@gosso/client 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,12 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on Keep a Changelog, and this project follows Semantic Versioning.
+
+## [Unreleased]
+
+## [0.1.0] - 2026-06-29
+### Added
+- Initial `@gosso/client` browser SDK for Gosso ordinary SPA clients.
+- Add PKCE redirects, callback handling, token refresh, authenticated `apiFetch`, password login, MFA verification, passkey login and registration, profile management, email changes, MFA settings, passkey management, and session management.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 gosso contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,120 @@
+# @gosso/client
+
+Browser SDK for Gosso OAuth/OIDC single-page application clients.
+
+`@gosso/client` provides the protocol and account self-service layer for ordinary Gosso clients:
+
+- Authorization Code + PKCE redirects and callback handling
+- token storage, userinfo loading, logout, and automatic refresh
+- authenticated `apiFetch` with bearer headers and 401 retry
+- username/password login, MFA verification, and passkey login
+- profile, password, email, MFA, passkey, and session management APIs
+
+The package intentionally does not ship React UI. Build app-specific pages with your own design system and call the SDK methods underneath.
+
+## Install
+
+```bash
+npm install @gosso/client
+```
+
+## Quick Start
+
+```ts
+import { createGossoClient } from '@gosso/client';
+
+export const gossoClient = createGossoClient({
+  issuer: window.location.origin,
+  clientId: 'blog-spa',
+  redirectUri: `${window.location.origin}/callback`,
+  scope: 'openid profile email',
+  postLoginDefaultPath: '/admin',
+  loginPath: '/login',
+  storagePrefix: 'my-app',
+});
+```
+
+Start an OIDC flow:
+
+```ts
+await gossoClient.redirectToAuthorize('/admin');
+```
+
+Handle the callback route:
+
+```ts
+const code = new URLSearchParams(location.search).get('code');
+const state = new URLSearchParams(location.search).get('state');
+
+if (!code || !state) throw new Error('Missing callback parameters');
+
+const { redirectTo } = await gossoClient.handleRedirectCallback(code, state);
+location.href = redirectTo;
+```
+
+Call protected APIs:
+
+```ts
+const response = await gossoClient.apiFetch('/api/posts', {
+  method: 'POST',
+  headers: { 'Content-Type': 'application/json' },
+  body: JSON.stringify({ title: 'Hello Gosso' }),
+});
+```
+
+## Password, MFA, and Passkey Login
+
+```ts
+const result = await gossoClient.loginWithPassword(username, password);
+
+if (result.requires_mfa) {
+  await gossoClient.verifyMfa(String(result.mfa_token), code);
+}
+```
+
+```ts
+await gossoClient.loginWithPasskey();
+```
+
+## Account Settings
+
+```ts
+await gossoClient.updateProfile('New Display Name');
+await gossoClient.changePassword(currentPassword, newPassword);
+await gossoClient.requestEmailChange(newEmail, password);
+await gossoClient.confirmEmailChange(newEmail, code);
+
+const mfaStatus = await gossoClient.getMfaStatus();
+const passkeys = await gossoClient.listPasskeys();
+const sessions = await gossoClient.listSessions();
+```
+
+## Configuration
+
+```ts
+interface GossoClientConfig {
+  issuer: string;
+  clientId: string;
+  redirectUri: string;
+  scope: string;
+  postLoginDefaultPath: string;
+  loginPath: string;
+  storagePrefix: string;
+  fetchImpl?: typeof fetch;
+  onAuthRequired?: () => void;
+  onSessionChanged?: (snapshot: SessionSnapshot) => void;
+}
+```
+
+Use a unique `storagePrefix` for each SPA on the same origin to avoid token collisions.
+
+## Security Notes
+
+- Use Authorization Code + PKCE for browser clients.
+- Serve production clients over HTTPS.
+- Keep the Gosso issuer and app behind a same-origin gateway when possible.
+- Tokens are stored in browser `localStorage` and mirrored to an `access_token` cookie for same-origin Gosso redirects. Treat XSS prevention as part of your security boundary.
+
+## License
+
+MIT

package/dist/index.d.ts

@@ -0,0 +1,130 @@
+export interface GossoClientConfig {
+    issuer: string;
+    clientId: string;
+    redirectUri: string;
+    scope: string;
+    postLoginDefaultPath: string;
+    loginPath: string;
+    storagePrefix: string;
+    fetchImpl?: typeof fetch;
+    onAuthRequired?: () => void;
+    onSessionChanged?: (snapshot: SessionSnapshot) => void;
+}
+export interface TokenResponse {
+    access_token: string;
+    refresh_token: string;
+    id_token?: string;
+    expires_in: number;
+}
+export interface UserProfile {
+    sub: string;
+    name?: string;
+    preferred_username?: string;
+    email?: string;
+    roles?: string[];
+    scope?: string;
+}
+export interface SessionSnapshot {
+    accessToken: string | null;
+    refreshToken: string | null;
+    profile: UserProfile | null;
+    loggedIn: boolean;
+    isAdmin: boolean;
+}
+export interface LoginResult {
+    access_token?: string;
+    refresh_token?: string;
+    expires_in?: number;
+    requires_mfa?: boolean;
+    mfa_token?: string;
+    [key: string]: unknown;
+}
+export interface MfaStatus {
+    enabled: boolean;
+    types: string[];
+}
+export interface MfaEnrollment {
+    secret: string;
+    otpauth_url: string;
+}
+export interface SessionInfo {
+    id: string;
+    ip: string;
+    user_agent: string;
+    created_at: string;
+    last_active_at: string;
+}
+export interface PasskeyInfo {
+    id: string;
+    name: string;
+    created_at?: string;
+}
+export declare function bufferToBase64URL(buffer: ArrayBuffer): string;
+export declare function base64URLToBuffer(base64URLString: string): ArrayBuffer;
+export declare function createGossoClient(inputConfig: GossoClientConfig): {
+    config: {
+        issuer: string;
+        clientId: string;
+        redirectUri: string;
+        scope: string;
+        postLoginDefaultPath: string;
+        loginPath: string;
+        storagePrefix: string;
+        fetchImpl?: typeof fetch;
+        onAuthRequired?: () => void;
+        onSessionChanged?: (snapshot: SessionSnapshot) => void;
+    };
+    storageKeys: {
+        accessToken: string;
+        refreshToken: string;
+        userProfile: string;
+        pkceVerifier: string;
+        authState: string;
+        postLoginRedirect: string;
+        tokenIssuedAt: string;
+        tokenExpiresIn: string;
+        refreshLock: string;
+    };
+    getAccessToken: () => string | null;
+    getRefreshToken: () => string | null;
+    getUserProfile: () => UserProfile | null;
+    getSnapshot: () => SessionSnapshot;
+    isLoggedIn: () => boolean;
+    isAdmin: () => boolean;
+    saveTokenSet: (data: TokenResponse | {
+        access_token: string;
+        refresh_token?: string;
+        expires_in?: number;
+    }) => void;
+    clear: () => void;
+    logout: (redirectTo?: string) => Promise<void>;
+    redirectToAuthorize: (customRedirectUri?: string) => Promise<void>;
+    exchangeCodeForToken: (code: string, state: string) => Promise<TokenResponse>;
+    handleRedirectCallback: (code: string, state: string) => Promise<{
+        tokenSet: TokenResponse;
