@capgo/capacitor-social-login 8.3.12 → 8.3.14

package/android/src/main/java/ee/forgr/capacitor/social/login/SocialLoginPlugin.java

@@ -24,7 +24,7 @@ import org.json.JSONObject;
 @CapacitorPlugin(name = "SocialLogin")
 public class SocialLoginPlugin extends Plugin {
 
-    private final String pluginVersion = "8.3.12";
+    private final String pluginVersion = "8.3.14";
 
     public static String LOG_TAG = "CapgoSocialLogin";
     public HashMap<String, SocialProvider> socialProviderHashMap = new HashMap<>();

package/dist/esm/auth-connect.js

@@ -1,14 +1,4 @@
-var __rest = (this && this.__rest) || function (s, e) {
-    var t = {};
-    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
-        t[p] = s[p];
-    if (s != null && typeof Object.getOwnPropertySymbols === "function")
-        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
-            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
-                t[p[i]] = s[p[i]];
-        }
-    return t;
-};
+import { __rest } from "tslib";
 import { SocialLoginBase } from './social-login';
 const AUTH_CONNECT_PROVIDERS = ['auth0', 'azure', 'cognito', 'okta', 'onelogin'];
 const DEFAULT_SCOPES = {

package/dist/esm/auth-connect.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-connect.js","sourceRoot":"","sources":["../../src/auth-connect.ts"],"names":[],"mappings":";;;;;;;;;;;AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AA0EjD,MAAM,sBAAsB,GAAqC,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAEnH,MAAM,cAAc,GAA0C;IAC5D,KAAK,EAAE,qCAAqC;IAC5C,KAAK,EAAE,sBAAsB;IAC7B,OAAO,EAAE,sBAAsB;IAC/B,IAAI,EAAE,qCAAqC;IAC3C,QAAQ,EAAE,sBAAsB;CACjC,CAAC;AAEF,MAAM,qBAAqB,GAAmD;IAC5E,KAAK,EAAE,qCAAqC;CAC7C,CAAC;AAEF,MAAM,sBAAsB,GAAG,mCAAmC,CAAC;AAEnE,MAAM,cAAc,GAAG,CAAC,KAAa,EAAU,EAAE;IAC/C,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,WAAW,KAAK,EAAE,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE/E,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;IACrD,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,GAAG,aAAa,IAAI,aAAa,EAAE,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,IAA6B,EAC7B,SAAkC,EACE,EAAE;IACtC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,uCAAY,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC,GAAK,CAAC,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAC,EAAG;AACnD,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,UAAiC,EAAE,MAA6B,EAAQ,EAAE;IAChG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,qBAAqB,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,wBAAwB,CAAC,CAAC;IACvE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,MAAmB,EAAwB,EAAE;IACrE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE;QAC5C,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;QAChD,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC;QACjD,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;QACtC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;QACrC,oBAAoB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;KAClF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,MAAmB,EAAwB,EAAE;;IACrE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAA,MAAM,CAAC,QAAQ,mCAAI,QAAQ,CAAC;IAC7C,MAAM,aAAa,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAA,MAAM,CAAC,aAAa,mCAAI,sBAAsB,CAAC,CAAC,CAAC;IACxG,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,QAAQ,cAAc,CAAC,CAAC;IAC/D,OAAO,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE;QAC5C,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;QAChD,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;QAC3C,WAAW,EAAE,qBAAqB,CAAC,KAAK;KACzC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,MAAqB,EAAwB,EAAE;IACzE,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE;QAC9C,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACvD,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC;QAClD,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAC7C,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;KACnC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,MAAkB,EAAwB,EAAE;IACnE,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE;QAC3C,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC;QACnD,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;QAC9C,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC;QACzC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;KACtC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,MAAsB,EAAwB,EAAE;IAC3E,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE;QAC/C,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;QAC3C,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;QAC3C,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;QAChC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;KACnC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,UAAiC,EACjC,MAA6B,EAC7B,QAAuC,EACjB,EAAE;;IACxB,MAAM,oBAAoB,GAAG,YAAY,CAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACtG,MAAM,yBAAyB,GAAG,YAAY,CAAC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAErH,MAAM,MAAM,GAAyB;QACnC,KAAK,EAAE,MAAM,CAAC,QAAQ;QACtB,oBAAoB,EAAE,MAAA,MAAA,MAAM,CAAC,oBAAoB,mCAAI,QAAQ,CAAC,oBAAoB,mCAAI,EAAE;QACxF,mBAAmB,EAAE,MAAA,MAAM,CAAC,mBAAmB,mCAAI,QAAQ,CAAC,mBAAmB;QAC/E,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,QAAQ,CAAC,WAAW;QACvD,YAAY,EAAE,MAAA,MAAA,MAAM,CAAC,YAAY,mCAAI,QAAQ,CAAC,YAAY,mCAAI,MAAM;QACpE,WAAW,EAAE,MAAA,MAAA,MAAM,CAAC,WAAW,mCAAI,QAAQ,CAAC,WAAW,mCAAI,IAAI;QAC/D,KAAK,EAAE,MAAA,MAAA,MAAM,CAAC,KAAK,mCAAI,QAAQ,CAAC,KAAK,mCAAI,cAAc,CAAC,UAAU,CAAC;QACnE,oBAAoB;QACpB,yBAAyB;QACzB,SAAS,EAAE,MAAA,MAAM,CAAC,SAAS,mCAAI,QAAQ,CAAC,SAAS;QACjD,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,QAAQ,CAAC,WAAW;KACxD,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,oCAAoC,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,OAA4B,EAAwC,EAAE;IACvG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAyC,EAAE,CAAC;IAE3D,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,SAAS,CAAC,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,SAAS,CAAC,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,SAAS,CAAC,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,SAAS,CAAC,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,SAAS,CAAC,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAqC,EAAE,CACpF,sBAAsB,CAAC,QAAQ,CAAC,QAAiC,CAAC,CAAC;AAErE,MAAM,4BAA4B,GAAG,CACnC,OAAmC,EACkD,EAAE,CACvF,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,yBAAyB,GAAG,CAChC,OAAgC,EACkD,EAAE,CACpF,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,eAAe,GAAG,CAAC,OAAgC,EAAgB,EAAE;;IACzE,IAAI,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,OAAO,kBACL,UAAU,EAAE,OAAO,CAAC,QAAQ,IACzB,CAAC,MAAA,OAAO,CAAC,OAAO,mCAAI,EAAE,CAAC,CAC3B;SACF,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,OAAmC,EAA4B,EAAE;IAC3F,IAAI,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,OAAO,CAAC,QAAQ;SAC7B,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,OAAgC,EAAgB,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;AAEvG,MAAM,kBAAkB,GAAG,CACzB,OAA6C,EAC7C,MAA6C,EACK,EAAE;IACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,uCACK,OAAO,GACP,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAC,EACjB;AACJ,CAAC,CAAC;AAkBF,MAAM,uBAAuB,GAAG,CAAC,MAAyB,EAAqB,EAAE,CAAC,CAAC;IACjF,UAAU,EAAE,KAAK,EAAE,OAAqC,EAAiB,EAAE;QACzE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAc,OAAO,EAAhB,IAAI,UAAK,OAAO,EAA1C,yBAAgC,CAAU,CAAC;QACjD,MAAM,eAAe,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,kBAAkB,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,OAAO,mCACR,IAAI,GACJ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAClD,CAAC;QACF,OAAO,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,EAAE,KAAK,EACV,OAA0D,EACW,EAAE;QACvE,IAAI,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAkC,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAsB,CAAC,CAAC;YAC5D,OAAO;gBACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,QAAQ,CAAC,MAA2C;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,KAAK,CAAC,OAAuB,CAAwE,CAAC;IACtH,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,OAAmC,EAAiB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChH,UAAU,EAAE,KAAK,EAAE,OAAmC,EAAoC,EAAE,CAC1F,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChD,oBAAoB,EAAE,KAAK,EAAE,OAAmC,EAA8B,EAAE,CAC9F,MAAM,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1D,OAAO,EAAE,KAAK,EAAE,OAAgC,EAAiB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9G,oBAAoB,EAAE,KAAK,EAAkC,OAG5D,EAA+C,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC;IACvF,gBAAgB,EAAE,KAAK,IAAkC,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE;CACtF,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,eAAe,CAAC,CAAC;AAUxE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,CAAC","sourcesContent":["import type {\n  AuthorizationCode,\n  AuthorizationCodeOptions,\n  InitializeOptions,\n  LoginOptions,\n  OAuth2LoginOptions,\n  OAuth2ProviderConfig,\n  ProviderSpecificCall,\n  ProviderSpecificCallOptionsMap,\n  ProviderSpecificCallResponseMap,\n  ProviderResponseMap,\n  SocialLoginPlugin,\n} from './definitions';\nimport { SocialLoginBase } from './social-login';\n\ntype AuthConnectProviderId = 'auth0' | 'azure' | 'cognito' | 'okta' | 'onelogin';\n\ntype AuthConnectLoginOptions =\n  | LoginOptions\n  | {\n      provider: AuthConnectProviderId;\n      options?: Omit<OAuth2LoginOptions, 'providerId'>;\n    };\n\ntype AuthConnectProviderOptions =\n  | AuthorizationCodeOptions\n  | {\n      provider: AuthConnectProviderId;\n    };\n\ntype AuthConnectInitializeOptions = InitializeOptions & {\n  authConnect?: AuthConnectPresets;\n};\n\ntype AuthConnectPresetBase = {\n  clientId: string;\n  redirectUrl: string;\n  scope?: string;\n  responseType?: 'code' | 'token';\n  pkceEnabled?: boolean;\n  additionalParameters?: Record<string, string>;\n  additionalResourceHeaders?: Record<string, string>;\n  resourceUrl?: string;\n  authorizationBaseUrl?: string;\n  accessTokenEndpoint?: string;\n  logoutUrl?: string;\n  logsEnabled?: boolean;\n};\n\ntype Auth0Preset = AuthConnectPresetBase & {\n  domain: string;\n  audience?: string;\n};\n\ntype AzurePreset = AuthConnectPresetBase & {\n  tenantId?: string;\n  authorityHost?: string;\n};\n\ntype CognitoPreset = AuthConnectPresetBase & {\n  domain: string;\n};\n\ntype OktaPreset = AuthConnectPresetBase & {\n  issuer: string;\n};\n\ntype OneLoginPreset = AuthConnectPresetBase & {\n  issuer: string;\n};\n\ntype AuthConnectPresets = {\n  auth0?: Auth0Preset;\n  azure?: AzurePreset;\n  cognito?: CognitoPreset;\n  okta?: OktaPreset;\n  onelogin?: OneLoginPreset;\n};\n\ntype AuthConnectProviderResponseMap = ProviderResponseMap & {\n  auth0: ProviderResponseMap['oauth2'];\n  azure: ProviderResponseMap['oauth2'];\n  cognito: ProviderResponseMap['oauth2'];\n  okta: ProviderResponseMap['oauth2'];\n  onelogin: ProviderResponseMap['oauth2'];\n};\n\nconst AUTH_CONNECT_PROVIDERS: readonly AuthConnectProviderId[] = ['auth0', 'azure', 'cognito', 'okta', 'onelogin'];\n\nconst DEFAULT_SCOPES: Record<AuthConnectProviderId, string> = {\n  auth0: 'openid profile email offline_access',\n  azure: 'openid profile email',\n  cognito: 'openid profile email',\n  okta: 'openid profile email offline_access',\n  onelogin: 'openid profile email',\n};\n\nconst DEFAULT_RESOURCE_URLS: Partial<Record<AuthConnectProviderId, string>> = {\n  azure: 'https://graph.microsoft.com/v1.0/me',\n};\n\nconst DEFAULT_AUTHORITY_HOST = 'https://login.microsoftonline.com';\n\nconst ensureProtocol = (value: string): string => {\n  if (value.startsWith('http://') || value.startsWith('https://')) {\n    return value;\n  }\n  return `https://${value}`;\n};\n\nconst trimTrailingSlash = (value: string): string => value.replace(/\\/+$/, '');\n\nconst joinUrl = (base: string, path: string): string => {\n  const sanitizedBase = trimTrailingSlash(base);\n  const sanitizedPath = path.replace(/^\\/+/, '');\n  return `${sanitizedBase}/${sanitizedPath}`;\n};\n\nconst mergeRecords = (\n  base?: Record<string, string>,\n  overrides?: Record<string, string>,\n): Record<string, string> | undefined => {\n  if (!base && !overrides) {\n    return undefined;\n  }\n  return { ...(base ?? {}), ...(overrides ?? {}) };\n};\n\nconst validatePreset = (providerId: AuthConnectProviderId, preset: AuthConnectPresetBase): void => {\n  if (!preset.clientId) {\n    throw new Error(`[authConnect] ${providerId} requires clientId.`);\n  }\n  if (!preset.redirectUrl) {\n    throw new Error(`[authConnect] ${providerId} requires redirectUrl.`);\n  }\n};\n\nconst buildAuth0Config = (preset: Auth0Preset): OAuth2ProviderConfig => {\n  validatePreset('auth0', preset);\n  if (!preset.domain) {\n    throw new Error('[authConnect] auth0 requires domain.');\n  }\n  const base = trimTrailingSlash(ensureProtocol(preset.domain));\n  return buildConfigFromPreset('auth0', preset, {\n    authorizationBaseUrl: joinUrl(base, 'authorize'),\n    accessTokenEndpoint: joinUrl(base, 'oauth/token'),\n    resourceUrl: joinUrl(base, 'userinfo'),\n    logoutUrl: joinUrl(base, 'v2/logout'),\n    additionalParameters: preset.audience ? { audience: preset.audience } : undefined,\n  });\n};\n\nconst buildAzureConfig = (preset: AzurePreset): OAuth2ProviderConfig => {\n  validatePreset('azure', preset);\n  const tenantId = preset.tenantId ?? 'common';\n  const authorityHost = trimTrailingSlash(ensureProtocol(preset.authorityHost ?? DEFAULT_AUTHORITY_HOST));\n  const base = joinUrl(authorityHost, `${tenantId}/oauth2/v2.0`);\n  return buildConfigFromPreset('azure', preset, {\n    authorizationBaseUrl: joinUrl(base, 'authorize'),\n    accessTokenEndpoint: joinUrl(base, 'token'),\n    resourceUrl: DEFAULT_RESOURCE_URLS.azure,\n  });\n};\n\nconst buildCognitoConfig = (preset: CognitoPreset): OAuth2ProviderConfig => {\n  validatePreset('cognito', preset);\n  if (!preset.domain) {\n    throw new Error('[authConnect] cognito requires domain.');\n  }\n  const base = trimTrailingSlash(ensureProtocol(preset.domain));\n  return buildConfigFromPreset('cognito', preset, {\n    authorizationBaseUrl: joinUrl(base, 'oauth2/authorize'),\n    accessTokenEndpoint: joinUrl(base, 'oauth2/token'),\n    resourceUrl: joinUrl(base, 'oauth2/userInfo'),\n    logoutUrl: joinUrl(base, 'logout'),\n  });\n};\n\nconst buildOktaConfig = (preset: OktaPreset): OAuth2ProviderConfig => {\n  validatePreset('okta', preset);\n  if (!preset.issuer) {\n    throw new Error('[authConnect] okta requires issuer.');\n  }\n  const base = trimTrailingSlash(ensureProtocol(preset.issuer));\n  return buildConfigFromPreset('okta', preset, {\n    authorizationBaseUrl: joinUrl(base, 'v1/authorize'),\n    accessTokenEndpoint: joinUrl(base, 'v1/token'),\n    resourceUrl: joinUrl(base, 'v1/userinfo'),\n    logoutUrl: joinUrl(base, 'v1/logout'),\n  });\n};\n\nconst buildOneLoginConfig = (preset: OneLoginPreset): OAuth2ProviderConfig => {\n  validatePreset('onelogin', preset);\n  if (!preset.issuer) {\n    throw new Error('[authConnect] onelogin requires issuer.');\n  }\n  const base = trimTrailingSlash(ensureProtocol(preset.issuer));\n  return buildConfigFromPreset('onelogin', preset, {\n    authorizationBaseUrl: joinUrl(base, 'auth'),\n    accessTokenEndpoint: joinUrl(base, 'token'),\n    resourceUrl: joinUrl(base, 'me'),\n    logoutUrl: joinUrl(base, 'logout'),\n  });\n};\n\nconst buildConfigFromPreset = (\n  providerId: AuthConnectProviderId,\n  preset: AuthConnectPresetBase,\n  defaults: Partial<OAuth2ProviderConfig>,\n): OAuth2ProviderConfig => {\n  const additionalParameters = mergeRecords(defaults.additionalParameters, preset.additionalParameters);\n  const additionalResourceHeaders = mergeRecords(defaults.additionalResourceHeaders, preset.additionalResourceHeaders);\n\n  const config: OAuth2ProviderConfig = {\n    appId: preset.clientId,\n    authorizationBaseUrl: preset.authorizationBaseUrl ?? defaults.authorizationBaseUrl ?? '',\n    accessTokenEndpoint: preset.accessTokenEndpoint ?? defaults.accessTokenEndpoint,\n    redirectUrl: preset.redirectUrl,\n    resourceUrl: preset.resourceUrl ?? defaults.resourceUrl,\n    responseType: preset.responseType ?? defaults.responseType ?? 'code',\n    pkceEnabled: preset.pkceEnabled ?? defaults.pkceEnabled ?? true,\n    scope: preset.scope ?? defaults.scope ?? DEFAULT_SCOPES[providerId],\n    additionalParameters,\n    additionalResourceHeaders,\n    logoutUrl: preset.logoutUrl ?? defaults.logoutUrl,\n    logsEnabled: preset.logsEnabled ?? defaults.logsEnabled,\n  };\n\n  if (!config.authorizationBaseUrl) {\n    throw new Error(`[authConnect] ${providerId} authorizationBaseUrl is required.`);\n  }\n\n  return config;\n};\n\nconst buildAuthConnectProviders = (presets?: AuthConnectPresets): Record<string, OAuth2ProviderConfig> => {\n  if (!presets) {\n    return {};\n  }\n  const providers: Record<string, OAuth2ProviderConfig> = {};\n\n  if (presets.auth0) {\n    providers.auth0 = buildAuth0Config(presets.auth0);\n  }\n  if (presets.azure) {\n    providers.azure = buildAzureConfig(presets.azure);\n  }\n  if (presets.cognito) {\n    providers.cognito = buildCognitoConfig(presets.cognito);\n  }\n  if (presets.okta) {\n    providers.okta = buildOktaConfig(presets.okta);\n  }\n  if (presets.onelogin) {\n    providers.onelogin = buildOneLoginConfig(presets.onelogin);\n  }\n\n  return providers;\n};\n\nconst isAuthConnectProvider = (provider: string): provider is AuthConnectProviderId =>\n  AUTH_CONNECT_PROVIDERS.includes(provider as AuthConnectProviderId);\n\nconst isAuthConnectProviderOptions = (\n  options: AuthConnectProviderOptions,\n): options is Extract<AuthConnectProviderOptions, { provider: AuthConnectProviderId }> =>\n  isAuthConnectProvider(options.provider);\n\nconst isAuthConnectLoginOptions = (\n  options: AuthConnectLoginOptions,\n): options is Extract<AuthConnectLoginOptions, { provider: AuthConnectProviderId }> =>\n  isAuthConnectProvider(options.provider);\n\nconst mapLoginOptions = (options: AuthConnectLoginOptions): LoginOptions => {\n  if (isAuthConnectLoginOptions(options)) {\n    return {\n      provider: 'oauth2',\n      options: {\n        providerId: options.provider,\n        ...(options.options ?? {}),\n      },\n    };\n  }\n\n  return options;\n};\n\nconst mapProviderOptions = (options: AuthConnectProviderOptions): AuthorizationCodeOptions => {\n  if (isAuthConnectProviderOptions(options)) {\n    return {\n      provider: 'oauth2',\n      providerId: options.provider,\n    };\n  }\n\n  return options;\n};\n\nconst mapRefreshOptions = (options: AuthConnectLoginOptions): LoginOptions => mapLoginOptions(options);\n\nconst mergeOAuth2Configs = (\n  presets: Record<string, OAuth2ProviderConfig>,\n  oauth2?: Record<string, OAuth2ProviderConfig>,\n): Record<string, OAuth2ProviderConfig> | undefined => {\n  if (!Object.keys(presets).length && !oauth2) {\n    return oauth2;\n  }\n  return {\n    ...presets,\n    ...(oauth2 ?? {}),\n  };\n};\n\ntype AuthConnectClient = {\n  initialize: (options: AuthConnectInitializeOptions) => Promise<void>;\n  login: <T extends AuthConnectLoginOptions['provider']>(\n    options: Extract<AuthConnectLoginOptions, { provider: T }>,\n  ) => Promise<{ provider: T; result: AuthConnectProviderResponseMap[T] }>;\n  logout: (options: AuthConnectProviderOptions) => Promise<void>;\n  isLoggedIn: (options: AuthConnectProviderOptions) => Promise<{ isLoggedIn: boolean }>;\n  getAuthorizationCode: (options: AuthConnectProviderOptions) => Promise<AuthorizationCode>;\n  refresh: (options: AuthConnectLoginOptions) => Promise<void>;\n  providerSpecificCall: <T extends ProviderSpecificCall>(options: {\n    call: T;\n    options: ProviderSpecificCallOptionsMap[T];\n  }) => Promise<ProviderSpecificCallResponseMap[T]>;\n  getPluginVersion: () => Promise<{ version: string }>;\n};\n\nconst createAuthConnectClient = (client: SocialLoginPlugin): AuthConnectClient => ({\n  initialize: async (options: AuthConnectInitializeOptions): Promise<void> => {\n    const { authConnect, oauth2, ...rest } = options;\n    const presetProviders = buildAuthConnectProviders(authConnect);\n    const mergedOauth2 = mergeOAuth2Configs(presetProviders, oauth2);\n    const payload: InitializeOptions = {\n      ...rest,\n      ...(mergedOauth2 ? { oauth2: mergedOauth2 } : {}),\n    };\n    return client.initialize(payload);\n  },\n  login: async <T extends AuthConnectLoginOptions['provider']>(\n    options: Extract<AuthConnectLoginOptions, { provider: T }>,\n  ): Promise<{ provider: T; result: AuthConnectProviderResponseMap[T] }> => {\n    if (isAuthConnectProvider(options.provider)) {\n      const mapped = mapLoginOptions(options as AuthConnectLoginOptions);\n      const response = await client.login(mapped as LoginOptions);\n      return {\n        provider: options.provider,\n        result: response.result as AuthConnectProviderResponseMap[T],\n      };\n    }\n\n    return client.login(options as LoginOptions) as Promise<{ provider: T; result: AuthConnectProviderResponseMap[T] }>;\n  },\n  logout: async (options: AuthConnectProviderOptions): Promise<void> => client.logout(mapProviderOptions(options)),\n  isLoggedIn: async (options: AuthConnectProviderOptions): Promise<{ isLoggedIn: boolean }> =>\n    client.isLoggedIn(mapProviderOptions(options)),\n  getAuthorizationCode: async (options: AuthConnectProviderOptions): Promise<AuthorizationCode> =>\n    client.getAuthorizationCode(mapProviderOptions(options)),\n  refresh: async (options: AuthConnectLoginOptions): Promise<void> => client.refresh(mapRefreshOptions(options)),\n  providerSpecificCall: async <T extends ProviderSpecificCall>(options: {\n    call: T;\n    options: ProviderSpecificCallOptionsMap[T];\n  }): Promise<ProviderSpecificCallResponseMap[T]> => client.providerSpecificCall(options),\n  getPluginVersion: async (): Promise<{ version: string }> => client.getPluginVersion(),\n});\n\nconst SocialLoginAuthConnect = createAuthConnectClient(SocialLoginBase);\n\nexport type {\n  AuthConnectInitializeOptions,\n  AuthConnectLoginOptions,\n  AuthConnectProviderId,\n  AuthConnectProviderOptions,\n  AuthConnectPresets,\n};\n\nexport { createAuthConnectClient, SocialLoginAuthConnect };\n"]}
