@inrupt/solid-client-authn-browser 1.16.0 → 1.17.1

package/src/login/oidc/oidcHandlers/AuthorizationCodeWithPkceOidcHandler.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -27,13 +27,14 @@
 /**
  * Handler for the Authorization Code with PKCE Flow
  */
-import {
+import type {
   IOidcHandler,
   IOidcOptions,
-  IRedirector,
-  IStorageUtility,
   LoginResult,
+} from "@inrupt/solid-client-authn-core";
+import {
   DEFAULT_SCOPES,
+  AuthorizationCodeWithPkceOidcHandlerBase,
 } from "@inrupt/solid-client-authn-core";
 import { OidcClient } from "@inrupt/oidc-client-ext";
 
@@ -43,22 +44,9 @@ import { OidcClient } from "@inrupt/oidc-client-ext";
  * PKCE: https://tools.ietf.org/html/rfc7636
  */
 export default class AuthorizationCodeWithPkceOidcHandler
+  extends AuthorizationCodeWithPkceOidcHandlerBase
   implements IOidcHandler
 {
-  constructor(
-    private storageUtility: IStorageUtility,
-    private redirector: IRedirector
-  ) {}
-
-  async canHandle(oidcLoginOptions: IOidcOptions): Promise<boolean> {
-    return !!(
-      oidcLoginOptions.issuerConfiguration.grantTypesSupported &&
-      oidcLoginOptions.issuerConfiguration.grantTypesSupported.indexOf(
-        "authorization_code"
-      ) > -1
-    );
-  }
-
   async handle(oidcLoginOptions: IOidcOptions): Promise<LoginResult> {
     /* eslint-disable camelcase */
     const oidcOptions = {
@@ -81,42 +69,16 @@ export default class AuthorizationCodeWithPkceOidcHandler
 
     const oidcClientLibrary = new OidcClient(oidcOptions);
 
-    const { redirector } = this;
-    const storage = this.storageUtility;
-
     try {
       const signingRequest = await oidcClientLibrary.createSigninRequest();
-      await Promise.all([
-        // We use the OAuth 'state' value (which should be crypto-random) as
-        // the key in our storage to store our actual SessionID. We do this
-        // 'cos we'll need to lookup our session information again when the
-        // browser is redirected back to us (i.e. the OAuth client
-        // application) from the Authorization Server.
-        // We don't want to use our session ID as the OAuth 'state' value, as
-        // that session ID can be any developer-specified value, and therefore
-        // may not be appropriate (since the OAuth 'state' value should really
-        // be an unguessable crypto-random value).
+      // Make sure to await the promise before returning so that the error is caught.
+      return await this.handleRedirect({
+        oidcLoginOptions,
         // eslint-disable-next-line no-underscore-dangle
-        storage.setForUser(signingRequest.state._id, {
-          sessionId: oidcLoginOptions.sessionId,
-        }),
-
-        // Store our login-process state using the session ID as the key.
-        // Strictly speaking, this indirection from our OAuth state value to
-        // our session ID is unnecessary, but it provides a slightly cleaner
-        // separation of concerns.
-        storage.setForUser(oidcLoginOptions.sessionId, {
-          // eslint-disable-next-line no-underscore-dangle
-          codeVerifier: signingRequest.state._code_verifier,
-          issuer: oidcLoginOptions.issuer.toString(),
-          // The redirect URL is read after redirect, so it must be stored now.
-          redirectUrl: oidcLoginOptions.redirectUrl,
-          dpop: oidcLoginOptions.dpop ? "true" : "false",
-        }),
-      ]);
-
-      redirector.redirect(signingRequest.url.toString(), {
-        handleRedirect: oidcLoginOptions.handleRedirect,
+        state: signingRequest.state._id,
+        // eslint-disable-next-line no-underscore-dangle
+        codeVerifier: signingRequest.state._code_verifier,
+        targetUrl: signingRequest.url.toString(),
       });
     } catch (err: unknown) {
       // eslint-disable-next-line no-console

package/src/login/oidc/oidcHandlers/OidcHandlerCanHandleTest.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -19,7 +19,7 @@
 // SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 //
 
