npm - @inrupt/solid-client-authn-browser - Versions diffs - 1.11.9-alpha.1 → 1.11.9-alpha.4 - Mend

@inrupt/solid-client-authn-browser 1.11.9-alpha.1 → 1.11.9-alpha.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (262) hide show

package/dist/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAqBA,qCAAqD;AAA5C,kGAAA,OAAO,OAAA;AAEhB,+CAAyE;AAAhE,uIAAA,uCAAuC,OAAA;AAEhD,mDAAiC;AAIjC,2EAOyC;AAHvC,8HAAA,mBAAmB,OAAA;AACnB,6HAAA,kBAAkB,OAAA;AAClB,0HAAA,eAAe,OAAA"}
1	+ {"version":3,"file":"index.js","sources":["../src/storage/StorageUtility.ts","../src/ClientAuthentication.ts","../src/login/oidc/OidcLoginHandler.ts","../src/login/oidc/oidcHandlers/AuthorizationCodeWithPkceOidcHandler.ts","../src/util/urlPath.ts","../src/login/oidc/IssuerConfigFetcher.ts","../src/sessionInfo/SessionInfoManager.ts","../src/login/oidc/redirectHandler/FallbackRedirectHandler.ts","../src/logout/GeneralLogoutHandler.ts","../src/login/oidc/redirectHandler/AuthCodeRedirectHandler.ts","../src/login/oidc/redirectHandler/AggregateRedirectHandler.ts","../src/storage/BrowserStorage.ts","../src/iframe.ts","../src/login/oidc/Redirector.ts","../src/login/oidc/ClientRegistrar.ts","../src/login/oidc/redirectHandler/ErrorOidcHandler.ts","../src/login/oidc/refresh/TokenRefresher.ts","../src/dependencies.ts","../src/constant.ts","../src/Session.ts","../src/defaultSession.ts"],"sourcesContent":["/\n Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\n/\n A helper class that will validate items taken from local storage\n /\nimport { IStorage, StorageUtility } from \"@inrupt/solid-client-authn-core\";\n\n/\n This class in a no-value-added extension of StorageUtility from the core module.\n * The reason it has to be declared is for TSyringe to find the decorators in the\n * same modules as where the dependency container is declared (in this case,\n * the browser module, with the dependancy container in dependencies.ts).\n * @hidden\n /\nexport default class StorageUtilityBrowser extends StorageUtility {\n constructor(secureStorage: IStorage, insecureStorage: IStorage) {\n super(secureStorage, insecureStorage);\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\nimport {\n ILoginHandler,\n ILogoutHandler,\n IRedirectHandler,\n ISessionInfo,\n ISessionInfoManager,\n IIssuerConfigFetcher,\n ISessionInternalInfo,\n ILoginOptions,\n EVENTS,\n} from \"@inrupt/solid-client-authn-core\";\nimport { removeOidcQueryParam } from \"@inrupt/oidc-client-ext\";\nimport { EventEmitter } from \"events\";\n\n// By only referring to `window` at runtime, apps that do server-side rendering\n// won't run into errors when rendering code that instantiates a\n// ClientAuthentication:\nconst globalFetch: typeof window.fetch = (request, init) =>\n window.fetch(request, init);\n\n/\n @hidden\n /\nexport default class ClientAuthentication {\n constructor(\n private loginHandler: ILoginHandler,\n private redirectHandler: IRedirectHandler,\n private logoutHandler: ILogoutHandler,\n private sessionInfoManager: ISessionInfoManager,\n private issuerConfigFetcher: IIssuerConfigFetcher\n ) {}\n\n // Define these functions as properties so that they don't get accidentally re-bound.\n // Isn't Javascript fun?\n login = async (\n options: ILoginOptions,\n eventEmitter: EventEmitter\n ): Promise<void> => {\n // In order to get a clean start, make sure that the session is logged out\n // on login.\n // But we may want to preserve our client application info, particularly if\n // we used Dynamic Client Registration to register (since we don't\n // necessarily want the user to have to register this app each time they\n // login).\n await this.sessionInfoManager.clear(options.sessionId);\n\n // In the case of the user hitting the 'back' button in their browser, they\n // could return to a previous redirect URL that contains OIDC params that\n // are now longer valid - so just to be safe, strip relevant params now.\n const redirectUrl = removeOidcQueryParam(\n options.redirectUrl ?? window.location.href\n );\n\n await this.loginHandler.handle({\n ...options,\n redirectUrl,\n // If no clientName is provided, the clientId may be used instead.\n clientName: options.clientName ?? options.clientId,\n eventEmitter,\n });\n };\n\n // By default, our fetch() resolves to the environment fetch() function.\n fetch = globalFetch;\n\n logout = async (sessionId: string): Promise<void> => {\n await this.logoutHandler.handle(sessionId);\n\n // Restore our fetch() function back to the environment fetch(), effectively\n // leaving us with un-authenticated fetches from now on.\n this.fetch = globalFetch;\n };\n\n getSessionInfo = async (\n sessionId: string\n ): Promise<(ISessionInfo & ISessionInternalInfo) \| undefined> => {\n // TODO complete\n return this.sessionInfoManager.get(sessionId);\n };\n\n getAllSessionInfo = async (): Promise<ISessionInfo[]> => {\n return this.sessionInfoManager.getAll();\n };\n\n // Collects session information from storage, and returns them. Returns null\n // if the expected information cannot be found.\n // Note that the ID token is not stored, which means the session information\n // cannot be validated at this point.\n validateCurrentSession = async (\n currentSessionId: string\n ): Promise<(ISessionInfo & ISessionInternalInfo) \| null> => {\n const sessionInfo = await this.sessionInfoManager.get(currentSessionId);\n if (\n sessionInfo === undefined \|\|\n sessionInfo.clientAppId === undefined \|\|\n sessionInfo.issuer === undefined\n ) {\n return null;\n }\n return sessionInfo;\n };\n\n handleIncomingRedirect = async (\n url: string,\n eventEmitter: EventEmitter\n ): Promise<ISessionInfo \| undefined> => {\n try {\n const redirectInfo = await this.redirectHandler.handle(url, eventEmitter);\n // The `FallbackRedirectHandler` directly returns the global `fetch` for\n // his value, so we should ensure it's bound to `window` rather than to\n // ClientAuthentication, to avoid the following error:\n // > 'fetch' called on an object that does not implement interface Window.\n this.fetch = redirectInfo.fetch.bind(window);\n\n // Strip the oauth params:\n this.cleanUrlAfterRedirect(url);\n\n return {\n isLoggedIn: redirectInfo.isLoggedIn,\n webId: redirectInfo.webId,\n sessionId: redirectInfo.sessionId,\n expirationDate: redirectInfo.expirationDate,\n };\n } catch (err) {\n // Strip the oauth params:\n this.cleanUrlAfterRedirect(url);\n\n // FIXME: EVENTS.ERROR should be errorCode, errorDescription\n //\n // I'm not sure if \"redirect\" is a good error code, and in theory `err`\n // maybe an Error object and not a string; Maybe we want to just hardcode\n // a description instead?\n eventEmitter.emit(EVENTS.ERROR, \"redirect\", err);\n }\n };\n\n private cleanUrlAfterRedirect(url: string): void {\n const cleanedUpUrl = new URL(url);\n cleanedUpUrl.searchParams.delete(\"state\");\n // For auth code flow\n cleanedUpUrl.searchParams.delete(\"code\");\n // For implicit flow\n cleanedUpUrl.searchParams.delete(\"id_token\");\n cleanedUpUrl.searchParams.delete(\"access_token\");\n // For login error\n cleanedUpUrl.searchParams.delete(\"error\");\n cleanedUpUrl.searchParams.delete(\"error_description\");\n\n // Remove OAuth-specific query params (since the login flow finishes with\n // the browser being redirected back with OAuth2 query params (e.g. for\n // 'code' and 'state'), and so if the user simply refreshes this page our\n // authentication library will be called again with what are now invalid\n // query parameters!).\n window.history.replaceState(null, \"\", cleanedUpUrl.toString());\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\n/\n Handles Common Oidc login functions (Like fetching the configuration)\n /\n\nimport {\n IClientRegistrar,\n IIssuerConfig,\n IIssuerConfigFetcher,\n ILoginOptions,\n ILoginHandler,\n IOidcHandler,\n IOidcOptions,\n IStorageUtility,\n ConfigurationError,\n LoginResult,\n handleRegistration,\n} from \"@inrupt/solid-client-authn-core\";\n\nfunction hasIssuer(\n options: ILoginOptions\n): options is ILoginOptions & { oidcIssuer: string } {\n return typeof options.oidcIssuer === \"string\";\n}\n\nfunction hasRedirectUrl(\n options: ILoginOptions\n): options is ILoginOptions & { redirectUrl: string } {\n return typeof options.redirectUrl === \"string\";\n}\n\n/\n @hidden\n /\nexport default class OidcLoginHandler implements ILoginHandler {\n constructor(\n private storageUtility: IStorageUtility,\n private oidcHandler: IOidcHandler,\n private issuerConfigFetcher: IIssuerConfigFetcher,\n private clientRegistrar: IClientRegistrar\n ) {}\n\n async canHandle(options: ILoginOptions): Promise<boolean> {\n return hasIssuer(options) && hasRedirectUrl(options);\n }\n\n async handle(options: ILoginOptions): Promise<LoginResult> {\n if (!hasIssuer(options)) {\n throw new ConfigurationError(\n `OidcLoginHandler requires an OIDC issuer: missing property 'oidcIssuer' in ${JSON.stringify(\n options\n )}`\n );\n }\n if (!hasRedirectUrl(options)) {\n throw new ConfigurationError(\n `OidcLoginHandler requires a redirect URL: missing property 'redirectUrl' in ${JSON.stringify(\n options\n )}`\n );\n }\n\n // Fetch issuer config.\n const issuerConfig: IIssuerConfig =\n await this.issuerConfigFetcher.fetchConfig(options.oidcIssuer);\n\n const clientRegistration = await handleRegistration(\n options,\n issuerConfig,\n this.storageUtility,\n this.clientRegistrar\n );\n\n // Construct OIDC Options\n const OidcOptions: IOidcOptions = {\n // Note that here, the issuer is not the one from the received options, but\n // from the issuer's config. This enforces the canonical URL is used and stored,\n // which is also the one present in the ID token, so storing a technically\n // valid, but different issuer URL (e.g. using a trailing slash or not) now\n // could prevent from validating the ID token later.\n issuer: issuerConfig.issuer,\n // TODO: differentiate if DPoP should be true\n dpop: options.tokenType.toLowerCase() === \"dpop\",\n ...options,\n issuerConfiguration: issuerConfig,\n client: clientRegistration,\n };\n\n // Call proper OIDC Handler\n return this.oidcHandler.handle(OidcOptions);\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\n/\n Handler for the Authorization Code with PKCE Flow\n /\nimport {\n IOidcHandler,\n IOidcOptions,\n IRedirector,\n IStorageUtility,\n LoginResult,\n} from \"@inrupt/solid-client-authn-core\";\nimport { OidcClient } from \"@inrupt/oidc-client-ext\";\n\n/\n @hidden\n * Authorization code flow spec: https://openid.net/specs/openid-connect-core-1_0.html#CodeFlowAuth\n * PKCE: https://tools.ietf.org/html/rfc7636\n /\nexport default class AuthorizationCodeWithPkceOidcHandler\n implements IOidcHandler\n{\n constructor(\n private storageUtility: IStorageUtility,\n private redirector: IRedirector\n ) {}\n\n async canHandle(oidcLoginOptions: IOidcOptions): Promise<boolean> {\n return !!(\n oidcLoginOptions.issuerConfiguration.grantTypesSupported &&\n oidcLoginOptions.issuerConfiguration.grantTypesSupported.indexOf(\n \"authorization_code\"\n ) > -1\n );\n }\n\n async handle(oidcLoginOptions: IOidcOptions): Promise<LoginResult> {\n / eslint-disable camelcase /\n const oidcOptions = {\n authority: oidcLoginOptions.issuer.toString(),\n client_id: oidcLoginOptions.client.clientId,\n client_secret: oidcLoginOptions.client.clientSecret,\n redirect_uri: oidcLoginOptions.redirectUrl.toString(),\n post_logout_redirect_uri: oidcLoginOptions.redirectUrl.toString(),\n response_type: \"code\",\n // The offline_access scope requests that a refresh token be returned.\n // The webid scope is required as per https://solid.github.io/solid-oidc/#webid-scope\n scope: \"openid offline_access webid\",\n filterProtocolClaims: true,\n // The userinfo endpoint on NSS fails, so disable this for now\n // Note that in Solid, information should be retrieved from the\n // profile referenced by the WebId.