jazz-tools 0.19.21 → 0.19.22

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> jazz-tools@0.19.21 build /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.22 build /home/runner/_work/jazz/jazz/packages/jazz-tools
 > tsup && pnpm types && pnpm build:svelte && pnpm build:better-auth-svelte
 
 CLI Building entry: {"index":"src/index.ts","testing":"src/testing.ts","tools/ssr":"src/tools/ssr/index.ts"}
@@ -107,124 +107,124 @@
 ESM Build start
 CLI Cleaning output folder
 ESM Build start
-ESM dist/worker/index.js           3.19 KB
-ESM dist/worker/edge-wasm.js       215.00 B
+ESM dist/tiptap/index.js     564.00 B
+ESM dist/tiptap/index.js.map 1.21 KB
+ESM ⚡️ Build success in 33ms
+ESM dist/worker/index.js           3.45 KB
 ESM dist/worker/napi-crypto.js     110.00 B
-ESM dist/worker/index.js.map       6.26 KB
-ESM dist/worker/edge-wasm.js.map   434.00 B
+ESM dist/worker/edge-wasm.js       215.00 B
+ESM dist/worker/index.js.map       6.97 KB
 ESM dist/worker/napi-crypto.js.map 162.00 B
-ESM ⚡️ Build success in 40ms
+ESM dist/worker/edge-wasm.js.map   434.00 B
+ESM ⚡️ Build success in 32ms
 ESM dist/better-auth/auth/client.js     4.54 KB
 ESM dist/better-auth/auth/server.js     8.40 KB
 ESM dist/better-auth/auth/react.js      799.00 B
 ESM dist/better-auth/auth/client.js.map 8.44 KB
-ESM dist/better-auth/auth/server.js.map 15.40 KB
 ESM dist/better-auth/auth/react.js.map  2.04 KB
-ESM ⚡️ Build success in 32ms
-ESM dist/tiptap/index.js     564.00 B
-ESM dist/tiptap/index.js.map 1.21 KB
-ESM ⚡️ Build success in 43ms
+ESM dist/better-auth/auth/server.js.map 15.40 KB
+ESM ⚡️ Build success in 30ms
 ESM dist/media/index.js              236.00 B
 ESM dist/media/index.browser.js      2.79 KB
-ESM dist/media/index.native.js       4.01 KB
+ESM dist/media/index.native.js       4.04 KB
 ESM dist/media/index.server.js       2.95 KB
-ESM dist/media/chunk-3LKBM3G3.js     6.69 KB
+ESM dist/media/chunk-IRL3KNPO.js     6.70 KB
 ESM dist/media/index.js.map          71.00 B
 ESM dist/media/index.browser.js.map  6.15 KB
 ESM dist/media/index.server.js.map   6.37 KB
-ESM dist/media/index.native.js.map   8.10 KB
-ESM dist/media/chunk-3LKBM3G3.js.map 16.99 KB
-ESM ⚡️ Build success in 39ms
+ESM dist/media/index.native.js.map   8.17 KB
+ESM dist/media/chunk-IRL3KNPO.js.map 17.00 KB
+ESM ⚡️ Build success in 44ms
 ESM dist/expo/index.js         4.68 KB
-ESM dist/expo/testing.js       112.00 B
 ESM dist/expo/crypto.js        153.00 B
 ESM dist/expo/polyfills.js     858.00 B
+ESM dist/expo/testing.js       112.00 B
 ESM dist/expo/index.js.map     10.23 KB
+ESM dist/expo/polyfills.js.map 1.61 KB
 ESM dist/expo/testing.js.map   168.00 B
 ESM dist/expo/crypto.js.map    189.00 B
-ESM dist/expo/polyfills.js.map 1.61 KB
-ESM ⚡️ Build success in 36ms
+ESM ⚡️ Build success in 47ms
 ESM dist/react-core/index.js              17.37 KB
 ESM dist/react-core/testing.js            1.22 KB
 ESM dist/react-core/chunk-7DYMJ74I.js     279.00 B
-ESM dist/react-core/testing.js.map        1.86 KB
 ESM dist/react-core/index.js.map          57.58 KB
+ESM dist/react-core/testing.js.map        1.86 KB
 ESM dist/react-core/chunk-7DYMJ74I.js.map 533.00 B
-ESM ⚡️ Build success in 55ms
+ESM ⚡️ Build success in 53ms
 ESM dist/prosemirror/index.js     77.76 KB
 ESM dist/prosemirror/index.js.map 307.20 KB
-ESM ⚡️ Build success in 57ms
+ESM ⚡️ Build success in 74ms
+ESM dist/better-auth/database-adapter/index.js     26.65 KB
+ESM dist/better-auth/database-adapter/index.js.map 58.27 KB
+ESM ⚡️ Build success in 63ms
 ESM dist/browser/index.js     16.26 KB
 ESM dist/browser/index.js.map 34.88 KB
-ESM ⚡️ Build success in 61ms
+ESM ⚡️ Build success in 77ms
 ESM dist/react/index.js       26.00 KB
 ESM dist/react/testing.js     122.00 B
 ESM dist/react/ssr.js         697.00 B
 ESM dist/react/testing.js.map 165.00 B
 ESM dist/react/ssr.js.map     1.11 KB
-ESM dist/react/index.js.map   55.46 KB
-ESM ⚡️ Build success in 54ms
-ESM dist/better-auth/database-adapter/index.js     26.65 KB
-ESM dist/better-auth/database-adapter/index.js.map 58.27 KB
-ESM ⚡️ Build success in 58ms
+ESM dist/react/index.js.map   55.47 KB
+ESM ⚡️ Build success in 65ms
 ESM dist/react-native-core/index.js               34.14 KB
-ESM dist/react-native-core/crypto.js              2.61 KB
 ESM dist/react-native-core/testing.js             119.00 B
+ESM dist/react-native-core/crypto.js              2.61 KB
 ESM dist/react-native-core/chunk-DGUM43GV.js      432.00 B
 ESM dist/react-native-core/crypto/RNCrypto.js     120.00 B
-ESM dist/react-native-core/index.js.map           69.24 KB
-ESM dist/react-native-core/crypto.js.map          5.26 KB
 ESM dist/react-native-core/testing.js.map         175.00 B
-ESM dist/react-native-core/chunk-DGUM43GV.js.map  71.00 B
+ESM dist/react-native-core/crypto.js.map          5.26 KB
 ESM dist/react-native-core/crypto/RNCrypto.js.map 178.00 B
+ESM dist/react-native-core/chunk-DGUM43GV.js.map  71.00 B
+ESM dist/react-native-core/index.js.map           69.24 KB
 ESM ⚡️ Build success in 71ms
 ESM dist/react-native/index.js              36.68 KB
 ESM dist/react-native/testing.js            120.00 B
-ESM dist/react-native/chunk-DGUM43GV.js     432.00 B
 ESM dist/react-native/crypto.js             192.00 B
+ESM dist/react-native/chunk-DGUM43GV.js     432.00 B
 ESM dist/react-native/polyfills.js          858.00 B
 ESM dist/react-native/index.js.map          74.79 KB
-ESM dist/react-native/testing.js.map        176.00 B
 ESM dist/react-native/chunk-DGUM43GV.js.map 71.00 B
-ESM dist/react-native/crypto.js.map         199.00 B
+ESM dist/react-native/testing.js.map        176.00 B
 ESM dist/react-native/polyfills.js.map      1.61 KB
-ESM ⚡️ Build success in 77ms
+ESM dist/react-native/crypto.js.map         199.00 B
+ESM ⚡️ Build success in 81ms
 ESM dist/inspector/index.js              6.29 KB
 ESM dist/inspector/standalone.js         12.61 KB
 ESM dist/inspector/chunk-YQNK5Y7B.js     127.21 KB
 ESM dist/inspector/index.js.map          9.65 KB
 ESM dist/inspector/standalone.js.map     20.11 KB
 ESM dist/inspector/chunk-YQNK5Y7B.js.map 221.30 KB
-ESM ⚡️ Build success in 97ms
-ESM dist/index.js              30.81 KB
+ESM ⚡️ Build success in 98ms
 ESM dist/testing.js            8.56 KB
-ESM dist/chunk-QCTQH5RS.js     228.88 KB
-ESM dist/tools/ssr.js          156.00 B
 ESM dist/chunk-M2HGBOXS.js     694.00 B
+ESM dist/tools/ssr.js          156.00 B
 ESM dist/chunk-PZ5AY32C.js     233.00 B
-ESM dist/index.js.map          62.38 KB
+ESM dist/index.js              32.14 KB
+ESM dist/chunk-QCTQH5RS.js     228.88 KB
 ESM dist/testing.js.map        16.21 KB
-ESM dist/tools/ssr.js.map      71.00 B
 ESM dist/chunk-M2HGBOXS.js.map 1.10 KB
 ESM dist/chunk-PZ5AY32C.js.map 71.00 B
+ESM dist/tools/ssr.js.map      71.00 B
+ESM dist/index.js.map          65.34 KB
 ESM dist/chunk-QCTQH5RS.js.map 536.59 KB
-ESM ⚡️ Build success in 108ms
+ESM ⚡️ Build success in 140ms
 ESM dist/inspector/register-custom-element.js     218.00 B
 ESM dist/inspector/register-custom-element.js.map 314.00 B
 ESM dist/inspector/custom-element-KYV64IOC.js     1.60 MB
 ESM dist/inspector/custom-element-KYV64IOC.js.map 2.47 MB
-ESM ⚡️ Build success in 141ms
+ESM ⚡️ Build success in 151ms
 
-> jazz-tools@0.19.21 types /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.22 types /home/runner/_work/jazz/jazz/packages/jazz-tools
 > tsc --outDir dist
 
 
-> jazz-tools@0.19.21 build:svelte /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.22 build:svelte /home/runner/_work/jazz/jazz/packages/jazz-tools
 > rm -rf dist/svelte && svelte-package -i src/svelte -o dist/svelte --tsconfig tsconfig.svelte.json
 
 src/svelte -> dist/svelte
 
-> jazz-tools@0.19.21 build:better-auth-svelte /home/runner/_work/jazz/jazz/packages/jazz-tools
+> jazz-tools@0.19.22 build:better-auth-svelte /home/runner/_work/jazz/jazz/packages/jazz-tools
 > mkdir -p dist/better-auth/auth && svelte-package -i src/better-auth/auth -o dist/better-auth/auth-temp --tsconfig tsconfig.svelte.json && cp dist/better-auth/auth-temp/svelte.svelte dist/better-auth/auth/svelte.svelte && cp dist/better-auth/auth-temp/svelte.svelte.d.ts dist/better-auth/auth/svelte.d.ts && rm -rf dist/better-auth/auth-temp
 
 src/better-auth/auth -> dist/better-auth/auth-temp

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # jazz-tools
 
+## 0.19.22
+
+### Patch Changes
+
+- 89d8798: Adds a 512 variant for progressive image loading.
+- 30b5339: Fix an issue when generating image placeholders from clients using Expo Image Manipulator
+- Updated dependencies [3b70482]
+- Updated dependencies [6078ea5]
+  - cojson@0.19.22
+  - cojson-storage-indexeddb@0.19.22
+  - cojson-transport-ws@0.19.22
+
 ## 0.19.19
 
 ### Patch Changes
@@ -465,6 +477,7 @@
 ### Patch Changes
 
 - f2f478a: Add connection status API for React and Svelte
+
   - **React**: Added `useSyncConnectionStatus()` hook that returns the current connection status to the Jazz sync server
   - **Svelte**: Added `SyncConnectionStatus` class that provides reactive connection status monitoring
 
@@ -500,6 +513,7 @@
 ### Patch Changes
 
 - a584ab3: Add WasmCrypto support for Cloudflare Workers and edge runtimes by importing `jazz-tools/load-edge-wasm`.
+
   - Enable WasmCrypto functionality by initializing the WebAssembly environment with the import: `import "jazz-tools/load-edge-wasm"` in edge runtimes.
   - Guarantee compatibility across Cloudflare Workers and other edge runtime environments.
 
@@ -883,6 +897,7 @@
 - 3cd1586: Makes the key rotation not fail when child groups are unavailable or their readkey is not accessible.
 
   Also changes the Group.removeMember method to not return a Promise, because:
+
   - All the locally available child groups are rotated immediately
   - All the remote child groups are rotated in background, but since they are not locally available the user won't need the new key immediately
 

package/dist/index.js

@@ -23,6 +23,7 @@ import {
   Ref,
   SchemaUnion,
   SubscriptionScope,
+  activeAccountContext,
   assertLoaded,
   captureStack,
   coExport_exports,
@@ -981,6 +982,39 @@ import {
   LogLevel
 } from "cojson";
 
