@0xkey-io/react-wallet-kit 0.1.0

package/dist/utils/oauth/pkce.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.mjs","sources":["../../../src/utils/oauth/pkce.ts"],"sourcesContent":[null],"names":["generateChallengePair","_generateChallengePair","apply","arguments","_asyncToGenerator","_regenerator","m","_callee","randomBytes","verifier","encoder","data","digest","base64Challenge","w","_context","n","Uint8Array","window","crypto","getRandomValues","btoa","String","fromCharCode","_toConsumableArray","replace","TextEncoder","encode","subtle","v","a","codeChallenge","exchangeFacebookCodeForToken","_x","_x2","_x3","_x4","_exchangeFacebookCodeForToken","_callee2","clientId","redirectUri","code","codeVerifier","params","response","errorData","_context2","URLSearchParams","client_id","redirect_uri","code_verifier","grant_type","fetch","FACEBOOK_GRAPH_URL","method","headers","body","toString","ok","json","Error","concat","JSON","stringify"],"mappings":";;;AAEA;;AAEG;AACH,SAAsBA,qBAAqBA,GAAA;AAAA,EAAA,OAAAC,sBAAA,CAAAC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA;AAAA;AAuB3C;;AAEG;AAFH,SAAAF,sBAAAA,GAAA;EAAAA,sBAAA,GAAAG,iBAAA,cAAAC,YAAA,GAAAC,CAAA,CAvBO,SAAAC,OAAAA,GAAA;IAAA,IAAAC,WAAA,EAAAC,QAAA,EAAAC,OAAA,EAAAC,IAAA,EAAAC,MAAA,EAAAC,eAAA;AAAA,IAAA,OAAAR,YAAA,EAAA,CAAAS,CAAA,CAAA,UAAAC,QAAA,EAAA;MAAA,OAAA,CAAA,EAAA,QAAAA,QAAA,CAAAC,CAAA;AAAA,QAAA,KAAA,CAAA;AAICR,UAAAA,WAAW,GAAG,IAAIS,UAAU,CAAC,EAAE,CAAC;AACtCC,UAAAA,MAAM,CAACC,MAAM,CAACC,eAAe,CAACZ,WAAW,CAAC;AACpCC,UAAAA,QAAQ,GAAGY,IAAI,CAACC,MAAM,CAACC,YAAY,CAAArB,KAAA,CAAnBoB,MAAM,EAAAE,kBAAA,CAAiBhB,WAAW,CAAA,CAAC,CAAC,CACvDiB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AAEff,UAAAA,OAAO,GAAG,IAAIgB,WAAW,EAAE;AAC3Bf,UAAAA,IAAI,GAAGD,OAAO,CAACiB,MAAM,CAAClB,QAAQ,CAAC;AAAAM,UAAAA,QAAA,CAAAC,CAAA,GAAA,CAAA;UAAA,OAChBE,MAAM,CAACC,MAAM,CAACS,MAAM,CAAChB,MAAM,CAAC,SAAS,EAAED,IAAI,CAAC;AAAA,QAAA,KAAA,CAAA;UAA3DC,MAAM,GAAAG,QAAA,CAAAc,CAAA;AAENhB,UAAAA,eAAe,GAAGQ,IAAI,CAACC,MAAM,CAACC,YAAY,CAAArB,KAAA,CAAnBoB,MAAM,EAAAE,kBAAA,CAAiB,IAAIP,UAAU,CAACL,MAAM,CAAC,CAAA,CAAC,CAAC,CACzEa,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;UAAA,OAAAV,QAAA,CAAAe,CAAA,CAAA,CAAA,EAEd;AAAErB,YAAAA,QAAQ,EAARA,QAAQ;AAAEsB,YAAAA,aAAa,EAAElB;WAAiB,CAAA;AAAA;AAAA,IAAA,CAAA,EAAAN,OAAA,CAAA;EAAA,CACpD,CAAA,CAAA;AAAA,EAAA,OAAAN,sBAAA,CAAAC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA;AAAA;AAKD,SAAsB6B,4BAA4BA,CAAAC,EAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAA;AAAA,EAAA,OAAAC,6BAAA,CAAAnC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA;AAAA;AA8BjD,SAAAkC,6BAAAA,GAAA;AAAAA,EAAAA,6BAAA,GAAAjC,iBAAA,cAAAC,YAAA,GAAAC,CAAA,CA9BM,SAAAgC,QAAAA,CACLC,QAAgB,EAChBC,WAAmB,EACnBC,IAAY,EACZC,YAAoB,EAAA;AAAA,IAAA,IAAAC,MAAA,EAAAC,QAAA,EAAAC,SAAA;AAAA,IAAA,OAAAxC,YAAA,EAAA,CAAAS,CAAA,CAAA,UAAAgC,SAAA,EAAA;MAAA,OAAA,CAAA,EAAA,QAAAA,SAAA,CAAA9B,CAAA;AAAA,QAAA,KAAA,CAAA;UAEd2B,MAAM,GAAG,IAAII,eAAe,CAAC;AACjCC,YAAAA,SAAS,EAAET,QAAQ;AACnBU,YAAAA,YAAY,EAAET,WAAW;AACzBU,YAAAA,aAAa,EAAER,YAAY;AAC3BD,YAAAA,IAAI,EAAEA,IAAI;AACVU,YAAAA,UAAU,EAAE;AACb,WAAA,CAAC;AAAAL,UAAAA,SAAA,CAAA9B,CAAA,GAAA,CAAA;UAAA,OAEqBoC,KAAK,CAACC,kBAAkB,EAAE;AAC/CC,YAAAA,MAAM,EAAE,MAAM;AACdC,YAAAA,OAAO,EAAE;AACP,cAAA,cAAc,EAAE;aACjB;AACDC,YAAAA,IAAI,EAAEb,MAAM,CAACc,QAAQ;AACtB,WAAA,CAAC;AAAA,QAAA,KAAA,CAAA;UANIb,QAAQ,GAAAE,SAAA,CAAAjB,CAAA;UAAA,IAQTe,QAAQ,CAACc,EAAE,EAAA;AAAAZ,YAAAA,SAAA,CAAA9B,CAAA,GAAA,CAAA;AAAA,YAAA;AAAA,UAAA;AAAA8B,UAAAA,SAAA,CAAA9B,CAAA,GAAA,CAAA;AAAA,UAAA,OACU4B,QAAQ,CAACe,IAAI,EAAE;AAAA,QAAA,KAAA,CAAA;UAAjCd,SAAS,GAAAC,SAAA,CAAAjB,CAAA;AAAA,UAAA,MACT,IAAI+B,KAAK,CAAA,kCAAA,CAAAC,MAAA,CACsBC,IAAI,CAACC,SAAS,CAAClB,SAAS,CAAC,CAAE,CAC/D;AAAA,QAAA,KAAA,CAAA;AAAAC,UAAAA,SAAA,CAAA9B,CAAA,GAAA,CAAA;AAAA,UAAA,OAGU4B,QAAQ,CAACe,IAAI,EAAE;AAAA,QAAA,KAAA,CAAA;AAAA,UAAA,OAAAb,SAAA,CAAAhB,CAAA,CAAA,CAAA,EAAAgB,SAAA,CAAAjB,CAAA,CAAA;AAAA;AAAA,IAAA,CAAA,EAAAS,QAAA,CAAA;EAAA,CAC7B,CAAA,CAAA;AAAA,EAAA,OAAAD,6BAAA,CAAAnC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA;AAAA;;;;"}

