@kolektor/nucleus-identity 0.0.8-pre.5672 → 0.0.9-pre.5707

package/esm2015/lib/utils/secrets-store.js

@@ -1,113 +0,0 @@
-import { __awaiter } from "tslib";
-import 'capacitor-secure-storage-plugin';
-import { TokenResponse } from '@openid/appauth';
-import { Identity } from '../models/identity';
-import { SecureStoragePlugin } from 'capacitor-secure-storage-plugin';
-export class SecretsStore {
-    constructor(clientId) {
-        this._tokens = {};
-        this._identities = {};
-        this._tokenStorageKeyPrefix = `Nucleus.Identity.${clientId}`; // do not change this or login fith existing refresh tokens will fail
-        this._servicePrincipalKey = `Nucleus.Identity.${clientId}.SvcP`;
-    }
-    removeServicePrincipal() {
-        this._servicePrincipal = null;
-        return this.clear(this._servicePrincipalKey);
-    }
-    setServicePrincipal(servicePrincipal) {
-        return __awaiter(this, void 0, void 0, function* () {
-            this._servicePrincipal = servicePrincipal;
-            yield this.save(this._servicePrincipalKey, servicePrincipal);
-        });
-    }
-    getServicePrincipal() {
-        return __awaiter(this, void 0, void 0, function* () {
-            if (!this._servicePrincipal) {
-                this._servicePrincipal = yield this.load(this._servicePrincipalKey);
-            }
-            return this._servicePrincipal;
-        });
-    }
-    setToken(token, id = null) {
-        return this.setTokenInternal(token, true, id);
-    }
-    getIdentity(id = null) {
-        const key = this.getTokenKey(id);
-        return this._identities[key];
-    }
-    getToken(id = null) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const key = this.getTokenKey(id);
-            // if token is not there or it is invalid we check storage again before returning
-            if (!this._tokens[key] || !this._tokens[key].isValid()) {
-                yield this.reloadTokenFromStorage(id);
-            }
-            return this._tokens[key];
-        });
-    }
-    removeToken(id = null) {
-        const key = this.getTokenKey(id);
-        delete this._tokens[key];
-        delete this._identities[key];
-        return this.clear(key);
-    }
-    reloadTokenFromStorage(id) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const key = this.getTokenKey(id);
-            const storedToken = yield this.load(key);
-            if (storedToken) {
-                const res = new TokenResponse(storedToken);
-                if ((res === null || res === void 0 ? void 0 : res.accessToken) || (res === null || res === void 0 ? void 0 : res.idToken)) {
-                    yield this.setTokenInternal(res, false, id);
-                }
-            }
-            return null;
-        });
-    }
-    setTokenInternal(token, save, id = null) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const key = this.getTokenKey(id);
-            if (token == null) {
-                yield this.removeToken(id);
-            }
-            else {
-                this._tokens[key] = token;
-                this._identities[key] = Identity.createFromResponse(token);
-                if (save) {
-                    try {
-                        yield this.save(key, token.toJson());
-                    }
-                    catch (e) {
-                        console.warn('Nucleus.Identity: Could not save to SecureStorage.');
-                    }
-                }
-            }
-        });
-    }
-    getTokenKey(id = null) {
-        return id ? `${this._tokenStorageKeyPrefix}.${id}` : this._tokenStorageKeyPrefix;
-    }
-    clear(key) {
-        return SecureStoragePlugin.remove({ key });
-    }
-    save(key, value) {
-        return SecureStoragePlugin.set({ key, value: JSON.stringify(value) });
-    }
-    load(key) {
-        return __awaiter(this, void 0, void 0, function* () {
-            try {
-                const x = yield SecureStoragePlugin.get({ key });
-                if (x === null || x === void 0 ? void 0 : x.value) {
-                    return JSON.parse(x.value);
-                }
-                else {
-                    return null;
-                }
-            }
-            catch (_a) {
-                return null;
-            }
-        });
-    }
-}
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoic2VjcmV0cy1zdG9yZS5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uLy4uLy4uLy4uL3Byb2plY3RzL251Y2xldXMtaWRlbnRpdHkvc3JjL2xpYi91dGlscy9zZWNyZXRzLXN0b3JlLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7QUFBQSxPQUFPLGlDQUFpQyxDQUFDO0FBQ3pDLE9BQU8sRUFBRSxhQUFhLEVBQXFCLE1BQU0saUJBQWlCLENBQUM7QUFDbkUsT0FBTyxFQUFFLFFBQVEsRUFBRSxNQUFNLG9CQUFvQixDQUFDO0FBRTlDLE9BQU8sRUFBRSxtQkFBbUIsRUFBRSxNQUFNLGlDQUFpQyxDQUFDO0FBRXRFLE1BQU0sT0FBTyxZQUFZO0lBQ3ZCLFlBQVksUUFBZ0I7UUFNcEIsWUFBTyxHQUFvQyxFQUFFLENBQUM7UUFDOUMsZ0JBQVcsR0FBK0IsRUFBRSxDQUFDO1FBTm5ELElBQUksQ0FBQyxzQkFBc0IsR0FBRyxvQkFBb0IsUUFBUSxFQUFFLENBQUMsQ0FBQyxxRUFBcUU7UUFDbkksSUFBSSxDQUFDLG9CQUFvQixHQUFHLG9CQUFvQixRQUFRLE9BQU8sQ0FBQztJQUNsRSxDQUFDO0lBUU0sc0JBQXNCO1FBQzNCLElBQUksQ0FBQyxpQkFBaUIsR0FBRyxJQUFJLENBQUM7UUFDOUIsT0FBTyxJQUFJLENBQUMsS0FBSyxDQUFDLElBQUksQ0FBQyxvQkFBb0IsQ0FBQyxDQUFDO0lBQy9DLENBQUM7SUFFWSxtQkFBbUIsQ0FBQyxnQkFBa0M7O1lBQ2pFLElBQUksQ0FBQyxpQkFBaUIsR0FBRyxnQkFBZ0IsQ0FBQztZQUMxQyxNQUFNLElBQUksQ0FBQyxJQUFJLENBQUMsSUFBSSxDQUFDLG9CQUFvQixFQUFFLGdCQUFnQixDQUFDLENBQUM7UUFDL0QsQ0FBQztLQUFBO0lBRVksbUJBQW1COztZQUM5QixJQUFJLENBQUMsSUFBSSxDQUFDLGlCQUFpQixFQUFFO2dCQUMzQixJQUFJLENBQUMsaUJBQWlCLEdBQUcsTUFBTSxJQUFJLENBQUMsSUFBSSxDQUFtQixJQUFJLENBQUMsb0JBQW9CLENBQUMsQ0FBQzthQUN2RjtZQUNELE9BQU8sSUFBSSxDQUFDLGlCQUFpQixDQUFDO1FBQ2hDLENBQUM7S0FBQTtJQUVNLFFBQVEsQ0FBQyxLQUFvQixFQUFFLEtBQWEsSUFBSTtRQUNyRCxPQUFPLElBQUksQ0FBQyxnQkFBZ0IsQ0FBQyxLQUFLLEVBQUUsSUFBSSxFQUFFLEVBQUUsQ0FBQyxDQUFDO0lBQ2hELENBQUM7SUFFTSxXQUFXLENBQUMsS0FBYSxJQUFJO1FBQ2xDLE1BQU0sR0FBRyxHQUFHLElBQUksQ0FBQyxXQUFXLENBQUMsRUFBRSxDQUFDLENBQUM7UUFDakMsT0FBTyxJQUFJLENBQUMsV0FBVyxDQUFDLEdBQUcsQ0FBQyxDQUFDO0lBQy9CLENBQUM7SUFFWSxRQUFRLENBQUMsS0FBYSxJQUFJOztZQUNyQyxNQUFNLEdBQUcsR0FBRyxJQUFJLENBQUMsV0FBVyxDQUFDLEVBQUUsQ0FBQyxDQUFDO1lBRWpDLGlGQUFpRjtZQUNqRixJQUFJLENBQUMsSUFBSSxDQUFDLE9BQU8sQ0FBQyxHQUFHLENBQUMsSUFBSSxDQUFDLElBQUksQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLENBQUMsT0FBTyxFQUFFLEVBQUU7Z0JBQ3RELE1BQU0sSUFBSSxDQUFDLHNCQUFzQixDQUFDLEVBQUUsQ0FBQyxDQUFDO2FBQ3ZDO1lBQ0QsT0FBTyxJQUFJLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxDQUFDO1FBQzNCLENBQUM7S0FBQTtJQUVNLFdBQVcsQ0FBQyxLQUFhLElBQUk7UUFDbEMsTUFBTSxHQUFHLEdBQUcsSUFBSSxDQUFDLFdBQVcsQ0FBQyxFQUFFLENBQUMsQ0FBQztRQUNqQyxPQUFPLElBQUksQ0FBQyxPQUFPLENBQUMsR0FBRyxDQUFDLENBQUM7UUFDekIsT0FBTyxJQUFJLENBQUMsV0FBVyxDQUFDLEdBQUcsQ0FBQyxDQUFDO1FBQzdCLE9BQU8sSUFBSSxDQUFDLEtBQUssQ0FBQyxHQUFHLENBQUMsQ0FBQztJQUN6QixDQUFDO0lBRWEsc0JBQXNCLENBQUMsRUFBVTs7WUFDN0MsTUFBTSxHQUFHLEdBQUcsSUFBSSxDQUFDLFdBQVcsQ0FBQyxFQUFFLENBQUMsQ0FBQztZQUNqQyxNQUFNLFdBQVcsR0FBRyxNQUFNLElBQUksQ0FBQyxJQUFJLENBQW9CLEdBQUcsQ0FBQyxDQUFDO1lBQzVELElBQUksV0FBVyxFQUFFO2dCQUNmLE1BQU0sR0FBRyxHQUFHLElBQUksYUFBYSxDQUFDLFdBQVcsQ0FBQyxDQUFDO2dCQUMzQyxJQUFJLENBQUEsR0FBRyxhQUFILEdBQUcsdUJBQUgsR0FBRyxDQUFFLFdBQVcsTUFBSSxHQUFHLGFBQUgsR0FBRyx1QkFBSCxHQUFHLENBQUUsT0FBTyxDQUFBLEVBQUU7b0JBQ3BDLE1BQU0sSUFBSSxDQUFDLGdCQUFnQixDQUFDLEdBQUcsRUFBRSxLQUFLLEVBQUUsRUFBRSxDQUFDLENBQUM7aUJBQzdDO2FBQ0Y7WUFDRCxPQUFPLElBQUksQ0FBQztRQUNkLENBQUM7S0FBQTtJQUVhLGdCQUFnQixDQUFDLEtBQW9CLEVBQUUsSUFBYSxFQUFFLEtBQWEsSUFBSTs7WUFDbkYsTUFBTSxHQUFHLEdBQUcsSUFBSSxDQUFDLFdBQVcsQ0FBQyxFQUFFLENBQUMsQ0FBQztZQUNqQyxJQUFJLEtBQUssSUFBSSxJQUFJLEVBQUU7Z0JBQ2pCLE1BQU0sSUFBSSxDQUFDLFdBQVcsQ0FBQyxFQUFFLENBQUMsQ0FBQzthQUM1QjtpQkFBTTtnQkFDTCxJQUFJLENBQUMsT0FBTyxDQUFDLEdBQUcsQ0FBQyxHQUFHLEtBQUssQ0FBQztnQkFDMUIsSUFBSSxDQUFDLFdBQVcsQ0FBQyxHQUFHLENBQUMsR0FBRyxRQUFRLENBQUMsa0JBQWtCLENBQUMsS0FBSyxDQUFDLENBQUM7Z0JBQzNELElBQUksSUFBSSxFQUFFO29CQUNSLElBQUk7d0JBQ0YsTUFBTSxJQUFJLENBQUMsSUFBSSxDQUFDLEdBQUcsRUFBRSxLQUFLLENBQUMsTUFBTSxFQUFFLENBQUMsQ0FBQztxQkFDdEM7b0JBQUMsT0FBTyxDQUFDLEVBQUU7d0JBQ1YsT0FBTyxDQUFDLElBQUksQ0FBQyxvREFBb0QsQ0FBQyxDQUFDO3FCQUNwRTtpQkFDRjthQUNGO1FBQ0gsQ0FBQztLQUFBO0lBRU8sV0FBVyxDQUFDLEtBQWEsSUFBSTtRQUNuQyxPQUFPLEVBQUUsQ0FBQyxDQUFDLENBQUMsR0FBRyxJQUFJLENBQUMsc0JBQXNCLElBQUksRUFBRSxFQUFFLENBQUMsQ0FBQyxDQUFDLElBQUksQ0FBQyxzQkFBc0IsQ0FBQztJQUNuRixDQUFDO0lBRU8sS0FBSyxDQUFDLEdBQVc7UUFDdkIsT0FBTyxtQkFBbUIsQ0FBQyxNQUFNLENBQUMsRUFBRSxHQUFHLEVBQUUsQ0FBQyxDQUFDO0lBQzdDLENBQUM7SUFFTyxJQUFJLENBQUksR0FBVyxFQUFFLEtBQVE7UUFDbkMsT0FBTyxtQkFBbUIsQ0FBQyxHQUFHLENBQUMsRUFBRSxHQUFHLEVBQUUsS0FBSyxFQUFFLElBQUksQ0FBQyxTQUFTLENBQUMsS0FBSyxDQUFDLEVBQUUsQ0FBQyxDQUFDO0lBQ3hFLENBQUM7SUFFYSxJQUFJLENBQUksR0FBVzs7WUFDL0IsSUFBSTtnQkFDRixNQUFNLENBQUMsR0FBRyxNQUFNLG1CQUFtQixDQUFDLEdBQUcsQ0FBQyxFQUFFLEdBQUcsRUFBRSxDQUFDLENBQUM7Z0JBQ2pELElBQUksQ0FBQyxhQUFELENBQUMsdUJBQUQsQ0FBQyxDQUFFLEtBQUssRUFBRTtvQkFDWixPQUFPLElBQUksQ0FBQyxLQUFLLENBQUMsQ0FBQyxDQUFDLEtBQUssQ0FBTSxDQUFDO2lCQUNqQztxQkFBTTtvQkFDTCxPQUFPLElBQUksQ0FBQztpQkFDYjthQUNGO1lBQUMsV0FBTTtnQkFDTixPQUFPLElBQUksQ0FBQzthQUNiO1FBQ0gsQ0FBQztLQUFBO0NBRUYiLCJzb3VyY2VzQ29udGVudCI6WyJpbXBvcnQgJ2NhcGFjaXRvci1zZWN1cmUtc3RvcmFnZS1wbHVnaW4nO1xyXG5pbXBvcnQgeyBUb2tlblJlc3BvbnNlLCBUb2tlblJlc3BvbnNlSnNvbiB9IGZyb20gJ0BvcGVuaWQvYXBwYXV0aCc7XHJcbmltcG9ydCB7IElkZW50aXR5IH0gZnJvbSAnLi4vbW9kZWxzL2lkZW50aXR5JztcclxuaW1wb3J0IHsgU2VydmljZVByaW5jaXBhbCB9IGZyb20gJy4uL21vZGVscy9zZXJ2aWNlLXByaW5jaXBhbCc7XHJcbmltcG9ydCB7IFNlY3VyZVN0b3JhZ2VQbHVnaW4gfSBmcm9tICdjYXBhY2l0b3Itc2VjdXJlLXN0b3JhZ2UtcGx1Z2luJztcclxuXHJcbmV4cG9ydCBjbGFzcyBTZWNyZXRzU3RvcmUge1xyXG4gIGNvbnN0cnVjdG9yKGNsaWVudElkOiBzdHJpbmcpIHtcclxuICAgIHRoaXMuX3Rva2VuU3RvcmFnZUtleVByZWZpeCA9IGBOdWNsZXVzLklkZW50aXR5LiR7Y2xpZW50SWR9YDsgLy8gZG8gbm90IGNoYW5nZSB0aGlzIG9yIGxvZ2luIGZpdGggZXhpc3RpbmcgcmVmcmVzaCB0b2tlbnMgd2lsbCBmYWlsXHJcbiAgICB0aGlzLl9zZXJ2aWNlUHJpbmNpcGFsS2V5ID0gYE51Y2xldXMuSWRlbnRpdHkuJHtjbGllbnRJZH0uU3ZjUGA7XHJcbiAgfVxyXG5cclxuICBwcml2YXRlIF90b2tlblN0b3JhZ2VLZXlQcmVmaXg6IHN0cmluZztcclxuICBwcml2YXRlIF90b2tlbnM6IHsgW2lkOiBzdHJpbmddOiBUb2tlblJlc3BvbnNlIH0gPSB7fTtcclxuICBwcml2YXRlIF9pZGVudGl0aWVzOiB7IFtpZDogc3RyaW5nXTogSWRlbnRpdHkgfSA9IHt9O1xyXG4gIHByaXZhdGUgX3NlcnZpY2VQcmluY2lwYWxLZXk7XHJcbiAgcHJpdmF0ZSBfc2VydmljZVByaW5jaXBhbDogU2VydmljZVByaW5jaXBhbDtcclxuXHJcbiAgcHVibGljIHJlbW92ZVNlcnZpY2VQcmluY2lwYWwoKSB7XHJcbiAgICB0aGlzLl9zZXJ2aWNlUHJpbmNpcGFsID0gbnVsbDtcclxuICAgIHJldHVybiB0aGlzLmNsZWFyKHRoaXMuX3NlcnZpY2VQcmluY2lwYWxLZXkpO1xyXG4gIH1cclxuXHJcbiAgcHVibGljIGFzeW5jIHNldFNlcnZpY2VQcmluY2lwYWwoc2VydmljZVByaW5jaXBhbDogU2VydmljZVByaW5jaXBhbCkge1xyXG4gICAgdGhpcy5fc2VydmljZVByaW5jaXBhbCA9IHNlcnZpY2VQcmluY2lwYWw7XHJcbiAgICBhd2FpdCB0aGlzLnNhdmUodGhpcy5fc2VydmljZVByaW5jaXBhbEtleSwgc2VydmljZVByaW5jaXBhbCk7XHJcbiAgfVxyXG5cclxuICBwdWJsaWMgYXN5bmMgZ2V0U2VydmljZVByaW5jaXBhbCgpIHtcclxuICAgIGlmICghdGhpcy5fc2VydmljZVByaW5jaXBhbCkge1xyXG4gICAgICB0aGlzLl9zZXJ2aWNlUHJpbmNpcGFsID0gYXdhaXQgdGhpcy5sb2FkPFNlcnZpY2VQcmluY2lwYWw+KHRoaXMuX3NlcnZpY2VQcmluY2lwYWxLZXkpO1xyXG4gICAgfVxyXG4gICAgcmV0dXJuIHRoaXMuX3NlcnZpY2VQcmluY2lwYWw7XHJcbiAgfVxyXG5cclxuICBwdWJsaWMgc2V0VG9rZW4odG9rZW46IFRva2VuUmVzcG9uc2UsIGlkOiBzdHJpbmcgPSBudWxsKSB7XHJcbiAgICByZXR1cm4gdGhpcy5zZXRUb2tlbkludGVybmFsKHRva2VuLCB0cnVlLCBpZCk7XHJcbiAgfVxyXG5cclxuICBwdWJsaWMgZ2V0SWRlbnRpdHkoaWQ6IHN0cmluZyA9IG51bGwpIHtcclxuICAgIGNvbnN0IGtleSA9IHRoaXMuZ2V0VG9rZW5LZXkoaWQpO1xyXG4gICAgcmV0dXJuIHRoaXMuX2lkZW50aXRpZXNba2V5XTtcclxuICB9XHJcblxyXG4gIHB1YmxpYyBhc3luYyBnZXRUb2tlbihpZDogc3RyaW5nID0gbnVsbCkge1xyXG4gICAgY29uc3Qga2V5ID0gdGhpcy5nZXRUb2tlbktleShpZCk7XHJcblxyXG4gICAgLy8gaWYgdG9rZW4gaXMgbm90IHRoZXJlIG9yIGl0IGlzIGludmFsaWQgd2UgY2hlY2sgc3RvcmFnZSBhZ2FpbiBiZWZvcmUgcmV0dXJuaW5nXHJcbiAgICBpZiAoIXRoaXMuX3Rva2Vuc1trZXldIHx8ICF0aGlzLl90b2tlbnNba2V5XS5pc1ZhbGlkKCkpIHtcclxuICAgICAgYXdhaXQgdGhpcy5yZWxvYWRUb2tlbkZyb21TdG9yYWdlKGlkKTtcclxuICAgIH1cclxuICAgIHJldHVybiB0aGlzLl90b2tlbnNba2V5XTtcclxuICB9XHJcblxyXG4gIHB1YmxpYyByZW1vdmVUb2tlbihpZDogc3RyaW5nID0gbnVsbCkge1xyXG4gICAgY29uc3Qga2V5ID0gdGhpcy5nZXRUb2tlbktleShpZCk7XHJcbiAgICBkZWxldGUgdGhpcy5fdG9rZW5zW2tleV07XHJcbiAgICBkZWxldGUgdGhpcy5faWRlbnRpdGllc1trZXldO1xyXG4gICAgcmV0dXJuIHRoaXMuY2xlYXIoa2V5KTtcclxuICB9XHJcblxyXG4gIHByaXZhdGUgYXN5bmMgcmVsb2FkVG9rZW5Gcm9tU3RvcmFnZShpZDogc3RyaW5nKSB7XHJcbiAgICBjb25zdCBrZXkgPSB0aGlzLmdldFRva2VuS2V5KGlkKTtcclxuICAgIGNvbnN0IHN0b3JlZFRva2VuID0gYXdhaXQgdGhpcy5sb2FkPFRva2VuUmVzcG9uc2VKc29uPihrZXkpO1xyXG4gICAgaWYgKHN0b3JlZFRva2VuKSB7XHJcbiAgICAgIGNvbnN0IHJlcyA9IG5ldyBUb2tlblJlc3BvbnNlKHN0b3JlZFRva2VuKTtcclxuICAgICAgaWYgKHJlcz8uYWNjZXNzVG9rZW4gfHwgcmVzPy5pZFRva2VuKSB7XHJcbiAgICAgICAgYXdhaXQgdGhpcy5zZXRUb2tlbkludGVybmFsKHJlcywgZmFsc2UsIGlkKTtcclxuICAgICAgfVxyXG4gICAgfVxyXG4gICAgcmV0dXJuIG51bGw7XHJcbiAgfVxyXG5cclxuICBwcml2YXRlIGFzeW5jIHNldFRva2VuSW50ZXJuYWwodG9rZW46IFRva2VuUmVzcG9uc2UsIHNhdmU6IGJvb2xlYW4sIGlkOiBzdHJpbmcgPSBudWxsKSB7XHJcbiAgICBjb25zdCBrZXkgPSB0aGlzLmdldFRva2VuS2V5KGlkKTtcclxuICAgIGlmICh0b2tlbiA9PSBudWxsKSB7XHJcbiAgICAgIGF3YWl0IHRoaXMucmVtb3ZlVG9rZW4oaWQpO1xyXG4gICAgfSBlbHNlIHtcclxuICAgICAgdGhpcy5fdG9rZW5zW2tleV0gPSB0b2tlbjtcclxuICAgICAgdGhpcy5faWRlbnRpdGllc1trZXldID0gSWRlbnRpdHkuY3JlYXRlRnJvbVJlc3BvbnNlKHRva2VuKTtcclxuICAgICAgaWYgKHNhdmUpIHtcclxuICAgICAgICB0cnkge1xyXG4gICAgICAgICAgYXdhaXQgdGhpcy5zYXZlKGtleSwgdG9rZW4udG9Kc29uKCkpO1xyXG4gICAgICAgIH0gY2F0Y2ggKGUpIHtcclxuICAgICAgICAgIGNvbnNvbGUud2FybignTnVjbGV1cy5JZGVudGl0eTogQ291bGQgbm90IHNhdmUgdG8gU2VjdXJlU3RvcmFnZS4nKTtcclxuICAgICAgICB9XHJcbiAgICAgIH1cclxuICAgIH1cclxuICB9XHJcblxyXG4gIHByaXZhdGUgZ2V0VG9rZW5LZXkoaWQ6IHN0cmluZyA9IG51bGwpIHtcclxuICAgIHJldHVybiBpZCA/IGAke3RoaXMuX3Rva2VuU3RvcmFnZUtleVByZWZpeH0uJHtpZH1gIDogdGhpcy5fdG9rZW5TdG9yYWdlS2V5UHJlZml4O1xyXG4gIH1cclxuXHJcbiAgcHJpdmF0ZSBjbGVhcihrZXk6IHN0cmluZykge1xyXG4gICAgcmV0dXJuIFNlY3VyZVN0b3JhZ2VQbHVnaW4ucmVtb3ZlKHsga2V5IH0pO1xyXG4gIH1cclxuXHJcbiAgcHJpdmF0ZSBzYXZlPFQ+KGtleTogc3RyaW5nLCB2YWx1ZTogVCk6IFByb21pc2U8eyB2YWx1ZTogYm9vbGVhbiB9PiB7XHJcbiAgICByZXR1cm4gU2VjdXJlU3RvcmFnZVBsdWdpbi5zZXQoeyBrZXksIHZhbHVlOiBKU09OLnN0cmluZ2lmeSh2YWx1ZSkgfSk7XHJcbiAgfVxyXG5cclxuICBwcml2YXRlIGFzeW5jIGxvYWQ8VD4oa2V5OiBzdHJpbmcpIHtcclxuICAgIHRyeSB7XHJcbiAgICAgIGNvbnN0IHggPSBhd2FpdCBTZWN1cmVTdG9yYWdlUGx1Z2luLmdldCh7IGtleSB9KTtcclxuICAgICAgaWYgKHg/LnZhbHVlKSB7XHJcbiAgICAgICAgcmV0dXJuIEpTT04ucGFyc2UoeC52YWx1ZSkgYXMgVDtcclxuICAgICAgfSBlbHNlIHtcclxuICAgICAgICByZXR1cm4gbnVsbDtcclxuICAgICAgfVxyXG4gICAgfSBjYXRjaCB7XHJcbiAgICAgIHJldHVybiBudWxsO1xyXG4gICAgfVxyXG4gIH1cclxuXHJcbn1cclxuIl19

package/esm2015/lib/utils/token-client.js

@@ -1,159 +0,0 @@
-import { __awaiter } from "tslib";
-import { AppAuthError, BaseTokenRequestHandler, BasicQueryStringUtils, GRANT_TYPE_AUTHORIZATION_CODE, GRANT_TYPE_REFRESH_TOKEN, TokenRequest } from '@openid/appauth';
-import { OidcConfigurationService } from './oidc-configuration.service';
-import { AngularRequestor } from './angular-requestor';
-import { Injectable } from '@angular/core';
-import { DeviceCode } from '../models/device-code';
-import { ClientRegistrationResponse } from '../models/client-registration';
-import * as i0 from "@angular/core";
-import * as i1 from "./angular-requestor";
-import * as i2 from "./oidc-configuration.service";
-export class TokenClient {
-    constructor(requestor, config) {
-        this.requestor = requestor;
-        this.config = config;
-        this._tokenHandler = new BaseTokenRequestHandler(requestor);
-        this._utils = new BasicQueryStringUtils();
-    }
-    getByAuthorizationCode(redirectUrl, code, codeVerifier) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const config = yield this.config.getConfiguration();
-            const redirectUri = redirectUrl;
-            const req = new TokenRequest({
-                client_id: this.config.clientId,
-                redirect_uri: redirectUri,
-                grant_type: GRANT_TYPE_AUTHORIZATION_CODE,
-                code,
-                extras: { code_verifier: codeVerifier }
-            });
-            return yield this._tokenHandler.performTokenRequest(config, req);
-        });
-    }
-    getByRefreshToken(refreshToken) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const config = yield this.config.getConfiguration();
-            const redirectUri = this.config.redirectUrl;
-            const req = new TokenRequest({
-                client_id: this.config.clientId,
-                redirect_uri: redirectUri,
-                grant_type: GRANT_TYPE_REFRESH_TOKEN,
-                refresh_token: refreshToken
-            });
-            return yield this._tokenHandler.performTokenRequest(config, req);
-        });
-    }
-    getByClientCredentials(clientId, clientSecret, scope) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const config = yield this.config.getConfiguration();
-            const req = new TokenRequest({
-                client_id: clientId,
-                redirect_uri: null,
-                grant_type: 'client_credentials',
-                extras: {
-                    client_secret: clientSecret,
-                    scope,
-                }
-            });
-            return yield this._tokenHandler.performTokenRequest(config, req);
-        });
-    }
-    getBySecret(provider, secret, assertionToken, scope) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const config = yield this.config.getConfiguration();
-            const req = new TokenRequest({
-                client_id: this.config.clientId,
-                redirect_uri: null,
-                grant_type: 'urn:kolektor:nucleus:secret',
-                extras: {
-                    secret_provider: provider,
-                    secret_value: secret,
-                    client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
-                    client_assertion: assertionToken,
-                    scope,
-                }
-            });
-            return yield this._tokenHandler.performTokenRequest(config, req);
-        });
-    }
-    getByDeviceCode(deviceCode) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const config = yield this.config.getConfiguration();
-            const req = new TokenRequest({
-                client_id: this.config.clientId,
-                redirect_uri: null,
-                grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
-                extras: {
-                    device_code: deviceCode
-                }
-            });
-            return yield this._tokenHandler.performTokenRequest(config, req);
-        });
-    }
-    registerServicePrincipal(token) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const config = yield this.config.getConfiguration();
-            const response = yield this.requestor.xhr({
-                url: config.registrationEndpoint,
-                method: 'POST',
-                dataType: 'json',
-                headers: {
-                    'Content-Type': 'application/json',
-                    Authorization: `Bearer ${token}`
-                }
-                // data: this._utils.stringify(map)
-            });
-            if (response.error === undefined) {
-                return new ClientRegistrationResponse(response);
-            }
-            else {
-                throw new AppAuthError(response.error);
-            }
-        });
-    }
-    getRegistrationCode(existingServicePrincipalId = null) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const params = {
-                custom_action: 'sp_register',
-                service_principal_id: existingServicePrincipalId
-            };
-            return this.getDeviceCodeInternal(params);
-        });
-    }
-    getDeviceCode(scope) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const params = {
-                scope,
-            };
-            return this.getDeviceCodeInternal(params);
-        });
-    }
-    getDeviceCodeInternal(params) {
-        return __awaiter(this, void 0, void 0, function* () {
-            const config = yield this.config.getConfiguration();
-            params['client_id'] = this.config.clientId;
-            const map = params;
-            const response = yield this.requestor.xhr({
-                url: config.deviceAuthorizationEndpoint,
-                method: 'POST',
-                dataType: 'json',
-                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-                data: this._utils.stringify(map)
-            });
-            if (response.error === undefined) {
-                return new DeviceCode(response);
-            }
-            else {
-                throw new AppAuthError(response.error);
-            }
-        });
-    }
-}
-TokenClient.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0, type: TokenClient, deps: [{ token: i1.AngularRequestor }, { token: i2.OidcConfigurationService }], target: i0.ɵɵFactoryTarget.Injectable });
-TokenClient.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0, type: TokenClient, providedIn: 'root' });
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "12.2.3", ngImport: i0, type: TokenClient, decorators: [{
-            type: Injectable,
-            args: [{
-                    providedIn: 'root'
-                }]
-        }], ctorParameters: function () { return [{ type: i1.AngularRequestor }, { type: i2.OidcConfigurationService }]; } });
-//# sourceMappingURL=data:application/json;base64,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

