@azure/msal-node-extensions 1.0.0-alpha.30 → 1.0.0-alpha.31

package/dist/msal-node-extensions.cjs.development.js.map

@@ -1 +1 @@
-{"version":3,"file":"msal-node-extensions.cjs.development.js","sources":["../src/utils/Constants.ts","../src/error/PersistenceError.ts","../src/lock/CrossPlatformLock.ts","../src/persistence/PersistenceCachePlugin.ts","../src/persistence/BasePersistence.ts","../src/persistence/FilePersistence.ts","../src/Dpapi.ts","../src/persistence/DataProtectionScope.ts","../src/persistence/FilePersistenceWithDataProtection.ts","../src/persistence/KeychainPersistence.ts","../src/persistence/LibSecretPersistence.ts","../src/utils/Environment.ts","../src/persistence/PersistenceCreator.ts"],"sourcesContent":["/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nexport const Constants = {\n\n    /**\n     * An existing file was the target of an operation that required that the target not exist\n     */\n    EEXIST_ERROR: \"EEXIST\",\n\n    /**\n     * No such file or directory: Commonly raised by fs operations to indicate that a component\n     * of the specified pathname does not exist. No entity (file or directory) could be found\n     * by the given path\n     */\n    ENOENT_ERROR: \"ENOENT\",\n\n    /**\n     * Operation not permitted. An attempt was made to perform an operation that requires \n     * elevated privileges. \n     */\n    EPERM_ERROR: \"EPERM\",\n    \n    /**\n     * Default service name for using MSAL Keytar\n     */\n    DEFAULT_SERVICE_NAME: \"msal-node-extensions\",\n\n    /**\n     * Test data used to verify underlying persistence mechanism\n     */\n    PERSISTENCE_TEST_DATA: \"Dummy data to verify underlying persistence mechanism\",\n\n    /**\n     * This is the value of a the guid if the process is being ran by the root user\n     */\n    LINUX_ROOT_USER_GUID: 0,\n\n    /**\n     * List of environment variables\n     */\n    ENVIRONMENT: {\n        HOME: \"HOME\",\n        LOGNAME: \"LOGNAME\",\n        USER: \"USER\",\n        LNAME: \"LNAME\",\n        USERNAME: \"USERNAME\",\n        PLATFORM: \"platform\",\n        LOCAL_APPLICATION_DATA: \"LOCALAPPDATA\"\n    },\n\n    // Name of the default cache file\n    DEFAULT_CACHE_FILE_NAME: \"cache.json\"\n};\n\nexport enum Platform {\n    WINDOWS = \"win32\",\n    LINUX = \"linux\",\n    MACOS = \"darwin\"\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\n/**\n * Error thrown when trying to write MSAL cache to persistence.\n */\nexport class PersistenceError extends Error {\n\n    // Short string denoting error\n    errorCode: string;\n    // Detailed description of error\n    errorMessage: string;\n\n    constructor(errorCode: string, errorMessage: string) {\n        const errorString = errorMessage ? `${errorCode}: ${errorMessage}` : errorCode;\n        super(errorString);\n        Object.setPrototypeOf(this, PersistenceError.prototype);\n\n        this.errorCode = errorCode;\n        this.errorMessage = errorMessage;\n        this.name = \"PersistenceError\";\n    }\n\n    /**\n     * Error thrown when trying to access the file system.\n     */\n    static createFileSystemError(errorCode: string, errorMessage: string): PersistenceError {\n        return new PersistenceError(errorCode, errorMessage);\n    }\n\n    /**\n     * Error thrown when trying to write, load, or delete data from secret service on linux.\n     * Libsecret is used to access secret service.\n     */\n    static createLibSecretError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"GnomeKeyringError\", errorMessage);\n    }\n\n    /**\n     * Error thrown when trying to write, load, or delete data from keychain on macOs.\n     */\n    static createKeychainPersistenceError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"KeychainError\", errorMessage);\n    }\n\n    /**\n     * Error thrown when trying to encrypt or decrypt data using DPAPI on Windows.\n     */\n    static createFilePersistenceWithDPAPIError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"DPAPIEncryptedFileError\", errorMessage);\n    }\n\n    /**\n     * Error thrown when using the cross platform lock.\n     */\n    static createCrossPlatformLockError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"CrossPlatformLockError\", errorMessage);\n    }\n\n    /**\n     * Throw cache persistence error\n     * \n     * @param errorMessage string\n     * @returns PersistenceError\n     */\n    static createCachePersistenceError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"CachePersistenceError\", errorMessage);\n    }\n\n    /**\n     * Throw unsupported error\n     * \n     * @param errorMessage string\n     * @returns PersistenceError\n     */\n    static createNotSupportedError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"NotSupportedError\", errorMessage);\n    }\n\n    /**\n     * Throw persistence not verified error\n     * \n     * @param errorMessage string\n     * @returns PersistenceError\n     */\n    static createPersistenceNotVerifiedError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"PersistenceNotVerifiedError\", errorMessage);\n    }\n\n    /**\n     * Throw persistence creation validation error\n     * \n     * @param errorMessage string\n     * @returns PersistenceError\n     */\n    static createPersistenceNotValidatedError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"PersistenceNotValidatedError\", errorMessage);\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { promises as fs } from \"fs\";\nimport { pid } from \"process\";\nimport { CrossPlatformLockOptions } from \"./CrossPlatformLockOptions\";\nimport { Constants } from \"../utils/Constants\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Logger } from \"@azure/msal-common\";\n\n/**\n * Cross-process lock that works on all platforms.\n */\nexport class CrossPlatformLock {\n\n    private readonly lockFilePath: string;\n    private lockFileHandle: fs.FileHandle;\n    private readonly retryNumber: number;\n    private readonly retryDelay: number;\n\n    private logger: Logger;\n\n    constructor(lockFilePath: string, logger: Logger, lockOptions?: CrossPlatformLockOptions) {\n        this.lockFilePath = lockFilePath;\n        this.retryNumber = lockOptions ? lockOptions.retryNumber : 500;\n        this.retryDelay = lockOptions ? lockOptions.retryDelay : 100;\n        this.logger = logger;\n    }\n\n    /**\n     * Locks cache from read or writes by creating file with same path and name as\n     * cache file but with .lockfile extension. If another process has already created\n     * the lockfile, will back off and retry based on configuration settings set by CrossPlatformLockOptions\n     */\n    public async lock(): Promise<void> {\n        for (let tryCount = 0; tryCount < this.retryNumber; tryCount++) {\n            try {\n                this.logger.info(`Pid ${pid} trying to acquire lock`);\n                this.lockFileHandle = await fs.open(this.lockFilePath, \"wx+\");\n\n                this.logger.info(`Pid ${pid} acquired lock`);\n                await this.lockFileHandle.write(pid.toString());\n                return;\n            } catch (err) {\n                if (err.code === Constants.EEXIST_ERROR || err.code === Constants.EPERM_ERROR) {\n                    this.logger.info(err);\n                    await this.sleep(this.retryDelay);\n                } else {\n                    this.logger.error(`${pid} was not able to acquire lock. Ran into error: ${err.message}`);\n                    throw PersistenceError.createCrossPlatformLockError(err.message);\n                }\n            }\n        }\n        this.logger.error(`${pid} was not able to acquire lock. Exceeded amount of retries set in the options`);\n        throw PersistenceError.createCrossPlatformLockError(\n            \"Not able to acquire lock. Exceeded amount of retries set in options\");\n    }\n\n    /**\n     * unlocks cache file by deleting .lockfile.\n     */\n    public async unlock(): Promise<void> {\n        try {\n            if(this.lockFileHandle){\n                // if we have a file handle to the .lockfile, delete lock file\n                await fs.unlink(this.lockFilePath);\n                await this.lockFileHandle.close();\n                this.logger.info(\"lockfile deleted\");\n            } else {\n                this.logger.warning(\"lockfile handle does not exist, so lockfile could not be deleted\");\n            }\n        } catch (err) {\n            if (err.code === Constants.ENOENT_ERROR) {\n                this.logger.info(\"Tried to unlock but lockfile does not exist\");\n            } else {\n                this.logger.error(`${pid} was not able to release lock. Ran into error: ${err.message}`);\n                throw PersistenceError.createCrossPlatformLockError(err.message);\n            }\n        }\n    }\n\n    private sleep(ms): Promise<void> {\n        return new Promise((resolve) => {\n            setTimeout(resolve, ms);\n        });\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { IPersistence } from \"./IPersistence\";\nimport { CrossPlatformLock } from \"../lock/CrossPlatformLock\";\nimport { CrossPlatformLockOptions } from \"../lock/CrossPlatformLockOptions\";\nimport { pid } from \"process\";\nimport { TokenCacheContext, ICachePlugin, Logger } from \"@azure/msal-common\";\n\n/**\n * MSAL cache plugin which enables callers to write the MSAL cache to disk on Windows,\n * macOs, and Linux.\n *\n * - Persistence can be one of:\n * - FilePersistence: Writes and reads from an unencrypted file. Can be used on Windows,\n * macOs, or Linux.\n * - FilePersistenceWithDataProtection: Used on Windows, writes and reads from file encrypted\n * with windows dpapi-addon.\n * - KeychainPersistence: Used on macOs, writes and reads from keychain.\n * - LibSecretPersistence: Used on linux, writes and reads from secret service API. Requires\n * libsecret be installed.\n */\nexport class PersistenceCachePlugin implements ICachePlugin {\n\n    public persistence: IPersistence;\n    public lastSync: number;\n    public currentCache: string;\n    public lockFilePath: string;\n\n    private crossPlatformLock: CrossPlatformLock;\n\n    private logger: Logger;\n\n    constructor(persistence: IPersistence, lockOptions?: CrossPlatformLockOptions) {\n        this.persistence = persistence;\n\n        // initialize logger\n        this.logger = persistence.getLogger();\n\n        // create file lock\n        this.lockFilePath = `${this.persistence.getFilePath()}.lockfile`;\n        this.crossPlatformLock = new CrossPlatformLock(this.lockFilePath, this.logger, lockOptions);\n\n        // initialize default values\n        this.lastSync = 0;\n        this.currentCache = null;\n    }\n\n    /**\n     * Reads from storage and saves an in-memory copy. If persistence has not been updated\n     * since last time data was read, in memory copy is used.\n     *\n     * If cacheContext.cacheHasChanged === true, then file lock is created and not deleted until\n     * afterCacheAccess() is called, to prevent the cache file from changing in between\n     * beforeCacheAccess() and afterCacheAccess().\n     */\n    public async beforeCacheAccess(cacheContext: TokenCacheContext): Promise<void> {\n        this.logger.info(\"Executing before cache access\");\n        const reloadNecessary = await this.persistence.reloadNecessary(this.lastSync);\n        if (!reloadNecessary && this.currentCache !== null) {\n            if (cacheContext.cacheHasChanged) {\n                this.logger.verbose(\"Cache context has changed\");\n                await this.crossPlatformLock.lock();\n            }\n            return;\n        }\n        try {\n            this.logger.info(`Reload necessary. Last sync time: ${this.lastSync}`);\n            await this.crossPlatformLock.lock();\n\n            this.currentCache = await this.persistence.load();\n            this.lastSync = new Date().getTime();\n            cacheContext.tokenCache.deserialize(this.currentCache);\n\n            this.logger.info(`Last sync time updated to: ${this.lastSync}`);\n        } finally {\n            if (!cacheContext.cacheHasChanged) {\n                await this.crossPlatformLock.unlock();\n                this.logger.info(`Pid ${pid} released lock`);\n            } else {\n                this.logger.info(`Pid ${pid} beforeCacheAccess did not release lock`);\n            }\n        }\n    }\n\n    /**\n     * Writes to storage if MSAL in memory copy of cache has been changed.\n     */\n    public async afterCacheAccess(cacheContext: TokenCacheContext): Promise<void> {\n        this.logger.info(\"Executing after cache access\");\n        try {\n            if (cacheContext.cacheHasChanged) {\n                this.logger.info(\"Msal in-memory cache has changed. Writing changes to persistence\");\n                this.currentCache = cacheContext.tokenCache.serialize();\n                await this.persistence.save(this.currentCache);\n            } else {\n                this.logger.info(\"Msal in-memory cache has not changed. Did not write to persistence\");\n            }\n        } finally {\n            await this.crossPlatformLock.unlock();\n            this.logger.info(`Pid ${pid} afterCacheAccess released lock`);\n        }\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Constants } from \"../utils/Constants\";\nimport { IPersistence } from \"./IPersistence\";\n\nexport abstract class BasePersistence {\n    public abstract createForPersistenceValidation(): Promise<IPersistence>; \n\n    public async verifyPersistence(): Promise<boolean> {\n        // We are using a different location for the test to avoid overriding the functional cache\n        const persistenceValidator = await this.createForPersistenceValidation();\n\n        try {\n            await persistenceValidator.save(Constants.PERSISTENCE_TEST_DATA);\n\n            const retrievedDummyData = await persistenceValidator.load();\n\n            if (!retrievedDummyData) {\n                throw PersistenceError.createCachePersistenceError(\n                    \"Persistence check failed. Data was written but it could not be read. \" +\n                    \"Possible cause: on Linux, LibSecret is installed but D-Bus isn't running \\\n                    because it cannot be started over SSH.\"\n                );\n            }\n\n            if (retrievedDummyData !== Constants.PERSISTENCE_TEST_DATA) {\n                throw PersistenceError.createCachePersistenceError(\n                    `Persistence check failed. Data written ${Constants.PERSISTENCE_TEST_DATA} is different \\\n                    from data read ${retrievedDummyData}`\n                );\n            }\n            await persistenceValidator.delete();\n            return true;\n        } catch (e) {\n            throw PersistenceError.createCachePersistenceError(`Verifing persistence failed with the error: ${e}`);\n        }\n    }\n\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { promises as fs } from \"fs\";\nimport { dirname } from \"path\";\nimport { IPersistence } from \"./IPersistence\";\nimport { Constants } from \"../utils/Constants\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Logger, LoggerOptions, LogLevel } from \"@azure/msal-common\";\nimport { BasePersistence } from \"./BasePersistence\";\n\n/**\n * Reads and writes data to file specified by file location. File contents are not\n * encrypted.\n *\n * If file or directory has not been created, it FilePersistence.create() will create\n * file and any directories in the path recursively.\n */\nexport class FilePersistence extends BasePersistence implements IPersistence {\n\n    private filePath: string;\n    private logger: Logger;\n\n    public static async create(fileLocation: string, loggerOptions?: LoggerOptions): Promise<FilePersistence> {\n        const filePersistence = new FilePersistence();\n        filePersistence.filePath = fileLocation;\n        filePersistence.logger = new Logger(loggerOptions || FilePersistence.createDefaultLoggerOptions());\n        await filePersistence.createCacheFile();\n        return filePersistence;\n    }\n\n    public async save(contents: string): Promise<void> {\n        try {\n            await fs.writeFile(this.getFilePath(), contents, \"utf-8\");\n        } catch (err) {\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    public async saveBuffer(contents: Uint8Array): Promise<void> {\n        try {\n            await fs.writeFile(this.getFilePath(), contents);\n        } catch (err) {\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    public async load(): Promise<string | null> {\n        try {\n            return await fs.readFile(this.getFilePath(), \"utf-8\");\n        } catch (err) {\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    public async loadBuffer(): Promise<Uint8Array> {\n        try {\n            return await fs.readFile(this.getFilePath());\n        } catch (err) {\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    public async delete(): Promise<boolean> {\n        try {\n            await fs.unlink(this.getFilePath());\n            return true;\n        } catch (err) {\n            if (err.code === Constants.ENOENT_ERROR) {\n                // file does not exist, so it was not deleted\n                this.logger.warning(\"Cache file does not exist, so it could not be deleted\");\n                return false;\n            }\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    public getFilePath(): string {\n        return this.filePath;\n    }\n\n    public async reloadNecessary(lastSync: number): Promise<boolean> {\n        return lastSync < await this.timeLastModified();\n    }\n\n    public getLogger(): Logger {\n        return this.logger;\n    }\n\n    public createForPersistenceValidation(): Promise<FilePersistence> {\n        const testCacheFileLocation = `${dirname(this.filePath)}/test.cache`;\n        return FilePersistence.create(testCacheFileLocation);\n    }\n\n    private static createDefaultLoggerOptions(): LoggerOptions {\n        return {\n            loggerCallback: () => {\n                // allow users to not set loggerCallback\n            },\n            piiLoggingEnabled: false,\n            logLevel: LogLevel.Info\n        };\n    }\n\n    private async timeLastModified(): Promise<number> {\n        try {\n            const stats = await fs.stat(this.filePath);\n            return stats.mtime.getTime();\n        } catch (err) {\n            if (err.code === Constants.ENOENT_ERROR) {\n                // file does not exist, so it's never been modified\n                this.logger.verbose(\"Cache file does not exist\");\n                return 0;\n            }\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    private async createCacheFile(): Promise<void> {\n        await this.createFileDirectory();\n        // File is created only if it does not exist\n        const fileHandle = await fs.open(this.filePath, \"a\");\n        await fileHandle.close();\n        this.logger.info(`File created at ${this.filePath}`);\n    }\n\n    private async createFileDirectory(): Promise<void> {\n        try {\n            await fs.mkdir(dirname(this.filePath), {recursive: true});\n        } catch (err) {\n            if (err.code === Constants.EEXIST_ERROR) {\n                this.logger.info(`Directory ${dirname(this.filePath)}  already exists`);\n            } else {\n                throw PersistenceError.createFileSystemError(err.code, err.message);\n            }\n        }\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nexport interface DpapiBindings{\n    protectData(dataToEncrypt: Uint8Array, optionalEntropy: Uint8Array, scope: string): Uint8Array\n    unprotectData(encryptData: Uint8Array, optionalEntropy: Uint8Array, scope: string): Uint8Array\n}\n/* eslint-disable-next-line @typescript-eslint/no-var-requires, no-var, import/no-commonjs */\nexport var Dpapi: DpapiBindings = require(\"../build/Release/dpapi.node\");\nexport default Dpapi;\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\n/**\n * Specifies the scope of the data protection - either the current user or the local\n * machine.\n *\n * You do not need a key to protect or unprotect the data.\n * If you set the Scope to CurrentUser, only applications running on your credentials can\n * unprotect the data; however, that means that any application running on your credentials\n * can access the protected data. If you set the Scope to LocalMachine, any full-trust\n * application on the computer can unprotect, access, and modify the data.\n *\n */\nexport enum DataProtectionScope {\n    CurrentUser = \"CurrentUser\",\n    LocalMachine = \"LocalMachine\",\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { IPersistence } from \"./IPersistence\";\nimport { FilePersistence } from \"./FilePersistence\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Dpapi } from \"../Dpapi\";\nimport { DataProtectionScope } from \"./DataProtectionScope\";\nimport { Logger, LoggerOptions } from \"@azure/msal-common\";\nimport { dirname } from \"path\";\nimport { BasePersistence } from \"./BasePersistence\";\n\n/**\n * Uses CryptProtectData and CryptUnprotectData on Windows to encrypt and decrypt file contents.