+{"version":3,"file":"auth-connect.js","sourceRoot":"","sources":["../../src/auth-connect.ts"],"names":[],"mappings":";AAaA,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AA0EjD,MAAM,sBAAsB,GAAqC,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;AAEnH,MAAM,cAAc,GAA0C;IAC5D,KAAK,EAAE,qCAAqC;IAC5C,KAAK,EAAE,sBAAsB;IAC7B,OAAO,EAAE,sBAAsB;IAC/B,IAAI,EAAE,qCAAqC;IAC3C,QAAQ,EAAE,sBAAsB;CACjC,CAAC;AAEF,MAAM,qBAAqB,GAAmD;IAC5E,KAAK,EAAE,qCAAqC;CAC7C,CAAC;AAEF,MAAM,sBAAsB,GAAG,mCAAmC,CAAC;AAEnE,MAAM,cAAc,GAAG,CAAC,KAAa,EAAU,EAAE;IAC/C,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,WAAW,KAAK,EAAE,CAAC;AAC5B,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAE/E,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,IAAY,EAAU,EAAE;IACrD,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC9C,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC/C,OAAO,GAAG,aAAa,IAAI,aAAa,EAAE,CAAC;AAC7C,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CACnB,IAA6B,EAC7B,SAAkC,EACE,EAAE;IACtC,IAAI,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,uCAAY,CAAC,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,EAAE,CAAC,GAAK,CAAC,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,EAAE,CAAC,EAAG;AACnD,CAAC,CAAC;AAEF,MAAM,cAAc,GAAG,CAAC,UAAiC,EAAE,MAA6B,EAAQ,EAAE;IAChG,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,qBAAqB,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,wBAAwB,CAAC,CAAC;IACvE,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,MAAmB,EAAwB,EAAE;IACrE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE;QAC5C,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;QAChD,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC;QACjD,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;QACtC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;QACrC,oBAAoB,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,SAAS;KAClF,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,gBAAgB,GAAG,CAAC,MAAmB,EAAwB,EAAE;;IACrE,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAA,MAAM,CAAC,QAAQ,mCAAI,QAAQ,CAAC;IAC7C,MAAM,aAAa,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAA,MAAM,CAAC,aAAa,mCAAI,sBAAsB,CAAC,CAAC,CAAC;IACxG,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,EAAE,GAAG,QAAQ,cAAc,CAAC,CAAC;IAC/D,OAAO,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE;QAC5C,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;QAChD,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;QAC3C,WAAW,EAAE,qBAAqB,CAAC,KAAK;KACzC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,MAAqB,EAAwB,EAAE;IACzE,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,SAAS,EAAE,MAAM,EAAE;QAC9C,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,kBAAkB,CAAC;QACvD,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC;QAClD,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAC7C,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;KACnC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,MAAkB,EAAwB,EAAE;IACnE,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE;QAC3C,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,cAAc,CAAC;QACnD,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC;QAC9C,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,aAAa,CAAC;QACzC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC;KACtC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,mBAAmB,GAAG,CAAC,MAAsB,EAAwB,EAAE;IAC3E,cAAc,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,IAAI,GAAG,iBAAiB,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,OAAO,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE;QAC/C,oBAAoB,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;QAC3C,mBAAmB,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;QAC3C,WAAW,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC;QAChC,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;KACnC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAC5B,UAAiC,EACjC,MAA6B,EAC7B,QAAuC,EACjB,EAAE;;IACxB,MAAM,oBAAoB,GAAG,YAAY,CAAC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACtG,MAAM,yBAAyB,GAAG,YAAY,CAAC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAErH,MAAM,MAAM,GAAyB;QACnC,KAAK,EAAE,MAAM,CAAC,QAAQ;QACtB,oBAAoB,EAAE,MAAA,MAAA,MAAM,CAAC,oBAAoB,mCAAI,QAAQ,CAAC,oBAAoB,mCAAI,EAAE;QACxF,mBAAmB,EAAE,MAAA,MAAM,CAAC,mBAAmB,mCAAI,QAAQ,CAAC,mBAAmB;QAC/E,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,QAAQ,CAAC,WAAW;QACvD,YAAY,EAAE,MAAA,MAAA,MAAM,CAAC,YAAY,mCAAI,QAAQ,CAAC,YAAY,mCAAI,MAAM;QACpE,WAAW,EAAE,MAAA,MAAA,MAAM,CAAC,WAAW,mCAAI,QAAQ,CAAC,WAAW,mCAAI,IAAI;QAC/D,KAAK,EAAE,MAAA,MAAA,MAAM,CAAC,KAAK,mCAAI,QAAQ,CAAC,KAAK,mCAAI,cAAc,CAAC,UAAU,CAAC;QACnE,oBAAoB;QACpB,yBAAyB;QACzB,SAAS,EAAE,MAAA,MAAM,CAAC,SAAS,mCAAI,QAAQ,CAAC,SAAS;QACjD,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,QAAQ,CAAC,WAAW;KACxD,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,iBAAiB,UAAU,oCAAoC,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,OAA4B,EAAwC,EAAE;IACvG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,SAAS,GAAyC,EAAE,CAAC;IAE3D,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,SAAS,CAAC,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,SAAS,CAAC,KAAK,GAAG,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,SAAS,CAAC,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,SAAS,CAAC,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,SAAS,CAAC,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,qBAAqB,GAAG,CAAC,QAAgB,EAAqC,EAAE,CACpF,sBAAsB,CAAC,QAAQ,CAAC,QAAiC,CAAC,CAAC;AAErE,MAAM,4BAA4B,GAAG,CACnC,OAAmC,EACkD,EAAE,CACvF,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,yBAAyB,GAAG,CAChC,OAAgC,EACkD,EAAE,CACpF,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE1C,MAAM,eAAe,GAAG,CAAC,OAAgC,EAAgB,EAAE;;IACzE,IAAI,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,OAAO,kBACL,UAAU,EAAE,OAAO,CAAC,QAAQ,IACzB,CAAC,MAAA,OAAO,CAAC,OAAO,mCAAI,EAAE,CAAC,CAC3B;SACF,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,CAAC,OAAmC,EAA4B,EAAE;IAC3F,IAAI,4BAA4B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1C,OAAO;YACL,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,OAAO,CAAC,QAAQ;SAC7B,CAAC;IACJ,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAEF,MAAM,iBAAiB,GAAG,CAAC,OAAgC,EAAgB,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;AAEvG,MAAM,kBAAkB,GAAG,CACzB,OAA6C,EAC7C,MAA6C,EACK,EAAE;IACpD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,uCACK,OAAO,GACP,CAAC,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAC,EACjB;AACJ,CAAC,CAAC;AAkBF,MAAM,uBAAuB,GAAG,CAAC,MAAyB,EAAqB,EAAE,CAAC,CAAC;IACjF,UAAU,EAAE,KAAK,EAAE,OAAqC,EAAiB,EAAE;QACzE,MAAM,EAAE,WAAW,EAAE,MAAM,KAAc,OAAO,EAAhB,IAAI,UAAK,OAAO,EAA1C,yBAAgC,CAAU,CAAC;QACjD,MAAM,eAAe,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,YAAY,GAAG,kBAAkB,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,OAAO,mCACR,IAAI,GACJ,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAClD,CAAC;QACF,OAAO,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,EAAE,KAAK,EACV,OAA0D,EACW,EAAE;QACvE,IAAI,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAkC,CAAC,CAAC;YACnE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,MAAsB,CAAC,CAAC;YAC5D,OAAO;gBACL,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,MAAM,EAAE,QAAQ,CAAC,MAA2C;aAC7D,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC,KAAK,CAAC,OAAuB,CAAwE,CAAC;IACtH,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,OAAmC,EAAiB,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChH,UAAU,EAAE,KAAK,EAAE,OAAmC,EAAoC,EAAE,CAC1F,MAAM,CAAC,UAAU,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAChD,oBAAoB,EAAE,KAAK,EAAE,OAAmC,EAA8B,EAAE,CAC9F,MAAM,CAAC,oBAAoB,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC1D,OAAO,EAAE,KAAK,EAAE,OAAgC,EAAiB,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC9G,oBAAoB,EAAE,KAAK,EAAkC,OAG5D,EAA+C,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,OAAO,CAAC;IACvF,gBAAgB,EAAE,KAAK,IAAkC,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE;CACtF,CAAC,CAAC;AAEH,MAAM,sBAAsB,GAAG,uBAAuB,CAAC,eAAe,CAAC,CAAC;AAUxE,OAAO,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,CAAC","sourcesContent":["import type {\n  AuthorizationCode,\n  AuthorizationCodeOptions,\n  InitializeOptions,\n  LoginOptions,\n  OAuth2LoginOptions,\n  OAuth2ProviderConfig,\n  ProviderSpecificCall,\n  ProviderSpecificCallOptionsMap,\n  ProviderSpecificCallResponseMap,\n  ProviderResponseMap,\n  SocialLoginPlugin,\n} from './definitions';\nimport { SocialLoginBase } from './social-login';\n\ntype AuthConnectProviderId = 'auth0' | 'azure' | 'cognito' | 'okta' | 'onelogin';\n\ntype AuthConnectLoginOptions =\n  | LoginOptions\n  | {\n      provider: AuthConnectProviderId;\n      options?: Omit<OAuth2LoginOptions, 'providerId'>;\n    };\n\ntype AuthConnectProviderOptions =\n  | AuthorizationCodeOptions\n  | {\n      provider: AuthConnectProviderId;\n    };\n\ntype AuthConnectInitializeOptions = InitializeOptions & {\n  authConnect?: AuthConnectPresets;\n};\n\ntype AuthConnectPresetBase = {\n  clientId: string;\n  redirectUrl: string;\n  scope?: string;\n  responseType?: 'code' | 'token';\n  pkceEnabled?: boolean;\n  additionalParameters?: Record<string, string>;\n  additionalResourceHeaders?: Record<string, string>;\n  resourceUrl?: string;\n  authorizationBaseUrl?: string;\n  accessTokenEndpoint?: string;\n  logoutUrl?: string;\n  logsEnabled?: boolean;\n};\n\ntype Auth0Preset = AuthConnectPresetBase & {\n  domain: string;\n  audience?: string;\n};\n\ntype AzurePreset = AuthConnectPresetBase & {\n  tenantId?: string;\n  authorityHost?: string;\n};\n\ntype CognitoPreset = AuthConnectPresetBase & {\n  domain: string;\n};\n\ntype OktaPreset = AuthConnectPresetBase & {\n  issuer: string;\n};\n\ntype OneLoginPreset = AuthConnectPresetBase & {\n  issuer: string;\n};\n\ntype AuthConnectPresets = {\n  auth0?: Auth0Preset;\n  azure?: AzurePreset;\n  cognito?: CognitoPreset;\n  okta?: OktaPreset;\n  onelogin?: OneLoginPreset;\n};\n\ntype AuthConnectProviderResponseMap = ProviderResponseMap & {\n  auth0: ProviderResponseMap['oauth2'];\n  azure: ProviderResponseMap['oauth2'];\n  cognito: ProviderResponseMap['oauth2'];\n  okta: ProviderResponseMap['oauth2'];\n  onelogin: ProviderResponseMap['oauth2'];\n};\n\nconst AUTH_CONNECT_PROVIDERS: readonly AuthConnectProviderId[] = ['auth0', 'azure', 'cognito', 'okta', 'onelogin'];\n\nconst DEFAULT_SCOPES: Record<AuthConnectProviderId, string> = {\n  auth0: 'openid profile email offline_access',\n  azure: 'openid profile email',\n  cognito: 'openid profile email',\n  okta: 'openid profile email offline_access',\n  onelogin: 'openid profile email',\n};\n\nconst DEFAULT_RESOURCE_URLS: Partial<Record<AuthConnectProviderId, string>> = {\n  azure: 'https://graph.microsoft.com/v1.0/me',\n};\n\nconst DEFAULT_AUTHORITY_HOST = 'https://login.microsoftonline.com';\n\nconst ensureProtocol = (value: string): string => {\n  if (value.startsWith('http://') || value.startsWith('https://')) {\n    return value;\n  }\n  return `https://${value}`;\n};\n\nconst trimTrailingSlash = (value: string): string => value.replace(/\\/+$/, '');\n\nconst joinUrl = (base: string, path: string): string => {\n  const sanitizedBase = trimTrailingSlash(base);\n  const sanitizedPath = path.replace(/^\\/+/, '');\n  return `${sanitizedBase}/${sanitizedPath}`;\n};\n\nconst mergeRecords = (\n  base?: Record<string, string>,\n  overrides?: Record<string, string>,\n): Record<string, string> | undefined => {\n  if (!base && !overrides) {\n    return undefined;\n  }\n  return { ...(base ?? {}), ...(overrides ?? {}) };\n};\n\nconst validatePreset = (providerId: AuthConnectProviderId, preset: AuthConnectPresetBase): void => {\n  if (!preset.clientId) {\n    throw new Error(`[authConnect] ${providerId} requires clientId.`);\n  }\n  if (!preset.redirectUrl) {\n    throw new Error(`[authConnect] ${providerId} requires redirectUrl.`);\n  }\n};\n\nconst buildAuth0Config = (preset: Auth0Preset): OAuth2ProviderConfig => {\n  validatePreset('auth0', preset);\n  if (!preset.domain) {\n    throw new Error('[authConnect] auth0 requires domain.');\n  }\n  const base = trimTrailingSlash(ensureProtocol(preset.domain));\n  return buildConfigFromPreset('auth0', preset, {\n    authorizationBaseUrl: joinUrl(base, 'authorize'),\n    accessTokenEndpoint: joinUrl(base, 'oauth/token'),\n    resourceUrl: joinUrl(base, 'userinfo'),\n    logoutUrl: joinUrl(base, 'v2/logout'),\n    additionalParameters: preset.audience ? { audience: preset.audience } : undefined,\n  });\n};\n\nconst buildAzureConfig = (preset: AzurePreset): OAuth2ProviderConfig => {\n  validatePreset('azure', preset);\n  const tenantId = preset.tenantId ?? 'common';\n  const authorityHost = trimTrailingSlash(ensureProtocol(preset.authorityHost ?? DEFAULT_AUTHORITY_HOST));\n  const base = joinUrl(authorityHost, `${tenantId}/oauth2/v2.0`);\n  return buildConfigFromPreset('azure', preset, {\n    authorizationBaseUrl: joinUrl(base, 'authorize'),\n    accessTokenEndpoint: joinUrl(base, 'token'),\n    resourceUrl: DEFAULT_RESOURCE_URLS.azure,\n  });\n};\n\nconst buildCognitoConfig = (preset: CognitoPreset): OAuth2ProviderConfig => {\n  validatePreset('cognito', preset);\n  if (!preset.domain) {\n    throw new Error('[authConnect] cognito requires domain.');\n  }\n  const base = trimTrailingSlash(ensureProtocol(preset.domain));\n  return buildConfigFromPreset('cognito', preset, {\n    authorizationBaseUrl: joinUrl(base, 'oauth2/authorize'),\n    accessTokenEndpoint: joinUrl(base, 'oauth2/token'),\n    resourceUrl: joinUrl(base, 'oauth2/userInfo'),\n    logoutUrl: joinUrl(base, 'logout'),\n  });\n};\n\nconst buildOktaConfig = (preset: OktaPreset): OAuth2ProviderConfig => {\n  validatePreset('okta', preset);\n  if (!preset.issuer) {\n    throw new Error('[authConnect] okta requires issuer.');\n  }\n  const base = trimTrailingSlash(ensureProtocol(preset.issuer));\n  return buildConfigFromPreset('okta', preset, {\n    authorizationBaseUrl: joinUrl(base, 'v1/authorize'),\n    accessTokenEndpoint: joinUrl(base, 'v1/token'),\n    resourceUrl: joinUrl(base, 'v1/userinfo'),\n    logoutUrl: joinUrl(base, 'v1/logout'),\n  });\n};\n\nconst buildOneLoginConfig = (preset: OneLoginPreset): OAuth2ProviderConfig => {\n  validatePreset('onelogin', preset);\n  if (!preset.issuer) {\n    throw new Error('[authConnect] onelogin requires issuer.');\n  }\n  const base = trimTrailingSlash(ensureProtocol(preset.issuer));\n  return buildConfigFromPreset('onelogin', preset, {\n    authorizationBaseUrl: joinUrl(base, 'auth'),\n    accessTokenEndpoint: joinUrl(base, 'token'),\n    resourceUrl: joinUrl(base, 'me'),\n    logoutUrl: joinUrl(base, 'logout'),\n  });\n};\n\nconst buildConfigFromPreset = (\n  providerId: AuthConnectProviderId,\n  preset: AuthConnectPresetBase,\n  defaults: Partial<OAuth2ProviderConfig>,\n): OAuth2ProviderConfig => {\n  const additionalParameters = mergeRecords(defaults.additionalParameters, preset.additionalParameters);\n  const additionalResourceHeaders = mergeRecords(defaults.additionalResourceHeaders, preset.additionalResourceHeaders);\n\n  const config: OAuth2ProviderConfig = {\n    appId: preset.clientId,\n    authorizationBaseUrl: preset.authorizationBaseUrl ?? defaults.authorizationBaseUrl ?? '',\n    accessTokenEndpoint: preset.accessTokenEndpoint ?? defaults.accessTokenEndpoint,\n    redirectUrl: preset.redirectUrl,\n    resourceUrl: preset.resourceUrl ?? defaults.resourceUrl,\n    responseType: preset.responseType ?? defaults.responseType ?? 'code',\n    pkceEnabled: preset.pkceEnabled ?? defaults.pkceEnabled ?? true,\n    scope: preset.scope ?? defaults.scope ?? DEFAULT_SCOPES[providerId],\n    additionalParameters,\n    additionalResourceHeaders,\n    logoutUrl: preset.logoutUrl ?? defaults.logoutUrl,\n    logsEnabled: preset.logsEnabled ?? defaults.logsEnabled,\n  };\n\n  if (!config.authorizationBaseUrl) {\n    throw new Error(`[authConnect] ${providerId} authorizationBaseUrl is required.`);\n  }\n\n  return config;\n};\n\nconst buildAuthConnectProviders = (presets?: AuthConnectPresets): Record<string, OAuth2ProviderConfig> => {\n  if (!presets) {\n    return {};\n  }\n  const providers: Record<string, OAuth2ProviderConfig> = {};\n\n  if (presets.auth0) {\n    providers.auth0 = buildAuth0Config(presets.auth0);\n  }\n  if (presets.azure) {\n    providers.azure = buildAzureConfig(presets.azure);\n  }\n  if (presets.cognito) {\n    providers.cognito = buildCognitoConfig(presets.cognito);\n  }\n  if (presets.okta) {\n    providers.okta = buildOktaConfig(presets.okta);\n  }\n  if (presets.onelogin) {\n    providers.onelogin = buildOneLoginConfig(presets.onelogin);\n  }\n\n  return providers;\n};\n\nconst isAuthConnectProvider = (provider: string): provider is AuthConnectProviderId =>\n  AUTH_CONNECT_PROVIDERS.includes(provider as AuthConnectProviderId);\n\nconst isAuthConnectProviderOptions = (\n  options: AuthConnectProviderOptions,\n): options is Extract<AuthConnectProviderOptions, { provider: AuthConnectProviderId }> =>\n  isAuthConnectProvider(options.provider);\n\nconst isAuthConnectLoginOptions = (\n  options: AuthConnectLoginOptions,\n): options is Extract<AuthConnectLoginOptions, { provider: AuthConnectProviderId }> =>\n  isAuthConnectProvider(options.provider);\n\nconst mapLoginOptions = (options: AuthConnectLoginOptions): LoginOptions => {\n  if (isAuthConnectLoginOptions(options)) {\n    return {\n      provider: 'oauth2',\n      options: {\n        providerId: options.provider,\n        ...(options.options ?? {}),\n      },\n    };\n  }\n\n  return options;\n};\n\nconst mapProviderOptions = (options: AuthConnectProviderOptions): AuthorizationCodeOptions => {\n  if (isAuthConnectProviderOptions(options)) {\n    return {\n      provider: 'oauth2',\n      providerId: options.provider,\n    };\n  }\n\n  return options;\n};\n\nconst mapRefreshOptions = (options: AuthConnectLoginOptions): LoginOptions => mapLoginOptions(options);\n\nconst mergeOAuth2Configs = (\n  presets: Record<string, OAuth2ProviderConfig>,\n  oauth2?: Record<string, OAuth2ProviderConfig>,\n): Record<string, OAuth2ProviderConfig> | undefined => {\n  if (!Object.keys(presets).length && !oauth2) {\n    return oauth2;\n  }\n  return {\n    ...presets,\n    ...(oauth2 ?? {}),\n  };\n};\n\ntype AuthConnectClient = {\n  initialize: (options: AuthConnectInitializeOptions) => Promise<void>;\n  login: <T extends AuthConnectLoginOptions['provider']>(\n    options: Extract<AuthConnectLoginOptions, { provider: T }>,\n  ) => Promise<{ provider: T; result: AuthConnectProviderResponseMap[T] }>;\n  logout: (options: AuthConnectProviderOptions) => Promise<void>;\n  isLoggedIn: (options: AuthConnectProviderOptions) => Promise<{ isLoggedIn: boolean }>;\n  getAuthorizationCode: (options: AuthConnectProviderOptions) => Promise<AuthorizationCode>;\n  refresh: (options: AuthConnectLoginOptions) => Promise<void>;\n  providerSpecificCall: <T extends ProviderSpecificCall>(options: {\n    call: T;\n    options: ProviderSpecificCallOptionsMap[T];\n  }) => Promise<ProviderSpecificCallResponseMap[T]>;\n  getPluginVersion: () => Promise<{ version: string }>;\n};\n\nconst createAuthConnectClient = (client: SocialLoginPlugin): AuthConnectClient => ({\n  initialize: async (options: AuthConnectInitializeOptions): Promise<void> => {\n    const { authConnect, oauth2, ...rest } = options;\n    const presetProviders = buildAuthConnectProviders(authConnect);\n    const mergedOauth2 = mergeOAuth2Configs(presetProviders, oauth2);\n    const payload: InitializeOptions = {\n      ...rest,\n      ...(mergedOauth2 ? { oauth2: mergedOauth2 } : {}),\n    };\n    return client.initialize(payload);\n  },\n  login: async <T extends AuthConnectLoginOptions['provider']>(\n    options: Extract<AuthConnectLoginOptions, { provider: T }>,\n  ): Promise<{ provider: T; result: AuthConnectProviderResponseMap[T] }> => {\n    if (isAuthConnectProvider(options.provider)) {\n      const mapped = mapLoginOptions(options as AuthConnectLoginOptions);\n      const response = await client.login(mapped as LoginOptions);\n      return {\n        provider: options.provider,\n        result: response.result as AuthConnectProviderResponseMap[T],\n      };\n    }\n\n    return client.login(options as LoginOptions) as Promise<{ provider: T; result: AuthConnectProviderResponseMap[T] }>;\n  },\n  logout: async (options: AuthConnectProviderOptions): Promise<void> => client.logout(mapProviderOptions(options)),\n  isLoggedIn: async (options: AuthConnectProviderOptions): Promise<{ isLoggedIn: boolean }> =>\n    client.isLoggedIn(mapProviderOptions(options)),\n  getAuthorizationCode: async (options: AuthConnectProviderOptions): Promise<AuthorizationCode> =>\n    client.getAuthorizationCode(mapProviderOptions(options)),\n  refresh: async (options: AuthConnectLoginOptions): Promise<void> => client.refresh(mapRefreshOptions(options)),\n  providerSpecificCall: async <T extends ProviderSpecificCall>(options: {\n    call: T;\n    options: ProviderSpecificCallOptionsMap[T];\n  }): Promise<ProviderSpecificCallResponseMap[T]> => client.providerSpecificCall(options),\n  getPluginVersion: async (): Promise<{ version: string }> => client.getPluginVersion(),\n});\n\nconst SocialLoginAuthConnect = createAuthConnectClient(SocialLoginBase);\n\nexport type {\n  AuthConnectInitializeOptions,\n  AuthConnectLoginOptions,\n  AuthConnectProviderId,\n  AuthConnectProviderOptions,\n  AuthConnectPresets,\n};\n\nexport { createAuthConnectClient, SocialLoginAuthConnect };\n"]}

package/dist/esm/oauth2-provider.js

@@ -1,14 +1,4 @@
-var __rest = (this && this.__rest) || function (s, e) {
-    var t = {};
-    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
-        t[p] = s[p];
-    if (s != null && typeof Object.getOwnPropertySymbols === "function")
-        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
-            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
-                t[p[i]] = s[p[i]];
-        }
-    return t;
-};
+import { __rest } from "tslib";
 import { BaseSocialLogin } from './base';
 /**
  * OAuth2 Social Login Manager

package/dist/esm/oauth2-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2-provider.js","sourceRoot":"","sources":["../../src/oauth2-provider.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAwDzC;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,eAAe;IAAtD;;QACU,cAAS,GAAsC,IAAI,GAAG,EAAE,CAAC;QAChD,sBAAiB,GAAG,mCAAmC,CAAC;QACxD,iBAAY,GAAG,kCAAkC,CAAC;IA0vBrE,CAAC;IAxvBS,mBAAmB,CAAC,KAAc;QACxC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,eAAe,CAAC,UAAkB,EAAE,MAA4B;;QACtE,MAAM,KAAK,GAAG,MAAA,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,QAAQ,CAAC;QAC9C,MAAM,oBAAoB,GAAG,MAAA,MAAM,CAAC,oBAAoB,mCAAI,MAAM,CAAC,qBAAqB,CAAC;QACzF,MAAM,mBAAmB,GAAG,MAAA,MAAM,CAAC,mBAAmB,mCAAI,MAAM,CAAC,aAAa,CAAC;QAC/E,MAAM,SAAS,GAAG,MAAA,MAAM,CAAC,SAAS,mCAAI,MAAM,CAAC,kBAAkB,CAAC;QAChE,MAAM,WAAW,GAAG,MAAA,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,MAAM,CAAC;QAElD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,iCAAiC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,yBAAyB,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,oBAAoB,UAAU,0EAA0E,CACzG,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,oBAAoB;YACpB,mBAAmB;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,CAAC,MAAA,MAAM,CAAC,YAAY,mCAAI,MAAM,CAAqB;YACjE,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,IAAI;YACvC,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC;YAC5C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACjD,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;YAC3D,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;YAC3D,SAAS;YACT,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;YAC7D,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,KAAK;SACzC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,UAAkB;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,CAAA;YAAE,OAAO;QAE/B,4BAA4B;QAC5B,IAAI,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,mBAAmB;YAAE,OAAO;QAEtE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,GAAG,MAAM,mCAAmC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,MAAM,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QAE/D,MAAM,qBAAqB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAE3D,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YAC9E,MAAM,CAAC,oBAAoB,GAAG,qBAAqB,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,CAAC,mBAAmB,GAAG,aAAa,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,CAAC,SAAS,GAAG,kBAAkB,CAAC;QACxC,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,sBAAsB,EAAE;gBACvD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;gBACjD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;gBAC/C,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAA6C;QACrE,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAChE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE/C,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,4BAA4B,EAAE;oBAC7D,KAAK,EAAE,cAAc,CAAC,KAAK;oBAC3B,SAAS,EAAE,cAAc,CAAC,SAAS;oBACnC,oBAAoB,EAAE,cAAc,CAAC,oBAAoB;oBACzD,WAAW,EAAE,cAAc,CAAC,WAAW;oBACvC,YAAY,EAAE,cAAc,CAAC,YAAY;oBACzC,WAAW,EAAE,cAAc,CAAC,WAAW;iBACxC,CAAC,CAAC;YACL,CAAC;YAED,yDAAyD;YACzD,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,UAAkB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,4CAA4C,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,UAAkB;QACrC,OAAO,GAAG,IAAI,CAAC,iBAAiB,GAAG,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA2B;;QAE3B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAExC,MAAM,WAAW,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,MAAM,CAAC,WAAW,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAA,MAAA,OAAO,CAAC,KAAK,mCAAI,OAAO,CAAC,MAAM,mCAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,KAAK,mCAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAEzE,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,YAAY,EAAE,WAAW;YACzB,KAAK;SACN,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,2BAA2B;QAC3B,MAAM,sBAAsB,mCACvB,CAAC,MAAA,MAAM,CAAC,oBAAoB,mCAAI,EAAE,CAAC,GACnC,CAAC,MAAA,OAAO,CAAC,oBAAoB,mCAAI,EAAE,CAAC,CACxC,CAAC;QACF,MAAM,SAAS,GAAG,MAAA,OAAO,CAAC,SAAS,mCAAI,MAAM,CAAC,SAAS,CAAC;QACxD,MAAM,MAAM,GAAG,MAAA,OAAO,CAAC,MAAM,mCAAI,MAAM,CAAC,MAAM,CAAC;QAC/C,IAAI,SAAS,IAAI,CAAC,CAAC,YAAY,IAAI,sBAAsB,CAAC,EAAE,CAAC;YAC3D,sBAAsB,CAAC,UAAU,GAAG,SAAS,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,CAAC,QAAQ,IAAI,sBAAsB,CAAC,EAAE,CAAC;YACpD,sBAAsB,CAAC,MAAM,GAAG,MAAM,CAAC;QACzC,CAAC;QAED,yBAAyB;QACzB,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAClE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC9B,UAAU;YACV,YAAY;YACZ,WAAW;YACX,KAAK;SACN,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEjH,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,gEAAgE,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEtE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,8BAA8B,EAAE,OAAO,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,8FAA8F;YAC9F,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,gEAAgE;YAChE,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAQ,CAAC;QACtC,CAAC;QAED,oBAAoB;QACpB,MAAM,KAAK,GAAG,GAAG,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,OAAO,EACP,aAAa,EACb,SAAS,KAAK,WAAW,MAAM,SAAS,IAAI,QAAQ,GAAG,UAAU,CAClE,CAAC;QAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YAED,uFAAuF;YACvF,MAAM,WAAW,GAAG,UAAU,KAAK,EAAE,CAAC;YACtC,IAAI,gBAAgB,GAA4B,IAAI,CAAC;YAErD,IAAI,CAAC;gBACH,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC;YAAC,WAAM,CAAC;gBACP,gEAAgE;gBAChE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,0DAA0D,CAAC,CAAC;gBAC/F,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,CACd,cAA6C,EAC7C,aAAqB,EACrB,cAAsB,EACtB,EAAE;gBACF,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACtD,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,aAAa,CAAC,cAAc,CAAC,CAAC;gBAC9B,IAAI,gBAAgB,EAAE,CAAC;oBACrB,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,kBAAkB,GAAG,CAAC,IAA6B,EAAE,EAAE;gBAC3D,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,gBAAgB,EAAE,CAAC;oBACpC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBACjD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,sCAAsC;oBACtC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,KAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;wBACvD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,6DAA6D;oBAC7D,MAAM,KAIF,IAGH,EAPK,EACJ,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,YAAY,OAKnB,EAJI,OAAO,cAHN,oBAIL,CAGA,CAAC;oBACF,OAAO,CAAC;wBACN,QAAQ,EAAE,QAAa;wBACvB,MAAM,EAAE,OAAiC;qBACS,CAAC,CAAC;oBACtD,OAAO,IAAI,CAAC;gBACd,CAAC;qBAAM,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,aAAa,EAAE,CAAC;oBACxC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBACjD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,MAAM,CAAC,IAAI,KAAK,CAAE,IAAI,CAAC,KAAgB,IAAI,6BAA6B,CAAC,CAAC,CAAC;oBAC3E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;YAEF,uCAAuC;YACvC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,gBAAgB,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;oBACnD,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,CAAC,KAAmB,EAAE,EAAE;gBAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAEnD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;gBAC3C,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;gBAC5D,IAAI,CAAC;oBACH,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,WAAM,CAAC;oBACP,0CAA0C;gBAC5C,CAAC;gBACD,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAC/C,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBAClD,IAAI,CAAC;oBACH,mFAAmF;oBACnF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBACjB,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;wBAC5D,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBAAC,WAAM,CAAC;oBACP,8EAA8E;oBAC9E,2EAA2E;oBAC3E,2EAA2E;oBAC3E,qEAAqE;oBACrE,aAAa,CAAC,mBAAmB,CAAC,CAAC;oBACnC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;wBACvB,OAAO,CAAC,GAAG,CACT,WAAW,UAAU,gEAAgE;4BACnF,0CAA0C,CAC7C,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvD,8EAA8E;QAC9E,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACtC,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,EAAE,CAAC;oBACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,CAAC,qBAAqB,CAAC;gBAChD,IAAI,UAAU,EAAE,CAAC;oBACf,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;gBAC/D,CAAC;gBACD,IAAI,MAAM,CAAC,0BAA0B,EAAE,CAAC;oBACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAAC;wBACvE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;YACxC,CAAC;YAAC,WAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,UAAkB;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sDAAsD,UAAU,IAAI,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,EAAE,MAAM,CAAC,OAAO;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,YAAqB,EACrB,oBAA6C;;QAE7C,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,qBAAqB,GAAG,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAC;QACnE,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,sDAAsD,UAAU,iDAAiD,CAClH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;QAElH,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACjH,MAAM,UAAU,GAAG,MAAA,MAAA,MAAA,aAAa,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,mCAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,mCAAI,EAAE,CAAC;QAE1F,oCAAoC;QACpC,IAAI,YAAY,GAAmC,IAAI,CAAC;QACxD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAA,aAAa,CAAC,aAAa,mCAAI,qBAAqB,CAAC;QAC9E,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;YAC7B,WAAW,EAAE,aAAa,CAAC,YAAY;YACvC,YAAY,EAAE,gBAAgB;YAC9B,OAAO,EAAE,aAAa,CAAC,QAAQ;YAC/B,SAAS;YACT,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,aAAa,CAAC,UAAU;SACpC,CAAC,CAAC;QAEH,OAAO;YACL,UAAU;YACV,WAAW,EAAE;gBACX,KAAK,EAAE,aAAa,CAAC,YAAY;gBACjC,SAAS,EAAE,aAAa,CAAC,UAAU;gBACnC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAC1C,YAAY,EAAE,gBAAgB;aAC/B;YACD,OAAO,EAAE,MAAA,aAAa,CAAC,QAAQ,mCAAI,IAAI;YACvC,YAAY,EAAE,gBAAgB,aAAhB,gBAAgB,cAAhB,gBAAgB,GAAI,IAAI;YACtC,YAAY;YACZ,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,aAAa,CAAC,UAAU;YACnC,SAAS,EAAE,MAAA,aAAa,CAAC,UAAU,mCAAI,IAAI;SAC5C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAQ,EAAE,aAAsB;;QACxD,4CAA4C;QAC5C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,wDAAwD;QACxD,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,oBAAoB,UAAU,4BAA4B,EAAE,CAAC;QAC/E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC;YACH,IAAI,aAAkC,CAAC;YAEvC,sBAAsB;YACtB,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,0BAA0B;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;oBACzD,OAAO,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;gBACvE,CAAC;gBACD,aAAa,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClF,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtC,gBAAgB;gBAChB,aAAa,GAAG;oBACd,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAE;oBACzC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,QAAQ;oBAChD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC1F,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;oBACvC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;iBAC9C,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;gBACzD,OAAO,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC;YACzE,CAAC;YAED,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACjH,MAAM,UAAU,GAAG,MAAA,MAAA,aAAa,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,mCAAI,EAAE,CAAC;YAEzE,oCAAoC;YACpC,IAAI,YAAY,GAAmC,IAAI,CAAC;YACxD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;YAClF,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;gBAC7B,WAAW,EAAE,aAAa,CAAC,YAAY;gBACvC,YAAY,EAAE,aAAa,CAAC,aAAa;gBACzC,OAAO,EAAE,aAAa,CAAC,QAAQ;gBAC/B,SAAS;gBACT,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,aAAa,CAAC,UAAU;aACpC,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE;oBACN,UAAU;oBACV,WAAW,EAAE;wBACX,KAAK,EAAE,aAAa,CAAC,YAAY;wBACjC,SAAS,EAAE,aAAa,CAAC,UAAU;wBACnC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;wBAC1C,YAAY,EAAE,aAAa,CAAC,aAAa;qBAC1C;oBACD,OAAO,EAAE,MAAA,aAAa,CAAC,QAAQ,mCAAI,IAAI;oBACvC,YAAY,EAAE,MAAA,aAAa,CAAC,aAAa,mCAAI,IAAI;oBACjD,YAAY;oBACZ,KAAK,EAAE,UAAU;oBACjB,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,SAAS,EAAE,MAAA,aAAa,CAAC,UAAU,mCAAI,IAAI;iBAC5C;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,UAAkB,EAClB,IAAY,EACZ,OAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,IAAI;YACJ,YAAY,EAAE,OAAO,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,uBAAuB,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,UAAkB,EAClB,YAAoB,EACpB,oBAA6C;QAE7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,MAAM,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,oBAAoB,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,WAAmB;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,UAAU,IAAI,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC,CAAC;QAEF,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;YAC/C,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC5D,CAAC;IAEO,aAAa,CAAC,UAAkB,EAAE,MAA0B;QAClE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,eAAe,CAAC,UAAkB;QACxC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAAa,EAAE,OAA2B;QACpE,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,mBAAmB,CAAC,KAAa;QACvC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,oBAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oEAAoE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;aACxF,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,YAAoB;QACtD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,eAAe,CAAC,MAAkB;QACxC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAC;IACjD,CAAC;IAED,4BAA4B,CAAC,UAAkB;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,CAAA;YAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QACxD,OAAO,EAAE,cAAc,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACtE,CAAC;IAED,sBAAsB,CAAC,UAAkB;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,WAAW,CAAA,EAAE,CAAC;IAChD,CAAC;IAED,oBAAoB,CAAC,UAAkB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,CAAA;YAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACnD,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACvD,CAAC;IAED,uBAAuB,CAAC,UAAkB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAA,EAAE,CAAC;IACjD,CAAC;CACF","sourcesContent":["import { BaseSocialLogin } from './base';\nimport type {\n  AuthorizationCode,\n  LoginResult,\n  OAuth2LoginOptions,\n  OAuth2LoginResponse,\n  OAuth2ProviderConfig,\n  ProviderResponseMap,\n} from './definitions';\n\ninterface OAuth2TokenResponse {\n  token_type: string;\n  expires_in?: number;\n  access_token: string;\n  scope?: string;\n  refresh_token?: string;\n  id_token?: string;\n}\n\ninterface OAuth2PendingLogin {\n  providerId: string;\n  codeVerifier: string;\n  redirectUri: string;\n  scope: string;\n}\n\ninterface OAuth2StoredTokens {\n  accessToken: string;\n  refreshToken?: string;\n  idToken?: string;\n  expiresAt: number;\n  scope: string[];\n  tokenType: string;\n}\n\ninterface OAuth2ConfigInternal {\n  appId: string;\n  issuerUrl?: string;\n  authorizationBaseUrl?: string;\n  accessTokenEndpoint?: string;\n  redirectUrl: string;\n  resourceUrl?: string;\n  responseType: 'code' | 'token';\n  pkceEnabled: boolean;\n  scope: string;\n  additionalParameters?: Record<string, string>;\n  loginHint?: string;\n  prompt?: string;\n  additionalTokenParameters?: Record<string, string>;\n  additionalResourceHeaders?: Record<string, string>;\n  logoutUrl?: string;\n  postLogoutRedirectUrl?: string;\n  additionalLogoutParameters?: Record<string, string>;\n  logsEnabled: boolean;\n}\n\n/**\n * OAuth2 Social Login Manager\n * Supports multiple OAuth2 provider configurations\n */\nexport class OAuth2SocialLogin extends BaseSocialLogin {\n  private providers: Map<string, OAuth2ConfigInternal> = new Map();\n  private readonly TOKENS_KEY_PREFIX = 'capgo_social_login_oauth2_tokens_';\n  private readonly STATE_PREFIX = 'capgo_social_login_oauth2_state_';\n\n  private normalizeScopeValue(scope: unknown): string {\n    if (!scope) return '';\n    if (typeof scope === 'string') return scope;\n    if (Array.isArray(scope)) return scope.filter(Boolean).join(' ');\n    return '';\n  }\n\n  private normalizeConfig(providerId: string, config: OAuth2ProviderConfig): OAuth2ConfigInternal {\n    const appId = config.appId ?? config.clientId;\n    const authorizationBaseUrl = config.authorizationBaseUrl ?? config.authorizationEndpoint;\n    const accessTokenEndpoint = config.accessTokenEndpoint ?? config.tokenEndpoint;\n    const logoutUrl = config.logoutUrl ?? config.endSessionEndpoint;\n    const scopeSource = config.scope ?? config.scopes;\n\n    if (!appId) {\n      throw new Error(`OAuth2 provider '${providerId}' requires appId (or clientId).`);\n    }\n    if (!config.redirectUrl) {\n      throw new Error(`OAuth2 provider '${providerId}' requires redirectUrl.`);\n    }\n    if (!authorizationBaseUrl && !config.issuerUrl) {\n      throw new Error(\n        `OAuth2 provider '${providerId}' requires authorizationBaseUrl (or authorizationEndpoint) or issuerUrl.`,\n      );\n    }\n\n    return {\n      appId,\n      issuerUrl: config.issuerUrl,\n      authorizationBaseUrl,\n      accessTokenEndpoint,\n      redirectUrl: config.redirectUrl,\n      resourceUrl: config.resourceUrl,\n      responseType: (config.responseType ?? 'code') as 'code' | 'token',\n      pkceEnabled: config.pkceEnabled ?? true,\n      scope: this.normalizeScopeValue(scopeSource),\n      additionalParameters: config.additionalParameters,\n      loginHint: config.loginHint,\n      prompt: config.prompt,\n      additionalTokenParameters: config.additionalTokenParameters,\n      additionalResourceHeaders: config.additionalResourceHeaders,\n      logoutUrl,\n      postLogoutRedirectUrl: config.postLogoutRedirectUrl,\n      additionalLogoutParameters: config.additionalLogoutParameters,\n      logsEnabled: config.logsEnabled ?? false,\n    };\n  }\n\n  private async ensureDiscovered(providerId: string): Promise<void> {\n    const config = this.providers.get(providerId);\n    if (!config?.issuerUrl) return;\n\n    // Resolve endpoints lazily.\n    if (config.authorizationBaseUrl && config.accessTokenEndpoint) return;\n\n    const issuer = config.issuerUrl.replace(/\\/+$/, '');\n    const discoveryUrl = `${issuer}/.well-known/openid-configuration`;\n    const resp = await fetch(discoveryUrl);\n    if (!resp.ok) {\n      const text = await resp.text().catch(() => '');\n      throw new Error(`OAuth2 discovery failed (${resp.status}): ${text || discoveryUrl}`);\n    }\n    const payload = (await resp.json()) as Record<string, unknown>;\n\n    const authorizationEndpoint = payload['authorization_endpoint'];\n    const tokenEndpoint = payload['token_endpoint'];\n    const endSessionEndpoint = payload['end_session_endpoint'];\n\n    if (!config.authorizationBaseUrl && typeof authorizationEndpoint === 'string') {\n      config.authorizationBaseUrl = authorizationEndpoint;\n    }\n    if (!config.accessTokenEndpoint && typeof tokenEndpoint === 'string') {\n      config.accessTokenEndpoint = tokenEndpoint;\n    }\n    if (!config.logoutUrl && typeof endSessionEndpoint === 'string') {\n      config.logoutUrl = endSessionEndpoint;\n    }\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Discovery resolved`, {\n        authorizationBaseUrl: config.authorizationBaseUrl,\n        accessTokenEndpoint: config.accessTokenEndpoint,\n        logoutUrl: config.logoutUrl,\n      });\n    }\n  }\n\n  /**\n   * Initialize multiple OAuth2 providers\n   */\n  async initializeProviders(configs: Record<string, OAuth2ProviderConfig>): Promise<void> {\n    for (const [providerId, config] of Object.entries(configs)) {\n      const internalConfig = this.normalizeConfig(providerId, config);\n      this.providers.set(providerId, internalConfig);\n\n      if (internalConfig.logsEnabled) {\n        console.log(`[OAuth2:${providerId}] Initialized with config:`, {\n          appId: internalConfig.appId,\n          issuerUrl: internalConfig.issuerUrl,\n          authorizationBaseUrl: internalConfig.authorizationBaseUrl,\n          redirectUrl: internalConfig.redirectUrl,\n          responseType: internalConfig.responseType,\n          pkceEnabled: internalConfig.pkceEnabled,\n        });\n      }\n\n      // Pre-resolve discovery on web if issuerUrl is provided.\n      await this.ensureDiscovered(providerId);\n    }\n  }\n\n  private getProvider(providerId: string): OAuth2ConfigInternal {\n    const config = this.providers.get(providerId);\n    if (!config) {\n      throw new Error(`OAuth2 provider '${providerId}' not configured. Call initialize() first.