@robelest/convex-auth 0.0.2-preview.1 → 0.0.2

package/dist/server/convex-auth.js

@@ -0,0 +1,365 @@
+/**
+ * The `Auth` class — the main entry point for Convex Auth.
+ *
+ * Combines authentication and portal admin functionality:
+ *
+ * ```ts
+ * // convex/auth.ts
+ * import { Auth, Portal } from "@robelest/convex-auth/component";
+ * import github from "@auth/core/providers/github";
+ * import { components } from "./_generated/api";
+ *
+ * export const auth = new Auth(components.auth, {
+ *   providers: [github],
+ * });
+ * export const { signIn, signOut, store } = auth;
+ * export const { portalQuery, portalMutation, portalInternal } = Portal(auth);
+ * ```
+ *
+ * @module
+ */
+import { queryGeneric, mutationGeneric, internalMutationGeneric, } from "convex/server";
+import { v } from "convex/values";
+import { Auth as AuthFactory } from "./implementation/index.js";
+import { registerStaticRoutes } from "@convex-dev/self-hosting";
+import { portalMagicLinkEmail } from "./portal-email.js";
+import email from "../providers/email.js";
+// ============================================================================
+// Helpers
+// ============================================================================
+/**
+ * Check if the authenticated user is a portal admin.
+ * Uses the new index `roleAndStatusAndAcceptedByUserId` for efficient lookup.
+ */
+async function requirePortalAdmin(ctx, authComponent, userId) {
+    // Use inviteList with status filter, then check role + userId in-memory.
+    // The new index makes the status filter efficient.
+    const invites = await ctx.runQuery(authComponent.public.inviteList, {
+        status: "accepted",
+    });
+    const isAdmin = invites.some((invite) => invite.role === "portalAdmin" && invite.acceptedByUserId === userId);
+    if (!isAdmin) {
+        throw new Error("Not authorized: portal admin access required");
+    }
+}
+// ============================================================================
+// Auth class
+// ============================================================================
+/**
+ * Main entry point for Convex Auth. Instantiate with your component
+ * reference and config to get all the exports you need.
+ *
+ * ```ts
+ * export const auth = new Auth(components.auth, {
+ *   providers: [github, resend({ ... })],
+ * });
+ * export const { signIn, signOut, store } = auth;
+ * export const { portalQuery, portalMutation, portalInternal } = Portal(auth);
+ * ```
+ */
+export class Auth {
+    /** The inner `auth` helper object from AuthFactory() */
+    _auth;
+    /** The signIn action — export this from your convex/auth.ts */
+    signIn;
+    /** The signOut action — export this from your convex/auth.ts */
+    signOut;
+    /** The store internal mutation — export this from your convex/auth.ts */
+    store;
+    /** @internal */
+    component;
+    /** @internal */
+    portalUrl;
+    // ---- Proxied auth helper sub-objects ----
+    /** User helpers: `.current(ctx)`, `.require(ctx)`, `.get(ctx, userId)`, `.viewer(ctx)` */
+    get user() { return this._auth.user; }
+    /** Session helpers */
+    get session() { return this._auth.session; }
+    /** Provider helpers */
+    get provider() { return this._auth.provider; }
+    /** Account helpers */
+    get account() { return this._auth.account; }
+    /** Group helpers */
+    get group() { return this._auth.group; }
+    /** Invite helpers */
+    get invite() { return this._auth.invite; }
+    /** Passkey helpers */
+    get passkey() { return this._auth.passkey; }
+    /** TOTP helpers */
+    get totp() { return this._auth.totp; }
+    constructor(component, config) {
+        this.component = component;
+        // Derive portal URL from CONVEX_SITE_URL
+        this.portalUrl = process.env.CONVEX_SITE_URL
+            ? `${process.env.CONVEX_SITE_URL.replace(/\/$/, "")}/auth`
+            : "/auth";
+        // Auto-register the `portal` email provider for magic link sign-in
