@vertesia/ui 0.79.0 → 0.79.1

package/lib/vertesia-ui-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"vertesia-ui-session.js","sources":["esm/session/constants.js","esm/session/auth/firebase.js","esm/session/auth/composable.js","esm/session/auth/useCurrentTenant.js","esm/session/TypeRegistry.js","esm/session/UserSession.js","esm/session/auth/useAuthState.js","esm/session/UserSessionProvider.js","esm/session/useUXTracking.js"],"sourcesContent":["export const LastSelectedAccountId_KEY = 'composableai.lastSelectedAccountId';\nexport const LastSelectedProjectId_KEY = 'composableai.lastSelectedProjectId';\n//# sourceMappingURL=constants.js.map","import { Env } from \"@vertesia/ui/env\";\nimport { getAnalytics } from \"firebase/analytics\";\nimport { initializeApp } from \"firebase/app\";\nimport { getAuth } from \"firebase/auth\";\n// Use lazy initialization to avoid accessing Env before it's initialized\nlet _firebaseApp = null;\nlet _analytics = null;\nlet _firebaseAuth = null;\n// Getters that lazily initialize Firebase components when first accessed\nexport function getFirebaseApp() {\n    if (!_firebaseApp) {\n        try {\n            if (!Env.firebase) {\n                throw new Error(\"Firebase configuration is not available in the environment\");\n            }\n            _firebaseApp = initializeApp(Env.firebase);\n        }\n        catch (error) {\n            console.error(\"Failed to initialize Firebase app:\", error);\n            throw new Error(\"Firebase initialization failed - environment may not be properly initialized\");\n        }\n    }\n    return _firebaseApp;\n}\nexport function getFirebaseAnalytics() {\n    if (!_analytics) {\n        _analytics = getAnalytics(getFirebaseApp());\n    }\n    return _analytics;\n}\nexport function getFirebaseAuth() {\n    if (!_firebaseAuth) {\n        _firebaseAuth = getAuth(getFirebaseApp());\n    }\n    return _firebaseAuth;\n}\nexport async function setFirebaseTenant(tenantEmail) {\n    if (!tenantEmail) {\n        console.log(\"No tenant name or email specified, skipping tenant setup\");\n        return;\n    }\n    if (!Env.firebase) {\n        console.log(\"Firebase configuration is not available in the environment\");\n        return;\n    }\n    try {\n        if (tenantEmail)\n            console.log(`Resolving tenant ID from email: ${tenantEmail}`);\n        // Add retry logic with exponential backoff\n        let retries = 3;\n        let retryDelay = 250; // Start with 250ms delay\n        while (retries > 0) {\n            try {\n                // Call the API endpoint to resolve the tenant ID\n                const response = await fetch(\"/api/resolve-tenant\", {\n                    method: \"POST\",\n                    headers: {\n                        \"Content-Type\": \"application/json\",\n                    },\n                    body: JSON.stringify({\n                        tenantEmail: tenantEmail,\n                    }),\n                    // Add timeout to prevent hanging requests\n                    signal: AbortSignal.timeout(5000),\n                });\n                // Check for network errors\n                if (!response) {\n                    throw new Error(\"No response received from tenant API\");\n                }\n                // Handle HTTP error responses\n                if (!response.ok) {\n                    // Try to parse the error response\n                    try {\n                        const errorData = await response.json();\n                        console.error(\"Failed to resolve tenant ID:\", errorData.error);\n                    }\n                    catch (parseError) {\n                        console.error(`Failed to resolve tenant ID: HTTP ${response.status}`);\n                    }\n                    // If the error is 404 Not Found, no need to retry\n                    if (response.status === 404) {\n                        console.warn(`Tenant not found for ${tenantEmail}`);\n                        return;\n                    }\n                    throw new Error(`HTTP error ${response.status}`);\n                }\n                // Successfully got a response, parse it\n                const data = (await response.json());\n                if (data && data.firebaseTenantId) {\n                    const auth = getFirebaseAuth();\n                    auth.tenantId = data.firebaseTenantId;\n                    Env.firebase.providerType = data.provider ?? \"oidc\";\n                    console.log(`Tenant ID set to ${auth.tenantId}`);\n                    return data;\n                }\n                else {\n                    console.error(`Invalid response format, missing tenantId for ${tenantEmail}`);\n                    return; // No need to retry for invalid response format\n                }\n            }\n            catch (fetchError) {\n                // Only retry for network-related errors\n                if (retries > 1) {\n                    console.warn(`Tenant resolution failed, retrying in ${retryDelay}ms...`, fetchError);\n                    await new Promise((resolve) => setTimeout(resolve, retryDelay));\n                    retryDelay *= 2; // Exponential backoff\n                    retries--;\n                }\n                else {\n                    throw fetchError; // Last retry failed, propagate error\n                }\n            }\n        }\n    }\n    catch (error) {\n        // Final error handler\n        console.error(\"Error setting Firebase tenant:\", error instanceof Error ? error.message : \"Unknown error\");\n        // Continue without tenant ID - authentication will work without multi-tenancy\n        // but the user will access the default tenant\n    }\n}\nexport async function getFirebaseAuthToken(refresh) {\n    const auth = getFirebaseAuth();\n    const user = auth.currentUser;\n    if (user) {\n        return user\n            .getIdToken(refresh)\n            .then((token) => {\n            Env.logger.info(\"Got Firebase token\", {\n                vertesia: {\n                    user_email: user.email,\n                    user_name: user.displayName,\n                    user_id: user.uid,\n                    refresh: refresh,\n                },\n            });\n            return token;\n        })\n            .catch((err) => {\n            Env.logger.error(\"Failed to get Firebase token\", {\n                vertesia: {\n                    user_email: user.email,\n                    user_name: user.displayName,\n                    user_id: user.uid,\n                    refresh: refresh,\n                    error: err,\n                },\n            });\n            console.error(\"Failed to get access token\", err);\n            return null;\n        });\n    }\n    else {\n        Env.logger.warn(\"No user found\");\n        return Promise.resolve(null);\n    }\n}\n//# sourceMappingURL=firebase.js.map","import { jwtDecode } from \"jwt-decode\";\nimport { Env } from '@vertesia/ui/env';\nimport { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY } from '../constants';\nimport { getFirebaseAuth, getFirebaseAuthToken } from './firebase';\nlet AUTH_TOKEN_RAW;\nlet AUTH_TOKEN;\nexport async function fetchComposableToken(getIdToken, accountId, projectId, ttl) {\n    console.log(`Getting/refreshing composable token for account ${accountId} and project ${projectId} `);\n    Env.logger.info('Getting/refreshing composable token', {\n        vertesia: {\n            account_id: accountId,\n            project_id: projectId,\n        },\n    });\n    const idToken = await getIdToken(); //get from firebase\n    if (!idToken) {\n        console.log('No id token found - using cookie auth');\n        throw new Error('No id token found');\n    }\n    console.log('Fetching composable token from ' + Env.endpoints.studio);\n    Env.logger.info('Fetching composable token from' + Env.endpoints.studio, {\n        vertesia: {\n            account_id: accountId,\n            project_id: projectId,\n        },\n    });\n    const url = new URL(Env.endpoints.studio + '/auth/token');\n    if (accountId)\n        url.searchParams.set('accountId', accountId);\n    if (projectId)\n        url.searchParams.set('projectId', projectId);\n    if (ttl)\n        url.searchParams.set('ttl', String(ttl));\n    console.log(`Getting composable token for account ${accountId} and project ${projectId}`);\n    Env.logger.info('Getting composable token', {\n        vertesia: {\n            account_id: accountId,\n            project_id: projectId,\n        },\n    });\n    const res = await fetch(url, {\n        method: 'GET',\n        headers: {\n            'Content-Type': 'application/json',\n            'Authorization': `Bearer ${idToken}`\n        }\n    }).catch(err => {\n        localStorage.removeItem(LastSelectedAccountId_KEY);\n        localStorage.removeItem(LastSelectedProjectId_KEY);\n        console.error('Failed to get composable token', err);\n        Env.logger.error('Failed to get composable token', {\n            vertesia: {\n                account_id: accountId,\n                project_id: projectId,\n                error: err,\n            },\n        });\n        throw new Error('Failed to get composable token');\n    });\n    if (idToken && res?.status === 412) {\n        console.log(\"412: auth succeeded but user doesn't exist - signup required\", res?.status);\n        Env.logger.error(\"412: auth succeeded but user doesn't exist - signup required\", {\n            vertesia: {\n                account_id: accountId,\n                project_id: projectId,\n                status: res?.status\n            },\n        });\n        const idTokenDecoded = jwtDecode(idToken);\n        if (!idTokenDecoded?.email) {\n            Env.logger.error('No email found in id token');\n            throw new Error('No email found in id token');\n        }\n        Env.logger.error('User not found', {\n            vertesia: {\n                account_id: accountId,\n                project_id: projectId,\n                email: idTokenDecoded.email\n            }\n        });\n        throw new UserNotFoundError('User not found', idTokenDecoded.email);\n    }\n    if (!res || !res.ok) {\n        console.error('Failed to get composable token', res);\n        Env.logger.error('Failed to get composable token', {\n            vertesia: {\n                account_id: accountId,\n                project_id: projectId,\n                status: res?.status,\n            },\n        });\n        throw new Error('Failed to get composable token');\n    }\n    const { token } = await res.json().catch(err => {\n        Env.logger.error('Failed to parse composable token', {\n            vertesia: {\n                account_id: accountId,\n                project_id: projectId,\n                error: err,\n            },\n        });\n        console.error('Failed to parse composable token', err);\n    });\n    return token;\n}\n/**\n *\n * @param accountId\n * @param projectId\n * @param ttl time to live for the token in seconds\n * @returns\n */\nexport async function fetchComposableTokenFromFirebaseToken(accountId, projectId, ttl) {\n    return fetchComposableToken(getFirebaseAuthToken, accountId, projectId, ttl);\n}\nexport async function getComposableToken(accountId, projectId, initToken, forceRefresh = false, useInternalAuth = false) {\n    const selectedAccount = accountId ?? localStorage.getItem(LastSelectedAccountId_KEY) ?? undefined;\n    const selectedProject = projectId ?? localStorage.getItem(LastSelectedProjectId_KEY + '-' + selectedAccount) ?? undefined;\n    //token is still valid for more than 5 minutes\n    if (!forceRefresh && AUTH_TOKEN_RAW && AUTH_TOKEN && AUTH_TOKEN.exp > (Date.now() / 1000 + 300)) {\n        return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };\n    }\n    //token is close to expire, refresh it\n    if (!useInternalAuth && getFirebaseAuth().currentUser) {\n        //we have a firebase user, get the token from there\n        AUTH_TOKEN_RAW = await fetchComposableTokenFromFirebaseToken(selectedAccount, selectedProject);\n    }\n    else if (initToken || AUTH_TOKEN_RAW) {\n        // we have a token already and