@pol-studios/db 1.0.31 → 1.0.34

package/dist/auth/hooks.js

@@ -1,4 +1,7 @@
 import {
+  extractAccessKeys,
+  offlineAuthQueries,
+  offlineAuthQueryKeys,
   useAuth,
   useCanCreate,
   useCanDelete,
@@ -11,22 +14,23 @@ import {
   usePermissionLoading,
   usePermissionsBatch,
   useSetupAuth
-} from "../chunk-5BLKZUKM.js";
+} from "../chunk-MREERKQU.js";
 import {
   useSetUserMetadata,
   useUserMetadata,
   useUserMetadataState,
   useUserMetadataValue
-} from "../chunk-WX4ABYIF.js";
-import "../chunk-VGEMLNNM.js";
-import "../chunk-GC3TBUWE.js";
+} from "../chunk-67HMVGV7.js";
+import "../chunk-UBHORKBS.js";
 import "../chunk-J4ZVCXZ4.js";
-import "../chunk-OQ7U6EQ3.js";
-import "../chunk-H6365JPC.js";
-import "../chunk-3PJTNH2L.js";
-import "../chunk-5EFDS7SR.js";
-import "../chunk-P4UZ7IXC.js";
+import "../chunk-YUX6RGLZ.js";
+import "../chunk-AKIRHA4Q.js";
+import "../chunk-DMVUEJG2.js";
+import "../chunk-7D4SUZUM.js";
 export {
+  extractAccessKeys,
+  offlineAuthQueries,
+  offlineAuthQueryKeys,
   useAuth,
   useCanCreate,
   useCanDelete,

package/dist/auth/index.d.ts

@@ -1,11 +1,11 @@
-export { EntityWithPermission, useAuth, useCanCreate, useCanDelete, useCanEdit, useCanShare, useCanView, useInvalidatePermission, usePermission, usePermissionCheck, usePermissionLoading, usePermissionsBatch, useSetupAuth } from './hooks.js';
+export { j as SimpleAuthContextValue, S as SimpleAuthProvider, i as SimpleAuthProviderProps, k as SimpleProfile, P as SimpleProfileStatus, l as SimpleUserAccess, U as UserMetadataContextType, r as UserMetadataInsert, s as UserMetadataProvider, t as UserMetadataRow, v as UserMetadataUpdate, g as getPermissionLevel, h as hasResourceAccess, a as useRequireAuth, b as useResourceAccess, m as useSetUserMetadata, u as useSimpleAuth, e as useSimpleCanDelete, d as useSimpleCanEdit, f as useSimpleCanShare, c as useSimpleCanView, n as useUserMetadata, o as useUserMetadataState, p as useUserMetadataValue, q as userMetadataContext } from '../UserMetadataContext-QLIv-mfF.js';
+export { EntityWithPermission, OfflineAuthData, UseOfflineAuthOptions, extractAccessKeys, offlineAuthQueries, offlineAuthQueryKeys, useAuth, useCanCreate, useCanDelete, useCanEdit, useCanShare, useCanView, useInvalidatePermission, usePermission, usePermissionCheck, usePermissionLoading, usePermissionsBatch, useSetupAuth } from './hooks.js';
+export { AuthProvider, AuthProviderProps, EntityPermissionContextValue, OfflineAuthProvider, OfflineAuthProviderProps, PermissionContextValue, PermissionProvider, entityPermissionContext, permissionContext, usePermissions } from './context.js';
 export { P as Profile, a as ProfileStatus, S as SetupAuthContext, b as SetupAuthContextProviderProps, s as setupAuthContext } from '../setupAuthContext-B76nbIP6.js';
-export { AuthProvider, AuthProviderProps, EntityPermissionContextValue, PermissionContextValue, PermissionProvider, entityPermissionContext, permissionContext, usePermissions } from './context.js';
-export { U as UserMetadataContextType, e as UserMetadataInsert, f as UserMetadataProvider, g as UserMetadataRow, h as UserMetadataUpdate, u as useSetUserMetadata, a as useUserMetadata, b as useUserMetadataState, c as useUserMetadataValue, d as userMetadataContext } from '../UserMetadataContext-DntmpK41.js';
 export { hasAccess, hasAllAccess, hasAllEntityAccess, hasAnyAccess, hasAnyEntityAccess, hasEntityAccess, isEntityAccessDenied, isPermissionLoaded } from './guards.js';
 export { E as EntityAccessRecord, a as EntityAction, b as EntityPermissionCheck, c as EntityPermissionLevel, d as EntityType, P as PermissionEffect } from '../EntityPermissions-DwFt4tUd.js';
-import '@supabase/supabase-js';
-import 'react';
 import 'react/jsx-runtime';
-import '../useSupabase-DvWVuHHE.js';
+import 'react';
+import '@supabase/supabase-js';
+import '../useSupabase-DSZNeXnF.js';
 import '@supabase/supabase-js/dist/module/lib/types.js';

package/dist/auth/index.js

@@ -1,18 +1,34 @@
-import "../chunk-NSIAAYW3.js";
+import "../chunk-6KN7KLEG.js";
 import {
-  useAuth,
-  useCanCreate,
+  OfflineAuthProvider,
+  SimpleAuthProvider,
+  getPermissionLevel,
+  hasResourceAccess,
   useCanDelete,
   useCanEdit,
   useCanShare,
   useCanView,
+  useRequireAuth,
+  useResourceAccess,
+  useSimpleAuth
+} from "../chunk-5HJLTYRA.js";
+import {
+  extractAccessKeys,
+  offlineAuthQueries,
+  offlineAuthQueryKeys,
+  useAuth,
+  useCanCreate,
+  useCanDelete as useCanDelete2,
+  useCanEdit as useCanEdit2,
+  useCanShare as useCanShare2,
+  useCanView as useCanView2,
   useInvalidatePermission,
   usePermission,
   usePermissionCheck,
   usePermissionLoading,
   usePermissionsBatch,
   useSetupAuth
-} from "../chunk-5BLKZUKM.js";
+} from "../chunk-MREERKQU.js";
 import {
   AuthProvider,
   PermissionProvider,
@@ -26,8 +42,8 @@ import {
   useUserMetadataState,
   useUserMetadataValue,
   userMetadataContext
-} from "../chunk-WX4ABYIF.js";
-import "../chunk-VGEMLNNM.js";
+} from "../chunk-67HMVGV7.js";
+import "../chunk-UBHORKBS.js";
 import {
   hasAccess,
   hasAllAccess,
@@ -37,43 +53,55 @@ import {
   hasEntityAccess,
   isEntityAccessDenied,
   isPermissionLoaded
-} from "../chunk-HAWJTZCK.js";
-import "../chunk-GC3TBUWE.js";
+} from "../chunk-RT4O5H2E.js";
 import "../chunk-J4ZVCXZ4.js";
