@globus/sdk 4.0.0-rc.1 → 4.0.0-rc.3

package/dist/esm/core/authorization/RedirectTransport.js

@@ -18,42 +18,51 @@ var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (
     if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
     return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
 };
-var __rest = (this && this.__rest) || function (s, e) {
-    var t = {};
-    for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p) && e.indexOf(p) < 0)
-        t[p] = s[p];
-    if (s != null && typeof Object.getOwnPropertySymbols === "function")
-        for (var i = 0, p = Object.getOwnPropertySymbols(s); i < p.length; i++) {
-            if (e.indexOf(p[i]) < 0 && Object.prototype.propertyIsEnumerable.call(s, p[i]))
-                t[p[i]] = s[p[i]];
-        }
-    return t;
-};
-var _RedirectTransport_pkce, _RedirectTransport_params;
-import PKCE from 'js-pkce';
+var _RedirectTransport_options;
+import { getAuthorizationEndpoint, oauth2 } from '../../services/auth/index.js';
+import { generateCodeChallenge, generateCodeVerifier, generateState, isSupported, } from './pkce.js';
 /**
- * Resets js-pkce state
- * @see https://github.com/bpedroza/js-pkce/blob/master/src/PKCE.ts
+ * @private
  */
+export const KEYS = {
+    PKCE_STATE: 'pkce_state',
+    PKCE_CODE_VERIFIER: 'pkce_code_verifier',
+};
 function resetPKCE() {
-    sessionStorage.removeItem('pkce_state');
-    sessionStorage.removeItem('pkce_code_verifier');
+    sessionStorage.removeItem(KEYS.PKCE_STATE);
+    sessionStorage.removeItem(KEYS.PKCE_CODE_VERIFIER);
 }
 export class RedirectTransport {
     constructor(options) {
-        _RedirectTransport_pkce.set(this, void 0);
-        _RedirectTransport_params.set(this, {});
-        const { params } = options, config = __rest(options, ["params"]);
-        __classPrivateFieldSet(this, _RedirectTransport_pkce, new PKCE(Object.assign({}, config)), "f");
-        __classPrivateFieldSet(this, _RedirectTransport_params, Object.assign({}, params), "f");
+        _RedirectTransport_options.set(this, void 0);
+        __classPrivateFieldSet(this, _RedirectTransport_options, options, "f");
+        if (RedirectTransport.supported === false) {
+            throw new Error('RedirectTransport is not supported in this environment.');
+        }
     }
+    /**
+     * For the redirect transport, sending the request will redirect the user to the authorization endpoint, initiating the OAuth flow.
+     */
     send() {
-        /**
-         * By resetting PKCE before sending, we ensure that a fresh `code_challenge` is generated
-         * when `authorizeUrl` is called.
-         */
-        resetPKCE();
-        window.location.assign(__classPrivateFieldGet(this, _RedirectTransport_pkce, "f").authorizeUrl(__classPrivateFieldGet(this, _RedirectTransport_params, "f")));
+        return __awaiter(this, void 0, void 0, function* () {
+            /**
+             * Since we'll be using PKCE, we need to generate a code verifier and challenge
+             * for the OAuth handshake.
+             */
+            const verifier = generateCodeVerifier();
+            const challenge = yield generateCodeChallenge(verifier);
+            const state = generateState();
+            /**
+             * The verifier and state are stored in session storage so that we can validate
+             * the response when we receive it.
+             */
+            sessionStorage.setItem(KEYS.PKCE_CODE_VERIFIER, verifier);
+            sessionStorage.setItem(KEYS.PKCE_STATE, state);
