@pawabase/client 0.0.0-stage → 0.1.3

package/dist/cjs/util.js

@@ -0,0 +1,115 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isRecord = isRecord;
+exports.sleep = sleep;
+exports.backoff = backoff;
+exports.anySignal = anySignal;
+exports.encodePath = encodePath;
+exports.queryString = queryString;
+exports.trimSlash = trimSlash;
+exports.randomId = randomId;
+exports.nowSeconds = nowSeconds;
+exports.decodeJwt = decodeJwt;
+exports.isSecretKey = isSecretKey;
+const errors_js_1 = require("./errors.js");
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Sleep for `ms`, rejecting early with {@link AbortError} when `signal` fires. */
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted)
+            return reject(new errors_js_1.AbortError(undefined, { cause: signal.reason }));
+        const timer = setTimeout(() => {
+            signal?.removeEventListener("abort", onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(new errors_js_1.AbortError(undefined, { cause: signal?.reason }));
+        };
+        signal?.addEventListener("abort", onAbort, { once: true });
+    });
+}
+/** Exponential backoff with full jitter: a random delay in `[0, min(max, base * factor^attempt)]`. */
+function backoff(attempt, options, random = Math.random) {
+    const ceiling = Math.min(options.maxDelayMs, options.baseDelayMs * (options.factor ?? 2) ** attempt);
+    return Math.floor(random() * ceiling);
+}
+/** One signal that fires when any of `signals` fires. Uses the platform's `AbortSignal.any` when present. */
+function anySignal(signals) {
+    const real = signals.filter((s) => !!s);
+    if (real.length === 0)
+        return undefined;
+    if (real.length === 1)
+        return real[0];
+    const native = AbortSignal.any;
+    if (native)
+        return native(real);
+    const controller = new AbortController();
+    for (const signal of real) {
+        if (signal.aborted) {
+            controller.abort(signal.reason);
+            break;
+        }
+        signal.addEventListener("abort", () => controller.abort(signal.reason), { once: true });
+    }
+    return controller.signal;
+}
+/** `a/b c/d` to `a/b%20c/d`: encode each path segment, keep the slashes. */
+function encodePath(path) {
+    return path
+        .split("/")
+        .map((segment) => encodeURIComponent(segment))
+        .join("/");
+}
+/** A query string from a flat record. Drops `undefined`/`null`; arrays repeat the key. */
+function queryString(params) {
+    if (!params)
+        return "";
+    const search = new URLSearchParams();
+    for (const [key, value] of Object.entries(params)) {
+        const items = Array.isArray(value) ? value : [value];
+        for (const item of items) {
+            if (item === undefined || item === null)
+                continue;
+            search.append(key, item instanceof Date ? item.toISOString() : String(item));
+        }
+    }
+    const text = search.toString();
+    return text ? `?${text}` : "";
+}
+function trimSlash(url) {
+    return url.replace(/\/+$/, "");
+}
+function randomId() {
+    const c = globalThis.crypto;
+    if (c?.randomUUID)
+        return c.randomUUID();
+    return `${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 10)}`;
+}
+function nowSeconds() {
+    return Math.floor(Date.now() / 1000);
+}
+/** Decode a JWT payload without verifying it (the server verifies). Returns `null` for malformed tokens. */
+function decodeJwt(token) {
+    const part = token.split(".")[1];
+    if (!part)
+        return null;
+    try {
+        const base64 = part.replace(/-/g, "+").replace(/_/g, "/").padEnd(Math.ceil(part.length / 4) * 4, "=");
