@seamless-auth/react 0.6.0 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,59 @@
 # @seamless-auth/react
 
+## 0.8.0
+
+### Minor Changes
+
+- 28623e2: Offer a way past passkey registration when another login method is enabled.
+
+  Registration used to end on a screen with one control on it. A user who did not want a passkey, or
+  whose device could not make one, had no way forward: the unsupported branch rendered a message and
+  nothing else, on a screen with no exit. The session already exists by then, since the OTP step that
+  leads here establishes it, so leaving without a passkey was always a legitimate way to finish.
+
+  `useLoginMethods` reads the instance configuration from the auth server, and the skip only appears
+  when a method other than `passkey` is enabled. With passkey as the only method a skip would leave a
+  user unable to sign back into the account they just created, so the control is not rendered at all.
+  Unknown counts as unsafe: a failed or in-flight read shows no skip rather than guessing.
+
+  The unsupported-device branch now says which case it is, and offers the same way forward when one
+  exists.
+
+  `Login` no longer starts from a hardcoded `['passkey', 'magic_link', 'phone_otp']`. It uses the
+  methods the instance reports, falling back to the narrower `['passkey', 'magic_link']` that matches
+  the auth server's own defaults. The login response stays authoritative when it carries methods of
+  its own.
+
+  Requires an auth server serving `GET /system-config/public`, and an adapter that proxies it.
+
+## 0.7.0
+
+### Minor Changes
+
+- b4b7ca1: Stop discarding the underlying WebAuthn error. The passkey login, passkey registration, and step-up verification methods now attach the thrown ceremony error to the returned `SeamlessAuthError` as `cause`, and a new `getWebAuthnErrorDetail()` export reads its `name`, `code`, and `message`. Callers can tell a dismissed prompt or missing credential (`NotAllowedError`) apart from an origin or RP ID mismatch (`SecurityError`) instead of seeing one generic string. The friendly result messages are unchanged, and only the error name is logged.
+- 41dfea7: Adopt `@seamless-auth/types` for the API request and response shapes. The SDK's types were hand-written and maintained in parallel with the auth API's schemas; they are now aliases of the published contract, so they cannot drift from what the API actually sends. The dependency is types-only, imported with `import type`, so no schema validation library reaches your bundle and the export names you import are unchanged.
+
+  Some types are now more accurate, which is a breaking change at the type level for adopters:
+  - `Credential.lastUsedAt` is `string | null | undefined`, not `Date | null`. The API serializes it as an ISO 8601 string, so code calling a `Date` method on it was relying on a type that never matched the wire value and threw at runtime. Wrap it yourself: `new Date(credential.lastUsedAt)`.
+  - `Credential.deviceType`, `friendlyName`, `platform`, `browser`, and `deviceInfo` are optional, matching the API. `Credential.createdAt` is now present.
+  - `User.phone` is `string | null`, and `User.roles` is required rather than optional. `User` also carries `lastLogin`.
+  - `Organization.createdAt` and `updatedAt` are `string` rather than `string | Date`.
+
+  No runtime behavior changes.
+
+- 3922389: Surface OAuth callback error codes. A new `getOAuthErrorCode()` export reads the auth API's machine-readable `code` off a `SeamlessAuthError` and narrows it to `oauth_missing_email`, `oauth_email_not_verified`, or `oauth_missing_subject`, returning `undefined` for anything unrecognized. The bundled OAuth callback screen now maps those three codes to actionable text instead of one generic failure message.
+
+### Patch Changes
+
+- a82768d: Read the OAuth failure code from a nested `details` object when the error body does not carry it at the top level. `getOAuthErrorCode` only looked at a top-level `code`, which is where the auth API puts it, so a proxy that normalized the error body and moved the siblings of `error` under `details` silently downgraded OAuth messaging to a generic failure. Both locations are accepted now, the top level still wins, and the allowlist is unchanged: an unrecognized code in either place still returns `undefined`.
+- e27dcca: Stop calling the logout endpoint when the session check fails. A failed `/users/me` means the server already considers the session unusable, so the SDK now clears it locally instead of sending a `DELETE /logout` for a session that does not exist. Previously every anonymous page load fired that second request.
+
+  Session state now lives in a framework-agnostic store behind `AuthProvider`, which reads it through `useSyncExternalStore`. The provider's public API is unchanged. Reading a previous sign-in goes through a storage port that falls back to memory when there is no `localStorage`, so the store is safe to create during server-side rendering.
+
+  The store survives a remount. React can run mount, cleanup, mount against the same provider, which StrictMode does on every mount and Activity does whenever a hidden tree is shown again, so the provider no longer destroys the store from its effect cleanup. `destroy()` is terminal, and tearing it down there left the remounted provider holding a store that refused every update and stayed on `loading: true`.
+
+- 83bf7b8: Take the last five response envelopes from `@seamless-auth/types` instead of declaring them here. `OAuthProvidersResult`, `CredentialUpdateResult`, `OrganizationResult`, `OrganizationMembersResult`, and `OrganizationMembershipResult` were hand-written because the package had no exported alias for their schemas; types 0.4.0 exports one for every schema, so they are aliases now like the rest. The shapes are identical, so this is a no-op for adopters, and the dependency stays types-only.
+
 ## 0.6.0
 
 ### Minor Changes

package/README.md

@@ -18,6 +18,8 @@
 - `usePasskeySupport()`
 - `hasScopedRole()` and `roleGrantsAccess()`
 - `SeamlessAuthError`, the error type carried on a failed result
+- `getOAuthErrorCode()`, which reads the known OAuth callback failure codes off that error
+- `getWebAuthnErrorDetail()`, which reads the underlying failure of a passkey or step-up ceremony
 - types including `AuthContextType`, `Credential`, `User`, `OAuthProvider`, `StepUpStatus`, the `SeamlessAuthResult` wrapper, and the headless client input/result types
 
 ## Installation
@@ -384,6 +386,33 @@ function OAuthCallback() {
 }
 ```
 
+Some callback failures are the user's to fix, so the API returns a stable `code` alongside the error
+message. `getOAuthErrorCode()` narrows it to the codes this SDK knows about and returns `undefined`
+for everything else, so unexpected failures keep your generic message:
+
+```tsx
+import { getOAuthErrorCode, useAuth } from '@seamless-auth/react';
+
+const { error } = await finishOAuthLogin({ providerId, code, state });
+
+switch (getOAuthErrorCode(error)) {
+  case 'oauth_missing_email':
+    // The provider account shared no email address.
+    break;
+  case 'oauth_email_not_verified':
+    // The provider account's email is unverified.
+    break;
+  case 'oauth_missing_subject':
+    // The provider returned no usable account identifier.
+    break;
+  default:
+    // No error, or one without a recognized code.
+    break;
+}
+```
+
+The bundled `AuthRoutes` callback screen already maps these three codes to actionable text.
+
 For fully custom UI without `useAuth()`, call the headless client directly:
 
 ```ts
@@ -446,6 +475,21 @@ The headless client exposes helpers for:
 - logout and delete-user
 - credential update and deletion
 
+### Where the response types come from
+
+The request and response types are aliases of
+[`@seamless-auth/types`](https://www.npmjs.com/package/@seamless-auth/types), which is generated from
+the auth API's schemas. `User`, `Credential`, `Organization`, `StepUpStatus`, `MessageResult`, and the
+other wire shapes describe what the API actually sends, rather than a second copy maintained here that
+could drift from it.
+
+The dependency is types-only. Nothing from it is imported at runtime, so no schema validation library
+reaches your bundle. Names exported from this package stay the SDK's own, so you keep importing
+`Credential` from `@seamless-auth/react`.
+
+Two SDK concerns are deliberately not shared, because they are not wire contracts: the PRF helper
+types and the `SeamlessAuthResult` wrapper.
+
 ### Result convention
 
 Every request method resolves to a `SeamlessAuthResult<T>`:
@@ -477,6 +521,38 @@ a disabled provider is a value you can map straight to UI state rather than an e
 `SeamlessAuthError` carries the server's `message`, the HTTP `status`, and the parsed response
 `body`, so you can branch on a specific failure.
 
+### WebAuthn ceremony failures
+
+A passkey or step-up ceremony can fail in the browser before any request is sent, so those results
+carry the thrown error as `cause` with `status` `0`. Use `getWebAuthnErrorDetail()` to read it: the
+`name` is the `DOMException` name that separates the cases a user can act on, and `code` is
+SimpleWebAuthn's narrower reason when it identified one.
+
+```ts
+import { getWebAuthnErrorDetail } from '@seamless-auth/react';
+
+const { error } = await authClient.verifyStepUpWithPasskey();
+const detail = getWebAuthnErrorDetail(error);
+
+switch (detail?.name) {
+  case 'NotAllowedError':
+    // The prompt was dismissed, or the account has no passkey to assert.
+    break;
+  case 'SecurityError':
+    // The origin or RP ID does not match what the API is configured for.
+    break;
+  case 'InvalidStateError':
+    // This authenticator already holds a passkey for the account.
+    break;
+  default:
+    // Not a ceremony failure. Fall back to error?.message.
+    break;
+}
+```
+
+`getWebAuthnErrorDetail()` returns `undefined` for any error that did not come from a ceremony, so an
+HTTP failure keeps flowing through `error.message` and `error.body` as usual.
+
 The single exception is `isPasskeySupported`-style capability checks:
 `isPasskeyPrfSupported(): Promise<boolean>` is a local check rather than a request, so it returns a
 plain boolean.
@@ -727,6 +803,13 @@ function PasskeyList() {
 }
 ```
 
+`Credential.lastUsedAt` and `Credential.createdAt` are ISO 8601 strings, which is what the API sends.
+Wrap them yourself to format:
+
+```tsx
+const lastUsed = credential.lastUsedAt ? new Date(credential.lastUsedAt) : null;
+```
+
 Removing a passkey is a sensitive change. Gate it behind a fresh step-up when the account has other
 factors, using `refreshStepUpStatus()` and `verifyStepUpWithPasskey()` from the step-up section.
 

package/dist/client/createSeamlessAuthClient.d.ts

@@ -1,4 +1,4 @@
-import { Credential, Organization, OrganizationMembership, User } from '../types';
+import type { AddOrganizationMemberRequest, CreateOrganizationRequest, CredentialUpdateResponse, LoginMethod as LoginMethodShape, LoginSuccessResponse, LogoutScope as LogoutScopeShape, MeResponse, MessageResponse, OAuthProvidersResponse, OrganizationEnvelopeResponse, OrganizationListResponse, OrganizationMembersResponse, OrganizationMembershipEnvelopeResponse, OrganizationSwitchResponse, PublicOAuthProvider, PublicSystemConfigResponse, RegistrationRequest, StartOAuthLoginResponse, StepUpMethod as StepUpMethodShape, StepUpStatus as StepUpStatusShape, TotpEnrollmentStartResponse, TotpStatus as TotpStatusShape, UpdateOrganizationMemberRequest, UpdateOrganizationRequest } from '@seamless-auth/types';
 import { type SeamlessAuthResult } from './result';
 import { PasskeyPrfInput, PasskeyPrfResult } from './webauthnPrf';
 export interface SeamlessAuthClientOptions {
@@ -8,100 +8,56 @@ export interface LoginInput {
     identifier: string;
     passkeyAvailable: boolean;
 }
-export type LoginMethod = 'passkey' | 'magic_link' | 'email_otp' | 'phone_otp' | 'oauth';
-export interface LoginStartResult {
-    message?: string;
-    identifierType?: 'email' | 'phone';
-    loginMethods?: LoginMethod[];
-}
-export interface RegisterInput {
-    email: string;
-    phone?: string | null;
-}
+export type LoginMethod = LoginMethodShape;
+/**
+ * The login response minus its session material. The API returns a token and
+ * subject here, which this SDK deliberately does not surface: sessions are
+ * carried by cookies, so adopters have no reason to handle raw tokens.
+ */
+export type LoginStartResult = Omit<LoginSuccessResponse, 'token' | 'sub'>;
+export type RegisterInput = RegistrationRequest;
 export interface PasskeyMetadata {
     friendlyName: string;
     platform: string;
     browser: string;
     deviceInfo: string;
 }
-export interface CurrentUserResult {
-    user: User;
-    credentials: Credential[];
-    organizations?: Organization[];
-    activeOrganization?: Organization | null;
-}
-export interface CreateOrganizationInput {
-    name: string;
-    slug?: string;
-    metadata?: Record<string, unknown> | null;
-}
-export interface UpdateOrganizationInput {
-    name?: string;
-    slug?: string;
-    metadata?: Record<string, unknown> | null;
-}
-export interface OrganizationMemberInput {
-    userId?: string;
-    email?: string;
-    roles?: string[];
-    scopes?: string[];
-}
-export interface OrganizationMemberUpdateInput {
-    roles?: string[];
-    scopes?: string[];
-}
-export interface OrganizationsResult {
-    organizations: Organization[];
-    activeOrganizationId?: string | null;
-}
-export interface OrganizationResult {
-    organization: Organization;
-}
-export interface OrganizationMembersResult {
-    members: OrganizationMembership[];
-    total: number;
-}
+export type CurrentUserResult = MeResponse;
+export type CreateOrganizationInput = CreateOrganizationRequest;
+export type UpdateOrganizationInput = UpdateOrganizationRequest;
+export type OrganizationMemberInput = AddOrganizationMemberRequest;
+export type OrganizationMemberUpdateInput = UpdateOrganizationMemberRequest;
+export type OrganizationsResult = OrganizationListResponse;
+export type OrganizationResult = OrganizationEnvelopeResponse;
+export type OrganizationMembersResult = OrganizationMembersResponse;
 /** Response body for a single membership mutation. */
-export interface OrganizationMembershipResult {
-    membership: OrganizationMembership;
-}
+export type OrganizationMembershipResult = OrganizationMembershipEnvelopeResponse;
 /**
- * Response body when the active organization changes. The server also returns
- * session material here, which this SDK deliberately does not surface: sessions
- * are carried by cookies, so adopters have no reason to handle raw tokens.
+ * Response body when the active organization changes, minus its session
+ * material. See `LoginStartResult` for why the token and subject are dropped.
  */
-export interface OrganizationSwitchResult {
-    message: string;
-    organizationId: string;
-    organization: Organization;
-}
-export interface OAuthProvider {
-    id: string;
-    name: string;
-    scopes: string[];
-}
-export interface OAuthProvidersResult {
-    providers: OAuthProvider[];
-}
+export type OrganizationSwitchResult = Omit<OrganizationSwitchResponse, 'token' | 'sub' | 'sessionId'>;
+export type OAuthProvider = PublicOAuthProvider;
+export type OAuthProvidersResult = OAuthProvidersResponse;
+/**
+ * The configuration a signed-out client may read. Fetched before there is a
+ * session, so the sign-in screens can match how this instance is configured
+ * instead of assuming a default set of methods.
+ */
+export type PublicSystemConfigResult = PublicSystemConfigResponse;
 export interface StartOAuthLoginInput {
     providerId: string;
     redirectUri?: string;
     returnTo?: string;
 }
-export interface StartOAuthLoginResult {
-    provider: OAuthProvider;
-    state: string;
-    authorizationUrl: string;
-}
+export type StartOAuthLoginResult = StartOAuthLoginResponse;
 export interface FinishOAuthLoginInput {
     providerId: string;
     code: string;
     state: string;
 }
 /** Response body for endpoints that only acknowledge the request. */
-export interface MessageResult {
-    message: string;
-}
+export type MessageResult = MessageResponse;
 /** Payload returned by a completed passkey login. */
 export interface PasskeyLoginData {
     prf?: PasskeyPrfResult;
@@ -112,38 +68,16 @@ export interface PasskeyRegistrationData {
     prfCapable: boolean;
 }
 /** Response body returned when credential metadata is updated. */
-export interface CredentialUpdateResult {
-    message: string;
-    credential: Credential;
-}
+export type CredentialUpdateResult = CredentialUpdateResponse;
 export interface RegisterPasskeyOptions {
     metadata: PasskeyMetadata;
     requestPrf?: boolean;
     requirePrf?: boolean;
 }
-export type StepUpMethod = 'webauthn' | 'totp';
-export interface TotpStatus {
-    enabled: boolean;
-    verifiedAt: string | null;
-    lastUsedAt: string | null;
-}
-export interface TotpEnrollmentStartResult {
-    message: string;
-    secret: string;
-    otpauthUrl: string;
-    issuer: string;
-    accountName: string;
-    algorithm: string;
-    digits: number;
-    period: number;
-}
-export interface StepUpStatus {
-    fresh: boolean;
-    method: StepUpMethod | null;
-    verifiedAt: string | null;
-    expiresAt: string | null;
-    maxAgeSeconds: number;
-}
+export type StepUpMethod = StepUpMethodShape;
+export type TotpStatus = TotpStatusShape;
+export type TotpEnrollmentStartResult = TotpEnrollmentStartResponse;
+export type StepUpStatus = StepUpStatusShape;
 export interface PasskeyLoginOptions {
     prf?: PasskeyPrfInput;
 }
@@ -152,7 +86,7 @@ export interface StepUpPrfData extends StepUpStatus {
     credentialId: string;
     prf: PasskeyPrfResult;
 }
-export type LogoutScope = 'current_session' | 'all_sessions';
+export type LogoutScope = LogoutScopeShape;
 export interface LogoutOptions {
     scope?: LogoutScope;
 }
@@ -184,6 +118,7 @@ export interface SeamlessAuthClient {
     checkMagicLink: () => Promise<SeamlessAuthResult<MessageResult>>;
     verifyMagicLink: (token: string) => Promise<SeamlessAuthResult<MessageResult>>;
     listOAuthProviders: () => Promise<SeamlessAuthResult<OAuthProvidersResult>>;
+    getPublicSystemConfig: () => Promise<SeamlessAuthResult<PublicSystemConfigResult>>;
     startOAuthLogin: (input: StartOAuthLoginInput) => Promise<SeamlessAuthResult<StartOAuthLoginResult>>;
     finishOAuthLogin: (input: FinishOAuthLoginInput) => Promise<SeamlessAuthResult<MessageResult>>;
     registerPasskey: (input: PasskeyMetadata | RegisterPasskeyOptions) => Promise<SeamlessAuthResult<PasskeyRegistrationData>>;

package/dist/client/errors.d.ts

@@ -1,3 +1,4 @@
+import type { OAuthErrorCode as OAuthErrorCodeShape } from '@seamless-auth/types';
 /**
  * Error carrying the auth server's response detail, so callers can map known
  * failures to their own messaging instead of only seeing a generic string.
@@ -5,8 +6,50 @@
 export declare class SeamlessAuthError extends Error {
     readonly status: number;
     readonly body: unknown;
-    constructor(message: string, status: number, body?: unknown);
+    /**
+     * The underlying failure when the error was raised locally rather than by a
+     * response, for example the `DOMException` a WebAuthn ceremony throws.
+     */
+    readonly cause: unknown;
+    constructor(message: string, status: number, body?: unknown, cause?: unknown);
 }
+/**
+ * Machine-readable codes the auth API returns alongside `error` on an OAuth
+ * callback failure the user can act on.
+ */
+export type OAuthErrorCode = OAuthErrorCodeShape;
+/**
+ * Read the OAuth failure code off a result error. Returns `undefined` for
+ * anything unrecognized, including codes added by a newer API, so callers keep
+ * their generic messaging instead of showing a raw code.
+ *
+ * The auth API puts `code` at the top level of the error body, but a proxy in
+ * front of it may normalize that body and nest the siblings of `error` under
+ * `details`. Both locations are accepted so such a proxy does not silently
+ * downgrade OAuth messaging to a generic failure.
+ */
+export declare function getOAuthErrorCode(error: unknown): OAuthErrorCode | undefined;
+/**
+ * Detail recovered from a failed WebAuthn ceremony.
+ *
+ * `name` is the `DOMException` name, which is what distinguishes the cases a
+ * user can act on: `NotAllowedError` for a dismissed prompt or no usable
+ * credential, `SecurityError` for an origin or RP ID mismatch,
+ * `InvalidStateError` for an already registered passkey. `code` is
+ * SimpleWebAuthn's narrower reason when it identified one, for example
+ * `ERROR_CEREMONY_ABORTED`.
+ */
+export type WebAuthnErrorDetail = {
+    name: string;
+    code?: string;
+    message: string;
+};
+/**
+ * Read the WebAuthn failure behind a result error. Returns `undefined` for
+ * errors that did not come from a ceremony, so callers can branch on the
+ * specific failure and otherwise fall back to `error.message`.
+ */
+export declare function getWebAuthnErrorDetail(error: unknown): WebAuthnErrorDetail | undefined;
 /**
  * Build a `SeamlessAuthError` from a failed response, preserving the status and
  * the parsed body. The body may be empty or non-JSON, which is not treated as a

package/dist/client/result.d.ts

@@ -33,4 +33,4 @@ export declare function requestResult<T>(request: Promise<Response>, fallbackMes
 /** Wrap an already-derived value as a successful result. */
 export declare function resultOf<T>(data: T): SeamlessAuthResult<T>;
 /** Wrap a failure as a result. */
-export declare function resultError<T>(message: string, status?: number, body?: unknown): SeamlessAuthResult<T>;
+export declare function resultError<T>(message: string, status?: number, body?: unknown, cause?: unknown): SeamlessAuthResult<T>;

package/dist/components/AuthFallbackOptions.d.ts

@@ -6,7 +6,7 @@ interface AuthFallbackOptionsProps {
     onEmailOtp?: () => void;
     onPhoneOtp: () => void;
     onPasskeyRetry?: () => void;
-    loginMethods?: LoginMethod[];
+    loginMethods?: LoginMethod[] | null;
 }
 declare const AuthFallbackOptions: React.FC<AuthFallbackOptionsProps>;
 export default AuthFallbackOptions;

package/dist/hooks/useLoginMethods.d.ts

@@ -0,0 +1,30 @@
+import type { LoginMethod } from '../client/createSeamlessAuthClient';
+/**
+ * Used only until the instance answers, and if it never does.
+ *
+ * Deliberately the narrowest useful set, and matching the auth server's own
+ * defaults. Offering a method that turns out to be disabled sends a user down a
+ * path that fails, which is worse than showing one option too few.
+ */
+export declare const FALLBACK_LOGIN_METHODS: LoginMethod[];
+/**
+ * Which sign-in methods this instance has enabled, read from the auth server
+ * rather than assumed.
+ *
+ * `loginMethods` stays null until the answer arrives, and stays null if the
+ * request fails. A caller must treat that as "unknown" and not as "none": the
+ * screens use it to decide what is safe to offer, and guessing in either
+ * direction is worse than waiting. `loading` is what a caller renders against.
+ */
+export declare const useLoginMethods: () => {
+    loginMethods: ("passkey" | "magic_link" | "email_otp" | "phone_otp" | "oauth")[] | null;
+    loading: boolean;
+};
+/**
+ * Whether a user who declines a passkey would still have a way to sign in.
+ *
+ * Returns false while the methods are unknown, so a failed or in-flight request
+ * never produces a skip control that could strand someone in an account they
+ * cannot get back into.
+ */
+export declare const hasNonPasskeyLoginMethod: (loginMethods: LoginMethod[] | null) => boolean;

package/dist/index.d.ts

@@ -1,12 +1,13 @@
 import { AuthContextType, AuthProvider, useAuth } from './AuthProvider';
 import { AuthRoutes } from './AuthRoutes';
-import { createSeamlessAuthClient, CredentialUpdateResult, CreateOrganizationInput, CurrentUserResult, FinishOAuthLoginInput, LoginInput, LoginMethod, LoginStartResult, MessageResult, OAuthProvider, OAuthProvidersResult, OrganizationMemberInput, OrganizationMemberUpdateInput, OrganizationMembersResult, OrganizationMembershipResult, OrganizationResult, OrganizationSwitchResult, OrganizationsResult, PasskeyLoginData, PasskeyMetadata, PasskeyRegistrationData, RegisterInput, RegisterPasskeyOptions, SeamlessAuthClient, SeamlessAuthClientOptions, StartOAuthLoginInput, StartOAuthLoginResult, StepUpMethod, StepUpStatus, StepUpPrfData, TotpEnrollmentStartResult, TotpStatus, UpdateOrganizationInput } from './client/createSeamlessAuthClient';
-import { SeamlessAuthError } from './client/errors';
+import { createSeamlessAuthClient, CredentialUpdateResult, CreateOrganizationInput, CurrentUserResult, FinishOAuthLoginInput, LoginInput, LoginMethod, LoginStartResult, MessageResult, OAuthProvider, OAuthProvidersResult, PublicSystemConfigResult, OrganizationMemberInput, OrganizationMemberUpdateInput, OrganizationMembersResult, OrganizationMembershipResult, OrganizationResult, OrganizationSwitchResult, OrganizationsResult, PasskeyLoginData, PasskeyMetadata, PasskeyRegistrationData, RegisterInput, RegisterPasskeyOptions, SeamlessAuthClient, SeamlessAuthClientOptions, StartOAuthLoginInput, StartOAuthLoginResult, StepUpMethod, StepUpStatus, StepUpPrfData, TotpEnrollmentStartResult, TotpStatus, UpdateOrganizationInput } from './client/createSeamlessAuthClient';
+import { getOAuthErrorCode, getWebAuthnErrorDetail, OAuthErrorCode, SeamlessAuthError, WebAuthnErrorDetail } from './client/errors';
 import type { SeamlessAuthResult } from './client/result';
 import { encodePrfSalt, extractPasskeyPrfResult, isPasskeyPrfSupported, PasskeyPrfInput, PasskeyPrfResult } from './client/webauthnPrf';
 import { useAuthClient } from './hooks/useAuthClient';
+import { hasNonPasskeyLoginMethod, useLoginMethods } from './hooks/useLoginMethods';
 import { usePasskeySupport } from './hooks/usePasskeySupport';
 import { hasScopedRole, roleGrantsAccess } from './scopedRoles';
 import { Credential, Organization, OrganizationMembership, User } from './types';
-export { AuthProvider, AuthRoutes, createSeamlessAuthClient, encodePrfSalt, extractPasskeyPrfResult, hasScopedRole, isPasskeyPrfSupported, roleGrantsAccess, SeamlessAuthError, useAuth, useAuthClient, usePasskeySupport, };
-export type { CredentialUpdateResult, AuthContextType, Credential, CreateOrganizationInput, CurrentUserResult, FinishOAuthLoginInput, LoginInput, LoginMethod, LoginStartResult, MessageResult, OAuthProvider, OAuthProvidersResult, Organization, OrganizationMemberInput, OrganizationMembership, OrganizationMemberUpdateInput, OrganizationMembersResult, OrganizationMembershipResult, OrganizationResult, OrganizationSwitchResult, OrganizationsResult, PasskeyLoginData, PasskeyMetadata, PasskeyPrfInput, PasskeyPrfResult, PasskeyRegistrationData, RegisterInput, RegisterPasskeyOptions, SeamlessAuthClient, SeamlessAuthClientOptions, SeamlessAuthResult, StartOAuthLoginInput, StartOAuthLoginResult, StepUpMethod, StepUpStatus, StepUpPrfData, TotpEnrollmentStartResult, TotpStatus, UpdateOrganizationInput, User, };
