@descope/web-component 4.4.0 → 4.4.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. package/dist/cjs/descope-wc/BaseDescopeWc.js +1 -1
  2. package/dist/cjs/helpers/helpers.js +1 -1
  3. package/dist/cjs/helpers/helpers.js.map +1 -1
  4. package/dist/esm/descope-wc/BaseDescopeWc.js +1 -1
  5. package/dist/esm/helpers/helpers.js +1 -1
  6. package/dist/esm/helpers/helpers.js.map +1 -1
  7. package/dist/index.js +2 -2
  8. package/package.json +1 -1
package/dist/esm/helpers/helpers.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"helpers.js","sources":["../../../src/lib/helpers/helpers.ts"],"sourcesContent":["import {\n ASSETS_FOLDER,\n BASE_CONTENT_URL,\n DESCOPE_ATTRIBUTE_PREFIX,\n URL_CODE_PARAM_NAME,\n URL_ERR_PARAM_NAME,\n URL_RUN_IDS_PARAM_NAME,\n URL_TOKEN_PARAM_NAME,\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n OIDC_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_STATE_ID_PARAM_NAME,\n WSFED_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_USERNAME_PARAM_NAME,\n SSO_APP_ID_PARAM_NAME,\n CUSTOM_APP_ID_PARAM_NAME,\n OIDC_LOGIN_HINT_PARAM_NAME,\n DESCOPE_IDP_INITIATED_PARAM_NAME,\n OVERRIDE_CONTENT_URL,\n OIDC_PROMPT_PARAM_NAME,\n OIDC_RESOURCE_PARAM_NAME,\n OIDC_ERROR_REDIRECT_URI_PARAM_NAME,\n THIRD_PARTY_APP_ID_PARAM_NAME,\n THIRD_PARTY_APP_STATE_ID_PARAM_NAME,\n APPLICATION_SCOPES_PARAM_NAME,\n SDK_SCRIPT_RESULTS_KEY,\n URL_REDIRECT_MODE_PARAM_NAME,\n} from '../constants';\nimport { EXCLUDED_STATE_KEYS } from '../constants/customScreens';\nimport {\n AutoFocusOptions,\n ComponentsConfig,\n CustomScreenData,\n CustomScreenState,\n Direction,\n ScreenState,\n SSOQueryParams,\n StepState,\n} from '../types';\n\nconst MD_COMPONENTS = ['descope-enriched-text'];\n\n/**\n * Wraps an async function with retry logic\n * @param fn - The async function to wrap\n * @param timeoutMs - Time to wait between retries in milliseconds\n * @param maxRetries - Maximum number of retry attempts\n * @returns A new function with retry logic\n */\nexport function withRetry<TArgs extends any[], TReturn>(\n fn: (...args: TArgs) => Promise<TReturn>,\n timeoutMs: number,\n maxRetries: number,\n): (...args: TArgs) => Promise<TReturn> {\n return async (...args: TArgs): Promise<TReturn> => {\n let lastError: any;\n const totalAttempts = maxRetries + 1; // initial attempt + retries\n\n // eslint-disable-next-line no-plusplus\n for (let attempt = 0; attempt < totalAttempts; attempt++) {\n try {\n // eslint-disable-next-line no-await-in-loop\n return await fn(...args);\n } catch (error) {\n lastError = error;\n\n // Don't wait after the last attempt\n if (attempt < maxRetries) {\n // eslint-disable-next-line no-await-in-loop\n await new Promise((resolve) => {\n setTimeout(resolve, timeoutMs * Math.pow(2, attempt + 1));\n });\n }\n }\n }\n\n // All attempts failed, throw the last error\n throw lastError;\n };\n}\n\nfunction getUrlParam(paramName: string) {\n const urlParams = new URLSearchParams(window.location.search);\n\n return urlParams.get(paramName);\n}\n\nfunction getFlowUrlParam() {\n return getUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nfunction setFlowUrlParam(id: string) {\n if (window.history.pushState && id !== getFlowUrlParam()) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.set(URL_RUN_IDS_PARAM_NAME, id);\n newUrl.search = search.toString();\n window.history.pushState({}, '', newUrl.toString());\n }\n}\n\nfunction resetUrlParam(paramName: string) {\n if (window.history.replaceState && getUrlParam(paramName)) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.delete(paramName);\n newUrl.search = search.toString();\n window.history.replaceState({}, '', newUrl.toString());\n }\n}\n\nconst getFlowIdFromExecId = (executionId: string) => {\n const regex = /(.*)\\|#\\|.*/;\n return regex.exec(executionId)?.[1] || '';\n};\n\nexport async function fetchContent<T extends 'text' | 'json'>(\n url: string,\n returnType: T,\n): Promise<{\n body: T extends 'json' ? Record<string, any> : string;\n headers: Record<string, string>;\n}> {\n const res = await fetch(url, { cache: 'default' });\n if (!res.ok) {\n throw Error(`Error fetching URL ${url} [${res.status}]`);\n }\n\n return {\n body: await res[returnType || 'text'](),\n headers: Object.fromEntries(res.headers.entries()),\n };\n}\n\nconst pathJoin = (...paths: string[]) => paths.join('/').replace(/\\/+/g, '/'); // preventing duplicate separators\n\nexport function getContentUrl({\n projectId,\n filename,\n assetsFolder = ASSETS_FOLDER,\n baseUrl,\n}: {\n projectId: string;\n filename: string;\n assetsFolder?: string;\n baseUrl?: string;\n}) {\n const url = new URL(OVERRIDE_CONTENT_URL || baseUrl || BASE_CONTENT_URL);\n url.pathname = pathJoin(url.pathname, projectId, assetsFolder, filename);\n\n return url.toString();\n}\n\nexport function getAnimationDirection(\n currentIdxStr: string,\n prevIdxStr: string,\n) {\n if (!prevIdxStr) return undefined;\n\n const currentIdx = +currentIdxStr;\n const prevIdx = +prevIdxStr;\n\n if (Number.isNaN(currentIdx) || Number.isNaN(prevIdx)) return undefined;\n if (currentIdx > prevIdx) return Direction.forward;\n if (currentIdx < prevIdx) return Direction.backward;\n return undefined;\n}\n\nexport const getRunIdsFromUrl = (flowId: string) => {\n let [executionId = '', stepId = ''] = (getFlowUrlParam() || '').split('_');\n const executionFlowId = getFlowIdFromExecId(executionId);\n\n // if the flow id does not match, this execution id is not for this flow\n if (!flowId || (executionFlowId && executionFlowId !== flowId)) {\n executionId = '';\n stepId = '';\n }\n\n return { executionId, stepId, executionFlowId };\n};\n\nexport const setRunIdsOnUrl = (executionId: string, stepId: string) => {\n setFlowUrlParam([executionId, stepId].join('_'));\n};\n\nexport function isChromium() {\n return (\n /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor)\n );\n}\n\n// Detect Safari running on iPhone specifically.\nfunction isIphoneSafari() {\n const ua = navigator.userAgent || '';\n const isIphone = /\\b(iPhone)\\b/.test(ua);\n // Safari UA contains 'Safari' and usually 'Version/X', exclude other iOS browsers\n const isSafari =\n /Safari/.test(ua) && !/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(ua);\n\n return isIphone && isSafari;\n}\n\nexport function clearRunIdsFromUrl() {\n resetUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nexport function getTokenFromUrl() {\n return getUrlParam(URL_TOKEN_PARAM_NAME) || undefined;\n}\n\nexport function clearTokenFromUrl() {\n resetUrlParam(URL_TOKEN_PARAM_NAME);\n}\n\nexport function getCodeFromUrl() {\n return getUrlParam(URL_CODE_PARAM_NAME) || undefined;\n}\n\nexport function getIsPopupFromUrl() {\n return getUrlParam(URL_REDIRECT_MODE_PARAM_NAME) === 'popup';\n}\n\nexport function getExchangeErrorFromUrl() {\n return getUrlParam(URL_ERR_PARAM_NAME) || undefined;\n}\n\nexport function clearCodeFromUrl() {\n resetUrlParam(URL_CODE_PARAM_NAME);\n}\n\nexport function clearIsPopupFromUrl() {\n resetUrlParam(URL_REDIRECT_MODE_PARAM_NAME);\n}\n\nexport function clearExchangeErrorFromUrl() {\n resetUrlParam(URL_ERR_PARAM_NAME);\n}\n\nexport function getRedirectAuthFromUrl() {\n const redirectAuthCodeChallenge = getUrlParam(\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n );\n const redirectAuthCallbackUrl = getUrlParam(\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n );\n const redirectAuthBackupCallbackUri = getUrlParam(\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n );\n const redirectAuthInitiator = getUrlParam(\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n );\n return {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n };\n}\n\nexport function getOIDCIDPParamFromUrl() {\n return getUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearOIDCIDPParamFromUrl() {\n resetUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPParamFromUrl() {\n return getUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearSAMLIDPParamFromUrl() {\n resetUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getWSFedIDPParamFromUrl() {\n return getUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearWSFedIDPParamFromUrl() {\n resetUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPUsernameParamFromUrl() {\n return getUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function clearSAMLIDPUsernameParamFromUrl() {\n resetUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function getDescopeIDPInitiatedParamFromUrl() {\n return getUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function clearDescopeIDPInitiatedParamFromUrl() {\n resetUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function getSSOAppIdParamFromUrl() {\n return getUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function getCustomAppIdParamFromUrl() {\n return getUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function clearSSOAppIdParamFromUrl() {\n resetUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function clearCustomAppIdParamFromUrl() {\n resetUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppStateIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppStateIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function getApplicationScopesParamFromUrl() {\n return getUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function clearApplicationScopesParamFromUrl() {\n resetUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function getOIDCLoginHintParamFromUrl() {\n return getUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function clearOIDCLoginHintParamFromUrl() {\n resetUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function getOIDCPromptParamFromUrl() {\n return getUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function clearOIDCPromptParamFromUrl() {\n resetUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function getOIDCErrorRedirectUriParamFromUrl() {\n return getUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function clearOIDCErrorRedirectUriParamFromUrl() {\n resetUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function getOIDCResourceParamFromUrl() {\n return getUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport function clearOIDCResourceParamFromUrl() {\n resetUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport const camelCase = (s: string) =>\n s.replace(/-./g, (x) => x[1].toUpperCase());\n\nexport const createIsChanged =\n <T extends Record<string, any>>(state: T, prevState: T) =>\n (attrName: keyof T) =>\n state[attrName] !== prevState[attrName];\n\nexport const getElementDescopeAttributes = (ele: HTMLElement) =>\n Array.from(ele?.attributes || []).reduce((acc, attr) => {\n const descopeAttrName = new RegExp(\n `^${DESCOPE_ATTRIBUTE_PREFIX}(\\\\S+)$`,\n ).exec(attr.name)?.[1];\n\n return !descopeAttrName\n ? acc\n : Object.assign(acc, { [descopeAttrName]: attr.value });\n }, {});\n\nexport const getFlowConfig = (config: Record<string, any>, flowId: string) =>\n config?.flows?.[flowId] || {};\n\nexport const handleUrlParams = (\n flowId: string,\n logger: { debug: (...data: any[]) => void },\n) => {\n const { executionId, stepId, executionFlowId } = getRunIdsFromUrl(flowId);\n\n // if the flow id does not match, we do not want to read & remove any query params\n // because it's probably belongs to another flow\n if (executionFlowId && flowId !