no firebase user, refresh it\n        AUTH_TOKEN_RAW = await fetchComposableToken(() => Promise.resolve(initToken ?? AUTH_TOKEN_RAW), selectedAccount, selectedProject);\n    }\n    if (!AUTH_TOKEN_RAW) {\n        Env.logger.error('Cannot acquire a composable token', {\n            vertesia: {\n                account_id: selectedAccount,\n                project_id: selectedProject,\n            },\n        });\n        throw new Error('Cannot acquire a composable token');\n    }\n    AUTH_TOKEN = jwtDecode(AUTH_TOKEN_RAW);\n    if (!AUTH_TOKEN || !AUTH_TOKEN.exp || !AUTH_TOKEN_RAW) {\n        console.error('Invalid composable token', AUTH_TOKEN);\n        Env.logger.error('Invalid composable token', {\n            vertesia: {\n                account_id: selectedAccount,\n                project_id: selectedProject,\n            },\n        });\n        throw new Error('Invalid composable token');\n    }\n    return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };\n}\nexport class UserNotFoundError extends Error {\n    email;\n    constructor(message, email) {\n        super(message);\n        this.name = 'UserNotFoundError';\n        this.email = email;\n    }\n}\n//# sourceMappingURL=composable.js.map","import { useState, useEffect } from 'react';\nimport { useUserSession } from \"@vertesia/ui/session\";\nexport function useCurrentTenant() {\n    const { user } = useUserSession();\n    const [currentTenant, setCurrentTenant] = useState(null);\n    const [isLoading, setIsLoading] = useState(true);\n    const [error, setError] = useState(null);\n    useEffect(() => {\n        const loadCurrentTenant = async () => {\n            if (!user?.email) {\n                setCurrentTenant(null);\n                setIsLoading(false);\n                return;\n            }\n            try {\n                const response = await fetch('/api/resolve-tenant', {\n                    method: 'POST',\n                    headers: {\n                        'Content-Type': 'application/json',\n                    },\n                    body: JSON.stringify({\n                        tenantEmail: user.email\n                    })\n                });\n                if (response.ok) {\n                    const tenantData = await response.json();\n                    if (tenantData) {\n                        // Convert the resolved tenant data to our TenantConfig format\n                        setCurrentTenant({\n                            tenantKey: tenantData.name || 'unknown',\n                            name: tenantData.label || tenantData.name || 'Unknown',\n                            domain: tenantData.domain || [],\n                            firebaseTenantId: tenantData.firebaseTenantId,\n                            provider: tenantData.provider,\n                            logo: tenantData.logo\n                        });\n                    }\n                    else {\n                        setCurrentTenant(null);\n                    }\n                }\n                else {\n                    setCurrentTenant(null);\n                }\n            }\n            catch (error) {\n                console.error('Error loading current tenant:', error);\n                setError('Failed to load tenant configuration');\n                setCurrentTenant(null);\n            }\n            finally {\n                setIsLoading(false);\n            }\n        };\n        loadCurrentTenant();\n    }, [user?.email]);\n    return {\n        currentTenant,\n        isLoading,\n        error\n    };\n}\n//# sourceMappingURL=useCurrentTenant.js.map","export class TypeRegistry {\n    types;\n    map = {};\n    constructor(types) {\n        this.types = types;\n        //sort types\n        types.sort((a, b) => a.name.localeCompare(b.name));\n        for (const type of types) {\n            this.map[type.id] = type;\n        }\n    }\n    getType(id) {\n        return this.map[id];\n    }\n    getTypeLayout(id) {\n        const type = this.map[id];\n        return type ? type.table_layout : undefined;\n    }\n    getTypeName(id) {\n        const type = this.map[id];\n        return type ? type.name : undefined;\n    }\n}\n//# sourceMappingURL=TypeRegistry.js.map","import { jwtDecode } from 'jwt-decode';\nimport { createContext, useContext } from 'react';\nimport { VertesiaClient } from '@vertesia/client';\nimport { Env } from '@vertesia/ui/env';\nimport { getComposableToken } from './auth/composable';\nimport { getFirebaseAuth } from './auth/firebase';\nimport { TypeRegistry } from './TypeRegistry';\nimport { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY } from './constants';\nexport { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY };\nclass UserSession {\n    isLoading = true;\n    client;\n    authError;\n    authToken;\n    typeRegistry;\n    setSession;\n    lastSelectedAccount;\n    lastSelectedProject;\n    onboardingComplete;\n    constructor(client, setSession) {\n        if (client) {\n            this.client = client;\n        }\n        else {\n            this.client = new VertesiaClient({\n                serverUrl: Env.endpoints.studio,\n                storeUrl: Env.endpoints.zeno,\n            });\n        }\n        if (setSession) {\n            this.setSession = setSession;\n        }\n        this.logout = this.logout.bind(this);\n    }\n    get store() {\n        return this.client.store;\n    }\n    get user() {\n        return this.authToken;\n    }\n    get account() {\n        return this.authToken?.account;\n    }\n    get project() {\n        return this.authToken?.project;\n    }\n    get accounts() {\n        return this.authToken?.accounts;\n    }\n    get authCallback() {\n        return this.rawAuthToken.then(token => `Bearer ${token}`);\n    }\n    get rawAuthToken() {\n        return getComposableToken().then(res => {\n            const token = res?.rawToken;\n            if (!token) {\n                throw new Error('No token available');\n            }\n            this.authToken = jwtDecode(token);\n            return token;\n        });\n    }\n    signOut() {\n        this.logout();\n    }\n    getAccount() {\n        return this.authToken?.account;\n    }\n    async login(token) {\n        this.authError = undefined;\n        this.isLoading = false;\n        this.client.withAuthCallback(() => this.authCallback);\n        this.authToken = jwtDecode(token);\n        console.log(`Logging in as ${this.authToken?.name} with account ${this.authToken?.account.name} (${this.authToken?.account.id}, and project ${this.authToken?.project?.name} (${this.authToken?.project?.id})`);\n        //store selected account in local storage\n        localStorage.setItem(LastSelectedAccountId_KEY, this.authToken.account.id);\n        localStorage.setItem(LastSelectedProjectId_KEY + '-' + this.authToken.account.id, this.authToken.project?.id ?? '');\n        // notify the host app of the login\n        Env.onLogin?.(this.authToken);\n        // Independent async calls\n        await Promise.all([\n            this._loadTypes(),\n            this.fetchOnboardingStatus(),\n        ]);\n        return Promise.resolve();\n    }\n    isLoggedIn() {\n        return !!this.authToken;\n    }\n    logout() {\n        console.log('Logging out');\n        if (this.authToken) {\n            getFirebaseAuth().signOut();\n        }\n        this.authError = undefined;\n        this.isLoading = false;\n        this.authToken = undefined;\n        this.typeRegistry = undefined;\n        this.setSession = undefined;\n        this.client.withAuthCallback(undefined);\n    }\n    async switchAccount(targetAccountId) {\n        localStorage.setItem(LastSelectedAccountId_KEY, targetAccountId);\n        if (this) {\n            if (this.account && this.project) {\n                localStorage.setItem(LastSelectedProjectId_KEY + '-' + this.account.id, this.project.id);\n            }\n            else if (this.account) {\n                localStorage.removeItem(LastSelectedProjectId_KEY + '-' + this.account.id);\n            }\n        }\n        window.location.replace('/?a=' + targetAccountId);\n    }\n    async switchProject(targetProjectId) {\n        if (this.account) {\n            localStorage.setItem(LastSelectedProjectId_KEY + '-' + this.account.id, targetProjectId);\n        }\n        window.location.replace('/?a=' + this.account?.id + '&p=' + targetProjectId);\n    }\n    async _loadTypes() {\n        if (this.project) {\n            return this.store.types.list({}, { layout: true }).then(types => this.typeRegistry = new TypeRegistry(types)).catch(err => {\n                console.error('Failed to fetch object types', err);\n                throw err;\n            });\n        }\n        else {\n            console.log('No project selected');\n        }\n    }\n    async reloadTypes() {\n        return this._loadTypes().then(() => {\n            this.setSession?.(this.clone());\n        });\n    }\n    async fetchAccounts() {\n        return this.client.accounts.list().then(accounts => {\n            if (!this.authToken) {\n                throw new Error('No token available');\n            }\n            this.authToken.accounts = accounts;\n            this.setSession?.(this.clone());\n        }).catch(err => {\n            console.error('Failed to fetch accounts', err);\n            throw err;\n        });\n    }\n    async fetchOnboardingStatus() {\n        if (this.onboardingComplete) {\n            console.log('Onboarding already completed');\n            return false;\n        }\n        const previousStatus = this.onboardingComplete;\n        try {\n            const onboarding = await this.client.account.onboardingProgress();\n            this.onboardingComplete = Object.values(onboarding).every(value => value === true);\n            if (previousStatus !== this.onboardingComplete) {\n                return true;\n            }\n            this.setSession?.(this.clone());\n        }\n        catch (error) {\n            console.error('Error fetching onboarding status:', error);\n            this.onboardingComplete = false;\n            this.setSession?.(this.clone());\n        }\n        return false;\n    }\n    clone() {\n        const session = new UserSession(this.client);\n        session.isLoading = this.isLoading;\n        session.authError = this.authError;\n        session.authToken = this.authToken;\n        session.setSession = this.setSession;\n        session.lastSelectedAccount = this.lastSelectedAccount;\n        session.switchAccount = this.switchAccount;\n        session.typeRegistry = this.typeRegistry;\n        session.onboardingComplete = this.onboardingComplete;\n        return session;\n    }\n}\nconst UserSessionContext = createContext(undefined);\nexport function useUserSession() {\n    const session = useContext(UserSessionContext);\n    if (!session) {\n        throw new Error('useUserSession must be used within a UserSessionProvider');\n    }\n    return session;\n}\nexport { UserSession, UserSessionContext };\n//# sourceMappingURL=UserSession.js.map","/**\n * This hook is used to generate and verify state for OAuth2 authorization requests.\n * @returns\n */\nimport { useCallback } from \"react\";\nconst AUTH_STATE_KEY = 'auth_state';\nconst STATE_EXPIRY_KEY = 'auth_state_expiry';\nconst STATE_TTL = 5 * 60 * 1000; // 5 min\nexport function useAuthState() {\n    // Generate new state\n    const generateState = useCallback(() => {\n        const state = crypto.randomUUID();\n        const expiryTime = Date.now() + STATE_TTL;\n        // Store state and expiry\n        sessionStorage.setItem(AUTH_STATE_KEY, state);\n        sessionStorage.setItem(STATE_EXPIRY_KEY, expiryTime.toString());\n        return state;\n    }, []);\n    // Verify returned state\n    const verifyState = useCallback((returnedState) => {\n        if (!returnedState) {\n            return 'Missing state';\n        }\n        const savedState = sessionStorage.getItem(AUTH_STATE_KEY);\n        const expiryTime = parseInt(sessionStorage.getItem(STATE_EXPIRY_KEY) || '0');\n        let reason;\n        // Verify state matches and hasn't expired\n        if (savedState !== returnedState) {\n            reason = `State mismatched (${savedState} !