@vertesia/ui 1.5.0 → 1.6.0-dev.20260918.061604Z

package/lib/session/auth/composable.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"composable.d.ts","sourceRoot":"","sources":["../../../src/session/auth/composable.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACH,KAAK,gBAAgB,EAIxB,MAAM,kBAAkB,CAAC;AA8B1B,UAAU,uBAAuB;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB;AAeD,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,GAAG,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAShG;AA2CD,wBAAsB,oBAAoB,CACtC,UAAU,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EACpD,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,EACZ,UAAU,SAAI,GACf,OAAO,CAAC,MAAM,CAAC,CAgQjB;AAED;;;;;;GAMG;AACH,wBAAsB,qCAAqC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,mBAE/G;AAED;;;;GAIG;AACH,wBAAsB,qCAAqC,CACvD,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,mBAGf;AAED,qEAAqE;AACrE,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,SAAS,CAE5D;AAED,wBAAsB,kBAAkB,CACpC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,YAAY,UAAQ,EACpB,eAAe,UAAQ,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAsGlC;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAIzC;CACJ;AAED,qBAAa,QAAS,SAAQ,KAAK;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAM5G;CACJ;AAED,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,SAAS,CAAC;AACvD,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,WAAW,CAAC;AAErD,qBAAa,8BAA+B,SAAQ,QAAQ;aAOpC,SAAS,CAAC,EAAE,MAAM;aAClB,SAAS,CAAC,EAAE,MAAM;aAElB,QAAQ,CAAC,EAAE,qBAAqB;IATpD,cAAc,EAAE,kBAAkB,CAAC;IACnC,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,YACI,MAAM,EAAE,MAAM,EACE,SAAS,CAAC,EAAE,MAAM,YAAA,EAClB,SAAS,CAAC,EAAE,MAAM,YAAA,EAClC,eAAe,CAAC,EAAE,MAAM,EACR,QAAQ,CAAC,EAAE,qBAAqB,YAAA,EAQnD;CACJ;AAED,sDAAsD;AACtD,eAAO,MAAM,uBAAuB,uCAAiC,CAAC;AACtE,sDAAsD;AACtD,MAAM,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAErE,qBAAa,wBAAyB,SAAQ,QAAQ;aAI9B,QAAQ,CAAC,EAAE,qBAAqB;IAHpD,YACI,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,MAAM,EACR,QAAQ,CAAC,EAAE,qBAAqB,YAAA,EAOnD;CACJ;AAED,qBAAa,eAAgB,SAAQ,QAAQ;IACzC,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAG5G;CACJ;AAED,qBAAa,0BAA2B,SAAQ,QAAQ;IACpD,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAG5G;CACJ;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,8BAA8B,CAExG;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CAE5F;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,0BAA0B,CAEhG;AAED;;;;;GAKG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACjD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACJ"}
+{"version":3,"file":"composable.d.ts","sourceRoot":"","sources":["../../../src/session/auth/composable.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EACH,KAAK,gBAAgB,EAIxB,MAAM,kBAAkB,CAAC;AAyG1B,UAAU,uBAAuB;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,gBAAgB,CAAC;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;CACjB;AAeD,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,GAAG,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAYhG;AA2CD,wBAAsB,oBAAoB,CACtC,UAAU,EAAE,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,EACpD,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,EACZ,UAAU,SAAI,GACf,OAAO,CAAC,MAAM,CAAC,CAgQjB;AAED;;;;;;GAMG;AACH,wBAAsB,qCAAqC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,mBAE/G;AAED;;;;GAIG;AACH,wBAAsB,qCAAqC,CACvD,aAAa,EAAE,MAAM,EACrB,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,CAAC,EAAE,MAAM,mBAGf;AAED,qEAAqE;AACrE,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,SAAS,CAE5D;AAED,wBAAsB,kBAAkB,CACpC,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,EAClB,YAAY,UAAQ,EACpB,eAAe,UAAQ,GACxB,OAAO,CAAC,uBAAuB,CAAC,CA2HlC;AAED,qBAAa,iBAAkB,SAAQ,KAAK;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAIzC;CACJ;AAED,qBAAa,QAAS,SAAQ,KAAK;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAM5G;CACJ;AAED,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,SAAS,CAAC;AACvD,MAAM,MAAM,kBAAkB,GAAG,KAAK,GAAG,WAAW,CAAC;AAErD,qBAAa,8BAA+B,SAAQ,QAAQ;aAOpC,SAAS,CAAC,EAAE,MAAM;aAClB,SAAS,CAAC,EAAE,MAAM;aAElB,QAAQ,CAAC,EAAE,qBAAqB;IATpD,cAAc,EAAE,kBAAkB,CAAC;IACnC,cAAc,CAAC,EAAE,kBAAkB,CAAC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,YACI,MAAM,EAAE,MAAM,EACE,SAAS,CAAC,EAAE,MAAM,YAAA,EAClB,SAAS,CAAC,EAAE,MAAM,YAAA,EAClC,eAAe,CAAC,EAAE,MAAM,EACR,QAAQ,CAAC,EAAE,qBAAqB,YAAA,EAQnD;CACJ;AAED,sDAAsD;AACtD,eAAO,MAAM,uBAAuB,uCAAiC,CAAC;AACtE,sDAAsD;AACtD,MAAM,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAErE,qBAAa,wBAAyB,SAAQ,QAAQ;aAI9B,QAAQ,CAAC,EAAE,qBAAqB;IAHpD,YACI,MAAM,EAAE,MAAM,EACd,eAAe,CAAC,EAAE,MAAM,EACR,QAAQ,CAAC,EAAE,qBAAqB,YAAA,EAOnD;CACJ;AAED,qBAAa,eAAgB,SAAQ,QAAQ;IACzC,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAG5G;CACJ;AAED,qBAAa,0BAA2B,SAAQ,QAAQ;IACpD,YAAY,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,EAG5G;CACJ;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,8BAA8B,CAExG;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CAE5F;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,0BAA0B,CAEhG;AAED;;;;;GAKG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACjD,YAAY,OAAO,EAAE,MAAM,EAG1B;CACJ"}