package/dist/utils/oauth/storage.d.ts

@@ -0,0 +1,48 @@
+import { OAuthProviders } from "@0xkey-io/sdk-types";
+export declare const OAUTH_INTENT_ADD_PROVIDER = "addProvider";
+export declare const OAUTH_ADD_PROVIDER_METADATA_KEY = "oauth_add_provider_metadata";
+export type OAuthAddProviderMetadata = {
+    organizationId: string;
+    userId: string;
+    stampWith?: string;
+    successPageDuration?: number;
+};
+/** Provider type for PKCE-based OAuth */
+export type PKCEProvider = OAuthProviders.FACEBOOK | OAuthProviders.DISCORD | OAuthProviders.X;
+/**
+ * Stores OAuth add provider metadata in local storage
+ * Used for addOauthProvider flow if opening in-page
+ */
+export declare function storeOAuthAddProviderMetadata(metadata: OAuthAddProviderMetadata): void;
+/**
+ * Retrieves OAuth add provider metadata from local storage
+ */
+export declare function getOAuthAddProviderMetadata(): OAuthAddProviderMetadata | null;
+/**
+ * Gets the verifier key name for a PKCE provider
+ */
+export declare function getPKCEVerifierKey(provider: PKCEProvider): string;
+/**
+ * Retrieves and removes the PKCE verifier from local storage
+ * @param provider - The OAuth provider
+ * @returns The verifier string
+ * @throws ZeroXKeyError if verifier is not found
+ */
+export declare function consumePKCEVerifier(provider: PKCEProvider): string;
+/**
+ * Stores the PKCE verifier in local storage
+ * @param provider - The OAuth provider
+ * @param verifier - The verifier string to store
+ */
+export declare function storePKCEVerifier(provider: PKCEProvider, verifier: string): void;
+/**
+ * Checks if a PKCE verifier exists for a provider (without consuming it)
+ * @param provider - The OAuth provider
+ * @returns true if verifier exists
+ */
+export declare function hasPKCEVerifier(provider: PKCEProvider): boolean;
+/**
+ * Clears all OAuth-related data from local storage
+ */
+export declare function clearAllOAuthData(): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/utils/oauth/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/utils/oauth/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,cAAc,EACf,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,yBAAyB,gBAAgB,CAAC;AACvD,eAAO,MAAM,+BAA+B,gCAAgC,CAAC;AAE7E,MAAM,MAAM,wBAAwB,GAAG;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,yCAAyC;AACzC,MAAM,MAAM,YAAY,GACpB,cAAc,CAAC,QAAQ,GACvB,cAAc,CAAC,OAAO,GACtB,cAAc,CAAC,CAAC,CAAC;AAOrB;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,wBAAwB,GACjC,IAAI,CAKN;AAED;;GAEG;AACH,wBAAgB,2BAA2B,IAAI,wBAAwB,GAAG,IAAI,CAQ7E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAEjE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAWlE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,MAAM,GACf,IAAI,CAEN;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAE/D;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAUxC"}

package/dist/utils/oauth/storage.js

@@ -0,0 +1,87 @@
+'use strict';
+
+var sdkTypes = require('@0xkey-io/sdk-types');
+
+const OAUTH_INTENT_ADD_PROVIDER = "addProvider";
+const OAUTH_ADD_PROVIDER_METADATA_KEY = "oauth_add_provider_metadata";
+// We use localStorage instead of sessionStorage to store OAuth data since the user
+// might leave the current browsing context during the OAuth flow. We ran into this
+// with X OAuth on Android where if the user has the X app installed, oauth would
+// open the native app and when they come back to the browser, sessionStorage is gone
+/**
+ * Stores OAuth add provider metadata in local storage
+ * Used for addOauthProvider flow if opening in-page
+ */
+function storeOAuthAddProviderMetadata(metadata) {
+  localStorage.setItem(OAUTH_ADD_PROVIDER_METADATA_KEY, JSON.stringify(metadata));
+}
+/**
+ * Retrieves OAuth add provider metadata from local storage
+ */
+function getOAuthAddProviderMetadata() {
+  const stored = localStorage.getItem(OAUTH_ADD_PROVIDER_METADATA_KEY);
+  if (!stored) return null;
+  try {
+    return JSON.parse(stored);
+  } catch {
+    return null;
+  }
+}
+/**
+ * Gets the verifier key name for a PKCE provider
+ */
+function getPKCEVerifierKey(provider) {
+  return `${provider}_verifier`;
+}
+/**
+ * Retrieves and removes the PKCE verifier from local storage
+ * @param provider - The OAuth provider
+ * @returns The verifier string
+ * @throws ZeroXKeyError if verifier is not found
+ */
+function consumePKCEVerifier(provider) {
+  const key = getPKCEVerifierKey(provider);
+  const verifier = localStorage.getItem(key);
+  if (!verifier) {
+    throw new sdkTypes.ZeroXKeyError(`Missing PKCE verifier for ${provider} authentication`, sdkTypes.ZeroXKeyErrorCodes.NO_PKCE_VERIFIER_FOUND);
+  }
+  localStorage.removeItem(key);
+  return verifier;
+}
+/**
+ * Stores the PKCE verifier in local storage
+ * @param provider - The OAuth provider
+ * @param verifier - The verifier string to store
+ */
+function storePKCEVerifier(provider, verifier) {
+  localStorage.setItem(getPKCEVerifierKey(provider), verifier);
+}
+/**
+ * Checks if a PKCE verifier exists for a provider (without consuming it)
+ * @param provider - The OAuth provider
+ * @returns true if verifier exists
+ */
+function hasPKCEVerifier(provider) {
+  return localStorage.getItem(getPKCEVerifierKey(provider)) !== null;
+}
+/**
+ * Clears all OAuth-related data from local storage
+ */
+function clearAllOAuthData() {
+  localStorage.removeItem(OAUTH_ADD_PROVIDER_METADATA_KEY);
+  const pkceProviders = [sdkTypes.OAuthProviders.FACEBOOK, sdkTypes.OAuthProviders.DISCORD, sdkTypes.OAuthProviders.X];
+  for (const provider of pkceProviders) {
+    localStorage.removeItem(getPKCEVerifierKey(provider));
+  }
+}
+
+exports.OAUTH_ADD_PROVIDER_METADATA_KEY = OAUTH_ADD_PROVIDER_METADATA_KEY;
+exports.OAUTH_INTENT_ADD_PROVIDER = OAUTH_INTENT_ADD_PROVIDER;
+exports.clearAllOAuthData = clearAllOAuthData;
+exports.consumePKCEVerifier = consumePKCEVerifier;
+exports.getOAuthAddProviderMetadata = getOAuthAddProviderMetadata;
+exports.getPKCEVerifierKey = getPKCEVerifierKey;
+exports.hasPKCEVerifier = hasPKCEVerifier;
+exports.storeOAuthAddProviderMetadata = storeOAuthAddProviderMetadata;
+exports.storePKCEVerifier = storePKCEVerifier;
+//# sourceMappingURL=storage.js.map

