@kolektor/nucleus-identity 0.0.9-pre.5707 → 0.0.9-pre.5874

package/fesm2015/kolektor-nucleus-identity.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"kolektor-nucleus-identity.mjs","sources":["../../../projects/nucleus-identity/src/lib/utils/nucleus-crypto.ts","../../../projects/nucleus-identity/src/lib/utils/nucleus-authorization-notifier.ts","../../../projects/nucleus-identity/src/lib/models/identity.ts","../../../projects/nucleus-identity/src/lib/utils/secrets-store.ts","../../../projects/nucleus-identity/src/lib/models/service-principal.ts","../../../projects/nucleus-identity/src/lib/utils/location.service.ts","../../../projects/nucleus-identity/src/lib/utils/authorization-service-configuration.ts","../../../projects/nucleus-identity/src/lib/utils/angular-requestor.ts","../../../projects/nucleus-identity/src/lib/nucleus-identity-config.ts","../../../projects/nucleus-identity/src/lib/utils/oidc-configuration.service.ts","../../../projects/nucleus-identity/src/lib/models/device-code.ts","../../../projects/nucleus-identity/src/lib/models/client-registration.ts","../../../projects/nucleus-identity/src/lib/utils/token-client.ts","../../../projects/nucleus-identity/src/lib/nucleus-identity.service.ts","../../../projects/nucleus-identity/src/lib/nucleus-token-interceptor.service.ts","../../../projects/nucleus-identity/src/lib/nucleus-identity.module.ts","../../../projects/nucleus-identity/src/lib/models/otp.ts","../../../projects/nucleus-identity/src/public-api.ts","../../../projects/nucleus-identity/src/kolektor-nucleus-identity.ts"],"sourcesContent":["// It also supports IE with window.msCrypto !!!!!!\r\nimport { Crypto } from '@openid/appauth';\r\nimport { AppAuthError } from '@openid/appauth';\r\nimport * as base64 from 'base64-js';\r\n\r\nconst CHARSET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';\r\n\r\nexport class NucleusCrypto implements Crypto {\r\n  private browserCrypto = window.crypto || (window as any).msCrypto;\r\n\r\n  generateRandom(size: number) {\r\n    const buffer = new Uint8Array(size);\r\n    if (this.browserCrypto) {\r\n      this.browserCrypto.getRandomValues(buffer);\r\n    } else {\r\n      // fall back to Math.random() if nothing else is available\r\n      for (let i = 0; i < size; i += 1) {\r\n        buffer[i] = Math.random();\r\n      }\r\n    }\r\n    return this.bufferToString(buffer);\r\n  }\r\n\r\n  deriveChallenge(code: string): Promise<string> {\r\n    if (code.length < 43 || code.length > 128) {\r\n      return Promise.reject(new AppAuthError('Invalid code length.'));\r\n    }\r\n    if (!this.browserCrypto.subtle) {\r\n      return Promise.reject(new AppAuthError('window.crypto.subtle is unavailable.'));\r\n    }\r\n\r\n    const ecode = this.textEncodeLite(code);\r\n    const op = this.browserCrypto.subtle.digest('SHA-256', ecode);\r\n    return new Promise((resolve, reject) => {\r\n      // if operation contains algorithm it means it is not a promise which means it is CryptoOperation from IE.\r\n      // We just return result as promise\r\n      if (op.algorithm) {\r\n        console.log('we have a CryptoOperation');\r\n        op.addEventListener('complete', () => {\r\n          resolve(this.urlSafe(op.result));\r\n        });\r\n\r\n        op.addEventListener('error', () => {\r\n          reject(op.result);\r\n        });\r\n      } else { // the result is promise\r\n        op.then(buffer => resolve(this.urlSafe(buffer)), error => reject(error));\r\n      }\r\n    });\r\n  }\r\n\r\n\r\n  private urlSafe(buffer: Uint8Array): string {\r\n    const encoded = base64.fromByteArray(new Uint8Array(buffer));\r\n    return encoded.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\r\n  }\r\n\r\n  private textEncodeLite(str: string) {\r\n    const buf = new ArrayBuffer(str.length);\r\n    const bufView = new Uint8Array(buf);\r\n\r\n    for (let i = 0; i < str.length; i++) {\r\n      bufView[i] = str.charCodeAt(i);\r\n    }\r\n    return bufView;\r\n  }\r\n\r\n  private bufferToString(buffer: Uint8Array) {\r\n    const state = [];\r\n    for (let i = 0; i < buffer.byteLength; i += 1) {\r\n      const index = buffer[i] % CHARSET.length;\r\n      state.push(CHARSET[index]);\r\n    }\r\n    return state.join('');\r\n  }\r\n}\r\n","import { AuthorizationNotifier } from '@openid/appauth';\r\nimport { AuthorizationResponse, AuthorizationError } from '@openid/appauth';\r\nimport { AuthorizationRequest } from '@openid/appauth';\r\n\r\nexport class NucleusAuthorizationNotifier extends AuthorizationNotifier {\r\n    response: AuthorizationResponse;\r\n    request: AuthorizationRequest;\r\n    error: AuthorizationError;\r\n\r\n    constructor()  {\r\n        super();\r\n        this.setAuthorizationListener((request, response, error) => {\r\n            console.log('Authorization request complete ', request, response, error);\r\n            this.response = response;\r\n            this.request = request;\r\n            this.error = error;\r\n        });\r\n    }\r\n}\r\n","import { TokenResponse } from '@openid/appauth';\r\n\r\nexport class Claim {\r\n  public name: string;\r\n  public values: string[];\r\n\r\n  constructor(name: string, values: string[]) {\r\n    this.name = name;\r\n    this.values = values;\r\n  }\r\n}\r\n\r\nexport class Identity {\r\n  public name: string;\r\n  public subject: string;\r\n\r\n  public claims: Claim[] = [];\r\n\r\n  public static createFromResponse(res: TokenResponse): Identity {\r\n    const token = this.decodeToken(res.idToken);\r\n    const id = new Identity();\r\n    id.name = token.name;\r\n    id.subject = token.sub;\r\n    for (const key in token) {\r\n      if ({}.hasOwnProperty.call(token, key)) {\r\n        let vals = token[key];\r\n\r\n        if (!Array.isArray(vals)) {\r\n          vals = [vals];\r\n        }\r\n\r\n        const claim = new Claim(key, vals);\r\n        id.claims.push(claim);\r\n      }\r\n    }\r\n    return id;\r\n  }\r\n\r\n  private static decodeToken(jwt: string): any {\r\n    if (!jwt) {\r\n      throw new Error('NucleusIdentity: There was no identity token in the response!');\r\n    }\r\n\r\n    try {\r\n      const arr = jwt.split('.');\r\n      // var header = arr[0];\r\n      const payload = this.b64DecodeUnicode(arr[1]);\r\n      // var signature = arr[2];\r\n      return JSON.parse(payload);\r\n    } catch (error) {\r\n      console.error('Error while decoding identity token', error);\r\n      console.error('Error while decoding identity token JWT', jwt);\r\n    }\r\n  }\r\n\r\n  private static b64DecodeUnicode(str: string) {\r\n    str = str.replace(/-/g, '+').replace(/_/g, '/'); // Qlector fix :)\r\n    return decodeURIComponent(atob(str).split('').map(c => '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2)).join(''));\r\n  }\r\n}\r\n","import 'capacitor-secure-storage-plugin';\r\nimport { TokenResponse, TokenResponseJson } from '@openid/appauth';\r\nimport { Identity } from '../models/identity';\r\nimport { ServicePrincipal } from '../models/service-principal';\r\nimport { SecureStoragePlugin } from 'capacitor-secure-storage-plugin';\r\n\r\nexport class SecretsStore {\r\n  constructor(clientId: string) {\r\n    this._tokenStorageKeyPrefix = `Nucleus.Identity.${clientId}`; // do not change this or login fith existing refresh tokens will fail\r\n    this._servicePrincipalKey = `Nucleus.Identity.${clientId}.SvcP`;\r\n  }\r\n\r\n  private _tokenStorageKeyPrefix: string;\r\n  private _tokens: { [id: string]: TokenResponse } = {};\r\n  private _identities: { [id: string]: Identity } = {};\r\n  private _servicePrincipalKey;\r\n  private _servicePrincipal: ServicePrincipal;\r\n\r\n  public removeServicePrincipal() {\r\n    this._servicePrincipal = null;\r\n    return this.clear(this._servicePrincipalKey);\r\n  }\r\n\r\n  public async setServicePrincipal(servicePrincipal: ServicePrincipal) {\r\n    this._servicePrincipal = servicePrincipal;\r\n    await this.save(this._servicePrincipalKey, servicePrincipal);\r\n  }\r\n\r\n  public async getServicePrincipal() {\r\n    if (!this._servicePrincipal) {\r\n      this._servicePrincipal = await this.load<ServicePrincipal>(this._servicePrincipalKey);\r\n    }\r\n    return this._servicePrincipal;\r\n  }\r\n\r\n  public setToken(token: TokenResponse, id: string = null) {\r\n    return this.setTokenInternal(token, true, id);\r\n  }\r\n\r\n  public getIdentity(id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n    return this._identities[key];\r\n  }\r\n\r\n  public async getToken(id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n\r\n    // if token is not there or it is invalid we check storage again before returning\r\n    if (!this._tokens[key] || !this._tokens[key].isValid()) {\r\n      await this.reloadTokenFromStorage(id);\r\n    }\r\n    return this._tokens[key];\r\n  }\r\n\r\n  public removeToken(id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n    delete this._tokens[key];\r\n    delete this._identities[key];\r\n    return this.clear(key);\r\n  }\r\n\r\n  private async reloadTokenFromStorage(id: string) {\r\n    const key = this.getTokenKey(id);\r\n    const storedToken = await this.load<TokenResponseJson>(key);\r\n    if (storedToken) {\r\n      const res = new TokenResponse(storedToken);\r\n      if (res?.accessToken || res?.idToken) {\r\n        await this.setTokenInternal(res, false, id);\r\n      }\r\n    }\r\n    return null;\r\n  }\r\n\r\n  private async setTokenInternal(token: TokenResponse, save: boolean, id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n    if (token == null) {\r\n      await this.removeToken(id);\r\n    } else {\r\n      this._tokens[key] = token;\r\n      this._identities[key] = Identity.createFromResponse(token);\r\n      if (save) {\r\n        try {\r\n          await this.save(key, token.toJson());\r\n        } catch (e) {\r\n          console.warn('Nucleus.Identity: Could not save to SecureStorage.');\r\n        }\r\n      }\r\n    }\r\n  }\r\n\r\n  private getTokenKey(id: string = null) {\r\n    return id ? `${this._tokenStorageKeyPrefix}.${id}` : this._tokenStorageKeyPrefix;\r\n  }\r\n\r\n  private clear(key: string) {\r\n    return SecureStoragePlugin.remove({ key });\r\n  }\r\n\r\n  private save<T>(key: string, value: T): Promise<{ value: boolean }> {\r\n    return SecureStoragePlugin.set({ key, value: JSON.stringify(value) });\r\n  }\r\n\r\n  private async load<T>(key: string) {\r\n    try {\r\n      const x = await SecureStoragePlugin.get({ key });\r\n      if (x?.value) {\r\n        return JSON.parse(x.value) as T;\r\n      } else {\r\n        return null;\r\n      }\r\n    } catch {\r\n      return null;\r\n    }\r\n  }\r\n\r\n}\r\n","export class ServicePrincipal {\r\n  public id: string;\r\n  public secret: string;\r\n  public expiresAt: Date;\r\n}\r\n\r\nexport class ServicePrincipalRegistrationStatus {\r\n  public id: string;\r\n  public isRegistered = false;\r\n  public expiresAt: Date;\r\n\r\n  constructor(servicePrincipal: ServicePrincipal) {\r\n    if (servicePrincipal) {\r\n      this.isRegistered = true;\r\n      this.id = servicePrincipal.id;\r\n      this.expiresAt = servicePrincipal.expiresAt;\r\n    }\r\n  }\r\n\r\n  public get isExpired() {\r\n    return false;\r\n  }\r\n}\r\n","import { LocationLike } from '@openid/appauth';\r\nimport { NucleusAppService } from '@kolektor/nucleus-common';\r\nimport { Browser } from '@capacitor/browser';\r\nimport { Injectable } from '@angular/core';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class LocationService implements LocationLike {\r\n  constructor(private appService: NucleusAppService) {\r\n  }\r\n\r\n  get hash() {\r\n    return window.location.hash;\r\n  }\r\n  set hash(v) {\r\n    window.location.hash = v;\r\n  }\r\n\r\n  get host() {\r\n    return window.location.host;\r\n  }\r\n  set host(v) {\r\n    window.location.host = v;\r\n  }\r\n\r\n  get origin() {\r\n    return window.location.origin;\r\n  }\r\n\r\n  get hostname() {\r\n    return window.location.hostname;\r\n  }\r\n  set hostname(v) {\r\n    window.location.hostname = v;\r\n  }\r\n\r\n  get pathname() {\r\n    return window.location.pathname;\r\n  }\r\n  set pathname(v) {\r\n    window.location.pathname = v;\r\n  }\r\n\r\n  get port() {\r\n    return window.location.port;\r\n  }\r\n  set port(v) {\r\n    window.location.port = v;\r\n  }\r\n\r\n  get protocol() {\r\n    return window.location.protocol;\r\n  }\r\n  set protocol(v) {\r\n    window.location.protocol = v;\r\n  }\r\n\r\n  get search() {\r\n    return window.location.search;\r\n  }\r\n  set search(v) {\r\n    window.location.search = v;\r\n  }\r\n\r\n  assign(url: string): void {\r\n    if (this.appService.isNative) {\r\n      Browser.open({ url });\r\n    } else {\r\n      window.location.assign(url);\r\n    }\r\n  }\r\n}\r\n","import { AuthorizationServiceConfiguration, AuthorizationServiceConfigurationJson, JQueryRequestor, Requestor } from '@openid/appauth';\r\n\r\nconst WELL_KNOWN_PATH = '.well-known';\r\nconst OPENID_CONFIGURATION = 'openid-configuration';\r\n\r\nexport interface NucleusAuthorizationServiceConfigurationJson extends AuthorizationServiceConfigurationJson  {\r\n  device_authorization_endpoint?: string;\r\n  registration_endpoint?: string;\r\n}\r\n\r\nexport class NucleusAuthorizationServiceConfiguration extends AuthorizationServiceConfiguration {\r\n\r\n  constructor(request: NucleusAuthorizationServiceConfigurationJson) {\r\n    super(request);\r\n    this.deviceAuthorizationEndpoint = request.device_authorization_endpoint;\r\n    this.registrationEndpoint = request.registration_endpoint;\r\n  }\r\n\r\n  deviceAuthorizationEndpoint: string;\r\n  registrationEndpoint: string;\r\n\r\n  static fetchFromIssuer(openIdIssuerUrl: string, requestor?: Requestor) {\r\n    const fullUrl = `${openIdIssuerUrl}/${WELL_KNOWN_PATH}/${OPENID_CONFIGURATION}`;\r\n    const requestorToUse = requestor || new JQueryRequestor();\r\n    return requestorToUse\r\n        .xhr<NucleusAuthorizationServiceConfigurationJson>({url: fullUrl, dataType: 'json', method: 'GET'})\r\n        .then(json => new NucleusAuthorizationServiceConfiguration(json));\r\n  }\r\n\r\n  toJson() {\r\n    const res = super.toJson() as NucleusAuthorizationServiceConfigurationJson;\r\n    res.device_authorization_endpoint = this.deviceAuthorizationEndpoint;\r\n    return res as any;\r\n  }\r\n}\r\n","import { AppAuthError, Requestor } from '@openid/appauth';\r\nimport { Injectable } from '@angular/core';\r\nimport { HttpClient, HttpErrorResponse } from '@angular/common/http';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class AngularRequestor extends Requestor {\r\n\r\n  constructor(private http: HttpClient) {\r\n    super();\r\n  }\r\n\r\n  // eslint-disable-next-line no-undef\r\n  xhr<T>(settings: JQueryAjaxSettings): Promise<T> {\r\n    if (settings.method === undefined) {\r\n      settings.method = 'GET';\r\n    }\r\n    return new Promise<T>((resolve, reject) => {\r\n      this.http.request<T>(settings.method, settings.url, {\r\n        body: settings.data,\r\n        headers: settings.headers,\r\n      }).subscribe(res => resolve(res), err => {\r\n        let e = new AppAuthError(err);\r\n        if (err instanceof HttpErrorResponse) {\r\n          e = new AppAuthError(err.error?.error || err.statusText);\r\n        }\r\n        reject(e);\r\n      });\r\n    });\r\n  }\r\n}\r\n","export class NucleusIdentityConfig {\r\n  public authority: string = null;\r\n\r\n  public clientId: string;\r\n\r\n  public redirectUri?: string;\r\n\r\n  public androidRedirectUri?: string;\r\n\r\n  public iOSRedirectUri?: string;\r\n\r\n  public httpInterceptorUrls?: string[] = [];\r\n\r\n  public automaticLoginOnHttp401 = false;\r\n\r\n  public requestedScopes?: string;\r\n\r\n  public servicePrincipalRequestedScopes?: string;\r\n\r\n  public authProviderHint?: string;\r\n}\r\n","import { Injectable } from '@angular/core';\r\nimport { NucleusAppService } from '@kolektor/nucleus-common';\r\nimport { NucleusIdentityConfig } from '../nucleus-identity-config';\r\nimport { AngularRequestor } from './angular-requestor';\r\nimport { NucleusAuthorizationServiceConfiguration } from './authorization-service-configuration';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class OidcConfigurationService {\r\n  constructor(\r\n    private requestor: AngularRequestor,\r\n    private config: NucleusIdentityConfig,\r\n    private appService: NucleusAppService,\r\n  ) {\r\n  }\r\n\r\n  private _configuration: NucleusAuthorizationServiceConfiguration = null;\r\n\r\n  public async getConfiguration() {\r\n      await this.assureConfiguration();\r\n      return this._configuration;\r\n  }\r\n\r\n  public get clientId() {\r\n    return this.config.clientId;\r\n  }\r\n\r\n  public get requestedScopes() {\r\n    return this.config.requestedScopes;\r\n  }\r\n\r\n  public get servicePrincipalRequestedScopes() {\r\n    return this.config.servicePrincipalRequestedScopes;\r\n  }\r\n\r\n  public get authProviderHint() {\r\n    return this.config.authProviderHint;\r\n  }\r\n\r\n  public get redirectUrl() {\r\n    let uri = window.location.href;\r\n    const platform = this.appService.platform;\r\n    if (platform === 'android' && this.config.androidRedirectUri) {\r\n      uri = this.config.androidRedirectUri;\r\n    } else if (platform === 'ios' && this.config.iOSRedirectUri) {\r\n      uri = this.config.iOSRedirectUri;\r\n    } else if (this.config.redirectUri) {\r\n      uri = this.config.redirectUri;\r\n    }\r\n    return this.NormalizeRedirectUri(uri);\r\n  }\r\n\r\n  public getServerUrl(relativeUri: string = null) {\r\n    let authority = this.config.authority;\r\n    if (!authority || authority === 'origin') {\r\n      authority = window.origin;\r\n    }\r\n\r\n    let url = new URL(authority);\r\n\r\n    if (relativeUri) {\r\n      url = new URL(relativeUri, url);\r\n    }\r\n\r\n    return url.href;\r\n  }\r\n\r\n  private NormalizeRedirectUri(uri: string) {\r\n    const i = uri.indexOf('#');\r\n    if (i > 0) {\r\n      uri = uri.substring(0, i);\r\n    }\r\n    return uri;\r\n  }\r\n\r\n  private async assureConfiguration() {\r\n    if (this._configuration != null) {\r\n      return;\r\n    }\r\n    let authority = this.getServerUrl();\r\n    if (authority[authority.length - 1] === '/') {\r\n      authority = authority.slice(0, -1);\r\n    }\r\n    try {\r\n      this._configuration = await NucleusAuthorizationServiceConfiguration.fetchFromIssuer(authority, this.requestor);\r\n    } catch (e) {\r\n      console.error('Nucleus.Identity: Cannot load OIDC configuration: ' + (e