@atcute/client 4.2.1 → 5.0.0

package/dist/credential-manager.d.ts

@@ -1,109 +0,0 @@
-import type { Did } from '@atcute/lexicons';
-import { type FetchHandlerObject } from './fetch-handler.js';
-/**
- * represents the decoded access token, for convenience
- * @deprecated
- */
-export interface AtpAccessJwt {
-    /** access token scope */
-    scope: 'com.atproto.access' | 'com.atproto.appPass' | 'com.atproto.appPassPrivileged' | 'com.atproto.signupQueued' | 'com.atproto.takendown';
-    /** account DID */
-    sub: Did;
-    /** expiration time in Unix seconds */
-    exp: number;
-    /** token issued time in Unix seconds */
-    iat: number;
-}
-/**
- * represents the the decoded refresh token, for convenience
- * @deprecated
- */
-export interface AtpRefreshJwt {
-    /** refresh token scope */
-    scope: 'com.atproto.refresh';
-    /** unique identifier for this session */
-    jti: string;
-    /** account DID */
-    sub: Did;
-    /** intended audience of this refresh token, in DID */
-    aud: Did;
-    /** token expiration time in seconds */
-    exp: number;
-    /** token issued time in seconds */
-    iat: number;
-}
-/** session data, can be persisted and reused */
-export interface AtpSessionData {
-    /** refresh token */
-    refreshJwt: string;
-    /** access token */
-    accessJwt: string;
-    /** account handle */
-    handle: string;
-    /** account DID */
-    did: Did;
-    /** PDS endpoint found in the DID document, this will be used as the service URI if provided */
-    pdsUri?: string;
-    /** email address of the account, might not be available if on app password */
-    email?: string;
-    /** whether the email address has been confirmed or not */
-    emailConfirmed?: boolean;
-    /** whether the account has email-based two-factor authentication enabled */
-    emailAuthFactor?: boolean;
-    /** whether the account is active (not deactivated, taken down, or suspended) */
-    active: boolean;
-    /** possible reason for why the account is inactive */
-    inactiveStatus?: string;
-}
-export interface CredentialManagerOptions {
-    /** PDS server URL */
-    service: string;
-    /** custom fetch function */
-    fetch?: typeof fetch;
-    /** function called when the session expires and can't be refreshed */
-    onExpired?: (session: AtpSessionData) => void;
-    /** function called after a successful session refresh */
-    onRefresh?: (session: AtpSessionData) => void;
-    /** function called whenever the session object is updated (login, resume, refresh) */
-    onSessionUpdate?: (session: AtpSessionData) => void;
-}
-export declare class CredentialManager implements FetchHandlerObject {
-    #private;
-    /** service URL to make authentication requests with */
-    readonly serviceUrl: string;
-    /** fetch implementation */
-    fetch: typeof fetch;
-    /** current active session, undefined if not authenticated */
-    session?: AtpSessionData;
-    constructor({ service, onExpired, onRefresh, onSessionUpdate, fetch: _fetch }: CredentialManagerOptions);
-    /** service URL to make actual API requests with */
-    get dispatchUrl(): string;
-    handle(pathname: string, init: RequestInit): Promise<Response>;
-    /**
-     * resume from a persisted session
-     * @param session session data, taken from `AtpAuth#session` after login
-     */
-    resume(session: AtpSessionData): Promise<AtpSessionData>;
-    /**
-     * sign in to an account
-     * @param options credential options
-     * @returns session data
-     */
-    login(options: AuthLoginOptions): Promise<AtpSessionData>;
-    /**
-     * sign out of the current session, invalidating it server-side
-     */
-    logout(): Promise<void>;
-}
-/** credentials */
-export interface AuthLoginOptions {
-    /** what account to login as, this could be domain handle, DID, or email address */
-    identifier: string;
-    /** account password */