+        const text = typeof atob === "function"
+            ? decodeURIComponent(Array.from(atob(base64), (ch) => "%" + ch.charCodeAt(0).toString(16).padStart(2, "0")).join(""))
+            : globalThis.Buffer.from(base64, "base64").toString("utf8");
+        const value = JSON.parse(text);
+        return isRecord(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Whether a key is a secret key (`pb_sk_…`, or `sk_…` in older docs). */
+function isSecretKey(apiKey) {
+    return /^(pb_)?sk_/.test(apiKey);
+}
+//# sourceMappingURL=util.js.map

package/dist/cjs/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../src/util.ts"],"names":[],"mappings":";;AAIA,4BAEC;AAGD,sBAaC;AAGD,0BAOC;AAGD,8BAeC;AAGD,gCAKC;AAKD,kCAYC;AAED,8BAEC;AAED,4BAIC;AAED,gCAEC;AAGD,8BAgBC;AAGD,kCAEC;AAjHD,2CAAyC;AAIzC,SAAgB,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,mFAAmF;AACnF,SAAgB,KAAK,CAAC,EAAU,EAAE,MAA2B;IAC3D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,MAAM,CAAC,IAAI,sBAAU,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,sBAAU,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sGAAsG;AACtG,SAAgB,OAAO,CACrB,OAAe,EACf,OAAqE,EACrE,SAAuB,IAAI,CAAC,MAAM;IAElC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;IACrG,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC;AACxC,CAAC;AAED,6GAA6G;AAC7G,SAAgB,SAAS,CAAC,OAA8C;IACtE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,MAAM,GAAI,WAAsE,CAAC,GAAG,CAAC;IAC3F,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,KAAK,MAAM,MAAM,IAAI,IAAI,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChC,MAAM;QACR,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC;AAC3B,CAAC;AAED,4EAA4E;AAC5E,SAAgB,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;SAC7C,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAID,0FAA0F;AAC1F,SAAgB,WAAW,CAAC,MAA6D;IACvF,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;gBAAE,SAAS;YAClD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;IAC/B,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAChC,CAAC;AAED,SAAgB,SAAS,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAgB,QAAQ;IACtB,MAAM,CAAC,GAAI,UAAkC,CAAC,MAAM,CAAC;IACrD,IAAI,CAAC,EAAE,UAAU;QAAE,OAAO,CAAC,CAAC,UAAU,EAAE,CAAC;IACzC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACjF,CAAC;AAED,SAAgB,UAAU;IACxB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,4GAA4G;AAC5G,SAAgB,SAAS,CAAC,KAAa;IACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QACtG,MAAM,IAAI,GACR,OAAO,IAAI,KAAK,UAAU;YACxB,CAAC,CAAC,kBAAkB,CAChB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAChG;YACH,CAAC,CAAE,UAAqG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC5J,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;QAC1C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,SAAgB,WAAW,CAAC,MAAc;IACxC,OAAO,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC"}

package/dist/cjs/version.d.ts

@@ -0,0 +1,2 @@
+export declare const VERSION = "0.1.3";
+//# sourceMappingURL=version.d.ts.map

package/dist/cjs/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC"}

package/dist/cjs/version.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VERSION = void 0;
+exports.VERSION = "0.1.3";
+//# sourceMappingURL=version.js.map

package/dist/cjs/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":";;;AAAa,QAAA,OAAO,GAAG,OAAO,CAAC"}

package/dist/esm/admin.d.ts

@@ -0,0 +1,187 @@
+/**
+ * Administer the environment's users, organizations and roles, with the environment's secret key (`pb_sk_…`).
+ *
+ * These are the people who sign in to *your* application, not the project's own team. Every call is scoped to one environment;
+ * a user of one environment is never visible in another.
