@nowline/embed 0.2.5 → 0.4.1

package/dist/auth/allowlist.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Allowlist for the dev embed bundle's Firebase Auth gate.
+ *
+ * An email is allowlisted if either:
+ *   1. Its domain is in ALLOWED_DOMAINS (e.g. anything @nowline.io), OR
+ *   2. The exact lowercase email is in ALLOWED_EMAILS.
+ *
+ * Mirrors the commercial site's `auth-allowlist.ts` so both Lolay
+ * dev surfaces (the marketing site and the embed CDN dev tier) share
+ * one allowlist policy. Keep this short; when it grows past ~5 entries,
+ * migrate to Firebase custom claims (Admin SDK) or a Firestore
+ * `allowlist` collection.
+ *
+ * See specs/embed.md § Bootstrap status (dev auth gate) and
+ * the infrastructure deploy runbook § 4 for the deploy-side wiring.
+ */
+export declare const ALLOWED_DOMAINS: readonly string[];
+export declare const ALLOWED_EMAILS: readonly string[];
+export declare function isAllowlisted(email: string | null | undefined): boolean;
+//# sourceMappingURL=allowlist.d.ts.map

package/dist/auth/allowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.d.ts","sourceRoot":"","sources":["../../src/auth/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAAmB,CAAC;AAEjE,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAE3C,CAAC;AAEF,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAQvE"}

package/dist/auth/allowlist.js

@@ -0,0 +1,33 @@
+/**
+ * Allowlist for the dev embed bundle's Firebase Auth gate.
+ *
+ * An email is allowlisted if either:
+ *   1. Its domain is in ALLOWED_DOMAINS (e.g. anything @nowline.io), OR
+ *   2. The exact lowercase email is in ALLOWED_EMAILS.
+ *
+ * Mirrors the commercial site's `auth-allowlist.ts` so both Lolay
+ * dev surfaces (the marketing site and the embed CDN dev tier) share
+ * one allowlist policy. Keep this short; when it grows past ~5 entries,
+ * migrate to Firebase custom claims (Admin SDK) or a Firestore
+ * `allowlist` collection.
+ *
+ * See specs/embed.md § Bootstrap status (dev auth gate) and
+ * the infrastructure deploy runbook § 4 for the deploy-side wiring.
+ */
+export const ALLOWED_DOMAINS = ['nowline.io'];
+export const ALLOWED_EMAILS = [
+// Add additional allowlisted Google account emails here, one per line.
+];
+export function isAllowlisted(email) {
+    if (!email)
+        return false;
+    const normalized = email.trim().toLowerCase();
+    if (ALLOWED_EMAILS.includes(normalized))
+        return true;
+    const at = normalized.lastIndexOf('@');
+    if (at === -1)
+        return false;
+    const domain = normalized.slice(at + 1);
+    return ALLOWED_DOMAINS.includes(domain);
+}
+//# sourceMappingURL=allowlist.js.map

package/dist/auth/allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"allowlist.js","sourceRoot":"","sources":["../../src/auth/allowlist.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAsB,CAAC,YAAY,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,cAAc,GAAsB;AAC7C,uEAAuE;CAC1E,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,KAAgC;IAC1D,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9C,IAAI,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,EAAE,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACxC,OAAO,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC"}

package/dist/auth/env.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Build-time environment helpers for `@nowline/embed`.
+ *
+ * `__NOWLINE_EMBED_ENV__` is substituted at bundle time by esbuild's
+ * `define` (see `packages/embed/scripts/bundle.mjs`). The substitution
+ * lets the prod minified bundle dead-code-eliminate the dev auth gate
+ * and its Firebase imports — when the constant folds to the literal
+ * string `"prod"`, every `IS_DEV` branch becomes `false` and esbuild's
+ * minifier strips the dynamic-import site that pulls in `firebase/app`
+ * + `firebase/auth`.
+ *
+ * The `typeof` guards keep this module safe to import under vitest,
+ * where esbuild's define never runs and the identifier is undeclared.
+ */
+export type EmbedEnv = 'dev' | 'prod';
+export declare const EMBED_ENV: EmbedEnv;
+export declare const IS_DEV: boolean;
+export declare const IS_PROD: boolean;
+export declare const EMBED_VERSION: string;
+export declare const EMBED_SHA: string;
+export declare const PROD_ORIGIN = "https://embed.nowline.io";
+export declare const DEV_ORIGIN = "https://embed.nowline.dev";
+//# sourceMappingURL=env.d.ts.map