\n loadUserInfo: false,\n code_verifier: true,\n prompt: oidcLoginOptions.prompt ?? \"consent\",\n };\n / eslint-enable camelcase /\n\n const oidcClientLibrary = new OidcClient(oidcOptions);\n\n const { redirector } = this;\n const storage = this.storageUtility;\n\n try {\n const signingRequest = await oidcClientLibrary.createSigninRequest();\n await Promise.all([\n // We use the OAuth 'state' value (which should be crypto-random) as\n // the key in our storage to store our actual SessionID. We do this\n // 'cos we'll need to lookup our session information again when the\n // browser is redirected back to us (i.e. the OAuth client\n // application) from the Authorization Server.\n // We don't want to use our session ID as the OAuth 'state' value, as\n // that session ID can be any developer-specified value, and therefore\n // may not be appropriate (since the OAuth 'state' value should really\n // be an unguessable crypto-random value).\n // eslint-disable-next-line no-underscore-dangle\n storage.setForUser(signingRequest.state._id, {\n sessionId: oidcLoginOptions.sessionId,\n }),\n\n // Store our login-process state using the session ID as the key.\n // Strictly speaking, this indirection from our OAuth state value to\n // our session ID is unnecessary, but it provides a slightly cleaner\n // separation of concerns.\n storage.setForUser(oidcLoginOptions.sessionId, {\n // eslint-disable-next-line no-underscore-dangle\n codeVerifier: signingRequest.state._code_verifier,\n issuer: oidcLoginOptions.issuer.toString(),\n // The redirect URL is read after redirect, so it must be stored now.\n redirectUrl: oidcLoginOptions.redirectUrl,\n dpop: oidcLoginOptions.dpop ? \"true\" : \"false\",\n }),\n ]);\n\n redirector.redirect(signingRequest.url.toString(), {\n handleRedirect: oidcLoginOptions.handleRedirect,\n redirectInIframe: oidcLoginOptions.inIframe,\n });\n } catch (err: unknown) {\n // eslint-disable-next-line no-console\n console.error(err);\n }\n\n // The login is only completed AFTER redirect, so nothing to return here.\n return undefined;\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\n/\n Utility that appends the specified value to end of the specified URL's path.\n \n @param url the URL to whose path we append the specified value\n * @param append the value to append to the URL's path\n /\nexport function appendToUrlPathname(url: string, append: string): string {\n const parsedUrl = new URL(url);\n const path = parsedUrl.pathname;\n parsedUrl.pathname = `${path}${path.endsWith(\"/\") ? \"\" : \"/\"}${\n append.startsWith(\"/\") ? append.substring(1) : append\n }`;\n\n return parsedUrl.toString();\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\n/\n Responsible for fetching an IDP configuration\n /\nimport {\n IIssuerConfig,\n IIssuerConfigFetcher,\n IStorageUtility,\n ConfigurationError,\n} from \"@inrupt/solid-client-authn-core\";\nimport { appendToUrlPathname } from \"../../util/urlPath\";\n\nexport const WELL_KNOWN_OPENID_CONFIG = \".well-known/openid-configuration\";\n\n/ eslint-disable camelcase /\nconst issuerConfigKeyMap: Record<\n string,\n { toKey: string; convertToUrl?: boolean }\n> = {\n issuer: {\n toKey: \"issuer\",\n convertToUrl: true,\n },\n authorization_endpoint: {\n toKey: \"authorizationEndpoint\",\n convertToUrl: true,\n },\n token_endpoint: {\n toKey: \"tokenEndpoint\",\n convertToUrl: true,\n },\n userinfo_endpoint: {\n toKey: \"userinfoEndpoint\",\n convertToUrl: true,\n },\n jwks_uri: {\n toKey: \"jwksUri\",\n convertToUrl: true,\n },\n registration_endpoint: {\n toKey: \"registrationEndpoint\",\n convertToUrl: true,\n },\n scopes_supported: { toKey: \"scopesSupported\" },\n response_types_supported: { toKey: \"responseTypesSupported\" },\n response_modes_supported: { toKey: \"responseModesSupported\" },\n grant_types_supported: { toKey: \"grantTypesSupported\" },\n acr_values_supported: { toKey: \"acrValuesSupported\" },\n subject_types_supported: { toKey: \"subjectTypesSupported\" },\n id_token_signing_alg_values_supported: {\n toKey: \"idTokenSigningAlgValuesSupported\",\n },\n id_token_encryption_alg_values_supported: {\n toKey: \"idTokenEncryptionAlgValuesSupported\",\n },\n id_token_encryption_enc_values_supported: {\n toKey: \"idTokenEncryptionEncValuesSupported\",\n },\n userinfo_signing_alg_values_supported: {\n toKey: \"userinfoSigningAlgValuesSupported\",\n },\n userinfo_encryption_alg_values_supported: {\n toKey: \"userinfoEncryptionAlgValuesSupported\",\n },\n userinfo_encryption_enc_values_supported: {\n toKey: \"userinfoEncryptionEncValuesSupported\",\n },\n request_object_signing_alg_values_supported: {\n toKey: \"requestObjectSigningAlgValuesSupported\",\n },\n request_object_encryption_alg_values_supported: {\n toKey: \"requestObjectEncryptionAlgValuesSupported\",\n },\n request_object_encryption_enc_values_supported: {\n toKey: \"requestObjectEncryptionEncValuesSupported\",\n },\n token_endpoint_auth_methods_supported: {\n toKey: \"tokenEndpointAuthMethodsSupported\",\n },\n token_endpoint_auth_signing_alg_values_supported: {\n toKey: \"tokenEndpointAuthSigningAlgValuesSupported\",\n },\n display_values_supported: { toKey: \"displayValuesSupported\" },\n claim_types_supported: { toKey: \"claimTypesSupported\" },\n claims_supported: { toKey: \"claimsSupported\" },\n service_documentation: { toKey: \"serviceDocumentation\" },\n claims_locales_supported: { toKey: \"claimsLocalesSupported\" },\n ui_locales_supported: { toKey: \"uiLocalesSupported\" },\n claims_parameter_supported: { toKey: \"claimsParameterSupported\" },\n request_parameter_supported: { toKey: \"requestParameterSupported\" },\n request_uri_parameter_supported: { toKey: \"requestUriParameterSupported\" },\n require_request_uri_registration: { toKey: \"requireRequestUriRegistration\" },\n op_policy_uri: {\n toKey: \"opPolicyUri\",\n convertToUrl: true,\n },\n op_tos_uri: {\n toKey: \"opTosUri\",\n convertToUrl: true,\n },\n};\n/ eslint-enable camelcase /\n\nfunction processConfig(\n config: Record<string, string \| string[]>\n): IIssuerConfig {\n const parsedConfig: Record<string, string \| string[]> = {};\n Object.keys(config).forEach((key) => {\n if (issuerConfigKeyMap[key]) {\n // TODO: PMcB55: Validate URL if \"issuerConfigKeyMap[key].convertToUrl\"\n // if (issuerConfigKeyMap[key].convertToUrl) {\n // validateUrl(config[key]);\n // }\n parsedConfig[issuerConfigKeyMap[key].toKey] = config[key];\n }\n });\n if (!Array.isArray(parsedConfig.scopesSupported)) {\n parsedConfig.scopesSupported = [\"openid\"];\n }\n return parsedConfig as unknown as IIssuerConfig;\n}\n\n/\n @hidden\n /\nexport default class IssuerConfigFetcher implements IIssuerConfigFetcher {\n constructor(private storageUtility: IStorageUtility) {}\n\n // This method needs no state (so can be static), and can be exposed to allow\n // callers to know where this implementation puts state it needs.\n public static getLocalStorageKey(issuer: string): string {\n return `issuerConfig:${issuer}`;\n }\n\n async fetchConfig(issuer: string): Promise<IIssuerConfig> {\n let issuerConfig: IIssuerConfig;\n\n const openIdConfigUrl = appendToUrlPathname(\n issuer,\n WELL_KNOWN_OPENID_CONFIG\n );\n const issuerConfigRequestBody = await window.fetch(openIdConfigUrl);\n // Check the validity of the fetched config\n try {\n issuerConfig = processConfig(await issuerConfigRequestBody.json());\n } catch (err) {\n throw new ConfigurationError(\n `[${issuer.toString()}] has an invalid configuration: ${\n (err as { message: string }).message\n }`\n );\n }\n\n // Update store with fetched config\n await this.storageUtility.set(\n IssuerConfigFetcher.getLocalStorageKey(issuer),\n JSON.stringify(issuerConfig)\n );\n\n return issuerConfig;\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\nimport {\n ISessionInfo,\n ISessionInfoManager,\n ISessionInternalInfo,\n ISessionInfoManagerOptions,\n IStorageUtility,\n isSupportedTokenType,\n} from \"@inrupt/solid-client-authn-core\";\nimport { v4 } from \"uuid\";\nimport { clearOidcPersistentStorage } from \"@inrupt/oidc-client-ext\";\n\nexport function getUnauthenticatedSession(): ISessionInfo & {\n fetch: typeof fetch;\n} {\n return {\n isLoggedIn: false,\n sessionId: v4(),\n fetch,\n };\n}\n\n/\n @param sessionId\n * @param storage\n * @hidden\n /\nexport async function clear(\n sessionId: string,\n storage: IStorageUtility\n): Promise<void> {\n await Promise.all([\n storage.deleteAllUserData(sessionId, { secure: false }),\n storage.deleteAllUserData(sessionId, { secure: true }),\n // FIXME: This is needed until the DPoP key is stored safely\n storage.delete(\"clientKey\", { secure: false }),\n ]);\n await clearOidcPersistentStorage();\n}\n\n/\n @hidden\n /\nexport class SessionInfoManager implements ISessionInfoManager {\n constructor(private storageUtility: IStorageUtility) {}\n\n // eslint-disable-next-line class-methods-use-this\n update(\n _sessionId: string,\n _options: ISessionInfoManagerOptions\n ): Promise<void> {\n // const localUserId: string = options.localUserId \|\| this.uuidGenerator.v4();\n // if (options.loggedIn) {\n // return {\n // sessionId,\n // loggedIn: true,\n // webId: options.webId as string,\n // neededAction: options.neededAction \|\| { actionType: \"inaction\" },\n // state: options.state,\n // logout: async (): Promise<void> => {\n // // TODO: handle if webid isn't here\n // return this.logoutHandler.handle(localUserId);\n // },\n // fetch: (url: RequestInfo, init?: RequestInit): Promise<Response> => {\n // // TODO: handle if webid isn't here\n // return this.authenticatedFetcher.handle(\n // {\n // localUserId,\n // type: \"dpop\"\n // },\n // url,\n // init\n // );\n // }\n // };\n // } else {\n // return {\n // localUserId,\n // loggedIn: false,\n // neededAction: options.neededAction \|\| { actionType: \"inaction\" }\n // };\n // }\n throw new Error(\"Not Implemented\");\n }\n\n async get(\n sessionId: string\n ): Promise<(ISessionInfo & ISessionInternalInfo) \| undefined> {\n const isLoggedIn = await this.storageUtility.getForUser(\n sessionId,\n \"isLoggedIn\",\n {\n secure: true,\n }\n );\n\n const webId = await this.storageUtility.getForUser(sessionId, \"webId\", {\n secure: true,\n });\n\n const clientId = await this.storageUtility.getForUser(\n sessionId,\n \"clientId\",\n {\n secure: false,\n }\n );\n\n const clientSecret = await this.storageUtility.getForUser(\n sessionId,\n \"clientSecret\",\n {\n secure: false,\n }\n );\n\n const redirectUrl = await this.storageUtility.getForUser(\n sessionId,\n \"redirectUrl\",\n {\n secure: false,\n }\n );\n\n const refreshToken = await this.storageUtility.getForUser(\n sessionId,\n \"refreshToken\",\n {\n secure: true,\n }\n );\n\n const issuer = await this.storageUtility.getForUser(sessionId, \"issuer\", {\n secure: false,\n });\n\n const tokenType =\n (await this.storageUtility.getForUser(sessionId, \"tokenType\", {\n secure: false,\n })) ?? \"DPoP\";\n\n if (!isSupportedTokenType(tokenType)) {\n throw new Error(`Tokens of type [${tokenType}] are not supported.`);\n }\n\n if (\n clientId === undefined &&\n isLoggedIn === undefined &&\n webId === undefined &&\n refreshToken === undefined\n ) {\n return undefined;\n }\n\n return {\n sessionId,\n webId,\n isLoggedIn: isLoggedIn === \"true\",\n redirectUrl,\n refreshToken,\n issuer,\n clientAppId: clientId,\n clientAppSecret: clientSecret,\n tokenType,\n };\n }\n\n // eslint-disable-next-line class-methods-use-this\n async getAll(): Promise<(ISessionInfo & ISessionInternalInfo)[]> {\n throw new Error(\"Not implemented\");\n }\n\n /\n This function removes all session-related information from storage.\n * @param sessionId the session identifier\n * @param storage the storage where session info is stored\n * @hidden\n /\n async clear(sessionId: string): Promise<void> {\n return clear(sessionId, this.storageUtility);\n }\n\n /\n Registers a new session, so that its ID can be retrieved.\n * @param sessionId\n /\n async register(_sessionId: string): Promise<void> {\n throw new Error(\"Not implemented\");\n }\n\n /\n Returns all the registered session IDs. Differs from getAll, which also\n * returns additional session information.\n /\n async getRegisteredSessionIdAll(): Promise<string[]> {\n throw new Error(\"Not implemented\");\n }\n\n /\n Deletes all information about all sessions, including their registrations.