`);\n    }\n    return config;\n  }\n\n  private getTokensKey(providerId: string): string {\n    return `${this.TOKENS_KEY_PREFIX}${providerId}`;\n  }\n\n  async login<T extends 'oauth2'>(\n    options: OAuth2LoginOptions,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    const { providerId } = options;\n    const config = this.getProvider(providerId);\n    await this.ensureDiscovered(providerId);\n\n    const redirectUri = options.redirectUrl ?? config.redirectUrl;\n    const scope = this.normalizeScopeValue(options.scope ?? options.scopes ?? config.scope);\n    const state = options.state ?? this.generateState();\n    const codeVerifier = options.codeVerifier ?? this.generateCodeVerifier();\n\n    // Build authorization URL\n    const params = new URLSearchParams({\n      response_type: config.responseType,\n      client_id: config.appId,\n      redirect_uri: redirectUri,\n      state,\n    });\n\n    if (scope) {\n      params.set('scope', scope);\n    }\n\n    // Convenience OIDC options\n    const mergedAdditionalParams: Record<string, string> = {\n      ...(config.additionalParameters ?? {}),\n      ...(options.additionalParameters ?? {}),\n    };\n    const loginHint = options.loginHint ?? config.loginHint;\n    const prompt = options.prompt ?? config.prompt;\n    if (loginHint && !('login_hint' in mergedAdditionalParams)) {\n      mergedAdditionalParams.login_hint = loginHint;\n    }\n    if (prompt && !('prompt' in mergedAdditionalParams)) {\n      mergedAdditionalParams.prompt = prompt;\n    }\n\n    // Add PKCE for code flow\n    if (config.responseType === 'code' && config.pkceEnabled) {\n      const codeChallenge = await this.generateCodeChallenge(codeVerifier);\n      params.set('code_challenge', codeChallenge);\n      params.set('code_challenge_method', 'S256');\n    }\n\n    // Add merged additional parameters\n    for (const [key, value] of Object.entries(mergedAdditionalParams)) {\n      if (value !== undefined) {\n        params.set(key, value);\n      }\n    }\n\n    // Store pending login state\n    this.persistPendingLogin(state, {\n      providerId,\n      codeVerifier,\n      redirectUri,\n      scope,\n    });\n\n    localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'oauth2', providerId, state }));\n\n    if (!config.authorizationBaseUrl) {\n      throw new Error(`OAuth2 provider '${providerId}' is missing authorizationBaseUrl (discovery may have failed).`);\n    }\n    const authUrl = `${config.authorizationBaseUrl}?${params.toString()}`;\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Opening authorization URL:`, authUrl);\n    }\n\n    if (options.flow === 'redirect') {\n      // Trigger a full-page redirect. The promise will not resolve because the page navigates away.\n      window.location.assign(authUrl);\n      // eslint-disable-next-line @typescript-eslint/no-empty-function\n      return new Promise(() => {}) as any;\n    }\n\n    // Open popup window\n    const width = 500;\n    const height = 650;\n    const left = window.screenX + (window.outerWidth - width) / 2;\n    const top = window.screenY + (window.outerHeight - height) / 2;\n\n    const popup = window.open(\n      authUrl,\n      'OAuth2Login',\n      `width=${width},height=${height},left=${left},top=${top},popup=1`,\n    );\n\n    return new Promise((resolve, reject) => {\n      if (!popup) {\n        reject(new Error('Unable to open login window. Please allow popups.'));\n        return;\n      }\n\n      // Use BroadcastChannel for cross-origin communication (works when postMessage doesn't)\n      const channelName = `oauth2_${state}`;\n      let broadcastChannel: BroadcastChannel | null = null;\n\n      try {\n        broadcastChannel = new BroadcastChannel(channelName);\n      } catch {\n        // BroadcastChannel not supported, fall back to postMessage only\n        if (config.logsEnabled) {\n          console.log(`[OAuth2:${providerId}] BroadcastChannel not supported, using postMessage only`);\n        }\n      }\n\n      const cleanup = (\n        messageHandler: (event: MessageEvent) => void,\n        timeoutHandle: number,\n        intervalHandle: number,\n      ) => {\n        window.removeEventListener('message', messageHandler);\n        clearTimeout(timeoutHandle);\n        clearInterval(intervalHandle);\n        if (broadcastChannel) {\n          broadcastChannel.close();\n        }\n      };\n\n      const handleOAuthMessage = (data: Record<string, unknown>) => {\n        if (data?.type === 'oauth-response') {\n          if (data?.provider && data.provider !== 'oauth2') {\n            return false;\n          }\n          // Check providerId matches if present\n          if (data?.providerId && data.providerId !== providerId) {\n            return false;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          // eslint-disable-next-line @typescript-eslint/no-unused-vars\n          const {\n            provider: _ignoredProvider,\n            type: _ignoredType,\n            ...payload\n          } = data as unknown as OAuth2LoginResponse & {\n            provider?: string;\n            type?: string;\n          };\n          resolve({\n            provider: 'oauth2' as T,\n            result: payload as ProviderResponseMap[T],\n          } as { provider: T; result: ProviderResponseMap[T] });\n          return true;\n        } else if (data?.type === 'oauth-error') {\n          if (data?.provider && data.provider !== 'oauth2') {\n            return false;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          reject(new Error((data.error as string) || 'OAuth2 login was cancelled.'));\n          return true;\n        }\n        return false;\n      };\n\n      // Listen for BroadcastChannel messages\n      if (broadcastChannel) {\n        broadcastChannel.onmessage = (event: MessageEvent) => {\n          handleOAuthMessage(event.data);\n        };\n      }\n\n      const messageHandler = (event: MessageEvent) => {\n        if (event.origin !== window.location.origin) {\n          return;\n        }\n        handleOAuthMessage(event.data);\n      };\n\n      window.addEventListener('message', messageHandler);\n\n      const timeoutHandle = window.setTimeout(() => {\n        cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n        try {\n          popup.close();\n        } catch {\n          // Ignore cross-origin errors when closing\n        }\n        reject(new Error('OAuth2 login timed out.'));\n      }, 300000);\n\n      const popupClosedInterval = window.setInterval(() => {\n        try {\n          // Check if popup is closed - this may throw cross-origin errors for some providers\n          if (popup.closed) {\n            cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n            reject(new Error('OAuth2 login window was closed.'));\n          }\n        } catch {\n          // Cross-origin error when checking popup.closed - this happens when the popup\n          // navigates to a third-party OAuth provider with strict security settings.\n          // We can't detect if the window was closed, so we just rely on the timeout\n          // and message handlers. Clear the interval to avoid repeated errors.\n          clearInterval(popupClosedInterval);\n          if (config.logsEnabled) {\n            console.log(\n              `[OAuth2:${providerId}] Cannot check popup.closed due to cross-origin restrictions. ` +\n                'Relying on message handlers and timeout.',\n            );\n          }\n        }\n      }, 1000);\n    });\n  }\n\n  async logout(providerId: string): Promise<void> {\n    await this.ensureDiscovered(providerId);\n    const config = this.providers.get(providerId);\n    const stored = this.getStoredTokens(providerId);\n    localStorage.removeItem(this.getTokensKey(providerId));\n\n    // If logout URL is configured, build an end-session URL (OIDC) when possible.\n    if (config?.logoutUrl) {\n      try {\n        const url = new URL(config.logoutUrl);\n        if (stored?.idToken) {\n          url.searchParams.set('id_token_hint', stored.idToken);\n        }\n        const postLogout = config.postLogoutRedirectUrl;\n        if (postLogout) {\n          url.searchParams.set('post_logout_redirect_uri', postLogout);\n        }\n        if (config.additionalLogoutParameters) {\n          for (const [k, v] of Object.entries(config.additionalLogoutParameters)) {\n            url.searchParams.set(k, v);\n          }\n        }\n        window.open(url.toString(), '_blank');\n      } catch {\n        window.open(config.logoutUrl, '_blank');\n      }\n    }\n  }\n\n  async isLoggedIn(providerId: string): Promise<{ isLoggedIn: boolean }> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens) {\n      return { isLoggedIn: false };\n    }\n    const isValid = tokens.expiresAt > Date.now();\n    if (!isValid) {\n      localStorage.removeItem(this.getTokensKey(providerId));\n    }\n    return { isLoggedIn: isValid };\n  }\n\n  async getAuthorizationCode(providerId: string): Promise<AuthorizationCode> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens) {\n      throw new Error(`OAuth2 access token is not available for provider '${providerId}'.`);\n    }\n    return {\n      accessToken: tokens.accessToken,\n      jwt: tokens.idToken,\n    };\n  }\n\n  async refresh(providerId: string): Promise<void> {\n    await this.refreshToken(providerId);\n  }\n\n  async refreshToken(\n    providerId: string,\n    refreshToken?: string,\n    additionalParameters?: Record<string, string>,\n  ): Promise<OAuth2LoginResponse> {\n    await this.ensureDiscovered(providerId);\n    const config = this.getProvider(providerId);\n\n    const stored = this.getStoredTokens(providerId);\n    const effectiveRefreshToken = refreshToken ?? stored?.refreshToken;\n    if (!effectiveRefreshToken) {\n      throw new Error(\n        `No OAuth2 refresh token is available for provider '${providerId}'. Include offline_access scope to receive one.`,\n      );\n    }\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const tokenResponse = await this.refreshWithRefreshToken(providerId, effectiveRefreshToken, additionalParameters);\n\n    const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;\n    const scopeArray = tokenResponse.scope?.split(' ').filter(Boolean) ?? stored?.scope ?? [];\n\n    // Fetch resource data if configured\n    let resourceData: Record<string, unknown> | null = null;\n    if (config.resourceUrl) {\n      resourceData = await this.fetchResource(providerId, tokenResponse.access_token);\n    }\n\n    const nextRefreshToken = tokenResponse.refresh_token ?? effectiveRefreshToken;\n    this.persistTokens(providerId, {\n      accessToken: tokenResponse.access_token,\n      refreshToken: nextRefreshToken,\n      idToken: tokenResponse.id_token,\n      expiresAt,\n      scope: scopeArray,\n      tokenType: tokenResponse.token_type,\n    });\n\n    return {\n      providerId,\n      accessToken: {\n        token: tokenResponse.access_token,\n        tokenType: tokenResponse.token_type,\n        expires: new Date(expiresAt).toISOString(),\n        refreshToken: nextRefreshToken,\n      },\n      idToken: tokenResponse.id_token ?? null,\n      refreshToken: nextRefreshToken ?? null,\n      resourceData,\n      scope: scopeArray,\n      tokenType: tokenResponse.token_type,\n      expiresIn: tokenResponse.expires_in ?? null,\n    };\n  }\n\n  async handleOAuthRedirect(url: URL, expectedState?: string): Promise<LoginResult | { error: string } | null> {\n    // Check both query params and hash fragment\n    const params = new URLSearchParams(url.search);\n    const hashParams = new URLSearchParams(url.hash.slice(1));\n\n    // Merge params, hash takes priority (for implicit flow)\n    hashParams.forEach((value, key) => {\n      params.set(key, value);\n    });\n\n    const stateFromUrl = expectedState ?? params.get('state');\n    if (!stateFromUrl) {\n      return null;\n    }\n\n    const pending = this.consumePendingLogin(stateFromUrl);\n    if (!pending) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: 'OAuth2 login session expired or state mismatch.' };\n    }\n\n    const { providerId } = pending;\n    await this.ensureDiscovered(providerId);\n    const config = this.providers.get(providerId);\n    if (!config) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: `OAuth2 provider '${providerId}' configuration not found.` };\n    }\n\n    const error = params.get('error');\n    if (error) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: params.get('error_description') || error };\n    }\n\n    try {\n      let tokenResponse: OAuth2TokenResponse;\n\n      // Check response type\n      if (params.has('code')) {\n        // Authorization code flow\n        const code = params.get('code');\n        if (!code) {\n          localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n          return { error: 'OAuth2 authorization code missing from redirect.' };\n        }\n        tokenResponse = await this.exchangeAuthorizationCode(providerId, code, pending);\n      } else if (params.has('access_token')) {\n        // Implicit flow\n        tokenResponse = {\n          access_token: params.get('access_token')!,\n          token_type: params.get('token_type') || 'bearer',\n          expires_in: params.has('expires_in') ? parseInt(params.get('expires_in')!, 10) : undefined,\n          scope: params.get('scope') || undefined,\n          id_token: params.get('id_token') || undefined,\n        };\n      } else {\n        localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n        return { error: 'No authorization code or access token in redirect.' };\n      }\n\n      const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;\n      const scopeArray = tokenResponse.scope?.split(' ').filter(Boolean) ?? [];\n\n      // Fetch resource data if configured\n      let resourceData: Record<string, unknown> | null = null;\n      if (config.resourceUrl) {\n        resourceData = await this.fetchResource(providerId, tokenResponse.access_token);\n      }\n\n      this.persistTokens(providerId, {\n        accessToken: tokenResponse.access_token,\n        refreshToken: tokenResponse.refresh_token,\n        idToken: tokenResponse.id_token,\n        expiresAt,\n        scope: scopeArray,\n        tokenType: tokenResponse.token_type,\n      });\n\n      return {\n        provider: 'oauth2',\n        result: {\n          providerId,\n          accessToken: {\n            token: tokenResponse.access_token,\n            tokenType: tokenResponse.token_type,\n            expires: new Date(expiresAt).toISOString(),\n            refreshToken: tokenResponse.refresh_token,\n          },\n          idToken: tokenResponse.id_token ?? null,\n          refreshToken: tokenResponse.refresh_token ?? null,\n          resourceData,\n          scope: scopeArray,\n          tokenType: tokenResponse.token_type,\n          expiresIn: tokenResponse.expires_in ?? null,\n        },\n      };\n    } catch (err) {\n      if (err instanceof Error) {\n        return { error: err.message };\n      }\n      return { error: 'OAuth2 login failed unexpectedly.' };\n    } finally {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n    }\n  }\n\n  private async exchangeAuthorizationCode(\n    providerId: string,\n    code: string,\n    pending: OAuth2PendingLogin,\n  ): Promise<OAuth2TokenResponse> {\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const params = new URLSearchParams({\n      grant_type: 'authorization_code',\n      client_id: config.appId,\n      code,\n      redirect_uri: pending.redirectUri,\n    });\n\n    if (config.pkceEnabled) {\n      params.set('code_verifier', pending.codeVerifier);\n    }\n\n    if (config.additionalTokenParameters) {\n      for (const [k, v] of Object.entries(config.additionalTokenParameters)) {\n        params.set(k, v);\n      }\n    }\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Exchanging code at:`, config.accessTokenEndpoint);\n    }\n\n    const response = await fetch(config.accessTokenEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 token exchange failed (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as OAuth2TokenResponse;\n  }\n\n  private async refreshWithRefreshToken(\n    providerId: string,\n    refreshToken: string,\n    additionalParameters?: Record<string, string>,\n  ): Promise<OAuth2TokenResponse> {\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const params = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: refreshToken,\n      client_id: config.appId,\n    });\n\n    if (config.additionalTokenParameters) {\n      for (const [k, v] of Object.entries(config.additionalTokenParameters)) {\n        params.set(k, v);\n      }\n    }\n    if (additionalParameters) {\n      for (const [k, v] of Object.entries(additionalParameters)) {\n        params.set(k, v);\n      }\n    }\n\n    const response = await fetch(config.accessTokenEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 refresh failed (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as OAuth2TokenResponse;\n  }\n\n  private async fetchResource(providerId: string, accessToken: string): Promise<Record<string, unknown>> {\n    const config = this.getProvider(providerId);\n    if (!config.resourceUrl) {\n      throw new Error(`No resourceUrl configured for provider '${providerId}'.`);\n    }\n\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${accessToken}`,\n    };\n\n    if (config.additionalResourceHeaders) {\n      Object.assign(headers, config.additionalResourceHeaders);\n    }\n\n    const response = await fetch(config.resourceUrl, {\n      headers,\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Unable to fetch OAuth2 resource (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as Record<string, unknown>;\n  }\n\n  private persistTokens(providerId: string, tokens: OAuth2StoredTokens): void {\n    localStorage.setItem(this.getTokensKey(providerId), JSON.stringify(tokens));\n  }\n\n  private getStoredTokens(providerId: string): OAuth2StoredTokens | null {\n    const raw = localStorage.getItem(this.getTokensKey(providerId));\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as OAuth2StoredTokens;\n    } catch (err) {\n      console.warn(`Failed to parse stored OAuth2 tokens for provider '${providerId}'`, err);\n      return null;\n    }\n  }\n\n  private persistPendingLogin(state: string, payload: OAuth2PendingLogin): void {\n    localStorage.setItem(`${this.STATE_PREFIX}${state}`, JSON.stringify(payload));\n  }\n\n  private consumePendingLogin(state: string): OAuth2PendingLogin | null {\n    const key = `${this.STATE_PREFIX}${state}`;\n    const raw = localStorage.getItem(key);\n    localStorage.removeItem(key);\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as OAuth2PendingLogin;\n    } catch (err) {\n      console.warn('Failed to parse pending OAuth2 login payload', err);\n      return null;\n    }\n  }\n\n  private generateState(): string {\n    return [...crypto.getRandomValues(new Uint8Array(16))].map((b) => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  private generateCodeVerifier(): string {\n    const array = new Uint8Array(64);\n    crypto.getRandomValues(array);\n    return Array.from(array)\n      .map((b) => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~'[b % 66])\n      .join('');\n  }\n\n  private async generateCodeChallenge(codeVerifier: string): Promise<string> {\n    const encoder = new TextEncoder();\n    const data = encoder.encode(codeVerifier);\n    const digest = await crypto.subtle.digest('SHA-256', data);\n    return this.base64UrlEncode(new Uint8Array(digest));\n  }\n\n  private base64UrlEncode(buffer: Uint8Array): string {\n    let binary = '';\n    buffer.forEach((b) => (binary += String.fromCharCode(b)));\n    return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n  }\n\n  decodeIdToken(idToken: string): Record<string, any> {\n    const parts = idToken.split('.');\n    if (parts.length < 2) {\n      throw new Error('Invalid JWT: missing parts');\n    }\n    const payload = parts[1];\n    const normalized = payload.replace(/-/g, '+').replace(/_/g, '/');\n    const padded = normalized + '='.repeat((4 - (normalized.length % 4)) % 4);\n    const json = atob(padded);\n    return JSON.parse(json) as Record<string, any>;\n  }\n\n  getAccessTokenExpirationDate(providerId: string): { expirationDate: string | null } {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens?.expiresAt) return { expirationDate: null };\n    return { expirationDate: new Date(tokens.expiresAt).toISOString() };\n  }\n\n  isAccessTokenAvailable(providerId: string): { isAvailable: boolean } {\n    const tokens = this.getStoredTokens(providerId);\n    return { isAvailable: !!tokens?.accessToken };\n  }\n\n  isAccessTokenExpired(providerId: string): { isExpired: boolean } {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens?.expiresAt) return { isExpired: true };\n    return { isExpired: tokens.expiresAt <= Date.now() };\n  }\n\n  isRefreshTokenAvailable(providerId: string): { isAvailable: boolean } {\n    const tokens = this.getStoredTokens(providerId);\n    return { isAvailable: !!tokens?.refreshToken };\n  }\n}\n"]}