+export { AuthProvider, AuthRoutes, createSeamlessAuthClient, encodePrfSalt, extractPasskeyPrfResult, getOAuthErrorCode, getWebAuthnErrorDetail, hasNonPasskeyLoginMethod, hasScopedRole, isPasskeyPrfSupported, roleGrantsAccess, SeamlessAuthError, useAuth, useAuthClient, useLoginMethods, usePasskeySupport, };
+export type { CredentialUpdateResult, AuthContextType, Credential, CreateOrganizationInput, CurrentUserResult, FinishOAuthLoginInput, LoginInput, LoginMethod, LoginStartResult, MessageResult, OAuthErrorCode, OAuthProvider, OAuthProvidersResult, Organization, OrganizationMemberInput, OrganizationMembership, OrganizationMemberUpdateInput, OrganizationMembersResult, OrganizationMembershipResult, OrganizationResult, OrganizationSwitchResult, OrganizationsResult, PasskeyLoginData, PasskeyMetadata, PasskeyPrfInput, PasskeyPrfResult, PasskeyRegistrationData, PublicSystemConfigResult, RegisterInput, RegisterPasskeyOptions, SeamlessAuthClient, SeamlessAuthClientOptions, SeamlessAuthResult, StartOAuthLoginInput, StartOAuthLoginResult, StepUpMethod, StepUpStatus, StepUpPrfData, TotpEnrollmentStartResult, TotpStatus, UpdateOrganizationInput, User, WebAuthnErrorDetail, };

package/dist/index.js

@@ -1,2 +1,2 @@
-import{jsx as e,jsxs as t,Fragment as i}from"react/jsx-runtime";import{browserSupportsWebAuthn as o,bufferToBase64URLString as r,base64URLStringToBuffer as n,startAuthentication as a,startRegistration as s,WebAuthnError as l}from"@simplewebauthn/browser";import{useState as d,useEffect as c,createContext as u,useMemo as _,useCallback as m,useContext as g,useRef as p}from"react";import{useHref as f,useNavigate as h,useLocation as y,useSearchParams as b,Routes as v,Route as k,Navigate as w}from"react-router-dom";import x from"libphonenumber-js";class P extends Error{constructor(e,t,i){super(e),this.name="SeamlessAuthError",this.status=t,this.body=i}}async function S(e,t){let i;try{i=await e.json()}catch{i=void 0}return new P(function(e){if("object"!=typeof e||null===e)return;const{error:t,message:i}=e;return"string"==typeof t&&t?t:"string"==typeof i&&i?i:void 0}(i)??t,e.status,i)}async function N(e){try{return await e.json()}catch{return}}async function O(e,t){let i;try{i=await e}catch{return{data:null,error:new P(t,0)}}return i.ok?{data:await N(i),error:null}:{data:null,error:await S(i,t)}}function T(e){return{data:e,error:null}}function C(e,t=0,i){return{data:null,error:new P(e,t,i)}}function I(e){if(e instanceof ArrayBuffer)return e;const t=new Uint8Array(e.buffer,e.byteOffset,e.byteLength),i=new Uint8Array(t.byteLength);return i.set(t),i.buffer}function M(e){return"string"==typeof e?e:r(I(e))}function A(e){return"string"==typeof e?n(e):e}function z(e){return{...e.credentialId?{credentialId:e.credentialId}:{},prf:{salt:M(e.salt),...e.secondSalt?{secondSalt:M(e.secondSalt)}:{}}}}async function E(){return!!o()&&("undefined"==typeof window||!1!==window.isSecureContext)&&void 0!==globalThis.PublicKeyCredential&&"undefined"!=typeof navigator&&"function"==typeof navigator.credentials?.get}function F(e){const t=e,i=t.extensions?.prf?.eval;return i?{...t,extensions:{...t.extensions,prf:{...t.extensions?.prf,eval:{...i,...i.first?{first:A(i.first)}:{},...i.second?{second:A(i.second)}:{}}}}}:e}function L(e){const t=e.clientExtensionResults,i=t?.prf?.results?.first;if(!i)return null;const o=(n=i)instanceof ArrayBuffer?new Uint8Array(n):new Uint8Array(n.buffer,n.byteOffset,n.byteLength);var n;return{credentialId:e.id,output:o,outputBase64url:r(I(o))}}function U(e){const t=e.clientExtensionResults;return t?.prf?.results?{...e,clientExtensionResults:{...e.clientExtensionResults,prf:{...t.prf,results:void 0}}}:e}function R(e,t){const i=e.method===t?e.method:null;return"Success"===e.message&&!0===e.fresh&&null!==i?T({fresh:!0,method:i,verifiedAt:e.verifiedAt??null,expiresAt:e.expiresAt??null,maxAgeSeconds:e.maxAgeSeconds??0}):C(e.message??"Step-up authentication failed.")}function B(e){return e?{method:"POST",body:JSON.stringify(z(e))}:{method:"POST"}}const q=e=>{const t=(e=>{const{authHost:t}=e;return async function(e,i){const o=`${t?.replace(/\/+$/,"")??""}/auth${e.startsWith("/")?e:`/${e}`}`,r=null!=i?.body,n={...i,credentials:"include",headers:{...r?{"Content-Type":"application/json"}:{},...i?.headers}};return fetch(o,n)}})({authHost:e.apiHost});return{getCurrentUser:()=>O(t("users/me",{method:"GET"}),"Failed to load the current user."),login:e=>O(t("/login",{method:"POST",body:JSON.stringify(e)}),"Failed to start sign-in."),loginWithPasskey:async e=>{const i=await O(t("/webAuthn/login/start",{...B(e?.prf)}),"Failed to start passkey login.");if(i.error)return i;let o,r;try{const e=await a({optionsJSON:F(i.data)});o=L(e),r=U(e)}catch{return console.error("Passkey login error."),C("Passkey login failed.")}const n=await O(t("/webAuthn/login/finish",{method:"POST",body:JSON.stringify({assertionResponse:r})}),"Failed to verify passkey.");return n.error?n:"Success"!==n.data?.message?C(n.data?.message??"Passkey login failed."):T(o?{prf:o}:{})},logout:(e={})=>O(t("all_sessions"===e.scope?"/logout/all":"/logout",{method:"DELETE"}),"Failed to sign out."),logoutAllSessions:()=>O(t("/logout/all",{method:"DELETE"}),"Failed to sign out of all sessions."),deleteUser:()=>O(t("/users/delete",{method:"DELETE"}),"Failed to delete the account."),register:e=>O(t("/registration/register",{method:"POST",body:JSON.stringify({email:e.email,...e.phone?{phone:e.phone}:{}})}),"Failed to register."),requestPhoneOtp:()=>O(t("/otp/generate-phone-otp",{method:"POST",body:JSON.stringify({})}),"Failed to send the SMS code."),verifyPhoneOtp:e=>O(t("/otp/verify-phone-otp",{method:"POST",body:JSON.stringify({verificationToken:e})}),"Failed to verify the SMS code."),requestLoginPhoneOtp:()=>O(t("/otp/generate-login-phone-otp",{method:"POST",body:JSON.stringify({})}),"Failed to send the SMS code."),verifyLoginPhoneOtp:e=>O(t("/otp/verify-login-phone-otp",{method:"POST",body:JSON.stringify({verificationToken:e})}),"Failed to verify the SMS code."),requestEmailOtp:()=>O(t("/otp/generate-email-otp",{method:"POST",body:JSON.stringify({})}),"Failed to send the email code."),verifyEmailOtp:e=>O(t("/otp/verify-email-otp",{method:"POST",body:JSON.stringify({verificationToken:e})}),"Failed to verify the email code."),requestLoginEmailOtp:()=>O(t("/otp/generate-login-email-otp",{method:"POST",body:JSON.stringify({})}),"Failed to send the email code."),verifyLoginEmailOtp:e=>O(t("/otp/verify-login-email-otp",{method:"POST",body:JSON.stringify({verificationToken:e})}),"Failed to verify the email code."),requestMagicLink:()=>O(t("/magic-link",{method:"POST",body:JSON.stringify({})}),"Failed to send the magic link."),checkMagicLink:()=>O(t("/magic-link/check",{method:"GET"}),"Failed to check the magic link."),verifyMagicLink:e=>O(t(`/magic-link/verify/${encodeURIComponent(e)}`,{method:"GET"}),"Failed to verify the magic link."),listOAuthProviders:()=>O(t("/oauth/providers",{method:"GET"}),"Failed to list OAuth providers."),startOAuthLogin:e=>O(t(`/oauth/${encodeURIComponent(e.providerId)}/start`,{method:"POST",body:JSON.stringify({...e.redirectUri?{redirectUri:e.redirectUri}:{},...e.returnTo?{returnTo:e.returnTo}:{}})}),"Failed to start OAuth login."),finishOAuthLogin:e=>O(t(`/oauth/${encodeURIComponent(e.providerId)}/callback`,{method:"POST",body:JSON.stringify({code:e.code,state:e.state})}),"Failed to finish OAuth login."),registerPasskey:async e=>{const i=function(e){return"metadata"in e?e:{metadata:e}}(e),o=await O(t(function(e){const t=new URLSearchParams;e.requirePrf?t.set("requirePrf","true"):e.requestPrf&&t.set("requestPrf","true");const i=t.toString();return"/webAuthn/register/start"+(i?`?${i}`:"")}(i),{method:"GET"}),"Failed to fetch passkey registration challenge.");if(o.error)return o;let r;try{r=await s({optionsJSON:o.data})}catch(e){return e instanceof l?C(e.name):(console.error("Passkey registration error."),C("Passkey registration failed."))}const n=function(e){const t=e.clientExtensionResults;return!0===t?.prf?.enabled}(r),a=await O(t("/webAuthn/register/finish",{method:"POST",body:JSON.stringify({attestationResponse:r,metadata:{...i.metadata,prfCapable:n}})}),"Verification failed.");return a.error?a:T({credentialId:r.id,prfCapable:n})},isPasskeyPrfSupported:E,getStepUpStatus:()=>O(t("/step-up/status",{method:"GET"}),"Failed to load step-up status."),verifyStepUpWithPasskey:async()=>{const e=await O(t("/step-up/webauthn/start",{method:"POST"}),"Failed to start step-up authentication.");if(e.error)return e;let i;try{i=U(await a({optionsJSON:F(e.data)}))}catch{return console.error("Step-up authentication error."),C("Step-up authentication failed.")}const o=await O(t("/step-up/webauthn/finish",{method:"POST",body:JSON.stringify({assertionResponse:i})}),"Failed to verify step-up authentication.");return o.error?o:R(o.data??{},"webauthn")},verifyStepUpWithPasskeyPrf:async e=>{const i=await O(t("/step-up/webauthn/start",{...B(e)}),"Failed to start step-up authentication.");if(i.error)return i;let o,r;try{const e=await a({optionsJSON:F(i.data)});o=L(e),r=U(e)}catch{return console.error("Step-up authentication error."),C("Step-up authentication failed.")}if(!o)return C("Passkey did not return PRF output.");const n=await O(t("/step-up/webauthn/finish",{method:"POST",body:JSON.stringify({assertionResponse:r})}),"Failed to verify step-up authentication.");if(n.error)return n;const s=R(n.data??{},"webauthn");return s.error?s:T({...s.data,credentialId:o.credentialId,prf:o})},getTotpStatus:()=>O(t("/totp/status",{method:"GET"}),"Failed to load authenticator status."),startTotpEnrollment:()=>O(t("/totp/enroll/start",{method:"POST"}),"Failed to start authenticator enrollment."),verifyTotpEnrollment:e=>O(t("/totp/enroll/verify",{method:"POST",body:JSON.stringify({code:e})}),"Failed to verify the authenticator code."),disableTotp:e=>O(t("/totp/disable",{method:"POST",body:JSON.stringify({code:e})}),"Failed to disable the authenticator."),verifyStepUpWithTotp:async e=>{const i=await O(t("/totp/verify-mfa",{method:"POST",body:JSON.stringify({code:e})}),"Failed to verify step-up authentication.");return i.error?i:R(i.data??{},"totp")},updateCredential:e=>O(t("users/credentials",{method:"POST",body:JSON.stringify(e)}),"Failed to update credential."),deleteCredential:e=>O(t("users/credentials",{method:"DELETE",body:JSON.stringify({id:e})}),"Failed to delete credential."),listOrganizations:()=>O(t("/organizations",{method:"GET"}),"Failed to list organizations."),createOrganization:e=>O(t("/organizations",{method:"POST",body:JSON.stringify(e)}),"Failed to create organization."),getOrganization:e=>O(t(`/organizations/${encodeURIComponent(e)}`,{method:"GET"}),"Failed to load organization."),updateOrganization:(e,i)=>O(t(`/organizations/${encodeURIComponent(e)}`,{method:"PATCH",body:JSON.stringify(i)}),"Failed to update organization."),switchOrganization:e=>O(t(`/organizations/${encodeURIComponent(e)}/switch`,{method:"POST"}),"Failed to switch organization."),listOrganizationMembers:e=>O(t(`/organizations/${encodeURIComponent(e)}/members`,{method:"GET"}),"Failed to list organization members."),addOrganizationMember:(e,i)=>O(t(`/organizations/${encodeURIComponent(e)}/members`,{method:"POST",body:JSON.stringify(i)}),"Failed to add organization member."),updateOrganizationMember:(e,i,o)=>O(t(`/organizations/${encodeURIComponent(e)}/members/${encodeURIComponent(i)}`,{method:"PATCH",body:JSON.stringify(o)}),"Failed to update organization member."),removeOrganizationMember:(e,i)=>O(t(`/organizations/${encodeURIComponent(e)}/members/${encodeURIComponent(i)}`,{method:"DELETE"}),"Failed to remove organization member.")}};function J(e,t){const i=e.trim(),o=t.trim();if(!i||!o)return!1;if(i===o)return!0;if(i.endsWith(":*")){const e=i.slice(0,-2);return o===e||o.startsWith(`${e}:`)}if(!o.includes(":"))return!1;if(!i.includes(":"))return o.startsWith(`${i}:`);const r=i.split(":"),n=o.split(":"),a=r[r.length-1],s=n[n.length-1],l=r.slice(0,-1),d=n.slice(0,-1);return"write"===a&&"read"===s&&l.length===d.length&&l.every((e,t)=>e===d[t])}function G(e,t){if(!Array.isArray(e))return!1;const i=e.filter(e=>"string"==typeof e);return(Array.isArray(t)?t:[t]).some(e=>i.some(t=>J(t,e)))}const j=u(void 0),W=()=>{const e=g(j);if(!e)throw new Error("useAuth must be used within an AuthProvider");return e},D=({children:t,apiHost:i,autoDetectPreviousSignin:o=!0})=>{const[r,n]=d(null),[a,s]=d([]),[l,u]=d([]),[g,p]=d(null),[f,h]=d(null),[y,b]=d(!1),[v,k]=d(!0),{hasSignedInBefore:w,markSignedIn:x}=function(e="seamlessauth_seen"){const[t,i]=d(!1);return c(()=>{try{"true"===localStorage.getItem(e)&&i(!0)}catch{}},[e]),{hasSignedInBefore:t,markSignedIn:()=>{try{localStorage.setItem(e,"true"),i(!0)}catch{}}}}(),P=_(()=>q({apiHost:i}),[i]),S=m(()=>{b(!1),n(null),s([]),u([]),p(null),h(null)},[]),N=m(async()=>{try{return await P.logout()}finally{S()}},[P,S]),O=m(async()=>{try{return await P.logoutAllSessions()}finally{S()}},[P,S]),T=m(async()=>{k(!0);const e=await P.getCurrentUser();return e.error?(await N(),k(!1),e):(n(e.data.user),s(e.data.credentials??[]),u(e.data.organizations??[]),p(e.data.activeOrganization??null),b(!0),k(!1),e)},[P,N]),C=m(async()=>{const e=await P.getStepUpStatus();return h(e.error?null:e.data),e},[P]),I=m(async()=>{const e=await P.verifyStepUpWithPasskey();return e.error||h(e.data),e},[P]),M=m(async e=>{const t=await P.verifyStepUpWithPasskeyPrf(e);return t.error||h({fresh:t.data.fresh,method:t.data.method,verifiedAt:t.data.verifiedAt,expiresAt:t.data.expiresAt,maxAgeSeconds:t.data.maxAgeSeconds}),t},[P]),A=m(async e=>{const t=await P.verifyStepUpWithTotp(e);return t.error||h(t.data),t},[P]);return c(()=>{T()},[T]),c(()=>{r&&y&&x()},[r,y,x]),e(j.Provider,{value:{user:r,logout:N,logoutAllSessions:O,refreshSession:T,loading:v,deleteUser:async()=>{const e=await P.deleteUser();return e.error||S(),e},isAuthenticated:y,hasRole:e=>r?.roles?.includes(e),hasScopedRole:e=>r?G(r.roles,e):void 0,apiHost:i,markSignedIn:x,hasSignedInBefore:!!o&&w,credentials:a,organizations:l,activeOrganization:g,switchOrganization:async e=>{const t=await P.switchOrganization(e);return t.error||await T(),t},listOAuthProviders:()=>P.listOAuthProviders(),startOAuthLogin:e=>P.startOAuthLogin(e),finishOAuthLogin:async e=>{const t=await P.finishOAuthLogin(e);return t.error||await T(),t},stepUpStatus:f,updateCredential:async e=>{const{data:t,error:i}=await P.updateCredential({friendlyName:e.friendlyName,id:e.id});if(i)return{data:null,error:i};const o=t.credential;return s(e=>e.map(e=>e.id===o.id?{...e,...o}:e)),{data:o,error:null}},deleteCredential:async e=>{const t=await P.deleteCredential(e);return t.error||s(t=>t.filter(t=>t.id!==e)),t},login:(e,t)=>P.login({identifier:e,passkeyAvailable:t}),handlePasskeyLogin:async()=>{const e=await P.loginWithPasskey();return e.error||await T(),e},refreshStepUpStatus:C,verifyStepUpWithPasskey:I,verifyStepUpWithPasskeyPrf:M,verifyStepUpWithTotp:A},children:t})},$=()=>{const{apiHost:e}=W();return _(()=>q({apiHost:e}),[e])},V=e=>{if("string"!=typeof e)return!1;const t=e.trim();if(t.length<3||t.length>320)return!1;const i=t.split("@");if(2!==i.length)return!1;const[o,r]=i;return!(!/^[A-Za-z0-9._%+-]+$/.test(o)||o.startsWith(".")||o.endsWith(".")||o.includes(".."))&&!(!/^[A-Za-z0-9.-]+\.[A-Za-z]{2,}$/.test(r)||r.startsWith("-")||r.endsWith("-")||r.startsWith(".")||r.endsWith(".")||r.includes(".."))},K=e=>{const t=x(e);return t?.isValid()||!1};async function H(){return async function(){if("undefined"==typeof window)return!1;if(window.PublicKeyCredential&&"function"==typeof window.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable)try{return await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable()}catch{return console.error("Error checking passkey support."),!1}return!1}()}const Y=()=>{const[e,t]=d(!1),[i,o]=d(!0);return c(()=>{let e=!0;return(async()=>{try{const i=await H();e&&t(i)}catch{e&&t(!1)}finally{e&&o(!1)}})(),()=>{e=!1}},[]),{passkeySupported:e,loading:i}},Q="/login",Z="/passkey-login",X="/verify-phone-otp",ee="/verify-email-otp",te="/verify-magiclink",ie="/oauth/callback",oe="/register-passkey",re="/magic-link-sent";function ne(e,t){void 0===t&&(t={});var i=t.insertAt;if(e&&"undefined"!=typeof document){var o=document.head||document.getElementsByTagName("head")[0],r=document.createElement("style");r.type="text/css","top"===i&&o.firstChild?o.insertBefore(r,o.firstChild):o.appendChild(r),r.styleSheet?r.styleSheet.cssText=e:r.appendChild(document.createTextNode(e))}}var ae="login-module__container___YggDx",se="login-module__card___Ub-Py",le="login-module__heading___neEqb",de="login-module__inputGroup___P6qgS",ce="login-module__label___mx5vu",ue="login-module__input___U07lW",_e="login-module__helperText___kDQ4-",me="login-module__error___40zxh",ge="login-module__button___0kFBs",pe="login-module__toggle___1JiG1",fe="login-module__fallbackCard___HdIk-",he="login-module__fallbackHeader___-il2v",ye="login-module__fallbackDescription___ea5EB",be="login-module__fallbackActions___AD3ni",ve="login-module__fallbackActionButton___lFgWf",ke="login-module__actionTitle___ycrMp",we="login-module__actionSubtext___opaIV",xe="login-module__linkButton___5lsoe";ne(".login-module__container___YggDx{align-items:center;color:#fff;display:flex;justify-content:center}.login-module__card___Ub-Py{background-color:#1f2937;border-radius:.5rem;box-shadow:0 4px 6px rgba(0,0,0,.1);max-width:28rem;padding:2rem;width:100%}.login-module__heading___neEqb{color:#fff;font-size:1.5rem;font-weight:700;margin-bottom:1.5rem;text-align:center}.login-module__message___qSejT{color:#68d391;text-align:center}.login-module__inputGroup___P6qgS{margin-bottom:1rem}.login-module__label___mx5vu{color:#d1d5db;display:block}.login-module__input___U07lW{background-color:#4b5563;border:1px solid #d1d5db;border-radius:.375rem;margin-top:.25rem;padding:.5rem;width:100%}.login-module__input___U07lW:focus{box-shadow:0 0 0 2px #3b82f6;outline:none}.login-module__helperText___kDQ4-{color:#9ca3af;font-size:.75rem;margin-top:.5rem}.login-module__error___40zxh{color:#f87171;font-size:.875rem}.login-module__button___0kFBs{background-color:#2563eb;border-radius:.375rem;color:#fff;cursor:pointer;margin-top:1rem;padding:.5rem;transition:background-color .3s;width:100%}.login-module__button___0kFBs:hover{background-color:#1d4ed8}.login-module__button___0kFBs:disabled{background-color:#9ca3af;cursor:not-allowed}.login-module__toggle___1JiG1{background:none;border:none;color:#60a5fa;cursor:pointer;font-size:.875rem;margin-top:1.5rem;text-align:center;width:100%}.login-module__underline___gs-RS{text-decoration:underline}.login-module__phoneRow___oeNtq{display:grid;gap:.5rem;grid-template-columns:1fr 3fr;margin-top:.25rem}.login-module__phoneInput___2MPQC,.login-module__select___rRV1O{background-color:#4b5563;border:1px solid #d1d5db;border-radius:.375rem;padding:.5rem;width:100%}@media (max-width:500px){.login-module__phoneRow___oeNtq{grid-template-columns:1fr}}.login-module__fallbackCard___HdIk-{background:hsla(0,0%,100%,.04);border:1px solid hsla(0,0%,100%,.08);border-radius:12px;display:flex;flex-direction:column;gap:14px;margin-top:18px;padding:18px}.login-module__fallbackHeader___-il2v{color:#f3f4f6;font-size:.95rem;font-weight:600}.login-module__fallbackDescription___ea5EB{color:#9ca3af;font-size:.85rem;line-height:1.4}.login-module__fallbackActions___AD3ni{display:flex;flex-direction:column;gap:10px}.login-module__fallbackActionButton___lFgWf{background:rgba(0,0,0,.25);border:1px solid hsla(0,0%,100%,.08);border-radius:8px;cursor:pointer;display:flex;flex-direction:column;padding:12px 14px;text-align:left;transition:all .15s ease}.login-module__fallbackActionButton___lFgWf:hover{background:hsla(0,0%,100%,.06);border-color:hsla(0,0%,100%,.15)}.login-module__actionTitle___ycrMp{color:#f9fafb;font-size:.9rem;font-weight:500}.login-module__actionSubtext___opaIV{color:#9ca3af;font-size:.75rem;margin-top:2px}.login-module__linkButton___5lsoe{background:none;border:none;color:#60a5fa;cursor:pointer;font-size:.8rem;margin-top:6px}.login-module__linkButton___5lsoe:hover{text-decoration:underline}");const Pe=({identifier:i,onMagicLink:o,onEmailOtp:r,onPhoneOtp:n,onPasskeyRetry:a,loginMethods:s})=>{const l=new Set(s??["passkey","magic_link","phone_otp"]),d=l.has("magic_link")&&V(i),c=l.has("email_otp")&&Boolean(r)&&V(i),u=l.has("phone_otp")&&K(i),_=l.has("passkey")&&Boolean(a);return d||c||u||_?t("div",{className:fe,children:[e("div",{className:he,children:"Choose a sign-in method"}),e("p",{className:ye,children:"Choose another secure sign-in method."}),t("div",{className:be,children:[d&&t("button",{type:"button",className:ve,onClick:o,children:[e("span",{className:ke,children:"Email Magic Link"}),e("span",{className:we,children:"Send a secure sign-in link to your email"})]}),c&&t("button",{type:"button",className:ve,onClick:r,children:[e("span",{className:ke,children:"Email Code"}),e("span",{className:we,children:"Receive a one-time code by email"})]}),u&&t("button",{type:"button",className:ve,onClick:n,children:[e("span",{className:ke,children:"Text Message Code"}),e("span",{className:we,children:"Receive a one-time code via SMS"})]})]}),_&&e("button",{type:"button",className:xe,onClick:a,children:"Try passkey anyway"})]}):null},Se="seamless:oauth:provider",Ne=()=>{const{listOAuthProviders:i,startOAuthLogin:o}=W(),r=f("/oauth/callback"),[n,a]=d([]),[s,l]=d("");if(c(()=>{let e=!0;return i().then(({data:t})=>{e&&a(t?.providers??[])}),()=>{e=!1}},[i]),0===n.length)return null;return t("div",{className:be,children:[n.map(i=>e("button",{type:"button",className:ve,onClick:()=>(async e=>{l(""),sessionStorage.setItem(Se,e);const{data:t,error:i}=await o({providerId:e,redirectUri:new URL(r,window.location.origin).toString()});i?l("Could not start sign-in with this provider."):window.location.assign(t.authorizationUrl)})(i.id),children:t("span",{className:ke,children:["Continue with ",i.name]})},i.id)),s&&e("p",{className:me,children:s})]})},Oe=["passkey","magic_link","phone_otp"],Te=()=>{const o=h(),{hasSignedInBefore:r,login:n,handlePasskeyLogin:a}=W(),s=$(),{passkeySupported:l}=Y(),[u,_]=d(""),[m,g]=d(""),[p,f]=d("register"),[y,b]=d(""),[v,k]=d(""),[w,x]=d(""),[P,S]=d(!1),[N,O]=d(Oe);c(()=>{r&&f("login")},[r]);return e("div",{className:ae,children:t("div",{className:se,children:[e("h2",{className:le,children:"login"===p?"Sign In":"Create Account"}),t(i,{children:[t("form",{onSubmit:async e=>{e.preventDefault(),b(""),S(!1);try{if("login"===p){const{data:e,error:t}=await n(u,l);if(t)return void b("Failed to start sign-in. Please try again.");const i=e?.loginMethods?.length?e.loginMethods:Oe;if(O(i),l&&i.includes("passkey")){const{error:e}=await a();return e?(S(!0),void b("Passkey sign-in could not be completed. Choose another sign-in method.")):void o("/")}return void S(!0)}"register"===p&&await(async()=>{b("");const{data:e,error:t}=await s.register({email:m});t?b("Failed to register. Please try again."):"Success"===e.message?o(ee):b("An unexpected error occurred. Try again. If the problem persists, contact support.")})()}catch{console.error("Failed to continue sign-in."),b("Failed to continue sign-in. Please try again.")}},children:["login"===p&&t("div",{className:de,children:[e("label",{htmlFor:"identifier",className:ce,children:"Email Address / Phone Number"}),e("input",{id:"identifier",type:"text",value:u,onChange:e=>{const t=e.target.value;_(t)},autoComplete:"off",placeholder:"Email or Phone Number",className:ue,onBlur:()=>{if(u){const e=V(u)||K(u);x(e?"":"Please enter a valid email or phone number")}},required:!0}),e("p",{className:_e,children:"Phone numbers must include a country code e.g. +1"}),P&&e(Pe,{identifier:u,onMagicLink:async()=>{const{error:e}=await s.requestMagicLink();e?b("Failed to send magic link."):o(re,{state:{identifier:u}})},onEmailOtp:async()=>{const{error:e}=await s.requestLoginEmailOtp();e?b("Failed to send email code."):o(ee,{state:{flow:"login"}})},onPhoneOtp:async()=>{const{error:e}=await s.requestLoginPhoneOtp();e?b("Failed to send OTP."):o(X,{state:{flow:"login"}})},onPasskeyRetry:l?a:void 0,loginMethods:N}),w&&e("p",{className:me,children:w})]}),"register"===p&&t("div",{className:de,children:[e("label",{htmlFor:"email",className:ce,children:"Email Address"}),e("input",{id:"email",type:"email",value:m,onChange:e=>{const t=e.target.value;g(t)},autoComplete:"off",className:ue,onBlur:()=>{if(m){const e=V(m);k(e?"":"Please enter a valid email")}},required:!0}),v&&e("p",{className:me,children:v})]}),e("button",{type:"submit",className:ge,disabled:!