@robelest/convex-auth 0.0.4-preview.2 → 0.0.4-preview.21

package/dist/component/public/groups/invites.js

@@ -0,0 +1,457 @@
+import { mutation, query } from "../../functions.js";
+import { vGroupInviteDoc, vInviteAcceptByTokenResult, vInviteStatus, vPaginated } from "../../model.js";
+import { ConvexError, v } from "convex/values";
+
+//#region src/component/public/groups/invites.ts
+/**
+* Create a new platform-level invitation. Optionally set `groupId` to tie
+* the invite to a specific group. The invitation is sent to an email address
+* and includes a hashed token for secure acceptance.
+*
+* Throws `ConvexError` with code `DUPLICATE_INVITE` when a pending invite
+* already exists for the same email and scope:
+* - group invite: same `email` + same `groupId`
+* - platform invite: same `email` with no `groupId`
+*
+* When a duplicate check finds an existing invite that has passed its
+* `expiresTime`, that invite is automatically marked as `"expired"` and the
+* new invite is allowed through. CLI-generated invites (no email) skip
+* duplicate detection entirely.
+*
+* @param args.groupId - Optional `Id<"Group">` to scope this invite to a specific group. Omit for a platform-wide invite.
+* @param args.invitedByUserId - Optional `Id<"User">` of the user who issued the invitation.
+* @param args.email - Optional email address of the invitee. When provided, duplicate detection is enforced.
+* @param args.tokenHash - A pre-hashed token string used for secure, URL-safe invite acceptance.
+* @param args.roleIds - Optional array of application-defined role identifiers to assign upon acceptance.
+* @param args.status - The initial status of the invite (typically `"pending"`).
+* @param args.expiresTime - Optional Unix timestamp (ms) after which the invite is considered expired.
+* @param args.extend - Optional arbitrary payload for application-specific metadata.
+* @returns The `Id<"GroupInvite">` of the newly created invite document.
+*
+* @example
+* ```ts
+* const inviteId = await ctx.runMutation(
+*   components.auth.groups.inviteCreate,
+*   {
+*     groupId: teamGroupId,
+*     invitedByUserId: currentUserId,
+*     email: "alice@example.com",
+*     tokenHash: hashedToken,
+*     roleIds: ["editor"],
+*     status: "pending",
+*     expiresTime: Date.now() + 7 * 24 * 60 * 60 * 1000, // 7 days
+*   },
+* );
+* ```
+*/
+const inviteCreate = mutation({
+	args: {
+		groupId: v.optional(v.id("Group")),
+		invitedByUserId: v.optional(v.id("User")),
+		email: v.optional(v.string()),
+		tokenHash: v.string(),
+		roleIds: v.optional(v.array(v.string())),
+		status: vInviteStatus,
+		expiresTime: v.optional(v.number()),
+		extend: v.optional(v.any())
+	},
+	returns: v.id("GroupInvite"),
+	handler: async (ctx, args) => {
+		const now = Date.now();
+		if (args.email !== void 0) if (args.groupId !== void 0) {
+			const existingGroupInvites = await ctx.db.query("GroupInvite").withIndex("group_id_status", (q) => q.eq("groupId", args.groupId).eq("status", "pending")).filter((q) => q.eq(q.field("email"), args.email)).collect();
+			for (const existingGroupInvite of existingGroupInvites) {
+				if (existingGroupInvite.expiresTime !== void 0 && existingGroupInvite.expiresTime <= now) {
+					await ctx.db.patch("GroupInvite", existingGroupInvite._id, { status: "expired" });
+					continue;
+				}
+				throw new ConvexError({
+					code: "DUPLICATE_INVITE",
+					message: "A pending invite already exists for this email in this group",
+					email: args.email,
+					groupId: args.groupId,
+					existingInviteId: existingGroupInvite._id
+				});
+			}
+		} else {
+			const existingPlatformInvites = await ctx.db.query("GroupInvite").withIndex("email_status", (q) => q.eq("email", args.email).eq("status", "pending")).filter((q) => q.eq(q.field("groupId"), void 0)).collect();
+			for (const existingPlatformInvite of existingPlatformInvites) {
+				if (existingPlatformInvite.expiresTime !== void 0 && existingPlatformInvite.expiresTime <= now) {
+					await ctx.db.patch("GroupInvite", existingPlatformInvite._id, { status: "expired" });
+					continue;
+				}
+				throw new ConvexError({
+					code: "DUPLICATE_INVITE",
+					message: "A pending platform invite already exists for this email",
+					email: args.email,
+					existingInviteId: existingPlatformInvite._id
+				});
+			}
+		}
+		return await ctx.db.insert("GroupInvite", args);
+	}
+});
+/**
+* Retrieve an invite by its document ID.
+*
+* Performs a direct lookup in the `GroupInvite` table and returns the full
+* invite document, or `null` if no invite exists with the given ID.
+*
+* @param args.inviteId - The `Id<"GroupInvite">` of the invite to retrieve.
+* @returns The invite document (including `email`, `status`, `groupId`, `tokenHash`, etc.) or `null` if not found.
+*
+* @example
+* ```ts
+* const invite = await ctx.runQuery(components.auth.groups.inviteGet, {
+*   inviteId: existingInviteId,
+* });
+* if (invite !== null) {
+*   console.log(invite.email, invite.status);
+* }
+* ```
+*/
+const inviteGet = query({
+	args: { inviteId: v.id("GroupInvite") },
+	returns: v.union(vGroupInviteDoc, v.null()),
+	handler: async (ctx, { inviteId }) => {
+		return await ctx.db.get("GroupInvite", inviteId);
+	}
+});
+/**
+* Retrieve an invite by its hashed token.
+*
+* Looks up the `GroupInvite` table using the `token_hash` index. This is
+* the primary mechanism for resolving an invite from a URL-embedded token.
+* Returns `null` if no invite matches the given hash.
+*
+* @param args.tokenHash - The hashed token string to look up (must match the value stored at creation time).
+* @returns The invite document or `null` if no invite exists with the given token hash.
+*
+* @example
+* ```ts
+* const invite = await ctx.runQuery(
+*   components.auth.groups.inviteGetByTokenHash,
+*   { tokenHash: "sha256_abc123..." },
+* );
+* if (invite !== null && invite.status === "pending") {
+*   // proceed with acceptance flow
+* }
+* ```
+*/
+const inviteGetByTokenHash = query({
+	args: { tokenHash: v.string() },
+	returns: v.union(vGroupInviteDoc, v.null()),
+	handler: async (ctx, { tokenHash }) => {
+		return await ctx.db.query("GroupInvite").withIndex("token_hash", (q) => q.eq("tokenHash", tokenHash)).first();
+	}
+});
+/**
+* List invites with optional filtering, sorting, and pagination.
+*
+* Returns `{ items, nextCursor }`. Supports filtering by `groupId`,
+* `status`, `email`, `invitedByUserId`, `roleId`, `acceptedByUserId`, and
+* `tokenHash`. The query engine automatically selects the best compound
+* index based on the combination of filter fields provided. The `roleId`
+* filter is applied in-memory after the index scan because role IDs are
+* stored as an array.
+*
+* @param args.where - Optional filter criteria for narrowing results.
+* @param args.where.tokenHash - Match invites with this exact hashed token.
+* @param args.where.groupId - Match invites scoped to this group.
+* @param args.where.status - Match invites with this status (e.g. `"pending"`, `"accepted"`, `"revoked"`).
+* @param args.where.email - Match invites sent to this email address.
