@absolutejs/auth 0.45.9 → 0.46.0

package/dist/plugins/index.js.map

@@ -5,12 +5,12 @@
     "import { resolveMx } from 'node:dns/promises';\n\n// Email deliverability validation for sign-up — format, disposable-domain block, and an\n// optional MX check. A starter disposable list ships built-in; extend it with your own.\n\nexport type EmailValidationResult = {\n\tok: boolean;\n\treason?: 'disposable' | 'invalid_format' | 'no_mx';\n};\n\nconst EMAIL_PATTERN = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/u;\n\nconst DISPOSABLE_DOMAINS = new Set([\n\t'10minutemail.com',\n\t'fakeinbox.com',\n\t'getnada.com',\n\t'guerrillamail.com',\n\t'mailinator.com',\n\t'maildrop.cc',\n\t'sharklasers.com',\n\t'temp-mail.org',\n\t'tempmail.com',\n\t'throwaway.email',\n\t'trashmail.com',\n\t'yopmail.com'\n]);\n\nconst domainOf = (email: string) =>\n\temail.slice(email.lastIndexOf('@') + 1).toLowerCase();\n\nconst hasMxRecord = async (domain: string) => {\n\ttry {\n\t\treturn (await resolveMx(domain)).length > 0;\n\t} catch {\n\t\treturn false;\n\t}\n};\n\n// Whether an email's domain is a known disposable/temporary provider (built-in list plus any\n// `extraDomains` you pass).\nexport const isDisposableEmail = (\n\temail: string,\n\textraDomains?: Iterable<string>\n) => {\n\tconst domain = domainOf(email);\n\n\treturn (\n\t\tDISPOSABLE_DOMAINS.has(domain) ||\n\t\t(extraDomains !== undefined && new Set(extraDomains).has(domain))\n\t);\n};\n\n// Validate an email for sign-up. With `checkMx`, also confirms the domain has MX records\n// (a network lookup). Wire it into your register flow before creating the user.\nexport const validateEmailDeliverability = async (\n\temail: string,\n\toptions?: { checkMx?: boolean; disposableDomains?: Iterable<string> }\n): Promise<EmailValidationResult> => {\n\tconst normalized = email.trim().toLowerCase();\n\tif (!EMAIL_PATTERN.test(normalized)) {\n\t\treturn { ok: false, reason: 'invalid_format' };\n\t}\n\tif (isDisposableEmail(normalized, options?.disposableDomains)) {\n\t\treturn { ok: false, reason: 'disposable' };\n\t}\n\tif (\n\t\toptions?.checkMx === true &&\n\t\t!(await hasMxRecord(domainOf(normalized)))\n\t) {\n\t\treturn { ok: false, reason: 'no_mx' };\n\t}\n\n\treturn { ok: true };\n};\n",
     "// Tiny wrapper around the existing `isDisposableEmail` so it slots into the\n// CredentialsConfig.onCreateCredentialUser hook chain. Composes with whatever else the\n// consumer is doing in onCreateCredentialUser — call this first, fall through on pass.\n//\n// ~10 lines; mostly here as a concrete demonstration that \"plugin\" = \"named function\".\n\nimport { isDisposableEmail } from '../credentials/emailValidation';\n\nexport type DenyDisposableEmailDecision =\n\t| { allow: false; reason: string }\n\t| { allow: true };\n\nexport const denyDisposableEmailPlugin = async (\n\temail: string\n): Promise<DenyDisposableEmailDecision> => {\n\tconst trimmed = email.trim().toLowerCase();\n\tif (await isDisposableEmail(trimmed)) {\n\t\treturn { allow: false, reason: 'disposable_email' };\n\t}\n\n\treturn { allow: true };\n};\n",
     "// Discord webhook plugin — same shape as slackAlert, slightly different payload.\n// ~20 lines; copy + modify if you want embeds, mentions, etc.\n\nimport type { AuditEvent, AuditEventType, AuditSink } from '../audit/types';\n\nexport type DiscordAlertOptions = {\n\tevents?: readonly AuditEventType[];\n\tformatContent?: (event: AuditEvent) => string;\n\twebhookUrl: string;\n};\n\nconst defaultContent = (event: AuditEvent) => {\n\tconst when = new Date(event.at).toISOString();\n\tconst who = event.userId ?? event.ip ?? 'unknown';\n\n\treturn `🔐 **${event.type}** — ${who} at ${when}`;\n};\n\nexport const discordAlertPlugin = ({\n\tevents,\n\tformatContent = defaultContent,\n\twebhookUrl\n}: DiscordAlertOptions): AuditSink => ({\n\tappend: async (event) => {\n\t\tif (events !== undefined && !events.includes(event.type)) return;\n\t\tawait fetch(webhookUrl, {\n\t\t\tbody: JSON.stringify({ content: formatContent(event) }),\n\t\t\theaders: { 'content-type': 'application/json' },\n\t\t\tmethod: 'POST'\n\t\t}).catch(() => undefined);\n\t}\n});\n",
-    "// Geo-block plugin — gate credential login on the request's country (from\n// `x-client-country` or `cf-ipcountry`). Pair with `isMfaRequired` (force MFA in\n// blocked countries) OR fail closed by throwing in your own login handler.\n//\n// ~25 lines; one Set lookup.\n\nconst readCountry = (headers: Record<string, string | undefined>) =>\n\theaders['x-client-country']?.toUpperCase() ??\n\theaders['cf-ipcountry']?.toUpperCase();\n\nexport type GeoBlockOptions =\n\t| { allowCountries: readonly string[]; denyCountries?: never }\n\t| { allowCountries?: never; denyCountries: readonly string[] };\n\n// Returns `true` when the request should be BLOCKED (i.e. the user is in a deny-listed\n// country, or not in the allow-list). The consumer uses the return to either force\n// MFA via `isMfaRequired` or to reject the login outright.\nexport const geoBlockPlugin = (options: GeoBlockOptions) => {\n\tconst allow =\n\t\toptions.allowCountries === undefined\n\t\t\t? undefined\n\t\t\t: new Set(options.allowCountries.map((country) => country.toUpperCase()));\n\tconst deny =\n\t\toptions.denyCountries === undefined\n\t\t\t? undefined\n\t\t\t: new Set(options.denyCountries.map((country) => country.toUpperCase()));\n\n\treturn (headers: Record<string, string | undefined>) => {\n\t\tconst country = readCountry(headers);\n\t\tif (country === undefined) return false;\n\t\tif (deny !== undefined) return deny.has(country);\n\t\tif (allow !== undefined) return !allow.has(country);\n\n\t\treturn false;\n\t};\n};\n",
+    "// Geo-block plugin — gate credential login on the request's country (from\n// `x-client-country` or `cf-ipcountry`). Pair with `isMfaRequired` (force MFA in\n// blocked countries) OR fail closed by throwing in your own login handler.\n//\n// ~25 lines; one Set lookup.\n\nconst readCountry = (headers: Record<string, string | undefined>) =>\n\theaders['x-client-country']?.toUpperCase() ??\n\theaders['cf-ipcountry']?.toUpperCase();\n\nexport type GeoBlockOptions =\n\t| { allowCountries: readonly string[]; denyCountries?: never }\n\t| { allowCountries?: never; denyCountries: readonly string[] };\n\n// Returns `true` when the request should be BLOCKED (i.e. the user is in a deny-listed\n// country, or not in the allow-list). The consumer uses the return to either force\n// MFA via `isMfaRequired` or to reject the login outright.\nexport const geoBlockPlugin = (options: GeoBlockOptions) => {\n\tconst allow =\n\t\toptions.allowCountries === undefined\n\t\t\t? undefined\n\t\t\t: new Set(\n\t\t\t\t\toptions.allowCountries.map((country) =>\n\t\t\t\t\t\tcountry.toUpperCase()\n\t\t\t\t\t)\n\t\t\t\t);\n\tconst deny =\n\t\toptions.denyCountries === undefined\n\t\t\t? undefined\n\t\t\t: new Set(\n\t\t\t\t\toptions.denyCountries.map((country) =>\n\t\t\t\t\t\tcountry.toUpperCase()\n\t\t\t\t\t)\n\t\t\t\t);\n\n\treturn (headers: Record<string, string | undefined>) => {\n\t\tconst country = readCountry(headers);\n\t\tif (country === undefined) return false;\n\t\tif (deny !== undefined) return deny.has(country);\n\t\tif (allow !== undefined) return !allow.has(country);\n\n\t\treturn false;\n\t};\n};\n",
     "// PagerDuty Events API v2 plugin. Posts a trigger event to a PagerDuty service —\n// pair with security-critical audit events (credentials_login_failed, mfa_challenge_failed,\n// impersonation_started) by passing `events: [...]`. Severity defaults to 'warning' but\n// most consumers wire 'critical' for these.\n//\n// Get a routing key from a PagerDuty integration: Service → Integrations → +Add → Events API v2.\n\nimport type { AuditEventType, AuditSink } from '../audit/types';\n\nconst PAGERDUTY_EVENTS_URL = 'https://events.pagerduty.com/v2/enqueue';\n\nexport type PagerDutySeverity = 'critical' | 'error' | 'info' | 'warning';\n\nexport type PagerDutyAlertOptions = {\n\tevents?: readonly AuditEventType[];\n\troutingKey: string;\n\tseverity?: PagerDutySeverity;\n\t// Optional source identifier (e.g. your service name) for grouping in PagerDuty.\n\tsource?: string;\n};\n\nexport const pagerdutyAlertPlugin = ({\n\tevents,\n\troutingKey,\n\tseverity = 'warning',\n\tsource = 'absolutejs-auth'\n}: PagerDutyAlertOptions): AuditSink => ({\n\tappend: async (event) => {\n\t\tif (events !== undefined && !events.includes(event.type)) return;\n\t\tawait fetch(PAGERDUTY_EVENTS_URL, {\n\t\t\tbody: JSON.stringify({\n\t\t\t\tevent_action: 'trigger',\n\t\t\t\tpayload: {\n\t\t\t\t\tcustom_details: event.metadata ?? {},\n\t\t\t\t\tseverity,\n\t\t\t\t\tsource,\n\t\t\t\t\tsummary: `auth event: ${event.type} (user=${event.userId ?? 'unknown'})`,\n\t\t\t\t\ttimestamp: new Date(event.at).toISOString()\n\t\t\t\t},\n\t\t\t\trouting_key: routingKey\n\t\t\t}),\n\t\t\theaders: { 'content-type': 'application/json' },\n\t\t\tmethod: 'POST'\n\t\t}).catch(() => undefined);\n\t}\n});\n",
     "// PostHog server-side identify. Pair with audit events that have a `userId` (register,\n// credentials_login, oauth_login, …) to push the user to PostHog with their\n// email/properties so server-side events tie back to the right person.\n//\n// ~25 lines; one POST per event. Drop into the audit chain via composition or use as\n// an `AuditSink` directly.\n\nimport type { AuditEvent, AuditSink } from '../audit/types';\n\nexport type PosthogIdentifyOptions = {\n\thost?: string; // defaults to PostHog Cloud US\n\tprojectApiKey: string;\n\t// Pull the properties to send from the audit event metadata + your own enrichment.\n\tproperties?: (event: AuditEvent) => Record<string, unknown>;\n};\n\nconst DEFAULT_HOST = 'https://us.i.posthog.com';\n\nexport const posthogIdentifyPlugin = ({\n\thost = DEFAULT_HOST,\n\tprojectApiKey,\n\tproperties = (event) => ({ ...(event.metadata ?? {}) })\n}: PosthogIdentifyOptions): AuditSink => ({\n\tappend: async (event) => {\n\t\tif (event.userId === undefined) return;\n\t\tawait fetch(`${host}/capture/`, {\n\t\t\tbody: JSON.stringify({\n\t\t\t\tapi_key: projectApiKey,\n\t\t\t\tdistinct_id: event.userId,\n\t\t\t\tevent: '$identify',\n\t\t\t\tproperties: {\n\t\t\t\t\t$set: properties(event),\n\t\t\t\t\t$set_once: { first_seen_event: event.type }\n\t\t\t\t},\n\t\t\t\ttimestamp: new Date(event.at).toISOString()\n\t\t\t}),\n\t\t\theaders: { 'content-type': 'application/json' },\n\t\t\tmethod: 'POST'\n\t\t}).catch(() => undefined);\n\t}\n});\n",
     "// Slack webhook plugin. Pair with `audit.onAuditEvent` OR drop into the audit chain\n// (it's a valid `AuditSink`) to post a one-line summary of chosen audit events to a\n// Slack channel webhook. Fire-and-forget, ~30 lines — copy + modify if you want a\n// different message shape.\n\nimport type { AuditEvent, AuditEventType, AuditSink } from '../audit/types';\n\nexport type SlackAlertOptions = {\n\t// Optional event-type allow-list. Without it, EVERY event posts — typically you\n\t// want to filter to security-relevant events like login failures + MFA failures.\n\tevents?: readonly AuditEventType[];\n\t// Build the Slack message body from the event. Default is one short line; override\n\t// to use Block Kit, attachments, mentions, etc.\n\tformatMessage?: (event: AuditEvent) => string;\n\twebhookUrl: string;\n};\n\nconst defaultFormat = (event: AuditEvent) => {\n\tconst when = new Date(event.at).toISOString();\n\tconst who = event.userId ?? event.ip ?? 'unknown';\n\n\treturn `🔐 *${event.type}* — ${who} at ${when}`;\n};\n\nexport const slackAlertPlugin = ({\n\tevents,\n\tformatMessage = defaultFormat,\n\twebhookUrl\n}: SlackAlertOptions): AuditSink => ({\n\tappend: async (event) => {\n\t\tif (events !== undefined && !events.includes(event.type)) return;\n\t\tawait fetch(webhookUrl, {\n\t\t\tbody: JSON.stringify({ text: formatMessage(event) }),\n\t\t\theaders: { 'content-type': 'application/json' },\n\t\t\tmethod: 'POST'\n\t\t}).catch(() => undefined);\n\t}\n});\n"
   ],
-  "mappings": ";;;;;;;;;;;;;;;;;;;AAAA;AAUA,IAAM,gBAAgB;AAEtB,IAAM,qBAAqB,IAAI,IAAI;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD,CAAC;AAED,IAAM,WAAW,CAAC,UACjB,MAAM,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,YAAY;AAErD,IAAM,cAAc,OAAO,WAAmB;AAAA,EAC7C,IAAI;AAAA,IACH,QAAQ,MAAM,UAAU,MAAM,GAAG,SAAS;AAAA,IACzC,MAAM;AAAA,IACP,OAAO;AAAA;AAAA;AAMF,IAAM,oBAAoB,CAChC,OACA,iBACI;AAAA,EACJ,MAAM,SAAS,SAAS,KAAK;AAAA,EAE7B,OACC,mBAAmB,IAAI,MAAM,KAC5B,iBAAiB,aAAa,IAAI,IAAI,YAAY,EAAE,IAAI,MAAM;AAAA;AAM1D,IAAM,8BAA8B,OAC1C,OACA,YACoC;AAAA,EACpC,MAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAAA,EAC5C,IAAI,CAAC,cAAc,KAAK,UAAU,GAAG;AAAA,IACpC,OAAO,EAAE,IAAI,OAAO,QAAQ,iBAAiB;AAAA,EAC9C;AAAA,EACA,IAAI,kBAAkB,YAAY,SAAS,iBAAiB,GAAG;AAAA,IAC9D,OAAO,EAAE,IAAI,OAAO,QAAQ,aAAa;AAAA,EAC1C;AAAA,EACA,IACC,SAAS,YAAY,QACrB,CAAE,MAAM,YAAY,SAAS,UAAU,CAAC,GACvC;AAAA,IACD,OAAO,EAAE,IAAI,OAAO,QAAQ,QAAQ;AAAA,EACrC;AAAA,EAEA,OAAO,EAAE,IAAI,KAAK;AAAA;;;AC5DZ,IAAM,4BAA4B,OACxC,UAC0C;AAAA,EAC1C,MAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AAAA,EACzC,IAAI,MAAM,kBAAkB,OAAO,GAAG;AAAA,IACrC,OAAO,EAAE,OAAO,OAAO,QAAQ,mBAAmB;AAAA,EACnD;AAAA,EAEA,OAAO,EAAE,OAAO,KAAK;AAAA;;ACTtB,IAAM,iBAAiB,CAAC,UAAsB;AAAA,EAC7C,MAAM,OAAO,IAAI,KAAK,MAAM,EAAE,EAAE,YAAY;AAAA,EAC5C,MAAM,MAAM,MAAM,UAAU,MAAM,MAAM;AAAA,EAExC,OAAO,kBAAO,MAAM,iBAAY,UAAU;AAAA;AAGpC,IAAM,qBAAqB;AAAA,EACjC;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,OACsC;AAAA,EACtC,QAAQ,OAAO,UAAU;AAAA,IACxB,IAAI,WAAW,aAAa,CAAC,OAAO,SAAS,MAAM,IAAI;AAAA,MAAG;AAAA,IAC1D,MAAM,MAAM,YAAY;AAAA,MACvB,MAAM,KAAK,UAAU,EAAE,SAAS,cAAc,KAAK,EAAE,CAAC;AAAA,MACtD,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,IACT,CAAC,EAAE,MAAM,MAAG;AAAA,MAAG;AAAA,KAAS;AAAA;AAE1B;;ACzBA,IAAM,cAAc,CAAC,YACpB,QAAQ,qBAAqB,YAAY,KACzC,QAAQ,iBAAiB,YAAY;AAS/B,IAAM,iBAAiB,CAAC,YAA6B;AAAA,EAC3D,MAAM,QACL,QAAQ,mBAAmB,YACxB,YACA,IAAI,IAAI,QAAQ,eAAe,IAAI,CAAC,YAAY,QAAQ,YAAY,CAAC,CAAC;AAAA,EAC1E,MAAM,OACL,QAAQ,kBAAkB,YACvB,YACA,IAAI,IAAI,QAAQ,cAAc,IAAI,CAAC,YAAY,QAAQ,YAAY,CAAC,CAAC;AAAA,EAEzE,OAAO,CAAC,YAAgD;AAAA,IACvD,MAAM,UAAU,YAAY,OAAO;AAAA,IACnC,IAAI,YAAY;AAAA,MAAW,OAAO;AAAA,IAClC,IAAI,SAAS;AAAA,MAAW,OAAO,KAAK,IAAI,OAAO;AAAA,IAC/C,IAAI,UAAU;AAAA,MAAW,OAAO,CAAC,MAAM,IAAI,OAAO;AAAA,IAElD,OAAO;AAAA;AAAA;;ACxBT,IAAM,uBAAuB;AAYtB,IAAM,uBAAuB;AAAA,EACnC;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX,SAAS;AAAA,OAC+B;AAAA,EACxC,QAAQ,OAAO,UAAU;AAAA,IACxB,IAAI,WAAW,aAAa,CAAC,OAAO,SAAS,MAAM,IAAI;AAAA,MAAG;AAAA,IAC1D,MAAM,MAAM,sBAAsB;AAAA,MACjC,MAAM,KAAK,UAAU;AAAA,QACpB,cAAc;AAAA,QACd,SAAS;AAAA,UACR,gBAAgB,MAAM,YAAY,CAAC;AAAA,UACnC;AAAA,UACA;AAAA,UACA,SAAS,eAAe,MAAM,cAAc,MAAM,UAAU;AAAA,UAC5D,WAAW,IAAI,KAAK,MAAM,EAAE,EAAE,YAAY;AAAA,QAC3C;AAAA,QACA,aAAa;AAAA,MACd,CAAC;AAAA,MACD,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,IACT,CAAC,EAAE,MAAM,MAAG;AAAA,MAAG;AAAA,KAAS;AAAA;AAE1B;;AC7BA,IAAM,eAAe;AAEd,IAAM,wBAAwB;AAAA,EACpC,OAAO;AAAA,EACP;AAAA,EACA,aAAa,CAAC,WAAW,KAAM,MAAM,YAAY,CAAC,EAAG;AAAA,OACZ;AAAA,EACzC,QAAQ,OAAO,UAAU;AAAA,IACxB,IAAI,MAAM,WAAW;AAAA,MAAW;AAAA,IAChC,MAAM,MAAM,GAAG,iBAAiB;AAAA,MAC/B,MAAM,KAAK,UAAU;AAAA,QACpB,SAAS;AAAA,QACT,aAAa,MAAM;AAAA,QACnB,OAAO;AAAA,QACP,YAAY;AAAA,UACX,MAAM,WAAW,KAAK;AAAA,UACtB,WAAW,EAAE,kBAAkB,MAAM,KAAK;AAAA,QAC3C;AAAA,QACA,WAAW,IAAI,KAAK,MAAM,EAAE,EAAE,YAAY;AAAA,MAC3C,CAAC;AAAA,MACD,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,IACT,CAAC,EAAE,MAAM,MAAG;AAAA,MAAG;AAAA,KAAS;AAAA;AAE1B;;ACvBA,IAAM,gBAAgB,CAAC,UAAsB;AAAA,EAC5C,MAAM,OAAO,IAAI,KAAK,MAAM,EAAE,EAAE,YAAY;AAAA,EAC5C,MAAM,MAAM,MAAM,UAAU,MAAM,MAAM;AAAA,EAExC,OAAO,iBAAM,MAAM,gBAAW,UAAU;AAAA;AAGlC,IAAM,mBAAmB;AAAA,EAC/B;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,OACoC;AAAA,EACpC,QAAQ,OAAO,UAAU;AAAA,IACxB,IAAI,WAAW,aAAa,CAAC,OAAO,SAAS,MAAM,IAAI;AAAA,MAAG;AAAA,IAC1D,MAAM,MAAM,YAAY;AAAA,MACvB,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,KAAK,EAAE,CAAC;AAAA,MACnD,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,IACT,CAAC,EAAE,MAAM,MAAG;AAAA,MAAG;AAAA,KAAS;AAAA;AAE1B;",