+        redirectTo: string;
+    }>;
+    fetchUserProfile: (accessToken?: string | null) => Promise<UserProfile>;
+    refreshAccessToken: () => Promise<string>;
+    apiFetch: (url: string, options?: RequestInit) => Promise<Response>;
+    loginWithPassword: (username: string, password: string) => Promise<LoginResult>;
+    verifyMfa: (mfaToken: string, code: string, type?: "totp" | "passkey") => Promise<TokenResponse>;
+    loginWithPasskey: () => Promise<TokenResponse>;
+    updateProfile: (displayName: string) => Promise<UserProfile>;
+    changePassword: (currentPassword: string, newPassword: string) => Promise<void>;
+    requestEmailChange: (newEmail: string, password: string) => Promise<void>;
+    confirmEmailChange: (newEmail: string, code: string) => Promise<UserProfile>;
+    getMfaStatus: () => Promise<MfaStatus>;
+    enrollMfa: () => Promise<MfaEnrollment>;
+    activateMfa: (code: string) => Promise<string[]>;
+    disableMfa: (currentPassword: string) => Promise<void>;
+    generateBackupCodes: () => Promise<string[]>;
+    listPasskeys: () => Promise<PasskeyInfo[]>;
+    registerPasskey: (name: string) => Promise<void>;
+    deletePasskey: (id: string) => Promise<void>;
+    listSessions: () => Promise<SessionInfo[]>;
+    getCurrentSession: () => Promise<SessionInfo>;
+    revokeSession: (id: string) => Promise<void>;
+};
+export type GossoClient = ReturnType<typeof createGossoClient>;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB,EAAE,MAAM,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,cAAc,CAAC,EAAE,MAAM,IAAI,CAAC;IAC5B,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI,CAAC;CACxD;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,OAAO,EAAE,WAAW,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA4GD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAO7D;AAED,wBAAgB,iBAAiB,CAAC,eAAe,EAAE,MAAM,GAAG,WAAW,CAStE;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,iBAAiB;;;kBAlMpD,MAAM;qBACH,MAAM;eACZ,MAAM;8BACS,MAAM;mBACjB,MAAM;uBACF,MAAM;oBACT,OAAO,KAAK;yBACP,MAAM,IAAI;2BACR,CAAC,QAAQ,EAAE,eAAe,KAAK,IAAI;;;;;;;;;;;;;0BAkO3B,MAAM,GAAG,IAAI;2BACZ,MAAM,GAAG,IAAI;0BAXjB,WAAW,GAAG,IAAI;uBAalB,eAAe;;;yBAiBX,aAAa,GAAG;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE;;;8CAkL1D,MAAM;iCAoBnB,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,aAAa,CAAC;mCA0B5C,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,aAAa,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;uDAjG3D,OAAO,CAAC,WAAW,CAAC;8BA3BhD,OAAO,CAAC,MAAM,CAAC;oBA2CvB,MAAM,YAAW,WAAW,KAAQ,OAAO,CAAC,QAAQ,CAAC;kCA0GvC,MAAM,YAAY,MAAM,KAAG,OAAO,CAAC,WAAW,CAAC;0BAcvD,MAAM,QAAQ,MAAM,SAAQ,MAAM,GAAG,SAAS,KAAY,OAAO,CAAC,aAAa,CAAC;4BAYhF,OAAO,CAAC,aAAa,CAAC;iCA2Cf,MAAM;sCAUD,MAAM,eAAe,MAAM;mCAS9B,MAAM,YAAY,MAAM;mCASxB,MAAM,QAAQ,MAAM;wBAUjC,OAAO,CAAC,SAAS,CAAC;qBAKrB,OAAO,CAAC,aAAa,CAAC;wBAKjB,MAAM,KAAG,OAAO,CAAC,MAAM,EAAE,CAAC;kCAYhB,MAAM;+BASX,OAAO,CAAC,MAAM,EAAE,CAAC;wBAMxB,OAAO,CAAC,WAAW,EAAE,CAAC;4BAKhB,MAAM,KAAG,OAAO,CAAC,IAAI,CAAC;wBAuC1B,MAAM;wBAKR,OAAO,CAAC,WAAW,EAAE,CAAC;6BAMjB,OAAO,CAAC,WAAW,CAAC;wBAKvB,MAAM;EA0CxC;AAED,MAAM,MAAM,WAAW,GAAG,UAAU,CAAC,OAAO,iBAAiB,CAAC,CAAC"}

package/dist/index.js

@@ -0,0 +1,633 @@
+const REFRESH_LOCK_TTL_MS = 15_000;
+const REFRESH_WAIT_TIMEOUT_MS = 20_000;
+const REFRESH_WAIT_POLL_MS = 100;
+const REFRESH_WEB_LOCK_NAME = 'gosso-auth-refresh';
+const defaultConfig = {
+    scope: 'openid profile email',
+    postLoginDefaultPath: '/',
+    loginPath: '/login',
+    storagePrefix: 'gosso',
+};
+function normalizeBaseUrl(url) {
+    return url.replace(/\/+$/, '');
+}
+function generateRandomString(length) {
+    const possible = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-._~';
+    let text = '';
+    for (let i = 0; i < length; i += 1) {
+        text += possible.charAt(Math.floor(Math.random() * possible.length));
+    }
+    return text;
+}
+async function generateCodeChallenge(verifier) {
+    const data = new TextEncoder().encode(verifier);
+    const digest = await window.crypto.subtle.digest('SHA-256', data);
+    return bufferToBase64URL(digest);
+}
+function cookieSecureAttribute() {
+    return location.protocol === 'https:' ? '; Secure' : '';
+}
+function readClaimsFromAccessToken(accessToken) {
+    try {
+        const payloadBase64 = accessToken.split('.')[1];
+        const base64 = payloadBase64.replace(/-/g, '+').replace(/_/g, '/');
+        const padded = base64 + '='.repeat((4 - (base64.length % 4)) % 4);
+        return JSON.parse(decodeURIComponent(escape(atob(padded))));
+    }
+    catch {
+        return null;
+    }
+}
+function readRolesFromAccessToken(accessToken) {
+    const payload = readClaimsFromAccessToken(accessToken);
+    return Array.isArray(payload?.roles) ? payload.roles : undefined;
+}
+function readScopeFromAccessToken(accessToken) {
+    const payload = readClaimsFromAccessToken(accessToken);
+    return typeof payload?.scope === 'string' ? payload.scope : undefined;
+}
+function hasAdminAccess(profile, accessToken) {
+    const hasAdminRole = profile?.roles?.includes('admin') || false;
+    const scope = accessToken ? readScopeFromAccessToken(accessToken) : profile?.scope;
+    return hasAdminRole && Boolean(scope?.split(/\s+/).includes('admin'));
+}
+function parseRefreshLock(raw) {
+    if (!raw)
+        return null;
+    try {
+        const lock = JSON.parse(raw);
+        if (typeof lock.owner !== 'string' || typeof lock.expiresAt !== 'number') {
+            return null;
+        }
+        return { owner: lock.owner, expiresAt: lock.expiresAt };
+    }
+    catch {
+        return null;
+    }
+}
+function generateRefreshOwner() {
+    if (window.crypto?.randomUUID) {
+        return window.crypto.randomUUID();
+    }
+    return `${Date.now()}-${Math.random().toString(16).slice(2)}`;
+}
+async function parseJsonEnvelope(response, fallbackMessage) {
+    const body = (await response.json());
+    if (!response.ok) {
+        throw new Error(body.message || fallbackMessage);
+    }
+    return body.data;
+}
+export function bufferToBase64URL(buffer) {
+    const bytes = new Uint8Array(buffer);
+    let binary = '';
+    for (let i = 0; i < bytes.byteLength; i += 1) {
+        binary += String.fromCharCode(bytes[i]);
+    }
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+export function base64URLToBuffer(base64URLString) {
+    const base64 = base64URLString.replace(/-/g, '+').replace(/_/g, '/');
+    const padded = base64 + '='.repeat((4 - (base64.length % 4)) % 4);
+    const binary = atob(padded);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i += 1) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes.buffer;
+}
+export function createGossoClient(inputConfig) {
+    const config = {
+        ...defaultConfig,
+        ...inputConfig,
+        issuer: normalizeBaseUrl(inputConfig.issuer),
+    };
+    const fetcher = config.fetchImpl || fetch.bind(window);
+    const key = (name) => `${config.storagePrefix}:${name}`;
+    const storageKeys = {
+        accessToken: key('access_token'),
+        refreshToken: key('refresh_token'),
+        userProfile: key('user_profile'),
