jazz-tools 0.19.15 → 0.19.16

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> jazz-tools@0.19.15 build /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.16 build /home/runner/_work/jazz/jazz/packages/jazz-tools
 > tsup && pnpm types && pnpm build:svelte
 
 CLI Building entry: {"index":"src/index.ts","testing":"src/testing.ts","tools/ssr":"src/tools/ssr/index.ts"}
@@ -109,21 +109,21 @@
 ESM Build start
 ESM dist/tiptap/index.js     564.00 B
 ESM dist/tiptap/index.js.map 1.21 KB
-ESM ⚡️ Build success in 84ms
+ESM ⚡️ Build success in 63ms
+ESM dist/better-auth/auth/client.js     4.50 KB
+ESM dist/better-auth/auth/react.js      799.00 B
+ESM dist/better-auth/auth/server.js     8.36 KB
+ESM dist/better-auth/auth/client.js.map 8.32 KB
+ESM dist/better-auth/auth/react.js.map  2.04 KB
+ESM dist/better-auth/auth/server.js.map 15.31 KB
+ESM ⚡️ Build success in 49ms
 ESM dist/worker/index.js           3.19 KB
 ESM dist/worker/edge-wasm.js       215.00 B
 ESM dist/worker/napi-crypto.js     110.00 B
-ESM dist/worker/edge-wasm.js.map   434.00 B
 ESM dist/worker/index.js.map       6.26 KB
+ESM dist/worker/edge-wasm.js.map   434.00 B
 ESM dist/worker/napi-crypto.js.map 162.00 B
-ESM ⚡️ Build success in 81ms
-ESM dist/better-auth/auth/client.js     4.50 KB
-ESM dist/better-auth/auth/server.js     8.36 KB
-ESM dist/better-auth/auth/react.js      799.00 B
-ESM dist/better-auth/auth/client.js.map 8.32 KB
-ESM dist/better-auth/auth/server.js.map 15.31 KB
-ESM dist/better-auth/auth/react.js.map  2.04 KB
-ESM ⚡️ Build success in 74ms
+ESM ⚡️ Build success in 62ms
 ESM dist/media/index.js              236.00 B
 ESM dist/media/index.browser.js      2.79 KB
 ESM dist/media/index.native.js       4.01 KB
@@ -134,32 +134,26 @@
 ESM dist/media/index.native.js.map   8.10 KB
 ESM dist/media/index.server.js.map   6.37 KB
 ESM dist/media/chunk-3LKBM3G3.js.map 16.99 KB
-ESM ⚡️ Build success in 80ms
+ESM ⚡️ Build success in 78ms
 ESM dist/expo/index.js         4.68 KB
-ESM dist/expo/crypto.js        153.00 B
 ESM dist/expo/testing.js       112.00 B
+ESM dist/expo/crypto.js        153.00 B
 ESM dist/expo/polyfills.js     858.00 B
 ESM dist/expo/index.js.map     10.23 KB
-ESM dist/expo/crypto.js.map    189.00 B
 ESM dist/expo/testing.js.map   168.00 B
+ESM dist/expo/crypto.js.map    189.00 B
 ESM dist/expo/polyfills.js.map 1.61 KB
-ESM ⚡️ Build success in 98ms
-ESM dist/prosemirror/index.js     77.76 KB
-ESM dist/prosemirror/index.js.map 307.20 KB
-ESM ⚡️ Build success in 117ms
+ESM ⚡️ Build success in 76ms
 ESM dist/react-core/index.js              17.05 KB
 ESM dist/react-core/testing.js            1.22 KB
 ESM dist/react-core/chunk-7DYMJ74I.js     279.00 B
 ESM dist/react-core/index.js.map          49.77 KB
 ESM dist/react-core/testing.js.map        1.86 KB
 ESM dist/react-core/chunk-7DYMJ74I.js.map 533.00 B
-ESM ⚡️ Build success in 119ms
-ESM dist/better-auth/database-adapter/index.js     26.65 KB
-ESM dist/better-auth/database-adapter/index.js.map 58.26 KB
-ESM ⚡️ Build success in 111ms
+ESM ⚡️ Build success in 98ms
 ESM dist/browser/index.js     16.14 KB
 ESM dist/browser/index.js.map 34.66 KB
-ESM ⚡️ Build success in 130ms
+ESM ⚡️ Build success in 111ms
 ESM dist/react-native-core/index.js               20.57 KB
 ESM dist/react-native-core/testing.js             119.00 B
 ESM dist/react-native-core/crypto.js              2.58 KB
@@ -168,14 +162,20 @@
 ESM dist/react-native-core/testing.js.map         175.00 B
 ESM dist/react-native-core/crypto.js.map          5.25 KB
 ESM dist/react-native-core/crypto/RNCrypto.js.map 178.00 B
-ESM ⚡️ Build success in 130ms
+ESM ⚡️ Build success in 124ms
+ESM dist/prosemirror/index.js     77.76 KB
+ESM dist/prosemirror/index.js.map 307.20 KB
+ESM ⚡️ Build success in 138ms
 ESM dist/react/index.js       25.96 KB
 ESM dist/react/testing.js     122.00 B
 ESM dist/react/ssr.js         697.00 B
 ESM dist/react/index.js.map   55.44 KB
 ESM dist/react/testing.js.map 165.00 B
 ESM dist/react/ssr.js.map     1.11 KB
-ESM ⚡️ Build success in 121ms
+ESM ⚡️ Build success in 122ms
+ESM dist/better-auth/database-adapter/index.js     26.65 KB
+ESM dist/better-auth/database-adapter/index.js.map 58.26 KB
+ESM ⚡️ Build success in 124ms
 ESM dist/react-native/index.js         23.11 KB
 ESM dist/react-native/testing.js       120.00 B
 ESM dist/react-native/crypto.js        161.00 B
@@ -184,38 +184,38 @@
 ESM dist/react-native/testing.js.map   176.00 B
 ESM dist/react-native/crypto.js.map    197.00 B
 ESM dist/react-native/polyfills.js.map 1.61 KB
-ESM ⚡️ Build success in 134ms
+ESM ⚡️ Build success in 144ms
 ESM dist/inspector/index.js              6.29 KB
 ESM dist/inspector/standalone.js         12.61 KB
 ESM dist/inspector/chunk-YQNK5Y7B.js     127.21 KB
 ESM dist/inspector/index.js.map          9.65 KB
 ESM dist/inspector/standalone.js.map     20.11 KB
 ESM dist/inspector/chunk-YQNK5Y7B.js.map 221.30 KB
-ESM ⚡️ Build success in 186ms
-ESM dist/inspector/register-custom-element.js     218.00 B
-ESM dist/inspector/register-custom-element.js.map 314.00 B
-ESM dist/inspector/custom-element-KYV64IOC.js     1.60 MB
-ESM dist/inspector/custom-element-KYV64IOC.js.map 2.47 MB
-ESM ⚡️ Build success in 251ms
-ESM dist/index.js              29.82 KB
+ESM ⚡️ Build success in 163ms
+ESM dist/index.js              30.20 KB
 ESM dist/testing.js            8.56 KB
-ESM dist/chunk-M2HGBOXS.js     694.00 B
+ESM dist/chunk-R3KIZG4P.js     226.01 KB
 ESM dist/tools/ssr.js          156.00 B
+ESM dist/chunk-M2HGBOXS.js     694.00 B
 ESM dist/chunk-PZ5AY32C.js     233.00 B
-ESM dist/chunk-R3KIZG4P.js     226.01 KB
+ESM dist/index.js.map          61.58 KB
 ESM dist/testing.js.map        16.21 KB
-ESM dist/index.js.map          60.59 KB
-ESM dist/chunk-M2HGBOXS.js.map 1.10 KB
 ESM dist/tools/ssr.js.map      71.00 B
+ESM dist/chunk-M2HGBOXS.js.map 1.10 KB
 ESM dist/chunk-PZ5AY32C.js.map 71.00 B
 ESM dist/chunk-R3KIZG4P.js.map 531.93 KB
-ESM ⚡️ Build success in 236ms
+ESM ⚡️ Build success in 227ms
+ESM dist/inspector/register-custom-element.js     218.00 B
+ESM dist/inspector/custom-element-KYV64IOC.js     1.60 MB
+ESM dist/inspector/register-custom-element.js.map 314.00 B
+ESM dist/inspector/custom-element-KYV64IOC.js.map 2.47 MB
+ESM ⚡️ Build success in 244ms
 
-> jazz-tools@0.19.15 types /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.16 types /home/runner/_work/jazz/jazz/packages/jazz-tools
 > tsc --outDir dist
 
 
-> jazz-tools@0.19.15 build:svelte /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.16 build:svelte /home/runner/_work/jazz/jazz/packages/jazz-tools
 > rm -rf dist/svelte && svelte-package -i src/svelte -o dist/svelte --tsconfig tsconfig.svelte.json
 
 src/svelte -> dist/svelte

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # jazz-tools
 
+## 0.19.16
+
+### Patch Changes
+
+- 25268bf: Bugfix: fixed a race condition in Clerk auth where the signup flow could trigger a duplicate login attempt
+- Updated dependencies [265d0e9]
+  - cojson@0.19.16
+  - cojson-storage-indexeddb@0.19.16
+  - cojson-transport-ws@0.19.16
+
 ## 0.19.15
 
 ### Patch Changes

package/dist/index.js

@@ -95,9 +95,12 @@ function isClerkAuthStateEqual(previousUser, newUser) {
   if (Boolean(previousUser) !== Boolean(newUser)) {
     return false;
   }
-  const previousCredentials = isClerkCredentials(previousUser?.unsafeMetadata);
-  const newCredentials = isClerkCredentials(newUser?.unsafeMetadata);
-  return previousCredentials === newCredentials;
+  const previousCredentials = isClerkCredentials(previousUser?.unsafeMetadata) ? previousUser?.unsafeMetadata : null;
+  const newCredentials = isClerkCredentials(newUser?.unsafeMetadata) ? newUser?.unsafeMetadata : null;
+  if (!previousCredentials || !newCredentials) {
+    return previousCredentials === newCredentials;
+  }
+  return previousCredentials.jazzAccountID === newCredentials.jazzAccountID;
 }
 