package/dist/auth/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../../src/auth/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;AAEtC,eAAO,MAAM,SAAS,EAAE,QAGR,CAAC;AAEjB,eAAO,MAAM,MAAM,EAAE,OAA6B,CAAC;AACnD,eAAO,MAAM,OAAO,EAAE,OAA8B,CAAC;AAErD,eAAO,MAAM,aAAa,EAAE,MAC8D,CAAC;AAE3F,eAAO,MAAM,SAAS,EAAE,MAC4D,CAAC;AAErF,eAAO,MAAM,WAAW,6BAA6B,CAAC;AACtD,eAAO,MAAM,UAAU,8BAA8B,CAAC"}

package/dist/auth/env.js

@@ -0,0 +1,24 @@
+/**
+ * Build-time environment helpers for `@nowline/embed`.
+ *
+ * `__NOWLINE_EMBED_ENV__` is substituted at bundle time by esbuild's
+ * `define` (see `packages/embed/scripts/bundle.mjs`). The substitution
+ * lets the prod minified bundle dead-code-eliminate the dev auth gate
+ * and its Firebase imports — when the constant folds to the literal
+ * string `"prod"`, every `IS_DEV` branch becomes `false` and esbuild's
+ * minifier strips the dynamic-import site that pulls in `firebase/app`
+ * + `firebase/auth`.
+ *
+ * The `typeof` guards keep this module safe to import under vitest,
+ * where esbuild's define never runs and the identifier is undeclared.
+ */
+export const EMBED_ENV = typeof __NOWLINE_EMBED_ENV__ !== 'undefined' && __NOWLINE_EMBED_ENV__ === 'dev'
+    ? 'dev'
+    : 'prod';
+export const IS_DEV = EMBED_ENV === 'dev';
+export const IS_PROD = EMBED_ENV === 'prod';
+export const EMBED_VERSION = typeof __NOWLINE_EMBED_VERSION__ !== 'undefined' ? __NOWLINE_EMBED_VERSION__ : '0.0.0';
+export const EMBED_SHA = typeof __NOWLINE_EMBED_SHA__ !== 'undefined' ? __NOWLINE_EMBED_SHA__ : 'unknown';
+export const PROD_ORIGIN = 'https://embed.nowline.io';
+export const DEV_ORIGIN = 'https://embed.nowline.dev';
+//# sourceMappingURL=env.js.map

package/dist/auth/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/auth/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAQH,MAAM,CAAC,MAAM,SAAS,GAClB,OAAO,qBAAqB,KAAK,WAAW,IAAI,qBAAqB,KAAK,KAAK;IAC3E,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,MAAM,CAAC;AAEjB,MAAM,CAAC,MAAM,MAAM,GAAY,SAAS,KAAK,KAAK,CAAC;AACnD,MAAM,CAAC,MAAM,OAAO,GAAY,SAAS,KAAK,MAAM,CAAC;AAErD,MAAM,CAAC,MAAM,aAAa,GACtB,OAAO,yBAAyB,KAAK,WAAW,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO,CAAC;AAE3F,MAAM,CAAC,MAAM,SAAS,GAClB,OAAO,qBAAqB,KAAK,WAAW,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;AAErF,MAAM,CAAC,MAAM,WAAW,GAAG,0BAA0B,CAAC;AACtD,MAAM,CAAC,MAAM,UAAU,GAAG,2BAA2B,CAAC"}

package/dist/auth/firebase-auth.client.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Client-side Firebase Auth gate for the dev embed bundle.
+ *
+ * Mirrors the commercial site's `firebase-auth.client.ts` so the
+ * two Lolay dev surfaces share one allowlist UX. Loaded only on the
+ * dev build (when `__NOWLINE_EMBED_ENV__ === 'dev'`); the prod build
+ * tree-shakes the dynamic import in `src/index.ts` and never pulls
+ * `firebase/app` or `firebase/auth` into the IIFE.
+ *
+ * Renders a full-viewport overlay with z-index 2147483647 so it sits
+ * above any host-page content. Until the visitor signs in with an
+ * allowlisted Google account, the overlay stays put; once allowlisted,
+ * it removes itself and the embed's auto-scan reaches the rendered
+ * SVG underneath. The host page is told nothing — the gate is purely
+ * client-side, opaque to the embedder.
+ *
+ * See specs/embed.md § Bootstrap status (dev auth gate) and
+ * the infrastructure deploy runbook § 4 for the deploy-side wiring.
+ */
+export declare function startDevAuthGate(): void;
+//# sourceMappingURL=firebase-auth.client.d.ts.map