== ${returnedState})`;\n        }\n        else if (Date.now() > expiryTime) {\n            reason = 'State expired';\n        }\n        else {\n            reason = undefined; // No errors\n        }\n        return reason;\n    }, []);\n    // Clear state (useful for cleanup)\n    const clearState = useCallback(() => {\n        sessionStorage.removeItem(AUTH_STATE_KEY);\n        sessionStorage.removeItem(STATE_EXPIRY_KEY);\n    }, []);\n    return { generateState, verifyState, clearState };\n}\n//# sourceMappingURL=useAuthState.js.map","import { jsx as _jsx } from \"react/jsx-runtime\";\nimport { onAuthStateChanged } from \"firebase/auth\";\nimport { useEffect, useState } from \"react\";\nimport { UserNotFoundError, getComposableToken } from \"./auth/composable\";\nimport { getFirebaseAuth } from \"./auth/firebase\";\nimport { useAuthState } from \"./auth/useAuthState\";\nimport { Env } from \"@vertesia/ui/env\";\nimport { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY, UserSession, UserSessionContext } from \"./UserSession\";\nconst devDomains = [\".composable.sh\", \".vertesia.dev\", \"vertesia.app\"];\nconst CENTRAL_AUTH_REDIRECT = \"https://internal-auth.vertesia.app/\";\nfunction shouldRedirectToCentralAuth() {\n    // Authentication is not supported in Docker environment.\n    // See https://github.com/vertesia/studio/wiki/Composable-UI-Hosting-Options\n    if (Env.isDocker) {\n        return true;\n    }\n    return devDomains.some((domain) => window.location.hostname.endsWith(domain));\n}\nexport function UserSessionProvider({ children }) {\n    const hashParams = new URLSearchParams(location.hash.substring(1));\n    const token = hashParams.get(\"token\");\n    const state = hashParams.get(\"state\");\n    const [session, setSession] = useState(new UserSession());\n    const { generateState, verifyState, clearState } = useAuthState();\n    const redirectToCentralAuth = (projectId, accountId) => {\n        const url = new URL(CENTRAL_AUTH_REDIRECT);\n        const currentUrl = new URL(window.location.href);\n        currentUrl.hash = \"\";\n        if (projectId)\n            currentUrl.searchParams.set(\"p\", projectId);\n        if (accountId)\n            currentUrl.searchParams.set(\"a\", accountId);\n        url.searchParams.set(\"redirect_uri\", currentUrl.toString());\n        url.searchParams.set(\"state\", generateState());\n        location.replace(url.toString());\n    };\n    useEffect(() => {\n        console.log(\"Auth: starting auth flow\");\n        Env.logger.info(\"Starting auth flow\");\n        const currentUrl = new URL(window.location.href);\n        const selectedAccount = currentUrl.searchParams.get(\"a\") ?? localStorage.getItem(LastSelectedAccountId_KEY) ?? undefined;\n        const selectedProject = currentUrl.searchParams.get(\"p\") ??\n            localStorage.getItem(LastSelectedProjectId_KEY + \"-\" + selectedAccount) ??\n            undefined;\n        console.log(\"Auth: selected account\", selectedAccount);\n        console.log(\"Auth: selected project\", selectedProject);\n        Env.logger.info(\"Selected account and project\", {\n            vertesia: {\n                account_id: selectedAccount,\n                project_id: selectedProject,\n            },\n        });\n        if (token && state) {\n            const validationError = verifyState(state);\n            if (validationError) {\n                console.error(`Auth: invalid state: ${validationError}`);\n                Env.logger.error(`Invalid state: ${validationError}`, {\n                    vertesia: {\n                        state: state,\n                    },\n                });\n                redirectToCentralAuth();\n            }\n            else {\n                clearState();\n            }\n            getComposableToken(selectedAccount, selectedProject, token, false, shouldRedirectToCentralAuth())\n                .then((res) => {\n                session.login(res.rawToken).then(() => {\n                    setSession(session.clone());\n                    //cleanup the hash\n                    window.location.hash = \"\";\n                });\n            })\n                .catch((err) => {\n                console.error(\"Failed to fetch user token from studio, redirecting to central auth\", err);\n                Env.logger.error(\"Failed to fetch user token from studio, redirecting to central auth\", {\n                    vertesia: {\n                        error: err,\n                    },\n                });\n                redirectToCentralAuth();\n            });\n            return;\n        }\n        else {\n            //if on a dev domain and not logged in, redirect to central auth\n            if (!session.isLoggedIn()) {\n                console.log(\"Auth: not logged in & no token/state\");\n                Env.logger.info(\"Not logged in & no token/state\", {\n                    vertesia: {\n                        account_id: selectedAccount,\n                        project_id: selectedProject,\n                    },\n                });\n                if (shouldRedirectToCentralAuth()) {\n                    console.log(\"Auth: on dev domain, redirecting to central auth with selection\", selectedAccount, selectedProject);\n                    Env.logger.info(\"Redirecting to central auth with selection\", {\n                        vertesia: {\n                            account_id: selectedAccount,\n                            project_id: selectedProject,\n                        },\n                    });\n                    redirectToCentralAuth();\n                }\n                else {\n                    console.log(\"Auth: not on dev domain\");\n                    Env.logger.info(\"Not on dev domain\", {\n                        vertesia: {\n                            account_id: selectedAccount,\n                            project_id: selectedProject,\n                        },\n                    });\n                }\n            }\n        }\n        return onAuthStateChanged(getFirebaseAuth(), async (firebaseUser) => {\n            if (firebaseUser) {\n                console.log(\"Auth: successful login with firebase\");\n                Env.logger.info(\"Successful login with firebase\", {\n                    vertesia: {\n                        account_id: selectedAccount,\n                        project_id: selectedProject,\n                    },\n                });\n                session.setSession = setSession;\n                await getComposableToken(selectedAccount, selectedProject, undefined, false, shouldRedirectToCentralAuth())\n                    .then((res) => {\n                    session.login(res.rawToken).then(() => setSession(session.clone()));\n                })\n                    .catch((err) => {\n                    console.error(\"Failed to fetch user token from studio\", err);\n                    Env.logger.error(\"Failed to fetch user token from studio\", {\n                        vertesia: {\n                            account_id: selectedAccount,\n                            project_id: selectedProject,\n                            error: err,\n                        },\n                    });\n                    if (!(err instanceof UserNotFoundError))\n                        session.logout();\n                    session.isLoading = false;\n                    session.authError = err;\n                    setSession(session.clone());\n                });\n            }\n            else {\n                // anonymous user\n                console.log(\"Auth: using anonymous user\");\n                Env.logger.info(\"Using anonymous user\", {\n                    vertesia: {\n                        account_id: selectedAccount,\n                        project_id: selectedProject,\n                    },\n                });\n                session.client.withAuthCallback(undefined);\n                session.logout();\n                setSession(session.clone());\n            }\n        });\n    }, []);\n    return _jsx(UserSessionContext.Provider, { value: session, children: children });\n}\n//# sourceMappingURL=UserSessionProvider.js.map","import { Env } from '@vertesia/ui/env';\nimport { logEvent } from \"firebase/analytics\";\nimport { getFirebaseAnalytics } from \"./auth/firebase\";\nexport function useUXTracking() {\n    //identify user in monitoring and UX systems\n    const tagUserSession = async (user) => {\n        const signupData = window.localStorage.getItem(\"composableSignupData\");\n        if (!user) {\n            console.error('No user found -- skipping tagging');\n            return;\n        }\n        if (signupData) {\n            window.localStorage.removeItem(\"composableSignupData\");\n        }\n    };\n    //send event to analytics and UX systems\n    const trackEvent = (eventName, eventProperties) => {\n        if (!Env.isProd) {\n            console.debug('track event', eventName, eventProperties);\n        }\n        //GA via firebase\n        logEvent(getFirebaseAnalytics(), eventName, { ...eventProperties, debug_mode: !Env.isProd });\n    };\n    return {\n        tagUserSession,\n        trackEvent\n    };\n}\n//# sourceMappingURL=useUXTracking.js.map"],"names":["LastSelectedAccountId_KEY","LastSelectedProjectId_KEY","AUTH_TOKEN_RAW","AUTH_TOKEN","_firebaseApp","_analytics","_firebaseAuth","getFirebaseApp","Env","firebase","Error","initializeApp","error","console","getFirebaseAnalytics","getAnalytics","getFirebaseAuth","getAuth","async","setFirebaseTenant","tenantEmail","log","retries","retryDelay","response","fetch","method","headers","body","JSON","stringify","signal","AbortSignal","timeout","ok","errorData","json","parseError","status","warn","data","firebaseTenantId","auth","tenantId","providerType","provider","fetchError","Promise","resolve","setTimeout","message","getFirebaseAuthToken","refresh","user","currentUser","getIdToken","then","token","logger","info","vertesia","user_email","email","user_name","displayName","user_id","uid","catch","err","fetchComposableToken","accountId","projectId","ttl","account_id","project_id","idToken","endpoints","studio","url","URL","searchParams","set","String","res","Authorization","localStorage","removeItem","idTokenDecoded","jwtDecode","UserNotFoundError","fetchComposableTokenFromFirebaseToken","getComposableToken","initToken","forceRefresh","useInternalAuth","selectedAccount","getItem","undefined","selectedProject","exp","Date","now","rawToken","constructor","super","this","name","useCurrentTenant","useUserSession","currentTenant","setCurrentTenant","useState","isLoading","setIsLoading","setError","useEffect","tenantData","tenantKey","label","domain","logo","loadCurrentTenant","TypeRegistry","types","map","sort","a","b","localeCompare","type","id","getType","getTypeLayout","table_layout","getTypeName","UserSession","client","authError","authToken","typeRegistry","setSession","lastSelectedAccount","lastSelectedProject","onboardingComplete","VertesiaClient","serverUrl","storeUrl","zeno","logout","bind","store","account","project","accounts","authCallback","rawAuthToken","signOut","getAccount","login","withAuthCallback","setItem","onLogin","all","_loadTypes","fetchOnboardingStatus","isLoggedIn","switchAccount","targetAccountId","window","location","replace","switchProject","targetProjectId","list","layout","reloadTypes","clone","fetchAccounts","previousStatus","onboarding","onboardingProgress","Object","values","every","value","session","UserSessionContext","createContext","useContext","AUTH_STATE_KEY","STATE_EXPIRY_KEY","devDomains","shouldRedirectToCentralAuth","isDocker","some","hostname","endsWith","UserSessionProvider","children","hashParams","URLSearchParams","hash","substring","get","state","generateState","verifyState","clearState","useCallback","crypto","randomUUID","expiryTime","sessionStorage","toString","returnedState","savedState","parseInt","reason","redirectToCentralAuth","currentUrl","href","validationError","onAuthStateChanged","firebaseUser","_jsx","Provider","useUXTracking","tagUserSession","signupData","trackEvent","eventName","eventProperties","isProd","debug","logEvent","