package/lib/session/auth/composable.js

@@ -5,9 +5,70 @@ import { NO_ACCESSIBLE_ACCOUNT_ERROR_CODE, REQUESTED_SCOPE_UNAVAILABLE_ERROR_COD
 import { Env } from '@vertesia/ui/env';
 import { jwtDecode } from 'jwt-decode';
 import { LastSelectedAccountId_KEY, LastSelectedProjectId_KEY } from '../constants';
+import { generateAuthState } from './authState';
+import { authReturnUrl, buildCentralAuthRedirectUrl, centralAuthUrl, shouldRedirectToCentralAuth, } from './domainRouting';
 import { getFirebaseAuth, getFirebaseAuthToken } from './firebase';
 let AUTH_TOKEN_RAW;
 let AUTH_TOKEN;
+/**
+ * Whether this tab ever held a token.
+ *
+ * Separates "the session expired" from "there is no session yet". Only the first is renewed from
+ * here; the first load is UserSessionProvider's, and it has the account/project selection that
+ * this layer does not.
+ */
+let HAD_SESSION = false;
+/** Session-storage stamp of the last renewal redirect, so the cooldown survives the navigation. */
+const RENEWAL_ATTEMPT_KEY = 'vt.centralAuthRenewalAt';
+const RENEWAL_COOLDOWN_MS = 60_000;
+/**
+ * Renew an expired Central Auth session by bouncing through the broker.
+ *
+ * A Central Auth session holds exactly one credential -- the STS JWT, in memory -- and STS refuses
+ * it once it has expired. There is no Firebase user in this browser to mint a replacement from and
+ * no refresh token, so the only way back is the broker, which still has the user's own session and
+ * returns a fresh identity token without prompting. That is precisely what a manual reload does
+ * today; doing it here turns a page that dead-ends on "Cannot acquire a composable token" into a
+ * redirect the user usually does not notice.
+ *
+ * The cooldown is the important part. If the broker returns a credential STS also rejects, an
+ * unguarded redirect bounces the browser between the two forever -- and a redirect loop is a worse
+ * failure than the error page it replaced, because it never comes to rest anywhere the user can
+ * read. One attempt per minute, recorded in sessionStorage because the module state does not
+ * survive the navigation this function starts.
+ *
+ * Returns whether a redirect was started.
+ */
+function renewExpiredCentralAuthSession() {
+    if (!HAD_SESSION || !shouldRedirectToCentralAuth()) {
+        return false;
+    }
+    let lastAttempt = 0;
+    try {
+        lastAttempt = Number(sessionStorage.getItem(RENEWAL_ATTEMPT_KEY) ?? '0');
+    }
+    catch {
+        // sessionStorage unavailable -- treated as "no previous attempt", so the redirect is
+        // allowed once and the failure surfaces normally if it does not stick.
+    }
+    if (Number.isFinite(lastAttempt) && lastAttempt > 0 && Date.now() - lastAttempt < RENEWAL_COOLDOWN_MS) {
+        Env.logger.warn('Central Auth session renewal already attempted; surfacing the failure instead', {
+            vertesia: { last_attempt_ms_ago: Date.now() - lastAttempt },
+        });
+        return false;
+    }
+    try {
+        sessionStorage.setItem(RENEWAL_ATTEMPT_KEY, String(Date.now()));
+    }
+    catch {
+        // Without the stamp the cooldown cannot be enforced across the navigation. Still worth
+        // redirecting once: the alternative is a page the user can only fix by reloading manually.
+    }
+    Env.logger.info('Renewing an expired Central Auth session through the broker');
+    const url = buildCentralAuthRedirectUrl(centralAuthUrl(), Env.endpoints.sts ?? 'https://sts.vertesia.io', authReturnUrl(), generateAuthState());
+    location.replace(url.toString());
+    return true;
+}
 function clearRejectedPersistedScope(accountId, projectId) {
     if (!accountId)
         return;
@@ -42,8 +103,11 @@ function identityFromAcceptedToken(token) {
     }
 }
 export function resolveAuthSelection(currentUrl) {
-    const urlAccount = currentUrl.searchParams.get('a') ?? undefined;
-    const urlProject = currentUrl.searchParams.get('p') ?? undefined;
+    // A URL selection owns the whole pair: never attach an unrelated configured account/project.
+    const hasUrlScope = currentUrl.searchParams.has('a') || currentUrl.searchParams.has('p');
+    const defaults = hasUrlScope ? undefined : Env.defaultAuthSelection;
+    const urlAccount = currentUrl.searchParams.get('a') ?? defaults?.accountId;
+    const urlProject = currentUrl.searchParams.get('p') ?? defaults?.projectId;
     const accountId = urlAccount ??
         (urlProject === undefined ? (localStorage.getItem(LastSelectedAccountId_KEY) ?? undefined) : undefined);
     const projectId = urlProject ?? localStorage.getItem(`${LastSelectedProjectId_KEY}-${accountId}`) ?? undefined;
@@ -350,6 +414,7 @@ export async function getComposableToken(accountId, projectId, initToken, forceR
         AUTH_TOKEN &&
         cachedTokenMatchesScope &&
         AUTH_TOKEN.exp > Date.now() / 1000 + 300) {
+        HAD_SESSION = true;
         return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };
     }
     if (!forceRefresh &&
@@ -360,6 +425,7 @@ export async function getComposableToken(accountId, projectId, initToken, forceR
         if (!AUTH_TOKEN.exp) {
             throw new Error('Invalid composable token');
         }
+        HAD_SESSION = true;
         return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };
     }
     try {
@@ -371,7 +437,14 @@ export async function getComposableToken(accountId, projectId, initToken, forceR
         else if (!devAuthToken) {
             // Embedded apps can reacquire a fresh credential from their host after their cached token expires.
             const refreshCredential = (await Env.authTokenProvider?.()) ?? initToken ?? AUTH_TOKEN_RAW;
-            if (refreshCredential &&
+            // `forceRefresh` has to defeat this shortcut, not just the cache above it. A caller
+            // asking for a forced refresh wants claims recomputed -- `refreshAuthToken()` exists so
+            // a stale `apps` claim can be re-read after an ACE change, and STS recomputes it on
+            // every issuance. Adopting the credential we already hold satisfies the check and
+            // returns the very token whose claims were suspect, silently making the call a no-op
+            // for exactly the sessions that have no other credential to fall back on.
+            if (!forceRefresh &&
+                refreshCredential &&
                 isVertesiaIssuedToken(refreshCredential) &&
                 canUseVertesiaTokenDirectly(refreshCredential, selectedAccount, selectedProject)) {
                 AUTH_TOKEN_RAW = refreshCredential;
@@ -397,6 +470,13 @@ export async function getComposableToken(accountId, projectId, initToken, forceR
                 clearRejectedPersistedScope(selectedAccount, selectedProject);
             }
         }
+        // An expired Central Auth session presents as a rejected credential: the JWT we sent STS to
+        // renew from is the one that timed out. The broker can still vouch for the user. Only this
+        // error -- a scope or account failure is about who the user is, and the broker would hand
+        // back the same identity and the same refusal.
+        if (error instanceof CredentialError) {
+            renewExpiredCentralAuthSession();
+        }
         throw error;
     }
     if (!AUTH_TOKEN_RAW) {
@@ -406,6 +486,10 @@ export async function getComposableToken(accountId, projectId, initToken, forceR
                 project_id: selectedProject,
             },
         });
+        // Reached once the credential has already been discarded -- typically the call after the
+        // one that saw STS reject it. Same remedy, and the cooldown keeps this from redirecting a
+        // second time for the same expiry.
+        renewExpiredCentralAuthSession();
         throw new Error('Cannot acquire a composable token');
     }
     AUTH_TOKEN = decodeToken(AUTH_TOKEN_RAW);
@@ -419,6 +503,7 @@ export async function getComposableToken(accountId, projectId, initToken, forceR
         });
         throw new Error('Invalid composable token');
     }
+    HAD_SESSION = true;
     return { rawToken: AUTH_TOKEN_RAW, token: AUTH_TOKEN, error: false };
 }
 export class UserNotFoundError extends Error {