 // src/tools/auth/clerk/index.ts
@@ -107,6 +110,7 @@ var JazzClerkAuth = class _JazzClerkAuth {
     this.logOut = logOut;
     this.authSecretStorage = authSecretStorage;
     this.isFirstCall = true;
+    this.previousUser = null;
     this.onClerkUserChange = async (clerkClient) => {
       const isAuthenticated = this.authSecretStorage.isAuthenticated;
       if (!clerkClient.user) {
@@ -154,13 +158,17 @@ var JazzClerkAuth = class _JazzClerkAuth {
         throw new Error("No credentials found");
       }
       const jazzAccountSeed = credentials.secretSeed ? Array.from(credentials.secretSeed) : void 0;
-      await clerkClient.user?.update({
-        unsafeMetadata: {
-          jazzAccountID: credentials.accountID,
-          jazzAccountSecret: credentials.accountSecret,
-          jazzAccountSeed
-        }
-      });
+      const clerkCredentials = {
+        jazzAccountID: credentials.accountID,
+        jazzAccountSecret: credentials.accountSecret,
+        jazzAccountSeed
+      };
+      this.previousUser = { unsafeMetadata: clerkCredentials };
+      if (clerkClient.user) {
+        await clerkClient.user.update({
+          unsafeMetadata: clerkCredentials
+        });
+      }
       const currentAccount = await Account2.getMe().$jazz.ensureLoaded({
         resolve: {
           profile: true
@@ -202,12 +210,12 @@ var JazzClerkAuth = class _JazzClerkAuth {
     );
   }
   registerListener(clerkClient) {
-    let previousUser = clerkClient.user ?? null;
+    this.previousUser = clerkClient.user ?? null;
     return clerkClient.addListener((event) => {
       const user = event.user ?? null;
-      if (!isClerkAuthStateEqual(previousUser, user) || this.isFirstCall) {
+      if (!isClerkAuthStateEqual(this.previousUser, user) || this.isFirstCall) {
+        this.previousUser = user;
         this.onClerkUserChange({ user });
-        previousUser = user;
         this.isFirstCall = false;
       }
     });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/tools/auth/clerk/index.ts","../src/tools/auth/clerk/getClerkUsername.ts","../src/tools/auth/clerk/types.ts","../src/tools/auth/DemoAuth.ts","../src/tools/auth/PassphraseAuth.ts","../src/tools/implementation/invites.ts","../src/tools/coValues/request.ts","../src/tools/config.ts","../src/tools/index.ts"],"sourcesContent":["import {\n  Account,\n  AuthCredentials,\n  AuthSecretStorage,\n  AuthenticateAccountFunction,\n} from \"jazz-tools\";\nimport { getClerkUsername } from \"./getClerkUsername.js\";\nimport {\n  ClerkCredentials,\n  MinimalClerkClient,\n  isClerkAuthStateEqual,\n  isClerkCredentials,\n} from \"./types.js\";\n\nexport type { MinimalClerkClient };\nexport { isClerkCredentials };\n\nexport class JazzClerkAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private logOut: () => Promise<void> | void,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  /**\n   * Loads the Jazz auth data from the Clerk user and sets it in the auth secret storage.\n   */\n  static loadClerkAuthData(\n    credentials: ClerkCredentials,\n    storage: AuthSecretStorage,\n  ) {\n    return storage.set({\n      accountID: credentials.jazzAccountID,\n      accountSecret: credentials.jazzAccountSecret,\n      secretSeed: credentials.jazzAccountSeed\n        ? Uint8Array.from(credentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    });\n  }\n\n  static async initializeAuth(clerk: MinimalClerkClient) {\n    const secretStorage = new AuthSecretStorage();\n\n    if (!isClerkCredentials(clerk.user?.unsafeMetadata)) {\n      return;\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      clerk.user.unsafeMetadata,\n      secretStorage,\n    );\n  }\n\n  private isFirstCall = true;\n\n  registerListener(clerkClient: MinimalClerkClient) {\n    let previousUser: MinimalClerkClient[\"user\"] | null =\n      clerkClient.user ?? null;\n\n    // Need to use addListener because the clerk user object is not updated when the user logs in\n    return clerkClient.addListener((event) => {\n      const user = (event as Pick<MinimalClerkClient, \"user\">).user ?? null;\n\n      if (!isClerkAuthStateEqual(previousUser, user) || this.isFirstCall) {\n        this.onClerkUserChange({ user });\n        previousUser = user;\n        this.isFirstCall = false;\n      }\n    });\n  }\n\n  onClerkUserChange = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    const isAuthenticated = this.authSecretStorage.isAuthenticated;\n\n    // LogOut is driven by Clerk. The framework adapters will need to pass `logOutReplacement` to the `JazzProvider`\n    // to make the logOut work correctly.\n    if (!clerkClient.user) {\n      if (isAuthenticated) {\n        this.authSecretStorage.clear();\n        await this.logOut();\n      }\n      return;\n    }\n\n    if (isAuthenticated) return;\n\n    const clerkCredentials = clerkClient.user\n      .unsafeMetadata as ClerkCredentials;\n\n    if (!clerkCredentials.jazzAccountID) {\n      await this.signIn(clerkClient);\n    } else {\n      await this.logIn(clerkClient);\n    }\n  };\n\n  logIn = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    if (!clerkClient.user) {\n      throw new Error(\"Not signed in on Clerk\");\n    }\n\n    const clerkCredentials = clerkClient.user.unsafeMetadata;\n    if (!isClerkCredentials(clerkCredentials)) {\n      throw new Error(\"No credentials found on Clerk\");\n    }\n\n    const credentials = {\n      accountID: clerkCredentials.jazzAccountID,\n      accountSecret: clerkCredentials.jazzAccountSecret,\n      secretSeed: clerkCredentials.jazzAccountSeed\n        ? Uint8Array.from(clerkCredentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    } satisfies AuthCredentials;\n\n    await this.authenticate(credentials);\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed: clerkCredentials.jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n\n  signIn = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const jazzAccountSeed = credentials.secretSeed\n      ? Array.from(credentials.secretSeed)\n      : undefined;\n\n    await clerkClient.user?.update({\n      unsafeMetadata: {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed,\n      } satisfies ClerkCredentials,\n    });\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    const username = getClerkUsername(clerkClient);\n\n    if (username) {\n      currentAccount.profile.$jazz.set(\"name\", username);\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n}\n\n// eslint-disable-next-line @typescript-eslint/no-namespace\nexport namespace BrowserClerkAuth {\n  export interface Driver {\n    onError: (error: string | Error) => void;\n  }\n}\n","import type { MinimalClerkClient } from \"./types.js\";\n\nexport function getClerkUsername(\n  clerkClient: Pick<MinimalClerkClient, \"user\">,\n) {\n  if (!clerkClient.user) {\n    return null;\n  }\n\n  if (clerkClient.user.fullName) {\n    return clerkClient.user.fullName;\n  }\n\n  if (clerkClient.user.firstName) {\n    if (clerkClient.user.lastName) {\n      return `${clerkClient.user.firstName} ${clerkClient.user.lastName}`;\n    }\n\n    return clerkClient.user.firstName;\n  }\n\n  if (clerkClient.user.username) {\n    return clerkClient.user.username;\n  }\n\n  if (clerkClient.user.primaryEmailAddress?.emailAddress) {\n    const emailUsername =\n      clerkClient.user.primaryEmailAddress.emailAddress.split(\"@\")[0];\n\n    if (emailUsername) {\n      return emailUsername;\n    }\n  }\n\n  return clerkClient.user.id;\n}\n","import { AgentSecret } from \"cojson\";\nimport { Account, ID } from \"jazz-tools\";\n\nexport type MinimalClerkClient = {\n  user:\n    | {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        unsafeMetadata: Record<string, any>;\n        fullName: string | null;\n        username: string | null;\n        firstName: string | null;\n        lastName: string | null;\n        id: string;\n        primaryEmailAddress: {\n          emailAddress: string | null;\n        } | null;\n        update: (args: {\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          unsafeMetadata: Record<string, any>;\n        }) => Promise<unknown>;\n      }\n    | null\n    | undefined;\n  signOut: () => Promise<void>;\n  addListener: (listener: (data: unknown) => void) => void;\n};\n\nexport type ClerkCredentials = {\n  jazzAccountID: ID<Account>;\n  jazzAccountSecret: AgentSecret;\n  jazzAccountSeed?: number[];\n};\n\n/**\n * Checks if the Clerk user metadata contains the necessary credentials for Jazz auth.\n * **Note**: It does not validate the credentials, only checks if the necessary fields are present in the metadata object.\n */\nexport function isClerkCredentials(\n  data: NonNullable<MinimalClerkClient[\"user\"]>[\"unsafeMetadata\"] | undefined,\n): data is ClerkCredentials {\n  return !!data && \"jazzAccountID\" in data && \"jazzAccountSecret\" in data;\n}\n\nexport function isClerkAuthStateEqual(\n  previousUser: MinimalClerkClient[\"user\"] | null | undefined,\n  newUser: MinimalClerkClient[\"user\"] | null | undefined,\n) {\n  if (Boolean(previousUser) !== Boolean(newUser)) {\n    return false;\n  }\n\n  const previousCredentials = isClerkCredentials(previousUser?.unsafeMetadata);\n  const newCredentials = isClerkCredentials(newUser?.unsafeMetadata);\n\n  return previousCredentials === newCredentials;\n}\n","import { AgentSecret } from \"cojson\";\nimport { Account, ID } from \"../internal.js\";\nimport { AuthenticateAccountFunction } from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\nimport { KvStore, KvStoreContext } from \"./KvStoreContext.js\";\n\ntype StorageData = {\n  accountID: ID<Account>;\n  accountSecret: AgentSecret;\n  secretSeed?: number[];\n};\n\n/**\n * `DemoAuth` provides a `JazzAuth` object for demo authentication.\n *\n * Demo authentication is useful for quickly testing your app, as it allows you to create new accounts and log in as existing ones.\n *\n * ```\n * import { DemoAuth } from \"jazz-tools\";\n *\n * const auth = new DemoAuth(jazzContext.authenticate, new AuthSecretStorage());\n * ```\n *\n * @category Auth Providers\n */\nexport class DemoAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  logIn = async (username: string) => {\n    const existingUsers = await this.getExisitingUsersWithData();\n    const storageData = existingUsers[username];\n\n    if (!storageData?.accountID) {\n      throw new Error(\"User not found\");\n    }\n\n    await this.authenticate({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n      secretSeed: storageData.secretSeed\n        ? new Uint8Array(storageData.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n  };\n\n  signUp = async (username: string) => {\n    const existingUsers = await this.getExistingUsers();\n    if (existingUsers.includes(username)) {\n      throw new Error(\"User already registered\");\n    }\n\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    currentAccount.profile.$jazz.set(\"name\", username);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? new Uint8Array(credentials.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n\n    await this.addToExistingUsers(username, {\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? Array.from(credentials.secretSeed)\n        : undefined,\n    });\n  };\n\n  private async addToExistingUsers(username: string, data: StorageData) {\n    const existingUsers = await this.getExisitingUsersWithData();\n\n    if (existingUsers[username]) {\n      return;\n    }\n\n    existingUsers[username] = data;\n\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n  }\n\n  private async getExisitingUsersWithData() {\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await migrateExistingUsers(kvStore);\n\n    const existingUsers = await kvStore.get(\"demo-auth-users\");\n    return existingUsers ? JSON.parse(existingUsers) : {};\n  }\n\n  getExistingUsers = async () => {\n    return Object.keys(await this.getExisitingUsersWithData());\n  };\n}\n\nexport function encodeUsername(username: string) {\n  return btoa(username)\n    .replace(/=/g, \"-\")\n    .replace(/\\+/g, \"_\")\n    .replace(/\\//g, \".\");\n}\n\nasync function getStorageVersion(kvStore: KvStore) {\n  try {\n    const version = await kvStore.get(\"demo-auth-storage-version\");\n    return version ? parseInt(version) : 1;\n  } catch (error) {\n    return 1;\n  }\n}\n\nasync function setStorageVersion(kvStore: KvStore, version: number) {\n  await kvStore.set(\"demo-auth-storage-version\", version.toString());\n}\n\nasync function getExistingUsersList(kvStore: KvStore) {\n  const existingUsers = await kvStore.get(\"demo-auth-existing-users\");\n  return existingUsers ? existingUsers.split(\",\") : [];\n}\n\n/**\n * Migrates existing users keys to work with any storage.\n */\nasync function migrateExistingUsers(kvStore: KvStore) {\n  if ((await getStorageVersion(kvStore)) < 2) {\n    const existingUsers = await getExistingUsersList(kvStore);\n\n    for (const username of existingUsers) {\n      const legacyKey = `demo-auth-existing-users-${username}`;\n      const storageData = await kvStore.get(legacyKey);\n      if (storageData) {\n        await kvStore.set(\n          `demo-auth-existing-users-${encodeUsername(username)}`,\n          storageData,\n        );\n        await kvStore.delete(legacyKey);\n      }\n    }\n\n    await setStorageVersion(kvStore, 2);\n  }\n\n  if ((await getStorageVersion(kvStore)) < 3) {\n    const existingUsersList = await getExistingUsersList(kvStore);\n\n    const existingUsers: Record<string, StorageData> = {};\n    const keysToDelete: string[] = [\"demo-auth-existing-users\"];\n\n    for (const username of existingUsersList) {\n      const key = `demo-auth-existing-users-${encodeUsername(username)}`;\n      const storageData = await kvStore.get(key);\n      if (storageData) {\n        existingUsers[username] = JSON.parse(storageData);\n        keysToDelete.push(key);\n      }\n    }\n\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n\n    for (const key of keysToDelete) {\n      await kvStore.delete(key);\n    }\n\n    await setStorageVersion(kvStore, 3);\n  }\n}\n","import * as bip39 from \"@scure/bip39\";\nimport { entropyToMnemonic } from \"@scure/bip39\";\nimport { CryptoProvider, cojsonInternals } from \"cojson\";\nimport type { ID } from \"../internal.js\";\nimport { Account } from \"../internal.js\";\nimport type {\n  AuthenticateAccountFunction,\n  RegisterAccountFunction,\n} from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\n\n/**\n * `PassphraseAuth` provides a `JazzAuth` object for passphrase authentication.\n *\n * ```ts\n * import { PassphraseAuth } from \"jazz-tools\";\n *\n * const auth = new PassphraseAuth(crypto, jazzContext.authenticate, new AuthSecretStorage(), wordlist);\n * ```\n *\n * @category Auth Providers\n */\nexport class PassphraseAuth {\n  passphrase: string = \"\";\n\n  constructor(\n    private crypto: CryptoProvider,\n    private authenticate: AuthenticateAccountFunction,\n    private register: RegisterAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n    public wordlist: string[],\n  ) {}\n\n  logIn = async (passphrase: string) => {\n    const { crypto, authenticate } = this;\n\n    let secretSeed;\n\n    try {\n      secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    } catch (e) {\n      throw new Error(\"Invalid passphrase\");\n    }\n\n    const accountSecret = crypto.agentSecretFromSecretSeed(secretSeed);\n\n    const accountID = cojsonInternals.idforHeader(\n      cojsonInternals.accountHeaderForInitialAgentSecret(accountSecret, crypto),\n      crypto,\n    ) as ID<Account>;\n\n    await authenticate({\n      accountID,\n      accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  signUp = async (name?: string) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const passphrase = entropyToMnemonic(credentials.secretSeed, this.wordlist);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      secretSeed: credentials.secretSeed,\n      accountSecret: credentials.accountSecret,\n      provider: \"passphrase\",\n    });\n\n    if (name?.trim()) {\n      const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n        resolve: {\n          profile: true,\n        },\n      });\n\n      currentAccount.profile.$jazz.set(\"name\", name);\n    }\n\n    return passphrase;\n  };\n\n  registerNewAccount = async (passphrase: string, name: string) => {\n    const secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    const accountSecret = this.crypto.agentSecretFromSecretSeed(secretSeed);\n    const accountID = await this.register(accountSecret, { name });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    return accountID;\n  };\n\n  getCurrentAccountPassphrase = async () => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    return entropyToMnemonic(credentials.secretSeed, this.wordlist);\n  };\n\n  generateRandomPassphrase = () => {\n    return entropyToMnemonic(this.crypto.newRandomSecretSeed(), this.wordlist);\n  };\n\n  loadCurrentAccountPassphrase = async () => {\n    const passphrase = await this.getCurrentAccountPassphrase();\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  listeners = new Set<() => void>();\n  subscribe = (callback: () => void) => {\n    this.listeners.add(callback);\n\n    return () => {\n      this.listeners.delete(callback);\n    };\n  };\n\n  notify() {\n    for (const listener of this.listeners) {\n      listener();\n    }\n  }\n}\n","import { AccountRole, type InviteSecret, cojsonInternals } from \"cojson\";\nimport { Account } from \"../coValues/account.js\";\nimport type { CoValue, CoValueClassOrSchema } from \"../internal.js\";\n\n/** @category Invite Links */\nexport function createInviteLink<C extends CoValue>(\n  value: C,\n  role: AccountRole,\n  baseURL: string,\n  valueHint?: string,\n): string {\n  const coValueCore = value.$jazz.raw.core;\n  let currentCoValue = coValueCore;\n\n  while (currentCoValue.verified.header.ruleset.type === \"ownedByGroup\") {\n    currentCoValue = currentCoValue.getGroup().core;\n  }\n\n  const { ruleset, meta } = currentCoValue.verified.header;\n\n  if (ruleset.type !== \"group\" || meta?.type === \"account\") {\n    throw new Error(\"Can't create invite link for object without group\");\n  }\n\n  const group = cojsonInternals.expectGroup(currentCoValue.getCurrentContent());\n  const inviteSecret = group.createInvite(role);\n\n  return `${baseURL}#/invite/${valueHint ? valueHint + \"/\" : \"\"}${\n    value.