\n  const result = matchingStamp(args)?.results.get(instance);\n  return result ? { ...result, instance } : undefined;\n}\n"],"mappings":";;;AAeA,MAAM,aAAa,OAAO,IAAI,oCAAoC;AAClE,MAAM,aAAa,OAAO,IAAI,oCAAoC;AAoBlE,SAAS,OAAO,OAAiC;CAC/C,OACE,UAAU,SAAS,OAAO,UAAU,YAAY,OAAO,UAAU;AAErE;AACA,SAAS,QAAQ,QAAgB,SAAS,OAA4B;CACpE,IAAI,QAAQ,QAAQ,IAAI,QAAQ,UAAU;CAC1C,IAAI,CAAC,SAAS,QAAQ;EACpB,QAAQ;GAAE,qBAAK,IAAI,IAAI;GAAG,2BAAW,IAAI,IAAI;EAAE;EAC/C,OAAO,eAAe,QAAQ,YAAY,EAAE,MAAM,CAAC;CACrD;CACA,OAAO;AACT;AACA,SAAS,aAAa,OAAkB,MAAmC;CACzE,OACE,MAAM,SAAS,WAAW,KAAK,UAC/B,MAAM,SAAS,OAAO,OAAO,UAAU,UAAU,KAAK,MAAM;AAEhE;;;;;;;AAQA,SAAS,cAAc,MAAiD;CACtE,MAAM,MAAM,QAAQ,IAAI,MAAM,UAAU;CACxC,IAAI,OAAO,aAAa,KAAK,IAAI,GAC/B,OAAO;CAET,MAAM,UAAU,KAAK,OAAO,MAAM;CAClC,IAAI,QAAQ,SAAS,GACnB;CAEF,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,QAAQ,QAAQ,IAAI,QAAQ,UAAU;EAC5C,IAAI,SAAS,aAAa,OAAO,IAAI,GACnC,OAAO;CAEX;AAEF;AAEA,SAAS,gBACP,MAC+B;CAC/B,MAAM,UAAU,CAAC,MAAM,GAAG,KAAK,OAAO,MAAM,CAAC;CAC7C,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,MAAM,QAAQ,MAAM,CAAC,EAAE;EAC7B,IAAI,KACF,OAAO;CAEX;CACA,KAAK,MAAM,UAAU,SAAS;EAC5B,MAAM,UAAU,QAAQ,MAAM,CAAC,EAAE;EACjC,IAAI,CAAC,SACH;EAIF,KAAK,MAAM,YAAY,QAAQ,UAAU,IAAI,GAC3C,OAAO;GAAE,GAAG;GAAS;EAAS;CAElC;AAEF;;AAGA,IAAa,sBAAb,cAAyC,mBAAmB;CAC1D,YAAY,OAAqC;EAC/C,MAAM,MAAM,OAAO;EACnB,OAAO,iBAAiB,MAAM,OAAO,0BAA0B,KAAK,CAAC;CACvE;AACF;AAEA,IAAa,oBAAb,MAA+B;CACA;CAA7B,YAAY,OAAsC;EAArB,KAAA,QAAA;CAAsB;CAEnD,OACE,MACA,SACM;EACN,MAAM,SAAS,QAAQ,KAAK,YAAY,IAAI;EAC5C,OAAO,IAAI,IAAI,QAAQ,UAAU,OAAO;EACxC,IAAI,KAAK,SAAS;GAChB,OAAO,oBAAoB,KAAK;GAChC,KAAK,cAAc,KAAK,SAAS,OAAO;EAC1C;CACF;CAEA,cAAc,SAA4B,SAAiC;EACzE,MAAM,QAAQ,QAAQ,QAAQ,SAAS,IAAI;EAC3C,MAAM,UAAU,IAAI,QAAQ,UAAU,OAAO;EAC7C,MAAM,UAAU;CAClB;CAEA,UACE,SACA,MAC8B;EAC9B,MAAM,YAAY,QAAQ,QAAQ,OAAO,CAAC,EAAE;EAC5C,KAAK,MAAM,YAAY,QAAQ,UAAU,IAAI,GAAG;GAC9C,MAAM,UAAU,WAAW,IAAI,QAAQ;GACvC,IAAI,SACF,OAAO;EAEX;CAEF;CAEA,KAAK,OAAuC;EAC1C,MAAM,EAAE,MAAM,MAAM,SAAS;EAC7B,MAAM,UAAU,MAAM,WAAW,MAAM;EACvC,IAAI,mBAAmB,MAAM;EAC7B,IAAI;GACF,IAAI,MAAM,WAAW,UACnB,OAAO;IAAE,SAAS;IAAe,UAAU,KAAK;GAAS;GAE3D,IAAI;GACJ,IAAI,aAAa,WAAW,gBAAgB,IAAI;GAChD,IAAI,MAAM,WAAW,WACnB,UAAU,WAAW,KAAK,UAAU,SAAS,IAAI;QAC5C;IACL,MAAM,UAAU,OACZ,CAAC,KAAK,UAAU,IAChB,CAAC,MAAM,GAAG,KAAK,OAAO,MAAM,CAAC;IACjC,KAAK,MAAM,UAAU,SAAS;KAC5B,MAAM,MAAM,QAAQ,MAAM,CAAC,EAAE;KAC7B,UAAU,OACN,KAAK,IAAI,KAAK,QAAQ,IACtB,KAAK,SAAS,IACZ,IAAI,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,QACpB,KAAA;KACN,IAAI,SACF;IAEJ;IACA,IAAI,CAAC,WAAW,CAAC,MACf,KAAK,MAAM,UAAU,CAAC,MAAM,GAAG,KAAK,OAAO,MAAM,CAAC,GAAG;KACnD,MAAM,YAAY,QAAQ,MAAM,CAAC,EAAE;KACnC,IAAI,CAAC,WACH;KAEF,UAAU,KAAK,UAAU,WAAW,IAAI;KACxC,IAAI,SAAS;MACX,aAAa;MACb;KACF;IACF;GAEJ;GACA,IAAI,CAAC,SAAS;IACZ,MAAM,QAAQ,cAAc,IAAI;IAChC,MAAM,WAAW,MAAM,YAAY;IACnC,MAAM,SAAS,OAAO,QAAQ,IAAI,QAAQ;IAC1C,IAAI,QACF,UAAU;KAAE,GAAG;KAAQ;IAAS;GAEpC;GACA,IAAI,CAAC,SACH,MAAM,6BAA6B,UACjC,MAAM,eAAe,MAAM,WAAW,YAClC,gCACA,kBACJ,6EACA;IACE,MAAM,MAAM,QAAQ,MAAM;IAC1B,MAAM;GACR,CACF;GAEF,mBAAmB,QAAQ;GAC3B,IAAI,QAAQ,YAAY,iBACtB,YAAY,iBAAiB,IAAI;GAEnC,OAAO;EACT,SAAS,OAAO;GACd,IAAI,qBAAqB,KAAK,GAC5B,MAAM,KAAK,QAAQ,OAAO,OAAO,gBAAgB;GAEnD,MAAM;EACR;CACF;CAEA,UAA4B;EAC1B,MAAM,QAAQ,KAAK,MAAM,QAAQ;EACjC,IAAI,CAAC,OAAO,SACV,MAAM,6BAA6B,UACjC,iBACA,2CACF;EAEF,OAAO,MAAM,QAAQ;CACvB;CAEA,QACE,SACA,MAMA,OACU;EACV,IAAI,QAAQ,YAAY,iBAAiB,QAAQ,YAAY,UAC3D,OAAO;EAET,IAAI,QAAQ,YAAY,YACtB,MAAM,QAAQ;EAEhB,IAAI,KAAK,QAAQ,QAAQ,UAAU,SAAS,KAAK,MAAM;GACrD,MAAM,QAAQ,6BAA6B,UACzC,KAAK,UAAU,2BACf,uCAAuC,KAAK,QAC5C;IACE,MAAM,KAAK;IACX,MAAM;GACR,CACF;GACA,MAAM,KAAK,QAAQ,OAAO,OAAO,QAAQ,QAAQ;EACnD;EACA,OAAO,KAAK,QAAQ,QAAQ,SAAS;CACvC;CAEA,QACE,OACA,OACA,UACoD;EACpD,MAAM,QAAQ,KAAK,MAAM,QAAQ;EACjC,MAAM,OAAO,OAAO,QAAQ,OAAO;EACnC,MAAM,UACJ,MAAM,WAAW,OAAO,YAAY,SAAS,gBAAgB,MAAM,IAAI;EACzE,MAAM,MAAM,MAAM,OAAO,SAAS,WAAW,OAAO;EACpD,IAAI,CAAC,KACH,OAAO;EAST,OAPiB,KAAK,MAAM,SAAS,KAAK,OAAO;GAC/C,UACE,YAAY,OAAO,MAAM,YAAY,OAAO,MAAM,YAAY;GAChE,MACE,MAAM,QAAQ,OAAO,QAAQ,OAAO,MAAM,QAAQ;GACpD;EACF,CACc,IAAI,IAAI,oBAAoB,KAAK,IAAI;CACrD;CAEA,MACE,MACA,UACA,QACM;EACN,YAAY,MAAM,UAAU,MAAM;CACpC;AACF;;AAGA,SAAgB,YACd,MACA,UACA,QACM;CACN,MAAM,QAAQ,cAAc,IAAI,KAAK;EACnC,UAAU,CAAC,GAAG,IAAI;EAClB,yBAAS,IAAI,IAAI;CACnB;CACA,MAAM,QAAQ,IAAI,UAAU,MAAM;CAClC,KAAK,MAAM,UAAU,CAAC,MAAM,GAAG,IAAI,GACjC,IAAI,OAAO,MAAM,KAAK,OAAO,aAAa,MAAM,GAC9C,OAAO,eAAe,QAAQ,YAAY;EACxC,OAAO;EACP,cAAc;CAChB,CAAC;AAGP;AAEA,SAAgB,eACd,MACA,UAC8B;CAC9B,MAAM,SAAS,cAAc,IAAI,CAAC,EAAE,QAAQ,IAAI,QAAQ;CACxD,OAAO,SAAS;EAAE,GAAG;EAAQ;CAAS,IAAI,KAAA;AAC5C"}

package/dist/rolldown-runtime-VH7oDXx4.cjs

@@ -0,0 +1,28 @@
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+Object.defineProperty(exports, "__toESM", {
+	enumerable: true,
+	get: function() {
+		return __toESM;
+	}
+});