as Error).message);\r\n      throw e;\r\n    }\r\n  }\r\n}\r\n","import { nowInSeconds } from '@openid/appauth';\r\n\r\nexport interface DeviceCodeJson {\r\n  device_code: string;\r\n  user_code: string;\r\n  verification_uri: string;\r\n  verification_uri_complete: string;\r\n  expires_in: string;\r\n  message: string;\r\n}\r\n\r\nexport class DeviceCode {\r\n  constructor(response: DeviceCodeJson) {\r\n    this.deviceCode = response.device_code;\r\n    this.userCode = response.user_code;\r\n    this.verificationUrl = response.verification_uri;\r\n    this.verificationUrlComplete = response.verification_uri_complete;\r\n    this.expiresIn = parseInt(response.expires_in, 10);\r\n    this.issuedAt =  nowInSeconds();\r\n  }\r\n\r\n  private expiresIn: number;\r\n  private issuedAt: number;\r\n\r\n  public deviceCode: string;\r\n  public userCode: string;\r\n  public verificationUrl: string;\r\n  public verificationUrlComplete: string;\r\n\r\n  isExpired(buffer: number = 60) {\r\n\r\n    return this.secondsLeft(buffer) <= 0;\r\n  }\r\n\r\n  secondsLeft(buffer: number = 60) {\r\n    const now = nowInSeconds();\r\n    return (this.issuedAt + this.expiresIn - buffer) - now;\r\n  }\r\n}\r\n","export interface ClientRegistrationResponseJson {\r\n  client_id: string;\r\n  client_secret: string;\r\n  client_secret_expires_at: number;\r\n}\r\n\r\nexport class ClientRegistrationResponse {\r\n  constructor(response: ClientRegistrationResponseJson) {\r\n    this.clientId = response.client_id;\r\n    this.clientSecret = response.client_secret;\r\n    this.secretExpirationDate = new Date(response.client_secret_expires_at * 1000);\r\n  }\r\n\r\n  clientId: string;\r\n  clientSecret: string;\r\n  secretExpirationDate: Date;\r\n}\r\n","import {\r\n  AppAuthError,\r\n  BaseTokenRequestHandler,\r\n  BasicQueryStringUtils,\r\n  GRANT_TYPE_AUTHORIZATION_CODE,\r\n  GRANT_TYPE_REFRESH_TOKEN,\r\n  QueryStringUtils,\r\n  StringMap,\r\n  TokenErrorJson,\r\n  TokenRequest,\r\n  TokenRequestHandler} from '@openid/appauth';\r\nimport { OidcConfigurationService } from './oidc-configuration.service';\r\nimport { AngularRequestor } from './angular-requestor';\r\nimport { Injectable } from '@angular/core';\r\nimport { DeviceCode, DeviceCodeJson } from '../models/device-code';\r\nimport { ClientRegistrationResponse, ClientRegistrationResponseJson } from '../models/client-registration';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class TokenClient  {\r\n  constructor(\r\n    private requestor: AngularRequestor,\r\n    private config: OidcConfigurationService\r\n  ) {\r\n    this._tokenHandler = new BaseTokenRequestHandler(requestor);\r\n    this._utils = new BasicQueryStringUtils();\r\n  }\r\n\r\n  private _tokenHandler: TokenRequestHandler;\r\n  private _utils: QueryStringUtils;\r\n\r\n  public async getByAuthorizationCode(redirectUrl: string, code: string, codeVerifier: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const redirectUri = redirectUrl;\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: redirectUri,\r\n      grant_type: GRANT_TYPE_AUTHORIZATION_CODE,\r\n      code,\r\n      extras: { code_verifier: codeVerifier }\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getByRefreshToken(refreshToken: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const redirectUri = this.config.redirectUrl;\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: redirectUri,\r\n      grant_type: GRANT_TYPE_REFRESH_TOKEN,\r\n      refresh_token: refreshToken\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getByClientCredentials(clientId: string, clientSecret: string, scope: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const req = new TokenRequest({\r\n      client_id: clientId,\r\n      redirect_uri: null,\r\n      grant_type: 'client_credentials',\r\n      extras: {\r\n        client_secret: clientSecret,\r\n        scope,\r\n      }\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getBySecret(provider: string, secret: string, assertionToken: string, scope: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: null,\r\n      grant_type: 'urn:kolektor:nucleus:secret',\r\n      extras: {\r\n        secret_provider: provider,\r\n        secret_value: secret,\r\n        client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',\r\n        client_assertion: assertionToken,\r\n        scope,\r\n      }\r\n    });\r\n\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getByDeviceCode(deviceCode: string) {\r\n    const config =  await this.config.getConfiguration();\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: null,\r\n      grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\r\n      extras: {\r\n        device_code: deviceCode\r\n      }\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async registerServicePrincipal(token: string) {\r\n    const config =  await this.config.getConfiguration();\r\n\r\n    const response = await this.requestor.xhr<ClientRegistrationResponseJson | TokenErrorJson>({\r\n      url: config.registrationEndpoint,\r\n      method: 'POST',\r\n      dataType: 'json',\r\n      headers: {\r\n        'Content-Type': 'application/json',\r\n        Authorization: `Bearer ${token}`\r\n      }\r\n      // data: this._utils.stringify(map)\r\n    });\r\n\r\n    if ((response as TokenErrorJson).error === undefined) {\r\n      return new ClientRegistrationResponse(response as ClientRegistrationResponseJson);\r\n    } else {\r\n      throw new AppAuthError((response as TokenErrorJson).error);\r\n    }\r\n  }\r\n\r\n  public async getRegistrationCode(existingServicePrincipalId: string = null) {\r\n    const params = {\r\n      custom_action: 'sp_register',\r\n      service_principal_id: existingServicePrincipalId\r\n    };\r\n    return this.getDeviceCodeInternal(params);\r\n  }\r\n\r\n  public async getDeviceCode(scope: string) {\r\n    const params = {\r\n      scope,\r\n    };\r\n    return this.getDeviceCodeInternal(params);\r\n  }\r\n\r\n  private async getDeviceCodeInternal(params: StringMap) {\r\n    const config =  await this.config.getConfiguration();\r\n\r\n    params['client_id'] = this.config.clientId;\r\n    const map: StringMap = params;\r\n\r\n    const response = await this.requestor.xhr<DeviceCodeJson | TokenErrorJson>({\r\n      url: config.deviceAuthorizationEndpoint,\r\n      method: 'POST',\r\n      dataType: 'json',\r\n      headers: {'Content-Type': 'application/x-www-form-urlencoded'},\r\n      data: this._utils.stringify(map)\r\n    });\r\n\r\n    if ((response as TokenErrorJson).error === undefined) {\r\n      return new DeviceCode(response as DeviceCodeJson);\r\n    } else {\r\n      throw new AppAuthError((response as TokenErrorJson).error);\r\n    }\r\n  }\r\n\r\n\r\n}\r\n","import {\r\n  AuthorizationRequest,\r\n  TokenResponse,\r\n  Crypto,\r\n  RedirectRequestHandler,\r\n  BasicQueryStringUtils,\r\n  LocalStorageBackend,\r\n  AppAuthError\r\n} from '@openid/appauth';\r\n\r\nimport { Injectable } from '@angular/core';\r\nimport { App } from '@capacitor/app';\r\nimport { Browser } from '@capacitor/browser';\r\nimport { Device } from '@capacitor/device';\r\nimport { NucleusCrypto } from './utils/nucleus-crypto';\r\nimport { NucleusAppService } from '@kolektor/nucleus-common';\r\nimport { LocationService } from './utils/location.service';\r\nimport { AuthorizationRequestHandler } from '@openid/appauth';\r\nimport { NucleusAuthorizationNotifier } from './utils/nucleus-authorization-notifier';\r\nimport { HttpClient } from '@angular/common/http';\r\nimport { OtpResponse, OtpStatus, OtpType } from './models/otp';\r\nimport { SecretsStore } from './utils/secrets-store';\r\nimport { OidcConfigurationService } from './utils/oidc-configuration.service';\r\nimport { TokenClient } from './utils/token-client';\r\nimport { DeviceCode } from './models/device-code';\r\nimport { ServicePrincipalRegistrationStatus } from './models/service-principal';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class NucleusIdentityService {\r\n  constructor(\r\n    private appService: NucleusAppService,\r\n    location: LocationService,\r\n    private http: HttpClient,\r\n    private config: OidcConfigurationService,\r\n    private tokenClient: TokenClient\r\n  ) {\r\n    const storage = new LocalStorageBackend();\r\n    this._crypto = new NucleusCrypto();\r\n    this._authorizationHandler = new RedirectRequestHandler(storage, new BasicQueryStringUtils(), location, this._crypto);\r\n    this._authorizationHandler.setAuthorizationNotifier(this._authorizationNotifier);\r\n    this._store = new SecretsStore(config.clientId);\r\n  }\r\n\r\n  // TODO: add some kind of config that will specify which token (userToken or servicePrincipalToken) should be injected by httpInterceptor\r\n\r\n  private _authorizationHandler: AuthorizationRequestHandler;\r\n  private _authorizationNotifier = new NucleusAuthorizationNotifier();\r\n  private _crypto: Crypto;\r\n  private _initStarted = false;\r\n  private _initialized = false;\r\n  private _refreshTokenPromise: Promise<TokenResponse>;\r\n  private _getTokenPromise: Promise<string>;\r\n  private _getServicePrincipalTokenPromise: Promise<string>;\r\n  private _servicePrincipalTokenId = '_svcp';\r\n  private _store: SecretsStore;\r\n\r\n  public get identity() {\r\n    return this._store.getIdentity();\r\n  }\r\n\r\n  public get isAuthenticated() {\r\n    return this.identity != null;\r\n  }\r\n\r\n  public get servicePrincipalIdentity() {\r\n    return this._store.getIdentity(this._servicePrincipalTokenId);\r\n  }\r\n\r\n  public get isServicePrincipalAuthenticated() {\r\n    return this.servicePrincipalIdentity != null;\r\n  }\r\n\r\n  public async init(startLogin: boolean = false): Promise<void> {\r\n    if (this._initStarted || this._initialized) {\r\n      console.warn('Nucleus.Identity: Auth initialization was already started. Don\\'t call init() multiple times!');\r\n      return;\r\n    }\r\n    this._initStarted = true;\r\n\r\n    this.handleLaunchCodeHash();\r\n    await this._authorizationHandler.completeAuthorizationRequestIfPossible();\r\n\r\n    const authErr = this._authorizationNotifier.error;\r\n    if (authErr) {\r\n      throw new Error('Authorization err: ' + authErr.error + ': ' + authErr.errorDescription);\r\n    } else if (this._authorizationNotifier.response) {\r\n      window.location.hash = '';\r\n      const request = this._authorizationNotifier.request;\r\n      const response = this._authorizationNotifier.response;\r\n      const res = await this.tokenClient.getByAuthorizationCode(request.redirectUri, response.code, request.internal['code_verifier']);\r\n      await this._store.setToken(res);\r\n    } else {\r\n      const res = await this._store.getToken();\r\n      if (!res && startLogin) {\r\n        await this.login();\r\n      }\r\n    }\r\n    this._initialized = true;\r\n  }\r\n\r\n  public async loginWithSecret(provider: string, secret: string): Promise<void> {\r\n    this._store.removeToken();\r\n    const assertionToken = await this.getServicePrincipalAccessToken();\r\n    const scope = this.prepareScope(true, this.config?.requestedScopes);\r\n    const res = await this.tokenClient.getBySecret(provider, secret, assertionToken, scope);\r\n    await this._store.setToken(res);\r\n  }\r\n\r\n  public async login(): Promise<void> {\r\n    this._store.removeToken();\r\n    const config = await this.config.getConfiguration();\r\n    const request = this.prepareAuthorizationRequest();\r\n    if (this.appService.isNative) {\r\n      const listener = App.addListener('appUrlOpen', data => {\r\n        if (this.appService.platform === 'ios') {\r\n          Browser.close();\r\n        }\r\n        listener.remove();\r\n        const hash = this.getCodeHash(data.url);\r\n        if (hash) {\r\n          const targetUrl = window.location.origin + window.location.pathname + '#' + hash;\r\n          window.location.assign(targetUrl);\r\n          window.location.reload();\r\n        } else {\r\n          console.warn('Nucleus.Identity: Redirect url did not contain authorization code!', data);\r\n        }\r\n      });\r\n    }\r\n    this._authorizationHandler.performAuthorizationRequest(config, request);\r\n  }\r\n\r\n  public async logout(): Promise<void> {\r\n    this._store.removeToken();\r\n    const config = await this.config.getConfiguration();\r\n    const redirectUrl = this.config.redirectUrl;\r\n    const logoutUrl = config.endSessionEndpoint + '?post_logout_redirect_uri=' + encodeURI(redirectUrl);\r\n    if (this.appService.isNative) {\r\n      const listener = App.addListener('appUrlOpen', () => {\r\n        Device.getInfo().then(info => {\r\n          if (info.platform === 'ios') {\r\n            Browser.close();\r\n          }\r\n        });\r\n        listener.remove();\r\n      });\r\n      Browser.open({ url: logoutUrl });\r\n    } else {\r\n      window.location.assign(logoutUrl);\r\n    }\r\n  }\r\n\r\n  public async getAccessToken() {\r\n    if (!this._getTokenPromise) {\r\n      this._getTokenPromise = this.getAccessTokenInternal();\r\n    }\r\n    try {\r\n      return await this._getTokenPromise;\r\n    } finally {\r\n      this._getTokenPromise = null;\r\n    }\r\n  }\r\n\r\n  public async getServicePrincipalAccessToken() {\r\n    if (!this._getServicePrincipalTokenPromise) {\r\n      this._getServicePrincipalTokenPromise = this.getServicePrincipalAccessTokenInternal();\r\n    }\r\n    try {\r\n      return await this._getServicePrincipalTokenPromise;\r\n    } finally {\r\n      this._getServicePrincipalTokenPromise = null;\r\n    }\r\n  }\r\n\r\n  public async loginServicePrincipal() {\r\n    await this.loginServicePrincipalInternal();\r\n  }\r\n\r\n  /*\r\n  public async loginAsServicePrincipal() {\r\n    let token = await this._store.getToken(this._servicePrincipalTokenId);\r\n    if (!token) {\r\n      await this.loginServicePrincipal();\r\n    }\r\n    token = await this._store.getToken(this._servicePrincipalTokenId);\r\n     // TODO: we have to distinguished that token is service principal so refresh token stuff is handled correctly.\r\n     // We have to implement universal getAccessToken function that can handle all cases\r\n    await this._store.setToken(token);\r\n  }\r\n  */\r\n\r\n  public async getOtp(type: OtpType, expiresIn: number = -1) {\r\n    let url = this.config.getServerUrl(`/otp/create?type=${type}`);\r\n    if (expiresIn > 0) {\r\n      url += `&expiresIn=${expiresIn}`;\r\n    }\r\n    return this.http.get<OtpResponse>(url).toPromise();\r\n  }\r\n\r\n  public async getOtpStatus(id: string) {\r\n    const url = this.config.getServerUrl(`/otp/status/${id}`);\r\n    return this.http.get<OtpStatus>(url).toPromise();\r\n  }\r\n\r\n  public getOtpUrl(redirectUrl: string, password: string) {\r\n    const encoded = encodeURIComponent(redirectUrl);\r\n    const url = `/otp/auth?otpValue=${password}&returnUrl=${encoded}`;\r\n    return this.config.getServerUrl(url);\r\n  }\r\n\r\n  public async startServicePrincipalRegistration() {\r\n    const sp = await this._store.getServicePrincipal();\r\n    return await this.tokenClient.getRegistrationCode(sp?.id);\r\n  }\r\n\r\n  public async completeServicePrincipalRegistration(deviceCode: DeviceCode) {\r\n    const tokenRes = await this.waitForDeviceToken(deviceCode);\r\n    const regRes = await this.tokenClient.registerServicePrincipal(tokenRes.accessToken);\r\n\r\n    await this._store.setServicePrincipal({\r\n      id: regRes.clientId,\r\n      secret: regRes.clientSecret,\r\n      expiresAt: regRes.secretExpirationDate\r\n    });\r\n  }\r\n\r\n  public removeServicePrincipalRegistration() {\r\n    return this._store.removeServicePrincipal();\r\n  }\r\n\r\n  public async getServicePrincipalRegistrationStatus() {\r\n    const sp = await this._store.getServicePrincipal();\r\n    return new ServicePrincipalRegistrationStatus(sp);\r\n  }\r\n\r\n  public async startDeviceCodeLogin() {\r\n    const scope = this.prepareScope(true, this.config.requestedScopes);\r\n    return await this.tokenClient.getDeviceCode(scope);\r\n  }\r\n\r\n  public async completeDeviceCodeLogin(deviceCode: DeviceCode) {\r\n    const res = await this.waitForDeviceToken(deviceCode);\r\n    await this._store.setToken(res);\r\n  }\r\n\r\n  private async waitForDeviceToken(deviceCode: DeviceCode) {\r\n    let res: TokenResponse = null;\r\n    do {\r\n      if (deviceCode.isExpired()) {\r\n        throw Error('Device code is expired!');\r\n      }\r\n\r\n      try {\r\n        res = await this.tokenClient.getByDeviceCode(deviceCode.deviceCode);\r\n      } catch (error) {\r\n        if (error instanceof AppAuthError && error.message === 'authorization_pending') {\r\n          await this.delay(2000);\r\n        } else {\r\n          throw error;\r\n        }\r\n      }\r\n    } while (!res);\r\n    return res;\r\n  }\r\n\r\n  private prepareAuthorizationRequest(): AuthorizationRequest {\r\n    const redirectUri = this.config.redirectUrl;\r\n\r\n    const params = {\r\n      response_mode: 'fragment',\r\n      prompt: 'consent',\r\n      access_type: 'offline',\r\n      auth_provider_hint: this.config.authProviderHint\r\n    };\r\n\r\n    return new AuthorizationRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: redirectUri,\r\n      response_type: AuthorizationRequest.RESPONSE_TYPE_CODE,\r\n      scope: this.prepareScope(true, this.config.requestedScopes),\r\n      extras: params,\r\n    }, this._crypto, true);\r\n  }\r\n\r\n  private async loginServicePrincipalInternal() {\r\n    const sp = await this._store.getServicePrincipal();\r\n    if (sp) {\r\n      const scope = this.prepareScope(false, this.config.servicePrincipalRequestedScopes);\r\n      const res = await this.tokenClient.getByClientCredentials(sp.id, sp.secret, scope);\r\n      await this._store.setToken(res, this._servicePrincipalTokenId);\r\n      return res;\r\n    } else {\r\n      throw Error('Service principal is not registered!');\r\n    }\r\n  }\r\n\r\n  private async getServicePrincipalAccessTokenInternal() {\r\n    let token = await this._store.getToken(this._servicePrincipalTokenId);\r\n    if (!token?.isValid()) {\r\n      token = await this.loginServicePrincipalInternal();\r\n    }\r\n    return token?.accessToken;\r\n  }\r\n\r\n  private async getAccessTokenInternal() {\r\n    let token = await this._store.getToken();\r\n    if (token && !token.isValid()) {\r\n      token = await this.loginWithRefreshToken(token);\r\n    }\r\n    return token?.accessToken;\r\n  }\r\n\r\n  private async loginWithRefreshToken(token: TokenResponse) {\r\n    