-import "../chunk-OQ7U6EQ3.js";
-import "../chunk-H6365JPC.js";
-import "../chunk-3PJTNH2L.js";
-import "../chunk-5EFDS7SR.js";
-import "../chunk-P4UZ7IXC.js";
+import "../chunk-YUX6RGLZ.js";
+import "../chunk-AKIRHA4Q.js";
+import "../chunk-DMVUEJG2.js";
+import "../chunk-7D4SUZUM.js";
 export {
   AuthProvider,
+  OfflineAuthProvider,
   PermissionProvider,
+  SimpleAuthProvider,
   UserMetadataProvider,
   entityPermissionContext,
+  extractAccessKeys,
+  getPermissionLevel,
   hasAccess,
   hasAllAccess,
   hasAllEntityAccess,
   hasAnyAccess,
   hasAnyEntityAccess,
   hasEntityAccess,
+  hasResourceAccess,
   isEntityAccessDenied,
   isPermissionLoaded,
+  offlineAuthQueries,
+  offlineAuthQueryKeys,
   permissionContext,
   setupAuthContext,
   useAuth,
   useCanCreate,
-  useCanDelete,
-  useCanEdit,
-  useCanShare,
-  useCanView,
+  useCanDelete2 as useCanDelete,
+  useCanEdit2 as useCanEdit,
+  useCanShare2 as useCanShare,
+  useCanView2 as useCanView,
   useInvalidatePermission,
   usePermission,
   usePermissionCheck,
   usePermissionLoading,
   usePermissions,
   usePermissionsBatch,
+  useRequireAuth,
+  useResourceAccess,
   useSetUserMetadata,
   useSetupAuth,
+  useSimpleAuth,
+  useCanDelete as useSimpleCanDelete,
+  useCanEdit as useSimpleCanEdit,
+  useCanShare as useSimpleCanShare,
+  useCanView as useSimpleCanView,
   useUserMetadata,
   useUserMetadataState,
   useUserMetadataValue,

package/dist/chunk-5HJLTYRA.js

@@ -0,0 +1,355 @@
+// src/auth/context/SimpleAuthProvider.tsx
+import { c as _c } from "react/compiler-runtime";
+import { createContext, useContext } from "react";
+import { jsx } from "react/jsx-runtime";
+var SimpleAuthContext = createContext(null);
+function matchesAccessPattern(pattern, requestedKey) {
+  if (pattern === requestedKey) return true;
+  if (pattern === "*:*:*") return true;
+  const patternParts = pattern.split(":");
+  const keyParts = requestedKey.split(":");
+  if (patternParts.length !== keyParts.length) {
+    return false;
+  }
+  for (let i = 0; i < patternParts.length; i++) {
+    const patternPart = patternParts[i];
+    const keyPart = keyParts[i];
+    if (patternPart === "*") continue;
+    if (patternPart !== keyPart) return false;
+  }
+  return true;
+}
+function checkAccess(accessKeys, requestedKey) {
+  if (!requestedKey) return true;
+  if (!accessKeys || accessKeys.length === 0) return false;
+  return accessKeys.some((pattern) => matchesAccessPattern(pattern, requestedKey));
+}
+function getPermissionLevel(action) {
+  switch (action.toLowerCase()) {
+    case "view":
+    case "read":
+      return 1;
+    case "edit":
+    case "write":
+      return 2;
+    case "admin":
+    case "delete":
+    case "share":
+      return 3;
+    default:
+      return 0;
+  }
+}
+function hasResourceAccess(accessKeys, resourceType, resourceId, requiredAction) {
+  if (!accessKeys || accessKeys.length === 0) return false;
+  if (accessKeys.includes("*:*:*")) return true;
+  const requiredLevel = getPermissionLevel(requiredAction);
+  for (const key of accessKeys) {
+    const parts = key.split(":");
+    if (parts.length !== 3) continue;
+    const [keyType, keyId, keyAction] = parts;
+    if (keyType !== "*" && keyType.toLowerCase() !== resourceType.toLowerCase()) {
+      continue;
+    }
+    if (keyId !== "*" && keyId !== resourceId) {
+      continue;
+    }
+    const grantedLevel = getPermissionLevel(keyAction);
+    if (grantedLevel >= requiredLevel) {
+      return true;
+    }
+  }
+  return false;
+}
+function SimpleAuthProvider(t0) {
+  const $ = _c(20);
+  const {
+    children,
+    user,
+    profile,
+    userAccess,
+    isLoading: t1,
+    onSignOut
+  } = t0;
+  const isLoading = t1 === void 0 ? false : t1;
+  let t2;
+  bb0: {
+    if (!userAccess) {
+      let t33;
+      if ($[0] === /* @__PURE__ */ Symbol.for("react.memo_cache_sentinel")) {
+        t33 = [];
+        $[0] = t33;
+      } else {
+        t33 = $[0];
+      }
+      t2 = t33;
+      break bb0;
+    }
+    let t32;
+    if ($[1] !== userAccess) {
+      t32 = userAccess.map(_temp).filter(Boolean);
+      $[1] = userAccess;
+      $[2] = t32;
+    } else {
+      t32 = $[2];
+    }
+    t2 = t32;
+  }
+  const accessKeys = t2;
+  const profileStatus = profile?.status;
+  const isArchived = profileStatus === "archived";
+  const isSuspended = profileStatus === "suspended";
+  let t3;
+  if ($[3] !== accessKeys || $[4] !== isArchived || $[5] !== isSuspended) {
+    t3 = (requestedKey) => {
+      if (isArchived || isSuspended) {
+        return false;
+      }
+      return checkAccess(accessKeys, requestedKey);
+    };
+    $[3] = accessKeys;
+    $[4] = isArchived;
+    $[5] = isSuspended;
+    $[6] = t3;
+  } else {
+    t3 = $[6];
+  }
+  const hasAccess = t3;
+  let t4;
+  if ($[7] !== accessKeys || $[8] !== hasAccess || $[9] !== isArchived || $[10] !== isLoading || $[11] !== isSuspended || $[12] !== onSignOut || $[13] !== profile || $[14] !== profileStatus || $[15] !== user) {
+    t4 = {
+      user,
+      profile,
+      accessKeys,
+      isLoading,
+      isArchived,
+      isSuspended,
+      profileStatus,
+      hasAccess,
+      signOut: onSignOut
+    };
+    $[7] = accessKeys;
+    $[8] = hasAccess;
+    $[9] = isArchived;