+* @param args.where.invitedByUserId - Match invites created by this user.
+* @param args.where.roleId - Match invites that include this role identifier in their `roleIds` array.
+* @param args.where.acceptedByUserId - Match invites accepted by this specific user.
+* @param args.limit - Maximum number of items per page (clamped to 1..100, defaults to 50).
+* @param args.cursor - An opaque cursor string from a previous response's `nextCursor` to fetch the next page, or `null` to start from the beginning.
+* @param args.orderBy - The field to sort by: `"_creationTime"`, `"status"`, `"email"`, `"expiresTime"`, or `"acceptedTime"`.
+* @param args.order - Sort direction: `"asc"` or `"desc"` (defaults to `"desc"`).
+* @returns An object `{ items, nextCursor }` where `items` is an array of invite documents and `nextCursor` is `null` when there are no more pages.
+*
+* @example
+* ```ts
+* const { items, nextCursor } = await ctx.runQuery(
+*   components.auth.groups.inviteList,
+*   {
+*     where: { groupId: teamGroupId, status: "pending" },
+*     limit: 25,
+*     order: "desc",
+*   },
+* );
+* ```
+*/
+const inviteList = query({
+	args: {
+		where: v.optional(v.object({
+			tokenHash: v.optional(v.string()),
+			groupId: v.optional(v.id("Group")),
+			status: v.optional(vInviteStatus),
+			email: v.optional(v.string()),
+			invitedByUserId: v.optional(v.id("User")),
+			roleId: v.optional(v.string()),
+			acceptedByUserId: v.optional(v.id("User"))
+		})),
+		limit: v.optional(v.number()),
+		cursor: v.optional(v.union(v.string(), v.null())),
+		orderBy: v.optional(v.union(v.literal("_creationTime"), v.literal("status"), v.literal("email"), v.literal("expiresTime"), v.literal("acceptedTime"))),
+		order: v.optional(v.union(v.literal("asc"), v.literal("desc")))
+	},
+	returns: vPaginated(vGroupInviteDoc),
+	handler: async (ctx, args) => {
+		const where = args.where ?? {};
+		const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);
+		const order = args.order ?? "desc";
+		let q;
+		if (where.tokenHash !== void 0) q = ctx.db.query("GroupInvite").withIndex("token_hash", (idx) => idx.eq("tokenHash", where.tokenHash));
+		else if (where.groupId !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("group_id_status", (idx) => idx.eq("groupId", where.groupId).eq("status", where.status));
+		else if (where.email !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("email_status", (idx) => idx.eq("email", where.email).eq("status", where.status));
+		else if (where.invitedByUserId !== void 0 && where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("invited_by_user_id_status", (idx) => idx.eq("invitedByUserId", where.invitedByUserId).eq("status", where.status));
+		else if (where.groupId !== void 0) q = ctx.db.query("GroupInvite").withIndex("group_id", (idx) => idx.eq("groupId", where.groupId));
+		else if (where.status !== void 0) q = ctx.db.query("GroupInvite").withIndex("status", (idx) => idx.eq("status", where.status));
+		else q = ctx.db.query("GroupInvite");
+		if (where.groupId !== void 0) q = q.filter((f) => f.eq(f.field("groupId"), where.groupId));
+		if (where.status !== void 0) q = q.filter((f) => f.eq(f.field("status"), where.status));
+		if (where.email !== void 0) q = q.filter((f) => f.eq(f.field("email"), where.email));
+		if (where.invitedByUserId !== void 0) q = q.filter((f) => f.eq(f.field("invitedByUserId"), where.invitedByUserId));
+		if (where.acceptedByUserId !== void 0) q = q.filter((f) => f.eq(f.field("acceptedByUserId"), where.acceptedByUserId));
+		if (where.tokenHash !== void 0) q = q.filter((f) => f.eq(f.field("tokenHash"), where.tokenHash));
+		q = q.order(order);
+		let all = await q.collect();
+		if (where.roleId !== void 0) all = all.filter((doc) => (doc.roleIds ?? []).includes(where.roleId));
+		let startIdx = 0;
+		if (args.cursor) {
+			const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);
+			if (cursorIdx !== -1) startIdx = cursorIdx + 1;
+		}
+		const page = all.slice(startIdx, startIdx + limit + 1);
+		const hasMore = page.length > limit;
+		const items = hasMore ? page.slice(0, limit) : page;
+		return {
+			items,
+			nextCursor: hasMore ? items[items.length - 1]._id : null
+		};
+	}
+});
+/**
+* Accept a pending invitation.
+*
+* Marks the invite as `"accepted"` and records the acceptance timestamp.
+* Throws a structured `ConvexError` when the invite doesn't exist or is not
+* currently pending. If the invite has passed its `expiresTime`, it is
+* automatically transitioned to `"expired"` and the acceptance is rejected.
+*
+* The caller is responsible for creating the corresponding member record
+* (see {@link inviteAcceptByToken} for an all-in-one alternative that also
+* handles membership).
+*
+* @param args.inviteId - The `Id<"GroupInvite">` of the invite to accept.
+* @param args.acceptedByUserId - Optional `Id<"User">` of the user accepting the invite. Stored on the invite for audit purposes.
+* @returns `null` on success.
+* @throws `ConvexError` with code `INVITE_NOT_FOUND` if the invite does not exist.
+* @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has already been accepted, revoked, or otherwise finalized.
+* @throws `ConvexError` with code `INVITE_EXPIRED` if the invite's `expiresTime` has passed.
+*
+* @example
+* ```ts
+* await ctx.runMutation(components.auth.groups.inviteAccept, {
+*   inviteId: pendingInviteId,
+*   acceptedByUserId: currentUserId,
+* });
+* ```
+*/
+const inviteAccept = mutation({
+	args: {
+		inviteId: v.id("GroupInvite"),
+		acceptedByUserId: v.optional(v.id("User"))
+	},
+	returns: v.null(),
+	handler: async (ctx, { inviteId, acceptedByUserId }) => {
+		const invite = await ctx.db.get("GroupInvite", inviteId);
+		if (invite === null) throw new ConvexError({
+			code: "INVITE_NOT_FOUND",
+			message: "Invite not found",
+			inviteId
+		});
+		if (invite.status !== "pending") throw new ConvexError({
+			code: "INVITE_NOT_PENDING",
+			message: `Cannot accept invite with status "${invite.status}"`,
+			inviteId,
+			currentStatus: invite.status
+		});
+		if (invite.expiresTime !== void 0 && invite.expiresTime <= Date.now()) {
+			await ctx.db.patch("GroupInvite", inviteId, { status: "expired" });
+			throw new ConvexError({
+				code: "INVITE_EXPIRED",
+				message: "Invite has expired",
+				inviteId
+			});
+		}
+		await ctx.db.patch("GroupInvite", inviteId, {
+			status: "accepted",
+			acceptedTime: Date.now(),
+			...acceptedByUserId ? { acceptedByUserId } : {}
+		});
+		return null;
+	}
+});
+/**
+* Accept an invitation by raw token hash and atomically join group membership.
+*
+* This is the primary token-based acceptance flow. It looks up the invite by
+* `tokenHash`, validates status and expiry, verifies the accepting user's
+* email matches the invite email (when set), and — if the invite is scoped
+* to a group — creates a `GroupMember` record in the same transaction.
+*
+* The operation is idempotent: if the invite was already accepted by the
+* same user, it returns a result with `inviteStatus: "already_accepted"`
+* and the existing membership information.