if (!this._refreshTokenPromise) {\r\n      this._refreshTokenPromise = this.loginWithRefreshTokenInternal(token);\r\n    }\r\n    try {\r\n      return await this._refreshTokenPromise;\r\n    } finally {\r\n      this._refreshTokenPromise = null;\r\n    }\r\n  }\r\n\r\n  private async loginWithRefreshTokenInternal(token: TokenResponse) {\r\n    if (token?.refreshToken) {\r\n      try {\r\n        const res = await this.tokenClient.getByRefreshToken(token.refreshToken);\r\n        await this._store.setToken(res);\r\n        return res;\r\n      } catch (err) {\r\n        console.warn('Nucleus.Identity: Failed to login with refresh token.', err);\r\n        if (err.message === 'invalid_grant') {\r\n          await this.logout();\r\n        }\r\n      }\r\n    } else {\r\n      console.warn('Nucleus.Identity: There is no refresh token available.');\r\n    }\r\n  }\r\n\r\n  private getCodeHash(url: string) {\r\n    const arr = url.split('#');\r\n    if (arr.length > 1) {\r\n      const hash = arr[1];\r\n      if (hash.startsWith('code=')) {\r\n        return hash;\r\n      }\r\n    }\r\n    return null;\r\n  }\r\n\r\n  private handleLaunchCodeHash() {\r\n    if (this.appService.isNative && this.appService.launchUrl) {\r\n      const hash = this.getCodeHash(this.appService.launchUrl);\r\n      if (hash) {\r\n        console.log('Nucleus.Identity: Got authorization code from launchUrl, will assign it to hash.');\r\n        window.location.hash = '#' + hash;\r\n      }\r\n    }\r\n  }\r\n\r\n  private prepareScope(offlineAccess: boolean, aditionalScope: string) {\r\n    let scope = 'openid';\r\n    if (offlineAccess) {\r\n      scope += ' offline_access';\r\n    }\r\n    if (scope) {\r\n      scope += ' ' + aditionalScope;\r\n    }\r\n    return scope;\r\n  }\r\n\r\n  private delay(miliseconds: number) {\r\n    return new Promise<void>(resolve => {\r\n      setTimeout(() => {\r\n        resolve();\r\n      }, miliseconds);\r\n    });\r\n  }\r\n}\r\n","import { Injectable } from '@angular/core';\r\nimport { HttpEvent, HttpHandler, HttpInterceptor, HttpRequest, HttpErrorResponse } from '@angular/common/http';\r\nimport { Observable, from, throwError } from 'rxjs';\r\nimport { NucleusIdentityConfig } from './nucleus-identity-config';\r\nimport { NucleusIdentityService } from './nucleus-identity.service';\r\nimport { mergeMap, catchError } from 'rxjs/operators';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class NucleusTokenInterceptor implements HttpInterceptor {\r\n  constructor(private auth: NucleusIdentityService, private config: NucleusIdentityConfig\r\n  ) {\r\n    this._authority = config.authority.toLowerCase();\r\n    this._interceptUrls = config.httpInterceptorUrls?.map(x => x.toLowerCase());\r\n  }\r\n\r\n  private _authority: string;\r\n  private _authorityInterceptPaths = ['/api', '/manage', '/otp/create', '/otp/status'];\r\n  private _interceptUrls: string[];\r\n\r\n  public intercept(req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\r\n    if (this.shouldIntercept(req.url)) {\r\n      const res = this.authorizeRequest(this.auth.getAccessToken(), req, next);\r\n      return this.checkUnauthorized(res);\r\n    }\r\n    return next.handle(req);\r\n  }\r\n\r\n  private shouldIntercept(url: string): boolean {\r\n    url = url.toLowerCase();\r\n\r\n    if (url.startsWith(this._authority)) {\r\n      const pathname = new URL(url).pathname;\r\n      return (this._authorityInterceptPaths.some(x => pathname.startsWith(x)));\r\n    }\r\n\r\n    if (this._interceptUrls?.length > 0) {\r\n      return this.config.httpInterceptorUrls.some(x => url.startsWith(x));\r\n    }\r\n    return false;\r\n  }\r\n\r\n  private authorizeRequest(getToken: Promise<string>, req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\r\n    return from(getToken).pipe(\r\n      mergeMap(token => {\r\n        if (token) {\r\n            const headers = req.headers.set('Authorization', `Bearer ${token}`);\r\n            req = req.clone({ headers });\r\n        }\r\n        return next.handle(req);\r\n      })\r\n    );\r\n  }\r\n\r\n  private checkUnauthorized(response: Observable<HttpEvent<any>>): Observable<HttpEvent<any>> {\r\n    return response.pipe(\r\n      catchError((err) => {\r\n        if (err instanceof HttpErrorResponse && err.status === 401) {\r\n          if (this.config.automaticLoginOnHttp401) {\r\n            this.auth.login();\r\n          }\r\n        }\r\n        return throwError(err);\r\n      })\r\n    );\r\n  }\r\n}\r\n","import { NgModule, ModuleWithProviders } from '@angular/core';\r\nimport { HTTP_INTERCEPTORS } from '@angular/common/http';\r\nimport { NucleusTokenInterceptor } from './nucleus-token-interceptor.service';\r\nimport { NucleusIdentityConfig } from './nucleus-identity-config';\r\n\r\n@NgModule({\r\n  imports: [\r\n  ],\r\n  declarations: [\r\n  ],\r\n  exports: [\r\n  ]\r\n})\r\n\r\nexport class NucleusIdentityModule {\r\n\r\n  static forRoot(config: NucleusIdentityConfig): ModuleWithProviders<NucleusIdentityModule> {\r\n    return {\r\n      ngModule: NucleusIdentityModule,\r\n      providers: [\r\n        { provide: NucleusIdentityConfig, useValue: config },\r\n        { provide: HTTP_INTERCEPTORS, useClass: NucleusTokenInterceptor, multi: true },\r\n      ]\r\n    };\r\n  }\r\n}\r\n","export class OtpResponse {\r\n    public password: string;\r\n    public passwordId: string;\r\n}\r\n\r\nexport class OtpStatus {\r\n    public isExpired: boolean;\r\n    public isUsed: boolean;\r\n    public secondsToExpiration: number;\r\n}\r\n\r\nexport enum OtpType {\r\n  SimpleNumbers = 0,\r\n  SimpleAlfanumeric = 1,\r\n  Complex = 2\r\n}\r\n","/*\r\n * Public API Surface of nucleus-identity\r\n */\r\n\r\nexport * from './lib/nucleus-identity.module';\r\nexport * from './lib/nucleus-identity.service';\r\nexport * from './lib/nucleus-identity-config';\r\nexport { OtpResponse, OtpStatus, OtpType } from './lib/models/otp';\r\nexport { DeviceCode } from './lib/models/device-code';\r\nexport { Identity } from './lib/models/identity';\r\nexport { ServicePrincipalRegistrationStatus } from './lib/models/service-principal';\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAKA,MAAM,OAAO,GAAG,gEAAgE,CAAC;MAEpE,aAAa;IAA1B;QACU,kBAAa,GAAG,MAAM,CAAC,MAAM,IAAK,MAAc,CAAC,QAAQ,CAAC;KAmEnE;IAjEC,cAAc,CAAC,IAAY;QACzB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,aAAa,EAAE;YACtB,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;SAC5C;aAAM;;YAEL,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;gBAChC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;aAC3B;SACF;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;KACpC;IAED,eAAe,CAAC,IAAY;QAC1B,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;YACzC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,sBAAsB,CAAC,CAAC,CAAC;SACjE;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;YAC9B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,sCAAsC,CAAC,CAAC,CAAC;SACjF;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM;;;YAGjC,IAAI,EAAE,CAAC,SAAS,EAAE;gBAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBACzC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE;oBAC9B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;iBAClC,CAAC,CAAC;gBAEH,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE;oBAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;iBACnB,CAAC,CAAC;aACJ;iBAAM;gBACL,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;aAC1E;SACF,CAAC,CAAC;KACJ;IAGO,OAAO,CAAC,MAAkB;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;KAC1E;IAEO,cAAc,CAAC,GAAW;QAChC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;QAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACnC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;SAChC;QACD,OAAO,OAAO,CAAC;KAChB;IAEO,cAAc,CAAC,MAAkB;QACvC,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;SAC5B;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KACvB;;;MCtEU,qCAAqC,qBAAqB;IAKnE;QACI,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK;YACnD,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;SACtB,CAAC,CAAC;KACN;;;MCfQ,KAAK;IAIhB,YAAY,IAAY,EAAE,MAAgB;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;KACtB;CACF;MAEY,QAAQ;IAArB;QAIS,WAAM,GAAY,EAAE,CAAC;KA2C7B;IAzCQ,OAAO,kBAAkB,CAAC,GAAkB;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC1B,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACrB,EAAE,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE;YACvB,IAAI,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE;gBACtC,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBAEtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBACxB,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;iBACf;gBAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACvB;SACF;QACD,OAAO,EAAE,CAAC;KACX;IAEO,OAAO,WAAW,CAAC,GAAW;QACpC,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;SAClF;QAED,IAAI;YACF,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;;YAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;;YAE9C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SAC5B;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;SAC/D;KACF;IAEO,OAAO,gBAAgB,CAAC,GAAW;QACzC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;KACzH;;;MCpDU,YAAY;IACvB,YAAY,QAAgB;QAMpB,YAAO,GAAoC,EAAE,CAAC;QAC9C,gBAAW,GAA+B,EAAE,CAAC;QANnD,IAAI,CAAC,sBAAsB,GAAG,oBAAoB,QAAQ,EAAE,CAAC;QAC7D,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,QAAQ,OAAO,CAAC;KACjE;IAQM,sBAAsB;QAC3B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;KAC9C;IAEY,mBAAmB,CAAC,gBAAkC;;YACjE,IAAI,CAAC,iBAAiB,GAAG,gBAAgB,CAAC;YAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;SAC9D;KAAA;IAEY,mBAAmB;;YAC9B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC3B,IAAI,CAAC,iBAAiB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAmB,IAAI,CAAC,oBAAoB,CAAC,CAAC;aACvF;YACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;SAC/B;KAAA;IAEM,QAAQ,CAAC,KAAoB,EAAE,KAAa,IAAI;QACrD,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;KAC/C;IAEM,WAAW,CAAC,KAAa,IAAI;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;KAC9B;IAEY,QAAQ,CAAC,KAAa,IAAI;;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;;YAGjC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBACtD,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;aACvC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;SAC1B;KAAA;IAEM,WAAW,CAAC,KAAa,IAAI;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;KACxB;IAEa,sBAAsB,CAAC,EAAU;;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAoB,GAAG,CAAC,CAAC;YAC5D,IAAI,WAAW,EAAE;gBACf,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;gBAC3C,IAAI,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,WAAW,MAAI,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,CAAA,EAAE;oBACpC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;iBAC7C;aACF;YACD,OAAO,IAAI,CAAC;SACb;KAAA;IAEa,gBAAgB,CAAC,KAAoB,EAAE,IAAa,EAAE,KAAa,IAAI;;YACnF,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,KAAK,IAAI,IAAI,EAAE;gBACjB,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;aAC5B;iBAAM;gBACL,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC1B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC3D,IAAI,IAAI,EAAE;oBACR,IAAI;wBACF,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;qBACtC;oBAAC,OAAO,CAAC,EAAE;wBACV,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;qBACpE;iBACF;aACF;SACF;KAAA;IAEO,WAAW,CAAC,KAAa,IAAI;QACnC,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,sBAAsB,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC;KAClF;IAEO,KAAK,CAAC,GAAW;QACvB,OAAO,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;KAC5C;IAEO,IAAI,CAAI,GAAW,EAAE,KAAQ;QACnC,OAAO,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;KACvE;IAEa,IAAI,CAAI,GAAW;;YAC/B,IAAI;gBACF,MAAM,CAAC,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,EAAE;oBACZ,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAM,CAAC;iBACjC;qBAAM;oBACL,OAAO,IAAI,CAAC;iBACb;aACF;YAAC,WAAM;gBACN,OAAO,IAAI,CAAC;aACb;SACF;KAAA;;;MCjHU,gBAAgB;CAI5B;MAEY,kCAAkC;IAK7C,YAAY,gBAAkC;QAHvC,iBAAY,GAAG,KAAK,CAAC;QAI1B,IAAI,gBAAgB,EAAE;YACpB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,gBAAgB,CAAC,SAAS,CAAC;SAC7C;KACF;IAED,IAAW,SAAS;QAClB,OAAO,KAAK,CAAC;KACd;;;MCbU,eAAe;IAC1B,YAAoB,UAA6B;QAA7B,eAAU,GAAV,UAAU,CAAmB;KAChD;IAED,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC7B;IACD,IAAI,IAAI,CAAC,CAAC;QACR,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;KAC1B;IAED,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC7B;IACD,IAAI,IAAI,CAAC,CAAC;QACR,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;KAC1B;IAED,IAAI,MAAM;QACR,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC/B;IAED,IAAI,QAAQ;QACV,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjC;IACD,IAAI,QAAQ,CAAC,CAAC;QACZ,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;KAC9B;IAED,IAAI,QAAQ;QACV,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjC;IACD,IAAI,QAAQ,CAAC,CAAC;QACZ,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;KAC9B;IAED,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC7B;IACD,IAAI,IAAI,CAAC,CAAC;QACR,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;KAC1B;IAED,IAAI,QAAQ;QACV,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjC;IACD,IAAI,QAAQ,CAAC,CAAC;QACZ,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;KAC9B;IAED,IAAI,MAAM;QACR,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC/B;IACD,IAAI,MAAM,CAAC,CAAC;QACV,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;KAC5B;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;SACvB;aAAM;YACL,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SAC7B;KACF;;4GA/DU,eAAe;gHAAf,eAAe,cAFd,MAAM;2FAEP,eAAe;kBAH3B,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;ACLD,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;MAOvC,iDAAiD,iCAAiC;IAE7F,YAAY,OAAqD;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,2BAA2B,GAAG,OAAO,CAAC,6BAA6B,CAAC;QACzE,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;KAC3D;IAKD,OAAO,eAAe,CAAC,eAAuB,EAAE,SAAqB;QACnE,MAAM,OAAO,GAAG,GAAG,eAAe,IAAI,eAAe,IAAI,oBAAoB,EAAE,CAAC;QAChF,MAAM,cAAc,GAAG,SAAS,IAAI,IAAI,eAAe,EAAE,CAAC;QAC1D,OAAO,cAAc;aAChB,GAAG,CAA+C,EAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAC,CAAC;aAClG,IAAI,CAAC,IAAI,IAAI,IAAI,wCAAwC,CAAC,IAAI,CAAC,CAAC,CAAC;KACvE;IAED,MAAM;QACJ,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAkD,CAAC;QAC3E,GAAG,CAAC,6BAA6B,GAAG,IAAI,CAAC,2BAA2B,CAAC;QACrE,OAAO,GAAU,CAAC;KACnB;;;MC1BU,yBAAyB,SAAS;IAE7C,YAAoB,IAAgB;QAClC,KAAK,EAAE,CAAC;QADU,SAAI,GAAJ,IAAI,CAAY;KAEnC;;IAGD,GAAG,CAAI,QAA4B;QACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE;YACjC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;SACzB;QACD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM;YACpC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAI,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE;gBAClD,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG;;gBACnC,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,GAAG,YAAY,iBAAiB,EAAE;oBACpC,CAAC,GAAG,IAAI,YAAY,CAAC,CAAA,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,KAAI,GAAG,CAAC,UAAU,CAAC,CAAC;iBAC1D;gBACD,MAAM,CAAC,CAAC,CAAC,CAAC;aACX,CAAC,CAAC;SACJ,CAAC,CAAC;KACJ;;6GAvBU,gBAAgB;iHAAhB,gBAAgB,cAFf,MAAM;2FAEP,gBAAgB;kBAH5B,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCNY,qBAAqB;IAAlC;QACS,cAAS,GAAW,IAAI,CAAC;QAUzB,wBAAmB,GAAc,EAAE,CAAC;QAEpC,4BAAuB,GAAG,KAAK,CAAC;KAOxC;;;MCXY,wBAAwB;IACnC,YACU,SAA2B,EAC3B,MAA6B,EAC7B,UAA6B;QAF7B,cAAS,GAAT,SAAS,CAAkB;QAC3B,WAAM,GAAN,MAAM,CAAuB;QAC7B,eAAU,GAAV,UAAU,CAAmB;QAI/B,mBAAc,GAA6C,IAAI,CAAC;KAFvE;IAIY,gBAAgB;;YACzB,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,cAAc,CAAC;SAC9B;KAAA;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;KAC7B;IAED,IAAW,eAAe;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;KACpC;IAED,IAAW,+BAA+B;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC;KACpD;IAED,IAAW,gBAAgB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;KACrC;IAED,IAAW,WAAW;QACpB,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE;YAC5D,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;SACtC;aAAM,IAAI,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;YAC3D,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;SAClC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;YAClC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SAC/B;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;KACvC;IAEM,YAAY,CAAC,cAAsB,IAAI;QAC5C,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE;YACxC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;SAC3B;QAED,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7B,IAAI,WAAW,EAAE;YACf,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;SACjC;QAED,OAAO,GAAG,CAAC,IAAI,CAAC;KACjB;IAEO,oBAAoB,CAAC,GAAW;QACtC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,EAAE;YACT,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SAC3B;QACD,OAAO,GAAG,CAAC;KACZ;IAEa,mBAAmB;;YAC/B,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE;gBAC/B,OAAO;aACR;YACD,IAAI,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACpC,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;gBAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aACpC;YACD,IAAI;gBACF,IAAI,CAAC,cAAc,GAAG,MAAM,wCAAwC,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;aACjH;YAAC,OAAO,CAAC,EAAE;gBACV,OAAO,CAAC,KAAK,CAAC,oDAAoD,GAAI,CAAW,CAAC,OAAO,CAAC,CAAC;gBAC3F,MAAM,CAAC,CAAC;aACT;SACF;KAAA;;qHAjFU,wBAAwB;yHAAxB,wBAAwB,cAFvB,MAAM;2FAEP,wBAAwB;kBAHpC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCGY,UAAU;IACrB,YAAY,QAAwB;QAClC,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,yBAAyB,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,GAAI,YAAY,EAAE,CAAC;KACjC;IAUD,SAAS,CAAC,SAAiB,EAAE;QAE3B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;KACtC;IAED,WAAW,CAAC,SAAiB,EAAE;QAC7B,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,GAAG,CAAC;KACxD;;;MC/BU,0BAA0B;IACrC,YAAY,QAAwC;QAClD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,oBAAoB,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;KAChF;;;MCSU,WAAW;IACtB,YACU,SAA2B,EAC3B,MAAgC;QADhC,cAAS,GAAT,SAAS,CAAkB;QAC3B,WAAM,GAAN,MAAM,CAA0B;QAExC,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;KAC3C;IAKY,sBAAsB,CAAC,WAAmB,EAAE,IAAY,EAAE,YAAoB;;YACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,WAAW,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,6BAA6B;gBACzC,IAAI;gBACJ,MAAM,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;aACxC,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,iBAAiB,CAAC,YAAoB;;YACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