-    password: string;
-    /** two-factor authentication code, if email TOTP is enabled */
-    code?: string;
-    /** allow signing in even if the account has been taken down */
-    allowTakendown?: boolean;
-}
-//# sourceMappingURL=credential-manager.d.ts.map

package/dist/credential-manager.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-manager.d.ts","sourceRoot":"","sources":["../lib/credential-manager.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,kBAAkB,CAAC;AAK5C,OAAO,EAAsB,KAAK,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAIjF;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC5B,yBAAyB;IACzB,KAAK,EACF,oBAAoB,GACpB,qBAAqB,GACrB,+BAA+B,GAC/B,0BAA0B,GAC1B,uBAAuB,CAAC;IAC3B,kBAAkB;IAClB,GAAG,EAAE,GAAG,CAAC;IACT,sCAAsC;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAC;CACZ;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC7B,0BAA0B;IAC1B,KAAK,EAAE,qBAAqB,CAAC;IAC7B,yCAAyC;IACzC,GAAG,EAAE,MAAM,CAAC;IACZ,kBAAkB;IAClB,GAAG,EAAE,GAAG,CAAC;IACT,sDAAsD;IACtD,GAAG,EAAE,GAAG,CAAC;IACT,uCAAuC;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,mCAAmC;IACnC,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,gDAAgD;AAChD,MAAM,WAAW,cAAc;IAC9B,oBAAoB;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,GAAG,EAAE,GAAG,CAAC;IACT,+FAA+F;IAC/F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,gFAAgF;IAChF,MAAM,EAAE,OAAO,CAAC;IAChB,sDAAsD;IACtD,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACxC,qBAAqB;IACrB,OAAO,EAAE,MAAM,CAAC;IAEhB,4BAA4B;IAC5B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAErB,sEAAsE;IACtE,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,yDAAyD;IACzD,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;IAC9C,sFAAsF;IACtF,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,KAAK,IAAI,CAAC;CACpD;AAED,qBAAa,iBAAkB,YAAW,kBAAkB;;IAC3D,uDAAuD;IACvD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,2BAA2B;IAC3B,KAAK,EAAE,OAAO,KAAK,CAAC;IAcpB,6DAA6D;IAC7D,OAAO,CAAC,EAAE,cAAc,CAAC;IAEzB,YAAY,EACX,OAAO,EACP,SAAS,EACT,SAAS,EACT,eAAe,EACf,KAAK,EAAE,MAAc,EACrB,EAAE,wBAAwB,EAS1B;IAED,mDAAmD;IACnD,IAAI,WAAW,WAEd;IAEK,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CA6CnE;IA6ED;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CA2D7D;IAED;;;;OAIG;IACG,KAAK,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,cAAc,CAAC,CAiB9D;IAED;;OAEG;IACG,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAmB5B;CACD;AAED,kBAAkB;AAClB,MAAM,WAAW,gBAAgB;IAChC,mFAAmF;IACnF,UAAU,EAAE,MAAM,CAAC;IACnB,uBAAuB;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,cAAc,CAAC,EAAE,OAAO,CAAC;CACzB"}

package/dist/credential-manager.js

@@ -1,250 +0,0 @@
-import { getPdsEndpoint } from '@atcute/identity';
-import { Client, ClientResponseError, isXRPCErrorPayload, ok } from './client.js';
-import { simpleFetchHandler } from './fetch-handler.js';
-import { decodeJwt } from './utils/jwt.js';
-export class CredentialManager {
-    /** service URL to make authentication requests with */
-    serviceUrl;
-    /** fetch implementation */
-    fetch;
-    /** internal client instance for making authentication requests */
-    #server;
-    /** holds a promise for the current refresh operation, used for debouncing */
-    #refreshSessionPromise;
-    /** callback for session expiration */
-    #onExpired;
-    /** callback for successful session refresh */
-    #onRefresh;
-    /** callback for session updates */
-    #onSessionUpdate;
-    /** current active session, undefined if not authenticated */
-    session;
-    constructor({ service, onExpired, onRefresh, onSessionUpdate, fetch: _fetch = fetch, }) {
-        this.serviceUrl = service;
-        this.fetch = _fetch;
-        this.#server = new Client({ handler: simpleFetchHandler({ service, fetch: _fetch }) });
-        this.#onRefresh = onRefresh;
-        this.#onExpired = onExpired;
-        this.#onSessionUpdate = onSessionUpdate;
-    }