-import { IOidcOptions } from "@inrupt/solid-client-authn-core";
+import type { IOidcOptions } from "@inrupt/solid-client-authn-core";
 import { standardOidcOptions } from "../__mocks__/IOidcOptions";
 
 const canHandleTests: {

package/src/login/oidc/refresh/TokenRefresher.spec.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -20,19 +20,20 @@
 //
 
 import { jest, it, describe, expect } from "@jest/globals";
-import {
-  EVENTS,
+import type {
   KeyPair,
   TokenEndpointResponse,
 } from "@inrupt/solid-client-authn-core";
+import { EVENTS } from "@inrupt/solid-client-authn-core";
 import {
   StorageUtilityMock,
   mockStorageUtility,
 } from "@inrupt/solid-client-authn-core/mocks";
-import { JWK, importJWK } from "jose";
-import { refresh } from "@inrupt/oidc-client-ext";
+import type { JWK } from "jose";
+import { importJWK } from "jose";
+import type { refresh } from "@inrupt/oidc-client-ext";
 import { EventEmitter } from "events";
-import { KeyObject } from "crypto";
+import type { KeyObject } from "crypto";
 import TokenRefresher from "./TokenRefresher";
 import {
   mockDefaultIssuerConfigFetcher,

package/src/login/oidc/refresh/TokenRefresher.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -24,19 +24,21 @@
  * @packageDocumentation
  */
 
-import {
+import type {
   IClient,
   IClientRegistrar,
   IIssuerConfigFetcher,
   IStorageUtility,
-  loadOidcContextFromStorage,
   KeyPair,
   ITokenRefresher,
   TokenEndpointResponse,
+} from "@inrupt/solid-client-authn-core";
+import {
+  loadOidcContextFromStorage,
   EVENTS,
 } from "@inrupt/solid-client-authn-core";
 import { refresh } from "@inrupt/oidc-client-ext";
-import { EventEmitter } from "events";
+import type { EventEmitter } from "events";
 
 // Some identifiers are not in camelcase on purpose, as they are named using the
 // official names from the OIDC/OAuth2 specifications.

package/src/login/oidc/refresh/__mocks__/TokenRefresher.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -20,7 +20,7 @@
 //
 
 import { jest } from "@jest/globals";
-import {
+import type {
   ITokenRefresher,
   TokenEndpointResponse,
 } from "@inrupt/solid-client-authn-core";

package/src/logout/{GeneralLogoutHandler.ts → buildRpInitiatedLogout.ts}

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -18,28 +18,29 @@
 // OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
 // SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 //
-
-/**
- * @hidden
- * @packageDocumentation
- */
-
-import {
-  ILogoutHandler,
-  ISessionInfoManager,
+import type {
+  IEndSessionOptions,
+  IRpLogoutOptions,
 } from "@inrupt/solid-client-authn-core";
+import { getEndSessionUrl } from "@inrupt/solid-client-authn-core";
 
 /**
+ * @param options.endSessionEndpoint The end_session_endpoint advertised by the server
+ * @param options.idTokenHint The idToken supplied by the server after logging in
+ * Redirects the window to the location required to perform RP initiated logout
+ *
  * @hidden
  */
-export default class GeneralLogoutHandler implements ILogoutHandler {
-  constructor(private sessionInfoManager: ISessionInfoManager) {}
-
-  async canHandle(): Promise<boolean> {
-    return true;
-  }
-
-  async handle(userId: string): Promise<void> {
-    await this.sessionInfoManager.clear(userId);
-  }
+export function buildRpInitiatedLogout({
+  endSessionEndpoint,
+  idTokenHint,
+}: Omit<IEndSessionOptions, keyof IRpLogoutOptions>) {
+  return function logout({ state, postLogoutUrl }: IRpLogoutOptions) {
+    window.location.href = getEndSessionUrl({
+      endSessionEndpoint,
+      idTokenHint,
+      state,
+      postLogoutRedirectUri: postLogoutUrl,
+    });
+  };
 }

package/src/sessionInfo/SessionInfoManager.spec.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -24,10 +24,10 @@ import {
   StorageUtility,
   mockStorage,
 } from "@inrupt/solid-client-authn-core";
+import { mockLogoutHandler } from "@inrupt/solid-client-authn-core/mocks";
 import { jest, it, describe, expect } from "@jest/globals";
 
 import { UuidGeneratorMock } from "../util/__mocks__/UuidGenerator";
-import { mockLogoutHandler } from "../logout/__mocks__/LogoutHandler";
 import { SessionInfoManager } from "./SessionInfoManager";
 
 const mockClearFunction = jest.fn();

package/src/sessionInfo/SessionInfoManager.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -24,27 +24,20 @@
  * @packageDocumentation
  */
 