package/fesm2015/kolektor-nucleus-identity.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"kolektor-nucleus-identity.js","sources":["../../../projects/nucleus-identity/src/lib/nucleus-identity-config.ts","../../../projects/nucleus-identity/src/lib/utils/nucleus-crypto.ts","../../../projects/nucleus-identity/src/lib/utils/location.service.ts","../../../projects/nucleus-identity/src/lib/utils/nucleus-authorization-notifier.ts","../../../projects/nucleus-identity/src/lib/models/identity.ts","../../../projects/nucleus-identity/src/lib/utils/secrets-store.ts","../../../projects/nucleus-identity/src/lib/utils/angular-requestor.ts","../../../projects/nucleus-identity/src/lib/utils/authorization-service-configuration.ts","../../../projects/nucleus-identity/src/lib/utils/oidc-configuration.service.ts","../../../projects/nucleus-identity/src/lib/models/device-code.ts","../../../projects/nucleus-identity/src/lib/models/client-registration.ts","../../../projects/nucleus-identity/src/lib/utils/token-client.ts","../../../projects/nucleus-identity/src/lib/models/service-principal.ts","../../../projects/nucleus-identity/src/lib/nucleus-identity.service.ts","../../../projects/nucleus-identity/src/lib/nucleus-token-interceptor.service.ts","../../../projects/nucleus-identity/src/lib/nucleus-identity.module.ts","../../../projects/nucleus-identity/src/lib/models/otp.ts","../../../projects/nucleus-identity/src/public-api.ts","../../../projects/nucleus-identity/src/kolektor-nucleus-identity.ts"],"sourcesContent":["export class NucleusIdentityConfig {\r\n  public authority: string = null;\r\n\r\n  public clientId: string;\r\n\r\n  public redirectUri?: string;\r\n\r\n  public androidRedirectUri?: string;\r\n\r\n  public iOSRedirectUri?: string;\r\n\r\n  public httpInterceptorUrls?: string[] = [];\r\n\r\n  public automaticLoginOnHttp401 = false;\r\n\r\n  public requestedScopes?: string;\r\n\r\n  public servicePrincipalRequestedScopes?: string;\r\n\r\n  public authProviderHint?: string;\r\n}\r\n","// It also supports IE with window.msCrypto !!!!!!\r\nimport { Crypto } from '@openid/appauth';\r\nimport { AppAuthError } from '@openid/appauth';\r\nimport * as base64 from 'base64-js';\r\n\r\nconst CHARSET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';\r\n\r\nexport class NucleusCrypto implements Crypto {\r\n  private browserCrypto = window.crypto || (window as any).msCrypto;\r\n\r\n  generateRandom(size: number) {\r\n    const buffer = new Uint8Array(size);\r\n    if (this.browserCrypto) {\r\n      this.browserCrypto.getRandomValues(buffer);\r\n    } else {\r\n      // fall back to Math.random() if nothing else is available\r\n      for (let i = 0; i < size; i += 1) {\r\n        buffer[i] = Math.random();\r\n      }\r\n    }\r\n    return this.bufferToString(buffer);\r\n  }\r\n\r\n  deriveChallenge(code: string): Promise<string> {\r\n    if (code.length < 43 || code.length > 128) {\r\n      return Promise.reject(new AppAuthError('Invalid code length.'));\r\n    }\r\n    if (!this.browserCrypto.subtle) {\r\n      return Promise.reject(new AppAuthError('window.crypto.subtle is unavailable.'));\r\n    }\r\n\r\n    const ecode = this.textEncodeLite(code);\r\n    const op = this.browserCrypto.subtle.digest('SHA-256', ecode);\r\n    return new Promise((resolve, reject) => {\r\n      // if operation contains algorithm it means it is not a promise which means it is CryptoOperation from IE.\r\n      // We just return result as promise\r\n      if (op.algorithm) {\r\n        console.log('we have a CryptoOperation');\r\n        op.addEventListener('complete', () => {\r\n          resolve(this.urlSafe(op.result));\r\n        });\r\n\r\n        op.addEventListener('error', () => {\r\n          reject(op.result);\r\n        });\r\n      } else { // the result is promise\r\n        op.then(buffer => resolve(this.urlSafe(buffer)), error => reject(error));\r\n      }\r\n    });\r\n  }\r\n\r\n\r\n  private urlSafe(buffer: Uint8Array): string {\r\n    const encoded = base64.fromByteArray(new Uint8Array(buffer));\r\n    return encoded.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\r\n  }\r\n\r\n  private textEncodeLite(str: string) {\r\n    const buf = new ArrayBuffer(str.length);\r\n    const bufView = new Uint8Array(buf);\r\n\r\n    for (let i = 0; i < str.length; i++) {\r\n      bufView[i] = str.charCodeAt(i);\r\n    }\r\n    return bufView;\r\n  }\r\n\r\n  private bufferToString(buffer: Uint8Array) {\r\n    const state = [];\r\n    for (let i = 0; i < buffer.byteLength; i += 1) {\r\n      const index = buffer[i] % CHARSET.length;\r\n      state.push(CHARSET[index]);\r\n    }\r\n    return state.join('');\r\n  }\r\n}\r\n","import { LocationLike } from '@openid/appauth';\r\nimport { NucleusAppService } from '@kolektor/nucleus-common';\r\nimport { Browser } from '@capacitor/browser';\r\nimport { Injectable } from '@angular/core';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class LocationService implements LocationLike {\r\n  constructor(private appService: NucleusAppService) {\r\n  }\r\n\r\n  get hash() {\r\n    return window.location.hash;\r\n  }\r\n  set hash(v) {\r\n    window.location.hash = v;\r\n  }\r\n\r\n  get host() {\r\n    return window.location.host;\r\n  }\r\n  set host(v) {\r\n    window.location.host = v;\r\n  }\r\n\r\n  get origin() {\r\n    return window.location.origin;\r\n  }\r\n\r\n  get hostname() {\r\n    return window.location.hostname;\r\n  }\r\n  set hostname(v) {\r\n    window.location.hostname = v;\r\n  }\r\n\r\n  get pathname() {\r\n    return window.location.pathname;\r\n  }\r\n  set pathname(v) {\r\n    window.location.pathname = v;\r\n  }\r\n\r\n  get port() {\r\n    return window.location.port;\r\n  }\r\n  set port(v) {\r\n    window.location.port = v;\r\n  }\r\n\r\n  get protocol() {\r\n    return window.location.protocol;\r\n  }\r\n  set protocol(v) {\r\n    window.location.protocol = v;\r\n  }\r\n\r\n  get search() {\r\n    return window.location.search;\r\n  }\r\n  set search(v) {\r\n    window.location.search = v;\r\n  }\r\n\r\n  assign(url: string): void {\r\n    if (this.appService.isNative) {\r\n      Browser.open({ url });\r\n    } else {\r\n      window.location.assign(url);\r\n    }\r\n  }\r\n}\r\n","import { AuthorizationNotifier } from '@openid/appauth';\r\nimport { AuthorizationResponse, AuthorizationError } from '@openid/appauth';\r\nimport { AuthorizationRequest } from '@openid/appauth';\r\n\r\nexport class NucleusAuthorizationNotifier extends AuthorizationNotifier {\r\n    response: AuthorizationResponse;\r\n    request: AuthorizationRequest;\r\n    error: AuthorizationError;\r\n\r\n    constructor()  {\r\n        super();\r\n        this.setAuthorizationListener((request, response, error) => {\r\n            console.log('Authorization request complete ', request, response, error);\r\n            this.response = response;\r\n            this.request = request;\r\n            this.error = error;\r\n        });\r\n    }\r\n}\r\n","import { TokenResponse } from '@openid/appauth';\r\n\r\nexport class Claim {\r\n  public name: string;\r\n  public values: string[];\r\n\r\n  constructor(name: string, values: string[]) {\r\n    this.name = name;\r\n    this.values = values;\r\n  }\r\n}\r\n\r\nexport class Identity {\r\n  public name: string;\r\n  public subject: string;\r\n\r\n  public claims: Claim[] = [];\r\n\r\n  public static createFromResponse(res: TokenResponse): Identity {\r\n    const token = this.decodeToken(res.idToken);\r\n    const id = new Identity();\r\n    id.name = token.name;\r\n    id.subject = token.sub;\r\n    for (const key in token) {\r\n      if ({}.hasOwnProperty.call(token, key)) {\r\n        let vals = token[key];\r\n\r\n        if (!Array.isArray(vals)) {\r\n          vals = [vals];\r\n        }\r\n\r\n        const claim = new Claim(key, vals);\r\n        id.claims.push(claim);\r\n      }\r\n    }\r\n    return id;\r\n  }\r\n\r\n  private static decodeToken(jwt: string): any {\r\n    if (!jwt) {\r\n      throw new Error('NucleusIdentity: There was no identity token in the response!');\r\n    }\r\n\r\n    try {\r\n      const arr = jwt.split('.');\r\n      // var header = arr[0];\r\n      const payload = this.b64DecodeUnicode(arr[1]);\r\n      // var signature = arr[2];\r\n      return JSON.parse(payload);\r\n    } catch (error) {\r\n      console.error('Error while decoding identity token', error);\r\n      console.error('Error while decoding identity token JWT', jwt);\r\n    }\r\n  }\r\n\r\n  private static b64DecodeUnicode(str: string) {\r\n    str = str.replace(/-/g, '+').replace(/_/g, '/'); // Qlector fix :)\r\n    return decodeURIComponent(atob(str).split('').map(c => '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2)).join(''));\r\n  }\r\n}\r\n","import 'capacitor-secure-storage-plugin';\r\nimport { TokenResponse, TokenResponseJson } from '@openid/appauth';\r\nimport { Identity } from '../models/identity';\r\nimport { ServicePrincipal } from '../models/service-principal';\r\nimport { SecureStoragePlugin } from 'capacitor-secure-storage-plugin';\r\n\r\nexport class SecretsStore {\r\n  constructor(clientId: string) {\r\n    this._tokenStorageKeyPrefix = `Nucleus.Identity.${clientId}`; // do not change this or login fith existing refresh tokens will fail\r\n    this._servicePrincipalKey = `Nucleus.Identity.${clientId}.SvcP`;\r\n  }\r\n\r\n  private _tokenStorageKeyPrefix: string;\r\n  private _tokens: { [id: string]: TokenResponse } = {};\r\n  private _identities: { [id: string]: Identity } = {};\r\n  private _servicePrincipalKey;\r\n  private _servicePrincipal: ServicePrincipal;\r\n\r\n  public removeServicePrincipal() {\r\n    this._servicePrincipal = null;\r\n    return this.clear(this._servicePrincipalKey);\r\n  }\r\n\r\n  public async setServicePrincipal(servicePrincipal: ServicePrincipal) {\r\n    this._servicePrincipal = servicePrincipal;\r\n    await this.save(this._servicePrincipalKey, servicePrincipal);\r\n  }\r\n\r\n  public async getServicePrincipal() {\r\n    if (!this._servicePrincipal) {\r\n      this._servicePrincipal = await this.load<ServicePrincipal>(this._servicePrincipalKey);\r\n    }\r\n    return this._servicePrincipal;\r\n  }\r\n\r\n  public setToken(token: TokenResponse, id: string = null) {\r\n    return this.setTokenInternal(token, true, id);\r\n  }\r\n\r\n  public getIdentity(id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n    return this._identities[key];\r\n  }\r\n\r\n  public async getToken(id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n\r\n    // if token is not there or it is invalid we check storage again before returning\r\n    if (!this._tokens[key] || !this._tokens[key].isValid()) {\r\n      await this.reloadTokenFromStorage(id);\r\n    }\r\n    return this._tokens[key];\r\n  }\r\n\r\n  public removeToken(id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n    delete this._tokens[key];\r\n    delete this._identities[key];\r\n    return this.clear(key);\r\n  }\r\n\r\n  private async reloadTokenFromStorage(id: string) {\r\n    const key = this.getTokenKey(id);\r\n    const storedToken = await this.load<TokenResponseJson>(key);\r\n    if (storedToken) {\r\n      const res = new TokenResponse(storedToken);\r\n      if (res?.accessToken || res?.idToken) {\r\n        await this.setTokenInternal(res, false, id);\r\n      }\r\n    }\r\n    return null;\r\n  }\r\n\r\n  private async setTokenInternal(token: TokenResponse, save: boolean, id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n    if (token == null) {\r\n      await this.removeToken(id);\r\n    } else {\r\n      this._tokens[key] = token;\r\n      this._identities[key] = Identity.createFromResponse(token);\r\n      if (save) {\r\n        try {\r\n          await this.save(key, token.toJson());\r\n        } catch (e) {\r\n          console.warn('Nucleus.Identity: Could not save to SecureStorage.');\r\n        }\r\n      }\r\n    }\r\n  }\r\n\r\n  private getTokenKey(id: string = null) {\r\n    return id ? `${this._tokenStorageKeyPrefix}.