== executionFlowId) {\n logger.debug(\n 'Flow id does not match the execution flow id, skipping url params handling',\n );\n return { ssoQueryParams: {} };\n }\n\n if (executionId || stepId) {\n clearRunIdsFromUrl();\n }\n\n const token = getTokenFromUrl();\n if (token) {\n clearTokenFromUrl();\n }\n\n const code = getCodeFromUrl();\n if (code) {\n clearCodeFromUrl();\n }\n\n // this is used for oauth when we want to open the provider login page in a new tab\n const isPopup = getIsPopupFromUrl();\n if (isPopup) {\n clearIsPopupFromUrl();\n }\n\n const exchangeError = getExchangeErrorFromUrl();\n if (exchangeError) {\n clearExchangeErrorFromUrl();\n }\n\n // these query params are retained to allow the flow to be refreshed\n // without losing the redirect auth state\n const {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n } = getRedirectAuthFromUrl();\n\n const oidcIdpStateId = getOIDCIDPParamFromUrl();\n if (oidcIdpStateId) {\n clearOIDCIDPParamFromUrl();\n }\n\n const samlIdpStateId = getSAMLIDPParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPParamFromUrl();\n }\n\n const wsfedIdpStateId = getWSFedIDPParamFromUrl();\n if (wsfedIdpStateId) {\n clearWSFedIDPParamFromUrl();\n }\n\n const samlIdpUsername = getSAMLIDPUsernameParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPUsernameParamFromUrl();\n }\n\n const descopeIdpInitiated = getDescopeIDPInitiatedParamFromUrl();\n if (descopeIdpInitiated) {\n clearDescopeIDPInitiatedParamFromUrl();\n }\n\n const ssoAppId = getSSOAppIdParamFromUrl();\n if (ssoAppId) {\n clearSSOAppIdParamFromUrl();\n }\n\n const customAppId = getCustomAppIdParamFromUrl();\n if (customAppId) {\n clearCustomAppIdParamFromUrl();\n }\n\n const thirdPartyAppId = getThirdPartyAppIdParamFromUrl();\n if (thirdPartyAppId) {\n clearThirdPartyAppIdParamFromUrl();\n }\n\n const thirdPartyAppStateId = getThirdPartyAppStateIdParamFromUrl();\n if (thirdPartyAppStateId) {\n clearThirdPartyAppStateIdParamFromUrl();\n }\n\n const applicationScopes = getApplicationScopesParamFromUrl();\n if (applicationScopes) {\n clearApplicationScopesParamFromUrl();\n }\n\n const oidcLoginHint = getOIDCLoginHintParamFromUrl();\n if (oidcLoginHint) {\n clearOIDCLoginHintParamFromUrl();\n }\n\n const oidcPrompt = getOIDCPromptParamFromUrl();\n if (oidcPrompt) {\n clearOIDCPromptParamFromUrl();\n }\n\n const oidcErrorRedirectUri = getOIDCErrorRedirectUriParamFromUrl();\n if (oidcErrorRedirectUri) {\n clearOIDCErrorRedirectUriParamFromUrl();\n }\n\n const oidcResource = getOIDCResourceParamFromUrl();\n if (oidcResource) {\n clearOIDCResourceParamFromUrl();\n }\n\n const idpInitiatedVal = descopeIdpInitiated === 'true';\n\n return {\n executionId,\n stepId,\n token,\n code,\n isPopup,\n exchangeError,\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n ssoQueryParams: {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n descopeIdpInitiated: idpInitiatedVal,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n },\n };\n};\n\nexport const loadFont = (url: string) => {\n if (!url) return;\n\n const font = document.createElement('link');\n font.href = url;\n font.rel = 'stylesheet';\n document.head.appendChild(font);\n};\n\nconst compareArrays = (array1: any[], array2: any[]) =>\n array1.length === array2.length &&\n array1.every((value: any, index: number) => value === array2[index]);\n\nexport const withMemCache = <I extends any[], O>(fn: (...args: I) => O) => {\n let prevArgs: any[];\n let cache: any;\n return Object.assign(\n (...args: I) => {\n if (prevArgs && compareArrays(prevArgs, args)) return cache as O;\n\n prevArgs = args;\n cache = fn(...args);\n\n return cache as O;\n },\n {\n reset: () => {\n prevArgs = undefined;\n cache = undefined;\n },\n },\n );\n};\n\nexport const FOCUSABLE_INPUTS_SELECTOR =\n '*[name]:not([auto-focus=\"false\"]):not([aria-hidden=\"true\"])';\n\nexport const handleAutoFocus = (\n ele: HTMLElement,\n autoFocus: AutoFocusOptions,\n isFirstScreen: boolean,\n) => {\n if (\n autoFocus === true ||\n (autoFocus === 'skipFirstScreen' && !isFirstScreen)\n ) {\n // focus the first visible input\n const firstVisibleInput: HTMLInputElement = ele.querySelector(\n FOCUSABLE_INPUTS_SELECTOR,\n );\n setTimeout(() => {\n firstVisibleInput?.focus();\n });\n }\n};\n\nexport const handleReportValidityOnBlur = (\n rootEle: HTMLElement,\n // Best-effort callback invoked with the input that failed validation on\n // blur, so callers can track client-side validation errors. Never throws\n // into the blur handler.\n onInvalid?: (input: HTMLInputElement) => void,\n) => {\n rootEle.querySelectorAll('*[name]').forEach((ele: HTMLInputElement) => {\n ele.addEventListener('blur', () => {\n const onBlur = () => {\n // reportValidity also focus the element if it's invalid\n // in order to prevent this we need to override the focus method\n const origFocus = ele.focus;\n // eslint-disable-next-line no-param-reassign\n ele.focus = () => {};\n const valid = ele.reportValidity?.();\n if (onInvalid && valid === false) {\n onInvalid(ele);\n }\n setTimeout(() => {\n // eslint-disable-next-line no-param-reassign\n ele.focus = origFocus;\n });\n };\n\n const isInputAlreadyInErrorState = ele.getAttribute('invalid') === 'true';\n\n if (isInputAlreadyInErrorState || ele.value?.length) {\n onBlur();\n return;\n }\n\n // If the input is not in an error state, has no value, and a `formnovalidate` button was clicked,\n // we want to prevent triggering validation.\n // This handles a case where a required input was focused, and the user then clicked a social login button —\n // in that case, we don't want the required error message to flash for a split second.\n const ref = { timer: undefined };\n\n const onClick = (e: MouseEvent) => {\n const target = e.target as HTMLElement;\n\n if (target.getAttribute('formnovalidate') === 'true') {\n clearTimeout(ref.timer);\n ref.timer = undefined;\n }\n };\n\n ref.timer = setTimeout(() => {\n rootEle.removeEventListener('click', onClick);\n onBlur();\n ref.timer = undefined;\n }, 150);\n\n rootEle.addEventListener('click', onClick, { once: true });\n });\n });\n};\n\n/**\n * To return a fallback value in case the timeout expires and the promise\n * isn't fulfilled:\n *\n * const promise = loadUserCount();\n * const count = await timeoutPromise(2000, promise, 0);\n *\n * Or without a fallback value to just throw an error if the timeout expires:\n *\n * try {\n * count = await timeoutPromise(2000, promise);\n * }\n *\n * Fallback is returned only in case of timeout, so if the passed promise rejects\n * the fallback value is not used, and the returned promise will throw as well.\n */\nexport function timeoutPromise<T>(\n timeout: number,\n promise: Promise<T>,\n fallback?: T,\n): Promise<T> {\n return new Promise((resolve, reject) => {\n let expired = false;\n const timer = setTimeout(() => {\n expired = true;\n if (fallback !== undefined) {\n resolve(fallback);\n } else {\n reject(new Error(`Promise timed out after ${timeout} ms`));\n }\n }, timeout);\n\n promise\n .then((value) => {\n if (!expired) {\n clearTimeout(timer);\n resolve(value);\n }\n })\n .catch((error) => {\n if (!expired) {\n clearTimeout(timer);\n reject(error);\n }\n });\n });\n}\n\nexport const getChromiumVersion = (): number => {\n const brands = (navigator as any)?.userAgentData?.brands;\n const found = brands?.find(\n ({ brand, version }) => brand === 'Chromium' && parseFloat(version),\n );\n return found ? found.version : 0;\n};\n\n// As an optimization - We can show first screen if we have startScreenId and we don't have any other of the ssoAppId/oidcIdpStateId/samlIdp params\n// - If there startScreenId it means that the sdk can show the first screen and we don't need to wait for the sdk to return the first screen\n// - If there is any one else of the other params (like oidcIdpStateId, ..) - we can't skip this call because descope may decide not to show the first screen (in cases like a user is already logged in)\nexport const showFirstScreenOnExecutionInit = (\n startScreenId: string,\n {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n }: SSOQueryParams,\n): boolean =>\n !!startScreenId &&\n !oidcIdpStateId &&\n !samlIdpStateId &&\n !wsfedIdpStateId &&\n !samlIdpUsername &&\n !ssoAppId &&\n !customAppId &&\n !oidcLoginHint &&\n !oidcPrompt &&\n !oidcErrorRedirectUri &&\n !oidcResource &&\n !thirdPartyAppId &&\n !thirdPartyAppStateId &&\n !applicationScopes;\n\nexport const injectSamlIdpForm = (\n url: string,\n samlResponse: string,\n relayState: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n formEle.innerHTML = `\n <input type=\"hidden\" role=\"saml-response\" name=\"SAMLResponse\" value=\"${samlResponse}\" />\n <input type=\"hidden\" role=\"saml-relay-state\" name=\"RelayState\" value=\"${relayState}\" />\n <input style=\"display: none;\" id=\"SAMLSubmitButton\" type=\"submit\" value=\"Continue\" />\n `;\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const injectWsFedIdpForm = (\n url: string,\n wresult: string,\n wctx: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n\n // Use DOM APIs to set values safely — wresult is raw XML that would break innerHTML interpolation\n const createHiddenInput = (name: string, value: string) => {\n const input = document.createElement('input');\n input.type = 'hidden';\n input.name = name;\n input.value = value;\n return input;\n };\n\n formEle.appendChild(createHiddenInput('wa', 'wsignin1.0'));\n formEle.appendChild(createHiddenInput('wresult', wresult));\n formEle.appendChild(createHiddenInput('wctx', wctx));\n\n const submitBtn = document.createElement('input');\n submitBtn.type = 'submit';\n submitBtn.id = 'WSFedSubmitButton';\n submitBtn.value = 'Continue';\n submitBtn.style.display = 'none';\n formEle.appendChild(submitBtn);\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const submitForm = (formEle: HTMLFormElement) => formEle?.submit();\n\nexport const getFirstNonEmptyValue = (obj: object, keys: string[]) => {\n const firstNonEmptyKey = keys.find((key) => obj[key]);\n return firstNonEmptyKey ? obj[firstNonEmptyKey] : null;\n};\n\nexport const leadingDebounce = <T extends (...args: any[]) => void>(\n func: T,\n wait = 100,\n) => {\n let timeout: NodeJS.Timeout;\n return function executedFunction(...args) {\n if (!timeout) func.apply(this, args);\n clearTimeout(timeout);\n timeout = setTimeout(() => {\n timeout = null;\n }, wait);\n } as T;\n};\n\nexport const clearPreviousExternalInputs = () => {\n document\n .querySelectorAll('[data-hidden-input=\"true\"]')\n .forEach((ele) => ele.remove());\n};\n\nexport const shouldHandleMarkdown = (compName: string) =>\n MD_COMPONENTS.includes(compName);\n\nconst omitBy = <T extends Record<string, any>>(\n obj: T,\n predicate: (value: any, key: keyof T) => boolean,\n): T =>\n Object.fromEntries(\n Object.entries(obj).filter(\n ([key, value]) => !predicate(value, key as keyof T),\n ),\n ) as T;\n\n// Reads the `data-name` value out of a `[data-name=\"x\"]` selector (either quote style).\nconst dataNameOf = (selector: string): string | undefined =>\n selector.match(/\\[data-name=[\"']([^\"']+)[\"']\\]/)?.[1];\n\nconst PASSWORD_POLICY_KEYS: Record<string, string> = {\n minLength: 'data-password-policy-value-minlength',\n strength: 'data-password-policy-value-passwordstrength',\n disallowedChars: 'data-password-policy-value-disallowedchars',\n email: 'data-password-policy-value-email',\n activePolicies: 'active-policies',\n availablePolicies: 'available-policies',\n};\n\n// Renames the backend's password-policy attribute keys to clean names.\n// Returns undefined when the screen has no password policy.\nconst normalizePasswordPolicy = (\n newPassword: Record<string, any> | undefined,\n): Record<string, unknown> | undefined => {\n if (!newPassword) return undefined;\n const policy = Object.fromEntries(\n Object.entries(PASSWORD_POLICY_KEYS)\n .map(([clean, raw]) => [clean, newPassword[raw]])\n .filter(([, v]) => v !== undefined),\n );\n return Object.keys(policy).length ? policy : undefined;\n};\n\n// Reads one `componentsDynamicAttrs` entry by its `[data-name=\"…\"]` name. The backend\n// keys these by CSS selector, so we match on the data-name rather than the raw key.\nconst dynamicAttrsOf = (\n componentsConfig: ComponentsConfig | undefined,\n name: string,\n): Record<string, any> | undefined => {\n const entries = componentsConfig?.componentsDynamicAttrs;\n if (!entries) return undefined;\n const match = Object.entries(entries).find(\n ([selector]) => dataNameOf(selector) === name,\n );\n return match?.