@robelest/convex-auth 0.0.4-preview.25 → 0.0.4-preview.28

package/dist/component/server/auth.d.ts

@@ -1,447 +0,0 @@
-import "../client/index.js";
-import { AuthAuthorizationConfig, AuthGrant, AuthProviderConfig, AuthRoleId, ConvexAuthConfig, Doc, HasSSO } from "./types.js";
-import { Auth } from "./runtime.js";
-import { UserIdentity } from "convex/server";
-import { GenericId } from "convex/values";
-
-//#region src/server/auth.d.ts
-/**
- * Config for auth setup. Extends the standard auth config
- * minus `component` (which is passed as the first constructor argument).
- */
-type AuthConfig = Omit<ConvexAuthConfig, "component">;
-/** Canonical user document type exposed by Convex Auth. */
-type UserDoc = Doc<"User">;
-type MemberApiWithAuthorization<TAuthorization extends AuthAuthorizationConfig | undefined> = Omit<ReturnType<typeof Auth>["auth"]["member"], "create" | "list" | "update" | "inspect" | "require"> & {
-  create: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["create"]>[0], data: {
-    groupId: string;
-    userId: string;
-    roleIds?: AuthRoleId<TAuthorization>[];
-    status?: string;
-    extend?: Record<string, unknown>;
-  }) => Promise<{
-    memberId: string;
-  }>;
-  list: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["list"]>[0], opts?: {
-    where?: {
-      groupId?: string;
-      userId?: string;
-      roleId?: AuthRoleId<TAuthorization>;
-      status?: string;
-    };
-    limit?: number;
-    cursor?: string | null;
-    orderBy?: "_creationTime" | "status";
-    order?: "asc" | "desc";
-  }) => ReturnType<ReturnType<typeof Auth>["auth"]["member"]["list"]>;
-  update: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["update"]>[0], memberId: string, data: Record<string, unknown> & {
-    roleIds?: AuthRoleId<TAuthorization>[];
-  }) => Promise<{
-    memberId: string;
-  }>;
-  inspect: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["inspect"]>[0], opts: {
-    userId: string;
-    groupId: string;
-    ancestry?: boolean;
-    maxDepth?: number;
-  }) => ReturnType<ReturnType<typeof Auth>["auth"]["member"]["inspect"]>;
-  require: (ctx: Parameters<ReturnType<typeof Auth>["auth"]["member"]["require"]>[0], opts: {
-    userId: string;
-    groupId: string;
-    ancestry?: boolean;
-    roleIds?: AuthRoleId<TAuthorization>[];
-    grants?: AuthGrant<TAuthorization>[];
-    maxDepth?: number;
-  }) => ReturnType<ReturnType<typeof Auth>["auth"]["member"]["require"]>;
-};
-/**
- * The base auth API surface returned by {@link createAuth}.
- *
- * Provides core namespaces — `signIn`, `signOut`, `user`, `session`,
- * `member`, `invite`, `group`, `key`, and `http` — that are
- * always available regardless of which providers are configured.
- * Enterprise namespaces (`sso`, `scim`) are added conditionally by
- * {@link AuthApi} when an SSO provider is present.
- *
- * Use this type when you want to describe code that only depends on the
- * standard auth surface and should not assume enterprise features exist.
- *
- * @typeParam TAuthorization - The authorization config, used to narrow
- *   role IDs and grant strings on the `member` API.
- */
-type AuthApiBase<TAuthorization extends AuthAuthorizationConfig | undefined = undefined> = {
-  signIn: ReturnType<typeof Auth>["signIn"];
-  signOut: ReturnType<typeof Auth>["signOut"];
-  store: ReturnType<typeof Auth>["store"];
-  user: ReturnType<typeof Auth>["auth"]["user"];
-  session: ReturnType<typeof Auth>["auth"]["session"];
-  provider: ReturnType<typeof Auth>["auth"]["provider"];
-  account: ReturnType<typeof Auth>["auth"]["account"];
-  group: ReturnType<typeof Auth>["auth"]["group"];
-  member: MemberApiWithAuthorization<TAuthorization>;
-  invite: ReturnType<typeof Auth>["auth"]["invite"];
-  key: ReturnType<typeof Auth>["auth"]["key"];
-  http: ReturnType<typeof Auth>["auth"]["http"];
-  /**
-   * Resolve the current request's auth context. Framework-agnostic — use
-   * this in fluent-convex middleware, custom wrappers, or anywhere you
-   * need the current `{ userId, user, groupId, role, grants }` object.