package/dist/utils/oauth/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sources":["../../../src/utils/oauth/storage.ts"],"sourcesContent":[null],"names":["OAUTH_INTENT_ADD_PROVIDER","OAUTH_ADD_PROVIDER_METADATA_KEY","storeOAuthAddProviderMetadata","metadata","localStorage","setItem","JSON","stringify","getOAuthAddProviderMetadata","stored","getItem","parse","getPKCEVerifierKey","provider","consumePKCEVerifier","key","verifier","ZeroXKeyError","ZeroXKeyErrorCodes","NO_PKCE_VERIFIER_FOUND","removeItem","storePKCEVerifier","hasPKCEVerifier","clearAllOAuthData","pkceProviders","OAuthProviders","FACEBOOK","DISCORD","X"],"mappings":";;;;AAMO,MAAMA,yBAAyB,GAAG;AAClC,MAAMC,+BAA+B,GAAG;AAe/C;AACA;AACA;AACA;AAEA;;;AAGG;AACG,SAAUC,6BAA6BA,CAC3CC,QAAkC,EAAA;EAElCC,YAAY,CAACC,OAAO,CAClBJ,+BAA+B,EAC/BK,IAAI,CAACC,SAAS,CAACJ,QAAQ,CAAC,CACzB;AACH;AAEA;;AAEG;SACaK,2BAA2BA,GAAA;AACzC,EAAA,MAAMC,MAAM,GAAGL,YAAY,CAACM,OAAO,CAACT,+BAA+B,CAAC;AACpE,EAAA,IAAI,CAACQ,MAAM,EAAE,OAAO,IAAI;EACxB,IAAI;AACF,IAAA,OAAOH,IAAI,CAACK,KAAK,CAACF,MAAM,CAA6B;AACvD,EAAA,CAAC,CAAC,MAAM;AACN,IAAA,OAAO,IAAI;AACb,EAAA;AACF;AAEA;;AAEG;AACG,SAAUG,kBAAkBA,CAACC,QAAsB,EAAA;EACvD,OAAO,CAAA,EAAGA,QAAQ,CAAA,SAAA,CAAW;AAC/B;AAEA;;;;;AAKG;AACG,SAAUC,mBAAmBA,CAACD,QAAsB,EAAA;AACxD,EAAA,MAAME,GAAG,GAAGH,kBAAkB,CAACC,QAAQ,CAAC;AACxC,EAAA,MAAMG,QAAQ,GAAGZ,YAAY,CAACM,OAAO,CAACK,GAAG,CAAC;EAC1C,IAAI,CAACC,QAAQ,EAAE;IACb,MAAM,IAAIC,sBAAa,CACrB,CAAA,0BAAA,EAA6BJ,QAAQ,iBAAiB,EACtDK,2BAAkB,CAACC,sBAAsB,CAC1C;AACH,EAAA;AACAf,EAAAA,YAAY,CAACgB,UAAU,CAACL,GAAG,CAAC;AAC5B,EAAA,OAAOC,QAAQ;AACjB;AAEA;;;;AAIG;AACG,SAAUK,iBAAiBA,CAC/BR,QAAsB,EACtBG,QAAgB,EAAA;EAEhBZ,YAAY,CAACC,OAAO,CAACO,kBAAkB,CAACC,QAAQ,CAAC,EAAEG,QAAQ,CAAC;AAC9D;AAEA;;;;AAIG;AACG,SAAUM,eAAeA,CAACT,QAAsB,EAAA;EACpD,OAAOT,YAAY,CAACM,OAAO,CAACE,kBAAkB,CAACC,QAAQ,CAAC,CAAC,KAAK,IAAI;AACpE;AAEA;;AAEG;SACaU,iBAAiBA,GAAA;AAC/BnB,EAAAA,YAAY,CAACgB,UAAU,CAACnB,+BAA+B,CAAC;AACxD,EAAA,MAAMuB,aAAa,GAAmB,CACpCC,uBAAc,CAACC,QAAQ,EACvBD,uBAAc,CAACE,OAAO,EACtBF,uBAAc,CAACG,CAAC,CACjB;AACD,EAAA,KAAK,MAAMf,QAAQ,IAAIW,aAAa,EAAE;AACpCpB,IAAAA,YAAY,CAACgB,UAAU,CAACR,kBAAkB,CAACC,QAAQ,CAAC,CAAC;AACvD,EAAA;AACF;;;;;;;;;;;;"}

