@tempoxyz/id 0.0.0-pr-354.sha-10150bc → 0.0.0-pr-349.sha-e0d3dfc

package/README.md

@@ -64,6 +64,8 @@ npx tempo-id init my-id --from "Tempo ID <noreply@id.example.com>" --url https:/
 
 [Self-hosting](docs/self-hosting.md) covers the database, secrets, migrations, and deploys.
 
+An optional second Worker runs the Admin API and its dashboard through `Admin.create` from `@tempoxyz/id/admin`, on a host that the public cannot reach, with an `authorize` function of the deployment's own. [Admin API](docs/development/admin.md) describes Tempo's deployment of it.
+
 ## Playgrounds
 
 [`playgrounds/`](playgrounds/README.md) holds one app per flow, deployed beside `https://id.tempo.xyz`.
@@ -109,6 +111,7 @@ Sign in at the printed URL with a test address, such as `tempo-id-test+dev@examp
 pnpm i             # install dependencies
 pnpm dev           # start Tempo ID, the playgrounds, and a local chain on OrbStack
 pnpm dev:app       # serve the app from src/app with Void, with HMR, the email inbox, and the dev toolbar
+pnpm dev:admin     # serve the admin app from src/admin/app with Void, with HMR, signed in as a local admin
 pnpm dev:id        # build the app, and serve apps/id with wrangler dev
 pnpm env:pull      # populate .env variables from 1Password
 pnpm build         # build the package and the app

package/dist/Admin.d.ts

@@ -0,0 +1,79 @@
+import type * as Env from './admin/Env.js';
+/** An option of `Admin.create` is absent or invalid. */
+export declare class InvalidOptionError extends Error {
+    readonly name = "Admin.InvalidOptionError";
+}
+/** The employee or service that a request acts as. */
+export type Actor = Env.Actor;
+/**
+ * Returns the admin Worker's handler, which serves the admin app's pages, such as the dashboard,
+ * and the Admin API: OAuth app registration and
+ * operation. `authorize` runs before every request, so a deployment without it never starts. Serve
+ * it on a host that the public cannot reach, never on Tempo ID's own.
+ *
+ * ```ts
+ * import { env } from 'cloudflare:workers'
+ * import { Admin } from '@tempoxyz/id/admin'
+ *
+ * export default Admin.create({
+ *   authorize: async (request) =>
+ *     (await verify(request)) ?? new Response(null, { status: 401 }),
+ *   db: env.HYPERDRIVE,
+ * })
+ * ```
+ *
+ * @throws {InvalidOptionError} When an option is absent or invalid, so the Worker fails to start.
+ */
+export declare function create(options: create.Options): create.ReturnType;
+export declare namespace create {
+    type Options = {
+        /**
+         * Decides whether a request may reach the Admin API, before every route. Returns the actor,
+         * whose `sub` the audit logs record, or a `Response` that refuses the request, such as a 401.
+         * It verifies the request itself, such as a Cloudflare Access assertion, and fails closed.
+         * Required unless `login` is set.
+         */
+        authorize?: Env.Authorize | undefined;
+        /**
+         * A Hyperdrive binding, such as `env.HYPERDRIVE`, or `{ connectionString }`, to the database of
+         * the Tempo ID deployment that the API operates.
+         */
+        db: {
+            /** The Postgres connection string. */
+            connectionString: string;
+        };
+        /**
+         * An email-code sign-in in place of `authorize`, as on a preview: addresses at `emailDomain`
+         * sign in at `/_dev/sign-in` with an emailed code, through the `/_dev` routes, and every other
+         * request needs its session cookie. Use it only where the database holds test data.
+         */
+        login?: {
+            /** The email service that sends the codes. */
+            email: {
+                /** The `send_email` binding, such as `env.SEND_EMAIL`. */
+                binding: {
+                    /** Sends a message. */
+                    send: (message: never) => Promise<unknown>;
+                };
+                /** The sender of every email, such as `Tempo ID Admin <noreply@id.example.com>`. */
+                from: string;
+            };
+            /** The domain whose addresses sign in, such as `tempo.xyz`. */
+            emailDomain: string;
+            /** The key that signs the session cookie, such as the deployment's `SECRET`. */
+            secret: string;
+        } | undefined;
+        /**
+         * The credential that `authorize` reads, which the OpenAPI document names, so the reference and
+         * generated clients send it. Defaults to the `cf-access-token` header, which Cloudflare Access checks.
+         * `login` names its session cookie instead.
+         */
+        securityScheme?: Env.SecurityScheme | undefined;
+    };
+    type ReturnType = {
+        /** Serves a request to the Worker. */
+        fetch: (request: Request, env: Record<string, unknown>, ctx: unknown) => Promise<Response>;
+    };
+    type ErrorType = InvalidOptionError;
+}
+//# sourceMappingURL=Admin.d.ts.map

package/dist/Admin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Admin.d.ts","sourceRoot":"","sources":["../src/Admin.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,KAAK,GAAG,MAAM,gBAAgB,CAAA;AAG1C,wDAAwD;AACxD,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,SAAkB,IAAI,8BAA6B;CACpD;AAED,sDAAsD;AACtD,MAAM,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAA;AAE7B;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAqCjE;AAED,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC;IAC9B,KAAK,OAAO,GAAG;QACb;;;;;WAKG;QACH,SAAS,CAAC,EAAE,GAAG,CAAC,SAAS,GAAG,SAAS,CAAA;QACrC;;;WAGG;QACH,EAAE,EAAE;YACF,sCAAsC;YACtC,gBAAgB,EAAE,MAAM,CAAA;SACzB,CAAA;QACD;;;;WAIG;QACH,KAAK,CAAC,EACF;YACE,8CAA8C;YAC9C,KAAK,EAAE;gBACL,0DAA0D;gBAC1D,OAAO,EAAE;oBACP,uBAAuB;oBACvB,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;iBAC3C,CAAA;gBACD,oFAAoF;gBACpF,IAAI,EAAE,MAAM,CAAA;aACb,CAAA;YACD,+DAA+D;YAC/D,WAAW,EAAE,MAAM,CAAA;YACnB,gFAAgF;YAChF,MAAM,EAAE,MAAM,CAAA;SACf,GACD,SAAS,CAAA;QACb;;;;WAIG;QACH,cAAc,CAAC,EAAE,GAAG,CAAC,cAAc,GAAG,SAAS,CAAA;KAChD,CAAA;IAED,KAAK,UAAU,GAAG;QAChB,sCAAsC;QACtC,KAAK,EAAE,CACL,OAAO,EAAE,OAAO,EAChB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,GAAG,EAAE,OAAO,KACT,OAAO,CAAC,QAAQ,CAAC,CAAA;KACvB,CAAA;IAED,KAAK,SAAS,GAAG,kBAAkB,CAAA;CACpC"}