+            const params = Object.assign({ response_type: 'code', client_id: __classPrivateFieldGet(this, _RedirectTransport_options, "f").client, scope: __classPrivateFieldGet(this, _RedirectTransport_options, "f").scopes || '', redirect_uri: __classPrivateFieldGet(this, _RedirectTransport_options, "f").redirect, state, code_challenge: challenge, code_challenge_method: 'S256' }, (__classPrivateFieldGet(this, _RedirectTransport_options, "f").params || {}));
+            const url = new URL(getAuthorizationEndpoint());
+            url.search = new URLSearchParams(params).toString();
+            window.location.assign(url.toString());
+        });
     }
     /**
      * Parse the current URL for the authorization code (`?code=...`) and exchange it for an access token when available.
@@ -63,13 +72,56 @@ export class RedirectTransport {
         return __awaiter(this, arguments, void 0, function* (options = { shouldReplace: true }) {
             const url = new URL(window.location.href);
             const params = new URLSearchParams(url.search);
+            /**
+             * Check for an error in the OAuth flow.
+             * @see https://www.oauth.com/oauth2-servers/pkce/authorization-request/
+             */
+            if (params.get('error')) {
+                throw new Error(params.get('error_description') || 'An error occurred during the authorization process.');
+            }
+            const code = params.get('code');
             /**
              * If we don't have a `code` parameter, we can't exchange it for an access token.
              */
-            if (!params.get('code'))
+            if (!code)
                 return undefined;
-            const response = yield __classPrivateFieldGet(this, _RedirectTransport_pkce, "f").exchangeForAccessToken(url.toString());
+            /**
+             * Grab the PKCE information from session storage.
+             */
+            const state = sessionStorage.getItem(KEYS.PKCE_STATE);
+            const verifier = sessionStorage.getItem(KEYS.PKCE_CODE_VERIFIER);
+            /**
+             * Now that we have the values in memory, we can remove them from session storage.
+             */
             resetPKCE();
+            /**
+             * Validate the `state` parameter matches the preserved state (to prevent CSRF attacks).
+             */
+            if (params.get('state') !== state) {
+                throw new Error('Invalid State');
+            }
+            /**
+             * Ensure we have a valid code verifier.
+             */
+            if (!verifier) {
+                throw new Error('Invalid Code Verifier');
+            }
+            /**
+             * Prepare the payload for the PKCE token exchange.
+             */
+            const payload = {
+                code,
+                client_id: __classPrivateFieldGet(this, _RedirectTransport_options, "f").client,
+                /**
+                 * Retrieve the code verifier from session storage.
+                 */
+                code_verifier: verifier,
+                redirect_uri: __classPrivateFieldGet(this, _RedirectTransport_options, "f").redirect,
+                grant_type: 'authorization_code',
+            };
+            const response = yield (yield oauth2.token.exchange({
+                payload,
+            })).json();
             if (options.shouldReplace) {
                 /**
                  * Remove the `code` and `state` parameters from the URL.
@@ -89,5 +141,6 @@ export class RedirectTransport {
         });
     }
 }
-_RedirectTransport_pkce = new WeakMap(), _RedirectTransport_params = new WeakMap();
+_RedirectTransport_options = new WeakMap();
+RedirectTransport.supported = isSupported();
 //# sourceMappingURL=RedirectTransport.js.map

