@robelest/convex-auth 0.0.3-preview → 0.0.3-preview.3

package/dist/server/errors.d.ts

@@ -0,0 +1,148 @@
+/**
+ * Structured error handling for Convex Auth.
+ *
+ * Every error thrown by the auth system uses `ConvexError` with a
+ * `{ code, message }` payload so clients can distinguish error types
+ * and display user-friendly messages.
+ *
+ * @module
+ */
+import { ConvexError } from "convex/values";
+/**
+ * Map of every auth error code to its default human-readable message.
+ *
+ * Use the keys as the `code` argument to {@link throwAuthError}.
+ * Clients can match on these codes for conditional error handling.
+ *
+ * @example
+ * ```ts
+ * throwAuthError("NOT_SIGNED_IN");
+ * // ConvexError { data: { code: "NOT_SIGNED_IN", message: "You must be signed in..." } }
+ * ```
+ */
+export declare const AUTH_ERRORS: {
+    readonly PROVIDER_NOT_CONFIGURED: "This sign-in method is not available.";
+    readonly EMAIL_CONFIG_REQUIRED: "Email transport is not configured. Configure email in your Auth constructor.";
+    readonly MISSING_ENV_VAR: "A required server environment variable is missing.";
+    readonly MISSING_ACTION_CONTEXT: "Action context is required for this operation.";
+    readonly NOT_SIGNED_IN: "You must be signed in to perform this action.";
+    readonly INVALID_VERIFICATION_CODE: "Invalid or expired verification code.";
+    readonly INVALID_REFRESH_TOKEN: "Your session has expired. Please sign in again.";
+    readonly SIGN_IN_MISSING_PARAMS: "Cannot sign in: missing provider, code, or refresh token.";
+    readonly UNSUPPORTED_PROVIDER_TYPE: "This provider type is not supported.";
+    readonly INVALID_REDIRECT: "Invalid redirect URL.";
+    readonly EMAIL_SEND_FAILED: "Failed to send verification email. Please try again.";
+    readonly PORTAL_NOT_AUTHORIZED: "This email does not have portal admin access. Ask an admin for an invite link.";
+    readonly PORTAL_UNKNOWN_ACTION: "Unknown portal action.";
+    readonly INVITE_TOKEN_REQUIRED: "Invite token is required.";
+    readonly INVALID_INVITE: "Invalid or expired invite token.";
+    readonly INVITE_ALREADY_USED: "This invite has already been used.";
+    readonly INVITE_EXPIRED: "This invite has expired.";
+    readonly INVALID_API_KEY: "Invalid API key.";
+    readonly API_KEY_REVOKED: "This API key has been revoked.";
+    readonly API_KEY_EXPIRED: "This API key has expired.";
+    readonly API_KEY_RATE_LIMITED: "API key rate limit exceeded. Please try again later.";
+    readonly API_KEY_INVALID_SCOPE: "Invalid scope requested for API key.";
+    readonly MISSING_BEARER_TOKEN: "Missing or malformed Authorization: Bearer header.";
+    readonly SCOPE_CHECK_FAILED: "This API key does not have the required permissions.";
+    readonly OAUTH_MISSING_PROVIDER: "Missing OAuth provider ID.";
+    readonly OAUTH_MISSING_VERIFIER: "Missing sign-in verifier.";
+    readonly OAUTH_INVALID_STATE: "Invalid OAuth state. Please try signing in again.";
+    readonly OAUTH_PROVIDER_ERROR: "The sign-in provider returned an error.";
+    readonly OAUTH_MISSING_ID_TOKEN: "ID token claims are missing from the provider response.";
+    readonly OAUTH_INVALID_PROFILE: "The sign-in provider returned an invalid profile.";
+    readonly OAUTH_UNSUPPORTED_AUTH_METHOD: "Unsupported OAuth client authentication method.";
+    readonly OAUTH_NO_USERINFO: "No userinfo endpoint configured for this provider.";
