authula 0.2.0

package/dist/plugins/index.cjs

@@ -0,0 +1,388 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
+const require_fetch = require('../fetch-q98rEoAp.cjs');
+let zod = require("zod");
+let cookie = require("cookie");
+
+//#region src/plugins/admin/plugin.ts
+var AdminPlugin = class {
+	id = "admin";
+	constructor() {}
+	init(client) {
+		return {
+			createUser: async (data) => {
+				return require_fetch.wrappedFetch(client, "/admin/users", {
+					method: "POST",
+					body: data
+				});
+			},
+			getAllUsers: async (limit) => {
+				const urlSearchParams = new URLSearchParams();
+				if (limit) urlSearchParams.append("limit", limit.toString());
+				return require_fetch.wrappedFetch(client, `/admin/users${urlSearchParams.toString() ? `?${urlSearchParams.toString()}` : ""}`, { method: "GET" });
+			},
+			getUserById: async (userId) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}`, { method: "GET" });
+			},
+			updateUser: async (userId, data) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}`, {
+					method: "PATCH",
+					body: data
+				});
+			},
+			deleteUser: async (userId) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}`, { method: "DELETE" });
+			},
+			createAccount: async (userId, data) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}/accounts`, {
+					method: "POST",
+					body: data
+				});
+			},
+			getUserAccounts: async (userId) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}/accounts`, { method: "GET" });
+			},
+			getAccountById: async (id) => {
+				return require_fetch.wrappedFetch(client, `/admin/accounts/${id}`, { method: "GET" });
+			},
+			updateAccount: async (id, data) => {
+				return require_fetch.wrappedFetch(client, `/admin/accounts/${id}`, {
+					method: "PATCH",
+					body: data
+				});
+			},
+			deleteAccount: async (id) => {
+				return require_fetch.wrappedFetch(client, `/admin/accounts/${id}`, { method: "DELETE" });
+			},
+			getUserState: async (userId) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}/state`, { method: "GET" });
+			},
+			createUserState: async (userId, data) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}/state`, {
+					method: "POST",
+					body: data
+				});
+			},
+			updateUserState: async (userId, data) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}/state`, {
+					method: "PATCH",
+					body: data
+				});
+			},
+			deleteUserState: async (userId) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}/state`, { method: "DELETE" });
+			},
+			getBannedUserStates: async () => {
+				return require_fetch.wrappedFetch(client, `/admin/users/states/banned`, { method: "GET" });
+			},
+			banUser: async (userId, data) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}/ban`, {
+					method: "POST",
+					body: data
+				});
+			},
+			unbanUser: async (userId) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}/unban`, { method: "POST" });
+			},
+			getUserAdminSessions: async (userId) => {
+				return require_fetch.wrappedFetch(client, `/admin/users/${userId}/sessions`, { method: "GET" });
+			},
+			getSessionState: async (sessionId) => {
+				return require_fetch.wrappedFetch(client, `/admin/sessions/${sessionId}/state`, { method: "GET" });
+			},
+			createSessionState: async (sessionId, data) => {
+				return require_fetch.wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {
+					method: "POST",
+					body: data
+				});
+			},
+			updateSessionState: async (sessionId, data) => {
+				return require_fetch.wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {
+					method: "PATCH",
+					body: data
+				});
+			},
+			deleteSessionState: async (sessionId) => {
+				return require_fetch.wrappedFetch(client, `/admin/sessions/${sessionId}/state`, { method: "DELETE" });
+			},
+			getRevokedSessionStates: async () => {
+				return require_fetch.wrappedFetch(client, `/admin/sessions/states/revoked`, { method: "GET" });
+			},
+			revokeSession: async (sessionId, data) => {
+				return require_fetch.wrappedFetch(client, `/admin/sessions/${sessionId}/revoke`, {
+					method: "POST",
+					body: data
+				});
+			},
+			getAllImpersonations: async () => {
+				return require_fetch.wrappedFetch(client, "/admin/impersonations", { method: "GET" });
+			},
+			getImpersonationById: async (impersonationId) => {
+				return require_fetch.wrappedFetch(client, `/admin/impersonations/${impersonationId}`, { method: "GET" });
+			},
+			startImpersonation: async (data) => {
+				return require_fetch.wrappedFetch(client, "/admin/impersonations", {
+					method: "POST",
+					body: data
+				});
+			},
+			stopImpersonation: async (impersonationId) => {
+				return require_fetch.wrappedFetch(client, `/admin/impersonations/${impersonationId}/stop`, { method: "POST" });
+			}
+		};
+	}
+};
+
+//#endregion
+//#region src/plugins/admin/types.ts
+const adminUserStateSchema = zod.z.object({
+	userId: zod.z.string().nonempty(),
+	isBanned: zod.z.boolean(),
+	bannedAt: zod.z.iso.datetime().nullable(),
+	bannedUntil: zod.z.iso.datetime().nullable(),
+	bannedReason: zod.z.string().nullable(),
+	bannedByUserId: zod.z.string().nullable(),
+	createdAt: zod.z.iso.datetime(),
+	updatedAt: zod.z.iso.datetime()
+});
+const adminSessionStateSchema = zod.z.object({
