@bitblit/ratchet-warden-common 4.0.353-alpha → 4.0.355-alpha

package/lib/index.mjs

@@ -1,2 +1,2 @@
-import{RequireRatchet as e,ErrorRatchet as t,Logger as n,StringRatchet as r,JwtRatchet as o}from"@bitblit/ratchet-common";import{BehaviorSubject as s,timer as i}from"rxjs";import{startRegistration as a,startAuthentication as c}from"@simplewebauthn/browser";class l{constructor(){}static buildInformation(){return{version:"353",hash:"2c20656162db96c96be797b086872b1406c7d521",branch:"alpha-2024-05-12-16",tag:"alpha-2024-05-12-16",timeBuiltISO:"2024-05-12T23:05:35-0700",notes:"No notes"}}}class g{commandSender;jwtProvider;constructor(t,n){this.commandSender=t,this.jwtProvider=n,e.notNullOrUndefined(t,"commandSender"),e.notNullOrUndefined(n,"jwtProvider")}async exchangeCommand(e,n){const r=JSON.stringify(e),o=await this.commandSender.sendCommand(r,this.jwtProvider.fetchCurrentLoggedInJwtToken()),s=JSON.parse(o);return s?.error&&!n&&t.throwFormattedErr("%s",s.error),s}async createAccount(e,t,n,r){const o={createAccount:{contact:e,sendCode:t,label:n,tags:r}};return(await this.exchangeCommand(o)).createAccount}async sendMagicLinkRaw(e){if(e){const t={sendMagicLink:e};return(await this.exchangeCommand(t)).sendMagicLink}return n.warn("Skipping magic link command - none supplied"),!1}async sendMagicLinkByUserId(e,t,n,r){const o={contactLookup:{userId:e,contactType:n},landingUrl:t,meta:r};return this.sendMagicLinkRaw(o)}async sendMagicLink(e,t,n){const r={contact:e,landingUrl:t,meta:n};return this.sendMagicLinkRaw(r)}async generateWebAuthnAuthenticationChallengeForUserId(e){const t={generateWebAuthnAuthenticationChallengeForUserId:e},n=await this.exchangeCommand(t);return JSON.parse(n.generateWebAuthnAuthenticationChallengeForUserId.dataAsJson)}async generateWebAuthnRegistrationChallengeForLoggedInUser(){const e=await this.exchangeCommand({generateWebAuthnRegistrationChallengeForLoggedInUser:!0});return JSON.parse(e.generateWebAuthnRegistrationChallengeForLoggedInUser.dataAsJson)}async removeWebAuthnRegistration(e,t){const n={removeWebAuthnRegistration:{userId:e,credentialId:t}};return(await this.exchangeCommand(n)).removeWebAuthnRegistration}async removeWebAuthnRegistrationFromLoggedInUser(e){const t={removeWebAuthnRegistrationFromLoggedInUser:e};return(await this.exchangeCommand(t)).removeWebAuthnRegistrationFromLoggedInUser}async removeContactFromLoggedInUser(e){const t={removeContactFromLoggedInUser:e};return(await this.exchangeCommand(t)).removeContactFromLoggedInUser}async sendExpiringValidationToken(e){const t={sendExpiringValidationToken:e};return(await this.exchangeCommand(t)).sendExpiringValidationToken}async addContactToLoggedInUser(e){const t={addContactToLoggedInUser:e};return(await this.exchangeCommand(t)).addContactToLoggedInUser}async addWebAuthnRegistrationToLoggedInUser(e,t,n){const r={addWebAuthnRegistrationToLoggedInUser:{webAuthn:{dataAsJson:JSON.stringify(n)},applicationName:e,deviceLabel:t}};return(await this.exchangeCommand(r)).addWebAuthnRegistrationToLoggedInUser}async performLoginCmd(e){const t={performLogin:e};return(await this.exchangeCommand(t)).performLogin}async refreshJwtToken(e){let t=null;if(r.trimToNull(e))try{t=(await this.exchangeCommand({refreshJwtToken:e})).refreshJwtToken}catch(e){n.error("JwtRefresh Failed : %s",e)}return t}async executeExpiringTokenBasedLogin(e,t){let r=null;try{const n={contact:e,expiringToken:t};r=await this.performLoginCmd(n)}catch(e){n.error("ExpiringToken login Failed : %s",e)}return r}}var d,u,h,p;!function(e){e.TextCapablePhoneNumber="TextCapablePhoneNumber",e.EmailAddress="EmailAddress"}(d||(d={}));class m{constructor(){}static extractContactsOfType(e,t){let n=null;return e?.contactMethods&&(n=e.contactMethods.filter((e=>e.type===t)).map((e=>e.value))),n}static validLoginRequest(e){let t=!1;return e&&(r.trimToNull(e.userId)||m.validContact(e.contact))&&(r.trimToNull(e.expiringToken)||r.trimToNull(e.jwtTokenToRefresh)||e.webAuthn)&&(t=!0),t}static stringToWardenContact(e){let t=null;const r=m.stringToContactType(e);return r?t={type:r,value:e}:n.error("Failed to convert a string to a contact type",e),t}static teamRolesToRoles(e){return e?.length?e.map((e=>m.teamRoleToRoleString(e))):[]}static roleStringsToTeamRoles(e){return e?.length?e.map((e=>m.roleStringToTeamRole(e))):[]}static roleStringToTeamRole(e){let t=null;if(e&&e.indexOf("_/_")>=0){const n=e.split("_/_");t={team:n[0],role:n[1]}}return t}static teamRoleToRoleString(e){let t=null;return e?.role&&e?.team&&(t=e.team+"_/_"+e.role),t}static stringToContactType(e){let t=null;return r.trimToNull(e)&&(t=m.stringIsEmailAddress(e)?d.EmailAddress:null,t=!t&&m.stringIsPhoneNumber(e)?d.TextCapablePhoneNumber:t),t}static validContact(e){let t=!1;if(e?.type&&r.trimToNull(e?.value))switch(e.type){case d.EmailAddress:t=m.stringIsEmailAddress(e.value);break;case d.TextCapablePhoneNumber:t=m.stringIsPhoneNumber(e.value);break;default:t=!1}return t}static stringIsEmailAddress(e){return!!e.match(/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*$/)}static stringIsPhoneNumber(e){return!!e.match(/^[\\+]?[(]?[0-9]{3}[)]?[-\\s\\.]?[0-9]{3}[-\\s\\.]?[0-9]{4,6}$/im)}static stripWardenEntryToSummary(e){return e?{userId:e.userId,userLabel:e.userLabel,contactMethods:e.contactMethods,webAuthnAuthenticatorSummaries:(e.webAuthnAuthenticators||[]).map((e=>m.stripWardenWebAuthnEntryToSummary(e)))}:null}static stripWardenWebAuthnEntryToSummary(e){return e?{origin:e.origin,applicationName:e.applicationName,deviceLabel:e.deviceLabel,credentialIdBase64:e.credentialIdBase64}:null}static wrapperIsExpired(e){return e?.userObject?.exp&&e.expirationEpochSeconds<Date.now()/1e3}}class L{wrapped;serveExpiredCredentials;_currentUserSubject=new s(null);constructor(e,t=!1){this.wrapped=e,this.serveExpiredCredentials=t}fetchCurrentLoggedInJwtToken(){let e=this?._currentUserSubject?.getValue();return!this.serveExpiredCredentials&&e&&m.wrapperIsExpired(e)&&(n.info("Current wrapper in the subject is expired - autostripping"),this.currentUserSubject.next(null),e=null),e?.jwtToken}get currentUserSubject(){return this._currentUserSubject}onAutomaticLogout(){this.wrapped&&this.wrapped.onAutomaticLogout()}onAutomaticTokenRefresh(e){this?.wrapped?.onAutomaticTokenRefresh&&this.wrapped.onAutomaticTokenRefresh(e)}onLoginFailure(e){this?.wrapped?.onLoginFailure&&this.wrapped.onLoginFailure(e)}onLogout(){this?.wrapped?.onLogout&&this.wrapped.onLogout(),this.currentUserSubject.next(null)}onSuccessfulLogin(e){this?.wrapped?.onSuccessfulLogin&&this.wrapped.onSuccessfulLogin(e),this.currentUserSubject.next(e)}}class f{options;loggedInTimerSubscription;_autoRefreshEnabled=!1;constructor(e){this.options=e,n.info("Initializing user service");const t=this.options.loggedInUserProvider.fetchLoggedInUserWrapper();m.wrapperIsExpired(t)?(n.info("Stored token is expired, removing it"),this.options.loggedInUserProvider.logOutUser()):this.options.eventProcessor.onSuccessfulLogin(t);const r=this.options.loginCheckTimerPingSeconds||2.5;this.loggedInTimerSubscription=i(0,1e3*r).subscribe((e=>this.checkForAutoLogoutOrRefresh(e)))}cleanShutDown(){this.loggedInTimerSubscription&&this.loggedInTimerSubscription.unsubscribe()}get serviceOptions(){return this.options}async createAccount(e,t,n,o){const s=await this.options.wardenClient.createAccount(e,t,n,o);return this.options.recentLoginProvider&&r.trimToNull(s)&&this.options.recentLoginProvider.saveNewUser(s,n,e),s}async addContactToLoggedInUser(e){return this.options.wardenClient.addContactToLoggedInUser(e)}get autoRefreshEnabled(){return this._autoRefreshEnabled}set autoRefreshEnabled(e){if(e){if(!this.options.allowAutoRefresh)throw new Error("Cannot enable auto-refresh - this is disabled in the user service options");this._autoRefreshEnabled=!0}else this._autoRefreshEnabled=!1}async checkForAutoLogoutOrRefresh(e){n.debug("Checking for auto-logout or refresh : %s",e);const t=this.fetchLoggedInUserWrapper();if(t){const e=this.options.autoLoginHandlingThresholdSeconds||10;if(t.expirationEpochSeconds-Math.floor(Date.now()/1e3)<e)if(this.autoRefreshEnabled){n.info("Under threshold, initiating auto-refresh");const e=await this.refreshToken();this.options.eventProcessor.onAutomaticTokenRefresh(e)}else n.info("Under threshold, initiating auto-logout"),this.logout()}}logout(){this.options.loggedInUserProvider.logOutUser(),this.options.eventProcessor.onLogout()}fetchLoggedInUserWrapper(){let e=this.options.loggedInUserProvider.fetchLoggedInUserWrapper();return e&&m.wrapperIsExpired(e)&&(n.info("Token is expired - auto logout triggered"),this.logout(),e=null),e}loggedInUserHasRole(e){let t=!1;if(r.trimToNull(e)){const n=this.fetchLoggedInUserWrapper(),r=e.toLowerCase();t=n?.userObject?.roles&&!!n.userObject.roles.find((e=>e.toLowerCase()===r))}return t}isLoggedIn(){return!!this.fetchLoggedInUserWrapper()}fetchLoggedInUserJwtObject(){const e=this.fetchLoggedInUserWrapper();return e?e.userObject:null}fetchLoggedInUserJwtToken(){const e=this.fetchLoggedInUserWrapper();return e?e.jwtToken:null}fetchLoggedInUserObject(){const e=this.fetchLoggedInUserJwtObject();return e?e.user:null}fetchLoggedInUserExpirationEpochSeconds(){const e=this.fetchLoggedInUserJwtObject();return e?e.exp:null}fetchLoggedInUserRemainingSeconds(){const e=this.fetchLoggedInUserJwtObject();return e?e.exp-Math.floor(Date.now()/1e3):null}updateLoggedInUserFromTokenString(e){let t=null;if(r.trimToNull(e)){n.info("updateLoggedInUserFromTokenString : %s",e);const r=o.decodeTokenNoVerify(e);r?(t={userObject:r,jwtToken:e,expirationEpochSeconds:r.exp},this.options.loggedInUserProvider.setLoggedInUserWrapper(t),this.updateRecentLoginsFromWardenEntrySummary(r.loginData),this.options.eventProcessor.onSuccessfulLogin(t)):(n.warn("Failed to parse token %s - ignoring login and triggering failure"),this.options.eventProcessor.onLoginFailure("Could not parse token string"))}else n.info("Called updateLoggedInUserFromTokenString with empty string - logging out"),this.logout();return t}async refreshToken(){let e=null;const t=this.fetchLoggedInUserWrapper();if(t){const n=await this.options.wardenClient.refreshJwtToken(t.jwtToken);e=this.updateLoggedInUserFromTokenString(n)}else n.info("Could not refresh - no token available");return e}async sendExpiringCode(e){return this.options.wardenClient.sendExpiringValidationToken(e)}async processWardenLoginResults(e){let t=null;return e?(n.info("Warden: response : %j ",e),e.jwtToken?(n.info("Applying login"),t=this.updateLoggedInUserFromTokenString(e.jwtToken)):e.error?this.options.eventProcessor.onLoginFailure(e.error):(n.error("Response contained neither token nor error"),this.options.eventProcessor.onLoginFailure("Response contained neither token nor error"))):(n.error("Login call failed"),this.options.eventProcessor.onLoginFailure("Login call returned null")),t}updateRecentLoginsFromWardenEntrySummary(e){this.options.recentLoginProvider&&e?(n.info("UserService : Saving recent login %j",e),this.options.recentLoginProvider.saveRecentLogin(e)):n.info("Not saving recent login - no storage configured or no data passed")}updateRecentLoginsFromLoggedInUserWrapper(e){this.updateRecentLoginsFromWardenEntrySummary(e?.userObject?.loginData)}async executeWebAuthnBasedLogin(e){const t=await this.executeWebAuthnLoginToWardenLoginResults(e),n=await this.processWardenLoginResults(t);return this.updateRecentLoginsFromLoggedInUserWrapper(n),n}async removeWebAuthnRegistrationFromLoggedInUser(e){return await this.options.wardenClient.removeWebAuthnRegistrationFromLoggedInUser(e)}async removeContactFromLoggedInUser(e){return await this.options.wardenClient.removeContactFromLoggedInUser(e)}async executeValidationTokenBasedLogin(e,t,r){n.info("Warden: executeValidationTokenBasedLogin : %j : %s : %s",e,t,r);const o=await this.options.wardenClient.performLoginCmd({contact:e,expiringToken:t,createUserIfMissing:r}),s=await this.processWardenLoginResults(o);return this.updateRecentLoginsFromLoggedInUserWrapper(s),s}async saveCurrentDeviceAsWebAuthnForCurrentUser(){const e=await this.options.wardenClient.generateWebAuthnRegistrationChallengeForLoggedInUser(),t=await a(e),n=r.trimToEmpty(this.options?.deviceLabelGenerator?this.options.deviceLabelGenerator():this.defaultDeviceLabelGenerator()),o=await this.options.wardenClient.addWebAuthnRegistrationToLoggedInUser(this.options.applicationName,n,t);return this.updateRecentLoginsFromWardenEntrySummary(o),o}defaultDeviceLabelGenerator(){let e="";return navigator?(e=navigator.userAgentData&&navigator.userAgentData.brands&&navigator.userAgentData.brands[1]&&navigator.userAgentData.brands[1].brand?navigator.userAgentData.brands[1].brand:navigator.userAgent,navigator.platform&&(e+=" on "+navigator.platform)):e="Unknown device",e}async executeWebAuthnLoginToWardenLoginResults(e){let t=null;try{const r=await this.options.wardenClient.generateWebAuthnAuthenticationChallengeForUserId(e);n.info("Got login challenge : %s",r);const o=await c(r);n.info("Got creds: %j",o);const s={userId:e,webAuthn:o};t=await this.options.wardenClient.performLoginCmd(s)}catch(e){n.error("WebauthN Failed : %s",e)}return t}}class w{saveRecentLogin(e){if(e?.userId){n.info("Saving recent login : %j",e);let t=this.fetchCache();t=t.filter((t=>t.user.userId!==e.userId)),t.push({user:e,lastLoginEpochMS:Date.now()}),this.updateCache(t)}else n.warn("Cannot save recent login - no login provided :  %s",e)}saveNewUser(e,t,o){r.trimToNull(e)&&m.validContact(o)?this.saveRecentLogin({userId:e,contactMethods:[o],webAuthnAuthenticatorSummaries:[],userLabel:t}):n.warn("Cannot save new user - invalid data : %s : %j",e,o)}removeUser(e){let t=this.fetchCache();t=t.filter((t=>t.user.userId!==e)),this.updateCache(t)}fetchAllLogins(){return Object.assign([],this.fetchCache())}clearAllLogins(){this.updateCache([])}}class b{localStorageKey;constructor(n){this.localStorageKey=n,e.notNullUndefinedOrOnlyWhitespaceString(this.localStorageKey,"localStorageKey"),localStorage||t.throwFormattedErr("Local storage not available on this platform")}fetchLoggedInUserWrapper(){const e=localStorage.getItem(this.localStorageKey);return r.trimToNull(e)?JSON.parse(e):null}logOutUser(){this.setLoggedInUserWrapper(null)}setLoggedInUserWrapper(e){e?localStorage.setItem(this.localStorageKey,JSON.stringify(e)):localStorage.removeItem(this.localStorageKey)}}class I extends w{localStorageKey;constructor(n){super(),this.localStorageKey=n,e.notNullUndefinedOrOnlyWhitespaceString(this.localStorageKey,"localStorageKey"),localStorage||t.throwFormattedErr("Local storage not available on this platform")}fetchCache(){const e=r.trimToNull(localStorage.getItem(r.trimToNull(this.localStorageKey)));return e?JSON.parse(e):[]}updateCache(e){const t=e?JSON.stringify(e):"[]";localStorage.setItem(r.trimToNull(this.localStorageKey),t)}}class C{wrapper;fetchLoggedInUserWrapper(){return this.wrapper}logOutUser(){this.wrapper=null}setLoggedInUserWrapper(e){this.wrapper=e}}class T extends w{_cache=[];fetchCache(){return this._cache}updateCache(e){this._cache=e}}!function(e){e.ExpiringCode="ExpiringCode",e.MagicLink="MagicLink",e.Custom="Custom"}(u||(u={})),function(e){e.Verified="Verified",e.Failed="Failed",e.Error="Error"}(h||(h={})),function(e){e.ble="ble",e.internal="internal",e.nfc="nfc",e.usb="usb",e.cable="cable",e.hybrid="hybrid"}(p||(p={}));export{l as RatchetWardenCommonInfo,g as WardenClient,w as WardenClientAbstractRecentLoginProvider,b as WardenClientLocalStorageLoggedInUserProvider,I as WardenClientLocalStorageRecentLoginProvider,C as WardenClientTransientMemoryLoggedInUserProvider,T as WardenClientTransientMemoryRecentLoginProvider,d as WardenContactType,u as WardenCustomerMessageType,L as WardenDelegatingCurrentUserProvidingUserServiceEventProcessingProvider,h as WardenStoreRegistrationResponseType,f as WardenUserService,m as WardenUtils,p as WardenWebAuthnTransportFutureType};