+    readonly ACCOUNT_ALREADY_EXISTS: "An account with these credentials already exists.";
+    readonly ACCOUNT_NOT_FOUND: "Account not found.";
+    readonly INVALID_CREDENTIALS_PROVIDER: "This provider does not support credential operations.";
+    readonly MISSING_CRYPTO_FUNCTION: "This provider is missing a required cryptographic function.";
+    readonly USER_UPDATE_FAILED: "Could not update the user record.";
+    readonly INVALID_VERIFIER: "Invalid or expired verifier.";
+    readonly PASSKEY_MISSING_CONFIG: "Passkey provider requires SITE_URL or explicit rpId configuration.";
+    readonly PASSKEY_AUTH_REQUIRED: "Sign in first, then add a passkey to your account.";
+    readonly PASSKEY_MISSING_VERIFIER: "Missing verifier for passkey operation.";
+    readonly PASSKEY_INVALID_CLIENT_DATA: "Invalid passkey client data.";
+    readonly PASSKEY_INVALID_ORIGIN: "Passkey origin does not match the expected value.";
+    readonly PASSKEY_INVALID_CHALLENGE: "Invalid or expired passkey challenge.";
+    readonly PASSKEY_RP_MISMATCH: "Relying party ID mismatch.";
+    readonly PASSKEY_USER_PRESENCE: "User presence flag not set.";
+    readonly PASSKEY_USER_VERIFICATION: "User verification required but not performed.";
+    readonly PASSKEY_NO_CREDENTIAL: "No credential in attestation.";
+    readonly PASSKEY_UNSUPPORTED_ALGORITHM: "Unsupported passkey algorithm.";
+    readonly PASSKEY_INVALID_SIGNATURE: "Invalid passkey signature.";
+    readonly PASSKEY_UNKNOWN_CREDENTIAL: "Unknown passkey credential.";
+    readonly PASSKEY_COUNTER_ERROR: "Authenticator counter did not increase — possible credential cloning detected.";
+    readonly PASSKEY_MISSING_FLOW: "Missing passkey flow parameter.";
+    readonly PASSKEY_UNKNOWN_FLOW: "Unknown passkey flow.";
+    readonly TOTP_AUTH_REQUIRED: "Sign in first, then set up two-factor authentication.";
+    readonly TOTP_MISSING_VERIFIER: "Missing verifier for TOTP operation.";
+    readonly TOTP_MISSING_CODE: "Missing TOTP code.";
+    readonly TOTP_MISSING_ID: "Missing TOTP enrollment ID.";
+    readonly TOTP_NOT_FOUND: "TOTP enrollment not found.";
+    readonly TOTP_ALREADY_VERIFIED: "TOTP enrollment is already verified.";
+    readonly TOTP_INVALID_CODE: "Invalid TOTP code.";
+    readonly TOTP_INVALID_VERIFIER: "Invalid or expired TOTP verifier.";
+    readonly TOTP_NO_ENROLLMENT: "No verified TOTP enrollment found.";
+    readonly TOTP_MISSING_FLOW: "Missing TOTP flow parameter.";
+    readonly TOTP_UNKNOWN_FLOW: "Unknown TOTP flow.";
+    readonly INTERNAL_ERROR: "An unexpected error occurred.";
+};
+/** Union of all recognized auth error code strings (keys of {@link AUTH_ERRORS}). */
+export type AuthErrorCode = keyof typeof AUTH_ERRORS;
+/**
+ * Throw a structured `ConvexError` with `{ code, message }`.
+ *
+ * @param code    Machine-readable error code from `AUTH_ERRORS`.
+ * @param message Optional override for the default human-readable message.
+ * @param context Optional extra fields merged into the error payload.
+ */
+export declare function throwAuthError(code: AuthErrorCode, message?: string, context?: Record<string, unknown>): never;
+/**
+ * Type guard: check whether a caught value is a structured auth `ConvexError`.
+ *
+ * @param error - The caught value (typically from a `catch` block).
+ * @returns `true` when `error` is a `ConvexError` with `{ code, message }` data.