+ *
+ * ```ts
+ * import { createClient } from "@pawabase/client";
+ * import { admin } from "@pawabase/client/admin";
+ *
+ * const a = admin(createClient({ url, apiKey: "pb_sk_…", environment: "production" }));
+ * await a.users.create({ email: "ada@example.com", password: "…", roles: ["editor"] });
+ * await a.users.update(userId, { disabled: true });
+ * await a.orgs.addMember("acme", { email: "ada@example.com", role: "admin" });
+ * ```
+ */
+import type { PawabaseClient } from "./client.js";
+import type { HttpClient } from "./http.js";
+import { Service, type Api, type Body } from "./manage/base.js";
+declare class AdminService extends Service {
+    protected path(suffix?: string): string;
+}
+export interface NewUser {
+    email: string;
+    password?: string;
+    username?: string;
+    name?: string;
+    /** Default `true`: an operator vouches for the address. */
+    emailVerified?: boolean;
+    /** Visible to the user and editable by them. */
+    userMetadata?: Body;
+    /** Visible to your server only. */
+    appMetadata?: Body;
+    roles?: string[];
+}
+export interface UserChanges {
+    name?: string;
+    emailVerified?: boolean;
+    /** Blocks sign-in and ends the user's sessions. */
+    disabled?: boolean;
+    password?: string;
+    userMetadata?: Body;
+    appMetadata?: Body;
+    /** Replaces the user's roles. */
+    roles?: string[];
+    /** Clears a lockout after failed sign-ins. */
+    unlock?: boolean;
+}
+export declare class Users extends AdminService {
+    /** `search` matches email, username and name. `status`: `disabled`, `unverified`, `locked`, `mfa`, `no_mfa`. */
+    search(options?: {
+        search?: string;
+        status?: string;
+        limit?: number;
+        offset?: number;
+    }): Promise<Api>;
+    getUser(userId: string): Promise<Api>;
+    /** Create an account without the sign-up restrictions (allow-lists; the password policy still applies). */
+    create(user: NewUser): Promise<Api>;
+    update(userId: string, changes: UserChanges): Promise<Api>;
+    deleteUser(userId: string): Promise<Api>;
+    /** The user's recent sign-ins and security events. */
+    history(userId: string): Promise<Api>;
+    /** Remove the user's second factors, so they can sign in with a password alone and enrol again. */
+    resetMfa(userId: string): Promise<Api>;
+    /** Give the user permissions directly, beyond their roles' (`posts:write`, `billing:*`). */
+    grant(userId: string, permissions: string[]): Promise<Api>;
+    revoke(userId: string, permissions: string[]): Promise<Api>;
+    /** Sign the user out everywhere. */
+    revokeSessions(userId: string): Promise<Api>;
+    revokeSession(userId: string, sessionId: string): Promise<Api>;
+    devices(userId: string): Promise<Api>;
+    forgetDevice(userId: string, deviceId: string): Promise<Api>;
+    /** The user's own API keys (never the secrets). */
+    apiKeys(userId: string): Promise<Api>;
+}
+export declare class Roles extends AdminService {
+    /** Roles with their permissions. */
+    list(): Promise<Api>;
+    /** Create or replace a role. Names are lowercase (`editor`, `org:billing`); permissions are `resource:action` patterns with `*` wildcards. */
+    define(name: string, permissions: string[], options?: {
+        description?: string;
+    }): Promise<Api>;
+    remove(name: string): Promise<Api>;
+}
+/** Organizations (tenants) and their members. A member's role is `owner`, `admin` or `member`. */
+export declare class Orgs extends AdminService {
+    list(): Promise<Api>;
+    getOrg(slug: string): Promise<Api>;
+    create(slug: string, name: string, options?: {
+        ownerEmail?: string;
+        metadata?: Body;
+    }): Promise<Api>;
+    update(slug: string, changes: {
+        name?: string;
+        metadata?: Body;
+    }): Promise<Api>;
+    remove(slug: string): Promise<Api>;
+    /** Add an existing user straight in. */
+    addMember(slug: string, member: {
+        email: string;
+        role?: string;
+    }): Promise<Api>;
+    setMemberRole(slug: string, userId: string, role: string): Promise<Api>;
+    removeMember(slug: string, userId: string): Promise<Api>;
+    /** Mail an invitation; `redirectTo` must be one of the environment's allowed redirect URLs. */