package/dist/esm/core/authorization/RedirectTransport.js.map

@@ -1 +1 @@
-{"version":3,"file":"RedirectTransport.js","sourceRoot":"","sources":["../../../../src/core/authorization/RedirectTransport.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,IAAI,MAAM,SAAS,CAAC;AAmB3B;;;GAGG;AACH,SAAS,SAAS;IAChB,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IACxC,cAAc,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,OAAO,iBAAiB;IAK5B,YAAY,OAAiC;QAJ7C,0CAAY;QAEZ,oCAA8C,EAAE,EAAC;QAG/C,MAAM,EAAE,MAAM,KAAgB,OAAO,EAAlB,MAAM,UAAK,OAAO,EAA/B,UAAqB,CAAU,CAAC;QACtC,uBAAA,IAAI,2BAAS,IAAI,IAAI,mBAChB,MAAM,EACT,MAAA,CAAC;QACH,uBAAA,IAAI,+CACC,MAAM,OACV,CAAC;IACJ,CAAC;IAED,IAAI;QACF;;;WAGG;QACH,SAAS,EAAE,CAAC;QACZ,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,uBAAA,IAAI,+BAAM,CAAC,YAAY,CAAC,uBAAA,IAAI,iCAAQ,CAAC,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACG,QAAQ;6DAAC,UAA2B,EAAE,aAAa,EAAE,IAAI,EAAE;YAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/C;;eAEG;YACH,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,OAAO,SAAS,CAAC;YAC1C,MAAM,QAAQ,GAAG,MAAM,uBAAA,IAAI,+BAAM,CAAC,sBAAsB,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YACzE,SAAS,EAAE,CAAC;YACZ,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B;;mBAEG;gBACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvB;;mBAEG;gBACH,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC/B;;mBAEG;gBACH,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;KAAA;CACF"}
+{"version":3,"file":"RedirectTransport.js","sourceRoot":"","sources":["../../../../src/core/authorization/RedirectTransport.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,8BAA8B,CAAC;AAChF,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,aAAa,EAGb,WAAW,GACZ,MAAM,WAAW,CAAC;AA2BnB;;GAEG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,UAAU,EAAE,YAAY;IACxB,kBAAkB,EAAE,oBAAoB;CACzC,CAAC;AAEF,SAAS,SAAS;IAChB,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,OAAO,iBAAiB;IAG5B,YAAY,OAAiC;QAF7C,6CAAmC;QAGjC,uBAAA,IAAI,8BAAY,OAAO,MAAA,CAAC;QACxB,IAAI,iBAAiB,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAID;;OAEG;IACG,IAAI;;YACR;;;eAGG;YACH,MAAM,QAAQ,GAAG,oBAAoB,EAAE,CAAC;YACxC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC;YACxD,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;YAC9B;;;eAGG;YACH,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YAC1D,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;YAE/C,MAAM,MAAM,mBACV,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,uBAAA,IAAI,kCAAS,CAAC,MAAM,EAC/B,KAAK,EAAE,uBAAA,IAAI,kCAAS,CAAC,MAAM,IAAI,EAAE,EACjC,YAAY,EAAE,uBAAA,IAAI,kCAAS,CAAC,QAAQ,EACpC,KAAK,EACL,cAAc,EAAE,SAAS,EACzB,qBAAqB,EAAE,MAAM,IAC1B,CAAC,uBAAA,IAAI,kCAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAChC,CAAC;YAEF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,CAAC,CAAC;YAChD,GAAG,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;YAEpD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACzC,CAAC;KAAA;IAED;;;OAGG;IACG,QAAQ;6DAAC,UAA2B,EAAE,aAAa,EAAE,IAAI,EAAE;YAC/D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/C;;;eAGG;YACH,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,qDAAqD,CACzF,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAEhC;;eAEG;YACH,IAAI,CAAC,IAAI;gBAAE,OAAO,SAAS,CAAC;YAE5B;;eAEG;YACH,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACtD,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACjE;;eAEG;YACH,SAAS,EAAE,CAAC;YAEZ;;eAEG;YACH,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,EAAE,CAAC;gBAClC,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YACnC,CAAC;YACD;;eAEG;YACH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC3C,CAAC;YAED;;eAEG;YACH,MAAM,OAAO,GAAwC;gBACnD,IAAI;gBACJ,SAAS,EAAE,uBAAA,IAAI,kCAAS,CAAC,MAAM;gBAC/B;;mBAEG;gBACH,aAAa,EAAE,QAAQ;gBACvB,YAAY,EAAE,uBAAA,IAAI,kCAAS,CAAC,QAAQ;gBACpC,UAAU,EAAE,oBAAoB;aACjC,CAAC;YAEF,MAAM,QAAQ,GAAG,MAAM,CACrB,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC1B,OAAO;aACR,CAAC,CACH,CAAC,IAAI,EAAE,CAAC;YAET,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1B;;mBAEG;gBACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACtB,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACvB;;mBAEG;gBACH,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC/B;;mBAEG;gBACH,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;KAAA;;;AAxHM,2BAAS,GAAG,WAAW,EAAE,AAAhB,CAAiB"}