package/dist/Admin.js

@@ -0,0 +1,93 @@
+/**
+ * Tempo ID's Admin API as a Cloudflare Worker, on a host of its own, from the deployment's options.
+ * @module
+ */
+import handlers from '#admin-app';
+import * as Session from './admin/dev/Session.js';
+/** An option of `Admin.create` is absent or invalid. */
+export class InvalidOptionError extends Error {
+    name = 'Admin.InvalidOptionError';
+}
+/**
+ * Returns the admin Worker's handler, which serves the admin app's pages, such as the dashboard,
+ * and the Admin API: OAuth app registration and
+ * operation. `authorize` runs before every request, so a deployment without it never starts. Serve
+ * it on a host that the public cannot reach, never on Tempo ID's own.
+ *
+ * ```ts
+ * import { env } from 'cloudflare:workers'
+ * import { Admin } from '@tempoxyz/id/admin'
+ *
+ * export default Admin.create({
+ *   authorize: async (request) =>
+ *     (await verify(request)) ?? new Response(null, { status: 401 }),
+ *   db: env.HYPERDRIVE,
+ * })
+ * ```
+ *
+ * @throws {InvalidOptionError} When an option is absent or invalid, so the Worker fails to start.
+ */
+export function create(options) {
+    validate(options);
+    const { db, login } = options;
+    const authorize = login
+        ? Session.authorize({ secret: login.secret })
+        : options.authorize;
+    // The built admin app reads its settings from the bindings under these names. A Hyperdrive
+    // binding's connection string is read for each request. Each name takes its option's value, or
+    // none, so no variable of the Worker with the same name reaches the app.
+    const bindings = (env) => ({
+        ...env,
+        ADMIN_AUTHORIZE: authorize,
+        ADMIN_DATABASE_URL: db.connectionString,
+        ADMIN_LOGIN: login
+            ? {
+                emailDomain: login.emailDomain,
+                from: login.email.from,
+                secret: login.secret,
+            }
+            : undefined,
+        // With `login`, the session cookie is the credential, whatever `securityScheme` names.
+        ADMIN_SECURITY_SCHEME: login
+            ? {
+                description: 'The session cookie, which the email-code sign-in at `/_dev/sign-in` sets.',
+                in: 'cookie',
+                name: Session.cookie,
+            }
+            : options.securityScheme,
+        SEND_EMAIL: login?.email.binding,
+    });
+    return {
+        fetch: (request, env, ctx) => handlers.fetch(request, bindings(env), ctx),
+    };
+}
+/** Throws when an option is absent or invalid, since bindings and functions escape type checks. */
+function validate(options) {
+    const { authorize, db, login } = options;
+    if (login && authorize)
+        throw new InvalidOptionError('Invalid options: pass `authorize` or `login`, not both. `login` signs each request in itself.');
+    if (!login && typeof authorize !== 'function')
+        throw new InvalidOptionError('Missing `authorize`. Pass a function that verifies each request, such as a Cloudflare Access assertion, and returns its actor or a refusal.');
+    if (login) {
+        if (typeof login.email?.binding?.send !== 'function')
+            throw new InvalidOptionError('Missing `login.email.binding`. Declare a `send_email` binding in the Wrangler config, and pass it, such as `env.SEND_EMAIL`.');
+        if (typeof login.email.from !== 'string' || !login.email.from.includes('@'))
+            throw new InvalidOptionError('Invalid `login.email.from`. Pass a sender with an address, such as `Tempo ID Admin <noreply@id.example.com>`.');
+        if (typeof login.emailDomain !== 'string' ||
+            !/^[a-z0-9-]+(\.[a-z0-9-]+)+$/.test(login.emailDomain))
+            throw new InvalidOptionError(`Invalid \`login.emailDomain\`: ${JSON.stringify(login.emailDomain)}. Pass a lowercase domain, such as \`tempo.xyz\`.`);
+        if (typeof login.secret !== 'string' || !login.secret)
+            throw new InvalidOptionError("Missing `login.secret`. Pass the deployment's secret, such as `env.SECRET`.");
+    }
+    const scheme = options.securityScheme;
+    if (scheme !== undefined &&
+        (typeof scheme?.description !== 'string' ||
+            !['cookie', 'header', 'query'].includes(scheme.in) ||
+            typeof scheme.name !== 'string' ||
+            !scheme.name))
+        throw new InvalidOptionError('Invalid `securityScheme`. Pass the credential that `authorize` reads, such as `{ description, in: "header", name: "Authorization" }`.');
+    // `db` can be a Hyperdrive binding, whose connection string is read only within a request.
+    if (typeof db !== 'object' || db === null)
+        throw new InvalidOptionError('Missing `db`. Pass a Hyperdrive binding, such as `env.HYPERDRIVE`, or `{ connectionString }`.');
+}
+//# sourceMappingURL=Admin.js.map

