@ethora/chat-component-rn 26.6.12 → 26.7.1

package/lib/commonjs/networking/apiClient.js

@@ -6,12 +6,14 @@ Object.defineProperty(exports, "__esModule", {
 exports.default = void 0;
 exports.getCurrentAppToken = getCurrentAppToken;
 exports.getCurrentBaseURL = getCurrentBaseURL;
+exports.normalizeApiPath = void 0;
 exports.refresh = refresh;
 exports.setBaseURL = setBaseURL;
 var _axios = _interopRequireDefault(require("axios"));
 var _roomStore = require("../roomStore");
 var _chatSettingsSlice = require("../roomStore/chatSettingsSlice");
 var _devLogger = require("../utils/devLogger");
+var _authRefresh = require("./authRefresh");
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
 // Per product-code-policy: no compiled-in Ethora endpoints or tokens.
 // Consumers must call `setBaseURL(baseUrl, appToken)` (or pass
@@ -27,10 +29,25 @@ const http = _axios.default.create({
 // Dev-logger hook: capture every request + response on the shared
 // `http` instance.
 (0, _devLogger.installAxiosCapture)(http);
+const stripApiVersion = baseUrl => baseUrl.replace(/\/+$/, '').replace(/\/v\d+$/, '');
+const normalizeApiPath = path => {
+  if (!path) {
+    return path;
+  }
+  if (/^https?:\/\//i.test(path)) {
+    return path;
+  }
+  if (/^\/v\d+\//.test(path)) {
+    return path;
+  }
+  return `/v1${path.startsWith('/') ? '' : '/'}${path}`;
+};
+exports.normalizeApiPath = normalizeApiPath;
 function setBaseURL(baseUrl, appToken) {
-  if (baseUrl && baseUrl !== currentBaseURL) {
-    currentBaseURL = baseUrl;
-    http.defaults.baseURL = baseUrl;
+  const normalized = baseUrl ? stripApiVersion(baseUrl) : baseUrl;
+  if (normalized && normalized !== currentBaseURL) {
+    currentBaseURL = normalized;
+    http.defaults.baseURL = normalized;
   }
   if (appToken && appToken !== currentAppToken) {
     currentAppToken = appToken;
@@ -42,132 +59,65 @@ function getCurrentAppToken() {
 function getCurrentBaseURL() {
   return currentBaseURL;
 }
+
+/**
+ * @deprecated Import `refreshAuthTokens` from `./authRefresh` instead.
+ *
+ * Kept as a thin forwarder so existing call sites keep working while
+ * they migrate. Declared as a function (not `const refresh =
+ * refreshAuthTokens`) on purpose: this module and `authRefresh` import
+ * each other, and a const would capture the binding before the other
+ * module finished evaluating.
+ */
 function refresh() {
-  return new Promise((resolve, reject) => {
-    const user = _roomStore.store.getState().chatSettingStore.user;
-    try {
-      http.post('/users/login/refresh', {}, {
-        headers: {
-          Authorization: user.refreshToken
-        }
-      }).then(response => {
-        _roomStore.store.dispatch((0, _chatSettingsSlice.refreshTokens)({
-          token: response.data.token,
-          refreshToken: response.data.refreshToken
-        }));
-        // BUGFIX: previously the `.then` only dispatched and never
-        // resolved, so every `await refresh()` callsite hung forever
-        // on the happy path. Resolve with the axios response shape so
-        // the interceptor can read `tokens.data.token` to retry.
-        resolve(response);
-      }).catch(error => {
-        reject(error);
-      });
-    } catch (error) {
-      // BUGFIX: previously the outer-try catch dispatched logout but
-      // never rejected, so a synchronous throw from `http.post` (e.g.
-      // a bad URL) would hang the promise. Reject explicitly.
-      console.log('errr');
-      _roomStore.store.dispatch((0, _chatSettingsSlice.logout)());
-      reject(error);
-    }
-  });
+  return (0, _authRefresh.refreshAuthTokens)();
 }
-let isRefreshing = false;
-let failedQueue = [];
-const addRequestToQueue = config => {
-  return new Promise((resolve, reject) => {
-    failedQueue.push({
-      resolve,
-      reject,
-      config
-    });
-  });
-};
-const processQueue = newAccessToken => {
-  for (const request of failedQueue) {
-    if (newAccessToken) {
-      request.config.headers.Authorization = newAccessToken;
-    }
-    request.resolve(http(request.config));
-  }
-  failedQueue = [];
-};
 http.interceptors.response.use(response => response, async error => {
-  // BUGFIX: the original condition was `if (!enabled)` — inverted, so
-  // turning `refreshTokens.enabled: true` actually DISABLED the refresh
-  // path on 401. Use the correct sense.
-  if (!_roomStore.store.getState().chatSettingStore?.config?.refreshTokens?.enabled) {
-    // BUGFIX: previously this branch fell off the end of the async
-    // function and returned `undefined`, which axios treats as a
-    // resolved-with-undefined response. Callers expecting an error
-    // got `undefined` instead, silently swallowing every failure
-    // when the refresh path isn't configured. Re-reject so the
-    // original error reaches the caller.
-    return Promise.reject(error);
-  }
   const originalRequest = error.config;
   const status = error.response?.status;
 
   // Refresh paths only fire on 401. Anything else passes through.
-  if (!error.response || status !== 401) {
+  if (!error.response || status !== 401 || !originalRequest) {
     return Promise.reject(error);
   }
-  if (_roomStore.store.getState().chatSettingStore?.config?.refreshTokens?.refreshFunction) {
-    // Consumer-supplied refresh function. Call it, dispatch the new
-    // tokens, retry the original request.
-    try {
-      const fn = _roomStore.store.getState().chatSettingStore?.config?.refreshTokens?.refreshFunction;
-      if (!fn) return Promise.reject(error);
-      const result = await fn();
-      const {
-        refreshToken: newRefreshToken,
-        accessToken
-      } = result || {
-        refreshToken: '',
-        accessToken: ''
-      };
-      _roomStore.store.dispatch((0, _chatSettingsSlice.refreshTokens)({
-        token: accessToken,
-        refreshToken: newRefreshToken || ''
-      }));
-      // BUGFIX: previously this branch returned `undefined` after
-      // dispatching, so the original request was never retried and
-      // the caller resolved with undefined. Stamp the new token on
-      // the original config and replay.
-      if (originalRequest?.headers) {
-        originalRequest.headers.Authorization = accessToken;
-      }
-      return http(originalRequest);
-    } catch (refreshErr) {
-      return Promise.reject(refreshErr);
-    }
+
+  // Never retry twice, and never touch the auth endpoints themselves —
+  // both would recurse. (`_retry` was set but never checked before,
+  // so a request could bounce between 401 and replay indefinitely.)
+  if (originalRequest._retry || originalRequest.url === '/v1/users/login/refresh' || originalRequest.url === '/v1/users/login') {
+    return Promise.reject(error);
   }
+  const refreshConfig = _roomStore.store.getState().chatSettingStore?.config?.refreshTokens;
 
-  // Built-in `/users/login/refresh` path. Skip if the failing request
-  // IS the refresh / login itself — otherwise we'd loop forever.