+import{RequireRatchet as e,ErrorRatchet as t,Logger as n,StringRatchet as r,JwtRatchet as o}from"@bitblit/ratchet-common";import{BehaviorSubject as s,timer as i}from"rxjs";import{startRegistration as a,startAuthentication as c}from"@simplewebauthn/browser";class l{constructor(){}static buildInformation(){return{version:"355",hash:"c2b3df5c6ecad573d661cbd4a241da9d002d184c",branch:"alpha-2024-05-13-2",tag:"alpha-2024-05-13-2",timeBuiltISO:"2024-05-13T10:52:10-0700",notes:"No notes"}}}class g{commandSender;jwtProvider;constructor(t,n){this.commandSender=t,this.jwtProvider=n,e.notNullOrUndefined(t,"commandSender"),e.notNullOrUndefined(n,"jwtProvider")}async exchangeCommand(e,n){const r=JSON.stringify(e),o=await this.commandSender.sendCommand(r,this.jwtProvider.fetchCurrentLoggedInJwtToken()),s=JSON.parse(o);return s?.error&&!n&&t.throwFormattedErr("%s",s.error),s}async createAccount(e,t,n,r){const o={createAccount:{contact:e,sendCode:t,label:n,tags:r}};return(await this.exchangeCommand(o)).createAccount}async sendMagicLinkRaw(e){if(e){const t={sendMagicLink:e};return(await this.exchangeCommand(t)).sendMagicLink}return n.warn("Skipping magic link command - none supplied"),!1}async sendMagicLinkByUserId(e,t,n,r){const o={contactLookup:{userId:e,contactType:n},landingUrl:t,meta:r};return this.sendMagicLinkRaw(o)}async sendMagicLink(e,t,n){const r={contact:e,landingUrl:t,meta:n};return this.sendMagicLinkRaw(r)}async generateWebAuthnAuthenticationChallengeForUserId(e){const t={generateWebAuthnAuthenticationChallengeForUserId:e},n=await this.exchangeCommand(t);return JSON.parse(n.generateWebAuthnAuthenticationChallengeForUserId.dataAsJson)}async generateWebAuthnRegistrationChallengeForLoggedInUser(){const e=await this.exchangeCommand({generateWebAuthnRegistrationChallengeForLoggedInUser:!0});return JSON.parse(e.generateWebAuthnRegistrationChallengeForLoggedInUser.dataAsJson)}async removeWebAuthnRegistration(e,t){const n={removeWebAuthnRegistration:{userId:e,credentialId:t}};return(await this.exchangeCommand(n)).removeWebAuthnRegistration}async removeWebAuthnRegistrationFromLoggedInUser(e){const t={removeWebAuthnRegistrationFromLoggedInUser:e};return(await this.exchangeCommand(t)).removeWebAuthnRegistrationFromLoggedInUser}async removeContactFromLoggedInUser(e){const t={removeContactFromLoggedInUser:e};return(await this.exchangeCommand(t)).removeContactFromLoggedInUser}async sendExpiringValidationToken(e){const t={sendExpiringValidationToken:e};return(await this.exchangeCommand(t)).sendExpiringValidationToken}async addContactToLoggedInUser(e){const t={addContactToLoggedInUser:e};return(await this.exchangeCommand(t)).addContactToLoggedInUser}async addWebAuthnRegistrationToLoggedInUser(e,t,n){const r={addWebAuthnRegistrationToLoggedInUser:{webAuthn:{dataAsJson:JSON.stringify(n)},applicationName:e,deviceLabel:t}};return(await this.exchangeCommand(r)).addWebAuthnRegistrationToLoggedInUser}async performLoginCmd(e){const t={performLogin:e};return(await this.exchangeCommand(t)).performLogin}async refreshJwtToken(e){let t=null;if(r.trimToNull(e))try{t=(await this.exchangeCommand({refreshJwtToken:e})).refreshJwtToken}catch(e){n.error("JwtRefresh Failed : %s",e)}return t}async executeExpiringTokenBasedLogin(e,t){let r=null;try{const n={contact:e,expiringToken:t};r=await this.performLoginCmd(n)}catch(e){n.error("ExpiringToken login Failed : %s",e)}return r}}var d,u,h,p;!function(e){e.TextCapablePhoneNumber="TextCapablePhoneNumber",e.EmailAddress="EmailAddress"}(d||(d={}));class m{constructor(){}static extractContactsOfType(e,t){let n=null;return e?.contactMethods&&(n=e.contactMethods.filter((e=>e.type===t)).map((e=>e.value))),n}static validLoginRequest(e){let t=!1;return e&&(r.trimToNull(e.userId)||m.validContact(e.contact))&&(r.trimToNull(e.expiringToken)||r.trimToNull(e.jwtTokenToRefresh)||e.webAuthn)&&(t=!0),t}static stringToWardenContact(e){let t=null;const r=m.stringToContactType(e);return r?t={type:r,value:e}:n.error("Failed to convert a string to a contact type",e),t}static teamRolesToRoles(e){return e?.length?e.map((e=>m.teamRoleToRoleString(e))):[]}static roleStringsToTeamRoles(e){return e?.length?e.map((e=>m.roleStringToTeamRole(e))):[]}static roleStringToTeamRole(e){let t=null;if(e&&e.indexOf("_/_")>=0){const n=e.split("_/_");t={team:n[0],role:n[1]}}return t}static teamRoleToRoleString(e){let t=null;return e?.role&&e?.team&&(t=e.team+"_/_"+e.role),t}static stringToContactType(e){let t=null;return r.trimToNull(e)&&(t=m.stringIsEmailAddress(e)?d.EmailAddress:null,t=!t&&m.stringIsPhoneNumber(e)?d.TextCapablePhoneNumber:t),t}static validContact(e){let t=!1;if(e?.type&&r.trimToNull(e?.value))switch(e.type){case d.EmailAddress:t=m.stringIsEmailAddress(e.value);break;case d.TextCapablePhoneNumber:t=m.stringIsPhoneNumber(e.value);break;default:t=!1}return t}static stringIsEmailAddress(e){return!!e.match(/^[a-zA-Z0-9.!#$%&'*+/=?^_`{|}~-]+@[a-zA-Z0-9-]+(?:\.[a-zA-Z0-9-]+)*$/)}static stringIsPhoneNumber(e){return!!e.match(/^[\\+]?[(]?[0-9]{3}[)]?[-\\s\\.]?[0-9]{3}[-\\s\\.]?[0-9]{4,6}$/im)}static stripWardenEntryToSummary(e){return e?{userId:e.userId,userLabel:e.userLabel,contactMethods:e.contactMethods,webAuthnAuthenticatorSummaries:(e.webAuthnAuthenticators||[]).map((e=>m.stripWardenWebAuthnEntryToSummary(e)))}:null}static stripWardenWebAuthnEntryToSummary(e){return e?{origin:e.origin,applicationName:e.applicationName,deviceLabel:e.deviceLabel,credentialIdBase64:e.credentialIdBase64}:null}static wrapperIsExpired(e){return e?.userObject?.exp&&e.expirationEpochSeconds<Date.now()/1e3}}class L{wrapped;serveExpiredCredentials;_currentUserSubject=new s(null);constructor(e,t=!1){this.wrapped=e,this.serveExpiredCredentials=t}fetchCurrentLoggedInJwtToken(){let e=this?._currentUserSubject?.getValue();return!this.serveExpiredCredentials&&e&&m.wrapperIsExpired(e)&&(n.info("Current wrapper in the subject is expired - autostripping"),this.currentUserSubject.next(null),e=null),e?.jwtToken}get currentUserSubject(){return this._currentUserSubject}onAutomaticLogout(){this.wrapped&&this.wrapped.onAutomaticLogout()}onAutomaticTokenRefresh(e){this?.wrapped?.onAutomaticTokenRefresh&&this.wrapped.onAutomaticTokenRefresh(e)}onLoginFailure(e){this?.wrapped?.onLoginFailure&&this.wrapped.onLoginFailure(e)}onLogout(){this?.wrapped?.onLogout&&this.wrapped.onLogout(),this.currentUserSubject.next(null)}onSuccessfulLogin(e){this?.wrapped?.onSuccessfulLogin&&this.wrapped.onSuccessfulLogin(e),this.currentUserSubject.next(e)}}class f{options;loggedInTimerSubscription;_autoRefreshEnabled=!1;constructor(e){this.options=e,n.info("Initializing user service");const t=this.options.loggedInUserProvider.fetchLoggedInUserWrapper();m.wrapperIsExpired(t)?(n.info("Stored token is expired, removing it"),this.options.loggedInUserProvider.logOutUser()):this.options.eventProcessor.onSuccessfulLogin(t);const r=this.options.loginCheckTimerPingSeconds||2.5;this.loggedInTimerSubscription=i(0,1e3*r).subscribe((e=>this.checkForAutoLogoutOrRefresh(e)))}cleanShutDown(){this.loggedInTimerSubscription&&this.loggedInTimerSubscription.unsubscribe()}get serviceOptions(){return this.options}async createAccount(e,t,n,o){const s=await this.options.wardenClient.createAccount(e,t,n,o);return this.options.recentLoginProvider&&r.trimToNull(s)&&this.options.recentLoginProvider.saveNewUser(s,n,e),s}async addContactToLoggedInUser(e){return this.options.wardenClient.addContactToLoggedInUser(e)}get autoRefreshEnabled(){return this._autoRefreshEnabled}set autoRefreshEnabled(e){if(e){if(!this.options.allowAutoRefresh)throw new Error("Cannot enable auto-refresh - this is disabled in the user service options");this._autoRefreshEnabled=!0}else this._autoRefreshEnabled=!1}async checkForAutoLogoutOrRefresh(e){n.debug("Checking for auto-logout or refresh : %s",e);const t=this.fetchLoggedInUserWrapper();if(t){const e=this.options.autoLoginHandlingThresholdSeconds||10;if(t.expirationEpochSeconds-Math.floor(Date.now()/1e3)<e)if(this.autoRefreshEnabled){n.info("Under threshold, initiating auto-refresh");const e=await this.refreshToken();this.options.eventProcessor.onAutomaticTokenRefresh(e)}else n.info("Under threshold, initiating auto-logout"),this.logout()}}logout(){this.options.loggedInUserProvider.logOutUser(),this.options.eventProcessor.onLogout()}fetchLoggedInUserWrapper(){let e=this.options.loggedInUserProvider.fetchLoggedInUserWrapper();return e&&m.wrapperIsExpired(e)&&(n.info("Token is expired - auto logout triggered"),this.logout(),e=null),e}loggedInUserHasRole(e){let t=!1;if(r.trimToNull(e)){const n=this.fetchLoggedInUserWrapper(),r=e.toLowerCase();t=n?.userObject?.roles&&!!n.userObject.roles.find((e=>e.toLowerCase()===r))}return t}isLoggedIn(){return!!this.fetchLoggedInUserWrapper()}fetchLoggedInUserJwtObject(){const e=this.fetchLoggedInUserWrapper();return e?e.userObject:null}fetchLoggedInUserJwtToken(){const e=this.fetchLoggedInUserWrapper();return e?e.jwtToken:null}fetchLoggedInUserObject(){const e=this.fetchLoggedInUserJwtObject();return e?e.user:null}fetchLoggedInUserExpirationEpochSeconds(){const e=this.fetchLoggedInUserJwtObject();return e?e.exp:null}fetchLoggedInUserRemainingSeconds(){const e=this.fetchLoggedInUserJwtObject();return e?e.exp-Math.floor(Date.now()/1e3):null}updateLoggedInUserFromTokenString(e){let t=null;if(r.trimToNull(e)){n.info("updateLoggedInUserFromTokenString : %s",e);const r=o.decodeTokenNoVerify(e);r?(t={userObject:r,jwtToken:e,expirationEpochSeconds:r.exp},this.options.loggedInUserProvider.setLoggedInUserWrapper(t),this.updateRecentLoginsFromWardenEntrySummary(r.loginData),this.options.eventProcessor.onSuccessfulLogin(t)):(n.warn("Failed to parse token %s - ignoring login and triggering failure"),this.options.eventProcessor.onLoginFailure("Could not parse token string"))}else n.info("Called updateLoggedInUserFromTokenString with empty string - logging out"),this.logout();return t}async refreshToken(){let e=null;const t=this.fetchLoggedInUserWrapper();if(t){const n=await this.options.wardenClient.refreshJwtToken(t.jwtToken);e=this.updateLoggedInUserFromTokenString(n)}else n.info("Could not refresh - no token available");return e}async sendExpiringCode(e){return this.options.wardenClient.sendExpiringValidationToken(e)}async processWardenLoginResults(e){let t=null;return e?(n.info("Warden: response : %j ",e),e.jwtToken?(n.info("Applying login"),t=this.updateLoggedInUserFromTokenString(e.jwtToken)):e.error?this.options.eventProcessor.onLoginFailure(e.error):(n.error("Response contained neither token nor error"),this.options.eventProcessor.onLoginFailure("Response contained neither token nor error"))):(n.error("Login call failed"),this.options.eventProcessor.onLoginFailure("Login call returned null")),t}updateRecentLoginsFromWardenEntrySummary(e){this.options.recentLoginProvider&&e?(n.info("UserService : Saving recent login %j",e),this.options.recentLoginProvider.saveRecentLogin(e)):n.info("Not saving recent login - no storage configured or no data passed")}updateRecentLoginsFromLoggedInUserWrapper(e){this.updateRecentLoginsFromWardenEntrySummary(e?.userObject?.loginData)}async executeWebAuthnBasedLogin(e){const t=await this.executeWebAuthnLoginToWardenLoginResults(e),n=await this.processWardenLoginResults(t);return this.updateRecentLoginsFromLoggedInUserWrapper(n),n}async removeWebAuthnRegistrationFromLoggedInUser(e){return await this.options.wardenClient.removeWebAuthnRegistrationFromLoggedInUser(e)}async removeContactFromLoggedInUser(e){return await this.options.wardenClient.removeContactFromLoggedInUser(e)}async executeValidationTokenBasedLogin(e,t,r){n.info("Warden: executeValidationTokenBasedLogin : %j : %s : %s",e,t,r);const o=await this.options.wardenClient.performLoginCmd({contact:e,expiringToken:t,createUserIfMissing:r}),s=await this.processWardenLoginResults(o);return this.updateRecentLoginsFromLoggedInUserWrapper(s),s}async saveCurrentDeviceAsWebAuthnForCurrentUser(){const e=await this.options.wardenClient.generateWebAuthnRegistrationChallengeForLoggedInUser(),t=await a(e),n=r.trimToEmpty(this.options?.deviceLabelGenerator?this.options.deviceLabelGenerator():this.defaultDeviceLabelGenerator()),o=await this.options.wardenClient.addWebAuthnRegistrationToLoggedInUser(this.options.applicationName,n,t);return this.updateRecentLoginsFromWardenEntrySummary(o),o}defaultDeviceLabelGenerator(){let e="";return navigator?(e=navigator.userAgentData&&navigator.userAgentData.brands&&navigator.userAgentData.brands[1]&&navigator.userAgentData.brands[1].brand?navigator.userAgentData.brands[1].brand:navigator.userAgent,navigator.platform&&(e+=" on "+navigator.platform)):e="Unknown device",e}async executeWebAuthnLoginToWardenLoginResults(e){let t=null;try{const r=await this.options.wardenClient.generateWebAuthnAuthenticationChallengeForUserId(e);n.info("Got login challenge : %s",r);const o=await c(r);n.info("Got creds: %j",o);const s={userId:e,webAuthn:o};t=await this.options.wardenClient.performLoginCmd(s)}catch(e){n.error("WebauthN Failed : %s",e)}return t}}class w{saveRecentLogin(e){if(e?.userId){n.info("Saving recent login : %j",e);let t=this.fetchCache();t=t.filter((t=>t.user.userId!==e.userId)),t.push({user:e,lastLoginEpochMS:Date.now()}),this.updateCache(t)}else n.warn("Cannot save recent login - no login provided :  %s",e)}saveNewUser(e,t,o){r.trimToNull(e)&&m.validContact(o)?this.saveRecentLogin({userId:e,contactMethods:[o],webAuthnAuthenticatorSummaries:[],userLabel:t}):n.warn("Cannot save new user - invalid data : %s : %j",e,o)}removeUser(e){let t=this.fetchCache();t=t.filter((t=>t.user.userId!==e)),this.updateCache(t)}fetchAllLogins(){return Object.assign([],this.fetchCache())}clearAllLogins(){this.updateCache([])}}class b{localStorageKey;constructor(n){this.localStorageKey=n,e.notNullUndefinedOrOnlyWhitespaceString(this.localStorageKey,"localStorageKey"),localStorage||t.throwFormattedErr("Local storage not available on this platform")}fetchLoggedInUserWrapper(){const e=localStorage.getItem(this.localStorageKey);return r.trimToNull(e)?JSON.parse(e):null}logOutUser(){this.setLoggedInUserWrapper(null)}setLoggedInUserWrapper(e){e?localStorage.setItem(this.localStorageKey,JSON.stringify(e)):localStorage.removeItem(this.localStorageKey)}}class I extends w{localStorageKey;constructor(n){super(),this.localStorageKey=n,e.notNullUndefinedOrOnlyWhitespaceString(this.localStorageKey,"localStorageKey"),localStorage||t.throwFormattedErr("Local storage not available on this platform")}fetchCache(){const e=r.trimToNull(localStorage.getItem(r.trimToNull(this.localStorageKey)));return e?JSON.parse(e):[]}updateCache(e){const t=e?JSON.stringify(e):"[]";localStorage.setItem(r.trimToNull(this.localStorageKey),t)}}class C{wrapper;fetchLoggedInUserWrapper(){return this.wrapper}logOutUser(){this.wrapper=null}setLoggedInUserWrapper(e){this.wrapper=e}}class T extends w{_cache=[];fetchCache(){return this._cache}updateCache(e){this._cache=e}}!function(e){e.ExpiringCode="ExpiringCode",e.MagicLink="MagicLink",e.Custom="Custom"}(u||(u={})),function(e){e.Verified="Verified",e.Failed="Failed",e.Error="Error"}(h||(h={})),function(e){e.ble="ble",e.internal="internal",e.nfc="nfc",e.usb="usb",e.cable="cable",e.hybrid="hybrid"}(p||(p={}));export{l as RatchetWardenCommonInfo,g as WardenClient,w as WardenClientAbstractRecentLoginProvider,b as WardenClientLocalStorageLoggedInUserProvider,I as WardenClientLocalStorageRecentLoginProvider,C as WardenClientTransientMemoryLoggedInUserProvider,T as WardenClientTransientMemoryRecentLoginProvider,d as WardenContactType,u as WardenCustomerMessageType,L as WardenDelegatingCurrentUserProvidingUserServiceEventProcessingProvider,h as WardenStoreRegistrationResponseType,f as WardenUserService,m as WardenUtils,p as WardenWebAuthnTransportFutureType};
 //# sourceMappingURL=index.mjs.map