+    $[10] = isLoading;
+    $[11] = isSuspended;
+    $[12] = onSignOut;
+    $[13] = profile;
+    $[14] = profileStatus;
+    $[15] = user;
+    $[16] = t4;
+  } else {
+    t4 = $[16];
+  }
+  const value = t4;
+  let t5;
+  if ($[17] !== children || $[18] !== value) {
+    t5 = /* @__PURE__ */ jsx(SimpleAuthContext.Provider, { value, children });
+    $[17] = children;
+    $[18] = value;
+    $[19] = t5;
+  } else {
+    t5 = $[19];
+  }
+  return t5;
+}
+function _temp(ua) {
+  return ua.accessKey;
+}
+function useSimpleAuth() {
+  const context = useContext(SimpleAuthContext);
+  if (!context) {
+    throw new Error("useSimpleAuth must be used within a SimpleAuthProvider");
+  }
+  return context;
+}
+function useRequireAuth() {
+  const auth = useSimpleAuth();
+  if (!auth.user) {
+    throw new Error("User must be authenticated. Use useSimpleAuth() for nullable user.");
+  }
+  return auth;
+}
+function useResourceAccess(resourceType, resourceId, requiredAction) {
+  const $ = _c(5);
+  const {
+    accessKeys,
+    isArchived,
+    isSuspended
+  } = useSimpleAuth();
+  let t0;
+  bb0: {
+    if (resourceId === void 0 || resourceId === null) {
+      t0 = false;
+      break bb0;
+    }
+    if (isArchived || isSuspended) {
+      t0 = false;
+      break bb0;
+    }
+    const t1 = String(resourceId);
+    let t2;
+    if ($[0] !== accessKeys || $[1] !== requiredAction || $[2] !== resourceType || $[3] !== t1) {
+      t2 = hasResourceAccess(accessKeys, resourceType, t1, requiredAction);
+      $[0] = accessKeys;
+      $[1] = requiredAction;
+      $[2] = resourceType;
+      $[3] = t1;
+      $[4] = t2;
+    } else {
+      t2 = $[4];
+    }
+    t0 = t2;
+  }
+  return t0;
+}
+function useCanView(resourceType, resourceId) {
+  return useResourceAccess(resourceType, resourceId, "view");
+}
+function useCanEdit(resourceType, resourceId) {
+  return useResourceAccess(resourceType, resourceId, "edit");
+}
+function useCanDelete(resourceType, resourceId) {
+  return useResourceAccess(resourceType, resourceId, "admin");
+}
+function useCanShare(resourceType, resourceId) {
+  return useResourceAccess(resourceType, resourceId, "admin");
+}
+
+// src/auth/context/OfflineAuthProvider.tsx
+import { useCallback as useCallback2, useEffect, useState } from "react";
+import { jsx as jsx2 } from "react/jsx-runtime";
+var PROFILE_QUERY = `
+  SELECT id, email, firstName, lastName, fullName, status, profilePath
+  FROM Profile
+  WHERE id = ?
+  LIMIT 1
+`;
+var USER_ACCESS_QUERY = `
+  SELECT id, userId, accessKey
+  FROM UserAccess
+  WHERE userId = ?
+`;
+function OfflineAuthProvider({
+  children,
+  db,
+  supabase,
+  isDbReady = true
+}) {
+  const [user, setUser] = useState(null);
+  const [profile, setProfile] = useState(null);
+  const [userAccess, setUserAccess] = useState(null);
+  const [isLoadingUser, setIsLoadingUser] = useState(true);
+  const [isLoadingData, setIsLoadingData] = useState(true);
+  useEffect(() => {
+    let mounted = true;
+    async function loadUser() {
+      try {
+        const {
+          data
+        } = await supabase.auth.getSession();
+        if (mounted) {
+          setUser(data.session?.user ?? null);
+          setIsLoadingUser(false);
+        }
+      } catch (error) {
+        console.error("[OfflineAuthProvider] Error loading user:", error);
+        if (mounted) {
+          setUser(null);
+          setIsLoadingUser(false);
+        }
+      }
+    }
+    loadUser();
+    const {
+      data: {
+        subscription
+      }
+    } = supabase.auth.onAuthStateChange((_event, session) => {
+      if (mounted) {
+        setUser(session?.user ?? null);
+      }
+    });
+    return () => {
+      mounted = false;
+      subscription.unsubscribe();
+    };
+  }, [supabase]);
+  useEffect(() => {
+    if (!db || !isDbReady || !user?.id) {
+      setProfile(null);
+      setUserAccess(null);
+      setIsLoadingData(false);
+      return;
+    }
+    let mounted_0 = true;
+    const abortController = new AbortController();
+    async function loadData() {
+      try {
+        setIsLoadingData(true);
+        const [profileResult, accessResult] = await Promise.all([db.getOptional(PROFILE_QUERY, [user.id]), db.getAll(USER_ACCESS_QUERY, [user.id])]);
+        if (mounted_0) {
+          setProfile(profileResult);
+          setUserAccess(accessResult);
+          setIsLoadingData(false);
+        }
+      } catch (error_0) {
+        console.error("[OfflineAuthProvider] Error loading auth data:", error_0);
+        if (mounted_0) {
+          setIsLoadingData(false);
+        }
+      }
+    }
+    loadData();
+    db.watch(PROFILE_QUERY, [user.id], {
+      onResult: (result) => {
+        if (mounted_0) {
+          const rows = result.rows?._array || [];
+          setProfile(rows[0] || null);
+        }
+      }
+    }, {
+      signal: abortController.signal
+    });
+    db.watch(USER_ACCESS_QUERY, [user.id], {
+      onResult: (result_0) => {
+        if (mounted_0) {
+          const rows_0 = result_0.rows?._array || [];
+          setUserAccess(rows_0);
+        }
+      }
+    }, {
+      signal: abortController.signal
+    });
+    return () => {
+      mounted_0 = false;
+      abortController.abort();
+    };
+  }, [db, isDbReady, user?.id]);