\n /\n async clearAll(): Promise<void> {\n throw new Error(\"Not implemented\");\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\nimport {\n IRedirectHandler,\n ISessionInfo,\n} from \"@inrupt/solid-client-authn-core\";\n\nimport { getUnauthenticatedSession } from \"../../../sessionInfo/SessionInfoManager\";\n\n/\n This class handles redirect IRIs without any query params, and returns an unauthenticated\n * session. It serves as a fallback so that consuming libraries don't have to test\n * for the query params themselves, and can always try to use them as a redirect IRI.\n * @hidden\n /\nexport class FallbackRedirectHandler implements IRedirectHandler {\n async canHandle(redirectUrl: string): Promise<boolean> {\n try {\n // The next URL object is built for validating it.\n // eslint-disable-next-line no-new\n new URL(redirectUrl);\n return true;\n } catch (e) {\n throw new Error(\n `[${redirectUrl}] is not a valid URL, and cannot be used as a redirect URL: ${e}`\n );\n }\n }\n\n async handle(\n // The argument is ignored, but must be present to implement the interface\n _redirectUrl: string\n ): Promise<ISessionInfo & { fetch: typeof fetch }> {\n return getUnauthenticatedSession();\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\nimport {\n ILogoutHandler,\n ISessionInfoManager,\n} from \"@inrupt/solid-client-authn-core\";\n\n/\n @hidden\n /\nexport default class GeneralLogoutHandler implements ILogoutHandler {\n constructor(private sessionInfoManager: ISessionInfoManager) {}\n\n async canHandle(): Promise<boolean> {\n return true;\n }\n\n async handle(userId: string): Promise<void> {\n await this.sessionInfoManager.clear(userId);\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\nimport {\n buildAuthenticatedFetch,\n IClient,\n IClientRegistrar,\n IIssuerConfigFetcher,\n IRedirectHandler,\n ISessionInfo,\n ISessionInfoManager,\n IStorageUtility,\n ITokenRefresher,\n loadOidcContextFromStorage,\n RefreshOptions,\n} from \"@inrupt/solid-client-authn-core\";\nimport {\n getDpopToken,\n getBearerToken,\n CodeExchangeResult,\n} from \"@inrupt/oidc-client-ext\";\nimport { EventEmitter } from \"events\";\n\n/\n @hidden\n /\nexport class AuthCodeRedirectHandler implements IRedirectHandler {\n constructor(\n private storageUtility: IStorageUtility,\n private sessionInfoManager: ISessionInfoManager,\n private issuerConfigFetcher: IIssuerConfigFetcher,\n private clientRegistrar: IClientRegistrar,\n private tokerRefresher: ITokenRefresher\n ) {}\n\n async canHandle(redirectUrl: string): Promise<boolean> {\n try {\n const myUrl = new URL(redirectUrl);\n return (\n myUrl.searchParams.get(\"code\") !== null &&\n myUrl.searchParams.get(\"state\") !== null\n );\n } catch (e) {\n throw new Error(\n `[${redirectUrl}] is not a valid URL, and cannot be used as a redirect URL: ${e}`\n );\n }\n }\n\n async handle(\n redirectUrl: string,\n eventEmitter?: EventEmitter\n ): Promise<ISessionInfo & { fetch: typeof fetch }> {\n if (!(await this.canHandle(redirectUrl))) {\n throw new Error(\n `AuthCodeRedirectHandler cannot handle [${redirectUrl}]: it is missing one of [code, state].`\n );\n }\n\n const url = new URL(redirectUrl);\n const oauthState = url.searchParams.get(\"state\") as string;\n\n const storedSessionId = (await this.storageUtility.getForUser(\n oauthState,\n \"sessionId\",\n {\n errorIfNull: true,\n }\n )) as string;\n\n const {\n issuerConfig,\n codeVerifier,\n redirectUrl: storedRedirectIri,\n dpop: isDpop,\n } = await loadOidcContextFromStorage(\n storedSessionId,\n this.storageUtility,\n this.issuerConfigFetcher\n );\n\n if (codeVerifier === undefined) {\n throw new Error(\n `The code verifier for session ${storedSessionId} is missing from storage.`\n );\n }\n\n if (storedRedirectIri === undefined) {\n throw new Error(\n `The redirect URL for session ${storedSessionId} is missing from storage.`\n );\n }\n\n const client: IClient = await this.clientRegistrar.getClient(\n { sessionId: storedSessionId },\n issuerConfig\n );\n\n let tokens: CodeExchangeResult;\n const tokenCreatedAt = Date.now();\n\n if (isDpop) {\n tokens = await getDpopToken(issuerConfig, client, {\n grantType: \"authorization_code\",\n // We rely on our 'canHandle' function checking that the OAuth 'code'\n // parameter is present in our query string.\n code: url.searchParams.get(\"code\") as string,\n codeVerifier,\n redirectUrl: storedRedirectIri,\n });\n\n // Delete oidc-client-specific session information from storage. This is\n // done automatically when retrieving a bearer token, but since the DPoP\n // binding uses our custom code, this needs to be done manually.\n window.localStorage.removeItem(`oidc.${oauthState}`);\n } else {\n tokens = await getBearerToken(url.toString());\n }\n\n let refreshOptions: RefreshOptions \| undefined;\n if (tokens.refreshToken !== undefined) {\n refreshOptions = {\n sessionId: storedSessionId,\n refreshToken: tokens.refreshToken,\n tokenRefresher: this.tokerRefresher,\n };\n }\n\n const authFetch = await buildAuthenticatedFetch(fetch, tokens.accessToken, {\n dpopKey: tokens.dpopKey,\n refreshOptions,\n eventEmitter,\n expiresIn: tokens.expiresIn,\n });\n\n await this.storageUtility.setForUser(\n storedSessionId,\n {\n webId: tokens.webId,\n isLoggedIn: \"true\",\n },\n { secure: true }\n );\n // Clear the code query param from the redirect URL before storing it, but\n // preserve any state that my have been provided by the client and returned\n // by the IdP.\n url.searchParams.delete(\"code\");\n await this.storageUtility.setForUser(\n storedSessionId,\n {\n redirectUrl: url.toString(),\n },\n {\n secure: false,\n }\n );\n\n const sessionInfo = await this.sessionInfoManager.get(storedSessionId);\n if (!sessionInfo) {\n throw new Error(`Could not retrieve session: [${storedSessionId}].`);\n }\n\n return Object.assign(sessionInfo, {\n fetch: authFetch,\n expirationDate:\n typeof tokens.expiresIn === \"number\"\n ? tokenCreatedAt + tokens.expiresIn 1000\n : null,\n });\n }\n}\n","/\n Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\n/\n Responsible for selecting the correct OidcHandler to handle the provided OIDC Options\n /\nimport {\n IRedirectHandler,\n AggregateHandler,\n RedirectInput,\n RedirectResult,\n} from \"@inrupt/solid-client-authn-core\";\n\n/\n @hidden\n /\nexport default class AggregateRedirectHandler\n extends AggregateHandler<RedirectInput, RedirectResult>\n implements IRedirectHandler\n{\n constructor(redirectHandlers: IRedirectHandler[]) {\n super(redirectHandlers);\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\nimport { IStorage } from \"@inrupt/solid-client-authn-core\";\n\n/\n @hidden\n /\nexport default class BrowserStorage implements IStorage {\n get storage(): typeof window.localStorage {\n return window.localStorage;\n }\n\n async get(key: string): Promise<string \| undefined> {\n return this.storage.getItem(key) \|\| undefined;\n }\n\n async set(key: string, value: string): Promise<void> {\n this.storage.setItem(key, value);\n }\n\n async delete(key: string): Promise<void> {\n this.storage.removeItem(key);\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n// This is an internal variable used to share some state between `redirectInIframe`,\n// which initializes it, and `setupIframeListener`, which reads from it. It avoids\n// creating a DOM element with identifying attributes such as an ID which may clash\n// with some other element set up by the library user.\nlet redirectIframe: HTMLIFrameElement;\n\n// The iframe is dynamically created rather than on import,\n// to avoid accessing `window` when an app is doing server-side rendering:\nfunction getRedirectIframe(): HTMLIFrameElement {\n if (typeof redirectIframe === \"undefined\") {\n redirectIframe = window.document.createElement(\"iframe\");\n redirectIframe.setAttribute(\"hidden\", \"true\");\n redirectIframe.setAttribute(\"sandbox\", \"allow-scripts allow-same-origin\");\n }\n return redirectIframe;\n}\n\n/\n Redirects the browser to a provided IRI, but does such redirection in a child\n * iframe. This is used to have a front-channel interaction with the Solid Identity\n * Provider without having the user involved, and without refreshing the main window.\n \n @param redirectUrl The IRI to which the iframe should be redirected.\n /\nexport function redirectInIframe(redirectUrl: string): void {\n const iframe = getRedirectIframe();\n window.document.body.appendChild(iframe);\n iframe.src = redirectUrl;\n}\n\n/\n This function sets up an event listener that will receive iframe messages.\n * It is only listening to messages coming from iframes that could have been\n * opened by the library, and expects to be posted the IRI the iframe has been\n * redirected to by the Solid Identity Provider. This way, the top window can\n * perform the backchannel exchange to the token endpoint without performing\n * the front-channel redirection.\n \n @param handleIframeRedirect Redirect URL sent by the iframe\n /\nexport function setupIframeListener(\n handleIframeRedirect: (redirectUrl: string) => Promise<unknown>\n): void {\n // If an app is doing server-side rendering, setting up an iframe listener\n // is pointless (since there is no iframe, and there will be no expiring\n // session to renew) and might even throw a `window` not defined error, so\n // skip this in that case:\n / istanbul ignore if (window is always defined in tests) /\n if (typeof window === \"undefined\") {\n return;\n }\n window.addEventListener(\"message\", async (evt: MessageEvent) => {\n const iframe = getRedirectIframe();\n if (\n evt.origin === window.location.origin &&\n evt.source === iframe.contentWindow\n ) {\n if (typeof evt.data.redirectUrl === \"string\") {\n // The top-level window handles the redirect that happened in the iframe.\n await handleIframeRedirect(evt.data.redirectUrl);\n }\n }\n // Clean up the iframe from the DOM\n if (window.document.body.contains(iframe)) {\n window.document.body.removeChild(iframe);\n }\n });\n}\n\n/\n This function bubbles up the result of the front-channel interaction with\n * the authorization endpoint to the parent window.\n /\nexport function postRedirectUrlToParent(redirectUrl: string): void {\n // eslint-disable-next-line @typescript-eslint/no-non-null-assertion\n window.top!.postMessage(\n {\n redirectUrl,\n },\n window.location.origin\n );\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\nimport {\n IRedirector,\n IRedirectorOptions,\n} from \"@inrupt/solid-client-authn-core\";\nimport { redirectInIframe } from \"../../iframe\";\n\n/\n @hidden\n /\nexport default class Redirector implements IRedirector {\n redirect(redirectUrl: string, options?: IRedirectorOptions): void {\n if (options && options.handleRedirect) {\n options.handleRedirect(redirectUrl);\n } else if (options && options.redirectByReplacingState) {\n window.history.replaceState({}, \"\", redirectUrl);\n } else if (options?.redirectInIframe) {\n redirectInIframe(redirectUrl);\n } else {\n window.location.href = redirectUrl;\n }\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\nimport {\n IStorageUtility,\n IClientRegistrar,\n IIssuerConfig,\n IClient,\n IClientRegistrarOptions,\n} from \"@inrupt/solid-client-authn-core\";\nimport { registerClient } from \"@inrupt/oidc-client-ext\";\n\n/\n @hidden\n /\nexport default class ClientRegistrar implements IClientRegistrar {\n constructor(private storageUtility: IStorageUtility) {}\n\n async getClient(\n options: IClientRegistrarOptions,\n issuerConfig: IIssuerConfig\n ): Promise<IClient> {\n // If client secret and/or client id are stored in storage, use those.\n const [\n storedClientId,\n storedClientSecret,\n // storedClientName,\n ] = await Promise.all([\n this.storageUtility.getForUser(options.sessionId, \"clientId\", {\n secure: false,\n }),\n this.storageUtility.getForUser(options.sessionId, \"clientSecret\", {\n secure: false,\n }),\n // this.storageUtility.getForUser(options.sessionId, \"clientName\", {\n // // FIXME: figure out how to persist secure storage at reload\n // secure: false,\n // }),\n ]);\n if (storedClientId) {\n return {\n clientId: storedClientId,\n clientSecret: storedClientSecret,\n clientType: \"dynamic\",\n };\n }\n const extendedOptions = { ...options };\n // If registration access token is stored, use that.