jazz-tools 0.19.11 → 0.19.13

package/dist/index.js

@@ -18,6 +18,7 @@ import {
   InboxSender,
   JazzContextManager,
   KvStoreContext,
+  MockSessionProvider,
   Profile,
   Ref,
   SchemaUnion,
@@ -41,12 +42,12 @@ import {
   isCoValueId,
   isControlledAccount,
   loadCoValue,
-  randomSessionProvider,
   setCustomErrorReporter,
+  setDefaultSchemaPermissions,
   subscribeToCoValue,
   unstable_loadUnique,
   zodReExport_exports
-} from "./chunk-HX5S6W5E.js";
+} from "./chunk-GAPMDNJY.js";
 import {
   createSSRJazzAgent
 } from "./chunk-M2HGBOXS.js";
@@ -979,6 +980,7 @@ export {
   JazzRequestError,
   KvStoreContext,
   LogLevel2 as LogLevel,
+  MockSessionProvider,
   PassphraseAuth,
   Profile,
   Ref,
@@ -1013,7 +1015,7 @@ export {
   logger2 as logger,
   parseAuthToken,
   parseInviteLink,
-  randomSessionProvider,
+  setDefaultSchemaPermissions,
   subscribeToCoValue,
   unstable_loadUnique,
   zodReExport_exports as z

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/tools/auth/clerk/index.ts","../src/tools/auth/clerk/getClerkUsername.ts","../src/tools/auth/clerk/types.ts","../src/tools/auth/DemoAuth.ts","../src/tools/auth/PassphraseAuth.ts","../src/tools/implementation/invites.ts","../src/tools/coValues/request.ts","../src/tools/config.ts","../src/tools/index.ts"],"sourcesContent":["import {\n  Account,\n  AuthCredentials,\n  AuthSecretStorage,\n  AuthenticateAccountFunction,\n} from \"jazz-tools\";\nimport { getClerkUsername } from \"./getClerkUsername.js\";\nimport {\n  ClerkCredentials,\n  MinimalClerkClient,\n  isClerkAuthStateEqual,\n  isClerkCredentials,\n} from \"./types.js\";\n\nexport type { MinimalClerkClient };\nexport { isClerkCredentials };\n\nexport class JazzClerkAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private logOut: () => Promise<void> | void,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  /**\n   * Loads the Jazz auth data from the Clerk user and sets it in the auth secret storage.\n   */\n  static loadClerkAuthData(\n    credentials: ClerkCredentials,\n    storage: AuthSecretStorage,\n  ) {\n    return storage.set({\n      accountID: credentials.jazzAccountID,\n      accountSecret: credentials.jazzAccountSecret,\n      secretSeed: credentials.jazzAccountSeed\n        ? Uint8Array.from(credentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    });\n  }\n\n  static async initializeAuth(clerk: MinimalClerkClient) {\n    const secretStorage = new AuthSecretStorage();\n\n    if (!isClerkCredentials(clerk.user?.unsafeMetadata)) {\n      return;\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      clerk.user.unsafeMetadata,\n      secretStorage,\n    );\n  }\n\n  private isFirstCall = true;\n\n  registerListener(clerkClient: MinimalClerkClient) {\n    let previousUser: MinimalClerkClient[\"user\"] | null =\n      clerkClient.user ?? null;\n\n    // Need to use addListener because the clerk user object is not updated when the user logs in\n    return clerkClient.addListener((event) => {\n      const user = (event as Pick<MinimalClerkClient, \"user\">).user ?? null;\n\n      if (!isClerkAuthStateEqual(previousUser, user) || this.isFirstCall) {\n        this.onClerkUserChange({ user });\n        previousUser = user;\n        this.isFirstCall = false;\n      }\n    });\n  }\n\n  onClerkUserChange = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    const isAuthenticated = this.authSecretStorage.isAuthenticated;\n\n    // LogOut is driven by Clerk. The framework adapters will need to pass `logOutReplacement` to the `JazzProvider`\n    // to make the logOut work correctly.\n    if (!clerkClient.user) {\n      if (isAuthenticated) {\n        this.authSecretStorage.clear();\n        await this.logOut();\n      }\n      return;\n    }\n\n    if (isAuthenticated) return;\n\n    const clerkCredentials = clerkClient.user\n      .unsafeMetadata as ClerkCredentials;\n\n    if (!clerkCredentials.jazzAccountID) {\n      await this.signIn(clerkClient);\n    } else {\n      await this.logIn(clerkClient);\n    }\n  };\n\n  logIn = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    if (!clerkClient.user) {\n      throw new Error(\"Not signed in on Clerk\");\n    }\n\n    const clerkCredentials = clerkClient.user.unsafeMetadata;\n    if (!isClerkCredentials(clerkCredentials)) {\n      throw new Error(\"No credentials found on Clerk\");\n    }\n\n    const credentials = {\n      accountID: clerkCredentials.jazzAccountID,\n      accountSecret: clerkCredentials.jazzAccountSecret,\n      secretSeed: clerkCredentials.jazzAccountSeed\n        ? Uint8Array.from(clerkCredentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    } satisfies AuthCredentials;\n\n    await this.authenticate(credentials);\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed: clerkCredentials.jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n\n  signIn = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const jazzAccountSeed = credentials.secretSeed\n      ? Array.from(credentials.secretSeed)\n      : undefined;\n\n    await clerkClient.user?.update({\n      unsafeMetadata: {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed,\n      } satisfies ClerkCredentials,\n    });\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    const username = getClerkUsername(clerkClient);\n\n    if (username) {\n      currentAccount.profile.$jazz.set(\"name\", username);\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n}\n\n// eslint-disable-next-line @typescript-eslint/no-namespace\nexport namespace BrowserClerkAuth {\n  export interface Driver {\n    onError: (error: string | Error) => void;\n  }\n}\n","import type { MinimalClerkClient } from \"./types.js\";\n\nexport function getClerkUsername(\n  clerkClient: Pick<MinimalClerkClient, \"user\">,\n) {\n  if (!clerkClient.user) {\n    return null;\n  }\n\n  if (clerkClient.user.fullName) {\n    return clerkClient.user.fullName;\n  }\n\n  if (clerkClient.user.firstName) {\n    if (clerkClient.user.lastName) {\n      return `${clerkClient.user.firstName} ${clerkClient.user.lastName}`;\n    }\n\n    return clerkClient.user.firstName;\n  }\n\n  if (clerkClient.user.username) {\n    return clerkClient.user.username;\n  }\n\n  if (clerkClient.user.primaryEmailAddress?.emailAddress) {\n    const emailUsername =\n      clerkClient.user.primaryEmailAddress.emailAddress.split(\"@\")[0];\n\n    if (emailUsername) {\n      return emailUsername;\n    }\n  }\n\n  return clerkClient.user.id;\n}\n","import { AgentSecret } from \"cojson\";\nimport { Account, ID } from \"jazz-tools\";\n\nexport type MinimalClerkClient = {\n  user:\n    | {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        unsafeMetadata: Record<string, any>;\n        fullName: string | null;\n        username: string | null;\n        firstName: string | null;\n        lastName: string | null;\n        id: string;\n        primaryEmailAddress: {\n          emailAddress: string | null;\n        } | null;\n        update: (args: {\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          unsafeMetadata: Record<string, any>;\n        }) => Promise<unknown>;\n      }\n    | null\n    | undefined;\n  signOut: () => Promise<void>;\n  addListener: (listener: (data: unknown) => void) => void;\n};\n\nexport type ClerkCredentials = {\n  jazzAccountID: ID<Account>;\n  jazzAccountSecret: AgentSecret;\n  jazzAccountSeed?: number[];\n};\n\n/**\n * Checks if the Clerk user metadata contains the necessary credentials for Jazz auth.\n * **Note**: It does not validate the credentials, only checks if the necessary fields are present in the metadata object.\n */\nexport function isClerkCredentials(\n  data: NonNullable<MinimalClerkClient[\"user\"]>[\"unsafeMetadata\"] | undefined,\n): data is ClerkCredentials {\n  return !!data && \"jazzAccountID\" in data && \"jazzAccountSecret\" in data;\n}\n\nexport function isClerkAuthStateEqual(\n  previousUser: MinimalClerkClient[\"user\"] | null | undefined,\n  newUser: MinimalClerkClient[\"user\"] | null | undefined,\n) {\n  if (Boolean(previousUser) !== Boolean(newUser)) {\n    return false;\n  }\n\n  const previousCredentials = isClerkCredentials(previousUser?.unsafeMetadata);\n  const newCredentials = isClerkCredentials(newUser?.unsafeMetadata);\n\n  return previousCredentials === newCredentials;\n}\n","import { AgentSecret } from \"cojson\";\nimport { Account, ID } from \"../internal.js\";\nimport { AuthenticateAccountFunction } from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\nimport { KvStore, KvStoreContext } from \"./KvStoreContext.js\";\n\ntype StorageData = {\n  accountID: ID<Account>;\n  accountSecret: AgentSecret;\n  secretSeed?: number[];\n};\n\n/**\n * `DemoAuth` provides a `JazzAuth` object for demo authentication.\n *\n * Demo authentication is useful for quickly testing your app, as it allows you to create new accounts and log in as existing ones.\n *\n * ```\n * import { DemoAuth } from \"jazz-tools\";\n *\n * const auth = new DemoAuth(jazzContext.authenticate, new AuthSecretStorage());\n * ```\n *\n * @category Auth Providers\n */\nexport class DemoAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  logIn = async (username: string) => {\n    const existingUsers = await this.getExisitingUsersWithData();\n    const storageData = existingUsers[username];\n\n    if (!storageData?.accountID) {\n      throw new Error(\"User not found\");\n    }\n\n    await this.authenticate({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n      secretSeed: storageData.secretSeed\n        ? new Uint8Array(storageData.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n  };\n\n  signUp = async (username: string) => {\n    const existingUsers = await this.getExistingUsers();\n    if (existingUsers.includes(username)) {\n      throw new Error(\"User already registered\");\n    }\n\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    currentAccount.profile.$jazz.set(\"name\", username);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? new Uint8Array(credentials.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n\n    await this.addToExistingUsers(username, {\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? Array.from(credentials.secretSeed)\n        : undefined,\n    });\n  };\n\n  private async addToExistingUsers(username: string, data: StorageData) {\n    const existingUsers = await this.getExisitingUsersWithData();\n\n    if (existingUsers[username]) {\n      return;\n    }\n\n    existingUsers[username] = data;\n\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n  }\n\n  private async getExisitingUsersWithData() {\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await migrateExistingUsers(kvStore);\n\n    const existingUsers = await kvStore.get(\"demo-auth-users\");\n    return existingUsers ? JSON.parse(existingUsers) : {};\n  }\n\n  getExistingUsers = async () => {\n    return Object.keys(await this.getExisitingUsersWithData());\n  };\n}\n\nexport function encodeUsername(username: string) {\n  return btoa(username)\n    .replace(/=/g, \"-\")\n    .replace(/\\+/g, \"_\")\n    .replace(/\\//g, \".\");\n}\n\nasync function getStorageVersion(kvStore: KvStore) {\n  try {\n    const version = await kvStore.get(\"demo-auth-storage-version\");\n    return version ? parseInt(version) : 1;\n  } catch (error) {\n    return 1;\n  }\n}\n\nasync function setStorageVersion(kvStore: KvStore, version: number) {\n  await kvStore.set(\"demo-auth-storage-version\", version.toString());\n}\n\nasync function getExistingUsersList(kvStore: KvStore) {\n  const existingUsers = await kvStore.get(\"demo-auth-existing-users\");\n  return existingUsers ? existingUsers.split(\",\") : [];\n}\n\n/**\n * Migrates existing users keys to work with any storage.\n */\nasync function migrateExistingUsers(kvStore: KvStore) {\n  if ((await getStorageVersion(kvStore)) < 2) {\n    const existingUsers = await getExistingUsersList(kvStore);\n\n    for (const username of existingUsers) {\n      const legacyKey = `demo-auth-existing-users-${username}`;\n      const storageData = await kvStore.get(legacyKey);\n      if (storageData) {\n        await kvStore.set(\n          `demo-auth-existing-users-${encodeUsername(username)}`,\n          storageData,\n        );\n        await kvStore.delete(legacyKey);\n      }\n    }\n\n    await setStorageVersion(kvStore, 2);\n  }\n\n  if ((await getStorageVersion(kvStore)) < 3) {\n    const existingUsersList = await getExistingUsersList(kvStore);\n\n    const existingUsers: Record<string, StorageData> = {};\n    const keysToDelete: string[] = [\"demo-auth-existing-users\"];\n\n    for (const username of existingUsersList) {\n      const key = `demo-auth-existing-users-${encodeUsername(username)}`;\n      const storageData = await kvStore.get(key);\n      if (storageData) {\n        existingUsers[username] = JSON.parse(storageData);\n        keysToDelete.push(key);\n      }\n    }\n\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n\n    for (const key of keysToDelete) {\n      await kvStore.delete(key);\n    }\n\n    await setStorageVersion(kvStore, 3);\n  }\n}\n","import * as bip39 from \"@scure/bip39\";\nimport { entropyToMnemonic } from \"@scure/bip39\";\nimport { CryptoProvider, cojsonInternals } from \"cojson\";\nimport type { ID } from \"../internal.js\";\nimport { Account } from \"../internal.js\";\nimport type {\n  AuthenticateAccountFunction,\n  RegisterAccountFunction,\n} from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\n\n/**\n * `PassphraseAuth` provides a `JazzAuth` object for passphrase authentication.\n *\n * ```ts\n * import { PassphraseAuth } from \"jazz-tools\";\n *\n * const auth = new PassphraseAuth(crypto, jazzContext.authenticate, new AuthSecretStorage(), wordlist);\n * ```\n *\n * @category Auth Providers\n */\nexport class PassphraseAuth {\n  passphrase: string = \"\";\n\n  constructor(\n    private crypto: CryptoProvider,\n    private authenticate: AuthenticateAccountFunction,\n    private register: RegisterAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n    public wordlist: string[],\n  ) {}\n\n  logIn = async (passphrase: string) => {\n    const { crypto, authenticate } = this;\n\n    let secretSeed;\n\n    try {\n      secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    } catch (e) {\n      throw new Error(\"Invalid passphrase\");\n    }\n\n    const accountSecret = crypto.agentSecretFromSecretSeed(secretSeed);\n\n    const accountID = cojsonInternals.idforHeader(\n      cojsonInternals.accountHeaderForInitialAgentSecret(accountSecret, crypto),\n      crypto,\n    ) as ID<Account>;\n\n    await authenticate({\n      accountID,\n      accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  signUp = async (name?: string) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const passphrase = entropyToMnemonic(credentials.secretSeed, this.wordlist);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      secretSeed: credentials.secretSeed,\n      accountSecret: credentials.accountSecret,\n      provider: \"passphrase\",\n    });\n\n    if (name?.trim()) {\n      const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n        resolve: {\n          profile: true,\n        },\n      });\n\n      currentAccount.profile.