-import {
+import type {
   ISessionInfo,
   ISessionInfoManager,
   ISessionInternalInfo,
-  ISessionInfoManagerOptions,
   IStorageUtility,
+} from "@inrupt/solid-client-authn-core";
+import {
   isSupportedTokenType,
+  clear as clearBase,
+  SessionInfoManagerBase,
 } from "@inrupt/solid-client-authn-core";
-import { v4 } from "uuid";
 import { clearOidcPersistentStorage } from "@inrupt/oidc-client-ext";
-import { fetch } from "@inrupt/universal-fetch";
-
-export function getUnauthenticatedSession(): ISessionInfo & {
-  fetch: typeof fetch;
-} {
-  return {
-    isLoggedIn: false,
-    sessionId: v4(),
-    fetch,
-  };
-}
+
+export { getUnauthenticatedSession } from "@inrupt/solid-client-authn-core";
 
 /**
  * @param sessionId
@@ -55,60 +48,17 @@ export async function clear(
   sessionId: string,
   storage: IStorageUtility
 ): Promise<void> {
-  await Promise.all([
-    storage.deleteAllUserData(sessionId, { secure: false }),
-    storage.deleteAllUserData(sessionId, { secure: true }),
-    // FIXME: This is needed until the DPoP key is stored safely
-    storage.delete("clientKey", { secure: false }),
-  ]);
+  await clearBase(sessionId, storage);
   await clearOidcPersistentStorage();
 }
 
 /**
  * @hidden
  */
-export class SessionInfoManager implements ISessionInfoManager {
-  constructor(private storageUtility: IStorageUtility) {}
-
-  // eslint-disable-next-line class-methods-use-this
-  update(
-    _sessionId: string,
-    _options: ISessionInfoManagerOptions
-  ): Promise<void> {
-    // const localUserId: string = options.localUserId || this.uuidGenerator.v4();
-    // if (options.loggedIn) {
-    //   return {
-    //     sessionId,
-    //     loggedIn: true,
-    //     webId: options.webId as string,
-    //     neededAction: options.neededAction || { actionType: "inaction" },
-    //     state: options.state,
-    //     logout: async (): Promise<void> => {
-    //       // TODO: handle if webid isn't here
-    //       return this.logoutHandler.handle(localUserId);
-    //     },
-    //     fetch: (url: RequestInfo, init?: RequestInit): Promise<Response> => {
-    //       // TODO: handle if webid isn't here
-    //       return this.authenticatedFetcher.handle(
-    //         {
-    //           localUserId,
-    //           type: "dpop"
-    //         },
-    //         url,
-    //         init
-    //       );
-    //     }
-    //   };
-    // } else {
-    //   return {
-    //     localUserId,
-    //     loggedIn: false,
-    //     neededAction: options.neededAction || { actionType: "inaction" }
-    //   };
-    // }
-    throw new Error("Not Implemented");
-  }
-
+export class SessionInfoManager
+  extends SessionInfoManagerBase
+  implements ISessionInfoManager
+{
   async get(
     sessionId: string
   ): Promise<(ISessionInfo & ISessionInternalInfo) | undefined> {
@@ -191,11 +141,6 @@ export class SessionInfoManager implements ISessionInfoManager {
     };
   }
 
-  // eslint-disable-next-line class-methods-use-this
-  async getAll(): Promise<(ISessionInfo & ISessionInternalInfo)[]> {
-    throw new Error("Not implemented");
-  }
-
   /**
    * This function removes all session-related information from storage.
    * @param sessionId the session identifier
@@ -205,27 +150,4 @@ export class SessionInfoManager implements ISessionInfoManager {
   async clear(sessionId: string): Promise<void> {
     return clear(sessionId, this.storageUtility);
   }
-
-  /**
-   * Registers a new session, so that its ID can be retrieved.
-   * @param sessionId
-   */
-  async register(_sessionId: string): Promise<void> {
-    throw new Error("Not implemented");
-  }
-
-  /**
-   * Returns all the registered session IDs. Differs from getAll, which also
-   * returns additional session information.
-   */
-  async getRegisteredSessionIdAll(): Promise<string[]> {
-    throw new Error("Not implemented");
-  }
-
-  /**
-   * Deletes all information about all sessions, including their registrations.
-   */
-  async clearAll(): Promise<void> {
-    throw new Error("Not implemented");
-  }
 }

package/src/sessionInfo/__mocks__/SessionInfoManager.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -19,7 +19,7 @@
 // SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 //
 
-import {
+import type {
   ISessionInfo,
   ISessionInfoManager,
   ISessionInfoManagerOptions,

package/src/storage/BrowserStorage.spec.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in

package/src/storage/BrowserStorage.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -24,7 +24,7 @@
  * @packageDocumentation
  */
 
-import { IStorage } from "@inrupt/solid-client-authn-core";
+import type { IStorage } from "@inrupt/solid-client-authn-core";
 
