@robelest/convex-auth 0.0.4-preview.22 → 0.0.4-preview.23

package/dist/component/schema.d.ts

@@ -16,9 +16,9 @@ declare const _default: convex_server66.SchemaDefinition<{
    */
   User: convex_server66.TableDefinition<convex_values121.VObject<{
     phone?: string | undefined;
-    email?: string | undefined;
-    name?: string | undefined;
     extend?: any;
+    name?: string | undefined;
+    email?: string | undefined;
     image?: string | undefined;
     emailVerificationTime?: number | undefined;
     phoneVerificationTime?: number | undefined;
@@ -32,7 +32,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     phoneVerificationTime: convex_values121.VFloat64<number | undefined, "optional">;
     isAnonymous: convex_values121.VBoolean<boolean | undefined, "optional">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "phone" | "email" | "name" | "extend" | "image" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | `extend.${string}`>, {
+  }, "required", "phone" | "extend" | "name" | "email" | "image" | "emailVerificationTime" | "phoneVerificationTime" | "isAnonymous" | `extend.${string}`>, {
     email: ["email", "_creationTime"];
     email_verified: ["email", "emailVerificationTime", "_creationTime"];
     phone: ["phone", "_creationTime"];
@@ -107,9 +107,9 @@ declare const _default: convex_server66.SchemaDefinition<{
     verifier?: string | undefined;
     emailVerified?: string | undefined;
     phoneVerified?: string | undefined;
-    code: string;
     provider: string;
     accountId: convex_values121.GenericId<"Account">;
+    code: string;
     expirationTime: number;
   }, {
     accountId: convex_values121.VId<convex_values121.GenericId<"Account">, "required">;
@@ -119,7 +119,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     verifier: convex_values121.VString<string | undefined, "optional">;
     emailVerified: convex_values121.VString<string | undefined, "optional">;
     phoneVerified: convex_values121.VString<string | undefined, "optional">;
-  }, "required", "code" | "provider" | "verifier" | "accountId" | "expirationTime" | "emailVerified" | "phoneVerified">, {
+  }, "required", "provider" | "verifier" | "accountId" | "code" | "expirationTime" | "emailVerified" | "phoneVerified">, {
     account_id: ["accountId", "_creationTime"];
     code: ["code", "_creationTime"];
   }, {}, {}>;
@@ -247,9 +247,9 @@ declare const _default: convex_server66.SchemaDefinition<{
    * organizations, teams, departments, or any tree structure.
    */
   Group: convex_server66.TableDefinition<convex_values121.VObject<{
-    slug?: string | undefined;
     type?: string | undefined;
     extend?: any;
+    slug?: string | undefined;
     parentGroupId?: convex_values121.GenericId<"Group"> | undefined;
     rootGroupId?: convex_values121.GenericId<"Group"> | undefined;
     isRoot?: boolean | undefined;
@@ -276,7 +276,7 @@ declare const _default: convex_server66.SchemaDefinition<{
       value: convex_values121.VString<string, "required">;
     }, "required", "value" | "key">, "optional">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "name" | "slug" | "type" | "extend" | `extend.${string}` | "parentGroupId" | "rootGroupId" | "isRoot" | "tags">, {
+  }, "required", "type" | "extend" | "name" | "slug" | `extend.${string}` | "parentGroupId" | "rootGroupId" | "isRoot" | "tags">, {
     slug: ["slug", "_creationTime"];
     parent_group_id: ["parentGroupId", "_creationTime"];
     root_group_id: ["rootGroupId", "_creationTime"];
@@ -308,8 +308,8 @@ declare const _default: convex_server66.SchemaDefinition<{
    * member of multiple groups with different roles in each.
    */
   GroupMember: convex_server66.TableDefinition<convex_values121.VObject<{
-    status?: string | undefined;
     extend?: any;
+    status?: string | undefined;
     role?: string | undefined;
     roleIds?: string[] | undefined;
     groupId: convex_values121.GenericId<"Group">;
@@ -321,7 +321,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     roleIds: convex_values121.VArray<string[] | undefined, convex_values121.VString<string, "required">, "optional">;
     status: convex_values121.VString<string | undefined, "optional">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "status" | "groupId" | "extend" | "userId" | `extend.${string}` | "role" | "roleIds">, {
+  }, "required", "groupId" | "extend" | "status" | "userId" | `extend.${string}` | "role" | "roleIds">, {
     group_id: ["groupId", "_creationTime"];
     group_id_user_id: ["groupId", "userId", "_creationTime"];
     group_id_status: ["groupId", "status", "_creationTime"];
@@ -336,9 +336,9 @@ declare const _default: convex_server66.SchemaDefinition<{
    * invite links where neither is known upfront.
    */
   GroupInvite: convex_server66.TableDefinition<convex_values121.VObject<{
-    email?: string | undefined;
     groupId?: convex_values121.GenericId<"Group"> | undefined;
     extend?: any;
+    email?: string | undefined;
     role?: string | undefined;
     roleIds?: string[] | undefined;
     invitedByUserId?: convex_values121.GenericId<"User"> | undefined;
@@ -359,7 +359,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     acceptedByUserId: convex_values121.VId<convex_values121.GenericId<"User"> | undefined, "optional">;
     acceptedTime: convex_values121.VFloat64<number | undefined, "optional">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "email" | "status" | "groupId" | "tokenHash" | "extend" | `extend.${string}` | "role" | "roleIds" | "invitedByUserId" | "expiresTime" | "acceptedByUserId" | "acceptedTime">, {
+  }, "required", "groupId" | "extend" | "status" | "email" | `extend.${string}` | "role" | "roleIds" | "invitedByUserId" | "tokenHash" | "expiresTime" | "acceptedByUserId" | "acceptedTime">, {
     token_hash: ["tokenHash", "_creationTime"];
     status: ["status", "_creationTime"];
     email_status: ["email", "status", "_creationTime"];
@@ -375,6 +375,7 @@ declare const _default: convex_server66.SchemaDefinition<{
    * field addition.