+        const providers = [...config.providers];
+        providers.push(email({
+            id: "portal",
+            maxAge: 60 * 60 * 24, // 24 hours
+            authorize: undefined, // Magic link — no email check needed
+            async sendVerificationRequest({ identifier, url, expires }) {
+                const hours = Math.max(1, Math.floor((+expires - Date.now()) / (60 * 60 * 1000)));
+                const html = portalMagicLinkEmail(url, hours);
+                const siteUrl = process.env.CONVEX_SITE_URL;
+                if (!siteUrl) {
+                    throw new Error("CONVEX_SITE_URL is required to send portal magic link email");
+                }
+                const response = await fetch(`${siteUrl}/auth-email-dispatch`, {
+                    method: "POST",
+                    headers: {
+                        "Content-Type": "application/json",
+                        ...(process.env.AUTH_EMAIL_DISPATCH_SECRET
+                            ? {
+                                "x-auth-email-dispatch-secret": process.env.AUTH_EMAIL_DISPATCH_SECRET,
+                            }
+                            : {}),
+                    },
+                    body: JSON.stringify({
+                        to: identifier,
+                        subject: "Sign in to Convex Auth Portal",
+                        html,
+                    }),
+                });
+                if (!response.ok) {
+                    throw new Error(`Could not send portal magic link email: ${response.status}`);
+                }
+            },
+        }));
+        // Initialize the core AuthFactory()
+        const authResult = AuthFactory({
+            ...config,
+            component,
+            providers,
+        });
+        this._auth = authResult.auth;
+        this.signIn = authResult.signIn;
+        this.signOut = authResult.signOut;
+        this.store = authResult.store;
+    }
+    /**
+     * Register HTTP routes for OAuth, JWT well-known endpoints, and portal
+     * static file serving.
+     *
+     * ```ts
+     * // convex/http.ts
+     * import { httpRouter } from "convex/server";
+     * import { auth } from "./auth";
+     *
+     * const http = httpRouter();
+     * auth.addHttpRoutes(http);
+     * export default http;
+     * ```
+     */
+    addHttpRoutes(http, opts) {
+        // Core auth routes (OAuth, JWKS, etc.)
+        this._auth.addHttpRoutes(http);
+        // Portal static file serving
+        const prefix = opts?.pathPrefix ?? "/auth";
+        // Create a shim that maps the self-hosting ComponentApi shape
+        // to the auth component's portalBridge functions
+        const selfHostingShim = {
+            lib: {
+                getByPath: this.component.portalBridge.getByPath,
+                getCurrentDeployment: this.component.portalBridge.getCurrentDeployment,
+                listAssets: this.component.portalBridge.listAssets,
+                recordAsset: this.component.portalBridge.recordAsset,
+                gcOldAssets: this.component.portalBridge.gcOldAssets,
+                setCurrentDeployment: this.component.portalBridge.setCurrentDeployment,
+                // generateUploadUrl is not needed — we use app storage directly
+                generateUploadUrl: undefined,
+            },
+        };
+        registerStaticRoutes(http, selfHostingShim, {
+            pathPrefix: prefix,
+            spaFallback: opts?.spaFallback ?? true,
+        });
+    }
+}
+// ============================================================================
+// Portal exports (standalone function)
+// ============================================================================
+/**
+ * Create portal function definitions from a ConvexAuth instance.
+ *
+ * This is a standalone function (not a class method) because Convex's
+ * bundler can trace through `export const { x } = fn(instance)` but
+ * cannot trace through `instance.method()`.
