@kolektor/nucleus-identity 0.1.1911 → 0.1.2192

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/fesm2022/kolektor-nucleus-identity.mjs +22 -22
  2. package/fesm2022/kolektor-nucleus-identity.mjs.map +1 -1
  3. package/index.d.ts +237 -6
  4. package/package.json +3 -5
package/fesm2022/kolektor-nucleus-identity.mjs CHANGED
@@ -91,10 +91,10 @@ class LocationService {
91
91
  window.location.assign(url);
92
92
  }
93
93
  }
94
- static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: LocationService, deps: [{ token: i1.NucleusAppService }], target: i0.ɵɵFactoryTarget.Injectable }); }
95
- static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: LocationService, providedIn: 'root' }); }
94
+ static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: LocationService, deps: [{ token: i1.NucleusAppService }], target: i0.ɵɵFactoryTarget.Injectable }); }
95
+ static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: LocationService, providedIn: 'root' }); }
96
96
  }
97
- i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: LocationService, decorators: [{
97
+ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: LocationService, decorators: [{
98
98
  type: Injectable,
99
99
  args: [{
100
100
  providedIn: 'root',
@@ -144,10 +144,10 @@ class AngularRequestor extends Requestor {
144
144
  });
145
145
  });
146
146
  }
147
- static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: AngularRequestor, deps: [{ token: i1$1.HttpClient }], target: i0.ɵɵFactoryTarget.Injectable }); }
148
- static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: AngularRequestor, providedIn: 'root' }); }
147
+ static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: AngularRequestor, deps: [{ token: i1$1.HttpClient }], target: i0.ɵɵFactoryTarget.Injectable }); }
148
+ static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: AngularRequestor, providedIn: 'root' }); }
149
149
  }
150
- i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: AngularRequestor, decorators: [{
150
+ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: AngularRequestor, decorators: [{
151
151
  type: Injectable,
152
152
  args: [{
153
153
  providedIn: 'root',
@@ -256,10 +256,10 @@ class OidcConfigurationService {
256
256
  throw e;
257
257
  }
258
258
  }
259
- static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: OidcConfigurationService, deps: [{ token: AngularRequestor }, { token: NucleusIdentityConfig }, { token: i1.NucleusAppService }], target: i0.ɵɵFactoryTarget.Injectable }); }
260
- static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: OidcConfigurationService, providedIn: 'root' }); }
259
+ static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: OidcConfigurationService, deps: [{ token: AngularRequestor }, { token: NucleusIdentityConfig }, { token: i1.NucleusAppService }], target: i0.ɵɵFactoryTarget.Injectable }); }
260
+ static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: OidcConfigurationService, providedIn: 'root' }); }
261
261
  }
262
- i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: OidcConfigurationService, decorators: [{
262
+ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: OidcConfigurationService, decorators: [{
263
263
  type: Injectable,
264
264
  args: [{
265
265
  providedIn: 'root',
@@ -581,10 +581,10 @@ class TokenClient {
581
581
  throw new AppAuthError(response.error);
582
582
  }
583
583
  }
584
- static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: TokenClient, deps: [{ token: AngularRequestor }, { token: OidcConfigurationService }], target: i0.ɵɵFactoryTarget.Injectable }); }
585
- static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: TokenClient, providedIn: 'root' }); }
584
+ static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: TokenClient, deps: [{ token: AngularRequestor }, { token: OidcConfigurationService }], target: i0.ɵɵFactoryTarget.Injectable }); }
585
+ static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: TokenClient, providedIn: 'root' }); }
586
586
  }
587
- i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: TokenClient, decorators: [{
587
+ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: TokenClient, decorators: [{
588
588
  type: Injectable,
589
589
  args: [{
590