package/dist/auth/firebase-auth.client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-auth.client.d.ts","sourceRoot":"","sources":["../../src/auth/firebase-auth.client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAyGH,wBAAgB,gBAAgB,IAAI,IAAI,CAkDvC"}

package/dist/auth/firebase-auth.client.js

@@ -0,0 +1,142 @@
+/**
+ * Client-side Firebase Auth gate for the dev embed bundle.
+ *
+ * Mirrors the commercial site's `firebase-auth.client.ts` so the
+ * two Lolay dev surfaces share one allowlist UX. Loaded only on the
+ * dev build (when `__NOWLINE_EMBED_ENV__ === 'dev'`); the prod build
+ * tree-shakes the dynamic import in `src/index.ts` and never pulls
+ * `firebase/app` or `firebase/auth` into the IIFE.
+ *
+ * Renders a full-viewport overlay with z-index 2147483647 so it sits
+ * above any host-page content. Until the visitor signs in with an
+ * allowlisted Google account, the overlay stays put; once allowlisted,
+ * it removes itself and the embed's auto-scan reaches the rendered
+ * SVG underneath. The host page is told nothing — the gate is purely
+ * client-side, opaque to the embedder.
+ *
+ * See specs/embed.md § Bootstrap status (dev auth gate) and
+ * the infrastructure deploy runbook § 4 for the deploy-side wiring.
+ */
+import { initializeApp } from 'firebase/app';
+import { GoogleAuthProvider, getAuth, onAuthStateChanged, signInWithPopup, signOut, } from 'firebase/auth';
+import { isAllowlisted } from './allowlist.js';
+const config = {
+    apiKey: typeof __NOWLINE_FIREBASE_API_KEY__ !== 'undefined' ? __NOWLINE_FIREBASE_API_KEY__ : '',
+    authDomain: typeof __NOWLINE_FIREBASE_AUTH_DOMAIN__ !== 'undefined'
+        ? __NOWLINE_FIREBASE_AUTH_DOMAIN__
+        : '',
+    projectId: typeof __NOWLINE_FIREBASE_PROJECT_ID__ !== 'undefined'
+        ? __NOWLINE_FIREBASE_PROJECT_ID__
+        : '',
+    appId: typeof __NOWLINE_FIREBASE_APP_ID__ !== 'undefined' ? __NOWLINE_FIREBASE_APP_ID__ : '',
+};
+const OVERLAY_ID = 'nowline-embed-dev-auth-overlay';
+let app = null;
+let auth = null;
+function getOrCreateOverlay() {
+    let overlay = document.getElementById(OVERLAY_ID);
+    if (overlay)
+        return overlay;
+    overlay = document.createElement('div');
+    overlay.id = OVERLAY_ID;
+    overlay.setAttribute('role', 'dialog');
+    overlay.setAttribute('aria-modal', 'true');
+    overlay.setAttribute('aria-label', 'Internal preview sign-in');
+    overlay.style.cssText = [
+        'position: fixed',
+        'inset: 0',
+        'z-index: 2147483647',
+        'background-color: #ffffff',
+        'color: #1a1a2e',
+        'display: flex',
+        'align-items: center',
+        'justify-content: center',
+        'padding: 1.5rem',
+        'font-family: system-ui, -apple-system, "Segoe UI", sans-serif',
+    ].join(';');
+    document.body.appendChild(overlay);
+    return overlay;
+}
+function removeOverlay() {
+    const overlay = document.getElementById(OVERLAY_ID);
+    overlay?.remove();
+}
+function renderSignIn(overlay, onClick) {
+    overlay.innerHTML = `
+        <div style="max-width: 28rem; text-align: center;">
+            <div style="font-size: 0.75rem; letter-spacing: 0.08em; text-transform: uppercase; color: #5a5a6a; margin-bottom: 0.75rem;">embed.nowline.dev &mdash; internal preview</div>
+            <h1 style="font-size: 1.875rem; font-weight: 700; margin: 0 0 0.75rem;">Sign in to continue</h1>
+            <p style="margin: 0 0 1.5rem; color: #5a5a6a;">Access is limited to allowlisted Lolay accounts. Production embed is at <a href="https://embed.nowline.io" style="color: #1a4ed8;">embed.nowline.io</a>.</p>