,wBAAwB;gBACpC,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,sBAAsB,CAAC,QAAgB,EAAE,YAAoB,EAAE,KAAa;;YACvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,QAAQ;gBACnB,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,oBAAoB;gBAChC,MAAM,EAAE;oBACN,aAAa,EAAE,YAAY;oBAC3B,KAAK;iBACN;aACF,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,WAAW,CAAC,QAAgB,EAAE,MAAc,EAAE,cAAsB,EAAE,KAAa;;YAC9F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,6BAA6B;gBACzC,MAAM,EAAE;oBACN,eAAe,EAAE,QAAQ;oBACzB,YAAY,EAAE,MAAM;oBACpB,qBAAqB,EAAE,wDAAwD;oBAC/E,gBAAgB,EAAE,cAAc;oBAChC,KAAK;iBACN;aACF,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,eAAe,CAAC,UAAkB;;YAC7C,MAAM,MAAM,GAAI,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,8CAA8C;gBAC1D,MAAM,EAAE;oBACN,WAAW,EAAE,UAAU;iBACxB;aACF,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,wBAAwB,CAAC,KAAa;;YACjD,MAAM,MAAM,GAAI,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAErD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAkD;gBACzF,GAAG,EAAE,MAAM,CAAC,oBAAoB;gBAChC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;;aAEF,CAAC,CAAC;YAEH,IAAK,QAA2B,CAAC,KAAK,KAAK,SAAS,EAAE;gBACpD,OAAO,IAAI,0BAA0B,CAAC,QAA0C,CAAC,CAAC;aACnF;iBAAM;gBACL,MAAM,IAAI,YAAY,CAAE,QAA2B,CAAC,KAAK,CAAC,CAAC;aAC5D;SACF;KAAA;IAEY,mBAAmB,CAAC,6BAAqC,IAAI;;YACxE,MAAM,MAAM,GAAG;gBACb,aAAa,EAAE,aAAa;gBAC5B,oBAAoB,EAAE,0BAA0B;aACjD,CAAC;YACF,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;SAC3C;KAAA;IAEY,aAAa,CAAC,KAAa;;YACtC,MAAM,MAAM,GAAG;gBACb,KAAK;aACN,CAAC;YACF,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;SAC3C;KAAA;IAEa,qBAAqB,CAAC,MAAiB;;YACnD,MAAM,MAAM,GAAI,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAErD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC3C,MAAM,GAAG,GAAc,MAAM,CAAC;YAE9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAkC;gBACzE,GAAG,EAAE,MAAM,CAAC,2BAA2B;gBACvC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,EAAC,cAAc,EAAE,mCAAmC,EAAC;gBAC9D,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;aACjC,CAAC,CAAC;YAEH,IAAK,QAA2B,CAAC,KAAK,KAAK,SAAS,EAAE;gBACpD,OAAO,IAAI,UAAU,CAAC,QAA0B,CAAC,CAAC;aACnD;iBAAM;gBACL,MAAM,IAAI,YAAY,CAAE,QAA2B,CAAC,KAAK,CAAC,CAAC;aAC5D;SACF;KAAA;;wGAzIU,WAAW;4GAAX,WAAW,cAFV,MAAM;2FAEP,WAAW;kBAHvB,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCWY,sBAAsB;IACjC,YACU,UAA6B,EACrC,QAAyB,EACjB,IAAgB,EAChB,MAAgC,EAChC,WAAwB;QAJxB,eAAU,GAAV,UAAU,CAAmB;QAE7B,SAAI,GAAJ,IAAI,CAAY;QAChB,WAAM,GAAN,MAAM,CAA0B;QAChC,gBAAW,GAAX,WAAW,CAAa;QAY1B,2BAAsB,GAAG,IAAI,4BAA4B,EAAE,CAAC;QAE5D,iBAAY,GAAG,KAAK,CAAC;QACrB,iBAAY,GAAG,KAAK,CAAC;QAIrB,6BAAwB,GAAG,OAAO,CAAC;QAjBzC,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,qBAAqB,GAAG,IAAI,sBAAsB,CAAC,OAAO,EAAE,IAAI,qBAAqB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtH,IAAI,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;KACjD;IAeD,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;KAClC;IAED,IAAW,eAAe;QACxB,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;KAC9B;IAED,IAAW,wBAAwB;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;KAC/D;IAED,IAAW,+BAA+B;QACxC,OAAO,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC;KAC9C;IAEY,IAAI,CAAC,aAAsB,KAAK;;YAC3C,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE;gBAC1C,OAAO,CAAC,IAAI,CAAC,+FAA+F,CAAC,CAAC;gBAC9G,OAAO;aACR;YACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAEzB,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,qBAAqB,CAAC,sCAAsC,EAAE,CAAC;YAE1E,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;YAClD,IAAI,OAAO,EAAE;gBACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;aAC1F;iBAAM,IAAI,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE;gBAC/C,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;gBACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;gBACtD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;gBACjI,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;aACjC;iBAAM;gBACL,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE;oBACtB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;iBACpB;aACF;YACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;SAC1B;KAAA;IAEY,eAAe,CAAC,QAAgB,EAAE,MAAc;;;YAC3D,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,8BAA8B,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAA,IAAI,CAAC,MAAM,0CAAE,eAAe,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;YACxF,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;;KACjC;IAEY,KAAK;;YAChB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI;oBACjD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE;wBACtC,OAAO,CAAC,KAAK,EAAE,CAAC;qBACjB;oBACD,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAClB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACxC,IAAI,IAAI,EAAE;wBACR,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC;wBACjF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;wBAClC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;qBAC1B;yBAAM;wBACL,OAAO,CAAC,IAAI,CAAC,oEAAoE,EAAE,IAAI,CAAC,CAAC;qBAC1F;iBACF,CAAC,CAAC;aACJ;YACD,IAAI,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACzE;KAAA;IAEY,MAAM;;YACjB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,GAAG,4BAA4B,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YACpG,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE;oBAC7C,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI;wBACxB,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE;4BAC3B,OAAO,CAAC,KAAK,EAAE,CAAC;yBACjB;qBACF,CAAC,CAAC;oBACH,QAAQ,CAAC,MAAM,EAAE,CAAC;iBACnB,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;aAClC;iBAAM;gBACL,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACnC;SACF;KAAA;IAEY,cAAc;;YACzB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;aACvD;YACD,IAAI;gBACF,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC;aACpC;oBAAS;gBACR,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;aAC9B;SACF;KAAA;IAEY,8BAA8B;;YACzC,IAAI,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBAC1C,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC,sCAAsC,EAAE,CAAC;aACvF;YACD,IAAI;gBACF,OAAO,MAAM,IAAI,CAAC,gCAAgC,CAAC;aACpD;oBAAS;gBACR,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC;aAC9C;SACF;KAAA;IAEY,qBAAqB;;YAChC,MAAM,IAAI,CAAC,6BAA6B,EAAE,CAAC;SAC5C;KAAA;;;;;;;;;;;;;IAeY,MAAM,CAAC,IAAa,EAAE,YAAoB,CAAC,CAAC;;YACvD,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,SAAS,GAAG,CAAC,EAAE;gBACjB,GAAG,IAAI,cAAc,SAAS,EAAE,CAAC;aAClC;YACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAc,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;SACpD;KAAA;IAEY,YAAY,CAAC,EAAU;;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YAC1D,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAY,GAAG,CAAC,CAAC,SAAS,EAAE,CAAC;SAClD;KAAA;IAEM,SAAS,CAAC,WAAmB,EAAE,QAAgB;QACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,sBAAsB,QAAQ,cAAc,OAAO,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;KACtC;IAEY,iCAAiC;;YAC5C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACnD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,EAAE,CAAC,CAAC;SAC3D;KAAA;IAEY,oCAAoC,CAAC,UAAsB;;YACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAErF,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBACpC,EAAE,EAAE,MAAM,CAAC,QAAQ;gBACnB,MAAM,EAAE,MAAM,CAAC,YAAY;gBAC3B,SAAS,EAAE,MAAM,CAAC,oBAAoB;aACvC,CAAC,CAAC;SACJ;KAAA;IAEM,kCAAkC;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;KAC7C;IAEY,qCAAqC;;YAChD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACnD,OAAO,IAAI,kCAAkC,CAAC,EAAE,CAAC,CAAC;SACnD;KAAA;IAEY,oBAAoB;;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACnE,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD;KAAA;IAEY,uBAAuB,CAAC,UAAsB;;YACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;SACjC;KAAA;IAEa,kBAAkB,CAAC,UAAsB;;YACrD,IAAI,GAAG,GAAkB,IAAI,CAAC;YAC9B,GAAG;gBACD,IAAI,UAAU,CAAC,SAAS,EAAE,EAAE;oBAC1B,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;iBACxC;gBAED,IAAI;oBACF,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;iBACrE;gBAAC,OAAO,KAAK,EAAE;oBACd,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,EAAE;wBAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;qBACxB;yBAAM;wBACL,MAAM,KAAK,CAAC;qBACb;iBACF;aACF,QAAQ,CAAC,GAAG,EAAE;YACf,OAAO,GAAG,CAAC;SACZ;KAAA;IAEO,2BAA2B;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAE5C,MAAM,MAAM,GAAG;YACb,aAAa,EAAE,UAAU;YACzB,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,SAAS;YACtB,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;SACjD,CAAC;QAEF,OAAO,IAAI,oBAAoB,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,oBAAoB,CAAC,kBAAkB;YACtD,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAC3D,MAAM,EAAE,MAAM;SACf,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;KACxB;IAEa,6BAA6B;;YACzC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACnD,IAAI,EAAE,EAAE;gBACN,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;gBACpF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACnF,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAC/D,OAAO,GAAG,CAAC;aACZ;iBAAM;gBACL,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;aACrD;SACF;KAAA;IAEa,sCAAsC;;YAClD,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACtE,IAAI,EAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,EAAE,CAAA,EAAE;gBACrB,KAAK,GAAG,MAAM,IAAI,CAAC,6BAA6B,EAAE,CAAC;aACpD;YACD,OAAO,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,CAAC;SAC3B;KAAA;IAEa,sBAAsB;;YAClC,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE;gBAC7B,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;aACjD;YACD,OAAO,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,CAAC;SAC3B;KAAA;IAEa,qBAAqB,CAAC,KAAoB;;YACtD,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAC9B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;aACvE;YACD,IAAI;gBACF,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC;aACxC;oBAAS;gBACR,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;aAClC;SACF;KAAA;IAEa,6BAA6B,CAAC,KAAoB;;YAC9D,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,YAAY,EAAE;gBACvB,IAAI;oBACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBACzE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAChC,OAAO,GAAG,CAAC;iBACZ;gBAAC,OAAO,GAAG,EAAE;oBACZ,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;oBAC3E,IAAI,GAAG,CAAC,OAAO,KAAK,eAAe,EAAE;wBACnC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;qBACrB;iBACF;aACF;iBAAM;gBACL,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;aACxE;SACF;KAAA;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE;YAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;gBAC5B,OAAO,IAAI,CAAC;aACb;SACF;QACD,OAAO,IAAI,CAAC;KACb;IAEO,oBAAoB;QAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,IAAI,EAAE;gBACR,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;gBAChG,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;aACnC;SACF;KACF;IAEO,YAAY,CAAC,aAAsB,EAAE,cAAsB;QACjE,IAAI,KAAK,GAAG,QAAQ,CAAC;QACrB,IAAI,aAAa,EAAE;YACjB,KAAK,IAAI,iBAAiB,CAAC;SAC5B;QACD,IAAI,KAAK,EAAE;YACT,KAAK,IAAI,GAAG,GAAG,cAAc,CAAC;SAC/B;QACD,OAAO,KAAK,CAAC;KACd;IAEO,KAAK,CAAC,WAAmB;QAC/B,OAAO,IAAI,OAAO,CAAO,OAAO;YAC9B,UAAU,CAAC;gBACT,OAAO,EAAE,CAAC;aACX,EAAE,WAAW,CAAC,CAAC;SACjB,CAAC,CAAC;KACJ;;mHA7VU,sBAAsB;uHAAtB,sBAAsB,cAFrB,MAAM;2FAEP,sBAAsB;kBAHlC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCnBY,uBAAuB;IAClC,YAAoB,IAA4B,EAAU,MAA6B;;QAAnE,SAAI,GAAJ,IAAI,CAAwB;QAAU,WAAM,GAAN,MAAM,CAAuB;QAO/E,6BAAwB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QALnF,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,CAAC,cAAc,GAAG,MAAA,MAAM,CAAC,mBAAmB,0CAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;KAC7E;IAMM,SAAS,CAAC,GAAqB,EAAE,IAAiB;QACvD,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;SACpC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACzB;IAEO,eAAe,CAAC,GAAW;;QACjC,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAExB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YACvC,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;SAC1E;QAED,IAAI,CAAA,MAAA,IAAI,CAAC,cAAc,0CAAE,MAAM,IAAG,CAAC,EAAE;YACnC,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;SACrE;QACD,OAAO,KAAK,CAAC;KACd;IAEO,gBAAgB,CAAC,QAAyB,EAAE,GAAqB,EAAE,IAAiB;QAC1F,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACxB,QAAQ,CAAC,KAAK;YACZ,IAAI,KAAK,EAAE;gBACP,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;gBACpE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;aAChC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SACzB,CAAC,CACH,CAAC;KACH;IAEO,iBAAiB,CAAC,QAAoC;QAC5D,OAAO,QAAQ,CAAC,IAAI,CAClB,UAAU,CAAC,CAAC,GAAG;YACb,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE;gBAC1D,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE;oBACvC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;iBACnB;aACF;YACD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;SACxB,CAAC,CACH,CAAC;KACH;;oHAxDU,uBAAuB;wHAAvB,uBAAuB,cAFtB,MAAM;2FAEP,uBAAuB;kBAHnC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCKY,qBAAqB;IAEhC,OAAO,OAAO,CAAC,MAA6B;QAC1C,OAAO;YACL,QAAQ,EAAE,qBAAqB;YAC/B,SAAS,EAAE;gBACT,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;gBACpD,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE;aAC/E;SACF,CAAC;KACH;;kHAVU,qBAAqB;mHAArB,qBAAqB;mHAArB,qBAAqB,YARvB,EACR;2FAOU,qBAAqB;kBATjC,QAAQ;mBAAC;oBACR,OAAO,EAAE,EACR;oBACD,YAAY,EAAE,EACb;oBACD,OAAO,EAAE,EACR;iBACF;;;MCZY,WAAW;CAGvB;MAEY,SAAS;CAIrB;IAEW;AAAZ,WAAY,OAAO;IACjB,uDAAiB,CAAA;IACjB,+DAAqB,CAAA;IACrB,2CAAW,CAAA;AACb,CAAC,EAJW,OAAO,KAAP,OAAO;;ACXnB;;;;ACAA;;;;;;"}
+{"version":3,"file":"kolektor-nucleus-identity.mjs","sources":["../../../projects/nucleus-identity/src/lib/utils/nucleus-crypto.ts","../../../projects/nucleus-identity/src/lib/utils/nucleus-authorization-notifier.ts","../../../projects/nucleus-identity/src/lib/models/identity.ts","../../../projects/nucleus-identity/src/lib/utils/secrets-store.ts","../../../projects/nucleus-identity/src/lib/models/service-principal.ts","../../../projects/nucleus-identity/src/lib/utils/location.service.ts","../../../projects/nucleus-identity/src/lib/utils/authorization-service-configuration.ts","../../../projects/nucleus-identity/src/lib/utils/angular-requestor.ts","../../../projects/nucleus-identity/src/lib/nucleus-identity-config.ts","../../../projects/nucleus-identity/src/lib/utils/oidc-configuration.service.ts","../../../projects/nucleus-identity/src/lib/models/device-code.ts","../../../projects/nucleus-identity/src/lib/models/client-registration.ts","../../../projects/nucleus-identity/src/lib/utils/token-client.ts","../../../projects/nucleus-identity/src/lib/nucleus-identity.service.ts","../../../projects/nucleus-identity/src/lib/nucleus-token-interceptor.service.ts","../../../projects/nucleus-identity/src/lib/nucleus-identity.module.ts","../../../projects/nucleus-identity/src/lib/models/otp.ts","../../../projects/nucleus-identity/src/public-api.ts","../../../projects/nucleus-identity/src/kolektor-nucleus-identity.ts"],"sourcesContent":["// It also supports IE with window.msCrypto !!!!!!\r\nimport { Crypto } from '@openid/appauth';\r\nimport { AppAuthError } from '@openid/appauth';\r\nimport * as base64 from 'base64-js';\r\n\r\nconst CHARSET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789';\r\n\r\nexport class NucleusCrypto implements Crypto {\r\n  private browserCrypto = window.crypto || (window as any).msCrypto;\r\n\r\n  generateRandom(size: number) {\r\n    const buffer = new Uint8Array(size);\r\n    if (this.browserCrypto) {\r\n      this.browserCrypto.getRandomValues(buffer);\r\n    } else {\r\n      // fall back to Math.random() if nothing else is available\r\n      for (let i = 0; i < size; i += 1) {\r\n        buffer[i] = Math.random();\r\n      }\r\n    }\r\n    return this.bufferToString(buffer);\r\n  }\r\n\r\n  deriveChallenge(code: string): Promise<string> {\r\n    if (code.length < 43 || code.length > 128) {\r\n      return Promise.reject(new AppAuthError('Invalid code length.'));\r\n    }\r\n    if (!this.browserCrypto.subtle) {\r\n      return Promise.reject(new AppAuthError('window.crypto.subtle is unavailable.'));\r\n    }\r\n\r\n    const ecode = this.textEncodeLite(code);\r\n    const op = this.browserCrypto.subtle.digest('SHA-256', ecode);\r\n    return new Promise((resolve, reject) => {\r\n      // if operation contains algorithm it means it is not a promise which means it is CryptoOperation from IE.\r\n      // We just return result as promise\r\n      if (op.algorithm) {\r\n        console.log('we have a CryptoOperation');\r\n        op.addEventListener('complete', () => {\r\n          resolve(this.urlSafe(op.result));\r\n        });\r\n\r\n        op.addEventListener('error', () => {\r\n          reject(op.result);\r\n        });\r\n      } else { // the result is promise\r\n        op.then(buffer => resolve(this.urlSafe(buffer)), error => reject(error));\r\n      }\r\n    });\r\n  }\r\n\r\n\r\n  private urlSafe(buffer: Uint8Array): string {\r\n    const encoded = base64.fromByteArray(new Uint8Array(buffer));\r\n    return encoded.replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\r\n  }\r\n\r\n  private textEncodeLite(str: string) {\r\n    const buf = new ArrayBuffer(str.length);\r\n    const bufView = new Uint8Array(buf);\r\n\r\n    for (let i = 0; i < str.length; i++) {\r\n      bufView[i] = str.charCodeAt(i);\r\n    }\r\n    return bufView;\r\n  }\r\n\r\n  private bufferToString(buffer: Uint8Array) {\r\n    const state = [];\r\n    for (let i = 0; i < buffer.byteLength; i += 1) {\r\n      const index = buffer[i] % CHARSET.length;\r\n      state.push(CHARSET[index]);\r\n    }\r\n    return state.join('');\r\n  }\r\n}\r\n","import { AuthorizationNotifier } from '@openid/appauth';\r\nimport { AuthorizationResponse, AuthorizationError } from '@openid/appauth';\r\nimport { AuthorizationRequest } from '@openid/appauth';\r\n\r\nexport class NucleusAuthorizationNotifier extends AuthorizationNotifier {\r\n    response: AuthorizationResponse;\r\n    request: AuthorizationRequest;\r\n    error: AuthorizationError;\r\n\r\n    constructor()  {\r\n        super();\r\n        this.setAuthorizationListener((request, response, error) => {\r\n            console.log('Authorization request complete ', request, response, error);\r\n            this.response = response;\r\n            this.request = request;\r\n            this.error = error;\r\n        });\r\n    }\r\n}\r\n","import { TokenResponse } from '@openid/appauth';\r\n\r\nexport class Claim {\r\n  public name: string;\r\n  public values: string[];\r\n\r\n  constructor(name: string, values: string[]) {\r\n    this.name = name;\r\n    this.values = values;\r\n  }\r\n}\r\n\r\nexport class Identity {\r\n  public name: string;\r\n  public subject: string;\r\n\r\n  public claims: Claim[] = [];\r\n\r\n  public static createFromResponse(res: TokenResponse): Identity {\r\n    const token = this.decodeToken(res.idToken);\r\n    const id = new Identity();\r\n    id.name = token.name;\r\n    id.subject = token.sub;\r\n    for (const key in token) {\r\n      if ({}.hasOwnProperty.call(token, key)) {\r\n        let vals = token[key];\r\n\r\n        if (!Array.isArray(vals)) {\r\n          vals = [vals];\r\n        }\r\n\r\n        const claim = new Claim(key, vals);\r\n        id.claims.push(claim);\r\n      }\r\n    }\r\n    return id;\r\n  }\r\n\r\n  private static decodeToken(jwt: string): any {\r\n    if (!jwt) {\r\n      throw new Error('NucleusIdentity: There was no identity token in the response!');\r\n    }\r\n\r\n    try {\r\n      const arr = jwt.split('.');\r\n      // var header = arr[0];\r\n      const payload = this.b64DecodeUnicode(arr[1]);\r\n      // var signature = arr[2];\r\n      return JSON.parse(payload);\r\n    } catch (error) {\r\n      console.error('Error while decoding identity token', error);\r\n      console.error('Error while decoding identity token JWT', jwt);\r\n    }\r\n  }\r\n\r\n  private static b64DecodeUnicode(str: string) {\r\n    str = str.replace(/-/g, '+').replace(/_/g, '/'); // Qlector fix :)\r\n    return decodeURIComponent(atob(str).split('').map(c => '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2)).join(''));\r\n  }\r\n}\r\n","import 'capacitor-secure-storage-plugin';\r\nimport { TokenResponse, TokenResponseJson } from '@openid/appauth';\r\nimport { Identity } from '../models/identity';\r\nimport { ServicePrincipal } from '../models/service-principal';\r\nimport { SecureStoragePlugin } from 'capacitor-secure-storage-plugin';\r\n\r\nexport class SecretsStore {\r\n  constructor(clientId: string) {\r\n    this._tokenStorageKeyPrefix = `Nucleus.Identity.