$jazz.set(\"name\", name);\n    }\n\n    return passphrase;\n  };\n\n  registerNewAccount = async (passphrase: string, name: string) => {\n    const secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    const accountSecret = this.crypto.agentSecretFromSecretSeed(secretSeed);\n    const accountID = await this.register(accountSecret, { name });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    return accountID;\n  };\n\n  getCurrentAccountPassphrase = async () => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    return entropyToMnemonic(credentials.secretSeed, this.wordlist);\n  };\n\n  generateRandomPassphrase = () => {\n    return entropyToMnemonic(this.crypto.newRandomSecretSeed(), this.wordlist);\n  };\n\n  loadCurrentAccountPassphrase = async () => {\n    const passphrase = await this.getCurrentAccountPassphrase();\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  listeners = new Set<() => void>();\n  subscribe = (callback: () => void) => {\n    this.listeners.add(callback);\n\n    return () => {\n      this.listeners.delete(callback);\n    };\n  };\n\n  notify() {\n    for (const listener of this.listeners) {\n      listener();\n    }\n  }\n}\n","import { AccountRole, type InviteSecret, cojsonInternals } from \"cojson\";\nimport { Account } from \"../coValues/account.js\";\nimport type { CoValue, CoValueClassOrSchema } from \"../internal.js\";\n\n/** @category Invite Links */\nexport function createInviteLink<C extends CoValue>(\n  value: C,\n  role: AccountRole,\n  baseURL: string,\n  valueHint?: string,\n): string {\n  const coValueCore = value.$jazz.raw.core;\n  let currentCoValue = coValueCore;\n\n  while (currentCoValue.verified.header.ruleset.type === \"ownedByGroup\") {\n    currentCoValue = currentCoValue.getGroup().core;\n  }\n\n  const { ruleset, meta } = currentCoValue.verified.header;\n\n  if (ruleset.type !== \"group\" || meta?.type === \"account\") {\n    throw new Error(\"Can't create invite link for object without group\");\n  }\n\n  const group = cojsonInternals.expectGroup(currentCoValue.getCurrentContent());\n  const inviteSecret = group.createInvite(role);\n\n  return `${baseURL}#/invite/${valueHint ? valueHint + \"/\" : \"\"}${\n    value.$jazz.id\n  }/${inviteSecret}`;\n}\n\n/** @category Invite Links */\nexport function parseInviteLink(inviteURL: string):\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined {\n  const url = new URL(inviteURL);\n  const parts = url.hash.split(\"/\");\n\n  let valueHint: string | undefined;\n  let valueID: string | undefined;\n  let inviteSecret: InviteSecret | undefined;\n\n  if (parts[0] === \"#\" && parts[1] === \"invite\") {\n    if (parts.length === 5) {\n      valueHint = parts[2];\n      valueID = parts[3];\n      inviteSecret = parts[4] as InviteSecret;\n    } else if (parts.length === 4) {\n      valueID = parts[2];\n      inviteSecret = parts[3] as InviteSecret;\n    }\n\n    if (!valueID || !inviteSecret) {\n      return undefined;\n    }\n    return { valueID, inviteSecret, valueHint };\n  }\n}\n\n/** @category Invite Links */\nexport function consumeInviteLink<S extends CoValueClassOrSchema>({\n  inviteURL,\n  as = Account.getMe(),\n  forValueHint,\n  invitedObjectSchema,\n}: {\n  inviteURL: string;\n  as?: Account;\n  forValueHint?: string;\n  invitedObjectSchema: S;\n}): Promise<\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined\n> {\n  return new Promise((resolve, reject) => {\n    const result = parseInviteLink(inviteURL);\n\n    if (result && result.valueHint === forValueHint) {\n      as.acceptInvite(result.valueID, result.inviteSecret, invitedObjectSchema)\n        .then(() => {\n          resolve(result);\n        })\n        .catch(reject);\n    } else {\n      resolve(undefined);\n    }\n  });\n}\n","import {\n  CoValueCore,\n  CojsonInternalTypes,\n  CryptoProvider,\n  RawAccount,\n  RawCoMap,\n  cojsonInternals,\n} from \"cojson\";\nimport z from \"zod/v4\";\nimport {\n  AnyZodOrCoValueSchema,\n  CoMap,\n  CoMapSchema,\n  CoMapSchemaInit,\n  CoValueClass,\n  CoreCoMapSchema,\n  Group,\n  Loaded,\n  ResolveQuery,\n  ResolveQueryStrict,\n  Simplify,\n  coMapDefiner,\n  coValueClassFromCoValueClassOrSchema,\n  exportCoValue,\n  importContentPieces,\n  loadCoValue,\n} from \"../internal.js\";\nimport { isCoValueId } from \"../lib/utils.js\";\nimport { Account } from \"./account.js\";\n\ntype MessageShape = Record<string, AnyZodOrCoValueSchema>;\n\ntype RequestSchemaDefinition<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>> = true,\n> =\n  | S\n  | {\n      schema: S;\n      resolve?: R;\n    };\n\n/**\n * Configuration options for defining HTTP request/response schemas in Jazz.\n *\n * This interface defines the structure for creating typed HTTP routes with\n * request and response validation using CoMap schemas.\n *\n * @template RequestShape - The shape of the request message schema (must extend MessageShape)\n * @template RequestResolve - The resolve query type for the request CoMap schema\n * @template ResponseShape - The shape of the response message schema (must extend MessageShape)\n * @template ResponseResolve - The resolve query type for the response CoMap schema\n */\ninterface RequestOptions<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n> {\n  /**\n   * The URL endpoint for the HTTP route.\n   * This is used by the client to send requests to the server.\n   */\n  url: string;\n\n  /**\n   * The id of the worker Account or Group.\n   */\n  workerId: string;\n\n  /**\n   * Schema definition for the request payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for incoming requests.\n   */\n  request: RequestSchemaDefinition<\n    RequestShape,\n    ResolveQueryStrict<CoMapSchema<RequestShape>, RequestResolve>\n  >;\n\n  /**\n   * Schema definition for the response payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for outgoing responses.\n   */\n  response: RequestSchemaDefinition<\n    ResponseShape,\n    ResolveQueryStrict<CoMapSchema<ResponseShape>, ResponseResolve>\n  >;\n}\n\ntype AsNullablePayload<T extends MessageShape> = T extends Record<string, never>\n  ? undefined\n  : never;\ntype MessageValuePayload<T extends MessageShape> =\n  | Simplify<CoMapSchemaInit<T>>\n  | AsNullablePayload<T>;\n\nfunction createMessageEnvelope<S extends MessageShape>(\n  schema: CoreCoMapSchema,\n  value: MessageValuePayload<S>,\n  owner: Account,\n  sharedWith: Account | Group,\n  type: \"request\" | \"response\",\n): Loaded<CoMapSchema<S>> {\n  const group = Group.create({ owner });\n\n  if (type === \"request\") {\n    group.addMember(sharedWith, \"writer\");\n  } else {\n    group.addMember(sharedWith, \"reader\");\n  }\n\n  // @ts-expect-error - CoreCoMapSchema doesn't have static methods\n  return schema.create(value ?? {}, group);\n}\n\n/**\n * Function that exports the input CoValue in a serializable format and prepares the information\n * required for the other side to safely verify the identity of the sender.\n */\nasync function serializeMessagePayload({\n  type,\n  schema,\n  resolve,\n  value,\n  owner,\n  target,\n}: {\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  type: \"request\" | \"response\";\n  schema: CoreCoMapSchema;\n  resolve: any;\n  value: any;\n  owner: Account;\n  target: Account | Group;\n}) {\n  const me = owner ?? Account.getMe();\n  const node = me.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerID = agent.currentSignerID();\n  const signerSecret = agent.currentSignerSecret();\n\n  const envelope = createMessageEnvelope(schema, value, me, target, type);\n\n  const contentPieces =\n    (await exportCoValue(schema, envelope.$jazz.id, {\n      resolve,\n      loadAs: me,\n      bestEffortResolution: true,\n    })) ?? [];\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    signerID,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return {\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    authToken,\n    signerID,\n  };\n}\n\nconst coIdSchema = z.custom<`co_z${string}`>(isCoValueId);\nconst signatureSchema = z.custom<`signature_z${string}`>(\n  (value) => typeof value === \"string\" && value.startsWith(\"signature_z\"),\n);\n\nconst requestSchema = z.object({\n  contentPieces: z.array(z.json()),\n  id: coIdSchema,\n  createdAt: z.number(),\n  authToken: signatureSchema,\n  signerID: z.custom<`signer_z${string}`>(\n    (value) => typeof value === \"string\" && value.startsWith(\"signer_z\"),\n  ),\n});\n\n/**\n * Function that parses the message payload, verifies the identity of the sender and loads the data.\n *\n * @returns The data from the message.\n */\nasync function handleMessagePayload({\n  type,\n  schema,\n  resolve,\n  request,\n  loadAs,\n}: {\n  type: \"request\" | \"response\";\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  schema: CoreCoMapSchema;\n  resolve: any;\n  request: unknown;\n  loadAs: Account;\n}) {\n  const node = loadAs.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const requestParsed = requestSchema.safeParse(request);\n\n  if (!requestParsed.success) {\n    throw new JazzRequestError(\n      \"Request payload is not valid\",\n      400,\n      requestParsed.error,\n    );\n  }\n\n  const requestData = requestParsed.data;\n\n  if (type === \"request\") {\n    const core = await node.loadCoValueCore(requestData.id, undefined, true);\n\n    // Check if the message has already been handled to prevent replay attacks\n    if (core.isAvailable()) {\n      const content = core.getCurrentContent() as RawCoMap;\n\n      if (content.get(\"$handled\") === loadAs.$jazz.id) {\n        throw new JazzRequestError(\"Request payload is already handled\", 400);\n      }\n    }\n\n    // Check if the message is expired as extra protection\n    if (requestData.createdAt + 1000 * 60 < Date.now()) {\n      throw new JazzRequestError(\"Authentication token is expired\", 401);\n    }\n  }\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    contentPieces: requestData.contentPieces,\n    id: requestData.id,\n    createdAt: requestData.createdAt,\n    signerID: requestData.signerID,\n  });\n\n  if (\n    !safeVerifySignature(\n      crypto,\n      signPayload,\n      requestData.signerID,\n      requestData.authToken,\n    )\n  ) {\n    throw new JazzRequestError(\"Invalid signature\", 401);\n  }\n\n  let contentPieces =\n    requestData.contentPieces as CojsonInternalTypes.NewContentMessage[];\n\n  if (type === \"request\") {\n    const coValueContent = contentPieces.find(\n      (piece) => piece.id === requestData.id,\n    );\n\n    if (coValueContent && coValueContent.header) {\n      const validValues = cojsonInternals.getDependedOnCoValues(\n        coValueContent.header,\n        coValueContent,\n      );\n      validValues.add(requestData.id);\n      contentPieces = contentPieces.filter((piece) =>\n        validValues.has(piece.id),\n      );\n    } else {\n      contentPieces = [];\n    }\n  }\n\n  importContentPieces(contentPieces, loadAs);\n\n  const coValue = await node.loadCoValueCore(requestData.id);\n  const accountId = getCoValueCreatorAccountId(coValue);\n\n  const madeBy = await Account.load(accountId, {\n    loadAs,\n  });\n\n  if (!madeBy.$isLoaded) {\n    throw new JazzRequestError(\"Creator account not found\", 400);\n  }\n\n  const coSchema = coValueClassFromCoValueClassOrSchema(\n    schema,\n  ) as CoValueClass<CoMap>;\n  const value = await loadCoValue<CoMap, true>(coSchema, requestData.id, {\n    resolve,\n    loadAs,\n  });\n\n  if (!value.$isLoaded) {\n    throw new JazzRequestError(\"Value not found\", 400);\n  }\n\n  if (type === \"request\") {\n    value.$jazz.raw.set(\"$handled\", loadAs.$jazz.id);\n  }\n\n  return {\n    value: value as unknown,\n    madeBy,\n  };\n}\n\nfunction parseSchemaAndResolve<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>>,\n>(options: RequestSchemaDefinition<S, R>) {\n  if (\"schema\" in options) {\n    return {\n      // Using a type cast to reduce the type complexity\n      schema: coMapDefiner(options.schema) as CoreCoMapSchema,\n      resolve: options.resolve as any,\n    };\n  }\n\n  return {\n    schema: coMapDefiner(options) as CoreCoMapSchema,\n    resolve: true as any,\n  };\n}\n\nexport class HttpRoute<\n  RequestShape extends MessageShape = z.core.$ZodLooseShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>> = any,\n  ResponseShape extends MessageShape = z.core.$ZodLooseShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>> = any,\n> {\n  private requestDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private responseDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private url: string;\n  private workerId: string;\n\n  constructor(\n    params: RequestOptions<\n      RequestShape,\n      RequestResolve,\n      ResponseShape,\n      ResponseResolve\n    >,\n  ) {\n    this.requestDefinition = parseSchemaAndResolve(params.request);\n    this.responseDefinition = parseSchemaAndResolve(params.response);\n    this.url = params.url;\n    this.workerId = params.workerId;\n\n    if (params.workerId === undefined) {\n      throw new TypeError(\"Worker ID is required\");\n    }\n  }\n\n  async send(\n    values: MessageValuePayload<RequestShape>,\n    options?: { owner?: Account },\n  ): Promise<Loaded<CoMapSchema<ResponseShape>, ResponseResolve>> {\n    const as = options?.owner ?? Account.getMe();\n\n    const target = await loadWorkerAccountOrGroup(this.workerId, as);\n\n    const response = await fetch(this.url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(\n        await serializeMessagePayload({\n          type: \"request\",\n          schema: this.requestDefinition.schema,\n          resolve: true, // export only the envelope\n          value: values,\n          owner: as,\n          target,\n        }),\n      ),\n    });\n\n    if (!response.ok) {\n      if (response.headers.has(\"X-Jazz-Request-Error\")) {\n        const error = await response.json();\n        throw new JazzRequestError(error.message, error.code, error.details);\n      }\n\n      throw new JazzRequestError(\"Request failed\", response.status);\n    }\n\n    const responseBody = await response.json();\n\n    const responseParsed = z\n      .object({\n        type: z.literal(\"success\"),\n        payload: z.any(),\n      })\n      .safeParse(responseBody);\n\n    if (!responseParsed.success) {\n      throw new JazzRequestError(\n        \"Response payload is not valid\",\n        400,\n        responseParsed.error,\n      );\n    }\n\n    const data = await handleMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      request: responseParsed.data.payload,\n      loadAs: as,\n    });\n\n    return data.value as Loaded<CoMapSchema<ResponseShape>, ResponseResolve>;\n  }\n\n  handle = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    try {\n      const response = await this.executeHandleRequest(request, as, callback);\n      return response;\n    } catch (error) {\n      // Serialize the error to make it possible to handle it on the client side\n      if (isJazzRequestError(error)) {\n        return new Response(JSON.stringify(error.toJSON()), {\n          status: error.code,\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"X-Jazz-Request-Error\": \"true\",\n          },\n        });\n      }\n\n      throw error;\n    }\n  };\n\n  executeHandleRequest = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    const node = as.