+*
+* @param args.tokenHash - The hashed token string that identifies the invite (typically extracted from an invite URL).
+* @param args.acceptedByUserId - The `Id<"User">` of the user accepting the invitation. Their email must match the invite's email when one was specified.
+* @returns An object describing the outcome:
+*   - `inviteId` — the ID of the accepted invite.
+*   - `groupId` — the group the invite targets, or `null` for platform invites.
+*   - `memberId` — the ID of the created (or existing) member record, or `undefined` for platform invites.
+*   - `inviteStatus` — `"accepted"` for a fresh acceptance, `"already_accepted"` for idempotent replays.
+*   - `membershipStatus` — `"joined"`, `"already_joined"`, or `"not_applicable"`.
+* @throws `ConvexError` with code `INVITE_NOT_FOUND` if no invite matches the token hash.
+* @throws `ConvexError` with code `INVITE_EXPIRED` if the invite's `expiresTime` has passed.
+* @throws `ConvexError` with code `INVITE_ALREADY_ACCEPTED` if the invite was accepted by a different user.
+* @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has been revoked or is in another non-pending state.
+* @throws `ConvexError` with code `INVITE_EMAIL_MISMATCH` if the accepting user's email does not match the invite's email.
+*
+* @example
+* ```ts
+* const result = await ctx.runMutation(
+*   components.auth.groups.inviteAcceptByToken,
+*   {
+*     tokenHash: "sha256_abc123...",
+*     acceptedByUserId: currentUserId,
+*   },
+* );
+* if (result.membershipStatus === "joined") {
+*   console.log("Joined group", result.groupId, "as member", result.memberId);
+* }
+* ```
+*/
+const inviteAcceptByToken = mutation({
+	args: {
+		tokenHash: v.string(),
+		acceptedByUserId: v.id("User")
+	},
+	returns: vInviteAcceptByTokenResult,
+	handler: async (ctx, { tokenHash, acceptedByUserId }) => {
+		const invite = await ctx.db.query("GroupInvite").withIndex("token_hash", (q) => q.eq("tokenHash", tokenHash)).first();
+		if (invite === null) throw new ConvexError({
+			code: "INVITE_NOT_FOUND",
+			message: "Invite not found"
+		});
+		const now = Date.now();
+		if (invite.status === "pending") {
+			if (invite.expiresTime !== void 0 && invite.expiresTime <= now) {
+				await ctx.db.patch("GroupInvite", invite._id, { status: "expired" });
+				throw new ConvexError({
+					code: "INVITE_EXPIRED",
+					message: "Invite has expired",
+					inviteId: invite._id
+				});
+			}
+		} else if (invite.status === "accepted") {
+			if (invite.acceptedByUserId !== acceptedByUserId) throw new ConvexError({
+				code: "INVITE_ALREADY_ACCEPTED",
+				message: "Invite already accepted by another user",
+				inviteId: invite._id
+			});
+		} else throw new ConvexError({
+			code: "INVITE_NOT_PENDING",
+			message: `Cannot accept invite with status "${invite.status}"`,
+			inviteId: invite._id,
+			currentStatus: invite.status
+		});
+		if (invite.email !== void 0) {
+			const user = await ctx.db.get("User", acceptedByUserId);
+			const normalizedInviteEmail = invite.email.trim().toLowerCase();
+			const normalizedUserEmail = user?.email?.trim().toLowerCase();
+			if (normalizedUserEmail === void 0 || normalizedUserEmail !== normalizedInviteEmail) throw new ConvexError({
+				code: "INVITE_EMAIL_MISMATCH",
+				message: "Invite email does not match accepting user's email",
+				inviteId: invite._id
+			});
+		}
+		let membershipStatus = "not_applicable";
+		let memberId;
+		if (invite.groupId !== void 0) {
+			const existingMembership = await ctx.db.query("GroupMember").withIndex("group_id_user_id", (q) => q.eq("groupId", invite.groupId).eq("userId", acceptedByUserId)).unique();
+			if (existingMembership !== null) {
+				membershipStatus = "already_joined";
+				memberId = existingMembership._id;
+			} else {
+				memberId = await ctx.db.insert("GroupMember", {
+					groupId: invite.groupId,
+					userId: acceptedByUserId,
+					roleIds: invite.roleIds,
+					status: "active"
+				});
+				membershipStatus = "joined";
+			}
+		}
+		if (invite.status === "pending") await ctx.db.patch("GroupInvite", invite._id, {
+			status: "accepted",
+			acceptedByUserId,
+			acceptedTime: now
+		});
+		const inviteStatus = invite.status === "accepted" ? "already_accepted" : "accepted";
+		return {
+			inviteId: invite._id,
+			groupId: invite.groupId ?? null,
+			memberId,
+			inviteStatus,
+			membershipStatus
+		};
+	}
+});
+/**
+* Revoke a pending invitation.
+*
+* Marks the invite as `"revoked"`. Only invites with status `"pending"` can
+* be revoked. Throws a structured `ConvexError` when the invite doesn't
+* exist or is not currently pending. Once revoked, the invite's token can
+* no longer be used for acceptance.
+*
+* @param args.inviteId - The `Id<"GroupInvite">` of the invite to revoke.
+* @returns `null` on success.
+* @throws `ConvexError` with code `INVITE_NOT_FOUND` if the invite does not exist.
+* @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has already been accepted, revoked, or expired.