 /**
  * @hidden

package/src/storage/StorageUtility.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -27,7 +27,8 @@
 /**
  * A helper class that will validate items taken from local storage
  */
-import { IStorage, StorageUtility } from "@inrupt/solid-client-authn-core";
+import type { IStorage } from "@inrupt/solid-client-authn-core";
+import { StorageUtility } from "@inrupt/solid-client-authn-core";
 
 /**
  * This class in a no-value-added extension of StorageUtility from the core module.

package/src/storage/__mocks__/LocalStorage.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in

package/src/util/UUIDGenerator.spec.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in

package/src/util/UuidGenerator.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in

package/src/util/__mocks__/UuidGenerator.ts

@@ -1,5 +1,5 @@
 //
-// Copyright 2022 Inrupt Inc.
+// Copyright Inrupt Inc.
 //
 // Permission is hereby granted, free of charge, to any person obtaining a copy
 // of this software and associated documentation files (the "Software"), to deal in
@@ -20,7 +20,7 @@
 //
 
 import { jest } from "@jest/globals";
-import { IUuidGenerator } from "../UuidGenerator";
+import type { IUuidGenerator } from "../UuidGenerator";
 
 export const UuidGeneratorMockResponse = "fee3fa53-a6a9-475c-a0da-b1343a4fff76";
 

package/dist/ClientAuthentication.js

@@ -1,80 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-const solid_client_authn_core_1 = require("@inrupt/solid-client-authn-core");
-const universal_fetch_1 = require("@inrupt/universal-fetch");
-const oidc_client_ext_1 = require("@inrupt/oidc-client-ext");
-const globalFetch = (request, init) => (0, universal_fetch_1.fetch)(request, init);
-class ClientAuthentication {
-    constructor(loginHandler, redirectHandler, logoutHandler, sessionInfoManager, issuerConfigFetcher) {
-        this.loginHandler = loginHandler;
-        this.redirectHandler = redirectHandler;
-        this.logoutHandler = logoutHandler;
-        this.sessionInfoManager = sessionInfoManager;
-        this.issuerConfigFetcher = issuerConfigFetcher;
-        this.login = async (options, eventEmitter) => {
-            var _a, _b;
-            await this.sessionInfoManager.clear(options.sessionId);
-            const redirectUrl = (_a = options.redirectUrl) !== null && _a !== void 0 ? _a : (0, oidc_client_ext_1.removeOidcQueryParam)(window.location.href);
-            if (!(0, solid_client_authn_core_1.isValidRedirectUrl)(redirectUrl)) {
-                throw new Error(`${redirectUrl} is not a valid redirect URL, it is either a malformed IRI or it includes a hash fragment.`);
-            }
-            await this.loginHandler.handle({
-                ...options,
-                redirectUrl,
-                clientName: (_b = options.clientName) !== null && _b !== void 0 ? _b : options.clientId,
-                eventEmitter,
-            });
-        };
-        this.fetch = globalFetch;
-        this.logout = async (sessionId) => {
-            await this.logoutHandler.handle(sessionId);
-            this.fetch = globalFetch;
-        };
-        this.getSessionInfo = async (sessionId) => {
-            return this.sessionInfoManager.get(sessionId);
-        };
-        this.getAllSessionInfo = async () => {
-            return this.sessionInfoManager.getAll();
-        };
-        this.validateCurrentSession = async (currentSessionId) => {
-            const sessionInfo = await this.sessionInfoManager.get(currentSessionId);
-            if (sessionInfo === undefined ||
-                sessionInfo.clientAppId === undefined ||
-                sessionInfo.issuer === undefined) {
-                return null;
-            }
-            return sessionInfo;
-        };
-        this.handleIncomingRedirect = async (url, eventEmitter) => {
-            try {
-                const redirectInfo = await this.redirectHandler.handle(url, eventEmitter);
-                this.fetch = redirectInfo.fetch.bind(window);
-                this.cleanUrlAfterRedirect(url);
-                return {
-                    isLoggedIn: redirectInfo.isLoggedIn,
-                    webId: redirectInfo.webId,
-                    sessionId: redirectInfo.sessionId,
-                    expirationDate: redirectInfo.expirationDate,
-                };
-            }
-            catch (err) {
-                this.cleanUrlAfterRedirect(url);
-                eventEmitter.emit(solid_client_authn_core_1.EVENTS.ERROR, "redirect", err);
-                return undefined;
-            }
-        };
-    }
-    cleanUrlAfterRedirect(url) {
-        const cleanedUpUrl = new URL(url);
-        cleanedUpUrl.searchParams.delete("state");
-        cleanedUpUrl.searchParams.delete("code");
-        cleanedUpUrl.searchParams.delete("id_token");
-        cleanedUpUrl.searchParams.delete("access_token");
-        cleanedUpUrl.searchParams.delete("error");
-        cleanedUpUrl.searchParams.delete("error_description");
-        cleanedUpUrl.searchParams.delete("iss");
-        window.history.replaceState(null, "", cleanedUpUrl.toString());
-    }
-}
-exports.default = ClientAuthentication;
-//# sourceMappingURL=ClientAuthentication.js.map