package/lib/session/auth/composable.js.map

@@ -1 +1 @@
-{"version":3,"file":"composable.js","sourceRoot":"","sources":["../../../src/session/auth/composable.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAEH,gCAAgC,EAChC,sCAAsC,EACtC,iCAAiC,GACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEnE,IAAI,cAAkC,CAAC;AACvC,IAAI,UAAwC,CAAC;AAE7C,SAAS,2BAA2B,CAAC,SAAkB,EAAE,SAAkB;IACvE,IAAI,CAAC,SAAS;QAAE,OAAO;IAEvB,MAAM,UAAU,GAAG,GAAG,yBAAyB,IAAI,SAAS,EAAE,CAAC;IAC/D,IAAI,SAAS,EAAE,CAAC;QACZ,MAAM,uBAAuB,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC;QAC/E,IAAI,uBAAuB,EAAE,CAAC;YAC1B,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,uBAAuB,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3F,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACvD,CAAC;QACD,OAAO;IACX,CAAC;IAED,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,SAAS,EAAE,CAAC;QAChE,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACnD,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;AACL,CAAC;AAcD,SAAS,yBAAyB,CAAC,KAAa;IAC5C,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAsC,KAAK,CAAC,CAAC;QACtE,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC1E,OAAO;YACH,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACpF,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAe;IAChD,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;IACjE,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;IACjE,MAAM,SAAS,GACX,UAAU;QACV,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5G,MAAM,SAAS,GAAG,UAAU,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,yBAAyB,IAAI,SAAS,EAAE,CAAC,IAAI,SAAS,CAAC;IAE/G,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAC9C,OAAO,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAC9B,OAAO,SAAS,CAAC,KAAK,CAAqB,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAwC,CAAC;QAC1E,OAAO,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAE,SAAkB,EAAE,SAAkB;IACtF,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,sBAAsB,GAAG,OAAO,CAClC,OAAO,CAAC,WAAW,EAAE,MAAM;QACvB,OAAO,CAAC,aAAa,EAAE,MAAM;QAC7B,OAAO,CAAC,aAAa,EAAE,MAAM;QAC7B,OAAO,CAAC,IAAI,EAAE,MAAM,CAC3B,CAAC;IACF,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,UAAoD,EACpD,SAAkB,EAClB,SAAkB,EAClB,GAAY,EACZ,UAAU,GAAG,CAAC;IAEd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;QACpD,QAAQ,EAAE;YACN,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,UAAU;SAC1B;KACJ,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC,CAAC,mBAAmB;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;IAED,qEAAqE;IACrE,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;IACtC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;QAC/C,QAAQ,EAAE;YACN,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,WAAW;SACvB;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC;QACD,oCAAoC;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,WAAW,cAAc,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG;YAChB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE,oCAAoC;aAC3E;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SACpC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC5C,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,KAAK,EAAE,KAAK;iBACf;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,0BAA0B,CAAC,iDAAiD,EAAE,WAAW,EAAE;gBACjG,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,6DAA6D;YAC7D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;gBACnE,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,EAAE,MAAM;iBACzB;aACJ,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,mBAAmB,EAAE;gBAC3E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,aAAa,EAAE,UAAU,OAAO,EAAE;oBAClC,cAAc,EAAE,kBAAkB;iBACrC;aACJ,CAAC,CAAC;YAEH,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,6BAA6B;gBAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;oBACvD,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,SAAS,CAAqB,OAAO,CAAC,CAAC;gBAC9D,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM,IAAI,iBAAiB,CAAC,kCAAkC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;YAC1F,CAAC;YAED,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,+DAA+D;gBAC/D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBACpE,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YAED,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBAC7C,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,cAAc,CAAC,MAAM;qBAChC;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACpD,CAAC;YAED,+CAA+C;YAC/C,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;gBACzD,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACxB;aACJ,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;gBAC5E,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,EAAE,MAAM;iBACzB;aACJ,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,SAAS,CAAqB,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAClD,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAC9B,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,KAAK,EAAE,cAAc,CAAC,KAAK;iBAC9B;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBACpD,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;aACpF,CAAC,CAAC;YACH,MAAM,IAAI,eAAe,CAAC,gDAAgD,EAAE,WAAW,EAAE;gBACrF,MAAM,EAAE,MAAM,CAAC,MAAM;aACxB,CAAC,CAAC;QACP,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAEzC,CAAC;YAChB,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,IAAI,EAAE,SAAS,KAAK,iCAAiC,EAAE,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;oBAC5E,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,0BAA0B,CAChC,IAAI,CAAC,OAAO,IAAI,qEAAqE,CACxF,CAAC;YACN,CAAC;YAED,IAAI,IAAI,EAAE,SAAS,KAAK,gCAAgC,EAAE,CAAC;gBACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;oBACtD,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;iBAClE,CAAC,CAAC;gBACH,MAAM,IAAI,wBAAwB,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC5E,CAAC;YAED,+EAA+E;YAC/E,yFAAyF;YACzF,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,sCAAsC,EAAE,CAAC;gBAChF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;oBAC7D,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,UAAU,EAAE,IAAI,EAAE,SAAS,IAAI,sCAAsC;qBACxE;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,8BAA8B,CACpC,WAAW,EACX,SAAS,EACT,SAAS,EACT,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAC1C,QAAQ,CACX,CAAC;YACN,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE;gBAChE,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,IAAI,CAAC,SAAS;iBAC7B;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,0BAA0B,CAAC,iDAAiD,EAAE,WAAW,EAAE;gBACjG,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC5C,QAAQ,EAAE;oBACN,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,KAAK,EAAE,SAAS;oBAChB,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACxB;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,0BAA0B,CAAC,uDAAuD,EAAE,WAAW,EAAE;gBACvG,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,SAAS;aACnB,CAAC,CAAC;QACP,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IACI,KAAK,YAAY,iBAAiB;YAClC,KAAK,YAAY,QAAQ;YACzB,KAAK,YAAY,0BAA0B,EAC7C,CAAC;YACC,oEAAoE;YACpE,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,iDAAiD;YAAE,MAAM,KAAK,CAAC;QAC/G,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;YACxD,QAAQ,EAAE;gBACN,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,KAAK;aACf;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,0BAA0B,CAAC,uDAAuD,EAAE,WAAW,EAAE;YACvG,KAAK,EAAE,KAAK;SACf,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,SAAkB,EAAE,SAAkB,EAAE,GAAY;IAC5G,OAAO,oBAAoB,CAAC,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACvD,aAAqB,EACrB,SAAkB,EAClB,SAAkB,EAClB,GAAY;IAEZ,OAAO,oBAAoB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACjG,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,uBAAuB;IACnC,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,SAAkB,EAClB,SAAkB,EAClB,SAAkB,EAClB,YAAY,GAAG,KAAK,EACpB,eAAe,GAAG,KAAK;IAEvB,MAAM,eAAe,GACjB,SAAS;QACT,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3G,MAAM,eAAe,GACjB,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,yBAAyB,IAAI,eAAe,EAAE,CAAC,IAAI,SAAS,CAAC;IACtG,MAAM,YAAY,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,aAAa,GAAG,YAAY,IAAI,SAAS,IAAI,cAAc,CAAC;IAElE,MAAM,uBAAuB,GACzB,CAAC,CAAC,eAAe,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,eAAe,CAAC;QACjE,CAAC,CAAC,eAAe,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,eAAe,CAAC,CAAC;IAEtE,mFAAmF;IACnF,IACI,CAAC,YAAY;QACb,cAAc;QACd,UAAU;QACV,uBAAuB;QACvB,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,EAC1C,CAAC;QACC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,IACI,CAAC,YAAY;QACb,qBAAqB,CAAC,aAAa,CAAC;QACpC,2BAA2B,CAAC,aAAa,EAAE,eAAe,EAAE,eAAe,CAAC,EAC9E,CAAC;QACC,cAAc,GAAG,aAAa,CAAC;QAC/B,UAAU,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,CAAC;QACD,sCAAsC;QACtC,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe,IAAI,eAAe,EAAE,CAAC,WAAW,EAAE,CAAC;YACrE,mDAAmD;YACnD,cAAc,GAAG,MAAM,qCAAqC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QACnG,CAAC;aAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,mGAAmG;YACnG,MAAM,iBAAiB,GAAG,CAAC,MAAM,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC,IAAI,SAAS,IAAI,cAAc,CAAC;YAC3F,IACI,iBAAiB;gBACjB,qBAAqB,CAAC,iBAAiB,CAAC;gBACxC,2BAA2B,CAAC,iBAAiB,EAAE,eAAe,EAAE,eAAe,CAAC,EAClF,CAAC;gBACC,cAAc,GAAG,iBAAiB,CAAC;YACvC,CAAC;iBAAM,IAAI,iBAAiB,EAAE,CAAC;gBAC3B,cAAc,GAAG,MAAM,oBAAoB,CACvC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EACxC,eAAe,EACf,eAAe,CAClB,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,cAAc,GAAG,SAAS,CAAC;YAC/B,CAAC;QACL,CAAC;aAAM,IAAI,YAAY,EAAE,CAAC;YACtB,cAAc,GAAG,YAAY,CAAC;QAClC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,IACI,KAAK,YAAY,8BAA8B;YAC/C,KAAK,YAAY,wBAAwB;YACzC,KAAK,YAAY,eAAe,EAClC,CAAC;YACC,cAAc,GAAG,SAAS,CAAC;YAC3B,UAAU,GAAG,SAAS,CAAC;YACvB,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;gBAClD,2BAA2B,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;YAClE,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;YAClD,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IAED,UAAU,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;IAEzC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACzC,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACxC,KAAK,CAAS;IACd,YAAY,OAAe,EAAE,KAAa;QACtC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AAED,MAAM,OAAO,QAAS,SAAQ,KAAK;IAC/B,MAAM,CAAS;IACN,MAAM,CAAU;IAChB,SAAS,CAAU;IAC5B,YAAY,OAAe,EAAE,MAAc,EAAE,OAAgE;QACzG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;IACxC,CAAC;CACJ;AAKD,MAAM,OAAO,8BAA+B,SAAQ,QAAQ;IAOpC,SAAS;IACT,SAAS;IAET,QAAQ;IAT5B,cAAc,CAAqB;IACnC,cAAc,CAAsB;IACpC,WAAW,CAAU;IAErB,YACI,MAAc,EACE,SAAkB,EAClB,SAAkB,EAClC,eAAwB,EACR,QAAgC;QAEhD,KAAK,CAAC,eAAe,IAAI,oDAAoD,EAAE,MAAM,EAAE;YACnF,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,sCAAsC;SACpD,CAAC,CAAC;yBARa,SAAS;yBACT,SAAS;wBAET,QAAQ;QAMxB,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,CAAC;CACJ;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAItE,MAAM,OAAO,wBAAyB,SAAQ,QAAQ;IAI9B,QAAQ;IAH5B,YACI,MAAc,EACd,eAAwB,EACR,QAAgC;QAEhD,KAAK,CAAC,eAAe,IAAI,mDAAmD,EAAE,MAAM,EAAE;YAClF,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,gCAAgC;SAC9C,CAAC,CAAC;wBALa,QAAQ;QAMxB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IAC3C,CAAC;CACJ;AAED,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IACzC,YAAY,OAAe,EAAE,MAAc,EAAE,OAAgE;QACzG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAClC,CAAC;CACJ;AAED,MAAM,OAAO,0BAA2B,SAAQ,QAAQ;IACpD,YAAY,OAAe,EAAE,MAAc,EAAE,OAAgE;QACzG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC7C,CAAC;CACJ;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAc;IAC3D,OAAO,KAAK,YAAY,8BAA8B,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACrD,OAAO,KAAK,YAAY,wBAAwB,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,eAAe,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACvD,OAAO,KAAK,YAAY,0BAA0B,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACjD,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC7C,CAAC;CACJ"}