${clientId}`; // do not change this or login with existing tokens will fail\r\n    this._servicePrincipalKey = `${this._tokenStorageKeyPrefix}.SvcP`;\r\n    this._defaultIdentityIdStorageKey = `${this._tokenStorageKeyPrefix}.IdId`;\r\n    this._defaultIdentityId = localStorage.getItem(this._defaultIdentityIdStorageKey);\r\n  }\r\n  private _tokenStorageKeyPrefix: string;\r\n  private _tokens: { [id: string]: TokenResponse } = {};\r\n  private _identities: { [id: string]: Identity } = {};\r\n  private _servicePrincipalKey;\r\n  private _servicePrincipal: ServicePrincipal;\r\n  // this specify which identity id is used by default, when If id is not specified in getToken or getIdentity\r\n  private _defaultIdentityId: string = null;\r\n  private _defaultIdentityIdStorageKey: string = null;\r\n\r\n  public removeServicePrincipal() {\r\n    this._servicePrincipal = null;\r\n    return this.clear(this._servicePrincipalKey);\r\n  }\r\n\r\n  public async setServicePrincipal(servicePrincipal: ServicePrincipal) {\r\n    this._servicePrincipal = servicePrincipal;\r\n    await this.save(this._servicePrincipalKey, servicePrincipal);\r\n  }\r\n\r\n  public async getServicePrincipal() {\r\n    if (!this._servicePrincipal) {\r\n      this._servicePrincipal = await this.load<ServicePrincipal>(this._servicePrincipalKey);\r\n    }\r\n    return this._servicePrincipal;\r\n  }\r\n\r\n  public setToken(token: TokenResponse, id: string = null) {\r\n    return this.setTokenInternal(token, true, id);\r\n  }\r\n\r\n  public getIdentity(id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n    return this._identities[key];\r\n  }\r\n\r\n  public setDefaultIdentityId(id: string) {\r\n    this._defaultIdentityId = id;\r\n    if (this._defaultIdentityId) {\r\n      localStorage.setItem(this._defaultIdentityIdStorageKey, this._defaultIdentityId);\r\n    } else {\r\n      localStorage.removeItem(this._defaultIdentityIdStorageKey);\r\n    }\r\n  }\r\n\r\n  public async getToken(id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n\r\n    // if token is not there or it is invalid we check storage again before returning\r\n    if (!this._tokens[key] || !this._tokens[key].isValid()) {\r\n      await this.reloadTokenFromStorage(id);\r\n    }\r\n    return this._tokens[key];\r\n  }\r\n\r\n  public removeToken(id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n    delete this._tokens[key];\r\n    delete this._identities[key];\r\n    return this.clear(key);\r\n  }\r\n\r\n  private async reloadTokenFromStorage(id: string) {\r\n    const key = this.getTokenKey(id);\r\n    const storedToken = await this.load<TokenResponseJson>(key);\r\n    if (storedToken) {\r\n      const res = new TokenResponse(storedToken);\r\n      if (res?.accessToken || res?.idToken) {\r\n        await this.setTokenInternal(res, false, id);\r\n      }\r\n    }\r\n    return null;\r\n  }\r\n\r\n  private async setTokenInternal(token: TokenResponse, save: boolean, id: string = null) {\r\n    const key = this.getTokenKey(id);\r\n    if (token == null) {\r\n      await this.removeToken(id);\r\n    } else {\r\n      this._tokens[key] = token;\r\n      this._identities[key] = Identity.createFromResponse(token);\r\n      if (save) {\r\n        try {\r\n          await this.save(key, token.toJson());\r\n        } catch (e) {\r\n          console.warn('Nucleus.Identity: Could not save to SecureStorage.');\r\n        }\r\n      }\r\n    }\r\n  }\r\n\r\n  private getTokenKey(id: string = null) {\r\n    if (!id) {\r\n      id = this._defaultIdentityId;\r\n    }\r\n    return id ? `${this._tokenStorageKeyPrefix}.${id}` : this._tokenStorageKeyPrefix;\r\n  }\r\n\r\n  private clear(key: string) {\r\n    return SecureStoragePlugin.remove({ key });\r\n  }\r\n\r\n  private save<T>(key: string, value: T): Promise<{ value: boolean }> {\r\n    return SecureStoragePlugin.set({ key, value: JSON.stringify(value) });\r\n  }\r\n\r\n  private async load<T>(key: string) {\r\n    try {\r\n      const x = await SecureStoragePlugin.get({ key });\r\n      if (x?.value) {\r\n        return JSON.parse(x.value) as T;\r\n      } else {\r\n        return null;\r\n      }\r\n    } catch {\r\n      return null;\r\n    }\r\n  }\r\n\r\n}\r\n","export class ServicePrincipal {\r\n  public id: string;\r\n  public secret: string;\r\n  public expiresAt: Date;\r\n}\r\n\r\nexport class ServicePrincipalRegistrationStatus {\r\n  public id: string;\r\n  public isRegistered = false;\r\n  public expiresAt: Date;\r\n\r\n  constructor(servicePrincipal: ServicePrincipal) {\r\n    if (servicePrincipal) {\r\n      this.isRegistered = true;\r\n      this.id = servicePrincipal.id;\r\n      this.expiresAt = servicePrincipal.expiresAt;\r\n    }\r\n  }\r\n\r\n  public get isExpired() {\r\n    return false;\r\n  }\r\n}\r\n","import { LocationLike } from '@openid/appauth';\r\nimport { NucleusAppService } from '@kolektor/nucleus-common';\r\nimport { Browser } from '@capacitor/browser';\r\nimport { Injectable } from '@angular/core';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class LocationService implements LocationLike {\r\n  constructor(private appService: NucleusAppService) {\r\n  }\r\n\r\n  get hash() {\r\n    return window.location.hash;\r\n  }\r\n  set hash(v) {\r\n    window.location.hash = v;\r\n  }\r\n\r\n  get host() {\r\n    return window.location.host;\r\n  }\r\n  set host(v) {\r\n    window.location.host = v;\r\n  }\r\n\r\n  get origin() {\r\n    return window.location.origin;\r\n  }\r\n\r\n  get hostname() {\r\n    return window.location.hostname;\r\n  }\r\n  set hostname(v) {\r\n    window.location.hostname = v;\r\n  }\r\n\r\n  get pathname() {\r\n    return window.location.pathname;\r\n  }\r\n  set pathname(v) {\r\n    window.location.pathname = v;\r\n  }\r\n\r\n  get port() {\r\n    return window.location.port;\r\n  }\r\n  set port(v) {\r\n    window.location.port = v;\r\n  }\r\n\r\n  get protocol() {\r\n    return window.location.protocol;\r\n  }\r\n  set protocol(v) {\r\n    window.location.protocol = v;\r\n  }\r\n\r\n  get search() {\r\n    return window.location.search;\r\n  }\r\n  set search(v) {\r\n    window.location.search = v;\r\n  }\r\n\r\n  assign(url: string): void {\r\n    if (this.appService.isNative) {\r\n      Browser.open({ url });\r\n    } else {\r\n      window.location.assign(url);\r\n    }\r\n  }\r\n}\r\n","import { AuthorizationServiceConfiguration, AuthorizationServiceConfigurationJson, JQueryRequestor, Requestor } from '@openid/appauth';\r\n\r\nconst WELL_KNOWN_PATH = '.well-known';\r\nconst OPENID_CONFIGURATION = 'openid-configuration';\r\n\r\nexport interface NucleusAuthorizationServiceConfigurationJson extends AuthorizationServiceConfigurationJson  {\r\n  device_authorization_endpoint?: string;\r\n  registration_endpoint?: string;\r\n}\r\n\r\nexport class NucleusAuthorizationServiceConfiguration extends AuthorizationServiceConfiguration {\r\n\r\n  constructor(request: NucleusAuthorizationServiceConfigurationJson) {\r\n    super(request);\r\n    this.deviceAuthorizationEndpoint = request.device_authorization_endpoint;\r\n    this.registrationEndpoint = request.registration_endpoint;\r\n  }\r\n\r\n  deviceAuthorizationEndpoint: string;\r\n  registrationEndpoint: string;\r\n\r\n  static fetchFromIssuer(openIdIssuerUrl: string, requestor?: Requestor) {\r\n    const fullUrl = `${openIdIssuerUrl}/${WELL_KNOWN_PATH}/${OPENID_CONFIGURATION}`;\r\n    const requestorToUse = requestor || new JQueryRequestor();\r\n    return requestorToUse\r\n        .xhr<NucleusAuthorizationServiceConfigurationJson>({url: fullUrl, dataType: 'json', method: 'GET'})\r\n        .then(json => new NucleusAuthorizationServiceConfiguration(json));\r\n  }\r\n\r\n  toJson() {\r\n    const res = super.toJson() as NucleusAuthorizationServiceConfigurationJson;\r\n    res.device_authorization_endpoint = this.deviceAuthorizationEndpoint;\r\n    return res as any;\r\n  }\r\n}\r\n","import { AppAuthError, Requestor } from '@openid/appauth';\r\nimport { Injectable } from '@angular/core';\r\nimport { HttpClient, HttpErrorResponse } from '@angular/common/http';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class AngularRequestor extends Requestor {\r\n\r\n  constructor(private http: HttpClient) {\r\n    super();\r\n  }\r\n\r\n  // eslint-disable-next-line no-undef\r\n  xhr<T>(settings: JQueryAjaxSettings): Promise<T> {\r\n    if (settings.method === undefined) {\r\n      settings.method = 'GET';\r\n    }\r\n    return new Promise<T>((resolve, reject) => {\r\n      this.http.request<T>(settings.method, settings.url, {\r\n        body: settings.data,\r\n        headers: settings.headers,\r\n      }).subscribe(res => resolve(res), err => {\r\n        let e = new AppAuthError(err);\r\n        if (err instanceof HttpErrorResponse) {\r\n          e = new AppAuthError(err.error?.error || err.statusText);\r\n        }\r\n        reject(e);\r\n      });\r\n    });\r\n  }\r\n}\r\n","export class NucleusIdentityConfig {\r\n  public authority: string = null;\r\n\r\n  public clientId: string;\r\n\r\n  public redirectUri?: string;\r\n\r\n  public androidRedirectUri?: string;\r\n\r\n  public iOSRedirectUri?: string;\r\n\r\n  public httpInterceptorUrls?: string[] = [];\r\n\r\n  public automaticLoginOnHttp401 = false;\r\n\r\n  public requestedScopes?: string;\r\n\r\n  public servicePrincipalRequestedScopes?: string;\r\n\r\n  public authProviderHint?: string;\r\n}\r\n","import { Injectable } from '@angular/core';\r\nimport { NucleusAppService } from '@kolektor/nucleus-common';\r\nimport { NucleusIdentityConfig } from '../nucleus-identity-config';\r\nimport { AngularRequestor } from './angular-requestor';\r\nimport { NucleusAuthorizationServiceConfiguration } from './authorization-service-configuration';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class OidcConfigurationService {\r\n  constructor(\r\n    private requestor: AngularRequestor,\r\n    private config: NucleusIdentityConfig,\r\n    private appService: NucleusAppService,\r\n  ) {\r\n  }\r\n\r\n  private _configuration: NucleusAuthorizationServiceConfiguration = null;\r\n\r\n  public async getConfiguration() {\r\n      await this.assureConfiguration();\r\n      return this._configuration;\r\n  }\r\n\r\n  public get clientId() {\r\n    return this.config.clientId;\r\n  }\r\n\r\n  public get requestedScopes() {\r\n    return this.config.requestedScopes;\r\n  }\r\n\r\n  public get servicePrincipalRequestedScopes() {\r\n    return this.config.servicePrincipalRequestedScopes;\r\n  }\r\n\r\n  public get authProviderHint() {\r\n    return this.config.authProviderHint;\r\n  }\r\n\r\n  public get redirectUrl() {\r\n    let uri = window.location.href;\r\n    const platform = this.appService.platform;\r\n    if (platform === 'android' && this.config.androidRedirectUri) {\r\n      uri = this.config.androidRedirectUri;\r\n    } else if (platform === 'ios' && this.config.iOSRedirectUri) {\r\n      uri = this.config.iOSRedirectUri;\r\n    } else if (this.config.redirectUri) {\r\n      uri = this.config.redirectUri;\r\n    }\r\n    return this.NormalizeRedirectUri(uri);\r\n  }\r\n\r\n  public getServerUrl(relativeUri: string = null) {\r\n    let authority = this.config.authority;\r\n    if (!authority || authority === 'origin') {\r\n      authority = window.origin;\r\n    }\r\n\r\n    let url = new URL(authority);\r\n\r\n    if (relativeUri) {\r\n      url = new URL(relativeUri, url);\r\n    }\r\n\r\n    return url.href;\r\n  }\r\n\r\n  private NormalizeRedirectUri(uri: string) {\r\n    const i = uri.indexOf('#');\r\n    if (i > 0) {\r\n      uri = uri.substring(0, i);\r\n    }\r\n    return uri;\r\n  }\r\n\r\n  private async assureConfiguration() {\r\n    if (this._configuration != null) {\r\n      return;\r\n    }\r\n    let authority = this.getServerUrl();\r\n    if (authority[authority.length - 1] === '/') {\r\n      authority = authority.slice(0, -1);\r\n    }\r\n    try {\r\n      this._configuration = await NucleusAuthorizationServiceConfiguration.fetchFromIssuer(authority, this.requestor);\r\n    } catch (e) {\r\n      console.error('Nucleus.Identity: Cannot load OIDC configuration: ' + (e as Error).message);\r\n      throw e;\r\n    }\r\n  }\r\n}\r\n","import { nowInSeconds } from '@openid/appauth';\r\n\r\nexport interface DeviceCodeJson {\r\n  device_code: string;\r\n  user_code: string;\r\n  verification_uri: string;\r\n  verification_uri_complete: string;\r\n  expires_in: string;\r\n  message: string;\r\n}\r\n\r\nexport class DeviceCode {\r\n  constructor(response: DeviceCodeJson) {\r\n    this.deviceCode = response.device_code;\r\n    this.userCode = response.user_code;\r\n    this.verificationUrl = response.verification_uri;\r\n    this.verificationUrlComplete = response.verification_uri_complete;\r\n    this.expiresIn = parseInt(response.expires_in, 10);\r\n    this.issuedAt =  nowInSeconds();\r\n  }\r\n\r\n  private expiresIn: number;\r\n  private issuedAt: number;\r\n\r\n  public deviceCode: string;\r\n  public userCode: string;\r\n  public verificationUrl: string;\r\n  public verificationUrlComplete: string;\r\n\r\n  isExpired(buffer: number = 60) {\r\n\r\n    return this.secondsLeft(buffer) <= 0;\r\n  }\r\n\r\n  secondsLeft(buffer: number = 60) {\r\n    const now = nowInSeconds();\r\n    return (this.issuedAt + this.expiresIn - buffer) - now;\r\n  }\r\n}\r\n","export interface ClientRegistrationResponseJson {\r\n  client_id: string;\r\n  client_secret: string;\r\n  client_secret_expires_at: number;\r\n}\r\n\r\nexport class ClientRegistrationResponse {\r\n  constructor(response: ClientRegistrationResponseJson) {\r\n    this.clientId = response.client_id;\r\n    this.clientSecret = response.client_secret;\r\n    this.secretExpirationDate = new Date(response.client_secret_expires_at * 1000);\r\n  }\r\n\r\n  clientId: string;\r\n  clientSecret: string;\r\n  secretExpirationDate: Date;\r\n}\r\n","import {\r\n  AppAuthError,\r\n  BaseTokenRequestHandler,\r\n  BasicQueryStringUtils,\r\n  GRANT_TYPE_AUTHORIZATION_CODE,\r\n  GRANT_TYPE_REFRESH_TOKEN,\r\n  QueryStringUtils,\r\n  StringMap,\r\n  TokenErrorJson,\r\n  TokenRequest,\r\n  TokenRequestHandler} from '@openid/appauth';\r\nimport { OidcConfigurationService } from './oidc-configuration.service';\r\nimport { AngularRequestor } from './angular-requestor';\r\nimport { Injectable } from '@angular/core';\r\nimport { DeviceCode, DeviceCodeJson } from '../models/device-code';\r\nimport { ClientRegistrationResponse, ClientRegistrationResponseJson } from '../models/client-registration';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class TokenClient  {\r\n  constructor(\r\n    private requestor: AngularRequestor,\r\n    private config: OidcConfigurationService\r\n  ) {\r\n    this._tokenHandler = new BaseTokenRequestHandler(requestor);\r\n    this._utils = new BasicQueryStringUtils();\r\n  }\r\n\r\n  private _tokenHandler: TokenRequestHandler;\r\n  private _utils: QueryStringUtils;\r\n\r\n  public async getByAuthorizationCode(redirectUrl: string, code: string, codeVerifier: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const redirectUri = redirectUrl;\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: redirectUri,\r\n      grant_type: GRANT_TYPE_AUTHORIZATION_CODE,\r\n      code,\r\n      extras: { code_verifier: codeVerifier }\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getByRefreshToken(refreshToken: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const redirectUri = this.config.redirectUrl;\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: redirectUri,\r\n      grant_type: GRANT_TYPE_REFRESH_TOKEN,\r\n      refresh_token: refreshToken\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getByClientCredentials(clientId: string, clientSecret: string, scope: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const req = new TokenRequest({\r\n      client_id: clientId,\r\n      redirect_uri: null,\r\n      grant_type: 'client_credentials',\r\n      extras: {\r\n        client_secret: clientSecret,\r\n        scope,\r\n      }\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getBySecret(provider: string, secret: string, assertionToken: string, scope: string) {\r\n    const config = await this.config.getConfiguration();\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: null,\r\n      grant_type: 'urn:kolektor:nucleus:secret',\r\n      extras: {\r\n        secret_provider: provider,\r\n        secret_value: secret,\r\n        client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',\r\n        client_assertion: assertionToken,\r\n        scope,\r\n      }\r\n    });\r\n\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async