${id}` : this._tokenStorageKeyPrefix;\r\n  }\r\n\r\n  private clear(key: string) {\r\n    return SecureStoragePlugin.remove({ key });\r\n  }\r\n\r\n  private save<T>(key: string, value: T): Promise<{ value: boolean }> {\r\n    return SecureStoragePlugin.set({ key, value: JSON.stringify(value) });\r\n  }\r\n\r\n  private async load<T>(key: string) {\r\n    try {\r\n      const x = await SecureStoragePlugin.get({ key });\r\n      if (x?.value) {\r\n        return JSON.parse(x.value) as T;\r\n      } else {\r\n        return null;\r\n      }\r\n    } catch {\r\n      return null;\r\n    }\r\n  }\r\n\r\n}\r\n","import { AppAuthError, Requestor } from '@openid/appauth';\r\nimport { Injectable } from '@angular/core';\r\nimport { HttpClient, HttpErrorResponse } from '@angular/common/http';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class AngularRequestor extends Requestor {\r\n\r\n  constructor(private http: HttpClient) {\r\n    super();\r\n  }\r\n\r\n  // eslint-disable-next-line no-undef\r\n  xhr<T>(settings: JQueryAjaxSettings): Promise<T> {\r\n    if (settings.method === undefined) {\r\n      settings.method = 'GET';\r\n    }\r\n    return new Promise<T>((resolve, reject) => {\r\n      this.http.request<T>(settings.method, settings.url, {\r\n        body: settings.data,\r\n        headers: settings.headers,\r\n      }).subscribe(res => resolve(res), err => {\r\n        let e = new AppAuthError(err);\r\n        if (err instanceof HttpErrorResponse) {\r\n          e = new AppAuthError(err.error?.error || err.statusText);\r\n        }\r\n        reject(e);\r\n      });\r\n    });\r\n  }\r\n}\r\n","import { AuthorizationServiceConfiguration, AuthorizationServiceConfigurationJson, JQueryRequestor, Requestor } from '@openid/appauth';\r\n\r\nconst WELL_KNOWN_PATH = '.well-known';\r\nconst OPENID_CONFIGURATION = 'openid-configuration';\r\n\r\nexport interface NucleusAuthorizationServiceConfigurationJson extends AuthorizationServiceConfigurationJson  {\r\n  device_authorization_endpoint?: string;\r\n  registration_endpoint?: string;\r\n}\r\n\r\nexport class NucleusAuthorizationServiceConfiguration extends AuthorizationServiceConfiguration {\r\n\r\n  constructor(request: NucleusAuthorizationServiceConfigurationJson) {\r\n    super(request);\r\n    this.deviceAuthorizationEndpoint = request.device_authorization_endpoint;\r\n    this.registrationEndpoint = request.registration_endpoint;\r\n  }\r\n\r\n  deviceAuthorizationEndpoint: string;\r\n  registrationEndpoint: string;\r\n\r\n  static fetchFromIssuer(openIdIssuerUrl: string, requestor?: Requestor) {\r\n    const fullUrl = `${openIdIssuerUrl}/${WELL_KNOWN_PATH}/${OPENID_CONFIGURATION}`;\r\n    const requestorToUse = requestor || new JQueryRequestor();\r\n    return requestorToUse\r\n        .xhr<NucleusAuthorizationServiceConfigurationJson>({url: fullUrl, dataType: 'json', method: 'GET'})\r\n        .then(json => new NucleusAuthorizationServiceConfiguration(json));\r\n  }\r\n\r\n  toJson() {\r\n    const res = super.toJson() as NucleusAuthorizationServiceConfigurationJson;\r\n    res.device_authorization_endpoint = this.deviceAuthorizationEndpoint;\r\n    return res as any;\r\n  }\r\n}\r\n","import { Injectable } from '@angular/core';\r\nimport { NucleusAppService } from '@kolektor/nucleus-common';\r\nimport { NucleusIdentityConfig } from '../nucleus-identity-config';\r\nimport { AngularRequestor } from './angular-requestor';\r\nimport { NucleusAuthorizationServiceConfiguration } from './authorization-service-configuration';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class OidcConfigurationService {\r\n  constructor(\r\n    private requestor: AngularRequestor,\r\n    private config: NucleusIdentityConfig,\r\n    private appService: NucleusAppService,\r\n  ) {\r\n  }\r\n\r\n  private _configuration: NucleusAuthorizationServiceConfiguration = null;\r\n\r\n  public async getConfiguration() {\r\n      await this.assureConfiguration();\r\n      return this._configuration;\r\n  }\r\n\r\n  public get clientId() {\r\n    return this.config.clientId;\r\n  }\r\n\r\n  public get requestedScopes() {\r\n    return this.config.requestedScopes;\r\n  }\r\n\r\n  public get servicePrincipalRequestedScopes() {\r\n    return this.config.servicePrincipalRequestedScopes;\r\n  }\r\n\r\n  public get authProviderHint() {\r\n    return this.config.authProviderHint;\r\n  }\r\n\r\n  public get redirectUrl() {\r\n    let uri = window.location.href;\r\n    const platform = this.appService.platform;\r\n    if (platform === 'android' && this.config.androidRedirectUri) {\r\n      uri = this.config.androidRedirectUri;\r\n    } else if (platform === 'ios' && this.config.iOSRedirectUri) {\r\n      uri = this.config.iOSRedirectUri;\r\n    } else if (this.config.redirectUri) {\r\n      uri = this.config.redirectUri;\r\n    }\r\n    return this.NormalizeRedirectUri(uri);\r\n  }\r\n\r\n  public getServerUrl(relativeUri: string = null) {\r\n    let authority = this.config.authority;\r\n    if (!authority || authority === 'origin') {\r\n      authority = window.origin;\r\n    }\r\n\r\n    let url = new URL(authority);\r\n\r\n    if (relativeUri) {\r\n      url = new URL(relativeUri, url);\r\n    }\r\n\r\n    return url.href;\r\n  }\r\n\r\n  private NormalizeRedirectUri(uri: string) {\r\n    const i = uri.indexOf('#');\r\n    if (i > 0) {\r\n      uri = uri.substring(0, i);\r\n    }\r\n    return uri;\r\n  }\r\n\r\n  private async assureConfiguration() {\r\n    if (this._configuration != null) {\r\n      return;\r\n    }\r\n    let authority = this.getServerUrl();\r\n    if (authority[authority.length - 1] === '/') {\r\n      authority = authority.slice(0, -1);\r\n    }\r\n    try {\r\n      this._configuration = await NucleusAuthorizationServiceConfiguration.fetchFromIssuer(authority, this.requestor);\r\n    } catch (e) {\r\n      console.error('Nucleus.Identity: Cannot load OIDC configuration: ' + (e as Error).message);\r\n      throw e;\r\n    }\r\n  }\r\n}\r\n","import { nowInSeconds } from '@openid/appauth';\r\n\r\nexport interface DeviceCodeJson {\r\n  device_code: string;\r\n  user_code: string;\r\n  verification_uri: string;\r\n  verification_uri_complete: string;\r\n  expires_in: string;\r\n  message: string;\r\n}\r\n\r\nexport class DeviceCode {\r\n  constructor(response: DeviceCodeJson) {\r\n    this.deviceCode = response.device_code;\r\n    this.userCode = response.user_code;\r\n    this.verificationUrl = response.verification_uri;\r\n    this.verificationUrlComplete = response.verification_uri_complete;\r\n    this.expiresIn = parseInt(response.expires_in, 10);\r\n    this.issuedAt =  nowInSeconds();\r\n  }\r\n\r\n  private expiresIn: number;\r\n  private issuedAt: number;\r\n\r\n  public deviceCode: string;\r\n  public userCode: string;\r\n  public verificationUrl: string;\r\n  public verificationUrlComplete: string;\r\n\r\n  isExpired(buffer: number = 60) {\r\n\r\n    return this.secondsLeft(buffer) <= 0;\r\n  }\r\n\r\n  secondsLeft(buffer: number = 60) {\r\n    const now = nowInSeconds();\r\n    return (this.issuedAt + this.expiresIn - buffer) - now;\r\n  }\r\n}\r\n","export interface ClientRegistrationResponseJson {\r\n  client_id: string;\r\n  client_secret: string;\r\n  client_secret_expires_at: number;\r\n}\r\n\r\nexport class ClientRegistrationResponse {\r\n  constructor(response: ClientRegistrationResponseJson) {\r\n    this.clientId = response.client_id;\r\n    this.clientSecret = response.client_secret;\r\n    this.secretExpirationDate = new Date(response.client_secret_expires_at * 1000);\r\n  }\r\n\r\n  clientId: string;\r\n  clientSecret: string;\r\n  secretExpirationDate: Date;\r\n}\r\n","import {\r\n  AppAuthError,\r\n  BaseTokenRequestHandler,\r\n  BasicQueryStringUtils,\r\n  GRANT_TYPE_AUTHORIZATION_CODE,\r\n  GRANT_TYPE_REFRESH_TOKEN,\r\n  QueryStringUtils,\r\n  StringMap,\r\n  TokenErrorJson,\r\n  TokenRequest,\r\n  TokenRequestHandler} from '@openid/appauth';\r\nimport { OidcConfigurationService } from './oidc-configuration.service';\r\nimport { AngularRequestor } from './angular-requestor';\r\nimport { Injectable } from '@angular/core';\r\nimport { DeviceCode, DeviceCodeJson } from '../models/device-code';\r\nimport { ClientRegistrationResponse, ClientRegistrationResponseJson } from '../models/client-registration';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class TokenClient  {\r\n  constructor(\r\n    private requestor: AngularRequestor,\r\n    private config: OidcConfigurationService\r\n  ) {\r\n    this._tokenHandler = new BaseTokenRequestHandler(requestor);\r\n    this._utils = new BasicQueryStringUtils();\r\n  }\r\n\r\n  private _tokenHandler: TokenRequestHandler;\r\n  private _utils: QueryStringUtils;\r\n\r\n  public async getByAuthorizationCode(redirectUrl: string, code: string, codeVerifier: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const redirectUri = redirectUrl;\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: redirectUri,\r\n      grant_type: GRANT_TYPE_AUTHORIZATION_CODE,\r\n      code,\r\n      extras: { code_verifier: codeVerifier }\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getByRefreshToken(refreshToken: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const redirectUri = this.config.redirectUrl;\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: redirectUri,\r\n      grant_type: GRANT_TYPE_REFRESH_TOKEN,\r\n      refresh_token: refreshToken\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getByClientCredentials(clientId: string, clientSecret: string, scope: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const req = new TokenRequest({\r\n      client_id: clientId,\r\n      redirect_uri: null,\r\n      grant_type: 'client_credentials',\r\n      extras: {\r\n        client_secret: clientSecret,\r\n        scope,\r\n      }\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getBySecret(provider: string, secret: string, assertionToken: string, scope: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: null,\r\n      grant_type: 'urn:kolektor:nucleus:secret',\r\n      extras: {\r\n        secret_provider: provider,\r\n        secret_value: secret,\r\n        client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',\r\n        client_assertion: assertionToken,\r\n        scope,\r\n      }\r\n    });\r\n\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getByDeviceCode(deviceCode: string) {\r\n    const config =  await this.config.getConfiguration();\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: null,\r\n      grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\r\n      extras: {\r\n        device_code: deviceCode\r\n      }\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async registerServicePrincipal(token: string) {\r\n    const config =  await this.config.getConfiguration();\r\n\r\n    const response = await this.requestor.xhr<ClientRegistrationResponseJson | TokenErrorJson>({\r\n      url: config.registrationEndpoint,\r\n      method: 'POST',\r\n      dataType: 'json',\r\n      headers: {\r\n        'Content-Type': 'application/json',\r\n        Authorization: `Bearer ${token}`\r\n      }\r\n      // data: this._utils.stringify(map)\r\n    });\r\n\r\n    if ((response as TokenErrorJson).error === undefined) {\r\n      return new ClientRegistrationResponse(response as ClientRegistrationResponseJson);\r\n    } else {\r\n      throw new AppAuthError((response as TokenErrorJson).error);\r\n    }\r\n  }\r\n\r\n  public async getRegistrationCode(existingServicePrincipalId: string = null) {\r\n    const params = {\r\n      custom_action: 'sp_register',\r\n      service_principal_id: existingServicePrincipalId\r\n    };\r\n    return this.getDeviceCodeInternal(params);\r\n  }\r\n\r\n  public async getDeviceCode(scope: string) {\r\n    const params = {\r\n      scope,\r\n    };\r\n    return this.getDeviceCodeInternal(params);\r\n  }\r\n\r\n  private async getDeviceCodeInternal(params: StringMap) {\r\n    