("login"===p&&u?V(u)||K(u):V(m)),children:"login"===p?"Login":"Register"}),y&&e("p",{className:me,children:y}),e("button",{type:"button",onClick:()=>f("login"===p?"register":"login"),className:pe,children:"login"===p?"Don't have an account? Create one":"Already have an account? Sign in"})]}),e(Ne,{})]})]})})};var Ce={container:"passKeyLogin-module__container___IUKxF",card:"passKeyLogin-module__card___2sKM1",title:"passKeyLogin-module__title___HZxvc",button:"passKeyLogin-module__button___FvR4I"};ne(".passKeyLogin-module__container___IUKxF{align-items:center;color:#fff;display:flex;justify-content:center;padding:1rem}.passKeyLogin-module__card___2sKM1{background-color:#1f2937;border-radius:1rem;box-shadow:0 4px 20px rgba(0,0,0,.4);display:flex;flex-direction:column;gap:1.5rem;max-width:400px;padding:2rem;width:100%}.passKeyLogin-module__title___HZxvc{color:#fff;font-size:1.5rem;font-weight:600;text-align:center}.passKeyLogin-module__button___FvR4I{background-color:#2563eb;border:1px solid #3b82f6;border-radius:.5rem;color:#fff;cursor:pointer;font-weight:500;padding:.75rem 1rem;text-align:center;transition:background-color .2s ease;width:100%}.passKeyLogin-module__button___FvR4I:hover{background-color:#1d4ed8}@media (max-width:480px){.passKeyLogin-module__card___2sKM1{padding:1.25rem}.passKeyLogin-module__button___FvR4I{font-size:1rem}}");const Ie=()=>{const i=h(),{handlePasskeyLogin:o}=W(),[r,n]=d("");return e("div",{className:Ce.container,children:t("div",{className:Ce.card,children:[e("h2",{className:Ce.title,children:"Login with Passkey"}),e("button",{onClick:async()=>{n("");const{error:e}=await o();e?n("Passkey sign-in could not be completed. Try another sign-in method."):i("/")},className:Ce.button,children:"Use Passkey"}),r&&e("p",{className:Ce.error,children:r})]})})};var Me="registerPasskey-module__container___jqEh8",Ae="registerPasskey-module__card___MJAyC",ze="registerPasskey-module__loading___Q4i1x",Ee="registerPasskey-module__spinner___V1nhd",Fe="registerPasskey-module__supported___ihTih",Le="registerPasskey-module__title___vn2Qu",Ue="registerPasskey-module__description___AWmO-",Re="registerPasskey-module__button___D3b4B",Be="registerPasskey-module__message___RiOw-",qe="registerPasskey-module__success___HP5aX",Je="registerPasskey-module__error___hGiqE";ne(".registerPasskey-module__container___jqEh8{align-items:center;color:#fff;display:flex;justify-content:center;padding:1rem}.registerPasskey-module__card___MJAyC{background-color:#1f2937;border-radius:1rem;box-shadow:0 4px 20px rgba(0,0,0,.4);max-width:400px;padding:1.5rem;width:100%}.registerPasskey-module__loading___Q4i1x{align-items:center;background-color:#f9fafb;border-radius:.75rem;box-shadow:0 2px 8px rgba(0,0,0,.1);color:#374151;display:flex;font-weight:500;gap:.75rem;justify-content:center;padding:1.5rem}.registerPasskey-module__spinner___V1nhd{animation:registerPasskey-module__spin___oYcsC 1s linear infinite;border-color:#3b82f6 transparent;border-radius:9999px;border-style:solid;border-width:2px;height:1.5rem;width:1.5rem}@keyframes registerPasskey-module__spin___oYcsC{to{transform:rotate(1turn)}}.registerPasskey-module__supported___ihTih{background-color:#ecfdf5;border-radius:.75rem;box-shadow:0 2px 12px rgba(0,0,0,.1);color:#065f46;padding:1.25rem}.registerPasskey-module__title___vn2Qu{font-size:1.125rem;font-weight:600;margin-bottom:.5rem}.registerPasskey-module__description___AWmO-{margin-bottom:1rem}.registerPasskey-module__button___D3b4B{background-color:#059669;border:none;border-radius:.5rem;color:#fff;cursor:pointer;font-weight:500;padding:.75rem 1rem;transition:background-color .2s ease;width:100%}.registerPasskey-module__button___D3b4B:hover{background-color:#047857}.registerPasskey-module__message___RiOw-{font-size:.875rem;margin-top:1rem}.registerPasskey-module__success___HP5aX{color:#6ee7b7}.registerPasskey-module__error___hGiqE{color:#f87171}");var Ge="deviceNameModal-module__overlay___fmdPd",je="deviceNameModal-module__modal___uoEda",We="deviceNameModal-module__description___-HMTA",De="deviceNameModal-module__input___4vQMI",$e="deviceNameModal-module__actions___KXw7b",Ve="deviceNameModal-module__primary___9Ozlk",Ke="deviceNameModal-module__secondary___HILhc";ne(".deviceNameModal-module__overlay___fmdPd{align-items:center;background:rgba(0,0,0,.45);display:flex;inset:0;justify-content:center;position:fixed;z-index:1000}.deviceNameModal-module__modal___uoEda{background:#1f2937;border-radius:12px;box-shadow:0 20px 40px rgba(0,0,0,.15);color:#fff;max-width:420px;padding:24px;width:100%}.deviceNameModal-module__description___-HMTA{color:#fff;font-size:14px;margin-bottom:16px}.deviceNameModal-module__input___4vQMI{border:1px solid #ddd;border-radius:8px;font-size:14px;margin-bottom:20px;padding:10px 12px;width:100%}.deviceNameModal-module__actions___KXw7b{display:flex;gap:10px;justify-content:flex-end}.deviceNameModal-module__primary___9Ozlk{background:#2563eb;border:none;border-radius:8px;color:#fff;cursor:pointer;padding:8px 14px}.deviceNameModal-module__secondary___HILhc{background:transparent;border:1px solid #ccc;border-radius:8px;cursor:pointer;padding:8px 14px}");const He=({isOpen:i,onCancel:o,onConfirm:r})=>{const[n,a]=d("");return i?e("div",{className:Ge,children:t("div",{className:je,children:[e("h3",{children:"Name This Device"}),e("p",{className:We,children:"Give this passkey a friendly name so you can recognize it later."}),e("input",{type:"text",placeholder:"e.g., MacBook Pro, iPhone, YubiKey",value:n,onChange:e=>a(e.target.value),className:De,autoFocus:!0}),t("div",{className:$e,children:[e("button",{onClick:o,className:Ke,children:"Cancel"}),e("button",{onClick:()=>r(n.trim()),disabled:!n.trim(),className:Ve,children:"Continue"})]})]})}):null},Ye=()=>{const{refreshSession:o}=W(),r=$(),{passkeySupported:n,loading:a}=Y(),s=h(),[l,c]=d("idle"),[u,_]=d(""),[m,g]=d(!1),[p,f]=d(null);return t(i,{children:[e("div",{className:Me,children:e("div",{className:Ae,children:t("div",a||!n?{className:ze,children:[e("div",{className:Ee}),e("span",{children:a?"Checking for Passkey Support...":"Passkeys are not supported on this device."})]}:{className:Fe,children:[e("h2",{className:Le,children:"Secure Your Account with a Passkey"}),e("p",{className:Ue,children:"Your device supports passkeys! Register one to skip passwords forever."}),e("button",{onClick:()=>{const{platform:e,browser:t,deviceInfo:i}=function(){const e=navigator.userAgent.toLowerCase();let t="unknown",i="unknown";return/iphone|ipad|ipod/.test(e)?t="ios":/android/.test(e)?t="android":/mac os/.test(e)?t="mac":/windows/.test(e)?t="windows":/linux/.test(e)&&(t="linux"),navigator.brave?i="brave":/edg\/|edgios/.test(e)?i="edge":/opr\/|opt\/|opera/.test(e)?i="opera":/vivaldi/.test(e)?i="vivaldi":/samsungbrowser/.test(e)?i="samsung":/firefox|fxios/.test(e)?i="firefox":/chrome|crios/.test(e)?i="chrome":/safari/.test(e)&&(i="safari"),{platform:t,browser:i,deviceInfo:`${t} • ${i}`}}();f({platform:e,browser:t,deviceInfo:i}),g(!0)},disabled:"loading"===l,className:Re,children:"loading"===l?"Registering...":"Register Passkey"}),u&&e("p",{className:`${Be} ${"success"===l?qe:Je}`,children:u})]})})}),e(He,{isOpen:m,onCancel:()=>{g(!1),f(null)},onConfirm:async e=>{if(!p)return;const t={friendlyName:e,...p};c("loading");try{const{error:e}=await r.registerPasskey(t);if(e)throw e;await o(),c("success"),_("Passkey registered successfully."),s("/")}catch{console.error("Passkey registration failed."),c("error"),_("Error registering passkey.")}finally{g(!1),f(null)}}})]})};var Qe="verifyOTP-module__container___wgoDE",Ze="verifyOTP-module__card___3cs2p",Xe="verifyOTP-module__title___fZ-1d",et="verifyOTP-module__subtitle___dGSu3",tt="verifyOTP-module__error___GEtlG",it="verifyOTP-module__success___46TjG",ot="verifyOTP-module__form___jiGG-",rt="verifyOTP-module__label___Zq5Mi",nt="verifyOTP-module__timer___smq-a",at="verifyOTP-module__resend___PlmkG",st="verifyOTP-module__button___8pIuO",lt="verifyOTP-module__toggle___wbzVa";ne(".verifyOTP-module__container___wgoDE{align-items:center;color:#fff;display:flex;justify-content:center;padding:1rem}.verifyOTP-module__card___3cs2p{background-color:#1f2937;border-radius:.5rem;box-shadow:0 0 10px rgba(0,0,0,.3);max-width:28rem;padding:1.5rem;width:100%}.verifyOTP-module__title___fZ-1d{color:#fff;font-size:1.5rem;font-weight:700;margin-bottom:1rem;text-align:center}.verifyOTP-module__subtitle___dGSu3{color:#9ca3af;font-size:.875rem;margin-bottom:1.5rem;text-align:center}.verifyOTP-module__error___GEtlG{color:#f87171;margin-bottom:1rem;text-align:center}.verifyOTP-module__success___46TjG{color:#34d399;margin-bottom:.75rem;text-align:center}.verifyOTP-module__form___jiGG-{display:flex;flex-direction:column;gap:1rem}.verifyOTP-module__label___Zq5Mi{color:#d1d5db;display:block;font-size:.875rem;margin-bottom:.25rem}.verifyOTP-module__timer___smq-a{color:#facc15;font-size:.875rem}.verifyOTP-module__input___yqIXM{background-color:#374151;border:1px solid #4b5563;border-radius:.375rem;color:#fff;outline:none;padding:.5rem;width:100%}.verifyOTP-module__input___yqIXM:focus{box-shadow:0 0 0 2px #3b82f6}.verifyOTP-module__resend___PlmkG{background:none;border:none;color:#60a5fa;cursor:pointer;font-size:.75rem;margin-top:.25rem;text-decoration:underline}.verifyOTP-module__resend___PlmkG:hover{color:#3b82f6}.verifyOTP-module__button___8pIuO{background-color:#2563eb;border:none;border-radius:.375rem;color:#fff;cursor:pointer;padding:.5rem;transition:background-color .2s;width:100%}.verifyOTP-module__button___8pIuO:hover{background-color:#1d4ed8}.verifyOTP-module__toggle___wbzVa{background:none;border:none;color:#60a5fa;cursor:pointer;font-size:.875rem;margin-top:1.5rem;text-align:center;width:100%}");var dt="otpInput-module__otpContainer___MUjby",ct="otpInput-module__otpInput___3YMVm";ne(".otpInput-module__otpContainer___MUjby{display:flex;gap:8px;justify-content:center;margin-top:8px}.otpInput-module__otpInput___3YMVm{background:#374151;border:1px solid #4b5563;border-radius:8px;color:#fff;font-size:1.2rem;height:48px;text-align:center;transition:border-color .15s ease,box-shadow .15s ease;width:42px}.otpInput-module__otpInput___3YMVm:focus{border-color:#60a5fa;box-shadow:0 0 0 2px rgba(96,165,250,.25);outline:none}");const ut=({length:t=6,value:i,inputMode:o="numeric",onChange:r,name:n="otp"})=>{const a=p([]),s=i.split("").concat(Array(t).fill("")).slice(0,t),l=(e,t)=>{var i;if(t.length>1)d(e,t);else if(!t||(i=t,"numeric"===o?/^\d$/.test(i):/^[a-zA-Z]$/.test(i))){const i=[...s];i[e]=t;const o=i.join("");r(o),t&&a.current[e+1]&&a.current[e+1]?.focus()}},d=(e,i)=>{let n=i;n="numeric"===o?i.replace(/\D/g,""):i.replace(/[^a-zA-Z]/g,"");const l=n.slice(0,t).split(""),d=[...s];l.forEach((i,o)=>{e+o<t&&(d[e+o]=i)}),r(d.join("")),a.current[Math.min(e+l.length,t-1)]?.focus()};return e("div",{className:dt,role:"group","aria-label":"One-time password input",onPaste:e=>{e.preventDefault(),d(0,e.clipboardData.getData("text"))},children:s.map((i,d)=>e("input",{ref:e=>a.current[d]=e,type:"text",inputMode:"numeric"===o?"numeric":"text",autoComplete:"one-time-code",name:`${n}-${d}`,maxLength:1,value:i,className:ct,onChange:e=>l(d,e.target.value),onKeyDown:e=>((e,i)=>{if("Backspace"===i.key){i.preventDefault();const t=[...s];s[e]?(t[e]="",r(t.join(""))):e>0&&(t[e-1]="",r(t.join("")),a.current[e-1]?.focus())}"ArrowLeft"===i.key&&e>0&&a.current[e-1]?.focus(),"ArrowRight"===i.key&&e<t-1&&a.current[e+1]?.focus()})(d,e),"aria-label":`Digit ${d+1}`},d))})},_t=()=>{const i=h(),o=y(),{refreshSession:r}=W(),n="login"===o.state?.flow,[a,s]=d(""),[l,u]=d(null),[_,m]=d(""),[g,p]=d(!1),[f,b]=d(""),[v,k]=d(300),w=$(),x=async()=>{if(p(!0),!l){const{error:e}=n?await w.verifyLoginPhoneOtp(a):await w.verifyPhoneOtp(a);if(e)m("Verification failed.");else{if(n)return await r(),void i("/");u(!0)}}p(!1)},P=async()=>{b(""),await(async()=>{m("");const{error:e}=n?await w.requestLoginPhoneOtp():await w.requestPhoneOtp();e?m("Failed to send SMS code. If this persists, refresh the page and try again."):b("Verification SMS has been resent.")})(),b("Verification SMS has been resent.")};return c(()=>{const e=setInterval(()=>{k(e=>e>0?e-1:0)},1e3);return()=>clearInterval(e)},[]),c(()=>{l&&!n&&(async()=>{const{error:e}=await w.requestEmailOtp();e?m("Failed to send Email code. If this persists, refresh the page and try registering again."):i(ee)})()},[l,n,i,w]),e("div",{className:Qe,children:t("div",{className:Ze,children:[e("h2",{className:Xe,children:"Verify Your Phone Number"}),e("p",{className:et,children:"Enter the code sent to your phone number."}),_&&e("p",{className:tt,children:_}),f&&e("p",{className:it,children:f}),t("form",{onSubmit:async e=>{if(e.preventDefault(),m(""),6===a.length){p(!0);try{await x()}catch{m("Unexpected error occurred.")}finally{p(!1)}}else m("Please enter a valid code.")},className:ot,children:[t("div",{children:[t("label",{htmlFor:"phoneCode",className:rt,children:["Phone Verification Code ",(N=l,!0===N?e("span",{className:"text-green-400 ml-2",children:"✅"}):!1===N?e("span",{className:"text-red-400 ml-2",children:"❌"}):null)," -"," ",t("span",{className:nt,children:["Code expires in: ",(S=v,`${Math.floor(S/60).toString().padStart(2,"0")}:${(S%60).toString().padStart(2,"0")}`)]})]}),e(ut,{length:6,value:a,onChange:s}),e("button",{type:"button",onClick:()=>P(),className:at,children:"Resend code to phone"})]}),e("button",{type:"submit",className:st,children:g?"Verifying...":"Verify & Continue"}),e("button",{type:"button",onClick:()=>i("/login"),className:lt,children:"Back to login"})]})]})});var S,N},mt=()=>{const i=h(),o=y(),{refreshSession:r}=W(),n=$(),{passkeySupported:a}=Y(),s="login"===o.state?.flow,[l,u]=d(!1),[_,m]=d(""),[g,p]=d(300),[f,b]=d(""),[v,k]=d("");return c(()=>{const e=setInterval(()=>{p(e=>e>0?e-1:0)},1e3);return()=>clearInterval(e)},[]),e("div",{className:Qe,children:t("div",{className:Ze,children:[e("h2",{className:Xe,children:"Verify Your Email"}),e("p",{className:et,children:"We sent you a verification email. Enter the code below."}),f&&e("p",{className:tt,children:f}),v&&e("p",{className:it,children:v}),t("form",{onSubmit:async e=>{if(e.preventDefault(),b(""),6===_.length){u(!0);try{const{error:e}=s?await n.verifyLoginEmailOtp(_):await n.verifyEmailOtp(_);if(e)return void b("Verification failed.");if(s)return await r(),void i("/");a?i(oe):(await r(),i("/"))}catch{console.error("Email OTP verification failed."),b("Verification failed.")}finally{u(!1)}}else b("Please enter a valid code.")},className:ot,children:[t("div",{children:[t("label",{htmlFor:"emailCode",className:rt,children:["Email Verification Code",t("span",{className:nt,children:[" ","— Code expires in ",(w=g,`${Math.floor(w/60).toString().padStart(2,"0")}:${(w%60).toString().padStart(2,"0")}`)]})]}),e(ut,{length:6,value:_,onChange:m,inputMode:"text"}),e("button",{type:"button",onClick:async()=>{b(""),k("");const{error:e}=s?await n.requestLoginEmailOtp():await n.requestEmailOtp();e?b("Failed to send Email code. If this persists, refresh the page and try again."):k("Verification email has been resent.")},className:at,children:"Resend code to email"})]}),e("button",{type:"submit",className:st,disabled:l,children:l?"Verifying...":"Verify & Continue"}),e("button",{type:"button",onClick:()=>i("/login"),className:lt,children:"Back to login"})]})]})});var w};var gt={container:"verifyMagiclink-module__container___qrSXf",card:"verifyMagiclink-module__card___niKgr",title:"verifyMagiclink-module__title___SumxD",verificationContent:"verifyMagiclink-module__verificationContent___NdsS0",spinner:"verifyMagiclink-module__spinner___lnW1k",successIcon:"verifyMagiclink-module__successIcon___XjFEM",checkIcon:"verifyMagiclink-module__checkIcon___I0JOP",successText:"verifyMagiclink-module__successText___lO5Qq"};ne(".verifyMagiclink-module__container___qrSXf{align-items:center;color:#fff;display:flex;justify-content:center;padding:1rem}.verifyMagiclink-module__card___niKgr{background-color:#1f2937;border-radius:.5rem;box-shadow:0 0 10px rgba(0,0,0,.3);max-width:28rem;padding:1.5rem;width:100%}.verifyMagiclink-module__title___SumxD{color:#fff;font-size:1.5rem;font-weight:700;margin-bottom:1rem;text-align:center}.verifyMagiclink-module__verificationContent___NdsS0{align-items:center;display:flex;flex-direction:column;gap:14px;margin:20px 0}.verifyMagiclink-module__spinner___lnW1k{animation:verifyMagiclink-module__spin___2lGzj .9s linear infinite;border:3px solid hsla(0,0%,100%,.15);border-radius:50%;border-top-color:#60a5fa;height:28px;width:28px}.verifyMagiclink-module__successIcon___XjFEM{align-items:center;background:rgba(16,185,129,.15);border-radius:50%;display:flex;height:36px;justify-content:center;width:36px}.verifyMagiclink-module__checkIcon___I0JOP{animation:verifyMagiclink-module__checkPop___-3qJu .25s ease-out;color:#34d399;height:22px;width:22px}.verifyMagiclink-module__successText___lO5Qq{color:#34d399;font-size:.9rem}@keyframes verifyMagiclink-module__checkPop___-3qJu{0%{opacity:0;transform:scale(.6)}80%{transform:scale(1.15)}to{opacity:1;transform:scale(1)}}@keyframes verifyMagiclink-module__spin___2lGzj{to{transform:rotate(1turn)}}");const pt=()=>{const[i]=b(),o=h(),r=i.get("token"),[n,a]=d(""),[s,l]=d(""),u=$(),{refreshSession:_}=W();return c(()=>{let e=!0,t=null,i=null;return(async()=>{if(!r)return e&&a("Missing token for verification."),void console.error("No magic-link token found.");const{error:n}=await u.verifyMagicLink(r);if(n)return console.error("Failed to verify token"),void(e&&a("Failed to verify token"));await _(),e&&(t=new BroadcastChannel("seamless-auth"),t.postMessage({type:"MAGIC_LINK_AUTH_SUCCESS"}),l("You have been verified on the device and browser that initiated this request"),i=setTimeout(()=>{e&&o("/")},900))})(),()=>{e=!1,t?.close(),i&&clearTimeout(i)}},[r,u,o,_]),e("div",{className:gt.container,children:t("div",{className:gt.card,children:[e("h1",{className:gt.title,children:"Verifying your login"}),t("div",{className:gt.verificationContent,children:[!s&&!n&&e("div",{className:gt.spinner}),s&&e("div",{className:gt.successIcon,children:e("svg",{viewBox:"0 0 24 24",className:gt.checkIcon,fill:"none",stroke:"currentColor",strokeWidth:"2",children:e("path",{d:"M5 13l4 4L19 7"})})}),!s&&!n&&e("p",{className:gt.helperText,children:"Please wait while we securely verify your sign-in link."}),s&&e("p",{className:gt.successText,children:"Login verified. Redirecting…"}),n&&e("p",{className:gt.error,children:n})]})]})})},ft=()=>{const{finishOAuthLogin:o}=W(),r=h(),[n]=b(),[a,s]=d(""),l=p(!1);return c(()=>{if(l.current)return;l.current=!0;const e=n.get("code"),t=n.get("state"),i=sessionStorage.getItem(Se);e&&t&&i?o({providerId:i,code:e,state:t}).then(({error:e})=>{e?s("We could not complete sign-in. Please try again."):(sessionStorage.removeItem(Se),r("/"))}):s("This sign-in link is missing required information.")},[o,r,n]),t("div",{className:gt.container,children:[e("h2",{className:gt.title,children:a?"Sign-in failed":"Completing sign-in..."}),a&&t(i,{children:[e("p",{children:a}),e("button",{type:"button",onClick:()=>r("/login"),children:"Back to login"})]})]})};var ht="magiclink-module__container___45zcA",yt="magiclink-module__card___Au9oN",bt="magiclink-module__iconWrapper___k5ndr",vt="magiclink-module__mailIcon___Pwb7q",kt="magiclink-module__iconRing___bdLvf",wt="magiclink-module__heading___b9cre",xt="magiclink-module__message___kiVFj",Pt="magiclink-module__identifier___JtcFM",St="magiclink-module__helperText___7Mlfh",Nt="magiclink-module__actions___64I-3",Ot="magiclink-module__secondaryButton___BntAI",Tt="magiclink-module__cooldown___Ib4rm",Ct="magiclink-module__linkButton___maJiv";ne(".magiclink-module__container___45zcA{align-items:center;color:#fff;display:flex;justify-content:center}.magiclink-module__card___Au9oN{background-color:#1f2937;border-radius:.75rem;box-shadow:0 10px 25px rgba(0,0,0,.25);max-width:420px;padding:2.5rem 2rem;text-align:center;width:100%}.magiclink-module__iconWrapper___k5ndr{display:flex;justify-content:center;margin-bottom:1.25rem;position:relative}.magiclink-module__mailIcon___Pwb7q{color:#a5b4fc;height:38px;width:38px;z-index:2}.magiclink-module__iconRing___bdLvf{animation:magiclink-module__pulse___YGm-I 2s infinite;background:rgba(99,102,241,.15);border-radius:50%;height:72px;position:absolute;width:72px}@keyframes magiclink-module__pulse___YGm-I{0%{opacity:.8;transform:scale(.6)}70%{opacity:0;transform:scale(1.4)}to{opacity:0}}.magiclink-module__heading___b9cre{font-size:1.55rem;font-weight:600;margin-bottom:.75rem}.magiclink-module__message___kiVFj{color:#d1d5db;font-size:.95rem;line-height:1.4;margin-bottom:1rem}.magiclink-module__identifier___JtcFM{background:hsla(0,0%,100%,.05);border-radius:6px;display:inline-block;font-size:1rem;font-weight:600;margin-bottom:1rem;padding:.45rem .6rem}.magiclink-module__helperText___7Mlfh{color:#9ca3af;font-size:.85rem;line-height:1.4;margin-bottom:.6rem}.magiclink-module__actions___64I-3{display:flex;flex-direction:column;gap:.6rem;margin-top:1.6rem}.magiclink-module__secondaryButton___BntAI{background:#111827;border:1px solid #374151;border-radius:8px;color:#fff;cursor:pointer;font-weight:500;padding:.65rem}.magiclink-module__secondaryButton___BntAI:hover:not(:disabled){background:#1f2937}.magiclink-module__secondaryButton___BntAI:disabled{cursor:not-allowed;opacity:.5}.magiclink-module__cooldown___Ib4rm{color:#9ca3af;font-size:.8rem}.magiclink-module__linkButton___maJiv{background:none;border:none;color:#a5b4fc;cursor:pointer;font-size:.85rem;margin-top:.4rem}.magiclink-module__linkButton___maJiv:hover{text-decoration:underline}");const It=()=>{const{refreshSession:i}=W(),o=h(),r=y(),n=$(),a=r.state?.identifier,[s,l]=d(30);c(()=>{const e=setInterval(()=>{l(e=>e>0?e-1:0)},1e3);return()=>clearInterval(e)},[]);const u=m(async()=>{const{data:e,error:t}=await n.checkMagicLink();return!t&&"Success"===e?.message},[n]);return c(()=>{const e=new BroadcastChannel("seamless-auth");return e.onmessage=async e=>{"MAGIC_LINK_AUTH_SUCCESS"===e.data?.type&&await u()&&(await i(),o("/"))},()=>{e.close()}},[u,o,i]),c(()=>{const e=setInterval(async()=>{try{await u()&&(await i(),o("/"))}catch{}},5e3);return()=>clearInterval(e)},[u,i,o]),e("div",{className:ht,children:t("div",{className:yt,children:[t("div",{className:bt,children:[e("div",{className:kt}),t("svg",{className:vt,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"1.8",children:[e("path",{d:"M4 6h16v12H4z"}),e("path",{d:"m4 6 8 6 8-6"})]})]}),e("h2",{className:wt,children:"Check your email"}),e("p",{className:xt,children:"If an account exists for this address, we sent a secure sign-in link."}),a&&e("div",{className:Pt,children:a}),e("p",{className:St,children:"Open the email and click the link to finish signing in."}),e("p",{className:St,children:"Didn’t receive anything? Check your spam folder or try creating a new account."}),t("div",{className:Nt,children:[e("button",{className:Ot,disabled:s>0,onClick:async()=>{s>0||(await n.requestMagicLink(),l(30))},children:"Resend link"}),s>0&&t("div",{className:Tt,children:["Available in ",s,"s"]}),e("button",{className:Ct,onClick:()=>o("/login"),children:"Change email or phone"})]})]})})},Mt=()=>t(v,{children:[e(k,{path:Q,element:e(Te,{})}),e(k,{path:Z,element:e(Ie,{})}),e(k,{path:X,element:e(_t,{})}),e(k,{path:ee,element:e(mt,{})}),e(k,{path:te,element:e(pt,{})}),e(k,{path:ie,element:e(ft,{})}),e(k,{path:oe,element:e(Ye,{})}),e(k,{path:re,element:e(It,{})}),e(k,{path:"*",element:e(w,{to:Q,replace:!0})})]});export{D as AuthProvider,Mt as AuthRoutes,P as SeamlessAuthError,q as createSeamlessAuthClient,M as encodePrfSalt,L as extractPasskeyPrfResult,G as hasScopedRole,E as isPasskeyPrfSupported,J as roleGrantsAccess,W as useAuth,$ as useAuthClient,Y as usePasskeySupport};
+import{jsx as e,jsxs as t,Fragment as i}from"react/jsx-runtime";import{browserSupportsWebAuthn as o,bufferToBase64URLString as n,base64URLStringToBuffer as r,startAuthentication as a,startRegistration as s,WebAuthnError as l}from"@simplewebauthn/browser";import{createContext as d,useMemo as c,useSyncExternalStore as u,useEffect as _,useContext as m,useState as g,useRef as p,useCallback as f}from"react";import{useHref as h,useNavigate as y,useLocation as b,useSearchParams as v,Routes as k,Route as w,Navigate as x}from"react-router-dom";import P from"libphonenumber-js";class S extends Error{constructor(e,t,i,o){super(e),this.name="SeamlessAuthError",this.status=t,this.body=i,this.cause=o}}const N={oauth_missing_email:!0,oauth_email_not_verified:!0,oauth_missing_subject:!0};function O(e){if("object"==typeof e&&null!==e)return e.code}function T(e){if(!(e instanceof S))return;if("object"!=typeof e.body||null===e.body)return;const t=O(e.body)??O(e.body.details);return"string"==typeof t&&Object.prototype.hasOwnProperty.call(N,t)?t:void 0}function C(e){if(!(e instanceof S)||("object"!=typeof(t=e.cause)||null===t||"string"!=typeof t.name))return;var t;const{name:i,code:o,message:n}=e.cause;return{name:i,code:"string"==typeof o?o:void 0,message:"string"==typeof n?n:""}}async function M(e,t){let i;try{i=await e.json()}catch{i=void 0}return new S(function(e){if("object"!=typeof e||null===e)return;const{error:t,message:i}=e;return"string"==typeof t&&t?t:"string"==typeof i&&i?i:void 0}(i)??t,e.status,i)}async function I(e){try{return await e.json()}catch{return}}async function A(e,t){let i;try{i=await e}catch{return{data:null,error:new S(t,0)}}return i.ok?{data:await I(i),error:null}:{data:null,error:await M(i,t)}}function z(e){return{data:e,error:null}}function E(e,t=0,i,o){return{data:null,error:new S(e,t,i,o)}}function F(e){if(e instanceof ArrayBuffer)return e;const t=new Uint8Array(e.buffer,e.byteOffset,e.byteLength),i=new Uint8Array(t.byteLength);return i.set(t),i.buffer}function U(e){return"string"==typeof e?e:n(F(e))}function L(e){return"string"==typeof e?r(e):e}function R(e){return{...e.credentialId?{credentialId:e.credentialId}:{},prf:{salt:U(e.salt),...e.secondSalt?{secondSalt:U(e.secondSalt)}:{}}}}async function B(){return!!o()&&("undefined"==typeof window||!1!==window.isSecureContext)&&void 0!==globalThis.PublicKeyCredential&&"undefined"!=typeof navigator&&"function"==typeof navigator.credentials?.get}function q(e){const t=e,i=t.extensions?.prf?.eval;return i?{...t,extensions:{...t.extensions,prf:{...t.extensions?.prf,eval:{...i,...i.first?{first:L(i.first)}:{},...i.second?{second:L(i.second)}:{}}}}}:e}function j(e){const t=e.clientExtensionResults,i=t?.prf?.results?.first;if(!i)return null;const o=(r=i)instanceof ArrayBuffer?new Uint8Array(r):new Uint8Array(r.buffer,r.byteOffset,r.byteLength);var r;return{credentialId:e.id,output:o,outputBase64url:n(F(o))}}function J(e){const t=e.clientExtensionResults;return t?.prf?.results?{...e,clientExtensionResults:{...e.clientExtensionResults,prf:{...t.prf,results:void 0}}}:e}function G(e,t){const i=e.method===t?e.method:null;return"Success"===e.message&&!0===e.fresh&&null!==i?z({fresh:!0,method:i,verifiedAt:e.verifiedAt??null,expiresAt:e.expiresAt??null,maxAgeSeconds:e.maxAgeSeconds??0}):E(e.message??"Step-up authentication failed.")}function D(e){return e?{method:"POST",body:JSON.stringify(R(e))}:{method:"POST"}}function W(e,t,i){const o=E(t,0,void 0,i),n=C(o.error);return console.error(e,n?.name??"Unknown error."),o}const $=e=>{const t=(e=>{const{authHost:t}=e;return async function(e,i){const o=`${t?.replace(/\/+$/,"")??""}/auth${e.startsWith("/")?e:`/${e}`}`,n=null!=i?.body,r={...i,credentials:"include",headers:{...n?{"Content-Type":"application/json"}:{},...i?.headers}};return fetch(o,r)}})({authHost:e.apiHost});return{getCurrentUser:()=>A(t("users/me",{method:"GET"}),"Failed to load the current user."),login:e=>A(t("/login",{method:"POST",body:JSON.stringify(e)}),"Failed to start sign-in."),loginWithPasskey:async e=>{const i=await A(t("/webAuthn/login/start",{...D(e?.prf)}),"Failed to start passkey login.");if(i.error)return i;let o,n;try{const e=await a({optionsJSON:q(i.data)});o=j(e),n=J(e)}catch(e){return W("Passkey login error.","Passkey login failed.",e)}const r=await A(t("/webAuthn/login/finish",{method:"POST",body:JSON.stringify({assertionResponse:n})}),"Failed to verify passkey.");return r.error?r:"Success"!==r.data?.message?E(r.data?.message??"Passkey login failed."):z(o?{prf:o}:{})},logout:(e={})=>A(t("all_sessions"===e.scope?"/logout/all":"/logout",{method:"DELETE"}),"Failed to sign out."),logoutAllSessions:()=>A(t("/logout/all",{method:"DELETE"}),"Failed to sign out of all sessions."),deleteUser:()=>A(t("/users/delete",{method:"DELETE"}),"Failed to delete the account."),register:e=>A(t("/registration/register",{method:"POST",body:JSON.stringify({email:e.email,...e.phone?