@0xkey-io/react-native-wallet-kit 0.1.0

package/dist/utils/oauth.d.ts

@@ -0,0 +1,240 @@
+import { AuthAction, BaseAuthResult, OAuthProviders } from "@0xkey-io/sdk-types";
+export declare const DISCORD_AUTH_URL = "https://discord.com/oauth2/authorize";
+export declare const X_AUTH_URL = "https://x.com/i/oauth2/authorize";
+export declare const GOOGLE_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+export declare const APPLE_AUTH_URL = "https://account.apple.com/auth/authorize";
+export declare const APPLE_AUTH_SCRIPT_URL = "https://appleid.cdn-apple.com/appleauth/static/jsapi/appleid/1/en_US/appleid.auth.js";
+export declare const FACEBOOK_AUTH_URL = "https://www.facebook.com/v23.0/dialog/oauth";
+export declare const FACEBOOK_GRAPH_URL = "https://graph.facebook.com/v23.0/oauth/access_token";
+export declare const ZEROXKEY_OAUTH_ORIGIN_URL = "https://oauth-origin.0xkey.com";
+export declare const ZEROXKEY_OAUTH_REDIRECT_URL = "https://oauth-redirect.0xkey.com";
+/**
+ * Builds the OAuth state parameter string
+ */
+export declare function buildOAuthState(params: {
+    provider: OAuthProviders;
+    flow: "redirect";
+    publicKey: string;
+    nonce?: string;
+    additionalState?: Record<string, string> | undefined;
+}): string;
+/**
+ * OAuth provider configuration for unified OAuth flow handling
+ */
+export interface OAuthProviderConfig {
+    /** The provider identifier */
+    provider: OAuthProviders;
+    /** The base OAuth authorization URL */
+    authUrl: string;
+    /** OAuth scopes to request */
+    scopes: string;
+    /** Whether this provider uses PKCE */
+    usesPKCE: boolean;
+    /** Response type for the OAuth request */
+    responseType: string;
+    /** Optional response mode (e.g., 'fragment' for Apple) */
+    responseMode?: string;
+    /** Whether to include nonce in the URL params (vs state) */
+    nonceInParams?: boolean;
+}
+/**
+ * Pre-configured OAuth provider settings
+ */
+export declare const OAUTH_PROVIDER_CONFIGS: Record<OAuthProviders, OAuthProviderConfig>;
+/**
+ * Parses the OAuth state parameter string into an object
+ */
+export declare function parseStateParam(stateParam: string | null | undefined): {
+    sessionKey?: string;
+    oauthIntent?: string;
+    provider?: string;
+    flow?: string;
+    publicKey?: string;
+    openModal?: string;
+    [key: string]: string | undefined;
+};
+/**
+ * Result from parsing an OAuth response (both popup and redirect flows)
+ */
+export interface OAuthResponseResult {
+    /** The OIDC token (for non-PKCE providers) */
+    idToken?: string | null | undefined;
+    /** The authorization code (for PKCE providers) */
+    authCode?: string | null | undefined;
+    /** Session key from state */
+    sessionKey?: string | undefined;
+    /** The provider from state */
+    provider?: string | null;
+    /** Flow type from state */
+    flow?: string | null;
+    /** Public key from state */
+    publicKey?: string | null;
+    /** Open modal flag from state */
+    openModal?: string | null;
+    /** OAuth intent from state */
+    oauthIntent?: string | null;
+    /** Nonce from state */
+    nonce?: string | null;
+}
+/**
+ * Unified OAuth response parser for both popup and redirect flows.
+ * Handles both:
+ * - PKCE flows (Facebook, Discord, X): code in search parameters
+ * - Non-PKCE flows (Google, Apple): id_token in hash parameters
+ * - Apple's non-standard hash format where state parameters are directly embedded
+ *
+ * @param url - The full URL to parse (from popup or redirect)
+ * @param expectedProvider - Optional provider if already known (for popup flows)
+ * @returns Parsed OAuth response data including tokens, codes, and state parameters, or null if invalid
+ */
+export declare function parseOAuthResponse(url: string, expectedProvider?: OAuthProviders): OAuthResponseResult | null;
+export declare function generateChallengePair(): Promise<{
+    verifier: string;
+    codeChallenge: string;
+}>;
+/** Provider type for PKCE-based OAuth */
+export type PKCEProvider = OAuthProviders.FACEBOOK | OAuthProviders.DISCORD | OAuthProviders.X;
+/**
+ * Gets the AsyncStorage key name for a PKCE provider's verifier
+ */
+export declare function getPKCEVerifierKey(provider: PKCEProvider): string;
+/**
+ * Stores the PKCE verifier in AsyncStorage
+ * @param provider - The OAuth provider
+ * @param verifier - The verifier string to store