-  if (originalRequest.url === '/users/login/refresh' || originalRequest.url === '/users/login') {
+  // BUGFIX (kept): the original condition here was inverted, so
+  // `refreshTokens.enabled: true` actually DISABLED the refresh path.
+  if (!refreshConfig?.enabled) {
     return Promise.reject(error);
   }
-  originalRequest._retry = true;
-  if (isRefreshing) {
-    const retryOriginalRequest = addRequestToQueue(originalRequest);
-    return retryOriginalRequest;
+
+  // Nothing to rotate with — reject rather than firing a doomed
+  // refresh that would look like a bad-token event to the backend.
+  const hasRefreshableSession = Boolean(refreshConfig.refreshFunction || _roomStore.store.getState().chatSettingStore.user?.refreshToken);
+  if (!hasRefreshableSession) {
+    return Promise.reject(error);
   }
-  isRefreshing = true;
+  originalRequest._retry = true;
   try {
-    const tokens = await refresh();
-    // (was: console.log('tokens', tokens) — dumped the full response
-    // incl. access/refresh/ws tokens on every refresh; removed.)
-    isRefreshing = false;
-    originalRequest.headers.Authorization = tokens.data.token;
-    processQueue(tokens.data.token);
+    // One shared rotation for every 401 in flight — `refreshAuthTokens`
+    // dedupes internally, which replaces the old isRefreshing/
+    // failedQueue machinery entirely.
+    const tokens = await (0, _authRefresh.refreshAuthTokens)();
+    originalRequest.headers = originalRequest.headers || {};
+    originalRequest.headers.Authorization = tokens.token;
     return http(originalRequest);
   } catch (refreshErr) {
-    isRefreshing = false;
-    // BUGFIX: previously this returned the error (resolving the
-    // promise with the error as value) instead of rejecting, so
-    // axios callers got the error as a "successful" response body.
+    // Only a genuinely dead session logs the user out. A network
+    // blip, a 5xx, or a REFRESH_IN_PROGRESS race must leave the
+    // session alone — logging out on those is exactly the mass-logout
+    // failure mode the new backend scheme would otherwise cause.
+    if ((0, _authRefresh.isRefreshFatalError)(refreshErr)) {
+      _roomStore.store.dispatch((0, _chatSettingsSlice.logout)());
+    }
     return Promise.reject(refreshErr);
   }
 });

package/lib/commonjs/networking/apiClient.js.map

@@ -1 +1 @@
-{"version":3,"names":["_axios","_interopRequireDefault","require","_roomStore","_chatSettingsSlice","_devLogger","e","__esModule","default","DEFAULT_BASE_URL","currentBaseURL","currentAppToken","http","axios","create","baseURL","installAxiosCapture","setBaseURL","baseUrl","appToken","defaults","getCurrentAppToken","getCurrentBaseURL","refresh","Promise","resolve","reject","user","store","getState","chatSettingStore","post","headers","Authorization","refreshToken","then","response","dispatch","refreshTokens","token","data","catch","error","console","log","logout","isRefreshing","failedQueue","addRequestToQueue","config","push","processQueue","newAccessToken","request","interceptors","use","enabled","originalRequest","status","refreshFunction","fn","result","newRefreshToken","accessToken","refreshErr","url","_retry","retryOriginalRequest","tokens","_default","exports"],"sourceRoot":"../../../src","sources":["networking/apiClient.ts"],"mappings":";;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAEA,IAAAE,kBAAA,GAAAF,OAAA;AACA,IAAAG,UAAA,GAAAH,OAAA;AAAyD,SAAAD,uBAAAK,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEzD;AACA;AACA;AACA;AACA,MAAMG,gBAAgB,GAAG,EAAE;AAE3B,IAAIC,cAAc,GAAGD,gBAAgB;AACrC,IAAIE,eAAuB,GAAG,EAAE;AAEhC,MAAMC,IAAI,GAAGC,cAAK,CAACC,MAAM,CAAC;EACxBC,OAAO,EAAEL;AACX,CAAC,CAAC;;AAEF;AACA;AACA,IAAAM,8BAAmB,EAACJ,IAAI,CAAC;AAElB,SAASK,UAAUA,CAACC,OAAgB,EAAEC,QAAiB,EAAE;EAC9D,IAAID,OAAO,IAAIA,OAAO,KAAKR,cAAc,EAAE;IACzCA,cAAc,GAAGQ,OAAO;IACxBN,IAAI,CAACQ,QAAQ,CAACL,OAAO,GAAGG,OAAO;EACjC;EACA,IAAIC,QAAQ,IAAIA,QAAQ,KAAKR,eAAe,EAAE;IAC5CA,eAAe,GAAGQ,QAAQ;EAC5B;AACF;AAEO,SAASE,kBAAkBA,CAAA,EAAG;EACnC,OAAOV,eAAe;AACxB;AAEO,SAASW,iBAAiBA,CAAA,EAAG;EAClC,OAAOZ,cAAc;AACvB;AAEO,SAASa,OAAOA,CAAA,EAEpB;EACD,OAAO,IAAIC,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACtC,MAAMC,IAAI,GAAGC,gBAAK,CAACC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,CAACH,IAAI;IACnD,IAAI;MACFf,IAAI,CACDmB,IAAI,CACH,sBAAsB,EACtB,CAAC,CAAC,EACF;QAAEC,OAAO,EAAE;UAAEC,aAAa,EAAEN,IAAI,CAACO;QAAa;MAAE,CAClD,CAAC,CACAC,IAAI,CAAEC,QAAQ,IAAK;QAClBR,gBAAK,CAACS,QAAQ,CACZ,IAAAC,gCAAa,EAAC;UACZC,KAAK,EAAEH,QAAQ,CAACI,IAAI,CAACD,KAAK;UAC1BL,YAAY,EAAEE,QAAQ,CAACI,IAAI,CAACN;QAC9B,CAAC,CACH,CAAC;QACD;QACA;QACA;QACA;QACAT,OAAO,CAACW,QAAQ,CAAC;MACnB,CAAC,CAAC,CACDK,KAAK,CAAEC,KAAK,IAAK;QAChBhB,MAAM,CAACgB,KAAK,CAAC;MACf,CAAC,CAAC;IACN,CAAC,CAAC,OAAOA,KAAK,EAAE;MACd;MACA;MACA;MACAC,OAAO,CAACC,GAAG,CAAC,MAAM,CAAC;MACnBhB,gBAAK,CAACS,QAAQ,CAAC,IAAAQ,yBAAM,EAAC,CAAC,CAAC;MACxBnB,MAAM,CAACgB,KAAK,CAAC;IACf;EACF,CAAC,CAAC;AACJ;AAEA,IAAII,YAAY,GAAG,KAAK;AACxB,IAAIC,WAAkB,GAAG,EAAE;AAE3B,MAAMC,iBAAiB,GAAIC,MAAW,IAAK;EACzC,OAAO,IAAIzB,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;IACtCqB,WAAW,CAACG,IAAI,CAAC;MAAEzB,OAAO;MAAEC,MAAM;MAAEuB;IAAO,CAAC,CAAC;EAC/C,CAAC,CAAC;AACJ,CAAC;AAED,MAAME,YAAY,GAAIC,cAAsB,IAAK;EAC/C,KAAK,MAAMC,OAAO,IAAIN,WAAW,EAAE;IACjC,IAAIK,cAAc,EAAE;MAClBC,OAAO,CAACJ,MAAM,CAACjB,OAAO,CAACC,aAAa,GAAGmB,cAAc;IACvD;IAEAC,OAAO,CAAC5B,OAAO,CAACb,IAAI,CAACyC,OAAO,CAACJ,MAAM,CAAC,CAAC;EACvC;EAEAF,WAAW,GAAG,EAAE;AAClB,CAAC;AAEDnC,IAAI,CAAC0C,YAAY,CAAClB,QAAQ,CAACmB,GAAG,CAC3BnB,QAAQ,IAAKA,QAAQ,EACtB,MAAOM,KAAK,IAAK;EACf;EACA;EACA;EACA,IAAI,CAACd,gBAAK,CAACC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,EAAEmB,MAAM,EAAEX,aAAa,EAAEkB,OAAO,EAAE;IACtE;IACA;IACA;IACA;IACA;IACA;IACA,OAAOhC,OAAO,CAACE,MAAM,CAACgB,KAAK,CAAC;EAC9B;EAEA,MAAMe,eAAe,GAAGf,KAAK,CAACO,MAAM;EACpC,MAAMS,MAAM,GAAGhB,KAAK,CAACN,QAAQ,EAAEsB,MAAM;;EAErC;EACA,IAAI,CAAChB,KAAK,CAACN,QAAQ,IAAIsB,MAAM,KAAK,GAAG,EAAE;IACrC,OAAOlC,OAAO,CAACE,MAAM,CAACgB,KAAK,CAAC;EAC9B;EAEA,IACEd,gBAAK,CAACC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,EAAEmB,MAAM,EAAEX,aAAa,EAAEqB,eAAe,EACzE;IACA;IACA;IACA,IAAI;MACF,MAAMC,EAAE,GAAGhC,gBAAK,CAACC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,EAAEmB,MAAM,EAAEX,aAAa,EAAEqB,eAAe;MACpF,IAAI,CAACC,EAAE,EAAE,OAAOpC,OAAO,CAACE,MAAM,CAACgB,KAAK,CAAC;MACrC,MAAMmB,MAAM,GAAG,MAAMD,EAAE,CAAC,CAAC;MACzB,MAAM;QAAE1B,YAAY,EAAE4B,eAAe;QAAEC;MAAY,CAAC,GAAGF,MAAM,IAAI;QAAE3B,YAAY,EAAE,EAAE;QAAE6B,WAAW,EAAE;MAAG,CAAC;MACtGnC,gBAAK,CAACS,QAAQ,CACZ,IAAAC,gCAAa,EAAC;QACZC,KAAK,EAAEwB,WAAW;QAClB7B,YAAY,EAAE4B,eAAe,IAAI;MACnC,CAAC,CACH,CAAC;MACD;MACA;MACA;MACA;MACA,IAAIL,eAAe,EAAEzB,OAAO,EAAE;QAC5ByB,eAAe,CAACzB,OAAO,CAACC,aAAa,GAAG8B,WAAW;MACrD;MACA,OAAOnD,IAAI,CAAC6C,eAAe,CAAC;IAC9B,CAAC,CAAC,OAAOO,UAAU,EAAE;MACnB,OAAOxC,OAAO,CAACE,MAAM,CAACsC,UAAU,CAAC;IACnC;EACF;;EAEA;EACA;EACA,IACEP,eAAe,CAACQ,GAAG,KAAK,sBAAsB,IAC9CR,eAAe,CAACQ,GAAG,KAAK,cAAc,EACtC;IACA,OAAOzC,OAAO,CAACE,MAAM,CAACgB,KAAK,CAAC;EAC9B;EAEAe,eAAe,CAACS,MAAM,GAAG,IAAI;EAE7B,IAAIpB,YAAY,EAAE;IAChB,MAAMqB,oBAAoB,GAAGnB,iBAAiB,CAACS,eAAe,CAAC;IAC/D,OAAOU,oBAAoB;EAC7B;EAEArB,YAAY,GAAG,IAAI;EACnB,IAAI;IACF,MAAMsB,MAAM,GAAG,MAAM7C,OAAO,CAAC,CAAC;IAC9B;IACA;IACAuB,YAAY,GAAG,KAAK;IACpBW,eAAe,CAACzB,OAAO,CAACC,aAAa,GAAGmC,MAAM,CAAC5B,IAAI,CAACD,KAAK;IACzDY,YAAY,CAACiB,MAAM,CAAC5B,IAAI,CAACD,KAAK,CAAC;IAC/B,OAAO3B,IAAI,CAAC6C,eAAe,CAAC;EAC9B,CAAC,CAAC,OAAOO,UAAU,EAAE;IACnBlB,YAAY,GAAG,KAAK;IACpB;IACA;IACA;IACA,OAAOtB,OAAO,CAACE,MAAM,CAACsC,UAAU,CAAC;EACnC;AACF,CACF,CAAC;AAAC,IAAAK,QAAA,GAAAC,OAAA,CAAA9D,OAAA,GAEaI,IAAI","ignoreList":[]}
+{"version":3,"names":["_axios","_interopRequireDefault","require","_roomStore","_chatSettingsSlice","_devLogger","_authRefresh","e","__esModule","default","DEFAULT_BASE_URL","currentBaseURL","currentAppToken","http","axios","create","baseURL","installAxiosCapture","stripApiVersion","baseUrl","replace","normalizeApiPath","path","test","startsWith","exports","setBaseURL","appToken","normalized","defaults","getCurrentAppToken","getCurrentBaseURL","refresh","refreshAuthTokens","interceptors","response","use","error","originalRequest","config","status","Promise","reject","_retry","url","refreshConfig","store","getState","chatSettingStore","refreshTokens","enabled","hasRefreshableSession","Boolean","refreshFunction","user","refreshToken","tokens","headers","Authorization","token","refreshErr","isRefreshFatalError","dispatch","logout","_default"],"sourceRoot":"../../../src","sources":["networking/apiClient.ts"],"mappings":";;;;;;;;;;;AAAA,IAAAA,MAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AAEA,IAAAE,kBAAA,GAAAF,OAAA;AACA,IAAAG,UAAA,GAAAH,OAAA;AACA,IAAAI,YAAA,GAAAJ,OAAA;AAIuB,SAAAD,uBAAAM,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAEvB;AACA;AACA;AACA;AACA,MAAMG,gBAAgB,GAAG,EAAE;AAE3B,IAAIC,cAAc,GAAGD,gBAAgB;AACrC,IAAIE,eAAuB,GAAG,EAAE;AAEhC,MAAMC,IAAI,GAAGC,cAAK,CAACC,MAAM,CAAC;EACxBC,OAAO,EAAEL;AACX,CAAC,CAAC;;AAEF;AACA;AACA,IAAAM,8BAAmB,EAACJ,IAAI,CAAC;AAEzB,MAAMK,eAAe,GAAIC,OAAe,IACtCA,OAAO,CAACC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAACA,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;AAE7C,MAAMC,gBAAgB,GAAIC,IAAa,IAAyB;EACrE,IAAI,CAACA,IAAI,EAAE;IAAC,OAAOA,IAAI;EAAC;EACxB,IAAI,eAAe,CAACC,IAAI,CAACD,IAAI,CAAC,EAAE;IAAC,OAAOA,IAAI;EAAC;EAC7C,IAAI,WAAW,CAACC,IAAI,CAACD,IAAI,CAAC,EAAE;IAAC,OAAOA,IAAI;EAAC;EACzC,OAAO,MAAMA,IAAI,CAACE,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,GAAGF,IAAI,EAAE;AACvD,CAAC;AAACG,OAAA,CAAAJ,gBAAA,GAAAA,gBAAA;AAEK,SAASK,UAAUA,CAACP,OAAgB,EAAEQ,QAAiB,EAAE;EAC9D,MAAMC,UAAU,GAAGT,OAAO,GAAGD,eAAe,CAACC,OAAO,CAAC,GAAGA,OAAO;EAC/D,IAAIS,UAAU,IAAIA,UAAU,KAAKjB,cAAc,EAAE;IAC/CA,cAAc,GAAGiB,UAAU;IAC3Bf,IAAI,CAACgB,QAAQ,CAACb,OAAO,GAAGY,UAAU;EACpC;EACA,IAAID,QAAQ,IAAIA,QAAQ,KAAKf,eAAe,EAAE;IAC5CA,eAAe,GAAGe,QAAQ;EAC5B;AACF;AAEO,SAASG,kBAAkBA,CAAA,EAAG;EACnC,OAAOlB,eAAe;AACxB;AAEO,SAASmB,iBAAiBA,CAAA,EAAG;EAClC,OAAOpB,cAAc;AACvB;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASqB,OAAOA,CAAA,EAA2B;EAChD,OAAO,IAAAC,8BAAiB,EAAC,CAAC;AAC5B;AAEApB,IAAI,CAACqB,YAAY,CAACC,QAAQ,CAACC,GAAG,CAC3BD,QAAQ,IAAKA,QAAQ,EACtB,MAAOE,KAAK,IAAK;EACf,MAAMC,eAAe,GAAGD,KAAK,CAACE,MAAM;EACpC,MAAMC,MAAM,GAAGH,KAAK,CAACF,QAAQ,EAAEK,MAAM;;EAErC;EACA,IAAI,CAACH,KAAK,CAACF,QAAQ,IAAIK,MAAM,KAAK,GAAG,IAAI,CAACF,eAAe,EAAE;IACzD,OAAOG,OAAO,CAACC,MAAM,CAACL,KAAK,CAAC;EAC9B;;EAEA;EACA;EACA;EACA,IACEC,eAAe,CAACK,MAAM,IACtBL,eAAe,CAACM,GAAG,KAAK,yBAAyB,IACjDN,eAAe,CAACM,GAAG,KAAK,iBAAiB,EACzC;IACA,OAAOH,OAAO,CAACC,MAAM,CAACL,KAAK,CAAC;EAC9B;EAEA,MAAMQ,aAAa,GACjBC,gBAAK,CAACC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,EAAET,MAAM,EAAEU,aAAa;;EAE1D;EACA;EACA,IAAI,CAACJ,aAAa,EAAEK,OAAO,EAAE;IAC3B,OAAOT,OAAO,CAACC,MAAM,CAACL,KAAK,CAAC;EAC9B;;EAEA;EACA;EACA,MAAMc,qBAAqB,GAAGC,OAAO,CACnCP,aAAa,CAACQ,eAAe,IAC3BP,gBAAK,CAACC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,CAACM,IAAI,EAAEC,YAC5C,CAAC;EACD,IAAI,CAACJ,qBAAqB,EAAE;IAC1B,OAAOV,OAAO,CAACC,MAAM,CAACL,KAAK,CAAC;EAC9B;EAEAC,eAAe,CAACK,MAAM,GAAG,IAAI;EAE7B,IAAI;IACF;IACA;IACA;IACA,MAAMa,MAAM,GAAG,MAAM,IAAAvB,8BAAiB,EAAC,CAAC;IACxCK,eAAe,CAACmB,OAAO,GAAGnB,eAAe,CAACmB,OAAO,IAAI,CAAC,CAAC;IACvDnB,eAAe,CAACmB,OAAO,CAACC,aAAa,GAAGF,MAAM,CAACG,KAAK;IACpD,OAAO9C,IAAI,CAACyB,eAAe,CAAC;EAC9B,CAAC,CAAC,OAAOsB,UAAU,EAAE;IACnB;IACA;IACA;IACA;IACA,IAAI,IAAAC,gCAAmB,EAACD,UAAU,CAAC,EAAE;MACnCd,gBAAK,CAACgB,QAAQ,CAAC,IAAAC,yBAAM,EAAC,CAAC,CAAC;IAC1B;IACA,OAAOtB,OAAO,CAACC,MAAM,CAACkB,UAAU,CAAC;EACnC;AACF,CACF,CAAC;AAAC,IAAAI,QAAA,GAAAvC,OAAA,CAAAhB,OAAA,GAEaI,IAAI","ignoreList":[]}

package/lib/commonjs/networking/authRefresh.js

@@ -0,0 +1,322 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.RefreshFatalError = void 0;
+exports.__resetAuthRefreshStateForTests = __resetAuthRefreshStateForTests;
+exports.parseRefreshErrorCode = exports.isRefreshFatalError = void 0;
+exports.refreshAuthTokens = refreshAuthTokens;
+exports.refreshAuthTokensQuietly = refreshAuthTokensQuietly;
+var _apiClient = _interopRequireDefault(require("./apiClient"));
+var _roomStore = require("../roomStore");
+var _chatSettingsSlice = require("../roomStore/chatSettingsSlice");
+var _secureUserStorage = require("../helpers/secureUserStorage");
+var _devLogger = require("../utils/devLogger");
+function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
+/**
+ * THE single refresh-token rotation point for the SDK.
+ *
+ * The backend now runs refresh-token ROTATION with REUSE DETECTION:
+ * every successful `/users/login/refresh` burns the presented refresh
+ * token and issues a new one. Presenting an already-rotated token is
+ * indistinguishable, server-side, from a stolen token — so it is
+ * treated as theft and (once the backend leaves monitor mode and
+ * enables enforcing mode) kills the whole token family.
+ *
+ * That puts three hard obligations on the client:
+ *
+ *   1. Persist the NEW refreshToken from every response, immediately,
+ *      before any other logic can throw and drop it on the floor.
+ *   2. Never rotate concurrently. Two parallel refreshes both start
+ *      from the same token; the loser presents a burned one and looks
+ *      like an attacker. React Native is single-process, so a shared
+ *      in-flight promise is the whole lock — no Web Locks needed (the
+ *      web build of this component does need them, see its own
+ *      `authRefresh.ts`).