590
  providedIn: 'root',
@@ -913,10 +913,10 @@ class NucleusIdentityService {
913
913
  }, miliseconds);
914
914
  });
915
915
  }
916
- static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: NucleusIdentityService, deps: [{ token: i1.NucleusAppService }, { token: LocationService }, { token: i1$1.HttpClient }, { token: OidcConfigurationService }, { token: TokenClient }], target: i0.ɵɵFactoryTarget.Injectable }); }
917
- static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: NucleusIdentityService, providedIn: 'root' }); }
916
+ static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: NucleusIdentityService, deps: [{ token: i1.NucleusAppService }, { token: LocationService }, { token: i1$1.HttpClient }, { token: OidcConfigurationService }, { token: TokenClient }], target: i0.ɵɵFactoryTarget.Injectable }); }
917
+ static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: NucleusIdentityService, providedIn: 'root' }); }
918
918
  }
919
- i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: NucleusIdentityService, decorators: [{
919
+ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: NucleusIdentityService, decorators: [{
920
920
  type: Injectable,
921
921
  args: [{
922
922
  providedIn: 'root',
@@ -973,10 +973,10 @@ class NucleusTokenInterceptor {
973
973
  return throwError(() => err);
974
974
  }));
975
975
  }
976
- static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: NucleusTokenInterceptor, deps: [{ token: NucleusIdentityService }, { token: NucleusIdentityConfig }], target: i0.ɵɵFactoryTarget.Injectable }); }
977
- static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: NucleusTokenInterceptor, providedIn: 'root' }); }
976
+ static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: NucleusTokenInterceptor, deps: [{ token: NucleusIdentityService }, { token: NucleusIdentityConfig }], target: i0.ɵɵFactoryTarget.Injectable }); }
977
+ static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: NucleusTokenInterceptor, providedIn: 'root' }); }
978
978
  }
979
- i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: NucleusTokenInterceptor, decorators: [{
979
+ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: NucleusTokenInterceptor, decorators: [{
980
980
  type: Injectable,
981
981
  args: [{
982
982
  providedIn: 'root',
@@ -997,11 +997,11 @@ class NucleusIdentityModule {
997
997
  ],
998
998
  };
999
999
  }
1000
- static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: NucleusIdentityModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }
1001
- static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "17.3.8", ngImport: i0, type: NucleusIdentityModule }); }
1002
- static { this.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: NucleusIdentityModule }); }
1000
+ static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: NucleusIdentityModule, deps: [], target: i0.ɵɵFactoryTarget.NgModule }); }
1001
+ static { this.ɵmod = i0.ɵɵngDeclareNgModule({ minVersion: "14.0.0", version: "20.3.13", ngImport: i0, type: NucleusIdentityModule }); }
1002
+ static { this.ɵinj = i0.ɵɵngDeclareInjector({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: NucleusIdentityModule }); }
1003
1003
  }
1004
- i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "17.3.8", ngImport: i0, type: NucleusIdentityModule, decorators: [{
1004
+ i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "20.3.13", ngImport: i0, type: NucleusIdentityModule, decorators: [{
1005
1005
  type: NgModule,
1006
1006
  args: [{
1007
1007
  imports: [],
package/fesm2022/kolektor-nucleus-identity.mjs.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"kolektor-nucleus-identity.mjs","sources":["../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/nucleus-identity-config.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/models/service-principal.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/location.service.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/nucleus-authorization-notifier.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/angular-requestor.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/authorization-service-configuration.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/oidc-configuration.service.