+  const handleSignOut = useCallback2(async () => {
+    const {
+      error: error_1
+    } = await supabase.auth.signOut();
+    if (error_1) {
+      console.error("[OfflineAuthProvider] Sign out error:", error_1);
+      throw error_1;
+    }
+  }, [supabase]);
+  const isLoading = isLoadingUser || !!user && isLoadingData;
+  return /* @__PURE__ */ jsx2(SimpleAuthProvider, { user, profile, userAccess, isLoading, onSignOut: handleSignOut, children });
+}
+
+export {
+  getPermissionLevel,
+  hasResourceAccess,
+  SimpleAuthProvider,
+  useSimpleAuth,
+  useRequireAuth,
+  useResourceAccess,
+  useCanView,
+  useCanEdit,
+  useCanDelete,
+  useCanShare,
+  OfflineAuthProvider
+};
+//# sourceMappingURL=chunk-5HJLTYRA.js.map

package/dist/chunk-5HJLTYRA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/auth/context/SimpleAuthProvider.tsx","../src/auth/context/OfflineAuthProvider.tsx"],"sourcesContent":["import { c as _c } from \"react/compiler-runtime\";\n/**\n * SimpleAuthProvider - Dead simple auth that works offline\n *\n * This provider is designed for offline-first apps using PowerSync.\n * All permission data is synced locally, no RPC calls needed.\n *\n * Features:\n * - Reads Profile from PowerSync (local SQLite)\n * - Reads UserAccess from PowerSync (local SQLite)\n * - Simple hasAccess() function with wildcard matching\n * - No batching, no caching, no TTL, no real-time subscriptions\n * - Works 100% offline\n */\n\nimport { ReactNode, useCallback, useMemo, createContext, useContext } from \"react\";\nimport { User } from \"@supabase/supabase-js\";\n\n// ─── Types ───────────────────────────────────────────────────────────────────\n\nexport type ProfileStatus = \"active\" | \"archived\" | \"suspended\";\nexport interface SimpleProfile {\n  id: string;\n  email?: string | null;\n  firstName?: string | null;\n  lastName?: string | null;\n  fullName?: string | null;\n  status?: ProfileStatus | null;\n  profilePath?: string | null;\n  [key: string]: unknown;\n}\nexport interface SimpleUserAccess {\n  id: string;\n  userId: string;\n  accessKey: string;\n}\nexport interface SimpleAuthContextValue {\n  /** Supabase user (from auth session) */\n  user: User | null;\n  /** Profile from PowerSync (local SQLite) */\n  profile: SimpleProfile | null;\n  /** Access keys from PowerSync (local SQLite) */\n  accessKeys: string[];\n  /** Whether auth data is loading */\n  isLoading: boolean;\n  /** Whether profile is archived */\n  isArchived: boolean;\n  /** Whether profile is suspended */\n  isSuspended: boolean;\n  /** Profile status */\n  profileStatus: ProfileStatus | undefined;\n  /**\n   * Check if user has access to a resource.\n   * Supports wildcards: *:*:*, project:*:read, project:123:*\n   *\n   * @example\n   * hasAccess(\"admin\") // exact match\n   * hasAccess(\"project:123:read\") // check specific resource\n   */\n  hasAccess: (accessKey: string) => boolean;\n  /** Sign out the user */\n  signOut: () => Promise<void>;\n}\n\n// ─── Context ─────────────────────────────────────────────────────────────────\n\nconst SimpleAuthContext = createContext<SimpleAuthContextValue | null>(null);\n\n// ─── Wildcard Matching ───────────────────────────────────────────────────────\n\n/**\n * Check if an access key pattern matches a requested key.\n * Supports wildcards (*) in any segment.\n *\n * Pattern examples:\n * - \"*:*:*\" matches everything (super admin)\n * - \"project:*:read\" matches project:123:read, project:456:read\n * - \"project:123:*\" matches project:123:read, project:123:write\n * - \"project:123:read\" exact match only\n */\nfunction matchesAccessPattern(pattern: string, requestedKey: string): boolean {\n  // Exact match\n  if (pattern === requestedKey) return true;\n\n  // Super admin - matches everything\n  if (pattern === \"*:*:*\") return true;\n\n  // Split into segments for wildcard matching\n  const patternParts = pattern.split(\":\");\n  const keyParts = requestedKey.split(\":\");\n\n  // Different number of segments - can't match\n  // (unless pattern is shorter and last part is *)\n  if (patternParts.length !== keyParts.length) {\n    return false;\n  }\n\n  // Check each segment\n  for (let i = 0; i < patternParts.length; i++) {\n    const patternPart = patternParts[i];\n    const keyPart = keyParts[i];\n\n    // Wildcard matches anything\n    if (patternPart === \"*\") continue;\n\n    // Must match exactly\n    if (patternPart !== keyPart) return false;\n  }\n  return true;\n}\n\n/**\n * Check if any of the user's access keys match the requested key.\n */\nfunction checkAccess(accessKeys: string[], requestedKey: string): boolean {\n  // Empty key = no restriction\n  if (!requestedKey) return true;\n\n  // No access keys = no access\n  if (!accessKeys || accessKeys.length === 0) return false;\n  return accessKeys.some(pattern => matchesAccessPattern(pattern, requestedKey));\n}\n\n// ─── Permission Level Helpers ────────────────────────────────────────────────\n\n/**\n * Maps permission action strings to numeric levels for comparison.\n * Higher numbers grant more access.