package/lib/types.d.ts

@@ -0,0 +1,372 @@
+import { BuildInformation, CommonJwtToken } from '@bitblit/ratchet-common';
+import { AuthenticationResponseJSON, PublicKeyCredentialRequestOptionsJSON, PublicKeyCredentialCreationOptionsJSON, RegistrationResponseJSON } from '@simplewebauthn/types';
+import { BehaviorSubject } from 'rxjs';
+
+declare class RatchetWardenCommonInfo {
+    private constructor();
+    static buildInformation(): BuildInformation;
+}
+
+declare enum WardenContactType {
+    TextCapablePhoneNumber = "TextCapablePhoneNumber",
+    EmailAddress = "EmailAddress"
+}
+
+interface WardenContact {
+    value: string;
+    type: WardenContactType;
+}
+
+interface CreateAccount {
+    contact: WardenContact;
+    sendCode?: boolean;
+    label?: string;
+    tags?: string[];
+}
+
+interface RemoveWebAuthnRegistration {
+    userId: string;
+    credentialId: string;
+}
+
+interface WardenLoginRequest {
+    userId?: string;
+    contact?: WardenContact;
+    webAuthn?: AuthenticationResponseJSON;
+    expiringToken?: string;
+    jwtTokenToRefresh?: string;
+    createUserIfMissing?: boolean;
+}
+
+interface WardenContactLookup {
+    userId?: string;
+    contactType?: WardenContactType;
+}
+
+interface WardenCustomTemplateDescriptor {
+    textVersion?: string;
+    htmlVersion?: string;
+    baseLayout?: string;
+    subjectLine?: string;
+    meta?: Record<string, string>;
+}
+
+interface SendMagicLink {
+    overrideDestinationContact?: WardenContact;
+    contactLookup?: WardenContactLookup;
+    contact?: WardenContact;
+    landingUrl: string;
+    meta?: Record<string, string>;
+    ttlSeconds?: number;
+    customTemplate?: WardenCustomTemplateDescriptor;
+}
+
+interface WebAuthnObjectWrapper {
+    dataAsJson: string;
+}
+
+interface AddWebAuthnRegistrationToLoggedInUser {
+    webAuthn: WebAuthnObjectWrapper;
+    applicationName: string;
+    deviceLabel: string;
+}
+
+interface WardenCommand {
+    createAccount?: CreateAccount;
+    sendMagicLink?: SendMagicLink;
+    generateWebAuthnAuthenticationChallengeForUserId?: string;
+    generateWebAuthnRegistrationChallengeForLoggedInUser?: boolean;
+    sendExpiringValidationToken?: WardenContact;
+    addWebAuthnRegistrationToLoggedInUser?: AddWebAuthnRegistrationToLoggedInUser;
+    addContactToLoggedInUser?: WardenContact;
+    removeWebAuthnRegistrationFromLoggedInUser?: string;
+    removeContactFromLoggedInUser?: WardenContact;
+    removeWebAuthnRegistration?: RemoveWebAuthnRegistration;
+    performLogin?: WardenLoginRequest;
+    refreshJwtToken?: string;
+}
+
+interface WardenCommandExchangeProvider {
+    sendCommand(cmdString: string, jwtToken: string): Promise<string>;
+}
+
+interface WardenLoginResults {
+    request: WardenLoginRequest;
+    userId?: string;
+    jwtToken?: string;
+    error?: string;
+}
+
+interface WardenWebAuthnEntrySummary {
+    origin: string;
+    applicationName: string;
+    deviceLabel: string;
+    credentialIdBase64: string;
+}
+
+interface WardenEntrySummary {
+    userId: string;
+    userLabel: string;
+    contactMethods: WardenContact[];
+    webAuthnAuthenticatorSummaries: WardenWebAuthnEntrySummary[];
+}
+
+interface WardenCommandResponse {
+    createAccount?: string;
+    sendMagicLink?: boolean;
+    generateWebAuthnAuthenticationChallengeForUserId?: WebAuthnObjectWrapper;
+    generateWebAuthnRegistrationChallengeForLoggedInUser?: WebAuthnObjectWrapper;
+    removeWebAuthnRegistration?: WardenEntrySummary;
+    sendExpiringValidationToken?: boolean;
+    addWebAuthnRegistrationToLoggedInUser?: WardenEntrySummary;
+    addContactToLoggedInUser?: boolean;
+    performLogin?: WardenLoginResults;
+    refreshJwtToken?: string;
+    removeWebAuthnRegistrationFromLoggedInUser?: WardenEntrySummary;
+    removeContactFromLoggedInUser?: WardenEntrySummary;
+    error?: string;
+}
+
+interface WardenClientCurrentLoggedInJwtTokenProvider {
+    fetchCurrentLoggedInJwtToken(): string;
+}
+
+declare class WardenClient {
+    private commandSender;
+    private jwtProvider;
+    constructor(commandSender: WardenCommandExchangeProvider, jwtProvider: WardenClientCurrentLoggedInJwtTokenProvider);
+    exchangeCommand(cmd: WardenCommand, returnErrors?: boolean): Promise<WardenCommandResponse>;
+    createAccount(contact: WardenContact, sendCode?: boolean, label?: string, tags?: string[]): Promise<string>;
+    sendMagicLinkRaw(smlCmd: SendMagicLink): Promise<boolean>;
+    sendMagicLinkByUserId(userId: string, landingUrl: string, contactType?: WardenContactType, meta?: Record<string, string>): Promise<boolean>;
+    sendMagicLink(contact: WardenContact, landingUrl: string, meta?: Record<string, string>): Promise<boolean>;
+    generateWebAuthnAuthenticationChallengeForUserId(userId: string): Promise<PublicKeyCredentialRequestOptionsJSON>;
+    generateWebAuthnRegistrationChallengeForLoggedInUser(): Promise<PublicKeyCredentialCreationOptionsJSON>;
+    removeWebAuthnRegistration(userId: string, credId: string): Promise<WardenEntrySummary>;
+    removeWebAuthnRegistrationFromLoggedInUser(input: string): Promise<WardenEntrySummary>;
+    removeContactFromLoggedInUser(input: WardenContact): Promise<WardenEntrySummary>;
+    sendExpiringValidationToken(contact: WardenContact): Promise<boolean>;
+    addContactToLoggedInUser(contact: WardenContact): Promise<boolean>;
+    addWebAuthnRegistrationToLoggedInUser(applicationName: string, deviceLabel: string, data: RegistrationResponseJSON): Promise<WardenEntrySummary>;
+    performLoginCmd(login: WardenLoginRequest): Promise<WardenLoginResults>;
+    refreshJwtToken(oldJwtToken: string): Promise<string>;
+    executeExpiringTokenBasedLogin(contact: WardenContact, expiringToken: string): Promise<WardenLoginResults>;
+}
+
+interface WardenJwtToken<T> extends CommonJwtToken<T> {
+    loginData: WardenEntrySummary;
+}
+
+interface WardenLoggedInUserWrapper<T> {
+    userObject: WardenJwtToken<T>;
+    jwtToken: string;
+    expirationEpochSeconds: number;
+}
+
+interface WardenUserServiceEventProcessingProvider<T> {
+    onLogout(): void;
+    onSuccessfulLogin(newUser: WardenLoggedInUserWrapper<T>): void;
+    onLoginFailure(reason: string): void;
+    onAutomaticTokenRefresh(refreshUser: WardenLoggedInUserWrapper<T>): void;
+    onAutomaticLogout(): void;
+}
+
+declare class WardenDelegatingCurrentUserProvidingUserServiceEventProcessingProvider<T> implements WardenUserServiceEventProcessingProvider<T>, WardenClientCurrentLoggedInJwtTokenProvider {
+    private wrapped?;
+    private serveExpiredCredentials;
+    private _currentUserSubject;
+    constructor(wrapped?: Partial<WardenUserServiceEventProcessingProvider<T>>, serveExpiredCredentials?: boolean);
+    fetchCurrentLoggedInJwtToken(): string;
+    get currentUserSubject(): BehaviorSubject<WardenLoggedInUserWrapper<T>>;
+    onAutomaticLogout(): void;
+    onAutomaticTokenRefresh(refreshUser: WardenLoggedInUserWrapper<T>): void;
+    onLoginFailure(reason: string): void;
+    onLogout(): void;
+    onSuccessfulLogin(newUser: WardenLoggedInUserWrapper<T>): void;
+}
+
+interface WardenLoggedInUserProvider<T> {
+    fetchLoggedInUserWrapper(): WardenLoggedInUserWrapper<T>;
+    setLoggedInUserWrapper(wrapper: WardenLoggedInUserWrapper<T>): any;
+    logOutUser(): void;
+}
+
+interface WardenRecentLoginDescriptor {
+    user: WardenEntrySummary;
+    lastLoginEpochMS: number;
+}
+
+interface WardenClientRecentLoginProvider {
+    saveRecentLogin(entry: WardenEntrySummary): void;
+    saveNewUser(userId: string, label: string, contact: WardenContact): void;
+    removeUser(userId: string): void;
+    fetchAllLogins(): WardenRecentLoginDescriptor[];
+    clearAllLogins(): void;
+}
+
+interface WardenUserServiceOptions<T> {
+    recentLoginProvider?: WardenClientRecentLoginProvider;
+    loggedInUserProvider: WardenLoggedInUserProvider<T>;
+    wardenClient: WardenClient;
+    eventProcessor: WardenUserServiceEventProcessingProvider<T>;
+    loginCheckTimerPingSeconds?: number;
+    autoLoginHandlingThresholdSeconds?: number;
+    allowAutoRefresh?: boolean;
+    applicationName: string;
+    deviceLabelGenerator?: () => string;
+}
+
+declare class WardenUserService<T> {
+    private options;
+    private loggedInTimerSubscription;
+    private _autoRefreshEnabled;
+    constructor(options: WardenUserServiceOptions<T>);
+    cleanShutDown(): void;
+    get serviceOptions(): WardenUserServiceOptions<T>;
+    createAccount(contact: WardenContact, sendCode?: boolean, label?: string, tags?: string[]): Promise<string>;
+    addContactToLoggedInUser(contact: WardenContact): Promise<boolean>;
+    get autoRefreshEnabled(): boolean;
+    set autoRefreshEnabled(newValue: boolean);
+    checkForAutoLogoutOrRefresh(t: number): Promise<void>;
+    logout(): void;
+    fetchLoggedInUserWrapper(): WardenLoggedInUserWrapper<T>;
+    loggedInUserHasRole(role: string): boolean;
+    isLoggedIn(): boolean;
+    fetchLoggedInUserJwtObject(): WardenJwtToken<T>;
+    fetchLoggedInUserJwtToken(): string;
+    fetchLoggedInUserObject(): T;
+    fetchLoggedInUserExpirationEpochSeconds(): number;
+    fetchLoggedInUserRemainingSeconds(): number;
+    private updateLoggedInUserFromTokenString;
+    refreshToken(): Promise<WardenLoggedInUserWrapper<T>>;
+    sendExpiringCode(contact: WardenContact): Promise<boolean>;
+    private processWardenLoginResults;
+    private updateRecentLoginsFromWardenEntrySummary;
+    private updateRecentLoginsFromLoggedInUserWrapper;
+    executeWebAuthnBasedLogin(userId: string): Promise<WardenLoggedInUserWrapper<T>>;
+    removeWebAuthnRegistrationFromLoggedInUser(input: string): Promise<WardenEntrySummary>;
+    removeContactFromLoggedInUser(input: WardenContact): Promise<WardenEntrySummary>;
+    executeValidationTokenBasedLogin(contact: WardenContact, token: string, createUserIfMissing?: boolean): Promise<WardenLoggedInUserWrapper<T>>;
+    saveCurrentDeviceAsWebAuthnForCurrentUser(): Promise<WardenEntrySummary>;
+    private defaultDeviceLabelGenerator;