\n *\n * scope: Scope of the data protection. Either local user or the current machine\n * optionalEntropy: Password or other additional entropy used to encrypt the data\n */\nexport class FilePersistenceWithDataProtection extends BasePersistence implements IPersistence {\n\n    private filePersistence: FilePersistence;\n    private scope: DataProtectionScope;\n    private optionalEntropy: Uint8Array;\n\n    private constructor(scope: DataProtectionScope, optionalEntropy?: string) {\n        super();\n        this.scope = scope;\n        this.optionalEntropy = optionalEntropy ? Buffer.from(optionalEntropy, \"utf-8\") : null;\n    }\n\n    public static async create(\n        fileLocation: string,\n        scope: DataProtectionScope,\n        optionalEntropy?: string,\n        loggerOptions?: LoggerOptions): Promise<FilePersistenceWithDataProtection> {\n\n        const persistence = new FilePersistenceWithDataProtection(scope, optionalEntropy);\n        persistence.filePersistence = await FilePersistence.create(fileLocation, loggerOptions);\n        return persistence;\n    }\n\n    public async save(contents: string): Promise<void> {\n        try {\n            const encryptedContents = Dpapi.protectData(\n                Buffer.from(contents, \"utf-8\"),\n                this.optionalEntropy,\n                this.scope.toString());\n            await this.filePersistence.saveBuffer(encryptedContents);\n        } catch (err) {\n            throw PersistenceError.createFilePersistenceWithDPAPIError(err.message);\n        }\n    }\n\n    public async load(): Promise<string | null> {\n        try {\n            const encryptedContents = await this.filePersistence.loadBuffer();\n            if (typeof encryptedContents === \"undefined\" || !encryptedContents || 0 === encryptedContents.length) {\n                this.filePersistence.getLogger().info(\"Encrypted contents loaded from file were null or empty\");\n                return null;\n            }\n            return Dpapi.unprotectData(\n                encryptedContents,\n                this.optionalEntropy,\n                this.scope.toString()).toString();\n        } catch (err) {\n            throw PersistenceError.createFilePersistenceWithDPAPIError(err.message);\n        }\n    }\n\n    public async delete(): Promise<boolean> {\n        return this.filePersistence.delete();\n    }\n\n    public async reloadNecessary(lastSync: number): Promise<boolean> {\n        return this.filePersistence.reloadNecessary(lastSync);\n    }\n\n    public getFilePath(): string {\n        return this.filePersistence.getFilePath();\n    }\n\n    public getLogger(): Logger {\n        return this.filePersistence.getLogger();\n    }\n\n    public createForPersistenceValidation(): Promise<FilePersistenceWithDataProtection> {\n        const testCacheFileLocation = `${dirname(this.filePersistence.getFilePath())}/test.cache`;\n        return FilePersistenceWithDataProtection.create(testCacheFileLocation, DataProtectionScope.CurrentUser);\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { setPassword, getPassword, deletePassword } from \"keytar\";\nimport { FilePersistence } from \"./FilePersistence\";\nimport { IPersistence } from \"./IPersistence\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Logger, LoggerOptions } from \"@azure/msal-common\";\nimport { dirname } from \"path\";\nimport { BasePersistence } from \"./BasePersistence\";\n\n/**\n * Uses reads and writes passwords to macOS keychain\n *\n * serviceName: Identifier used as key for whatever value is stored\n * accountName: Account under which password should be stored\n */\nexport class KeychainPersistence extends BasePersistence implements IPersistence {\n\n    protected readonly serviceName;\n    protected readonly accountName;\n    private filePersistence: FilePersistence;\n\n    private constructor(serviceName: string, accountName: string) {\n        super();\n        this.serviceName = serviceName;\n        this.accountName = accountName;\n    }\n\n    public static async create(\n        fileLocation: string,\n        serviceName: string,\n        accountName: string,\n        loggerOptions?: LoggerOptions): Promise<KeychainPersistence> {\n\n        const persistence = new KeychainPersistence(serviceName, accountName);\n        persistence.filePersistence = await FilePersistence.create(fileLocation, loggerOptions);\n        return persistence;\n    }\n\n    public async save(contents: string): Promise<void> {\n        try {\n            await setPassword(this.serviceName, this.accountName, contents);\n        } catch (err) {\n            throw PersistenceError.createKeychainPersistenceError(err.message);\n        }\n        // Write dummy data to update file mtime\n        await this.filePersistence.save(\"{}\");\n    }\n\n    public async load(): Promise<string | null> {\n        try{\n            return await getPassword(this.serviceName, this.accountName);\n        } catch(err){\n            throw PersistenceError.createKeychainPersistenceError(err.message);\n        }\n    }\n\n    public async delete(): Promise<boolean> {\n        try {\n            await this.filePersistence.delete();\n            return await deletePassword(this.serviceName, this.accountName);\n        } catch (err) {\n            throw PersistenceError.createKeychainPersistenceError(err.message);\n        }\n    }\n\n    public async reloadNecessary(lastSync: number): Promise<boolean> {\n        return this.filePersistence.reloadNecessary(lastSync);\n    }\n\n    public getFilePath(): string {\n        return this.filePersistence.getFilePath();\n    }\n\n    public getLogger(): Logger {\n        return this.filePersistence.getLogger();\n    }\n   \n    public createForPersistenceValidation(): Promise<KeychainPersistence> {\n        const testCacheFileLocation = `${dirname(this.filePersistence.getFilePath())}/test.cache`;\n        return KeychainPersistence.create(\n            testCacheFileLocation, \n            \"persistenceValidationServiceName\", \"persistencValidationAccountName\"\n        );\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { setPassword, getPassword, deletePassword } from \"keytar\";\nimport { FilePersistence } from \"./FilePersistence\";\nimport { IPersistence } from \"./IPersistence\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Logger, LoggerOptions } from \"@azure/msal-common\";\nimport { dirname } from \"path\";\nimport { BasePersistence } from \"./BasePersistence\";\n\n/**\n * Uses reads and writes passwords to Secret Service API/libsecret. Requires libsecret\n * to be installed.\n *\n * serviceName: Identifier used as key for whatever value is stored\n * accountName: Account under which password should be stored\n */\nexport class LibSecretPersistence extends BasePersistence implements IPersistence {\n\n    protected readonly serviceName;\n    protected readonly accountName;\n    private filePersistence: FilePersistence;\n\n    private constructor(serviceName: string, accountName: string) {\n        super();\n        this.serviceName = serviceName;\n        this.accountName = accountName;\n    }\n\n    public static async create(\n        fileLocation: string,\n        serviceName: string,\n        accountName: string,\n        loggerOptions?: LoggerOptions): Promise<LibSecretPersistence> {\n\n        const persistence = new LibSecretPersistence(serviceName, accountName);\n        persistence.filePersistence = await FilePersistence.create(fileLocation, loggerOptions);\n        return persistence;\n    }\n\n    public async save(contents: string): Promise<void> {\n        try {\n            await setPassword(this.serviceName, this.accountName, contents);\n        } catch (err) {\n            throw PersistenceError.createLibSecretError(err.message);\n        }\n        // Write dummy data to update file mtime\n        await this.filePersistence.save(\"{}\");\n    }\n\n    public async load(): Promise<string | null> {\n        try {\n            return await getPassword(this.serviceName, this.accountName);\n        } catch (err) {\n            throw PersistenceError.createLibSecretError(err.message);\n        }\n    }\n\n    public async delete(): Promise<boolean> {\n        try {\n            await this.filePersistence.delete();\n            return await deletePassword(this.serviceName, this.accountName);\n        } catch (err) {\n            throw PersistenceError.createLibSecretError(err.message);\n        }\n    }\n\n    public async reloadNecessary(lastSync: number): Promise<boolean> {\n        return this.filePersistence.reloadNecessary(lastSync);\n    }\n\n    public getFilePath(): string {\n        return this.filePersistence.getFilePath();\n    }\n\n    public getLogger(): Logger {\n        return this.filePersistence.getLogger();\n    }\n      \n    public createForPersistenceValidation(): Promise<LibSecretPersistence> {\n        const testCacheFileLocation = `${dirname(this.filePersistence.getFilePath())}/test.cache`;\n        return LibSecretPersistence.create(\n            testCacheFileLocation, \n            \"persistenceValidationServiceName\", \"persistencValidationAccountName\"\n        );\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport path from \"path\";\nimport { Constants, Platform } from \"./Constants\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { StringUtils } from \"@azure/msal-common\";\n\nexport class Environment {\n    static get homeEnvVar(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.HOME);\n    }\n    \n    static get lognameEnvVar(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LOGNAME);\n    }\n\n    static get userEnvVar(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.USER);\n    }\n\n    static get lnameEnvVar(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LNAME);\n    }\n\n    static get usernameEnvVar(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.USERNAME);\n    }\n\n    static getEnvironmentVariable(name: string): string {\n        return process.env[name];\n    }\n\n    static getEnvironmentPlatform(): string {\n        return process.platform;\n    }\n\n    static isWindowsPlatform(): boolean {\n        return this.getEnvironmentPlatform() === Platform.WINDOWS;\n    }\n\n    static isLinuxPlatform(): boolean {\n        return this.getEnvironmentPlatform() === Platform.LINUX;\n    }\n\n    static isMacPlatform(): boolean {\n        return this.getEnvironmentPlatform() === Platform.MACOS;\n    }\n\n    static isLinuxRootUser(): boolean {\n        return process.getuid() === Constants.LINUX_ROOT_USER_GUID;\n    }\n\n    static getUserRootDirectory(): string {\n        return !this.isWindowsPlatform ?\n            this.getUserHomeDirOnUnix() :\n            this.getUserHomeDirOnWindows();\n    }\n\n    static getUserHomeDirOnWindows(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LOCAL_APPLICATION_DATA);\n    }\n\n    static getUserHomeDirOnUnix(): string | null {\n        if (this.isWindowsPlatform()) {\n            throw PersistenceError.createNotSupportedError(\n                \"Getting the user home directory for unix is not supported in windows\");\n        }\n\n        if (!StringUtils.isEmpty(this.homeEnvVar)) {\n            return this.homeEnvVar;\n        }\n\n        let username = null;\n        if (!StringUtils.isEmpty(this.lognameEnvVar)) {\n            username = this.lognameEnvVar;\n        } else if (!StringUtils.isEmpty(this.userEnvVar)) {\n            username = this.userEnvVar;\n        } else if (!StringUtils.isEmpty(this.lnameEnvVar)) {\n            username = this.lnameEnvVar;\n        } else if (!StringUtils.isEmpty(this.usernameEnvVar)) {\n            username = this.usernameEnvVar;\n        }\n\n        if (this.isMacPlatform()) {\n            return !StringUtils.isEmpty(username) ? path.join(\"/Users\", username) : null;\n        } else if (this.isLinuxPlatform()) {\n            if (this.isLinuxRootUser()) {\n                return \"/root\";\n            } else {\n                return !StringUtils.isEmpty(username) ? path.join(\"/home\", username) : null;\n            }\n        } else {\n            throw PersistenceError.createNotSupportedError(\n                \"Getting the user home directory for unix is not supported in windows\");\n        }\n\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { FilePersistenceWithDataProtection } from \"./FilePersistenceWithDataProtection\";\nimport { LibSecretPersistence } from \"./LibSecretPersistence\";\nimport { KeychainPersistence } from \"./KeychainPersistence\";\nimport { DataProtectionScope } from \"./DataProtectionScope\";\nimport { Environment } from \"../utils/Environment\";\nimport { IPersistence } from \"./IPersistence\";\nimport { FilePersistence } from \"./FilePersistence\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { IPersistenceConfiguration } from \"./IPersistenceConfiguration\";\n\nexport class PersistenceCreator {\n    static async createPersistence(config: IPersistenceConfiguration): Promise<IPersistence> {\n        let peristence: IPersistence;\n\n        // On Windows, uses a DPAPI encrypted file\n        if (Environment.isWindowsPlatform()) {\n            if (!config.cachePath || !config.dataProtectionScope) {\n                throw PersistenceError.createPersistenceNotValidatedError(\n                    \"Cache path and/or data protection scope not provided for the FilePersistenceWithDataProtection cache plugin\");\n            }\n\n            peristence = await FilePersistenceWithDataProtection.create(config.cachePath, DataProtectionScope.CurrentUser, undefined, config.loggerOptions);\n        }\n\n        // On Mac, uses keychain.\n        else if (Environment.isMacPlatform()) {\n            if (!config.cachePath || !config.serviceName || !config.accountName) {\n                throw PersistenceError.createPersistenceNotValidatedError(\n                    \"Cache path, service name and/or account name not provided for the KeychainPersistence cache plugin\");\n            }\n\n            peristence = await KeychainPersistence.create(config.cachePath, config.serviceName, config.accountName, config.loggerOptions);\n        }\n\n        // On Linux, uses  libsecret to store to secret service. Libsecret has to be installed.\n        else if (Environment.isLinuxPlatform()) {\n            if (!config.cachePath || !config.serviceName || !config.accountName) {\n                throw PersistenceError.createPersistenceNotValidatedError(\n                    \"Cache path, service name and/or account name not provided for the LibSecretPersistence cache plugin\");\n            }\n\n            peristence = await LibSecretPersistence.create(config.cachePath, config.serviceName, config.accountName, config.loggerOptions);\n        }\n\n        else {\n            throw PersistenceError.createNotSupportedError(\n                \"The current environment is not supported by msal-node-extensions yet.\");\n        }\n\n        // Initially suppress the error thrown during persistence verification to allow us to fallback to plain text\n        const isPersistenceVerified = await peristence.verifyPersistence().catch(() => false);\n\n        if (!isPersistenceVerified) {\n            if (Environment.isLinuxPlatform() && config.usePlaintextFileOnLinux) {\n                if (!config.cachePath) {\n                    throw PersistenceError.createPersistenceNotValidatedError(\n                        \"Cache path not provided for the FilePersistence cache plugin\");\n                }\n\n                peristence = await FilePersistence.create(config.cachePath, config.loggerOptions);\n\n                const isFilePersistenceVerified = await peristence.verifyPersistence();\n                if (isFilePersistenceVerified) {\n                    return peristence;\n                }\n            }\n\n            throw PersistenceError.createPersistenceNotVerifiedError(\"Persistence could not be verified\");\n        }\n\n        return peristence;\n    }\n}\n"],"names":["Constants","EEXIST_ERROR","ENOENT_ERROR","EPERM_ERROR","DEFAULT_SERVICE_NAME","PERSISTENCE_TEST_DATA","LINUX_ROOT_USER_GUID","ENVIRONMENT","HOME","LOGNAME","USER","LNAME","USERNAME","PLATFORM","LOCAL_APPLICATION_DATA","DEFAULT_CACHE_FILE_NAME","Platform","PersistenceError","Error","constructor","errorCode","errorMessage","errorString","Object","setPrototypeOf","prototype","name","createFileSystemError","createLibSecretError","createKeychainPersistenceError","createFilePersistenceWithDPAPIError","createCrossPlatformLockError","createCachePersistenceError","createNotSupportedError","createPersistenceNotVerifiedError","createPersistenceNotValidatedError","CrossPlatformLock","lockFilePath","logger","lockOptions","retryNumber","retryDelay","lock","tryCount","info","pid","lockFileHandle","fs","open","write","toString","err","code","sleep","error","message","unlock","unlink","close","warning","ms","Promise","resolve","setTimeout","PersistenceCachePlugin","persistence","getLogger","getFilePath","crossPlatformLock","lastSync","currentCache","beforeCacheAccess","cacheContext","reloadNecessary","cacheHasChanged","verbose","load","Date","getTime","tokenCache","deserialize","afterCacheAccess","serialize","save","BasePersistence","verifyPersistence","persistenceValidator","createForPersistenceValidation","retrievedDummyData","delete","e","FilePersistence","create","fileLocation","loggerOptions","filePersistence","filePath","Logger","createDefaultLoggerOptions","createCacheFile","contents","writeFile","saveBuffer","readFile","loadBuffer","timeLastModified","testCacheFileLocation","dirname","loggerCallback","piiLoggingEnabled","logLevel","LogLevel","Info","stats","stat","mtime","createFileDirectory","fileHandle","mkdir","recursive","Dpapi","require","DataProtectionScope","FilePersistenceWithDataProtection","scope","optionalEntropy","Buffer","from","encryptedContents","protectData","length","unprotectData","CurrentUser","KeychainPersistence","serviceName","accountName","setPassword","getPassword","deletePassword","LibSecretPersistence","Environment","homeEnvVar","getEnvironmentVariable","lognameEnvVar","userEnvVar","lnameEnvVar","usernameEnvVar","process","env","getEnvironmentPlatform","platform","isWindowsPlatform","WINDOWS","isLinuxPlatform","LINUX","isMacPlatform","MACOS","isLinuxRootUser","getuid","getUserRootDirectory","getUserHomeDirOnUnix","getUserHomeDirOnWindows","StringUtils","isEmpty","username","path","join","PersistenceCreator","createPersistence","config","peristence","cachePath","dataProtectionScope","undefined","isPersistenceVerified","catch","usePlaintextFileOnLinux","isFilePersistenceVerified"],"mappings":";;;;;;;;;;;;;AAAA;;;;AAKO,MAAMA,SAAS,GAAG;AAErB;;;AAGAC,EAAAA,YAAY,EAAE,QALO;;AAOrB;;;;;AAKAC,EAAAA,YAAY,EAAE,QAZO;;AAcrB;;;;AAIAC,EAAAA,WAAW,EAAE,OAlBQ;;AAoBrB;;;AAGAC,EAAAA,oBAAoB,EAAE,sBAvBD;;AAyBrB;;;AAGAC,EAAAA,qBAAqB,EAAE,uDA5BF;;AA8BrB;;;AAGAC,EAAAA,oBAAoB,EAAE,CAjCD;;AAmCrB;;;AAGAC,EAAAA,WAAW,EAAE;AACTC,IAAAA,IAAI,EAAE,MADG;AAETC,IAAAA,OAAO,EAAE,SAFA;AAGTC,IAAAA,IAAI,EAAE,MAHG;AAITC,IAAAA,KAAK,EAAE,OAJE;AAKTC,IAAAA,QAAQ,EAAE,UALD;AAMTC,IAAAA,QAAQ,EAAE,UAND;AAOTC,IAAAA,sBAAsB,EAAE;AAPf,GAtCQ;AAgDrB;AACAC,EAAAA,uBAAuB,EAAE;AAjDJ,CAAlB;AAoDP,IAAYC,QAAZ;;AAAA,WAAYA;AACRA,EAAAA,mBAAA,UAAA;AACAA,EAAAA,iBAAA,UAAA;AACAA,EAAAA,iBAAA,WAAA;AACH,CAJD,EAAYA,QAAQ,KAARA,QAAQ,KAAA,CAApB;;ACzDA;;;;;AAKA;;;AAGA,MAAaC,yBAAyBC;AAOlCC,EAAAA,YAAYC,WAAmBC;AAC3B,UAAMC,WAAW,GAAGD,YAAY,MAAMD,cAAcC,cAApB,GAAqCD,SAArE;AACA,UAAME,WAAN;AACAC,IAAAA,MAAM,CAACC,cAAP,CAAsB,IAAtB,EAA4BP,gBAAgB,CAACQ,SAA7C;AAEA,SAAKL,SAAL,GAAiBA,SAAjB;AACA,SAAKC,YAAL,GAAoBA,YAApB;AACA,SAAKK,IAAL,GAAY,kBAAZ;AACH;AAED;;;;;AAG4B,SAArBC,qBAAqB,CAACP,SAAD,EAAoBC,YAApB;AACxB,WAAO,IAAIJ,gBAAJ,CAAqBG,SAArB,EAAgCC,YAAhC,CAAP;AACH;AAED;;;;;;AAI2B,SAApBO,oBAAoB,CAACP,YAAD;AACvB,WAAO,IAAIJ,gBAAJ,CAAqB,mBAArB,EAA0CI,YAA1C,CAAP;AACH;AAED;;;;;AAGqC,SAA9BQ,8BAA8B,CAACR,YAAD;AACjC,WAAO,IAAIJ,gBAAJ,CAAqB,eAArB,EAAsCI,YAAtC,CAAP;AACH;AAED;;;;;AAG0C,SAAnCS,mCAAmC,CAACT,YAAD;AACtC,WAAO,IAAIJ,gBAAJ,CAAqB,yBAArB,EAAgDI,YAAhD,CAAP;AACH;AAED;;;;;AAGmC,SAA5BU,4BAA4B,CAACV,YAAD;AAC/B,WAAO,IAAIJ,gBAAJ,CAAqB,wBAArB,EAA+CI,YAA/C,CAAP;AACH;AAED;;;;;;;;AAMkC,SAA3BW,2BAA2B,CAACX,YAAD;AAC9B,WAAO,IAAIJ,gBAAJ,CAAqB,uBAArB,EAA8CI,YAA9C,CAAP;AACH;AAED;;;;;;;;AAM8B,SAAvBY,uBAAuB,CAACZ,YAAD;AAC1B,WAAO,IAAIJ,gBAAJ,CAAqB,mBAArB,EAA0CI,YAA1C,CAAP;AACH;AAED;;;;;;;;AAMwC,SAAjCa,iCAAiC,CAACb,YAAD;AACpC,WAAO,IAAIJ,gBAAJ,CAAqB,6BAArB,EAAoDI,YAApD,CAAP;AACH;AAED;;;;;;;;AAMyC,SAAlCc,kCAAkC,CAACd,YAAD;AACrC,WAAO,IAAIJ,gBAAJ,CAAqB,8BAArB,EAAqDI,YAArD,CAAP;AACH;;;;ACnGL;;;;AAKA,AAOA;;;;AAGA,MAAae;AASTjB,EAAAA,YAAYkB,cAAsBC,QAAgBC;AAC9C,SAAKF,YAAL,GAAoBA,YAApB;AACA,SAAKG,WAAL,GAAmBD,WAAW,GAAGA,WAAW,CAACC,WAAf,GAA6B,GAA3D;AACA,SAAKC,UAAL,GAAkBF,WAAW,GAAGA,WAAW,CAACE,UAAf,GAA4B,GAAzD;AACA,SAAKH,MAAL,GAAcA,MAAd;AACH;AAED;;;;;;;AAKiB,QAAJI,IAAI;AACb,SAAK,IAAIC,QAAQ,GAAG,CAApB,EAAuBA,QAAQ,GAAG,KAAKH,WAAvC,EAAoDG,QAAQ,EAA5D,EAAgE;AAC5D,UAAI;AACA,aAAKL,MAAL,CAAYM,IAAZ,QAAwBC,sCAAxB;AACA,aAAKC,cAAL,GAAsB,MAAMC,WAAE,CAACC,IAAH,CAAQ,KAAKX,YAAb,EAA2B,KAA3B,CAA5B;AAEA,aAAKC,MAAL,CAAYM,IAAZ,QAAwBC,6BAAxB;AACA,cAAM,KAAKC,cAAL,CAAoBG,KAApB,CAA0BJ,aAAG,CAACK,QAAJ,EAA1B,CAAN;AACA;AACH,OAPD,CAOE,OAAOC,GAAP,EAAY;AACV,YAAIA,GAAG,CAACC,IAAJ,KAAapD,SAAS,CAACC,YAAvB,IAAuCkD,GAAG,CAACC,IAAJ,KAAapD,SAAS,CAACG,WAAlE,EAA+E;AAC3E,eAAKmC,MAAL,CAAYM,IAAZ,CAAiBO,GAAjB;AACA,gBAAM,KAAKE,KAAL,CAAW,KAAKZ,UAAhB,CAAN;AACH,SAHD,MAGO;AACH,eAAKH,MAAL,CAAYgB,KAAZ,IAAqBT,+DAAqDM,GAAG,CAACI,SAA9E;AACA,gBAAMtC,gBAAgB,CAACc,4BAAjB,CAA8CoB,GAAG,CAACI,OAAlD,CAAN;AACH;AACJ;AACJ;;AACD,SAAKjB,MAAL,CAAYgB,KAAZ,IAAqBT,2FAArB;AACA,UAAM5B,gBAAgB,CAACc,4BAAjB,CACF,qEADE,CAAN;AAEH;AAED;;;;;AAGmB,QAANyB,MAAM;AACf,QAAI;AACA,UAAG,KAAKV,cAAR,EAAuB;AACnB;AACA,cAAMC,WAAE,CAACU,MAAH,CAAU,KAAKpB,YAAf,CAAN;AACA,cAAM,KAAKS,cAAL,CAAoBY,KAApB,EAAN;AACA,aAAKpB,MAAL,CAAYM,IAAZ,CAAiB,kBAAjB;AACH,OALD,MAKO;AACH,aAAKN,MAAL,CAAYqB,OAAZ,CAAoB,kEAApB;AACH;AACJ,KATD,CASE,OAAOR,GAAP,EAAY;AACV,UAAIA,GAAG,CAACC,IAAJ,KAAapD,SAAS,CAACE,YAA3B,EAAyC;AACrC,aAAKoC,MAAL,CAAYM,IAAZ,CAAiB,6CAAjB;AACH,OAFD,MAEO;AACH,aAAKN,MAAL,CAAYgB,KAAZ,IAAqBT,+DAAqDM,GAAG,CAACI,SAA9E;AACA,cAAMtC,gBAAgB,CAACc,4BAAjB,CAA8CoB,GAAG,CAACI,OAAlD,CAAN;AACH;AACJ;AACJ;;AAEOF,EAAAA,KAAK,CAACO,EAAD;AACT,WAAO,IAAIC,OAAJ,CAAaC,OAAD;AACfC,MAAAA,UAAU,CAACD,OAAD,EAAUF,EAAV,CAAV;AACH,KAFM,CAAP;AAGH;;;;ACvFL;;;;AAMA,AAKA;;;;;;;;;;;;;;AAaA,MAAaI;AAWT7C,EAAAA,YAAY8C,aAA2B1B;AACnC,SAAK0B,WAAL,GAAmBA,WAAnB;;AAGA,SAAK3B,MAAL,GAAc2B,WAAW,CAACC,SAAZ,EAAd;;AAGA,SAAK7B,YAAL,MAAuB,KAAK4B,WAAL,CAAiBE,WAAjB,aAAvB;AACA,SAAKC,iBAAL,GAAyB,IAAIhC,iBAAJ,CAAsB,KAAKC,YAA3B,EAAyC,KAAKC,MAA9C,EAAsDC,WAAtD,CAAzB;;AAGA,SAAK8B,QAAL,GAAgB,CAAhB;AACA,SAAKC,YAAL,GAAoB,IAApB;AACH;AAED;;;;;;;;;;AAQ8B,QAAjBC,iBAAiB,CAACC,YAAD;AAC1B,SAAKlC,MAAL,CAAYM,IAAZ,CAAiB,+BAAjB;AACA,UAAM6B,eAAe,GAAG,MAAM,KAAKR,WAAL,CAAiBQ,eAAjB,CAAiC,KAAKJ,QAAtC,CAA9B;;AACA,QAAI,CAACI,eAAD,IAAoB,KAAKH,YAAL,KAAsB,IAA9C,EAAoD;AAChD,UAAIE,YAAY,CAACE,eAAjB,EAAkC;AAC9B,aAAKpC,MAAL,CAAYqC,OAAZ,CAAoB,2BAApB;AACA,cAAM,KAAKP,iBAAL,CAAuB1B,IAAvB,EAAN;AACH;;AACD;AACH;;AACD,QAAI;AACA,WAAKJ,MAAL,CAAYM,IAAZ,sCAAsD,KAAKyB,UAA3D;AACA,YAAM,KAAKD,iBAAL,CAAuB1B,IAAvB,EAAN;AAEA,WAAK4B,YAAL,GAAoB,MAAM,KAAKL,WAAL,CAAiBW,IAAjB,EAA1B;AACA,WAAKP,QAAL,GAAgB,IAAIQ,IAAJ,GAAWC,OAAX,EAAhB;AACAN,MAAAA,YAAY,CAACO,UAAb,CAAwBC,WAAxB,CAAoC,KAAKV,YAAzC;AAEA,WAAKhC,MAAL,CAAYM,IAAZ,+BAA+C,KAAKyB,UAApD;AACH,KATD,SASU;AACN,UAAI,CAACG,YAAY,CAACE,eAAlB,EAAmC;AAC/B,cAAM,KAAKN,iBAAL,CAAuBZ,MAAvB,EAAN;AACA,aAAKlB,MAAL,CAAYM,IAAZ,QAAwBC,6BAAxB;AACH,OAHD,MAGO;AACH,aAAKP,MAAL,CAAYM,IAAZ,QAAwBC,sDAAxB;AACH;AACJ;AACJ;AAED;;;;;AAG6B,QAAhBoC,gBAAgB,CAACT,YAAD;AACzB,SAAKlC,MAAL,CAAYM,IAAZ,CAAiB,8BAAjB;;AACA,QAAI;AACA,UAAI4B,YAAY,CAACE,eAAjB,EAAkC;AAC9B,aAAKpC,MAAL,CAAYM,IAAZ,CAAiB,kEAAjB;AACA,aAAK0B,YAAL,GAAoBE,YAAY,CAACO,UAAb,CAAwBG,SAAxB,EAApB;AACA,cAAM,KAAKjB,WAAL,CAAiBkB,IAAjB,CAAsB,KAAKb,YAA3B,CAAN;AACH,OAJD,MAIO;AACH,aAAKhC,MAAL,CAAYM,IAAZ,CAAiB,oEAAjB;AACH;AACJ,KARD,SAQU;AACN,YAAM,KAAKwB,iBAAL,CAAuBZ,MAAvB,EAAN;AACA,WAAKlB,MAAL,CAAYM,IAAZ,QAAwBC,8CAAxB;AACH;AACJ;;;;ACxGL;;;;AAKA,MAIsBuC;AAGY,QAAjBC,iBAAiB;AAC1B;AACA,UAAMC,oBAAoB,GAAG,MAAM,KAAKC,8BAAL,EAAnC;;AAEA,QAAI;AACA,YAAMD,oBAAoB,CAACH,IAArB,CAA0BnF,SAAS,CAACK,qBAApC,CAAN;AAEA,YAAMmF,kBAAkB,GAAG,MAAMF,oBAAoB,CAACV,IAArB,EAAjC;;AAEA,UAAI,CAACY,kBAAL,EAAyB;AACrB,cAAMvE,gBAAgB,CAACe,2BAAjB,CACF,0EACA;2DAFE,CAAN;AAKH;;AAED,UAAIwD,kBAAkB,KAAKxF,SAAS,CAACK,qBAArC,EAA4D;AACxD,cAAMY,gBAAgB,CAACe,2BAAjB,2CACwChC,SAAS,CAACK;qCACnCmF,oBAFf,CAAN;AAIH;;AACD,YAAMF,oBAAoB,CAACG,MAArB,EAAN;AACA,aAAO,IAAP;AACH,KArBD,CAqBE,OAAOC,CAAP,EAAU;AACR,YAAMzE,gBAAgB,CAACe,2BAAjB,gDAA4F0D,GAA5F,CAAN;AACH;AACJ;;;;ACxCL;;;;AAKA,AAQA;;;;;;;;AAOA,MAAaC,wBAAwBP;AAKP,eAANQ,MAAM,CAACC,YAAD,EAAuBC,aAAvB;AACtB,UAAMC,eAAe,GAAG,IAAIJ,eAAJ,EAAxB;AACAI,IAAAA,eAAe,CAACC,QAAhB,GAA2BH,YAA3B;AACAE,IAAAA,eAAe,CAACzD,MAAhB,GAAyB,IAAI2D,iBAAJ,CAAWH,aAAa,IAAIH,eAAe,CAACO,0BAAhB,EAA5B,CAAzB;AACA,UAAMH,eAAe,CAACI,eAAhB,EAAN;AACA,WAAOJ,eAAP;AACH;;AAEgB,QAAJZ,IAAI,CAACiB,QAAD;AACb,QAAI;AACA,YAAMrD,WAAE,CAACsD,SAAH,CAAa,KAAKlC,WAAL,EAAb,EAAiCiC,QAAjC,EAA2C,OAA3C,CAAN;AACH,KAFD,CAEE,OAAOjD,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACU,qBAAjB,CAAuCwB,GAAG,CAACC,IAA3C,EAAiDD,GAAG,CAACI,OAArD,CAAN;AACH;AACJ;;AAEsB,QAAV+C,UAAU,CAACF,QAAD;AACnB,QAAI;AACA,YAAMrD,WAAE,CAACsD,SAAH,CAAa,KAAKlC,WAAL,EAAb,EAAiCiC,QAAjC,CAAN;AACH,KAFD,CAEE,OAAOjD,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACU,qBAAjB,CAAuCwB,GAAG,CAACC,IAA3C,EAAiDD,GAAG,CAACI,OAArD,CAAN;AACH;AACJ;;AAEgB,QAAJqB,IAAI;AACb,QAAI;AACA,aAAO,MAAM7B,WAAE,CAACwD,QAAH,CAAY,KAAKpC,WAAL,EAAZ,EAAgC,OAAhC,CAAb;AACH,KAFD,CAEE,OAAOhB,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACU,qBAAjB,CAAuCwB,GAAG,CAACC,IAA3C,EAAiDD,GAAG,CAACI,OAArD,CAAN;AACH;AACJ;;AAEsB,QAAViD,UAAU;AACnB,QAAI;AACA,aAAO,MAAMzD,WAAE,CAACwD,QAAH,CAAY,KAAKpC,WAAL,EAAZ,CAAb;AACH,KAFD,CAEE,OAAOhB,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACU,qBAAjB,CAAuCwB,GAAG,CAACC,IAA3C,EAAiDD,GAAG,CAACI,OAArD,CAAN;AACH;AACJ;;AAEkB,QAANkC,MAAM;AACf,QAAI;AACA,YAAM1C,WAAE,CAACU,MAAH,CAAU,KAAKU,WAAL,EAAV,CAAN;AACA,aAAO,IAAP;AACH,KAHD,CAGE,OAAOhB,GAAP,EAAY;AACV,UAAIA,GAAG,CAACC,IAAJ,KAAapD,SAAS,CAACE,YAA3B,EAAyC;AACrC;AACA,aAAKoC,MAAL,CAAYqB,OAAZ,CAAoB,uDAApB;AACA,eAAO,KAAP;AACH;;AACD,YAAM1C,gBAAgB,CAACU,qBAAjB,CAAuCwB,GAAG,CAACC,IAA3C,EAAiDD,GAAG,CAACI,OAArD,CAAN;AACH;AACJ;;AAEMY,EAAAA,WAAW;AACd,WAAO,KAAK6B,QAAZ;AACH;;AAE2B,QAAfvB,eAAe,CAACJ,QAAD;AACxB,WAAOA,QAAQ,IAAG,MAAM,KAAKoC,gBAAL,EAAT,CAAf;AACH;;AAEMvC,EAAAA,SAAS;AACZ,WAAO,KAAK5B,MAAZ;AACH;;AAEMiD,EAAAA,8BAA8B;AACjC,UAAMmB,qBAAqB,MAAMC,YAAO,CAAC,KAAKX,QAAN,cAAxC;AACA,WAAOL,eAAe,CAACC,MAAhB,CAAuBc,qBAAvB,CAAP;AACH;;AAEwC,SAA1BR,0BAA0B;AACrC,WAAO;AACHU,MAAAA,cAAc,EAAE;AAEf,OAHE;AAIHC,MAAAA,iBAAiB,EAAE,KAJhB;AAKHC,MAAAA,QAAQ,EAAEC,mBAAQ,CAACC;AALhB,KAAP;AAOH;;AAE6B,QAAhBP,gBAAgB;AAC1B,QAAI;AACA,YAAMQ,KAAK,GAAG,MAAMlE,WAAE,CAACmE,IAAH,CAAQ,KAAKlB,QAAb,CAApB;AACA,aAAOiB,KAAK,CAACE,KAAN,CAAYrC,OAAZ,EAAP;AACH,KAHD,CAGE,OAAO3B,GAAP,EAAY;AACV,UAAIA,GAAG,CAACC,IAAJ,KAAapD,SAAS,CAACE,YAA3B,EAAyC;AACrC;AACA,aAAKoC,MAAL,CAAYqC,OAAZ,CAAoB,2BAApB;AACA,eAAO,CAAP;AACH;;AACD,YAAM1D,gBAAgB,CAACU,qBAAjB,CAAuCwB,GAAG,CAACC,IAA3C,EAAiDD,GAAG,CAACI,OAArD,CAAN;AACH;AACJ;;AAE4B,QAAf4C,eAAe;AACzB,UAAM,KAAKiB,mBAAL,EAAN;;AAEA,UAAMC,UAAU,GAAG,MAAMtE,WAAE,CAACC,IAAH,CAAQ,KAAKgD,QAAb,EAAuB,GAAvB,CAAzB;AACA,UAAMqB,UAAU,CAAC3D,KAAX,EAAN;AACA,SAAKpB,MAAL,CAAYM,IAAZ,oBAAoC,KAAKoD,UAAzC;AACH;;AAEgC,QAAnBoB,mBAAmB;AAC7B,QAAI;AACA,YAAMrE,WAAE,CAACuE,KAAH,CAASX,YAAO,CAAC,KAAKX,QAAN,CAAhB,EAAiC;AAACuB,QAAAA,SAAS,EAAE;AAAZ,OAAjC,CAAN;AACH,KAFD,CAEE,OAAOpE,GAAP,EAAY;AACV,UAAIA,GAAG,CAACC,IAAJ,KAAapD,SAAS,CAACC,YAA3B,EAAyC;AACrC,aAAKqC,MAAL,CAAYM,IAAZ,cAA8B+D,YAAO,CAAC,KAAKX,QAAN,mBAArC;AACH,OAFD,MAEO;AACH,cAAM/E,gBAAgB,CAACU,qBAAjB,CAAuCwB,GAAG,CAACC,IAA3C,EAAiDD,GAAG,CAACI,OAArD,CAAN;AACH;AACJ;AACJ;;;;AC1IL;;;;;AASA;AACA,AAAO,IAAIiE,KAAK,gBAAkBC,OAAO,CAAC,6BAAD,CAAlC;;ACVP;;;;;AAgBA,WAAYC;AACRA,EAAAA,kCAAA,gBAAA;AACAA,EAAAA,mCAAA,iBAAA;AACH,CAHD,EAAYA,2BAAmB,KAAnBA,2BAAmB,KAAA,CAA/B;;AChBA;;;;AAMA,AAQA;;;;;;;AAMA,MAAaC,0CAA0CvC;AAMnDjE,EAAAA,YAAoByG,OAA4BC;AAC5C;AACA,SAAKD,KAAL,GAAaA,KAAb;AACA,SAAKC,eAAL,GAAuBA,eAAe,GAAGC,MAAM,CAACC,IAAP,CAAYF,eAAZ,EAA6B,OAA7B,CAAH,GAA2C,IAAjF;AACH;;AAEyB,eAANjC,MAAM,CACtBC,YADsB,EAEtB+B,KAFsB,EAGtBC,eAHsB,EAItB/B,aAJsB;AAMtB,UAAM7B,WAAW,GAAG,IAAI0D,iCAAJ,CAAsCC,KAAtC,EAA6CC,eAA7C,CAApB;AACA5D,IAAAA,WAAW,CAAC8B,eAAZ,GAA8B,MAAMJ,eAAe,CAACC,MAAhB,CAAuBC,YAAvB,EAAqCC,aAArC,CAApC;AACA,WAAO7B,WAAP;AACH;;AAEgB,QAAJkB,IAAI,CAACiB,QAAD;AACb,QAAI;AACA,YAAM4B,iBAAiB,GAAGR,KAAK,CAACS,WAAN,CACtBH,MAAM,CAACC,IAAP,CAAY3B,QAAZ,EAAsB,OAAtB,CADsB,EAEtB,KAAKyB,eAFiB,EAGtB,KAAKD,KAAL,CAAW1E,QAAX,EAHsB,CAA1B;AAIA,YAAM,KAAK6C,eAAL,CAAqBO,UAArB,CAAgC0B,iBAAhC,CAAN;AACH,KAND,CAME,OAAO7E,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACa,mCAAjB,CAAqDqB,GAAG,CAACI,OAAzD,CAAN;AACH;AACJ;;AAEgB,QAAJqB,IAAI;AACb,QAAI;AACA,YAAMoD,iBAAiB,GAAG,MAAM,KAAKjC,eAAL,CAAqBS,UAArB,EAAhC;;AACA,UAAI,OAAOwB,iBAAP,KAA6B,WAA7B,IAA4C,CAACA,iBAA7C,IAAkE,MAAMA,iBAAiB,CAACE,MAA9F,EAAsG;AAClG,aAAKnC,eAAL,CAAqB7B,SAArB,GAAiCtB,IAAjC,CAAsC,wDAAtC;AACA,eAAO,IAAP;AACH;;AACD,aAAO4E,KAAK,CAACW,aAAN,CACHH,iBADG,EAEH,KAAKH,eAFF,EAGH,KAAKD,KAAL,CAAW1E,QAAX,EAHG,EAGoBA,QAHpB,EAAP;AAIH,KAVD,CAUE,OAAOC,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACa,mCAAjB,CAAqDqB,GAAG,CAACI,OAAzD,CAAN;AACH;AACJ;;AAEkB,QAANkC,MAAM;AACf,WAAO,KAAKM,eAAL,CAAqBN,MAArB,EAAP;AACH;;AAE2B,QAAfhB,eAAe,CAACJ,QAAD;AACxB,WAAO,KAAK0B,eAAL,CAAqBtB,eAArB,CAAqCJ,QAArC,CAAP;AACH;;AAEMF,EAAAA,WAAW;AACd,WAAO,KAAK4B,eAAL,CAAqB5B,WAArB,EAAP;AACH;;AAEMD,EAAAA,SAAS;AACZ,WAAO,KAAK6B,eAAL,CAAqB7B,SAArB,EAAP;AACH;;AAEMqB,EAAAA,8BAA8B;AACjC,UAAMmB,qBAAqB,MAAMC,YAAO,CAAC,KAAKZ,eAAL,CAAqB5B,WAArB,EAAD,cAAxC;AACA,WAAOwD,iCAAiC,CAAC/B,MAAlC,CAAyCc,qBAAzC,EAAgEgB,2BAAmB,CAACU,WAApF,CAAP;AACH;;;;AC1FL;;;;AAKA,AAQA;;;;;;;AAMA,MAAaC,4BAA4BjD;AAMrCjE,EAAAA,YAAoBmH,aAAqBC;AACrC;AACA,SAAKD,WAAL,GAAmBA,WAAnB;AACA,SAAKC,WAAL,GAAmBA,WAAnB;AACH;;AAEyB,eAAN3C,MAAM,CACtBC,YADsB,EAEtByC,WAFsB,EAGtBC,WAHsB,EAItBzC,aAJsB;AAMtB,UAAM7B,WAAW,GAAG,IAAIoE,mBAAJ,CAAwBC,WAAxB,EAAqCC,WAArC,CAApB;AACAtE,IAAAA,WAAW,CAAC8B,eAAZ,GAA8B,MAAMJ,eAAe,CAACC,MAAhB,CAAuBC,YAAvB,EAAqCC,aAArC,CAApC;AACA,WAAO7B,WAAP;AACH;;AAEgB,QAAJkB,IAAI,CAACiB,QAAD;AACb,QAAI;AACA,YAAMoC,kBAAW,CAAC,KAAKF,WAAN,EAAmB,KAAKC,WAAxB,EAAqCnC,QAArC,CAAjB;AACH,KAFD,CAEE,OAAOjD,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACY,8BAAjB,CAAgDsB,GAAG,CAACI,OAApD,CAAN;AACH;;;AAED,UAAM,KAAKwC,eAAL,CAAqBZ,IAArB,CAA0B,IAA1B,CAAN;AACH;;AAEgB,QAAJP,IAAI;AACb,QAAG;AACC,aAAO,MAAM6D,kBAAW,CAAC,KAAKH,WAAN,EAAmB,KAAKC,WAAxB,CAAxB;AACH,KAFD,CAEE,OAAMpF,GAAN,EAAU;AACR,YAAMlC,gBAAgB,CAACY,8BAAjB,CAAgDsB,GAAG,CAACI,OAApD,CAAN;AACH;AACJ;;AAEkB,QAANkC,MAAM;AACf,QAAI;AACA,YAAM,KAAKM,eAAL,CAAqBN,MAArB,EAAN;AACA,aAAO,MAAMiD,qBAAc,CAAC,KAAKJ,WAAN,EAAmB,KAAKC,WAAxB,CAA3B;AACH,KAHD,CAGE,OAAOpF,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACY,8BAAjB,CAAgDsB,GAAG,CAACI,OAApD,CAAN;AACH;AACJ;;AAE2B,QAAfkB,eAAe,CAACJ,QAAD;AACxB,WAAO,KAAK0B,eAAL,CAAqBtB,eAArB,CAAqCJ,QAArC,CAAP;AACH;;AAEMF,EAAAA,WAAW;AACd,WAAO,KAAK4B,eAAL,CAAqB5B,WAArB,EAAP;AACH;;AAEMD,EAAAA,SAAS;AACZ,WAAO,KAAK6B,eAAL,CAAqB7B,SAArB,EAAP;AACH;;AAEMqB,EAAAA,8BAA8B;AACjC,UAAMmB,qBAAqB,MAAMC,YAAO,CAAC,KAAKZ,eAAL,CAAqB5B,WAArB,EAAD,cAAxC;AACA,WAAOkE,mBAAmB,CAACzC,MAApB,CACHc,qBADG,EAEH,kCAFG,EAEiC,iCAFjC,CAAP;AAIH;;;;ACvFL;;;;AAKA,AAQA;;;;;;;;AAOA,MAAaiC,6BAA6BvD;AAMtCjE,EAAAA,YAAoBmH,aAAqBC;AACrC;AACA,SAAKD,WAAL,GAAmBA,WAAnB;AACA,SAAKC,WAAL,GAAmBA,WAAnB;AACH;;AAEyB,eAAN3C,MAAM,CACtBC,YADsB,EAEtByC,WAFsB,EAGtBC,WAHsB,EAItBzC,aAJsB;AAMtB,UAAM7B,WAAW,GAAG,IAAI0E,oBAAJ,CAAyBL,WAAzB,EAAsCC,WAAtC,CAApB;AACAtE,IAAAA,WAAW,CAAC8B,eAAZ,GAA8B,MAAMJ,eAAe,CAACC,MAAhB,CAAuBC,YAAvB,EAAqCC,aAArC,CAApC;AACA,WAAO7B,WAAP;AACH;;AAEgB,QAAJkB,IAAI,CAACiB,QAAD;AACb,QAAI;AACA,YAAMoC,kBAAW,CAAC,KAAKF,WAAN,EAAmB,KAAKC,WAAxB,EAAqCnC,QAArC,CAAjB;AACH,KAFD,CAEE,OAAOjD,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACW,oBAAjB,CAAsCuB,GAAG,CAACI,OAA1C,CAAN;AACH;;;AAED,UAAM,KAAKwC,eAAL,CAAqBZ,IAArB,CAA0B,IAA1B,CAAN;AACH;;AAEgB,QAAJP,IAAI;AACb,QAAI;AACA,aAAO,MAAM6D,kBAAW,CAAC,KAAKH,WAAN,EAAmB,KAAKC,WAAxB,CAAxB;AACH,KAFD,CAEE,OAAOpF,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACW,oBAAjB,CAAsCuB,GAAG,CAACI,OAA1C,CAAN;AACH;AACJ;;AAEkB,QAANkC,MAAM;AACf,QAAI;AACA,YAAM,KAAKM,eAAL,CAAqBN,MAArB,EAAN;AACA,aAAO,MAAMiD,qBAAc,CAAC,KAAKJ,WAAN,EAAmB,KAAKC,WAAxB,CAA3B;AACH,KAHD,CAGE,OAAOpF,GAAP,EAAY;AACV,YAAMlC,gBAAgB,CAACW,oBAAjB,CAAsCuB,GAAG,CAACI,OAA1C,CAAN;AACH;AACJ;;AAE2B,QAAfkB,eAAe,CAACJ,QAAD;AACxB,WAAO,KAAK0B,eAAL,CAAqBtB,eAArB,CAAqCJ,QAArC,CAAP;AACH;;AAEMF,EAAAA,WAAW;AACd,WAAO,KAAK4B,eAAL,CAAqB5B,WAArB,EAAP;AACH;;AAEMD,EAAAA,SAAS;AACZ,WAAO,KAAK6B,eAAL,CAAqB7B,SAArB,EAAP;AACH;;AAEMqB,EAAAA,8BAA8B;AACjC,UAAMmB,qBAAqB,MAAMC,YAAO,CAAC,KAAKZ,eAAL,CAAqB5B,WAArB,EAAD,cAAxC;AACA,WAAOwE,oBAAoB,CAAC/C,MAArB,CACHc,qBADG,EAEH,kCAFG,EAEiC,iCAFjC,CAAP;AAIH;;;;ACxFL;;;;AAKA,MAKakC;AACY,aAAVC,UAAU;AACjB,WAAO,KAAKC,sBAAL,CAA4B9I,SAAS,CAACO,WAAV,CAAsBC,IAAlD,CAAP;AACH;;AAEuB,aAAbuI,aAAa;AACpB,WAAO,KAAKD,sBAAL,CAA4B9I,SAAS,CAACO,WAAV,CAAsBE,OAAlD,CAAP;AACH;;AAEoB,aAAVuI,UAAU;AACjB,WAAO,KAAKF,sBAAL,CAA4B9I,SAAS,CAACO,WAAV,CAAsBG,IAAlD,CAAP;AACH;;AAEqB,aAAXuI,WAAW;AAClB,WAAO,KAAKH,sBAAL,CAA4B9I,SAAS,CAACO,WAAV,CAAsBI,KAAlD,CAAP;AACH;;AAEwB,aAAduI,cAAc;AACrB,WAAO,KAAKJ,sBAAL,CAA4B9I,SAAS,CAACO,WAAV,CAAsBK,QAAlD,CAAP;AACH;;AAE4B,SAAtBkI,sBAAsB,CAACpH,IAAD;AACzB,WAAOyH,OAAO,CAACC,GAAR,CAAY1H,IAAZ,CAAP;AACH;;AAE4B,SAAtB2H,sBAAsB;AACzB,WAAOF,OAAO,CAACG,QAAf;AACH;;AAEuB,SAAjBC,iBAAiB;AACpB,WAAO,KAAKF,sBAAL,OAAkCrI,QAAQ,CAACwI,OAAlD;AACH;;AAEqB,SAAfC,eAAe;AAClB,WAAO,KAAKJ,sBAAL,OAAkCrI,QAAQ,CAAC0I,KAAlD;AACH;;AAEmB,SAAbC,aAAa;AAChB,WAAO,KAAKN,sBAAL,OAAkCrI,QAAQ,CAAC4I,KAAlD;AACH;;AAEqB,SAAfC,eAAe;AAClB,WAAOV,OAAO,CAACW,MAAR,OAAqB9J,SAAS,CAACM,oBAAtC;AACH;;AAE0B,SAApByJ,oBAAoB;AACvB,WAAO,CAAC,KAAKR,iBAAN,GACH,KAAKS,oBAAL,EADG,GAEH,KAAKC,uBAAL,EAFJ;AAGH;;AAE6B,SAAvBA,uBAAuB;AAC1B,WAAO,KAAKnB,sBAAL,CAA4B9I,SAAS,CAACO,WAAV,CAAsBO,sBAAlD,CAAP;AACH;;AAE0B,SAApBkJ,oBAAoB;AACvB,QAAI,KAAKT,iBAAL,EAAJ,EAA8B;AAC1B,YAAMtI,gBAAgB,CAACgB,uBAAjB,CACF,sEADE,CAAN;AAEH;;AAED,QAAI,CAACiI,sBAAW,CAACC,OAAZ,CAAoB,KAAKtB,UAAzB,CAAL,EAA2C;AACvC,aAAO,KAAKA,UAAZ;AACH;;AAED,QAAIuB,QAAQ,GAAG,IAAf;;AACA,QAAI,CAACF,sBAAW,CAACC,OAAZ,CAAoB,KAAKpB,aAAzB,CAAL,EAA8C;AAC1CqB,MAAAA,QAAQ,GAAG,KAAKrB,aAAhB;AACH,KAFD,MAEO,IAAI,CAACmB,sBAAW,CAACC,OAAZ,CAAoB,KAAKnB,UAAzB,CAAL,EAA2C;AAC9CoB,MAAAA,QAAQ,GAAG,KAAKpB,UAAhB;AACH,KAFM,MAEA,IAAI,CAACkB,sBAAW,CAACC,OAAZ,CAAoB,KAAKlB,WAAzB,CAAL,EAA4C;AAC/CmB,MAAAA,QAAQ,GAAG,KAAKnB,WAAhB;AACH,KAFM,MAEA,IAAI,CAACiB,sBAAW,CAACC,OAAZ,CAAoB,KAAKjB,cAAzB,CAAL,EAA+C;AAClDkB,MAAAA,QAAQ,GAAG,KAAKlB,cAAhB;AACH;;AAED,QAAI,KAAKS,aAAL,EAAJ,EAA0B;AACtB,aAAO,CAACO,sBAAW,CAACC,OAAZ,CAAoBC,QAApB,CAAD,GAAiCC,aAAI,CAACC,IAAL,CAAU,QAAV,EAAoBF,QAApB,CAAjC,GAAiE,IAAxE;AACH,KAFD,MAEO,IAAI,KAAKX,eAAL,EAAJ,EAA4B;AAC/B,UAAI,KAAKI,eAAL,EAAJ,EAA4B;AACxB,eAAO,OAAP;AACH,OAFD,MAEO;AACH,eAAO,CAACK,sBAAW,CAACC,OAAZ,CAAoBC,QAApB,CAAD,GAAiCC,aAAI,CAACC,IAAL,CAAU,OAAV,EAAmBF,QAAnB,CAAjC,GAAgE,IAAvE;AACH;AACJ,KANM,MAMA;AACH,YAAMnJ,gBAAgB,CAACgB,uBAAjB,CACF,sEADE,CAAN;AAEH;AAEJ;;;;ACnGL;;;;AAKA,MAUasI;AACqB,eAAjBC,iBAAiB,CAACC,MAAD;AAC1B,QAAIC,UAAJ;;AAGA,QAAI9B,WAAW,CAACW,iBAAZ,EAAJ,EAAqC;AACjC,UAAI,CAACkB,MAAM,CAACE,SAAR,IAAqB,CAACF,MAAM,CAACG,mBAAjC,EAAsD;AAClD,cAAM3J,gBAAgB,CAACkB,kCAAjB,CACF,6GADE,CAAN;AAEH;;AAEDuI,MAAAA,UAAU,GAAG,MAAM/C,iCAAiC,CAAC/B,MAAlC,CAAyC6E,MAAM,CAACE,SAAhD,EAA2DjD,2BAAmB,CAACU,WAA/E,EAA4FyC,SAA5F,EAAuGJ,MAAM,CAAC3E,aAA9G,CAAnB;AACH,KAPD;AAAA,SAUK,IAAI8C,WAAW,CAACe,aAAZ,EAAJ,EAAiC;AAClC,YAAI,CAACc,MAAM,CAACE,SAAR,IAAqB,CAACF,MAAM,CAACnC,WAA7B,IAA4C,CAACmC,MAAM,CAAClC,WAAxD,EAAqE;AACjE,gBAAMtH,gBAAgB,CAACkB,kCAAjB,CACF,oGADE,CAAN;AAEH;;AAEDuI,QAAAA,UAAU,GAAG,MAAMrC,mBAAmB,CAACzC,MAApB,CAA2B6E,MAAM,CAACE,SAAlC,EAA6CF,MAAM,CAACnC,WAApD,EAAiEmC,MAAM,CAAClC,WAAxE,EAAqFkC,MAAM,CAAC3E,aAA5F,CAAnB;AACH,OAPI;AAAA,WAUA,IAAI8C,WAAW,CAACa,eAAZ,EAAJ,EAAmC;AACpC,cAAI,CAACgB,MAAM,CAACE,SAAR,IAAqB,CAACF,MAAM,CAACnC,WAA7B,IAA4C,CAACmC,MAAM,CAAClC,WAAxD,EAAqE;AACjE,kBAAMtH,gBAAgB,CAACkB,kCAAjB,CACF,qGADE,CAAN;AAEH;;AAEDuI,UAAAA,UAAU,GAAG,MAAM/B,oBAAoB,CAAC/C,MAArB,CAA4B6E,MAAM,CAACE,SAAnC,EAA8CF,MAAM,CAACnC,WAArD,EAAkEmC,MAAM,CAAClC,WAAzE,EAAsFkC,MAAM,CAAC3E,aAA7F,CAAnB;AACH,SAPI,MASA;AACD,gBAAM7E,gBAAgB,CAACgB,uBAAjB,CACF,uEADE,CAAN;AAEH;;;AAGD,UAAM6I,qBAAqB,GAAG,MAAMJ,UAAU,CAACrF,iBAAX,GAA+B0F,KAA/B,CAAqC,MAAM,KAA3C,CAApC;;AAEA,QAAI,CAACD,qBAAL,EAA4B;AACxB,UAAIlC,WAAW,CAACa,eAAZ,MAAiCgB,MAAM,CAACO,uBAA5C,EAAqE;AACjE,YAAI,CAACP,MAAM,CAACE,SAAZ,EAAuB;AACnB,gBAAM1J,gBAAgB,CAACkB,kCAAjB,CACF,8DADE,CAAN;AAEH;;AAEDuI,QAAAA,UAAU,GAAG,MAAM/E,eAAe,CAACC,MAAhB,CAAuB6E,MAAM,CAACE,SAA9B,EAAyCF,MAAM,CAAC3E,aAAhD,CAAnB;AAEA,cAAMmF,yBAAyB,GAAG,MAAMP,UAAU,CAACrF,iBAAX,EAAxC;;AACA,YAAI4F,yBAAJ,EAA+B;AAC3B,iBAAOP,UAAP;AACH;AACJ;;AAED,YAAMzJ,gBAAgB,CAACiB,iCAAjB,CAAmD,mCAAnD,CAAN;AACH;;AAED,WAAOwI,UAAP;AACH;;;;;;;;;;;;"}
+{"version":3,"file":"msal-node-extensions.cjs.development.js","sources":["../src/utils/Constants.ts","../src/error/PersistenceError.ts","../src/lock/CrossPlatformLock.ts","../src/persistence/PersistenceCachePlugin.ts","../src/persistence/BasePersistence.ts","../src/persistence/FilePersistence.ts","../src/Dpapi.ts","../src/persistence/DataProtectionScope.ts","../src/persistence/FilePersistenceWithDataProtection.ts","../src/persistence/KeychainPersistence.ts","../src/persistence/LibSecretPersistence.ts","../src/utils/Environment.ts","../src/persistence/PersistenceCreator.ts","../src/error/NativeAuthError.ts","../src/packageMetadata.ts","../src/broker/NativeBrokerPlugin.ts"],"sourcesContent":["/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nexport const Constants = {\n\n    /**\n     * An existing file was the target of an operation that required that the target not exist\n     */\n    EEXIST_ERROR: \"EEXIST\",\n\n    /**\n     * No such file or directory: Commonly raised by fs operations to indicate that a component\n     * of the specified pathname does not exist. No entity (file or directory) could be found\n     * by the given path\n     */\n    ENOENT_ERROR: \"ENOENT\",\n\n    /**\n     * Operation not permitted. An attempt was made to perform an operation that requires \n     * elevated privileges. \n     */\n    EPERM_ERROR: \"EPERM\",\n    \n    /**\n     * Default service name for using MSAL Keytar\n     */\n    DEFAULT_SERVICE_NAME: \"msal-node-extensions\",\n\n    /**\n     * Test data used to verify underlying persistence mechanism\n     */\n    PERSISTENCE_TEST_DATA: \"Dummy data to verify underlying persistence mechanism\",\n\n    /**\n     * This is the value of a the guid if the process is being ran by the root user\n     */\n    LINUX_ROOT_USER_GUID: 0,\n\n    /**\n     * List of environment variables\n     */\n    ENVIRONMENT: {\n        HOME: \"HOME\",\n        LOGNAME: \"LOGNAME\",\n        USER: \"USER\",\n        LNAME: \"LNAME\",\n        USERNAME: \"USERNAME\",\n        PLATFORM: \"platform\",\n        LOCAL_APPLICATION_DATA: \"LOCALAPPDATA\"\n    },\n\n    // Name of the default cache file\n    DEFAULT_CACHE_FILE_NAME: \"cache.json\"\n};\n\nexport enum Platform {\n    WINDOWS = \"win32\",\n    LINUX = \"linux\",\n    MACOS = \"darwin\"\n}\n\nexport enum ErrorCodes {\n    INTERATION_REQUIRED_ERROR_CODE = \"interaction_required\",\n    SERVER_UNAVAILABLE = \"server_unavailable\"\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\n/**\n * Error thrown when trying to write MSAL cache to persistence.\n */\nexport class PersistenceError extends Error {\n\n    // Short string denoting error\n    errorCode: string;\n    // Detailed description of error\n    errorMessage: string;\n\n    constructor(errorCode: string, errorMessage: string) {\n        const errorString = errorMessage ? `${errorCode}: ${errorMessage}` : errorCode;\n        super(errorString);\n        Object.setPrototypeOf(this, PersistenceError.prototype);\n\n        this.errorCode = errorCode;\n        this.errorMessage = errorMessage;\n        this.name = \"PersistenceError\";\n    }\n\n    /**\n     * Error thrown when trying to access the file system.\n     */\n    static createFileSystemError(errorCode: string, errorMessage: string): PersistenceError {\n        return new PersistenceError(errorCode, errorMessage);\n    }\n\n    /**\n     * Error thrown when trying to write, load, or delete data from secret service on linux.\n     * Libsecret is used to access secret service.\n     */\n    static createLibSecretError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"GnomeKeyringError\", errorMessage);\n    }\n\n    /**\n     * Error thrown when trying to write, load, or delete data from keychain on macOs.\n     */\n    static createKeychainPersistenceError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"KeychainError\", errorMessage);\n    }\n\n    /**\n     * Error thrown when trying to encrypt or decrypt data using DPAPI on Windows.\n     */\n    static createFilePersistenceWithDPAPIError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"DPAPIEncryptedFileError\", errorMessage);\n    }\n\n    /**\n     * Error thrown when using the cross platform lock.\n     */\n    static createCrossPlatformLockError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"CrossPlatformLockError\", errorMessage);\n    }\n\n    /**\n     * Throw cache persistence error\n     * \n     * @param errorMessage string\n     * @returns PersistenceError\n     */\n    static createCachePersistenceError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"CachePersistenceError\", errorMessage);\n    }\n\n    /**\n     * Throw unsupported error\n     * \n     * @param errorMessage string\n     * @returns PersistenceError\n     */\n    static createNotSupportedError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"NotSupportedError\", errorMessage);\n    }\n\n    /**\n     * Throw persistence not verified error\n     * \n     * @param errorMessage string\n     * @returns PersistenceError\n     */\n    static createPersistenceNotVerifiedError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"PersistenceNotVerifiedError\", errorMessage);\n    }\n\n    /**\n     * Throw persistence creation validation error\n     * \n     * @param errorMessage string\n     * @returns PersistenceError\n     */\n    static createPersistenceNotValidatedError(errorMessage: string): PersistenceError {\n        return new PersistenceError(\"PersistenceNotValidatedError\", errorMessage);\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { promises as fs } from \"fs\";\nimport { pid } from \"process\";\nimport { CrossPlatformLockOptions } from \"./CrossPlatformLockOptions\";\nimport { Constants } from \"../utils/Constants\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Logger } from \"@azure/msal-common\";\n\n/**\n * Cross-process lock that works on all platforms.\n */\nexport class CrossPlatformLock {\n\n    private readonly lockFilePath: string;\n    private lockFileHandle: fs.FileHandle;\n    private readonly retryNumber: number;\n    private readonly retryDelay: number;\n\n    private logger: Logger;\n\n    constructor(lockFilePath: string, logger: Logger, lockOptions?: CrossPlatformLockOptions) {\n        this.lockFilePath = lockFilePath;\n        this.retryNumber = lockOptions ? lockOptions.retryNumber : 500;\n        this.retryDelay = lockOptions ? lockOptions.retryDelay : 100;\n        this.logger = logger;\n    }\n\n    /**\n     * Locks cache from read or writes by creating file with same path and name as\n     * cache file but with .lockfile extension. If another process has already created\n     * the lockfile, will back off and retry based on configuration settings set by CrossPlatformLockOptions\n     */\n    public async lock(): Promise<void> {\n        for (let tryCount = 0; tryCount < this.retryNumber; tryCount++) {\n            try {\n                this.logger.info(`Pid ${pid} trying to acquire lock`);\n                this.lockFileHandle = await fs.open(this.lockFilePath, \"wx+\");\n\n                this.logger.info(`Pid ${pid} acquired lock`);\n                await this.lockFileHandle.write(pid.toString());\n                return;\n            } catch (err) {\n                if (err.code === Constants.EEXIST_ERROR || err.code === Constants.EPERM_ERROR) {\n                    this.logger.info(err);\n                    await this.sleep(this.retryDelay);\n                } else {\n                    this.logger.error(`${pid} was not able to acquire lock. Ran into error: ${err.message}`);\n                    throw PersistenceError.createCrossPlatformLockError(err.message);\n                }\n            }\n        }\n        this.logger.error(`${pid} was not able to acquire lock. Exceeded amount of retries set in the options`);\n        throw PersistenceError.createCrossPlatformLockError(\n            \"Not able to acquire lock. Exceeded amount of retries set in options\");\n    }\n\n    /**\n     * unlocks cache file by deleting .lockfile.\n     */\n    public async unlock(): Promise<void> {\n        try {\n            if(this.lockFileHandle){\n                // if we have a file handle to the .lockfile, delete lock file\n                await fs.unlink(this.lockFilePath);\n                await this.lockFileHandle.close();\n                this.logger.info(\"lockfile deleted\");\n            } else {\n                this.logger.warning(\"lockfile handle does not exist, so lockfile could not be deleted\");\n            }\n        } catch (err) {\n            if (err.code === Constants.ENOENT_ERROR) {\n                this.logger.info(\"Tried to unlock but lockfile does not exist\");\n            } else {\n                this.logger.error(`${pid} was not able to release lock. Ran into error: ${err.message}`);\n                throw PersistenceError.createCrossPlatformLockError(err.message);\n            }\n        }\n    }\n\n    private sleep(ms): Promise<void> {\n        return new Promise((resolve) => {\n            setTimeout(resolve, ms);\n        });\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { IPersistence } from \"./IPersistence\";\nimport { CrossPlatformLock } from \"../lock/CrossPlatformLock\";\nimport { CrossPlatformLockOptions } from \"../lock/CrossPlatformLockOptions\";\nimport { pid } from \"process\";\nimport { TokenCacheContext, ICachePlugin, Logger } from \"@azure/msal-common\";\n\n/**\n * MSAL cache plugin which enables callers to write the MSAL cache to disk on Windows,\n * macOs, and Linux.\n *\n * - Persistence can be one of:\n * - FilePersistence: Writes and reads from an unencrypted file. Can be used on Windows,\n * macOs, or Linux.\n * - FilePersistenceWithDataProtection: Used on Windows, writes and reads from file encrypted\n * with windows dpapi-addon.\n * - KeychainPersistence: Used on macOs, writes and reads from keychain.\n * - LibSecretPersistence: Used on linux, writes and reads from secret service API. Requires\n * libsecret be installed.\n */\nexport class PersistenceCachePlugin implements ICachePlugin {\n\n    public persistence: IPersistence;\n    public lastSync: number;\n    public currentCache: string;\n    public lockFilePath: string;\n\n    private crossPlatformLock: CrossPlatformLock;\n\n    private logger: Logger;\n\n    constructor(persistence: IPersistence, lockOptions?: CrossPlatformLockOptions) {\n        this.persistence = persistence;\n\n        // initialize logger\n        this.logger = persistence.getLogger();\n\n        // create file lock\n        this.lockFilePath = `${this.persistence.getFilePath()}.lockfile`;\n        this.crossPlatformLock = new CrossPlatformLock(this.lockFilePath, this.logger, lockOptions);\n\n        // initialize default values\n        this.lastSync = 0;\n        this.currentCache = null;\n    }\n\n    /**\n     * Reads from storage and saves an in-memory copy. If persistence has not been updated\n     * since last time data was read, in memory copy is used.