const config =  await this.config.getConfiguration();\r\n\r\n    params['client_id'] = this.config.clientId;\r\n    const map: StringMap = params;\r\n\r\n    const response = await this.requestor.xhr<DeviceCodeJson | TokenErrorJson>({\r\n      url: config.deviceAuthorizationEndpoint,\r\n      method: 'POST',\r\n      dataType: 'json',\r\n      headers: {'Content-Type': 'application/x-www-form-urlencoded'},\r\n      data: this._utils.stringify(map)\r\n    });\r\n\r\n    if ((response as TokenErrorJson).error === undefined) {\r\n      return new DeviceCode(response as DeviceCodeJson);\r\n    } else {\r\n      throw new AppAuthError((response as TokenErrorJson).error);\r\n    }\r\n  }\r\n\r\n\r\n}\r\n","export class ServicePrincipal {\r\n  public id: string;\r\n  public secret: string;\r\n  public expiresAt: Date;\r\n}\r\n\r\nexport class ServicePrincipalRegistrationStatus {\r\n  public id: string;\r\n  public isRegistered = false;\r\n  public expiresAt: Date;\r\n\r\n  constructor(servicePrincipal: ServicePrincipal) {\r\n    if (servicePrincipal) {\r\n      this.isRegistered = true;\r\n      this.id = servicePrincipal.id;\r\n      this.expiresAt = servicePrincipal.expiresAt;\r\n    }\r\n  }\r\n\r\n  public get isExpired() {\r\n    return false;\r\n  }\r\n}\r\n","import {\r\n  AuthorizationRequest,\r\n  TokenResponse,\r\n  Crypto,\r\n  RedirectRequestHandler,\r\n  BasicQueryStringUtils,\r\n  LocalStorageBackend,\r\n  AppAuthError\r\n} from '@openid/appauth';\r\n\r\nimport { Injectable } from '@angular/core';\r\nimport { App } from '@capacitor/app';\r\nimport { Browser } from '@capacitor/browser';\r\nimport { Device } from '@capacitor/device';\r\nimport { NucleusCrypto } from './utils/nucleus-crypto';\r\nimport { NucleusAppService } from '@kolektor/nucleus-common';\r\nimport { LocationService } from './utils/location.service';\r\nimport { AuthorizationRequestHandler } from '@openid/appauth';\r\nimport { NucleusAuthorizationNotifier } from './utils/nucleus-authorization-notifier';\r\nimport { HttpClient } from '@angular/common/http';\r\nimport { OtpResponse, OtpStatus, OtpType } from './models/otp';\r\nimport { SecretsStore } from './utils/secrets-store';\r\nimport { OidcConfigurationService } from './utils/oidc-configuration.service';\r\nimport { TokenClient } from './utils/token-client';\r\nimport { DeviceCode } from './models/device-code';\r\nimport { ServicePrincipalRegistrationStatus } from './models/service-principal';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class NucleusIdentityService {\r\n  constructor(\r\n    private appService: NucleusAppService,\r\n    location: LocationService,\r\n    private http: HttpClient,\r\n    private config: OidcConfigurationService,\r\n    private tokenClient: TokenClient\r\n  ) {\r\n    const storage = new LocalStorageBackend();\r\n    this._crypto = new NucleusCrypto();\r\n    this._authorizationHandler = new RedirectRequestHandler(storage, new BasicQueryStringUtils(), location, this._crypto);\r\n    this._authorizationHandler.setAuthorizationNotifier(this._authorizationNotifier);\r\n    this._store = new SecretsStore(config.clientId);\r\n  }\r\n\r\n  // TODO: add some kind of config that will specify which token (userToken or servicePrincipalToken) should be injected by httpInterceptor\r\n\r\n  private _authorizationHandler: AuthorizationRequestHandler;\r\n  private _authorizationNotifier = new NucleusAuthorizationNotifier();\r\n  private _crypto: Crypto;\r\n  private _initStarted = false;\r\n  private _initialized = false;\r\n  private _refreshTokenPromise: Promise<TokenResponse>;\r\n  private _getTokenPromise: Promise<string>;\r\n  private _getServicePrincipalTokenPromise: Promise<string>;\r\n  private _servicePrincipalTokenId = '_svcp';\r\n  private _store: SecretsStore;\r\n\r\n  public get identity() {\r\n    return this._store.getIdentity();\r\n  }\r\n\r\n  public get isAuthenticated() {\r\n    return this.identity != null;\r\n  }\r\n\r\n  public get servicePrincipalIdentity() {\r\n    return this._store.getIdentity(this._servicePrincipalTokenId);\r\n  }\r\n\r\n  public get isServicePrincipalAuthenticated() {\r\n    return this.servicePrincipalIdentity != null;\r\n  }\r\n\r\n  public async init(startLogin: boolean = false): Promise<void> {\r\n    if (this._initStarted || this._initialized) {\r\n      console.warn('Nucleus.Identity: Auth initialization was already started. Don\\'t call init() multiple times!');\r\n      return;\r\n    }\r\n    this._initStarted = true;\r\n\r\n    this.handleLaunchCodeHash();\r\n    await this._authorizationHandler.completeAuthorizationRequestIfPossible();\r\n\r\n    const authErr = this._authorizationNotifier.error;\r\n    if (authErr) {\r\n      throw new Error('Authorization err: ' + authErr.error + ': ' + authErr.errorDescription);\r\n    } else if (this._authorizationNotifier.response) {\r\n      window.location.hash = '';\r\n      const request = this._authorizationNotifier.request;\r\n      const response = this._authorizationNotifier.response;\r\n      const res = await this.tokenClient.getByAuthorizationCode(request.redirectUri, response.code, request.internal['code_verifier']);\r\n      await this._store.setToken(res);\r\n    } else {\r\n      const res = await this._store.getToken();\r\n      if (!res && startLogin) {\r\n        await this.login();\r\n      }\r\n    }\r\n    this._initialized = true;\r\n  }\r\n\r\n  public async loginWithSecret(provider: string, secret: string): Promise<void> {\r\n    this._store.removeToken();\r\n    const assertionToken = await this.getServicePrincipalAccessToken();\r\n    const scope = this.prepareScope(true, this.config?.requestedScopes);\r\n    const res = await this.tokenClient.getBySecret(provider, secret, assertionToken, scope);\r\n    await this._store.setToken(res);\r\n  }\r\n\r\n  public async login(): Promise<void> {\r\n    this._store.removeToken();\r\n    const config = await this.config.getConfiguration();\r\n    const request = this.prepareAuthorizationRequest();\r\n    if (this.appService.isNative) {\r\n      const listener = App.addListener('appUrlOpen', data => {\r\n        if (this.appService.platform === 'ios') {\r\n          Browser.close();\r\n        }\r\n        listener.remove();\r\n        const hash = this.getCodeHash(data.url);\r\n        if (hash) {\r\n          const targetUrl = window.location.origin + window.location.pathname + '#' + hash;\r\n          window.location.assign(targetUrl);\r\n          window.location.reload();\r\n        } else {\r\n          console.warn('Nucleus.Identity: Redirect url did not contain authorization code!', data);\r\n        }\r\n      });\r\n    }\r\n    this._authorizationHandler.performAuthorizationRequest(config, request);\r\n  }\r\n\r\n  public async logout(): Promise<void> {\r\n    this._store.removeToken();\r\n    const config = await this.config.getConfiguration();\r\n    const redirectUrl = this.config.redirectUrl;\r\n    const logoutUrl = config.endSessionEndpoint + '?post_logout_redirect_uri=' + encodeURI(redirectUrl);\r\n    if (this.appService.isNative) {\r\n      const listener = App.addListener('appUrlOpen', () => {\r\n        Device.getInfo().then(info => {\r\n          if (info.platform === 'ios') {\r\n            Browser.close();\r\n          }\r\n        });\r\n        listener.remove();\r\n      });\r\n      Browser.open({ url: logoutUrl });\r\n    } else {\r\n      window.location.assign(logoutUrl);\r\n    }\r\n  }\r\n\r\n  public async getAccessToken() {\r\n    if (!this._getTokenPromise) {\r\n      this._getTokenPromise = this.getAccessTokenInternal();\r\n    }\r\n    try {\r\n      return await this._getTokenPromise;\r\n    } finally {\r\n      this._getTokenPromise = null;\r\n    }\r\n  }\r\n\r\n  public async getServicePrincipalAccessToken() {\r\n    if (!this._getServicePrincipalTokenPromise) {\r\n      this._getServicePrincipalTokenPromise = this.getServicePrincipalAccessTokenInternal();\r\n    }\r\n    try {\r\n      return await this._getServicePrincipalTokenPromise;\r\n    } finally {\r\n      this._getServicePrincipalTokenPromise = null;\r\n    }\r\n  }\r\n\r\n  public async loginServicePrincipal() {\r\n    await this.loginServicePrincipalInternal();\r\n  }\r\n\r\n  /*\r\n  public async loginAsServicePrincipal() {\r\n    let token = await this._store.getToken(this._servicePrincipalTokenId);\r\n    if (!token) {\r\n      await this.loginServicePrincipal();\r\n    }\r\n    token = await this._store.getToken(this._servicePrincipalTokenId);\r\n     // TODO: we have to distinguished that token is service principal so refresh token stuff is handled correctly.\r\n     // We have to implement universal getAccessToken function that can handle all cases\r\n    await this._store.setToken(token);\r\n  }\r\n  */\r\n\r\n  public async getOtp(type: OtpType, expiresIn: number = -1) {\r\n    let url = this.config.getServerUrl(`/otp/create?type=${type}`);\r\n    if (expiresIn > 0) {\r\n      url += `&expiresIn=${expiresIn}`;\r\n    }\r\n    return this.http.get<OtpResponse>(url).toPromise();\r\n  }\r\n\r\n  public async getOtpStatus(id: string) {\r\n    const url = this.config.getServerUrl(`/otp/status/${id}`);\r\n    return this.http.get<OtpStatus>(url).toPromise();\r\n  }\r\n\r\n  public getOtpUrl(redirectUrl: string, password: string) {\r\n    const encoded = encodeURIComponent(redirectUrl);\r\n    const url = `/otp/auth?otpValue=${password}&returnUrl=${encoded}`;\r\n    return this.config.getServerUrl(url);\r\n  }\r\n\r\n  public async startServicePrincipalRegistration() {\r\n    const sp = await this._store.getServicePrincipal();\r\n    return await this.tokenClient.getRegistrationCode(sp?.id);\r\n  }\r\n\r\n  public async completeServicePrincipalRegistration(deviceCode: DeviceCode) {\r\n    const tokenRes = await this.waitForDeviceToken(deviceCode);\r\n    const regRes = await this.tokenClient.registerServicePrincipal(tokenRes.accessToken);\r\n\r\n    await this._store.setServicePrincipal({\r\n      id: regRes.clientId,\r\n      secret: regRes.clientSecret,\r\n      expiresAt: regRes.secretExpirationDate\r\n    });\r\n  }\r\n\r\n  public removeServicePrincipalRegistration() {\r\n    return this._store.removeServicePrincipal();\r\n  }\r\n\r\n  public async getServicePrincipalRegistrationStatus() {\r\n    const sp = await this._store.getServicePrincipal();\r\n    return new ServicePrincipalRegistrationStatus(sp);\r\n  }\r\n\r\n  public async startDeviceCodeLogin() {\r\n    const scope = this.prepareScope(true, this.config.requestedScopes);\r\n    return await this.tokenClient.getDeviceCode(scope);\r\n  }\r\n\r\n  public async completeDeviceCodeLogin(deviceCode: DeviceCode) {\r\n    const res = await this.waitForDeviceToken(deviceCode);\r\n    await this._store.setToken(res);\r\n  }\r\n\r\n  private async waitForDeviceToken(deviceCode: DeviceCode) {\r\n    let res: TokenResponse = null;\r\n    do {\r\n      if (deviceCode.isExpired()) {\r\n        throw Error('Device code is expired!');\r\n      }\r\n\r\n      try {\r\n        res = await this.tokenClient.getByDeviceCode(deviceCode.deviceCode);\r\n      } catch (error) {\r\n        if (error instanceof AppAuthError && error.message === 'authorization_pending') {\r\n          await this.delay(2000);\r\n        } else {\r\n          throw error;\r\n        }\r\n      }\r\n    } while (!res);\r\n    return res;\r\n  }\r\n\r\n  private prepareAuthorizationRequest(): AuthorizationRequest {\r\n    const redirectUri = this.config.redirectUrl;\r\n\r\n    const params = {\r\n      response_mode: 'fragment',\r\n      prompt: 'consent',\r\n      access_type: 'offline',\r\n      auth_provider_hint: this.config.authProviderHint\r\n    };\r\n\r\n    return new AuthorizationRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: redirectUri,\r\n      response_type: AuthorizationRequest.RESPONSE_TYPE_CODE,\r\n      scope: this.prepareScope(true, this.config.requestedScopes),\r\n      extras: params,\r\n    }, this._crypto, true);\r\n  }\r\n\r\n  private async loginServicePrincipalInternal() {\r\n    const sp = await this._store.getServicePrincipal();\r\n    if (sp) {\r\n      const scope = this.prepareScope(false, this.config.servicePrincipalRequestedScopes);\r\n      const res = await this.tokenClient.getByClientCredentials(sp.id, sp.secret, scope);\r\n      await this._store.setToken(res, this._servicePrincipalTokenId);\r\n      return res;\r\n    } else {\r\n      throw Error('Service principal is not registered!');\r\n    }\r\n  }\r\n\r\n  private async getServicePrincipalAccessTokenInternal() {\r\n    let token = await this._store.getToken(this._servicePrincipalTokenId);\r\n    if (!token?.isValid()) {\r\n      token = await this.loginServicePrincipalInternal();\r\n    }\r\n    return token?.accessToken;\r\n  }\r\n\r\n  private async getAccessTokenInternal() {\r\n    let token = await this._store.getToken();\r\n    if (token && !token.isValid()) {\r\n      token = await this.loginWithRefreshToken(token);\r\n    }\r\n    return token?.accessToken;\r\n  }\r\n\r\n  private async loginWithRefreshToken(token: TokenResponse) {\r\n    if (!this._refreshTokenPromise) {\r\n      this._refreshTokenPromise = this.loginWithRefreshTokenInternal(token);\r\n    }\r\n    try {\r\n      return await this._refreshTokenPromise;\r\n    } finally {\r\n      this._refreshTokenPromise = null;\r\n    }\r\n  }\r\n\r\n  private async loginWithRefreshTokenInternal(token: TokenResponse) {\r\n    if (token?.refreshToken) {\r\n      try {\r\n        const res = await this.tokenClient.getByRefreshToken(token.refreshToken);\r\n        await this._store.setToken(res);\r\n        return res;\r\n      } catch (err) {\r\n        console.warn('Nucleus.Identity: Failed to login with refresh token.', err);\r\n        if (err.message === 'invalid_grant') {\r\n          await this.logout();\r\n        }\r\n      }\r\n    } else {\r\n      console.warn('Nucleus.Identity: There is no refresh token available.');\r\n    }\r\n  }\r\n\r\n  private getCodeHash(url: string) {\r\n    const arr = url.split('#');\r\n    if (arr.length > 1) {\r\n      const hash = arr[1];\r\n      if (hash.startsWith('code=')) {\r\n        return hash;\r\n      }\r\n    }\r\n    return null;\r\n  }\r\n\r\n  private handleLaunchCodeHash() {\r\n    if (this.appService.isNative && this.appService.launchUrl) {\r\n      const hash = this.getCodeHash(this.appService.launchUrl);\r\n      if (hash) {\r\n        console.log('Nucleus.Identity: Got authorization code from launchUrl, will assign it to hash.');\r\n        window.location.hash = '#' + hash;\r\n      }\r\n    }\r\n  }\r\n\r\n  private prepareScope(offlineAccess: boolean, aditionalScope: string) {\r\n    let scope = 'openid';\r\n    if (offlineAccess) {\r\n      scope += ' offline_access';\r\n    }\r\n    if (scope) {\r\n      scope += ' ' + aditionalScope;\r\n    }\r\n    return scope;\r\n  }\r\n\r\n  private delay(miliseconds: number) {\r\n    return new Promise<void>(resolve => {\r\n      setTimeout(() => {\r\n        resolve();\r\n      }, miliseconds);\r\n    });\r\n  }\r\n}\r\n","import { Injectable } from '@angular/core';\r\nimport { HttpEvent, HttpHandler, HttpInterceptor, HttpRequest, HttpErrorResponse } from '@angular/common/http';\r\nimport { Observable, from, throwError } from 'rxjs';\r\nimport { NucleusIdentityConfig } from './nucleus-identity-config';\r\nimport { NucleusIdentityService } from './nucleus-identity.service';\r\nimport { mergeMap, catchError } from 'rxjs/operators';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class NucleusTokenInterceptor implements HttpInterceptor {\r\n  constructor(private auth: NucleusIdentityService, private config: NucleusIdentityConfig\r\n  ) {\r\n    this._authority = config.authority.toLowerCase();\r\n    this._interceptUrls = config.httpInterceptorUrls?.map(x => x.toLowerCase());\r\n  }\r\n\r\n  private _authority: string;\r\n  private _authorityInterceptPaths = ['/api', '/manage', '/otp/create', '/otp/status'];\r\n  private _interceptUrls: string[];\r\n\r\n  public intercept(req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\r\n    if (this.shouldIntercept(req.url)) {\r\n      const res = this.authorizeRequest(this.auth.getAccessToken(), req, next);\r\n      return this.checkUnauthorized(res);\r\n    }\r\n    return next.handle(req);\r\n  }\r\n\r\n  private shouldIntercept(url: string): boolean {\r\n    url = url.toLowerCase();\r\n\r\n    if (url.startsWith(this._authority)) {\r\n      const pathname = new URL(url).pathname;\r\n      return (this._authorityInterceptPaths.some(x => pathname.startsWith(x)));\r\n    }\r\n\r\n    if (this._interceptUrls?.length > 0) {\r\n      return this.config.httpInterceptorUrls.some(x => url.startsWith(x));\r\n    }\r\n    return false;\r\n  }\r\n\r\n  private authorizeRequest(getToken: Promise<string>, req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\r\n    return from(getToken).pipe(\r\n      mergeMap(token => {\r\n        if (token) {\r\n            const headers = req.headers.set('Authorization', `Bearer ${token}`);\r\n            req = req.clone({ headers });\r\n        }\r\n        return next.handle(req);\r\n      })\r\n    );\r\n  }\r\n\r\n  private checkUnauthorized(response: Observable<HttpEvent<any>>): Observable<HttpEvent<any>> {\r\n    return response.pipe(\r\n      catchError((err) => {\r\n        if (err instanceof HttpErrorResponse && err.status === 401) {\r\n          if (this.config.automaticLoginOnHttp401) {\r\n            this.auth.login();\r\n          }\r\n        }\r\n        return throwError(err);\r\n      })\r\n    );\r\n  }\r\n}\r\n","import { NgModule, ModuleWithProviders } from '@angular/core';\r\nimport { HTTP_INTERCEPTORS } from '@angular/common/http';\r\nimport { NucleusTokenInterceptor } from './nucleus-token-interceptor.service';\r\nimport { NucleusIdentityConfig } from './nucleus-identity-config';\r\n\r\n@NgModule({\r\n  imports: [\r\n  ],\r\n  declarations: [\r\n  ],\r\n  exports: [\r\n  ]\r\n})\r\n\r\nexport class NucleusIdentityModule {\r\n\r\n  static forRoot(config: NucleusIdentityConfig): ModuleWithProviders<NucleusIdentityModule> {\r\n    return {\r\n      ngModule: NucleusIdentityModule,\r\n      providers: [\r\n        { provide: NucleusIdentityConfig, useValue: config },\r\n        { provide: HTTP_INTERCEPTORS, useClass: NucleusTokenInterceptor, multi: true },\r\n      ]\r\n    };\r\n  }\r\n}\r\n","export class OtpResponse {\r\n    public password: string;\r\n    public passwordId: string;\r\n}\r\n\r\nexport class OtpStatus {\r\n    public isExpired: boolean;\r\n    public isUsed: boolean;\r\n    public secondsToExpiration: number;\r\n}\r\n\r\nexport enum OtpType {\r\n  SimpleNumbers = 0,\r\n  SimpleAlfanumeric = 1,\r\n  Complex = 2\r\n}\r\n","/*\r\n * Public API Surface of nucleus-identity\r\n */\r\n\r\nexport * from './lib/nucleus-identity.module';\r\nexport * from './lib/nucleus-identity.service';\r\nexport * from './lib/nucleus-identity-config';\r\nexport { OtpResponse, OtpStatus, OtpType } from './lib/models/otp';\r\nexport { DeviceCode } from './lib/models/device-code';\r\nexport { Identity } from './lib/models/identity';\r\nexport { ServicePrincipalRegistrationStatus } from './lib/models/service-principal';\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;;;;;;;;;;MAAa,qBAAqB;IAAlC;QACS,cAAS,GAAW,IAAI,CAAC;QAUzB,wBAAmB,GAAc,EAAE,CAAC;QAEpC,4BAAuB,GAAG,KAAK,CAAC;KAOxC;;;ACfD,MAAM,OAAO,GAAG,gEAAgE,CAAC;MAEpE,aAAa;IAA1B;QACU,kBAAa,GAAG,MAAM,CAAC,MAAM,IAAK,MAAc,CAAC,QAAQ,CAAC;KAmEnE;IAjEC,cAAc,CAAC,IAAY;QACzB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,aAAa,EAAE;YACtB,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;SAC5C;aAAM;;YAEL,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;gBAChC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;aAC3B;SACF;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;KACpC;IAED,eAAe,CAAC,IAAY;QAC1B,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;YACzC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,sBAAsB,CAAC,CAAC,CAAC;SACjE;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;YAC9B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,sCAAsC,CAAC,CAAC,CAAC;SACjF;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM;;;YAGjC,IAAI,EAAE,CAAC,SAAS,EAAE;gBAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBACzC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE;oBAC9B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;iBAClC,CAAC,CAAC;gBAEH,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE;oBAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;iBACnB,CAAC,CAAC;aACJ;iBAAM;gBACL,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;aAC1E;SACF,CAAC,CAAC;KACJ;IAGO,OAAO,CAAC,MAAkB;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;KAC1E;IAEO,cAAc,CAAC,GAAW;QAChC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;QAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACnC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;SAChC;QACD,OAAO,OAAO,CAAC;KAChB;IAEO,cAAc,CAAC,MAAkB;QACvC,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;SAC5B;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KACvB;;;MClEU,eAAe;IAC1B,YAAoB,UAA6B;QAA7B,eAAU,GAAV,UAAU,CAAmB;KAChD;IAED,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC7B;IACD,IAAI,IAAI,CAAC,CAAC;QACR,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;KAC1B;IAED,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC7B;IACD,IAAI,IAAI,CAAC,CAAC;QACR,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;KAC1B;IAED,IAAI,MAAM;QACR,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC/B;IAED,IAAI,QAAQ;QACV,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjC;IACD,IAAI,QAAQ,CAAC,CAAC;QACZ,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;KAC9B;IAED,IAAI,QAAQ;QACV,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjC;IACD,IAAI,QAAQ,CAAC,CAAC;QACZ,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;KAC9B;IAED,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC7B;IACD,IAAI,IAAI,CAAC,CAAC;QACR,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;KAC1B;IAED,IAAI,QAAQ;QACV,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjC;IACD,IAAI,QAAQ,CAAC,CAAC;QACZ,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;KAC9B;IAED,IAAI,MAAM;QACR,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC/B;IACD,IAAI,MAAM,CAAC,CAAC;QACV,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;KAC5B;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;SACvB;aAAM;YACL,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SAC7B;KACF;;4GA/DU,eAAe;gHAAf,eAAe,cAFd,MAAM;2FAEP,eAAe;kBAH3B,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCHY,4BAA6B,SAAQ,qBAAqB;IAKnE;QACI,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK;YACnD,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;SACtB,CAAC,CAAC;KACN;;;MCfQ,KAAK;IAIhB,YAAY,IAAY,EAAE,MAAgB;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;KACtB;CACF;MAEY,QAAQ;IAArB;QAIS,WAAM,GAAY,EAAE,CAAC;KA2C7B;IAzCQ,OAAO,kBAAkB,CAAC,GAAkB;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC1B,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACrB,EAAE,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE;YACvB,IAAI,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE;gBACtC,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBAEtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBACxB,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;iBACf;gBAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACvB;SACF;QACD,OAAO,EAAE,CAAC;KACX;IAEO,OAAO,WAAW,CAAC,GAAW;QACpC,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;SAClF;QAED,IAAI;YACF,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;;YAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;;YAE9C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SAC5B;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;SAC/D;KACF;IAEO,OAAO,gBAAgB,CAAC,GAAW;QACzC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;KACzH;;;MCpDU,YAAY;IACvB,YAAY,QAAgB;QAMpB,YAAO,GAAoC,EAAE,CAAC;QAC9C,gBAAW,GAA+B,EAAE,CAAC;QANnD,IAAI,CAAC,sBAAsB,GAAG,oBAAoB,QAAQ,EAAE,CAAC;QAC7D,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,QAAQ,OAAO,CAAC;KACjE;IAQM,sBAAsB;QAC3B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;KAC9C;IAEY,mBAAmB,CAAC,gBAAkC;;YACjE,IAAI,CAAC,iBAAiB,GAAG,gBAAgB,CAAC;YAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;SAC9D;KAAA;IAEY,mBAAmB;;YAC9B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC3B,IAAI,CAAC,iBAAiB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAmB,IAAI,CAAC,oBAAoB,CAAC,CAAC;aACvF;YACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;SAC/B;KAAA;IAEM,QAAQ,CAAC,KAAoB,EAAE,KAAa,IAAI;QACrD,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;KAC/C;IAEM,WAAW,CAAC,KAAa,IAAI;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;KAC9B;IAEY,QAAQ,CAAC,KAAa,IAAI;;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;;YAGjC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBACtD,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;aACvC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;SAC1B;KAAA;IAEM,WAAW,CAAC,KAAa,IAAI;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;KACxB;IAEa,sBAAsB,CAAC,EAAU;;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAoB,GAAG,CAAC,CAAC;YAC5D,IAAI,WAAW,EAAE;gBACf,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;gBAC3C,IAAI,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,WAAW,MAAI,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,CAAA,EAAE;oBACpC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;iBAC7C;aACF;YACD,OAAO,IAAI,CAAC;SACb;KAAA;IAEa,gBAAgB,CAAC,KAAoB,EAAE,IAAa,EAAE,KAAa,IAAI;;YACnF,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,KAAK,IAAI,IAAI,EAAE;gBACjB,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;aAC5B;iBAAM;gBACL,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC1B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC3D,IAAI,IAAI,EAAE;oBACR,IAAI;wBACF,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;qBACtC;oBAAC,OAAO,CAAC,EAAE;wBACV,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;qBACpE;iBACF;aACF;SACF;KAAA;IAEO,WAAW,CAAC,KAAa,IAAI;QACnC,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,sBAAsB,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC;KAClF;IAEO,KAAK,CAAC,GAAW;QACvB,OAAO,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;KAC5C;IAEO,IAAI,CAAI,GAAW,EAAE,KAAQ;QACnC,OAAO,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;KACvE;IAEa,IAAI,CAAI,GAAW;;YAC/B,IAAI;gBACF,MAAM,CAAC,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,EAAE;oBACZ,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAM,CAAC;iBACjC;qBAAM;oBACL,OAAO,IAAI,CAAC;iBACb;aACF;YAAC,WAAM;gBACN,OAAO,IAAI,CAAC;aACb;SACF;KAAA;;;MC1GU,gBAAiB,SAAQ,SAAS;IAE7C,YAAoB,IAAgB;QAClC,KAAK,EAAE,CAAC;QADU,SAAI,GAAJ,IAAI,CAAY;KAEnC;;IAGD,GAAG,CAAI,QAA4B;QACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE;YACjC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;SACzB;QACD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM;YACpC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAI,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE;gBAClD,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG;;gBACnC,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,GAAG,YAAY,iBAAiB,EAAE;oBACpC,CAAC,GAAG,IAAI,YAAY,CAAC,CAAA,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,KAAI,GAAG,CAAC,UAAU,CAAC,CAAC;iBAC1D;gBACD,MAAM,CAAC,CAAC,CAAC,CAAC;aACX,CAAC,CAAC;SACJ,CAAC,CAAC;KACJ;;6GAvBU,gBAAgB;iHAAhB,gBAAgB,cAFf,MAAM;2FAEP,gBAAgB;kBAH5B,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;ACJD,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;MAOvC,wCAAyC,SAAQ,iCAAiC;IAE7F,YAAY,OAAqD;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,2BAA2B,GAAG,OAAO,CAAC,6BAA6B,CAAC;QACzE,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;KAC3D;IAKD,OAAO,eAAe,CAAC,eAAuB,EAAE,SAAqB;QACnE,MAAM,OAAO,GAAG,GAAG,eAAe,IAAI,eAAe,IAAI,oBAAoB,EAAE,CAAC;QAChF,MAAM,cAAc,GAAG,SAAS,IAAI,IAAI,eAAe,EAAE,CAAC;QAC1D,OAAO,cAAc;aAChB,GAAG,CAA+C,EAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAC,CAAC;aAClG,IAAI,CAAC,IAAI,IAAI,IAAI,wCAAwC,CAAC,IAAI,CAAC,CAAC,CAAC;KACvE;IAED,MAAM;QACJ,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAkD,CAAC;QAC3E,GAAG,CAAC,6BAA6B,GAAG,IAAI,CAAC,2BAA2B,CAAC;QACrE,OAAO,GAAU,CAAC;KACnB;;;MCxBU,wBAAwB;IACnC,YACU,SAA2B,EAC3B,MAA6B,EAC7B,UAA6B;QAF7B,cAAS,GAAT,SAAS,CAAkB;QAC3B,WAAM,GAAN,MAAM,CAAuB;QAC7B,eAAU,GAAV,UAAU,CAAmB;QAI/B,mBAAc,GAA6C,IAAI,CAAC;KAFvE;IAIY,gBAAgB;;YACzB,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,cAAc,CAAC;SAC9B;KAAA;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;KAC7B;IAED,IAAW,eAAe;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;KACpC;IAED,IAAW,+BAA+B;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC;KACpD;IAED,IAAW,gBAAgB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;KACrC;IAED,IAAW,WAAW;QACpB,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE;YAC5D,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;SACtC;aAAM,IAAI,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;YAC3D,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;SAClC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;YAClC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SAC/B;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;KACvC;IAEM,YAAY,CAAC,cAAsB,IAAI;QAC5C,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE;YACxC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;SAC3B;QAED,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7B,IAAI,WAAW,EAAE;YACf,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;SACjC;QAED,OAAO,GAAG,CAAC,IAAI,CAAC;KACjB;IAEO,oBAAoB,CAAC,GAAW;QACtC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,EAAE;YACT,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SAC3B;QACD,OAAO,GAAG,CAAC;KACZ;IAEa,mBAAmB;;YAC/B,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE;gBAC/B,OAAO;aACR;YACD,IAAI,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACpC,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;gBAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aACpC;YACD,IAAI;gBACF,IAAI,CAAC,cAAc,GAAG,MAAM,wCAAwC,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;aACjH;YAAC,OAAO,CAAC,EAAE;gBACV,OAAO,CAAC,KAAK,CAAC,oDAAoD,GAAI,CAAW,CAAC,OAAO,CAAC,CAAC;gBAC3F,MAAM,CAAC,CAAC;aACT;SACF;KAAA;;qHAjFU,wBAAwB;yHAAxB,wBAAwB,cAFvB,MAAM;2FAEP,wBAAwB;kBAHpC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCGY,UAAU;IACrB,YAAY,QAAwB;QAClC,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,yBAAyB,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,GAAI,YAAY,EAAE,CAAC;KACjC;IAUD,SAAS,CAAC,SAAiB,EAAE;QAE3B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;KACtC;IAED,WAAW,CAAC,SAAiB,EAAE;QAC7B,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,GAAG,CAAC;KACxD;;;MC/BU,0BAA0B;IACrC,YAAY,QAAwC;QAClD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,oBAAoB,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;KAChF;;;MCSU,WAAW;IACtB,YACU,SAA2B,EAC3B,MAAgC;QADhC,cAAS,GAAT,SAAS,CAAkB;QAC3B,WAAM,GAAN,MAAM,CAA0B;QAExC,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;KAC3C;IAKY,sBAAsB,CAAC,WAAmB,EAAE,IAAY,EAAE,YAAoB;;YACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,WAAW,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,6BAA6B;gBACzC,IAAI;gBACJ,MAAM,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;aACxC,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,iBAAiB,CAAC,YAAoB;;YACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,wBAAwB;gBACpC,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,sBAAsB,CAAC,QAAgB,EAAE,YAAoB,EAAE,KAAa;;YACvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,QAAQ;gBACnB,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,oBAAoB;gBAChC,MAAM,EAAE;oBACN,aAAa,EAAE,YAAY;oBAC3B,KAAK;iBACN;aACF,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,WAAW,CAAC,QAAgB,EAAE,MAAc,EAAE,cAAsB,EAAE,KAAa;;YAC9F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,6BAA6B;gBACzC,MAAM,EAAE;oBACN,eAAe,EAAE,QAAQ;oBACzB,YAAY,EAAE,MAAM;oBACpB,qBAAqB,EAAE,wDAAwD;oBAC/E,gBAAgB,EAAE,cAAc;oBAChC,KAAK;iBACN;aACF,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,eAAe,CAAC,UAAkB;;YAC7C,MAAM,MAAM,GAAI,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,8CAA8C;gBAC1D,MAAM,EAAE;oBACN,WAAW,EAAE,UAAU;iBACxB;aACF,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,wBAAwB,CAAC,KAAa;;YACjD,MAAM,MAAM,GAAI,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAErD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAkD;gBACzF,GAAG,EAAE,MAAM,CAAC,oBAAoB;gBAChC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;;aAEF,CAAC,CAAC;YAEH,IAAK,QAA2B,CAAC,KAAK,KAAK,SAAS,EAAE;gBACpD,OAAO,IAAI,0BAA0B,CAAC,QAA0C,CAAC,CAAC;aACnF;iBAAM;gBACL,MAAM,IAAI,YAAY,CAAE,QAA2B,CAAC,KAAK,CAAC,CAAC;aAC5D;SACF;KAAA;IAEY,mBAAmB,CAAC,6BAAqC,IAAI;;YACxE,MAAM,MAAM,GAAG;gBACb,aAAa,EAAE,aAAa;gBAC5B,oBAAoB,EAAE,0BAA0B;aACjD,CAAC;YACF,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;SAC3C;KAAA;IAEY,aAAa,CAAC,KAAa;;YACtC,MAAM,MAAM,GAAG;gBACb,KAAK;aACN,CAAC;YACF,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;SAC3C;KAAA;IAEa,qBAAqB,CAAC,MAAiB;;YACnD,MAAM,MAAM,GAAI,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAErD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC3C,MAAM,GAAG,GAAc,MAAM,CAAC;YAE9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAkC;gBACzE,GAAG,EAAE,MAAM,CAAC,2BAA2B;gBACvC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,EAAC,cAAc,EAAE,mCAAmC,EAAC;gBAC9D,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;aACjC,CAAC,CAAC;YAEH,IAAK,QAA2B,CAAC,KAAK,KAAK,SAAS,EAAE;gBACpD,OAAO,IAAI,UAAU,CAAC,QAA0B,CAAC,CAAC;aACnD;iBAAM;gBACL,MAAM,IAAI,YAAY,CAAE,QAA2B,CAAC,KAAK,CAAC,CAAC;aAC5D;SACF;KAAA;;wGAzIU,WAAW;4GAAX,WAAW,cAFV,MAAM;2FAEP,WAAW;kBAHvB,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCnBY,gBAAgB;CAI5B;