[1]?.attributes;\n};\n\nconst recoveryCodesOf = (componentsConfig: ComponentsConfig | undefined) => {\n const attributes = dynamicAttrsOf(componentsConfig, 'recoveryCodes');\n if (!attributes) return undefined;\n return Array.isArray(attributes.data)\n ? attributes.data.map((code: { value: string }) => code.value)\n : [];\n};\n\nconst outboundAppOf = (componentsConfig: ComponentsConfig | undefined) => {\n const attributes = dynamicAttrsOf(componentsConfig, 'outboundApp');\n if (!attributes) return undefined;\n return {\n label: attributes.label,\n iconSrc: attributes['icon-src'],\n appId: attributes['data-descope-outbound-oauth-app-id'],\n };\n};\n\n// The complete, allow-listed contract for `context.data`: one entry per `data` field,\n// each with the `data` key and a `from` reader over the raw screen state. Every field\n// is defined the same way and at the same level. Because we only read the fields listed\n// here, all other screen-state data is left out by construction — internal backend\n// fields, and dynamic-select options (which the backend spreads into componentsConfig\n// under arbitrary flow-defined keys). Exposing those is reserved for a future\n// `data.selects` map. Mirrors the backend `ExternalStateContext` / `ComponentsConfig`\n// structs (orchestrationservice .../domain/context.go).\nconst DATA_FIELDS: {\n key: string;\n from: (screenState: ScreenState) => unknown;\n}[] = [\n // moved verbatim from the top level of the screen state\n { key: 'totp', from: (s) => s.totp },\n { key: 'notp', from: (s) => s.notp },\n { key: 'sentTo', from: (s) => s.sentTo },\n { key: 'sso', from: (s) => s.sso },\n { key: 'selfProvisionDomains', from: (s) => s.selfProvisionDomains },\n // from componentsConfig — renamed, most unwrapped from a `{ data }` / `{ options }` wrapper\n {\n key: 'inboundAppApproveScopes',\n from: (s) => s.componentsConfig?.thirdPartyAppApproveScopes?.data,\n },\n { key: 'securityQuestionsSetup', from: (s) => s.componentsConfig?.sqSetup },\n { key: 'securityQuestionsVerify', from: (s) => s.componentsConfig?.sqVerify },\n {\n key: 'userTenants',\n from: (s) => s.componentsConfig?.userSelectedTenant?.data,\n },\n { key: 'userRoles', from: (s) => s.componentsConfig?.userRoles?.data },\n {\n key: 'ssoApplications',\n from: (s) => s.componentsConfig?.ssoApplications?.data,\n },\n {\n key: 'ssoConfigurations',\n from: (s) => s.componentsConfig?.ssoConfigurations?.data,\n },\n {\n key: 'samlAttributeMappings',\n from: (s) => s.componentsConfig?.samlMappings?.options,\n },\n {\n key: 'oidcAttributeMappings',\n from: (s) => s.componentsConfig?.oidcMappings?.options,\n },\n {\n key: 'samlGroupMappings',\n from: (s) => s.componentsConfig?.samlGroupMappings?.options,\n },\n {\n key: 'passwordPolicy',\n from: (s) => normalizePasswordPolicy(s.componentsConfig?.newPassword),\n },\n // from componentsConfig.componentsDynamicAttrs, matched by [data-name=\"…\"]\n { key: 'recoveryCodes', from: (s) => recoveryCodesOf(s.componentsConfig) },\n { key: 'outboundApp', from: (s) => outboundAppOf(s.componentsConfig) },\n];\n\n/**\n * Build the custom-screen `data` field — all server-produced screen data in one place.\n * Every field is declared in DATA_FIELDS as a `data` key + a reader over the raw screen\n * state; this function just applies them and skips any whose reader returns undefined.\n * Returns undefined when nothing was produced.\n */\nconst buildCustomScreenData = (\n screenState: ScreenState | undefined,\n): CustomScreenData | undefined => {\n if (!screenState) return undefined;\n\n const data: Record<string, unknown> = {};\n DATA_FIELDS.forEach(({ key, from }) => {\n const value = from(screenState);\n if (value !== undefined) data[key] = value;\n });\n\n return Object.keys(data).length ? (data as CustomScreenData) : undefined;\n};\n\nexport const transformStepStateForCustomScreen = (\n state: Partial<StepState>,\n) => {\n const sanitizedState: CustomScreenState = omitBy(\n state.screenState,\n (_, key) => EXCLUDED_STATE_KEYS.includes(key) || key.startsWith('_'),\n );\n\n const {\n screenState: { errorText, errorType },\n } = state;\n\n if (errorText || errorType) {\n sanitizedState.error = { text: errorText, type: errorType };\n }\n\n if (state.action) {\n sanitizedState.action = state.action;\n }\n\n // `data` is SDK-owned and stripped from the raw state via EXCLUDED_STATE_KEYS,\n // so a backend-provided `data` never leaks through — we always set our own below.\n const data = buildCustomScreenData(state.screenState);\n if (data) {\n sanitizedState.data = data;\n }\n\n return sanitizedState;\n};\n\nexport const transformScreenInputs = (inputs: Record<string, any>) => {\n const res = { ...inputs };\n\n if (inputs.inboundAppApproveScopes) {\n res.thirdPartyAppApproveScopes = inputs.inboundAppApproveScopes;\n }\n\n return res;\n};\n\nexport function getScriptResultPath(scriptId: string, resultKey?: string) {\n const path = resultKey ? `${scriptId}_${resultKey}` : scriptId;\n return `${SDK_SCRIPT_RESULTS_KEY}.${path}`;\n}\n\nexport const openCenteredPopup = (\n url: string,\n title: string,\n w: number,\n h: number,\n) => {\n const dualScreenLeft =\n window.screenLeft !== undefined\n ? window.screenLeft\n : (window.screen as any).left;\n const dualScreenTop =\n window.screenTop !== undefined\n ? window.screenTop\n : (window.screen as any).top;\n\n const width =\n window.innerWidth ||\n document.documentElement.clientWidth ||\n window.screen.width;\n const height =\n window.innerHeight ||\n document.documentElement.clientHeight ||\n window.screen.height;\n\n const left = (width - w) / 2 + dualScreenLeft;\n const top = (height - h) / 2 + dualScreenTop;\n\n // Safari on Mac may detect authentication URLs and replace the popup with a native macOS auth dialog.\n // To avoid that, we open the popup with empty string as URL and then populate it with the needed URL.\n // This avoids the native dialog, and uses the web interface for authentication.\n const initialUrl = isIphoneSafari() ? 'about:blank' : '';\n const popup = window.open(\n initialUrl,\n title,\n `width=${w},height=${h},top=${top},left=${left},scrollbars=yes,resizable=yes`,\n );\n\n popup.location.href = url;\n popup.focus();\n\n return popup;\n};\n"],"names":["MD_COMPONENTS","withRetry","fn","timeoutMs","maxRetries","args","__awaiter","this","lastError","totalAttempts","attempt","error","Promise","resolve","setTimeout","Math","pow","getUrlParam","paramName","URLSearchParams","window","location","search","get","resetUrlParam","history","replaceState","newUrl","URL","href","delete","toString","fetchContent","url","returnType","res","fetch","cache","ok","Error","status","body","headers","Object","fromEntries","entries","getContentUrl","projectId","filename","assetsFolder","ASSETS_FOLDER","baseUrl","OVERRIDE_CONTENT_URL","BASE_CONTENT_URL","pathname","paths","join","replace","pathJoin","getAnimationDirection","currentIdxStr","prevIdxStr","currentIdx","prevIdx","Number","isNaN","Direction","forward","backward","getRunIdsFromUrl","flowId","executionId","stepId","URL_RUN_IDS_PARAM_NAME","split","executionFlowId","_a","exec","getFlowIdFromExecId","isChromium","test","navigator","userAgent","vendor","clearRunIdsFromUrl","getTokenFromUrl","URL_TOKEN_PARAM_NAME","undefined","clearTokenFromUrl","getCodeFromUrl","URL_CODE_PARAM_NAME","getIsPopupFromUrl","URL_REDIRECT_MODE_PARAM_NAME","getExchangeErrorFromUrl","URL_ERR_PARAM_NAME","clearCodeFromUrl","clearIsPopupFromUrl","clearExchangeErrorFromUrl","getRedirectAuthFromUrl","redirectAuthCodeChallenge","URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME","redirectAuthCallbackUrl","URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME","redirectAuthBackupCallbackUri","URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME","redirectAuthInitiator","URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME","getOIDCIDPParamFromUrl","OIDC_IDP_STATE_ID_PARAM_NAME","clearOIDCIDPParamFromUrl","getSAMLIDPParamFromUrl","SAML_IDP_STATE_ID_PARAM_NAME","clearSAMLIDPParamFromUrl","getWSFedIDPParamFromUrl","WSFED_IDP_STATE_ID_PARAM_NAME","clearWSFedIDPParamFromUrl","getSAMLIDPUsernameParamFromUrl","SAML_IDP_USERNAME_PARAM_NAME","clearSAMLIDPUsernameParamFromUrl","getDescopeIDPInitiatedParamFromUrl","DESCOPE_IDP_INITIATED_PARAM_NAME","clearDescopeIDPInitiatedParamFromUrl","getSSOAppIdParamFromUrl","SSO_APP_ID_PARAM_NAME","getCustomAppIdParamFromUrl","CUSTOM_APP_ID_PARAM_NAME","getThirdPartyAppIdParamFromUrl","THIRD_PARTY_APP_ID_PARAM_NAME","clearSSOAppIdParamFromUrl","clearCustomAppIdParamFromUrl","clearThirdPartyAppIdParamFromUrl","getThirdPartyAppStateIdParamFromUrl","THIRD_PARTY_APP_STATE_ID_PARAM_NAME","clearThirdPartyAppStateIdParamFromUrl","getApplicationScopesParamFromUrl","APPLICATION_SCOPES_PARAM_NAME","clearApplicationScopesParamFromUrl","getOIDCLoginHintParamFromUrl","OIDC_LOGIN_HINT_PARAM_NAME","clearOIDCLoginHintParamFromUrl","getOIDCPromptParamFromUrl","OIDC_PROMPT_PARAM_NAME","clearOIDCPromptParamFromUrl","getOIDCErrorRedirectUriParamFromUrl","OIDC_ERROR_REDIRECT_URI_PARAM_NAME","clearOIDCErrorRedirectUriParamFromUrl","getOIDCResourceParamFromUrl","OIDC_RESOURCE_PARAM_NAME","clearOIDCResourceParamFromUrl","camelCase","s","x","toUpperCase","createIsChanged","state","prevState","attrName","getElementDescopeAttributes","ele","Array","from","attributes","reduce","acc","attr","descopeAttrName","RegExp","DESCOPE_ATTRIBUTE_PREFIX","name","assign","value","handleUrlParams","logger","debug","ssoQueryParams","token","code","isPopup","exchangeError","oidcIdpStateId","samlIdpStateId","wsfedIdpStateId","samlIdpUsername","descopeIdpInitiated","ssoAppId","customAppId","thirdPartyAppId","thirdPartyAppStateId","applicationScopes","oidcLoginHint","oidcPrompt","oidcErrorRedirectUri","oidcResource","withMemCache","prevArgs","array2","array1","length","every","index","reset","FOCUSABLE_INPUTS_SELECTOR","handleAutoFocus","autoFocus","isFirstScreen","firstVisibleInput","querySelector","focus","handleReportValidityOnBlur","rootEle","onInvalid","querySelectorAll","forEach","addEventListener","onBlur","origFocus","valid","reportValidity","getAttribute","ref","timer","onClick","e","target","clearTimeout","removeEventListener","once","timeoutPromise","timeout","promise","fallback","reject","expired","then","catch","getChromiumVersion","brands","userAgentData","found","find","brand","version","parseFloat","showFirstScreenOnExecutionInit","startScreenId","injectSamlIdpForm","samlResponse","relayState","submitCallback","formEle","document","createElement","method","action","innerHTML","appendChild","injectWsFedIdpForm","wresult","wctx","createHiddenInput","input","type","submitBtn","id","style","display","submitForm","submit","getFirstNonEmptyValue","obj","keys","firstNonEmptyKey","key","leadingDebounce","func","wait","apply","clearPreviousExternalInputs","remove","shouldHandleMarkdown","compName","includes","PASSWORD_POLICY_KEYS","minLength","strength","disallowedChars","email","activePolicies","availablePolicies","dynamicAttrsOf","componentsConfig","componentsDynamicAttrs","match","selector","dataNameOf","DATA_FIELDS","totp","notp","sentTo","sso","selfProvisionDomains","_b","thirdPartyAppApproveScopes","data","sqSetup","sqVerify","userSelectedTenant","userRoles","ssoApplications","ssoConfigurations","samlMappings","options","oidcMappings","samlGroupMappings","newPassword","policy","map","clean","raw","filter","v","normalizePasswordPolicy","isArray","recoveryCodesOf","label","iconSrc","appId","outboundAppOf","transformStepStateForCustomScreen","sanitizedState","screenState","predicate","_","EXCLUDED_STATE_KEYS","startsWith","errorText","errorType","text","buildCustomScreenData","transformScreenInputs","inputs","inboundAppApproveScopes","getScriptResultPath","scriptId","resultKey","