+            <button type="button" id="nowline-embed-dev-signin-btn" style="display: inline-block; padding: 0.75rem 1.5rem; border-radius: 8px; background-color: #e53e3e; color: #ffffff; font-weight: 700; border: 1px solid transparent; cursor: pointer; font-size: 1rem;">Sign in with Google</button>
+        </div>
+    `;
+    const btn = overlay.querySelector('#nowline-embed-dev-signin-btn');
+    btn?.addEventListener('click', onClick);
+}
+function renderDenied(overlay, email, onSignOut) {
+    overlay.innerHTML = `
+        <div style="max-width: 28rem; text-align: center;">
+            <div style="font-size: 0.75rem; letter-spacing: 0.08em; text-transform: uppercase; color: #5a5a6a; margin-bottom: 0.75rem;">embed.nowline.dev &mdash; internal preview</div>
+            <h1 style="font-size: 1.875rem; font-weight: 700; margin: 0 0 0.75rem;">Access denied</h1>
+            <p style="margin: 0 0 1.5rem; color: #5a5a6a;">${escapeHtml(email)} is not on the allowlist for this preview environment. Production embed is publicly available at <a href="https://embed.nowline.io" style="color: #1a4ed8;">embed.nowline.io</a>.</p>
+            <button type="button" id="nowline-embed-dev-signout-btn" style="display: inline-block; padding: 0.75rem 1.5rem; border-radius: 8px; background-color: transparent; color: #1a1a2e; font-weight: 700; border: 1px solid #c0c0c0; cursor: pointer; font-size: 1rem;">Sign out</button>
+        </div>
+    `;
+    const btn = overlay.querySelector('#nowline-embed-dev-signout-btn');
+    btn?.addEventListener('click', onSignOut);
+}
+function escapeHtml(value) {
+    return value
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+}
+export function startDevAuthGate() {
+    if (typeof window === 'undefined' || typeof document === 'undefined')
+        return;
+    if (!config.apiKey || !config.authDomain || !config.projectId || !config.appId) {
+        // No firebase config baked in. Likely a local `pnpm bundle` without
+        // PUBLIC_FIREBASE_* exported (CI deploys always set them). Skip the
+        // overlay rather than render an unrecoverable dialog so devs aren't
+        // locked out of their own local builds.
+        console.warn('[nowline-embed-dev-auth-gate] Missing PUBLIC_FIREBASE_* env vars at build time; gate is disabled. Configure them in .github/workflows/embed-cdn.yml or your local environment to enable.');
+        return;
+    }
+    // Create the overlay up front so it covers content while Firebase
+    // initialises; subsequent renders call getOrCreateOverlay() again
+    // to find the same element.
+    getOrCreateOverlay();
+    app ??= initializeApp(config);
+    auth ??= getAuth(app);
+    const provider = new GoogleAuthProvider();
+    const handleSignIn = async () => {
+        try {
+            await signInWithPopup(auth, provider);
+        }
+        catch (err) {
+            console.error('[nowline-embed-dev-auth-gate] Sign-in failed:', err);
+        }
+    };
+    const handleSignOut = async () => {
+        try {
+            await signOut(auth);
+        }
+        catch (err) {
+            console.error('[nowline-embed-dev-auth-gate] Sign-out failed:', err);
+        }
+    };
+    onAuthStateChanged(auth, (user) => {
+        if (!user) {
+            renderSignIn(getOrCreateOverlay(), handleSignIn);
+            return;
+        }
+        if (!isAllowlisted(user.email)) {
+            renderDenied(getOrCreateOverlay(), user.email ?? 'unknown', handleSignOut);
+            return;
+        }
+        removeOverlay();
+    });
+}
+//# sourceMappingURL=firebase-auth.client.js.map

