@plumile/backoffice-react 0.1.104 → 0.1.106

package/lib/esm/components/backoffice/tools/backofficeToolsForm.css.js

@@ -0,0 +1,7 @@
+/* empty css                                   */
+//#region src/components/backoffice/tools/backofficeToolsForm.css.ts
+var e = "txvbqb9ip txvbqbai7 txvbqbaog", t = "txvbqb9ip txvbqbdp7 txvbqbdpz", n = "txvbqb9ip txvbqbcp txvbqbdpp txvbqbajy txvbqbao7", r = "txvbqb9ip txvbqbai7 txvbqbaog", i = "txvbqb9iy txvbqbaop txvbqbc0y", a = "txvbqbp77 txvbqblyy txvbqb9ip txvbqbdoy";
+//#endregion
+export { t as actions, e as form, n as inputHeader, i as keyValueGrid, a as loadingState, r as outputStack };
+
+//# sourceMappingURL=backofficeToolsForm.css.js.map

package/lib/esm/components/backoffice/tools/backofficeToolsForm.css.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backofficeToolsForm.css.js","names":[],"sources":["../../../../../src/components/backoffice/tools/backofficeToolsForm.css.ts"],"sourcesContent":["import { sprinkles } from '@plumile/ui';\n\nexport const form = sprinkles({\n  display: 'flex',\n  flexDirection: 'column',\n  gap: 3,\n});\n\nexport const actions = sprinkles({\n  display: 'flex',\n  justifyContent: {\n    base: 'flex-end',\n    sm: 'stretch',\n  },\n});\n\nexport const inputHeader = sprinkles({\n  display: 'flex',\n  alignItems: 'center',\n  justifyContent: 'space-between',\n  flexWrap: 'wrap',\n  gap: 2,\n});\n\nexport const outputStack = sprinkles({\n  display: 'flex',\n  flexDirection: 'column',\n  gap: 3,\n});\n\nexport const keyValueGrid = sprinkles({\n  display: 'grid',\n  gap: 4,\n  gridTemplateColumns: 'autoFitMinmax220',\n});\n\nexport const loadingState = sprinkles({\n  display: 'flex',\n  justifyContent: 'center',\n  paddingY: 5,\n});\n"],"mappings":""}

package/lib/esm/components/backoffice/tools/backofficeToolsJsonForm.css.js

@@ -0,0 +1,7 @@
+/* empty css                                       */
+//#region src/components/backoffice/tools/backofficeToolsJsonForm.css.ts
+var e = "txvbqb9ip txvbqbai7 txvbqbaop", t = "txvbqb9ip txvbqbdp7 txvbqbdpz", n = "txvbqb9ip txvbqbcp txvbqbdpp txvbqbajy txvbqbao7";
+//#endregion
+export { t as actions, e as form, n as inputHeader };
+
+//# sourceMappingURL=backofficeToolsJsonForm.css.js.map

package/lib/esm/components/backoffice/tools/backofficeToolsJsonForm.css.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"backofficeToolsJsonForm.css.js","names":[],"sources":["../../../../../src/components/backoffice/tools/backofficeToolsJsonForm.css.ts"],"sourcesContent":["import { sprinkles } from '@plumile/ui';\n\nexport const form = sprinkles({\n  display: 'flex',\n  flexDirection: 'column',\n  gap: 4,\n});\n\nexport const actions = sprinkles({\n  display: 'flex',\n  justifyContent: {\n    base: 'flex-end',\n    sm: 'stretch',\n  },\n});\n\nexport const inputHeader = sprinkles({\n  display: 'flex',\n  alignItems: 'center',\n  justifyContent: 'space-between',\n  flexWrap: 'wrap',\n  gap: 2,\n});\n"],"mappings":""}

package/lib/esm/components/backoffice/tools/parseToolJson.js

@@ -0,0 +1,13 @@
+//#region src/components/backoffice/tools/parseToolJson.ts
+function e(e) {
+	try {
+		let t = JSON.parse(e);
+		return typeof t != "object" || !t || Array.isArray(t) ? null : t;
+	} catch {
+		return null;
+	}
+}
+//#endregion
+export { e as parseToolJson };
+
+//# sourceMappingURL=parseToolJson.js.map

package/lib/esm/components/backoffice/tools/parseToolJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parseToolJson.js","names":[],"sources":["../../../../../src/components/backoffice/tools/parseToolJson.ts"],"sourcesContent":["/**\n * Parses JSON input and ensures it is a plain object.\n */\nexport function parseToolJson(value: string): Record<string, unknown> | null {\n  try {\n    const parsed: unknown = JSON.parse(value);\n    if (parsed == null || typeof parsed !== 'object' || Array.isArray(parsed)) {\n      return null;\n    }\n    return parsed as Record<string, unknown>;\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";AAGA,SAAgB,EAAc,GAA+C;CAC3E,IAAI;EACF,IAAM,IAAkB,KAAK,MAAM,EAAM;EAIzC,OAHsB,OAAO,KAAW,aAApC,KAAgD,MAAM,QAAQ,EAAO,GAChE,OAEF;SACD;EACN,OAAO"}

package/lib/esm/filters/filterHelpers.js

@@ -0,0 +1,26 @@
+//#region src/filters/filterHelpers.ts
+var e = (e, t) => {
+	let n = e ?? [], r = t ?? [];
+	return n.length === r.length ? n.every((e, t) => e === r[t]) : !1;
+};
+function t(t, n, r) {
+	let { filters: i } = t.list;
+	return i.find((t) => String(t.whereKey ?? t.id) === n && e(t.path, r)) ?? null;
+}
+function n(e, n, r) {
+	let i = t(e, n);
+	if (i != null) return i;
+	let { [n]: a } = r ?? {};
+	if (a != null) {
+		let n = t(e, a);
+		if (n != null) return n;
+	}
+	return t(e, `${n}Contains`) ?? null;
+}
+function r(e, t) {
+	return t == null ? !1 : e.kind === "boolean" ? typeof t == "boolean" : e.kind === "entityId" ? typeof t == "string" && t.trim() !== "" : e.kind === "number" ? typeof t == "number" && Number.isFinite(t) : e.kind === "datetime" ? typeof t == "string" && t.trim() !== "" : typeof t == "number" || typeof t != "string" ? !1 : t.trim() !== "";
+}
+//#endregion
+export { r as canFilterValue, n as resolveFilterForColumn, t as resolveFilterForWhereKey };
+
+//# sourceMappingURL=filterHelpers.js.map

package/lib/esm/filters/filterHelpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filterHelpers.js","names":[],"sources":["../../../src/filters/filterHelpers.ts"],"sourcesContent":["import type {\n  BackofficeFilterSpec,\n  BackofficeRuntimeResolvedListFacetConfig,\n} from '@plumile/backoffice-core/types.js';\n\n/** Compare two optional path arrays for equality. */\nconst arePathsEqual = (\n  left?: readonly string[],\n  right?: readonly string[],\n): boolean => {\n  const leftPath = left ?? [];\n  const rightPath = right ?? [];\n  if (leftPath.length !== rightPath.length) {\n    return false;\n  }\n  return leftPath.every((segment, index) => {\n    return segment === rightPath[index];\n  });\n};\n\n/** Find a filter spec by its where key and optional path. */\nexport function resolveFilterForWhereKey(\n  config: BackofficeRuntimeResolvedListFacetConfig,\n  whereKey: string,\n  path?: readonly string[],\n): BackofficeFilterSpec<Record<string, unknown>> | null {\n  const { filters } = config.list;\n  const match = filters.find((filter) => {\n    return (\n      String(filter.whereKey ?? filter.id) === whereKey &&\n      arePathsEqual(filter.path, path)\n    );\n  });\n  return match ?? null;\n}\n\n/** Resolve a filter spec from a column id, alias, or contains field. */\nexport function resolveFilterForColumn(\n  config: BackofficeRuntimeResolvedListFacetConfig,\n  columnId: string,\n  columnAliases?: Record<string, string>,\n): BackofficeFilterSpec<Record<string, unknown>> | null {\n  const direct = resolveFilterForWhereKey(config, columnId);\n  if (direct != null) {\n    return direct;\n  }\n\n  const { [columnId]: alias } = columnAliases ?? {};\n  if (alias != null) {\n    const aliasFilter = resolveFilterForWhereKey(config, alias);\n    if (aliasFilter != null) {\n      return aliasFilter;\n    }\n  }\n\n  const containsKey = `${columnId}Contains`;\n  const containsFilter = resolveFilterForWhereKey(config, containsKey);\n  if (containsFilter != null) {\n    return containsFilter;\n  }\n\n  return null;\n}\n\n/** Check if a value is compatible with a filter spec. */\nexport function canFilterValue<Where extends Record<string, unknown>>(\n  filter: BackofficeFilterSpec<Where>,\n  value: unknown,\n): boolean {\n  if (value == null) {\n    return false;\n  }\n\n  if (filter.kind === 'boolean') {\n    return typeof value === 'boolean';\n  }\n\n  if (filter.kind === 'entityId') {\n    return typeof value === 'string' && value.trim() !== '';\n  }\n\n  if (filter.kind === 'number') {\n    return typeof value === 'number' && Number.isFinite(value);\n  }\n\n  if (filter.kind === 'datetime') {\n    return typeof value === 'string' && value.trim() !== '';\n  }\n\n  if (typeof value === 'number') {\n    return false;\n  }\n\n  if (typeof value !== 'string') {\n    return false;\n  }\n\n  return value.trim() !== '';\n}\n"],"mappings":";AAMA,IAAM,KACJ,GACA,MACY;CACZ,IAAM,IAAW,KAAQ,EAAE,EACrB,IAAY,KAAS,EAAE;CAI7B,OAHI,EAAS,WAAW,EAAU,SAG3B,EAAS,OAAO,GAAS,MACvB,MAAY,EAAU,GAC7B,GAJO;;AAQX,SAAgB,EACd,GACA,GACA,GACsD;CACtD,IAAM,EAAE,eAAY,EAAO;CAO3B,OANc,EAAQ,MAAM,MAExB,OAAO,EAAO,YAAY,EAAO,GAAG,KAAK,KACzC,EAAc,EAAO,MAAM,EAAK,CAG7B,IAAS;;AAIlB,SAAgB,EACd,GACA,GACA,GACsD;CACtD,IAAM,IAAS,EAAyB,GAAQ,EAAS;CACzD,IAAI,KAAU,MACZ,OAAO;CAGT,IAAM,GAAG,IAAW,MAAU,KAAiB,EAAE;CACjD,IAAI,KAAS,MAAM;EACjB,IAAM,IAAc,EAAyB,GAAQ,EAAM;EAC3D,IAAI,KAAe,MACjB,OAAO;;CAUX,OALuB,EAAyB,GAAQ,GADjC,EAAS,UAE5B,IAIG;;AAIT,SAAgB,EACd,GACA,GACS;CA6BT,OA5BI,KAAS,OACJ,KAGL,EAAO,SAAS,YACX,OAAO,KAAU,YAGtB,EAAO,SAAS,aACX,OAAO,KAAU,YAAY,EAAM,MAAM,KAAK,KAGnD,EAAO,SAAS,WACX,OAAO,KAAU,YAAY,OAAO,SAAS,EAAM,GAGxD,EAAO,SAAS,aACX,OAAO,KAAU,YAAY,EAAM,MAAM,KAAK,KAGnD,OAAO,KAAU,YAIjB,OAAO,KAAU,WACZ,KAGF,EAAM,MAAM,KAAK"}