    */
   Enterprise: convex_server66.TableDefinition<convex_values121.VObject<{
+    extend?: any;
     name?: string | undefined;
     slug?: string | undefined;
     policy?: {
@@ -382,8 +383,8 @@ declare const _default: convex_server66.SchemaDefinition<{
       version: 1;
       identity: {
         accountLinking: {
-          saml: "verifiedEmail" | "none";
           oidc: "verifiedEmail" | "none";
+          saml: "verifiedEmail" | "none";
         };
       };
       provisioning: {
@@ -400,10 +401,9 @@ declare const _default: convex_server66.SchemaDefinition<{
         };
       };
     } | undefined;
-    extend?: any;
     config?: any;
-    status: "draft" | "active" | "disabled";
     groupId: convex_values121.GenericId<"Group">;
+    status: "draft" | "active" | "disabled";
   }, {
     groupId: convex_values121.VId<convex_values121.GenericId<"Group">, "required">;
     slug: convex_values121.VString<string | undefined, "optional">;
@@ -414,8 +414,8 @@ declare const _default: convex_server66.SchemaDefinition<{
       version: 1;
       identity: {
         accountLinking: {
-          saml: "verifiedEmail" | "none";
           oidc: "verifiedEmail" | "none";
+          saml: "verifiedEmail" | "none";
         };
       };
       provisioning: {
@@ -435,18 +435,18 @@ declare const _default: convex_server66.SchemaDefinition<{
       version: convex_values121.VLiteral<1, "required">;
       identity: convex_values121.VObject<{
         accountLinking: {
-          saml: "verifiedEmail" | "none";
           oidc: "verifiedEmail" | "none";
+          saml: "verifiedEmail" | "none";
         };
       }, {
         accountLinking: convex_values121.VObject<{
-          saml: "verifiedEmail" | "none";
           oidc: "verifiedEmail" | "none";
+          saml: "verifiedEmail" | "none";
         }, {
           oidc: convex_values121.VUnion<"verifiedEmail" | "none", [convex_values121.VLiteral<"verifiedEmail", "required">, convex_values121.VLiteral<"none", "required">], "required", never>;
           saml: convex_values121.VUnion<"verifiedEmail" | "none", [convex_values121.VLiteral<"verifiedEmail", "required">, convex_values121.VLiteral<"none", "required">], "required", never>;
-        }, "required", "saml" | "oidc">;
-      }, "required", "accountLinking" | "accountLinking.saml" | "accountLinking.oidc">;
+        }, "required", "oidc" | "saml">;
+      }, "required", "accountLinking" | "accountLinking.oidc" | "accountLinking.saml">;
       provisioning: convex_values121.VObject<{
         scimReuse: {
           user: "none" | "externalId";
@@ -481,10 +481,10 @@ declare const _default: convex_server66.SchemaDefinition<{
         }, "required", "mode">;
       }, "required", "scimReuse" | "jit" | "deprovision" | "scimReuse.user" | "jit.mode" | "jit.defaultRole" | "jit.defaultRoleIds" | "deprovision.mode">;
       extend: convex_values121.VAny<any, "optional", string>;
-    }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.saml" | "identity.accountLinking.oidc" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode">;
+    }, "optional", "extend" | `extend.${string}` | "version" | "identity" | "provisioning" | "identity.accountLinking" | "identity.accountLinking.oidc" | "identity.accountLinking.saml" | "provisioning.scimReuse" | "provisioning.jit" | "provisioning.deprovision" | "provisioning.scimReuse.user" | "provisioning.jit.mode" | "provisioning.jit.defaultRole" | "provisioning.jit.defaultRoleIds" | "provisioning.deprovision.mode">;
     config: convex_values121.VAny<any, "optional", string>;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "name" | "slug" | "status" | "groupId" | "policy" | "extend" | `extend.${string}` | "config" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.saml" | "policy.identity.accountLinking.oidc" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | `config.${string}`>, {
+  }, "required", "groupId" | "extend" | "name" | "slug" | "status" | `extend.${string}` | "policy" | "config" | "policy.extend" | `policy.extend.${string}` | "policy.version" | "policy.identity" | "policy.provisioning" | "policy.identity.accountLinking" | "policy.identity.accountLinking.oidc" | "policy.identity.accountLinking.saml" | "policy.provisioning.scimReuse" | "policy.provisioning.jit" | "policy.provisioning.deprovision" | "policy.provisioning.scimReuse.user" | "policy.provisioning.jit.mode" | "policy.provisioning.jit.defaultRole" | "policy.provisioning.jit.defaultRoleIds" | "policy.provisioning.deprovision.mode" | `config.${string}`>, {
     group_id: ["groupId", "_creationTime"];
     slug: ["slug", "_creationTime"];
     status: ["status", "_creationTime"];
@@ -494,9 +494,9 @@ declare const _default: convex_server66.SchemaDefinition<{
    */
   EnterpriseDomain: convex_server66.TableDefinition<convex_values121.VObject<{
     verifiedAt?: number | undefined;
-    enterpriseId: convex_values121.GenericId<"Enterprise">;
     groupId: convex_values121.GenericId<"Group">;
     domain: string;
+    enterpriseId: convex_values121.GenericId<"Enterprise">;
     isPrimary: boolean;
   }, {
     enterpriseId: convex_values121.VId<convex_values121.GenericId<"Enterprise">, "required">;
@@ -504,7 +504,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     domain: convex_values121.VString<string, "required">;
     isPrimary: convex_values121.VBoolean<boolean, "required">;
     verifiedAt: convex_values121.VFloat64<number | undefined, "optional">;
-  }, "required", "enterpriseId" | "groupId" | "domain" | "verifiedAt" | "isPrimary">, {
+  }, "required", "groupId" | "domain" | "enterpriseId" | "isPrimary" | "verifiedAt">, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     group_id: ["groupId", "_creationTime"];
     domain: ["domain", "_creationTime"];
@@ -513,11 +513,11 @@ declare const _default: convex_server66.SchemaDefinition<{
    * Pending DNS TXT verification challenges for enterprise domains.
    */
   EnterpriseDomainVerification: convex_server66.TableDefinition<convex_values121.VObject<{
-    enterpriseId: convex_values121.GenericId<"Enterprise">;
     groupId: convex_values121.GenericId<"Group">;
     domain: string;
-    tokenHash: string;
     expiresAt: number;
+    tokenHash: string;
+    enterpriseId: convex_values121.GenericId<"Enterprise">;
     domainId: convex_values121.GenericId<"EnterpriseDomain">;
     recordName: string;
     token: string;
@@ -532,7 +532,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     tokenHash: convex_values121.VString<string, "required">;
     requestedAt: convex_values121.VFloat64<number, "required">;
     expiresAt: convex_values121.VFloat64<number, "required">;
-  }, "required", "enterpriseId" | "groupId" | "domain" | "tokenHash" | "expiresAt" | "domainId" | "recordName" | "token" | "requestedAt">, {
+  }, "required", "groupId" | "domain" | "expiresAt" | "tokenHash" | "enterpriseId" | "domainId" | "recordName" | "token" | "requestedAt">, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     domain_id: ["domainId", "_creationTime"];
     token_hash: ["tokenHash", "_creationTime"];
@@ -541,9 +541,9 @@ declare const _default: convex_server66.SchemaDefinition<{
    * Encrypted enterprise secrets stored separately from protocol config.