SDK_SCRIPT_RESULTS_KEY","openCenteredPopup","title","w","h","dualScreenLeft","screenLeft","screen","left","dualScreenTop","screenTop","top","innerWidth","documentElement","clientWidth","width","innerHeight","clientHeight","height","initialUrl","ua","isIphone","isSafari","isIphoneSafari","popup","open"],"mappings":"0mCA0CA,MAAMA,EAAgB,CAAC,kCASPC,EACdC,EACAC,EACAC,GAEA,MAAO,IAAUC,IAAiCC,EAAAC,UAAA,OAAA,GAAA,YAChD,IAAIC,EACJ,MAAMC,EAAgBL,EAAa,EAGnC,IAAK,IAAIM,EAAU,EAAGA,EAAUD,EAAeC,IAC7C,IAEE,aAAaR,KAAMG,EACpB,CAAC,MAAOM,GACPH,EAAYG,EAGRD,EAAUN,UAEN,IAAIQ,SAASC,IACjBC,WAAWD,EAASV,EAAYY,KAAKC,IAAI,EAAGN,EAAU,GAAG,IAG9D,CAIH,MAAMF,CACR,GACF,CAEA,SAASS,EAAYC,GAGnB,OAFkB,IAAIC,gBAAgBC,OAAOC,SAASC,QAErCC,IAAIL,EACvB,CAgBA,SAASM,EAAcN,GACrB,GAAIE,OAAOK,QAAQC,cAAgBT,EAAYC,GAAY,CACzD,MAAMS,EAAS,IAAIC,IAAIR,OAAOC,SAASQ,MACjCP,EAAS,IAAIH,gBAAgBQ,EAAOL,QAC1CA,EAAOQ,OAAOZ,GACdS,EAAOL,OAASA,EAAOS,WACvBX,OAAOK,QAAQC,aAAa,CAAA,EAAI,GAAIC,EAAOI,WAC5C,CACH,CAOsB,SAAAC,EACpBC,EACAC,4CAKA,MAAMC,QAAYC,MAAMH,EAAK,CAAEI,MAAO,YACtC,IAAKF,EAAIG,GACP,MAAMC,MAAM,sBAAsBN,MAAQE,EAAIK,WAGhD,MAAO,CACLC,WAAYN,EAAID,KAChBQ,QAASC,OAAOC,YAAYT,EAAIO,QAAQG,cAE3C,CAIe,SAAAC,GAAcC,UAC5BA,EAASC,SACTA,EAAQC,aACRA,EAAeC,EAAaC,QAC5BA,IAOA,MAAMlB,EAAM,IAAIL,IAAIwB,GAAwBD,GAAWE,GAGvD,OAFApB,EAAIqB,SAdW,KAAIC,IAAoBA,EAAMC,KAAK,KAAKC,QAAQ,OAAQ,KAcxDC,CAASzB,EAAIqB,SAAUP,EAAWE,EAAcD,GAExDf,EAAIF,UACb,CAEgB,SAAA4B,EACdC,EACAC,GAEA,IAAKA,EAAY,OAEjB,MAAMC,GAAcF,EACdG,GAAWF,EAEjB,OAAIG,OAAOC,MAAMH,IAAeE,OAAOC,MAAMF,QAA7C,EACID,EAAaC,EAAgBG,EAAUC,QACvCL,EAAaC,EAAgBG,EAAUE,cAA3C,CAEF,CAEa,MAAAC,EAAoBC,IAC/B,IAAKC,EAAc,GAAIC,EAAS,KAjFzBvD,EAAYwD,IAiFyC,IAAIC,MAAM,KACtE,MAAMC,EA3DoB,CAACJ,UAE3B,OAAiC,QAA1BK,EADO,cACDC,KAAKN,UAAe,IAAAK,OAAA,EAAAA,EAAA,KAAM,EAAE,EAyDjBE,CAAoBP,GAQ5C,QALKD,GAAWK,GAAmBA,IAAoBL,KACrDC,EAAc,GACdC,EAAS,IAGJ,CAAED,cAAaC,SAAQG,kBAAiB,WAOjCI,IACd,MACE,SAASC,KAAKC,UAAUC,YAAc,aAAaF,KAAKC,UAAUE,OAEtE,UAagBC,IACd5D,EAAciD,EAChB,UAEgBY,IACd,OAAOpE,EAAYqE,SAAyBC,CAC9C,UAEgBC,IACdhE,EAAc8D,EAChB,UAEgBG,IACd,OAAOxE,EAAYyE,SAAwBH,CAC7C,UAEgBI,IACd,MAAqD,UAA9C1E,EAAY2E,EACrB,UAEgBC,IACd,OAAO5E,EAAY6E,SAAuBP,CAC5C,UAEgBQ,IACdvE,EAAckE,EAChB,UAEgBM,IACdxE,EAAcoE,EAChB,UAEgBK,IACdzE,EAAcsE,EAChB,UAEgBI,IAad,MAAO,CACLC,0BAbgClF,EAChCmF,GAaAC,wBAX8BpF,EAC9BqF,GAWAC,8BAToCtF,EACpCuF,GASAC,sBAP4BxF,EAC5ByF,GAQJ,UAEgBC,IACd,OAAO1F,EAAY2F,EACrB,UAEgBC,IACdrF,EAAcoF,EAChB,UAEgBE,IACd,OAAO7F,EAAY8F,EACrB,UAEgBC,IACdxF,EAAcuF,EAChB,UAEgBE,KACd,OAAOhG,EAAYiG,EACrB,UAEgBC,KACd3F,EAAc0F,EAChB,UAEgBE,KACd,OAAOnG,EAAYoG,EACrB,UAEgBC,KACd9F,EAAc6F,EAChB,UAEgBE,KACd,OAAOtG,EAAYuG,EACrB,UAEgBC,KACdjG,EAAcgG,EAChB,UAEgBE,KACd,OAAOzG,EAAY0G,EACrB,UAEgBC,KACd,OAAO3G,EAAY4G,EACrB,UAEgBC,KACd,OAAO7G,EAAY8G,EACrB,UAEgBC,KACdxG,EAAcmG,EAChB,UAEgBM,KACdzG,EAAcqG,EAChB,UAEgBK,KACd1G,EAAcuG,EAChB,UAEgBI,KACd,OAAOlH,EAAYmH,EACrB,UAEgBC,KACd7G,EAAc4G,EAChB,UAEgBE,KACd,OAAOrH,EAAYsH,EACrB,UAEgBC,KACdhH,EAAc+G,EAChB,UAEgBE,KACd,OAAOxH,EAAYyH,EACrB,UAEgBC,KACdnH,EAAckH,EAChB,UAEgBE,KACd,OAAO3H,EAAY4H,EACrB,UAEgBC,KACdtH,EAAcqH,EAChB,UAEgBE,KACd,OAAO9H,EAAY+H,EACrB,UAEgBC,KACdzH,EAAcwH,EAChB,UAEgBE,KACd,OAAOjI,EAAYkI,EACrB,UAEgBC,KACd5H,EAAc2H,EAChB,CAEO,MAAME,GAAaC,GACxBA,EAAE7F,QAAQ,OAAQ8F,GAAMA,EAAE,GAAGC,gBAElBC,GACX,CAAgCC,EAAUC,IACzCC,GACCF,EAAME,KAAcD,EAAUC,GAErBC,GAA+BC,GAC1CC,MAAMC,MAAKF,aAAG,EAAHA,EAAKG,aAAc,IAAIC,QAAO,CAACC,EAAKC,WAC7C,MAAMC,EAEc,QAFIzF,EAAA,IAAI0F,OAC1B,IAAIC,YACJ1F,KAAKuF,EAAKI,aAAQ,IAAA5F,OAAA,EAAAA,EAAA,GAEpB,OAAQyF,EAEJ1H,OAAO8H,OAAON,EAAK,CAAEE,CAACA,GAAkBD,EAAKM,QAD7CP,CACqD,GACxD,IAKQQ,GAAkB,CAC7BrG,EACAsG,KAEA,MAAMrG,YAAEA,EAAWC,OAAEA,EAAMG,gBAAEA,GAAoBN,EAAiBC,GAIlE,GAAIK,GAAmBL,IAAWK,EAIhC,OAHAiG,EAAOC,MACL,8EAEK,CAAEC,eAAgB,CAAA,IAGvBvG,GAAeC,IACjBY,IAGF,MAAM2F,EAAQ1F,IACV0F,GACFvF,IAGF,MAAMwF,EAAOvF,IACTuF,GACFjF,IAIF,MAAMkF,EAAUtF,IACZsF,GACFjF,IAGF,MAAMkF,EAAgBrF,IAClBqF,GACFjF,IAKF,MAAME,0BACJA,EAAyBE,wBACzBA,EAAuBE,8BACvBA,EAA6BE,sBAC7BA,GACEP,IAEEiF,EAAiBxE,IACnBwE,GACFtE,IAGF,MAAMuE,EAAiBtE,IACnBsE,GACFpE,IAGF,MAAMqE,EAAkBpE,KACpBoE,GACFlE,KAGF,MAAMmE,EAAkBlE,KACpBgE,GACF9D,KAGF,MAAMiE,EAAsBhE,KACxBgE,GACF9D,KAGF,MAAM+D,EAAW9D,KACb8D,GACFxD,KAGF,MAAMyD,EAAc7D,KAChB6D,GACFxD,KAGF,MAAMyD,EAAkB5D,KACpB4D,GACFxD,KAGF,MAAMyD,EAAuBxD,KACzBwD,GACFtD,KAGF,MAAMuD,EAAoBtD,KACtBsD,GACFpD,KAGF,MAAMqD,EAAgBpD,KAClBoD,GACFlD,KAGF,MAAMmD,EAAalD,KACfkD,GACFhD,KAGF,MAAMiD,EAAuBhD,KACzBgD,GACF9C,KAGF,MAAM+C,EAAe9C,KACjB8C,GACF5C,KAKF,MAAO,CACL7E,cACAC,SACAuG,QACAC,OACAC,UACAC,gBACA/E,4BACAE,0BACAE,gCACAE,wBACAqE,eAAgB,CACdK,iBACAC,iBACAC,kBACAC,kBACAC,oBAlB4C,SAAxBA,EAmBpBC,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,qBAEH,EAgBUK,GAAoC/L,IAC/C,IAAIgM,EACA7J,EACJ,OAAOM,OAAO8H,QACZ,IAAIpK,KACF,OAAI6L,IAT4BC,EASQ9L,GATvB+L,EASaF,GAR3BG,SAAWF,EAAOE,QACzBD,EAAOE,OAAM,CAAC5B,EAAY6B,IAAkB7B,IAAUyB,EAAOI,QASzDL,EAAW7L,EACXgC,EAAQnC,KAAMG,IAHwCgC,EATtC,IAAC+J,EAAeD,CAcf,GAEnB,CACEK,MAAO,KACLN,OAAW3G,EACXlD,OAAQkD,CAAS,GAGtB,EAGUkH,GACX,8DAEWC,GAAkB,CAC7B5C,EACA6C,EACAC,KAEA,IACgB,IAAdD,GACe,oBAAdA,IAAoCC,EACrC,CAEA,MAAMC,EAAsC/C,EAAIgD,cAC9CL,IAEF3L,YAAW,KACT+L,SAAAA,EAAmBE,OAAO,GAE7B,GAGUC,GAA6B,CACxCC,EAIAC,KAEAD,EAAQE,iBAAiB,WAAWC,SAAStD,IAC3CA,EAAIuD,iBAAiB,QAAQ,WAC3B,MAAMC,EAAS,WAGb,MAAMC,EAAYzD,EAAIiD,MAEtBjD,EAAIiD,MAAQ,OACZ,MAAMS,UAAQ5I,EAAAkF,EAAI2D,6CACdP,IAAuB,IAAVM,GACfN,EAAUpD,GAEZhJ,YAAW,KAETgJ,EAAIiD,MAAQQ,CAAS,GACrB,EAKJ,GAFmE,SAAhCzD,EAAI4D,aAAa,aAEP,QAAX9I,EAAAkF,EAAIY,aAAO,IAAA9F,OAAA,EAAAA,EAAAyH,QAE3C,YADAiB,IAQF,MAAMK,EAAM,CAAEC,WAAOrI,GAEfsI,EAAWC,IAG+B,SAF/BA,EAAEC,OAENL,aAAa,oBACtBM,aAAaL,EAAIC,OACjBD,EAAIC,WAAQrI,EACb,EAGHoI,EAAIC,MAAQ9M,YAAW,KACrBmM,EAAQgB,oBAAoB,QAASJ,GACrCP,IACAK,EAAIC,WAAQrI,CAAS,GACpB,KAEH0H,EAAQI,iBAAiB,QAASQ,EAAS,CAAEK,MAAM,GAAO,GAC1D,GACF,WAmBYC,GACdC,EACAC,EACAC,GAEA,OAAO,IAAI1N,SAAQ,CAACC,EAAS0N,KAC3B,IAAIC,GAAU,EACd,MAAMZ,EAAQ9M,YAAW,KACvB0N,GAAU,OACOjJ,IAAb+I,EACFzN,EAAQyN,GAERC,EAAO,IAAIhM,MAAM,2BAA2B6L,QAC7C,GACAA,GAEHC,EACGI,MAAM/D,IACA8D,IACHR,aAAaJ,GACb/M,EAAQ6J,GACT,IAEFgE,OAAO/N,IACD6N,IACHR,aAAaJ,GACbW,EAAO5N,GACR,GACD,GAER,CAEO,MAAMgO,GAAqB,WAChC,MAAMC,EAA4C,QAAlChK,EAAA,OAAAK,gBAAA,IAAAA,eAAA,EAAAA,UAAmB4J,qBAAe,IAAAjK,OAAA,EAAAA,EAAAgK,OAC5CE,EAAQF,aAAM,EAANA,EAAQG,MACpB,EAAGC,QAAOC,aAAwB,aAAVD,GAAwBE,WAAWD,KAE7D,OAAOH,EAAQA,EAAMG,QAAU,CAAC,EAMrBE,GAAiC,CAC5CC,GAEEjE,iBACAC,iBACAC,kBACAC,kBACAE,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,0BAGAwD,GACDjE,GACAC,GACAC,GACAC,GACAE,GACAC,GACAI,GACAC,GACAC,GACAC,GACAN,GACAC,GACAC,GAEUyD,GAAoB,CAC/BpN,EACAqN,EACAC,EACAC,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS5N,EACjBwN,EAAQK,UAAY,4EACmDR,kFACCC,qGAIxEG,SAASjN,KAAKsN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZO,GAAqB,CAChC/N,EACAgO,EACAC,EACAV,KAEA,MAAMC,EAAUC,SAASC,cAAc,QACvCF,EAAQG,OAAS,OACjBH,EAAQI,OAAS5N,EAGjB,MAAMkO,EAAoB,CAAC3F,EAAcE,KACvC,MAAM0F,EAAQV,SAASC,cAAc,SAIrC,OAHAS,EAAMC,KAAO,SACbD,EAAM5F,KAAOA,EACb4F,EAAM1F,MAAQA,EACP0F,CAAK,EAGdX,EAAQM,YAAYI,EAAkB,KAAM,eAC5CV,EAAQM,YAAYI,EAAkB,UAAWF,IACjDR,EAAQM,YAAYI,EAAkB,OAAQD,IAE9C,MAAMI,EAAYZ,SAASC,cAAc,SACzCW,EAAUD,KAAO,SACjBC,EAAUC,GAAK,oBACfD,EAAU5F,MAAQ,WAClB4F,EAAUE,MAAMC,QAAU,OAC1BhB,EAAQM,YAAYO,GAEpBZ,SAASjN,KAAKsN,YAAYN,GAE1BD,EAAeC,EAAQ,EAGZiB,GAAcjB,GAA6BA,aAAO,EAAPA,EAASkB,SAEpDC,GAAwB,CAACC,EAAaC,KACjD,MAAMC,EAAmBD,EAAK/B,MAAMiC,GAAQH,EAAIG,KAChD,OAAOD,EAAmBF,EAAIE,GAAoB,IAAI,EAG3CE,GAAkB,CAC7BC,EACAC,EAAO,OAEP,IAAI/C,EACJ,OAAO,YAA6B/N,GAC7B+N,GAAS8C,EAAKE,MAAM7Q,KAAMF,GAC/B2N,aAAaI,GACbA,EAAUtN,YAAW,KACnBsN,EAAU,IAAI,GACb+C,EACL,CAAM,EAGKE,GAA8B,KACzC3B,SACGvC,iBAAiB,8BACjBC,SAAStD,GAAQA,EAAIwH,UAAS,EAGtBC,GAAwBC,GACnCxR,EAAcyR,SAASD,GAgBnBE,GAA+C,CACnDC,UAAW,uCACXC,SAAU,8CACVC,gBAAiB,6CACjBC,MAAO,mCACPC,eAAgB,kBAChBC,kBAAmB,sBAmBfC,GAAiB,CACrBC,EACA1H,WAEA,MAAM3H,EAAUqP,aAAA,EAAAA,EAAkBC,uBAClC,IAAKtP,EAAS,OACd,MAAMuP,EAAQzP,OAAOE,QAAQA,GAASkM,MACpC,EAAEsD,KAnCa,CAACA,IAAwC,IAAAzN,EAC1D,OAAgD,QAAhDA,EAAAyN,EAASD,MAAM,yCAAiC,IAAAxN,OAAA,EAAAA,EAAG,EAAE,EAkCnC0N,CAAWD,KAAc7H,IAE3C,OAAmB,QAAZ5F,EAAAwN,aAAK,EAALA,EAAQ,UAAI,IAAAxN,OAAA,EAAAA,EAAAqF,UAAU,EA6BzBsI,GAGA,CAEJ,CAAEvB,IAAK,OAAQhH,KAAOV,GAAMA,EAAEkJ,MAC9B,CAAExB,IAAK,OAAQhH,KAAOV,GAAMA,EAAEmJ,MAC9B,CAAEzB,IAAK,SAAUhH,KAAOV,GAAMA,EAAEoJ,QAChC,CAAE1B,IAAK,MAAOhH,KAAOV,GAAMA,EAAEqJ,KAC7B,CAAE3B,IAAK,uBAAwBhH,KAAOV,GAAMA,EAAEsJ,sBAE9C,CACE5B,IAAK,0BACLhH,KAAOV,YAAM,OAAgD,QAAhDuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAEkO,kCAA4B,IAAAD,OAAA,EAAAA,EAAAE,IAAI,GAEnE,CAAE/B,IAAK,yBAA0BhH,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE4I,uCAAkBc,OAAO,GACzE,CAAEhC,IAAK,0BAA2BhH,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE4I,uCAAkBe,QAAQ,GAC3E,CACEjC,IAAK,cACLhH,KAAOV,YAAM,OAAwC,QAAxCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAEsO,0BAAoB,IAAAL,OAAA,EAAAA,EAAAE,IAAI,GAE3D,CAAE/B,IAAK,YAAahH,KAAOV,IAAK,IAAA1E,EAAAiO,EAAC,OAA+B,QAA/BA,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAEuO,iBAAW,IAAAN,OAAA,EAAAA,EAAAE,IAAI,GACpE,CACE/B,IAAK,kBACLhH,KAAOV,YAAM,OAAqC,QAArCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAEwO,uBAAiB,IAAAP,OAAA,EAAAA,EAAAE,IAAI,GAExD,CACE/B,IAAK,oBACLhH,KAAOV,YAAM,OAAuC,QAAvCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAEyO,yBAAmB,IAAAR,OAAA,EAAAA,EAAAE,IAAI,GAE1D,CACE/B,IAAK,wBACLhH,KAAOV,YAAM,OAAkC,QAAlCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAE0O,oBAAc,IAAAT,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,wBACLhH,KAAOV,YAAM,OAAkC,QAAlCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAE4O,oBAAc,IAAAX,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,oBACLhH,KAAOV,YAAM,OAAuC,QAAvCuJ,EAAkB,QAAlBjO,EAAA0E,EAAE4I,wBAAgB,IAAAtN,OAAA,EAAAA,EAAE6O,yBAAmB,IAAAZ,OAAA,EAAAA,EAAAU,OAAO,GAE7D,CACEvC,IAAK,iBACLhH,KAAOV,UAAM,MAhGe,CAC9BoK,IAEA,IAAKA,EAAa,OAClB,MAAMC,EAAShR,OAAOC,YACpBD,OAAOE,QAAQ6O,IACZkC,KAAI,EAAEC,EAAOC,KAAS,CAACD,EAAOH,EAAYI,MAC1CC,QAAO,EAAC,CAAGC,UAAazO,IAANyO,KAEvB,OAAOrR,OAAOmO,KAAK6C,GAAQtH,OAASsH,OAASpO,CAAS,EAuFvC0O,SAAwBrP,EAAA0E,EAAE4I,uCAAkBwB,YAAY,GAGvE,CAAE1C,IAAK,gBAAiBhH,KAAOV,GAzET,CAAC4I,IACvB,MAAMjI,EAAagI,GAAeC,EAAkB,iBACpD,GAAKjI,EACL,OAAOF,MAAMmK,QAAQjK,EAAW8I,MAC5B9I,EAAW8I,KAAKa,KAAK5I,GAA4BA,EAAKN,QACtD,EAAE,EAoE+ByJ,CAAgB7K,EAAE4I,mBACvD,CAAElB,IAAK,cAAehH,KAAOV,GAlET,CAAC4I,IACrB,MAAMjI,EAAagI,GAAeC,EAAkB,eACpD,GAAKjI,EACL,MAAO,CACLmK,MAAOnK,EAAWmK,MAClBC,QAASpK,EAAW,YACpBqK,MAAOrK,EAAW,sCACnB,EA2DkCsK,CAAcjL,EAAE4I,oBAuBxCsC,GACX9K,IAEA,MAAM+K,GAtJN5D,EAuJEnH,EAAMgL,YAtJRC,EAuJE,CAACC,EAAG5D,IAAQ6D,EAAoBpD,SAAST,IAAQA,EAAI8D,WAAW,KArJlEnS,OAAOC,YACLD,OAAOE,QAAQgO,GAAKkD,QAClB,EAAE/C,EAAKtG,MAAYiK,EAAUjK,EAAOsG,OAN3B,IACbH,EACA8D,EA0JA,MACED,aAAaK,UAAEA,EAASC,UAAEA,IACxBtL,GAEAqL,GAAaC,KACfP,EAAe9T,MAAQ,CAAEsU,KAAMF,EAAW1E,KAAM2E,IAG9CtL,EAAMmG,SACR4E,EAAe5E,OAASnG,EAAMmG,QAKhC,MAAMkD,EApCsB,CAC5B2B,IAEA,IAAKA,EAAa,OAElB,MAAM3B,EAAgC,CAAA,EAMtC,OALAR,GAAYnF,SAAQ,EAAG4D,MAAKhH,WAC1B,MAAMU,EAAQV,EAAK0K,QACLnP,IAAVmF,IAAqBqI,EAAK/B,GAAOtG,EAAK,IAGrC/H,OAAOmO,KAAKiC,GAAM1G,OAAU0G,OAA4BxN,CAAS,EAyB3D2P,CAAsBxL,EAAMgL,aAKzC,OAJI3B,IACF0B,EAAe1B,KAAOA,GAGjB0B,CAAc,EAGVU,GAAyBC,IACpC,MAAMjT,EAAGQ,OAAA8H,OAAA,CAAA,EAAQ2K,GAMjB,OAJIA,EAAOC,0BACTlT,EAAI2Q,2BAA6BsC,EAAOC,yBAGnClT,CAAG,EAGI,SAAAmT,GAAoBC,EAAkBC,GAEpD,MAAO,GAAGC,KADGD,EAAY,GAAGD,KAAYC,IAAcD,GAExD,CAEO,MAAMG,GAAoB,CAC/BzT,EACA0T,EACAC,EACAC,KAEA,MAAMC,OACkBvQ,IAAtBnE,OAAO2U,WACH3U,OAAO2U,WACN3U,OAAO4U,OAAeC,KACvBC,OACiB3Q,IAArBnE,OAAO+U,UACH/U,OAAO+U,UACN/U,OAAO4U,OAAeI,IAWvBH,IARJ7U,OAAOiV,YACP3G,SAAS4G,gBAAgBC,aACzBnV,OAAO4U,OAAOQ,OAMMZ,GAAK,EAAIE,EACzBM,IALJhV,OAAOqV,aACP/G,SAAS4G,gBAAgBI,cACzBtV,OAAO4U,OAAOW,QAGMd,GAAK,EAAIK,EAKzBU,EAl2BR,WACE,MAAMC,EAAK5R,UAAUC,WAAa,GAC5B4R,EAAW,eAAe9R,KAAK6R,GAE/BE,EACJ,SAAS/R,KAAK6R,KAAQ,2CAA2C7R,KAAK6R,GAExE,OAAOC,GAAYC,CACrB,CA01BqBC,GAAmB,cAAgB,GAChDC,EAAQ7V,OAAO8V,KACnBN,EACAjB,EACA,SAASC,YAAYC,SAASO,UAAYH,kCAM5C,OAHAgB,EAAM5V,SAASQ,KAAOI,EACtBgV,EAAMlK,QAECkK,CAAK"}
1