package/dist/Admin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Admin.js","sourceRoot":"","sources":["../src/Admin.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,QAAQ,MAAM,YAAY,CAAA;AAEjC,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAA;AAEjD,wDAAwD;AACxD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IACzB,IAAI,GAAG,0BAA0B,CAAA;CACpD;AAKD;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,MAAM,CAAC,OAAuB;IAC5C,QAAQ,CAAC,OAAO,CAAC,CAAA;IAEjB,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IAC7B,MAAM,SAAS,GAAG,KAAK;QACrB,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAA;IAErB,2FAA2F;IAC3F,+FAA+F;IAC/F,yEAAyE;IACzE,MAAM,QAAQ,GAAG,CAAC,GAA4B,EAAE,EAAE,CAAC,CAAC;QAClD,GAAG,GAAG;QACN,eAAe,EAAE,SAAS;QAC1B,kBAAkB,EAAE,EAAE,CAAC,gBAAgB;QACvC,WAAW,EAAE,KAAK;YAChB,CAAC,CAAC;gBACE,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI;gBACtB,MAAM,EAAE,KAAK,CAAC,MAAM;aACrB;YACH,CAAC,CAAC,SAAS;QACb,uFAAuF;QACvF,qBAAqB,EAAE,KAAK;YAC1B,CAAC,CAAC;gBACE,WAAW,EACT,2EAA2E;gBAC7E,EAAE,EAAE,QAAiB;gBACrB,IAAI,EAAE,OAAO,CAAC,MAAM;aACrB;YACH,CAAC,CAAC,OAAO,CAAC,cAAc;QAC1B,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO;KACjC,CAAC,CAAA;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;KAC1E,CAAA;AACH,CAAC;AA8DD,mGAAmG;AACnG,SAAS,QAAQ,CAAC,OAAuB;IACvC,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,OAAO,CAAA;IAExC,IAAI,KAAK,IAAI,SAAS;QACpB,MAAM,IAAI,kBAAkB,CAC1B,+FAA+F,CAChG,CAAA;IACH,IAAI,CAAC,KAAK,IAAI,OAAO,SAAS,KAAK,UAAU;QAC3C,MAAM,IAAI,kBAAkB,CAC1B,6IAA6I,CAC9I,CAAA;IACH,IAAI,KAAK,EAAE,CAAC;QACV,IAAI,OAAO,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,KAAK,UAAU;YAClD,MAAM,IAAI,kBAAkB,CAC1B,8HAA8H,CAC/H,CAAA;QACH,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YACzE,MAAM,IAAI,kBAAkB,CAC1B,+GAA+G,CAChH,CAAA;QACH,IACE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;YACrC,CAAC,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;YAEtD,MAAM,IAAI,kBAAkB,CAC1B,kCAAkC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,mDAAmD,CACvH,CAAA;QACH,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,MAAM;YACnD,MAAM,IAAI,kBAAkB,CAC1B,6EAA6E,CAC9E,CAAA;IACL,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAA;IACrC,IACE,MAAM,KAAK,SAAS;QACpB,CAAC,OAAO,MAAM,EAAE,WAAW,KAAK,QAAQ;YACtC,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;YAC/B,CAAC,MAAM,CAAC,IAAI,CAAC;QAEf,MAAM,IAAI,kBAAkB,CAC1B,uIAAuI,CACxI,CAAA;IACH,2FAA2F;IAC3F,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI;QACvC,MAAM,IAAI,kBAAkB,CAC1B,+FAA+F,CAChG,CAAA;AACL,CAAC"}

package/dist/admin/Env.d.ts

@@ -0,0 +1,68 @@
+/**
+ * The Hono environment of the Admin API, which `Admin.create` serves on a host of its own.
+ * @module
+ */
+import type { Context } from 'hono';
+import type * as Env_ from '../internal/Env.js';
+import type * as Realm from '../internal/Realm.js';
+/** The employee or service that a request acts as, from the deployment's `authorize`. */
+export type Actor = {
+    /**
+     * The actor's email address, which the dashboard shows to the actor alone. Logs never record it.
+     * Absent, the dashboard shows `sub`.
+     */
+    email?: string | undefined;
+    /** A stable, opaque ID of the actor, which audit logs record. Never an email address. */
+    sub: string;
+};
+/** The credential that a deployment's `authorize` reads, as an OpenAPI `apiKey` scheme describes it. */
+export type SecurityScheme = {
+    /** What the credential is, such as `A Cloudflare Access assertion.` */
+    description: string;
+    /** Where the request carries the credential. */
+    in: 'cookie' | 'header' | 'query';
+    /** The cookie, header, or query parameter that holds the credential. */
+    name: string;
+};
+/** Decides whether a request may reach the Admin API. */
+export type Authorize = (request: Request) => Promise<Actor | Response>;
+/** The bindings and variables of an admin request. */
+export type Env = {
+    /** The values that `Admin.create` adds to the Worker's bindings. */
+    Bindings: {
+        /** The deployment's authorization, from `Admin.create`. */
+        ADMIN_AUTHORIZE: Authorize;
+        /** The Postgres connection string, read for each request, from `Admin.create`. */
+        ADMIN_DATABASE_URL: string;
+        /**
+         * The email-code sign-in under `/_dev`, from `Admin.create`'s `login`, as on a preview. Absent,
+         * `/_dev` serves no route.
+         */
+        ADMIN_LOGIN?: {
+            /** The domain whose addresses sign in, such as `tempo.xyz`. */
+            emailDomain: string;
+            /** The sender of the codes, such as `Tempo ID Admin <noreply@id.example.com>`. */
+            from: string;
+            /** The key that signs the session cookie. */
+            secret: string;
+        } | undefined;
+        /**
+         * The credential that `authorize` reads, as the OpenAPI document describes it, from
+         * `Admin.create`. Absent, the document names the `cf-access-token` header, which Cloudflare Access checks.
+         */
+        ADMIN_SECURITY_SCHEME?: SecurityScheme | undefined;
+        /**
+         * Renders the admin app's page of `c`'s request through TanStack Start. Absent, as in the
+         * Admin API without its app's build, a page path responds with `unknown_endpoint`.
+         */
+        ADMIN_PAGES?: ((c: Context<Env>) => Promise<Response>) | undefined;
+    };
+    /** The values that middleware sets on `c.var`. */
+    Variables: Pick<Env_.Variables, 'refusal' | 'requestId' | 'timing'> & {
+        /** The actor that `authorize` returned. */
+        actor: Actor;
+        /** The request's database client, which the admin app connects for the app routes. */
+        db: Realm.Database;
+    };
+};
+//# sourceMappingURL=Env.d.ts.map

package/dist/admin/Env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Env.d.ts","sourceRoot":"","sources":["../../src/admin/Env.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AACnC,OAAO,KAAK,KAAK,IAAI,MAAM,oBAAoB,CAAA;AAC/C,OAAO,KAAK,KAAK,KAAK,MAAM,sBAAsB,CAAA;AAElD,yFAAyF;AACzF,MAAM,MAAM,KAAK,GAAG;IAClB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IAC1B,yFAAyF;IACzF,GAAG,EAAE,MAAM,CAAA;CACZ,CAAA;AAED,wGAAwG;AACxG,MAAM,MAAM,cAAc,GAAG;IAC3B,uEAAuE;IACvE,WAAW,EAAE,MAAM,CAAA;IACnB,gDAAgD;IAChD,EAAE,EAAE,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAAA;IACjC,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAA;CACb,CAAA;AAED,yDAAyD;AACzD,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,KAAK,GAAG,QAAQ,CAAC,CAAA;AAEvE,sDAAsD;AACtD,MAAM,MAAM,GAAG,GAAG;IAChB,oEAAoE;IACpE,QAAQ,EAAE;QACR,2DAA2D;QAC3D,eAAe,EAAE,SAAS,CAAA;QAC1B,kFAAkF;QAClF,kBAAkB,EAAE,MAAM,CAAA;QAC1B;;;WAGG;QACH,WAAW,CAAC,EACR;YACE,+DAA+D;YAC/D,WAAW,EAAE,MAAM,CAAA;YACnB,kFAAkF;YAClF,IAAI,EAAE,MAAM,CAAA;YACZ,6CAA6C;YAC7C,MAAM,EAAE,MAAM,CAAA;SACf,GACD,SAAS,CAAA;QACb;;;WAGG;QACH,qBAAqB,CAAC,EAAE,cAAc,GAAG,SAAS,CAAA;QAClD;;;WAGG;QACH,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,GAAG,SAAS,CAAA;KACnE,CAAA;IACD,kDAAkD;IAClD,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,CAAC,GAAG;QACpE,2CAA2C;QAC3C,KAAK,EAAE,KAAK,CAAA;QACZ,sFAAsF;QACtF,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAA;KACnB,CAAA;CACF,CAAA"}