{phone:e.phone}:{}})}),"Failed to register."),requestPhoneOtp:()=>A(t("/otp/generate-phone-otp",{method:"POST",body:JSON.stringify({})}),"Failed to send the SMS code."),verifyPhoneOtp:e=>A(t("/otp/verify-phone-otp",{method:"POST",body:JSON.stringify({verificationToken:e})}),"Failed to verify the SMS code."),requestLoginPhoneOtp:()=>A(t("/otp/generate-login-phone-otp",{method:"POST",body:JSON.stringify({})}),"Failed to send the SMS code."),verifyLoginPhoneOtp:e=>A(t("/otp/verify-login-phone-otp",{method:"POST",body:JSON.stringify({verificationToken:e})}),"Failed to verify the SMS code."),requestEmailOtp:()=>A(t("/otp/generate-email-otp",{method:"POST",body:JSON.stringify({})}),"Failed to send the email code."),verifyEmailOtp:e=>A(t("/otp/verify-email-otp",{method:"POST",body:JSON.stringify({verificationToken:e})}),"Failed to verify the email code."),requestLoginEmailOtp:()=>A(t("/otp/generate-login-email-otp",{method:"POST",body:JSON.stringify({})}),"Failed to send the email code."),verifyLoginEmailOtp:e=>A(t("/otp/verify-login-email-otp",{method:"POST",body:JSON.stringify({verificationToken:e})}),"Failed to verify the email code."),requestMagicLink:()=>A(t("/magic-link",{method:"POST",body:JSON.stringify({})}),"Failed to send the magic link."),checkMagicLink:()=>A(t("/magic-link/check",{method:"GET"}),"Failed to check the magic link."),verifyMagicLink:e=>A(t(`/magic-link/verify/${encodeURIComponent(e)}`,{method:"GET"}),"Failed to verify the magic link."),listOAuthProviders:()=>A(t("/oauth/providers",{method:"GET"}),"Failed to list OAuth providers."),getPublicSystemConfig:()=>A(t("/system-config/public",{method:"GET"}),"Failed to read the public system configuration."),startOAuthLogin:e=>A(t(`/oauth/${encodeURIComponent(e.providerId)}/start`,{method:"POST",body:JSON.stringify({...e.redirectUri?{redirectUri:e.redirectUri}:{},...e.returnTo?{returnTo:e.returnTo}:{}})}),"Failed to start OAuth login."),finishOAuthLogin:e=>A(t(`/oauth/${encodeURIComponent(e.providerId)}/callback`,{method:"POST",body:JSON.stringify({code:e.code,state:e.state})}),"Failed to finish OAuth login."),registerPasskey:async e=>{const i=function(e){return"metadata"in e?e:{metadata:e}}(e),o=await A(t(function(e){const t=new URLSearchParams;e.requirePrf?t.set("requirePrf","true"):e.requestPrf&&t.set("requestPrf","true");const i=t.toString();return"/webAuthn/register/start"+(i?`?${i}`:"")}(i),{method:"GET"}),"Failed to fetch passkey registration challenge.");if(o.error)return o;let n;try{n=await s({optionsJSON:o.data})}catch(e){return e instanceof l?E(e.name,0,void 0,e):W("Passkey registration error.","Passkey registration failed.",e)}const r=function(e){const t=e.clientExtensionResults;return!0===t?.prf?.enabled}(n),a=await A(t("/webAuthn/register/finish",{method:"POST",body:JSON.stringify({attestationResponse:n,metadata:{...i.metadata,prfCapable:r}})}),"Verification failed.");return a.error?a:z({credentialId:n.id,prfCapable:r})},isPasskeyPrfSupported:B,getStepUpStatus:()=>A(t("/step-up/status",{method:"GET"}),"Failed to load step-up status."),verifyStepUpWithPasskey:async()=>{const e=await A(t("/step-up/webauthn/start",{method:"POST"}),"Failed to start step-up authentication.");if(e.error)return e;let i;try{i=J(await a({optionsJSON:q(e.data)}))}catch(e){return W("Step-up authentication error.","Step-up authentication failed.",e)}const o=await A(t("/step-up/webauthn/finish",{method:"POST",body:JSON.stringify({assertionResponse:i})}),"Failed to verify step-up authentication.");return o.error?o:G(o.data??{},"webauthn")},verifyStepUpWithPasskeyPrf:async e=>{const i=await A(t("/step-up/webauthn/start",{...D(e)}),"Failed to start step-up authentication.");if(i.error)return i;let o,n;try{const e=await a({optionsJSON:q(i.data)});o=j(e),n=J(e)}catch(e){return W("Step-up authentication error.","Step-up authentication failed.",e)}if(!o)return E("Passkey did not return PRF output.");const r=await A(t("/step-up/webauthn/finish",{method:"POST",body:JSON.stringify({assertionResponse:n})}),"Failed to verify step-up authentication.");if(r.error)return r;const s=G(r.data??{},"webauthn");return s.error?s:z({...s.data,credentialId:o.credentialId,prf:o})},getTotpStatus:()=>A(t("/totp/status",{method:"GET"}),"Failed to load authenticator status."),startTotpEnrollment:()=>A(t("/totp/enroll/start",{method:"POST"}),"Failed to start authenticator enrollment."),verifyTotpEnrollment:e=>A(t("/totp/enroll/verify",{method:"POST",body:JSON.stringify({code:e})}),"Failed to verify the authenticator code."),disableTotp:e=>A(t("/totp/disable",{method:"POST",body:JSON.stringify({code:e})}),"Failed to disable the authenticator."),verifyStepUpWithTotp:async e=>{const i=await A(t("/totp/verify-mfa",{method:"POST",body:JSON.stringify({code:e})}),"Failed to verify step-up authentication.");return i.error?i:G(i.data??{},"totp")},updateCredential:e=>A(t("users/credentials",{method:"POST",body:JSON.stringify(e)}),"Failed to update credential."),deleteCredential:e=>A(t("users/credentials",{method:"DELETE",body:JSON.stringify({id:e})}),"Failed to delete credential."),listOrganizations:()=>A(t("/organizations",{method:"GET"}),"Failed to list organizations."),createOrganization:e=>A(t("/organizations",{method:"POST",body:JSON.stringify(e)}),"Failed to create organization."),getOrganization:e=>A(t(`/organizations/${encodeURIComponent(e)}`,{method:"GET"}),"Failed to load organization."),updateOrganization:(e,i)=>A(t(`/organizations/${encodeURIComponent(e)}`,{method:"PATCH",body:JSON.stringify(i)}),"Failed to update organization."),switchOrganization:e=>A(t(`/organizations/${encodeURIComponent(e)}/switch`,{method:"POST"}),"Failed to switch organization."),listOrganizationMembers:e=>A(t(`/organizations/${encodeURIComponent(e)}/members`,{method:"GET"}),"Failed to list organization members."),addOrganizationMember:(e,i)=>A(t(`/organizations/${encodeURIComponent(e)}/members`,{method:"POST",body:JSON.stringify(i)}),"Failed to add organization member."),updateOrganizationMember:(e,i,o)=>A(t(`/organizations/${encodeURIComponent(e)}/members/${encodeURIComponent(i)}`,{method:"PATCH",body:JSON.stringify(o)}),"Failed to update organization member."),removeOrganizationMember:(e,i)=>A(t(`/organizations/${encodeURIComponent(e)}/members/${encodeURIComponent(i)}`,{method:"DELETE"}),"Failed to remove organization member.")}};function V(e,t){const i=e.trim(),o=t.trim();if(!i||!o)return!1;if(i===o)return!0;if(i.endsWith(":*")){const e=i.slice(0,-2);return o===e||o.startsWith(`${e}:`)}if(!o.includes(":"))return!1;if(!i.includes(":"))return o.startsWith(`${i}:`);const n=i.split(":"),r=o.split(":"),a=n[n.length-1],s=r[r.length-1],l=n.slice(0,-1),d=r.slice(0,-1);return"write"===a&&"read"===s&&l.length===d.length&&l.every((e,t)=>e===d[t])}function K(e,t){if(!Array.isArray(e))return!1;const i=e.filter(e=>"string"==typeof e);return(Array.isArray(t)?t:[t]).some(e=>i.some(t=>V(t,e)))}function H(){return"undefined"==typeof localStorage?function(){const e=new Map;return{get:t=>e.get(t)??null,set:(t,i)=>{e.set(t,i)}}}():{get:e=>{try{return localStorage.getItem(e)}catch{return null}},set:(e,t)=>{try{localStorage.setItem(e,t)}catch{}}}}const Y="seamlessauth_seen",Q={user:null,credentials:[],organizations:[],activeOrganization:null,stepUpStatus:null,isAuthenticated:!1};const Z=d(void 0),X=()=>{const e=m(Z);if(!e)throw new Error("useAuth must be used within an AuthProvider");return e},ee=({children:t,apiHost:i,autoDetectPreviousSignin:o=!0})=>{const n=c(()=>function(e){const{apiHost:t,detectPreviousSignIn:i=!0}=e,o=$({apiHost:t}),n=e.storage??H(),r=new Set;let a=!1,s=0,l={...Q,loading:!0,hasSignedInBefore:i&&"true"===n.get(Y)};function d(e){const t={...l,...e};Object.keys(e).some(e=>l[e]!==t[e])&&(l=t,r.forEach(e=>e()))}function c(){n.set(Y,"true"),i&&d({hasSignedInBefore:!0})}function u(){d(Q)}async function _(){const e=++s;d({loading:!0});const t=await o.getCurrentUser();return a||e!==s?t:t.error?(u(),d({loading:!1}),t):(d({user:t.data.user,credentials:t.data.credentials??[],organizations:t.data.organizations??[],activeOrganization:t.data.activeOrganization??null,isAuthenticated:!0,loading:!1}),l.hasSignedInBefore||c(),t)}async function m(e){const t=await e();return t.error||await _(),t}return{getState:()=>l,subscribe:e=>(r.add(e),()=>{r.delete(e)}),actions:{login:(e,t)=>o.login({identifier:e,passkeyAvailable:t}),handlePasskeyLogin:()=>m(()=>o.loginWithPasskey()),refreshSession:_,logout:async function(){try{return await o.logout()}finally{u()}},logoutAllSessions:async function(){try{return await o.logoutAllSessions()}finally{u()}},deleteUser:async()=>{const e=await o.deleteUser();return e.error||u(),e},updateCredential:async e=>{const{data:t,error:i}=await o.updateCredential({friendlyName:e.friendlyName??null,id:e.id});if(i)return{data:null,error:i};const n=t.credential;return d({credentials:l.credentials.map(e=>e.id===n.id?{...e,...n}:e)}),{data:n,error:null}},deleteCredential:async e=>{const t=await o.deleteCredential(e);return t.error||d({credentials:l.credentials.filter(t=>t.id!==e)}),t},switchOrganization:e=>m(()=>o.switchOrganization(e)),listOAuthProviders:()=>o.listOAuthProviders(),startOAuthLogin:e=>o.startOAuthLogin(e),finishOAuthLogin:e=>m(()=>o.finishOAuthLogin(e)),refreshStepUpStatus:async()=>{const e=await o.getStepUpStatus();return d({stepUpStatus:e.error?null:e.data}),e},verifyStepUpWithPasskey:async()=>{const e=await o.verifyStepUpWithPasskey();return e.error||d({stepUpStatus:e.data}),e},verifyStepUpWithPasskeyPrf:async e=>{const t=await o.verifyStepUpWithPasskeyPrf(e);return t.error||d({stepUpStatus:{fresh:t.data.fresh,method:t.data.method,verifiedAt:t.data.verifiedAt,expiresAt:t.data.expiresAt,maxAgeSeconds:t.data.maxAgeSeconds}}),t},verifyStepUpWithTotp:async e=>{const t=await o.verifyStepUpWithTotp(e);return t.error||d({stepUpStatus:t.data}),t},hasRole:e=>l.user?.roles?.includes(e),hasScopedRole:e=>l.user?K(l.user.roles,e):void 0,markSignedIn:c},destroy:()=>{a=!0,r.clear()}}}({apiHost:i,detectPreviousSignIn:o}),[i,o]),r=u(n.subscribe,n.getState,n.getState);_(()=>{n.actions.refreshSession()},[n]);const a=c(()=>({...r,...n.actions,apiHost:i}),[r,n,i]);return e(Z.Provider,{value:a,children:t})},te=()=>{const{apiHost:e}=X();return c(()=>$({apiHost:e}),[e])},ie=["passkey","magic_link"],oe=()=>{const e=te(),[t,i]=g(null),[o,n]=g(!0);return _(()=>{let t=!0;return(async()=>{try{const{data:o,error:n}=await e.getPublicSystemConfig();t&&!n&&o?.loginMethods?.length&&i(o.loginMethods)}catch{}finally{t&&n(!1)}})(),()=>{t=!1}},[e]),{loginMethods:t,loading:o}},ne=e=>Boolean(e?.some(e=>"passkey"!==e)),re=e=>{if("string"!=typeof e)return!1;const t=e.trim();if(t.length<3||t.length>320)return!1;const i=t.split("@");if(2!==i.length)return!1;const[o,n]=i;return!(!/^[A-Za-z0-9._%+-]+$/.test(o)||o.startsWith(".")||o.endsWith(".")||o.includes(".."))&&!(!/^[A-Za-z0-9.-]+\.[A-Za-z]{2,}$/.test(n)||n.startsWith("-")||n.endsWith("-")||n.startsWith(".")||n.endsWith(".")||n.includes(".."))},ae=e=>{const t=P(e);return t?.isValid()||!1};async function se(){return async function(){if("undefined"==typeof window)return!1;if(window.PublicKeyCredential&&"function"==typeof window.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable)try{return await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable()}catch{return console.error("Error checking passkey support."),!1}return!1}()}const le=()=>{const[e,t]=g(!1),[i,o]=g(!0);return _(()=>{let e=!0;return(async()=>{try{const i=await se();e&&t(i)}catch{e&&t(!1)}finally{e&&o(!1)}})(),()=>{e=!1}},[]),{passkeySupported:e,loading:i}},de="/login",ce="/passkey-login",ue="/verify-phone-otp",_e="/verify-email-otp",me="/verify-magiclink",ge="/oauth/callback",pe="/register-passkey",fe="/magic-link-sent";function he(e,t){void 0===t&&(t={});var i=t.insertAt;if(e&&"undefined"!=typeof document){var o=document.head||document.getElementsByTagName("head")[0],n=document.createElement("style");n.type="text/css","top"===i&&o.firstChild?o.insertBefore(n,o.firstChild):o.appendChild(n),n.styleSheet?n.styleSheet.cssText=e:n.appendChild(document.createTextNode(e))}}var ye="login-module__container___YggDx",be="login-module__card___Ub-Py",ve="login-module__heading___neEqb",ke="login-module__inputGroup___P6qgS",we="login-module__label___mx5vu",xe="login-module__input___U07lW",Pe="login-module__helperText___kDQ4-",Se="login-module__error___40zxh",Ne="login-module__button___0kFBs",Oe="login-module__toggle___1JiG1",Te="login-module__fallbackCard___HdIk-",Ce="login-module__fallbackHeader___-il2v",Me="login-module__fallbackDescription___ea5EB",Ie="login-module__fallbackActions___AD3ni",Ae="login-module__fallbackActionButton___lFgWf",ze="login-module__actionTitle___ycrMp",Ee="login-module__actionSubtext___opaIV",Fe="login-module__linkButton___5lsoe";he(".login-module__container___YggDx{align-items:center;color:#fff;display:flex;justify-content:center}.login-module__card___Ub-Py{background-color:#1f2937;border-radius:.5rem;box-shadow:0 4px 6px rgba(0,0,0,.1);max-width:28rem;padding:2rem;width:100%}.login-module__heading___neEqb{color:#fff;font-size:1.5rem;font-weight:700;margin-bottom:1.5rem;text-align:center}.login-module__message___qSejT{color:#68d391;text-align:center}.login-module__inputGroup___P6qgS{margin-bottom:1rem}.login-module__label___mx5vu{color:#d1d5db;display:block}.login-module__input___U07lW{background-color:#4b5563;border:1px solid #d1d5db;border-radius:.375rem;margin-top:.25rem;padding:.5rem;width:100%}.login-module__input___U07lW:focus{box-shadow:0 0 0 2px #3b82f6;outline:none}.login-module__helperText___kDQ4-{color:#9ca3af;font-size:.75rem;margin-top:.5rem}.login-module__error___40zxh{color:#f87171;font-size:.875rem}.login-module__button___0kFBs{background-color:#2563eb;border-radius:.375rem;color:#fff;cursor:pointer;margin-top:1rem;padding:.5rem;transition:background-color .3s;width:100%}.login-module__button___0kFBs:hover{background-color:#1d4ed8}.login-module__button___0kFBs:disabled{background-color:#9ca3af;cursor:not-allowed}.login-module__toggle___1JiG1{background:none;border:none;color:#60a5fa;cursor:pointer;font-size:.875rem;margin-top:1.5rem;text-align:center;width:100%}.login-module__underline___gs-RS{text-decoration:underline}.login-module__phoneRow___oeNtq{display:grid;gap:.5rem;grid-template-columns:1fr 3fr;margin-top:.25rem}.login-module__phoneInput___2MPQC,.login-module__select___rRV1O{background-color:#4b5563;border:1px solid #d1d5db;border-radius:.375rem;padding:.5rem;width:100%}@media (max-width:500px){.login-module__phoneRow___oeNtq{grid-template-columns:1fr}}.login-module__fallbackCard___HdIk-{background:hsla(0,0%,100%,.04);border:1px solid hsla(0,0%,100%,.08);border-radius:12px;display:flex;flex-direction:column;gap:14px;margin-top:18px;padding:18px}.login-module__fallbackHeader___-il2v{color:#f3f4f6;font-size:.95rem;font-weight:600}.login-module__fallbackDescription___ea5EB{color:#9ca3af;font-size:.85rem;line-height:1.4}.login-module__fallbackActions___AD3ni{display:flex;flex-direction:column;gap:10px}.login-module__fallbackActionButton___lFgWf{background:rgba(0,0,0,.25);border:1px solid hsla(0,0%,100%,.08);border-radius:8px;cursor:pointer;display:flex;flex-direction:column;padding:12px 14px;text-align:left;transition:all .15s ease}.login-module__fallbackActionButton___lFgWf:hover{background:hsla(0,0%,100%,.06);border-color:hsla(0,0%,100%,.15)}.login-module__actionTitle___ycrMp{color:#f9fafb;font-size:.9rem;font-weight:500}.login-module__actionSubtext___opaIV{color:#9ca3af;font-size:.75rem;margin-top:2px}.login-module__linkButton___5lsoe{background:none;border:none;color:#60a5fa;cursor:pointer;font-size:.8rem;margin-top:6px}.login-module__linkButton___5lsoe:hover{text-decoration:underline}");const Ue=({identifier:i,onMagicLink:o,onEmailOtp:n,onPhoneOtp:r,onPasskeyRetry:a,loginMethods:s})=>{const l=new Set(s??["passkey","magic_link","phone_otp"]),d=l.has("magic_link")&&re(i),c=l.has("email_otp")&&Boolean(n)&&re(i),u=l.has("phone_otp")&&ae(i),_=l.has("passkey")&&Boolean(a);return d||c||u||_?t("div",{className:Te,children:[e("div",{className:Ce,children:"Choose a sign-in method"}),e("p",{className:Me,children:"Choose another secure sign-in method."}),t("div",{className:Ie,children:[d&&t("button",{type:"button",className:Ae,onClick:o,children:[e("span",{className:ze,children:"Email Magic Link"}),e("span",{className:Ee,children:"Send a secure sign-in link to your email"})]}),c&&t("button",{type:"button",className:Ae,onClick:n,children:[e("span",{className:ze,children:"Email Code"}),e("span",{className:Ee,children:"Receive a one-time code by email"})]}),u&&t("button",{type:"button",className:Ae,onClick:r,children:[e("span",{className:ze,children:"Text Message Code"}),e("span",{className:Ee,children:"Receive a one-time code via SMS"})]})]}),_&&e("button",{type:"button",className:Fe,onClick:a,children:"Try passkey anyway"})]}):null},Le="seamless:oauth:provider",Re=()=>{const{listOAuthProviders:i,startOAuthLogin:o}=X(),n=h("/oauth/callback"),[r,a]=g([]),[s,l]=g("");if(_(()=>{let e=!0;return i().then(({data:t})=>{e&&a(t?.providers??[])}),()=>{e=!1}},[i]),0===r.length)return null;return t("div",{className:Ie,children:[r.map(i=>e("button",{type:"button",className:Ae,onClick:()=>(async e=>{l(""),sessionStorage.setItem(Le,e);const{data:t,error:i}=await o({providerId:e,redirectUri:new URL(n,window.location.origin).toString()});i?l("Could not start sign-in with this provider."):window.location.assign(t.authorizationUrl)})(i.id),children:t("span",{className:ze,children:["Continue with ",i.name]})},i.id)),s&&e("p",{className:Se,children:s})]})},Be=()=>{const o=y(),{hasSignedInBefore:n,login:r,handlePasskeyLogin:a}=X(),s=te(),{passkeySupported:l}=le(),{loginMethods:d}=oe(),[c,u]=g(""),[m,p]=g(""),[f,h]=g("register"),[b,v]=g(""),[k,w]=g(""),[x,P]=g(""),[S,N]=g(!1),[O,T]=g(null);_(()=>{n&&h("login")},[n]);return e("div",{className:ye,children:t("div",{className:be,children:[e("h2",{className:ve,children:"login"===f?"Sign In":"Create Account"}),t(i,{children:[t("form",{onSubmit:async e=>{e.preventDefault(),v(""),N(!1);try{if("login"===f){const{data:e,error:t}=await r(c,l);if(t)return void v("Failed to start sign-in. Please try again.");const i=e?.loginMethods?.length?e.loginMethods:d??ie;if(T(i),l&&i.includes("passkey")){const{error:e}=await a();return e?(N(!0),void v("Passkey sign-in could not be completed. Choose another sign-in method.")):void o("/")}return void N(!0)}"register"===f&&await(async()=>{v("");const{data:e,error:t}=await s.register({email:m});t?v("Failed to register. Please try again."):"Success"===e.message?o(_e):v("An unexpected error occurred. Try again. If the problem persists, contact support.")})()}catch{console.error("Failed to continue sign-in."),v("Failed to continue sign-in. Please try again.")}},children:["login"===f&&t("div",{className:ke,children:[e("label",{htmlFor:"identifier",className:we,children:"Email Address / Phone Number"}),e("input",{id:"identifier",type:"text",value:c,onChange:e=>{const t=e.target.value;u(t)},autoComplete:"off",placeholder:"Email or Phone Number",className:xe,onBlur:()=>{if(c){const e=re(c)||ae(c);P(e?"":"Please enter a valid email or phone number")}},required:!0}),e("p",{className:Pe,children:"Phone numbers must include a country code e.g. +1"}),S&&e(Ue,{identifier:c,onMagicLink:async()=>{const{error:e}=await s.requestMagicLink();e?v("Failed to send magic link."):o(fe,{state:{identifier:c}})},onEmailOtp:async()=>{const{error:e}=await s.requestLoginEmailOtp();e?v("Failed to send email code."):o(_e,{state:{flow:"login"}})},onPhoneOtp:async()=>{const{error:e}=await s.requestLoginPhoneOtp();e?v("Failed to send OTP."):o(ue,{state:{flow:"login"}})},onPasskeyRetry:l?a:void 0,loginMethods:O}),x&&e("p",{className:Se,children:x})]}),"register"===f&&t("div",{className:ke,children:[e("label",{htmlFor:"email",className:we,children:"Email Address"}),e("input",{id:"email",type:"email",value:m,onChange:e=>{const t=e.target.value;p(t)},autoComplete:"off",className:xe,onBlur:()=>{if(m){const e=re(m);w(e?"":"Please enter a valid email")}},required:!0}),k&&e("p",{className:Se,children:k})]}),e("button",{type:"submit",className:Ne,disabled:!("login"===f&&c?re(c)||ae(c):re(m)),children:"login"===f?"Login":"Register"}),b&&e("p",{className:Se,children:b}),e("button",{type:"button",onClick:()=>h("login"===f?"register":"login"),className:Oe,children:"login"===f?"Don't have an account? Create one":"Already have an account? Sign in"})]}),e(Re,{})]})]})})};var qe={container:"passKeyLogin-module__container___IUKxF",card:"passKeyLogin-module__card___2sKM1",title:"passKeyLogin-module__title___HZxvc",button:"passKeyLogin-module__button___FvR4I"};he(".passKeyLogin-module__container___IUKxF{align-items:center;color:#fff;display:flex;justify-content:center;padding:1rem}.passKeyLogin-module__card___2sKM1{background-color:#1f2937;border-radius:1rem;box-shadow:0 4px 20px rgba(0,0,0,.4);display:flex;flex-direction:column;gap:1.5rem;max-width:400px;padding:2rem;width:100%}.passKeyLogin-module__title___HZxvc{color:#fff;font-size:1.5rem;font-weight:600;text-align:center}.passKeyLogin-module__button___FvR4I{background-color:#2563eb;border:1px solid #3b82f6;border-radius:.5rem;color:#fff;cursor:pointer;font-weight:500;padding:.75rem 1rem;text-align:center;transition:background-color .2s ease;width:100%}.passKeyLogin-module__button___FvR4I:hover{background-color:#1d4ed8}@media (max-width:480px){.passKeyLogin-module__card___2sKM1{padding:1.25rem}.passKeyLogin-module__button___FvR4I{font-size:1rem}}");const je=()=>{const i=y(),{handlePasskeyLogin:o}=X(),[n,r]=g("");return e("div",{className:qe.container,children:t("div",{className:qe.card,children:[e("h2",{className:qe.title,children:"Login with Passkey"}),e("button",{onClick:async()=>{r("");const{error:e}=await o();e?r("Passkey sign-in could not be completed. Try another sign-in method."):i("/")},className:qe.button,children:"Use Passkey"}),n&&e("p",{className:qe.error,children:n})]})})};var Je="registerPasskey-module__container___jqEh8",Ge="registerPasskey-module__card___MJAyC",De="registerPasskey-module__loading___Q4i1x",We="registerPasskey-module__spinner___V1nhd",$e="registerPasskey-module__supported___ihTih",Ve="registerPasskey-module__title___vn2Qu",Ke="registerPasskey-module__description___AWmO-",He="registerPasskey-module__button___D3b4B",Ye="registerPasskey-module__message___RiOw-",Qe="registerPasskey-module__success___HP5aX",Ze="registerPasskey-module__error___hGiqE",Xe="registerPasskey-module__skip___1hDyU";he(".registerPasskey-module__container___jqEh8{align-items:center;color:#fff;display:flex;justify-content:center;padding:1rem}.registerPasskey-module__card___MJAyC{background-color:#1f2937;border-radius:1rem;box-shadow:0 4px 20px rgba(0,0,0,.4);max-width:400px;padding:1.5rem;width:100%}.registerPasskey-module__loading___Q4i1x{align-items:center;background-color:#f9fafb;border-radius:.75rem;box-shadow:0 2px 8px rgba(0,0,0,.1);color:#374151;display:flex;font-weight:500;gap:.75rem;justify-content:center;padding:1.5rem}.registerPasskey-module__spinner___V1nhd{animation:registerPasskey-module__spin___oYcsC 1s linear infinite;border-color:#3b82f6 transparent;border-radius:9999px;border-style:solid;border-width:2px;height:1.5rem;width:1.5rem}@keyframes registerPasskey-module__spin___oYcsC{to{transform:rotate(1turn)}}.registerPasskey-module__supported___ihTih{background-color:#ecfdf5;border-radius:.75rem;box-shadow:0 2px 12px rgba(0,0,0,.1);color:#065f46;padding:1.25rem}.registerPasskey-module__title___vn2Qu{font-size:1.125rem;font-weight:600;margin-bottom:.5rem}.registerPasskey-module__description___AWmO-{margin-bottom:1rem}.registerPasskey-module__button___D3b4B{background-color:#059669;border:none;border-radius:.5rem;color:#fff;cursor:pointer;font-weight:500;padding:.75rem 1rem;transition:background-color .2s ease;width:100%}.registerPasskey-module__button___D3b4B:hover{background-color:#047857}.registerPasskey-module__message___RiOw-{font-size:.875rem;margin-top:1rem}.registerPasskey-module__success___HP5aX{color:#6ee7b7}.registerPasskey-module__error___hGiqE{color:#f87171}.registerPasskey-module__skip___1hDyU{background:none;border:none;color:#60a5fa;cursor:pointer;font-size:.875rem;margin-top:1.5rem;text-align:center;width:100%}.registerPasskey-module__skip___1hDyU:disabled{cursor:default;opacity:.6}");var et="deviceNameModal-module__overlay___fmdPd",tt="deviceNameModal-module__modal___uoEda",it="deviceNameModal-module__description___-HMTA",ot="deviceNameModal-module__input___4vQMI",nt="deviceNameModal-module__actions___KXw7b",rt="deviceNameModal-module__primary___9Ozlk",at="deviceNameModal-module__secondary___HILhc";he(".deviceNameModal-module__overlay___fmdPd{align-items:center;background:rgba(0,0,0,.45);display:flex;inset:0;justify-content:center;position:fixed;z-index:1000}.deviceNameModal-module__modal___uoEda{background:#1f2937;border-radius:12px;box-shadow:0 20px 40px rgba(0,0,0,.15);color:#fff;max-width:420px;padding:24px;width:100%}.deviceNameModal-module__description___-HMTA{color:#fff;font-size:14px;margin-bottom:16px}.deviceNameModal-module__input___4vQMI{border:1px solid #ddd;border-radius:8px;font-size:14px;margin-bottom:20px;padding:10px 12px;width:100%}.deviceNameModal-module__actions___KXw7b{display:flex;gap:10px;justify-content:flex-end}.deviceNameModal-module__primary___9Ozlk{background:#2563eb;border:none;border-radius:8px;color:#fff;cursor:pointer;padding:8px 14px}.deviceNameModal-module__secondary___HILhc{background:transparent;border:1px solid #ccc;border-radius:8px;cursor:pointer;padding:8px 14px}");const st=({isOpen:i,onCancel:o,onConfirm:n})=>{const[r,a]=g("");return i?e("div",{className:et,children:t("div",{className:tt,children:[e("h3",{children:"Name This Device"}),e("p",{className:it,children:"Give this passkey a friendly name so you can recognize it later."}),e("input",{type:"text",placeholder:"e.g., MacBook Pro, iPhone, YubiKey",value:r,onChange:e=>a(e.target.value),className:ot,autoFocus:!0}),t("div",{className:nt,children:[e("button",{onClick:o,className:at,children:"Cancel"}),e("button",{onClick:()=>n(r.trim()),disabled:!r.trim(),className:rt,children:"Continue"})]})]})}):null},lt=()=>{const{refreshSession:o}=X(),n=te(),{passkeySupported:r,loading:a}=le(),{loginMethods:s,loading:l}=oe(),d=y(),[c,u]=g("idle"),[_,m]=g(""),[p,f]=g(!1),[h,b]=g(null),v=ne(s),k=async()=>{await o(),d("/")};return t(i,{children:[e("div",{className:Je,children:e("div",{className:Ge,children:t("div",a||l?{className:De,children:[e("div",{className:We}),e("span",{children:"Checking for Passkey Support..."})]}:r?{className:$e,children:[e("h2",{className:Ve,children:"Secure Your Account with a Passkey"}),e("p",{className:Ke,children:"Your device supports passkeys! Register one to skip passwords forever."