+*
+* @example
+* ```ts
+* await ctx.runMutation(components.auth.groups.inviteRevoke, {
+*   inviteId: pendingInviteId,
+* });
+* ```
+*/
+const inviteRevoke = mutation({
+	args: { inviteId: v.id("GroupInvite") },
+	returns: v.null(),
+	handler: async (ctx, { inviteId }) => {
+		const invite = await ctx.db.get("GroupInvite", inviteId);
+		if (invite === null) throw new ConvexError({
+			code: "INVITE_NOT_FOUND",
+			message: "Invite not found",
+			inviteId
+		});
+		if (invite.status !== "pending") throw new ConvexError({
+			code: "INVITE_NOT_PENDING",
+			message: `Cannot revoke invite with status "${invite.status}"`,
+			inviteId,
+			currentStatus: invite.status
+		});
+		await ctx.db.patch("GroupInvite", inviteId, { status: "revoked" });
+		return null;
+	}
+});
+
+//#endregion
+export { inviteAccept, inviteAcceptByToken, inviteCreate, inviteGet, inviteGetByTokenHash, inviteList, inviteRevoke };
+//# sourceMappingURL=invites.js.map

package/dist/component/public/groups/invites.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invites.js","names":[],"sources":["../../../../src/component/public/groups/invites.ts"],"sourcesContent":["import { ConvexError, v } from \"convex/values\";\nimport type { Id } from \"../../_generated/dataModel\";\nimport { mutation, query } from \"../../functions\";\nimport { vGroupInviteDoc, vInviteAcceptByTokenResult, vInviteStatus, vPaginated } from \"../../model\";\n\n/**\n * Create a new platform-level invitation. Optionally set `groupId` to tie\n * the invite to a specific group. The invitation is sent to an email address\n * and includes a hashed token for secure acceptance.\n *\n * Throws `ConvexError` with code `DUPLICATE_INVITE` when a pending invite\n * already exists for the same email and scope:\n * - group invite: same `email` + same `groupId`\n * - platform invite: same `email` with no `groupId`\n *\n * When a duplicate check finds an existing invite that has passed its\n * `expiresTime`, that invite is automatically marked as `\"expired\"` and the\n * new invite is allowed through. CLI-generated invites (no email) skip\n * duplicate detection entirely.\n *\n * @param args.groupId - Optional `Id<\"Group\">` to scope this invite to a specific group. Omit for a platform-wide invite.\n * @param args.invitedByUserId - Optional `Id<\"User\">` of the user who issued the invitation.\n * @param args.email - Optional email address of the invitee. When provided, duplicate detection is enforced.\n * @param args.tokenHash - A pre-hashed token string used for secure, URL-safe invite acceptance.\n * @param args.roleIds - Optional array of application-defined role identifiers to assign upon acceptance.\n * @param args.status - The initial status of the invite (typically `\"pending\"`).\n * @param args.expiresTime - Optional Unix timestamp (ms) after which the invite is considered expired.\n * @param args.extend - Optional arbitrary payload for application-specific metadata.\n * @returns The `Id<\"GroupInvite\">` of the newly created invite document.\n *\n * @example\n * ```ts\n * const inviteId = await ctx.runMutation(\n *   components.auth.groups.inviteCreate,\n *   {\n *     groupId: teamGroupId,\n *     invitedByUserId: currentUserId,\n *     email: \"alice@example.com\",\n *     tokenHash: hashedToken,\n *     roleIds: [\"editor\"],\n *     status: \"pending\",\n *     expiresTime: Date.now() + 7 * 24 * 60 * 60 * 1000, // 7 days\n *   },\n * );\n * ```\n */\nexport const inviteCreate = mutation({\n  args: {\n    groupId: v.optional(v.id(\"Group\")),\n    invitedByUserId: v.optional(v.id(\"User\")),\n    email: v.optional(v.string()),\n    tokenHash: v.string(),\n    roleIds: v.optional(v.array(v.string())),\n    status: vInviteStatus,\n    expiresTime: v.optional(v.number()),\n    extend: v.optional(v.any()),\n  },\n  returns: v.id(\"GroupInvite\"),\n  handler: async (ctx, args) => {\n    const now = Date.now();\n\n    // Only check for duplicates when an email is provided.\n    // CLI-generated invites (no email) are always allowed.\n    if (args.email !== undefined) {\n      if (args.groupId !== undefined) {\n        const existingGroupInvites = await ctx.db\n          .query(\"GroupInvite\")\n          .withIndex(\"group_id_status\", (q) =>\n            q.eq(\"groupId\", args.groupId).eq(\"status\", \"pending\"),\n          )\n          .filter((q) => q.eq(q.field(\"email\"), args.email))\n          .collect();\n\n        for (const existingGroupInvite of existingGroupInvites) {\n          const isExpired =\n            existingGroupInvite.expiresTime !== undefined &&\n            existingGroupInvite.expiresTime <= now;\n          if (isExpired) {\n            await ctx.db.patch(\"GroupInvite\", existingGroupInvite._id, {\n              status: \"expired\",\n            });\n            continue;\n          }\n          throw new ConvexError({\n            code: \"DUPLICATE_INVITE\",\n            message:\n              \"A pending invite already exists for this email in this group\",\n            email: args.email,\n            groupId: args.groupId,\n            existingInviteId: existingGroupInvite._id,\n          });\n        }\n      } else {\n        const existingPlatformInvites = await ctx.db\n          .query(\"GroupInvite\")\n          .withIndex(\"email_status\", (q) =>\n            q.eq(\"email\", args.email).eq(\"status\", \"pending\"),\n          )\n          .filter((q) => q.eq(q.field(\"groupId\"), undefined))\n          .collect();\n\n        for (const existingPlatformInvite of existingPlatformInvites) {\n          const isExpired =\n            existingPlatformInvite.expiresTime !== undefined &&\n            existingPlatformInvite.expiresTime <= now;\n          if (isExpired) {\n            await ctx.db.patch(\"GroupInvite\", existingPlatformInvite._id, {\n              status: \"expired\",\n            });\n            continue;\n          }\n          throw new ConvexError({\n            code: \"DUPLICATE_INVITE\",\n            message: \"A pending platform invite already exists for this email\",\n            email: args.email,\n            existingInviteId: existingPlatformInvite._id,\n          });\n        }\n      }\n    }\n    return await ctx.db.insert(\"GroupInvite\", args);\n  },\n});\n\n/**\n * Retrieve an invite by its document ID.\n *\n * Performs a direct lookup in the `GroupInvite` table and returns the full\n * invite document, or `null` if no invite exists with the given ID.