+    executeWebAuthnLoginToWardenLoginResults(userId: string): Promise<WardenLoginResults>;
+}
+
+declare abstract class WardenClientAbstractRecentLoginProvider implements WardenClientRecentLoginProvider {
+    abstract fetchCache(): WardenRecentLoginDescriptor[];
+    abstract updateCache(newValue: WardenRecentLoginDescriptor[]): any;
+    saveRecentLogin(entry: WardenEntrySummary): void;
+    saveNewUser(userId: string, label: string, contact: WardenContact): void;
+    removeUser(userId: string): void;
+    fetchAllLogins(): WardenRecentLoginDescriptor[];
+    clearAllLogins(): void;
+}
+
+declare class WardenClientLocalStorageLoggedInUserProvider<T> implements WardenLoggedInUserProvider<T> {
+    private localStorageKey;
+    constructor(localStorageKey: string);
+    fetchLoggedInUserWrapper(): WardenLoggedInUserWrapper<T>;
+    logOutUser(): void;
+    setLoggedInUserWrapper(wrapper: WardenLoggedInUserWrapper<T>): void;
+}
+
+declare class WardenClientLocalStorageRecentLoginProvider extends WardenClientAbstractRecentLoginProvider {
+    private localStorageKey;
+    constructor(localStorageKey: string);
+    fetchCache(): WardenRecentLoginDescriptor[];
+    updateCache(newValue: WardenRecentLoginDescriptor[]): void;
+}
+
+declare class WardenClientTransientMemoryLoggedInUserProvider<T> implements WardenLoggedInUserProvider<T> {
+    private wrapper;
+    fetchLoggedInUserWrapper(): WardenLoggedInUserWrapper<T>;
+    logOutUser(): void;
+    setLoggedInUserWrapper(wrapper: WardenLoggedInUserWrapper<T>): void;
+}
+
+declare class WardenClientTransientMemoryRecentLoginProvider extends WardenClientAbstractRecentLoginProvider {
+    private _cache;
+    fetchCache(): WardenRecentLoginDescriptor[];
+    updateCache(newValue: WardenRecentLoginDescriptor[]): void;
+}
+
+declare enum WardenCustomerMessageType {
+    ExpiringCode = "ExpiringCode",
+    MagicLink = "MagicLink",
+    Custom = "Custom"
+}
+
+declare enum WardenWebAuthnTransportFutureType {
+    ble = "ble",
+    internal = "internal",
+    nfc = "nfc",
+    usb = "usb",
+    cable = "cable",
+    hybrid = "hybrid"
+}
+
+interface WardenWebAuthnEntry {
+    origin: string;
+    applicationName: string;
+    deviceLabel: string;
+    credentialIdBase64: string;
+    credentialPublicKeyBase64: string;
+    counter: number;
+    credentialBackedUp: boolean;
+    credentialDeviceType: string;
+    transports?: WardenWebAuthnTransportFutureType[];
+}
+
+interface WardenEntry {
+    userId: string;
+    userLabel: string;
+    contactMethods: WardenContact[];
+    tags: string[];
+    webAuthnAuthenticators: WardenWebAuthnEntry[];
+    createdEpochMS: number;
+    updatedEpochMS: number;
+}
+
+declare enum WardenStoreRegistrationResponseType {
+    Verified = "Verified",
+    Failed = "Failed",
+    Error = "Error"
+}
+
+interface WardenStoreRegistrationResponse {
+    updatedEntry?: WardenEntry;
+    registrationResponseId: string;
+    result: WardenStoreRegistrationResponseType;
+    error?: string;
+}
+
+interface WardenTeamRole {
+    team: string;
+    role: string;
+}
+
+interface WardenUserDecoration<T> {
+    userTokenData: T;
+    userTokenExpirationSeconds: number;
+    userTeamRoles: WardenTeamRole[];
+}
+
+declare class WardenUtils {
+    constructor();
+    static extractContactsOfType(req: WardenEntry | WardenEntrySummary, type: WardenContactType): string[];
+    static validLoginRequest(req: WardenLoginRequest): boolean;
+    static stringToWardenContact(input: string): WardenContact;
+    static teamRolesToRoles(teamRoles: WardenTeamRole[]): string[];
+    static roleStringsToTeamRoles(roles: string[]): WardenTeamRole[];
+    static roleStringToTeamRole(role: string): WardenTeamRole;
+    static teamRoleToRoleString(tr: WardenTeamRole): string;
+    static stringToContactType(input: string): WardenContactType;
+    static validContact(contact: WardenContact): boolean;
+    static stringIsEmailAddress(value: string): boolean;
+    static stringIsPhoneNumber(value: string): boolean;
+    static stripWardenEntryToSummary(we: WardenEntry): WardenEntrySummary;
+    static stripWardenWebAuthnEntryToSummary(we: WardenWebAuthnEntry): WardenWebAuthnEntrySummary;
+    static wrapperIsExpired(value: WardenLoggedInUserWrapper<any>): boolean;
+}
+
+export { type AddWebAuthnRegistrationToLoggedInUser, type CreateAccount, RatchetWardenCommonInfo, type RemoveWebAuthnRegistration, type SendMagicLink, WardenClient, WardenClientAbstractRecentLoginProvider, type WardenClientCurrentLoggedInJwtTokenProvider, WardenClientLocalStorageLoggedInUserProvider, WardenClientLocalStorageRecentLoginProvider, type WardenClientRecentLoginProvider, WardenClientTransientMemoryLoggedInUserProvider, WardenClientTransientMemoryRecentLoginProvider, type WardenCommand, type WardenCommandExchangeProvider, type WardenCommandResponse, type WardenContact, type WardenContactLookup, WardenContactType, type WardenCustomTemplateDescriptor, WardenCustomerMessageType, WardenDelegatingCurrentUserProvidingUserServiceEventProcessingProvider, type WardenEntry, type WardenEntrySummary, type WardenJwtToken, type WardenLoggedInUserProvider, type WardenLoggedInUserWrapper, type WardenLoginRequest, type WardenLoginResults, type WardenRecentLoginDescriptor, type WardenStoreRegistrationResponse, WardenStoreRegistrationResponseType, type WardenTeamRole, type WardenUserDecoration, WardenUserService, type WardenUserServiceEventProcessingProvider, type WardenUserServiceOptions, WardenUtils, type WardenWebAuthnEntry, type WardenWebAuthnEntrySummary, WardenWebAuthnTransportFutureType, type WebAuthnObjectWrapper };

package/package.json

@@ -1,18 +1,18 @@
 {
   "name": "@bitblit/ratchet-warden-common",
-  "version": "4.0.353-alpha",
+  "version": "4.0.355-alpha",
   "description": "Typescript library to simplify using simplewebauthn and secondary auth methods over GraphQL",
   "sideEffects": false,
   "type": "module",
   "module": "./lib/index.mjs",
-  "types": "./lib/index.d.ts",
+  "types": "./lib/types.d.ts",
   "files": [
     "lib/**",
     "bin/**"
   ],
   "exports": {
     ".": {
-      "types": "./lib/index.d.ts",
+      "types": "./lib/types.d.ts",
       "import": "./lib/index.mjs"
     }
   },
@@ -47,12 +47,12 @@
   },
   "license": "Apache-2.0",
   "dependencies": {
-    "@bitblit/ratchet-common": "4.0.353-alpha",
+    "@bitblit/ratchet-common": "4.0.355-alpha",
     "@simplewebauthn/browser": "10.0.0",
     "jwt-decode": "4.0.0"
   },
   "peerDependencies": {
-    "@bitblit/ratchet-common": "^4.0.353-alpha",
+    "@bitblit/ratchet-common": "^4.0.355-alpha",
     "@simplewebauthn/browser": "^10.0.0",
     "@simplewebauthn/types": "^10.0.0",
     "jwt-decode": "^4.0.0"

package/lib/build/ratchet-warden-common-info.d.ts

@@ -1,5 +0,0 @@
-import { BuildInformation } from '@bitblit/ratchet-common';
-export declare class RatchetWardenCommonInfo {
-    private constructor();
-    static buildInformation(): BuildInformation;
-}

package/lib/client/provider/warden-client-abstract-recent-login-provider.d.ts

@@ -1,13 +0,0 @@
-import { WardenClientRecentLoginProvider } from './warden-client-recent-login-provider.js';
-import { WardenRecentLoginDescriptor } from './warden-recent-login-descriptor.js';
-import { WardenEntrySummary } from '../../common/model/warden-entry-summary.js';
-import { WardenContact } from '../../common/model/warden-contact.js';
-export declare abstract class WardenClientAbstractRecentLoginProvider implements WardenClientRecentLoginProvider {
-    abstract fetchCache(): WardenRecentLoginDescriptor[];
-    abstract updateCache(newValue: WardenRecentLoginDescriptor[]): any;
-    saveRecentLogin(entry: WardenEntrySummary): void;
-    saveNewUser(userId: string, label: string, contact: WardenContact): void;
-    removeUser(userId: string): void;
-    fetchAllLogins(): WardenRecentLoginDescriptor[];
-    clearAllLogins(): void;
-}

package/lib/client/provider/warden-client-current-logged-in-jwt-token-provider.d.ts

@@ -1,3 +0,0 @@
-export interface WardenClientCurrentLoggedInJwtTokenProvider {
-    fetchCurrentLoggedInJwtToken(): string;
-}

package/lib/client/provider/warden-client-local-storage-logged-in-user-provider.d.ts

@@ -1,9 +0,0 @@
-import { WardenLoggedInUserProvider } from './warden-logged-in-user-provider.js';
-import { WardenLoggedInUserWrapper } from './warden-logged-in-user-wrapper.js';
-export declare class WardenClientLocalStorageLoggedInUserProvider<T> implements WardenLoggedInUserProvider<T> {
-    private localStorageKey;
-    constructor(localStorageKey: string);
-    fetchLoggedInUserWrapper(): WardenLoggedInUserWrapper<T>;
-    logOutUser(): void;
-    setLoggedInUserWrapper(wrapper: WardenLoggedInUserWrapper<T>): void;
-}

package/lib/client/provider/warden-client-local-storage-recent-login-provider.d.ts

@@ -1,8 +0,0 @@
-import { WardenRecentLoginDescriptor } from './warden-recent-login-descriptor.js';
-import { WardenClientAbstractRecentLoginProvider } from './warden-client-abstract-recent-login-provider.js';
-export declare class WardenClientLocalStorageRecentLoginProvider extends WardenClientAbstractRecentLoginProvider {
-    private localStorageKey;
-    constructor(localStorageKey: string);
-    fetchCache(): WardenRecentLoginDescriptor[];
-    updateCache(newValue: WardenRecentLoginDescriptor[]): void;
-}

package/lib/client/provider/warden-client-recent-login-provider.d.ts

@@ -1,10 +0,0 @@
-import { WardenRecentLoginDescriptor } from './warden-recent-login-descriptor.js';
-import { WardenEntrySummary } from '../../common/model/warden-entry-summary.js';
-import { WardenContact } from '../../common/model/warden-contact.js';
-export interface WardenClientRecentLoginProvider {
-    saveRecentLogin(entry: WardenEntrySummary): void;
-    saveNewUser(userId: string, label: string, contact: WardenContact): void;
-    removeUser(userId: string): void;
-    fetchAllLogins(): WardenRecentLoginDescriptor[];
-    clearAllLogins(): void;
-}

package/lib/client/provider/warden-client-transient-memory-logged-in-user-provider.d.ts