+ *   3. Route EVERY refresh path through here. One "side" refresh
+ *      elsewhere in the codebase breaks the scheme for everyone.
+ *
+ * Callers must also stop treating 401 as "log out". Two of the four
+ * refresh error codes are race signals, not auth failures — see
+ * `RefreshErrorCode` below and `RefreshFatalError`.
+ */
+
+/**
+ * Thrown when the session is genuinely dead and the caller must do a
+ * hard logout (clear storage, drop XMPP, send the user to login).
+ *
+ * Anything else this module rejects with — network errors, 5xx, an
+ * unrecognised 401 — is NOT fatal and must NOT trigger a logout.
+ */
+class RefreshFatalError extends Error {
+  constructor(code, message) {
+    super(message || `Refresh failed: ${code}`);
+    this.name = 'RefreshFatalError';
+    this.code = code;
+    // Required for `instanceof` to survive TS's ES5 class-extends-builtin
+    // downlevelling, which RN's babel preset still applies.
+    Object.setPrototypeOf(this, RefreshFatalError.prototype);
+  }
+}
+exports.RefreshFatalError = RefreshFatalError;
+const isRefreshFatalError = error => error instanceof RefreshFatalError || error?.name === 'RefreshFatalError';
+exports.isRefreshFatalError = isRefreshFatalError;
+const REFRESH_ENDPOINT = '/v1/users/login/refresh';
+
+/** `REFRESH_IN_PROGRESS` retry budget, per backend guidance (~300ms x 2-3). */
+const IN_PROGRESS_MAX_ATTEMPTS = 3;
+const IN_PROGRESS_BASE_DELAY_MS = 300;
+/**
+ * Jitter matters: after a network blip every client in the app retries
+ * on the same schedule and would hammer the rotation mutex in lockstep.
+ */
+const IN_PROGRESS_JITTER_MS = 150;
+const KNOWN_CODES = ['REFRESH_IN_PROGRESS', 'REFRESH_TOKEN_ALREADY_ROTATED', 'REFRESH_TOKEN_REUSE_DETECTED', 'REFRESH_TOKEN_NOT_FOUND'];
+const sleep = ms => new Promise(resolve => setTimeout(resolve, ms));
+const inProgressDelay = attempt => IN_PROGRESS_BASE_DELAY_MS * attempt + Math.floor(Math.random() * IN_PROGRESS_JITTER_MS);
+
+/**
+ * All four codes come back as HTTP 401, so the status alone tells us
+ * nothing — the code in the body is the only signal.
+ *
+ * TODO(backend-confirm): the exact location of `code` in the payload is
+ * not documented yet. Until it is, probe every shape the API uses
+ * elsewhere and take the first hit. Once confirmed, collapse this to
+ * the single real path.
+ */
+const parseRefreshErrorCode = error => {
+  const response = error?.response;
+  if (!response) {
+    return null;
+  }
+  const data = response.data;
+  const candidates = [data?.code, data?.error?.code, data?.errors?.[0]?.code, data?.error, data?.message, response.headers?.['x-error-code']];
+  for (const candidate of candidates) {
+    if (typeof candidate !== 'string') {
+      continue;
+    }
+    const match = KNOWN_CODES.find(code => candidate.includes(code));
+    if (match) {
+      return match;
+    }
+  }
+  return null;
+};
+exports.parseRefreshErrorCode = parseRefreshErrorCode;
+const getStoreUser = () => _roomStore.store.getState().chatSettingStore?.user || {};
+
+/**
+ * The refresh token as of RIGHT NOW. Read at the moment of use, never
+ * captured ahead of time — that is the single-process equivalent of the
+ * web build's "re-read inside the lock".
+ *
+ * Redux is the source of truth in RN (one process, one store);
+ * AsyncStorage is only consulted as a cold-start fallback, before
+ * `resolveInitBeforeLoadUser` has hydrated the store.
+ */
+const readCurrentRefreshToken = async () => {
+  const fromStore = getStoreUser().refreshToken;
+  if (fromStore) {
+    return fromStore;
+  }
+  const stored = await (0, _secureUserStorage.secureUserStorage)().get();
+  return stored?.refreshToken || '';
+};
+
+/**
+ * Persist BEFORE resolving. The dispatch updates redux (and, until
+ * phase 6 lands, fires its own best-effort AsyncStorage write); the
+ * awaited write below is the one that actually guarantees the rotated
+ * token survives the app being killed a moment later. Losing it means
+ * the next launch presents a burned token — i.e. looks like theft.
+ */
+const persistTokens = async result => {
+  _roomStore.store.dispatch((0, _chatSettingsSlice.refreshTokens)({
+    token: result.token,
+    refreshToken: result.refreshToken,
+    xmppPassword: result.xmppPassword,
+    fileToken: result.fileToken
+  }));
+  try {
+    // Write the post-dispatch snapshot rather than a read-modify-write
+    // merge, so this can't race the reducer's own write back to a
+    // stale copy of the surrounding user fields.
+    await (0, _secureUserStorage.secureUserStorage)().set(_roomStore.store.getState().chatSettingStore.user);
+  } catch (error) {
+    (0, _devLogger.pushLog)('warn', 'authRefresh: failed to persist rotated tokens', error);
+  }
+};
+
+/**
+ * A rotation that happened somewhere we didn't drive — currently only
+ * reachable via the ALREADY_ROTATED recovery path, kept separate so the
+ * web build and this one stay structurally identical.
+ */
+const adoptStoredTokens = async () => {
+  const stored = await (0, _secureUserStorage.secureUserStorage)().get();
+  if (!stored?.refreshToken || !stored?.token) {
+    return null;
+  }
+  const user = getStoreUser();
+  if (user.refreshToken !== stored.refreshToken) {
+    _roomStore.store.dispatch((0, _chatSettingsSlice.refreshTokens)({
+      token: stored.token,
+      refreshToken: stored.refreshToken
+    }));
+  }
+  return {
+    token: stored.token,
+    refreshToken: stored.refreshToken,
+    xmppPassword: stored.xmppPassword,
+    fileToken: stored.fileToken
+  };
+};
+
+/** Host-supplied rotation, mirrors `IConfig['refreshTokens']['refreshFunction']`. */
+
+const runConsumerRefresh = async refreshFunction => {
+  const refreshed = await refreshFunction();
+  if (!refreshed?.accessToken) {
+    throw new Error('Custom refresh function did not return an access token');
+  }
+  if (!refreshed.refreshToken) {
+    // Not fatal — some hosts still run non-rotating backends — but on a
+    // rotating one this silently keeps a burned token around, which is
+    // exactly the failure the new scheme punishes.