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/models/identity.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/secrets-store.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/models/device-code.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/models/client-registration.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/token-client.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/nucleus-identity.service.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/nucleus-token-interceptor.service.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/nucleus-identity.module.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/models/otp.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/kolektor-nucleus-identity.ts"],"sourcesContent":["export class NucleusIdentityConfig {\n public authority!: string;\n\n public clientId!: string;\n\n public redirectUri?: string;\n\n public androidRedirectUri?: string;\n\n public iOSRedirectUri?: string;\n\n public httpInterceptorUrls?: string[] = [];\n\n public automaticLoginOnHttp401 = false;\n\n public requestedScopes?: string;\n\n public servicePrincipalRequestedScopes?: string;\n\n public authProviderHint?: string;\n}\n","export class ServicePrincipal {\n public id!: string;\n public secret!: string;\n public expiresAt!: Date;\n}\n\nexport class ServicePrincipalRegistrationStatus {\n public id!: string;\n public isRegistered = false;\n public expiresAt!: Date;\n\n constructor(servicePrincipal: ServicePrincipal | null) {\n if (servicePrincipal) {\n this.isRegistered = true;\n this.id = servicePrincipal.id;\n this.expiresAt = servicePrincipal.expiresAt;\n }\n }\n\n public get isExpired() {\n return false;\n }\n}\n","import { LocationLike } from '@openid/appauth';\nimport { NucleusAppService } from '@kolektor/nucleus-common';\nimport { Browser } from '@capacitor/browser';\nimport { Injectable } from '@angular/core';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class LocationService implements LocationLike {\n constructor(private appService: NucleusAppService) {}\n\n get hash() {\n return window.location.hash;\n }\n set hash(v) {\n window.location.hash = v;\n }\n\n get host() {\n return window.location.host;\n }\n set host(v) {\n window.location.host = v;\n }\n\n get origin() {\n return window.location.origin;\n }\n\n get hostname() {\n return window.location.hostname;\n }\n set hostname(v) {\n window.location.hostname = v;\n }\n\n get pathname() {\n return window.location.pathname;\n }\n set pathname(v) {\n window.location.pathname = v;\n }\n\n get port() {\n return window.location.port;\n }\n set port(v) {\n window.location.port = v;\n }\n\n get protocol() {\n return window.location.protocol;\n }\n set protocol(v) {\n window.location.protocol = v;\n }\n\n get search() {\n return window.location.search;\n }\n set search(v) {\n window.location.search = v;\n }\n\n assign(url: string): void {\n if (this.appService.isNative) {\n Browser.open({ url });\n } else {\n window.location.assign(url);\n }\n }\n}\n","import { AuthorizationNotifier } from '@openid/appauth';\nimport { AuthorizationResponse, AuthorizationError } from '@openid/appauth';\nimport { AuthorizationRequest } from '@openid/appauth';\n\nexport class NucleusAuthorizationNotifier extends AuthorizationNotifier {\n response: AuthorizationResponse | null = null;\n request!: AuthorizationRequest;\n error: AuthorizationError | null = null;\n\n constructor() {\n super();\n this.setAuthorizationListener((request, response, error) => {\n console.log('Authorization request complete ', request, response, error);\n this.response = response;\n this.request = request;\n this.error = error;\n });\n }\n}\n","import { AppAuthError, Requestor } from '@openid/appauth';\nimport { Injectable } from '@angular/core';\nimport { HttpClient, HttpErrorResponse } from '@angular/common/http';\nimport { HttpHeaders } from '@capacitor/core';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class AngularRequestor extends Requestor {\n constructor(private http: HttpClient) {\n super();\n }\n\n // eslint-disable-next-line no-undef\n xhr<T>(settings: JQueryAjaxSettings): Promise<T> {\n let method = 'GET';\n if (settings.method) {\n method = settings.method;\n }\n\n return new