+{"version":3,"file":"oauth2-provider.js","sourceRoot":"","sources":["../../src/oauth2-provider.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAwDzC;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,eAAe;IAAtD;;QACU,cAAS,GAAsC,IAAI,GAAG,EAAE,CAAC;QAChD,sBAAiB,GAAG,mCAAmC,CAAC;QACxD,iBAAY,GAAG,kCAAkC,CAAC;IA0vBrE,CAAC;IAxvBS,mBAAmB,CAAC,KAAc;QACxC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,CAAC;IACZ,CAAC;IAEO,eAAe,CAAC,UAAkB,EAAE,MAA4B;;QACtE,MAAM,KAAK,GAAG,MAAA,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,QAAQ,CAAC;QAC9C,MAAM,oBAAoB,GAAG,MAAA,MAAM,CAAC,oBAAoB,mCAAI,MAAM,CAAC,qBAAqB,CAAC;QACzF,MAAM,mBAAmB,GAAG,MAAA,MAAM,CAAC,mBAAmB,mCAAI,MAAM,CAAC,aAAa,CAAC;QAC/E,MAAM,SAAS,GAAG,MAAA,MAAM,CAAC,SAAS,mCAAI,MAAM,CAAC,kBAAkB,CAAC;QAChE,MAAM,WAAW,GAAG,MAAA,MAAM,CAAC,KAAK,mCAAI,MAAM,CAAC,MAAM,CAAC;QAElD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,iCAAiC,CAAC,CAAC;QACnF,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,yBAAyB,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CACb,oBAAoB,UAAU,0EAA0E,CACzG,CAAC;QACJ,CAAC;QAED,OAAO;YACL,KAAK;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,oBAAoB;YACpB,mBAAmB;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,YAAY,EAAE,CAAC,MAAA,MAAM,CAAC,YAAY,mCAAI,MAAM,CAAqB;YACjE,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,IAAI;YACvC,KAAK,EAAE,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC;YAC5C,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACjD,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;YAC3D,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;YAC3D,SAAS;YACT,qBAAqB,EAAE,MAAM,CAAC,qBAAqB;YACnD,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;YAC7D,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,KAAK;SACzC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAC,UAAkB;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,CAAA;YAAE,OAAO;QAE/B,4BAA4B;QAC5B,IAAI,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,mBAAmB;YAAE,OAAO;QAEtE,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,GAAG,MAAM,mCAAmC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,MAAM,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA4B,CAAC;QAE/D,MAAM,qBAAqB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;QAChE,MAAM,aAAa,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,kBAAkB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;QAE3D,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,OAAO,qBAAqB,KAAK,QAAQ,EAAE,CAAC;YAC9E,MAAM,CAAC,oBAAoB,GAAG,qBAAqB,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,OAAO,aAAa,KAAK,QAAQ,EAAE,CAAC;YACrE,MAAM,CAAC,mBAAmB,GAAG,aAAa,CAAC;QAC7C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,kBAAkB,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,CAAC,SAAS,GAAG,kBAAkB,CAAC;QACxC,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,sBAAsB,EAAE;gBACvD,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;gBACjD,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;gBAC/C,SAAS,EAAE,MAAM,CAAC,SAAS;aAC5B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAA6C;QACrE,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAChE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE/C,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,4BAA4B,EAAE;oBAC7D,KAAK,EAAE,cAAc,CAAC,KAAK;oBAC3B,SAAS,EAAE,cAAc,CAAC,SAAS;oBACnC,oBAAoB,EAAE,cAAc,CAAC,oBAAoB;oBACzD,WAAW,EAAE,cAAc,CAAC,WAAW;oBACvC,YAAY,EAAE,cAAc,CAAC,YAAY;oBACzC,WAAW,EAAE,cAAc,CAAC,WAAW;iBACxC,CAAC,CAAC;YACL,CAAC;YAED,yDAAyD;YACzD,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,UAAkB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,4CAA4C,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,UAAkB;QACrC,OAAO,GAAG,IAAI,CAAC,iBAAiB,GAAG,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA2B;;QAE3B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAExC,MAAM,WAAW,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,MAAM,CAAC,WAAW,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,mBAAmB,CAAC,MAAA,MAAA,OAAO,CAAC,KAAK,mCAAI,OAAO,CAAC,MAAM,mCAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QACxF,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,KAAK,mCAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAEzE,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,YAAY,EAAE,WAAW;YACzB,KAAK;SACN,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,2BAA2B;QAC3B,MAAM,sBAAsB,mCACvB,CAAC,MAAA,MAAM,CAAC,oBAAoB,mCAAI,EAAE,CAAC,GACnC,CAAC,MAAA,OAAO,CAAC,oBAAoB,mCAAI,EAAE,CAAC,CACxC,CAAC;QACF,MAAM,SAAS,GAAG,MAAA,OAAO,CAAC,SAAS,mCAAI,MAAM,CAAC,SAAS,CAAC;QACxD,MAAM,MAAM,GAAG,MAAA,OAAO,CAAC,MAAM,mCAAI,MAAM,CAAC,MAAM,CAAC;QAC/C,IAAI,SAAS,IAAI,CAAC,CAAC,YAAY,IAAI,sBAAsB,CAAC,EAAE,CAAC;YAC3D,sBAAsB,CAAC,UAAU,GAAG,SAAS,CAAC;QAChD,CAAC;QACD,IAAI,MAAM,IAAI,CAAC,CAAC,QAAQ,IAAI,sBAAsB,CAAC,EAAE,CAAC;YACpD,sBAAsB,CAAC,MAAM,GAAG,MAAM,CAAC;QACzC,CAAC;QAED,yBAAyB;QACzB,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,mCAAmC;QACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,CAAC;YAClE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC9B,UAAU;YACV,YAAY;YACZ,WAAW;YACX,KAAK;SACN,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEjH,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,gEAAgE,CAAC,CAAC;QAClH,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEtE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,8BAA8B,EAAE,OAAO,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YAChC,8FAA8F;YAC9F,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAChC,gEAAgE;YAChE,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAQ,CAAC;QACtC,CAAC;QAED,oBAAoB;QACpB,MAAM,KAAK,GAAG,GAAG,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,OAAO,EACP,aAAa,EACb,SAAS,KAAK,WAAW,MAAM,SAAS,IAAI,QAAQ,GAAG,UAAU,CAClE,CAAC;QAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YAED,uFAAuF;YACvF,MAAM,WAAW,GAAG,UAAU,KAAK,EAAE,CAAC;YACtC,IAAI,gBAAgB,GAA4B,IAAI,CAAC;YAErD,IAAI,CAAC;gBACH,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC;YAAC,WAAM,CAAC;gBACP,gEAAgE;gBAChE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,0DAA0D,CAAC,CAAC;gBAC/F,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,CACd,cAA6C,EAC7C,aAAqB,EACrB,cAAsB,EACtB,EAAE;gBACF,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACtD,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,aAAa,CAAC,cAAc,CAAC,CAAC;gBAC9B,IAAI,gBAAgB,EAAE,CAAC;oBACrB,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,kBAAkB,GAAG,CAAC,IAA6B,EAAE,EAAE;gBAC3D,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,gBAAgB,EAAE,CAAC;oBACpC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBACjD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,sCAAsC;oBACtC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,KAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;wBACvD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,6DAA6D;oBAC7D,MAAM,KAIF,IAGH,EAPK,EACJ,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,YAAY,OAKnB,EAJI,OAAO,cAHN,oBAIL,CAGA,CAAC;oBACF,OAAO,CAAC;wBACN,QAAQ,EAAE,QAAa;wBACvB,MAAM,EAAE,OAAiC;qBACS,CAAC,CAAC;oBACtD,OAAO,IAAI,CAAC;gBACd,CAAC;qBAAM,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,aAAa,EAAE,CAAC;oBACxC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBACjD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,MAAM,CAAC,IAAI,KAAK,CAAE,IAAI,CAAC,KAAgB,IAAI,6BAA6B,CAAC,CAAC,CAAC;oBAC3E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;YAEF,uCAAuC;YACvC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,gBAAgB,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;oBACnD,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,CAAC,KAAmB,EAAE,EAAE;gBAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAEnD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;gBAC3C,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;gBAC5D,IAAI,CAAC;oBACH,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,WAAM,CAAC;oBACP,0CAA0C;gBAC5C,CAAC;gBACD,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAC/C,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBAClD,IAAI,CAAC;oBACH,mFAAmF;oBACnF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBACjB,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;wBAC5D,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBAAC,WAAM,CAAC;oBACP,8EAA8E;oBAC9E,2EAA2E;oBAC3E,2EAA2E;oBAC3E,qEAAqE;oBACrE,aAAa,CAAC,mBAAmB,CAAC,CAAC;oBACnC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;wBACvB,OAAO,CAAC,GAAG,CACT,WAAW,UAAU,gEAAgE;4BACnF,0CAA0C,CAC7C,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvD,8EAA8E;QAC9E,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,EAAE,CAAC;YACtB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBACtC,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,EAAE,CAAC;oBACpB,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACxD,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,CAAC,qBAAqB,CAAC;gBAChD,IAAI,UAAU,EAAE,CAAC;oBACf,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,0BAA0B,EAAE,UAAU,CAAC,CAAC;gBAC/D,CAAC;gBACD,IAAI,MAAM,CAAC,0BAA0B,EAAE,CAAC;oBACtC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC,EAAE,CAAC;wBACvE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;oBAC7B,CAAC;gBACH,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;YACxC,CAAC;YAAC,WAAM,CAAC;gBACP,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,UAAkB;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sDAAsD,UAAU,IAAI,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,EAAE,MAAM,CAAC,OAAO;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,UAAkB,EAClB,YAAqB,EACrB,oBAA6C;;QAE7C,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,qBAAqB,GAAG,YAAY,aAAZ,YAAY,cAAZ,YAAY,GAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAC;QACnE,IAAI,CAAC,qBAAqB,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CACb,sDAAsD,UAAU,iDAAiD,CAClH,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,qBAAqB,EAAE,oBAAoB,CAAC,CAAC;QAElH,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACjH,MAAM,UAAU,GAAG,MAAA,MAAA,MAAA,aAAa,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,mCAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,KAAK,mCAAI,EAAE,CAAC;QAE1F,oCAAoC;QACpC,IAAI,YAAY,GAAmC,IAAI,CAAC;QACxD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,gBAAgB,GAAG,MAAA,aAAa,CAAC,aAAa,mCAAI,qBAAqB,CAAC;QAC9E,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;YAC7B,WAAW,EAAE,aAAa,CAAC,YAAY;YACvC,YAAY,EAAE,gBAAgB;YAC9B,OAAO,EAAE,aAAa,CAAC,QAAQ;YAC/B,SAAS;YACT,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,aAAa,CAAC,UAAU;SACpC,CAAC,CAAC;QAEH,OAAO;YACL,UAAU;YACV,WAAW,EAAE;gBACX,KAAK,EAAE,aAAa,CAAC,YAAY;gBACjC,SAAS,EAAE,aAAa,CAAC,UAAU;gBACnC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;gBAC1C,YAAY,EAAE,gBAAgB;aAC/B;YACD,OAAO,EAAE,MAAA,aAAa,CAAC,QAAQ,mCAAI,IAAI;YACvC,YAAY,EAAE,gBAAgB,aAAhB,gBAAgB,cAAhB,gBAAgB,GAAI,IAAI;YACtC,YAAY;YACZ,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,aAAa,CAAC,UAAU;YACnC,SAAS,EAAE,MAAA,aAAa,CAAC,UAAU,mCAAI,IAAI;SAC5C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAQ,EAAE,aAAsB;;QACxD,4CAA4C;QAC5C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,wDAAwD;QACxD,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,IAAI,CAAC,gBAAgB,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,oBAAoB,UAAU,4BAA4B,EAAE,CAAC;QAC/E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC;YACH,IAAI,aAAkC,CAAC;YAEvC,sBAAsB;YACtB,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,0BAA0B;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;oBACzD,OAAO,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;gBACvE,CAAC;gBACD,aAAa,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClF,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtC,gBAAgB;gBAChB,aAAa,GAAG;oBACd,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAE;oBACzC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,QAAQ;oBAChD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC1F,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;oBACvC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;iBAC9C,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;gBACzD,OAAO,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC;YACzE,CAAC;YAED,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACjH,MAAM,UAAU,GAAG,MAAA,MAAA,aAAa,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,mCAAI,EAAE,CAAC;YAEzE,oCAAoC;YACpC,IAAI,YAAY,GAAmC,IAAI,CAAC;YACxD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;YAClF,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;gBAC7B,WAAW,EAAE,aAAa,CAAC,YAAY;gBACvC,YAAY,EAAE,aAAa,CAAC,aAAa;gBACzC,OAAO,EAAE,aAAa,CAAC,QAAQ;gBAC/B,SAAS;gBACT,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,aAAa,CAAC,UAAU;aACpC,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE;oBACN,UAAU;oBACV,WAAW,EAAE;wBACX,KAAK,EAAE,aAAa,CAAC,YAAY;wBACjC,SAAS,EAAE,aAAa,CAAC,UAAU;wBACnC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;wBAC1C,YAAY,EAAE,aAAa,CAAC,aAAa;qBAC1C;oBACD,OAAO,EAAE,MAAA,aAAa,CAAC,QAAQ,mCAAI,IAAI;oBACvC,YAAY,EAAE,MAAA,aAAa,CAAC,aAAa,mCAAI,IAAI;oBACjD,YAAY;oBACZ,KAAK,EAAE,UAAU;oBACjB,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,SAAS,EAAE,MAAA,aAAa,CAAC,UAAU,mCAAI,IAAI;iBAC5C;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,UAAkB,EAClB,IAAY,EACZ,OAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,IAAI;YACJ,YAAY,EAAE,OAAO,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,uBAAuB,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CACnC,UAAkB,EAClB,YAAoB,EACpB,oBAA6C;QAE7C,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,MAAM,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBACtE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QACD,IAAI,oBAAoB,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,WAAmB;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,UAAU,IAAI,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC,CAAC;QAEF,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;YAC/C,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC5D,CAAC;IAEO,aAAa,CAAC,UAAkB,EAAE,MAA0B;QAClE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,eAAe,CAAC,UAAkB;QACxC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAAa,EAAE,OAA2B;QACpE,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,mBAAmB,CAAC,KAAa;QACvC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,oBAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oEAAoE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;aACxF,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,YAAoB;QACtD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,eAAe,CAAC,MAAkB;QACxC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAC;IACjD,CAAC;IAED,4BAA4B,CAAC,UAAkB;QAC7C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,CAAA;YAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;QACxD,OAAO,EAAE,cAAc,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;IACtE,CAAC;IAED,sBAAsB,CAAC,UAAkB;QACvC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,WAAW,CAAA,EAAE,CAAC;IAChD,CAAC;IAED,oBAAoB,CAAC,UAAkB;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,CAAA;YAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACnD,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;IACvD,CAAC;IAED,uBAAuB,CAAC,UAAkB;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAA,EAAE,CAAC;IACjD,CAAC;CACF","sourcesContent":["import { BaseSocialLogin } from './base';\nimport type {\n  AuthorizationCode,\n  LoginResult,\n  OAuth2LoginOptions,\n  OAuth2LoginResponse,\n  OAuth2ProviderConfig,\n  ProviderResponseMap,\n} from './definitions';\n\ninterface OAuth2TokenResponse {\n  token_type: string;\n  expires_in?: number;\n  access_token: string;\n  scope?: string;\n  refresh_token?: string;\n  id_token?: string;\n}\n\ninterface OAuth2PendingLogin {\n  providerId: string;\n  codeVerifier: string;\n  redirectUri: string;\n  scope: string;\n}\n\ninterface OAuth2StoredTokens {\n  accessToken: string;\n  refreshToken?: string;\n  idToken?: string;\n  expiresAt: number;\n  scope: string[];\n  tokenType: string;\n}\n\ninterface OAuth2ConfigInternal {\n  appId: string;\n  issuerUrl?: string;\n  authorizationBaseUrl?: string;\n  accessTokenEndpoint?: string;\n  redirectUrl: string;\n  resourceUrl?: string;\n  responseType: 'code' | 'token';\n  pkceEnabled: boolean;\n  scope: string;\n  additionalParameters?: Record<string, string>;\n  loginHint?: string;\n  prompt?: string;\n  additionalTokenParameters?: Record<string, string>;\n  additionalResourceHeaders?: Record<string, string>;\n  logoutUrl?: string;\n  postLogoutRedirectUrl?: string;\n  additionalLogoutParameters?: Record<string, string>;\n  logsEnabled: boolean;\n}\n\n/**\n * OAuth2 Social Login Manager\n * Supports multiple OAuth2 provider configurations\n */\nexport class OAuth2SocialLogin extends BaseSocialLogin {\n  private providers: Map<string, OAuth2ConfigInternal> = new Map();\n  private readonly TOKENS_KEY_PREFIX = 'capgo_social_login_oauth2_tokens_';\n  private readonly STATE_PREFIX = 'capgo_social_login_oauth2_state_';\n\n  private normalizeScopeValue(scope: unknown): string {\n    if (!scope) return '';\n    if (typeof scope === 'string') return scope;\n    if (Array.isArray(scope)) return scope.filter(Boolean).join(' ');\n    return '';\n  }\n\n  private normalizeConfig(providerId: string, config: OAuth2ProviderConfig): OAuth2ConfigInternal {\n    const appId = config.appId ?? config.clientId;\n    const authorizationBaseUrl = config.authorizationBaseUrl ?? config.authorizationEndpoint;\n    const accessTokenEndpoint = config.accessTokenEndpoint ?? config.tokenEndpoint;\n    const logoutUrl = config.logoutUrl ?? config.endSessionEndpoint;\n    const scopeSource = config.scope ?? config.scopes;\n\n    if (!appId) {\n      throw new Error(`OAuth2 provider '${providerId}' requires appId (or clientId).`);\n    }\n    if (!config.redirectUrl) {\n      throw new Error(`OAuth2 provider '${providerId}' requires redirectUrl.`);\n    }\n    if (!authorizationBaseUrl && !config.issuerUrl) {\n      throw new Error(\n        `OAuth2 provider '${providerId}' requires authorizationBaseUrl (or authorizationEndpoint) or issuerUrl.`,\n      );\n    }\n\n    return {\n      appId,\n      issuerUrl: config.issuerUrl,\n      authorizationBaseUrl,\n      accessTokenEndpoint,\n      redirectUrl: config.redirectUrl,\n      resourceUrl: config.resourceUrl,\n      responseType: (config.responseType ?? 'code') as 'code' | 'token',\n      pkceEnabled: config.pkceEnabled ?? true,\n      scope: this.normalizeScopeValue(scopeSource),\n      additionalParameters: config.additionalParameters,\n      loginHint: config.loginHint,\n      prompt: config.prompt,\n      additionalTokenParameters: config.additionalTokenParameters,\n      additionalResourceHeaders: config.additionalResourceHeaders,\n      logoutUrl,\n      postLogoutRedirectUrl: config.postLogoutRedirectUrl,\n      additionalLogoutParameters: config.additionalLogoutParameters,\n      logsEnabled: config.logsEnabled ?? false,\n    };\n  }\n\n  private async ensureDiscovered(providerId: string): Promise<void> {\n    const config = this.providers.get(providerId);\n    if (!config?.issuerUrl) return;\n\n    // Resolve endpoints lazily.\n    if (config.authorizationBaseUrl && config.accessTokenEndpoint) return;\n\n    const issuer = config.issuerUrl.replace(/\\/+$/, '');\n    const discoveryUrl = `${issuer}/.well-known/openid-configuration`;\n    const resp = await fetch(discoveryUrl);\n    if (!resp.ok) {\n      const text = await resp.text().catch(() => '');\n      throw new Error(`OAuth2 discovery failed (${resp.status}): ${text || discoveryUrl}`);\n    }\n    const payload = (await resp.json()) as Record<string, unknown>;\n\n    const authorizationEndpoint = payload['authorization_endpoint'];\n    const tokenEndpoint = payload['token_endpoint'];\n    const endSessionEndpoint = payload['end_session_endpoint'];\n\n    if (!config.authorizationBaseUrl && typeof authorizationEndpoint === 'string') {\n      config.authorizationBaseUrl = authorizationEndpoint;\n    }\n    if (!config.accessTokenEndpoint && typeof tokenEndpoint === 'string') {\n      config.accessTokenEndpoint = tokenEndpoint;\n    }\n    if (!config.logoutUrl && typeof endSessionEndpoint === 'string') {\n      config.logoutUrl = endSessionEndpoint;\n    }\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Discovery resolved`, {\n        authorizationBaseUrl: config.authorizationBaseUrl,\n        accessTokenEndpoint: config.accessTokenEndpoint,\n        logoutUrl: config.logoutUrl,\n      });\n    }\n  }\n\n  /**\n   * Initialize multiple OAuth2 providers\n   */\n  async initializeProviders(configs: Record<string, OAuth2ProviderConfig>): Promise<void> {\n    for (const [providerId, config] of Object.entries(configs)) {\n      const internalConfig = this.normalizeConfig(providerId, config);\n      this.providers.set(providerId, internalConfig);\n\n      if (internalConfig.logsEnabled) {\n        console.log(`[OAuth2:${providerId}] Initialized with config:`, {\n          appId: internalConfig.appId,\n          issuerUrl: internalConfig.issuerUrl,\n          authorizationBaseUrl: internalConfig.authorizationBaseUrl,\n          redirectUrl: internalConfig.redirectUrl,\n          responseType: internalConfig.responseType,\n          pkceEnabled: internalConfig.pkceEnabled,\n        });\n      }\n\n      // Pre-resolve discovery on web if issuerUrl is provided.\n      await this.ensureDiscovered(providerId);\n    }\n  }\n\n  private getProvider(providerId: string): OAuth2ConfigInternal {\n    const config = this.providers.get(providerId);\n    if (!config) {\n      throw new Error(`OAuth2 provider '${providerId}' not configured. Call initialize() first.`);\n    }\n    return config;\n  }\n\n  private getTokensKey(providerId: string): string {\n    return `${this.TOKENS_KEY_PREFIX}${providerId}`;\n  }\n\n  async login<T extends 'oauth2'>(\n    options: OAuth2LoginOptions,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    const { providerId } = options;\n    const config = this.getProvider(providerId);\n    await this.ensureDiscovered(providerId);\n\n    const redirectUri = options.redirectUrl ?? config.redirectUrl;\n    const scope = this.normalizeScopeValue(options.scope ?? options.scopes ?? config.scope);\n    const state = options.state ?? this.generateState();\n    const codeVerifier = options.codeVerifier ?? this.generateCodeVerifier();\n\n    // Build authorization URL\n    const params = new URLSearchParams({\n      response_type: config.responseType,\n      client_id: config.appId,\n      redirect_uri: redirectUri,\n      state,\n    });\n\n    if (scope) {\n      params.set('scope', scope);\n    }\n\n    // Convenience OIDC options\n    const mergedAdditionalParams: Record<string, string> = {\n      ...(config.additionalParameters ?? {}),\n      ...