getByDeviceCode(deviceCode: string) {\r\n    const config =  await this.config.getConfiguration();\r\n    const req = new TokenRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: null,\r\n      grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\r\n      extras: {\r\n        device_code: deviceCode\r\n      }\r\n    });\r\n    return await this._tokenHandler.performTokenRequest(config, req);\r\n  }\r\n\r\n  public async registerServicePrincipal(token: string) {\r\n    const config =  await this.config.getConfiguration();\r\n\r\n    const response = await this.requestor.xhr<ClientRegistrationResponseJson | TokenErrorJson>({\r\n      url: config.registrationEndpoint,\r\n      method: 'POST',\r\n      dataType: 'json',\r\n      headers: {\r\n        'Content-Type': 'application/json',\r\n        Authorization: `Bearer ${token}`\r\n      }\r\n      // data: this._utils.stringify(map)\r\n    });\r\n\r\n    if ((response as TokenErrorJson).error === undefined) {\r\n      return new ClientRegistrationResponse(response as ClientRegistrationResponseJson);\r\n    } else {\r\n      throw new AppAuthError((response as TokenErrorJson).error);\r\n    }\r\n  }\r\n\r\n  public async getRegistrationCode(existingServicePrincipalId: string = null) {\r\n    const params = {\r\n      custom_action: 'sp_register',\r\n      service_principal_id: existingServicePrincipalId\r\n    };\r\n    return this.getDeviceCodeInternal(params);\r\n  }\r\n\r\n  public async getDeviceCode(scope: string) {\r\n    const params = {\r\n      scope,\r\n    };\r\n    return this.getDeviceCodeInternal(params);\r\n  }\r\n\r\n  private async getDeviceCodeInternal(params: StringMap) {\r\n    const config =  await this.config.getConfiguration();\r\n\r\n    params['client_id'] = this.config.clientId;\r\n    const map: StringMap = params;\r\n\r\n    const response = await this.requestor.xhr<DeviceCodeJson | TokenErrorJson>({\r\n      url: config.deviceAuthorizationEndpoint,\r\n      method: 'POST',\r\n      dataType: 'json',\r\n      headers: {'Content-Type': 'application/x-www-form-urlencoded'},\r\n      data: this._utils.stringify(map)\r\n    });\r\n\r\n    if ((response as TokenErrorJson).error === undefined) {\r\n      return new DeviceCode(response as DeviceCodeJson);\r\n    } else {\r\n      throw new AppAuthError((response as TokenErrorJson).error);\r\n    }\r\n  }\r\n\r\n\r\n}\r\n","import {\r\n  AuthorizationRequest,\r\n  TokenResponse,\r\n  Crypto,\r\n  RedirectRequestHandler,\r\n  BasicQueryStringUtils,\r\n  LocalStorageBackend,\r\n  AppAuthError\r\n} from '@openid/appauth';\r\n\r\nimport { Injectable } from '@angular/core';\r\nimport { App } from '@capacitor/app';\r\nimport { Browser } from '@capacitor/browser';\r\nimport { Device } from '@capacitor/device';\r\nimport { NucleusCrypto } from './utils/nucleus-crypto';\r\nimport { NucleusAppService } from '@kolektor/nucleus-common';\r\nimport { LocationService } from './utils/location.service';\r\nimport { AuthorizationRequestHandler } from '@openid/appauth';\r\nimport { NucleusAuthorizationNotifier } from './utils/nucleus-authorization-notifier';\r\nimport { HttpClient } from '@angular/common/http';\r\nimport { OtpResponse, OtpStatus, OtpType } from './models/otp';\r\nimport { SecretsStore } from './utils/secrets-store';\r\nimport { OidcConfigurationService } from './utils/oidc-configuration.service';\r\nimport { TokenClient } from './utils/token-client';\r\nimport { DeviceCode } from './models/device-code';\r\nimport { ServicePrincipalRegistrationStatus } from './models/service-principal';\r\nimport { lastValueFrom } from 'rxjs';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class NucleusIdentityService {\r\n  constructor(\r\n    private appService: NucleusAppService,\r\n    location: LocationService,\r\n    private http: HttpClient,\r\n    private config: OidcConfigurationService,\r\n    private tokenClient: TokenClient\r\n  ) {\r\n    const storage = new LocalStorageBackend();\r\n    this._crypto = new NucleusCrypto();\r\n    this._authorizationHandler = new RedirectRequestHandler(storage, new BasicQueryStringUtils(), location, this._crypto);\r\n    this._authorizationHandler.setAuthorizationNotifier(this._authorizationNotifier);\r\n    this._store = new SecretsStore(config.clientId);\r\n  }\r\n\r\n  private _authorizationHandler: AuthorizationRequestHandler;\r\n  private _authorizationNotifier = new NucleusAuthorizationNotifier();\r\n  private _crypto: Crypto;\r\n  private _initStarted = false;\r\n  private _initialized = false;\r\n  private _refreshTokenPromise: Promise<TokenResponse>;\r\n  private _getTokenPromise: Promise<string>;\r\n  private _getServicePrincipalTokenPromise: Promise<string>;\r\n  private _servicePrincipalTokenId = '_svcp';\r\n  private _store: SecretsStore;\r\n\r\n  public get identity() {\r\n    return this._store.getIdentity();\r\n  }\r\n\r\n  public get isAuthenticated() {\r\n    return this.identity != null;\r\n  }\r\n\r\n  public get servicePrincipalIdentity() {\r\n    return this._store.getIdentity(this._servicePrincipalTokenId);\r\n  }\r\n\r\n  public get isServicePrincipalAuthenticated() {\r\n    return this.servicePrincipalIdentity != null;\r\n  }\r\n\r\n  public async init(startLogin: boolean = false): Promise<void> {\r\n    if (this._initStarted || this._initialized) {\r\n      console.warn('Nucleus.Identity: Auth initialization was already started. Don\\'t call init() multiple times!');\r\n      return;\r\n    }\r\n    this._initStarted = true;\r\n\r\n    this.handleLaunchCodeHash();\r\n    await this._authorizationHandler.completeAuthorizationRequestIfPossible();\r\n\r\n    const authErr = this._authorizationNotifier.error;\r\n    if (authErr) {\r\n      throw new Error('Authorization err: ' + authErr.error + ': ' + authErr.errorDescription);\r\n    } else if (this._authorizationNotifier.response) {\r\n      window.location.hash = '';\r\n      const request = this._authorizationNotifier.request;\r\n      const response = this._authorizationNotifier.response;\r\n      const res = await this.tokenClient.getByAuthorizationCode(request.redirectUri, response.code, request.internal['code_verifier']);\r\n      this._store.setDefaultIdentityId(null);\r\n      await this._store.setToken(res);\r\n    } else {\r\n      const res = await this._store.getToken();\r\n      if (!res && startLogin) {\r\n        await this.login();\r\n      }\r\n    }\r\n    this._initialized = true;\r\n  }\r\n\r\n  public async loginWithSecret(provider: string, secret: string): Promise<void> {\r\n    this._store.removeToken();\r\n    const assertionToken = await this.getServicePrincipalAccessToken();\r\n    const scope = this.prepareScope(true, this.config?.requestedScopes);\r\n    const res = await this.tokenClient.getBySecret(provider, secret, assertionToken, scope);\r\n    this._store.setDefaultIdentityId(null);\r\n    await this._store.setToken(res);\r\n  }\r\n\r\n  public async login(): Promise<void> {\r\n    this._store.removeToken();\r\n    const config = await this.config.getConfiguration();\r\n    const request = this.prepareAuthorizationRequest();\r\n    if (this.appService.isNative) {\r\n      const listener = App.addListener('appUrlOpen', data => {\r\n        if (this.appService.platform === 'ios') {\r\n          Browser.close();\r\n        }\r\n        listener.remove();\r\n        const hash = this.getCodeHash(data.url);\r\n        if (hash) {\r\n          const targetUrl = window.location.origin + window.location.pathname + '#' + hash;\r\n          window.location.assign(targetUrl);\r\n          window.location.reload();\r\n        } else {\r\n          console.warn('Nucleus.Identity: Redirect url did not contain authorization code!', data);\r\n        }\r\n      });\r\n    }\r\n    this._authorizationHandler.performAuthorizationRequest(config, request);\r\n  }\r\n\r\n  public async logout(): Promise<void> {\r\n    this._store.removeToken();\r\n    const config = await this.config.getConfiguration();\r\n    const redirectUrl = this.config.redirectUrl;\r\n    const logoutUrl = config.endSessionEndpoint + '?post_logout_redirect_uri=' + encodeURI(redirectUrl);\r\n    if (this.appService.isNative) {\r\n      const listener = App.addListener('appUrlOpen', () => {\r\n        Device.getInfo().then(info => {\r\n          if (info.platform === 'ios') {\r\n            Browser.close();\r\n          }\r\n        });\r\n        listener.remove();\r\n      });\r\n      Browser.open({ url: logoutUrl });\r\n    } else {\r\n      window.location.assign(logoutUrl);\r\n    }\r\n  }\r\n\r\n  public async getAccessToken() {\r\n    if (!this._getTokenPromise) {\r\n      this._getTokenPromise = this.getAccessTokenInternal();\r\n    }\r\n    try {\r\n      return await this._getTokenPromise;\r\n    } finally {\r\n      this._getTokenPromise = null;\r\n    }\r\n  }\r\n\r\n  public async getServicePrincipalAccessToken() {\r\n    if (!this._getServicePrincipalTokenPromise) {\r\n      this._getServicePrincipalTokenPromise = this.getServicePrincipalAccessTokenInternal();\r\n    }\r\n    try {\r\n      return await this._getServicePrincipalTokenPromise;\r\n    } finally {\r\n      this._getServicePrincipalTokenPromise = null;\r\n    }\r\n  }\r\n\r\n  public async loginServicePrincipal() {\r\n    const sp = await this._store.getServicePrincipal();\r\n    if (sp) {\r\n      const scope = this.prepareScope(false, this.config.servicePrincipalRequestedScopes);\r\n      const res = await this.tokenClient.getByClientCredentials(sp.id, sp.secret, scope);\r\n      await this._store.setToken(res, this._servicePrincipalTokenId);\r\n      return res;\r\n    } else {\r\n      throw Error('Service principal is not registered!');\r\n    }\r\n  }\r\n\r\n  public async loginAsServicePrincipal() {\r\n    const token = await this._store.getToken(this._servicePrincipalTokenId);\r\n    if (!token) {\r\n      await this.loginServicePrincipal();\r\n    }\r\n    this._store.setDefaultIdentityId(this._servicePrincipalTokenId);\r\n  }\r\n\r\n  public async getOtp(type: OtpType, expiresIn: number = -1) {\r\n    let url = this.config.getServerUrl(`/otp/create?type=${type}`);\r\n    if (expiresIn > 0) {\r\n      url += `&expiresIn=${expiresIn}`;\r\n    }\r\n    return lastValueFrom(this.http.get<OtpResponse>(url));\r\n  }\r\n\r\n  public async getOtpStatus(id: string) {\r\n    const url = this.config.getServerUrl(`/otp/status/${id}`);\r\n    return lastValueFrom(this.http.get<OtpStatus>(url));\r\n  }\r\n\r\n  public getOtpUrl(redirectUrl: string, password: string) {\r\n    const encoded = encodeURIComponent(redirectUrl);\r\n    const url = `/otp/auth?otpValue=${password}&returnUrl=${encoded}`;\r\n    return this.config.getServerUrl(url);\r\n  }\r\n\r\n  public async startServicePrincipalRegistration() {\r\n    const sp = await this._store.getServicePrincipal();\r\n    return await this.tokenClient.getRegistrationCode(sp?.id);\r\n  }\r\n\r\n  public async completeServicePrincipalRegistration(deviceCode: DeviceCode) {\r\n    const tokenRes = await this.waitForDeviceToken(deviceCode);\r\n    const regRes = await this.tokenClient.registerServicePrincipal(tokenRes.accessToken);\r\n\r\n    await this._store.setServicePrincipal({\r\n      id: regRes.clientId,\r\n      secret: regRes.clientSecret,\r\n      expiresAt: regRes.secretExpirationDate\r\n    });\r\n  }\r\n\r\n  public removeServicePrincipalRegistration() {\r\n    return this._store.removeServicePrincipal();\r\n  }\r\n\r\n  public async getServicePrincipalRegistrationStatus() {\r\n    const sp = await this._store.getServicePrincipal();\r\n    return new ServicePrincipalRegistrationStatus(sp);\r\n  }\r\n\r\n  public async startDeviceCodeLogin() {\r\n    const scope = this.prepareScope(true, this.config.requestedScopes);\r\n    return await this.tokenClient.getDeviceCode(scope);\r\n  }\r\n\r\n  public async completeDeviceCodeLogin(deviceCode: DeviceCode) {\r\n    const res = await this.waitForDeviceToken(deviceCode);\r\n    await this._store.setToken(res);\r\n  }\r\n\r\n  private async waitForDeviceToken(deviceCode: DeviceCode) {\r\n    let res: TokenResponse = null;\r\n    do {\r\n      if (deviceCode.isExpired()) {\r\n        throw Error('Device code is expired!');\r\n      }\r\n\r\n      try {\r\n        res = await this.tokenClient.getByDeviceCode(deviceCode.deviceCode);\r\n      } catch (error) {\r\n        if (error instanceof AppAuthError && error.message === 'authorization_pending') {\r\n          await this.delay(2000);\r\n        } else {\r\n          throw error;\r\n        }\r\n      }\r\n    } while (!res);\r\n    return res;\r\n  }\r\n\r\n  private prepareAuthorizationRequest(): AuthorizationRequest {\r\n    const redirectUri = this.config.redirectUrl;\r\n\r\n    const params = {\r\n      response_mode: 'fragment',\r\n      prompt: 'consent',\r\n      access_type: 'offline',\r\n      auth_provider_hint: this.config.authProviderHint\r\n    };\r\n\r\n    return new AuthorizationRequest({\r\n      client_id: this.config.clientId,\r\n      redirect_uri: redirectUri,\r\n      response_type: AuthorizationRequest.RESPONSE_TYPE_CODE,\r\n      scope: this.prepareScope(true, this.config.requestedScopes),\r\n      extras: params,\r\n    }, this._crypto, true);\r\n  }\r\n\r\n  private async getServicePrincipalAccessTokenInternal() {\r\n    let token = await this._store.getToken(this._servicePrincipalTokenId);\r\n    if (!token?.isValid()) {\r\n      token = await this.loginServicePrincipal();\r\n    }\r\n    return token?.accessToken;\r\n  }\r\n\r\n  private async getAccessTokenInternal() {\r\n    let token = await this._store.getToken();\r\n    if (token && !token.isValid()) {\r\n      token = await this.loginWithRefreshToken(token);\r\n    }\r\n    return token?.accessToken;\r\n  }\r\n\r\n  private async loginWithRefreshToken(token: TokenResponse) {\r\n    if (!this._refreshTokenPromise) {\r\n      this._refreshTokenPromise = this.loginWithRefreshTokenInternal(token);\r\n    }\r\n    try {\r\n      return await this._refreshTokenPromise;\r\n    } finally {\r\n      this._refreshTokenPromise = null;\r\n    }\r\n  }\r\n\r\n  private async loginWithRefreshTokenInternal(token: TokenResponse) {\r\n    if (token?.refreshToken) {\r\n      try {\r\n        const res = await this.tokenClient.getByRefreshToken(token.refreshToken);\r\n        await this._store.setToken(res);\r\n        return res;\r\n      } catch (err) {\r\n        console.warn('Nucleus.Identity: Failed to login with refresh token.', err);\r\n        if (err.message === 'invalid_grant') {\r\n          await this.logout();\r\n        }\r\n      }\r\n    } else {\r\n      console.warn('Nucleus.Identity: There is no refresh token available.');\r\n    }\r\n  }\r\n\r\n  private getCodeHash(url: string) {\r\n    const arr = url.split('#');\r\n    if (arr.length > 1) {\r\n      const hash = arr[1];\r\n      if (hash.startsWith('code=')) {\r\n        return hash;\r\n      }\r\n    }\r\n    return null;\r\n  }\r\n\r\n  private handleLaunchCodeHash() {\r\n    if (this.appService.isNative && this.appService.launchUrl) {\r\n      const hash = this.getCodeHash(this.appService.launchUrl);\r\n      if (hash) {\r\n        console.log('Nucleus.Identity: Got authorization code from launchUrl, will assign it to hash.');\r\n        window.location.hash = '#' + hash;\r\n      }\r\n    }\r\n  }\r\n\r\n  private prepareScope(offlineAccess: boolean, aditionalScope: string) {\r\n    let scope = 'openid';\r\n    if (offlineAccess) {\r\n      scope += ' offline_access';\r\n    }\r\n    if (scope) {\r\n      scope += ' ' + aditionalScope;\r\n    }\r\n    return scope;\r\n  }\r\n\r\n  private delay(miliseconds: number) {\r\n    return new Promise<void>(resolve => {\r\n      setTimeout(() => {\r\n        resolve();\r\n      }, miliseconds);\r\n    });\r\n  }\r\n}\r\n","import { Injectable } from '@angular/core';\r\nimport { HttpEvent, HttpHandler, HttpInterceptor, HttpRequest, HttpErrorResponse } from '@angular/common/http';\r\nimport { Observable, from, throwError } from 'rxjs';\r\nimport { NucleusIdentityConfig } from './nucleus-identity-config';\r\nimport { NucleusIdentityService } from './nucleus-identity.service';\r\nimport { mergeMap, catchError } from 'rxjs/operators';\r\n\r\n@Injectable({\r\n  providedIn: 'root'\r\n})\r\nexport class NucleusTokenInterceptor implements HttpInterceptor {\r\n  constructor(private auth: NucleusIdentityService, private config: NucleusIdentityConfig\r\n  ) {\r\n    this._authority = config.authority.toLowerCase();\r\n    this._interceptUrls = config.httpInterceptorUrls?.map(x => x.toLowerCase());\r\n  }\r\n\r\n  private _authority: string;\r\n  private _authorityInterceptPaths = ['/api', '/manage', '/otp/create', '/otp/status'];\r\n  private _interceptUrls: string[];\r\n\r\n  public intercept(req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\r\n    if (this.shouldIntercept(req.url)) {\r\n      const res = this.authorizeRequest(this.auth.getAccessToken(), req, next);\r\n      return this.checkUnauthorized(res);\r\n    }\r\n    return next.handle(req);\r\n  }\r\n\r\n  private shouldIntercept(url: string): boolean {\r\n    url = url.toLowerCase();\r\n\r\n    if (url.startsWith(this._authority)) {\r\n      const pathname = new URL(url).pathname;\r\n      return (this._authorityInterceptPaths.some(x => pathname.startsWith(x)));\r\n    }\r\n\r\n    if (this._interceptUrls?.length > 0) {\r\n      return this.config.httpInterceptorUrls.some(x => url.startsWith(x));\r\n    }\r\n    return false;\r\n  }\r\n\r\n  private authorizeRequest(getToken: Promise<string>, req: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> {\r\n    return from(getToken).pipe(\r\n      mergeMap(token => {\r\n        if (token) {\r\n            const headers = req.headers.set('Authorization', `Bearer ${token}`);\r\n            req = req.clone({ headers });\r\n        }\r\n        return next.handle(req);\r\n      })\r\n    );\r\n  }\r\n\r\n  private checkUnauthorized(response: Observable<HttpEvent<any>>): Observable<HttpEvent<any>> {\r\n    return response.pipe(\r\n      catchError((err) => {\r\n        if (err instanceof HttpErrorResponse && err.status === 401) {\r\n          if (this.config.automaticLoginOnHttp401) {\r\n            this.auth.login();\r\n          }\r\n        }\r\n        return throwError(err);\r\n      })\r\n    );\r\n  }\r\n}\r\n","import { NgModule, ModuleWithProviders } from '@angular/core';\r\nimport { HTTP_INTERCEPTORS } from '@angular/common/http';\r\nimport { NucleusTokenInterceptor } from './nucleus-token-interceptor.service';\r\nimport { NucleusIdentityConfig } from './nucleus-identity-config';\r\n\r\n@NgModule({\r\n  imports: [\r\n  ],\r\n  declarations: [\r\n  ],\r\n  exports: [\r\n  ]\r\n})\r\n\r\nexport class NucleusIdentityModule {\r\n\r\n  static forRoot(config: NucleusIdentityConfig): ModuleWithProviders<NucleusIdentityModule> {\r\n    return {\r\n      ngModule: NucleusIdentityModule,\r\n      providers: [\r\n        { provide: NucleusIdentityConfig, useValue: config },\r\n        { provide: HTTP_INTERCEPTORS, useClass: NucleusTokenInterceptor, multi: true },\r\n      ]\r\n    };\r\n  }\r\n}\r\n","export class OtpResponse {\r\n    public password: string;\r\n    public passwordId: string;\r\n}\r\n\r\nexport class OtpStatus {\r\n    public isExpired: boolean;\r\n    public isUsed: boolean;\r\n    public secondsToExpiration: number;\r\n}\r\n\r\nexport enum OtpType {\r\n  SimpleNumbers = 0,\r\n  SimpleAlfanumeric = 1,\r\n  Complex = 2\r\n}\r\n","/*\r\n * Public API Surface of nucleus-identity\r\n */\r\n\r\nexport * from './lib/nucleus-identity.module';\r\nexport * from './lib/nucleus-identity.service';\r\nexport * from './lib/nucleus-identity-config';\r\nexport { OtpResponse, OtpStatus, OtpType } from './lib/models/otp';\r\nexport { DeviceCode } from './lib/models/device-code';\r\nexport { Identity } from './lib/models/identity';\r\nexport { ServicePrincipalRegistrationStatus } from './lib/models/service-principal';\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;;;;;;;;;;;AAKA,MAAM,OAAO,GAAG,gEAAgE,CAAC;MAEpE,aAAa;IAA1B;QACU,kBAAa,GAAG,MAAM,CAAC,MAAM,IAAK,MAAc,CAAC,QAAQ,CAAC;KAmEnE;IAjEC,cAAc,CAAC,IAAY;QACzB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,aAAa,EAAE;YACtB,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;SAC5C;aAAM;;YAEL,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE;gBAChC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;aAC3B;SACF;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;KACpC;IAED,eAAe,CAAC,IAAY;QAC1B,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;YACzC,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,sBAAsB,CAAC,CAAC,CAAC;SACjE;QACD,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE;YAC9B,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,sCAAsC,CAAC,CAAC,CAAC;SACjF;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC9D,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM;;;YAGjC,IAAI,EAAE,CAAC,SAAS,EAAE;gBAChB,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;gBACzC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE;oBAC9B,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;iBAClC,CAAC,CAAC;gBAEH,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE;oBAC3B,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;iBACnB,CAAC,CAAC;aACJ;iBAAM;gBACL,EAAE,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;aAC1E;SACF,CAAC,CAAC;KACJ;IAGO,OAAO,CAAC,MAAkB;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;KAC1E;IAEO,cAAc,CAAC,GAAW;QAChC,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;QAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;YACnC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;SAChC;QACD,OAAO,OAAO,CAAC;KAChB;IAEO,cAAc,CAAC,MAAkB;QACvC,MAAM,KAAK,GAAG,EAAE,CAAC;QACjB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE;YAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;SAC5B;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KACvB;;;MCtEU,qCAAqC,qBAAqB;IAKnE;QACI,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK;YACnD,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzE,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;SACtB,CAAC,CAAC;KACN;;;MCfQ,KAAK;IAIhB,YAAY,IAAY,EAAE,MAAgB;QACxC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;KACtB;CACF;MAEY,QAAQ;IAArB;QAIS,WAAM,GAAY,EAAE,CAAC;KA2C7B;IAzCQ,OAAO,kBAAkB,CAAC,GAAkB;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC1B,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACrB,EAAE,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE;YACvB,IAAI,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE;gBACtC,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;gBAEtB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;oBACxB,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;iBACf;gBAED,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACnC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;aACvB;SACF;QACD,OAAO,EAAE,CAAC;KACX;IAEO,OAAO,WAAW,CAAC,GAAW;QACpC,IAAI,CAAC,GAAG,EAAE;YACR,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;SAClF;QAED,IAAI;YACF,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;;YAE3B,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;;YAE9C,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SAC5B;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAC;YAC5D,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;SAC/D;KACF;IAEO,OAAO,gBAAgB,CAAC,GAAW;QACzC,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChD,OAAO,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;KACzH;;;MCpDU,YAAY;IACvB,YAAY,QAAgB;QAOpB,YAAO,GAAoC,EAAE,CAAC;QAC9C,gBAAW,GAA+B,EAAE,CAAC;;QAI7C,uBAAkB,GAAW,IAAI,CAAC;QAClC,iCAA4B,GAAW,IAAI,CAAC;QAZlD,IAAI,CAAC,sBAAsB,GAAG,oBAAoB,QAAQ,EAAE,CAAC;QAC7D,IAAI,CAAC,oBAAoB,GAAG,GAAG,IAAI,CAAC,sBAAsB,OAAO,CAAC;QAClE,IAAI,CAAC,4BAA4B,GAAG,GAAG,IAAI,CAAC,sBAAsB,OAAO,CAAC;QAC1E,IAAI,CAAC,kBAAkB,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;KACnF;IAUM,sBAAsB;QAC3B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;QAC9B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;KAC9C;IAEY,mBAAmB,CAAC,gBAAkC;;YACjE,IAAI,CAAC,iBAAiB,GAAG,gBAAgB,CAAC;YAC1C,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC,CAAC;SAC9D;KAAA;IAEY,mBAAmB;;YAC9B,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBAC3B,IAAI,CAAC,iBAAiB,GAAG,MAAM,IAAI,CAAC,IAAI,CAAmB,IAAI,CAAC,oBAAoB,CAAC,CAAC;aACvF;YACD,OAAO,IAAI,CAAC,iBAAiB,CAAC;SAC/B;KAAA;IAEM,QAAQ,CAAC,KAAoB,EAAE,KAAa,IAAI;QACrD,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;KAC/C;IAEM,WAAW,CAAC,KAAa,IAAI;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;KAC9B;IAEM,oBAAoB,CAAC,EAAU;QACpC,IAAI,CAAC,kBAAkB,GAAG,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,kBAAkB,EAAE;YAC3B,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE,IAAI,CAAC,kBAAkB,CAAC,CAAC;SAClF;aAAM;YACL,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;SAC5D;KACF;IAEY,QAAQ,CAAC,KAAa,IAAI;;YACrC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;;YAGjC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;gBACtD,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;aACvC;YACD,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;SAC1B;KAAA;IAEM,WAAW,CAAC,KAAa,IAAI;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;KACxB;IAEa,sBAAsB,CAAC,EAAU;;YAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAoB,GAAG,CAAC,CAAC;YAC5D,IAAI,WAAW,EAAE;gBACf,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC,CAAC;gBAC3C,IAAI,CAAA,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,WAAW,MAAI,GAAG,aAAH,GAAG,uBAAH,GAAG,CAAE,OAAO,CAAA,EAAE;oBACpC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;iBAC7C;aACF;YACD,OAAO,IAAI,CAAC;SACb;KAAA;IAEa,gBAAgB,CAAC,KAAoB,EAAE,IAAa,EAAE,KAAa,IAAI;;YACnF,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;YACjC,IAAI,KAAK,IAAI,IAAI,EAAE;gBACjB,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;aAC5B;iBAAM;gBACL,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;gBAC1B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;gBAC3D,IAAI,IAAI,EAAE;oBACR,IAAI;wBACF,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;qBACtC;oBAAC,OAAO,CAAC,EAAE;wBACV,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;qBACpE;iBACF;aACF;SACF;KAAA;IAEO,WAAW,CAAC,KAAa,IAAI;QACnC,IAAI,CAAC,EAAE,EAAE;YACP,EAAE,GAAG,IAAI,CAAC,kBAAkB,CAAC;SAC9B;QACD,OAAO,EAAE,GAAG,GAAG,IAAI,CAAC,sBAAsB,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,sBAAsB,CAAC;KAClF;IAEO,KAAK,CAAC,GAAW;QACvB,OAAO,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;KAC5C;IAEO,IAAI,CAAI,GAAW,EAAE,KAAQ;QACnC,OAAO,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;KACvE;IAEa,IAAI,CAAI,GAAW;;YAC/B,IAAI;gBACF,MAAM,CAAC,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,KAAK,EAAE;oBACZ,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAM,CAAC;iBACjC;qBAAM;oBACL,OAAO,IAAI,CAAC;iBACb;aACF;YAAC,WAAM;gBACN,OAAO,IAAI,CAAC;aACb;SACF;KAAA;;;MCjIU,gBAAgB;CAI5B;MAEY,kCAAkC;IAK7C,YAAY,gBAAkC;QAHvC,iBAAY,GAAG,KAAK,CAAC;QAI1B,IAAI,gBAAgB,EAAE;YACpB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YACzB,IAAI,CAAC,EAAE,GAAG,gBAAgB,CAAC,EAAE,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,gBAAgB,CAAC,SAAS,CAAC;SAC7C;KACF;IAED,IAAW,SAAS;QAClB,OAAO,KAAK,CAAC;KACd;;;MCbU,eAAe;IAC1B,YAAoB,UAA6B;QAA7B,eAAU,GAAV,UAAU,CAAmB;KAChD;IAED,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC7B;IACD,IAAI,IAAI,CAAC,CAAC;QACR,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;KAC1B;IAED,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC7B;IACD,IAAI,IAAI,CAAC,CAAC;QACR,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;KAC1B;IAED,IAAI,MAAM;QACR,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC/B;IAED,IAAI,QAAQ;QACV,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjC;IACD,IAAI,QAAQ,CAAC,CAAC;QACZ,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;KAC9B;IAED,IAAI,QAAQ;QACV,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjC;IACD,IAAI,QAAQ,CAAC,CAAC;QACZ,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;KAC9B;IAED,IAAI,IAAI;QACN,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;KAC7B;IACD,IAAI,IAAI,CAAC,CAAC;QACR,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;KAC1B;IAED,IAAI,QAAQ;QACV,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;KACjC;IACD,IAAI,QAAQ,CAAC,CAAC;QACZ,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC,CAAC;KAC9B;IAED,IAAI,MAAM;QACR,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;KAC/B;IACD,IAAI,MAAM,CAAC,CAAC;QACV,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;KAC5B;IAED,MAAM,CAAC,GAAW;QAChB,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YAC5B,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;SACvB;aAAM;YACL,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SAC7B;KACF;;4GA/DU,eAAe;gHAAf,eAAe,cAFd,MAAM;2FAEP,eAAe;kBAH3B,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;ACLD,MAAM,eAAe,GAAG,aAAa,CAAC;AACtC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;MAOvC,iDAAiD,iCAAiC;IAE7F,YAAY,OAAqD;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,2BAA2B,GAAG,OAAO,CAAC,6BAA6B,CAAC;QACzE,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC;KAC3D;IAKD,OAAO,eAAe,CAAC,eAAuB,EAAE,SAAqB;QACnE,MAAM,OAAO,GAAG,GAAG,eAAe,IAAI,eAAe,IAAI,oBAAoB,EAAE,CAAC;QAChF,MAAM,cAAc,GAAG,SAAS,IAAI,IAAI,eAAe,EAAE,CAAC;QAC1D,OAAO,cAAc;aAChB,GAAG,CAA+C,EAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAC,CAAC;aAClG,IAAI,CAAC,IAAI,IAAI,IAAI,wCAAwC,CAAC,IAAI,CAAC,CAAC,CAAC;KACvE;IAED,MAAM;QACJ,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAkD,CAAC;QAC3E,GAAG,CAAC,6BAA6B,GAAG,IAAI,CAAC,2BAA2B,CAAC;QACrE,OAAO,GAAU,CAAC;KACnB;;;MC1BU,yBAAyB,SAAS;IAE7C,YAAoB,IAAgB;QAClC,KAAK,EAAE,CAAC;QADU,SAAI,GAAJ,IAAI,CAAY;KAEnC;;IAGD,GAAG,CAAI,QAA4B;QACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE;YACjC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;SACzB;QACD,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM;YACpC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAI,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,EAAE;gBAClD,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;aAC1B,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,GAAG;;gBACnC,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC9B,IAAI,GAAG,YAAY,iBAAiB,EAAE;oBACpC,CAAC,GAAG,IAAI,YAAY,CAAC,CAAA,MAAA,GAAG,CAAC,KAAK,0CAAE,KAAK,KAAI,GAAG,CAAC,UAAU,CAAC,CAAC;iBAC1D;gBACD,MAAM,CAAC,CAAC,CAAC,CAAC;aACX,CAAC,CAAC;SACJ,CAAC,CAAC;KACJ;;6GAvBU,gBAAgB;iHAAhB,gBAAgB,cAFf,MAAM;2FAEP,gBAAgB;kBAH5B,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCNY,qBAAqB;IAAlC;QACS,cAAS,GAAW,IAAI,CAAC;QAUzB,wBAAmB,GAAc,EAAE,CAAC;QAEpC,4BAAuB,GAAG,KAAK,CAAC;KAOxC;;;MCXY,wBAAwB;IACnC,YACU,SAA2B,EAC3B,MAA6B,EAC7B,UAA6B;QAF7B,cAAS,GAAT,SAAS,CAAkB;QAC3B,WAAM,GAAN,MAAM,CAAuB;QAC7B,eAAU,GAAV,UAAU,CAAmB;QAI/B,mBAAc,GAA6C,IAAI,CAAC;KAFvE;IAIY,gBAAgB;;YACzB,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,cAAc,CAAC;SAC9B;KAAA;IAED,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;KAC7B;IAED,IAAW,eAAe;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;KACpC;IAED,IAAW,+BAA+B;QACxC,OAAO,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC;KACpD;IAED,IAAW,gBAAgB;QACzB,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;KACrC;IAED,IAAW,WAAW;QACpB,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE;YAC5D,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;SACtC;aAAM,IAAI,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;YAC3D,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;SAClC;aAAM,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;YAClC,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;SAC/B;QACD,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;KACvC;IAEM,YAAY,CAAC,cAAsB,IAAI;QAC5C,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE;YACxC,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC;SAC3B;QAED,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAE7B,IAAI,WAAW,EAAE;YACf,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;SACjC;QAED,OAAO,GAAG,CAAC,IAAI,CAAC;KACjB;IAEO,oBAAoB,CAAC,GAAW;QACtC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,EAAE;YACT,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SAC3B;QACD,OAAO,GAAG,CAAC;KACZ;IAEa,mBAAmB;;YAC/B,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE;gBAC/B,OAAO;aACR;YACD,IAAI,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;YACpC,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;gBAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aACpC;YACD,IAAI;gBACF,IAAI,CAAC,cAAc,GAAG,MAAM,wCAAwC,CAAC,eAAe,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;aACjH;YAAC,OAAO,CAAC,EAAE;gBACV,OAAO,CAAC,KAAK,CAAC,oDAAoD,GAAI,CAAW,CAAC,OAAO,CAAC,CAAC;gBAC3F,MAAM,CAAC,CAAC;aACT;SACF;KAAA;;qHAjFU,wBAAwB;yHAAxB,wBAAwB,cAFvB,MAAM;2FAEP,wBAAwB;kBAHpC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCGY,UAAU;IACrB,YAAY,QAAwB;QAClC,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QACjD,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,yBAAyB,CAAC;QAClE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,QAAQ,GAAI,YAAY,EAAE,CAAC;KACjC;IAUD,SAAS,CAAC,SAAiB,EAAE;QAE3B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;KACtC;IAED,WAAW,CAAC,SAAiB,EAAE;QAC7B,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,GAAG,MAAM,IAAI,GAAG,CAAC;KACxD;;;MC/BU,0BAA0B;IACrC,YAAY,QAAwC;QAClD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,oBAAoB,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,wBAAwB,GAAG,IAAI,CAAC,CAAC;KAChF;;;MCSU,WAAW;IACtB,YACU,SAA2B,EAC3B,MAAgC;QADhC,cAAS,GAAT,SAAS,CAAkB;QAC3B,WAAM,GAAN,MAAM,CAA0B;QAExC,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,EAAE,CAAC;KAC3C;IAKY,sBAAsB,CAAC,WAAmB,EAAE,IAAY,EAAE,YAAoB;;YACzF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,WAAW,CAAC;YAChC,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,6BAA6B;gBACzC,IAAI;gBACJ,MAAM,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE;aACxC,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,iBAAiB,CAAC,YAAoB;;YACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5C,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,WAAW;gBACzB,UAAU,EAAE,wBAAwB;gBACpC,aAAa,EAAE,YAAY;aAC5B,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,sBAAsB,CAAC,QAAgB,EAAE,YAAoB,EAAE,KAAa;;YACvF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,QAAQ;gBACnB,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,oBAAoB;gBAChC,MAAM,EAAE;oBACN,aAAa,EAAE,YAAY;oBAC3B,KAAK;iBACN;aACF,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,WAAW,CAAC,QAAgB,EAAE,MAAc,EAAE,cAAsB,EAAE,KAAa;;YAC9F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,6BAA6B;gBACzC,MAAM,EAAE;oBACN,eAAe,EAAE,QAAQ;oBACzB,YAAY,EAAE,MAAM;oBACpB,qBAAqB,EAAE,wDAAwD;oBAC/E,gBAAgB,EAAE,cAAc;oBAChC,KAAK;iBACN;aACF,CAAC,CAAC;YAEH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,eAAe,CAAC,UAAkB;;YAC7C,MAAM,MAAM,GAAI,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACrD,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;gBAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,YAAY,EAAE,IAAI;gBAClB,UAAU,EAAE,8CAA8C;gBAC1D,MAAM,EAAE;oBACN,WAAW,EAAE,UAAU;iBACxB;aACF,CAAC,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;SAClE;KAAA;IAEY,wBAAwB,CAAC,KAAa;;YACjD,MAAM,MAAM,GAAI,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAErD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAkD;gBACzF,GAAG,EAAE,MAAM,CAAC,oBAAoB;gBAChC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,KAAK,EAAE;iBACjC;;aAEF,CAAC,CAAC;YAEH,IAAK,QAA2B,CAAC,KAAK,KAAK,SAAS,EAAE;gBACpD,OAAO,IAAI,0BAA0B,CAAC,QAA0C,CAAC,CAAC;aACnF;iBAAM;gBACL,MAAM,IAAI,YAAY,CAAE,QAA2B,CAAC,KAAK,CAAC,CAAC;aAC5D;SACF;KAAA;IAEY,mBAAmB,CAAC,6BAAqC,IAAI;;YACxE,MAAM,MAAM,GAAG;gBACb,aAAa,EAAE,aAAa;gBAC5B,oBAAoB,EAAE,0BAA0B;aACjD,CAAC;YACF,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;SAC3C;KAAA;IAEY,aAAa,CAAC,KAAa;;YACtC,MAAM,MAAM,GAAG;gBACb,KAAK;aACN,CAAC;YACF,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC;SAC3C;KAAA;IAEa,qBAAqB,CAAC,MAAiB;;YACnD,MAAM,MAAM,GAAI,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAErD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAC3C,MAAM,GAAG,GAAc,MAAM,CAAC;YAE9B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAkC;gBACzE,GAAG,EAAE,MAAM,CAAC,2BAA2B;gBACvC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,MAAM;gBAChB,OAAO,EAAE,EAAC,cAAc,EAAE,mCAAmC,EAAC;gBAC9D,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;aACjC,CAAC,CAAC;YAEH,IAAK,QAA2B,CAAC,KAAK,KAAK,SAAS,EAAE;gBACpD,OAAO,IAAI,UAAU,CAAC,QAA0B,CAAC,CAAC;aACnD;iBAAM;gBACL,MAAM,IAAI,YAAY,CAAE,QAA2B,CAAC,KAAK,CAAC,CAAC;aAC5D;SACF;KAAA;;wGAzIU,WAAW;4GAAX,WAAW,cAFV,MAAM;2FAEP,WAAW;kBAHvB,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCYY,sBAAsB;IACjC,YACU,UAA6B,EACrC,QAAyB,EACjB,IAAgB,EAChB,MAAgC,EAChC,WAAwB;QAJxB,eAAU,GAAV,UAAU,CAAmB;QAE7B,SAAI,GAAJ,IAAI,CAAY;QAChB,WAAM,GAAN,MAAM,CAA0B;QAChC,gBAAW,GAAX,WAAW,CAAa;QAU1B,2BAAsB,GAAG,IAAI,4BAA4B,EAAE,CAAC;QAE5D,iBAAY,GAAG,KAAK,CAAC;QACrB,iBAAY,GAAG,KAAK,CAAC;QAIrB,6BAAwB,GAAG,OAAO,CAAC;QAfzC,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,qBAAqB,GAAG,IAAI,sBAAsB,CAAC,OAAO,EAAE,IAAI,qBAAqB,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACtH,IAAI,CAAC,qBAAqB,CAAC,wBAAwB,