+    (0, _devLogger.pushLog)('warn', 'authRefresh: custom refreshFunction returned no refreshToken; ' + 'keeping the existing one. On a rotating backend this will be ' + 'seen as token reuse.');
+  }
+  const result = {
+    token: refreshed.accessToken,
+    refreshToken: refreshed.refreshToken || (await readCurrentRefreshToken()) || '',
+    xmppPassword: refreshed.xmppPassword,
+    fileToken: refreshed.fileToken
+  };
+  await persistTokens(result);
+  return result;
+};
+const requestRotation = async refreshToken => {
+  const response = await _apiClient.default.post(REFRESH_ENDPOINT, {}, {
+    headers: {
+      Authorization: refreshToken
+    }
+  });
+  const result = {
+    token: response?.data?.token || '',
+    refreshToken: response?.data?.refreshToken || '',
+    wsToken: response?.data?.wsToken,
+    xmppPassword: response?.data?.xmppPassword,
+    fileToken: response?.data?.fileToken
+  };
+  if (!result.token || !result.refreshToken) {
+    throw new Error('Refresh response did not contain both tokens');
+  }
+
+  // Persist first, resolve second. Every early return between here and
+  // the caller is a chance to lose the rotation.
+  await persistTokens(result);
+  return result;
+};
+const performRefresh = async overrideToken => {
+  const consumerRefresh = _roomStore.store.getState().chatSettingStore?.config?.refreshTokens?.refreshFunction;
+  if (consumerRefresh) {
+    // A configured host function wins unconditionally — including over
+    // an explicit bootstrap token. Hosts that embed this SDK often own
+    // the Ethora refresh token themselves (their own storage, their own
+    // rotation) and only hand us a copy; rotating it here would burn
+    // THEIR token behind their back and leave them holding a dead one.
+    //
+    // It still has to be serialised — it hits the same backend mutex —
+    // hence running it inside the shared in-flight promise.
+    return runConsumerRefresh(consumerRefresh);
+  }
+  for (let attempt = 1; attempt <= IN_PROGRESS_MAX_ATTEMPTS; attempt++) {
+    const refreshToken = overrideToken || (await readCurrentRefreshToken());
+    if (!refreshToken) {
+      // Deliberately NOT fatal: a missing token mid-bootstrap must not
+      // nuke a session that is still being hydrated.
+      throw new Error('Refresh token is missing');
+    }
+    try {
+      return await requestRotation(refreshToken);
+    } catch (error) {
+      const code = parseRefreshErrorCode(error);
+      if (code === 'REFRESH_IN_PROGRESS') {
+        if (attempt < IN_PROGRESS_MAX_ATTEMPTS) {
+          await sleep(inProgressDelay(attempt));
+          continue;
+        }
+        // Budget spent. Whoever holds the mutex has very likely
+        // finished and written a newer token — take it if so. Skipped
+        // for an explicit token: it may belong to a different session
+        // than whatever is currently in storage.
+        const adopted = overrideToken ? null : await adoptStoredTokens();
+        if (adopted && adopted.refreshToken !== refreshToken) {
+          return adopted;
+        }
+        throw error;
+      }
+      if (code === 'REFRESH_TOKEN_ALREADY_ROTATED') {
+        // Our copy is stale. If something already wrote a newer token,
+        // this is a benign race — use it. Otherwise the session really
+        // is unrecoverable.
+        const adopted = overrideToken ? null : await adoptStoredTokens();
+        if (adopted && adopted.refreshToken !== refreshToken) {
+          return adopted;
+        }
+        throw new RefreshFatalError(code);
+      }
+      if (code === 'REFRESH_TOKEN_REUSE_DETECTED' || code === 'REFRESH_TOKEN_NOT_FOUND') {
+        throw new RefreshFatalError(code);
+      }
+
+      // Network error, 5xx, plain 401 without a code — pass through
+      // untouched. The caller must not log out on these.
+      throw error;
+    }
+  }
+
+  // Unreachable: the loop either returns or throws.
+  throw new Error('Refresh attempts exhausted');
+};
+let inflight = null;
+
+/**
+ * Rotate the tokens. Concurrent callers share ONE request — this is the
+ * lock the new backend scheme requires.
+ *
+ * Rejects with `RefreshFatalError` when the session is dead (caller
+ * should hard-logout) and with a plain error otherwise (caller should
+ * surface the failure and leave the session alone).
+ */
+function refreshAuthTokens(options) {
+  if (inflight) {
+    // Whatever that rotation produces is at least as fresh as anything