debug_mode"],"mappings":"+eAAY,MAACA,EAA4B,qCAC5BC,EAA4B,qCCIzC,ICDIC,EACAC,EDAAC,EAAe,KACfC,EAAa,KACbC,EAAgB,KAEb,SAASC,IACZ,IAAKH,EACD,IACI,IAAKI,EAAIC,SACL,MAAM,IAAIC,MAAM,8DAEpBN,EAAeO,EAAcH,EAAIC,SAC7C,CACQ,MAAOG,GAEH,MADAC,QAAQD,MAAM,qCAAsCA,GAC9C,IAAIF,MAAM,+EAC5B,CAEI,OAAON,CACX,CACO,SAASU,IAIZ,OAHKT,IACDA,EAAaU,EAAaR,MAEvBF,CACX,CACO,SAASW,IAIZ,OAHKV,IACDA,EAAgBW,EAAQV,MAErBD,CACX,CACOY,eAAeC,EAAkBC,GACpC,GAAKA,EAIL,GAAKZ,EAAIC,SAIT,IACQW,GACAP,QAAQQ,IAAI,mCAAmCD,KAEnD,IAAIE,EAAU,EACVC,EAAa,IACjB,KAAOD,EAAU,GACb,IAEI,MAAME,QAAiBC,MAAM,sBAAuB,CAChDC,OAAQ,OACRC,QAAS,CACL,eAAgB,oBAEpBC,KAAMC,KAAKC,UAAU,CACjBV,YAAaA,IAGjBW,OAAQC,YAAYC,QAAQ,OAGhC,IAAKT,EACD,MAAM,IAAId,MAAM,wCAGpB,IAAKc,EAASU,GAAI,CAEd,IACI,MAAMC,QAAkBX,EAASY,OACjCvB,QAAQD,MAAM,+BAAgCuB,EAAUvB,MAChF,CACoB,MAAOyB,GACHxB,QAAQD,MAAM,qCAAqCY,EAASc,SACpF,CAEoB,GAAwB,MAApBd,EAASc,OAET,YADAzB,QAAQ0B,KAAK,wBAAwBnB,KAGzC,MAAM,IAAIV,MAAM,cAAcc,EAASc,SAC3D,CAEgB,MAAME,QAAchB,EAASY,OAC7B,GAAII,GAAQA,EAAKC,iBAAkB,CAC/B,MAAMC,EAAO1B,IAIb,OAHA0B,EAAKC,SAAWH,EAAKC,iBACrBjC,EAAIC,SAASmC,aAAeJ,EAAKK,UAAY,OAC7ChC,QAAQQ,IAAI,oBAAoBqB,EAAKC,YAC9BH,CAC3B,CAGoB,YADA3B,QAAQD,MAAM,iDAAiDQ,IAGnF,CACY,MAAO0B,GAEH,KAAIxB,EAAU,GAOV,MAAMwB,EANNjC,QAAQ0B,KAAK,yCAAyChB,SAAmBuB,SACnE,IAAIC,SAASC,GAAYC,WAAWD,EAASzB,KACnDA,GAAc,EACdD,GAKpB,CAEA,CACI,MAAOV,GAEHC,QAAQD,MAAM,iCAAkCA,aAAiBF,MAAQE,EAAMsC,QAAU,gBAGjG,MA7EQrC,QAAQQ,IAAI,mEAJZR,QAAQQ,IAAI,2DAkFpB,CACOH,eAAeiC,EAAqBC,GACvC,MACMC,EADOrC,IACKsC,YAClB,OAAID,EACOA,EACFE,WAAWH,GACXI,MAAMC,IACPjD,EAAIkD,OAAOC,KAAK,qBAAsB,CAClCC,SAAU,CACNC,WAAYR,EAAKS,MACjBC,UAAWV,EAAKW,YAChBC,QAASZ,EAAKa,IACdd,QAASA,KAGVK,KAENU,OAAOC,IACR5D,EAAIkD,OAAO9C,MAAM,+BAAgC,CAC7CgD,SAAU,CACNC,WAAYR,EAAKS,MACjBC,UAAWV,EAAKW,YAChBC,QAASZ,EAAKa,IACdd,QAASA,EACTxC,MAAOwD,KAGfvD,QAAQD,MAAM,6BAA8BwD,GACrC,SAIX5D,EAAIkD,OAAOnB,KAAK,iBACTQ,QAAQC,QAAQ,MAE/B,CCtJO9B,eAAemD,EAAqBd,EAAYe,EAAWC,EAAWC,GACzE3D,QAAQQ,IAAI,mDAAmDiD,iBAAyBC,MACxF/D,EAAIkD,OAAOC,KAAK,sCAAuC,CACnDC,SAAU,CACNa,WAAYH,EACZI,WAAYH,KAGpB,MAAMI,QAAgBpB,IACtB,IAAKoB,EAED,MADA9D,QAAQQ,IAAI,yCACN,IAAIX,MAAM,qBAEpBG,QAAQQ,IAAI,kCAAoCb,EAAIoE,UAAUC,QAC9DrE,EAAIkD,OAAOC,KAAK,iCAAmCnD,EAAIoE,UAAUC,OAAQ,CACrEjB,SAAU,CACNa,WAAYH,EACZI,WAAYH,KAGpB,MAAMO,EAAM,IAAIC,IAAIvE,EAAIoE,UAAUC,OAAS,eACvCP,GACAQ,EAAIE,aAAaC,IAAI,YAAaX,GAClCC,GACAO,EAAIE,aAAaC,IAAI,YAAaV,GAClCC,GACAM,EAAIE,aAAaC,IAAI,MAAOC,OAAOV,IACvC3D,QAAQQ,IAAI,wCAAwCiD,iBAAyBC,KAC7E/D,EAAIkD,OAAOC,KAAK,2BAA4B,CACxCC,SAAU,CACNa,WAAYH,EACZI,WAAYH,KAGpB,MAAMY,QAAY1D,MAAMqD,EAAK,CACzBpD,OAAQ,MACRC,QAAS,CACL,eAAgB,mBAChByD,cAAiB,UAAUT,OAEhCR,OAAMC,IAWL,MAVAiB,aAAaC,WAAWtF,GACxBqF,aAAaC,WAAWrF,GACxBY,QAAQD,MAAM,iCAAkCwD,GAChD5D,EAAIkD,OAAO9C,MAAM,iCAAkC,CAC/CgD,SAAU,CACNa,WAAYH,EACZI,WAAYH,EACZ3D,MAAOwD,KAGT,IAAI1D,MAAM,qCAEpB,GAAIiE,GAA2B,MAAhBQ,GAAK7C,OAAgB,CAChCzB,QAAQQ,IAAI,+DAAgE8D,GAAK7C,QACjF9B,EAAIkD,OAAO9C,MAAM,+DAAgE,CAC7EgD,SAAU,CACNa,WAAYH,EACZI,WAAYH,EACZjC,OAAQ6C,GAAK7C,UAGrB,MAAMiD,EAAiBC,EAAUb,GACjC,IAAKY,GAAgBzB,MAEjB,MADAtD,EAAIkD,OAAO9C,MAAM,8BACX,IAAIF,MAAM,8BASpB,MAPAF,EAAIkD,OAAO9C,MAAM,iBAAkB,CAC/BgD,SAAU,CACNa,WAAYH,EACZI,WAAYH,EACZT,MAAOyB,EAAezB,SAGxB,IAAI2B,EAAkB,iBAAkBF,EAAezB,MACrE,CACI,IAAKqB,IAAQA,EAAIjD,GASb,MARArB,QAAQD,MAAM,iCAAkCuE,GAChD3E,EAAIkD,OAAO9C,MAAM,iCAAkC,CAC/CgD,SAAU,CACNa,WAAYH,EACZI,WAAYH,EACZjC,OAAQ6C,GAAK7C,UAGf,IAAI5B,MAAM,kCAEpB,MAAM+C,MAAEA,SAAgB0B,EAAI/C,OAAO+B,OAAMC,IACrC5D,EAAIkD,OAAO9C,MAAM,mCAAoC,CACjDgD,SAAU,CACNa,WAAYH,EACZI,WAAYH,EACZ3D,MAAOwD,KAGfvD,QAAQD,MAAM,mCAAoCwD,MAEtD,OAAOX,CACX,CAQOvC,eAAewE,EAAsCpB,EAAWC,EAAWC,GAC9E,OAAOH,EAAqBlB,EAAsBmB,EAAWC,EAAWC,EAC5E,CACOtD,eAAeyE,EAAmBrB,EAAWC,EAAWqB,EAAWC,GAAe,EAAOC,GAAkB,GAC9G,MAAMC,EAAkBzB,GAAae,aAAaW,QAAQhG,SAA8BiG,EAClFC,EAAkB3B,GAAac,aAAaW,QAAQ/F,EAA4B,IAAM8F,SAAoBE,EAEhH,IAAKJ,GAAgB3F,GAAkBC,GAAcA,EAAWgG,IAAOC,KAAKC,MAAQ,IAAO,IACvF,MAAO,CAAEC,SAAUpG,EAAgBuD,MAAOtD,EAAYS,OAAO,GAWjE,IARKkF,GAAmB9E,IAAkBsC,YAEtCpD,QAAuBwF,EAAsCK,EAAiBG,IAEzEN,GAAa1F,KAElBA,QAAuBmE,GAAqB,IAAMtB,QAAQC,QAAQ4C,GAAa1F,IAAiB6F,EAAiBG,KAEhHhG,EAOD,MANAM,EAAIkD,OAAO9C,MAAM,oCAAqC,CAClDgD,SAAU,CACNa,WAAYsB,EACZrB,WAAYwB,KAGd,IAAIxF,MAAM,qCAGpB,GADAP,EAAaqF,EAAUtF,IAClBC,IAAeA,EAAWgG,MAAQjG,EAQnC,MAPAW,QAAQD,MAAM,2BAA4BT,GAC1CK,EAAIkD,OAAO9C,MAAM,2BAA4B,CACzCgD,SAAU,CACNa,WAAYsB,EACZrB,WAAYwB,KAGd,IAAIxF,MAAM,4BAEpB,MAAO,CAAE4F,SAAUpG,EAAgBuD,MAAOtD,EAAYS,OAAO,EACjE,CACO,MAAM6E,UAA0B/E,MACnCoD,MACA,WAAAyC,CAAYrD,EAASY,GACjB0C,MAAMtD,GACNuD,KAAKC,KAAO,oBACZD,KAAK3C,MAAQA,CACrB,EC7JO,SAAS6C,IACZ,MAAMtD,KAAEA,GAASuD,KACVC,EAAeC,GAAoBC,EAAS,OAC5CC,EAAWC,GAAgBF,GAAS,IACpCnG,EAAOsG,GAAYH,EAAS,MAkDnC,OAjDAI,GAAU,KACoBjG,WACtB,IAAKmC,GAAMS,MAGP,OAFAgD,EAAiB,WACjBG,GAAa,GAGjB,IACI,MAAMzF,QAAiBC,MAAM,sBAAuB,CAChDC,OAAQ,OACRC,QAAS,CACL,eAAgB,oBAEpBC,KAAMC,KAAKC,UAAU,CACjBV,YAAaiC,EAAKS,UAG1B,GAAItC,EAASU,GAAI,CACb,MAAMkF,QAAmB5F,EAASY,OAG9B0E,EAFAM,EAEiB,CACbC,UAAWD,EAAWV,MAAQ,UAC9BA,KAAMU,EAAWE,OAASF,EAAWV,MAAQ,UAC7Ca,OAAQH,EAAWG,QAAU,GAC7B9E,iBAAkB2E,EAAW3E,iBAC7BI,SAAUuE,EAAWvE,SACrB2E,KAAMJ,EAAWI,MAIJ,KAEzC,MAEoBV,EAAiB,KAErC,CACY,MAAOlG,GACHC,QAAQD,MAAM,gCAAiCA,GAC/CsG,EAAS,uCACTJ,EAAiB,KACjC,CACoB,QACJG,GAAa,EAC7B,GAEQQ,KACD,CAACpE,GAAMS,QACH,CACH+C,gBACAG,YACApG,QAER,CC7DO,MAAM8G,EACTC,MACAC,IAAM,CAAE,EACR,WAAArB,CAAYoB,GACRlB,KAAKkB,MAAQA,EAEbA,EAAME,MAAK,CAACC,EAAGC,IAAMD,EAAEpB,KAAKsB,cAAcD,EAAErB,QAC5C,IAAK,MAAMuB,KAAQN,EACflB,KAAKmB,IAAIK,EAAKC,IAAMD,CAEhC,CACI,OAAAE,CAAQD,GACJ,OAAOzB,KAAKmB,IAAIM,EACxB,CACI,aAAAE,CAAcF,GACV,MAAMD,EAAOxB,KAAKmB,IAAIM,GACtB,OAAOD,EAAOA,EAAKI,kBAAepC,CAC1C,CACI,WAAAqC,CAAYJ,GACR,MAAMD,EAAOxB,KAAKmB,IAAIM,GACtB,OAAOD,EAAOA,EAAKvB,UAAOT,CAClC,ECZA,MAAMsC,EACFvB,WAAY,EACZwB,OACAC,UACAC,UACAC,aACAC,WACAC,oBACAC,oBACAC,mBACA,WAAAxC,CAAYiC,EAAQI,GAEZnC,KAAK+B,OADLA,GAIc,IAAIQ,EAAe,CAC7BC,UAAWzI,EAAIoE,UAAUC,OACzBqE,SAAU1I,EAAIoE,UAAUuE,OAG5BP,IACAnC,KAAKmC,WAAaA,GAEtBnC,KAAK2C,OAAS3C,KAAK2C,OAAOC,KAAK5C,KACvC,CACI,SAAI6C,GACA,OAAO7C,KAAK+B,OAAOc,KAC3B,CACI,QAAIjG,GACA,OAAOoD,KAAKiC,SACpB,CACI,WAAIa,GACA,OAAO9C,KAAKiC,WAAWa,OAC/B,CACI,WAAIC,GACA,OAAO/C,KAAKiC,WAAWc,OAC/B,CACI,YAAIC,GACA,OAAOhD,KAAKiC,WAAWe,QAC/B,CACI,gBAAIC,GACA,OAAOjD,KAAKkD,aAAanG,MAAKC,GAAS,UAAUA,KACzD,CACI,gBAAIkG,GACA,OAAOhE,IAAqBnC,MAAK2B,IAC7B,MAAM1B,EAAQ0B,GAAKmB,SACnB,IAAK7C,EACD,MAAM,IAAI/C,MAAM,sBAGpB,OADA+F,KAAKiC,UAAYlD,EAAU/B,GACpBA,IAEnB,CACI,OAAAmG,GACInD,KAAK2C,QACb,CACI,UAAAS,GACI,OAAOpD,KAAKiC,WAAWa,OAC/B,CACI,WAAMO,CAAMrG,GAgBR,OAfAgD,KAAKgC,eAAYxC,EACjBQ,KAAKO,WAAY,EACjBP,KAAK+B,OAAOuB,kBAAiB,IAAMtD,KAAKiD,eACxCjD,KAAKiC,UAAYlD,EAAU/B,GAC3B5C,QAAQQ,IAAI,iBAAiBoF,KAAKiC,WAAWhC,qBAAqBD,KAAKiC,WAAWa,QAAQ7C,SAASD,KAAKiC,WAAWa,QAAQrB,mBAAmBzB,KAAKiC,WAAWc,SAAS9C,SAASD,KAAKiC,WAAWc,SAAStB,OAEzM7C,aAAa2E,QAAQhK,EAA2ByG,KAAKiC,UAAUa,QAAQrB,IACvE7C,aAAa2E,QAAQ/J,EAA4B,IAAMwG,KAAKiC,UAAUa,QAAQrB,GAAIzB,KAAKiC,UAAUc,SAAStB,IAAM,IAEhH1H,EAAIyJ,UAAUxD,KAAKiC,iBAEb3F,QAAQmH,IAAI,CACdzD,KAAK0D,aACL1D,KAAK2D,0BAEFrH,QAAQC,SACvB,CACI,UAAAqH,GACI,QAAS5D,KAAKiC,SACtB,CACI,MAAAU,GACIvI,QAAQQ,IAAI,eACRoF,KAAKiC,WACL1H,IAAkB4I,UAEtBnD,KAAKgC,eAAYxC,EACjBQ,KAAKO,WAAY,EACjBP,KAAKiC,eAAYzC,EACjBQ,KAAKkC,kBAAe1C,EACpBQ,KAAKmC,gBAAa3C,EAClBQ,KAAK+B,OAAOuB,sBAAiB9D,EACrC,CACI,mBAAMqE,CAAcC,GAChBlF,aAAa2E,QAAQhK,EAA2BuK,GAC5C9D,OACIA,KAAK8C,SAAW9C,KAAK+C,QACrBnE,aAAa2E,QAAQ/J,EAA4B,IAAMwG,KAAK8C,QAAQrB,GAAIzB,KAAK+C,QAAQtB,IAEhFzB,KAAK8C,SACVlE,aAAaC,WAAWrF,EAA4B,IAAMwG,KAAK8C,QAAQrB,KAG/EsC,OAAOC,SAASC,QAAQ,OAASH,EACzC,CACI,mBAAMI,CAAcC,GACZnE,KAAK8C,SACLlE,aAAa2E,QAAQ/J,EAA4B,IAAMwG,KAAK8C,QAAQrB,GAAI0C,GAE5EJ,OAAOC,SAASC,QAAQ,OAASjE,KAAK8C,SAASrB,GAAK,MAAQ0C,EACpE,CACI,gBAAMT,GACF,GAAI1D,KAAK+C,QACL,OAAO/C,KAAK6C,MAAM3B,MAAMkD,KAAK,CAAA,EAAI,CAAEC,QAAQ,IAAQtH,MAAKmE,GAASlB,KAAKkC,aAAe,IAAIjB,EAAaC,KAAQxD,OAAMC,IAEhH,MADAvD,QAAQD,MAAM,+BAAgCwD,GACxCA,KAIVvD,QAAQQ,IAAI,sBAExB,CACI,iBAAM0J,GACF,OAAOtE,KAAK0D,aAAa3G,MAAK,KAC1BiD,KAAKmC,aAAanC,KAAKuE,WAEnC,CACI,mBAAMC,GACF,OAAOxE,KAAK+B,OAAOiB,SAASoB,OAAOrH,MAAKiG,IACpC,IAAKhD,KAAKiC,UACN,MAAM,IAAIhI,MAAM,sBAEpB+F,KAAKiC,UAAUe,SAAWA,EAC1BhD,KAAKmC,aAAanC,KAAKuE,YACxB7G,OAAMC,IAEL,MADAvD,QAAQD,MAAM,2BAA4BwD,GACpCA,IAElB,CACI,2BAAMgG,GACF,GAAI3D,KAAKsC,mBAEL,OADAlI,QAAQQ,IAAI,iCACL,EAEX,MAAM6J,EAAiBzE,KAAKsC,mBAC5B,IACI,MAAMoC,QAAmB1E,KAAK+B,OAAOe,QAAQ6B,qBAE7C,GADA3E,KAAKsC,mBAAqBsC,OAAOC,OAAOH,GAAYI,OAAMC,IAAmB,IAAVA,IAC/DN,IAAmBzE,KAAKsC,mBACxB,OAAO,EAEXtC,KAAKmC,aAAanC,KAAKuE,QACnC,CACQ,MAAOpK,GACHC,QAAQD,MAAM,oCAAqCA,GACnD6F,KAAKsC,oBAAqB,EAC1BtC,KAAKmC,aAAanC,KAAKuE,QACnC,CACQ,OAAO,CACf,CACI,KAAAA,GACI,MAAMS,EAAU,IAAIlD,EAAY9B,KAAK+B,QASrC,OARAiD,EAAQzE,UAAYP,KAAKO,UACzByE,EAAQhD,UAAYhC,KAAKgC,UACzBgD,EAAQ/C,UAAYjC,KAAKiC,UACzB+C,EAAQ7C,WAAanC,KAAKmC,WAC1B6C,EAAQ5C,oBAAsBpC,KAAKoC,oBACnC4C,EAAQnB,cAAgB7D,KAAK6D,cAC7BmB,EAAQ9C,aAAelC,KAAKkC,aAC5B8C,EAAQ1C,mBAAqBtC,KAAKsC,mBAC3B0C,CACf,EAEK,MAACC,EAAqBC,OAAc1F,GAClC,SAASW,IACZ,MAAM6E,EAAUG,EAAWF,GAC3B,IAAKD,EACD,MAAM,IAAI/K,MAAM,4DAEpB,OAAO+K,CACX,CCvLA,MAAMI,EAAiB,aACjBC,EAAmB,oBCEzB,MAAMC,EAAa,CAAC,iBAAkB,gBAAiB,gBAEvD,SAASC,IAGL,QAAIxL,EAAIyL,UAGDF,EAAWG,MAAM3E,GAAWiD,OAAOC,SAAS0B,SAASC,SAAS7E,IACzE,CACO,SAAS8E,GAAoBC,SAAEA,IAClC,MAAMC,EAAa,IAAIC,gBAAgB/B,SAASgC,KAAKC,UAAU,IACzDjJ,EAAQ8I,EAAWI,IAAI,SACvBC,EAAQL,EAAWI,IAAI,UACtBlB,EAAS7C,GAAc7B,EAAS,IAAIwB,IACrCsE,cAAEA,EAAaC,YAAEA,EAAWC,WAAEA,GDoB7B,CAAEF,cAjCaG,GAAY,KAC9B,MAAMJ,EAAQK,OAAOC,aACfC,EAAa/G,KAAKC,MALd,IASV,OAFA+G,eAAepD,QAAQ6B,EAAgBe,GACvCQ,eAAepD,QAAQ8B,EAAkBqB,EAAWE,YAC7CT,IACR,IA0BqBE,YAxBJE,GAAaM,IAC7B,IAAKA,EACD,MAAO,gBAEX,MAAMC,EAAaH,eAAepH,QAAQ6F,GACpCsB,EAAaK,SAASJ,eAAepH,QAAQ8F,IAAqB,KACxE,IAAI2B,EAWJ,OARIA,EADAF,IAAeD,EACN,qBAAqBC,SAAkBD,KAE3ClH,KAAKC,MAAQ8G,EACT,qBAGAlH,EAENwH,IACR,IAMkCV,WAJlBC,GAAY,KAC3BI,eAAe9H,WAAWuG,GAC1BuB,eAAe9H,WAAWwG,KAC3B,KClBG4B,EAAwB,CAACnJ,EAAWD,KACtC,MAAMQ,EAAM,IAAIC,IAhBM,uCAiBhB4I,EAAa,IAAI5I,IAAIyF,OAAOC,SAASmD,MAC3CD,EAAWlB,KAAO,GAKlB3H,EAAIE,aAAaC,IAAI,eAAgB0I,EAAWN,YAChDvI,EAAIE,aAAaC,IAAI,QAAS4H,KAC9BpC,SAASC,QAAQ5F,EAAIuI,aA+HzB,OA7HAlG,GAAU,KACNtG,QAAQQ,IAAI,4BACZb,EAAIkD,OAAOC,KAAK,sBAChB,MAAMgK,EAAa,IAAI5I,IAAIyF,OAAOC,SAASmD,MACrC7H,EAAkB4H,EAAW3I,aAAa2H,IAAI,MAAQtH,aAAaW,QAAQhG,SAA8BiG,EACzGC,EAAkByH,EAAW3I,aAAa2H,IAAI,MAChDtH,aAAaW,QAAQ/F,EAA4B,IAAM8F,SACvDE,EASJ,GARApF,QAAQQ,IAAI,yBAA0B0E,GACtClF,QAAQQ,IAAI,yBAA0B6E,GACtC1F,EAAIkD,OAAOC,KAAK,+BAAgC,CAC5CC,SAAU,CACNa,WAAYsB,EACZrB,WAAYwB,KAGhBzC,GAASmJ,EAAO,CAChB,MAAMiB,EAAkBf,EAAYF,GA8BpC,OA7BIiB,GACAhN,QAAQD,MAAM,wBAAwBiN,KACtCrN,EAAIkD,OAAO9C,MAAM,kBAAkBiN,IAAmB,CAClDjK,SAAU,CACNgJ,MAAOA,KAGfc,KAGAX,SAEJpH,EAAmBI,EAAiBG,EAAiBzC,GAAO,EAAOuI,KAC9DxI,MAAM2B,IACPsG,EAAQ3B,MAAM3E,EAAImB,UAAU9C,MAAK,KAC7BoF,EAAW6C,EAAQT,SAEnBR,OAAOC,SAASgC,KAAO,SAG1BtI,OAAOC,IACRvD,QAAQD,MAAM,sEAAuEwD,GACrF5D,EAAIkD,OAAO9C,MAAM,sEAAuE,CACpFgD,SAAU,CACNhD,MAAOwD,KAGfsJ,MAGhB,CAgCQ,OA7BSjC,EAAQpB,eACTxJ,QAAQQ,IAAI,wCACZb,EAAIkD,OAAOC,KAAK,iCAAkC,CAC9CC,SAAU,CACNa,WAAYsB,EACZrB,WAAYwB,KAGhB8F,KACAnL,QAAQQ,IAAI,kEAAmE0E,EAAiBG,GAChG1F,EAAIkD,OAAOC,KAAK,6CAA8C,CAC1DC,SAAU,CACNa,WAAYsB,EACZrB,WAAYwB,KAGpBwH,MAGA7M,QAAQQ,IAAI,2BACZb,EAAIkD,OAAOC,KAAK,oBAAqB,CACjCC,SAAU,CACNa,WAAYsB,EACZrB,WAAYwB,OAMzB4H,EAAmB9M,KAAmBE,MAAO6M,IAC5CA,GACAlN,QAAQQ,IAAI,wCACZb,EAAIkD,OAAOC,KAAK,iCAAkC,CAC9CC,SAAU,CACNa,WAAYsB,EACZrB,WAAYwB,KAGpBuF,EAAQ7C,WAAaA,QACfjD,EAAmBI,EAAiBG,OAAiBD,GAAW,EAAO+F,KACxExI,MAAM2B,IACPsG,EAAQ3B,MAAM3E,EAAImB,UAAU9C,MAAK,IAAMoF,EAAW6C,EAAQT,cAEzD7G,OAAOC,IACRvD,QAAQD,MAAM,yCAA0CwD,GACxD5D,EAAIkD,OAAO9C,MAAM,yCAA0C,CACvDgD,SAAU,CACNa,WAAYsB,EACZrB,WAAYwB,EACZtF,MAAOwD,KAGTA,aAAeqB,GACjBgG,EAAQrC,SACZqC,EAAQzE,WAAY,EACpByE,EAAQhD,UAAYrE,EACpBwE,EAAW6C,EAAQT,cAKvBnK,QAAQQ,IAAI,8BACZb,EAAIkD,OAAOC,KAAK,uBAAwB,CACpCC,SAAU,CACNa,WAAYsB,EACZrB,WAAYwB,KAGpBuF,EAAQjD,OAAOuB,sBAAiB9D,GAChCwF,EAAQrC,SACRR,EAAW6C,EAAQT,eAG5B,IACIgD,EAAKtC,EAAmBuC,SAAU,CAAEzC,MAAOC,EAASa,SAAUA,GACzE,CC/JO,SAAS4B,IAoBZ,MAAO,CACHC,eAnBmBjN,MAAOmC,IAC1B,MAAM+K,EAAa5D,OAAOnF,aAAaW,QAAQ,wBAC1C3C,EAID+K,GACA5D,OAAOnF,aAAaC,WAAW,wBAJ/BzE,QAAQD,MAAM,sCAiBlByN,WATe,CAACC,EAAWC,KACtB/N,EAAIgO,QACL3N,QAAQ4N,MAAM,cAAeH,EAAWC,GAG5CG,EAAS5N,IAAwBwN,EAAW,IAAKC,EAAiBI,YAAanO,EAAIgO,UAM3F"}