$jazz.localNode;\n    const body = await request.json();\n    const data = await handleMessagePayload({\n      type: \"request\",\n      schema: this.requestDefinition.schema,\n      resolve: this.requestDefinition.resolve,\n      request: body,\n      loadAs: as,\n    });\n\n    const tracking = node.syncManager.trackDirtyCoValues();\n\n    const responseValue = await callback(\n      data.value as Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      data.madeBy,\n    );\n\n    const responsePayload = await serializeMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      value: responseValue,\n      owner: as,\n      target: data.madeBy,\n    });\n\n    const responseBody = JSON.stringify({\n      type: \"success\",\n      payload: responsePayload,\n    });\n\n    // TODO: Detect the defer support from the environment\n    await Promise.all(\n      Array.from(tracking.done(), (id) => node.syncManager.waitForSync(id)),\n    );\n\n    return new Response(responseBody, {\n      status: 200,\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n    });\n  };\n\n  get requestSchema(): CoMapSchema<RequestShape> {\n    return this.requestDefinition.schema as CoMapSchema<RequestShape>;\n  }\n\n  get responseSchema() {\n    return this.responseDefinition.schema as CoMapSchema<ResponseShape>;\n  }\n}\n\n/**\n * Define a request route.\n *\n * @param params - The parameters for the request route.\n * @returns The request route.\n *\n * @see {@link https://jazz.tools/docs/react/server-side/http-requests}\n */\nexport function experimental_defineRequest<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n>(\n  params: RequestOptions<\n    RequestShape,\n    RequestResolve,\n    ResponseShape,\n    ResponseResolve\n  >,\n) {\n  return new HttpRoute(params);\n}\n\nfunction getCoValueCreatorAccountId(coValue: CoValueCore) {\n  if (!coValue.isAvailable()) {\n    throw new Error(\"Unable to load the request payload\");\n  }\n\n  const creatorSessionId = coValue.getValidSortedTransactions().at(0)\n    ?.txID.sessionID;\n\n  if (!creatorSessionId) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, creator session ID not found\",\n      400,\n    );\n  }\n\n  const accountId =\n    cojsonInternals.accountOrAgentIDfromSessionID(creatorSessionId);\n\n  if (!isCoValueId(accountId)) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, the creator is not a valid account\",\n      400,\n    );\n  }\n\n  return accountId;\n}\n\nexport class JazzRequestError {\n  public readonly isJazzRequestError = true;\n\n  constructor(\n    public readonly message: string,\n    public readonly code: number,\n    public readonly details?: unknown,\n  ) {}\n\n  toJSON() {\n    return { message: this.message, code: this.code, details: this.details };\n  }\n}\n\nexport function isJazzRequestError(error: unknown): error is JazzRequestError {\n  return (\n    error instanceof JazzRequestError ||\n    (typeof error === \"object\" &&\n      error !== null &&\n      \"isJazzRequestError\" in error &&\n      Boolean(error.isJazzRequestError))\n  );\n}\n\nfunction safeVerifySignature(\n  crypto: CryptoProvider,\n  signPayload: `hash_z${string}`,\n  signerID: `signer_z${string}`,\n  authToken: `signature_z${string}`,\n) {\n  try {\n    return crypto.verify(authToken, signPayload, signerID);\n  } catch (error) {\n    return false;\n  }\n}\n\nasync function loadWorkerAccountOrGroup(id: string, loadAs: Account) {\n  const node = loadAs.$jazz.localNode;\n  const coValue = await node.loadCoValueCore(id as `co_z${string}`);\n\n  if (!coValue.isAvailable()) {\n    throw new JazzRequestError(\"Worker account not found\", 400);\n  }\n\n  const content = coValue.getCurrentContent();\n\n  if (content instanceof RawAccount) {\n    const account = await Account.load(content.id, {\n      loadAs,\n    });\n    if (!account.$isLoaded) {\n      throw new JazzRequestError(\"Worker account not found\", 400);\n    }\n    return account;\n  }\n\n  const group = await Group.load(content.id, {\n    loadAs,\n  });\n\n  if (!group.$isLoaded) {\n    throw new JazzRequestError(\"Worker group not found\", 400);\n  }\n  return group;\n}\n\nfunction defaultGetToken(request: Request) {\n  const headerValue = request.headers.get(\"Authorization\");\n  if (headerValue?.startsWith(\"Jazz \")) {\n    return headerValue.replace(\"Jazz \", \"\");\n  }\n\n  if (headerValue) {\n    console.warn(\n      \"An Authorization header was found, but it did not start with 'Jazz '. If this is intentional, you can specify the location of the token using the `getToken` option.\",\n    );\n  }\n\n  return undefined;\n}\n\n/**\n * Authenticates a Request by verifying a signed authentication token.\n *\n * - If a token is not provided, the returned account is `undefined` and no error is returned.\n * - If a valid token is provided, the signer account is returned.\n * - If an invalid token is provided, an error is returned detailing the validation error, and the returned account is `undefined`.\n *\n * @see {@link generateAuthToken} for generating a token.\n *\n * Note: This function does not perform any authorization checks, it only verifies if - **when provided** - a token is valid. It is up to the caller to perform any additional authorization checks, if needed.\n *\n * @param request - The request to authenticate.\n * @param options - The options for the authentication.\n * @param options.expiration - The expiration time of the token in milliseconds, defaults to 1 minute.\n * @param options.loadAs - The account to load the token from, defaults to the current active account.\n * @param options.getToken - If specified, this function will be used to get the token from the request. By default the token is expected to be in the `Authorization` header in the form of `Jazz <token>`.\n * @returns The account if it is valid, otherwise an error.\n *\n * @example\n * ```ts\n * const { account, error } = await authenticateRequest(request);\n * if (error) {\n *   return new Response(JSON.stringify(error), { status: 401 });\n * }\n * ```\n */\nexport async function authenticateRequest(\n  request: Request,\n  options?: {\n    expiration?: number;\n    loadAs?: Account;\n    getToken?: (request: Request) => string | undefined | null;\n  },\n): Promise<\n  | {\n      account?: Account;\n      error?: never;\n    }\n  | {\n      account?: never;\n      error: { message: string; details?: unknown };\n    }\n> {\n  const token = options?.getToken?.(request) ?? defaultGetToken(request);\n\n  if (!token) {\n    return {};\n  }\n\n  const { account, error } = await parseAuthToken(token, {\n    loadAs: options?.loadAs,\n    expiration: options?.expiration ?? 1000 * 60,\n  });\n\n  if (error) {\n    return { error };\n  }\n\n  return { account, error };\n}\n\n/**\n * Generates an authentication token for a given account. This token can be used to authenticate a request. See {@link authenticateRequest} for more details.\n *\n * @param as - The account to generate the token for, defaults to the current active account.\n * @returns The authentication token.\n *\n * @example Make a fetch request with the token\n * ```ts\n * const token = generateAuthToken();\n * const response = await fetch(url, {\n *   headers: {\n *     Authorization: `Jazz ${token}`,\n *   },\n * });\n * ```\n */\n\nexport function generateAuthToken(as?: Account) {\n  const account = as ?? Account.getMe();\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerSecret = agent.currentSignerSecret();\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return `${authToken}~${account.$jazz.id}~${createdAt}`;\n}\n\nexport async function parseAuthToken(\n  authToken: string,\n  options?: { loadAs?: Account; expiration?: number },\n): Promise<\n  | { account: Account; error?: never }\n  | { account?: never; error: { message: string; details?: unknown } }\n> {\n  const expiration = options?.expiration ?? 1_000 * 60; // 1 minute\n\n  const parsed = z\n    .tuple([signatureSchema, coIdSchema, z.string().transform(Number)])\n    .safeParse(authToken.split(\"~\"));\n\n  if (!parsed.success) {\n    return {\n      error: {\n        message: \"Invalid token\",\n        details: parsed.error,\n      },\n    };\n  }\n\n  const [signature, id, createdAt] = parsed.data;\n\n  if (createdAt + expiration < Date.now()) {\n    return {\n      error: {\n        message: \"Token expired\",\n      },\n    };\n  }\n\n  const account = await Account.load(id, { loadAs: options?.loadAs });\n\n  if (!account.$isLoaded) {\n    return {\n      error: {\n        message: \"Failed to load account\",\n        details: { id },\n      },\n    };\n  }\n\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt: Number(createdAt),\n  });\n\n  const agentID = account.$jazz.raw.currentAgentID();\n  const signerID = crypto.getAgentSignerID(agentID);\n\n  if (!crypto.verify(signature, signPayload, signerID)) {\n    return {\n      error: {\n        message: \"Invalid signature\",\n      },\n    };\n  }\n\n  return {\n    account,\n  };\n}\n","export {\n  setCustomErrorReporter,\n  enableCaptureErrorCause,\n} from \"./subscribe/errorReporting.js\";\n\nexport {\n  logger,\n  LogLevel,\n} from \"cojson\";\n","export * from \"./exports.js\";\n\nexport {\n  cojsonInternals,\n  logger,\n  LogLevel,\n} from \"cojson\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE,WAAAA;AAAA,EAEA,qBAAAC;AAAA,OAEK;;;ACHA,SAAS,iBACd,aACA;AACA,MAAI,CAAC,YAAY,MAAM;AACrB,WAAO;AAAA,EACT;AAEA,MAAI,YAAY,KAAK,UAAU;AAC7B,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,WAAW;AAC9B,QAAI,YAAY,KAAK,UAAU;AAC7B,aAAO,GAAG,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,QAAQ;AAAA,IACnE;AAEA,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,UAAU;AAC7B,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,qBAAqB,cAAc;AACtD,UAAM,gBACJ,YAAY,KAAK,oBAAoB,aAAa,MAAM,GAAG,EAAE,CAAC;AAEhE,QAAI,eAAe;AACjB,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,YAAY,KAAK;AAC1B;;;ACEO,SAAS,mBACd,MAC0B;AAC1B,SAAO,CAAC,CAAC,QAAQ,mBAAmB,QAAQ,uBAAuB;AACrE;AAEO,SAAS,sBACd,cACA,SACA;AACA,MAAI,QAAQ,YAAY,MAAM,QAAQ,OAAO,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,sBAAsB,mBAAmB,cAAc,cAAc;AAC3E,QAAM,iBAAiB,mBAAmB,SAAS,cAAc;AAEjE,SAAO,wBAAwB;AACjC;;;AFtCO,IAAM,gBAAN,MAAM,eAAc;AAAA,EACzB,YACU,cACA,QACA,mBACR;AAHQ;AACA;AACA;AAiCV,SAAQ,cAAc;AAkBtB,6BAAoB,OAAO,gBAAkD;AAC3E,YAAM,kBAAkB,KAAK,kBAAkB;AAI/C,UAAI,CAAC,YAAY,MAAM;AACrB,YAAI,iBAAiB;AACnB,eAAK,kBAAkB,MAAM;AAC7B,gBAAM,KAAK,OAAO;AAAA,QACpB;AACA;AAAA,MACF;AAEA,UAAI,gBAAiB;AAErB,YAAM,mBAAmB,YAAY,KAClC;AAEH,UAAI,CAAC,iBAAiB,eAAe;AACnC,cAAM,KAAK,OAAO,WAAW;AAAA,MAC/B,OAAO;AACL,cAAM,KAAK,MAAM,WAAW;AAAA,MAC9B;AAAA,IACF;AAEA,iBAAQ,OAAO,gBAAkD;AAC/D,UAAI,CAAC,YAAY,MAAM;AACrB,cAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C;AAEA,YAAM,mBAAmB,YAAY,KAAK;AAC1C,UAAI,CAAC,mBAAmB,gBAAgB,GAAG;AACzC,cAAM,IAAI,MAAM,+BAA+B;AAAA,MACjD;AAEA,YAAM,cAAc;AAAA,QAClB,WAAW,iBAAiB;AAAA,QAC5B,eAAe,iBAAiB;AAAA,QAChC,YAAY,iBAAiB,kBACzB,WAAW,KAAK,iBAAiB,eAAe,IAChD;AAAA,QACJ,UAAU;AAAA,MACZ;AAEA,YAAM,KAAK,aAAa,WAAW;AAEnC,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B,iBAAiB,iBAAiB;AAAA,QACpC;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAEA,kBAAS,OAAO,gBAAkD;AAChE,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,kBAAkB,YAAY,aAChC,MAAM,KAAK,YAAY,UAAU,IACjC;AAEJ,YAAM,YAAY,MAAM,OAAO;AAAA,QAC7B,gBAAgB;AAAA,UACd,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B;AAAA,QACF;AAAA,MACF,CAAC;AAED,YAAM,iBAAiB,MAAMC,SAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,YAAM,WAAW,iBAAiB,WAAW;AAE7C,UAAI,UAAU;AACZ,uBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAAA,MACnD;AAEA,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B;AAAA,QACF;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EAjJG;AAAA;AAAA;AAAA;AAAA,EAKH,OAAO,kBACL,aACA,SACA;AACA,WAAO,QAAQ,IAAI;AAAA,MACjB,WAAW,YAAY;AAAA,MACvB,eAAe,YAAY;AAAA,MAC3B,YAAY,YAAY,kBACpB,WAAW,KAAK,YAAY,eAAe,IAC3C;AAAA,MACJ,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,eAAe,OAA2B;AACrD,UAAM,gBAAgB,IAAIC,mBAAkB;AAE5C,QAAI,CAAC,mBAAmB,MAAM,MAAM,cAAc,GAAG;AACnD;AAAA,IACF;AAEA,UAAM,eAAc;AAAA,MAClB,MAAM,KAAK;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAIA,iBAAiB,aAAiC;AAChD,QAAI,eACF,YAAY,QAAQ;AAGtB,WAAO,YAAY,YAAY,CAAC,UAAU;AACxC,YAAM,OAAQ,MAA2C,QAAQ;AAEjE,UAAI,CAAC,sBAAsB,cAAc,IAAI,KAAK,KAAK,aAAa;AAClE,aAAK,kBAAkB,EAAE,KAAK,CAAC;AAC/B,uBAAe;AACf,aAAK,cAAc;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AAkGF;;;AG/IO,IAAM,WAAN,MAAe;AAAA,EACpB,YACU,cACA,mBACR;AAFQ;AACA;AAGV,iBAAQ,OAAO,aAAqB;AAClC,YAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAC3D,YAAM,cAAc,cAAc,QAAQ;AAE1C,UAAI,CAAC,aAAa,WAAW;AAC3B,cAAM,IAAI,MAAM,gBAAgB;AAAA,MAClC;AAEA,YAAM,KAAK,aAAa;AAAA,QACtB,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,MAC7B,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,kBAAS,OAAO,aAAqB;AACnC,YAAM,gBAAgB,MAAM,KAAK,iBAAiB;AAClD,UAAI,cAAc,SAAS,QAAQ,GAAG;AACpC,cAAM,IAAI,MAAM,yBAAyB;AAAA,MAC3C;AAEA,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,qBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAEjD,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAED,YAAM,KAAK,mBAAmB,UAAU;AAAA,QACtC,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,MAAM,KAAK,YAAY,UAAU,IACjC;AAAA,MACN,CAAC;AAAA,IACH;AAuBA,4BAAmB,YAAY;AAC7B,aAAO,OAAO,KAAK,MAAM,KAAK,0BAA0B,CAAC;AAAA,IAC3D;AAAA,EAtFG;AAAA,EA+DH,MAAc,mBAAmB,UAAkB,MAAmB;AACpE,UAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAE3D,QAAI,cAAc,QAAQ,GAAG;AAC3B;AAAA,IACF;AAEA,kBAAc,QAAQ,IAAI;AAE1B,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAAA,EACpE;AAAA,EAEA,MAAc,4BAA4B;AACxC,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,qBAAqB,OAAO;AAElC,UAAM,gBAAgB,MAAM,QAAQ,IAAI,iBAAiB;AACzD,WAAO,gBAAgB,KAAK,MAAM,aAAa,IAAI,CAAC;AAAA,EACtD;AAKF;AAEO,SAAS,eAAe,UAAkB;AAC/C,SAAO,KAAK,QAAQ,EACjB,QAAQ,MAAM,GAAG,EACjB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG;AACvB;AAEA,eAAe,kBAAkB,SAAkB;AACjD,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,IAAI,2BAA2B;AAC7D,WAAO,UAAU,SAAS,OAAO,IAAI;AAAA,EACvC,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBAAkB,SAAkB,SAAiB;AAClE,QAAM,QAAQ,IAAI,6BAA6B,QAAQ,SAAS,CAAC;AACnE;AAEA,eAAe,qBAAqB,SAAkB;AACpD,QAAM,gBAAgB,MAAM,QAAQ,IAAI,0BAA0B;AAClE,SAAO,gBAAgB,cAAc,MAAM,GAAG,IAAI,CAAC;AACrD;AAKA,eAAe,qBAAqB,SAAkB;AACpD,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,gBAAgB,MAAM,qBAAqB,OAAO;AAExD,eAAW,YAAY,eAAe;AACpC,YAAM,YAAY,4BAA4B,QAAQ;AACtD,YAAM,cAAc,MAAM,QAAQ,IAAI,SAAS;AAC/C,UAAI,aAAa;AACf,cAAM,QAAQ;AAAA,UACZ,4BAA4B,eAAe,QAAQ,CAAC;AAAA,UACpD;AAAA,QACF;AACA,cAAM,QAAQ,OAAO,SAAS;AAAA,MAChC;AAAA,IACF;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AAEA,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,oBAAoB,MAAM,qBAAqB,OAAO;AAE5D,UAAM,gBAA6C,CAAC;AACpD,UAAM,eAAyB,CAAC,0BAA0B;AAE1D,eAAW,YAAY,mBAAmB;AACxC,YAAM,MAAM,4BAA4B,eAAe,QAAQ,CAAC;AAChE,YAAM,cAAc,MAAM,QAAQ,IAAI,GAAG;AACzC,UAAI,aAAa;AACf,sBAAc,QAAQ,IAAI,KAAK,MAAM,WAAW;AAChD,qBAAa,KAAK,GAAG;AAAA,MACvB;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAElE,eAAW,OAAO,cAAc;AAC9B,YAAM,QAAQ,OAAO,GAAG;AAAA,IAC1B;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AACF;;;AC5LA,YAAY,WAAW;AACvB,SAAS,yBAAyB;AAClC,SAAyB,uBAAuB;AAoBzC,IAAM,iBAAN,MAAqB;AAAA,EAG1B,YACU,QACA,cACA,UACA,mBACD,UACP;AALQ;AACA;AACA;AACA;AACD;AAPT,sBAAqB;AAUrB,iBAAQ,OAAO,eAAuB;AACpC,YAAM,EAAE,QAAQ,aAAa,IAAI;AAEjC,UAAI;AAEJ,UAAI;AACF,qBAAmB,wBAAkB,YAAY,KAAK,QAAQ;AAAA,MAChE,SAAS,GAAG;AACV,cAAM,IAAI,MAAM,oBAAoB;AAAA,MACtC;AAEA,YAAM,gBAAgB,OAAO,0BAA0B,UAAU;AAEjE,YAAM,YAAY,gBAAgB;AAAA,QAChC,gBAAgB,mCAAmC,eAAe,MAAM;AAAA,QACxE;AAAA,MACF;AAEA,YAAM,aAAa;AAAA,QACjB;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,kBAAS,OAAO,SAAkB;AAChC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,aAAa,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAE1E,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,YAAY,YAAY;AAAA,QACxB,eAAe,YAAY;AAAA,QAC3B,UAAU;AAAA,MACZ,CAAC;AAED,UAAI,MAAM,KAAK,GAAG;AAChB,cAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,UAC9D,SAAS;AAAA,YACP,SAAS;AAAA,UACX;AAAA,QACF,CAAC;AAED,uBAAe,QAAQ,MAAM,IAAI,QAAQ,IAAI;AAAA,MAC/C;AAEA,aAAO;AAAA,IACT;AAEA,8BAAqB,OAAO,YAAoB,SAAiB;AAC/D,YAAM,aAAmB,wBAAkB,YAAY,KAAK,QAAQ;AACpE,YAAM,gBAAgB,KAAK,OAAO,0BAA0B,UAAU;AACtE,YAAM,YAAY,MAAM,KAAK,SAAS,eAAe,EAAE,KAAK,CAAC;AAE7D,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,aAAO;AAAA,IACT;AAEA,uCAA8B,YAAY;AACxC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,aAAO,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAAA,IAChE;AAEA,oCAA2B,MAAM;AAC/B,aAAO,kBAAkB,KAAK,OAAO,oBAAoB,GAAG,KAAK,QAAQ;AAAA,IAC3E;AAEA,wCAA+B,YAAY;AACzC,YAAM,aAAa,MAAM,KAAK,4BAA4B;AAC1D,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,qBAAY,oBAAI,IAAgB;AAChC,qBAAY,CAAC,aAAyB;AACpC,WAAK,UAAU,IAAI,QAAQ;AAE3B,aAAO,MAAM;AACX,aAAK,UAAU,OAAO,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,EA3GG;AAAA,EA6GH,SAAS;AACP,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS;AAAA,IACX;AAAA,EACF;AACF;;;ACjJA,SAAyC,mBAAAC,wBAAuB;AAKzD,SAAS,iBACd,OACA,MACA,SACA,WACQ;AACR,QAAM,cAAc,MAAM,MAAM,IAAI;AACpC,MAAI,iBAAiB;AAErB,SAAO,eAAe,SAAS,OAAO,QAAQ,SAAS,gBAAgB;AACrE,qBAAiB,eAAe,SAAS,EAAE;AAAA,EAC7C;AAEA,QAAM,EAAE,SAAS,KAAK,IAAI,eAAe,SAAS;AAElD,MAAI,QAAQ,SAAS,WAAW,MAAM,SAAS,WAAW;AACxD,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,QAAM,QAAQC,iBAAgB,YAAY,eAAe,kBAAkB,CAAC;AAC5E,QAAM,eAAe,MAAM,aAAa,IAAI;AAE5C,SAAO,GAAG,OAAO,YAAY,YAAY,YAAY,MAAM,EAAE,GAC3D,MAAM,MAAM,EACd,IAAI,YAAY;AAClB;AAGO,SAAS,gBAAgB,WAMlB;AACZ,QAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,QAAM,QAAQ,IAAI,KAAK,MAAM,GAAG;AAEhC,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,UAAU;AAC7C,QAAI,MAAM,WAAW,GAAG;AACtB,kBAAY,MAAM,CAAC;AACnB,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB,WAAW,MAAM,WAAW,GAAG;AAC7B,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB;AAEA,QAAI,CAAC,WAAW,CAAC,cAAc;AAC7B,aAAO;AAAA,IACT;AACA,WAAO,EAAE,SAAS,cAAc,UAAU;AAAA,EAC5C;AACF;AAGO,SAAS,kBAAkD;AAAA,EAChE;AAAA,EACA,KAAK,QAAQ,MAAM;AAAA,EACnB;AAAA,EACA;AACF,GAYE;AACA,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,SAAS,gBAAgB,SAAS;AAExC,QAAI,UAAU,OAAO,cAAc,cAAc;AAC/C,SAAG,aAAa,OAAO,SAAS,OAAO,cAAc,mBAAmB,EACrE,KAAK,MAAM;AACV,gBAAQ,MAAM;AAAA,MAChB,CAAC,EACA,MAAM,MAAM;AAAA,IACjB,OAAO;AACL,cAAQ,MAAS;AAAA,IACnB;AAAA,EACF,CAAC;AACH;;;AChGA;AAAA,EAIE;AAAA,EAEA,mBAAAC;AAAA,OACK;AACP,OAAO,OAAO;AA0Fd,SAAS,sBACP,QACA,OACA,OACA,YACA,MACwB;AACxB,QAAM,QAAQ,MAAM,OAAO,EAAE,MAAM,CAAC;AAEpC,MAAI,SAAS,WAAW;AACtB,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC,OAAO;AACL,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC;AAGA,SAAO,OAAO,OAAO,SAAS,CAAC,GAAG,KAAK;AACzC;AAMA,eAAe,wBAAwB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,KAAK,SAAS,QAAQ,MAAM;AAClC,QAAM,OAAO,GAAG,MAAM;AACtB,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,WAAW,MAAM,gBAAgB;AACvC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,WAAW,sBAAsB,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAEtE,QAAM,gBACH,MAAM,cAAc,QAAQ,SAAS,MAAM,IAAI;AAAA,IAC9C;AAAA,IACA,QAAQ;AAAA,IACR,sBAAsB;AAAA,EACxB,CAAC,KAAM,CAAC;AAEV,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO;AAAA,IACL;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,IAAM,aAAa,EAAE,OAAwB,WAAW;AACxD,IAAM,kBAAkB,EAAE;AAAA,EACxB,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,aAAa;AACxE;AAEA,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC;AAAA,EAC/B,IAAI;AAAA,EACJ,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW;AAAA,EACX,UAAU,EAAE;AAAA,IACV,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,UAAU;AAAA,EACrE;AACF,CAAC;AAOD,eAAe,qBAAqB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,SAAS,KAAK;AAEpB,QAAM,gBAAgB,cAAc,UAAU,OAAO;AAErD,MAAI,CAAC,cAAc,SAAS;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,cAAc,cAAc;AAElC,MAAI,SAAS,WAAW;AACtB,UAAM,OAAO,MAAM,KAAK,gBAAgB,YAAY,IAAI,QAAW,IAAI;AAGvE,QAAI,KAAK,YAAY,GAAG;AACtB,YAAM,UAAU,KAAK,kBAAkB;AAEvC,UAAI,QAAQ,IAAI,UAAU,MAAM,OAAO,MAAM,IAAI;AAC/C,cAAM,IAAI,iBAAiB,sCAAsC,GAAG;AAAA,MACtE;AAAA,IACF;AAGA,QAAI,YAAY,YAAY,MAAO,KAAK,KAAK,IAAI,GAAG;AAClD,YAAM,IAAI,iBAAiB,mCAAmC,GAAG;AAAA,IACnE;AAAA,EACF;AAGA,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,eAAe,YAAY;AAAA,IAC3B,IAAI,YAAY;AAAA,IAChB,WAAW,YAAY;AAAA,IACvB,UAAU,YAAY;AAAA,EACxB,CAAC;AAED,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,GACA;AACA,UAAM,IAAI,iBAAiB,qBAAqB,GAAG;AAAA,EACrD;AAEA,MAAI,gBACF,YAAY;AAEd,MAAI,SAAS,WAAW;AACtB,UAAM,iBAAiB,cAAc;AAAA,MACnC,CAAC,UAAU,MAAM,OAAO,YAAY;AAAA,IACtC;AAEA,QAAI,kBAAkB,eAAe,QAAQ;AAC3C,YAAM,cAAcC,iBAAgB;AAAA,QAClC,eAAe;AAAA,QACf;AAAA,MACF;AACA,kBAAY,IAAI,YAAY,EAAE;AAC9B,sBAAgB,cAAc;AAAA,QAAO,CAAC,UACpC,YAAY,IAAI,MAAM,EAAE;AAAA,MAC1B;AAAA,IACF,OAAO;AACL,sBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,sBAAoB,eAAe,MAAM;AAEzC,QAAM,UAAU,MAAM,KAAK,gBAAgB,YAAY,EAAE;AACzD,QAAM,YAAY,2BAA2B,OAAO;AAEpD,QAAM,SAAS,MAAM,QAAQ,KAAK,WAAW;AAAA,IAC3C;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,WAAW;AACrB,UAAM,IAAI,iBAAiB,6BAA6B,GAAG;AAAA,EAC7D;AAEA,QAAM,WAAW;AAAA,IACf;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,YAAyB,UAAU,YAAY,IAAI;AAAA,IACrE;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,mBAAmB,GAAG;AAAA,EACnD;AAEA,MAAI,SAAS,WAAW;AACtB,UAAM,MAAM,IAAI,IAAI,YAAY,OAAO,MAAM,EAAE;AAAA,EACjD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,sBAGP,SAAwC;AACxC,MAAI,YAAY,SAAS;AACvB,WAAO;AAAA;AAAA,MAEL,QAAQ,aAAa,QAAQ,MAAM;AAAA,MACnC,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,aAAa,OAAO;AAAA,IAC5B,SAAS;AAAA,EACX;AACF;AAEO,IAAM,YAAN,MAKL;AAAA,EAYA,YACE,QAMA;AAyEF,kBAAS,OACP,SACA,IACA,aAMsB;AACtB,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,qBAAqB,SAAS,IAAI,QAAQ;AACtE,eAAO;AAAA,MACT,SAAS,OAAO;AAEd,YAAI,mBAAmB,KAAK,GAAG;AAC7B,iBAAO,IAAI,SAAS,KAAK,UAAU,MAAM,OAAO,CAAC,GAAG;AAAA,YAClD,QAAQ,MAAM;AAAA,YACd,SAAS;AAAA,cACP,gBAAgB;AAAA,cAChB,wBAAwB;AAAA,YAC1B;AAAA,UACF,CAAC;AAAA,QACH;AAEA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,gCAAuB,OACrB,SACA,IACA,aAMsB;AACtB,YAAM,OAAO,GAAG,MAAM;AACtB,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,OAAO,MAAM,qBAAqB;AAAA,QACtC,MAAM;AAAA,QACN,QAAQ,KAAK,kBAAkB;AAAA,QAC/B,SAAS,KAAK,kBAAkB;AAAA,QAChC,SAAS;AAAA,QACT,QAAQ;AAAA,MACV,CAAC;AAED,YAAM,WAAW,KAAK,YAAY,mBAAmB;AAErD,YAAM,gBAAgB,MAAM;AAAA,QAC1B,KAAK;AAAA,QACL,KAAK;AAAA,MACP;AAEA,YAAM,kBAAkB,MAAM,wBAAwB;AAAA,QACpD,MAAM;AAAA,QACN,QAAQ,KAAK,mBAAmB;AAAA,QAChC,SAAS,KAAK,mBAAmB;AAAA,QACjC,OAAO;AAAA,QACP,OAAO;AAAA,QACP,QAAQ,KAAK;AAAA,MACf,CAAC;AAED,YAAM,eAAe,KAAK,UAAU;AAAA,QAClC,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAGD,YAAM,QAAQ;AAAA,QACZ,MAAM,KAAK,SAAS,KAAK,GAAG,CAAC,OAAO,KAAK,YAAY,YAAY,EAAE,CAAC;AAAA,MACtE;AAEA,aAAO,IAAI,SAAS,cAAc;AAAA,QAChC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,IACH;AAzJE,SAAK,oBAAoB,sBAAsB,OAAO,OAAO;AAC7D,SAAK,qBAAqB,sBAAsB,OAAO,QAAQ;AAC/D,SAAK,MAAM,OAAO;AAClB,SAAK,WAAW,OAAO;AAEvB,QAAI,OAAO,aAAa,QAAW;AACjC,YAAM,IAAI,UAAU,uBAAuB;AAAA,IAC7C;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,QACA,SAC8D;AAC9D,UAAM,KAAK,SAAS,SAAS,QAAQ,MAAM;AAE3C,UAAM,SAAS,MAAM,yBAAyB,KAAK,UAAU,EAAE;AAE/D,UAAM,WAAW,MAAM,MAAM,KAAK,KAAK;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK;AAAA,QACT,MAAM,wBAAwB;AAAA,UAC5B,MAAM;AAAA,UACN,QAAQ,KAAK,kBAAkB;AAAA,UAC/B,SAAS;AAAA;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,SAAS,QAAQ,IAAI,sBAAsB,GAAG;AAChD,cAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,cAAM,IAAI,iBAAiB,MAAM,SAAS,MAAM,MAAM,MAAM,OAAO;AAAA,MACrE;AAEA,YAAM,IAAI,iBAAiB,kBAAkB,SAAS,MAAM;AAAA,IAC9D;AAEA,UAAM,eAAe,MAAM,SAAS,KAAK;AAEzC,UAAM,iBAAiB,EACpB,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,SAAS;AAAA,MACzB,SAAS,EAAE,IAAI;AAAA,IACjB,CAAC,EACA,UAAU,YAAY;AAEzB,QAAI,CAAC,eAAe,SAAS;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,qBAAqB;AAAA,MACtC,MAAM;AAAA,MACN,QAAQ,KAAK,mBAAmB;AAAA,MAChC,SAAS,KAAK,mBAAmB;AAAA,MACjC,SAAS,eAAe,KAAK;AAAA,MAC7B,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,KAAK;AAAA,EACd;AAAA,EAqFA,IAAI,gBAA2C;AAC7C,WAAO,KAAK,kBAAkB;AAAA,EAChC;AAAA,EAEA,IAAI,iBAAiB;AACnB,WAAO,KAAK,mBAAmB;AAAA,EACjC;AACF;AAUO,SAAS,2BAMd,QAMA;AACA,SAAO,IAAI,UAAU,MAAM;AAC7B;AAEA,SAAS,2BAA2B,SAAsB;AACxD,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAEA,QAAM,mBAAmB,QAAQ,2BAA2B,EAAE,GAAG,CAAC,GAC9D,KAAK;AAET,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YACJA,iBAAgB,8BAA8B,gBAAgB;AAEhE,MAAI,CAAC,YAAY,SAAS,GAAG;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,IAAM,mBAAN,MAAuB;AAAA,EAG5B,YACkB,SACA,MACA,SAChB;AAHgB;AACA;AACA;AALlB,SAAgB,qBAAqB;AAAA,EAMlC;AAAA,EAEH,SAAS;AACP,WAAO,EAAE,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,SAAS,KAAK,QAAQ;AAAA,EACzE;AACF;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SACE,iBAAiB,oBAChB,OAAO,UAAU,YAChB,UAAU,QACV,wBAAwB,SACxB,QAAQ,MAAM,kBAAkB;AAEtC;AAEA,SAAS,oBACP,QACA,aACA,UACA,WACA;AACA,MAAI;AACF,WAAO,OAAO,OAAO,WAAW,aAAa,QAAQ;AAAA,EACvD,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,yBAAyB,IAAY,QAAiB;AACnE,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,UAAU,MAAM,KAAK,gBAAgB,EAAqB;AAEhE,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,EAC5D;AAEA,QAAM,UAAU,QAAQ,kBAAkB;AAE1C,MAAI,mBAAmB,YAAY;AACjC,UAAM,UAAU,MAAM,QAAQ,KAAK,QAAQ,IAAI;AAAA,MAC7C;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ,WAAW;AACtB,YAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,MAAM,MAAM,KAAK,QAAQ,IAAI;AAAA,IACzC;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,0BAA0B,GAAG;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,SAAkB;AACzC,QAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;AACvD,MAAI,aAAa,WAAW,OAAO,GAAG;AACpC,WAAO,YAAY,QAAQ,SAAS,EAAE;AAAA,EACxC;AAEA,MAAI,aAAa;AACf,YAAQ;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AA4BA,eAAsB,oBACpB,SACA,SAcA;AACA,QAAM,QAAQ,SAAS,WAAW,OAAO,KAAK,gBAAgB,OAAO;AAErE,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,EAAE,SAAS,MAAM,IAAI,MAAM,eAAe,OAAO;AAAA,IACrD,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS,cAAc,MAAO;AAAA,EAC5C,CAAC;AAED,MAAI,OAAO;AACT,WAAO,EAAE,MAAM;AAAA,EACjB;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAmBO,SAAS,kBAAkB,IAAc;AAC9C,QAAM,UAAU,MAAM,QAAQ,MAAM;AACpC,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO,GAAG,SAAS,IAAI,QAAQ,MAAM,EAAE,IAAI,SAAS;AACtD;AAEA,eAAsB,eACpB,WACA,SAIA;AACA,QAAM,aAAa,SAAS,cAAc,MAAQ;AAElD,QAAM,SAAS,EACZ,MAAM,CAAC,iBAAiB,YAAY,EAAE,OAAO,EAAE,UAAU,MAAM,CAAC,CAAC,EACjE,UAAU,UAAU,MAAM,GAAG,CAAC;AAEjC,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,OAAO;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,WAAW,IAAI,SAAS,IAAI,OAAO;AAE1C,MAAI,YAAY,aAAa,KAAK,IAAI,GAAG;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,QAAQ,KAAK,IAAI,EAAE,QAAQ,SAAS,OAAO,CAAC;AAElE,MAAI,CAAC,QAAQ,WAAW;AACtB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,EAAE,GAAG;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAGpB,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB,WAAW,OAAO,SAAS;AAAA,EAC7B,CAAC;AAED,QAAM,UAAU,QAAQ,MAAM,IAAI,eAAe;AACjD,QAAM,WAAW,OAAO,iBAAiB,OAAO;AAEhD,MAAI,CAAC,OAAO,OAAO,WAAW,aAAa,QAAQ,GAAG;AACpD,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,EACF;AACF;;;ACtzBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA;AAAA,EACE;AAAA,EACA;AAAA,OACK;;;ACNP;AAAA,EACE,mBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,YAAAC;AAAA,OACK;","names":["Account","AuthSecretStorage","Account","AuthSecretStorage","cojsonInternals","cojsonInternals","cojsonInternals","cojsonInternals","cojsonInternals","logger","LogLevel"]}
+{"version":3,"sources":["../src/tools/auth/clerk/index.ts","../src/tools/auth/clerk/getClerkUsername.ts","../src/tools/auth/clerk/types.ts","../src/tools/auth/DemoAuth.ts","../src/tools/auth/PassphraseAuth.ts","../src/tools/implementation/invites.ts","../src/tools/coValues/request.ts","../src/tools/config.ts","../src/tools/index.ts"],"sourcesContent":["import {\n  Account,\n  AuthCredentials,\n  AuthSecretStorage,\n  AuthenticateAccountFunction,\n} from \"jazz-tools\";\nimport { getClerkUsername } from \"./getClerkUsername.js\";\nimport {\n  ClerkCredentials,\n  MinimalClerkClient,\n  isClerkAuthStateEqual,\n  isClerkCredentials,\n} from \"./types.js\";\n\nexport type { MinimalClerkClient };\nexport { isClerkCredentials };\n\nexport class JazzClerkAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private logOut: () => Promise<void> | void,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  /**\n   * Loads the Jazz auth data from the Clerk user and sets it in the auth secret storage.\n   */\n  static loadClerkAuthData(\n    credentials: ClerkCredentials,\n    storage: AuthSecretStorage,\n  ) {\n    return storage.set({\n      accountID: credentials.jazzAccountID,\n      accountSecret: credentials.jazzAccountSecret,\n      secretSeed: credentials.jazzAccountSeed\n        ? Uint8Array.from(credentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    });\n  }\n\n  static async initializeAuth(clerk: MinimalClerkClient) {\n    const secretStorage = new AuthSecretStorage();\n\n    if (!isClerkCredentials(clerk.user?.unsafeMetadata)) {\n      return;\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      clerk.user.unsafeMetadata,\n      secretStorage,\n    );\n  }\n\n  private isFirstCall = true;\n\n  registerListener(clerkClient: MinimalClerkClient) {\n    let previousUser: MinimalClerkClient[\"user\"] | null =\n      clerkClient.user ?? null;\n\n    // Need to use addListener because the clerk user object is not updated when the user logs in\n    return clerkClient.addListener((event) => {\n      const user = (event as Pick<MinimalClerkClient, \"user\">).user ?? null;\n\n      if (!isClerkAuthStateEqual(previousUser, user) || this.isFirstCall) {\n        this.onClerkUserChange({ user });\n        previousUser = user;\n        this.isFirstCall = false;\n      }\n    });\n  }\n\n  onClerkUserChange = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    const isAuthenticated = this.authSecretStorage.isAuthenticated;\n\n    // LogOut is driven by Clerk. The framework adapters will need to pass `logOutReplacement` to the `JazzProvider`\n    // to make the logOut work correctly.