Promise<T>((resolve, reject) => {\n this.http\n .request<T>(method, settings.url as string, {\n body: settings.data,\n headers: settings.headers as HttpHeaders,\n })\n .subscribe({\n next: (res) => resolve(res),\n error: (err) => {\n let e = new AppAuthError(err);\n if (err instanceof HttpErrorResponse) {\n e = new AppAuthError(err.error?.error || err.statusText);\n }\n reject(e);\n },\n });\n });\n }\n}\n","import {\n AuthorizationServiceConfiguration,\n AuthorizationServiceConfigurationJson,\n JQueryRequestor,\n Requestor,\n} from '@openid/appauth';\n\nconst WELL_KNOWN_PATH = '.well-known';\nconst OPENID_CONFIGURATION = 'openid-configuration';\n\nexport interface NucleusAuthorizationServiceConfigurationJson\n extends AuthorizationServiceConfigurationJson {\n device_authorization_endpoint?: string;\n registration_endpoint?: string;\n}\n\nexport class NucleusAuthorizationServiceConfiguration extends AuthorizationServiceConfiguration {\n constructor(request: NucleusAuthorizationServiceConfigurationJson) {\n super(request);\n this.deviceAuthorizationEndpoint = request.device_authorization_endpoint;\n this.registrationEndpoint = request.registration_endpoint;\n }\n\n public deviceAuthorizationEndpoint?: string;\n public registrationEndpoint?: string;\n\n static override async fetchFromIssuer(\n openIdIssuerUrl: string,\n requestor?: Requestor\n ) {\n const fullUrl = `${openIdIssuerUrl}/${WELL_KNOWN_PATH}/${OPENID_CONFIGURATION}`;\n const requestorToUse = requestor || new JQueryRequestor();\n const json =\n await requestorToUse.xhr<NucleusAuthorizationServiceConfigurationJson>({\n url: fullUrl,\n dataType: 'json',\n method: 'GET',\n });\n return new NucleusAuthorizationServiceConfiguration(json);\n }\n\n override toJson() {\n const res = super.toJson() as NucleusAuthorizationServiceConfigurationJson;\n res.device_authorization_endpoint = this.deviceAuthorizationEndpoint;\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n return res as any;\n }\n}\n","import { Injectable } from '@angular/core';\nimport { NucleusAppService } from '@kolektor/nucleus-common';\nimport { NucleusIdentityConfig } from '../nucleus-identity-config';\nimport { AngularRequestor } from './angular-requestor';\nimport { NucleusAuthorizationServiceConfiguration } from './authorization-service-configuration';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class OidcConfigurationService {\n constructor(\n private requestor: AngularRequestor,\n private config: NucleusIdentityConfig,\n private appService: NucleusAppService\n ) {}\n\n private _configuration: NucleusAuthorizationServiceConfiguration | null =\n null;\n\n public async getConfiguration() {\n await this.assureConfiguration();\n if (!this._configuration) {\n throw Error('Failed to get OIDC configuration!');\n }\n\n return this._configuration;\n }\n\n public get clientId() {\n return this.config.clientId;\n }\n\n public get requestedScopes() {\n return this.config.requestedScopes;\n }\n\n public get servicePrincipalRequestedScopes() {\n return this.config.servicePrincipalRequestedScopes;\n }\n\n public get authProviderHint() {\n return this.config.authProviderHint;\n }\n\n public get redirectUrl() {\n let uri = window.location.href;\n const platform = this.appService.platform;\n if (platform === 'android' && this.config.androidRedirectUri) {\n uri = this.config.androidRedirectUri;\n } else if (platform === 'ios' && this.config.iOSRedirectUri) {\n uri = this.config.iOSRedirectUri;\n } else if (this.config.redirectUri) {\n uri = this.config.redirectUri;\n }\n return this.NormalizeRedirectUri(uri);\n }\n\n public getServerUrl(relativeUri: string | null = null) {\n let authority = this.config.authority;\n if (!authority || authority === 'origin') {\n authority = window.origin;\n }\n\n let url = new URL(authority);\n\n if (relativeUri) {\n url = new URL(relativeUri, url);\n }\n\n return url.href;\n }\n\n private NormalizeRedirectUri(uri: string) {\n const i = uri.indexOf('#');\n if (i > 0) {\n uri = uri.substring(0, i);\n }\n return uri;\n }\n\n private async assureConfiguration() {\n if (this._configuration != null) {\n return;\n }\n let authority = this.getServerUrl();\n if (authority[authority.length - 1] === '/') {\n authority = authority.slice(0, -1);\n }\n