+    // this caller could have asked for.
+    return inflight;
+  }
+  inflight = performRefresh(options?.refreshToken).finally(() => {
+    inflight = null;
+  });
+  return inflight;
+}
+
+/**
+ * Fire-and-forget variant for call sites that only want "make sure the
+ * tokens are fresh" and have no meaningful error handling — chat
+ * bootstrap, XMPP reconnect. Never rejects.
+ */
+async function refreshAuthTokensQuietly() {
+  try {
+    return await refreshAuthTokens();
+  } catch (error) {
+    (0, _devLogger.pushLog)(isRefreshFatalError(error) ? 'error' : 'warn', 'authRefresh: background refresh failed', error);
+    return null;
+  }
+}
+
+/** Test seam — drops any shared in-flight promise between cases. */
+function __resetAuthRefreshStateForTests() {
+  inflight = null;
+}
+//# sourceMappingURL=authRefresh.js.map

package/lib/commonjs/networking/authRefresh.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_apiClient","_interopRequireDefault","require","_roomStore","_chatSettingsSlice","_secureUserStorage","_devLogger","e","__esModule","default","RefreshFatalError","Error","constructor","code","message","name","Object","setPrototypeOf","prototype","exports","isRefreshFatalError","error","REFRESH_ENDPOINT","IN_PROGRESS_MAX_ATTEMPTS","IN_PROGRESS_BASE_DELAY_MS","IN_PROGRESS_JITTER_MS","KNOWN_CODES","sleep","ms","Promise","resolve","setTimeout","inProgressDelay","attempt","Math","floor","random","parseRefreshErrorCode","response","data","candidates","errors","headers","candidate","match","find","includes","getStoreUser","store","getState","chatSettingStore","user","readCurrentRefreshToken","fromStore","refreshToken","stored","secureUserStorage","get","persistTokens","result","dispatch","refreshTokens","token","xmppPassword","fileToken","set","pushLog","adoptStoredTokens","runConsumerRefresh","refreshFunction","refreshed","accessToken","requestRotation","http","post","Authorization","wsToken","performRefresh","overrideToken","consumerRefresh","config","adopted","inflight","refreshAuthTokens","options","finally","refreshAuthTokensQuietly","__resetAuthRefreshStateForTests"],"sourceRoot":"../../../src","sources":["networking/authRefresh.ts"],"mappings":";;;;;;;;;;AAAA,IAAAA,UAAA,GAAAC,sBAAA,CAAAC,OAAA;AACA,IAAAC,UAAA,GAAAD,OAAA;AACA,IAAAE,kBAAA,GAAAF,OAAA;AACA,IAAAG,kBAAA,GAAAH,OAAA;AACA,IAAAI,UAAA,GAAAJ,OAAA;AAA6C,SAAAD,uBAAAM,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AAG7C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAsBA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMG,iBAAiB,SAASC,KAAK,CAAC;EAG3CC,WAAWA,CAACC,IAAsB,EAAEC,OAAgB,EAAE;IACpD,KAAK,CAACA,OAAO,IAAI,mBAAmBD,IAAI,EAAE,CAAC;IAC3C,IAAI,CAACE,IAAI,GAAG,mBAAmB;IAC/B,IAAI,CAACF,IAAI,GAAGA,IAAI;IAChB;IACA;IACAG,MAAM,CAACC,cAAc,CAAC,IAAI,EAAEP,iBAAiB,CAACQ,SAAS,CAAC;EAC1D;AACF;AAACC,OAAA,CAAAT,iBAAA,GAAAA,iBAAA;AAEM,MAAMU,mBAAmB,GAC9BC,KAAc,IAEdA,KAAK,YAAYX,iBAAiB,IACjCW,KAAK,EAAwBN,IAAI,KAAK,mBAAmB;AAACI,OAAA,CAAAC,mBAAA,GAAAA,mBAAA;AAE7D,MAAME,gBAAgB,GAAG,yBAAyB;;AAElD;AACA,MAAMC,wBAAwB,GAAG,CAAC;AAClC,MAAMC,yBAAyB,GAAG,GAAG;AACrC;AACA;AACA;AACA;AACA,MAAMC,qBAAqB,GAAG,GAAG;AAEjC,MAAMC,WAA+B,GAAG,CACtC,qBAAqB,EACrB,+BAA+B,EAC/B,8BAA8B,EAC9B,yBAAyB,CAC1B;AAED,MAAMC,KAAK,GAAIC,EAAU,IACvB,IAAIC,OAAO,CAAQC,OAAO,IAAKC,UAAU,CAACD,OAAO,EAAEF,EAAE,CAAC,CAAC;AAEzD,MAAMI,eAAe,GAAIC,OAAe,IACtCT,yBAAyB,GAAGS,OAAO,GACnCC,IAAI,CAACC,KAAK,CAACD,IAAI,CAACE,MAAM,CAAC,CAAC,GAAGX,qBAAqB,CAAC;;AAEnD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMY,qBAAqB,GAChChB,KAAc,IACc;EAC5B,MAAMiB,QAAQ,GAAIjB,KAAK,EAAUiB,QAAQ;EACzC,IAAI,CAACA,QAAQ,EAAE;IACb,OAAO,IAAI;EACb;EAEA,MAAMC,IAAI,GAAGD,QAAQ,CAACC,IAAI;EAC1B,MAAMC,UAAU,GAAG,CACjBD,IAAI,EAAE1B,IAAI,EACV0B,IAAI,EAAElB,KAAK,EAAER,IAAI,EACjB0B,IAAI,EAAEE,MAAM,GAAG,CAAC,CAAC,EAAE5B,IAAI,EACvB0B,IAAI,EAAElB,KAAK,EACXkB,IAAI,EAAEzB,OAAO,EACbwB,QAAQ,CAACI,OAAO,GAAG,cAAc,CAAC,CACnC;EAED,KAAK,MAAMC,SAAS,IAAIH,UAAU,EAAE;IAClC,IAAI,OAAOG,SAAS,KAAK,QAAQ,EAAE;MACjC;IACF;IACA,MAAMC,KAAK,GAAGlB,WAAW,CAACmB,IAAI,CAAEhC,IAAI,IAAK8B,SAAS,CAACG,QAAQ,CAACjC,IAAI,CAAC,CAAC;IAClE,IAAI+B,KAAK,EAAE;MACT,OAAOA,KAAK;IACd;EACF;EAEA,OAAO,IAAI;AACb,CAAC;AAACzB,OAAA,CAAAkB,qBAAA,GAAAA,qBAAA;AAEF,MAAMU,YAAY,GAAGA,CAAA,KAClBC,gBAAK,CAACC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,EAAEC,IAAI,IAAsB,CAAC,CAAC;;AAElE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,uBAAuB,GAAG,MAAAA,CAAA,KAA6B;EAC3D,MAAMC,SAAS,GAAGN,YAAY,CAAC,CAAC,CAACO,YAAY;EAC7C,IAAID,SAAS,EAAE;IACb,OAAOA,SAAS;EAClB;EAEA,MAAME,