+    invite(slug: string, invitation: {
+        email: string;
+        role?: string;
+        redirectTo?: string;
+    }): Promise<Api>;
+}
+export declare class Invitations extends AdminService {
+    /** Pending and past invitations across organizations. */
+    list(): Promise<Api>;
+    resend(invitationId: string, options?: {
+        redirectTo?: string;
+    }): Promise<Api>;
+    revoke(invitationId: string): Promise<Api>;
+}
+export declare class Sessions extends AdminService {
+    /** Active sessions across users. */
+    list(options?: {
+        limit?: number;
+    }): Promise<Api>;
+    /** End one session (all its refresh tokens). */
+    revoke(family: string): Promise<Api>;
+}
+/** API keys users made for themselves. */
+export declare class ApiKeys extends AdminService {
+    list(options?: {
+        limit?: number;
+    }): Promise<Api>;
+    revoke(keyId: string): Promise<Api>;
+}
+export declare class Devices extends AdminService {
+    /** Recent devices people signed in from. */
+    list(options?: {
+        limit?: number;
+    }): Promise<Api>;
+}
+/** Events, statistics, identity backup and the hosted pages. */
+export declare class Insight extends AdminService {
+    /** Authentication events (sign-ins, sign-ups, resets, MFA…). `failed` for failures only. */
+    events(options?: {
+        kind?: string;
+        failed?: boolean;
+        limit?: number;
+    }): Promise<Api>;
+    /** Counts of users, sign-ins, MFA use and failures. */
+    stats(): Promise<Api>;
+    /** Every identity (users, organizations, roles, factors) as a document. */
+    backup(): Promise<Api>;
+    /** Apply the `identities` of a backup. `dryRun` reports what would change. */
+    restore(identities: Body, options?: {
+        replace?: boolean;
+        dryRun?: boolean;
+    }): Promise<Api>;
+    /** The HTML a hosted sign-in page is served as for the branding being edited (the saved branding when omitted). */
+    /** The claims a token profile would put in a token for this user (and organization), without issuing one. */
+    previewTokenProfile(profile: Body, userId: string, options?: {
+        org?: string;
+    }): Promise<Api>;
+    hostedSource(page: string, options?: {
+        branding?: Body;
+        form?: Body;
+    }): Promise<Api>;
+}
+export declare class Admin {
+    private readonly http;
+    readonly environment: string;
+    readonly users: Users;
+    readonly roles: Roles;
+    readonly orgs: Orgs;
+    readonly invitations: Invitations;
+    readonly sessions: Sessions;
+    readonly apiKeys: ApiKeys;
+    readonly devices: Devices;
+    readonly insight: Insight;
+    constructor(http: HttpClient, environment: string);
+    /** The same services for another environment the key may manage. */
+    withEnvironment(name: string): Admin;
+}
+/** User administration for the client's environment (or `environment`). Needs a secret key. */
+export declare function admin(client: PawabaseClient<any>, environment?: string): Admin;
+export {};
+//# sourceMappingURL=admin.d.ts.map

package/dist/esm/admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/admin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAO,KAAK,GAAG,EAAE,KAAK,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAGrE,cAAM,YAAa,SAAQ,OAAO;cACb,IAAI,CAAC,MAAM,SAAK,GAAG,MAAM;CAG7C;AAED,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2DAA2D;IAC3D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gDAAgD;IAChD,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB,mCAAmC;IACnC,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,IAAI,CAAC;IACpB,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,qBAAa,KAAM,SAAQ,YAAY;IACrC,gHAAgH;IAChH,MAAM,CAAC,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIzG,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIrC,2GAA2G;IAC3G,MAAM,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAanC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAa1D,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIxC,sDAAsD;IACtD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIrC,mGAAmG;IACnG,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAItC,4FAA4F;IAC5F,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAI1D,