-    /** service URL to make actual API requests with */
-    get dispatchUrl() {
-        return this.session?.pdsUri ?? this.serviceUrl;
-    }
-    async handle(pathname, init) {
-        await this.#refreshSessionPromise;
-        const url = new URL(pathname, this.dispatchUrl);
-        const headers = new Headers(init.headers);
-        if (!this.session || headers.has('authorization')) {
-            return (0, this.fetch)(url, init);
-        }
-        const initialToken = this.session.accessJwt;
-        headers.set('authorization', `Bearer ${initialToken}`);
-        const initialResponse = await (0, this.fetch)(url, { ...init, headers });
-        if (initialResponse.status !== 401 && !(await isExpiredTokenResponse(initialResponse))) {
-            return initialResponse;
-        }
-        try {
-            await this.#refreshSession();
-        }
-        catch {
-            return initialResponse;
-        }
-        // return initial response if:
-        // - request was aborted
-        // - refresh failed and cleared the session
-        // - token didn't actually change (refresh failed silently)
-        // - request body was a stream (can't be resent)
-        const updatedToken = this.session?.accessJwt;
-        if (init.signal?.aborted ||
-            !updatedToken ||
-            updatedToken === initialToken ||
-            init.body instanceof ReadableStream) {
-            return initialResponse;
-        }
-        // cancel initial response to avoid resource leaks (Node.js)
-        await initialResponse.body?.cancel();
-        headers.set('authorization', `Bearer ${updatedToken}`);
-        return await (0, this.fetch)(url, { ...init, headers });
-    }
-    #refreshSession() {
-        return (this.#refreshSessionPromise ||= this.#refreshSessionInner().finally(() => (this.#refreshSessionPromise = undefined)));
-    }
-    async #refreshSessionInner() {
-        const currentSession = this.session;
-        if (!currentSession) {
-            return;
-        }
-        const response = await this.#server.post('com.atproto.server.refreshSession', {
-            headers: {
-                authorization: `Bearer ${currentSession.refreshJwt}`,
-            },
-        });
-        if (!response.ok) {
-            const isExpired = response.status === 401 ||
-                response.data.error === 'ExpiredToken' ||
-                response.data.error === 'InvalidToken';
-            if (isExpired) {
-                this.session = undefined;
-                this.#onExpired?.(currentSession);
-            }
-            throw new ClientResponseError(response);
-        }
-        // DID must not change during refresh
-        if (response.data.did !== currentSession.did) {
-            this.session = undefined;
-            this.#onExpired?.(currentSession);
-            throw new ClientResponseError({ status: 401, data: { error: 'InvalidDID' } });
-        }
-        // protect against concurrent session updates
-        if (this.session !== currentSession) {
-            throw new Error('concurrent session update detected');
-        }
-        this.#updateSession({ ...currentSession, ...response.data });
-        this.#onRefresh?.(this.session);
-    }
-    #updateSession(raw) {
-        const didDoc = raw.didDoc;
-        let pdsUri;
-        if (didDoc) {
-            pdsUri = getPdsEndpoint(didDoc);
-        }
-        const newSession = {
-            accessJwt: raw.accessJwt,
-            refreshJwt: raw.refreshJwt,
-            handle: raw.handle,
-            did: raw.did,
-            pdsUri: pdsUri,
-            email: raw.email,
-            emailConfirmed: raw.emailConfirmed,
-            emailAuthFactor: raw.emailAuthFactor,
-            active: raw.active ?? true,
-            inactiveStatus: raw.status,
-        };
-        this.session = newSession;
-        this.#onSessionUpdate?.(newSession);
-        return newSession;