+// src/worker/JazzMessageChannel.ts
+import { CojsonMessageChannel } from "cojson";
+import { AnonymousJazzAgent as AnonymousJazzAgent2 } from "jazz-tools";
+var JazzMessageChannel = class {
+  /**
+   * Expose a Jazz connection to a target.
+   * This is the host-side API, typically called from the main thread.
+   *
+   * @param target - Any object with a postMessage method (Worker, Window, etc.)
+   * @param opts - Configuration options including the account to use
+   * @returns A promise that resolves once the connection is established
+   */
+  static async expose(target, opts = {}) {
+    const { loadAs, ...cojsonOpts } = opts;
+    const accountOrAgent = loadAs ?? activeAccountContext.maybeGet();
+    if (!accountOrAgent) {
+      throw new Error(
+        "No account provided and no active account context available"
+      );
+    }
+    const node = accountOrAgent instanceof AnonymousJazzAgent2 ? accountOrAgent.node : accountOrAgent.$jazz.localNode;
+    const peer = await CojsonMessageChannel.expose(target, cojsonOpts);
+    node.syncManager.addPeer(peer);
+  }
+  /**
+   * Accept an incoming Jazz connection.
+   * Same as cojson CojsonMessageChannel.waitForConnection().
+   */
+  static waitForConnection(opts) {
+    return CojsonMessageChannel.waitForConnection(opts);
+  }
+};
+
 // src/tools/index.ts
 import {
   cojsonInternals as cojsonInternals4,
@@ -1034,6 +1068,7 @@ export {
   createJazzContextFromExistingCredentials,
   createSSRJazzAgent,
   createUnloadedCoValue,
+  JazzMessageChannel as experimental_JazzMessageChannel,
   experimental_defineRequest,
   exportCoValue,
   generateAuthToken,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/tools/auth/clerk/index.ts","../src/tools/auth/clerk/getClerkUsername.ts","../src/tools/auth/clerk/types.ts","../src/tools/auth/DemoAuth.ts","../src/tools/auth/PassphraseAuth.ts","../src/tools/implementation/invites.ts","../src/tools/coValues/request.ts","../src/tools/config.ts","../src/tools/index.ts"],"sourcesContent":["import {\n  Account,\n  AuthCredentials,\n  AuthSecretStorage,\n  AuthenticateAccountFunction,\n} from \"jazz-tools\";\nimport { getClerkUsername } from \"./getClerkUsername.js\";\nimport {\n  ClerkCredentials,\n  ClerkEventSchema,\n  ClerkUser,\n  MinimalClerkClient,\n  isClerkAuthStateEqual,\n  isClerkCredentials,\n} from \"./types.js\";\n\nexport type { MinimalClerkClient };\nexport { isClerkCredentials };\n\nexport class JazzClerkAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private logOut: () => Promise<void> | void,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  /**\n   * Loads the Jazz auth data from the Clerk user and sets it in the auth secret storage.\n   */\n  static loadClerkAuthData(\n    credentials: ClerkCredentials,\n    storage: AuthSecretStorage,\n  ) {\n    return storage.set({\n      accountID: credentials.jazzAccountID,\n      accountSecret: credentials.jazzAccountSecret,\n      secretSeed: credentials.jazzAccountSeed\n        ? Uint8Array.from(credentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    });\n  }\n\n  static async initializeAuth(clerk: MinimalClerkClient) {\n    const secretStorage = new AuthSecretStorage();\n\n    if (!isClerkCredentials(clerk.user?.unsafeMetadata)) {\n      return;\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      clerk.user.unsafeMetadata,\n      secretStorage,\n    );\n  }\n\n  private isFirstCall = true;\n  private previousUser: Pick<ClerkUser, \"unsafeMetadata\"> | null = null;\n\n  registerListener(clerkClient: MinimalClerkClient) {\n    this.previousUser = ClerkEventSchema.parse(clerkClient).user ?? null;\n\n    // Need to use addListener because the clerk user object is not updated when the user logs in\n    return clerkClient.addListener((event) => {\n      const parsedEvent = ClerkEventSchema.safeParse(event);\n\n      if (!parsedEvent.success) {\n        console.error(\"Invalid Clerk event\", parsedEvent.error);\n        return;\n      }\n\n      const user = parsedEvent.data.user ?? null;\n\n      if (!isClerkAuthStateEqual(this.previousUser, user) || this.isFirstCall) {\n        this.previousUser = user;\n        this.onClerkUserChange(user);\n        this.isFirstCall = false;\n      }\n    });\n  }\n\n  onClerkUserChange = async (clerkUser: ClerkUser | null | undefined) => {\n    const isAuthenticated = this.authSecretStorage.isAuthenticated;\n\n    // LogOut is driven by Clerk. The framework adapters will need to pass `logOutReplacement` to the `JazzProvider`\n    // to make the logOut work correctly.\n    if (!clerkUser) {\n      if (isAuthenticated) {\n        this.authSecretStorage.clear();\n        await this.logOut();\n      }\n      return;\n    }\n\n    if (isAuthenticated) return;\n\n    if (!clerkUser.unsafeMetadata.jazzAccountID) {\n      await this.signIn(clerkUser);\n    } else {\n      await this.logIn(clerkUser);\n    }\n  };\n\n  logIn = async (clerkUser: ClerkUser) => {\n    const clerkCredentials = clerkUser.unsafeMetadata;\n    if (!isClerkCredentials(clerkCredentials)) {\n      throw new Error(\"No credentials found on Clerk\");\n    }\n\n    const credentials = {\n      accountID: clerkCredentials.jazzAccountID,\n      accountSecret: clerkCredentials.jazzAccountSecret,\n      secretSeed: clerkCredentials.jazzAccountSeed\n        ? Uint8Array.from(clerkCredentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    } satisfies AuthCredentials;\n\n    await this.authenticate(credentials);\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed: clerkCredentials.jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n\n  signIn = async (clerkUser: ClerkUser) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const jazzAccountSeed = credentials.secretSeed\n      ? Array.from(credentials.secretSeed)\n      : undefined;\n\n    const clerkCredentials = {\n      jazzAccountID: credentials.accountID,\n      jazzAccountSecret: credentials.accountSecret,\n      jazzAccountSeed,\n    };\n    // user.update will cause the Clerk user change listener to fire; updating this.previousUser beforehand\n    // ensures the listener sees the new credentials and does not trigger an unnecessary logIn operation\n    this.previousUser = { unsafeMetadata: clerkCredentials };\n\n    await clerkUser.update({\n      unsafeMetadata: clerkCredentials,\n    });\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    const username = getClerkUsername(clerkUser);\n\n    if (username) {\n      currentAccount.profile.$jazz.set(\"name\", username);\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n}\n\n// eslint-disable-next-line @typescript-eslint/no-namespace\nexport namespace BrowserClerkAuth {\n  export interface Driver {\n    onError: (error: string | Error) => void;\n  }\n}\n","import type { ClerkUser } from \"./types.js\";\n\nexport function getClerkUsername(user: ClerkUser) {\n  if (user.fullName) {\n    return user.fullName;\n  }\n\n  if (user.firstName) {\n    if (user.lastName) {\n      return `${user.firstName} ${user.lastName}`;\n    }\n\n    return user.firstName;\n  }\n\n  if (user.username) {\n    return user.username;\n  }\n\n  if (user.primaryEmailAddress?.emailAddress) {\n    const emailUsername = user.primaryEmailAddress.emailAddress.split(\"@\")[0];\n\n    if (emailUsername) {\n      return emailUsername;\n    }\n  }\n\n  return user.id;\n}\n","import { type AgentSecret } from \"cojson\";\nimport { z } from \"zod/v4\";\n\nconst ClerkJazzCredentialsSchema = z.object({\n  jazzAccountID: z.string(),\n  jazzAccountSecret: z.string(),\n  jazzAccountSeed: z.array(z.number()).optional(),\n});\n\nconst ClerkUserSchema = z.object({\n  fullName: z.string().nullish(),\n  username: z.string().nullish(),\n  firstName: z.string().nullish(),\n  lastName: z.string().nullish(),\n  id: z.string().optional(),\n  primaryEmailAddress: z\n    .object({\n      emailAddress: z.string().nullable(),\n    })\n    .nullish(),\n  unsafeMetadata: ClerkJazzCredentialsSchema.or(z.object({})),\n  update: z.function({\n    input: [\n      z.object({\n        unsafeMetadata: ClerkJazzCredentialsSchema,\n      }),\n    ],\n    output: z.promise(z.unknown()),\n  }),\n});\n\nexport const ClerkEventSchema = z.object({\n  user: ClerkUserSchema.nullish(),\n});\nexport type ClerkEventSchema = z.infer<typeof ClerkEventSchema>;\n\nexport type ClerkUser = z.infer<typeof ClerkUserSchema>;\n\n// Need to provide a permissive type externally to accept\ntype PermissiveClerkUser = Omit<ClerkUser, \"unsafeMetadata\" | \"update\"> & {\n  unsafeMetadata: Record<string, unknown>;\n  update: (args: {\n    unsafeMetadata: Record<string, unknown>;\n  }) => Promise<unknown>;\n};\n\nexport type MinimalClerkClient = {\n  user: PermissiveClerkUser | null | undefined;\n  signOut: () => Promise<void>;\n  addListener: (listener: (data: unknown) => void) => (() => void) | void;\n};\n\nexport type ClerkCredentials = {\n  jazzAccountID: string;\n  jazzAccountSecret: AgentSecret;\n  jazzAccountSeed?: number[];\n};\n\n/**\n * Checks if the Clerk user metadata contains the necessary credentials for Jazz auth.\n * **Note**: It does not validate the credentials, only checks if the necessary fields are present in the metadata object.\n */\nexport function isClerkCredentials(\n  data: Record<string, unknown> | undefined,\n): data is ClerkCredentials {\n  return !!data && \"jazzAccountID\" in data && \"jazzAccountSecret\" in data;\n}\n\ntype ClerkUserWithUnsafeMetadata =\n  | Pick<ClerkUser, \"unsafeMetadata\">\n  | null\n  | undefined;\n\nexport function isClerkAuthStateEqual(\n  previousUser: ClerkUserWithUnsafeMetadata,\n  newUser: ClerkUserWithUnsafeMetadata,\n) {\n  if (Boolean(previousUser) !== Boolean(newUser)) {\n    return false;\n  }\n\n  const previousCredentials = isClerkCredentials(previousUser?.unsafeMetadata)\n    ? previousUser?.unsafeMetadata\n    : null;\n  const newCredentials = isClerkCredentials(newUser?.unsafeMetadata)\n    ? newUser?.unsafeMetadata\n    : null;\n\n  if (!previousCredentials || !newCredentials) {\n    return previousCredentials === newCredentials;\n  }\n\n  return previousCredentials.jazzAccountID === newCredentials.jazzAccountID;\n}\n","import { AgentSecret } from \"cojson\";\nimport { Account, ID } from \"../internal.js\";\nimport { AuthenticateAccountFunction } from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\nimport { KvStore, KvStoreContext } from \"./KvStoreContext.js\";\n\ntype StorageData = {\n  accountID: ID<Account>;\n  accountSecret: AgentSecret;\n  secretSeed?: number[];\n};\n\n/**\n * `DemoAuth` provides a `JazzAuth` object for demo authentication.\n *\n * Demo authentication is useful for quickly testing your app, as it allows you to create new accounts and log in as existing ones.\n *\n * ```\n * import { DemoAuth } from \"jazz-tools\";\n *\n * const auth = new DemoAuth(jazzContext.authenticate, new AuthSecretStorage());\n * ```\n *\n * @category Auth Providers\n */\nexport class DemoAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  logIn = async (username: string) => {\n    const existingUsers = await this.getExisitingUsersWithData();\n    const storageData = existingUsers[username];\n\n    if (!storageData?.accountID) {\n      throw new Error(\"User not found\");\n    }\n\n    await this.authenticate({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n      secretSeed: storageData.secretSeed\n        ? new Uint8Array(storageData.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n  };\n\n  signUp = async (username: string) => {\n    const existingUsers = await this.getExistingUsers();\n    if (existingUsers.includes(username)) {\n      throw new Error(\"User already registered\");\n    }\n\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    currentAccount.profile.$jazz.set(\"name\", username);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? new Uint8Array(credentials.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n\n    await this.addToExistingUsers(username, {\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? Array.from(credentials.secretSeed)\n        : undefined,\n    });\n  };\n\n  private async addToExistingUsers(username: string, data: StorageData) {\n    const existingUsers = await this.getExisitingUsersWithData();\n\n    if (existingUsers[username]) {\n      return;\n    }\n\n    existingUsers[username] = data;\n\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n  }\n\n  private async getExisitingUsersWithData() {\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await migrateExistingUsers(kvStore);\n\n    const existingUsers = await kvStore.get(\"demo-auth-users\");\n    return existingUsers ? JSON.parse(existingUsers) : {};\n  }\n\n  getExistingUsers = async () => {\n    return Object.keys(await this.getExisitingUsersWithData());\n  };\n}\n\nexport function encodeUsername(username: string) {\n  return btoa(username)\n    .replace(/=/g, \"-\")\n    .replace(/\\+/g, \"_\")\n    .replace(/\\//g, \".\");\n}\n\nasync function getStorageVersion(kvStore: KvStore) {\n  try {\n    const version = await kvStore.get(\"demo-auth-storage-version\");\n    return version ? parseInt(version) : 1;\n  } catch (error) {\n    return 1;\n  }\n}\n\nasync function setStorageVersion(kvStore: KvStore, version: number) {\n  await kvStore.set(\"demo-auth-storage-version\", version.toString());\n}\n\nasync function getExistingUsersList(kvStore: KvStore) {\n  const existingUsers = await kvStore.get(\"demo-auth-existing-users\");\n  return existingUsers ? existingUsers.split(\",\") : [];\n}\n\n/**\n * Migrates existing users keys to work with any storage.\n */\nasync function migrateExistingUsers(kvStore: KvStore) {\n  if ((await getStorageVersion(kvStore)) < 2) {\n    const existingUsers = await getExistingUsersList(kvStore);\n\n    for (const username of existingUsers) {\n      const legacyKey = `demo-auth-existing-users-${username}`;\n      const storageData = await kvStore.get(legacyKey);\n      if (storageData) {\n        await kvStore.set(\n          `demo-auth-existing-users-${encodeUsername(username)}`,\n          storageData,\n        );\n        await kvStore.delete(legacyKey);\n      }\n    }\n\n    await setStorageVersion(kvStore, 2);\n  }\n\n  if ((await getStorageVersion(kvStore)) < 3) {\n    const existingUsersList = await getExistingUsersList(kvStore);\n\n    const existingUsers: Record<string, StorageData> = {};\n    const keysToDelete: string[] = [\"demo-auth-existing-users\"];\n\n    for (const username of existingUsersList) {\n      const key = `demo-auth-existing-users-${encodeUsername(username)}`;\n      const storageData = await kvStore.get(key);\n      if (storageData) {\n        existingUsers[username] = JSON.parse(storageData);\n        keysToDelete.push(key);\n      }\n    }\n\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n\n    for (const key of keysToDelete) {\n      await kvStore.delete(key);\n    }\n\n    await setStorageVersion(kvStore, 3);\n  }\n}\n","import * as bip39 from \"@scure/bip39\";\nimport { entropyToMnemonic } from \"@scure/bip39\";\nimport { CryptoProvider, cojsonInternals } from \"cojson\";\nimport type { ID } from \"../internal.js\";\nimport { Account } from \"../internal.js\";\nimport type {\n  AuthenticateAccountFunction,\n  RegisterAccountFunction,\n} from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\n\n/**\n * `PassphraseAuth` provides a `JazzAuth` object for passphrase authentication.\n *\n * ```ts\n * import { PassphraseAuth } from \"jazz-tools\";\n *\n * const auth = new PassphraseAuth(crypto, jazzContext.authenticate, new AuthSecretStorage(), wordlist);\n * ```\n *\n * @category Auth Providers\n */\nexport class PassphraseAuth {\n  passphrase: string = \"\";\n\n  constructor(\n    private crypto: CryptoProvider,\n    private authenticate: AuthenticateAccountFunction,\n    private register: RegisterAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n    public wordlist: string[],\n  ) {}\n\n  logIn = async (passphrase: string) => {\n    const { crypto, authenticate } = this;\n\n    let secretSeed;\n\n    try {\n      secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    } catch (e) {\n      throw new Error(\"Invalid passphrase\");\n    }\n\n    const accountSecret = crypto.agentSecretFromSecretSeed(secretSeed);\n\n    const accountID = cojsonInternals.idforHeader(\n      cojsonInternals.accountHeaderForInitialAgentSecret(accountSecret, crypto),\n      crypto,\n    ) as ID<Account>;\n\n    await authenticate({\n      accountID,\n      accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  signUp = async (name?: string) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const passphrase = entropyToMnemonic(credentials.secretSeed, this.wordlist);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      secretSeed: credentials.secretSeed,\n      accountSecret: credentials.accountSecret,\n      provider: \"passphrase\",\n    });\n\n    if (name?.trim()) {\n      const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n        resolve: {\n          profile: true,\n        },\n      });\n\n      currentAccount.profile.$jazz.set(\"name\", name);\n    }\n\n    return passphrase;\n  };\n\n  registerNewAccount = async (passphrase: string, name: string) => {\n    const secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    const accountSecret = this.crypto.agentSecretFromSecretSeed(secretSeed);\n    const accountID = await this.register(accountSecret, { name });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    return accountID;\n  };\n\n  getCurrentAccountPassphrase = async () => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    return entropyToMnemonic(credentials.secretSeed, this.wordlist);\n  };\n\n  generateRandomPassphrase = () => {\n    return entropyToMnemonic(this.crypto.newRandomSecretSeed(), this.wordlist);\n  };\n\n  loadCurrentAccountPassphrase = async () => {\n    const passphrase = await this.getCurrentAccountPassphrase();\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  listeners = new Set<() => void>();\n  subscribe = (callback: () => void) => {\n    this.listeners.add(callback);\n\n    return () => {\n      this.listeners.delete(callback);\n    };\n  };\n\n  notify() {\n    for (const listener of this.listeners) {\n      listener();\n    }\n  }\n}\n","import { AccountRole, type InviteSecret, cojsonInternals } from \"cojson\";\nimport { Account } from \"../coValues/account.js\";\nimport type { CoValue, CoValueClassOrSchema } from \"../internal.js\";\n\n/** @category Invite Links */\nexport function createInviteLink<C extends CoValue>(\n  value: C,\n  role: AccountRole,\n  baseURL: string,\n  valueHint?: string,\n): string {\n  const coValueCore = value.