package/lib/esm/hooks/useAuth.js

@@ -0,0 +1,444 @@
+import { useBackofficeReactTranslation as e } from "../i18n/useBackofficeReactTranslation.js";
+import { requireField as t, resolveMutationOutcome as n } from "../relay/mutationResult.js";
+import { resetRelayStore as r } from "../relay/environment.js";
+import { base64UrlToBuffer as i, bufferToBase64Url as a, parseSignCount as o } from "../modules/webauthn.js";
+import { useCallback as s, useState as c } from "react";
+//#region src/hooks/useAuth.ts
+var l = {
+	authMethod: null,
+	challengeToken: null,
+	emailHint: null,
+	mfaLevel: null,
+	nextStep: null
+}, u = (u) => () => {
+	let { t: d } = e(), [f, p] = c(!1), [m, h] = c(null), [g, _] = c(null), [v, y] = c(null), [b, x] = c([]), [S, C] = c(l), w = u.login.commit, T = u.logout.commit, E = u.completeMfa.commit, D = u.beginPasskeyLogin.commit, O = u.finishPasskeyLogin.commit, k = u.acceptInvitation?.commit, A = u.beginAuthentication.commit, j = d("auth.loginFlow.errors.tryAgain"), M = d("auth.loginFlow.errors.tryAgain"), N = d("auth.passkey.errors.failed"), P = d("auth.mfa.errors.verificationFailed"), F = d("auth.acceptInvitation.errors.default"), I = d("auth.mfa.errors.invalidChallenge"), L = d("auth.passkey.errors.notAvailable"), R = d("auth.logout.errors.default"), z = d("auth.passkey.errors.cancelled"), B = d("auth.passkey.errors.noCredential"), V = d("auth.acceptInvitation.errors.unavailable"), H = s(() => {
+		h(null), _(null), y(null), x([]), C(l);
+	}, []), U = s(() => {
+		h(null);
+	}, []), W = s((e) => {
+		let t = e.authMethod ?? null, n = e.challengeToken ?? null, r = e.mfaLevel ?? null, i = e.nextStep ?? null;
+		return C((e) => ({
+			...e,
+			authMethod: t,
+			challengeToken: n,
+			mfaLevel: r,
+			nextStep: i
+		})), e.loggedInUser != null && i == null ? (_({ id: e.loggedInUser.id }), "success") : i === "TOTP" && n != null ? "mfa-required" : "error";
+	}, []), G = s((e) => typeof e == "object" && !!e && ("status" in e || "result" in e), []), K = s((e) => {
+		switch (e) {
+			case "INVALID_CREDENTIALS": return d("auth.loginFlow.errors.invalidCredentials");
+			case "ACCOUNT_LOCKED": return d("auth.loginFlow.errors.accountLocked");
+			case "RATE_LIMITED": return d("auth.loginFlow.errors.rateLimited");
+			case "INTERNAL_ERROR": return d("auth.loginFlow.errors.tryAgain");
+			default: return null;
+		}
+	}, [d]), q = s((e) => {
+		switch (e) {
+			case "INVALID_EMAIL": return d("auth.loginFlow.errors.invalidEmail");
+			case "INTERNAL_ERROR": return d("auth.loginFlow.errors.tryAgain");
+			default: return null;
+		}
+	}, [d]), J = s((e) => {
+		switch (e) {
+			case "INVALID_EMAIL": return d("auth.passkey.errors.invalidEmail");
+			case "PASSKEY_NOT_FOUND": return d("auth.passkey.errors.notFound");
+			case "PASSKEY_NOT_SUPPORTED": return d("auth.passkey.errors.notAvailable");
+			case "INTERNAL_ERROR": return d("auth.passkey.errors.failed");
+			default: return null;
+		}
+	}, [d]), Y = s((e) => {
+		switch (e) {
+			case "INVALID_CHALLENGE_TOKEN": return d("auth.passkey.errors.invalidChallenge");
+			case "CHALLENGE_EXPIRED": return d("auth.passkey.errors.challengeExpired");
+			case "INVALID_ASSERTION": return d("auth.passkey.errors.invalidAssertion");
+			case "INTERNAL_ERROR": return d("auth.passkey.errors.failed");
+			default: return null;
+		}
+	}, [d]), X = s((e) => {
+		switch (e) {
+			case "INVALID_CHALLENGE_TOKEN": return d("auth.mfa.errors.invalidChallenge");
+			case "CHALLENGE_EXPIRED": return d("auth.mfa.errors.expired");
+			case "INVALID_CODE": return d("auth.mfa.errors.invalidCode");
+			case "TOO_MANY_ATTEMPTS": return d("auth.mfa.errors.tooManyAttempts");
+			case "INTERNAL_ERROR": return d("auth.mfa.errors.verificationFailed");
+			default: return null;
+		}
+	}, [d]), Z = s((e) => {
+		switch (e) {
+			case "INVALID_TOKEN": return d("auth.acceptInvitation.errors.invalidToken");
+			case "TOKEN_EXPIRED": return d("auth.acceptInvitation.errors.expired");
+			case "ALREADY_ACCEPTED": return d("auth.acceptInvitation.errors.alreadyAccepted");
+			case "PASSWORD_MISMATCH": return d("auth.acceptInvitation.errors.passwordMismatch");
+			case "PASSWORD_POLICY_VIOLATION": return d("auth.acceptInvitation.errors.passwordPolicyViolation");
+			case "RATE_LIMITED": return d("auth.acceptInvitation.errors.rateLimited");
+			case "EMAIL_MISMATCH": return d("auth.acceptInvitation.errors.emailMismatch");
+			case "INTERNAL_ERROR": return d("auth.acceptInvitation.errors.default");
+			default: return null;
+		}
+	}, [d]), Q = s(async (e) => new Promise((t, r) => {
+		A({
+			variables: { email: e },
+			onCompleted: (e) => {
+				let i = e.beginAuthentication, a = i;
+				if (G(i)) {
+					let e = n(i, {
+						defaultErrorMessage: M,
+						mapReason: q
+					});
+					if (!e.ok) {
+						let t = { message: e.message };
+						h(t), r(t);
+						return;
+					}
+					a = e.payload;
+				}
+				let o = a.methods.map((e) => e.method), s = a.lockedUntil ?? null;
+				x(o), y(s), t({
+					methods: o,
+					lockedUntil: s
+				});
+			},
+			onError: () => {
+				let e = { message: M };
+				h(e), r(e);
+			}
+		});
+	}), [
+		A,
+		M,
+		G,
+		q
+	]), $ = s(async (e) => (p(!0), h(null), C((t) => ({
+		...t,
+		emailHint: e.email
+	})), new Promise((t, r) => {
+		w({
+			variables: { input: e },
+			onCompleted: (e) => {
+				p(!1);
+				let i = e.login, a = null;
+				if (G(i)) {
+					let e = n(i, {
+						defaultErrorMessage: j,
+						mapReason: K
+					});
+					if (!e.ok) {
+						let t = { message: e.message };
+						h(t), r(t);
+						return;
+					}
+					a = i.payload ?? null;
+				} else a = i;
+				if (a == null) {
+					let e = { message: j };
+					h(e), r(e);
+					return;
+				}
+				let o = W(a);
+				if (o === "success" || o === "mfa-required") {
+					t(o);
+					return;
+				}
+				let s = { message: j };
+				h(s), r(s);
+			},
+			onError: () => {
+				p(!1);
+				let e = { message: j };
+				h(e), r(e);
+			}
+		});
+	})), [
+		w,
+		j,
+		G,
+		K,
+		W
+	]), ee = s(async (e) => {
+		let { challengeToken: t } = S;
+		if (t == null) {
+			let e = { message: I };
+			return h(e), Promise.reject(e);
+		}
+		return p(!0), h(null), new Promise((r, i) => {
+			E({
+				variables: { input: {
+					challengeToken: t,