\n *\n * @param args.inviteId - The `Id<\"GroupInvite\">` of the invite to retrieve.\n * @returns The invite document (including `email`, `status`, `groupId`, `tokenHash`, etc.) or `null` if not found.\n *\n * @example\n * ```ts\n * const invite = await ctx.runQuery(components.auth.groups.inviteGet, {\n *   inviteId: existingInviteId,\n * });\n * if (invite !== null) {\n *   console.log(invite.email, invite.status);\n * }\n * ```\n */\nexport const inviteGet = query({\n  args: { inviteId: v.id(\"GroupInvite\") },\n  returns: v.union(vGroupInviteDoc, v.null()),\n  handler: async (ctx, { inviteId }) => {\n    return await ctx.db.get(\"GroupInvite\", inviteId);\n  },\n});\n\n/**\n * Retrieve an invite by its hashed token.\n *\n * Looks up the `GroupInvite` table using the `token_hash` index. This is\n * the primary mechanism for resolving an invite from a URL-embedded token.\n * Returns `null` if no invite matches the given hash.\n *\n * @param args.tokenHash - The hashed token string to look up (must match the value stored at creation time).\n * @returns The invite document or `null` if no invite exists with the given token hash.\n *\n * @example\n * ```ts\n * const invite = await ctx.runQuery(\n *   components.auth.groups.inviteGetByTokenHash,\n *   { tokenHash: \"sha256_abc123...\" },\n * );\n * if (invite !== null && invite.status === \"pending\") {\n *   // proceed with acceptance flow\n * }\n * ```\n */\nexport const inviteGetByTokenHash = query({\n  args: { tokenHash: v.string() },\n  returns: v.union(vGroupInviteDoc, v.null()),\n  handler: async (ctx, { tokenHash }) => {\n    return await ctx.db\n      .query(\"GroupInvite\")\n      .withIndex(\"token_hash\", (q) => q.eq(\"tokenHash\", tokenHash))\n      .first();\n  },\n});\n\n/**\n * List invites with optional filtering, sorting, and pagination.\n *\n * Returns `{ items, nextCursor }`. Supports filtering by `groupId`,\n * `status`, `email`, `invitedByUserId`, `roleId`, `acceptedByUserId`, and\n * `tokenHash`. The query engine automatically selects the best compound\n * index based on the combination of filter fields provided. The `roleId`\n * filter is applied in-memory after the index scan because role IDs are\n * stored as an array.\n *\n * @param args.where - Optional filter criteria for narrowing results.\n * @param args.where.tokenHash - Match invites with this exact hashed token.\n * @param args.where.groupId - Match invites scoped to this group.\n * @param args.where.status - Match invites with this status (e.g. `\"pending\"`, `\"accepted\"`, `\"revoked\"`).\n * @param args.where.email - Match invites sent to this email address.\n * @param args.where.invitedByUserId - Match invites created by this user.\n * @param args.where.roleId - Match invites that include this role identifier in their `roleIds` array.\n * @param args.where.acceptedByUserId - Match invites accepted by this specific user.\n * @param args.limit - Maximum number of items per page (clamped to 1..100, defaults to 50).\n * @param args.cursor - An opaque cursor string from a previous response's `nextCursor` to fetch the next page, or `null` to start from the beginning.\n * @param args.orderBy - The field to sort by: `\"_creationTime\"`, `\"status\"`, `\"email\"`, `\"expiresTime\"`, or `\"acceptedTime\"`.\n * @param args.order - Sort direction: `\"asc\"` or `\"desc\"` (defaults to `\"desc\"`).\n * @returns An object `{ items, nextCursor }` where `items` is an array of invite documents and `nextCursor` is `null` when there are no more pages.\n *\n * @example\n * ```ts\n * const { items, nextCursor } = await ctx.runQuery(\n *   components.auth.groups.inviteList,\n *   {\n *     where: { groupId: teamGroupId, status: \"pending\" },\n *     limit: 25,\n *     order: \"desc\",\n *   },\n * );\n * ```\n */\nexport const inviteList = query({\n  args: {\n    where: v.optional(\n      v.object({\n        tokenHash: v.optional(v.string()),\n        groupId: v.optional(v.id(\"Group\")),\n        status: v.optional(vInviteStatus),\n        email: v.optional(v.string()),\n        invitedByUserId: v.optional(v.id(\"User\")),\n        roleId: v.optional(v.string()),\n        acceptedByUserId: v.optional(v.id(\"User\")),\n      }),\n    ),\n    limit: v.optional(v.number()),\n    cursor: v.optional(v.union(v.string(), v.null())),\n    orderBy: v.optional(\n      v.union(\n        v.literal(\"_creationTime\"),\n        v.literal(\"status\"),\n        v.literal(\"email\"),\n        v.literal(\"expiresTime\"),\n        v.literal(\"acceptedTime\"),\n      ),\n    ),\n    order: v.optional(v.union(v.literal(\"asc\"), v.literal(\"desc\"))),\n  },\n  returns: vPaginated(vGroupInviteDoc),\n  handler: async (ctx, args) => {\n    const where = args.where ?? {};\n    const limit = Math.min(Math.max(args.limit ?? 50, 1), 100);\n    const order = args.order ?? \"desc\";\n\n    // Pick best index\n    let q;\n    if (where.tokenHash !== undefined) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"token_hash\", (idx) =>\n          idx.eq(\"tokenHash\", where.tokenHash!),\n        );\n    } else if (where.groupId !== undefined && where.status !== undefined) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"group_id_status\", (idx) =>\n          idx.eq(\"groupId\", where.groupId!).eq(\"status\", where.status!),\n        );\n    } else if (where.email !== undefined && where.status !== undefined) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"email_status\", (idx) =>\n          idx.eq(\"email\", where.email!).eq(\"status\", where.status!),\n        );\n    } else if (\n      where.invitedByUserId !== undefined &&\n      where.status !== undefined\n    ) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"invited_by_user_id_status\", (idx) =>\n          idx\n            .eq(\"invitedByUserId\", where.invitedByUserId!)\n            .eq(\"status\", where.status!),\n        );\n    } else if (where.groupId !== undefined) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"group_id\", (idx) => idx.eq(\"groupId\", where.groupId!));\n    } else if (where.status !== undefined) {\n      q = ctx.db\n        .query(\"GroupInvite\")\n        .withIndex(\"status\", (idx) => idx.eq(\"status\", where.status!));\n    } else {\n      q = ctx.db.query(\"GroupInvite\");\n    }\n\n    // Apply remaining filters\n    if (where.groupId !