+ *
+ * ```ts
+ * export const { portalQuery, portalMutation, portalInternal } = Portal(auth);
+ * ```
+ */
+export function Portal(auth) {
+    const authComponent = auth.component;
+    const authHelper = auth._auth;
+    const portalUrl = auth.portalUrl;
+    const portalQuery = queryGeneric({
+        args: {
+            action: v.string(),
+            userId: v.optional(v.string()),
+        },
+        handler: async (ctx, { action, userId }) => {
+            const currentUserId = await authHelper.user.require(ctx);
+            // Allow isAdmin check without admin requirement
+            if (action === "isAdmin") {
+                try {
+                    await requirePortalAdmin(ctx, authComponent, currentUserId);
+                    return true;
+                }
+                catch {
+                    return false;
+                }
+            }
+            await requirePortalAdmin(ctx, authComponent, currentUserId);
+            switch (action) {
+                case "listUsers":
+                    return await ctx.runQuery(authComponent.public.userList);
+                case "listSessions":
+                    return await ctx.runQuery(authComponent.public.sessionList);
+                case "getUser":
+                    return await ctx.runQuery(authComponent.public.userGetById, {
+                        userId: userId,
+                    });
+                case "getUserSessions":
+                    return await ctx.runQuery(authComponent.public.sessionListByUser, {
+                        userId: userId,
+                    });
+                case "getUserAccounts": {
+                    const accounts = await ctx.runQuery(authComponent.public.accountListByUser, { userId: userId });
+                    // Strip secrets — never send password hashes to the frontend
+                    return accounts.map(({ secret: _, ...rest }) => rest);
+                }
+                // Invite validation (public within portal context)
+                case "validateInvite": {
+                    // userId param repurposed as tokenHash for this action
+                    const tokenHash = userId;
+                    if (!tokenHash)
+                        throw new Error("tokenHash required");
+                    const invite = await ctx.runQuery(authComponent.public.inviteGetByTokenHash, { tokenHash });
+                    if (!invite || invite.status !== "pending") {
+                        return null;
+                    }
+                    if (invite.expiresTime && invite.expiresTime < Date.now()) {
+                        return null;
+                    }
+                    return { _id: invite._id, role: invite.role };
+                }
+                case "getCurrentDeployment":
+                    return await ctx.runQuery(authComponent.portalBridge.getCurrentDeployment);
+                default:
+                    throw new Error(`Unknown portal query action: ${action}`);
+            }
+        },
+    });
+    const portalMutation = mutationGeneric({
+        args: {
+            action: v.string(),
+            sessionId: v.optional(v.string()),
+            tokenHash: v.optional(v.string()),
+        },
+        handler: async (ctx, { action, sessionId, tokenHash, }) => {
+            const currentUserId = await authHelper.user.require(ctx);
+            switch (action) {
+                case "acceptInvite": {
+                    if (!tokenHash)
+                        throw new Error("tokenHash required");
+                    const invite = await ctx.runQuery(authComponent.public.inviteGetByTokenHash, { tokenHash });
+                    if (!invite)
+                        throw new Error("Invalid invite token");
+                    if (invite.status !== "pending") {
+                        throw new Error(`Invite already ${invite.status}`);
+                    }
+                    if (invite.expiresTime && invite.expiresTime < Date.now()) {
+                        throw new Error("Invite has expired");
+                    }
+                    await ctx.runMutation(authComponent.public.inviteAccept, {
+                        inviteId: invite._id,
+                        acceptedByUserId: currentUserId,
+                    });
+                    return;
+                }
+                case "revokeSession": {
+                    await requirePortalAdmin(ctx, authComponent, currentUserId);
+                    await ctx.runMutation(authComponent.public.sessionDelete, {
+                        sessionId: sessionId,