\n    if (!clerkClient.user) {\n      if (isAuthenticated) {\n        this.authSecretStorage.clear();\n        await this.logOut();\n      }\n      return;\n    }\n\n    if (isAuthenticated) return;\n\n    const clerkCredentials = clerkClient.user\n      .unsafeMetadata as ClerkCredentials;\n\n    if (!clerkCredentials.jazzAccountID) {\n      await this.signIn(clerkClient);\n    } else {\n      await this.logIn(clerkClient);\n    }\n  };\n\n  logIn = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    if (!clerkClient.user) {\n      throw new Error(\"Not signed in on Clerk\");\n    }\n\n    const clerkCredentials = clerkClient.user.unsafeMetadata;\n    if (!isClerkCredentials(clerkCredentials)) {\n      throw new Error(\"No credentials found on Clerk\");\n    }\n\n    const credentials = {\n      accountID: clerkCredentials.jazzAccountID,\n      accountSecret: clerkCredentials.jazzAccountSecret,\n      secretSeed: clerkCredentials.jazzAccountSeed\n        ? Uint8Array.from(clerkCredentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    } satisfies AuthCredentials;\n\n    await this.authenticate(credentials);\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed: clerkCredentials.jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n\n  signIn = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const jazzAccountSeed = credentials.secretSeed\n      ? Array.from(credentials.secretSeed)\n      : undefined;\n\n    await clerkClient.user?.update({\n      unsafeMetadata: {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed,\n      } satisfies ClerkCredentials,\n    });\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    const username = getClerkUsername(clerkClient);\n\n    if (username) {\n      currentAccount.profile.$jazz.set(\"name\", username);\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n}\n\n// eslint-disable-next-line @typescript-eslint/no-namespace\nexport namespace BrowserClerkAuth {\n  export interface Driver {\n    onError: (error: string | Error) => void;\n  }\n}\n","import type { MinimalClerkClient } from \"./types.js\";\n\nexport function getClerkUsername(\n  clerkClient: Pick<MinimalClerkClient, \"user\">,\n) {\n  if (!clerkClient.user) {\n    return null;\n  }\n\n  if (clerkClient.user.fullName) {\n    return clerkClient.user.fullName;\n  }\n\n  if (clerkClient.user.firstName) {\n    if (clerkClient.user.lastName) {\n      return `${clerkClient.user.firstName} ${clerkClient.user.lastName}`;\n    }\n\n    return clerkClient.user.firstName;\n  }\n\n  if (clerkClient.user.username) {\n    return clerkClient.user.username;\n  }\n\n  if (clerkClient.user.primaryEmailAddress?.emailAddress) {\n    const emailUsername =\n      clerkClient.user.primaryEmailAddress.emailAddress.split(\"@\")[0];\n\n    if (emailUsername) {\n      return emailUsername;\n    }\n  }\n\n  return clerkClient.user.id;\n}\n","import { AgentSecret } from \"cojson\";\nimport { Account, ID } from \"jazz-tools\";\n\nexport type MinimalClerkClient = {\n  user:\n    | {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        unsafeMetadata: Record<string, any>;\n        fullName: string | null;\n        username: string | null;\n        firstName: string | null;\n        lastName: string | null;\n        id: string;\n        primaryEmailAddress: {\n          emailAddress: string | null;\n        } | null;\n        update: (args: {\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          unsafeMetadata: Record<string, any>;\n        }) => Promise<unknown>;\n      }\n    | null\n    | undefined;\n  signOut: () => Promise<void>;\n  addListener: (listener: (data: unknown) => void) => void;\n};\n\nexport type ClerkCredentials = {\n  jazzAccountID: ID<Account>;\n  jazzAccountSecret: AgentSecret;\n  jazzAccountSeed?: number[];\n};\n\n/**\n * Checks if the Clerk user metadata contains the necessary credentials for Jazz auth.\n * **Note**: It does not validate the credentials, only checks if the necessary fields are present in the metadata object.\n */\nexport function isClerkCredentials(\n  data: NonNullable<MinimalClerkClient[\"user\"]>[\"unsafeMetadata\"] | undefined,\n): data is ClerkCredentials {\n  return !!data && \"jazzAccountID\" in data && \"jazzAccountSecret\" in data;\n}\n\nexport function isClerkAuthStateEqual(\n  previousUser: MinimalClerkClient[\"user\"] | null | undefined,\n  newUser: MinimalClerkClient[\"user\"] | null | undefined,\n) {\n  if (Boolean(previousUser) !== Boolean(newUser)) {\n    return false;\n  }\n\n  const previousCredentials = isClerkCredentials(previousUser?.unsafeMetadata);\n  const newCredentials = isClerkCredentials(newUser?.unsafeMetadata);\n\n  return previousCredentials === newCredentials;\n}\n","import { AgentSecret } from \"cojson\";\nimport { Account, ID } from \"../internal.js\";\nimport { AuthenticateAccountFunction } from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\nimport { KvStore, KvStoreContext } from \"./KvStoreContext.js\";\n\ntype StorageData = {\n  accountID: ID<Account>;\n  accountSecret: AgentSecret;\n  secretSeed?: number[];\n};\n\n/**\n * `DemoAuth` provides a `JazzAuth` object for demo authentication.\n *\n * Demo authentication is useful for quickly testing your app, as it allows you to create new accounts and log in as existing ones.\n *\n * ```\n * import { DemoAuth } from \"jazz-tools\";\n *\n * const auth = new DemoAuth(jazzContext.authenticate, new AuthSecretStorage());\n * ```\n *\n * @category Auth Providers\n */\nexport class DemoAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  logIn = async (username: string) => {\n    const existingUsers = await this.getExisitingUsersWithData();\n    const storageData = existingUsers[username];\n\n    if (!storageData?.accountID) {\n      throw new Error(\"User not found\");\n    }\n\n    await this.authenticate({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n      secretSeed: storageData.secretSeed\n        ? new Uint8Array(storageData.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n  };\n\n  signUp = async (username: string) => {\n    const existingUsers = await this.getExistingUsers();\n    if (existingUsers.includes(username)) {\n      throw new Error(\"User already registered\");\n    }\n\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    currentAccount.profile.$jazz.set(\"name\", username);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? new Uint8Array(credentials.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n\n    await this.addToExistingUsers(username, {\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? Array.from(credentials.secretSeed)\n        : undefined,\n    });\n  };\n\n  private async addToExistingUsers(username: string, data: StorageData) {\n    const existingUsers = await this.getExisitingUsersWithData();\n\n    if (existingUsers[username]) {\n      return;\n    }\n\n    existingUsers[username] = data;\n\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n  }\n\n  private async getExisitingUsersWithData() {\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await migrateExistingUsers(kvStore);\n\n    const existingUsers = await kvStore.get(\"demo-auth-users\");\n    return existingUsers ? JSON.parse(existingUsers) : {};\n  }\n\n  getExistingUsers = async () => {\n    return Object.keys(await this.getExisitingUsersWithData());\n  };\n}\n\nexport function encodeUsername(username: string) {\n  return btoa(username)\n    .replace(/=/g, \"-\")\n    .replace(/\\+/g, \"_\")\n    .replace(/\\//g, \".\");\n}\n\nasync function getStorageVersion(kvStore: KvStore) {\n  try {\n    const version = await kvStore.get(\"demo-auth-storage-version\");\n    return version ? parseInt(version) : 1;\n  } catch (error) {\n    return 1;\n  }\n}\n\nasync function setStorageVersion(kvStore: KvStore, version: number) {\n  await kvStore.set(\"demo-auth-storage-version\", version.toString());\n}\n\nasync function getExistingUsersList(kvStore: KvStore) {\n  const existingUsers = await kvStore.get(\"demo-auth-existing-users\");\n  return existingUsers ? existingUsers.split(\",\") : [];\n}\n\n/**\n * Migrates existing users keys to work with any storage.\n */\nasync function migrateExistingUsers(kvStore: KvStore) {\n  if ((await getStorageVersion(kvStore)) < 2) {\n    const existingUsers = await getExistingUsersList(kvStore);\n\n    for (const username of existingUsers) {\n      const legacyKey = `demo-auth-existing-users-${username}`;\n      const storageData = await kvStore.get(legacyKey);\n      if (storageData) {\n        await kvStore.set(\n          `demo-auth-existing-users-${encodeUsername(username)}`,\n          storageData,\n        );\n        await kvStore.delete(legacyKey);\n      }\n    }\n\n    await setStorageVersion(kvStore, 2);\n  }\n\n  if ((await getStorageVersion(kvStore)) < 3) {\n    const existingUsersList = await getExistingUsersList(kvStore);\n\n    const existingUsers: Record<string, StorageData> = {};\n    const keysToDelete: string[] = [\"demo-auth-existing-users\"];\n\n    for (const username of existingUsersList) {\n      const key = `demo-auth-existing-users-${encodeUsername(username)}`;\n      const storageData = await kvStore.get(key);\n      if (storageData) {\n        existingUsers[username] = JSON.parse(storageData);\n        keysToDelete.push(key);\n      }\n    }\n\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n\n    for (const key of keysToDelete) {\n      await kvStore.delete(key);\n    }\n\n    await setStorageVersion(kvStore, 3);\n  }\n}\n","import * as bip39 from \"@scure/bip39\";\nimport { entropyToMnemonic } from \"@scure/bip39\";\nimport { CryptoProvider, cojsonInternals } from \"cojson\";\nimport type { ID } from \"../internal.js\";\nimport { Account } from \"../internal.js\";\nimport type {\n  AuthenticateAccountFunction,\n  RegisterAccountFunction,\n} from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\n\n/**\n * `PassphraseAuth` provides a `JazzAuth` object for passphrase authentication.\n *\n * ```ts\n * import { PassphraseAuth } from \"jazz-tools\";\n *\n * const auth = new PassphraseAuth(crypto, jazzContext.authenticate, new AuthSecretStorage(), wordlist);\n * ```\n *\n * @category Auth Providers\n */\nexport class PassphraseAuth {\n  passphrase: string = \"\";\n\n  constructor(\n    private crypto: CryptoProvider,\n    private authenticate: AuthenticateAccountFunction,\n    private register: RegisterAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n    public wordlist: string[],\n  ) {}\n\n  logIn = async (passphrase: string) => {\n    const { crypto, authenticate } = this;\n\n    let secretSeed;\n\n    try {\n      secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    } catch (e) {\n      throw new Error(\"Invalid passphrase\");\n    }\n\n    const accountSecret = crypto.agentSecretFromSecretSeed(secretSeed);\n\n    const accountID = cojsonInternals.idforHeader(\n      cojsonInternals.accountHeaderForInitialAgentSecret(accountSecret, crypto),\n      crypto,\n    ) as ID<Account>;\n\n    await authenticate({\n      accountID,\n      accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  signUp = async (name?: string) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const passphrase = entropyToMnemonic(credentials.secretSeed, this.wordlist);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      secretSeed: credentials.secretSeed,\n      accountSecret: credentials.accountSecret,\n      provider: \"passphrase\",\n    });\n\n    if (name?.trim()) {\n      const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n        resolve: {\n          profile: true,\n        },\n      });\n\n      currentAccount.profile.$jazz.set(\"name\", name);\n    }\n\n    return passphrase;\n  };\n\n  registerNewAccount = async (passphrase: string, name: string) => {\n    const secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    const accountSecret = this.crypto.agentSecretFromSecretSeed(secretSeed);\n    const accountID = await this.register(accountSecret, { name });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    return accountID;\n  };\n\n  getCurrentAccountPassphrase = async () => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    return entropyToMnemonic(credentials.secretSeed, this.wordlist);\n  };\n\n  generateRandomPassphrase = () => {\n    return entropyToMnemonic(this.crypto.newRandomSecretSeed(), this.wordlist);\n  };\n\n  loadCurrentAccountPassphrase = async () => {\n    const passphrase = await this.getCurrentAccountPassphrase();\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  listeners = new Set<() => void>();\n  subscribe = (callback: () => void) => {\n    this.listeners.add(callback);\n\n    return () => {\n      this.listeners.delete(callback);\n    };\n  };\n\n  notify() {\n    for (const listener of this.listeners) {\n      listener();\n    }\n  }\n}\n","import { AccountRole, type InviteSecret, cojsonInternals } from \"cojson\";\nimport { Account } from \"../coValues/account.js\";\nimport type { CoValue, CoValueClassOrSchema } from \"../internal.js\";\n\n/** @category Invite Links */\nexport function createInviteLink<C extends CoValue>(\n  value: C,\n  role: AccountRole,\n  baseURL: string,\n  valueHint?: string,\n): string {\n  const coValueCore = value.$jazz.raw.core;\n  let currentCoValue = coValueCore;\n\n  while (currentCoValue.verified.header.ruleset.type === \"ownedByGroup\") {\n    currentCoValue = currentCoValue.getGroup().core;\n  }\n\n  const { ruleset, meta } = currentCoValue.verified.header;\n\n  if (ruleset.type !== \"group\" || meta?.type === \"account\") {\n    throw new Error(\"Can't create invite link for object without group\");\n  }\n\n  const group = cojsonInternals.expectGroup(currentCoValue.getCurrentContent());\n  const inviteSecret = group.createInvite(role);\n\n  return `${baseURL}#/invite/${valueHint ? valueHint + \"/\" : \"\"}${\n    value.$jazz.id\n  }/${inviteSecret}`;\n}\n\n/** @category Invite Links */\nexport function parseInviteLink(inviteURL: string):\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined {\n  const url = new URL(inviteURL);\n  const parts = url.hash.split(\"/\");\n\n  let valueHint: string | undefined;\n  let valueID: string | undefined;\n  let inviteSecret: InviteSecret | undefined;\n\n  if (parts[0] === \"#\" && parts[1] === \"invite\") {\n    if (parts.length === 5) {\n      valueHint = parts[2];\n      valueID = parts[3];\n      inviteSecret = parts[4] as InviteSecret;\n    } else if (parts.length === 4) {\n      valueID = parts[2];\n      inviteSecret = parts[3] as InviteSecret;\n    }\n\n    if (!valueID || !inviteSecret) {\n      return undefined;\n    }\n    return { valueID, inviteSecret, valueHint };\n  }\n}\n\n/** @category Invite Links */\nexport function consumeInviteLink<S extends CoValueClassOrSchema>({\n  inviteURL,\n  as = Account.getMe(),\n  forValueHint,\n  invitedObjectSchema,\n}: {\n  inviteURL: string;\n  as?: Account;\n  forValueHint?: string;\n  invitedObjectSchema: S;\n}): Promise<\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined\n> {\n  return new Promise((resolve, reject) => {\n    const result = parseInviteLink(inviteURL);\n\n    if (result && result.valueHint === forValueHint) {\n      as.acceptInvite(result.valueID, result.inviteSecret, invitedObjectSchema)\n        .then(() => {\n          resolve(result);\n        })\n        .catch(reject);\n    } else {\n      resolve(undefined);\n    }\n  });\n}\n","import {\n  CoValueCore,\n  CojsonInternalTypes,\n  CryptoProvider,\n  RawAccount,\n  RawCoMap,\n  cojsonInternals,\n} from \"cojson\";\nimport z from \"zod/v4\";\nimport {\n  AnyZodOrCoValueSchema,\n  CoMap,\n  CoMapSchema,\n  CoMapSchemaInit,\n  CoValueClass,\n  CoreCoMapSchema,\n  Group,\n  Loaded,\n  ResolveQuery,\n  ResolveQueryStrict,\n  Simplify,\n  coMapDefiner,\n  coValueClassFromCoValueClassOrSchema,\n  exportCoValue,\n  importContentPieces,\n  loadCoValue,\n} from \"../internal.js\";\nimport { isCoValueId } from \"../lib/utils.js\";\nimport { Account } from \"./account.js\";\n\ntype MessageShape = Record<string, AnyZodOrCoValueSchema>;\n\ntype RequestSchemaDefinition<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>> = true,\n> =\n  | S\n  | {\n      schema: S;\n      resolve?: R;\n    };\n\n/**\n * Configuration options for defining HTTP request/response schemas in Jazz.