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"groupId\"), where.groupId!));\n    }\n    if (where.status !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"status\"), where.status!));\n    }\n    if (where.email !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"email\"), where.email!));\n    }\n    if (where.invitedByUserId !== undefined) {\n      q = q.filter((f) =>\n        f.eq(f.field(\"invitedByUserId\"), where.invitedByUserId!),\n      );\n    }\n    if (where.acceptedByUserId !== undefined) {\n      q = q.filter((f) =>\n        f.eq(f.field(\"acceptedByUserId\"), where.acceptedByUserId!),\n      );\n    }\n    if (where.tokenHash !== undefined) {\n      q = q.filter((f) => f.eq(f.field(\"tokenHash\"), where.tokenHash!));\n    }\n\n    q = q.order(order);\n\n    let all = await q.collect();\n    if (where.roleId !== undefined) {\n      all = all.filter((doc) => (doc.roleIds ?? []).includes(where.roleId!));\n    }\n    let startIdx = 0;\n    if (args.cursor) {\n      const cursorIdx = all.findIndex((doc) => doc._id === args.cursor);\n      if (cursorIdx !== -1) {\n        startIdx = cursorIdx + 1;\n      }\n    }\n    const page = all.slice(startIdx, startIdx + limit + 1);\n    const hasMore = page.length > limit;\n    const items = hasMore ? page.slice(0, limit) : page;\n    const nextCursor = hasMore ? items[items.length - 1]._id : null;\n    return { items, nextCursor };\n  },\n});\n\n/**\n * Accept a pending invitation.\n *\n * Marks the invite as `\"accepted\"` and records the acceptance timestamp.\n * Throws a structured `ConvexError` when the invite doesn't exist or is not\n * currently pending. If the invite has passed its `expiresTime`, it is\n * automatically transitioned to `\"expired\"` and the acceptance is rejected.\n *\n * The caller is responsible for creating the corresponding member record\n * (see {@link inviteAcceptByToken} for an all-in-one alternative that also\n * handles membership).\n *\n * @param args.inviteId - The `Id<\"GroupInvite\">` of the invite to accept.\n * @param args.acceptedByUserId - Optional `Id<\"User\">` of the user accepting the invite. Stored on the invite for audit purposes.\n * @returns `null` on success.\n * @throws `ConvexError` with code `INVITE_NOT_FOUND` if the invite does not exist.\n * @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has already been accepted, revoked, or otherwise finalized.\n * @throws `ConvexError` with code `INVITE_EXPIRED` if the invite's `expiresTime` has passed.\n *\n * @example\n * ```ts\n * await ctx.runMutation(components.auth.groups.inviteAccept, {\n *   inviteId: pendingInviteId,\n *   acceptedByUserId: currentUserId,\n * });\n * ```\n */\nexport const inviteAccept = mutation({\n  args: {\n    inviteId: v.id(\"GroupInvite\"),\n    acceptedByUserId: v.optional(v.id(\"User\")),\n  },\n  returns: v.null(),\n  handler: async (ctx, { inviteId, acceptedByUserId }) => {\n    const invite = await ctx.db.get(\"GroupInvite\", inviteId);\n    if (invite === null) {\n      throw new ConvexError({\n        code: \"INVITE_NOT_FOUND\",\n        message: \"Invite not found\",\n        inviteId,\n      });\n    }\n    if (invite.status !== \"pending\") {\n      throw new ConvexError({\n        code: \"INVITE_NOT_PENDING\",\n        message: `Cannot accept invite with status \"${invite.status}\"`,\n        inviteId,\n        currentStatus: invite.status,\n      });\n    }\n    if (invite.expiresTime !== undefined && invite.expiresTime <= Date.now()) {\n      await ctx.db.patch(\"GroupInvite\", inviteId, {\n        status: \"expired\",\n      });\n      throw new ConvexError({\n        code: \"INVITE_EXPIRED\",\n        message: \"Invite has expired\",\n        inviteId,\n      });\n    }\n    await ctx.db.patch(\"GroupInvite\", inviteId, {\n      status: \"accepted\",\n      acceptedTime: Date.now(),\n      ...(acceptedByUserId ? { acceptedByUserId } : {}),\n    });\n    return null;\n  },\n});\n\n/**\n * Accept an invitation by raw token hash and atomically join group membership.\n *\n * This is the primary token-based acceptance flow. It looks up the invite by\n * `tokenHash`, validates status and expiry, verifies the accepting user's\n * email matches the invite email (when set), and — if the invite is scoped\n * to a group — creates a `GroupMember` record in the same transaction.\n *\n * The operation is idempotent: if the invite was already accepted by the\n * same user, it returns a result with `inviteStatus: \"already_accepted\"`\n * and the existing membership information.\n *\n * @param args.tokenHash - The hashed token string that identifies the invite (typically extracted from an invite URL).\n * @param args.acceptedByUserId - The `Id<\"User\">` of the user accepting the invitation. Their email must match the invite's email when one was specified.\n * @returns An object describing the outcome:\n *   - `inviteId` — the ID of the accepted invite.\n *   - `groupId` — the group the invite targets, or `null` for platform invites.\n *   - `memberId` — the ID of the created (or existing) member record, or `undefined` for platform invites.\n *   - `inviteStatus` — `\"accepted\"` for a fresh acceptance, `\"already_accepted\"` for idempotent replays.\n *   - `membershipStatus` — `\"joined\"`, `\"already_joined\"`, or `\"not_applicable\"`.\n * @throws `ConvexError` with code `INVITE_NOT_FOUND` if no invite matches the token hash.\n * @throws `ConvexError` with code `INVITE_EXPIRED` if the invite's `expiresTime` has passed.\n * @throws `ConvexError` with code `INVITE_ALREADY_ACCEPTED` if the invite was accepted by a different user.\n * @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has been revoked or is in another non-pending state.\n * @throws `ConvexError` with code `INVITE_EMAIL_MISMATCH` if the accepting user's email does not match the invite's email.\n *\n * @example\n * ```ts\n * const result = await ctx.runMutation(\n *   components.auth.groups.inviteAcceptByToken,\n *   {\n *     tokenHash: \"sha256_abc123...