package/dist/admin/Env.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=Env.js.map

package/dist/admin/Env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Env.js","sourceRoot":"","sources":["../../src/admin/Env.ts"],"names":[],"mappings":""}

package/dist/admin/app/client/.assetsignore

@@ -0,0 +1,2 @@
+wrangler.json
+.dev.vars

package/dist/admin/app/client/assets/Client-BrjXsLWn.js

@@ -0,0 +1,2 @@
+import{n as e,t}from"./rolldown-runtime-WkwZ5CU-.js";var n=t((e=>{var t=Symbol.for(`react.transitional.element`),n=Symbol.for(`react.portal`),r=Symbol.for(`react.fragment`),i=Symbol.for(`react.strict_mode`),a=Symbol.for(`react.profiler`),o=Symbol.for(`react.consumer`),s=Symbol.for(`react.context`),c=Symbol.for(`react.forward_ref`),l=Symbol.for(`react.suspense`),u=Symbol.for(`react.memo`),d=Symbol.for(`react.lazy`),f=Symbol.for(`react.activity`),p=Symbol.for(`react.view_transition`),m=Symbol.iterator;function ee(e){return typeof e!=`object`||!e?null:(e=m&&e[m]||e[`@@iterator`],typeof e==`function`?e:null)}var h={isMounted:function(){return!1},enqueueForceUpdate:function(){},enqueueReplaceState:function(){},enqueueSetState:function(){}},g=Object.assign,_={};function v(e,t,n){this.props=e,this.context=t,this.refs=_,this.updater=n||h}v.prototype.isReactComponent={},v.prototype.setState=function(e,t){if(typeof e!=`object`&&typeof e!=`function`&&e!=null)throw Error(`takes an object of state variables to update or a function which returns an object of state variables.`);this.updater.enqueueSetState(this,e,t,`setState`)},v.prototype.forceUpdate=function(e){this.updater.enqueueForceUpdate(this,e,`forceUpdate`)};function y(){}y.prototype=v.prototype;function b(e,t,n){this.props=e,this.context=t,this.refs=_,this.updater=n||h}var x=b.prototype=new y;x.constructor=b,g(x,v.prototype),x.isPureReactComponent=!0;var S=Array.isArray;function C(){}var w={H:null,A:null,T:null,S:null},T=Object.prototype.hasOwnProperty;function E(e,n,r){var i=r.ref;return{$$typeof:t,type:e,key:n,ref:i===void 0?null:i,props:r}}function D(e,t){return E(e.type,t,e.props)}function O(e){return typeof e==`object`&&!!e&&e.$$typeof===t}function k(e){var t={"=":`=0`,":":`=2`};return`$`+e.replace(/[=:]/g,function(e){return t[e]})}var A=/\/+/g;function j(e,t){return typeof e==`object`&&e&&e.key!=null?k(``+e.key):t.toString(36)}function M(e){switch(e.status){case`fulfilled`:return e.value;case`rejected`:throw e.reason;default:switch(typeof e.status==`string`?e.then(C,C):(e.status=`pending`,e.then(function(t){e.status===`pending`&&(e.status=`fulfilled`,e.value=t)},function(t){e.status===`pending`&&(e.status=`rejected`,e.reason=t)})),e.status){case`fulfilled`:return e.value;case`rejected`:throw e.reason}}throw e}function N(e,r,i,a,o){var s=typeof e;(s===`undefined`||s===`boolean`)&&(e=null);var c=!1;if(e===null)c=!0;else switch(s){case`bigint`:case`string`:case`number`:c=!0;break;case`object`:switch(e.$$typeof){case t:case n:c=!0;break;case d:return c=e._init,N(c(e._payload),r,i,a,o)}}if(c)return o=o(e),c=a===``?`.`+j(e,0):a,S(o)?(i=``,c!=null&&(i=c.replace(A,`$&/`)+`/`),N(o,r,i,``,function(e){return e})):o!=null&&(O(o)&&(o=D(o,i+(o.key==null||e&&e.key===o.key?``:(``+o.key).replace(A,`$&/`)+`/`)+c)),r.push(o)),1;c=0;var l=a===``?`.`:a+`:`;if(S(e))for(var u=0;u<e.length;u++)a=e[u],s=l+j(a,u),c+=N(a,r,i,s,o);else if(u=ee(e),typeof u==`function`)for(e=u.call(e),u=0;!(a=e.next()).done;)a=a.value,s=l+j(a,u++),c+=N(a,r,i,s,o);else if(s===`object`){if(typeof e.then==`function`)return N(M(e),r,i,a,o);throw r=String(e),Error(`Objects are not valid as a React child (found: `+(r===`[object Object]`?`object with keys {`+Object.keys(e).join(`, `)+`}`:r)+`). If you meant to render a collection of children, use an array instead.`)}return c}function P(e,t,n){if(e==null)return e;var r=[],i=0;return N(e,r,``,``,function(e){return t.call(n,e,i++)}),r}function F(e){if(e._status===-1){var t=e._result,n=t();n.then(function(t){(e._status===0||e._status===-1)&&(e._status=1,e._result=t,n.status===void 0&&(n.status=`fulfilled`,n.value=t))},function(t){(e._status===0||e._status===-1)&&(e._status=2,e._result=t,n.status===void 0&&(n.status=`rejected`,n.reason=t))}),e._status===-1&&(e._status=0,e._result=n)}if(e._status===1)return e._result.default;throw e._result}var I=typeof reportError==`function`?reportError:function(e){if(typeof window==`object`&&typeof window.ErrorEvent==`function`){var t=new window.ErrorEvent(`error`,{bubbles:!0,cancelable:!0,message:typeof e==`object`&&e&&typeof e.message==`string`?String(e.message):String(e),error:e});if(!window.dispatchEvent(t))return}else if(typeof process==`object`&&typeof process.emit==`function`){process.emit(`uncaughtException`,e);return}console.error(e)};function L(e){var t=w.T,n={};n.types=t===null?null:t.types,w.T=n;try{var r=e(),i=w.S;i!==null&&i(n,r),typeof r==`object`&&r&&typeof r.then==`function`&&r.then(C,I)}catch(e){I(e)}finally{t!