package/dist/utils/oauth/storage.mjs

@@ -0,0 +1,78 @@
+import { OAuthProviders, ZeroXKeyError, ZeroXKeyErrorCodes } from '@0xkey-io/sdk-types';
+
+var OAUTH_INTENT_ADD_PROVIDER = "addProvider";
+var OAUTH_ADD_PROVIDER_METADATA_KEY = "oauth_add_provider_metadata";
+// We use localStorage instead of sessionStorage to store OAuth data since the user
+// might leave the current browsing context during the OAuth flow. We ran into this
+// with X OAuth on Android where if the user has the X app installed, oauth would
+// open the native app and when they come back to the browser, sessionStorage is gone
+/**
+ * Stores OAuth add provider metadata in local storage
+ * Used for addOauthProvider flow if opening in-page
+ */
+function storeOAuthAddProviderMetadata(metadata) {
+  localStorage.setItem(OAUTH_ADD_PROVIDER_METADATA_KEY, JSON.stringify(metadata));
+}
+/**
+ * Retrieves OAuth add provider metadata from local storage
+ */
+function getOAuthAddProviderMetadata() {
+  var stored = localStorage.getItem(OAUTH_ADD_PROVIDER_METADATA_KEY);
+  if (!stored) return null;
+  try {
+    return JSON.parse(stored);
+  } catch (_unused) {
+    return null;
+  }
+}
+/**
+ * Gets the verifier key name for a PKCE provider
+ */
+function getPKCEVerifierKey(provider) {
+  return "".concat(provider, "_verifier");
+}
+/**
+ * Retrieves and removes the PKCE verifier from local storage
+ * @param provider - The OAuth provider
+ * @returns The verifier string
+ * @throws ZeroXKeyError if verifier is not found
+ */
+function consumePKCEVerifier(provider) {
+  var key = getPKCEVerifierKey(provider);
+  var verifier = localStorage.getItem(key);
+  if (!verifier) {
+    throw new ZeroXKeyError("Missing PKCE verifier for ".concat(provider, " authentication"), ZeroXKeyErrorCodes.NO_PKCE_VERIFIER_FOUND);
+  }
+  localStorage.removeItem(key);
+  return verifier;
+}
+/**
+ * Stores the PKCE verifier in local storage
+ * @param provider - The OAuth provider
+ * @param verifier - The verifier string to store
+ */
+function storePKCEVerifier(provider, verifier) {
+  localStorage.setItem(getPKCEVerifierKey(provider), verifier);
+}
+/**
+ * Checks if a PKCE verifier exists for a provider (without consuming it)
+ * @param provider - The OAuth provider
+ * @returns true if verifier exists
+ */
+function hasPKCEVerifier(provider) {
+  return localStorage.getItem(getPKCEVerifierKey(provider)) !== null;
+}
+/**
+ * Clears all OAuth-related data from local storage
+ */
+function clearAllOAuthData() {
+  localStorage.removeItem(OAUTH_ADD_PROVIDER_METADATA_KEY);
+  var pkceProviders = [OAuthProviders.FACEBOOK, OAuthProviders.DISCORD, OAuthProviders.X];
+  for (var _i = 0, _pkceProviders = pkceProviders; _i < _pkceProviders.length; _i++) {
+    var provider = _pkceProviders[_i];
+    localStorage.removeItem(getPKCEVerifierKey(provider));
+  }
+}
+
+export { OAUTH_ADD_PROVIDER_METADATA_KEY, OAUTH_INTENT_ADD_PROVIDER, clearAllOAuthData, consumePKCEVerifier, getOAuthAddProviderMetadata, getPKCEVerifierKey, hasPKCEVerifier, storeOAuthAddProviderMetadata, storePKCEVerifier };
+//# sourceMappingURL=storage.mjs.map

package/dist/utils/oauth/storage.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.mjs","sources":["../../../src/utils/oauth/storage.ts"],"sourcesContent":[null],"names":["OAUTH_INTENT_ADD_PROVIDER","OAUTH_ADD_PROVIDER_METADATA_KEY","storeOAuthAddProviderMetadata","metadata","localStorage","setItem","JSON","stringify","getOAuthAddProviderMetadata","stored","getItem","parse","_unused","getPKCEVerifierKey","provider","concat","consumePKCEVerifier","key","verifier","ZeroXKeyError","ZeroXKeyErrorCodes","NO_PKCE_VERIFIER_FOUND","removeItem","storePKCEVerifier","hasPKCEVerifier","clearAllOAuthData","pkceProviders","OAuthProviders","FACEBOOK","DISCORD","X","_i","_pkceProviders","length"],"mappings":";;AAMO,IAAMA,yBAAyB,GAAG;AAClC,IAAMC,+BAA+B,GAAG;AAe/C;AACA;AACA;AACA;AAEA;;;AAGG;AACG,SAAUC,6BAA6BA,CAC3CC,QAAkC,EAAA;EAElCC,YAAY,CAACC,OAAO,CAClBJ,+BAA+B,EAC/BK,IAAI,CAACC,SAAS,CAACJ,QAAQ,CAAC,CACzB;AACH;AAEA;;AAEG;SACaK,2BAA2BA,GAAA;AACzC,EAAA,IAAMC,MAAM,GAAGL,YAAY,CAACM,OAAO,CAACT,+BAA+B,CAAC;AACpE,EAAA,IAAI,CAACQ,MAAM,EAAE,OAAO,IAAI;EACxB,IAAI;AACF,IAAA,OAAOH,IAAI,CAACK,KAAK,CAACF,MAAM,CAA6B;EACvD,CAAC,CAAC,OAAAG,OAAA,EAAM;AACN,IAAA,OAAO,IAAI;AACb,EAAA;AACF;AAEA;;AAEG;AACG,SAAUC,kBAAkBA,CAACC,QAAsB,EAAA;EACvD,OAAA,EAAA,CAAAC,MAAA,CAAUD,QAAQ,EAAA,WAAA,CAAA;AACpB;AAEA;;;;;AAKG;AACG,SAAUE,mBAAmBA,CAACF,QAAsB,EAAA;AACxD,EAAA,IAAMG,GAAG,GAAGJ,kBAAkB,CAACC,QAAQ,CAAC;AACxC,EAAA,IAAMI,QAAQ,GAAGd,YAAY,CAACM,OAAO,CAACO,GAAG,CAAC;EAC1C,IAAI,CAACC,QAAQ,EAAE;IACb,MAAM,IAAIC,aAAa,CAAA,4BAAA,CAAAJ,MAAA,CACQD,QAAQ,EAAA,iBAAA,CAAA,EACrCM,kBAAkB,CAACC,sBAAsB,CAC1C;AACH,EAAA;AACAjB,EAAAA,YAAY,CAACkB,UAAU,CAACL,GAAG,CAAC;AAC5B,EAAA,OAAOC,QAAQ;AACjB;AAEA;;;;AAIG;AACG,SAAUK,iBAAiBA,CAC/BT,QAAsB,EACtBI,QAAgB,EAAA;EAEhBd,YAAY,CAACC,OAAO,CAACQ,kBAAkB,CAACC,QAAQ,CAAC,EAAEI,QAAQ,CAAC;AAC9D;AAEA;;;;AAIG;AACG,SAAUM,eAAeA,CAACV,QAAsB,EAAA;EACpD,OAAOV,YAAY,CAACM,OAAO,CAACG,kBAAkB,CAACC,QAAQ,CAAC,CAAC,KAAK,IAAI;AACpE;AAEA;;AAEG;SACaW,iBAAiBA,GAAA;AAC/BrB,EAAAA,YAAY,CAACkB,UAAU,CAACrB,+BAA+B,CAAC;AACxD,EAAA,IAAMyB,aAAa,GAAmB,CACpCC,cAAc,CAACC,QAAQ,EACvBD,cAAc,CAACE,OAAO,EACtBF,cAAc,CAACG,CAAC,CACjB;AACD,EAAA,KAAA,IAAAC,EAAA,GAAA,CAAA,EAAAC,cAAA,GAAuBN,aAAa,EAAAK,EAAA,GAAAC,cAAA,CAAAC,MAAA,EAAAF,EAAA,EAAA,EAAE;AAAjC,IAAA,IAAMjB,QAAQ,GAAAkB,cAAA,CAAAD,EAAA,CAAA;AACjB3B,IAAAA,YAAY,CAACkB,UAAU,CAACT,kBAAkB,CAACC,QAAQ,CAAC,CAAC;AACvD,EAAA;AACF;;;;"}