-   *
-   * Throws a structured `ConvexError` when unauthenticated by default.
-   * Pass `{ optional: true }` to get a null-shaped auth object instead.
-   *
-   * @param ctx - Convex query, mutation, or action context.
-   * @param config - Optional auth resolution config. Supports `optional`,
-   *   `resolve`, and `authResolve`.
-   * @returns The current auth context.
-   *
-   * @example fluent-convex middleware
-   * ```ts
-   * const withAuth = convex.createMiddleware(async (ctx, next) => {
-   *   return next({ ...ctx, auth: await auth.context(ctx) });
-   * });
-   * ```
-   *
-   * @example Direct usage in a handler
-    * ```ts
-    * const authContext = await auth.context(ctx);
-    * const { userId, grants } = authContext;
-    * ```
-    *
-    * @example Optional usage
-    * ```ts
-    * const authContext = await auth.context(ctx, { optional: true });
-    * if (authContext.userId === null) {
-    *   return null;
-    * }
-    * ```
-    */
-  context: AuthContextResolver;
-  /**
-   * Context enrichment for convex-helpers `customQuery` / `customMutation` /
-   * `customAction`.
-   *
-   * Resolves the current user's identity, active group, membership role,
-   * and grants, then attaches them to `ctx.auth`. Returns a `Customization`
-   * object compatible with convex-helpers' custom function builders.
-   *
-   * `ctx.auth` is the current request auth context.
-   * By default this throws when unauthenticated so handlers can assume
-   * `ctx.auth.userId` and `ctx.auth.user` exist.
-   *
-   * @returns A convex-helpers `Customization` object.
-   *
-   * @example One-time setup in `convex/functions.ts`
-   * ```ts
-   * import { query, mutation, action } from "./_generated/server";
-   * import { customQuery, customMutation, customAction } from "convex-helpers/server/customFunctions";
-   * import { auth } from "./auth";
-   *
-   * export const authQuery = customQuery(query, auth.ctx());
-   * export const authMutation = customMutation(mutation, auth.ctx());
-   * export const authAction = customAction(action, auth.ctx());
-   * ```
-   *
-   * @example Per-function usage
-   * ```ts
-   * import { authQuery } from "./functions";
-   *
-   * export const list = authQuery({
-   *   args: { workspaceId: v.string() },
-   *   handler: async (ctx, args) => {
-   *     const { userId, groupId, grants } = ctx.auth;
-   *     // business logic
-   *   },
-   * });
-   * ```
-   */
-  ctx: AuthContextFactory;
-};
-/**
- * Current request auth context injected into `ctx.auth` by `auth.ctx()`. This
- * is the authenticated auth shape returned by {@link createAuth().context}.
- * Optional context builders may still surface nullable fields when
- * `optional: true` is used.
- *
- * - `groupId` is `null` when the user has no active group set.
- * - `role` is `null` when no active group or no membership is resolved.
- * - `grants` is `[]` when no active group or no membership is resolved.
- *
- * @example
- * ```ts
- * import type { AuthContext } from "@robelest/convex-auth/server";
- *
- * const mockAuth: AuthContext = {
- *   userId: "user123" as Id<"User">,
- *   user: { _id: "user123", email: "test@example.com" },
- *   groupId: "group456",
- *   role: "admin",
- *   grants: ["read", "write"],
- * };
- * ```
- */
-type AuthContext = {
-  /** The authenticated user's document ID. */userId: GenericId<"User">; /** The authenticated user's full document. */
-  user: UserDoc; /** The user's active group ID, or `null` if none set. */
-  groupId: string | null; /** The user's primary role in the active group, or `null`. */
-  role: string | null; /** Resolved grant strings from the user's role definitions. */
-  grants: string[];
-};
-/**
- * Nullable auth context returned by `auth.context(ctx, { optional: true })`
- * and injected by `auth.ctx({ optional: true })`.
- *
- * Use this when callers may be unauthenticated but you still want a stable
- * auth-shaped object.