$jazz.id\n  }/${inviteSecret}`;\n}\n\n/** @category Invite Links */\nexport function parseInviteLink(inviteURL: string):\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined {\n  const url = new URL(inviteURL);\n  const parts = url.hash.split(\"/\");\n\n  let valueHint: string | undefined;\n  let valueID: string | undefined;\n  let inviteSecret: InviteSecret | undefined;\n\n  if (parts[0] === \"#\" && parts[1] === \"invite\") {\n    if (parts.length === 5) {\n      valueHint = parts[2];\n      valueID = parts[3];\n      inviteSecret = parts[4] as InviteSecret;\n    } else if (parts.length === 4) {\n      valueID = parts[2];\n      inviteSecret = parts[3] as InviteSecret;\n    }\n\n    if (!valueID || !inviteSecret) {\n      return undefined;\n    }\n    return { valueID, inviteSecret, valueHint };\n  }\n}\n\n/** @category Invite Links */\nexport function consumeInviteLink<S extends CoValueClassOrSchema>({\n  inviteURL,\n  as = Account.getMe(),\n  forValueHint,\n  invitedObjectSchema,\n}: {\n  inviteURL: string;\n  as?: Account;\n  forValueHint?: string;\n  invitedObjectSchema: S;\n}): Promise<\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined\n> {\n  return new Promise((resolve, reject) => {\n    const result = parseInviteLink(inviteURL);\n\n    if (result && result.valueHint === forValueHint) {\n      as.acceptInvite(result.valueID, result.inviteSecret, invitedObjectSchema)\n        .then(() => {\n          resolve(result);\n        })\n        .catch(reject);\n    } else {\n      resolve(undefined);\n    }\n  });\n}\n","import {\n  CoValueCore,\n  CojsonInternalTypes,\n  CryptoProvider,\n  RawAccount,\n  RawCoMap,\n  cojsonInternals,\n} from \"cojson\";\nimport z from \"zod/v4\";\nimport {\n  AnyZodOrCoValueSchema,\n  CoMap,\n  CoMapSchema,\n  CoMapSchemaInit,\n  CoValueClass,\n  CoreCoMapSchema,\n  Group,\n  Loaded,\n  ResolveQuery,\n  ResolveQueryStrict,\n  Simplify,\n  coMapDefiner,\n  coValueClassFromCoValueClassOrSchema,\n  exportCoValue,\n  importContentPieces,\n  loadCoValue,\n} from \"../internal.js\";\nimport { isCoValueId } from \"../lib/utils.js\";\nimport { Account } from \"./account.js\";\n\ntype MessageShape = Record<string, AnyZodOrCoValueSchema>;\n\ntype RequestSchemaDefinition<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>> = true,\n> =\n  | S\n  | {\n      schema: S;\n      resolve?: R;\n    };\n\n/**\n * Configuration options for defining HTTP request/response schemas in Jazz.\n *\n * This interface defines the structure for creating typed HTTP routes with\n * request and response validation using CoMap schemas.\n *\n * @template RequestShape - The shape of the request message schema (must extend MessageShape)\n * @template RequestResolve - The resolve query type for the request CoMap schema\n * @template ResponseShape - The shape of the response message schema (must extend MessageShape)\n * @template ResponseResolve - The resolve query type for the response CoMap schema\n */\ninterface RequestOptions<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n> {\n  /**\n   * The URL endpoint for the HTTP route.\n   * This is used by the client to send requests to the server.\n   */\n  url: string;\n\n  /**\n   * The id of the worker Account or Group.\n   */\n  workerId: string;\n\n  /**\n   * Schema definition for the request payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for incoming requests.\n   */\n  request: RequestSchemaDefinition<\n    RequestShape,\n    ResolveQueryStrict<CoMapSchema<RequestShape>, RequestResolve>\n  >;\n\n  /**\n   * Schema definition for the response payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for outgoing responses.\n   */\n  response: RequestSchemaDefinition<\n    ResponseShape,\n    ResolveQueryStrict<CoMapSchema<ResponseShape>, ResponseResolve>\n  >;\n}\n\ntype AsNullablePayload<T extends MessageShape> = T extends Record<string, never>\n  ? undefined\n  : never;\ntype MessageValuePayload<T extends MessageShape> =\n  | Simplify<CoMapSchemaInit<T>>\n  | AsNullablePayload<T>;\n\nfunction createMessageEnvelope<S extends MessageShape>(\n  schema: CoreCoMapSchema,\n  value: MessageValuePayload<S>,\n  owner: Account,\n  sharedWith: Account | Group,\n  type: \"request\" | \"response\",\n): Loaded<CoMapSchema<S>> {\n  const group = Group.create({ owner });\n\n  if (type === \"request\") {\n    group.addMember(sharedWith, \"writer\");\n  } else {\n    group.addMember(sharedWith, \"reader\");\n  }\n\n  // @ts-expect-error - CoreCoMapSchema doesn't have static methods\n  return schema.create(value ?? {}, group);\n}\n\n/**\n * Function that exports the input CoValue in a serializable format and prepares the information\n * required for the other side to safely verify the identity of the sender.\n */\nasync function serializeMessagePayload({\n  type,\n  schema,\n  resolve,\n  value,\n  owner,\n  target,\n}: {\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  type: \"request\" | \"response\";\n  schema: CoreCoMapSchema;\n  resolve: any;\n  value: any;\n  owner: Account;\n  target: Account | Group;\n}) {\n  const me = owner ?? Account.getMe();\n  const node = me.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerID = agent.currentSignerID();\n  const signerSecret = agent.currentSignerSecret();\n\n  const envelope = createMessageEnvelope(schema, value, me, target, type);\n\n  const contentPieces =\n    (await exportCoValue(schema, envelope.$jazz.id, {\n      resolve,\n      loadAs: me,\n      bestEffortResolution: true,\n    })) ?? [];\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    signerID,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return {\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    authToken,\n    signerID,\n  };\n}\n\nconst coIdSchema = z.custom<`co_z${string}`>(isCoValueId);\nconst signatureSchema = z.custom<`signature_z${string}`>(\n  (value) => typeof value === \"string\" && value.startsWith(\"signature_z\"),\n);\n\nconst requestSchema = z.object({\n  contentPieces: z.array(z.json()),\n  id: coIdSchema,\n  createdAt: z.number(),\n  authToken: signatureSchema,\n  signerID: z.custom<`signer_z${string}`>(\n    (value) => typeof value === \"string\" && value.startsWith(\"signer_z\"),\n  ),\n});\n\n/**\n * Function that parses the message payload, verifies the identity of the sender and loads the data.\n *\n * @returns The data from the message.\n */\nasync function handleMessagePayload({\n  type,\n  schema,\n  resolve,\n  request,\n  loadAs,\n}: {\n  type: \"request\" | \"response\";\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  schema: CoreCoMapSchema;\n  resolve: any;\n  request: unknown;\n  loadAs: Account;\n}) {\n  const node = loadAs.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const requestParsed = requestSchema.safeParse(request);\n\n  if (!requestParsed.success) {\n    throw new JazzRequestError(\n      \"Request payload is not valid\",\n      400,\n      requestParsed.error,\n    );\n  }\n\n  const requestData = requestParsed.data;\n\n  if (type === \"request\") {\n    const core = await node.loadCoValueCore(requestData.id, undefined, true);\n\n    // Check if the message has already been handled to prevent replay attacks\n    if (core.isAvailable()) {\n      const content = core.getCurrentContent() as RawCoMap;\n\n      if (content.get(\"$handled\") === loadAs.$jazz.id) {\n        throw new JazzRequestError(\"Request payload is already handled\", 400);\n      }\n    }\n\n    // Check if the message is expired as extra protection\n    if (requestData.createdAt + 1000 * 60 < Date.now()) {\n      throw new JazzRequestError(\"Authentication token is expired\", 401);\n    }\n  }\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    contentPieces: requestData.contentPieces,\n    id: requestData.id,\n    createdAt: requestData.createdAt,\n    signerID: requestData.signerID,\n  });\n\n  if (\n    !safeVerifySignature(\n      crypto,\n      signPayload,\n      requestData.signerID,\n      requestData.authToken,\n    )\n  ) {\n    throw new JazzRequestError(\"Invalid signature\", 401);\n  }\n\n  let contentPieces =\n    requestData.contentPieces as CojsonInternalTypes.NewContentMessage[];\n\n  if (type === \"request\") {\n    const coValueContent = contentPieces.find(\n      (piece) => piece.id === requestData.id,\n    );\n\n    if (coValueContent && coValueContent.header) {\n      const validValues = cojsonInternals.getDependedOnCoValues(\n        coValueContent.header,\n        coValueContent,\n      );\n      validValues.add(requestData.id);\n      contentPieces = contentPieces.filter((piece) =>\n        validValues.has(piece.id),\n      );\n    } else {\n      contentPieces = [];\n    }\n  }\n\n  importContentPieces(contentPieces, loadAs);\n\n  const coValue = await node.loadCoValueCore(requestData.id);\n  const accountId = getCoValueCreatorAccountId(coValue);\n\n  const madeBy = await Account.load(accountId, {\n    loadAs,\n  });\n\n  if (!madeBy.$isLoaded) {\n    throw new JazzRequestError(\"Creator account not found\", 400);\n  }\n\n  const coSchema = coValueClassFromCoValueClassOrSchema(\n    schema,\n  ) as CoValueClass<CoMap>;\n  const value = await loadCoValue<CoMap, true>(coSchema, requestData.id, {\n    resolve,\n    loadAs,\n  });\n\n  if (!value.$isLoaded) {\n    throw new JazzRequestError(\"Value not found\", 400);\n  }\n\n  if (type === \"request\") {\n    value.$jazz.raw.set(\"$handled\", loadAs.$jazz.id);\n  }\n\n  return {\n    value: value as unknown,\n    madeBy,\n  };\n}\n\nfunction parseSchemaAndResolve<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>>,\n>(options: RequestSchemaDefinition<S, R>) {\n  if (\"schema\" in options) {\n    return {\n      // Using a type cast to reduce the type complexity\n      schema: coMapDefiner(options.schema) as CoreCoMapSchema,\n      resolve: options.resolve as any,\n    };\n  }\n\n  return {\n    schema: coMapDefiner(options) as CoreCoMapSchema,\n    resolve: true as any,\n  };\n}\n\nexport class HttpRoute<\n  RequestShape extends MessageShape = z.core.$ZodLooseShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>> = any,\n  ResponseShape extends MessageShape = z.core.$ZodLooseShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>> = any,\n> {\n  private requestDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private responseDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private url: string;\n  private workerId: string;\n\n  constructor(\n    params: RequestOptions<\n      RequestShape,\n      RequestResolve,\n      ResponseShape,\n      ResponseResolve\n    >,\n  ) {\n    this.requestDefinition = parseSchemaAndResolve(params.request);\n    this.responseDefinition = parseSchemaAndResolve(params.response);\n    this.url = params.url;\n    this.workerId = params.workerId;\n\n    if (params.workerId === undefined) {\n      throw new TypeError(\"Worker ID is required\");\n    }\n  }\n\n  async send(\n    values: MessageValuePayload<RequestShape>,\n    options?: { owner?: Account },\n  ): Promise<Loaded<CoMapSchema<ResponseShape>, ResponseResolve>> {\n    const as = options?.owner ?? Account.getMe();\n\n    const target = await loadWorkerAccountOrGroup(this.workerId, as);\n\n    const response = await fetch(this.url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(\n        await serializeMessagePayload({\n          type: \"request\",\n          schema: this.requestDefinition.schema,\n          resolve: true, // export only the envelope\n          value: values,\n          owner: as,\n          target,\n        }),\n      ),\n    });\n\n    if (!response.ok) {\n      if (response.headers.has(\"X-Jazz-Request-Error\")) {\n        const error = await response.json();\n        throw new JazzRequestError(error.message, error.code, error.details);\n      }\n\n      throw new JazzRequestError(\"Request failed\", response.status);\n    }\n\n    const responseBody = await response.json();\n\n    const responseParsed = z\n      .object({\n        type: z.literal(\"success\"),\n        payload: z.any(),\n      })\n      .safeParse(responseBody);\n\n    if (!responseParsed.success) {\n      throw new JazzRequestError(\n        \"Response payload is not valid\",\n        400,\n        responseParsed.error,\n      );\n    }\n\n    const data = await handleMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      request: responseParsed.data.payload,\n      loadAs: as,\n    });\n\n    return data.value as Loaded<CoMapSchema<ResponseShape>, ResponseResolve>;\n  }\n\n  handle = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    try {\n      const response = await this.executeHandleRequest(request, as, callback);\n      return response;\n    } catch (error) {\n      // Serialize the error to make it possible to handle it on the client side\n      if (isJazzRequestError(error)) {\n        return new Response(JSON.stringify(error.toJSON()), {\n          status: error.code,\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"X-Jazz-Request-Error\": \"true\",\n          },\n        });\n      }\n\n      throw error;\n    }\n  };\n\n  executeHandleRequest = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    const node = as.$jazz.localNode;\n    const body = await request.json();\n    const data = await handleMessagePayload({\n      type: \"request\",\n      schema: this.requestDefinition.schema,\n      resolve: this.requestDefinition.resolve,\n      request: body,\n      loadAs: as,\n    });\n\n    const tracking = node.syncManager.trackDirtyCoValues();\n\n    const responseValue = await callback(\n      data.value as Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      data.madeBy,\n    );\n\n    const responsePayload = await serializeMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      value: responseValue,\n      owner: as,\n      target: data.madeBy,\n    });\n\n    const responseBody = JSON.stringify({\n      type: \"success\",\n      payload: responsePayload,\n    });\n\n    // TODO: Detect the defer support from the environment\n    await Promise.all(\n      Array.from(tracking.done(), (id) => node.syncManager.waitForSync(id)),\n    );\n\n    return new Response(responseBody, {\n      status: 200,\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n    });\n  };\n\n  get requestSchema(): CoMapSchema<RequestShape> {\n    return this.requestDefinition.schema as CoMapSchema<RequestShape>;\n  }\n\n  get responseSchema() {\n    return this.responseDefinition.schema as CoMapSchema<ResponseShape>;\n  }\n}\n\n/**\n * Define a request route.\n *\n * @param params - The parameters for the request route.\n * @returns The request route.\n *\n * @see {@link https://jazz.tools/docs/react/server-side/http-requests}\n */\nexport function experimental_defineRequest<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n>(\n  params: RequestOptions<\n    RequestShape,\n    RequestResolve,\n    ResponseShape,\n    ResponseResolve\n  >,\n) {\n  return new HttpRoute(params);\n}\n\nfunction getCoValueCreatorAccountId(coValue: CoValueCore) {\n  if (!coValue.isAvailable()) {\n    throw new Error(\"Unable to load the request payload\");\n  }\n\n  const creatorSessionId = coValue.getValidSortedTransactions().at(0)\n    ?.txID.sessionID;\n\n  if (!creatorSessionId) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, creator session ID not found\",\n      400,\n    );\n  }\n\n  const accountId =\n    cojsonInternals.accountOrAgentIDfromSessionID(creatorSessionId);\n\n  if (!isCoValueId(accountId)) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, the creator is not a valid account\",\n      400,\n    );\n  }\n\n  return accountId;\n}\n\nexport class JazzRequestError {\n  public readonly isJazzRequestError = true;\n\n  constructor(\n    public readonly message: string,\n    public readonly code: number,\n    public readonly details?: unknown,\n  ) {}\n\n  toJSON() {\n    return { message: this.message, code: this.code, details: this.details };\n  }\n}\n\nexport function isJazzRequestError(error: unknown): error is JazzRequestError {\n  return (\n    error instanceof JazzRequestError ||\n    (typeof error === \"object\" &&\n      error !== null &&\n      \"isJazzRequestError\" in error &&\n      Boolean(error.isJazzRequestError))\n  );\n}\n\nfunction safeVerifySignature(\n  crypto: CryptoProvider,\n  signPayload: `hash_z${string}`,\n  signerID: `signer_z${string}`,\n  authToken: `signature_z${string}`,\n) {\n  try {\n    return crypto.verify(authToken, signPayload, signerID);\n  } catch (error) {\n    return false;\n  }\n}\n\nasync function loadWorkerAccountOrGroup(id: string, loadAs: Account) {\n  const node = loadAs.$jazz.localNode;\n  const coValue = await node.loadCoValueCore(id as `co_z${string}`);\n\n  if (!coValue.isAvailable()) {\n    throw new JazzRequestError(\"Worker account not found\", 400);\n  }\n\n  const content = coValue.getCurrentContent();\n\n  if (content instanceof RawAccount) {\n    const account = await Account.load(content.id, {\n      loadAs,\n    });\n    if (!account.$isLoaded) {\n      throw new JazzRequestError(\"Worker account not found\", 400);\n    }\n    return account;\n  }\n\n  const group = await Group.load(content.id, {\n    loadAs,\n  });\n\n  if (!group.$isLoaded) {\n    throw new JazzRequestError(\"Worker group not found\", 400);\n  }\n  return group;\n}\n\nfunction defaultGetToken(request: Request) {\n  const headerValue = request.headers.get(\"Authorization\");\n  if (headerValue?.startsWith(\"Jazz \")) {\n    return headerValue.replace(\"Jazz \", \"\");\n  }\n\n  if (headerValue) {\n    console.warn(\n      \"An Authorization header was found, but it did not start with 'Jazz '. If this is intentional, you can specify the location of the token using the `getToken` option.\",\n    );\n  }\n\n  return undefined;\n}\n\n/**\n * Authenticates a Request by verifying a signed authentication token.\n *\n * - If a token is not provided, the returned account is `undefined` and no error is returned.\n * - If a valid token is provided, the signer account is returned.\n * - If an invalid token is provided, an error is returned detailing the validation error, and the returned account is `undefined`.\n *\n * @see {@link generateAuthToken} for generating a token.\n *\n * Note: This function does not perform any authorization checks, it only verifies if - **when provided** - a token is valid. It is up to the caller to perform any additional authorization checks, if needed.\n *\n * @param request - The request to authenticate.\n * @param options - The options for the authentication.\n * @param options.expiration - The expiration time of the token in milliseconds, defaults to 1 minute.\n * @param options.loadAs - The account to load the token from, defaults to the current active account.\n * @param options.getToken - If specified, this function will be used to get the token from the request. By default the token is expected to be in the `Authorization` header in the form of `Jazz <token>`.\n * @returns The account if it is valid, otherwise an error.\n *\n * @example\n * ```ts\n * const { account, error } = await authenticateRequest(request);\n * if (error) {\n *   return new Response(JSON.stringify(error), { status: 401 });\n * }\n * ```\n */\nexport async function authenticateRequest(\n  request: Request,\n  options?: {\n    expiration?: number;\n    loadAs?: Account;\n    getToken?: (request: Request) => string | undefined | null;\n  },\n): Promise<\n  | {\n      account?: Account;\n      error?: never;\n    }\n  | {\n      account?: never;\n      error: { message: string; details?: unknown };\n    }\n> {\n  const token = options?.getToken?.(request) ?? defaultGetToken(request);\n\n  if (!token) {\n    return {};\n  }\n\n  const { account, error } = await parseAuthToken(token, {\n    loadAs: options?.loadAs,\n    expiration: options?.expiration ?? 1000 * 60,\n  });\n\n  if (error) {\n    return { error };\n  }\n\n  return { account, error };\n}\n\n/**\n * Generates an authentication token for a given account. This token can be used to authenticate a request. See {@link authenticateRequest} for more details.\n *\n * @param as - The account to generate the token for, defaults to the current active account.\n * @returns The authentication token.\n *\n * @example Make a fetch request with the token\n * ```ts\n * const token = generateAuthToken();\n * const response = await fetch(url, {\n *   headers: {\n *     Authorization: `Jazz ${token}`,\n *   },\n * });\n * ```\n */\n\nexport function generateAuthToken(as?: Account) {\n  const account = as ?? Account.getMe();\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerSecret = agent.currentSignerSecret();\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return `${authToken}~${account.