+	sessionId: zod.z.string().nonempty(),
+	revokedAt: zod.z.iso.datetime().nullable(),
+	revokedReason: zod.z.string().nullable(),
+	revokedByUserId: zod.z.string().nullable(),
+	impersonatorUserId: zod.z.string().nullable(),
+	impersonationReason: zod.z.string().nullable(),
+	impersonationExpiresAt: zod.z.iso.datetime().nullable(),
+	createdAt: zod.z.iso.datetime(),
+	updatedAt: zod.z.iso.datetime()
+});
+const adminUserSessionSchema = zod.z.object({
+	session: require_fetch.sessionSchema,
+	state: adminSessionStateSchema.nullable()
+});
+const impersonationSchema = zod.z.object({
+	id: zod.z.string().nonempty(),
+	actorUserId: zod.z.string().nonempty(),
+	targetUserId: zod.z.string().nonempty(),
+	actorSessionId: zod.z.string().nullable(),
+	impersonationSessionId: zod.z.string().nullable(),
+	reason: zod.z.string().nonempty(),
+	startedAt: zod.z.iso.datetime(),
+	expiresAt: zod.z.iso.datetime(),
+	endedAt: zod.z.iso.datetime().nullable(),
+	endedByUserId: zod.z.string().nullable(),
+	createdAt: zod.z.iso.datetime(),
+	updatedAt: zod.z.iso.datetime()
+});
+
+//#endregion
+//#region src/plugins/bearer/plugin.ts
+var BearerPlugin = class {
+	id = "bearer";
+	refreshPromise = null;
+	constructor(options) {
+		this.options = options;
+	}
+	init(client) {
+		client.registerBeforeFetch(async (ctx) => {
+			if (typeof document === "undefined") return;
+			const headerName = this.options?.headerName ?? "Authorization";
+			const token = localStorage.getItem("accessToken");
+			if (token) ctx.init.headers = {
+				...ctx.init.headers,
+				[headerName]: `Bearer ${token}`
+			};
+		});
+		client.registerAfterFetch(async (ctx, res) => {
+			if (typeof document === "undefined") return;
+			if (res.status !== 401) return;
+			if (ctx.meta.retry) return;
+			const refreshToken = localStorage.getItem("refreshToken");
+			if (!refreshToken) return;
+			if (!client.jwt) {
+				console.warn("JWT Plugin is required for Bearer token refresh.");
+				return;
+			}
+			if (!this.refreshPromise) this.refreshPromise = (async () => {
+				try {
+					const response = await client.jwt.refreshToken({ refreshToken });
+					if (!response) return null;
+					localStorage.setItem("accessToken", response.accessToken);
+					localStorage.setItem("refreshToken", response.refreshToken);
+					return response;
+				} finally {
+					this.refreshPromise = null;
+				}
+			})();
+			const refreshed = await this.refreshPromise;
+			if (!refreshed) return;
+			const headerName = this.options?.headerName ?? "Authorization";
+			ctx.init.headers = {
+				...ctx.init.headers,
+				[headerName]: `Bearer ${refreshed.accessToken}`
+			};
+			return "retry";
+		});
+		return {};
+	}
+};
+
+//#endregion
+//#region src/plugins/csrf/plugin.ts
+var CSRFPlugin = class {
+	id = "csrf";
+	constructor(options) {
+		this.options = options;
+	}
+	init(client) {
+		client.registerBeforeFetch(async (ctx) => {
+			if (typeof document !== "undefined") {
+				if ([
+					"OPTIONS",
+					"HEAD",
+					"GET"
+				].includes(ctx.init.method || "GET")) return;
+				const value = (0, cookie.parse)(document.cookie)[this.options.cookieName];
+				if (!value) return;
+				ctx.init.headers = new Headers(ctx.init.headers);
+				ctx.init.headers.set(this.options.headerName, value);
+				return;
+			}
+			if (this.cookies) {
+				if ([
+					"OPTIONS",
+					"HEAD",
+					"GET"
+				].includes(ctx.init.method || "GET")) return;
+				const cookie$1 = (await this.cookies()).get(this.options.cookieName);
+				if (!cookie$1) return;
+				ctx.init.headers = new Headers(ctx.init.headers);
+				ctx.init.headers.set(this.options.headerName, cookie$1.value);
+			}
+		});
+		return {};
+	}
+	cookies;
+	attachCookies(fn) {
+		this.cookies = fn;
+	}
+};
+
+//#endregion
+//#region src/plugins/email-password/plugin.ts
+var EmailPasswordPlugin = class {
+	id = "emailPassword";
+	init(client) {
+		return {
+			signUp: async (data) => {
+				return require_fetch.wrappedFetch(client, "/sign-up", {
+					method: "POST",
+					body: data
+				});
+			},
+			signIn: async (data) => {
+				return require_fetch.wrappedFetch(client, "/sign-in", {
+					method: "POST",
+					body: data
+				});
+			},
+			sendEmailVerification: async (data) => {
+				return require_fetch.wrappedFetch(client, `/send-email-verification`, {
+					method: "POST",
+					body: data
+				});
+			},
+			requestPasswordReset: async (data) => {
+				return require_fetch.wrappedFetch(client, `/request-password-reset`, {
+					method: "POST",
+					body: data
+				});
+			},
+			changePassword: async (data) => {
+				return require_fetch.wrappedFetch(client, `/change-password`, {
+					method: "POST",
+					body: data
+				});
+			},
+			requestEmailChange: async (data) => {
+				return require_fetch.wrappedFetch(client, `/request-email-change`, {
+					method: "POST",
+					body: data
+				});
+			}
+		};
+	}
+};
+
+//#endregion
+//#region src/plugins/jwt/plugin.ts
+var JWTPlugin = class {
+	id = "jwt";
+	constructor() {}
+	init(client) {
+		return {
+			refreshToken: async (data) => {
+				return require_fetch.wrappedFetch(client, "/token/refresh", {
+					method: "POST",
+					body: data
+				});
+			},
+			getJWKSKeys: async () => {