- *
- * - `userId` and `user` are `null` when unauthenticated.
- * - `groupId` and `role` are `null` when no active group is resolved.
- * - `grants` is `[]` when no membership is resolved.
- *
- * @example
- * ```ts
- * const authContext = await auth.context(ctx, { optional: true });
- * if (authContext.userId === null) {
- *   return null;
- * }
- * ```
- */
-type OptionalAuthContext = {
-  /** The authenticated user's document ID, or `null` when unauthenticated. */userId: GenericId<"User"> | null; /** The authenticated user's full document, or `null` when unauthenticated. */
-  user: UserDoc | null; /** The user's active group ID, or `null` if none is set. */
-  groupId: string | null; /** The user's primary role in the active group, or `null`. */
-  role: string | null; /** Resolved grant strings for the active membership, or `[]`. */
-  grants: string[];
-};
-type AuthContextBase = {
-  getUserIdentity: () => Promise<UserIdentity | null>;
-};
-type RequiredAuthContextState = AuthContextBase & AuthContext;
-type OptionalAuthContextState = AuthContextBase & OptionalAuthContext;
-type ResolvedAuthContext<TResolve> = AuthContext & TResolve;
-type ResolvedOptionalAuthContext<TResolve> = OptionalAuthContext & TResolve;
-type AuthContextResolver = {
-  <TResolve extends Record<string, unknown> = Record<string, never>>(ctx: any, config: AuthContextConfig<TResolve> & {
-    optional: true;
-  }): Promise<ResolvedOptionalAuthContext<TResolve>>;
-  <TResolve extends Record<string, unknown> = Record<string, never>>(ctx: any, config?: AuthContextConfig<TResolve>): Promise<ResolvedAuthContext<TResolve>>;
-};
-type AuthContextCustomization<TAuth> = {
-  args: {};
-  input: (ctx: any, _args: any, _extra?: any) => Promise<{
-    ctx: {
-      auth: TAuth;
-    };
-    args: {};
-  }>;
-};
-type AuthContextFactory = {
-  <TResolve extends Record<string, unknown> = Record<string, never>>(config: AuthContextConfig<TResolve> & {
-    optional: true;
-  }): AuthContextCustomization<OptionalAuthContextState & TResolve>;
-  <TResolve extends Record<string, unknown> = Record<string, never>>(config?: AuthContextConfig<TResolve>): AuthContextCustomization<RequiredAuthContextState & TResolve>;
-};
-type InternalSsoApi = ReturnType<typeof Auth>["auth"]["sso"];
-type PublicSsoAdminApi = {
-  connection: InternalSsoApi["connection"] & {
-    domain: {
-      list: InternalSsoApi["domain"]["list"];
-      validate: InternalSsoApi["domain"]["validate"];
-      set: (ctx: Parameters<InternalSsoApi["connection"]["create"]>[0], enterpriseId: string, domains: Array<{
-        domain: string;
-        isPrimary?: boolean;
-      }>) => Promise<{
-        enterpriseId: string;
-        domains: Array<{
-          domainId: string;
-          domain: string;
-          isPrimary: boolean;
-          verified: boolean;
-          verifiedAt: number | null;
-        }>;
-      }>;
-      verification: {
-        request: (ctx: Parameters<InternalSsoApi["connection"]["create"]>[0], args: {
-          enterpriseId: string;
-          domain: string;
-        }) => Promise<{
-          enterpriseId: string;
-          domain: string;
-          requestedAt: number;
-          expiresAt: number;
-          challenge: {
-            recordType: "TXT";
-            recordName: string;
-            recordValue: string;
-          };
-        }>;
-        confirm: (ctx: Parameters<InternalSsoApi["connection"]["create"]>[0], args: {
-          enterpriseId: string;
-          domain: string;
-        }) => Promise<{
-          enterpriseId: string;
-          domain: string;
-          verifiedAt?: number;
-          checks: Array<{
-            name: string;
-            ok: boolean;
-            message?: string;
-          }>;
-        }>;
-      };
-    };
-  };
-  oidc: Omit<InternalSsoApi["oidc"], "signIn">;
-  saml: Omit<InternalSsoApi["saml"], "metadata">;
-  policy: InternalSsoApi["policy"];
-  audit: {
-    list: InternalSsoApi["audit"]["list"];
-  };
-  webhook: {
-    endpoint: InternalSsoApi["webhook"]["endpoint"];
-    delivery: {
-      list: InternalSsoApi["webhook"]["delivery"]["list"];
-    };
-  };
-};
-type PublicSsoClientApi = {
-  signIn: InternalSsoApi["oidc"]["signIn"];
-  metadata: InternalSsoApi["saml"]["metadata"];
-};
-type PublicSsoApi = {
-  admin: PublicSsoAdminApi;
-  client: PublicSsoClientApi;
-};
-type PublicScimApi = {
-  admin: Omit<InternalSsoApi["scim"], "getConfigByToken" | "identity">;
-};
-/**
- * Extended auth API that includes enterprise SSO and SCIM namespaces.