+{"version":3,"file":"vertesia-ui-session.js","sources":["esm/session/constants.js","esm/session/auth/firebase.js","esm/session/auth/composable.js","esm/session/auth/useCurrentTenant.js","esm/session/TypeRegistry.js","esm/session/UserSession.js","esm/session/auth/useAuthState.js","esm/session/UserSessionProvider.js","esm/session/useUXTracking.js"],"sourcesContent":["export const LastSelectedAccountId_KEY = 'composableai.lastSelectedAccountId';\nexport const LastSelectedProjectId_KEY = 'composableai.lastSelectedProjectId';\n//# sourceMappingURL=constants.js.map","import { Env } from \"@vertesia/ui/env\";\nimport { getAnalytics } from \"firebase/analytics\";\nimport { initializeApp } from \"firebase/app\";\nimport { getAuth } from \"firebase/auth\";\n// Use lazy initialization to avoid accessing Env before it's initialized\nlet _firebaseApp = null;\nlet _analytics = null;\nlet _firebaseAuth = null;\n// Getters that lazily initialize Firebase components when first accessed\nexport function getFirebaseApp() {\n    if (!_firebaseApp) {\n        try {\n            if (!Env.firebase) {\n                throw new Error(\"Firebase configuration is not available in the environment\");\n            }\n            _firebaseApp = initializeApp(Env.firebase);\n        }\n        catch (error) {\n            console.error(\"Failed to initialize Firebase app:\", error);\n            throw new Error(\"Firebase initialization failed - environment may not be properly initialized\");\n        }\n    }\n    return _firebaseApp;\n}\nexport function getFirebaseAnalytics() {\n    if (!_analytics) {\n        _analytics = getAnalytics(getFirebaseApp());\n    }\n    return _analytics;\n}\nexport function getFirebaseAuth() {\n    if (!_firebaseAuth) {\n        _firebaseAuth = getAuth(getFirebaseApp());\n    }\n    return _firebaseAuth;\n}\nexport async function setFirebaseTenant(tenantEmail) {\n    if (!tenantEmail) {\n        console.log(\"No tenant name or email specified, skipping tenant setup\");\n        return;\n    }\n    if (!Env.firebase) {\n        console.log(\"Firebase configuration is not available in the environment\");\n        return;\n    }\n    try {\n        if (tenantEmail)\n            console.log(`Resolving tenant ID from email: ${tenantEmail}`);\n        // Add retry logic with exponential backoff\n        let retries = 3;\n        let retryDelay = 250; // Start with 250ms delay\n        while (retries > 0) {\n            try {\n                // Call the API endpoint to resolve the tenant ID\n                const response = await fetch(\"/api/resolve-tenant\", {\n                    method: \"POST\",\n                    headers: {\n                        \"Content-Type\": \"application/json\",\n                    },\n                    body: JSON.stringify({\n                        tenantEmail: tenantEmail,\n                    }),\n                    // Add timeout to prevent hanging requests\n                    signal: AbortSignal.timeout(5000),\n                });\n                // Check for network errors\n                if (!response) {\n                    throw new Error(\"No response received from tenant API\");\n                }\n                // Handle HTTP error responses\n                if (!response.ok) {\n                    // Try to parse the error response\n                    try {\n                        const errorData = await response.json();\n                        console.error(\"Failed to resolve tenant ID:\", errorData.error);\n                    }\n                    catch (parseError) {\n                        console.error(`Failed to resolve tenant ID: HTTP ${response.status}`);\n                    }\n                    // If the error is 404 Not Found, no need to retry\n                    if (response.status === 404) {\n                        console.warn(`Tenant not found for ${tenantEmail}`);\n                        return;\n                    }\n                    throw new Error(`HTTP error ${response.status}`);\n                }\n                // Successfully got a response, parse it\n                const data = (await response.json());\n                if (data && data.firebaseTenantId) {\n                    const auth = getFirebaseAuth();\n                    auth.tenantId = data.firebaseTenantId;\n                    Env.firebase.providerType = data.provider ?? \"oidc\";\n                    console.log(`Tenant ID set to ${auth.tenantId}`);\n                    return data;\n                }\n                else {\n                    console.error(`Invalid response format, missing tenantId for ${tenantEmail}`);\n                    return; // No need to retry for invalid response format\n                }\n            }\n            catch (fetchError) {\n                // Only retry for network-related errors\n                if (retries > 1) {\n                    console.warn(`Tenant resolution failed, retrying in ${retryDelay}ms...`, fetchError);\n                    await new Promise((resolve) => setTimeout(resolve, retryDelay));\n                    retryDelay *= 2; // Exponential backoff\n                    retries--;\n                }\n                else {\n                    throw fetchError; // Last retry failed, propagate error\n                }\n            }\n        }\n    }\n    catch (error) {\n        // Final error handler\n        console.error(\"Error setting Firebase tenant:\", error instanceof Error ? error.message : \"Unknown error\");\n        // Continue without tenant ID - authentication will work without multi-tenancy\n        // but the user will access the default tenant\n    }\n}\nexport async function getFirebaseAuthToken(refresh) {\n    const auth = getFirebaseAuth();\n    const user = auth.currentUser;\n    if (user) {\n        return user\n            .getIdToken(refresh)\n            .then((token) => {\n            Env.logger.info(\"Got Firebase token\", {\n                vertesia: {\n                    user_email: user.email,\n                    user_name: user.displayName,\n                    user_id: user.uid,\n                    refresh: refresh,\n                },\n            });\n            return token;\n        })\n            .catch((err) => {\n            Env.logger.error(\"Failed to get Firebase token\", {\n                vertesia: {\n                    user_email: user.email,\n                    user_name: user.displayName,\n                    user_id: user.uid,\n                    refresh: refresh,\n                    error: err,\n                },\n            });\n            console.error(\"Failed to get access token\", err);\n            return null;\n        });\n    }\n    else {\n        Env.logger.warn(\"No user found\");\n        return Promise.resolve(null);\n    }\n}\n//# sourceMappingURL=firebase.js.map","import { jwtDecode } from \"jwt-decode\";\nimport { Env } from '@vertesia/ui/env';\nimport { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY } from '../constants';\nimport { getFirebaseAuth, getFirebaseAuthToken } from './firebase';\nlet AUTH_TOKEN_RAW;\nlet AUTH_TOKEN;\nexport async function fetchComposableToken(getIdToken, accountId, projectId, ttl) {\n    console.log(`Getting/refreshing composable token for account ${accountId} and project ${projectId} `);\n    Env.logger.info('Getting/refreshing composable token', {\n        vertesia: {\n            account_id: accountId,\n            project_id: projectId,\n        },\n    });\n    const idToken = await getIdToken(); //get from firebase\n    if (!idToken) {\n        console.log('No id token found - using cookie auth');\n        throw new Error('No id token found');\n    }\n    // Use STS endpoint - either configured or default to sts.vertesia.io\n    const stsEndpoint = Env.endpoints.sts;\n    console.log('Using STS for token generation:', stsEndpoint);\n    Env.logger.info('Using STS for token generation', {\n        vertesia: {\n            account_id: accountId,\n            project_id: projectId,\n            sts_url: stsEndpoint,\n        },\n    });\n    try {\n        // Call STS to generate a user token\n        const stsUrl = new URL(stsEndpoint + '/token/issue');\n        const requestBody = {\n            type: 'user',\n            account_id: accountId,\n            project_id: projectId,\n            expires_at: ttl ? Math.floor(Date.now() / 1000) + ttl : undefined,\n        };\n        const stsRes = await fetch(stsUrl, {\n            method: 'POST',\n            headers: {\n                'Content-Type': 'application/json',\n                'Authorization': `Bearer ${idToken}` // Firebase token for authentication\n            },\n            body: JSON.stringify(requestBody)\n        });\n        if (idToken && stsRes?.status === 412) {\n            console.log(\"412: auth succeeded but user doesn't exist - signup required\", stsRes?.status);\n            Env.logger.error(\"412: auth succeeded but user doesn't exist - signup required\", {\n                vertesia: {\n                    account_id: accountId,\n                    project_id: projectId,\n                    status: stsRes?.status\n                },\n            });\n            const idTokenDecoded = jwtDecode(idToken);\n            if (!idTokenDecoded?.email) {\n                Env.logger.error('No email found in id token');\n                throw new Error('No email found in id token');\n            }\n            Env.logger.error('User not found', {\n                vertesia: {\n                    account_id: accountId,\n                    project_id: projectId,\n                    email: idTokenDecoded.email\n                }\n            });\n            throw new UserNotFoundError('User not found', idTokenDecoded.email);\n        }\n        if (!stsRes.ok) {\n            const errorText = await stsRes.text();\n            console.error('STS token generation failed:', stsRes.status, errorText);\n            Env.logger.error('STS token generation failed', {\n                vertesia: {\n                    status: stsRes.status,\n                    error: errorText,\n                    account_id: accountId,\n                    project_id: projectId,\n                },\n            });\n            throw new Error(`Failed to get token from STS: ${stsRes.status}`);\n        }\n        const { token } = await stsRes.json();\n        console.log('Successfully got token from STS');\n        Env.logger.info('Successfully got token from STS');\n        return token;\n    }\n    catch (error) {\n        if (error instanceof UserNotFoundError) {\n            throw error; // Re-throw UserNotFoundError\n        }\n        localStorage.removeItem(LastSelectedAccountId_KEY);\n        localStorage.removeItem(LastSelectedProjectId_KEY);\n        console.error('Failed to get composable token from STS', error);\n        Env.logger.error('Failed to get composable token from STS', {\n            vertesia: {\n                account_id: accountId,\n                project_id: projectId,\n                error: error,\n            },\n        });\n        throw new Error('Failed to get composable token');\n    }\n}\n/**\n *\n * @param accountId\n * @param projectId\n * @param ttl time to live for the token in seconds\n * @returns\n */\nexport async function fetchComposableTokenFromFirebaseToken(accountId, projectId, ttl) {\n    return fetchComposableToken(getFirebaseAuthToken, accountId, projectId, ttl);\n}\nexport async function getComposableToken(accountId, projectId, initToken, forceRefresh = false, useInternalAuth = false) {\n    const selectedAccount = accountId ?? localStorage.getItem(LastSelectedAccountId_KEY) ?? undefined;\n    const selectedProject = projectId ?? localStorage.getItem(LastSelectedProjectId_KEY + '-' + selectedAccount) ?? undefined;\n    //token is still valid for more than 5 minutes\n    if (!forceRefresh && AUTH_TOKEN_RAW && AUTH_TOKEN && AUTH_TOKEN.exp > (Date.now() / 1000 + 300)) {\n        return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };\n    }\n    //token is close to expire, refresh it\n    if (!useInternalAuth && getFirebaseAuth().currentUser) {\n        //we have a firebase user, get the token from there\n        AUTH_TOKEN_RAW = await fetchComposableTokenFromFirebaseToken(selectedAccount, selectedProject);\n    }\n    else if (initToken || AUTH_TOKEN_RAW) {\n        // we have a token already and no firebase user, refresh it\n        AUTH_TOKEN_RAW = await fetchComposableToken(() => Promise.resolve(initToken ?? AUTH_TOKEN_RAW), selectedAccount, selectedProject);\n    }\n    if (!AUTH_TOKEN_RAW) {\n        