+{"version":3,"file":"composable.js","sourceRoot":"","sources":["../../../src/session/auth/composable.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAEH,gCAAgC,EAChC,sCAAsC,EACtC,iCAAiC,GACpC,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AACpF,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACH,aAAa,EACb,2BAA2B,EAC3B,cAAc,EACd,2BAA2B,GAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEnE,IAAI,cAAkC,CAAC;AACvC,IAAI,UAAwC,CAAC;AAE7C;;;;;;GAMG;AACH,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,mGAAmG;AACnG,MAAM,mBAAmB,GAAG,yBAAyB,CAAC;AACtD,MAAM,mBAAmB,GAAG,MAAM,CAAC;AAEnC;;;;;;;;;;;;;;;;;GAiBG;AACH,SAAS,8BAA8B;IACnC,IAAI,CAAC,WAAW,IAAI,CAAC,2BAA2B,EAAE,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC;QACD,WAAW,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACL,qFAAqF;QACrF,uEAAuE;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,mBAAmB,EAAE,CAAC;QACpG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,+EAA+E,EAAE;YAC7F,QAAQ,EAAE,EAAE,mBAAmB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,EAAE;SAC9D,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACD,cAAc,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACL,uFAAuF;QACvF,2FAA2F;IAC/F,CAAC;IAED,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IAC/E,MAAM,GAAG,GAAG,2BAA2B,CACnC,cAAc,EAAE,EAChB,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,yBAAyB,EAC9C,aAAa,EAAE,EACf,iBAAiB,EAAE,CACtB,CAAC;IACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,SAAS,2BAA2B,CAAC,SAAkB,EAAE,SAAkB;IACvE,IAAI,CAAC,SAAS;QAAE,OAAO;IAEvB,MAAM,UAAU,GAAG,GAAG,yBAAyB,IAAI,SAAS,EAAE,CAAC;IAC/D,IAAI,SAAS,EAAE,CAAC;QACZ,MAAM,uBAAuB,GAAG,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,SAAS,CAAC;QAC/E,IAAI,uBAAuB,EAAE,CAAC;YAC1B,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,uBAAuB,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,SAAS,EAAE,CAAC;YAC3F,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACvD,CAAC;QACD,OAAO;IACX,CAAC;IAED,IAAI,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,KAAK,SAAS,EAAE,CAAC;QAChE,YAAY,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC;QACnD,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACxC,CAAC;AACL,CAAC;AAcD,SAAS,yBAAyB,CAAC,KAAa;IAC5C,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAsC,KAAK,CAAC,CAAC;QACtE,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAC1E,OAAO;YACH,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,IAAI,EAAE,OAAO,OAAO,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;SACpF,CAAC;IACN,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,UAAe;IAChD,6FAA6F;IAC7F,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC;IACpE,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,SAAS,CAAC;IAC3E,MAAM,UAAU,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,QAAQ,EAAE,SAAS,CAAC;IAC3E,MAAM,SAAS,GACX,UAAU;QACV,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5G,MAAM,SAAS,GAAG,UAAU,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,yBAAyB,IAAI,SAAS,EAAE,CAAC,IAAI,SAAS,CAAC;IAE/G,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAC9C,OAAO,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAC9B,OAAO,SAAS,CAAC,KAAK,CAAqB,CAAC;AAChD,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAyB;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,CAAC;QACD,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAwC,CAAC;QAC1E,OAAO,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,SAAS,2BAA2B,CAAC,KAAa,EAAE,SAAkB,EAAE,SAAkB;IACtF,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,EAAE,CAAC;QACzD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,sBAAsB,GAAG,OAAO,CAClC,OAAO,CAAC,WAAW,EAAE,MAAM;QACvB,OAAO,CAAC,aAAa,EAAE,MAAM;QAC7B,OAAO,CAAC,aAAa,EAAE,MAAM;QAC7B,OAAO,CAAC,IAAI,EAAE,MAAM,CAC3B,CAAC;IACF,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,IAAI,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,SAAS,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACtC,UAAoD,EACpD,SAAkB,EAClB,SAAkB,EAClB,GAAY,EACZ,UAAU,GAAG,CAAC;IAEd,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE;QACpD,QAAQ,EAAE;YACN,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,UAAU;SAC1B;KACJ,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC,CAAC,mBAAmB;IACvD,IAAI,CAAC,OAAO,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACzC,CAAC;IAED,qEAAqE;IACrE,MAAM,WAAW,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;IACtC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,gCAAgC,EAAE;QAC/C,QAAQ,EAAE;YACN,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,OAAO,EAAE,WAAW;SACvB;KACJ,CAAC,CAAC;IAEH,IAAI,CAAC;QACD,oCAAoC;QACpC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,WAAW,cAAc,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG;YAChB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,SAAS;YACrB,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS;SACpE,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACL,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,UAAU,OAAO,EAAE,EAAE,oCAAoC;aAC3E;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;SACpC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACf,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,KAAK,CAAC,CAAC;YACpD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC5C,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,KAAK,EAAE,KAAK;iBACf;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,0BAA0B,CAAC,iDAAiD,EAAE,WAAW,EAAE;gBACjG,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,6DAA6D;YAC7D,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;gBACnE,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,EAAE,MAAM;iBACzB;aACJ,CAAC,CAAC;YAEH,MAAM,cAAc,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,mBAAmB,EAAE;gBAC3E,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,aAAa,EAAE,UAAU,OAAO,EAAE;oBAClC,cAAc,EAAE,kBAAkB;iBACrC;aACJ,CAAC,CAAC;YAEH,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,6BAA6B;gBAC7B,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE;oBACvD,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,cAAc,GAAG,SAAS,CAAqB,OAAO,CAAC,CAAC;gBAC9D,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;oBACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;oBAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM,IAAI,iBAAiB,CAAC,kCAAkC,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;YAC1F,CAAC;YAED,IAAI,cAAc,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChC,+DAA+D;gBAC/D,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sDAAsD,EAAE;oBACpE,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;YACvE,CAAC;YAED,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;gBACrB,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;oBAC7C,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,cAAc,CAAC,MAAM;qBAChC;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACpD,CAAC;YAED,+CAA+C;YAC/C,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0CAA0C,EAAE;gBACzD,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACxB;aACJ,CAAC,CAAC;YACH,OAAO,oBAAoB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,OAAO,IAAI,MAAM,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;gBAC5E,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,EAAE,MAAM;iBACzB;aACJ,CAAC,CAAC;YACH,MAAM,cAAc,GAAG,SAAS,CAAqB,OAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,CAAC;gBACzB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAClD,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAC9B,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,KAAK,EAAE,cAAc,CAAC,KAAK;iBAC9B;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,iBAAiB,CAAC,gBAAgB,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,sCAAsC,EAAE;gBACpD,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;aACpF,CAAC,CAAC;YACH,MAAM,IAAI,eAAe,CAAC,gDAAgD,EAAE,WAAW,EAAE;gBACrF,MAAM,EAAE,MAAM,CAAC,MAAM;aACxB,CAAC,CAAC;QACP,CAAC;QAED,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAEzC,CAAC;YAChB,MAAM,QAAQ,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,IAAI,EAAE,SAAS,KAAK,iCAAiC,EAAE,CAAC;gBACxD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE;oBAC5E,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;qBACxB;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,0BAA0B,CAChC,IAAI,CAAC,OAAO,IAAI,qEAAqE,CACxF,CAAC;YACN,CAAC;YAED,IAAI,IAAI,EAAE,SAAS,KAAK,gCAAgC,EAAE,CAAC;gBACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;oBACtD,QAAQ,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;iBAClE,CAAC,CAAC;gBACH,MAAM,IAAI,wBAAwB,CAAC,WAAW,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC5E,CAAC;YAED,+EAA+E;YAC/E,yFAAyF;YACzF,IAAI,CAAC,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,sCAAsC,EAAE,CAAC;gBAChF,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE;oBAC7D,QAAQ,EAAE;wBACN,UAAU,EAAE,SAAS;wBACrB,UAAU,EAAE,SAAS;wBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;wBACrB,UAAU,EAAE,IAAI,EAAE,SAAS,IAAI,sCAAsC;qBACxE;iBACJ,CAAC,CAAC;gBACH,MAAM,IAAI,8BAA8B,CACpC,WAAW,EACX,SAAS,EACT,SAAS,EACT,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAC1C,QAAQ,CACX,CAAC;YACN,CAAC;YAED,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE;gBAChE,QAAQ,EAAE;oBACN,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;oBACrB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,UAAU,EAAE,IAAI,CAAC,SAAS;iBAC7B;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,0BAA0B,CAAC,iDAAiD,EAAE,WAAW,EAAE;gBACjG,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,KAAK,EAAE,IAAI;aACd,CAAC,CAAC;QACP,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC5C,QAAQ,EAAE;oBACN,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,KAAK,EAAE,SAAS;oBAChB,UAAU,EAAE,SAAS;oBACrB,UAAU,EAAE,SAAS;iBACxB;aACJ,CAAC,CAAC;YACH,MAAM,IAAI,0BAA0B,CAAC,uDAAuD,EAAE,WAAW,EAAE;gBACvG,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,SAAS;aACnB,CAAC,CAAC;QACP,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACpD,OAAO,KAAK,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,IACI,KAAK,YAAY,iBAAiB;YAClC,KAAK,YAAY,QAAQ;YACzB,KAAK,YAAY,0BAA0B,EAC7C,CAAC;YACC,oEAAoE;YACpE,MAAM,KAAK,CAAC;QAChB,CAAC;QAED,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,iDAAiD;YAAE,MAAM,KAAK,CAAC;QAC/G,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;QAChE,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;YACxD,QAAQ,EAAE;gBACN,UAAU,EAAE,SAAS;gBACrB,UAAU,EAAE,SAAS;gBACrB,KAAK,EAAE,KAAK;aACf;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,0BAA0B,CAAC,uDAAuD,EAAE,WAAW,EAAE;YACvG,KAAK,EAAE,KAAK;SACf,CAAC,CAAC;IACP,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CAAC,SAAkB,EAAE,SAAkB,EAAE,GAAY;IAC5G,OAAO,oBAAoB,CAAC,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACjF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACvD,aAAqB,EACrB,SAAkB,EAClB,SAAkB,EAClB,GAAY;IAEZ,OAAO,oBAAoB,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;AACjG,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,uBAAuB;IACnC,OAAO,cAAc,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,SAAkB,EAClB,SAAkB,EAClB,SAAkB,EAClB,YAAY,GAAG,KAAK,EACpB,eAAe,GAAG,KAAK;IAEvB,MAAM,eAAe,GACjB,SAAS;QACT,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3G,MAAM,eAAe,GACjB,SAAS,IAAI,YAAY,CAAC,OAAO,CAAC,GAAG,yBAAyB,IAAI,eAAe,EAAE,CAAC,IAAI,SAAS,CAAC;IACtG,MAAM,YAAY,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,aAAa,GAAG,YAAY,IAAI,SAAS,IAAI,cAAc,CAAC;IAElE,MAAM,uBAAuB,GACzB,CAAC,CAAC,eAAe,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,eAAe,CAAC;QACjE,CAAC,CAAC,eAAe,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,eAAe,CAAC,CAAC;IAEtE,mFAAmF;IACnF,IACI,CAAC,YAAY;QACb,cAAc;QACd,UAAU;QACV,uBAAuB;QACvB,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,GAAG,EAC1C,CAAC;QACC,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,IACI,CAAC,YAAY;QACb,qBAAqB,CAAC,aAAa,CAAC;QACpC,2BAA2B,CAAC,aAAa,EAAE,eAAe,EAAE,eAAe,CAAC,EAC9E,CAAC;QACC,cAAc,GAAG,aAAa,CAAC;QAC/B,UAAU,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChD,CAAC;QACD,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACzE,CAAC;IAED,IAAI,CAAC;QACD,sCAAsC;QACtC,IAAI,CAAC,YAAY,IAAI,CAAC,eAAe,IAAI,eAAe,EAAE,CAAC,WAAW,EAAE,CAAC;YACrE,mDAAmD;YACnD,cAAc,GAAG,MAAM,qCAAqC,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;QACnG,CAAC;aAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,mGAAmG;YACnG,MAAM,iBAAiB,GAAG,CAAC,MAAM,GAAG,CAAC,iBAAiB,EAAE,EAAE,CAAC,IAAI,SAAS,IAAI,cAAc,CAAC;YAC3F,oFAAoF;YACpF,wFAAwF;YACxF,oFAAoF;YACpF,kFAAkF;YAClF,qFAAqF;YACrF,0EAA0E;YAC1E,IACI,CAAC,YAAY;gBACb,iBAAiB;gBACjB,qBAAqB,CAAC,iBAAiB,CAAC;gBACxC,2BAA2B,CAAC,iBAAiB,EAAE,eAAe,EAAE,eAAe,CAAC,EAClF,CAAC;gBACC,cAAc,GAAG,iBAAiB,CAAC;YACvC,CAAC;iBAAM,IAAI,iBAAiB,EAAE,CAAC;gBAC3B,cAAc,GAAG,MAAM,oBAAoB,CACvC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,CAAC,EACxC,eAAe,EACf,eAAe,CAClB,CAAC;YACN,CAAC;iBAAM,CAAC;gBACJ,cAAc,GAAG,SAAS,CAAC;YAC/B,CAAC;QACL,CAAC;aAAM,IAAI,YAAY,EAAE,CAAC;YACtB,cAAc,GAAG,YAAY,CAAC;QAClC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACtB,IACI,KAAK,YAAY,8BAA8B;YAC/C,KAAK,YAAY,wBAAwB;YACzC,KAAK,YAAY,eAAe,EAClC,CAAC;YACC,cAAc,GAAG,SAAS,CAAC;YAC3B,UAAU,GAAG,SAAS,CAAC;YACvB,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;gBAClD,2BAA2B,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;YAClE,CAAC;QACL,CAAC;QACD,4FAA4F;QAC5F,2FAA2F;QAC3F,0FAA0F;QAC1F,+CAA+C;QAC/C,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;YACnC,8BAA8B,EAAE,CAAC;QACrC,CAAC;QACD,MAAM,KAAK,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,cAAc,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE;YAClD,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QACH,yFAAyF;QACzF,0FAA0F;QAC1F,mCAAmC;QACnC,8BAA8B,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IAED,UAAU,GAAG,WAAW,CAAC,cAAc,CAAC,CAAC;IAEzC,IAAI,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;YACzC,QAAQ,EAAE;gBACN,UAAU,EAAE,eAAe;gBAC3B,UAAU,EAAE,eAAe;aAC9B;SACJ,CAAC,CAAC;QACH,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAChD,CAAC;IAED,WAAW,GAAG,IAAI,CAAC;IACnB,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACxC,KAAK,CAAS;IACd,YAAY,OAAe,EAAE,KAAa;QACtC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AAED,MAAM,OAAO,QAAS,SAAQ,KAAK;IAC/B,MAAM,CAAS;IACN,MAAM,CAAU;IAChB,SAAS,CAAU;IAC5B,YAAY,OAAe,EAAE,MAAc,EAAE,OAAgE;QACzG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;IACxC,CAAC;CACJ;AAKD,MAAM,OAAO,8BAA+B,SAAQ,QAAQ;IAOpC,SAAS;IACT,SAAS;IAET,QAAQ;IAT5B,cAAc,CAAqB;IACnC,cAAc,CAAsB;IACpC,WAAW,CAAU;IAErB,YACI,MAAc,EACE,SAAkB,EAClB,SAAkB,EAClC,eAAwB,EACR,QAAgC;QAEhD,KAAK,CAAC,eAAe,IAAI,oDAAoD,EAAE,MAAM,EAAE;YACnF,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,sCAAsC;SACpD,CAAC,CAAC;yBARa,SAAS;yBACT,SAAS;wBAET,QAAQ;QAMxB,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;QAC7C,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,CAAC;CACJ;AAED,sDAAsD;AACtD,MAAM,CAAC,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAItE,MAAM,OAAO,wBAAyB,SAAQ,QAAQ;IAI9B,QAAQ;IAH5B,YACI,MAAc,EACd,eAAwB,EACR,QAAgC;QAEhD,KAAK,CAAC,eAAe,IAAI,mDAAmD,EAAE,MAAM,EAAE;YAClF,MAAM,EAAE,GAAG;YACX,SAAS,EAAE,gCAAgC;SAC9C,CAAC,CAAC;wBALa,QAAQ;QAMxB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IAC3C,CAAC;CACJ;AAED,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IACzC,YAAY,OAAe,EAAE,MAAc,EAAE,OAAgE;QACzG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAClC,CAAC;CACJ;AAED,MAAM,OAAO,0BAA2B,SAAQ,QAAQ;IACpD,YAAY,OAAe,EAAE,MAAc,EAAE,OAAgE;QACzG,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC7C,CAAC;CACJ;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAc;IAC3D,OAAO,KAAK,YAAY,8BAA8B,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACrD,OAAO,KAAK,YAAY,wBAAwB,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,eAAe,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACvD,OAAO,KAAK,YAAY,0BAA0B,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IACjD,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC7C,CAAC;CACJ"}