+ */
+export declare function storePKCEVerifier(provider: PKCEProvider, verifier: string): Promise<void>;
+/**
+ * Retrieves and removes the PKCE verifier from AsyncStorage
+ * @param provider - The OAuth provider
+ * @returns The verifier string
+ * @throws Error if verifier is not found
+ */
+export declare function consumePKCEVerifier(provider: PKCEProvider): Promise<string>;
+/**
+ * Checks if a PKCE verifier exists for a provider (without consuming it)
+ * @param provider - The OAuth provider
+ * @returns true if verifier exists
+ */
+export declare function hasPKCEVerifier(provider: PKCEProvider): Promise<boolean>;
+/**
+ * Parameters for building an OAuth URL
+ */
+export interface BuildOAuthUrlParams {
+    provider: OAuthProviders;
+    clientId: string;
+    redirectUri: string;
+    publicKey: string;
+    nonce: string;
+    codeChallenge?: string | undefined;
+    additionalState?: Record<string, string> | undefined;
+    /** If true, uses direct provider URLs; if false, uses ZeroXKey OAuth proxy */
+    useOauthProxyOrigin?: boolean;
+}
+/**
+ * Builds the complete OAuth authorization URL for a provider
+ * For react-native, can use either:
+ * - Direct provider URLs (Discord, X)
+ * - ZeroXKey OAuth proxy (Google, Apple, Facebook)
+ */
+export declare function buildOAuthUrl(params: BuildOAuthUrlParams): string;
+/**
+ * Parsed result from an InAppBrowser OAuth deep link
+ */
+export interface ParsedInAppBrowserResult {
+    /** The OIDC token (for non-PKCE providers) */
+    idToken?: string | null;
+    /** The authorization code (for PKCE providers) */
+    authCode?: string | null;
+    /** Session key from state */
+    sessionKey?: string | undefined;
+    /** The provider from state */
+    provider?: string | null;
+    /** Public key from state */
+    publicKey?: string | null;
+    /** Nonce from state */
+    nonce?: string | null;
+}
+/**
+ * Parses the deep link URL returned from InAppBrowser after OAuth redirect
+ * @param deepLinkUrl - The URL from InAppBrowser result (e.g., "myapp://?id_token=...&state=...")
+ * @returns Parsed OAuth response data
+ */
+export declare function parseInAppBrowserResult(deepLinkUrl: string): ParsedInAppBrowserResult;
+/**
+ * Completion handler callbacks for OAuth flow
+ */
+export interface OAuthCompletionCallbacks {
+    /** Called on successful OAuth completion */
+    onOauthSuccess?: (params: {
+        oidcToken: string;
+        providerName: string;
+        publicKey: string;
+        sessionKey?: string;
+    }) => void;
+    /** Called when OAuth should redirect */
+    onOauthRedirect?: (params: {
+        idToken: string;
+        publicKey: string;
+        sessionKey?: string;
+    }) => void;
+}
+/**
+ * Parameters for completing an OAuth flow
+ */
+export interface CompleteOAuthFlowParams {
+    provider: OAuthProviders;
+    publicKey: string;
+    oidcToken: string;
+    sessionKey?: string;
+    callbacks?: OAuthCompletionCallbacks;
+    /** Function to complete the OAuth authentication */
+    completeOauth: (params: {
+        oidcToken: string;
+        publicKey: string;
+        providerName: string;
+        sessionKey?: string;
+    }) => Promise<BaseAuthResult & {
+        action: AuthAction;
+    }>;
+}
+/**
+ * Unified OAuth completion handler.
+ * Routes to the appropriate completion handler based on params:
+ * Priority: callbacks.onOauthSuccess > callbacks.onOauthRedirect > completeOauth
+ *
+ * This is the core completion logic used by InAppBrowser flows.
+ */
+export declare function completeOAuthFlow(params: CompleteOAuthFlowParams): Promise<void>;
+/**
+ * Parameters for the unified PKCE flow handler
+ */
+export interface HandlePKCEFlowParams {
+    provider: PKCEProvider;
+    publicKey: string;
+    authCode: string;
+    sessionKey?: string;
+    callbacks?: OAuthCompletionCallbacks;
+    completeOauth: (params: {
+        oidcToken: string;
+        publicKey: string;
+        providerName: string;
+        sessionKey?: string;
+    }) => Promise<BaseAuthResult & {
+        action: AuthAction;
+    }>;
+    /** Function to exchange code for token (provider-specific) */
+    exchangeCodeForToken: (codeVerifier: string) => Promise<string>;
+}
+/**
+ * Unified PKCE flow handler for all PKCE-based OAuth providers.
+ * Handles the complete PKCE flow: verifier retrieval, token exchange, and completion routing.