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAI3D,oCAAoC;IACpC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAI5C,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAI9D,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIrC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAI5D,mDAAmD;IACnD,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAGtC;AAED,qBAAa,KAAM,SAAQ,YAAY;IACrC,oCAAoC;IACpC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAIpB,8IAA8I;IAC9I,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,OAAO,GAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIjG,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAGnC;AAED,kGAAkG;AAClG,qBAAa,IAAK,SAAQ,YAAY;IACpC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAIpB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIlC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,IAAI,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIxG,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAI/E,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIlC,wCAAwC;IACxC,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;IAI/E,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIvE,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAIxD,+FAA+F;IAC/F,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,GAAG,CAAC;CAGtG;AAED,qBAAa,WAAY,SAAQ,YAAY;IAC3C,yDAAyD;IACzD,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC;IAIpB,MAAM,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIjF,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAG3C;AAED,qBAAa,QAAS,SAAQ,YAAY;IACxC,oCAAoC;IACpC,IAAI,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIpD,gDAAgD;IAChD,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAGrC;AAED,0CAA0C;AAC1C,qBAAa,OAAQ,SAAQ,YAAY;IACvC,IAAI,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIpD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAGpC;AAED,qBAAa,OAAQ,SAAQ,YAAY;IACvC,4CAA4C;IAC5C,IAAI,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;CAGrD;AAED,gEAAgE;AAChE,qBAAa,OAAQ,SAAQ,YAAY;IACvC,4FAA4F;IAC5F,MAAM,CAAC,OAAO,GAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIvF,uDAAuD;IACvD,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC;IAIrB,2EAA2E;IAC3E,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC;IAItB,8EAA8E;IAC9E,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAI9F,mHAAmH;IACnH,6GAA6G;IAC7G,mBAAmB,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,GAAG,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;IAIhG,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,QAAQ,CAAC,EAAE,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,IAAI,CAAA;KAAO,GAAG,OAAO,CAAC,GAAG,CAAC;CAGzF;AAED,qBAAa,KAAK;IAWd,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM;IAX9B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;gBAGP,IAAI,EAAE,UAAU,EACxB,WAAW,EAAE,MAAM;IAY9B,oEAAoE;IACpE,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK;CAGrC;AAED,+FAA+F;AAC/F,wBAAgB,KAAK,CAAC,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,KAAK,CAK9E"}

package/dist/esm/admin.js

@@ -0,0 +1,222 @@
+import { ConfigError } from "./errors.js";
+import { Service, seg } from "./manage/base.js";
+import { isSecretKey } from "./util.js";
+class AdminService extends Service {
+    path(suffix = "") {
+        return `/platform/v1/envs/${encodeURIComponent(this.environment)}/auth${suffix}`;
+    }
+}
+export class Users extends AdminService {
+    /** `search` matches email, username and name. `status`: `disabled`, `unverified`, `locked`, `mfa`, `no_mfa`. */
+    search(options = {}) {
+        return this.get("/users", { limit: 50, offset: 0, ...options });
+    }
+    getUser(userId) {
+        return this.get(seg("users", userId));
+    }
+    /** Create an account without the sign-up restrictions (allow-lists; the password policy still applies). */
+    create(user) {
+        return this.post("/users", {
+            email: user.email,
+            password: user.password,
+            username: user.username,
+            name: user.name ?? "",
+            email_verified: user.emailVerified ?? true,
+            user_metadata: user.userMetadata ?? {},
+            app_metadata: user.appMetadata ?? {},
+            roles: user.roles ?? [],
+        });
+    }
+    update(userId, changes) {