\n *\n * This interface defines the structure for creating typed HTTP routes with\n * request and response validation using CoMap schemas.\n *\n * @template RequestShape - The shape of the request message schema (must extend MessageShape)\n * @template RequestResolve - The resolve query type for the request CoMap schema\n * @template ResponseShape - The shape of the response message schema (must extend MessageShape)\n * @template ResponseResolve - The resolve query type for the response CoMap schema\n */\ninterface RequestOptions<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n> {\n  /**\n   * The URL endpoint for the HTTP route.\n   * This is used by the client to send requests to the server.\n   */\n  url: string;\n\n  /**\n   * The id of the worker Account or Group.\n   */\n  workerId: string;\n\n  /**\n   * Schema definition for the request payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for incoming requests.\n   */\n  request: RequestSchemaDefinition<\n    RequestShape,\n    ResolveQueryStrict<CoMapSchema<RequestShape>, RequestResolve>\n  >;\n\n  /**\n   * Schema definition for the response payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for outgoing responses.\n   */\n  response: RequestSchemaDefinition<\n    ResponseShape,\n    ResolveQueryStrict<CoMapSchema<ResponseShape>, ResponseResolve>\n  >;\n}\n\ntype AsNullablePayload<T extends MessageShape> = T extends Record<string, never>\n  ? undefined\n  : never;\ntype MessageValuePayload<T extends MessageShape> =\n  | Simplify<CoMapSchemaInit<T>>\n  | AsNullablePayload<T>;\n\nfunction createMessageEnvelope<S extends MessageShape>(\n  schema: CoreCoMapSchema,\n  value: MessageValuePayload<S>,\n  owner: Account,\n  sharedWith: Account | Group,\n  type: \"request\" | \"response\",\n): Loaded<CoMapSchema<S>> {\n  const group = Group.create({ owner });\n\n  if (type === \"request\") {\n    group.addMember(sharedWith, \"writer\");\n  } else {\n    group.addMember(sharedWith, \"reader\");\n  }\n\n  // @ts-expect-error - CoreCoMapSchema doesn't have static methods\n  return schema.create(value ?? {}, group);\n}\n\n/**\n * Function that exports the input CoValue in a serializable format and prepares the information\n * required for the other side to safely verify the identity of the sender.\n */\nasync function serializeMessagePayload({\n  type,\n  schema,\n  resolve,\n  value,\n  owner,\n  target,\n}: {\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  type: \"request\" | \"response\";\n  schema: CoreCoMapSchema;\n  resolve: any;\n  value: any;\n  owner: Account;\n  target: Account | Group;\n}) {\n  const me = owner ?? Account.getMe();\n  const node = me.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerID = agent.currentSignerID();\n  const signerSecret = agent.currentSignerSecret();\n\n  const envelope = createMessageEnvelope(schema, value, me, target, type);\n\n  const contentPieces =\n    (await exportCoValue(schema, envelope.$jazz.id, {\n      resolve,\n      loadAs: me,\n      bestEffortResolution: true,\n    })) ?? [];\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    signerID,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return {\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    authToken,\n    signerID,\n  };\n}\n\nconst coIdSchema = z.custom<`co_z${string}`>(isCoValueId);\nconst signatureSchema = z.custom<`signature_z${string}`>(\n  (value) => typeof value === \"string\" && value.startsWith(\"signature_z\"),\n);\n\nconst requestSchema = z.object({\n  contentPieces: z.array(z.json()),\n  id: coIdSchema,\n  createdAt: z.number(),\n  authToken: signatureSchema,\n  signerID: z.custom<`signer_z${string}`>(\n    (value) => typeof value === \"string\" && value.startsWith(\"signer_z\"),\n  ),\n});\n\n/**\n * Function that parses the message payload, verifies the identity of the sender and loads the data.\n *\n * @returns The data from the message.\n */\nasync function handleMessagePayload({\n  type,\n  schema,\n  resolve,\n  request,\n  loadAs,\n}: {\n  type: \"request\" | \"response\";\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  schema: CoreCoMapSchema;\n  resolve: any;\n  request: unknown;\n  loadAs: Account;\n}) {\n  const node = loadAs.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const requestParsed = requestSchema.safeParse(request);\n\n  if (!requestParsed.success) {\n    throw new JazzRequestError(\n      \"Request payload is not valid\",\n      400,\n      requestParsed.error,\n    );\n  }\n\n  const requestData = requestParsed.data;\n\n  if (type === \"request\") {\n    const core = await node.loadCoValueCore(requestData.id, undefined, true);\n\n    // Check if the message has already been handled to prevent replay attacks\n    if (core.isAvailable()) {\n      const content = core.getCurrentContent() as RawCoMap;\n\n      if (content.get(\"$handled\") === loadAs.$jazz.id) {\n        throw new JazzRequestError(\"Request payload is already handled\", 400);\n      }\n    }\n\n    // Check if the message is expired as extra protection\n    if (requestData.createdAt + 1000 * 60 < Date.now()) {\n      throw new JazzRequestError(\"Authentication token is expired\", 401);\n    }\n  }\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    contentPieces: requestData.contentPieces,\n    id: requestData.id,\n    createdAt: requestData.createdAt,\n    signerID: requestData.signerID,\n  });\n\n  if (\n    !safeVerifySignature(\n      crypto,\n      signPayload,\n      requestData.signerID,\n      requestData.authToken,\n    )\n  ) {\n    throw new JazzRequestError(\"Invalid signature\", 401);\n  }\n\n  let contentPieces =\n    requestData.contentPieces as CojsonInternalTypes.NewContentMessage[];\n\n  if (type === \"request\") {\n    const coValueContent = contentPieces.find(\n      (piece) => piece.id === requestData.id,\n    );\n\n    if (coValueContent && coValueContent.header) {\n      const validValues = cojsonInternals.getDependedOnCoValues(\n        coValueContent.header,\n        coValueContent,\n      );\n      validValues.add(requestData.id);\n      contentPieces = contentPieces.filter((piece) =>\n        validValues.has(piece.id),\n      );\n    } else {\n      contentPieces = [];\n    }\n  }\n\n  importContentPieces(contentPieces, loadAs);\n\n  const coValue = await node.loadCoValueCore(requestData.id);\n  const accountId = getCoValueCreatorAccountId(coValue);\n\n  const madeBy = await Account.load(accountId, {\n    loadAs,\n  });\n\n  if (!madeBy.$isLoaded) {\n    throw new JazzRequestError(\"Creator account not found\", 400);\n  }\n\n  const coSchema = coValueClassFromCoValueClassOrSchema(\n    schema,\n  ) as CoValueClass<CoMap>;\n  const value = await loadCoValue<CoMap, true>(coSchema, requestData.id, {\n    resolve,\n    loadAs,\n  });\n\n  if (!value.$isLoaded) {\n    throw new JazzRequestError(\"Value not found\", 400);\n  }\n\n  if (type === \"request\") {\n    value.$jazz.raw.set(\"$handled\", loadAs.$jazz.id);\n  }\n\n  return {\n    value: value as unknown,\n    madeBy,\n  };\n}\n\nfunction parseSchemaAndResolve<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>>,\n>(options: RequestSchemaDefinition<S, R>) {\n  if (\"schema\" in options) {\n    return {\n      // Using a type cast to reduce the type complexity\n      schema: coMapDefiner(options.schema) as CoreCoMapSchema,\n      resolve: options.resolve as any,\n    };\n  }\n\n  return {\n    schema: coMapDefiner(options) as CoreCoMapSchema,\n    resolve: true as any,\n  };\n}\n\nexport class HttpRoute<\n  RequestShape extends MessageShape = z.core.$ZodLooseShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>> = any,\n  ResponseShape extends MessageShape = z.core.$ZodLooseShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>> = any,\n> {\n  private requestDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private responseDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private url: string;\n  private workerId: string;\n\n  constructor(\n    params: RequestOptions<\n      RequestShape,\n      RequestResolve,\n      ResponseShape,\n      ResponseResolve\n    >,\n  ) {\n    this.requestDefinition = parseSchemaAndResolve(params.request);\n    this.responseDefinition = parseSchemaAndResolve(params.response);\n    this.url = params.url;\n    this.workerId = params.workerId;\n\n    if (params.workerId === undefined) {\n      throw new TypeError(\"Worker ID is required\");\n    }\n  }\n\n  async send(\n    values: MessageValuePayload<RequestShape>,\n    options?: { owner?: Account },\n  ): Promise<Loaded<CoMapSchema<ResponseShape>, ResponseResolve>> {\n    const as = options?.owner ?? Account.getMe();\n\n    const target = await loadWorkerAccountOrGroup(this.workerId, as);\n\n    const response = await fetch(this.url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(\n        await serializeMessagePayload({\n          type: \"request\",\n          schema: this.requestDefinition.schema,\n          resolve: true, // export only the envelope\n          value: values,\n          owner: as,\n          target,\n        }),\n      ),\n    });\n\n    if (!response.ok) {\n      if (response.headers.has(\"X-Jazz-Request-Error\")) {\n        const error = await response.json();\n        throw new JazzRequestError(error.message, error.code, error.details);\n      }\n\n      throw new JazzRequestError(\"Request failed\", response.status);\n    }\n\n    const responseBody = await response.json();\n\n    const responseParsed = z\n      .object({\n        type: z.literal(\"success\"),\n        payload: z.any(),\n      })\n      .safeParse(responseBody);\n\n    if (!responseParsed.success) {\n      throw new JazzRequestError(\n        \"Response payload is not valid\",\n        400,\n        responseParsed.error,\n      );\n    }\n\n    const data = await handleMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      request: responseParsed.data.payload,\n      loadAs: as,\n    });\n\n    return data.value as Loaded<CoMapSchema<ResponseShape>, ResponseResolve>;\n  }\n\n  handle = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    try {\n      const response = await this.executeHandleRequest(request, as, callback);\n      return response;\n    } catch (error) {\n      // Serialize the error to make it possible to handle it on the client side\n      if (isJazzRequestError(error)) {\n        return new Response(JSON.stringify(error.toJSON()), {\n          status: error.code,\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"X-Jazz-Request-Error\": \"true\",\n          },\n        });\n      }\n\n      throw error;\n    }\n  };\n\n  executeHandleRequest = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    const node = as.$jazz.localNode;\n    const body = await request.json();\n    const data = await handleMessagePayload({\n      type: \"request\",\n      schema: this.requestDefinition.schema,\n      resolve: this.requestDefinition.resolve,\n      request: body,\n      loadAs: as,\n    });\n\n    const tracking = node.syncManager.trackDirtyCoValues();\n\n    const responseValue = await callback(\n      data.value as Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      data.madeBy,\n    );\n\n    const responsePayload = await serializeMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      value: responseValue,\n      owner: as,\n      target: data.madeBy,\n    });\n\n    const responseBody = JSON.stringify({\n      type: \"success\",\n      payload: responsePayload,\n    });\n\n    // TODO: Detect the defer support from the environment\n    await Promise.all(\n      Array.from(tracking.done(), (id) => node.syncManager.waitForSync(id)),\n    );\n\n    return new Response(responseBody, {\n      status: 200,\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n    });\n  };\n\n  get requestSchema(): CoMapSchema<RequestShape> {\n    return this.requestDefinition.schema as CoMapSchema<RequestShape>;\n  }\n\n  get responseSchema() {\n    return this.responseDefinition.schema as CoMapSchema<ResponseShape>;\n  }\n}\n\n/**\n * Define a request route.\n *\n * @param params - The parameters for the request route.\n * @returns The request route.\n *\n * @see {@link https://jazz.tools/docs/react/server-side/http-requests}\n */\nexport function experimental_defineRequest<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n>(\n  params: RequestOptions<\n    RequestShape,\n    RequestResolve,\n    ResponseShape,\n    ResponseResolve\n  >,\n) {\n  return new HttpRoute(params);\n}\n\nfunction getCoValueCreatorAccountId(coValue: CoValueCore) {\n  if (!coValue.isAvailable()) {\n    throw new Error(\"Unable to load the request payload\");\n  }\n\n  const creatorSessionId = coValue.getValidSortedTransactions().at(0)\n    ?.txID.sessionID;\n\n  if (!creatorSessionId) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, creator session ID not found\",\n      400,\n    );\n  }\n\n  const accountId =\n    cojsonInternals.accountOrAgentIDfromSessionID(creatorSessionId);\n\n  if (!isCoValueId(accountId)) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, the creator is not a valid account\",\n      400,\n    );\n  }\n\n  return accountId;\n}\n\nexport class JazzRequestError {\n  public readonly isJazzRequestError = true;\n\n  constructor(\n    public readonly message: string,\n    public readonly code: number,\n    public readonly details?: unknown,\n  ) {}\n\n  toJSON() {\n    return { message: this.message, code: this.code, details: this.details };\n  }\n}\n\nexport function isJazzRequestError(error: unknown): error is JazzRequestError {\n  return (\n    error instanceof JazzRequestError ||\n    (typeof error === \"object\" &&\n      error !== null &&\n      \"isJazzRequestError\" in error &&\n      Boolean(error.isJazzRequestError))\n  );\n}\n\nfunction safeVerifySignature(\n  crypto: CryptoProvider,\n  signPayload: `hash_z${string}`,\n  signerID: `signer_z${string}`,\n  authToken: `signature_z${string}`,\n) {\n  try {\n    return crypto.verify(authToken, signPayload, signerID);\n  } catch (error) {\n    return false;\n  }\n}\n\nasync function loadWorkerAccountOrGroup(id: string, loadAs: Account) {\n  const node = loadAs.$jazz.localNode;\n  const coValue = await node.loadCoValueCore(id as `co_z${string}`);\n\n  if (!coValue.isAvailable()) {\n    throw new JazzRequestError(\"Worker account not found\", 400);\n  }\n\n  const content = coValue.getCurrentContent();\n\n  if (content instanceof RawAccount) {\n    const account = await Account.load(content.id, {\n      loadAs,\n    });\n    if (!account.$isLoaded) {\n      throw new JazzRequestError(\"Worker account not found\", 400);\n    }\n    return account;\n  }\n\n  const group = await Group.load(content.id, {\n    loadAs,\n  });\n\n  if (!group.$isLoaded) {\n    throw new JazzRequestError(\"Worker group not found\", 400);\n  }\n  return group;\n}\n\nfunction defaultGetToken(request: Request) {\n  const headerValue = request.headers.get(\"Authorization\");\n  if (headerValue?.startsWith(\"Jazz \")) {\n    return headerValue.replace(\"Jazz \", \"\");\n  }\n\n  if (headerValue) {\n    console.warn(\n      \"An Authorization header was found, but it did not start with 'Jazz '. If this is intentional, you can specify the location of the token using the `getToken` option.