Env.logger.error('Cannot acquire a composable token', {\n            vertesia: {\n                account_id: selectedAccount,\n                project_id: selectedProject,\n            },\n        });\n        throw new Error('Cannot acquire a composable token');\n    }\n    AUTH_TOKEN = jwtDecode(AUTH_TOKEN_RAW);\n    if (!AUTH_TOKEN || !AUTH_TOKEN.exp || !AUTH_TOKEN_RAW) {\n        console.error('Invalid composable token', AUTH_TOKEN);\n        Env.logger.error('Invalid composable token', {\n            vertesia: {\n                account_id: selectedAccount,\n                project_id: selectedProject,\n            },\n        });\n        throw new Error('Invalid composable token');\n    }\n    return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };\n}\nexport class UserNotFoundError extends Error {\n    email;\n    constructor(message, email) {\n        super(message);\n        this.name = 'UserNotFoundError';\n        this.email = email;\n    }\n}\n//# sourceMappingURL=composable.js.map","import { useState, useEffect } from 'react';\nimport { useUserSession } from \"@vertesia/ui/session\";\nexport function useCurrentTenant() {\n    const { user } = useUserSession();\n    const [currentTenant, setCurrentTenant] = useState(null);\n    const [isLoading, setIsLoading] = useState(true);\n    const [error, setError] = useState(null);\n    useEffect(() => {\n        const loadCurrentTenant = async () => {\n            if (!user?.email) {\n                setCurrentTenant(null);\n                setIsLoading(false);\n                return;\n            }\n            try {\n                const response = await fetch('/api/resolve-tenant', {\n                    method: 'POST',\n                    headers: {\n                        'Content-Type': 'application/json',\n                    },\n                    body: JSON.stringify({\n                        tenantEmail: user.email\n                    })\n                });\n                if (response.ok) {\n                    const tenantData = await response.json();\n                    if (tenantData) {\n                        // Convert the resolved tenant data to our TenantConfig format\n                        setCurrentTenant({\n                            tenantKey: tenantData.name || 'unknown',\n                            name: tenantData.label || tenantData.name || 'Unknown',\n                            domain: tenantData.domain || [],\n                            firebaseTenantId: tenantData.firebaseTenantId,\n                            provider: tenantData.provider,\n                            logo: tenantData.logo\n                        });\n                    }\n                    else {\n                        setCurrentTenant(null);\n                    }\n                }\n                else {\n                    setCurrentTenant(null);\n                }\n            }\n            catch (error) {\n                console.error('Error loading current tenant:', error);\n                setError('Failed to load tenant configuration');\n                setCurrentTenant(null);\n            }\n            finally {\n                setIsLoading(false);\n            }\n        };\n        loadCurrentTenant();\n    }, [user?.email]);\n    return {\n        currentTenant,\n        isLoading,\n        error\n    };\n}\n//# sourceMappingURL=useCurrentTenant.js.map","export class TypeRegistry {\n    types;\n    map = {};\n    constructor(types) {\n        this.types = types;\n        //sort types\n        types.sort((a, b) => a.name.localeCompare(b.name));\n        for (const type of types) {\n            this.map[type.id] = type;\n        }\n    }\n    getType(id) {\n        return this.map[id];\n    }\n    getTypeLayout(id) {\n        const type = this.map[id];\n        return type ? type.table_layout : undefined;\n    }\n    getTypeName(id) {\n        const type = this.map[id];\n        return type ? type.name : undefined;\n    }\n}\n//# sourceMappingURL=TypeRegistry.js.map","import { jwtDecode } from 'jwt-decode';\nimport { createContext, useContext } from 'react';\nimport { VertesiaClient } from '@vertesia/client';\nimport { Env } from '@vertesia/ui/env';\nimport { getComposableToken } from './auth/composable';\nimport { getFirebaseAuth } from './auth/firebase';\nimport { TypeRegistry } from './TypeRegistry';\nimport { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY } from './constants';\nexport { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY };\nclass UserSession {\n    isLoading = true;\n    client;\n    authError;\n    authToken;\n    typeRegistry;\n    setSession;\n    lastSelectedAccount;\n    lastSelectedProject;\n    onboardingComplete;\n    constructor(client, setSession) {\n        if (client) {\n            this.client = client;\n        }\n        else {\n            this.client = new VertesiaClient({\n                serverUrl: Env.endpoints.studio,\n                storeUrl: Env.endpoints.zeno,\n                tokenServerUrl: Env.endpoints.sts\n            });\n        }\n        if (setSession) {\n            this.setSession = setSession;\n        }\n        this.logout = this.logout.bind(this);\n    }\n    get store() {\n        return this.client.store;\n    }\n    get user() {\n        return this.authToken;\n    }\n    get account() {\n        return this.authToken?.account;\n    }\n    get project() {\n        return this.authToken?.project;\n    }\n    get accounts() {\n        return this.authToken?.accounts;\n    }\n    get authCallback() {\n        return this.rawAuthToken.then(token => `Bearer ${token}`);\n    }\n    get rawAuthToken() {\n        return getComposableToken().then(res => {\n            const token = res?.rawToken;\n            if (!token) {\n                throw new Error('No token available');\n            }\n            this.authToken = jwtDecode(token);\n            return token;\n        });\n    }\n    signOut() {\n        this.logout();\n    }\n    getAccount() {\n        return this.authToken?.account;\n    }\n    async login(token) {\n        this.authError = undefined;\n        this.isLoading = false;\n        this.client.withAuthCallback(() => this.authCallback);\n        this.authToken = jwtDecode(token);\n        console.log(`Logging in as ${this.authToken?.name} with account ${this.authToken?.account.name} (${this.authToken?.account.id}, and project ${this.authToken?.project?.name} (${this.authToken?.project?.id})`);\n        //store selected account in local storage\n        localStorage.setItem(LastSelectedAccountId_KEY, this.authToken.account.id);\n        localStorage.setItem(LastSelectedProjectId_KEY + '-' + this.authToken.account.id, this.authToken.project?.id ?? '');\n        // notify the host app of the login\n        Env.onLogin?.(this.authToken);\n        // Independent async calls\n        await Promise.all([\n            this._loadTypes(),\n            this.fetchOnboardingStatus(),\n        ]);\n        return Promise.resolve();\n    }\n    isLoggedIn() {\n        return !!this.authToken;\n    }\n    logout() {\n        console.log('Logging out');\n        if (this.authToken) {\n            getFirebaseAuth().signOut();\n        }\n        this.authError = undefined;\n        this.isLoading = false;\n        this.authToken = undefined;\n        this.typeRegistry = undefined;\n        this.setSession = undefined;\n        this.client.withAuthCallback(undefined);\n    }\n    async switchAccount(targetAccountId) {\n        localStorage.setItem(LastSelectedAccountId_KEY, targetAccountId);\n        if (this) {\n            if (this.account && this.project) {\n                localStorage.setItem(LastSelectedProjectId_KEY + '-' + this.account.id, this.project.id);\n            }\n            else if (this.account) {\n                localStorage.removeItem(LastSelectedProjectId_KEY + '-' + this.account.id);\n            }\n        }\n        window.location.replace('/?a=' + targetAccountId);\n    }\n    async switchProject(targetProjectId) {\n        if (this.account) {\n            localStorage.setItem(LastSelectedProjectId_KEY + '-' + this.account.id, targetProjectId);\n        }\n        window.location.replace('/?a=' + this.account?.id + '&p=' + targetProjectId);\n    }\n    async _loadTypes() {\n        if (this.project) {\n            return this.store.types.list({}, { layout: true }).then(types => this.typeRegistry = new TypeRegistry(types)).catch(err => {\n                console.error('Failed to fetch object types', err);\n                throw err;\n            });\n        }\n        else {\n            console.log('No project selected');\n        }\n    }\n    async reloadTypes() {\n        return this._loadTypes().then(() => {\n            this.setSession?.(this.clone());\n        });\n    }\n    async fetchAccounts() {\n        return this.client.accounts.list().then(accounts => {\n            if (!this.authToken) {\n                throw new Error('No token available');\n            }\n            this.authToken.accounts = accounts;\n            this.setSession?.(this.clone());\n        }).catch(err => {\n            console.error('Failed to fetch accounts', err);\n            throw err;\n        });\n    }\n    async fetchOnboardingStatus() {\n        if (this.onboardingComplete) {\n            console.log('Onboarding already completed');\n            return false;\n        }\n        const previousStatus = this.onboardingComplete;\n        try {\n            const onboarding = await this.client.account.onboardingProgress();\n            this.onboardingComplete = Object.values(onboarding).every(value => value === true);\n            if (previousStatus !== this.onboardingComplete) {\n                return true;\n            }\n            this.setSession?.(this.clone());\n        }\n        catch (error) {\n            console.error('Error fetching onboarding status:', error);\n            this.onboardingComplete = false;\n            this.setSession?.(this.clone());\n        }\n        return false;\n    }\n    clone() {\n        const session = new UserSession(this.client);\n        session.isLoading = this.isLoading;\n        session.authError = this.authError;\n        session.authToken = this.authToken;\n        session.setSession = this.setSession;\n        session.lastSelectedAccount = this.lastSelectedAccount;\n        session.switchAccount = this.switchAccount;\n        session.typeRegistry = this.typeRegistry;\n        session.onboardingComplete = this.onboardingComplete;\n        return session;\n    }\n}\nconst UserSessionContext = createContext(undefined);\nexport function useUserSession() {\n    const session = useContext(UserSessionContext);\n    if (!session) {\n        throw new Error('useUserSession must be used within a UserSessionProvider');\n    }\n    return session;\n}\nexport { UserSession, UserSessionContext };\n//# sourceMappingURL=UserSession.js.map","/**\n * This hook is used to generate and verify state for OAuth2 authorization requests.\n * @returns\n */\nimport { useCallback } from \"react\";\nconst AUTH_STATE_KEY = 'auth_state';\nconst STATE_EXPIRY_KEY = 'auth_state_expiry';\nconst STATE_TTL = 5 * 60 * 1000; // 5 min\nexport function useAuthState() {\n    // Generate new state\n    const generateState = useCallback(() => {\n        const state = crypto.randomUUID();\n        const expiryTime = Date.now() + STATE_TTL;\n        // Store state and expiry\n        sessionStorage.setItem(AUTH_STATE_KEY, state);\n        sessionStorage.setItem(STATE_EXPIRY_KEY, expiryTime.toString());\n        return state;\n    }, []);\n    // Verify returned state\n    const verifyState = useCallback((returnedState) => {\n        if (!returnedState) {\n            return 'Missing state';\n        }\n        const savedState = sessionStorage.getItem(AUTH_STATE_KEY);\n        const expiryTime = parseInt(sessionStorage.getItem(STATE_EXPIRY_KEY) || '0');\n        let reason;\n        // Verify state matches and hasn't expired\n        if (savedState !== returnedState) {\n            reason = `State mismatched (${savedState} !