+        pkceVerifier: key('pkce_verifier'),
+        authState: key('auth_state'),
+        postLoginRedirect: key('post_login_redirect'),
+        tokenIssuedAt: key('token_issued_at'),
+        tokenExpiresIn: key('token_expires_in'),
+        refreshLock: key('auth_refresh_lock'),
+    };
+    let refreshPromise = null;
+    const setCookie = (name, value, maxAgeSeconds) => {
+        document.cookie = `${name}=${value}; path=/; max-age=${maxAgeSeconds}; SameSite=Lax${cookieSecureAttribute()}`;
+    };
+    const deleteCookie = (name) => {
+        document.cookie = `${name}=; path=/; max-age=-1; SameSite=Lax`;
+    };
+    const readProfile = () => {
+        const profile = localStorage.getItem(storageKeys.userProfile);
+        if (!profile)
+            return null;
+        try {
+            return JSON.parse(profile);
+        }
+        catch {
+            return null;
+        }
+    };
+    const getAccessToken = () => localStorage.getItem(storageKeys.accessToken);
+    const getRefreshToken = () => localStorage.getItem(storageKeys.refreshToken);
+    const getSnapshot = () => {
+        const accessToken = getAccessToken();
+        const refreshToken = getRefreshToken();
+        const profile = readProfile();
+        return {
+            accessToken,
+            refreshToken,
+            profile,
+            loggedIn: Boolean(accessToken),
+            isAdmin: hasAdminAccess(profile, accessToken),
+        };
+    };
+    const emitSessionChanged = () => {
+        config.onSessionChanged?.(getSnapshot());
+    };
+    const saveTokenSet = (data) => {
+        localStorage.setItem(storageKeys.accessToken, data.access_token);
+        if (data.refresh_token) {
+            localStorage.setItem(storageKeys.refreshToken, data.refresh_token);
+        }
+        localStorage.setItem(storageKeys.tokenIssuedAt, String(Date.now()));
+        localStorage.setItem(storageKeys.tokenExpiresIn, String(data.expires_in || 900));
+        setCookie('access_token', data.access_token, data.expires_in || 900);
+        emitSessionChanged();
+    };
+    const clear = () => {
+        Object.values(storageKeys).forEach((storageKey) => localStorage.removeItem(storageKey));
+        deleteCookie('access_token');
+        emitSessionChanged();
+    };
+    const redirectToLogin = () => {
+        if (config.onAuthRequired) {
+            config.onAuthRequired();
+            return;
+        }
+        window.location.href = config.loginPath;
+    };
+    const tryAcquireRefreshLock = (owner) => {
+        const now = Date.now();
+        const current = parseRefreshLock(localStorage.getItem(storageKeys.refreshLock));
+        if (current && current.expiresAt > now && current.owner !== owner) {
+            return false;
+        }
+        const nextLock = { owner, expiresAt: now + REFRESH_LOCK_TTL_MS };
+        localStorage.setItem(storageKeys.refreshLock, JSON.stringify(nextLock));
+        return parseRefreshLock(localStorage.getItem(storageKeys.refreshLock))?.owner === owner;
+    };
+    const releaseRefreshLock = (owner) => {
+        const current = parseRefreshLock(localStorage.getItem(storageKeys.refreshLock));
+        if (!current || current.owner === owner || current.expiresAt <= Date.now()) {
+            localStorage.removeItem(storageKeys.refreshLock);
+        }
+    };
+    const waitForRefreshFromAnotherContext = (previousRefreshToken) => {
+        const startedAt = Date.now();
+        return new Promise((resolve) => {
+            let settled = false;
+            let intervalId;
+            let timeoutId;
+            const finish = (token) => {
+                if (settled)
+                    return;
+                settled = true;
+                if (intervalId !== undefined)
+                    window.clearInterval(intervalId);
+                if (timeoutId !== undefined)
+                    window.clearTimeout(timeoutId);
+                window.removeEventListener('storage', check);
+                resolve(token);
+            };
+            const check = () => {
+                const accessToken = getAccessToken();
+                const refreshToken = getRefreshToken();
+                const issuedAt = Number(localStorage.getItem(storageKeys.tokenIssuedAt));
+                if (accessToken && refreshToken && refreshToken !== previousRefreshToken && issuedAt >= startedAt) {
+                    finish(accessToken);
+                    return;
+                }
+                const lock = parseRefreshLock(localStorage.getItem(storageKeys.refreshLock));
+                if (!lock || lock.expiresAt <= Date.now()) {
+                    finish(null);
+                }
+            };
+            window.addEventListener('storage', check);
+            intervalId = window.setInterval(check, REFRESH_WAIT_POLL_MS);
+            timeoutId = window.setTimeout(() => finish(null), REFRESH_WAIT_TIMEOUT_MS);
+            check();
+        });
+    };
+    const requestBrowserRefreshLock = async (callback) => {
+        const locks = navigator.locks;
+        if (!locks)
+            return callback();
+        return locks.request(REFRESH_WEB_LOCK_NAME, { mode: 'exclusive' }, callback);
+    };
+    const performTokenRefresh = async (previousRefreshToken) => {
+        const latestRefreshToken = getRefreshToken();
+        if (!latestRefreshToken)
+            throw new Error('No refresh token found');
+        if (latestRefreshToken !== previousRefreshToken) {
+            const latestAccessToken = getAccessToken();
+            if (latestAccessToken)
+                return latestAccessToken;
+        }
+        const response = await fetcher(`${config.issuer}/api/v1/auth/refresh`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ refresh_token: latestRefreshToken }),
+        });
+        const data = await parseJsonEnvelope(response, 'Token refresh failed');
+        saveTokenSet(data);
+        return data.access_token;
+    };
+    const refreshAccessToken = async () => {
+        if (refreshPromise)
+            return refreshPromise;
+        refreshPromise = (async () => {
+            const owner = generateRefreshOwner();
+            let lockAcquired = false;
+            try {
+                const refreshToken = getRefreshToken();
+                if (!refreshToken)
+                    throw new Error('No refresh token found');
+                if (navigator.locks) {
+                    return requestBrowserRefreshLock(() => performTokenRefresh(refreshToken));
+                }
+                lockAcquired = tryAcquireRefreshLock(owner);
+                if (!lockAcquired) {
+                    const tokenFromPeer = await waitForRefreshFromAnotherContext(refreshToken);
+                    if (tokenFromPeer)
+                        return tokenFromPeer;
+                    lockAcquired = tryAcquireRefreshLock(owner);
+                    if (!lockAcquired)
+                        throw new Error('Token refresh is already in progress');
+                }
+                return performTokenRefresh(refreshToken);
+            }
+            finally {