}),e("button",{onClick:()=>{const{platform:e,browser:t,deviceInfo:i}=function(){const e=navigator.userAgent.toLowerCase();let t="unknown",i="unknown";return/iphone|ipad|ipod/.test(e)?t="ios":/android/.test(e)?t="android":/mac os/.test(e)?t="mac":/windows/.test(e)?t="windows":/linux/.test(e)&&(t="linux"),navigator.brave?i="brave":/edg\/|edgios/.test(e)?i="edge":/opr\/|opt\/|opera/.test(e)?i="opera":/vivaldi/.test(e)?i="vivaldi":/samsungbrowser/.test(e)?i="samsung":/firefox|fxios/.test(e)?i="firefox":/chrome|crios/.test(e)?i="chrome":/safari/.test(e)&&(i="safari"),{platform:t,browser:i,deviceInfo:`${t} • ${i}`}}();b({platform:e,browser:t,deviceInfo:i}),f(!0)},disabled:"loading"===c,className:He,children:"loading"===c?"Registering...":"Register Passkey"}),_&&e("p",{className:`${Ye} ${"success"===c?Qe:Ze}`,children:_}),v&&e("button",{type:"button",onClick:k,disabled:"loading"===c,className:Xe,children:"Skip for now"})]}:{className:$e,children:[e("h2",{className:Ve,children:"Passkeys are not available here"}),e("p",{className:Ke,children:v?"This device does not support passkeys. You can continue without one and add a passkey later from a device that does.":"This device does not support passkeys, and this application requires one to sign in. Try again from a device or browser that supports them."}),v&&e("button",{type:"button",onClick:k,className:He,children:"Continue"})]})})}),e(st,{isOpen:p,onCancel:()=>{f(!1),b(null)},onConfirm:async e=>{if(!h)return;const t={friendlyName:e,...h};u("loading");try{const{error:e}=await n.registerPasskey(t);if(e)throw e;await o(),u("success"),m("Passkey registered successfully."),d("/")}catch{console.error("Passkey registration failed."),u("error"),m("Error registering passkey.")}finally{f(!1),b(null)}}})]})};var dt="verifyOTP-module__container___wgoDE",ct="verifyOTP-module__card___3cs2p",ut="verifyOTP-module__title___fZ-1d",_t="verifyOTP-module__subtitle___dGSu3",mt="verifyOTP-module__error___GEtlG",gt="verifyOTP-module__success___46TjG",pt="verifyOTP-module__form___jiGG-",ft="verifyOTP-module__label___Zq5Mi",ht="verifyOTP-module__timer___smq-a",yt="verifyOTP-module__resend___PlmkG",bt="verifyOTP-module__button___8pIuO",vt="verifyOTP-module__toggle___wbzVa";he(".verifyOTP-module__container___wgoDE{align-items:center;color:#fff;display:flex;justify-content:center;padding:1rem}.verifyOTP-module__card___3cs2p{background-color:#1f2937;border-radius:.5rem;box-shadow:0 0 10px rgba(0,0,0,.3);max-width:28rem;padding:1.5rem;width:100%}.verifyOTP-module__title___fZ-1d{color:#fff;font-size:1.5rem;font-weight:700;margin-bottom:1rem;text-align:center}.verifyOTP-module__subtitle___dGSu3{color:#9ca3af;font-size:.875rem;margin-bottom:1.5rem;text-align:center}.verifyOTP-module__error___GEtlG{color:#f87171;margin-bottom:1rem;text-align:center}.verifyOTP-module__success___46TjG{color:#34d399;margin-bottom:.75rem;text-align:center}.verifyOTP-module__form___jiGG-{display:flex;flex-direction:column;gap:1rem}.verifyOTP-module__label___Zq5Mi{color:#d1d5db;display:block;font-size:.875rem;margin-bottom:.25rem}.verifyOTP-module__timer___smq-a{color:#facc15;font-size:.875rem}.verifyOTP-module__input___yqIXM{background-color:#374151;border:1px solid #4b5563;border-radius:.375rem;color:#fff;outline:none;padding:.5rem;width:100%}.verifyOTP-module__input___yqIXM:focus{box-shadow:0 0 0 2px #3b82f6}.verifyOTP-module__resend___PlmkG{background:none;border:none;color:#60a5fa;cursor:pointer;font-size:.75rem;margin-top:.25rem;text-decoration:underline}.verifyOTP-module__resend___PlmkG:hover{color:#3b82f6}.verifyOTP-module__button___8pIuO{background-color:#2563eb;border:none;border-radius:.375rem;color:#fff;cursor:pointer;padding:.5rem;transition:background-color .2s;width:100%}.verifyOTP-module__button___8pIuO:hover{background-color:#1d4ed8}.verifyOTP-module__toggle___wbzVa{background:none;border:none;color:#60a5fa;cursor:pointer;font-size:.875rem;margin-top:1.5rem;text-align:center;width:100%}");var kt="otpInput-module__otpContainer___MUjby",wt="otpInput-module__otpInput___3YMVm";he(".otpInput-module__otpContainer___MUjby{display:flex;gap:8px;justify-content:center;margin-top:8px}.otpInput-module__otpInput___3YMVm{background:#374151;border:1px solid #4b5563;border-radius:8px;color:#fff;font-size:1.2rem;height:48px;text-align:center;transition:border-color .15s ease,box-shadow .15s ease;width:42px}.otpInput-module__otpInput___3YMVm:focus{border-color:#60a5fa;box-shadow:0 0 0 2px rgba(96,165,250,.25);outline:none}");const xt=({length:t=6,value:i,inputMode:o="numeric",onChange:n,name:r="otp"})=>{const a=p([]),s=i.split("").concat(Array(t).fill("")).slice(0,t),l=(e,t)=>{var i;if(t.length>1)d(e,t);else if(!t||(i=t,"numeric"===o?/^\d$/.test(i):/^[a-zA-Z]$/.test(i))){const i=[...s];i[e]=t;const o=i.join("");n(o),t&&a.current[e+1]&&a.current[e+1]?.focus()}},d=(e,i)=>{let r=i;r="numeric"===o?i.replace(/\D/g,""):i.replace(/[^a-zA-Z]/g,"");const l=r.slice(0,t).split(""),d=[...s];l.forEach((i,o)=>{e+o<t&&(d[e+o]=i)}),n(d.join("")),a.current[Math.min(e+l.length,t-1)]?.focus()};return e("div",{className:kt,role:"group","aria-label":"One-time password input",onPaste:e=>{e.preventDefault(),d(0,e.clipboardData.getData("text"))},children:s.map((i,d)=>e("input",{ref:e=>a.current[d]=e,type:"text",inputMode:"numeric"===o?"numeric":"text",autoComplete:"one-time-code",name:`${r}-${d}`,maxLength:1,value:i,className:wt,onChange:e=>l(d,e.target.value),onKeyDown:e=>((e,i)=>{if("Backspace"===i.key){i.preventDefault();const t=[...s];s[e]?(t[e]="",n(t.join(""))):e>0&&(t[e-1]="",n(t.join("")),a.current[e-1]?.focus())}"ArrowLeft"===i.key&&e>0&&a.current[e-1]?.focus(),"ArrowRight"===i.key&&e<t-1&&a.current[e+1]?.focus()})(d,e),"aria-label":`Digit ${d+1}`},d))})},Pt=()=>{const i=y(),o=b(),{refreshSession:n}=X(),r="login"===o.state?.flow,[a,s]=g(""),[l,d]=g(null),[c,u]=g(""),[m,p]=g(!1),[f,h]=g(""),[v,k]=g(300),w=te(),x=async()=>{if(p(!0),!l){const{error:e}=r?await w.verifyLoginPhoneOtp(a):await w.verifyPhoneOtp(a);if(e)u("Verification failed.");else{if(r)return await n(),void i("/");d(!0)}}p(!1)},P=async()=>{h(""),await(async()=>{u("");const{error:e}=r?await w.requestLoginPhoneOtp():await w.requestPhoneOtp();e?u("Failed to send SMS code. If this persists, refresh the page and try again."):h("Verification SMS has been resent.")})(),h("Verification SMS has been resent.")};return _(()=>{const e=setInterval(()=>{k(e=>e>0?e-1:0)},1e3);return()=>clearInterval(e)},[]),_(()=>{l&&!r&&(async()=>{const{error:e}=await w.requestEmailOtp();e?u("Failed to send Email code. If this persists, refresh the page and try registering again."):i(_e)})()},[l,r,i,w]),e("div",{className:dt,children:t("div",{className:ct,children:[e("h2",{className:ut,children:"Verify Your Phone Number"}),e("p",{className:_t,children:"Enter the code sent to your phone number."}),c&&e("p",{className:mt,children:c}),f&&e("p",{className:gt,children:f}),t("form",{onSubmit:async e=>{if(e.preventDefault(),u(""),6===a.length){p(!0);try{await x()}catch{u("Unexpected error occurred.")}finally{p(!1)}}else u("Please enter a valid code.")},className:pt,children:[t("div",{children:[t("label",{htmlFor:"phoneCode",className:ft,children:["Phone Verification Code ",(N=l,!0===N?e("span",{className:"text-green-400 ml-2",children:"✅"}):!1===N?e("span",{className:"text-red-400 ml-2",children:"❌"}):null)," -"," ",t("span",{className:ht,children:["Code expires in: ",(S=v,`${Math.floor(S/60).toString().padStart(2,"0")}:${(S%60).toString().padStart(2,"0")}`)]})]}),e(xt,{length:6,value:a,onChange:s}),e("button",{type:"button",onClick:()=>P(),className:yt,children:"Resend code to phone"})]}),e("button",{type:"submit",className:bt,children:m?"Verifying...":"Verify & Continue"}),e("button",{type:"button",onClick:()=>i("/login"),className:vt,children:"Back to login"})]})]})});var S,N},St=()=>{const i=y(),o=b(),{refreshSession:n}=X(),r=te(),{passkeySupported:a}=le(),s="login"===o.state?.flow,[l,d]=g(!1),[c,u]=g(""),[m,p]=g(300),[f,h]=g(""),[v,k]=g("");return _(()=>{const e=setInterval(()=>{p(e=>e>0?e-1:0)},1e3);return()=>clearInterval(e)},[]),e("div",{className:dt,children:t("div",{className:ct,children:[e("h2",{className:ut,children:"Verify Your Email"}),e("p",{className:_t,children:"We sent you a verification email. Enter the code below."}),f&&e("p",{className:mt,children:f}),v&&e("p",{className:gt,children:v}),t("form",{onSubmit:async e=>{if(e.preventDefault(),h(""),6===c.length){d(!0);try{const{error:e}=s?await r.verifyLoginEmailOtp(c):await r.verifyEmailOtp(c);if(e)return void h("Verification failed.");if(s)return await n(),void i("/");a?i(pe):(await n(),i("/"))}catch{console.error("Email OTP verification failed."),h("Verification failed.")}finally{d(!1)}}else h("Please enter a valid code.")},className:pt,children:[t("div",{children:[t("label",{htmlFor:"emailCode",className:ft,children:["Email Verification Code",t("span",{className:ht,children:[" ","— Code expires in ",(w=m,`${Math.floor(w/60).toString().padStart(2,"0")}:${(w%60).toString().padStart(2,"0")}`)]})]}),e(xt,{length:6,value:c,onChange:u,inputMode:"text"}),e("button",{type:"button",onClick:async()=>{h(""),k("");const{error:e}=s?await r.requestLoginEmailOtp():await r.requestEmailOtp();e?h("Failed to send Email code. If this persists, refresh the page and try again."):k("Verification email has been resent.")},className:yt,children:"Resend code to email"})]}),e("button",{type:"submit",className:bt,disabled:l,children:l?"Verifying...":"Verify & Continue"}),e("button",{type:"button",onClick:()=>i("/login"),className:vt,children:"Back to login"})]})]})});var w};var Nt={container:"verifyMagiclink-module__container___qrSXf",card:"verifyMagiclink-module__card___niKgr",title:"verifyMagiclink-module__title___SumxD",verificationContent:"verifyMagiclink-module__verificationContent___NdsS0",spinner:"verifyMagiclink-module__spinner___lnW1k",successIcon:"verifyMagiclink-module__successIcon___XjFEM",checkIcon:"verifyMagiclink-module__checkIcon___I0JOP",successText:"verifyMagiclink-module__successText___lO5Qq"};he(".verifyMagiclink-module__container___qrSXf{align-items:center;color:#fff;display:flex;justify-content:center;padding:1rem}.verifyMagiclink-module__card___niKgr{background-color:#1f2937;border-radius:.5rem;box-shadow:0 0 10px rgba(0,0,0,.3);max-width:28rem;padding:1.5rem;width:100%}.verifyMagiclink-module__title___SumxD{color:#fff;font-size:1.5rem;font-weight:700;margin-bottom:1rem;text-align:center}.verifyMagiclink-module__verificationContent___NdsS0{align-items:center;display:flex;flex-direction:column;gap:14px;margin:20px 0}.verifyMagiclink-module__spinner___lnW1k{animation:verifyMagiclink-module__spin___2lGzj .9s linear infinite;border:3px solid hsla(0,0%,100%,.15);border-radius:50%;border-top-color:#60a5fa;height:28px;width:28px}.verifyMagiclink-module__successIcon___XjFEM{align-items:center;background:rgba(16,185,129,.15);border-radius:50%;display:flex;height:36px;justify-content:center;width:36px}.verifyMagiclink-module__checkIcon___I0JOP{animation:verifyMagiclink-module__checkPop___-3qJu .25s ease-out;color:#34d399;height:22px;width:22px}.verifyMagiclink-module__successText___lO5Qq{color:#34d399;font-size:.9rem}@keyframes verifyMagiclink-module__checkPop___-3qJu{0%{opacity:0;transform:scale(.6)}80%{transform:scale(1.15)}to{opacity:1;transform:scale(1)}}@keyframes verifyMagiclink-module__spin___2lGzj{to{transform:rotate(1turn)}}");const Ot=()=>{const[i]=v(),o=y(),n=i.get("token"),[r,a]=g(""),[s,l]=g(""),d=te(),{refreshSession:c}=X();return _(()=>{let e=!0,t=null,i=null;return(async()=>{if(!n)return e&&a("Missing token for verification."),void console.error("No magic-link token found.");const{error:r}=await d.verifyMagicLink(n);if(r)return console.error("Failed to verify token"),void(e&&a("Failed to verify token"));await c(),e&&(t=new BroadcastChannel("seamless-auth"),t.postMessage({type:"MAGIC_LINK_AUTH_SUCCESS"}),l("You have been verified on the device and browser that initiated this request"),i=setTimeout(()=>{e&&o("/")},900))})(),()=>{e=!1,t?.close(),i&&clearTimeout(i)}},[n,d,o,c]),e("div",{className:Nt.container,children:t("div",{className:Nt.card,children:[e("h1",{className:Nt.title,children:"Verifying your login"}),t("div",{className:Nt.verificationContent,children:[!s&&!r&&e("div",{className:Nt.spinner}),s&&e("div",{className:Nt.successIcon,children:e("svg",{viewBox:"0 0 24 24",className:Nt.checkIcon,fill:"none",stroke:"currentColor",strokeWidth:"2",children:e("path",{d:"M5 13l4 4L19 7"})})}),!s&&!r&&e("p",{className:Nt.helperText,children:"Please wait while we securely verify your sign-in link."}),s&&e("p",{className:Nt.successText,children:"Login verified. Redirecting…"}),r&&e("p",{className:Nt.error,children:r})]})]})})},Tt={oauth_missing_email:"Your provider account did not share an email address. Add an email to that account and make it visible, then try again.",oauth_email_not_verified:"The email address on your provider account is not verified. Verify it with your provider, then try again.",oauth_missing_subject:"Your provider did not return a usable account identifier. Try again, or sign in with a different method."},Ct=()=>{const{finishOAuthLogin:o}=X(),n=y(),[r]=v(),[a,s]=g(""),l=p(!1);return _(()=>{if(l.current)return;l.current=!0;const e=r.get("code"),t=r.get("state"),i=sessionStorage.getItem(Le);e&&t&&i?o({providerId:i,code:e,state:t}).then(({error:e})=>{if(e){const t=T(e);return void s(t?Tt[t]:"We could not complete sign-in. Please try again.")}sessionStorage.removeItem(Le),n("/")}):s("This sign-in link is missing required information.")},[o,n,r]),t("div",{className:Nt.container,children:[e("h2",{className:Nt.title,children:a?"Sign-in failed":"Completing sign-in..."}),a&&t(i,{children:[e("p",{children:a}),e("button",{type:"button",onClick:()=>n("/login"),children:"Back to login"})]})]})};var Mt="magiclink-module__container___45zcA",It="magiclink-module__card___Au9oN",At="magiclink-module__iconWrapper___k5ndr",zt="magiclink-module__mailIcon___Pwb7q",Et="magiclink-module__iconRing___bdLvf",Ft="magiclink-module__heading___b9cre",Ut="magiclink-module__message___kiVFj",Lt="magiclink-module__identifier___JtcFM",Rt="magiclink-module__helperText___7Mlfh",Bt="magiclink-module__actions___64I-3",qt="magiclink-module__secondaryButton___BntAI",jt="magiclink-module__cooldown___Ib4rm",Jt="magiclink-module__linkButton___maJiv";he(".magiclink-module__container___45zcA{align-items:center;color:#fff;display:flex;justify-content:center}.magiclink-module__card___Au9oN{background-color:#1f2937;border-radius:.75rem;box-shadow:0 10px 25px rgba(0,0,0,.25);max-width:420px;padding:2.5rem 2rem;text-align:center;width:100%}.magiclink-module__iconWrapper___k5ndr{display:flex;justify-content:center;margin-bottom:1.25rem;position:relative}.magiclink-module__mailIcon___Pwb7q{color:#a5b4fc;height:38px;width:38px;z-index:2}.magiclink-module__iconRing___bdLvf{animation:magiclink-module__pulse___YGm-I 2s infinite;background:rgba(99,102,241,.15);border-radius:50%;height:72px;position:absolute;width:72px}@keyframes magiclink-module__pulse___YGm-I{0%{opacity:.8;transform:scale(.6)}70%{opacity:0;transform:scale(1.4)}to{opacity:0}}.magiclink-module__heading___b9cre{font-size:1.55rem;font-weight:600;margin-bottom:.75rem}.magiclink-module__message___kiVFj{color:#d1d5db;font-size:.95rem;line-height:1.4;margin-bottom:1rem}.magiclink-module__identifier___JtcFM{background:hsla(0,0%,100%,.05);border-radius:6px;display:inline-block;font-size:1rem;font-weight:600;margin-bottom:1rem;padding:.45rem .6rem}.magiclink-module__helperText___7Mlfh{color:#9ca3af;font-size:.85rem;line-height:1.4;margin-bottom:.6rem}.magiclink-module__actions___64I-3{display:flex;flex-direction:column;gap:.6rem;margin-top:1.6rem}.magiclink-module__secondaryButton___BntAI{background:#111827;border:1px solid #374151;border-radius:8px;color:#fff;cursor:pointer;font-weight:500;padding:.65rem}.magiclink-module__secondaryButton___BntAI:hover:not(:disabled){background:#1f2937}.magiclink-module__secondaryButton___BntAI:disabled{cursor:not-allowed;opacity:.5}.magiclink-module__cooldown___Ib4rm{color:#9ca3af;font-size:.8rem}.magiclink-module__linkButton___maJiv{background:none;border:none;color:#a5b4fc;cursor:pointer;font-size:.85rem;margin-top:.4rem}.magiclink-module__linkButton___maJiv:hover{text-decoration:underline}");const Gt=()=>{const{refreshSession:i}=X(),o=y(),n=b(),r=te(),a=n.state?.identifier,[s,l]=g(30);_(()=>{const e=setInterval(()=>{l(e=>e>0?e-1:0)},1e3);return()=>clearInterval(e)},[]);const d=f(async()=>{const{data:e,error:t}=await r.checkMagicLink();return!t&&"Success"===e?.message},[r]);return _(()=>{const e=new BroadcastChannel("seamless-auth");return e.onmessage=async e=>{"MAGIC_LINK_AUTH_SUCCESS"===e.data?.type&&await d()&&(await i(),o("/"))},()=>{e.close()}},[d,o,i]),_(()=>{const e=setInterval(async()=>{try{await d()&&(await i(),o("/"))}catch{}},5e3);return()=>clearInterval(e)},[d,i,o]),e("div",{className:Mt,children:t("div",{className:It,children:[t("div",{className:At,children:[e("div",{className:Et}),t("svg",{className:zt,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"1.8",children:[e("path",{d:"M4 6h16v12H4z"}),e("path",{d:"m4 6 8 6 8-6"})]})]}),e("h2",{className:Ft,children:"Check your email"}),e("p",{className:Ut,children:"If an account exists for this address, we sent a secure sign-in link."}),a&&e("div",{className:Lt,children:a}),e("p",{className:Rt,children:"Open the email and click the link to finish signing in."}),e("p",{className:Rt,children:"Didn’t receive anything? Check your spam folder or try creating a new account."}),t("div",{className:Bt,children:[e("button",{className:qt,disabled:s>0,onClick:async()=>{s>0||(await r.requestMagicLink(),l(30))},children:"Resend link"}),s>0&&t("div",{className:jt,children:["Available in ",s,"s"]}),e("button",{className:Jt,onClick:()=>o("/login"),children:"Change email or phone"})]})]})})},Dt=()=>t(k,{children:[e(w,{path:de,element:e(Be,{})}),e(w,{path:ce,element:e(je,{})}),e(w,{path:ue,element:e(Pt,{})}),e(w,{path:_e,element:e(St,{})}),e(w,{path:me,element:e(Ot,{})}),e(w,{path:ge,element:e(Ct,{})}),e(w,{path:pe,element:e(lt,{})}),e(w,{path:fe,element:e(Gt,{})}),e(w,{path:"*",element:e(x,{to:de,replace:!0})})]});export{ee as AuthProvider,Dt as AuthRoutes,S as SeamlessAuthError,$ as createSeamlessAuthClient,U as encodePrfSalt,j as extractPasskeyPrfResult,T as getOAuthErrorCode,C as getWebAuthnErrorDetail,ne as hasNonPasskeyLoginMethod,K as hasScopedRole,B as isPasskeyPrfSupported,V as roleGrantsAccess,X as useAuth,te as useAuthClient,oe as useLoginMethods,le as usePasskeySupport};
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":["../src/client/errors.ts","../src/client/result.ts","../src/client/webauthnPrf.ts","../src/client/webauthnSupport.ts","../src/client/createSeamlessAuthClient.ts","../src/fetchWithAuth.ts","../src/scopedRoles.ts","../src/AuthProvider.tsx","../src/hooks/usePreviousSignIn.ts","../src/hooks/useAuthClient.ts","../src/utils.ts","../src/hooks/usePasskeySupport.ts","../src/routes.ts","../node_modules/style-inject/dist/style-inject.es.js","../src/components/AuthFallbackOptions.tsx","../src/components/OAuthProviderButtons.tsx","../src/views/Login.tsx","../src/views/PassKeyLogin.tsx","../src/components/DeviceNameModal.tsx","../src/views/PassKeyRegistration.tsx","../src/components/OtpInput.tsx","../src/views/PhoneRegistration.tsx","../src/views/EmailRegistration.tsx","../src/views/VerifyMagicLink.tsx","../src/views/OAuthCallback.tsx","../src/components/MagicLinkSent.tsx","../src/AuthRoutes.tsx"],"sourcesContent":[null,null,null,null,null,null,null,null,null,null,null,null,null,"function styleInject(css, ref) {\n  if ( ref === void 0 ) ref = {};\n  var insertAt = ref.insertAt;\n\n  if (!css || typeof document === 'undefined') { return; }\n\n  var head = document.head || document.getElementsByTagName('head')[0];\n  var style = document.createElement('style');\n  style.type = 'text/css';\n\n  if (insertAt === 'top') {\n    if (head.firstChild) {\n      head.insertBefore(style, head.firstChild);\n    } else {\n      head.appendChild(style);\n    }\n  } else {\n    head.appendChild(style);\n  }\n\n  if (style.styleSheet) {\n    style.styleSheet.cssText = css;\n  } else {\n    style.appendChild(document.createTextNode(css));\n  }\n}\n\nexport default styleInject;\n",null,null,null,null,null,null,null,null,null,null,null,null,null],"names":["SeamlessAuthError","Error","constructor","message","status","body","super","this","name","async","toSeamlessAuthError","response","fallbackMessage","json","undefined","error","extractMessage","readBody","requestResult","request","data","ok","resultOf","resultError","toArrayBuffer","value","ArrayBuffer","source","Uint8Array","buffer","byteOffset","byteLength","copy","set","encodePrfSalt","salt","bufferToBase64URLString","saltToBufferSource","base64URLStringToBuffer","createPrfRequestBody","input","credentialId","prf","secondSalt","isPasskeyPrfSupported","browserSupportsWebAuthn","window","isSecureContext","globalThis","PublicKeyCredential","navigator","credentials","get","preparePrfRequestOptions","optionsJSON","options","prfEval","extensions","eval","first","second","extractPasskeyPrfResult","credential","extensionResults","clientExtensionResults","results","output","id","outputBase64url","stripPrfResultsFromAssertion","toStepUpStatus","payload","expectedMethod","method","fresh","verifiedAt","expiresAt","maxAgeSeconds","buildAssertionStartInit","JSON","stringify","createSeamlessAuthClient","opts","fetchWithAuth","authHost","init","url","replace","startsWith","hasBody","requestInit","headers","fetch","createFetchWithAuth","apiHost","getCurrentUser","login","loginWithPasskey","optionsInput","started","assertionResponse","startAuthentication","console","verified","logout","scope","logoutAllSessions","deleteUser","register","email","phone","requestPhoneOtp","verifyPhoneOtp","verificationToken","requestLoginPhoneOtp","verifyLoginPhoneOtp","requestEmailOtp","verifyEmailOtp","requestLoginEmailOtp","verifyLoginEmailOtp","requestMagicLink","checkMagicLink","verifyMagicLink","token","encodeURIComponent","listOAuthProviders","startOAuthLogin","providerId","redirectUri","returnTo","finishOAuthLogin","code","state","registerPasskey","registerInput","metadata","normalizeRegisterPasskeyInput","challenge","query","URLSearchParams","requirePrf","requestPrf","queryString","toString","buildRegisterStartPath","attestationResponse","startRegistration","WebAuthnError","prfCapable","enabled","getRegistrationPrfCapable","getStepUpStatus","verifyStepUpWithPasskey","verifyStepUpWithPasskeyPrf","getTotpStatus","startTotpEnrollment","verifyTotpEnrollment","disableTotp","verifyStepUpWithTotp","updateCredential","deleteCredential","listOrganizations","createOrganization","getOrganization","organizationId","updateOrganization","switchOrganization","listOrganizationMembers","addOrganizationMember","updateOrganizationMember","userId","removeOrganizationMember","roleGrantsAccess","grantedRole","requiredRole","granted","trim","required","endsWith","prefix","slice","includes","grantedParts","split","requiredParts","grantedAction","length","requiredAction","grantedPrefix","requiredPrefix","every","part","index","hasScopedRole","grantedRoles","requiredRoles","Array","isArray","filter","role","some","AuthContext","createContext","useAuth","context","useContext","AuthProvider","children","autoDetectPreviousSignin","user","setUser","useState","setCredentials","organizations","setOrganizations","activeOrganization","setActiveOrganization","stepUpStatus","setStepUpStatus","isAuthenticated","setIsAuthenticated","loading","setLoading","hasSignedInBefore","markSignedIn","storageKey","setHasSignedInBefore","useEffect","localStorage","getItem","setItem","usePreviousSignIn","authClient","useMemo","resetAuthState","useCallback","validateToken","result","refreshStepUpStatus","_jsx","Provider","refreshSession","hasRole","roles","rolesGrantScopedAccess","friendlyName","updatedCredential","currentCredentials","map","currentCredential","identifier","passkeyAvailable","handlePasskeyLogin","useAuthClient","isValidEmail","normalized","parts","localPart","domainPart","test","isValidPhoneNumber","phoneNumber","parsePhoneNumberFromString","isValid","isPasskeySupported","isUserVerifyingPlatformAuthenticatorAvailable","isPlatformAuthenticatorAvailable","usePasskeySupport","passkeySupported","setPasskeySupported","active","supported","checkSupport","authRoutePaths","styleInject","css","ref","insertAt","document","head","getElementsByTagName","style","createElement","type","firstChild","insertBefore","appendChild","styleSheet","cssText","createTextNode","AuthFallbackOptions","onMagicLink","onEmailOtp","onPhoneOtp","onPasskeyRetry","loginMethods","allowedMethods","Set","showMagicLink","has","showEmailOtp","Boolean","showPhoneOtp","showPasskeyRetry","_jsxs","className","styles","onClick","OAUTH_PROVIDER_STORAGE_KEY","OAuthProviderButtons","callbackHref","useHref","providers","setProviders","setError","then","provider","sessionStorage","URL","location","origin","assign","authorizationUrl","handleSelect","DEFAULT_LOGIN_METHODS","Login","navigate","useNavigate","setIdentifier","setEmail","mode","setMode","formErrors","setFormErrors","emailError","setEmailError","identifierError","setIdentifierError","showFallbackOptions","setShowFallbackOptions","setLoginMethods","_Fragment","onSubmit","e","preventDefault","loginStart","availableMethods","passkeyError","htmlFor","onChange","target","autoComplete","placeholder","onBlur","flow","disabled","PassKeyLogin","runPasskeyLogin","container","card","title","button","DeviceNameModal","isOpen","onCancel","onConfirm","setValue","autoFocus","PasskeyRegistration","passkeySupportLoading","setStatus","setMessage","showDeviceModal","setShowDeviceModal","pendingMetadata","setPendingMetadata","platform","browser","deviceInfo","ua","userAgent","toLowerCase","brave","parseUserAgent","OtpInput","inputMode","inputs","useRef","values","concat","fill","handleChange","char","handleBulkInput","newValueArr","newValue","join","current","focus","cleaned","chars","forEach","i","Math","min","onPaste","clipboardData","getData","el","maxLength","onKeyDown","key","handleKeyDown","PhoneRegistration","useLocation","isLoginFlow","phoneOtp","setPhoneOtp","phoneVerified","setPhoneVerified","resendMsg","setResendMsg","phoneTimeLeft","setPhoneTimeLeft","verifyPhoneOTP","handleResend","onResendPhone","interval","setInterval","prev","clearInterval","nextStep","seconds","floor","padStart","EmailRegistration","emailOtp","setEmailOtp","emailTimeLeft","setEmailTimeLeft","VerifyMagicLink","searchParams","useSearchParams","successMsg","setSuccessMsg","mounted","channel","redirectTimeout","BroadcastChannel","postMessage","setTimeout","verify","close","clearTimeout","verificationContent","spinner","successIcon","viewBox","checkIcon","stroke","strokeWidth","d","helperText","successText","OAuthCallback","startedRef","finishError","removeItem","MagicLinkSent","