\n extendedOptions.registrationAccessToken =\n extendedOptions.registrationAccessToken ??\n (await this.storageUtility.getForUser(\n options.sessionId,\n \"registrationAccessToken\"\n ));\n\n try {\n const registeredClient = await registerClient(\n extendedOptions,\n issuerConfig\n );\n // Save info\n const infoToSave: Record<string, string> = {\n clientId: registeredClient.clientId,\n };\n if (registeredClient.clientSecret) {\n infoToSave.clientSecret = registeredClient.clientSecret;\n }\n if (registeredClient.idTokenSignedResponseAlg) {\n infoToSave.idTokenSignedResponseAlg =\n registeredClient.idTokenSignedResponseAlg;\n }\n await this.storageUtility.setForUser(\n extendedOptions.sessionId,\n infoToSave,\n {\n // FIXME: figure out how to persist secure storage at reload\n // Otherwise, the client info cannot be retrieved from storage, and\n // the lib tries to re-register the client on each fetch\n secure: false,\n }\n );\n return registeredClient;\n } catch (error) {\n throw new Error(`Client registration failed: [${error}]`);\n }\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\nimport {\n EVENTS,\n IRedirectHandler,\n ISessionInfo,\n} from \"@inrupt/solid-client-authn-core\";\nimport type { EventEmitter } from \"events\";\n\nimport { getUnauthenticatedSession } from \"../../../sessionInfo/SessionInfoManager\";\n\n/\n This class handles redirect IRIs without any query params, and returns an unauthenticated\n * session. It serves as a fallback so that consuming libraries don't have to test\n * for the query params themselves, and can always try to use them as a redirect IRI.\n * @hidden\n /\nexport class ErrorOidcHandler implements IRedirectHandler {\n async canHandle(redirectUrl: string): Promise<boolean> {\n try {\n // eslint-disable-next-line no-new\n return new URL(redirectUrl).searchParams.has(\"error\");\n } catch (e) {\n throw new Error(\n `[${redirectUrl}] is not a valid URL, and cannot be used as a redirect URL: ${e}`\n );\n }\n }\n\n async handle(\n redirectUrl: string,\n eventEmitter?: EventEmitter\n ): Promise<ISessionInfo & { fetch: typeof fetch }> {\n if (eventEmitter !== undefined) {\n const url = new URL(redirectUrl);\n const errorUrl = url.searchParams.get(\"error\");\n const errorDescriptionUrl = url.searchParams.get(\"error_description\");\n eventEmitter.emit(EVENTS.ERROR, errorUrl, errorDescriptionUrl);\n }\n return getUnauthenticatedSession();\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\nimport {\n IClient,\n IClientRegistrar,\n IIssuerConfigFetcher,\n IStorageUtility,\n loadOidcContextFromStorage,\n KeyPair,\n ITokenRefresher,\n TokenEndpointResponse,\n EVENTS,\n} from \"@inrupt/solid-client-authn-core\";\nimport { refresh } from \"@inrupt/oidc-client-ext\";\nimport { EventEmitter } from \"events\";\n\n// Some identifiers are not in camelcase on purpose, as they are named using the\n// official names from the OIDC/OAuth2 specifications.\n/ eslint-disable camelcase /\n\n/\n @hidden\n /\nexport default class TokenRefresher implements ITokenRefresher {\n constructor(\n private storageUtility: IStorageUtility,\n private issuerConfigFetcher: IIssuerConfigFetcher,\n private clientRegistrar: IClientRegistrar\n ) {}\n\n async refresh(\n sessionId: string,\n refreshToken?: string,\n dpopKey?: KeyPair,\n eventEmitter?: EventEmitter\n ): Promise<TokenEndpointResponse> {\n const oidcContext = await loadOidcContextFromStorage(\n sessionId,\n this.storageUtility,\n this.issuerConfigFetcher\n );\n // This should also retrieve the client from storage\n const clientInfo: IClient = await this.clientRegistrar.getClient(\n { sessionId },\n oidcContext.issuerConfig\n );\n\n if (refreshToken === undefined) {\n // TODO: in a next PR, look up storage for a refresh token\n throw new Error(\n `Session [${sessionId}] has no refresh token to allow it to refresh its access token.`\n );\n }\n\n if (oidcContext.dpop && dpopKey === undefined) {\n throw new Error(\n `For session [${sessionId}], the key bound to the DPoP access token must be provided to refresh said access token.`\n );\n }\n\n const tokenSet = await refresh(\n refreshToken,\n oidcContext.issuerConfig,\n clientInfo,\n dpopKey\n );\n\n if (tokenSet.refreshToken !== undefined) {\n eventEmitter?.emit(EVENTS.NEW_REFRESH_TOKEN, tokenSet.refreshToken);\n await this.storageUtility.setForUser(sessionId, {\n refreshToken: tokenSet.refreshToken,\n });\n }\n return tokenSet;\n }\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n * @packageDocumentation\n /\n\n/\n Top Level core document. Responsible for setting up the dependency graph\n /\nimport { IStorage, InMemoryStorage } from \"@inrupt/solid-client-authn-core\";\nimport StorageUtilityBrowser from \"./storage/StorageUtility\";\nimport ClientAuthentication from \"./ClientAuthentication\";\nimport OidcLoginHandler from \"./login/oidc/OidcLoginHandler\";\nimport AuthorizationCodeWithPkceOidcHandler from \"./login/oidc/oidcHandlers/AuthorizationCodeWithPkceOidcHandler\";\nimport IssuerConfigFetcher from \"./login/oidc/IssuerConfigFetcher\";\nimport { FallbackRedirectHandler } from \"./login/oidc/redirectHandler/FallbackRedirectHandler\";\nimport GeneralLogoutHandler from \"./logout/GeneralLogoutHandler\";\nimport { SessionInfoManager } from \"./sessionInfo/SessionInfoManager\";\nimport { AuthCodeRedirectHandler } from \"./login/oidc/redirectHandler/AuthCodeRedirectHandler\";\nimport AggregateRedirectHandler from \"./login/oidc/redirectHandler/AggregateRedirectHandler\";\nimport BrowserStorage from \"./storage/BrowserStorage\";\nimport Redirector from \"./login/oidc/Redirector\";\nimport ClientRegistrar from \"./login/oidc/ClientRegistrar\";\nimport { ErrorOidcHandler } from \"./login/oidc/redirectHandler/ErrorOidcHandler\";\nimport TokenRefresher from \"./login/oidc/refresh/TokenRefresher\";\n\n/\n \n * @param dependencies\n * @deprecated This function will be removed from the external API in an upcoming release.\n /\nexport function getClientAuthenticationWithDependencies(dependencies: {\n secureStorage?: IStorage;\n insecureStorage?: IStorage;\n}): ClientAuthentication {\n const inMemoryStorage = new InMemoryStorage();\n const secureStorage = dependencies.secureStorage \|\| inMemoryStorage;\n const insecureStorage = dependencies.insecureStorage \|\| new BrowserStorage();\n\n const storageUtility = new StorageUtilityBrowser(\n secureStorage,\n insecureStorage\n );\n\n const issuerConfigFetcher = new IssuerConfigFetcher(storageUtility);\n const clientRegistrar = new ClientRegistrar(storageUtility);\n\n const sessionInfoManager = new SessionInfoManager(storageUtility);\n\n const tokenRefresher = new TokenRefresher(\n storageUtility,\n issuerConfigFetcher,\n clientRegistrar\n );\n\n // make new handler for redirect and login\n const loginHandler = new OidcLoginHandler(\n storageUtility,\n new AuthorizationCodeWithPkceOidcHandler(storageUtility, new Redirector()),\n issuerConfigFetcher,\n clientRegistrar\n );\n\n const redirectHandler = new AggregateRedirectHandler([\n new ErrorOidcHandler(),\n new AuthCodeRedirectHandler(\n storageUtility,\n sessionInfoManager,\n issuerConfigFetcher,\n clientRegistrar,\n tokenRefresher\n ),\n // This catch-all class will always be able to handle the\n // redirect IRI, so it must be registered last.\n new FallbackRedirectHandler(),\n ]);\n\n return new ClientAuthentication(\n loginHandler,\n redirectHandler,\n new GeneralLogoutHandler(sessionInfoManager),\n sessionInfoManager,\n issuerConfigFetcher\n );\n}\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\nimport { SOLID_CLIENT_AUTHN_KEY_PREFIX } from \"@inrupt/solid-client-authn-core\";\n\nexport const KEY_CURRENT_SESSION = `${SOLID_CLIENT_AUTHN_KEY_PREFIX}currentSession`;\n\nexport const KEY_CURRENT_URL = `${SOLID_CLIENT_AUTHN_KEY_PREFIX}currentUrl`;\n","/\n * Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\n/\n @hidden\n /\nimport { EventEmitter } from \"events\";\nimport {\n EVENTS,\n ILoginInputOptions,\n ISessionInfo,\n IStorage,\n} from \"@inrupt/solid-client-authn-core\";\nimport { v4 } from \"uuid\";\nimport ClientAuthentication from \"./ClientAuthentication\";\nimport { getClientAuthenticationWithDependencies } from \"./dependencies\";\nimport { KEY_CURRENT_SESSION, KEY_CURRENT_URL } from \"./constant\";\nimport { postRedirectUrlToParent, setupIframeListener } from \"./iframe\";\n\nexport interface ISessionOptions {\n /\n A private storage, unreachable to other scripts on the page. Typically in-memory.\n /\n secureStorage: IStorage;\n /\n A storage where non-sensitive information may be stored, potentially longer-lived than the secure storage.\n /\n insecureStorage: IStorage;\n /\n Details about the current session\n /\n sessionInfo: ISessionInfo;\n /\n An instance of the library core. Typically obtained using `getClientAuthenticationWithDependencies`.\n /\n clientAuthentication: ClientAuthentication;\n}\n\nexport interface IHandleIncomingRedirectOptions {\n /\n If the user has signed in before, setting this to `true` will automatically\n * redirect them to their Solid Identity Provider, which will then attempt to\n * re-activate the session and send the user back to your app without\n * requiring user interaction.\n * If your app's access has not expired yet and re-activation completed\n * successfully, a `sessionRestore` event will be fired with the URL the user\n * was at before they were redirected to their Solid Identity Provider.\n * {@see onSessionRestore}\n /\n restorePreviousSession?: boolean;\n\n /\n Inrupt's Enterprise Solid Server can set a cookie to allow the browser to\n * access private resources on a Pod. In order to mitigate the logout-on-refresh\n * issue on the short term, the server also implemented a session endpoint\n * enabling the client app to know whether the cookie is set. When a user\n * logs in to a server that has that capability enabled, applications that set\n * this option to `true` will be able to make use of it.\n \n If your app supports the newest session restore approach, and `restorePreviousSession`\n * is set to true, this option is automatically set to false, but your app will\n * not be logged out when reloaded.\n \n `useEssSession` defaults to false and will be removed in the future; to\n * preserve sessions across page reloads, use of `restorePreviousSession` is\n * recommended.\n \n @deprecated unreleased\n /\n useEssSession?: boolean;\n /\n The URL of the page handling the redirect, including the query\n * parameters — these contain the information to process the login.\n * Note: as a convenience, if no URL value is specified here, we default to\n * using the browser's current location.\n /\n url?: string;\n}\n\nexport async function silentlyAuthenticate(\n sessionId: string,\n clientAuthn: ClientAuthentication,\n options: {\n inIframe?: boolean;\n } = {\n inIframe: false,\n },\n session: Session\n): Promise<boolean> {\n const storedSessionInfo = await clientAuthn.validateCurrentSession(sessionId);\n if (storedSessionInfo !== null) {\n // It can be really useful to save the user's current browser location,\n // so that we can restore it after completing the silent authentication\n // on incoming redirect. This way, the user is eventually redirected back\n // to the page they were on and not to the app's redirect page.\n window.localStorage.setItem(KEY_CURRENT_URL, window.location.href);\n await clientAuthn.login(\n {\n sessionId,\n prompt: \"none\",\n oidcIssuer: storedSessionInfo.issuer,\n redirectUrl: storedSessionInfo.redirectUrl,\n clientId: storedSessionInfo.clientAppId,\n clientSecret: storedSessionInfo.clientAppSecret,\n tokenType: storedSessionInfo.tokenType ?? \"DPoP\",\n inIframe: options.inIframe,\n },\n session\n );\n return true;\n }\n return false;\n}\n\nfunction isLoggedIn(\n sessionInfo?: ISessionInfo\n): sessionInfo is ISessionInfo & { isLoggedIn: true } {\n return !!sessionInfo?.isLoggedIn;\n}\n\n/\n A {@link Session} object represents a user's session on an application. The session holds state, as it stores information enabling acces to private resources after login for instance.