+					code: e.code
+				} },
+				onCompleted: (e) => {
+					p(!1);
+					let t = e.completeMfa, a = null;
+					if (G(t)) {
+						let e = n(t, {
+							defaultErrorMessage: P,
+							mapReason: X
+						});
+						if (!e.ok) {
+							let t = { message: e.message };
+							h(t), i(t);
+							return;
+						}
+						a = t.payload ?? null;
+					} else a = t;
+					if (a == null) {
+						let e = { message: P };
+						h(e), i(e);
+						return;
+					}
+					if (W(a) === "success") {
+						r();
+						return;
+					}
+					let o = { message: P };
+					h(o), i(o);
+				},
+				onError: () => {
+					p(!1);
+					let e = { message: P };
+					h(e), i(e);
+				}
+			});
+		});
+	}, [
+		S,
+		E,
+		P,
+		G,
+		X,
+		I,
+		W
+	]), te = s(async ({ email: e }) => {
+		if (typeof window > "u") {
+			let e = { message: L };
+			return h(e), Promise.reject(e);
+		}
+		return p(!0), h(null), C((t) => ({
+			...t,
+			emailHint: e
+		})), new Promise((t, r) => {
+			D({
+				variables: { email: e },
+				onCompleted: (e) => {
+					let s = e.beginPasskeyLogin, c = s;
+					if (G(s)) {
+						let e = n(s, {
+							defaultErrorMessage: N,
+							mapReason: J
+						});
+						if (!e.ok) {
+							p(!1);
+							let t = { message: e.message };
+							h(t), r(t);
+							return;
+						}
+						c = e.payload;
+					}
+					(async () => {
+						try {
+							let e = await navigator.credentials.get({ publicKey: {
+								allowCredentials: c.allowCredentials.map((e) => ({
+									id: i(e),
+									type: "public-key"
+								})),
+								challenge: i(c.challenge),
+								rpId: c.rpId,
+								userVerification: "preferred"
+							} });
+							if (e == null) throw Error("PASSKEY_NO_CREDENTIAL");
+							let s = e.response, l = o(s.authenticatorData);
+							O({
+								variables: { input: {
+									challenge: c.challenge,
+									challengeToken: c.challengeToken,
+									credentialId: e.id,
+									signCount: l,
+									userHandle: s.userHandle == null ? null : a(s.userHandle)
+								} },
+								onCompleted: (e) => {
+									p(!1);
+									let i = e.finishPasskeyLogin, a = null;
+									if (G(i)) {
+										let e = n(i, {
+											defaultErrorMessage: N,
+											mapReason: Y
+										});
+										if (!e.ok) {
+											let t = { message: e.message };
+											h(t), r(t);
+											return;
+										}
+										a = i.payload ?? null;
+									} else a = i;
+									if (a == null) {
+										let e = { message: N };
+										h(e), r(e);
+										return;
+									}
+									let o = W(a);
+									if (o === "success") {
+										t(o);
+										return;
+									}
+									let s = { message: N };
+									h(s), r(s);
+								},
+								onError: () => {
+									p(!1);
+									let e = { message: N };
+									h(e), r(e);
+								}
+							});
+						} catch (e) {
+							p(!1);
+							let t = N;
+							e instanceof Error && e.message === "PASSKEY_NO_CREDENTIAL" ? t = B : typeof DOMException < "u" && e instanceof DOMException && (e.name === "AbortError" || e.name === "NotAllowedError" ? t = z : (e.name === "InvalidStateError" || e.name === "NotSupportedError" || e.name === "SecurityError") && (t = L));
+							let n = { message: t };
+							h(n), r(n);
+						}
+					})().catch(() => {});
+				},
+				onError: () => {
+					p(!1);
+					let e = { message: N };
+					h(e), r(e);
+				}
+			});
+		});
+	}, [
+		D,
+		O,
+		N,
+		G,
+		J,
+		Y,
+		z,
+		B,
+		L,
+		W
+	]), ne = s(async (e) => {
+		if (k == null) {
+			let e = { message: V };
+			return h(e), Promise.reject(e);
+		}
+		return p(!0), h(null), new Promise((t, r) => {
+			k({
+				variables: { input: {
+					token: e.token,
+					password: e.password,
+					passwordConfirmation: e.passwordConfirmation
+				} },
+				onCompleted: (e) => {
+					p(!1);
+					let i = e.acceptInvitation, a = null;
+					if (G(i)) {
+						let e = n(i, {
+							defaultErrorMessage: F,
+							mapReason: Z
+						});
+						if (!e.ok) {
+							let t = { message: e.message };
+							h(t), r(t);
+							return;
+						}
+						a = i.payload ?? null;
+					} else a = i;
+					if (a == null) {
+						let e = { message: F };
+						h(e), r(e);
+						return;
+					}
+					let o = W(a);
+					if (o === "success" || o === "mfa-required") {
+						t(o);
+						return;
+					}
+					let s = { message: F };
+					h(s), r(s);
+				},
+				onError: () => {
+					p(!1);
+					let e = { message: F };
+					h(e), r(e);
+				}
+			});
+		});
+	}, [
+		k,
+		F,
+		V,
+		G,
+		Z,
+		W
+	]), re = s(async () => (p(!0), new Promise((e, i) => {
+		T({
+			variables: {},
+			onCompleted: (a) => {
+				p(!1);
+				let o = a.logout, s = null;
+				if (G(o)) {
+					let e = n(o, { defaultErrorMessage: R });
+					if (!e.ok) {
+						let t = { message: e.message };
+						h(t), i(t);
+						return;
+					}
+					let r = t(o.payload?.loggedOut ?? null, R);
+					if (!r.ok) {
+						let e = { message: r.message };
+						h(e), i(e);
+						return;
+					}
+					s = r.value;
+				} else {
+					let e = t(o.loggedOut ?? null, R);
+					if (!e.ok) {
+						let t = { message: e.message };
+						h(t), i(t);
+						return;
+					}
+					s = e.value;
+				}
+				if (!s) {
+					let e = { message: R };
+					h(e), i(e);
+					return;
+				}
+				localStorage.removeItem("auth_token"), localStorage.removeItem("remember_me"), _(null), C(l), r(), e();
+			},
+			onError: () => {
+				p(!1);
+				let e = { message: R };
+				h(e), r(), i(e);
+			}
+		});
+	})), [
+		T,
+		R,
+		G
+	]), ie = f || u.login.isInFlight || u.logout.isInFlight || u.completeMfa.isInFlight || u.beginPasskeyLogin.isInFlight || u.finishPasskeyLogin.isInFlight || (u.acceptInvitation?.isInFlight ?? !1) || u.beginAuthentication.isInFlight;
+	return {
+		authMethod: S.authMethod,
+		challengeToken: S.challengeToken,
+		nextStep: S.nextStep,
+		mfaLevel: S.mfaLevel,
+		emailHint: S.emailHint,
+		login: $,
+		loginWithPasskey: te,
+		completeMfa: ee,
+		acceptInvitation: ne,
+		beginAuthentication: Q,
+		logout: re,
+		reset: H,
+		clearError: U,
+		isLoading: ie,
+		error: m,
+		user: g,
+		lockedUntil: v,
+		availableMethods: b
+	};
+};
+//#endregion
+export { u as createUseAuth };
+
+//# sourceMappingURL=useAuth.js.map