package/dist/ClientAuthentication.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ClientAuthentication.js","sourceRoot":"","sources":["../src/ClientAuthentication.ts"],"names":[],"mappings":";;AA0BA,6EAWyC;AACzC,6DAAgD;AAChD,6DAA+D;AAM/D,MAAM,WAAW,GAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAA,uBAAK,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAK1E,MAAqB,oBAAoB;IACvC,YACU,YAA2B,EAC3B,eAAyC,EACzC,aAA6B,EAC7B,kBAAuC,EACvC,mBAAyC;QAJzC,iBAAY,GAAZ,YAAY,CAAe;QAC3B,oBAAe,GAAf,eAAe,CAA0B;QACzC,kBAAa,GAAb,aAAa,CAAgB;QAC7B,uBAAkB,GAAlB,kBAAkB,CAAqB;QACvC,wBAAmB,GAAnB,mBAAmB,CAAsB;QAKnD,UAAK,GAAG,KAAK,EACX,OAAsB,EACtB,YAA0B,EACX,EAAE;;YAOjB,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAQvD,MAAM,WAAW,GACf,MAAA,OAAO,CAAC,WAAW,mCAAI,IAAA,sCAAoB,EAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACpE,IAAI,CAAC,IAAA,4CAAkB,EAAC,WAAW,CAAC,EAAE;gBACpC,MAAM,IAAI,KAAK,CACb,GAAG,WAAW,4FAA4F,CAC3G,CAAC;aACH;YACD,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC;gBAC7B,GAAG,OAAO;gBACV,WAAW;gBAEX,UAAU,EAAE,MAAA,OAAO,CAAC,UAAU,mCAAI,OAAO,CAAC,QAAQ;gBAClD,YAAY;aACb,CAAC,CAAC;QACL,CAAC,CAAC;QAGF,UAAK,GAAG,WAAW,CAAC;QAEpB,WAAM,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;YAClD,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAI3C,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;QAC3B,CAAC,CAAC;QAEF,mBAAc,GAAG,KAAK,EACpB,SAAiB,EAC2C,EAAE;YAE9D,OAAO,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC,CAAC;QAEF,sBAAiB,GAAG,KAAK,IAA6B,EAAE;YACtD,OAAO,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAE,CAAC;QAC1C,CAAC,CAAC;QAMF,2BAAsB,GAAG,KAAK,EAC5B,gBAAwB,EAC+B,EAAE;YACzD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YACxE,IACE,WAAW,KAAK,SAAS;gBACzB,WAAW,CAAC,WAAW,KAAK,SAAS;gBACrC,WAAW,CAAC,MAAM,KAAK,SAAS,EAChC;gBACA,OAAO,IAAI,CAAC;aACb;YACD,OAAO,WAAW,CAAC;QACrB,CAAC,CAAC;QAEF,2BAAsB,GAAG,KAAK,EAC5B,GAAW,EACX,YAA0B,EACS,EAAE;YACrC,IAAI;gBACF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;gBAK1E,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAG7C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;gBAEhC,OAAO;oBACL,UAAU,EAAE,YAAY,CAAC,UAAU;oBACnC,KAAK,EAAE,YAAY,CAAC,KAAK;oBACzB,SAAS,EAAE,YAAY,CAAC,SAAS;oBACjC,cAAc,EAAE,YAAY,CAAC,cAAc;iBAC5C,CAAC;aACH;YAAC,OAAO,GAAG,EAAE;gBAEZ,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;gBAOhC,YAAY,CAAC,IAAI,CAAC,gCAAM,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;gBAEjD,OAAO,SAAS,CAAC;aAClB;QACH,CAAC,CAAC;IAhHC,CAAC;IAkHI,qBAAqB,CAAC,GAAW;QACvC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAClC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAE1C,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEzC,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC7C,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAEjD,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC1C,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACtD,YAAY,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAOxC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC;IACjE,CAAC;CACF;AA7ID,uCA6IC"}