==null&&n.types!==null&&(t.types=n.types),w.T=t}}function R(e){var t=w.T;if(t!==null){var n=t.types;n===null?t.types=[e]:n.indexOf(e)===-1&&n.push(e)}else L(R.bind(null,e))}var z={map:P,forEach:function(e,t,n){P(e,function(){t.apply(this,arguments)},n)},count:function(e){var t=0;return P(e,function(){t++}),t},toArray:function(e){return P(e,function(e){return e})||[]},only:function(e){if(!O(e))throw Error(`React.Children.only expected to receive a single React element child.`);return e}};e.Activity=f,e.Children=z,e.Component=v,e.Fragment=r,e.Profiler=a,e.PureComponent=b,e.StrictMode=i,e.Suspense=l,e.ViewTransition=p,e.__CLIENT_INTERNALS_DO_NOT_USE_OR_WARN_USERS_THEY_CANNOT_UPGRADE=w,e.__COMPILER_RUNTIME={__proto__:null,c:function(e){return w.H.useMemoCache(e)}},e.addTransitionType=R,e.cache=function(e){return function(){return e.apply(null,arguments)}},e.cacheSignal=function(){return null},e.cloneElement=function(e,t,n){if(e==null)throw Error(`The argument must be a React element, but you passed `+e+`.`);var r=g({},e.props),i=e.key;if(t!=null)for(a in t.key!==void 0&&(i=``+t.key),t)!T.call(t,a)||a===`key`||a===`__self`||a===`__source`||a===`ref`&&t.ref===void 0||(r[a]=t[a]);var a=arguments.length-2;if(a===1)r.children=n;else if(1<a){for(var o=Array(a),s=0;s<a;s++)o[s]=arguments[s+2];r.children=o}return E(e.type,i,r)},e.createContext=function(e){return e={$$typeof:s,_currentValue:e,_currentValue2:e,_threadCount:0,Provider:null,Consumer:null},e.Provider=e,e.Consumer={$$typeof:o,_context:e},e},e.createElement=function(e,t,n){var r,i={},a=null;if(t!=null)for(r in t.key!==void 0&&(a=``+t.key),t)T.call(t,r)&&r!==`key`&&r!==`__self`&&r!==`__source`&&(i[r]=t[r]);var o=arguments.length-2;if(o===1)i.children=n;else if(1<o){for(var s=Array(o),c=0;c<o;c++)s[c]=arguments[c+2];i.children=s}if(e&&e.defaultProps)for(r in o=e.defaultProps,o)i[r]===void 0&&(i[r]=o[r]);return E(e,a,i)},e.createRef=function(){return{current:null}},e.forwardRef=function(e){return{$$typeof:c,render:e}},e.isValidElement=O,e.lazy=function(e){return{$$typeof:d,_payload:{_status:-1,_result:e},_init:F}},e.memo=function(e,t){return{$$typeof:u,type:e,compare:t===void 0?null:t}},e.startTransition=L,e.unstable_useCacheRefresh=function(){return w.H.useCacheRefresh()},e.use=function(e){return w.H.use(e)},e.useActionState=function(e,t,n){return w.H.useActionState(e,t,n)},e.useCallback=function(e,t){return w.H.useCallback(e,t)},e.useContext=function(e){return w.H.useContext(e)},e.useDebugValue=function(){},e.useDeferredValue=function(e,t){return w.H.useDeferredValue(e,t)},e.useEffect=function(e,t){return w.H.useEffect(e,t)},e.useEffectEvent=function(e){return w.H.useEffectEvent(e)},e.useId=function(){return w.H.useId()},e.useImperativeHandle=function(e,t,n){return w.H.useImperativeHandle(e,t,n)},e.useInsertionEffect=function(e,t){return w.H.useInsertionEffect(e,t)},e.useLayoutEffect=function(e,t){return w.H.useLayoutEffect(e,t)},e.useMemo=function(e,t){return w.H.useMemo(e,t)},e.useOptimistic=function(e,t){return w.H.useOptimistic(e,t)},e.useReducer=function(e,t,n){return w.H.useReducer(e,t,n)},e.useRef=function(e){return w.H.useRef(e)},e.useState=function(e){return w.H.useState(e)},e.useSyncExternalStore=function(e,t,n){return w.H.useSyncExternalStore(e,t,n)},e.useTransition=function(){return w.H.useTransition()},e.version=`19.3.0`})),r=t(((e,t)=>{t.exports=n()})),i=e(r(),1),a=t((e=>{var t=Symbol.for(`react.transitional.element`),n=Symbol.for(`react.fragment`);function r(e,n,r){var i=null;if(r!==void 0&&(i=``+r),n.key!==void 0&&(i=``+n.key),`key`in n)for(var a in r={},n)a!==`key`&&(r[a]=n[a]);else r=n;return n=r.ref,{$$typeof:t,type:e,key:i,ref:n===void 0?null:n,props:r}}e.Fragment=n,e.jsx=r,e.jsxs=r})),o=t(((e,t)=>{t.exports=a()})),s=i.createContext(null);function c(e){return i.useContext(s)}function l(e){let t=c();return i.useCallback(n=>t.navigate({...n,from:n.from??e?.from}),[e?.from,t])}var u=Object.freeze({dark:`z_scheme-dark`,light:`z_scheme-light`,"light dark":`z_scheme-light-dark`});Object.keys(u).map(e=>`.${u[e]}{color-scheme:${e};}`).join(`
+`);function d({className:e}){return(t=>{if(!t)return{className:e};let{className:n,style:r,vars:i}=t,a=i?{...i,...r}:r,o=f(e,n);return a?{className:o,style:a}:{className:o}})}function f(e,t){return e&&t?`${e} ${t}`:t||e}function p(e){let t={class:e.className};if(e.style!==void 0){let n=[];for(let[t,r]of Object.entries(e.style)){if(r==null)continue;let e=t.startsWith(`--`)?t:t.replace(/[A-Z]/g,e=>`-${e.toLowerCase()}`).replace(/^ms-/,`-ms-`);n.push(`${e}:${r}`)}t.style=n.join(`;`)}for(let[n,r]of Object.entries(e))n.startsWith(`data-`)&&(t[n]=r);return t}var m=Symbol.for(`zyzz.composition.input.v1`);function ee(e){return Object.defineProperty(p(e),m,{value:e})}function h(e,t=!1,n=`set`,r){let i=Object.fromEntries(e);return(e={})=>{let a=e&&typeof e==`object`?e[n]??r:void 0;if(!e||typeof e!