    */
   EnterpriseSecret: convex_server66.TableDefinition<convex_values121.VObject<{
-    enterpriseId: convex_values121.GenericId<"Enterprise">;
     groupId: convex_values121.GenericId<"Group">;
     kind: "oidc_client_secret";
+    enterpriseId: convex_values121.GenericId<"Enterprise">;
     ciphertext: string;
     updatedAt: number;
   }, {
@@ -552,7 +552,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     kind: convex_values121.VUnion<"oidc_client_secret", [convex_values121.VLiteral<"oidc_client_secret", "required">], "required", never>;
     ciphertext: convex_values121.VString<string, "required">;
     updatedAt: convex_values121.VFloat64<number, "required">;
-  }, "required", "enterpriseId" | "groupId" | "kind" | "ciphertext" | "updatedAt">, {
+  }, "required", "groupId" | "kind" | "enterpriseId" | "ciphertext" | "updatedAt">, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     enterprise_id_kind: ["enterpriseId", "kind", "_creationTime"];
     group_id: ["groupId", "_creationTime"];
@@ -563,10 +563,10 @@ declare const _default: convex_server66.SchemaDefinition<{
   EnterpriseScimConfig: convex_server66.TableDefinition<convex_values121.VObject<{
     extend?: any;
     lastRotatedAt?: number | undefined;
-    status: "draft" | "active" | "disabled";
-    enterpriseId: convex_values121.GenericId<"Enterprise">;
     groupId: convex_values121.GenericId<"Group">;
+    status: "draft" | "active" | "disabled";
     tokenHash: string;
+    enterpriseId: convex_values121.GenericId<"Enterprise">;
     basePath: string;
   }, {
     enterpriseId: convex_values121.VId<convex_values121.GenericId<"Enterprise">, "required">;
@@ -576,7 +576,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     tokenHash: convex_values121.VString<string, "required">;
     lastRotatedAt: convex_values121.VFloat64<number | undefined, "optional">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "status" | "enterpriseId" | "groupId" | "tokenHash" | "basePath" | "extend" | `extend.${string}` | "lastRotatedAt">, {
+  }, "required", "groupId" | "extend" | "status" | `extend.${string}` | "tokenHash" | "enterpriseId" | "basePath" | "lastRotatedAt">, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     group_id: ["groupId", "_creationTime"];
     token_hash: ["tokenHash", "_creationTime"];
@@ -587,25 +587,25 @@ declare const _default: convex_server66.SchemaDefinition<{
    */
   EnterpriseScimIdentity: convex_server66.TableDefinition<convex_values121.VObject<{
     active?: boolean | undefined;
-    lastProvisionedAt?: number | undefined;
     userId?: convex_values121.GenericId<"User"> | undefined;
     mappedGroupId?: convex_values121.GenericId<"Group"> | undefined;
+    lastProvisionedAt?: number | undefined;
     raw?: any;
-    enterpriseId: convex_values121.GenericId<"Enterprise">;
     groupId: convex_values121.GenericId<"Group">;
     externalId: string;
-    resourceType: "user" | "group";
+    enterpriseId: convex_values121.GenericId<"Enterprise">;
+    resourceType: "group" | "user";
   }, {
     enterpriseId: convex_values121.VId<convex_values121.GenericId<"Enterprise">, "required">;
     groupId: convex_values121.VId<convex_values121.GenericId<"Group">, "required">;
-    resourceType: convex_values121.VUnion<"user" | "group", [convex_values121.VLiteral<"user", "required">, convex_values121.VLiteral<"group", "required">], "required", never>;
+    resourceType: convex_values121.VUnion<"group" | "user", [convex_values121.VLiteral<"user", "required">, convex_values121.VLiteral<"group", "required">], "required", never>;
     externalId: convex_values121.VString<string, "required">;
     userId: convex_values121.VId<convex_values121.GenericId<"User"> | undefined, "optional">;
     mappedGroupId: convex_values121.VId<convex_values121.GenericId<"Group"> | undefined, "optional">;
     lastProvisionedAt: convex_values121.VFloat64<number | undefined, "optional">;
     active: convex_values121.VBoolean<boolean | undefined, "optional">;
     raw: convex_values121.VAny<any, "optional", string>;
-  }, "required", "active" | "enterpriseId" | "groupId" | "lastProvisionedAt" | "userId" | "externalId" | "resourceType" | "mappedGroupId" | "raw" | `raw.${string}`>, {
+  }, "required", "groupId" | "active" | "userId" | "externalId" | "enterpriseId" | "resourceType" | "mappedGroupId" | "lastProvisionedAt" | "raw" | `raw.${string}`>, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     group_id: ["groupId", "_creationTime"];
     enterprise_id_resource_type_external_id: ["enterpriseId", "resourceType", "externalId", "_creationTime"];
@@ -622,9 +622,9 @@ declare const _default: convex_server66.SchemaDefinition<{
     requestId?: string | undefined;
     ip?: string | undefined;
     metadata?: any;
+    groupId: convex_values121.GenericId<"Group">;
     status: "success" | "failure";
     enterpriseId: convex_values121.GenericId<"Enterprise">;
-    groupId: convex_values121.GenericId<"Group">;
     actorType: "user" | "system" | "scim" | "api_key" | "webhook";
     eventType: string;
     subjectType: string;
@@ -642,7 +642,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     requestId: convex_values121.VString<string | undefined, "optional">;
     ip: convex_values121.VString<string | undefined, "optional">;
     metadata: convex_values121.VAny<any, "optional", string>;
-  }, "required", "status" | "enterpriseId" | "groupId" | "actorType" | "eventType" | "actorId" | "subjectType" | "subjectId" | "occurredAt" | "requestId" | "ip" | "metadata" | `metadata.${string}`>, {
+  }, "required", "groupId" | "status" | "enterpriseId" | "actorType" | "eventType" | "actorId" | "subjectType" | "subjectId" | "occurredAt" | "requestId" | "ip" | "metadata" | `metadata.${string}`>, {
     enterprise_id_occurred_at: ["enterpriseId", "occurredAt", "_creationTime"];
     group_id_occurred_at: ["groupId", "occurredAt", "_creationTime"];
     event_type_occurred_at: ["eventType", "occurredAt", "_creationTime"];
@@ -655,9 +655,9 @@ declare const _default: convex_server66.SchemaDefinition<{
     createdByUserId?: convex_values121.GenericId<"User"> | undefined;
     lastSuccessAt?: number | undefined;
     lastFailureAt?: number | undefined;
+    groupId: convex_values121.GenericId<"Group">;
     status: "active" | "disabled";