$jazz.id}~${createdAt}`;\n}\n\nexport async function parseAuthToken(\n  authToken: string,\n  options?: { loadAs?: Account; expiration?: number },\n): Promise<\n  | { account: Account; error?: never }\n  | { account?: never; error: { message: string; details?: unknown } }\n> {\n  const expiration = options?.expiration ?? 1_000 * 60; // 1 minute\n\n  const parsed = z\n    .tuple([signatureSchema, coIdSchema, z.string().transform(Number)])\n    .safeParse(authToken.split(\"~\"));\n\n  if (!parsed.success) {\n    return {\n      error: {\n        message: \"Invalid token\",\n        details: parsed.error,\n      },\n    };\n  }\n\n  const [signature, id, createdAt] = parsed.data;\n\n  if (createdAt + expiration < Date.now()) {\n    return {\n      error: {\n        message: \"Token expired\",\n      },\n    };\n  }\n\n  const account = await Account.load(id, { loadAs: options?.loadAs });\n\n  if (!account.$isLoaded) {\n    return {\n      error: {\n        message: \"Failed to load account\",\n        details: { id },\n      },\n    };\n  }\n\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt: Number(createdAt),\n  });\n\n  const agentID = account.$jazz.raw.currentAgentID();\n  const signerID = crypto.getAgentSignerID(agentID);\n\n  if (!crypto.verify(signature, signPayload, signerID)) {\n    return {\n      error: {\n        message: \"Invalid signature\",\n      },\n    };\n  }\n\n  return {\n    account,\n  };\n}\n","export {\n  setCustomErrorReporter,\n  enableCaptureErrorCause,\n} from \"./subscribe/errorReporting.js\";\n\nexport {\n  logger,\n  LogLevel,\n} from \"cojson\";\n","export * from \"./exports.js\";\n\nexport {\n  cojsonInternals,\n  logger,\n  LogLevel,\n} from \"cojson\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE,WAAAA;AAAA,EAEA,qBAAAC;AAAA,OAEK;;;ACHA,SAAS,iBACd,aACA;AACA,MAAI,CAAC,YAAY,MAAM;AACrB,WAAO;AAAA,EACT;AAEA,MAAI,YAAY,KAAK,UAAU;AAC7B,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,WAAW;AAC9B,QAAI,YAAY,KAAK,UAAU;AAC7B,aAAO,GAAG,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,QAAQ;AAAA,IACnE;AAEA,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,UAAU;AAC7B,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,qBAAqB,cAAc;AACtD,UAAM,gBACJ,YAAY,KAAK,oBAAoB,aAAa,MAAM,GAAG,EAAE,CAAC;AAEhE,QAAI,eAAe;AACjB,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,YAAY,KAAK;AAC1B;;;ACEO,SAAS,mBACd,MAC0B;AAC1B,SAAO,CAAC,CAAC,QAAQ,mBAAmB,QAAQ,uBAAuB;AACrE;AAEO,SAAS,sBACd,cACA,SACA;AACA,MAAI,QAAQ,YAAY,MAAM,QAAQ,OAAO,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,sBAAsB,mBAAmB,cAAc,cAAc;AAC3E,QAAM,iBAAiB,mBAAmB,SAAS,cAAc;AAEjE,SAAO,wBAAwB;AACjC;;;AFtCO,IAAM,gBAAN,MAAM,eAAc;AAAA,EACzB,YACU,cACA,QACA,mBACR;AAHQ;AACA;AACA;AAiCV,SAAQ,cAAc;AAkBtB,6BAAoB,OAAO,gBAAkD;AAC3E,YAAM,kBAAkB,KAAK,kBAAkB;AAI/C,UAAI,CAAC,YAAY,MAAM;AACrB,YAAI,iBAAiB;AACnB,eAAK,kBAAkB,MAAM;AAC7B,gBAAM,KAAK,OAAO;AAAA,QACpB;AACA;AAAA,MACF;AAEA,UAAI,gBAAiB;AAErB,YAAM,mBAAmB,YAAY,KAClC;AAEH,UAAI,CAAC,iBAAiB,eAAe;AACnC,cAAM,KAAK,OAAO,WAAW;AAAA,MAC/B,OAAO;AACL,cAAM,KAAK,MAAM,WAAW;AAAA,MAC9B;AAAA,IACF;AAEA,iBAAQ,OAAO,gBAAkD;AAC/D,UAAI,CAAC,YAAY,MAAM;AACrB,cAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C;AAEA,YAAM,mBAAmB,YAAY,KAAK;AAC1C,UAAI,CAAC,mBAAmB,gBAAgB,GAAG;AACzC,cAAM,IAAI,MAAM,+BAA+B;AAAA,MACjD;AAEA,YAAM,cAAc;AAAA,QAClB,WAAW,iBAAiB;AAAA,QAC5B,eAAe,iBAAiB;AAAA,QAChC,YAAY,iBAAiB,kBACzB,WAAW,KAAK,iBAAiB,eAAe,IAChD;AAAA,QACJ,UAAU;AAAA,MACZ;AAEA,YAAM,KAAK,aAAa,WAAW;AAEnC,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B,iBAAiB,iBAAiB;AAAA,QACpC;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAEA,kBAAS,OAAO,gBAAkD;AAChE,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,kBAAkB,YAAY,aAChC,MAAM,KAAK,YAAY,UAAU,IACjC;AAEJ,YAAM,YAAY,MAAM,OAAO;AAAA,QAC7B,gBAAgB;AAAA,UACd,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B;AAAA,QACF;AAAA,MACF,CAAC;AAED,YAAM,iBAAiB,MAAMC,SAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,YAAM,WAAW,iBAAiB,WAAW;AAE7C,UAAI,UAAU;AACZ,uBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAAA,MACnD;AAEA,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B;AAAA,QACF;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EAjJG;AAAA;AAAA;AAAA;AAAA,EAKH,OAAO,kBACL,aACA,SACA;AACA,WAAO,QAAQ,IAAI;AAAA,MACjB,WAAW,YAAY;AAAA,MACvB,eAAe,YAAY;AAAA,MAC3B,YAAY,YAAY,kBACpB,WAAW,KAAK,YAAY,eAAe,IAC3C;AAAA,MACJ,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,eAAe,OAA2B;AACrD,UAAM,gBAAgB,IAAIC,mBAAkB;AAE5C,QAAI,CAAC,mBAAmB,MAAM,MAAM,cAAc,GAAG;AACnD;AAAA,IACF;AAEA,UAAM,eAAc;AAAA,MAClB,MAAM,KAAK;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAIA,iBAAiB,aAAiC;AAChD,QAAI,eACF,YAAY,QAAQ;AAGtB,WAAO,YAAY,YAAY,CAAC,UAAU;AACxC,YAAM,OAAQ,MAA2C,QAAQ;AAEjE,UAAI,CAAC,sBAAsB,cAAc,IAAI,KAAK,KAAK,aAAa;AAClE,aAAK,kBAAkB,EAAE,KAAK,CAAC;AAC/B,uBAAe;AACf,aAAK,cAAc;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AAkGF;;;AG/IO,IAAM,WAAN,MAAe;AAAA,EACpB,YACU,cACA,mBACR;AAFQ;AACA;AAGV,iBAAQ,OAAO,aAAqB;AAClC,YAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAC3D,YAAM,cAAc,cAAc,QAAQ;AAE1C,UAAI,CAAC,aAAa,WAAW;AAC3B,cAAM,IAAI,MAAM,gBAAgB;AAAA,MAClC;AAEA,YAAM,KAAK,aAAa;AAAA,QACtB,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,MAC7B,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,kBAAS,OAAO,aAAqB;AACnC,YAAM,gBAAgB,MAAM,KAAK,iBAAiB;AAClD,UAAI,cAAc,SAAS,QAAQ,GAAG;AACpC,cAAM,IAAI,MAAM,yBAAyB;AAAA,MAC3C;AAEA,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,qBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAEjD,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAED,YAAM,KAAK,mBAAmB,UAAU;AAAA,QACtC,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,MAAM,KAAK,YAAY,UAAU,IACjC;AAAA,MACN,CAAC;AAAA,IACH;AAuBA,4BAAmB,YAAY;AAC7B,aAAO,OAAO,KAAK,MAAM,KAAK,0BAA0B,CAAC;AAAA,IAC3D;AAAA,EAtFG;AAAA,EA+DH,MAAc,mBAAmB,UAAkB,MAAmB;AACpE,UAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAE3D,QAAI,cAAc,QAAQ,GAAG;AAC3B;AAAA,IACF;AAEA,kBAAc,QAAQ,IAAI;AAE1B,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAAA,EACpE;AAAA,EAEA,MAAc,4BAA4B;AACxC,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,qBAAqB,OAAO;AAElC,UAAM,gBAAgB,MAAM,QAAQ,IAAI,iBAAiB;AACzD,WAAO,gBAAgB,KAAK,MAAM,aAAa,IAAI,CAAC;AAAA,EACtD;AAKF;AAEO,SAAS,eAAe,UAAkB;AAC/C,SAAO,KAAK,QAAQ,EACjB,QAAQ,MAAM,GAAG,EACjB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG;AACvB;AAEA,eAAe,kBAAkB,SAAkB;AACjD,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,IAAI,2BAA2B;AAC7D,WAAO,UAAU,SAAS,OAAO,IAAI;AAAA,EACvC,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBAAkB,SAAkB,SAAiB;AAClE,QAAM,QAAQ,IAAI,6BAA6B,QAAQ,SAAS,CAAC;AACnE;AAEA,eAAe,qBAAqB,SAAkB;AACpD,QAAM,gBAAgB,MAAM,QAAQ,IAAI,0BAA0B;AAClE,SAAO,gBAAgB,cAAc,MAAM,GAAG,IAAI,CAAC;AACrD;AAKA,eAAe,qBAAqB,SAAkB;AACpD,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,gBAAgB,MAAM,qBAAqB,OAAO;AAExD,eAAW,YAAY,eAAe;AACpC,YAAM,YAAY,4BAA4B,QAAQ;AACtD,YAAM,cAAc,MAAM,QAAQ,IAAI,SAAS;AAC/C,UAAI,aAAa;AACf,cAAM,QAAQ;AAAA,UACZ,4BAA4B,eAAe,QAAQ,CAAC;AAAA,UACpD;AAAA,QACF;AACA,cAAM,QAAQ,OAAO,SAAS;AAAA,MAChC;AAAA,IACF;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AAEA,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,oBAAoB,MAAM,qBAAqB,OAAO;AAE5D,UAAM,gBAA6C,CAAC;AACpD,UAAM,eAAyB,CAAC,0BAA0B;AAE1D,eAAW,YAAY,mBAAmB;AACxC,YAAM,MAAM,4BAA4B,eAAe,QAAQ,CAAC;AAChE,YAAM,cAAc,MAAM,QAAQ,IAAI,GAAG;AACzC,UAAI,aAAa;AACf,sBAAc,QAAQ,IAAI,KAAK,MAAM,WAAW;AAChD,qBAAa,KAAK,GAAG;AAAA,MACvB;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAElE,eAAW,OAAO,cAAc;AAC9B,YAAM,QAAQ,OAAO,GAAG;AAAA,IAC1B;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AACF;;;AC5LA,YAAY,WAAW;AACvB,SAAS,yBAAyB;AAClC,SAAyB,uBAAuB;AAoBzC,IAAM,iBAAN,MAAqB;AAAA,EAG1B,YACU,QACA,cACA,UACA,mBACD,UACP;AALQ;AACA;AACA;AACA;AACD;AAPT,sBAAqB;AAUrB,iBAAQ,OAAO,eAAuB;AACpC,YAAM,EAAE,QAAQ,aAAa,IAAI;AAEjC,UAAI;AAEJ,UAAI;AACF,qBAAmB,wBAAkB,YAAY,KAAK,QAAQ;AAAA,MAChE,SAAS,GAAG;AACV,cAAM,IAAI,MAAM,oBAAoB;AAAA,MACtC;AAEA,YAAM,gBAAgB,OAAO,0BAA0B,UAAU;AAEjE,YAAM,YAAY,gBAAgB;AAAA,QAChC,gBAAgB,mCAAmC,eAAe,MAAM;AAAA,QACxE;AAAA,MACF;AAEA,YAAM,aAAa;AAAA,QACjB;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,kBAAS,OAAO,SAAkB;AAChC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,aAAa,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAE1E,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,YAAY,YAAY;AAAA,QACxB,eAAe,YAAY;AAAA,QAC3B,UAAU;AAAA,MACZ,CAAC;AAED,UAAI,MAAM,KAAK,GAAG;AAChB,cAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,UAC9D,SAAS;AAAA,YACP,SAAS;AAAA,UACX;AAAA,QACF,CAAC;AAED,uBAAe,QAAQ,MAAM,IAAI,QAAQ,IAAI;AAAA,MAC/C;AAEA,aAAO;AAAA,IACT;AAEA,8BAAqB,OAAO,YAAoB,SAAiB;AAC/D,YAAM,aAAmB,wBAAkB,YAAY,KAAK,QAAQ;AACpE,YAAM,gBAAgB,KAAK,OAAO,0BAA0B,UAAU;AACtE,YAAM,YAAY,MAAM,KAAK,SAAS,eAAe,EAAE,KAAK,CAAC;AAE7D,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,aAAO;AAAA,IACT;AAEA,uCAA8B,YAAY;AACxC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,aAAO,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAAA,IAChE;AAEA,oCAA2B,MAAM;AAC/B,aAAO,kBAAkB,KAAK,OAAO,oBAAoB,GAAG,KAAK,QAAQ;AAAA,IAC3E;AAEA,wCAA+B,YAAY;AACzC,YAAM,aAAa,MAAM,KAAK,4BAA4B;AAC1D,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,qBAAY,oBAAI,IAAgB;AAChC,qBAAY,CAAC,aAAyB;AACpC,WAAK,UAAU,IAAI,QAAQ;AAE3B,aAAO,MAAM;AACX,aAAK,UAAU,OAAO,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,EA3GG;AAAA,EA6GH,SAAS;AACP,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS;AAAA,IACX;AAAA,EACF;AACF;;;ACjJA,SAAyC,mBAAAC,wBAAuB;AAKzD,SAAS,iBACd,OACA,MACA,SACA,WACQ;AACR,QAAM,cAAc,MAAM,MAAM,IAAI;AACpC,MAAI,iBAAiB;AAErB,SAAO,eAAe,SAAS,OAAO,QAAQ,SAAS,gBAAgB;AACrE,qBAAiB,eAAe,SAAS,EAAE;AAAA,EAC7C;AAEA,QAAM,EAAE,SAAS,KAAK,IAAI,eAAe,SAAS;AAElD,MAAI,QAAQ,SAAS,WAAW,MAAM,SAAS,WAAW;AACxD,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,QAAM,QAAQC,iBAAgB,YAAY,eAAe,kBAAkB,CAAC;AAC5E,QAAM,eAAe,MAAM,aAAa,IAAI;AAE5C,SAAO,GAAG,OAAO,YAAY,YAAY,YAAY,MAAM,EAAE,GAC3D,MAAM,MAAM,EACd,IAAI,YAAY;AAClB;AAGO,SAAS,gBAAgB,WAMlB;AACZ,QAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,QAAM,QAAQ,IAAI,KAAK,MAAM,GAAG;AAEhC,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,UAAU;AAC7C,QAAI,MAAM,WAAW,GAAG;AACtB,kBAAY,MAAM,CAAC;AACnB,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB,WAAW,MAAM,WAAW,GAAG;AAC7B,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB;AAEA,QAAI,CAAC,WAAW,CAAC,cAAc;AAC7B,aAAO;AAAA,IACT;AACA,WAAO,EAAE,SAAS,cAAc,UAAU;AAAA,EAC5C;AACF;AAGO,SAAS,kBAAkD;AAAA,EAChE;AAAA,EACA,KAAK,QAAQ,MAAM;AAAA,EACnB;AAAA,EACA;AACF,GAYE;AACA,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,SAAS,gBAAgB,SAAS;AAExC,QAAI,UAAU,OAAO,cAAc,cAAc;AAC/C,SAAG,aAAa,OAAO,SAAS,OAAO,cAAc,mBAAmB,EACrE,KAAK,MAAM;AACV,gBAAQ,MAAM;AAAA,MAChB,CAAC,EACA,MAAM,MAAM;AAAA,IACjB,OAAO;AACL,cAAQ,MAAS;AAAA,IACnB;AAAA,EACF,CAAC;AACH;;;AChGA;AAAA,EAIE;AAAA,EAEA,mBAAAC;AAAA,OACK;AACP,OAAO,OAAO;AA0Fd,SAAS,sBACP,QACA,OACA,OACA,YACA,MACwB;AACxB,QAAM,QAAQ,MAAM,OAAO,EAAE,MAAM,CAAC;AAEpC,MAAI,SAAS,WAAW;AACtB,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC,OAAO;AACL,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC;AAGA,SAAO,OAAO,OAAO,SAAS,CAAC,GAAG,KAAK;AACzC;AAMA,eAAe,wBAAwB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,KAAK,SAAS,QAAQ,MAAM;AAClC,QAAM,OAAO,GAAG,MAAM;AACtB,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,WAAW,MAAM,gBAAgB;AACvC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,WAAW,sBAAsB,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAEtE,QAAM,gBACH,MAAM,cAAc,QAAQ,SAAS,MAAM,IAAI;AAAA,IAC9C;AAAA,IACA,QAAQ;AAAA,IACR,sBAAsB;AAAA,EACxB,CAAC,KAAM,CAAC;AAEV,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO;AAAA,IACL;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,IAAM,aAAa,EAAE,OAAwB,WAAW;AACxD,IAAM,kBAAkB,EAAE;AAAA,EACxB,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,aAAa;AACxE;AAEA,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC;AAAA,EAC/B,IAAI;AAAA,EACJ,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW;AAAA,EACX,UAAU,EAAE;AAAA,IACV,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,UAAU;AAAA,EACrE;AACF,CAAC;AAOD,eAAe,qBAAqB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,SAAS,KAAK;AAEpB,QAAM,gBAAgB,cAAc,UAAU,OAAO;AAErD,MAAI,CAAC,cAAc,SAAS;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,cAAc,cAAc;AAElC,MAAI,SAAS,WAAW;AACtB,UAAM,OAAO,MAAM,KAAK,gBAAgB,YAAY,IAAI,QAAW,IAAI;AAGvE,QAAI,KAAK,YAAY,GAAG;AACtB,YAAM,UAAU,KAAK,kBAAkB;AAEvC,UAAI,QAAQ,IAAI,UAAU,MAAM,OAAO,MAAM,IAAI;AAC/C,cAAM,IAAI,iBAAiB,sCAAsC,GAAG;AAAA,MACtE;AAAA,IACF;AAGA,QAAI,YAAY,YAAY,MAAO,KAAK,KAAK,IAAI,GAAG;AAClD,YAAM,IAAI,iBAAiB,mCAAmC,GAAG;AAAA,IACnE;AAAA,EACF;AAGA,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,eAAe,YAAY;AAAA,IAC3B,IAAI,YAAY;AAAA,IAChB,WAAW,YAAY;AAAA,IACvB,UAAU,YAAY;AAAA,EACxB,CAAC;AAED,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,GACA;AACA,UAAM,IAAI,iBAAiB,qBAAqB,GAAG;AAAA,EACrD;AAEA,MAAI,gBACF,YAAY;AAEd,MAAI,SAAS,WAAW;AACtB,UAAM,iBAAiB,cAAc;AAAA,MACnC,CAAC,UAAU,MAAM,OAAO,YAAY;AAAA,IACtC;AAEA,QAAI,kBAAkB,eAAe,QAAQ;AAC3C,YAAM,cAAcC,iBAAgB;AAAA,QAClC,eAAe;AAAA,QACf;AAAA,MACF;AACA,kBAAY,IAAI,YAAY,EAAE;AAC9B,sBAAgB,cAAc;AAAA,QAAO,CAAC,UACpC,YAAY,IAAI,MAAM,EAAE;AAAA,MAC1B;AAAA,IACF,OAAO;AACL,sBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,sBAAoB,eAAe,MAAM;AAEzC,QAAM,UAAU,MAAM,KAAK,gBAAgB,YAAY,EAAE;AACzD,QAAM,YAAY,2BAA2B,OAAO;AAEpD,QAAM,SAAS,MAAM,QAAQ,KAAK,WAAW;AAAA,IAC3C;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,WAAW;AACrB,UAAM,IAAI,iBAAiB,6BAA6B,GAAG;AAAA,EAC7D;AAEA,QAAM,WAAW;AAAA,IACf;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,YAAyB,UAAU,YAAY,IAAI;AAAA,IACrE;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,mBAAmB,GAAG;AAAA,EACnD;AAEA,MAAI,SAAS,WAAW;AACtB,UAAM,MAAM,IAAI,IAAI,YAAY,OAAO,MAAM,EAAE;AAAA,EACjD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,sBAGP,SAAwC;AACxC,MAAI,YAAY,SAAS;AACvB,WAAO;AAAA;AAAA,MAEL,QAAQ,aAAa,QAAQ,MAAM;AAAA,MACnC,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,aAAa,OAAO;AAAA,IAC5B,SAAS;AAAA,EACX;AACF;AAEO,IAAM,YAAN,MAKL;AAAA,EAYA,YACE,QAMA;AAyEF,kBAAS,OACP,SACA,IACA,aAMsB;AACtB,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,qBAAqB,SAAS,IAAI,QAAQ;AACtE,eAAO;AAAA,MACT,SAAS,OAAO;AAEd,YAAI,mBAAmB,KAAK,GAAG;AAC7B,iBAAO,IAAI,SAAS,KAAK,UAAU,MAAM,OAAO,CAAC,GAAG;AAAA,YAClD,QAAQ,MAAM;AAAA,YACd,SAAS;AAAA,cACP,gBAAgB;AAAA,cAChB,wBAAwB;AAAA,YAC1B;AAAA,UACF,CAAC;AAAA,QACH;AAEA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,gCAAuB,OACrB,SACA,IACA,aAMsB;AACtB,YAAM,OAAO,GAAG,MAAM;AACtB,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,OAAO,MAAM,qBAAqB;AAAA,QACtC,MAAM;AAAA,QACN,QAAQ,KAAK,kBAAkB;AAAA,QAC/B,SAAS,KAAK,kBAAkB;AAAA,QAChC,SAAS;AAAA,QACT,QAAQ;AAAA,MACV,CAAC;AAED,YAAM,WAAW,KAAK,YAAY,mBAAmB;AAErD,YAAM,gBAAgB,MAAM;AAAA,QAC1B,KAAK;AAAA,QACL,KAAK;AAAA,MACP;AAEA,YAAM,kBAAkB,MAAM,wBAAwB;AAAA,QACpD,MAAM;AAAA,QACN,QAAQ,KAAK,mBAAmB;AAAA,QAChC,SAAS,KAAK,mBAAmB;AAAA,QACjC,OAAO;AAAA,QACP,OAAO;AAAA,QACP,QAAQ,KAAK;AAAA,MACf,CAAC;AAED,YAAM,eAAe,KAAK,UAAU;AAAA,QAClC,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAGD,YAAM,QAAQ;AAAA,QACZ,MAAM,KAAK,SAAS,KAAK,GAAG,CAAC,OAAO,KAAK,YAAY,YAAY,EAAE,CAAC;AAAA,MACtE;AAEA,aAAO,IAAI,SAAS,cAAc;AAAA,QAChC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,IACH;AAzJE,SAAK,oBAAoB,sBAAsB,OAAO,OAAO;AAC7D,SAAK,qBAAqB,sBAAsB,OAAO,QAAQ;AAC/D,SAAK,MAAM,OAAO;AAClB,SAAK,WAAW,OAAO;AAEvB,QAAI,OAAO,aAAa,QAAW;AACjC,YAAM,IAAI,UAAU,uBAAuB;AAAA,IAC7C;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,QACA,SAC8D;AAC9D,UAAM,KAAK,SAAS,SAAS,QAAQ,MAAM;AAE3C,UAAM,SAAS,MAAM,yBAAyB,KAAK,UAAU,EAAE;AAE/D,UAAM,WAAW,MAAM,MAAM,KAAK,KAAK;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK;AAAA,QACT,MAAM,wBAAwB;AAAA,UAC5B,MAAM;AAAA,UACN,QAAQ,KAAK,kBAAkB;AAAA,UAC/B,SAAS;AAAA;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,SAAS,QAAQ,IAAI,sBAAsB,GAAG;AAChD,cAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,cAAM,IAAI,iBAAiB,MAAM,SAAS,MAAM,MAAM,MAAM,OAAO;AAAA,MACrE;AAEA,YAAM,IAAI,iBAAiB,kBAAkB,SAAS,MAAM;AAAA,IAC9D;AAEA,UAAM,eAAe,MAAM,SAAS,KAAK;AAEzC,UAAM,iBAAiB,EACpB,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,SAAS;AAAA,MACzB,SAAS,EAAE,IAAI;AAAA,IACjB,CAAC,EACA,UAAU,YAAY;AAEzB,QAAI,CAAC,eAAe,SAAS;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,qBAAqB;AAAA,MACtC,MAAM;AAAA,MACN,QAAQ,KAAK,mBAAmB;AAAA,MAChC,SAAS,KAAK,mBAAmB;AAAA,MACjC,SAAS,eAAe,KAAK;AAAA,MAC7B,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,KAAK;AAAA,EACd;AAAA,EAqFA,IAAI,gBAA2C;AAC7C,WAAO,KAAK,kBAAkB;AAAA,EAChC;AAAA,EAEA,IAAI,iBAAiB;AACnB,WAAO,KAAK,mBAAmB;AAAA,EACjC;AACF;AAUO,SAAS,2BAMd,QAMA;AACA,SAAO,IAAI,UAAU,MAAM;AAC7B;AAEA,SAAS,2BAA2B,SAAsB;AACxD,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAEA,QAAM,mBAAmB,QAAQ,2BAA2B,EAAE,GAAG,CAAC,GAC9D,KAAK;AAET,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YACJA,iBAAgB,8BAA8B,gBAAgB;AAEhE,MAAI,CAAC,YAAY,SAAS,GAAG;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,IAAM,mBAAN,MAAuB;AAAA,EAG5B,YACkB,SACA,MACA,SAChB;AAHgB;AACA;AACA;AALlB,SAAgB,qBAAqB;AAAA,EAMlC;AAAA,EAEH,SAAS;AACP,WAAO,EAAE,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,SAAS,KAAK,QAAQ;AAAA,EACzE;AACF;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SACE,iBAAiB,oBAChB,OAAO,UAAU,YAChB,UAAU,QACV,wBAAwB,SACxB,QAAQ,MAAM,kBAAkB;AAEtC;AAEA,SAAS,oBACP,QACA,aACA,UACA,WACA;AACA,MAAI;AACF,WAAO,OAAO,OAAO,WAAW,aAAa,QAAQ;AAAA,EACvD,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,yBAAyB,IAAY,QAAiB;AACnE,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,UAAU,MAAM,KAAK,gBAAgB,EAAqB;AAEhE,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,EAC5D;AAEA,QAAM,UAAU,QAAQ,kBAAkB;AAE1C,MAAI,mBAAmB,YAAY;AACjC,UAAM,UAAU,MAAM,QAAQ,KAAK,QAAQ,IAAI;AAAA,MAC7C;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ,WAAW;AACtB,YAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,MAAM,MAAM,KAAK,QAAQ,IAAI;AAAA,IACzC;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,0BAA0B,GAAG;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,SAAkB;AACzC,QAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;AACvD,MAAI,aAAa,WAAW,OAAO,GAAG;AACpC,WAAO,YAAY,QAAQ,SAAS,EAAE;AAAA,EACxC;AAEA,MAAI,aAAa;AACf,YAAQ;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AA4BA,eAAsB,oBACpB,SACA,SAcA;AACA,QAAM,QAAQ,SAAS,WAAW,OAAO,KAAK,gBAAgB,OAAO;AAErE,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,EAAE,SAAS,MAAM,IAAI,MAAM,eAAe,OAAO;AAAA,IACrD,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS,cAAc,MAAO;AAAA,EAC5C,CAAC;AAED,MAAI,OAAO;AACT,WAAO,EAAE,MAAM;AAAA,EACjB;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAmBO,SAAS,kBAAkB,IAAc;AAC9C,QAAM,UAAU,MAAM,QAAQ,MAAM;AACpC,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO,GAAG,SAAS,IAAI,QAAQ,MAAM,EAAE,IAAI,SAAS;AACtD;AAEA,eAAsB,eACpB,WACA,SAIA;AACA,QAAM,aAAa,SAAS,cAAc,MAAQ;AAElD,QAAM,SAAS,EACZ,MAAM,CAAC,iBAAiB,YAAY,EAAE,OAAO,EAAE,UAAU,MAAM,CAAC,CAAC,EACjE,UAAU,UAAU,MAAM,GAAG,CAAC;AAEjC,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,OAAO;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,WAAW,IAAI,SAAS,IAAI,OAAO;AAE1C,MAAI,YAAY,aAAa,KAAK,IAAI,GAAG;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,QAAQ,KAAK,IAAI,EAAE,QAAQ,SAAS,OAAO,CAAC;AAElE,MAAI,CAAC,QAAQ,WAAW;AACtB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,EAAE,GAAG;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAGpB,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB,WAAW,OAAO,SAAS;AAAA,EAC7B,CAAC;AAED,QAAM,UAAU,QAAQ,MAAM,IAAI,eAAe;AACjD,QAAM,WAAW,OAAO,iBAAiB,OAAO;AAEhD,MAAI,CAAC,OAAO,OAAO,WAAW,aAAa,QAAQ,GAAG;AACpD,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,EACF;AACF;;;ACtzBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA;AAAA,EACE;AAAA,EACA;AAAA,OACK;;;ACNP;AAAA,EACE,mBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,YAAAC;AAAA,OACK;","names":["Account","AuthSecretStorage","Account","AuthSecretStorage","cojsonInternals","cojsonInternals","cojsonInternals","cojsonInternals","cojsonInternals","logger","LogLevel"]}