+				return require_fetch.wrappedFetch(client, "/.well-known/jwks.json", { method: "GET" });
+			}
+		};
+	}
+};
+
+//#endregion
+//#region src/plugins/magic-link/plugin.ts
+var MagicLinkPlugin = class {
+	id = "magicLink";
+	constructor() {}
+	init(client) {
+		return {
+			signIn: async (data) => {
+				return require_fetch.wrappedFetch(client, "/magic-link/sign-in", {
+					method: "POST",
+					body: data
+				});
+			},
+			verify: async (data) => {
+				const searchParams = new URLSearchParams();
+				searchParams.append("token", data.token);
+				if (data.callbackUrl) searchParams.append("callback_url", data.callbackUrl);
+				return require_fetch.wrappedFetch(client, `/magic-link/verify?${searchParams.toString()}`, { method: "GET" });
+			},
+			exchange: async (data) => {
+				return require_fetch.wrappedFetch(client, "/magic-link/exchange", {
+					method: "POST",
+					body: data
+				});
+			}
+		};
+	}
+};
+
+//#endregion
+//#region src/plugins/oauth2/plugin.ts
+var OAuth2Plugin = class {
+	id = "oauth2";
+	init(client) {
+		return { signIn: async (data) => {
+			return require_fetch.wrappedFetch(client, `/oauth2/authorize/${data.provider}?redirect_to=${data.redirectTo}`, { method: "GET" });
+		} };
+	}
+};
+
+//#endregion
+exports.AdminPlugin = AdminPlugin;
+exports.BearerPlugin = BearerPlugin;
+exports.CSRFPlugin = CSRFPlugin;
+exports.EmailPasswordPlugin = EmailPasswordPlugin;
+exports.JWTPlugin = JWTPlugin;
+exports.MagicLinkPlugin = MagicLinkPlugin;
+exports.OAuth2Plugin = OAuth2Plugin;
+exports.adminSessionStateSchema = adminSessionStateSchema;
+exports.adminUserSessionSchema = adminUserSessionSchema;
+exports.adminUserStateSchema = adminUserStateSchema;
+exports.impersonationSchema = impersonationSchema;
+//# sourceMappingURL=index.cjs.map

package/dist/plugins/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["wrappedFetch","z","sessionSchema","cookie","wrappedFetch","wrappedFetch","wrappedFetch","wrappedFetch"],"sources":["../../src/plugins/admin/plugin.ts","../../src/plugins/admin/types.ts","../../src/plugins/bearer/plugin.ts","../../src/plugins/csrf/plugin.ts","../../src/plugins/email-password/plugin.ts","../../src/plugins/jwt/plugin.ts","../../src/plugins/magic-link/plugin.ts","../../src/plugins/oauth2/plugin.ts"],"sourcesContent":["import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  BanUserRequest,\n  BanUserResponse,\n  CreateUserRequest,\n  CreateUserResponse,\n  DeleteSessionStateResponse,\n  DeleteUserStateResponse,\n  StopImpersonationResponse,\n  GetAllImpersonationsResponse,\n  GetAllUsersResponse,\n  GetBannedUserStatesResponse,\n  GetImpersonationByIdResponse,\n  GetRevokedSessionStatesResponse,\n  GetSessionStateResponse,\n  GetUserAdminSessionsResponse,\n  GetUserByIdResponse,\n  GetUserStateResponse,\n  RevokeSessionRequest,\n  RevokeSessionResponse,\n  StartImpersonationRequest,\n  StartImpersonationResponse,\n  UnbanUserResponse,\n  UpdateUserRequest,\n  UpdateUserResponse,\n  DeleteUserResponse,\n  CreateAccountRequest,\n  CreateAccountResponse,\n  GetUserAccountsResponse,\n  GetAccountByIdResponse,\n  UpdateAccountRequest,\n  UpdateAccountResponse,\n  DeleteAccountResponse,\n  CreateUserStateRequest,\n  CreateUserStateResponse,\n  UpdateUserStateRequest,\n  UpdateUserStateResponse,\n  CreateSessionStateRequest,\n  CreateSessionStateResponse,\n  UpdateSessionStateRequest,\n  UpdateSessionStateResponse,\n} from \"./types\";\n\nexport class AdminPlugin implements Plugin {\n  public readonly id = \"admin\";\n\n  constructor() {}\n\n  public init(client: AuthulaClient) {\n    return {\n      // User management\n\n      createUser: async (\n        data: CreateUserRequest,\n      ): Promise<CreateUserResponse> => {\n        return wrappedFetch(client, \"/admin/users\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getAllUsers: async (limit?: number): Promise<GetAllUsersResponse> => {\n        const urlSearchParams = new URLSearchParams();\n        if (limit) {\n          urlSearchParams.append(\"limit\", limit.toString());\n        }\n        const params = urlSearchParams.toString()\n          ? `?${urlSearchParams.toString()}`\n          : \"\";\n        return wrappedFetch(client, `/admin/users${params}`, {\n          method: \"GET\",\n        });\n      },\n      getUserById: async (userId: string): Promise<GetUserByIdResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}`, {\n          method: \"GET\",\n        });\n      },\n      updateUser: async (\n        userId: string,\n        data: UpdateUserRequest,\n      ): Promise<UpdateUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteUser: async (userId: string): Promise<DeleteUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}`, {\n          method: \"DELETE\",\n        });\n      },\n\n      // Account management\n\n      createAccount: async (\n        userId: string,\n        data: CreateAccountRequest,\n      ): Promise<CreateAccountResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/accounts`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getUserAccounts: async (\n        userId: string,\n      ): Promise<GetUserAccountsResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/accounts`, {\n          method: \"GET\",\n        });\n      },\n      getAccountById: async (id: string): Promise<GetAccountByIdResponse> => {\n        return wrappedFetch(client, `/admin/accounts/${id}`, {\n          method: \"GET\",\n        });\n      },\n      updateAccount: async (\n        id: string,\n        data: UpdateAccountRequest,\n      ): Promise<UpdateAccountResponse> => {\n        return wrappedFetch(client, `/admin/accounts/${id}`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteAccount: async (id: string): Promise<DeleteAccountResponse> => {\n        return wrappedFetch(client, `/admin/accounts/${id}`, {\n          method: \"DELETE\",\n        });\n      },\n\n      // User state management\n\n      getUserState: async (userId: string): Promise<GetUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"GET\",\n        });\n      },\n      createUserState: async (\n        userId: string,\n        data: CreateUserStateRequest,\n      ): Promise<CreateUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      updateUserState: async (\n        userId: string,\n        data: UpdateUserStateRequest,\n      ): Promise<UpdateUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteUserState: async (\n        userId: string,\n      ): Promise<DeleteUserStateResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/state`, {\n          method: \"DELETE\",\n        });\n      },\n      getBannedUserStates: async (): Promise<GetBannedUserStatesResponse> => {\n        return wrappedFetch(client, `/admin/users/states/banned`, {\n          method: \"GET\",\n        });\n      },\n      banUser: async (\n        userId: string,\n        data: BanUserRequest,\n      ): Promise<BanUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/ban`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      unbanUser: async (userId: string): Promise<UnbanUserResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/unban`, {\n          method: \"POST\",\n        });\n      },\n      getUserAdminSessions: async (\n        userId: string,\n      ): Promise<GetUserAdminSessionsResponse> => {\n        return wrappedFetch(client, `/admin/users/${userId}/sessions`, {\n          method: \"GET\",\n        });\n      },\n\n      // Session state management\n\n      getSessionState: async (\n        sessionId: string,\n      ): Promise<GetSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"GET\",\n        });\n      },\n      createSessionState: async (\n        sessionId: string,\n        data: CreateSessionStateRequest,\n      ): Promise<CreateSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      updateSessionState: async (\n        sessionId: string,\n        data: UpdateSessionStateRequest,\n      ): Promise<UpdateSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"PATCH\",\n          body: data,\n        });\n      },\n      deleteSessionState: async (\n        sessionId: string,\n      ): Promise<DeleteSessionStateResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/state`, {\n          method: \"DELETE\",\n        });\n      },\n      getRevokedSessionStates:\n        async (): Promise<GetRevokedSessionStatesResponse> => {\n          return wrappedFetch(client, `/admin/sessions/states/revoked`, {\n            method: \"GET\",\n          });\n        },\n      revokeSession: async (\n        sessionId: string,\n        data: RevokeSessionRequest,\n      ): Promise<RevokeSessionResponse> => {\n        return wrappedFetch(client, `/admin/sessions/${sessionId}/revoke`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n\n      // Impersonations\n\n      getAllImpersonations: async (): Promise<GetAllImpersonationsResponse> => {\n        return wrappedFetch(client, \"/admin/impersonations\", {\n          method: \"GET\",\n        });\n      },\n      getImpersonationById: async (\n        impersonationId: string,\n      ): Promise<GetImpersonationByIdResponse> => {\n        return wrappedFetch(\n          client,\n          `/admin/impersonations/${impersonationId}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n      startImpersonation: async (\n        data: StartImpersonationRequest,\n      ): Promise<StartImpersonationResponse> => {\n        return wrappedFetch(client, \"/admin/impersonations\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      stopImpersonation: async (\n        impersonationId: string,\n      ): Promise<StopImpersonationResponse> => {\n        return wrappedFetch(\n          client,\n          `/admin/impersonations/${impersonationId}/stop`,\n          {\n            method: \"POST\",\n          },\n        );\n      },\n    };\n  }\n}\n","import { z } from \"zod\";\n\nimport { sessionSchema, type Account, type User } from \"@/types\";\n\n// ------------------------------\n// SCHEMAS\n// ------------------------------\n\nexport const adminUserStateSchema = z.object({\n  userId: z.string().nonempty(),\n  isBanned: z.boolean(),\n  bannedAt: z.iso.datetime().nullable(),\n  bannedUntil: z.iso.datetime().nullable(),\n  bannedReason: z.string().nullable(),\n  bannedByUserId: z.string().nullable(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type AdminUserState = z.infer<typeof adminUserStateSchema>;\n\nexport const adminSessionStateSchema = z.object({\n  sessionId: z.string().nonempty(),\n  