+        return this.patch(seg("users", userId), {
+            name: changes.name,
+            email_verified: changes.emailVerified,
+            disabled: changes.disabled,
+            password: changes.password,
+            user_metadata: changes.userMetadata,
+            app_metadata: changes.appMetadata,
+            roles: changes.roles,
+            unlock: changes.unlock,
+        });
+    }
+    deleteUser(userId) {
+        return this.del(seg("users", userId));
+    }
+    /** The user's recent sign-ins and security events. */
+    history(userId) {
+        return this.get(seg("users", userId, "history"));
+    }
+    /** Remove the user's second factors, so they can sign in with a password alone and enrol again. */
+    resetMfa(userId) {
+        return this.post(seg("users", userId, "mfa", "reset"));
+    }
+    /** Give the user permissions directly, beyond their roles' (`posts:write`, `billing:*`). */
+    grant(userId, permissions) {
+        return this.post(seg("users", userId, "permissions"), { permissions });
+    }
+    revoke(userId, permissions) {
+        return this.del(seg("users", userId, "permissions"), undefined, { permissions });
+    }
+    /** Sign the user out everywhere. */
+    revokeSessions(userId) {
+        return this.post(seg("users", userId, "sessions", "revoke"));
+    }
+    revokeSession(userId, sessionId) {
+        return this.del(seg("users", userId, "sessions", sessionId));
+    }
+    devices(userId) {
+        return this.get(seg("users", userId, "devices"));
+    }
+    forgetDevice(userId, deviceId) {
+        return this.del(seg("users", userId, "devices", deviceId));
+    }
+    /** The user's own API keys (never the secrets). */
+    apiKeys(userId) {
+        return this.get(seg("users", userId, "api-keys"));
+    }
+}
+export class Roles extends AdminService {
+    /** Roles with their permissions. */
+    list() {
+        return this.get("/roles");
+    }
+    /** Create or replace a role. Names are lowercase (`editor`, `org:billing`); permissions are `resource:action` patterns with `*` wildcards. */
+    define(name, permissions, options = {}) {
+        return this.put("/roles", { name, description: options.description ?? "", permissions });
+    }
+    remove(name) {
+        return this.del(seg("roles", name));
+    }
+}
+/** Organizations (tenants) and their members. A member's role is `owner`, `admin` or `member`. */
+export class Orgs extends AdminService {
+    list() {
+        return this.get("/orgs");
+    }
+    getOrg(slug) {
+        return this.get(seg("orgs", slug));
+    }
+    create(slug, name, options = {}) {
+        return this.post("/orgs", { slug, name, owner_email: options.ownerEmail, metadata: options.metadata ?? {} });
+    }
+    update(slug, changes) {
+        return this.patch(seg("orgs", slug), changes);
+    }
+    remove(slug) {
+        return this.del(seg("orgs", slug));
+    }
+    /** Add an existing user straight in. */
+    addMember(slug, member) {
+        return this.post(seg("orgs", slug, "members"), { email: member.email, role: member.role ?? "member" });
+    }
+    setMemberRole(slug, userId, role) {
+        return this.patch(seg("orgs", slug, "members", userId), { role });
+    }
+    removeMember(slug, userId) {
+        return this.del(seg("orgs", slug, "members", userId));
+    }
+    /** Mail an invitation; `redirectTo` must be one of the environment's allowed redirect URLs. */
+    invite(slug, invitation) {
+        return this.post(seg("orgs", slug, "invitations"), { email: invitation.email, role: invitation.role ?? "member", redirect_to: invitation.redirectTo });
+    }
+}
+export class Invitations extends AdminService {
+    /** Pending and past invitations across organizations. */
+    list() {
+        return this.get("/invitations");
+    }
+    resend(invitationId, options = {}) {
+        return this.post(seg("invitations", invitationId, "resend"), options.redirectTo ? { redirect_to: options.redirectTo } : {});
+    }
+    revoke(invitationId) {
+        return this.del(seg("invitations", invitationId));
+    }
+}
+export class Sessions extends AdminService {
+    /** Active sessions across users. */
+    list(options = {}) {
+        return this.get("/sessions", options);