+                    });
+                    return;
+                }
+                default:
+                    throw new Error(`Unknown portal mutation action: ${action}`);
+            }
+        },
+    });
+    const portalInternal = internalMutationGeneric({
+        args: {
+            action: v.string(),
+            tokenHash: v.optional(v.string()),
+            path: v.optional(v.string()),
+            storageId: v.optional(v.string()),
+            blobId: v.optional(v.string()),
+            contentType: v.optional(v.string()),
+            deploymentId: v.optional(v.string()),
+            currentDeploymentId: v.optional(v.string()),
+            limit: v.optional(v.number()),
+        },
+        handler: async (ctx, args) => {
+            switch (args.action) {
+                // ---- Invite management (CLI) ----
+                case "createPortalInvite": {
+                    await ctx.runMutation(authComponent.public.inviteCreate, {
+                        tokenHash: args.tokenHash,
+                        role: "portalAdmin",
+                        status: "pending",
+                    });
+                    return { portalUrl };
+                }
+                // ---- Static hosting (CLI upload) ----
+                case "generateUploadUrl": {
+                    return await ctx.storage.generateUploadUrl();
+                }
+                case "recordAsset": {
+                    const { oldStorageId, oldBlobId } = await ctx.runMutation(authComponent.portalBridge.recordAsset, {
+                        path: args.path,
+                        ...(args.storageId ? { storageId: args.storageId } : {}),
+                        ...(args.blobId ? { blobId: args.blobId } : {}),
+                        contentType: args.contentType,
+                        deploymentId: args.deploymentId,
+                    });
+                    if (oldStorageId) {
+                        try {
+                            await ctx.storage.delete(oldStorageId);
+                        }
+                        catch {
+                            // Ignore — old file may have been in different storage
+                        }
+                    }
+                    return oldBlobId ?? null;
+                }
+                case "gcOldAssets": {
+                    const { storageIds, blobIds } = await ctx.runMutation(authComponent.portalBridge.gcOldAssets, { currentDeploymentId: args.currentDeploymentId });
+                    for (const storageId of storageIds) {
+                        try {
+                            await ctx.storage.delete(storageId);
+                        }
+                        catch {
+                            // Ignore
+                        }
+                    }
+                    await ctx.runMutation(authComponent.portalBridge.setCurrentDeployment, { deploymentId: args.currentDeploymentId });
+                    return { deleted: storageIds.length, blobIds };
+                }
+                case "listAssets": {
+                    return await ctx.runQuery(authComponent.portalBridge.listAssets, {
+                        limit: args.limit,
+                    });
+                }
+                default:
+                    throw new Error(`Unknown portalInternal action: ${args.action}`);
+            }
+        },
+    });
+    return { portalQuery, portalMutation, portalInternal };
+}
+//# sourceMappingURL=convex-auth.js.map

package/dist/server/convex-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"convex-auth.js","sourceRoot":"","sources":["../../src/server/convex-auth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EACL,YAAY,EACZ,eAAe,EACf,uBAAuB,GACxB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAElC,OAAO,EAAE,IAAI,IAAI,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACzD,OAAO,KAAK,MAAM,uBAAuB,CAAC;AAgB1C,+EAA+E;AAC/E,UAAU;AACV,+EAA+E;AAE/E;;;GAGG;AACH,KAAK,UAAU,kBAAkB,CAC/B,GAAQ,EACR,aAA+B,EAC/B,MAAc;IAEd,yEAAyE;IACzE,mDAAmD;IACnD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE;QAClE,MAAM,EAAE,UAAU;KACnB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAC1B,CAAC,MAAW,EAAE,EAAE,CACd,MAAM,CAAC,IAAI,KAAK,aAAa,IAAI,MAAM,CAAC,gBAAgB,KAAK,MAAM,CACtE,CAAC;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,aAAa;AACb,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,IAAI;IACf,wDAAwD;IACvC,KAAK,CAAyC;IAC/D,+DAA+D;IAC/C,MAAM,CAA2C;IACjE,gEAAgE;IAChD,OAAO,CAA4C;IACnE,yEAAyE;IACzD,KAAK,CAA0C;IAE/D,gBAAgB;IACP,SAAS,CAAmB;IACrC,gBAAgB;IACP,SAAS,CAAS;IAE3B,4CAA4C;IAC5C,0FAA0F;IAC1F,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,sBAAsB;IACtB,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,uBAAuB;IACvB,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9C,sBAAsB;IACtB,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,oBAAoB;IACpB,IAAI,KAAK,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,qBAAqB;IACrB,IAAI,MAAM,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1C,sBAAsB;IACtB,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5C,mBAAmB;IACnB,IAAI,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAEtC,YAAY,SAA2B,EAAE,MAAuB;QAC9D,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,yCAAyC;QACzC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe;YAC1C,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO;YAC1D,CAAC,CAAC,OAAO,CAAC;QAEZ,mEAAmE;QACnE,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACxC,SAAS,CAAC,IAAI,CACZ,KAAK,CAAC;YACJ,EAAE,EAAE,QAAQ;YACZ,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,WAAW;YACjC,SAAS,EAAE,SAAS,EAAE,qCAAqC;YAC3D,KAAK,CAAC,uBAAuB,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE;gBACxD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CACpB,CAAC,EACD,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CACvD,CAAC;gBACF,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;gBAC5C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;gBACJ,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,sBAAsB,EAAE;oBAC7D,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B;4BACxC,CAAC,CAAC;gCACE,8BAA8B,EAC5B,OAAO,CAAC,GAAG,CAAC,0BAA0B;6BACzC;4BACH,CAAC,CAAC,EAAE,CAAC;qBACR;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,EAAE,EAAE,UAAU;wBACd,OAAO,EAAE,+BAA+B;wBACxC,IAAI;qBACL,CAAC;iBACH,CAAC,CAAC;gBACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,KAAK,CACb,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAC7D,CAAC;gBACJ,CAAC;YACH,CAAC;SACF,CAAC,CACH,CAAC;QAEF,oCAAoC;QACpC,MAAM,UAAU,GAAG,WAAW,CAAC;YAC7B,GAAG,MAAM;YACT,SAAS;YACT,SAAS;SACV,CAAC,CAAC;QAEH,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;QAClC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAEhC,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,aAAa,CACX,IAAgB,EAChB,IAAqD;QAErD,uCAAuC;QACvC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;QAE/B,6BAA6B;QAC7B,MAAM,MAAM,GAAG,IAAI,EAAE,UAAU,IAAI,OAAO,CAAC;QAE3C,8DAA8D;QAC9D,iDAAiD;QACjD,MAAM,eAAe,GAAG;YACtB,GAAG,EAAE;gBACH,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS;gBAChD,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,oBAAoB;gBACtE,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU;gBAClD,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,WAAW;gBACpD,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,WAAW;gBACpD,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,oBAAoB;gBACtE,gEAAgE;gBAChE,iBAAiB,EAAE,SAAgB;aACpC;SACF,CAAC;QAEF,oBAAoB,CAAC,IAAI,EAAE,eAAsB,EAAE;YACjD,UAAU,EAAE,MAAM;YAClB,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,IAAI;SACvC,CAAC,CAAC;IACL,CAAC;CACF;AAED,+EAA+E;AAC/E,uCAAuC;AACvC,+EAA+E;AAE/E;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,IAAU;IAC/B,MAAM,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC;IACrC,MAAM,UAAU,GAAI,IAAY,CAAC,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;IAEjC,MAAM,WAAW,GAAG,YAAY,CAAC;QAC/B,IAAI,EAAE;YACJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SAC/B;QACD,OAAO,EAAE,KAAK,EACZ,GAAQ,EACR,EAAE,MAAM,EAAE,MAAM,EAAuC,EACvD,EAAE;YACF,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEzD,gDAAgD;YAChD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,kBAAkB,CAAC,GAAG,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;oBAC5D,OAAO,IAAI,CAAC;gBACd,CAAC;gBAAC,MAAM,CAAC;oBACP,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YAED,MAAM,kBAAkB,CAAC,GAAG,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;YAE5D,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,WAAW;oBACd,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBAE3D,KAAK,cAAc;oBACjB,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;gBAE9D,KAAK,SAAS;oBACZ,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE;wBAC1D,MAAM,EAAE,MAAO;qBAChB,CAAC,CAAC;gBAEL,KAAK,iBAAiB;oBACpB,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,iBAAiB,EAAE;wBAChE,MAAM,EAAE,MAAO;qBAChB,CAAC,CAAC;gBAEL,KAAK,iBAAiB,CAAC,CAAC,CAAC;oBACvB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,QAAQ,CACjC,aAAa,CAAC,MAAM,CAAC,iBAAiB,EACtC,EAAE,MAAM,EAAE,MAAO,EAAE,CACpB,CAAC;oBACF,6DAA6D;oBAC7D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,IAAI,EAAO,