$jazz.raw.core;\n  let currentCoValue = coValueCore;\n\n  while (currentCoValue.verified.header.ruleset.type === \"ownedByGroup\") {\n    currentCoValue = currentCoValue.getGroup().core;\n  }\n\n  const { ruleset, meta } = currentCoValue.verified.header;\n\n  if (ruleset.type !== \"group\" || meta?.type === \"account\") {\n    throw new Error(\"Can't create invite link for object without group\");\n  }\n\n  const group = cojsonInternals.expectGroup(currentCoValue.getCurrentContent());\n  const inviteSecret = group.createInvite(role);\n\n  return `${baseURL}#/invite/${valueHint ? valueHint + \"/\" : \"\"}${\n    value.$jazz.id\n  }/${inviteSecret}`;\n}\n\n/** @category Invite Links */\nexport function parseInviteLink(inviteURL: string):\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined {\n  const url = new URL(inviteURL);\n  const parts = url.hash.split(\"/\");\n\n  let valueHint: string | undefined;\n  let valueID: string | undefined;\n  let inviteSecret: InviteSecret | undefined;\n\n  if (parts[0] === \"#\" && parts[1] === \"invite\") {\n    if (parts.length === 5) {\n      valueHint = parts[2];\n      valueID = parts[3];\n      inviteSecret = parts[4] as InviteSecret;\n    } else if (parts.length === 4) {\n      valueID = parts[2];\n      inviteSecret = parts[3] as InviteSecret;\n    }\n\n    if (!valueID || !inviteSecret) {\n      return undefined;\n    }\n    return { valueID, inviteSecret, valueHint };\n  }\n}\n\n/** @category Invite Links */\nexport function consumeInviteLink<S extends CoValueClassOrSchema>({\n  inviteURL,\n  as = Account.getMe(),\n  forValueHint,\n  invitedObjectSchema,\n}: {\n  inviteURL: string;\n  as?: Account;\n  forValueHint?: string;\n  invitedObjectSchema: S;\n}): Promise<\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined\n> {\n  return new Promise((resolve, reject) => {\n    const result = parseInviteLink(inviteURL);\n\n    if (result && result.valueHint === forValueHint) {\n      as.acceptInvite(result.valueID, result.inviteSecret, invitedObjectSchema)\n        .then(() => {\n          resolve(result);\n        })\n        .catch(reject);\n    } else {\n      resolve(undefined);\n    }\n  });\n}\n","import {\n  CoValueCore,\n  CojsonInternalTypes,\n  CryptoProvider,\n  RawAccount,\n  RawCoMap,\n  cojsonInternals,\n} from \"cojson\";\nimport z from \"zod/v4\";\nimport {\n  AnyZodOrCoValueSchema,\n  CoMap,\n  CoMapSchema,\n  CoMapSchemaInit,\n  CoValueClass,\n  CoreCoMapSchema,\n  Group,\n  Loaded,\n  ResolveQuery,\n  ResolveQueryStrict,\n  Simplify,\n  coMapDefiner,\n  coValueClassFromCoValueClassOrSchema,\n  exportCoValue,\n  importContentPieces,\n  loadCoValue,\n} from \"../internal.js\";\nimport { isCoValueId } from \"../lib/utils.js\";\nimport { Account } from \"./account.js\";\n\ntype MessageShape = Record<string, AnyZodOrCoValueSchema>;\n\ntype RequestSchemaDefinition<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>> = true,\n> =\n  | S\n  | {\n      schema: S;\n      resolve?: R;\n    };\n\n/**\n * Configuration options for defining HTTP request/response schemas in Jazz.\n *\n * This interface defines the structure for creating typed HTTP routes with\n * request and response validation using CoMap schemas.\n *\n * @template RequestShape - The shape of the request message schema (must extend MessageShape)\n * @template RequestResolve - The resolve query type for the request CoMap schema\n * @template ResponseShape - The shape of the response message schema (must extend MessageShape)\n * @template ResponseResolve - The resolve query type for the response CoMap schema\n */\ninterface RequestOptions<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n> {\n  /**\n   * The URL endpoint for the HTTP route.\n   * This is used by the client to send requests to the server.\n   */\n  url: string;\n\n  /**\n   * The id of the worker Account or Group.\n   */\n  workerId: string;\n\n  /**\n   * Schema definition for the request payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for incoming requests.\n   */\n  request: RequestSchemaDefinition<\n    RequestShape,\n    ResolveQueryStrict<CoMapSchema<RequestShape>, RequestResolve>\n  >;\n\n  /**\n   * Schema definition for the response payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for outgoing responses.\n   */\n  response: RequestSchemaDefinition<\n    ResponseShape,\n    ResolveQueryStrict<CoMapSchema<ResponseShape>, ResponseResolve>\n  >;\n}\n\ntype AsNullablePayload<T extends MessageShape> = T extends Record<string, never>\n  ? undefined\n  : never;\ntype MessageValuePayload<T extends MessageShape> =\n  | Simplify<CoMapSchemaInit<T>>\n  | AsNullablePayload<T>;\n\nfunction createMessageEnvelope<S extends MessageShape>(\n  schema: CoreCoMapSchema,\n  value: MessageValuePayload<S>,\n  owner: Account,\n  sharedWith: Account | Group,\n  type: \"request\" | \"response\",\n): Loaded<CoMapSchema<S>> {\n  const group = Group.create({ owner });\n\n  if (type === \"request\") {\n    group.addMember(sharedWith, \"writer\");\n  } else {\n    group.addMember(sharedWith, \"reader\");\n  }\n\n  // @ts-expect-error - CoreCoMapSchema doesn't have static methods\n  return schema.create(value ?? {}, group);\n}\n\n/**\n * Function that exports the input CoValue in a serializable format and prepares the information\n * required for the other side to safely verify the identity of the sender.\n */\nasync function serializeMessagePayload({\n  type,\n  schema,\n  resolve,\n  value,\n  owner,\n  target,\n}: {\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  type: \"request\" | \"response\";\n  schema: CoreCoMapSchema;\n  resolve: any;\n  value: any;\n  owner: Account;\n  target: Account | Group;\n}) {\n  const me = owner ?? Account.getMe();\n  const node = me.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerID = agent.currentSignerID();\n  const signerSecret = agent.currentSignerSecret();\n\n  const envelope = createMessageEnvelope(schema, value, me, target, type);\n\n  const contentPieces =\n    (await exportCoValue(schema, envelope.$jazz.id, {\n      resolve,\n      loadAs: me,\n      bestEffortResolution: true,\n    })) ?? [];\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    signerID,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return {\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    authToken,\n    signerID,\n  };\n}\n\nconst coIdSchema = z.custom<`co_z${string}`>(isCoValueId);\nconst signatureSchema = z.custom<`signature_z${string}`>(\n  (value) => typeof value === \"string\" && value.startsWith(\"signature_z\"),\n);\n\nconst requestSchema = z.object({\n  contentPieces: z.array(z.json()),\n  id: coIdSchema,\n  createdAt: z.number(),\n  authToken: signatureSchema,\n  signerID: z.custom<`signer_z${string}`>(\n    (value) => typeof value === \"string\" && value.startsWith(\"signer_z\"),\n  ),\n});\n\n/**\n * Function that parses the message payload, verifies the identity of the sender and loads the data.\n *\n * @returns The data from the message.\n */\nasync function handleMessagePayload({\n  type,\n  schema,\n  resolve,\n  request,\n  loadAs,\n}: {\n  type: \"request\" | \"response\";\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  schema: CoreCoMapSchema;\n  resolve: any;\n  request: unknown;\n  loadAs: Account;\n}) {\n  const node = loadAs.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const requestParsed = requestSchema.safeParse(request);\n\n  if (!requestParsed.success) {\n    throw new JazzRequestError(\n      \"Request payload is not valid\",\n      400,\n      requestParsed.error,\n    );\n  }\n\n  const requestData = requestParsed.data;\n\n  if (type === \"request\") {\n    const core = await node.loadCoValueCore(requestData.id, undefined, true);\n\n    // Check if the message has already been handled to prevent replay attacks\n    if (core.isAvailable()) {\n      const content = core.getCurrentContent() as RawCoMap;\n\n      if (content.get(\"$handled\") === loadAs.$jazz.id) {\n        throw new JazzRequestError(\"Request payload is already handled\", 400);\n      }\n    }\n\n    // Check if the message is expired as extra protection\n    if (requestData.createdAt + 1000 * 60 < Date.now()) {\n      throw new JazzRequestError(\"Authentication token is expired\", 401);\n    }\n  }\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    contentPieces: requestData.contentPieces,\n    id: requestData.id,\n    createdAt: requestData.createdAt,\n    signerID: requestData.signerID,\n  });\n\n  if (\n    !safeVerifySignature(\n      crypto,\n      signPayload,\n      requestData.signerID,\n      requestData.authToken,\n    )\n  ) {\n    throw new JazzRequestError(\"Invalid signature\", 401);\n  }\n\n  let contentPieces =\n    requestData.contentPieces as CojsonInternalTypes.NewContentMessage[];\n\n  if (type === \"request\") {\n    const coValueContent = contentPieces.find(\n      (piece) => piece.id === requestData.id,\n    );\n\n    if (coValueContent && coValueContent.header) {\n      const validValues = cojsonInternals.getDependedOnCoValues(\n        coValueContent.header,\n        coValueContent,\n      );\n      validValues.add(requestData.id);\n      contentPieces = contentPieces.filter((piece) =>\n        validValues.has(piece.id),\n      );\n    } else {\n      contentPieces = [];\n    }\n  }\n\n  importContentPieces(contentPieces, loadAs);\n\n  const coValue = await node.loadCoValueCore(requestData.id);\n  const accountId = getCoValueCreatorAccountId(coValue);\n\n  const madeBy = await Account.load(accountId, {\n    loadAs,\n  });\n\n  if (!madeBy.$isLoaded) {\n    throw new JazzRequestError(\"Creator account not found\", 400);\n  }\n\n  const coSchema = coValueClassFromCoValueClassOrSchema(\n    schema,\n  ) as CoValueClass<CoMap>;\n  const value = await loadCoValue<CoMap, true>(coSchema, requestData.id, {\n    resolve,\n    loadAs,\n  });\n\n  if (!value.$isLoaded) {\n    throw new JazzRequestError(\"Value not found\", 400);\n  }\n\n  if (type === \"request\") {\n    value.$jazz.raw.set(\"$handled\", loadAs.$jazz.id);\n  }\n\n  return {\n    value: value as unknown,\n    madeBy,\n  };\n}\n\nfunction parseSchemaAndResolve<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>>,\n>(options: RequestSchemaDefinition<S, R>) {\n  if (\"schema\" in options) {\n    return {\n      // Using a type cast to reduce the type complexity\n      schema: coMapDefiner(options.schema) as CoreCoMapSchema,\n      resolve: options.resolve as any,\n    };\n  }\n\n  return {\n    schema: coMapDefiner(options) as CoreCoMapSchema,\n    resolve: true as any,\n  };\n}\n\nexport class HttpRoute<\n  RequestShape extends MessageShape = z.core.$ZodLooseShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>> = any,\n  ResponseShape extends MessageShape = z.core.$ZodLooseShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>> = any,\n> {\n  private requestDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private responseDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private url: string;\n  private workerId: string;\n\n  constructor(\n    params: RequestOptions<\n      RequestShape,\n      RequestResolve,\n      ResponseShape,\n      ResponseResolve\n    >,\n  ) {\n    this.requestDefinition = parseSchemaAndResolve(params.request);\n    this.responseDefinition = parseSchemaAndResolve(params.response);\n    this.url = params.url;\n    this.workerId = params.workerId;\n\n    if (params.workerId === undefined) {\n      throw new TypeError(\"Worker ID is required\");\n    }\n  }\n\n  async send(\n    values: MessageValuePayload<RequestShape>,\n    options?: { owner?: Account },\n  ): Promise<Loaded<CoMapSchema<ResponseShape>, ResponseResolve>> {\n    const as = options?.owner ?? Account.getMe();\n\n    const target = await loadWorkerAccountOrGroup(this.workerId, as);\n\n    const response = await fetch(this.url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(\n        await serializeMessagePayload({\n          type: \"request\",\n          schema: this.requestDefinition.schema,\n          resolve: true, // export only the envelope\n          value: values,\n          owner: as,\n          target,\n        }),\n      ),\n    });\n\n    if (!response.ok) {\n      if (response.headers.has(\"X-Jazz-Request-Error\")) {\n        const error = await response.json();\n        throw new JazzRequestError(error.message, error.code, error.details);\n      }\n\n      throw new JazzRequestError(\"Request failed\", response.status);\n    }\n\n    const responseBody = await response.json();\n\n    const responseParsed = z\n      .object({\n        type: z.literal(\"success\"),\n        payload: z.any(),\n      })\n      .safeParse(responseBody);\n\n    if (!responseParsed.success) {\n      throw new JazzRequestError(\n        \"Response payload is not valid\",\n        400,\n        responseParsed.error,\n      );\n    }\n\n    const data = await handleMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      request: responseParsed.data.payload,\n      loadAs: as,\n    });\n\n    return data.value as Loaded<CoMapSchema<ResponseShape>, ResponseResolve>;\n  }\n\n  handle = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    try {\n      const response = await this.executeHandleRequest(request, as, callback);\n      return response;\n    } catch (error) {\n      // Serialize the error to make it possible to handle it on the client side\n      if (isJazzRequestError(error)) {\n        return new Response(JSON.stringify(error.toJSON()), {\n          status: error.code,\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"X-Jazz-Request-Error\": \"true\",\n          },\n        });\n      }\n\n      throw error;\n    }\n  };\n\n  executeHandleRequest = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    const node = as.$jazz.localNode;\n    const body = await request.json();\n    const data = await handleMessagePayload({\n      type: \"request\",\n      schema: this.requestDefinition.schema,\n      resolve: this.requestDefinition.resolve,\n      request: body,\n      loadAs: as,\n    });\n\n    const tracking = node.syncManager.trackDirtyCoValues();\n\n    const responseValue = await callback(\n      data.value as Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      data.madeBy,\n    );\n\n    const responsePayload = await serializeMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      value: responseValue,\n      owner: as,\n      target: data.madeBy,\n    });\n\n    const responseBody = JSON.stringify({\n      type: \"success\",\n      payload: responsePayload,\n    });\n\n    // TODO: Detect the defer support from the environment\n    await Promise.all(\n      Array.from(tracking.done(), (id) => node.syncManager.waitForSync(id)),\n    );\n\n    return new Response(responseBody, {\n      status: 200,\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n    });\n  };\n\n  get requestSchema(): CoMapSchema<RequestShape> {\n    return this.requestDefinition.schema as CoMapSchema<RequestShape>;\n  }\n\n  get responseSchema() {\n    return this.responseDefinition.schema as CoMapSchema<ResponseShape>;\n  }\n}\n\n/**\n * Define a request route.\n *\n * @param params - The parameters for the request route.\n * @returns The request route.\n *\n * @see {@link https://jazz.tools/docs/react/server-side/http-requests}\n */\nexport function experimental_defineRequest<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n>(\n  params: RequestOptions<\n    RequestShape,\n    RequestResolve,\n    ResponseShape,\n    ResponseResolve\n  >,\n) {\n  return new HttpRoute(params);\n}\n\nfunction getCoValueCreatorAccountId(coValue: CoValueCore) {\n  if (!coValue.isAvailable()) {\n    throw new Error(\"Unable to load the request payload\");\n  }\n\n  const creatorSessionId = coValue.getValidSortedTransactions().at(0)\n    ?.txID.sessionID;\n\n  if (!creatorSessionId) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, creator session ID not found\",\n      400,\n    );\n  }\n\n  const accountId =\n    cojsonInternals.accountOrAgentIDfromSessionID(creatorSessionId);\n\n  if (!isCoValueId(accountId)) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, the creator is not a valid account\",\n      400,\n    );\n  }\n\n  return accountId;\n}\n\nexport class JazzRequestError {\n  public readonly isJazzRequestError = true;\n\n  constructor(\n    public readonly message: string,\n    public readonly code: number,\n    public readonly details?: unknown,\n  ) {}\n\n  toJSON() {\n    return { message: this.message, code: this.code, details: this.details };\n  }\n}\n\nexport function isJazzRequestError(error: unknown): error is JazzRequestError {\n  return (\n    error instanceof JazzRequestError ||\n    (typeof error === \"object\" &&\n      error !== null &&\n      \"isJazzRequestError\" in error &&\n      Boolean(error.isJazzRequestError))\n  );\n}\n\nfunction safeVerifySignature(\n  crypto: CryptoProvider,\n  signPayload: `hash_z${string}`,\n  signerID: `signer_z${string}`,\n  authToken: `signature_z${string}`,\n) {\n  try {\n    return crypto.verify(authToken, signPayload, signerID);\n  } catch (error) {\n    return false;\n  }\n}\n\nasync function loadWorkerAccountOrGroup(id: string, loadAs: Account) {\n  const node = loadAs.