+ *
+ * @param params - The PKCE flow parameters
+ * @returns A promise that resolves when the flow is complete
+ */
+export declare function handlePKCEFlow(params: HandlePKCEFlowParams): Promise<void>;
+export declare function exchangeCodeForToken(clientId: string, redirectUri: string, code: string, codeVerifier: string): Promise<{
+    id_token: string;
+}>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/utils/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../src/utils/oauth.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EACV,cAAc,EACd,cAAc,EACf,MAAM,qBAAqB,CAAC;AAO7B,eAAO,MAAM,gBAAgB,yCAAyC,CAAC;AACvE,eAAO,MAAM,UAAU,qCAAqC,CAAC;AAC7D,eAAO,MAAM,eAAe,iDAAiD,CAAC;AAC9E,eAAO,MAAM,cAAc,6CAA6C,CAAC;AACzE,eAAO,MAAM,qBAAqB,yFACsD,CAAC;AACzF,eAAO,MAAM,iBAAiB,gDAAgD,CAAC;AAC/E,eAAO,MAAM,kBAAkB,wDACwB,CAAC;AAExD,eAAO,MAAM,yBAAyB,mCAAmC,CAAC;AAC1E,eAAO,MAAM,2BAA2B,qCAAqC,CAAC;AAM9E;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD,GAAG,MAAM,CAkBT;AAMD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,8BAA8B;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,sCAAsC;IACtC,QAAQ,EAAE,OAAO,CAAC;IAClB,0CAA0C;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,MAAM,CACzC,cAAc,EACd,mBAAmB,CA2CpB,CAAC;AAMF;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC,CAcA;AAMD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACpC,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,cAAc,GAChC,mBAAmB,GAAG,IAAI,CA2E5B;AAGD,wBAAsB,qBAAqB,IAAI,OAAO,CAAC;IACrD,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC,CAeD;AAMD,yCAAyC;AACzC,MAAM,MAAM,YAAY,GACpB,cAAc,CAAC,QAAQ,GACvB,cAAc,CAAC,OAAO,GACtB,cAAc,CAAC,CAAC,CAAC;AAErB;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAEjE;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAGf;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,YAAY,GACrB,OAAO,CAAC,OAAO,CAAC,CAIlB;AAMD;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACrD,8EAA8E;IAC9E,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CA4DjE;AAMD;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,GAClB,wBAAwB,CAoB1B;AAMD;;GAEG;AACH,MAAM,WAAW,wBAAwB;IACvC,4CAA4C;IAC5C,cAAc,CAAC,EAAE,CAAC,MAAM,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,IAAI,CAAC;IACX,wCAAwC;IACxC,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,IAAI,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,oDAAoD;IACpD,aAAa,EAAE,CAAC,MAAM,EAAE;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,OAAO,CAAC,cAAc,GAAG;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACxD;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,uBAAuB,GAC9B,OAAO,CAAC,IAAI,CAAC,CAgCf;AAMD;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,aAAa,EAAE,CAAC,MAAM,EAAE;QACtB,SAAS,EAAE,MAAM,CAAC;QAClB,SAAS,EAAE,MAAM,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,KAAK,OAAO,CAAC,cAAc,GAAG;QAAE,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IACvD,8DAA8D;IAC9D,oBAAoB,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACjE;AAED;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,oBAAoB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAgDf;AAGD,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAyB/B"}

package/dist/utils/oauth.js

@@ -0,0 +1,340 @@
+'use strict';
+
+var sha256 = require('@noble/hashes/sha256');
+var encoding = require('@0xkey-io/encoding');
+var sdkTypes = require('@0xkey-io/sdk-types');
+var AsyncStorageModule = require('@react-native-async-storage/async-storage');
+
+// some bundlers wrap the module as { default: AsyncStorage } instead of
+// returning AsyncStorage directly. This handles both cases
+const AsyncStorage = AsyncStorageModule.default ?? AsyncStorageModule;
+const DISCORD_AUTH_URL = "https://discord.com/oauth2/authorize";
+const X_AUTH_URL = "https://x.com/i/oauth2/authorize";
+const GOOGLE_AUTH_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+const APPLE_AUTH_URL = "https://account.apple.com/auth/authorize";
+const FACEBOOK_AUTH_URL = "https://www.facebook.com/v23.0/dialog/oauth";
+const FACEBOOK_GRAPH_URL = "https://graph.facebook.com/v23.0/oauth/access_token";
+const ZEROXKEY_OAUTH_ORIGIN_URL = "https://oauth-origin.0xkey.com";
+const ZEROXKEY_OAUTH_REDIRECT_URL = "https://oauth-redirect.0xkey.com";
+// ============================================================================
+// OAuth State Building
+// ============================================================================
+/**
+ * Builds the OAuth state parameter string
+ */
+function buildOAuthState(params) {
+    const { provider, flow, publicKey, nonce, additionalState } = params;
+    let state = `provider=${provider}&flow=${flow}&publicKey=${encodeURIComponent(publicKey)}`;
+    if (nonce) {
+        state += `&nonce=${nonce}`;
+    }
+    if (additionalState) {
+        const extra = Object.entries(additionalState)
+            .map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`)
+            .join("&");
+        if (extra) {
+            state += `&${extra}`;
+        }
+    }
+    return state;
+}
+/**
+ * Pre-configured OAuth provider settings
+ */
+const OAUTH_PROVIDER_CONFIGS = {
+    [sdkTypes.OAuthProviders.GOOGLE]: {
+        provider: sdkTypes.OAuthProviders.GOOGLE,
+        authUrl: GOOGLE_AUTH_URL,
+        scopes: "openid email profile",
+        usesPKCE: false,
+        responseType: "id_token",
+        nonceInParams: true,
+    },
+    [sdkTypes.OAuthProviders.APPLE]: {
+        provider: sdkTypes.OAuthProviders.APPLE,
+        authUrl: APPLE_AUTH_URL,