package/dist/utils/oauth/url.d.ts

@@ -0,0 +1,94 @@
+import { OAuthProviders } from "@0xkey-io/sdk-types";
+/**
+ * Builds the OAuth state parameter string
+ */
+export declare function buildOAuthState(params: {
+    provider: OAuthProviders;
+    flow: "redirect" | "popup";
+    publicKey: string;
+    nonce?: string;
+    additionalState?: Record<string, string> | undefined;
+}): string;
+/**
+ * Opens a centered OAuth popup window
+ */
+export declare function openOAuthPopup(): Window | null;
+/**
+ * Redirects to OAuth provider URL
+ */
+export declare function redirectToOAuthProvider(url: string): Promise<never>;
+/**
+ * Cleans up OAuth parameters from URL (removes hash and search)
+ */
+export declare function cleanupOAuthUrl(): void;
+/**
+ * Cleans up OAuth hash from URL but preserves search parameters
+ */
+export declare function cleanupOAuthUrlPreserveSearch(): void;
+/**
+ * Parses the OAuth state parameter string into an object
+ */
+export declare function parseStateParam(stateParam: string | null | undefined): {
+    sessionKey?: string;
+    oauthIntent?: string;
+    provider?: string;
+    flow?: string;
+    publicKey?: string;
+    openModal?: string;
+    [key: string]: string | undefined;
+};
+/**
+ * Result from parsing an OAuth response (both popup and redirect flows)
+ */
+export interface OAuthResponseResult {
+    /** The OIDC token (for non-PKCE providers) */
+    idToken?: string | null | undefined;
+    /** The authorization code (for PKCE providers) */
+    authCode?: string | null | undefined;
+    /** Session key from state */
+    sessionKey?: string | undefined;
+    /** The provider from state */
+    provider?: string | null;
+    /** Flow type from state */
+    flow?: string | null;
+    /** Public key from state */
+    publicKey?: string | null;
+    /** Open modal flag from state */
+    openModal?: string | null;
+    /** OAuth intent from state */
+    oauthIntent?: string | null;
+    /** Nonce from state */
+    nonce?: string | null;
+    /** Redirect URI used to create the authorization code. */
+    redirectUri?: string | null;
+}
+/**
+ * Unified OAuth response parser for both popup and redirect flows.
+ * Handles both:
+ * - PKCE flows (Facebook, Discord, X): code in search parameters
+ * - Non-PKCE flows (Google, Apple): id_token in hash parameters
+ * - Apple's non-standard hash format where state parameters are directly embedded
+ *
+ * @param url - The full URL to parse (from popup or redirect)
+ * @param expectedProvider - Optional provider if already known (for popup flows)
+ * @returns Parsed OAuth response data including tokens, codes, and state parameters, or null if invalid
+ */
+export declare function parseOAuthResponse(url: string, expectedProvider?: OAuthProviders): OAuthResponseResult | null;
+/**
+ * Parameters for building an OAuth URL
+ */
+export interface BuildOAuthUrlParams {
+    provider: OAuthProviders;
+    clientId: string;
+    redirectUri: string;
+    publicKey: string;
+    nonce: string;
+    flow: "redirect" | "popup";
+    codeChallenge?: string | undefined;
+    additionalState?: Record<string, string> | undefined;
+}
+/**
+ * Builds the complete OAuth authorization URL for a provider
+ */
+export declare function buildOAuthUrl(params: BuildOAuthUrlParams): string;
+//# sourceMappingURL=url.d.ts.map

package/dist/utils/oauth/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../../src/utils/oauth/url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD,GAAG,MAAM,CAkBT;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAW9C;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CASnE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED;;GAEG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAMpD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC,CAcA;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACpC,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,0DAA0D;IAC1D,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,cAAc,GAChC,mBAAmB,GAAG,IAAI,CA6E5B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CA2DjE"}