\",\n *     acceptedByUserId: currentUserId,\n *   },\n * );\n * if (result.membershipStatus === \"joined\") {\n *   console.log(\"Joined group\", result.groupId, \"as member\", result.memberId);\n * }\n * ```\n */\nexport const inviteAcceptByToken = mutation({\n  args: {\n    tokenHash: v.string(),\n    acceptedByUserId: v.id(\"User\"),\n  },\n  returns: vInviteAcceptByTokenResult,\n  handler: async (ctx, { tokenHash, acceptedByUserId }) => {\n    const invite = await ctx.db\n      .query(\"GroupInvite\")\n      .withIndex(\"token_hash\", (q) => q.eq(\"tokenHash\", tokenHash))\n      .first();\n\n    if (invite === null) {\n      throw new ConvexError({\n        code: \"INVITE_NOT_FOUND\",\n        message: \"Invite not found\",\n      });\n    }\n\n    const now = Date.now();\n    if (invite.status === \"pending\") {\n      if (invite.expiresTime !== undefined && invite.expiresTime <= now) {\n        await ctx.db.patch(\"GroupInvite\", invite._id, { status: \"expired\" });\n        throw new ConvexError({\n          code: \"INVITE_EXPIRED\",\n          message: \"Invite has expired\",\n          inviteId: invite._id,\n        });\n      }\n    } else if (invite.status === \"accepted\") {\n      if (invite.acceptedByUserId !== acceptedByUserId) {\n        throw new ConvexError({\n          code: \"INVITE_ALREADY_ACCEPTED\",\n          message: \"Invite already accepted by another user\",\n          inviteId: invite._id,\n        });\n      }\n    } else {\n      throw new ConvexError({\n        code: \"INVITE_NOT_PENDING\",\n        message: `Cannot accept invite with status \"${invite.status}\"`,\n        inviteId: invite._id,\n        currentStatus: invite.status,\n      });\n    }\n\n    if (invite.email !== undefined) {\n      const user = await ctx.db.get(\"User\", acceptedByUserId);\n      const normalizedInviteEmail = invite.email.trim().toLowerCase();\n      const normalizedUserEmail = user?.email?.trim().toLowerCase();\n\n      if (\n        normalizedUserEmail === undefined ||\n        normalizedUserEmail !== normalizedInviteEmail\n      ) {\n        throw new ConvexError({\n          code: \"INVITE_EMAIL_MISMATCH\",\n          message: \"Invite email does not match accepting user's email\",\n          inviteId: invite._id,\n        });\n      }\n    }\n\n    let membershipStatus: \"joined\" | \"already_joined\" | \"not_applicable\" =\n      \"not_applicable\";\n    let memberId: Id<\"GroupMember\"> | undefined;\n\n    if (invite.groupId !== undefined) {\n      const existingMembership = await ctx.db\n        .query(\"GroupMember\")\n        .withIndex(\"group_id_user_id\", (q) =>\n          q.eq(\"groupId\", invite.groupId!).eq(\"userId\", acceptedByUserId),\n        )\n        .unique();\n\n      if (existingMembership !== null) {\n        membershipStatus = \"already_joined\";\n        memberId = existingMembership._id;\n      } else {\n        memberId = await ctx.db.insert(\"GroupMember\", {\n          groupId: invite.groupId,\n          userId: acceptedByUserId,\n          roleIds: invite.roleIds,\n          status: \"active\",\n        });\n        membershipStatus = \"joined\";\n      }\n    }\n\n    if (invite.status === \"pending\") {\n      await ctx.db.patch(\"GroupInvite\", invite._id, {\n        status: \"accepted\",\n        acceptedByUserId,\n        acceptedTime: now,\n      });\n    }\n\n    const inviteStatus: \"accepted\" | \"already_accepted\" =\n      invite.status === \"accepted\" ? \"already_accepted\" : \"accepted\";\n\n    return {\n      inviteId: invite._id,\n      groupId: invite.groupId ?? null,\n      memberId,\n      inviteStatus,\n      membershipStatus,\n    };\n  },\n});\n\n/**\n * Revoke a pending invitation.\n *\n * Marks the invite as `\"revoked\"`. Only invites with status `\"pending\"` can\n * be revoked. Throws a structured `ConvexError` when the invite doesn't\n * exist or is not currently pending. Once revoked, the invite's token can\n * no longer be used for acceptance.\n *\n * @param args.inviteId - The `Id<\"GroupInvite\">` of the invite to revoke.\n * @returns `null` on success.\n * @throws `ConvexError` with code `INVITE_NOT_FOUND` if the invite does not exist.\n * @throws `ConvexError` with code `INVITE_NOT_PENDING` if the invite has already been accepted, revoked, or expired.\n *\n * @example\n * ```ts\n * await ctx.runMutation(components.auth.groups.inviteRevoke, {\n *   inviteId: pendingInviteId,\n * });\n * ```\n */\nexport const inviteRevoke = mutation({\n  args: { inviteId: v.id(\"GroupInvite\") },\n  returns: v.null(),\n  handler: async (ctx, { inviteId }) => {\n    const invite = await ctx.db.get(\"GroupInvite\", inviteId);\n    if (invite === null) {\n      throw new ConvexError({\n        code: \"INVITE_NOT_FOUND\",\n        message: \"Invite not found\",\n        inviteId,\n      });\n    }\n    if (invite.status !== \"pending\") {\n      throw new ConvexError({\n        code: \"INVITE_NOT_PENDING\",\n        message: `Cannot revoke invite with status \"${invite.status}\"`,\n        inviteId,\n        currentStatus: invite.status,\n      });\n    }\n    await ctx.db.patch(\"GroupInvite\", inviteId, { status: \"revoked\" });\n    return null;\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CA,MAAa,eAAe,SAAS;CACnC,MAAM;EACJ,SAAS,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;EAClC,iBAAiB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;EACzC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC7B,WAAW,EAAE,QAAQ;EACrB,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;EACxC,QAAQ;EACR,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC;EACnC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;EAC5B;CACD,SAAS,EAAE,GAAG,cAAc;CAC5B,SAAS,OAAO,KAAK,SAAS;EAC5B,MAAM,MAAM,KAAK,KAAK;AAItB,MAAI,KAAK,UAAU,OACjB,KAAI,KAAK,YAAY,QAAW;GAC9B,MAAM,uBAAuB,MAAM,IAAI,GACpC,MAAM,cAAc,CACpB,UAAU,oBAAoB,MAC7B,EAAE,GAAG,WAAW,KAAK,QAAQ,CAAC,GAAG,UAAU,UAAU,CACtD,CACA,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,QAAQ,EAAE,KAAK,MAAM,CAAC,CACjD,SAAS;AAEZ,QAAK,MAAM,uBAAuB,sBAAsB;AAItD,QAFE,oBAAoB,gBAAgB,UACpC,oBAAoB,eAAe,KACtB;AACb,WAAM,IAAI,GAAG,MAAM,eAAe,oBAAoB,KAAK,EACzD,QAAQ,WACT,CAAC;AACF;;AAEF,UAAM,IAAI,YAAY;KACpB,MAAM;KACN,SACE;KACF,OAAO,KAAK;KACZ,SAAS,KAAK;KACd,kBAAkB,oBAAoB;KACvC,CAAC;;SAEC;GACL,MAAM,0BAA0B,MAAM,IAAI,GACvC,MAAM,cAAc,CACpB,UAAU,iBAAiB,MAC1B,EAAE,GAAG,SAAS,KAAK,MAAM,CAAC,GAAG,UAAU,UAAU,CAClD,CACA,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,UAAU,EAAE,OAAU,CAAC,CAClD,SAAS;AAEZ,QAAK,MAAM,0BAA0B,yBAAyB;AAI5D,QAFE,uBAAuB,gBAAgB,UACvC,uBAAuB,eAAe,KACzB;AACb,WAAM,IAAI,GAAG,MAAM,eAAe,uBAAuB,KAAK,EAC5D,QAAQ,WACT,CAAC;AACF;;AAEF,UAAM,IAAI,YAAY;KACpB,MAAM;KACN,SAAS;KACT,OAAO,KAAK;KACZ,kBAAkB,uBAAuB;KAC1C,CAAC;;;AAIR,SAAO,MAAM,IAAI,GAAG,OAAO,eAAe,KAAK;;CAElD,CAAC;;;;;;;;