+                if (lockAcquired)
+                    releaseRefreshLock(owner);
+                refreshPromise = null;
+            }
+        })();
+        return refreshPromise;
+    };
+    const fetchUserProfile = async (accessToken = getAccessToken()) => {
+        if (!accessToken)
+            throw new Error('No access token found');
+        const response = await fetcher(`${config.issuer}/oidc/userinfo`, {
+            headers: { Authorization: `Bearer ${accessToken}` },
+        });
+        if (!response.ok)
+            throw new Error('Failed to fetch user profile');
+        const data = (await response.json());
+        const roles = readRolesFromAccessToken(accessToken);
+        if (roles)
+            data.roles = roles;
+        const scope = readScopeFromAccessToken(accessToken);
+        if (scope)
+            data.scope = scope;
+        localStorage.setItem(storageKeys.userProfile, JSON.stringify(data));
+        emitSessionChanged();
+        return data;
+    };
+    const apiFetch = async (url, options = {}) => {
+        let token = getAccessToken();
+        if (!token) {
+            redirectToLogin();
+            return new Response(null, { status: 401 });
+        }
+        const issuedAt = Number(localStorage.getItem(storageKeys.tokenIssuedAt));
+        const expiresIn = Number(localStorage.getItem(storageKeys.tokenExpiresIn)) || 900;
+        if (issuedAt && Date.now() - issuedAt > expiresIn * 1000) {
+            try {
+                token = await refreshAccessToken();
+            }
+            catch {
+                clear();
+                redirectToLogin();
+                return new Response(null, { status: 401 });
+            }
+        }
+        const headers = new Headers(options.headers || {});
+        if (token && !headers.has('Authorization')) {
+            headers.set('Authorization', `Bearer ${token}`);
+        }
+        let response = await fetcher(url, { ...options, headers });
+        if (response.status === 401 && getRefreshToken()) {
+            try {
+                const freshToken = await refreshAccessToken();
+                headers.set('Authorization', `Bearer ${freshToken}`);
+                response = await fetcher(url, { ...options, headers });
+            }
+            catch {
+                clear();
+                redirectToLogin();
+            }
+        }
+        return response;
+    };
+    const redirectToAuthorize = async (customRedirectUri) => {
+        const verifier = generateRandomString(64);
+        const state = generateRandomString(16);
+        localStorage.setItem(storageKeys.pkceVerifier, verifier);
+        localStorage.setItem(storageKeys.authState, state);
+        if (customRedirectUri) {
+            localStorage.setItem(storageKeys.postLoginRedirect, customRedirectUri);
+        }
+        const challenge = await generateCodeChallenge(verifier);
+        const authUrl = new URL(`${config.issuer}/oauth2/authorize`);
+        authUrl.searchParams.append('client_id', config.clientId);
+        authUrl.searchParams.append('response_type', 'code');
+        authUrl.searchParams.append('redirect_uri', config.redirectUri);
+        authUrl.searchParams.append('scope', config.scope);
+        authUrl.searchParams.append('code_challenge', challenge);
+        authUrl.searchParams.append('code_challenge_method', 'S256');
+        authUrl.searchParams.append('state', state);
+        window.location.href = authUrl.toString();
+    };
+    const exchangeCodeForToken = async (code, state) => {
+        const savedState = localStorage.getItem(storageKeys.authState);
+        const verifier = localStorage.getItem(storageKeys.pkceVerifier);
+        if (state !== savedState)
+            throw new Error('State mismatch. Potential CSRF attack.');
+        if (!verifier)
+            throw new Error('PKCE verifier not found. Authentication flow expired.');
+        const body = new URLSearchParams();
+        body.append('grant_type', 'authorization_code');
+        body.append('client_id', config.clientId);
+        body.append('code', code);
+        body.append('code_verifier', verifier);
+        body.append('redirect_uri', config.redirectUri);
+        const response = await fetcher(`${config.issuer}/oauth2/token`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            throw new Error(`Token exchange failed: ${await response.text()}`);
+        }
+        const data = (await response.json());
+        saveTokenSet(data);
+        localStorage.removeItem(storageKeys.pkceVerifier);
+        localStorage.removeItem(storageKeys.authState);
+        return data;
+    };
+    const handleRedirectCallback = async (code, state) => {
+        const tokenSet = await exchangeCodeForToken(code, state);
+        await fetchUserProfile(tokenSet.access_token);
+        const redirectTo = localStorage.getItem(storageKeys.postLoginRedirect) || config.postLoginDefaultPath;
+        localStorage.removeItem(storageKeys.postLoginRedirect);
+        return { tokenSet, redirectTo };
+    };
+    const logout = async (redirectTo = '/') => {
+        const accessToken = getAccessToken();
+        try {
+            if (accessToken) {
+                await fetcher(`${config.issuer}/api/v1/auth/logout`, {
+                    method: 'POST',
+                    headers: { Authorization: `Bearer ${accessToken}` },
+                    credentials: 'same-origin',
+                    keepalive: true,
+                });
+            }
+        }
+        finally {
+            clear();
+            window.location.href = redirectTo;
+        }
+    };
+    const loginWithPassword = async (username, password) => {
+        const response = await fetcher(`${config.issuer}/api/v1/auth/login`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ username, password }),
+        });
+        const result = await parseJsonEnvelope(response, 'Login failed');
+        if (result.access_token) {
+            saveTokenSet(result);
+            await fetchUserProfile(result.access_token);
+        }
+        return result;
+    };
+    const verifyMfa = async (mfaToken, code, type = 'totp') => {
+        const response = await fetcher(`${config.issuer}/api/v1/auth/mfa/verify`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ mfa_token: mfaToken, code, type }),
+        });
+        const data = await parseJsonEnvelope(response, 'MFA verification failed');
+        saveTokenSet(data);
+        await fetchUserProfile(data.access_token);
+        return data;
+    };
+    const loginWithPasskey = async () => {
+        const beginRes = await fetcher(`${config.issuer}/api/v1/passkey/login/begin`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({}),
+        });
+        const begin = await parseJsonEnvelope(beginRes, 'Failed to begin passkey login');
+        const options = {
+            ...begin.options,
+            challenge: base64URLToBuffer(begin.options.challenge),
+            allowCredentials: (begin.options.allowCredentials || []).map((cred) => ({
+                ...cred,