- *
- * This type is the union of {@link AuthApiBase} plus `sso` (SSO connection
- * management, OIDC/SAML, domain verification, policies, audit, webhooks)
- * and `scim` (SCIM provisioning configuration). It is returned by
- * {@link createAuth} only when `new SSO()` is included in the providers
- * array; otherwise the narrower {@link AuthApiBase} is returned instead.
- * Attempting to access `auth.sso` or `auth.scim` without an SSO provider
- * produces a compile-time error because the return type narrows back to
- * {@link AuthApiBase}.
- *
- * @typeParam TAuthorization - The authorization config, forwarded to
- *   {@link AuthApiBase} for typed role IDs and grant strings.
- */
-type AuthApi<TAuthorization extends AuthAuthorizationConfig | undefined = undefined> = AuthApiBase<TAuthorization> & {
-  sso: PublicSsoApi;
-  scim: PublicScimApi;
-};
-/**
- * The return type of {@link createAuth}.
- *
- * Resolves to {@link AuthApi} (with `sso` and `scim` namespaces) when
- * `new SSO()` is present in the providers array, or to the narrower
- * {@link AuthApiBase} otherwise. This conditional type ensures that
- * enterprise-only APIs are only accessible when the SSO provider is
- * configured, producing a compile-time error if you try to access
- * `auth.sso` without it.
- * This lets application code keep a single `createAuth()` call while still
- * getting provider-aware typing on the resulting API object.
- *
- * @typeParam P - The tuple of provider configs passed to `createAuth`.
- * @typeParam TAuthorization - Optional authorization config for typed roles/grants.
- */
-type ConvexAuthResult<P extends AuthProviderConfig[], TAuthorization extends AuthAuthorizationConfig | undefined = undefined> = HasSSO<P> extends true ? AuthApi<TAuthorization> : AuthApiBase<TAuthorization>;
-declare function createAuth<P extends AuthProviderConfig[], TAuthorization extends AuthAuthorizationConfig | undefined = undefined>(component: ConvexAuthConfig["component"], config: Omit<AuthConfig, "providers" | "authorization"> & {
-  providers: P;
-  authorization?: TAuthorization;
-}): ConvexAuthResult<P, TAuthorization>;
-/**
- * Configuration for {@link createAuth().ctx} context enrichment.
- *
- * The same config shape is also used by {@link createAuth().context}.
- *
- * @typeParam TResolve - Extra fields returned from `resolve()` and merged into
- *   the resulting `ctx.auth` object.
- *
- * @example
- * ```ts
- * const authContext = await auth.context(ctx, {
- *   resolve: async (_ctx, user, authState) => ({
- *     email: user.email,
- *     canWrite: authState.grants.includes("posts.write"),
- *   }),
- * });
- * ```
- */
-type AuthContextConfig<TResolve extends Record<string, unknown> = Record<string, never>> = {
-  /**
-   * Allow unauthenticated callers and return a null-shaped auth object instead
-   * of throwing `NOT_SIGNED_IN`.
-   */
-  optional?: boolean;
-  /**
-   * Attach additional derived fields to the auth context after the base auth
-   * context is resolved.
-   *
-   * This callback runs only when a user is authenticated.
-   */
-  resolve?: (ctx: any, user: UserDoc, auth: AuthContext) => Promise<TResolve> | TResolve;
-  /**
-   * Override or wrap the base auth resolution used by {@link createAuth().ctx}.