(options.additionalParameters ?? {}),\n    };\n    const loginHint = options.loginHint ?? config.loginHint;\n    const prompt = options.prompt ?? config.prompt;\n    if (loginHint && !('login_hint' in mergedAdditionalParams)) {\n      mergedAdditionalParams.login_hint = loginHint;\n    }\n    if (prompt && !('prompt' in mergedAdditionalParams)) {\n      mergedAdditionalParams.prompt = prompt;\n    }\n\n    // Add PKCE for code flow\n    if (config.responseType === 'code' && config.pkceEnabled) {\n      const codeChallenge = await this.generateCodeChallenge(codeVerifier);\n      params.set('code_challenge', codeChallenge);\n      params.set('code_challenge_method', 'S256');\n    }\n\n    // Add merged additional parameters\n    for (const [key, value] of Object.entries(mergedAdditionalParams)) {\n      if (value !== undefined) {\n        params.set(key, value);\n      }\n    }\n\n    // Store pending login state\n    this.persistPendingLogin(state, {\n      providerId,\n      codeVerifier,\n      redirectUri,\n      scope,\n    });\n\n    localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'oauth2', providerId, state }));\n\n    if (!config.authorizationBaseUrl) {\n      throw new Error(`OAuth2 provider '${providerId}' is missing authorizationBaseUrl (discovery may have failed).`);\n    }\n    const authUrl = `${config.authorizationBaseUrl}?${params.toString()}`;\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Opening authorization URL:`, authUrl);\n    }\n\n    if (options.flow === 'redirect') {\n      // Trigger a full-page redirect. The promise will not resolve because the page navigates away.\n      window.location.assign(authUrl);\n      // eslint-disable-next-line @typescript-eslint/no-empty-function\n      return new Promise(() => {}) as any;\n    }\n\n    // Open popup window\n    const width = 500;\n    const height = 650;\n    const left = window.screenX + (window.outerWidth - width) / 2;\n    const top = window.screenY + (window.outerHeight - height) / 2;\n\n    const popup = window.open(\n      authUrl,\n      'OAuth2Login',\n      `width=${width},height=${height},left=${left},top=${top},popup=1`,\n    );\n\n    return new Promise((resolve, reject) => {\n      if (!popup) {\n        reject(new Error('Unable to open login window. Please allow popups.'));\n        return;\n      }\n\n      // Use BroadcastChannel for cross-origin communication (works when postMessage doesn't)\n      const channelName = `oauth2_${state}`;\n      let broadcastChannel: BroadcastChannel | null = null;\n\n      try {\n        broadcastChannel = new BroadcastChannel(channelName);\n      } catch {\n        // BroadcastChannel not supported, fall back to postMessage only\n        if (config.logsEnabled) {\n          console.log(`[OAuth2:${providerId}] BroadcastChannel not supported, using postMessage only`);\n        }\n      }\n\n      const cleanup = (\n        messageHandler: (event: MessageEvent) => void,\n        timeoutHandle: number,\n        intervalHandle: number,\n      ) => {\n        window.removeEventListener('message', messageHandler);\n        clearTimeout(timeoutHandle);\n        clearInterval(intervalHandle);\n        if (broadcastChannel) {\n          broadcastChannel.close();\n        }\n      };\n\n      const handleOAuthMessage = (data: Record<string, unknown>) => {\n        if (data?.type === 'oauth-response') {\n          if (data?.provider && data.provider !== 'oauth2') {\n            return false;\n          }\n          // Check providerId matches if present\n          if (data?.providerId && data.providerId !== providerId) {\n            return false;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          // eslint-disable-next-line @typescript-eslint/no-unused-vars\n          const {\n            provider: _ignoredProvider,\n            type: _ignoredType,\n            ...payload\n          } = data as unknown as OAuth2LoginResponse & {\n            provider?: string;\n            type?: string;\n          };\n          resolve({\n            provider: 'oauth2' as T,\n            result: payload as ProviderResponseMap[T],\n          } as { provider: T; result: ProviderResponseMap[T] });\n          return true;\n        } else if (data?.type === 'oauth-error') {\n          if (data?.provider && data.provider !== 'oauth2') {\n            return false;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          reject(new Error((data.error as string) || 'OAuth2 login was cancelled.'));\n          return true;\n        }\n        return false;\n      };\n\n      // Listen for BroadcastChannel messages\n      if (broadcastChannel) {\n        broadcastChannel.onmessage = (event: MessageEvent) => {\n          handleOAuthMessage(event.data);\n        };\n      }\n\n      const messageHandler = (event: MessageEvent) => {\n        if (event.origin !== window.location.origin) {\n          return;\n        }\n        handleOAuthMessage(event.data);\n      };\n\n      window.addEventListener('message', messageHandler);\n\n      const timeoutHandle = window.setTimeout(() => {\n        cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n        try {\n          popup.close();\n        } catch {\n          // Ignore cross-origin errors when closing\n        }\n        reject(new Error('OAuth2 login timed out.'));\n      }, 300000);\n\n      const popupClosedInterval = window.setInterval(() => {\n        try {\n          // Check if popup is closed - this may throw cross-origin errors for some providers\n          if (popup.closed) {\n            cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n            reject(new Error('OAuth2 login window was closed.'));\n          }\n        } catch {\n          // Cross-origin error when checking popup.closed - this happens when the popup\n          // navigates to a third-party OAuth provider with strict security settings.\n          // We can't detect if the window was closed, so we just rely on the timeout\n          // and message handlers. Clear the interval to avoid repeated errors.\n          clearInterval(popupClosedInterval);\n          if (config.logsEnabled) {\n            console.log(\n              `[OAuth2:${providerId}] Cannot check popup.closed due to cross-origin restrictions. ` +\n                'Relying on message handlers and timeout.',\n            );\n          }\n        }\n      }, 1000);\n    });\n  }\n\n  async logout(providerId: string): Promise<void> {\n    await this.ensureDiscovered(providerId);\n    const config = this.providers.get(providerId);\n    const stored = this.getStoredTokens(providerId);\n    localStorage.removeItem(this.getTokensKey(providerId));\n\n    // If logout URL is configured, build an end-session URL (OIDC) when possible.\n    if (config?.logoutUrl) {\n      try {\n        const url = new URL(config.logoutUrl);\n        if (stored?.idToken) {\n          url.searchParams.set('id_token_hint', stored.idToken);\n        }\n        const postLogout = config.postLogoutRedirectUrl;\n        if (postLogout) {\n          url.searchParams.set('post_logout_redirect_uri', postLogout);\n        }\n        if (config.additionalLogoutParameters) {\n          for (const [k, v] of Object.entries(config.additionalLogoutParameters)) {\n            url.searchParams.set(k, v);\n          }\n        }\n        window.open(url.toString(), '_blank');\n      } catch {\n        window.open(config.logoutUrl, '_blank');\n      }\n    }\n  }\n\n  async isLoggedIn(providerId: string): Promise<{ isLoggedIn: boolean }> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens) {\n      return { isLoggedIn: false };\n    }\n    const isValid = tokens.expiresAt > Date.now();\n    if (!isValid) {\n      localStorage.removeItem(this.getTokensKey(providerId));\n    }\n    return { isLoggedIn: isValid };\n  }\n\n  async getAuthorizationCode(providerId: string): Promise<AuthorizationCode> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens) {\n      throw new Error(`OAuth2 access token is not available for provider '${providerId}'.`);\n    }\n    return {\n      accessToken: tokens.accessToken,\n      jwt: tokens.idToken,\n    };\n  }\n\n  async refresh(providerId: string): Promise<void> {\n    await this.refreshToken(providerId);\n  }\n\n  async refreshToken(\n    providerId: string,\n    refreshToken?: string,\n    additionalParameters?: Record<string, string>,\n  ): Promise<OAuth2LoginResponse> {\n    await this.ensureDiscovered(providerId);\n    const config = this.getProvider(providerId);\n\n    const stored = this.getStoredTokens(providerId);\n    const effectiveRefreshToken = refreshToken ?? stored?.refreshToken;\n    if (!effectiveRefreshToken) {\n      throw new Error(\n        `No OAuth2 refresh token is available for provider '${providerId}'. Include offline_access scope to receive one.`,\n      );\n    }\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const tokenResponse = await this.refreshWithRefreshToken(providerId, effectiveRefreshToken, additionalParameters);\n\n    const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;\n    const scopeArray = tokenResponse.scope?.split(' ').filter(Boolean) ?? stored?.scope ?? [];\n\n    // Fetch resource data if configured\n    let resourceData: Record<string, unknown> | null = null;\n    if (config.resourceUrl) {\n      resourceData = await this.fetchResource(providerId, tokenResponse.access_token);\n    }\n\n    const nextRefreshToken = tokenResponse.refresh_token ?? effectiveRefreshToken;\n    this.persistTokens(providerId, {\n      accessToken: tokenResponse.access_token,\n      refreshToken: nextRefreshToken,\n      idToken: tokenResponse.id_token,\n      expiresAt,\n      scope: scopeArray,\n      tokenType: tokenResponse.token_type,\n    });\n\n    return {\n      providerId,\n      accessToken: {\n        token: tokenResponse.access_token,\n        tokenType: tokenResponse.token_type,\n        expires: new Date(expiresAt).toISOString(),\n        refreshToken: nextRefreshToken,\n      },\n      idToken: tokenResponse.id_token ?? null,\n      refreshToken: nextRefreshToken ?? null,\n      resourceData,\n      scope: scopeArray,\n      tokenType: tokenResponse.token_type,\n      expiresIn: tokenResponse.expires_in ?? null,\n    };\n  }\n\n  async handleOAuthRedirect(url: URL, expectedState?: string): Promise<LoginResult | { error: string } | null> {\n    // Check both query params and hash fragment\n    const params = new URLSearchParams(url.search);\n    const hashParams = new URLSearchParams(url.hash.slice(1));\n\n    // Merge params, hash takes priority (for implicit flow)\n    hashParams.forEach((value, key) => {\n      params.set(key, value);\n    });\n\n    const stateFromUrl = expectedState ?? params.get('state');\n    if (!stateFromUrl) {\n      return null;\n    }\n\n    const pending = this.consumePendingLogin(stateFromUrl);\n    if (!pending) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: 'OAuth2 login session expired or state mismatch.' };\n    }\n\n    const { providerId } = pending;\n    await this.ensureDiscovered(providerId);\n    const config = this.providers.get(providerId);\n    if (!config) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: `OAuth2 provider '${providerId}' configuration not found.` };\n    }\n\n    const error = params.get('error');\n    if (error) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: params.get('error_description') || error };\n    }\n\n    try {\n      let tokenResponse: OAuth2TokenResponse;\n\n      // Check response type\n      if (params.has('code')) {\n        // Authorization code flow\n        const code = params.get('code');\n        if (!code) {\n          localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n          return { error: 'OAuth2 authorization code missing from redirect.' };\n        }\n        tokenResponse = await this.exchangeAuthorizationCode(providerId, code, pending);\n      } else if (params.has('access_token')) {\n        // Implicit flow\n        tokenResponse = {\n          access_token: params.get('access_token')!,\n          token_type: params.get('token_type') || 'bearer',\n          expires_in: params.has('expires_in') ? parseInt(params.get('expires_in')!, 10) : undefined,\n          scope: params.get('scope') || undefined,\n          id_token: params.get('id_token') || undefined,\n        };\n      } else {\n        localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n        return { error: 'No authorization code or access token in redirect.' };\n      }\n\n      const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;\n      const scopeArray = tokenResponse.scope?.split(' ').filter(Boolean) ?? [];\n\n      // Fetch resource data if configured\n      let resourceData: Record<string, unknown> | null = null;\n      if (config.resourceUrl) {\n        resourceData = await this.fetchResource(providerId, tokenResponse.access_token);\n      }\n\n      this.persistTokens(providerId, {\n        accessToken: tokenResponse.access_token,\n        refreshToken: tokenResponse.refresh_token,\n        idToken: tokenResponse.id_token,\n        expiresAt,\n        scope: scopeArray,\n        tokenType: tokenResponse.token_type,\n      });\n\n      return {\n        provider: 'oauth2',\n        result: {\n          providerId,\n          accessToken: {\n            token: tokenResponse.access_token,\n            tokenType: tokenResponse.token_type,\n            expires: new Date(expiresAt).toISOString(),\n            refreshToken: tokenResponse.refresh_token,\n          },\n          idToken: tokenResponse.id_token ?? null,\n          refreshToken: tokenResponse.refresh_token ?? null,\n          resourceData,\n          scope: scopeArray,\n          tokenType: tokenResponse.token_type,\n          expiresIn: tokenResponse.expires_in ?? null,\n        },\n      };\n    } catch (err) {\n      if (err instanceof Error) {\n        return { error: err.message };\n      }\n      return { error: 'OAuth2 login failed unexpectedly.' };\n    } finally {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n    }\n  }\n\n  private async exchangeAuthorizationCode(\n    providerId: string,\n    code: string,\n    pending: OAuth2PendingLogin,\n  ): Promise<OAuth2TokenResponse> {\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const params = new URLSearchParams({\n      grant_type: 'authorization_code',\n      client_id: config.appId,\n      code,\n      redirect_uri: pending.redirectUri,\n    });\n\n    if (config.pkceEnabled) {\n      params.set('code_verifier', pending.codeVerifier);\n    }\n\n    if (config.additionalTokenParameters) {\n      for (const [k, v] of Object.entries(config.additionalTokenParameters)) {\n        params.set(k, v);\n      }\n    }\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Exchanging code at:`, config.accessTokenEndpoint);\n    }\n\n    const response = await fetch(config.accessTokenEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 token exchange failed (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as OAuth2TokenResponse;\n  }\n\n  private async refreshWithRefreshToken(\n    providerId: string,\n    refreshToken: string,\n    additionalParameters?: Record<string, string>,\n  ): Promise<OAuth2TokenResponse> {\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const params = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: refreshToken,\n      client_id: config.appId,\n    });\n\n    if (config.additionalTokenParameters) {\n      for (const [k, v] of Object.entries(config.additionalTokenParameters)) {\n        params.set(k, v);\n      }\n    }\n    if (additionalParameters) {\n      for (const [k, v] of Object.entries(additionalParameters)) {\n        params.set(k, v);\n      }\n    }\n\n    const response = await fetch(config.accessTokenEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 refresh failed (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as OAuth2TokenResponse;\n  }\n\n  private async fetchResource(providerId: string, accessToken: string): Promise<Record<string, unknown>> {\n    const config = this.getProvider(providerId);\n    if (!config.resourceUrl) {\n      throw new Error(`No resourceUrl configured for provider '${providerId}'.`);\n    }\n\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${accessToken}`,\n    };\n\n    if (config.additionalResourceHeaders) {\n      Object.assign(headers, config.additionalResourceHeaders);\n    }\n\n    const response = await fetch(config.resourceUrl, {\n      headers,\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Unable to fetch OAuth2 resource (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as Record<string, unknown>;\n  }\n\n  private persistTokens(providerId: string, tokens: OAuth2StoredTokens): void {\n    localStorage.setItem(this.getTokensKey(providerId), JSON.stringify(tokens));\n  }\n\n  private getStoredTokens(providerId: string): OAuth2StoredTokens | null {\n    const raw = localStorage.getItem(this.getTokensKey(providerId));\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as OAuth2StoredTokens;\n    } catch (err) {\n      console.warn(`Failed to parse stored OAuth2 tokens for provider '${providerId}'`, err);\n      return null;\n    }\n  }\n\n  private persistPendingLogin(state: string, payload: OAuth2PendingLogin): void {\n    localStorage.setItem(`${this.STATE_PREFIX}${state}`, JSON.stringify(payload));\n  }\n\n  private consumePendingLogin(state: string): OAuth2PendingLogin | null {\n    const key = `${this.STATE_PREFIX}${state}`;\n    const raw = localStorage.getItem(key);\n    localStorage.removeItem(key);\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as OAuth2PendingLogin;\n    } catch (err) {\n      console.warn('Failed to parse pending OAuth2 login payload', err);\n      return null;\n    }\n  }\n\n  private generateState(): string {\n    return [...crypto.getRandomValues(new Uint8Array(16))].map((b) => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  private generateCodeVerifier(): string {\n    const array = new Uint8Array(64);\n    crypto.getRandomValues(array);\n    return Array.from(array)\n      .map((b) => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~'[b % 66])\n      .join('');\n  }\n\n  private async generateCodeChallenge(codeVerifier: string): Promise<string> {\n    const encoder = new TextEncoder();\n    const data = encoder.encode(codeVerifier);\n    const digest = await crypto.subtle.digest('SHA-256', data);\n    return this.base64UrlEncode(new Uint8Array(digest));\n  }\n\n  private base64UrlEncode(buffer: Uint8Array): string {\n    let binary = '';\n    buffer.forEach((b) => (binary += String.fromCharCode(b)));\n    return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n  }\n\n  decodeIdToken(idToken: string): Record<string, any> {\n    const parts = idToken.split('.');\n    if (parts.length < 2) {\n      throw new Error('Invalid JWT: missing parts');\n    }\n    const payload = parts[1];\n    const normalized = payload.replace(/-/g, '+').replace(/_/g, '/');\n    const padded = normalized + '='.repeat((4 - (normalized.length % 4)) % 4);\n    const json = atob(padded);\n    return JSON.parse(json) as Record<string, any>;\n  }\n\n  getAccessTokenExpirationDate(providerId: string): { expirationDate: string | null } {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens?.expiresAt) return { expirationDate: null };\n    return { expirationDate: new Date(tokens.expiresAt).toISOString() };\n  }\n\n  isAccessTokenAvailable(providerId: string): { isAvailable: boolean } {\n    const tokens = this.getStoredTokens(providerId);\n    return { isAvailable: !!tokens?.accessToken };\n  }\n\n  isAccessTokenExpired(providerId: string): { isExpired: boolean } {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens?.expiresAt) return { isExpired: true };\n    return { isExpired: tokens.expiresAt <= Date.now() };\n  }\n\n  isRefreshTokenAvailable(providerId: string): { isAvailable: boolean } {\n    const tokens = this.getStoredTokens(providerId);\n    return { isAvailable: !!tokens?.refreshToken };\n  }\n}\n"]}

package/dist/esm/twitter-provider.js

@@ -1,14 +1,4 @@
-var __rest = (this && this.__rest) || function (s, e) {
-    var t = {};
-    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
-        t[p] = s[p];
-    if (s != null && typeof Object.getOwnPropertySymbols === "function")
-        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
-            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
-                t[p[i]] = s[p[i]];
-        }
-    return t;
-};
+import { __rest } from "tslib";
 import { BaseSocialLogin } from './base';
 export class TwitterSocialLogin extends BaseSocialLogin {
     constructor() {