package/dist/esm/core/authorization/pkce.d.ts

@@ -0,0 +1,36 @@
+export declare function isSupported(): boolean;
+/**
+ * Create a Code Verifier for PKCE
+ * @see https://www.rfc-editor.org/rfc/rfc7636#section-4.1
+ */
+export declare function generateCodeVerifier(): string;
+/**
+ * Create a Code Challenge from a provided Code Verifier (assumes S256 `code_challenge_method`).
+ * @see https://www.rfc-editor.org/rfc/rfc7636#section-4.2
+ */
+export declare function generateCodeChallenge(verifier: string): Promise<string>;
+export declare function generateState(): string;
+/**
+ * @see https://www.oauth.com/oauth2-servers/pkce/authorization-code-exchange/
+ */
+export type AuthorizationCodeExchangeParameters = {
+    code: string;
+    code_verifier: string;
+    client_id: string;
+    client_secret?: string;
+    redirect_uri: string;
+    grant_type: 'authorization_code';
+};
+/**
+ * @see https://www.oauth.com/oauth2-servers/pkce/authorization-request/
+ */
+export type AuthorizationRequestParameters = {
+    client_id: string;
+    redirect_uri: string;
+    response_type: 'code';
+    scope: string;
+    state: string;
+    code_challenge: string;
+    code_challenge_method: 'S256' | 'plain';
+};
+//# sourceMappingURL=pkce.d.ts.map

package/dist/esm/core/authorization/pkce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.d.ts","sourceRoot":"","sources":["../../../../src/core/authorization/pkce.ts"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,YAE1B;AA8BD;;;GAGG;AACH,wBAAgB,oBAAoB,WAOnC;AAED;;;GAGG;AACH,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,mBAG3D;AAED,wBAAgB,aAAa,WAI5B;AAED;;GAEG;AACH,MAAM,MAAM,mCAAmC,GAAG;IAChD,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,oBAAoB,CAAC;CAClC,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,EAAE,MAAM,CAAC;IACvB,qBAAqB,EAAE,MAAM,GAAG,OAAO,CAAC;CACzC,CAAC"}

package/dist/esm/core/authorization/pkce.js

@@ -0,0 +1,65 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+export function isSupported() {
+    return 'crypto' in globalThis;
+}
+function getCrypto() {
+    return 'webcrypto' in globalThis.crypto
+        ? globalThis.crypto.webcrypto
+        : globalThis.crypto;
+}
+/**
+ * Base64 URL encode a string.
+ * @see https://www.oauth.com/oauth2-servers/pkce/authorization-request/
+ */
+const encode = (value) => btoa(value).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+function sha256(input) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const hashBuffer = yield getCrypto().subtle.digest('SHA-256', new TextEncoder().encode(input));
+        return String.fromCharCode(...new Uint8Array(hashBuffer));
+    });
+}
+/**
+ * Character set for generating random alpha-numeric strings.
+ */
+const CHARSET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';
+/**
+ * Character set allowed to be used in the PKCE `code_verifier`
+ * @see https://www.rfc-editor.org/rfc/rfc7636#section-4.1
+ */
+const PKCE_SAFE_CHARSET = `${CHARSET}-._~`;
+/**
+ * Create a Code Verifier for PKCE
+ * @see https://www.rfc-editor.org/rfc/rfc7636#section-4.1
+ */
+export function generateCodeVerifier() {
+    /**
+     * @todo Make length random between 43 and 128 characters
+     */
+    return Array.from(getCrypto().getRandomValues(new Uint8Array(43)))
+        .map((v) => PKCE_SAFE_CHARSET[v % PKCE_SAFE_CHARSET.length])
+        .join('');
+}
+/**
+ * Create a Code Challenge from a provided Code Verifier (assumes S256 `code_challenge_method`).
+ * @see https://www.rfc-editor.org/rfc/rfc7636#section-4.2
+ */
+export function generateCodeChallenge(verifier) {
+    return __awaiter(this, void 0, void 0, function* () {
+        const hashed = yield sha256(verifier);
+        return encode(hashed);
+    });
+}
+export function generateState() {
+    return Array.from(getCrypto().getRandomValues(new Uint8Array(16)))
+        .map((v) => CHARSET[v % CHARSET.length])
+        .join('');
+}
+//# sourceMappingURL=pkce.js.map