package/lib/session/auth/domainRouting.d.ts

@@ -3,18 +3,21 @@ declare global {
         AUTH_MODE?: 'firebase' | 'central';
     }
 }
+/**
+ * The broker this app sends users to for sign-in and logout.
+ *
+ * Hard-coded until now, which meant every consumer of this package reached the same deployment no
+ * matter what was running. It is read from the environment so a single app can be pointed at a
+ * different broker, and it keeps this default so an app that configures nothing is unaffected.
+ */
+export declare const DEFAULT_CENTRAL_AUTH_URL = "https://internal-auth.vertesia.app/";
+export declare function centralAuthUrl(): string;
 export declare function shouldUseFirebaseAuth(_hostname?: string): boolean;
 export declare function shouldRedirectToCentralAuth(_hostname?: string): boolean;
-interface CentralAuthRedirectOptions {
-    centralAuthUrl: string;
-    stsEndpoint: string;
-    returnUrl: URL;
-    state: string;
+interface AuthSelection {
     accountId?: string;
     projectId?: string;
 }
-/** Build a central-auth round trip without losing the app's requested account/project selection. */
-export declare function centralAuthRedirectUrl({ centralAuthUrl, stsEndpoint, returnUrl, state, accountId, projectId, }: CentralAuthRedirectOptions): URL;
 /**
  * The page URL to return to after a central-auth round-trip (`redirect_uri`).
  *
@@ -40,6 +43,16 @@ export declare function authReturnUrl(): URL;
  * behavior is unchanged.
  */
 export declare function mountRootUrl(): URL;
+/**
+ * The broker URL a sign-in or renewal round-trip navigates to.
+ *
+ * Every parameter goes on through `searchParams`, never by concatenating a query string onto
+ * `centralAuth`. The endpoint is configurable, so it may already carry its own query or a
+ * fragment -- and appending `?sts=...` to one of those folds the parameter into the existing value
+ * or hides it in the fragment, leaving Central Auth with no `sts` at all. `searchParams` also
+ * percent-encodes the values, which the interpolated URLs did not.
+ */
+export declare function buildCentralAuthRedirectUrl(centralAuth: string, stsUrl: string, returnUrl: URL, state: string, selection?: AuthSelection): URL;
 /** Record that this browser is on its way to the broker. Called for you by {@link redirectToCentralAuth}. */
 export declare function markCentralAuthRoundTripStarted(): void;
 /**
@@ -54,10 +67,7 @@ export declare function clearCentralAuthRoundTripMarker(): void;
  * and {@link isCentralAuthRedirectPending}'s counterpart inside `UserSessionProvider` cannot drift
  * into producing different `redirect_uri` / `state` / `sts` values for the same page load.
  */
-export declare function redirectToCentralAuth(selection?: {
-    accountId?: string;
-    projectId?: string;
-}): void;
+export declare function redirectToCentralAuth(selection?: AuthSelection): void;
 /**
  * Whether this page load is already certain to end in a Central Auth round-trip, decidable before
  * any application module has run.
@@ -67,7 +77,7 @@ export declare function redirectToCentralAuth(selection?: {
  * that provider from redirecting is therefore knowable up front, and this predicate enumerates
  * them in the same order:
  *
- *   - Apps configured with Firebase auth sign in in place rather than at the broker;
+ *   - Firebase-allowlisted hosts sign in in place rather than at the broker;
  *   - a host app that injects a token through `Env.authTokenProvider` may not need the broker
  *     (and when its token turns out to be empty the provider still redirects — answering `false`
  *     here just lets the normal flow decide, which is the safe direction);