+ {"version":3,"file":"helpers.js","sources":["../../../src/lib/helpers/helpers.ts"],"sourcesContent":["import {\n ASSETS_FOLDER,\n BASE_CONTENT_URL,\n DESCOPE_ATTRIBUTE_PREFIX,\n URL_CODE_PARAM_NAME,\n URL_ERR_PARAM_NAME,\n URL_RUN_IDS_PARAM_NAME,\n URL_TOKEN_PARAM_NAME,\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n OIDC_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_STATE_ID_PARAM_NAME,\n WSFED_IDP_STATE_ID_PARAM_NAME,\n SAML_IDP_USERNAME_PARAM_NAME,\n SSO_APP_ID_PARAM_NAME,\n CUSTOM_APP_ID_PARAM_NAME,\n OIDC_LOGIN_HINT_PARAM_NAME,\n DESCOPE_IDP_INITIATED_PARAM_NAME,\n OVERRIDE_CONTENT_URL,\n OIDC_PROMPT_PARAM_NAME,\n OIDC_RESOURCE_PARAM_NAME,\n OIDC_ERROR_REDIRECT_URI_PARAM_NAME,\n THIRD_PARTY_APP_ID_PARAM_NAME,\n THIRD_PARTY_APP_STATE_ID_PARAM_NAME,\n APPLICATION_SCOPES_PARAM_NAME,\n SDK_SCRIPT_RESULTS_KEY,\n URL_REDIRECT_MODE_PARAM_NAME,\n} from '../constants';\nimport { EXCLUDED_STATE_KEYS } from '../constants/customScreens';\nimport {\n AutoFocusOptions,\n ComponentsConfig,\n CustomScreenData,\n CustomScreenState,\n Direction,\n ScreenState,\n SSOQueryParams,\n StepState,\n} from '../types';\n\nconst MD_COMPONENTS = ['descope-enriched-text'];\n\n/**\n * Wraps an async function with retry logic\n * @param fn - The async function to wrap\n * @param timeoutMs - Time to wait between retries in milliseconds\n * @param maxRetries - Maximum number of retry attempts\n * @returns A new function with retry logic\n */\nexport function withRetry<TArgs extends any[], TReturn>(\n fn: (...args: TArgs) => Promise<TReturn>,\n timeoutMs: number,\n maxRetries: number,\n): (...args: TArgs) => Promise<TReturn> {\n return async (...args: TArgs): Promise<TReturn> => {\n let lastError: any;\n const totalAttempts = maxRetries + 1; // initial attempt + retries\n\n // eslint-disable-next-line no-plusplus\n for (let attempt = 0; attempt < totalAttempts; attempt++) {\n try {\n // eslint-disable-next-line no-await-in-loop\n return await fn(...args);\n } catch (error) {\n lastError = error;\n\n // Don't wait after the last attempt\n if (attempt < maxRetries) {\n // eslint-disable-next-line no-await-in-loop\n await new Promise((resolve) => {\n setTimeout(resolve, timeoutMs * Math.pow(2, attempt + 1));\n });\n }\n }\n }\n\n // All attempts failed, throw the last error\n throw lastError;\n };\n}\n\nfunction getUrlParam(paramName: string) {\n const urlParams = new URLSearchParams(window.location.search);\n\n return urlParams.get(paramName);\n}\n\nfunction getFlowUrlParam() {\n return getUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nfunction setFlowUrlParam(id: string) {\n if (window.history.pushState && id !== getFlowUrlParam()) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.set(URL_RUN_IDS_PARAM_NAME, id);\n newUrl.search = search.toString();\n window.history.pushState({}, '', newUrl.toString());\n }\n}\n\nfunction resetUrlParam(paramName: string) {\n if (window.history.replaceState && getUrlParam(paramName)) {\n const newUrl = new URL(window.location.href);\n const search = new URLSearchParams(newUrl.search);\n search.delete(paramName);\n newUrl.search = search.toString();\n window.history.replaceState({}, '', newUrl.toString());\n }\n}\n\nconst getFlowIdFromExecId = (executionId: string) => {\n const regex = /(.*)\\|#\\|.*/;\n return regex.exec(executionId)?.[1] || '';\n};\n\nexport async function fetchContent<T extends 'text' | 'json'>(\n url: string,\n returnType: T,\n): Promise<{\n body: T extends 'json' ? Record<string, any> : string;\n headers: Record<string, string>;\n}> {\n const res = await fetch(url, { cache: 'default' });\n if (!res.ok) {\n throw Error(`Error fetching URL ${url} [${res.status}]`);\n }\n\n return {\n body: await res[returnType || 'text'](),\n headers: Object.fromEntries(res.headers.entries()),\n };\n}\n\nconst pathJoin = (...paths: string[]) => paths.join('/').replace(/\\/+/g, '/'); // preventing duplicate separators\n\nexport function getContentUrl({\n projectId,\n filename,\n assetsFolder = ASSETS_FOLDER,\n baseUrl,\n}: {\n projectId: string;\n filename: string;\n assetsFolder?: string;\n baseUrl?: string;\n}) {\n const url = new URL(OVERRIDE_CONTENT_URL || baseUrl || BASE_CONTENT_URL);\n url.pathname = pathJoin(url.pathname, projectId, assetsFolder, filename);\n\n return url.toString();\n}\n\nexport function getAnimationDirection(\n currentIdxStr: string,\n prevIdxStr: string,\n) {\n if (!prevIdxStr) return undefined;\n\n const currentIdx = +currentIdxStr;\n const prevIdx = +prevIdxStr;\n\n if (Number.isNaN(currentIdx) || Number.isNaN(prevIdx)) return undefined;\n if (currentIdx > prevIdx) return Direction.forward;\n if (currentIdx < prevIdx) return Direction.backward;\n return undefined;\n}\n\nexport const getRunIdsFromUrl = (flowId: string) => {\n let [executionId = '', stepId = ''] = (getFlowUrlParam() || '').split('_');\n const executionFlowId = getFlowIdFromExecId(executionId);\n\n // if the flow id does not match, this execution id is not for this flow\n if (!flowId || (executionFlowId && executionFlowId !== flowId)) {\n executionId = '';\n stepId = '';\n }\n\n return { executionId, stepId, executionFlowId };\n};\n\nexport const setRunIdsOnUrl = (executionId: string, stepId: string) => {\n setFlowUrlParam([executionId, stepId].join('_'));\n};\n\nexport function isChromium() {\n return (\n /Chrome/.test(navigator.userAgent) && /Google Inc/.test(navigator.vendor)\n );\n}\n\n// Detect Safari running on iPhone specifically.\nfunction isIphoneSafari() {\n const ua = navigator.userAgent || '';\n const isIphone = /\\b(iPhone)\\b/.test(ua);\n // Safari UA contains 'Safari' and usually 'Version/X', exclude other iOS browsers\n const isSafari =\n /Safari/.test(ua) && !/CriOS|FxiOS|OPiOS|EdgiOS|Chrome|Chromium/.test(ua);\n\n return isIphone && isSafari;\n}\n\nexport function clearRunIdsFromUrl() {\n resetUrlParam(URL_RUN_IDS_PARAM_NAME);\n}\n\nexport function getTokenFromUrl() {\n return getUrlParam(URL_TOKEN_PARAM_NAME) || undefined;\n}\n\nexport function clearTokenFromUrl() {\n resetUrlParam(URL_TOKEN_PARAM_NAME);\n}\n\nexport function getCodeFromUrl() {\n return getUrlParam(URL_CODE_PARAM_NAME) || undefined;\n}\n\nexport function getIsPopupFromUrl() {\n return getUrlParam(URL_REDIRECT_MODE_PARAM_NAME) === 'popup';\n}\n\nexport function getExchangeErrorFromUrl() {\n return getUrlParam(URL_ERR_PARAM_NAME) || undefined;\n}\n\nexport function clearCodeFromUrl() {\n resetUrlParam(URL_CODE_PARAM_NAME);\n}\n\nexport function clearIsPopupFromUrl() {\n resetUrlParam(URL_REDIRECT_MODE_PARAM_NAME);\n}\n\nexport function clearExchangeErrorFromUrl() {\n resetUrlParam(URL_ERR_PARAM_NAME);\n}\n\nexport function getRedirectAuthFromUrl() {\n const redirectAuthCodeChallenge = getUrlParam(\n URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME,\n );\n const redirectAuthCallbackUrl = getUrlParam(\n URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME,\n );\n const redirectAuthBackupCallbackUri = getUrlParam(\n URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME,\n );\n const redirectAuthInitiator = getUrlParam(\n URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME,\n );\n return {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n };\n}\n\nexport function getOIDCIDPParamFromUrl() {\n return getUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearOIDCIDPParamFromUrl() {\n resetUrlParam(OIDC_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPParamFromUrl() {\n return getUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearSAMLIDPParamFromUrl() {\n resetUrlParam(SAML_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getWSFedIDPParamFromUrl() {\n return getUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearWSFedIDPParamFromUrl() {\n resetUrlParam(WSFED_IDP_STATE_ID_PARAM_NAME);\n}\n\nexport function getSAMLIDPUsernameParamFromUrl() {\n return getUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function clearSAMLIDPUsernameParamFromUrl() {\n resetUrlParam(SAML_IDP_USERNAME_PARAM_NAME);\n}\n\nexport function getDescopeIDPInitiatedParamFromUrl() {\n return getUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function clearDescopeIDPInitiatedParamFromUrl() {\n resetUrlParam(DESCOPE_IDP_INITIATED_PARAM_NAME);\n}\n\nexport function getSSOAppIdParamFromUrl() {\n return getUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function getCustomAppIdParamFromUrl() {\n return getUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function clearSSOAppIdParamFromUrl() {\n resetUrlParam(SSO_APP_ID_PARAM_NAME);\n}\n\nexport function clearCustomAppIdParamFromUrl() {\n resetUrlParam(CUSTOM_APP_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_ID_PARAM_NAME);\n}\n\nexport function getThirdPartyAppStateIdParamFromUrl() {\n return getUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function clearThirdPartyAppStateIdParamFromUrl() {\n resetUrlParam(THIRD_PARTY_APP_STATE_ID_PARAM_NAME);\n}\n\nexport function getApplicationScopesParamFromUrl() {\n return getUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function clearApplicationScopesParamFromUrl() {\n resetUrlParam(APPLICATION_SCOPES_PARAM_NAME);\n}\n\nexport function getOIDCLoginHintParamFromUrl() {\n return getUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function clearOIDCLoginHintParamFromUrl() {\n resetUrlParam(OIDC_LOGIN_HINT_PARAM_NAME);\n}\n\nexport function getOIDCPromptParamFromUrl() {\n return getUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function clearOIDCPromptParamFromUrl() {\n resetUrlParam(OIDC_PROMPT_PARAM_NAME);\n}\n\nexport function getOIDCErrorRedirectUriParamFromUrl() {\n return getUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function clearOIDCErrorRedirectUriParamFromUrl() {\n resetUrlParam(OIDC_ERROR_REDIRECT_URI_PARAM_NAME);\n}\n\nexport function getOIDCResourceParamFromUrl() {\n return getUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport function clearOIDCResourceParamFromUrl() {\n resetUrlParam(OIDC_RESOURCE_PARAM_NAME);\n}\n\nexport const camelCase = (s: string) =>\n s.replace(/-./g, (x) => x[1].toUpperCase());\n\nexport const createIsChanged =\n <T extends Record<string, any>>(state: T, prevState: T) =>\n (attrName: keyof T) =>\n state[attrName] !== prevState[attrName];\n\nexport const getElementDescopeAttributes = (ele: HTMLElement) =>\n Array.from(ele?.attributes || []).reduce((acc, attr) => {\n const descopeAttrName = new RegExp(\n `^${DESCOPE_ATTRIBUTE_PREFIX}(\\\\S+)$`,\n ).exec(attr.name)?.[1];\n\n return !descopeAttrName\n ? acc\n : Object.assign(acc, { [descopeAttrName]: attr.value });\n }, {});\n\nexport const getFlowConfig = (config: Record<string, any>, flowId: string) =>\n config?.flows?.[flowId] || {};\n\nexport const handleUrlParams = (\n flowId: string,\n logger: { debug: (...data: any[]) => void },\n) => {\n const { executionId, stepId, executionFlowId } = getRunIdsFromUrl(flowId);\n\n // if the flow id does not match, we do not want to read & remove any query params\n // because it's probably belongs to another flow\n if (executionFlowId && flowId !