+        scopes: "",
+        usesPKCE: false,
+        responseType: "code id_token",
+        responseMode: "fragment",
+        nonceInParams: true,
+    },
+    [sdkTypes.OAuthProviders.FACEBOOK]: {
+        provider: sdkTypes.OAuthProviders.FACEBOOK,
+        authUrl: FACEBOOK_AUTH_URL,
+        scopes: "openid",
+        usesPKCE: true,
+        responseType: "code",
+        nonceInParams: true,
+    },
+    [sdkTypes.OAuthProviders.DISCORD]: {
+        provider: sdkTypes.OAuthProviders.DISCORD,
+        authUrl: DISCORD_AUTH_URL,
+        scopes: "identify email",
+        usesPKCE: true,
+        responseType: "code",
+        nonceInParams: false,
+    },
+    [sdkTypes.OAuthProviders.X]: {
+        provider: sdkTypes.OAuthProviders.X,
+        authUrl: X_AUTH_URL,
+        scopes: "tweet.read users.read",
+        usesPKCE: true,
+        responseType: "code",
+        nonceInParams: false,
+    },
+};
+// ============================================================================
+// OAuth State Parsing
+// ============================================================================
+/**
+ * Parses the OAuth state parameter string into an object
+ */
+function parseStateParam(stateParam) {
+    if (!stateParam)
+        return {};
+    const result = {};
+    const pairs = stateParam.split("&");
+    for (const pair of pairs) {
+        const [key, value] = pair.split("=");
+        if (key && value !== undefined) {
+            result[key] = decodeURIComponent(value);
+        }
+    }
+    return result;
+}
+// Function to generate PKCE challenge pair for Facebook OAuth
+async function generateChallengePair() {
+    // Generate verifier from 32 random bytes
+    const randomBytes = new Uint8Array(32);
+    // eslint-disable-next-line no-undef
+    crypto.getRandomValues(randomBytes);
+    const randomAsBinary = String.fromCharCode(...randomBytes);
+    const verifier = encoding.stringToBase64urlString(randomAsBinary);
+    // Compute SHA-256 over ASCII(verifier), then base64url encode
+    const ascii = new TextEncoder().encode(verifier);
+    const digest = sha256.sha256(ascii);
+    const digestAsBinary = String.fromCharCode(...digest);
+    const codeChallenge = encoding.stringToBase64urlString(digestAsBinary);
+    return { verifier, codeChallenge };
+}
+/**
+ * Gets the AsyncStorage key name for a PKCE provider's verifier
+ */
+function getPKCEVerifierKey(provider) {
+    return `${provider}_verifier`;
+}
+/**
+ * Stores the PKCE verifier in AsyncStorage
+ * @param provider - The OAuth provider
+ * @param verifier - The verifier string to store
+ */
+async function storePKCEVerifier(provider, verifier) {
+    const key = getPKCEVerifierKey(provider);
+    await AsyncStorage.setItem(key, verifier);
+}
+/**
+ * Retrieves and removes the PKCE verifier from AsyncStorage
+ * @param provider - The OAuth provider
+ * @returns The verifier string
+ * @throws Error if verifier is not found
+ */
+async function consumePKCEVerifier(provider) {
+    const key = getPKCEVerifierKey(provider);
+    const verifier = await AsyncStorage.getItem(key);
+    if (!verifier) {
+        throw new Error(`Missing PKCE verifier for ${provider}. OAuth flow may have been interrupted.`);
+    }
+    await AsyncStorage.removeItem(key);
+    return verifier;
+}
+/**
+ * Builds the complete OAuth authorization URL for a provider
+ * For react-native, can use either:
+ * - Direct provider URLs (Discord, X)
+ * - ZeroXKey OAuth proxy (Google, Apple, Facebook)
+ */
+function buildOAuthUrl(params) {
+    const { provider, clientId, redirectUri, publicKey, nonce, codeChallenge, additionalState, useOauthProxyOrigin = false, } = params;
+    const config = OAUTH_PROVIDER_CONFIGS[provider];
+    // Build state parameter
+    const stateParams = {
+        provider,
+        flow: "redirect",
+        publicKey,
+    };
+    if (!config.nonceInParams && nonce) {
+        stateParams.nonce = nonce;
+    }
+    if (additionalState) {
+        stateParams.additionalState = additionalState;
+    }
+    const state = buildOAuthState(stateParams);
+    // If using ZeroXKey Oauth proxy (for Google, Apple, Facebook)
+    if (useOauthProxyOrigin) {
+        const url = new URL(ZEROXKEY_OAUTH_ORIGIN_URL);
+        url.searchParams.set("provider", provider);
+        url.searchParams.set("clientId", clientId);
+        url.searchParams.set("redirectUri", redirectUri);
+        url.searchParams.set("nonce", nonce);
+        if (codeChallenge) {
+            url.searchParams.set("codeChallenge", codeChallenge);
+        }
+        url.searchParams.set("state", state);
+        return url.toString();
+    }
+    // Direct provider URLs (for Discord, X)
+    const authUrl = new URL(config.authUrl);
+    authUrl.searchParams.set("client_id", clientId);
+    authUrl.searchParams.set("redirect_uri", redirectUri);
+    authUrl.searchParams.set("response_type", config.responseType);
+    if (config.scopes) {
+        authUrl.searchParams.set("scope", config.scopes);
+    }
+    if (config.usesPKCE && codeChallenge) {
+        authUrl.searchParams.set("code_challenge", codeChallenge);
+        authUrl.searchParams.set("code_challenge_method", "S256");
+    }
+    authUrl.searchParams.set("state", state);
+    return authUrl.toString();
+}
+/**
+ * Parses the deep link URL returned from InAppBrowser after OAuth redirect
+ * @param deepLinkUrl - The URL from InAppBrowser result (e.g., "myapp://?id_token=...&state=...")