+  "mappings": ";;;;;;;;;;;;;;;;;;;AAAA;AAUA,IAAM,gBAAgB;AAEtB,IAAM,qBAAqB,IAAI,IAAI;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD,CAAC;AAED,IAAM,WAAW,CAAC,UACjB,MAAM,MAAM,MAAM,YAAY,GAAG,IAAI,CAAC,EAAE,YAAY;AAErD,IAAM,cAAc,OAAO,WAAmB;AAAA,EAC7C,IAAI;AAAA,IACH,QAAQ,MAAM,UAAU,MAAM,GAAG,SAAS;AAAA,IACzC,MAAM;AAAA,IACP,OAAO;AAAA;AAAA;AAMF,IAAM,oBAAoB,CAChC,OACA,iBACI;AAAA,EACJ,MAAM,SAAS,SAAS,KAAK;AAAA,EAE7B,OACC,mBAAmB,IAAI,MAAM,KAC5B,iBAAiB,aAAa,IAAI,IAAI,YAAY,EAAE,IAAI,MAAM;AAAA;AAM1D,IAAM,8BAA8B,OAC1C,OACA,YACoC;AAAA,EACpC,MAAM,aAAa,MAAM,KAAK,EAAE,YAAY;AAAA,EAC5C,IAAI,CAAC,cAAc,KAAK,UAAU,GAAG;AAAA,IACpC,OAAO,EAAE,IAAI,OAAO,QAAQ,iBAAiB;AAAA,EAC9C;AAAA,EACA,IAAI,kBAAkB,YAAY,SAAS,iBAAiB,GAAG;AAAA,IAC9D,OAAO,EAAE,IAAI,OAAO,QAAQ,aAAa;AAAA,EAC1C;AAAA,EACA,IACC,SAAS,YAAY,QACrB,CAAE,MAAM,YAAY,SAAS,UAAU,CAAC,GACvC;AAAA,IACD,OAAO,EAAE,IAAI,OAAO,QAAQ,QAAQ;AAAA,EACrC;AAAA,EAEA,OAAO,EAAE,IAAI,KAAK;AAAA;;;AC5DZ,IAAM,4BAA4B,OACxC,UAC0C;AAAA,EAC1C,MAAM,UAAU,MAAM,KAAK,EAAE,YAAY;AAAA,EACzC,IAAI,MAAM,kBAAkB,OAAO,GAAG;AAAA,IACrC,OAAO,EAAE,OAAO,OAAO,QAAQ,mBAAmB;AAAA,EACnD;AAAA,EAEA,OAAO,EAAE,OAAO,KAAK;AAAA;;ACTtB,IAAM,iBAAiB,CAAC,UAAsB;AAAA,EAC7C,MAAM,OAAO,IAAI,KAAK,MAAM,EAAE,EAAE,YAAY;AAAA,EAC5C,MAAM,MAAM,MAAM,UAAU,MAAM,MAAM;AAAA,EAExC,OAAO,kBAAO,MAAM,iBAAY,UAAU;AAAA;AAGpC,IAAM,qBAAqB;AAAA,EACjC;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,OACsC;AAAA,EACtC,QAAQ,OAAO,UAAU;AAAA,IACxB,IAAI,WAAW,aAAa,CAAC,OAAO,SAAS,MAAM,IAAI;AAAA,MAAG;AAAA,IAC1D,MAAM,MAAM,YAAY;AAAA,MACvB,MAAM,KAAK,UAAU,EAAE,SAAS,cAAc,KAAK,EAAE,CAAC;AAAA,MACtD,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,IACT,CAAC,EAAE,MAAM,MAAG;AAAA,MAAG;AAAA,KAAS;AAAA;AAE1B;;ACzBA,IAAM,cAAc,CAAC,YACpB,QAAQ,qBAAqB,YAAY,KACzC,QAAQ,iBAAiB,YAAY;AAS/B,IAAM,iBAAiB,CAAC,YAA6B;AAAA,EAC3D,MAAM,QACL,QAAQ,mBAAmB,YACxB,YACA,IAAI,IACJ,QAAQ,eAAe,IAAI,CAAC,YAC3B,QAAQ,YAAY,CACrB,CACD;AAAA,EACH,MAAM,OACL,QAAQ,kBAAkB,YACvB,YACA,IAAI,IACJ,QAAQ,cAAc,IAAI,CAAC,YAC1B,QAAQ,YAAY,CACrB,CACD;AAAA,EAEH,OAAO,CAAC,YAAgD;AAAA,IACvD,MAAM,UAAU,YAAY,OAAO;AAAA,IACnC,IAAI,YAAY;AAAA,MAAW,OAAO;AAAA,IAClC,IAAI,SAAS;AAAA,MAAW,OAAO,KAAK,IAAI,OAAO;AAAA,IAC/C,IAAI,UAAU;AAAA,MAAW,OAAO,CAAC,MAAM,IAAI,OAAO;AAAA,IAElD,OAAO;AAAA;AAAA;;AChCT,IAAM,uBAAuB;AAYtB,IAAM,uBAAuB;AAAA,EACnC;AAAA,EACA;AAAA,EACA,WAAW;AAAA,EACX,SAAS;AAAA,OAC+B;AAAA,EACxC,QAAQ,OAAO,UAAU;AAAA,IACxB,IAAI,WAAW,aAAa,CAAC,OAAO,SAAS,MAAM,IAAI;AAAA,MAAG;AAAA,IAC1D,MAAM,MAAM,sBAAsB;AAAA,MACjC,MAAM,KAAK,UAAU;AAAA,QACpB,cAAc;AAAA,QACd,SAAS;AAAA,UACR,gBAAgB,MAAM,YAAY,CAAC;AAAA,UACnC;AAAA,UACA;AAAA,UACA,SAAS,eAAe,MAAM,cAAc,MAAM,UAAU;AAAA,UAC5D,WAAW,IAAI,KAAK,MAAM,EAAE,EAAE,YAAY;AAAA,QAC3C;AAAA,QACA,aAAa;AAAA,MACd,CAAC;AAAA,MACD,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,IACT,CAAC,EAAE,MAAM,MAAG;AAAA,MAAG;AAAA,KAAS;AAAA;AAE1B;;AC7BA,IAAM,eAAe;AAEd,IAAM,wBAAwB;AAAA,EACpC,OAAO;AAAA,EACP;AAAA,EACA,aAAa,CAAC,WAAW,KAAM,MAAM,YAAY,CAAC,EAAG;AAAA,OACZ;AAAA,EACzC,QAAQ,OAAO,UAAU;AAAA,IACxB,IAAI,MAAM,WAAW;AAAA,MAAW;AAAA,IAChC,MAAM,MAAM,GAAG,iBAAiB;AAAA,MAC/B,MAAM,KAAK,UAAU;AAAA,QACpB,SAAS;AAAA,QACT,aAAa,MAAM;AAAA,QACnB,OAAO;AAAA,QACP,YAAY;AAAA,UACX,MAAM,WAAW,KAAK;AAAA,UACtB,WAAW,EAAE,kBAAkB,MAAM,KAAK;AAAA,QAC3C;AAAA,QACA,WAAW,IAAI,KAAK,MAAM,EAAE,EAAE,YAAY;AAAA,MAC3C,CAAC;AAAA,MACD,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,IACT,CAAC,EAAE,MAAM,MAAG;AAAA,MAAG;AAAA,KAAS;AAAA;AAE1B;;ACvBA,IAAM,gBAAgB,CAAC,UAAsB;AAAA,EAC5C,MAAM,OAAO,IAAI,KAAK,MAAM,EAAE,EAAE,YAAY;AAAA,EAC5C,MAAM,MAAM,MAAM,UAAU,MAAM,MAAM;AAAA,EAExC,OAAO,iBAAM,MAAM,gBAAW,UAAU;AAAA;AAGlC,IAAM,mBAAmB;AAAA,EAC/B;AAAA,EACA,gBAAgB;AAAA,EAChB;AAAA,OACoC;AAAA,EACpC,QAAQ,OAAO,UAAU;AAAA,IACxB,IAAI,WAAW,aAAa,CAAC,OAAO,SAAS,MAAM,IAAI;AAAA,MAAG;AAAA,IAC1D,MAAM,MAAM,YAAY;AAAA,MACvB,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,KAAK,EAAE,CAAC;AAAA,MACnD,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,MAC9C,QAAQ;AAAA,IACT,CAAC,EAAE,MAAM,MAAG;AAAA,MAAG;AAAA,KAAS;AAAA;AAE1B;",
   "debugId": "A678C9E5494B63D064756E2164756E21",
   "names": []
 }

package/dist/providers/index.js

@@ -16,7 +16,7 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = import.meta.require;
 
-// ../../home/alexkahn/abs/auth/node_modules/citra/dist/index.js
+// node_modules/citra/dist/index.js
 var BASE64_BLOCK_SIZE = 4;
 var NUM_GENERATOR_BYTES = 32;
 var anilistProfileQuery = `query {
@@ -2554,5 +2554,5 @@ export {
   decodeJWT
 };
 
-//# debugId=959AC2788B2D199C64756E2164756E21
+//# debugId=2E1CE4D0162FAFF764756E2164756E21
 //# sourceMappingURL=index.js.map

package/dist/providers/index.js.map

@@ -1,10 +1,10 @@
 {
   "version": 3,
-  "sources": ["../../../home/alexkahn/abs/auth/node_modules/citra/dist/index.js"],
+  "sources": ["../node_modules/citra/dist/index.js"],
   "sourcesContent": [
     "// @bun\n// src/constants.ts\nvar BASE64_BLOCK_SIZE = 4;\nvar NUM_GENERATOR_BYTES = 32;\n\n// src/graphqlQueries.ts\nvar anilistProfileQuery = `query {\n  Viewer {\n    id\n    name\n    about\n    avatar {\n      large\n      medium\n    }\n    bannerImage\n    siteUrl\n    createdAt\n    updatedAt\n    donatorTier\n    donatorBadge\n    unreadNotificationCount\n    options {\n      titleLanguage\n      displayAdultContent\n      airingNotifications\n      profileColor\n      activityMergeTime\n      staffNameLanguage\n    }\n    mediaListOptions {\n      scoreFormat\n      rowOrder\n      animeList {\n        sectionOrder\n        customLists\n        advancedScoringEnabled\n      }\n      mangaList {\n        sectionOrder\n        customLists\n        advancedScoringEnabled\n      }\n    }\n    statistics {\n      anime {\n        count\n        meanScore\n        minutesWatched\n        episodesWatched\n      }\n      manga {\n        count\n        meanScore\n        chaptersRead\n        volumesRead\n      }\n    }\n    favourites {\n      anime {\n        nodes {\n          id\n          title {\n            romaji\n            english\n          }\n          siteUrl\n        }\n      }\n      manga {\n        nodes {\n          id\n          title {\n            romaji\n            english\n          }\n          siteUrl\n        }\n      }\n      characters {\n        nodes {\n          id\n          name {\n            full\n          }\n          image {\n            large\n          }\n        }\n      }\n      staff {\n        nodes {\n          id\n          name {\n            full\n          }\n          image {\n            large\n          }\n        }\n      }\n      studios {\n        nodes {\n          id\n          name\n          siteUrl\n        }\n      }\n    }\n    isFollower\n    isFollowing\n  }\n}`;\n\n// src/providers.ts\nvar defineProviders = (providers) => providers;\nvar providers = defineProviders({\n  \"42\": {\n    authorizationUrl: \"https://api.intra.42.fr/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.intra.42.fr/v2/me\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.intra.42.fr/oauth/token\"\n    }\n  },\n  amazoncognito: {\n    authorizationUrl: \"https://${domain}/oauth2/authorize\",\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: (config) => `https://${config.domain}/oauth2/userInfo`\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: (config) => `https://${config.domain}/oauth2/revoke`\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `https://${config.domain}/oauth2/token`\n    }\n  },\n  anilist: {\n    authorizationUrl: \"https://anilist.co/api/v2/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      body: {\n        query: anilistProfileQuery\n      },\n      encoding: \"application/json\",\n      headers: {\n        Accept: \"application/json\",\n        \"Content-Type\": \"application/json\"\n      },\n      method: \"POST\",\n      url: \"https://graphql.anilist.co\"\n    },\n    scopeRequired: false,\n    subject: [\"data\", \"Viewer\", \"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://anilist.co/api/v2/oauth/token\"\n    }\n  },\n  apple: {\n    authorizationUrl: \"https://appleid.apple.com/auth/authorize\",\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://appleid.apple.com/auth/userinfo\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://appleid.apple.com/auth/token\"\n    }\n  },\n  atlassian: {\n    authorizationUrl: \"https://auth.atlassian.com/authorize\",\n    createAuthorizationURLSearchParams: {\n      audience: \"api.atlassian.com\"\n    },\n    email: [\"email\"],\n    fullName: [\"name\"],\n    isOIDC: false,\n    isRefreshable: true,\n    picture: [\"picture\"],\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.atlassian.com/me\"\n    },\n    scopeRequired: true,\n    subject: [\"account_id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://auth.atlassian.com/oauth/token\"\n    }\n  },\n  attio: {\n    authorizationUrl: \"https://app.attio.com/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.attio.com/v2/self\"\n    },\n    scopeRequired: true,\n    subject: [\"workspace_id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://app.attio.com/oauth/token\"\n    }\n  },\n  auth0: {\n    authorizationUrl: (config) => `https://${config.domain}/authorize`,\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: (config) => `https://${config.domain}/userinfo`\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      body: new URLSearchParams({\n        token_type_hint: \"refresh_token\"\n      }),\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: (config) => `https://${config.domain}/oauth/revoke`\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `https://${config.domain}/oauth/token`\n    }\n  },\n  authentik: {\n    authorizationUrl: (config) => `https://${config.baseURL}/oauth/authorize`,\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: (config) => `https://${config.baseURL}/api/v3/user/`\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `https://${config.baseURL}/oauth/token`\n    }\n  },\n  autodesk: {\n    authorizationUrl: \"https://developer.api.autodesk.com/authentication/v2/authorize\",\n    email: [\"email\"],\n    familyName: [\"family_name\"],\n    fullName: [\"name\"],\n    givenName: [\"given_name\"],\n    isOIDC: true,\n    isRefreshable: true,\n    picture: [\"picture\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.userprofile.autodesk.com/userinfo\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://developer.api.autodesk.com/authentication/v2/token\"\n    }\n  },\n  battlenet: {\n    authorizationUrl: \"https://oauth.battle.net/authorize\",\n    isOIDC: true,\n    isRefreshable: false,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://oauth.battle.net/userinfo\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://oauth.battle.net/token\"\n    }\n  },\n  bitbucket: {\n    authorizationUrl: \"https://bitbucket.org/site/oauth2/authorize\",\n    fullName: [\"display_name\"],\n    isOIDC: false,\n    isRefreshable: true,\n    picture: [\"links\", \"avatar\", \"href\"],\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.bitbucket.org/2.0/user\"\n    },\n    scopeRequired: false,\n    subject: [\"uuid\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://bitbucket.org/site/oauth2/access_token\"\n    }\n  },\n  box: {\n    authorizationUrl: \"https://account.box.com/api/oauth2/authorize\",\n    email: [\"login\"],\n    fullName: [\"name\"],\n    isOIDC: false,\n    isRefreshable: true,\n    picture: [\"avatar_url\"],\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.box.com/2.0/users/me\"\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: \"https://api.box.com/oauth2/revoke\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.box.com/oauth2/token\"\n    }\n  },\n  bungie: {\n    authorizationUrl: \"https://www.bungie.net/en/OAuth/Authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      headers: {\n        \"X-API-Key\": \"<YOUR_API_KEY>\"\n      },\n      method: \"GET\",\n      url: \"https://www.bungie.net/Platform/User/GetCurrentBungieNetUser\"\n    },\n    scopeRequired: false,\n    subject: [\"Response\", \"membershipId\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://www.bungie.net/Platform/App/OAuth/token\"\n    }\n  },\n  close: {\n    authorizationUrl: \"https://app.close.com/oauth2/authorize/\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.close.com/api/v1/me/\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.close.com/oauth2/token/\"\n    }\n  },\n  coinbase: {\n    authorizationUrl: \"https://www.coinbase.com/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.coinbase.com/v2/user\"\n    },\n    scopeRequired: false,\n    subject: [\"data\", \"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.coinbase.com/oauth/token\"\n    }\n  },\n  discord: {\n    authorizationUrl: \"https://discord.com/api/oauth2/authorize\",\n    email: [\"email\"],\n    isOIDC: true,\n    isRefreshable: true,\n    picture: [\"avatar\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://discord.com/api/users/@me\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://discord.com/api/oauth2/token\"\n    }\n  },\n  donationalerts: {\n    authorizationUrl: \"https://www.donationalerts.com/oauth/authorize\",\n    email: [\"data\", \"email\"],\n    isOIDC: false,\n    isRefreshable: true,\n    picture: [\"data\", \"avatar\"],\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://www.donationalerts.com/api/v1/user/oauth\"\n    },\n    scopeRequired: false,\n    subject: [\"data\", \"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://www.donationalerts.com/oauth/token\"\n    }\n  },\n  dribbble: {\n    authorizationUrl: \"https://dribbble.com/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: false,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.dribbble.com/v2/user\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://dribbble.com/oauth/token\"\n    }\n  },\n  dropbox: {\n    authorizationUrl: \"https://www.dropbox.com/oauth2/authorize\",\n    email: [\"email\"],\n    familyName: [\"name\", \"surname\"],\n    fullName: [\"name\", \"display_name\"],\n    givenName: [\"name\", \"given_name\"],\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"POST\",\n      url: \"https://api.dropboxapi.com/2/users/get_current_account\"\n    },\n    revocationRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      url: \"https://api.dropboxapi.com/2/auth/token/revoke\"\n    },\n    scopeRequired: false,\n    subject: [\"account_id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.dropboxapi.com/oauth2/token\"\n    }\n  },\n  epicgames: {\n    authorizationUrl: \"https://www.epicgames.com/id/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.epicgames.dev/epic/oauth/v2/userInfo\"\n    },\n    scopeRequired: false,\n    subject: [\"account_id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.epicgames.dev/epic/oauth/v1/token\"\n    }\n  },\n  etsy: {\n    authorizationUrl: \"https://www.etsy.com/oauth/connect\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://openapi.etsy.com/v3/application/users/me\"\n    },\n    scopeRequired: false,\n    subject: [\"results\", \"0\", \"user_id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.etsy.com/v3/public/oauth/token\"\n    }\n  },\n  facebook: {\n    authorizationUrl: \"https://www.facebook.com/v16.0/dialog/oauth\",\n    email: [\"email\"],\n    familyName: [\"family_name\"],\n    fullName: [\"name\"],\n    givenName: [\"given_name\"],\n    isOIDC: true,\n    isRefreshable: false,\n    picture: [\"picture\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"query\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      searchParams: [[\"fields\", \"id,name,email,picture\"]],\n      url: \"https://graph.facebook.com/me\"\n    },\n    scopeRequired: false,\n    subject: [\"sub\"],\n    subjectBySource: {\n      idToken: [\"sub\"],\n      profile: [\"id\"]\n    },\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://graph.facebook.com/v16.0/oauth/access_token\"\n    }\n  },\n  figma: {\n    authorizationUrl: \"https://www.figma.com/oauth\",\n    email: [\"email\"],\n    isOIDC: false,\n    isRefreshable: true,\n    picture: [\"img_url\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.figma.com/v1/me\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.figma.com/v1/oauth/token\"\n    }\n  },\n  gitea: {\n    authorizationUrl: (config) => `${config.baseURL}/login/oauth/authorize`,\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: (config) => `${config.baseURL}/api/v1/user`\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `${config.baseURL}/login/oauth/access_token`\n    }\n  },\n  github: {\n    authorizationUrl: \"https://github.com/login/oauth/authorize\",\n    email: [\"email\"],\n    isOIDC: false,\n    isRefreshable: false,\n    picture: [\"avatar_url\"],\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.github.com/user\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://github.com/login/oauth/access_token\"\n    }\n  },\n  gitlab: {\n    authorizationUrl: (config) => `${config.baseURL}/oauth/authorize`,\n    email: [\"email\"],\n    fullName: [\"name\"],\n    isOIDC: true,\n    isRefreshable: true,\n    picture: [\"picture\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://gitlab.com/api/v4/user\"\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: (config) => `${config.baseURL}/oauth/revoke`\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `${config.baseURL}/oauth/token`\n    }\n  },\n  gohighlevel: {\n    authorizationUrl: \"https://marketplace.gohighlevel.com/oauth/chooselocation\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://services.leadconnectorhq.com/users/me\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://services.leadconnectorhq.com/oauth/token\"\n    }\n  },\n  google: {\n    authorizationUrl: \"https://accounts.google.com/o/oauth2/v2/auth\",\n    email: [\"email\"],\n    familyName: [\"family_name\"],\n    fullName: [\"name\"],\n    givenName: [\"given_name\"],\n    isOIDC: true,\n    isRefreshable: true,\n    picture: [\"picture\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://openidconnect.googleapis.com/v1/userinfo\"\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: \"https://oauth2.googleapis.com/revoke\"\n    },\n    scopeRequired: true,\n    subject: [\"sub\"],\n    subjectBySource: {\n      idToken: [\"sub\"],\n      profile: [\"sub\"]\n    },\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://oauth2.googleapis.com/token\"\n    }\n  },\n  hubspot: {\n    authorizationUrl: \"https://app.hubspot.com/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.hubapi.com/oauth/v1/access-tokens/me\"\n    },\n    scopeRequired: true,\n    subject: [\"hub_id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.hubapi.com/oauth/v1/token\"\n    }\n  },\n  intuit: {\n    authorizationUrl: \"https://appcenter.intuit.com/connect/oauth2\",\n    isOIDC: true,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: (config) => config.environment === \"production\" ? \"https://accounts.platform.intuit.com/v1/openid_connect/userinfo\" : \"https://sandbox-accounts.platform.intuit.com/v1/openid_connect/userinfo\"\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      headers: (config) => ({\n        Authorization: `Basic ${encodeBase64(`${config.clientId}:${config.clientSecret}`)}`\n      }),\n      tokenParamName: \"token\",\n      url: \"https://developer.api.intuit.com/v2/oauth2/tokens/revoke\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://oauth.platform.intuit.com/oauth2/v1/tokens/bearer\"\n    }\n  },\n  kakao: {\n    authorizationUrl: \"https://kauth.kakao.com/oauth/authorize\",\n    isOIDC: true,\n    isRefreshable: true,\n    picture: [\"picture\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://kapi.kakao.com/v2/user/me\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://kauth.kakao.com/oauth/token\"\n    }\n  },\n  keycloak: {\n    authorizationUrl: (config) => `${config.realmURL}/protocol/openid-connect/auth`,\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.kick.com/v1/user\"\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: (config) => `${config.realmURL}/protocol/openid-connect/revoke`\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `${config.realmURL}/protocol/openid-connect/token`\n    }\n  },\n  kick: {\n    authorizationUrl: \"https://id.kick.com/oauth/authorize\",\n    email: [\"data\", \"email\"],\n    isOIDC: false,\n    isRefreshable: true,\n    picture: [\"data\", \"profile_picture\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.kick.com/public/v1/users\"\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: \"https://id.kick.com/oauth/revoke\"\n    },\n    scopeRequired: true,\n    subject: [\"data\", \"user_id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://id.kick.com/oauth/token\"\n    }\n  },\n  lichess: {\n    authorizationUrl: \"https://lichess.org/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: false,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://lichess.org/api/account\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://lichess.org/api/token\"\n    }\n  },\n  line: {\n    authorizationUrl: \"https://access.line.me/oauth2/v2.1/authorize\",\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.line.me/v2/profile\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.line.me/oauth2/v2.1/token\"\n    }\n  },\n  linear: {\n    authorizationUrl: \"https://linear.app/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: false,\n    profileRequest: {\n      authIn: \"header\",\n      body: {\n        query: `query { viewer { id name } }`\n      },\n      encoding: \"application/json\",\n      headers: {\n        Accept: \"application/json\",\n        \"Content-Type\": \"application/json\"\n      },\n      method: \"POST\",\n      url: \"https://api.linear.app/graphql\"\n    },\n    revocationRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      url: \"https://api.linear.app/oauth/revoke\"\n    },\n    scopeRequired: false,\n    subject: [\"data\", \"viewer\", \"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.linear.app/oauth/token\"\n    }\n  },\n  linkedin: {\n    authorizationUrl: \"https://www.linkedin.com/oauth/v2/authorization\",\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.linkedin.com/v2/me\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://www.linkedin.com/oauth/v2/accessToken\"\n    }\n  },\n  mastodon: {\n    authorizationUrl: (config) => `${config.baseURL}/oauth/authorize`,\n    isOIDC: false,\n    isRefreshable: false,\n    picture: [\"avatar\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: (config) => `${config.baseURL}/api/v1/accounts/verify_credentials`\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: (config) => `${config.baseURL}/oauth/revoke`\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `${config.baseURL}/oauth/token`\n    }\n  },\n  mercadolibre: {\n    authorizationUrl: \"https://auth.mercadolibre.com/authorization\",\n    isOIDC: false,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.mercadolibre.com/users/me\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.mercadolibre.com/oauth/token\"\n    }\n  },\n  mercadopago: {\n    authorizationUrl: \"https://auth.mercadopago.com/authorization\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.mercadopago.com/v1/users/me\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.mercadopago.com/oauth/token\"\n    }\n  },\n  microsoftentraid: {\n    authorizationUrl: (config) => `https://${config.tenantId}.b2clogin.com/${config.tenantId}/oauth2/v2.0/authorize`,\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: (config) => `https://${config.tenantId}.b2clogin.com/${config.tenantId}/openid/userinfo`\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `https://${config.tenantId}.b2clogin.com/${config.tenantId}/oauth2/v2.0/token`\n    }\n  },\n  monday: {\n    authorizationUrl: \"https://auth.monday.com/oauth2/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      body: {\n        query: \"query { me { id name email } }\"\n      },\n      encoding: \"application/json\",\n      headers: {\n        \"Content-Type\": \"application/json\"\n      },\n      method: \"POST\",\n      url: \"https://api.monday.com/v2\"\n    },\n    scopeRequired: true,\n    subject: [\"data\", \"me\", \"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://auth.monday.com/oauth2/token\"\n    }\n  },\n  myanimelist: {\n    authorizationUrl: \"https://myanimelist.net/v1/oauth2/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    PKCEMethod: \"plain\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.myanimelist.net/v2/users/@me\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://myanimelist.net/v1/oauth2/token\"\n    }\n  },\n  naver: {\n    authorizationUrl: \"https://nid.naver.com/oauth2.0/authorize\",\n    email: [\"response\", \"email\"],\n    fullName: [\"response\", \"name\"],\n    isOIDC: false,\n    isRefreshable: true,\n    picture: [\"response\", \"profile_image\"],\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://openapi.naver.com/v1/nid/me\"\n    },\n    scopeRequired: false,\n    subject: [\"response\", \"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://nid.naver.com/oauth2.0/token\"\n    }\n  },\n  notion: {\n    authorizationUrl: \"https://api.notion.com/v1/oauth/authorize\",\n    email: [\"bot\", \"owner\", \"user\", \"person\", \"email\"],\n    isOIDC: false,\n    isRefreshable: false,\n    picture: [\"bot\", \"owner\", \"user\", \"avatar_url\"],\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      headers: {\n        \"Notion-Version\": \"2022-06-28\"\n      },\n      method: \"GET\",\n      url: \"https://api.notion.com/v1/users/me\"\n    },\n    scopeRequired: false,\n    subject: [\"bot\", \"owner\", \"user\", \"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      url: \"https://api.notion.com/v1/oauth/token\"\n    }\n  },\n  okta: {\n    authorizationUrl: (config) => `https://${config.domain}/oauth2/default/v1/authorize`,\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: (config) => `https://${config.domain}/oauth2/default/v1/userinfo`\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: (config) => `https://${config.domain}/oauth2/default/v1/revoke`\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `https://${config.domain}/oauth2/default/v1/token`\n    }\n  },\n  osu: {\n    authorizationUrl: \"https://osu.ppy.sh/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    picture: [\"avatar_url\"],\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://osu.ppy.sh/api/v2/me\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://osu.ppy.sh/oauth/token\"\n    }\n  },\n  patreon: {\n    authorizationUrl: \"https://www.patreon.com/oauth2/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://www.patreon.com/api/oauth2/v2/identity\"\n    },\n    scopeRequired: false,\n    subject: [\"data\", \"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://www.patreon.com/api/oauth2/token\"\n    }\n  },\n  pipedrive: {\n    authorizationUrl: \"https://oauth.pipedrive.com/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.pipedrive.com/v1/users/me\"\n    },\n    scopeRequired: true,\n    subject: [\"data\", \"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://oauth.pipedrive.com/oauth/token\"\n    }\n  },\n  polar: {\n    authorizationUrl: \"https://polar.sh/oauth2/authorize\",\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.polar.sh/v1/oauth2/userinfo\"\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: \"https://api.polar.sh/v1/oauth2/revoke\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.polar.sh/v1/oauth2/token\"\n    }\n  },\n  polaraccesslink: {\n    authorizationUrl: \"https://flow.polar.com/oauth2/authorization\",\n    isOIDC: false,\n    isRefreshable: false,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://www.polaraccesslink.com/v3/users/me\"\n    },\n    scopeRequired: false,\n    subject: [\"x_user_id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"header\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://polarremote.com/v2/oauth2/token\"\n    }\n  },\n  polarteampro: {\n    authorizationUrl: \"https://auth.polar.com/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://www.polaraccesslink.com/v3/users/<USER_ID>\"\n    },\n    scopeRequired: false,\n    subject: [\"x_user_id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"header\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://auth.polar.com/oauth/token\"\n    }\n  },\n  reddit: {\n    authorizationUrl: \"https://www.reddit.com/api/v1/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://oauth.reddit.com/api/v1/me\"\n    },\n    revocationRequest: {\n      authIn: \"header\",\n      body: new URLSearchParams({\n        token_type_hint: \"refresh_token\"\n      }),\n      encoding: \"application/json\",\n      url: \"https://www.reddit.com/api/v1/revoke_token\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"header\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://www.reddit.com/api/v1/access_token\"\n    }\n  },\n  roblox: {\n    authorizationUrl: \"https://apis.roblox.com/oauth/v1/authorize\",\n    isOIDC: true,\n    isRefreshable: true,\n    picture: [\"picture\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://apis.roblox.com/oauth/v1/userinfo\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://apis.roblox.com/oauth/v1/token\"\n    }\n  },\n  salesforce: {\n    authorizationUrl: \"https://login.salesforce.com/services/oauth2/authorize\",\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://login.salesforce.com/services/oauth2/userinfo\"\n    },\n    revocationRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      url: \"https://login.salesforce.com/services/oauth2/revoke\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://login.salesforce.com/services/oauth2/token\"\n    }\n  },\n  shikimori: {\n    authorizationUrl: \"https://shikimori.org/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://shikimori.one/api/users/whoami\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://shikimori.org/oauth/token\"\n    }\n  },\n  slack: {\n    authorizationUrl: \"https://slack.com/openid/connect/authorize\",\n    isOIDC: true,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"query\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://slack.com/api/users.identity\"\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: \"https://slack.com/api/auth.revoke\"\n    },\n    scopeRequired: true,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://slack.com/api/openid.connect.token\"\n    }\n  },\n  spotify: {\n    authorizationUrl: \"https://accounts.spotify.com/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.spotify.com/v1/me\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://accounts.spotify.com/api/token\"\n    }\n  },\n  startgg: {\n    authorizationUrl: \"https://start.gg/oauth/authorize\",\n    email: [\"data\", \"currentUser\", \"email\"],\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      body: {\n        query: `query { currentUser { id slug email player { gamerTag } } }`\n      },\n      encoding: \"application/json\",\n      headers: {\n        Accept: \"application/json\",\n        \"Content-Type\": \"application/json\"\n      },\n      method: \"POST\",\n      url: \"https://api.start.gg/gql/alpha\"\n    },\n    scopeRequired: false,\n    subject: [\"data\", \"currentUser\", \"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.start.gg/oauth/access_token\"\n    }\n  },\n  strava: {\n    authorizationUrl: \"https://www.strava.com/oauth/authorize\",\n    familyName: [\"lastname\"],\n    givenName: [\"firstname\"],\n    isOIDC: false,\n    isRefreshable: true,\n    picture: [\"profile\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://www.strava.com/api/v3/athlete\"\n    },\n    revocationRequest: {\n      authIn: \"query\",\n      body: new URLSearchParams({\n        token_type_hint: \"access_token\"\n      }),\n      encoding: \"application/json\",\n      tokenParamName: \"access_token\",\n      url: \"https://www.strava.com/oauth/deauthorize\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://www.strava.com/oauth/token\"\n    }\n  },\n  synology: {\n    authorizationUrl: (config) => `${config.baseURL}/webman/sso/SSOOauth.cgi?client_id=${config.clientId}&response_type=code&redirect_uri=${config.redirectUri}`,\n    isOIDC: false,\n    isRefreshable: false,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: (config) => `${config.baseURL}/webman/sso/SSOUserInfo.cgi?client_id=${config.clientId}&access_token=${config.accessToken}`\n    },\n    scopeRequired: false,\n    subject: [\"data\", \"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `${config.baseURL}/webman/sso/SSOAccessToken.cgi?client_id=${config.clientId}&client_secret=${config.clientSecret}`\n    }\n  },\n  tiktok: {\n    authorizationUrl: \"https://www.tiktok.com/v2/auth/authorize\",\n    createAuthorizationURLSearchParams: (config) => ({\n      client_key: config.clientId\n    }),\n    isOIDC: false,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"query\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://open.douyin.com/oauth/userinfo\"\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"token\",\n      url: \"https://open.tiktokapis.com/v2/oauth/revoke/\"\n    },\n    scopeRequired: false,\n    subject: [\"data\", \"open_id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://open.tiktokapis.com/v2/oauth/token/\"\n    }\n  },\n  tiltify: {\n    authorizationUrl: \"https://v5api.tiltify.com/oauth/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://v5api.tiltify.com/api/public/current-user\"\n    },\n    scopeRequired: false,\n    subject: [\"data\", \"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://v5api.tiltify.com/oauth/token\"\n    }\n  },\n  tumblr: {\n    authorizationUrl: \"https://www.tumblr.com/oauth2/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.tumblr.com/v2/user/info\"\n    },\n    scopeRequired: false,\n    subject: [\"response\", \"user\", \"name\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.tumblr.com/v2/oauth2/token\"\n    }\n  },\n  twitch: {\n    authorizationUrl: \"https://id.twitch.tv/oauth2/authorize\",\n    isOIDC: true,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      headers: (config) => ({\n        \"Client-Id\": config.clientId\n      }),\n      method: \"GET\",\n      url: \"https://api.twitch.tv/helix/users\"\n    },\n    revocationRequest: {\n      authIn: \"query\",\n      encoding: \"application/json\",\n      headers: (config) => ({\n        \"Client-Id\": config.clientId\n      }),\n      tokenParamName: \"token\",\n      url: \"https://id.twitch.tv/oauth2/revoke\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://id.twitch.tv/oauth2/token\"\n    }\n  },\n  twitter: {\n    authorizationUrl: \"https://twitter.com/i/oauth2/authorize\",\n    isOIDC: false,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.twitter.com/2/users/me\"\n    },\n    revocationRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      url: \"https://api.twitter.com/2/oauth2/revoke\"\n    },\n    scopeRequired: false,\n    subject: [\"data\", \"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.twitter.com/2/oauth2/token\"\n    }\n  },\n  vk: {\n    authorizationUrl: \"https://oauth.vk.com/authorize\",\n    isOIDC: false,\n    isRefreshable: false,\n    profileRequest: {\n      authIn: \"query\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.vk.com/method/users.get\"\n    },\n    scopeRequired: false,\n    subject: [\"response\", \"0\", \"id\"],\n    subjectType: \"number\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://oauth.vk.com/access_token\"\n    }\n  },\n  withings: {\n    authorizationUrl: \"https://account.withings.com/oauth2_user/authorize2\",\n    isOIDC: false,\n    isRefreshable: true,\n    profileRequest: {\n      authIn: \"header\",\n      body: async (config) => {\n        const props = await getWithingsProps(config);\n        if (props === undefined)\n          throw new Error(\"Failed to get Withings search properties\");\n        const { nonce, hashedSignature } = props;\n        return [\n          [\"action\", \"getuser\"],\n          [\"nonce\", nonce],\n          [\"client_id\", config.clientId],\n          [\"signature\", hashedSignature]\n        ];\n      },\n      encoding: \"application/x-www-form-urlencoded\",\n      method: \"POST\",\n      url: \"https://wbsapi.withings.net/v2/oauth2\"\n    },\n    refreshAccessTokenBody: {\n      action: \"requesttoken\"\n    },\n    revocationRequest: {\n      authIn: \"header\",\n      body: async (config) => {\n        const props = await getWithingsProps(config);\n        if (!props)\n          throw new Error(\"Failed to get Withings props\");\n        const { nonce, hashedSignature } = props;\n        return [\n          [\"action\", \"revoke\"],\n          [\"client_id\", config.clientId],\n          [\"nonce\", nonce],\n          [\"signature\", hashedSignature]\n        ];\n      },\n      encoding: \"application/x-www-form-urlencoded\",\n      method: \"POST\",\n      url: \"https://wbsapi.withings.net/v2/oauth2\"\n    },\n    scopeRequired: true,\n    subject: [\"userid\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://wbsapi.withings.net/v2/oauth2\"\n    },\n    validateAuthorizationCodeBody: {\n      action: \"requesttoken\"\n    }\n  },\n  workos: {\n    authorizationUrl: (config) => `https://${config.domain}/oauth2/authorize`,\n    createAuthorizationURLSearchParams: () => {\n      const nonce = crypto.randomUUID();\n      return {\n        nonce\n      };\n    },\n    email: [\"email\"],\n    familyName: [\"family_name\"],\n    fullName: [\"name\"],\n    givenName: [\"given_name\"],\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"POST\",\n      url: (config) => `https://${config.domain}/oauth2/userinfo`\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `https://${config.domain}/oauth2/token`\n    }\n  },\n  yahoo: {\n    authorizationUrl: \"https://api.login.yahoo.com/oauth2/request_auth\",\n    isOIDC: true,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.login.yahoo.com/openid/v1/userinfo\"\n    },\n    revocationRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      url: \"https://api.login.yahoo.com/oauth2/revoke\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://api.login.yahoo.com/oauth2/get_token\"\n    }\n  },\n  yandex: {\n    authorizationUrl: \"https://oauth.yandex.com/authorize\",\n    createAuthorizationURLSearchParams: {\n      device_id: crypto.randomUUID(),\n      device_name: `${navigator.platform ?? \"Unknown\"} \\u2014 ${(navigator.userAgent.split(\")\")[0] || \"\").split(\"(\").pop() || \"Unknown\"}`\n    },\n    email: [\"default_email\"],\n    familyName: [\"last_name\"],\n    fullName: [\"real_name\"],\n    givenName: [\"first_name\"],\n    isOIDC: false,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://login.yandex.ru/info\"\n    },\n    revocationRequest: {\n      authIn: \"body\",\n      encoding: \"application/json\",\n      tokenParamName: \"access_token\",\n      url: \"https://oauth.yandex.com/revoke_token\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://oauth.yandex.com/token\"\n    }\n  },\n  zoho: {\n    authorizationUrl: (config) => `https://accounts.zoho.${config.region ?? \"com\"}/oauth/v2/auth`,\n    isOIDC: false,\n    isRefreshable: true,\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: (config) => `https://accounts.zoho.${config.region ?? \"com\"}/oauth/user/info`\n    },\n    revocationRequest: {\n      authIn: \"query\",\n      encoding: \"application/x-www-form-urlencoded\",\n      tokenParamName: \"token\",\n      url: (config) => `https://accounts.zoho.${config.region ?? \"com\"}/oauth/v2/token/revoke`\n    },\n    scopeRequired: true,\n    subject: [\"ZUID\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: (config) => `https://accounts.zoho.${config.region ?? \"com\"}/oauth/v2/token`\n    }\n  },\n  zoom: {\n    authorizationUrl: \"https://zoom.us/oauth/authorize\",\n    email: [\"email\"],\n    familyName: [\"last_name\"],\n    givenName: [\"first_name\"],\n    isOIDC: false,\n    isRefreshable: true,\n    picture: [\"pic_url\"],\n    PKCEMethod: \"S256\",\n    profileRequest: {\n      authIn: \"header\",\n      encoding: \"application/json\",\n      method: \"GET\",\n      url: \"https://api.zoom.us/v2/users/me\"\n    },\n    revocationRequest: {\n      authIn: \"query\",\n      encoding: \"application/json\",\n      headers: (config) => ({\n        Authorization: `Basic ${btoa(`${config.clientId}:${config.clientSecret}`)}`\n      }),\n      tokenParamName: \"token\",\n      url: \"https://zoom.us/oauth/revoke\"\n    },\n    scopeRequired: false,\n    subject: [\"id\"],\n    subjectType: \"string\",\n    tokenRequest: {\n      authIn: \"body\",\n      encoding: \"application/x-www-form-urlencoded\",\n      url: \"https://zoom.us/oauth/token\"\n    }\n  }\n});\n\n// src/typeGuards.ts\nvar hasClientSecret = (credentials) => {\n  if (typeof credentials !== \"object\" || credentials === null)\n    return false;\n  const secret = Reflect.get(credentials, \"clientSecret\");\n  return typeof secret === \"string\";\n};\nvar isExpectedType = (value, kind) => {\n  switch (kind) {\n    case \"string\":\n      return typeof value === \"string\";\n    case \"number\":\n      return typeof value === \"number\";\n    case \"boolean\":\n      return typeof value === \"boolean\";\n    case \"object\":\n      return typeof value === \"object\" && value !== null;\n    default:\n      return false;\n  }\n};\nvar isObject = (value) => value !== null && typeof value === \"object\" && !Array.isArray(value) && Object.prototype.toString.call(value) === \"[object Object]\";\nvar isOIDCProviderOption = (option) => {\n  if (!isValidProviderOption(option))\n    return false;\n  const provider = providers[option];\n  return provider.isOIDC;\n};\nvar isPKCEProviderOption = (option) => {\n  if (!isValidProviderOption(option))\n    return false;\n  const provider = providers[option];\n  return provider.PKCEMethod !== undefined;\n};\nvar isRefreshableOAuth2Client = (providerName, _client) => isRefreshableProviderOption(providerName);\nvar isRefreshableProviderOption = (option) => {\n  if (!isValidProviderOption(option))\n    return false;\n  const provider = providers[option];\n  return provider.isRefreshable;\n};\nvar isRevocableOAuth2Client = (providerName, _client) => isRevocableProviderOption(providerName);\nvar isRevocableProviderOption = (option) => {\n  if (!isValidProviderOption(option))\n    return false;\n  const provider = providers[option];\n  return provider.revocationRequest !== undefined;\n};\nvar isScopeRequiredProviderOption = (option) => {\n  if (!isValidProviderOption(option))\n    return false;\n  const provider = providers[option];\n  return provider.scopeRequired;\n};\nvar isValidProviderOption = (option) => Object.hasOwn(providers, option);\n\n// src/utils.ts\nvar createOAuth2FetchError = async (response) => {\n  const clone = response.clone();\n  const prefix = `HTTP ${response.status} ${response.statusText} for ${response.url}`;\n  const payload = await response.json().catch(() => null);\n  if (payload && typeof payload === \"object\" && Object.keys(payload).length) {\n    return new Error(`${prefix}\n${JSON.stringify(payload)}`);\n  }\n  const text = await clone.text().catch(() => \"\");\n  if (text) {\n    return new Error(`${prefix}\n${text}`);\n  }\n  return new Error(prefix);\n};\nvar createOAuth2Request = ({\n  url,\n  body,\n  authIn,\n  headers,\n  encoding,\n  clientId,\n  clientSecret\n}) => {\n  const oauthHeaders = new Headers(headers);\n  oauthHeaders.set(\"Accept\", \"application/json\");\n  oauthHeaders.set(\"User-Agent\", \"citra\");\n  if (authIn === \"header\") {\n    if (!clientSecret) {\n      throw new Error(\"clientSecret required for header auth\");\n    }\n    oauthHeaders.set(\"Authorization\", `Basic ${encodeBase64(`${clientId}:${clientSecret}`)}`);\n  }\n  if (encoding === \"application/json\") {\n    oauthHeaders.set(\"Content-Type\", \"application/json\");\n    return new Request(url, {\n      body: JSON.stringify(body),\n      headers: oauthHeaders,\n      method: \"POST\"\n    });\n  }\n  oauthHeaders.set(\"Content-Type\", \"application/x-www-form-urlencoded\");\n  const entries = body instanceof URLSearchParams ? Array.from(body.entries()) : Object.entries(body).filter((entry) => typeof entry[1] === \"string\");\n  const params = new URLSearchParams(entries);\n  if (authIn === \"body\") {\n    params.set(\"client_id\", clientId);\n    clientSecret && params.set(\"client_secret\", clientSecret);\n  }\n  return new Request(url, {\n    body: params.toString(),\n    headers: oauthHeaders,\n    method: \"POST\"\n  });\n};\nvar decodeBase64 = (input, toUint8Array = false) => {\n  const b64 = input.replace(/-/g, \"+\").replace(/_/g, \"/\") + \"==\".slice(0, (BASE64_BLOCK_SIZE - input.length % BASE64_BLOCK_SIZE) % BASE64_BLOCK_SIZE);\n  const raw = atob(b64);\n  if (!toUint8Array) {\n    return raw;\n  }\n  const bytes = new Uint8Array(raw.length);\n  for (let i = 0;i < raw.length; i++) {\n    bytes[i] = raw.charCodeAt(i);\n  }\n  return bytes;\n};\nvar decodeJWT = (tokenString) => {\n  const [headerSegment, payloadSegment, signatureSegment] = tokenString.split(\".\");\n  if (!headerSegment || !payloadSegment || !signatureSegment) {\n    throw new Error(\"Invalid JWT format\");\n  }\n  const decodedPayload = decodeBase64(payloadSegment);\n  if (typeof decodedPayload !== \"string\") {\n    throw new Error(\"Expected JWT payload to be a UTF-8 string\");\n  }\n  const claims = JSON.parse(decodedPayload);\n  return claims;\n};\nvar encodeBase64 = (input) => {\n  let raw;\n  if (typeof input === \"string\") {\n    raw = input;\n  } else {\n    const bytes = input instanceof Uint8Array ? input : new Uint8Array(input);\n    raw = bytes.reduce((acc, byte) => acc + String.fromCharCode(byte), \"\");\n  }\n  return btoa(raw);\n};\nvar getWithingsProps = async (config) => {\n  const timestamp = Math.floor(Date.now() / 1000);\n  const signature = `getnonce,${config.clientId},${timestamp}`;\n  const hashedSignature = await hmacSha256(signature, config.clientSecret);\n  const nonceUrl = new URL(\"https://wbsapi.withings.net/v2/signature\");\n  nonceUrl.searchParams.set(\"action\", \"getnonce\");\n  nonceUrl.searchParams.set(\"client_id\", config.clientId);\n  nonceUrl.searchParams.set(\"timestamp\", timestamp.toString());\n  nonceUrl.searchParams.set(\"signature\", hashedSignature);\n  const nonceTarget = nonceUrl.toString();\n  const nonceResponse = await fetch(nonceTarget, {\n    ...h2IfHttps(nonceTarget),\n    method: \"POST\"\n  });\n  const nonceData = await nonceResponse.json();\n  if (nonceData.status === 0) {\n    return {\n      hashedSignature,\n      nonce: nonceData.body.nonce\n    };\n  }\n  return;\n};\nvar h2IfHttps = (url) => {\n  const init = url.startsWith(\"https://\") ? { protocol: \"http2\" } : {};\n  return init;\n};\nvar hmacSha256 = async (message, secret) => {\n  const encoder = new TextEncoder;\n  const key = await crypto.subtle.importKey(\"raw\", encoder.encode(secret), { hash: \"SHA-256\", name: \"HMAC\" }, false, [\"sign\"]);\n  const sigBuffer = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(message));\n  return Array.from(new Uint8Array(sigBuffer)).map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n};\nvar extractPropFromIdentity = (identity, keys, propType) => {\n  let value = identity;\n  for (const key of keys) {\n    if (Array.isArray(value))\n      value = value[Number(key)];\n    if (!isObject(value)) {\n      throw new Error(`Invalid identity data shape: expected object, got ${typeof value}`);\n    }\n    value = value[key];\n  }\n  if (propType !