package/dist/esm/twitter-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"twitter-provider.js","sourceRoot":"","sources":["../../src/twitter-provider.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AA4CzC,MAAM,OAAO,kBAAmB,SAAQ,eAAe;IAAvD;;QACU,aAAQ,GAAkB,IAAI,CAAC;QAC/B,gBAAW,GAAkB,IAAI,CAAC;QAClC,kBAAa,GAAa,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACvD,eAAU,GAAG,KAAK,CAAC;QAEV,eAAU,GAAG,sCAAsC,CAAC;QACpD,iBAAY,GAAG,mCAAmC,CAAC;IAiatE,CAAC;IA/ZC,KAAK,CAAC,UAAU,CACd,QAAuB,EACvB,WAA2B,EAC3B,aAAwB,EACxB,UAAoB,EACpB,QAAiB;QAEjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,IAAI,CAAC;QACvC,IAAI,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,KAAK,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,SAAS,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA4B;;QAE5B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,WAAW,GAAG,MAAA,MAAA,OAAO,CAAC,WAAW,mCAAI,IAAI,CAAC,WAAW,mCAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACjH,MAAM,MAAM,GAAG,CAAA,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,EAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,KAAK,mCAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACzE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAErE,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC9B,YAAY;YACZ,WAAW;YACX,MAAM;SACP,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEtG,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,KAAK;YACL,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAA,OAAO,CAAC,UAAU,mCAAI,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,OAAO,GAAG,oCAAoC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,GAAG,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,KAAK,WAAW,MAAM,SAAS,IAAI,QAAQ,GAAG,UAAU,CAAC,CAAC;QAEhH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YAED,uFAAuF;YACvF,MAAM,WAAW,GAAG,iBAAiB,KAAK,EAAE,CAAC;YAC7C,IAAI,gBAAgB,GAA4B,IAAI,CAAC;YAErD,IAAI,CAAC;gBACH,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC;YAAC,WAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;YAED,MAAM,OAAO,GAAG,CACd,cAA6C,EAC7C,aAAqB,EACrB,cAAsB,EACtB,EAAE;gBACF,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACtD,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,aAAa,CAAC,cAAc,CAAC,CAAC;gBAC9B,IAAI,gBAAgB,EAAE,CAAC;oBACrB,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,kBAAkB,GAAG,CAAC,IAA6B,EAAE,EAAE;gBAC3D,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,gBAAgB,EAAE,CAAC;oBACpC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAClD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,6DAA6D;oBAC7D,MAAM,KAIF,IAGH,EAPK,EACJ,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,YAAY,OAKnB,EAJI,OAAO,cAHN,oBAIL,CAGA,CAAC;oBACF,OAAO,CAAC;wBACN,QAAQ,EAAE,SAAc;wBACxB,MAAM,EAAE,OAAiC;qBACS,CAAC,CAAC;oBACtD,OAAO,IAAI,CAAC;gBACd,CAAC;qBAAM,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,aAAa,EAAE,CAAC;oBACxC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAClD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,MAAM,CAAC,IAAI,KAAK,CAAE,IAAI,CAAC,KAAgB,IAAI,8BAA8B,CAAC,CAAC,CAAC;oBAC5E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;YAEF,uCAAuC;YACvC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,gBAAgB,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;oBACnD,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,CAAC,KAAmB,EAAE,EAAE;gBAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAEnD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;gBAC3C,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;gBAC5D,IAAI,CAAC;oBACH,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,WAAM,CAAC;oBACP,0CAA0C;gBAC5C,CAAC;gBACD,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAChD,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBAClD,IAAI,CAAC;oBACH,mFAAmF;oBACnF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBACjB,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;wBAC5D,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;oBACxD,CAAC;gBACH,CAAC;gBAAC,WAAM,CAAC;oBACP,8EAA8E;oBAC9E,2EAA2E;oBAC3E,wFAAwF;oBACxF,aAAa,CAAC,mBAAmB,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAA,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAQ,EAAE,aAAsB;QACxD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;QAChC,MAAM,YAAY,GAAG,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;QACvE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,EAAE,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;QACxE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;YACxD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE3D,IAAI,CAAC,aAAa,CAAC;gBACjB,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,YAAY,EAAE,MAAM,CAAC,aAAa;gBAClC,SAAS;gBACT,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,MAAM,EAAE,OAAO,CAAC,EAAE;gBAClB,OAAO;aACR,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE;oBACN,WAAW,EAAE;wBACX,KAAK,EAAE,MAAM,CAAC,YAAY;wBAC1B,SAAS,EAAE,MAAM,CAAC,UAAU;wBAC5B,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;wBAC1C,MAAM,EAAE,OAAO,CAAC,EAAE;qBACnB;oBACD,YAAY,EAAE,MAAM,CAAC,aAAa;oBAClC,KAAK,EAAE,UAAU;oBACjB,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,OAAO;iBACR;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,IAAY,EAAE,OAA4B;;QAChF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAA,IAAI,CAAC,QAAQ,mCAAI,EAAE;YAC9B,IAAI;YACJ,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,aAAa,EAAE,OAAO,CAAC,YAAY;SACpC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kCAAkC,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,YAAoB;;QACxD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,MAAA,IAAI,CAAC,QAAQ,mCAAI,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kCAAkC,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QACxD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3D,IAAI,CAAC,aAAa,CAAC;YACjB,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,YAAY,EAAE,MAAA,MAAM,CAAC,aAAa,mCAAI,YAAY;YAClD,SAAS;YACT,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,MAAM,EAAE,OAAO,CAAC,EAAE;YAClB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,WAAmB;;QAC5C,MAAM,MAAM,GAAG,CAAC,mBAAmB,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,4CAA4C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;YAC3F,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;YACnB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAC/B,IAAI,EAAE,MAAA,OAAO,CAAC,IAAI,CAAC,IAAI,mCAAI,IAAI;YAC/B,eAAe,EAAE,MAAA,OAAO,CAAC,IAAI,CAAC,iBAAiB,mCAAI,IAAI;YACvD,QAAQ,EAAE,MAAA,OAAO,CAAC,IAAI,CAAC,QAAQ,mCAAI,KAAK;YACxC,KAAK,EAAE,MAAC,OAAO,CAAC,IAA2B,CAAC,KAAK,mCAAI,IAAI;SAC1D,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,MAA2B;QAC/C,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAEO,eAAe;QACrB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAAa,EAAE,OAA4B;QACrE,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,mBAAmB,CAAC,KAAa;QACvC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,oBAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oEAAoE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;aACxF,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,YAAoB;QACtD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,eAAe,CAAC,MAAkB;QACxC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;CACF","sourcesContent":["import { BaseSocialLogin } from './base';\nimport type {\n  AuthorizationCode,\n  LoginResult,\n  ProviderResponseMap,\n  TwitterLoginOptions,\n  TwitterLoginResponse,\n  TwitterProfile,\n} from './definitions';\n\ninterface TwitterTokenResponse {\n  token_type: 'bearer';\n  expires_in: number;\n  access_token: string;\n  scope: string;\n  refresh_token?: string;\n}\n\ninterface TwitterUserResponse {\n  data: {\n    id: string;\n    name: string;\n    username: string;\n    profile_image_url?: string;\n    verified?: boolean;\n  } & { email?: string };\n}\n\ninterface TwitterPendingLogin {\n  codeVerifier: string;\n  redirectUri: string;\n  scopes: string[];\n}\n\ninterface TwitterStoredTokens {\n  accessToken: string;\n  refreshToken?: string;\n  expiresAt: number;\n  scope: string[];\n  tokenType: string;\n  userId?: string;\n  profile?: TwitterProfile;\n}\n\nexport class TwitterSocialLogin extends BaseSocialLogin {\n  private clientId: string | null = null;\n  private redirectUrl: string | null = null;\n  private defaultScopes: string[] = ['tweet.read', 'users.read'];\n  private forceLogin = false;\n  private audience?: string;\n  private readonly TOKENS_KEY = 'capgo_social_login_twitter_tokens_v1';\n  private readonly STATE_PREFIX = 'capgo_social_login_twitter_state_';\n\n  async initialize(\n    clientId: string | null,\n    redirectUrl?: string | null,\n    defaultScopes?: string[],\n    forceLogin?: boolean,\n    audience?: string,\n  ): Promise<void> {\n    this.clientId = clientId;\n    this.redirectUrl = redirectUrl ?? null;\n    if (defaultScopes?.length) {\n      this.defaultScopes = defaultScopes;\n    }\n    this.forceLogin = forceLogin ?? false;\n    this.audience = audience ?? undefined;\n  }\n\n  async login<T extends 'twitter'>(\n    options: TwitterLoginOptions,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    if (!this.clientId) {\n      throw new Error('Twitter Client ID not configured. Call initialize() first.');\n    }\n\n    const redirectUri = options.redirectUrl ?? this.redirectUrl ?? window.location.origin + window.location.pathname;\n    const scopes = options.scopes?.length ? options.scopes : this.defaultScopes;\n    const state = options.state ?? this.generateState();\n    const codeVerifier = options.codeVerifier ?? this.generateCodeVerifier();\n    const codeChallenge = await this.generateCodeChallenge(codeVerifier);\n\n    this.persistPendingLogin(state, {\n      codeVerifier,\n      redirectUri,\n      scopes,\n    });\n\n    localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'twitter', state }));\n\n    const params = new URLSearchParams({\n      response_type: 'code',\n      client_id: this.clientId,\n      redirect_uri: redirectUri,\n      scope: scopes.join(' '),\n      state,\n      code_challenge: codeChallenge,\n      code_challenge_method: 'S256',\n    });\n    if ((options.forceLogin ?? this.forceLogin) === true) {\n      params.set('force_login', 'true');\n    }\n    if (this.audience) {\n      params.set('audience', this.audience);\n    }\n\n    const authUrl = `https://x.com/i/oauth2/authorize?${params.toString()}`;\n    const width = 500;\n    const height = 650;\n    const left = window.screenX + (window.outerWidth - width) / 2;\n    const top = window.screenY + (window.outerHeight - height) / 2;\n\n    const popup = window.open(authUrl, 'XLogin', `width=${width},height=${height},left=${left},top=${top},popup=1`);\n\n    return new Promise((resolve, reject) => {\n      if (!popup) {\n        reject(new Error('Unable to open login window. Please allow popups.'));\n        return;\n      }\n\n      // Use BroadcastChannel for cross-origin communication (works when postMessage doesn't)\n      const channelName = `twitter_oauth_${state}`;\n      let broadcastChannel: BroadcastChannel | null = null;\n\n      try {\n        broadcastChannel = new BroadcastChannel(channelName);\n      } catch {\n        // BroadcastChannel not supported, fall back to postMessage only\n      }\n\n      const cleanup = (\n        messageHandler: (event: MessageEvent) => void,\n        timeoutHandle: number,\n        intervalHandle: number,\n      ) => {\n        window.removeEventListener('message', messageHandler);\n        clearTimeout(timeoutHandle);\n        clearInterval(intervalHandle);\n        if (broadcastChannel) {\n          broadcastChannel.close();\n        }\n      };\n\n      const handleOAuthMessage = (data: Record<string, unknown>) => {\n        if (data?.type === 'oauth-response') {\n          if (data?.provider && data.provider !== 'twitter') {\n            return false;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          // eslint-disable-next-line @typescript-eslint/no-unused-vars\n          const {\n            provider: _ignoredProvider,\n            type: _ignoredType,\n            ...payload\n          } = data as unknown as TwitterLoginResponse & {\n            provider?: string;\n            type?: string;\n          };\n          resolve({\n            provider: 'twitter' as T,\n            result: payload as ProviderResponseMap[T],\n          } as { provider: T; result: ProviderResponseMap[T] });\n          return true;\n        } else if (data?.type === 'oauth-error') {\n          if (data?.provider && data.provider !== 'twitter') {\n            return false;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          reject(new Error((data.error as string) || 'Twitter login was cancelled.'));\n          return true;\n        }\n        return false;\n      };\n\n      // Listen for BroadcastChannel messages\n      if (broadcastChannel) {\n        broadcastChannel.onmessage = (event: MessageEvent) => {\n          handleOAuthMessage(event.data);\n        };\n      }\n\n      const messageHandler = (event: MessageEvent) => {\n        if (event.origin !== window.location.origin) {\n          return;\n        }\n        handleOAuthMessage(event.data);\n      };\n\n      window.addEventListener('message', messageHandler);\n\n      const timeoutHandle = window.setTimeout(() => {\n        cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n        try {\n          popup.close();\n        } catch {\n          // Ignore cross-origin errors when closing\n        }\n        reject(new Error('Twitter login timed out.'));\n      }, 300000);\n\n      const popupClosedInterval = window.setInterval(() => {\n        try {\n          // Check if popup is closed - this may throw cross-origin errors for some providers\n          if (popup.closed) {\n            cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n            reject(new Error('Twitter login window was closed.'));\n          }\n        } catch {\n          // Cross-origin error when checking popup.closed - this happens when the popup\n          // navigates to a third-party OAuth provider with strict security settings.\n          // We can't detect if the window was closed, so we rely on timeout and message handlers.\n          clearInterval(popupClosedInterval);\n        }\n      }, 1000);\n    });\n  }\n\n  async logout(): Promise<void> {\n    localStorage.removeItem(this.TOKENS_KEY);\n  }\n\n  async isLoggedIn(): Promise<{ isLoggedIn: boolean }> {\n    const tokens = this.getStoredTokens();\n    if (!tokens) {\n      return { isLoggedIn: false };\n    }\n    const isValid = tokens.expiresAt > Date.now();\n    if (!isValid) {\n      localStorage.removeItem(this.TOKENS_KEY);\n    }\n    return { isLoggedIn: isValid };\n  }\n\n  async getAuthorizationCode(): Promise<AuthorizationCode> {\n    const tokens = this.getStoredTokens();\n    if (!tokens) {\n      throw new Error('Twitter access token is not available.');\n    }\n    return {\n      accessToken: tokens.accessToken,\n    };\n  }\n\n  async refresh(): Promise<void> {\n    const tokens = this.getStoredTokens();\n    if (!tokens?.refreshToken) {\n      throw new Error('No Twitter refresh token is available. Include offline.access scope to receive one.');\n    }\n\n    await this.refreshWithRefreshToken(tokens.refreshToken);\n  }\n\n  async handleOAuthRedirect(url: URL, expectedState?: string): Promise<LoginResult | { error: string } | null> {\n    const params = url.searchParams;\n    const stateFromUrl = expectedState ?? params.get('state');\n    if (!stateFromUrl) {\n      return null;\n    }\n\n    const pending = this.consumePendingLogin(stateFromUrl);\n    if (!pending) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: 'Twitter login session expired or state mismatch.' };\n    }\n\n    const error = params.get('error');\n    if (error) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: params.get('error_description') || error };\n    }\n\n    const code = params.get('code');\n    if (!code) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: 'Twitter authorization code missing from redirect.' };\n    }\n\n    try {\n      const tokens = await this.exchangeAuthorizationCode(code, pending);\n      const profile = await this.fetchProfile(tokens.access_token);\n      const expiresAt = Date.now() + tokens.expires_in * 1000;\n      const scopeArray = tokens.scope.split(' ').filter(Boolean);\n\n      this.persistTokens({\n        accessToken: tokens.access_token,\n        refreshToken: tokens.refresh_token,\n        expiresAt,\n        scope: scopeArray,\n        tokenType: tokens.token_type,\n        userId: profile.id,\n        profile,\n      });\n\n      return {\n        provider: 'twitter',\n        result: {\n          accessToken: {\n            token: tokens.access_token,\n            tokenType: tokens.token_type,\n            expires: new Date(expiresAt).toISOString(),\n            userId: profile.id,\n          },\n          refreshToken: tokens.refresh_token,\n          scope: scopeArray,\n          tokenType: tokens.token_type,\n          expiresIn: tokens.expires_in,\n          profile,\n        },\n      };\n    } catch (err) {\n      if (err instanceof Error) {\n        return { error: err.message };\n      }\n      return { error: 'Twitter login failed unexpectedly.' };\n    } finally {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n    }\n  }\n\n  private async exchangeAuthorizationCode(code: string, pending: TwitterPendingLogin): Promise<TwitterTokenResponse> {\n    const params = new URLSearchParams({\n      grant_type: 'authorization_code',\n      client_id: this.clientId ?? '',\n      code,\n      redirect_uri: pending.redirectUri,\n      code_verifier: pending.codeVerifier,\n    });\n\n    const response = await fetch('https://api.x.com/2/oauth2/token', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Twitter token exchange failed (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as TwitterTokenResponse;\n  }\n\n  private async refreshWithRefreshToken(refreshToken: string): Promise<void> {\n    const params = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: refreshToken,\n      client_id: this.clientId ?? '',\n    });\n\n    const response = await fetch('https://api.x.com/2/oauth2/token', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Twitter refresh failed (${response.status}): ${text}`);\n    }\n\n    const tokens = (await response.json()) as TwitterTokenResponse;\n    const profile = await this.fetchProfile(tokens.access_token);\n    const expiresAt = Date.now() + tokens.expires_in * 1000;\n    const scopeArray = tokens.scope.split(' ').filter(Boolean);\n\n    this.persistTokens({\n      accessToken: tokens.access_token,\n      refreshToken: tokens.refresh_token ?? refreshToken,\n      expiresAt,\n      scope: scopeArray,\n      tokenType: tokens.token_type,\n      userId: profile.id,\n      profile,\n    });\n  }\n\n  private async fetchProfile(accessToken: string): Promise<TwitterProfile> {\n    const fields = ['profile_image_url', 'verified', 'name', 'username'];\n    const response = await fetch(`https://api.x.com/2/users/me?user.fields=${fields.join(',')}`, {\n      headers: {\n        Authorization: `Bearer ${accessToken}`,\n      },\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Unable to fetch Twitter profile (${response.status}): ${text}`);\n    }\n\n    const payload = (await response.json()) as TwitterUserResponse;\n    if (!payload.data) {\n      throw new Error('Twitter profile payload is missing data.');\n    }\n\n    return {\n      id: payload.data.id,\n      username: payload.data.username,\n      name: payload.data.name ?? null,\n      profileImageUrl: payload.data.profile_image_url ?? null,\n      verified: payload.data.verified ?? false,\n      email: (payload.data as { email?: string }).email ?? null,\n    };\n  }\n\n  private persistTokens(tokens: TwitterStoredTokens): void {\n    localStorage.setItem(this.TOKENS_KEY, JSON.stringify(tokens));\n  }\n\n  private getStoredTokens(): TwitterStoredTokens | null {\n    const raw = localStorage.getItem(this.TOKENS_KEY);\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as TwitterStoredTokens;\n    } catch (err) {\n      console.warn('Failed to parse stored Twitter tokens', err);\n      return null;\n    }\n  }\n\n  private persistPendingLogin(state: string, payload: TwitterPendingLogin): void {\n    localStorage.setItem(`${this.STATE_PREFIX}${state}`, JSON.stringify(payload));\n  }\n\n  private consumePendingLogin(state: string): TwitterPendingLogin | null {\n    const key = `${this.STATE_PREFIX}${state}`;\n    const raw = localStorage.getItem(key);\n    localStorage.removeItem(key);\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as TwitterPendingLogin;\n    } catch (err) {\n      console.warn('Failed to parse pending Twitter login payload', err);\n      return null;\n    }\n  }\n\n  private generateState(): string {\n    return [...crypto.getRandomValues(new Uint8Array(16))].map((b) => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  private generateCodeVerifier(): string {\n    const array = new Uint8Array(64);\n    crypto.getRandomValues(array);\n    return Array.from(array)\n      .map((b) => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~'[b % 66])\n      .join('');\n  }\n\n  private async generateCodeChallenge(codeVerifier: string): Promise<string> {\n    const encoder = new TextEncoder();\n    const data = encoder.encode(codeVerifier);\n    const digest = await crypto.subtle.digest('SHA-256', data);\n    return this.base64UrlEncode(new Uint8Array(digest));\n  }\n\n  private base64UrlEncode(buffer: Uint8Array): string {\n    let binary = '';\n    buffer.forEach((b) => (binary += String.fromCharCode(b)));\n    return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n  }\n}\n"]}