\n */\nexport function getPermissionLevel(action: string): number {\n  switch (action.toLowerCase()) {\n    case \"view\":\n    case \"read\":\n      return 1;\n    case \"edit\":\n    case \"write\":\n      return 2;\n    case \"admin\":\n    case \"delete\":\n    case \"share\":\n      return 3;\n    default:\n      return 0;\n  }\n}\n\n/**\n * Check if a user has at least the required permission level for a resource.\n * Checks all matching access keys and returns true if any grants sufficient access.\n *\n * @param accessKeys - User's access keys\n * @param resourceType - e.g., \"project\", \"client\", \"database\"\n * @param resourceId - The ID of the resource\n * @param requiredAction - e.g., \"read\", \"edit\", \"admin\"\n */\nexport function hasResourceAccess(accessKeys: string[], resourceType: string, resourceId: string, requiredAction: string): boolean {\n  if (!accessKeys || accessKeys.length === 0) return false;\n\n  // Super admin bypasses all checks\n  if (accessKeys.includes(\"*:*:*\")) return true;\n  const requiredLevel = getPermissionLevel(requiredAction);\n\n  // Check each access key\n  for (const key of accessKeys) {\n    const parts = key.split(\":\");\n    if (parts.length !== 3) continue;\n    const [keyType, keyId, keyAction] = parts;\n\n    // Check if type matches (or wildcard)\n    if (keyType !== \"*\" && keyType.toLowerCase() !== resourceType.toLowerCase()) {\n      continue;\n    }\n\n    // Check if ID matches (or wildcard)\n    if (keyId !== \"*\" && keyId !== resourceId) {\n      continue;\n    }\n\n    // Check permission level\n    const grantedLevel = getPermissionLevel(keyAction);\n    if (grantedLevel >= requiredLevel) {\n      return true;\n    }\n  }\n  return false;\n}\n\n// ─── Provider Props ──────────────────────────────────────────────────────────\n\nexport interface SimpleAuthProviderProps {\n  children: ReactNode;\n  /** Supabase user from auth session */\n  user: User | null;\n  /** Profile from PowerSync query */\n  profile: SimpleProfile | null;\n  /** User access records from PowerSync query */\n  userAccess: SimpleUserAccess[] | null;\n  /** Whether the data is loading */\n  isLoading?: boolean;\n  /** Sign out function */\n  onSignOut: () => Promise<void>;\n}\n\n// ─── Provider Component ──────────────────────────────────────────────────────\n\nexport function SimpleAuthProvider(t0) {\n  const $ = _c(20);\n  const {\n    children,\n    user,\n    profile,\n    userAccess,\n    isLoading: t1,\n    onSignOut\n  } = t0;\n  const isLoading = t1 === undefined ? false : t1;\n  let t2;\n  bb0: {\n    if (!userAccess) {\n      let t3;\n      if ($[0] === Symbol.for(\"react.memo_cache_sentinel\")) {\n        t3 = [];\n        $[0] = t3;\n      } else {\n        t3 = $[0];\n      }\n      t2 = t3;\n      break bb0;\n    }\n    let t3;\n    if ($[1] !== userAccess) {\n      t3 = userAccess.map(_temp).filter(Boolean);\n      $[1] = userAccess;\n      $[2] = t3;\n    } else {\n      t3 = $[2];\n    }\n    t2 = t3;\n  }\n  const accessKeys = t2;\n  const profileStatus = profile?.status as ProfileStatus | undefined;\n  const isArchived = profileStatus === \"archived\";\n  const isSuspended = profileStatus === \"suspended\";\n  let t3;\n  if ($[3] !== accessKeys || $[4] !== isArchived || $[5] !== isSuspended) {\n    t3 = requestedKey => {\n      if (isArchived || isSuspended) {\n        return false;\n      }\n      return checkAccess(accessKeys, requestedKey);\n    };\n    $[3] = accessKeys;\n    $[4] = isArchived;\n    $[5] = isSuspended;\n    $[6] = t3;\n  } else {\n    t3 = $[6];\n  }\n  const hasAccess = t3;\n  let t4;\n  if ($[7] !== accessKeys || $[8] !== hasAccess || $[9] !== isArchived || $[10] !== isLoading || $[11] !== isSuspended || $[12] !== onSignOut || $[13] !== profile || $[14] !== profileStatus || $[15] !== user) {\n    t4 = {\n      user,\n      profile,\n      accessKeys,\n      isLoading,\n      isArchived,\n      isSuspended,\n      profileStatus,\n      hasAccess,\n      signOut: onSignOut\n    };\n    $[7] = accessKeys;\n    $[8] = hasAccess;\n    $[9] = isArchived;\n    $[10] = isLoading;\n    $[11] = isSuspended;\n    $[12] = onSignOut;\n    $[13] = profile;\n    $[14] = profileStatus;\n    $[15] = user;\n    $[16] = t4;\n  } else {\n    t4 = $[16];\n  }\n  const value = t4;\n  let t5;\n  if ($[17] !== children || $[18] !== value) {\n    t5 = <SimpleAuthContext.Provider value={value}>{children}</SimpleAuthContext.Provider>;\n    $[17] = children;\n    $[18] = value;\n    $[19] = t5;\n  } else {\n    t5 = $[19];\n  }\n  return t5;\n}\n\n// ─── Hook ────────────────────────────────────────────────────────────────────\n\n/**\n * Hook to access auth state and hasAccess function.\n *\n * @example\n * ```tsx\n * function MyComponent() {\n *   const { user, profile, hasAccess, isLoading } = useSimpleAuth();\n *\n *   if (isLoading) return <Loading />;\n *   if (!user) return <Login />;\n *\n *   // Check simple access\n *   if (hasAccess(\"admin\")) {\n *     return <AdminPanel />;\n *   }\n *\n *   // Check resource access\n *   if (hasAccess(\"project:123:edit\")) {\n *     return <Editor />;\n *   }\n *\n *   return <ReadOnlyView />;\n * }\n * ```\n */\nfunction _temp(ua) {\n  return ua.accessKey;\n}\nexport function useSimpleAuth() {\n  const context = useContext(SimpleAuthContext);\n  if (!context) {\n    throw new Error(\"useSimpleAuth must be used within a SimpleAuthProvider\");\n  }\n  return context;\n}\n\n/**\n * Hook that requires authentication.