== undefined && !isExpectedType(value, propType)) {\n    throw new Error(`Invalid identity data shape: expected ${propType}, got ${typeof value}`);\n  }\n  return value;\n};\nvar getProviderSubjectKeys = (providerConfiguration, source) => providerConfiguration.subjectBySource?.[source] ?? providerConfiguration.subject;\nvar setPropInIdentity = (identity, keys, value) => {\n  if (keys.length === 0) {\n    return identity;\n  }\n  let cursor = identity;\n  for (const key of keys.slice(0, -1)) {\n    const next = cursor[key];\n    cursor[key] = isObject(next) ? next : {};\n    cursor = cursor[key];\n  }\n  cursor[keys[keys.length - 1]] = value;\n  return identity;\n};\nvar normalizeProviderIdentity = ({\n  identity,\n  providerConfiguration,\n  source\n}) => {\n  const sourceKeys = getProviderSubjectKeys(providerConfiguration, source);\n  const canonicalKeys = providerConfiguration.subject;\n  if (sourceKeys.join(\".\") === canonicalKeys.join(\".\")) {\n    return identity;\n  }\n  const subject = extractPropFromIdentity(identity, sourceKeys, providerConfiguration.subjectType);\n  const normalizedIdentity = structuredClone(identity);\n  return setPropInIdentity(normalizedIdentity, canonicalKeys, subject);\n};\n\n// src/arctic-utils.ts\nvar createS256CodeChallenge = async (codeVerifier) => {\n  const data = new TextEncoder().encode(codeVerifier);\n  const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n  return base64Url(hashBuffer);\n};\nvar createRandomBase64UrlGenerator = (length) => () => {\n  const buffer = crypto.getRandomValues(new Uint8Array(length));\n  return base64Url(buffer);\n};\nvar generateCodeVerifier = createRandomBase64UrlGenerator(NUM_GENERATOR_BYTES);\nvar generateState = createRandomBase64UrlGenerator(NUM_GENERATOR_BYTES);\nvar base64Url = (input) => encodeBase64(input).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n// src/oidc.ts\nvar ALG_ES256 = \"ES256\";\nvar ALG_RS256 = \"RS256\";\nvar CLOCK_SKEW_SECONDS = 60;\nvar DEFAULT_SCOPES = [\"openid\", \"email\", \"profile\"];\nvar JWKS_REFETCH_COOLDOWN_MS = 60000;\nvar JWT_SEGMENT_COUNT = 3;\nvar MILLISECONDS_PER_SECOND = 1000;\nvar trimTrailingSlash = (value) => value.endsWith(\"/\") ? value.slice(0, -1) : value;\nvar fetchJson = async (url) => {\n  const response = await fetch(url, {\n    headers: { accept: \"application/json\" }\n  });\n  if (!response.ok) {\n    throw new Error(`Request to ${url} failed with status ${response.status}`);\n  }\n  return response.json();\n};\nvar decodeJsonSegment = (segment) => {\n  const decoded = decodeBase64(segment);\n  if (typeof decoded !== \"string\") {\n    throw new Error(\"Expected a base64url-encoded JWT segment\");\n  }\n  const parsed = JSON.parse(decoded);\n  if (typeof parsed !== \"object\" || parsed === null) {\n    throw new Error(\"Expected a JWT segment to decode to a JSON object\");\n  }\n  return parsed;\n};\nvar importVerificationKey = (jwk, alg) => {\n  if (alg === ALG_RS256) {\n    return crypto.subtle.importKey(\"jwk\", jwk, { hash: \"SHA-256\", name: \"RSASSA-PKCS1-v1_5\" }, false, [\"verify\"]);\n  }\n  if (alg === ALG_ES256) {\n    return crypto.subtle.importKey(\"jwk\", jwk, { name: \"ECDSA\", namedCurve: \"P-256\" }, false, [\"verify\"]);\n  }\n  throw new Error(`Unsupported id_token signing algorithm \"${alg}\"`);\n};\nvar verifySignature = (key, alg, signingInput, signature) => {\n  const algorithm = alg === ALG_ES256 ? { hash: \"SHA-256\", name: \"ECDSA\" } : { name: \"RSASSA-PKCS1-v1_5\" };\n  return crypto.subtle.verify(algorithm, key, new Uint8Array(signature), new TextEncoder().encode(signingInput));\n};\nvar selectKey = (jwks, kid) => jwks.find((jwk) => kid === undefined || jwk.kid === kid);\nvar assertClaims = (payload, expected) => {\n  const aud = Reflect.get(payload, \"aud\");\n  const exp = Reflect.get(payload, \"exp\");\n  const iss = Reflect.get(payload, \"iss\");\n  const sub = Reflect.get(payload, \"sub\");\n  const audiences = Array.isArray(aud) ? aud : [aud];\n  const nowSeconds = Math.floor(Date.now() / MILLISECONDS_PER_SECOND);\n  if (iss !== expected.issuer) {\n    throw new Error('id_token \"iss\" does not match the provider issuer');\n  }\n  if (typeof sub !== \"string\" || sub.length === 0) {\n    throw new Error('id_token is missing \"sub\"');\n  }\n  if (!audiences.includes(expected.audience)) {\n    throw new Error('id_token \"aud\" does not include the client id');\n  }\n  if (typeof exp !== \"number\" || exp + CLOCK_SKEW_SECONDS < nowSeconds) {\n    throw new Error(\"id_token has expired\");\n  }\n  if (expected.nonce !== undefined && Reflect.get(payload, \"nonce\") !== expected.nonce) {\n    throw new Error('id_token \"nonce\" does not match');\n  }\n  const claims = { ...payload, aud, exp, iss, sub };\n  return claims;\n};\nvar verifyIdToken = async ({\n  audience,\n  idToken,\n  issuer,\n  jwks,\n  nonce\n}) => {\n  const segments = idToken.split(\".\");\n  const [headerSegment, payloadSegment, signatureSegment] = segments;\n  if (segments.length !== JWT_SEGMENT_COUNT || headerSegment === undefined || payloadSegment === undefined || signatureSegment === undefined) {\n    throw new Error(\"Invalid id_token: expected three segments\");\n  }\n  const header = decodeJsonSegment(headerSegment);\n  const alg = Reflect.get(header, \"alg\");\n  const kid = Reflect.get(header, \"kid\");\n  if (typeof alg !== \"string\") {\n    throw new Error('id_token header is missing \"alg\"');\n  }\n  const jwk = selectKey(jwks, typeof kid === \"string\" ? kid : undefined);\n  if (jwk === undefined) {\n    throw new Error('No JWKS key matches the id_token \"kid\"');\n  }\n  const key = await importVerificationKey(jwk, alg);\n  const signature = decodeBase64(signatureSegment, true);\n  if (typeof signature === \"string\") {\n    throw new Error(\"Failed to decode the id_token signature\");\n  }\n  const isValid = await verifySignature(key, alg, `${headerSegment}.${payloadSegment}`, signature);\n  if (!isValid) {\n    throw new Error(\"id_token signature verification failed\");\n  }\n  return assertClaims(decodeJsonSegment(payloadSegment), {\n    audience,\n    issuer,\n    nonce\n  });\n};\nvar toDiscoveryDocument = (value, expectedIssuer) => {\n  if (typeof value !== \"object\" || value === null) {\n    throw new Error(\"OIDC discovery document is not a JSON object\");\n  }\n  const issuer = Reflect.get(value, \"issuer\");\n  const authorizationEndpoint = Reflect.get(value, \"authorization_endpoint\");\n  const tokenEndpoint = Reflect.get(value, \"token_endpoint\");\n  const jwksUri = Reflect.get(value, \"jwks_uri\");\n  const userinfoEndpoint = Reflect.get(value, \"userinfo_endpoint\");\n  if (typeof issuer !== \"string\" || typeof authorizationEndpoint !== \"string\" || typeof tokenEndpoint !== \"string\" || typeof jwksUri !== \"string\") {\n    throw new Error(\"OIDC discovery document is missing required endpoints\");\n  }\n  if (trimTrailingSlash(issuer) !== trimTrailingSlash(expectedIssuer)) {\n    throw new Error(`OIDC discovery issuer \"${issuer}\" does not match configured issuer \"${expectedIssuer}\"`);\n  }\n  return {\n    authorization_endpoint: authorizationEndpoint,\n    issuer,\n    jwks_uri: jwksUri,\n    token_endpoint: tokenEndpoint,\n    userinfo_endpoint: typeof userinfoEndpoint === \"string\" ? userinfoEndpoint : undefined\n  };\n};\nvar fetchDiscoveryDocument = async (issuer) => {\n  const base = trimTrailingSlash(issuer);\n  const document = await fetchJson(`${base}/.well-known/openid-configuration`);\n  return toDiscoveryDocument(document, issuer);\n};\nvar fetchJwks = async (jwksUri) => {\n  const body = await fetchJson(jwksUri);\n  const value = Reflect.get(body ?? {}, \"keys\");\n  if (!Array.isArray(value)) {\n    throw new Error('JWKS response is missing a \"keys\" array');\n  }\n  const keys = value;\n  return keys;\n};\nvar createOIDCClient = async (config) => {\n  const discovery = await fetchDiscoveryDocument(config.issuer);\n  const scopes = config.scopes !== undefined && config.scopes.length > 0 ? config.scopes : DEFAULT_SCOPES;\n  let cachedJwks;\n  let jwksFetchedAtMs = 0;\n  const resolveJwks = async (forceRefresh) => {\n    const isStale = Date.now() - jwksFetchedAtMs > JWKS_REFETCH_COOLDOWN_MS;\n    if (cachedJwks === undefined || forceRefresh && isStale) {\n      cachedJwks = await fetchJwks(discovery.jwks_uri);\n      jwksFetchedAtMs = Date.now();\n    }\n    return cachedJwks;\n  };\n  const createAuthorizationUrl = async (options) => {\n    const url = new URL(discovery.authorization_endpoint);\n    const challenge = await createS256CodeChallenge(options.codeVerifier);\n    const { searchParams } = url;\n    searchParams.set(\"client_id\", config.clientId);\n    searchParams.set(\"code_challenge\", challenge);\n    searchParams.set(\"code_challenge_method\", \"S256\");\n    searchParams.set(\"redirect_uri\", config.redirectUri);\n    searchParams.set(\"response_type\", \"code\");\n    searchParams.set(\"scope\", (options.scope ?? scopes).join(\" \"));\n    searchParams.set(\"state\", options.state);\n    if (options.nonce !== undefined) {\n      searchParams.set(\"nonce\", options.nonce);\n    }\n    return url;\n  };\n  const validateAuthorizationCode = async (options) => {\n    const body = new URLSearchParams;\n    body.set(\"client_id\", config.clientId);\n    body.set(\"client_secret\", config.clientSecret);\n    body.set(\"code\", options.code);\n    body.set(\"code_verifier\", options.codeVerifier);\n    body.set(\"grant_type\", \"authorization_code\");\n    body.set(\"redirect_uri\", config.redirectUri);\n    const response = await fetch(discovery.token_endpoint, {\n      body,\n      headers: {\n        accept: \"application/json\",\n        \"content-type\": \"application/x-www-form-urlencoded\"\n      },\n      method: \"POST\"\n    });\n    if (!response.ok) {\n      throw new Error(`OIDC token request failed with status ${response.status}`);\n    }\n    const tokens = await response.json();\n    return tokens;\n  };\n  const verifyToken = async (idToken, options) => {\n    const jwks = await resolveJwks(false);\n    const params = {\n      audience: config.clientId,\n      idToken,\n      issuer: discovery.issuer,\n      nonce: options?.nonce\n    };\n    try {\n      return await verifyIdToken({ ...params, jwks });\n    } catch (error) {\n      const refreshed = await resolveJwks(true);\n      if (refreshed === jwks)\n        throw error;\n      return verifyIdToken({ ...params, jwks: refreshed });\n    }\n  };\n  const fetchUserProfile = async (accessToken) => {\n    if (discovery.userinfo_endpoint === undefined) {\n      throw new Error(\"OIDC provider does not expose a userinfo endpoint\");\n    }\n    const response = await fetch(discovery.userinfo_endpoint, {\n      headers: {\n        accept: \"application/json\",\n        authorization: `Bearer ${accessToken}`\n      }\n    });\n    if (!response.ok) {\n      throw new Error(`OIDC userinfo request failed with status ${response.status}`);\n    }\n    const profile = await response.json();\n    return profile;\n  };\n  return {\n    createAuthorizationUrl,\n    discovery,\n    fetchUserProfile,\n    validateAuthorizationCode,\n    verifyIdToken: verifyToken\n  };\n};\n// src/providerOptions.ts\nvar oidcProviderOptions = Object.keys(providers).filter(isOIDCProviderOption);\nvar pkceProviderOptions = Object.keys(providers).filter(isPKCEProviderOption);\nvar providerOptions = Object.keys(providers).filter(isValidProviderOption);\nvar refreshableProviderOptions = Object.keys(providers).filter(isRefreshableProviderOption);\nvar revocableProviderOptions = Object.keys(providers).filter(isRevocableProviderOption);\nvar scopeRequiredProviderOptions = Object.keys(providers).filter(isScopeRequiredProviderOption);\n\n// src/index.ts\nvar createOAuth2Client = async (providerName, config) => {\n  const meta = providers[providerName];\n  const isConfigPropertyFunction = (cfgProp) => typeof cfgProp === \"function\";\n  const resolveConfigProp = async (cfgProp) => {\n    const result = isConfigPropertyFunction(cfgProp) ? cfgProp(config) : cfgProp;\n    return result;\n  };\n  const authorizationUrl = await resolveConfigProp(meta.authorizationUrl);\n  const tokenUrl = await resolveConfigProp(meta.tokenRequest.url);\n  return {\n    async createAuthorizationUrl(opts) {\n      const { state, scope = [], searchParams = [], codeVerifier } = opts;\n      const url = new URL(authorizationUrl);\n      url.searchParams.set(\"response_type\", \"code\");\n      url.searchParams.set(\"client_id\", config.clientId);\n      if (config.redirectUri)\n        url.searchParams.set(\"redirect_uri\", config.redirectUri);\n      if (state)\n        url.searchParams.set(\"state\", state);\n      if (scope.length !== 0) {\n        const delimeter = providerName === \"withings\" ? \",\" : \" \";\n        url.searchParams.set(\"scope\", scope.join(delimeter));\n      }\n      if (meta.PKCEMethod !== undefined) {\n        if (!codeVerifier) {\n          throw new Error(\"`codeVerifier` is required when PKCE is enabled\");\n        }\n        const codeChallenge = meta.PKCEMethod === \"S256\" ? await createS256CodeChallenge(codeVerifier) : codeVerifier;\n        url.searchParams.set(\"code_challenge_method\", meta.PKCEMethod);\n        url.searchParams.set(\"code_challenge\", codeChallenge);\n      }\n      Object.entries(resolveConfigProp(meta.createAuthorizationURLSearchParams) ?? {}).forEach(([key, value]) => url.searchParams.set(key, value));\n      searchParams.forEach(([key, value]) => url.searchParams.set(key, value));\n      return url;\n    },\n    async fetchUserProfile(accessToken) {\n      const { profileRequest } = meta;\n      const {\n        url,\n        method,\n        authIn,\n        searchParams,\n        body: profileBody,\n        headers,\n        encoding\n      } = profileRequest;\n      const endpoint = new URL(await resolveConfigProp(url));\n      const resolvedBody = await resolveConfigProp(profileBody);\n      new URLSearchParams(await resolveConfigProp(searchParams)).forEach((value, key) => endpoint.searchParams.append(key, value));\n      let headerEntries = [];\n      const rawHeaders = headers ? await resolveConfigProp(headers) : undefined;\n      if (rawHeaders instanceof Headers)\n        headerEntries = Array.from(rawHeaders.entries());\n      else if (Array.isArray(rawHeaders))\n        headerEntries = rawHeaders;\n      else if (rawHeaders && typeof rawHeaders === \"object\")\n        headerEntries = Object.entries(rawHeaders);\n      const profileHeaders = Object.fromEntries(headerEntries.filter(([, value]) => value !== \"\"));\n      if (authIn === \"header\") {\n        profileHeaders.Authorization = `Bearer ${accessToken}`;\n      } else {\n        endpoint.searchParams.append(\"access_token\", accessToken);\n      }\n      const init = { headers: profileHeaders, method };\n      if (method === \"POST\" && resolvedBody !