== ${returnedState})`;\n        }\n        else if (Date.now() > expiryTime) {\n            reason = 'State expired';\n        }\n        else {\n            reason = undefined; // No errors\n        }\n        return reason;\n    }, []);\n    // Clear state (useful for cleanup)\n    const clearState = useCallback(() => {\n        sessionStorage.removeItem(AUTH_STATE_KEY);\n        sessionStorage.removeItem(STATE_EXPIRY_KEY);\n    }, []);\n    return { generateState, verifyState, clearState };\n}\n//# sourceMappingURL=useAuthState.js.map","import { jsx as _jsx } from \"react/jsx-runtime\";\nimport { onAuthStateChanged } from \"firebase/auth\";\nimport { useEffect, useRef, useState } from \"react\";\nimport { UserNotFoundError, getComposableToken } from \"./auth/composable\";\nimport { getFirebaseAuth } from \"./auth/firebase\";\nimport { useAuthState } from \"./auth/useAuthState\";\nimport { Env } from \"@vertesia/ui/env\";\nimport { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY, UserSession, UserSessionContext } from \"./UserSession\";\nconst devDomains = [\".composable.sh\", \".vertesia.dev\", \"vertesia.app\"];\nconst CENTRAL_AUTH_REDIRECT = \"https://internal-auth.vertesia.app/?sts=https://sts-staging.vertesia.io\";\nfunction shouldRedirectToCentralAuth() {\n    // Authentication is not supported in Docker environment.\n    // See https://github.com/vertesia/studio/wiki/Composable-UI-Hosting-Options\n    if (Env.isDocker) {\n        return true;\n    }\n    return devDomains.some((domain) => window.location.hostname.endsWith(domain));\n}\nexport function UserSessionProvider({ children }) {\n    const hashParams = new URLSearchParams(location.hash.substring(1));\n    const token = hashParams.get(\"token\");\n    const state = hashParams.get(\"state\");\n    const [session, setSession] = useState(new UserSession());\n    const { generateState, verifyState, clearState } = useAuthState();\n    const hasInitiatedAuthRef = useRef(false);\n    const redirectToCentralAuth = (projectId, accountId) => {\n        const url = new URL(CENTRAL_AUTH_REDIRECT);\n        const currentUrl = new URL(window.location.href);\n        currentUrl.hash = \"\";\n        if (projectId)\n            currentUrl.searchParams.set(\"p\", projectId);\n        if (accountId)\n            currentUrl.searchParams.set(\"a\", accountId);\n        url.searchParams.set(\"redirect_uri\", currentUrl.toString());\n        url.searchParams.set(\"state\", generateState());\n        location.replace(url.toString());\n    };\n    useEffect(() => {\n        // Make this effect idempotent - only run auth flow once\n        if (hasInitiatedAuthRef.current) {\n            console.log(\"Auth: skipping duplicate auth flow initiation\");\n            return;\n        }\n        hasInitiatedAuthRef.current = true;\n        console.log(\"Auth: starting auth flow\");\n        Env.logger.info(\"Starting auth flow\");\n        const currentUrl = new URL(window.location.href);\n        const selectedAccount = currentUrl.searchParams.get(\"a\") ?? localStorage.getItem(LastSelectedAccountId_KEY) ?? undefined;\n        const selectedProject = currentUrl.searchParams.get(\"p\") ??\n            localStorage.getItem(LastSelectedProjectId_KEY + \"-\" + selectedAccount) ??\n            undefined;\n        console.log(\"Auth: selected account\", selectedAccount);\n        console.log(\"Auth: selected project\", selectedProject);\n        Env.logger.info(\"Selected account and project\", {\n            vertesia: {\n                account_id: selectedAccount,\n                project_id: selectedProject,\n            },\n        });\n        if (token && state) {\n            const validationError = verifyState(state);\n            if (validationError) {\n                console.error(`Auth: invalid state: ${validationError}`);\n                Env.logger.error(`Invalid state: ${validationError}`, {\n                    vertesia: {\n                        state: state,\n                    },\n                });\n                redirectToCentralAuth();\n            }\n            else {\n                clearState();\n            }\n            getComposableToken(selectedAccount, selectedProject, token, false, shouldRedirectToCentralAuth())\n                .then((res) => {\n                session.login(res.rawToken).then(() => {\n                    setSession(session.clone());\n                    //cleanup the hash\n                    window.location.hash = \"\";\n                });\n            })\n                .catch((err) => {\n                console.error(\"Failed to fetch user token from studio, redirecting to central auth\", err);\n                Env.logger.error(\"Failed to fetch user token from studio, redirecting to central auth\", {\n                    vertesia: {\n                        error: err,\n                    },\n                });\n                redirectToCentralAuth();\n            });\n            return;\n        }\n        else {\n            //if on a dev domain and not logged in, redirect to central auth\n            if (!session.isLoggedIn()) {\n                console.log(\"Auth: not logged in & no token/state\");\n                Env.logger.info(\"Not logged in & no token/state\", {\n                    vertesia: {\n                        account_id: selectedAccount,\n                        project_id: selectedProject,\n                    },\n                });\n                if (shouldRedirectToCentralAuth()) {\n                    console.log(\"Auth: on dev domain, redirecting to central auth with selection\", selectedAccount, selectedProject);\n                    Env.logger.info(\"Redirecting to central auth with selection\", {\n                        vertesia: {\n                            account_id: selectedAccount,\n                            project_id: selectedProject,\n                        },\n                    });\n                    redirectToCentralAuth();\n                }\n                else {\n                    console.log(\"Auth: not on dev domain\");\n                    Env.logger.info(\"Not on dev domain\", {\n                        vertesia: {\n                            account_id: selectedAccount,\n                            project_id: selectedProject,\n                        },\n                    });\n                }\n            }\n        }\n        return onAuthStateChanged(getFirebaseAuth(), async (firebaseUser) => {\n            if (firebaseUser) {\n                console.log(\"Auth: successful login with firebase\");\n                Env.logger.info(\"Successful login with firebase\", {\n                    vertesia: {\n                        account_id: selectedAccount,\n                        project_id: selectedProject,\n                    },\n                });\n                session.setSession = setSession;\n                await getComposableToken(selectedAccount, selectedProject, undefined, false, shouldRedirectToCentralAuth())\n                    .then((res) => {\n                    session.login(res.rawToken).then(() => setSession(session.clone()));\n                })\n                    .catch((err) => {\n                    console.error(\"Failed to fetch user token from studio\", err);\n                    Env.logger.error(\"Failed to fetch user token from studio\", {\n                        vertesia: {\n                            account_id: selectedAccount,\n                            project_id: selectedProject,\n                            error: err,\n                        },\n                    });\n                    if (!(err instanceof UserNotFoundError))\n                        session.logout();\n                    session.isLoading = false;\n                    session.authError = err;\n                    setSession(session.clone());\n                });\n            }\n            else {\n                // anonymous user\n                console.log(\"Auth: using anonymous user\");\n                Env.logger.info(\"Using anonymous user\", {\n                    vertesia: {\n                        account_id: selectedAccount,\n                        project_id: selectedProject,\n                    },\n                });\n                session.client.withAuthCallback(undefined);\n                session.logout();\n                setSession(session.clone());\n            }\n        });\n    }, []);\n    return _jsx(UserSessionContext.Provider, { value: session, children: children });\n}\n//# sourceMappingURL=UserSessionProvider.js.map","import { Env } from '@vertesia/ui/env';\nimport { logEvent } from \"firebase/analytics\";\nimport { getFirebaseAnalytics } from \"./auth/firebase\";\nexport function useUXTracking() {\n    //identify user in monitoring and UX systems\n    const tagUserSession = async (user) => {\n        const signupData = window.localStorage.getItem(\"composableSignupData\");\n        if (!user) {\n            console.error('No user found -- skipping tagging');\n            return;\n        }\n        if (signupData) {\n            window.localStorage.removeItem(\"composableSignupData\");\n        }\n    };\n    //send event to analytics and UX systems\n    const trackEvent = (eventName, eventProperties) => {\n        if (!Env.isProd) {\n            console.debug('track event', eventName, eventProperties);\n        }\n        //GA via firebase\n        logEvent(getFirebaseAnalytics(), eventName, { ...eventProperties, debug_mode: !Env.isProd });\n    };\n    return {\n        tagUserSession,\n        trackEvent\n    };\n}\n//# sourceMappingURL=useUXTracking.js.map"],"names":["LastSelectedAccountId_KEY","LastSelectedProjectId_KEY","AUTH_TOKEN_RAW","AUTH_TOKEN","_firebaseApp","_analytics","_firebaseAuth","getFirebaseApp","Env","firebase","Error","initializeApp","error","console","getFirebaseAnalytics","getAnalytics","getFirebaseAuth","getAuth","async","setFirebaseTenant","tenantEmail","log","retries","retryDelay","response","fetch","method","headers","body","JSON","stringify","signal","AbortSignal","timeout","ok","errorData","json","parseError","status","warn","data","firebaseTenantId","auth","tenantId","providerType","provider","fetchError","Promise","resolve","setTimeout","message","getFirebaseAuthToken","refresh","user","currentUser","getIdToken","then","token","logger","info","vertesia","user_email","email","user_name","displayName","user_id","uid","catch","err","fetchComposableToken","accountId","projectId","ttl","account_id","project_id","idToken","stsEndpoint","endpoints","sts","sts_url","stsUrl","URL","requestBody","type","expires_at","Math","floor","Date","now","undefined","stsRes","Authorization","idTokenDecoded","jwtDecode","UserNotFoundError","errorText","text","localStorage","removeItem","fetchComposableTokenFromFirebaseToken","getComposableToken","initToken","forceRefresh","useInternalAuth","selectedAccount","getItem","selectedProject","exp","rawToken","constructor","super","this","name","useCurrentTenant","useUserSession","currentTenant","setCurrentTenant","useState","isLoading","setIsLoading","setError","useEffect","tenantData","tenantKey","label","domain","logo","loadCurrentTenant","TypeRegistry","types","map","sort","a","b","localeCompare","id","getType","getTypeLayout","table_layout","getTypeName","UserSession","client","authError","authToken","typeRegistry","setSession","lastSelectedAccount","lastSelectedProject","onboardingComplete","VertesiaClient","serverUrl","studio","storeUrl","zeno","tokenServerUrl","logout","bind","store","account","project","accounts","authCallback","rawAuthToken","res","signOut","getAccount","login","withAuthCallback","setItem","onLogin","all","_loadTypes","fetchOnboardingStatus","isLoggedIn","switchAccount","targetAccountId","window","location","replace","switchProject","targetProjectId","list","layout","reloadTypes","clone","fetchAccounts","previousStatus","onboarding","onboardingProgress","Object","values","every","value","session","UserSessionContext","createContext","useContext","AUTH_STATE_KEY","STATE_EXPIRY_KEY","devDomains","shouldRedirectToCentralAuth","isDocker","some","hostname","endsWith","UserSessionProvider","children","hashParams","URLSearchParams","hash","substring","get","state","generateState","verifyState","clearState","useCallback","crypto","randomUUID","expiryTime","sessionStorage","toString","returnedState