-    }
-    /**
-     * resume from a persisted session
-     * @param session session data, taken from `AtpAuth#session` after login
-     */
-    async resume(session) {
-        // protect against concurrent resume of the same session
-        if (session.refreshJwt === this.session?.refreshJwt) {
-            await this.#refreshSessionPromise;
-            if (!this.session || session.did !== this.session.did) {
-                throw new ClientResponseError({ status: 401, data: { error: 'InvalidToken' } });
-            }
-            return this.session;
-        }
-        const now = Date.now() / 1_000 + 60 * 5;
-        const refreshToken = decodeJwt(session.refreshJwt);
-        if (now >= refreshToken.exp || refreshToken.sub !== session.did) {
-            throw new ClientResponseError({ status: 401, data: { error: 'InvalidToken' } });
-        }
-        const accessToken = decodeJwt(session.accessJwt);
-        if (accessToken.sub !== session.did) {
-            throw new ClientResponseError({ status: 401, data: { error: 'InvalidToken' } });
-        }
-        // set the session and clear any stale refresh promise
-        this.session = session;
-        this.#refreshSessionPromise = undefined;
-        if (now >= accessToken.exp) {
-            // access token expired, need to refresh
-            await this.#refreshSession();
-        }
-        else {
-            // access token still valid, fetch session info in background
-            const promise = ok(this.#server.get('com.atproto.server.getSession', {
-                headers: {
-                    authorization: `Bearer ${session.accessJwt}`,
-                },
-            }));
-            promise.then((next) => {
-                const existing = this.session;
-                if (!existing || existing.did !== next.did) {
-                    return;
-                }
-                this.#updateSession({ ...existing, ...next });
-            }, (_err) => {
-                // ignore error
-            });
-        }
-        if (!this.session) {
-            throw new ClientResponseError({ status: 401, data: { error: 'InvalidToken' } });
-        }
-        return this.session;
-    }
-    /**
-     * sign in to an account
-     * @param options credential options
-     * @returns session data
-     */
-    async login(options) {
-        // reset the session
-        this.session = undefined;
-        this.#refreshSessionPromise = undefined;
-        const session = await ok(this.#server.post('com.atproto.server.createSession', {
-            input: {
-                identifier: options.identifier,
-                password: options.password,
-                authFactorToken: options.code,
-                allowTakendown: options.allowTakendown,
-            },
-        }));
-        return this.#updateSession(session);
-    }
-    /**
-     * sign out of the current session, invalidating it server-side
-     */
-    async logout() {
-        const currentSession = this.session;
-        if (!currentSession) {
-            return;
-        }
-        this.session = undefined;
-        this.#refreshSessionPromise = undefined;
-        try {
-            await this.#server.post('com.atproto.server.deleteSession', {
-                as: null,
-                headers: {
-                    authorization: `Bearer ${currentSession.refreshJwt}`,
-                },
-            });
-        }
-        catch {
-            // ignore errors - session is already cleared locally
-        }
-    }
-}
-const isExpiredTokenResponse = async (response) => {
-    if (response.status !== 400) {
-        return false;
-    }
-    if (extractContentType(response.headers) !== 'application/json') {
-        return false;
-    }
-    // this is nasty as it relies heavily on what the PDS returns, but avoiding
-    // cloning and reading the request as much as possible is better.