package/dist/auth/firebase-auth.client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firebase-auth.client.js","sourceRoot":"","sources":["../../src/auth/firebase-auth.client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAoB,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAEH,kBAAkB,EAClB,OAAO,EACP,kBAAkB,EAClB,eAAe,EACf,OAAO,GAEV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAU/C,MAAM,MAAM,GAAG;IACX,MAAM,EAAE,OAAO,4BAA4B,KAAK,WAAW,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,EAAE;IAC/F,UAAU,EACN,OAAO,gCAAgC,KAAK,WAAW;QACnD,CAAC,CAAC,gCAAgC;QAClC,CAAC,CAAC,EAAE;IACZ,SAAS,EACL,OAAO,+BAA+B,KAAK,WAAW;QAClD,CAAC,CAAC,+BAA+B;QACjC,CAAC,CAAC,EAAE;IACZ,KAAK,EAAE,OAAO,2BAA2B,KAAK,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE;CAC/F,CAAC;AAEF,MAAM,UAAU,GAAG,gCAAgC,CAAC;AAEpD,IAAI,GAAG,GAAuB,IAAI,CAAC;AACnC,IAAI,IAAI,GAAgB,IAAI,CAAC;AAE7B,SAAS,kBAAkB;IACvB,IAAI,OAAO,GAAG,QAAQ,CAAC,cAAc,CAAC,UAAU,CAA0B,CAAC;IAC3E,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,OAAO,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,GAAG,UAAU,CAAC;IACxB,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvC,OAAO,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC3C,OAAO,CAAC,YAAY,CAAC,YAAY,EAAE,0BAA0B,CAAC,CAAC;IAC/D,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG;QACpB,iBAAiB;QACjB,UAAU;QACV,qBAAqB;QACrB,2BAA2B;QAC3B,gBAAgB;QAChB,eAAe;QACf,qBAAqB;QACrB,yBAAyB;QACzB,iBAAiB;QACjB,+DAA+D;KAClE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACZ,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,aAAa;IAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACpD,OAAO,EAAE,MAAM,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,YAAY,CAAC,OAAuB,EAAE,OAAmB;IAC9D,OAAO,CAAC,SAAS,GAAG;;;;;;;KAOnB,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAoB,+BAA+B,CAAC,CAAC;IACtF,GAAG,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CAAC,OAAuB,EAAE,KAAa,EAAE,SAAqB;IAC/E,OAAO,CAAC,SAAS,GAAG;;;;6DAIqC,UAAU,CAAC,KAAK,CAAC;;;KAGzE,CAAC;IACF,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,CAAoB,gCAAgC,CAAC,CAAC;IACvF,GAAG,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC7B,OAAO,KAAK;SACP,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC5B,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO;IAC7E,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7E,oEAAoE;QACpE,oEAAoE;QACpE,oEAAoE;QACpE,wCAAwC;QACxC,OAAO,CAAC,IAAI,CACR,0LAA0L,CAC7L,CAAC;QACF,OAAO;IACX,CAAC;IAED,kEAAkE;IAClE,kEAAkE;IAClE,4BAA4B;IAC5B,kBAAkB,EAAE,CAAC;IAErB,GAAG,KAAK,aAAa,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;IAEtB,MAAM,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAE1C,MAAM,YAAY,GAAG,KAAK,IAAmB,EAAE;QAC3C,IAAI,CAAC;YACD,MAAM,eAAe,CAAC,IAAY,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;QACxE,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,IAAmB,EAAE;QAC5C,IAAI,CAAC;YACD,MAAM,OAAO,CAAC,IAAY,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,gDAAgD,EAAE,GAAG,CAAC,CAAC;QACzE,CAAC;IACL,CAAC,CAAC;IAEF,kBAAkB,CAAC,IAAY,EAAE,CAAC,IAAiB,EAAE,EAAE;QACnD,IAAI,CAAC,IAAI,EAAE,CAAC;YACR,YAAY,CAAC,kBAAkB,EAAE,EAAE,YAAY,CAAC,CAAC;YACjD,OAAO;QACX,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,YAAY,CAAC,kBAAkB,EAAE,EAAE,IAAI,CAAC,KAAK,IAAI,SAAS,EAAE,aAAa,CAAC,CAAC;YAC3E,OAAO;QACX,CAAC;QACD,aAAa,EAAE,CAAC;IACpB,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/index.d.ts