package/lib/session/auth/domainRouting.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"domainRouting.d.ts","sourceRoot":"","sources":["../../../src/session/auth/domainRouting.ts"],"names":[],"mappings":"AAGA,OAAO,CAAC,MAAM,CAAC;IACX,UAAU,MAAM;QACZ,SAAS,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;KACtC;CACJ;AAED,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,WAEvD;AAED,wBAAgB,2BAA2B,CAAC,SAAS,CAAC,EAAE,MAAM,WAE7D;AAED,UAAU,0BAA0B;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,GAAG,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,oGAAoG;AACpG,wBAAgB,sBAAsB,CAAC,EACnC,cAAc,EACd,WAAW,EACX,SAAS,EACT,KAAK,EACL,SAAS,EACT,SAAS,GACZ,EAAE,0BAA0B,GAAG,GAAG,CAUlC;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,IAAI,GAAG,CAMnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,IAAI,GAAG,CAKlC;AA0BD,6GAA6G;AAC7G,wBAAgB,+BAA+B,IAAI,IAAI,CAGtD;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,IAAI,CAGtD;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,GAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,IAAI,CAUtG;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,4BAA4B,IAAI,OAAO,CAMtD"}
+{"version":3,"file":"domainRouting.d.ts","sourceRoot":"","sources":["../../../src/session/auth/domainRouting.ts"],"names":[],"mappings":"AAGA,OAAO,CAAC,MAAM,CAAC;IACX,UAAU,MAAM;QACZ,SAAS,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;KACtC;CACJ;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,wCAAwC,CAAC;AAE9E,wBAAgB,cAAc,IAAI,MAAM,CAGvC;AAED,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,WAEvD;AAED,wBAAgB,2BAA2B,CAAC,SAAS,CAAC,EAAE,MAAM,WAE7D;AAED,UAAU,aAAa;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,IAAI,GAAG,CAMnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,IAAI,GAAG,CAKlC;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACvC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,GAAG,EACd,KAAK,EAAE,MAAM,EACb,SAAS,GAAE,aAAkB,GAC9B,GAAG,CAUL;AA0BD,6GAA6G;AAC7G,wBAAgB,+BAA+B,IAAI,IAAI,CAGtD;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,IAAI,CAGtD;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,GAAE,aAAkB,GAAG,IAAI,CAUzE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,4BAA4B,IAAI,OAAO,CAMtD"}

package/lib/session/auth/domainRouting.js

@@ -1,24 +1,23 @@
 import { Env } from '@vertesia/ui/env';
 import { generateAuthState } from './authState';
+/**
+ * The broker this app sends users to for sign-in and logout.
+ *
+ * Hard-coded until now, which meant every consumer of this package reached the same deployment no
+ * matter what was running. It is read from the environment so a single app can be pointed at a
+ * different broker, and it keeps this default so an app that configures nothing is unaffected.
+ */
+export const DEFAULT_CENTRAL_AUTH_URL = 'https://internal-auth.vertesia.app/';
+export function centralAuthUrl() {
+    const configured = Env.endpoints.auth;
+    return configured ? configured : DEFAULT_CENTRAL_AUTH_URL;
+}
 export function shouldUseFirebaseAuth(_hostname) {
     return window.AUTH_MODE === 'firebase';
 }
 export function shouldRedirectToCentralAuth(_hostname) {
     return !shouldUseFirebaseAuth();
 }
-/** Build a central-auth round trip without losing the app's requested account/project selection. */
-export function centralAuthRedirectUrl({ centralAuthUrl, stsEndpoint, returnUrl, state, accountId, projectId, }) {
-    const selectedReturnUrl = new URL(returnUrl);
-    if (projectId)
-        selectedReturnUrl.searchParams.set('p', projectId);
-    if (accountId)
-        selectedReturnUrl.searchParams.set('a', accountId);
-    const url = new URL(centralAuthUrl);
-    url.searchParams.set('sts', stsEndpoint);
-    url.searchParams.set('redirect_uri', selectedReturnUrl.toString());
-    url.searchParams.set('state', state);
-    return url;
-}
 /**
  * The page URL to return to after a central-auth round-trip (`redirect_uri`).
  *
@@ -55,6 +54,27 @@ export function mountRootUrl() {
     url.search = '';
     return url;
 }
+/**
+ * The broker URL a sign-in or renewal round-trip navigates to.
+ *
+ * Every parameter goes on through `searchParams`, never by concatenating a query string onto
+ * `centralAuth`. The endpoint is configurable, so it may already carry its own query or a
+ * fragment -- and appending `?sts=...` to one of those folds the parameter into the existing value
+ * or hides it in the fragment, leaving Central Auth with no `sts` at all. `searchParams` also
+ * percent-encodes the values, which the interpolated URLs did not.
+ */
+export function buildCentralAuthRedirectUrl(centralAuth, stsUrl, returnUrl, state, selection = {}) {
+    const selectedReturnUrl = new URL(returnUrl);
+    if (selection.projectId)
+        selectedReturnUrl.searchParams.set('p', selection.projectId);
+    if (selection.accountId)
+        selectedReturnUrl.searchParams.set('a', selection.accountId);
+    const url = new URL(centralAuth);
+    url.searchParams.set('sts', stsUrl);
+    url.searchParams.set('redirect_uri', selectedReturnUrl.toString());
+    url.searchParams.set('state', state);
+    return url;
+}
 /**
  * A short-lived marker saying "a Central Auth round-trip is in flight for this browser".
  *
@@ -98,13 +118,7 @@ export function clearCentralAuthRoundTripMarker() {
  * into producing different `redirect_uri` / `state` / `sts` values for the same page load.
  */
 export function redirectToCentralAuth(selection = {}) {
-    const url = centralAuthRedirectUrl({
-        centralAuthUrl: 'https://internal-auth.vertesia.app/',
-        stsEndpoint: Env.endpoints.sts ?? 'https://sts.vertesia.io',
-        returnUrl: authReturnUrl(),
-        state: generateAuthState(),
-        ...selection,
-    });
+    const url = buildCentralAuthRedirectUrl(centralAuthUrl(), Env.endpoints.sts ?? 'https://sts.vertesia.io', authReturnUrl(), generateAuthState(), selection);
     markCentralAuthRoundTripStarted();
     location.replace(url.toString());
 }
@@ -117,7 +131,7 @@ export function redirectToCentralAuth(selection = {}) {
  * that provider from redirecting is therefore knowable up front, and this predicate enumerates
  * them in the same order:
  *
- *   - Apps configured with Firebase auth sign in in place rather than at the broker;
+ *   - Firebase-allowlisted hosts sign in in place rather than at the broker;
  *   - a host app that injects a token through `Env.authTokenProvider` may not need the broker
  *     (and when its token turns out to be empty the provider still redirects — answering `false`
  *     here just lets the normal flow decide, which is the safe direction);

package/lib/session/auth/domainRouting.js.map

@@ -1 +1 @@
-{"version":3,"file":"domainRouting.js","sourceRoot":"","sources":["../../../src/session/auth/domainRouting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAQhD,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACpD,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,SAAkB;IAC1D,OAAO,CAAC,qBAAqB,EAAE,CAAC;AACpC,CAAC;AAWD,oGAAoG;AACpG,MAAM,UAAU,sBAAsB,CAAC,EACnC,cAAc,EACd,WAAW,EACX,SAAS,EACT,KAAK,EACL,SAAS,EACT,SAAS,GACgB;IACzB,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,SAAS;QAAE,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAClE,IAAI,SAAS;QAAE,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAElE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC;IACpC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACzC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY;IACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,sBAAsB,GAAG,SAAS,CAAC;AACzC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAExC,SAAS,mBAAmB,CAAC,KAAa,EAAE,aAAqB;IAC7D,yFAAyF;IACzF,6EAA6E;IAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,OAAO,GAAG,sBAAsB,IAAI,KAAK,qBAAqB,aAAa,iBAAiB,MAAM,EAAE,CAAC;AACzG,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,+BAA+B;IAC3C,gHAAgH;IAChH,QAAQ,CAAC,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B;IAC3C,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,GAAG,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAS,GAA+C,EAAE;IAC5F,MAAM,GAAG,GAAG,sBAAsB,CAAC;QAC/B,cAAc,EAAE,qCAAqC;QACrD,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,yBAAyB;QAC3D,SAAS,EAAE,aAAa,EAAE;QAC1B,KAAK,EAAE,iBAAiB,EAAE;QAC1B,GAAG,SAAS;KACf,CAAC,CAAC;IACH,+BAA+B,EAAE,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,4BAA4B;IACxC,IAAI,CAAC,2BAA2B,EAAE;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,GAAG,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC"}
+{"version":3,"file":"domainRouting.js","sourceRoot":"","sources":["../../../src/session/auth/domainRouting.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAQhD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,qCAAqC,CAAC;AAE9E,MAAM,UAAU,cAAc;IAC1B,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC;IACtC,OAAO,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,wBAAwB,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAkB;IACpD,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,SAAkB;IAC1D,OAAO,CAAC,qBAAqB,EAAE,CAAC;AACpC,CAAC;AAOD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3E,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC;IACjB,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY;IACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACtC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACvC,WAAmB,EACnB,MAAc,EACd,SAAc,EACd,KAAa,EACb,SAAS,GAAkB,EAAE;IAE7B,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,SAAS;QAAE,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IACtF,IAAI,SAAS,CAAC,SAAS;QAAE,iBAAiB,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;IAEtF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACjC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,iBAAiB,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,sBAAsB,GAAG,SAAS,CAAC;AACzC,MAAM,2BAA2B,GAAG,GAAG,CAAC;AAExC,SAAS,mBAAmB,CAAC,KAAa,EAAE,aAAqB;IAC7D,yFAAyF;IACzF,6EAA6E;IAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IACvE,OAAO,GAAG,sBAAsB,IAAI,KAAK,qBAAqB,aAAa,iBAAiB,MAAM,EAAE,CAAC;AACzG,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,+BAA+B;IAC3C,gHAAgH;IAChH,QAAQ,CAAC,MAAM,GAAG,mBAAmB,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B;IAC3C,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,GAAG,mBAAmB,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACjD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAS,GAAkB,EAAE;IAC/D,MAAM,GAAG,GAAG,2BAA2B,CACnC,cAAc,EAAE,EAChB,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,yBAAyB,EAC9C,aAAa,EAAE,EACf,iBAAiB,EAAE,EACnB,SAAS,CACZ,CAAC;IACF,+BAA+B,EAAE,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,4BAA4B;IACxC,IAAI,CAAC,2BAA2B,EAAE;QAAE,OAAO,KAAK,CAAC;IACjD,IAAI,GAAG,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/lib/session/auth/firebase.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"firebase.d.ts","sourceRoot":"","sources":["../../../src/session/auth/firebase.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,OAAO,EAAE,KAAK,SAAS,EAAgB,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,KAAK,WAAW,EAAiB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,KAAK,IAAI,EAAW,MAAM,eAAe,CAAC;AAQnD,wBAAgB,cAAc,IAAI,WAAW,CAe5C;AAED,wBAAgB,oBAAoB,IAAI,SAAS,CAKhD;AAED,wBAAgB,eAAe,IAAI,IAAI,CAKtC;AAED,wBAAsB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,yCAyF3D;AAED,wBAAsB,oBAAoB,CAAC,OAAO,CAAC,EAAE,OAAO,0BAkC3D"}
+{"version":3,"file":"firebase.d.ts","sourceRoot":"","sources":["../../../src/session/auth/firebase.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,OAAO,EAAE,KAAK,SAAS,EAAgB,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,KAAK,WAAW,EAAiB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,KAAK,IAAI,EAAW,MAAM,eAAe,CAAC;AAQnD,wBAAgB,cAAc,IAAI,WAAW,CAe5C;AAED,wBAAgB,oBAAoB,IAAI,SAAS,CAKhD;AAED,wBAAgB,eAAe,IAAI,IAAI,CAMtC;AAED,wBAAsB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,yCAkG3D;AAED,wBAAsB,oBAAoB,CAAC,OAAO,CAAC,EAAE,OAAO,0BAkC3D"}