=`object`||Array.isArray(e)||!Object.hasOwn(e,n)&&r===void 0||typeof a!=`string`||!Object.hasOwn(i,a)||Object.keys(e).some(e=>e!==n&&e!==`colorScheme`)||e.colorScheme!==void 0&&![`light`,`dark`,`light dark`].includes(e.colorScheme))throw TypeError(`Invalid variable selection.`);let o=e.colorScheme,s={className:o?`${i[a]} ${u[o]}`:i[a],...o?{style:{colorScheme:o}}:{}};return t?ee(s):s}}var g={...i},_={};function v(e,t){let n=i.useRef(_);return n.current===_&&(n.current=e(t)),n}var y=g.useInsertionEffect,b=y&&y!==g.useLayoutEffect?y:e=>e();function x(e){let t=v(S).current;return t.next=e,b(t.effect),t.trampoline}function S(){let e={next:void 0,callback:C,trampoline:(...t)=>e.callback?.(...t),effect:()=>{e.callback=e.next}};return e}function C(){}function w(){}var T=Object.freeze([]),E=Object.freeze({}),D=typeof document<`u`?i.useLayoutEffect:()=>{};function O(e,t){return function(n,...r){let i=new URL(e);return i.searchParams.set(`code`,n.toString()),r.forEach(e=>i.searchParams.append(`args[]`,e)),`${t} error #${n}; visit ${i} for the full message.`}}var k=O(`https://base-ui.com/production-error`,`Base UI`);function A(e,t,n,r){let i=v(M).current;return N(i,e,t,n,r)&&F(i,[e,t,n,r]),i.callback}function j(e){let t=v(M).current;return P(t,e)&&F(t,e),t.callback}function M(){return{callback:null,cleanup:null,refs:[]}}function N(e,t,n,r,i){return e.refs[0]!==t||e.refs[1]!==n||e.refs[2]!==r||e.refs[3]!==i}function P(e,t){return e.refs.length!==t.length||e.refs.some((e,n)=>e!==t[n])}function F(e,t){e.refs=t,e.callback=t.every(e=>e==null)?null:n=>{if(e.cleanup&&=(e.cleanup(),null),n!=null){let r=Array(t.length).fill(null);for(let e=0;e<t.length;e+=1){let i=t[e];if(i!=null)switch(typeof i){case`function`:{let t=i(n);typeof t==`function`&&(r[e]=t);break}case`object`:i.current=n}}e.cleanup=()=>{for(let e=0;e<t.length;e+=1){let n=t[e];if(n!=null)switch(typeof n){case`function`:{let t=r[e];typeof t==`function`?t():n(null);break}case`object`:n.current=null}}}}}}var I=19;function L(e){return I>=e}function R(e){if(!i.isValidElement(e))return null;let t=e,n=t.props;return(L(19)?n?.ref:t.ref)??null}function z(e,t){if(e&&!t)return e;if(!e&&t)return t;if(e||t)return{...e,...t}}function te(e,t){let n={};for(let r in e){let i=e[r];if(t?.hasOwnProperty(r)){let e=t[r](i);e!=null&&Object.assign(n,e)}else i===!0?n[`data-${r.toLowerCase()}`]=``:i&&(n[`data-${r.toLowerCase()}`]=i.toString())}return n}function ne(e,t){return typeof e==`function`?e(t):e}function re(e,t){return typeof e==`function`?e(t):e}var ie={};function B(e,t,n,r,i){if(!n&&!r&&!i&&!e)return V(t);let a=V(e);return t&&(a=H(a,t)),n&&(a=H(a,n)),r&&(a=H(a,r)),i&&(a=H(a,i)),a}function ae(e){if(e.length===0)return ie;if(e.length===1)return V(e[0]);let t=V(e[0]);for(let n=1;n<e.length;n+=1)t=H(t,e[n]);return t}function V(e){return le(e)?{...e(ie)}:oe(e)}function H(e,t){return le(t)?t(e):se(e,t)}function oe(e){let t={...e};for(let e in t){let n=t[e];ce(e,n)&&(t[e]=de(n))}return t}function se(e,t){if(!t)return e;for(let n in t){let r=t[n];switch(n){case`style`:e[n]=z(e.style,r);break;case`className`:e[n]=fe(e.className,r);break;default:e[n]=ce(n,r)?ue(e[n],r):r}}return e}function ce(e,t){let n=e.charCodeAt(0),r=e.charCodeAt(1),i=e.charCodeAt(2);return n===111&&r===110&&i>=65&&i<=90&&(typeof t==`function`||t===void 0)}function le(e){return typeof e==`function`}function ue(e,t){return t?e?(...n)=>{let r=n[0];if(pe(r)){let i=r;U(i);let a=t(...n);return i.baseUIHandlerPrevented||e?.(...n),a}let i=t(...n);return e?.(...n),i}:de(t):e}function de(e){return e&&((...t)=>{let n=t[0];return pe(n)&&U(n),e(...t)})}function U(e){return e.preventBaseUIHandler=()=>{e.baseUIHandlerPrevented=!0},e}function fe(e,t){return t?e?t+` `+e:t:e}function pe(e){return typeof e==`object`&&!!e&&`nativeEvent`in e}function me(e,t,n={}){let r=t.render;n.enabled!==!1&&(r=ve(r));let i=he(t,n,r);if(n.enabled===!1)return null;let a=n.state??E;return ye(e,r,i,a)}function he(e,t,n){let{className:r,style:i}=e,{state:a=E,ref:o,props:s,stateAttributesMapping:c,enabled:l=!0}=t,u=l?ne(r,a):void 0,d=l?re(i,a):void 0,f=l?te(a,c):E,p=l&&s?ge(s):void 0,m=l?z(f,p)??{}:E;return typeof document<`u`&&(l?m.ref=Array.isArray(o)?j([m.ref,R(n),...o]):A(m.ref,R(n),o):A(null,null)),l?(u!==void 0&&(m.className=fe(m.className,u)),d!==void 0&&(m.style=z(m.style,d)),m):E}function ge(e){return Array.isArray(e)?ae(e):B(void 0,e)}var _e=Symbol.for(`react.lazy`);function ve(e){if(e?.$$typeof!==_e)return e;let t=i.Children.toArray(e)[0];return i.isValidElement(t)?t:e}function ye(e,t,n,r){if(t){if(typeof t==`function`)return t(n,r);let e=B(n,t.props);return e.ref=n.ref,i.cloneElement(t,e)}return be(e,n)}function be(e,t){return e===`button`?(0,i.createElement)(`button`,{type:`button`,...t,key:t.key}):e===`img`?(0,i.createElement)(`img`,{alt:``,...t,key:t.key}):i.createElement(e,t)}function W(){return typeof window<`u`}function G(e){return q(e)?(e.nodeName||``).toLowerCase():`#document`}function K(e){var t;return(e==null||(t=e.ownerDocument)==null?void 0:t.defaultView)||window}function xe(e){return((q(e)?e.ownerDocument:e.document)||window.document)?.documentElement}function q(e){return W()?e instanceof Node||e instanceof K(e).Node:!1}function Se(e){return W()?e instanceof Element||e instanceof K(e).Element:!1}function J(e){return W()?e instanceof HTMLElement||e instanceof K(e).HTMLElement:!1}function Y(e){return!W()||typeof ShadowRoot>`u`?!1:e instanceof ShadowRoot||e instanceof K(e).ShadowRoot}function Ce(e){let{overflow:t,overflowX:n,overflowY:r,display:i}=Te(e);return/auto|scroll|overlay|hidden|clip/.test(t+r+n)&&i!==`inline`&&i!==`contents`}function we(e){return/^(html|body|#document)$/.test(G(e))}function Te(e){return K(e).getComputedStyle(e)}function Ee(e){if(G(e)===`html`)return e;let t=e.assignedSlot||e.parentNode||Y(e)&&e.host||xe(e);return Y(t)?t.host:t}var De=i.createContext(void 0);function Oe(e=!1){let t=i.useContext(De);if(t===void 0&&!e)throw Error(k(16));return t}function ke(e){let{focusableWhenDisabled:t,disabled:n,composite:r=!1,tabIndex:a=0,isNativeButton:o}=e,s=r&&t!==!1,c=r&&t===!1;return{props:i.useMemo(()=>{let e={onKeyDown(e){n&&t&&e.key!==`Tab`&&e.preventDefault()}};return r||(e.tabIndex=a,!o&&n&&(e.tabIndex=t?a:-1)),(o&&(t||s)||!o&&n)&&(e[`aria-disabled`]=n),o&&(!t||c)&&(e.disabled=n),e},[r,n,t,s,c,o,a])}}function X(e,t,{detail:n=0,pointerType:r=``}={}){e.dispatchEvent(new(K(e)).PointerEvent(`click`,{bubbles:!0,cancelable:!0,composed:!0,detail:n,pointerType:r,shiftKey:t.shiftKey,ctrlKey:t.ctrlKey,altKey:t.altKey,metaKey:t.metaKey}))}function Ae(e={}){let{disabled:t=!1,focusableWhenDisabled:n,tabIndex:r=0,native:a=!0,composite:o}=e,s=i.useRef(null),c=Oe(!0),l=o??c!==void 0,{props:u}=ke({focusableWhenDisabled:n,disabled:t,composite:l,tabIndex:r,isNativeButton:a}),d=i.useCallback(()=>{let e=s.current;Z(e)&&l&&t&&u.disabled===void 0&&e.disabled&&(e.disabled=!1)},[t,u.disabled,l]);return D(d,[d]),{getButtonProps:i.useCallback((e={})=>{let{onClick:n,onMouseDown:r,onKeyUp:i,onKeyDown:o,onPointerDown:s,...c}=e;return B({onClick(e){t?e.preventDefault():n?.(e)},onMouseDown(e){t||r?.(e)},onKeyDown(e){if(t||(U(e),o?.(e),e.baseUIHandlerPrevented))return;let n=e.target===e.currentTarget,r=e.currentTarget,i=Z(r),s=!a&&je(r),c=n&&(a?i:!s),u=e.key===`Enter`,d=e.key===` `,f=r.getAttribute(`role`),p=f?.startsWith(`menuitem`)||f===`option`||f===`gridcell`;if(n&&l&&d){if(e.defaultPrevented&&p)return;e.preventDefault(),(!a||i)&&(e.preventBaseUIHandler(),X(r,e))}else!c||a||!d&&!u?n&&s&&d&&e.preventDefault():e.defaultPrevented||(e.preventDefault(),u&&(e.preventBaseUIHandler(),X(r,e)))},onKeyUp(e){t||(U(e),i?.(e),e.target===e.currentTarget&&a&&l&&Z(e.currentTarget)&&e.key===` `?e.preventDefault():e.baseUIHandlerPrevented||e.target===e.currentTarget&&!a&&!l&&!e.defaultPrevented&&e.key===` `&&(e.preventBaseUIHandler(),X(e.currentTarget,e)))},onPointerDown(e){t?e.preventDefault():s?.(e)}},a?{type:`button`}:{role:`button`},u,c)},[t,u,l,a]),buttonRef:x(e=>{s.current=e,d()})}}function Z(e){return J(e)&&e.tagName===`BUTTON`}function je(e){return J(e)&&e.tagName===`A`&&!!e.href}var Me={clipPath:`inset(50%)`,overflow:`hidden`,whiteSpace:`nowrap`,border:0,padding:0,width:1,height:1,margin:-1},Ne={...Me,position:`fixed`,margin:0,top:0,left:0},Pe={...Me,position:`absolute`};function Fe(e){return me(e.defaultTagName??`div`,e,e)}function Ie(e,t=-(2**53-1),n=2**53-1){return Math.max(t,Math.min(e,n))}var{style:Le,variants:Re,vars:ze}={vars:h([[`default`,`z-theme-tempo_2d_id_2d_admin-default`]],!1,`set`,`default`)},Be=new Set([101,204,205,304]);async function Ve(e){let t=await e;if((t.body||t._bodyInit)&&!Be.has(t.status)&&(t._data=await t[We(t)]()),!t.ok)throw new He(`${t.status} ${t.statusText}`,{statusCode:t?.status,detail:{data:t?._data,statusText:t?.statusText}});return t._data}var He=class extends Error{detail;code;log;statusCode;constructor(e,t={}){super(e),this.name=`DetailedError`,this.log=t.log,this.detail=t.detail,this.code=t.code,this.statusCode=t.statusCode}},Ue=/^application\/(?:[\w!#$%&*.^`~-]*\+)?json(?:;.+)?$/i;function We(e){let t=e.headers.get(`content-type`);if(!t)return`text`;let n=t.split(`;`).shift();return Ue.test(n)?`json`:`text`}var Ge=(e,t)=>(e=e.replace(/\/+$/,``),e+=`/`,t=t.replace(/^\/+/,``),e+t),Q=(e,t)=>{for(let[n,r]of Object.entries(t)){let t=RegExp(`/:`+n+`(?:{[^/]+})?\\??(?=/|$)`);e=e.replace(t,()=>r?`/${r}`:``)}return e},Ke=e=>{let t=new URLSearchParams;for(let[n,r]of Object.entries(e))if(r!==void 0){if(Array.isArray(r))for(let e of r)e!==void 0&&t.append(n,e);else t.set(n,r)}return t},qe=(e,t)=>{switch(t){case`ws`:return e.replace(/^http/,`ws`);case`http`:return e.replace(/^ws/,`http`)}},Je=e=>/^https?:\/\/[^\/]+?\/index(?