+{"version":3,"sources":["../src/tools/auth/clerk/index.ts","../src/tools/auth/clerk/getClerkUsername.ts","../src/tools/auth/clerk/types.ts","../src/tools/auth/DemoAuth.ts","../src/tools/auth/PassphraseAuth.ts","../src/tools/implementation/invites.ts","../src/tools/coValues/request.ts","../src/tools/config.ts","../src/tools/index.ts"],"sourcesContent":["import {\n  Account,\n  AuthCredentials,\n  AuthSecretStorage,\n  AuthenticateAccountFunction,\n} from \"jazz-tools\";\nimport { getClerkUsername } from \"./getClerkUsername.js\";\nimport {\n  ClerkCredentials,\n  MinimalClerkClient,\n  isClerkAuthStateEqual,\n  isClerkCredentials,\n} from \"./types.js\";\n\nexport type { MinimalClerkClient };\nexport { isClerkCredentials };\n\nexport class JazzClerkAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private logOut: () => Promise<void> | void,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  /**\n   * Loads the Jazz auth data from the Clerk user and sets it in the auth secret storage.\n   */\n  static loadClerkAuthData(\n    credentials: ClerkCredentials,\n    storage: AuthSecretStorage,\n  ) {\n    return storage.set({\n      accountID: credentials.jazzAccountID,\n      accountSecret: credentials.jazzAccountSecret,\n      secretSeed: credentials.jazzAccountSeed\n        ? Uint8Array.from(credentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    });\n  }\n\n  static async initializeAuth(clerk: MinimalClerkClient) {\n    const secretStorage = new AuthSecretStorage();\n\n    if (!isClerkCredentials(clerk.user?.unsafeMetadata)) {\n      return;\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      clerk.user.unsafeMetadata,\n      secretStorage,\n    );\n  }\n\n  private isFirstCall = true;\n  private previousUser: Pick<\n    NonNullable<MinimalClerkClient[\"user\"]>,\n    \"unsafeMetadata\"\n  > | null = null;\n\n  registerListener(clerkClient: MinimalClerkClient) {\n    this.previousUser = clerkClient.user ?? null;\n\n    // Need to use addListener because the clerk user object is not updated when the user logs in\n    return clerkClient.addListener((event) => {\n      const user = (event as Pick<MinimalClerkClient, \"user\">).user ?? null;\n\n      if (!isClerkAuthStateEqual(this.previousUser, user) || this.isFirstCall) {\n        this.previousUser = user;\n        this.onClerkUserChange({ user });\n        this.isFirstCall = false;\n      }\n    });\n  }\n\n  onClerkUserChange = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    const isAuthenticated = this.authSecretStorage.isAuthenticated;\n\n    // LogOut is driven by Clerk. The framework adapters will need to pass `logOutReplacement` to the `JazzProvider`\n    // to make the logOut work correctly.\n    if (!clerkClient.user) {\n      if (isAuthenticated) {\n        this.authSecretStorage.clear();\n        await this.logOut();\n      }\n      return;\n    }\n\n    if (isAuthenticated) return;\n\n    const clerkCredentials = clerkClient.user\n      .unsafeMetadata as ClerkCredentials;\n\n    if (!clerkCredentials.jazzAccountID) {\n      await this.signIn(clerkClient);\n    } else {\n      await this.logIn(clerkClient);\n    }\n  };\n\n  logIn = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    if (!clerkClient.user) {\n      throw new Error(\"Not signed in on Clerk\");\n    }\n\n    const clerkCredentials = clerkClient.user.unsafeMetadata;\n    if (!isClerkCredentials(clerkCredentials)) {\n      throw new Error(\"No credentials found on Clerk\");\n    }\n\n    const credentials = {\n      accountID: clerkCredentials.jazzAccountID,\n      accountSecret: clerkCredentials.jazzAccountSecret,\n      secretSeed: clerkCredentials.jazzAccountSeed\n        ? Uint8Array.from(clerkCredentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    } satisfies AuthCredentials;\n\n    await this.authenticate(credentials);\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed: clerkCredentials.jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n\n  signIn = async (clerkClient: Pick<MinimalClerkClient, \"user\">) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const jazzAccountSeed = credentials.secretSeed\n      ? Array.from(credentials.secretSeed)\n      : undefined;\n\n    const clerkCredentials = {\n      jazzAccountID: credentials.accountID,\n      jazzAccountSecret: credentials.accountSecret,\n      jazzAccountSeed,\n    };\n    // user.update will cause the Clerk user change listener to fire; updating this.previousUser beforehand\n    // ensures the listener sees the new credentials and does not trigger an unnecessary logIn operation\n    this.previousUser = { unsafeMetadata: clerkCredentials };\n\n    if (clerkClient.user) {\n      await clerkClient.user.update({\n        unsafeMetadata: clerkCredentials,\n      });\n    }\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    const username = getClerkUsername(clerkClient);\n\n    if (username) {\n      currentAccount.profile.$jazz.set(\"name\", username);\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n}\n\n// eslint-disable-next-line @typescript-eslint/no-namespace\nexport namespace BrowserClerkAuth {\n  export interface Driver {\n    onError: (error: string | Error) => void;\n  }\n}\n","import type { MinimalClerkClient } from \"./types.js\";\n\nexport function getClerkUsername(\n  clerkClient: Pick<MinimalClerkClient, \"user\">,\n) {\n  if (!clerkClient.user) {\n    return null;\n  }\n\n  if (clerkClient.user.fullName) {\n    return clerkClient.user.fullName;\n  }\n\n  if (clerkClient.user.firstName) {\n    if (clerkClient.user.lastName) {\n      return `${clerkClient.user.firstName} ${clerkClient.user.lastName}`;\n    }\n\n    return clerkClient.user.firstName;\n  }\n\n  if (clerkClient.user.username) {\n    return clerkClient.user.username;\n  }\n\n  if (clerkClient.user.primaryEmailAddress?.emailAddress) {\n    const emailUsername =\n      clerkClient.user.primaryEmailAddress.emailAddress.split(\"@\")[0];\n\n    if (emailUsername) {\n      return emailUsername;\n    }\n  }\n\n  return clerkClient.user.id;\n}\n","import { AgentSecret } from \"cojson\";\nimport { Account, ID } from \"jazz-tools\";\n\nexport type MinimalClerkClient = {\n  user:\n    | {\n        // eslint-disable-next-line @typescript-eslint/no-explicit-any\n        unsafeMetadata: Record<string, any>;\n        fullName: string | null;\n        username: string | null;\n        firstName: string | null;\n        lastName: string | null;\n        id: string;\n        primaryEmailAddress: {\n          emailAddress: string | null;\n        } | null;\n        update: (args: {\n          // eslint-disable-next-line @typescript-eslint/no-explicit-any\n          unsafeMetadata: Record<string, any>;\n        }) => Promise<unknown>;\n      }\n    | null\n    | undefined;\n  signOut: () => Promise<void>;\n  addListener: (listener: (data: unknown) => void) => void;\n};\n\nexport type ClerkCredentials = {\n  jazzAccountID: ID<Account>;\n  jazzAccountSecret: AgentSecret;\n  jazzAccountSeed?: number[];\n};\n\n/**\n * Checks if the Clerk user metadata contains the necessary credentials for Jazz auth.\n * **Note**: It does not validate the credentials, only checks if the necessary fields are present in the metadata object.\n */\nexport function isClerkCredentials(\n  data:\n    | NonNullable<MinimalClerkClient[\"user\"]>[\"unsafeMetadata\"]\n    | null\n    | undefined,\n): data is ClerkCredentials {\n  return !!data && \"jazzAccountID\" in data && \"jazzAccountSecret\" in data;\n}\n\nexport function isClerkAuthStateEqual(\n  previousUser:\n    | Pick<NonNullable<MinimalClerkClient[\"user\"]>, \"unsafeMetadata\">\n    | null\n    | undefined,\n  newUser:\n    | Pick<NonNullable<MinimalClerkClient[\"user\"]>, \"unsafeMetadata\">\n    | null\n    | undefined,\n) {\n  if (Boolean(previousUser) !== Boolean(newUser)) {\n    return false;\n  }\n\n  const previousCredentials = isClerkCredentials(previousUser?.unsafeMetadata)\n    ? previousUser?.unsafeMetadata\n    : null;\n  const newCredentials = isClerkCredentials(newUser?.unsafeMetadata)\n    ? newUser?.unsafeMetadata\n    : null;\n\n  if (!previousCredentials || !newCredentials) {\n    return previousCredentials === newCredentials;\n  }\n\n  return previousCredentials.jazzAccountID === newCredentials.jazzAccountID;\n}\n","import { AgentSecret } from \"cojson\";\nimport { Account, ID } from \"../internal.js\";\nimport { AuthenticateAccountFunction } from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\nimport { KvStore, KvStoreContext } from \"./KvStoreContext.js\";\n\ntype StorageData = {\n  accountID: ID<Account>;\n  accountSecret: AgentSecret;\n  secretSeed?: number[];\n};\n\n/**\n * `DemoAuth` provides a `JazzAuth` object for demo authentication.\n *\n * Demo authentication is useful for quickly testing your app, as it allows you to create new accounts and log in as existing ones.\n *\n * ```\n * import { DemoAuth } from \"jazz-tools\";\n *\n * const auth = new DemoAuth(jazzContext.authenticate, new AuthSecretStorage());\n * ```\n *\n * @category Auth Providers\n */\nexport class DemoAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  logIn = async (username: string) => {\n    const existingUsers = await this.getExisitingUsersWithData();\n    const storageData = existingUsers[username];\n\n    if (!storageData?.accountID) {\n      throw new Error(\"User not found\");\n    }\n\n    await this.authenticate({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n      secretSeed: storageData.secretSeed\n        ? new Uint8Array(storageData.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n  };\n\n  signUp = async (username: string) => {\n    const existingUsers = await this.getExistingUsers();\n    if (existingUsers.includes(username)) {\n      throw new Error(\"User already registered\");\n    }\n\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    currentAccount.profile.$jazz.set(\"name\", username);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? new Uint8Array(credentials.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n\n    await this.addToExistingUsers(username, {\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? Array.from(credentials.secretSeed)\n        : undefined,\n    });\n  };\n\n  private async addToExistingUsers(username: string, data: StorageData) {\n    const existingUsers = await this.getExisitingUsersWithData();\n\n    if (existingUsers[username]) {\n      return;\n    }\n\n    existingUsers[username] = data;\n\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n  }\n\n  private async getExisitingUsersWithData() {\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await migrateExistingUsers(kvStore);\n\n    const existingUsers = await kvStore.get(\"demo-auth-users\");\n    return existingUsers ? JSON.parse(existingUsers) : {};\n  }\n\n  getExistingUsers = async () => {\n    return Object.keys(await this.getExisitingUsersWithData());\n  };\n}\n\nexport function encodeUsername(username: string) {\n  return btoa(username)\n    .replace(/=/g, \"-\")\n    .replace(/\\+/g, \"_\")\n    .replace(/\\//g, \".\");\n}\n\nasync function getStorageVersion(kvStore: KvStore) {\n  try {\n    const version = await kvStore.get(\"demo-auth-storage-version\");\n    return version ? parseInt(version) : 1;\n  } catch (error) {\n    return 1;\n  }\n}\n\nasync function setStorageVersion(kvStore: KvStore, version: number) {\n  await kvStore.set(\"demo-auth-storage-version\", version.toString());\n}\n\nasync function getExistingUsersList(kvStore: KvStore) {\n  const existingUsers = await kvStore.get(\"demo-auth-existing-users\");\n  return existingUsers ? existingUsers.split(\",\") : [];\n}\n\n/**\n * Migrates existing users keys to work with any storage.\n */\nasync function migrateExistingUsers(kvStore: KvStore) {\n  if ((await getStorageVersion(kvStore)) < 2) {\n    const existingUsers = await getExistingUsersList(kvStore);\n\n    for (const username of existingUsers) {\n      const legacyKey = `demo-auth-existing-users-${username}`;\n      const storageData = await kvStore.get(legacyKey);\n      if (storageData) {\n        await kvStore.set(\n          `demo-auth-existing-users-${encodeUsername(username)}`,\n          storageData,\n        );\n        await kvStore.delete(legacyKey);\n      }\n    }\n\n    await setStorageVersion(kvStore, 2);\n  }\n\n  if ((await getStorageVersion(kvStore)) < 3) {\n    const existingUsersList = await getExistingUsersList(kvStore);\n\n    const existingUsers: Record<string, StorageData> = {};\n    const keysToDelete: string[] = [\"demo-auth-existing-users\"];\n\n    for (const username of existingUsersList) {\n      const key = `demo-auth-existing-users-${encodeUsername(username)}`;\n      const storageData = await kvStore.get(key);\n      if (storageData) {\n        existingUsers[username] = JSON.parse(storageData);\n        keysToDelete.push(key);\n      }\n    }\n\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n\n    for (const key of keysToDelete) {\n      await kvStore.delete(key);\n    }\n\n    await setStorageVersion(kvStore, 3);\n  }\n}\n","import * as bip39 from \"@scure/bip39\";\nimport { entropyToMnemonic } from \"@scure/bip39\";\nimport { CryptoProvider, cojsonInternals } from \"cojson\";\nimport type { ID } from \"../internal.js\";\nimport { Account } from \"../internal.js\";\nimport type {\n  AuthenticateAccountFunction,\n  RegisterAccountFunction,\n} from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\n\n/**\n * `PassphraseAuth` provides a `JazzAuth` object for passphrase authentication.\n *\n * ```ts\n * import { PassphraseAuth } from \"jazz-tools\";\n *\n * const auth = new PassphraseAuth(crypto, jazzContext.authenticate, new AuthSecretStorage(), wordlist);\n * ```\n *\n * @category Auth Providers\n */\nexport class PassphraseAuth {\n  passphrase: string = \"\";\n\n  constructor(\n    private crypto: CryptoProvider,\n    private authenticate: AuthenticateAccountFunction,\n    private register: RegisterAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n    public wordlist: string[],\n  ) {}\n\n  logIn = async (passphrase: string) => {\n    const { crypto, authenticate } = this;\n\n    let secretSeed;\n\n    try {\n      secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    } catch (e) {\n      throw new Error(\"Invalid passphrase\");\n    }\n\n    const accountSecret = crypto.agentSecretFromSecretSeed(secretSeed);\n\n    const accountID = cojsonInternals.idforHeader(\n      cojsonInternals.accountHeaderForInitialAgentSecret(accountSecret, crypto),\n      crypto,\n    ) as ID<Account>;\n\n    await authenticate({\n      accountID,\n      accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  signUp = async (name?: string) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const passphrase = entropyToMnemonic(credentials.secretSeed, this.wordlist);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      secretSeed: credentials.secretSeed,\n      accountSecret: credentials.accountSecret,\n      provider: \"passphrase\",\n    });\n\n    if (name?.trim()) {\n      const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n        resolve: {\n          profile: true,\n        },\n      });\n\n      currentAccount.profile.$jazz.set(\"name\", name);\n    }\n\n    return passphrase;\n  };\n\n  registerNewAccount = async (passphrase: string, name: string) => {\n    const secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    const accountSecret = this.crypto.agentSecretFromSecretSeed(secretSeed);\n    const accountID = await this.register(accountSecret, { name });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    return accountID;\n  };\n\n  getCurrentAccountPassphrase = async () => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    return entropyToMnemonic(credentials.secretSeed, this.wordlist);\n  };\n\n  generateRandomPassphrase = () => {\n    return entropyToMnemonic(this.crypto.newRandomSecretSeed(), this.wordlist);\n  };\n\n  loadCurrentAccountPassphrase = async () => {\n    const passphrase = await this.getCurrentAccountPassphrase();\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  listeners = new Set<() => void>();\n  subscribe = (callback: () => void) => {\n    this.listeners.add(callback);\n\n    return () => {\n      this.listeners.delete(callback);\n    };\n  };\n\n  notify() {\n    for (const listener of this.listeners) {\n      listener();\n    }\n  }\n}\n","import { AccountRole, type InviteSecret, cojsonInternals } from \"cojson\";\nimport { Account } from \"../coValues/account.js\";\nimport type { CoValue, CoValueClassOrSchema } from \"../internal.js\";\n\n/** @category Invite Links */\nexport function createInviteLink<C extends CoValue>(\n  value: C,\n  role: AccountRole,\n  baseURL: string,\n  valueHint?: string,\n): string {\n  const coValueCore = value.$jazz.raw.core;\n  let currentCoValue = coValueCore;\n\n  while (currentCoValue.verified.header.ruleset.type === \"ownedByGroup\") {\n    currentCoValue = currentCoValue.getGroup().core;\n  }\n\n  const { ruleset, meta } = currentCoValue.verified.header;\n\n  if (ruleset.type !== \"group\" || meta?.type === \"account\") {\n    throw new Error(\"Can't create invite link for object without group\");\n  }\n\n  const group = cojsonInternals.expectGroup(currentCoValue.getCurrentContent());\n  const inviteSecret = group.createInvite(role);\n\n  return `${baseURL}#/invite/${valueHint ? valueHint + \"/\" : \"\"}${\n    value.$jazz.id\n  }/${inviteSecret}`;\n}\n\n/** @category Invite Links */\nexport function parseInviteLink(inviteURL: string):\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined {\n  const url = new URL(inviteURL);\n  const parts = url.hash.split(\"/\");\n\n  let valueHint: string | undefined;\n  let valueID: string | undefined;\n  let inviteSecret: InviteSecret | undefined;\n\n  if (parts[0] === \"#\" && parts[1] === \"invite\") {\n    if (parts.length === 5) {\n      valueHint = parts[2];\n      valueID = parts[3];\n      inviteSecret = parts[4] as InviteSecret;\n    } else if (parts.length === 4) {\n      valueID = parts[2];\n      inviteSecret = parts[3] as InviteSecret;\n    }\n\n    if (!valueID || !inviteSecret) {\n      return undefined;\n    }\n    return { valueID, inviteSecret, valueHint };\n  }\n}\n\n/** @category Invite Links */\nexport function consumeInviteLink<S extends CoValueClassOrSchema>({\n  inviteURL,\n  as = Account.getMe(),\n  forValueHint,\n  invitedObjectSchema,\n}: {\n  inviteURL: string;\n  as?: Account;\n  forValueHint?: string;\n  invitedObjectSchema: S;\n}): Promise<\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined\n> {\n  return new Promise((resolve, reject) => {\n    const result = parseInviteLink(inviteURL);\n\n    if (result && result.valueHint === forValueHint) {\n      as.acceptInvite(result.valueID, result.inviteSecret, invitedObjectSchema)\n        .then(() => {\n          resolve(result);\n        })\n        .catch(reject);\n    } else {\n      resolve(undefined);\n    }\n  });\n}\n","import {\n  CoValueCore,\n  CojsonInternalTypes,\n  CryptoProvider,\n  RawAccount,\n  RawCoMap,\n  cojsonInternals,\n} from \"cojson\";\nimport z from \"zod/v4\";\nimport {\n  AnyZodOrCoValueSchema,\n  CoMap,\n  CoMapSchema,\n  CoMapSchemaInit,\n  CoValueClass,\n  CoreCoMapSchema,\n  Group,\n  Loaded,\n  ResolveQuery,\n  ResolveQueryStrict,\n  Simplify,\n  coMapDefiner,\n  coValueClassFromCoValueClassOrSchema,\n  exportCoValue,\n  importContentPieces,\n  loadCoValue,\n} from \"../internal.js\";\nimport { isCoValueId } from \"../lib/utils.js\";\nimport { Account } from \"./account.js\";\n\ntype MessageShape = Record<string, AnyZodOrCoValueSchema>;\n\ntype RequestSchemaDefinition<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>> = true,\n> =\n  | S\n  | {\n      schema: S;\n      resolve?: R;\n    };\n\n/**\n * Configuration options for defining HTTP request/response schemas in Jazz.