","savedState","parseInt","reason","hasInitiatedAuthRef","useRef","redirectToCentralAuth","url","currentUrl","href","searchParams","set","current","validationError","onAuthStateChanged","firebaseUser","_jsx","Provider","useUXTracking","tagUserSession","signupData","trackEvent","eventName","eventProperties","isProd","debug","logEvent","debug_mode"],"mappings":"2fAAY,MAACA,EAA4B,qCAC5BC,EAA4B,qCCIzC,ICDIC,EACAC,EDAAC,EAAe,KACfC,EAAa,KACbC,EAAgB,KAEb,SAASC,IACZ,IAAKH,EACD,IACI,IAAKI,EAAIC,SACL,MAAM,IAAIC,MAAM,8DAEpBN,EAAeO,EAAcH,EAAIC,SACrC,CACA,MAAOG,GAEH,MADAC,QAAQD,MAAM,qCAAsCA,GAC9C,IAAIF,MAAM,+EACpB,CAEJ,OAAON,CACX,CACO,SAASU,IAIZ,OAHKT,IACDA,EAAaU,EAAaR,MAEvBF,CACX,CACO,SAASW,IAIZ,OAHKV,IACDA,EAAgBW,EAAQV,MAErBD,CACX,CACOY,eAAeC,EAAkBC,GACpC,GAAKA,EAIL,GAAKZ,EAAIC,SAIT,IACQW,GACAP,QAAQQ,IAAI,mCAAmCD,KAEnD,IAAIE,EAAU,EACVC,EAAa,IACjB,KAAOD,EAAU,GACb,IAEI,MAAME,QAAiBC,MAAM,sBAAuB,CAChDC,OAAQ,OACRC,QAAS,CACL,eAAgB,oBAEpBC,KAAMC,KAAKC,UAAU,CACjBV,YAAaA,IAGjBW,OAAQC,YAAYC,QAAQ,OAGhC,IAAKT,EACD,MAAM,IAAId,MAAM,wCAGpB,IAAKc,EAASU,GAAI,CAEd,IACI,MAAMC,QAAkBX,EAASY,OACjCvB,QAAQD,MAAM,+BAAgCuB,EAAUvB,MAC5D,CACA,MAAOyB,GACHxB,QAAQD,MAAM,qCAAqCY,EAASc,SAChE,CAEA,GAAwB,MAApBd,EAASc,OAET,YADAzB,QAAQ0B,KAAK,wBAAwBnB,KAGzC,MAAM,IAAIV,MAAM,cAAcc,EAASc,SAC3C,CAEA,MAAME,QAAchB,EAASY,OAC7B,GAAII,GAAQA,EAAKC,iBAAkB,CAC/B,MAAMC,EAAO1B,IAIb,OAHA0B,EAAKC,SAAWH,EAAKC,iBACrBjC,EAAIC,SAASmC,aAAeJ,EAAKK,UAAY,OAC7ChC,QAAQQ,IAAI,oBAAoBqB,EAAKC,YAC9BH,CACX,CAGI,YADA3B,QAAQD,MAAM,iDAAiDQ,IAGvE,CACA,MAAO0B,GAEH,KAAIxB,EAAU,GAOV,MAAMwB,EANNjC,QAAQ0B,KAAK,yCAAyChB,SAAmBuB,SACnE,IAAIC,SAASC,GAAYC,WAAWD,EAASzB,KACnDA,GAAc,EACdD,GAKR,CAER,CACA,MAAOV,GAEHC,QAAQD,MAAM,iCAAkCA,aAAiBF,MAAQE,EAAMsC,QAAU,gBAG7F,MA7EIrC,QAAQQ,IAAI,mEAJZR,QAAQQ,IAAI,2DAkFpB,CACOH,eAAeiC,EAAqBC,GACvC,MACMC,EADOrC,IACKsC,YAClB,OAAID,EACOA,EACFE,WAAWH,GACXI,MAAMC,IACPjD,EAAIkD,OAAOC,KAAK,qBAAsB,CAClCC,SAAU,CACNC,WAAYR,EAAKS,MACjBC,UAAWV,EAAKW,YAChBC,QAASZ,EAAKa,IACdd,QAASA,KAGVK,KAENU,OAAOC,IACR5D,EAAIkD,OAAO9C,MAAM,+BAAgC,CAC7CgD,SAAU,CACNC,WAAYR,EAAKS,MACjBC,UAAWV,EAAKW,YAChBC,QAASZ,EAAKa,IACdd,QAASA,EACTxC,MAAOwD,KAGfvD,QAAQD,MAAM,6BAA8BwD,GACrC,SAIX5D,EAAIkD,OAAOnB,KAAK,iBACTQ,QAAQC,QAAQ,MAE/B,CCtJO9B,eAAemD,EAAqBd,EAAYe,EAAWC,EAAWC,GACzE3D,QAAQQ,IAAI,mDAAmDiD,iBAAyBC,MACxF/D,EAAIkD,OAAOC,KAAK,sCAAuC,CACnDC,SAAU,CACNa,WAAYH,EACZI,WAAYH,KAGpB,MAAMI,QAAgBpB,IACtB,IAAKoB,EAED,MADA9D,QAAQQ,IAAI,yCACN,IAAIX,MAAM,qBAGpB,MAAMkE,EAAcpE,EAAIqE,UAAUC,IAClCjE,QAAQQ,IAAI,kCAAmCuD,GAC/CpE,EAAIkD,OAAOC,KAAK,iCAAkC,CAC9CC,SAAU,CACNa,WAAYH,EACZI,WAAYH,EACZQ,QAASH,KAGjB,IAEI,MAAMI,EAAS,IAAIC,IAAIL,EAAc,gBAC/BM,EAAc,CAChBC,KAAM,OACNV,WAAYH,EACZI,WAAYH,EACZa,WAAYZ,EAAMa,KAAKC,MAAMC,KAAKC,MAAQ,KAAQhB,OAAMiB,GAEtDC,QAAejE,MAAMuD,EAAQ,CAC/BtD,OAAQ,OACRC,QAAS,CACL,eAAgB,mBAChBgE,cAAiB,UAAUhB,KAE/B/C,KAAMC,KAAKC,UAAUoD,KAEzB,GAAIP,GAA8B,MAAnBe,GAAQpD,OAAgB,CACnCzB,QAAQQ,IAAI,+DAAgEqE,GAAQpD,QACpF9B,EAAIkD,OAAO9C,MAAM,+DAAgE,CAC7EgD,SAAU,CACNa,WAAYH,EACZI,WAAYH,EACZjC,OAAQoD,GAAQpD,UAGxB,MAAMsD,EAAiBC,EAAUlB,GACjC,IAAKiB,GAAgB9B,MAEjB,MADAtD,EAAIkD,OAAO9C,MAAM,8BACX,IAAIF,MAAM,8BASpB,MAPAF,EAAIkD,OAAO9C,MAAM,iBAAkB,CAC/BgD,SAAU,CACNa,WAAYH,EACZI,WAAYH,EACZT,MAAO8B,EAAe9B,SAGxB,IAAIgC,EAAkB,iBAAkBF,EAAe9B,MACjE,CACA,IAAK4B,EAAOxD,GAAI,CACZ,MAAM6D,QAAkBL,EAAOM,OAU/B,MATAnF,QAAQD,MAAM,+BAAgC8E,EAAOpD,OAAQyD,GAC7DvF,EAAIkD,OAAO9C,MAAM,8BAA+B,CAC5CgD,SAAU,CACNtB,OAAQoD,EAAOpD,OACf1B,MAAOmF,EACPtB,WAAYH,EACZI,WAAYH,KAGd,IAAI7D,MAAM,iCAAiCgF,EAAOpD,SAC5D,CACA,MAAMmB,MAAEA,SAAgBiC,EAAOtD,OAG/B,OAFAvB,QAAQQ,IAAI,mCACZb,EAAIkD,OAAOC,KAAK,mCACTF,CACX,CACA,MAAO7C,GACH,GAAIA,aAAiBkF,EACjB,MAAMlF,EAYV,MAVAqF,aAAaC,WAAWlG,GACxBiG,aAAaC,WAAWjG,GACxBY,QAAQD,MAAM,0CAA2CA,GACzDJ,EAAIkD,OAAO9C,MAAM,0CAA2C,CACxDgD,SAAU,CACNa,WAAYH,EACZI,WAAYH,EACZ3D,MAAOA,KAGT,IAAIF,MAAM,iCACpB,CACJ,CAQOQ,eAAeiF,EAAsC7B,EAAWC,EAAWC,GAC9E,OAAOH,EAAqBlB,EAAsBmB,EAAWC,EAAWC,EAC5E,CACOtD,eAAekF,EAAmB9B,EAAWC,EAAW8B,EAAWC,GAAe,EAAOC,GAAkB,GAC9G,MAAMC,EAAkBlC,GAAa2B,aAAaQ,QAAQzG,SAA8ByF,EAClFiB,EAAkBnC,GAAa0B,aAAaQ,QAAQxG,EAA4B,IAAMuG,SAAoBf,EAEhH,IAAKa,GAAgBpG,GAAkBC,GAAcA,EAAWwG,IAAOpB,KAAKC,MAAQ,IAAO,IACvF,MAAO,CAAEoB,SAAU1G,EAAgBuD,MAAOtD,EAAYS,OAAO,GAWjE,IARK2F,GAAmBvF,IAAkBsC,YAEtCpD,QAAuBiG,EAAsCK,EAAiBE,IAEzEL,GAAanG,KAElBA,QAAuBmE,GAAqB,IAAMtB,QAAQC,QAAQqD,GAAanG,IAAiBsG,EAAiBE,KAEhHxG,EAOD,MANAM,EAAIkD,OAAO9C,MAAM,oCAAqC,CAClDgD,SAAU,CACNa,WAAY+B,EACZ9B,WAAYgC,KAGd,IAAIhG,MAAM,qCAGpB,GADAP,EAAa0F,EAAU3F,IAClBC,IAAeA,EAAWwG,MAAQzG,EAQnC,MAPAW,QAAQD,MAAM,2BAA4BT,GAC1CK,EAAIkD,OAAO9C,MAAM,2BAA4B,CACzCgD,SAAU,CACNa,WAAY+B,EACZ9B,WAAYgC,KAGd,IAAIhG,MAAM,4BAEpB,MAAO,CAAEkG,SAAU1G,EAAgBuD,MAAOtD,EAAYS,OAAO,EACjE,CACO,MAAMkF,UAA0BpF,MACnCoD,MACA,WAAA+C,CAAY3D,EAASY,GACjBgD,MAAM5D,GACN6D,KAAKC,KAAO,oBACZD,KAAKjD,MAAQA,CACjB,EC5JG,SAASmD,IACZ,MAAM5D,KAAEA,GAAS6D,KACVC,EAAeC,GAAoBC,EAAS,OAC5CC,EAAWC,GAAgBF,GAAS,IACpCzG,EAAO4G,GAAYH,EAAS,MAkDnC,OAjDAI,GAAU,KACoBvG,WACtB,IAAKmC,GAAMS,MAGP,OAFAsD,EAAiB,WACjBG,GAAa,GAGjB,IACI,MAAM/F,QAAiBC,MAAM,sBAAuB,CAChDC,OAAQ,OACRC,QAAS,CACL,eAAgB,oBAEpBC,KAAMC,KAAKC,UAAU,CACjBV,YAAaiC,EAAKS,UAG1B,GAAItC,EAASU,GAAI,CACb,MAAMwF,QAAmBlG,EAASY,OAG9BgF,EAFAM,EAEiB,CACbC,UAAWD,EAAWV,MAAQ,UAC9BA,KAAMU,EAAWE,OAASF,EAAWV,MAAQ,UAC7Ca,OAAQH,EAAWG,QAAU,GAC7BpF,iBAAkBiF,EAAWjF,iBAC7BI,SAAU6E,EAAW7E,SACrBiF,KAAMJ,EAAWI,MAIJ,KAEzB,MAEIV,EAAiB,KAEzB,CACA,MAAOxG,GACHC,QAAQD,MAAM,gCAAiCA,GAC/C4G,EAAS,uCACTJ,EAAiB,KACrB,CACZ,QACgBG,GAAa,EACjB,GAEJQ,KACD,CAAC1E,GAAMS,QACH,CACHqD,gBACAG,YACA1G,QAER,CC7DO,MAAMoH,EACTC,MACAC,IAAM,CAAA,EACN,WAAArB,CAAYoB,GACRlB,KAAKkB,MAAQA,EAEbA,EAAME,MAAK,CAACC,EAAGC,IAAMD,EAAEpB,KAAKsB,cAAcD,EAAErB,QAC5C,IAAK,MAAM7B,KAAQ8C,EACflB,KAAKmB,IAAI/C,EAAKoD,IAAMpD,CAE5B,CACA,OAAAqD,CAAQD,GACJ,OAAOxB,KAAKmB,IAAIK,EACpB,CACA,aAAAE,CAAcF,GACV,MAAMpD,EAAO4B,KAAKmB,IAAIK,GACtB,OAAOpD,EAAOA,EAAKuD,kBAAejD,CACtC,CACA,WAAAkD,CAAYJ,GACR,MAAMpD,EAAO4B,KAAKmB,IAAIK,GACtB,OAAOpD,EAAOA,EAAK6B,UAAOvB,CAC9B,ECZJ,MAAMmD,EACFtB,WAAY,EACZuB,OACAC,UACAC,UACAC,aACAC,WACAC,oBACAC,oBACAC,mBACA,WAAAvC,CAAYgC,EAAQI,GAEZlC,KAAK8B,OADLA,GAIc,IAAIQ,EAAe,CAC7BC,UAAW9I,EAAIqE,UAAU0E,OACzBC,SAAUhJ,EAAIqE,UAAU4E,KACxBC,eAAgBlJ,EAAIqE,UAAUC,MAGlCmE,IACAlC,KAAKkC,WAAaA,GAEtBlC,KAAK4C,OAAS5C,KAAK4C,OAAOC,KAAK7C,KACnC,CACA,SAAI8C,GACA,OAAO9C,KAAK8B,OAAOgB,KACvB,CACA,QAAIxG,GACA,OAAO0D,KAAKgC,SAChB,CACA,WAAIe,GACA,OAAO/C,KAAKgC,WAAWe,OAC3B,CACA,WAAIC,GACA,OAAOhD,KAAKgC,WAAWgB,OAC3B,CACA,YAAIC,GACA,OAAOjD,KAAKgC,WAAWiB,QAC3B,CACA,gBAAIC,GACA,OAAOlD,KAAKmD,aAAa1G,MAAKC,GAAS,UAAUA,KACrD,CACA,gBAAIyG,GACA,OAAO9D,IAAqB5C,MAAK2G,IAC7B,MAAM1G,EAAQ0G,GAAKvD,SACnB,IAAKnD,EACD,MAAM,IAAI/C,MAAM,sBAGpB,OADAqG,KAAKgC,UAAYlD,EAAUpC,GACpBA,IAEf,CACA,OAAA2G,GACIrD,KAAK4C,QACT,CACA,UAAAU,GACI,OAAOtD,KAAKgC,WAAWe,OAC3B,CACA,WAAMQ,CAAM7G,GAgBR,OAfAsD,KAAK+B,eAAYrD,EACjBsB,KAAKO,WAAY,EACjBP,KAAK8B,OAAO0B,kBAAiB,IAAMxD,KAAKkD,eACxClD,KAAKgC,UAAYlD,EAAUpC,GAC3B5C,QAAQQ,IAAI,iBAAiB0F,KAAKgC,WAAW/B,qBAAqBD,KAAKgC,WAAWe,QAAQ9C,SAASD,KAAKgC,WAAWe,QAAQvB,mBAAmBxB,KAAKgC,WAAWgB,SAAS/C,SAASD,KAAKgC,WAAWgB,SAASxB,OAEzMtC,aAAauE,QAAQxK,EAA2B+G,KAAKgC,UAAUe,QAAQvB,IACvEtC,aAAauE,QAAQvK,EAA4B,IAAM8G,KAAKgC,UAAUe,QAAQvB,GAAIxB,KAAKgC,UAAUgB,SAASxB,IAAM,IAEhH/H,EAAIiK,UAAU1D,KAAKgC,iBAEbhG,QAAQ2H,IAAI,CACd3D,KAAK4D,aACL5D,KAAK6D,0BAEF7H,QAAQC,SACnB,CACA,UAAA6H,GACI,QAAS9D,KAAKgC,SAClB,CACA,MAAAY,GACI9I,QAAQQ,IAAI,eACR0F,KAAKgC,WACL/H,IAAkBoJ,UAEtBrD,KAAK+B,eAAYrD,EACjBsB,KAAKO,WAAY,EACjBP,KAAKgC,eAAYtD,EACjBsB,KAAKiC,kBAAevD,EACpBsB,KAAKkC,gBAAaxD,EAClBsB,KAAK8B,OAAO0B,sBAAiB9E,EACjC,CACA,mBAAMqF,CAAcC,GAChB9E,aAAauE,QAAQxK,EAA2B+K,GAC5ChE,OACIA,KAAK+C,SAAW/C,KAAKgD,QACrB9D,aAAauE,QAAQvK,EAA4B,IAAM8G,KAAK+C,QAAQvB,GAAIxB,KAAKgD,QAAQxB,IAEhFxB,KAAK+C,SACV7D,aAAaC,WAAWjG,EAA4B,IAAM8G,KAAK+C,QAAQvB,KAG/EyC,OAAOC,SAASC,QAAQ,OAASH,EACrC,CACA,mBAAMI,CAAcC,GACZrE,KAAK+C,SACL7D,aAAauE,QAAQvK,EAA4B,IAAM8G,KAAK+C,QAAQvB,GAAI6C,GAE5EJ,OAAOC,SAASC,QAAQ,OAASnE,KAAK+C,SAASvB,GAAK,MAAQ6C,EAChE,CACA,gBAAMT,GACF,GAAI5D,KAAKgD,QACL,OAAOhD,KAAK8C,MAAM5B,MAAMoD,KAAK,CAAA,EAAI,CAAEC,QAAQ,IAAQ9H,MAAKyE,GAASlB,KAAKiC,aAAe,IAAIhB,EAAaC,KAAQ9D,OAAMC,IAEhH,MADAvD,QAAQD,MAAM,+BAAgCwD,GACxCA,KAIVvD,QAAQQ,IAAI,sBAEpB,CACA,iBAAMkK,GACF,OAAOxE,KAAK4D,aAAanH,MAAK,KAC1BuD,KAAKkC,aAAalC,KAAKyE,WAE/B,CACA,mBAAMC,GACF,OAAO1E,KAAK8B,OAAOmB,SAASqB,OAAO7H,MAAKwG,IACpC,IAAKjD,KAAKgC,UACN,MAAM,IAAIrI,MAAM,sBAEpBqG,KAAKgC,UAAUiB,SAAWA,EAC1BjD,KAAKkC,aAAalC,KAAKyE,YACxBrH,OAAMC,IAEL,MADAvD,QAAQD,MAAM,2BAA4BwD,GACpCA,IAEd,CACA,2BAAMwG,GACF,GAAI7D,KAAKqC,mBAEL,OADAvI,QAAQQ,IAAI,iCACL,EAEX,MAAMqK,EAAiB3E,KAAKqC,mBAC5B,IACI,MAAMuC,QAAmB5E,KAAK8B,OAAOiB,QAAQ8B,qBAE7C,GADA7E,KAAKqC,mBAAqByC,OAAOC,OAAOH,GAAYI,OAAMC,IAAmB,IAAVA,IAC/DN,IAAmB3E,KAAKqC,mBACxB,OAAO,EAEXrC,KAAKkC,aAAalC,KAAKyE,QAC3B,CACA,MAAO5K,GACHC,QAAQD,MAAM,oCAAqCA,GACnDmG,KAAKqC,oBAAqB,EAC1BrC,KAAKkC,aAAalC,KAAKyE,QAC3B,CACA,OAAO,CACX,CACA,KAAAA,GACI,MAAMS,EAAU,IAAIrD,EAAY7B,KAAK8B,QASrC,OARAoD,EAAQ3E,UAAYP,KAAKO,UACzB2E,EAAQnD,UAAY/B,KAAK+B,UACzBmD,EAAQlD,UAAYhC,KAAKgC,UACzBkD,EAAQhD,WAAalC,KAAKkC,WAC1BgD,EAAQ/C,oBAAsBnC,KAAKmC,oBACnC+C,EAAQnB,cAAgB/D,KAAK+D,cAC7BmB,EAAQjD,aAAejC,KAAKiC,aAC5BiD,EAAQ7C,mBAAqBrC,KAAKqC,mBAC3B6C,CACX,EAEC,MAACC,EAAqBC,OAAc1G,GAClC,SAASyB,IACZ,MAAM+E,EAAUG,EAAWF,GAC3B,IAAKD,EACD,MAAM,IAAIvL,MAAM,4DAEpB,OAAOuL,CACX,CCxLA,MAAMI,EAAiB,aACjBC,EAAmB,oBCEzB,MAAMC,EAAa,CAAC,iBAAkB,gBAAiB,gBAEvD,SAASC,IAGL,QAAIhM,EAAIiM,UAGDF,EAAWG,MAAM7E,GAAWmD,OAAOC,SAAS0B,SAASC,SAAS/E,IACzE,CACO,SAASgF,GAAoBC,SAAEA,IAClC,MAAMC,EAAa,IAAIC,gBAAgB/B,SAASgC,KAAKC,UAAU,IACzDzJ,EAAQsJ,EAAWI,IAAI,SACvBC,EAAQL,EAAWI,IAAI,UACtBlB,EAAShD,GAAc5B,EAAS,IAAIuB,IACrCyE,cAAEA,EAAaC,YAAEA,EAAWC,WAAEA,GDoB7B,CAAEF,cAjCaG,GAAY,KAC9B,MAAMJ,EAAQK,OAAOC,aACfC,EAAapI,KAAKC,MALd,IASV,OAFAoI,eAAepD,QAAQ6B,EAAgBe,GACvCQ,eAAepD,QAAQ8B,EAAkBqB,EAAWE,YAC7CT,IACR,IA0BqBE,YAxBJE,GAAaM,IAC7B,IAAKA,EACD,MAAO,gBAEX,MAAMC,EAAaH,eAAenH,QAAQ4F,GACpCsB,EAAaK,SAASJ,eAAenH,QAAQ6F,IAAqB,KACxE,IAAI2B,EAWJ,OARIA,EADAF,IAAeD,EACN,qBAAqBC,SAAkBD,KAE3CvI,KAAKC,MAAQmI,EACT,qBAGAlI,EAENwI,IACR,IAMkCV,WAJlBC,GAAY,KAC3BI,eAAe1H,WAAWmG,GAC1BuB,eAAe1H,WAAWoG,KAC3B,KClBG4B,EAAsBC,GAAO,GAC7BC,EAAwB,CAAC7J,EAAWD,KACtC,MAAM+J,EAAM,IAAIpJ,IAjBM,2EAkBhBqJ,EAAa,IAAIrJ,IAAI+F,OAAOC,SAASsD,MAC3CD,EAAWrB,KAAO,GAKlBoB,EAAIG,aAAaC,IAAI,eAAgBH,EAAWT,YAChDQ,EAAIG,aAAaC,IAAI,QAASpB,KAC9BpC,SAASC,QAAQmD,EAAIR,aAqIzB,OAnIApG,GAAU,KAEN,GAAIyG,EAAoBQ,QAEpB,YADA7N,QAAQQ,IAAI,iDAGhB6M,EAAoBQ,SAAU,EAC9B7N,QAAQQ,IAAI,4BACZb,EAAIkD,OAAOC,KAAK,sBAChB,MAAM2K,EAAa,IAAIrJ,IAAI+F,OAAOC,SAASsD,MACrC/H,EAAkB8H,EAAWE,aAAarB,IAAI,MAAQlH,aAAaQ,QAAQzG,SAA8ByF,EACzGiB,EAAkB4H,EAAWE,aAAarB,IAAI,MAChDlH,aAAaQ,QAAQxG,EAA4B,IAAMuG,SACvDf,EASJ,GARA5E,QAAQQ,IAAI,yBAA0BmF,GACtC3F,QAAQQ,IAAI,yBAA0BqF,GACtClG,EAAIkD,OAAOC,KAAK,+BAAgC,CAC5CC,SAAU,CACNa,WAAY+B,EACZ9B,WAAYgC,KAGhBjD,GAAS2J,EAAO,CAChB,MAAMuB,EAAkBrB,EAAYF,GA8BpC,OA7BIuB,GACA9N,QAAQD,MAAM,wBAAwB+N,KACtCnO,EAAIkD,OAAO9C,MAAM,kBAAkB+N,IAAmB,CAClD/K,SAAU,CACNwJ,MAAOA,KAGfgB,KAGAb,SAEJnH,EAAmBI,EAAiBE,EAAiBjD,GAAO,EAAO+I,KAC9DhJ,MAAM2G,IACP8B,EAAQ3B,MAAMH,EAAIvD,UAAUpD,MAAK,KAC7ByF,EAAWgD,EAAQT,SAEnBR,OAAOC,SAASgC,KAAO,SAG1B9I,OAAOC,IACRvD,QAAQD,MAAM,sEAAuEwD,GACrF5D,EAAIkD,OAAO9C,MAAM,sEAAuE,CACpFgD,SAAU,CACNhD,MAAOwD,KAGfgK,MAGR,CAgCA,OA7BSnC,EAAQpB,eACThK,QAAQQ,IAAI,wCACZb,EAAIkD,OAAOC,KAAK,iCAAkC,CAC9CC,SAAU,CACNa,WAAY+B,EACZ9B,WAAYgC,KAGhB8F,KACA3L,QAAQQ,IAAI,kEAAmEmF,EAAiBE,GAChGlG,EAAIkD,OAAOC,KAAK,6CAA8C,CAC1DC,SAAU,CACNa,WAAY+B,EACZ9B,WAAYgC,KAGpB0H,MAGAvN,QAAQQ,IAAI,2BACZb,EAAIkD,OAAOC,KAAK,oBAAqB,CACjCC,SAAU,CACNa,WAAY+B,EACZ9B,WAAYgC,OAMzBkI,EAAmB5N,KAAmBE,MAAO2N,IAC5CA,GACAhO,QAAQQ,IAAI,wCACZb,EAAIkD,OAAOC,KAAK,iCAAkC,CAC9CC,SAAU,CACNa,WAAY+B,EACZ9B,WAAYgC,KAGpBuF,EAAQhD,WAAaA,QACf7C,EAAmBI,EAAiBE,OAAiBjB,GAAW,EAAO+G,KACxEhJ,MAAM2G,IACP8B,EAAQ3B,MAAMH,EAAIvD,UAAUpD,MAAK,IAAMyF,EAAWgD,EAAQT,cAEzDrH,OAAOC,IACRvD,QAAQD,MAAM,yCAA0CwD,GACxD5D,EAAIkD,OAAO9C,MAAM,yCAA0C,CACvDgD,SAAU,CACNa,WAAY+B,EACZ9B,WAAYgC,EACZ9F,MAAOwD,KAGTA,aAAe0B,GACjBmG,EAAQtC,SACZsC,EAAQ3E,WAAY,EACpB2E,EAAQnD,UAAY1E,EACpB6E,EAAWgD,EAAQT,cAKvB3K,QAAQQ,IAAI,8BACZb,EAAIkD,OAAOC,KAAK,uBAAwB,CACpCC,SAAU,CACNa,WAAY+B,EACZ9B,WAAYgC,KAGpBuF,EAAQpD,OAAO0B,sBAAiB9E,GAChCwG,EAAQtC,SACRV,EAAWgD,EAAQT,eAG5B,IACIsD,EAAK5C,EAAmB6C,SAAU,CAAE/C,MAAOC,EAASa,SAAUA,GACzE,CCtKO,SAASkC,IAoBZ,MAAO,CACHC,eAnBmB/N,MAAOmC,IAC1B,MAAM6L,EAAalE,OAAO/E,aAAaQ,QAAQ,wBAC1CpD,EAID6L,GACAlE,OAAO/E,aAAaC,WAAW,wBAJ/BrF,QAAQD,MAAM,sCAiBlBuO,WATe,CAACC,EAAWC,KACtB7O,EAAI8O,QACLzO,QAAQ0O,MAAM,cAAeH,EAAWC,GAG5CG,EAAS1O,IAAwBsO,EAAW,IAAKC,EAAiBI,YAAajP,EAAI8O,UAM3F"}