+ *
+ * @example
+ * ```ts
+ * try { await auth.signIn('email', { email }); }
+ * catch (e) {
+ *   if (isAuthError(e)) console.log(e.data.code); // "EMAIL_SEND_FAILED"
+ * }
+ * ```
+ */
+export declare function isAuthError(error: unknown): error is ConvexError<{
+    code: AuthErrorCode;
+    message: string;
+}>;
+/**
+ * Extract `{ code, message }` from a caught error.
+ *
+ * Works for `ConvexError` (from Convex actions), plain `Error`
+ * instances, and structured auth errors. Returns `null` when the
+ * value is not an error object.
+ *
+ * @param error - The caught value to parse.
+ * @returns `{ code, message }` when extractable, or `null`.
+ *   When `code` is `null`, the error is not a structured auth error
+ *   but `message` still contains the error text.
+ *
+ * @example
+ * ```ts
+ * try {
+ *   await auth.signIn("email", { email });
+ * } catch (e) {
+ *   const err = parseAuthError(e);
+ *   if (err?.code === "EMAIL_SEND_FAILED") { ... }
+ * }
+ * ```
+ */
+export declare function parseAuthError(error: unknown): {
+    code: AuthErrorCode;
+    message: string;
+} | {
+    code: null;
+    message: string;
+} | null;
+//# sourceMappingURL=errors.d.ts.map

package/dist/server/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/server/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAM5C;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA4JmB,CAAC;AAE5C,qFAAqF;AACrF,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,WAAW,CAAC;AAMrD;;;;;;GAMG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,aAAa,EACnB,OAAO,CAAC,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAChC,KAAK,CAMP;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,WAAW,CAAC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAQhE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,OAAO,GACb;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAYnF"}

package/dist/server/errors.js

@@ -0,0 +1,179 @@
+/**
+ * Structured error handling for Convex Auth.
+ *
+ * Every error thrown by the auth system uses `ConvexError` with a
+ * `{ code, message }` payload so clients can distinguish error types
+ * and display user-friendly messages.
+ *
+ * @module
+ */
+import { ConvexError } from "convex/values";
+// ============================================================================
+// Error code → default message map  (single source of truth)
+// ============================================================================
+/**
+ * Map of every auth error code to its default human-readable message.
+ *
+ * Use the keys as the `code` argument to {@link throwAuthError}.
+ * Clients can match on these codes for conditional error handling.
+ *
+ * @example
+ * ```ts
+ * throwAuthError("NOT_SIGNED_IN");
+ * // ConvexError { data: { code: "NOT_SIGNED_IN", message: "You must be signed in..." } }
+ * ```
+ */
+export const AUTH_ERRORS = {
+    // ---- Configuration ----
+    PROVIDER_NOT_CONFIGURED: "This sign-in method is not available.",
+    EMAIL_CONFIG_REQUIRED: "Email transport is not configured. Configure email in your Auth constructor.",
+    MISSING_ENV_VAR: "A required server environment variable is missing.",
+    MISSING_ACTION_CONTEXT: "Action context is required for this operation.",
+    // ---- Authentication ----
+    NOT_SIGNED_IN: "You must be signed in to perform this action.",
+    INVALID_VERIFICATION_CODE: "Invalid or expired verification code.",
+    INVALID_REFRESH_TOKEN: "Your session has expired. Please sign in again.",
+    SIGN_IN_MISSING_PARAMS: "Cannot sign in: missing provider, code, or refresh token.",
+    UNSUPPORTED_PROVIDER_TYPE: "This provider type is not supported.",
+    INVALID_REDIRECT: "Invalid redirect URL.",
+    // ---- Email / Phone ----
+    EMAIL_SEND_FAILED: "Failed to send verification email. Please try again.",
+    // ---- Portal ----
+    PORTAL_NOT_AUTHORIZED: "This email does not have portal admin access. Ask an admin for an invite link.",
+    PORTAL_UNKNOWN_ACTION: "Unknown portal action.",
+    INVITE_TOKEN_REQUIRED: "Invite token is required.",