@@ -1,8 +0,0 @@
-import { WardenLoggedInUserProvider } from './warden-logged-in-user-provider.js';
-import { WardenLoggedInUserWrapper } from './warden-logged-in-user-wrapper.js';
-export declare class WardenClientTransientMemoryLoggedInUserProvider<T> implements WardenLoggedInUserProvider<T> {
-    private wrapper;
-    fetchLoggedInUserWrapper(): WardenLoggedInUserWrapper<T>;
-    logOutUser(): void;
-    setLoggedInUserWrapper(wrapper: WardenLoggedInUserWrapper<T>): void;
-}

package/lib/client/provider/warden-client-transient-memory-recent-login-provider.d.ts

@@ -1,7 +0,0 @@
-import { WardenRecentLoginDescriptor } from './warden-recent-login-descriptor.js';
-import { WardenClientAbstractRecentLoginProvider } from './warden-client-abstract-recent-login-provider.js';
-export declare class WardenClientTransientMemoryRecentLoginProvider extends WardenClientAbstractRecentLoginProvider {
-    private _cache;
-    fetchCache(): WardenRecentLoginDescriptor[];
-    updateCache(newValue: WardenRecentLoginDescriptor[]): void;
-}

package/lib/client/provider/warden-command-exchange-provider.d.ts

@@ -1,3 +0,0 @@
-export interface WardenCommandExchangeProvider {
-    sendCommand(cmdString: string, jwtToken: string): Promise<string>;
-}

package/lib/client/provider/warden-logged-in-user-provider.d.ts

@@ -1,6 +0,0 @@
-import { WardenLoggedInUserWrapper } from './warden-logged-in-user-wrapper.js';
-export interface WardenLoggedInUserProvider<T> {
-    fetchLoggedInUserWrapper(): WardenLoggedInUserWrapper<T>;
-    setLoggedInUserWrapper(wrapper: WardenLoggedInUserWrapper<T>): any;
-    logOutUser(): void;
-}

package/lib/client/provider/warden-logged-in-user-wrapper.d.ts

@@ -1,6 +0,0 @@
-import { WardenJwtToken } from '../../common/model/warden-jwt-token.js';
-export interface WardenLoggedInUserWrapper<T> {
-    userObject: WardenJwtToken<T>;
-    jwtToken: string;
-    expirationEpochSeconds: number;
-}

package/lib/client/provider/warden-recent-login-descriptor.d.ts

@@ -1,5 +0,0 @@
-import { WardenEntrySummary } from '../../common/model/warden-entry-summary.js';
-export interface WardenRecentLoginDescriptor {
-    user: WardenEntrySummary;
-    lastLoginEpochMS: number;
-}

package/lib/client/provider/warden-user-service-event-processing-provider.d.ts

@@ -1,8 +0,0 @@
-import { WardenLoggedInUserWrapper } from './warden-logged-in-user-wrapper.js';
-export interface WardenUserServiceEventProcessingProvider<T> {
-    onLogout(): void;
-    onSuccessfulLogin(newUser: WardenLoggedInUserWrapper<T>): void;
-    onLoginFailure(reason: string): void;
-    onAutomaticTokenRefresh(refreshUser: WardenLoggedInUserWrapper<T>): void;
-    onAutomaticLogout(): void;
-}

package/lib/client/provider/warden-user-service-options.d.ts

@@ -1,15 +0,0 @@
-import { WardenLoggedInUserProvider } from './warden-logged-in-user-provider.js';
-import { WardenClient } from '../warden-client.js';
-import { WardenUserServiceEventProcessingProvider } from './warden-user-service-event-processing-provider.js';
-import { WardenClientRecentLoginProvider } from './warden-client-recent-login-provider.js';
-export interface WardenUserServiceOptions<T> {
-    recentLoginProvider?: WardenClientRecentLoginProvider;
-    loggedInUserProvider: WardenLoggedInUserProvider<T>;
-    wardenClient: WardenClient;
-    eventProcessor: WardenUserServiceEventProcessingProvider<T>;
-    loginCheckTimerPingSeconds?: number;
-    autoLoginHandlingThresholdSeconds?: number;
-    allowAutoRefresh?: boolean;
-    applicationName: string;
-    deviceLabelGenerator?: () => string;
-}

package/lib/client/warden-client.d.ts

@@ -1,32 +0,0 @@
-import { WardenCommand } from '../common/command/warden-command.js';
-import { WardenContact } from '../common/model/warden-contact.js';
-import { WardenCommandExchangeProvider } from './provider/warden-command-exchange-provider.js';
-import { WardenCommandResponse } from '../common/command/warden-command-response.js';
-import { PublicKeyCredentialCreationOptionsJSON, PublicKeyCredentialRequestOptionsJSON, RegistrationResponseJSON } from '@simplewebauthn/types';
-import { WardenLoginResults } from '../common/model/warden-login-results.js';
-import { WardenLoginRequest } from '../common/model/warden-login-request.js';
-import { WardenClientCurrentLoggedInJwtTokenProvider } from './provider/warden-client-current-logged-in-jwt-token-provider.js';
-import { WardenEntrySummary } from '../common/model/warden-entry-summary.js';
-import { WardenContactType } from '../common/model/warden-contact-type.js';
-import { SendMagicLink } from '../common/command/send-magic-link';
-export declare class WardenClient {
-    private commandSender;
-    private jwtProvider;
-    constructor(commandSender: WardenCommandExchangeProvider, jwtProvider: WardenClientCurrentLoggedInJwtTokenProvider);
-    exchangeCommand(cmd: WardenCommand, returnErrors?: boolean): Promise<WardenCommandResponse>;
-    createAccount(contact: WardenContact, sendCode?: boolean, label?: string, tags?: string[]): Promise<string>;
-    sendMagicLinkRaw(smlCmd: SendMagicLink): Promise<boolean>;
-    sendMagicLinkByUserId(userId: string, landingUrl: string, contactType?: WardenContactType, meta?: Record<string, string>): Promise<boolean>;
-    sendMagicLink(contact: WardenContact, landingUrl: string, meta?: Record<string, string>): Promise<boolean>;
-    generateWebAuthnAuthenticationChallengeForUserId(userId: string): Promise<PublicKeyCredentialRequestOptionsJSON>;
-    generateWebAuthnRegistrationChallengeForLoggedInUser(): Promise<PublicKeyCredentialCreationOptionsJSON>;
-    removeWebAuthnRegistration(userId: string, credId: string): Promise<WardenEntrySummary>;
-    removeWebAuthnRegistrationFromLoggedInUser(input: string): Promise<WardenEntrySummary>;
-    removeContactFromLoggedInUser(input: WardenContact): Promise<WardenEntrySummary>;
-    sendExpiringValidationToken(contact: WardenContact): Promise<boolean>;
-    addContactToLoggedInUser(contact: WardenContact): Promise<boolean>;
-    addWebAuthnRegistrationToLoggedInUser(applicationName: string, deviceLabel: string, data: RegistrationResponseJSON): Promise<WardenEntrySummary>;
-    performLoginCmd(login: WardenLoginRequest): Promise<WardenLoginResults>;
-    refreshJwtToken(oldJwtToken: string): Promise<string>;
-    executeExpiringTokenBasedLogin(contact: WardenContact, expiringToken: string): Promise<WardenLoginResults>;
-}

package/lib/client/warden-client.spec.d.ts

@@ -1 +0,0 @@
-export {};

package/lib/client/warden-delegating-current-user-providing-user-service-event-processing-provider.d.ts

@@ -1,17 +0,0 @@
-import { WardenUserServiceEventProcessingProvider } from './provider/warden-user-service-event-processing-provider.js';
-import { WardenLoggedInUserWrapper } from './provider/warden-logged-in-user-wrapper.js';
-import { BehaviorSubject } from 'rxjs';
-import { WardenClientCurrentLoggedInJwtTokenProvider } from './provider/warden-client-current-logged-in-jwt-token-provider.js';
-export declare class WardenDelegatingCurrentUserProvidingUserServiceEventProcessingProvider<T> implements WardenUserServiceEventProcessingProvider<T>, WardenClientCurrentLoggedInJwtTokenProvider {
-    private wrapped?;
-    private serveExpiredCredentials;
-    private _currentUserSubject;
-    constructor(wrapped?: Partial<WardenUserServiceEventProcessingProvider<T>>, serveExpiredCredentials?: boolean);
-    fetchCurrentLoggedInJwtToken(): string;
-    get currentUserSubject(): BehaviorSubject<WardenLoggedInUserWrapper<T>>;
-    onAutomaticLogout(): void;
-    onAutomaticTokenRefresh(refreshUser: WardenLoggedInUserWrapper<T>): void;
-    onLoginFailure(reason: string): void;
-    onLogout(): void;
-    onSuccessfulLogin(newUser: WardenLoggedInUserWrapper<T>): void;
-}

package/lib/client/warden-user-service.d.ts

@@ -1,41 +0,0 @@
-import { WardenUserServiceOptions } from './provider/warden-user-service-options.js';
-import { WardenLoggedInUserWrapper } from './provider/warden-logged-in-user-wrapper.js';
-import { WardenContact } from '../common/model/warden-contact.js';
-import { WardenJwtToken } from '../common/model/warden-jwt-token.js';
-import { WardenLoginResults } from '../common/model/warden-login-results.js';
-import { WardenEntrySummary } from '../common/model/warden-entry-summary.js';
-export declare class WardenUserService<T> {
-    private options;
-    private loggedInTimerSubscription;
-    private _autoRefreshEnabled;
-    constructor(options: WardenUserServiceOptions<T>);
-    cleanShutDown(): void;
-    get serviceOptions(): WardenUserServiceOptions<T>;
-    createAccount(contact: WardenContact, sendCode?: boolean, label?: string, tags?: string[]): Promise<string>;
-    addContactToLoggedInUser(contact: WardenContact): Promise<boolean>;
-    get autoRefreshEnabled(): boolean;
-    set autoRefreshEnabled(newValue: boolean);
-    checkForAutoLogoutOrRefresh(t: number): Promise<void>;
-    logout(): void;
-    fetchLoggedInUserWrapper(): WardenLoggedInUserWrapper<T>;
-    loggedInUserHasRole(role: string): boolean;
-    isLoggedIn(): boolean;
-    fetchLoggedInUserJwtObject(): WardenJwtToken<T>;
-    fetchLoggedInUserJwtToken(): string;
-    fetchLoggedInUserObject(): T;
-    fetchLoggedInUserExpirationEpochSeconds(): number;
-    fetchLoggedInUserRemainingSeconds(): number;
-    private updateLoggedInUserFromTokenString;
-    refreshToken(): Promise<WardenLoggedInUserWrapper<T>>;
-    sendExpiringCode(contact: WardenContact): Promise<boolean>;
-    private processWardenLoginResults;
-    private updateRecentLoginsFromWardenEntrySummary;
-    private updateRecentLoginsFromLoggedInUserWrapper;
-    executeWebAuthnBasedLogin(userId: string): Promise<WardenLoggedInUserWrapper<T>>;
-    removeWebAuthnRegistrationFromLoggedInUser(input: string): Promise<WardenEntrySummary>;
-    removeContactFromLoggedInUser(input: WardenContact): Promise<WardenEntrySummary>;
-    executeValidationTokenBasedLogin(contact: WardenContact, token: string, createUserIfMissing?: boolean): Promise<WardenLoggedInUserWrapper<T>>;
-    saveCurrentDeviceAsWebAuthnForCurrentUser(): Promise<WardenEntrySummary>;
-    private defaultDeviceLabelGenerator;
-    executeWebAuthnLoginToWardenLoginResults(userId: string): Promise<WardenLoginResults>;
-}

package/lib/client/warden-user-service.spec.d.ts

@@ -1 +0,0 @@
-export {};

package/lib/common/command/add-web-authn-registration-to-logged-in-user.d.ts

@@ -1,6 +0,0 @@
-import { WebAuthnObjectWrapper } from './web-authn-object-wrapper';
-export interface AddWebAuthnRegistrationToLoggedInUser {
-    webAuthn: WebAuthnObjectWrapper;
-    applicationName: string;
-    deviceLabel: string;
-}

package/lib/common/command/create-account.d.ts

@@ -1,7 +0,0 @@
-import { WardenContact } from '../model/warden-contact.js';
-export interface CreateAccount {
-    contact: WardenContact;
-    sendCode?: boolean;
-    label?: string;
-    tags?: string[];
-}

package/lib/common/command/remove-web-authn-registration.d.ts

@@ -1,4 +0,0 @@
-export interface RemoveWebAuthnRegistration {
-    userId: string;
-    credentialId: string;
-}

package/lib/common/command/send-magic-link.d.ts

@@ -1,12 +0,0 @@
-import { WardenContact } from '../model/warden-contact.js';
-import { WardenContactLookup } from './warden-contact-lookup.js';
-import { WardenCustomTemplateDescriptor } from './warden-custom-template-descriptor';
-export interface SendMagicLink {
-    overrideDestinationContact?: WardenContact;
-    contactLookup?: WardenContactLookup;
-    contact?: WardenContact;
-    landingUrl: string;
-    meta?: Record<string, string>;
-    ttlSeconds?: number;
-    customTemplate?: WardenCustomTemplateDescriptor;
-}

package/lib/common/command/warden-command-response.d.ts

@@ -1,18 +0,0 @@
-import { WebAuthnObjectWrapper } from './web-authn-object-wrapper.js';
-import { WardenLoginResults } from '../model/warden-login-results.js';
-import { WardenEntrySummary } from '../model/warden-entry-summary.js';
-export interface WardenCommandResponse {
-    createAccount?: string;
-    sendMagicLink?: boolean;
-    generateWebAuthnAuthenticationChallengeForUserId?: WebAuthnObjectWrapper;
-    generateWebAuthnRegistrationChallengeForLoggedInUser?: WebAuthnObjectWrapper;
-    removeWebAuthnRegistration?: WardenEntrySummary;
-    sendExpiringValidationToken?: boolean;
-    addWebAuthnRegistrationToLoggedInUser?: WardenEntrySummary;
-    addContactToLoggedInUser?: boolean;
-    performLogin?: WardenLoginResults;
-    refreshJwtToken?: string;
-    removeWebAuthnRegistrationFromLoggedInUser?: WardenEntrySummary;
-    removeContactFromLoggedInUser?: WardenEntrySummary;
-    error?: string;
-}