\n *\n * This interface defines the structure for creating typed HTTP routes with\n * request and response validation using CoMap schemas.\n *\n * @template RequestShape - The shape of the request message schema (must extend MessageShape)\n * @template RequestResolve - The resolve query type for the request CoMap schema\n * @template ResponseShape - The shape of the response message schema (must extend MessageShape)\n * @template ResponseResolve - The resolve query type for the response CoMap schema\n */\ninterface RequestOptions<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n> {\n  /**\n   * The URL endpoint for the HTTP route.\n   * This is used by the client to send requests to the server.\n   */\n  url: string;\n\n  /**\n   * The id of the worker Account or Group.\n   */\n  workerId: string;\n\n  /**\n   * Schema definition for the request payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for incoming requests.\n   */\n  request: RequestSchemaDefinition<\n    RequestShape,\n    ResolveQueryStrict<CoMapSchema<RequestShape>, RequestResolve>\n  >;\n\n  /**\n   * Schema definition for the response payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for outgoing responses.\n   */\n  response: RequestSchemaDefinition<\n    ResponseShape,\n    ResolveQueryStrict<CoMapSchema<ResponseShape>, ResponseResolve>\n  >;\n}\n\ntype AsNullablePayload<T extends MessageShape> = T extends Record<string, never>\n  ? undefined\n  : never;\ntype MessageValuePayload<T extends MessageShape> =\n  | Simplify<CoMapSchemaInit<T>>\n  | AsNullablePayload<T>;\n\nfunction createMessageEnvelope<S extends MessageShape>(\n  schema: CoreCoMapSchema,\n  value: MessageValuePayload<S>,\n  owner: Account,\n  sharedWith: Account | Group,\n  type: \"request\" | \"response\",\n): Loaded<CoMapSchema<S>> {\n  const group = Group.create({ owner });\n\n  if (type === \"request\") {\n    group.addMember(sharedWith, \"writer\");\n  } else {\n    group.addMember(sharedWith, \"reader\");\n  }\n\n  // @ts-expect-error - CoreCoMapSchema doesn't have static methods\n  return schema.create(value ?? {}, group);\n}\n\n/**\n * Function that exports the input CoValue in a serializable format and prepares the information\n * required for the other side to safely verify the identity of the sender.\n */\nasync function serializeMessagePayload({\n  type,\n  schema,\n  resolve,\n  value,\n  owner,\n  target,\n}: {\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  type: \"request\" | \"response\";\n  schema: CoreCoMapSchema;\n  resolve: any;\n  value: any;\n  owner: Account;\n  target: Account | Group;\n}) {\n  const me = owner ?? Account.getMe();\n  const node = me.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerID = agent.currentSignerID();\n  const signerSecret = agent.currentSignerSecret();\n\n  const envelope = createMessageEnvelope(schema, value, me, target, type);\n\n  const contentPieces =\n    (await exportCoValue(schema, envelope.$jazz.id, {\n      resolve,\n      loadAs: me,\n      bestEffortResolution: true,\n    })) ?? [];\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    signerID,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return {\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    authToken,\n    signerID,\n  };\n}\n\nconst coIdSchema = z.custom<`co_z${string}`>(isCoValueId);\nconst signatureSchema = z.custom<`signature_z${string}`>(\n  (value) => typeof value === \"string\" && value.startsWith(\"signature_z\"),\n);\n\nconst requestSchema = z.object({\n  contentPieces: z.array(z.json()),\n  id: coIdSchema,\n  createdAt: z.number(),\n  authToken: signatureSchema,\n  signerID: z.custom<`signer_z${string}`>(\n    (value) => typeof value === \"string\" && value.startsWith(\"signer_z\"),\n  ),\n});\n\n/**\n * Function that parses the message payload, verifies the identity of the sender and loads the data.\n *\n * @returns The data from the message.\n */\nasync function handleMessagePayload({\n  type,\n  schema,\n  resolve,\n  request,\n  loadAs,\n}: {\n  type: \"request\" | \"response\";\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  schema: CoreCoMapSchema;\n  resolve: any;\n  request: unknown;\n  loadAs: Account;\n}) {\n  const node = loadAs.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const requestParsed = requestSchema.safeParse(request);\n\n  if (!requestParsed.success) {\n    throw new JazzRequestError(\n      \"Request payload is not valid\",\n      400,\n      requestParsed.error,\n    );\n  }\n\n  const requestData = requestParsed.data;\n\n  if (type === \"request\") {\n    const core = await node.loadCoValueCore(requestData.id, undefined, true);\n\n    // Check if the message has already been handled to prevent replay attacks\n    if (core.isAvailable()) {\n      const content = core.getCurrentContent() as RawCoMap;\n\n      if (content.get(\"$handled\") === loadAs.$jazz.id) {\n        throw new JazzRequestError(\"Request payload is already handled\", 400);\n      }\n    }\n\n    // Check if the message is expired as extra protection\n    if (requestData.createdAt + 1000 * 60 < Date.now()) {\n      throw new JazzRequestError(\"Authentication token is expired\", 401);\n    }\n  }\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    contentPieces: requestData.contentPieces,\n    id: requestData.id,\n    createdAt: requestData.createdAt,\n    signerID: requestData.signerID,\n  });\n\n  if (\n    !safeVerifySignature(\n      crypto,\n      signPayload,\n      requestData.signerID,\n      requestData.authToken,\n    )\n  ) {\n    throw new JazzRequestError(\"Invalid signature\", 401);\n  }\n\n  let contentPieces =\n    requestData.contentPieces as CojsonInternalTypes.NewContentMessage[];\n\n  if (type === \"request\") {\n    const coValueContent = contentPieces.find(\n      (piece) => piece.id === requestData.id,\n    );\n\n    if (coValueContent && coValueContent.header) {\n      const validValues = cojsonInternals.getDependedOnCoValues(\n        coValueContent.header,\n        coValueContent,\n      );\n      validValues.add(requestData.id);\n      contentPieces = contentPieces.filter((piece) =>\n        validValues.has(piece.id),\n      );\n    } else {\n      contentPieces = [];\n    }\n  }\n\n  importContentPieces(contentPieces, loadAs);\n\n  const coValue = await node.loadCoValueCore(requestData.id);\n  const accountId = getCoValueCreatorAccountId(coValue);\n\n  const madeBy = await Account.load(accountId, {\n    loadAs,\n  });\n\n  if (!madeBy.$isLoaded) {\n    throw new JazzRequestError(\"Creator account not found\", 400);\n  }\n\n  const coSchema = coValueClassFromCoValueClassOrSchema(\n    schema,\n  ) as CoValueClass<CoMap>;\n  const value = await loadCoValue<CoMap, true>(coSchema, requestData.id, {\n    resolve,\n    loadAs,\n  });\n\n  if (!value.$isLoaded) {\n    throw new JazzRequestError(\"Value not found\", 400);\n  }\n\n  if (type === \"request\") {\n    value.$jazz.raw.set(\"$handled\", loadAs.$jazz.id);\n  }\n\n  return {\n    value: value as unknown,\n    madeBy,\n  };\n}\n\nfunction parseSchemaAndResolve<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>>,\n>(options: RequestSchemaDefinition<S, R>) {\n  if (\"schema\" in options) {\n    return {\n      // Using a type cast to reduce the type complexity\n      schema: coMapDefiner(options.schema) as CoreCoMapSchema,\n      resolve: options.resolve as any,\n    };\n  }\n\n  return {\n    schema: coMapDefiner(options) as CoreCoMapSchema,\n    resolve: true as any,\n  };\n}\n\nexport class HttpRoute<\n  RequestShape extends MessageShape = z.core.$ZodLooseShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>> = any,\n  ResponseShape extends MessageShape = z.core.$ZodLooseShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>> = any,\n> {\n  private requestDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private responseDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private url: string;\n  private workerId: string;\n\n  constructor(\n    params: RequestOptions<\n      RequestShape,\n      RequestResolve,\n      ResponseShape,\n      ResponseResolve\n    >,\n  ) {\n    this.requestDefinition = parseSchemaAndResolve(params.request);\n    this.responseDefinition = parseSchemaAndResolve(params.response);\n    this.url = params.url;\n    this.workerId = params.workerId;\n\n    if (params.workerId === undefined) {\n      throw new TypeError(\"Worker ID is required\");\n    }\n  }\n\n  async send(\n    values: MessageValuePayload<RequestShape>,\n    options?: { owner?: Account },\n  ): Promise<Loaded<CoMapSchema<ResponseShape>, ResponseResolve>> {\n    const as = options?.owner ?? Account.getMe();\n\n    const target = await loadWorkerAccountOrGroup(this.workerId, as);\n\n    const response = await fetch(this.url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(\n        await serializeMessagePayload({\n          type: \"request\",\n          schema: this.requestDefinition.schema,\n          resolve: true, // export only the envelope\n          value: values,\n          owner: as,\n          target,\n        }),\n      ),\n    });\n\n    if (!response.ok) {\n      if (response.headers.has(\"X-Jazz-Request-Error\")) {\n        const error = await response.json();\n        throw new JazzRequestError(error.message, error.code, error.details);\n      }\n\n      throw new JazzRequestError(\"Request failed\", response.status);\n    }\n\n    const responseBody = await response.json();\n\n    const responseParsed = z\n      .object({\n        type: z.literal(\"success\"),\n        payload: z.any(),\n      })\n      .safeParse(responseBody);\n\n    if (!responseParsed.success) {\n      throw new JazzRequestError(\n        \"Response payload is not valid\",\n        400,\n        responseParsed.error,\n      );\n    }\n\n    const data = await handleMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      request: responseParsed.data.payload,\n      loadAs: as,\n    });\n\n    return data.value as Loaded<CoMapSchema<ResponseShape>, ResponseResolve>;\n  }\n\n  handle = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    try {\n      const response = await this.executeHandleRequest(request, as, callback);\n      return response;\n    } catch (error) {\n      // Serialize the error to make it possible to handle it on the client side\n      if (isJazzRequestError(error)) {\n        return new Response(JSON.stringify(error.toJSON()), {\n          status: error.code,\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"X-Jazz-Request-Error\": \"true\",\n          },\n        });\n      }\n\n      throw error;\n    }\n  };\n\n  executeHandleRequest = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    const node = as.$jazz.localNode;\n    const body = await request.json();\n    const data = await handleMessagePayload({\n      type: \"request\",\n      schema: this.requestDefinition.schema,\n      resolve: this.requestDefinition.resolve,\n      request: body,\n      loadAs: as,\n    });\n\n    const tracking = node.syncManager.trackDirtyCoValues();\n\n    const responseValue = await callback(\n      data.value as Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      data.madeBy,\n    );\n\n    const responsePayload = await serializeMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      value: responseValue,\n      owner: as,\n      target: data.madeBy,\n    });\n\n    const responseBody = JSON.stringify({\n      type: \"success\",\n      payload: responsePayload,\n    });\n\n    // TODO: Detect the defer support from the environment\n    await Promise.all(\n      Array.from(tracking.done(), (id) => node.syncManager.waitForSync(id)),\n    );\n\n    return new Response(responseBody, {\n      status: 200,\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n    });\n  };\n\n  get requestSchema(): CoMapSchema<RequestShape> {\n    return this.requestDefinition.schema as CoMapSchema<RequestShape>;\n  }\n\n  get responseSchema() {\n    return this.responseDefinition.schema as CoMapSchema<ResponseShape>;\n  }\n}\n\n/**\n * Define a request route.\n *\n * @param params - The parameters for the request route.\n * @returns The request route.\n *\n * @see {@link https://jazz.tools/docs/react/server-side/http-requests}\n */\nexport function experimental_defineRequest<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n>(\n  params: RequestOptions<\n    RequestShape,\n    RequestResolve,\n    ResponseShape,\n    ResponseResolve\n  >,\n) {\n  return new HttpRoute(params);\n}\n\nfunction getCoValueCreatorAccountId(coValue: CoValueCore) {\n  if (!coValue.isAvailable()) {\n    throw new Error(\"Unable to load the request payload\");\n  }\n\n  const creatorSessionId = coValue.getValidSortedTransactions().at(0)\n    ?.txID.sessionID;\n\n  if (!creatorSessionId) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, creator session ID not found\",\n      400,\n    );\n  }\n\n  const accountId =\n    cojsonInternals.accountOrAgentIDfromSessionID(creatorSessionId);\n\n  if (!isCoValueId(accountId)) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, the creator is not a valid account\",\n      400,\n    );\n  }\n\n  return accountId;\n}\n\nexport class JazzRequestError {\n  public readonly isJazzRequestError = true;\n\n  constructor(\n    public readonly message: string,\n    public readonly code: number,\n    public readonly details?: unknown,\n  ) {}\n\n  toJSON() {\n    return { message: this.message, code: this.code, details: this.details };\n  }\n}\n\nexport function isJazzRequestError(error: unknown): error is JazzRequestError {\n  return (\n    error instanceof JazzRequestError ||\n    (typeof error === \"object\" &&\n      error !== null &&\n      \"isJazzRequestError\" in error &&\n      Boolean(error.isJazzRequestError))\n  );\n}\n\nfunction safeVerifySignature(\n  crypto: CryptoProvider,\n  signPayload: `hash_z${string}`,\n  signerID: `signer_z${string}`,\n  authToken: `signature_z${string}`,\n) {\n  try {\n    return crypto.verify(authToken, signPayload, signerID);\n  } catch (error) {\n    return false;\n  }\n}\n\nasync function loadWorkerAccountOrGroup(id: string, loadAs: Account) {\n  const node = loadAs.$jazz.localNode;\n  const coValue = await node.loadCoValueCore(id as `co_z${string}`);\n\n  if (!coValue.isAvailable()) {\n    throw new JazzRequestError(\"Worker account not found\", 400);\n  }\n\n  const content = coValue.getCurrentContent();\n\n  if (content instanceof RawAccount) {\n    const account = await Account.load(content.id, {\n      loadAs,\n    });\n    if (!account.$isLoaded) {\n      throw new JazzRequestError(\"Worker account not found\", 400);\n    }\n    return account;\n  }\n\n  const group = await Group.load(content.id, {\n    loadAs,\n  });\n\n  if (!group.$isLoaded) {\n    throw new JazzRequestError(\"Worker group not found\", 400);\n  }\n  return group;\n}\n\nfunction defaultGetToken(request: Request) {\n  const headerValue = request.headers.get(\"Authorization\");\n  if (headerValue?.startsWith(\"Jazz \")) {\n    return headerValue.replace(\"Jazz \", \"\");\n  }\n\n  if (headerValue) {\n    console.warn(\n      \"An Authorization header was found, but it did not start with 'Jazz '. If this is intentional, you can specify the location of the token using the `getToken` option.\",\n    );\n  }\n\n  return undefined;\n}\n\n/**\n * Authenticates a Request by verifying a signed authentication token.\n *\n * - If a token is not provided, the returned account is `undefined` and no error is returned.\n * - If a valid token is provided, the signer account is returned.\n * - If an invalid token is provided, an error is returned detailing the validation error, and the returned account is `undefined`.\n *\n * @see {@link generateAuthToken} for generating a token.\n *\n * Note: This function does not perform any authorization checks, it only verifies if - **when provided** - a token is valid. It is up to the caller to perform any additional authorization checks, if needed.\n *\n * @param request - The request to authenticate.\n * @param options - The options for the authentication.\n * @param options.expiration - The expiration time of the token in milliseconds, defaults to 1 minute.\n * @param options.loadAs - The account to load the token from, defaults to the current active account.\n * @param options.getToken - If specified, this function will be used to get the token from the request. By default the token is expected to be in the `Authorization` header in the form of `Jazz <token>`.\n * @returns The account if it is valid, otherwise an error.\n *\n * @example\n * ```ts\n * const { account, error } = await authenticateRequest(request);\n * if (error) {\n *   return new Response(JSON.stringify(error), { status: 401 });\n * }\n * ```\n */\nexport async function authenticateRequest(\n  request: Request,\n  options?: {\n    expiration?: number;\n    loadAs?: Account;\n    getToken?: (request: Request) => string | undefined | null;\n  },\n): Promise<\n  | {\n      account?: Account;\n      error?: never;\n    }\n  | {\n      account?: never;\n      error: { message: string; details?: unknown };\n    }\n> {\n  const token = options?.getToken?.(request) ?? defaultGetToken(request);\n\n  if (!token) {\n    return {};\n  }\n\n  const { account, error } = await parseAuthToken(token, {\n    loadAs: options?.loadAs,\n    expiration: options?.expiration ?? 1000 * 60,\n  });\n\n  if (error) {\n    return { error };\n  }\n\n  return { account, error };\n}\n\n/**\n * Generates an authentication token for a given account. This token can be used to authenticate a request. See {@link authenticateRequest} for more details.\n *\n * @param as - The account to generate the token for, defaults to the current active account.\n * @returns The authentication token.\n *\n * @example Make a fetch request with the token\n * ```ts\n * const token = generateAuthToken();\n * const response = await fetch(url, {\n *   headers: {\n *     Authorization: `Jazz ${token}`,\n *   },\n * });\n * ```\n */\n\nexport function generateAuthToken(as?: Account) {\n  const account = as ?? Account.getMe();\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerSecret = agent.currentSignerSecret();\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return `${authToken}~${account.$jazz.id}~${createdAt}`;\n}\n\nexport async function parseAuthToken(\n  authToken: string,\n  options?: { loadAs?: Account; expiration?: number },\n): Promise<\n  | { account: Account; error?: never }\n  | { account?: never; error: { message: string; details?: unknown } }\n> {\n  const expiration = options?.expiration ?? 