package/dist/esm/core/authorization/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sourceRoot":"","sources":["../../../../src/core/authorization/pkce.ts"],"names":[],"mappings":";;;;;;;;;AAAA,MAAM,UAAU,WAAW;IACzB,OAAO,QAAQ,IAAI,UAAU,CAAC;AAChC,CAAC;AAED,SAAS,SAAS;IAChB,OAAO,WAAW,IAAI,UAAU,CAAC,MAAM;QACrC,CAAC,CAAE,UAAU,CAAC,MAAM,CAAC,SAA+B;QACpD,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;AACxB,CAAC;AAED;;;GAGG;AACH,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAC/B,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAEzE,SAAe,MAAM,CAAC,KAAa;;QACjC,MAAM,UAAU,GAAG,MAAM,SAAS,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/F,OAAO,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5D,CAAC;CAAA;AAED;;GAEG;AACH,MAAM,OAAO,GAAG,gEAAgE,CAAC;AAEjF;;;GAGG;AACH,MAAM,iBAAiB,GAAG,GAAG,OAAO,MAAM,CAAC;AAC3C;;;GAGG;AACH,MAAM,UAAU,oBAAoB;IAClC;;OAEG;IACH,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;SAC3D,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAgB,qBAAqB,CAAC,QAAgB;;QAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;CAAA;AAED,MAAM,UAAU,aAAa;IAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;SAC/D,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;SACvC,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/esm/core/global.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"global.d.ts","sourceRoot":"","sources":["../../../src/core/global.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAyBlD;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;CAOf,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3E,eAAO,MAAM,QAAQ;;;;;;;;CAQpB,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG,MAAM,OAAO,QAAQ,CAAC;AAE5C,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAQ/E,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,UAAU;;;;;;;;;;;;;;;;;;;;;;;;EAqBjD;AAED,wBAAgB,cAAc,IAAI,WAAW,CAgB5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAStC;AAED;;GAEG;AACH,wBAAgB,cAAc,kBAM7B;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,GAAE,WAA8B,sBAE3F;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,GAAE,WAA8B,sBAG9F"}
+{"version":3,"file":"global.d.ts","sourceRoot":"","sources":["../../../src/core/global.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAyBlD;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;CAOf,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3E,eAAO,MAAM,QAAQ;;;;;;;;CAQpB,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG,MAAM,OAAO,QAAQ,CAAC;AAE5C,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAQ/E,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,CAAC,EAAE,UAAU;;;;;;;;;;;;;;;;;;;;;;mBApD/B,mBACT,QAAO,mBACZ;;EAuEJ;AAED,wBAAgB,cAAc,IAAI,WAAW,CAgB5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAStC;AAED;;GAEG;AACH,wBAAgB,cAAc,kBAM7B;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,GAAE,WAA8B,sBAE3F;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,GAAE,WAA8B,sBAG9F"}

package/dist/esm/core/url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../../src/core/url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqC,WAAW,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE;IAC9C,CAAC,GAAG,EAAE,MAAM,GACR,MAAM,GACN,MAAM,GACN,OAAO,GACP,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GACzC,IAAI,GACJ,SAAS,CAAC;CACf,UAeA;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,EAChB,IAAI,SAAK,EACT,WAAW,GAAE,WAA8B,GAC1C,GAAG,CAGL;AAED;;;;;;GAMG;AACH,wBAAgB,KAAK,CACnB,sBAAsB,EAAE,OAAO,GAAG,gBAAgB,EAClD,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;CACpD,EACD,UAAU,CAAC,EAAE,UAAU,UAYxB"}
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../../src/core/url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqC,WAAW,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtF,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE;IAC9C,CAAC,GAAG,EAAE,MAAM,GACR,MAAM,GACN,MAAM,GACN,OAAO,GACP,KAAK,CAAC,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GACzC,IAAI,GACJ,SAAS,CAAC;CACf,UAeA;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,OAAO,EAChB,IAAI,SAAK,EACT,WAAW,GAAE,WAA8B,GAC1C,GAAG,CAGL;AAED;;;;;;GAMG;AACH,wBAAgB,KAAK,CACnB,sBAAsB,EAAE,OAAO,GAAG,gBAAgB,EAClD,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IACR,MAAM,CAAC,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC;CACpD,EACD,UAAU,CAAC,EAAE,UAAU,GACtB,MAAM,CAWR"}

package/dist/esm/package.json

@@ -1,4 +1,4 @@
 {
   "type": "module",
-  "version": "4.0.0-rc.1"
+  "version": "4.0.0-rc.3"
 }