\n /\nexport class Session extends EventEmitter {\n /\n Information regarding the current session.\n /\n public readonly info: ISessionInfo;\n\n private clientAuthentication: ClientAuthentication;\n\n private tokenRequestInProgress = false;\n\n /\n Session object constructor. Typically called as follows:\n \n ```typescript\n * const session = new Session();\n * ```\n \n See also [getDefaultSession](https://docs.inrupt.com/developer-tools/api/javascript/solid-client-authn-browser/functions.html#getdefaultsession).\n \n @param sessionOptions The options enabling the correct instantiation of\n * the session. Either both storages or clientAuthentication are required. For\n * more information, see {@link ISessionOptions}.\n * @param sessionId A string uniquely identifying the session.\n \n /\n constructor(\n sessionOptions: Partial<ISessionOptions> = {},\n sessionId?: string\n ) {\n super();\n\n if (sessionOptions.clientAuthentication) {\n this.clientAuthentication = sessionOptions.clientAuthentication;\n } else if (sessionOptions.secureStorage && sessionOptions.insecureStorage) {\n this.clientAuthentication = getClientAuthenticationWithDependencies({\n secureStorage: sessionOptions.secureStorage,\n insecureStorage: sessionOptions.insecureStorage,\n });\n } else {\n this.clientAuthentication = getClientAuthenticationWithDependencies({});\n }\n\n if (sessionOptions.sessionInfo) {\n this.info = {\n sessionId: sessionOptions.sessionInfo.sessionId,\n isLoggedIn: false,\n webId: sessionOptions.sessionInfo.webId,\n };\n } else {\n this.info = {\n sessionId: sessionId ?? v4(),\n isLoggedIn: false,\n };\n }\n\n // Listen for messages from children iframes.\n setupIframeListener(async (redirectUrl: string) => {\n const sessionInfo =\n await this.clientAuthentication.handleIncomingRedirect(\n redirectUrl,\n this\n );\n\n // If silent authentication was not successful, do nothing;\n // the existing session might still be valid for a while,\n // and will expire by itself.\n if (!isLoggedIn(sessionInfo)) {\n return;\n }\n // After having revalidated the session,\n // make sure to apply the new expiration time:\n this.setSessionInfo(sessionInfo);\n });\n // Listen for the 'tokenRenewal' signal to trigger the silent token renewal.\n this.on(\"tokenRenewal\", () =>\n silentlyAuthenticate(\n this.info.sessionId,\n this.clientAuthentication,\n {\n inIframe: true,\n },\n this\n )\n );\n\n // When a session is logged in, we want to track its ID in local storage to\n // enable silent refresh. The current session ID specifically stored in 'localStorage'\n // (as opposed to using our storage abstraction layer) because it is only\n // used in a browser-specific mechanism.\n this.on(EVENTS.LOGIN, () =>\n window.localStorage.setItem(KEY_CURRENT_SESSION, this.info.sessionId)\n );\n\n this.on(EVENTS.SESSION_EXPIRED, () => this.internalLogout(false));\n\n this.on(EVENTS.ERROR, () => this.internalLogout(false));\n\n // @deprecated: Remove this when removing all support for the useEssSession parameter.\n // This intends at cleaning up local storage of applications from data related\n // to the resource server session workaround.\n window.localStorage.removeItem(\"tmp-resource-server-session-enabled\");\n }\n\n /*\n Triggers the login process. Note that this method will redirect the user away from your app.\n \n @param options Parameter to customize the login behaviour. In particular, two options are mandatory: `options.oidcIssuer`, the user's identity provider, and `options.redirectUrl`, the URL to which the user will be redirected after logging in their identity provider.\n * @returns This method should redirect the user away from the app: it does not return anything. The login process is completed by {@linkcode handleIncomingRedirect}.\n /\n // Define these functions as properties so that they don't get accidentally re-bound.\n // Isn't Javascript fun?\n login = async (options: ILoginInputOptions): Promise<void> => {\n await this.clientAuthentication.login(\n {\n sessionId: this.info.sessionId,\n ...options,\n // Defaults the token type to DPoP\n tokenType: options.tokenType ?? \"DPoP\",\n },\n this\n );\n // `login` redirects the user away from the app,\n // so unless it throws an error, there is no code that should run afterwards\n // (since there is no \"after\" in the lifetime of the script).\n // Hence, this Promise never resolves:\n return new Promise(() => undefined);\n };\n\n /\n Fetches data using available login information. If the user is not logged in, this will behave as a regular `fetch`. The signature of this method is identical to the [canonical `fetch`](https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API).\n \n @param url The URL from which data should be fetched.\n * @param init Optional parameters customizing the request, by specifying an HTTP method, headers, a body, etc. Follows the [WHATWG Fetch Standard](https://fetch.spec.whatwg.org/).\n /\n fetch = async (url: RequestInfo, init?: RequestInit): Promise<Response> => {\n return this.clientAuthentication.fetch(url, init);\n };\n\n /\n An internal logout function, to control whether or not the logout signal\n * should be sent, i.e. if the logout was user-initiated or is the result of\n * an external event.\n \n @hidden\n /\n private internalLogout = async (emitSignal: boolean): Promise<void> => {\n // Clearing this value means that silent refresh will no longer be attempted.\n // In particular, in the case of a silent authentication error it prevents\n // from getting stuck in an authentication retries loop.\n window.localStorage.removeItem(KEY_CURRENT_SESSION);\n await this.clientAuthentication.logout(this.info.sessionId);\n this.info.isLoggedIn = false;\n if (emitSignal) {\n this.emit(EVENTS.LOGOUT);\n }\n };\n\n /\n Logs the user out of the application. This does not log the user out of their Solid identity provider, and should not redirect the user away.\n /\n logout = async (): Promise<void> => this.internalLogout(true);\n\n /\n Completes the login process by processing the information provided by the\n * Solid identity provider through redirect.\n \n @param options See {@see IHandleIncomingRedirectOptions}.\n /\n handleIncomingRedirect = async (\n inputOptions: string \| IHandleIncomingRedirectOptions = {}\n ): Promise<ISessionInfo \| undefined> => {\n if (this.info.isLoggedIn) {\n return this.info;\n }\n\n if (this.tokenRequestInProgress) {\n return undefined;\n }\n const options =\n typeof inputOptions === \"string\" ? { url: inputOptions } : inputOptions;\n const url = options.url ?? window.location.href;\n\n if (window.frameElement !== null) {\n // This is being loaded from an iframe, so send the redirect\n // URL to the parent window on the same origin.\n postRedirectUrlToParent(url);\n return undefined;\n }\n\n this.tokenRequestInProgress = true;\n const sessionInfo = await this.clientAuthentication.handleIncomingRedirect(\n url,\n this\n );\n if (isLoggedIn(sessionInfo)) {\n this.setSessionInfo(sessionInfo);\n const currentUrl = window.localStorage.getItem(KEY_CURRENT_URL);\n if (currentUrl === null) {\n // The login event can only be triggered after* the user has been\n // redirected from the IdP with access and ID tokens.\n this.emit(EVENTS.LOGIN);\n } else {\n // If an URL is stored in local storage, we are being logged in after a\n // silent authentication, so remove our currently stored URL location\n // to clean up our state now that we are completing the re-login process.\n window.localStorage.removeItem(KEY_CURRENT_URL);\n this.emit(EVENTS.SESSION_RESTORED, currentUrl);\n }\n } else if (options.restorePreviousSession === true) {\n // Silent authentication happens after a refresh, which means there are no\n // OAuth params in the current location IRI. It can only succeed if a session\n // was previously logged in, in which case its ID will be present with a known\n // identifier in local storage.\n // Check if we have a locally stored session ID...\n const storedSessionId = window.localStorage.getItem(KEY_CURRENT_SESSION);\n // ...if not, then there is no ID token, and so silent authentication cannot happen, but\n // if we do have a stored session ID, attempt to re-authenticate now silently.\n if (storedSessionId !== null) {\n // TODO: iframe-based authentication being still experimental, it is disabled\n // by default here. When it settles down, the following could be set to true,\n // in which case the unresolving promise afterwards would need to be changed.\n const attemptedSilentAuthentication = await silentlyAuthenticate(\n storedSessionId,\n this.clientAuthentication,\n undefined,\n this\n );\n // At this point, we know that the main window will imminently be redirected.\n // However, this redirect is asynchronous and there is no way to halt execution\n // until it happens precisely. That's why the current Promise simply does not\n // resolve.\n if (attemptedSilentAuthentication) {\n return new Promise(() => {});\n }\n }\n }\n this.tokenRequestInProgress = false;\n return sessionInfo;\n };\n\n /*\n Register a callback function to be called when a user completes login.\n \n The callback is called when {@link handleIncomingRedirect} completes successfully.\n \n @param callback The function called when a user completes login.\n /\n onLogin(callback: () => unknown): void {\n this.on(EVENTS.LOGIN, callback);\n }\n\n /\n Register a callback function to be called when a user logs out:\n \n @param callback The function called when a user completes logout.\n /\n onLogout(callback: () => unknown): void {\n this.on(EVENTS.LOGOUT, callback);\n }\n\n /\n Register a callback function to be called when a user logs out:\n \n @param callback The function called when an error occurs.\n * @since 1.11.0\n /\n onError(\n callback: (\n error: string \| null,\n errorDescription?: string \| null\n ) => unknown\n ): void {\n this.on(EVENTS.ERROR, callback);\n }\n\n /\n Register a callback function to be called when a session is restored.\n \n Note: the callback will be called with the saved value of the 'current URL'\n * at the time the session was restored.\n \n @param callback The function called when a user's already logged-in session is restored, e.g., after a silent authentication is completed after a page refresh.\n /\n onSessionRestore(callback: (currentUrl: string) => unknown): void {\n this.on(EVENTS.SESSION_RESTORED, callback);\n }\n\n /\n Register a callback that runs when the session expires and can no longer\n * make authenticated requests, but following a user logout.\n * @param callback The function that runs on session expiration.\n * @since 1.11.0\n /\n onSessionExpiration(callback: () => unknown): void {\n this.on(EVENTS.SESSION_EXPIRED, callback);\n }\n\n private setSessionInfo(\n sessionInfo: ISessionInfo & { isLoggedIn: true }\n ): void {\n this.info.isLoggedIn = sessionInfo.isLoggedIn;\n this.info.webId = sessionInfo.webId;\n this.info.sessionId = sessionInfo.sessionId;\n this.info.expirationDate = sessionInfo.expirationDate;\n this.on(EVENTS.SESSION_EXTENDED, (expiresIn: number) => {\n this.info.expirationDate = Date.now() + expiresIn 1000;\n });\n }\n}\n","/\n Copyright 2022 Inrupt Inc.\n \n Permission is hereby granted, free of charge, to any person obtaining a copy\n * of this software and associated documentation files (the \"Software\"), to deal in\n * the Software without restriction, including without limitation the rights to use,\n * copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the\n * Software, and to permit persons to whom the Software is furnished to do so,\n * subject to the following conditions:\n \n The above copyright notice and this permission notice shall be included in\n * all copies or substantial portions of the Software.