\",\n    );\n  }\n\n  return undefined;\n}\n\n/**\n * Authenticates a Request by verifying a signed authentication token.\n *\n * - If a token is not provided, the returned account is `undefined` and no error is returned.\n * - If a valid token is provided, the signer account is returned.\n * - If an invalid token is provided, an error is returned detailing the validation error, and the returned account is `undefined`.\n *\n * @see {@link generateAuthToken} for generating a token.\n *\n * Note: This function does not perform any authorization checks, it only verifies if - **when provided** - a token is valid. It is up to the caller to perform any additional authorization checks, if needed.\n *\n * @param request - The request to authenticate.\n * @param options - The options for the authentication.\n * @param options.expiration - The expiration time of the token in milliseconds, defaults to 1 minute.\n * @param options.loadAs - The account to load the token from, defaults to the current active account.\n * @param options.getToken - If specified, this function will be used to get the token from the request. By default the token is expected to be in the `Authorization` header in the form of `Jazz <token>`.\n * @returns The account if it is valid, otherwise an error.\n *\n * @example\n * ```ts\n * const { account, error } = await authenticateRequest(request);\n * if (error) {\n *   return new Response(JSON.stringify(error), { status: 401 });\n * }\n * ```\n */\nexport async function authenticateRequest(\n  request: Request,\n  options?: {\n    expiration?: number;\n    loadAs?: Account;\n    getToken?: (request: Request) => string | undefined | null;\n  },\n): Promise<\n  | {\n      account?: Account;\n      error?: never;\n    }\n  | {\n      account?: never;\n      error: { message: string; details?: unknown };\n    }\n> {\n  const token = options?.getToken?.(request) ?? defaultGetToken(request);\n\n  if (!token) {\n    return {};\n  }\n\n  const { account, error } = await parseAuthToken(token, {\n    loadAs: options?.loadAs,\n    expiration: options?.expiration ?? 1000 * 60,\n  });\n\n  if (error) {\n    return { error };\n  }\n\n  return { account, error };\n}\n\n/**\n * Generates an authentication token for a given account. This token can be used to authenticate a request. See {@link authenticateRequest} for more details.\n *\n * @param as - The account to generate the token for, defaults to the current active account.\n * @returns The authentication token.\n *\n * @example Make a fetch request with the token\n * ```ts\n * const token = generateAuthToken();\n * const response = await fetch(url, {\n *   headers: {\n *     Authorization: `Jazz ${token}`,\n *   },\n * });\n * ```\n */\n\nexport function generateAuthToken(as?: Account) {\n  const account = as ?? Account.getMe();\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerSecret = agent.currentSignerSecret();\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return `${authToken}~${account.$jazz.id}~${createdAt}`;\n}\n\nexport async function parseAuthToken(\n  authToken: string,\n  options?: { loadAs?: Account; expiration?: number },\n): Promise<\n  | { account: Account; error?: never }\n  | { account?: never; error: { message: string; details?: unknown } }\n> {\n  const expiration = options?.expiration ?? 1_000 * 60; // 1 minute\n\n  const parsed = z\n    .tuple([signatureSchema, coIdSchema, z.string().transform(Number)])\n    .safeParse(authToken.split(\"~\"));\n\n  if (!parsed.success) {\n    return {\n      error: {\n        message: \"Invalid token\",\n        details: parsed.error,\n      },\n    };\n  }\n\n  const [signature, id, createdAt] = parsed.data;\n\n  if (createdAt + expiration < Date.now()) {\n    return {\n      error: {\n        message: \"Token expired\",\n      },\n    };\n  }\n\n  const account = await Account.load(id, { loadAs: options?.loadAs });\n\n  if (!account.$isLoaded) {\n    return {\n      error: {\n        message: \"Failed to load account\",\n        details: { id },\n      },\n    };\n  }\n\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt: Number(createdAt),\n  });\n\n  const agentID = account.$jazz.raw.currentAgentID();\n  const signerID = crypto.getAgentSignerID(agentID);\n\n  if (!crypto.verify(signature, signPayload, signerID)) {\n    return {\n      error: {\n        message: \"Invalid signature\",\n      },\n    };\n  }\n\n  return {\n    account,\n  };\n}\n","export {\n  setCustomErrorReporter,\n  enableCaptureErrorCause,\n} from \"./subscribe/errorReporting.js\";\n\nexport {\n  logger,\n  LogLevel,\n} from \"cojson\";\n","export * from \"./exports.js\";\n\nexport {\n  cojsonInternals,\n  logger,\n  LogLevel,\n} from \"cojson\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE,WAAAA;AAAA,EAEA,qBAAAC;AAAA,OAEK;;;ACHA,SAAS,iBACd,aACA;AACA,MAAI,CAAC,YAAY,MAAM;AACrB,WAAO;AAAA,EACT;AAEA,MAAI,YAAY,KAAK,UAAU;AAC7B,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,WAAW;AAC9B,QAAI,YAAY,KAAK,UAAU;AAC7B,aAAO,GAAG,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,QAAQ;AAAA,IACnE;AAEA,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,UAAU;AAC7B,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,qBAAqB,cAAc;AACtD,UAAM,gBACJ,YAAY,KAAK,oBAAoB,aAAa,MAAM,GAAG,EAAE,CAAC;AAEhE,QAAI,eAAe;AACjB,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,YAAY,KAAK;AAC1B;;;ACEO,SAAS,mBACd,MAC0B;AAC1B,SAAO,CAAC,CAAC,QAAQ,mBAAmB,QAAQ,uBAAuB;AACrE;AAEO,SAAS,sBACd,cACA,SACA;AACA,MAAI,QAAQ,YAAY,MAAM,QAAQ,OAAO,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,sBAAsB,mBAAmB,cAAc,cAAc;AAC3E,QAAM,iBAAiB,mBAAmB,SAAS,cAAc;AAEjE,SAAO,wBAAwB;AACjC;;;AFtCO,IAAM,gBAAN,MAAM,eAAc;AAAA,EACzB,YACU,cACA,QACA,mBACR;AAHQ;AACA;AACA;AAiCV,SAAQ,cAAc;AAkBtB,6BAAoB,OAAO,gBAAkD;AAC3E,YAAM,kBAAkB,KAAK,kBAAkB;AAI/C,UAAI,CAAC,YAAY,MAAM;AACrB,YAAI,iBAAiB;AACnB,eAAK,kBAAkB,MAAM;AAC7B,gBAAM,KAAK,OAAO;AAAA,QACpB;AACA;AAAA,MACF;AAEA,UAAI,gBAAiB;AAErB,YAAM,mBAAmB,YAAY,KAClC;AAEH,UAAI,CAAC,iBAAiB,eAAe;AACnC,cAAM,KAAK,OAAO,WAAW;AAAA,MAC/B,OAAO;AACL,cAAM,KAAK,MAAM,WAAW;AAAA,MAC9B;AAAA,IACF;AAEA,iBAAQ,OAAO,gBAAkD;AAC/D,UAAI,CAAC,YAAY,MAAM;AACrB,cAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C;AAEA,YAAM,mBAAmB,YAAY,KAAK;AAC1C,UAAI,CAAC,mBAAmB,gBAAgB,GAAG;AACzC,cAAM,IAAI,MAAM,+BAA+B;AAAA,MACjD;AAEA,YAAM,cAAc;AAAA,QAClB,WAAW,iBAAiB;AAAA,QAC5B,eAAe,iBAAiB;AAAA,QAChC,YAAY,iBAAiB,kBACzB,WAAW,KAAK,iBAAiB,eAAe,IAChD;AAAA,QACJ,UAAU;AAAA,MACZ;AAEA,YAAM,KAAK,aAAa,WAAW;AAEnC,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B,iBAAiB,iBAAiB;AAAA,QACpC;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAEA,kBAAS,OAAO,gBAAkD;AAChE,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,kBAAkB,YAAY,aAChC,MAAM,KAAK,YAAY,UAAU,IACjC;AAEJ,YAAM,YAAY,MAAM,OAAO;AAAA,QAC7B,gBAAgB;AAAA,UACd,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B;AAAA,QACF;AAAA,MACF,CAAC;AAED,YAAM,iBAAiB,MAAMC,SAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,YAAM,WAAW,iBAAiB,WAAW;AAE7C,UAAI,UAAU;AACZ,uBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAAA,MACnD;AAEA,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B;AAAA,QACF;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EAjJG;AAAA;AAAA;AAAA;AAAA,EAKH,OAAO,kBACL,aACA,SACA;AACA,WAAO,QAAQ,IAAI;AAAA,MACjB,WAAW,YAAY;AAAA,MACvB,eAAe,YAAY;AAAA,MAC3B,YAAY,YAAY,kBACpB,WAAW,KAAK,YAAY,eAAe,IAC3C;AAAA,MACJ,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,eAAe,OAA2B;AACrD,UAAM,gBAAgB,IAAIC,mBAAkB;AAE5C,QAAI,CAAC,mBAAmB,MAAM,MAAM,cAAc,GAAG;AACnD;AAAA,IACF;AAEA,UAAM,eAAc;AAAA,MAClB,MAAM,KAAK;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAIA,iBAAiB,aAAiC;AAChD,QAAI,eACF,YAAY,QAAQ;AAGtB,WAAO,YAAY,YAAY,CAAC,UAAU;AACxC,YAAM,OAAQ,MAA2C,QAAQ;AAEjE,UAAI,CAAC,sBAAsB,cAAc,IAAI,KAAK,KAAK,aAAa;AAClE,aAAK,kBAAkB,EAAE,KAAK,CAAC;AAC/B,uBAAe;AACf,aAAK,cAAc;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AAkGF;;;AG/IO,IAAM,WAAN,MAAe;AAAA,EACpB,YACU,cACA,mBACR;AAFQ;AACA;AAGV,iBAAQ,OAAO,aAAqB;AAClC,YAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAC3D,YAAM,cAAc,cAAc,QAAQ;AAE1C,UAAI,CAAC,aAAa,WAAW;AAC3B,cAAM,IAAI,MAAM,gBAAgB;AAAA,MAClC;AAEA,YAAM,KAAK,aAAa;AAAA,QACtB,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,MAC7B,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,kBAAS,OAAO,aAAqB;AACnC,YAAM,gBAAgB,MAAM,KAAK,iBAAiB;AAClD,UAAI,cAAc,SAAS,QAAQ,GAAG;AACpC,cAAM,IAAI,MAAM,yBAAyB;AAAA,MAC3C;AAEA,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,qBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAEjD,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAED,YAAM,KAAK,mBAAmB,UAAU;AAAA,QACtC,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,MAAM,KAAK,YAAY,UAAU,IACjC;AAAA,MACN,CAAC;AAAA,IACH;AAuBA,4BAAmB,YAAY;AAC7B,aAAO,OAAO,KAAK,MAAM,KAAK,0BAA0B,CAAC;AAAA,IAC3D;AAAA,EAtFG;AAAA,EA+DH,MAAc,mBAAmB,UAAkB,MAAmB;AACpE,UAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAE3D,QAAI,cAAc,QAAQ,GAAG;AAC3B;AAAA,IACF;AAEA,kBAAc,QAAQ,IAAI;AAE1B,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAAA,EACpE;AAAA,EAEA,MAAc,4BAA4B;AACxC,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,qBAAqB,OAAO;AAElC,UAAM,gBAAgB,MAAM,QAAQ,IAAI,iBAAiB;AACzD,WAAO,gBAAgB,KAAK,MAAM,aAAa,IAAI,CAAC;AAAA,EACtD;AAKF;AAEO,SAAS,eAAe,UAAkB;AAC/C,SAAO,KAAK,QAAQ,EACjB,QAAQ,MAAM,GAAG,EACjB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG;AACvB;AAEA,eAAe,kBAAkB,SAAkB;AACjD,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,IAAI,2BAA2B;AAC7D,WAAO,UAAU,SAAS,OAAO,IAAI;AAAA,EACvC,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBAAkB,SAAkB,SAAiB;AAClE,QAAM,QAAQ,IAAI,6BAA6B,QAAQ,SAAS,CAAC;AACnE;AAEA,eAAe,qBAAqB,SAAkB;AACpD,QAAM,gBAAgB,MAAM,QAAQ,IAAI,0BAA0B;AAClE,SAAO,gBAAgB,cAAc,MAAM,GAAG,IAAI,CAAC;AACrD;AAKA,eAAe,qBAAqB,SAAkB;AACpD,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,gBAAgB,MAAM,qBAAqB,OAAO;AAExD,eAAW,YAAY,eAAe;AACpC,YAAM,YAAY,4BAA4B,QAAQ;AACtD,YAAM,cAAc,MAAM,QAAQ,IAAI,SAAS;AAC/C,UAAI,aAAa;AACf,cAAM,QAAQ;AAAA,UACZ,4BAA4B,eAAe,QAAQ,CAAC;AAAA,UACpD;AAAA,QACF;AACA,cAAM,QAAQ,OAAO,SAAS;AAAA,MAChC;AAAA,IACF;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AAEA,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,oBAAoB,MAAM,qBAAqB,OAAO;AAE5D,UAAM,gBAA6C,CAAC;AACpD,UAAM,eAAyB,CAAC,0BAA0B;AAE1D,eAAW,YAAY,mBAAmB;AACxC,YAAM,MAAM,4BAA4B,eAAe,QAAQ,CAAC;AAChE,YAAM,cAAc,MAAM,QAAQ,IAAI,GAAG;AACzC,UAAI,aAAa;AACf,sBAAc,QAAQ,IAAI,KAAK,MAAM,WAAW;AAChD,qBAAa,KAAK,GAAG;AAAA,MACvB;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAElE,eAAW,OAAO,cAAc;AAC9B,YAAM,QAAQ,OAAO,GAAG;AAAA,IAC1B;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AACF;;;AC5LA,YAAY,WAAW;AACvB,SAAS,yBAAyB;AAClC,SAAyB,uBAAuB;AAoBzC,IAAM,iBAAN,MAAqB;AAAA,EAG1B,YACU,QACA,cACA,UACA,mBACD,UACP;AALQ;AACA;AACA;AACA;AACD;AAPT,sBAAqB;AAUrB,iBAAQ,OAAO,eAAuB;AACpC,YAAM,EAAE,QAAQ,aAAa,IAAI;AAEjC,UAAI;AAEJ,UAAI;AACF,qBAAmB,wBAAkB,YAAY,KAAK,QAAQ;AAAA,MAChE,SAAS,GAAG;AACV,cAAM,IAAI,MAAM,oBAAoB;AAAA,MACtC;AAEA,YAAM,gBAAgB,OAAO,0BAA0B,UAAU;AAEjE,YAAM,YAAY,gBAAgB;AAAA,QAChC,gBAAgB,mCAAmC,eAAe,MAAM;AAAA,QACxE;AAAA,MACF;AAEA,YAAM,aAAa;AAAA,QACjB;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,kBAAS,OAAO,SAAkB;AAChC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,aAAa,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAE1E,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,YAAY,YAAY;AAAA,QACxB,eAAe,YAAY;AAAA,QAC3B,UAAU;AAAA,MACZ,CAAC;AAED,UAAI,MAAM,KAAK,GAAG;AAChB,cAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,UAC9D,SAAS;AAAA,YACP,SAAS;AAAA,UACX;AAAA,QACF,CAAC;AAED,uBAAe,QAAQ,MAAM,IAAI,QAAQ,IAAI;AAAA,MAC/C;AAEA,aAAO;AAAA,IACT;AAEA,8BAAqB,OAAO,YAAoB,SAAiB;AAC/D,YAAM,aAAmB,wBAAkB,YAAY,KAAK,QAAQ;AACpE,YAAM,gBAAgB,KAAK,OAAO,0BAA0B,UAAU;AACtE,YAAM,YAAY,MAAM,KAAK,SAAS,eAAe,EAAE,KAAK,CAAC;AAE7D,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,aAAO;AAAA,IACT;AAEA,uCAA8B,YAAY;AACxC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,aAAO,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAAA,IAChE;AAEA,oCAA2B,MAAM;AAC/B,aAAO,kBAAkB,KAAK,OAAO,oBAAoB,GAAG,KAAK,QAAQ;AAAA,IAC3E;AAEA,wCAA+B,YAAY;AACzC,YAAM,aAAa,MAAM,KAAK,4BAA4B;AAC1D,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,qBAAY,oBAAI,IAAgB;AAChC,qBAAY,CAAC,aAAyB;AACpC,WAAK,UAAU,IAAI,QAAQ;AAE3B,aAAO,MAAM;AACX,aAAK,UAAU,OAAO,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,EA3GG;AAAA,EA6GH,SAAS;AACP,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS;AAAA,IACX;AAAA,EACF;AACF;;;ACjJA,SAAyC,mBAAAC,wBAAuB;AAKzD,SAAS,iBACd,OACA,MACA,SACA,WACQ;AACR,QAAM,cAAc,MAAM,MAAM,IAAI;AACpC,MAAI,iBAAiB;AAErB,SAAO,eAAe,SAAS,OAAO,QAAQ,SAAS,gBAAgB;AACrE,qBAAiB,eAAe,SAAS,EAAE;AAAA,EAC7C;AAEA,QAAM,EAAE,SAAS,KAAK,IAAI,eAAe,SAAS;AAElD,MAAI,QAAQ,SAAS,WAAW,MAAM,SAAS,WAAW;AACxD,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,QAAM,QAAQC,iBAAgB,YAAY,eAAe,kBAAkB,CAAC;AAC5E,QAAM,eAAe,MAAM,aAAa,IAAI;AAE5C,SAAO,GAAG,OAAO,YAAY,YAAY,YAAY,MAAM,EAAE,GAC3D,MAAM,MAAM,EACd,IAAI,YAAY;AAClB;AAGO,SAAS,gBAAgB,WAMlB;AACZ,QAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,QAAM,QAAQ,IAAI,KAAK,MAAM,GAAG;AAEhC,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,UAAU;AAC7C,QAAI,MAAM,WAAW,GAAG;AACtB,kBAAY,MAAM,CAAC;AACnB,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB,WAAW,MAAM,WAAW,GAAG;AAC7B,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB;AAEA,QAAI,CAAC,WAAW,CAAC,cAAc;AAC7B,aAAO;AAAA,IACT;AACA,WAAO,EAAE,SAAS,cAAc,UAAU;AAAA,EAC5C;AACF;AAGO,SAAS,kBAAkD;AAAA,EAChE;AAAA,EACA,KAAK,QAAQ,MAAM;AAAA,EACnB;AAAA,EACA;AACF,GAYE;AACA,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,SAAS,gBAAgB,SAAS;AAExC,QAAI,UAAU,OAAO,cAAc,cAAc;AAC/C,SAAG,aAAa,OAAO,SAAS,OAAO,cAAc,mBAAmB,EACrE,KAAK,MAAM;AACV,gBAAQ,MAAM;AAAA,MAChB,CAAC,EACA,MAAM,MAAM;AAAA,IACjB,OAAO;AACL,cAAQ,MAAS;AAAA,IACnB;AAAA,EACF,CAAC;AACH;;;AChGA;AAAA,EAIE;AAAA,EAEA,mBAAAC;AAAA,OACK;AACP,OAAO,OAAO;AA0Fd,SAAS,sBACP,QACA,OACA,OACA,YACA,MACwB;AACxB,QAAM,QAAQ,MAAM,OAAO,EAAE,MAAM,CAAC;AAEpC,MAAI,SAAS,WAAW;AACtB,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC,OAAO;AACL,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC;AAGA,SAAO,OAAO,OAAO,SAAS,CAAC,GAAG,KAAK;AACzC;AAMA,eAAe,wBAAwB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,KAAK,SAAS,QAAQ,MAAM;AAClC,QAAM,OAAO,GAAG,MAAM;AACtB,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,WAAW,MAAM,gBAAgB;AACvC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,WAAW,sBAAsB,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAEtE,QAAM,gBACH,MAAM,cAAc,QAAQ,SAAS,MAAM,IAAI;AAAA,IAC9C;AAAA,IACA,QAAQ;AAAA,IACR,sBAAsB;AAAA,EACxB,CAAC,KAAM,CAAC;AAEV,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO;AAAA,IACL;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,IAAM,aAAa,EAAE,OAAwB,WAAW;AACxD,IAAM,kBAAkB,EAAE;AAAA,EACxB,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,aAAa;AACxE;AAEA,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC;AAAA,EAC/B,IAAI;AAAA,EACJ,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW;AAAA,EACX,UAAU,EAAE;AAAA,IACV,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,UAAU;AAAA,EACrE;AACF,CAAC;AAOD,eAAe,qBAAqB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,SAAS,KAAK;AAEpB,QAAM,gBAAgB,cAAc,UAAU,OAAO;AAErD,MAAI,CAAC,cAAc,SAAS;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