\n * Throws if user is not authenticated.\n *\n * @example\n * ```tsx\n * function ProtectedComponent() {\n *   const { user, hasAccess } = useRequireAuth();\n *   // user is guaranteed to be non-null here\n * }\n * ```\n */\nexport function useRequireAuth() {\n  const auth = useSimpleAuth();\n  if (!auth.user) {\n    throw new Error(\"User must be authenticated. Use useSimpleAuth() for nullable user.\");\n  }\n  return auth as SimpleAuthContextValue & {\n    user: User;\n  };\n}\n\n// ─── Utility Hook for Resource Access ────────────────────────────────────────\n\n/**\n * Hook to check resource-level access with permission levels.\n *\n * @example\n * ```tsx\n * function ProjectEditor({ projectId }: { projectId: string }) {\n *   const canEdit = useResourceAccess(\"project\", projectId, \"edit\");\n *   const canDelete = useResourceAccess(\"project\", projectId, \"admin\");\n *\n *   return (\n *     <div>\n *       <button disabled={!canEdit}>Edit</button>\n *       <button disabled={!canDelete}>Delete</button>\n *     </div>\n *   );\n * }\n * ```\n */\nexport function useResourceAccess(resourceType, resourceId, requiredAction) {\n  const $ = _c(5);\n  const {\n    accessKeys,\n    isArchived,\n    isSuspended\n  } = useSimpleAuth();\n  let t0;\n  bb0: {\n    if (resourceId === undefined || resourceId === null) {\n      t0 = false;\n      break bb0;\n    }\n    if (isArchived || isSuspended) {\n      t0 = false;\n      break bb0;\n    }\n    const t1 = String(resourceId);\n    let t2;\n    if ($[0] !== accessKeys || $[1] !== requiredAction || $[2] !== resourceType || $[3] !== t1) {\n      t2 = hasResourceAccess(accessKeys, resourceType, t1, requiredAction);\n      $[0] = accessKeys;\n      $[1] = requiredAction;\n      $[2] = resourceType;\n      $[3] = t1;\n      $[4] = t2;\n    } else {\n      t2 = $[4];\n    }\n    t0 = t2;\n  }\n  return t0;\n}\n\n// ─── Convenience Hooks ───────────────────────────────────────────────────────\n\nexport function useCanView(resourceType, resourceId) {\n  return useResourceAccess(resourceType, resourceId, \"view\");\n}\nexport function useCanEdit(resourceType, resourceId) {\n  return useResourceAccess(resourceType, resourceId, \"edit\");\n}\nexport function useCanDelete(resourceType, resourceId) {\n  return useResourceAccess(resourceType, resourceId, \"admin\");\n}\nexport function useCanShare(resourceType, resourceId) {\n  return useResourceAccess(resourceType, resourceId, \"admin\");\n}","/**\n * OfflineAuthProvider - Pre-built auth provider for PowerSync apps\n *\n * This provider reads Profile and UserAccess from PowerSync (local SQLite)\n * and provides the SimpleAuthProvider context.\n *\n * Works 100% offline once data is synced.\n *\n * @example\n * ```tsx\n * import { OfflineAuthProvider } from \"@pol-studios/db\";\n * import { usePowerSync } from \"@pol-studios/powersync\";\n *\n * function App() {\n *   const db = usePowerSync();\n *   const supabase = useSupabase();\n *\n *   return (\n *     <OfflineAuthProvider db={db} supabase={supabase}>\n *       <MyApp />\n *     </OfflineAuthProvider>\n *   );\n * }\n * ```\n */\n\nimport { ReactNode, useCallback, useEffect, useMemo, useState } from \"react\";\nimport { User } from \"@supabase/supabase-js\";\nimport { SimpleAuthProvider, type SimpleProfile, type SimpleUserAccess } from \"./SimpleAuthProvider\";\n\n// ─── Types ───────────────────────────────────────────────────────────────────\n\ninterface PowerSyncDB {\n  getAll: <T>(sql: string, params?: any[]) => Promise<T[]>;\n  getOptional: <T>(sql: string, params?: any[]) => Promise<T | null>;\n  watch: (sql: string, params: any[], options: {\n    onResult: (result: any) => void;\n  }, abortOptions?: {\n    signal: AbortSignal;\n  }) => void;\n}\ninterface SupabaseClient {\n  auth: {\n    getUser: () => Promise<{\n      data: {\n        user: User | null;\n      };\n      error: any;\n    }>;\n    getSession: () => Promise<{\n      data: {\n        session: {\n          user: User;\n        } | null;\n      };\n      error: any;\n    }>;\n    signOut: () => Promise<{\n      error: any;\n    }>;\n    onAuthStateChange: (callback: (event: string, session: any) => void) => {\n      data: {\n        subscription: {\n          unsubscribe: () => void;\n        };\n      };\n    };\n  };\n}\nexport interface OfflineAuthProviderProps {\n  children: ReactNode;\n  /** PowerSync database instance */\n  db: PowerSyncDB | null;\n  /** Supabase client for auth */\n  supabase: SupabaseClient;\n  /** Whether PowerSync is ready */\n  isDbReady?: boolean;\n}\n\n// ─── SQL Queries ─────────────────────────────────────────────────────────────\n\nconst PROFILE_QUERY = `\n  SELECT id, email, firstName, lastName, fullName, status, profilePath\n  FROM Profile\n  WHERE id = ?\n  LIMIT 1\n`;\nconst USER_ACCESS_QUERY = `\n  SELECT id, userId, accessKey\n  FROM UserAccess\n  WHERE userId = ?