== executionFlowId) {\n logger.debug(\n 'Flow id does not match the execution flow id, skipping url params handling',\n );\n return { ssoQueryParams: {} };\n }\n\n if (executionId || stepId) {\n clearRunIdsFromUrl();\n }\n\n const token = getTokenFromUrl();\n if (token) {\n clearTokenFromUrl();\n }\n\n const code = getCodeFromUrl();\n if (code) {\n clearCodeFromUrl();\n }\n\n // this is used for oauth when we want to open the provider login page in a new tab\n const isPopup = getIsPopupFromUrl();\n if (isPopup) {\n clearIsPopupFromUrl();\n }\n\n const exchangeError = getExchangeErrorFromUrl();\n if (exchangeError) {\n clearExchangeErrorFromUrl();\n }\n\n // these query params are retained to allow the flow to be refreshed\n // without losing the redirect auth state\n const {\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n } = getRedirectAuthFromUrl();\n\n const oidcIdpStateId = getOIDCIDPParamFromUrl();\n if (oidcIdpStateId) {\n clearOIDCIDPParamFromUrl();\n }\n\n const samlIdpStateId = getSAMLIDPParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPParamFromUrl();\n }\n\n const wsfedIdpStateId = getWSFedIDPParamFromUrl();\n if (wsfedIdpStateId) {\n clearWSFedIDPParamFromUrl();\n }\n\n const samlIdpUsername = getSAMLIDPUsernameParamFromUrl();\n if (samlIdpStateId) {\n clearSAMLIDPUsernameParamFromUrl();\n }\n\n const descopeIdpInitiated = getDescopeIDPInitiatedParamFromUrl();\n if (descopeIdpInitiated) {\n clearDescopeIDPInitiatedParamFromUrl();\n }\n\n const ssoAppId = getSSOAppIdParamFromUrl();\n if (ssoAppId) {\n clearSSOAppIdParamFromUrl();\n }\n\n const customAppId = getCustomAppIdParamFromUrl();\n if (customAppId) {\n clearCustomAppIdParamFromUrl();\n }\n\n const thirdPartyAppId = getThirdPartyAppIdParamFromUrl();\n if (thirdPartyAppId) {\n clearThirdPartyAppIdParamFromUrl();\n }\n\n const thirdPartyAppStateId = getThirdPartyAppStateIdParamFromUrl();\n if (thirdPartyAppStateId) {\n clearThirdPartyAppStateIdParamFromUrl();\n }\n\n const applicationScopes = getApplicationScopesParamFromUrl();\n if (applicationScopes) {\n clearApplicationScopesParamFromUrl();\n }\n\n const oidcLoginHint = getOIDCLoginHintParamFromUrl();\n if (oidcLoginHint) {\n clearOIDCLoginHintParamFromUrl();\n }\n\n const oidcPrompt = getOIDCPromptParamFromUrl();\n if (oidcPrompt) {\n clearOIDCPromptParamFromUrl();\n }\n\n const oidcErrorRedirectUri = getOIDCErrorRedirectUriParamFromUrl();\n if (oidcErrorRedirectUri) {\n clearOIDCErrorRedirectUriParamFromUrl();\n }\n\n const oidcResource = getOIDCResourceParamFromUrl();\n if (oidcResource) {\n clearOIDCResourceParamFromUrl();\n }\n\n const idpInitiatedVal = descopeIdpInitiated === 'true';\n\n return {\n executionId,\n stepId,\n token,\n code,\n isPopup,\n exchangeError,\n redirectAuthCodeChallenge,\n redirectAuthCallbackUrl,\n redirectAuthBackupCallbackUri,\n redirectAuthInitiator,\n ssoQueryParams: {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n descopeIdpInitiated: idpInitiatedVal,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n },\n };\n};\n\nexport const loadFont = (url: string) => {\n if (!url) return;\n\n const font = document.createElement('link');\n font.href = url;\n font.rel = 'stylesheet';\n document.head.appendChild(font);\n};\n\nconst compareArrays = (array1: any[], array2: any[]) =>\n array1.length === array2.length &&\n array1.every((value: any, index: number) => value === array2[index]);\n\nexport const withMemCache = <I extends any[], O>(fn: (...args: I) => O) => {\n let prevArgs: any[];\n let cache: any;\n return Object.assign(\n (...args: I) => {\n if (prevArgs && compareArrays(prevArgs, args)) return cache as O;\n\n prevArgs = args;\n cache = fn(...args);\n\n return cache as O;\n },\n {\n reset: () => {\n prevArgs = undefined;\n cache = undefined;\n },\n },\n );\n};\n\nexport const FOCUSABLE_INPUTS_SELECTOR =\n '*[name]:not([auto-focus=\"false\"]):not([aria-hidden=\"true\"])';\n\nexport const handleAutoFocus = (\n ele: HTMLElement,\n autoFocus: AutoFocusOptions,\n isFirstScreen: boolean,\n) => {\n if (\n autoFocus === true ||\n (autoFocus === 'skipFirstScreen' && !isFirstScreen)\n ) {\n // focus the first visible input\n const firstVisibleInput: HTMLInputElement = ele.querySelector(\n FOCUSABLE_INPUTS_SELECTOR,\n );\n setTimeout(() => {\n firstVisibleInput?.focus();\n });\n }\n};\n\nexport const handleReportValidityOnBlur = (\n rootEle: HTMLElement,\n // Best-effort callback invoked with the input that failed validation on\n // blur, so callers can track client-side validation errors. Never throws\n // into the blur handler.\n onInvalid?: (input: HTMLInputElement) => void,\n) => {\n rootEle.querySelectorAll('*[name]').forEach((ele: HTMLInputElement) => {\n ele.addEventListener('blur', () => {\n const onBlur = () => {\n // reportValidity also focus the element if it's invalid\n // in order to prevent this we need to override the focus method\n const origFocus = ele.focus;\n // eslint-disable-next-line no-param-reassign\n ele.focus = () => {};\n const valid = ele.reportValidity?.();\n if (onInvalid && valid === false) {\n onInvalid(ele);\n }\n setTimeout(() => {\n // eslint-disable-next-line no-param-reassign\n ele.focus = origFocus;\n });\n };\n\n const isInputAlreadyInErrorState = ele.getAttribute('invalid') === 'true';\n\n if (isInputAlreadyInErrorState || ele.value?.length) {\n onBlur();\n return;\n }\n\n // If the input is not in an error state, has no value, and a `formnovalidate` button was clicked,\n // we want to prevent triggering validation.\n // This handles a case where a required input was focused, and the user then clicked a social login button —\n // in that case, we don't want the required error message to flash for a split second.\n const ref = { timer: undefined };\n\n const onClick = (e: MouseEvent) => {\n const target = e.target as HTMLElement;\n\n if (target.getAttribute('formnovalidate') === 'true') {\n clearTimeout(ref.timer);\n ref.timer = undefined;\n }\n };\n\n ref.timer = setTimeout(() => {\n rootEle.removeEventListener('click', onClick);\n onBlur();\n ref.timer = undefined;\n }, 150);\n\n rootEle.addEventListener('click', onClick, { once: true });\n });\n });\n};\n\n/**\n * To return a fallback value in case the timeout expires and the promise\n * isn't fulfilled:\n *\n * const promise = loadUserCount();\n * const count = await timeoutPromise(2000, promise, 0);\n *\n * Or without a fallback value to just throw an error if the timeout expires:\n *\n * try {\n * count = await timeoutPromise(2000, promise);\n * }\n *\n * Fallback is returned only in case of timeout, so if the passed promise rejects\n * the fallback value is not used, and the returned promise will throw as well.\n */\nexport function timeoutPromise<T>(\n timeout: number,\n promise: Promise<T>,\n fallback?: T,\n): Promise<T> {\n return new Promise((resolve, reject) => {\n let expired = false;\n const timer = setTimeout(() => {\n expired = true;\n if (fallback !== undefined) {\n resolve(fallback);\n } else {\n reject(new Error(`Promise timed out after ${timeout} ms`));\n }\n }, timeout);\n\n promise\n .then((value) => {\n if (!expired) {\n clearTimeout(timer);\n resolve(value);\n }\n })\n .catch((error) => {\n if (!expired) {\n clearTimeout(timer);\n reject(error);\n }\n });\n });\n}\n\nexport const getChromiumVersion = (): number => {\n const brands = (navigator as any)?.userAgentData?.brands;\n const found = brands?.find(\n ({ brand, version }) => brand === 'Chromium' && parseFloat(version),\n );\n return found ? found.version : 0;\n};\n\n// As an optimization - We can show first screen if we have startScreenId and we don't have any other of the ssoAppId/oidcIdpStateId/samlIdp params\n// - If there startScreenId it means that the sdk can show the first screen and we don't need to wait for the sdk to return the first screen\n// - If there is any one else of the other params (like oidcIdpStateId, ..) - we can't skip this call because descope may decide not to show the first screen (in cases like a user is already logged in)\nexport const showFirstScreenOnExecutionInit = (\n startScreenId: string,\n {\n oidcIdpStateId,\n samlIdpStateId,\n wsfedIdpStateId,\n samlIdpUsername,\n ssoAppId,\n customAppId,\n oidcLoginHint,\n oidcPrompt,\n oidcErrorRedirectUri,\n oidcResource,\n thirdPartyAppId,\n thirdPartyAppStateId,\n applicationScopes,\n }: SSOQueryParams,\n): boolean =>\n !!startScreenId &&\n !oidcIdpStateId &&\n !samlIdpStateId &&\n !wsfedIdpStateId &&\n !samlIdpUsername &&\n !ssoAppId &&\n !customAppId &&\n !oidcLoginHint &&\n !oidcPrompt &&\n !oidcErrorRedirectUri &&\n !oidcResource &&\n !thirdPartyAppId &&\n !thirdPartyAppStateId &&\n !applicationScopes;\n\n// Use DOM APIs to set values safely - these are server-provided values (raw XML,\n// base64, opaque relay state) that would break innerHTML interpolation\nconst createHiddenInput = (name: string, value: string, role?: string) => {\n const input = document.createElement('input');\n input.type = 'hidden';\n input.name = name;\n input.value = value;\n if (role) {\n input.setAttribute('role', role);\n }\n return input;\n};\n\nexport const injectSamlIdpForm = (\n url: string,\n samlResponse: string,\n relayState: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n\n formEle.appendChild(\n createHiddenInput('SAMLResponse', samlResponse, 'saml-response'),\n );\n formEle.appendChild(\n createHiddenInput('RelayState', relayState, 'saml-relay-state'),\n );\n\n const submitBtn = document.createElement('input');\n submitBtn.type = 'submit';\n submitBtn.id = 'SAMLSubmitButton';\n submitBtn.value = 'Continue';\n submitBtn.style.display = 'none';\n formEle.appendChild(submitBtn);\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const injectWsFedIdpForm = (\n url: string,\n wresult: string,\n wctx: string,\n submitCallback: (form: HTMLFormElement) => void,\n) => {\n const formEle = document.createElement('form');\n formEle.method = 'POST';\n formEle.action = url;\n\n formEle.appendChild(createHiddenInput('wa', 'wsignin1.0'));\n formEle.appendChild(createHiddenInput('wresult', wresult));\n formEle.appendChild(createHiddenInput('wctx', wctx));\n\n const submitBtn = document.createElement('input');\n submitBtn.type = 'submit';\n submitBtn.id = 'WSFedSubmitButton';\n submitBtn.value = 'Continue';\n submitBtn.style.display = 'none';\n formEle.appendChild(submitBtn);\n\n document.body.appendChild(formEle);\n\n submitCallback(formEle);\n};\n\nexport const submitForm = (formEle: HTMLFormElement) => formEle?.submit();\n\nexport const getFirstNonEmptyValue = (obj: object, keys: string[]) => {\n const firstNonEmptyKey = keys.find((key) => obj[key]);\n return firstNonEmptyKey ? obj[firstNonEmptyKey] : null;\n};\n\nexport const leadingDebounce = <T extends (...args: any[]) => void>(\n func: T,\n wait = 100,\n) => {\n let timeout: NodeJS.Timeout;\n return function executedFunction(...args) {\n if (!timeout) func.apply(this, args);\n clearTimeout(timeout);\n timeout = setTimeout(() => {\n timeout = null;\n }, wait);\n } as T;\n};\n\nexport const clearPreviousExternalInputs = () => {\n document\n .querySelectorAll('[data-hidden-input=\"true\"]')\n .forEach((ele) => ele.remove());\n};\n\nexport const shouldHandleMarkdown = (compName: string) =>\n MD_COMPONENTS.includes(compName);\n\nconst omitBy = <T extends Record<string, any>>(\n obj: T,\n predicate: (value: any, key: keyof T) => boolean,\n): T =>\n Object.fromEntries(\n Object.entries(obj).filter(\n ([key, value]) => !predicate(value, key as keyof T),\n ),\n ) as T;\n\n// Reads the `data-name` value out of a `[data-name=\"x\"]` selector (either quote style).\nconst dataNameOf = (selector: string): string | undefined =>\n selector.match(/\\[data-name=[\"']([^\"']+)[\"']\\]/)?.[1];\n\nconst PASSWORD_POLICY_KEYS: Record<string, string> = {\n minLength: 'data-password-policy-value-minlength',\n strength: 'data-password-policy-value-passwordstrength',\n disallowedChars: 'data-password-policy-value-disallowedchars',\n email: 'data-password-policy-value-email',\n activePolicies: 'active-policies',\n availablePolicies: 'available-policies',\n};\n\n// Renames the backend's password-policy attribute keys to clean names.\n// Returns undefined when the screen has no password policy.\nconst normalizePasswordPolicy = (\n newPassword: Record<string, any> | undefined,\n): Record<string, unknown> | undefined => {\n if (!newPassword) return undefined;\n const policy = Object.fromEntries(\n Object.entries(PASSWORD_POLICY_KEYS)\n .map(([clean, raw]) => [clean, newPassword[raw]])\n .filter(([, v]) => v !== undefined),\n );\n return Object.keys(policy).length ? policy : undefined;\n};\n\n// Reads one `componentsDynamicAttrs` entry by its `[data-name=\"…\"]` name. The backend\n// keys these by CSS selector, so we match on the data-name rather than the raw key.