+    }
+    /** End one session (all its refresh tokens). */
+    revoke(family) {
+        return this.del(seg("sessions", family));
+    }
+}
+/** API keys users made for themselves. */
+export class ApiKeys extends AdminService {
+    list(options = {}) {
+        return this.get("/api-keys", options);
+    }
+    revoke(keyId) {
+        return this.del(seg("api-keys", keyId));
+    }
+}
+export class Devices extends AdminService {
+    /** Recent devices people signed in from. */
+    list(options = {}) {
+        return this.get("/devices", options);
+    }
+}
+/** Events, statistics, identity backup and the hosted pages. */
+export class Insight extends AdminService {
+    /** Authentication events (sign-ins, sign-ups, resets, MFA…). `failed` for failures only. */
+    events(options = {}) {
+        return this.get("/events", { kind: options.kind, failed: options.failed ? "true" : undefined, limit: options.limit ?? 100 });
+    }
+    /** Counts of users, sign-ins, MFA use and failures. */
+    stats() {
+        return this.get("/stats");
+    }
+    /** Every identity (users, organizations, roles, factors) as a document. */
+    backup() {
+        return this.get("/backup");
+    }
+    /** Apply the `identities` of a backup. `dryRun` reports what would change. */
+    restore(identities, options = {}) {
+        return this.post("/restore", { identities, replace: options.replace ?? false, dry_run: options.dryRun ?? false });
+    }
+    /** The HTML a hosted sign-in page is served as for the branding being edited (the saved branding when omitted). */
+    /** The claims a token profile would put in a token for this user (and organization), without issuing one. */
+    previewTokenProfile(profile, userId, options = {}) {
+        return this.post("/token-profiles/preview", { profile, user_id: userId, ...(options.org ? { org: options.org } : {}) });
+    }
+    hostedSource(page, options = {}) {
+        return this.post("/hosted-source", { page, branding: options.branding, form: options.form });
+    }
+}
+export class Admin {
+    http;
+    environment;
+    users;
+    roles;
+    orgs;
+    invitations;
+    sessions;
+    apiKeys;
+    devices;
+    insight;
+    constructor(http, environment) {
+        this.http = http;
+        this.environment = environment;
+        this.users = new Users(http, environment);
+        this.roles = new Roles(http, environment);
+        this.orgs = new Orgs(http, environment);
+        this.invitations = new Invitations(http, environment);
+        this.sessions = new Sessions(http, environment);
+        this.apiKeys = new ApiKeys(http, environment);
+        this.devices = new Devices(http, environment);
+        this.insight = new Insight(http, environment);
+    }
+    /** The same services for another environment the key may manage. */
+    withEnvironment(name) {
+        return new Admin(this.http, name);
+    }
+}
+/** User administration for the client's environment (or `environment`). Needs a secret key. */
+export function admin(client, environment) {
+    if (!isSecretKey(client.options.apiKey)) {
+        throw new ConfigError("User administration needs a secret key (pb_sk_…).");
+    }
+    return new Admin(client.http, environment ?? client.options.environment ?? "development");
+}
+//# sourceMappingURL=admin.js.map

package/dist/esm/admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin.js","sourceRoot":"","sources":["../../src/admin.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,OAAO,EAAE,GAAG,EAAuB,MAAM,kBAAkB,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC,MAAM,YAAa,SAAQ,OAAO;IACb,IAAI,CAAC,MAAM,GAAG,EAAE;QACjC,OAAO,qBAAqB,kBAAkB,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,MAAM,EAAE,CAAC;IACnF,CAAC;CACF;AA8BD,MAAM,OAAO,KAAM,SAAQ,YAAY;IACrC,gHAAgH;IAChH,MAAM,CAAC,UAAiF,EAAE;QACxF,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,2GAA2G;IAC3G,MAAM,CAAC,IAAa;QAClB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,EAAE;YACrB,cAAc,EAAE,IAAI,CAAC,aAAa,IAAI,IAAI;YAC1C,aAAa,EAAE,IAAI,CAAC,YAAY,IAAI,EAAE;YACtC,YAAY,EAAE,IAAI,CAAC,WAAW,IAAI,EAAE;YACpC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,EAAE;SACxB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,OAAoB