== undefined) {\n        profileHeaders[\"Content-Type\"] = encoding;\n        init.body = encoding === \"application/json\" ? JSON.stringify(resolvedBody) : new URLSearchParams(resolvedBody).toString();\n      }\n      const profileTarget = endpoint.toString();\n      const response = await fetch(profileTarget, {\n        ...h2IfHttps(profileTarget),\n        ...init\n      });\n      if (!response.ok)\n        throw await createOAuth2FetchError(response);\n      return response.json();\n    },\n    async refreshAccessToken(refreshToken) {\n      const { authIn, encoding } = meta.tokenRequest;\n      const params = new URLSearchParams(meta.refreshAccessTokenBody);\n      params.set(\"grant_type\", \"refresh_token\");\n      params.set(\"refresh_token\", refreshToken);\n      const { clientId } = config;\n      let clientSecretValue;\n      if (hasClientSecret(config)) {\n        clientSecretValue = config.clientSecret;\n        params.set(\"client_id\", clientId);\n        params.set(\"client_secret\", clientSecretValue);\n      }\n      const request = createOAuth2Request({\n        authIn,\n        body: params,\n        clientId,\n        clientSecret: clientSecretValue,\n        encoding,\n        url: tokenUrl\n      });\n      const response = await fetch(request, {\n        ...h2IfHttps(request.url)\n      });\n      if (!response.ok)\n        throw await createOAuth2FetchError(response);\n      return response.json();\n    },\n    async revokeToken(token) {\n      const { revocationRequest } = meta;\n      if (!revocationRequest) {\n        throw new Error(\"Token revocation not defined for this provider\");\n      }\n      const { url, authIn, body, headers, tokenParamName } = revocationRequest;\n      const endpoint = await resolveConfigProp(url);\n      const resolvedBody = await resolveConfigProp(body);\n      const revocationBody = new URLSearchParams(resolvedBody);\n      const revocationHeaders = new Headers(headers && await resolveConfigProp(headers));\n      const { clientId } = config;\n      const clientSecret = hasClientSecret(config) ? config.clientSecret : undefined;\n      let request;\n      if (authIn === \"body\") {\n        revocationBody.set(tokenParamName, token);\n        revocationBody.set(\"client_id\", clientId);\n        if (clientSecret)\n          revocationBody.set(\"client_secret\", clientSecret);\n        request = createOAuth2Request({\n          authIn: \"body\",\n          body: revocationBody,\n          clientId,\n          clientSecret,\n          encoding: \"application/x-www-form-urlencoded\",\n          headers: revocationHeaders,\n          url: endpoint.toString()\n        });\n      } else if (authIn === \"header\") {\n        revocationHeaders.set(\"Authorization\", `Bearer ${token}`);\n        request = createOAuth2Request({\n          authIn: \"header\",\n          body: revocationBody,\n          clientId,\n          clientSecret,\n          encoding: \"application/x-www-form-urlencoded\",\n          headers: revocationHeaders,\n          url: endpoint.toString()\n        });\n      } else {\n        request = createOAuth2Request({\n          authIn: \"query\",\n          body: revocationBody,\n          clientId,\n          clientSecret,\n          encoding: \"application/x-www-form-urlencoded\",\n          headers: revocationHeaders,\n          url: `${endpoint.toString()}?${tokenParamName}=${token}`\n        });\n      }\n      const response = await fetch(request, {\n        ...h2IfHttps(request.url)\n      });\n      if (!response.ok)\n        throw await createOAuth2FetchError(response);\n    },\n    async validateAuthorizationCode(opts) {\n      const { code, codeVerifier } = opts;\n      const { authIn, encoding } = meta.tokenRequest;\n      const bodyObj = {};\n      for (const key in meta.validateAuthorizationCodeBody ?? {}) {\n        const value = meta.validateAuthorizationCodeBody[key];\n        if (typeof value === \"string\")\n          bodyObj[key] = value;\n      }\n      bodyObj.grant_type = \"authorization_code\";\n      bodyObj.code = code;\n      if (config.redirectUri)\n        bodyObj.redirect_uri = config.redirectUri;\n      if (meta.PKCEMethod !== undefined) {\n        if (!codeVerifier) {\n          throw new Error(\"codeVerifier required when PKCE is enabled\");\n        }\n        bodyObj.code_verifier = codeVerifier;\n      }\n      const payload = encoding === \"application/json\" ? bodyObj : new URLSearchParams(bodyObj);\n      const request = createOAuth2Request({\n        authIn,\n        body: payload,\n        clientId: config.clientId,\n        clientSecret: hasClientSecret(config) ? config.clientSecret : undefined,\n        encoding,\n        url: tokenUrl\n      });\n      const response = await fetch(request, {\n        ...h2IfHttps(request.url)\n      });\n      if (!response.ok)\n        throw await createOAuth2FetchError(response);\n      return response.json();\n    }\n  };\n};\nexport {\n  verifyIdToken,\n  scopeRequiredProviderOptions,\n  revocableProviderOptions,\n  refreshableProviderOptions,\n  providers,\n  providerOptions,\n  pkceProviderOptions,\n  oidcProviderOptions,\n  normalizeProviderIdentity,\n  isValidProviderOption,\n  isScopeRequiredProviderOption,\n  isRevocableProviderOption,\n  isRevocableOAuth2Client,\n  isRefreshableProviderOption,\n  isRefreshableOAuth2Client,\n  isPKCEProviderOption,\n  isObject,\n  isOIDCProviderOption,\n  isExpectedType,\n  hmacSha256,\n  hasClientSecret,\n  h2IfHttps,\n  getWithingsProps,\n  getProviderSubjectKeys,\n  generateState,\n  generateCodeVerifier,\n  extractPropFromIdentity,\n  encodeBase64,\n  defineProviders,\n  decodeJWT,\n  decodeBase64,\n  createS256CodeChallenge,\n  createOIDCClient,\n  createOAuth2Request,\n  createOAuth2FetchError,\n  createOAuth2Client\n};\n"
   ],
   "mappings": ";;;;;;;;;;;;;;;;;;;AAEA,IAAI,oBAAoB;AACxB,IAAI,sBAAsB;AAG1B,IAAI,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA6G1B,IAAI,kBAAkB,CAAC,cAAc;AACrC,IAAI,YAAY,gBAAgB;AAAA,EAC9B,MAAM;AAAA,IACJ,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,eAAe;AAAA,IACb,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ,OAAO;AAAA,MACT;AAAA,MACA,UAAU;AAAA,MACV,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,gBAAgB;AAAA,MAClB;AAAA,MACA,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,UAAU,IAAI;AAAA,IAChC,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,kBAAkB;AAAA,IAClB,oCAAoC;AAAA,MAClC,UAAU;AAAA,IACZ;AAAA,IACA,OAAO,CAAC,OAAO;AAAA,IACf,UAAU,CAAC,MAAM;AAAA,IACjB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS;AAAA,IACnB,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,YAAY;AAAA,IACtB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,cAAc;AAAA,IACxB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB,CAAC,WAAW,WAAW,OAAO;AAAA,IAChD,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,MAAM,IAAI,gBAAgB;AAAA,QACxB,iBAAiB;AAAA,MACnB,CAAC;AAAA,MACD,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,kBAAkB,CAAC,WAAW,WAAW,OAAO;AAAA,IAChD,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,kBAAkB;AAAA,IAClB,OAAO,CAAC,OAAO;AAAA,IACf,YAAY,CAAC,aAAa;AAAA,IAC1B,UAAU,CAAC,MAAM;AAAA,IACjB,WAAW,CAAC,YAAY;AAAA,IACxB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS;AAAA,IACnB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,kBAAkB;AAAA,IAClB,UAAU,CAAC,cAAc;AAAA,IACzB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS,UAAU,MAAM;AAAA,IACnC,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,MAAM;AAAA,IAChB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,kBAAkB;AAAA,IAClB,OAAO,CAAC,OAAO;AAAA,IACf,UAAU,CAAC,MAAM;AAAA,IACjB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,YAAY;AAAA,IACtB,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,SAAS;AAAA,QACP,aAAa;AAAA,MACf;AAAA,MACA,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,YAAY,cAAc;AAAA,IACpC,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,IAAI;AAAA,IACtB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,kBAAkB;AAAA,IAClB,OAAO,CAAC,OAAO;AAAA,IACf,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ;AAAA,IAClB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,gBAAgB;AAAA,IACd,kBAAkB;AAAA,IAClB,OAAO,CAAC,QAAQ,OAAO;AAAA,IACvB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,QAAQ;AAAA,IAC1B,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,IAAI;AAAA,IACtB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,kBAAkB;AAAA,IAClB,OAAO,CAAC,OAAO;AAAA,IACf,YAAY,CAAC,QAAQ,SAAS;AAAA,IAC9B,UAAU,CAAC,QAAQ,cAAc;AAAA,IACjC,WAAW,CAAC,QAAQ,YAAY;AAAA,IAChC,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,YAAY;AAAA,IACtB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,YAAY;AAAA,IACtB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,MAAM;AAAA,IACJ,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,WAAW,KAAK,SAAS;AAAA,IACnC,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,kBAAkB;AAAA,IAClB,OAAO,CAAC,OAAO;AAAA,IACf,YAAY,CAAC,aAAa;AAAA,IAC1B,UAAU,CAAC,MAAM;AAAA,IACjB,WAAW,CAAC,YAAY;AAAA,IACxB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS;AAAA,IACnB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,cAAc,CAAC,CAAC,UAAU,uBAAuB,CAAC;AAAA,MAClD,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,KAAK;AAAA,IACf,iBAAiB;AAAA,MACf,SAAS,CAAC,KAAK;AAAA,MACf,SAAS,CAAC,IAAI;AAAA,IAChB;AAAA,IACA,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,OAAO,CAAC,OAAO;AAAA,IACf,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS;AAAA,IACnB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB,CAAC,WAAW,GAAG,OAAO;AAAA,IACxC,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,GAAG,OAAO;AAAA,IAC7B;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,GAAG,OAAO;AAAA,IAC7B;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,OAAO,CAAC,OAAO;AAAA,IACf,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,YAAY;AAAA,IACtB,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB,CAAC,WAAW,GAAG,OAAO;AAAA,IACxC,OAAO,CAAC,OAAO;AAAA,IACf,UAAU,CAAC,MAAM;AAAA,IACjB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS;AAAA,IACnB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK,CAAC,WAAW,GAAG,OAAO;AAAA,IAC7B;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,GAAG,OAAO;AAAA,IAC7B;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,OAAO,CAAC,OAAO;AAAA,IACf,YAAY,CAAC,aAAa;AAAA,IAC1B,UAAU,CAAC,MAAM;AAAA,IACjB,WAAW,CAAC,YAAY;AAAA,IACxB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS;AAAA,IACnB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,KAAK;AAAA,IACf,iBAAiB;AAAA,MACf,SAAS,CAAC,KAAK;AAAA,MACf,SAAS,CAAC,KAAK;AAAA,IACjB;AAAA,IACA,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ;AAAA,IAClB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,OAAO,gBAAgB,eAAe,oEAAoE;AAAA,IAC7H;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,SAAS,CAAC,YAAY;AAAA,QACpB,eAAe,SAAS,aAAa,GAAG,OAAO,YAAY,OAAO,cAAc;AAAA,MAClF;AAAA,MACA,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS;AAAA,IACnB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,kBAAkB,CAAC,WAAW,GAAG,OAAO;AAAA,IACxC,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK,CAAC,WAAW,GAAG,OAAO;AAAA,IAC7B;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,GAAG,OAAO;AAAA,IAC7B;AAAA,EACF;AAAA,EACA,MAAM;AAAA,IACJ,kBAAkB;AAAA,IAClB,OAAO,CAAC,QAAQ,OAAO;AAAA,IACvB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,iBAAiB;AAAA,IACnC,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,SAAS;AAAA,IAC3B,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,MAAM;AAAA,IACJ,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ,OAAO;AAAA,MACT;AAAA,MACA,UAAU;AAAA,MACV,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,gBAAgB;AAAA,MAClB;AAAA,MACA,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,UAAU,IAAI;AAAA,IAChC,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,kBAAkB,CAAC,WAAW,GAAG,OAAO;AAAA,IACxC,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ;AAAA,IAClB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,GAAG,OAAO;AAAA,IAC7B;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK,CAAC,WAAW,GAAG,OAAO;AAAA,IAC7B;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,GAAG,OAAO;AAAA,IAC7B;AAAA,EACF;AAAA,EACA,cAAc;AAAA,IACZ,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,kBAAkB;AAAA,IAChB,kBAAkB,CAAC,WAAW,WAAW,OAAO,yBAAyB,OAAO;AAAA,IAChF,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,WAAW,OAAO,yBAAyB,OAAO;AAAA,IACrE;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,WAAW,OAAO,yBAAyB,OAAO;AAAA,IACrE;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ,OAAO;AAAA,MACT;AAAA,MACA,UAAU;AAAA,MACV,SAAS;AAAA,QACP,gBAAgB;AAAA,MAClB;AAAA,MACA,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,MAAM,IAAI;AAAA,IAC5B,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,aAAa;AAAA,IACX,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,OAAO,CAAC,YAAY,OAAO;AAAA,IAC3B,UAAU,CAAC,YAAY,MAAM;AAAA,IAC7B,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,YAAY,eAAe;AAAA,IACrC,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,YAAY,IAAI;AAAA,IAC1B,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,OAAO,CAAC,OAAO,SAAS,QAAQ,UAAU,OAAO;AAAA,IACjD,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,OAAO,SAAS,QAAQ,YAAY;AAAA,IAC9C,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,SAAS;AAAA,QACP,kBAAkB;AAAA,MACpB;AAAA,MACA,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,OAAO,SAAS,QAAQ,IAAI;AAAA,IACtC,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,MAAM;AAAA,IACJ,kBAAkB,CAAC,WAAW,WAAW,OAAO;AAAA,IAChD,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,EACF;AAAA,EACA,KAAK;AAAA,IACH,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,YAAY;AAAA,IACtB,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,IAAI;AAAA,IACtB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,IAAI;AAAA,IACtB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,iBAAiB;AAAA,IACf,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,WAAW;AAAA,IACrB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,cAAc;AAAA,IACZ,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,WAAW;AAAA,IACrB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,MAAM,IAAI,gBAAgB;AAAA,QACxB,iBAAiB;AAAA,MACnB,CAAC;AAAA,MACD,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS;AAAA,IACnB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,YAAY;AAAA,IACV,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,WAAW;AAAA,IACT,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,kBAAkB;AAAA,IAClB,OAAO,CAAC,QAAQ,eAAe,OAAO;AAAA,IACtC,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,MAAM;AAAA,QACJ,OAAO;AAAA,MACT;AAAA,MACA,UAAU;AAAA,MACV,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,gBAAgB;AAAA,MAClB;AAAA,MACA,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,eAAe,IAAI;AAAA,IACrC,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,YAAY,CAAC,UAAU;AAAA,IACvB,WAAW,CAAC,WAAW;AAAA,IACvB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS;AAAA,IACnB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,MAAM,IAAI,gBAAgB;AAAA,QACxB,iBAAiB;AAAA,MACnB,CAAC;AAAA,MACD,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,kBAAkB,CAAC,WAAW,GAAG,OAAO,6CAA6C,OAAO,4CAA4C,OAAO;AAAA,IAC/I,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,GAAG,OAAO,gDAAgD,OAAO,yBAAyB,OAAO;AAAA,IACpH;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,IAAI;AAAA,IACtB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,GAAG,OAAO,mDAAmD,OAAO,0BAA0B,OAAO;AAAA,IACxH;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,oCAAoC,CAAC,YAAY;AAAA,MAC/C,YAAY,OAAO;AAAA,IACrB;AAAA,IACA,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,SAAS;AAAA,IAC3B,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,IAAI;AAAA,IACtB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,YAAY,QAAQ,MAAM;AAAA,IACpC,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,SAAS,CAAC,YAAY;AAAA,QACpB,aAAa,OAAO;AAAA,MACtB;AAAA