+                id: base64URLToBuffer(cred.id),
+            })),
+        };
+        const assertion = (await navigator.credentials.get({ publicKey: options }));
+        if (!assertion?.response)
+            throw new Error('Passkey authentication cancelled or failed');
+        const assertionResponse = assertion.response;
+        const completeRes = await fetcher(`${config.issuer}/api/v1/passkey/login/complete`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                request_id: begin.request_id,
+                id: assertion.id,
+                rawId: bufferToBase64URL(assertion.rawId),
+                type: assertion.type,
+                response: {
+                    clientDataJSON: bufferToBase64URL(assertionResponse.clientDataJSON),
+                    authenticatorData: bufferToBase64URL(assertionResponse.authenticatorData),
+                    signature: bufferToBase64URL(assertionResponse.signature),
+                    userHandle: assertionResponse.userHandle ? bufferToBase64URL(assertionResponse.userHandle) : null,
+                },
+            }),
+        });
+        const data = await parseJsonEnvelope(completeRes, 'Passkey login failed');
+        saveTokenSet(data);
+        await fetchUserProfile(data.access_token);
+        return data;
+    };
+    const updateProfile = async (displayName) => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/profile`, {
+            method: 'PUT',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ display_name: displayName }),
+        });
+        await parseJsonEnvelope(response, 'Failed to update profile');
+        return fetchUserProfile();
+    };
+    const changePassword = async (currentPassword, newPassword) => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/password/change`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ current_password: currentPassword, new_password: newPassword }),
+        });
+        await parseJsonEnvelope(response, 'Failed to change password');
+    };
+    const requestEmailChange = async (newEmail, password) => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/profile/email/change/request`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ new_email: newEmail, password }),
+        });
+        await parseJsonEnvelope(response, 'Failed to request email verification code');
+    };
+    const confirmEmailChange = async (newEmail, code) => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/profile/email/change/confirm`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ new_email: newEmail, code }),
+        });
+        await parseJsonEnvelope(response, 'Failed to confirm email change');
+        return fetchUserProfile();
+    };
+    const getMfaStatus = async () => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/mfa`);
+        return parseJsonEnvelope(response, 'Failed to load MFA status');
+    };
+    const enrollMfa = async () => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/mfa/enroll`, { method: 'POST' });
+        return parseJsonEnvelope(response, 'Failed to enroll MFA');
+    };
+    const activateMfa = async (code) => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/mfa/activate`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ code }),
+        });
+        await parseJsonEnvelope(response, 'Failed to activate MFA');
+        const codesResponse = await apiFetch(`${config.issuer}/api/v1/auth/mfa/backup-codes`, { method: 'POST' });
+        const data = await parseJsonEnvelope(codesResponse, 'Failed to generate backup codes');
+        return data.backup_codes || [];
+    };
+    const disableMfa = async (currentPassword) => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/mfa`, {
+            method: 'DELETE',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ current_password: currentPassword }),
+        });
+        await parseJsonEnvelope(response, 'Failed to disable MFA');
+    };
+    const generateBackupCodes = async () => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/mfa/backup-codes`, { method: 'POST' });
+        const data = await parseJsonEnvelope(response, 'Failed to generate backup codes');
+        return data.backup_codes || [];
+    };
+    const listPasskeys = async () => {
+        const response = await apiFetch(`${config.issuer}/api/v1/passkeys`);
+        return parseJsonEnvelope(response, 'Failed to load passkeys');
+    };
+    const registerPasskey = async (name) => {
+        const beginRes = await apiFetch(`${config.issuer}/api/v1/passkey/register/begin`, { method: 'POST' });
+        const begin = await parseJsonEnvelope(beginRes, 'Failed to initialize passkey registration');
+        const options = {
+            ...begin.options,
+            challenge: base64URLToBuffer(begin.options.challenge),
+            user: {
+                ...begin.options.user,
+                id: base64URLToBuffer(begin.options.user.id),
+            },
+            excludeCredentials: (begin.options.excludeCredentials || []).map((cred) => ({
+                ...cred,
+                id: base64URLToBuffer(cred.id),
+            })),
+        };
+        const credential = (await navigator.credentials.create({ publicKey: options }));
+        if (!credential?.response)
+            throw new Error('Passkey registration cancelled or failed');
+        const attestationResponse = credential.response;
+        const completeRes = await apiFetch(`${config.issuer}/api/v1/passkey/register/complete?request_id=${begin.request_id}`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({
+                id: credential.id,
+                rawId: bufferToBase64URL(credential.rawId),
+                type: credential.type,
+                name,
+                response: {
+                    clientDataJSON: bufferToBase64URL(attestationResponse.clientDataJSON),
+                    attestationObject: bufferToBase64URL(attestationResponse.attestationObject),
+                    transports: typeof attestationResponse.getTransports === 'function' ? attestationResponse.getTransports() : [],
+                },
+            }),
+        });
+        await parseJsonEnvelope(completeRes, 'Failed to verify passkey registration');
+    };
+    const deletePasskey = async (id) => {
+        const response = await apiFetch(`${config.issuer}/api/v1/passkeys/${id}`, { method: 'DELETE' });
+        await parseJsonEnvelope(response, 'Failed to remove passkey');
+    };
+    const listSessions = async () => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/sessions`);
+        const sessions = await parseJsonEnvelope(response, 'Failed to load sessions');
+        return sessions.sort((a, b) => new Date(b.last_active_at).getTime() - new Date(a.last_active_at).getTime());
+    };
+    const getCurrentSession = async () => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/session`);
+        return parseJsonEnvelope(response, 'Failed to load current session');
+    };
+    const revokeSession = async (id) => {
+        const response = await apiFetch(`${config.issuer}/api/v1/auth/sessions/${id}`, { method: 'DELETE' });