package/dist/esm/services/auth/service/oauth2/token.d.ts

@@ -21,6 +21,25 @@ type RefreshPayload = {
      */
     client_id: string;
 };
+type ExchangePayload = {
+    grant_type: 'authorization_code';
+    code: string;
+    client_id: string;
+    code_verifier: string;
+    redirect_uri: string;
+};
+/**
+ * @see https://docs.globus.org/api/auth/reference/#dependent_token_grant_post_v2oauth2token
+ */
+export declare const token: (options?: ({
+    payload?: ExchangePayload;
+} & import("../../../types.js").BaseServiceMethodOptions) | undefined, sdkOptions?: import("../../../types.js").SDKOptions | undefined) => Promise<Response>;
+/**
+ * @see https://docs.globus.org/api/auth/developer-guide/#obtaining-authorization
+ */
+export declare const exchange: (options?: ({
+    payload?: ExchangePayload;
+} & import("../../../types.js").BaseServiceMethodOptions) | undefined, sdkOptions?: import("../../../types.js").SDKOptions | undefined) => Promise<Response>;
 /**
  * Token Introspection
  * @see https://docs.globus.org/api/auth/reference/#token-introspect

package/dist/esm/services/auth/service/oauth2/token.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../../../../src/services/auth/service/oauth2/token.ts"],"names":[],"mappings":"AAKA,KAAK,iBAAiB,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,eAAe,CAAC;IAC5B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAiCF;;;GAGG;AACH,eAAO,MAAM,UAAU;aAgBZ,iBAAiB;4JAC1B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,MAAM;aAgBR,aAAa;4JACtB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,OAAO;aAgBT,cAAc;4JACvB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,QAAQ;aAgBV,eAAe;4JACxB,CAAC"}
+{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../../../../src/services/auth/service/oauth2/token.ts"],"names":[],"mappings":"AAKA,KAAK,iBAAiB,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,KAAK,EAAE,MAAM,CAAC;IACd;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,cAAc,GAAG;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,eAAe,CAAC;IAC5B;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,KAAK,eAAe,GAAG;IACrB,UAAU,EAAE,oBAAoB,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAuCF;;GAEG;AACH,eAAO,MAAM,KAAK;cAaN,eAAe;4JACzB,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,QAAQ;cANT,eAAe;4JAME,CAAC;AAE9B;;;GAGG;AACH,eAAO,MAAM,UAAU;aAgBZ,iBAAiB;4JAC1B,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,MAAM;aAgBR,aAAa;4JACtB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,OAAO;aAgBT,cAAc;4JACvB,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,QAAQ;aAgBV,eAAe;4JACxB,CAAC"}

package/dist/esm/services/auth/service/oauth2/token.js

@@ -12,12 +12,28 @@ function injectServiceOptions(options) {
          * The `token` service methods always expect a form-encoded body. We still allow
          * end-consumers to pass a raw body, but if `payload` is provided it is serialized.
          */
-        body: serialize(options.payload), headers: Object.assign(Object.assign({}, ((options === null || options === void 0 ? void 0 : options.headers) || {})), { 
+        body: options.payload ? serialize(options.payload) : undefined, headers: Object.assign(Object.assign({}, ((options === null || options === void 0 ? void 0 : options.headers) || {})), { Accept: 'application/json', 
             /**
              * Force the `Content-Type` header to be `application/x-www-form-urlencoded` and `charset=UTF-8`.
              */
             'Content-Type': 'application/x-www-form-urlencoded; charset=UTF-8' }) });
 }
+/**
+ * @see https://docs.globus.org/api/auth/reference/#dependent_token_grant_post_v2oauth2token
+ */
+export const token = function (options = {}, sdkOptions) {
+    return serviceRequest({
+        service: ID,
+        scope: undefined,
+        path: `/v2/oauth2/token`,
+        method: HTTP_METHODS.POST,
+        preventRetry: true,
+    }, injectServiceOptions(options), sdkOptions);
+};
+/**
+ * @see https://docs.globus.org/api/auth/developer-guide/#obtaining-authorization
+ */
+export const exchange = token;
 /**
  * Token Introspection
  * @see https://docs.globus.org/api/auth/reference/#token-introspect