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;KACjD;IAaD,IAAW,QAAQ;QACjB,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;KAClC;IAED,IAAW,eAAe;QACxB,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;KAC9B;IAED,IAAW,wBAAwB;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;KAC/D;IAED,IAAW,+BAA+B;QACxC,OAAO,IAAI,CAAC,wBAAwB,IAAI,IAAI,CAAC;KAC9C;IAEY,IAAI,CAAC,aAAsB,KAAK;;YAC3C,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE;gBAC1C,OAAO,CAAC,IAAI,CAAC,+FAA+F,CAAC,CAAC;gBAC9G,OAAO;aACR;YACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;YAEzB,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,qBAAqB,CAAC,sCAAsC,EAAE,CAAC;YAE1E,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC;YAClD,IAAI,OAAO,EAAE;gBACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;aAC1F;iBAAM,IAAI,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE;gBAC/C,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC;gBACpD,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC;gBACtD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC;gBACjI,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;gBACvC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;aACjC;iBAAM;gBACL,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACzC,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE;oBACtB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;iBACpB;aACF;YACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;SAC1B;KAAA;IAEY,eAAe,CAAC,QAAgB,EAAE,MAAc;;;YAC3D,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,8BAA8B,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,MAAA,IAAI,CAAC,MAAM,0CAAE,eAAe,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC;YACxF,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC;YACvC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;;KACjC;IAEY,KAAK;;YAChB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI;oBACjD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE;wBACtC,OAAO,CAAC,KAAK,EAAE,CAAC;qBACjB;oBACD,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAClB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACxC,IAAI,IAAI,EAAE;wBACR,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC;wBACjF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;wBAClC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;qBAC1B;yBAAM;wBACL,OAAO,CAAC,IAAI,CAAC,oEAAoE,EAAE,IAAI,CAAC,CAAC;qBAC1F;iBACF,CAAC,CAAC;aACJ;YACD,IAAI,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACzE;KAAA;IAEY,MAAM;;YACjB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YACpD,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5C,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,GAAG,4BAA4B,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;YACpG,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;gBAC5B,MAAM,QAAQ,GAAG,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE;oBAC7C,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,IAAI;wBACxB,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE;4BAC3B,OAAO,CAAC,KAAK,EAAE,CAAC;yBACjB;qBACF,CAAC,CAAC;oBACH,QAAQ,CAAC,MAAM,EAAE,CAAC;iBACnB,CAAC,CAAC;gBACH,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;aAClC;iBAAM;gBACL,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;aACnC;SACF;KAAA;IAEY,cAAc;;YACzB,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;gBAC1B,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;aACvD;YACD,IAAI;gBACF,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC;aACpC;oBAAS;gBACR,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;aAC9B;SACF;KAAA;IAEY,8BAA8B;;YACzC,IAAI,CAAC,IAAI,CAAC,gCAAgC,EAAE;gBAC1C,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC,sCAAsC,EAAE,CAAC;aACvF;YACD,IAAI;gBACF,OAAO,MAAM,IAAI,CAAC,gCAAgC,CAAC;aACpD;oBAAS;gBACR,IAAI,CAAC,gCAAgC,GAAG,IAAI,CAAC;aAC9C;SACF;KAAA;IAEY,qBAAqB;;YAChC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACnD,IAAI,EAAE,EAAE;gBACN,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;gBACpF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;gBACnF,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBAC/D,OAAO,GAAG,CAAC;aACZ;iBAAM;gBACL,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;aACrD;SACF;KAAA;IAEY,uBAAuB;;YAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,EAAE;gBACV,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;aACpC;YACD,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;SACjE;KAAA;IAEY,MAAM,CAAC,IAAa,EAAE,YAAoB,CAAC,CAAC;;YACvD,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YAC/D,IAAI,SAAS,GAAG,CAAC,EAAE;gBACjB,GAAG,IAAI,cAAc,SAAS,EAAE,CAAC;aAClC;YACD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAc,GAAG,CAAC,CAAC,CAAC;SACvD;KAAA;IAEY,YAAY,CAAC,EAAU;;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;YAC1D,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAY,GAAG,CAAC,CAAC,CAAC;SACrD;KAAA;IAEM,SAAS,CAAC,WAAmB,EAAE,QAAgB;QACpD,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,sBAAsB,QAAQ,cAAc,OAAO,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;KACtC;IAEY,iCAAiC;;YAC5C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACnD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,aAAF,EAAE,uBAAF,EAAE,CAAE,EAAE,CAAC,CAAC;SAC3D;KAAA;IAEY,oCAAoC,CAAC,UAAsB;;YACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAErF,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;gBACpC,EAAE,EAAE,MAAM,CAAC,QAAQ;gBACnB,MAAM,EAAE,MAAM,CAAC,YAAY;gBAC3B,SAAS,EAAE,MAAM,CAAC,oBAAoB;aACvC,CAAC,CAAC;SACJ;KAAA;IAEM,kCAAkC;QACvC,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;KAC7C;IAEY,qCAAqC;;YAChD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YACnD,OAAO,IAAI,kCAAkC,CAAC,EAAE,CAAC,CAAC;SACnD;KAAA;IAEY,oBAAoB;;YAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;YACnE,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD;KAAA;IAEY,uBAAuB,CAAC,UAAsB;;YACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACtD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;SACjC;KAAA;IAEa,kBAAkB,CAAC,UAAsB;;YACrD,IAAI,GAAG,GAAkB,IAAI,CAAC;YAC9B,GAAG;gBACD,IAAI,UAAU,CAAC,SAAS,EAAE,EAAE;oBAC1B,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;iBACxC;gBAED,IAAI;oBACF,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;iBACrE;gBAAC,OAAO,KAAK,EAAE;oBACd,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,OAAO,KAAK,uBAAuB,EAAE;wBAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;qBACxB;yBAAM;wBACL,MAAM,KAAK,CAAC;qBACb;iBACF;aACF,QAAQ,CAAC,GAAG,EAAE;YACf,OAAO,GAAG,CAAC;SACZ;KAAA;IAEO,2BAA2B;QACjC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;QAE5C,MAAM,MAAM,GAAG;YACb,aAAa,EAAE,UAAU;YACzB,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,SAAS;YACtB,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;SACjD,CAAC;QAEF,OAAO,IAAI,oBAAoB,CAAC;YAC9B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,oBAAoB,CAAC,kBAAkB;YACtD,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;YAC3D,MAAM,EAAE,MAAM;SACf,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;KACxB;IAEa,sCAAsC;;YAClD,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACtE,IAAI,EAAC,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,EAAE,CAAA,EAAE;gBACrB,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE,CAAC;aAC5C;YACD,OAAO,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,CAAC;SAC3B;KAAA;IAEa,sBAAsB;;YAClC,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACzC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE;gBAC7B,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC;aACjD;YACD,OAAO,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,WAAW,CAAC;SAC3B;KAAA;IAEa,qBAAqB,CAAC,KAAoB;;YACtD,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;gBAC9B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;aACvE;YACD,IAAI;gBACF,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC;aACxC;oBAAS;gBACR,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC;aAClC;SACF;KAAA;IAEa,6BAA6B,CAAC,KAAoB;;YAC9D,IAAI,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,YAAY,EAAE;gBACvB,IAAI;oBACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;oBACzE,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;oBAChC,OAAO,GAAG,CAAC;iBACZ;gBAAC,OAAO,GAAG,EAAE;oBACZ,OAAO,CAAC,IAAI,CAAC,uDAAuD,EAAE,GAAG,CAAC,CAAC;oBAC3E,IAAI,GAAG,CAAC,OAAO,KAAK,eAAe,EAAE;wBACnC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;qBACrB;iBACF;aACF;iBAAM;gBACL,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;aACxE;SACF;KAAA;IAEO,WAAW,CAAC,GAAW;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE;YAClB,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACpB,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;gBAC5B,OAAO,IAAI,CAAC;aACb;SACF;QACD,OAAO,IAAI,CAAC;KACb;IAEO,oBAAoB;QAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YACzD,IAAI,IAAI,EAAE;gBACR,OAAO,CAAC,GAAG,CAAC,kFAAkF,CAAC,CAAC;gBAChG,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;aACnC;SACF;KACF;IAEO,YAAY,CAAC,aAAsB,EAAE,cAAsB;QACjE,IAAI,KAAK,GAAG,QAAQ,CAAC;QACrB,IAAI,aAAa,EAAE;YACjB,KAAK,IAAI,iBAAiB,CAAC;SAC5B;QACD,IAAI,KAAK,EAAE;YACT,KAAK,IAAI,GAAG,GAAG,cAAc,CAAC;SAC/B;QACD,OAAO,KAAK,CAAC;KACd;IAEO,KAAK,CAAC,WAAmB;QAC/B,OAAO,IAAI,OAAO,CAAO,OAAO;YAC9B,UAAU,CAAC;gBACT,OAAO,EAAE,CAAC;aACX,EAAE,WAAW,CAAC,CAAC;SACjB,CAAC,CAAC;KACJ;;mHApVU,sBAAsB;uHAAtB,sBAAsB,cAFrB,MAAM;2FAEP,sBAAsB;kBAHlC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCpBY,uBAAuB;IAClC,YAAoB,IAA4B,EAAU,MAA6B;;QAAnE,SAAI,GAAJ,IAAI,CAAwB;QAAU,WAAM,GAAN,MAAM,CAAuB;QAO/E,6BAAwB,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;QALnF,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;QACjD,IAAI,CAAC,cAAc,GAAG,MAAA,MAAM,CAAC,mBAAmB,0CAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;KAC7E;IAMM,SAAS,CAAC,GAAqB,EAAE,IAAiB;QACvD,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;YACjC,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YACzE,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;SACpC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;KACzB;IAEO,eAAe,CAAC,GAAW;;QACjC,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC;QAExB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YACvC,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE;SAC1E;QAED,IAAI,CAAA,MAAA,IAAI,CAAC,cAAc,0CAAE,MAAM,IAAG,CAAC,EAAE;YACnC,OAAO,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;SACrE;QACD,OAAO,KAAK,CAAC;KACd;IAEO,gBAAgB,CAAC,QAAyB,EAAE,GAAqB,EAAE,IAAiB;QAC1F,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACxB,QAAQ,CAAC,KAAK;YACZ,IAAI,KAAK,EAAE;gBACP,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,KAAK,EAAE,CAAC,CAAC;gBACpE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;aAChC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;SACzB,CAAC,CACH,CAAC;KACH;IAEO,iBAAiB,CAAC,QAAoC;QAC5D,OAAO,QAAQ,CAAC,IAAI,CAClB,UAAU,CAAC,CAAC,GAAG;YACb,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE;gBAC1D,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE;oBACvC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;iBACnB;aACF;YACD,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;SACxB,CAAC,CACH,CAAC;KACH;;oHAxDU,uBAAuB;wHAAvB,uBAAuB,cAFtB,MAAM;2FAEP,uBAAuB;kBAHnC,UAAU;mBAAC;oBACV,UAAU,EAAE,MAAM;iBACnB;;;MCKY,qBAAqB;IAEhC,OAAO,OAAO,CAAC,MAA6B;QAC1C,OAAO;YACL,QAAQ,EAAE,qBAAqB;YAC/B,SAAS,EAAE;gBACT,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;gBACpD,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,KAAK,EAAE,IAAI,EAAE;aAC/E;SACF,CAAC;KACH;;kHAVU,qBAAqB;mHAArB,qBAAqB;mHAArB,qBAAqB,YARvB,EACR;2FAOU,qBAAqB;kBATjC,QAAQ;mBAAC;oBACR,OAAO,EAAE,EACR;oBACD,YAAY,EAAE,EACb;oBACD,OAAO,EAAE,EACR;iBACF;;;MCZY,WAAW;CAGvB;MAEY,SAAS;CAIrB;IAEW;AAAZ,WAAY,OAAO;IACjB,uDAAiB,CAAA;IACjB,+DAAqB,CAAA;IACrB,2CAAW,CAAA;AACb,CAAC,EAJW,OAAO,KAAP,OAAO;;ACXnB;;;;ACAA;;;;;;"}

package/fesm2020/kolektor-nucleus-identity.mjs

@@ -2,7 +2,7 @@ import * as i0 from '@angular/core';
 import { Injectable, NgModule } from '@angular/core';
 import * as i1$1 from '@angular/common/http';
 import { HttpErrorResponse, HTTP_INTERCEPTORS } from '@angular/common/http';
-import { from, throwError } from 'rxjs';
+import { lastValueFrom, from, throwError } from 'rxjs';
 import { AppAuthError, AuthorizationNotifier, TokenResponse, Requestor, AuthorizationServiceConfiguration, JQueryRequestor, nowInSeconds, BaseTokenRequestHandler, BasicQueryStringUtils, TokenRequest, GRANT_TYPE_AUTHORIZATION_CODE, GRANT_TYPE_REFRESH_TOKEN, LocalStorageBackend, RedirectRequestHandler, AuthorizationRequest } from '@openid/appauth';
 import { App } from '@capacitor/app';
 import { Browser } from '@capacitor/browser';
@@ -218,8 +218,13 @@ class SecretsStore {
     constructor(clientId) {
         this._tokens = {};
         this._identities = {};
-        this._tokenStorageKeyPrefix = `Nucleus.Identity.${clientId}`; // do not change this or login fith existing refresh tokens will fail
-        this._servicePrincipalKey = `Nucleus.Identity.${clientId}.SvcP`;
+        // this specify which identity id is used by default, when If id is not specified in getToken or getIdentity
+        this._defaultIdentityId = null;
+        this._defaultIdentityIdStorageKey = null;
+        this._tokenStorageKeyPrefix = `Nucleus.Identity.${clientId}`; // do not change this or login with existing tokens will fail
+        this._servicePrincipalKey = `${this._tokenStorageKeyPrefix}.SvcP`;
+        this._defaultIdentityIdStorageKey = `${this._tokenStorageKeyPrefix}.IdId`;
+        this._defaultIdentityId = localStorage.getItem(this._defaultIdentityIdStorageKey);
     }
     removeServicePrincipal() {
         this._servicePrincipal = null;
@@ -242,6 +247,15 @@ class SecretsStore {
         const key = this.getTokenKey(id);
         return this._identities[key];
     }
+    setDefaultIdentityId(id) {
+        this._defaultIdentityId = id;
+        if (this._defaultIdentityId) {
+            localStorage.setItem(this._defaultIdentityIdStorageKey, this._defaultIdentityId);
+        }
+        else {
+            localStorage.removeItem(this._defaultIdentityIdStorageKey);
+        }
+    }
     async getToken(id = null) {
         const key = this.getTokenKey(id);
         // if token is not there or it is invalid we check storage again before returning
@@ -286,6 +300,9 @@ class SecretsStore {
         }
     }
     getTokenKey(id = null) {
+        if (!id) {
+            id = this._defaultIdentityId;
+        }
         return id ? `${this._tokenStorageKeyPrefix}.${id}` : this._tokenStorageKeyPrefix;
     }
     clear(key) {
@@ -664,6 +681,7 @@ class NucleusIdentityService {
             const request = this._authorizationNotifier.request;
             const response = this._authorizationNotifier.response;
             const res = await this.tokenClient.getByAuthorizationCode(request.redirectUri, response.code, request.internal['code_verifier']);
+            this._store.setDefaultIdentityId(null);
             await this._store.setToken(res);
         }
         else {
@@ -679,6 +697,7 @@ class NucleusIdentityService {
         const assertionToken = await this.getServicePrincipalAccessToken();
         const scope = this.prepareScope(true, this.config?.requestedScopes);
         const res = await this.tokenClient.getBySecret(provider, secret, assertionToken, scope);
+        this._store.setDefaultIdentityId(null);
         await this._store.setToken(res);
     }
     async login() {
@@ -747,30 +766,34 @@ class NucleusIdentityService {
         }
     }
     async loginServicePrincipal() {
-        await this.loginServicePrincipalInternal();
-    }
-    /*
-    public async loginAsServicePrincipal() {
-      let token = await this._store.getToken(this._servicePrincipalTokenId);
-      if (!token) {
-        await this.loginServicePrincipal();
-      }
-      token = await this._store.getToken(this._servicePrincipalTokenId);
-       // TODO: we have to distinguished that token is service principal so refresh token stuff is handled correctly.
-       // We have to implement universal getAccessToken function that can handle all cases
-      await this._store.setToken(token);
-    }
-    */
+        const sp = await this._store.getServicePrincipal();
+        if (sp) {
+            const scope = this.prepareScope(false, this.config.servicePrincipalRequestedScopes);
+            const res = await this.tokenClient.getByClientCredentials(sp.id, sp.secret, scope);
+            await this._store.setToken(res, this._servicePrincipalTokenId);
+            return res;
+        }
+        else {
+            throw Error('Service principal is not registered!');
+        }
+    }
+    async loginAsServicePrincipal() {
+        const token = await this._store.getToken(this._servicePrincipalTokenId);
+        if (!token) {
+            await this.loginServicePrincipal();
+        }
+        this._store.setDefaultIdentityId(this._servicePrincipalTokenId);
+    }
     async getOtp(type, expiresIn = -1) {
         let url = this.config.getServerUrl(`/otp/create?type=${type}`);
         if (expiresIn > 0) {
             url += `&expiresIn=${expiresIn}`;
         }
-        return this.http.get(url).toPromise();
+        return lastValueFrom(this.http.get(url));
     }
     async getOtpStatus(id) {
         const url = this.config.getServerUrl(`/otp/status/${id}`);
-        return this.http.get(url).toPromise();
+        return lastValueFrom(this.http.get(url));
     }
     getOtpUrl(redirectUrl, password) {
         const encoded = encodeURIComponent(redirectUrl);
@@ -841,22 +864,10 @@ class NucleusIdentityService {
             extras: params,
         }, this._crypto, true);
     }
-    async loginServicePrincipalInternal() {
-        const sp = await this._store.getServicePrincipal();
-        if (sp) {
-            const scope = this.prepareScope(false, this.config.servicePrincipalRequestedScopes);
-            const res = await this.tokenClient.getByClientCredentials(sp.id, sp.secret, scope);
-            await this._store.setToken(res, this._servicePrincipalTokenId);
-            return res;
-        }
-        else {
-            throw Error('Service principal is not registered!');
-        }
-    }
     async getServicePrincipalAccessTokenInternal() {
         let token = await this._store.getToken(this._servicePrincipalTokenId);
         if (!token?.isValid()) {
-            token = await this.loginServicePrincipalInternal();
+            token = await this.loginServicePrincipal();
         }
         return token?.accessToken;
     }
@@ -1040,3 +1051,4 @@ var OtpType;
  */
 
 export { DeviceCode, Identity, NucleusIdentityConfig, NucleusIdentityModule, NucleusIdentityService, OtpResponse, OtpStatus, OtpType, ServicePrincipalRegistrationStatus };
+//# sourceMappingURL=kolektor-nucleus-identity.mjs.map