\n     *\n     * If cacheContext.cacheHasChanged === true, then file lock is created and not deleted until\n     * afterCacheAccess() is called, to prevent the cache file from changing in between\n     * beforeCacheAccess() and afterCacheAccess().\n     */\n    public async beforeCacheAccess(cacheContext: TokenCacheContext): Promise<void> {\n        this.logger.info(\"Executing before cache access\");\n        const reloadNecessary = await this.persistence.reloadNecessary(this.lastSync);\n        if (!reloadNecessary && this.currentCache !== null) {\n            if (cacheContext.cacheHasChanged) {\n                this.logger.verbose(\"Cache context has changed\");\n                await this.crossPlatformLock.lock();\n            }\n            return;\n        }\n        try {\n            this.logger.info(`Reload necessary. Last sync time: ${this.lastSync}`);\n            await this.crossPlatformLock.lock();\n\n            this.currentCache = await this.persistence.load();\n            this.lastSync = new Date().getTime();\n            cacheContext.tokenCache.deserialize(this.currentCache);\n\n            this.logger.info(`Last sync time updated to: ${this.lastSync}`);\n        } finally {\n            if (!cacheContext.cacheHasChanged) {\n                await this.crossPlatformLock.unlock();\n                this.logger.info(`Pid ${pid} released lock`);\n            } else {\n                this.logger.info(`Pid ${pid} beforeCacheAccess did not release lock`);\n            }\n        }\n    }\n\n    /**\n     * Writes to storage if MSAL in memory copy of cache has been changed.\n     */\n    public async afterCacheAccess(cacheContext: TokenCacheContext): Promise<void> {\n        this.logger.info(\"Executing after cache access\");\n        try {\n            if (cacheContext.cacheHasChanged) {\n                this.logger.info(\"Msal in-memory cache has changed. Writing changes to persistence\");\n                this.currentCache = cacheContext.tokenCache.serialize();\n                await this.persistence.save(this.currentCache);\n            } else {\n                this.logger.info(\"Msal in-memory cache has not changed. Did not write to persistence\");\n            }\n        } finally {\n            await this.crossPlatformLock.unlock();\n            this.logger.info(`Pid ${pid} afterCacheAccess released lock`);\n        }\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Constants } from \"../utils/Constants\";\nimport { IPersistence } from \"./IPersistence\";\n\nexport abstract class BasePersistence {\n    public abstract createForPersistenceValidation(): Promise<IPersistence>; \n\n    public async verifyPersistence(): Promise<boolean> {\n        // We are using a different location for the test to avoid overriding the functional cache\n        const persistenceValidator = await this.createForPersistenceValidation();\n\n        try {\n            await persistenceValidator.save(Constants.PERSISTENCE_TEST_DATA);\n\n            const retrievedDummyData = await persistenceValidator.load();\n\n            if (!retrievedDummyData) {\n                throw PersistenceError.createCachePersistenceError(\n                    \"Persistence check failed. Data was written but it could not be read. \" +\n                    \"Possible cause: on Linux, LibSecret is installed but D-Bus isn't running \\\n                    because it cannot be started over SSH.\"\n                );\n            }\n\n            if (retrievedDummyData !== Constants.PERSISTENCE_TEST_DATA) {\n                throw PersistenceError.createCachePersistenceError(\n                    `Persistence check failed. Data written ${Constants.PERSISTENCE_TEST_DATA} is different \\\n                    from data read ${retrievedDummyData}`\n                );\n            }\n            await persistenceValidator.delete();\n            return true;\n        } catch (e) {\n            throw PersistenceError.createCachePersistenceError(`Verifing persistence failed with the error: ${e}`);\n        }\n    }\n\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { promises as fs } from \"fs\";\nimport { dirname } from \"path\";\nimport { IPersistence } from \"./IPersistence\";\nimport { Constants } from \"../utils/Constants\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Logger, LoggerOptions, LogLevel } from \"@azure/msal-common\";\nimport { BasePersistence } from \"./BasePersistence\";\n\n/**\n * Reads and writes data to file specified by file location. File contents are not\n * encrypted.\n *\n * If file or directory has not been created, it FilePersistence.create() will create\n * file and any directories in the path recursively.\n */\nexport class FilePersistence extends BasePersistence implements IPersistence {\n\n    private filePath: string;\n    private logger: Logger;\n\n    public static async create(fileLocation: string, loggerOptions?: LoggerOptions): Promise<FilePersistence> {\n        const filePersistence = new FilePersistence();\n        filePersistence.filePath = fileLocation;\n        filePersistence.logger = new Logger(loggerOptions || FilePersistence.createDefaultLoggerOptions());\n        await filePersistence.createCacheFile();\n        return filePersistence;\n    }\n\n    public async save(contents: string): Promise<void> {\n        try {\n            await fs.writeFile(this.getFilePath(), contents, \"utf-8\");\n        } catch (err) {\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    public async saveBuffer(contents: Uint8Array): Promise<void> {\n        try {\n            await fs.writeFile(this.getFilePath(), contents);\n        } catch (err) {\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    public async load(): Promise<string | null> {\n        try {\n            return await fs.readFile(this.getFilePath(), \"utf-8\");\n        } catch (err) {\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    public async loadBuffer(): Promise<Uint8Array> {\n        try {\n            return await fs.readFile(this.getFilePath());\n        } catch (err) {\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    public async delete(): Promise<boolean> {\n        try {\n            await fs.unlink(this.getFilePath());\n            return true;\n        } catch (err) {\n            if (err.code === Constants.ENOENT_ERROR) {\n                // file does not exist, so it was not deleted\n                this.logger.warning(\"Cache file does not exist, so it could not be deleted\");\n                return false;\n            }\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    public getFilePath(): string {\n        return this.filePath;\n    }\n\n    public async reloadNecessary(lastSync: number): Promise<boolean> {\n        return lastSync < await this.timeLastModified();\n    }\n\n    public getLogger(): Logger {\n        return this.logger;\n    }\n\n    public createForPersistenceValidation(): Promise<FilePersistence> {\n        const testCacheFileLocation = `${dirname(this.filePath)}/test.cache`;\n        return FilePersistence.create(testCacheFileLocation);\n    }\n\n    private static createDefaultLoggerOptions(): LoggerOptions {\n        return {\n            loggerCallback: () => {\n                // allow users to not set loggerCallback\n            },\n            piiLoggingEnabled: false,\n            logLevel: LogLevel.Info\n        };\n    }\n\n    private async timeLastModified(): Promise<number> {\n        try {\n            const stats = await fs.stat(this.filePath);\n            return stats.mtime.getTime();\n        } catch (err) {\n            if (err.code === Constants.ENOENT_ERROR) {\n                // file does not exist, so it's never been modified\n                this.logger.verbose(\"Cache file does not exist\");\n                return 0;\n            }\n            throw PersistenceError.createFileSystemError(err.code, err.message);\n        }\n    }\n\n    private async createCacheFile(): Promise<void> {\n        await this.createFileDirectory();\n        // File is created only if it does not exist\n        const fileHandle = await fs.open(this.filePath, \"a\");\n        await fileHandle.close();\n        this.logger.info(`File created at ${this.filePath}`);\n    }\n\n    private async createFileDirectory(): Promise<void> {\n        try {\n            await fs.mkdir(dirname(this.filePath), {recursive: true});\n        } catch (err) {\n            if (err.code === Constants.EEXIST_ERROR) {\n                this.logger.info(`Directory ${dirname(this.filePath)}  already exists`);\n            } else {\n                throw PersistenceError.createFileSystemError(err.code, err.message);\n            }\n        }\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nexport interface DpapiBindings{\n    protectData(dataToEncrypt: Uint8Array, optionalEntropy: Uint8Array, scope: string): Uint8Array\n    unprotectData(encryptData: Uint8Array, optionalEntropy: Uint8Array, scope: string): Uint8Array\n}\n/* eslint-disable-next-line @typescript-eslint/no-var-requires, no-var, import/no-commonjs */\nexport var Dpapi: DpapiBindings = require(\"../build/Release/dpapi.node\");\nexport default Dpapi;\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\n/**\n * Specifies the scope of the data protection - either the current user or the local\n * machine.\n *\n * You do not need a key to protect or unprotect the data.\n * If you set the Scope to CurrentUser, only applications running on your credentials can\n * unprotect the data; however, that means that any application running on your credentials\n * can access the protected data. If you set the Scope to LocalMachine, any full-trust\n * application on the computer can unprotect, access, and modify the data.\n *\n */\nexport enum DataProtectionScope {\n    CurrentUser = \"CurrentUser\",\n    LocalMachine = \"LocalMachine\",\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { IPersistence } from \"./IPersistence\";\nimport { FilePersistence } from \"./FilePersistence\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Dpapi } from \"../Dpapi\";\nimport { DataProtectionScope } from \"./DataProtectionScope\";\nimport { Logger, LoggerOptions } from \"@azure/msal-common\";\nimport { dirname } from \"path\";\nimport { BasePersistence } from \"./BasePersistence\";\n\n/**\n * Uses CryptProtectData and CryptUnprotectData on Windows to encrypt and decrypt file contents.\n *\n * scope: Scope of the data protection. Either local user or the current machine\n * optionalEntropy: Password or other additional entropy used to encrypt the data\n */\nexport class FilePersistenceWithDataProtection extends BasePersistence implements IPersistence {\n\n    private filePersistence: FilePersistence;\n    private scope: DataProtectionScope;\n    private optionalEntropy: Uint8Array;\n\n    private constructor(scope: DataProtectionScope, optionalEntropy?: string) {\n        super();\n        this.scope = scope;\n        this.optionalEntropy = optionalEntropy ? Buffer.from(optionalEntropy, \"utf-8\") : null;\n    }\n\n    public static async create(\n        fileLocation: string,\n        scope: DataProtectionScope,\n        optionalEntropy?: string,\n        loggerOptions?: LoggerOptions): Promise<FilePersistenceWithDataProtection> {\n\n        const persistence = new FilePersistenceWithDataProtection(scope, optionalEntropy);\n        persistence.filePersistence = await FilePersistence.create(fileLocation, loggerOptions);\n        return persistence;\n    }\n\n    public async save(contents: string): Promise<void> {\n        try {\n            const encryptedContents = Dpapi.protectData(\n                Buffer.from(contents, \"utf-8\"),\n                this.optionalEntropy,\n                this.scope.toString());\n            await this.filePersistence.saveBuffer(encryptedContents);\n        } catch (err) {\n            throw PersistenceError.createFilePersistenceWithDPAPIError(err.message);\n        }\n    }\n\n    public async load(): Promise<string | null> {\n        try {\n            const encryptedContents = await this.filePersistence.loadBuffer();\n            if (typeof encryptedContents === \"undefined\" || !encryptedContents || 0 === encryptedContents.length) {\n                this.filePersistence.getLogger().info(\"Encrypted contents loaded from file were null or empty\");\n                return null;\n            }\n            return Dpapi.unprotectData(\n                encryptedContents,\n                this.optionalEntropy,\n                this.scope.toString()).toString();\n        } catch (err) {\n            throw PersistenceError.createFilePersistenceWithDPAPIError(err.message);\n        }\n    }\n\n    public async delete(): Promise<boolean> {\n        return this.filePersistence.delete();\n    }\n\n    public async reloadNecessary(lastSync: number): Promise<boolean> {\n        return this.filePersistence.reloadNecessary(lastSync);\n    }\n\n    public getFilePath(): string {\n        return this.filePersistence.getFilePath();\n    }\n\n    public getLogger(): Logger {\n        return this.filePersistence.getLogger();\n    }\n\n    public createForPersistenceValidation(): Promise<FilePersistenceWithDataProtection> {\n        const testCacheFileLocation = `${dirname(this.filePersistence.getFilePath())}/test.cache`;\n        return FilePersistenceWithDataProtection.create(testCacheFileLocation, DataProtectionScope.CurrentUser);\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { setPassword, getPassword, deletePassword } from \"keytar\";\nimport { FilePersistence } from \"./FilePersistence\";\nimport { IPersistence } from \"./IPersistence\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Logger, LoggerOptions } from \"@azure/msal-common\";\nimport { dirname } from \"path\";\nimport { BasePersistence } from \"./BasePersistence\";\n\n/**\n * Uses reads and writes passwords to macOS keychain\n *\n * serviceName: Identifier used as key for whatever value is stored\n * accountName: Account under which password should be stored\n */\nexport class KeychainPersistence extends BasePersistence implements IPersistence {\n\n    protected readonly serviceName;\n    protected readonly accountName;\n    private filePersistence: FilePersistence;\n\n    private constructor(serviceName: string, accountName: string) {\n        super();\n        this.serviceName = serviceName;\n        this.accountName = accountName;\n    }\n\n    public static async create(\n        fileLocation: string,\n        serviceName: string,\n        accountName: string,\n        loggerOptions?: LoggerOptions): Promise<KeychainPersistence> {\n\n        const persistence = new KeychainPersistence(serviceName, accountName);\n        persistence.filePersistence = await FilePersistence.create(fileLocation, loggerOptions);\n        return persistence;\n    }\n\n    public async save(contents: string): Promise<void> {\n        try {\n            await setPassword(this.serviceName, this.accountName, contents);\n        } catch (err) {\n            throw PersistenceError.createKeychainPersistenceError(err.message);\n        }\n        // Write dummy data to update file mtime\n        await this.filePersistence.save(\"{}\");\n    }\n\n    public async load(): Promise<string | null> {\n        try{\n            return await getPassword(this.serviceName, this.accountName);\n        } catch(err){\n            throw PersistenceError.createKeychainPersistenceError(err.message);\n        }\n    }\n\n    public async delete(): Promise<boolean> {\n        try {\n            await this.filePersistence.delete();\n            return await deletePassword(this.serviceName, this.accountName);\n        } catch (err) {\n            throw PersistenceError.createKeychainPersistenceError(err.message);\n        }\n    }\n\n    public async reloadNecessary(lastSync: number): Promise<boolean> {\n        return this.filePersistence.reloadNecessary(lastSync);\n    }\n\n    public getFilePath(): string {\n        return this.filePersistence.getFilePath();\n    }\n\n    public getLogger(): Logger {\n        return this.filePersistence.getLogger();\n    }\n   \n    public createForPersistenceValidation(): Promise<KeychainPersistence> {\n        const testCacheFileLocation = `${dirname(this.filePersistence.getFilePath())}/test.cache`;\n        return KeychainPersistence.create(\n            testCacheFileLocation, \n            \"persistenceValidationServiceName\", \"persistencValidationAccountName\"\n        );\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { setPassword, getPassword, deletePassword } from \"keytar\";\nimport { FilePersistence } from \"./FilePersistence\";\nimport { IPersistence } from \"./IPersistence\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { Logger, LoggerOptions } from \"@azure/msal-common\";\nimport { dirname } from \"path\";\nimport { BasePersistence } from \"./BasePersistence\";\n\n/**\n * Uses reads and writes passwords to Secret Service API/libsecret. Requires libsecret\n * to be installed.\n *\n * serviceName: Identifier used as key for whatever value is stored\n * accountName: Account under which password should be stored\n */\nexport class LibSecretPersistence extends BasePersistence implements IPersistence {\n\n    protected readonly serviceName;\n    protected readonly accountName;\n    private filePersistence: FilePersistence;\n\n    private constructor(serviceName: string, accountName: string) {\n        super();\n        this.serviceName = serviceName;\n        this.accountName = accountName;\n    }\n\n    public static async create(\n        fileLocation: string,\n        serviceName: string,\n        accountName: string,\n        loggerOptions?: LoggerOptions): Promise<LibSecretPersistence> {\n\n        const persistence = new LibSecretPersistence(serviceName, accountName);\n        persistence.filePersistence = await FilePersistence.create(fileLocation, loggerOptions);\n        return persistence;\n    }\n\n    public async save(contents: string): Promise<void> {\n        try {\n            await setPassword(this.serviceName, this.accountName, contents);\n        } catch (err) {\n            throw PersistenceError.createLibSecretError(err.message);\n        }\n        // Write dummy data to update file mtime\n        await this.filePersistence.save(\"{}\");\n    }\n\n    public async load(): Promise<string | null> {\n        try {\n            return await getPassword(this.serviceName, this.accountName);\n        } catch (err) {\n            throw PersistenceError.createLibSecretError(err.message);\n        }\n    }\n\n    public async delete(): Promise<boolean> {\n        try {\n            await this.filePersistence.delete();\n            return await deletePassword(this.serviceName, this.accountName);\n        } catch (err) {\n            throw PersistenceError.createLibSecretError(err.message);\n        }\n    }\n\n    public async reloadNecessary(lastSync: number): Promise<boolean> {\n        return this.filePersistence.reloadNecessary(lastSync);\n    }\n\n    public getFilePath(): string {\n        return this.filePersistence.getFilePath();\n    }\n\n    public getLogger(): Logger {\n        return this.filePersistence.getLogger();\n    }\n      \n    public createForPersistenceValidation(): Promise<LibSecretPersistence> {\n        const testCacheFileLocation = `${dirname(this.filePersistence.getFilePath())}/test.cache`;\n        return LibSecretPersistence.create(\n            testCacheFileLocation, \n            \"persistenceValidationServiceName\", \"persistencValidationAccountName\"\n        );\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport path from \"path\";\nimport { Constants, Platform } from \"./Constants\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { StringUtils } from \"@azure/msal-common\";\n\nexport class Environment {\n    static get homeEnvVar(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.HOME);\n    }\n    \n    static get lognameEnvVar(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LOGNAME);\n    }\n\n    static get userEnvVar(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.USER);\n    }\n\n    static get lnameEnvVar(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LNAME);\n    }\n\n    static get usernameEnvVar(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.USERNAME);\n    }\n\n    static getEnvironmentVariable(name: string): string {\n        return process.env[name];\n    }\n\n    static getEnvironmentPlatform(): string {\n        return process.platform;\n    }\n\n    static isWindowsPlatform(): boolean {\n        return this.getEnvironmentPlatform() === Platform.WINDOWS;\n    }\n\n    static isLinuxPlatform(): boolean {\n        return this.getEnvironmentPlatform() === Platform.LINUX;\n    }\n\n    static isMacPlatform(): boolean {\n        return this.getEnvironmentPlatform() === Platform.MACOS;\n    }\n\n    static isLinuxRootUser(): boolean {\n        return process.getuid() === Constants.LINUX_ROOT_USER_GUID;\n    }\n\n    static getUserRootDirectory(): string {\n        return !this.isWindowsPlatform ?\n            this.getUserHomeDirOnUnix() :\n            this.getUserHomeDirOnWindows();\n    }\n\n    static getUserHomeDirOnWindows(): string {\n        return this.getEnvironmentVariable(Constants.ENVIRONMENT.LOCAL_APPLICATION_DATA);\n    }\n\n    static getUserHomeDirOnUnix(): string | null {\n        if (this.isWindowsPlatform()) {\n            throw PersistenceError.createNotSupportedError(\n                \"Getting the user home directory for unix is not supported in windows\");\n        }\n\n        if (!StringUtils.isEmpty(this.homeEnvVar)) {\n            return this.homeEnvVar;\n        }\n\n        let username = null;\n        if (!StringUtils.isEmpty(this.lognameEnvVar)) {\n            username = this.lognameEnvVar;\n        } else if (!StringUtils.isEmpty(this.userEnvVar)) {\n            username = this.userEnvVar;\n        } else if (!StringUtils.isEmpty(this.lnameEnvVar)) {\n            username = this.lnameEnvVar;\n        } else if (!StringUtils.isEmpty(this.usernameEnvVar)) {\n            username = this.usernameEnvVar;\n        }\n\n        if (this.isMacPlatform()) {\n            return !StringUtils.isEmpty(username) ? path.join(\"/Users\", username) : null;\n        } else if (this.isLinuxPlatform()) {\n            if (this.isLinuxRootUser()) {\n                return \"/root\";\n            } else {\n                return !StringUtils.isEmpty(username) ? path.join(\"/home\", username) : null;\n            }\n        } else {\n            throw PersistenceError.createNotSupportedError(\n                \"Getting the user home directory for unix is not supported in windows\");\n        }\n\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { FilePersistenceWithDataProtection } from \"./FilePersistenceWithDataProtection\";\nimport { LibSecretPersistence } from \"./LibSecretPersistence\";\nimport { KeychainPersistence } from \"./KeychainPersistence\";\nimport { DataProtectionScope } from \"./DataProtectionScope\";\nimport { Environment } from \"../utils/Environment\";\nimport { IPersistence } from \"./IPersistence\";\nimport { FilePersistence } from \"./FilePersistence\";\nimport { PersistenceError } from \"../error/PersistenceError\";\nimport { IPersistenceConfiguration } from \"./IPersistenceConfiguration\";\n\nexport class PersistenceCreator {\n    static async createPersistence(config: IPersistenceConfiguration): Promise<IPersistence> {\n        let peristence: IPersistence;\n\n        // On Windows, uses a DPAPI encrypted file\n        if (Environment.isWindowsPlatform()) {\n            if (!config.cachePath || !config.dataProtectionScope) {\n                throw PersistenceError.createPersistenceNotValidatedError(\n                    \"Cache path and/or data protection scope not provided for the FilePersistenceWithDataProtection cache plugin\");\n            }\n\n            peristence = await FilePersistenceWithDataProtection.create(config.cachePath, DataProtectionScope.CurrentUser, undefined, config.loggerOptions);\n        }\n\n        // On Mac, uses keychain.