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE;YACtC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,cAAc,EAAE,OAAO,CAAC,aAAa;YACrC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,OAAO,CAAC,YAAY;YACnC,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,UAAU,CAAC,MAAc;QACvB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,sDAAsD;IACtD,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,mGAAmG;IACnG,QAAQ,CAAC,MAAc;QACrB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,MAAc,EAAE,WAAqB;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,CAAC,MAAc,EAAE,WAAqB;QAC1C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,oCAAoC;IACpC,cAAc,CAAC,MAAc;QAC3B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,aAAa,CAAC,MAAc,EAAE,SAAiB;QAC7C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IAC/D,CAAC;IAED,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,YAAY,CAAC,MAAc,EAAE,QAAgB;QAC3C,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,mDAAmD;IACnD,OAAO,CAAC,MAAc;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,KAAM,SAAQ,YAAY;IACrC,oCAAoC;IACpC,IAAI;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,8IAA8I;IAC9I,MAAM,CAAC,IAAY,EAAE,WAAqB,EAAE,UAAoC,EAAE;QAChF,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC;CACF;AAED,kGAAkG;AAClG,MAAM,OAAO,IAAK,SAAQ,YAAY;IACpC,IAAI;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,IAAY,EAAE,UAAoD,EAAE;QACvF,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/G,CAAC;IAED,MAAM,CAAC,IAAY,EAAE,OAA2C;QAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,wCAAwC;IACxC,SAAS,CAAC,IAAY,EAAE,MAAwC;QAC9D,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,QAAQ,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,aAAa,CAAC,IAAY,EAAE,MAAc,EAAE,IAAY;QACtD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,MAAc;QACvC,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACxD,CAAC;IAED,+FAA+F;IAC/F,MAAM,CAAC,IAAY,EAAE,UAAiE;QACpF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,IAAI,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,UAAU,EAAE,CAAC,CAAC;IACzJ,CAAC;CACF;AAED,MAAM,OAAO,WAAY,SAAQ,YAAY;IAC3C,yDAAyD;IACzD,IAAI;QACF,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,YAAoB,EAAE,UAAmC,EAAE;QAChE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9H,CAAC;IAED,MAAM,CAAC,YAAoB;QACzB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,QAAS,SAAQ,YAAY;IACxC,oCAAoC;IACpC,IAAI,CAAC,UAA8B,EAAE;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,gDAAgD;IAChD,MAAM,CAAC,MAAc;QACnB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC;CACF;AAED,0CAA0C;AAC1C,MAAM,OAAO,OAAQ,SAAQ,YAAY;IACvC,IAAI,CAAC,UAA8B,EAAE;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,OAAQ,SAAQ,YAAY;IACvC,4CAA4C;IAC5C,IAAI,CAAC,UAA8B,EAAE;QACnC,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACvC,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,OAAO,OAAQ,SAAQ,YAAY;IACvC,4FAA4F;IAC5F,MAAM,CAAC,UAA+D,EAAE;QACtE,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;IAC/H,CAAC;IAED,uDAAuD;IACvD,KAAK;QACH,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5B,CAAC;IAED,2EAA2E;IAC3E,MAAM;QACJ,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;IAED,8EAA8E;IAC9E,OAAO,CAAC,UAAgB,EAAE,UAAmD,EAAE;QAC7E,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;IACpH,CAAC;IAED,mHAAmH;IACnH,6GAA6G;IAC7G,mBAAmB,CAAC,OAAa,EAAE,MAAc,EAAE,UAA4B,EAAE;QAC/E,OAAO,IAAI,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1H,CAAC;IAED,YAAY,CAAC,IAAY,EAAE,UAA4C,EAAE;QACvE,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/F,CAAC;CACF;AAED,MAAM,OAAO,KAAK;IAWG;IACR;IAXF,KAAK,CAAQ;IACb,KAAK,CAAQ;IACb,IAAI,CAAO;IACX,WAAW,CAAc;IACzB,QAAQ,CAAW;IACnB,OAAO,CAAU;IACjB,OAAO,CAAU;IACjB,OAAO,CAAU;IAE1B,YACmB,IAAgB,EACxB,WAAmB;QADX,SAAI,GAAJ,IAAI,CAAY;QACxB,gBAAW,GAAX,WAAW,CAAQ;QAE5B,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC1C,IAAI,CAAC,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,QAAQ,GAAG,IAAI,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,oEAAoE;IACpE,eAAe,CAAC,IAAY;QAC1B,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;CACF;AAED,+FAA+F;AAC/F,MAAM,UAAU,KAAK,CAAC,MAA2B,EAAE,WAAoB;IACrE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,WAAW,CAAC,mDAAmD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,IAAI,aAAa,CAAC,CAAC;AAC5F,CAAC"}