1_000 * 60; // 1 minute\n\n  const parsed = z\n    .tuple([signatureSchema, coIdSchema, z.string().transform(Number)])\n    .safeParse(authToken.split(\"~\"));\n\n  if (!parsed.success) {\n    return {\n      error: {\n        message: \"Invalid token\",\n        details: parsed.error,\n      },\n    };\n  }\n\n  const [signature, id, createdAt] = parsed.data;\n\n  if (createdAt + expiration < Date.now()) {\n    return {\n      error: {\n        message: \"Token expired\",\n      },\n    };\n  }\n\n  const account = await Account.load(id, { loadAs: options?.loadAs });\n\n  if (!account.$isLoaded) {\n    return {\n      error: {\n        message: \"Failed to load account\",\n        details: { id },\n      },\n    };\n  }\n\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt: Number(createdAt),\n  });\n\n  const agentID = account.$jazz.raw.currentAgentID();\n  const signerID = crypto.getAgentSignerID(agentID);\n\n  if (!crypto.verify(signature, signPayload, signerID)) {\n    return {\n      error: {\n        message: \"Invalid signature\",\n      },\n    };\n  }\n\n  return {\n    account,\n  };\n}\n","export {\n  setCustomErrorReporter,\n  enableCaptureErrorCause,\n} from \"./subscribe/errorReporting.js\";\n\nexport {\n  logger,\n  LogLevel,\n} from \"cojson\";\n","export * from \"./exports.js\";\n\nexport {\n  cojsonInternals,\n  logger,\n  LogLevel,\n} from \"cojson\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE,WAAAA;AAAA,EAEA,qBAAAC;AAAA,OAEK;;;ACHA,SAAS,iBACd,aACA;AACA,MAAI,CAAC,YAAY,MAAM;AACrB,WAAO;AAAA,EACT;AAEA,MAAI,YAAY,KAAK,UAAU;AAC7B,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,WAAW;AAC9B,QAAI,YAAY,KAAK,UAAU;AAC7B,aAAO,GAAG,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,QAAQ;AAAA,IACnE;AAEA,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,UAAU;AAC7B,WAAO,YAAY,KAAK;AAAA,EAC1B;AAEA,MAAI,YAAY,KAAK,qBAAqB,cAAc;AACtD,UAAM,gBACJ,YAAY,KAAK,oBAAoB,aAAa,MAAM,GAAG,EAAE,CAAC;AAEhE,QAAI,eAAe;AACjB,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,YAAY,KAAK;AAC1B;;;ACEO,SAAS,mBACd,MAI0B;AAC1B,SAAO,CAAC,CAAC,QAAQ,mBAAmB,QAAQ,uBAAuB;AACrE;AAEO,SAAS,sBACd,cAIA,SAIA;AACA,MAAI,QAAQ,YAAY,MAAM,QAAQ,OAAO,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,sBAAsB,mBAAmB,cAAc,cAAc,IACvE,cAAc,iBACd;AACJ,QAAM,iBAAiB,mBAAmB,SAAS,cAAc,IAC7D,SAAS,iBACT;AAEJ,MAAI,CAAC,uBAAuB,CAAC,gBAAgB;AAC3C,WAAO,wBAAwB;AAAA,EACjC;AAEA,SAAO,oBAAoB,kBAAkB,eAAe;AAC9D;;;AFvDO,IAAM,gBAAN,MAAM,eAAc;AAAA,EACzB,YACU,cACA,QACA,mBACR;AAHQ;AACA;AACA;AAiCV,SAAQ,cAAc;AACtB,SAAQ,eAGG;AAiBX,6BAAoB,OAAO,gBAAkD;AAC3E,YAAM,kBAAkB,KAAK,kBAAkB;AAI/C,UAAI,CAAC,YAAY,MAAM;AACrB,YAAI,iBAAiB;AACnB,eAAK,kBAAkB,MAAM;AAC7B,gBAAM,KAAK,OAAO;AAAA,QACpB;AACA;AAAA,MACF;AAEA,UAAI,gBAAiB;AAErB,YAAM,mBAAmB,YAAY,KAClC;AAEH,UAAI,CAAC,iBAAiB,eAAe;AACnC,cAAM,KAAK,OAAO,WAAW;AAAA,MAC/B,OAAO;AACL,cAAM,KAAK,MAAM,WAAW;AAAA,MAC9B;AAAA,IACF;AAEA,iBAAQ,OAAO,gBAAkD;AAC/D,UAAI,CAAC,YAAY,MAAM;AACrB,cAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C;AAEA,YAAM,mBAAmB,YAAY,KAAK;AAC1C,UAAI,CAAC,mBAAmB,gBAAgB,GAAG;AACzC,cAAM,IAAI,MAAM,+BAA+B;AAAA,MACjD;AAEA,YAAM,cAAc;AAAA,QAClB,WAAW,iBAAiB;AAAA,QAC5B,eAAe,iBAAiB;AAAA,QAChC,YAAY,iBAAiB,kBACzB,WAAW,KAAK,iBAAiB,eAAe,IAChD;AAAA,QACJ,UAAU;AAAA,MACZ;AAEA,YAAM,KAAK,aAAa,WAAW;AAEnC,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B,iBAAiB,iBAAiB;AAAA,QACpC;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAEA,kBAAS,OAAO,gBAAkD;AAChE,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,kBAAkB,YAAY,aAChC,MAAM,KAAK,YAAY,UAAU,IACjC;AAEJ,YAAM,mBAAmB;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,mBAAmB,YAAY;AAAA,QAC/B;AAAA,MACF;AAGA,WAAK,eAAe,EAAE,gBAAgB,iBAAiB;AAEvD,UAAI,YAAY,MAAM;AACpB,cAAM,YAAY,KAAK,OAAO;AAAA,UAC5B,gBAAgB;AAAA,QAClB,CAAC;AAAA,MACH;AAEA,YAAM,iBAAiB,MAAMC,SAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,YAAM,WAAW,iBAAiB,WAAW;AAE7C,UAAI,UAAU;AACZ,uBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAAA,MACnD;AAEA,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B;AAAA,QACF;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EA3JG;AAAA;AAAA;AAAA;AAAA,EAKH,OAAO,kBACL,aACA,SACA;AACA,WAAO,QAAQ,IAAI;AAAA,MACjB,WAAW,YAAY;AAAA,MACvB,eAAe,YAAY;AAAA,MAC3B,YAAY,YAAY,kBACpB,WAAW,KAAK,YAAY,eAAe,IAC3C;AAAA,MACJ,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,eAAe,OAA2B;AACrD,UAAM,gBAAgB,IAAIC,mBAAkB;AAE5C,QAAI,CAAC,mBAAmB,MAAM,MAAM,cAAc,GAAG;AACnD;AAAA,IACF;AAEA,UAAM,eAAc;AAAA,MAClB,MAAM,KAAK;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAQA,iBAAiB,aAAiC;AAChD,SAAK,eAAe,YAAY,QAAQ;AAGxC,WAAO,YAAY,YAAY,CAAC,UAAU;AACxC,YAAM,OAAQ,MAA2C,QAAQ;AAEjE,UAAI,CAAC,sBAAsB,KAAK,cAAc,IAAI,KAAK,KAAK,aAAa;AACvE,aAAK,eAAe;AACpB,aAAK,kBAAkB,EAAE,KAAK,CAAC;AAC/B,aAAK,cAAc;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AAyGF;;;AGzJO,IAAM,WAAN,MAAe;AAAA,EACpB,YACU,cACA,mBACR;AAFQ;AACA;AAGV,iBAAQ,OAAO,aAAqB;AAClC,YAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAC3D,YAAM,cAAc,cAAc,QAAQ;AAE1C,UAAI,CAAC,aAAa,WAAW;AAC3B,cAAM,IAAI,MAAM,gBAAgB;AAAA,MAClC;AAEA,YAAM,KAAK,aAAa;AAAA,QACtB,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,MAC7B,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,kBAAS,OAAO,aAAqB;AACnC,YAAM,gBAAgB,MAAM,KAAK,iBAAiB;AAClD,UAAI,cAAc,SAAS,QAAQ,GAAG;AACpC,cAAM,IAAI,MAAM,yBAAyB;AAAA,MAC3C;AAEA,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,qBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAEjD,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAED,YAAM,KAAK,mBAAmB,UAAU;AAAA,QACtC,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,MAAM,KAAK,YAAY,UAAU,IACjC;AAAA,MACN,CAAC;AAAA,IACH;AAuBA,4BAAmB,YAAY;AAC7B,aAAO,OAAO,KAAK,MAAM,KAAK,0BAA0B,CAAC;AAAA,IAC3D;AAAA,EAtFG;AAAA,EA+DH,MAAc,mBAAmB,UAAkB,MAAmB;AACpE,UAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAE3D,QAAI,cAAc,QAAQ,GAAG;AAC3B;AAAA,IACF;AAEA,kBAAc,QAAQ,IAAI;AAE1B,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAAA,EACpE;AAAA,EAEA,MAAc,4BAA4B;AACxC,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,qBAAqB,OAAO;AAElC,UAAM,gBAAgB,MAAM,QAAQ,IAAI,iBAAiB;AACzD,WAAO,gBAAgB,KAAK,MAAM,aAAa,IAAI,CAAC;AAAA,EACtD;AAKF;AAEO,SAAS,eAAe,UAAkB;AAC/C,SAAO,KAAK,QAAQ,EACjB,QAAQ,MAAM,GAAG,EACjB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG;AACvB;AAEA,eAAe,kBAAkB,SAAkB;AACjD,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,IAAI,2BAA2B;AAC7D,WAAO,UAAU,SAAS,OAAO,IAAI;AAAA,EACvC,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBAAkB,SAAkB,SAAiB;AAClE,QAAM,QAAQ,IAAI,6BAA6B,QAAQ,SAAS,CAAC;AACnE;AAEA,eAAe,qBAAqB,SAAkB;AACpD,QAAM,gBAAgB,MAAM,QAAQ,IAAI,0BAA0B;AAClE,SAAO,gBAAgB,cAAc,MAAM,GAAG,IAAI,CAAC;AACrD;AAKA,eAAe,qBAAqB,SAAkB;AACpD,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,gBAAgB,MAAM,qBAAqB,OAAO;AAExD,eAAW,YAAY,eAAe;AACpC,YAAM,YAAY,4BAA4B,QAAQ;AACtD,YAAM,cAAc,MAAM,QAAQ,IAAI,SAAS;AAC/C,UAAI,aAAa;AACf,cAAM,QAAQ;AAAA,UACZ,4BAA4B,eAAe,QAAQ,CAAC;AAAA,UACpD;AAAA,QACF;AACA,cAAM,QAAQ,OAAO,SAAS;AAAA,MAChC;AAAA,IACF;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AAEA,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,oBAAoB,MAAM,qBAAqB,OAAO;AAE5D,UAAM,gBAA6C,CAAC;AACpD,UAAM,eAAyB,CAAC,0BAA0B;AAE1D,eAAW,YAAY,mBAAmB;AACxC,YAAM,MAAM,4BAA4B,eAAe,QAAQ,CAAC;AAChE,YAAM,cAAc,MAAM,QAAQ,IAAI,GAAG;AACzC,UAAI,aAAa;AACf,sBAAc,QAAQ,IAAI,KAAK,MAAM,WAAW;AAChD,qBAAa,KAAK,GAAG;AAAA,MACvB;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAElE,eAAW,OAAO,cAAc;AAC9B,YAAM,QAAQ,OAAO,GAAG;AAAA,IAC1B;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AACF;;;AC5LA,YAAY,WAAW;AACvB,SAAS,yBAAyB;AAClC,SAAyB,uBAAuB;AAoBzC,IAAM,iBAAN,MAAqB;AAAA,EAG1B,YACU,QACA,cACA,UACA,mBACD,UACP;AALQ;AACA;AACA;AACA;AACD;AAPT,sBAAqB;AAUrB,iBAAQ,OAAO,eAAuB;AACpC,YAAM,EAAE,QAAQ,aAAa,IAAI;AAEjC,UAAI;AAEJ,UAAI;AACF,qBAAmB,wBAAkB,YAAY,KAAK,QAAQ;AAAA,MAChE,SAAS,GAAG;AACV,cAAM,IAAI,MAAM,oBAAoB;AAAA,MACtC;AAEA,YAAM,gBAAgB,OAAO,0BAA0B,UAAU;AAEjE,YAAM,YAAY,gBAAgB;AAAA,QAChC,gBAAgB,mCAAmC,eAAe,MAAM;AAAA,QACxE;AAAA,MACF;AAEA,YAAM,aAAa;AAAA,QACjB;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,kBAAS,OAAO,SAAkB;AAChC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,aAAa,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAE1E,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,YAAY,YAAY;AAAA,QACxB,eAAe,YAAY;AAAA,QAC3B,UAAU;AAAA,MACZ,CAAC;AAED,UAAI,MAAM,KAAK,GAAG;AAChB,cAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,UAC9D,SAAS;AAAA,YACP,SAAS;AAAA,UACX;AAAA,QACF,CAAC;AAED,uBAAe,QAAQ,MAAM,IAAI,QAAQ,IAAI;AAAA,MAC/C;AAEA,aAAO;AAAA,IACT;AAEA,8BAAqB,OAAO,YAAoB,SAAiB;AAC/D,YAAM,aAAmB,wBAAkB,YAAY,KAAK,QAAQ;AACpE,YAAM,gBAAgB,KAAK,OAAO,0BAA0B,UAAU;AACtE,YAAM,YAAY,MAAM,KAAK,SAAS,eAAe,EAAE,KAAK,CAAC;AAE7D,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,aAAO;AAAA,IACT;AAEA,uCAA8B,YAAY;AACxC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,aAAO,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAAA,IAChE;AAEA,oCAA2B,MAAM;AAC/B,aAAO,kBAAkB,KAAK,OAAO,oBAAoB,GAAG,KAAK,QAAQ;AAAA,IAC3E;AAEA,wCAA+B,YAAY;AACzC,YAAM,aAAa,MAAM,KAAK,4BAA4B;AAC1D,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,qBAAY,oBAAI,IAAgB;AAChC,qBAAY,CAAC,aAAyB;AACpC,WAAK,UAAU,IAAI,QAAQ;AAE3B,aAAO,MAAM;AACX,aAAK,UAAU,OAAO,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,EA3GG;AAAA,EA6GH,SAAS;AACP,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS;AAAA,IACX;AAAA,EACF;AACF;;;ACjJA,SAAyC,mBAAAC,wBAAuB;AAKzD,SAAS,iBACd,OACA,MACA,SACA,WACQ;AACR,QAAM,cAAc,MAAM,MAAM,IAAI;AACpC,MAAI,iBAAiB;AAErB,SAAO,eAAe,SAAS,OAAO,QAAQ,SAAS,gBAAgB;AACrE,qBAAiB,eAAe,SAAS,EAAE;AAAA,EAC7C;AAEA,QAAM,EAAE,SAAS,KAAK,IAAI,eAAe,SAAS;AAElD,MAAI,QAAQ,SAAS,WAAW,MAAM,SAAS,WAAW;AACxD,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,QAAM,QAAQC,iBAAgB,YAAY,eAAe,kBAAkB,CAAC;AAC5E,QAAM,eAAe,MAAM,aAAa,IAAI;AAE5C,SAAO,GAAG,OAAO,YAAY,YAAY,YAAY,MAAM,EAAE,GAC3D,MAAM,MAAM,EACd,IAAI,YAAY;AAClB;AAGO,SAAS,gBAAgB,WAMlB;AACZ,QAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,QAAM,QAAQ,IAAI,KAAK,MAAM,GAAG;AAEhC,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,UAAU;AAC7C,QAAI,MAAM,WAAW,GAAG;AACtB,kBAAY,MAAM,CAAC;AACnB,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB,WAAW,MAAM,WAAW,GAAG;AAC7B,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB;AAEA,QAAI,CAAC,WAAW,CAAC,cAAc;AAC7B,aAAO;AAAA,IACT;AACA,WAAO,EAAE,SAAS,cAAc,UAAU;AAAA,EAC5C;AACF;AAGO,SAAS,kBAAkD;AAAA,EAChE;AAAA,EACA,KAAK,QAAQ,MAAM;AAAA,EACnB;AAAA,EACA;AACF,GAYE;AACA,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,SAAS,gBAAgB,SAAS;AAExC,QAAI,UAAU,OAAO,cAAc,cAAc;AAC/C,SAAG,aAAa,OAAO,SAAS,OAAO,cAAc,mBAAmB,EACrE,KAAK,MAAM;AACV,gBAAQ,MAAM;AAAA,MAChB,CAAC,EACA,MAAM,MAAM;AAAA,IACjB,OAAO;AACL,cAAQ,MAAS;AAAA,IACnB;AAAA,EACF,CAAC;AACH;;;AChGA;AAAA,EAIE;AAAA,EAEA,mBAAAC;AAAA,OACK;AACP,OAAO,OAAO;AA0Fd,SAAS,sBACP,QACA,OACA,OACA,YACA,MACwB;AACxB,QAAM,QAAQ,MAAM,OAAO,EAAE,MAAM,CAAC;AAEpC,MAAI,SAAS,WAAW;AACtB,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC,OAAO;AACL,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC;AAGA,SAAO,OAAO,OAAO,SAAS,CAAC,GAAG,KAAK;AACzC;AAMA,eAAe,wBAAwB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,KAAK,SAAS,QAAQ,MAAM;AAClC,QAAM,OAAO,GAAG,MAAM;AACtB,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,WAAW,MAAM,gBAAgB;AACvC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,WAAW,sBAAsB,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAEtE,QAAM,gBACH,MAAM,cAAc,QAAQ,SAAS,MAAM,IAAI;AAAA,IAC9C;AAAA,IACA,QAAQ;AAAA,IACR,sBAAsB;AAAA,EACxB,CAAC,KAAM,CAAC;AAEV,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO;AAAA,IACL;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,IAAM,aAAa,EAAE,OAAwB,WAAW;AACxD,IAAM,kBAAkB,EAAE;AAAA,EACxB,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,aAAa;AACxE;AAEA,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC;AAAA,EAC/B,IAAI;AAAA,EACJ,WAAW,EAAE,OAAO;AAAA,EACpB,WAAW;AAAA,EACX,UAAU,EAAE;AAAA,IACV,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,UAAU;AAAA,EACrE;AACF,CAAC;AAOD,eAAe,qBAAqB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,SAAS,KAAK;AAEpB,QAAM,gBAAgB,cAAc,UAAU,OAAO;AAErD,MAAI,CAAC,cAAc,SAAS;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,cAAc,cAAc;AAElC,MAAI,SAAS,WAAW;AACtB,UAAM,OAAO,MAAM,KAAK,gBAAgB,YAAY,IAAI,QAAW,IAAI;AAGvE,QAAI,KAAK,YAAY,GAAG;AACtB,YAAM,UAAU,KAAK,kBAAkB;AAEvC,UAAI,QAAQ,IAAI,UAAU,MAAM,OAAO,MAAM,IAAI;AAC/C,cAAM,IAAI,iBAAiB,sCAAsC,GAAG;AAAA,MACtE;AAAA,IACF;AAGA,QAAI,YAAY,YAAY,MAAO,KAAK,KAAK,IAAI,GAAG;AAClD,YAAM,IAAI,iBAAiB,mCAAmC,GAAG;AAAA,IACnE;AAAA,EACF;AAGA,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,eAAe,YAAY;AAAA,IAC3B,IAAI,YAAY;AAAA,IAChB,WAAW,YAAY;AAAA,IACvB,UAAU,YAAY;AAAA,EACxB,CAAC;AAED,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,GACA;AACA,UAAM,IAAI,iBAAiB,qBAAqB,GAAG;AAAA,EACrD;AAEA,MAAI,gBACF,YAAY;AAEd,MAAI,SAAS,WAAW;AACtB,UAAM,iBAAiB,cAAc;AAAA,MACnC,CAAC,UAAU,MAAM,OAAO,YAAY;AAAA,IACtC;AAEA,QAAI,kBAAkB,eAAe,QAAQ;AAC3C,YAAM,cAAcC,iBAAgB;AAAA,QAClC,eAAe;AAAA,QACf;AAAA,MACF;AACA,kBAAY,IAAI,YAAY,EAAE;AAC9B,sBAAgB,cAAc;AAAA,QAAO,CAAC,UACpC,YAAY,IAAI,MAAM,EAAE;AAAA,MAC1B;AAAA,IACF,OAAO;AACL,sBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,sBAAoB,eAAe,MAAM;AAEzC,QAAM,UAAU,MAAM,KAAK,gBAAgB,YAAY,EAAE;AACzD,QAAM,YAAY,2BAA2B,OAAO;AAEpD,QAAM,SAAS,MAAM,QAAQ,KAAK,WAAW;AAAA,IAC3C;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,WAAW;AACrB,UAAM,IAAI,iBAAiB,6BAA6B,GAAG;AAAA,EAC7D;AAEA,QAAM,WAAW;AAAA,IACf;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,YAAyB,UAAU,YAAY,IAAI;AAAA,IACrE;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,mBAAmB,GAAG;AAAA,EACnD;AAEA,MAAI,SAAS,WAAW;AACtB,UAAM,MAAM,IAAI,IAAI,YAAY,OAAO,MAAM,EAAE;AAAA,EACjD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,sBAGP,SAAwC;AACxC,MAAI,YAAY,SAAS;AACvB,WAAO;AAAA;AAAA,MAEL,QAAQ,aAAa,QAAQ,MAAM;AAAA,MACnC,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,aAAa,OAAO;AAAA,IAC5B,SAAS;AAAA,EACX;AACF;AAEO,IAAM,YAAN,MAKL;AAAA,EAYA,YACE,QAMA;AAyEF,kBAAS,OACP,SACA,IACA,aAMsB;AACtB,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,qBAAqB,SAAS,IAAI,QAAQ;AACtE,eAAO;AAAA,MACT,SAAS,OAAO;AAEd,YAAI,mBAAmB,KAAK,GAAG;AAC7B,iBAAO,IAAI,SAAS,KAAK,UAAU,MAAM,OAAO,CAAC,GAAG;AAAA,YAClD,QAAQ,MAAM;AAAA,YACd,SAAS;AAAA,cACP,gBAAgB;AAAA,cAChB,wBAAwB;AAAA,YAC1B;AAAA,UACF,CAAC;AAAA,QACH;AAEA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,gCAAuB,OACrB,SACA,IACA,aAMsB;AACtB,YAAM,OAAO,GAAG,MAAM;AACtB,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,OAAO,MAAM,qBAAqB;AAAA,QACtC,MAAM;AAAA,QACN,QAAQ,KAAK,kBAAkB;AAAA,QAC/B,SAAS,KAAK,kBAAkB;AAAA,QAChC,SAAS;AAAA,QACT,QAAQ;AAAA,MACV,CAAC;AAED,YAAM,WAAW,KAAK,YAAY,mBAAmB;AAErD,YAAM,gBAAgB,MAAM;AAAA,QAC1B,KAAK;AAAA,QACL,KAAK;AAAA,MACP;AAEA,YAAM,kBAAkB,MAAM,wBAAwB;AAAA,QACpD,MAAM;AAAA,QACN,QAAQ,KAAK,mBAAmB;AAAA,QAChC,SAAS,KAAK,mBAAmB;AAAA,QACjC,OAAO;AAAA,QACP,OAAO;AAAA,QACP,QAAQ,KAAK;AAAA,MACf,CAAC;AAED,YAAM,eAAe,KAAK,UAAU;AAAA,QAClC,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAGD,YAAM,QAAQ;AAAA,QACZ,MAAM,KAAK,SAAS,KAAK,GAAG,CAAC,OAAO,KAAK,YAAY,YAAY,EAAE,CAAC;AAAA,MACtE;AAEA,aAAO,IAAI,SAAS,cAAc;AAAA,QAChC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,IACH;AAzJE,SAAK,oBAAoB,sBAAsB,OAAO,OAAO;AAC7D,SAAK,qBAAqB,sBAAsB,OAAO,QAAQ;AAC/D,SAAK,MAAM,OAAO;AAClB,SAAK,WAAW,OAAO;AAEvB,QAAI,OAAO,aAAa,QAAW;AACjC,YAAM,IAAI,UAAU,uBAAuB;AAAA,IAC7C;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,QACA,SAC8D;AAC9D,UAAM,KAAK,SAAS,SAAS,QAAQ,MAAM;AAE3C,UAAM,SAAS,MAAM,yBAAyB,KAAK,UAAU,EAAE;AAE/D,UAAM,WAAW,MAAM,MAAM,KAAK,KAAK;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK;AAAA,QACT,MAAM,wBAAwB;AAAA,UAC5B,MAAM;AAAA,UACN,QAAQ,KAAK,kBAAkB;AAAA,UAC/B,SAAS;AAAA;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,SAAS,QAAQ,IAAI,sBAAsB,GAAG;AAChD,cAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,cAAM,IAAI,iBAAiB,MAAM,SAAS,MAAM,MAAM,MAAM,OAAO;AAAA,MACrE;AAEA,YAAM,IAAI,iBAAiB,kBAAkB,SAAS,MAAM;AAAA,IAC9D;AAEA,UAAM,eAAe,MAAM,SAAS,KAAK;AAEzC,UAAM,iBAAiB,EACpB,OAAO;AAAA,MACN,MAAM,EAAE,QAAQ,SAAS;AAAA,MACzB,SAAS,EAAE,IAAI;AAAA,IACjB,CAAC,EACA,UAAU,YAAY;AAEzB,QAAI,CAAC,eAAe,SAAS;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,qBAAqB;AAAA,MACtC,MAAM;AAAA,MACN,QAAQ,KAAK,mBAAmB;AAAA,MAChC,SAAS,KAAK,mBAAmB;AAAA,MACjC,SAAS,eAAe,KAAK;AAAA,MAC7B,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,KAAK;AAAA,EACd;AAAA,EAqFA,IAAI,gBAA2C;AAC7C,WAAO,KAAK,kBAAkB;AAAA,EAChC;AAAA,EAEA,IAAI,iBAAiB;AACnB,WAAO,KAAK,mBAAmB;AAAA,EACjC;AACF;AAUO,SAAS,2BAMd,QAMA;AACA,SAAO,IAAI,UAAU,MAAM;AAC7B;AAEA,SAAS,2BAA2B,SAAsB;AACxD,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAEA,QAAM,mBAAmB,QAAQ,2BAA2B,EAAE,GAAG,CAAC,GAC9D,KAAK;AAET,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YACJA,iBAAgB,8BAA8B,gBAAgB;AAEhE,MAAI,CAAC,YAAY,SAAS,GAAG;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,IAAM,mBAAN,MAAuB;AAAA,EAG5B,YACkB,SACA,MACA,SAChB;AAHgB;AACA;AACA;AALlB,SAAgB,qBAAqB;AAAA,EAMlC;AAAA,EAEH,SAAS;AACP,WAAO,EAAE,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,SAAS,KAAK,QAAQ;AAAA,EACzE;AACF;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SACE,iBAAiB,oBAChB,OAAO,UAAU,YAChB,UAAU,QACV,wBAAwB,SACxB,QAAQ,MAAM,kBAAkB;AAEtC;AAEA,SAAS,oBACP,QACA,aACA,UACA,WACA;AACA,MAAI;AACF,WAAO,OAAO,OAAO,WAAW,aAAa,QAAQ;AAAA,EACvD,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,yBAAyB,IAAY,QAAiB;AACnE,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,UAAU,MAAM,KAAK,gBAAgB,EAAqB;AAEhE,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,EAC5D;AAEA,QAAM,UAAU,QAAQ,kBAAkB;AAE1C,MAAI,mBAAmB,YAAY;AACjC,UAAM,UAAU,MAAM,QAAQ,KAAK,QAAQ,IAAI;AAAA,MAC7C;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ,WAAW;AACtB,YAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,MAAM,MAAM,KAAK,QAAQ,IAAI;AAAA,IACzC;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,0BAA0B,GAAG;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,SAAkB;AACzC,QAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;AACvD,MAAI,aAAa,WAAW,OAAO,GAAG;AACpC,WAAO,YAAY,QAAQ,SAAS,EAAE;AAAA,EACxC;AAEA,MAAI,aAAa;AACf,YAAQ;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AA4BA,eAAsB,oBACpB,SACA,SAcA;AACA,QAAM,QAAQ,SAAS,WAAW,OAAO,KAAK,gBAAgB,OAAO;AAErE,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,EAAE,SAAS,MAAM,IAAI,MAAM,eAAe,OAAO;AAAA,IACrD,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS,cAAc,MAAO;AAAA,EAC5C,CAAC;AAED,MAAI,OAAO;AACT,WAAO,EAAE,MAAM;AAAA,EACjB;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAmBO,SAAS,kBAAkB,IAAc;AAC9C,QAAM,UAAU,MAAM,QAAQ,MAAM;AACpC,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO,GAAG,SAAS,IAAI,QAAQ,MAAM,EAAE,IAAI,SAAS;AACtD;AAEA,eAAsB,eACpB,WACA,SAIA;AACA,QAAM,aAAa,SAAS,cAAc,MAAQ;AAElD,QAAM,SAAS,EACZ,MAAM,CAAC,iBAAiB,YAAY,EAAE,OAAO,EAAE,UAAU,MAAM,CAAC,CAAC,EACjE,UAAU,UAAU,MAAM,GAAG,CAAC;AAEjC,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,OAAO;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,WAAW,IAAI,SAAS,IAAI,OAAO;AAE1C,MAAI,YAAY,aAAa,KAAK,IAAI,GAAG;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,QAAQ,KAAK,IAAI,EAAE,QAAQ,SAAS,OAAO,CAAC;AAElE,MAAI,CAAC,QAAQ,WAAW;AACtB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,EAAE,GAAG;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAGpB,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB,WAAW,OAAO,SAAS;AAAA,EAC7B,CAAC;AAED,QAAM,UAAU,QAAQ,MAAM,IAAI,eAAe;AACjD,QAAM,WAAW,OAAO,iBAAiB,OAAO;AAEhD,MAAI,CAAC,OAAO,OAAO,WAAW,aAAa,QAAQ,GAAG;AACpD,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,EACF;AACF;;;ACtzBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA;AAAA,EACE;AAAA,EACA;AAAA,OACK;;;ACNP;AAAA,EACE,mBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,YAAAC;AAAA,OACK;","names":["Account","AuthSecretStorage","Account","AuthSecretStorage","cojsonInternals","cojsonInternals","cojsonInternals","cojsonInternals","cojsonInternals","logger","LogLevel"]}