package/lib/common/command/warden-command.d.ts

@@ -1,20 +0,0 @@
-import { CreateAccount } from './create-account.js';
-import { WardenContact } from '../model/warden-contact.js';
-import { RemoveWebAuthnRegistration } from './remove-web-authn-registration.js';
-import { WardenLoginRequest } from '../model/warden-login-request.js';
-import { SendMagicLink } from './send-magic-link.js';
-import { AddWebAuthnRegistrationToLoggedInUser } from './add-web-authn-registration-to-logged-in-user.js';
-export interface WardenCommand {
-    createAccount?: CreateAccount;
-    sendMagicLink?: SendMagicLink;
-    generateWebAuthnAuthenticationChallengeForUserId?: string;
-    generateWebAuthnRegistrationChallengeForLoggedInUser?: boolean;
-    sendExpiringValidationToken?: WardenContact;
-    addWebAuthnRegistrationToLoggedInUser?: AddWebAuthnRegistrationToLoggedInUser;
-    addContactToLoggedInUser?: WardenContact;
-    removeWebAuthnRegistrationFromLoggedInUser?: string;
-    removeContactFromLoggedInUser?: WardenContact;
-    removeWebAuthnRegistration?: RemoveWebAuthnRegistration;
-    performLogin?: WardenLoginRequest;
-    refreshJwtToken?: string;
-}

package/lib/common/command/warden-contact-lookup.d.ts

@@ -1,5 +0,0 @@
-import { WardenContactType } from '../model/warden-contact-type.js';
-export interface WardenContactLookup {
-    userId?: string;
-    contactType?: WardenContactType;
-}

package/lib/common/command/warden-custom-template-descriptor.d.ts

@@ -1,7 +0,0 @@
-export interface WardenCustomTemplateDescriptor {
-    textVersion?: string;
-    htmlVersion?: string;
-    baseLayout?: string;
-    subjectLine?: string;
-    meta?: Record<string, string>;
-}

package/lib/common/command/web-authn-object-wrapper.d.ts

@@ -1,3 +0,0 @@
-export interface WebAuthnObjectWrapper {
-    dataAsJson: string;
-}

package/lib/common/model/warden-contact-type.d.ts

@@ -1,4 +0,0 @@
-export declare enum WardenContactType {
-    TextCapablePhoneNumber = "TextCapablePhoneNumber",
-    EmailAddress = "EmailAddress"
-}

package/lib/common/model/warden-contact.d.ts

@@ -1,5 +0,0 @@
-import { WardenContactType } from './warden-contact-type.js';
-export interface WardenContact {
-    value: string;
-    type: WardenContactType;
-}

package/lib/common/model/warden-customer-message-type.d.ts

@@ -1,5 +0,0 @@
-export declare enum WardenCustomerMessageType {
-    ExpiringCode = "ExpiringCode",
-    MagicLink = "MagicLink",
-    Custom = "Custom"
-}

package/lib/common/model/warden-entry-summary.d.ts

@@ -1,8 +0,0 @@
-import { WardenContact } from './warden-contact.js';
-import { WardenWebAuthnEntrySummary } from './warden-web-authn-entry-summary.js';
-export interface WardenEntrySummary {
-    userId: string;
-    userLabel: string;
-    contactMethods: WardenContact[];
-    webAuthnAuthenticatorSummaries: WardenWebAuthnEntrySummary[];
-}

package/lib/common/model/warden-entry.d.ts

@@ -1,11 +0,0 @@
-import { WardenWebAuthnEntry } from './warden-web-authn-entry.js';
-import { WardenContact } from './warden-contact.js';
-export interface WardenEntry {
-    userId: string;
-    userLabel: string;
-    contactMethods: WardenContact[];
-    tags: string[];
-    webAuthnAuthenticators: WardenWebAuthnEntry[];
-    createdEpochMS: number;
-    updatedEpochMS: number;
-}

package/lib/common/model/warden-jwt-token.d.ts

@@ -1,5 +0,0 @@
-import { CommonJwtToken } from '@bitblit/ratchet-common';
-import { WardenEntrySummary } from './warden-entry-summary.js';
-export interface WardenJwtToken<T> extends CommonJwtToken<T> {
-    loginData: WardenEntrySummary;
-}

package/lib/common/model/warden-login-request.d.ts

@@ -1,10 +0,0 @@
-import { WardenContact } from './warden-contact.js';
-import { AuthenticationResponseJSON } from '@simplewebauthn/types';
-export interface WardenLoginRequest {
-    userId?: string;
-    contact?: WardenContact;
-    webAuthn?: AuthenticationResponseJSON;
-    expiringToken?: string;
-    jwtTokenToRefresh?: string;
-    createUserIfMissing?: boolean;
-}

package/lib/common/model/warden-login-results.d.ts

@@ -1,7 +0,0 @@
-import { WardenLoginRequest } from './warden-login-request.js';
-export interface WardenLoginResults {
-    request: WardenLoginRequest;
-    userId?: string;
-    jwtToken?: string;
-    error?: string;
-}

package/lib/common/model/warden-store-registration-response-type.d.ts

@@ -1,5 +0,0 @@
-export declare enum WardenStoreRegistrationResponseType {
-    Verified = "Verified",
-    Failed = "Failed",
-    Error = "Error"
-}

package/lib/common/model/warden-store-registration-response.d.ts

@@ -1,8 +0,0 @@
-import { WardenStoreRegistrationResponseType } from './warden-store-registration-response-type.js';
-import { WardenEntry } from './warden-entry.js';
-export interface WardenStoreRegistrationResponse {
-    updatedEntry?: WardenEntry;
-    registrationResponseId: string;
-    result: WardenStoreRegistrationResponseType;
-    error?: string;
-}

package/lib/common/model/warden-team-role.d.ts

@@ -1,4 +0,0 @@
-export interface WardenTeamRole {
-    team: string;
-    role: string;
-}

package/lib/common/model/warden-user-decoration.d.ts

@@ -1,6 +0,0 @@
-import { WardenTeamRole } from './warden-team-role.js';
-export interface WardenUserDecoration<T> {
-    userTokenData: T;
-    userTokenExpirationSeconds: number;
-    userTeamRoles: WardenTeamRole[];
-}

package/lib/common/model/warden-web-authn-entry-summary.d.ts

@@ -1,6 +0,0 @@
-export interface WardenWebAuthnEntrySummary {
-    origin: string;
-    applicationName: string;
-    deviceLabel: string;
-    credentialIdBase64: string;
-}

package/lib/common/model/warden-web-authn-entry.d.ts

@@ -1,12 +0,0 @@
-import { WardenWebAuthnTransportFutureType } from './warden-web-authn-transport-future-type.js';
-export interface WardenWebAuthnEntry {
-    origin: string;
-    applicationName: string;
-    deviceLabel: string;
-    credentialIdBase64: string;
-    credentialPublicKeyBase64: string;
-    counter: number;
-    credentialBackedUp: boolean;
-    credentialDeviceType: string;
-    transports?: WardenWebAuthnTransportFutureType[];
-}

package/lib/common/model/warden-web-authn-transport-future-type.d.ts

@@ -1,8 +0,0 @@
-export declare enum WardenWebAuthnTransportFutureType {
-    ble = "ble",
-    internal = "internal",
-    nfc = "nfc",
-    usb = "usb",
-    cable = "cable",
-    hybrid = "hybrid"
-}

package/lib/common/util/warden-utils.d.ts

@@ -1,26 +0,0 @@
-import { WardenContact } from '../model/warden-contact.js';
-import { WardenContactType } from '../model/warden-contact-type.js';
-import { WardenEntrySummary } from '../model/warden-entry-summary.js';
-import { WardenEntry } from '../model/warden-entry.js';
-import { WardenLoginRequest } from '../model/warden-login-request.js';
-import { WardenTeamRole } from '../model/warden-team-role.js';
-import { WardenWebAuthnEntry } from '../model/warden-web-authn-entry';
-import { WardenWebAuthnEntrySummary } from '../model/warden-web-authn-entry-summary';
-import { WardenLoggedInUserWrapper } from '../../client/provider/warden-logged-in-user-wrapper';
-export declare class WardenUtils {
-    constructor();
-    static extractContactsOfType(req: WardenEntry | WardenEntrySummary, type: WardenContactType): string[];
-    static validLoginRequest(req: WardenLoginRequest): boolean;
-    static stringToWardenContact(input: string): WardenContact;
-    static teamRolesToRoles(teamRoles: WardenTeamRole[]): string[];
-    static roleStringsToTeamRoles(roles: string[]): WardenTeamRole[];
-    static roleStringToTeamRole(role: string): WardenTeamRole;
-    static teamRoleToRoleString(tr: WardenTeamRole): string;
-    static stringToContactType(input: string): WardenContactType;
-    static validContact(contact: WardenContact): boolean;
-    static stringIsEmailAddress(value: string): boolean;
-    static stringIsPhoneNumber(value: string): boolean;
-    static stripWardenEntryToSummary(we: WardenEntry): WardenEntrySummary;
-    static stripWardenWebAuthnEntryToSummary(we: WardenWebAuthnEntry): WardenWebAuthnEntrySummary;
-    static wrapperIsExpired(value: WardenLoggedInUserWrapper<any>): boolean;
-}

package/lib/common/util/warden-utils.spec.d.ts

@@ -1 +0,0 @@
-export {};

package/lib/index.d.ts

@@ -1,42 +0,0 @@
-export * from './build/ratchet-warden-common-info.js';
-export * from './client/warden-client.js';
-export * from './client/warden-delegating-current-user-providing-user-service-event-processing-provider.js';
-export * from './client/warden-user-service.js';
-export * from './client/provider/warden-client-abstract-recent-login-provider.js';
-export * from './client/provider/warden-client-current-logged-in-jwt-token-provider.js';
-export * from './client/provider/warden-client-local-storage-logged-in-user-provider.js';
-export * from './client/provider/warden-client-local-storage-recent-login-provider.js';
-export * from './client/provider/warden-client-recent-login-provider.js';
-export * from './client/provider/warden-client-transient-memory-logged-in-user-provider.js';
-export * from './client/provider/warden-client-transient-memory-recent-login-provider.js';
-export * from './client/provider/warden-command-exchange-provider.js';
-export * from './client/provider/warden-logged-in-user-provider.js';
-export * from './client/provider/warden-logged-in-user-wrapper.js';
-export * from './client/provider/warden-recent-login-descriptor.js';
-export * from './client/provider/warden-user-service-event-processing-provider.js';
-export * from './client/provider/warden-user-service-options.js';
-export * from './common/command/add-web-authn-registration-to-logged-in-user.js';
-export * from './common/command/create-account.js';
-export * from './common/command/remove-web-authn-registration.js';
-export * from './common/command/send-magic-link.js';
-export * from './common/command/warden-command-response.js';
-export * from './common/command/warden-command.js';
-export * from './common/command/warden-contact-lookup.js';
-export * from './common/command/warden-custom-template-descriptor.js';
-export * from './common/command/web-authn-object-wrapper.js';
-export * from './common/model/warden-contact-type.js';
-export * from './common/model/warden-contact.js';
-export * from './common/model/warden-customer-message-type.js';
-export * from './common/model/warden-entry-summary.js';
-export * from './common/model/warden-entry.js';
-export * from './common/model/warden-jwt-token.js';
-export * from './common/model/warden-login-request.js';
-export * from './common/model/warden-login-results.js';
-export * from './common/model/warden-store-registration-response-type.js';
-export * from './common/model/warden-store-registration-response.js';
-export * from './common/model/warden-team-role.js';
-export * from './common/model/warden-user-decoration.js';
-export * from './common/model/warden-web-authn-entry-summary.js';
-export * from './common/model/warden-web-authn-entry.js';
-export * from './common/model/warden-web-authn-transport-future-type.js';
-export * from './common/util/warden-utils.js';