@@ -2,6 +2,17 @@ import { type AutoScanInputs, type AutoScanResult } from './auto-scan.js';
 import { type EmbedParseResult, EmbedRenderError, type EmbedRenderOptions } from './pipeline.js';
 import { type EmbedTheme } from './theme.js';
 export { type AutoScanResult, type EmbedParseResult, EmbedRenderError, type EmbedTheme };
+/**
+ * Bundle provenance, mirroring the legal-comment banner that
+ * `scripts/bundle.mjs` injects at the top of every artifact:
+ * `@nowline/embed <version> sha=<short-sha> built=<iso-utc>`.
+ *
+ * Exposed on the IIFE global as `nowline.version` / `nowline.sha` so
+ * pages and bug reports can identify the exact build without scraping
+ * the comment banner.
+ */
+export declare const version: string;
+export declare const sha: string;
 export interface InitializeOptions {
     /** `light`, `dark`, or `auto` (read once via `prefers-color-scheme`). */
     theme?: EmbedTheme;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAEH,KAAK,cAAc,EACnB,KAAK,cAAc,EAEtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEH,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,KAAK,kBAAkB,EAG1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,UAAU,EAAsC,MAAM,YAAY,CAAC;AAEjF,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,CAAC;AAIzF,MAAM,WAAW,iBAAiB;IAC9B,yEAAyE;IACzE,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2FAA2F;IAC3F,KAAK,CAAC,EAAE,IAAI,CAAC;CAChB;AAuBD,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,IAAI,CAchE;AAYD;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,CAM9F;AAED;;;;;GAKG;AACH,wBAAsB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAErE;AAED;;;GAGG;AACH,wBAAsB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAUvF;AAED,4DAA4D;AAC5D,eAAO,MAAM,GAAG,aAAO,CAAC;AAgCxB,wBAAgB,eAAe,IAAI,IAAI,CAKtC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EAEH,KAAK,cAAc,EACnB,KAAK,cAAc,EAEtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEH,KAAK,gBAAgB,EACrB,gBAAgB,EAChB,KAAK,kBAAkB,EAG1B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,KAAK,UAAU,EAAsC,MAAM,YAAY,CAAC;AAEjF,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,gBAAgB,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,CAAC;AAEzF;;;;;;;;GAQG;AACH,eAAO,MAAM,OAAO,EAAE,MAAsB,CAAC;AAC7C,eAAO,MAAM,GAAG,EAAE,MAAkB,CAAC;AAIrC,MAAM,WAAW,iBAAiB;IAC9B,yEAAyE;IACzE,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qFAAqF;IACrF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2FAA2F;IAC3F,KAAK,CAAC,EAAE,IAAI,CAAC;CAChB;AAuBD,wBAAgB,UAAU,CAAC,OAAO,GAAE,iBAAsB,GAAG,IAAI,CAchE;AAYD;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC,CAM9F;AAED;;;;;GAKG;AACH,wBAAsB,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAErE;AAED;;;GAGG;AACH,wBAAsB,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAUvF;AAED,4DAA4D;AAC5D,eAAO,MAAM,GAAG,aAAO,CAAC;AAkDxB,wBAAgB,eAAe,IAAI,IAAI,CAKtC"}

package/dist/index.js

@@ -4,10 +4,22 @@
 //
 // The IIFE bundle exposes everything below as `window.nowline.*`. ESM
 // consumers import named exports from the package root.
+import { EMBED_SHA, EMBED_VERSION } from './auth/env.js';
 import { __resetAutoScanForTests, runAutoScan, } from './auto-scan.js';
 import { __resetEmbedPipelineForTests, EmbedRenderError, parseSource, renderSource, } from './pipeline.js';
 import { effectiveTheme, resolveSystemTheme } from './theme.js';
 export { EmbedRenderError };
+/**
+ * Bundle provenance, mirroring the legal-comment banner that
+ * `scripts/bundle.mjs` injects at the top of every artifact:
+ * `@nowline/embed <version> sha=<short-sha> built=<iso-utc>`.
+ *
+ * Exposed on the IIFE global as `nowline.version` / `nowline.sha` so
+ * pages and bug reports can identify the exact build without scraping
+ * the comment banner.
+ */
+export const version = EMBED_VERSION;
+export const sha = EMBED_SHA;
 const DEFAULT_SELECTOR = 'pre code.language-nowline, code.language-nowline';
 const initialConfig = {
     theme: 'auto',
@@ -90,6 +102,22 @@ export const run = init;
 // the auto-scan branch.
 if (typeof document !== 'undefined' && !autoStartScheduled) {
     autoStartScheduled = true;
+    // Dev-only Firebase Auth gate (embed.nowline.dev). The condition
+    // reads `__NOWLINE_EMBED_ENV__` directly so esbuild's `define`
+    // substitutes a literal string at minify time — the prod bundle
+    // sees `if ("prod" === "dev")` → `if (false)` and DCEs the dynamic
+    // import that pulls in `firebase/app` + `firebase/auth`.
+    // `check-size.mjs` asserts no `firebase` literal survives in the
+    // prod IIFE as a belt-and-suspenders check.
+    if (typeof __NOWLINE_EMBED_ENV__ !== 'undefined' && __NOWLINE_EMBED_ENV__ === 'dev') {
+        void import('./auth/firebase-auth.client.js')
+            .then(({ startDevAuthGate }) => {
+            startDevAuthGate();
+        })
+            .catch((err) => {
+            console.error('[nowline] dev auth gate failed to load:', err);
+        });
+    }
     const start = () => {
         if (!config.startOnLoad)
             return;