,MACA,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,SAAS,CAAC,YAAY;AAAA,QACpB,aAAa,OAAO;AAAA,MACtB;AAAA,MACA,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,SAAS;AAAA,IACP,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ,IAAI;AAAA,IACtB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,IAAI;AAAA,IACF,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,YAAY,KAAK,IAAI;AAAA,IAC/B,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,UAAU;AAAA,IACR,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,MAAM,OAAO,WAAW;AAAA,QACtB,MAAM,QAAQ,MAAM,iBAAiB,MAAM;AAAA,QAC3C,IAAI,UAAU;AAAA,UACZ,MAAM,IAAI,MAAM,0CAA0C;AAAA,QAC5D,QAAQ,OAAO,oBAAoB;AAAA,QACnC,OAAO;AAAA,UACL,CAAC,UAAU,SAAS;AAAA,UACpB,CAAC,SAAS,KAAK;AAAA,UACf,CAAC,aAAa,OAAO,QAAQ;AAAA,UAC7B,CAAC,aAAa,eAAe;AAAA,QAC/B;AAAA;AAAA,MAEF,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,wBAAwB;AAAA,MACtB,QAAQ;AAAA,IACV;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,MAAM,OAAO,WAAW;AAAA,QACtB,MAAM,QAAQ,MAAM,iBAAiB,MAAM;AAAA,QAC3C,IAAI,CAAC;AAAA,UACH,MAAM,IAAI,MAAM,8BAA8B;AAAA,QAChD,QAAQ,OAAO,oBAAoB;AAAA,QACnC,OAAO;AAAA,UACL,CAAC,UAAU,QAAQ;AAAA,UACnB,CAAC,aAAa,OAAO,QAAQ;AAAA,UAC7B,CAAC,SAAS,KAAK;AAAA,UACf,CAAC,aAAa,eAAe;AAAA,QAC/B;AAAA;AAAA,MAEF,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,QAAQ;AAAA,IAClB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,IACA,+BAA+B;AAAA,MAC7B,QAAQ;AAAA,IACV;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB,CAAC,WAAW,WAAW,OAAO;AAAA,IAChD,oCAAoC,MAAM;AAAA,MACxC,MAAM,QAAQ,OAAO,WAAW;AAAA,MAChC,OAAO;AAAA,QACL;AAAA,MACF;AAAA;AAAA,IAEF,OAAO,CAAC,OAAO;AAAA,IACf,YAAY,CAAC,aAAa;AAAA,IAC1B,UAAU,CAAC,MAAM;AAAA,IACjB,WAAW,CAAC,YAAY;AAAA,IACxB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,WAAW,OAAO;AAAA,IACrC;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,kBAAkB;AAAA,IAClB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,QAAQ;AAAA,IACN,kBAAkB;AAAA,IAClB,oCAAoC;AAAA,MAClC,WAAW,OAAO,WAAW;AAAA,MAC7B,aAAa,GAAG,UAAU,YAAY,qBAAqB,UAAU,UAAU,MAAM,GAAG,EAAE,MAAM,IAAI,MAAM,GAAG,EAAE,IAAI,KAAK;AAAA,IAC1H;AAAA,IACA,OAAO,CAAC,eAAe;AAAA,IACvB,YAAY,CAAC,WAAW;AAAA,IACxB,UAAU,CAAC,WAAW;AAAA,IACtB,WAAW,CAAC,YAAY;AAAA,IACxB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AAAA,EACA,MAAM;AAAA,IACJ,kBAAkB,CAAC,WAAW,yBAAyB,OAAO,UAAU;AAAA,IACxE,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK,CAAC,WAAW,yBAAyB,OAAO,UAAU;AAAA,IAC7D;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,gBAAgB;AAAA,MAChB,KAAK,CAAC,WAAW,yBAAyB,OAAO,UAAU;AAAA,IAC7D;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,MAAM;AAAA,IAChB,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK,CAAC,WAAW,yBAAyB,OAAO,UAAU;AAAA,IAC7D;AAAA,EACF;AAAA,EACA,MAAM;AAAA,IACJ,kBAAkB;AAAA,IAClB,OAAO,CAAC,OAAO;AAAA,IACf,YAAY,CAAC,WAAW;AAAA,IACxB,WAAW,CAAC,YAAY;AAAA,IACxB,QAAQ;AAAA,IACR,eAAe;AAAA,IACf,SAAS,CAAC,SAAS;AAAA,IACnB,YAAY;AAAA,IACZ,gBAAgB;AAAA,MACd,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,QAAQ;AAAA,MACR,KAAK;AAAA,IACP;AAAA,IACA,mBAAmB;AAAA,MACjB,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,SAAS,CAAC,YAAY;AAAA,QACpB,eAAe,SAAS,KAAK,GAAG,OAAO,YAAY,OAAO,cAAc;AAAA,MAC1E;AAAA,MACA,gBAAgB;AAAA,MAChB,KAAK;AAAA,IACP;AAAA,IACA,eAAe;AAAA,IACf,SAAS,CAAC,IAAI;AAAA,IACd,aAAa;AAAA,IACb,cAAc;AAAA,MACZ,QAAQ;AAAA,MACR,UAAU;AAAA,MACV,KAAK;AAAA,IACP;AAAA,EACF;AACF,CAAC;AAGD,IAAI,kBAAkB,CAAC,gBAAgB;AAAA,EACrC,IAAI,OAAO,gBAAgB,YAAY,gBAAgB;AAAA,IACrD,OAAO;AAAA,EACT,MAAM,SAAS,QAAQ,IAAI,aAAa,cAAc;AAAA,EACtD,OAAO,OAAO,WAAW;AAAA;AAE3B,IAAI,iBAAiB,CAAC,OAAO,SAAS;AAAA,EACpC,QAAQ;AAAA,SACD;AAAA,MACH,OAAO,OAAO,UAAU;AAAA,SACrB;AAAA,MACH,OAAO,OAAO,UAAU;AAAA,SACrB;AAAA,MACH,OAAO,OAAO,UAAU;AAAA,SACrB;AAAA,MACH,OAAO,OAAO,UAAU,YAAY,UAAU;AAAA;AAAA,MAE9C,OAAO;AAAA;AAAA;AAGb,IAAI,WAAW,CAAC,UAAU,UAAU,QAAQ,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,KAAK,OAAO,UAAU,SAAS,KAAK,KAAK,MAAM;AAC5I,IAAI,uBAAuB,CAAC,WAAW;AAAA,EACrC,IAAI,CAAC,sBAAsB,MAAM;AAAA,IAC/B,OAAO;AAAA,EACT,MAAM,WAAW,UAAU;AAAA,EAC3B,OAAO,SAAS;AAAA;AAElB,IAAI,uBAAuB,CAAC,WAAW;AAAA,EACrC,IAAI,CAAC,sBAAsB,MAAM;AAAA,IAC/B,OAAO;AAAA,EACT,MAAM,WAAW,UAAU;AAAA,EAC3B,OAAO,SAAS,eAAe;AAAA;AAEjC,IAAI,4BAA4B,CAAC,cAAc,YAAY,4BAA4B,YAAY;AACnG,IAAI,8BAA8B,CAAC,WAAW;AAAA,EAC5C,IAAI,CAAC,sBAAsB,MAAM;AAAA,IAC/B,OAAO;AAAA,EACT,MAAM,WAAW,UAAU;AAAA,EAC3B,OAAO,SAAS;AAAA;AAElB,IAAI,0BAA0B,CAAC,cAAc,YAAY,0BAA0B,YAAY;AAC/F,IAAI,4BAA4B,CAAC,WAAW;AAAA,EAC1C,IAAI,CAAC,sBAAsB,MAAM;AAAA,IAC/B,OAAO;AAAA,EACT,MAAM,WAAW,UAAU;AAAA,EAC3B,OAAO,SAAS,sBAAsB;AAAA;AAExC,IAAI,gCAAgC,CAAC,WAAW;AAAA,EAC9C,IAAI,CAAC,sBAAsB,MAAM;AAAA,IAC/B,OAAO;AAAA,EACT,MAAM,WAAW,UAAU;AAAA,EAC3B,OAAO,SAAS;AAAA;AAElB,IAAI,wBAAwB,CAAC,WAAW,OAAO,OAAO,WAAW,MAAM;AAGvE,IAAI,yBAAyB,OAAO,aAAa;AAAA,EAC/C,MAAM,QAAQ,SAAS,MAAM;AAAA,EAC7B,MAAM,SAAS,QAAQ,SAAS,UAAU,SAAS,kBAAkB,SAAS;AAAA,EAC9E,MAAM,UAAU,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,IAAI;AAAA,EACtD,IAAI,WAAW,OAAO,YAAY,YAAY,OAAO,KAAK,OAAO,EAAE,QAAQ;AAAA,IACzE,OAAO,IAAI,MAAM,GAAG;AAAA,EACtB,KAAK,UAAU,OAAO,GAAG;AAAA,EACzB;AAAA,EACA,MAAM,OAAO,MAAM,MAAM,KAAK,EAAE,MAAM,MAAM,EAAE;AAAA,EAC9C,IAAI,MAAM;AAAA,IACR,OAAO,IAAI,MAAM,GAAG;AAAA,EACtB,MAAM;AAAA,EACN;AAAA,EACA,OAAO,IAAI,MAAM,MAAM;AAAA;AAEzB,IAAI,sBAAsB;AAAA,EACxB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,MACI;AAAA,EACJ,MAAM,eAAe,IAAI,QAAQ,OAAO;AAAA,EACxC,aAAa,IAAI,UAAU,kBAAkB;AAAA,EAC7C,aAAa,IAAI,cAAc,OAAO;AAAA,EACtC,IAAI,WAAW,UAAU;AAAA,IACvB,IAAI,CAAC,cAAc;AAAA,MACjB,MAAM,IAAI,MAAM,uCAAuC;AAAA,IACzD;AAAA,IACA,aAAa,IAAI,iBAAiB,SAAS,aAAa,GAAG,YAAY,cAAc,GAAG;AAAA,EAC1F;AAAA,EACA,IAAI,aAAa,oBAAoB;AAAA,IACnC,aAAa,IAAI,gBAAgB,kBAAkB;AAAA,IACnD,OAAO,IAAI,QAAQ,KAAK;AAAA,MACtB,MAAM,KAAK,UAAU,IAAI;AAAA,MACzB,SAAS;AAAA,MACT,QAAQ;AAAA,IACV,CAAC;AAAA,EACH;AAAA,EACA,aAAa,IAAI,gBAAgB,mCAAmC;AAAA,EACpE,MAAM,UAAU,gBAAgB,kBAAkB,MAAM,KAAK,KAAK,QAAQ,CAAC,IAAI,OAAO,QAAQ,IAAI,EAAE,OAAO,CAAC,UAAU,OAAO,MAAM,OAAO,QAAQ;AAAA,EAClJ,MAAM,SAAS,IAAI,gBAAgB,OAAO;AAAA,EAC1C,IAAI,WAAW,QAAQ;AAAA,IACrB,OAAO,IAAI,aAAa,QAAQ;AAAA,IAChC,gBAAgB,OAAO,IAAI,iBAAiB,YAAY;AAAA,EAC1D;AAAA,EACA,OAAO,IAAI,QAAQ,KAAK;AAAA,IACtB,MAAM,OAAO,SAAS;AAAA,IACtB,SAAS;AAAA,IACT,QAAQ;AAAA,EACV,CAAC;AAAA;AAEH,IAAI,eAAe,CAAC,OAAO,eAAe,UAAU;AAAA,EAClD,MAAM,MAAM,MAAM,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG,IAAI,KAAK,MAAM,IAAI,oBAAoB,MAAM,SAAS,qBAAqB,iBAAiB;AAAA,EAClJ,MAAM,MAAM,KAAK,GAAG;AAAA,EACpB,IAAI,CAAC,cAAc;AAAA,IACjB,OAAO;AAAA,EACT;AAAA,EACA,MAAM,QAAQ,IAAI,WAAW,IAAI,MAAM;AAAA,EACvC,SAAS,IAAI,EAAE,IAAI,IAAI,QAAQ,KAAK;AAAA,IAClC,MAAM,KAAK,IAAI,WAAW,CAAC;AAAA,EAC7B;AAAA,EACA,OAAO;AAAA;AAET,IAAI,YAAY,CAAC,gBAAgB;AAAA,EAC/B,OAAO,eAAe,gBAAgB,oBAAoB,YAAY,MAAM,GAAG;AAAA,EAC/E,IAAI,CAAC,iBAAiB,CAAC,kBAAkB,CAAC,kBAAkB;AAAA,IAC1D,MAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AAAA,EACA,MAAM,iBAAiB,aAAa,cAAc;AAAA,EAClD,IAAI,OAAO,mBAAmB,UAAU;AAAA,IACtC,MAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAAA,EACA,MAAM,SAAS,KAAK,MAAM,cAAc;AAAA,EACxC,OAAO;AAAA;AAET,IAAI,eAAe,CAAC,UAAU;AAAA,EAC5B,IAAI;AAAA,EACJ,IAAI,OAAO,UAAU,UAAU;AAAA,IAC7B,MAAM;AAAA,EACR,EAAO;AAAA,IACL,MAAM,QAAQ,iBAAiB,aAAa,QAAQ,IAAI,WAAW,KAAK;AAAA,IACxE,MAAM,MAAM,OAAO,CAAC,KAAK,SAAS,MAAM,OAAO,aAAa,IAAI,GAAG,EAAE;AAAA;AAAA,EAEvE,OAAO,KAAK,GAAG;AAAA;AAEjB,IAAI,mBAAmB,OAAO,WAAW;AAAA,EACvC,MAAM,YAAY,KAAK,MAAM,KAAK,IAAI,IAAI,IAAI;AAAA,EAC9C,MAAM,YAAY,YAAY,OAAO,YAAY;AAAA,EACjD,MAAM,kBAAkB,MAAM,WAAW,WAAW,OAAO,YAAY;AAAA,EACvE,MAAM,WAAW,IAAI,IAAI,0CAA0C;AAAA,EACnE,SAAS,aAAa,IAAI,UAAU,UAAU;AAAA,EAC9C,SAAS,aAAa,IAAI,aAAa,OAAO,QAAQ;AAAA,EACtD,SAAS,aAAa,IAAI,aAAa,UAAU,SAAS,CAAC;AAAA,EAC3D,SAAS,aAAa,IAAI,aAAa,eAAe;AAAA,EACtD,MAAM,cAAc,SAAS,SAAS;AAAA,EACtC,MAAM,gBAAgB,MAAM,MAAM,aAAa;AAAA,OAC1C,UAAU,WAAW;AAAA,IACxB,QAAQ;AAAA,EACV,CAAC;AAAA,EACD,MAAM,YAAY,MAAM,cAAc,KAAK;AAAA,EAC3C,IAAI,UAAU,WAAW,GAAG;AAAA,IAC1B,OAAO;AAAA,MACL;AAAA,MACA,OAAO,UAAU,KAAK;AAAA,IACxB;AAAA,EACF;AAAA,EACA;AAAA;AAEF,IAAI,YAAY,CAAC,QAAQ;AAAA,EACvB,MAAM,OAAO,IAAI,WAAW,UAAU,IAAI,EAAE,UAAU,QAAQ,IAAI,CAAC;AAAA,EACnE,OAAO;AAAA;AAET,IAAI,aAAa,OAAO,SAAS,WAAW;AAAA,EAC1C,MAAM,UAAU,IAAI;AAAA,EACpB,MAAM,MAAM,MAAM,OAAO,OAAO,UAAU,OAAO,QAAQ,OAAO,MAAM,GAAG,EAAE,MAAM,WAAW,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;AAAA,EAC3H,MAAM,YAAY,MAAM,OAAO,OAAO,KAAK,QAAQ,KAAK,QAAQ,OAAO,OAAO,CAAC;AAAA,EAC/E,OAAO,MAAM,KAAK,IAAI,WAAW,SAAS,CAAC,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AAAA;AAExG,IAAI,0BAA0B,CAAC,UAAU,MAAM,aAAa;AAAA,EAC1D,IAAI,QAAQ;AAAA,EACZ,WAAW,OAAO,MAAM;AAAA,IACtB,IAAI,MAAM,QAAQ,KAAK;AAAA,MACrB,QAAQ,MAAM,OAAO,GAAG;AAAA,IAC1B,IAAI,CAAC,SAAS,KAAK,GAAG;AAAA,MACpB,MAAM,IAAI,MAAM,qDAAqD,OAAO,OAAO;AAAA,IACrF;AAAA,IACA,QAAQ,MAAM;AAAA,EAChB;AAAA,EACA,IAAI,aAAa,aAAa,CAAC,eAAe,OAAO,QAAQ,GAAG;AAAA,IAC9D,MAAM,IAAI,MAAM,yCAAyC,iBAAiB,OAAO,OAAO;AAAA,EAC1F;AAAA,EACA,OAAO;AAAA;AAET,IAAI,yBAAyB,CAAC,uBAAuB,WAAW,sBAAsB,kBAAkB,WAAW,sBAAsB;AACzI,IAAI,oBAAoB,CAAC,UAAU,MAAM,UAAU;AAAA,EACjD,IAAI,KAAK,WAAW,GAAG;AAAA,IACrB,OAAO;AAAA,EACT;AAAA,EACA,IAAI,SAAS;AAAA,EACb,WAAW,OAAO,KAAK,MAAM,GAAG,EAAE,GAAG;AAAA,IACnC,MAAM,OAAO,OAAO;AAAA,IACpB,OAAO,OAAO,SAAS,IAAI,IAAI,OAAO,CAAC;AAAA,IACvC,SAAS,OAAO;AAAA,EAClB;AAAA,EACA,OAAO,KAAK,KAAK,SAAS,MAAM;AAAA,EAChC,OAAO;AAAA;AAET,IAAI,4BAA4B;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,MACI;AAAA,EACJ,MAAM,aAAa,uBAAuB,uBAAuB,MAAM;AAAA,EACvE,MAAM,gBAAgB,sBAAsB;AAAA,EAC5C,IAAI,WAAW,KAAK,GAAG,MAAM,cAAc,KAAK,GAAG,GAAG;AAAA,IACpD,OAAO;AAAA,EACT;AAAA,EACA,MAAM,UAAU,wBAAwB,UAAU,YAAY,sBAAsB,WAAW;AAAA,EAC/F,MAAM,qBAAqB,gBAAgB,QAAQ;AAAA,EACnD,OAAO,kBAAkB,oBAAoB,eAAe,OAAO;AAAA;AAIrE,IAAI,0BAA0B,OAAO,iBAAiB;AAAA,EACpD,MAAM,OAAO,IAAI,YAAY,EAAE,OAAO,YAAY;AAAA,EAClD,MAAM,aAAa,MAAM,OAAO,OAAO,OAAO,WAAW,IAAI;AAAA,EAC7D,OAAO,UAAU,UAAU;AAAA;AAE7B,IAAI,iCAAiC,CAAC,WAAW,MAAM;AAAA,EACrD,MAAM,SAAS,OAAO,gBAAgB,IAAI,WAAW,MAAM,CAAC;AAAA,EAC5D,OAAO,UAAU,MAAM;AAAA;AAEzB,IAAI,uBAAuB,+BAA+B,mBAAmB;AAC7E,IAAI,gBAAgB,+BAA+B,mBAAmB;AACtE,IAAI,YAAY,CAAC,UAAU,aAAa,KAAK,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AAExG,IAAI,YAAY;AAChB,IAAI,YAAY;AAChB,IAAI,qBAAqB;AACzB,IAAI,iBAAiB,CAAC,UAAU,SAAS,SAAS;AAClD,IAAI,2BAA2B;AAC/B,IAAI,oBAAoB;AACxB,IAAI,0BAA0B;AAC9B,IAAI,oBAAoB,CAAC,UAAU,MAAM,SAAS,GAAG,IAAI,MAAM,MAAM,GAAG,EAAE,IAAI;AAC9E,IAAI,YAAY,OAAO,QAAQ;AAAA,EAC7B,MAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,SAAS,EAAE,QAAQ,mBAAmB;AAAA,EACxC,CAAC;AAAA,EACD,IAAI,CAAC,SAAS,IAAI;AAAA,IAChB,MAAM,IAAI,MAAM,cAAc,0BAA0B,SAAS,QAAQ;AAAA,EAC3E;AAAA,EACA,OAAO,SAAS,KAAK;AAAA;AAEvB,IAAI,oBAAoB,CAAC,YAAY;AAAA,EACnC,MAAM,UAAU,aAAa,OAAO;AAAA,EACpC,IAAI,OAAO,YAAY,UAAU;AAAA,IAC/B,MAAM,IAAI,MAAM,0CAA0C;AAAA,EAC5D;AAAA,EACA,MAAM,SAAS,KAAK,MAAM,OAAO;AAAA,EACjC,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM;AAAA,IACjD,MAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAAA,EACA,OAAO;AAAA;AAET,IAAI,wBAAwB,CAAC,KAAK,QAAQ;AAAA,EACxC,IAAI,QAAQ,WAAW;AAAA,IACrB,OAAO,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,WAAW,MAAM,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC;AAAA,EAC9G;AAAA,EACA,IAAI,QAAQ,WAAW;AAAA,IACrB,OAAO,OAAO,OAAO,UAAU,OAAO,KAAK,EAAE,MAAM,SAAS,YAAY,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;AAAA,EACtG;AAAA,EACA,MAAM,IAAI,MAAM,2CAA2C,MAAM;AAAA;AAEnE,IAAI,kBAAkB,CAAC,KAAK,KAAK,cAAc,cAAc;AAAA,EAC3D,MAAM,YAAY,QAAQ,YAAY,EAAE,MAAM,WAAW,MAAM,QAAQ,IAAI,EAAE,MAAM,oBAAoB;AAAA,EACvG,OAAO,OAAO,OAAO,OAAO,WAAW,KAAK,IAAI,WAAW,SAAS,GAAG,IAAI,YAAY,EAAE,OAAO,YAAY,CAAC;AAAA;AAE/G,IAAI,YAAY,CAAC,MAAM,QAAQ,KAAK,KAAK,CAAC,QAAQ,QAAQ,aAAa,IAAI,QAAQ,GAAG;AACtF,IAAI,eAAe,CAAC,SAAS,aAAa;AAAA,EACxC,MAAM,MAAM,QAAQ,IAAI,SAAS,KAAK;AAAA,EACtC,MAAM,MAAM,QAAQ,IAAI,SAAS,KAAK;AAAA,EACtC,MAAM,MAAM,QAAQ,IAAI,SAAS,KAAK;AAAA,EACtC,MAAM,MAAM,QAAQ,IAAI,SAAS,KAAK;AAAA,EACtC,MAAM,YAAY,MAAM,QAAQ,GAAG,IAAI,MAAM,CAAC,GAAG;AAAA,EACjD,MAAM,aAAa,KAAK,MAAM,KAAK,IAAI,IAAI,uBAAuB;AAAA,EAClE,IAAI,QAAQ,SAAS,QAAQ;AAAA,IAC3B,MAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAAA,EACA,IAAI,OAAO,QAAQ,YAAY,IAAI,WAAW,GAAG;AAAA,IAC/C,MAAM,IAAI,MAAM,2BAA2B;AAAA,EAC7C;AAAA,EACA,IAAI,CAAC,UAAU,SAAS,SAAS,QAAQ,GAAG;AAAA,IAC1C,MAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAAA,EACA,IAAI,OAAO,QAAQ,YAAY,MAAM,qBAAqB,YAAY;AAAA,IACpE,MAAM,IAAI,MAAM,sBAAsB;AAAA,EACxC;AAAA,EACA,IAAI,SAAS,UAAU,aAAa,QAAQ,IAAI,SAAS,OAAO,MAAM,SAAS,OAAO;AAAA,IACpF,MAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AAAA,EACA,MAAM,SAAS,KAAK,SAAS,KAAK,KAAK,KAAK,IAAI;AAAA,EAChD,OAAO;AAAA;AAET,IAAI,gBAAgB;AAAA,EAClB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,MACI;AAAA,EACJ,MAAM,WAAW,QAAQ,MAAM,GAAG;AAAA,EAClC,OAAO,eAAe,gBAAgB,oBAAoB;AAAA,EAC1D,IAAI,SAAS,WAAW,qBAAqB,kBAAkB,aAAa,mBAAmB,aAAa,qBAAqB,WAAW;AAAA,IAC1I,MAAM,IAAI,MAAM,2CAA2C;AAAA,EAC7D;AAAA,EACA,MAAM,SAAS,kBAAkB,aAAa;AAAA,EAC9C,MAAM,MAAM,QAAQ,IAAI,QAAQ,KAAK;AAAA,EACrC,MAAM,MAAM,QAAQ,IAAI,QAAQ,KAAK;AAAA,EACrC,IAAI,OAAO,QAAQ,UAAU;AAAA,IAC3B,MAAM,IAAI,MAAM,kCAAkC;AAAA,EACpD;AAAA,EACA,MAAM,MAAM,UAAU,MAAM,OAAO,QAAQ,WAAW,MAAM,SAAS;AAAA,EACrE,IAAI,QAAQ,WAAW;AAAA,IACrB,MAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAAA,EACA,MAAM,MAAM,MAAM,sBAAsB,KAAK,GAAG;AAAA,EAChD,MAAM,YAAY,aAAa,kBAAkB,IAAI;AAAA,EACrD,IAAI,OAAO,cAAc,UAAU;AAAA,IACjC,MAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAAA,EACA,MAAM,UAAU,MAAM,gBAAgB,KAAK,KAAK,GAAG,iBAAiB,kBAAkB,SAAS;AAAA,EAC/F,IAAI,CAAC,SAAS;AAAA,IACZ,MAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAAA,EACA,OAAO,aAAa,kBAAkB,cAAc,GAAG;AAAA,IACrD;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AAAA;AAEH,IAAI,sBAAsB,CAAC,OAAO,mBAAmB;AAAA,EACnD,IAAI,OAAO,UAAU,YAAY,UAAU,MAAM;AAAA,IAC/C,MAAM,IAAI,MAAM,8CAA8C;AAAA,EAChE;AAAA,EACA,MAAM,SAAS,QAAQ,IAAI,OAAO,QAAQ;AAAA,EAC1C,MAAM,wBAAwB,QAAQ,IAAI,OAAO,wBAAwB;AAAA,EACzE,MAAM,gBAAgB,QAAQ,IAAI,OAAO,gBAAgB;AAAA,EACzD,MAAM,UAAU,QAAQ,IAAI,OAAO,UAAU;AAAA,EAC7C,MAAM,mBAAmB,QAAQ,IAAI,OAAO,mBAAmB;AAAA,EAC/D,IAAI,OAAO,WAAW,YAAY,OAAO,0BAA0B,YAAY,OAAO,kBAAkB,YAAY,OAAO,YAAY,UAAU;AAAA,IAC/I,MAAM,IAAI,MAAM,uDAAuD;AAAA,EACzE;AAAA,EACA,IAAI,kBAAkB,MAAM,MAAM,kBAAkB,cAAc,GAAG;AAAA,IACnE,MAAM,IAAI,MAAM,0BAA0B,6CAA6C,iBAAiB;AAAA,EAC1G;AAAA,EACA,OAAO;AAAA,IACL,wBAAwB;AAAA,IACxB;AAAA,IACA,UAAU;AAAA,IACV,gBAAgB;AAAA,IAChB,mBAAmB,OAAO,qBAAqB,WAAW,mBAAmB;AAAA,EAC/E;AAAA;AAEF,IAAI,yBAAyB,OAAO,WAAW;AAAA,EAC7C,MAAM,OAAO,kBAAkB,MAAM;AAAA,EACrC,MAAM,WAAW,MAAM,UAAU,GAAG,uCAAuC;AAAA,EAC3E,OAAO,oBAAoB,UAAU,MAAM;AAAA;AAE7C,IAAI,YAAY,OAAO,YAAY;AAAA,EACjC,MAAM,OAAO,MAAM,UAAU,OAAO;AAAA,EACpC,MAAM,QAAQ,QAAQ,IAAI,QAAQ,CAAC,GAAG,MAAM;AAAA,EAC5C,IAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AAAA,IACzB,MAAM,IAAI,MAAM,yCAAyC;AAAA,EAC3D;AAAA,EACA,MAAM,OAAO;AAAA,EACb,OAAO;AAAA;AAET,IAAI,mBAAmB,OAAO,WAAW;AAAA,EACvC,MAAM,YAAY,MAAM,uBAAuB,OAAO,MAAM;AAAA,EAC5D,MAAM,SAAS,OAAO,WAAW,aAAa,OAAO,OAAO,SAAS,IAAI,OAAO,SAAS;AAAA,EACzF,IAAI;AAAA,EACJ,IAAI,kBAAkB;AAAA,EACtB,MAAM,cAAc,OAAO,iBAAiB;AAAA,IAC1C,MAAM,UAAU,KAAK,IAAI,IAAI,kBAAkB;AAAA,IAC/C,IAAI,eAAe,aAAa,gBAAgB,SAAS;AAAA,MACvD,aAAa,MAAM,UAAU,UAAU,QAAQ;AAAA,MAC/C,kBAAkB,KAAK,IAAI;AAAA,IAC7B;AAAA,IACA,OAAO;AAAA;AAAA,EAET,MAAM,yBAAyB,OAAO,YAAY;AAAA,IAChD,MAAM,MAAM,IAAI,IAAI,UAAU,sBAAsB;AAAA,IACpD,MAAM,YAAY,MAAM,wBAAwB,QAAQ,YAAY;AAAA,IACpE,QAAQ,iBAAiB;AAAA,IACzB,aAAa,IAAI,aAAa,OAAO,QAAQ;AAAA,IAC7C,aAAa,IAAI,kBAAkB,SAAS;AAAA,IAC5C,aAAa,IAAI,yBAAyB,MAAM;AAAA,IAChD,aAAa,IAAI,gBAAgB,OAAO,WAAW;AAAA,IACnD,aAAa,IAAI,iBAAiB,MAAM;AAAA,IACxC,aAAa,IAAI,UAAU,QAAQ,SAAS,QAAQ,KAAK,GAAG,CAAC;AAAA,IAC7D,aAAa,IAAI,SAAS,QAAQ,KAAK;AAAA,IACvC,IAAI,QAAQ,UAAU,WAAW;AAAA,MAC/B,aAAa,IAAI,SAAS,QAAQ,KAAK;AAAA,IACzC;AAAA,IACA,OAAO;AAAA;AAAA,EAET,MAAM,4BAA4B,OAAO,YAAY;AAAA,IACnD,MAAM,OAAO,IAAI;AAAA,IACjB,KAAK,IAAI,aAAa,OAAO,QAAQ;AAAA,IACrC,KAAK,IAAI,iBAAiB,OAAO,YAAY;AAAA,IAC7C,KAAK,IAAI,QAAQ,QAAQ,IAAI;AAAA,IAC7B,KAAK,IAAI,iBAAiB,QAAQ,YAAY;AAAA,IAC9C,KAAK,IAAI,cAAc,oBAAoB;AAAA,IAC3C,KAAK,IAAI,gBAAgB,OAAO,WAAW;AAAA,IAC3C,MAAM,WAAW,MAAM,MAAM,UAAU,gBAAgB;AAAA,MACrD;AAAA,MACA,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,gBAAgB;AAAA,MAClB;AAAA,MACA,QAAQ;AAAA,IACV,CAAC;AAAA,IACD,IAAI,CAAC,SAAS,IAAI;AAAA,MAChB,MAAM,IAAI,MAAM,yCAAyC,SAAS,QAAQ;AAAA,IAC5E;AAAA,IACA,MAAM,SAAS,MAAM,SAAS,KAAK;AAAA,IACnC,OAAO;AAAA;AAAA,EAET,MAAM,cAAc