MAEY,kCAAkC;IAK7C,YAAY,gBAAkC;QAHvC,iBAAY,GAAG,KAAK,CAAC;QAI1B,IAAI,gBAAgB,EAAE;YACpB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,gBAAgB,CAAC,SAAS,CAAC;SAC7C;KACF;IAED,IAAW,SAAS;QAClB,OAAO,KAAK,CAAC;KACd;;;MCSU,sBAAsB;IACjC,YACU,UAA6B,EACrC,QAAyB,EACjB,IAAgB,EAChB,MAAgC,EAChC,WAAwB;QAJxB,eAAU,GAAV,UAAU,CAAmB;QAE7B,SAAI,GAAJ,IAAI,CAAY;QAChB,WAAM,GAAN,MAAM,CAA0B;QAChC,gBAAW,GAAX,WAAW,CAAa;QAY1B,2BAAsB,GAAG,IAAI,4BAA4B,EAAE,CAAC;QAE5D,iBAAY,GAAG,KAAK,CAAC;QACrB,iBAAY,GAAG,KAAK,CAAC;QAIrB,6BAAwB,GAAG,OAAO,CAAC;QAjBzC,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,qBAAqB,GAAG,IAAI,sBAAsB,CAAC,OAAO,EAAE,IAAI,qBAAqB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtH,IAAI,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;KACjD;IAeD,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;KAClC;IAED,IAAW,eAAe;QACxB,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;KAC9B;IAED,IAAW,wBAAwB;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;KAC/D;IAED,IAAW,+BAA+B;QACxC,OAAO,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC;KAC9C;IAEY,IAAI,CAAC,aAAsB,KAAK;;YAC3C,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE;gBAC1C,OAAO,CAAC,IAAI,CAAC,+FAA+F,CAAC,CAAC;gBAC9G,OAAO;aACR;YACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAEzB,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,qBAAqB,CAAC,sCAAsC,EAAE,CAAC;YAE1E,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;YAClD,IAAI,OAAO,EAAE;gBACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;aAC1F;iBAAM,IAAI,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE;gBAC/C,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;gBACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;gBACtD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;gBACjI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;aACjC;iBAAM;gBACL,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE;oBACtB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;iBACpB;aACF;YACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;SAC1B;KAAA;IAEY,eAAe,CAAC,QAAgB,EAAE,MAAc;;;YAC3D,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,8BAA8B,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAA,IAAI,CAAC,MAAM,0CAAE,eAAe,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;YACxF,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;;KACjC;IAEY,KAAK;;YAChB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI;oBACjD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE;wBACtC,OAAO,CAAC,KAAK,EAAE,CAAC;qBACjB;oBACD,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAClB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACxC,IAAI,IAAI,EAAE;wBACR,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC;wBACjF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;wBAClC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;qBAC1B;yBAAM;wBACL,OAAO,CAAC,IAAI,CAAC,oEAAoE,EAAE,IAAI,CAAC,CAAC;qBAC1F;iBACF,CAAC,CAAC;aACJ;YACD,IAAI,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACzE;KAAA;IAEY,MAAM;;YACjB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,GAAG,4BAA4B,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YACpG,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE;oBAC7C,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI;wBACxB,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE;4BAC3B,OAAO,CAAC,KAAK,EAAE,CAAC;yBACjB;qBACF,CAAC,CAAC;oBACH,QAAQ,CAAC,MAAM,EAAE,CAAC;iBACnB,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;aAClC;iBAAM;gBACL,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACnC;SACF;KAAA;IAEY,cAAc;;YACzB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;aACvD;YACD,IAAI;gBACF,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC;aACpC;oBAAS;gBACR,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;aAC9B;SACF;KAAA;IAEY,8BAA8B;;YACzC,IAAI,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBAC1C,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC,sCAAsC,EAAE,CAAC;aACvF;YACD,IAAI;gBACF,OAAO,MAAM,IAAI,CAAC,gCAAgC,CAAC;aACpD;oBAAS;gBACR,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC;aAC9C;SACF;KAAA;IAEY,qBAAqB;;YAChC,MAAM,IAAI,CAAC,6BAA6B,EAAE,CAAC;SAC5C;KAAA;;;;;;;;;;;;;IAeY,MAAM,CAAC,IAAa,EAAE,YAAoB,CAAC,CAAC;;YACvD,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,SAAS,GAAG,CAAC,EAAE;gBACjB,GAAG,IAAI,cAAc,SAAS,EAAE,CAAC;aAClC;YACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAc,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;SACpD;KAAA;IAEY,YAAY,CAAC,EAAU;;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAY,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;SAClD;KAAA;IAEM,SAAS,CAAC,WAAmB,EAAE,QAAgB;QACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,sBAAsB,QAAQ,cAAc,OAAO,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;KACtC;IAEY,iCAAiC;;YAC5C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACnD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,EAAE,CAAC,CAAC;SAC3D;KAAA;IAEY,oCAAoC,CAAC,UAAsB;;YACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAErF,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBACpC,EAAE,EAAE,MAAM,CAAC,QAAQ;gBACnB,MAAM,EAAE,MAAM,CAAC,YAAY;gBAC3B,SAAS,EAAE,MAAM,CAAC,oBAAoB;aACvC,CAAC,CAAC;SACJ;KAAA;IAEM,kCAAkC;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;KAC7C;IAEY,qCAAqC;;YAChD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACnD,OAAO,IAAI,kCAAkC,CAAC,EAAE,CAAC,CAAC;SACnD;KAAA;IAEY,oBAAoB;;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACnE,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD;KAAA;IAEY,uBAAuB,CAAC,UAAsB;;YACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;SACjC;KAAA;IAEa,kBAAkB,CAAC,UAAsB;;YACrD,IAAI,GAAG,GAAkB,IAAI,CAAC;YAC9B,GAAG;gBACD,IAAI,UAAU,CAAC,SAAS,EAAE,EAAE;oBAC1B,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;iBACxC;gBAED,IAAI;oBACF,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;iBACrE;gBAAC,OAAO,KAAK,EAAE;oBACd,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,EAAE;wBAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;qBACxB;yBAAM;wBACL,MAAM,KAAK,CAAC;qBACb;iBACF;aACF,QAAQ,CAAC,GAAG,EAAE;YACf,OAAO,GAAG,CAAC;SACZ;KAAA;IAEO,2BAA2B;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAE5C,MAAM,MAAM,GAAG;YACb,aAAa,EAAE,UAAU;YACzB,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,SAAS;YACtB,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;SACjD,CAAC;QAEF,OAAO,IAAI,oBAAoB,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,oBAAoB,CAAC,kBAAkB;YACtD,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAC3D,MAAM,EAAE,MAAM;SACf,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;KACxB;IAEa,6BAA6B;;YACzC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACnD,IAAI,EAAE,EAAE;gBACN,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;gBACpF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACnF,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAC/D,OAAO,GAAG,CAAC;aACZ;iBAAM;gBACL,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;aACrD;SACF;KAAA;IAEa,sCAAsC;;YAClD,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACtE,IAAI,EAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,EAAE,CAAA,EAAE;gBACrB,KAAK,GAAG,MAAM,IAAI,CAAC,6BAA6B,EAAE,CAAC;aACpD;YACD,OAAO,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,CAAC;SAC3B;KAAA;IAEa,sBAAsB;;YAClC,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE;gBAC7B,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;aACjD;YACD,OAAO,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,CAAC;SAC3B;KAAA;IAEa,qBAAqB,CAAC,KAAoB;;YACtD,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAC9B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;aACvE;YACD,IAAI;gBACF,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC;aACxC;oBAAS;gBACR,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;aAClC;SACF;KAAA;IAEa,6BAA6B,CAAC,KAAoB;;YAC9D,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,YAAY,EAAE;gBACvB,IAAI;oBACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBACzE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAChC,OAAO,GAAG,CAAC;iBACZ;gBAAC,OAAO,GAAG,EAAE;oBACZ,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;oBAC3E,IAAI,GAAG,CAAC,OAAO,KAAK,eAAe,EAAE;wBACnC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;qBACrB;iBACF;aACF;iBAAM;gBACL,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;aACxE;SACF;KAAA;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE;YAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;gBAC5B,OAAO,IAAI,CAAC;aACb;SACF;QACD,OAAO,IAAI,CAAC;KACb;IAEO,oBAAoB;QAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,IAAI,EAAE;gBACR,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;gBAChG,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;aACnC;SACF;KACF;IAEO,YAAY,CAAC,aAAsB,EAAE,cAAsB;QACjE,IAAI,KAAK,GAAG,QAAQ,CAAC;QACrB,IAAI,aAAa,EAAE;YACjB,KAAK,IAAI,iBAAiB,CAAC;SAC5B;QACD,IAAI,KAAK,EAAE;YACT,KAAK,IAAI,GAAG,GAAG,cAAc,CAAC;SAC/B;QACD,OAAO,KAAK,CAAC;KACd;IAEO,KAAK,CAAC,WAAmB;QAC/B,OAAO,IAAI,OAAO,CAAO,OAAO;YAC9B,UAAU,CAAC;gBACT,OAAO,EAAE,CAAC;aACX,EAAE,WAAW,CAAC,CAAC;SACjB,CAAC,CAAC;KACJ;;mHA7VU,sBAAsB;uHAAtB,sBAAsB,cAFrB,MAAM;2FAEP,sBAAsB;kBAHlC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCnBY,uBAAuB;IAClC,YAAoB,IAA4B,EAAU,MAA6B;;QAAnE,SAAI,GAAJ,IAAI,CAAwB;QAAU,WAAM,GAAN,MAAM,CAAuB;QAO/E,6BAAwB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QALnF,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,CAAC,cAAc,GAAG,MAAA,MAAM,CAAC,mBAAmB,0CAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;KAC7E;IAMM,SAAS,CAAC,GAAqB,EAAE,IAAiB;QACvD,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;SACpC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACzB;IAEO,eAAe,CAAC,GAAW;;QACjC,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAExB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YACvC,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;SAC1E;QAED,IAAI,CAAA,MAAA,IAAI,CAAC,cAAc,0CAAE,MAAM,IAAG,CAAC,EAAE;YACnC,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;SACrE;QACD,OAAO,KAAK,CAAC;KACd;IAEO,gBAAgB,CAAC,QAAyB,EAAE,GAAqB,EAAE,IAAiB;QAC1F,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACxB,QAAQ,CAAC,KAAK;YACZ,IAAI,KAAK,EAAE;gBACP,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;gBACpE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;aAChC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SACzB,CAAC,CACH,CAAC;KACH;IAEO,iBAAiB,CAAC,QAAoC;QAC5D,OAAO,QAAQ,CAAC,IAAI,CAClB,UAAU,CAAC,CAAC,GAAG;YACb,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE;gBAC1D,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE;oBACvC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;iBACnB;aACF;YACD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;SACxB,CAAC,CACH,CAAC;KACH;;oHAxDU,uBAAuB;wHAAvB,uBAAuB,cAFtB,MAAM;2FAEP,uBAAuB;kBAHnC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCKY,qBAAqB;IAEhC,OAAO,OAAO,CAAC,MAA6B;QAC1C,OAAO;YACL,QAAQ,EAAE,qBAAqB;YAC/B,SAAS,EAAE;gBACT,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;gBACpD,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE;aAC/E;SACF,CAAC;KACH;;kHAVU,qBAAqB;mHAArB,qBAAqB;mHAArB,qBAAqB,YARvB,EACR;2FAOU,qBAAqB;kBATjC,QAAQ;mBAAC;oBACR,OAAO,EAAE,EACR;oBACD,YAAY,EAAE,EACb;oBACD,OAAO,EAAE,EACR;iBACF;;;MCZY,WAAW;CAGvB;MAEY,SAAS;CAIrB;IAEW;AAAZ,WAAY,OAAO;IACjB,uDAAiB,CAAA;IACjB,+DAAqB,CAAA;IACrB,2CAAW,CAAA;AACb,CAAC,EAJW,OAAO,KAAP,OAAO;;ACXnB;;;;ACAA;;;;;;"}