     enterpriseId: convex_values121.GenericId<"Enterprise">;
-    groupId: convex_values121.GenericId<"Group">;
     url: string;
     secretHash: string;
     subscriptions: string[];
@@ -674,7 +674,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     lastFailureAt: convex_values121.VFloat64<number | undefined, "optional">;
     failureCount: convex_values121.VFloat64<number, "required">;
     extend: convex_values121.VAny<any, "optional", string>;
-  }, "required", "status" | "enterpriseId" | "groupId" | "extend" | `extend.${string}` | "url" | "secretHash" | "subscriptions" | "createdByUserId" | "lastSuccessAt" | "lastFailureAt" | "failureCount">, {
+  }, "required", "groupId" | "extend" | "status" | `extend.${string}` | "enterpriseId" | "url" | "secretHash" | "subscriptions" | "createdByUserId" | "lastSuccessAt" | "lastFailureAt" | "failureCount">, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     group_id: ["groupId", "_creationTime"];
     status: ["status", "_creationTime"];
@@ -689,8 +689,8 @@ declare const _default: convex_server66.SchemaDefinition<{
     lastError?: string | undefined;
     status: "pending" | "processing" | "delivered" | "failed";
     enterpriseId: convex_values121.GenericId<"Enterprise">;
-    endpointId: convex_values121.GenericId<"EnterpriseWebhookEndpoint">;
     eventType: string;
+    endpointId: convex_values121.GenericId<"EnterpriseWebhookEndpoint">;
     attemptCount: number;
     nextAttemptAt: number;
     payload: any;
@@ -706,7 +706,7 @@ declare const _default: convex_server66.SchemaDefinition<{
     lastResponseStatus: convex_values121.VFloat64<number | undefined, "optional">;
     lastError: convex_values121.VString<string | undefined, "optional">;
     payload: convex_values121.VAny<any, "required", string>;
-  }, "required", "status" | "enterpriseId" | "endpointId" | "eventType" | "auditEventId" | "attemptCount" | "nextAttemptAt" | "lastAttemptAt" | "lastResponseStatus" | "lastError" | "payload" | `payload.${string}`>, {
+  }, "required", "status" | "enterpriseId" | "eventType" | "endpointId" | "auditEventId" | "attemptCount" | "nextAttemptAt" | "lastAttemptAt" | "lastResponseStatus" | "lastError" | "payload" | `payload.${string}`>, {
     enterprise_id: ["enterpriseId", "_creationTime"];
     status_next_attempt_at: ["status", "nextAttemptAt", "_creationTime"];
     endpoint_id_status: ["endpointId", "status", "_creationTime"];

package/dist/component/server/auth.d.ts

@@ -12,7 +12,7 @@ import { GenericId } from "convex/values";
 type AuthConfig = Omit<ConvexAuthConfig, "component">;
 /** Canonical user document type exposed by Convex Auth. */
 type UserDoc = Doc<"User">;
-type MemberApiWithAuthorization<TAuthorization extends AuthAuthorizationConfig | undefined> = Omit<ReturnType<typeof Auth>["auth"]["member"], "create" | "list" | "update" | "resolve"> & {
+type MemberApiWithAuthorization<TAuthorization extends AuthAuthorizationConfig | undefined> = Omit<ReturnType<typeof Auth>["auth"]["member"], "create" | "list" | "update" | "inspect" | "require"> & {
   create: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["create"]>[0], data: {
     groupId: string;
     userId: string;
@@ -20,7 +20,6 @@ type MemberApiWithAuthorization<TAuthorization extends AuthAuthorizationConfig |
     status?: string;
     extend?: Record<string, unknown>;
   }) => Promise<{
-    ok: true;
     memberId: string;
   }>;
   list: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["list"]>[0], opts?: {
@@ -38,17 +37,22 @@ type MemberApiWithAuthorization<TAuthorization extends AuthAuthorizationConfig |
   update: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["update"]>[0], memberId: string, data: Record<string, unknown> & {
     roleIds?: AuthRoleId<TAuthorization>[];
   }) => Promise<{
-    ok: true;
     memberId: string;
   }>;
-  resolve: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["resolve"]>[0], opts: {
+  inspect: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["inspect"]>[0], opts: {
+    userId: string;
+    groupId: string;
+    ancestry?: boolean;
+    maxDepth?: number;
+  }) => ReturnType<ReturnType<typeof Auth>["auth"]["member"]["inspect"]>;
+  require: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["require"]>[0], opts: {
     userId: string;
     groupId: string;
     ancestry?: boolean;
     roleIds?: AuthRoleId<TAuthorization>[];
     grants?: AuthGrant<TAuthorization>[];
     maxDepth?: number;
-  }) => ReturnType<ReturnType<typeof Auth>["auth"]["member"]["resolve"]>;
+  }) => ReturnType<ReturnType<typeof Auth>["auth"]["member"]["require"]>;
 };
 /**
  * The base auth API surface returned by {@link createAuth}.
@@ -79,30 +83,29 @@ type AuthApiBase<TAuthorization extends AuthAuthorizationConfig | undefined = un
   key: ReturnType<typeof Auth>["auth"]["key"];
   http: ReturnType<typeof Auth>["auth"]["http"];
   /**
-   * Resolve the current user's auth context. Framework-agnostic — use
+   * Resolve the current request's auth context. Framework-agnostic — use
    * this in fluent-convex middleware, custom wrappers, or anywhere you
-   * need the resolved `{ userId, user, groupId, role, grants }` object.
+   * need the current `{ userId, user, groupId, role, grants }` object.
    *
-   * Returns `null` when unauthenticated. Does not throw.
+   * Throws a structured `ConvexError` when unauthenticated.
    *
    * @param ctx - Convex query, mutation, or action context.
-   * @returns The resolved auth context, or `null`.
+   * @returns The current auth context.
    *
    * @example fluent-convex middleware
    * ```ts
    * const withAuth = convex.createMiddleware(async (ctx, next) => {
-   *   return next({ ...ctx, auth: await auth.resolve(ctx) });
+   *   return next({ ...ctx, auth: await auth.context(ctx) });
    * });
    * ```
    *
    * @example Direct usage in a handler
    * ```ts
-   * const resolved = await auth.resolve(ctx);
-   * if (!resolved) return { ok: false, code: "NOT_SIGNED_IN" };
-   * const { userId, grants } = resolved;
+   * const authContext = await auth.context(ctx);
+   * const { userId, grants } = authContext;
    * ```
    */
-  resolve: (ctx: any) => Promise<AuthResolvedContext | null>;
+  context: (ctx: any) => Promise<AuthContext>;
   /**
    * Context enrichment for convex-helpers `customQuery` / `customMutation` /
    * `customAction`.