,OAAO,SAAS,YAAY;AAAA,IAC9C,MAAM,OAAO,MAAM,YAAY,KAAK;AAAA,IACpC,MAAM,SAAS;AAAA,MACb,UAAU,OAAO;AAAA,MACjB;AAAA,MACA,QAAQ,UAAU;AAAA,MAClB,OAAO,SAAS;AAAA,IAClB;AAAA,IACA,IAAI;AAAA,MACF,OAAO,MAAM,cAAc,KAAK,QAAQ,KAAK,CAAC;AAAA,MAC9C,OAAO,OAAO;AAAA,MACd,MAAM,YAAY,MAAM,YAAY,IAAI;AAAA,MACxC,IAAI,cAAc;AAAA,QAChB,MAAM;AAAA,MACR,OAAO,cAAc,KAAK,QAAQ,MAAM,UAAU,CAAC;AAAA;AAAA;AAAA,EAGvD,MAAM,mBAAmB,OAAO,gBAAgB;AAAA,IAC9C,IAAI,UAAU,sBAAsB,WAAW;AAAA,MAC7C,MAAM,IAAI,MAAM,mDAAmD;AAAA,IACrE;AAAA,IACA,MAAM,WAAW,MAAM,MAAM,UAAU,mBAAmB;AAAA,MACxD,SAAS;AAAA,QACP,QAAQ;AAAA,QACR,eAAe,UAAU;AAAA,MAC3B;AAAA,IACF,CAAC;AAAA,IACD,IAAI,CAAC,SAAS,IAAI;AAAA,MAChB,MAAM,IAAI,MAAM,4CAA4C,SAAS,QAAQ;AAAA,IAC/E;AAAA,IACA,MAAM,UAAU,MAAM,SAAS,KAAK;AAAA,IACpC,OAAO;AAAA;AAAA,EAET,OAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAe;AAAA,EACjB;AAAA;AAGF,IAAI,sBAAsB,OAAO,KAAK,SAAS,EAAE,OAAO,oBAAoB;AAC5E,IAAI,sBAAsB,OAAO,KAAK,SAAS,EAAE,OAAO,oBAAoB;AAC5E,IAAI,kBAAkB,OAAO,KAAK,SAAS,EAAE,OAAO,qBAAqB;AACzE,IAAI,6BAA6B,OAAO,KAAK,SAAS,EAAE,OAAO,2BAA2B;AAC1F,IAAI,2BAA2B,OAAO,KAAK,SAAS,EAAE,OAAO,yBAAyB;AACtF,IAAI,+BAA+B,OAAO,KAAK,SAAS,EAAE,OAAO,6BAA6B;AAG9F,IAAI,qBAAqB,OAAO,cAAc,WAAW;AAAA,EACvD,MAAM,OAAO,UAAU;AAAA,EACvB,MAAM,2BAA2B,CAAC,YAAY,OAAO,YAAY;AAAA,EACjE,MAAM,oBAAoB,OAAO,YAAY;AAAA,IAC3C,MAAM,SAAS,yBAAyB,OAAO,IAAI,QAAQ,MAAM,IAAI;AAAA,IACrE,OAAO;AAAA;AAAA,EAET,MAAM,mBAAmB,MAAM,kBAAkB,KAAK,gBAAgB;AAAA,EACtE,MAAM,WAAW,MAAM,kBAAkB,KAAK,aAAa,GAAG;AAAA,EAC9D,OAAO;AAAA,SACC,uBAAsB,CAAC,MAAM;AAAA,MACjC,QAAQ,OAAO,QAAQ,CAAC,GAAG,eAAe,CAAC,GAAG,iBAAiB;AAAA,MAC/D,MAAM,MAAM,IAAI,IAAI,gBAAgB;AAAA,MACpC,IAAI,aAAa,IAAI,iBAAiB,MAAM;AAAA,MAC5C,IAAI,aAAa,IAAI,aAAa,OAAO,QAAQ;AAAA,MACjD,IAAI,OAAO;AAAA,QACT,IAAI,aAAa,IAAI,gBAAgB,OAAO,WAAW;AAAA,MACzD,IAAI;AAAA,QACF,IAAI,aAAa,IAAI,SAAS,KAAK;AAAA,MACrC,IAAI,MAAM,WAAW,GAAG;AAAA,QACtB,MAAM,YAAY,iBAAiB,aAAa,MAAM;AAAA,QACtD,IAAI,aAAa,IAAI,SAAS,MAAM,KAAK,SAAS,CAAC;AAAA,MACrD;AAAA,MACA,IAAI,KAAK,eAAe,WAAW;AAAA,QACjC,IAAI,CAAC,cAAc;AAAA,UACjB,MAAM,IAAI,MAAM,iDAAiD;AAAA,QACnE;AAAA,QACA,MAAM,gBAAgB,KAAK,eAAe,SAAS,MAAM,wBAAwB,YAAY,IAAI;AAAA,QACjG,IAAI,aAAa,IAAI,yBAAyB,KAAK,UAAU;AAAA,QAC7D,IAAI,aAAa,IAAI,kBAAkB,aAAa;AAAA,MACtD;AAAA,MACA,OAAO,QAAQ,kBAAkB,KAAK,kCAAkC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,WAAW,IAAI,aAAa,IAAI,KAAK,KAAK,CAAC;AAAA,MAC3I,aAAa,QAAQ,EAAE,KAAK,WAAW,IAAI,aAAa,IAAI,KAAK,KAAK,CAAC;AAAA,MACvE,OAAO;AAAA;AAAA,SAEH,iBAAgB,CAAC,aAAa;AAAA,MAClC,QAAQ,mBAAmB;AAAA,MAC3B;AAAA,QACE;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA;AAAA,UACE;AAAA,MACJ,MAAM,WAAW,IAAI,IAAI,MAAM,kBAAkB,GAAG,CAAC;AAAA,MACrD,MAAM,eAAe,MAAM,kBAAkB,WAAW;AAAA,MACxD,IAAI,gBAAgB,MAAM,kBAAkB,YAAY,CAAC,EAAE,QAAQ,CAAC,OAAO,QAAQ,SAAS,aAAa,OAAO,KAAK,KAAK,CAAC;AAAA,MAC3H,IAAI,gBAAgB,CAAC;AAAA,MACrB,MAAM,aAAa,UAAU,MAAM,kBAAkB,OAAO,IAAI;AAAA,MAChE,IAAI,sBAAsB;AAAA,QACxB,gBAAgB,MAAM,KAAK,WAAW,QAAQ,CAAC;AAAA,MAC5C,SAAI,MAAM,QAAQ,UAAU;AAAA,QAC/B,gBAAgB;AAAA,MACb,SAAI,cAAc,OAAO,eAAe;AAAA,QAC3C,gBAAgB,OAAO,QAAQ,UAAU;AAAA,MAC3C,MAAM,iBAAiB,OAAO,YAAY,cAAc,OAAO,IAAI,WAAW,UAAU,EAAE,CAAC;AAAA,MAC3F,IAAI,WAAW,UAAU;AAAA,QACvB,eAAe,gBAAgB,UAAU;AAAA,MAC3C,EAAO;AAAA,QACL,SAAS,aAAa,OAAO,gBAAgB,WAAW;AAAA;AAAA,MAE1D,MAAM,OAAO,EAAE,SAAS,gBAAgB,OAAO;AAAA,MAC/C,IAAI,WAAW,UAAU,iBAAiB,WAAW;AAAA,QACnD,eAAe,kBAAkB;AAAA,QACjC,KAAK,OAAO,aAAa,qBAAqB,KAAK,UAAU,YAAY,IAAI,IAAI,gBAAgB,YAAY,EAAE,SAAS;AAAA,MAC1H;AAAA,MACA,MAAM,gBAAgB,SAAS,SAAS;AAAA,MACxC,MAAM,WAAW,MAAM,MAAM,eAAe;AAAA,WACvC,UAAU,aAAa;AAAA,WACvB;AAAA,MACL,CAAC;AAAA,MACD,IAAI,CAAC,SAAS;AAAA,QACZ,MAAM,MAAM,uBAAuB,QAAQ;AAAA,MAC7C,OAAO,SAAS,KAAK;AAAA;AAAA,SAEjB,mBAAkB,CAAC,cAAc;AAAA,MACrC,QAAQ,QAAQ,aAAa,KAAK;AAAA,MAClC,MAAM,SAAS,IAAI,gBAAgB,KAAK,sBAAsB;AAAA,MAC9D,OAAO,IAAI,cAAc,eAAe;AAAA,MACxC,OAAO,IAAI,iBAAiB,YAAY;AAAA,MACxC,QAAQ,aAAa;AAAA,MACrB,IAAI;AAAA,MACJ,IAAI,gBAAgB,MAAM,GAAG;AAAA,QAC3B,oBAAoB,OAAO;AAAA,QAC3B,OAAO,IAAI,aAAa,QAAQ;AAAA,QAChC,OAAO,IAAI,iBAAiB,iBAAiB;AAAA,MAC/C;AAAA,MACA,MAAM,UAAU,oBAAoB;AAAA,QAClC;AAAA,QACA,MAAM;AAAA,QACN;AAAA,QACA,cAAc;AAAA,QACd;AAAA,QACA,KAAK;AAAA,MACP,CAAC;AAAA,MACD,MAAM,WAAW,MAAM,MAAM,SAAS;AAAA,WACjC,UAAU,QAAQ,GAAG;AAAA,MAC1B,CAAC;AAAA,MACD,IAAI,CAAC,SAAS;AAAA,QACZ,MAAM,MAAM,uBAAuB,QAAQ;AAAA,MAC7C,OAAO,SAAS,KAAK;AAAA;AAAA,SAEjB,YAAW,CAAC,OAAO;AAAA,MACvB,QAAQ,sBAAsB;AAAA,MAC9B,IAAI,CAAC,mBAAmB;AAAA,QACtB,MAAM,IAAI,MAAM,gDAAgD;AAAA,MAClE;AAAA,MACA,QAAQ,KAAK,QAAQ,MAAM,SAAS,mBAAmB;AAAA,MACvD,MAAM,WAAW,MAAM,kBAAkB,GAAG;AAAA,MAC5C,MAAM,eAAe,MAAM,kBAAkB,IAAI;AAAA,MACjD,MAAM,iBAAiB,IAAI,gBAAgB,YAAY;AAAA,MACvD,MAAM,oBAAoB,IAAI,QAAQ,WAAW,MAAM,kBAAkB,OAAO,CAAC;AAAA,MACjF,QAAQ,aAAa;AAAA,MACrB,MAAM,eAAe,gBAAgB,MAAM,IAAI,OAAO,eAAe;AAAA,MACrE,IAAI;AAAA,MACJ,IAAI,WAAW,QAAQ;AAAA,QACrB,eAAe,IAAI,gBAAgB,KAAK;AAAA,QACxC,eAAe,IAAI,aAAa,QAAQ;AAAA,QACxC,IAAI;AAAA,UACF,eAAe,IAAI,iBAAiB,YAAY;AAAA,QAClD,UAAU,oBAAoB;AAAA,UAC5B,QAAQ;AAAA,UACR,MAAM;AAAA,UACN;AAAA,UACA;AAAA,UACA,UAAU;AAAA,UACV,SAAS;AAAA,UACT,KAAK,SAAS,SAAS;AAAA,QACzB,CAAC;AAAA,MACH,EAAO,SAAI,WAAW,UAAU;AAAA,QAC9B,kBAAkB,IAAI,iBAAiB,UAAU,OAAO;AAAA,QACxD,UAAU,oBAAoB;AAAA,UAC5B,QAAQ;AAAA,UACR,MAAM;AAAA,UACN;AAAA,UACA;AAAA,UACA,UAAU;AAAA,UACV,SAAS;AAAA,UACT,KAAK,SAAS,SAAS;AAAA,QACzB,CAAC;AAAA,MACH,EAAO;AAAA,QACL,UAAU,oBAAoB;AAAA,UAC5B,QAAQ;AAAA,UACR,MAAM;AAAA,UACN;AAAA,UACA;AAAA,UACA,UAAU;AAAA,UACV,SAAS;AAAA,UACT,KAAK,GAAG,SAAS,SAAS,KAAK,kBAAkB;AAAA,QACnD,CAAC;AAAA;AAAA,MAEH,MAAM,WAAW,MAAM,MAAM,SAAS;AAAA,WACjC,UAAU,QAAQ,GAAG;AAAA,MAC1B,CAAC;AAAA,MACD,IAAI,CAAC,SAAS;AAAA,QACZ,MAAM,MAAM,uBAAuB,QAAQ;AAAA;AAAA,SAEzC,0BAAyB,CAAC,MAAM;AAAA,MACpC,QAAQ,MAAM,iBAAiB;AAAA,MAC/B,QAAQ,QAAQ,aAAa,KAAK;AAAA,MAClC,MAAM,UAAU,CAAC;AAAA,MACjB,WAAW,OAAO,KAAK,iCAAiC,CAAC,GAAG;AAAA,QAC1D,MAAM,QAAQ,KAAK,8BAA8B;AAAA,QACjD,IAAI,OAAO,UAAU;AAAA,UACnB,QAAQ,OAAO;AAAA,MACnB;AAAA,MACA,QAAQ,aAAa;AAAA,MACrB,QAAQ,OAAO;AAAA,MACf,IAAI,OAAO;AAAA,QACT,QAAQ,eAAe,OAAO;AAAA,MAChC,IAAI,KAAK,eAAe,WAAW;AAAA,QACjC,IAAI,CAAC,cAAc;AAAA,UACjB,MAAM,IAAI,MAAM,4CAA4C;AAAA,QAC9D;AAAA,QACA,QAAQ,gBAAgB;AAAA,MAC1B;AAAA,MACA,MAAM,UAAU,aAAa,qBAAqB,UAAU,IAAI,gBAAgB,OAAO;AAAA,MACvF,MAAM,UAAU,oBAAoB;AAAA,QAClC;AAAA,QACA,MAAM;AAAA,QACN,UAAU,OAAO;AAAA,QACjB,cAAc,gBAAgB,MAAM,IAAI,OAAO,eAAe;AAAA,QAC9D;AAAA,QACA,KAAK;AAAA,MACP,CAAC;AAAA,MACD,MAAM,WAAW,MAAM,MAAM,SAAS;AAAA,WACjC,UAAU,QAAQ,GAAG;AAAA,MAC1B,CAAC;AAAA,MACD,IAAI,CAAC,SAAS;AAAA,QACZ,MAAM,MAAM,uBAAuB,QAAQ;AAAA,MAC7C,OAAO,SAAS,KAAK;AAAA;AAAA,EAEzB;AAAA;",
-  "debugId": "959AC2788B2D199C64756E2164756E21",
+  "debugId": "2E1CE4D0162FAFF764756E2164756E21",
   "names": []
 }

package/dist/types.d.ts

@@ -196,6 +196,14 @@ export type OnSessionCleanup<UserType> = (({ removedSessions, removedUnregistere
 export type RouteString = `/${string}`;
 export type AuthorizeRoute = `${string}/:provider${'' | `/${string}`}`;
 export type AuthConfig<UserType> = {
+    /** Canonical user resolver: load the application user for a session subject
+     *  (`sub`). REQUIRED, and the single source of truth for `UserType` — every
+     *  other user-typed callback (`credentials.getUserByEmail`,
+     *  `sso.getSsoUser`, `onCallbackSuccess`, …) is checked against the shape
+     *  `getUser` returns (via `NoInfer`), so they cannot disagree. This is also
+     *  the resolver the package uses to hydrate the typed `user` in
+     *  `protectRoute`'s context. */
+    getUser: (sub: string) => UserType | Promise<UserType>;
     providersConfiguration: OAuth2ConfigurationOptions;
     /** Override the `Secure` attribute on every cookie the package sets (session, OAuth state,
      *  code_verifier, SSO nonce, ring, etc.). When omitted, defaults to
@@ -222,36 +230,36 @@ export type AuthConfig<UserType> = {
     cleanupIntervalMs?: number;
     maxSessions?: number;
     sessionDurationMs?: number;
-    authSessionStore?: AuthSessionStore<UserType>;
+    authSessionStore?: AuthSessionStore<NoInfer<UserType>>;
     /** Append-only audit logging. When present, `auth()` emits structured events
      *  (register, login, mfa_*, password_reset, logout, …) from every flow into the
      *  `auditStore` and/or `onAuditEvent` hook. SOC 2 prerequisite. */
-    audit?: AuditConfig<UserType>;
+    audit?: AuditConfig<NoInfer<UserType>>;
     /** Local email/password (credentials) block. Additive and optional — when present,
      *  mounts register / verify-email / login / reset-password routes that produce the
      *  same `SessionData<UserType>` as OAuth, transparent to `protectRoute`. */
-    credentials?: CredentialsConfig<UserType>;
+    credentials?: CredentialsConfig<NoInfer<UserType>>;
     /** Passwordless login: magic links + email/SMS OTP. When present, mounts the magic-link flow
      *  (if `onSendMagicLink` is set) and/or the OTP flow (if `onSendOtp` is set) under
      *  `{passwordlessRoute}`; each verify route resolves the email to a user and mints the same
      *  `SessionData<UserType>` as every other flow. */
-    passwordless?: PasswordlessConfig<UserType>;
+    passwordless?: PasswordlessConfig<NoInfer<UserType>>;
     /** Multi-factor auth (TOTP + backup codes). When present alongside `credentials`,
      *  `auth()` auto-wires the login MFA gate, mounts the enroll/challenge routes, and
      *  promotes the parked session once a factor is verified. */
-    mfa?: MfaConfig<UserType>;
+    mfa?: MfaConfig<NoInfer<UserType>>;
     /** Per-identity attempt throttling + account lockout on the credential login route
      *  (progressive: locks after `maxAttempts` failures within `windowMs`). */
     lockout?: LockoutConfig;
     /** Self-service session management: `GET /auth/sessions` (list the caller's active
      *  sessions) and `DELETE /auth/sessions/:id` (remote revoke). Requires an
      *  `authSessionStore` that can enumerate sessions. */
-    sessions?: SessionsConfig<UserType>;
+    sessions?: SessionsConfig<NoInfer<UserType>>;
     /** Per-organization enterprise SSO (the WorkOS-style model). When present, mounts
      *  `GET {ssoRoute}/oidc/:organizationId/authorize` + `.../callback`, resolves the org's
      *  OIDC connection from `ssoConnectionStore`, verifies the id_token in-house against the
      *  issuer's JWKS, and mints the same `SessionData<UserType>` as every other flow. */
-    sso?: SSOConfig<UserType>;
+    sso?: SSOConfig<NoInfer<UserType>>;
     /** SCIM 2.0 auto-provisioning for enterprise directory sync (Okta / Azure AD). When present,
      *  mounts `{scimRoute}/Users` (+ `/ServiceProviderConfig`) with per-org bearer-token auth via
      *  `scimTokenStore`, and maps SCIM resources to the consumer's user store through hooks. */
@@ -269,12 +277,12 @@ export type AuthConfig<UserType> = {
      *  JWTs signed by a key you own (self-hosted JWKS), refresh-token rotation, and
      *  optional DPoP (RFC 9449) sender-constrained tokens. The authorize endpoint reuses
      *  the package session, so the IdP login gets passkeys / MFA / SSO for free. */
-    oidc?: OidcProviderConfig<UserType>;
+    oidc?: OidcProviderConfig<NoInfer<UserType>>;
     /** First-class multi-tenancy (the WorkOS model). When present, mounts organization +
      *  membership + invitation routes under `{organizationsRoute}`: list the caller's orgs, create
      *  one (caller becomes owner), invite/accept/revoke by email, and list/remove members. Ties the
      *  bare `organizationId` used by SSO/SCIM/RBAC into a real tenant model with org-scoped roles. */
-    organizations?: OrganizationsConfig<UserType>;
+    organizations?: OrganizationsConfig<NoInfer<UserType>>;
     /** Admin portal — the WorkOS self-serve "setup link" model, headless. When present, mounts
      *  `{portalRoute}` endpoints a customer's IT admin (holding a scoped setup token from
      *  `createSetupSession`) calls to read the service-provider URLs and configure their own SSO
@@ -283,21 +291,21 @@ export type AuthConfig<UserType> = {
     /** Org-scoped roles & permissions (builds on `organizations`). When present, mounts routes to
      *  list an org's role definitions and set a member's roles. Pair with
      *  `createMembershipPermissionResolver` to make `authorization.hasPermission` turnkey. */
-    roles?: RolesConfig<UserType>;
+    roles?: RolesConfig<NoInfer<UserType>>;
     /** Role-based / attribute-based access control (E4). When present, `auth()` exposes a
      *  `protectPermission(check, handler)` derive (alongside `protectRoute`) that delegates the
      *  decision to your `hasPermission` hook — the package stays schema-agnostic about roles. */
-    authorization?: AuthorizationConfig<UserType>;
+    authorization?: AuthorizationConfig<NoInfer<UserType>>;
     /** GDPR/CCPA self-service compliance (E5). When present, mounts `GET {complianceRoute}/export`
      *  (right to access) and `DELETE {complianceRoute}` (right to erasure — runs your delete hook,
      *  revokes the user's sessions, clears the cookie). Pair with `audit.redact` for PII redaction. */
-    compliance?: ComplianceConfig<UserType>;
+    compliance?: ComplianceConfig<NoInfer<UserType>>;
     /** Passwordless / passkey auth (WebAuthn). When present, mounts the registration ceremony
      *  (`{webauthnRoute}/register/options` + `/verify`, adds a passkey to the authenticated caller)
      *  and the authentication ceremony (`.../authenticate/options` + `/verify`, passwordless sign-in
      *  → mints the same `SessionData<UserType>`). A `webauthnAdapter` wraps a vetted library (e.g.
      *  `@simplewebauthn/server`); the package never bundles the WebAuthn crypto. */
-    webauthn?: WebAuthnConfig<UserType>;
+    webauthn?: WebAuthnConfig<NoInfer<UserType>>;
     /** Signed outbound webhooks. When present, every emitted auth event (the audit taxonomy) is
      *  HMAC-signed (Standard Webhooks scheme) and POSTed to each endpoint. Delivery is best-effort
      *  and isolated per endpoint; configuring this alone (without `audit`) is enough to turn on
@@ -311,25 +319,25 @@ export type AuthConfig<UserType> = {
      *  Only available when `UserType` has the fields the fragments render
      *  (`sub` + optional email/name); users that don't enable HTMX are never
      *  constrained. */
-    htmx?: UserType extends AuthHtmxUser ? AuthHtmxConfig : never;
+    htmx?: NoInfer<UserType> extends AuthHtmxUser ? AuthHtmxConfig : never;
     unregisteredSessionDurationMs?: number;
-    resolveAuthIntent?: ResolveAuthIntent<UserType>;
+    resolveAuthIntent?: ResolveAuthIntent<NoInfer<UserType>>;
     onAuthorizeSuccess?: OnAuthorizeSuccess;
     onAuthorizeError?: OnAuthorizeError;
-    onCallbackSuccess?: OnCallbackSuccess<UserType>;
-    onLinkIdentity?: OnLinkIdentity<UserType>;
-    onLinkIdentityConflict?: OnLinkIdentityConflict<UserType>;
-    onLinkConnector?: OnLinkConnector<UserType>;
+    onCallbackSuccess?: OnCallbackSuccess<NoInfer<UserType>>;
+    onLinkIdentity?: OnLinkIdentity<NoInfer<UserType>>;
+    onLinkIdentityConflict?: OnLinkIdentityConflict<NoInfer<UserType>>;
+    onLinkConnector?: OnLinkConnector<NoInfer<UserType>>;
     onCallbackError?: OnCallbackError;
-    onStatus?: OnStatus<UserType>;
+    onStatus?: OnStatus<NoInfer<UserType>>;
     onRefreshSuccess?: OnRefreshSuccess;
     onRefreshError?: OnRefreshError;
-    onSignOut?: OnSignOut<UserType>;
+    onSignOut?: OnSignOut<NoInfer<UserType>>;
     onRevocationSuccess?: OnRevocationSuccess;
     onRevocationError?: OnRevocationError;
     onProfileSuccess?: OnProfileSuccess;
     onProfileError?: OnProfileError;
-    onSessionCleanup?: OnSessionCleanup<UserType>;
+    onSessionCleanup?: OnSessionCleanup<NoInfer<UserType>>;
 };
 /** The serializable subset of `AuthConfig` — the route paths, session durations, and
  *  limits that can live in a data file (`auth.config.ts` via `defineAuthSettings`) and

package/package.json

@@ -1,5 +1,5 @@
 {
-	"version": "0.45.9",
+	"version": "0.46.0",
 	"name": "@absolutejs/auth",
 	"description": "An authorization library for absolutejs",
 	"repository": {