package/lib/session/auth/firebase.js

@@ -33,10 +33,20 @@ export function getFirebaseAnalytics() {
 export function getFirebaseAuth() {
     if (!_firebaseAuth) {
         _firebaseAuth = getAuth(getFirebaseApp());
+        _firebaseAuth.tenantId = Env.firebase?.tenantId ?? null;
     }
     return _firebaseAuth;
 }
 export async function setFirebaseTenant(tenantEmail) {
+    if (Env.firebase?.tenantId) {
+        getFirebaseAuth().tenantId = Env.firebase.tenantId;
+        return {
+            firebaseTenantId: Env.firebase.tenantId,
+            provider: Env.firebase.providerType ?? 'oidc',
+            name: '',
+            label: '',
+        };
+    }
     if (!tenantEmail) {
         console.log('No tenant name or email specified, skipping tenant setup');
         return;

package/lib/session/auth/firebase.js.map

@@ -1 +1 @@
-{"version":3,"file":"firebase.js","sourceRoot":"","sources":["../../../src/session/auth/firebase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAkB,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAoB,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAa,OAAO,EAAE,MAAM,eAAe,CAAC;AAEnD,yEAAyE;AACzE,IAAI,YAAY,GAAuB,IAAI,CAAC;AAC5C,IAAI,UAAU,GAAqB,IAAI,CAAC;AACxC,IAAI,aAAa,GAAgB,IAAI,CAAC;AAEtC,yEAAyE;AACzE,MAAM,UAAU,cAAc;IAC1B,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,IAAI,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAClF,CAAC;YACD,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,8EAA8E,EAAE;gBAC5F,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAChC,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,UAAU,GAAG,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe;IAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACjB,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,aAAa,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAoB;IACxD,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO;IACX,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO;IACX,CAAC;IAED,IAAI,CAAC;QACD,IAAI,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;QAE/E,2CAA2C;QAC3C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC,yBAAyB;QAE/C,OAAO,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC;gBACD,iDAAiD;gBACjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE;oBAChD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACL,cAAc,EAAE,kBAAkB;qBACrC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,WAAW,EAAE,WAAW;qBAC3B,CAAC;oBACF,0CAA0C;oBAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBACpC,CAAC,CAAC;gBAEH,2BAA2B;gBAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC5D,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACf,kCAAkC;oBAClC,IAAI,CAAC;wBACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACxC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;oBACnE,CAAC;oBAAC,MAAM,CAAC;wBACL,OAAO,CAAC,KAAK,CAAC,qCAAqC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC1E,CAAC;oBAED,kDAAkD;oBAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAC1B,OAAO,CAAC,IAAI,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;wBACpD,OAAO;oBACX,CAAC;oBAED,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrD,CAAC;gBAED,wCAAwC;gBACxC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;gBAEzD,IAAI,IAAI,EAAE,gBAAgB,EAAE,CAAC;oBACzB,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;oBAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC;oBACtC,GAAG,CAAC,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;oBACpD,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACjD,OAAO,IAAI,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,KAAK,CAAC,iDAAiD,WAAW,EAAE,CAAC,CAAC;oBAC9E,OAAO,CAAC,+CAA+C;gBAC3D,CAAC;YACL,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBAClB,wCAAwC;gBACxC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC,yCAAyC,UAAU,OAAO,EAAE,UAAU,CAAC,CAAC;oBACrF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;oBAChE,UAAU,IAAI,CAAC,CAAC,CAAC,sBAAsB;oBACvC,OAAO,EAAE,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACJ,MAAM,UAAU,CAAC,CAAC,qCAAqC;gBAC3D,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,sBAAsB;QACtB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAE1G,8EAA8E;QAC9E,8CAA8C;IAClD,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAiB;IACxD,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;IAC9B,IAAI,IAAI,EAAE,CAAC;QACP,OAAO,IAAI;aACN,UAAU,CAAC,OAAO,CAAC;aACnB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACZ,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBACnC,QAAQ,EAAE;oBACN,UAAU,EAAE,IAAI,CAAC,KAAK;oBACtB,SAAS,EAAE,IAAI,CAAC,WAAW;oBAC3B,OAAO,EAAE,IAAI,CAAC,GAAG;oBACjB,OAAO,EAAE,OAAO;iBACnB;aACJ,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC7C,QAAQ,EAAE;oBACN,UAAU,EAAE,IAAI,CAAC,KAAK;oBACtB,SAAS,EAAE,IAAI,CAAC,WAAW;oBAC3B,OAAO,EAAE,IAAI,CAAC,GAAG;oBACjB,OAAO,EAAE,OAAO;oBAChB,KAAK,EAAE,GAAG;iBACb;aACJ,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC,CAAC;IACX,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;AACL,CAAC"}
+{"version":3,"file":"firebase.js","sourceRoot":"","sources":["../../../src/session/auth/firebase.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAkB,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAoB,aAAa,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAa,OAAO,EAAE,MAAM,eAAe,CAAC;AAEnD,yEAAyE;AACzE,IAAI,YAAY,GAAuB,IAAI,CAAC;AAC5C,IAAI,UAAU,GAAqB,IAAI,CAAC;AACxC,IAAI,aAAa,GAAgB,IAAI,CAAC;AAEtC,yEAAyE;AACzE,MAAM,UAAU,cAAc;IAC1B,IAAI,CAAC,YAAY,EAAE,CAAC;QAChB,IAAI,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAClF,CAAC;YACD,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,8EAA8E,EAAE;gBAC5F,KAAK,EAAE,KAAK;aACf,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,YAAY,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,oBAAoB;IAChC,IAAI,CAAC,UAAU,EAAE,CAAC;QACd,UAAU,GAAG,YAAY,CAAC,cAAc,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,UAAU,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,eAAe;IAC3B,IAAI,CAAC,aAAa,EAAE,CAAC;QACjB,aAAa,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QAC1C,aAAa,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,QAAQ,IAAI,IAAI,CAAC;IAC5D,CAAC;IACD,OAAO,aAAa,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,WAAoB;IACxD,IAAI,GAAG,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACzB,eAAe,EAAE,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACnD,OAAO;YACH,gBAAgB,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ;YACvC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,MAAM;YAC7C,IAAI,EAAE,EAAE;YACR,KAAK,EAAE,EAAE;SACZ,CAAC;IACN,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QACxE,OAAO;IACX,CAAC;IAED,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAChB,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;QAC1E,OAAO;IACX,CAAC;IAED,IAAI,CAAC;QACD,IAAI,WAAW;YAAE,OAAO,CAAC,GAAG,CAAC,mCAAmC,WAAW,EAAE,CAAC,CAAC;QAE/E,2CAA2C;QAC3C,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,IAAI,UAAU,GAAG,GAAG,CAAC,CAAC,yBAAyB;QAE/C,OAAO,OAAO,GAAG,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC;gBACD,iDAAiD;gBACjD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,qBAAqB,EAAE;oBAChD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACL,cAAc,EAAE,kBAAkB;qBACrC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACjB,WAAW,EAAE,WAAW;qBAC3B,CAAC;oBACF,0CAA0C;oBAC1C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;iBACpC,CAAC,CAAC;gBAEH,2BAA2B;gBAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACZ,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC5D,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACf,kCAAkC;oBAClC,IAAI,CAAC;wBACD,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;wBACxC,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;oBACnE,CAAC;oBAAC,MAAM,CAAC;wBACL,OAAO,CAAC,KAAK,CAAC,qCAAqC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;oBAC1E,CAAC;oBAED,kDAAkD;oBAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;wBAC1B,OAAO,CAAC,IAAI,CAAC,wBAAwB,WAAW,EAAE,CAAC,CAAC;wBACpD,OAAO;oBACX,CAAC;oBAED,MAAM,IAAI,KAAK,CAAC,cAAc,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACrD,CAAC;gBAED,wCAAwC;gBACxC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAqB,CAAC;gBAEzD,IAAI,IAAI,EAAE,gBAAgB,EAAE,CAAC;oBACzB,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;oBAC/B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC;oBACtC,GAAG,CAAC,QAAQ,CAAC,YAAY,GAAG,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC;oBACpD,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;oBACjD,OAAO,IAAI,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,KAAK,CAAC,iDAAiD,WAAW,EAAE,CAAC,CAAC;oBAC9E,OAAO,CAAC,+CAA+C;gBAC3D,CAAC;YACL,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBAClB,wCAAwC;gBACxC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;oBACd,OAAO,CAAC,IAAI,CAAC,yCAAyC,UAAU,OAAO,EAAE,UAAU,CAAC,CAAC;oBACrF,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;oBAChE,UAAU,IAAI,CAAC,CAAC,CAAC,sBAAsB;oBACvC,OAAO,EAAE,CAAC;gBACd,CAAC;qBAAM,CAAC;oBACJ,MAAM,UAAU,CAAC,CAAC,qCAAqC;gBAC3D,CAAC;YACL,CAAC;QACL,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,sBAAsB;QACtB,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAE1G,8EAA8E;QAC9E,8CAA8C;IAClD,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAAiB;IACxD,MAAM,IAAI,GAAG,eAAe,EAAE,CAAC;IAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;IAC9B,IAAI,IAAI,EAAE,CAAC;QACP,OAAO,IAAI;aACN,UAAU,CAAC,OAAO,CAAC;aACnB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;YACZ,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;gBACnC,QAAQ,EAAE;oBACN,UAAU,EAAE,IAAI,CAAC,KAAK;oBACtB,SAAS,EAAE,IAAI,CAAC,WAAW;oBAC3B,OAAO,EAAE,IAAI,CAAC,GAAG;oBACjB,OAAO,EAAE,OAAO;iBACnB;aACJ,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACX,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,8BAA8B,EAAE;gBAC7C,QAAQ,EAAE;oBACN,UAAU,EAAE,IAAI,CAAC,KAAK;oBACtB,SAAS,EAAE,IAAI,CAAC,WAAW;oBAC3B,OAAO,EAAE,IAAI,CAAC,GAAG;oBACjB,OAAO,EAAE,OAAO;oBAChB,KAAK,EAAE,GAAG;iBACb;aACJ,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,GAAG,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC,CAAC;IACX,CAAC;SAAM,CAAC;QACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACjC,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;AACL,CAAC"}