MAAM,GAAG,MAAM,IAAAC,oCAAiB,EAAC,CAAC,CAACC,GAAG,CAAC,CAAC;EAC9C,OAAOF,MAAM,EAAED,YAAY,IAAI,EAAE;AACnC,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMI,aAAa,GAAG,MAAOC,MAAqB,IAAoB;EACpEX,gBAAK,CAACY,QAAQ,CACZ,IAAAC,gCAAa,EAAC;IACZC,KAAK,EAAEH,MAAM,CAACG,KAAK;IACnBR,YAAY,EAAEK,MAAM,CAACL,YAAY;IACjCS,YAAY,EAAEJ,MAAM,CAACI,YAAY;IACjCC,SAAS,EAAEL,MAAM,CAACK;EACpB,CAAC,CACH,CAAC;EAED,IAAI;IACF;IACA;IACA;IACA,MAAM,IAAAR,oCAAiB,EAAC,CAAC,CAACS,GAAG,CAC3BjB,gBAAK,CAACC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,CAACC,IACpC,CAAC;EACH,CAAC,CAAC,OAAO9B,KAAK,EAAE;IACd,IAAA6C,kBAAO,EAAC,MAAM,EAAE,+CAA+C,EAAE7C,KAAK,CAAC;EACzE;AACF,CAAC;;AAED;AACA;AACA;AACA;AACA;AACA,MAAM8C,iBAAiB,GAAG,MAAAA,CAAA,KAA2C;EACnE,MAAMZ,MAAM,GAAG,MAAM,IAAAC,oCAAiB,EAAC,CAAC,CAACC,GAAG,CAAC,CAAC;EAC9C,IAAI,CAACF,MAAM,EAAED,YAAY,IAAI,CAACC,MAAM,EAAEO,KAAK,EAAE;IAC3C,OAAO,IAAI;EACb;EAEA,MAAMX,IAAI,GAAGJ,YAAY,CAAC,CAAC;EAC3B,IAAII,IAAI,CAACG,YAAY,KAAKC,MAAM,CAACD,YAAY,EAAE;IAC7CN,gBAAK,CAACY,QAAQ,CACZ,IAAAC,gCAAa,EAAC;MACZC,KAAK,EAAEP,MAAM,CAACO,KAAK;MACnBR,YAAY,EAAEC,MAAM,CAACD;IACvB,CAAC,CACH,CAAC;EACH;EAEA,OAAO;IACLQ,KAAK,EAAEP,MAAM,CAACO,KAAK;IACnBR,YAAY,EAAEC,MAAM,CAACD,YAAY;IACjCS,YAAY,EAAER,MAAM,CAACQ,YAAY;IACjCC,SAAS,EAAET,MAAM,CAACS;EACpB,CAAC;AACH,CAAC;;AAED;;AAQA,MAAMI,kBAAkB,GAAG,MACzBC,eAAkC,IACP;EAC3B,MAAMC,SAAS,GAAG,MAAMD,eAAe,CAAC,CAAC;EAEzC,IAAI,CAACC,SAAS,EAAEC,WAAW,EAAE;IAC3B,MAAM,IAAI5D,KAAK,CAAC,wDAAwD,CAAC;EAC3E;EAEA,IAAI,CAAC2D,SAAS,CAAChB,YAAY,EAAE;IAC3B;IACA;IACA;IACA,IAAAY,kBAAO,EACL,MAAM,EACN,gEAAgE,GAC9D,+DAA+D,GAC/D,sBACJ,CAAC;EACH;EAEA,MAAMP,MAAqB,GAAG;IAC5BG,KAAK,EAAEQ,SAAS,CAACC,WAAW;IAC5BjB,YAAY,EACVgB,SAAS,CAAChB,YAAY,KAAK,MAAMF,uBAAuB,CAAC,CAAC,CAAC,IAAI,EAAE;IACnEW,YAAY,EAAEO,SAAS,CAACP,YAAY;IACpCC,SAAS,EAAEM,SAAS,CAACN;EACvB,CAAC;EAED,MAAMN,aAAa,CAACC,MAAM,CAAC;EAC3B,OAAOA,MAAM;AACf,CAAC;AAED,MAAMa,eAAe,GAAG,MACtBlB,YAAoB,IACO;EAC3B,MAAMhB,QAAQ,GAAG,MAAMmC,kBAAI,CAACC,IAAI,CAC9BpD,gBAAgB,EAChB,CAAC,CAAC,EACF;IAAEoB,OAAO,EAAE;MAAEiC,aAAa,EAAErB;IAAa;EAAE,CAC7C,CAAC;EAED,MAAMK,MAAqB,GAAG;IAC5BG,KAAK,EAAExB,QAAQ,EAAEC,IAAI,EAAEuB,KAAK,IAAI,EAAE;IAClCR,YAAY,EAAEhB,QAAQ,EAAEC,IAAI,EAAEe,YAAY,IAAI,EAAE;IAChDsB,OAAO,EAAEtC,QAAQ,EAAEC,IAAI,EAAEqC,OAAO;IAChCb,YAAY,EAAEzB,QAAQ,EAAEC,IAAI,EAAEwB,YAAY;IAC1CC,SAAS,EAAE1B,QAAQ,EAAEC,IAAI,EAAEyB;EAC7B,CAAC;EAED,IAAI,CAACL,MAAM,CAACG,KAAK,IAAI,CAACH,MAAM,CAACL,YAAY,EAAE;IACzC,MAAM,IAAI3C,KAAK,CAAC,8CAA8C,CAAC;EACjE;;EAEA;EACA;EACA,MAAM+C,aAAa,CAACC,MAAM,CAAC;EAC3B,OAAOA,MAAM;AACf,CAAC;AAED,MAAMkB,cAAc,GAAG,MACrBC,aAAsB,IACK;EAC3B,MAAMC,eAAe,GACnB/B,gBAAK,CAACC,QAAQ,CAAC,CAAC,CAACC,gBAAgB,EAAE8B,MAAM,EAAEnB,aAAa,EAAEQ,eAAe;EAE3E,IAAIU,eAAe,EAAE;IACnB;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,OAAOX,kBAAkB,CAACW,eAAe,CAAC;EAC5C;EAEA,KAAK,IAAI9C,OAAO,GAAG,CAAC,EAAEA,OAAO,IAAIV,wBAAwB,EAAEU,OAAO,EAAE,EAAE;IACpE,MAAMqB,YAAY,GAAGwB,aAAa,KAAK,MAAM1B,uBAAuB,CAAC,CAAC,CAAC;IAEvE,IAAI,CAACE,YAAY,EAAE;MACjB;MACA;MACA,MAAM,IAAI3C,KAAK,CAAC,0BAA0B,CAAC;IAC7C;IAEA,IAAI;MACF,OAAO,MAAM6D,eAAe,CAAClB,YAAY,CAAC;IAC5C,CAAC,CAAC,OAAOjC,KAAK,EAAE;MACd,MAAMR,IAAI,GAAGwB,qBAAqB,CAAChB,KAAK,CAAC;MAEzC,IAAIR,IAAI,KAAK,qBAAqB,EAAE;QAClC,IAAIoB,OAAO,GAAGV,wBAAwB,EAAE;UACtC,MAAMI,KAAK,CAACK,eAAe,CAACC,OAAO,CAAC,CAAC;UACrC;QACF;QACA;QACA;QACA;QACA;QACA,MAAMgD,OAAO,GAAGH,aAAa,GAAG,IAAI,GAAG,MAAMX,iBAAiB,CAAC,CAAC;QAChE,IAAIc,OAAO,IAAIA,OAAO,CAAC3B,YAAY,KAAKA,YAAY,EAAE;UACpD,OAAO2B,OAAO;QAChB;QACA,MAAM5D,KAAK;MACb;MAEA,IAAIR,IAAI,KAAK,+BAA+B,EAAE;QAC5C;QACA;QACA;QACA,MAAMoE,OAAO,GAAGH,aAAa,GAAG,IAAI,GAAG,MAAMX,iBAAiB,CAAC,CAAC;QAChE,IAAIc,OAAO,IAAIA,OAAO,CAAC3B,YAAY,KAAKA,YAAY,EAAE;UACpD,OAAO2B,OAAO;QAChB;QACA,MAAM,IAAIvE,iBAAiB,CAACG,IAAI,CAAC;MACnC;MAEA,IACEA,IAAI,KAAK,8BAA8B,IACvCA,IAAI,KAAK,yBAAyB,EAClC;QACA,MAAM,IAAIH,iBAAiB,CAACG,IAAI,CAAC;MACnC;;MAEA;MACA;MACA,MAAMQ,KAAK;IACb;EACF;;EAEA;EACA,MAAM,IAAIV,KAAK,CAAC,4BAA4B,CAAC;AAC/C,CAAC;AAcD,IAAIuE,QAAuC,GAAG,IAAI;;AAElD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,iBAAiBA,CAC/BC,OAAwB,EACA;EACxB,IAAIF,QAAQ,EAAE;IACZ;IACA;IACA,OAAOA,QAAQ;EACjB;EAEAA,QAAQ,GAAGL,cAAc,CAACO,OAAO,EAAE9B,YAAY,CAAC,CAAC+B,OAAO,CAAC,MAAM;IAC7DH,QAAQ,GAAG,IAAI;EACjB,CAAC,CAAC;EAEF,OAAOA,QAAQ;AACjB;;AAEA;AACA;AACA;AACA;AACA;AACO,eAAeI,wBAAwBA,CAAA,EAAkC;EAC9E,IAAI;IACF,OAAO,MAAMH,iBAAiB,CAAC,CAAC;EAClC,CAAC,CAAC,OAAO9D,KAAK,EAAE;IACd,IAAA6C,kBAAO,EACL9C,mBAAmB,CAACC,KAAK,CAAC,GAAG,OAAO,GAAG,MAAM,EAC7C,wCAAwC,EACxCA,KACF,CAAC;IACD,OAAO,IAAI;EACb;AACF;;AAEA;AACO,SAASkE,+BAA+BA,CAAA,EAAS;EACtDL,QAAQ,GAAG,IAAI;AACjB","ignoreList":[]}