+{"version":3,"file":"twitter-provider.js","sourceRoot":"","sources":["../../src/twitter-provider.ts"],"names":[],"mappings":";AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AA4CzC,MAAM,OAAO,kBAAmB,SAAQ,eAAe;IAAvD;;QACU,aAAQ,GAAkB,IAAI,CAAC;QAC/B,gBAAW,GAAkB,IAAI,CAAC;QAClC,kBAAa,GAAa,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACvD,eAAU,GAAG,KAAK,CAAC;QAEV,eAAU,GAAG,sCAAsC,CAAC;QACpD,iBAAY,GAAG,mCAAmC,CAAC;IAiatE,CAAC;IA/ZC,KAAK,CAAC,UAAU,CACd,QAAuB,EACvB,WAA2B,EAC3B,aAAwB,EACxB,UAAoB,EACpB,QAAiB;QAEjB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,IAAI,CAAC;QACvC,IAAI,aAAa,aAAb,aAAa,uBAAb,aAAa,CAAE,MAAM,EAAE,CAAC;YAC1B,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;QACrC,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,aAAV,UAAU,cAAV,UAAU,GAAI,KAAK,CAAC;QACtC,IAAI,CAAC,QAAQ,GAAG,QAAQ,aAAR,QAAQ,cAAR,QAAQ,GAAI,SAAS,CAAC;IACxC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA4B;;QAE5B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QAED,MAAM,WAAW,GAAG,MAAA,MAAA,OAAO,CAAC,WAAW,mCAAI,IAAI,CAAC,WAAW,mCAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACjH,MAAM,MAAM,GAAG,CAAA,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,EAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,KAAK,mCAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QACzE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;QAErE,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC9B,YAAY;YACZ,WAAW;YACX,MAAM;SACP,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEtG,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,aAAa,EAAE,MAAM;YACrB,SAAS,EAAE,IAAI,CAAC,QAAQ;YACxB,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACvB,KAAK;YACL,cAAc,EAAE,aAAa;YAC7B,qBAAqB,EAAE,MAAM;SAC9B,CAAC,CAAC;QACH,IAAI,CAAC,MAAA,OAAO,CAAC,UAAU,mCAAI,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;YACrD,MAAM,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxC,CAAC;QAED,MAAM,OAAO,GAAG,oCAAoC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QACxE,MAAM,KAAK,GAAG,GAAG,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,KAAK,WAAW,MAAM,SAAS,IAAI,QAAQ,GAAG,UAAU,CAAC,CAAC;QAEhH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YAED,uFAAuF;YACvF,MAAM,WAAW,GAAG,iBAAiB,KAAK,EAAE,CAAC;YAC7C,IAAI,gBAAgB,GAA4B,IAAI,CAAC;YAErD,IAAI,CAAC;gBACH,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC;YAAC,WAAM,CAAC;gBACP,gEAAgE;YAClE,CAAC;YAED,MAAM,OAAO,GAAG,CACd,cAA6C,EAC7C,aAAqB,EACrB,cAAsB,EACtB,EAAE;gBACF,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACtD,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,aAAa,CAAC,cAAc,CAAC,CAAC;gBAC9B,IAAI,gBAAgB,EAAE,CAAC;oBACrB,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,kBAAkB,GAAG,CAAC,IAA6B,EAAE,EAAE;gBAC3D,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,gBAAgB,EAAE,CAAC;oBACpC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAClD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,6DAA6D;oBAC7D,MAAM,KAIF,IAGH,EAPK,EACJ,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,YAAY,OAKnB,EAJI,OAAO,cAHN,oBAIL,CAGA,CAAC;oBACF,OAAO,CAAC;wBACN,QAAQ,EAAE,SAAc;wBACxB,MAAM,EAAE,OAAiC;qBACS,CAAC,CAAC;oBACtD,OAAO,IAAI,CAAC;gBACd,CAAC;qBAAM,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,aAAa,EAAE,CAAC;oBACxC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;wBAClD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,MAAM,CAAC,IAAI,KAAK,CAAE,IAAI,CAAC,KAAgB,IAAI,8BAA8B,CAAC,CAAC,CAAC;oBAC5E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;YAEF,uCAAuC;YACvC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,gBAAgB,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;oBACnD,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,CAAC,KAAmB,EAAE,EAAE;gBAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAEnD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;gBAC3C,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;gBAC5D,IAAI,CAAC;oBACH,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,WAAM,CAAC;oBACP,0CAA0C;gBAC5C,CAAC;gBACD,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;YAChD,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBAClD,IAAI,CAAC;oBACH,mFAAmF;oBACnF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBACjB,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;wBAC5D,MAAM,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;oBACxD,CAAC;gBACH,CAAC;gBAAC,WAAM,CAAC;oBACP,8EAA8E;oBAC9E,2EAA2E;oBAC3E,wFAAwF;oBACxF,aAAa,CAAC,mBAAmB,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAA,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,qFAAqF,CAAC,CAAC;QACzG,CAAC;QAED,MAAM,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAQ,EAAE,aAAsB;QACxD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC;QAChC,MAAM,YAAY,GAAG,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;QACvE,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,EAAE,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,mDAAmD,EAAE,CAAC;QACxE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;YACxD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAE3D,IAAI,CAAC,aAAa,CAAC;gBACjB,WAAW,EAAE,MAAM,CAAC,YAAY;gBAChC,YAAY,EAAE,MAAM,CAAC,aAAa;gBAClC,SAAS;gBACT,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,MAAM,CAAC,UAAU;gBAC5B,MAAM,EAAE,OAAO,CAAC,EAAE;gBAClB,OAAO;aACR,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,SAAS;gBACnB,MAAM,EAAE;oBACN,WAAW,EAAE;wBACX,KAAK,EAAE,MAAM,CAAC,YAAY;wBAC1B,SAAS,EAAE,MAAM,CAAC,UAAU;wBAC5B,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;wBAC1C,MAAM,EAAE,OAAO,CAAC,EAAE;qBACnB;oBACD,YAAY,EAAE,MAAM,CAAC,aAAa;oBAClC,KAAK,EAAE,UAAU;oBACjB,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,SAAS,EAAE,MAAM,CAAC,UAAU;oBAC5B,OAAO;iBACR;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACzD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,IAAY,EAAE,OAA4B;;QAChF,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAA,IAAI,CAAC,QAAQ,mCAAI,EAAE;YAC9B,IAAI;YACJ,YAAY,EAAE,OAAO,CAAC,WAAW;YACjC,aAAa,EAAE,OAAO,CAAC,YAAY;SACpC,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kCAAkC,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;IACzD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,YAAoB;;QACxD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,MAAA,IAAI,CAAC,QAAQ,mCAAI,EAAE;SAC/B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,kCAAkC,EAAE;YAC/D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAyB,CAAC;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QACxD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE3D,IAAI,CAAC,aAAa,CAAC;YACjB,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,YAAY,EAAE,MAAA,MAAM,CAAC,aAAa,mCAAI,YAAY;YAClD,SAAS;YACT,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,MAAM,CAAC,UAAU;YAC5B,MAAM,EAAE,OAAO,CAAC,EAAE;YAClB,OAAO;SACR,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,WAAmB;;QAC5C,MAAM,MAAM,GAAG,CAAC,mBAAmB,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,4CAA4C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE;YAC3F,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,WAAW,EAAE;aACvC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;QAC/D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;YACnB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ;YAC/B,IAAI,EAAE,MAAA,OAAO,CAAC,IAAI,CAAC,IAAI,mCAAI,IAAI;YAC/B,eAAe,EAAE,MAAA,OAAO,CAAC,IAAI,CAAC,iBAAiB,mCAAI,IAAI;YACvD,QAAQ,EAAE,MAAA,OAAO,CAAC,IAAI,CAAC,QAAQ,mCAAI,KAAK;YACxC,KAAK,EAAE,MAAC,OAAO,CAAC,IAA2B,CAAC,KAAK,mCAAI,IAAI;SAC1D,CAAC;IACJ,CAAC;IAEO,aAAa,CAAC,MAA2B;QAC/C,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAEO,eAAe;QACrB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;YAC3D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAAa,EAAE,OAA4B;QACrE,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,mBAAmB,CAAC,KAAa;QACvC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAwB,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;YACnE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,oBAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oEAAoE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;aACxF,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,YAAoB;QACtD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,eAAe,CAAC,MAAkB;QACxC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;CACF","sourcesContent":["import { BaseSocialLogin } from './base';\nimport type {\n  AuthorizationCode,\n  LoginResult,\n  ProviderResponseMap,\n  TwitterLoginOptions,\n  TwitterLoginResponse,\n  TwitterProfile,\n} from './definitions';\n\ninterface TwitterTokenResponse {\n  token_type: 'bearer';\n  expires_in: number;\n  access_token: string;\n  scope: string;\n  refresh_token?: string;\n}\n\ninterface TwitterUserResponse {\n  data: {\n    id: string;\n    name: string;\n    username: string;\n    profile_image_url?: string;\n    verified?: boolean;\n  } & { email?: string };\n}\n\ninterface TwitterPendingLogin {\n  codeVerifier: string;\n  redirectUri: string;\n  scopes: string[];\n}\n\ninterface TwitterStoredTokens {\n  accessToken: string;\n  refreshToken?: string;\n  expiresAt: number;\n  scope: string[];\n  tokenType: string;\n  userId?: string;\n  profile?: TwitterProfile;\n}\n\nexport class TwitterSocialLogin extends BaseSocialLogin {\n  private clientId: string | null = null;\n  private redirectUrl: string | null = null;\n  private defaultScopes: string[] = ['tweet.read', 'users.read'];\n  private forceLogin = false;\n  private audience?: string;\n  private readonly TOKENS_KEY = 'capgo_social_login_twitter_tokens_v1';\n  private readonly STATE_PREFIX = 'capgo_social_login_twitter_state_';\n\n  async initialize(\n    clientId: string | null,\n    redirectUrl?: string | null,\n    defaultScopes?: string[],\n    forceLogin?: boolean,\n    audience?: string,\n  ): Promise<void> {\n    this.clientId = clientId;\n    this.redirectUrl = redirectUrl ?? null;\n    if (defaultScopes?.length) {\n      this.defaultScopes = defaultScopes;\n    }\n    this.forceLogin = forceLogin ?? false;\n    this.audience = audience ?? undefined;\n  }\n\n  async login<T extends 'twitter'>(\n    options: TwitterLoginOptions,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    if (!this.clientId) {\n      throw new Error('Twitter Client ID not configured. Call initialize() first.');\n    }\n\n    const redirectUri = options.redirectUrl ?? this.redirectUrl ?? window.location.origin + window.location.pathname;\n    const scopes = options.scopes?.length ? options.scopes : this.defaultScopes;\n    const state = options.state ?? this.generateState();\n    const codeVerifier = options.codeVerifier ?? this.generateCodeVerifier();\n    const codeChallenge = await this.generateCodeChallenge(codeVerifier);\n\n    this.persistPendingLogin(state, {\n      codeVerifier,\n      redirectUri,\n      scopes,\n    });\n\n    localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'twitter', state }));\n\n    const params = new URLSearchParams({\n      response_type: 'code',\n      client_id: this.clientId,\n      redirect_uri: redirectUri,\n      scope: scopes.join(' '),\n      state,\n      code_challenge: codeChallenge,\n      code_challenge_method: 'S256',\n    });\n    if ((options.forceLogin ?? this.forceLogin) === true) {\n      params.set('force_login', 'true');\n    }\n    if (this.audience) {\n      params.set('audience', this.audience);\n    }\n\n    const authUrl = `https://x.com/i/oauth2/authorize?${params.toString()}`;\n    const width = 500;\n    const height = 650;\n    const left = window.screenX + (window.outerWidth - width) / 2;\n    const top = window.screenY + (window.outerHeight - height) / 2;\n\n    const popup = window.open(authUrl, 'XLogin', `width=${width},height=${height},left=${left},top=${top},popup=1`);\n\n    return new Promise((resolve, reject) => {\n      if (!popup) {\n        reject(new Error('Unable to open login window. Please allow popups.'));\n        return;\n      }\n\n      // Use BroadcastChannel for cross-origin communication (works when postMessage doesn't)\n      const channelName = `twitter_oauth_${state}`;\n      let broadcastChannel: BroadcastChannel | null = null;\n\n      try {\n        broadcastChannel = new BroadcastChannel(channelName);\n      } catch {\n        // BroadcastChannel not supported, fall back to postMessage only\n      }\n\n      const cleanup = (\n        messageHandler: (event: MessageEvent) => void,\n        timeoutHandle: number,\n        intervalHandle: number,\n      ) => {\n        window.removeEventListener('message', messageHandler);\n        clearTimeout(timeoutHandle);\n        clearInterval(intervalHandle);\n        if (broadcastChannel) {\n          broadcastChannel.close();\n        }\n      };\n\n      const handleOAuthMessage = (data: Record<string, unknown>) => {\n        if (data?.type === 'oauth-response') {\n          if (data?.provider && data.provider !== 'twitter') {\n            return false;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          // eslint-disable-next-line @typescript-eslint/no-unused-vars\n          const {\n            provider: _ignoredProvider,\n            type: _ignoredType,\n            ...payload\n          } = data as unknown as TwitterLoginResponse & {\n            provider?: string;\n            type?: string;\n          };\n          resolve({\n            provider: 'twitter' as T,\n            result: payload as ProviderResponseMap[T],\n          } as { provider: T; result: ProviderResponseMap[T] });\n          return true;\n        } else if (data?.type === 'oauth-error') {\n          if (data?.provider && data.provider !== 'twitter') {\n            return false;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          reject(new Error((data.error as string) || 'Twitter login was cancelled.'));\n          return true;\n        }\n        return false;\n      };\n\n      // Listen for BroadcastChannel messages\n      if (broadcastChannel) {\n        broadcastChannel.onmessage = (event: MessageEvent) => {\n          handleOAuthMessage(event.data);\n        };\n      }\n\n      const messageHandler = (event: MessageEvent) => {\n        if (event.origin !== window.location.origin) {\n          return;\n        }\n        handleOAuthMessage(event.data);\n      };\n\n      window.addEventListener('message', messageHandler);\n\n      const timeoutHandle = window.setTimeout(() => {\n        cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n        try {\n          popup.close();\n        } catch {\n          // Ignore cross-origin errors when closing\n        }\n        reject(new Error('Twitter login timed out.'));\n      }, 300000);\n\n      const popupClosedInterval = window.setInterval(() => {\n        try {\n          // Check if popup is closed - this may throw cross-origin errors for some providers\n          if (popup.closed) {\n            cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n            reject(new Error('Twitter login window was closed.'));\n          }\n        } catch {\n          // Cross-origin error when checking popup.closed - this happens when the popup\n          // navigates to a third-party OAuth provider with strict security settings.\n          // We can't detect if the window was closed, so we rely on timeout and message handlers.\n          clearInterval(popupClosedInterval);\n        }\n      }, 1000);\n    });\n  }\n\n  async logout(): Promise<void> {\n    localStorage.removeItem(this.TOKENS_KEY);\n  }\n\n  async isLoggedIn(): Promise<{ isLoggedIn: boolean }> {\n    const tokens = this.getStoredTokens();\n    if (!tokens) {\n      return { isLoggedIn: false };\n    }\n    const isValid = tokens.expiresAt > Date.now();\n    if (!isValid) {\n      localStorage.removeItem(this.TOKENS_KEY);\n    }\n    return { isLoggedIn: isValid };\n  }\n\n  async getAuthorizationCode(): Promise<AuthorizationCode> {\n    const tokens = this.getStoredTokens();\n    if (!tokens) {\n      throw new Error('Twitter access token is not available.');\n    }\n    return {\n      accessToken: tokens.accessToken,\n    };\n  }\n\n  async refresh(): Promise<void> {\n    const tokens = this.getStoredTokens();\n    if (!tokens?.refreshToken) {\n      throw new Error('No Twitter refresh token is available. Include offline.access scope to receive one.');\n    }\n\n    await this.refreshWithRefreshToken(tokens.refreshToken);\n  }\n\n  async handleOAuthRedirect(url: URL, expectedState?: string): Promise<LoginResult | { error: string } | null> {\n    const params = url.searchParams;\n    const stateFromUrl = expectedState ?? params.get('state');\n    if (!stateFromUrl) {\n      return null;\n    }\n\n    const pending = this.consumePendingLogin(stateFromUrl);\n    if (!pending) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: 'Twitter login session expired or state mismatch.' };\n    }\n\n    const error = params.get('error');\n    if (error) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: params.get('error_description') || error };\n    }\n\n    const code = params.get('code');\n    if (!code) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: 'Twitter authorization code missing from redirect.' };\n    }\n\n    try {\n      const tokens = await this.exchangeAuthorizationCode(code, pending);\n      const profile = await this.fetchProfile(tokens.access_token);\n      const expiresAt = Date.now() + tokens.expires_in * 1000;\n      const scopeArray = tokens.scope.split(' ').filter(Boolean);\n\n      this.persistTokens({\n        accessToken: tokens.access_token,\n        refreshToken: tokens.refresh_token,\n        expiresAt,\n        scope: scopeArray,\n        tokenType: tokens.token_type,\n        userId: profile.id,\n        profile,\n      });\n\n      return {\n        provider: 'twitter',\n        result: {\n          accessToken: {\n            token: tokens.access_token,\n            tokenType: tokens.token_type,\n            expires: new Date(expiresAt).toISOString(),\n            userId: profile.id,\n          },\n          refreshToken: tokens.refresh_token,\n          scope: scopeArray,\n          tokenType: tokens.token_type,\n          expiresIn: tokens.expires_in,\n          profile,\n        },\n      };\n    } catch (err) {\n      if (err instanceof Error) {\n        return { error: err.message };\n      }\n      return { error: 'Twitter login failed unexpectedly.' };\n    } finally {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n    }\n  }\n\n  private async exchangeAuthorizationCode(code: string, pending: TwitterPendingLogin): Promise<TwitterTokenResponse> {\n    const params = new URLSearchParams({\n      grant_type: 'authorization_code',\n      client_id: this.clientId ?? '',\n      code,\n      redirect_uri: pending.redirectUri,\n      code_verifier: pending.codeVerifier,\n    });\n\n    const response = await fetch('https://api.x.com/2/oauth2/token', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Twitter token exchange failed (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as TwitterTokenResponse;\n  }\n\n  private async refreshWithRefreshToken(refreshToken: string): Promise<void> {\n    const params = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: refreshToken,\n      client_id: this.clientId ?? '',\n    });\n\n    const response = await fetch('https://api.x.com/2/oauth2/token', {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Twitter refresh failed (${response.status}): ${text}`);\n    }\n\n    const tokens = (await response.json()) as TwitterTokenResponse;\n    const profile = await this.fetchProfile(tokens.access_token);\n    const expiresAt = Date.now() + tokens.expires_in * 1000;\n    const scopeArray = tokens.scope.split(' ').filter(Boolean);\n\n    this.persistTokens({\n      accessToken: tokens.access_token,\n      refreshToken: tokens.refresh_token ?? refreshToken,\n      expiresAt,\n      scope: scopeArray,\n      tokenType: tokens.token_type,\n      userId: profile.id,\n      profile,\n    });\n  }\n\n  private async fetchProfile(accessToken: string): Promise<TwitterProfile> {\n    const fields = ['profile_image_url', 'verified', 'name', 'username'];\n    const response = await fetch(`https://api.x.com/2/users/me?user.fields=${fields.join(',')}`, {\n      headers: {\n        Authorization: `Bearer ${accessToken}`,\n      },\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Unable to fetch Twitter profile (${response.status}): ${text}`);\n    }\n\n    const payload = (await response.json()) as TwitterUserResponse;\n    if (!payload.data) {\n      throw new Error('Twitter profile payload is missing data.');\n    }\n\n    return {\n      id: payload.data.id,\n      username: payload.data.username,\n      name: payload.data.name ?? null,\n      profileImageUrl: payload.data.profile_image_url ?? null,\n      verified: payload.data.verified ?? false,\n      email: (payload.data as { email?: string }).email ?? null,\n    };\n  }\n\n  private persistTokens(tokens: TwitterStoredTokens): void {\n    localStorage.setItem(this.TOKENS_KEY, JSON.stringify(tokens));\n  }\n\n  private getStoredTokens(): TwitterStoredTokens | null {\n    const raw = localStorage.getItem(this.TOKENS_KEY);\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as TwitterStoredTokens;\n    } catch (err) {\n      console.warn('Failed to parse stored Twitter tokens', err);\n      return null;\n    }\n  }\n\n  private persistPendingLogin(state: string, payload: TwitterPendingLogin): void {\n    localStorage.setItem(`${this.STATE_PREFIX}${state}`, JSON.stringify(payload));\n  }\n\n  private consumePendingLogin(state: string): TwitterPendingLogin | null {\n    const key = `${this.STATE_PREFIX}${state}`;\n    const raw = localStorage.getItem(key);\n    localStorage.removeItem(key);\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as TwitterPendingLogin;\n    } catch (err) {\n      console.warn('Failed to parse pending Twitter login payload', err);\n      return null;\n    }\n  }\n\n  private generateState(): string {\n    return [...crypto.getRandomValues(new Uint8Array(16))].map((b) => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  private generateCodeVerifier(): string {\n    const array = new Uint8Array(64);\n    crypto.getRandomValues(array);\n    return Array.from(array)\n      .map((b) => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~'[b % 66])\n      .join('');\n  }\n\n  private async generateCodeChallenge(codeVerifier: string): Promise<string> {\n    const encoder = new TextEncoder();\n    const data = encoder.encode(codeVerifier);\n    const digest = await crypto.subtle.digest('SHA-256', data);\n    return this.base64UrlEncode(new Uint8Array(digest));\n  }\n\n  private base64UrlEncode(buffer: Uint8Array): string {\n    let binary = '';\n    buffer.forEach((b) => (binary += String.fromCharCode(b)));\n    return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n  }\n}\n"]}