\n        else if (Environment.isMacPlatform()) {\n            if (!config.cachePath || !config.serviceName || !config.accountName) {\n                throw PersistenceError.createPersistenceNotValidatedError(\n                    \"Cache path, service name and/or account name not provided for the KeychainPersistence cache plugin\");\n            }\n\n            peristence = await KeychainPersistence.create(config.cachePath, config.serviceName, config.accountName, config.loggerOptions);\n        }\n\n        // On Linux, uses  libsecret to store to secret service. Libsecret has to be installed.\n        else if (Environment.isLinuxPlatform()) {\n            if (!config.cachePath || !config.serviceName || !config.accountName) {\n                throw PersistenceError.createPersistenceNotValidatedError(\n                    \"Cache path, service name and/or account name not provided for the LibSecretPersistence cache plugin\");\n            }\n\n            peristence = await LibSecretPersistence.create(config.cachePath, config.serviceName, config.accountName, config.loggerOptions);\n        }\n\n        else {\n            throw PersistenceError.createNotSupportedError(\n                \"The current environment is not supported by msal-node-extensions yet.\");\n        }\n\n        // Initially suppress the error thrown during persistence verification to allow us to fallback to plain text\n        const isPersistenceVerified = await peristence.verifyPersistence().catch(() => false);\n\n        if (!isPersistenceVerified) {\n            if (Environment.isLinuxPlatform() && config.usePlaintextFileOnLinux) {\n                if (!config.cachePath) {\n                    throw PersistenceError.createPersistenceNotValidatedError(\n                        \"Cache path not provided for the FilePersistence cache plugin\");\n                }\n\n                peristence = await FilePersistence.create(config.cachePath, config.loggerOptions);\n\n                const isFilePersistenceVerified = await peristence.verifyPersistence();\n                if (isFilePersistenceVerified) {\n                    return peristence;\n                }\n            }\n\n            throw PersistenceError.createPersistenceNotVerifiedError(\"Persistence could not be verified\");\n        }\n\n        return peristence;\n    }\n}\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { AuthError } from \"@azure/msal-common\";\n\nexport class NativeAuthError extends AuthError {\n    public statusCode: number;\n    public tag: number;\n\n    constructor(errorStatus: string, errorContext: string, errorCode: number, errorTag: number) {\n        super(errorStatus, errorContext);\n        this.name = \"NativeAuthError\";\n        this.statusCode = errorCode;\n        this.tag = errorTag;\n        Object.setPrototypeOf(this, NativeAuthError.prototype);\n    }\n}\n","/* eslint-disable header/header */\nexport const name = \"@azure/msal-node-extensions\";\nexport const version = \"1.0.0-alpha.31\";\n","/*\n * Copyright (c) Microsoft Corporation. All rights reserved.\n * Licensed under the MIT License.\n */\n\nimport { AccountInfo, AuthenticationResult, AuthenticationScheme, ClientAuthError, ClientConfigurationError, Constants, IdTokenClaims, INativeBrokerPlugin, InteractionRequiredAuthError, Logger, LoggerOptions, NativeRequest, NativeSignOutRequest, PromptValue, ServerError } from \"@azure/msal-common\";\nimport { msalNodeRuntime, Account, AuthParameters, AuthResult, ErrorStatus, MsalRuntimeError, ReadAccountResult, DiscoverAccountsResult, SignOutResult, LogLevel as MsalRuntimeLogLevel} from \"@azure/msal-node-runtime\";\nimport { ErrorCodes } from \"../utils/Constants\";\nimport { NativeAuthError } from \"../error/NativeAuthError\";\nimport { version, name } from \"../packageMetadata\";\n\nexport class NativeBrokerPlugin implements INativeBrokerPlugin {\n    private logger: Logger;\n    isBrokerAvailable: boolean;\n    \n    constructor() {\n        const defaultLoggerOptions: LoggerOptions = {\n            loggerCallback: (): void => {\n                // Empty logger callback\n            },\n            piiLoggingEnabled: false\n        };\n        this.logger = new Logger(defaultLoggerOptions, name, version); // Default logger\n        this.isBrokerAvailable = msalNodeRuntime.StartupError ? false : true;\n    }\n\n    setLogger(loggerOptions: LoggerOptions): void {\n        this.logger = new Logger(loggerOptions, name, version);\n        const logCallback = (message: string, logLevel: MsalRuntimeLogLevel, containsPii: boolean) => {\n            switch(logLevel) {\n                case MsalRuntimeLogLevel.Trace:\n                    if (containsPii) {\n                        this.logger.tracePii(message);\n                    } else {\n                        this.logger.trace(message);\n                    }\n                    break;\n                case MsalRuntimeLogLevel.Debug: \n                    if (containsPii) {\n                        this.logger.tracePii(message);\n                    } else {\n                        this.logger.trace(message);\n                    }\n                    break;\n                case MsalRuntimeLogLevel.Info:\n                    if (containsPii) {\n                        this.logger.infoPii(message);\n                    } else {\n                        this.logger.info(message);\n                    }\n                    break;\n                case MsalRuntimeLogLevel.Warning:\n                    if (containsPii) {\n                        this.logger.warningPii(message);\n                    } else {\n                        this.logger.warning(message);\n                    }\n                    break;\n                case MsalRuntimeLogLevel.Error:\n                    if (containsPii) {\n                        this.logger.errorPii(message);\n                    } else {\n                        this.logger.error(message);\n                    }\n                    break;\n                case MsalRuntimeLogLevel.Fatal:\n                    if (containsPii) {\n                        this.logger.errorPii(message);\n                    } else {\n                        this.logger.error(message);\n                    }\n                    break;\n                default:\n                    if (containsPii) {\n                        this.logger.infoPii(message);\n                    } else {\n                        this.logger.info(message);\n                    }\n                    break; \n            }\n        };\n        try {\n            msalNodeRuntime.RegisterLogger(logCallback, loggerOptions.piiLoggingEnabled);\n        } catch (e) {\n            const wrappedError = this.wrapError(e);\n            if (wrappedError) {\n                throw wrappedError;\n            }\n        }\n    }\n\n    async getAccountById(accountId: string, correlationId: string): Promise<AccountInfo> {\n        this.logger.trace(\"NativeBrokerPlugin - getAccountById called\", correlationId);\n        const readAccountResult = await this.readAccountById(accountId, correlationId);\n        return this.generateAccountInfo(readAccountResult.account);\n    }\n\n    async getAllAccounts(clientId:string, correlationId: string): Promise<AccountInfo[]> {\n        this.logger.trace(\"NativeBrokerPlugin - getAllAccounts called\", correlationId);\n        return new Promise((resolve, reject) => {\n            const resultCallback = (result: DiscoverAccountsResult) => {\n                try {\n                    result.CheckError();\n                } catch (e) {\n                    const wrappedError = this.wrapError(e);\n                    if (wrappedError) {\n                        reject(wrappedError);\n                        return;\n                    }\n                }\n\n                const accountInfoResult = [];\n                result.accounts.forEach((account: Account) => {\n                    accountInfoResult.push(this.generateAccountInfo(account));\n                });\n                resolve(accountInfoResult);\n            };\n\n            try {\n                msalNodeRuntime.DiscoverAccountsAsync(clientId, correlationId, resultCallback);\n            } catch (e) {\n                const wrappedError = this.wrapError(e);\n                if (wrappedError) {\n                    reject(wrappedError);\n                }\n            }\n        });\n    }\n\n    async acquireTokenSilent(request: NativeRequest): Promise<AuthenticationResult> {\n        this.logger.trace(\"NativeBrokerPlugin - acquireTokenSilent called\", request.correlationId);\n        const authParams = this.generateRequestParameters(request);\n        const account = await this.getAccount(request);\n\n        return new Promise((resolve: (value: AuthenticationResult) => void, reject) => {\n            const resultCallback = (result: AuthResult) => {\n                try {\n                    result.CheckError();\n                } catch (e) {\n                    const wrappedError = this.wrapError(e);\n                    if (wrappedError) {\n                        reject(wrappedError);\n                        return;\n                    }\n                }\n                const authenticationResult = this.getAuthenticationResult(request, result);\n                resolve(authenticationResult);\n            };\n\n            try {\n                if (account) {\n                    msalNodeRuntime.AcquireTokenSilentlyAsync(authParams, request.correlationId, account, resultCallback);\n                } else {\n                    msalNodeRuntime.SignInSilentlyAsync(authParams, request.correlationId, resultCallback);\n                }\n            } catch (e) {\n                const wrappedError = this.wrapError(e);\n                if (wrappedError) {\n                    reject(wrappedError);\n                }\n            }\n        });\n    }\n\n    async acquireTokenInteractive(request: NativeRequest, providedWindowHandle?: Buffer): Promise<AuthenticationResult> {\n        this.logger.trace(\"NativeBrokerPlugin - acquireTokenInteractive called\", request.correlationId);\n        const authParams = this.generateRequestParameters(request);\n        const account = await this.getAccount(request);\n        const windowHandle = providedWindowHandle || Buffer.from([0]);\n\n        return new Promise((resolve: (value: AuthenticationResult) => void, reject) => {\n            const resultCallback = (result: AuthResult) => {\n                try {\n                    result.CheckError();\n                } catch (e) {\n                    const wrappedError = this.wrapError(e);\n                    if (wrappedError) {\n                        reject(wrappedError);\n                        return;\n                    }\n                }\n                const authenticationResult = this.getAuthenticationResult(request, result);\n                resolve(authenticationResult);\n            };\n\n            try {\n                switch (request.prompt) {\n                    case PromptValue.LOGIN:\n                    case PromptValue.SELECT_ACCOUNT:\n                    case PromptValue.CREATE:\n                        this.logger.info(\"Calling native interop SignInInteractively API\", request.correlationId);\n                        const loginHint = request.loginHint || Constants.EMPTY_STRING;\n                        msalNodeRuntime.SignInInteractivelyAsync(windowHandle, authParams, request.correlationId, loginHint, resultCallback);\n                        break;\n                    case PromptValue.NONE:\n                        if (account) {\n                            this.logger.info(\"Calling native interop AcquireTokenSilently API\", request.correlationId);\n                            msalNodeRuntime.AcquireTokenSilentlyAsync(authParams, request.correlationId, account, resultCallback);\n                        } else {\n                            this.logger.info(\"Calling native interop SignInSilently API\", request.correlationId);\n                            msalNodeRuntime.SignInSilentlyAsync(authParams, request.correlationId, resultCallback);\n                        }\n                        break;\n                    default:\n                        if (account) {\n                            this.logger.info(\"Calling native interop AcquireTokenInteractively API\", request.correlationId);\n                            msalNodeRuntime.AcquireTokenInteractivelyAsync(windowHandle, authParams, request.correlationId, account, resultCallback);\n                        } else {\n                            this.logger.info(\"Calling native interop SignIn API\", request.correlationId);\n                            const loginHint = request.loginHint || Constants.EMPTY_STRING;\n                            msalNodeRuntime.SignInAsync(windowHandle, authParams, request.correlationId, loginHint, resultCallback);\n                        }\n                        break;\n                }\n            } catch (e) {\n                const wrappedError = this.wrapError(e);\n                if (wrappedError) {\n                    reject(wrappedError);\n                }\n            }\n        });\n    }\n\n    async signOut(request: NativeSignOutRequest): Promise<void> {\n        this.logger.trace(\"NativeBrokerPlugin - signOut called\", request.correlationId);\n\n        const account = await this.getAccount(request);\n        if (!account) {\n            throw ClientAuthError.createNoAccountFoundError();\n        }\n\n        return new Promise((resolve, reject) => {\n            const resultCallback = (result: SignOutResult) => {\n                try {\n                    result.CheckError();\n                } catch (e) {\n                    const wrappedError = this.wrapError(e);\n                    if (wrappedError) {\n                        reject(wrappedError);\n                        return;\n                    }\n                }\n                resolve();\n            };\n\n            try {\n                msalNodeRuntime.SignOutSilentlyAsync(request.clientId, request.correlationId, account, resultCallback);\n            } catch (e) {\n                const wrappedError = this.wrapError(e);\n                if (wrappedError) {\n                    reject(wrappedError);\n                }\n            }\n        });\n    }\n\n    private async getAccount(request: NativeRequest | NativeSignOutRequest): Promise<Account|null> {\n        if (request.accountId) {\n            const readAccountResult = await this.readAccountById(request.accountId, request.correlationId);\n            return readAccountResult.account;\n        }\n        return null;\n    }\n\n    private async readAccountById(accountId: string, correlationId: string): Promise<ReadAccountResult> {\n        this.logger.trace(\"NativeBrokerPlugin - readAccountById called\", correlationId);\n\n        return new Promise((resolve, reject) => {\n            const resultCallback = (result: ReadAccountResult) => {\n                try {\n                    result.CheckError();\n                } catch (e) {\n                    const wrappedError = this.wrapError(e);\n                    if (wrappedError) {\n                        reject(wrappedError);\n                        return;\n                    }\n                }\n                resolve(result);\n            };\n\n            try {\n                msalNodeRuntime.ReadAccountByIdAsync(accountId, correlationId, resultCallback);\n            } catch (e) {\n                const wrappedError = this.wrapError(e);\n                if (wrappedError) {\n                    reject(wrappedError);\n                }\n            }\n        });\n    }\n\n    private generateRequestParameters(request: NativeRequest): AuthParameters {\n        this.logger.trace(\"NativeBrokerPlugin - generateRequestParameters called\", request.correlationId);\n        const authParams = new msalNodeRuntime.AuthParameters();\n\n        try{\n            authParams.CreateAuthParameters(request.clientId, request.authority);\n            authParams.SetRedirectUri(request.redirectUri);\n            authParams.SetRequestedScopes(request.scopes.join(\" \"));\n            \n            if (request.claims) {\n                authParams.SetDecodedClaims(request.claims);\n            }\n    \n            if (request.authenticationScheme === AuthenticationScheme.POP) {\n                if (!request.resourceRequestMethod || !request.resourceRequestUri || !request.shrNonce) {\n                    throw new Error(\"Authentication Scheme set to POP but one or more of the following parameters are missing: resourceRequestMethod, resourceRequestUri, shrNonce\");\n                }\n                const resourceUrl = new URL(request.resourceRequestUri);\n                authParams.SetPopParams(request.resourceRequestMethod, resourceUrl.host, resourceUrl.pathname, request.shrNonce);\n            }\n            \n            if (request.extraParameters) {\n                Object.keys(request.extraParameters).forEach((key) => {\n                    authParams.SetAdditionalParameter(key, request.extraParameters[key]);\n                });\n            }\n        } catch (e) {\n            const wrappedError = this.wrapError(e);\n            if (wrappedError) {\n                throw wrappedError;\n            }\n        }\n\n        return authParams;\n    }\n\n    private getAuthenticationResult(request: NativeRequest, authResult: AuthResult): AuthenticationResult {\n        this.logger.trace(\"NativeBrokerPlugin - getAuthenticationResult called\", request.correlationId);\n        \n        let fromCache: boolean;\n        try {\n            const telemetryJSON = JSON.parse(authResult.telemetryData);\n            fromCache = !!telemetryJSON[\"is_cache\"];\n        } catch (e) {\n            this.logger.error(\"NativeBrokerPlugin: getAuthenticationResult - Error parsing telemetry data. Could not determine if response came from cache.\", request.correlationId);\n        }\n\n        let idTokenClaims: IdTokenClaims;\n        try {\n            idTokenClaims = JSON.parse(authResult.idToken);\n        } catch (e) {\n            throw new Error(\"Unable to parse idToken claims\");\n        }\n\n        const accountInfo = this.generateAccountInfo(authResult.account, idTokenClaims);\n\n        const result: AuthenticationResult = {\n            authority: request.authority,\n            uniqueId: idTokenClaims.oid || idTokenClaims.sub || \"\",\n            tenantId: idTokenClaims.tid || \"\",\n            scopes: authResult.grantedScopes.split(\" \"),\n            account: accountInfo,\n            idToken: authResult.rawIdToken,\n            idTokenClaims: idTokenClaims,\n            accessToken: authResult.accessToken,\n            fromCache: fromCache,\n            expiresOn: new Date(authResult.expiresOn * 1000),\n            tokenType: authResult.isPopAuthorization ? AuthenticationScheme.POP : AuthenticationScheme.BEARER,\n            correlationId: request.correlationId,\n            fromNativeBroker: true\n        };\n        return result;\n    }\n\n    private generateAccountInfo(account: Account, idTokenClaims?: IdTokenClaims): AccountInfo {\n        this.logger.trace(\"NativeBrokerPlugin - generateAccountInfo called\");\n\n        const accountInfo: AccountInfo = {\n            homeAccountId: account.homeAccountId,\n            environment: account.environment,\n            tenantId: account.realm,\n            username: account.username,\n            localAccountId: account.localAccountId,\n            name: account.displayName,\n            idTokenClaims: idTokenClaims,\n            nativeAccountId: account.accountId\n        };\n        return accountInfo;\n    }\n\n    private isMsalRuntimeError(result: Object): boolean {\n        return result.hasOwnProperty(\"errorCode\") ||\n               result.hasOwnProperty(\"errorStatus\") ||\n               result.hasOwnProperty(\"errorContext\") ||\n               result.hasOwnProperty(\"errorTag\");\n    }\n\n    private wrapError(error: Object): NativeAuthError | Object | null {\n        if (this.isMsalRuntimeError(error)) {\n            const { errorCode, errorStatus, errorContext, errorTag } = error as MsalRuntimeError;\n            switch (errorStatus) {\n                case ErrorStatus.InteractionRequired:\n                case ErrorStatus.AccountUnusable:\n                    return new InteractionRequiredAuthError(ErrorCodes.INTERATION_REQUIRED_ERROR_CODE, errorContext);\n                case ErrorStatus.NoNetwork:\n                case ErrorStatus.NetworkTemporarilyUnavailable:\n                    return ClientAuthError.createNoNetworkConnectivityError();\n                case ErrorStatus.ServerTemporarilyUnavailable:\n                    return new ServerError(ErrorCodes.SERVER_UNAVAILABLE, errorContext);\n                case ErrorStatus.UserCanceled:\n                    return ClientAuthError.createUserCanceledError();\n                case ErrorStatus.AuthorityUntrusted:\n                    return ClientConfigurationError.createUntrustedAuthorityError();\n                case ErrorStatus.UserSwitched:\n                    // Not an error case, if there's customer demand we can surface this as a response property\n                    return null;\n                case ErrorStatus.AccountNotFound:\n                    return ClientAuthError.createNoAccountFoundError();\n                default:\n                    return new NativeAuthError(ErrorStatus[errorStatus], errorContext, errorCode, errorTag);\n            }\n        }\n\n        return error;\n    }\n}\n"],"names":["Constants","EEXIST_ERROR","ENOENT_ERROR","EPERM_ERROR","DEFAULT_SERVICE_NAME","PERSISTENCE_TEST_DATA","LINUX_ROOT_USER_GUID","ENVIRONMENT","HOME","LOGNAME","USER","LNAME","USERNAME","PLATFORM","LOCAL_APPLICATION_DATA","DEFAULT_CACHE_FILE_NAME","Platform","ErrorCodes","PersistenceError","Error","constructor","errorCode","errorMessage","errorString","Object","setPrototypeOf","prototype","name","createFileSystemError","createLibSecretError","createKeychainPersistenceError","createFilePersistenceWithDPAPIError","createCrossPlatformLockError","createCachePersistenceError","createNotSupportedError","createPersistenceNotVerifiedError","createPersistenceNotValidatedError","CrossPlatformLock","lockFilePath","logger","lockOptions","retryNumber","retryDelay","lock","tryCount","info","pid","lockFileHandle","fs","open","write","toString","err","code","sleep","error","message","unlock","unlink","close","warning","ms","Promise","resolve","setTimeout","PersistenceCachePlugin","persistence","getLogger","getFilePath","crossPlatformLock","lastSync","currentCache","beforeCacheAccess","cacheContext","reloadNecessary","cacheHasChanged","verbose","load","Date","getTime","tokenCache","deserialize","afterCacheAccess","serialize","save","BasePersistence","verifyPersistence","persistenceValidator","createForPersistenceValidation","retrievedDummyData","delete","e","FilePersistence","create","fileLocation","loggerOptions","filePersistence","filePath","Logger","createDefaultLoggerOptions","createCacheFile","contents","writeFile","saveBuffer","readFile","loadBuffer","timeLastModified","testCacheFileLocation","dirname","loggerCallback","piiLoggingEnabled","logLevel","LogLevel","Info","stats","stat","mtime","createFileDirectory","fileHandle","mkdir","recursive","Dpapi","require","DataProtectionScope","FilePersistenceWithDataProtection","scope","optionalEntropy","Buffer","from","encryptedContents","protectData","length","unprotectData","CurrentUser","KeychainPersistence","serviceName","accountName","setPassword","getPassword","deletePassword","LibSecretPersistence","Environment","homeEnvVar","getEnvironmentVariable","lognameEnvVar","userEnvVar","lnameEnvVar","usernameEnvVar","process","env","getEnvironmentPlatform","platform","isWindowsPlatform","WINDOWS","isLinuxPlatform","LINUX","isMacPlatform","MACOS","isLinuxRootUser","getuid","getUserRootDirectory","getUserHomeDirOnUnix","getUserHomeDirOnWindows","StringUtils","isEmpty","username","path","join","PersistenceCreator","createPersistence","config","peristence","cachePath","dataProtectionScope","undefined","isPersistenceVerified","catch","usePlaintextFileOnLinux","isFilePersistenceVerified","NativeAuthError","AuthError","errorStatus","errorContext","errorTag","statusCode","tag","version","NativeBrokerPlugin","defaultLoggerOptions","isBrokerAvailable","msalNodeRuntime","StartupError","setLogger","logCallback","containsPii","MsalRuntimeLogLevel","Trace","tracePii","trace","Debug","infoPii","Warning","warningPii","errorPii","Fatal","RegisterLogger","wrappedError","wrapError","getAccountById","accountId","correlationId","readAccountResult","readAccountById","generateAccountInfo","account","getAllAccounts","clientId","reject","resultCallback","result","CheckError","accountInfoResult","accounts","forEach","push","DiscoverAccountsAsync","acquireTokenSilent","request","authParams","generateRequestParameters","getAccount","authenticationResult","getAuthenticationResult","AcquireTokenSilentlyAsync","SignInSilentlyAsync","acquireTokenInteractive","providedWindowHandle","windowHandle","prompt","PromptValue","LOGIN","SELECT_ACCOUNT","CREATE","loginHint","EMPTY_STRING","SignInInteractivelyAsync","NONE","AcquireTokenInteractivelyAsync","SignInAsync","signOut","ClientAuthError","createNoAccountFoundError","SignOutSilentlyAsync","ReadAccountByIdAsync","AuthParameters","CreateAuthParameters","authority","SetRedirectUri","redirectUri","SetRequestedScopes","scopes","claims","SetDecodedClaims","authenticationScheme","AuthenticationScheme","POP","resourceRequestMethod","resourceRequestUri","shrNonce","resourceUrl","URL","SetPopParams","host","pathname","extraParameters","keys","key","SetAdditionalParameter","authResult","fromCache","telemetryJSON","JSON","parse","telemetryData","idTokenClaims","idToken","accountInfo","uniqueId","oid","sub","tenantId","tid","grantedScopes","split","rawIdToken","accessToken","expiresOn","tokenType","isPopAuthorization","BEARER","fromNativeBroker","homeAccountId","environment","realm","localAccountId","displayName","nativeAccountId","isMsalRuntimeError","hasOwnProperty","ErrorStatus","InteractionRequired","AccountUnusable","InteractionRequiredAuthError","INTERATION_REQUIRED_ERROR_CODE","NoNetwork","NetworkTemporarilyUnavailable","createNoNetworkConnectivityError","ServerTemporarilyUnavailable","ServerError","SERVER_UNAVAILABLE","UserCanceled","createUserCanceledError","AuthorityUntrusted","ClientConfigurationError","createUntrustedAuthorityError","UserSwitched","AccountNotFound"],"mappings":";;;;;;;;;;;;;;AAAA;;;;AAKO,MAAMA,SAAS,GAAG;;;;EAKrBC,YAAY,EAAE,QAAQ;;;;;;EAOtBC,YAAY,EAAE,QAAQ;;;;;EAMtBC,WAAW,EAAE,OAAO;;;;EAKpBC,oBAAoB,EAAE,sBAAsB;;;;EAK5CC,qBAAqB,EAAE,uDAAuD;;;;EAK9EC,oBAAoB,EAAE,CAAC;;;;EAKvBC,WAAW,EAAE;IACTC,IAAI,EAAE,MAAM;IACZC,OAAO,EAAE,SAAS;IAClBC,IAAI,EAAE,MAAM;IACZC,KAAK,EAAE,OAAO;IACdC,QAAQ,EAAE,UAAU;IACpBC,QAAQ,EAAE,UAAU;IACpBC,sBAAsB,EAAE;GAC3B;;EAGDC,uBAAuB,EAAE;CAC5B;AAED,IAAYC,QAIX;AAJD,WAAYA,QAAQ;EAChBA,6BAAiB;EACjBA,2BAAe;EACfA,4BAAgB;AACpB,CAAC,EAJWA,QAAQ,KAARA,QAAQ;AAMpB,IAAYC,UAGX;AAHD,WAAYA,UAAU;EAClBA,qEAAuD;EACvDA,uDAAyC;AAC7C,CAAC,EAHWA,UAAU,KAAVA,UAAU;;AC/DtB;;;;AAKA;;;AAGA,MAAaC,gBAAiB,SAAQC,KAAK;EAOvCC,YAAYC,SAAiB,EAAEC,YAAoB;IAC/C,MAAMC,WAAW,GAAGD,YAAY,MAAMD,cAAcC,cAAc,GAAGD,SAAS;IAC9E,KAAK,CAACE,WAAW,CAAC;IAClBC,MAAM,CAACC,cAAc,CAAC,IAAI,EAAEP,gBAAgB,CAACQ,SAAS,CAAC;IAEvD,IAAI,CAACL,SAAS,GAAGA,SAAS;IAC1B,IAAI,CAACC,YAAY,GAAGA,YAAY;IAChC,IAAI,CAACK,IAAI,GAAG,kBAAkB;;;;;EAMlC,OAAOC,qBAAqBA,CAACP,SAAiB,EAAEC,YAAoB;IAChE,OAAO,IAAIJ,gBAAgB,CAACG,SAAS,EAAEC,YAAY,CAAC;;;;;;EAOxD,OAAOO,oBAAoBA,CAACP,YAAoB;IAC5C,OAAO,IAAIJ,gBAAgB,CAAC,mBAAmB,EAAEI,YAAY,CAAC;;;;;EAMlE,OAAOQ,8BAA8BA,CAACR,YAAoB;IACtD,OAAO,IAAIJ,gBAAgB,CAAC,eAAe,EAAEI,YAAY,CAAC;;;;;EAM9D,OAAOS,mCAAmCA,CAACT,YAAoB;IAC3D,OAAO,IAAIJ,gBAAgB,CAAC,yBAAyB,EAAEI,YAAY,CAAC;;;;;EAMxE,OAAOU,4BAA4BA,CAACV,YAAoB;IACpD,OAAO,IAAIJ,gBAAgB,CAAC,wBAAwB,EAAEI,YAAY,CAAC;;;;;;;;EASvE,OAAOW,2BAA2BA,CAACX,YAAoB;IACnD,OAAO,IAAIJ,gBAAgB,CAAC,uBAAuB,EAAEI,YAAY,CAAC;;;;;;;;EAStE,OAAOY,uBAAuBA,CAACZ,YAAoB;IAC/C,OAAO,IAAIJ,gBAAgB,CAAC,mBAAmB,EAAEI,YAAY,CAAC;;;;;;;;EASlE,OAAOa,iCAAiCA,CAACb,YAAoB;IACzD,OAAO,IAAIJ,gBAAgB,CAAC,6BAA6B,EAAEI,YAAY,CAAC;;;;;;;;EAS5E,OAAOc,kCAAkCA,CAACd,YAAoB;IAC1D,OAAO,IAAIJ,gBAAgB,CAAC,8BAA8B,EAAEI,YAAY,CAAC;;;;AClGjF;;;;AAKA,AAOA;;;AAGA,MAAae,iBAAiB;EAS1BjB,YAAYkB,YAAoB,EAAEC,MAAc,EAAEC,WAAsC;IACpF,IAAI,CAACF,YAAY,GAAGA,YAAY;IAChC,IAAI,CAACG,WAAW,GAAGD,WAAW,GAAGA,WAAW,CAACC,WAAW,GAAG,GAAG;IAC9D,IAAI,CAACC,UAAU,GAAGF,WAAW,GAAGA,WAAW,CAACE,UAAU,GAAG,GAAG;IAC5D,IAAI,CAACH,MAAM,GAAGA,MAAM;;;;;;;EAQjB,MAAMI,IAAIA;IACb,KAAK,IAAIC,QAAQ,GAAG,CAAC,EAAEA,QAAQ,GAAG,IAAI,CAACH,WAAW,EAAEG,QAAQ,EAAE,EAAE;MAC5D,IAAI;QACA,IAAI,CAACL,MAAM,CAACM,IAAI,QAAQC,sCAA4B,CAAC;QACrD,IAAI,CAACC,cAAc,GAAG,MAAMC,WAAE,CAACC,IAAI,CAAC,IAAI,CAACX,YAAY,EAAE,KAAK,CAAC;QAE7D,IAAI,CAACC,MAAM,CAACM,IAAI,QAAQC,6BAAmB,CAAC;QAC5C,MAAM,IAAI,CAACC,cAAc,CAACG,KAAK,CAACJ,aAAG,CAACK,QAAQ,EAAE,CAAC;QAC/C;OACH,CAAC,OAAOC,GAAG,EAAE;QACV,IAAIA,GAAG,CAACC,IAAI,KAAKrD,SAAS,CAACC,YAAY,IAAImD,GAAG,CAACC,IAAI,KAAKrD,SAAS,CAACG,WAAW,EAAE;UAC3E,IAAI,CAACoC,MAAM,CAACM,IAAI,CAACO,GAAG,CAAC;UACrB,MAAM,IAAI,CAACE,KAAK,CAAC,IAAI,CAACZ,UAAU,CAAC;SACpC,MAAM;UACH,IAAI,CAACH,MAAM,CAACgB,KAAK,IAAIT,+DAAqDM,GAAG,CAACI,SAAS,CAAC;UACxF,MAAMtC,gBAAgB,CAACc,4BAA4B,CAACoB,GAAG,CAACI,OAAO,CAAC;;;;IAI5E,IAAI,CAACjB,MAAM,CAACgB,KAAK,IAAIT,2FAAiF,CAAC;IACvG,MAAM5B,gBAAgB,CAACc,4BAA4B,CAC/C,qEAAqE,CAAC;;;;;EAMvE,MAAMyB,MAAMA;IACf,IAAI;MACA,IAAG,IAAI,CAACV,cAAc,EAAC;;QAEnB,MAAMC,WAAE,CAACU,MAAM,CAAC,IAAI,CAACpB,YAAY,CAAC;QAClC,MAAM,IAAI,CAACS,cAAc,CAACY,KAAK,EAAE;QACjC,IAAI,CAACpB,MAAM,CAACM,IAAI,CAAC,kBAAkB,CAAC;OACvC,MAAM;QACH,IAAI,CAACN,MAAM,CAACqB,OAAO,CAAC,kEAAkE,CAAC;;KAE9F,CAAC,OAAOR,GAAG,EAAE;MACV,IAAIA,GAAG,CAACC,IAAI,KAAKrD,SAAS,CAACE,YAAY,EAAE;QACrC,IAAI,CAACqC,MAAM,CAACM,IAAI,CAAC,6CAA6C,CAAC;OAClE,MAAM;QACH,IAAI,CAACN,MAAM,CAACgB,KAAK,IAAIT,+DAAqDM,GAAG,CAACI,SAAS,CAAC;QACxF,MAAMtC,gBAAgB,CAACc,4BAA4B,CAACoB,GAAG,CAACI,OAAO,CAAC;;;;EAKpEF,KAAKA,CAACO,EAAE;IACZ,OAAO,IAAIC,OAAO,CAAEC,OAAO;MACvBC,UAAU,CAACD,OAAO,EAAEF,EAAE,CAAC;KAC1B,CAAC;;;;ACtFV;;;;AAMA,AAKA;;;;;;;;;;;;;AAaA,MAAaI,sBAAsB;EAW/B7C,YAAY8C,WAAyB,EAAE1B,WAAsC;IACzE,IAAI,CAAC0B,WAAW,GAAGA,WAAW;;IAG9B,IAAI,CAAC3B,MAAM,GAAG2B,WAAW,CAACC,SAAS,EAAE;;IAGrC,IAAI,CAAC7B,YAAY,MAAM,IAAI,CAAC4B,WAAW,CAACE,WAAW,aAAa;IAChE,IAAI,CAACC,iBAAiB,GAAG,IAAIhC,iBAAiB,CAAC,IAAI,CAACC,YAAY,EAAE,IAAI,CAACC,MAAM,EAAEC,WAAW,CAAC;;IAG3F,IAAI,CAAC8B,QAAQ,GAAG,CAAC;IACjB,IAAI,CAACC,YAAY,GAAG,IAAI;;;;;;;;;;EAWrB,MAAMC,iBAAiBA,CAACC,YAA+B;IAC1D,IAAI,CAAClC,MAAM,CAACM,IAAI,CAAC,+BAA+B,CAAC;IACjD,MAAM6B,eAAe,GAAG,MAAM,IAAI,CAACR,WAAW,CAACQ,eAAe,CAAC,IAAI,CAACJ,QAAQ,CAAC;IAC7E,IAAI,CAACI,eAAe,IAAI,IAAI,CAACH,YAAY,KAAK,IAAI,EAAE;MAChD,IAAIE,YAAY,CAACE,eAAe,EAAE;QAC9B,IAAI,CAACpC,MAAM,CAACqC,OAAO,CAAC,2BAA2B,CAAC;QAChD,MAAM,IAAI,CAACP,iBAAiB,CAAC1B,IAAI,EAAE;;MAEvC;;IAEJ,IAAI;MACA,IAAI,CAACJ,MAAM,CAACM,IAAI,sCAAsC,IAAI,CAACyB,UAAU,CAAC;MACtE,MAAM,IAAI,CAACD,iBAAiB,CAAC1B,IAAI,EAAE;MAEnC,IAAI,CAAC4B,YAAY,GAAG,MAAM,IAAI,CAACL,WAAW,CAACW,IAAI,EAAE;MACjD,IAAI,CAACP,QAAQ,GAAG,IAAIQ,IAAI,EAAE,CAACC,OAAO,EAAE;MACpCN,YAAY,CAACO,UAAU,CAACC,WAAW,CAAC,IAAI,CAACV,YAAY,CAAC;MAEtD,IAAI,CAAChC,MAAM,CAACM,IAAI,+BAA+B,IAAI,CAACyB,UAAU,CAAC;KAClE,SAAS;MACN,IAAI,CAACG,YAAY,CAACE,eAAe,EAAE;QAC/B,MAAM,IAAI,CAACN,iBAAiB,CAACZ,MAAM,EAAE;QACrC,IAAI,CAAClB,MAAM,CAACM,IAAI,QAAQC,6BAAmB,CAAC;OAC/C,MAAM;QACH,IAAI,CAACP,MAAM,CAACM,IAAI,QAAQC,sDAA4C,CAAC;;;;;;;EAQ1E,MAAMoC,gBAAgBA,CAACT,YAA+B;IACzD,IAAI,CAAClC,MAAM,CAACM,IAAI,CAAC,8BAA8B,CAAC;IAChD,IAAI;MACA,IAAI4B,YAAY,CAACE,eAAe,EAAE;QAC9B,IAAI,CAACpC,MAAM,CAACM,IAAI,CAAC,kEAAkE,CAAC;QACpF,IAAI,CAAC0B,YAAY,GAAGE,YAAY,CAACO,UAAU,CAACG,SAAS,EAAE;QACvD,MAAM,IAAI,CAACjB,WAAW,CAACkB,IAAI,CAAC,IAAI,CAACb,YAAY,CAAC;OACjD,MAAM;QACH,IAAI,CAAChC,MAAM,CAACM,IAAI,CAAC,oEAAoE,CAAC;;KAE7F,SAAS;MACN,MAAM,IAAI,CAACwB,iBAAiB,CAACZ,MAAM,EAAE;MACrC,IAAI,CAAClB,MAAM,CAACM,IAAI,QAAQC,8CAAoC,CAAC;;;;;ACtGzE;;;;AAKA,MAIsBuC,eAAe;EAG1B,MAAMC,iBAAiBA;;IAE1B,MAAMC,oBAAoB,GAAG,MAAM,IAAI,CAACC,8BAA8B,EAAE;IAExE,IAAI;MACA,MAAMD,oBAAoB,CAACH,IAAI,CAACpF,SAAS,CAACK,qBAAqB,CAAC;MAEhE,MAAMoF,kBAAkB,GAAG,MAAMF,oBAAoB,CAACV,IAAI,EAAE;MAE5D,IAAI,CAACY,kBAAkB,EAAE;QACrB,MAAMvE,gBAAgB,CAACe,2BAA2B,CAC9C,uEAAuE,GACvE;2DACuC,CAC1C;;MAGL,IAAIwD,kBAAkB,KAAKzF,SAAS,CAACK,qBAAqB,EAAE;QACxD,MAAMa,gBAAgB,CAACe,2BAA2B,2CACJjC,SAAS,CAACK;qCACnCoF,oBAAoB,CACxC;;MAEL,MAAMF,oBAAoB,CAACG,MAAM,EAAE;MACnC,OAAO,IAAI;KACd,CAAC,OAAOC,CAAC,EAAE;MACR,MAAMzE,gBAAgB,CAACe,2BAA2B,gDAAgD0D,GAAG,CAAC;;;;;ACtClH;;;;AAKA,AAQA;;;;;;;AAOA,MAAaC,eAAgB,SAAQP,eAAe;EAKzC,aAAaQ,MAAMA,CAACC,YAAoB,EAAEC,aAA6B;IAC1E,MAAMC,eAAe,GAAG,IAAIJ,eAAe,EAAE;IAC7CI,eAAe,CAACC,QAAQ,GAAGH,YAAY;IACvCE,eAAe,CAACzD,MAAM,GAAG,IAAI2D,iBAAM,CAACH,aAAa,IAAIH,eAAe,CAACO,0BAA0B,EAAE,CAAC;IAClG,MAAMH,eAAe,CAACI,eAAe,EAAE;IACvC,OAAOJ,eAAe;;EAGnB,MAAMZ,IAAIA,CAACiB,QAAgB;IAC9B,IAAI;MACA,MAAMrD,WAAE,CAACsD,SAAS,CAAC,IAAI,CAAClC,WAAW,EAAE,EAAEiC,QAAQ,EAAE,OAAO,CAAC;KAC5D,CAAC,OAAOjD,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACU,qBAAqB,CAACwB,GAAG,CAACC,IAAI,EAAED,GAAG,CAACI,OAAO,CAAC;;;EAIpE,MAAM+C,UAAUA,CAACF,QAAoB;IACxC,IAAI;MACA,MAAMrD,WAAE,CAACsD,SAAS,CAAC,IAAI,CAAClC,WAAW,EAAE,EAAEiC,QAAQ,CAAC;KACnD,CAAC,OAAOjD,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACU,qBAAqB,CAACwB,GAAG,CAACC,IAAI,EAAED,GAAG,CAACI,OAAO,CAAC;;;EAIpE,MAAMqB,IAAIA;IACb,IAAI;MACA,OAAO,MAAM7B,WAAE,CAACwD,QAAQ,CAAC,IAAI,CAACpC,WAAW,EAAE,EAAE,OAAO,CAAC;KACxD,CAAC,OAAOhB,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACU,qBAAqB,CAACwB,GAAG,CAACC,IAAI,EAAED,GAAG,CAACI,OAAO,CAAC;;;EAIpE,MAAMiD,UAAUA;IACnB,IAAI;MACA,OAAO,MAAMzD,WAAE,CAACwD,QAAQ,CAAC,IAAI,CAACpC,WAAW,EAAE,CAAC;KAC/C,CAAC,OAAOhB,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACU,qBAAqB,CAACwB,GAAG,CAACC,IAAI,EAAED,GAAG,CAACI,OAAO,CAAC;;;EAIpE,MAAMkC,MAAMA;IACf,IAAI;MACA,MAAM1C,WAAE,CAACU,MAAM,CAAC,IAAI,CAACU,WAAW,EAAE,CAAC;MACnC,OAAO,IAAI;KACd,CAAC,OAAOhB,GAAG,EAAE;MACV,IAAIA,GAAG,CAACC,IAAI,KAAKrD,SAAS,CAACE,YAAY,EAAE;;QAErC,IAAI,CAACqC,MAAM,CAACqB,OAAO,CAAC,uDAAuD,CAAC;QAC5E,OAAO,KAAK;;MAEhB,MAAM1C,gBAAgB,CAACU,qBAAqB,CAACwB,GAAG,CAACC,IAAI,EAAED,GAAG,CAACI,OAAO,CAAC;;;EAIpEY,WAAWA;IACd,OAAO,IAAI,CAAC6B,QAAQ;;EAGjB,MAAMvB,eAAeA,CAACJ,QAAgB;IACzC,OAAOA,QAAQ,IAAG,MAAM,IAAI,CAACoC,gBAAgB,EAAE;;EAG5CvC,SAASA;IACZ,OAAO,IAAI,CAAC5B,MAAM;;EAGfiD,8BAA8BA;IACjC,MAAMmB,qBAAqB,MAAMC,YAAO,CAAC,IAAI,CAACX,QAAQ,cAAc;IACpE,OAAOL,eAAe,CAACC,MAAM,CAACc,qBAAqB,CAAC;;EAGhD,OAAOR,0BAA0BA;IACrC,OAAO;MACHU,cAAc,EAAEA;;OAEf;MACDC,iBAAiB,EAAE,KAAK;MACxBC,QAAQ,EAAEC,mBAAQ,CAACC;KACtB;;EAGG,MAAMP,gBAAgBA;IAC1B,IAAI;MACA,MAAMQ,KAAK,GAAG,MAAMlE,WAAE,CAACmE,IAAI,CAAC,IAAI,CAAClB,QAAQ,CAAC;MAC1C,OAAOiB,KAAK,CAACE,KAAK,CAACrC,OAAO,EAAE;KAC/B,CAAC,OAAO3B,GAAG,EAAE;MACV,IAAIA,GAAG,CAACC,IAAI,KAAKrD,SAAS,CAACE,YAAY,EAAE;;QAErC,IAAI,CAACqC,MAAM,CAACqC,OAAO,CAAC,2BAA2B,CAAC;QAChD,OAAO,CAAC;;MAEZ,MAAM1D,gBAAgB,CAACU,qBAAqB,CAACwB,GAAG,CAACC,IAAI,EAAED,GAAG,CAACI,OAAO,CAAC;;;EAInE,MAAM4C,eAAeA;IACzB,MAAM,IAAI,CAACiB,mBAAmB,EAAE;;IAEhC,MAAMC,UAAU,GAAG,MAAMtE,WAAE,CAACC,IAAI,CAAC,IAAI,CAACgD,QAAQ,EAAE,GAAG,CAAC;IACpD,MAAMqB,UAAU,CAAC3D,KAAK,EAAE;IACxB,IAAI,CAACpB,MAAM,CAACM,IAAI,oBAAoB,IAAI,CAACoD,UAAU,CAAC;;EAGhD,MAAMoB,mBAAmBA;IAC7B,IAAI;MACA,MAAMrE,WAAE,CAACuE,KAAK,CAACX,YAAO,CAAC,IAAI,CAACX,QAAQ,CAAC,EAAE;QAACuB,SAAS,EAAE;OAAK,CAAC;KAC5D,CAAC,OAAOpE,GAAG,EAAE;MACV,IAAIA,GAAG,CAACC,IAAI,KAAKrD,SAAS,CAACC,YAAY,EAAE;QACrC,IAAI,CAACsC,MAAM,CAACM,IAAI,cAAc+D,YAAO,CAAC,IAAI,CAACX,QAAQ,mBAAmB,CAAC;OAC1E,MAAM;QACH,MAAM/E,gBAAgB,CAACU,qBAAqB,CAACwB,GAAG,CAACC,IAAI,EAAED,GAAG,CAACI,OAAO,CAAC;;;;;;ACvInF;;;;AASA;AACA,AAAO,IAAIiE,KAAK,gBAAkBC,OAAO,CAAC,6BAA6B,CAAC;;ACVxE;;;;AAKA,AAWA,WAAYC,mBAAmB;EAC3BA,kDAA2B;EAC3BA,oDAA6B;AACjC,CAAC,EAHWA,2BAAmB,KAAnBA,2BAAmB;;AChB/B;;;;AAMA,AAQA;;;;;;AAMA,MAAaC,iCAAkC,SAAQvC,eAAe;EAMlEjE,YAAoByG,KAA0B,EAAEC,eAAwB;IACpE,KAAK,EAAE;IACP,IAAI,CAACD,KAAK,GAAGA,KAAK;IAClB,IAAI,CAACC,eAAe,GAAGA,eAAe,GAAGC,MAAM,CAACC,IAAI,CAACF,eAAe,EAAE,OAAO,CAAC,GAAG,IAAI;;EAGlF,aAAajC,MAAMA,CACtBC,YAAoB,EACpB+B,KAA0B,EAC1BC,eAAwB,EACxB/B,aAA6B;IAE7B,MAAM7B,WAAW,GAAG,IAAI0D,iCAAiC,CAACC,KAAK,EAAEC,eAAe,CAAC;IACjF5D,WAAW,CAAC8B,eAAe,GAAG,MAAMJ,eAAe,CAACC,MAAM,CAACC,YAAY,EAAEC,aAAa,CAAC;IACvF,OAAO7B,WAAW;;EAGf,MAAMkB,IAAIA,CAACiB,QAAgB;IAC9B,IAAI;MACA,MAAM4B,iBAAiB,GAAGR,KAAK,CAACS,WAAW,CACvCH,MAAM,CAACC,IAAI,CAAC3B,QAAQ,EAAE,OAAO,CAAC,EAC9B,IAAI,CAACyB,eAAe,EACpB,IAAI,CAACD,KAAK,CAAC1E,QAAQ,EAAE,CAAC;MAC1B,MAAM,IAAI,CAAC6C,eAAe,CAACO,UAAU,CAAC0B,iBAAiB,CAAC;KAC3D,CAAC,OAAO7E,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACa,mCAAmC,CAACqB,GAAG,CAACI,OAAO,CAAC;;;EAIxE,MAAMqB,IAAIA;IACb,IAAI;MACA,MAAMoD,iBAAiB,GAAG,MAAM,IAAI,CAACjC,eAAe,CAACS,UAAU,EAAE;MACjE,IAAI,OAAOwB,iBAAiB,KAAK,WAAW,IAAI,CAACA,iBAAiB,IAAI,CAAC,KAAKA,iBAAiB,CAACE,MAAM,EAAE;QAClG,IAAI,CAACnC,eAAe,CAAC7B,SAAS,EAAE,CAACtB,IAAI,CAAC,wDAAwD,CAAC;QAC/F,OAAO,IAAI;;MAEf,OAAO4E,KAAK,CAACW,aAAa,CACtBH,iBAAiB,EACjB,IAAI,CAACH,eAAe,EACpB,IAAI,CAACD,KAAK,CAAC1E,QAAQ,EAAE,CAAC,CAACA,QAAQ,EAAE;KACxC,CAAC,OAAOC,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACa,mCAAmC,CAACqB,GAAG,CAACI,OAAO,CAAC;;;EAIxE,MAAMkC,MAAMA;IACf,OAAO,IAAI,CAACM,eAAe,CAACN,MAAM,EAAE;;EAGjC,MAAMhB,eAAeA,CAACJ,QAAgB;IACzC,OAAO,IAAI,CAAC0B,eAAe,CAACtB,eAAe,CAACJ,QAAQ,CAAC;;EAGlDF,WAAWA;IACd,OAAO,IAAI,CAAC4B,eAAe,CAAC5B,WAAW,EAAE;;EAGtCD,SAASA;IACZ,OAAO,IAAI,CAAC6B,eAAe,CAAC7B,SAAS,EAAE;;EAGpCqB,8BAA8BA;IACjC,MAAMmB,qBAAqB,MAAMC,YAAO,CAAC,IAAI,CAACZ,eAAe,CAAC5B,WAAW,EAAE,cAAc;IACzF,OAAOwD,iCAAiC,CAAC/B,MAAM,CAACc,qBAAqB,EAAEgB,2BAAmB,CAACU,WAAW,CAAC;;;;ACzF/G;;;;AAKA,AAQA;;;;;;AAMA,MAAaC,mBAAoB,SAAQjD,eAAe;EAMpDjE,YAAoBmH,WAAmB,EAAEC,WAAmB;IACxD,KAAK,EAAE;IACP,IAAI,CAACD,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACC,WAAW,GAAGA,WAAW;;EAG3B,aAAa3C,MAAMA,CACtBC,YAAoB,EACpByC,WAAmB,EACnBC,WAAmB,EACnBzC,aAA6B;IAE7B,MAAM7B,WAAW,GAAG,IAAIoE,mBAAmB,CAACC,WAAW,EAAEC,WAAW,CAAC;IACrEtE,WAAW,CAAC8B,eAAe,GAAG,MAAMJ,eAAe,CAACC,MAAM,CAACC,YAAY,EAAEC,aAAa,CAAC;IACvF,OAAO7B,WAAW;;EAGf,MAAMkB,IAAIA,CAACiB,QAAgB;IAC9B,IAAI;MACA,MAAMoC,kBAAW,CAAC,IAAI,CAACF,WAAW,EAAE,IAAI,CAACC,WAAW,EAAEnC,QAAQ,CAAC;KAClE,CAAC,OAAOjD,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACY,8BAA8B,CAACsB,GAAG,CAACI,OAAO,CAAC;;;IAGtE,MAAM,IAAI,CAACwC,eAAe,CAACZ,IAAI,CAAC,IAAI,CAAC;;EAGlC,MAAMP,IAAIA;IACb,IAAG;MACC,OAAO,MAAM6D,kBAAW,CAAC,IAAI,CAACH,WAAW,EAAE,IAAI,CAACC,WAAW,CAAC;KAC/D,CAAC,OAAMpF,GAAG,EAAC;MACR,MAAMlC,gBAAgB,CAACY,8BAA8B,CAACsB,GAAG,CAACI,OAAO,CAAC;;;EAInE,MAAMkC,MAAMA;IACf,IAAI;MACA,MAAM,IAAI,CAACM,eAAe,CAACN,MAAM,EAAE;MACnC,OAAO,MAAMiD,qBAAc,CAAC,IAAI,CAACJ,WAAW,EAAE,IAAI,CAACC,WAAW,CAAC;KAClE,CAAC,OAAOpF,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACY,8BAA8B,CAACsB,GAAG,CAACI,OAAO,CAAC;;;EAInE,MAAMkB,eAAeA,CAACJ,QAAgB;IACzC,OAAO,IAAI,CAAC0B,eAAe,CAACtB,eAAe,CAACJ,QAAQ,CAAC;;EAGlDF,WAAWA;IACd,OAAO,IAAI,CAAC4B,eAAe,CAAC5B,WAAW,EAAE;;EAGtCD,SAASA;IACZ,OAAO,IAAI,CAAC6B,eAAe,CAAC7B,SAAS,EAAE;;EAGpCqB,8BAA8BA;IACjC,MAAMmB,qBAAqB,MAAMC,YAAO,CAAC,IAAI,CAACZ,eAAe,CAAC5B,WAAW,EAAE,cAAc;IACzF,OAAOkE,mBAAmB,CAACzC,MAAM,CAC7Bc,qBAAqB,EACrB,kCAAkC,EAAE,iCAAiC,CACxE;;;;ACtFT;;;;AAKA,AAQA;;;;;;;AAOA,MAAaiC,oBAAqB,SAAQvD,eAAe;EAMrDjE,YAAoBmH,WAAmB,EAAEC,WAAmB;IACxD,KAAK,EAAE;IACP,IAAI,CAACD,WAAW,GAAGA,WAAW;IAC9B,IAAI,CAACC,WAAW,GAAGA,WAAW;;EAG3B,aAAa3C,MAAMA,CACtBC,YAAoB,EACpByC,WAAmB,EACnBC,WAAmB,EACnBzC,aAA6B;IAE7B,MAAM7B,WAAW,GAAG,IAAI0E,oBAAoB,CAACL,WAAW,EAAEC,WAAW,CAAC;IACtEtE,WAAW,CAAC8B,eAAe,GAAG,MAAMJ,eAAe,CAACC,MAAM,CAACC,YAAY,EAAEC,aAAa,CAAC;IACvF,OAAO7B,WAAW;;EAGf,MAAMkB,IAAIA,CAACiB,QAAgB;IAC9B,IAAI;MACA,MAAMoC,kBAAW,CAAC,IAAI,CAACF,WAAW,EAAE,IAAI,CAACC,WAAW,EAAEnC,QAAQ,CAAC;KAClE,CAAC,OAAOjD,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACW,oBAAoB,CAACuB,GAAG,CAACI,OAAO,CAAC;;;IAG5D,MAAM,IAAI,CAACwC,eAAe,CAACZ,IAAI,CAAC,IAAI,CAAC;;EAGlC,MAAMP,IAAIA;IACb,IAAI;MACA,OAAO,MAAM6D,kBAAW,CAAC,IAAI,CAACH,WAAW,EAAE,IAAI,CAACC,WAAW,CAAC;KAC/D,CAAC,OAAOpF,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACW,oBAAoB,CAACuB,GAAG,CAACI,OAAO,CAAC;;;EAIzD,MAAMkC,MAAMA;IACf,IAAI;MACA,MAAM,IAAI,CAACM,eAAe,CAACN,MAAM,EAAE;MACnC,OAAO,MAAMiD,qBAAc,CAAC,IAAI,CAACJ,WAAW,EAAE,IAAI,CAACC,WAAW,CAAC;KAClE,CAAC,OAAOpF,GAAG,EAAE;MACV,MAAMlC,gBAAgB,CAACW,oBAAoB,CAACuB,GAAG,CAACI,OAAO,CAAC;;;EAIzD,MAAMkB,eAAeA,CAACJ,QAAgB;IACzC,OAAO,IAAI,CAAC0B,eAAe,CAACtB,eAAe,CAACJ,QAAQ,CAAC;;EAGlDF,WAAWA;IACd,OAAO,IAAI,CAAC4B,eAAe,CAAC5B,WAAW,EAAE;;EAGtCD,SAASA;IACZ,OAAO,IAAI,CAAC6B,eAAe,CAAC7B,SAAS,EAAE;;EAGpCqB,8BAA8BA;IACjC,MAAMmB,qBAAqB,MAAMC,YAAO,CAAC,IAAI,CAACZ,eAAe,CAAC5B,WAAW,EAAE,cAAc;IACzF,OAAOwE,oBAAoB,CAAC/C,MAAM,CAC9Bc,qBAAqB,EACrB,kCAAkC,EAAE,iCAAiC,CACxE;;;;ACvFT;;;;AAKA,MAKakC,WAAW;EACpB,WAAWC,UAAUA;IACjB,OAAO,IAAI,CAACC,sBAAsB,CAAC/I,SAAS,CAACO,WAAW,CAACC,IAAI,CAAC;;EAGlE,WAAWwI,aAAaA;IACpB,OAAO,IAAI,CAACD,sBAAsB,CAAC/I,SAAS,CAACO,WAAW,CAACE,OAAO,CAAC;;EAGrE,WAAWwI,UAAUA;IACjB,OAAO,IAAI,CAACF,sBAAsB,CAAC/I,SAAS,CAACO,WAAW,CAACG,IAAI,CAAC;;EAGlE,WAAWwI,WAAWA;IAClB,OAAO,IAAI,CAACH,sBAAsB,CAAC/I,SAAS,CAACO,WAAW,CAACI,KAAK,CAAC;;EAGnE,WAAWwI,cAAcA;IACrB,OAAO,IAAI,CAACJ,sBAAsB,CAAC/I,SAAS,CAACO,WAAW,CAACK,QAAQ,CAAC;;EAGtE,OAAOmI,sBAAsBA,CAACpH,IAAY;IACtC,OAAOyH,OAAO,CAACC,GAAG,CAAC1H,IAAI,CAAC;;EAG5B,OAAO2H,sBAAsBA;IACzB,OAAOF,OAAO,CAACG,QAAQ;;EAG3B,OAAOC,iBAAiBA;IACpB,OAAO,IAAI,CAACF,sBAAsB,EAAE,KAAKtI,QAAQ,CAACyI,OAAO;;EAG7D,OAAOC,eAAeA;IAClB,OAAO,IAAI,CAACJ,sBAAsB,EAAE,KAAKtI,QAAQ,CAAC2I,KAAK;;EAG3D,OAAOC,aAAaA;IAChB,OAAO,IAAI,CAACN,sBAAsB,EAAE,KAAKtI,QAAQ,CAAC6I,KAAK;;EAG3D,OAAOC,eAAeA;IAClB,OAAOV,OAAO,CAACW,MAAM,EAAE,KAAK/J,SAAS,CAACM,oBAAoB;;EAG9D,OAAO0J,oBAAoBA;IACvB,OAAO,CAAC,IAAI,CAACR,iBAAiB,GAC1B,IAAI,CAACS,oBAAoB,EAAE,GAC3B,IAAI,CAACC,uBAAuB,EAAE;;EAGtC,OAAOA,uBAAuBA;IAC1B,OAAO,IAAI,CAACnB,sBAAsB,CAAC/I,SAAS,CAACO,WAAW,CAACO,sBAAsB,CAAC;;EAGpF,OAAOmJ,oBAAoBA;IACvB,IAAI,IAAI,CAACT,iBAAiB,EAAE,EAAE;MAC1B,MAAMtI,gBAAgB,CAACgB,uBAAuB,CAC1C,sEAAsE,CAAC;;IAG/E,IAAI,CAACiI,sBAAW,CAACC,OAAO,CAAC,IAAI,CAACtB,UAAU,CAAC,EAAE;MACvC,OAAO,IAAI,CAACA,UAAU;;IAG1B,IAAIuB,QAAQ,GAAG,IAAI;IACnB,IAAI,CAACF,sBAAW,CAACC,OAAO,CAAC,IAAI,CAACpB,aAAa,CAAC,EAAE;MAC1CqB,QAAQ,GAAG,IAAI,CAACrB,aAAa;KAChC,MAAM,IAAI,CAACmB,sBAAW,CAACC,OAAO,CAAC,IAAI,CAACnB,UAAU,CAAC,EAAE;MAC9CoB,QAAQ,GAAG,IAAI,CAACpB,UAAU;KAC7B,MAAM,IAAI,CAACkB,sBAAW,CAACC,OAAO,CAAC,IAAI,CAAClB,WAAW,CAAC,EAAE;MAC/CmB,QAAQ,GAAG,IAAI,CAACnB,WAAW;KAC9B,MAAM,IAAI,CAACiB,sBAAW,CAACC,OAAO,CAAC,IAAI,CAACjB,cAAc,CAAC,EAAE;MAClDkB,QAAQ,GAAG,IAAI,CAAClB,cAAc;;IAGlC,IAAI,IAAI,CAACS,aAAa,EAAE,EAAE;MACtB,OAAO,CAACO,sBAAW,CAACC,OAAO,CAACC,QAAQ,CAAC,GAAGC,aAAI,CAACC,IAAI,CAAC,QAAQ,EAAEF,QAAQ,CAAC,GAAG,IAAI;KAC/E,MAAM,IAAI,IAAI,CAACX,eAAe,EAAE,EAAE;MAC/B,IAAI,IAAI,CAACI,eAAe,EAAE,EAAE;QACxB,OAAO,OAAO;OACjB,MAAM;QACH,OAAO,CAACK,sBAAW,CAACC,OAAO,CAACC,QAAQ,CAAC,GAAGC,aAAI,CAACC,IAAI,CAAC,OAAO,EAAEF,QAAQ,CAAC,GAAG,IAAI;;KAElF,MAAM;MACH,MAAMnJ,gBAAgB,CAACgB,uBAAuB,CAC1C,sEAAsE,CAAC;;;;;AChGvF;;;;AAKA,MAUasI,kBAAkB;EAC3B,aAAaC,iBAAiBA,CAACC,MAAiC;IAC5D,IAAIC,UAAwB;;IAG5B,IAAI9B,WAAW,CAACW,iBAAiB,EAAE,EAAE;MACjC,IAAI,CAACkB,MAAM,CAACE,SAAS,IAAI,CAACF,MAAM,CAACG,mBAAmB,EAAE;QAClD,MAAM3J,gBAAgB,CAACkB,kCAAkC,CACrD,6GAA6G,CAAC;;MAGtHuI,UAAU,GAAG,MAAM/C,iCAAiC,CAAC/B,MAAM,CAAC6E,MAAM,CAACE,SAAS,EAAEjD,2BAAmB,CAACU,WAAW,EAAEyC,SAAS,EAAEJ,MAAM,CAAC3E,aAAa,CAAC;;;SAI9I,IAAI8C,WAAW,CAACe,aAAa,EAAE,EAAE;MAClC,IAAI,CAACc,MAAM,CAACE,SAAS,IAAI,CAACF,MAAM,CAACnC,WAAW,IAAI,CAACmC,MAAM,CAAClC,WAAW,EAAE;QACjE,MAAMtH,gBAAgB,CAACkB,kCAAkC,CACrD,oGAAoG,CAAC;;MAG7GuI,UAAU,GAAG,MAAMrC,mBAAmB,CAACzC,MAAM,CAAC6E,MAAM,CAACE,SAAS,EAAEF,MAAM,CAACnC,WAAW,EAAEmC,MAAM,CAAClC,WAAW,EAAEkC,MAAM,CAAC3E,aAAa,CAAC;;;SAI5H,IAAI8C,WAAW,CAACa,eAAe,EAAE,EAAE;MACpC,IAAI,CAACgB,MAAM,CAACE,SAAS,IAAI,CAACF,MAAM,CAACnC,WAAW,IAAI,CAACmC,MAAM,CAAClC,WAAW,EAAE;QACjE,MAAMtH,gBAAgB,CAACkB,kCAAkC,CACrD,qGAAqG,CAAC;;MAG9GuI,UAAU,GAAG,MAAM/B,oBAAoB,CAAC/C,MAAM,CAAC6E,MAAM,CAACE,SAAS,EAAEF,MAAM,CAACnC,WAAW,EAAEmC,MAAM,CAAClC,WAAW,EAAEkC,MAAM,CAAC3E,aAAa,CAAC;KACjI,MAEI;MACD,MAAM7E,gBAAgB,CAACgB,uBAAuB,CAC1C,uEAAuE,CAAC;;;IAIhF,MAAM6I,qBAAqB,GAAG,MAAMJ,UAAU,CAACrF,iBAAiB,EAAE,CAAC0F,KAAK,CAAC,MAAM,KAAK,CAAC;IAErF,IAAI,CAACD,qBAAqB,EAAE;MACxB,IAAIlC,WAAW,CAACa,eAAe,EAAE,IAAIgB,MAAM,CAACO,uBAAuB,EAAE;QACjE,IAAI,CAACP,MAAM,CAACE,SAAS,EAAE;UACnB,MAAM1J,gBAAgB,CAACkB,kCAAkC,CACrD,8DAA8D,CAAC;;QAGvEuI,UAAU,GAAG,MAAM/E,eAAe,CAACC,MAAM,CAAC6E,MAAM,CAACE,SAAS,EAAEF,MAAM,CAAC3E,aAAa,CAAC;QAEjF,MAAMmF,yBAAyB,GAAG,MAAMP,UAAU,CAACrF,iBAAiB,EAAE;QACtE,IAAI4F,yBAAyB,EAAE;UAC3B,OAAOP,UAAU;;;MAIzB,MAAMzJ,gBAAgB,CAACiB,iCAAiC,CAAC,mCAAmC,CAAC;;IAGjG,OAAOwI,UAAU;;;;AC3EzB;;;;AAKA,MAEaQ,eAAgB,SAAQC,oBAAS;EAI1ChK,YAAYiK,WAAmB,EAAEC,YAAoB,EAAEjK,SAAiB,EAAEkK,QAAgB;IACtF,KAAK,CAACF,WAAW,EAAEC,YAAY,CAAC;IAChC,IAAI,CAAC3J,IAAI,GAAG,iBAAiB;IAC7B,IAAI,CAAC6J,UAAU,GAAGnK,SAAS;IAC3B,IAAI,CAACoK,GAAG,GAAGF,QAAQ;IACnB/J,MAAM,CAACC,cAAc,CAAC,IAAI,EAAE0J,eAAe,CAACzJ,SAAS,CAAC;;;;AChB9D;AACA,