+    INVALID_INVITE: "Invalid or expired invite token.",
+    INVITE_ALREADY_USED: "This invite has already been used.",
+    INVITE_EXPIRED: "This invite has expired.",
+    // ---- API Keys ----
+    INVALID_API_KEY: "Invalid API key.",
+    API_KEY_REVOKED: "This API key has been revoked.",
+    API_KEY_EXPIRED: "This API key has expired.",
+    API_KEY_RATE_LIMITED: "API key rate limit exceeded. Please try again later.",
+    API_KEY_INVALID_SCOPE: "Invalid scope requested for API key.",
+    // ---- HTTP Bearer Auth ----
+    MISSING_BEARER_TOKEN: "Missing or malformed Authorization: Bearer header.",
+    SCOPE_CHECK_FAILED: "This API key does not have the required permissions.",
+    // ---- OAuth ----
+    OAUTH_MISSING_PROVIDER: "Missing OAuth provider ID.",
+    OAUTH_MISSING_VERIFIER: "Missing sign-in verifier.",
+    OAUTH_INVALID_STATE: "Invalid OAuth state. Please try signing in again.",
+    OAUTH_PROVIDER_ERROR: "The sign-in provider returned an error.",
+    OAUTH_MISSING_ID_TOKEN: "ID token claims are missing from the provider response.",
+    OAUTH_INVALID_PROFILE: "The sign-in provider returned an invalid profile.",
+    OAUTH_UNSUPPORTED_AUTH_METHOD: "Unsupported OAuth client authentication method.",
+    OAUTH_NO_USERINFO: "No userinfo endpoint configured for this provider.",
+    // ---- Credentials ----
+    ACCOUNT_ALREADY_EXISTS: "An account with these credentials already exists.",
+    ACCOUNT_NOT_FOUND: "Account not found.",
+    INVALID_CREDENTIALS_PROVIDER: "This provider does not support credential operations.",
+    MISSING_CRYPTO_FUNCTION: "This provider is missing a required cryptographic function.",
+    USER_UPDATE_FAILED: "Could not update the user record.",
+    // ---- Verifier ----
+    INVALID_VERIFIER: "Invalid or expired verifier.",
+    // ---- Passkey ----
+    PASSKEY_MISSING_CONFIG: "Passkey provider requires SITE_URL or explicit rpId configuration.",
+    PASSKEY_AUTH_REQUIRED: "Sign in first, then add a passkey to your account.",
+    PASSKEY_MISSING_VERIFIER: "Missing verifier for passkey operation.",
+    PASSKEY_INVALID_CLIENT_DATA: "Invalid passkey client data.",
+    PASSKEY_INVALID_ORIGIN: "Passkey origin does not match the expected value.",
+    PASSKEY_INVALID_CHALLENGE: "Invalid or expired passkey challenge.",
+    PASSKEY_RP_MISMATCH: "Relying party ID mismatch.",
+    PASSKEY_USER_PRESENCE: "User presence flag not set.",
+    PASSKEY_USER_VERIFICATION: "User verification required but not performed.",
+    PASSKEY_NO_CREDENTIAL: "No credential in attestation.",
+    PASSKEY_UNSUPPORTED_ALGORITHM: "Unsupported passkey algorithm.",
+    PASSKEY_INVALID_SIGNATURE: "Invalid passkey signature.",
+    PASSKEY_UNKNOWN_CREDENTIAL: "Unknown passkey credential.",
+    PASSKEY_COUNTER_ERROR: "Authenticator counter did not increase — possible credential cloning detected.",
+    PASSKEY_MISSING_FLOW: "Missing passkey flow parameter.",
+    PASSKEY_UNKNOWN_FLOW: "Unknown passkey flow.",
+    // ---- TOTP ----
+    TOTP_AUTH_REQUIRED: "Sign in first, then set up two-factor authentication.",
+    TOTP_MISSING_VERIFIER: "Missing verifier for TOTP operation.",
+    TOTP_MISSING_CODE: "Missing TOTP code.",
+    TOTP_MISSING_ID: "Missing TOTP enrollment ID.",
+    TOTP_NOT_FOUND: "TOTP enrollment not found.",
+    TOTP_ALREADY_VERIFIED: "TOTP enrollment is already verified.",
+    TOTP_INVALID_CODE: "Invalid TOTP code.",
+    TOTP_INVALID_VERIFIER: "Invalid or expired TOTP verifier.",
+    TOTP_NO_ENROLLMENT: "No verified TOTP enrollment found.",
+    TOTP_MISSING_FLOW: "Missing TOTP flow parameter.",
+    TOTP_UNKNOWN_FLOW: "Unknown TOTP flow.",
+    // ---- Internal (should never reach user) ----
+    INTERNAL_ERROR: "An unexpected error occurred.",
+};
+// ============================================================================
+// Error helpers
+// ============================================================================
+/**
+ * Throw a structured `ConvexError` with `{ code, message }`.