+        await parseJsonEnvelope(response, 'Failed to revoke session');
+    };
+    return {
+        config,
+        storageKeys,
+        getAccessToken,
+        getRefreshToken,
+        getUserProfile: readProfile,
+        getSnapshot,
+        isLoggedIn: () => Boolean(getAccessToken()),
+        isAdmin: () => hasAdminAccess(readProfile(), getAccessToken()),
+        saveTokenSet,
+        clear,
+        logout,
+        redirectToAuthorize,
+        exchangeCodeForToken,
+        handleRedirectCallback,
+        fetchUserProfile,
+        refreshAccessToken,
+        apiFetch,
+        loginWithPassword,
+        verifyMfa,
+        loginWithPasskey,
+        updateProfile,
+        changePassword,
+        requestEmailChange,
+        confirmEmailChange,
+        getMfaStatus,
+        enrollMfa,
+        activateMfa,
+        disableMfa,
+        generateBackupCodes,
+        listPasskeys,
+        registerPasskey,
+        deletePasskey,
+        listSessions,
+        getCurrentSession,
+        revokeSession,
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAsFA,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AACjC,MAAM,qBAAqB,GAAG,oBAAoB,CAAC;AAEnD,MAAM,aAAa,GAA8F;IAC/G,KAAK,EAAE,sBAAsB;IAC7B,oBAAoB,EAAE,GAAG;IACzB,SAAS,EAAE,QAAQ;IACnB,aAAa,EAAE,OAAO;CACvB,CAAC;AAEF,SAAS,gBAAgB,CAAC,GAAW;IACnC,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAc;IAC1C,MAAM,QAAQ,GAAG,oEAAoE,CAAC;IACtF,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IACnD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,qBAAqB;IAC5B,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,yBAAyB,CAAC,WAAmB;IACpD,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,OAAO,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,wBAAwB,CAAC,WAAmB;IACnD,MAAM,OAAO,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAE,OAAO,CAAC,KAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;AACjF,CAAC;AAED,SAAS,wBAAwB,CAAC,WAAmB;IACnD,MAAM,OAAO,GAAG,yBAAyB,CAAC,WAAW,CAAC,CAAC;IACvD,OAAO,OAAO,OAAO,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,SAAS,cAAc,CAAC,OAA2B,EAAE,WAA0B;IAC7E,MAAM,YAAY,GAAG,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC;IAChE,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC;IACnF,OAAO,YAAY,IAAI,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAkB;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACrD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YACzE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB;IAC3B,IAAI,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAI,QAAkB,EAAE,eAAuB;IAC7E,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAmB,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC,IAAS,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAmB;IACnD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,eAAuB;IACvD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAA8B;IAC9D,MAAM,MAAM,GAAG;QACb,GAAG,aAAa;QAChB,GAAG,WAAW;QACd,MAAM,EAAE,gBAAgB,CAAC,WAAW,CAAC,MAAM,CAAC;KAC7C,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG;QAClB,WAAW,EAAE,GAAG,CAAC,cAAc,CAAC;QAChC,YAAY,EAAE,GAAG,CAAC,eAAe,CAAC;QAClC,WAAW,EAAE,GAAG,CAAC,cAAc,CAAC;QAChC,YAAY,EAAE,GAAG,CAAC,eAAe,CAAC;QAClC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC;QAC5B,iBAAiB,EAAE,GAAG,CAAC,qBAAqB,CAAC;QAC7C,aAAa,EAAE,GAAG,CAAC,iBAAiB,CAAC;QACrC,cAAc,EAAE,GAAG,CAAC,kBAAkB,CAAC;QACvC,WAAW,EAAE,GAAG,CAAC,mBAAmB,CAAC;KACtC,CAAC;IAEF,IAAI,cAAc,GAA2B,IAAI,CAAC;IAElD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,KAAa,EAAE,aAAqB,EAAE,EAAE;QACvE,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,KAAK,qBAAqB,aAAa,iBAAiB,qBAAqB,EAAE,EAAE,CAAC;IACjH,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,EAAE;QACpC,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,qCAAqC,CAAC;IACjE,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,GAAuB,EAAE;QAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAgB,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,GAAkB,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IAC1F,MAAM,eAAe,GAAG,GAAkB,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAE5F,MAAM,WAAW,GAAG,GAAoB,EAAE;QACxC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;QAC9B,OAAO;YACL,WAAW;YACX,YAAY;YACZ,OAAO;YACP,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC;YAC9B,OAAO,EAAE,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC;SAC9C,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,MAAM,CAAC,gBAAgB,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,CAAC,IAA2F,EAAE,EAAE;QACnH,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;QACrE,CAAC;QACD,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACpE,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC;QACjF,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;QACrE,kBAAkB,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;QACxF,YAAY,CAAC,cAAc,CAAC,CAAC;QAC7B,kBAAkB,EAAE,CAAC;IACvB,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;YAC1B,MAAM,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;QACD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC;IAC1C,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAW,EAAE;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;QAChF,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,GAAG,GAAG,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAClE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAgB,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,mBAAmB,EAAE,CAAC;QAC9E,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxE,OAAO,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,KAAK,KAAK,CAAC;IAC1F,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,CAAC,KAAa,EAAE,EAAE;QAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3E,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,gCAAgC,GAAG,CAAC,oBAA4B,EAA0B,EAAE;QAChG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,IAAI,UAA8B,CAAC;YACnC,IAAI,SAA6B,CAAC;YAClC,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAE,EAAE;gBACtC,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,UAAU,KAAK,SAAS;oBAAE,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;gBAC/D,IAAI,SAAS,KAAK,SAAS;oBAAE,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;gBAC5D,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC7C,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,GAAG,EAAE;gBACjB,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;gBACrC,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;gBACvC,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;gBACzE,IAAI,WAAW,IAAI,YAAY,IAAI,YAAY,KAAK,oBAAoB,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;oBAClG,MAAM,CAAC,WAAW,CAAC,CAAC;oBACpB,OAAO;gBACT,CAAC;gBACD,MAAM,IAAI,GAAG,gBAAgB,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;gBAC7E,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;oBAC1C,MAAM,CAAC,IAAI,CAAC,CAAC;gBACf,CAAC;YACH,CAAC,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC1C,UAAU,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;YAC7D,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,uBAAuB,CAAC,CAAC;YAC3E,KAAK,EAAE,CAAC;QACV,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,yBAAyB,GAAG,KAAK,EAAE,QAA+B,EAAmB,EAAE;QAC3F,MAAM,KAAK,GAAI,SAAgC,CAAC,KAAK,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC/E,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,KAAK,EAAE,oBAA4B,EAAmB,EAAE;QAClF,MAAM,kBAAkB,GAAG,eAAe,EAAE,CAAC;QAC7C,IAAI,CAAC,kBAAkB;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACnE,IAAI,kBAAkB,KAAK,oBAAoB,EAAE,CAAC;YAChD,MAAM,iBAAiB,GAAG,cAAc,EAAE,CAAC;YAC3C,IAAI,iBAAiB;gBAAE,OAAO,iBAAiB,CAAC;QAClD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,sBAAsB,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAgB,QAAQ,EAAE,sBAAsB,CAAC,CAAC;QACtF,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,IAAqB,EAAE;QACrD,IAAI,cAAc;YAAE,OAAO,cAAc,CAAC;QAC1C,cAAc,GAAG,CAAC,KAAK,IAAI,EAAE;YAC3B,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;YACrC,IAAI,YAAY,GAAG,KAAK,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;gBACvC,IAAI,CAAC,YAAY;oBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBAC7D,IAAK,SAAgC,CAAC,KAAK,EAAE,CAAC;oBAC5C,OAAO,yBAAyB,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAC5E,CAAC;gBACD,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,MAAM,aAAa,GAAG,MAAM,gCAAgC,CAAC,YAAY,CAAC,CAAC;oBAC3E,IAAI,aAAa;wBAAE,OAAO,aAAa,CAAC;oBACxC,YAAY,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;oBAC5C,IAAI,CAAC,YAAY;wBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;gBAC7E,CAAC;gBACD,OAAO,mBAAmB,CAAC,YAAY,CAAC,CAAC;YAC3C,CAAC;oBAAS,CAAC;gBACT,IAAI,YAAY;oBAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC5C,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,cAAc,CAAC;IACxB,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,EAAE,WAAW,GAAG,cAAc,EAAE,EAAwB,EAAE;QACtF,IAAI,CAAC,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAC3D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,gBAAgB,EAAE;YAC/D,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;SACpD,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAgB,CAAC;QACpD,MAAM,KAAK,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAC9B,MAAM,KAAK,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;QACpD,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QAC9B,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,kBAAkB,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAW,EAAE,UAAuB,EAAE,EAAqB,EAAE;QACnF,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,eAAe,EAAE,CAAC;YAClB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,IAAI,GAAG,CAAC;QAClF,IAAI,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,GAAG,SAAS,GAAG,IAAI,EAAE,CAAC;YACzD,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,EAAE,CAAC;gBACR,eAAe,EAAE,CAAC;gBAClB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QACnD,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,UAAU,GAAG,MAAM,kBAAkB,EAAE,CAAC;gBAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,UAAU,EAAE,CAAC,CAAC;gBACrD,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;YACzD,CAAC;YAAC,MAAM,CAAC;gBACP,KAAK,EAAE,CAAC;gBACR,eAAe,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,KAAK,EAAE,iBAA0B,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;QACvC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QACzD,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACnD,IAAI,iBAAiB,EAAE,CAAC;YACtB,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,mBAAmB,CAAC,CAAC;QAC7D,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1D,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QACrD,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAChE,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACnD,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QACzD,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC7D,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC,CAAC;IAEF,MAAM,oBAAoB,GAAG,KAAK,EAAE,IAAY,EAAE,KAAa,EAA0B,EAAE;QACzF,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACpF,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACxF,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,eAAe,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrE,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;QACtD,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;QAClD,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,sBAAsB,GAAG,KAAK,EAAE,IAAY,EAAE,KAAa,EAA4D,EAAE;QAC7H,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzD,MAAM,gBAAgB,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,MAAM,CAAC,oBAAoB,CAAC;QACtG,YAAY,CAAC,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QACvD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;IAClC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,UAAU,GAAG,GAAG,EAAE,EAAE;QACxC,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,qBAAqB,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;oBACnD,WAAW,EAAE,aAAa;oBAC1B,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,KAAK,EAAE,CAAC;YACR,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,UAAU,CAAC;QACpC,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,EAAE,QAAgB,EAAE,QAAgB,EAAwB,EAAE;QAC3F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,oBAAoB,EAAE;YACnE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;SAC7C,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAc,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;YACxB,YAAY,CAAC,MAAuB,CAAC,CAAC;YACtC,MAAM,gBAAgB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,EAAE,QAAgB,EAAE,IAAY,EAAE,OAA2B,MAAM,EAA0B,EAAE;QACpH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,yBAAyB,EAAE;YACxE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;SAC1D,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAgB,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QACzF,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,KAAK,IAA4B,EAAE;QAC1D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,6BAA6B,EAAE;YAC5E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;SACzB,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACnC,QAAQ,EACR,+BAA+B,CAChC,CAAC;QACF,MAAM,OAAO,GAAG;YACd,GAAG,KAAK,CAAC,OAAO;YAChB,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,SAA8B,CAAC;YAC1E,gBAAgB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACtE,GAAG,IAAI;gBACP,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAuB,CAAC;aACpD,CAAC,CAAC;SACJ,CAAC;QACF,MAAM,SAAS,GAAG,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAA+B,CAAC;QAC1G,IAAI,CAAC,SAAS,EAAE,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACxF,MAAM,iBAAiB,GAAG,SAAS,CAAC,QAA0C,CAAC;QAC/E,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,gCAAgC,EAAE;YAClF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,EAAE,EAAE,SAAS,CAAC,EAAE;gBAChB,KAAK,EAAE,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC;gBACzC,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,QAAQ,EAAE;oBACR,cAAc,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,cAAc,CAAC;oBACnE,iBAAiB,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;oBACzE,SAAS,EAAE,iBAAiB,CAAC,iBAAiB,CAAC,SAAS,CAAC;oBACzD,UAAU,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;iBAClG;aACF,CAAC;SACH,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAgB,WAAW,EAAE,sBAAsB,CAAC,CAAC;QACzF,YAAY,CAAC,IAAI,CAAC,CAAC;QACnB,MAAM,