package/lib/esm/hooks/useAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"useAuth.js","names":[],"sources":["../../../src/hooks/useAuth.ts"],"sourcesContent":["/* eslint-disable no-ternary */\nimport { useCallback, useState } from 'react';\n\nimport {\n  type MutationPayloadBase,\n  requireField,\n  resolveMutationOutcome,\n} from '../relay/mutationResult.js';\nimport { useBackofficeReactTranslation } from '../i18n/useBackofficeReactTranslation.js';\n\nimport { resetRelayStore } from '../relay/environment.js';\nimport type { PayloadError } from 'relay-runtime';\n\nimport type {\n  AuthMethod,\n  LoginNextStep,\n  MfaLevel,\n} from '../modules/sharedSchemaTypes.js';\nimport {\n  base64UrlToBuffer,\n  bufferToBase64Url,\n  parseSignCount,\n} from '../modules/webauthn.js';\n\nexport type AuthPayload = {\n  authMethod: AuthMethod | null | undefined;\n  challengeToken: string | null | undefined;\n  loggedInUser: { id: string } | null | undefined;\n  mfaLevel: MfaLevel | null | undefined;\n  nextStep: LoginNextStep | null | undefined;\n};\n\ntype LoginErrorReason =\n  | 'INVALID_CREDENTIALS'\n  | 'ACCOUNT_LOCKED'\n  | 'RATE_LIMITED'\n  | 'INTERNAL_ERROR';\n\ntype LogoutErrorReason =\n  | 'UNAUTHENTICATED'\n  | 'SESSION_NOT_FOUND'\n  | 'INTERNAL_ERROR';\n\ntype BeginAuthenticationErrorReason = 'INVALID_EMAIL' | 'INTERNAL_ERROR';\n\ntype BeginPasskeyLoginErrorReason =\n  | 'INVALID_EMAIL'\n  | 'PASSKEY_NOT_FOUND'\n  | 'PASSKEY_NOT_SUPPORTED'\n  | 'INTERNAL_ERROR';\n\ntype FinishPasskeyLoginErrorReason =\n  | 'INVALID_CHALLENGE_TOKEN'\n  | 'CHALLENGE_EXPIRED'\n  | 'INVALID_ASSERTION'\n  | 'INTERNAL_ERROR';\n\ntype CompleteMfaErrorReason =\n  | 'INVALID_CHALLENGE_TOKEN'\n  | 'CHALLENGE_EXPIRED'\n  | 'INVALID_CODE'\n  | 'TOO_MANY_ATTEMPTS'\n  | 'INTERNAL_ERROR';\n\ntype AcceptInvitationErrorReason =\n  | 'INVALID_TOKEN'\n  | 'TOKEN_EXPIRED'\n  | 'ALREADY_ACCEPTED'\n  | 'PASSWORD_MISMATCH'\n  | 'PASSWORD_POLICY_VIOLATION'\n  | 'RATE_LIMITED'\n  | 'EMAIL_MISMATCH'\n  | 'INTERNAL_ERROR';\n\nexport type BeginAuthenticationPayload =\n  MutationPayloadBase<BeginAuthenticationErrorReason> & {\n    lockedUntil: string | null | undefined;\n    methods: readonly {\n      method: AuthMethod;\n      mfaEnforced?: boolean | null | undefined;\n    }[];\n  };\n\nexport type BeginPasskeyLoginPayload =\n  MutationPayloadBase<BeginPasskeyLoginErrorReason> & {\n    allowCredentials: readonly string[];\n    challenge: string;\n    challengeToken: string;\n    rpId: string;\n  };\n\ntype LoginMutationPayload = MutationPayloadBase<LoginErrorReason> & {\n  payload?: AuthPayload | null | undefined;\n};\n\ntype LogoutPayload = {\n  loggedOut?: boolean | null | undefined;\n};\n\ntype LogoutMutationPayload = MutationPayloadBase<LogoutErrorReason> & {\n  payload?: LogoutPayload | null | undefined;\n};\n\ntype CompleteMfaMutationPayload =\n  MutationPayloadBase<CompleteMfaErrorReason> & {\n    payload?: AuthPayload | null | undefined;\n  };\n\ntype FinishPasskeyLoginMutationPayload =\n  MutationPayloadBase<FinishPasskeyLoginErrorReason> & {\n    payload?: AuthPayload | null | undefined;\n  };\n\ntype AcceptInvitationMutationPayload =\n  MutationPayloadBase<AcceptInvitationErrorReason> & {\n    payload?: AuthPayload | null | undefined;\n  };\n\nexport type LoginResponse = { login: AuthPayload | LoginMutationPayload };\nexport type LogoutResponse = { logout: LogoutPayload | LogoutMutationPayload };\nexport type CompleteMfaResponse = {\n  completeMfa: AuthPayload | CompleteMfaMutationPayload;\n};\nexport type FinishPasskeyLoginResponse = {\n  finishPasskeyLogin: AuthPayload | FinishPasskeyLoginMutationPayload;\n};\nexport type AcceptInvitationResponse = {\n  acceptInvitation: AuthPayload | AcceptInvitationMutationPayload;\n};\nexport type BeginAuthenticationResponse = {\n  beginAuthentication: BeginAuthenticationPayload;\n};\nexport type BeginPasskeyLoginResponse = {\n  beginPasskeyLogin: BeginPasskeyLoginPayload;\n};\n\nexport type LoginVariables = {\n  input: LoginCredentials;\n};\n\nexport type LogoutVariables = Record<PropertyKey, never>;\n\nexport type CompleteMfaVariables = {\n  input: {\n    challengeToken: string;\n    code: string;\n  };\n};\n\nexport type BeginPasskeyLoginVariables = {\n  email: string;\n};\n\nexport type FinishPasskeyLoginVariables = {\n  input: {\n    challenge: string;\n    challengeToken: string;\n    credentialId: string;\n    signCount: number;\n    userHandle?: string | null;\n  };\n};\n\nexport type AcceptInvitationVariables = {\n  input: {\n    token: string;\n    password: string;\n    passwordConfirmation: string;\n  };\n};\n\nexport type BeginAuthenticationVariables = {\n  email: string;\n};\n\ntype MutationCommitConfig<TVariables, TResponse> = {\n  variables: TVariables;\n  onCompleted?: (\n    response: TResponse,\n    errors: readonly PayloadError[] | null,\n  ) => void;\n  onError?: (error: Error) => void;\n};\n\ntype MutationCommit<TVariables, TResponse> = (\n  config: MutationCommitConfig<TVariables, TResponse>,\n) => void;\n\ntype MutationEntry<TVariables, TResponse> = {\n  commit: MutationCommit<TVariables, TResponse>;\n  isInFlight: boolean;\n};\n\nexport type AuthMutationHooks = {\n  login: MutationEntry<LoginVariables, LoginResponse>;\n  logout: MutationEntry<LogoutVariables, LogoutResponse>;\n  completeMfa: MutationEntry<CompleteMfaVariables, CompleteMfaResponse>;\n  beginPasskeyLogin: MutationEntry<\n    BeginPasskeyLoginVariables,\n    BeginPasskeyLoginResponse\n  >;\n  finishPasskeyLogin: MutationEntry<\n    FinishPasskeyLoginVariables,\n    FinishPasskeyLoginResponse\n  >;\n  acceptInvitation?: MutationEntry<\n    AcceptInvitationVariables,\n    AcceptInvitationResponse\n  >;\n  beginAuthentication: MutationEntry<\n    BeginAuthenticationVariables,\n    BeginAuthenticationResponse\n  >;\n};\n\ninterface User {\n  id: string;\n}\n\nexport type LoginStatus = 'success' | 'mfa-required' | 'error';\n\nexport interface LoginCredentials {\n  email: string;\n  password: string;\n}\n\nexport interface TotpCredentials {\n  code: string;\n}\n\nexport interface AcceptInvitationCredentials {\n  token: string;\n  password: string;\n  passwordConfirmation: string;\n}\n\nexport interface AuthError {\n  message: string;\n  code?: string;\n}\n\nexport interface UseAuthReturn {\n  authMethod: AuthMethod | null;\n  challengeToken: string | null;\n  nextStep: LoginNextStep | null;\n  mfaLevel: MfaLevel | null;\n  emailHint: string | null;\n  lockedUntil: string | null;\n  availableMethods: AuthMethod[];\n  login: (credentials: LoginCredentials) => Promise<LoginStatus>;\n  loginWithPasskey: (params: { email: string }) => Promise<LoginStatus>;\n  completeMfa: (credentials: TotpCredentials) => Promise<void>;\n  acceptInvitation: (\n    credentials: AcceptInvitationCredentials,\n  ) => Promise<LoginStatus>;\n  beginAuthentication: (\n    email: string,\n  ) => Promise<{ methods: AuthMethod[]; lockedUntil: string | null }>;\n  logout: () => Promise<void>;\n  reset: () => void;\n  clearError: () => void;\n  isLoading: boolean;\n  error: AuthError | null;\n  user: User | null;\n}\n\nconst initialState = {\n  authMethod: null as AuthMethod | null,\n  challengeToken: null as string | null,\n  emailHint: null as string | null,\n  mfaLevel: null as MfaLevel | null,\n  nextStep: null as LoginNextStep | null,\n};\n\nexport const createUseAuth = (mutations: AuthMutationHooks) => {\n  return (): UseAuthReturn => {\n    const { t } = useBackofficeReactTranslation();\n    const [isLoading, setIsLoading] = useState(false);\n    const [error, setError] = useState<AuthError | null>(null);\n    const [user, setUser] = useState<User | null>(null);\n    const [lockedUntil, setLockedUntil] = useState<string | null>(null);\n    const [availableMethods, setAvailableMethods] = useState<AuthMethod[]>([]);\n    const [authState, setAuthState] = useState(initialState);\n\n    const commitLoginMutation = mutations.login.commit;\n    const commitLogoutMutation = mutations.logout.commit;\n    const commitCompleteMfaMutation = mutations.completeMfa.commit;\n    const commitBeginPasskeyLoginMutation = mutations.beginPasskeyLogin.commit;\n    const commitFinishPasskeyLoginMutation =\n      mutations.finishPasskeyLogin.commit;\n    const commitAcceptInvitationMutation = mutations.acceptInvitation?.commit;\n    const commitBeginAuthenticationMutation =\n      mutations.beginAuthentication.commit;\n\n    const defaultLoginErrorMessage = t('auth.loginFlow.errors.tryAgain');\n    const defaultBeginAuthenticationErrorMessage = t(\n      'auth.loginFlow.errors.tryAgain',\n    );\n    const defaultPasskeyErrorMessage = t('auth.passkey.errors.failed');\n    const