-    // {"error":"ExpiredToken","message":"Token has expired"}
-    // {"error":"ExpiredToken","message":"Token is expired"}
-    if (extractContentLength(response.headers) > 54 * 1.5) {
-        return false;
-    }
-    try {
-        const data = await response.clone().json();
-        if (isXRPCErrorPayload(data)) {
-            return data.error === 'ExpiredToken';
-        }
-    }
-    catch { }
-    return false;
-};
-const extractContentType = (headers) => {
-    return headers.get('content-type')?.split(';')[0]?.trim();
-};
-const extractContentLength = (headers) => {
-    return Number(headers.get('content-length') ?? ';');
-};
-//# sourceMappingURL=credential-manager.js.map

package/dist/credential-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential-manager.js","sourceRoot":"","sources":["../lib/credential-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAoB,MAAM,kBAAkB,CAAC;AAKpE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAA2B,MAAM,oBAAoB,CAAC;AAEjF,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAgF3C,MAAM,OAAO,iBAAiB;IAC7B,uDAAuD;IAC9C,UAAU,CAAS;IAC5B,2BAA2B;IAC3B,KAAK,CAAe;IAEpB,kEAAkE;IAClE,OAAO,CAAS;IAChB,6EAA6E;IAC7E,sBAAsB,CAA4B;IAElD,sCAAsC;IACtC,UAAU,CAAwC;IAClD,8CAA8C;IAC9C,UAAU,CAAwC;IAClD,mCAAmC;IACnC,gBAAgB,CAA8C;IAE9D,6DAA6D;IAC7D,OAAO,CAAkB;IAEzB,YAAY,EACX,OAAO,EACP,SAAS,EACT,SAAS,EACT,eAAe,EACf,KAAK,EAAE,MAAM,GAAG,KAAK,GACK,EAAE;QAC5B,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;QAEpB,IAAI,CAAC,OAAO,GAAG,IAAI,MAAM,CAAC,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAEvF,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,gBAAgB,GAAG,eAAe,CAAC;IAAA,CACxC;IAED,mDAAmD;IACnD,IAAI,WAAW,GAAG;QACjB,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC;IAAA,CAC/C;IAED,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,IAAiB,EAAqB;QACpE,MAAM,IAAI,CAAC,sBAAsB,CAAC;QAElC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE1C,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YACnD,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,YAAY,EAAE,CAAC,CAAC;QAEvD,MAAM,eAAe,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAEzE,IAAI,eAAe,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;YACxF,OAAO,eAAe,CAAC;QACxB,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,eAAe,CAAC;QACxB,CAAC;QAED,8BAA8B;QAC9B,wBAAwB;QACxB,2CAA2C;QAC3C,2DAA2D;QAC3D,gDAAgD;QAChD,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC;QAC7C,IACC,IAAI,CAAC,MAAM,EAAE,OAAO;YACpB,CAAC,YAAY;YACb,YAAY,KAAK,YAAY;YAC7B,IAAI,CAAC,IAAI,YAAY,cAAc,EAClC,CAAC;YACF,OAAO,eAAe,CAAC;QACxB,CAAC;QAED,4DAA4D;QAC5D,MAAM,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAErC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,YAAY,EAAE,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAAA,CACxD;IAED,eAAe,GAAG;QACjB,OAAO,CAAC,IAAI,CAAC,sBAAsB,KAAK,IAAI,CAAC,oBAAoB,EAAE,CAAC,OAAO,CAC1E,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAC/C,CAAC,CAAC;IAAA,CACH;IAED,KAAK,CAAC,oBAAoB,GAAkB;QAC3C,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC;QACpC,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO;QACR,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,mCAAmC,EAAE;YAC7E,OAAO,EAAE;gBACR,aAAa,EAAE,UAAU,cAAc,CAAC,UAAU,EAAE;aACpD;SACD,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,SAAS,GACd,QAAQ,CAAC,MAAM,KAAK,GAAG;gBACvB,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc;gBACtC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,cAAc,CAAC;YAExC,IAAI,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;gBACzB,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QAED,qCAAqC;QACrC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,cAAc,CAAC,GAAG,EAAE,CAAC;YAC9C,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;YACzB,IAAI,CAAC,UAAU,EAAE,CAAC,cAAc,CAAC,CAAC;YAClC,MAAM,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,6CAA6C;QAC7C,IAAI,IAAI,CAAC,OAAO,KAAK,cAAc,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,cAAc,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