package/dist/utils/oauth/url.js

@@ -0,0 +1,224 @@
+'use strict';
+
+var sdkTypes = require('@0xkey-io/sdk-types');
+var config = require('./config.js');
+
+/**
+ * Builds the OAuth state parameter string
+ */
+function buildOAuthState(params) {
+  const {
+    provider,
+    flow,
+    publicKey,
+    nonce,
+    additionalState
+  } = params;
+  let state = `provider=${provider}&flow=${flow}&publicKey=${encodeURIComponent(publicKey)}`;
+  if (nonce) {
+    state += `&nonce=${nonce}`;
+  }
+  if (additionalState) {
+    const extra = Object.entries(additionalState).map(([k, v]) => `${encodeURIComponent(k)}=${encodeURIComponent(v)}`).join("&");
+    if (extra) {
+      state += `&${extra}`;
+    }
+  }
+  return state;
+}
+/**
+ * Opens a centered OAuth popup window
+ */
+function openOAuthPopup() {
+  const width = config.popupWidth;
+  const height = config.popupHeight;
+  const left = window.screenX + (window.innerWidth - width) / 2;
+  const top = window.screenY + (window.innerHeight - height) / 2;
+  return window.open("about:blank", "_blank", `width=${width},height=${height},top=${top},left=${left},scrollbars=yes,resizable=yes`);
+}
+/**
+ * Redirects to OAuth provider URL
+ */
+function redirectToOAuthProvider(url) {
+  window.location.href = url;
+  const timeLimit = 5 * 60 * 1000; // 5 minutes
+  return new Promise((_, reject) => {
+    const timeout = setTimeout(() => {
+      reject(new Error("Authentication timed out."));
+    }, timeLimit);
+    window.addEventListener("beforeunload", () => clearTimeout(timeout));
+  });
+}
+/**
+ * Cleans up OAuth parameters from URL (removes hash and search)
+ */
+function cleanupOAuthUrl() {
+  window.history.replaceState(null, document.title, window.location.pathname);
+}
+/**
+ * Cleans up OAuth hash from URL but preserves search parameters
+ */
+function cleanupOAuthUrlPreserveSearch() {
+  window.history.replaceState(null, document.title, window.location.pathname + window.location.search);
+}
+/**
+ * Parses the OAuth state parameter string into an object
+ */
+function parseStateParam(stateParam) {
+  if (!stateParam) return {};
+  const result = {};
+  const pairs = stateParam.split("&");
+  for (const pair of pairs) {
+    const [key, value] = pair.split("=");
+    if (key && value !== undefined) {
+      result[key] = decodeURIComponent(value);
+    }
+  }
+  return result;
+}
+/**
+ * Unified OAuth response parser for both popup and redirect flows.
+ * Handles both:
+ * - PKCE flows (Facebook, Discord, X): code in search parameters
+ * - Non-PKCE flows (Google, Apple): id_token in hash parameters
+ * - Apple's non-standard hash format where state parameters are directly embedded
+ *
+ * @param url - The full URL to parse (from popup or redirect)
+ * @param expectedProvider - Optional provider if already known (for popup flows)
+ * @returns Parsed OAuth response data including tokens, codes, and state parameters, or null if invalid
+ */
+function parseOAuthResponse(url, expectedProvider) {
+  let idToken = null;
+  let authCode = null;
+  let stateString = null;
+  const parsedUrl = new URL(url);
+  const search = parsedUrl.search.substring(1); // Remove leading '?'
+  const hash = parsedUrl.hash.substring(1); // Remove leading '#'
+  // Handle PKCE flows (code in search parameters)
+  if (search && search.includes("code=")) {
+    const searchParams = new URLSearchParams(search);
+    authCode = searchParams.get("code");
+    stateString = searchParams.get("state");
+  }
+  // Handle non-PKCE flows (id_token in hash)
+  else if (hash) {
+    // Handle Apple's non-standard format: state=provider=apple&flow=redirect&...&code=...&id_token=...
+    if (hash.startsWith("state=provider=apple")) {
+      // Extract id_token from the end
+      const idTokenMatch = hash.match(/id_token=([^&]+)$/);
+      idToken = idTokenMatch ? idTokenMatch[1] : null;
+      // Extract state content between "state=" and "&code="
+      const stateEndIndex = hash.indexOf("&code=");
+      if (stateEndIndex !== -1) {
+        stateString = hash.substring(6, stateEndIndex); // Remove "state=" prefix
+      }
+    } else {
+      // Standard OAuth format - parse as URLSearchParams
+      const hashParams = new URLSearchParams(hash);
+      idToken = hashParams.get("id_token");
+      stateString = hashParams.get("state");
+    }
+  }
+  // Parse state parameters
+  const {
+    provider,
+    flow,
+    publicKey,
+    openModal,
+    sessionKey,
+    oauthIntent,
+    nonce,
+    redirectUri
+  } = parseStateParam(stateString);
+  // If we have an expected provider (popup flow), validate it matches
+  if (expectedProvider) {
+    const config$1 = config.OAUTH_PROVIDER_CONFIGS[expectedProvider];
+    if (config$1.usesPKCE) {
+      // PKCE providers must have authCode and matching provider in state
+      if (!authCode || !stateString || provider !== expectedProvider) {
+        return null;
+      }
+    } else {
+      // Non-PKCE providers must have idToken
+      if (!idToken) {
+        return null;
+      }
+    }
+  }
+  return {
+    idToken,
+    authCode,
+    provider: provider ?? null,
+    flow: flow ?? null,
+    publicKey: publicKey ?? null,
+    openModal: openModal ?? null,
+    sessionKey: sessionKey ?? undefined,
+    oauthIntent: oauthIntent ?? null,
+    nonce: nonce ?? null,
+    redirectUri: redirectUri ?? null
+  };
+}
+/**
+ * Builds the complete OAuth authorization URL for a provider
+ */
+function buildOAuthUrl(params) {
+  const {
+    provider,
+    clientId,
+    redirectUri,
+    publicKey,
+    nonce,
+    flow,
+    codeChallenge,
+    additionalState
+  } = params;
+  const config$1 = config.OAUTH_PROVIDER_CONFIGS[provider];
+  const authUrl = new URL(config$1.authUrl);
+  authUrl.searchParams.set("client_id", clientId);
+  authUrl.searchParams.set("redirect_uri", redirectUri);
+  authUrl.searchParams.set("response_type", config$1.responseType);
+  if (config$1.scopes) {
+    authUrl.searchParams.set("scope", config$1.scopes);
+  }
+  if (config$1.responseMode) {
+    authUrl.searchParams.set("response_mode", config$1.responseMode);
+  }
+  // PKCE parameters
+  if (config$1.usesPKCE && codeChallenge) {
+    authUrl.searchParams.set("code_challenge", codeChallenge);
+    authUrl.searchParams.set("code_challenge_method", "S256");
+  }
+  // Nonce handling - some providers want it in URL params, others in state
+  if (config$1.nonceInParams) {
+    authUrl.searchParams.set("nonce", nonce);
+  }
+  // Google-specific: prompt for account selection
+  if (provider === sdkTypes.OAuthProviders.GOOGLE) {
+    authUrl.searchParams.set("prompt", "select_account");
+  }
+  // Build state parameter
+  const stateParams = {
+    provider,
+    flow,
+    publicKey
+  };
+  // Include nonce in state for providers that need it there (not in URL params)
+  if (!config$1.nonceInParams) {
+    stateParams.nonce = nonce;
+  }
+  if (additionalState) {
+    stateParams.additionalState = additionalState;
+  }
+  authUrl.searchParams.set("state", buildOAuthState(stateParams));
+  return authUrl.toString();
+}
+
+exports.buildOAuthState = buildOAuthState;
+exports.buildOAuthUrl = buildOAuthUrl;
+exports.cleanupOAuthUrl = cleanupOAuthUrl;
+exports.cleanupOAuthUrlPreserveSearch = cleanupOAuthUrlPreserveSearch;
+exports.openOAuthPopup = openOAuthPopup;
+exports.parseOAuthResponse = parseOAuthResponse;
+exports.parseStateParam = parseStateParam;
+exports.redirectToOAuthProvider = redirectToOAuthProvider;
+//# sourceMappingURL=url.js.map