$jazz.localNode;\n  const coValue = await node.loadCoValueCore(id as `co_z${string}`);\n\n  if (!coValue.isAvailable()) {\n    throw new JazzRequestError(\"Worker account not found\", 400);\n  }\n\n  const content = coValue.getCurrentContent();\n\n  if (content instanceof RawAccount) {\n    const account = await Account.load(content.id, {\n      loadAs,\n    });\n    if (!account.$isLoaded) {\n      throw new JazzRequestError(\"Worker account not found\", 400);\n    }\n    return account;\n  }\n\n  const group = await Group.load(content.id, {\n    loadAs,\n  });\n\n  if (!group.$isLoaded) {\n    throw new JazzRequestError(\"Worker group not found\", 400);\n  }\n  return group;\n}\n\nfunction defaultGetToken(request: Request) {\n  const headerValue = request.headers.get(\"Authorization\");\n  if (headerValue?.startsWith(\"Jazz \")) {\n    return headerValue.replace(\"Jazz \", \"\");\n  }\n\n  if (headerValue) {\n    console.warn(\n      \"An Authorization header was found, but it did not start with 'Jazz '. If this is intentional, you can specify the location of the token using the `getToken` option.\",\n    );\n  }\n\n  return undefined;\n}\n\n/**\n * Authenticates a Request by verifying a signed authentication token.\n *\n * - If a token is not provided, the returned account is `undefined` and no error is returned.\n * - If a valid token is provided, the signer account is returned.\n * - If an invalid token is provided, an error is returned detailing the validation error, and the returned account is `undefined`.\n *\n * @see {@link generateAuthToken} for generating a token.\n *\n * Note: This function does not perform any authorization checks, it only verifies if - **when provided** - a token is valid. It is up to the caller to perform any additional authorization checks, if needed.\n *\n * @param request - The request to authenticate.\n * @param options - The options for the authentication.\n * @param options.expiration - The expiration time of the token in milliseconds, defaults to 1 minute.\n * @param options.loadAs - The account to load the token from, defaults to the current active account.\n * @param options.getToken - If specified, this function will be used to get the token from the request. By default the token is expected to be in the `Authorization` header in the form of `Jazz <token>`.\n * @returns The account if it is valid, otherwise an error.\n *\n * @example\n * ```ts\n * const { account, error } = await authenticateRequest(request);\n * if (error) {\n *   return new Response(JSON.stringify(error), { status: 401 });\n * }\n * ```\n */\nexport async function authenticateRequest(\n  request: Request,\n  options?: {\n    expiration?: number;\n    loadAs?: Account;\n    getToken?: (request: Request) => string | undefined | null;\n  },\n): Promise<\n  | {\n      account?: Account;\n      error?: never;\n    }\n  | {\n      account?: never;\n      error: { message: string; details?: unknown };\n    }\n> {\n  const token = options?.getToken?.(request) ?? defaultGetToken(request);\n\n  if (!token) {\n    return {};\n  }\n\n  const { account, error } = await parseAuthToken(token, {\n    loadAs: options?.loadAs,\n    expiration: options?.expiration ?? 1000 * 60,\n  });\n\n  if (error) {\n    return { error };\n  }\n\n  return { account, error };\n}\n\n/**\n * Generates an authentication token for a given account. This token can be used to authenticate a request. See {@link authenticateRequest} for more details.\n *\n * @param as - The account to generate the token for, defaults to the current active account.\n * @returns The authentication token.\n *\n * @example Make a fetch request with the token\n * ```ts\n * const token = generateAuthToken();\n * const response = await fetch(url, {\n *   headers: {\n *     Authorization: `Jazz ${token}`,\n *   },\n * });\n * ```\n */\n\nexport function generateAuthToken(as?: Account) {\n  const account = as ?? Account.getMe();\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerSecret = agent.currentSignerSecret();\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return `${authToken}~${account.$jazz.id}~${createdAt}`;\n}\n\nexport async function parseAuthToken(\n  authToken: string,\n  options?: { loadAs?: Account; expiration?: number },\n): Promise<\n  | { account: Account; error?: never }\n  | { account?: never; error: { message: string; details?: unknown } }\n> {\n  const expiration = options?.expiration ?? 1_000 * 60; // 1 minute\n\n  const parsed = z\n    .tuple([signatureSchema, coIdSchema, z.string().transform(Number)])\n    .safeParse(authToken.split(\"~\"));\n\n  if (!parsed.success) {\n    return {\n      error: {\n        message: \"Invalid token\",\n        details: parsed.error,\n      },\n    };\n  }\n\n  const [signature, id, createdAt] = parsed.data;\n\n  if (createdAt + expiration < Date.now()) {\n    return {\n      error: {\n        message: \"Token expired\",\n      },\n    };\n  }\n\n  const account = await Account.load(id, { loadAs: options?.loadAs });\n\n  if (!account.$isLoaded) {\n    return {\n      error: {\n        message: \"Failed to load account\",\n        details: { id },\n      },\n    };\n  }\n\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt: Number(createdAt),\n  });\n\n  const agentID = account.$jazz.raw.currentAgentID();\n  const signerID = crypto.getAgentSignerID(agentID);\n\n  if (!crypto.verify(signature, signPayload, signerID)) {\n    return {\n      error: {\n        message: \"Invalid signature\",\n      },\n    };\n  }\n\n  return {\n    account,\n  };\n}\n","export {\n  setCustomErrorReporter,\n  enableCaptureErrorCause,\n} from \"./subscribe/errorReporting.js\";\n\nexport {\n  logger,\n  LogLevel,\n} from \"cojson\";\n","export * from \"./exports.js\";\n\nexport {\n  cojsonInternals,\n  logger,\n  LogLevel,\n} from \"cojson\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE,WAAAA;AAAA,EAEA,qBAAAC;AAAA,OAEK;;;ACHA,SAAS,iBAAiB,MAAiB;AAChD,MAAI,KAAK,UAAU;AACjB,WAAO,KAAK;AAAA,EACd;AAEA,MAAI,KAAK,WAAW;AAClB,QAAI,KAAK,UAAU;AACjB,aAAO,GAAG,KAAK,SAAS,IAAI,KAAK,QAAQ;AAAA,IAC3C;AAEA,WAAO,KAAK;AAAA,EACd;AAEA,MAAI,KAAK,UAAU;AACjB,WAAO,KAAK;AAAA,EACd;AAEA,MAAI,KAAK,qBAAqB,cAAc;AAC1C,UAAM,gBAAgB,KAAK,oBAAoB,aAAa,MAAM,GAAG,EAAE,CAAC;AAExE,QAAI,eAAe;AACjB,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,KAAK;AACd;;;AC3BA,SAAS,SAAS;AAElB,IAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,eAAe,EAAE,OAAO;AAAA,EACxB,mBAAmB,EAAE,OAAO;AAAA,EAC5B,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAChD,CAAC;AAED,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,UAAU,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,UAAU,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,EACxB,qBAAqB,EAClB,OAAO;AAAA,IACN,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,CAAC,EACA,QAAQ;AAAA,EACX,gBAAgB,2BAA2B,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAAA,EAC1D,QAAQ,EAAE,SAAS;AAAA,IACjB,OAAO;AAAA,MACL,EAAE,OAAO;AAAA,QACP,gBAAgB;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,IACA,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,EAC/B,CAAC;AACH,CAAC;AAEM,IAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,MAAM,gBAAgB,QAAQ;AAChC,CAAC;AA6BM,SAAS,mBACd,MAC0B;AAC1B,SAAO,CAAC,CAAC,QAAQ,mBAAmB,QAAQ,uBAAuB;AACrE;AAOO,SAAS,sBACd,cACA,SACA;AACA,MAAI,QAAQ,YAAY,MAAM,QAAQ,OAAO,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,sBAAsB,mBAAmB,cAAc,cAAc,IACvE,cAAc,iBACd;AACJ,QAAM,iBAAiB,mBAAmB,SAAS,cAAc,IAC7D,SAAS,iBACT;AAEJ,MAAI,CAAC,uBAAuB,CAAC,gBAAgB;AAC3C,WAAO,wBAAwB;AAAA,EACjC;AAEA,SAAO,oBAAoB,kBAAkB,eAAe;AAC9D;;;AF1EO,IAAM,gBAAN,MAAM,eAAc;AAAA,EACzB,YACU,cACA,QACA,mBACR;AAHQ;AACA;AACA;AAiCV,SAAQ,cAAc;AACtB,SAAQ,eAAyD;AAwBjE,6BAAoB,OAAO,cAA4C;AACrE,YAAM,kBAAkB,KAAK,kBAAkB;AAI/C,UAAI,CAAC,WAAW;AACd,YAAI,iBAAiB;AACnB,eAAK,kBAAkB,MAAM;AAC7B,gBAAM,KAAK,OAAO;AAAA,QACpB;AACA;AAAA,MACF;AAEA,UAAI,gBAAiB;AAErB,UAAI,CAAC,UAAU,eAAe,eAAe;AAC3C,cAAM,KAAK,OAAO,SAAS;AAAA,MAC7B,OAAO;AACL,cAAM,KAAK,MAAM,SAAS;AAAA,MAC5B;AAAA,IACF;AAEA,iBAAQ,OAAO,cAAyB;AACtC,YAAM,mBAAmB,UAAU;AACnC,UAAI,CAAC,mBAAmB,gBAAgB,GAAG;AACzC,cAAM,IAAI,MAAM,+BAA+B;AAAA,MACjD;AAEA,YAAM,cAAc;AAAA,QAClB,WAAW,iBAAiB;AAAA,QAC5B,eAAe,iBAAiB;AAAA,QAChC,YAAY,iBAAiB,kBACzB,WAAW,KAAK,iBAAiB,eAAe,IAChD;AAAA,QACJ,UAAU;AAAA,MACZ;AAEA,YAAM,KAAK,aAAa,WAAW;AAEnC,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B,iBAAiB,iBAAiB;AAAA,QACpC;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAEA,kBAAS,OAAO,cAAyB;AACvC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,kBAAkB,YAAY,aAChC,MAAM,KAAK,YAAY,UAAU,IACjC;AAEJ,YAAM,mBAAmB;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,mBAAmB,YAAY;AAAA,QAC/B;AAAA,MACF;AAGA,WAAK,eAAe,EAAE,gBAAgB,iBAAiB;AAEvD,YAAM,UAAU,OAAO;AAAA,QACrB,gBAAgB;AAAA,MAClB,CAAC;AAED,YAAM,iBAAiB,MAAMC,SAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,YAAM,WAAW,iBAAiB,SAAS;AAE3C,UAAI,UAAU;AACZ,uBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAAA,MACnD;AAEA,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B;AAAA,QACF;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EAtJG;AAAA;AAAA;AAAA;AAAA,EAKH,OAAO,kBACL,aACA,SACA;AACA,WAAO,QAAQ,IAAI;AAAA,MACjB,WAAW,YAAY;AAAA,MACvB,eAAe,YAAY;AAAA,MAC3B,YAAY,YAAY,kBACpB,WAAW,KAAK,YAAY,eAAe,IAC3C;AAAA,MACJ,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,eAAe,OAA2B;AACrD,UAAM,gBAAgB,IAAIC,mBAAkB;AAE5C,QAAI,CAAC,mBAAmB,MAAM,MAAM,cAAc,GAAG;AACnD;AAAA,IACF;AAEA,UAAM,eAAc;AAAA,MAClB,MAAM,KAAK;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAKA,iBAAiB,aAAiC;AAChD,SAAK,eAAe,iBAAiB,MAAM,WAAW,EAAE,QAAQ;AAGhE,WAAO,YAAY,YAAY,CAAC,UAAU;AACxC,YAAM,cAAc,iBAAiB,UAAU,KAAK;AAEpD,UAAI,CAAC,YAAY,SAAS;AACxB,gBAAQ,MAAM,uBAAuB,YAAY,KAAK;AACtD;AAAA,MACF;AAEA,YAAM,OAAO,YAAY,KAAK,QAAQ;AAEtC,UAAI,CAAC,sBAAsB,KAAK,cAAc,IAAI,KAAK,KAAK,aAAa;AACvE,aAAK,eAAe;AACpB,aAAK,kBAAkB,IAAI;AAC3B,aAAK,cAAc;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AAgGF;;;AGtJO,IAAM,WAAN,MAAe;AAAA,EACpB,YACU,cACA,mBACR;AAFQ;AACA;AAGV,iBAAQ,OAAO,aAAqB;AAClC,YAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAC3D,YAAM,cAAc,cAAc,QAAQ;AAE1C,UAAI,CAAC,aAAa,WAAW;AAC3B,cAAM,IAAI,MAAM,gBAAgB;AAAA,MAClC;AAEA,YAAM,KAAK,aAAa;AAAA,QACtB,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,MAC7B,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,kBAAS,OAAO,aAAqB;AACnC,YAAM,gBAAgB,MAAM,KAAK,iBAAiB;AAClD,UAAI,cAAc,SAAS,QAAQ,GAAG;AACpC,cAAM,IAAI,MAAM,yBAAyB;AAAA,MAC3C;AAEA,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,qBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAEjD,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAED,YAAM,KAAK,mBAAmB,UAAU;AAAA,QACtC,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,MAAM,KAAK,YAAY,UAAU,IACjC;AAAA,MACN,CAAC;AAAA,IACH;AAuBA,4BAAmB,YAAY;AAC7B,aAAO,OAAO,KAAK,MAAM,KAAK,0BAA0B,CAAC;AAAA,IAC3D;AAAA,EAtFG;AAAA,EA+DH,MAAc,mBAAmB,UAAkB,MAAmB;AACpE,UAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAE3D,QAAI,cAAc,QAAQ,GAAG;AAC3B;AAAA,IACF;AAEA,kBAAc,QAAQ,IAAI;AAE1B,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAAA,EACpE;AAAA,EAEA,MAAc,4BAA4B;AACxC,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,qBAAqB,OAAO;AAElC,UAAM,gBAAgB,MAAM,QAAQ,IAAI,iBAAiB;AACzD,WAAO,gBAAgB,KAAK,MAAM,aAAa,IAAI,CAAC;AAAA,EACtD;AAKF;AAEO,SAAS,eAAe,UAAkB;AAC/C,SAAO,KAAK,QAAQ,EACjB,QAAQ,MAAM,GAAG,EACjB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG;AACvB;AAEA,eAAe,kBAAkB,SAAkB;AACjD,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,IAAI,2BAA2B;AAC7D,WAAO,UAAU,SAAS,OAAO,IAAI;AAAA,EACvC,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBAAkB,SAAkB,SAAiB;AAClE,QAAM,QAAQ,IAAI,6BAA6B,QAAQ,SAAS,CAAC;AACnE;AAEA,eAAe,qBAAqB,SAAkB;AACpD,QAAM,gBAAgB,MAAM,QAAQ,IAAI,0BAA0B;AAClE,SAAO,gBAAgB,cAAc,MAAM,GAAG,IAAI,CAAC;AACrD;AAKA,eAAe,qBAAqB,SAAkB;AACpD,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,gBAAgB,MAAM,qBAAqB,OAAO;AAExD,eAAW,YAAY,eAAe;AACpC,YAAM,YAAY,4BAA4B,QAAQ;AACtD,YAAM,cAAc,MAAM,QAAQ,IAAI,SAAS;AAC/C,UAAI,aAAa;AACf,cAAM,QAAQ;AAAA,UACZ,4BAA4B,eAAe,QAAQ,CAAC;AAAA,UACpD;AAAA,QACF;AACA,cAAM,QAAQ,OAAO,SAAS;AAAA,MAChC;AAAA,IACF;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AAEA,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,oBAAoB,MAAM,qBAAqB,OAAO;AAE5D,UAAM,gBAA6C,CAAC;AACpD,UAAM,eAAyB,CAAC,0BAA0B;AAE1D,eAAW,YAAY,mBAAmB;AACxC,YAAM,MAAM,4BAA4B,eAAe,QAAQ,CAAC;AAChE,YAAM,cAAc,MAAM,QAAQ,IAAI,GAAG;AACzC,UAAI,aAAa;AACf,sBAAc,QAAQ,IAAI,KAAK,MAAM,WAAW;AAChD,qBAAa,KAAK,GAAG;AAAA,MACvB;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAElE,eAAW,OAAO,cAAc;AAC9B,YAAM,QAAQ,OAAO,GAAG;AAAA,IAC1B;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AACF;;;AC5LA,YAAY,WAAW;AACvB,SAAS,yBAAyB;AAClC,SAAyB,uBAAuB;AAoBzC,IAAM,iBAAN,MAAqB;AAAA,EAG1B,YACU,QACA,cACA,UACA,mBACD,UACP;AALQ;AACA;AACA;AACA;AACD;AAPT,sBAAqB;AAUrB,iBAAQ,OAAO,eAAuB;AACpC,YAAM,EAAE,QAAQ,aAAa,IAAI;AAEjC,UAAI;AAEJ,UAAI;AACF,qBAAmB,wBAAkB,YAAY,KAAK,QAAQ;AAAA,MAChE,SAAS,GAAG;AACV,cAAM,IAAI,MAAM,oBAAoB;AAAA,MACtC;AAEA,YAAM,gBAAgB,OAAO,0BAA0B,UAAU;AAEjE,YAAM,YAAY,gBAAgB;AAAA,QAChC,gBAAgB,mCAAmC,eAAe,MAAM;AAAA,QACxE;AAAA,MACF;AAEA,YAAM,aAAa;AAAA,QACjB;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,kBAAS,OAAO,SAAkB;AAChC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,aAAa,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAE1E,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,YAAY,YAAY;AAAA,QACxB,eAAe,YAAY;AAAA,QAC3B,UAAU;AAAA,MACZ,CAAC;AAED,UAAI,MAAM,KAAK,GAAG;AAChB,cAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,UAC9D,SAAS;AAAA,YACP,SAAS;AAAA,UACX;AAAA,QACF,CAAC;AAED,uBAAe,QAAQ,MAAM,IAAI,QAAQ,IAAI;AAAA,MAC/C;AAEA,aAAO;AAAA,IACT;AAEA,8BAAqB,OAAO,YAAoB,SAAiB;AAC/D,YAAM,aAAmB,wBAAkB,YAAY,KAAK,QAAQ;AACpE,YAAM,gBAAgB,KAAK,OAAO,0BAA0B,UAAU;AACtE,YAAM,YAAY,MAAM,KAAK,SAAS,eAAe,EAAE,KAAK,CAAC;AAE7D,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,aAAO;AAAA,IACT;AAEA,uCAA8B,YAAY;AACxC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,aAAO,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAAA,IAChE;AAEA,oCAA2B,MAAM;AAC/B,aAAO,kBAAkB,KAAK,OAAO,oBAAoB,GAAG,KAAK,QAAQ;AAAA,IAC3E;AAEA,wCAA+B,YAAY;AACzC,YAAM,aAAa,MAAM,KAAK,4BAA4B;AAC1D,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,qBAAY,oBAAI,IAAgB;AAChC,qBAAY,CAAC,aAAyB;AACpC,WAAK,UAAU,IAAI,QAAQ;AAE3B,aAAO,MAAM;AACX,aAAK,UAAU,OAAO,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,EA3GG;AAAA,EA6GH,SAAS;AACP,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS;AAAA,IACX;AAAA,EACF;AACF;;;ACjJA,SAAyC,mBAAAC,wBAAuB;AAKzD,SAAS,iBACd,OACA,MACA,SACA,WACQ;AACR,QAAM,cAAc,MAAM,MAAM,IAAI;AACpC,MAAI,iBAAiB;AAErB,SAAO,eAAe,SAAS,OAAO,QAAQ,SAAS,gBAAgB;AACrE,qBAAiB,eAAe,SAAS,EAAE;AAAA,EAC7C;AAEA,QAAM,EAAE,SAAS,KAAK,IAAI,eAAe,SAAS;AAElD,MAAI,QAAQ,SAAS,WAAW,MAAM,SAAS,WAAW;AACxD,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,QAAM,QAAQC,iBAAgB,YAAY,eAAe,kBAAkB,CAAC;AAC5E,QAAM,eAAe,MAAM,aAAa,IAAI;AAE5C,SAAO,GAAG,OAAO,YAAY,YAAY,YAAY,MAAM,EAAE,GAC3D,MAAM,MAAM,EACd,IAAI,YAAY;AAClB;AAGO,SAAS,gBAAgB,WAMlB;AACZ,QAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,QAAM,QAAQ,IAAI,KAAK,MAAM,GAAG;AAEhC,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,UAAU;AAC7C,QAAI,MAAM,WAAW,GAAG;AACtB,kBAAY,MAAM,CAAC;AACnB,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB,WAAW,MAAM,WAAW,GAAG;AAC7B,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB;AAEA,QAAI,CAAC,WAAW,CAAC,cAAc;AAC7B,aAAO;AAAA,IACT;AACA,WAAO,EAAE,SAAS,cAAc,UAAU;AAAA,EAC5C;AACF;AAGO,SAAS,kBAAkD;AAAA,EAChE;AAAA,EACA,KAAK,QAAQ,MAAM;AAAA,EACnB;AAAA,EACA;AACF,GAYE;AACA,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,SAAS,gBAAgB,SAAS;AAExC,QAAI,UAAU,OAAO,cAAc,cAAc;AAC/C,SAAG,aAAa,OAAO,SAAS,OAAO,cAAc,mBAAmB,EACrE,KAAK,MAAM;AACV,gBAAQ,MAAM;AAAA,MAChB,CAAC,EACA,MAAM,MAAM;AAAA,IACjB,OAAO;AACL,cAAQ,MAAS;AAAA,IACnB;AAAA,EACF,CAAC;AACH;;;AChGA;AAAA,EAIE;AAAA,EAEA,mBAAAC;AAAA,OACK;AACP,OAAOC,QAAO;AA0Fd,SAAS,sBACP,QACA,OACA,OACA,YACA,MACwB;AACxB,QAAM,QAAQ,MAAM,OAAO,EAAE,MAAM,CAAC;AAEpC,MAAI,SAAS,WAAW;AACtB,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC,OAAO;AACL,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC;AAGA,SAAO,OAAO,OAAO,SAAS,CAAC,GAAG,KAAK;AACzC;AAMA,eAAe,wBAAwB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,KAAK,SAAS,QAAQ,MAAM;AAClC,QAAM,OAAO,GAAG,MAAM;AACtB,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,WAAW,MAAM,gBAAgB;AACvC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,WAAW,sBAAsB,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAEtE,QAAM,gBACH,MAAM,cAAc,QAAQ,SAAS,MAAM,IAAI;AAAA,IAC9C;AAAA,IACA,QAAQ;AAAA,IACR,sBAAsB;AAAA,EACxB,CAAC,KAAM,CAAC;AAEV,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO;AAAA,IACL;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,IAAM,aAAaC,GAAE,OAAwB,WAAW;AACxD,IAAM,kBAAkBA,GAAE;AAAA,EACxB,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,aAAa;AACxE;AAEA,IAAM,gBAAgBA,GAAE,OAAO;AAAA,EAC7B,eAAeA,GAAE,MAAMA,GAAE,KAAK,CAAC;AAAA,EAC/B,IAAI;AAAA,EACJ,WAAWA,GAAE,OAAO;AAAA,EACpB,WAAW;AAAA,EACX,UAAUA,GAAE;AAAA,IACV,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,UAAU;AAAA,EACrE;AACF,CAAC;AAOD,eAAe,qBAAqB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,SAAS,KAAK;AAEpB,QAAM,gBAAgB,cAAc,UAAU,OAAO;AAErD,MAAI,CAAC,cAAc,SAAS;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,cAAc,cAAc;AAElC,MAAI,SAAS,WAAW;AACtB,UAAM,OAAO,MAAM,KAAK,gBAAgB,YAAY,IAAI,QAAW,IAAI;AAGvE,QAAI,KAAK,YAAY,GAAG;AACtB,YAAM,UAAU,KAAK,kBAAkB;AAEvC,UAAI,QAAQ,IAAI,UAAU,MAAM,OAAO,MAAM,IAAI;AAC/C,cAAM,IAAI,iBAAiB,sCAAsC,GAAG;AAAA,MACtE;AAAA,IACF;AAGA,QAAI,YAAY,YAAY,MAAO,KAAK,KAAK,IAAI,GAAG;AAClD,YAAM,IAAI,iBAAiB,mCAAmC,GAAG;AAAA,IACnE;AAAA,EACF;AAGA,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,eAAe,YAAY;AAAA,IAC3B,IAAI,YAAY;AAAA,IAChB,WAAW,YAAY;AAAA,IACvB,UAAU,YAAY;AAAA,EACxB,CAAC;AAED,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,GACA;AACA,UAAM,IAAI,iBAAiB,qBAAqB,GAAG;AAAA,EACrD;AAEA,MAAI,gBACF,YAAY;AAEd,MAAI,SAAS,WAAW;AACtB,UAAM,iBAAiB,cAAc;AAAA,MACnC,CAAC,UAAU,MAAM,OAAO,YAAY;AAAA,IACtC;AAEA,QAAI,kBAAkB,eAAe,QAAQ;AAC3C,YAAM,cAAcC,iBAAgB;AAAA,QAClC,eAAe;AAAA,QACf;AAAA,MACF;AACA,kBAAY,IAAI,YAAY,EAAE;AAC9B,sBAAgB,cAAc;AAAA,QAAO,CAAC,UACpC,YAAY,IAAI,MAAM,EAAE;AAAA,MAC1B;AAAA,IACF,OAAO;AACL,sBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,sBAAoB,eAAe,MAAM;AAEzC,QAAM,UAAU,MAAM,KAAK,gBAAgB,YAAY,EAAE;AACzD,QAAM,YAAY,2BAA2B,OAAO;AAEpD,QAAM,SAAS,MAAM,QAAQ,KAAK,WAAW;AAAA,IAC3C;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,WAAW;AACrB,UAAM,IAAI,iBAAiB,6BAA6B,GAAG;AAAA,EAC7D;AAEA,QAAM,WAAW;AAAA,IACf;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,YAAyB,UAAU,YAAY,IAAI;AAAA,IACrE;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,mBAAmB,GAAG;AAAA,EACnD;AAEA,MAAI,SAAS,WAAW;AACtB,UAAM,MAAM,IAAI,IAAI,YAAY,OAAO,MAAM,EAAE;AAAA,EACjD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,sBAGP,SAAwC;AACxC,MAAI,YAAY,SAAS;AACvB,WAAO;AAAA;AAAA,MAEL,QAAQ,aAAa,QAAQ,MAAM;AAAA,MACnC,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,aAAa,OAAO;AAAA,IAC5B,SAAS;AAAA,EACX;AACF;AAEO,IAAM,YAAN,MAKL;AAAA,EAYA,YACE,QAMA;AAyEF,kBAAS,OACP,SACA,IACA,aAMsB;AACtB,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,qBAAqB,SAAS,IAAI,QAAQ;AACtE,eAAO;AAAA,MACT,SAAS,OAAO;AAEd,YAAI,mBAAmB,KAAK,GAAG;AAC7B,iBAAO,IAAI,SAAS,KAAK,UAAU,MAAM,OAAO,CAAC,GAAG;AAAA,YAClD,QAAQ,MAAM;AAAA,YACd,SAAS;AAAA,cACP,gBAAgB;AAAA,cAChB,wBAAwB;AAAA,YAC1B;AAAA,UACF,CAAC;AAAA,QACH;AAEA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,gCAAuB,OACrB,SACA,IACA,aAMsB;AACtB,YAAM,OAAO,GAAG,MAAM;AACtB,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,OAAO,MAAM,qBAAqB;AAAA,QACtC,MAAM;AAAA,QACN,QAAQ,KAAK,kBAAkB;AAAA,QAC/B,SAAS,KAAK,kBAAkB;AAAA,QAChC,SAAS;AAAA,QACT,QAAQ;AAAA,MACV,CAAC;AAED,YAAM,WAAW,KAAK,YAAY,mBAAmB;AAErD,YAAM,gBAAgB,MAAM;AAAA,QAC1B,KAAK;AAAA,QACL,KAAK;AAAA,MACP;AAEA,YAAM,kBAAkB,MAAM,wBAAwB;AAAA,QACpD,MAAM;AAAA,QACN,QAAQ,KAAK,mBAAmB;AAAA,QAChC,SAAS,KAAK,mBAAmB;AAAA,QACjC,OAAO;AAAA,QACP,OAAO;AAAA,QACP,QAAQ,KAAK;AAAA,MACf,CAAC;AAED,YAAM,eAAe,KAAK,UAAU;AAAA,QAClC,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAGD,YAAM,QAAQ;AAAA,QACZ,MAAM,KAAK,SAAS,KAAK,GAAG,CAAC,OAAO,KAAK,YAAY,YAAY,EAAE,CAAC;AAAA,MACtE;AAEA,aAAO,IAAI,SAAS,cAAc;AAAA,QAChC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,IACH;AAzJE,SAAK,oBAAoB,sBAAsB,OAAO,OAAO;AAC7D,SAAK,qBAAqB,sBAAsB,OAAO,QAAQ;AAC/D,SAAK,MAAM,OAAO;AAClB,SAAK,WAAW,OAAO;AAEvB,QAAI,OAAO,aAAa,QAAW;AACjC,YAAM,IAAI,UAAU,uBAAuB;AAAA,IAC7C;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,QACA,SAC8D;AAC9D,UAAM,KAAK,SAAS,SAAS,QAAQ,MAAM;AAE3C,UAAM,SAAS,MAAM,yBAAyB,KAAK,UAAU,EAAE;AAE/D,UAAM,WAAW,MAAM,MAAM,KAAK,KAAK;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK;AAAA,QACT,MAAM,wBAAwB;AAAA,UAC5B,MAAM;AAAA,UACN,QAAQ,KAAK,kBAAkB;AAAA,UAC/B,SAAS;AAAA;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,SAAS,QAAQ,IAAI,sBAAsB,GAAG;AAChD,cAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,cAAM,IAAI,iBAAiB,MAAM,SAAS,MAAM,MAAM,MAAM,OAAO;AAAA,MACrE;AAEA,YAAM,IAAI,iBAAiB,kBAAkB,SAAS,MAAM;AAAA,IAC9D;AAEA,UAAM,eAAe,MAAM,SAAS,KAAK;AAEzC,UAAM,iBAAiBD,GACpB,OAAO;AAAA,MACN,MAAMA,GAAE,QAAQ,SAAS;AAAA,MACzB,SAASA,GAAE,IAAI;AAAA,IACjB,CAAC,EACA,UAAU,YAAY;AAEzB,QAAI,CAAC,eAAe,SAAS;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,qBAAqB;AAAA,MACtC,MAAM;AAAA,MACN,QAAQ,KAAK,mBAAmB;AAAA,MAChC,SAAS,KAAK,mBAAmB;AAAA,MACjC,SAAS,eAAe,KAAK;AAAA,MAC7B,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,KAAK;AAAA,EACd;AAAA,EAqFA,IAAI,gBAA2C;AAC7C,WAAO,KAAK,kBAAkB;AAAA,EAChC;AAAA,EAEA,IAAI,iBAAiB;AACnB,WAAO,KAAK,mBAAmB;AAAA,EACjC;AACF;AAUO,SAAS,2BAMd,QAMA;AACA,SAAO,IAAI,UAAU,MAAM;AAC7B;AAEA,SAAS,2BAA2B,SAAsB;AACxD,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAEA,QAAM,mBAAmB,QAAQ,2BAA2B,EAAE,GAAG,CAAC,GAC9D,KAAK;AAET,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YACJC,iBAAgB,8BAA8B,gBAAgB;AAEhE,MAAI,CAAC,YAAY,SAAS,GAAG;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,IAAM,mBAAN,MAAuB;AAAA,EAG5B,YACkB,SACA,MACA,SAChB;AAHgB;AACA;AACA;AALlB,SAAgB,qBAAqB;AAAA,EAMlC;AAAA,EAEH,SAAS;AACP,WAAO,EAAE,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,SAAS,KAAK,QAAQ;AAAA,EACzE;AACF;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SACE,iBAAiB,oBAChB,OAAO,UAAU,YAChB,UAAU,QACV,wBAAwB,SACxB,QAAQ,MAAM,kBAAkB;AAEtC;AAEA,SAAS,oBACP,QACA,aACA,UACA,WACA;AACA,MAAI;AACF,WAAO,OAAO,OAAO,WAAW,aAAa,QAAQ;AAAA,EACvD,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,yBAAyB,IAAY,QAAiB;AACnE,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,UAAU,MAAM,KAAK,gBAAgB,EAAqB;AAEhE,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,EAC5D;AAEA,QAAM,UAAU,QAAQ,kBAAkB;AAE1C,MAAI,mBAAmB,YAAY;AACjC,UAAM,UAAU,MAAM,QAAQ,KAAK,QAAQ,IAAI;AAAA,MAC7C;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ,WAAW;AACtB,YAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,MAAM,MAAM,KAAK,QAAQ,IAAI;AAAA,IACzC;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,0BAA0B,GAAG;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,SAAkB;AACzC,QAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;AACvD,MAAI,aAAa,WAAW,OAAO,GAAG;AACpC,WAAO,YAAY,QAAQ,SAAS,EAAE;AAAA,EACxC;AAEA,MAAI,aAAa;AACf,YAAQ;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AA4BA,eAAsB,oBACpB,SACA,SAcA;AACA,QAAM,QAAQ,SAAS,WAAW,OAAO,KAAK,gBAAgB,OAAO;AAErE,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,EAAE,SAAS,MAAM,IAAI,MAAM,eAAe,OAAO;AAAA,IACrD,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS,cAAc,MAAO;AAAA,EAC5C,CAAC;AAED,MAAI,OAAO;AACT,WAAO,EAAE,MAAM;AAAA,EACjB;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAmBO,SAAS,kBAAkB,IAAc;AAC9C,QAAM,UAAU,MAAM,QAAQ,MAAM;AACpC,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO,GAAG,SAAS,IAAI,QAAQ,MAAM,EAAE,IAAI,SAAS;AACtD;AAEA,eAAsB,eACpB,WACA,SAIA;AACA,QAAM,aAAa,SAAS,cAAc,MAAQ;AAElD,QAAM,SAASD,GACZ,MAAM,CAAC,iBAAiB,YAAYA,GAAE,OAAO,EAAE,UAAU,MAAM,CAAC,CAAC,EACjE,UAAU,UAAU,MAAM,GAAG,CAAC;AAEjC,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,OAAO;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,WAAW,IAAI,SAAS,IAAI,OAAO;AAE1C,MAAI,YAAY,aAAa,KAAK,IAAI,GAAG;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,QAAQ,KAAK,IAAI,EAAE,QAAQ,SAAS,OAAO,CAAC;AAElE,MAAI,CAAC,QAAQ,WAAW;AACtB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,EAAE,GAAG;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAGpB,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB,WAAW,OAAO,SAAS;AAAA,EAC7B,CAAC;AAED,QAAM,UAAU,QAAQ,MAAM,IAAI,eAAe;AACjD,QAAM,WAAW,OAAO,iBAAiB,OAAO;AAEhD,MAAI,CAAC,OAAO,OAAO,WAAW,aAAa,QAAQ,GAAG;AACpD,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,EACF;AACF;;;ACtzBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA;AAAA,EACE;AAAA,EACA;AAAA,OACK;;;ACNP;AAAA,EACE,mBAAAE;AAAA,EACA,UAAAC;AAAA,EACA,YAAAC;AAAA,OACK;","names":["Account","AuthSecretStorage","Account","AuthSecretStorage","cojsonInternals","cojsonInternals","cojsonInternals","z","z","cojsonInternals","cojsonInternals","logger","LogLevel"]}
+{"version":3,"sources":["../src/tools/auth/clerk/index.ts","../src/tools/auth/clerk/getClerkUsername.ts","../src/tools/auth/clerk/types.ts","../src/tools/auth/DemoAuth.ts","../src/tools/auth/PassphraseAuth.ts","../src/tools/implementation/invites.ts","../src/tools/coValues/request.ts","../src/tools/config.ts","../src/worker/JazzMessageChannel.ts","../src/tools/index.ts"],"sourcesContent":["import {\n  Account,\n  AuthCredentials,\n  AuthSecretStorage,\n  AuthenticateAccountFunction,\n} from \"jazz-tools\";\nimport { getClerkUsername } from \"./getClerkUsername.js\";\nimport {\n  ClerkCredentials,\n  ClerkEventSchema,\n  ClerkUser,\n  MinimalClerkClient,\n  isClerkAuthStateEqual,\n  isClerkCredentials,\n} from \"./types.js\";\n\nexport type { MinimalClerkClient };\nexport { isClerkCredentials };\n\nexport class JazzClerkAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private logOut: () => Promise<void> | void,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  /**\n   * Loads the Jazz auth data from the Clerk user and sets it in the auth secret storage.\n   */\n  static loadClerkAuthData(\n    credentials: ClerkCredentials,\n    storage: AuthSecretStorage,\n  ) {\n    return storage.set({\n      accountID: credentials.jazzAccountID,\n      accountSecret: credentials.jazzAccountSecret,\n      secretSeed: credentials.jazzAccountSeed\n        ? Uint8Array.from(credentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    });\n  }\n\n  static async initializeAuth(clerk: MinimalClerkClient) {\n    const secretStorage = new AuthSecretStorage();\n\n    if (!isClerkCredentials(clerk.user?.unsafeMetadata)) {\n      return;\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      clerk.user.unsafeMetadata,\n      secretStorage,\n    );\n  }\n\n  private isFirstCall = true;\n  private previousUser: Pick<ClerkUser, \"unsafeMetadata\"> | null = null;\n\n  registerListener(clerkClient: MinimalClerkClient) {\n    this.previousUser = ClerkEventSchema.parse(clerkClient).user ?? null;\n\n    // Need to use addListener because the clerk user object is not updated when the user logs in\n    return clerkClient.addListener((event) => {\n      const parsedEvent = ClerkEventSchema.safeParse(event);\n\n      if (!parsedEvent.success) {\n        console.error(\"Invalid Clerk event\", parsedEvent.error);\n        return;\n      }\n\n      const user = parsedEvent.data.user ?? null;\n\n      if (!isClerkAuthStateEqual(this.previousUser, user) || this.isFirstCall) {\n        this.previousUser = user;\n        this.onClerkUserChange(user);\n        this.isFirstCall = false;\n      }\n    });\n  }\n\n  onClerkUserChange = async (clerkUser: ClerkUser | null | undefined) => {\n    const isAuthenticated = this.authSecretStorage.isAuthenticated;\n\n    // LogOut is driven by Clerk. The framework adapters will need to pass `logOutReplacement` to the `JazzProvider`\n    // to make the logOut work correctly.\n    if (!clerkUser) {\n      if (isAuthenticated) {\n        this.authSecretStorage.clear();\n        await this.logOut();\n      }\n      return;\n    }\n\n    if (isAuthenticated) return;\n\n    if (!clerkUser.unsafeMetadata.jazzAccountID) {\n      await this.signIn(clerkUser);\n    } else {\n      await this.logIn(clerkUser);\n    }\n  };\n\n  logIn = async (clerkUser: ClerkUser) => {\n    const clerkCredentials = clerkUser.unsafeMetadata;\n    if (!isClerkCredentials(clerkCredentials)) {\n      throw new Error(\"No credentials found on Clerk\");\n    }\n\n    const credentials = {\n      accountID: clerkCredentials.jazzAccountID,\n      accountSecret: clerkCredentials.jazzAccountSecret,\n      secretSeed: clerkCredentials.jazzAccountSeed\n        ? Uint8Array.from(clerkCredentials.jazzAccountSeed)\n        : undefined,\n      provider: \"clerk\",\n    } satisfies AuthCredentials;\n\n    await this.authenticate(credentials);\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed: clerkCredentials.jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n\n  signIn = async (clerkUser: ClerkUser) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const jazzAccountSeed = credentials.secretSeed\n      ? Array.from(credentials.secretSeed)\n      : undefined;\n\n    const clerkCredentials = {\n      jazzAccountID: credentials.accountID,\n      jazzAccountSecret: credentials.accountSecret,\n      jazzAccountSeed,\n    };\n    // user.update will cause the Clerk user change listener to fire; updating this.previousUser beforehand\n    // ensures the listener sees the new credentials and does not trigger an unnecessary logIn operation\n    this.previousUser = { unsafeMetadata: clerkCredentials };\n\n    await clerkUser.update({\n      unsafeMetadata: clerkCredentials,\n    });\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    const username = getClerkUsername(clerkUser);\n\n    if (username) {\n      currentAccount.profile.$jazz.set(\"name\", username);\n    }\n\n    await JazzClerkAuth.loadClerkAuthData(\n      {\n        jazzAccountID: credentials.accountID,\n        jazzAccountSecret: credentials.accountSecret,\n        jazzAccountSeed,\n      },\n      this.authSecretStorage,\n    );\n  };\n}\n\n// eslint-disable-next-line @typescript-eslint/no-namespace\nexport namespace BrowserClerkAuth {\n  export interface Driver {\n    onError: (error: string | Error) => void;\n  }\n}\n","import type { ClerkUser } from \"./types.js\";\n\nexport function getClerkUsername(user: ClerkUser) {\n  if (user.fullName) {\n    return user.fullName;\n  }\n\n  if (user.firstName) {\n    if (user.lastName) {\n      return `${user.firstName} ${user.lastName}`;\n    }\n\n    return user.firstName;\n  }\n\n  if (user.username) {\n    return user.username;\n  }\n\n  if (user.primaryEmailAddress?.emailAddress) {\n    const emailUsername = user.primaryEmailAddress.emailAddress.split(\"@\")[0];\n\n    if (emailUsername) {\n      return emailUsername;\n    }\n  }\n\n  return user.id;\n}\n","import { type AgentSecret } from \"cojson\";\nimport { z } from \"zod/v4\";\n\nconst ClerkJazzCredentialsSchema = z.object({\n  jazzAccountID: z.string(),\n  jazzAccountSecret: z.string(),\n  jazzAccountSeed: z.array(z.number()).optional(),\n});\n\nconst ClerkUserSchema = z.object({\n  fullName: z.string().nullish(),\n  username: z.string().nullish(),\n  firstName: z.string().nullish(),\n  lastName: z.string().nullish(),\n  id: z.string().optional(),\n  primaryEmailAddress: z\n    .object({\n      emailAddress: z.string().nullable(),\n    })\n    .nullish(),\n  unsafeMetadata: ClerkJazzCredentialsSchema.or(z.object({})),\n  update: z.function({\n    input: [\n      z.object({\n        unsafeMetadata: ClerkJazzCredentialsSchema,\n      }),\n    ],\n    output: z.promise(z.unknown()),\n  }),\n});\n\nexport const ClerkEventSchema = z.object({\n  user: ClerkUserSchema.nullish(),\n});\nexport type ClerkEventSchema = z.infer<typeof ClerkEventSchema>;\n\nexport type ClerkUser = z.infer<typeof ClerkUserSchema>;\n\n// Need to provide a permissive type externally to accept\ntype PermissiveClerkUser = Omit<ClerkUser, \"unsafeMetadata\" | \"update\"> & {\n  unsafeMetadata: Record<string, unknown>;\n  update: (args: {\n    unsafeMetadata: Record<string, unknown>;\n  }) => Promise<unknown>;\n};\n\nexport type MinimalClerkClient = {\n  user: PermissiveClerkUser | null | undefined;\n  signOut: () => Promise<void>;\n  addListener: (listener: (data: unknown) => void) => (() => void) | void;\n};\n\nexport type ClerkCredentials = {\n  jazzAccountID: string;\n  jazzAccountSecret: AgentSecret;\n  jazzAccountSeed?: number[];\n};\n\n/**\n * Checks if the Clerk user metadata contains the necessary credentials for Jazz auth.\n * **Note**: It does not validate the credentials, only checks if the necessary fields are present in the metadata object.\n */\nexport function isClerkCredentials(\n  data: Record<string, unknown> | undefined,\n): data is ClerkCredentials {\n  return !!data && \"jazzAccountID\" in data && \"jazzAccountSecret\" in data;\n}\n\ntype ClerkUserWithUnsafeMetadata =\n  | Pick<ClerkUser, \"unsafeMetadata\">\n  | null\n  | undefined;\n\nexport function isClerkAuthStateEqual(\n  previousUser: ClerkUserWithUnsafeMetadata,\n  newUser: ClerkUserWithUnsafeMetadata,\n) {\n  if (Boolean(previousUser) !== Boolean(newUser)) {\n    return false;\n  }\n\n  const previousCredentials = isClerkCredentials(previousUser?.unsafeMetadata)\n    ? previousUser?.unsafeMetadata\n    : null;\n  const newCredentials = isClerkCredentials(newUser?.unsafeMetadata)\n    ? newUser?.unsafeMetadata\n    : null;\n\n  if (!previousCredentials || !newCredentials) {\n    return previousCredentials === newCredentials;\n  }\n\n  return previousCredentials.jazzAccountID === newCredentials.jazzAccountID;\n}\n","import { AgentSecret } from \"cojson\";\nimport { Account, ID } from \"../internal.js\";\nimport { AuthenticateAccountFunction } from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\nimport { KvStore, KvStoreContext } from \"./KvStoreContext.js\";\n\ntype StorageData = {\n  accountID: ID<Account>;\n  accountSecret: AgentSecret;\n  secretSeed?: number[];\n};\n\n/**\n * `DemoAuth` provides a `JazzAuth` object for demo authentication.\n *\n * Demo authentication is useful for quickly testing your app, as it allows you to create new accounts and log in as existing ones.\n *\n * ```\n * import { DemoAuth } from \"jazz-tools\";\n *\n * const auth = new DemoAuth(jazzContext.authenticate, new AuthSecretStorage());\n * ```\n *\n * @category Auth Providers\n */\nexport class DemoAuth {\n  constructor(\n    private authenticate: AuthenticateAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n  ) {}\n\n  logIn = async (username: string) => {\n    const existingUsers = await this.getExisitingUsersWithData();\n    const storageData = existingUsers[username];\n\n    if (!storageData?.accountID) {\n      throw new Error(\"User not found\");\n    }\n\n    await this.authenticate({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID: storageData.accountID,\n      accountSecret: storageData.accountSecret,\n      secretSeed: storageData.secretSeed\n        ? new Uint8Array(storageData.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n  };\n\n  signUp = async (username: string) => {\n    const existingUsers = await this.getExistingUsers();\n    if (existingUsers.includes(username)) {\n      throw new Error(\"User already registered\");\n    }\n\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n      resolve: {\n        profile: true,\n      },\n    });\n\n    currentAccount.profile.$jazz.set(\"name\", username);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? new Uint8Array(credentials.secretSeed)\n        : undefined,\n      provider: \"demo\",\n    });\n\n    await this.addToExistingUsers(username, {\n      accountID: credentials.accountID,\n      accountSecret: credentials.accountSecret,\n      secretSeed: credentials.secretSeed\n        ? Array.from(credentials.secretSeed)\n        : undefined,\n    });\n  };\n\n  private async addToExistingUsers(username: string, data: StorageData) {\n    const existingUsers = await this.getExisitingUsersWithData();\n\n    if (existingUsers[username]) {\n      return;\n    }\n\n    existingUsers[username] = data;\n\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n  }\n\n  private async getExisitingUsersWithData() {\n    const kvStore = KvStoreContext.getInstance().getStorage();\n    await migrateExistingUsers(kvStore);\n\n    const existingUsers = await kvStore.get(\"demo-auth-users\");\n    return existingUsers ? JSON.parse(existingUsers) : {};\n  }\n\n  getExistingUsers = async () => {\n    return Object.keys(await this.getExisitingUsersWithData());\n  };\n}\n\nexport function encodeUsername(username: string) {\n  return btoa(username)\n    .replace(/=/g, \"-\")\n    .replace(/\\+/g, \"_\")\n    .replace(/\\//g, \".