+ * @returns Parsed OAuth response data
+ */
+function parseInAppBrowserResult(deepLinkUrl) {
+    const qsIndex = deepLinkUrl.indexOf("?");
+    const queryString = qsIndex >= 0 ? deepLinkUrl.substring(qsIndex + 1) : "";
+    const urlParams = new URLSearchParams(queryString);
+    const idToken = urlParams.get("id_token");
+    const authCode = urlParams.get("code");
+    const stateParam = urlParams.get("state");
+    // Parse state parameter
+    const stateData = parseStateParam(stateParam);
+    return {
+        idToken: idToken ?? null,
+        authCode: authCode ?? null,
+        sessionKey: stateData.sessionKey,
+        provider: stateData.provider ?? null,
+        publicKey: stateData.publicKey ?? null,
+        nonce: stateData.nonce ?? null,
+    };
+}
+/**
+ * Unified OAuth completion handler.
+ * Routes to the appropriate completion handler based on params:
+ * Priority: callbacks.onOauthSuccess > callbacks.onOauthRedirect > completeOauth
+ *
+ * This is the core completion logic used by InAppBrowser flows.
+ */
+async function completeOAuthFlow(params) {
+    const { provider, publicKey, oidcToken, sessionKey, callbacks, completeOauth, } = params;
+    const completionParams = {
+        oidcToken,
+        providerName: provider,
+        publicKey,
+        ...(sessionKey && { sessionKey }),
+    };
+    if (callbacks?.onOauthSuccess) {
+        callbacks.onOauthSuccess(completionParams);
+        return;
+    }
+    if (callbacks?.onOauthRedirect) {
+        callbacks.onOauthRedirect({
+            idToken: oidcToken,
+            publicKey,
+            ...(sessionKey && { sessionKey }),
+        });
+        return;
+    }
+    await completeOauth(completionParams);
+}
+/**
+ * Unified PKCE flow handler for all PKCE-based OAuth providers.
+ * Handles the complete PKCE flow: verifier retrieval, token exchange, and completion routing.
+ *
+ * @param params - The PKCE flow parameters
+ * @returns A promise that resolves when the flow is complete
+ */
+async function handlePKCEFlow(params) {
+    const { provider, publicKey, authCode, sessionKey, callbacks, completeOauth, exchangeCodeForToken, } = params;
+    if (!authCode) {
+        throw new Error(`Missing authorization code from ${provider} OAuth`);
+    }
+    // Get and consume the stored verifier
+    const verifier = await consumePKCEVerifier(provider);
+    try {
+        // Exchange code for token
+        const oidcToken = await exchangeCodeForToken(verifier);
+        if (!oidcToken) {
+            throw new Error(`Missing oidcToken from ${provider} OAuth exchange`);
+        }
+        // Complete the OAuth flow
+        const completionParams = {
+            provider,
+            publicKey,
+            oidcToken,
+            completeOauth,
+        };
+        if (sessionKey) {
+            completionParams.sessionKey = sessionKey;
+        }
+        if (callbacks) {
+            completionParams.callbacks = callbacks;
+        }
+        await completeOAuthFlow(completionParams);
+    }
+    catch (error) {
+        // Ensure cleanup even on error
+        const key = getPKCEVerifierKey(provider);
+        await AsyncStorage.removeItem(key).catch(() => {
+            /* ignore cleanup errors */
+        });
+        throw error;
+    }
+}
+// Function to exchange Facebook authorization code for token
+async function exchangeCodeForToken(clientId, redirectUri, code, codeVerifier) {
+    const params = new URLSearchParams({
+        client_id: clientId,