AAAO,MAAMC,IAAI,GAAG,6BAA6B;AACjD,AAAO,MAAM+J,OAAO,GAAG,gBAAgB;;ACFvC;;;;AAKA,MAMaC,kBAAkB;EAI3BvK;IACI,MAAMwK,oBAAoB,GAAkB;MACxC/E,cAAc,EAAEA;;OAEf;MACDC,iBAAiB,EAAE;KACtB;IACD,IAAI,CAACvE,MAAM,GAAG,IAAI2D,iBAAM,CAAC0F,oBAAoB,EAAEjK,IAAI,EAAE+J,OAAO,CAAC,CAAC;IAC9D,IAAI,CAACG,iBAAiB,GAAGC,+BAAe,CAACC,YAAY,GAAG,KAAK,GAAG,IAAI;;EAGxEC,SAASA,CAACjG,aAA4B;IAClC,IAAI,CAACxD,MAAM,GAAG,IAAI2D,iBAAM,CAACH,aAAa,EAAEpE,IAAI,EAAE+J,OAAO,CAAC;IACtD,MAAMO,WAAW,GAAGA,CAACzI,OAAe,EAAEuD,QAA6B,EAAEmF,WAAoB;MACrF,QAAOnF,QAAQ;QACX,KAAKoF,wBAAmB,CAACC,KAAK;UAC1B,IAAIF,WAAW,EAAE;YACb,IAAI,CAAC3J,MAAM,CAAC8J,QAAQ,CAAC7I,OAAO,CAAC;WAChC,MAAM;YACH,IAAI,CAACjB,MAAM,CAAC+J,KAAK,CAAC9I,OAAO,CAAC;;UAE9B;QACJ,KAAK2I,wBAAmB,CAACI,KAAK;UAC1B,IAAIL,WAAW,EAAE;YACb,IAAI,CAAC3J,MAAM,CAAC8J,QAAQ,CAAC7I,OAAO,CAAC;WAChC,MAAM;YACH,IAAI,CAACjB,MAAM,CAAC+J,KAAK,CAAC9I,OAAO,CAAC;;UAE9B;QACJ,KAAK2I,wBAAmB,CAAClF,IAAI;UACzB,IAAIiF,WAAW,EAAE;YACb,IAAI,CAAC3J,MAAM,CAACiK,OAAO,CAAChJ,OAAO,CAAC;WAC/B,MAAM;YACH,IAAI,CAACjB,MAAM,CAACM,IAAI,CAACW,OAAO,CAAC;;UAE7B;QACJ,KAAK2I,wBAAmB,CAACM,OAAO;UAC5B,IAAIP,WAAW,EAAE;YACb,IAAI,CAAC3J,MAAM,CAACmK,UAAU,CAAClJ,OAAO,CAAC;WAClC,MAAM;YACH,IAAI,CAACjB,MAAM,CAACqB,OAAO,CAACJ,OAAO,CAAC;;UAEhC;QACJ,KAAK2I,wBAAmB,CAAChL,KAAK;UAC1B,IAAI+K,WAAW,EAAE;YACb,IAAI,CAAC3J,MAAM,CAACoK,QAAQ,CAACnJ,OAAO,CAAC;WAChC,MAAM;YACH,IAAI,CAACjB,MAAM,CAACgB,KAAK,CAACC,OAAO,CAAC;;UAE9B;QACJ,KAAK2I,wBAAmB,CAACS,KAAK;UAC1B,IAAIV,WAAW,EAAE;YACb,IAAI,CAAC3J,MAAM,CAACoK,QAAQ,CAACnJ,OAAO,CAAC;WAChC,MAAM;YACH,IAAI,CAACjB,MAAM,CAACgB,KAAK,CAACC,OAAO,CAAC;;UAE9B;QACJ;UACI,IAAI0I,WAAW,EAAE;YACb,IAAI,CAAC3J,MAAM,CAACiK,OAAO,CAAChJ,OAAO,CAAC;WAC/B,MAAM;YACH,IAAI,CAACjB,MAAM,CAACM,IAAI,CAACW,OAAO,CAAC;;UAE7B;;KAEX;IACD,IAAI;MACAsI,+BAAe,CAACe,cAAc,CAACZ,WAAW,EAAElG,aAAa,CAACe,iBAAiB,CAAC;KAC/E,CAAC,OAAOnB,CAAC,EAAE;MACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;MACtC,IAAImH,YAAY,EAAE;QACd,MAAMA,YAAY;;;;EAK9B,MAAME,cAAcA,CAACC,SAAiB,EAAEC,aAAqB;IACzD,IAAI,CAAC3K,MAAM,CAAC+J,KAAK,CAAC,4CAA4C,EAAEY,aAAa,CAAC;IAC9E,MAAMC,iBAAiB,GAAG,MAAM,IAAI,CAACC,eAAe,CAACH,SAAS,EAAEC,aAAa,CAAC;IAC9E,OAAO,IAAI,CAACG,mBAAmB,CAACF,iBAAiB,CAACG,OAAO,CAAC;;EAG9D,MAAMC,cAAcA,CAACC,QAAe,EAAEN,aAAqB;IACvD,IAAI,CAAC3K,MAAM,CAAC+J,KAAK,CAAC,4CAA4C,EAAEY,aAAa,CAAC;IAC9E,OAAO,IAAIpJ,OAAO,CAAC,CAACC,OAAO,EAAE0J,MAAM;MAC/B,MAAMC,cAAc,GAAIC,MAA8B;QAClD,IAAI;UACAA,MAAM,CAACC,UAAU,EAAE;SACtB,CAAC,OAAOjI,CAAC,EAAE;UACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;UACtC,IAAImH,YAAY,EAAE;YACdW,MAAM,CAACX,YAAY,CAAC;YACpB;;;QAIR,MAAMe,iBAAiB,GAAG,EAAE;QAC5BF,MAAM,CAACG,QAAQ,CAACC,OAAO,CAAET,OAAgB;UACrCO,iBAAiB,CAACG,IAAI,CAAC,IAAI,CAACX,mBAAmB,CAACC,OAAO,CAAC,CAAC;SAC5D,CAAC;QACFvJ,OAAO,CAAC8J,iBAAiB,CAAC;OAC7B;MAED,IAAI;QACA/B,+BAAe,CAACmC,qBAAqB,CAACT,QAAQ,EAAEN,aAAa,EAAEQ,cAAc,CAAC;OACjF,CAAC,OAAO/H,CAAC,EAAE;QACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;QACtC,IAAImH,YAAY,EAAE;UACdW,MAAM,CAACX,YAAY,CAAC;;;KAG/B,CAAC;;EAGN,MAAMoB,kBAAkBA,CAACC,OAAsB;IAC3C,IAAI,CAAC5L,MAAM,CAAC+J,KAAK,CAAC,gDAAgD,EAAE6B,OAAO,CAACjB,aAAa,CAAC;IAC1F,MAAMkB,UAAU,GAAG,IAAI,CAACC,yBAAyB,CAACF,OAAO,CAAC;IAC1D,MAAMb,OAAO,GAAG,MAAM,IAAI,CAACgB,UAAU,CAACH,OAAO,CAAC;IAE9C,OAAO,IAAIrK,OAAO,CAAC,CAACC,OAA8C,EAAE0J,MAAM;MACtE,MAAMC,cAAc,GAAIC,MAAkB;QACtC,IAAI;UACAA,MAAM,CAACC,UAAU,EAAE;SACtB,CAAC,OAAOjI,CAAC,EAAE;UACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;UACtC,IAAImH,YAAY,EAAE;YACdW,MAAM,CAACX,YAAY,CAAC;YACpB;;;QAGR,MAAMyB,oBAAoB,GAAG,IAAI,CAACC,uBAAuB,CAACL,OAAO,EAAER,MAAM,CAAC;QAC1E5J,OAAO,CAACwK,oBAAoB,CAAC;OAChC;MAED,IAAI;QACA,IAAIjB,OAAO,EAAE;UACTxB,+BAAe,CAAC2C,yBAAyB,CAACL,UAAU,EAAED,OAAO,CAACjB,aAAa,EAAEI,OAAO,EAAEI,cAAc,CAAC;SACxG,MAAM;UACH5B,+BAAe,CAAC4C,mBAAmB,CAACN,UAAU,EAAED,OAAO,CAACjB,aAAa,EAAEQ,cAAc,CAAC;;OAE7F,CAAC,OAAO/H,CAAC,EAAE;QACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;QACtC,IAAImH,YAAY,EAAE;UACdW,MAAM,CAACX,YAAY,CAAC;;;KAG/B,CAAC;;EAGN,MAAM6B,uBAAuBA,CAACR,OAAsB,EAAES,oBAA6B;IAC/E,IAAI,CAACrM,MAAM,CAAC+J,KAAK,CAAC,qDAAqD,EAAE6B,OAAO,CAACjB,aAAa,CAAC;IAC/F,MAAMkB,UAAU,GAAG,IAAI,CAACC,yBAAyB,CAACF,OAAO,CAAC;IAC1D,MAAMb,OAAO,GAAG,MAAM,IAAI,CAACgB,UAAU,CAACH,OAAO,CAAC;IAC9C,MAAMU,YAAY,GAAGD,oBAAoB,IAAI7G,MAAM,CAACC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7D,OAAO,IAAIlE,OAAO,CAAC,CAACC,OAA8C,EAAE0J,MAAM;MACtE,MAAMC,cAAc,GAAIC,MAAkB;QACtC,IAAI;UACAA,MAAM,CAACC,UAAU,EAAE;SACtB,CAAC,OAAOjI,CAAC,EAAE;UACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;UACtC,IAAImH,YAAY,EAAE;YACdW,MAAM,CAACX,YAAY,CAAC;YACpB;;;QAGR,MAAMyB,oBAAoB,GAAG,IAAI,CAACC,uBAAuB,CAACL,OAAO,EAAER,MAAM,CAAC;QAC1E5J,OAAO,CAACwK,oBAAoB,CAAC;OAChC;MAED,IAAI;QACA,QAAQJ,OAAO,CAACW,MAAM;UAClB,KAAKC,sBAAW,CAACC,KAAK;UACtB,KAAKD,sBAAW,CAACE,cAAc;UAC/B,KAAKF,sBAAW,CAACG,MAAM;YACnB,IAAI,CAAC3M,MAAM,CAACM,IAAI,CAAC,gDAAgD,EAAEsL,OAAO,CAACjB,aAAa,CAAC;YACzF,MAAMiC,SAAS,GAAGhB,OAAO,CAACgB,SAAS,IAAInP,oBAAS,CAACoP,YAAY;YAC7DtD,+BAAe,CAACuD,wBAAwB,CAACR,YAAY,EAAET,UAAU,EAAED,OAAO,CAACjB,aAAa,EAAEiC,SAAS,EAAEzB,cAAc,CAAC;YACpH;UACJ,KAAKqB,sBAAW,CAACO,IAAI;YACjB,IAAIhC,OAAO,EAAE;cACT,IAAI,CAAC/K,MAAM,CAACM,IAAI,CAAC,iDAAiD,EAAEsL,OAAO,CAACjB,aAAa,CAAC;cAC1FpB,+BAAe,CAAC2C,yBAAyB,CAACL,UAAU,EAAED,OAAO,CAACjB,aAAa,EAAEI,OAAO,EAAEI,cAAc,CAAC;aACxG,MAAM;cACH,IAAI,CAACnL,MAAM,CAACM,IAAI,CAAC,2CAA2C,EAAEsL,OAAO,CAACjB,aAAa,CAAC;cACpFpB,+BAAe,CAAC4C,mBAAmB,CAACN,UAAU,EAAED,OAAO,CAACjB,aAAa,EAAEQ,cAAc,CAAC;;YAE1F;UACJ;YACI,IAAIJ,OAAO,EAAE;cACT,IAAI,CAAC/K,MAAM,CAACM,IAAI,CAAC,sDAAsD,EAAEsL,OAAO,CAACjB,aAAa,CAAC;cAC/FpB,+BAAe,CAACyD,8BAA8B,CAACV,YAAY,EAAET,UAAU,EAAED,OAAO,CAACjB,aAAa,EAAEI,OAAO,EAAEI,cAAc,CAAC;aAC3H,MAAM;cACH,IAAI,CAACnL,MAAM,CAACM,IAAI,CAAC,mCAAmC,EAAEsL,OAAO,CAACjB,aAAa,CAAC;cAC5E,MAAMiC,SAAS,GAAGhB,OAAO,CAACgB,SAAS,IAAInP,oBAAS,CAACoP,YAAY;cAC7DtD,+BAAe,CAAC0D,WAAW,CAACX,YAAY,EAAET,UAAU,EAAED,OAAO,CAACjB,aAAa,EAAEiC,SAAS,EAAEzB,cAAc,CAAC;;YAE3G;;OAEX,CAAC,OAAO/H,CAAC,EAAE;QACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;QACtC,IAAImH,YAAY,EAAE;UACdW,MAAM,CAACX,YAAY,CAAC;;;KAG/B,CAAC;;EAGN,MAAM2C,OAAOA,CAACtB,OAA6B;IACvC,IAAI,CAAC5L,MAAM,CAAC+J,KAAK,CAAC,qCAAqC,EAAE6B,OAAO,CAACjB,aAAa,CAAC;IAE/E,MAAMI,OAAO,GAAG,MAAM,IAAI,CAACgB,UAAU,CAACH,OAAO,CAAC;IAC9C,IAAI,CAACb,OAAO,EAAE;MACV,MAAMoC,0BAAe,CAACC,yBAAyB,EAAE;;IAGrD,OAAO,IAAI7L,OAAO,CAAC,CAACC,OAAO,EAAE0J,MAAM;MAC/B,MAAMC,cAAc,GAAIC,MAAqB;QACzC,IAAI;UACAA,MAAM,CAACC,UAAU,EAAE;SACtB,CAAC,OAAOjI,CAAC,EAAE;UACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;UACtC,IAAImH,YAAY,EAAE;YACdW,MAAM,CAACX,YAAY,CAAC;YACpB;;;QAGR/I,OAAO,EAAE;OACZ;MAED,IAAI;QACA+H,+BAAe,CAAC8D,oBAAoB,CAACzB,OAAO,CAACX,QAAQ,EAAEW,OAAO,CAACjB,aAAa,EAAEI,OAAO,EAAEI,cAAc,CAAC;OACzG,CAAC,OAAO/H,CAAC,EAAE;QACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;QACtC,IAAImH,YAAY,EAAE;UACdW,MAAM,CAACX,YAAY,CAAC;;;KAG/B,CAAC;;EAGE,MAAMwB,UAAUA,CAACH,OAA6C;IAClE,IAAIA,OAAO,CAAClB,SAAS,EAAE;MACnB,MAAME,iBAAiB,GAAG,MAAM,IAAI,CAACC,eAAe,CAACe,OAAO,CAAClB,SAAS,EAAEkB,OAAO,CAACjB,aAAa,CAAC;MAC9F,OAAOC,iBAAiB,CAACG,OAAO;;IAEpC,OAAO,IAAI;;EAGP,MAAMF,eAAeA,CAACH,SAAiB,EAAEC,aAAqB;IAClE,IAAI,CAAC3K,MAAM,CAAC+J,KAAK,CAAC,6CAA6C,EAAEY,aAAa,CAAC;IAE/E,OAAO,IAAIpJ,OAAO,CAAC,CAACC,OAAO,EAAE0J,MAAM;MAC/B,MAAMC,cAAc,GAAIC,MAAyB;QAC7C,IAAI;UACAA,MAAM,CAACC,UAAU,EAAE;SACtB,CAAC,OAAOjI,CAAC,EAAE;UACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;UACtC,IAAImH,YAAY,EAAE;YACdW,MAAM,CAACX,YAAY,CAAC;YACpB;;;QAGR/I,OAAO,CAAC4J,MAAM,CAAC;OAClB;MAED,IAAI;QACA7B,+BAAe,CAAC+D,oBAAoB,CAAC5C,SAAS,EAAEC,aAAa,EAAEQ,cAAc,CAAC;OACjF,CAAC,OAAO/H,CAAC,EAAE;QACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;QACtC,IAAImH,YAAY,EAAE;UACdW,MAAM,CAACX,YAAY,CAAC;;;KAG/B,CAAC;;EAGEuB,yBAAyBA,CAACF,OAAsB;IACpD,IAAI,CAAC5L,MAAM,CAAC+J,KAAK,CAAC,uDAAuD,EAAE6B,OAAO,CAACjB,aAAa,CAAC;IACjG,MAAMkB,UAAU,GAAG,IAAItC,+BAAe,CAACgE,cAAc,EAAE;IAEvD,IAAG;MACC1B,UAAU,CAAC2B,oBAAoB,CAAC5B,OAAO,CAACX,QAAQ,EAAEW,OAAO,CAAC6B,SAAS,CAAC;MACpE5B,UAAU,CAAC6B,cAAc,CAAC9B,OAAO,CAAC+B,WAAW,CAAC;MAC9C9B,UAAU,CAAC+B,kBAAkB,CAAChC,OAAO,CAACiC,MAAM,CAAC7F,IAAI,CAAC,GAAG,CAAC,CAAC;MAEvD,IAAI4D,OAAO,CAACkC,MAAM,EAAE;QAChBjC,UAAU,CAACkC,gBAAgB,CAACnC,OAAO,CAACkC,MAAM,CAAC;;MAG/C,IAAIlC,OAAO,CAACoC,oBAAoB,KAAKC,+BAAoB,CAACC,GAAG,EAAE;QAC3D,IAAI,CAACtC,OAAO,CAACuC,qBAAqB,IAAI,CAACvC,OAAO,CAACwC,kBAAkB,IAAI,CAACxC,OAAO,CAACyC,QAAQ,EAAE;UACpF,MAAM,IAAIzP,KAAK,CAAC,+IAA+I,CAAC;;QAEpK,MAAM0P,WAAW,GAAG,IAAIC,GAAG,CAAC3C,OAAO,CAACwC,kBAAkB,CAAC;QACvDvC,UAAU,CAAC2C,YAAY,CAAC5C,OAAO,CAACuC,qBAAqB,EAAEG,WAAW,CAACG,IAAI,EAAEH,WAAW,CAACI,QAAQ,EAAE9C,OAAO,CAACyC,QAAQ,CAAC;;MAGpH,IAAIzC,OAAO,CAAC+C,eAAe,EAAE;QACzB1P,MAAM,CAAC2P,IAAI,CAAChD,OAAO,CAAC+C,eAAe,CAAC,CAACnD,OAAO,CAAEqD,GAAG;UAC7ChD,UAAU,CAACiD,sBAAsB,CAACD,GAAG,EAAEjD,OAAO,CAAC+C,eAAe,CAACE,GAAG,CAAC,CAAC;SACvE,CAAC;;KAET,CAAC,OAAOzL,CAAC,EAAE;MACR,MAAMmH,YAAY,GAAG,IAAI,CAACC,SAAS,CAACpH,CAAC,CAAC;MACtC,IAAImH,YAAY,EAAE;QACd,MAAMA,YAAY;;;IAI1B,OAAOsB,UAAU;;EAGbI,uBAAuBA,CAACL,OAAsB,EAAEmD,UAAsB;IAC1E,IAAI,CAAC/O,MAAM,CAAC+J,KAAK,CAAC,qDAAqD,EAAE6B,OAAO,CAACjB,aAAa,CAAC;IAE/F,IAAIqE,SAAkB;IACtB,IAAI;MACA,MAAMC,aAAa,GAAGC,IAAI,CAACC,KAAK,CAACJ,UAAU,CAACK,aAAa,CAAC;MAC1DJ,SAAS,GAAG,CAAC,CAACC,aAAa,CAAC,UAAU,CAAC;KAC1C,CAAC,OAAO7L,CAAC,EAAE;MACR,IAAI,CAACpD,MAAM,CAACgB,KAAK,CAAC,8HAA8H,EAAE4K,OAAO,CAACjB,aAAa,CAAC;;IAG5K,IAAI0E,aAA4B;IAChC,IAAI;MACAA,aAAa,GAAGH,IAAI,CAACC,KAAK,CAACJ,UAAU,CAACO,OAAO,CAAC;KACjD,CAAC,OAAOlM,CAAC,EAAE;MACR,MAAM,IAAIxE,KAAK,CAAC,gCAAgC,CAAC;;IAGrD,MAAM2Q,WAAW,GAAG,IAAI,CAACzE,mBAAmB,CAACiE,UAAU,CAAChE,OAAO,EAAEsE,aAAa,CAAC;IAE/E,MAAMjE,MAAM,GAAyB;MACjCqC,SAAS,EAAE7B,OAAO,CAAC6B,SAAS;MAC5B+B,QAAQ,EAAEH,aAAa,CAACI,GAAG,IAAIJ,aAAa,CAACK,GAAG,IAAI,EAAE;MACtDC,QAAQ,EAAEN,aAAa,CAACO,GAAG,IAAI,EAAE;MACjC/B,MAAM,EAAEkB,UAAU,CAACc,aAAa,CAACC,KAAK,CAAC,GAAG,CAAC;MAC3C/E,OAAO,EAAEwE,WAAW;MACpBD,OAAO,EAAEP,UAAU,CAACgB,UAAU;MAC9BV,aAAa,EAAEA,aAAa;MAC5BW,WAAW,EAAEjB,UAAU,CAACiB,WAAW;MACnChB,SAAS,EAAEA,SAAS;MACpBiB,SAAS,EAAE,IAAI1N,IAAI,CAACwM,UAAU,CAACkB,SAAS,GAAG,IAAI,CAAC;MAChDC,SAAS,EAAEnB,UAAU,CAACoB,kBAAkB,GAAGlC,+BAAoB,CAACC,GAAG,GAAGD,+BAAoB,CAACmC,MAAM;MACjGzF,aAAa,EAAEiB,OAAO,CAACjB,aAAa;MACpC0F,gBAAgB,EAAE;KACrB;IACD,OAAOjF,MAAM;;EAGTN,mBAAmBA,CAACC,OAAgB,EAAEsE,aAA6B;IACvE,IAAI,CAACrP,MAAM,CAAC+J,KAAK,CAAC,iDAAiD,CAAC;IAEpE,MAAMwF,WAAW,GAAgB;MAC7Be,aAAa,EAAEvF,OAAO,CAACuF,aAAa;MACpCC,WAAW,EAAExF,OAAO,CAACwF,WAAW;MAChCZ,QAAQ,EAAE5E,OAAO,CAACyF,KAAK;MACvB1I,QAAQ,EAAEiD,OAAO,CAACjD,QAAQ;MAC1B2I,cAAc,EAAE1F,OAAO,CAAC0F,cAAc;MACtCrR,IAAI,EAAE2L,OAAO,CAAC2F,WAAW;MACzBrB,aAAa,EAAEA,aAAa;MAC5BsB,eAAe,EAAE5F,OAAO,CAACL;KAC5B;IACD,OAAO6E,WAAW;;EAGdqB,kBAAkBA,CAACxF,MAAc;IACrC,OAAOA,MAAM,CAACyF,cAAc,CAAC,WAAW,CAAC,IAClCzF,MAAM,CAACyF,cAAc,CAAC,aAAa,CAAC,IACpCzF,MAAM,CAACyF,cAAc,CAAC,cAAc,CAAC,IACrCzF,MAAM,CAACyF,cAAc,CAAC,UAAU,CAAC;;EAGpCrG,SAASA,CAACxJ,KAAa;IAC3B,IAAI,IAAI,CAAC4P,kBAAkB,CAAC5P,KAAK,CAAC,EAAE;MAChC,MAAM;QAAElC,SAAS;QAAEgK,WAAW;QAAEC,YAAY;QAAEC;OAAU,GAAGhI,KAAyB;MACpF,QAAQ8H,WAAW;QACf,KAAKgI,2BAAW,CAACC,mBAAmB;QACpC,KAAKD,2BAAW,CAACE,eAAe;UAC5B,OAAO,IAAIC,uCAA4B,CAACvS,UAAU,CAACwS,8BAA8B,EAAEnI,YAAY,CAAC;QACpG,KAAK+H,2BAAW,CAACK,SAAS;QAC1B,KAAKL,2BAAW,CAACM,6BAA6B;UAC1C,OAAOjE,0BAAe,CAACkE,gCAAgC,EAAE;QAC7D,KAAKP,2BAAW,CAACQ,4BAA4B;UACzC,OAAO,IAAIC,sBAAW,CAAC7S,UAAU,CAAC8S,kBAAkB,EAAEzI,YAAY,CAAC;QACvE,KAAK+H,2BAAW,CAACW,YAAY;UACzB,OAAOtE,0BAAe,CAACuE,uBAAuB,EAAE;QACpD,KAAKZ,2BAAW,CAACa,kBAAkB;UAC/B,OAAOC,mCAAwB,CAACC,6BAA6B,EAAE;QACnE,KAAKf,2BAAW,CAACgB,YAAY;;UAEzB,OAAO,IAAI;QACf,KAAKhB,2BAAW,CAACiB,eAAe;UAC5B,OAAO5E,0BAAe,CAACC,yBAAyB,EAAE;QACtD;UACI,OAAO,IAAIxE,eAAe,CAACkI,2BAAW,CAAChI,WAAW,CAAC,EAAEC,YAAY,EAAEjK,SAAS,EAAEkK,QAAQ,CAAC;;;IAInG,OAAOhI,KAAK;;;;;;;;;;;;;"}

package/dist/msal-node-extensions.cjs.production.min.js

@@ -1,2 +1,2 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0});var e,t,r=require("fs"),i=require("process"),s=require("path"),a=(e=s)&&"object"==typeof e&&"default"in e?e.default:e,c=require("@azure/msal-common"),o=require("keytar");!function(e){e.WINDOWS="win32",e.LINUX="linux",e.MACOS="darwin"}(t||(t={}));class n extends Error{constructor(e,t){super(t?`${e}: ${t}`:e),Object.setPrototypeOf(this,n.prototype),this.errorCode=e,this.errorMessage=t,this.name="PersistenceError"}static createFileSystemError(e,t){return new n(e,t)}static createLibSecretError(e){return new n("GnomeKeyringError",e)}static createKeychainPersistenceError(e){return new n("KeychainError",e)}static createFilePersistenceWithDPAPIError(e){return new n("DPAPIEncryptedFileError",e)}static createCrossPlatformLockError(e){return new n("CrossPlatformLockError",e)}static createCachePersistenceError(e){return new n("CachePersistenceError",e)}static createNotSupportedError(e){return new n("NotSupportedError",e)}static createPersistenceNotVerifiedError(e){return new n("PersistenceNotVerifiedError",e)}static createPersistenceNotValidatedError(e){return new n("PersistenceNotValidatedError",e)}}class l{constructor(e,t,r){this.lockFilePath=e,this.retryNumber=r?r.retryNumber:500,this.retryDelay=r?r.retryDelay:100,this.logger=t}async lock(){for(let e=0;e<this.retryNumber;e++)try{return this.logger.info(`Pid ${i.pid} trying to acquire lock`),this.lockFileHandle=await r.promises.open(this.lockFilePath,"wx+"),this.logger.info(`Pid ${i.pid} acquired lock`),void await this.lockFileHandle.write(i.pid.toString())}catch(e){if("EEXIST"!==e.code&&"EPERM"!==e.code)throw this.logger.error(`${i.pid} was not able to acquire lock. Ran into error: ${e.message}`),n.createCrossPlatformLockError(e.message);this.logger.info(e),await this.sleep(this.retryDelay)}throw this.logger.error(i.pid+" was not able to acquire lock. Exceeded amount of retries set in the options"),n.createCrossPlatformLockError("Not able to acquire lock. Exceeded amount of retries set in options")}async unlock(){try{this.lockFileHandle?(await r.promises.unlink(this.lockFilePath),await this.lockFileHandle.close(),this.logger.info("lockfile deleted")):this.logger.warning("lockfile handle does not exist, so lockfile could not be deleted")}catch(e){if("ENOENT"!==e.code)throw this.logger.error(`${i.pid} was not able to release lock. Ran into error: ${e.message}`),n.createCrossPlatformLockError(e.message);this.logger.info("Tried to unlock but lockfile does not exist")}}sleep(e){return new Promise(t=>{setTimeout(t,e)})}}class h{async verifyPersistence(){const e=await this.createForPersistenceValidation();try{await e.save("Dummy data to verify underlying persistence mechanism");const t=await e.load();if(!t)throw n.createCachePersistenceError("Persistence check failed. Data was written but it could not be read. Possible cause: on Linux, LibSecret is installed but D-Bus isn't running                     because it cannot be started over SSH.");if("Dummy data to verify underlying persistence mechanism"!==t)throw n.createCachePersistenceError("Persistence check failed. Data written Dummy data to verify underlying persistence mechanism is different                     from data read "+t);return await e.delete(),!0}catch(e){throw n.createCachePersistenceError("Verifing persistence failed with the error: "+e)}}}class d extends h{static async create(e,t){const r=new d;return r.filePath=e,r.logger=new c.Logger(t||d.createDefaultLoggerOptions()),await r.createCacheFile(),r}async save(e){try{await r.promises.writeFile(this.getFilePath(),e,"utf-8")}catch(e){throw n.createFileSystemError(e.code,e.message)}}async saveBuffer(e){try{await r.promises.writeFile(this.getFilePath(),e)}catch(e){throw n.createFileSystemError(e.code,e.message)}}async load(){try{return await r.promises.readFile(this.getFilePath(),"utf-8")}catch(e){throw n.createFileSystemError(e.code,e.message)}}async loadBuffer(){try{return await r.promises.readFile(this.getFilePath())}catch(e){throw n.createFileSystemError(e.code,e.message)}}async delete(){try{return await r.promises.unlink(this.getFilePath()),!0}catch(e){if("ENOENT"===e.code)return this.logger.warning("Cache file does not exist, so it could not be deleted"),!1;throw n.createFileSystemError(e.code,e.message)}}getFilePath(){return this.filePath}async reloadNecessary(e){return e<await this.timeLastModified()}getLogger(){return this.logger}createForPersistenceValidation(){const e=s.dirname(this.filePath)+"/test.cache";return d.create(e)}static createDefaultLoggerOptions(){return{loggerCallback:()=>{},piiLoggingEnabled:!1,logLevel:c.LogLevel.Info}}async timeLastModified(){try{return(await r.promises.stat(this.filePath)).mtime.getTime()}catch(e){if("ENOENT"===e.code)return this.logger.verbose("Cache file does not exist"),0;throw n.createFileSystemError(e.code,e.message)}}async createCacheFile(){await this.createFileDirectory();const e=await r.promises.open(this.filePath,"a");await e.close(),this.logger.info("File created at "+this.filePath)}async createFileDirectory(){try{await r.promises.mkdir(s.dirname(this.filePath),{recursive:!0})}catch(e){if("EEXIST"!==e.code)throw n.createFileSystemError(e.code,e.message);this.logger.info(`Directory ${s.dirname(this.filePath)}  already exists`)}}}var g,u=require("../build/Release/dpapi.node");(g=exports.DataProtectionScope||(exports.DataProtectionScope={})).CurrentUser="CurrentUser",g.LocalMachine="LocalMachine";class m extends h{constructor(e,t){super(),this.scope=e,this.optionalEntropy=t?Buffer.from(t,"utf-8"):null}static async create(e,t,r,i){const s=new m(t,r);return s.filePersistence=await d.create(e,i),s}async save(e){try{const t=u.protectData(Buffer.from(e,"utf-8"),this.optionalEntropy,this.scope.toString());await this.filePersistence.saveBuffer(t)}catch(e){throw n.createFilePersistenceWithDPAPIError(e.message)}}async load(){try{const e=await this.filePersistence.loadBuffer();return void 0!==e&&e&&0!==e.length?u.unprotectData(e,this.optionalEntropy,this.scope.toString()).toString():(this.filePersistence.getLogger().info("Encrypted contents loaded from file were null or empty"),null)}catch(e){throw n.createFilePersistenceWithDPAPIError(e.message)}}async delete(){return this.filePersistence.delete()}async reloadNecessary(e){return this.filePersistence.reloadNecessary(e)}getFilePath(){return this.filePersistence.getFilePath()}getLogger(){return this.filePersistence.getLogger()}createForPersistenceValidation(){const e=s.dirname(this.filePersistence.getFilePath())+"/test.cache";return m.create(e,exports.DataProtectionScope.CurrentUser)}}class f extends h{constructor(e,t){super(),this.serviceName=e,this.accountName=t}static async create(e,t,r,i){const s=new f(t,r);return s.filePersistence=await d.create(e,i),s}async save(e){try{await o.setPassword(this.serviceName,this.accountName,e)}catch(e){throw n.createKeychainPersistenceError(e.message)}await this.filePersistence.save("{}")}async load(){try{return await o.getPassword(this.serviceName,this.accountName)}catch(e){throw n.createKeychainPersistenceError(e.message)}}async delete(){try{return await this.filePersistence.delete(),await o.deletePassword(this.serviceName,this.accountName)}catch(e){throw n.createKeychainPersistenceError(e.message)}}async reloadNecessary(e){return this.filePersistence.reloadNecessary(e)}getFilePath(){return this.filePersistence.getFilePath()}getLogger(){return this.filePersistence.getLogger()}createForPersistenceValidation(){const e=s.dirname(this.filePersistence.getFilePath())+"/test.cache";return f.create(e,"persistenceValidationServiceName","persistencValidationAccountName")}}class P extends h{constructor(e,t){super(),this.serviceName=e,this.accountName=t}static async create(e,t,r,i){const s=new P(t,r);return s.filePersistence=await d.create(e,i),s}async save(e){try{await o.setPassword(this.serviceName,this.accountName,e)}catch(e){throw n.createLibSecretError(e.message)}await this.filePersistence.save("{}")}async load(){try{return await o.getPassword(this.serviceName,this.accountName)}catch(e){throw n.createLibSecretError(e.message)}}async delete(){try{return await this.filePersistence.delete(),await o.deletePassword(this.serviceName,this.accountName)}catch(e){throw n.createLibSecretError(e.message)}}async reloadNecessary(e){return this.filePersistence.reloadNecessary(e)}getFilePath(){return this.filePersistence.getFilePath()}getLogger(){return this.filePersistence.getLogger()}createForPersistenceValidation(){const e=s.dirname(this.filePersistence.getFilePath())+"/test.cache";return P.create(e,"persistenceValidationServiceName","persistencValidationAccountName")}}class y{static get homeEnvVar(){return this.getEnvironmentVariable("HOME")}static get lognameEnvVar(){return this.getEnvironmentVariable("LOGNAME")}static get userEnvVar(){return this.getEnvironmentVariable("USER")}static get lnameEnvVar(){return this.getEnvironmentVariable("LNAME")}static get usernameEnvVar(){return this.getEnvironmentVariable("USERNAME")}static getEnvironmentVariable(e){return process.env[e]}static getEnvironmentPlatform(){return process.platform}static isWindowsPlatform(){return this.getEnvironmentPlatform()===t.WINDOWS}static isLinuxPlatform(){return this.getEnvironmentPlatform()===t.LINUX}static isMacPlatform(){return this.getEnvironmentPlatform()===t.MACOS}static isLinuxRootUser(){return 0===process.getuid()}static getUserRootDirectory(){return this.isWindowsPlatform?this.getUserHomeDirOnWindows():this.getUserHomeDirOnUnix()}static getUserHomeDirOnWindows(){return this.getEnvironmentVariable("LOCALAPPDATA")}static getUserHomeDirOnUnix(){if(this.isWindowsPlatform())throw n.createNotSupportedError("Getting the user home directory for unix is not supported in windows");if(!c.StringUtils.isEmpty(this.homeEnvVar))return this.homeEnvVar;let e=null;if(c.StringUtils.isEmpty(this.lognameEnvVar)?c.StringUtils.isEmpty(this.userEnvVar)?c.StringUtils.isEmpty(this.lnameEnvVar)?c.StringUtils.isEmpty(this.usernameEnvVar)||(e=this.usernameEnvVar):e=this.lnameEnvVar:e=this.userEnvVar:e=this.lognameEnvVar,this.isMacPlatform())return c.StringUtils.isEmpty(e)?null:a.join("/Users",e);if(this.isLinuxPlatform())return this.isLinuxRootUser()?"/root":c.StringUtils.isEmpty(e)?null:a.join("/home",e);throw n.createNotSupportedError("Getting the user home directory for unix is not supported in windows")}}exports.Environment=y,exports.FilePersistence=d,exports.FilePersistenceWithDataProtection=m,exports.KeychainPersistence=f,exports.LibSecretPersistence=P,exports.PersistenceCachePlugin=class{constructor(e,t){this.persistence=e,this.logger=e.getLogger(),this.lockFilePath=this.persistence.getFilePath()+".lockfile",this.crossPlatformLock=new l(this.lockFilePath,this.logger,t),this.lastSync=0,this.currentCache=null}async beforeCacheAccess(e){if(this.logger.info("Executing before cache access"),await this.persistence.reloadNecessary(this.lastSync)||null===this.currentCache)try{this.logger.info("Reload necessary. Last sync time: "+this.lastSync),await this.crossPlatformLock.lock(),this.currentCache=await this.persistence.load(),this.lastSync=(new Date).getTime(),e.tokenCache.deserialize(this.currentCache),this.logger.info("Last sync time updated to: "+this.lastSync)}finally{e.cacheHasChanged?this.logger.info(`Pid ${i.pid} beforeCacheAccess did not release lock`):(await this.crossPlatformLock.unlock(),this.logger.info(`Pid ${i.pid} released lock`))}else e.cacheHasChanged&&(this.logger.verbose("Cache context has changed"),await this.crossPlatformLock.lock())}async afterCacheAccess(e){this.logger.info("Executing after cache access");try{e.cacheHasChanged?(this.logger.info("Msal in-memory cache has changed. Writing changes to persistence"),this.currentCache=e.tokenCache.serialize(),await this.persistence.save(this.currentCache)):this.logger.info("Msal in-memory cache has not changed. Did not write to persistence")}finally{await this.crossPlatformLock.unlock(),this.logger.info(`Pid ${i.pid} afterCacheAccess released lock`)}}},exports.PersistenceCreator=class{static async createPersistence(e){let t;if(y.isWindowsPlatform()){if(!e.cachePath||!e.dataProtectionScope)throw n.createPersistenceNotValidatedError("Cache path and/or data protection scope not provided for the FilePersistenceWithDataProtection cache plugin");t=await m.create(e.cachePath,exports.DataProtectionScope.CurrentUser,void 0,e.loggerOptions)}else if(y.isMacPlatform()){if(!e.cachePath||!e.serviceName||!e.accountName)throw n.createPersistenceNotValidatedError("Cache path, service name and/or account name not provided for the KeychainPersistence cache plugin");t=await f.create(e.cachePath,e.serviceName,e.accountName,e.loggerOptions)}else{if(!y.isLinuxPlatform())throw n.createNotSupportedError("The current environment is not supported by msal-node-extensions yet.");if(!e.cachePath||!e.serviceName||!e.accountName)throw n.createPersistenceNotValidatedError("Cache path, service name and/or account name not provided for the LibSecretPersistence cache plugin");t=await P.create(e.cachePath,e.serviceName,e.accountName,e.loggerOptions)}if(!await t.verifyPersistence().catch(()=>!1)){if(y.isLinuxPlatform()&&e.usePlaintextFileOnLinux){if(!e.cachePath)throw n.createPersistenceNotValidatedError("Cache path not provided for the FilePersistence cache plugin");if(t=await d.create(e.cachePath,e.loggerOptions),await t.verifyPersistence())return t}throw n.createPersistenceNotVerifiedError("Persistence could not be verified")}return t}};