package/dist/tools/auth/clerk/index.d.ts

@@ -13,6 +13,7 @@ export declare class JazzClerkAuth {
     static loadClerkAuthData(credentials: ClerkCredentials, storage: AuthSecretStorage): Promise<void>;
     static initializeAuth(clerk: MinimalClerkClient): Promise<void>;
     private isFirstCall;
+    private previousUser;
     registerListener(clerkClient: MinimalClerkClient): void;
     onClerkUserChange: (clerkClient: Pick<MinimalClerkClient, "user">) => Promise<void>;
     logIn: (clerkClient: Pick<MinimalClerkClient, "user">) => Promise<void>;

package/dist/tools/auth/clerk/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/tools/auth/clerk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,iBAAiB,EACjB,2BAA2B,EAC5B,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAElB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,kBAAkB,EAAE,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B,qBAAa,aAAa;IAEtB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,iBAAiB;gBAFjB,YAAY,EAAE,2BAA2B,EACzC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAClC,iBAAiB,EAAE,iBAAiB;IAG9C;;OAEG;IACH,MAAM,CAAC,iBAAiB,CACtB,WAAW,EAAE,gBAAgB,EAC7B,OAAO,EAAE,iBAAiB;WAYf,cAAc,CAAC,KAAK,EAAE,kBAAkB;IAarD,OAAO,CAAC,WAAW,CAAQ;IAE3B,gBAAgB,CAAC,WAAW,EAAE,kBAAkB;IAgBhD,iBAAiB,gBAAuB,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,mBAuBtE;IAEF,KAAK,gBAAuB,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,mBA6B1D;IAEF,MAAM,gBAAuB,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,mBAuC3D;CACH;AAGD,yBAAiB,gBAAgB,CAAC;IAChC,UAAiB,MAAM;QACrB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,KAAK,IAAI,CAAC;KAC1C;CACF"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/tools/auth/clerk/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,iBAAiB,EACjB,2BAA2B,EAC5B,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,gBAAgB,EAChB,kBAAkB,EAElB,kBAAkB,EACnB,MAAM,YAAY,CAAC;AAEpB,YAAY,EAAE,kBAAkB,EAAE,CAAC;AACnC,OAAO,EAAE,kBAAkB,EAAE,CAAC;AAE9B,qBAAa,aAAa;IAEtB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,iBAAiB;gBAFjB,YAAY,EAAE,2BAA2B,EACzC,MAAM,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAClC,iBAAiB,EAAE,iBAAiB;IAG9C;;OAEG;IACH,MAAM,CAAC,iBAAiB,CACtB,WAAW,EAAE,gBAAgB,EAC7B,OAAO,EAAE,iBAAiB;WAYf,cAAc,CAAC,KAAK,EAAE,kBAAkB;IAarD,OAAO,CAAC,WAAW,CAAQ;IAC3B,OAAO,CAAC,YAAY,CAGJ;IAEhB,gBAAgB,CAAC,WAAW,EAAE,kBAAkB;IAehD,iBAAiB,gBAAuB,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,mBAuBtE;IAEF,KAAK,gBAAuB,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,mBA6B1D;IAEF,MAAM,gBAAuB,IAAI,CAAC,kBAAkB,EAAE,MAAM,CAAC,mBA8C3D;CACH;AAGD,yBAAiB,gBAAgB,CAAC;IAChC,UAAiB,MAAM;QACrB,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,KAAK,IAAI,CAAC;KAC1C;CACF"}

package/dist/tools/auth/clerk/tests/isClerkAuthStateEqual.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=isClerkAuthStateEqual.test.d.ts.map

package/dist/tools/auth/clerk/tests/isClerkAuthStateEqual.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"isClerkAuthStateEqual.test.d.ts","sourceRoot":"","sources":["../../../../../src/tools/auth/clerk/tests/isClerkAuthStateEqual.test.ts"],"names":[],"mappings":""}

package/dist/tools/auth/clerk/types.d.ts

@@ -27,6 +27,6 @@ export type ClerkCredentials = {
  * Checks if the Clerk user metadata contains the necessary credentials for Jazz auth.
  * **Note**: It does not validate the credentials, only checks if the necessary fields are present in the metadata object.
  */
-export declare function isClerkCredentials(data: NonNullable<MinimalClerkClient["user"]>["unsafeMetadata"] | undefined): data is ClerkCredentials;
-export declare function isClerkAuthStateEqual(previousUser: MinimalClerkClient["user"] | null | undefined, newUser: MinimalClerkClient["user"] | null | undefined): boolean;
+export declare function isClerkCredentials(data: NonNullable<MinimalClerkClient["user"]>["unsafeMetadata"] | null | undefined): data is ClerkCredentials;
+export declare function isClerkAuthStateEqual(previousUser: Pick<NonNullable<MinimalClerkClient["user"]>, "unsafeMetadata"> | null | undefined, newUser: Pick<NonNullable<MinimalClerkClient["user"]>, "unsafeMetadata"> | null | undefined): boolean;
 //# sourceMappingURL=types.d.ts.map

package/dist/tools/auth/clerk/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/tools/auth/clerk/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EACA;QAEE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,mBAAmB,EAAE;YACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;SAC7B,GAAG,IAAI,CAAC;QACT,MAAM,EAAE,CAAC,IAAI,EAAE;YAEb,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SACrC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KACxB,GACD,IAAI,GACJ,SAAS,CAAC;IACd,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3B,iBAAiB,EAAE,WAAW,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,SAAS,GAC1E,IAAI,IAAI,gBAAgB,CAE1B;AAED,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,SAAS,EAC3D,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,SAAS,WAUvD"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/tools/auth/clerk/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAEzC,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EACA;QAEE,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACpC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,EAAE,EAAE,MAAM,CAAC;QACX,mBAAmB,EAAE;YACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;SAC7B,GAAG,IAAI,CAAC;QACT,MAAM,EAAE,CAAC,IAAI,EAAE;YAEb,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SACrC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;KACxB,GACD,IAAI,GACJ,SAAS,CAAC;IACd,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,KAAK,IAAI,CAAC;CAC1D,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,aAAa,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC;IAC3B,iBAAiB,EAAE,WAAW,CAAC;IAC/B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EACA,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,CAAC,GACzD,IAAI,GACJ,SAAS,GACZ,IAAI,IAAI,gBAAgB,CAE1B;AAED,wBAAgB,qBAAqB,CACnC,YAAY,EACR,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAC/D,IAAI,GACJ,SAAS,EACb,OAAO,EACH,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,gBAAgB,CAAC,GAC/D,IAAI,GACJ,SAAS,WAkBd"}

package/package.json

@@ -205,7 +205,7 @@
   },
   "type": "module",
   "license": "MIT",
-  "version": "0.19.15",
+  "version": "0.19.16",
   "dependencies": {
     "@manuscripts/prosemirror-recreate-steps": "^0.1.4",
     "@scure/base": "1.2.1",
@@ -222,9 +222,9 @@
     "prosemirror-transform": "^1.9.0",
     "use-sync-external-store": "^1.5.0",
     "zod": "4.1.11",
-    "cojson": "0.19.15",
-    "cojson-storage-indexeddb": "0.19.15",
-    "cojson-transport-ws": "0.19.15"
+    "cojson": "0.19.16",
+    "cojson-storage-indexeddb": "0.19.16",
+    "cojson-transport-ws": "0.19.16"
   },
   "devDependencies": {
     "@scure/bip39": "^1.3.0",

package/src/tools/auth/clerk/index.ts

@@ -53,18 +53,21 @@ export class JazzClerkAuth {
   }
 
   private isFirstCall = true;
+  private previousUser: Pick<
+    NonNullable<MinimalClerkClient["user"]>,
+    "unsafeMetadata"
+  > | null = null;
 
   registerListener(clerkClient: MinimalClerkClient) {
-    let previousUser: MinimalClerkClient["user"] | null =
-      clerkClient.user ?? null;
+    this.previousUser = clerkClient.user ?? null;
 
     // Need to use addListener because the clerk user object is not updated when the user logs in
     return clerkClient.addListener((event) => {
       const user = (event as Pick<MinimalClerkClient, "user">).user ?? null;
 
-      if (!isClerkAuthStateEqual(previousUser, user) || this.isFirstCall) {
+      if (!isClerkAuthStateEqual(this.previousUser, user) || this.isFirstCall) {
+        this.previousUser = user;
         this.onClerkUserChange({ user });
-        previousUser = user;
         this.isFirstCall = false;
       }
     });
@@ -137,13 +140,20 @@ export class JazzClerkAuth {
       ? Array.from(credentials.secretSeed)
       : undefined;
 
-    await clerkClient.user?.update({
-      unsafeMetadata: {
-        jazzAccountID: credentials.accountID,
-        jazzAccountSecret: credentials.accountSecret,
-        jazzAccountSeed,
-      } satisfies ClerkCredentials,
-    });
+    const clerkCredentials = {
+      jazzAccountID: credentials.accountID,
+      jazzAccountSecret: credentials.accountSecret,
+      jazzAccountSeed,
+    };
+    // user.update will cause the Clerk user change listener to fire; updating this.previousUser beforehand
+    // ensures the listener sees the new credentials and does not trigger an unnecessary logIn operation
+    this.previousUser = { unsafeMetadata: clerkCredentials };
+
+    if (clerkClient.user) {
+      await clerkClient.user.update({
+        unsafeMetadata: clerkCredentials,
+      });
+    }
 
     const currentAccount = await Account.getMe().$jazz.ensureLoaded({
       resolve: {

package/src/tools/auth/clerk/tests/JazzClerkAuth.test.ts

@@ -282,6 +282,83 @@ describe("JazzClerkAuth", () => {
 
       expect(onClerkUserChangeSpy).toHaveBeenCalledTimes(1);
     });
+
+    it("should complete signup flow when new Clerk user is detected", async () => {
+      // 1. Setup local credentials (simulating anonymous user)
+      await authSecretStorage.set({
+        accountID: "test-account-id" as ID<Account>,
+        secretSeed: new Uint8Array([1, 2, 3]),
+        accountSecret: "test-secret" as AgentSecret,
+        provider: "anonymous",
+      });
+
+      const { client, triggerUserChange } = setupMockClerk(null);
+
+      const auth = new JazzClerkAuth(
+        mockAuthenticate,
+        mockLogOut,
+        authSecretStorage,
+      );
+
+      // 2. Register listener with null user (no one logged in yet)
+      auth.registerListener(client);
+
+      // Initial trigger with no user
+      triggerUserChange(null);
+
+      // 3. Trigger event with new Clerk user (no Jazz credentials yet)
+      const mockUserUpdate = vi.fn((data) => {
+        triggerUserChange(data);
+      });
+
+      const signInSpy = vi.spyOn(auth, "signIn");
+      const logInSpy = vi.spyOn(auth, "logIn");
+
+      const newClerkUser = {
+        fullName: "Test User",
+        firstName: "Test",
+        lastName: "User",
+        username: "testuser",
+        id: "clerk-user-123",
+        primaryEmailAddress: { emailAddress: "test@example.com" },
+        unsafeMetadata: {}, // No Jazz credentials yet
+        update: mockUserUpdate,
+      };
+
+      triggerUserChange(newClerkUser);
+
+      // Wait for async operations to complete
+      await vi.waitFor(() => {
+        expect(mockUserUpdate).toHaveBeenCalled();
+      });
+
+      // 4. Verify credentials synced to Clerk
+      expect(mockUserUpdate).toHaveBeenCalledWith({
+        unsafeMetadata: {
+          jazzAccountID: "test-account-id",
+          jazzAccountSecret: "test-secret",
+          jazzAccountSeed: [1, 2, 3],
+        },
+      });
+
+      // Verify profile name was updated from Clerk username
+      const me = await Account.getMe().$jazz.ensureLoaded({
+        resolve: { profile: true },
+      });
+      expect(me.profile.name).toBe("Test User");
+
+      // Verify authSecretStorage is updated with provider "clerk"
+      const storedCredentials = await authSecretStorage.get();
+      expect(storedCredentials).toEqual({
+        accountID: "test-account-id",
+        accountSecret: "test-secret",
+        secretSeed: new Uint8Array([1, 2, 3]),
+        provider: "clerk",
+      });
+
+      expect(signInSpy).toHaveBeenCalled();
+      expect(logInSpy).not.toHaveBeenCalled();
+    });
   });
 
   describe("initializeAuth", () => {

package/src/tools/auth/clerk/tests/isClerkAuthStateEqual.test.ts

@@ -0,0 +1,124 @@
+import { describe, expect, it } from "vitest";
+import { isClerkAuthStateEqual } from "../types";
+
+describe("isClerkAuthStateEqual", () => {
+  const validCredentials = {
+    jazzAccountID: "account-123",
+    jazzAccountSecret: "secret-123",
+    jazzAccountSeed: [1, 2, 3],
+  };
+
+  const differentCredentials = {
+    jazzAccountID: "account-456",
+    jazzAccountSecret: "secret-456",
+    jazzAccountSeed: [4, 5, 6],
+  };
+
+  describe("both users null/undefined", () => {
+    it.each([
+      { previous: null, next: null, description: "both null" },
+      { previous: undefined, next: undefined, description: "both undefined" },
+      { previous: null, next: undefined, description: "null and undefined" },
+      { previous: undefined, next: null, description: "undefined and null" },
+    ])("returns true when $description", ({ previous, next }) => {
+      expect(isClerkAuthStateEqual(previous, next)).toBe(true);
+    });
+  });
+
+  describe("one user null, other exists", () => {
+    it.each([
+      {
+        previous: null,
+        next: { unsafeMetadata: validCredentials },
+        description: "previous null, next exists",
+      },
+      {
+        previous: { unsafeMetadata: validCredentials },
+        next: null,
+        description: "previous exists, next null",
+      },
+      {
+        previous: undefined,
+        next: { unsafeMetadata: validCredentials },
+        description: "previous undefined, next exists",
+      },
+      {
+        previous: { unsafeMetadata: validCredentials },
+        next: undefined,
+        description: "previous exists, next undefined",
+      },
+    ])("returns false when $description", ({ previous, next }) => {
+      expect(isClerkAuthStateEqual(previous, next)).toBe(false);
+    });
+  });
+
+  describe("same jazzAccountID", () => {
+    it("returns true when both users have the same jazzAccountID", () => {
+      const previous = { unsafeMetadata: validCredentials };
+      const next = {
+        unsafeMetadata: {
+          ...validCredentials,
+          jazzAccountSecret: "different-secret",
+        },
+      };
+      expect(isClerkAuthStateEqual(previous, next)).toBe(true);
+    });
+  });
+
+  describe("different jazzAccountID", () => {
+    it("returns false when users have different jazzAccountID", () => {
+      const previous = { unsafeMetadata: validCredentials };
+      const next = { unsafeMetadata: differentCredentials };
+      expect(isClerkAuthStateEqual(previous, next)).toBe(false);
+    });
+  });
+
+  describe("neither user has valid credentials", () => {
+    it.each([
+      {
+        previous: { unsafeMetadata: {} },
+        next: { unsafeMetadata: {} },
+        description: "both have empty metadata",
+      },
+      {
+        previous: { unsafeMetadata: { someOtherField: "value" } },
+        next: { unsafeMetadata: { anotherField: "value" } },
+        description: "both have non-credential metadata",
+      },
+      {
+        previous: { unsafeMetadata: { jazzAccountID: "123" } },
+        next: { unsafeMetadata: { jazzAccountSecret: "456" } },
+        description: "both have incomplete credentials",
+      },
+    ])("returns true when $description", ({ previous, next }) => {
+      expect(isClerkAuthStateEqual(previous, next)).toBe(true);
+    });
+  });
+
+  describe("one has credentials, other doesn't", () => {
+    it.each([
+      {
+        previous: { unsafeMetadata: validCredentials },
+        next: { unsafeMetadata: {} },
+        description: "previous has credentials, next empty",
+      },
+      {
+        previous: { unsafeMetadata: {} },
+        next: { unsafeMetadata: validCredentials },
+        description: "previous empty, next has credentials",
+      },
+      {
+        previous: { unsafeMetadata: validCredentials },
+        next: { unsafeMetadata: { jazzAccountID: "123" } },
+        description: "previous has credentials, next has incomplete",
+      },
+      {
+        previous: { unsafeMetadata: { jazzAccountSecret: "456" } },
+        next: { unsafeMetadata: validCredentials },
+        description: "previous has incomplete, next has credentials",
+      },
+    ])("returns false when $description", ({ previous, next }) => {
+      expect(isClerkAuthStateEqual(previous, next)).toBe(false);
+    });
+  });
+});

package/src/tools/auth/clerk/types.ts

@@ -36,21 +36,38 @@ export type ClerkCredentials = {
  * **Note**: It does not validate the credentials, only checks if the necessary fields are present in the metadata object.
  */
 export function isClerkCredentials(
-  data: NonNullable<MinimalClerkClient["user"]>["unsafeMetadata"] | undefined,
+  data:
+    | NonNullable<MinimalClerkClient["user"]>["unsafeMetadata"]
+    | null
+    | undefined,
 ): data is ClerkCredentials {
   return !!data && "jazzAccountID" in data && "jazzAccountSecret" in data;
 }
 
 export function isClerkAuthStateEqual(
-  previousUser: MinimalClerkClient["user"] | null | undefined,
-  newUser: MinimalClerkClient["user"] | null | undefined,
+  previousUser:
+    | Pick<NonNullable<MinimalClerkClient["user"]>, "unsafeMetadata">
+    | null
+    | undefined,
+  newUser:
+    | Pick<NonNullable<MinimalClerkClient["user"]>, "unsafeMetadata">
+    | null
+    | undefined,
 ) {
   if (Boolean(previousUser) !== Boolean(newUser)) {
     return false;
   }
 
-  const previousCredentials = isClerkCredentials(previousUser?.unsafeMetadata);
-  const newCredentials = isClerkCredentials(newUser?.unsafeMetadata);
+  const previousCredentials = isClerkCredentials(previousUser?.unsafeMetadata)
+    ? previousUser?.unsafeMetadata
+    : null;
+  const newCredentials = isClerkCredentials(newUser?.unsafeMetadata)
+    ? newUser?.unsafeMetadata
+    : null;
+
+  if (!previousCredentials || !newCredentials) {
+    return previousCredentials === newCredentials;
+  }
 
-  return previousCredentials === newCredentials;
+  return previousCredentials.jazzAccountID === newCredentials.jazzAccountID;
 }