-   *
-   * Return `undefined` to fall back to the built-in resolver,
-   * `null` for an explicit unauthenticated state, or an
-   * {@link AuthContext} object to provide a pre-resolved auth state.
-   * This is useful for tests, proxy auth, impersonation flows, or any
-   * environment that needs to inject auth without depending on the standard
-   * Convex auth tables.
-   *
-   * @param ctx - The Convex function context.
-   * @param fallback - The built-in auth resolver used by {@link createAuth().ctx}.
-   * @returns Resolved auth state, `null`, or `undefined` to use the fallback.
-   *
-   * @example
-   * ```ts
-   * const authCtx = auth.ctx({
-   *   authResolve: async (ctx, fallback) => {
-   *     const injected = getInjectedAuth(ctx);
-   *     return injected ?? (await fallback());
-   *   },
-   * });
-   * ```
-   */
-  authResolve?: (ctx: any, fallback: () => Promise<AuthContext | null>) => Promise<AuthContext | null | undefined> | AuthContext | null | undefined;
-};
-/**
- * Extract the resolved `auth` context type from an `auth.ctx()` customization.
- *
- * Use this to type function parameters or variables that receive the
- * enriched auth context produced by `auth.ctx()`. The inferred type includes
- * `userId`, `user`, `groupId`, `role`, `grants`, `getUserIdentity`, and any
- * additional fields added by the `resolve` callback. This is the generic
- * utility for reusing the enriched auth shape without manually duplicating
- * conditional auth types.
- *
- * @typeParam T - An `auth.ctx()` return value (must have an `input` method
- *   that returns `{ ctx: { auth: ... } }`).
- *
- * @example
- * ```ts
- * const authCtx = auth.ctx({
- *   resolve: async (ctx, user) => ({ orgId: user.orgId }),
- * });
- * type Auth = InferAuth<typeof authCtx>;
- * // Auth = { userId: Id<"User">; user: UserDoc; getUserIdentity: ...; orgId: string }
- * ```
- *
- * @see {@link createAuth}
- */
-type InferAuth<T extends {
-  input: (...args: any[]) => Promise<{
-    ctx: {
-      auth: any;
-    };
-  }>;
-}> = Awaited<ReturnType<T["input"]>>["ctx"]["auth"];
-//#endregion
-export { AuthApi, AuthConfig, AuthContext, AuthContextConfig, InferAuth, OptionalAuthContext, UserDoc, createAuth };
-//# sourceMappingURL=auth.d.ts.map