revokedAt: z.iso.datetime().nullable(),\n  revokedReason: z.string().nullable(),\n  revokedByUserId: z.string().nullable(),\n  impersonatorUserId: z.string().nullable(),\n  impersonationReason: z.string().nullable(),\n  impersonationExpiresAt: z.iso.datetime().nullable(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type AdminSessionState = z.infer<typeof adminSessionStateSchema>;\n\nexport const adminUserSessionSchema = z.object({\n  session: sessionSchema,\n  state: adminSessionStateSchema.nullable(),\n});\nexport type AdminUserSession = z.infer<typeof adminUserSessionSchema>;\n\nexport const impersonationSchema = z.object({\n  id: z.string().nonempty(),\n  actorUserId: z.string().nonempty(),\n  targetUserId: z.string().nonempty(),\n  actorSessionId: z.string().nullable(),\n  impersonationSessionId: z.string().nullable(),\n  reason: z.string().nonempty(),\n  startedAt: z.iso.datetime(),\n  expiresAt: z.iso.datetime(),\n  endedAt: z.iso.datetime().nullable(),\n  endedByUserId: z.string().nullable(),\n  createdAt: z.iso.datetime(),\n  updatedAt: z.iso.datetime(),\n});\nexport type Impersonation = z.infer<typeof impersonationSchema>;\n\n// ------------------------------\n// API response types\n// ------------------------------\n\n// User management\n\nexport type CreateUserRequest = {\n  name: string;\n  email: string;\n  emailVerified?: boolean;\n  image?: string;\n  metadata?: Record<string, unknown>;\n};\n\nexport type CreateUserResponse = {\n  user: User;\n};\n\nexport type GetAllUsersResponse = {\n  users: Array<User>;\n  nextCursor?: string | null;\n};\n\nexport type GetUserByIdResponse = {\n  user: User;\n};\n\nexport type UpdateUserRequest = {\n  name?: string;\n  email?: string;\n  emailVerified?: boolean;\n  image?: string;\n  metadata?: Record<string, unknown>;\n};\n\nexport type UpdateUserResponse = {\n  user: User;\n};\n\nexport type DeleteUserResponse = {\n  message: string;\n};\n\n// Account management\n\nexport type CreateAccountRequest = {\n  providerId: string;\n  accountId: string;\n  accessToken?: string;\n  refreshToken?: string;\n  idToken?: string;\n  accessTokenExpiresAt?: string;\n  refreshTokenExpiresAt?: string;\n  scope?: string;\n  password?: string;\n};\n\nexport type CreateAccountResponse = {\n  account: Account;\n};\n\nexport type GetUserAccountsResponse = {\n  accounts: Array<Account>;\n};\n\nexport type GetAccountByIdResponse = {\n  account: Account;\n};\n\nexport type UpdateAccountRequest = {\n  providerId?: string;\n  accountId?: string;\n  accessToken?: string;\n  refreshToken?: string;\n  idToken?: string;\n  accessTokenExpiresAt?: string;\n  refreshTokenExpiresAt?: string;\n  scope?: string;\n  password?: string;\n};\n\nexport type UpdateAccountResponse = {\n  account: Account;\n};\n\nexport type DeleteAccountResponse = {\n  message: string;\n};\n\n// User state management\n\nexport type GetUserStateResponse = {\n  state: AdminUserState;\n};\n\nexport type CreateUserStateRequest = {\n  banned: boolean;\n  bannedUntil?: string;\n  bannedReason?: string;\n};\n\nexport type UpdateUserStateRequest = {\n  banned: boolean;\n  bannedUntil?: string;\n  bannedReason?: string;\n};\n\nexport type CreateUserStateResponse = {\n  userState: AdminUserState;\n};\n\nexport type UpdateUserStateResponse = {\n  userState: AdminUserState;\n};\n\nexport type DeleteUserStateResponse = {\n  message: string;\n};\n\nexport type GetBannedUserStatesResponse = Array<AdminUserState>;\n\nexport type BanUserRequest = {\n  bannedUntil?: string;\n  reason?: string;\n};\n\nexport type BanUserResponse = {\n  state: AdminUserState;\n};\n\nexport type UnbanUserResponse = {\n  state: AdminUserState;\n};\n\nexport type GetUserAdminSessionsResponse = Array<AdminUserSession>;\n\n// Session state management\n\nexport type GetSessionStateResponse = {\n  state: AdminSessionState;\n};\n\nexport type CreateSessionStateRequest = {\n  revoke: boolean;\n  revokedReason?: string;\n  impersonatorUserId?: string;\n  impersonationReason?: string;\n  impersonationExpiresAt?: string;\n};\n\nexport type UpdateSessionStateRequest = {\n  revoke: boolean;\n  revokedReason?: string;\n  impersonatorUserId?: string;\n  impersonationReason?: string;\n  impersonationExpiresAt?: string;\n};\n\nexport type CreateSessionStateResponse = {\n  state: AdminSessionState;\n};\n\nexport type UpdateSessionStateResponse = {\n  state: AdminSessionState;\n};\n\nexport type DeleteSessionStateResponse = {\n  message: string;\n};\n\nexport type GetRevokedSessionStatesResponse = Array<AdminSessionState>;\n\nexport type RevokeSessionRequest = {\n  reason?: string;\n};\n\nexport type RevokeSessionResponse = {\n  sessionState: AdminSessionState;\n};\n\n// Impersonation\n\nexport type GetAllImpersonationsResponse = Array<Impersonation>;\n\nexport type GetImpersonationByIdResponse = {\n  impersonation: Impersonation;\n};\n\nexport type StartImpersonationRequest = {\n  targetUserId: string;\n  reason: string;\n  expiresInSeconds?: number;\n};\n\nexport type StartImpersonationResponse = {\n  impersonation: Impersonation;\n};\n\nexport type StopImpersonationResponse = {\n  message: string;\n};\n","import type { FetchContext, Plugin } from \"@/types\";\nimport type { BearerPluginOptions } from \"./types\";\nimport type { JWTPlugin } from \"../jwt/plugin\";\nimport type { ClientWithPlugins } from \"@/sdk\";\n\nexport class BearerPlugin implements Plugin {\n  public readonly id = \"bearer\";\n  private refreshPromise: Promise<any> | null = null;\n\n  constructor(private readonly options?: BearerPluginOptions) {}\n\n  public init(client: ClientWithPlugins<[JWTPlugin]>) {\n    client.registerBeforeFetch(async (ctx: FetchContext) => {\n      if (typeof document === \"undefined\") {\n        return;\n      }\n\n      const headerName = this.options?.headerName ?? \"Authorization\";\n      const token = localStorage.getItem(\"accessToken\");\n      if (token) {\n        ctx.init.headers = {\n          ...ctx.init.headers,\n          [headerName]: `Bearer ${token}`,\n        };\n      }\n    });\n\n    client.registerAfterFetch(async (ctx: FetchContext, res: Response) => {\n      if (typeof document === \"undefined\") {\n        return;\n      }\n      if (res.status !== 401) {\n        return;\n      }\n      if (ctx.meta.retry) {\n        return;\n      }\n\n      const refreshToken = localStorage.getItem(\"refreshToken\");\n      if (!refreshToken) {\n        return;\n      }\n\n      if (!client.jwt) {\n        console.warn(\"JWT Plugin is required for Bearer token refresh.\");\n        return;\n      }\n\n      // 🔒 SINGLE FLIGHT REFRESH\n      if (!this.refreshPromise) {\n        this.refreshPromise = (async () => {\n          try {\n            const response = await client.jwt.refreshToken({\n              refreshToken: refreshToken,\n            });\n            if (!response) {\n              return null;\n            }\n\n            localStorage.setItem(\"accessToken\", response.accessToken);\n            localStorage.setItem(\"refreshToken\", response.refreshToken);\n\n            return response;\n          } finally {\n            this.refreshPromise = null;\n          }\n        })();\n      }\n\n      const refreshed = await this.refreshPromise;\n      if (!refreshed) {\n        return;\n      }\n\n      const headerName = this.options?.headerName ?? \"Authorization\";\n      ctx.init.headers = {\n        ...ctx.init.headers,\n        [headerName]: `Bearer ${refreshed.accessToken}`,\n      };\n\n      return \"retry\";\n    });\n\n    return {};\n  }\n}\n","import { parse } from \"cookie\";\n\nimport type { FetchContext, Plugin } from \"@/types\";\nimport type { CSRFPluginOptions } from \"./types\";\nimport type { AuthulaClient } from \"@/client\";\n\nexport class CSRFPlugin implements Plugin {\n  public readonly id = \"csrf\";\n\n  constructor(private readonly options: CSRFPluginOptions) {}\n\n  public init(client: AuthulaClient) {\n    client.registerBeforeFetch(async (ctx: FetchContext) => {\n      // Client-side\n      if (typeof document !== \"undefined\") {\n        if ([\"OPTIONS\", \"HEAD\", \"GET\"].includes(ctx.init.method || \"GET\")) {\n          return;\n        }\n\n        const cookies = parse(document.cookie);\n        const value = cookies[this.options.cookieName];\n\n        if (!value) return;\n\n        ctx.init.headers = new Headers(ctx.init.headers);\n        ctx.init.headers.set(this.options.headerName, value);\n        return;\n      }\n\n      // SSR\n      if (this.cookies) {\n        if ([\"OPTIONS\", \"HEAD\", \"GET\"].includes(ctx.init.method || \"GET\")) {\n          return;\n        }\n\n        const store = await this.cookies();\n        const cookie = store.get(this.options.cookieName);\n\n        if (!cookie) return;\n\n        ctx.init.headers = new Headers(ctx.init.headers);\n        ctx.init.headers.set(this.options.headerName, cookie.value);\n      }\n    });\n\n    return {};\n  }\n\n  // Injected by client\n  private cookies?: () => Promise<any>;\n  attachCookies(fn: () => Promise<any>) {\n    this.cookies = fn;\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  ChangePasswordRequest,\n  RequestEmailChangeRequest,\n  RequestPasswordResetRequest,\n  SendEmailVerificationRequest,\n  SignInRequest,\n  SignUpRequest,\n} from \"./types\";\n\nexport class EmailPasswordPlugin implements Plugin {\n  public readonly id = \"emailPassword\";\n\n  public init(client: AuthulaClient) {\n    return {\n      signUp: async <T>(data: SignUpRequest): Promise<T> => {\n        return wrappedFetch<T>(client, \"/sign-up\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      signIn: async <T>(data: SignInRequest): Promise<T> => {\n        return wrappedFetch<T>(client, \"/sign-in\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      sendEmailVerification: async (\n        data: SendEmailVerificationRequest,\n      ): Promise<void> => {\n        return wrappedFetch(client, `/send-email-verification`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      requestPasswordReset: async (\n        data: RequestPasswordResetRequest,\n      ): Promise<void> => {\n        return wrappedFetch(client, `/request-password-reset`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      changePassword: async (data: ChangePasswordRequest): Promise<void> => {\n        return wrappedFetch(client, `/change-password`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      requestEmailChange: async (\n        data: RequestEmailChangeRequest,\n      ): Promise<void> => {\n        return wrappedFetch(client, `/request-email-change`, {\n          method: \"POST\",\n          body: data,\n        });\n      },\n    };\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  JWKSKey,\n  TokenRefreshRequest,\n  TokenRefreshResponse,\n} from \"./types\";\n\nexport class JWTPlugin implements Plugin {\n  public readonly id = \"jwt\";\n\n  constructor() {}\n\n  public init(client: AuthulaClient) {\n    return {\n      refreshToken: async (\n        data: TokenRefreshRequest,\n      ): Promise<TokenRefreshResponse> => {\n        return wrappedFetch(client, \"/token/refresh\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      getJWKSKeys: async (): Promise<Array<JWKSKey>> => {\n        return wrappedFetch(client, \"/.well-known/jwks.json\", {\n          method: \"GET\",\n        });\n      },\n    };\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types\";\nimport type {\n  MagicLinkSignInRequest,\n  MagicLinkSignInResponse,\n  MagicLinkExchangeRequest,\n  MagicLinkVerifyRequest,\n  MagicLinkVerifyResponse,\n} from \"./types\";\n\nexport class MagicLinkPlugin implements Plugin {\n  public readonly id = \"magicLink\";\n\n  constructor() {}\n\n  public init(client: AuthulaClient) {\n    return {\n      signIn: async (\n        data: MagicLinkSignInRequest,\n      ): Promise<MagicLinkSignInResponse> => {\n        return wrappedFetch(client, \"/magic-link/sign-in\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n      verify: async (\n        data: MagicLinkVerifyRequest,\n      ): Promise<MagicLinkVerifyResponse> => {\n        const searchParams = new URLSearchParams();\n        searchParams.append(\"token\", data.token);\n        if (data.callbackUrl) {\n          searchParams.append(\"callback_url\", data.callbackUrl);\n        }\n        return wrappedFetch(\n          client,\n          `/magic-link/verify?${searchParams.toString()}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n      exchange: async <T>(data: MagicLinkExchangeRequest): Promise<T> => {\n        return wrappedFetch(client, \"/magic-link/exchange\", {\n          method: \"POST\",\n          body: data,\n        });\n      },\n    };\n  }\n}\n","import type { AuthulaClient } from \"@/client\";\nimport { wrappedFetch } from \"@/fetch\";\nimport type { Plugin } from \"@/types/plugins\";\nimport type {\n  SignInWithOAuth2Request,\n  SignInWithOAuth2Response,\n} from \"./types\";\n\nexport class OAuth2Plugin implements Plugin {\n  public readonly id = \"oauth2\";\n\n  public init(client: AuthulaClient) {\n    return {\n      signIn: async (\n        data: SignInWithOAuth2Request,\n      ): Promise<SignInWithOAuth2Response> => {\n        return wrappedFetch(\n          client,\n          `/oauth2/authorize/${data.provider}?redirect_to=${data.redirectTo}`,\n          {\n            method: \"GET\",\n          },\n        );\n      },\n    };\n  }\n}\n"],"mappings":";;;;;;AA6CA,IAAa,cAAb,MAA2C;CACzC,AAAgB,KAAK;CAErB,cAAc;CAEd,AAAO,KAAK,QAAuB;AACjC,SAAO;GAGL,YAAY,OACV,SACgC;AAChC,WAAOA,2BAAa,QAAQ,gBAAgB;KAC1C,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,aAAa,OAAO,UAAiD;IACnE,MAAM,kBAAkB,IAAI,iBAAiB;AAC7C,QAAI,MACF,iBAAgB,OAAO,SAAS,MAAM,UAAU,CAAC;AAKnD,WAAOA,2BAAa,QAAQ,eAHb,gBAAgB,UAAU,GACrC,IAAI,gBAAgB,UAAU,KAC9B,MACiD,EACnD,QAAQ,OACT,CAAC;;GAEJ,aAAa,OAAO,WAAiD;AACnE,WAAOA,2BAAa,QAAQ,gBAAgB,UAAU,EACpD,QAAQ,OACT,CAAC;;GAEJ,YAAY,OACV,QACA,SACgC;AAChC,WAAOA,2BAAa,QAAQ,gBAAgB,UAAU;KACpD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,YAAY,OAAO,WAAgD;AACjE,WAAOA,2BAAa,QAAQ,gBAAgB,UAAU,EACpD,QAAQ,UACT,CAAC;;GAKJ,eAAe,OACb,QACA,SACmC;AACnC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,YAAY;KAC7D,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,iBAAiB,OACf,WACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,YAAY,EAC7D,QAAQ,OACT,CAAC;;GAEJ,gBAAgB,OAAO,OAAgD;AACrE,WAAOA,2BAAa,QAAQ,mBAAmB,MAAM,EACnD,QAAQ,OACT,CAAC;;GAEJ,eAAe,OACb,IACA,SACmC;AACnC,WAAOA,2BAAa,QAAQ,mBAAmB,MAAM;KACnD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,eAAe,OAAO,OAA+C;AACnE,WAAOA,2BAAa,QAAQ,mBAAmB,MAAM,EACnD,QAAQ,UACT,CAAC;;GAKJ,cAAc,OAAO,WAAkD;AACrE,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS,EAC1D,QAAQ,OACT,CAAC;;GAEJ,iBAAiB,OACf,QACA,SACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS;KAC1D,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,iBAAiB,OACf,QACA,SACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS;KAC1D,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,iBAAiB,OACf,WACqC;AACrC,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS,EAC1D,QAAQ,UACT,CAAC;;GAEJ,qBAAqB,YAAkD;AACrE,WAAOA,2BAAa,QAAQ,8BAA8B,EACxD,QAAQ,OACT,CAAC;;GAEJ,SAAS,OACP,QACA,SAC6B;AAC7B,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,OAAO;KACxD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,WAAW,OAAO,WAA+C;AAC/D,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,SAAS,EAC1D,QAAQ,QACT,CAAC;;GAEJ,sBAAsB,OACpB,WAC0C;AAC1C,WAAOA,2BAAa,QAAQ,gBAAgB,OAAO,YAAY,EAC7D,QAAQ,OACT,CAAC;;GAKJ,iBAAiB,OACf,cACqC;AACrC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS,EAChE,QAAQ,OACT,CAAC;;GAEJ,oBAAoB,OAClB,WACA,SACwC;AACxC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS;KAChE,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,oBAAoB,OAClB,WACA,SACwC;AACxC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS;KAChE,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,oBAAoB,OAClB,cACwC;AACxC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,SAAS,EAChE,QAAQ,UACT,CAAC;;GAEJ,yBACE,YAAsD;AACpD,WAAOA,2BAAa,QAAQ,kCAAkC,EAC5D,QAAQ,OACT,CAAC;;GAEN,eAAe,OACb,WACA,SACmC;AACnC,WAAOA,2BAAa,QAAQ,mBAAmB,UAAU,UAAU;KACjE,QAAQ;KACR,MAAM;KACP,CAAC;;GAKJ,sBAAsB,YAAmD;AACvE,WAAOA,2BAAa,QAAQ,yBAAyB,EACnD,QAAQ,OACT,CAAC;;GAEJ,sBAAsB,OACpB,oBAC0C;AAC1C,WAAOA,2BACL,QACA,yBAAyB,mBACzB,EACE,QAAQ,OACT,CACF;;GAEH,oBAAoB,OAClB,SACwC;AACxC,WAAOA,2BAAa,QAAQ,yBAAyB;KACnD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,mBAAmB,OACjB,oBACuC;AACvC,WAAOA,2BACL,QACA,yBAAyB,gBAAgB,QACzC,EACE,QAAQ,QACT,CACF;;GAEJ;;;;;;AC9QL,MAAa,uBAAuBC,MAAE,OAAO;CAC3C,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,UAAUA,MAAE,SAAS;CACrB,UAAUA,MAAE,IAAI,UAAU,CAAC,UAAU;CACrC,aAAaA,MAAE,IAAI,UAAU,CAAC,UAAU;CACxC,cAAcA,MAAE,QAAQ,CAAC,UAAU;CACnC,gBAAgBA,MAAE,QAAQ,CAAC,UAAU;CACrC,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;AAGF,MAAa,0BAA0BA,MAAE,OAAO;CAC9C,WAAWA,MAAE,QAAQ,CAAC,UAAU;CAChC,WAAWA,MAAE,IAAI,UAAU,CAAC,UAAU;CACtC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,iBAAiBA,MAAE,QAAQ,CAAC,UAAU;CACtC,oBAAoBA,MAAE,QAAQ,CAAC,UAAU;CACzC,qBAAqBA,MAAE,QAAQ,CAAC,UAAU;CAC1C,wBAAwBA,MAAE,IAAI,UAAU,CAAC,UAAU;CACnD,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;AAGF,MAAa,yBAAyBA,MAAE,OAAO;CAC7C,SAASC;CACT,OAAO,wBAAwB,UAAU;CAC1C,CAAC;AAGF,MAAa,sBAAsBD,MAAE,OAAO;CAC1C,IAAIA,MAAE,QAAQ,CAAC,UAAU;CACzB,aAAaA,MAAE,QAAQ,CAAC,UAAU;CAClC,cAAcA,MAAE,QAAQ,CAAC,UAAU;CACnC,gBAAgBA,MAAE,QAAQ,CAAC,UAAU;CACrC,wBAAwBA,MAAE,QAAQ,CAAC,UAAU;CAC7C,QAAQA,MAAE,QAAQ,CAAC,UAAU;CAC7B,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC3B,SAASA,MAAE,IAAI,UAAU,CAAC,UAAU;CACpC,eAAeA,MAAE,QAAQ,CAAC,UAAU;CACpC,WAAWA,MAAE,IAAI,UAAU;CAC3B,WAAWA,MAAE,IAAI,UAAU;CAC5B,CAAC;;;;AC/CF,IAAa,eAAb,MAA4C;CAC1C,AAAgB,KAAK;CACrB,AAAQ,iBAAsC;CAE9C,YAAY,AAAiB,SAA+B;EAA/B;;CAE7B,AAAO,KAAK,QAAwC;AAClD,SAAO,oBAAoB,OAAO,QAAsB;AACtD,OAAI,OAAO,aAAa,YACtB;GAGF,MAAM,aAAa,KAAK,SAAS,cAAc;GAC/C,MAAM,QAAQ,aAAa,QAAQ,cAAc;AACjD,OAAI,MACF,KAAI,KAAK,UAAU;IACjB,GAAG,IAAI,KAAK;KACX,aAAa,UAAU;IACzB;IAEH;AAEF,SAAO,mBAAmB,OAAO,KAAmB,QAAkB;AACpE,OAAI,OAAO,aAAa,YACtB;AAEF,OAAI,IAAI,WAAW,IACjB;AAEF,OAAI,IAAI,KAAK,MACX;GAGF,MAAM,eAAe,aAAa,QAAQ,eAAe;AACzD,OAAI,CAAC,aACH;AAGF,OAAI,CAAC,OAAO,KAAK;AACf,YAAQ,KAAK,mDAAmD;AAChE;;AAIF,OAAI,CAAC,KAAK,eACR,MAAK,kBAAkB,YAAY;AACjC,QAAI;KACF,MAAM,WAAW,MAAM,OAAO,IAAI,aAAa,EAC/B,cACf,CAAC;AACF,SAAI,CAAC,SACH,QAAO;AAGT,kBAAa,QAAQ,eAAe,SAAS,YAAY;AACzD,kBAAa,QAAQ,gBAAgB,SAAS,aAAa;AAE3D,YAAO;cACC;AACR,UAAK,iBAAiB;;OAEtB;GAGN,MAAM,YAAY,MAAM,KAAK;AAC7B,OAAI,CAAC,UACH;GAGF,MAAM,aAAa,KAAK,SAAS,cAAc;AAC/C,OAAI,KAAK,UAAU;IACjB,GAAG,IAAI,KAAK;KACX,aAAa,UAAU,UAAU;IACnC;AAED,UAAO;IACP;AAEF,SAAO,EAAE;;;;;;AC7Eb,IAAa,aAAb,MAA0C;CACxC,AAAgB,KAAK;CAErB,YAAY,AAAiB,SAA4B;EAA5B;;CAE7B,AAAO,KAAK,QAAuB;AACjC,SAAO,oBAAoB,OAAO,QAAsB;AAEtD,OAAI,OAAO,aAAa,aAAa;AACnC,QAAI;KAAC;KAAW;KAAQ;KAAM,CAAC,SAAS,IAAI,KAAK,UAAU,MAAM,CAC/D;IAIF,MAAM,0BADgB,SAAS,OAAO,CAChB,KAAK,QAAQ;AAEnC,QAAI,CAAC,MAAO;AAEZ,QAAI,KAAK,UAAU,IAAI,QAAQ,IAAI,KAAK,QAAQ;AAChD,QAAI,KAAK,QAAQ,IAAI,KAAK,QAAQ,YAAY,MAAM;AACpD;;AAIF,OAAI,KAAK,SAAS;AAChB,QAAI;KAAC;KAAW;KAAQ;KAAM,CAAC,SAAS,IAAI,KAAK,UAAU,MAAM,CAC/D;IAIF,MAAME,YADQ,MAAM,KAAK,SAAS,EACb,IAAI,KAAK,QAAQ,WAAW;AAEjD,QAAI,CAACA,SAAQ;AAEb,QAAI,KAAK,UAAU,IAAI,QAAQ,IAAI,KAAK,QAAQ;AAChD,QAAI,KAAK,QAAQ,IAAI,KAAK,QAAQ,YAAYA,SAAO,MAAM;;IAE7D;AAEF,SAAO,EAAE;;CAIX,AAAQ;CACR,cAAc,IAAwB;AACpC,OAAK,UAAU;;;;;;ACvCnB,IAAa,sBAAb,MAAmD;CACjD,AAAgB,KAAK;CAErB,AAAO,KAAK,QAAuB;AACjC,SAAO;GACL,QAAQ,OAAU,SAAoC;AACpD,WAAOC,2BAAgB,QAAQ,YAAY;KACzC,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,QAAQ,OAAU,SAAoC;AACpD,WAAOA,2BAAgB,QAAQ,YAAY;KACzC,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,uBAAuB,OACrB,SACkB;AAClB,WAAOA,2BAAa,QAAQ,4BAA4B;KACtD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,sBAAsB,OACpB,SACkB;AAClB,WAAOA,2BAAa,QAAQ,2BAA2B;KACrD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,gBAAgB,OAAO,SAA+C;AACpE,WAAOA,2BAAa,QAAQ,oBAAoB;KAC9C,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,oBAAoB,OAClB,SACkB;AAClB,WAAOA,2BAAa,QAAQ,yBAAyB;KACnD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEL;;;;;;AClDL,IAAa,YAAb,MAAyC;CACvC,AAAgB,KAAK;CAErB,cAAc;CAEd,AAAO,KAAK,QAAuB;AACjC,SAAO;GACL,cAAc,OACZ,SACkC;AAClC,WAAOC,2BAAa,QAAQ,kBAAkB;KAC5C,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,aAAa,YAAqC;AAChD,WAAOA,2BAAa,QAAQ,0BAA0B,EACpD,QAAQ,OACT,CAAC;;GAEL;;;;;;AClBL,IAAa,kBAAb,MAA+C;CAC7C,AAAgB,KAAK;CAErB,cAAc;CAEd,AAAO,KAAK,QAAuB;AACjC,SAAO;GACL,QAAQ,OACN,SACqC;AACrC,WAAOC,2BAAa,QAAQ,uBAAuB;KACjD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEJ,QAAQ,OACN,SACqC;IACrC,MAAM,eAAe,IAAI,iBAAiB;AAC1C,iBAAa,OAAO,SAAS,KAAK,MAAM;AACxC,QAAI,KAAK,YACP,cAAa,OAAO,gBAAgB,KAAK,YAAY;AAEvD,WAAOA,2BACL,QACA,sBAAsB,aAAa,UAAU,IAC7C,EACE,QAAQ,OACT,CACF;;GAEH,UAAU,OAAU,SAA+C;AACjE,WAAOA,2BAAa,QAAQ,wBAAwB;KAClD,QAAQ;KACR,MAAM;KACP,CAAC;;GAEL;;;;;;ACxCL,IAAa,eAAb,MAA4C;CAC1C,AAAgB,KAAK;CAErB,AAAO,KAAK,QAAuB;AACjC,SAAO,EACL,QAAQ,OACN,SACsC;AACtC,UAAOC,2BACL,QACA,qBAAqB,KAAK,SAAS,eAAe,KAAK,cACvD,EACE,QAAQ,OACT,CACF;KAEJ"}