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0});var e,t,r,i=require("fs"),a=require("process"),s=require("path"),o=(e=s)&&"object"==typeof e&&"default"in e?e.default:e,n=require("@azure/msal-common"),c=require("keytar"),l=require("@azure/msal-node-runtime");!function(e){e.WINDOWS="win32",e.LINUX="linux",e.MACOS="darwin"}(t||(t={})),function(e){e.INTERATION_REQUIRED_ERROR_CODE="interaction_required",e.SERVER_UNAVAILABLE="server_unavailable"}(r||(r={}));class h extends Error{constructor(e,t){super(t?`${e}: ${t}`:e),Object.setPrototypeOf(this,h.prototype),this.errorCode=e,this.errorMessage=t,this.name="PersistenceError"}static createFileSystemError(e,t){return new h(e,t)}static createLibSecretError(e){return new h("GnomeKeyringError",e)}static createKeychainPersistenceError(e){return new h("KeychainError",e)}static createFilePersistenceWithDPAPIError(e){return new h("DPAPIEncryptedFileError",e)}static createCrossPlatformLockError(e){return new h("CrossPlatformLockError",e)}static createCachePersistenceError(e){return new h("CachePersistenceError",e)}static createNotSupportedError(e){return new h("NotSupportedError",e)}static createPersistenceNotVerifiedError(e){return new h("PersistenceNotVerifiedError",e)}static createPersistenceNotValidatedError(e){return new h("PersistenceNotValidatedError",e)}}class u{constructor(e,t,r){this.lockFilePath=e,this.retryNumber=r?r.retryNumber:500,this.retryDelay=r?r.retryDelay:100,this.logger=t}async lock(){for(let e=0;e<this.retryNumber;e++)try{return this.logger.info(`Pid ${a.pid} trying to acquire lock`),this.lockFileHandle=await i.promises.open(this.lockFilePath,"wx+"),this.logger.info(`Pid ${a.pid} acquired lock`),void await this.lockFileHandle.write(a.pid.toString())}catch(e){if("EEXIST"!==e.code&&"EPERM"!==e.code)throw this.logger.error(`${a.pid} was not able to acquire lock. Ran into error: ${e.message}`),h.createCrossPlatformLockError(e.message);this.logger.info(e),await this.sleep(this.retryDelay)}throw this.logger.error(a.pid+" was not able to acquire lock. Exceeded amount of retries set in the options"),h.createCrossPlatformLockError("Not able to acquire lock. Exceeded amount of retries set in options")}async unlock(){try{this.lockFileHandle?(await i.promises.unlink(this.lockFilePath),await this.lockFileHandle.close(),this.logger.info("lockfile deleted")):this.logger.warning("lockfile handle does not exist, so lockfile could not be deleted")}catch(e){if("ENOENT"!==e.code)throw this.logger.error(`${a.pid} was not able to release lock. Ran into error: ${e.message}`),h.createCrossPlatformLockError(e.message);this.logger.info("Tried to unlock but lockfile does not exist")}}sleep(e){return new Promise(t=>{setTimeout(t,e)})}}class g{async verifyPersistence(){const e=await this.createForPersistenceValidation();try{await e.save("Dummy data to verify underlying persistence mechanism");const t=await e.load();if(!t)throw h.createCachePersistenceError("Persistence check failed. Data was written but it could not be read. Possible cause: on Linux, LibSecret is installed but D-Bus isn't running                     because it cannot be started over SSH.");if("Dummy data to verify underlying persistence mechanism"!==t)throw h.createCachePersistenceError("Persistence check failed. Data written Dummy data to verify underlying persistence mechanism is different                     from data read "+t);return await e.delete(),!0}catch(e){throw h.createCachePersistenceError("Verifing persistence failed with the error: "+e)}}}class d extends g{static async create(e,t){const r=new d;return r.filePath=e,r.logger=new n.Logger(t||d.createDefaultLoggerOptions()),await r.createCacheFile(),r}async save(e){try{await i.promises.writeFile(this.getFilePath(),e,"utf-8")}catch(e){throw h.createFileSystemError(e.code,e.message)}}async saveBuffer(e){try{await i.promises.writeFile(this.getFilePath(),e)}catch(e){throw h.createFileSystemError(e.code,e.message)}}async load(){try{return await i.promises.readFile(this.getFilePath(),"utf-8")}catch(e){throw h.createFileSystemError(e.code,e.message)}}async loadBuffer(){try{return await i.promises.readFile(this.getFilePath())}catch(e){throw h.createFileSystemError(e.code,e.message)}}async delete(){try{return await i.promises.unlink(this.getFilePath()),!0}catch(e){if("ENOENT"===e.code)return this.logger.warning("Cache file does not exist, so it could not be deleted"),!1;throw h.createFileSystemError(e.code,e.message)}}getFilePath(){return this.filePath}async reloadNecessary(e){return e<await this.timeLastModified()}getLogger(){return this.logger}createForPersistenceValidation(){const e=s.dirname(this.filePath)+"/test.cache";return d.create(e)}static createDefaultLoggerOptions(){return{loggerCallback:()=>{},piiLoggingEnabled:!1,logLevel:n.LogLevel.Info}}async timeLastModified(){try{return(await i.promises.stat(this.filePath)).mtime.getTime()}catch(e){if("ENOENT"===e.code)return this.logger.verbose("Cache file does not exist"),0;throw h.createFileSystemError(e.code,e.message)}}async createCacheFile(){await this.createFileDirectory();const e=await i.promises.open(this.filePath,"a");await e.close(),this.logger.info("File created at "+this.filePath)}async createFileDirectory(){try{await i.promises.mkdir(s.dirname(this.filePath),{recursive:!0})}catch(e){if("EEXIST"!==e.code)throw h.createFileSystemError(e.code,e.message);this.logger.info(`Directory ${s.dirname(this.filePath)}  already exists`)}}}var m,P=require("../build/Release/dpapi.node");(m=exports.DataProtectionScope||(exports.DataProtectionScope={})).CurrentUser="CurrentUser",m.LocalMachine="LocalMachine";class f extends g{constructor(e,t){super(),this.scope=e,this.optionalEntropy=t?Buffer.from(t,"utf-8"):null}static async create(e,t,r,i){const a=new f(t,r);return a.filePersistence=await d.create(e,i),a}async save(e){try{const t=P.protectData(Buffer.from(e,"utf-8"),this.optionalEntropy,this.scope.toString());await this.filePersistence.saveBuffer(t)}catch(e){throw h.createFilePersistenceWithDPAPIError(e.message)}}async load(){try{const e=await this.filePersistence.loadBuffer();return void 0!==e&&e&&0!==e.length?P.unprotectData(e,this.optionalEntropy,this.scope.toString()).toString():(this.filePersistence.getLogger().info("Encrypted contents loaded from file were null or empty"),null)}catch(e){throw h.createFilePersistenceWithDPAPIError(e.message)}}async delete(){return this.filePersistence.delete()}async reloadNecessary(e){return this.filePersistence.reloadNecessary(e)}getFilePath(){return this.filePersistence.getFilePath()}getLogger(){return this.filePersistence.getLogger()}createForPersistenceValidation(){const e=s.dirname(this.filePersistence.getFilePath())+"/test.cache";return f.create(e,exports.DataProtectionScope.CurrentUser)}}class y extends g{constructor(e,t){super(),this.serviceName=e,this.accountName=t}static async create(e,t,r,i){const a=new y(t,r);return a.filePersistence=await d.create(e,i),a}async save(e){try{await c.setPassword(this.serviceName,this.accountName,e)}catch(e){throw h.createKeychainPersistenceError(e.message)}await this.filePersistence.save("{}")}async load(){try{return await c.getPassword(this.serviceName,this.accountName)}catch(e){throw h.createKeychainPersistenceError(e.message)}}async delete(){try{return await this.filePersistence.delete(),await c.deletePassword(this.serviceName,this.accountName)}catch(e){throw h.createKeychainPersistenceError(e.message)}}async reloadNecessary(e){return this.filePersistence.reloadNecessary(e)}getFilePath(){return this.filePersistence.getFilePath()}getLogger(){return this.filePersistence.getLogger()}createForPersistenceValidation(){const e=s.dirname(this.filePersistence.getFilePath())+"/test.cache";return y.create(e,"persistenceValidationServiceName","persistencValidationAccountName")}}class p extends g{constructor(e,t){super(),this.serviceName=e,this.accountName=t}static async create(e,t,r,i){const a=new p(t,r);return a.filePersistence=await d.create(e,i),a}async save(e){try{await c.setPassword(this.serviceName,this.accountName,e)}catch(e){throw h.createLibSecretError(e.message)}await this.filePersistence.save("{}")}async load(){try{return await c.getPassword(this.serviceName,this.accountName)}catch(e){throw h.createLibSecretError(e.message)}}async delete(){try{return await this.filePersistence.delete(),await c.deletePassword(this.serviceName,this.accountName)}catch(e){throw h.createLibSecretError(e.message)}}async reloadNecessary(e){return this.filePersistence.reloadNecessary(e)}getFilePath(){return this.filePersistence.getFilePath()}getLogger(){return this.filePersistence.getLogger()}createForPersistenceValidation(){const e=s.dirname(this.filePersistence.getFilePath())+"/test.cache";return p.create(e,"persistenceValidationServiceName","persistencValidationAccountName")}}class E{static get homeEnvVar(){return this.getEnvironmentVariable("HOME")}static get lognameEnvVar(){return this.getEnvironmentVariable("LOGNAME")}static get userEnvVar(){return this.getEnvironmentVariable("USER")}static get lnameEnvVar(){return this.getEnvironmentVariable("LNAME")}static get usernameEnvVar(){return this.getEnvironmentVariable("USERNAME")}static getEnvironmentVariable(e){return process.env[e]}static getEnvironmentPlatform(){return process.platform}static isWindowsPlatform(){return this.getEnvironmentPlatform()===t.WINDOWS}static isLinuxPlatform(){return this.getEnvironmentPlatform()===t.LINUX}static isMacPlatform(){return this.getEnvironmentPlatform()===t.MACOS}static isLinuxRootUser(){return 0===process.getuid()}static getUserRootDirectory(){return this.isWindowsPlatform?this.getUserHomeDirOnWindows():this.getUserHomeDirOnUnix()}static getUserHomeDirOnWindows(){return this.getEnvironmentVariable("LOCALAPPDATA")}static getUserHomeDirOnUnix(){if(this.isWindowsPlatform())throw h.createNotSupportedError("Getting the user home directory for unix is not supported in windows");if(!n.StringUtils.isEmpty(this.homeEnvVar))return this.homeEnvVar;let e=null;if(n.StringUtils.isEmpty(this.lognameEnvVar)?n.StringUtils.isEmpty(this.userEnvVar)?n.StringUtils.isEmpty(this.lnameEnvVar)?n.StringUtils.isEmpty(this.usernameEnvVar)||(e=this.usernameEnvVar):e=this.lnameEnvVar:e=this.userEnvVar:e=this.lognameEnvVar,this.isMacPlatform())return n.StringUtils.isEmpty(e)?null:o.join("/Users",e);if(this.isLinuxPlatform())return this.isLinuxRootUser()?"/root":n.StringUtils.isEmpty(e)?null:o.join("/home",e);throw h.createNotSupportedError("Getting the user home directory for unix is not supported in windows")}}class w extends n.AuthError{constructor(e,t,r,i){super(e,t),this.name="NativeAuthError",this.statusCode=r,this.tag=i,Object.setPrototypeOf(this,w.prototype)}}const v="@azure/msal-node-extensions";exports.Environment=E,exports.FilePersistence=d,exports.FilePersistenceWithDataProtection=f,exports.KeychainPersistence=y,exports.LibSecretPersistence=p,exports.NativeBrokerPlugin=class{constructor(){this.logger=new n.Logger({loggerCallback:()=>{},piiLoggingEnabled:!1},v,"1.0.0-alpha.31"),this.isBrokerAvailable=!l.msalNodeRuntime.StartupError}setLogger(e){this.logger=new n.Logger(e,v,"1.0.0-alpha.31");const t=(e,t,r)=>{switch(t){case l.LogLevel.Trace:case l.LogLevel.Debug:r?this.logger.tracePii(e):this.logger.trace(e);break;case l.LogLevel.Info:r?this.logger.infoPii(e):this.logger.info(e);break;case l.LogLevel.Warning:r?this.logger.warningPii(e):this.logger.warning(e);break;case l.LogLevel.Error:case l.LogLevel.Fatal:r?this.logger.errorPii(e):this.logger.error(e);break;default:r?this.logger.infoPii(e):this.logger.info(e)}};try{l.msalNodeRuntime.RegisterLogger(t,e.piiLoggingEnabled)}catch(e){const t=this.wrapError(e);if(t)throw t}}async getAccountById(e,t){this.logger.trace("NativeBrokerPlugin - getAccountById called",t);const r=await this.readAccountById(e,t);return this.generateAccountInfo(r.account)}async getAllAccounts(e,t){return this.logger.trace("NativeBrokerPlugin - getAllAccounts called",t),new Promise((r,i)=>{const a=e=>{try{e.CheckError()}catch(e){const t=this.wrapError(e);if(t)return void i(t)}const t=[];e.accounts.forEach(e=>{t.push(this.generateAccountInfo(e))}),r(t)};try{l.msalNodeRuntime.DiscoverAccountsAsync(e,t,a)}catch(e){const t=this.wrapError(e);t&&i(t)}})}async acquireTokenSilent(e){this.logger.trace("NativeBrokerPlugin - acquireTokenSilent called",e.correlationId);const t=this.generateRequestParameters(e),r=await this.getAccount(e);return new Promise((i,a)=>{const s=t=>{try{t.CheckError()}catch(e){const t=this.wrapError(e);if(t)return void a(t)}const r=this.getAuthenticationResult(e,t);i(r)};try{r?l.msalNodeRuntime.AcquireTokenSilentlyAsync(t,e.correlationId,r,s):l.msalNodeRuntime.SignInSilentlyAsync(t,e.correlationId,s)}catch(e){const t=this.wrapError(e);t&&a(t)}})}async acquireTokenInteractive(e,t){this.logger.trace("NativeBrokerPlugin - acquireTokenInteractive called",e.correlationId);const r=this.generateRequestParameters(e),i=await this.getAccount(e),a=t||Buffer.from([0]);return new Promise((t,s)=>{const o=r=>{try{r.CheckError()}catch(e){const t=this.wrapError(e);if(t)return void s(t)}const i=this.getAuthenticationResult(e,r);t(i)};try{switch(e.prompt){case n.PromptValue.LOGIN:case n.PromptValue.SELECT_ACCOUNT:case n.PromptValue.CREATE:this.logger.info("Calling native interop SignInInteractively API",e.correlationId),l.msalNodeRuntime.SignInInteractivelyAsync(a,r,e.correlationId,e.loginHint||n.Constants.EMPTY_STRING,o);break;case n.PromptValue.NONE:i?(this.logger.info("Calling native interop AcquireTokenSilently API",e.correlationId),l.msalNodeRuntime.AcquireTokenSilentlyAsync(r,e.correlationId,i,o)):(this.logger.info("Calling native interop SignInSilently API",e.correlationId),l.msalNodeRuntime.SignInSilentlyAsync(r,e.correlationId,o));break;default:i?(this.logger.info("Calling native interop AcquireTokenInteractively API",e.correlationId),l.msalNodeRuntime.AcquireTokenInteractivelyAsync(a,r,e.correlationId,i,o)):(this.logger.info("Calling native interop SignIn API",e.correlationId),l.msalNodeRuntime.SignInAsync(a,r,e.correlationId,e.loginHint||n.Constants.EMPTY_STRING,o))}}catch(e){const t=this.wrapError(e);t&&s(t)}})}async signOut(e){this.logger.trace("NativeBrokerPlugin - signOut called",e.correlationId);const t=await this.getAccount(e);if(!t)throw n.ClientAuthError.createNoAccountFoundError();return new Promise((r,i)=>{const a=e=>{try{e.CheckError()}catch(e){const t=this.wrapError(e);if(t)return void i(t)}r()};try{l.msalNodeRuntime.SignOutSilentlyAsync(e.clientId,e.correlationId,t,a)}catch(e){const t=this.wrapError(e);t&&i(t)}})}async getAccount(e){return e.accountId?(await this.readAccountById(e.accountId,e.correlationId)).account:null}async readAccountById(e,t){return this.logger.trace("NativeBrokerPlugin - readAccountById called",t),new Promise((r,i)=>{const a=e=>{try{e.CheckError()}catch(e){const t=this.wrapError(e);if(t)return void i(t)}r(e)};try{l.msalNodeRuntime.ReadAccountByIdAsync(e,t,a)}catch(e){const t=this.wrapError(e);t&&i(t)}})}generateRequestParameters(e){this.logger.trace("NativeBrokerPlugin - generateRequestParameters called",e.correlationId);const t=new l.msalNodeRuntime.AuthParameters;try{if(t.CreateAuthParameters(e.clientId,e.authority),t.SetRedirectUri(e.redirectUri),t.SetRequestedScopes(e.scopes.join(" ")),e.claims&&t.SetDecodedClaims(e.claims),e.authenticationScheme===n.AuthenticationScheme.POP){if(!e.resourceRequestMethod||!e.resourceRequestUri||!e.shrNonce)throw new Error("Authentication Scheme set to POP but one or more of the following parameters are missing: resourceRequestMethod, resourceRequestUri, shrNonce");const r=new URL(e.resourceRequestUri);t.SetPopParams(e.resourceRequestMethod,r.host,r.pathname,e.shrNonce)}e.extraParameters&&Object.keys(e.extraParameters).forEach(r=>{t.SetAdditionalParameter(r,e.extraParameters[r])})}catch(e){const t=this.wrapError(e);if(t)throw t}return t}getAuthenticationResult(e,t){let r,i;this.logger.trace("NativeBrokerPlugin - getAuthenticationResult called",e.correlationId);try{r=!!JSON.parse(t.telemetryData).is_cache}catch(t){this.logger.error("NativeBrokerPlugin: getAuthenticationResult - Error parsing telemetry data. Could not determine if response came from cache.",e.correlationId)}try{i=JSON.parse(t.idToken)}catch(e){throw new Error("Unable to parse idToken claims")}const a=this.generateAccountInfo(t.account,i);return{authority:e.authority,uniqueId:i.oid||i.sub||"",tenantId:i.tid||"",scopes:t.grantedScopes.split(" "),account:a,idToken:t.rawIdToken,idTokenClaims:i,accessToken:t.accessToken,fromCache:r,expiresOn:new Date(1e3*t.expiresOn),tokenType:t.isPopAuthorization?n.AuthenticationScheme.POP:n.AuthenticationScheme.BEARER,correlationId:e.correlationId,fromNativeBroker:!0}}generateAccountInfo(e,t){return this.logger.trace("NativeBrokerPlugin - generateAccountInfo called"),{homeAccountId:e.homeAccountId,environment:e.environment,tenantId:e.realm,username:e.username,localAccountId:e.localAccountId,name:e.displayName,idTokenClaims:t,nativeAccountId:e.accountId}}isMsalRuntimeError(e){return e.hasOwnProperty("errorCode")||e.hasOwnProperty("errorStatus")||e.hasOwnProperty("errorContext")||e.hasOwnProperty("errorTag")}wrapError(e){if(this.isMsalRuntimeError(e)){const{errorCode:t,errorStatus:i,errorContext:a,errorTag:s}=e;switch(i){case l.ErrorStatus.InteractionRequired:case l.ErrorStatus.AccountUnusable:return new n.InteractionRequiredAuthError(r.INTERATION_REQUIRED_ERROR_CODE,a);case l.ErrorStatus.NoNetwork:case l.ErrorStatus.NetworkTemporarilyUnavailable:return n.ClientAuthError.createNoNetworkConnectivityError();case l.ErrorStatus.ServerTemporarilyUnavailable:return new n.ServerError(r.SERVER_UNAVAILABLE,a);case l.ErrorStatus.UserCanceled:return n.ClientAuthError.createUserCanceledError();case l.ErrorStatus.AuthorityUntrusted:return n.ClientConfigurationError.createUntrustedAuthorityError();case l.ErrorStatus.UserSwitched:return null;case l.ErrorStatus.AccountNotFound:return n.ClientAuthError.createNoAccountFoundError();default:return new w(l.ErrorStatus[i],a,t,s)}}return e}},exports.PersistenceCachePlugin=class{constructor(e,t){this.persistence=e,this.logger=e.getLogger(),this.lockFilePath=this.persistence.getFilePath()+".lockfile",this.crossPlatformLock=new u(this.lockFilePath,this.logger,t),this.lastSync=0,this.currentCache=null}async beforeCacheAccess(e){if(this.logger.info("Executing before cache access"),await this.persistence.reloadNecessary(this.lastSync)||null===this.currentCache)try{this.logger.info("Reload necessary. Last sync time: "+this.lastSync),await this.crossPlatformLock.lock(),this.currentCache=await this.persistence.load(),this.lastSync=(new Date).getTime(),e.tokenCache.deserialize(this.currentCache),this.logger.info("Last sync time updated to: "+this.lastSync)}finally{e.cacheHasChanged?this.logger.info(`Pid ${a.pid} beforeCacheAccess did not release lock`):(await this.crossPlatformLock.unlock(),this.logger.info(`Pid ${a.pid} released lock`))}else e.cacheHasChanged&&(this.logger.verbose("Cache context has changed"),await this.crossPlatformLock.lock())}async afterCacheAccess(e){this.logger.info("Executing after cache access");try{e.cacheHasChanged?(this.logger.info("Msal in-memory cache has changed. Writing changes to persistence"),this.currentCache=e.tokenCache.serialize(),await this.persistence.save(this.currentCache)):this.logger.info("Msal in-memory cache has not changed. Did not write to persistence")}finally{await this.crossPlatformLock.unlock(),this.logger.info(`Pid ${a.pid} afterCacheAccess released lock`)}}},exports.PersistenceCreator=class{static async createPersistence(e){let t;if(E.isWindowsPlatform()){if(!e.cachePath||!e.dataProtectionScope)throw h.createPersistenceNotValidatedError("Cache path and/or data protection scope not provided for the FilePersistenceWithDataProtection cache plugin");t=await f.create(e.cachePath,exports.DataProtectionScope.CurrentUser,void 0,e.loggerOptions)}else if(E.isMacPlatform()){if(!e.cachePath||!e.serviceName||!e.accountName)throw h.createPersistenceNotValidatedError("Cache path, service name and/or account name not provided for the KeychainPersistence cache plugin");t=await y.create(e.cachePath,e.serviceName,e.accountName,e.loggerOptions)}else{if(!E.isLinuxPlatform())throw h.createNotSupportedError("The current environment is not supported by msal-node-extensions yet.");if(!e.cachePath||!e.serviceName||!e.accountName)throw h.createPersistenceNotValidatedError("Cache path, service name and/or account name not provided for the LibSecretPersistence cache plugin");t=await p.create(e.cachePath,e.serviceName,e.accountName,e.loggerOptions)}if(!await t.verifyPersistence().catch(()=>!1)){if(E.isLinuxPlatform()&&e.usePlaintextFileOnLinux){if(!e.cachePath)throw h.createPersistenceNotValidatedError("Cache path not provided for the FilePersistence cache plugin");if(t=await d.create(e.cachePath,e.loggerOptions),await t.verifyPersistence())return t}throw h.createPersistenceNotVerifiedError("Persistence could not be verified")}return t}};
 //# sourceMappingURL=msal-node-extensions.cjs.production.min.js.map