+        redirect_uri: redirectUri,
+        code_verifier: codeVerifier,
+        code: code,
+        grant_type: "authorization_code",
+    });
+    const response = await fetch(FACEBOOK_GRAPH_URL, {
+        method: "POST",
+        headers: {
+            "Content-Type": "application/x-www-form-urlencoded",
+        },
+        body: params.toString(),
+    });
+    if (!response.ok) {
+        const errorData = await response.json();
+        throw new Error(`Facebook token exchange failed: ${JSON.stringify(errorData)}`);
+    }
+    return await response.json();
+}
+
+exports.APPLE_AUTH_URL = APPLE_AUTH_URL;
+exports.DISCORD_AUTH_URL = DISCORD_AUTH_URL;
+exports.FACEBOOK_AUTH_URL = FACEBOOK_AUTH_URL;
+exports.FACEBOOK_GRAPH_URL = FACEBOOK_GRAPH_URL;
+exports.GOOGLE_AUTH_URL = GOOGLE_AUTH_URL;
+exports.OAUTH_PROVIDER_CONFIGS = OAUTH_PROVIDER_CONFIGS;
+exports.X_AUTH_URL = X_AUTH_URL;
+exports.ZEROXKEY_OAUTH_ORIGIN_URL = ZEROXKEY_OAUTH_ORIGIN_URL;
+exports.ZEROXKEY_OAUTH_REDIRECT_URL = ZEROXKEY_OAUTH_REDIRECT_URL;
+exports.buildOAuthState = buildOAuthState;
+exports.buildOAuthUrl = buildOAuthUrl;
+exports.completeOAuthFlow = completeOAuthFlow;
+exports.consumePKCEVerifier = consumePKCEVerifier;
+exports.exchangeCodeForToken = exchangeCodeForToken;
+exports.generateChallengePair = generateChallengePair;
+exports.getPKCEVerifierKey = getPKCEVerifierKey;
+exports.handlePKCEFlow = handlePKCEFlow;
+exports.parseInAppBrowserResult = parseInAppBrowserResult;
+exports.parseStateParam = parseStateParam;
+exports.storePKCEVerifier = storePKCEVerifier;
+//# sourceMappingURL=oauth.js.map

package/dist/utils/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sources":["../../src/utils/oauth.ts"],"sourcesContent":[null],"names":["OAuthProviders","stringToBase64urlString","sha256"],"mappings":";;;;;;;AASA;AACA;AACA,MAAM,YAAY,GAAI,kBAA0B,CAAC,OAAO,IAAI,kBAAkB;AAEvE,MAAM,gBAAgB,GAAG;AACzB,MAAM,UAAU,GAAG;AACnB,MAAM,eAAe,GAAG;AACxB,MAAM,cAAc,GAAG;AAGvB,MAAM,iBAAiB,GAAG;AAC1B,MAAM,kBAAkB,GAC7B;AAEK,MAAM,yBAAyB,GAAG;AAClC,MAAM,2BAA2B,GAAG;AAE3C;AACA;AACA;AAEA;;AAEG;AACG,SAAU,eAAe,CAAC,MAM/B,EAAA;AACC,IAAA,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,MAAM;AACpE,IAAA,IAAI,KAAK,GAAG,CAAA,SAAA,EAAY,QAAQ,CAAA,MAAA,EAAS,IAAI,CAAA,WAAA,EAAc,kBAAkB,CAAC,SAAS,CAAC,CAAA,CAAE;IAE1F,IAAI,KAAK,EAAE;AACT,QAAA,KAAK,IAAI,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE;IAC5B;IAEA,IAAI,eAAe,EAAE;AACnB,QAAA,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,eAAe;aACzC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAA,CAAA,EAAI,kBAAkB,CAAC,CAAC,CAAC,CAAA,CAAE;aACnE,IAAI,CAAC,GAAG,CAAC;QACZ,IAAI,KAAK,EAAE;AACT,YAAA,KAAK,IAAI,CAAA,CAAA,EAAI,KAAK,CAAA,CAAE;QACtB;IACF;AAEA,IAAA,OAAO,KAAK;AACd;AA0BA;;AAEG;AACI,MAAM,sBAAsB,GAG/B;AACF,IAAA,CAACA,uBAAc,CAAC,MAAM,GAAG;QACvB,QAAQ,EAAEA,uBAAc,CAAC,MAAM;AAC/B,QAAA,OAAO,EAAE,eAAe;AACxB,QAAA,MAAM,EAAE,sBAAsB;AAC9B,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,YAAY,EAAE,UAAU;AACxB,QAAA,aAAa,EAAE,IAAI;AACpB,KAAA;AACD,IAAA,CAACA,uBAAc,CAAC,KAAK,GAAG;QACtB,QAAQ,EAAEA,uBAAc,CAAC,KAAK;AAC9B,QAAA,OAAO,EAAE,cAAc;AACvB,QAAA,MAAM,EAAE,EAAE;AACV,QAAA,QAAQ,EAAE,KAAK;AACf,QAAA,YAAY,EAAE,eAAe;AAC7B,QAAA,YAAY,EAAE,UAAU;AACxB,QAAA,aAAa,EAAE,IAAI;AACpB,KAAA;AACD,IAAA,CAACA,uBAAc,CAAC,QAAQ,GAAG;QACzB,QAAQ,EAAEA,uBAAc,CAAC,QAAQ;AACjC,QAAA,OAAO,EAAE,iBAAiB;AAC1B,QAAA,MAAM,EAAE,QAAQ;AAChB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,YAAY,EAAE,MAAM;AACpB,QAAA,aAAa,EAAE,IAAI;AACpB,KAAA;AACD,IAAA,CAACA,uBAAc,CAAC,OAAO,GAAG;QACxB,QAAQ,EAAEA,uBAAc,CAAC,OAAO;AAChC,QAAA,OAAO,EAAE,gBAAgB;AACzB,QAAA,MAAM,EAAE,gBAAgB;AACxB,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,YAAY,EAAE,MAAM;AACpB,QAAA,aAAa,EAAE,KAAK;AACrB,KAAA;AACD,IAAA,CAACA,uBAAc,CAAC,CAAC,GAAG;QAClB,QAAQ,EAAEA,uBAAc,CAAC,CAAC;AAC1B,QAAA,OAAO,EAAE,UAAU;AACnB,QAAA,MAAM,EAAE,uBAAuB;AAC/B,QAAA,QAAQ,EAAE,IAAI;AACd,QAAA,YAAY,EAAE,MAAM;AACpB,QAAA,aAAa,EAAE,KAAK;AACrB,KAAA;;AAGH;AACA;AACA;AAEA;;AAEG;AACG,SAAU,eAAe,CAAC,UAAqC,EAAA;AASnE,IAAA,IAAI,CAAC,UAAU;AAAE,QAAA,OAAO,EAAE;IAE1B,MAAM,MAAM,GAA0C,EAAE;IACxD,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;AAEnC,IAAA,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE;AACxB,QAAA,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;AACpC,QAAA,IAAI,GAAG,IAAI,KAAK,KAAK,SAAS,EAAE;YAC9B,MAAM,CAAC,GAAG,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC;QACzC;IACF;AAEA,IAAA,OAAO,MAAM;AACf;AAyHA;AACO,eAAe,qBAAqB,GAAA;;AAKzC,IAAA,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC;;AAEtC,IAAA,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC;IACnC,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,WAAW,CAAC;AAC1D,IAAA,MAAM,QAAQ,GAAGC,gCAAuB,CAAC,cAAc,CAAC;;IAGxD,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC;AAChD,IAAA,MAAM,MAAM,GAAGC,aAAM,CAAC,KAAK,CAAC;IAC5B,MAAM,cAAc,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC;AACrD,IAAA,MAAM,aAAa,GAAGD,gCAAuB,CAAC,cAAc,CAAC;AAE7D,IAAA,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE;AACpC;AAYA;;AAEG;AACG,SAAU,kBAAkB,CAAC,QAAsB,EAAA;IACvD,OAAO,CAAA,EAAG,QAAQ,CAAA,SAAA,CAAW;AAC/B;AAEA;;;;AAIG;AACI,eAAe,iBAAiB,CACrC,QAAsB,EACtB,QAAgB,EAAA;AAEhB,IAAA,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC;IACxC,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC;AAC3C;AAEA;;;;;AAKG;AACI,eAAe,mBAAmB,CACvC,QAAsB,EAAA;AAEtB,IAAA,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC;IACxC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC;IAChD,IAAI,CAAC,QAAQ,EAAE;AACb,QAAA,MAAM,IAAI,KAAK,CACb,6BAA6B,QAAQ,CAAA,uCAAA,CAAyC,CAC/E;IACH;AACA,IAAA,MAAM,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;AAClC,IAAA,OAAO,QAAQ;AACjB;AAkCA;;;;;AAKG;AACG,SAAU,aAAa,CAAC,MAA2B,EAAA;IACvD,MAAM,EACJ,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,SAAS,EACT,KAAK,EACL,aAAa,EACb,eAAe,EACf,mBAAmB,GAAG,KAAK,GAC5B,GAAG,MAAM;AAEV,IAAA,MAAM,MAAM,GAAG,sBAAsB,CAAC,QAAQ,CAAC;;AAG/C,IAAA,MAAM,WAAW,GAA0C;QACzD,QAAQ;AACR,QAAA,IAAI,EAAE,UAAU;QAChB,SAAS;KACV;AACD,IAAA,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,KAAK,EAAE;AAClC,QAAA,WAAW,CAAC,KAAK,GAAG,KAAK;IAC3B;IACA,IAAI,eAAe,EAAE;AACnB,QAAA,WAAW,CAAC,eAAe,GAAG,eAAe;IAC/C;AACA,IAAA,MAAM,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC;;IAG1C,IAAI,mBAAmB,EAAE;AACvB,QAAA,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,yBAAyB,CAAC;QAC9C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC1C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC;QAChD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;QACpC,IAAI,aAAa,EAAE;YACjB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,aAAa,CAAC;QACtD;QACA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;AACpC,QAAA,OAAO,GAAG,CAAC,QAAQ,EAAE;IACvB;;IAGA,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;IACvC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC;IAC/C,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC;IACrD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC;AAE9D,IAAA,IAAI,MAAM,CAAC,MAAM,EAAE;QACjB,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