\nconst dynamicAttrsOf = (\n componentsConfig: ComponentsConfig | undefined,\n name: string,\n): Record<string, any> | undefined => {\n const entries = componentsConfig?.componentsDynamicAttrs;\n if (!entries) return undefined;\n const match = Object.entries(entries).find(\n ([selector]) => dataNameOf(selector) === name,\n );\n return match?.[1]?.attributes;\n};\n\nconst recoveryCodesOf = (componentsConfig: ComponentsConfig | undefined) => {\n const attributes = dynamicAttrsOf(componentsConfig, 'recoveryCodes');\n if (!attributes) return undefined;\n return Array.isArray(attributes.data)\n ? attributes.data.map((code: { value: string }) => code.value)\n : [];\n};\n\nconst outboundAppOf = (componentsConfig: ComponentsConfig | undefined) => {\n const attributes = dynamicAttrsOf(componentsConfig, 'outboundApp');\n if (!attributes) return undefined;\n return {\n label: attributes.label,\n iconSrc: attributes['icon-src'],\n appId: attributes['data-descope-outbound-oauth-app-id'],\n };\n};\n\n// The complete, allow-listed contract for `context.data`: one entry per `data` field,\n// each with the `data` key and a `from` reader over the raw screen state. Every field\n// is defined the same way and at the same level. Because we only read the fields listed\n// here, all other screen-state data is left out by construction — internal backend\n// fields, and dynamic-select options (which the backend spreads into componentsConfig\n// under arbitrary flow-defined keys). Exposing those is reserved for a future\n// `data.selects` map. Mirrors the backend `ExternalStateContext` / `ComponentsConfig`\n// structs (orchestrationservice .../domain/context.go).\nconst DATA_FIELDS: {\n key: string;\n from: (screenState: ScreenState) => unknown;\n}[] = [\n // moved verbatim from the top level of the screen state\n { key: 'totp', from: (s) => s.totp },\n { key: 'notp', from: (s) => s.notp },\n { key: 'sentTo', from: (s) => s.sentTo },\n { key: 'sso', from: (s) => s.sso },\n { key: 'selfProvisionDomains', from: (s) => s.selfProvisionDomains },\n // from componentsConfig — renamed, most unwrapped from a `{ data }` / `{ options }` wrapper\n {\n key: 'inboundAppApproveScopes',\n from: (s) => s.componentsConfig?.thirdPartyAppApproveScopes?.data,\n },\n { key: 'securityQuestionsSetup', from: (s) => s.componentsConfig?.sqSetup },\n { key: 'securityQuestionsVerify', from: (s) => s.componentsConfig?.sqVerify },\n {\n key: 'userTenants',\n from: (s) => s.componentsConfig?.userSelectedTenant?.data,\n },\n { key: 'userRoles', from: (s) => s.componentsConfig?.userRoles?.data },\n {\n key: 'ssoApplications',\n from: (s) => s.componentsConfig?.ssoApplications?.data,\n },\n {\n key: 'ssoConfigurations',\n from: (s) => s.componentsConfig?.ssoConfigurations?.data,\n },\n {\n key: 'samlAttributeMappings',\n from: (s) => s.componentsConfig?.samlMappings?.options,\n },\n {\n key: 'oidcAttributeMappings',\n from: (s) => s.componentsConfig?.oidcMappings?.options,\n },\n {\n key: 'samlGroupMappings',\n from: (s) => s.componentsConfig?.samlGroupMappings?.options,\n },\n {\n key: 'passwordPolicy',\n from: (s) => normalizePasswordPolicy(s.componentsConfig?.newPassword),\n },\n // from componentsConfig.componentsDynamicAttrs, matched by [data-name=\"…\"]\n { key: 'recoveryCodes', from: (s) => recoveryCodesOf(s.componentsConfig) },\n { key: 'outboundApp', from: (s) => outboundAppOf(s.componentsConfig) },\n];\n\n/**\n * Build the custom-screen `data` field — all server-produced screen data in one place.\n * Every field is declared in DATA_FIELDS as a `data` key + a reader over the raw screen\n * state; this function just applies them and skips any whose reader returns undefined.\n * Returns undefined when nothing was produced.\n */\nconst buildCustomScreenData = (\n screenState: ScreenState | undefined,\n): CustomScreenData | undefined => {\n if (!screenState) return undefined;\n\n const data: Record<string, unknown> = {};\n DATA_FIELDS.forEach(({ key, from }) => {\n const value = from(screenState);\n if (value !== undefined) data[key] = value;\n });\n\n return Object.keys(data).length ? (data as CustomScreenData) : undefined;\n};\n\nexport const transformStepStateForCustomScreen = (\n state: Partial<StepState>,\n) => {\n const sanitizedState: CustomScreenState = omitBy(\n state.screenState,\n (_, key) => EXCLUDED_STATE_KEYS.includes(key) || key.startsWith('_'),\n );\n\n const {\n screenState: { errorText, errorType },\n } = state;\n\n if (errorText || errorType) {\n sanitizedState.error = { text: errorText, type: errorType };\n }\n\n if (state.action) {\n sanitizedState.action = state.action;\n }\n\n // `data` is SDK-owned and stripped from the raw state via EXCLUDED_STATE_KEYS,\n // so a backend-provided `data` never leaks through — we always set our own below.\n const data = buildCustomScreenData(state.screenState);\n if (data) {\n sanitizedState.data = data;\n }\n\n return sanitizedState;\n};\n\nexport const transformScreenInputs = (inputs: Record<string, any>) => {\n const res = { ...inputs };\n\n if (inputs.inboundAppApproveScopes) {\n res.thirdPartyAppApproveScopes = inputs.inboundAppApproveScopes;\n }\n\n return res;\n};\n\nexport function getScriptResultPath(scriptId: string, resultKey?: string) {\n const path = resultKey ? `${scriptId}_${resultKey}` : scriptId;\n return `${SDK_SCRIPT_RESULTS_KEY}.${path}`;\n}\n\nexport const openCenteredPopup = (\n url: string,\n title: string,\n w: number,\n h: number,\n) => {\n const dualScreenLeft =\n window.screenLeft !== undefined\n ? window.screenLeft\n : (window.screen as any).left;\n const dualScreenTop =\n window.screenTop !== undefined\n ? window.screenTop\n : (window.screen as any).top;\n\n const width =\n window.innerWidth ||\n document.documentElement.clientWidth ||\n window.screen.width;\n const height =\n window.innerHeight ||\n document.documentElement.clientHeight ||\n window.screen.height;\n\n const left = (width - w) / 2 + dualScreenLeft;\n const top = (height - h) / 2 + dualScreenTop;\n\n // Safari on Mac may detect authentication URLs and replace the popup with a native macOS auth dialog.\n // To avoid that, we open the popup with empty string as URL and then populate it with the needed URL.\n // This avoids the native dialog, and uses the web interface for authentication.\n const initialUrl = isIphoneSafari() ? 'about:blank' : '';\n const popup = window.open(\n initialUrl,\n title,\n `width=${w},height=${h},top=${top},left=${left},scrollbars=yes,resizable=yes`,\n );\n\n popup.location.href = url;\n popup.focus();\n\n return popup;\n};\n"],"names":["MD_COMPONENTS","withRetry","fn","timeoutMs","maxRetries","args","__awaiter","this","lastError","totalAttempts","attempt","error","Promise","resolve","setTimeout","Math","pow","getUrlParam","paramName","URLSearchParams","window","location","search","get","resetUrlParam","history","replaceState","newUrl","URL","href","delete","toString","fetchContent","url","returnType","res","fetch","cache","ok","Error","status","body","headers","Object","fromEntries","entries","getContentUrl","projectId","filename","assetsFolder","ASSETS_FOLDER","baseUrl","OVERRIDE_CONTENT_URL","BASE_CONTENT_URL","pathname","paths","join","replace","pathJoin","getAnimationDirection","currentIdxStr","prevIdxStr","currentIdx","prevIdx","Number","isNaN","Direction","forward","backward","getRunIdsFromUrl","flowId","executionId","stepId","URL_RUN_IDS_PARAM_NAME","split","executionFlowId","_a","exec","getFlowIdFromExecId","isChromium","test","navigator","userAgent","vendor","clearRunIdsFromUrl","getTokenFromUrl","URL_TOKEN_PARAM_NAME","undefined","clearTokenFromUrl","getCodeFromUrl","URL_CODE_PARAM_NAME","getIsPopupFromUrl","URL_REDIRECT_MODE_PARAM_NAME","getExchangeErrorFromUrl","URL_ERR_PARAM_NAME","clearCodeFromUrl","clearIsPopupFromUrl","clearExchangeErrorFromUrl","getRedirectAuthFromUrl","redirectAuthCodeChallenge","URL_REDIRECT_AUTH_CHALLENGE_PARAM_NAME","redirectAuthCallbackUrl","URL_REDIRECT_AUTH_CALLBACK_PARAM_NAME","redirectAuthBackupCallbackUri","URL_REDIRECT_AUTH_BACKUP_CALLBACK_PARAM_NAME","redirectAuthInitiator","URL_REDIRECT_AUTH_INITIATOR_PARAM_NAME","getOIDCIDPParamFromUrl","OIDC_IDP_STATE_ID_PARAM_NAME","clearOIDCIDPParamFromUrl","getSAMLIDPParamFromUrl","SAML_IDP_STATE_ID_PARAM_NAME","clearSAMLIDPParamFromUrl","getWSFedIDPParamFromUrl","WSFED_IDP_STATE_ID_PARAM_NAME","clearWSFedIDPParamFromUrl","getSAMLIDPUsernameParamFromUrl","SAML_IDP_USERNAME_PARAM_NAME","clearSAMLIDPUsernameParamFromUrl","getDescopeIDPInitiatedParamFromUrl","DESCOPE_IDP_INITIATED_PARAM_NAME","clearDescopeIDPInitiatedParamFromUrl","getSSOAppIdParamFromUrl","SSO_APP_ID_PARAM_NAME","getCustomAppIdParamFromUrl","CUSTOM_APP_ID_PARAM_NAME","getThirdPartyAppIdParamFromUrl","THIRD_PARTY_APP_ID_PARAM_NAME","clearSSOAppIdParamFromUrl","clearCustomAppIdParamFromUrl","clearThirdPartyAppIdParamFromUrl","getThirdPartyAppStateIdParamFromUrl","THIRD_PARTY_APP_STATE_ID_PARAM_NAME","clearThirdPartyAppStateIdParamFromUrl","getApplicationScopesParamFromUrl","APPLICATION_SCOPES_PARAM_NAME","clearApplicationScopesParamFromUrl","getOIDCLoginHintParamFromUrl","OIDC_LOGIN_HINT_PARAM_NAME","clearOIDCLoginHintParamFromUrl","getOIDCPromptParamFromUrl","OIDC_PROMPT_PARAM_NAME","clearOIDCPromptParamFromUrl","getOIDCErrorRedirectUriParamFromUrl","OIDC_ERROR_REDIRECT_URI_PARAM_NAME","clearOIDCErrorRedirectUriParamFromUrl","getOIDCResourceParamFromUrl","OIDC_RESOURCE_PARAM_NAME","clearOIDCResourceParamFromUrl","camelCase","s","x","toUpperCase","createIsChanged","state","prevState","attrName","getElementDescopeAttributes","ele","Array","from","attributes","reduce","acc","attr","descopeAttrName","RegExp","DESCOPE_ATTRIBUTE_PREFIX","name","assign","value","handleUrlParams","logger","debug","ssoQueryParams","token","code","isPopup","exchangeError","oidcIdpStateId","samlIdpStateId","wsfedIdpStateId","samlIdpUsername","descopeIdpInitiated","ssoAppId","customAppId","thirdPartyAppId","thirdPartyAppStateId","applicationScopes","oidcLoginHint","oidcPrompt","oidcErrorRedirectUri","oidcResource","withMemCache","prevArgs","array2","array1","length","every","index","reset","FOCUSABLE_INPUTS_SELECTOR","handleAutoFocus","autoFocus","isFirstScreen","firstVisibleInput","querySelector","focus","handleReportValidityOnBlur","rootEle","onInvalid","querySelectorAll","forEach","addEventListener","onBlur","origFocus","valid","reportValidity","getAttribute","ref","timer","onClick","e","target","clearTimeout","removeEventListener","once","timeoutPromise","timeout","promise","fallback","reject","expired","then","catch","getChromiumVersion","brands","userAgentData","found","find","brand","version","parseFloat","showFirstScreenOnExecutionInit","startScreenId","createHiddenInput","role","input","document","createElement","type","setAttribute","injectSamlIdpForm","samlResponse","relayState","submitCallback","formEle","method","action","appendChild","submitBtn","id","style","display","injectWsFedIdpForm","wresult","wctx","submitForm","submit","getFirstNonEmptyValue","obj","keys","firstNonEmptyKey","key","leadingDebounce","func","wait","apply","clearPreviousExternalInputs","remove","shouldHandleMarkdown","compName","includes","PASSWORD_POLICY_KEYS","minLength","strength","disallowedChars","email","activePolicies","availablePolicies","dynamicAttrsOf","componentsConfig","componentsDynamicAttrs","match","selector","dataNameOf","DATA_FIELDS","totp","notp","sentTo","sso","selfProvisionDomains","_b","thirdPartyAppApproveScopes","data","sqSetup","sqVerify","userSelectedTenant","userRoles","ssoApplications","ssoConfigurations","samlMappings","options","oidcMappings","samlGroupMappings","newPassword","policy","map","clean","raw","filter","v","normalizePasswordPolicy","isArray","recoveryCodesOf","label","iconSrc","appId","outboundAppOf","transformStepStateForCustomScreen","sanitizedState","screenState","predicate","_","EXCLUDED_STATE_KEYS","startsWith","errorText","errorType","text","buildCustomScreenData","transformScreenInputs","inputs","inboundAppApproveScopes","getScriptResultPath","scriptId","resultKey","SDK_SCRIPT_RESULTS_KEY","openCenteredPopup","title","w","h","dualScreenLeft","screenLeft","screen","left","dualScreenTop","screenTop","top","innerWidth","documentElement","clientWidth","width","innerHeight","clientHeight","height","initialUrl","ua","isIphone","isSafari","isIphoneSafari","popup","open"],"mappings":"0mCA0CA,MAAMA,EAAgB,CAAC,kCASPC,EACdC,EACAC,EACAC,GAEA,MAAO,IAAUC,IAAiCC,EAAAC,UAAA,OAAA,GAAA,YAChD,IAAIC,EACJ,MAAMC,EAAgBL,EAAa,EAGnC,IAAK,IAAIM,EAAU,EAAGA,EAAUD,EAAeC,IAC7C,IAEE,aAAaR,KAAMG,EACpB,CAAC,MAAOM,GACPH,EAAYG,EAGRD,EAAUN,UAEN,IAAIQ,SAASC,IACjBC,WAAWD,EAASV,EAAYY,KAAKC,IAAI,EAAGN,EAAU,GAAG,IAG9D,CAIH,MAAMF,CACR,GACF,CAEA,SAASS,EAAYC,GAGnB,OAFkB,IAAIC,gBAAgBC,OAAOC,SAASC,QAErCC,IAAIL,EACvB,CAgBA,SAASM,EAAcN,GACrB,GAAIE,OAAOK,QAAQC,cAAgBT,EAAYC,GAAY,CACzD,MAAMS,EAAS,IAAIC,IAAIR,OAAOC,SAASQ,MACjCP,EAAS,IAAIH,gBAAgBQ,EAAOL,QAC1CA,EAAOQ,OAAOZ,GACdS,EAAOL,OAASA,EAAOS,WACvBX,OAAOK,QAAQC,aAAa,CAAA,EAAI,GAAIC,EAAOI,WAC5C,CACH,CAOsB,SAAAC,EACpBC,EACAC,4CAKA,MAAMC,QAAYC,MAAMH,EAAK,CAAEI,MAAO,YACtC,IAAKF,EAAIG,GACP,MAAMC,MAAM,sBAAsBN,MAAQE,EAAIK,WAGhD,MAAO,CACLC,WAAYN,EAAID,KAChBQ,QAASC,OAAOC,YAAYT,EAAIO,QAAQG,cAE3C,CAIe,SAAAC,GAAcC,UAC5BA,EAASC,SACTA,EAAQC,aACRA,EAAeC,EAAaC,QAC5BA,IAOA,MAAMlB,EAAM,IAAIL,IAAIwB,GAAwBD,GAAWE,GAGvD,OAFApB,EAAIqB,SAdW,KAAIC,IAAoBA,EAAMC,KAAK,KAAKC,QAAQ,OAAQ,KAcxDC,CAASzB,EAAIqB,SAAUP,EAAWE,EAAcD,GAExDf,EAAIF,UACb,CAEgB,SAAA4B,EACdC,EACAC,GAEA,IAAKA,EAAY,OAEjB,MAAMC,GAAcF,EACdG,GAAWF,EAEjB,OAAIG,OAAOC,MAAMH,IAAeE,OAAOC,MAAMF,QAA7C,EACID,EAAaC,EAAgBG,EAAUC,QACvCL,EAAaC,EAAgBG,EAAUE,cAA3C,CAEF,CAEa,MAAAC,EAAoBC,IAC/B,IAAKC,EAAc,GAAIC,EAAS,KAjFzBvD,EAAYwD,IAiFyC,IAAIC,MAAM,KACtE,MAAMC,EA3DoB,CAACJ,UAE3B,OAAiC,QAA1BK,EADO,cACDC,KAAKN,UAAe,IAAAK,OAAA,EAAAA,EAAA,KAAM,EAAE,EAyDjBE,CAAoBP,GAQ5C,QALKD,GAAWK,GAAmBA,IAAoBL,KACrDC,EAAc,GACdC,EAAS,IAGJ,CAAED,cAAaC,SAAQG,kBAAiB,WAOjCI,IACd,MACE,SAASC,KAAKC,UAAUC,YAAc,aAAaF,KAAKC,UAAUE,OAEtE,UAagBC,IACd5D,EAAciD,EAChB,UAEgBY,IACd,OAAOpE,EAAYqE,SAAyBC,CAC9C,UAEgBC,IACdhE,EAAc8D,EAChB,UAEgBG,IACd,OAAOxE,EAAYyE,SAAwBH,CAC7C,UAEgBI,IACd,MAAqD,UAA9C1E,EAAY2E,EACrB,UAEgBC,IACd,OAAO5E,EAAY6E,SAAuBP,CAC5C,UAEgBQ,IACdvE,EAAckE,EAChB,UAEgBM,IACdxE,EAAcoE,EAChB,UAEgBK,IACdzE,EAAcsE,EAChB,UAEgBI,IAad,MAAO,CACLC,0BAbgClF,EAChCmF,GAaAC,wBAX8BpF,EAC9BqF,GAWAC,8BAToCtF,EACpCuF,GASAC,sBAP4BxF,EAC5ByF,GAQJ,UAEgBC,IACd,OAAO1F,EAAY2F,EACrB,UAEgBC,IACdrF,EAAcoF,EAChB,UAEgBE,IACd,OAAO7F,EAAY8F,EACrB,UAEgBC,IACdxF,EAAcuF,EAChB,UAEgBE,KACd,OAAOhG,EAAYiG,EACrB,UAEgBC,KACd3F,EAAc0F,EAChB,UAEgBE,KACd,OAAOnG,EAAYoG,EACrB,UAEgBC,KACd9F,EAAc6F,EAChB,UAEgBE,KACd,OAAOtG,EAAYuG,EACrB,UAEgBC,KACdjG,EAAcgG,EAChB,UAEgBE,KACd,OAAOzG,EAAY0G,EACrB,UAEgBC,KACd,OAAO3G,EAAY4G,EACrB,UAEgBC,KACd,OAAO7G,EAAY8G,EACrB,UAEgBC,KACdxG,EAAcmG,EAChB,UAEgBM,KACdzG,EAAcqG,EAChB,UAEgBK,KACd1G,EAAcuG,EAChB,UAEgBI,KACd,OAAOlH,EAAYmH,EACrB,UAEgBC,KACd7G,EAAc4G,EAChB,UAEgBE,KACd,OAAOrH,EAAYsH,EACrB,UAEgBC,KACdhH,EAAc+G,EAChB,UAEgBE,KACd,OAAOxH,EAAYyH,EACrB,UAEgBC,KACdnH,EAAckH,EAChB,UAEgBE,KACd,OAAO3H,EAAY4H,EACrB,UAEgBC,KACdtH,EAAcqH,EAChB,UAEgBE,KACd,OAAO9H,EAAY+H,EACrB,UAEgBC,KACdzH,EAAcwH,EAChB,UAEgBE,KACd,OAAOjI,EAAYkI,EACrB,UAEgBC,KACd5H,EAAc2H,EAChB,CAEO,MAAME,GAAaC,GACxBA,EAAE7F,QAAQ,OAAQ8F,GAAMA,EAAE,GAAGC,gBAElBC,GACX,CAAgCC,EAAUC,IACzCC,GACCF,EAAME,KAAcD,EAAUC,GAErBC,GAA+BC,GAC1CC,MAAMC,MAAKF,aAAG,EAAHA,EAAKG,aAAc,IAAIC,QAAO,CAACC,EAAKC,WAC7C,MAAMC,EAEc,QAFIzF,EAAA,IAAI0F,OAC1B,IAAIC,YACJ1F,KAAKuF,EAAKI,aAAQ,IAAA5F,OAAA,EAAAA,EAAA,GAEpB,OAAQyF,EAEJ1H,OAAO8H,OAAON,EAAK,CAAEE,CAACA,GAAkBD,EAAKM,QAD7CP,CACqD,GACxD,IAKQQ,GAAkB,CAC7BrG,EACAsG,KAEA,MAAMrG,YAAEA,EAAWC,OAAEA,EAAMG,gBAAEA,GAAoBN,EAAiBC,GAIlE,GAAIK,GAAmBL,IAAWK,EAIhC,OAHAiG,EAAOC,MACL,8EAEK,CAAEC,eAAgB,CAAA,IAGvBvG,GAAeC,IACjBY,IAGF,MAAM2F,EAAQ1F,IACV0F,GACFvF,IAGF,MAAMwF,EAAOvF,IACTuF,GACFjF,IAIF,MAAMkF,EAAUtF,IACZsF,GACFjF,IAGF,MAAMkF,EAAgBrF,IAClBqF,GACFjF,IAKF,MAAME,0BACJA,EAAyBE,wBACzBA,EAAuBE,8BACvBA,EAA6BE,sBAC7BA,GACEP,IAEEiF,EAAiBxE,IACnBwE,GACFtE,IAGF,MAAMuE,EAAiBtE,IACnBsE,GACFpE,IAGF,MAAMqE,EAAkBpE,KACpBoE,GACFlE,KAGF,MAAMmE,EAAkBlE,KACpBgE,GACF9D,KAGF,MAAMiE,EAAsBhE,KACxBgE,GACF9D,KAGF,MAAM+D,EAAW9D,KACb8D,GACFxD,KAGF,MAAMyD,EAAc7D,KAChB6D,GACFxD,KAGF,MAAMyD,EAAkB5D,KACpB4D,GACFxD,KAGF,MAAMyD,EAAuBxD,KACzBwD,GACFtD,KAGF,MAAMuD,EAAoBtD,KACtBsD,GACFpD,KAGF,MAAMqD,EAAgBpD,KAClBoD,GACFlD,KAGF,MAAMmD,EAAalD,KACfkD,GACFhD,KAGF,MAAMiD,EAAuBhD,KACzBgD,GACF9C,KAGF,MAAM+C,EAAe9C,KACjB8C,GACF5C,KAKF,MAAO,CACL7E,cACAC,SACAuG,QACAC,OACAC,UACAC,gBACA/E,4BACAE,0BACAE,gCACAE,wBACAqE,eAAgB,CACdK,iBACAC,iBACAC,kBACAC,kBACAC,oBAlB4C,SAAxBA,EAmBpBC,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,qBAEH,EAgBUK,GAAoC/L,IAC/C,IAAIgM,EACA7J,EACJ,OAAOM,OAAO8H,QACZ,IAAIpK,KACF,OAAI6L,IAT4BC,EASQ9L,GATvB+L,EASaF,GAR3BG,SAAWF,EAAOE,QACzBD,EAAOE,OAAM,CAAC5B,EAAY6B,IAAkB7B,IAAUyB,EAAOI,QASzDL,EAAW7L,EACXgC,EAAQnC,KAAMG,IAHwCgC,EATtC,IAAC+J,EAAeD,CAcf,GAEnB,CACEK,MAAO,KACLN,OAAW3G,EACXlD,OAAQkD,CAAS,GAGtB,EAGUkH,GACX,8DAEWC,GAAkB,CAC7B5C,EACA6C,EACAC,KAEA,IACgB,IAAdD,GACe,oBAAdA,IAAoCC,EACrC,CAEA,MAAMC,EAAsC/C,EAAIgD,cAC9CL,IAEF3L,YAAW,KACT+L,SAAAA,EAAmBE,OAAO,GAE7B,GAGUC,GAA6B,CACxCC,EAIAC,KAEAD,EAAQE,iBAAiB,WAAWC,SAAStD,IAC3CA,EAAIuD,iBAAiB,QAAQ,WAC3B,MAAMC,EAAS,WAGb,MAAMC,EAAYzD,EAAIiD,MAEtBjD,EAAIiD,MAAQ,OACZ,MAAMS,UAAQ5I,EAAAkF,EAAI2D,6CACdP,IAAuB,IAAVM,GACfN,EAAUpD,GAEZhJ,YAAW,KAETgJ,EAAIiD,MAAQQ,CAAS,GACrB,EAKJ,GAFmE,SAAhCzD,EAAI4D,aAAa,aAEP,QAAX9I,EAAAkF,EAAIY,aAAO,IAAA9F,OAAA,EAAAA,EAAAyH,QAE3C,YADAiB,IAQF,MAAMK,EAAM,CAAEC,WAAOrI,GAEfsI,EAAWC,IAG+B,SAF/BA,EAAEC,OAENL,aAAa,oBACtBM,aAAaL,EAAIC,OACjBD,EAAIC,WAAQrI,EACb,EAGHoI,EAAIC,MAAQ9M,YAAW,KACrBmM,EAAQgB,oBAAoB,QAASJ,GACrCP,IACAK,EAAIC,WAAQrI,CAAS,GACpB,KAEH0H,EAAQI,iBAAiB,QAASQ,EAAS,CAAEK,MAAM,GAAO,GAC1D,GACF,WAmBYC,GACdC,EACAC,EACAC,GAEA,OAAO,IAAI1N,SAAQ,CAACC,EAAS0N,KAC3B,IAAIC,GAAU,EACd,MAAMZ,EAAQ9M,YAAW,KACvB0N,GAAU,OACOjJ,IAAb+I,EACFzN,EAAQyN,GAERC,EAAO,IAAIhM,MAAM,2BAA2B6L,QAC7C,GACAA,GAEHC,EACGI,MAAM/D,IACA8D,IACHR,aAAaJ,GACb/M,EAAQ6J,GACT,IAEFgE,OAAO/N,IACD6N,IACHR,aAAaJ,GACbW,EAAO5N,GACR,GACD,GAER,CAEO,MAAMgO,GAAqB,WAChC,MAAMC,EAA4C,QAAlChK,EAAA,OAAAK,gBAAA,IAAAA,eAAA,EAAAA,UAAmB4J,qBAAe,IAAAjK,OAAA,EAAAA,EAAAgK,OAC5CE,EAAQF,aAAM,EAANA,EAAQG,MACpB,EAAGC,QAAOC,aAAwB,aAAVD,GAAwBE,WAAWD,KAE7D,OAAOH,EAAQA,EAAMG,QAAU,CAAC,EAMrBE,GAAiC,CAC5CC,GAEEjE,iBACAC,iBACAC,kBACAC,kBACAE,WACAC,cACAI,gBACAC,aACAC,uBACAC,eACAN,kBACAC,uBACAC,0BAGAwD,GACDjE,GACAC,GACAC,GACAC,GACAE,GACAC,GACAI,GACAC,GACAC,GACAC,GACAN,GACAC,GACAC,GAIGyD,GAAoB,CAAC7E,EAAcE,EAAe4E,KACtD,MAAMC,EAAQC,SAASC,cAAc,SAOrC,OANAF,EAAMG,KAAO,SACbH,EAAM/E,KAAOA,EACb+E,EAAM7E,MAAQA,EACV4E,GACFC,EAAMI,aAAa,OAAQL,GAEtBC,CAAK,EAGDK,GAAoB,CAC/B3N,EACA4N,EACAC,EACAC,KAEA,MAAMC,EAAUR,SAASC,cAAc,QACvCO,EAAQC,OAAS,OACjBD,EAAQE,OAASjO,EAEjB+N,EAAQG,YACNd,GAAkB,eAAgBQ,EAAc,kBAElDG,EAAQG,YACNd,GAAkB,aAAcS,EAAY,qBAG9C,MAAMM,EAAYZ,SAASC,cAAc,SACzCW,EAAUV,KAAO,SACjBU,EAAUC,GAAK,mBACfD,EAAU1F,MAAQ,WAClB0F,EAAUE,MAAMC,QAAU,OAC1BP,EAAQG,YAAYC,GAEpBZ,SAAS/M,KAAK0N,YAAYH,GAE1BD,EAAeC,EAAQ,EAGZQ,GAAqB,CAChCvO,EACAwO,EACAC,EACAX,KAEA,MAAMC,EAAUR,SAASC,cAAc,QACvCO,EAAQC,OAAS,OACjBD,EAAQE,OAASjO,EAEjB+N,EAAQG,YAAYd,GAAkB,KAAM,eAC5CW,EAAQG,YAAYd,GAAkB,UAAWoB,IACjDT,EAAQG,YAAYd,GAAkB,OAAQqB,IAE9C,MAAMN,EAAYZ,SAASC,cAAc,SACzCW,EAAUV,KAAO,SACjBU,EAAUC,GAAK,oBACfD,EAAU1F,MAAQ,WAClB0F,EAAUE,MAAMC,QAAU,OAC1BP,EAAQG,YAAYC,GAEpBZ,SAAS/M,KAAK0N,YAAYH,GAE1BD,EAAeC,EAAQ,EAGZW,GAAcX,GAA6BA,aAAO,EAAPA,EAASY,SAEpDC,GAAwB,CAACC,EAAaC,KACjD,MAAMC,EAAmBD,EAAKhC,MAAMkC,GAAQH,EAAIG,KAChD,OAAOD,EAAmBF,EAAIE,GAAoB,IAAI,EAG3CE,GAAkB,CAC7BC,EACAC,EAAO,OAEP,IAAIhD,EACJ,OAAO,YAA6B/N,GAC7B+N,GAAS+C,EAAKE,MAAM9Q,KAAMF,GAC/B2N,aAAaI,GACbA,EAAUtN,YAAW,KACnBsN,EAAU,IAAI,GACbgD,EACL,CAAM,EAGKE,GAA8B,KACzC9B,SACGrC,iBAAiB,8BACjBC,SAAStD,GAAQA,EAAIyH,UAAS,EAGtBC,GAAwBC,GACnCzR,EAAc0R,SAASD,GAgBnBE,GAA+C,CACnDC,UAAW,uCACXC,SAAU,8CACVC,gBAAiB,6CACjBC,MAAO,mCACPC,eAAgB,kBAChBC,kBAAmB,sBAmBfC,GAAiB,CACrBC,EACA3H,WAEA,MAAM3H,EAAUsP,aAAA,EAAAA,EAAkBC,uBAClC,IAAKvP,EAAS,OACd,MAAMwP,EAAQ1P,OAAOE,QAAQA,GAASkM,MACpC,EAAEuD,KAnCa,CAACA,IAAwC,IAAA1N,EAC1D,OAAgD,QAAhDA,EAAA0N,EAASD,MAAM,yCAAiC,IAAAzN,OAAA,EAAAA,EAAG,EAAE,EAkCnC2N,CAAWD,KAAc9H,IAE3C,OAAmB,QAAZ5F,EAAAyN,aAAK,EAALA,EAAQ,UAAI,IAAAzN,OAAA,EAAAA,EAAAqF,UAAU,EA6BzBuI,GAGA,CAEJ,CAAEvB,IAAK,OAAQjH,KAAOV,GAAMA,EAAEmJ,MAC9B,CAAExB,IAAK,OAAQjH,KAAOV,GAAMA,EAAEoJ,MAC9B,CAAEzB,IAAK,SAAUjH,KAAOV,GAAMA,EAAEqJ,QAChC,CAAE1B,IAAK,MAAOjH,KAAOV,GAAMA,EAAEsJ,KAC7B,CAAE3B,IAAK,uBAAwBjH,KAAOV,GAAMA,EAAEuJ,sBAE9C,CACE5B,IAAK,0BACLjH,KAAOV,YAAM,OAAgD,QAAhDwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAEmO,kCAA4B,IAAAD,OAAA,EAAAA,EAAAE,IAAI,GAEnE,CAAE/B,IAAK,yBAA0BjH,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE6I,uCAAkBc,OAAO,GACzE,CAAEhC,IAAK,0BAA2BjH,KAAOV,UAAM,eAAA1E,EAAA0E,EAAE6I,uCAAkBe,QAAQ,GAC3E,CACEjC,IAAK,cACLjH,KAAOV,YAAM,OAAwC,QAAxCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAEuO,0BAAoB,IAAAL,OAAA,EAAAA,EAAAE,IAAI,GAE3D,CAAE/B,IAAK,YAAajH,KAAOV,IAAK,IAAA1E,EAAAkO,EAAC,OAA+B,QAA/BA,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAEwO,iBAAW,IAAAN,OAAA,EAAAA,EAAAE,IAAI,GACpE,CACE/B,IAAK,kBACLjH,KAAOV,YAAM,OAAqC,QAArCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAEyO,uBAAiB,IAAAP,OAAA,EAAAA,EAAAE,IAAI,GAExD,CACE/B,IAAK,oBACLjH,KAAOV,YAAM,OAAuC,QAAvCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAE0O,yBAAmB,IAAAR,OAAA,EAAAA,EAAAE,IAAI,GAE1D,CACE/B,IAAK,wBACLjH,KAAOV,YAAM,OAAkC,QAAlCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAE2O,oBAAc,IAAAT,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,wBACLjH,KAAOV,YAAM,OAAkC,QAAlCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAE6O,oBAAc,IAAAX,OAAA,EAAAA,EAAAU,OAAO,GAExD,CACEvC,IAAK,oBACLjH,KAAOV,YAAM,OAAuC,QAAvCwJ,EAAkB,QAAlBlO,EAAA0E,EAAE6I,wBAAgB,IAAAvN,OAAA,EAAAA,EAAE8O,yBAAmB,IAAAZ,OAAA,EAAAA,EAAAU,OAAO,GAE7D,CACEvC,IAAK,iBACLjH,KAAOV,UAAM,MAhGe,CAC9BqK,IAEA,IAAKA,EAAa,OAClB,MAAMC,EAASjR,OAAOC,YACpBD,OAAOE,QAAQ8O,IACZkC,KAAI,EAAEC,EAAOC,KAAS,CAACD,EAAOH,EAAYI,MAC1CC,QAAO,EAAC,CAAGC,UAAa1O,IAAN0O,KAEvB,OAAOtR,OAAOoO,KAAK6C,GAAQvH,OAASuH,OAASrO,CAAS,EAuFvC2O,SAAwBtP,EAAA0E,EAAE6I,uCAAkBwB,YAAY,GAGvE,CAAE1C,IAAK,gBAAiBjH,KAAOV,GAzET,CAAC6I,IACvB,MAAMlI,EAAaiI,GAAeC,EAAkB,iBACpD,GAAKlI,EACL,OAAOF,MAAMoK,QAAQlK,EAAW+I,MAC5B/I,EAAW+I,KAAKa,KAAK7I,GAA4BA,EAAKN,QACtD,EAAE,EAoE+B0J,CAAgB9K,EAAE6I,mBACvD,CAAElB,IAAK,cAAejH,KAAOV,GAlET,CAAC6I,IACrB,MAAMlI,EAAaiI,GAAeC,EAAkB,eACpD,GAAKlI,EACL,MAAO,CACLoK,MAAOpK,EAAWoK,MAClBC,QAASrK,EAAW,YACpBsK,MAAOtK,EAAW,sCACnB,EA2DkCuK,CAAclL,EAAE6I,oBAuBxCsC,GACX/K,IAEA,MAAMgL,GAtJN5D,EAuJEpH,EAAMiL,YAtJRC,EAuJE,CAACC,EAAG5D,IAAQ6D,EAAoBpD,SAAST,IAAQA,EAAI8D,WAAW,KArJlEpS,OAAOC,YACLD,OAAOE,QAAQiO,GAAKkD,QAClB,EAAE/C,EAAKvG,MAAYkK,EAAUlK,EAAOuG,OAN3B,IACbH,EACA8D,EA0JA,MACED,aAAaK,UAAEA,EAASC,UAAEA,IACxBvL,GAEAsL,GAAaC,KACfP,EAAe/T,MAAQ,CAAEuU,KAAMF,EAAWtF,KAAMuF,IAG9CvL,EAAMwG,SACRwE,EAAexE,OAASxG,EAAMwG,QAKhC,MAAM8C,EApCsB,CAC5B2B,IAEA,IAAKA,EAAa,OAElB,MAAM3B,EAAgC,CAAA,EAMtC,OALAR,GAAYpF,SAAQ,EAAG6D,MAAKjH,WAC1B,MAAMU,EAAQV,EAAK2K,QACLpP,IAAVmF,IAAqBsI,EAAK/B,GAAOvG,EAAK,IAGrC/H,OAAOoO,KAAKiC,GAAM3G,OAAU2G,OAA4BzN,CAAS,EAyB3D4P,CAAsBzL,EAAMiL,aAKzC,OAJI3B,IACF0B,EAAe1B,KAAOA,GAGjB0B,CAAc,EAGVU,GAAyBC,IACpC,MAAMlT,EAAGQ,OAAA8H,OAAA,CAAA,EAAQ4K,GAMjB,OAJIA,EAAOC,0BACTnT,EAAI4Q,2BAA6BsC,EAAOC,yBAGnCnT,CAAG,EAGI,SAAAoT,GAAoBC,EAAkBC,GAEpD,MAAO,GAAGC,KADGD,EAAY,GAAGD,KAAYC,IAAcD,GAExD,CAEO,MAAMG,GAAoB,CAC/B1T,EACA2T,EACAC,EACAC,KAEA,MAAMC,OACkBxQ,IAAtBnE,OAAO4U,WACH5U,OAAO4U,WACN5U,OAAO6U,OAAeC,KACvBC,OACiB5Q,IAArBnE,OAAOgV,UACHhV,OAAOgV,UACNhV,OAAO6U,OAAeI,IAWvBH,IARJ9U,OAAOkV,YACP9G,SAAS+G,gBAAgBC,aACzBpV,OAAO6U,OAAOQ,OAMMZ,GAAK,EAAIE,EACzBM,IALJjV,OAAOsV,aACPlH,SAAS+G,gBAAgBI,cACzBvV,OAAO6U,OAAOW,QAGMd,GAAK,EAAIK,EAKzBU,EA/2BR,WACE,MAAMC,EAAK7R,UAAUC,WAAa,GAC5B6R,EAAW,eAAe/R,KAAK8R,GAE/BE,EACJ,SAAShS,KAAK8R,KAAQ,2CAA2C9R,KAAK8R,GAExE,OAAOC,GAAYC,CACrB,CAu2BqBC,GAAmB,cAAgB,GAChDC,EAAQ9V,OAAO+V,KACnBN,EACAjB,EACA,SAASC,YAAYC,SAASO,UAAYH,kCAM5C,OAHAgB,EAAM7V,SAASQ,KAAOI,EACtBiV,EAAMnK,QAECmK,CAAK"}