=\?|$)/.test(e)?e.replace(/\/index(?=\?|$)/,`/`):e.replace(/\/index(?=\?|$)/,``);function $(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function Ye(e,t){if(!$(e)&&!$(t))return t;let n={...e};for(let e in t){let r=t[e];n[e]=$(n[e])&&$(r)?Ye(n[e],r):r}return n}async function Xe(e){return Ve(e)}var Ze=/^[\w!#$%&'*.^`|~+-]+$/,Qe=(e,t,n={})=>{if(!Ze.test(e))throw Error(`Invalid cookie name`);let r=`${e}=${t}`;if(e.startsWith(`__Secure-`)&&!n.secure)throw Error(`__Secure- Cookie must have Secure attributes`);if(e.startsWith(`__Host-`)){if(!n.secure)throw Error(`__Host- Cookie must have Secure attributes`);if(n.path!==`/`)throw Error(`__Host- Cookie must have Path attributes with "/"`);if(n.domain)throw Error(`__Host- Cookie must not have Domain attributes`)}for(let e of[`domain`,`path`,`sameSite`,`priority`])if(n[e]&&/[;\r\n]/.test(n[e]))throw Error(`${e} must not contain ";", "\\r", or "\\n"`);if(n&&typeof n.maxAge==`number`&&n.maxAge>=0){if(n.maxAge>3456e4)throw Error(`Cookies Max-Age SHOULD NOT be greater than 400 days (34560000 seconds) in duration.`);r+=`; Max-Age=${n.maxAge|0}`}if(n.domain&&n.prefix!==`host`&&(r+=`; Domain=${n.domain}`),n.path&&(r+=`; Path=${n.path}`),n.expires){if(n.expires.getTime()-Date.now()>3456e7)throw Error(`Cookies Expires SHOULD NOT be greater than 400 days (34560000 seconds) in the future.`);r+=`; Expires=${n.expires.toUTCString()}`}if(n.httpOnly&&(r+=`; HttpOnly`),n.secure&&(r+=`; Secure`),n.sameSite&&(r+=`; SameSite=${n.sameSite.charAt(0).toUpperCase()+n.sameSite.slice(1)}`),n.priority&&(r+=`; Priority=${n.priority.charAt(0).toUpperCase()+n.priority.slice(1)}`),n.partitioned){if(!n.secure)throw Error(`Partitioned Cookie must have Secure attributes`);r+=`; Partitioned`}return r},$e=(e,t,n)=>(t=encodeURIComponent(t),Qe(e,t,n)),et=(e,t)=>new Proxy(()=>{},{get(n,r){if(typeof r==`string`&&r!==`then`)return et(e,[...t,r])},apply(n,r,i){return e({path:t,args:i})}}),tt=(e,t)=>{let n=t.toString();return n?`${e}?${n}`:e},nt=class{url;method;buildSearchParams;queryParams=void 0;pathParams={};rBody;cType=void 0;constructor(e,t,n){this.url=e,this.method=t,this.buildSearchParams=n.buildSearchParams}fetch=async(e,t)=>{if(e){if(e.query&&(this.queryParams=this.buildSearchParams(e.query)),e.form){let t=new FormData;for(let[n,r]of Object.entries(e.form))if(r!==void 0){if(Array.isArray(r))for(let e of r)e!==void 0&&t.append(n,e);else t.append(n,r)}this.rBody=t}e.json!==void 0&&(this.rBody=JSON.stringify(e.json),this.cType=`application/json`),e.param&&(this.pathParams=e.param)}let n=this.method.toUpperCase(),r={...e?.header,...typeof t?.headers==`function`?await t.headers():t?.headers};if(e?.cookie){let t=[];for(let[n,r]of Object.entries(e.cookie))r!==void 0&&t.push($e(n,r));t.length>0&&(r.Cookie=t.join(`; `))}this.cType&&(r[`Content-Type`]=this.cType);let i=new Headers;for(let[e,t]of Object.entries(r))t!==void 0&&i.set(e,t);let a=this.url;a=Je(a),a=Q(a,this.pathParams),this.queryParams&&(a=tt(a,this.queryParams)),n=this.method.toUpperCase();let o=n!==`GET`&&n!==`HEAD`;return(t?.fetch||fetch)(a,{body:o?this.rBody:void 0,method:n,headers:i,...t?.init})}},rt=(e,t)=>et(function n(r){let i=t?.buildSearchParams??Ke,a=[...r.path],o=a.slice(-3).reverse();if(o[0]===`toString`)return o[1]===`name`?o[2]||``:n.toString();if(o[0]===`valueOf`)return o[1]===`name`?o[2]||``:n;let s=``;if(/^\$/.test(o[0])){let e=a.pop();e&&(s=e.replace(/^\$/,``))}let c=Ge(e,a.join(`/`));if(s===`url`||s===`path`){let t=Je(c);return r.args[0]&&(r.args[0].param&&(t=Q(t,r.args[0].param)),r.args[0].query&&(t=tt(t,i(r.args[0].query)))),s===`url`?new URL(t):t.slice(e.replace(/\/+$/,``).length).replace(/^\/?/,`/`)}if(s===`ws`){let e=Je(c),n=qe(r.args[0]?.param?Q(e,r.args[0].param):e,`ws`),a=new URL(n),o=r.args[0]?.query;return o&&i(o).forEach((e,t)=>{a.searchParams.append(t,e)}),((...e)=>t?.webSocket!==void 0&&typeof t.webSocket==`function`?t.webSocket(...e):new WebSocket(...e))(a.toString())}let l=new nt(c,s,{buildSearchParams:i});if(s){t??={};let e={...r.args[1]},n=t.headers,i=e.headers;n&&i&&(e.headers=async()=>({...typeof n==`function`?await n():n,...typeof i==`function`?await i():i}));let a=Ye(t,e);return l.fetch(r.args[0],a)}return l},[]),it=()=>fetch,at=()=>window.location.origin;function ot(){return rt(at(),{fetch:it()})}function st(e){if(e instanceof He){let t=e.detail?.data;return typeof t==`object`&&t&&`error_description`in t&&typeof t.error_description==`string`?t.error_description:`Something went wrong. Try again.`}return`The Admin API cannot be reached. Check the connection, and try again.`}export{x as A,L as C,T as D,D as E,l as F,c as I,s as L,g as M,h as N,E as O,d as P,o as R,re as S,k as T,q as _,Ie as a,me as b,Pe as c,G as d,Ee as f,we as g,J as h,ze as i,v as j,w as k,Ae as l,Se as m,st as n,Fe as o,K as p,Xe as r,Ne as s,ot as t,Te as u,Ce as v,A as w,B as x,Y as y,r as z};