;;;;;;;;;;;;AAqBF,MAAa,YAAY,MAAM;CAC7B,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE;CACvC,SAAS,EAAE,MAAM,iBAAiB,EAAE,MAAM,CAAC;CAC3C,SAAS,OAAO,KAAK,EAAE,eAAe;AACpC,SAAO,MAAM,IAAI,GAAG,IAAI,eAAe,SAAS;;CAEnD,CAAC;;;;;;;;;;;;;;;;;;;;;;AAuBF,MAAa,uBAAuB,MAAM;CACxC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE;CAC/B,SAAS,EAAE,MAAM,iBAAiB,EAAE,MAAM,CAAC;CAC3C,SAAS,OAAO,KAAK,EAAE,gBAAgB;AACrC,SAAO,MAAM,IAAI,GACd,MAAM,cAAc,CACpB,UAAU,eAAe,MAAM,EAAE,GAAG,aAAa,UAAU,CAAC,CAC5D,OAAO;;CAEb,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCF,MAAa,aAAa,MAAM;CAC9B,MAAM;EACJ,OAAO,EAAE,SACP,EAAE,OAAO;GACP,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;GACjC,SAAS,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC;GAClC,QAAQ,EAAE,SAAS,cAAc;GACjC,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC7B,iBAAiB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;GACzC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;GAC9B,kBAAkB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;GAC3C,CAAC,CACH;EACD,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC7B,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,MAAM,CAAC,CAAC;EACjD,SAAS,EAAE,SACT,EAAE,MACA,EAAE,QAAQ,gBAAgB,EAC1B,EAAE,QAAQ,SAAS,EACnB,EAAE,QAAQ,QAAQ,EAClB,EAAE,QAAQ,cAAc,EACxB,EAAE,QAAQ,eAAe,CAC1B,CACF;EACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,MAAM,EAAE,EAAE,QAAQ,OAAO,CAAC,CAAC;EAChE;CACD,SAAS,WAAW,gBAAgB;CACpC,SAAS,OAAO,KAAK,SAAS;EAC5B,MAAM,QAAQ,KAAK,SAAS,EAAE;EAC9B,MAAM,QAAQ,KAAK,IAAI,KAAK,IAAI,KAAK,SAAS,IAAI,EAAE,EAAE,IAAI;EAC1D,MAAM,QAAQ,KAAK,SAAS;EAG5B,IAAI;AACJ,MAAI,MAAM,cAAc,OACtB,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,eAAe,QACxB,IAAI,GAAG,aAAa,MAAM,UAAW,CACtC;WACM,MAAM,YAAY,UAAa,MAAM,WAAW,OACzD,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,oBAAoB,QAC7B,IAAI,GAAG,WAAW,MAAM,QAAS,CAAC,GAAG,UAAU,MAAM,OAAQ,CAC9D;WACM,MAAM,UAAU,UAAa,MAAM,WAAW,OACvD,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,iBAAiB,QAC1B,IAAI,GAAG,SAAS,MAAM,MAAO,CAAC,GAAG,UAAU,MAAM,OAAQ,CAC1D;WAEH,MAAM,oBAAoB,UAC1B,MAAM,WAAW,OAEjB,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,8BAA8B,QACvC,IACG,GAAG,mBAAmB,MAAM,gBAAiB,CAC7C,GAAG,UAAU,MAAM,OAAQ,CAC/B;WACM,MAAM,YAAY,OAC3B,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,aAAa,QAAQ,IAAI,GAAG,WAAW,MAAM,QAAS,CAAC;WAC3D,MAAM,WAAW,OAC1B,KAAI,IAAI,GACL,MAAM,cAAc,CACpB,UAAU,WAAW,QAAQ,IAAI,GAAG,UAAU,MAAM,OAAQ,CAAC;MAEhE,KAAI,IAAI,GAAG,MAAM,cAAc;AAIjC,MAAI,MAAM,YAAY,OACpB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,UAAU,EAAE,MAAM,QAAS,CAAC;AAE/D,MAAI,MAAM,WAAW,OACnB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,SAAS,EAAE,MAAM,OAAQ,CAAC;AAE7D,MAAI,MAAM,UAAU,OAClB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,QAAQ,EAAE,MAAM,MAAO,CAAC;AAE3D,MAAI,MAAM,oBAAoB,OAC5B,KAAI,EAAE,QAAQ,MACZ,EAAE,GAAG,EAAE,MAAM,kBAAkB,EAAE,MAAM,gBAAiB,CACzD;AAEH,MAAI,MAAM,qBAAqB,OAC7B,KAAI,EAAE,QAAQ,MACZ,EAAE,GAAG,EAAE,MAAM,mBAAmB,EAAE,MAAM,iBAAkB,CAC3D;AAEH,MAAI,MAAM,cAAc,OACtB,KAAI,EAAE,QAAQ,MAAM,EAAE,GAAG,EAAE,MAAM,YAAY,EAAE,MAAM,UAAW,CAAC;AAGnE,MAAI,EAAE,MAAM,MAAM;EAElB,IAAI,MAAM,MAAM,EAAE,SAAS;AAC3B,MAAI,MAAM,WAAW,OACnB,OAAM,IAAI,QAAQ,SAAS,IAAI,WAAW,EAAE,EAAE,SAAS,MAAM,OAAQ,CAAC;EAExE,IAAI,WAAW;AACf,MAAI,KAAK,QAAQ;GACf,MAAM,YAAY,IAAI,WAAW,QAAQ,IAAI,QAAQ,KAAK,OAAO;AACjE,OAAI,cAAc,GAChB,YAAW,YAAY;;EAG3B,MAAM,OAAO,IAAI,MAAM,UAAU,WAAW,QAAQ,EAAE;EACtD,MAAM,UAAU,KAAK,SAAS;EAC9B,MAAM,QAAQ,UAAU,KAAK,MAAM,GAAG,MAAM,GAAG;AAE/C,SAAO;GAAE;GAAO,YADG,UAAU,MAAM,MAAM,SAAS,GAAG,MAAM;GAC/B;;CAE/B,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6BF,MAAa,eAAe,SAAS;CACnC,MAAM;EACJ,UAAU,EAAE,GAAG,cAAc;EAC7B,kBAAkB,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;EAC3C;CACD,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,UAAU,uBAAuB;EACtD,MAAM,SAAS,MAAM,IAAI,GAAG,IAAI,eAAe,SAAS;AACxD,MAAI,WAAW,KACb,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS;GACT;GACD,CAAC;AAEJ,MAAI,OAAO,WAAW,UACpB,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS,qCAAqC,OAAO,OAAO;GAC5D;GACA,eAAe,OAAO;GACvB,CAAC;AAEJ,MAAI,OAAO,gBAAgB,UAAa,OAAO,eAAe,KAAK,KAAK,EAAE;AACxE,SAAM,IAAI,GAAG,MAAM,eAAe,UAAU,EAC1C,QAAQ,WACT,CAAC;AACF,SAAM,IAAI,YAAY;IACpB,MAAM;IACN,SAAS;IACT;IACD,CAAC;;AAEJ,QAAM,IAAI,GAAG,MAAM,eAAe,UAAU;GAC1C,QAAQ;GACR,cAAc,KAAK,KAAK;GACxB,GAAI,mBAAmB,EAAE,kBAAkB,GAAG,EAAE;GACjD,CAAC;AACF,SAAO;;CAEV,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0CF,MAAa,sBAAsB,SAAS;CAC1C,MAAM;EACJ,WAAW,EAAE,QAAQ;EACrB,kBAAkB,EAAE,GAAG,OAAO;EAC/B;CACD,SAAS;CACT,SAAS,OAAO,KAAK,EAAE,WAAW,uBAAuB;EACvD,MAAM,SAAS,MAAM,IAAI,GACtB,MAAM,cAAc,CACpB,UAAU,eAAe,MAAM,EAAE,GAAG,aAAa,UAAU,CAAC,CAC5D,OAAO;AAEV,MAAI,WAAW,KACb,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS;GACV,CAAC;EAGJ,MAAM,MAAM,KAAK,KAAK;AACtB,MAAI,OAAO,WAAW,WACpB;OAAI,OAAO,gBAAgB,UAAa,OAAO,eAAe,KAAK;AACjE,UAAM,IAAI,GAAG,MAAM,eAAe,OAAO,KAAK,EAAE,QAAQ,WAAW,CAAC;AACpE,UAAM,IAAI,YAAY;KACpB,MAAM;KACN,SAAS;KACT,UAAU,OAAO;KAClB,CAAC;;aAEK,OAAO,WAAW,YAC3B;OAAI,OAAO,qBAAqB,iBAC9B,OAAM,IAAI,YAAY;IACpB,MAAM;IACN,SAAS;IACT,UAAU,OAAO;IAClB,CAAC;QAGJ,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS,qCAAqC,OAAO,OAAO;GAC5D,UAAU,OAAO;GACjB,eAAe,OAAO;GACvB,CAAC;AAGJ,MAAI,OAAO,UAAU,QAAW;GAC9B,MAAM,OAAO,MAAM,IAAI,GAAG,IAAI,QAAQ,iBAAiB;GACvD,MAAM,wBAAwB,OAAO,MAAM,MAAM,CAAC,aAAa;GAC/D,MAAM,sBAAsB,MAAM,OAAO,MAAM,CAAC,aAAa;AAE7D,OACE,wBAAwB,UACxB,wBAAwB,sBAExB,OAAM,IAAI,YAAY;IACpB,MAAM;IACN,SAAS;IACT,UAAU,OAAO;IAClB,CAAC;;EAIN,IAAI,mBACF;EACF,IAAI;AAEJ,MAAI,OAAO,YAAY,QAAW;GAChC,MAAM,qBAAqB,MAAM,IAAI,GAClC,MAAM,cAAc,CACpB,UAAU,qBAAqB,MAC9B,EAAE,GAAG,WAAW,OAAO,QAAS,CAAC,GAAG,UAAU,iBAAiB,CAChE,CACA,QAAQ;AAEX,OAAI,uBAAuB,MAAM;AAC/B,uBAAmB;AACnB,eAAW,mBAAmB;UACzB;AACL,eAAW,MAAM,IAAI,GAAG,OAAO,eAAe;KAC5C,SAAS,OAAO;KAChB,QAAQ;KACR,SAAS,OAAO;KAChB,QAAQ;KACT,CAAC;AACF,uBAAmB;;;AAIvB,MAAI,OAAO,WAAW,UACpB,OAAM,IAAI,GAAG,MAAM,eAAe,OAAO,KAAK;GAC5C,QAAQ;GACR;GACA,cAAc;GACf,CAAC;EAGJ,MAAM,eACJ,OAAO,WAAW,aAAa,qBAAqB;AAEtD,SAAO;GACL,UAAU,OAAO;GACjB,SAAS,OAAO,WAAW;GAC3B;GACA;GACA;GACD;;CAEJ,CAAC;;;;;;;;;;;;;;;;;;;;;AAsBF,MAAa,eAAe,SAAS;CACnC,MAAM,EAAE,UAAU,EAAE,GAAG,cAAc,EAAE;CACvC,SAAS,EAAE,MAAM;CACjB,SAAS,OAAO,KAAK,EAAE,eAAe;EACpC,MAAM,SAAS,MAAM,IAAI,GAAG,IAAI,eAAe,SAAS;AACxD,MAAI,WAAW,KACb,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS;GACT;GACD,CAAC;AAEJ,MAAI,OAAO,WAAW,UACpB,OAAM,IAAI,YAAY;GACpB,MAAM;GACN,SAAS,qCAAqC,OAAO,OAAO;GAC5D;GACA,eAAe,OAAO;GACvB,CAAC;AAEJ,QAAM,IAAI,GAAG,MAAM,eAAe,UAAU,EAAE,QAAQ,WAAW,CAAC;AAClE,SAAO;;CAEV,CAAC"}