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,WAAmB,EAAE,EAAE;QAClD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,sBAAsB,EAAE;YACtE,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAU,QAAQ,EAAE,0BAA0B,CAAC,CAAC;QACvE,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,eAAuB,EAAE,WAAmB,EAAE,EAAE;QAC5E,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,8BAA8B,EAAE;YAC9E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;SACvF,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAU,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAC1E,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,QAAgB,EAAE,QAAgB,EAAE,EAAE;QACtE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,2CAA2C,EAAE;YAC3F,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;SACxD,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAU,QAAQ,EAAE,2CAA2C,CAAC,CAAC;IAC1F,CAAC,CAAC;IAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,QAAgB,EAAE,IAAY,EAAE,EAAE;QAClE,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,2CAA2C,EAAE;YAC3F,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SACpD,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAU,QAAQ,EAAE,gCAAgC,CAAC,CAAC;QAC7E,OAAO,gBAAgB,EAAE,CAAC;IAC5B,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,IAAwB,EAAE;QAClD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,kBAAkB,CAAC,CAAC;QACpE,OAAO,iBAAiB,CAAY,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IAC7E,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,IAA4B,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,yBAAyB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC/F,OAAO,iBAAiB,CAAgB,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,IAAY,EAAqB,EAAE;QAC5D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,2BAA2B,EAAE;YAC3E,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;SAC/B,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAU,QAAQ,EAAE,wBAAwB,CAAC,CAAC;QACrE,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,+BAA+B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1G,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAA8B,aAAa,EAAE,iCAAiC,CAAC,CAAC;QACpH,OAAO,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,KAAK,EAAE,eAAuB,EAAE,EAAE;QACnD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,kBAAkB,EAAE;YAClE,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,CAAC;SAC5D,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAU,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACtE,CAAC,CAAC;IAEF,MAAM,mBAAmB,GAAG,KAAK,IAAuB,EAAE;QACxD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,+BAA+B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACrG,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAA8B,QAAQ,EAAE,iCAAiC,CAAC,CAAC;QAC/G,OAAO,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IACjC,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,IAA4B,EAAE;QACtD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,kBAAkB,CAAC,CAAC;QACpE,OAAO,iBAAiB,CAAgB,QAAQ,EAAE,yBAAyB,CAAC,CAAC;IAC/E,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,EAAE,IAAY,EAAiB,EAAE;QAC5D,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,gCAAgC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtG,MAAM,KAAK,GAAG,MAAM,iBAAiB,CACnC,QAAQ,EACR,2CAA2C,CAC5C,CAAC;QACF,MAAM,OAAO,GAAG;YACd,GAAG,KAAK,CAAC,OAAO;YAChB,SAAS,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,SAA8B,CAAC;YAC1E,IAAI,EAAE;gBACJ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI;gBACrB,EAAE,EAAE,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAuB,CAAC;aAClE;YACD,kBAAkB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBAC1E,GAAG,IAAI;gBACP,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAuB,CAAC;aACpD,CAAC,CAAC;SACJ,CAAC;QACF,MAAM,UAAU,GAAG,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAA+B,CAAC;QAC9G,IAAI,CAAC,UAAU,EAAE,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACvF,MAAM,mBAAmB,GAAG,UAAU,CAAC,QAA4C,CAAC;QACpF,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,gDAAgD,KAAK,CAAC,UAAU,EAAE,EAAE;YACrH,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,UAAU,CAAC,EAAE;gBACjB,KAAK,EAAE,iBAAiB,CAAC,UAAU,CAAC,KAAK,CAAC;gBAC1C,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,IAAI;gBACJ,QAAQ,EAAE;oBACR,cAAc,EAAE,iBAAiB,CAAC,mBAAmB,CAAC,cAAc,CAAC;oBACrE,iBAAiB,EAAE,iBAAiB,CAAC,mBAAmB,CAAC,iBAAiB,CAAC;oBAC3E,UAAU,EAAE,OAAO,mBAAmB,CAAC,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC,mBAAmB,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE;iBAC/G;aACF,CAAC;SACH,CAAC,CAAC;QACH,MAAM,iBAAiB,CAAU,WAAW,EAAE,uCAAuC,CAAC,CAAC;IACzF,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,EAAU,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,oBAAoB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChG,MAAM,iBAAiB,CAAU,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IACzE,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,IAA4B,EAAE;QACtD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,uBAAuB,CAAC,CAAC;QACzE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAgB,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAC7F,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9G,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,IAA0B,EAAE;QACzD,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,sBAAsB,CAAC,CAAC;QACxE,OAAO,iBAAiB,CAAc,QAAQ,EAAE,gCAAgC,CAAC,CAAC;IACpF,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,KAAK,EAAE,EAAU,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,MAAM,CAAC,MAAM,yBAAyB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrG,MAAM,iBAAiB,CAAU,QAAQ,EAAE,0BAA0B,CAAC,CAAC;IACzE,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;QACN,WAAW;QACX,cAAc;QACd,eAAe;QACf,cAAc,EAAE,WAAW;QAC3B,WAAW;QACX,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3C,OAAO,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,cAAc,EAAE,CAAC;QAC9D,YAAY;QACZ,KAAK;QACL,MAAM;QACN,mBAAmB;QACnB,oBAAoB;QACpB,sBAAsB;QACtB,gBAAgB;QAChB,kBAAkB;QAClB,QAAQ;QACR,iBAAiB;QACjB,SAAS;QACT,gBAAgB;QAChB,aAAa;QACb,cAAc;QACd,kBAAkB;QAClB,kBAAkB;QAClB,YAAY;QACZ,SAAS;QACT,WAAW;QACX,UAAU;QACV,mBAAmB;QACnB,YAAY;QACZ,eAAe;QACf,aAAa;QACb,YAAY;QACZ,iBAAiB;QACjB,aAAa;KACd,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@gosso/client",
+  "version": "0.1.0",
+  "description": "Browser SDK for Gosso OAuth/OIDC SPA clients.",
+  "type": "module",
+  "license": "MIT",
+  "author": "gosso contributors",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/rushairer/gosso-client.git"
+  },
+  "bugs": {
+    "url": "https://github.com/rushairer/gosso-client/issues"
+  },
+  "homepage": "https://github.com/rushairer/gosso-client#readme",
+  "keywords": [
+    "gosso",
+    "oidc",
+    "oauth2",
+    "pkce",
+    "webauthn",
+    "passkeys",
+    "sso",
+    "spa"
+  ],
+  "sideEffects": false,
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json",
+    "test": "vitest run",
+    "prepack": "npm run build",
+    "prepublishOnly": "npm run typecheck && npm test && npm run build"
+  },
+  "devDependencies": {
+    "jsdom": "^29.1.1",
+    "typescript": "~6.0.2",
+    "vitest": "^4.1.9"
+  },
+  "engines": {
+    "node": ">=20"
+  }
+}