\");\n}\n\nasync function getStorageVersion(kvStore: KvStore) {\n  try {\n    const version = await kvStore.get(\"demo-auth-storage-version\");\n    return version ? parseInt(version) : 1;\n  } catch (error) {\n    return 1;\n  }\n}\n\nasync function setStorageVersion(kvStore: KvStore, version: number) {\n  await kvStore.set(\"demo-auth-storage-version\", version.toString());\n}\n\nasync function getExistingUsersList(kvStore: KvStore) {\n  const existingUsers = await kvStore.get(\"demo-auth-existing-users\");\n  return existingUsers ? existingUsers.split(\",\") : [];\n}\n\n/**\n * Migrates existing users keys to work with any storage.\n */\nasync function migrateExistingUsers(kvStore: KvStore) {\n  if ((await getStorageVersion(kvStore)) < 2) {\n    const existingUsers = await getExistingUsersList(kvStore);\n\n    for (const username of existingUsers) {\n      const legacyKey = `demo-auth-existing-users-${username}`;\n      const storageData = await kvStore.get(legacyKey);\n      if (storageData) {\n        await kvStore.set(\n          `demo-auth-existing-users-${encodeUsername(username)}`,\n          storageData,\n        );\n        await kvStore.delete(legacyKey);\n      }\n    }\n\n    await setStorageVersion(kvStore, 2);\n  }\n\n  if ((await getStorageVersion(kvStore)) < 3) {\n    const existingUsersList = await getExistingUsersList(kvStore);\n\n    const existingUsers: Record<string, StorageData> = {};\n    const keysToDelete: string[] = [\"demo-auth-existing-users\"];\n\n    for (const username of existingUsersList) {\n      const key = `demo-auth-existing-users-${encodeUsername(username)}`;\n      const storageData = await kvStore.get(key);\n      if (storageData) {\n        existingUsers[username] = JSON.parse(storageData);\n        keysToDelete.push(key);\n      }\n    }\n\n    await kvStore.set(\"demo-auth-users\", JSON.stringify(existingUsers));\n\n    for (const key of keysToDelete) {\n      await kvStore.delete(key);\n    }\n\n    await setStorageVersion(kvStore, 3);\n  }\n}\n","import * as bip39 from \"@scure/bip39\";\nimport { entropyToMnemonic } from \"@scure/bip39\";\nimport { CryptoProvider, cojsonInternals } from \"cojson\";\nimport type { ID } from \"../internal.js\";\nimport { Account } from \"../internal.js\";\nimport type {\n  AuthenticateAccountFunction,\n  RegisterAccountFunction,\n} from \"../types.js\";\nimport { AuthSecretStorage } from \"./AuthSecretStorage.js\";\n\n/**\n * `PassphraseAuth` provides a `JazzAuth` object for passphrase authentication.\n *\n * ```ts\n * import { PassphraseAuth } from \"jazz-tools\";\n *\n * const auth = new PassphraseAuth(crypto, jazzContext.authenticate, new AuthSecretStorage(), wordlist);\n * ```\n *\n * @category Auth Providers\n */\nexport class PassphraseAuth {\n  passphrase: string = \"\";\n\n  constructor(\n    private crypto: CryptoProvider,\n    private authenticate: AuthenticateAccountFunction,\n    private register: RegisterAccountFunction,\n    private authSecretStorage: AuthSecretStorage,\n    public wordlist: string[],\n  ) {}\n\n  logIn = async (passphrase: string) => {\n    const { crypto, authenticate } = this;\n\n    let secretSeed;\n\n    try {\n      secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    } catch (e) {\n      throw new Error(\"Invalid passphrase\");\n    }\n\n    const accountSecret = crypto.agentSecretFromSecretSeed(secretSeed);\n\n    const accountID = cojsonInternals.idforHeader(\n      cojsonInternals.accountHeaderForInitialAgentSecret(accountSecret, crypto),\n      crypto,\n    ) as ID<Account>;\n\n    await authenticate({\n      accountID,\n      accountSecret,\n    });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  signUp = async (name?: string) => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    const passphrase = entropyToMnemonic(credentials.secretSeed, this.wordlist);\n\n    await this.authSecretStorage.set({\n      accountID: credentials.accountID,\n      secretSeed: credentials.secretSeed,\n      accountSecret: credentials.accountSecret,\n      provider: \"passphrase\",\n    });\n\n    if (name?.trim()) {\n      const currentAccount = await Account.getMe().$jazz.ensureLoaded({\n        resolve: {\n          profile: true,\n        },\n      });\n\n      currentAccount.profile.$jazz.set(\"name\", name);\n    }\n\n    return passphrase;\n  };\n\n  registerNewAccount = async (passphrase: string, name: string) => {\n    const secretSeed = bip39.mnemonicToEntropy(passphrase, this.wordlist);\n    const accountSecret = this.crypto.agentSecretFromSecretSeed(secretSeed);\n    const accountID = await this.register(accountSecret, { name });\n\n    await this.authSecretStorage.set({\n      accountID,\n      secretSeed,\n      accountSecret,\n      provider: \"passphrase\",\n    });\n\n    return accountID;\n  };\n\n  getCurrentAccountPassphrase = async () => {\n    const credentials = await this.authSecretStorage.get();\n\n    if (!credentials || !credentials.secretSeed) {\n      throw new Error(\"No credentials found\");\n    }\n\n    return entropyToMnemonic(credentials.secretSeed, this.wordlist);\n  };\n\n  generateRandomPassphrase = () => {\n    return entropyToMnemonic(this.crypto.newRandomSecretSeed(), this.wordlist);\n  };\n\n  loadCurrentAccountPassphrase = async () => {\n    const passphrase = await this.getCurrentAccountPassphrase();\n    this.passphrase = passphrase;\n    this.notify();\n  };\n\n  listeners = new Set<() => void>();\n  subscribe = (callback: () => void) => {\n    this.listeners.add(callback);\n\n    return () => {\n      this.listeners.delete(callback);\n    };\n  };\n\n  notify() {\n    for (const listener of this.listeners) {\n      listener();\n    }\n  }\n}\n","import { AccountRole, type InviteSecret, cojsonInternals } from \"cojson\";\nimport { Account } from \"../coValues/account.js\";\nimport type { CoValue, CoValueClassOrSchema } from \"../internal.js\";\n\n/** @category Invite Links */\nexport function createInviteLink<C extends CoValue>(\n  value: C,\n  role: AccountRole,\n  baseURL: string,\n  valueHint?: string,\n): string {\n  const coValueCore = value.$jazz.raw.core;\n  let currentCoValue = coValueCore;\n\n  while (currentCoValue.verified.header.ruleset.type === \"ownedByGroup\") {\n    currentCoValue = currentCoValue.getGroup().core;\n  }\n\n  const { ruleset, meta } = currentCoValue.verified.header;\n\n  if (ruleset.type !== \"group\" || meta?.type === \"account\") {\n    throw new Error(\"Can't create invite link for object without group\");\n  }\n\n  const group = cojsonInternals.expectGroup(currentCoValue.getCurrentContent());\n  const inviteSecret = group.createInvite(role);\n\n  return `${baseURL}#/invite/${valueHint ? valueHint + \"/\" : \"\"}${\n    value.$jazz.id\n  }/${inviteSecret}`;\n}\n\n/** @category Invite Links */\nexport function parseInviteLink(inviteURL: string):\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined {\n  const url = new URL(inviteURL);\n  const parts = url.hash.split(\"/\");\n\n  let valueHint: string | undefined;\n  let valueID: string | undefined;\n  let inviteSecret: InviteSecret | undefined;\n\n  if (parts[0] === \"#\" && parts[1] === \"invite\") {\n    if (parts.length === 5) {\n      valueHint = parts[2];\n      valueID = parts[3];\n      inviteSecret = parts[4] as InviteSecret;\n    } else if (parts.length === 4) {\n      valueID = parts[2];\n      inviteSecret = parts[3] as InviteSecret;\n    }\n\n    if (!valueID || !inviteSecret) {\n      return undefined;\n    }\n    return { valueID, inviteSecret, valueHint };\n  }\n}\n\n/** @category Invite Links */\nexport function consumeInviteLink<S extends CoValueClassOrSchema>({\n  inviteURL,\n  as = Account.getMe(),\n  forValueHint,\n  invitedObjectSchema,\n}: {\n  inviteURL: string;\n  as?: Account;\n  forValueHint?: string;\n  invitedObjectSchema: S;\n}): Promise<\n  | {\n      valueID: string;\n      valueHint?: string;\n      inviteSecret: InviteSecret;\n    }\n  | undefined\n> {\n  return new Promise((resolve, reject) => {\n    const result = parseInviteLink(inviteURL);\n\n    if (result && result.valueHint === forValueHint) {\n      as.acceptInvite(result.valueID, result.inviteSecret, invitedObjectSchema)\n        .then(() => {\n          resolve(result);\n        })\n        .catch(reject);\n    } else {\n      resolve(undefined);\n    }\n  });\n}\n","import {\n  CoValueCore,\n  CojsonInternalTypes,\n  CryptoProvider,\n  RawAccount,\n  RawCoMap,\n  cojsonInternals,\n} from \"cojson\";\nimport z from \"zod/v4\";\nimport {\n  AnyZodOrCoValueSchema,\n  CoMap,\n  CoMapSchema,\n  CoMapSchemaInit,\n  CoValueClass,\n  CoreCoMapSchema,\n  Group,\n  Loaded,\n  ResolveQuery,\n  ResolveQueryStrict,\n  Simplify,\n  coMapDefiner,\n  coValueClassFromCoValueClassOrSchema,\n  exportCoValue,\n  importContentPieces,\n  loadCoValue,\n} from \"../internal.js\";\nimport { isCoValueId } from \"../lib/utils.js\";\nimport { Account } from \"./account.js\";\n\ntype MessageShape = Record<string, AnyZodOrCoValueSchema>;\n\ntype RequestSchemaDefinition<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>> = true,\n> =\n  | S\n  | {\n      schema: S;\n      resolve?: R;\n    };\n\n/**\n * Configuration options for defining HTTP request/response schemas in Jazz.\n *\n * This interface defines the structure for creating typed HTTP routes with\n * request and response validation using CoMap schemas.\n *\n * @template RequestShape - The shape of the request message schema (must extend MessageShape)\n * @template RequestResolve - The resolve query type for the request CoMap schema\n * @template ResponseShape - The shape of the response message schema (must extend MessageShape)\n * @template ResponseResolve - The resolve query type for the response CoMap schema\n */\ninterface RequestOptions<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n> {\n  /**\n   * The URL endpoint for the HTTP route.\n   * This is used by the client to send requests to the server.\n   */\n  url: string;\n\n  /**\n   * The id of the worker Account or Group.\n   */\n  workerId: string;\n\n  /**\n   * Schema definition for the request payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for incoming requests.\n   */\n  request: RequestSchemaDefinition<\n    RequestShape,\n    ResolveQueryStrict<CoMapSchema<RequestShape>, RequestResolve>\n  >;\n\n  /**\n   * Schema definition for the response payload.\n   * Can be either a direct schema object or an object with schema and optional resolve properties.\n   * The schema defines the structure and validation rules for outgoing responses.\n   */\n  response: RequestSchemaDefinition<\n    ResponseShape,\n    ResolveQueryStrict<CoMapSchema<ResponseShape>, ResponseResolve>\n  >;\n}\n\ntype AsNullablePayload<T extends MessageShape> = T extends Record<string, never>\n  ? undefined\n  : never;\ntype MessageValuePayload<T extends MessageShape> =\n  | Simplify<CoMapSchemaInit<T>>\n  | AsNullablePayload<T>;\n\nfunction createMessageEnvelope<S extends MessageShape>(\n  schema: CoreCoMapSchema,\n  value: MessageValuePayload<S>,\n  owner: Account,\n  sharedWith: Account | Group,\n  type: \"request\" | \"response\",\n): Loaded<CoMapSchema<S>> {\n  const group = Group.create({ owner });\n\n  if (type === \"request\") {\n    group.addMember(sharedWith, \"writer\");\n  } else {\n    group.addMember(sharedWith, \"reader\");\n  }\n\n  // @ts-expect-error - CoreCoMapSchema doesn't have static methods\n  return schema.create(value ?? {}, group);\n}\n\n/**\n * Function that exports the input CoValue in a serializable format and prepares the information\n * required for the other side to safely verify the identity of the sender.\n */\nasync function serializeMessagePayload({\n  type,\n  schema,\n  resolve,\n  value,\n  owner,\n  target,\n}: {\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  type: \"request\" | \"response\";\n  schema: CoreCoMapSchema;\n  resolve: any;\n  value: any;\n  owner: Account;\n  target: Account | Group;\n}) {\n  const me = owner ?? Account.getMe();\n  const node = me.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerID = agent.currentSignerID();\n  const signerSecret = agent.currentSignerSecret();\n\n  const envelope = createMessageEnvelope(schema, value, me, target, type);\n\n  const contentPieces =\n    (await exportCoValue(schema, envelope.$jazz.id, {\n      resolve,\n      loadAs: me,\n      bestEffortResolution: true,\n    })) ?? [];\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    signerID,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return {\n    contentPieces,\n    id: envelope.$jazz.id,\n    createdAt,\n    authToken,\n    signerID,\n  };\n}\n\nconst coIdSchema = z.custom<`co_z${string}`>(isCoValueId);\nconst signatureSchema = z.custom<`signature_z${string}`>(\n  (value) => typeof value === \"string\" && value.startsWith(\"signature_z\"),\n);\n\nconst requestSchema = z.object({\n  contentPieces: z.array(z.json()),\n  id: coIdSchema,\n  createdAt: z.number(),\n  authToken: signatureSchema,\n  signerID: z.custom<`signer_z${string}`>(\n    (value) => typeof value === \"string\" && value.startsWith(\"signer_z\"),\n  ),\n});\n\n/**\n * Function that parses the message payload, verifies the identity of the sender and loads the data.\n *\n * @returns The data from the message.\n */\nasync function handleMessagePayload({\n  type,\n  schema,\n  resolve,\n  request,\n  loadAs,\n}: {\n  type: \"request\" | \"response\";\n  // Skipping type validation here to avoid excessive type complexity that affects the typecheck performance\n  schema: CoreCoMapSchema;\n  resolve: any;\n  request: unknown;\n  loadAs: Account;\n}) {\n  const node = loadAs.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const requestParsed = requestSchema.safeParse(request);\n\n  if (!requestParsed.success) {\n    throw new JazzRequestError(\n      \"Request payload is not valid\",\n      400,\n      requestParsed.error,\n    );\n  }\n\n  const requestData = requestParsed.data;\n\n  if (type === \"request\") {\n    const core = await node.loadCoValueCore(requestData.id, undefined, true);\n\n    // Check if the message has already been handled to prevent replay attacks\n    if (core.isAvailable()) {\n      const content = core.getCurrentContent() as RawCoMap;\n\n      if (content.get(\"$handled\") === loadAs.$jazz.id) {\n        throw new JazzRequestError(\"Request payload is already handled\", 400);\n      }\n    }\n\n    // Check if the message is expired as extra protection\n    if (requestData.createdAt + 1000 * 60 < Date.now()) {\n      throw new JazzRequestError(\"Authentication token is expired\", 401);\n    }\n  }\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    contentPieces: requestData.contentPieces,\n    id: requestData.id,\n    createdAt: requestData.createdAt,\n    signerID: requestData.signerID,\n  });\n\n  if (\n    !safeVerifySignature(\n      crypto,\n      signPayload,\n      requestData.signerID,\n      requestData.authToken,\n    )\n  ) {\n    throw new JazzRequestError(\"Invalid signature\", 401);\n  }\n\n  let contentPieces =\n    requestData.contentPieces as CojsonInternalTypes.NewContentMessage[];\n\n  if (type === \"request\") {\n    const coValueContent = contentPieces.find(\n      (piece) => piece.id === requestData.id,\n    );\n\n    if (coValueContent && coValueContent.header) {\n      const validValues = cojsonInternals.getDependedOnCoValues(\n        coValueContent.header,\n        coValueContent,\n      );\n      validValues.add(requestData.id);\n      contentPieces = contentPieces.filter((piece) =>\n        validValues.has(piece.id),\n      );\n    } else {\n      contentPieces = [];\n    }\n  }\n\n  importContentPieces(contentPieces, loadAs);\n\n  const coValue = await node.loadCoValueCore(requestData.id);\n  const accountId = getCoValueCreatorAccountId(coValue);\n\n  const madeBy = await Account.load(accountId, {\n    loadAs,\n  });\n\n  if (!madeBy.$isLoaded) {\n    throw new JazzRequestError(\"Creator account not found\", 400);\n  }\n\n  const coSchema = coValueClassFromCoValueClassOrSchema(\n    schema,\n  ) as CoValueClass<CoMap>;\n  const value = await loadCoValue<CoMap, true>(coSchema, requestData.id, {\n    resolve,\n    loadAs,\n  });\n\n  if (!value.$isLoaded) {\n    throw new JazzRequestError(\"Value not found\", 400);\n  }\n\n  if (type === \"request\") {\n    value.$jazz.raw.set(\"$handled\", loadAs.$jazz.id);\n  }\n\n  return {\n    value: value as unknown,\n    madeBy,\n  };\n}\n\nfunction parseSchemaAndResolve<\n  S extends MessageShape,\n  R extends ResolveQuery<CoMapSchema<S>>,\n>(options: RequestSchemaDefinition<S, R>) {\n  if (\"schema\" in options) {\n    return {\n      // Using a type cast to reduce the type complexity\n      schema: coMapDefiner(options.schema) as CoreCoMapSchema,\n      resolve: options.resolve as any,\n    };\n  }\n\n  return {\n    schema: coMapDefiner(options) as CoreCoMapSchema,\n    resolve: true as any,\n  };\n}\n\nexport class HttpRoute<\n  RequestShape extends MessageShape = z.core.$ZodLooseShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>> = any,\n  ResponseShape extends MessageShape = z.core.$ZodLooseShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>> = any,\n> {\n  private requestDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private responseDefinition: {\n    schema: CoreCoMapSchema;\n    resolve: any;\n  };\n  private url: string;\n  private workerId: string;\n\n  constructor(\n    params: RequestOptions<\n      RequestShape,\n      RequestResolve,\n      ResponseShape,\n      ResponseResolve\n    >,\n  ) {\n    this.requestDefinition = parseSchemaAndResolve(params.request);\n    this.responseDefinition = parseSchemaAndResolve(params.response);\n    this.url = params.url;\n    this.workerId = params.workerId;\n\n    if (params.workerId === undefined) {\n      throw new TypeError(\"Worker ID is required\");\n    }\n  }\n\n  async send(\n    values: MessageValuePayload<RequestShape>,\n    options?: { owner?: Account },\n  ): Promise<Loaded<CoMapSchema<ResponseShape>, ResponseResolve>> {\n    const as = options?.owner ?? Account.getMe();\n\n    const target = await loadWorkerAccountOrGroup(this.workerId, as);\n\n    const response = await fetch(this.url, {\n      method: \"POST\",\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n      body: JSON.stringify(\n        await serializeMessagePayload({\n          type: \"request\",\n          schema: this.requestDefinition.schema,\n          resolve: true, // export only the envelope\n          value: values,\n          owner: as,\n          target,\n        }),\n      ),\n    });\n\n    if (!response.ok) {\n      if (response.headers.has(\"X-Jazz-Request-Error\")) {\n        const error = await response.json();\n        throw new JazzRequestError(error.message, error.code, error.details);\n      }\n\n      throw new JazzRequestError(\"Request failed\", response.status);\n    }\n\n    const responseBody = await response.json();\n\n    const responseParsed = z\n      .object({\n        type: z.literal(\"success\"),\n        payload: z.any(),\n      })\n      .safeParse(responseBody);\n\n    if (!responseParsed.success) {\n      throw new JazzRequestError(\n        \"Response payload is not valid\",\n        400,\n        responseParsed.error,\n      );\n    }\n\n    const data = await handleMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      request: responseParsed.data.payload,\n      loadAs: as,\n    });\n\n    return data.value as Loaded<CoMapSchema<ResponseShape>, ResponseResolve>;\n  }\n\n  handle = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    try {\n      const response = await this.executeHandleRequest(request, as, callback);\n      return response;\n    } catch (error) {\n      // Serialize the error to make it possible to handle it on the client side\n      if (isJazzRequestError(error)) {\n        return new Response(JSON.stringify(error.toJSON()), {\n          status: error.code,\n          headers: {\n            \"Content-Type\": \"application/json\",\n            \"X-Jazz-Request-Error\": \"true\",\n          },\n        });\n      }\n\n      throw error;\n    }\n  };\n\n  executeHandleRequest = async (\n    request: Request,\n    as: Account,\n    callback: (\n      value: Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      madeBy: Account,\n    ) =>\n      | Promise<MessageValuePayload<ResponseShape>>\n      | MessageValuePayload<ResponseShape>,\n  ): Promise<Response> => {\n    const node = as.$jazz.localNode;\n    const body = await request.json();\n    const data = await handleMessagePayload({\n      type: \"request\",\n      schema: this.requestDefinition.schema,\n      resolve: this.requestDefinition.resolve,\n      request: body,\n      loadAs: as,\n    });\n\n    const tracking = node.syncManager.trackDirtyCoValues();\n\n    const responseValue = await callback(\n      data.value as Loaded<CoMapSchema<RequestShape>, RequestResolve>,\n      data.madeBy,\n    );\n\n    const responsePayload = await serializeMessagePayload({\n      type: \"response\",\n      schema: this.responseDefinition.schema,\n      resolve: this.responseDefinition.resolve,\n      value: responseValue,\n      owner: as,\n      target: data.madeBy,\n    });\n\n    const responseBody = JSON.stringify({\n      type: \"success\",\n      payload: responsePayload,\n    });\n\n    // TODO: Detect the defer support from the environment\n    await Promise.all(\n      Array.from(tracking.done(), (id) => node.syncManager.waitForSync(id)),\n    );\n\n    return new Response(responseBody, {\n      status: 200,\n      headers: {\n        \"Content-Type\": \"application/json\",\n      },\n    });\n  };\n\n  get requestSchema(): CoMapSchema<RequestShape> {\n    return this.requestDefinition.schema as CoMapSchema<RequestShape>;\n  }\n\n  get responseSchema() {\n    return this.responseDefinition.schema as CoMapSchema<ResponseShape>;\n  }\n}\n\n/**\n * Define a request route.\n *\n * @param params - The parameters for the request route.\n * @returns The request route.\n *\n * @see {@link https://jazz.tools/docs/react/server-side/http-requests}\n */\nexport function experimental_defineRequest<\n  RequestShape extends MessageShape,\n  RequestResolve extends ResolveQuery<CoMapSchema<RequestShape>>,\n  ResponseShape extends MessageShape,\n  ResponseResolve extends ResolveQuery<CoMapSchema<ResponseShape>>,\n>(\n  params: RequestOptions<\n    RequestShape,\n    RequestResolve,\n    ResponseShape,\n    ResponseResolve\n  >,\n) {\n  return new HttpRoute(params);\n}\n\nfunction getCoValueCreatorAccountId(coValue: CoValueCore) {\n  if (!coValue.isAvailable()) {\n    throw new Error(\"Unable to load the request payload\");\n  }\n\n  const creatorSessionId = coValue.getValidSortedTransactions().at(0)\n    ?.txID.sessionID;\n\n  if (!creatorSessionId) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, creator session ID not found\",\n      400,\n    );\n  }\n\n  const accountId =\n    cojsonInternals.accountOrAgentIDfromSessionID(creatorSessionId);\n\n  if (!isCoValueId(accountId)) {\n    throw new JazzRequestError(\n      \"Request payload is not valid, the creator is not a valid account\",\n      400,\n    );\n  }\n\n  return accountId;\n}\n\nexport class JazzRequestError {\n  public readonly isJazzRequestError = true;\n\n  constructor(\n    public readonly message: string,\n    public readonly code: number,\n    public readonly details?: unknown,\n  ) {}\n\n  toJSON() {\n    return { message: this.message, code: this.code, details: this.details };\n  }\n}\n\nexport function isJazzRequestError(error: unknown): error is JazzRequestError {\n  return (\n    error instanceof JazzRequestError ||\n    (typeof error === \"object\" &&\n      error !== null &&\n      \"isJazzRequestError\" in error &&\n      Boolean(error.isJazzRequestError))\n  );\n}\n\nfunction safeVerifySignature(\n  crypto: CryptoProvider,\n  signPayload: `hash_z${string}`,\n  signerID: `signer_z${string}`,\n  authToken: `signature_z${string}`,\n) {\n  try {\n    return crypto.verify(authToken, signPayload, signerID);\n  } catch (error) {\n    return false;\n  }\n}\n\nasync function loadWorkerAccountOrGroup(id: string, loadAs: Account) {\n  const node = loadAs.$jazz.localNode;\n  const coValue = await node.loadCoValueCore(id as `co_z${string}`);\n\n  if (!coValue.isAvailable()) {\n    throw new JazzRequestError(\"Worker account not found\", 400);\n  }\n\n  const content = coValue.getCurrentContent();\n\n  if (content instanceof RawAccount) {\n    const account = await Account.load(content.id, {\n      loadAs,\n    });\n    if (!account.$isLoaded) {\n      throw new JazzRequestError(\"Worker account not found\", 400);\n    }\n    return account;\n  }\n\n  const group = await Group.load(content.id, {\n    loadAs,\n  });\n\n  if (!group.$isLoaded) {\n    throw new JazzRequestError(\"Worker group not found\", 400);\n  }\n  return group;\n}\n\nfunction defaultGetToken(request: Request) {\n  const headerValue = request.headers.get(\"Authorization\");\n  if (headerValue?.startsWith(\"Jazz \")) {\n    return headerValue.replace(\"Jazz \", \"\");\n  }\n\n  if (headerValue) {\n    console.warn(\n      \"An Authorization header was found, but it did not start with 'Jazz '. If this is intentional, you can specify the location of the token using the `getToken` option.\",\n    );\n  }\n\n  return undefined;\n}\n\n/**\n * Authenticates a Request by verifying a signed authentication token.\n *\n * - If a token is not provided, the returned account is `undefined` and no error is returned.\n * - If a valid token is provided, the signer account is returned.\n * - If an invalid token is provided, an error is returned detailing the validation error, and the returned account is `undefined`.\n *\n * @see {@link generateAuthToken} for generating a token.\n *\n * Note: This function does not perform any authorization checks, it only verifies if - **when provided** - a token is valid. It is up to the caller to perform any additional authorization checks, if needed.\n *\n * @param request - The request to authenticate.\n * @param options - The options for the authentication.\n * @param options.expiration - The expiration time of the token in milliseconds, defaults to 1 minute.\n * @param options.loadAs - The account to load the token from, defaults to the current active account.\n * @param options.getToken - If specified, this function will be used to get the token from the request. By default the token is expected to be in the `Authorization` header in the form of `Jazz <token>`.\n * @returns The account if it is valid, otherwise an error.\n *\n * @example\n * ```ts\n * const { account, error } = await authenticateRequest(request);\n * if (error) {\n *   return new Response(JSON.stringify(error), { status: 401 });\n * }\n * ```\n */\nexport async function authenticateRequest(\n  request: Request,\n  options?: {\n    expiration?: number;\n    loadAs?: Account;\n    getToken?: (request: Request) => string | undefined | null;\n  },\n): Promise<\n  | {\n      account?: Account;\n      error?: never;\n    }\n  | {\n      account?: never;\n      error: { message: string; details?: unknown };\n    }\n> {\n  const token = options?.getToken?.(request) ?? defaultGetToken(request);\n\n  if (!token) {\n    return {};\n  }\n\n  const { account, error } = await parseAuthToken(token, {\n    loadAs: options?.loadAs,\n    expiration: options?.expiration ?? 1000 * 60,\n  });\n\n  if (error) {\n    return { error };\n  }\n\n  return { account, error };\n}\n\n/**\n * Generates an authentication token for a given account. This token can be used to authenticate a request. See {@link authenticateRequest} for more details.\n *\n * @param as - The account to generate the token for, defaults to the current active account.\n * @returns The authentication token.\n *\n * @example Make a fetch request with the token\n * ```ts\n * const token = generateAuthToken();\n * const response = await fetch(url, {\n *   headers: {\n *     Authorization: `Jazz ${token}`,\n *   },\n * });\n * ```\n */\n\nexport function generateAuthToken(as?: Account) {\n  const account = as ?? Account.getMe();\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  const agent = node.getCurrentAgent();\n  const signerSecret = agent.currentSignerSecret();\n\n  const createdAt = Date.now();\n\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt,\n  });\n\n  const authToken = crypto.sign(signerSecret, signPayload);\n\n  return `${authToken}~${account.$jazz.id}~${createdAt}`;\n}\n\nexport async function parseAuthToken(\n  authToken: string,\n  options?: { loadAs?: Account; expiration?: number },\n): Promise<\n  | { account: Account; error?: never }\n  | { account?: never; error: { message: string; details?: unknown } }\n> {\n  const expiration = options?.expiration ?? 1_000 * 60; // 1 minute\n\n  const parsed = z\n    .tuple([signatureSchema, coIdSchema, z.string().transform(Number)])\n    .safeParse(authToken.split(\"~\"));\n\n  if (!parsed.success) {\n    return {\n      error: {\n        message: \"Invalid token\",\n        details: parsed.error,\n      },\n    };\n  }\n\n  const [signature, id, createdAt] = parsed.data;\n\n  if (createdAt + expiration < Date.now()) {\n    return {\n      error: {\n        message: \"Token expired\",\n      },\n    };\n  }\n\n  const account = await Account.load(id, { loadAs: options?.loadAs });\n\n  if (!account.$isLoaded) {\n    return {\n      error: {\n        message: \"Failed to load account\",\n        details: { id },\n      },\n    };\n  }\n\n  const node = account.$jazz.localNode;\n  const crypto = node.crypto;\n\n  // Verify the signature of the message to prevent tampering\n  const signPayload = crypto.secureHash({\n    id: account.$jazz.id,\n    createdAt: Number(createdAt),\n  });\n\n  const agentID = account.$jazz.raw.currentAgentID();\n  const signerID = crypto.getAgentSignerID(agentID);\n\n  if (!crypto.verify(signature, signPayload, signerID)) {\n    return {\n      error: {\n        message: \"Invalid signature\",\n      },\n    };\n  }\n\n  return {\n    account,\n  };\n}\n","export {\n  setCustomErrorReporter,\n  enableCaptureErrorCause,\n} from \"./subscribe/errorReporting.js\";\n\nexport {\n  logger,\n  LogLevel,\n} from \"cojson\";\n","import { CojsonMessageChannel, type Peer } from \"cojson\";\nimport type {\n  WaitForConnectionOptions,\n  ExposeOptions,\n  PostMessageTarget,\n} from \"cojson/src/CojsonMessageChannel/types.js\";\nimport { Account, AnonymousJazzAgent } from \"jazz-tools\";\nimport { activeAccountContext } from \"../tools/implementation/activeAccountContext.js\";\n\n/**\n * Options for JazzMessageChannel.expose()\n */\nexport interface JazzMessageChannelExposeOptions extends ExposeOptions {\n  /**\n   * The account or anonymous agent to use for the connection.\n   * If not provided, falls back to the active account context.\n   */\n  loadAs?: Account | AnonymousJazzAgent;\n}\n\n/**\n * JazzMessageChannel provides a high-level API for creating Jazz connections\n * via the MessageChannel API. It wraps cojson's CojsonMessageChannel and\n * automatically manages the node connection.\n */\nexport class JazzMessageChannel {\n  /**\n   * Expose a Jazz connection to a target.\n   * This is the host-side API, typically called from the main thread.\n   *\n   * @param target - Any object with a postMessage method (Worker, Window, etc.)\n   * @param opts - Configuration options including the account to use\n   * @returns A promise that resolves once the connection is established\n   */\n  static async expose(\n    target: PostMessageTarget,\n    opts: JazzMessageChannelExposeOptions = {},\n  ): Promise<void> {\n    const { loadAs, ...cojsonOpts } = opts;\n\n    // Get account from loadAs or fall back to active account context\n    const accountOrAgent = loadAs ?? activeAccountContext.maybeGet();\n\n    if (!accountOrAgent) {\n      throw new Error(\n        \"No account provided and no active account context available\",\n      );\n    }\n\n    const node =\n      accountOrAgent instanceof AnonymousJazzAgent\n        ? accountOrAgent.node\n        : accountOrAgent.$jazz.localNode;\n\n    const peer = await CojsonMessageChannel.expose(target, cojsonOpts);\n\n    node.syncManager.addPeer(peer);\n  }\n\n  /**\n   * Accept an incoming Jazz connection.\n   * Same as cojson CojsonMessageChannel.waitForConnection().\n   */\n  static waitForConnection(opts?: WaitForConnectionOptions): Promise<Peer> {\n    return CojsonMessageChannel.waitForConnection(opts);\n  }\n}\n\n// Re-export types for convenience\nexport type {\n  WaitForConnectionOptions,\n  AcceptFromPortOptions,\n} from \"cojson/src/CojsonMessageChannel/types.js\";\n","export * from \"./exports.js\";\n\nexport {\n  cojsonInternals,\n  logger,\n  LogLevel,\n} from \"cojson\";\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA,EACE,WAAAA;AAAA,EAEA,qBAAAC;AAAA,OAEK;;;ACHA,SAAS,iBAAiB,MAAiB;AAChD,MAAI,KAAK,UAAU;AACjB,WAAO,KAAK;AAAA,EACd;AAEA,MAAI,KAAK,WAAW;AAClB,QAAI,KAAK,UAAU;AACjB,aAAO,GAAG,KAAK,SAAS,IAAI,KAAK,QAAQ;AAAA,IAC3C;AAEA,WAAO,KAAK;AAAA,EACd;AAEA,MAAI,KAAK,UAAU;AACjB,WAAO,KAAK;AAAA,EACd;AAEA,MAAI,KAAK,qBAAqB,cAAc;AAC1C,UAAM,gBAAgB,KAAK,oBAAoB,aAAa,MAAM,GAAG,EAAE,CAAC;AAExE,QAAI,eAAe;AACjB,aAAO;AAAA,IACT;AAAA,EACF;AAEA,SAAO,KAAK;AACd;;;AC3BA,SAAS,SAAS;AAElB,IAAM,6BAA6B,EAAE,OAAO;AAAA,EAC1C,eAAe,EAAE,OAAO;AAAA,EACxB,mBAAmB,EAAE,OAAO;AAAA,EAC5B,iBAAiB,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS;AAChD,CAAC;AAED,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,UAAU,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,UAAU,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,WAAW,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC9B,UAAU,EAAE,OAAO,EAAE,QAAQ;AAAA,EAC7B,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,EACxB,qBAAqB,EAClB,OAAO;AAAA,IACN,cAAc,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,CAAC,EACA,QAAQ;AAAA,EACX,gBAAgB,2BAA2B,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AAAA,EAC1D,QAAQ,EAAE,SAAS;AAAA,IACjB,OAAO;AAAA,MACL,EAAE,OAAO;AAAA,QACP,gBAAgB;AAAA,MAClB,CAAC;AAAA,IACH;AAAA,IACA,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC;AAAA,EAC/B,CAAC;AACH,CAAC;AAEM,IAAM,mBAAmB,EAAE,OAAO;AAAA,EACvC,MAAM,gBAAgB,QAAQ;AAChC,CAAC;AA6BM,SAAS,mBACd,MAC0B;AAC1B,SAAO,CAAC,CAAC,QAAQ,mBAAmB,QAAQ,uBAAuB;AACrE;AAOO,SAAS,sBACd,cACA,SACA;AACA,MAAI,QAAQ,YAAY,MAAM,QAAQ,OAAO,GAAG;AAC9C,WAAO;AAAA,EACT;AAEA,QAAM,sBAAsB,mBAAmB,cAAc,cAAc,IACvE,cAAc,iBACd;AACJ,QAAM,iBAAiB,mBAAmB,SAAS,cAAc,IAC7D,SAAS,iBACT;AAEJ,MAAI,CAAC,uBAAuB,CAAC,gBAAgB;AAC3C,WAAO,wBAAwB;AAAA,EACjC;AAEA,SAAO,oBAAoB,kBAAkB,eAAe;AAC9D;;;AF1EO,IAAM,gBAAN,MAAM,eAAc;AAAA,EACzB,YACU,cACA,QACA,mBACR;AAHQ;AACA;AACA;AAiCV,SAAQ,cAAc;AACtB,SAAQ,eAAyD;AAwBjE,6BAAoB,OAAO,cAA4C;AACrE,YAAM,kBAAkB,KAAK,kBAAkB;AAI/C,UAAI,CAAC,WAAW;AACd,YAAI,iBAAiB;AACnB,eAAK,kBAAkB,MAAM;AAC7B,gBAAM,KAAK,OAAO;AAAA,QACpB;AACA;AAAA,MACF;AAEA,UAAI,gBAAiB;AAErB,UAAI,CAAC,UAAU,eAAe,eAAe;AAC3C,cAAM,KAAK,OAAO,SAAS;AAAA,MAC7B,OAAO;AACL,cAAM,KAAK,MAAM,SAAS;AAAA,MAC5B;AAAA,IACF;AAEA,iBAAQ,OAAO,cAAyB;AACtC,YAAM,mBAAmB,UAAU;AACnC,UAAI,CAAC,mBAAmB,gBAAgB,GAAG;AACzC,cAAM,IAAI,MAAM,+BAA+B;AAAA,MACjD;AAEA,YAAM,cAAc;AAAA,QAClB,WAAW,iBAAiB;AAAA,QAC5B,eAAe,iBAAiB;AAAA,QAChC,YAAY,iBAAiB,kBACzB,WAAW,KAAK,iBAAiB,eAAe,IAChD;AAAA,QACJ,UAAU;AAAA,MACZ;AAEA,YAAM,KAAK,aAAa,WAAW;AAEnC,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B,iBAAiB,iBAAiB;AAAA,QACpC;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAEA,kBAAS,OAAO,cAAyB;AACvC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,kBAAkB,YAAY,aAChC,MAAM,KAAK,YAAY,UAAU,IACjC;AAEJ,YAAM,mBAAmB;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,mBAAmB,YAAY;AAAA,QAC/B;AAAA,MACF;AAGA,WAAK,eAAe,EAAE,gBAAgB,iBAAiB;AAEvD,YAAM,UAAU,OAAO;AAAA,QACrB,gBAAgB;AAAA,MAClB,CAAC;AAED,YAAM,iBAAiB,MAAMC,SAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,YAAM,WAAW,iBAAiB,SAAS;AAE3C,UAAI,UAAU;AACZ,uBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAAA,MACnD;AAEA,YAAM,eAAc;AAAA,QAClB;AAAA,UACE,eAAe,YAAY;AAAA,UAC3B,mBAAmB,YAAY;AAAA,UAC/B;AAAA,QACF;AAAA,QACA,KAAK;AAAA,MACP;AAAA,IACF;AAAA,EAtJG;AAAA;AAAA;AAAA;AAAA,EAKH,OAAO,kBACL,aACA,SACA;AACA,WAAO,QAAQ,IAAI;AAAA,MACjB,WAAW,YAAY;AAAA,MACvB,eAAe,YAAY;AAAA,MAC3B,YAAY,YAAY,kBACpB,WAAW,KAAK,YAAY,eAAe,IAC3C;AAAA,MACJ,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,eAAe,OAA2B;AACrD,UAAM,gBAAgB,IAAIC,mBAAkB;AAE5C,QAAI,CAAC,mBAAmB,MAAM,MAAM,cAAc,GAAG;AACnD;AAAA,IACF;AAEA,UAAM,eAAc;AAAA,MAClB,MAAM,KAAK;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAAA,EAKA,iBAAiB,aAAiC;AAChD,SAAK,eAAe,iBAAiB,MAAM,WAAW,EAAE,QAAQ;AAGhE,WAAO,YAAY,YAAY,CAAC,UAAU;AACxC,YAAM,cAAc,iBAAiB,UAAU,KAAK;AAEpD,UAAI,CAAC,YAAY,SAAS;AACxB,gBAAQ,MAAM,uBAAuB,YAAY,KAAK;AACtD;AAAA,MACF;AAEA,YAAM,OAAO,YAAY,KAAK,QAAQ;AAEtC,UAAI,CAAC,sBAAsB,KAAK,cAAc,IAAI,KAAK,KAAK,aAAa;AACvE,aAAK,eAAe;AACpB,aAAK,kBAAkB,IAAI;AAC3B,aAAK,cAAc;AAAA,MACrB;AAAA,IACF,CAAC;AAAA,EACH;AAgGF;;;AGtJO,IAAM,WAAN,MAAe;AAAA,EACpB,YACU,cACA,mBACR;AAFQ;AACA;AAGV,iBAAQ,OAAO,aAAqB;AAClC,YAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAC3D,YAAM,cAAc,cAAc,QAAQ;AAE1C,UAAI,CAAC,aAAa,WAAW;AAC3B,cAAM,IAAI,MAAM,gBAAgB;AAAA,MAClC;AAEA,YAAM,KAAK,aAAa;AAAA,QACtB,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,MAC7B,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AAEA,kBAAS,OAAO,aAAqB;AACnC,YAAM,gBAAgB,MAAM,KAAK,iBAAiB;AAClD,UAAI,cAAc,SAAS,QAAQ,GAAG;AACpC,cAAM,IAAI,MAAM,yBAAyB;AAAA,MAC3C;AAEA,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,aAAa;AAChB,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,QAC9D,SAAS;AAAA,UACP,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AAED,qBAAe,QAAQ,MAAM,IAAI,QAAQ,QAAQ;AAEjD,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,IAAI,WAAW,YAAY,UAAU,IACrC;AAAA,QACJ,UAAU;AAAA,MACZ,CAAC;AAED,YAAM,KAAK,mBAAmB,UAAU;AAAA,QACtC,WAAW,YAAY;AAAA,QACvB,eAAe,YAAY;AAAA,QAC3B,YAAY,YAAY,aACpB,MAAM,KAAK,YAAY,UAAU,IACjC;AAAA,MACN,CAAC;AAAA,IACH;AAuBA,4BAAmB,YAAY;AAC7B,aAAO,OAAO,KAAK,MAAM,KAAK,0BAA0B,CAAC;AAAA,IAC3D;AAAA,EAtFG;AAAA,EA+DH,MAAc,mBAAmB,UAAkB,MAAmB;AACpE,UAAM,gBAAgB,MAAM,KAAK,0BAA0B;AAE3D,QAAI,cAAc,QAAQ,GAAG;AAC3B;AAAA,IACF;AAEA,kBAAc,QAAQ,IAAI;AAE1B,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAAA,EACpE;AAAA,EAEA,MAAc,4BAA4B;AACxC,UAAM,UAAU,eAAe,YAAY,EAAE,WAAW;AACxD,UAAM,qBAAqB,OAAO;AAElC,UAAM,gBAAgB,MAAM,QAAQ,IAAI,iBAAiB;AACzD,WAAO,gBAAgB,KAAK,MAAM,aAAa,IAAI,CAAC;AAAA,EACtD;AAKF;AAEO,SAAS,eAAe,UAAkB;AAC/C,SAAO,KAAK,QAAQ,EACjB,QAAQ,MAAM,GAAG,EACjB,QAAQ,OAAO,GAAG,EAClB,QAAQ,OAAO,GAAG;AACvB;AAEA,eAAe,kBAAkB,SAAkB;AACjD,MAAI;AACF,UAAM,UAAU,MAAM,QAAQ,IAAI,2BAA2B;AAC7D,WAAO,UAAU,SAAS,OAAO,IAAI;AAAA,EACvC,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,kBAAkB,SAAkB,SAAiB;AAClE,QAAM,QAAQ,IAAI,6BAA6B,QAAQ,SAAS,CAAC;AACnE;AAEA,eAAe,qBAAqB,SAAkB;AACpD,QAAM,gBAAgB,MAAM,QAAQ,IAAI,0BAA0B;AAClE,SAAO,gBAAgB,cAAc,MAAM,GAAG,IAAI,CAAC;AACrD;AAKA,eAAe,qBAAqB,SAAkB;AACpD,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,gBAAgB,MAAM,qBAAqB,OAAO;AAExD,eAAW,YAAY,eAAe;AACpC,YAAM,YAAY,4BAA4B,QAAQ;AACtD,YAAM,cAAc,MAAM,QAAQ,IAAI,SAAS;AAC/C,UAAI,aAAa;AACf,cAAM,QAAQ;AAAA,UACZ,4BAA4B,eAAe,QAAQ,CAAC;AAAA,UACpD;AAAA,QACF;AACA,cAAM,QAAQ,OAAO,SAAS;AAAA,MAChC;AAAA,IACF;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AAEA,MAAK,MAAM,kBAAkB,OAAO,IAAK,GAAG;AAC1C,UAAM,oBAAoB,MAAM,qBAAqB,OAAO;AAE5D,UAAM,gBAA6C,CAAC;AACpD,UAAM,eAAyB,CAAC,0BAA0B;AAE1D,eAAW,YAAY,mBAAmB;AACxC,YAAM,MAAM,4BAA4B,eAAe,QAAQ,CAAC;AAChE,YAAM,cAAc,MAAM,QAAQ,IAAI,GAAG;AACzC,UAAI,aAAa;AACf,sBAAc,QAAQ,IAAI,KAAK,MAAM,WAAW;AAChD,qBAAa,KAAK,GAAG;AAAA,MACvB;AAAA,IACF;AAEA,UAAM,QAAQ,IAAI,mBAAmB,KAAK,UAAU,aAAa,CAAC;AAElE,eAAW,OAAO,cAAc;AAC9B,YAAM,QAAQ,OAAO,GAAG;AAAA,IAC1B;AAEA,UAAM,kBAAkB,SAAS,CAAC;AAAA,EACpC;AACF;;;AC5LA,YAAY,WAAW;AACvB,SAAS,yBAAyB;AAClC,SAAyB,uBAAuB;AAoBzC,IAAM,iBAAN,MAAqB;AAAA,EAG1B,YACU,QACA,cACA,UACA,mBACD,UACP;AALQ;AACA;AACA;AACA;AACD;AAPT,sBAAqB;AAUrB,iBAAQ,OAAO,eAAuB;AACpC,YAAM,EAAE,QAAQ,aAAa,IAAI;AAEjC,UAAI;AAEJ,UAAI;AACF,qBAAmB,wBAAkB,YAAY,KAAK,QAAQ;AAAA,MAChE,SAAS,GAAG;AACV,cAAM,IAAI,MAAM,oBAAoB;AAAA,MACtC;AAEA,YAAM,gBAAgB,OAAO,0BAA0B,UAAU;AAEjE,YAAM,YAAY,gBAAgB;AAAA,QAChC,gBAAgB,mCAAmC,eAAe,MAAM;AAAA,QACxE;AAAA,MACF;AAEA,YAAM,aAAa;AAAA,QACjB;AAAA,QACA;AAAA,MACF,CAAC;AAED,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,kBAAS,OAAO,SAAkB;AAChC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,YAAM,aAAa,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAE1E,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B,WAAW,YAAY;AAAA,QACvB,YAAY,YAAY;AAAA,QACxB,eAAe,YAAY;AAAA,QAC3B,UAAU;AAAA,MACZ,CAAC;AAED,UAAI,MAAM,KAAK,GAAG;AAChB,cAAM,iBAAiB,MAAM,QAAQ,MAAM,EAAE,MAAM,aAAa;AAAA,UAC9D,SAAS;AAAA,YACP,SAAS;AAAA,UACX;AAAA,QACF,CAAC;AAED,uBAAe,QAAQ,MAAM,IAAI,QAAQ,IAAI;AAAA,MAC/C;AAEA,aAAO;AAAA,IACT;AAEA,8BAAqB,OAAO,YAAoB,SAAiB;AAC/D,YAAM,aAAmB,wBAAkB,YAAY,KAAK,QAAQ;AACpE,YAAM,gBAAgB,KAAK,OAAO,0BAA0B,UAAU;AACtE,YAAM,YAAY,MAAM,KAAK,SAAS,eAAe,EAAE,KAAK,CAAC;AAE7D,YAAM,KAAK,kBAAkB,IAAI;AAAA,QAC/B;AAAA,QACA;AAAA,QACA;AAAA,QACA,UAAU;AAAA,MACZ,CAAC;AAED,aAAO;AAAA,IACT;AAEA,uCAA8B,YAAY;AACxC,YAAM,cAAc,MAAM,KAAK,kBAAkB,IAAI;AAErD,UAAI,CAAC,eAAe,CAAC,YAAY,YAAY;AAC3C,cAAM,IAAI,MAAM,sBAAsB;AAAA,MACxC;AAEA,aAAO,kBAAkB,YAAY,YAAY,KAAK,QAAQ;AAAA,IAChE;AAEA,oCAA2B,MAAM;AAC/B,aAAO,kBAAkB,KAAK,OAAO,oBAAoB,GAAG,KAAK,QAAQ;AAAA,IAC3E;AAEA,wCAA+B,YAAY;AACzC,YAAM,aAAa,MAAM,KAAK,4BAA4B;AAC1D,WAAK,aAAa;AAClB,WAAK,OAAO;AAAA,IACd;AAEA,qBAAY,oBAAI,IAAgB;AAChC,qBAAY,CAAC,aAAyB;AACpC,WAAK,UAAU,IAAI,QAAQ;AAE3B,aAAO,MAAM;AACX,aAAK,UAAU,OAAO,QAAQ;AAAA,MAChC;AAAA,IACF;AAAA,EA3GG;AAAA,EA6GH,SAAS;AACP,eAAW,YAAY,KAAK,WAAW;AACrC,eAAS;AAAA,IACX;AAAA,EACF;AACF;;;ACjJA,SAAyC,mBAAAC,wBAAuB;AAKzD,SAAS,iBACd,OACA,MACA,SACA,WACQ;AACR,QAAM,cAAc,MAAM,MAAM,IAAI;AACpC,MAAI,iBAAiB;AAErB,SAAO,eAAe,SAAS,OAAO,QAAQ,SAAS,gBAAgB;AACrE,qBAAiB,eAAe,SAAS,EAAE;AAAA,EAC7C;AAEA,QAAM,EAAE,SAAS,KAAK,IAAI,eAAe,SAAS;AAElD,MAAI,QAAQ,SAAS,WAAW,MAAM,SAAS,WAAW;AACxD,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,QAAM,QAAQC,iBAAgB,YAAY,eAAe,kBAAkB,CAAC;AAC5E,QAAM,eAAe,MAAM,aAAa,IAAI;AAE5C,SAAO,GAAG,OAAO,YAAY,YAAY,YAAY,MAAM,EAAE,GAC3D,MAAM,MAAM,EACd,IAAI,YAAY;AAClB;AAGO,SAAS,gBAAgB,WAMlB;AACZ,QAAM,MAAM,IAAI,IAAI,SAAS;AAC7B,QAAM,QAAQ,IAAI,KAAK,MAAM,GAAG;AAEhC,MAAI;AACJ,MAAI;AACJ,MAAI;AAEJ,MAAI,MAAM,CAAC,MAAM,OAAO,MAAM,CAAC,MAAM,UAAU;AAC7C,QAAI,MAAM,WAAW,GAAG;AACtB,kBAAY,MAAM,CAAC;AACnB,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB,WAAW,MAAM,WAAW,GAAG;AAC7B,gBAAU,MAAM,CAAC;AACjB,qBAAe,MAAM,CAAC;AAAA,IACxB;AAEA,QAAI,CAAC,WAAW,CAAC,cAAc;AAC7B,aAAO;AAAA,IACT;AACA,WAAO,EAAE,SAAS,cAAc,UAAU;AAAA,EAC5C;AACF;AAGO,SAAS,kBAAkD;AAAA,EAChE;AAAA,EACA,KAAK,QAAQ,MAAM;AAAA,EACnB;AAAA,EACA;AACF,GAYE;AACA,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,SAAS,gBAAgB,SAAS;AAExC,QAAI,UAAU,OAAO,cAAc,cAAc;AAC/C,SAAG,aAAa,OAAO,SAAS,OAAO,cAAc,mBAAmB,EACrE,KAAK,MAAM;AACV,gBAAQ,MAAM;AAAA,MAChB,CAAC,EACA,MAAM,MAAM;AAAA,IACjB,OAAO;AACL,cAAQ,MAAS;AAAA,IACnB;AAAA,EACF,CAAC;AACH;;;AChGA;AAAA,EAIE;AAAA,EAEA,mBAAAC;AAAA,OACK;AACP,OAAOC,QAAO;AA0Fd,SAAS,sBACP,QACA,OACA,OACA,YACA,MACwB;AACxB,QAAM,QAAQ,MAAM,OAAO,EAAE,MAAM,CAAC;AAEpC,MAAI,SAAS,WAAW;AACtB,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC,OAAO;AACL,UAAM,UAAU,YAAY,QAAQ;AAAA,EACtC;AAGA,SAAO,OAAO,OAAO,SAAS,CAAC,GAAG,KAAK;AACzC;AAMA,eAAe,wBAAwB;AAAA,EACrC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,KAAK,SAAS,QAAQ,MAAM;AAClC,QAAM,OAAO,GAAG,MAAM;AACtB,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,WAAW,MAAM,gBAAgB;AACvC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,WAAW,sBAAsB,QAAQ,OAAO,IAAI,QAAQ,IAAI;AAEtE,QAAM,gBACH,MAAM,cAAc,QAAQ,SAAS,MAAM,IAAI;AAAA,IAC9C;AAAA,IACA,QAAQ;AAAA,IACR,sBAAsB;AAAA,EACxB,CAAC,KAAM,CAAC;AAEV,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO;AAAA,IACL;AAAA,IACA,IAAI,SAAS,MAAM;AAAA,IACnB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEA,IAAM,aAAaC,GAAE,OAAwB,WAAW;AACxD,IAAM,kBAAkBA,GAAE;AAAA,EACxB,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,aAAa;AACxE;AAEA,IAAM,gBAAgBA,GAAE,OAAO;AAAA,EAC7B,eAAeA,GAAE,MAAMA,GAAE,KAAK,CAAC;AAAA,EAC/B,IAAI;AAAA,EACJ,WAAWA,GAAE,OAAO;AAAA,EACpB,WAAW;AAAA,EACX,UAAUA,GAAE;AAAA,IACV,CAAC,UAAU,OAAO,UAAU,YAAY,MAAM,WAAW,UAAU;AAAA,EACrE;AACF,CAAC;AAOD,eAAe,qBAAqB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAOG;AACD,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,SAAS,KAAK;AAEpB,QAAM,gBAAgB,cAAc,UAAU,OAAO;AAErD,MAAI,CAAC,cAAc,SAAS;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA,cAAc;AAAA,IAChB;AAAA,EACF;AAEA,QAAM,cAAc,cAAc;AAElC,MAAI,SAAS,WAAW;AACtB,UAAM,OAAO,MAAM,KAAK,gBAAgB,YAAY,IAAI,QAAW,IAAI;AAGvE,QAAI,KAAK,YAAY,GAAG;AACtB,YAAM,UAAU,KAAK,kBAAkB;AAEvC,UAAI,QAAQ,IAAI,UAAU,MAAM,OAAO,MAAM,IAAI;AAC/C,cAAM,IAAI,iBAAiB,sCAAsC,GAAG;AAAA,MACtE;AAAA,IACF;AAGA,QAAI,YAAY,YAAY,MAAO,KAAK,KAAK,IAAI,GAAG;AAClD,YAAM,IAAI,iBAAiB,mCAAmC,GAAG;AAAA,IACnE;AAAA,EACF;AAGA,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,eAAe,YAAY;AAAA,IAC3B,IAAI,YAAY;AAAA,IAChB,WAAW,YAAY;AAAA,IACvB,UAAU,YAAY;AAAA,EACxB,CAAC;AAED,MACE,CAAC;AAAA,IACC;AAAA,IACA;AAAA,IACA,YAAY;AAAA,IACZ,YAAY;AAAA,EACd,GACA;AACA,UAAM,IAAI,iBAAiB,qBAAqB,GAAG;AAAA,EACrD;AAEA,MAAI,gBACF,YAAY;AAEd,MAAI,SAAS,WAAW;AACtB,UAAM,iBAAiB,cAAc;AAAA,MACnC,CAAC,UAAU,MAAM,OAAO,YAAY;AAAA,IACtC;AAEA,QAAI,kBAAkB,eAAe,QAAQ;AAC3C,YAAM,cAAcC,iBAAgB;AAAA,QAClC,eAAe;AAAA,QACf;AAAA,MACF;AACA,kBAAY,IAAI,YAAY,EAAE;AAC9B,sBAAgB,cAAc;AAAA,QAAO,CAAC,UACpC,YAAY,IAAI,MAAM,EAAE;AAAA,MAC1B;AAAA,IACF,OAAO;AACL,sBAAgB,CAAC;AAAA,IACnB;AAAA,EACF;AAEA,sBAAoB,eAAe,MAAM;AAEzC,QAAM,UAAU,MAAM,KAAK,gBAAgB,YAAY,EAAE;AACzD,QAAM,YAAY,2BAA2B,OAAO;AAEpD,QAAM,SAAS,MAAM,QAAQ,KAAK,WAAW;AAAA,IAC3C;AAAA,EACF,CAAC;AAED,MAAI,CAAC,OAAO,WAAW;AACrB,UAAM,IAAI,iBAAiB,6BAA6B,GAAG;AAAA,EAC7D;AAEA,QAAM,WAAW;AAAA,IACf;AAAA,EACF;AACA,QAAM,QAAQ,MAAM,YAAyB,UAAU,YAAY,IAAI;AAAA,IACrE;AAAA,IACA;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,mBAAmB,GAAG;AAAA,EACnD;AAEA,MAAI,SAAS,WAAW;AACtB,UAAM,MAAM,IAAI,IAAI,YAAY,OAAO,MAAM,EAAE;AAAA,EACjD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,EACF;AACF;AAEA,SAAS,sBAGP,SAAwC;AACxC,MAAI,YAAY,SAAS;AACvB,WAAO;AAAA;AAAA,MAEL,QAAQ,aAAa,QAAQ,MAAM;AAAA,MACnC,SAAS,QAAQ;AAAA,IACnB;AAAA,EACF;AAEA,SAAO;AAAA,IACL,QAAQ,aAAa,OAAO;AAAA,IAC5B,SAAS;AAAA,EACX;AACF;AAEO,IAAM,YAAN,MAKL;AAAA,EAYA,YACE,QAMA;AAyEF,kBAAS,OACP,SACA,IACA,aAMsB;AACtB,UAAI;AACF,cAAM,WAAW,MAAM,KAAK,qBAAqB,SAAS,IAAI,QAAQ;AACtE,eAAO;AAAA,MACT,SAAS,OAAO;AAEd,YAAI,mBAAmB,KAAK,GAAG;AAC7B,iBAAO,IAAI,SAAS,KAAK,UAAU,MAAM,OAAO,CAAC,GAAG;AAAA,YAClD,QAAQ,MAAM;AAAA,YACd,SAAS;AAAA,cACP,gBAAgB;AAAA,cAChB,wBAAwB;AAAA,YAC1B;AAAA,UACF,CAAC;AAAA,QACH;AAEA,cAAM;AAAA,MACR;AAAA,IACF;AAEA,gCAAuB,OACrB,SACA,IACA,aAMsB;AACtB,YAAM,OAAO,GAAG,MAAM;AACtB,YAAM,OAAO,MAAM,QAAQ,KAAK;AAChC,YAAM,OAAO,MAAM,qBAAqB;AAAA,QACtC,MAAM;AAAA,QACN,QAAQ,KAAK,kBAAkB;AAAA,QAC/B,SAAS,KAAK,kBAAkB;AAAA,QAChC,SAAS;AAAA,QACT,QAAQ;AAAA,MACV,CAAC;AAED,YAAM,WAAW,KAAK,YAAY,mBAAmB;AAErD,YAAM,gBAAgB,MAAM;AAAA,QAC1B,KAAK;AAAA,QACL,KAAK;AAAA,MACP;AAEA,YAAM,kBAAkB,MAAM,wBAAwB;AAAA,QACpD,MAAM;AAAA,QACN,QAAQ,KAAK,mBAAmB;AAAA,QAChC,SAAS,KAAK,mBAAmB;AAAA,QACjC,OAAO;AAAA,QACP,OAAO;AAAA,QACP,QAAQ,KAAK;AAAA,MACf,CAAC;AAED,YAAM,eAAe,KAAK,UAAU;AAAA,QAClC,MAAM;AAAA,QACN,SAAS;AAAA,MACX,CAAC;AAGD,YAAM,QAAQ;AAAA,QACZ,MAAM,KAAK,SAAS,KAAK,GAAG,CAAC,OAAO,KAAK,YAAY,YAAY,EAAE,CAAC;AAAA,MACtE;AAEA,aAAO,IAAI,SAAS,cAAc;AAAA,QAChC,QAAQ;AAAA,QACR,SAAS;AAAA,UACP,gBAAgB;AAAA,QAClB;AAAA,MACF,CAAC;AAAA,IACH;AAzJE,SAAK,oBAAoB,sBAAsB,OAAO,OAAO;AAC7D,SAAK,qBAAqB,sBAAsB,OAAO,QAAQ;AAC/D,SAAK,MAAM,OAAO;AAClB,SAAK,WAAW,OAAO;AAEvB,QAAI,OAAO,aAAa,QAAW;AACjC,YAAM,IAAI,UAAU,uBAAuB;AAAA,IAC7C;AAAA,EACF;AAAA,EAEA,MAAM,KACJ,QACA,SAC8D;AAC9D,UAAM,KAAK,SAAS,SAAS,QAAQ,MAAM;AAE3C,UAAM,SAAS,MAAM,yBAAyB,KAAK,UAAU,EAAE;AAE/D,UAAM,WAAW,MAAM,MAAM,KAAK,KAAK;AAAA,MACrC,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,MAAM,KAAK;AAAA,QACT,MAAM,wBAAwB;AAAA,UAC5B,MAAM;AAAA,UACN,QAAQ,KAAK,kBAAkB;AAAA,UAC/B,SAAS;AAAA;AAAA,UACT,OAAO;AAAA,UACP,OAAO;AAAA,UACP;AAAA,QACF,CAAC;AAAA,MACH;AAAA,IACF,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,UAAI,SAAS,QAAQ,IAAI,sBAAsB,GAAG;AAChD,cAAM,QAAQ,MAAM,SAAS,KAAK;AAClC,cAAM,IAAI,iBAAiB,MAAM,SAAS,MAAM,MAAM,MAAM,OAAO;AAAA,MACrE;AAEA,YAAM,IAAI,iBAAiB,kBAAkB,SAAS,MAAM;AAAA,IAC9D;AAEA,UAAM,eAAe,MAAM,SAAS,KAAK;AAEzC,UAAM,iBAAiBD,GACpB,OAAO;AAAA,MACN,MAAMA,GAAE,QAAQ,SAAS;AAAA,MACzB,SAASA,GAAE,IAAI;AAAA,IACjB,CAAC,EACA,UAAU,YAAY;AAEzB,QAAI,CAAC,eAAe,SAAS;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,QACA;AAAA,QACA,eAAe;AAAA,MACjB;AAAA,IACF;AAEA,UAAM,OAAO,MAAM,qBAAqB;AAAA,MACtC,MAAM;AAAA,MACN,QAAQ,KAAK,mBAAmB;AAAA,MAChC,SAAS,KAAK,mBAAmB;AAAA,MACjC,SAAS,eAAe,KAAK;AAAA,MAC7B,QAAQ;AAAA,IACV,CAAC;AAED,WAAO,KAAK;AAAA,EACd;AAAA,EAqFA,IAAI,gBAA2C;AAC7C,WAAO,KAAK,kBAAkB;AAAA,EAChC;AAAA,EAEA,IAAI,iBAAiB;AACnB,WAAO,KAAK,mBAAmB;AAAA,EACjC;AACF;AAUO,SAAS,2BAMd,QAMA;AACA,SAAO,IAAI,UAAU,MAAM;AAC7B;AAEA,SAAS,2BAA2B,SAAsB;AACxD,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAEA,QAAM,mBAAmB,QAAQ,2BAA2B,EAAE,GAAG,CAAC,GAC9D,KAAK;AAET,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,YACJC,iBAAgB,8BAA8B,gBAAgB;AAEhE,MAAI,CAAC,YAAY,SAAS,GAAG;AAC3B,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAEO,IAAM,mBAAN,MAAuB;AAAA,EAG5B,YACkB,SACA,MACA,SAChB;AAHgB;AACA;AACA;AALlB,SAAgB,qBAAqB;AAAA,EAMlC;AAAA,EAEH,SAAS;AACP,WAAO,EAAE,SAAS,KAAK,SAAS,MAAM,KAAK,MAAM,SAAS,KAAK,QAAQ;AAAA,EACzE;AACF;AAEO,SAAS,mBAAmB,OAA2C;AAC5E,SACE,iBAAiB,oBAChB,OAAO,UAAU,YAChB,UAAU,QACV,wBAAwB,SACxB,QAAQ,MAAM,kBAAkB;AAEtC;AAEA,SAAS,oBACP,QACA,aACA,UACA,WACA;AACA,MAAI;AACF,WAAO,OAAO,OAAO,WAAW,aAAa,QAAQ;AAAA,EACvD,SAAS,OAAO;AACd,WAAO;AAAA,EACT;AACF;AAEA,eAAe,yBAAyB,IAAY,QAAiB;AACnE,QAAM,OAAO,OAAO,MAAM;AAC1B,QAAM,UAAU,MAAM,KAAK,gBAAgB,EAAqB;AAEhE,MAAI,CAAC,QAAQ,YAAY,GAAG;AAC1B,UAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,EAC5D;AAEA,QAAM,UAAU,QAAQ,kBAAkB;AAE1C,MAAI,mBAAmB,YAAY;AACjC,UAAM,UAAU,MAAM,QAAQ,KAAK,QAAQ,IAAI;AAAA,MAC7C;AAAA,IACF,CAAC;AACD,QAAI,CAAC,QAAQ,WAAW;AACtB,YAAM,IAAI,iBAAiB,4BAA4B,GAAG;AAAA,IAC5D;AACA,WAAO;AAAA,EACT;AAEA,QAAM,QAAQ,MAAM,MAAM,KAAK,QAAQ,IAAI;AAAA,IACzC;AAAA,EACF,CAAC;AAED,MAAI,CAAC,MAAM,WAAW;AACpB,UAAM,IAAI,iBAAiB,0BAA0B,GAAG;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,SAAS,gBAAgB,SAAkB;AACzC,QAAM,cAAc,QAAQ,QAAQ,IAAI,eAAe;AACvD,MAAI,aAAa,WAAW,OAAO,GAAG;AACpC,WAAO,YAAY,QAAQ,SAAS,EAAE;AAAA,EACxC;AAEA,MAAI,aAAa;AACf,YAAQ;AAAA,MACN;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AA4BA,eAAsB,oBACpB,SACA,SAcA;AACA,QAAM,QAAQ,SAAS,WAAW,OAAO,KAAK,gBAAgB,OAAO;AAErE,MAAI,CAAC,OAAO;AACV,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,EAAE,SAAS,MAAM,IAAI,MAAM,eAAe,OAAO;AAAA,IACrD,QAAQ,SAAS;AAAA,IACjB,YAAY,SAAS,cAAc,MAAO;AAAA,EAC5C,CAAC;AAED,MAAI,OAAO;AACT,WAAO,EAAE,MAAM;AAAA,EACjB;AAEA,SAAO,EAAE,SAAS,MAAM;AAC1B;AAmBO,SAAS,kBAAkB,IAAc;AAC9C,QAAM,UAAU,MAAM,QAAQ,MAAM;AACpC,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAEpB,QAAM,QAAQ,KAAK,gBAAgB;AACnC,QAAM,eAAe,MAAM,oBAAoB;AAE/C,QAAM,YAAY,KAAK,IAAI;AAE3B,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB;AAAA,EACF,CAAC;AAED,QAAM,YAAY,OAAO,KAAK,cAAc,WAAW;AAEvD,SAAO,GAAG,SAAS,IAAI,QAAQ,MAAM,EAAE,IAAI,SAAS;AACtD;AAEA,eAAsB,eACpB,WACA,SAIA;AACA,QAAM,aAAa,SAAS,cAAc,MAAQ;AAElD,QAAM,SAASD,GACZ,MAAM,CAAC,iBAAiB,YAAYA,GAAE,OAAO,EAAE,UAAU,MAAM,CAAC,CAAC,EACjE,UAAU,UAAU,MAAM,GAAG,CAAC;AAEjC,MAAI,CAAC,OAAO,SAAS;AACnB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,OAAO;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,WAAW,IAAI,SAAS,IAAI,OAAO;AAE1C,MAAI,YAAY,aAAa,KAAK,IAAI,GAAG;AACvC,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,QAAQ,KAAK,IAAI,EAAE,QAAQ,SAAS,OAAO,CAAC;AAElE,MAAI,CAAC,QAAQ,WAAW;AACtB,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,QACT,SAAS,EAAE,GAAG;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAO,QAAQ,MAAM;AAC3B,QAAM,SAAS,KAAK;AAGpB,QAAM,cAAc,OAAO,WAAW;AAAA,IACpC,IAAI,QAAQ,MAAM;AAAA,IAClB,WAAW,OAAO,SAAS;AAAA,EAC7B,CAAC;AAED,QAAM,UAAU,QAAQ,MAAM,IAAI,eAAe;AACjD,QAAM,WAAW,OAAO,iBAAiB,OAAO;AAEhD,MAAI,CAAC,OAAO,OAAO,WAAW,aAAa,QAAQ,GAAG;AACpD,WAAO;AAAA,MACL,OAAO;AAAA,QACL,SAAS;AAAA,MACX;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,EACF;AACF;;;ACtzBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA;AAAA,EACE;AAAA,EACA;AAAA,OACK;;;ACRP,SAAS,4BAAuC;AAMhD,SAAkB,sBAAAE,2BAA0B;AAmBrC,IAAM,qBAAN,MAAyB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAS9B,aAAa,OACX,QACA,OAAwC,CAAC,GAC1B;AACf,UAAM,EAAE,QAAQ,GAAG,WAAW,IAAI;AAGlC,UAAM,iBAAiB,UAAU,qBAAqB,SAAS;AAE/D,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OACJ,0BAA0BC,sBACtB,eAAe,OACf,eAAe,MAAM;AAE3B,UAAM,OAAO,MAAM,qBAAqB,OAAO,QAAQ,UAAU;AAEjE,SAAK,YAAY,QAAQ,IAAI;AAAA,EAC/B;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,OAAO,kBAAkB,MAAgD;AACvE,WAAO,qBAAqB,kBAAkB,IAAI;AAAA,EACpD;AACF;;;AChEA;AAAA,EACE,mBAAAC;AAAA,EACA,UAAAC;AAAA,EACA,YAAAC;AAAA,OACK;","names":["Account","AuthSecretStorage","Account","AuthSecretStorage","cojsonInternals","cojsonInternals","cojsonInternals","z","z","cojsonInternals","AnonymousJazzAgent","AnonymousJazzAgent","cojsonInternals","logger","LogLevel"]}

package/dist/media/{chunk-3LKBM3G3.js → chunk-IRL3KNPO.js}

@@ -187,7 +187,7 @@ async function createImage(imageBlobOrFile, options, impl) {
   );
   if (options?.progressive) {
     imageCoValue.$jazz.set("progressive", true);
-    const resizes = [256, 1024, 2048].filter(
+    const resizes = [256, 512, 1024, 2048].filter(
       (s) => s < Math.max(imageCoValue.originalSize[0], imageCoValue.originalSize[1])
     );
     for (const size of resizes) {
@@ -224,4 +224,4 @@ export {
   loadImageBySize,
   createImageFactory
 };
-//# sourceMappingURL=chunk-3LKBM3G3.js.map
+//# sourceMappingURL=chunk-IRL3KNPO.js.map