+ *
+ * @param code    Machine-readable error code from `AUTH_ERRORS`.
+ * @param message Optional override for the default human-readable message.
+ * @param context Optional extra fields merged into the error payload.
+ */
+export function throwAuthError(code, message, context) {
+    throw new ConvexError({
+        code,
+        message: message ?? AUTH_ERRORS[code],
+        ...context,
+    });
+}
+/**
+ * Type guard: check whether a caught value is a structured auth `ConvexError`.
+ *
+ * @param error - The caught value (typically from a `catch` block).
+ * @returns `true` when `error` is a `ConvexError` with `{ code, message }` data.
+ *
+ * @example
+ * ```ts
+ * try { await auth.signIn('email', { email }); }
+ * catch (e) {
+ *   if (isAuthError(e)) console.log(e.data.code); // "EMAIL_SEND_FAILED"
+ * }
+ * ```
+ */
+export function isAuthError(error) {
+    return (error instanceof ConvexError &&
+        typeof error.data === "object" &&
+        error.data !== null &&
+        "code" in error.data &&
+        "message" in error.data);
+}
+/**
+ * Extract `{ code, message }` from a caught error.
+ *
+ * Works for `ConvexError` (from Convex actions), plain `Error`
+ * instances, and structured auth errors. Returns `null` when the
+ * value is not an error object.
+ *
+ * @param error - The caught value to parse.
+ * @returns `{ code, message }` when extractable, or `null`.
+ *   When `code` is `null`, the error is not a structured auth error
+ *   but `message` still contains the error text.
+ *
+ * @example
+ * ```ts
+ * try {
+ *   await auth.signIn("email", { email });
+ * } catch (e) {
+ *   const err = parseAuthError(e);
+ *   if (err?.code === "EMAIL_SEND_FAILED") { ... }
+ * }
+ * ```
+ */
+export function parseAuthError(error) {
+    if (isAuthError(error)) {
+        const { code, message } = error.data;
+        return { code, message };
+    }
+    if (error instanceof ConvexError && typeof error.data === "string") {
+        return { code: null, message: error.data };
+    }
+    if (error instanceof Error) {
+        return { code: null, message: error.message };
+    }
+    return null;
+}
+//# sourceMappingURL=errors.js.map