,cAAc,cAAc;AAElC,MAAI,SAAS,WAAW;AACtB,UAAM,OAAO,MAAM,KAAK,gBAAgB,YAAY,IAAI,QAAW,IAAI;AAGvE,QAAI,KAAK,YAAY,GAAG;AACtB,YAAM,UAAU,KAAK,kBAAkB;AAEvC,UAAI,QAAQ,IAAI,UAAU,MAAM,OAAO,MAAM,IAAI;AAC/C,cAAM,IAAI,iBAAiB,sCAAsC,GAAG;AAAA,MACtE;AAAA,IACF;AAGA,QAAI,YAAY,YAAY,MAAO,KAAK,KAAK,IAAI,GAAG;AAClD,YAAM,IAAI,iBAAiB,mCAAmC,GAAG;AAAA,IACnE;AAAA,EACF;AAGA,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,eAAe,YAAY;AAAA,IAC3B,IAAI,YAAY;AAAA,IAChB,WAAW,YAAY;AAAA,IACvB,UAAU,YAAY;AAAA,EACxB,CAAC;AAED,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,GACA;AACA,UAAM,IAAI,iBAAiB,qBAAqB,GAAG;AAAA,EACrD;AAEA,MAAI,gBACF,YAAY;AAEd,MAAI,SAAS,WAAW;AACtB,UAAM,iBAAiB,cAAc;AAAA,MACnC,CAAC,UAAU,MAAM,OAAO,YAAY;AAAA,IACtC;AAEA,QAAI,kBAAkB,eAAe,QAAQ;AAC3C,YAAM,cAAcC,iBAAgB;AAAA,QAClC,eAAe;AAAA,QACf;AAAA,MACF;AACA,kBAAY,IAAI,YAAY,EAAE;AAC9B,sBAAgB,cAAc;AAAA,QAAO,CAAC,UACpC,YAAY,IAAI,MAAM,EAAE;AAAA,MAC1B;AAAA,IACF,OAAO;AACL,sBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,sBAAoB,eAAe,MAAM;AAEzC,QAAM,UAAU,MAAM,KAAK,gBAAgB,YAAY,EAAE;AACzD,QAAM,YAAY,2BAA2B,OAAO;AAEpD,QAAM,SAAS,MAAM,QAAQ,KAAK,WAAW;AAAA,IAC3C;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,WAAW;AACrB,UAAM,IAAI,iBAAiB,6BAA6B,GAAG;AAAA,EAC7D;AAEA,QAAM,WAAW;AAAA,IACf;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,YAAyB,UAAU,YAAY,IAAI;AAAA,IACrE;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,mBAAmB,GAAG;AAAA,EACnD;AAEA,MAAI,SAAS,WAAW;AACtB,UAAM,MAAM,IAAI,IAAI,YAAY,OAAO,MAAM,EAAE;AAAA,EACjD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,sBAGP,SAAwC;AACxC,MAAI,YAAY,SAAS;AACvB,WAAO;AAAA;AAAA,MAEL,QAAQ,aAAa,QAAQ,MAAM;AAAA,MACnC,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,aAAa,OAAO;AAAA,IAC5B,SAAS;AAAA,EACX;AACF;AAEO,IAAM,YAAN,MAKL;AAAA,EAYA,YACE,QAMA;AAyEF,kBAAS,OACP,SACA,IACA,aAMsB;AACtB,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,qBAAqB,SAAS,IAAI,QAAQ;AACtE,eAAO;AAAA,MACT,SAAS,OAAO;AAEd,YAAI,mBAAmB,KAAK,GAAG;AAC7B,iBAAO,IAAI,SAAS,KAAK,UAAU,MAAM,OAAO,CAAC,GAAG;AAAA,YAClD,QAAQ,MAAM;AAAA,YACd,SAAS;AAAA,cACP,gBAAgB;AAAA,cAChB,wBAAwB;AAAA,YAC1B;AAAA,UACF,CAAC;AAAA,QACH;AAEA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,gCAAuB,OACrB,SACA,IACA,aAMsB;AACtB,YAAM,OAAO,GAAG,MAAM;AACtB,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,OAAO,MAAM,qBAAqB;AAAA,QACtC,MAAM;AAAA,QACN,QAAQ,KAAK,kBAAkB;AAAA,QAC/B,SAAS,KAAK,kBAAkB;AAAA,QAChC,SAAS;AAAA,QACT,QAAQ;AAAA,MACV,CAAC;AAED,YAAM,WAAW,KAAK,YAAY,mBAAmB;AAErD,YAAM,gBAAgB,MAAM;AAAA,QAC1B,KAAK;AAAA,QACL,KAAK;AAAA,MACP;AAEA,YAAM,kBAAkB,MAAM,wBAAwB;AAAA,QACpD,MAAM;AAAA,QACN,QAAQ,KAAK,mBAAmB;AAAA,QAChC,SAAS,KAAK,mBAAmB;AAAA,QACjC,OAAO;AAAA,QACP,OAAO;AAAA,QACP,QAAQ,KAAK;AAAA,MACf,CAAC;AAED,YAAM,eAAe,KAAK,UAAU;AAAA,QAClC,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAGD,YAAM,QAAQ;AAAA,QACZ,MAAM,KAAK,SAAS,KAAK,GAAG,CAAC,OAAO,KAAK,YAAY,YAAY,EAAE,CAAC;AAAA,MACtE;AAEA,aAAO,IAAI,SAAS,cAAc;AAAA,QAChC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,IACH;AAzJE,SAAK,oBAAoB,sBAAsB,OAAO,OAAO;AAC7D,SAAK,qBAAqB,sBAAsB,OAAO,QAAQ;AAC/D,SAAK,MAAM,OAAO;AAClB,SAAK,WAAW,OAAO;AAEvB,QAAI,OAAO,aAAa,QAAW;AACjC,YAAM,IAAI,UAAU,uBAAuB;AAAA,IAC7C;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,QACA,SAC8D;AAC9D,UAAM,KAAK,SAAS,SAAS,QAAQ,MAAM;AAE3C,UAAM,SAAS,MAAM,yBAAyB,KAAK,UAAU,EAAE;AAE/D,UAAM,WAAW,MAAM,MAAM,KAAK,KAAK;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK;AAAA,QACT,MAAM,wBAAwB;AAAA,UAC5B,MAAM;AAAA,UACN,QAAQ,KAAK,kBAAkB;AAAA,UAC/B,SAAS;AAAA;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,SAAS,QAAQ,IAAI,sBAAsB,GAAG;AAChD,cAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,cAAM,IAAI,iBAAiB,MAAM,SAAS,MAAM,MAAM,MAAM,OAAO;AAAA,MACrE;AAEA,YAAM,IAAI,iBAAiB,kBAAkB,SAAS,MAAM;AAAA,IAC9D;AAEA,UAAM,eAAe,MAAM,SAAS,KAAK;AAEzC,UAAM,iBAAiB,EACpB,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,SAAS;AAAA,MACzB,SAAS,EAAE,IAAI;AAAA,IACjB,CAAC,EACA,UAAU,YAAY;AAEzB,QAAI,CAAC,eAAe,SAAS;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,qBAAqB;AAAA,MACtC,MAAM;AAAA,MACN,QAAQ,KAAK,mBAAmB;AAAA,MAChC,SAAS,KAAK,mBAAmB;AAAA,MACjC,SAAS,eAAe,KAAK;AAAA,MAC7B,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,KAAK;AAAA,EACd;AAAA,EAqFA,IAAI,gBAA2C;AAC7C,WAAO,KAAK,kBAAkB;AAAA,EAChC;AAAA,EAEA,IAAI,iBAAiB;AACnB,WAAO,KAAK,mBAAmB;AAAA,EACjC;AACF;AAUO,SAAS,2BAMd,QAMA;AACA,SAAO,IAAI,UAAU,MAAM;AAC7B;AAEA,SAAS,2BAA2B,SAAsB;AACxD,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAEA,QAAM,mBAAmB,QAAQ,2BAA2B,EAAE,GAAG,CAAC,GAC9D,KAAK;AAET,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YACJA,iBAAgB,8BAA8B,gBAAgB;AAEhE,MAAI,CAAC,YAAY,SAAS,GAAG;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,IAAM,mBAAN,MAAuB;AAAA,EAG5B,YACkB,SACA,MACA,SAChB;AAHgB;AACA;AACA;AALlB,SAAgB,qBAAqB;AAAA,EAMlC;AAAA,EAEH,SAAS;AACP,WAAO,EAAE,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,SAAS,KAAK,QAAQ;AAAA,EACzE;AACF;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SACE,iBAAiB,oBAChB,OAAO,UAAU,YAChB,UAAU,QACV,wBAAwB,SACxB,QAAQ,MAAM,kBAAkB;AAEtC;AAEA,SAAS,oBACP,QACA,aACA,UACA,WACA;AACA,MAAI;AACF,WAAO,OAAO,OAAO,WAAW,aAAa,QAAQ;AAAA,EACvD,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,yBAAyB,IAAY,QAAiB;AACnE,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,UAAU,MAAM,KAAK,gBAAgB,EAAqB;AAEhE,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,EAC5D;AAEA,QAAM,UAAU,QAAQ,kBAAkB;AAE1C,MAAI,mBAAmB,YAAY;AACjC,UAAM,UAAU,MAAM,QAAQ,KAAK,QAAQ,IAAI;AAAA,MAC7C;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ,WAAW;AACtB,YAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,MAAM,MAAM,KAAK,QAAQ,IAAI;AAAA,IACzC;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,0BAA0B,GAAG;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,SAAkB;AACzC,QAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;AACvD,MAAI,aAAa,WAAW,OAAO,GAAG;AACpC,WAAO,YAAY,QAAQ,SAAS,EAAE;AAAA,EACxC;AAEA,MAAI,aAAa;AACf,YAAQ;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AA4BA,eAAsB,oBACpB,SACA,SAcA;AACA,QAAM,QAAQ,SAAS,WAAW,OAAO,KAAK,gBAAgB,OAAO;AAErE,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,EAAE,SAAS,MAAM,IAAI,MAAM,eAAe,OAAO;AAAA,IACrD,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS,cAAc,MAAO;AAAA,EAC5C,CAAC;AAED,MAAI,OAAO;AACT,WAAO,EAAE,MAAM;AAAA,EACjB;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAmBO,SAAS,kBAAkB,IAAc;AAC9C,QAAM,UAAU,MAAM,QAAQ,MAAM;AACpC,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO,GAAG,SAAS,IAAI,QAAQ,MAAM,EAAE,IAAI,SAAS;AACtD;AAEA,eAAsB,eACpB,WACA,SAIA;AACA,QAAM,aAAa,SAAS,cAAc,MAAQ;AAElD,QAAM,SAAS,EACZ,MAAM,CAAC,iBAAiB,YAAY,EAAE,OAAO,EAAE,UAAU,MAAM,CAAC,CAAC,EACjE,UAAU,UAAU,MAAM,GAAG,CAAC;AAEjC,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,OAAO;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,WAAW,IAAI,SAAS,IAAI,OAAO;AAE1C,MAAI,YAAY,aAAa,KAAK,IAAI,GAAG;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,QAAQ,KAAK,IAAI,EAAE,QAAQ,SAAS,OAAO,CAAC;AAElE,MAAI,CAAC,QAAQ,WAAW;AACtB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,EAAE,GAAG;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAGpB,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB,WAAW,OAAO,SAAS;AAAA,EAC7B,CAAC;AAED,QAAM,UAAU,QAAQ,MAAM,IAAI,eAAe;AACjD,QAAM,WAAW,OAAO,iBAAiB,OAAO;AAEhD,MAAI,CAAC,OAAO,OAAO,WAAW,aAAa,QAAQ,GAAG;AACpD,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,EACF;AACF;;;ACtzBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA;AAAA,EACE;AAAA,EACA;AAAA,OACK;;;ACNP;AAAA,EACE,mBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,YAAAC;AAAA,OACK;","names":["Account","AuthSecretStorage","Account","AuthSecretStorage","cojsonInternals","cojsonInternals","cojsonInternals","cojsonInternals","cojsonInternals","logger","LogLevel"]}

package/dist/inspector/{chunk-C6BJPHBQ.js → chunk-YQNK5Y7B.js}

@@ -1063,9 +1063,9 @@ function AddIcon(props) {
         "path",
         {
           d: "M4 12H20M12 4V20",
-          "stroke-width": "2",
-          "stroke-linecap": "round",
-          "stroke-linejoin": "round"
+          strokeWidth: "2",
+          strokeLinecap: "round",
+          strokeLinejoin: "round"
         }
       )
     }
@@ -2811,43 +2811,55 @@ import { useMemo as useMemo5 } from "react";
 import { styled as styled19 } from "goober";
 
 // src/inspector/utils/transactions-changes.ts
-var isGroupExtension = (change) => {
+var isGroupExtension = (coValue, change) => {
+  if (coValue.core.isGroup() === false) return false;
   return change?.op === "set" && change?.value === "extend";
 };
-var isGroupExtendRevocation = (change) => {
+var isGroupExtendRevocation = (coValue, change) => {
+  if (coValue.core.isGroup() === false) return false;
   return change?.op === "set" && change?.value === "revoked";
 };
-var isGroupPromotion = (change) => {
+var isGroupPromotion = (coValue, change) => {
+  if (coValue.core.isGroup() === false) return false;
   return change?.op === "set" && change?.key.startsWith("parent_co_");
 };
-var isUserPromotion = (change) => {
+var isUserPromotion = (coValue, change) => {
+  if (coValue.core.isGroup() === false) return false;
   return change?.op === "set" && (isCoId(change?.key) || change?.key === "everyone");
 };
-var isKeyRevelation = (change) => {
+var isKeyRevelation = (coValue, change) => {
+  if (coValue.core.isGroup() === false && coValue.headerMeta?.type !== "account")
+    return false;
   return change?.op === "set" && change?.key.includes("_for_");
 };
-var isPropertySet = (change) => {
+var isPropertySet = (coValue, change) => {
   return change?.op === "set" && "key" in change && "value" in change;
 };
-var isPropertyDeletion = (change) => {
+var isPropertyDeletion = (coValue, change) => {
   return change?.op === "del" && "key" in change;
 };
-var isItemAppend = (change) => {
+var isItemAppend = (coValue, change) => {
+  if (coValue.type !== "colist" && coValue.type !== "coplaintext") return false;
   return change?.op === "app" && "after" in change && "value" in change;
 };
-var isItemPrepend = (change) => {
+var isItemPrepend = (coValue, change) => {
+  if (coValue.type !== "colist" && coValue.type !== "coplaintext") return false;
   return change?.op === "pre" && "before" in change && "value" in change;
 };
-var isItemDeletion = (change) => {
+var isItemDeletion = (coValue, change) => {
+  if (coValue.type !== "colist" && coValue.type !== "coplaintext") return false;
   return change?.op === "del" && "insertion" in change;
 };
-var isStreamStart = (change) => {
+var isStreamStart = (coValue, change) => {
+  if (coValue.type !== "coStream") return false;
   return change?.type === "start" && "mimeType" in change;
 };
-var isStreamChunk = (change) => {
+var isStreamChunk = (coValue, change) => {
+  if (coValue.type !== "coStream") return false;
   return change?.type === "chunk" && "chunk" in change;
 };
-var isStreamEnd = (change) => {
+var isStreamEnd = (coValue, change) => {
+  if (coValue.type !== "coStream") return false;
   return change?.type === "end";
 };
 
@@ -2879,8 +2891,8 @@ function getTransactionChanges(tx, coValue) {
   if (isCoPlainText(coValue)) {
     if (tx.changes === void 0 || tx.changes.length === 0) return [];
     const firstChange = tx.changes[0];
-    if (isItemAppend(firstChange) && tx.changes.every(
-      (c) => isItemAppend(c) && areSameOpIds(c.after, firstChange.after)
+    if (isItemAppend(coValue, firstChange) && tx.changes.every(
+      (c) => isItemAppend(coValue, c) && areSameOpIds(c.after, firstChange.after)
     )) {
       const changes = tx.changes;
       if (firstChange.after !== "start") {
@@ -2894,8 +2906,8 @@ function getTransactionChanges(tx, coValue) {
         }
       ];
     }
-    if (isItemPrepend(firstChange) && tx.changes.every(
-      (c) => isItemPrepend(c) && areSameOpIds(c.before, firstChange.before)
+    if (isItemPrepend(coValue, firstChange) && tx.changes.every(
+      (c) => isItemPrepend(coValue, c) && areSameOpIds(c.before, firstChange.before)
     )) {
       const changes = tx.changes;
       if (firstChange.before !== "end") {
@@ -2909,7 +2921,7 @@ function getTransactionChanges(tx, coValue) {
         }
       ];
     }
-    if (isItemDeletion(firstChange) && tx.changes.every((c) => isItemDeletion(c))) {
+    if (isItemDeletion(coValue, firstChange) && tx.changes.every((c) => isItemDeletion(coValue, c))) {
       let changesAreConsecutive2 = function(changes) {
         if (changes.length < 2) return false;
         const mapping = coValueBeforeDeletions.mapping.idxAfterOpID;
@@ -3079,29 +3091,29 @@ function getHistory(coValue) {
   });
 }
 function mapTransactionToAction(change, coValue) {
-  if (isUserPromotion(change)) {
+  if (isUserPromotion(coValue, change)) {
     if (change.value === "revoked") {
       return `${change.key} has been revoked`;
     }
     return `${change.key} has been promoted to ${change.value}`;
   }
-  if (isGroupExtension(change)) {
+  if (isGroupExtension(coValue, change)) {
     const child = change.key.slice(6);
     return `Group became a member of ${child}`;
   }
-  if (isGroupExtendRevocation(change)) {
+  if (isGroupExtendRevocation(coValue, change)) {
     const child = change.key.slice(6);
     return `Group's membership of ${child} has been revoked.`;
   }
-  if (isGroupPromotion(change)) {
+  if (isGroupPromotion(coValue, change)) {
     const parent = change.key.slice(7);
     return `Group ${parent} has been promoted to ${change.value}`;
   }
-  if (isKeyRevelation(change)) {
+  if (isKeyRevelation(coValue, change)) {
     const [key, target] = change.key.split("_for_");
     return `Key "${key}" has been revealed to "${target}"`;
   }
-  if (isItemAppend(change)) {
+  if (isItemAppend(coValue, change)) {
     if (change.after === "start") {
       return `"${change.value}" has been appended`;
     }
@@ -3111,7 +3123,7 @@ function mapTransactionToAction(change, coValue) {
     }
     return `"${change.value}" has been inserted after "${after.value}"`;
   }
-  if (isItemPrepend(change)) {
+  if (isItemPrepend(coValue, change)) {
     if (change.before === "end") {
       return `"${change.value}" has been prepended`;
     }
@@ -3121,26 +3133,26 @@ function mapTransactionToAction(change, coValue) {
     }
     return `"${change.value}" has been inserted before "${before.value}"`;
   }
-  if (isItemDeletion(change)) {
+  if (isItemDeletion(coValue, change)) {
     const insertion = findListChange(change.insertion, coValue);
     if (insertion === void 0) {
       return `An undefined item has been deleted`;
     }
     return `"${insertion.value}" has been deleted`;
   }
-  if (isStreamStart(change)) {
+  if (isStreamStart(coValue, change)) {
     return `Stream started with mime type "${change.mimeType}" and file name "${change.fileName}"`;
   }
-  if (isStreamChunk(change)) {
+  if (isStreamChunk(coValue, change)) {
     return `Stream chunk added`;
   }
-  if (isStreamEnd(change)) {
+  if (isStreamEnd(coValue, change)) {
     return `Stream ended`;
   }
-  if (isPropertySet(change)) {
+  if (isPropertySet(coValue, change)) {
     return `Property "${change.key}" has been set to ${JSON.stringify(change.value)}`;
   }
-  if (isPropertyDeletion(change)) {
+  if (isPropertyDeletion(coValue, change)) {
     return `Property "${change.key}" has been deleted`;
   }
   if (change.op === "custom") {
@@ -4093,4 +4105,4 @@ export {
   GlobalStyles,
   Header
 };
-//# sourceMappingURL=chunk-C6BJPHBQ.js.map
+//# sourceMappingURL=chunk-YQNK5Y7B.js.map