package/lib/index.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.mjs","sources":["../src/build/ratchet-warden-common-info.ts","../src/client/warden-client.ts","../src/common/model/warden-contact-type.ts","../src/common/model/warden-customer-message-type.ts","../src/common/model/warden-store-registration-response-type.ts","../src/common/model/warden-web-authn-transport-future-type.ts","../src/common/util/warden-utils.ts","../src/client/warden-delegating-current-user-providing-user-service-event-processing-provider.ts","../src/client/warden-user-service.ts","../src/client/provider/warden-client-abstract-recent-login-provider.ts","../src/client/provider/warden-client-local-storage-logged-in-user-provider.ts","../src/client/provider/warden-client-local-storage-recent-login-provider.ts","../src/client/provider/warden-client-transient-memory-logged-in-user-provider.ts","../src/client/provider/warden-client-transient-memory-recent-login-provider.ts"],"sourcesContent":[null,null,null,null,null,null,null,null,null,null,null,null,null,null],"names":["RatchetWardenCommonInfo","constructor","buildInformation","version","hash","branch","tag","timeBuiltISO","notes","WardenClient","commandSender","jwtProvider","this","RequireRatchet","notNullOrUndefined","exchangeCommand","cmd","returnErrors","asString","JSON","stringify","resp","sendCommand","fetchCurrentLoggedInJwtToken","parsed","parse","error","ErrorRatchet","throwFormattedErr","createAccount","contact","sendCode","label","tags","sendMagicLinkRaw","smlCmd","sendMagicLink","Logger","warn","sendMagicLinkByUserId","userId","landingUrl","contactType","meta","contactLookup","generateWebAuthnAuthenticationChallengeForUserId","rval","dataAsJson","generateWebAuthnRegistrationChallengeForLoggedInUser","removeWebAuthnRegistration","credId","credentialId","removeWebAuthnRegistrationFromLoggedInUser","input","removeContactFromLoggedInUser","sendExpiringValidationToken","addContactToLoggedInUser","addWebAuthnRegistrationToLoggedInUser","applicationName","deviceLabel","data","webAuthn","performLoginCmd","login","loginCmd","performLogin","refreshJwtToken","oldJwtToken","StringRatchet","trimToNull","err","executeExpiringTokenBasedLogin","expiringToken","WardenContactType","WardenCustomerMessageType","WardenStoreRegistrationResponseType","WardenWebAuthnTransportFutureType","WardenUtils","extractContactsOfType","req","type","contactMethods","filter","s","map","value","validLoginRequest","validContact","jwtTokenToRefresh","stringToWardenContact","stringToContactType","teamRolesToRoles","teamRoles","length","t","teamRoleToRoleString","roleStringsToTeamRoles","roles","roleStringToTeamRole","role","indexOf","sp","split","team","tr","stringIsEmailAddress","EmailAddress","stringIsPhoneNumber","TextCapablePhoneNumber","match","stripWardenEntryToSummary","we","userLabel","webAuthnAuthenticatorSummaries","webAuthnAuthenticators","stripWardenWebAuthnEntryToSummary","origin","credentialIdBase64","wrapperIsExpired","userObject","exp","expirationEpochSeconds","Date","now","WardenDelegatingCurrentUserProvidingUserServiceEventProcessingProvider","wrapped","serveExpiredCredentials","_currentUserSubject","BehaviorSubject","val","getValue","info","currentUserSubject","next","jwtToken","onAutomaticLogout","onAutomaticTokenRefresh","refreshUser","onLoginFailure","reason","onLogout","onSuccessfulLogin","newUser","WardenUserService","options","loggedInTimerSubscription","_autoRefreshEnabled","stored","loggedInUserProvider","fetchLoggedInUserWrapper","logOutUser","eventProcessor","timerSeconds","loginCheckTimerPingSeconds","timer","subscribe","checkForAutoLogoutOrRefresh","cleanShutDown","unsubscribe","serviceOptions","wardenClient","recentLoginProvider","saveNewUser","autoRefreshEnabled","newValue","allowAutoRefresh","Error","debug","current","thresholdSeconds","autoLoginHandlingThresholdSeconds","Math","floor","result","refreshToken","logout","tmp","loggedInUserHasRole","testRole","toLowerCase","find","r","isLoggedIn","fetchLoggedInUserJwtObject","fetchLoggedInUserJwtToken","fetchLoggedInUserObject","user","fetchLoggedInUserExpirationEpochSeconds","fetchLoggedInUserRemainingSeconds","updateLoggedInUserFromTokenString","token","JwtRatchet","decodeTokenNoVerify","setLoggedInUserWrapper","updateRecentLoginsFromWardenEntrySummary","loginData","currentWrapper","newToken","sendExpiringCode","processWardenLoginResults","res","saveRecentLogin","updateRecentLoginsFromLoggedInUserWrapper","executeWebAuthnBasedLogin","executeWebAuthnLoginToWardenLoginResults","executeValidationTokenBasedLogin","createUserIfMissing","saveCurrentDeviceAsWebAuthnForCurrentUser","creds","startRegistration","trimToEmpty","deviceLabelGenerator","defaultDeviceLabelGenerator","output","navigator","userAgent","platform","startAuthentication","WardenClientAbstractRecentLoginProvider","entry","list","fetchCache","push","lastLoginEpochMS","updateCache","removeUser","c","fetchAllLogins","Object","assign","clearAllLogins","WardenClientLocalStorageLoggedInUserProvider","localStorageKey","notNullUndefinedOrOnlyWhitespaceString","localStorage","getItem","wrapper","setItem","removeItem","WardenClientLocalStorageRecentLoginProvider","super","WardenClientTransientMemoryLoggedInUserProvider","WardenClientTransientMemoryRecentLoginProvider","_cache"],"mappings":"uQAEaA,EAGX,WAAAC,GAAwB,CAEjB,uBAAOC,GASZ,MAR8B,CAC5BC,QAAS,iBACTC,KAAM,aACNC,OAAQ,eACRC,IAAK,YACLC,aAAc,iBACdC,MAAO,cAGV,QCGUC,EAEDC,cACAC,YAFV,WAAAV,CACUS,EACAC,GADAC,KAAaF,cAAbA,EACAE,KAAWD,YAAXA,EAERE,EAAeC,mBAAmBJ,EAAe,iBACjDG,EAAeC,mBAAmBH,EAAa,cAChD,CAEM,qBAAMI,CAAgBC,EAAoBC,GAC/C,MAAMC,EAAmBC,KAAKC,UAAUJ,GAClCK,QAAqBT,KAAKF,cAAcY,YAAYJ,EAAUN,KAAKD,YAAYY,gCAC/EC,EAAgCL,KAAKM,MAAMJ,GAKjD,OAHIG,GAAQE,QAAUT,GACpBU,EAAaC,kBAAkB,KAAMJ,EAAOE,OAEvCF,CACR,CAEM,mBAAMK,CAAcC,EAAwBC,EAAoBC,EAAgBC,GACrF,MAAMjB,EAAqB,CACzBa,cAAe,CACbC,QAASA,EACTC,SAAUA,EACVC,MAAOA,EACPC,KAAMA,IAKV,aAF0CrB,KAAKG,gBAAgBC,IAEnDa,aACb,CAEM,sBAAMK,CAAiBC,GAC5B,GAAIA,EAAQ,CACV,MAAMnB,EAAqB,CACzBoB,cAAeD,GAGjB,aAD0CvB,KAAKG,gBAAgBC,IACnDoB,aACb,CAEC,OADAC,EAAOC,KAAK,gDACL,CAEV,CAEM,2BAAMC,CACXC,EACAC,EACAC,EACAC,GAEA,MAAM3B,EAAqB,CACzB4B,cAAe,CACbJ,OAAQA,EACRE,YAAaA,GAEfD,WAAYA,EACZE,KAAMA,GAER,OAAO/B,KAAKsB,iBAAiBlB,EAC9B,CAEM,mBAAMoB,CAAcN,EAAwBW,EAAoBE,GACrE,MAAM3B,EAAqB,CACzBc,QAASA,EACTW,WAAYA,EACZE,KAAMA,GAER,OAAO/B,KAAKsB,iBAAiBlB,EAC9B,CAEM,sDAAM6B,CAAiDL,GAC5D,MAAMxB,EAAqB,CACzB6B,iDAAkDL,GAE9CM,QAAoClC,KAAKG,gBAAgBC,GAE/D,OADsDG,KAAKM,MAAMqB,EAAKD,iDAAiDE,WAExH,CAEM,0DAAMC,GACX,MAGMF,QAAoClC,KAAKG,gBAHpB,CACzBiC,sDAAsD,IAKxD,OADuD7B,KAAKM,MAAMqB,EAAKE,qDAAqDD,WAE7H,CAEM,gCAAME,CAA2BT,EAAgBU,GACtD,MAAMlC,EAAqB,CACzBiC,2BAA4B,CAC1BT,OAAQA,EACRW,aAAcD,IAIlB,aAD0CtC,KAAKG,gBAAgBC,IACnDiC,0BACb,CAEM,gDAAMG,CAA2CC,GACtD,MAAMrC,EAAqB,CACzBoC,2CAA4CC,GAG9C,aAD0CzC,KAAKG,gBAAgBC,IACnDoC,0CACb,CAEM,mCAAME,CAA8BD,GACzC,MAAMrC,EAAqB,CACzBsC,8BAA+BD,GAGjC,aAD0CzC,KAAKG,gBAAgBC,IACnDsC,6BACb,CAEM,iCAAMC,CAA4BzB,GACvC,MAAMd,EAAqB,CACzBuC,4BAA6BzB,GAG/B,aAD0ClB,KAAKG,gBAAgBC,IACnDuC,2BACb,CAEM,8BAAMC,CAAyB1B,GACpC,MAAMd,EAAqB,CACzBwC,yBAA0B1B,GAG5B,aAD0ClB,KAAKG,gBAAgBC,IACnDwC,wBACb,CAEM,2CAAMC,CACXC,EACAC,EACAC,GAEA,MAQM5C,EAAqB,CACzByC,sCATmD,CACnDI,SAAU,CACRd,WAAY5B,KAAKC,UAAUwC,IAE7BF,gBAAiBA,EACjBC,YAAaA,IAOf,aAD0C/C,KAAKG,gBAAgBC,IACnDyC,qCACb,CAEM,qBAAMK,CAAgBC,GAC3B,MAAMC,EAA0B,CAC9BC,aAAcF,GAIhB,aAFiDnD,KAAKG,gBAAgBiD,IAEnDC,YACpB,CAEM,qBAAMC,CAAgBC,GAC3B,IAAIrB,EAAe,KACnB,GAAIsB,EAAcC,WAAWF,GAC3B,IAEErB,SAD0ClC,KAAKG,gBAAgB,CAAEmD,gBAAiBC,KACtED,eACb,CAAC,MAAOI,GACPjC,EAAOX,MAAM,yBAA0B4C,EACxC,CAEH,OAAOxB,CACR,CAEM,oCAAMyB,CAA+BzC,EAAwB0C,GAClE,IAAI1B,EAA2B,KAC/B,IACE,MAAMkB,EAA+B,CACnClC,QAASA,EACT0C,cAAeA,GAEjB1B,QAAalC,KAAKkD,gBAAgBE,EAKnC,CAAC,MAAOM,GACPjC,EAAOX,MAAM,kCAAmC4C,EACjD,CACD,OAAOxB,CACR,MCrNS2B,ECAAC,ECAAC,ECAAC,GHAZ,SAAYH,GACVA,EAAA,uBAAA,yBACAA,EAAA,aAAA,cACD,CAHD,CAAYA,IAAAA,EAGX,CAAA,UIUYI,EAGX,WAAA5E,GAAgB,CAET,4BAAO6E,CAAsBC,EAAuCC,GACzE,IAAIlC,EAAiB,KAIrB,OAHIiC,GAAKE,iBACPnC,EAAOiC,EAAIE,eAAeC,QAAQC,GAAMA,EAAEH,OAASA,IAAMI,KAAKD,GAAMA,EAAEE,SAEjEvC,CACR,CAEM,wBAAOwC,CAAkBP,GAC9B,IAAIjC,GAAgB,EAQpB,OAPIiC,IACEX,EAAcC,WAAWU,EAAIvC,SAAWqC,EAAYU,aAAaR,EAAIjD,YACnEsC,EAAcC,WAAWU,EAAIP,gBAAkBJ,EAAcC,WAAWU,EAAIS,oBAAsBT,EAAIlB,YACxGf,GAAO,GAINA,CACR,CAEM,4BAAO2C,CAAsBpC,GAClC,IAAIP,EAAsB,KAC1B,MAAMkC,EAA0BH,EAAYa,oBAAoBrC,GAShE,OARI2B,EACFlC,EAAO,CACLkC,KAAMA,EACNK,MAAOhC,GAGThB,EAAOX,MAAM,+CAAgD2B,GAExDP,CACR,CAEM,uBAAO6C,CAAiBC,GAE7B,OADuBA,GAAWC,OAASD,EAAUR,KAAKU,GAAMjB,EAAYkB,qBAAqBD,KAAM,EAExG,CAEM,6BAAOE,CAAuBC,GAEnC,OAD+BA,GAAOJ,OAASI,EAAMb,KAAKU,GAAMjB,EAAYqB,qBAAqBJ,KAAM,EAExG,CAEM,2BAAOI,CAAqBC,GACjC,IAAIrD,EAAuB,KAC3B,GAAIqD,GAAQA,EAAKC,QAAQ,QAAU,EAAG,CACpC,MAAMC,EAAeF,EAAKG,MAAM,OAChCxD,EAAO,CACLyD,KAAMF,EAAG,GACTF,KAAME,EAAG,GAEZ,CACD,OAAOvD,CACR,CAEM,2BAAOiD,CAAqBS,GACjC,IAAI1D,EAAe,KAInB,OAHI0D,GAAIL,MAAQK,GAAID,OAClBzD,EAAO0D,EAAGD,KAAO,MAAQC,EAAGL,MAEvBrD,CACR,CAEM,0BAAO4C,CAAoBrC,GAChC,IAAIP,EAA0B,KAK9B,OAJMsB,EAAcC,WAAWhB,KAC7BP,EAAO+B,EAAY4B,qBAAqBpD,GAASoB,EAAkBiC,aAAe,KAClF5D,GAAQA,GAAQ+B,EAAY8B,oBAAoBtD,GAASoB,EAAkBmC,uBAAyB9D,GAE/FA,CACR,CAEM,mBAAOyC,CAAazD,GACzB,IAAIgB,GAAgB,EACpB,GAAIhB,GAASkD,MAAQZ,EAAcC,WAAWvC,GAASuD,OACrD,OAAQvD,EAAQkD,MACd,KAAKP,EAAkBiC,aACrB5D,EAAO+B,EAAY4B,qBAAqB3E,EAAQuD,OAChD,MACF,KAAKZ,EAAkBmC,uBACrB9D,EAAO+B,EAAY8B,oBAAoB7E,EAAQuD,OAC/C,MACF,QACEvC,GAAO,EAIb,OAAOA,CACR,CAEM,2BAAO2D,CAAqBpB,GACjC,QAASA,EAAMwB,MAAM,uEACtB,CAEM,0BAAOF,CAAoBtB,GAChC,QAASA,EAAMwB,MAAM,mEACtB,CAEM,gCAAOC,CAA0BC,GAStC,OARiCA,EAC7B,CACEvE,OAAQuE,EAAGvE,OACXwE,UAAWD,EAAGC,UACd/B,eAAgB8B,EAAG9B,eACnBgC,gCAAiCF,EAAGG,wBAA0B,IAAI9B,KAAKD,GAAMN,EAAYsC,kCAAkChC,MAE7H,IAEL,CAEM,wCAAOgC,CAAkCJ,GAS9C,OARyCA,EACrC,CACEK,OAAQL,EAAGK,OACX1D,gBAAiBqD,EAAGrD,gBACpBC,YAAaoD,EAAGpD,YAChB0D,mBAAoBN,EAAGM,oBAEzB,IAEL,CAEM,uBAAOC,CAAiBjC,GAE7B,OADsBA,GAAOkC,YAAYC,KAAOnC,EAAMoC,uBAAyBC,KAAKC,MAAQ,GAE7F,QC5HUC,EAMDC,QACAC,wBAJFC,oBAAqE,IAAIC,EAA8C,MAE/H,WAAA/H,CACU4H,EACAC,GAAmC,GADnClH,KAAOiH,QAAPA,EACAjH,KAAuBkH,wBAAvBA,CACN,CAEG,4BAAAvG,GACL,IAAI0G,EAAoCrH,MAAMmH,qBAAqBG,WAMnE,OALKtH,KAAKkH,yBAA2BG,GAAOpD,EAAYyC,iBAAiBW,KACvE5F,EAAO8F,KAAK,6DACZvH,KAAKwH,mBAAmBC,KAAK,MAC7BJ,EAAM,MAEDA,GAAKK,QACb,CAED,sBAAWF,GACT,OAAOxH,KAAKmH,mBACb,CAEM,iBAAAQ,GACD3H,KAAKiH,SACPjH,KAAKiH,QAAQU,mBAEhB,CAEM,uBAAAC,CAAwBC,GACzB7H,MAAMiH,SAASW,yBACjB5H,KAAKiH,QAAQW,wBAAwBC,EAExC,CAEM,cAAAC,CAAeC,GAChB/H,MAAMiH,SAASa,gBACjB9H,KAAKiH,QAAQa,eAAeC,EAE/B,CAEM,QAAAC,GACDhI,MAAMiH,SAASe,UACjBhI,KAAKiH,QAAQe,WAEfhI,KAAKwH,mBAAmBC,KAAK,KAC9B,CAEM,iBAAAQ,CAAkBC,GACnBlI,MAAMiH,SAASgB,mBACjBjI,KAAKiH,QAAQgB,kBAAkBC,GAEjClI,KAAKwH,mBAAmBC,KAAKS,EAC9B,QChDUC,EAISC,QAHZC,0BACAC,qBAA+B,EAEvC,WAAAjJ,CAAoB+I,GAAApI,KAAOoI,QAAPA,EAClB3G,EAAO8F,KAAK,6BAEZ,MAAMgB,EAAuCvI,KAAKoI,QAAQI,qBAAqBC,2BAC3ExE,EAAYyC,iBAAiB6B,IAE/B9G,EAAO8F,KAAK,wCACZvH,KAAKoI,QAAQI,qBAAqBE,cAGlC1I,KAAKoI,QAAQO,eAAeV,kBAAkBM,GAGhD,MAAMK,EAAuB5I,KAAKoI,QAAQS,4BAA8B,IACxE7I,KAAKqI,0BAA4BS,EAAM,EAAkB,IAAfF,GAAqBG,WAAW7D,GAAMlF,KAAKgJ,4BAA4B9D,IAClH,CAEM,aAAA+D,GACDjJ,KAAKqI,2BACPrI,KAAKqI,0BAA0Ba,aAElC,CAED,kBAAWC,GACT,OAAOnJ,KAAKoI,OACb,CAEM,mBAAMnH,CAAcC,EAAwBC,EAAoBC,EAAgBC,GACrF,MAAMa,QAAqBlC,KAAKoI,QAAQgB,aAAanI,cAAcC,EAASC,EAAUC,EAAOC,GAM7F,OAJIrB,KAAKoI,QAAQiB,qBAAuB7F,EAAcC,WAAWvB,IAC/DlC,KAAKoI,QAAQiB,oBAAoBC,YAAYpH,EAAMd,EAAOF,GAGrDgB,CACR,CAEM,8BAAMU,CAAyB1B,GACpC,OAAOlB,KAAKoI,QAAQgB,aAAaxG,yBAAyB1B,EAC3D,CAED,sBAAWqI,GACT,OAAOvJ,KAAKsI,mBACb,CAED,sBAAWiB,CAAmBC,GAC5B,GAAIA,EAAU,CACZ,IAAIxJ,KAAKoI,QAAQqB,iBAGf,MAAM,IAAIC,MAAM,6EAFhB1J,KAAKsI,qBAAsB,CAI9B,MACCtI,KAAKsI,qBAAsB,CAE9B,CAEM,iCAAMU,CAA4B9D,GACvCzD,EAAOkI,MAAM,2CAA4CzE,GAEzD,MAAM0E,EAAwC5J,KAAKyI,2BACnD,GAAImB,EAAS,CACX,MAAMC,EAA2B7J,KAAKoI,QAAQ0B,mCAAqC,GAEnF,GAD4BF,EAAQ/C,uBAAyBkD,KAAKC,MAAMlD,KAAKC,MAAQ,KACnE8C,EAChB,GAAI7J,KAAKuJ,mBAAoB,CAC3B9H,EAAO8F,KAAK,4CACZ,MAAM0C,QAA6CjK,KAAKkK,eACxDlK,KAAKoI,QAAQO,eAAef,wBAAwBqC,EACrD,MACCxI,EAAO8F,KAAK,2CACZvH,KAAKmK,QAGV,CACF,CAEM,MAAAA,GACLnK,KAAKoI,QAAQI,qBAAqBE,aAClC1I,KAAKoI,QAAQO,eAAeX,UAC7B,CAEM,wBAAAS,GACL,IAAI2B,EAAoCpK,KAAKoI,QAAQI,qBAAqBC,2BAU1E,OATI2B,GACEnG,EAAYyC,iBAAiB0D,KAG/B3I,EAAO8F,KAAK,4CACZvH,KAAKmK,SACLC,EAAM,MAGHA,CACR,CAEM,mBAAAC,CAAoB9E,GACzB,IAAIrD,GAAgB,EACpB,GAAIsB,EAAcC,WAAW8B,GAAO,CAClC,MAAML,EAAkClF,KAAKyI,2BACvC6B,EAAmB/E,EAAKgF,cAC9BrI,EAAOgD,GAAGyB,YAAYtB,SAAWH,EAAEyB,WAAWtB,MAAMmF,MAAMC,GAAMA,EAAEF,gBAAkBD,GACrF,CACD,OAAOpI,CACR,CAEM,UAAAwI,GAEL,QADwC1K,KAAKyI,0BAE9C,CAEM,0BAAAkC,GACL,MAAMzF,EAAkClF,KAAKyI,2BAC7C,OAAOvD,EAAIA,EAAEyB,WAAa,IAC3B,CAEM,yBAAAiE,GACL,MAAM1F,EAAkClF,KAAKyI,2BAC7C,OAAOvD,EAAIA,EAAEwC,SAAW,IACzB,CAEM,uBAAAmD,GACL,MAAM3F,EAAuBlF,KAAK2K,6BAClC,OAAOzF,EAAIA,EAAE4F,KAAO,IACrB,CAEM,uCAAAC,GACL,MAAM7F,EAAuBlF,KAAK2K,6BAClC,OAAOzF,EAAIA,EAAE0B,IAAM,IACpB,CAEM,iCAAAoE,GACL,MAAM9F,EAAuBlF,KAAK2K,6BAClC,OAAOzF,EAAIA,EAAE0B,IAAMmD,KAAKC,MAAMlD,KAAKC,MAAQ,KAAQ,IACpD,CAEO,iCAAAkE,CAAkCC,GACxC,IAAIhJ,EAAqC,KACzC,GAAKsB,EAAcC,WAAWyH,GAGvB,CACLzJ,EAAO8F,KAAK,yCAA0C2D,GAEtD,MAAMtK,EAA4BuK,EAAWC,oBAAuCF,GAChFtK,GACFsB,EAAO,CACLyE,WAAY/F,EACZ8G,SAAUwD,EACVrE,uBAAwBjG,EAAOgG,KAEjC5G,KAAKoI,QAAQI,qBAAqB6C,uBAAuBnJ,GACzDlC,KAAKsL,yCAAyC1K,EAAO2K,WACrDvL,KAAKoI,QAAQO,eAAeV,kBAAkB/F,KAE9CT,EAAOC,KAAK,oEACZ1B,KAAKoI,QAAQO,eAAeb,eAAe,gCAE9C,MAnBCrG,EAAO8F,KAAK,4EACZvH,KAAKmK,SAmBP,OAAOjI,CACR,CAEM,kBAAMgI,GACX,IAAIhI,EAAqC,KACzC,MAAMsJ,EAA+CxL,KAAKyI,2BAC1D,GAAK+C,EAEE,CACL,MAAMC,QAAyBzL,KAAKoI,QAAQgB,aAAa9F,gBAAgBkI,EAAe9D,UACxFxF,EAAOlC,KAAKiL,kCAAkCQ,EAC/C,MAJChK,EAAO8F,KAAK,0CAKd,OAAOrF,CACR,CAGM,sBAAMwJ,CAAiBxK,GAC5B,OAAOlB,KAAKoI,QAAQgB,aAAazG,4BAA4BzB,EAC9D,CAEO,+BAAMyK,CAA0BlL,GACtC,IAAIyB,EAAqC,KAgBzC,OAfIzB,GACFgB,EAAO8F,KAAK,yBAA0B9G,GAClCA,EAAKiH,UACPjG,EAAO8F,KAAK,kBACZrF,EAAOlC,KAAKiL,kCAAkCxK,EAAKiH,WAC1CjH,EAAKK,MACdd,KAAKoI,QAAQO,eAAeb,eAAerH,EAAKK,QAEhDW,EAAOX,MAAM,8CACbd,KAAKoI,QAAQO,eAAeb,eAAe,iDAG7CrG,EAAOX,MAAM,qBACbd,KAAKoI,QAAQO,eAAeb,eAAe,6BAEtC5F,CACR,CAEO,wCAAAoJ,CAAyCM,GAE3C5L,KAAKoI,QAAQiB,qBAAuBuC,GACtCnK,EAAO8F,KAAK,uCAAwCqE,GACpD5L,KAAKoI,QAAQiB,oBAAoBwC,gBAAgBD,IAEjDnK,EAAO8F,KAAK,oEAEf,CAEO,yCAAAuE,CAA0CF,GAChD5L,KAAKsL,yCAAyCM,GAAKjF,YAAY4E,UAChE,CAEM,+BAAMQ,CAA0BnK,GACrC,MAAMnB,QAAiCT,KAAKgM,yCAAyCpK,GAC/EM,QAA2ClC,KAAK2L,0BAA0BlL,GAEhF,OADAT,KAAK8L,0CAA0C5J,GACxCA,CACR,CAEM,gDAAMM,CAA2CC,GAEtD,aADuCzC,KAAKoI,QAAQgB,aAAa5G,2CAA2CC,EAE7G,CAEM,mCAAMC,CAA8BD,GAEzC,aADuCzC,KAAKoI,QAAQgB,aAAa1G,8BAA8BD,EAEhG,CAEM,sCAAMwJ,CACX/K,EACAgK,EACAgB,GAEAzK,EAAO8F,KAAK,0DAA2DrG,EAASgK,EAAOgB,GACvF,MAAMzL,QAAiCT,KAAKoI,QAAQgB,aAAalG,gBAAgB,CAC/EhC,QAASA,EACT0C,cAAesH,EACfgB,oBAAqBA,IAEjBhK,QAA2ClC,KAAK2L,0BAA0BlL,GAEhF,OADAT,KAAK8L,0CAA0C5J,GACxCA,CACR,CAEM,+CAAMiK,GACX,MAAM1J,QACEzC,KAAKoI,QAAQgB,aAAahH,uDAE5BgK,QAAwCC,EAAkB5J,GAE1DM,EAAsBS,EAAc8I,YACxCtM,KAAKoI,SAASmE,qBAAuBvM,KAAKoI,QAAQmE,uBAAyBvM,KAAKwM,+BAG5EC,QAAmCzM,KAAKoI,QAAQgB,aAAavG,sCACjE7C,KAAKoI,QAAQtF,gBACbC,EACAqJ,GAGF,OADApM,KAAKsL,yCAAyCmB,GACvCA,CACR,CAEO,2BAAAD,GACN,IAAItK,EAAe,GAmBnB,OAlBIwK,WAQAxK,EALAwK,UAAyB,eACzBA,UAAyB,cAAU,QACnCA,UAAyB,cAAU,OAAE,IACrCA,UAAyB,cAAU,OAAE,GAAU,MAExCA,UAAyB,cAAU,OAAE,GAAU,MAE/CA,UAAUC,UAEfD,UAAUE,WACZ1K,GAAQ,OAASwK,UAAUE,WAG7B1K,EAAO,iBAEFA,CACR,CAEM,8CAAM8J,CAAyCpK,GACpD,IAAIM,EAA2B,KAC/B,IAGE,MAAMO,QACEzC,KAAKoI,QAAQgB,aAAanH,iDAAiDL,GACnFH,EAAO8F,KAAK,2BAA4B9E,GACxC,MAAM2J,QAA0CS,EAAoBpK,GACpEhB,EAAO8F,KAAK,gBAAiB6E,GAE7B,MAAMhJ,EAA+B,CACnCxB,OAAQA,EACRqB,SAAUmJ,GAEZlK,QAAalC,KAAKoI,QAAQgB,aAAalG,gBAAgBE,EAKxD,CAAC,MAAOM,GACPjC,EAAOX,MAAM,uBAAwB4C,EACtC,CACD,OAAOxB,CACR,QC7UmB4K,EAIb,eAAAjB,CAAgBkB,GACrB,GAAIA,GAAOnL,OAAQ,CACjBH,EAAO8F,KAAK,2BAA4BwF,GACxC,IAAIC,EAAsChN,KAAKiN,aAC/CD,EAAOA,EAAK1I,QAAQC,GAAMA,EAAEuG,KAAKlJ,SAAWmL,EAAMnL,SAClDoL,EAAKE,KAAK,CACRpC,KAAMiC,EACNI,iBAAkBrG,KAAKC,QAEzB/G,KAAKoN,YAAYJ,EAClB,MACCvL,EAAOC,KAAK,qDAAsDqL,EAErE,CAEM,WAAAzD,CAAY1H,EAAgBR,EAAeF,GAC5CsC,EAAcC,WAAW7B,IAAWqC,EAAYU,aAAazD,GAC/DlB,KAAK6L,gBAAgB,CACnBjK,OAAQA,EACRyC,eAAgB,CAACnD,GACjBmF,+BAAgC,GAChCD,UAAWhF,IAGbK,EAAOC,KAAK,gDAAiDE,EAAQV,EAExE,CAEM,UAAAmM,CAAWzL,GAChB,IAAIoL,EAAsChN,KAAKiN,aAC/CD,EAAOA,EAAK1I,QAAQgJ,GAAMA,EAAExC,KAAKlJ,SAAWA,IAC5C5B,KAAKoN,YAAYJ,EAClB,CACM,cAAAO,GACL,OAAOC,OAAOC,OAAO,GAAIzN,KAAKiN,aAC/B,CACM,cAAAS,GACL1N,KAAKoN,YAAY,GAClB,QC7CUO,EACSC,gBAApB,WAAAvO,CAAoBuO,GAAA5N,KAAe4N,gBAAfA,EAClB3N,EAAe4N,uCAAuC7N,KAAK4N,gBAAiB,mBACvEE,cACH/M,EAAaC,kBAAkB,+CAElC,CAEM,wBAAAyH,GACL,MAAMnI,EAAmBwN,aAAaC,QAAQ/N,KAAK4N,iBAEnD,OAD2CpK,EAAcC,WAAWnD,GAAYC,KAAKM,MAAMP,GAAY,IAExG,CAEM,UAAAoI,GACL1I,KAAKqL,uBAAuB,KAC7B,CAEM,sBAAAA,CAAuB2C,GACxBA,EACFF,aAAaG,QAAQjO,KAAK4N,gBAAiBrN,KAAKC,UAAUwN,IAE1DF,aAAaI,WAAWlO,KAAK4N,gBAEhC,ECxBG,MAAOO,UAAoDrB,EAC3Cc,gBAApB,WAAAvO,CAAoBuO,GAClBQ,QADkBpO,KAAe4N,gBAAfA,EAElB3N,EAAe4N,uCAAuC7N,KAAK4N,gBAAiB,mBACvEE,cACH/M,EAAaC,kBAAkB,+CAElC,CAED,UAAAiM,GACE,MAAM3M,EAAmBkD,EAAcC,WAAWqK,aAAaC,QAAQvK,EAAcC,WAAWzD,KAAK4N,mBACrG,OAAOtN,EAAWC,KAAKM,MAAMP,GAAY,EAC1C,CAED,WAAA8M,CAAY5D,GACV,MAAMlJ,EAAmBkJ,EAAWjJ,KAAKC,UAAUgJ,GAAY,KAC/DsE,aAAaG,QAAQzK,EAAcC,WAAWzD,KAAK4N,iBAAkBtN,EACtE,QCpBU+N,EACHL,QAED,wBAAAvF,GACL,OAAOzI,KAAKgO,OACb,CAEM,UAAAtF,GACL1I,KAAKgO,QAAU,IAChB,CAEM,sBAAA3C,CAAuB2C,GAC5BhO,KAAKgO,QAAUA,CAChB,ECZG,MAAOM,UAAuDxB,EAC1DyB,OAAwC,GAEhD,UAAAtB,GACE,OAAOjN,KAAKuO,MACb,CAED,WAAAnB,CAAY5D,GACVxJ,KAAKuO,OAAS/E,CACf,GVbH,SAAY1F,GACVA,EAAA,aAAA,eACAA,EAAA,UAAA,YACAA,EAAA,OAAA,QACD,CAJD,CAAYA,IAAAA,EAIX,CAAA,ICJD,SAAYC,GACVA,EAAA,SAAA,WACAA,EAAA,OAAA,SACAA,EAAA,MAAA,OACD,CAJD,CAAYA,IAAAA,EAIX,CAAA,ICJD,SAAYC,GACVA,EAAA,IAAA,MACAA,EAAA,SAAA,WACAA,EAAA,IAAA,MACAA,EAAA,IAAA,MACAA,EAAA,MAAA,QACAA,EAAA,OAAA,QACD,CAPD,CAAYA,IAAAA,EAOX,CAAA"}