,OAAQ,CAAC,CAAC;IAAA,CACjC;IAED,cAAc,CAAC,GAA0C,EAAkB;QAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAiC,CAAC;QAErD,IAAI,MAA0B,CAAC;QAC/B,IAAI,MAAM,EAAE,CAAC;YACZ,MAAM,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAED,MAAM,UAAU,GAAmB;YAClC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,cAAc,EAAE,GAAG,CAAC,cAAc;YAClC,eAAe,EAAE,GAAG,CAAC,eAAe;YACpC,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,IAAI;YAC1B,cAAc,EAAE,GAAG,CAAC,MAAM;SAC1B,CAAC;QAEF,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;QAC1B,IAAI,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,CAAC;QAEpC,OAAO,UAAU,CAAC;IAAA,CAClB;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAuB,EAA2B;QAC9D,wDAAwD;QACxD,IAAI,OAAO,CAAC,UAAU,KAAK,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,sBAAsB,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;gBACvD,MAAM,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC;QACrB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,EAAE,GAAG,CAAC,CAAC;QAExC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAkB,CAAC;QACpE,IAAI,GAAG,IAAI,YAAY,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YACjE,MAAM,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAiB,CAAC;QACjE,IAAI,WAAW,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,EAAE,CAAC;YACrC,MAAM,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,sDAAsD;QACtD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,sBAAsB,GAAG,SAAS,CAAC;QAExC,IAAI,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,CAAC;YAC5B,wCAAwC;YACxC,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC9B,CAAC;aAAM,CAAC;YACP,6DAA6D;YAC7D,MAAM,OAAO,GAAG,EAAE,CACjB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE;gBACjD,OAAO,EAAE;oBACR,aAAa,EAAE,UAAU,OAAO,CAAC,SAAS,EAAE;iBAC5C;aACD,CAAC,CACF,CAAC;YAEF,OAAO,CAAC,IAAI,CACX,CAAC,IAAI,EAAE,EAAE,CAAC;gBACT,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC;gBAC9B,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC;oBAC5C,OAAO;gBACR,CAAC;gBAED,IAAI,CAAC,cAAc,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;YAAA,CAC9C,EACD,CAAC,IAAI,EAAE,EAAE,CAAC;gBACT,eAAe;YADL,CAEV,CACD,CAAC;QACH,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,mBAAmB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC;IAAA,CACpB;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,OAAyB,EAA2B;QAC/D,oBAAoB;QACpB,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,sBAAsB,GAAG,SAAS,CAAC;QAExC,MAAM,OAAO,GAAG,MAAM,EAAE,CACvB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE;YACrD,KAAK,EAAE;gBACN,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,eAAe,EAAE,OAAO,CAAC,IAAI;gBAC7B,cAAc,EAAE,OAAO,CAAC,cAAc;aACtC;SACD,CAAC,CACF,CAAC;QAEF,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IAAA,CACpC;IAED;;OAEG;IACH,KAAK,CAAC,MAAM,GAAkB;QAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC;QACpC,IAAI,CAAC,cAAc,EAAE,CAAC;YACrB,OAAO;QACR,CAAC;QAED,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,IAAI,CAAC,sBAAsB,GAAG,SAAS,CAAC;QAExC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,kCAAkC,EAAE;gBAC3D,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE;oBACR,aAAa,EAAE,UAAU,cAAc,CAAC,UAAU,EAAE;iBACpD;aACD,CAAC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACR,qDAAqD;QACtD,CAAC;IAAA,CACD;CACD;AAcD,MAAM,sBAAsB,GAAG,KAAK,EAAE,QAAkB,EAAoB,EAAE,CAAC;IAC9E,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,kBAAkB,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACd,CAAC;IAED,2EAA2E;IAC3E,iEAAiE;IAEjE,yDAAyD;IACzD,wDAAwD;IACxD,IAAI,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,GAAG,EAAE,CAAC;QACvD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,KAAK,KAAK,cAAc,CAAC;QACtC,CAAC;IACF,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;IAEV,OAAO,KAAK,CAAC;AAAA,CACb,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AAAA,CAC1D,CAAC;AACF,MAAM,oBAAoB,GAAG,CAAC,OAAgB,EAAE,EAAE,CAAC;IAClD,OAAO,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,GAAG,CAAC,CAAC;AAAA,CACpD,CAAC"}