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;gBAC7D,CAAC;gBAED,mDAAmD;gBACnD,KAAK,gBAAgB,CAAC,CAAC,CAAC;oBACtB,uDAAuD;oBACvD,MAAM,SAAS,GAAG,MAAM,CAAC;oBACzB,IAAI,CAAC,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBACtD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAC/B,aAAa,CAAC,MAAM,CAAC,oBAAoB,EACzC,EAAE,SAAS,EAAE,CACd,CAAC;oBACF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAC3C,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBAC1D,OAAO,IAAI,CAAC;oBACd,CAAC;oBACD,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;gBAChD,CAAC;gBAED,KAAK,sBAAsB;oBACzB,OAAO,MAAM,GAAG,CAAC,QAAQ,CACvB,aAAa,CAAC,YAAY,CAAC,oBAAoB,CAChD,CAAC;gBAEJ;oBACE,MAAM,IAAI,KAAK,CAAC,gCAAgC,MAAM,EAAE,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,eAAe,CAAC;QACrC,IAAI,EAAE;YACJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACjC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SAClC;QACD,OAAO,EAAE,KAAK,EACZ,GAAQ,EACR,EACE,MAAM,EACN,SAAS,EACT,SAAS,GACkD,EAC7D,EAAE;YACF,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAEzD,QAAQ,MAAM,EAAE,CAAC;gBACf,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,IAAI,CAAC,SAAS;wBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBACtD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAC/B,aAAa,CAAC,MAAM,CAAC,oBAAoB,EACzC,EAAE,SAAS,EAAE,CACd,CAAC;oBACF,IAAI,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;oBACrD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;wBAChC,MAAM,IAAI,KAAK,CAAC,kBAAkB,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;oBACrD,CAAC;oBACD,IAAI,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;wBAC1D,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;oBACxC,CAAC;oBACD,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE;wBACvD,QAAQ,EAAE,MAAM,CAAC,GAAG;wBACpB,gBAAgB,EAAE,aAAa;qBAChC,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED,KAAK,eAAe,CAAC,CAAC,CAAC;oBACrB,MAAM,kBAAkB,CAAC,GAAG,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;oBAC5D,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,aAAa,EAAE;wBACxD,SAAS,EAAE,SAAU;qBACtB,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;gBAED;oBACE,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,uBAAuB,CAAC;QAC7C,IAAI,EAAE;YACJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;YAClB,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACjC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC5B,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACjC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC9B,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACnC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YACpC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;YAC3C,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SAC9B;QACD,OAAO,EAAE,KAAK,EAAE,GAAQ,EAAE,IAAS,EAAE,EAAE;YACrC,QAAQ,IAAI,CAAC,MAAM,EAAE,CAAC;gBACpB,oCAAoC;gBACpC,KAAK,oBAAoB,CAAC,CAAC,CAAC;oBAC1B,MAAM,GAAG,CAAC,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,EAAE;wBACvD,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,IAAI,EAAE,aAAa;wBACnB,MAAM,EAAE,SAAkB;qBAC3B,CAAC,CAAC;oBACH,OAAO,EAAE,SAAS,EAAE,CAAC;gBACvB,CAAC;gBAED,wCAAwC;gBACxC,KAAK,mBAAmB,CAAC,CAAC,CAAC;oBACzB,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;gBAC/C,CAAC;gBAED,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,CACvD,aAAa,CAAC,YAAY,CAAC,WAAW,EACtC;wBACE,IAAI,EAAE,IAAI,CAAC,IAAI;wBACf,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC/C,WAAW,EAAE,IAAI,CAAC,WAAW;wBAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;qBAChC,CACF,CAAC;oBACF,IAAI,YAAY,EAAE,CAAC;wBACjB,IAAI,CAAC;4BACH,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;wBACzC,CAAC;wBAAC,MAAM,CAAC;4BACP,uDAAuD;wBACzD,CAAC;oBACH,CAAC;oBACD,OAAO,SAAS,IAAI,IAAI,CAAC;gBAC3B,CAAC;gBAED,KAAK,aAAa,CAAC,CAAC,CAAC;oBACnB,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,WAAW,CACnD,aAAa,CAAC,YAAY,CAAC,WAAW,EACtC,EAAE,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAClD,CAAC;oBACF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;wBACnC,IAAI,CAAC;4BACH,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;wBACtC,CAAC;wBAAC,MAAM,CAAC;4BACP,SAAS;wBACX,CAAC;oBACH,CAAC;oBACD,MAAM,GAAG,CAAC,WAAW,CACnB,aAAa,CAAC,YAAY,CAAC,oBAAoB,EAC/C,EAAE,YAAY,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAC3C,CAAC;oBACF,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;gBACjD,CAAC;gBAED,KAAK,YAAY,CAAC,CAAC,CAAC;oBAClB,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,YAAY,CAAC,UAAU,EAAE;wBAC/D,KAAK,EAAE,IAAI,CAAC,KAAK;qBAClB,CAAC,CAAC;gBACL,CAAC;gBAED;oBACE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AACzD,CAAC"}