\n \n THE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,\n * INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A\n * PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT\n * HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION\n * OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE\n * SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n /\n\nimport { Session } from \"./Session\";\n\nlet defaultSession: Session;\n\n/\n Obtain the {@link Session} used when not explicitly instantiating one yourself.\n \n When using the top-level exports {@link fetch}, {@link login}, {@link logout},\n * {@link handleIncomingRedirect}, {@link onLogin} and {@link onLogout}, these apply to an\n * implicitly-instantiated {@link Session}.\n * This function returns a reference to that Session in order to obtain e.g. the current user's\n * WebID.\n * @since 1.3.0\n /\nexport function getDefaultSession(): Session {\n if (typeof defaultSession === \"undefined\") {\n defaultSession = new Session();\n }\n return defaultSession;\n}\n\n/\n This function's signature is equal to `window.fetch`, but if the current user is authenticated\n * (see [[login]] and [[handleIncomingRedirect]]), requests made using it will include that user's\n * credentials. If not, this will behave just like the regular `window.fetch`.\n \n @see {@link https://developer.mozilla.org/en-US/docs/Web/API/WindowOrWorkerGlobalScope/fetch}\n * @since 1.3.0\n /\nexport const fetch: Session[\"fetch\"] = (...args) => {\n const session = getDefaultSession();\n return session.fetch(...args);\n};\n\n/\n Triggers the login process. Note that this method will redirect the user away from your app.\n \n @param options Parameter to customize the login behaviour. In particular, two options are mandatory: `options.oidcIssuer`, the user's identity provider, and `options.redirectUrl`, the URL to which the user will be redirected after logging in their identity provider.\n * @returns This method should redirect the user away from the app: it does not return anything. The login process is completed by [[handleIncomingRedirect]].\n * @since 1.3.0\n /\nexport const login: Session[\"login\"] = (...args) => {\n const session = getDefaultSession();\n return session.login(...args);\n};\n\n/\n Logs the user out of the application. This does not log the user out of their\n * Solid identity provider, and should not redirect the user away.\n \n @since 1.3.0\n /\nexport const logout: Session[\"logout\"] = (...args) => {\n const session = getDefaultSession();\n return session.logout(...args);\n};\n\n/\n Completes the login process by processing the information provided by the Solid identity provider through redirect.\n \n @param url The URL of the page handling the redirect, including the query parameters — these contain the information to process the login.\n * @since 1.3.0\n /\nexport const handleIncomingRedirect: Session[\"handleIncomingRedirect\"] = (\n ...args\n) => {\n const session = getDefaultSession();\n return session.handleIncomingRedirect(...args);\n};\n\n/\n Register a callback function to be called when a user completes login.\n \n The callback is called when {@link handleIncomingRedirect} completes successfully.\n * @since 1.3.0\n \n @param callback The function called when a user completes login.\n /\nexport const onLogin: Session[\"onLogin\"] = (...args) => {\n const session = getDefaultSession();\n return session.onLogin(...args);\n};\n\n/\n Register a callback function to be called when a user logs out:\n \n @param callback The function called when a user completes logout.\n * @since 1.3.0\n /\nexport const onLogout: Session[\"onLogout\"] = (...args) => {\n const session = getDefaultSession();\n return session.onLogout(...args);\n};\n\n/\n Register a callback function to be called when a session is restored:\n \n @param callback The function called when a session is restored.\n * @since 1.3.0\n */\nexport const onSessionRestore: Session[\"onSessionRestore\"] = (...args) => {\n const session = getDefaultSession();\n return session.onSessionRestore(...args);\n};\n"],"names":["StorageUtility","removeOidcQueryParam","EVENTS","ConfigurationError","handleRegistration","OidcClient","v4","clearOidcPersistentStorage","isSupportedTokenType","loadOidcContextFromStorage","getDpopToken","getBearerToken","buildAuthenticatedFetch","AggregateHandler","registerClient","refresh","InMemoryStorage","SOLID_CLIENT_AUTHN_KEY_PREFIX","fetch"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsCqB,MAAA,qBAAsB,SAAQA,mCAAc,CAAA;IAC/D,WAAY,CAAA,aAAuB,EAAE,eAAyB,EAAA;AAC5D,QAAA,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;KACvC;AACF;;ACCD,MAAM,WAAW,GAAwB,CAAC,OAAO,EAAE,IAAI,KACrD,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAKhB,MAAO,oBAAoB,CAAA;IACvC,WACU,CAAA,YAA2B,EAC3B,eAAiC,EACjC,aAA6B,EAC7B,kBAAuC,EACvC,mBAAyC,EAAA;QAJzC,IAAY,CAAA,YAAA,GAAZ,YAAY,CAAe;QAC3B,IAAe,CAAA,eAAA,GAAf,eAAe,CAAkB;QACjC,IAAa,CAAA,aAAA,GAAb,aAAa,CAAgB;QAC7B,IAAkB,CAAA,kBAAA,GAAlB,kBAAkB,CAAqB;QACvC,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAsB;AAKnD,QAAA,IAAA,CAAA,KAAK,GAAG,OACN,OAAsB,EACtB,YAA0B,KACT;;YAOjB,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAKvD,YAAA,MAAM,WAAW,GAAGC,kCAAoB,CACtC,MAAA,OAAO,CAAC,WAAW,MAAA,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAC5C,CAAC;AAEF,YAAA,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;AAC7B,gBAAA,GAAG,OAAO;gBACV,WAAW;gBAEX,UAAU,EAAE,MAAA,OAAO,CAAC,UAAU,MAAI,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAA,OAAO,CAAC,QAAQ;gBAClD,YAAY;AACb,aAAA,CAAC,CAAC;AACL,SAAC,CAAC;QAGF,IAAK,CAAA,KAAA,GAAG,WAAW,CAAC;AAEpB,QAAA,IAAA,CAAA,MAAM,GAAG,OAAO,SAAiB,KAAmB;YAClD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAI3C,YAAA,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;AAC3B,SAAC,CAAC;AAEF,QAAA,IAAA,CAAA,cAAc,GAAG,OACf,SAAiB,KAC6C;YAE9D,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AAChD,SAAC,CAAC;QAEF,IAAiB,CAAA,iBAAA,GAAG,YAAoC;AACtD,YAAA,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;AAC1C,SAAC,CAAC;AAMF,QAAA,IAAA,CAAA,sBAAsB,GAAG,OACvB,gBAAwB,KACiC;YACzD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACxE,IACE,WAAW,KAAK,SAAS;gBACzB,WAAW,CAAC,WAAW,KAAK,SAAS;AACrC,gBAAA,WAAW,CAAC,MAAM,KAAK,SAAS,EAChC;AACA,gBAAA,OAAO,IAAI,CAAC;AACb,aAAA;AACD,YAAA,OAAO,WAAW,CAAC;AACrB,SAAC,CAAC;AAEF,QAAA,IAAA,CAAA,sBAAsB,GAAG,OACvB,GAAW,EACX,YAA0B,KACW;YACrC,IAAI;AACF,gBAAA,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAK1E,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAG7C,gBAAA,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;gBAEhC,OAAO;oBACL,UAAU,EAAE,YAAY,CAAC,UAAU;oBACnC,KAAK,EAAE,YAAY,CAAC,KAAK;oBACzB,SAAS,EAAE,YAAY,CAAC,SAAS;oBACjC,cAAc,EAAE,YAAY,CAAC,cAAc;iBAC5C,CAAC;AACH,aAAA;AAAC,YAAA,OAAO,GAAG,EAAE;AAEZ,gBAAA,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;gBAOhC,YAAY,CAAC,IAAI,CAACC,2BAAM,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;AAClD,aAAA;AACH,SAAC,CAAC;KAxGE;AA0GI,IAAA,qBAAqB,CAAC,GAAW,EAAA;AACvC,QAAA,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;AAClC,QAAA,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAE1C,QAAA,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAEzC,QAAA,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AAC7C,QAAA,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;AAEjD,QAAA,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAC1C,QAAA,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAOtD,QAAA,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;KAChE;AACF;;ACzID,SAAS,SAAS,CAChB,OAAsB,EAAA;AAEtB,IAAA,OAAO,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CACrB,OAAsB,EAAA;AAEtB,IAAA,OAAO,OAAO,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC;AACjD,CAAC;AAKa,MAAO,gBAAgB,CAAA;AACnC,IAAA,WAAA,CACU,cAA+B,EAC/B,WAAyB,EACzB,mBAAyC,EACzC,eAAiC,EAAA;QAHjC,IAAc,CAAA,cAAA,GAAd,cAAc,CAAiB;QAC/B,IAAW,CAAA,WAAA,GAAX,WAAW,CAAc;QACzB,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAsB;QACzC,IAAe,CAAA,eAAA,GAAf,eAAe,CAAkB;KACvC;IAEJ,MAAM,SAAS,CAAC,OAAsB,EAAA;QACpC,OAAO,SAAS,CAAC,OAAO,CAAC,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;KACtD;IAED,MAAM,MAAM,CAAC,OAAsB,EAAA;AACjC,QAAA,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;AACvB,YAAA,MAAM,IAAIC,uCAAkB,CAC1B,CAAA,2EAAA,EAA8E,IAAI,CAAC,SAAS,CAC1F,OAAO,CACR,CAAE,CAAA,CACJ,CAAC;AACH,SAAA;AACD,QAAA,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,EAAE;AAC5B,YAAA,MAAM,IAAIA,uCAAkB,CAC1B,CAAA,4EAAA,EAA+E,IAAI,CAAC,SAAS,CAC3F,OAAO,CACR,CAAE,CAAA,CACJ,CAAC;AACH,SAAA;AAGD,QAAA,MAAM,YAAY,GAChB,MAAM,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;AAEjE,QAAA,MAAM,kBAAkB,GAAG,MAAMC,uCAAkB,CACjD,OAAO,EACP,YAAY,EACZ,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,eAAe,CACrB,CAAC;AAGF,QAAA,MAAM,WAAW,GAAiB;YAMhC,MAAM,EAAE,YAAY,CAAC,MAAM;YAE3B,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,WAAW,EAAE,KAAK,MAAM;AAChD,YAAA,GAAG,OAAO;AACV,YAAA,mBAAmB,EAAE,YAAY;AACjC,YAAA,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QAGF,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;KAC7C;AACF;;ACzEa,MAAO,oCAAoC,CAAA;IAGvD,WACU,CAAA,cAA+B,EAC/B,UAAuB,EAAA;QADvB,IAAc,CAAA,cAAA,GAAd,cAAc,CAAiB;QAC/B,IAAU,CAAA,UAAA,GAAV,UAAU,CAAa;KAC7B;IAEJ,MAAM,SAAS,CAAC,gBAA8B,EAAA;AAC5C,QAAA,OAAO,CAAC,EACN,gBAAgB,CAAC,mBAAmB,CAAC,mBAAmB;AACxD,YAAA,gBAAgB,CAAC,mBAAmB,CAAC,mBAAmB,CAAC,OAAO,CAC9D,oBAAoB,CACrB,GAAG,CAAC,CAAC,CACP,CAAC;KACH;IAED,MAAM,MAAM,CAAC,gBAA8B,EAAA;;AAEzC,QAAA,MAAM,WAAW,GAAG;AAClB,YAAA,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE;AAC7C,YAAA,SAAS,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ;AAC3C,YAAA,aAAa,EAAE,gBAAgB,CAAC,MAAM,CAAC,YAAY;AACnD,YAAA,YAAY,EAAE,gBAAgB,CAAC,WAAW,CAAC,QAAQ,EAAE;AACrD,YAAA,wBAAwB,EAAE,gBAAgB,CAAC,WAAW,CAAC,QAAQ,EAAE;AACjE,YAAA,aAAa,EAAE,MAAM;AAGrB,YAAA,KAAK,EAAE,6BAA6B;AACpC,YAAA,oBAAoB,EAAE,IAAI;AAI1B,YAAA,YAAY,EAAE,KAAK;AACnB,YAAA,aAAa,EAAE,IAAI;AACnB,YAAA,MAAM,EAAE,CAAA,EAAA,GAAA,gBAAgB,CAAC,MAAM,mCAAI,SAAS;SAC7C,CAAC;AAGF,QAAA,MAAM,iBAAiB,GAAG,IAAIC,wBAAU,CAAC,WAAW,CAAC,CAAC;AAEtD,QAAA,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;AAC5B,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC;QAEpC,IAAI;AACF,YAAA,MAAM,cAAc,GAAG,MAAM,iBAAiB,CAAC,mBAAmB,EAAE,CAAC;YACrE,MAAM,OAAO,CAAC,GAAG,CAAC;gBAWhB,OAAO,CAAC,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE;oBAC3C,SAAS,EAAE,gBAAgB,CAAC,SAAS;iBACtC,CAAC;AAMF,gBAAA,OAAO,CAAC,UAAU,CAAC,gBAAgB,CAAC,SAAS,EAAE;AAE7C,oBAAA,YAAY,EAAE,cAAc,CAAC,KAAK,CAAC,cAAc;AACjD,oBAAA,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,QAAQ,EAAE;oBAE1C,WAAW,EAAE,gBAAgB,CAAC,WAAW;oBACzC,IAAI,EAAE,gBAAgB,CAAC,IAAI,GAAG,MAAM,GAAG,OAAO;iBAC/C,CAAC;AACH,aAAA,CAAC,CAAC;YAEH,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE;gBACjD,cAAc,EAAE,gBAAgB,CAAC,cAAc;gBAC/C,gBAAgB,EAAE,gBAAgB,CAAC,QAAQ;AAC5C,aAAA,CAAC,CAAC;AACJ,SAAA;AAAC,QAAA,OAAO,GAAY,EAAE;AAErB,YAAA,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACpB,SAAA;AAGD,QAAA,OAAO,SAAS,CAAC;KAClB;AACF;;AClGe,SAAA,mBAAmB,CAAC,GAAW,EAAE,MAAc,EAAA;AAC7D,IAAA,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;AAC/B,IAAA,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC;AAChC,IAAA,SAAS,CAAC,QAAQ,GAAG,GAAG,IAAI,CAAA,EAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,GAAG,CAC1D,EAAA,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,MACjD,EAAE,CAAC;AAEH,IAAA,OAAO,SAAS,CAAC,QAAQ,EAAE,CAAC;AAC9B;;ACHO,MAAM,wBAAwB,GAAG,kCAAkC,CAAC;AAG3E,MAAM,kBAAkB,GAGpB;AACF,IAAA,MAAM,EAAE;AACN,QAAA,KAAK,EAAE,QAAQ;AACf,QAAA,YAAY,EAAE,IAAI;AACnB,KAAA;AACD,IAAA,sBAAsB,EAAE;AACtB,QAAA,KAAK,EAAE,uBAAuB;AAC9B,QAAA,YAAY,EAAE,IAAI;AACnB,KAAA;AACD,IAAA,cAAc,EAAE;AACd,QAAA,KAAK,EAAE,eAAe;AACtB,QAAA,YAAY,EAAE,IAAI;AACnB,KAAA;AACD,IAAA,iBAAiB,EAAE;AACjB,QAAA,KAAK,EAAE,kBAAkB;AACzB,QAAA,YAAY,EAAE,IAAI;AACnB,KAAA;AACD,IAAA,QAAQ,EAAE;AACR,QAAA,KAAK,EAAE,SAAS;AAChB,QAAA,YAAY,EAAE,IAAI;AACnB,KAAA;AACD,IAAA,qBAAqB,EAAE;AACrB,QAAA,KAAK,EAAE,sBAAsB;AAC7B,QAAA,YAAY,EAAE,IAAI;AACnB,KAAA;AACD,IAAA,gBAAgB,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE;AAC9C,IAAA,wBAAwB,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;AAC7D,IAAA,wBAAwB,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;AAC7D,IAAA,qBAAqB,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE;AACvD,IAAA,oBAAoB,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE;AACrD,IAAA,uBAAuB,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE;AAC3D,IAAA,qCAAqC,EAAE;AACrC,QAAA,KAAK,EAAE,kCAAkC;AAC1C,KAAA;AACD,IAAA,wCAAwC,EAAE;AACxC,QAAA,KAAK,EAAE,qCAAqC;AAC7C,KAAA;AACD,IAAA,wCAAwC,EAAE;AACxC,QAAA,KAAK,EAAE,qCAAqC;AAC7C,KAAA;AACD,IAAA,qCAAqC,EAAE;AACrC,QAAA,KAAK,EAAE,mCAAmC;AAC3C,KAAA;AACD,IAAA,wCAAwC,EAAE;AACxC,QAAA,KAAK,EAAE,sCAAsC;AAC9C,KAAA;AACD,IAAA,wCAAwC,EAAE;AACxC,QAAA,KAAK,EAAE,sCAAsC;AAC9C,KAAA;AACD,IAAA,2CAA2C,EAAE;AAC3C,QAAA,KAAK,EAAE,wCAAwC;AAChD,KAAA;AACD,IAAA,8CAA8C,EAAE;AAC9C,QAAA,KAAK,EAAE,2CAA2C;AACnD,KAAA;AACD,IAAA,8CAA8C,EAAE;AAC9C,QAAA,KAAK,EAAE,2CAA2C;AACnD,KAAA;AACD,IAAA,qCAAqC,EAAE;AACrC,QAAA,KAAK,EAAE,mCAAmC;AAC3C,KAAA;AACD,IAAA,gDAAgD,EAAE;AAChD,QAAA,KAAK,EAAE,4CAA4C;AACpD,KAAA;AACD,IAAA,wBAAwB,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;AAC7D,IAAA,qBAAqB,EAAE,EAAE,KAAK,EAAE,qBAAqB,EAAE;AACvD,IAAA,gBAAgB,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE;AAC9C,IAAA,qBAAqB,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE;AACxD,IAAA,wBAAwB,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE;AAC7D,IAAA,oBAAoB,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE;AACrD,IAAA,0BAA0B,EAAE,EAAE,KAAK,EAAE,0BAA0B,EAAE;AACjE,IAAA,2BAA2B,EAAE,EAAE,KAAK,EAAE,2BAA2B,EAAE;AACnE,IAAA,+BAA+B,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE;AAC1E,IAAA,gCAAgC,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE;AAC5E,IAAA,aAAa,EAAE;AACb,QAAA,KAAK,EAAE,aAAa;AACpB,QAAA,YAAY,EAAE,IAAI;AACnB,KAAA;AACD,IAAA,UAAU,EAAE;AACV,QAAA,KAAK,EAAE,UAAU;AACjB,QAAA,YAAY,EAAE,IAAI;AACnB,KAAA;CACF,CAAC;AAGF,SAAS,aAAa,CACpB,MAAyC,EAAA;IAEzC,MAAM,YAAY,GAAsC,EAAE,CAAC;IAC3D,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,KAAI;AAClC,QAAA,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE;AAK3B,YAAA,YAAY,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AAC3D,SAAA;AACH,KAAC,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE;AAChD,QAAA,YAAY,CAAC,eAAe,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC3C,KAAA;AACD,IAAA,OAAO,YAAwC,CAAC;AAClD,CAAC;AAKa,MAAO,mBAAmB,CAAA;AACtC,IAAA,WAAA,CAAoB,cAA+B,EAAA;QAA/B,IAAc,CAAA,cAAA,GAAd,cAAc,CAAiB;KAAI;IAIhD,OAAO,kBAAkB,CAAC,MAAc,EAAA;QAC7C,OAAO,CAAA,aAAA,EAAgB,MAAM,CAAA,CAAE,CAAC;KACjC;IAED,MAAM,WAAW,CAAC,MAAc,EAAA;AAC9B,QAAA,IAAI,YAA2B,CAAC;QAEhC,MAAM,eAAe,GAAG,mBAAmB,CACzC,MAAM,EACN,wBAAwB,CACzB,CAAC;QACF,MAAM,uBAAuB,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAEpE,IAAI;YACF,YAAY,GAAG,aAAa,CAAC,MAAM,uBAAuB,CAAC,IAAI,EAAE,CAAC,CAAC;AACpE,SAAA;AAAC,QAAA,OAAO,GAAG,EAAE;AACZ,YAAA,MAAM,IAAIF,uCAAkB,CAC1B,CAAA,CAAA,EAAI,MAAM,CAAC,QAAQ,EAAE,CAAA,gCAAA,EAClB,GAA2B,CAAC,OAC/B,CAAA,CAAE,CACH,CAAC;AACH,SAAA;QAGD,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAC3B,mBAAmB,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAC9C,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAC7B,CAAC;AAEF,QAAA,OAAO,YAAY,CAAC;KACrB;AACF;;SCrJe,yBAAyB,GAAA;IAGvC,OAAO;AACL,QAAA,UAAU,EAAE,KAAK;QACjB,SAAS,EAAEG,OAAE,EAAE;QACf,KAAK;KACN,CAAC;AACJ,CAAC;AAOM,eAAe,KAAK,CACzB,SAAiB,EACjB,OAAwB,EAAA;IAExB,MAAM,OAAO,CAAC,GAAG,CAAC;QAChB,OAAO,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACvD,OAAO,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAEtD,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC/C,KAAA,CAAC,CAAC;IACH,MAAMC,wCAA0B,EAAE,CAAC;AACrC,CAAC;MAKY,kBAAkB,CAAA;AAC7B,IAAA,WAAA,CAAoB,cAA+B,EAAA;QAA/B,IAAc,CAAA,cAAA,GAAd,cAAc,CAAiB;KAAI;IAGvD,MAAM,CACJ,UAAkB,EAClB,QAAoC,EAAA;AAiCpC,QAAA,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;KACpC;IAED,MAAM,GAAG,CACP,SAAiB,EAAA;;AAEjB,QAAA,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CACrD,SAAS,EACT,YAAY,EACZ;AACE,YAAA,MAAM,EAAE,IAAI;AACb,SAAA,CACF,CAAC;AAEF,QAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,EAAE;AACrE,YAAA,MAAM,EAAE,IAAI;AACb,SAAA,CAAC,CAAC;AAEH,QAAA,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CACnD,SAAS,EACT,UAAU,EACV;AACE,YAAA,MAAM,EAAE,KAAK;AACd,SAAA,CACF,CAAC;AAEF,QAAA,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CACvD,SAAS,EACT,cAAc,EACd;AACE,YAAA,MAAM,EAAE,KAAK;AACd,SAAA,CACF,CAAC;AAEF,QAAA,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CACtD,SAAS,EACT,aAAa,EACb;AACE,YAAA,MAAM,EAAE,KAAK;AACd,SAAA,CACF,CAAC;AAEF,QAAA,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CACvD,SAAS,EACT,cAAc,EACd;AACE,YAAA,MAAM,EAAE,IAAI;AACb,SAAA,CACF,CAAC;AAEF,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE;AACvE,YAAA,MAAM,EAAE,KAAK;AACd,SAAA,CAAC,CAAC;AAEH,QAAA,MAAM,SAAS,GACb,CAAA,EAAA,IAAC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE,WAAW,EAAE;AAC5D,YAAA,MAAM,EAAE,KAAK;SACd,CAAC,CAAC,MAAI,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAA,MAAM,CAAC;AAEhB,QAAA,IAAI,CAACC,yCAAoB,CAAC,SAAS,CAAC,EAAE;AACpC,YAAA,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,CAAA,oBAAA,CAAsB,CAAC,CAAC;AACrE,SAAA;QAED,IACE,QAAQ,KAAK,SAAS;AACtB,YAAA,UAAU,KAAK,SAAS;AACxB,YAAA,KAAK,KAAK,SAAS;YACnB,YAAY,KAAK,SAAS,EAC1B;AACA,YAAA,OAAO,SAAS,CAAC;AAClB,SAAA;QAED,OAAO;YACL,SAAS;YACT,KAAK;YACL,UAAU,EAAE,UAAU,KAAK,MAAM;YACjC,WAAW;YACX,YAAY;YACZ,MAAM;AACN,YAAA,WAAW,EAAE,QAAQ;AACrB,YAAA,eAAe,EAAE,YAAY;YAC7B,SAAS;SACV,CAAC;KACH;AAGD,IAAA,MAAM,MAAM,GAAA;AACV,QAAA,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;KACpC;IAQD,MAAM,KAAK,CAAC,SAAiB,EAAA;QAC3B,OAAO,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;KAC9C;IAMD,MAAM,QAAQ,CAAC,UAAkB,EAAA;AAC/B,QAAA,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;KACpC;AAMD,IAAA,MAAM,yBAAyB,GAAA;AAC7B,QAAA,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;KACpC;AAKD,IAAA,MAAM,QAAQ,GAAA;AACZ,QAAA,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;KACpC;AACF;;MC9LY,uBAAuB,CAAA;IAClC,MAAM,SAAS,CAAC,WAAmB,EAAA;QACjC,IAAI;AAGF,YAAA,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;AACrB,YAAA,OAAO,IAAI,CAAC;AACb,SAAA;AAAC,QAAA,OAAO,CAAC,EAAE;YACV,MAAM,IAAI,KAAK,CACb,CAAA,CAAA,EAAI,WAAW,CAA+D,4DAAA,EAAA,CAAC,CAAE,CAAA,CAClF,CAAC;AACH,SAAA;KACF;IAED,MAAM,MAAM,CAEV,YAAoB,EAAA;QAEpB,OAAO,yBAAyB,EAAE,CAAC;KACpC;AACF;;ACzBa,MAAO,oBAAoB,CAAA;AACvC,IAAA,WAAA,CAAoB,kBAAuC,EAAA;QAAvC,IAAkB,CAAA,kBAAA,GAAlB,kBAAkB,CAAqB;KAAI;AAE/D,IAAA,MAAM,SAAS,GAAA;AACb,QAAA,OAAO,IAAI,CAAC;KACb;IAED,MAAM,MAAM,CAAC,MAAc,EAAA;QACzB,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;KAC7C;AACF;;MCKY,uBAAuB,CAAA;IAClC,WACU,CAAA,cAA+B,EAC/B,kBAAuC,EACvC,mBAAyC,EACzC,eAAiC,EACjC,cAA+B,EAAA;QAJ/B,IAAc,CAAA,cAAA,GAAd,cAAc,CAAiB;QAC/B,IAAkB,CAAA,kBAAA,GAAlB,kBAAkB,CAAqB;QACvC,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAsB;QACzC,IAAe,CAAA,eAAA,GAAf,eAAe,CAAkB;QACjC,IAAc,CAAA,cAAA,GAAd,cAAc,CAAiB;KACrC;IAEJ,MAAM,SAAS,CAAC,WAAmB,EAAA;QACjC,IAAI;AACF,YAAA,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YACnC,QACE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI;gBACvC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EACxC;AACH,SAAA;AAAC,QAAA,OAAO,CAAC,EAAE;YACV,MAAM,IAAI,KAAK,CACb,CAAA,CAAA,EAAI,WAAW,CAA+D,4DAAA,EAAA,CAAC,CAAE,CAAA,CAClF,CAAC;AACH,SAAA;KACF;AAED,IAAA,MAAM,MAAM,CACV,WAAmB,EACnB,YAA2B,EAAA;QAE3B,IAAI,EAAE,MAAM,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,EAAE;AACxC,YAAA,MAAM,IAAI,KAAK,CACb,0CAA0C,WAAW,CAAA,sCAAA,CAAwC,CAC9F,CAAC;AACH,SAAA;AAED,QAAA,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAW,CAAC;AAE3D,QAAA,MAAM,eAAe,IAAI,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAC3D,UAAU,EACV,WAAW,EACX;AACE,YAAA,WAAW,EAAE,IAAI;AAClB,SAAA,CACF,CAAW,CAAC;QAEb,MAAM,EACJ,YAAY,EACZ,YAAY,EACZ,WAAW,EAAE,iBAAiB,EAC9B,IAAI,EAAE,MAAM,GACb,GAAG,MAAMC,+CAA0B,CAClC,eAAe,EACf,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,mBAAmB,CACzB,CAAC;QAEF,IAAI,YAAY,KAAK,SAAS,EAAE;AAC9B,YAAA,MAAM,IAAI,KAAK,CACb,iCAAiC,eAAe,CAAA,yBAAA,CAA2B,CAC5E,CAAC;AACH,SAAA;QAED,IAAI,iBAAiB,KAAK,SAAS,EAAE;AACnC,YAAA,MAAM,IAAI,KAAK,CACb,gCAAgC,eAAe,CAAA,yBAAA,CAA2B,CAC3E,CAAC;AACH,SAAA;AAED,QAAA,MAAM,MAAM,GAAY,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAC1D,EAAE,SAAS,EAAE,eAAe,EAAE,EAC9B,YAAY,CACb,CAAC;AAEF,QAAA,IAAI,MAA0B,CAAC;AAC/B,QAAA,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AAElC,QAAA,IAAI,MAAM,EAAE;AACV,YAAA,MAAM,GAAG,MAAMC,0BAAY,CAAC,YAAY,EAAE,MAAM,EAAE;AAChD,gBAAA,SAAS,EAAE,oBAAoB;gBAG/B,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAW;gBAC5C,YAAY;AACZ,gBAAA,WAAW,EAAE,iBAAiB;AAC/B,aAAA,CAAC,CAAC;YAKH,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAQ,KAAA,EAAA,UAAU,CAAE,CAAA,CAAC,CAAC;AACtD,SAAA;AAAM,aAAA;YACL,MAAM,GAAG,MAAMC,4BAAc,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC/C,SAAA;AAED,QAAA,IAAI,cAA0C,CAAC;AAC/C,QAAA,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS,EAAE;AACrC,YAAA,cAAc,GAAG;AACf,gBAAA,SAAS,EAAE,eAAe;gBAC1B,YAAY,EAAE,MAAM,CAAC,YAAY;gBACjC,cAAc,EAAE,IAAI,CAAC,cAAc;aACpC,CAAC;AACH,SAAA;QAED,MAAM,SAAS,GAAG,MAAMC,4CAAuB,CAAC,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE;YACzE,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,cAAc;YACd,YAAY;YACZ,SAAS,EAAE,MAAM,CAAC,SAAS;AAC5B,SAAA,CAAC,CAAC;AAEH,QAAA,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAClC,eAAe,EACf;YACE,KAAK,EAAE,MAAM,CAAC,KAAK;AACnB,YAAA,UAAU,EAAE,MAAM;AACnB,SAAA,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACjB,CAAC;AAIF,QAAA,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAChC,QAAA,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAClC,eAAe,EACf;AACE,YAAA,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE;SAC5B,EACD;AACE,YAAA,MAAM,EAAE,KAAK;AACd,SAAA,CACF,CAAC;QAEF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACvE,IAAI,CAAC,WAAW,EAAE;AAChB,YAAA,MAAM,IAAI,KAAK,CAAC,gCAAgC,eAAe,CAAA,EAAA,CAAI,CAAC,CAAC;AACtE,SAAA;AAED,QAAA,OAAO,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE;AAChC,YAAA,KAAK,EAAE,SAAS;AAChB,YAAA,cAAc,EACZ,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;AAClC,kBAAE,cAAc,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI;AAC1C,kBAAE,IAAI;AACX,SAAA,CAAC,CAAC;KACJ;AACF;;AC1JoB,MAAA,wBACnB,SAAQC,qCAA+C,CAAA;AAGvD,IAAA,WAAA,CAAY,gBAAoC,EAAA;QAC9C,KAAK,CAAC,gBAAgB,CAAC,CAAC;KACzB;AACF;;ACfa,MAAO,cAAc,CAAA;AACjC,IAAA,IAAI,OAAO,GAAA;QACT,OAAO,MAAM,CAAC,YAAY,CAAC;KAC5B;IAED,MAAM,GAAG,CAAC,GAAW,EAAA;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;KAC/C;AAED,IAAA,MAAM,GAAG,CAAC,GAAW,EAAE,KAAa,EAAA;QAClC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;KAClC;IAED,MAAM,MAAM,CAAC,GAAW,EAAA;AACtB,QAAA,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;KAC9B;AACF;;ACtBD,IAAI,cAAiC,CAAC;AAItC,SAAS,iBAAiB,GAAA;AACxB,IAAA,IAAI,OAAO,cAAc,KAAK,WAAW,EAAE;QACzC,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;AACzD,QAAA,cAAc,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AAC9C,QAAA,cAAc,CAAC,YAAY,CAAC,SAAS,EAAE,iCAAiC,CAAC,CAAC;AAC3E,KAAA;AACD,IAAA,OAAO,cAAc,CAAC;AACxB,CAAC;AASK,SAAU,gBAAgB,CAAC,WAAmB,EAAA;AAClD,IAAA,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;IACnC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AACzC,IAAA,MAAM,CAAC,GAAG,GAAG,WAAW,CAAC;AAC3B,CAAC;AAYK,SAAU,mBAAmB,CACjC,oBAA+D,EAAA;AAO/D,IAAA,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE;QACjC,OAAO;AACR,KAAA;IACD,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,GAAiB,KAAI;AAC7D,QAAA,MAAM,MAAM,GAAG,iBAAiB,EAAE,CAAC;QACnC,IACE,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM;AACrC,YAAA,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,aAAa,EACnC;YACA,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE;gBAE5C,MAAM,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAClD,aAAA;AACF,SAAA;QAED,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;YACzC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;AAC1C,SAAA;AACH,KAAC,CAAC,CAAC;AACL,CAAC;AAMK,SAAU,uBAAuB,CAAC,WAAmB,EAAA;AAEzD,IAAA,MAAM,CAAC,GAAI,CAAC,WAAW,CACrB;QACE,WAAW;AACZ,KAAA,EACD,MAAM,CAAC,QAAQ,CAAC,MAAM,CACvB,CAAC;AACJ;;ACnEc,MAAO,UAAU,CAAA;IAC7B,QAAQ,CAAC,WAAmB,EAAE,OAA4B,EAAA;AACxD,QAAA,IAAI,OAAO,IAAI,OAAO,CAAC,cAAc,EAAE;AACrC,YAAA,OAAO,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;AACrC,SAAA;AAAM,aAAA,IAAI,OAAO,IAAI,OAAO,CAAC,wBAAwB,EAAE;YACtD,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;AAClD,SAAA;AAAM,aAAA,IAAI,OAAO,KAAP,IAAA,IAAA,OAAO,uBAAP,OAAO,CAAE,gBAAgB,EAAE;YACpC,gBAAgB,CAAC,WAAW,CAAC,CAAC;AAC/B,SAAA;AAAM,aAAA;AACL,YAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC;AACpC,SAAA;KACF;AACF;;ACTa,MAAO,eAAe,CAAA;AAClC,IAAA,WAAA,CAAoB,cAA+B,EAAA;QAA/B,IAAc,CAAA,cAAA,GAAd,cAAc,CAAiB;KAAI;AAEvD,IAAA,MAAM,SAAS,CACb,OAAgC,EAChC,YAA2B,EAAA;;QAG3B,MAAM,CACJ,cAAc,EACd,kBAAkB,EAEnB,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACpB,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE;AAC5D,gBAAA,MAAM,EAAE,KAAK;aACd,CAAC;YACF,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,EAAE;AAChE,gBAAA,MAAM,EAAE,KAAK;aACd,CAAC;AAKH,SAAA,CAAC,CAAC;AACH,QAAA,IAAI,cAAc,EAAE;YAClB,OAAO;AACL,gBAAA,QAAQ,EAAE,cAAc;AACxB,gBAAA,YAAY,EAAE,kBAAkB;AAChC,gBAAA,UAAU,EAAE,SAAS;aACtB,CAAC;AACH,SAAA;AACD,QAAA,MAAM,eAAe,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC;AAEvC,QAAA,eAAe,CAAC,uBAAuB;AACrC,YAAA,CAAA,EAAA,GAAA,eAAe,CAAC,uBAAuB,oCACtC,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CACnC,OAAO,CAAC,SAAS,EACjB,yBAAyB,CAC1B,CAAC,CAAC;QAEL,IAAI;YACF,MAAM,gBAAgB,GAAG,MAAMC,4BAAc,CAC3C,eAAe,EACf,YAAY,CACb,CAAC;AAEF,YAAA,MAAM,UAAU,GAA2B;gBACzC,QAAQ,EAAE,gBAAgB,CAAC,QAAQ;aACpC,CAAC;YACF,IAAI,gBAAgB,CAAC,YAAY,EAAE;AACjC,gBAAA,UAAU,CAAC,YAAY,GAAG,gBAAgB,CAAC,YAAY,CAAC;AACzD,aAAA;YACD,IAAI,gBAAgB,CAAC,wBAAwB,EAAE;AAC7C,gBAAA,UAAU,CAAC,wBAAwB;oBACjC,gBAAgB,CAAC,wBAAwB,CAAC;AAC7C,aAAA;YACD,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAClC,eAAe,CAAC,SAAS,EACzB,UAAU,EACV;AAIE,gBAAA,MAAM,EAAE,KAAK;AACd,aAAA,CACF,CAAC;AACF,YAAA,OAAO,gBAAgB,CAAC;AACzB,SAAA;AAAC,QAAA,OAAO,KAAK,EAAE;AACd,YAAA,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,CAAA,CAAA,CAAG,CAAC,CAAC;AAC3D,SAAA;KACF;AACF;;MCpEY,gBAAgB,CAAA;IAC3B,MAAM,SAAS,CAAC,WAAmB,EAAA;QACjC,IAAI;AAEF,YAAA,OAAO,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACvD,SAAA;AAAC,QAAA,OAAO,CAAC,EAAE;YACV,MAAM,IAAI,KAAK,CACb,CAAA,CAAA,EAAI,WAAW,CAA+D,4DAAA,EAAA,CAAC,CAAE,CAAA,CAClF,CAAC;AACH,SAAA;KACF;AAED,IAAA,MAAM,MAAM,CACV,WAAmB,EACnB,YAA2B,EAAA;QAE3B,IAAI,YAAY,KAAK,SAAS,EAAE;AAC9B,YAAA,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC/C,MAAM,mBAAmB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACtE,YAAY,CAAC,IAAI,CAACZ,2BAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAChE,SAAA;QACD,OAAO,yBAAyB,EAAE,CAAC;KACpC;AACF;;AClBa,MAAO,cAAc,CAAA;AACjC,IAAA,WAAA,CACU,cAA+B,EAC/B,mBAAyC,EACzC,eAAiC,EAAA;QAFjC,IAAc,CAAA,cAAA,GAAd,cAAc,CAAiB;QAC/B,IAAmB,CAAA,mBAAA,GAAnB,mBAAmB,CAAsB;QACzC,IAAe,CAAA,eAAA,GAAf,eAAe,CAAkB;KACvC;IAEJ,MAAM,OAAO,CACX,SAAiB,EACjB,YAAqB,EACrB,OAAiB,EACjB,YAA2B,EAAA;AAE3B,QAAA,MAAM,WAAW,GAAG,MAAMO,+CAA0B,CAClD,SAAS,EACT,IAAI,CAAC,cAAc,EACnB,IAAI,CAAC,mBAAmB,CACzB,CAAC;AAEF,QAAA,MAAM,UAAU,GAAY,MAAM,IAAI,CAAC,eAAe,CAAC,SAAS,CAC9D,EAAE,SAAS,EAAE,EACb,WAAW,CAAC,YAAY,CACzB,CAAC;QAEF,IAAI,YAAY,KAAK,SAAS,EAAE;AAE9B,YAAA,MAAM,IAAI,KAAK,CACb,YAAY,SAAS,CAAA,+DAAA,CAAiE,CACvF,CAAC;AACH,SAAA;AAED,QAAA,IAAI,WAAW,CAAC,IAAI,IAAI,OAAO,KAAK,SAAS,EAAE;AAC7C,YAAA,MAAM,IAAI,KAAK,CACb,gBAAgB,SAAS,CAAA,wFAAA,CAA0F,CACpH,CAAC;AACH,SAAA;AAED,QAAA,MAAM,QAAQ,GAAG,MAAMM,qBAAO,CAC5B,YAAY,EACZ,WAAW,CAAC,YAAY,EACxB,UAAU,EACV,OAAO,CACR,CAAC;AAEF,QAAA,IAAI,QAAQ,CAAC,YAAY,KAAK,SAAS,EAAE;AACvC,YAAA,YAAY,KAAZ,IAAA,IAAA,YAAY,KAAZ,KAAA,CAAA,GAAA,KAAA,CAAA,GAAA,YAAY,CAAE,IAAI,CAACb,2BAAM,CAAC,iBAAiB,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;AACpE,YAAA,MAAM,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,SAAS,EAAE;gBAC9C,YAAY,EAAE,QAAQ,CAAC,YAAY;AACpC,aAAA,CAAC,CAAC;AACJ,SAAA;AACD,QAAA,OAAO,QAAQ,CAAC;KACjB;AACF;;AChDK,SAAU,uCAAuC,CAAC,YAGvD,EAAA;AACC,IAAA,MAAM,eAAe,GAAG,IAAIc,oCAAe,EAAE,CAAC;AAC9C,IAAA,MAAM,aAAa,GAAG,YAAY,CAAC,aAAa,IAAI,eAAe,CAAC;IACpE,MAAM,eAAe,GAAG,YAAY,CAAC,eAAe,IAAI,IAAI,cAAc,EAAE,CAAC;IAE7E,MAAM,cAAc,GAAG,IAAI,qBAAqB,CAC9C,aAAa,EACb,eAAe,CAChB,CAAC;AAEF,IAAA,MAAM,mBAAmB,GAAG,IAAI,mBAAmB,CAAC,cAAc,CAAC,CAAC;AACpE,IAAA,MAAM,eAAe,GAAG,IAAI,eAAe,CAAC,cAAc,CAAC,CAAC;AAE5D,IAAA,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,CAAC,cAAc,CAAC,CAAC;IAElE,MAAM,cAAc,GAAG,IAAI,cAAc,CACvC,cAAc,EACd,mBAAmB,EACnB,eAAe,CAChB,CAAC;IAGF,MAAM,YAAY,GAAG,IAAI,gBAAgB,CACvC,cAAc,EACd,IAAI,oCAAoC,CAAC,cAAc,EAAE,IAAI,UAAU,EAAE,CAAC,EAC1E,mBAAmB,EACnB,eAAe,CAChB,CAAC;AAEF,IAAA,MAAM,eAAe,GAAG,IAAI,wBAAwB,CAAC;AACnD,QAAA,IAAI,gBAAgB,EAAE;QACtB,IAAI,uBAAuB,CACzB,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,cAAc,CACf;AAGD,QAAA,IAAI,uBAAuB,EAAE;AAC9B,KAAA,CAAC,CAAC;AAEH,IAAA,OAAO,IAAI,oBAAoB,CAC7B,YAAY,EACZ,eAAe,EACf,IAAI,oBAAoB,CAAC,kBAAkB,CAAC,EAC5C,kBAAkB,EAClB,mBAAmB,CACpB,CAAC;AACJ;;ACjFO,MAAM,mBAAmB,GAAG,CAAG,EAAAC,kDAA6B,gBAAgB,CAAC;AAE7E,MAAM,eAAe,GAAG,CAAG,EAAAA,kDAA6B,YAAY;;ACwEpE,eAAe,oBAAoB,CACxC,SAAiB,EACjB,WAAiC,EACjC,OAEI,GAAA;AACF,IAAA,QAAQ,EAAE,KAAK;AAChB,CAAA,EACD,OAAgB,EAAA;;IAEhB,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAC9E,IAAI,iBAAiB,KAAK,IAAI,EAAE;AAK9B,QAAA,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,WAAW,CAAC,KAAK,CACrB;YACE,SAAS;AACT,YAAA,MAAM,EAAE,MAAM;YACd,UAAU,EAAE,iBAAiB,CAAC,MAAM;YACpC,WAAW,EAAE,iBAAiB,CAAC,WAAW;YAC1C,QAAQ,EAAE,iBAAiB,CAAC,WAAW;YACvC,YAAY,EAAE,iBAAiB,CAAC,eAAe;AAC/C,YAAA,SAAS,EAAE,CAAA,EAAA,GAAA,iBAAiB,CAAC,SAAS,mCAAI,MAAM;YAChD,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,EACD,OAAO,CACR,CAAC;AACF,QAAA,OAAO,IAAI,CAAC;AACb,KAAA;AACD,IAAA,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CACjB,WAA0B,EAAA;IAE1B,OAAO,CAAC,EAAC,WAAW,KAAA,IAAA,IAAX,WAAW,KAAA,KAAA,CAAA,GAAA,KAAA,CAAA,GAAX,WAAW,CAAE,UAAU,CAAA,CAAC;AACnC,CAAC;AAKK,MAAO,OAAQ,SAAQ,YAAY,CAAA;IAyBvC,WACE,CAAA,cAAA,GAA2C,EAAE,EAC7C,SAAkB,EAAA;AAElB,QAAA,KAAK,EAAE,CAAC;QArBF,IAAsB,CAAA,sBAAA,GAAG,KAAK,CAAC;AAuGvC,QAAA,IAAA,CAAA,KAAK,GAAG,OAAO,OAA2B,KAAmB;;AAC3D,YAAA,MAAM,IAAI,CAAC,oBAAoB,CAAC,KAAK,CACnC;AACE,gBAAA,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;AAC9B,gBAAA,GAAG,OAAO;AAEV,gBAAA,SAAS,EAAE,CAAA,EAAA,GAAA,OAAO,CAAC,SAAS,mCAAI,MAAM;aACvC,EACD,IAAI,CACL,CAAC;YAKF,OAAO,IAAI,OAAO,CAAC,MAAM,SAAS,CAAC,CAAC;AACtC,SAAC,CAAC;AAQF,QAAA,IAAA,CAAA,KAAK,GAAG,OAAO,GAAgB,EAAE,IAAkB,KAAuB;YACxE,OAAO,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACpD,SAAC,CAAC;AASM,QAAA,IAAA,CAAA,cAAc,GAAG,OAAO,UAAmB,KAAmB;AAIpE,YAAA,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;AACpD,YAAA,MAAM,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC5D,YAAA,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;AAC7B,YAAA,IAAI,UAAU,EAAE;AACd,gBAAA,IAAI,CAAC,IAAI,CAACf,2BAAM,CAAC,MAAM,CAAC,CAAC;AAC1B,aAAA;AACH,SAAC,CAAC;QAKF,IAAM,CAAA,MAAA,GAAG,YAA2B,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;AAQ9D,QAAA,IAAA,CAAA,sBAAsB,GAAG,OACvB,YAAwD,GAAA,EAAE,KACrB;;AACrC,YAAA,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE;gBACxB,OAAO,IAAI,CAAC,IAAI,CAAC;AAClB,aAAA;YAED,IAAI,IAAI,CAAC,sBAAsB,EAAE;AAC/B,gBAAA,OAAO,SAAS,CAAC;AAClB,aAAA;AACD,YAAA,MAAM,OAAO,GACX,OAAO,YAAY,KAAK,QAAQ,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,YAAY,CAAC;AAC1E,YAAA,MAAM,GAAG,GAAG,CAAA,EAAA,GAAA,OAAO,CAAC,GAAG,MAAI,IAAA,IAAA,EAAA,KAAA,KAAA,CAAA,GAAA,EAAA,GAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;AAEhD,YAAA,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,EAAE;gBAGhC,uBAAuB,CAAC,GAAG,CAAC,CAAC;AAC7B,gBAAA,OAAO,SAAS,CAAC;AAClB,aAAA;AAED,YAAA,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;AACnC,YAAA,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,CACxE,GAAG,EACH,IAAI,CACL,CAAC;AACF,YAAA,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE;AAC3B,gBAAA,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;gBACjC,MAAM,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBAChE,IAAI,UAAU,KAAK,IAAI,EAAE;AAGvB,oBAAA,IAAI,CAAC,IAAI,CAACA,2BAAM,CAAC,KAAK,CAAC,CAAC;AACzB,iBAAA;AAAM,qBAAA;AAIL,oBAAA,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;oBAChD,IAAI,CAAC,IAAI,CAACA,2BAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,CAAC;AAChD,iBAAA;AACF,aAAA;AAAM,iBAAA,IAAI,OAAO,CAAC,sBAAsB,KAAK,IAAI,EAAE;gBAMlD,MAAM,eAAe,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;gBAGzE,IAAI,eAAe,KAAK,IAAI,EAAE;AAI5B,oBAAA,MAAM,6BAA6B,GAAG,MAAM,oBAAoB,CAC9D,eAAe,EACf,IAAI,CAAC,oBAAoB,EACzB,SAAS,EACT,IAAI,CACL,CAAC;AAKF,oBAAA,IAAI,6BAA6B,EAAE;wBACjC,OAAO,IAAI,OAAO,CAAC,MAAO,GAAC,CAAC,CAAC;AAC9B,qBAAA;AACF,iBAAA;AACF,aAAA;AACD,YAAA,IAAI,CAAC,sBAAsB,GAAG,KAAK,CAAC;AACpC,YAAA,OAAO,WAAW,CAAC;AACrB,SAAC,CAAC;QA/MA,IAAI,cAAc,CAAC,oBAAoB,EAAE;AACvC,YAAA,IAAI,CAAC,oBAAoB,GAAG,cAAc,CAAC,oBAAoB,CAAC;AACjE,SAAA;AAAM,aAAA,IAAI,cAAc,CAAC,aAAa,IAAI,cAAc,CAAC,eAAe,EAAE;AACzE,YAAA,IAAI,CAAC,oBAAoB,GAAG,uCAAuC,CAAC;gBAClE,aAAa,EAAE,cAAc,CAAC,aAAa;gBAC3C,eAAe,EAAE,cAAc,CAAC,eAAe;AAChD,aAAA,CAAC,CAAC;AACJ,SAAA;AAAM,aAAA;AACL,YAAA,IAAI,CAAC,oBAAoB,GAAG,uCAAuC,CAAC,EAAE,CAAC,CAAC;AACzE,SAAA;QAED,IAAI,cAAc,CAAC,WAAW,EAAE;YAC9B,IAAI,CAAC,IAAI,GAAG;AACV,gBAAA,SAAS,EAAE,cAAc,CAAC,WAAW,CAAC,SAAS;AAC/C,gBAAA,UAAU,EAAE,KAAK;AACjB,gBAAA,KAAK,EAAE,cAAc,CAAC,WAAW,CAAC,KAAK;aACxC,CAAC;AACH,SAAA;AAAM,aAAA;YACL,IAAI,CAAC,IAAI,GAAG;gBACV,SAAS,EAAE,SAAS,KAAT,IAAA,IAAA,SAAS,cAAT,SAAS,GAAII,OAAE,EAAE;AAC5B,gBAAA,UAAU,EAAE,KAAK;aAClB,CAAC;AACH,SAAA;AAGD,QAAA,mBAAmB,CAAC,OAAO,WAAmB,KAAI;AAChD,YAAA,MAAM,WAAW,GACf,MAAM,IAAI,CAAC,oBAAoB,CAAC,sBAAsB,CACpD,WAAW,EACX,IAAI,CACL,CAAC;AAKJ,YAAA,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE;gBAC5B,OAAO;AACR,aAAA;AAGD,YAAA,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;AACnC,SAAC,CAAC,CAAC;AAEH,QAAA,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,MACtB,oBAAoB,CAClB,IAAI,CAAC,IAAI,CAAC,SAAS,EACnB,IAAI,CAAC,oBAAoB,EACzB;AACE,YAAA,QAAQ,EAAE,IAAI;SACf,EACD,IAAI,CACL,CACF,CAAC;QAMF,IAAI,CAAC,EAAE,CAACJ,2BAAM,CAAC,KAAK,EAAE,MACpB,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CACtE,CAAC;AAEF,QAAA,IAAI,CAAC,EAAE,CAACA,2BAAM,CAAC,eAAe,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAElE,QAAA,IAAI,CAAC,EAAE,CAACA,2BAAM,CAAC,KAAK,EAAE,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAKxD,QAAA,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,qCAAqC,CAAC,CAAC;KACvE;AAkJD,IAAA,OAAO,CAAC,QAAuB,EAAA;QAC7B,IAAI,CAAC,EAAE,CAACA,2BAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;KACjC;AAOD,IAAA,QAAQ,CAAC,QAAuB,EAAA;QAC9B,IAAI,CAAC,EAAE,CAACA,2BAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;KAClC;AAQD,IAAA,OAAO,CACL,QAGY,EAAA;QAEZ,IAAI,CAAC,EAAE,CAACA,2BAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;KACjC;AAUD,IAAA,gBAAgB,CAAC,QAAyC,EAAA;QACxD,IAAI,CAAC,EAAE,CAACA,2BAAM,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;KAC5C;AAQD,IAAA,mBAAmB,CAAC,QAAuB,EAAA;QACzC,IAAI,CAAC,EAAE,CAACA,2BAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;KAC3C;AAEO,IAAA,cAAc,CACpB,WAAgD,EAAA;QAEhD,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;QAC9C,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,WAAW,CAAC,cAAc,CAAC;QACtD,IAAI,CAAC,EAAE,CAACA,2BAAM,CAAC,gBAAgB,EAAE,CAAC,SAAiB,KAAI;AACrD,YAAA,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC;AAC3D,SAAC,CAAC,CAAC;KACJ;AACF;;AC1aD,IAAI,cAAuB,CAAC;SAYZ,iBAAiB,GAAA;AAC/B,IAAA,IAAI,OAAO,cAAc,KAAK,WAAW,EAAE;AACzC,QAAA,cAAc,GAAG,IAAI,OAAO,EAAE,CAAC;AAChC,KAAA;AACD,IAAA,OAAO,cAAc,CAAC;AACxB,CAAC;MAUYgB,OAAK,GAAqB,CAAC,GAAG,IAAI,KAAI;AACjD,IAAA,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;AACpC,IAAA,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;AAChC,EAAE;MASW,KAAK,GAAqB,CAAC,GAAG,IAAI,KAAI;AACjD,IAAA,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;AACpC,IAAA,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;AAChC,EAAE;MAQW,MAAM,GAAsB,CAAC,GAAG,IAAI,KAAI;AACnD,IAAA,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;AACpC,IAAA,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;AACjC,EAAE;MAQW,sBAAsB,GAAsC,CACvE,GAAG,IAAI,KACL;AACF,IAAA,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;AACpC,IAAA,OAAO,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC;AACjD,EAAE;MAUW,OAAO,GAAuB,CAAC,GAAG,IAAI,KAAI;AACrD,IAAA,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;AACpC,IAAA,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AAClC,EAAE;MAQW,QAAQ,GAAwB,CAAC,GAAG,IAAI,KAAI;AACvD,IAAA,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;AACpC,IAAA,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;AACnC,EAAE;MAQW,gBAAgB,GAAgC,CAAC,GAAG,IAAI,KAAI;AACvE,IAAA,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;AACpC,IAAA,OAAO,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;AAC3C;;;;;;;;;;;;;;;;;;;;;;;;;"}