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,uEAAuE;AACvE,0CAA0C;AAC1C,EAAE;AACF,sEAAsE;AACtE,wDAAwD;AAExD,OAAO,EACH,uBAAuB,EAGvB,WAAW,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACH,4BAA4B,EAE5B,gBAAgB,EAEhB,WAAW,EACX,YAAY,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAmB,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEjF,OAAO,EAA8C,gBAAgB,EAAmB,CAAC;AAEzF,MAAM,gBAAgB,GAAG,kDAAkD,CAAC;AAqC5E,MAAM,aAAa,GAAmB;IAClC,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,gBAAgB;IAC1B,WAAW,EAAE,kBAAkB,EAAE;CACpC,CAAC;AAEF,IAAI,MAAM,GAAmB,EAAE,GAAG,aAAa,EAAE,CAAC;AAClD,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACtD,MAAM,GAAG;QACL,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW;QACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAC7C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;QACpC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;QACpC,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,+BAA+B;QAC/B,WAAW,EAAE,kBAAkB,EAAE;KACpC,CAAC;AACN,CAAC;AAED,4EAA4E;AAC5E,SAAS,uBAAuB;IAC5B,OAAO;QACH,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC;QACvD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;KACtB,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,UAA8B,EAAE;IACzE,MAAM,MAAM,GAAuB;QAC/B,GAAG,uBAAuB,EAAE;QAC5B,GAAG,OAAO;KACb,CAAC;IACF,OAAO,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,MAAc;IACtC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,SAAmC;IAC1D,MAAM,MAAM,GAAmB;QAC3B,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAChD,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,uBAAuB,EAAE,CAAC,KAAK;QAC1D,MAAM,EAAE,SAAS,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM;QAC1C,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK;QACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK;QACvC,QAAQ,EAAE,SAAS,EAAE,QAAQ;KAChC,CAAC;IACF,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC;AAExB,sEAAsE;AACtE,wEAAwE;AACxE,oDAAoD;AACpD,uEAAuE;AACvE,cAAc;AACd,EAAE;AACF,gEAAgE;AAChE,qEAAqE;AACrE,wBAAwB;AACxB,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACzD,kBAAkB,GAAG,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAS,EAAE;QACrB,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO;QAChC,kEAAkE;QAClE,wBAAwB;QACxB,KAAK,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACJ,6DAA6D;QAC7D,6DAA6D;QAC7D,kCAAkC;QAClC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,uEAAuE;AACvE,qCAAqC;AACrC,MAAM,UAAU,eAAe;IAC3B,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAAE,CAAC;IACjE,kBAAkB,GAAG,KAAK,CAAC;IAC3B,4BAA4B,EAAE,CAAC;IAC/B,uBAAuB,EAAE,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,6DAA6D;AAC7D,uEAAuE;AACvE,0CAA0C;AAC1C,EAAE;AACF,sEAAsE;AACtE,wDAAwD;AAExD,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAYzD,OAAO,EACH,uBAAuB,EAGvB,WAAW,GACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACH,4BAA4B,EAE5B,gBAAgB,EAEhB,WAAW,EACX,YAAY,GACf,MAAM,eAAe,CAAC;AACvB,OAAO,EAAmB,cAAc,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEjF,OAAO,EAA8C,gBAAgB,EAAmB,CAAC;AAEzF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,OAAO,GAAW,aAAa,CAAC;AAC7C,MAAM,CAAC,MAAM,GAAG,GAAW,SAAS,CAAC;AAErC,MAAM,gBAAgB,GAAG,kDAAkD,CAAC;AAqC5E,MAAM,aAAa,GAAmB;IAClC,KAAK,EAAE,MAAM;IACb,WAAW,EAAE,IAAI;IACjB,QAAQ,EAAE,gBAAgB;IAC1B,WAAW,EAAE,kBAAkB,EAAE;CACpC,CAAC;AAEF,IAAI,MAAM,GAAmB,EAAE,GAAG,aAAa,EAAE,CAAC;AAClD,IAAI,kBAAkB,GAAG,KAAK,CAAC;AAE/B,MAAM,UAAU,UAAU,CAAC,UAA6B,EAAE;IACtD,MAAM,GAAG;QACL,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;QACpC,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW;QACtD,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAC7C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM;QACvC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;QACpC,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK;QACpC,kEAAkE;QAClE,gEAAgE;QAChE,kEAAkE;QAClE,+BAA+B;QAC/B,WAAW,EAAE,kBAAkB,EAAE;KACpC,CAAC;AACN,CAAC;AAED,4EAA4E;AAC5E,SAAS,uBAAuB;IAC5B,OAAO;QACH,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC;QACvD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,KAAK,EAAE,MAAM,CAAC,KAAK;KACtB,CAAC;AACN,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,MAAc,EAAE,UAA8B,EAAE;IACzE,MAAM,MAAM,GAAuB;QAC/B,GAAG,uBAAuB,EAAE;QAC5B,GAAG,OAAO;KACb,CAAC;IACF,OAAO,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,MAAc;IACtC,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,SAAmC;IAC1D,MAAM,MAAM,GAAmB;QAC3B,QAAQ,EAAE,SAAS,EAAE,QAAQ,IAAI,MAAM,CAAC,QAAQ;QAChD,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,uBAAuB,EAAE,CAAC,KAAK;QAC1D,MAAM,EAAE,SAAS,EAAE,MAAM,IAAI,MAAM,CAAC,MAAM;QAC1C,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK;QACvC,KAAK,EAAE,SAAS,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK;QACvC,QAAQ,EAAE,SAAS,EAAE,QAAQ;KAChC,CAAC;IACF,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC;AAExB,sEAAsE;AACtE,wEAAwE;AACxE,oDAAoD;AACpD,uEAAuE;AACvE,cAAc;AACd,EAAE;AACF,gEAAgE;AAChE,qEAAqE;AACrE,wBAAwB;AACxB,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACzD,kBAAkB,GAAG,IAAI,CAAC;IAE1B,iEAAiE;IACjE,+DAA+D;IAC/D,gEAAgE;IAChE,mEAAmE;IACnE,yDAAyD;IACzD,iEAAiE;IACjE,4CAA4C;IAC5C,IAAI,OAAO,qBAAqB,KAAK,WAAW,IAAI,qBAAqB,KAAK,KAAK,EAAE,CAAC;QAClF,KAAK,MAAM,CAAC,gCAAgC,CAAC;aACxC,IAAI,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,EAAE;YAC3B,gBAAgB,EAAE,CAAC;QACvB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACX,CAAC;IAED,MAAM,KAAK,GAAG,GAAS,EAAE;QACrB,IAAI,CAAC,MAAM,CAAC,WAAW;YAAE,OAAO;QAChC,kEAAkE;QAClE,wBAAwB;QACxB,KAAK,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;IACF,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACpC,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACJ,6DAA6D;QAC7D,6DAA6D;QAC7D,kCAAkC;QAClC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;AACL,CAAC;AAED,uEAAuE;AACvE,uEAAuE;AACvE,qCAAqC;AACrC,MAAM,UAAU,eAAe;IAC3B,MAAM,GAAG,EAAE,GAAG,aAAa,EAAE,WAAW,EAAE,kBAAkB,EAAE,EAAE,CAAC;IACjE,kBAAkB,GAAG,KAAK,CAAC;IAC3B,4BAA4B,EAAE,CAAC;IAC/B,uBAAuB,EAAE,CAAC;AAC9B,CAAC"}