package/dist/utils/oauth/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sources":["../../../src/utils/oauth/url.ts"],"sourcesContent":[null],"names":["buildOAuthState","params","provider","flow","publicKey","nonce","additionalState","state","encodeURIComponent","extra","Object","entries","map","k","v","join","openOAuthPopup","width","popupWidth","height","popupHeight","left","window","screenX","innerWidth","top","screenY","innerHeight","open","redirectToOAuthProvider","url","location","href","timeLimit","Promise","_","reject","timeout","setTimeout","Error","addEventListener","clearTimeout","cleanupOAuthUrl","history","replaceState","document","title","pathname","cleanupOAuthUrlPreserveSearch","search","parseStateParam","stateParam","result","pairs","split","pair","key","value","undefined","decodeURIComponent","parseOAuthResponse","expectedProvider","idToken","authCode","stateString","parsedUrl","URL","substring","hash","includes","searchParams","URLSearchParams","get","startsWith","idTokenMatch","match","stateEndIndex","indexOf","hashParams","openModal","sessionKey","oauthIntent","redirectUri","config","OAUTH_PROVIDER_CONFIGS","usesPKCE","buildOAuthUrl","clientId","codeChallenge","authUrl","set","responseType","scopes","responseMode","nonceInParams","OAuthProviders","GOOGLE","stateParams","toString"],"mappings":";;;;;AAGA;;AAEG;AACG,SAAUA,eAAeA,CAACC,MAM/B,EAAA;EACC,MAAM;IAAEC,QAAQ;IAAEC,IAAI;IAAEC,SAAS;IAAEC,KAAK;AAAEC,IAAAA;AAAe,GAAE,GAAGL,MAAM;EACpE,IAAIM,KAAK,GAAG,CAAA,SAAA,EAAYL,QAAQ,CAAA,MAAA,EAASC,IAAI,CAAA,WAAA,EAAcK,kBAAkB,CAACJ,SAAS,CAAC,CAAA,CAAE;AAE1F,EAAA,IAAIC,KAAK,EAAE;IACTE,KAAK,IAAI,CAAA,OAAA,EAAUF,KAAK,CAAA,CAAE;AAC5B,EAAA;AAEA,EAAA,IAAIC,eAAe,EAAE;AACnB,IAAA,MAAMG,KAAK,GAAGC,MAAM,CAACC,OAAO,CAACL,eAAe,CAAC,CAC1CM,GAAG,CAAC,CAAC,CAACC,CAAC,EAAEC,CAAC,CAAC,KAAK,CAAA,EAAGN,kBAAkB,CAACK,CAAC,CAAC,IAAIL,kBAAkB,CAACM,CAAC,CAAC,EAAE,CAAC,CACpEC,IAAI,CAAC,GAAG,CAAC;AACZ,IAAA,IAAIN,KAAK,EAAE;MACTF,KAAK,IAAI,CAAA,CAAA,EAAIE,KAAK,CAAA,CAAE;AACtB,IAAA;AACF,EAAA;AAEA,EAAA,OAAOF,KAAK;AACd;AAEA;;AAEG;SACaS,cAAcA,GAAA;EAC5B,MAAMC,KAAK,GAAGC,iBAAU;EACxB,MAAMC,MAAM,GAAGC,kBAAW;AAC1B,EAAA,MAAMC,IAAI,GAAGC,MAAM,CAACC,OAAO,GAAG,CAACD,MAAM,CAACE,UAAU,GAAGP,KAAK,IAAI,CAAC;AAC7D,EAAA,MAAMQ,GAAG,GAAGH,MAAM,CAACI,OAAO,GAAG,CAACJ,MAAM,CAACK,WAAW,GAAGR,MAAM,IAAI,CAAC;AAE9D,EAAA,OAAOG,MAAM,CAACM,IAAI,CAChB,aAAa,EACb,QAAQ,EACR,CAAA,MAAA,EAASX,KAAK,WAAWE,MAAM,CAAA,KAAA,EAAQM,GAAG,CAAA,MAAA,EAASJ,IAAI,+BAA+B,CACvF;AACH;AAEA;;AAEG;AACG,SAAUQ,uBAAuBA,CAACC,GAAW,EAAA;AACjDR,EAAAA,MAAM,CAACS,QAAQ,CAACC,IAAI,GAAGF,GAAG;EAC1B,MAAMG,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAChC,EAAA,OAAO,IAAIC,OAAO,CAAC,CAACC,CAAC,EAAEC,MAAM,KAAI;AAC/B,IAAA,MAAMC,OAAO,GAAGC,UAAU,CAAC,MAAK;AAC9BF,MAAAA,MAAM,CAAC,IAAIG,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAChD,CAAC,EAAEN,SAAS,CAAC;IACbX,MAAM,CAACkB,gBAAgB,CAAC,cAAc,EAAE,MAAMC,YAAY,CAACJ,OAAO,CAAC,CAAC;AACtE,EAAA,CAAC,CAAC;AACJ;AAEA;;AAEG;SACaK,eAAeA,GAAA;AAC7BpB,EAAAA,MAAM,CAACqB,OAAO,CAACC,YAAY,CAAC,IAAI,EAAEC,QAAQ,CAACC,KAAK,EAAExB,MAAM,CAACS,QAAQ,CAACgB,QAAQ,CAAC;AAC7E;AAEA;;AAEG;SACaC,6BAA6BA,GAAA;EAC3C1B,MAAM,CAACqB,OAAO,CAACC,YAAY,CACzB,IAAI,EACJC,QAAQ,CAACC,KAAK,EACdxB,MAAM,CAACS,QAAQ,CAACgB,QAAQ,GAAGzB,MAAM,CAACS,QAAQ,CAACkB,MAAM,CAClD;AACH;AAEA;;AAEG;AACG,SAAUC,eAAeA,CAACC,UAAqC,EAAA;AASnE,EAAA,IAAI,CAACA,UAAU,EAAE,OAAO,EAAE;EAE1B,MAAMC,MAAM,GAA0C,EAAE;AACxD,EAAA,MAAMC,KAAK,GAAGF,UAAU,CAACG,KAAK,CAAC,GAAG,CAAC;AAEnC,EAAA,KAAK,MAAMC,IAAI,IAAIF,KAAK,EAAE;IACxB,MAAM,CAACG,GAAG,EAAEC,KAAK,CAAC,GAAGF,IAAI,CAACD,KAAK,CAAC,GAAG,CAAC;AACpC,IAAA,IAAIE,GAAG,IAAIC,KAAK,KAAKC,SAAS,EAAE;AAC9BN,MAAAA,MAAM,CAACI,GAAG,CAAC,GAAGG,kBAAkB,CAACF,KAAK,CAAC;AACzC,IAAA;AACF,EAAA;AAEA,EAAA,OAAOL,MAAM;AACf;AA4BA;;;;;;;;;;AAUG;AACG,SAAUQ,kBAAkBA,CAChC9B,GAAW,EACX+B,gBAAiC,EAAA;EAEjC,IAAIC,OAAO,GAA8B,IAAI;EAC7C,IAAIC,QAAQ,GAA8B,IAAI;EAC9C,IAAIC,WAAW,GAAkB,IAAI;AAErC,EAAA,MAAMC,SAAS,GAAG,IAAIC,GAAG,CAACpC,GAAG,CAAC;EAC9B,MAAMmB,MAAM,GAAGgB,SAAS,CAAChB,MAAM,CAACkB,SAAS,CAAC,CAAC,CAAC,CAAC;EAC7C,MAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI,CAACD,SAAS,CAAC,CAAC,CAAC,CAAC;AAEzC;EACA,IAAIlB,MAAM,IAAIA,MAAM,CAACoB,QAAQ,CAAC,OAAO,CAAC,EAAE;AACtC,IAAA,MAAMC,YAAY,GAAG,IAAIC,eAAe,CAACtB,MAAM,CAAC;AAChDc,IAAAA,QAAQ,GAAGO,YAAY,CAACE,GAAG,CAAC,MAAM,CAAC;AACnCR,IAAAA,WAAW,GAAGM,YAAY,CAACE,GAAG,CAAC,OAAO,CAAC;AACzC,EAAA;AACA;OACK,IAAIJ,IAAI,EAAE;AACb;AACA,IAAA,IAAIA,IAAI,CAACK,UAAU,CAAC,sBAAsB,CAAC,EAAE;AAC3C;AACA,MAAA,MAAMC,YAAY,GAAGN,IAAI,CAACO,KAAK,CAAC,mBAAmB,CAAC;MACpDb,OAAO,GAAGY,YAAY,GAAGA,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI;AAE/C;AACA,MAAA,MAAME,aAAa,GAAGR,IAAI,CAACS,OAAO,CAAC,QAAQ,CAAC;AAC5C,MAAA,IAAID,aAAa,KAAK,EAAE,EAAE;QACxBZ,WAAW,GAAGI,IAAI,CAACD,SAAS,CAAC,CAAC,EAAES,aAAa,CAAC,CAAC;AACjD,MAAA;AACF,IAAA,CAAC,MAAM;AACL;AACA,MAAA,MAAME,UAAU,GAAG,IAAIP,eAAe,CAACH,IAAI,CAAC;AAC5CN,MAAAA,OAAO,GAAGgB,UAAU,CAACN,GAAG,CAAC,UAAU,CAAC;AACpCR,MAAAA,WAAW,GAAGc,UAAU,CAACN,GAAG,CAAC,OAAO,CAAC;AACvC,IAAA;AACF,EAAA;AAEA;EACA,MAAM;IACJtE,QAAQ;IACRC,IAAI;IACJC,SAAS;IACT2E,SAAS;IACTC,UAAU;IACVC,WAAW;IACX5E,KAAK;AACL6E,IAAAA;AAAW,GACZ,GAAGhC,eAAe,CAACc,WAAW,CAAC;AAEhC;AACA,EAAA,IAAIH,gBAAgB,EAAE;AACpB,IAAA,MAAMsB,QAAM,GAAGC,6BAAsB,CAACvB,gBAAgB,CAAC;IAEvD,IAAIsB,QAAM,CAACE,QAAQ,EAAE;AACnB;MACA,IAAI,CAACtB,QAAQ,IAAI,CAACC,WAAW,IAAI9D,QAAQ,KAAK2D,gBAAgB,EAAE;AAC9D,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA,CAAC,MAAM;AACL;MACA,IAAI,CAACC,OAAO,EAAE;AACZ,QAAA,OAAO,IAAI;AACb,MAAA;AACF,IAAA;AACF,EAAA;EAEA,OAAO;IACLA,OAAO;IACPC,QAAQ;IACR7D,QAAQ,EAAEA,QAAQ,IAAI,IAAI;IAC1BC,IAAI,EAAEA,IAAI,IAAI,IAAI;IAClBC,SAAS,EAAEA,SAAS,IAAI,IAAI;IAC5B2E,SAAS,EAAEA,SAAS,IAAI,IAAI;IAC5BC,UAAU,EAAEA,UAAU,IAAItB,SAAS;IACnCuB,WAAW,EAAEA,WAAW,IAAI,IAAI;IAChC5E,KAAK,EAAEA,KAAK,IAAI,IAAI;IACpB6E,WAAW,EAAEA,WAAW,IAAI;GAC7B;AACH;AAgBA;;AAEG;AACG,SAAUI,aAAaA,CAACrF,MAA2B,EAAA;EACvD,MAAM;IACJC,QAAQ;IACRqF,QAAQ;IACRL,WAAW;IACX9E,SAAS;IACTC,KAAK;IACLF,IAAI;IACJqF,aAAa;AACblF,IAAAA;AAAe,GAChB,GAAGL,MAAM;AAEV,EAAA,MAAMkF,QAAM,GAAGC,6BAAsB,CAAClF,QAAQ,CAAC;EAC/C,MAAMuF,OAAO,GAAG,IAAIvB,GAAG,CAACiB,QAAM,CAACM,OAAO,CAAC;EAEvCA,OAAO,CAACnB,YAAY,CAACoB,GAAG,CAAC,WAAW,EAAEH,QAAQ,CAAC;EAC/CE,OAAO,CAACnB,YAAY,CAACoB,GAAG,CAAC,cAAc,EAAER,WAAW,CAAC;EACrDO,OAAO,CAACnB,YAAY,CAACoB,GAAG,CAAC,eAAe,EAAEP,QAAM,CAACQ,YAAY,CAAC;EAE9D,IAAIR,QAAM,CAACS,MAAM,EAAE;IACjBH,OAAO,CAACnB,YAAY,CAACoB,GAAG,CAAC,OAAO,EAAEP,QAAM,CAACS,MAAM,CAAC;AAClD,EAAA;EAEA,IAAIT,QAAM,CAACU,YAAY,EAAE;IACvBJ,OAAO,CAACnB,YAAY,CAACoB,GAAG,CAAC,eAAe,EAAEP,QAAM,CAACU,YAAY,CAAC;AAChE,EAAA;AAEA;AACA,EAAA,IAAIV,QAAM,CAACE,QAAQ,IAAIG,aAAa,EAAE;IACpCC,OAAO,CAACnB,YAAY,CAACoB,GAAG,CAAC,gBAAgB,EAAEF,aAAa,CAAC;IACzDC,OAAO,CAACnB,YAAY,CAACoB,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC;AAC3D,EAAA;AAEA;EACA,IAAIP,QAAM,CAACW,aAAa,EAAE;IACxBL,OAAO,CAACnB,YAAY,CAACoB,GAAG,CAAC,OAAO,EAAErF,KAAK,CAAC;AAC1C,EAAA;AAEA;AACA,EAAA,IAAIH,QAAQ,KAAK6F,uBAAc,CAACC,MAAM,EAAE;IACtCP,OAAO,CAACnB,YAAY,CAACoB,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC;AACtD,EAAA;AAEA;AACA,EAAA,MAAMO,WAAW,GAA0C;IACzD/F,QAAQ;IACRC,IAAI;AACJC,IAAAA;GACD;AACD;AACA,EAAA,IAAI,CAAC+E,QAAM,CAACW,aAAa,EAAE;IACzBG,WAAW,CAAC5F,KAAK,GAAGA,KAAK;AAC3B,EAAA;AACA,EAAA,IAAIC,eAAe,EAAE;IACnB2F,WAAW,CAAC3F,eAAe,GAAGA,eAAe;AAC/C,EAAA;EACAmF,OAAO,CAACnB,YAAY,CAACoB,GAAG,CAAC,OAAO,EAAE1F,eAAe,CAACiG,WAAW,CAAC,CAAC;AAE/D,EAAA,OAAOR,OAAO,CAACS,QAAQ,EAAE;AAC3B;;;;;;;;;;;"}