@@ -111,9 +114,9 @@ type AuthApiBase<TAuthorization extends AuthAuthorizationConfig | undefined = un
    * and grants, then attaches them to `ctx.auth`. Returns a `Customization`
    * object compatible with convex-helpers' custom function builders.
    *
-   * `ctx.auth` is `{ userId, user, groupId, role, grants }` when
-   * authenticated, `null` when unauthenticated. No throwing — your
-   * handler decides how to respond.
+   * `ctx.auth` is the current request auth context.
+   * By default this throws when unauthenticated so handlers can assume
+   * `ctx.auth.userId` and `ctx.auth.user` exist.
    *
    * @returns A convex-helpers `Customization` object.
    *
@@ -135,7 +138,6 @@ type AuthApiBase<TAuthorization extends AuthAuthorizationConfig | undefined = un
    * export const list = authQuery({
    *   args: { workspaceId: v.string() },
    *   handler: async (ctx, args) => {
-   *     if (!ctx.auth) return [];
    *     const { userId, groupId, grants } = ctx.auth;
    *     // business logic
    *   },
@@ -146,26 +148,27 @@ type AuthApiBase<TAuthorization extends AuthAuthorizationConfig | undefined = un
     args: Record<string, never>;
     input: (ctx: any) => Promise<{
       ctx: {
-        auth: AuthResolvedContext | null;
+        auth: AuthContext;
       };
       args: Record<string, never>;
     }>;
   };
 };
 /**
- * Resolved auth context injected into `ctx.auth` by `auth.ctx()` and
- * {@link AuthCtx}. Also the expected return shape for custom
- * {@link AuthCtxConfig.authResolve | authResolve} hooks.
+ * Current request auth context injected into `ctx.auth` by `auth.ctx()` and
+ * {@link AuthCtx}. This is the authenticated auth shape returned by
+ * {@link createAuth().context}. Optional context builders may still surface
+ * nullable fields when `optional: true` is used.
  *
- * - `null` when unauthenticated.
  * - `groupId` is `null` when the user has no active group set.
- * - `role` / `grants` are `null` / `[]` when no active group or no membership.
+ * - `role` is `null` when no active group or no membership is resolved.
+ * - `grants` is `[]` when no active group or no membership is resolved.
  *
  * @example
  * ```ts
- * import type { AuthResolvedContext } from "@robelest/convex-auth/server";
+ * import type { AuthContext } from "@robelest/convex-auth/server";
  *
- * const mockAuth: AuthResolvedContext = {
+ * const mockAuth: AuthContext = {
  *   userId: "user123" as Id<"User">,
  *   user: { _id: "user123", email: "test@example.com" },
  *   groupId: "group456",
@@ -174,7 +177,7 @@ type AuthApiBase<TAuthorization extends AuthAuthorizationConfig | undefined = un
  * };
  * ```
  */
-type AuthResolvedContext = {
+type AuthContext = {
   /** The authenticated user's document ID. */userId: GenericId<"User">; /** The authenticated user's full document. */
   user: UserDoc; /** The user's active group ID, or `null` if none set. */
   groupId: string | null; /** The user's primary role in the active group, or `null`. */
@@ -184,7 +187,7 @@ type AuthResolvedContext = {
 type AuthCtxBase = {
   getUserIdentity: () => Promise<UserIdentity | null>;
 };
-type RequiredAuthCtxState = AuthCtxBase & AuthResolvedContext;
+type RequiredAuthCtxState = AuthCtxBase & AuthContext;
 type OptionalAuthCtxState = AuthCtxBase & {
   userId: GenericId<"User"> | null;
   user: UserDoc | null;
@@ -202,7 +205,6 @@ type PublicSsoAdminApi = {
         domain: string;
         isPrimary?: boolean;
       }>) => Promise<{
-        ok: true;
         enterpriseId: string;
         domains: Array<{
           domainId: string;
@@ -217,7 +219,6 @@ type PublicSsoAdminApi = {
           enterpriseId: string;
           domain: string;
         }) => Promise<{
-          ok: true;
           enterpriseId: string;
           domain: string;
           requestedAt: number;
@@ -232,7 +233,6 @@ type PublicSsoAdminApi = {
           enterpriseId: string;
           domain: string;
         }) => Promise<{
-          ok: boolean;
           enterpriseId: string;
           domain: string;
           verifiedAt?: number;
@@ -320,13 +320,13 @@ type AuthCtxConfig<TResolve extends Record<string, unknown> = Record<string, nev
    * Attach additional derived fields to the auth context after the base auth
    * context is resolved.
    */
-  resolve?: (ctx: any, user: UserDoc, auth: AuthResolvedContext) => Promise<TResolve> | TResolve;
+  resolve?: (ctx: any, user: UserDoc, auth: AuthContext) => Promise<TResolve> | TResolve;
   /**
    * Override or wrap the base auth resolution used by {@link AuthCtx}.
    *
    * Return `undefined` to fall back to the built-in resolver,
    * `null` for an explicit unauthenticated state, or an
-   * {@link AuthResolvedContext} object to provide a pre-resolved auth state.
+   * {@link AuthContext} object to provide a pre-resolved auth state.
    * This is useful for tests, proxy auth, impersonation flows, or any
    * environment that needs to inject auth without depending on the standard
    * Convex auth tables.
@@ -345,7 +345,7 @@ type AuthCtxConfig<TResolve extends Record<string, unknown> = Record<string, nev
    * });
    * ```
    */
-  authResolve?: (ctx: any, fallback: () => Promise<AuthResolvedContext | null>) => Promise<AuthResolvedContext | null | undefined> | AuthResolvedContext | null | undefined;
+  authResolve?: (ctx: any, fallback: () => Promise<AuthContext | null>) => Promise<AuthContext | null | undefined> | AuthContext | null | undefined;
 };
 /**
  * Create a context enrichment for `customQuery` / `customMutation` — optional auth.
@@ -384,11 +384,8 @@ declare function AuthCtx<TResolve extends Record<string, unknown> = Record<strin
 /**
  * Create a context enrichment for `customQuery` / `customMutation` — required auth (default).