package/dist/server/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/server/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,+EAA+E;AAC/E,6DAA6D;AAC7D,+EAA+E;AAE/E;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,0BAA0B;IAC1B,uBAAuB,EACrB,uCAAuC;IACzC,qBAAqB,EACnB,8EAA8E;IAChF,eAAe,EACb,oDAAoD;IACtD,sBAAsB,EACpB,gDAAgD;IAElD,2BAA2B;IAC3B,aAAa,EACX,+CAA+C;IACjD,yBAAyB,EACvB,uCAAuC;IACzC,qBAAqB,EACnB,iDAAiD;IACnD,sBAAsB,EACpB,2DAA2D;IAC7D,yBAAyB,EACvB,sCAAsC;IACxC,gBAAgB,EACd,uBAAuB;IAEzB,0BAA0B;IAC1B,iBAAiB,EACf,sDAAsD;IAExD,mBAAmB;IACnB,qBAAqB,EACnB,gFAAgF;IAClF,qBAAqB,EACnB,wBAAwB;IAC1B,qBAAqB,EACnB,2BAA2B;IAC7B,cAAc,EACZ,kCAAkC;IACpC,mBAAmB,EACjB,oCAAoC;IACtC,cAAc,EACZ,0BAA0B;IAE5B,qBAAqB;IACrB,eAAe,EACb,kBAAkB;IACpB,eAAe,EACb,gCAAgC;IAClC,eAAe,EACb,2BAA2B;IAC7B,oBAAoB,EAClB,sDAAsD;IACxD,qBAAqB,EACnB,sCAAsC;IAExC,6BAA6B;IAC7B,oBAAoB,EAClB,oDAAoD;IACtD,kBAAkB,EAChB,sDAAsD;IAExD,kBAAkB;IAClB,sBAAsB,EACpB,4BAA4B;IAC9B,sBAAsB,EACpB,2BAA2B;IAC7B,mBAAmB,EACjB,mDAAmD;IACrD,oBAAoB,EAClB,yCAAyC;IAC3C,sBAAsB,EACpB,yDAAyD;IAC3D,qBAAqB,EACnB,mDAAmD;IACrD,6BAA6B,EAC3B,iDAAiD;IACnD,iBAAiB,EACf,oDAAoD;IAEtD,wBAAwB;IACxB,sBAAsB,EACpB,mDAAmD;IACrD,iBAAiB,EACf,oBAAoB;IACtB,4BAA4B,EAC1B,uDAAuD;IACzD,uBAAuB,EACrB,6DAA6D;IAC/D,kBAAkB,EAChB,mCAAmC;IAErC,qBAAqB;IACrB,gBAAgB,EACd,8BAA8B;IAEhC,oBAAoB;IACpB,sBAAsB,EACpB,oEAAoE;IACtE,qBAAqB,EACnB,oDAAoD;IACtD,wBAAwB,EACtB,yCAAyC;IAC3C,2BAA2B,EACzB,8BAA8B;IAChC,sBAAsB,EACpB,mDAAmD;IACrD,yBAAyB,EACvB,uCAAuC;IACzC,mBAAmB,EACjB,4BAA4B;IAC9B,qBAAqB,EACnB,6BAA6B;IAC/B,yBAAyB,EACvB,+CAA+C;IACjD,qBAAqB,EACnB,+BAA+B;IACjC,6BAA6B,EAC3B,gCAAgC;IAClC,yBAAyB,EACvB,4BAA4B;IAC9B,0BAA0B,EACxB,6BAA6B;IAC/B,qBAAqB,EACnB,gFAAgF;IAClF,oBAAoB,EAClB,iCAAiC;IACnC,oBAAoB,EAClB,uBAAuB;IAEzB,iBAAiB;IACjB,kBAAkB,EAChB,uDAAuD;IACzD,qBAAqB,EACnB,sCAAsC;IACxC,iBAAiB,EACf,oBAAoB;IACtB,eAAe,EACb,6BAA6B;IAC/B,cAAc,EACZ,4BAA4B;IAC9B,qBAAqB,EACnB,sCAAsC;IACxC,iBAAiB,EACf,oBAAoB;IACtB,qBAAqB,EACnB,mCAAmC;IACrC,kBAAkB,EAChB,oCAAoC;IACtC,iBAAiB,EACf,8BAA8B;IAChC,iBAAiB,EACf,oBAAoB;IAEtB,+CAA+C;IAC/C,cAAc,EACZ,+BAA+B;CACQ,CAAC;AAK5C,+EAA+E;AAC/E,gBAAgB;AAChB,+EAA+E;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAmB,EACnB,OAAgB,EAChB,OAAiC;IAEjC,MAAM,IAAI,WAAW,CAAC;QACpB,IAAI;QACJ,OAAO,EAAE,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC;QACrC,GAAG,OAAO;KACX,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CACzB,KAAc;IAEd,OAAO,CACL,KAAK,YAAY,WAAW;QAC5B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAC9B,KAAK,CAAC,IAAI,KAAK,IAAI;QACnB,MAAM,IAAI,KAAK,CAAC,IAAI;QACpB,SAAS,IAAI,KAAK,CAAC,IAAI,CACxB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAc;IAEd,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAgD,CAAC;QACjF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,YAAY,WAAW,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7C,CAAC;IACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}