defaultMfaErrorMessage = t('auth.mfa.errors.verificationFailed');\n    const defaultInvitationErrorMessage = t(\n      'auth.acceptInvitation.errors.default',\n    );\n    const mfaInvalidChallengeMessage = t('auth.mfa.errors.invalidChallenge');\n    const passkeyNotAvailableMessage = t('auth.passkey.errors.notAvailable');\n    const defaultLogoutErrorMessage = t('auth.logout.errors.default');\n    const passkeyCancelledMessage = t('auth.passkey.errors.cancelled');\n    const passkeyNoCredentialMessage = t('auth.passkey.errors.noCredential');\n    const invitationUnavailableMessage = t(\n      'auth.acceptInvitation.errors.unavailable',\n    );\n\n    const reset = useCallback(() => {\n      setError(null);\n      setUser(null);\n      setLockedUntil(null);\n      setAvailableMethods([]);\n      setAuthState(initialState);\n    }, []);\n\n    const clearError = useCallback(() => {\n      setError(null);\n    }, []);\n\n    const updateAuthStateFromPayload = useCallback(\n      (payload: AuthPayload): LoginStatus => {\n        const authMethod = payload.authMethod ?? null;\n        const challengeToken = payload.challengeToken ?? null;\n        const mfaLevel = payload.mfaLevel ?? null;\n        const nextStep = payload.nextStep ?? null;\n\n        setAuthState((prev) => {\n          return {\n            ...prev,\n            authMethod,\n            challengeToken,\n            mfaLevel,\n            nextStep,\n          };\n        });\n\n        if (payload.loggedInUser != null && nextStep == null) {\n          setUser({\n            id: payload.loggedInUser.id,\n          });\n          return 'success';\n        }\n\n        if (nextStep === 'TOTP' && challengeToken != null) {\n          return 'mfa-required';\n        }\n\n        return 'error';\n      },\n      [],\n    );\n\n    const isMutationPayload = useCallback(\n      (value: unknown): value is MutationPayloadBase => {\n        return (\n          value != null &&\n          typeof value === 'object' &&\n          ('status' in value || 'result' in value)\n        );\n      },\n      [],\n    );\n\n    const mapLoginReason = useCallback(\n      (reason: LoginErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_CREDENTIALS':\n            return t('auth.loginFlow.errors.invalidCredentials');\n          case 'ACCOUNT_LOCKED':\n            return t('auth.loginFlow.errors.accountLocked');\n          case 'RATE_LIMITED':\n            return t('auth.loginFlow.errors.rateLimited');\n          case 'INTERNAL_ERROR':\n            return t('auth.loginFlow.errors.tryAgain');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapBeginAuthenticationReason = useCallback(\n      (reason: BeginAuthenticationErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_EMAIL':\n            return t('auth.loginFlow.errors.invalidEmail');\n          case 'INTERNAL_ERROR':\n            return t('auth.loginFlow.errors.tryAgain');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapBeginPasskeyLoginReason = useCallback(\n      (reason: BeginPasskeyLoginErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_EMAIL':\n            return t('auth.passkey.errors.invalidEmail');\n          case 'PASSKEY_NOT_FOUND':\n            return t('auth.passkey.errors.notFound');\n          case 'PASSKEY_NOT_SUPPORTED':\n            return t('auth.passkey.errors.notAvailable');\n          case 'INTERNAL_ERROR':\n            return t('auth.passkey.errors.failed');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapFinishPasskeyLoginReason = useCallback(\n      (reason: FinishPasskeyLoginErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_CHALLENGE_TOKEN':\n            return t('auth.passkey.errors.invalidChallenge');\n          case 'CHALLENGE_EXPIRED':\n            return t('auth.passkey.errors.challengeExpired');\n          case 'INVALID_ASSERTION':\n            return t('auth.passkey.errors.invalidAssertion');\n          case 'INTERNAL_ERROR':\n            return t('auth.passkey.errors.failed');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapCompleteMfaReason = useCallback(\n      (reason: CompleteMfaErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_CHALLENGE_TOKEN':\n            return t('auth.mfa.errors.invalidChallenge');\n          case 'CHALLENGE_EXPIRED':\n            return t('auth.mfa.errors.expired');\n          case 'INVALID_CODE':\n            return t('auth.mfa.errors.invalidCode');\n          case 'TOO_MANY_ATTEMPTS':\n            return t('auth.mfa.errors.tooManyAttempts');\n          case 'INTERNAL_ERROR':\n            return t('auth.mfa.errors.verificationFailed');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const mapAcceptInvitationReason = useCallback(\n      (reason: AcceptInvitationErrorReason): string | null => {\n        switch (reason) {\n          case 'INVALID_TOKEN':\n            return t('auth.acceptInvitation.errors.invalidToken');\n          case 'TOKEN_EXPIRED':\n            return t('auth.acceptInvitation.errors.expired');\n          case 'ALREADY_ACCEPTED':\n            return t('auth.acceptInvitation.errors.alreadyAccepted');\n          case 'PASSWORD_MISMATCH':\n            return t('auth.acceptInvitation.errors.passwordMismatch');\n          case 'PASSWORD_POLICY_VIOLATION':\n            return t('auth.acceptInvitation.errors.passwordPolicyViolation');\n          case 'RATE_LIMITED':\n            return t('auth.acceptInvitation.errors.rateLimited');\n          case 'EMAIL_MISMATCH':\n            return t('auth.acceptInvitation.errors.emailMismatch');\n          case 'INTERNAL_ERROR':\n            return t('auth.acceptInvitation.errors.default');\n          default:\n            return null;\n        }\n      },\n      [t],\n    );\n\n    const beginAuthentication = useCallback(\n      async (\n        email: string,\n      ): Promise<{ methods: AuthMethod[]; lockedUntil: string | null }> => {\n        return new Promise((resolve, reject) => {\n          commitBeginAuthenticationMutation({\n            variables: { email },\n            onCompleted: (response) => {\n              const rawPayload = response.beginAuthentication;\n              let payload = rawPayload;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultBeginAuthenticationErrorMessage,\n                  mapReason: mapBeginAuthenticationReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                payload = outcome.payload;\n              }\n\n              const methods = payload.methods.map((item) => {\n                return item.method;\n              });\n              const locked = payload.lockedUntil ?? null;\n              setAvailableMethods(methods);\n              setLockedUntil(locked);\n              resolve({ methods, lockedUntil: locked });\n            },\n            onError: () => {\n              const authError: AuthError = {\n                message: defaultBeginAuthenticationErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitBeginAuthenticationMutation,\n        defaultBeginAuthenticationErrorMessage,\n        isMutationPayload,\n        mapBeginAuthenticationReason,\n      ],\n    );\n\n    const login = useCallback(\n      async (credentials: LoginCredentials): Promise<LoginStatus> => {\n        setIsLoading(true);\n        setError(null);\n        setAuthState((prev) => {\n          return {\n            ...prev,\n            emailHint: credentials.email,\n          };\n        });\n\n        return new Promise((resolve, reject) => {\n          commitLoginMutation({\n            variables: {\n              input: credentials,\n            },\n            onCompleted: (response) => {\n              setIsLoading(false);\n              const rawPayload = response.login;\n              let authPayload: AuthPayload | null = null;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultLoginErrorMessage,\n                  mapReason: mapLoginReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                authPayload = rawPayload.payload ?? null;\n              } else {\n                authPayload = rawPayload;\n              }\n\n              if (authPayload == null) {\n                const authError: AuthError = {\n                  message: defaultLoginErrorMessage,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const status = updateAuthStateFromPayload(authPayload);\n              if (status === 'success' || status === 'mfa-required') {\n                resolve(status);\n                return;\n              }\n\n              const authError: AuthError = {\n                message: defaultLoginErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultLoginErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitLoginMutation,\n        