package/dist/component/server/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","names":[],"sources":["../../../src/server/auth.ts"],"mappings":";;;;;;;;AAyCA;;;KAHY,UAAA,GAAa,IAAA,CAAK,gBAAA;;KAGlB,OAAA,GAAU,GAAA;AAAA,KAEjB,0BAAA,wBACoB,uBAAA,gBACrB,IAAA,CACF,UAAA,QAAkB,IAAA;EAGlB,MAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,mCAEpB,IAAA;IACE,OAAA;IACA,MAAA;IACA,OAAA,GAAU,UAAA,CAAW,cAAA;IACrB,MAAA;IACA,MAAA,GAAS,MAAA;EAAA,MAER,OAAA;IAAU,QAAA;EAAA;EACf,IAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,iCAEpB,IAAA;IACE,KAAA;MACE,OAAA;MACA,MAAA;MACA,MAAA,GAAS,UAAA,CAAW,cAAA;MACpB,MAAA;IAAA;IAEF,KAAA;IACA,MAAA;IACA,OAAA;IACA,KAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;EAClC,MAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,mCAEpB,QAAA,UACA,IAAA,EAAM,MAAA;IAA4B,OAAA,GAAU,UAAA,CAAW,cAAA;EAAA,MACpD,OAAA;IAAU,QAAA;EAAA;EACf,OAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,oCAEpB,IAAA;IACE,MAAA;IACA,OAAA;IACA,QAAA;IACA,QAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;EAClC,OAAA,GACE,GAAA,EAAK,UAAA,CACH,UAAA,QAAkB,IAAA,oCAEpB,IAAA;IACE,MAAA;IACA,OAAA;IACA,QAAA;IACA,OAAA,GAAU,UAAA,CAAW,cAAA;IACrB,MAAA,GAAS,SAAA,CAAU,cAAA;IACnB,QAAA;EAAA,MAEC,UAAA,CAAW,UAAA,QAAkB,IAAA;AAAA;;;;;;;;;;;;;;;;KAkBxB,WAAA,wBACa,uBAAA;EAEvB,MAAA,EAAQ,UAAA,QAAkB,IAAA;EAC1B,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,KAAA,EAAO,UAAA,QAAkB,IAAA;EACzB,IAAA,EAAM,UAAA,QAAkB,IAAA;EACxB,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,QAAA,EAAU,UAAA,QAAkB,IAAA;EAC5B,OAAA,EAAS,UAAA,QAAkB,IAAA;EAC3B,KAAA,EAAO,UAAA,QAAkB,IAAA;EACzB,MAAA,EAAQ,0BAAA,CAA2B,cAAA;EACnC,MAAA,EAAQ,UAAA,QAAkB,IAAA;EAC1B,GAAA,EAAK,UAAA,QAAkB,IAAA;EACvB,IAAA,EAAM,UAAA,QAAkB,IAAA;EA7EF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgHtB,OAAA,EAAS,mBAAA;EArFL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCN;;;;;;;;;EAwFE,GAAA,EAAK,kBAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;;KA0BK,WAAA;EA/GF,4CAiHR,MAAA,EAAQ,SAAA,UAhHR;EAkHA,IAAA,EAAM,OAAA,EAlHqB;EAoH3B,OAAA,iBAnHO;EAqHP,IAAA,iBApHA;EAsHA,MAAA;AAAA;;;;;;;;;;;;;;;;;;;;KAsBU,mBAAA;EArIa,4EAuIvB,MAAA,EAAQ,SAAA,iBAtIF;EAwIN,IAAA,EAAM,OAAA,SArGN;EAuGA,OAAA,iBAhEA;EAkEA,IAAA,iBAlEuB;EAoEvB,MAAA;AAAA;AAAA,KAGG,eAAA;EACH,eAAA,QAAuB,OAAA,CAAQ,YAAA;AAAA;AAAA,KAG5B,wBAAA,GAA2B,eAAA,GAAkB,WAAA;AAAA,KAE7C,wBAAA,GAA2B,eAAA,GAAkB,mBAAA;AAAA,KAE7C,mBAAA,aAAgC,WAAA,GAAc,QAAA;AAAA,KAE9C,2BAAA,aAAwC,mBAAA,GAAsB,QAAA;AAAA,KAE9D,mBAAA;EAAA,kBACe,MAAA,oBAA0B,MAAA,iBAC1C,GAAA,OACA,MAAA,EAAQ,iBAAA,CAAkB,QAAA;IAAc,QAAA;EAAA,IACvC,OAAA,CAAQ,2BAAA,CAA4B,QAAA;EAAA,kBACrB,MAAA,oBAA0B,MAAA,iBAC1C,GAAA,OACA,MAAA,GAAS,iBAAA,CAAkB,QAAA,IAC1B,OAAA,CAAQ,mBAAA,CAAoB,QAAA;AAAA;AAAA,KAG5B,wBAAA;EACH,IAAA;EACA,KAAA,GACE,GAAA,OACA,KAAA,OACA,MAAA,WACG,OAAA;IACH,GAAA;MACE,IAAA,EAAM,KAAA;IAAA;IAER,IAAA;EAAA;AAAA;AAAA,KAIC,kBAAA;EAAA,kBACe,MAAA,oBAA0B,MAAA,iBAC1C,MAAA,EAAQ,iBAAA,CAAkB,QAAA;IAAc,QAAA;EAAA,IACvC,wBAAA,CAAyB,wBAAA,GAA2B,QAAA;EAAA,kBACrC,MAAA,oBAA0B,MAAA,iBAC1C,MAAA,GAAS,iBAAA,CAAkB,QAAA,IAC1B,wBAAA,CAAyB,wBAAA,GAA2B,QAAA;AAAA;AAAA,KAGpD,cAAA,GAAiB,UAAA,QAAkB,IAAA;AAAA,KAEnC,iBAAA;EACH,UAAA,EAAY,cAAA;IACV,MAAA;MACE,IAAA,EAAM,cAAA;MACN,QAAA,EAAU,cAAA;MACV,GAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,YAAA,UACA,OAAA,EAAS,KAAA;QACP,MAAA;QACA,SAAA;MAAA,OAEC,OAAA;QACH,YAAA;QACA,OAAA,EAAS,KAAA;UACP,QAAA;UACA,MAAA;UACA,SAAA;UACA,QAAA;UACA,UAAA;QAAA;MAAA;MAGJ,YAAA;QACE,OAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,IAAA;UAAQ,YAAA;UAAsB,MAAA;QAAA,MAC3B,OAAA;UACH,YAAA;UACA,MAAA;UACA,WAAA;UACA,SAAA;UACA,SAAA;YACE,UAAA;YACA,UAAA;YACA,WAAA;UAAA;QAAA;QAGJ,OAAA,GACE,GAAA,EAAK,UAAA,CAAW,cAAA,8BAChB,IAAA;UAAQ,YAAA;UAAsB,MAAA;QAAA,MAC3B,OAAA;UACH,YAAA;UACA,MAAA;UACA,UAAA;UACA,MAAA,EAAQ,KAAA;YAAQ,IAAA;YAAc,EAAA;YAAa,OAAA;UAAA;QAAA;MAAA;IAAA;EAAA;EAKnD,IAAA,EAAM,IAAA,CAAK,cAAA;EACX,IAAA,EAAM,IAAA,CAAK,cAAA;EACX,MAAA,EAAQ,cAAA;EACR,KAAA;IACE,IAAA,EAAM,cAAA;EAAA;EAER,OAAA;IACE,QAAA,EAAU,cAAA;IACV,QAAA;MACE,IAAA,EAAM,cAAA;IAAA;EAAA;AAAA;AAAA,KAKP,kBAAA;EACH,MAAA,EAAQ,cAAA;EACR,QAAA,EAAU,cAAA;AAAA;AAAA,KAGP,YAAA;EACH,KAAA,EAAO,iBAAA;EACP,MAAA,EAAQ,kBAAA;AAAA;AAAA,KAGL,aAAA;EACH,KAAA,EAAO,IAAA,CAAK,cAAA;AAAA;;;AAtG2B;;;;;;;;;;;;;KAwH7B,OAAA,wBACa,uBAAA,4BACrB,WAAA,CAAY,cAAA;EACd,GAAA,EAAK,YAAA;EACL,IAAA,EAAM,aAAA;AAAA;AA/GA;;;;;;;;;;;;;;;AAAA,KAiII,gBAAA,WACA,kBAAA,2BACa,uBAAA,4BAEvB,MAAA,CAAO,CAAA,iBACH,OAAA,CAAQ,cAAA,IACR,WAAA,CAAY,cAAA;AAAA,iBA6GF,UAAA,WACJ,kBAAA,2BACa,uBAAA,yBAAA,CAEvB,SAAA,EAAW,gBAAA,eACX,MAAA,EAAQ,IAAA,CAAK,UAAA;EACX,SAAA,EAAW,CAAA;EACX,aAAA,GAAgB,cAAA;AAAA,IAEjB,gBAAA,CAAiB,CAAA,EAAG,cAAA;;;AAnP0C;;;;;AAGd;;;;;;;;;;;KAucvC,iBAAA,kBACO,MAAA,oBAA0B,MAAA;EA9a9B;;;;EAobb,QAAA;EApaW;;;;;;EA2aX,OAAA,IACE,GAAA,OACA,IAAA,EAAM,OAAA,EACN,IAAA,EAAM,WAAA,KACH,OAAA,CAAQ,QAAA,IAAY,QAAA;EA/Zb;;;;;;;;;;;;;;;;;;;;;;;;EAwbZ,WAAA,IACE,GAAA,OACA,QAAA,QAAgB,OAAA,CAAQ,WAAA,aACrB,OAAA,CAAQ,WAAA,uBAAkC,WAAA;AAAA;;;;;;;;;;;;;;;;;;;;;;;;;KAkHrC,SAAA;EACE,KAAA,MAAW,IAAA,YAAgB,OAAA;IAAU,GAAA;MAAO,IAAA;IAAA;EAAA;AAAA,KACtD,OAAA,CAAQ,UAAA,CAAW,CAAA"}