  *
- * When `optional` is omitted or `false`, the inferred type is the authenticated
- * auth shape. At runtime this helper still resolves instead of throwing, so if
- * no user is signed in the returned `ctx.auth.userId` / `ctx.auth.user` are
- * `null`, `ctx.auth.groupId` / `ctx.auth.role` are `null`, and
- * `ctx.auth.grants` is `[]`.
+ * When `optional` is omitted or `false`, unauthenticated requests throw a
+ * structured `ConvexError` before your handler runs.
  *
  * @param auth - The auth API object returned by {@link createAuth}.
  * @param config - Optional configuration with a `resolve` callback
@@ -446,5 +443,5 @@ type InferAuth<T extends {
   }>;
 }> = Awaited<ReturnType<T["input"]>>["ctx"]["auth"];
 //#endregion
-export { AuthApi, AuthConfig, AuthCtx, AuthCtxConfig, AuthResolvedContext, InferAuth, UserDoc, createAuth };
+export { AuthApi, AuthConfig, AuthContext, AuthCtx, AuthCtxConfig, InferAuth, UserDoc, createAuth };
 //# sourceMappingURL=auth.d.ts.map

package/dist/component/server/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","names":[],"sources":["../../../src/server/auth.ts"],"mappings":";;;;;;;;AAqCA;;;KAHY,UAAA,GAAa,IAAA,CAAK,gBAAA;;KAGlB,OAAA,GAAU,GAAA;AAAA,KAEjB,0BAAA,wBACoB,uBAAA,gBACrB,IAAA,CACF,UAAA,QAAkB,IAAA;EAGlB,MAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,mCAEpB,IAAA;IACE,OAAA;IACA,MAAA;IACA,OAAA,GAAU,UAAA,CAAW,cAAA;IACrB,MAAA;IACA,MAAA,GAAS,MAAA;EAAA,MAER,OAAA;IAAU,EAAA;IAAU,QAAA;EAAA;EACzB,IAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,iCAEpB,IAAA;IACE,KAAA;MACE,OAAA;MACA,MAAA;MACA,MAAA,GAAS,UAAA,CAAW,cAAA;MACpB,MAAA;IAAA;IAEF,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;EAClC,MAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,mCAEpB,QAAA,UACA,IAAA,EAAM,MAAA;IAA4B,OAAA,GAAU,UAAA,CAAW,cAAA;EAAA,MACpD,OAAA;IAAU,EAAA;IAAU,QAAA;EAAA;EACzB,OAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,oCAEpB,IAAA;IACE,MAAA;IACA,OAAA;IACA,QAAA;IACA,OAAA,GAAU,UAAA,CAAW,cAAA;IACrB,MAAA,GAAS,SAAA,CAAU,cAAA;IACnB,QAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;AAAA;;;;;;;;;;;;;;;;KAmBxB,WAAA,wBACa,uBAAA;EAEvB,MAAA,EAAQ,UAAA,QAAkB,IAAA;EAC1B,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,KAAA,EAAO,UAAA,QAAkB,IAAA;EACzB,IAAA,EAAM,UAAA,QAAkB,IAAA;EACxB,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,QAAA,EAAU,UAAA,QAAkB,IAAA;EAC5B,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,KAAA,EAAO,UAAA,QAAkB,IAAA;EACzB,MAAA,EAAQ,0BAAA,CAA2B,cAAA;EACnC,MAAA,EAAQ,UAAA,QAAkB,IAAA;EAC1B,GAAA,EAAK,UAAA,QAAkB,IAAA;EACvB,IAAA,EAAM,UAAA,QAAkB,IAAA;EApEtB;;;;;;;;;;;;;;;;;;;;;;;;EA6FF,OAAA,GAAU,GAAA,UAAa,OAAA,CAAQ,mBAAA;EAxE0B;;;;;;;;;;;;;;;;;;;;;;;;;;AAiC3D;;;;;;;;;;;;;EA+EE,GAAA;IACE,IAAA,EAAM,MAAA;IACN,KAAA,GAAQ,GAAA,UAAa,OAAA;MACnB,GAAA;QAAO,IAAA,EAAM,mBAAA;MAAA;MACb,IAAA,EAAM,MAAA;IAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;KA2BA,mBAAA;EAzGe,4CA2GzB,MAAA,EAAQ,SAAA,UA1GF;EA4GN,IAAA,EAAM,OAAA,EA3GN;EA6GA,OAAA,iBA7G2B;EA+G3B,IAAA,iBA9GU;EAgHV,MAAA;AAAA;AAAA,KAGG,WAAA;EACH,eAAA,QAAuB,OAAA,CAAQ,YAAA;AAAA;AAAA,KAG5B,oBAAA,GAAuB,WAAA,GAAc,mBAAA;AAAA,KAErC,oBAAA,GAAuB,WAAA;EAC1B,MAAA,EAAQ,SAAA;EACR,IAAA,EAAM,OAAA;EACN,OAAA;EACA,IAAA;EACA,MAAA;AAAA;AAAA,KAGG,cAAA,GAAiB,UAAA,QAAkB,IAAA;AAAA,KAEnC,iBAAA;EACH,UAAA,EAAY,cAAA;IACV,MAAA;MACE,IAAA,EAAM,cAAA;MACN,QAAA,EAAU,cAAA;MACV,GAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,YAAA,UACA,OAAA,EAAS,KAAA;QACP,MAAA;QACA,SAAA;MAAA,OAEC,OAAA;QACH,EAAA;QACA,YAAA;QACA,OAAA,EAAS,KAAA;UACP,QAAA;UACA,MAAA;UACA,SAAA;UACA,QAAA;UACA,UAAA;QAAA;MAAA;MAGJ,YAAA;QACE,OAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,IAAA;UAAQ,YAAA;UAAsB,MAAA;QAAA,MAC3B,OAAA;UACH,EAAA;UACA,YAAA;UACA,MAAA;UACA,WAAA;UACA,SAAA;UACA,SAAA;YACE,UAAA;YACA,UAAA;YACA,WAAA;UAAA;QAAA;QAGJ,OAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,IAAA;UAAQ,YAAA;UAAsB,MAAA;QAAA,MAC3B,OAAA;UACH,EAAA;UACA,YAAA;UACA,MAAA;UACA,UAAA;UACA,MAAA,EAAQ,KAAA;YAAQ,IAAA;YAAc,EAAA;YAAa,OAAA;UAAA;QAAA;MAAA;IAAA;EAAA;EAKnD,IAAA,EAAM,IAAA,CAAK,cAAA;EACX,IAAA,EAAM,IAAA,CAAK,cAAA;EACX,MAAA,EAAQ,cAAA;EACR,KAAA;IACE,IAAA,EAAM,cAAA;EAAA;EAER,OAAA;IACE,QAAA,EAAU,cAAA;IACV,QAAA;MACE,IAAA,EAAM,cAAA;IAAA;EAAA;AAAA;AAAA,KAKP,kBAAA;EACH,MAAA,EAAQ,cAAA;EACR,QAAA,EAAU,cAAA;AAAA;AAAA,KAGP,YAAA;EACH,KAAA,EAAO,iBAAA;EACP,MAAA,EAAQ,kBAAA;AAAA;AAAA,KAGL,aAAA;EACH,KAAA,EAAO,IAAA,CAAK,cAAA;AAAA;;;;;;;;;;;;;;;;KAkBF,OAAA,wBACa,uBAAA,4BACrB,WAAA,CAAY,cAAA;EACd,GAAA,EAAK,YAAA;EACL,IAAA,EAAM,aAAA;AAAA;;;;;;;;;;;;;;;;KAkBI,gBAAA,WACA,kBAAA,2BACa,uBAAA,4BAEvB,MAAA,CAAO,CAAA,iBACH,OAAA,CAAQ,cAAA,IACR,WAAA,CAAY,cAAA;AAAA,iBA6FF,UAAA,WACJ,kBAAA,2BACa,uBAAA,yBAAA,CAEvB,SAAA,EAAW,gBAAA,eACX,MAAA,EAAQ,IAAA,CAAK,UAAA;EACX,SAAA,EAAW,CAAA;EACX,aAAA,GAAgB,cAAA;AAAA,IAEjB,gBAAA,CAAiB,CAAA,EAAG,cAAA;;;;;;;KAgNX,aAAA,kBACO,MAAA,oBAA0B,MAAA;EAjZnC,8EAoZR,QAAA;EAlZU;;;;EAuZV,OAAA,IACE,GAAA,OACA,IAAA,EAAM,OAAA,EACN,IAAA,EAAM,mBAAA,KACH,OAAA,CAAQ,QAAA,IAAY,QAAA;EAtZjB;;;;;;;;;;;;;;;;;;;;;;;;EA+aR,WAAA,IACE,GAAA,OACA,QAAA,QAAgB,OAAA,CAAQ,mBAAA,aAEtB,OAAA,CAAQ,mBAAA,uBACR,mBAAA;AAAA;;;;;;;;AA/ZoB;;;;;;;;;;AAOA;;;;;;iBAobV,OAAA,kBACG,MAAA,oBAA0B,MAAA,gBAAA,CAE3C,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,aAAA,CAAc,QAAA;EAAc,QAAA;AAAA;EAEpC,IAAA;EACA,KAAA,GACE,GAAA,OACA,KAAA,OACA,MAAA,WACG,OAAA;IACH,GAAA;MACE,IAAA,EAAM,oBAAA,GAAuB,QAAA;IAAA;IAE/B,IAAA;EAAA;AAAA;;;AAxaJ;;;;;;;;;;;;;;;;;;;;AAsBA;;iBA6agB,OAAA,kBACG,MAAA,oBAA0B,MAAA,gBAAA,CAE3C,IAAA,EAAM,QAAA,EACN,MAAA,GAAS,aAAA,CAAc,QAAA;EAEvB,IAAA;EACA,KAAA,GACE,GAAA,OACA,KAAA,OACA,MAAA,WACG,OAAA;IACH,GAAA;MACE,IAAA,EAAM,oBAAA,GAAuB,QAAA;IAAA;IAE/B,IAAA;EAAA;AAAA;;;;;;;;;;;;;;;AAzVJ;;;;;;;;;;KAqaY,SAAA;EACE,KAAA,MAAW,IAAA,YAAgB,OAAA;IAAU,GAAA;MAAO,IAAA;IAAA;EAAA;AAAA,KACtD,OAAA,CAAQ,UAAA,CAAW,CAAA"}
+{"version":3,"file":"auth.d.ts","names":[],"sources":["../../../src/server/auth.ts"],"mappings":";;;;;;;;AAqCA;;;KAHY,UAAA,GAAa,IAAA,CAAK,gBAAA;;KAGlB,OAAA,GAAU,GAAA;AAAA,KAEjB,0BAAA,wBACoB,uBAAA,gBACrB,IAAA,CACF,UAAA,QAAkB,IAAA;EAGlB,MAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,mCAEpB,IAAA;IACE,OAAA;IACA,MAAA;IACA,OAAA,GAAU,UAAA,CAAW,cAAA;IACrB,MAAA;IACA,MAAA,GAAS,MAAA;EAAA,MAER,OAAA;IAAU,QAAA;EAAA;EACf,IAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,iCAEpB,IAAA;IACE,KAAA;MACE,OAAA;MACA,MAAA;MACA,MAAA,GAAS,UAAA,CAAW,cAAA;MACpB,MAAA;IAAA;IAEF,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;EAClC,MAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,mCAEpB,QAAA,UACA,IAAA,EAAM,MAAA;IAA4B,OAAA,GAAU,UAAA,CAAW,cAAA;EAAA,MACpD,OAAA;IAAU,QAAA;EAAA;EACf,OAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,oCAEpB,IAAA;IACE,MAAA;IACA,OAAA;IACA,QAAA;IACA,QAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;EAClC,OAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,oCAEpB,IAAA;IACE,MAAA;IACA,OAAA;IACA,QAAA;IACA,OAAA,GAAU,UAAA,CAAW,cAAA;IACrB,MAAA,GAAS,SAAA,CAAU,cAAA;IACnB,QAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;AAAA;;;;;;;;;;;;;;;;KAkBxB,WAAA,wBACa,uBAAA;EAEvB,MAAA,EAAQ,UAAA,QAAkB,IAAA;EAC1B,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