defaultLoginErrorMessage,\n        isMutationPayload,\n        mapLoginReason,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const completeMfa = useCallback(\n      async (credentials: TotpCredentials): Promise<void> => {\n        const { challengeToken } = authState;\n        if (challengeToken == null) {\n          const authError: AuthError = {\n            message: mfaInvalidChallengeMessage,\n          };\n          setError(authError);\n          return Promise.reject(authError);\n        }\n\n        setIsLoading(true);\n        setError(null);\n\n        return new Promise((resolve, reject) => {\n          commitCompleteMfaMutation({\n            variables: {\n              input: {\n                challengeToken,\n                code: credentials.code,\n              },\n            },\n            onCompleted: (response) => {\n              setIsLoading(false);\n              const rawPayload = response.completeMfa;\n              let authPayload: AuthPayload | null = null;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultMfaErrorMessage,\n                  mapReason: mapCompleteMfaReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                authPayload = rawPayload.payload ?? null;\n              } else {\n                authPayload = rawPayload;\n              }\n\n              if (authPayload == null) {\n                const authError: AuthError = {\n                  message: defaultMfaErrorMessage,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const status = updateAuthStateFromPayload(authPayload);\n              if (status === 'success') {\n                resolve();\n                return;\n              }\n\n              const authError: AuthError = {\n                message: defaultMfaErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultMfaErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        authState,\n        commitCompleteMfaMutation,\n        defaultMfaErrorMessage,\n        isMutationPayload,\n        mapCompleteMfaReason,\n        mfaInvalidChallengeMessage,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const loginWithPasskey = useCallback(\n      async ({ email }: { email: string }): Promise<LoginStatus> => {\n        if (typeof window === 'undefined') {\n          const authError: AuthError = {\n            message: passkeyNotAvailableMessage,\n          };\n          setError(authError);\n          return Promise.reject(authError);\n        }\n\n        setIsLoading(true);\n        setError(null);\n        setAuthState((prev) => {\n          return {\n            ...prev,\n            emailHint: email,\n          };\n        });\n\n        return new Promise((resolve, reject) => {\n          commitBeginPasskeyLoginMutation({\n            variables: {\n              email,\n            },\n            onCompleted: (response) => {\n              const rawOptions = response.beginPasskeyLogin;\n              let options = rawOptions;\n\n              if (isMutationPayload(rawOptions)) {\n                const outcome = resolveMutationOutcome(rawOptions, {\n                  defaultErrorMessage: defaultPasskeyErrorMessage,\n                  mapReason: mapBeginPasskeyLoginReason,\n                });\n                if (!outcome.ok) {\n                  setIsLoading(false);\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                options = outcome.payload;\n              }\n\n              const continuePasskeyLogin = async (): Promise<void> => {\n                try {\n                  const assertion = (await navigator.credentials.get({\n                    publicKey: {\n                      allowCredentials: options.allowCredentials.map(\n                        (credentialId) => {\n                          return {\n                            id: base64UrlToBuffer(credentialId),\n                            type: 'public-key' as const,\n                          };\n                        },\n                      ),\n                      challenge: base64UrlToBuffer(options.challenge),\n                      rpId: options.rpId,\n                      userVerification: 'preferred',\n                    },\n                  })) as PublicKeyCredential | null;\n\n                  if (assertion == null) {\n                    throw new Error('PASSKEY_NO_CREDENTIAL');\n                  }\n\n                  const assertionResponse =\n                    assertion.response as AuthenticatorAssertionResponse;\n                  const signCount = parseSignCount(\n                    assertionResponse.authenticatorData,\n                  );\n\n                  commitFinishPasskeyLoginMutation({\n                    variables: {\n                      input: {\n                        challenge: options.challenge,\n                        challengeToken: options.challengeToken,\n                        credentialId: assertion.id,\n                        signCount,\n                        userHandle:\n                          assertionResponse.userHandle != null\n                            ? bufferToBase64Url(assertionResponse.userHandle)\n                            : null,\n                      },\n                    },\n                    onCompleted: (finishResponse) => {\n                      setIsLoading(false);\n                      const rawPayload = finishResponse.finishPasskeyLogin;\n                      let authPayload: AuthPayload | null = null;\n\n                      if (isMutationPayload(rawPayload)) {\n                        const outcome = resolveMutationOutcome(rawPayload, {\n                          defaultErrorMessage: defaultPasskeyErrorMessage,\n                          mapReason: mapFinishPasskeyLoginReason,\n                        });\n                        if (!outcome.ok) {\n                          const authError: AuthError = {\n                            message: outcome.message,\n                          };\n                          setError(authError);\n                          reject(authError);\n                          return;\n                        }\n                        authPayload = rawPayload.payload ?? null;\n                      } else {\n                        authPayload = rawPayload;\n                      }\n\n                      if (authPayload == null) {\n                        const authError: AuthError = {\n                          message: defaultPasskeyErrorMessage,\n                        };\n                        setError(authError);\n                        reject(authError);\n                        return;\n                      }\n\n                      const status = updateAuthStateFromPayload(authPayload);\n                      if (status === 'success') {\n                        resolve(status);\n                        return;\n                      }\n                      const authError: AuthError = {\n                        message: defaultPasskeyErrorMessage,\n                      };\n                      setError(authError);\n                      reject(authError);\n                    },\n                    onError: () => {\n                      setIsLoading(false);\n                      const authError: AuthError = {\n                        message: defaultPasskeyErrorMessage,\n                      };\n                      setError(authError);\n                      reject(authError);\n                    },\n                  });\n                } catch (credentialError) {\n                  setIsLoading(false);\n                  let message = defaultPasskeyErrorMessage;\n                  if (\n                    credentialError instanceof Error &&\n                    credentialError.message === 'PASSKEY_NO_CREDENTIAL'\n                  ) {\n                    message = passkeyNoCredentialMessage;\n                  } else if (\n                    typeof DOMException !