package/dist/esm/services/auth/service/oauth2/token.js.map

@@ -1 +1 @@
-{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../../../../src/services/auth/service/oauth2/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAiC9E,SAAS,SAAS,CAAC,OAA2B;IAC5C,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,OAEC;IAED,uCACK,OAAO;QACV;;;WAGG;QACH,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAChC,OAAO,kCACF,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,KAAI,EAAE,CAAC;YAC3B;;eAEG;YACH,cAAc,EAAE,kDAAkD,OAEpE;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,OAAO,EAAE,UAAW;IACtD,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,cAAc,CACnB;QACE,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,6BAA6B;QACnC,MAAM,EAAE,YAAY,CAAC,IAAI;QACzB,YAAY,EAAE,IAAI;KACnB,EACD,oBAAoB,CAAC,OAAO,CAAC,EAC7B,UAAU,CACX,CAAC;AACJ,CAEE,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,OAAO,EAAE,UAAW;IAClD,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,cAAc,CACnB;QACE,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,YAAY,CAAC,IAAI;QACzB,YAAY,EAAE,IAAI;KACnB,EACD,oBAAoB,CAAC,OAAO,CAAC,EAC7B,UAAU,CACX,CAAC;AACJ,CAEE,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,UAAU,OAAO,EAAE,UAAW;IACnD,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,cAAc,CACnB;QACE,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,YAAY,CAAC,IAAI;QACzB,YAAY,EAAE,IAAI;KACnB,EACD,oBAAoB,CAAC,OAAO,CAAC,EAC7B,UAAU,CACX,CAAC;AACJ,CAEE,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,UAAU,OAAO,EAAE,UAAW;IACpD,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,cAAc,CACnB;QACE,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,YAAY,CAAC,IAAI;QACzB,YAAY,EAAE,IAAI;KACnB,EACD,oBAAoB,CAAC,OAAO,CAAC,EAC7B,UAAU,CACX,CAAC;AACJ,CAEE,CAAC"}
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../../../../src/services/auth/service/oauth2/token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,iBAAiB,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AA8C9E,SAAS,SAAS,CAAC,OAA2B;IAC5C,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;GAEG;AACH,SAAS,oBAAoB,CAC3B,OAEC;IAED,uCACK,OAAO;QACV;;;WAGG;QACH,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,EAC9D,OAAO,kCACF,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,KAAI,EAAE,CAAC,KAC3B,MAAM,EAAE,kBAAkB;YAC1B;;eAEG;YACH,cAAc,EAAE,kDAAkD,OAEpE;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG,UAAU,OAAO,GAAG,EAAE,EAAE,UAAW;IACtD,OAAO,cAAc,CACnB;QACE,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,YAAY,CAAC,IAAI;QACzB,YAAY,EAAE,IAAI;KACnB,EACD,oBAAoB,CAAC,OAAO,CAAC,EAC7B,UAAU,CACX,CAAC;AACJ,CAEE,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC;AAE9B;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,UAAU,OAAO,EAAE,UAAW;IACtD,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,cAAc,CACnB;QACE,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,6BAA6B;QACnC,MAAM,EAAE,YAAY,CAAC,IAAI;QACzB,YAAY,EAAE,IAAI;KACnB,EACD,oBAAoB,CAAC,OAAO,CAAC,EAC7B,UAAU,CACX,CAAC;AACJ,CAEE,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,UAAU,OAAO,EAAE,UAAW;IAClD,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,cAAc,CACnB;QACE,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,yBAAyB;QAC/B,MAAM,EAAE,YAAY,CAAC,IAAI;QACzB,YAAY,EAAE,IAAI;KACnB,EACD,oBAAoB,CAAC,OAAO,CAAC,EAC7B,UAAU,CACX,CAAC;AACJ,CAEE,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,UAAU,OAAO,EAAE,UAAW;IACnD,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,cAAc,CACnB;QACE,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,kBAAkB;QACxB,MAAM,EAAE,YAAY,CAAC,IAAI;QACzB,YAAY,EAAE,IAAI;KACnB,EACD,oBAAoB,CAAC,OAAO,CAAC,EAC7B,UAAU,CACX,CAAC;AACJ,CAEE,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG,UAAU,OAAO,EAAE,UAAW;IACpD,IAAI,CAAC,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO,CAAA,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,cAAc,CACnB;QACE,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,YAAY,CAAC,IAAI;QACzB,YAAY,EAAE,IAAI;KACnB,EACD,oBAAoB,CAAC,OAAO,CAAC,EAC7B,UAAU,CACX,CAAC;AACJ,CAEE,CAAC"}