,KAAA,EAAO,UAAA,QAAkB,IAAA;EACzB,IAAA,EAAM,UAAA,QAAkB,IAAA;EACxB,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,QAAA,EAAU,UAAA,QAAkB,IAAA;EAC5B,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,KAAA,EAAO,UAAA,QAAkB,IAAA;EACzB,MAAA,EAAQ,0BAAA,CAA2B,cAAA;EACnC,MAAA,EAAQ,UAAA,QAAkB,IAAA;EAC1B,GAAA,EAAK,UAAA,QAAkB,IAAA;EACvB,IAAA,EAAM,UAAA,QAAkB,IAAA;EA7EF;;;;;;;;;;;;;;;;;;;;;;;EAqGtB,OAAA,GAAU,GAAA,UAAa,OAAA,CAAQ,WAAA;EAjFK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAwHpC,GAAA;IACE,IAAA,EAAM,MAAA;IACN,KAAA,GAAQ,GAAA,UAAa,OAAA;MACnB,GAAA;QAAO,IAAA,EAAM,WAAA;MAAA;MACb,IAAA,EAAM,MAAA;IAAA;EAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;;KA4BA,WAAA;EA5BA,4CA8BV,MAAA,EAAQ,SAAA,UAhCsB;EAkC9B,IAAA,EAAM,OAAA,EAhHN;EAkHA,OAAA,iBAhHA;EAkHA,IAAA,iBAlH0B;EAoH1B,MAAA;AAAA;AAAA,KAGG,WAAA;EACH,eAAA,QAAuB,OAAA,CAAQ,YAAA;AAAA;AAAA,KAG5B,oBAAA,GAAuB,WAAA,GAAc,WAAA;AAAA,KAErC,oBAAA,GAAuB,WAAA;EAC1B,MAAA,EAAQ,SAAA;EACR,IAAA,EAAM,OAAA;EACN,OAAA;EACA,IAAA;EACA,MAAA;AAAA;AAAA,KAGG,cAAA,GAAiB,UAAA,QAAkB,IAAA;AAAA,KAEnC,iBAAA;EACH,UAAA,EAAY,cAAA;IACV,MAAA;MACE,IAAA,EAAM,cAAA;MACN,QAAA,EAAU,cAAA;MACV,GAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,YAAA,UACA,OAAA,EAAS,KAAA;QACP,MAAA;QACA,SAAA;MAAA,OAEC,OAAA;QACH,YAAA;QACA,OAAA,EAAS,KAAA;UACP,QAAA;UACA,MAAA;UACA,SAAA;UACA,QAAA;UACA,UAAA;QAAA;MAAA;MAGJ,YAAA;QACE,OAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,IAAA;UAAQ,YAAA;UAAsB,MAAA;QAAA,MAC3B,OAAA;UACH,YAAA;UACA,MAAA;UACA,WAAA;UACA,SAAA;UACA,SAAA;YACE,UAAA;YACA,UAAA;YACA,WAAA;UAAA;QAAA;QAGJ,OAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,IAAA;UAAQ,YAAA;UAAsB,MAAA;QAAA,MAC3B,OAAA;UACH,YAAA;UACA,MAAA;UACA,UAAA;UACA,MAAA,EAAQ,KAAA;YAAQ,IAAA;YAAc,EAAA;YAAa,OAAA;UAAA;QAAA;MAAA;IAAA;EAAA;EAKnD,IAAA,EAAM,IAAA,CAAK,cAAA;EACX,IAAA,EAAM,IAAA,CAAK,cAAA;EACX,MAAA,EAAQ,cAAA;EACR,KAAA;IACE,IAAA,EAAM,cAAA;EAAA;EAER,OAAA;IACE,QAAA,EAAU,cAAA;IACV,QAAA;MACE,IAAA,EAAM,cAAA;IAAA;EAAA;AAAA;AAAA,KAKP,kBAAA;EACH,MAAA,EAAQ,cAAA;EACR,QAAA,EAAU,cAAA;AAAA;AAAA,KAGP,YAAA;EACH,KAAA,EAAO,iBAAA;EACP,MAAA,EAAQ,kBAAA;AAAA;AAAA,KAGL,aAAA;EACH,KAAA,EAAO,IAAA,CAAK,cAAA;AAAA;;;;;;;;;AA/EN;;;;;AAG2C;;KA8FvC,OAAA,wBACa,uBAAA,4BACrB,WAAA,CAAY,cAAA;EACd,GAAA,EAAK,YAAA;EACL,IAAA,EAAM,aAAA;AAAA;;;;;;;;;;;;;;;;KAkBI,gBAAA,WACA,kBAAA,2BACa,uBAAA,4BAEvB,MAAA,CAAO,CAAA,iBACH,OAAA,CAAQ,cAAA,IACR,WAAA,CAAY,cAAA;AAAA,iBAgGF,UAAA,WACJ,kBAAA,2BACa,uBAAA,yBAAA,CAEvB,SAAA,EAAW,gBAAA,eACX,MAAA,EAAQ,IAAA,CAAK,UAAA;EACX,SAAA,EAAW,CAAA;EACX,aAAA,GAAgB,cAAA;AAAA,IAEjB,gBAAA,CAAiB,CAAA,EAAG,cAAA;;;;;;;KA8NX,aAAA,kBACO,MAAA,oBAA0B,MAAA;EA9anC,8EAibR,QAAA;EA7aI;;;;EAkbJ,OAAA,IACE,GAAA,OACA,IAAA,EAAM,OAAA,EACN,IAAA,EAAM,WAAA,KACH,OAAA,CAAQ,QAAA,IAAY,QAAA;EAnbT;;;;;;;;;;;;;;;;;;;;;;;;EA4chB,WAAA,IACE,GAAA,OACA,QAAA,QAAgB,OAAA,CAAQ,WAAA,aACrB,OAAA,CAAQ,WAAA,uBAAkC,WAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;AA9avB;;iBAwcV,OAAA,kBACG,MAAA,oBAA0B,MAAA,gBAAA,CAE3C,IAAA,EAAM,QAAA,EACN,MAAA,EAAQ,aAAA,CAAc,QAAA;EAAc,QAAA;AAAA;EAEpC,IAAA;EACA,KAAA,GACE,GAAA,OACA,KAAA,OACA,MAAA,WACG,OAAA;IACH,GAAA;MACE,IAAA,EAAM,oBAAA,GAAuB,QAAA;IAAA;IAE/B,IAAA;EAAA;AAAA;;;;;;;;AA3cwB;;;;;;;;;AAsB5B;;;;;iBA6cgB,OAAA,kBACG,MAAA,oBAA0B,MAAA,gBAAA,CAE3C,IAAA,EAAM,QAAA,EACN,MAAA,GAAS,aAAA,CAAc,QAAA;EAEvB,IAAA;EACA,KAAA,GACE,GAAA,OACA,KAAA,OACA,MAAA,WACG,OAAA;IACH,GAAA;MACE,IAAA,EAAM,oBAAA,GAAuB,QAAA;IAAA;IAE/B,IAAA;EAAA;AAAA;;;;;;;AAtcJ;;;;;;;;;;;;;;;;;;KAwhBY,SAAA;EACE,KAAA,MAAW,IAAA,YAAgB,OAAA;IAAU,GAAA;MAAO,IAAA;IAAA;EAAA;AAAA,KACtD,OAAA,CAAQ,UAAA,CAAW,CAAA"}