cooldown","setCooldown","timer","c","magicLinkCompleted","onmessage","event","AuthRoutes","Routes","Route","path","element","Navigate","to"],"mappings":"oiBAUM,MAAOA,UAA0BC,MAIrC,WAAAC,CAAYC,EAAiBC,EAAgBC,GAC3CC,MAAMH,GACNI,KAAKC,KAAO,oBACZD,KAAKH,OAASA,EACdG,KAAKF,KAAOA,CACd,EAwBKI,eAAeC,EACpBC,EACAC,GAEA,IAAIP,EAEJ,IACEA,QAAaM,EAASE,MACxB,CAAE,MACAR,OAAOS,CACT,CAEA,OAAO,IAAId,EAjCb,SAAwBK,GACtB,GAAoB,iBAATA,GAA8B,OAATA,EAC9B,OAKF,MAAMU,MAAEA,EAAKZ,QAAEA,GAAYE,EAE3B,MAAqB,iBAAVU,GAAsBA,EACxBA,EAGiB,iBAAZZ,GAAwBA,EAAUA,OAAUW,CAC5D,CAoBIE,CAAeX,IAASO,EACxBD,EAASP,OACTC,EAEJ,CC5BAI,eAAeQ,EAASN,GACtB,IACE,aAAaA,EAASE,MACxB,CAAE,MAEA,MACF,CACF,CAMOJ,eAAeS,EACpBC,EACAP,GAEA,IAAID,EAEJ,IACEA,QAAiBQ,CACnB,CAAE,MACA,MAAO,CACLC,KAAM,KACNL,MAAO,IAAIf,EAAkBY,EA1BC,GA4BlC,CAEA,OAAKD,EAASU,GAIP,CAAED,WAAaH,EAASN,GAAiBI,MAAO,MAH9C,CAAEK,KAAM,KAAML,YAAaL,EAAoBC,EAAUC,GAIpE,CAGM,SAAUU,EAAYF,GAC1B,MAAO,CAAEA,OAAML,MAAO,KACxB,CAGM,SAAUQ,EACdpB,EACAC,EA7CkC,EA8ClCC,GAEA,MAAO,CAAEe,KAAM,KAAML,MAAO,IAAIf,EAAkBG,EAASC,EAAQC,GACrE,CC3BA,SAASmB,EAAcC,GACrB,GAAIA,aAAiBC,YACnB,OAAOD,EAGT,MAAME,EAAS,IAAIC,WAAWH,EAAMI,OAAQJ,EAAMK,WAAYL,EAAMM,YAC9DC,EAAO,IAAIJ,WAAWD,EAAOI,YAGnC,OAFAC,EAAKC,IAAIN,GAEFK,EAAKH,MACd,CAUM,SAAUK,EAAcC,GAC5B,MAAoB,iBAATA,EACFA,EAGFC,EAAwBZ,EAAcW,GAC/C,CAEA,SAASE,EAAmBF,GAC1B,MAAoB,iBAATA,EACFG,EAAwBH,GAG1BA,CACT,CAEM,SAAUI,EAAqBC,GACnC,MAAO,IACDA,EAAMC,aAAe,CAAEA,aAAcD,EAAMC,cAAiB,GAChEC,IAAK,CACHP,KAAMD,EAAcM,EAAML,SACtBK,EAAMG,WAAa,CAAEA,WAAYT,EAAcM,EAAMG,aAAgB,IAG/E,CAEOlC,eAAemC,IACpB,QCtFKC,MAIiB,oBAAXC,SAAqD,IAA3BA,OAAOC,uBAKA,IAAnCC,WAAWC,qBACG,oBAAdC,WAC+B,mBAA/BA,UAAUC,aAAaC,GD4ElC,CAEM,SAAUC,EACdC,GAEA,MAAMC,EAAUD,EACVE,EAAUD,EAAQE,YAAYf,KAAKgB,KAEzC,OAAKF,EAIE,IACFD,EACHE,WAAY,IACPF,EAAQE,WACXf,IAAK,IACAa,EAAQE,YAAYf,IACvBgB,KAAM,IACDF,KACCA,EAAQG,MAAQ,CAAEA,MAAOtB,EAAmBmB,EAAQG,QAAW,MAC/DH,EAAQI,OAAS,CAAEA,OAAQvB,EAAmBmB,EAAQI,SAAY,OAZrEN,CAiBX,CAEM,SAAUO,EACdC,GAEA,MAAMC,EACJD,EAAWE,uBACPL,EAAQI,GAAkBrB,KAAKuB,SAASN,MAE9C,IAAKA,EACH,OAAO,KAGT,MAAMO,GA3EczC,EA2EQkC,aA1EPjC,YACZ,IAAIE,WAAWH,GAGjB,IAAIG,WAAWH,EAAMI,OAAQJ,EAAMK,WAAYL,EAAMM,YAL9D,IAAsBN,EA6EpB,MAAO,CACLgB,aAAcqB,EAAWK,GACzBD,SACAE,gBAAiBhC,EAAwBZ,EAAc0C,IAE3D,CAEM,SAAUG,EACdP,GAEA,MAAMC,EACJD,EAAWE,uBAEb,OAAKD,GAAkBrB,KAAKuB,QAIrB,IACFH,EACHE,uBAAwB,IACnBF,EAAWE,uBACdtB,IAAK,IACAqB,EAAiBrB,IACpBuB,aAASnD,KATNgD,CAaX,CE2JA,SAASQ,EACPC,EACAC,GAEA,MAAMC,EAASF,EAAQE,SAAWD,EAAiBD,EAAQE,OAAS,KAIpE,MAFsB,YAApBF,EAAQpE,UAA2C,IAAlBoE,EAAQG,OAA6B,OAAXD,EAMtDnD,EAAS,CACdoD,OAAO,EACPD,SACAE,WAAYJ,EAAQI,YAAc,KAClCC,UAAWL,EAAQK,WAAa,KAChCC,cAAeN,EAAQM,eAAiB,IARjCtD,EAAYgD,EAAQpE,SAAW,iCAU1C,CA0BA,SAAS2E,EAAwBtC,GAC/B,OAAKA,EAIE,CACLiC,OAAQ,OACRpE,KAAM0E,KAAKC,UAAUzC,EAAqBC,KALnC,CAAEiC,OAAQ,OAOrB,CAEO,MAAMQ,EACXC,IAEA,MAAMC,ECpX2B,CAACD,IAClC,MAAME,SAAEA,GAAaF,EAErB,OAAOzE,eACL+B,EACA6C,GAEA,MAGMC,EAAM,GAHCF,GAAUG,QAAQ,OAAQ,KAAO,UACjC/C,EAAMgD,WAAW,KAAOhD,EAAQ,IAAIA,MAM3CiD,EAAwB,MAAdJ,GAAMhF,KAEhBqF,EAA2B,IAC5BL,EACHlC,YAAa,UACbwC,QAAS,IACHF,EAAU,CAAE,eAAgB,oBAAuB,CAAA,KACpDJ,GAAMM,UAIb,OAAOC,MAAMN,EAAKI,EACpB,GD0VsBG,CAAoB,CACxCT,SAAUF,EAAKY,UAGjB,MAAO,CACLC,eAAgB,IACd7E,EACEiE,EAAc,WAAY,CAAEV,OAAQ,QACpC,oCAGJuB,MAAOxD,GACLtB,EACEiE,EAAc,SAAU,CACtBV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAUxC,KAEvB,4BAGJyD,iBAAkBxF,MAAMyF,IACtB,MAAMC,QAAgBjF,EACpBiE,EAAc,wBAAyB,IAClCL,EAAwBoB,GAAcxD,OAE3C,kCAGF,GAAIyD,EAAQpF,MACV,OAAOoF,EAGT,IAAIzD,EACA0D,EAEJ,IACE,MAAMtC,QAAoBuC,EAAoB,CAC5C/C,YAAaD,EAAyB8C,EAAQ/E,QAEhDsB,EAAMmB,EAAwBC,GAC9BsC,EAAoB/B,EAA6BP,EACnD,CAAE,MAGA,OADAwC,QAAQvF,MAAM,wBACPQ,EAAY,wBACrB,CAEA,MAAMgF,QAAiBrF,EACrBiE,EAAc,yBAA0B,CACtCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CAAEoB,wBAEzB,6BAGF,OAAIG,EAASxF,MACJwF,EAGsB,YAA3BA,EAASnF,MAAMjB,QACVoB,EAAYgF,EAASnF,MAAMjB,SAAW,yBAGxCmB,EAASoB,EAAM,CAAEA,OAAQ,CAAA,IAGlC8D,OAAQ,CAACjD,EAAU,KACjBrC,EACEiE,EAAgC,iBAAlB5B,EAAQkD,MAA2B,cAAgB,UAAW,CAC1EhC,OAAQ,WAEV,uBAGJiC,kBAAmB,IACjBxF,EACEiE,EAAc,cAAe,CAAEV,OAAQ,WACvC,uCAGJkC,WAAY,IACVzF,EACEiE,EAAc,gBAAiB,CAAEV,OAAQ,WACzC,iCAGJmC,SAAUpE,GACRtB,EACEiE,EAAc,yBAA0B,CACtCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CACnB6B,MAAOrE,EAAMqE,SACTrE,EAAMsE,MAAQ,CAAEA,MAAOtE,EAAMsE,OAAU,OAG/C,uBAGJC,gBAAiB,IACf7F,EAIEiE,EAAc,0BAA2B,CACvCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,MAEvB,gCAGJgC,eAAgBC,GACd/F,EACEiE,EAAc,wBAAyB,CACrCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CAAEiC,wBAEzB,kCAGJC,qBAAsB,IACpBhG,EAIEiE,EAAc,gCAAiC,CAC7CV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,MAEvB,gCAGJmC,oBAAqBF,GACnB/F,EACEiE,EAAc,8BAA+B,CAC3CV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CAAEiC,wBAEzB,kCAGJG,gBAAiB,IACflG,EAIEiE,EAAc,0BAA2B,CACvCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,MAEvB,kCAGJqC,eAAgBJ,GACd/F,EACEiE,EAAc,wBAAyB,CACrCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CAAEiC,wBAEzB,oCAGJK,qBAAsB,IACpBpG,EAIEiE,EAAc,gCAAiC,CAC7CV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,MAEvB,kCAGJuC,oBAAqBN,GACnB/F,EACEiE,EAAc,8BAA+B,CAC3CV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CAAEiC,wBAEzB,oCAMJO,iBAAkB,IAChBtG,EACEiE,EAAc,cAAe,CAAEV,OAAQ,OAAQpE,KAAM0E,KAAKC,UAAU,CAAA,KACpE,kCAGJyC,eAAgB,IACdvG,EACEiE,EAAc,oBAAqB,CAAEV,OAAQ,QAC7C,mCAGJiD,gBAAiBC,GACfzG,EAIEiE,EAAc,sBAAsByC,mBAAmBD,KAAU,CAC/DlD,OAAQ,QAEV,oCAGJoD,mBAAoB,IAClB3G,EACEiE,EAAc,mBAAoB,CAAEV,OAAQ,QAC5C,mCAGJqD,gBAAiBtF,GACftB,EACEiE,EAAc,UAAUyC,mBAAmBpF,EAAMuF,oBAAqB,CACpEtD,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,IACfxC,EAAMwF,YAAc,CAAEA,YAAaxF,EAAMwF,aAAgB,MACzDxF,EAAMyF,SAAW,CAAEA,SAAUzF,EAAMyF,UAAa,OAGxD,gCAGJC,iBAAkB1F,GAChBtB,EACEiE,EAAc,UAAUyC,mBAAmBpF,EAAMuF,uBAAwB,CACvEtD,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CACnBmD,KAAM3F,EAAM2F,KACZC,MAAO5F,EAAM4F,UAGjB,iCAGJC,gBAAiB5H,MAAM+B,IACrB,MAAM8F,EArRZ,SACE9F,GAEA,MAAI,aAAcA,EACTA,EAGF,CAAE+F,SAAU/F,EACrB,CA6Q4BgG,CAA8BhG,GAC9CiG,QAAkBvH,EACtBiE,EA7QR,SAAgC3C,GAC9B,MAAMkG,EAAQ,IAAIC,gBAEdnG,EAAMoG,WACRF,EAAMzG,IAAI,aAAc,QACfO,EAAMqG,YACfH,EAAMzG,IAAI,aAAc,QAG1B,MAAM6G,EAAcJ,EAAMK,WAE1B,MAAO,4BAA2BD,EAAc,IAAIA,IAAgB,GACtE,CAiQsBE,CAAuBV,GAAgB,CAAE7D,OAAQ,QAC/D,mDAGF,GAAIgE,EAAU1H,MACZ,OAAO0H,EAGT,IAAIQ,EAEJ,IACEA,QAA4BC,EAAkB,CAAE5F,YAAamF,EAAUrH,MACzE,CAAE,MAAOL,GACP,OAAIA,aAAiBoI,EAGZ5H,EAAYR,EAAMP,OAG3B8F,QAAQvF,MAAM,+BACPQ,EAAY,gCACrB,CAEA,MAAM6H,EF5dN,SAAoCH,GAGxC,MAAMlF,EAAmBkF,EAAoBjF,uBAI7C,OAA0C,IAAnCD,GAAkBrB,KAAK2G,OAChC,CEodyBC,CAA0BL,GAEvC1C,QAAiBrF,EACrBiE,EAAc,4BAA6B,CACzCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CACnBiE,sBACAV,SAAU,IAAKD,EAAcC,SAAUa,kBAG3C,wBAGF,OAAI7C,EAASxF,MACJwF,EAGFjF,EAAS,CAAEmB,aAAcwG,EAAoB9E,GAAIiF,gBAG1DxG,wBAEA2G,gBAAiB,IACfrI,EACEiE,EAAc,kBAAmB,CAAEV,OAAQ,QAC3C,kCAGJ+E,wBAAyB/I,UACvB,MAAM0F,QAAgBjF,EACpBiE,EAAc,0BAA2B,CAAEV,OAAQ,SACnD,2CAGF,GAAI0B,EAAQpF,MACV,OAAOoF,EAGT,IAAIC,EAEJ,IAIEA,EAAoB/B,QAHMgC,EAAoB,CAC5C/C,YAAaD,EAAyB8C,EAAQ/E,QAGlD,CAAE,MAEA,OADAkF,QAAQvF,MAAM,iCACPQ,EAAY,iCACrB,CAEA,MAAMgF,QAAiBrF,EACrBiE,EAAc,2BAA4B,CACxCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CAAEoB,wBAEzB,4CAGF,OAAIG,EAASxF,MACJwF,EAGFjC,EAAeiC,EAASnF,MAAQ,CAAA,EAAI,aAG7CqI,2BAA4BhJ,MAAM+B,IAChC,MAAM2D,QAAgBjF,EACpBiE,EAAc,0BAA2B,IACpCL,EAAwBtC,KAE7B,2CAGF,GAAI2D,EAAQpF,MACV,OAAOoF,EAGT,IAAIzD,EACA0D,EAEJ,IACE,MAAMtC,QAAoBuC,EAAoB,CAC5C/C,YAAaD,EAAyB8C,EAAQ/E,QAEhDsB,EAAMmB,EAAwBC,GAC9BsC,EAAoB/B,EAA6BP,EACnD,CAAE,MAEA,OADAwC,QAAQvF,MAAM,iCACPQ,EAAY,iCACrB,CAEA,IAAKmB,EACH,OAAOnB,EAAY,sCAGrB,MAAMgF,QAAiBrF,EACrBiE,EAAc,2BAA4B,CACxCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CAAEoB,wBAEzB,4CAGF,GAAIG,EAASxF,MACX,OAAOwF,EAGT,MAAMnG,EAASkE,EAAeiC,EAASnF,MAAQ,CAAA,EAAI,YAEnD,OAAIhB,EAAOW,MACFX,EAGFkB,EAAS,IAAKlB,EAAOgB,KAAMqB,aAAcC,EAAID,aAAcC,SAGpEgH,cAAe,IACbxI,EACEiE,EAAc,eAAgB,CAAEV,OAAQ,QACxC,wCAGJkF,oBAAqB,IACnBzI,EACEiE,EAAc,qBAAsB,CAAEV,OAAQ,SAC9C,6CAGJmF,qBAAsBzB,GACpBjH,EACEiE,EAAc,sBAAuB,CACnCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CAAEmD,WAEzB,4CAGJ0B,YAAa1B,GACXjH,EACEiE,EAAc,gBAAiB,CAC7BV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CAAEmD,WAEzB,wCAGJ2B,qBAAsBrJ,MAAM0H,IAC1B,MAAM5B,QAAiBrF,EACrBiE,EAAc,mBAAoB,CAChCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAU,CAAEmD,WAEzB,4CAGF,OAAI5B,EAASxF,MACJwF,EAGFjC,EAAeiC,EAASnF,MAAQ,CAAA,EAAI,SAG7C2I,iBAAkBvH,GAChBtB,EACEiE,EAAc,oBAAqB,CACjCV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAUxC,KAEvB,gCAGJwH,iBAAkB7F,GAChBjD,EACEiE,EAAc,oBAAqB,CACjCV,OAAQ,SACRpE,KAAM0E,KAAKC,UAAU,CAAEb,SAEzB,gCAGJ8F,kBAAmB,IACjB/I,EACEiE,EAAc,iBAAkB,CAAEV,OAAQ,QAC1C,iCAGJyF,mBAAoB1H,GAClBtB,EACEiE,EAAc,iBAAkB,CAC9BV,OAAQ,OACRpE,KAAM0E,KAAKC,UAAUxC,KAEvB,kCAGJ2H,gBAAiBC,GACflJ,EACEiE,EAAc,kBAAkByC,mBAAmBwC,KAAmB,CACpE3F,OAAQ,QAEV,gCAGJ4F,mBAAoB,CAACD,EAAgB5H,IACnCtB,EACEiE,EAAc,kBAAkByC,mBAAmBwC,KAAmB,CACpE3F,OAAQ,QACRpE,KAAM0E,KAAKC,UAAUxC,KAEvB,kCAGJ8H,mBAAoBF,GAClBlJ,EACEiE,EAAc,kBAAkByC,mBAAmBwC,YAA0B,CAC3E3F,OAAQ,SAEV,kCAGJ8F,wBAAyBH,GACvBlJ,EACEiE,EAAc,kBAAkByC,mBAAmBwC,aAA2B,CAC5E3F,OAAQ,QAEV,wCAGJ+F,sBAAuB,CAACJ,EAAgB5H,IACtCtB,EACEiE,EAAc,kBAAkByC,mBAAmBwC,aAA2B,CAC5E3F,OAAQ,OACRpE,KAAM0E,KAAKC,UAAUxC,KAEvB,sCAGJiI,yBAA0B,CAACL,EAAgBM,EAAQlI,IACjDtB,EACEiE,EACE,kBAAkByC,mBAAmBwC,cAA2BxC,mBAAmB8C,KACnF,CACEjG,OAAQ,QACRpE,KAAM0E,KAAKC,UAAUxC,KAGzB,yCAGJmI,yBAA0B,CAACP,EAAgBM,IACzCxJ,EACEiE,EACE,kBAAkByC,mBAAmBwC,cAA2BxC,mBAAmB8C,KACnF,CACEjG,OAAQ,WAGZ,2CEj4BF,SAAUmG,EAAiBC,EAAqBC,GACpD,MAAMC,EAAUF,EAAYG,OACtBC,EAAWH,EAAaE,OAE9B,IAAKD,IAAYE,EACf,OAAO,EAGT,GAAIF,IAAYE,EACd,OAAO,EAGT,GAAIF,EAAQG,SAAS,MAAO,CAC1B,MAAMC,EAASJ,EAAQK,MAAM,GAAG,GAChC,OAAOH,IAAaE,GAAUF,EAASzF,WAAW,GAAG2F,KACvD,CAEA,IAAKF,EAASI,SAAS,KACrB,OAAO,EAGT,IAAKN,EAAQM,SAAS,KACpB,OAAOJ,EAASzF,WAAW,GAAGuF,MAGhC,MAAMO,EAAeP,EAAQQ,MAAM,KAC7BC,EAAgBP,EAASM,MAAM,KAC/BE,EAAgBH,EAAaA,EAAaI,OAAS,GACnDC,EAAiBH,EAAcA,EAAcE,OAAS,GACtDE,EAAgBN,EAAaF,MAAM,GAAG,GACtCS,EAAiBL,EAAcJ,MAAM,GAAG,GAE9C,MACoB,UAAlBK,GACmB,SAAnBE,GACAC,EAAcF,SAAWG,EAAeH,QACxCE,EAAcE,MAAM,CAACC,EAAMC,IAAUD,IAASF,EAAeG,GAEjE,CAEM,SAAUC,EACdC,EACAC,GAEA,IAAKC,MAAMC,QAAQH,GACjB,OAAO,EAGT,MAAMnB,EAAUmB,EAAaI,OAAQC,GAAyC,iBAATA,GAGrE,OAFiBH,MAAMC,QAAQF,GAAiBA,EAAgB,CAACA,IAEjDK,KAAK1B,GACnBC,EAAQyB,KAAK3B,GAAeD,EAAiBC,EAAaC,IAE9D,CCkBA,MAAM2B,EAAcC,OAA2C5L,GAMlD6L,EAAU,KACrB,MAAMC,EAAUC,EAAWJ,GAC3B,IAAKG,EACH,MAAM,IAAI3M,MAAM,+CAElB,OAAO2M,GASIE,EAA4C,EACvDC,WACAjH,UACAkH,4BAA2B,MAE3B,MAAOC,EAAMC,GAAWC,EAAsB,OACvChK,EAAaiK,GAAkBD,EAAuB,KACtDE,EAAeC,GAAoBH,EAAyB,KAC5DI,EAAoBC,GAAyBL,EAA8B,OAC3EM,EAAcC,GAAmBP,EAA8B,OAC/DQ,EAAiBC,GAAsBT,GAAkB,IACzDU,EAASC,GAAcX,GAAkB,IAC1CY,kBAAEA,EAAiBC,aAAEA,GCtGvB,SAA4BC,EAAa,qBAC7C,MAAOF,EAAmBG,GAAwBf,GAAS,GAoB3D,OAlBAgB,EAAU,KACR,IAEe,SADAC,aAAaC,QAAQJ,IACbC,GAAqB,EAC5C,CAAE,MAEF,GACC,CAACD,IAWG,CAAEF,oBAAmBC,aATP,KACnB,IACEI,aAAaE,QAAQL,EAAY,QACjCC,GAAqB,EACvB,CAAE,MAEF,GAIJ,CDgF8CK,GAEtCC,EAAaC,EACjB,IACExJ,EAAyB,CACvBa,YAEJ,CAACA,IAgBG4I,EAAiBC,EAAY,KACjCf,GAAmB,GACnBV,EAAQ,MACRE,EAAe,IACfE,EAAiB,IACjBE,EAAsB,MACtBE,EAAgB,OACf,IAEGlH,EAASmI,EAAYlO,UAKzB,IACE,aAAa+N,EAAWhI,QAC1B,SACEkI,GACF,GACC,CAACF,EAAYE,IAEVhI,EAAoBiI,EAAYlO,UAKpC,IACE,aAAa+N,EAAW9H,mBAC1B,SACEgI,GACF,GACC,CAACF,EAAYE,IAgBVE,EAAgBD,EAAYlO,UAChCqN,GAAW,GAEX,MAAMe,QAAeL,EAAWzI,iBAEhC,OAAI8I,EAAO9N,aAEHyF,IACNsH,GAAW,GACJe,IAGT3B,EAAQ2B,EAAOzN,KAAK6L,MACpBG,EAAeyB,EAAOzN,KAAK+B,aAAe,IAC1CmK,EAAiBuB,EAAOzN,KAAKiM,eAAiB,IAC9CG,EAAsBqB,EAAOzN,KAAKmM,oBAAsB,MACxDK,GAAmB,GACnBE,GAAW,GAEJe,IACN,CAACL,EAAYhI,IA8DVsI,EAAsBH,EAAYlO,UACtC,MAAMoO,QAAeL,EAAWjF,kBAIhC,OAFAmE,EAAgBmB,EAAO9N,MAAQ,KAAO8N,EAAOzN,MAEtCyN,GACN,CAACL,IAEEhF,EAA0BmF,EAAYlO,UAC1C,MAAMoO,QAAeL,EAAWhF,0BAMhC,OAJKqF,EAAO9N,OACV2M,EAAgBmB,EAAOzN,MAGlByN,GACN,CAACL,IAEE/E,EAA6BkF,EACjClO,MAAO+B,IACL,MAAMqM,QAAeL,EAAW/E,2BAA2BjH,GAY3D,OAVKqM,EAAO9N,OACV2M,EAAgB,CACdhJ,MAAOmK,EAAOzN,KAAKsD,MACnBD,OAAQoK,EAAOzN,KAAKqD,OACpBE,WAAYkK,EAAOzN,KAAKuD,WACxBC,UAAWiK,EAAOzN,KAAKwD,UACvBC,cAAegK,EAAOzN,KAAKyD,gBAIxBgK,GAET,CAACL,IAGG1E,EAAuB6E,EAC3BlO,MAAO0H,IACL,MAAM0G,QAAeL,EAAW1E,qBAAqB3B,GAMrD,OAJK0G,EAAO9N,OACV2M,EAAgBmB,EAAOzN,MAGlByN,GAET,CAACL,IAaH,OAVAL,EAAU,KACHS,KACJ,CAACA,IAEJT,EAAU,KACJlB,GAAQU,GACVK,KAED,CAACf,EAAMU,EAAiBK,IAGzBe,EAACtC,EAAYuC,SAAQ,CACnBvN,MAAO,CACLwL,OACAzG,SACAE,oBACAuI,eAAgBL,EAChBf,UACAlH,WApKalG,UACjB,MAAMoO,QAAeL,EAAW7H,aAMhC,OAJKkI,EAAO9N,OACV2N,IAGKG,GA8JHlB,kBACAuB,QA5JW3C,GAAiBU,GAAMkC,OAAO9D,SAASkB,iBACjCA,GACrBU,EAAOmC,EAAuBnC,EAAKkC,MAAO5C,QAAQzL,EA4J9CgF,UACAkI,eACAD,oBAAmBf,GAA2Be,EAC9C5K,cACAkK,gBACAE,qBACAjD,mBAvGqB7J,MAAO2J,IAChC,MAAMyE,QAAeL,EAAWlE,mBAAmBF,GAMnD,OAJKyE,EAAO9N,aACJ6N,IAGDC,GAiGHhH,mBA9FqB,IAAM2G,EAAW3G,qBA+FtCC,gBA7FmBtF,GACvBgM,EAAW1G,gBAAgBtF,GA6FvB0F,iBA3FmBzH,MAAO+B,IAC9B,MAAMqM,QAAeL,EAAWtG,iBAAiB1F,GAMjD,OAJKqM,EAAO9N,aACJ6N,IAGDC,GAqFHpB,eACA1D,iBA/ImBtJ,MAAOqD,IAC9B,MAAM1C,KAAEA,EAAIL,MAAEA,SAAgByN,EAAWzE,iBAAiB,CACxDsF,aAAcvL,EAAWuL,aACzBlL,GAAIL,EAAWK,KAGjB,GAAIpD,EACF,MAAO,CAAEK,KAAM,KAAML,SAGvB,MAAMuO,EAAoBlO,EAAK0C,WAU/B,OARAsJ,EAAemC,GACbA,EAAmBC,IAAIC,GACrBA,EAAkBtL,KAAOmL,EAAkBnL,GACvC,IAAKsL,KAAsBH,GAC3BG,IAID,CAAErO,KAAMkO,EAAmBvO,MAAO,OA4HrCiJ,iBAzHmBvJ,MAAOgC,IAC9B,MAAMoM,QAAeL,EAAWxE,iBAAiBvH,GAQjD,OANKoM,EAAO9N,OACVqM,EAAemC,GACbA,EAAmBjD,OAAOxI,GAAcA,EAAWK,KAAO1B,IAIvDoM,GAiHH7I,MAnOQ,CAAC0J,EAAoBC,IACjCnB,EAAWxI,MAAM,CAAE0J,aAAYC,qBAmO3BC,mBAjOqBnP,UACzB,MAAMoO,QAAeL,EAAWvI,mBAMhC,OAJK4I,EAAO9N,aACJ6N,IAGDC,GA2NHC,sBACAtF,0BACAC,6BACAK,wBACDiD,SAEAA,KExVM8C,EAAgB,KAC3B,MAAM/J,QAAEA,GAAY6G,IAEpB,OAAO8B,EACL,IACExJ,EAAyB,CACvBa,YAEJ,CAACA,KCFQgK,EAAgBjJ,IAC3B,GAAqB,iBAAVA,EAAoB,OAAO,EAGtC,MAAMkJ,EAAalJ,EAAMmE,OAGzB,GAAI+E,EAAWrE,OAAS,GAAKqE,EAAWrE,OAAS,IAAK,OAAO,EAG7D,MAAMsE,EAAQD,EAAWxE,MAAM,KAC/B,GAAqB,IAAjByE,EAAMtE,OAAc,OAAO,EAE/B,MAAOuE,EAAWC,GAAcF,EAGhC,SACG,sBAAsBG,KAAKF,IAC5BA,EAAUzK,WAAW,MACrByK,EAAU/E,SAAS,MACnB+E,EAAU5E,SAAS,WAOlB,iCAAiC8E,KAAKD,IACvCA,EAAW1K,WAAW,MACtB0K,EAAWhF,SAAS,MACpBgF,EAAW1K,WAAW,MACtB0K,EAAWhF,SAAS,MACpBgF,EAAW7E,SAAS,QAeX+E,EAAsBtJ,IACjC,MAAMuJ,EAAcC,EAA2BxJ,GAC/C,OAAOuJ,GAAaE,YAAa,GAO5B9P,eAAe+P,IACpB,OP1CK/P,iBACL,GAAsB,oBAAXqC,OACT,OAAO,EAGT,GACEA,OAAOG,qBAEL,mBADKH,OAAOG,oBAAoBwN,8CAGlC,IACE,aAAaxN,oBAAoBwN,+CACnC,CAAE,MAEA,OADAnK,QAAQvF,MAAM,oCACP,CACT,CAGF,OAAO,CACT,COuBS2P,EACT,CCjEO,MAAMC,EAAoB,KAC/B,MAAOC,EAAkBC,GAAuB1D,GAAS,IAClDU,EAASC,GAAcX,GAAS,GA6BvC,OA3BAgB,EAAU,KACR,IAAI2C,GAAS,EAqBb,MAnBqBrQ,WACnB,IACE,MAAMsQ,QAAkBP,IACpBM,GACFD,EAAoBE,EAExB,CAAE,MACID,GACFD,GAAoB,EAExB,SACMC,GACFhD,GAAW,EAEf,GAGGkD,GAEE,KACLF,GAAS,IAEV,IAEI,CAAEF,mBAAkB/C,YCxBhBoD,EACJ,SADIA,EAEG,iBAFHA,EAGK,oBAHLA,GAIK,oBAJLA,GAKM,oBALNA,GAMI,kBANJA,GAOM,oBAPNA,GAQI,mBCzBjB,SAASC,GAAYC,EAAKC,YACnBA,IAAiBA,EAAM,CAAA,GAC5B,IAAIC,EAAWD,EAAIC,SAEnB,GAAKF,GAA2B,oBAAbG,SAAnB,CAEA,IAAIC,EAAOD,SAASC,MAAQD,SAASE,qBAAqB,QAAQ,GAC9DC,EAAQH,SAASI,cAAc,SACnCD,EAAME,KAAO,WAEI,QAAbN,GACEE,EAAKK,WACPL,EAAKM,aAAaJ,EAAOF,EAAKK,YAKhCL,EAAKO,YAAYL,GAGfA,EAAMM,WACRN,EAAMM,WAAWC,QAAUb,EAE3BM,EAAMK,YAAYR,SAASW,eAAed,GAnBW,CAqBzD,8iHCJA,MAAMe,GAA0D,EAC9DxC,aACAyC,cACAC,aACAC,aACAC,iBACAC,mBAEA,MAAMC,EAAiB,IAAIC,IACzBF,GAAgB,CAAC,UAAW,aAAc,cAEtCG,EAAgBF,EAAeG,IAAI,eAAiB7C,EAAaJ,GACjEkD,EACJJ,EAAeG,IAAI,cAAgBE,QAAQT,IAAetC,EAAaJ,GACnEoD,EAAeN,EAAeG,IAAI,cAAgBvC,EAAmBV,GACrEqD,EAAmBP,EAAeG,IAAI,YAAcE,QAAQP,GAElE,OAAKI,GAAkBE,GAAiBE,GAAiBC,EAKvDC,EAAA,MAAA,CAAKC,UAAWC,GAAmBnG,SAAA,CACjCgC,EAAA,MAAA,CAAKkE,UAAWC,GAAqBnG,SAAA,4BAErCgC,EAAA,IAAA,CAAGkE,UAAWC,GAA0BnG,SAAA,0CAExCiG,EAAA,MAAA,CAAKC,UAAWC,aACbR,GACCM,EAAA,SAAA,CACErB,KAAK,SACLsB,UAAWC,GACXC,QAAShB,EAAWpF,SAAA,CAEpBgC,EAAA,OAAA,CAAMkE,UAAWC,GAAkBnG,SAAA,qBACnCgC,EAAA,OAAA,CAAMkE,UAAWC,GAAoBnG,SAAA,gDAMxC6F,GACCI,EAAA,SAAA,CACErB,KAAK,SACLsB,UAAWC,GACXC,QAASf,EAAUrF,SAAA,CAEnBgC,EAAA,OAAA,CAAMkE,UAAWC,GAAkBnG,SAAA,eACnCgC,EAAA,OAAA,CAAMkE,UAAWC,GAAoBnG,SAAA,wCAIxC+F,GACCE,EAAA,SAAA,CACErB,KAAK,SACLsB,UAAWC,GACXC,QAASd,EAAUtF,SAAA,CAEnBgC,EAAA,OAAA,CAAMkE,UAAWC,GAAkBnG,SAAA,sBACnCgC,EAAA,OAAA,CAAMkE,UAAWC,GAAoBnG,SAAA,0CAK1CgG,GACChE,EAAA,SAAA,CAAQ4C,KAAK,SAASsB,UAAWC,GAAmBC,QAASb,qCA/C1D,MC1BEc,GAA6B,0BAEpCC,GAAiC,KACrC,MAAMxL,mBAAEA,EAAkBC,gBAAEA,GAAoB6E,IAG1C2G,EAAeC,EAAQ,oBACtBC,EAAWC,GAAgBtG,EAA0B,KACrDpM,EAAO2S,GAAYvG,EAAS,IAcnC,GAZAgB,EAAU,KACR,IAAI2C,GAAS,EAMb,OAJKjJ,IAAqB8L,KAAK,EAAGvS,WAC5B0P,GAAQ2C,EAAarS,GAAMoS,WAAa,MAGvC,KACL1C,GAAS,IAEV,CAACjJ,IAEqB,IAArB2L,EAAU9H,OACZ,OAAO,KAsBT,OACEsH,EAAA,MAAA,CAAKC,UAAWC,GAAsBnG,SAAA,CACnCyG,EAAUhE,IAAIoE,GACb7E,EAAA,SAAA,CAEE4C,KAAK,SACLsB,UAAWC,GACXC,QAAS,IA1BI1S,OAAOsH,IAC1B2L,EAAS,IAGTG,eAAevF,QAAQ8E,GAA4BrL,GAEnD,MAAM3G,KAAEA,EAAIL,MAAEA,SAAgB+G,EAAgB,CAC5CC,aACAC,YAAa,IAAI8L,IAAIR,EAAcxQ,OAAOiR,SAASC,QAAQjL,aAGzDhI,EACF2S,EAAS,+CAIX5Q,OAAOiR,SAASE,OAAO7S,EAAK8S,mBAUPC,CAAaP,EAASzP,IAAG4I,SAExCiG,EAAA,OAAA,CAAMC,UAAWC,GAAkBnG,SAAA,CAAA,iBAAiB6G,EAASpT,SALxDoT,EAASzP,KASjBpD,GAASgO,OAAGkE,UAAWC,GAAYnG,SAAGhM,QCrDvCqT,GAAuC,CAAC,UAAW,aAAc,aAEjEC,GAAkB,KACtB,MAAMC,EAAWC,KACXxG,kBAAEA,EAAiB/H,MAAEA,EAAK4J,mBAAEA,GAAuBjD,IACnD6B,EAAaqB,KACbe,iBAAEA,GAAqBD,KACtBjB,EAAY8E,GAAiBrH,EAAiB,KAC9CtG,EAAO4N,GAAYtH,EAAiB,KACpCuH,EAAMC,GAAWxH,EAA+B,aAChDyH,EAAYC,GAAiB1H,EAAiB,KAC9C2H,EAAYC,GAAiB5H,EAAiB,KAC9C6H,EAAiBC,GAAsB9H,EAAiB,KACxD+H,EAAqBC,GAA0BhI,GAAS,IACxDoF,EAAc6C,GAAmBjI,EAAwBiH,IAEhEjG,EAAU,KACJJ,GACF4G,EAAQ,UAET,CAAC5G,IA6HJ,OACEgB,SAAKkE,UAAWC,YACdF,EAAA,MAAA,CAAKC,UAAWC,GAAWnG,SAAA,CACzBgC,EAAA,KAAA,CAAIkE,UAAWC,GAAcnG,SACjB,UAAT2H,EAAmB,UAAY,mBAGlC1B,EAAAqC,EAAA,CAAAtI,SAAA,CACEiG,UAAMsC,SAzDO7U,MAAO8U,IAC1BA,EAAEC,iBACFX,EAAc,IACdM,GAAuB,GAEvB,IACE,GAAa,UAATT,EAAkB,CACpB,MAAQtT,KAAMqU,EAAU1U,MAAEA,SAAgBiF,EAAM0J,EAAYkB,GAE5D,GAAI7P,EAEF,YADA8T,EAAc,8CAIhB,MAAMa,EAAmBD,GAAYlD,cAAc7G,OAC/C+J,EAAWlD,aACX6B,GAGJ,GAFAgB,EAAgBM,GAEZ9E,GAAoB8E,EAAiBrK,SAAS,WAAY,CAC5D,MAAQtK,MAAO4U,SAAuB/F,IAEtC,OAAK+F,GAKLR,GAAuB,QACvBN,EACE,gFANAP,EAAS,IASb,CAGA,YADAa,GAAuB,EAEzB,CAEa,aAATT,QA7FSjU,WACfoU,EAAc,IAEd,MAAMzT,KAAEA,EAAIL,MAAEA,SAAgByN,EAAW5H,SAAS,CAChDC,UAGE9F,EACF8T,EAAc,yCAIK,YAAjBzT,EAAKjB,QAOTmU,EAASrD,IANP4D,EACE,uFAgFMjO,EAEV,CAAE,MAGAN,QAAQvF,MAAM,+BACd8T,EAAc,gDAChB,GAWkC9H,SAAA,CAChB,UAAT2H,GACC1B,EAAA,MAAA,CAAKC,UAAWC,aACdnE,EAAA,QAAA,CAAO6G,QAAQ,aAAa3C,UAAWC,GAAYnG,SAAA,iCAGnDgC,WACE5K,GAAG,aACHwN,KAAK,OACLlQ,MAAOiO,EACPmG,SAxIgBN,IAC9B,MAAM9T,EAAQ8T,EAAEO,OAAOrU,MACvB+S,EAAc/S,IAuIAsU,aAAa,MACbC,YAAY,wBACZ/C,UAAWC,GACX+C,OAAQ,KACN,GAAIvG,EAAY,CACd,MAAMa,EACJT,EAAaJ,IAAeU,EAAmBV,GACjDuF,EACE1E,EAAU,GAAK,6CAEnB,GAEFtF,UAAQ,IAEV8D,EAAA,IAAA,CAAGkE,UAAWC,GAAiBnG,SAAA,sDAG9BmI,GACCnG,EAACmD,GAAmB,CAClBxC,WAAYA,EACZyC,YAzHI1R,UACpB,MAAMM,MAAEA,SAAgByN,EAAWhH,mBAE/BzG,EACF8T,EAAc,8BAIhBP,EAASrD,GAA8B,CAAE7I,MAAO,CAAEsH,iBAkHlC0C,WApGG3R,UACnB,MAAMM,MAAEA,SAAgByN,EAAWlH,uBAE/BvG,EACF8T,EAAc,8BAIhBP,EAASrD,GAA+B,CAAE7I,MAAO,CAAE8N,KAAM,YA6FzC7D,WAhHG5R,UACnB,MAAMM,MAAEA,SAAgByN,EAAWtH,uBAE/BnG,EACF8T,EAAc,uBAIhBP,EAASrD,EAA+B,CAAE7I,MAAO,CAAE8N,KAAM,YAyGzC5D,eAAgB1B,EAAmBhB,OAAqB9O,EACxDyR,aAAcA,IAIjByC,GAAmBjG,EAAA,IAAA,CAAGkE,UAAWC,YAAe8B,OAG3C,aAATN,GACC1B,EAAA,MAAA,CAAKC,UAAWC,GAAiBnG,SAAA,CAC/BgC,EAAA,QAAA,CAAO6G,QAAQ,QAAQ3C,UAAWC,GAAYnG,SAAA,kBAG9CgC,EAAA,QAAA,CACE5K,GAAG,QACHwN,KAAK,QACLlQ,MAAOoF,EACPgP,SAtLWN,IACzB,MAAM1O,EAAQ0O,EAAEO,OAAOrU,MACvBgT,EAAS5N,IAqLKkP,aAAa,MACb9C,UAAWC,GACX+C,OAAQ,KACN,GAAIpP,EAAO,CACT,MAAM0J,EAAUT,EAAajJ,GAC7BkO,EAAcxE,EAAU,GAAK,6BAC/B,GAEFtF,UAAQ,IAET6J,GAAc/F,EAAA,IAAA,CAAGkE,UAAWC,GAAYnG,SAAG+H,OAGhD/F,EAAA,SAAA,CAAQ4C,KAAK,SAASsB,UAAWC,GAAeiD,WAzL3C,UAATzB,GAAoBhF,EACfI,EAAaJ,IAAeU,EAAmBV,GAIjDI,EAAajJ,aAqLA,UAAT6N,EAAmB,QAAU,aAE/BE,GAAc7F,EAAA,IAAA,CAAGkE,UAAWC,GAAYnG,SAAG6H,IAC5C7F,EAAA,SAAA,CACE4C,KAAK,SACLwB,QAAS,IAAMwB,EAAiB,UAATD,EAAmB,WAAa,SACvDzB,UAAWC,GAAanG,SAEd,UAAT2H,EACG,oCACA,wCAIR3F,EAACsE,GAAoB,CAAA,miCC/O/B,MAAM+C,GAAyB,KAC7B,MAAM9B,EAAWC,KACT3E,mBAAoByG,GAAoB1J,KACzC5L,EAAO2S,GAAYvG,EAAS,IAenC,OACE4B,SAAKkE,UAAWC,GAAOoD,UAASvJ,SAC9BiG,EAAA,MAAA,CAAKC,UAAWC,GAAOqD,eACrBxH,EAAA,KAAA,CAAIkE,UAAWC,GAAOsD,MAAKzJ,SAAA,uBAC3BgC,EAAA,SAAA,CAAQoE,QAjBkB1S,UAC9BiT,EAAS,IAET,MAAQ3S,MAAO4U,SAAuBU,IAEjCV,EAKLjC,EAAS,uEAJPY,EAAS,MAWmCrB,UAAWC,GAAOuD,OAAM1J,SAAA,gBAGjEhM,GAASgO,OAAGkE,UAAWC,GAAOnS,MAAKgM,SAAGhM,yxGCtB/C,MAAM2V,GAAkD,EACtDC,SACAC,WACAC,gBAEA,MAAOpV,EAAOqV,GAAY3J,EAAS,IAEnC,OAAKwJ,EAGH5H,EAAA,MAAA,CAAKkE,UAAWC,GAAcnG,SAC5BiG,EAAA,MAAA,CAAKC,UAAWC,GAAYnG,SAAA,CAC1BgC,EAAA,KAAA,CAAAhC,SAAA,qBACAgC,EAAA,IAAA,CAAGkE,UAAWC,GAAkBnG,SAAA,qEAIhCgC,EAAA,QAAA,CACE4C,KAAK,OACLqE,YAAY,qCACZvU,MAAOA,EACPoU,SAAUN,GAAKuB,EAASvB,EAAEO,OAAOrU,OACjCwR,UAAWC,GACX6D,WAAS,IAGX/D,EAAA,MAAA,CAAKC,UAAWC,GAAcnG,SAAA,CAC5BgC,EAAA,SAAA,CAAQoE,QAASyD,EAAU3D,UAAWC,GAAgBnG,SAAA,WAGtDgC,EAAA,SAAA,CACEoE,QAAS,IAAM0D,EAAUpV,EAAMuJ,QAC/BmL,UAAW1U,EAAMuJ,OACjBiI,UAAWC,GAAcnG,SAAA,qBA1Bf,MCLhBiK,GAAgC,KACpC,MAAM/H,eAAEA,GAAmBtC,IACrB6B,EAAaqB,KACbe,iBAAEA,EAAkB/C,QAASoJ,GAA0BtG,IACvD2D,EAAWC,KAEVnU,EAAQ8W,GAAa/J,EAAmD,SACxEhN,EAASgX,GAAchK,EAAS,KAEhCiK,EAAiBC,GAAsBlK,GAAS,IAChDmK,EAAiBC,GAAsBpK,EAIpC,MAwCV,OACE6F,EAAAqC,EAAA,CAAAtI,SAAA,CACEgC,EAAA,MAAA,CAAKkE,UAAWC,GAAgBnG,SAC9BgC,EAAA,MAAA,CAAKkE,UAAWC,GAAWnG,SAEvBiG,EAAA,MADDiE,IAA0BrG,EACzB,CAAKqC,UAAWC,GAAcnG,SAAA,CAC5BgC,EAAA,MAAA,CAAKkE,UAAWC,KAChBnE,mBACGkI,EACG,kCACA,iDAIR,CAAKhE,UAAWC,GAAgBnG,SAAA,CAC9BgC,EAAA,KAAA,CAAIkE,UAAWC,GAAYnG,SAAA,uCAC3BgC,EAAA,IAAA,CAAGkE,UAAWC,GAAkBnG,SAAA,2EAIhCgC,EAAA,SAAA,CACEoE,QA3DU,KACtB,MAAMqE,SAAEA,EAAQC,QAAEA,EAAOC,WAAEA,cT8C7B,MAAMC,EAAKzU,UAAU0U,UAAUC,cAE/B,IAAIL,EAAW,UACXC,EAAU,UAuBd,MArBI,mBAAmBtH,KAAKwH,GAAKH,EAAW,MACnC,UAAUrH,KAAKwH,GAAKH,EAAW,UAC/B,SAASrH,KAAKwH,GAAKH,EAAW,MAC9B,UAAUrH,KAAKwH,GAAKH,EAAW,UAC/B,QAAQrH,KAAKwH,KAAKH,EAAW,SAMjCtU,UAAiC4U,MAAOL,EAAU,QAC9C,eAAetH,KAAKwH,GAAKF,EAAU,OACnC,oBAAoBtH,KAAKwH,GAAKF,EAAU,QACxC,UAAUtH,KAAKwH,GAAKF,EAAU,UAC9B,iBAAiBtH,KAAKwH,GAAKF,EAAU,UACrC,gBAAgBtH,KAAKwH,GAAKF,EAAU,UACpC,eAAetH,KAAKwH,GAAKF,EAAU,SACnC,SAAStH,KAAKwH,KAAKF,EAAU,UAI/B,CAAED,WAAUC,UAASC,WAFT,GAAGF,OAAcC,IAGtC,CSzE8CM,GAE1CR,EAAmB,CAAEC,WAAUC,UAASC,eACxCL,GAAmB,IAwDPlB,SAAqB,YAAX/V,EACV6S,UAAWC,GAAanG,SAEZ,YAAX3M,EAAuB,iBAAmB,qBAG5CD,GACC4O,EAAA,IAAA,CACEkE,UAAW,GAAGC,MACD,YAAX9S,EAAuB8S,GAAiBA,cAGzC/S,WAQb4O,EAAC2H,GAAe,CACdC,OAAQS,EACRR,SAAU,KACRS,GAAmB,GACnBE,EAAmB,OAErBV,UA/EuBpW,MAAO4O,IAClC,IAAKiI,EAAiB,OAEtB,MAAM/O,EAA4B,CAChC8G,kBACGiI,GAGLJ,EAAU,WAEV,IACE,MAAMnW,MAAEA,SAAgByN,EAAWnG,gBAAgBE,GAEnD,GAAIxH,EACF,MAAMA,QAGFkO,IACNiI,EAAU,WACVC,EAAW,oCACX7C,EAAS,IACX,CAAE,MACAhO,QAAQvF,MAAM,gCACdmW,EAAU,SACVC,EAAW,6BACb,SACEE,GAAmB,GACnBE,EAAmB,KACrB,4qFCnDJ,MAAMS,GAA4B,EAChCtM,SAAS,EACTjK,QACAwW,YAAY,UACZpC,WACArV,OAAO,UAEP,MAAM0X,EAASC,EAAuC,IAEhDC,EAAS3W,EAAM8J,MAAM,IAAI8M,OAAOjM,MAAMV,GAAQ4M,KAAK,KAAKlN,MAAM,EAAGM,GAOjE6M,EAAe,CAACvM,EAAexJ,KALjB,IAACgW,EAMnB,GAAIhW,EAAMkJ,OAAS,EACjB+M,EAAgBzM,EAAOxJ,QAIzB,IAAKA,IAXcgW,EAWOhW,EAVR,YAAdyV,EAAgC,OAAO9H,KAAKqI,GACzC,aAAarI,KAAKqI,IASS,CAChC,MAAME,EAAc,IAAIN,GACxBM,EAAY1M,GAASxJ,EAErB,MAAMmW,EAAWD,EAAYE,KAAK,IAClC/C,EAAS8C,GAELnW,GAAS0V,EAAOW,QAAQ7M,EAAQ,IAClCkM,EAAOW,QAAQ7M,EAAQ,IAAI8M,OAE/B,GAGIL,EAAkB,CAACzM,EAAexJ,KACtC,IAAIuW,EAAUvW,EAGZuW,EADgB,YAAdd,EACQzV,EAAM+C,QAAQ,MAAO,IAErB/C,EAAM+C,QAAQ,aAAc,IAGxC,MAAMyT,EAAQD,EAAQ3N,MAAM,EAAGM,GAAQH,MAAM,IAEvCmN,EAAc,IAAIN,GAExBY,EAAMC,QAAQ,CAACT,EAAMU,KACflN,EAAQkN,EAAIxN,IACdgN,EAAY1M,EAAQkN,GAAKV,KAI7B3C,EAAS6C,EAAYE,KAAK,KAC1BV,EAAOW,QAAQM,KAAKC,IAAIpN,EAAQgN,EAAMtN,OAAQA,EAAS,KAAKoN,SAiC9D,OACE/J,EAAA,MAAA,CACEkE,UAAWC,GACX3G,KAAK,QAAO,aACD,0BACX8M,QAViB9D,IACnBA,EAAEC,iBACFiD,EAAgB,EAAGlD,EAAE+D,cAAcC,QAAQ,UAQrBxM,SAEnBqL,EAAO5I,IAAI,CAACgJ,EAAMU,IACjBnK,EAAA,QAAA,CAEEqC,IAAKoI,GAAOtB,EAAOW,QAAQK,GAAKM,EAChC7H,KAAK,OACLsG,UAAyB,YAAdA,EAA0B,UAAY,OACjDlC,aAAa,gBACbvV,KAAM,GAAGA,KAAQ0Y,IACjBO,UAAW,EACXhY,MAAO+W,EACPvF,UAAWC,GACX2C,SAAUN,GAAKgD,EAAaW,EAAG3D,EAAEO,OAAOrU,OACxCiY,UAAWnE,GAjDG,EAACvJ,EAAeuJ,KACpC,GAAc,cAAVA,EAAEoE,IAAqB,CACzBpE,EAAEC,iBAEF,MAAMkD,EAAc,IAAIN,GAEpBA,EAAOpM,IACT0M,EAAY1M,GAAS,GACrB6J,EAAS6C,EAAYE,KAAK,MACjB5M,EAAQ,IACjB0M,EAAY1M,EAAQ,GAAK,GACzB6J,EAAS6C,EAAYE,KAAK,KAC1BV,EAAOW,QAAQ7M,EAAQ,IAAI8M,QAE/B,CAEc,cAAVvD,EAAEoE,KAAuB3N,EAAQ,GACnCkM,EAAOW,QAAQ7M,EAAQ,IAAI8M,QAGf,eAAVvD,EAAEoE,KAAwB3N,EAAQN,EAAS,GAC7CwM,EAAOW,QAAQ7M,EAAQ,IAAI8M,SA4BPc,CAAcV,EAAG3D,GAAE,aACvB,SAAS2D,EAAI,KAXpBA,OCnGTW,GAA8B,KAClC,MAAMvF,EAAWC,IACXR,EAAW+F,KACX7K,eAAEA,GAAmBtC,IACrBoN,EAAqE,UAAtDhG,EAAS3L,OAAoC8N,MAE3D8D,EAAUC,GAAe9M,EAAS,KAClC+M,EAAeC,GAAoBhN,EAAyB,OAC5DpM,EAAO2S,GAAYvG,EAAS,KAC5BU,EAASC,GAAcX,GAAS,IAChCiN,EAAWC,GAAgBlN,EAAS,KACpCmN,EAAeC,GAAoBpN,EAAS,KAE7CqB,EAAaqB,IAuBb2K,EAAiB/Z,UAGrB,GAFAqN,GAAW,IAENoM,EAAe,CAClB,MAAMnZ,MAAEA,GAAUgZ,QACRvL,EAAWrH,oBAAoB6S,SAC/BxL,EAAWxH,eAAegT,GAEpC,GAAIjZ,EACF2S,EAAS,4BACJ,CACL,GAAIqG,EAGF,aAFM9K,SACNqF,EAAS,KAIX6F,GAAiB,EACnB,CACF,CAEArM,GAAW,IAmBP2M,EAAeha,UACnB4Z,EAAa,SAjBO5Z,WACpBiT,EAAS,IACT,MAAM3S,MAAEA,GAAUgZ,QACRvL,EAAWtH,6BACXsH,EAAWzH,kBAEjBhG,EACF2S,EACE,8EAIF2G,EAAa,sCAMTK,GACNL,EAAa,sCA2Cf,OA1BAlM,EAAU,KACR,MAAMwM,EAAWC,YAAY,KAC3BL,EAAiBM,GAASA,EAAO,EAAIA,EAAO,EAAI,IAC/C,KAEH,MAAO,IAAMC,cAAcH,IAC1B,IAEHxM,EAAU,KAaJ+L,IAAkBH,GAZLtZ,WACf,MAAMM,MAAEA,SAAgByN,EAAWpH,kBAE/BrG,EACF2S,EACE,4FAIFY,EAASrD,KAIX8J,IAED,CAACb,EAAeH,EAAazF,EAAU9F,IAGxCO,EAAA,MAAA,CAAKkE,UAAWC,GAAgBnG,SAC9BiG,EAAA,MAAA,CAAKC,UAAWC,GAAWnG,SAAA,CACzBgC,QAAIkE,UAAWC,GAAYnG,SAAA,6BAC3BgC,OAAGkE,UAAWC,0DAEbnS,GAASgO,EAAA,IAAA,CAAGkE,UAAWC,GAAYnG,SAAGhM,IACtCqZ,GAAarL,EAAA,IAAA,CAAGkE,UAAWC,GAAcnG,SAAGqN,IAE7CpH,UAAMsC,SApHS7U,MAAO8U,IAI1B,GAHAA,EAAEC,iBACF9B,EAAS,IAEe,IAApBsG,EAAStO,OAAb,CAKAoC,GAAW,GACX,UACQ0M,GACR,CAAE,MAGA9G,EAAS,6BACX,SACE5F,GAAW,EACb,CAXA,MAFE4F,EAAS,+BA+GuBT,UAAWC,GAAWnG,SAAA,CAClDiG,EAAA,MAAA,CAAAjG,SAAA,CACEiG,WAAO4C,QAAQ,YAAY3C,UAAWC,GAAYnG,SAAA,CAAA,4BAnDrCxG,EAoD4B2T,GAnDhC,IAAb3T,EAA0BwI,EAAA,OAAA,CAAMkE,UAAU,sCAC7B,IAAb1M,EAA2BwI,EAAA,OAAA,CAAMkE,UAAU,mCACxC,WAiD4D,IACzDD,UAAMC,UAAWC,GAAYnG,SAAA,CAAA,qBA/CrBiO,EAgDuBV,EA3ClC,GAJGnB,KAAK8B,MAAMD,EAAU,IAC5BjS,WACAmS,SAAS,EAAG,SACJF,EAAU,IAAIjS,WAAWmS,SAAS,EAAG,cA+CxCnM,EAACiJ,GAAQ,CAACtM,OAAQ,EAAGjK,MAAOuY,EAAUnE,SAAUoE,IAChDlL,EAAA,SAAA,CACE4C,KAAK,SACLwB,QAAS,IAAMsH,IACfxH,UAAWC,GAAanG,SAAA,4BAM5BgC,EAAA,SAAA,CAAQ4C,KAAK,SAASsB,UAAWC,YAC9BrF,EAAU,eAAiB,sBAG9BkB,YACE4C,KAAK,SACLwB,QAAS,IAAMmB,EAAS,UACxBrB,UAAWC,GAAanG,SAAA,0BApEf,IAACiO,EANGzU,GCjFnB4U,GAA8B,KAClC,MAAM7G,EAAWC,IACXR,EAAW+F,KACX7K,eAAEA,GAAmBtC,IACrB6B,EAAaqB,KACbe,iBAAEA,GAAqBD,IACvBoJ,EAAqE,UAAtDhG,EAAS3L,OAAoC8N,MAE3DrI,EAASC,GAAcX,GAAS,IAChCiO,EAAUC,GAAelO,EAAS,KAClCmO,EAAeC,GAAoBpO,EAAS,MAC5CpM,EAAO2S,GAAYvG,EAAS,KAC5BiN,EAAWC,GAAgBlN,EAAS,IA8E3C,OAPAgB,EAAU,KACR,MAAMwM,EAAWC,YAAY,KAC3BW,EAAiBV,GAASA,EAAO,EAAIA,EAAO,EAAI,IAC/C,KAEH,MAAO,IAAMC,cAAcH,IAC1B,IAED5L,EAAA,MAAA,CAAKkE,UAAWC,GAAgBnG,SAC9BiG,EAAA,MAAA,CAAKC,UAAWC,GAAWnG,SAAA,CACzBgC,QAAIkE,UAAWC,GAAYnG,SAAA,sBAE3BgC,OAAGkE,UAAWC,wEAIbnS,GAASgO,EAAA,IAAA,CAAGkE,UAAWC,GAAYnG,SAAGhM,IACtCqZ,GAAarL,EAAA,IAAA,CAAGkE,UAAWC,GAAcnG,SAAGqN,IAE7CpH,UAAMsC,SAtES7U,MAAO8U,IAI1B,GAHAA,EAAEC,iBACF9B,EAAS,IAEe,IAApB0H,EAAS1P,OAAb,CAKAoC,GAAW,GAEX,IACE,MAAM/M,MAAEA,GAAUgZ,QACRvL,EAAWjH,oBAAoB6T,SAC/B5M,EAAWnH,eAAe+T,GAEpC,GAAIra,EAEF,YADA2S,EAAS,wBAIX,GAAIqG,EAGF,aAFM9K,SACNqF,EAAS,KAIP1D,EACF0D,EAASrD,WAEHhC,IACNqF,EAAS,KAEb,CAAE,MAGAhO,QAAQvF,MAAM,kCACd2S,EAAS,uBACX,SACE5F,GAAW,EACb,CAjCA,MAFE4F,EAAS,+BAiEuBT,UAAWC,GAAWnG,SAAA,CAClDiG,EAAA,MAAA,CAAAjG,SAAA,CACEiG,WAAO4C,QAAQ,YAAY3C,UAAWC,GAAYnG,SAAA,CAAA,0BAEhDiG,EAAA,OAAA,CAAMC,UAAWC,GAAYnG,SAAA,CAC1B,IAAG,sBAhCEiO,EAiCwBM,EA5BnC,GAJGnC,KAAK8B,MAAMD,EAAU,IAC5BjS,WACAmS,SAAS,EAAG,SACJF,EAAU,IAAIjS,WAAWmS,SAAS,EAAG,cAgCxCnM,EAACiJ,IACCtM,OAAQ,EACRjK,MAAO2Z,EACPvF,SAAUwF,EACVpD,UAAU,SAGZlJ,EAAA,SAAA,CAAQ4C,KAAK,SAASwB,QAxGV1S,UACpBiT,EAAS,IACT2G,EAAa,IAEb,MAAMtZ,MAAEA,GAAUgZ,QACRvL,EAAWlH,6BACXkH,EAAWpH,kBAEjBrG,EACF2S,EACE,gFAKJ2G,EAAa,wCAyFyCpH,UAAWC,wCAK3DnE,YAAQ4C,KAAK,SAASsB,UAAWC,GAAeiD,SAAUtI,WACvDA,EAAU,eAAiB,sBAG9BkB,YACE4C,KAAK,SACLwB,QAAS,IAAMmB,EAAS,UACxBrB,UAAWC,GAAanG,SAAA,0BAvDf,IAACiO,qxDC9EtB,MAAMQ,GAA4B,KAChC,MAAOC,GAAgBC,IACjBpH,EAAWC,IACX5M,EAAQ8T,EAAarY,IAAI,UAExBrC,EAAO2S,GAAYvG,EAAS,KAC5BwO,EAAYC,GAAiBzO,EAAS,IAEvCqB,EAAaqB,KACbZ,eAAEA,GAAmBtC,IAiE3B,OA/DAwB,EAAU,KACR,IAAI0N,GAAU,EACVC,EAAmC,KACnCC,EAAwD,KAkD5D,MAhDetb,WACb,IAAKkH,EAKH,OAJIkU,GACFnI,EAAS,wCAEXpN,QAAQvF,MAAM,8BAIhB,MAAMA,MAAEA,SAAgByN,EAAW9G,gBAAgBC,GAEnD,GAAI5G,EAKF,OAJAuF,QAAQvF,MAAM,+BACV8a,GACFnI,EAAS,iCAQPzE,IAED4M,IAILC,EAAU,IAAIE,iBAAiB,iBAE/BF,EAAQG,YAAY,CAClBtK,KAAM,4BAGRiK,EACE,gFAGFG,EAAkBG,WAAW,KACtBL,GAILvH,EAAS,MACR,OAEL6H,GAEO,KACLN,GAAU,EACVC,GAASM,QAELL,GACFM,aAAaN,KAGhB,CAACpU,EAAO6G,EAAY8F,EAAUrF,IAG/BF,EAAA,MAAA,CAAKkE,UAAWC,GAAOoD,UAASvJ,SAC9BiG,EAAA,MAAA,CAAKC,UAAWC,GAAOqD,KAAIxJ,SAAA,CACzBgC,EAAA,KAAA,CAAIkE,UAAWC,GAAOsD,MAAKzJ,SAAA,yBAE3BiG,EAAA,MAAA,CAAKC,UAAWC,GAAOoJ,oBAAmBvP,SAAA,EACtC4O,IAAe5a,GAASgO,EAAA,MAAA,CAAKkE,UAAWC,GAAOqJ,UAEhDZ,GACC5M,EAAA,MAAA,CAAKkE,UAAWC,GAAOsJ,YAAWzP,SAChCgC,EAAA,MAAA,CACE0N,QAAQ,YACRxJ,UAAWC,GAAOwJ,UAClBpE,KAAK,OACLqE,OAAO,eACPC,YAAY,IAAG7P,SAEfgC,EAAA,OAAA,CAAM8N,EAAE,wBAKZlB,IAAe5a,GACfgO,EAAA,IAAA,CAAGkE,UAAWC,GAAO4J,WAAU/P,SAAA,4DAKhC4O,GACC5M,EAAA,IAAA,CAAGkE,UAAWC,GAAO6J,sDAGtBhc,GAASgO,EAAA,IAAA,CAAGkE,UAAWC,GAAOnS,MAAKgM,SAAGhM,aC1G3Cic,GAA0B,KAC9B,MAAM9U,iBAAEA,GAAqByE,IACvB2H,EAAWC,KACVkH,GAAgBC,KAChB3a,EAAO2S,GAAYvG,EAAS,IAC7B8P,EAAa9E,GAAO,GA0B1B,OAxBAhK,EAAU,KACR,GAAI8O,EAAWpE,QAAS,OACxBoE,EAAWpE,SAAU,EAErB,MAAM1Q,EAAOsT,EAAarY,IAAI,QACxBgF,EAAQqT,EAAarY,IAAI,SACzB2E,EAAa8L,eAAexF,QAAQ+E,IAErCjL,GAASC,GAAUL,EAKnBG,EAAiB,CAAEH,aAAYI,OAAMC,UAASuL,KAAK,EAAG5S,MAAOmc,MAC5DA,EACFxJ,EAAS,qDAIXG,eAAesJ,WAAW/J,IAC1BkB,EAAS,QAXTZ,EAAS,uDAaV,CAACxL,EAAkBoM,EAAUmH,IAG9BzI,EAAA,MAAA,CAAKC,UAAWC,GAAOoD,UAASvJ,SAAA,CAC9BgC,EAAA,KAAA,CAAIkE,UAAWC,GAAOsD,MAAKzJ,SACxBhM,EAAQ,iBAAmB,0BAE7BA,GACCiS,EAAAqC,EAAA,CAAAtI,SAAA,CACEgC,EAAA,IAAA,CAAAhC,SAAIhM,IACJgO,EAAA,SAAA,CAAQ4C,KAAK,SAASwB,QAAS,IAAMmB,EAAS,UAASvH,SAAA,y9ECvCjE,MAAMqQ,GAA0B,KAC9B,MAAMnO,eAAEA,GAAmBtC,IACrB2H,EAAWC,IACXR,EAAW+F,IACXtL,EAAaqB,IAEbH,EAAaqE,EAAS3L,OAAOsH,YAE5B2N,EAAUC,GAAenQ,EAAS,IAEzCgB,EAAU,KACR,MAAMoP,EAAQ3C,YAAY,KACxB0C,EAAYE,GAAMA,EAAI,EAAIA,EAAI,EAAI,IACjC,KAEH,MAAO,IAAM1C,cAAcyC,IAC1B,IAEH,MAWME,EAAqB9O,EAAYlO,UACrC,MAAMW,KAAEA,EAAIL,MAAEA,SAAgByN,EAAW/G,iBAEzC,OAAQ1G,GAA2B,YAAlBK,GAAMjB,SACtB,CAACqO,IAmCJ,OAjCAL,EAAU,KACR,MAAM2N,EAAU,IAAIE,iBAAiB,iBAWrC,OATAF,EAAQ4B,UAAYjd,MAAMkd,IACC,4BAArBA,EAAMvc,MAAMuQ,YACJ8L,YACFxO,IACNqF,EAAS,OAKR,KACLwH,EAAQM,UAET,CAACqB,EAAoBnJ,EAAUrF,IAElCd,EAAU,KACR,MAAMwM,EAAWC,YAAYna,UAC3B,UACYgd,YACFxO,IACNqF,EAAS,KAEb,CAAE,MAGF,GACC,KAEH,MAAO,IAAMwG,cAAcH,IAC1B,CAAC8C,EAAoBxO,EAAgBqF,IAGtCvF,EAAA,MAAA,CAAKkE,UAAWC,GAAgBnG,SAC9BiG,EAAA,MAAA,CAAKC,UAAWC,aACdF,EAAA,MAAA,CAAKC,UAAWC,GAAkBnG,SAAA,CAChCgC,SAAKkE,UAAWC,KAEhBF,EAAA,MAAA,CACEC,UAAWC,GACXuJ,QAAQ,YACRnE,KAAK,OACLqE,OAAO,eACPC,YAAY,MAAK7P,SAAA,CAEjBgC,EAAA,OAAA,CAAM8N,EAAE,kBACR9N,EAAA,OAAA,CAAM8N,EAAE,uBAIZ9N,EAAA,KAAA,CAAIkE,UAAWC,GAAcnG,SAAA,qBAE7BgC,EAAA,IAAA,CAAGkE,UAAWC,GAAcnG,SAAA,0EAI3B2C,GAAcX,EAAA,MAAA,CAAKkE,UAAWC,YAAoBxD,IAEnDX,EAAA,IAAA,CAAGkE,UAAWC,GAAiBnG,SAAA,4DAI/BgC,EAAA,IAAA,CAAGkE,UAAWC,GAAiBnG,SAAA,mFAI/BiG,EAAA,MAAA,CAAKC,UAAWC,GAAcnG,SAAA,CAC5BgC,EAAA,SAAA,CACEkE,UAAWC,GACXiD,SAAUkH,EAAW,EACrBlK,QAxFK1S,UACT4c,EAAW,UAET7O,EAAWhH,mBAEjB8V,EAAY,MAmFWvQ,SAAA,gBAKhBsQ,EAAW,GACVrK,EAAA,MAAA,CAAKC,UAAWC,GAAenG,SAAA,CAAA,gBAAgBsQ,SAGjDtO,EAAA,SAAA,CAAQkE,UAAWC,GAAmBC,QAAS,IAAMmB,EAAS,UAASvH,SAAA,mCC9GpE6Q,GAAa,IACxB5K,EAAC6K,aACC9O,EAAC+O,EAAK,CAACC,KAAM9M,EAAsB+M,QAASjP,EAACsF,GAAK,CAAA,KAClDtF,EAAC+O,EAAK,CAACC,KAAM9M,EAA6B+M,QAASjP,EAACqH,GAAY,CAAA,KAChErH,EAAC+O,EAAK,CAACC,KAAM9M,EAA+B+M,QAASjP,EAAC8K,GAAiB,CAAA,KACvE9K,EAAC+O,EAAK,CAACC,KAAM9M,GAA+B+M,QAASjP,EAACoM,SACtDpM,EAAC+O,EAAK,CAACC,KAAM9M,GAAgC+M,QAASjP,EAACyM,SACvDzM,EAAC+O,GAAMC,KAAM9M,GAA8B+M,QAASjP,EAACiO,GAAa,CAAA,KAClEjO,EAAC+O,EAAK,CAACC,KAAM9M,GAAgC+M,QAASjP,EAACiI,GAAmB,CAAA,KAC1EjI,EAAC+O,EAAK,CAACC,KAAM9M,GAA8B+M,QAASjP,EAACqO,GAAa,CAAA,KAClErO,EAAC+O,EAAK,CAACC,KAAK,IAAIC,QAASjP,EAACkP,GAASC,GAAIjN,EAAsB1L","x_google_ignoreList":[13]}
+{"version":3,"file":"index.js","sources":["../src/client/errors.ts","../src/client/result.ts","../src/client/webauthnPrf.ts","../src/client/webauthnSupport.ts","../src/client/createSeamlessAuthClient.ts","../src/fetchWithAuth.ts","../src/scopedRoles.ts","../src/session/storage.ts","../src/session/createAuthSession.ts","../src/AuthProvider.tsx","../src/hooks/useAuthClient.ts","../src/hooks/useLoginMethods.ts","../src/utils.ts","../src/hooks/usePasskeySupport.ts","../src/routes.ts","../node_modules/style-inject/dist/style-inject.es.js","../src/components/AuthFallbackOptions.tsx","../src/components/OAuthProviderButtons.tsx","../src/views/Login.tsx","../src/views/PassKeyLogin.tsx","../src/components/DeviceNameModal.tsx","../src/views/PassKeyRegistration.tsx","../src/components/OtpInput.tsx","../src/views/PhoneRegistration.tsx","../src/views/EmailRegistration.tsx","../src/views/VerifyMagicLink.tsx","../src/views/OAuthCallback.tsx","../src/components/MagicLinkSent.tsx","../src/AuthRoutes.tsx"],"sourcesContent":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"function styleInject(css, ref) {\n  if ( ref === void 0 ) ref = {};\n  var insertAt = ref.insertAt;\n\n  if (!css || typeof document === 'undefined') { return; }\n\n  var head = document.head || document.getElementsByTagName('head')[0];\n  var style = document.createElement('style');\n  style.type = 'text/css';\n\n  if (insertAt === 'top') {\n    if (head.firstChild) {\n      head.insertBefore(style, head.firstChild);\n    } else {\n      head.appendChild(style);\n    }\n  } else {\n    head.appendChild(style);\n  }\n\n  if (style.styleSheet) {\n    style.styleSheet.cssText = css;\n  } else {\n    style.appendChild(document.createTextNode(css));\n  }\n}\n\nexport default styleInject;\n",null,null,null,null,null,null,null,null,null,null,null,null,null],"names":["SeamlessAuthError","Error","constructor","message","status","body","cause","super","this","name","OAUTH_ERROR_CODES","oauth_missing_email","oauth_email_not_verified","oauth_missing_subject","readCode","code","getOAuthErrorCode","error","details","Object","prototype","hasOwnProperty","call","undefined","getWebAuthnErrorDetail","value","async","toSeamlessAuthError","response","fallbackMessage","json","extractMessage","readBody","requestResult","request","data","ok","resultOf","resultError","toArrayBuffer","ArrayBuffer","source","Uint8Array","buffer","byteOffset","byteLength","copy","set","encodePrfSalt","salt","bufferToBase64URLString","saltToBufferSource","base64URLStringToBuffer","createPrfRequestBody","input","credentialId","prf","secondSalt","isPasskeyPrfSupported","browserSupportsWebAuthn","window","isSecureContext","globalThis","PublicKeyCredential","navigator","credentials","get","preparePrfRequestOptions","optionsJSON","options","prfEval","extensions","eval","first","second","extractPasskeyPrfResult","credential","extensionResults","clientExtensionResults","results","output","id","outputBase64url","stripPrfResultsFromAssertion","toStepUpStatus","payload","expectedMethod","method","fresh","verifiedAt","expiresAt","maxAgeSeconds","buildAssertionStartInit","JSON","stringify","webAuthnFailure","logContext","thrown","failure","detail","console","createSeamlessAuthClient","opts","fetchWithAuth","authHost","init","url","replace","startsWith","hasBody","requestInit","headers","fetch","createFetchWithAuth","apiHost","getCurrentUser","login","loginWithPasskey","optionsInput","started","assertionResponse","startAuthentication","verified","logout","scope","logoutAllSessions","deleteUser","register","email","phone","requestPhoneOtp","verifyPhoneOtp","verificationToken","requestLoginPhoneOtp","verifyLoginPhoneOtp","requestEmailOtp","verifyEmailOtp","requestLoginEmailOtp","verifyLoginEmailOtp","requestMagicLink","checkMagicLink","verifyMagicLink","token","encodeURIComponent","listOAuthProviders","getPublicSystemConfig","startOAuthLogin","providerId","redirectUri","returnTo","finishOAuthLogin","state","registerPasskey","registerInput","metadata","normalizeRegisterPasskeyInput","challenge","query","URLSearchParams","requirePrf","requestPrf","queryString","toString","buildRegisterStartPath","attestationResponse","startRegistration","WebAuthnError","prfCapable","enabled","getRegistrationPrfCapable","getStepUpStatus","verifyStepUpWithPasskey","verifyStepUpWithPasskeyPrf","getTotpStatus","startTotpEnrollment","verifyTotpEnrollment","disableTotp","verifyStepUpWithTotp","updateCredential","deleteCredential","listOrganizations","createOrganization","getOrganization","organizationId","updateOrganization","switchOrganization","listOrganizationMembers","addOrganizationMember","updateOrganizationMember","userId","removeOrganizationMember","roleGrantsAccess","grantedRole","requiredRole","granted","trim","required","endsWith","prefix","slice","includes","grantedParts","split","requiredParts","grantedAction","length","requiredAction","grantedPrefix","requiredPrefix","every","part","index","hasScopedRole","grantedRoles","requiredRoles","Array","isArray","filter","role","some","createDefaultStorage","localStorage","values","Map","key","createMemoryStorage","getItem","setItem","PREVIOUS_SIGN_IN_KEY","SIGNED_OUT","user","organizations","activeOrganization","stepUpStatus","isAuthenticated","AuthContext","createContext","useAuth","context","useContext","AuthProvider","children","autoDetectPreviousSignin","session","useMemo","detectPreviousSignIn","client","storage","listeners","Set","destroyed","refreshGeneration","loading","hasSignedInBefore","setState","patch","next","keys","forEach","listener","markSignedIn","clearSession","refreshSession","generation","result","refreshAfter","run","getState","subscribe","add","delete","actions","identifier","passkeyAvailable","handlePasskeyLogin","friendlyName","updated","map","current","refreshStepUpStatus","hasRole","roles","rolesGrantScopedAccess","destroy","clear","createAuthSession","useSyncExternalStore","useEffect","_jsx","Provider","useAuthClient","FALLBACK_LOGIN_METHODS","useLoginMethods","authClient","loginMethods","setLoginMethods","useState","setLoading","active","read","hasNonPasskeyLoginMethod","Boolean","isValidEmail","normalized","parts","localPart","domainPart","test","isValidPhoneNumber","phoneNumber","parsePhoneNumberFromString","isValid","isPasskeySupported","isUserVerifyingPlatformAuthenticatorAvailable","isPlatformAuthenticatorAvailable","usePasskeySupport","passkeySupported","setPasskeySupported","supported","checkSupport","authRoutePaths","styleInject","css","ref","insertAt","document","head","getElementsByTagName","style","createElement","type","firstChild","insertBefore","appendChild","styleSheet","cssText","createTextNode","AuthFallbackOptions","onMagicLink","onEmailOtp","onPhoneOtp","onPasskeyRetry","allowedMethods","showMagicLink","has","showEmailOtp","showPhoneOtp","showPasskeyRetry","_jsxs","className","styles","onClick","OAUTH_PROVIDER_STORAGE_KEY","OAuthProviderButtons","callbackHref","useHref","providers","setProviders","setError","then","provider","sessionStorage","URL","location","origin","assign","authorizationUrl","handleSelect","Login","navigate","useNavigate","configuredMethods","setIdentifier","setEmail","mode","setMode","formErrors","setFormErrors","emailError","setEmailError","identifierError","setIdentifierError","showFallbackOptions","setShowFallbackOptions","_Fragment","onSubmit","e","preventDefault","loginStart","availableMethods","passkeyError","htmlFor","onChange","target","autoComplete","placeholder","onBlur","flow","disabled","PassKeyLogin","runPasskeyLogin","container","card","title","button","DeviceNameModal","isOpen","onCancel","onConfirm","setValue","autoFocus","PasskeyRegistration","passkeySupportLoading","loginMethodsLoading","setStatus","setMessage","showDeviceModal","setShowDeviceModal","pendingMetadata","setPendingMetadata","canSkip","finishWithoutPasskey","platform","browser","deviceInfo","ua","userAgent","toLowerCase","brave","parseUserAgent","OtpInput","inputMode","inputs","useRef","concat","fill","handleChange","char","handleBulkInput","newValueArr","newValue","join","focus","cleaned","chars","i","Math","min","onPaste","clipboardData","getData","el","maxLength","onKeyDown","handleKeyDown","PhoneRegistration","useLocation","isLoginFlow","phoneOtp","setPhoneOtp","phoneVerified","setPhoneVerified","resendMsg","setResendMsg","phoneTimeLeft","setPhoneTimeLeft","verifyPhoneOTP","handleResend","onResendPhone","interval","setInterval","prev","clearInterval","nextStep","seconds","floor","padStart","EmailRegistration","emailOtp","setEmailOtp","emailTimeLeft","setEmailTimeLeft","VerifyMagicLink","searchParams","useSearchParams","successMsg","setSuccessMsg","mounted","channel","redirectTimeout","BroadcastChannel","postMessage","setTimeout","verify","close","clearTimeout","verificationContent","spinner","successIcon","viewBox","checkIcon","stroke","strokeWidth","d","helperText","successText","CODE_ERRORS","OAuthCallback","startedRef","finishError","removeItem","MagicLinkSent","cooldown","setCooldown","timer","c","magicLinkCompleted","useCallback","onmessage","event","AuthRoutes","Routes","Route","path","element","Navigate","to"],"mappings":"8jBAYM,MAAOA,UAA0BC,MASrC,WAAAC,CAAYC,EAAiBC,EAAgBC,EAAgBC,GAC3DC,MAAMJ,GACNK,KAAKC,KAAO,oBACZD,KAAKJ,OAASA,EACdI,KAAKH,KAAOA,EACZG,KAAKF,MAAQA,CACf,EAeF,MAAMI,EAAkD,CACtDC,qBAAqB,EACrBC,0BAA0B,EAC1BC,uBAAuB,GAGzB,SAASC,EAAST,GAChB,GAAoB,iBAATA,GAA8B,OAATA,EAIhC,OAAQA,EAA4BU,IACtC,CAYM,SAAUC,EAAkBC,GAChC,KAAMA,aAAiBjB,GACrB,OAGF,GAA0B,iBAAfiB,EAAMZ,MAAoC,OAAfY,EAAMZ,KAC1C,OAGF,MAAMU,EACJD,EAASG,EAAMZ,OAASS,EAAUG,EAAMZ,KAA+Ba,SAEzE,MAAuB,iBAATH,GACZI,OAAOC,UAAUC,eAAeC,KAAKZ,EAAmBK,GACrDA,OACDQ,CACN,CAiCM,SAAUC,EAAuBP,GACrC,KAAMA,aAAiBjB,KAZJ,iBAHnByB,EAe0DR,EAAMX,QAXpD,OAAVmB,GAC8C,iBAAtCA,EAA6BhB,MAWrC,OAjBJ,IACEgB,EAmBA,MAAMhB,KAAEA,EAAIM,KAAEA,EAAIZ,QAAEA,GAAYc,EAAMX,MAEtC,MAAO,CACLG,OACAM,KAAsB,iBAATA,EAAoBA,OAAOQ,EACxCpB,QAA4B,iBAAZA,EAAuBA,EAAU,GAErD,CAuBOuB,eAAeC,EACpBC,EACAC,GAEA,IAAIxB,EAEJ,IACEA,QAAauB,EAASE,MACxB,CAAE,MACAzB,OAAOkB,CACT,CAEA,OAAO,IAAIvB,EAjCb,SAAwBK,GACtB,GAAoB,iBAATA,GAA8B,OAATA,EAC9B,OAKF,MAAMY,MAAEA,EAAKd,QAAEA,GAAYE,EAE3B,MAAqB,iBAAVY,GAAsBA,EACxBA,EAGiB,iBAAZd,GAAwBA,EAAUA,OAAUoB,CAC5D,CAoBIQ,CAAe1B,IAASwB,EACxBD,EAASxB,OACTC,EAEJ,CCvIAqB,eAAeM,EAASJ,GACtB,IACE,aAAaA,EAASE,MACxB,CAAE,MAEA,MACF,CACF,CAMOJ,eAAeO,EACpBC,EACAL,GAEA,IAAID,EAEJ,IACEA,QAAiBM,CACnB,CAAE,MACA,MAAO,CACLC,KAAM,KACNlB,MAAO,IAAIjB,EAAkB6B,EA1BC,GA4BlC,CAEA,OAAKD,EAASQ,GAIP,CAAED,WAAaH,EAASJ,GAAiBX,MAAO,MAH9C,CAAEkB,KAAM,KAAMlB,YAAaU,EAAoBC,EAAUC,GAIpE,CAGM,SAAUQ,EAAYF,GAC1B,MAAO,CAAEA,OAAMlB,MAAO,KACxB,CAGM,SAAUqB,EACdnC,EACAC,EA7CkC,EA8ClCC,EACAC,GAEA,MAAO,CAAE6B,KAAM,KAAMlB,MAAO,IAAIjB,EAAkBG,EAASC,EAAQC,EAAMC,GAC3E,CC5BA,SAASiC,EAAcd,GACrB,GAAIA,aAAiBe,YACnB,OAAOf,EAGT,MAAMgB,EAAS,IAAIC,WAAWjB,EAAMkB,OAAQlB,EAAMmB,WAAYnB,EAAMoB,YAC9DC,EAAO,IAAIJ,WAAWD,EAAOI,YAGnC,OAFAC,EAAKC,IAAIN,GAEFK,EAAKH,MACd,CAUM,SAAUK,EAAcC,GAC5B,MAAoB,iBAATA,EACFA,EAGFC,EAAwBX,EAAcU,GAC/C,CAEA,SAASE,EAAmBF,GAC1B,MAAoB,iBAATA,EACFG,EAAwBH,GAG1BA,CACT,CAEM,SAAUI,EAAqBC,GACnC,MAAO,IACDA,EAAMC,aAAe,CAAEA,aAAcD,EAAMC,cAAiB,GAChEC,IAAK,CACHP,KAAMD,EAAcM,EAAML,SACtBK,EAAMG,WAAa,CAAEA,WAAYT,EAAcM,EAAMG,aAAgB,IAG/E,CAEO/B,eAAegC,IACpB,QCtFKC,MAIiB,oBAAXC,SAAqD,IAA3BA,OAAOC,uBAKA,IAAnCC,WAAWC,qBACG,oBAAdC,WAC+B,mBAA/BA,UAAUC,aAAaC,GD4ElC,CAEM,SAAUC,EACdC,GAEA,MAAMC,EAAUD,EACVE,EAAUD,EAAQE,YAAYf,KAAKgB,KAEzC,OAAKF,EAIE,IACFD,EACHE,WAAY,IACPF,EAAQE,WACXf,IAAK,IACAa,EAAQE,YAAYf,IACvBgB,KAAM,IACDF,KACCA,EAAQG,MAAQ,CAAEA,MAAOtB,EAAmBmB,EAAQG,QAAW,MAC/DH,EAAQI,OAAS,CAAEA,OAAQvB,EAAmBmB,EAAQI,SAAY,OAZrEN,CAiBX,CAEM,SAAUO,EACdC,GAEA,MAAMC,EACJD,EAAWE,uBACPL,EAAQI,GAAkBrB,KAAKuB,SAASN,MAE9C,IAAKA,EACH,OAAO,KAGT,MAAMO,GA3EcvD,EA2EQgD,aA1EPjC,YACZ,IAAIE,WAAWjB,GAGjB,IAAIiB,WAAWjB,EAAMkB,OAAQlB,EAAMmB,WAAYnB,EAAMoB,YAL9D,IAAsBpB,EA6EpB,MAAO,CACL8B,aAAcqB,EAAWK,GACzBD,SACAE,gBAAiBhC,EAAwBX,EAAcyC,IAE3D,CAEM,SAAUG,EACdP,GAEA,MAAMC,EACJD,EAAWE,uBAEb,OAAKD,GAAkBrB,KAAKuB,QAIrB,IACFH,EACHE,uBAAwB,IACnBF,EAAWE,uBACdtB,IAAK,IACAqB,EAAiBrB,IACpBuB,aAASxD,KATNqD,CAaX,CE+HA,SAASQ,EACPC,EACAC,GAEA,MAAMC,EAASF,EAAQE,SAAWD,EAAiBD,EAAQE,OAAS,KAIpE,MAFsB,YAApBF,EAAQlF,UAA2C,IAAlBkF,EAAQG,OAA6B,OAAXD,EAMtDlD,EAAS,CACdmD,OAAO,EACPD,SACAE,WAAYJ,EAAQI,YAAc,KAClCC,UAAWL,EAAQK,WAAa,KAChCC,cAAeN,EAAQM,eAAiB,IARjCrD,EAAY+C,EAAQlF,SAAW,iCAU1C,CA0BA,SAASyF,EAAwBtC,GAC/B,OAAKA,EAIE,CACLiC,OAAQ,OACRlF,KAAMwF,KAAKC,UAAUzC,EAAqBC,KALnC,CAAEiC,OAAQ,OAOrB,CAQA,SAASQ,EACPC,EACA7F,EACA8F,GAEA,MAAMC,EAAU5D,EAAenC,EH5UG,OG4U4BoB,EAAW0E,GACnEE,EAAS3E,EAAuB0E,EAAQjF,OAI9C,OAFAmF,QAAQnF,MAAM+E,EAAYG,GAAQ1F,MAAQ,kBAEnCyF,CACT,CAEO,MAAMG,EACXC,IAEA,MAAMC,EC3W2B,CAACD,IAClC,MAAME,SAAEA,GAAaF,EAErB,OAAO5E,eACL4B,EACAmD,GAEA,MAGMC,EAAM,GAHCF,GAAUG,QAAQ,OAAQ,KAAO,UACjCrD,EAAMsD,WAAW,KAAOtD,EAAQ,IAAIA,MAM3CuD,EAAwB,MAAdJ,GAAMpG,KAEhByG,EAA2B,IAC5BL,EACHxC,YAAa,UACb8C,QAAS,IACHF,EAAU,CAAE,eAAgB,oBAAuB,CAAA,KACpDJ,GAAMM,UAIb,OAAOC,MAAMN,EAAKI,EACpB,GDiVsBG,CAAoB,CACxCT,SAAUF,EAAKY,UAGjB,MAAO,CACLC,eAAgB,IACdlF,EACEsE,EAAc,WAAY,CAAEhB,OAAQ,QACpC,oCAGJ6B,MAAO9D,GACLrB,EACEsE,EAAc,SAAU,CACtBhB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAUxC,KAEvB,4BAGJ+D,iBAAkB3F,MAAM4F,IACtB,MAAMC,QAAgBtF,EACpBsE,EAAc,wBAAyB,IAClCX,EAAwB0B,GAAc9D,OAE3C,kCAGF,GAAI+D,EAAQtG,MACV,OAAOsG,EAGT,IAAI/D,EACAgE,EAEJ,IACE,MAAM5C,QAAoB6C,EAAoB,CAC5CrD,YAAaD,EAAyBoD,EAAQpF,QAEhDqB,EAAMmB,EAAwBC,GAC9B4C,EAAoBrC,EAA6BP,EACnD,CAAE,MAAO3D,GAEP,OAAO8E,EAAgB,uBAAwB,wBAAyB9E,EAC1E,CAEA,MAAMyG,QAAiBzF,EACrBsE,EAAc,yBAA0B,CACtChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CAAE0B,wBAEzB,6BAGF,OAAIE,EAASzG,MACJyG,EAGsB,YAA3BA,EAASvF,MAAMhC,QACVmC,EAAYoF,EAASvF,MAAMhC,SAAW,yBAGxCkC,EAASmB,EAAM,CAAEA,OAAQ,CAAA,IAGlCmE,OAAQ,CAACtD,EAAU,KACjBpC,EACEsE,EAAgC,iBAAlBlC,EAAQuD,MAA2B,cAAgB,UAAW,CAC1ErC,OAAQ,WAEV,uBAGJsC,kBAAmB,IACjB5F,EACEsE,EAAc,cAAe,CAAEhB,OAAQ,WACvC,uCAGJuC,WAAY,IACV7F,EACEsE,EAAc,gBAAiB,CAAEhB,OAAQ,WACzC,iCAGJwC,SAAUzE,GACRrB,EACEsE,EAAc,yBAA0B,CACtChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CACnBkC,MAAO1E,EAAM0E,SACT1E,EAAM2E,MAAQ,CAAEA,MAAO3E,EAAM2E,OAAU,OAG/C,uBAGJC,gBAAiB,IACfjG,EAIEsE,EAAc,0BAA2B,CACvChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,MAEvB,gCAGJqC,eAAgBC,GACdnG,EACEsE,EAAc,wBAAyB,CACrChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CAAEsC,wBAEzB,kCAGJC,qBAAsB,IACpBpG,EAIEsE,EAAc,gCAAiC,CAC7ChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,MAEvB,gCAGJwC,oBAAqBF,GACnBnG,EACEsE,EAAc,8BAA+B,CAC3ChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CAAEsC,wBAEzB,kCAGJG,gBAAiB,IACftG,EAIEsE,EAAc,0BAA2B,CACvChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,MAEvB,kCAGJ0C,eAAgBJ,GACdnG,EACEsE,EAAc,wBAAyB,CACrChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CAAEsC,wBAEzB,oCAGJK,qBAAsB,IACpBxG,EAIEsE,EAAc,gCAAiC,CAC7ChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,MAEvB,kCAGJ4C,oBAAqBN,GACnBnG,EACEsE,EAAc,8BAA+B,CAC3ChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CAAEsC,wBAEzB,oCAMJO,iBAAkB,IAChB1G,EACEsE,EAAc,cAAe,CAAEhB,OAAQ,OAAQlF,KAAMwF,KAAKC,UAAU,CAAA,KACpE,kCAGJ8C,eAAgB,IACd3G,EACEsE,EAAc,oBAAqB,CAAEhB,OAAQ,QAC7C,mCAGJsD,gBAAiBC,GACf7G,EAIEsE,EAAc,sBAAsBwC,mBAAmBD,KAAU,CAC/DvD,OAAQ,QAEV,oCAGJyD,mBAAoB,IAClB/G,EACEsE,EAAc,mBAAoB,CAAEhB,OAAQ,QAC5C,mCAGJ0D,sBAAuB,IACrBhH,EACEsE,EAAc,wBAAyB,CAAEhB,OAAQ,QACjD,mDAGJ2D,gBAAiB5F,GACfrB,EACEsE,EAAc,UAAUwC,mBAAmBzF,EAAM6F,oBAAqB,CACpE5D,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,IACfxC,EAAM8F,YAAc,CAAEA,YAAa9F,EAAM8F,aAAgB,MACzD9F,EAAM+F,SAAW,CAAEA,SAAU/F,EAAM+F,UAAa,OAGxD,gCAGJC,iBAAkBhG,GAChBrB,EACEsE,EAAc,UAAUwC,mBAAmBzF,EAAM6F,uBAAwB,CACvE5D,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CACnB/E,KAAMuC,EAAMvC,KACZwI,MAAOjG,EAAMiG,UAGjB,iCAGJC,gBAAiB9H,MAAM4B,IACrB,MAAMmG,EA7SZ,SACEnG,GAEA,MAAI,aAAcA,EACTA,EAGF,CAAEoG,SAAUpG,EACrB,CAqS4BqG,CAA8BrG,GAC9CsG,QAAkB3H,EACtBsE,EArSR,SAAgCjD,GAC9B,MAAMuG,EAAQ,IAAIC,gBAEdxG,EAAMyG,WACRF,EAAM9G,IAAI,aAAc,QACfO,EAAM0G,YACfH,EAAM9G,IAAI,aAAc,QAG1B,MAAMkH,EAAcJ,EAAMK,WAE1B,MAAO,4BAA2BD,EAAc,IAAIA,IAAgB,GACtE,CAyRsBE,CAAuBV,GAAgB,CAAElE,OAAQ,QAC/D,mDAGF,GAAIqE,EAAU3I,MACZ,OAAO2I,EAGT,IAAIQ,EAEJ,IACEA,QAA4BC,EAAkB,CAAEjG,YAAawF,EAAUzH,MACzE,CAAE,MAAOlB,GACP,OAAIA,aAAiBqJ,EAGZhI,EAAYrB,EAAMR,KH7lBC,OG6lB2Bc,EAAWN,GAG3D8E,EACL,8BACA,+BACA9E,EAEJ,CAEA,MAAMsJ,EF3dN,SAAoCH,GAGxC,MAAMvF,EAAmBuF,EAAoBtF,uBAI7C,OAA0C,IAAnCD,GAAkBrB,KAAKgH,OAChC,CEmdyBC,CAA0BL,GAEvC1C,QAAiBzF,EACrBsE,EAAc,4BAA6B,CACzChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CACnBsE,sBACAV,SAAU,IAAKD,EAAcC,SAAUa,kBAG3C,wBAGF,OAAI7C,EAASzG,MACJyG,EAGFrF,EAAS,CAAEkB,aAAc6G,EAAoBnF,GAAIsF,gBAG1D7G,wBAEAgH,gBAAiB,IACfzI,EACEsE,EAAc,kBAAmB,CAAEhB,OAAQ,QAC3C,kCAGJoF,wBAAyBjJ,UACvB,MAAM6F,QAAgBtF,EACpBsE,EAAc,0BAA2B,CAAEhB,OAAQ,SACnD,2CAGF,GAAIgC,EAAQtG,MACV,OAAOsG,EAGT,IAAIC,EAEJ,IAIEA,EAAoBrC,QAHMsC,EAAoB,CAC5CrD,YAAaD,EAAyBoD,EAAQpF,QAGlD,CAAE,MAAOlB,GACP,OAAO8E,EACL,gCACA,iCACA9E,EAEJ,CAEA,MAAMyG,QAAiBzF,EACrBsE,EAAc,2BAA4B,CACxChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CAAE0B,wBAEzB,4CAGF,OAAIE,EAASzG,MACJyG,EAGFtC,EAAesC,EAASvF,MAAQ,CAAA,EAAI,aAG7CyI,2BAA4BlJ,MAAM4B,IAChC,MAAMiE,QAAgBtF,EACpBsE,EAAc,0BAA2B,IACpCX,EAAwBtC,KAE7B,2CAGF,GAAIiE,EAAQtG,MACV,OAAOsG,EAGT,IAAI/D,EACAgE,EAEJ,IACE,MAAM5C,QAAoB6C,EAAoB,CAC5CrD,YAAaD,EAAyBoD,EAAQpF,QAEhDqB,EAAMmB,EAAwBC,GAC9B4C,EAAoBrC,EAA6BP,EACnD,CAAE,MAAO3D,GACP,OAAO8E,EACL,gCACA,iCACA9E,EAEJ,CAEA,IAAKuC,EACH,OAAOlB,EAAY,sCAGrB,MAAMoF,QAAiBzF,EACrBsE,EAAc,2BAA4B,CACxChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CAAE0B,wBAEzB,4CAGF,GAAIE,EAASzG,MACX,OAAOyG,EAGT,MAAMtH,EAASgF,EAAesC,EAASvF,MAAQ,CAAA,EAAI,YAEnD,OAAI/B,EAAOa,MACFb,EAGFiC,EAAS,IAAKjC,EAAO+B,KAAMoB,aAAcC,EAAID,aAAcC,SAGpEqH,cAAe,IACb5I,EACEsE,EAAc,eAAgB,CAAEhB,OAAQ,QACxC,wCAGJuF,oBAAqB,IACnB7I,EACEsE,EAAc,qBAAsB,CAAEhB,OAAQ,SAC9C,6CAGJwF,qBAAsBhK,GACpBkB,EACEsE,EAAc,sBAAuB,CACnChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CAAE/E,WAEzB,4CAGJiK,YAAajK,GACXkB,EACEsE,EAAc,gBAAiB,CAC7BhB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CAAE/E,WAEzB,wCAGJkK,qBAAsBvJ,MAAMX,IAC1B,MAAM2G,QAAiBzF,EACrBsE,EAAc,mBAAoB,CAChChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAU,CAAE/E,WAEzB,4CAGF,OAAI2G,EAASzG,MACJyG,EAGFtC,EAAesC,EAASvF,MAAQ,CAAA,EAAI,SAG7C+I,iBAAkB5H,GAChBrB,EACEsE,EAAc,oBAAqB,CACjChB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAUxC,KAEvB,gCAGJ6H,iBAAkBlG,GAChBhD,EACEsE,EAAc,oBAAqB,CACjChB,OAAQ,SACRlF,KAAMwF,KAAKC,UAAU,CAAEb,SAEzB,gCAGJmG,kBAAmB,IACjBnJ,EACEsE,EAAc,iBAAkB,CAAEhB,OAAQ,QAC1C,iCAGJ8F,mBAAoB/H,GAClBrB,EACEsE,EAAc,iBAAkB,CAC9BhB,OAAQ,OACRlF,KAAMwF,KAAKC,UAAUxC,KAEvB,kCAGJgI,gBAAiBC,GACftJ,EACEsE,EAAc,kBAAkBwC,mBAAmBwC,KAAmB,CACpEhG,OAAQ,QAEV,gCAGJiG,mBAAoB,CAACD,EAAgBjI,IACnCrB,EACEsE,EAAc,kBAAkBwC,mBAAmBwC,KAAmB,CACpEhG,OAAQ,QACRlF,KAAMwF,KAAKC,UAAUxC,KAEvB,kCAGJmI,mBAAoBF,GAClBtJ,EACEsE,EAAc,kBAAkBwC,mBAAmBwC,YAA0B,CAC3EhG,OAAQ,SAEV,kCAGJmG,wBAAyBH,GACvBtJ,EACEsE,EAAc,kBAAkBwC,mBAAmBwC,aAA2B,CAC5EhG,OAAQ,QAEV,wCAGJoG,sBAAuB,CAACJ,EAAgBjI,IACtCrB,EACEsE,EAAc,kBAAkBwC,mBAAmBwC,aAA2B,CAC5EhG,OAAQ,OACRlF,KAAMwF,KAAKC,UAAUxC,KAEvB,sCAGJsI,yBAA0B,CAACL,EAAgBM,EAAQvI,IACjDrB,EACEsE,EACE,kBAAkBwC,mBAAmBwC,cAA2BxC,mBAAmB8C,KACnF,CACEtG,OAAQ,QACRlF,KAAMwF,KAAKC,UAAUxC,KAGzB,yCAGJwI,yBAA0B,CAACP,EAAgBM,IACzC5J,EACEsE,EACE,kBAAkBwC,mBAAmBwC,cAA2BxC,mBAAmB8C,KACnF,CACEtG,OAAQ,WAGZ,2CEt4BF,SAAUwG,EAAiBC,EAAqBC,GACpD,MAAMC,EAAUF,EAAYG,OACtBC,EAAWH,EAAaE,OAE9B,IAAKD,IAAYE,EACf,OAAO,EAGT,GAAIF,IAAYE,EACd,OAAO,EAGT,GAAIF,EAAQG,SAAS,MAAO,CAC1B,MAAMC,EAASJ,EAAQK,MAAM,GAAG,GAChC,OAAOH,IAAaE,GAAUF,EAASxF,WAAW,GAAG0F,KACvD,CAEA,IAAKF,EAASI,SAAS,KACrB,OAAO,EAGT,IAAKN,EAAQM,SAAS,KACpB,OAAOJ,EAASxF,WAAW,GAAGsF,MAGhC,MAAMO,EAAeP,EAAQQ,MAAM,KAC7BC,EAAgBP,EAASM,MAAM,KAC/BE,EAAgBH,EAAaA,EAAaI,OAAS,GACnDC,EAAiBH,EAAcA,EAAcE,OAAS,GACtDE,EAAgBN,EAAaF,MAAM,GAAG,GACtCS,EAAiBL,EAAcJ,MAAM,GAAG,GAE9C,MACoB,UAAlBK,GACmB,SAAnBE,GACAC,EAAcF,SAAWG,EAAeH,QACxCE,EAAcE,MAAM,CAACC,EAAMC,IAAUD,IAASF,EAAeG,GAEjE,CAEM,SAAUC,EACdC,EACAC,GAEA,IAAKC,MAAMC,QAAQH,GACjB,OAAO,EAGT,MAAMnB,EAAUmB,EAAaI,OAAQC,GAAyC,iBAATA,GAGrE,OAFiBH,MAAMC,QAAQF,GAAiBA,EAAgB,CAACA,IAEjDK,KAAK1B,GACnBC,EAAQyB,KAAK3B,GAAeD,EAAiBC,EAAaC,IAE9D,UCTgB2B,IACd,MAA+B,oBAAjBC,wBAlCd,MAAMC,EAAS,IAAIC,IAEnB,MAAO,CACL7J,IAAK8J,GAAOF,EAAO5J,IAAI8J,IAAQ,KAC/BjL,IAAK,CAACiL,EAAKvM,KACTqM,EAAO/K,IAAIiL,EAAKvM,IAGtB,CA2BMwM,GAxBG,CACL/J,IAAK8J,IACH,IACE,OAAOH,aAAaK,QAAQF,EAC9B,CAAE,MACA,OAAO,IACT,GAEFjL,IAAK,CAACiL,EAAKvM,KACT,IACEoM,aAAaM,QAAQH,EAAKvM,EAC5B,CAAE,MAEF,GAaN,CC7BA,MAAM2M,EAAuB,oBAuEvBC,EAAa,CACjBC,KAAM,KACNrK,YAAa,GACbsK,cAAe,GACfC,mBAAoB,KACpBC,aAAc,KACdC,iBAAiB,GC7BnB,MAAMC,EAAcC,OAA2CrN,GAMlDsN,EAAU,KACrB,MAAMC,EAAUC,EAAWJ,GAC3B,IAAKG,EACH,MAAM,IAAI7O,MAAM,+CAElB,OAAO6O,GASIE,GAA4C,EACvDC,WACA/H,UACAgI,4BAA2B,MAE3B,MAAMC,EAAUC,EACd,IDME,SAA4B/K,GAChC,MAAM6C,QAAEA,EAAOmI,qBAAEA,GAAuB,GAAShL,EAC3CiL,EAASjJ,EAAyB,CAAEa,YACpCqI,EAAUlL,EAAQkL,SAAW3B,IAC7B4B,EAAY,IAAIC,IAEtB,IAAIC,GAAY,EAGZC,EAAoB,EAEpBpG,EAA0B,IACzB8E,EACHuB,SAAS,EACTC,kBACER,GAA8D,SAAtCE,EAAQrL,IAAIkK,IAOxC,SAAS0B,EAASC,GAChB,MAAMC,EAAO,IAAKzG,KAAUwG,GACX5O,OAAO8O,KAAKF,GAAsCpC,KACjEK,GAAOzE,EAAMyE,KAASgC,EAAKhC,MAO7BzE,EAAQyG,EACRR,EAAUU,QAAQC,GAAYA,KAChC,CAEA,SAASC,IACPb,EAAQxM,IAAIqL,EAAsB,QAE9BiB,GACFS,EAAS,CAAED,mBAAmB,GAElC,CAGA,SAASQ,IACPP,EAASzB,EACX,CAsBA3M,eAAe4O,IACb,MAAMC,IAAeZ,EAErBG,EAAS,CAAEF,SAAS,IAEpB,MAAMY,QAAelB,EAAOnI,iBAE5B,OAAIuI,GAAaa,IAAeZ,EACvBa,EAGLA,EAAOvP,OAIToP,IACAP,EAAS,CAAEF,SAAS,IAEbY,IAGTV,EAAS,CACPxB,KAAMkC,EAAOrO,KAAKmM,KAClBrK,YAAauM,EAAOrO,KAAK8B,aAAe,GACxCsK,cAAeiC,EAAOrO,KAAKoM,eAAiB,GAC5CC,mBAAoBgC,EAAOrO,KAAKqM,oBAAsB,KACtDE,iBAAiB,EACjBkB,SAAS,IAGNrG,EAAMsG,mBACTO,IAGKI,EACT,CAEA9O,eAAe+O,EACbC,GAEA,MAAMF,QAAeE,IAMrB,OAJKF,EAAOvP,aACJqP,IAGDE,CACT,CAyHA,MAAO,CACLG,SAAU,IAAMpH,EAChBqH,UAAWT,IACTX,EAAUqB,IAAIV,GAEP,KACLX,EAAUsB,OAAOX,KAGrBY,QAhIkC,CAClC3J,MAAO,CAAC4J,EAAYC,IAClB3B,EAAOlI,MAAM,CAAE4J,aAAYC,qBAE7BC,mBAAoB,IAAMT,EAAa,IAAMnB,EAAOjI,oBAEpDiJ,iBACA3I,OA5EFjG,iBAKE,IACE,aAAa4N,EAAO3H,QACtB,SACE0I,GACF,CACF,EAmEExI,kBAjEFnG,iBACE,IACE,aAAa4N,EAAOzH,mBACtB,SACEwI,GACF,CACF,EA6DEvI,WAAYpG,UACV,MAAM8O,QAAelB,EAAOxH,aAM5B,OAJK0I,EAAOvP,OACVoP,IAGKG,GAGTtF,iBAAkBxJ,MAAMkD,IACtB,MAAMzC,KAAEA,EAAIlB,MAAEA,SAAgBqO,EAAOpE,iBAAiB,CAGpDiG,aAAcvM,EAAWuM,cAAgB,KACzClM,GAAIL,EAAWK,KAGjB,GAAIhE,EACF,MAAO,CAAEkB,KAAM,KAAMlB,SAGvB,MAAMmQ,EAAUjP,EAAKyC,WASrB,OAPAkL,EAAS,CACP7L,YAAasF,EAAMtF,YAAYoN,IAAIC,GACjCA,EAAQrM,KAAOmM,EAAQnM,GAAK,IAAKqM,KAAYF,GAAYE,KAKtD,CAAEnP,KAAMiP,EAASnQ,MAAO,OAGjCkK,iBAAkBzJ,MAAM6B,IACtB,MAAMiN,QAAelB,EAAOnE,iBAAiB5H,GAU7C,OARKiN,EAAOvP,OACV6O,EAAS,CACP7L,YAAasF,EAAMtF,YAAYwJ,OAC7B7I,GAAcA,EAAWK,KAAO1B,KAK/BiN,GAGT/E,mBAAoBF,GAClBkF,EAAa,IAAMnB,EAAO7D,mBAAmBF,IAE/CvC,mBAAoB,IAAMsG,EAAOtG,qBACjCE,gBAAiB5F,GAASgM,EAAOpG,gBAAgB5F,GACjDgG,iBAAkBhG,GAASmN,EAAa,IAAMnB,EAAOhG,iBAAiBhG,IAEtEiO,oBAAqB7P,UACnB,MAAM8O,QAAelB,EAAO5E,kBAK5B,OAFAoF,EAAS,CAAErB,aAAc+B,EAAOvP,MAAQ,KAAOuP,EAAOrO,OAE/CqO,GAGT7F,wBAAyBjJ,UACvB,MAAM8O,QAAelB,EAAO3E,0BAM5B,OAJK6F,EAAOvP,OACV6O,EAAS,CAAErB,aAAc+B,EAAOrO,OAG3BqO,GAGT5F,2BAA4BlJ,MAAM4B,IAChC,MAAMkN,QAAelB,EAAO1E,2BAA2BtH,GAcvD,OAZKkN,EAAOvP,OACV6O,EAAS,CACPrB,aAAc,CACZjJ,MAAOgL,EAAOrO,KAAKqD,MACnBD,OAAQiL,EAAOrO,KAAKoD,OACpBE,WAAY+K,EAAOrO,KAAKsD,WACxBC,UAAW8K,EAAOrO,KAAKuD,UACvBC,cAAe6K,EAAOrO,KAAKwD,iBAK1B6K,GAGTvF,qBAAsBvJ,MAAMX,IAC1B,MAAMyP,QAAelB,EAAOrE,qBAAqBlK,GAMjD,OAJKyP,EAAOvP,OACV6O,EAAS,CAAErB,aAAc+B,EAAOrO,OAG3BqO,GAGTgB,QAAS9D,GAAQnE,EAAM+E,MAAMmD,OAAOjF,SAASkB,GAC7CN,cAAeM,GACbnE,EAAM+E,KAAOoD,EAAuBnI,EAAM+E,KAAKmD,MAAO/D,QAAQnM,EAEhE6O,gBAaAuB,QAAS,KACPjC,GAAY,EACZF,EAAUoC,SAGhB,CCjQMC,CAAkB,CAChB3K,UACAmI,qBAAsBH,IAE1B,CAAChI,EAASgI,IAMN3F,EAAQuI,EACZ3C,EAAQyB,UACRzB,EAAQwB,SACRxB,EAAQwB,UAcVoB,EAAU,KACH5C,EAAQ4B,QAAQT,kBACpB,CAACnB,IAEJ,MAAM1N,EAAQ2N,EACZ,KAAA,IAAY7F,KAAU4F,EAAQ4B,QAAS7J,YACvC,CAACqC,EAAO4F,EAASjI,IAGnB,OAAO8K,EAACrD,EAAYsD,SAAQ,CAACxQ,MAAOA,EAAKwN,SAAGA,KC9HjCiD,GAAgB,KAC3B,MAAMhL,QAAEA,GAAY2H,IAEpB,OAAOO,EACL,IACE/I,EAAyB,CACvBa,YAEJ,CAACA,KCDQiL,GAAwC,CAAC,UAAW,cAWpDC,GAAkB,KAC7B,MAAMC,EAAaH,MACZI,EAAcC,GAAmBC,EAA+B,OAChE5C,EAAS6C,GAAcD,GAAS,GA8BvC,OA5BAT,EAAU,KACR,IAAIW,GAAS,EAsBb,MApBahR,WACX,IACE,MAAMS,KAAEA,EAAIlB,MAAEA,SAAgBoR,EAAWpJ,wBAErCyJ,IAAWzR,GAASkB,GAAMmQ,cAAczF,QAC1C0F,EAAgBpQ,EAAKmQ,aAEzB,CAAE,MAIF,SACMI,GACFD,GAAW,EAEf,GAGGE,GAEE,KACLD,GAAS,IAEV,CAACL,IAEG,CAAEC,eAAc1C,YAUZgD,GAA4BN,GACvCO,QAAQP,GAAc3E,KAAKpI,GAAqB,YAAXA,ICxD1BuN,GAAgB9K,IAC3B,GAAqB,iBAAVA,EAAoB,OAAO,EAGtC,MAAM+K,EAAa/K,EAAMmE,OAGzB,GAAI4G,EAAWlG,OAAS,GAAKkG,EAAWlG,OAAS,IAAK,OAAO,EAG7D,MAAMmG,EAAQD,EAAWrG,MAAM,KAC/B,GAAqB,IAAjBsG,EAAMnG,OAAc,OAAO,EAE/B,MAAOoG,EAAWC,GAAcF,EAGhC,SACG,sBAAsBG,KAAKF,IAC5BA,EAAUrM,WAAW,MACrBqM,EAAU5G,SAAS,MACnB4G,EAAUzG,SAAS,WAOlB,iCAAiC2G,KAAKD,IACvCA,EAAWtM,WAAW,MACtBsM,EAAW7G,SAAS,MACpB6G,EAAWtM,WAAW,MACtBsM,EAAW7G,SAAS,MACpB6G,EAAW1G,SAAS,QAeX4G,GAAsBnL,IACjC,MAAMoL,EAAcC,EAA2BrL,GAC/C,OAAOoL,GAAaE,YAAa,GAO5B7R,eAAe8R,KACpB,OT1CK9R,iBACL,GAAsB,oBAAXkC,OACT,OAAO,EAGT,GACEA,OAAOG,qBAEL,mBADKH,OAAOG,oBAAoB0P,8CAGlC,IACE,aAAa1P,oBAAoB0P,+CACnC,CAAE,MAEA,OADArN,QAAQnF,MAAM,oCACP,CACT,CAGF,OAAO,CACT,CSuBSyS,EACT,CCjEO,MAAMC,GAAoB,KAC/B,MAAOC,EAAkBC,GAAuBrB,GAAS,IAClD5C,EAAS6C,GAAcD,GAAS,GA6BvC,OA3BAT,EAAU,KACR,IAAIW,GAAS,EAqBb,MAnBqBhR,WACnB,IACE,MAAMoS,QAAkBN,KACpBd,GACFmB,EAAoBC,EAExB,CAAE,MACIpB,GACFmB,GAAoB,EAExB,SACMnB,GACFD,GAAW,EAEf,GAGGsB,GAEE,KACLrB,GAAS,IAEV,IAEI,CAAEkB,mBAAkBhE,YCxBhBoE,GACJ,SADIA,GAEG,iBAFHA,GAGK,oBAHLA,GAIK,oBAJLA,GAKM,oBALNA,GAMI,kBANJA,GAOM,oBAPNA,GAQI,mBCzBjB,SAASC,GAAYC,EAAKC,YACnBA,IAAiBA,EAAM,CAAA,GAC5B,IAAIC,EAAWD,EAAIC,SAEnB,GAAKF,GAA2B,oBAAbG,SAAnB,CAEA,IAAIC,EAAOD,SAASC,MAAQD,SAASE,qBAAqB,QAAQ,GAC9DC,EAAQH,SAASI,cAAc,SACnCD,EAAME,KAAO,WAEI,QAAbN,GACEE,EAAKK,WACPL,EAAKM,aAAaJ,EAAOF,EAAKK,YAKhCL,EAAKO,YAAYL,GAGfA,EAAMM,WACRN,EAAMM,WAAWC,QAAUb,EAE3BM,EAAMK,YAAYR,SAASW,eAAed,GAnBW,CAqBzD,8iHCJA,MAAMe,GAA0D,EAC9DjE,aACAkE,cACAC,aACAC,aACAC,iBACA/C,mBAKA,MAAMgD,EAAiB,IAAI7F,IACzB6C,GAAgB,CAAC,UAAW,aAAc,cAEtCiD,EAAgBD,EAAeE,IAAI,eAAiB1C,GAAa9B,GACjEyE,EACJH,EAAeE,IAAI,cAAgB3C,QAAQsC,IAAerC,GAAa9B,GACnE0E,EAAeJ,EAAeE,IAAI,cAAgBpC,GAAmBpC,GACrE2E,EAAmBL,EAAeE,IAAI,YAAc3C,QAAQwC,GAElE,OAAKE,GAAkBE,GAAiBC,GAAiBC,EAKvDC,EAAA,MAAA,CAAKC,UAAWC,GAAmB7G,SAAA,CACjC+C,EAAA,MAAA,CAAK6D,UAAWC,GAAqB7G,SAAA,4BAErC+C,EAAA,IAAA,CAAG6D,UAAWC,GAA0B7G,SAAA,0CAExC2G,EAAA,MAAA,CAAKC,UAAWC,aACbP,GACCK,EAAA,SAAA,CACElB,KAAK,SACLmB,UAAWC,GACXC,QAASb,EAAWjG,SAAA,CAEpB+C,EAAA,OAAA,CAAM6D,UAAWC,GAAkB7G,SAAA,qBACnC+C,EAAA,OAAA,CAAM6D,UAAWC,GAAoB7G,SAAA,gDAMxCwG,GACCG,EAAA,SAAA,CACElB,KAAK,SACLmB,UAAWC,GACXC,QAASZ,EAAUlG,SAAA,CAEnB+C,EAAA,OAAA,CAAM6D,UAAWC,GAAkB7G,SAAA,eACnC+C,EAAA,OAAA,CAAM6D,UAAWC,GAAoB7G,SAAA,wCAIxCyG,GACCE,EAAA,SAAA,CACElB,KAAK,SACLmB,UAAWC,GACXC,QAASX,EAAUnG,SAAA,CAEnB+C,EAAA,OAAA,CAAM6D,UAAWC,GAAkB7G,SAAA,sBACnC+C,EAAA,OAAA,CAAM6D,UAAWC,GAAoB7G,SAAA,0CAK1C0G,GACC3D,EAAA,SAAA,CAAQ0C,KAAK,SAASmB,UAAWC,GAAmBC,QAASV,qCA/C1D,MC7BEW,GAA6B,0BAEpCC,GAAiC,KACrC,MAAMjN,mBAAEA,EAAkBE,gBAAEA,GAAoB2F,IAG1CqH,EAAeC,EAAQ,oBACtBC,EAAWC,GAAgB7D,EAA0B,KACrDvR,EAAOqV,GAAY9D,EAAS,IAcnC,GAZAT,EAAU,KACR,IAAIW,GAAS,EAMb,OAJK1J,IAAqBuN,KAAK,EAAGpU,WAC5BuQ,GAAQ2D,EAAalU,GAAMiU,WAAa,MAGvC,KACL1D,GAAS,IAEV,CAAC1J,IAEqB,IAArBoN,EAAUvJ,OACZ,OAAO,KAsBT,OACE+I,EAAA,MAAA,CAAKC,UAAWC,GAAsB7G,SAAA,CACnCmH,EAAU/E,IAAImF,GACbxE,EAAA,SAAA,CAEE0C,KAAK,SACLmB,UAAWC,GACXC,QAAS,IA1BIrU,OAAOyH,IAC1BmN,EAAS,IAGTG,eAAetI,QAAQ6H,GAA4B7M,GAEnD,MAAMhH,KAAEA,EAAIlB,MAAEA,SAAgBiI,EAAgB,CAC5CC,aACAC,YAAa,IAAIsN,IAAIR,EAActS,OAAO+S,SAASC,QAAQ1M,aAGzDjJ,EACFqV,EAAS,+CAIX1S,OAAO+S,SAASE,OAAO1U,EAAK2U,mBAUPC,CAAaP,EAASvR,IAAGgK,SAExC2G,EAAA,OAAA,CAAMC,UAAWC,GAAkB7G,SAAA,CAAA,iBAAiBuH,EAAS/V,SALxD+V,EAASvR,KASjBhE,GAAS+Q,OAAG6D,UAAWC,GAAY7G,SAAGhO,QCpDvC+V,GAAkB,KACtB,MAAMC,EAAWC,KACXrH,kBAAEA,EAAiBzI,MAAEA,EAAK8J,mBAAEA,GAAuBrC,IACnDwD,EAAaH,MACb0B,iBAAEA,GAAqBD,MACrBrB,aAAc6E,GAAsB/E,MACrCpB,EAAYoG,GAAiB5E,EAAiB,KAC9CxK,EAAOqP,GAAY7E,EAAiB,KACpC8E,EAAMC,GAAW/E,EAA+B,aAChDgF,EAAYC,GAAiBjF,EAAiB,KAC9CkF,EAAYC,GAAiBnF,EAAiB,KAC9CoF,EAAiBC,GAAsBrF,EAAiB,KACxDsF,EAAqBC,GAA0BvF,GAAS,IACxDF,EAAcC,GAAmBC,EAA+B,MAEvET,EAAU,KACJlC,GACF0H,EAAQ,UAET,CAAC1H,IAgIJ,OACEmC,SAAK6D,UAAWC,YACdF,EAAA,MAAA,CAAKC,UAAWC,GAAW7G,SAAA,CACzB+C,EAAA,KAAA,CAAI6D,UAAWC,GAAc7G,SACjB,UAATqI,EAAmB,UAAY,mBAGlC1B,EAAAoC,EAAA,CAAA/I,SAAA,CACE2G,UAAMqC,SA5DOvW,MAAOwW,IAC1BA,EAAEC,iBACFV,EAAc,IACdM,GAAuB,GAEvB,IACE,GAAa,UAATT,EAAkB,CACpB,MAAQnV,KAAMiW,EAAUnX,MAAEA,SAAgBmG,EAAM4J,EAAY4C,GAE5D,GAAI3S,EAEF,YADAwW,EAAc,8CAOhB,MAAMY,EAAmBD,GAAY9F,cAAczF,OAC/CuL,EAAW9F,aACV6E,GAAqBhF,GAG1B,GAFAI,EAAgB8F,GAEZzE,GAAoByE,EAAiB7L,SAAS,WAAY,CAC5D,MAAQvL,MAAOqX,SAAuBpH,IAEtC,OAAKoH,GAKLP,GAAuB,QACvBN,EACE,gFANAR,EAAS,IASb,CAGA,YADAc,GAAuB,EAEzB,CAEa,aAATT,QAhGS5V,WACf+V,EAAc,IAEd,MAAMtV,KAAEA,EAAIlB,MAAEA,SAAgBoR,EAAWtK,SAAS,CAChDC,UAGE/G,EACFwW,EAAc,yCAIK,YAAjBtV,EAAKhC,QAOT8W,EAASjD,IANPyD,EACE,uFAmFM1P,EAEV,CAAE,MAGA3B,QAAQnF,MAAM,+BACdwW,EAAc,gDAChB,GAWkCxI,SAAA,CAChB,UAATqI,GACC1B,EAAA,MAAA,CAAKC,UAAWC,aACd9D,EAAA,QAAA,CAAOuG,QAAQ,aAAa1C,UAAWC,GAAY7G,SAAA,iCAGnD+C,WACE/M,GAAG,aACHyP,KAAK,OACLjT,MAAOuP,EACPwH,SA3IgBN,IAC9B,MAAMzW,EAAQyW,EAAEO,OAAOhX,MACvB2V,EAAc3V,IA0IAiX,aAAa,MACbC,YAAY,wBACZ9C,UAAWC,GACX8C,OAAQ,KACN,GAAI5H,EAAY,CACd,MAAMuC,EACJT,GAAa9B,IAAeoC,GAAmBpC,GACjD6G,EACEtE,EAAU,GAAK,6CAEnB,GAEFnH,UAAQ,IAEV4F,EAAA,IAAA,CAAG6D,UAAWC,GAAiB7G,SAAA,sDAG9B6I,GACC9F,EAACiD,GAAmB,CAClBjE,WAAYA,EACZkE,YA5HIxT,UACpB,MAAMT,MAAEA,SAAgBoR,EAAW1J,mBAE/B1H,EACFwW,EAAc,8BAIhBR,EAASjD,GAA8B,CAAEzK,MAAO,CAAEyH,iBAqHlCmE,WAvGGzT,UACnB,MAAMT,MAAEA,SAAgBoR,EAAW5J,uBAE/BxH,EACFwW,EAAc,8BAIhBR,EAASjD,GAA+B,CAAEzK,MAAO,CAAEsP,KAAM,YAgGzCzD,WAnHG1T,UACnB,MAAMT,MAAEA,SAAgBoR,EAAWhK,uBAE/BpH,EACFwW,EAAc,uBAIhBR,EAASjD,GAA+B,CAAEzK,MAAO,CAAEsP,KAAM,YA4GzCxD,eAAgBzB,EAAmB1C,OAAqB3P,EACxD+Q,aAAcA,IAIjBsF,GAAmB5F,EAAA,IAAA,CAAG6D,UAAWC,YAAe8B,OAG3C,aAATN,GACC1B,EAAA,MAAA,CAAKC,UAAWC,GAAiB7G,SAAA,CAC/B+C,EAAA,QAAA,CAAOuG,QAAQ,QAAQ1C,UAAWC,GAAY7G,SAAA,kBAG9C+C,EAAA,QAAA,CACE/M,GAAG,QACHyP,KAAK,QACLjT,MAAOuG,EACPwQ,SAzLWN,IACzB,MAAMlQ,EAAQkQ,EAAEO,OAAOhX,MACvB4V,EAASrP,IAwLK0Q,aAAa,MACb7C,UAAWC,GACX8C,OAAQ,KACN,GAAI5Q,EAAO,CACT,MAAMuL,EAAUT,GAAa9K,GAC7B2P,EAAcpE,EAAU,GAAK,6BAC/B,GAEFnH,UAAQ,IAETsL,GAAc1F,EAAA,IAAA,CAAG6D,UAAWC,GAAY7G,SAAGyI,OAGhD1F,EAAA,SAAA,CAAQ0C,KAAK,SAASmB,UAAWC,GAAegD,WA5L3C,UAATxB,GAAoBtG,EACf8B,GAAa9B,IAAeoC,GAAmBpC,GAIjD8B,GAAa9K,aAwLA,UAATsP,EAAmB,QAAU,aAE/BE,GAAcxF,EAAA,IAAA,CAAG6D,UAAWC,GAAY7G,SAAGuI,IAC5CxF,EAAA,SAAA,CACE0C,KAAK,SACLqB,QAAS,IAAMwB,EAAiB,UAATD,EAAmB,WAAa,SACvDzB,UAAWC,GAAa7G,SAEd,UAATqI,EACG,oCACA,wCAIRtF,EAACiE,GAAoB,CAAA,miCClP/B,MAAM8C,GAAyB,KAC7B,MAAM9B,EAAWC,KACThG,mBAAoB8H,GAAoBnK,KACzC5N,EAAOqV,GAAY9D,EAAS,IAenC,OACER,SAAK6D,UAAWC,GAAOmD,UAAShK,SAC9B2G,EAAA,MAAA,CAAKC,UAAWC,GAAOoD,eACrBlH,EAAA,KAAA,CAAI6D,UAAWC,GAAOqD,MAAKlK,SAAA,uBAC3B+C,EAAA,SAAA,CAAQ+D,QAjBkBrU,UAC9B4U,EAAS,IAET,MAAQrV,MAAOqX,SAAuBU,IAEjCV,EAKLhC,EAAS,uEAJPW,EAAS,MAWmCpB,UAAWC,GAAOsD,OAAMnK,SAAA,gBAGjEhO,GAAS+Q,OAAG6D,UAAWC,GAAO7U,MAAKgO,SAAGhO,4iHCtB/C,MAAMoY,GAAkD,EACtDC,SACAC,WACAC,gBAEA,MAAO/X,EAAOgY,GAAYjH,EAAS,IAEnC,OAAK8G,EAGHtH,EAAA,MAAA,CAAK6D,UAAWC,GAAc7G,SAC5B2G,EAAA,MAAA,CAAKC,UAAWC,GAAY7G,SAAA,CAC1B+C,EAAA,KAAA,CAAA/C,SAAA,qBACA+C,EAAA,IAAA,CAAG6D,UAAWC,GAAkB7G,SAAA,qEAIhC+C,EAAA,QAAA,CACE0C,KAAK,OACLiE,YAAY,qCACZlX,MAAOA,EACP+W,SAAUN,GAAKuB,EAASvB,EAAEO,OAAOhX,OACjCoU,UAAWC,GACX4D,WAAS,IAGX9D,EAAA,MAAA,CAAKC,UAAWC,GAAc7G,SAAA,CAC5B+C,EAAA,SAAA,CAAQ+D,QAASwD,EAAU1D,UAAWC,GAAgB7G,SAAA,WAGtD+C,EAAA,SAAA,CACE+D,QAAS,IAAMyD,EAAU/X,EAAM0K,QAC/B2M,UAAWrX,EAAM0K,OACjB0J,UAAWC,GAAc7G,SAAA,qBA1Bf,MCJhB0K,GAAgC,KACpC,MAAMrJ,eAAEA,GAAmBzB,IACrBwD,EAAaH,MACb0B,iBAAEA,EAAkBhE,QAASgK,GAA0BjG,MACvDrB,aAAEA,EAAc1C,QAASiK,GAAwBzH,KACjD6E,EAAWC,KAEV9W,EAAQ0Z,GAAatH,EAAmD,SACxErS,EAAS4Z,GAAcvH,EAAS,KAEhCwH,EAAiBC,GAAsBzH,GAAS,IAChD0H,EAAiBC,GAAsB3H,EAIpC,MASJ4H,EAAUxH,GAAyBN,GAEnC+H,EAAuB3Y,gBACrB4O,IACN2G,EAAS,MAyCX,OACErB,eACE5D,EAAA,MAAA,CAAK6D,UAAWC,GAAgB7G,SAC9B+C,EAAA,MAAA,CAAK6D,UAAWC,GAAW7G,SAEvB2G,EAAA,MADDgE,GAAyBC,EACxB,CAAKhE,UAAWC,GAAc7G,SAAA,CAC5B+C,SAAK6D,UAAWC,KAChB9D,EAAA,OAAA,CAAA/C,SAAA,sCAEC2E,GAuBEiC,UAAWC,GAAgB7G,SAAA,CAC9B+C,EAAA,KAAA,CAAI6D,UAAWC,GAAY7G,SAAA,uCAC3B+C,OAAG6D,UAAWC,GAAkB7G,SAAA,2EAIhC+C,EAAA,SAAA,CACE+D,QA7EU,KACtB,MAAMuE,SAAEA,EAAQC,QAAEA,EAAOC,WAAEA,cT8B7B,MAAMC,EAAKzW,UAAU0W,UAAUC,cAE/B,IAAIL,EAAW,UACXC,EAAU,UAuBd,MArBI,mBAAmBpH,KAAKsH,GAAKH,EAAW,MACnC,UAAUnH,KAAKsH,GAAKH,EAAW,UAC/B,SAASnH,KAAKsH,GAAKH,EAAW,MAC9B,UAAUnH,KAAKsH,GAAKH,EAAW,UAC/B,QAAQnH,KAAKsH,KAAKH,EAAW,SAMjCtW,UAAiC4W,MAAOL,EAAU,QAC9C,eAAepH,KAAKsH,GAAKF,EAAU,OACnC,oBAAoBpH,KAAKsH,GAAKF,EAAU,QACxC,UAAUpH,KAAKsH,GAAKF,EAAU,UAC9B,iBAAiBpH,KAAKsH,GAAKF,EAAU,UACrC,gBAAgBpH,KAAKsH,GAAKF,EAAU,UACpC,eAAepH,KAAKsH,GAAKF,EAAU,SACnC,SAASpH,KAAKsH,KAAKF,EAAU,UAI/B,CAAED,WAAUC,UAASC,WAFT,GAAGF,OAAcC,IAGtC,CSzD8CM,GAE1CV,EAAmB,CAAEG,WAAUC,UAASC,eACxCP,GAAmB,IA0EPnB,SAAqB,YAAX1Y,EACVyV,UAAWC,GAAa7G,SAEZ,YAAX7O,EAAuB,iBAAmB,qBAG5CD,GACC6R,EAAA,IAAA,CACE6D,UAAW,GAAGC,MACD,YAAX1V,EAAuB0V,GAAiBA,KACxC7G,SAED9O,IAIJia,GACCpI,EAAA,SAAA,CACE0C,KAAK,SACLqB,QAASsE,EACTvB,SAAqB,YAAX1Y,EACVyV,UAAWC,GAAW7G,SAAA,mBAhD5B,CAAK4G,UAAWC,GAAgB7G,SAAA,CAC9B+C,EAAA,KAAA,CAAI6D,UAAWC,GAAY7G,SAAA,oCAC3B+C,EAAA,IAAA,CAAG6D,UAAWC,GAAkB7G,SAC7BmL,EACG,uHACA,gJAGLA,GACCpI,EAAA,SAAA,CACE0C,KAAK,SACLqB,QAASsE,EACTxE,UAAWC,GAAa7G,SAAA,oBA8CpC+C,EAACqH,GAAe,CACdC,OAAQU,EACRT,SAAU,KACRU,GAAmB,GACnBE,EAAmB,OAErBX,UA5GuB9X,MAAOyP,IAClC,IAAK+I,EAAiB,OAEtB,MAAMxQ,EAA4B,CAChCyH,kBACG+I,GAGLJ,EAAU,WAEV,IACE,MAAM7Y,MAAEA,SAAgBoR,EAAW7I,gBAAgBE,GAEnD,GAAIzI,EACF,MAAMA,QAGFqP,IACNwJ,EAAU,WACVC,EAAW,oCACX9C,EAAS,IACX,CAAE,MACA7Q,QAAQnF,MAAM,gCACd6Y,EAAU,SACVC,EAAW,6BACb,SACEE,GAAmB,GACnBE,EAAmB,KACrB,4qFCnEJ,MAAMW,GAA4B,EAChCjO,SAAS,EACTpL,QACAsZ,YAAY,UACZvC,WACA/X,OAAO,UAEP,MAAMua,EAASC,EAAuC,IAEhDnN,EAASrM,EAAMiL,MAAM,IAAIwO,OAAO3N,MAAMV,GAAQsO,KAAK,KAAK5O,MAAM,EAAGM,GAOjEuO,EAAe,CAACjO,EAAe7J,KALjB,IAAC+X,EAMnB,GAAI/X,EAAMuJ,OAAS,EACjByO,EAAgBnO,EAAO7J,QAIzB,IAAKA,IAXc+X,EAWO/X,EAVR,YAAdyX,EAAgC,OAAO5H,KAAKkI,GACzC,aAAalI,KAAKkI,IASS,CAChC,MAAME,EAAc,IAAIzN,GACxByN,EAAYpO,GAAS7J,EAErB,MAAMkY,EAAWD,EAAYE,KAAK,IAClCjD,EAASgD,GAELlY,GAAS0X,EAAO1J,QAAQnE,EAAQ,IAClC6N,EAAO1J,QAAQnE,EAAQ,IAAIuO,OAE/B,GAGIJ,EAAkB,CAACnO,EAAe7J,KACtC,IAAIqY,EAAUrY,EAGZqY,EADgB,YAAdZ,EACQzX,EAAMqD,QAAQ,MAAO,IAErBrD,EAAMqD,QAAQ,aAAc,IAGxC,MAAMiV,EAAQD,EAAQpP,MAAM,EAAGM,GAAQH,MAAM,IAEvC6O,EAAc,IAAIzN,GAExB8N,EAAM1L,QAAQ,CAACmL,EAAMQ,KACf1O,EAAQ0O,EAAIhP,IACd0O,EAAYpO,EAAQ0O,GAAKR,KAI7B7C,EAAS+C,EAAYE,KAAK,KAC1BT,EAAO1J,QAAQwK,KAAKC,IAAI5O,EAAQyO,EAAM/O,OAAQA,EAAS,KAAK6O,SAiC9D,OACE1J,EAAA,MAAA,CACE6D,UAAWC,GACXpI,KAAK,QAAO,aACD,0BACXsO,QAViB9D,IACnBA,EAAEC,iBACFmD,EAAgB,EAAGpD,EAAE+D,cAAcC,QAAQ,UAQrBjN,SAEnBnB,EAAOuD,IAAI,CAACgK,EAAMQ,IACjB7J,EAAA,QAAA,CAEEmC,IAAKgI,GAAOnB,EAAO1J,QAAQuK,GAAKM,EAChCzH,KAAK,OACLqG,UAAyB,YAAdA,EAA0B,UAAY,OACjDrC,aAAa,gBACbjY,KAAM,GAAGA,KAAQob,IACjBO,UAAW,EACX3a,MAAO4Z,EACPxF,UAAWC,GACX0C,SAAUN,GAAKkD,EAAaS,EAAG3D,EAAEO,OAAOhX,OACxC4a,UAAWnE,GAjDG,EAAC/K,EAAe+K,KACpC,GAAc,cAAVA,EAAElK,IAAqB,CACzBkK,EAAEC,iBAEF,MAAMoD,EAAc,IAAIzN,GAEpBA,EAAOX,IACToO,EAAYpO,GAAS,GACrBqL,EAAS+C,EAAYE,KAAK,MACjBtO,EAAQ,IACjBoO,EAAYpO,EAAQ,GAAK,GACzBqL,EAAS+C,EAAYE,KAAK,KAC1BT,EAAO1J,QAAQnE,EAAQ,IAAIuO,QAE/B,CAEc,cAAVxD,EAAElK,KAAuBb,EAAQ,GACnC6N,EAAO1J,QAAQnE,EAAQ,IAAIuO,QAGf,eAAVxD,EAAElK,KAAwBb,EAAQN,EAAS,GAC7CmO,EAAO1J,QAAQnE,EAAQ,IAAIuO,SA4BPY,CAAcT,EAAG3D,GAAE,aACvB,SAAS2D,EAAI,KAXpBA,OCnGTU,GAA8B,KAClC,MAAMtF,EAAWC,IACXP,EAAW6F,KACXlM,eAAEA,GAAmBzB,IACrB4N,EAAqE,UAAtD9F,EAASpN,OAAoCsP,MAE3D6D,EAAUC,GAAenK,EAAS,KAClCoK,EAAeC,GAAoBrK,EAAyB,OAC5DvR,EAAOqV,GAAY9D,EAAS,KAC5B5C,EAAS6C,GAAcD,GAAS,IAChCsK,EAAWC,GAAgBvK,EAAS,KACpCwK,EAAeC,GAAoBzK,EAAS,KAE7CH,EAAaH,KAuBbgL,EAAiBxb,UAGrB,GAFA+Q,GAAW,IAENmK,EAAe,CAClB,MAAM3b,MAAEA,GAAUwb,QACRpK,EAAW/J,oBAAoBoU,SAC/BrK,EAAWlK,eAAeuU,GAEpC,GAAIzb,EACFqV,EAAS,4BACJ,CACL,GAAImG,EAGF,aAFMnM,SACN2G,EAAS,KAIX4F,GAAiB,EACnB,CACF,CAEApK,GAAW,IAmBP0K,EAAezb,UACnBqb,EAAa,SAjBOrb,WACpB4U,EAAS,IACT,MAAMrV,MAAEA,GAAUwb,QACRpK,EAAWhK,6BACXgK,EAAWnK,kBAEjBjH,EACFqV,EACE,8EAIFyG,EAAa,sCAMTK,GACNL,EAAa,sCA2Cf,OA1BAhL,EAAU,KACR,MAAMsL,EAAWC,YAAY,KAC3BL,EAAiBM,GAASA,EAAO,EAAIA,EAAO,EAAI,IAC/C,KAEH,MAAO,IAAMC,cAAcH,IAC1B,IAEHtL,EAAU,KAaJ6K,IAAkBH,GAZL/a,WACf,MAAMT,MAAEA,SAAgBoR,EAAW9J,kBAE/BtH,EACFqV,EACE,4FAIFW,EAASjD,KAIXyJ,IAED,CAACb,EAAeH,EAAaxF,EAAU5E,IAGxCL,EAAA,MAAA,CAAK6D,UAAWC,GAAgB7G,SAC9B2G,EAAA,MAAA,CAAKC,UAAWC,GAAW7G,SAAA,CACzB+C,QAAI6D,UAAWC,GAAY7G,SAAA,6BAC3B+C,OAAG6D,UAAWC,0DAEb7U,GAAS+Q,EAAA,IAAA,CAAG6D,UAAWC,GAAY7G,SAAGhO,IACtC6b,GAAa9K,EAAA,IAAA,CAAG6D,UAAWC,GAAc7G,SAAG6N,IAE7ClH,UAAMqC,SApHSvW,MAAOwW,IAI1B,GAHAA,EAAEC,iBACF7B,EAAS,IAEe,IAApBoG,EAAS7P,OAAb,CAKA4F,GAAW,GACX,UACQyK,GACR,CAAE,MAGA5G,EAAS,6BACX,SACE7D,GAAW,EACb,CAXA,MAFE6D,EAAS,+BA+GuBT,UAAWC,GAAW7G,SAAA,CAClD2G,EAAA,MAAA,CAAA3G,SAAA,CACE2G,WAAO2C,QAAQ,YAAY1C,UAAWC,GAAY7G,SAAA,CAAA,4BAnDrCvH,EAoD4BkV,GAnDhC,IAAblV,EAA0BsK,EAAA,OAAA,CAAM6D,UAAU,sCAC7B,IAAbnO,EAA2BsK,EAAA,OAAA,CAAM6D,UAAU,mCACxC,WAiD4D,IACzDD,UAAMC,UAAWC,GAAY7G,SAAA,CAAA,qBA/CrByO,EAgDuBV,EA3ClC,GAJGlB,KAAK6B,MAAMD,EAAU,IAC5BxT,WACA0T,SAAS,EAAG,SACJF,EAAU,IAAIxT,WAAW0T,SAAS,EAAG,cA+CxC5L,EAAC8I,GAAQ,CAACjO,OAAQ,EAAGpL,MAAOib,EAAUlE,SAAUmE,IAChD3K,EAAA,SAAA,CACE0C,KAAK,SACLqB,QAAS,IAAMoH,IACftH,UAAWC,GAAa7G,SAAA,4BAM5B+C,EAAA,SAAA,CAAQ0C,KAAK,SAASmB,UAAWC,YAC9BlG,EAAU,eAAiB,sBAG9BoC,YACE0C,KAAK,SACLqB,QAAS,IAAMkB,EAAS,UACxBpB,UAAWC,GAAa7G,SAAA,0BApEf,IAACyO,EANGhW,GCjFnBmW,GAA8B,KAClC,MAAM5G,EAAWC,IACXP,EAAW6F,KACXlM,eAAEA,GAAmBzB,IACrBwD,EAAaH,MACb0B,iBAAEA,GAAqBD,KACvB8I,EAAqE,UAAtD9F,EAASpN,OAAoCsP,MAE3DjJ,EAAS6C,GAAcD,GAAS,IAChCsL,EAAUC,GAAevL,EAAS,KAClCwL,EAAeC,GAAoBzL,EAAS,MAC5CvR,EAAOqV,GAAY9D,EAAS,KAC5BsK,EAAWC,GAAgBvK,EAAS,IA8E3C,OAPAT,EAAU,KACR,MAAMsL,EAAWC,YAAY,KAC3BW,EAAiBV,GAASA,EAAO,EAAIA,EAAO,EAAI,IAC/C,KAEH,MAAO,IAAMC,cAAcH,IAC1B,IAEDrL,EAAA,MAAA,CAAK6D,UAAWC,GAAgB7G,SAC9B2G,EAAA,MAAA,CAAKC,UAAWC,GAAW7G,SAAA,CACzB+C,QAAI6D,UAAWC,GAAY7G,SAAA,sBAE3B+C,OAAG6D,UAAWC,wEAIb7U,GAAS+Q,EAAA,IAAA,CAAG6D,UAAWC,GAAY7G,SAAGhO,IACtC6b,GAAa9K,EAAA,IAAA,CAAG6D,UAAWC,GAAc7G,SAAG6N,IAE7ClH,UAAMqC,SAtESvW,MAAOwW,IAI1B,GAHAA,EAAEC,iBACF7B,EAAS,IAEe,IAApBwH,EAASjR,OAAb,CAKA4F,GAAW,GAEX,IACE,MAAMxR,MAAEA,GAAUwb,QACRpK,EAAW3J,oBAAoBoV,SAC/BzL,EAAW7J,eAAesV,GAEpC,GAAI7c,EAEF,YADAqV,EAAS,wBAIX,GAAImG,EAGF,aAFMnM,SACN2G,EAAS,KAIPrD,EACFqD,EAASjD,WAEH1D,IACN2G,EAAS,KAEb,CAAE,MAGA7Q,QAAQnF,MAAM,kCACdqV,EAAS,uBACX,SACE7D,GAAW,EACb,CAjCA,MAFE6D,EAAS,+BAiEuBT,UAAWC,GAAW7G,SAAA,CAClD2G,EAAA,MAAA,CAAA3G,SAAA,CACE2G,WAAO2C,QAAQ,YAAY1C,UAAWC,GAAY7G,SAAA,CAAA,0BAEhD2G,EAAA,OAAA,CAAMC,UAAWC,GAAY7G,SAAA,CAC1B,IAAG,sBAhCEyO,EAiCwBM,EA5BnC,GAJGlC,KAAK6B,MAAMD,EAAU,IAC5BxT,WACA0T,SAAS,EAAG,SACJF,EAAU,IAAIxT,WAAW0T,SAAS,EAAG,cAgCxC5L,EAAC8I,IACCjO,OAAQ,EACRpL,MAAOqc,EACPtF,SAAUuF,EACVhD,UAAU,SAGZ/I,EAAA,SAAA,CAAQ0C,KAAK,SAASqB,QAxGVrU,UACpB4U,EAAS,IACTyG,EAAa,IAEb,MAAM9b,MAAEA,GAAUwb,QACRpK,EAAW5J,6BACX4J,EAAW9J,kBAEjBtH,EACFqV,EACE,gFAKJyG,EAAa,wCAyFyClH,UAAWC,wCAK3D9D,YAAQ0C,KAAK,SAASmB,UAAWC,GAAegD,SAAUlJ,WACvDA,EAAU,eAAiB,sBAG9BoC,YACE0C,KAAK,SACLqB,QAAS,IAAMkB,EAAS,UACxBpB,UAAWC,GAAa7G,SAAA,0BAvDf,IAACyO,qxDC9EtB,MAAMQ,GAA4B,KAChC,MAAOC,GAAgBC,IACjBnH,EAAWC,IACXpO,EAAQqV,EAAaja,IAAI,UAExBjD,EAAOqV,GAAY9D,EAAS,KAC5B6L,EAAYC,GAAiB9L,EAAS,IAEvCH,EAAaH,MACb5B,eAAEA,GAAmBzB,IAiE3B,OA/DAkD,EAAU,KACR,IAAIwM,GAAU,EACVC,EAAmC,KACnCC,EAAwD,KAkD5D,MAhDe/c,WACb,IAAKoH,EAKH,OAJIyV,GACFjI,EAAS,wCAEXlQ,QAAQnF,MAAM,8BAIhB,MAAMA,MAAEA,SAAgBoR,EAAWxJ,gBAAgBC,GAEnD,GAAI7H,EAKF,OAJAmF,QAAQnF,MAAM,+BACVsd,GACFjI,EAAS,iCAQPhG,IAEDiO,IAILC,EAAU,IAAIE,iBAAiB,iBAE/BF,EAAQG,YAAY,CAClBjK,KAAM,4BAGR4J,EACE,gFAGFG,EAAkBG,WAAW,KACtBL,GAILtH,EAAS,MACR,OAEL4H,GAEO,KACLN,GAAU,EACVC,GAASM,QAELL,GACFM,aAAaN,KAGhB,CAAC3V,EAAOuJ,EAAY4E,EAAU3G,IAG/B0B,EAAA,MAAA,CAAK6D,UAAWC,GAAOmD,UAAShK,SAC9B2G,EAAA,MAAA,CAAKC,UAAWC,GAAOoD,KAAIjK,SAAA,CACzB+C,EAAA,KAAA,CAAI6D,UAAWC,GAAOqD,MAAKlK,SAAA,yBAE3B2G,EAAA,MAAA,CAAKC,UAAWC,GAAOkJ,oBAAmB/P,SAAA,EACtCoP,IAAepd,GAAS+Q,EAAA,MAAA,CAAK6D,UAAWC,GAAOmJ,UAEhDZ,GACCrM,EAAA,MAAA,CAAK6D,UAAWC,GAAOoJ,YAAWjQ,SAChC+C,EAAA,MAAA,CACEmN,QAAQ,YACRtJ,UAAWC,GAAOsJ,UAClBjE,KAAK,OACLkE,OAAO,eACPC,YAAY,IAAGrQ,SAEf+C,EAAA,OAAA,CAAMuN,EAAE,wBAKZlB,IAAepd,GACf+Q,EAAA,IAAA,CAAG6D,UAAWC,GAAO0J,WAAUvQ,SAAA,4DAKhCoP,GACCrM,EAAA,IAAA,CAAG6D,UAAWC,GAAO2J,sDAGtBxe,GAAS+Q,EAAA,IAAA,CAAG6D,UAAWC,GAAO7U,MAAKgO,SAAGhO,aCvG3Cye,GAA8C,CAClD/e,oBACE,0HACFC,yBACE,4GACFC,sBACE,4GAGE8e,GAA0B,KAC9B,MAAMrW,iBAAEA,GAAqBuF,IACvBoI,EAAWC,KACViH,GAAgBC,KAChBnd,EAAOqV,GAAY9D,EAAS,IAC7BoN,EAAa3E,GAAO,GA2B1B,OAzBAlJ,EAAU,KACR,GAAI6N,EAAWtO,QAAS,OACxBsO,EAAWtO,SAAU,EAErB,MAAMvQ,EAAOod,EAAaja,IAAI,QACxBqF,EAAQ4U,EAAaja,IAAI,SACzBiF,EAAasN,eAAevI,QAAQ8H,IAErCjV,GAASwI,GAAUJ,EAKnBG,EAAiB,CAAEH,aAAYpI,OAAMwI,UAASgN,KAAK,EAAGtV,MAAO4e,MAChE,GAAIA,EAAa,CACf,MAAM9e,EAAOC,EAAkB6e,GAE/B,YADAvJ,EAASvV,EAAO2e,GAAY3e,GAlCd,mDAoChB,CAEA0V,eAAeqJ,WAAW9J,IAC1BiB,EAAS,OAZTX,EAAS,uDAcV,CAAChN,EAAkB2N,EAAUkH,IAG9BvI,EAAA,MAAA,CAAKC,UAAWC,GAAOmD,UAAShK,SAAA,CAC9B+C,EAAA,KAAA,CAAI6D,UAAWC,GAAOqD,MAAKlK,SACxBhO,EAAQ,iBAAmB,0BAE7BA,GACC2U,EAAAoC,EAAA,CAAA/I,SAAA,CACE+C,EAAA,IAAA,CAAA/C,SAAIhO,IACJ+Q,EAAA,SAAA,CAAQ0C,KAAK,SAASqB,QAAS,IAAMkB,EAAS,UAAShI,SAAA,y9ECpDjE,MAAM8Q,GAA0B,KAC9B,MAAMzP,eAAEA,GAAmBzB,IACrBoI,EAAWC,IACXP,EAAW6F,IACXnK,EAAaH,KAEblB,EAAa2F,EAASpN,OAAOyH,YAE5BgP,EAAUC,GAAezN,EAAS,IAEzCT,EAAU,KACR,MAAMmO,EAAQ5C,YAAY,KACxB2C,EAAYE,GAAMA,EAAI,EAAIA,EAAI,EAAI,IACjC,KAEH,MAAO,IAAM3C,cAAc0C,IAC1B,IAEH,MAWME,EAAqBC,EAAY3e,UACrC,MAAMS,KAAEA,EAAIlB,MAAEA,SAAgBoR,EAAWzJ,iBAEzC,OAAQ3H,GAA2B,YAAlBkB,GAAMhC,SACtB,CAACkS,IAmCJ,OAjCAN,EAAU,KACR,MAAMyM,EAAU,IAAIE,iBAAiB,iBAWrC,OATAF,EAAQ8B,UAAY5e,MAAM6e,IACC,4BAArBA,EAAMpe,MAAMuS,YACJ0L,YACF9P,IACN2G,EAAS,OAKR,KACLuH,EAAQM,UAET,CAACsB,EAAoBnJ,EAAU3G,IAElCyB,EAAU,KACR,MAAMsL,EAAWC,YAAY5b,UAC3B,UACY0e,YACF9P,IACN2G,EAAS,KAEb,CAAE,MAGF,GACC,KAEH,MAAO,IAAMuG,cAAcH,IAC1B,CAAC+C,EAAoB9P,EAAgB2G,IAGtCjF,EAAA,MAAA,CAAK6D,UAAWC,GAAgB7G,SAC9B2G,EAAA,MAAA,CAAKC,UAAWC,aACdF,EAAA,MAAA,CAAKC,UAAWC,GAAkB7G,SAAA,CAChC+C,SAAK6D,UAAWC,KAEhBF,EAAA,MAAA,CACEC,UAAWC,GACXqJ,QAAQ,YACRhE,KAAK,OACLkE,OAAO,eACPC,YAAY,MAAKrQ,SAAA,CAEjB+C,EAAA,OAAA,CAAMuN,EAAE,kBACRvN,EAAA,OAAA,CAAMuN,EAAE,uBAIZvN,EAAA,KAAA,CAAI6D,UAAWC,GAAc7G,SAAA,qBAE7B+C,EAAA,IAAA,CAAG6D,UAAWC,GAAc7G,SAAA,0EAI3B+B,GAAcgB,EAAA,MAAA,CAAK6D,UAAWC,YAAoB9E,IAEnDgB,EAAA,IAAA,CAAG6D,UAAWC,GAAiB7G,SAAA,4DAI/B+C,EAAA,IAAA,CAAG6D,UAAWC,GAAiB7G,SAAA,mFAI/B2G,EAAA,MAAA,CAAKC,UAAWC,GAAc7G,SAAA,CAC5B+C,EAAA,SAAA,CACE6D,UAAWC,GACXgD,SAAUkH,EAAW,EACrBjK,QAxFKrU,UACTse,EAAW,UAET3N,EAAW1J,mBAEjBsX,EAAY,MAmFWhR,SAAA,gBAKhB+Q,EAAW,GACVpK,EAAA,MAAA,CAAKC,UAAWC,GAAe7G,SAAA,CAAA,gBAAgB+Q,SAGjDhO,EAAA,SAAA,CAAQ6D,UAAWC,GAAmBC,QAAS,IAAMkB,EAAS,UAAShI,SAAA,mCC9GpEuR,GAAa,IACxB5K,EAAC6K,aACCzO,EAAC0O,EAAK,CAACC,KAAM3M,GAAsB4M,QAAS5O,EAACgF,GAAK,CAAA,KAClDhF,EAAC0O,EAAK,CAACC,KAAM3M,GAA6B4M,QAAS5O,EAAC+G,GAAY,CAAA,KAChE/G,EAAC0O,EAAK,CAACC,KAAM3M,GAA+B4M,QAAS5O,EAACuK,GAAiB,CAAA,KACvEvK,EAAC0O,EAAK,CAACC,KAAM3M,GAA+B4M,QAAS5O,EAAC6L,SACtD7L,EAAC0O,EAAK,CAACC,KAAM3M,GAAgC4M,QAAS5O,EAACkM,SACvDlM,EAAC0O,GAAMC,KAAM3M,GAA8B4M,QAAS5O,EAAC2N,GAAa,CAAA,KAClE3N,EAAC0O,EAAK,CAACC,KAAM3M,GAAgC4M,QAAS5O,EAAC2H,GAAmB,CAAA,KAC1E3H,EAAC0O,EAAK,CAACC,KAAM3M,GAA8B4M,QAAS5O,EAAC+N,GAAa,CAAA,KAClE/N,EAAC0O,EAAK,CAACC,KAAK,IAAIC,QAAS5O,EAAC6O,GAASC,GAAI9M,GAAsBrN","x_google_ignoreList":[15]}

package/dist/session/createAuthSession.d.ts

@@ -0,0 +1,60 @@
+import { CurrentUserResult, FinishOAuthLoginInput, LoginStartResult, MessageResult, OAuthProvidersResult, OrganizationSwitchResult, PasskeyLoginData, StartOAuthLoginInput, StartOAuthLoginResult, StepUpPrfData, StepUpStatus } from '../client/createSeamlessAuthClient';
+import type { SeamlessAuthResult } from '../client/result';
+import { PasskeyPrfInput } from '../client/webauthnPrf';
+import { Credential, Organization, User } from '../types';
+import { SessionStoragePort } from './storage';
+/** Everything a UI binding renders from. Replaced wholesale on every change. */
+export interface AuthSessionState {
+    user: User | null;
+    credentials: Credential[];
+    organizations: Organization[];
+    activeOrganization: Organization | null;
+    stepUpStatus: StepUpStatus | null;
+    isAuthenticated: boolean;
+    loading: boolean;
+    hasSignedInBefore: boolean;
+}
+export interface AuthSessionActions {
+    login: (identifier: string, passkeyAvailable: boolean) => Promise<SeamlessAuthResult<LoginStartResult>>;
+    handlePasskeyLogin: () => Promise<SeamlessAuthResult<PasskeyLoginData>>;
+    refreshSession: () => Promise<SeamlessAuthResult<CurrentUserResult>>;
+    logout: () => Promise<SeamlessAuthResult<MessageResult>>;
+    logoutAllSessions: () => Promise<SeamlessAuthResult<MessageResult>>;
+    deleteUser: () => Promise<SeamlessAuthResult<MessageResult>>;
+    updateCredential: (credential: Credential) => Promise<SeamlessAuthResult<Credential>>;
+    deleteCredential: (credentialId: string) => Promise<SeamlessAuthResult<MessageResult>>;
+    switchOrganization: (organizationId: string) => Promise<SeamlessAuthResult<OrganizationSwitchResult>>;
+    listOAuthProviders: () => Promise<SeamlessAuthResult<OAuthProvidersResult>>;
+    startOAuthLogin: (input: StartOAuthLoginInput) => Promise<SeamlessAuthResult<StartOAuthLoginResult>>;
+    finishOAuthLogin: (input: FinishOAuthLoginInput) => Promise<SeamlessAuthResult<MessageResult>>;
+    refreshStepUpStatus: () => Promise<SeamlessAuthResult<StepUpStatus>>;
+    verifyStepUpWithPasskey: () => Promise<SeamlessAuthResult<StepUpStatus>>;
+    verifyStepUpWithPasskeyPrf: (input: PasskeyPrfInput) => Promise<SeamlessAuthResult<StepUpPrfData>>;
+    verifyStepUpWithTotp: (code: string) => Promise<SeamlessAuthResult<StepUpStatus>>;
+    hasRole: (role: string) => boolean | undefined;
+    hasScopedRole: (role: string | string[]) => boolean | undefined;
+    markSignedIn: () => void;
+}
+/**
+ * Framework-agnostic session store.
+ *
+ * `getState` and `subscribe` are the shape React's `useSyncExternalStore` wants,
+ * and they adapt directly to a Vue ref or an Angular observable, so bindings stay
+ * thin instead of each reimplementing this state machine.
+ */
+export interface AuthSession {
+    getState: () => AuthSessionState;
+    subscribe: (listener: () => void) => () => void;
+    actions: AuthSessionActions;
+    destroy: () => void;
+}
+export interface AuthSessionOptions {
+    apiHost: string;
+    storage?: SessionStoragePort;
+    /**
+     * When false, a previous sign-in is still recorded but never surfaced, so a UI
+     * cannot branch on it.
+     */
+    detectPreviousSignIn?: boolean;
+}
+export declare function createAuthSession(options: AuthSessionOptions): AuthSession;

package/dist/session/storage.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The session store's only browser dependency, expressed as a port so the store
+ * itself stays framework and environment agnostic. Implementations never throw:
+ * private browsing and disabled storage are normal, and neither is a reason to
+ * fail an auth flow.
+ */
+export interface SessionStoragePort {
+    get(key: string): string | null;
+    set(key: string, value: string): void;
+}
+export declare function createMemoryStorage(): SessionStoragePort;
+export declare function createBrowserStorage(): SessionStoragePort;
+/**
+ * Browser storage where there is a `localStorage`, memory otherwise. The memory
+ * fallback is what keeps the store usable during server-side rendering.
+ */
+export declare function createDefaultStorage(): SessionStoragePort;

package/dist/types.d.ts

@@ -1,43 +1,5 @@
-import { AuthenticatorTransportFuture, CredentialDeviceType } from '@simplewebauthn/browser';
-export interface User {
-    id: string;
-    email: string;
-    phone: string;
-    roles?: string[];
-    activeOrganizationId?: string | null;
-}
-export interface OrganizationMembership {
-    id: string;
-    organizationId: string;
-    userId: string;
-    roles: string[];
-    scopes: string[];
-    createdAt: string | Date;
-    updatedAt: string | Date;
-    user?: User;
-}
-export interface Organization {
-    id: string;
-    name: string;
-    slug: string;
-    createdByUserId: string | null;
-    metadata: Record<string, unknown> | null;
-    createdAt: string | Date;
-    updatedAt: string | Date;
-    membership?: OrganizationMembership;
-    memberCount?: number;
-}
-export interface Credential {
-    id: string;
-    counter: number;
-    transports?: AuthenticatorTransportFuture[];
-    deviceType: CredentialDeviceType;
-    backedup: boolean;
-    backedUp?: boolean;
-    prfCapable?: boolean;
-    friendlyName: string | null;
-    lastUsedAt: Date | null;
-    platform: string | null;
-    browser: string | null;
-    deviceInfo: string | null;
-}
+import type { CredentialResponse, MeUser, Organization as OrganizationShape, OrganizationMembership as OrganizationMembershipShape } from '@seamless-auth/types';
+export type User = MeUser;
+export type OrganizationMembership = OrganizationMembershipShape;
+export type Organization = OrganizationShape;
+export type Credential = CredentialResponse;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seamless-auth/react",
-  "version": "0.6.0",
+  "version": "0.8.0",
   "description": "A drop-in authentication solution for modern React applications.",
   "type": "module",
   "exports": {
@@ -102,6 +102,7 @@
     "typescript-eslint": "^8.46.1"
   },
   "dependencies": {
+    "@seamless-auth/types": "^0.5.0",
     "@simplewebauthn/browser": "^13.1.0",
     "eslint-plugin-license-header": "^0.9.0",
     "libphonenumber-js": "^1.12.7",

package/dist/hooks/usePreviousSignIn.d.ts

@@ -1,4 +0,0 @@
-export declare function usePreviousSignIn(storageKey?: string): {
-    hasSignedInBefore: boolean;
-    markSignedIn: () => void;
-};