== 'undefined' &&\n                    credentialError instanceof DOMException\n                  ) {\n                    if (\n                      credentialError.name === 'AbortError' ||\n                      credentialError.name === 'NotAllowedError'\n                    ) {\n                      message = passkeyCancelledMessage;\n                    } else if (\n                      credentialError.name === 'InvalidStateError' ||\n                      credentialError.name === 'NotSupportedError' ||\n                      credentialError.name === 'SecurityError'\n                    ) {\n                      message = passkeyNotAvailableMessage;\n                    }\n                  }\n                  const authError: AuthError = {\n                    message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                }\n              };\n\n              continuePasskeyLogin().catch(() => {\n                return undefined;\n              });\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultPasskeyErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitBeginPasskeyLoginMutation,\n        commitFinishPasskeyLoginMutation,\n        defaultPasskeyErrorMessage,\n        isMutationPayload,\n        mapBeginPasskeyLoginReason,\n        mapFinishPasskeyLoginReason,\n        passkeyCancelledMessage,\n        passkeyNoCredentialMessage,\n        passkeyNotAvailableMessage,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const acceptInvitation = useCallback(\n      async (\n        credentials: AcceptInvitationCredentials,\n      ): Promise<LoginStatus> => {\n        if (commitAcceptInvitationMutation == null) {\n          const authError: AuthError = {\n            message: invitationUnavailableMessage,\n          };\n          setError(authError);\n          return Promise.reject(authError);\n        }\n\n        setIsLoading(true);\n        setError(null);\n\n        return new Promise((resolve, reject) => {\n          commitAcceptInvitationMutation({\n            variables: {\n              input: {\n                token: credentials.token,\n                password: credentials.password,\n                passwordConfirmation: credentials.passwordConfirmation,\n              },\n            },\n            onCompleted: (response) => {\n              setIsLoading(false);\n              const rawPayload = response.acceptInvitation;\n              let authPayload: AuthPayload | null = null;\n\n              if (isMutationPayload(rawPayload)) {\n                const outcome = resolveMutationOutcome(rawPayload, {\n                  defaultErrorMessage: defaultInvitationErrorMessage,\n                  mapReason: mapAcceptInvitationReason,\n                });\n                if (!outcome.ok) {\n                  const authError: AuthError = {\n                    message: outcome.message,\n                  };\n                  setError(authError);\n                  reject(authError);\n                  return;\n                }\n                authPayload = rawPayload.payload ?? null;\n              } else {\n                authPayload = rawPayload;\n              }\n\n              if (authPayload == null) {\n                const authError: AuthError = {\n                  message: defaultInvitationErrorMessage,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const status = updateAuthStateFromPayload(authPayload);\n              if (status === 'success' || status === 'mfa-required') {\n                resolve(status);\n                return;\n              }\n              const authError: AuthError = {\n                message: defaultInvitationErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n            onError: () => {\n              setIsLoading(false);\n              const authError: AuthError = {\n                message: defaultInvitationErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n            },\n          });\n        });\n      },\n      [\n        commitAcceptInvitationMutation,\n        defaultInvitationErrorMessage,\n        invitationUnavailableMessage,\n        isMutationPayload,\n        mapAcceptInvitationReason,\n        updateAuthStateFromPayload,\n      ],\n    );\n\n    const logout = useCallback(async (): Promise<void> => {\n      setIsLoading(true);\n\n      return new Promise((resolve, reject) => {\n        commitLogoutMutation({\n          variables: {},\n          onCompleted: (response) => {\n            setIsLoading(false);\n            const rawPayload = response.logout;\n            let loggedOutValue: boolean | null = null;\n\n            if (isMutationPayload(rawPayload)) {\n              const outcome = resolveMutationOutcome(rawPayload, {\n                defaultErrorMessage: defaultLogoutErrorMessage,\n              });\n              if (!outcome.ok) {\n                const authError: AuthError = { message: outcome.message };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n\n              const loggedOutResult = requireField(\n                rawPayload.payload?.loggedOut ?? null,\n                defaultLogoutErrorMessage,\n              );\n              if (!loggedOutResult.ok) {\n                const authError: AuthError = {\n                  message: loggedOutResult.message,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n              loggedOutValue = loggedOutResult.value;\n            } else {\n              const loggedOutResult = requireField(\n                rawPayload.loggedOut ?? null,\n                defaultLogoutErrorMessage,\n              );\n              if (!loggedOutResult.ok) {\n                const authError: AuthError = {\n                  message: loggedOutResult.message,\n                };\n                setError(authError);\n                reject(authError);\n                return;\n              }\n              loggedOutValue = loggedOutResult.value;\n            }\n\n            if (!loggedOutValue) {\n              const authError: AuthError = {\n                message: defaultLogoutErrorMessage,\n              };\n              setError(authError);\n              reject(authError);\n              return;\n            }\n\n            localStorage.removeItem('auth_token');\n            localStorage.removeItem('remember_me');\n            setUser(null);\n            setAuthState(initialState);\n            resetRelayStore();\n\n            resolve();\n          },\n          onError: () => {\n            setIsLoading(false);\n            const authError: AuthError = {\n              message: defaultLogoutErrorMessage,\n            };\n            setError(authError);\n            resetRelayStore();\n\n            reject(authError);\n          },\n        });\n      });\n    }, [commitLogoutMutation, defaultLogoutErrorMessage, isMutationPayload]);\n\n    const combinedIsLoading =\n      isLoading ||\n      mutations.login.isInFlight ||\n      mutations.logout.isInFlight ||\n      mutations.completeMfa.isInFlight ||\n      mutations.beginPasskeyLogin.isInFlight ||\n      mutations.finishPasskeyLogin.isInFlight ||\n      (mutations.acceptInvitation?.isInFlight ?? false) ||\n      mutations.beginAuthentication.isInFlight;\n\n    return {\n      authMethod: authState.authMethod,\n      challengeToken: authState.challengeToken,\n      nextStep: authState.nextStep,\n      mfaLevel: authState.mfaLevel,\n      emailHint: authState.emailHint,\n      login,\n      loginWithPasskey,\n      completeMfa,\n      acceptInvitation,\n      beginAuthentication,\n      logout,\n      reset,\n      clearError,\n      isLoading: combinedIsLoading,\n      error,\n      user,\n      lockedUntil,\n      availableMethods,\n    };\n  };\n};\n"],"mappings":";;;;;;AA0QA,IAAM,IAAe;CACnB,YAAY;CACZ,gBAAgB;CAChB,WAAW;CACX,UAAU;CACV,UAAU;CACX,EAEY,KAAiB,YACA;CAC1B,IAAM,EAAE,SAAM,GAA+B,EACvC,CAAC,GAAW,KAAgB,EAAS,GAAM,EAC3C,CAAC,GAAO,KAAY,EAA2B,KAAK,EACpD,CAAC,GAAM,KAAW,EAAsB,KAAK,EAC7C,CAAC,GAAa,KAAkB,EAAwB,KAAK,EAC7D,CAAC,GAAkB,KAAuB,EAAuB,EAAE,CAAC,EACpE,CAAC,GAAW,KAAgB,EAAS,EAAa,EAElD,IAAsB,EAAU,MAAM,QACtC,IAAuB,EAAU,OAAO,QACxC,IAA4B,EAAU,YAAY,QAClD,IAAkC,EAAU,kBAAkB,QAC9D,IACJ,EAAU,mBAAmB,QACzB,IAAiC,EAAU,kBAAkB,QAC7D,IACJ,EAAU,oBAAoB,QAE1B,IAA2B,EAAE,iCAAiC,EAC9D,IAAyC,EAC7C,iCACD,EACK,IAA6B,EAAE,6BAA6B,EAC5D,IAAyB,EAAE,qCAAqC,EAChE,IAAgC,EACpC,uCACD,EACK,IAA6B,EAAE,mCAAmC,EAClE,IAA6B,EAAE,mCAAmC,EAClE,IAA4B,EAAE,6BAA6B,EAC3D,IAA0B,EAAE,gCAAgC,EAC5D,IAA6B,EAAE,mCAAmC,EAClE,IAA+B,EACnC,2CACD,EAEK,IAAQ,QAAkB;EAK9B,AAJA,EAAS,KAAK,EACd,EAAQ,KAAK,EACb,EAAe,KAAK,EACpB,EAAoB,EAAE,CAAC,EACvB,EAAa,EAAa;IACzB,EAAE,CAAC,EAEA,IAAa,QAAkB;EACnC,EAAS,KAAK;IACb,EAAE,CAAC,EAEA,IAA6B,GAChC,MAAsC;EACrC,IAAM,IAAa,EAAQ,cAAc,MACnC,IAAiB,EAAQ,kBAAkB,MAC3C,IAAW,EAAQ,YAAY,MAC/B,IAAW,EAAQ,YAAY;EAuBrC,OArBA,GAAc,OACL;GACL,GAAG;GACH;GACA;GACA;GACA;GACD,EACD,EAEE,EAAQ,gBAAgB,QAAQ,KAAY,QAC9C,EAAQ,EACN,IAAI,EAAQ,aAAa,IAC1B,CAAC,EACK,aAGL,MAAa,UAAU,KAAkB,OACpC,iBAGF;IAET,EAAE,CACH,EAEK,IAAoB,GACvB,MAGG,OAAO,KAAU,cADjB,MAEC,YAAY,KAAS,YAAY,IAGtC,EAAE,CACH,EAEK,IAAiB,GACpB,MAA4C;EAC3C,QAAQ,GAAR;GACE,KAAK,uBACH,OAAO,EAAE,2CAA2C;GACtD,KAAK,kBACH,OAAO,EAAE,sCAAsC;GACjD,KAAK,gBACH,OAAO,EAAE,oCAAoC;GAC/C,KAAK,kBACH,OAAO,EAAE,iCAAiC;GAC5C,SACE,OAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA+B,GAClC,MAA0D;EACzD,QAAQ,GAAR;GACE,KAAK,iBACH,OAAO,EAAE,qCAAqC;GAChD,KAAK,kBACH,OAAO,EAAE,iCAAiC;GAC5C,SACE,OAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA6B,GAChC,MAAwD;EACvD,QAAQ,GAAR;GACE,KAAK,iBACH,OAAO,EAAE,mCAAmC;GAC9C,KAAK,qBACH,OAAO,EAAE,+BAA+B;GAC1C,KAAK,yBACH,OAAO,EAAE,mCAAmC;GAC9C,KAAK,kBACH,OAAO,EAAE,6BAA6B;GACxC,SACE,OAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA8B,GACjC,MAAyD;EACxD,QAAQ,GAAR;GACE,KAAK,2BACH,OAAO,EAAE,uCAAuC;GAClD,KAAK,qBACH,OAAO,EAAE,uCAAuC;GAClD,KAAK,qBACH,OAAO,EAAE,uCAAuC;GAClD,KAAK,kBACH,OAAO,EAAE,6BAA6B;GACxC,SACE,OAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAAuB,GAC1B,MAAkD;EACjD,QAAQ,GAAR;GACE,KAAK,2BACH,OAAO,EAAE,mCAAmC;GAC9C,KAAK,qBACH,OAAO,EAAE,0BAA0B;GACrC,KAAK,gBACH,OAAO,EAAE,8BAA8B;GACzC,KAAK,qBACH,OAAO,EAAE,kCAAkC;GAC7C,KAAK,kBACH,OAAO,EAAE,qCAAqC;GAChD,SACE,OAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAA4B,GAC/B,MAAuD;EACtD,QAAQ,GAAR;GACE,KAAK,iBACH,OAAO,EAAE,4CAA4C;GACvD,KAAK,iBACH,OAAO,EAAE,uCAAuC;GAClD,KAAK,oBACH,OAAO,EAAE,+CAA+C;GAC1D,KAAK,qBACH,OAAO,EAAE,gDAAgD;GAC3D,KAAK,6BACH,OAAO,EAAE,uDAAuD;GAClE,KAAK,gBACH,OAAO,EAAE,2CAA2C;GACtD,KAAK,kBACH,OAAO,EAAE,6CAA6C;GACxD,KAAK,kBACH,OAAO,EAAE,uCAAuC;GAClD,SACE,OAAO;;IAGb,CAAC,EAAE,CACJ,EAEK,IAAsB,EAC1B,OACE,MAEO,IAAI,SAAS,GAAS,MAAW;EACtC,EAAkC;GAChC,WAAW,EAAE,UAAO;GACpB,cAAc,MAAa;IACzB,IAAM,IAAa,EAAS,qBACxB,IAAU;IAEd,IAAI,EAAkB,EAAW,EAAE;KACjC,IAAM,IAAU,EAAuB,GAAY;MACjD,qBAAqB;MACrB,WAAW;MACZ,CAAC;KACF,IAAI,CAAC,EAAQ,IAAI;MACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;MAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;MACjB;;KAEF,IAAU,EAAQ;;IAGpB,IAAM,IAAU,EAAQ,QAAQ,KAAK,MAC5B,EAAK,OACZ,EACI,IAAS,EAAQ,eAAe;IAGtC,AAFA,EAAoB,EAAQ,EAC5B,EAAe,EAAO,EACtB,EAAQ;KAAE;KAAS,aAAa;KAAQ,CAAC;;GAE3C,eAAe;IACb,IAAM,IAAuB,EAC3B,SAAS,GACV;IAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;GAEpB,CAAC;GACF,EAEJ;EACE;EACA;EACA;EACA;EACD,CACF,EAEK,IAAQ,EACZ,OAAO,OACL,EAAa,GAAK,EAClB,EAAS,KAAK,EACd,GAAc,OACL;EACL,GAAG;EACH,WAAW,EAAY;EACxB,EACD,EAEK,IAAI,SAAS,GAAS,MAAW;EACtC,EAAoB;GAClB,WAAW,EACT,OAAO,GACR;GACD,cAAc,MAAa;IACzB,EAAa,GAAM;IACnB,IAAM,IAAa,EAAS,OACxB,IAAkC;IAEtC,IAAI,EAAkB,EAAW,EAAE;KACjC,IAAM,IAAU,EAAuB,GAAY;MACjD,qBAAqB;MACrB,WAAW;MACZ,CAAC;KACF,IAAI,CAAC,EAAQ,IAAI;MACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;MAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;MACjB;;KAEF,IAAc,EAAW,WAAW;WAEpC,IAAc;IAGhB,IAAI,KAAe,MAAM;KACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;KAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;KACjB;;IAGF,IAAM,IAAS,EAA2B,EAAY;IACtD,IAAI,MAAW,aAAa,MAAW,gBAAgB;KACrD,EAAQ,EAAO;KACf;;IAGF,IAAM,IAAuB,EAC3B,SAAS,GACV;IAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;GAEnB,eAAe;IACb,EAAa,GAAM;IACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;IAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;GAEpB,CAAC;GACF,GAEJ;EACE;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,KAAc,EAClB,OAAO,MAAgD;EACrD,IAAM,EAAE,sBAAmB;EAC3B,IAAI,KAAkB,MAAM;GAC1B,IAAM,IAAuB,EAC3B,SAAS,GACV;GAED,OADA,EAAS,EAAU,EACZ,QAAQ,OAAO,EAAU;;EAMlC,OAHA,EAAa,GAAK,EAClB,EAAS,KAAK,EAEP,IAAI,SAAS,GAAS,MAAW;GACtC,EAA0B;IACxB,WAAW,EACT,OAAO;KACL;KACA,MAAM,EAAY;KACnB,EACF;IACD,cAAc,MAAa;KACzB,EAAa,GAAM;KACnB,IAAM,IAAa,EAAS,aACxB,IAAkC;KAEtC,IAAI,EAAkB,EAAW,EAAE;MACjC,IAAM,IAAU,EAAuB,GAAY;OACjD,qBAAqB;OACrB,WAAW;OACZ,CAAC;MACF,IAAI,CAAC,EAAQ,IAAI;OACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;OAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;OACjB;;MAEF,IAAc,EAAW,WAAW;YAEpC,IAAc;KAGhB,IAAI,KAAe,MAAM;MACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;MAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;MACjB;;KAIF,IADe,EAA2B,EACtC,KAAW,WAAW;MACxB,GAAS;MACT;;KAGF,IAAM,IAAuB,EAC3B,SAAS,GACV;KAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEnB,eAAe;KACb,EAAa,GAAM;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;KAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEpB,CAAC;IACF;IAEJ;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,KAAmB,EACvB,OAAO,EAAE,eAAqD;EAC5D,IAAI,OAAO,SAAW,KAAa;GACjC,IAAM,IAAuB,EAC3B,SAAS,GACV;GAED,OADA,EAAS,EAAU,EACZ,QAAQ,OAAO,EAAU;;EAYlC,OATA,EAAa,GAAK,EAClB,EAAS,KAAK,EACd,GAAc,OACL;GACL,GAAG;GACH,WAAW;GACZ,EACD,EAEK,IAAI,SAAS,GAAS,MAAW;GACtC,EAAgC;IAC9B,WAAW,EACT,UACD;IACD,cAAc,MAAa;KACzB,IAAM,IAAa,EAAS,mBACxB,IAAU;KAEd,IAAI,EAAkB,EAAW,EAAE;MACjC,IAAM,IAAU,EAAuB,GAAY;OACjD,qBAAqB;OACrB,WAAW;OACZ,CAAC;MACF,IAAI,CAAC,EAAQ,IAAI;OACf,EAAa,GAAM;OACnB,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;OAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;OACjB;;MAEF,IAAU,EAAQ;;KAiIpB,aA9HwD;MACtD,IAAI;OACF,IAAM,IAAa,MAAM,UAAU,YAAY,IAAI,EACjD,WAAW;QACT,kBAAkB,EAAQ,iBAAiB,KACxC,OACQ;SACL,IAAI,EAAkB,EAAa;SACnC,MAAM;SACP,EAEJ;QACD,WAAW,EAAkB,EAAQ,UAAU;QAC/C,MAAM,EAAQ;QACd,kBAAkB;QACnB,EACF,CAAC;OAEF,IAAI,KAAa,MACf,MAAU,MAAM,wBAAwB;OAG1C,IAAM,IACJ,EAAU,UACN,IAAY,EAChB,EAAkB,kBACnB;OAED,EAAiC;QAC/B,WAAW,EACT,OAAO;SACL,WAAW,EAAQ;SACnB,gBAAgB,EAAQ;SACxB,cAAc,EAAU;SACxB;SACA,YACE,EAAkB,cAAc,OAE5B,OADA,EAAkB,EAAkB,WAAW;SAEtD,EACF;QACD,cAAc,MAAmB;SAC/B,EAAa,GAAM;SACnB,IAAM,IAAa,EAAe,oBAC9B,IAAkC;SAEtC,IAAI,EAAkB,EAAW,EAAE;UACjC,IAAM,IAAU,EAAuB,GAAY;WACjD,qBAAqB;WACrB,WAAW;WACZ,CAAC;UACF,IAAI,CAAC,EAAQ,IAAI;WACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;WAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;WACjB;;UAEF,IAAc,EAAW,WAAW;gBAEpC,IAAc;SAGhB,IAAI,KAAe,MAAM;UACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;UAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;UACjB;;SAGF,IAAM,IAAS,EAA2B,EAAY;SACtD,IAAI,MAAW,WAAW;UACxB,EAAQ,EAAO;UACf;;SAEF,IAAM,IAAuB,EAC3B,SAAS,GACV;SAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;QAEnB,eAAe;SACb,EAAa,GAAM;SACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;SAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;QAEpB,CAAC;eACK,GAAiB;OACxB,EAAa,GAAM;OACnB,IAAI,IAAU;OACd,AACE,aAA2B,SAC3B,EAAgB,YAAY,0BAE5B,IAAU,IAEV,OAAO,eAAiB,OACxB,aAA2B,iBAGzB,EAAgB,SAAS,gBACzB,EAAgB,SAAS,oBAEzB,IAAU,KAEV,EAAgB,SAAS,uBACzB,EAAgB,SAAS,uBACzB,EAAgB,SAAS,qBAEzB,IAAU;OAGd,IAAM,IAAuB,EAC3B,YACD;OAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;SAIC,CAAC,YAAY,GAEjC;;IAEJ,eAAe;KACb,EAAa,GAAM;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;KAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEpB,CAAC;IACF;IAEJ;EACE;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,KAAmB,EACvB,OACE,MACyB;EACzB,IAAI,KAAkC,MAAM;GAC1C,IAAM,IAAuB,EAC3B,SAAS,GACV;GAED,OADA,EAAS,EAAU,EACZ,QAAQ,OAAO,EAAU;;EAMlC,OAHA,EAAa,GAAK,EAClB,EAAS,KAAK,EAEP,IAAI,SAAS,GAAS,MAAW;GACtC,EAA+B;IAC7B,WAAW,EACT,OAAO;KACL,OAAO,EAAY;KACnB,UAAU,EAAY;KACtB,sBAAsB,EAAY;KACnC,EACF;IACD,cAAc,MAAa;KACzB,EAAa,GAAM;KACnB,IAAM,IAAa,EAAS,kBACxB,IAAkC;KAEtC,IAAI,EAAkB,EAAW,EAAE;MACjC,IAAM,IAAU,EAAuB,GAAY;OACjD,qBAAqB;OACrB,WAAW;OACZ,CAAC;MACF,IAAI,CAAC,EAAQ,IAAI;OACf,IAAM,IAAuB,EAC3B,SAAS,EAAQ,SAClB;OAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;OACjB;;MAEF,IAAc,EAAW,WAAW;YAEpC,IAAc;KAGhB,IAAI,KAAe,MAAM;MACvB,IAAM,IAAuB,EAC3B,SAAS,GACV;MAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;MACjB;;KAGF,IAAM,IAAS,EAA2B,EAAY;KACtD,IAAI,MAAW,aAAa,MAAW,gBAAgB;MACrD,EAAQ,EAAO;MACf;;KAEF,IAAM,IAAuB,EAC3B,SAAS,GACV;KAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEnB,eAAe;KACb,EAAa,GAAM;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;KAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;;IAEpB,CAAC;IACF;IAEJ;EACE;EACA;EACA;EACA;EACA;EACA;EACD,CACF,EAEK,KAAS,EAAY,aACzB,EAAa,GAAK,EAEX,IAAI,SAAS,GAAS,MAAW;EACtC,EAAqB;GACnB,WAAW,EAAE;GACb,cAAc,MAAa;IACzB,EAAa,GAAM;IACnB,IAAM,IAAa,EAAS,QACxB,IAAiC;IAErC,IAAI,EAAkB,EAAW,EAAE;KACjC,IAAM,IAAU,EAAuB,GAAY,EACjD,qBAAqB,GACtB,CAAC;KACF,IAAI,CAAC,EAAQ,IAAI;MACf,IAAM,IAAuB,EAAE,SAAS,EAAQ,SAAS;MAEzD,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;MACjB;;KAGF,IAAM,IAAkB,EACtB,EAAW,SAAS,aAAa,MACjC,EACD;KACD,IAAI,CAAC,EAAgB,IAAI;MACvB,IAAM,IAAuB,EAC3B,SAAS,EAAgB,SAC1B;MAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;MACjB;;KAEF,IAAiB,EAAgB;WAC5B;KACL,IAAM,IAAkB,EACtB,EAAW,aAAa,MACxB,EACD;KACD,IAAI,CAAC,EAAgB,IAAI;MACvB,IAAM,IAAuB,EAC3B,SAAS,EAAgB,SAC1B;MAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;MACjB;;KAEF,IAAiB,EAAgB;;IAGnC,IAAI,CAAC,GAAgB;KACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;KAED,AADA,EAAS,EAAU,EACnB,EAAO,EAAU;KACjB;;IASF,AANA,aAAa,WAAW,aAAa,EACrC,aAAa,WAAW,cAAc,EACtC,EAAQ,KAAK,EACb,EAAa,EAAa,EAC1B,GAAiB,EAEjB,GAAS;;GAEX,eAAe;IACb,EAAa,GAAM;IACnB,IAAM,IAAuB,EAC3B,SAAS,GACV;IAID,AAHA,EAAS,EAAU,EACnB,GAAiB,EAEjB,EAAO,EAAU;;GAEpB,CAAC;GACF,GACD;EAAC;EAAsB;EAA2B;EAAkB,CAAC,EAElE,KACJ,KACA,EAAU,MAAM,cAChB,EAAU,OAAO,cACjB,EAAU,YAAY,cACtB,EAAU,kBAAkB,cAC5B,EAAU,mBAAmB,eAC5B,EAAU,kBAAkB,cAAc,OAC3C,EAAU,oBAAoB;CAEhC,OAAO;EACL,YAAY,EAAU;EACtB,gBAAgB,EAAU;EAC1B,UAAU,EAAU;EACpB,UAAU,EAAU;EACpB,WAAW,EAAU;EACrB;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,WAAW;EACX;EACA;EACA;EACA;EACD"}