\n`;\n\n// ─── Provider Component ──────────────────────────────────────────────────────\n\nexport function OfflineAuthProvider({\n  children,\n  db,\n  supabase,\n  isDbReady = true\n}: OfflineAuthProviderProps) {\n  // ─── State ───────────────────────────────────────────────────────────────────\n  const [user, setUser] = useState<User | null>(null);\n  const [profile, setProfile] = useState<SimpleProfile | null>(null);\n  const [userAccess, setUserAccess] = useState<SimpleUserAccess[] | null>(null);\n  const [isLoadingUser, setIsLoadingUser] = useState(true);\n  const [isLoadingData, setIsLoadingData] = useState(true);\n\n  // ─── Auth State ──────────────────────────────────────────────────────────────\n\n  // Get initial user\n  useEffect(() => {\n    let mounted = true;\n    async function loadUser() {\n      try {\n        const {\n          data\n        } = await supabase.auth.getSession();\n        if (mounted) {\n          setUser(data.session?.user ?? null);\n          setIsLoadingUser(false);\n        }\n      } catch (error) {\n        console.error(\"[OfflineAuthProvider] Error loading user:\", error);\n        if (mounted) {\n          setUser(null);\n          setIsLoadingUser(false);\n        }\n      }\n    }\n    loadUser();\n\n    // Subscribe to auth changes\n    const {\n      data: {\n        subscription\n      }\n    } = supabase.auth.onAuthStateChange((_event, session) => {\n      if (mounted) {\n        setUser(session?.user ?? null);\n      }\n    });\n    return () => {\n      mounted = false;\n      subscription.unsubscribe();\n    };\n  }, [supabase]);\n\n  // ─── Profile & UserAccess from PowerSync ─────────────────────────────────────\n\n  // Load profile and user access when user or db changes\n  useEffect(() => {\n    if (!db || !isDbReady || !user?.id) {\n      setProfile(null);\n      setUserAccess(null);\n      setIsLoadingData(false);\n      return;\n    }\n    let mounted_0 = true;\n    const abortController = new AbortController();\n\n    // Initial load\n    async function loadData() {\n      try {\n        setIsLoadingData(true);\n        const [profileResult, accessResult] = await Promise.all([db!.getOptional<SimpleProfile>(PROFILE_QUERY, [user!.id]), db!.getAll<SimpleUserAccess>(USER_ACCESS_QUERY, [user!.id])]);\n        if (mounted_0) {\n          setProfile(profileResult);\n          setUserAccess(accessResult);\n          setIsLoadingData(false);\n        }\n      } catch (error_0) {\n        console.error(\"[OfflineAuthProvider] Error loading auth data:\", error_0);\n        if (mounted_0) {\n          setIsLoadingData(false);\n        }\n      }\n    }\n    loadData();\n\n    // Watch for profile changes\n    db.watch(PROFILE_QUERY, [user.id], {\n      onResult: result => {\n        if (mounted_0) {\n          const rows = result.rows?._array || [];\n          setProfile(rows[0] || null);\n        }\n      }\n    }, {\n      signal: abortController.signal\n    });\n\n    // Watch for user access changes\n    db.watch(USER_ACCESS_QUERY, [user.id], {\n      onResult: result_0 => {\n        if (mounted_0) {\n          const rows_0 = result_0.rows?._array || [];\n          setUserAccess(rows_0);\n        }\n      }\n    }, {\n      signal: abortController.signal\n    });\n    return () => {\n      mounted_0 = false;\n      abortController.abort();\n    };\n  }, [db, isDbReady, user?.id]);\n\n  // ─── Sign Out ────────────────────────────────────────────────────────────────\n\n  const handleSignOut = useCallback(async () => {\n    const {\n      error: error_1\n    } = await supabase.auth.signOut();\n    if (error_1) {\n      console.error(\"[OfflineAuthProvider] Sign out error:\", error_1);\n      throw error_1;\n    }\n  }, [supabase]);\n\n  // ─── Loading State ───────────────────────────────────────────────────────────\n\n  const isLoading = isLoadingUser || !!user && isLoadingData;\n\n  // ─── Render ──────────────────────────────────────────────────────────────────\n\n  return <SimpleAuthProvider user={user} profile={profile} userAccess={userAccess} isLoading={isLoading} onSignOut={handleSignOut}>\n      {children}\n    </SimpleAuthProvider>;\n}"],"mappings":";AAAA,SAAS,KAAK,UAAU;AAexB,SAA0C,eAAe,kBAAkB;AAiRlE;AA9NT,IAAM,oBAAoB,cAA6C,IAAI;AAc3E,SAAS,qBAAqB,SAAiB,cAA+B;AAE5E,MAAI,YAAY,aAAc,QAAO;AAGrC,MAAI,YAAY,QAAS,QAAO;AAGhC,QAAM,eAAe,QAAQ,MAAM,GAAG;AACtC,QAAM,WAAW,aAAa,MAAM,GAAG;AAIvC,MAAI,aAAa,WAAW,SAAS,QAAQ;AAC3C,WAAO;AAAA,EACT;AAGA,WAAS,IAAI,GAAG,IAAI,aAAa,QAAQ,KAAK;AAC5C,UAAM,cAAc,aAAa,CAAC;AAClC,UAAM,UAAU,SAAS,CAAC;AAG1B,QAAI,gBAAgB,IAAK;AAGzB,QAAI,gBAAgB,QAAS,QAAO;AAAA,EACtC;AACA,SAAO;AACT;AAKA,SAAS,YAAY,YAAsB,cAA+B;AAExE,MAAI,CAAC,aAAc,QAAO;AAG1B,MAAI,CAAC,cAAc,WAAW,WAAW,EAAG,QAAO;AACnD,SAAO,WAAW,KAAK,aAAW,qBAAqB,SAAS,YAAY,CAAC;AAC/E;AAQO,SAAS,mBAAmB,QAAwB;AACzD,UAAQ,OAAO,YAAY,GAAG;AAAA,IAC5B,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAWO,SAAS,kBAAkB,YAAsB,cAAsB,YAAoB,gBAAiC;AACjI,MAAI,CAAC,cAAc,WAAW,WAAW,EAAG,QAAO;AAGnD,MAAI,WAAW,SAAS,OAAO,EAAG,QAAO;AACzC,QAAM,gBAAgB,mBAAmB,cAAc;AAGvD,aAAW,OAAO,YAAY;AAC5B,UAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,QAAI,MAAM,WAAW,EAAG;AACxB,UAAM,CAAC,SAAS,OAAO,SAAS,IAAI;AAGpC,QAAI,YAAY,OAAO,QAAQ,YAAY,MAAM,aAAa,YAAY,GAAG;AAC3E;AAAA,IACF;AAGA,QAAI,UAAU,OAAO,UAAU,YAAY;AACzC;AAAA,IACF;AAGA,UAAM,eAAe,mBAAmB,SAAS;AACjD,QAAI,gBAAgB,eAAe;AACjC,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAoBO,SAAS,mBAAmB,IAAI;AACrC,QAAM,IAAI,GAAG,EAAE;AACf,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,WAAW;AAAA,IACX;AAAA,EACF,IAAI;AACJ,QAAM,YAAY,OAAO,SAAY,QAAQ;AAC7C,MAAI;AACJ,OAAK;AACH,QAAI,CAAC,YAAY;AACf,UAAIA;AACJ,UAAI,EAAE,CAAC,MAAM,uBAAO,IAAI,2BAA2B,GAAG;AACpD,QAAAA,MAAK,CAAC;AACN,UAAE,CAAC,IAAIA;AAAA,MACT,OAAO;AACL,QAAAA,MAAK,EAAE,CAAC;AAAA,MACV;AACA,WAAKA;AACL,YAAM;AAAA,IACR;AACA,QAAIA;AACJ,QAAI,EAAE,CAAC,MAAM,YAAY;AACvB,MAAAA,MAAK,WAAW,IAAI,KAAK,EAAE,OAAO,OAAO;AACzC,QAAE,CAAC,IAAI;AACP,QAAE,CAAC,IAAIA;AAAA,IACT,OAAO;AACL,MAAAA,MAAK,EAAE,CAAC;AAAA,IACV;AACA,SAAKA;AAAA,EACP;AACA,QAAM,aAAa;AACnB,QAAM,gBAAgB,SAAS;AAC/B,QAAM,aAAa,kBAAkB;AACrC,QAAM,cAAc,kBAAkB;AACtC,MAAI;AACJ,MAAI,EAAE,CAAC,MAAM,cAAc,EAAE,CAAC,MAAM,cAAc,EAAE,CAAC,MAAM,aAAa;AACtE,SAAK,kBAAgB;AACnB,UAAI,cAAc,aAAa;AAC7B,eAAO;AAAA,MACT;AACA,aAAO,YAAY,YAAY,YAAY;AAAA,IAC7C;AACA,MAAE,CAAC,IAAI;AACP,MAAE,CAAC,IAAI;AACP,MAAE,CAAC,IAAI;AACP,MAAE,CAAC,IAAI;AAAA,EACT,OAAO;AACL,SAAK,EAAE,CAAC;AAAA,EACV;AACA,QAAM,YAAY;AAClB,MAAI;AACJ,MAAI,EAAE,CAAC,MAAM,cAAc,EAAE,CAAC,MAAM,aAAa,EAAE,CAAC,MAAM,cAAc,EAAE,EAAE,MAAM,aAAa,EAAE,EAAE,MAAM,eAAe,EAAE,EAAE,MAAM,aAAa,EAAE,EAAE,MAAM,WAAW,EAAE,EAAE,MAAM,iBAAiB,EAAE,EAAE,MAAM,MAAM;AAC7M,SAAK;AAAA,MACH;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,SAAS;AAAA,IACX;AACA,MAAE,CAAC,IAAI;AACP,MAAE,CAAC,IAAI;AACP,MAAE,CAAC,IAAI;AACP,MAAE,EAAE,IAAI;AACR,MAAE,EAAE,IAAI;AACR,MAAE,EAAE,IAAI;AACR,MAAE,EAAE,IAAI;AACR,MAAE,EAAE,IAAI;AACR,MAAE,EAAE,IAAI;AACR,MAAE,EAAE,IAAI;AAAA,EACV,OAAO;AACL,SAAK,EAAE,EAAE;AAAA,EACX;AACA,QAAM,QAAQ;AACd,MAAI;AACJ,MAAI,EAAE,EAAE,MAAM,YAAY,EAAE,EAAE,MAAM,OAAO;AACzC,SAAK,oBAAC,kBAAkB,UAAlB,EAA2B,OAAe,UAAS;AACzD,MAAE,EAAE,IAAI;AACR,MAAE,EAAE,IAAI;AACR,MAAE,EAAE,IAAI;AAAA,EACV,OAAO;AACL,SAAK,EAAE,EAAE;AAAA,EACX;AACA,SAAO;AACT;AA6BA,SAAS,MAAM,IAAI;AACjB,SAAO,GAAG;AACZ;AACO,SAAS,gBAAgB;AAC9B,QAAM,UAAU,WAAW,iBAAiB;AAC5C,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI,MAAM,wDAAwD;AAAA,EAC1E;AACA,SAAO;AACT;AAcO,SAAS,iBAAiB;AAC/B,QAAM,OAAO,cAAc;AAC3B,MAAI,CAAC,KAAK,MAAM;AACd,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACtF;AACA,SAAO;AAGT;AAsBO,SAAS,kBAAkB,cAAc,YAAY,gBAAgB;AAC1E,QAAM,IAAI,GAAG,CAAC;AACd,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,EACF,IAAI,cAAc;AAClB,MAAI;AACJ,OAAK;AACH,QAAI,eAAe,UAAa,eAAe,MAAM;AACnD,WAAK;AACL,YAAM;AAAA,IACR;AACA,QAAI,cAAc,aAAa;AAC7B,WAAK;AACL,YAAM;AAAA,IACR;AACA,UAAM,KAAK,OAAO,UAAU;AAC5B,QAAI;AACJ,QAAI,EAAE,CAAC,MAAM,cAAc,EAAE,CAAC,MAAM,kBAAkB,EAAE,CAAC,MAAM,gBAAgB,EAAE,CAAC,MAAM,IAAI;AAC1F,WAAK,kBAAkB,YAAY,cAAc,IAAI,cAAc;AACnE,QAAE,CAAC,IAAI;AACP,QAAE,CAAC,IAAI;AACP,QAAE,CAAC,IAAI;AACP,QAAE,CAAC,IAAI;AACP,QAAE,CAAC,IAAI;AAAA,IACT,OAAO;AACL,WAAK,EAAE,CAAC;AAAA,IACV;AACA,SAAK;AAAA,EACP;AACA,SAAO;AACT;AAIO,SAAS,WAAW,cAAc,YAAY;AACnD,SAAO,kBAAkB,cAAc,YAAY,MAAM;AAC3D;AACO,SAAS,WAAW,cAAc,YAAY;AACnD,SAAO,kBAAkB,cAAc,YAAY,MAAM;AAC3D;AACO,SAAS,aAAa,cAAc,YAAY;AACrD,SAAO,kBAAkB,cAAc,YAAY,OAAO;AAC5D;AACO,SAAS,YAAY,cAAc,YAAY;AACpD,SAAO,kBAAkB,cAAc,YAAY,OAAO;AAC5D;;;AC/YA,SAAoB,eAAAC,cAAa,WAAoB,gBAAgB;AAyM5D,gBAAAC,YAAA;AAlJT,IAAM,gBAAgB;AAAA;AAAA;AAAA;AAAA;AAAA;AAMtB,IAAM,oBAAoB;AAAA;AAAA;AAAA;AAAA;AAQnB,SAAS,oBAAoB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA,YAAY;AACd,GAA6B;AAE3B,QAAM,CAAC,MAAM,OAAO,IAAI,SAAsB,IAAI;AAClD,QAAM,CAAC,SAAS,UAAU,IAAI,SAA+B,IAAI;AACjE,QAAM,CAAC,YAAY,aAAa,IAAI,SAAoC,IAAI;AAC5E,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,IAAI;AACvD,QAAM,CAAC,eAAe,gBAAgB,IAAI,SAAS,IAAI;AAKvD,YAAU,MAAM;AACd,QAAI,UAAU;AACd,mBAAe,WAAW;AACxB,UAAI;AACF,cAAM;AAAA,UACJ;AAAA,QACF,IAAI,MAAM,SAAS,KAAK,WAAW;AACnC,YAAI,SAAS;AACX,kBAAQ,KAAK,SAAS,QAAQ,IAAI;AAClC,2BAAiB,KAAK;AAAA,QACxB;AAAA,MACF,SAAS,OAAO;AACd,gBAAQ,MAAM,6CAA6C,KAAK;AAChE,YAAI,SAAS;AACX,kBAAQ,IAAI;AACZ,2BAAiB,KAAK;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AACA,aAAS;AAGT,UAAM;AAAA,MACJ,MAAM;AAAA,QACJ;AAAA,MACF;AAAA,IACF,IAAI,SAAS,KAAK,kBAAkB,CAAC,QAAQ,YAAY;AACvD,UAAI,SAAS;AACX,gBAAQ,SAAS,QAAQ,IAAI;AAAA,MAC/B;AAAA,IACF,CAAC;AACD,WAAO,MAAM;AACX,gBAAU;AACV,mBAAa,YAAY;AAAA,IAC3B;AAAA,EACF,GAAG,CAAC,QAAQ,CAAC;AAKb,YAAU,MAAM;AACd,QAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,IAAI;AAClC,iBAAW,IAAI;AACf,oBAAc,IAAI;AAClB,uBAAiB,KAAK;AACtB;AAAA,IACF;AACA,QAAI,YAAY;AAChB,UAAM,kBAAkB,IAAI,gBAAgB;AAG5C,mBAAe,WAAW;AACxB,UAAI;AACF,yBAAiB,IAAI;AACrB,cAAM,CAAC,eAAe,YAAY,IAAI,MAAM,QAAQ,IAAI,CAAC,GAAI,YAA2B,eAAe,CAAC,KAAM,EAAE,CAAC,GAAG,GAAI,OAAyB,mBAAmB,CAAC,KAAM,EAAE,CAAC,CAAC,CAAC;AAChL,YAAI,WAAW;AACb,qBAAW,aAAa;AACxB,wBAAc,YAAY;AAC1B,2BAAiB,KAAK;AAAA,QACxB;AAAA,MACF,SAAS,SAAS;AAChB,gBAAQ,MAAM,kDAAkD,OAAO;AACvE,YAAI,WAAW;AACb,2BAAiB,KAAK;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AACA,aAAS;AAGT,OAAG,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG;AAAA,MACjC,UAAU,YAAU;AAClB,YAAI,WAAW;AACb,gBAAM,OAAO,OAAO,MAAM,UAAU,CAAC;AACrC,qBAAW,KAAK,CAAC,KAAK,IAAI;AAAA,QAC5B;AAAA,MACF;AAAA,IACF,GAAG;AAAA,MACD,QAAQ,gBAAgB;AAAA,IAC1B,CAAC;AAGD,OAAG,MAAM,mBAAmB,CAAC,KAAK,EAAE,GAAG;AAAA,MACrC,UAAU,cAAY;AACpB,YAAI,WAAW;AACb,gBAAM,SAAS,SAAS,MAAM,UAAU,CAAC;AACzC,wBAAc,MAAM;AAAA,QACtB;AAAA,MACF;AAAA,IACF,GAAG;AAAA,MACD,QAAQ,gBAAgB;AAAA,IAC1B,CAAC;AACD,WAAO,MAAM;AACX,kBAAY;AACZ,sBAAgB,MAAM;AAAA,IACxB;AAAA,EACF,GAAG,CAAC,IAAI,WAAW,MAAM,EAAE,CAAC;AAI5B,QAAM,gBAAgBC,aAAY,YAAY;AAC5C,UAAM;AAAA,MACJ,OAAO;AAAA,IACT,IAAI,MAAM,SAAS,KAAK,QAAQ;AAChC,QAAI,SAAS;AACX,cAAQ,MAAM,yCAAyC,OAAO;AAC9D,YAAM;AAAA,IACR;AAAA,EACF,GAAG,CAAC,QAAQ,CAAC;AAIb,QAAM,YAAY,iBAAiB,CAAC,CAAC,QAAQ;AAI7C,SAAO,gBAAAD,KAAC,sBAAmB,MAAY,SAAkB,YAAwB,WAAsB,WAAW,eAC7G,UACH;AACJ;","names":["t3","useCallback","jsx","useCallback"]}