package/lib/session/auth/useAuthState.d.ts

@@ -1,7 +1,12 @@
-import { clearAuthState, generateAuthState, verifyAuthState } from './authState';
+/**
+ * This hook is used to generate and verify state for OAuth2 authorization requests.
+ *
+ * The implementation lives in ./authState so the token layer can start the same round-trip when it
+ * renews an expired Central Auth session, where no component is available to call a hook.
+ */
 export declare function useAuthState(): {
-    generateState: typeof generateAuthState;
-    verifyState: typeof verifyAuthState;
-    clearState: typeof clearAuthState;
+    generateState: () => string;
+    verifyState: (returnedState: string | null) => string | undefined;
+    clearState: () => void;
 };
 //# sourceMappingURL=useAuthState.d.ts.map

package/lib/session/auth/useAuthState.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useAuthState.d.ts","sourceRoot":"","sources":["../../../src/session/auth/useAuthState.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEjF,wBAAgB,YAAY;;;;EAK3B"}
+{"version":3,"file":"useAuthState.d.ts","sourceRoot":"","sources":["../../../src/session/auth/useAuthState.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAKH,wBAAgB,YAAY;;iCAEwB,MAAM,GAAG,IAAI;;EAIhE"}

package/lib/session/auth/useAuthState.js

@@ -1,10 +1,15 @@
-/** React wrappers for the state record shared with boot-time Central Auth redirects. */
+/**
+ * This hook is used to generate and verify state for OAuth2 authorization requests.
+ *
+ * The implementation lives in ./authState so the token layer can start the same round-trip when it
+ * renews an expired Central Auth session, where no component is available to call a hook.
+ */
 import { useCallback } from 'react';
 import { clearAuthState, generateAuthState, verifyAuthState } from './authState';
 export function useAuthState() {
-    const generateState = useCallback(generateAuthState, []);
-    const verifyState = useCallback(verifyAuthState, []);
-    const clearState = useCallback(clearAuthState, []);
+    const generateState = useCallback(() => generateAuthState(), []);
+    const verifyState = useCallback((returnedState) => verifyAuthState(returnedState), []);
+    const clearState = useCallback(() => clearAuthState(), []);
     return { generateState, verifyState, clearState };
 }
 //# sourceMappingURL=useAuthState.js.map

package/lib/session/auth/useAuthState.js.map

@@ -1 +1 @@
-{"version":3,"file":"useAuthState.js","sourceRoot":"","sources":["../../../src/session/auth/useAuthState.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEjF,MAAM,UAAU,YAAY;IACxB,MAAM,aAAa,GAAG,WAAW,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,WAAW,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,WAAW,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;IACnD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC"}
+{"version":3,"file":"useAuthState.js","sourceRoot":"","sources":["../../../src/session/auth/useAuthState.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,OAAO,CAAC;AACpC,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEjF,MAAM,UAAU,YAAY;IACxB,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,iBAAiB,EAAE,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,aAA4B,EAAE,EAAE,CAAC,eAAe,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC;IACtG,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;IAE3D,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;AACtD,CAAC"}

package/lib/session/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAElC,OAAO,EACH,+BAA+B,EAC/B,4BAA4B,EAC5B,qBAAqB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAIlC,OAAO,EACH,+BAA+B,EAC/B,4BAA4B,EAC5B,qBAAqB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC"}

package/lib/session/index.js

@@ -1,5 +1,7 @@
 export * from './auth/composable';
-// Publish the boot-time auth entry points.
+// Explicit, not `export *`: domainRouting also holds buildCentralAuthRedirectUrl, which
+// UserSessionProvider already re-exports below, and two star exports of one name resolve to
+// nothing. Only the boot-time entry points an app needs are published here.
 export { clearCentralAuthRoundTripMarker, isCentralAuthRedirectPending, redirectToCentralAuth, } from './auth/domainRouting';
 export * from './auth/firebase';
 export * from './auth/useAuthState';

package/lib/session/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,2CAA2C;AAC3C,OAAO,EACH,+BAA+B,EAC/B,4BAA4B,EAC5B,qBAAqB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/session/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,wFAAwF;AACxF,4FAA4F;AAC5F,4EAA4E;AAC5E,OAAO,EACH,+BAA+B,EAC/B,4BAA4B,EAC5B,qBAAqB,GACxB,MAAM,sBAAsB,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,iBAAiB,CAAC"}

package/lib/shell/AuthScreenPreview.d.ts

@@ -0,0 +1,12 @@
+import type { AppBranding } from '../boot/branding.js';
+import type { AuthScreens } from './VertesiaShell';
+export declare const AUTH_PREVIEW_SCREENS: readonly ['email', 'providers', 'tenant', 'returning', 'pending', 'blocked', 'signup', 'restricted', 'scope-project', 'scope-account', 'no-account', 'credentials', 'service', 'auth-error', 'loading', 'permissions', 'permission-retry', 'permission-error', 'permission-denied', 'permission-session-expired', 'boot'];
+export type AuthPreviewScreen = (typeof AUTH_PREVIEW_SCREENS)[number];
+export declare function AuthScreenPreview({ screen, branding, screens, }: {
+    screen: string;
+    branding: AppBranding;
+    screens?: AuthScreens;
+}): import("react").JSX.Element;
+/** Hosts call this only from their import.meta.env.DEV branch, before mounting auth/session providers. */
+export declare function mountAuthScreenPreview(container: HTMLElement, screen: string, branding?: AppBranding, screens?: AuthScreens): Promise<void>;
+//# sourceMappingURL=AuthScreenPreview.d.ts.map

package/lib/shell/AuthScreenPreview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AuthScreenPreview.d.ts","sourceRoot":"","sources":["../../src/shell/AuthScreenPreview.tsx"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAavD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAEnD,eAAO,MAAM,oBAAoB,YAC7B,OAAO,EACP,WAAW,EACX,QAAQ,EACR,WAAW,EACX,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,eAAe,EACf,eAAe,EACf,YAAY,EACZ,aAAa,EACb,SAAS,EACT,YAAY,EACZ,SAAS,EACT,aAAa,EACb,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACnB,4BAA4B,EAC5B,MAAM,CACA,CAAC;AACX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAatE,wBAAgB,iBAAiB,CAAC,EAC9B,MAAM,EACN,QAAQ,EACR,OAAY,GACf,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,WAAW,CAAC;IACtB,OAAO,CAAC,EAAE,WAAW,CAAC;CACzB,+BAqJA;AAED,0GAA0G;AAC1G,wBAAsB,sBAAsB,CACxC,SAAS,EAAE,WAAW,EACtB,MAAM,EAAE,MAAM,EACd,QAAQ,GAAE,WAIT,EACD,OAAO,GAAE,WAAgB,GAC1B,OAAO,CAAC,IAAI,CAAC,CAIf"}