;IAClD;AAEA,IAAA,IAAI,MAAM,CAAC,QAAQ,IAAI,aAAa,EAAE;QACpC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC;QACzD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC;IAC3D;IAEA,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC;AAExC,IAAA,OAAO,OAAO,CAAC,QAAQ,EAAE;AAC3B;AAwBA;;;;AAIG;AACG,SAAU,uBAAuB,CACrC,WAAmB,EAAA;IAEnB,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC;IACxC,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,OAAO,GAAG,CAAC,CAAC,GAAG,EAAE;AAC1E,IAAA,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC,WAAW,CAAC;IAElD,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;IACzC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC;IACtC,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;;AAGzC,IAAA,MAAM,SAAS,GAAG,eAAe,CAAC,UAAU,CAAC;IAE7C,OAAO;QACL,OAAO,EAAE,OAAO,IAAI,IAAI;QACxB,QAAQ,EAAE,QAAQ,IAAI,IAAI;QAC1B,UAAU,EAAE,SAAS,CAAC,UAAU;AAChC,QAAA,QAAQ,EAAE,SAAS,CAAC,QAAQ,IAAI,IAAI;AACpC,QAAA,SAAS,EAAE,SAAS,CAAC,SAAS,IAAI,IAAI;AACtC,QAAA,KAAK,EAAE,SAAS,CAAC,KAAK,IAAI,IAAI;KAC/B;AACH;AA2CA;;;;;;AAMG;AACI,eAAe,iBAAiB,CACrC,MAA+B,EAAA;AAE/B,IAAA,MAAM,EACJ,QAAQ,EACR,SAAS,EACT,SAAS,EACT,UAAU,EACV,SAAS,EACT,aAAa,GACd,GAAG,MAAM;AAEV,IAAA,MAAM,gBAAgB,GAAG;QACvB,SAAS;AACT,QAAA,YAAY,EAAE,QAAQ;QACtB,SAAS;AACT,QAAA,IAAI,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC;KAClC;AAED,IAAA,IAAI,SAAS,EAAE,cAAc,EAAE;AAC7B,QAAA,SAAS,CAAC,cAAc,CAAC,gBAAgB,CAAC;QAC1C;IACF;AAEA,IAAA,IAAI,SAAS,EAAE,eAAe,EAAE;QAC9B,SAAS,CAAC,eAAe,CAAC;AACxB,YAAA,OAAO,EAAE,SAAS;YAClB,SAAS;AACT,YAAA,IAAI,UAAU,IAAI,EAAE,UAAU,EAAE,CAAC;AAClC,SAAA,CAAC;QACF;IACF;AAEA,IAAA,MAAM,aAAa,CAAC,gBAAgB,CAAC;AACvC;AAyBA;;;;;;AAMG;AACI,eAAe,cAAc,CAClC,MAA4B,EAAA;AAE5B,IAAA,MAAM,EACJ,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,UAAU,EACV,SAAS,EACT,aAAa,EACb,oBAAoB,GACrB,GAAG,MAAM;IAEV,IAAI,CAAC,QAAQ,EAAE;AACb,QAAA,MAAM,IAAI,KAAK,CAAC,mCAAmC,QAAQ,CAAA,MAAA,CAAQ,CAAC;IACtE;;AAGA,IAAA,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,QAAQ,CAAC;AAEpD,IAAA,IAAI;;AAEF,QAAA,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,QAAQ,CAAC;QAEtD,IAAI,CAAC,SAAS,EAAE;AACd,YAAA,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAA,eAAA,CAAiB,CAAC;QACtE;;AAGA,QAAA,MAAM,gBAAgB,GAA4B;YAChD,QAAQ;YACR,SAAS;YACT,SAAS;YACT,aAAa;SACd;QACD,IAAI,UAAU,EAAE;AACd,YAAA,gBAAgB,CAAC,UAAU,GAAG,UAAU;QAC1C;QACA,IAAI,SAAS,EAAE;AACb,YAAA,gBAAgB,CAAC,SAAS,GAAG,SAAS;QACxC;AACA,QAAA,MAAM,iBAAiB,CAAC,gBAAgB,CAAC;IAC3C;IAAE,OAAO,KAAK,EAAE;;AAEd,QAAA,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC;QACxC,MAAM,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAK;;AAE9C,QAAA,CAAC,CAAC;AACF,QAAA,MAAM,KAAK;IACb;AACF;AAEA;AACO,eAAe,oBAAoB,CACxC,QAAgB,EAChB,WAAmB,EACnB,IAAY,EACZ,YAAoB,EAAA;AAEpB,IAAA,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;AACjC,QAAA,SAAS,EAAE,QAAQ;AACnB,QAAA,YAAY,EAAE,WAAW;AACzB,QAAA,aAAa,EAAE,YAAY;AAC3B,QAAA,IAAI,EAAE,IAAI;AACV,QAAA,UAAU,EAAE,oBAAoB;AACjC,KAAA,CAAC;AAEF,IAAA,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kBAAkB,EAAE;AAC/C,QAAA,MAAM,EAAE,MAAM;AACd,QAAA,OAAO,EAAE;AACP,YAAA,cAAc,EAAE,mCAAmC;AACpD,SAAA;AACD,QAAA,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;AACxB,KAAA,CAAC;AAEF,IAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AAChB,QAAA,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE;AACvC,QAAA,MAAM,IAAI,KAAK,CACb,CAAA,gCAAA,EAAmC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA,CAAE,CAC/D;IACH;AAEA,IAAA,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE;AAC9B;;;;;;;;;;;;;;;;;;;;;;;"}