try {\n this._configuration =\n await NucleusAuthorizationServiceConfiguration.fetchFromIssuer(\n authority,\n this.requestor\n );\n } catch (e) {\n console.error(\n 'Nucleus.Identity: Cannot load OIDC configuration: ' +\n (e as Error).message\n );\n throw e;\n }\n }\n}\n","import { TokenResponse } from '@openid/appauth';\n\nexport class Claim {\n public name: string;\n public values: string[];\n\n constructor(name: string, values: string[]) {\n this.name = name;\n this.values = values;\n }\n}\n\nexport class Identity {\n public name: string;\n public subject: string;\n\n public claims: Claim[] = [];\n\n constructor(res: TokenResponse) {\n if (!res.idToken) {\n throw Error('There is no id token in the token response!');\n }\n\n const token = this.decodeToken(res.idToken);\n\n this.name = token.name;\n this.subject = token.sub;\n for (const key in token) {\n if ({}.hasOwnProperty.call(token, key)) {\n let vals = token[key];\n\n if (!Array.isArray(vals)) {\n vals = [vals];\n }\n\n const claim = new Claim(key, vals);\n this.claims.push(claim);\n }\n }\n }\n\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n private decodeToken(jwt: string): any {\n if (!jwt) {\n throw new Error(\n 'NucleusIdentity: There was no identity token in the response!'\n );\n }\n\n try {\n const arr = jwt.split('.');\n // var header = arr[0];\n const payload = this.b64DecodeUnicode(arr[1]);\n // var signature = arr[2];\n return JSON.parse(payload);\n } catch (error) {\n console.error('Error while decoding identity token', error);\n console.error('Error while decoding identity token JWT', jwt);\n }\n }\n\n private b64DecodeUnicode(str: string) {\n str = str.replace(/-/g, '+').replace(/_/g, '/'); // Qlector fix :)\n return decodeURIComponent(\n atob(str)\n .split('')\n .map((c) => '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2))\n .join('')\n );\n }\n}\n","import 'capacitor-secure-storage-plugin';\nimport { TokenResponse, TokenResponseJson } from '@openid/appauth';\nimport { ServicePrincipal } from '../models/service-principal';\nimport { SecureStoragePlugin } from 'capacitor-secure-storage-plugin';\nimport { Identity } from '../models/identity';\n\nexport class SecretsStore {\n constructor(clientId: string) {\n this._tokenStorageKeyPrefix = `Nucleus.Identity.${clientId}`; // do not change this or login with existing tokens will fail\n this._servicePrincipalKey = `${this._tokenStorageKeyPrefix}.SvcP`;\n this._defaultIdentityIdStorageKey = `${this._tokenStorageKeyPrefix}.IdId`;\n this._defaultIdentityId = localStorage.getItem(\n this._defaultIdentityIdStorageKey\n );\n }\n private _tokenStorageKeyPrefix: string;\n private _tokens: { [id: string]: TokenResponse | null } = {};\n private _identities: { [id: string]: Identity } = {};\n private _servicePrincipalKey;\n private _servicePrincipal: ServicePrincipal | null = null;\n // this specify which identity id is used by default, when If id is not specified in getToken or getIdentity\n private _defaultIdentityId: string | null;\n private _defaultIdentityIdStorageKey: string;\n\n public get defaultIdentityId() {\n return this._defaultIdentityId;\n }\n\n public removeServicePrincipal() {\n this._servicePrincipal = null;\n return this.clear(this._servicePrincipalKey);\n }\n\n public async setServicePrincipal(servicePrincipal: ServicePrincipal) {\n this._servicePrincipal = servicePrincipal;\n await this.save(this._servicePrincipalKey, servicePrincipal);\n }\n\n public async getServicePrincipal() {\n if (!this._servicePrincipal) {\n this._servicePrincipal = await this.load<ServicePrincipal>(\n this._servicePrincipalKey\n );\n }\n return this._servicePrincipal;\n }\n\n public setToken(token: TokenResponse, id: string | null = null) {\n return this.setTokenInternal(token, true, id);\n }\n\n public getIdentity(id: string | null = null): Identity | null {\n const key = this.getTokenKey(id);\n return this._identities[key];\n }\n\n public setDefaultIdentityId(id: string | null) {\n this._defaultIdentityId = id;\n if (this._defaultIdentityId) {\n localStorage.setItem(\n this._defaultIdentityIdStorageKey,\n this._defaultIdentityId\n );\n } else {\n localStorage.removeItem(this._defaultIdentityIdStorageKey);\n }\n }\n\n public async getToken(id: string | null = null) {\n const key = this.getTokenKey(id);\n\n // if token is not there or it is invalid we check storage again before returning\n if (!this._tokens[key] || !this._tokens[key]?.isValid()) {\n await this.reloadTokenFromStorage(id);\n }\n return this._tokens[key];\n }\n\n public removeToken(id: string | null = null) {\n const key = this.getTokenKey(id);\n delete this._tokens[key];\n delete this._identities[key];\n return this.clear(key);\n }\n\n private async reloadTokenFromStorage(id: string | null) {\n const key = this.getTokenKey(id);\n const storedToken = await this.load<TokenResponseJson>(key);\n if (storedToken) {\n const res = new TokenResponse(storedToken);\n if (res?.accessToken || res?.idToken) {\n await this.setTokenInternal(res, false, id);\n }\n }\n return null;\n }\n\n private async setTokenInternal(\n token: TokenResponse,\n save: boolean,\n id: string | null\n ) {\n const key = this.getTokenKey(id);\n if (token == null) {\n await this.removeToken(id);\n } else {\n this._tokens[key] = token;\n this._identities[key] = new Identity(token);\n if (save) {\n try {\n await this.save(key, token.toJson());\n } catch (e) {\n console.warn('Nucleus.Identity: Could not save to SecureStorage.');\n }\n }\n }\n }\n\n private getTokenKey(id: string | null) {\n if (!id) {\n id = this._defaultIdentityId;\n }\n return id\n ? `${this._tokenStorageKeyPrefix}.${id}`\n : this._tokenStorageKeyPrefix;\n }\n\n private clear(key: string) {\n return SecureStoragePlugin.remove({ key });\n }\n\n private save<T>(key: string, value: T): Promise<{ value: boolean }> {\n return SecureStoragePlugin.set({ key, value: JSON.stringify(value) });\n }\n\n private async load<T>(key: string) {\n try {\n const x = await SecureStoragePlugin.get({ key });\n if (x?.value) {\n return JSON.parse(x.value) as T;\n } else {\n return null;\n }\n } catch {\n return null;\n }\n }\n}\n","import { nowInSeconds } from '@openid/appauth';\n\nexport interface DeviceCodeJson {\n device_code: string;\n user_code: string;\n verification_uri: string;\n verification_uri_complete: string;\n expires_in: string;\n message: string;\n}\n\nexport class DeviceCode {\n constructor(response: DeviceCodeJson) {\n this.deviceCode = response.device_code;\n this.userCode = response.user_code;\n this.verificationUrl = response.verification_uri;\n this.verificationUrlComplete = response.verification_uri_complete;\n this.expiresIn = parseInt(response.expires_in, 10);\n this.issuedAt = nowInSeconds();\n }\n\n private expiresIn: number;\n private issuedAt: number;\n\n public deviceCode: string;\n public userCode: string;\n public verificationUrl: string;\n public verificationUrlComplete: string;\n\n isExpired(buffer = 60) {\n return this.secondsLeft(buffer) <= 0;\n }\n\n secondsLeft(buffer = 60) {\n const now = nowInSeconds();\n return this.issuedAt + this.expiresIn - buffer - now;\n }\n}\n","export interface ClientRegistrationResponseJson {\n client_id: string;\n client_secret: string;\n client_secret_expires_at: number;\n}\n\nexport class ClientRegistrationResponse {\n constructor(response: ClientRegistrationResponseJson) {\n this.clientId = response.client_id;\n this.clientSecret = response.client_secret;\n this.secretExpirationDate = new Date(\n response.client_secret_expires_at * 1000\n );\n }\n\n clientId: string;\n clientSecret: string;\n secretExpirationDate: Date;\n}\n","import {\n AppAuthError,\n BaseTokenRequestHandler,\n BasicQueryStringUtils,\n GRANT_TYPE_AUTHORIZATION_CODE,\n GRANT_TYPE_REFRESH_TOKEN,\n QueryStringUtils,\n StringMap,\n TokenErrorJson,\n TokenRequest,\n TokenRequestHandler,\n} from '@openid/appauth';\nimport { OidcConfigurationService } from './oidc-configuration.service';\nimport { AngularRequestor } from './angular-requestor';\nimport { Injectable } from '@angular/core';\nimport { DeviceCode, DeviceCodeJson } from '../models/device-code';\nimport {\n ClientRegistrationResponse,\n ClientRegistrationResponseJson,\n} from '../models/client-registration';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class TokenClient {\n constructor(\n private requestor: AngularRequestor,\n private config: OidcConfigurationService\n ) {\n this._tokenHandler = new BaseTokenRequestHandler(requestor);\n this._utils = new BasicQueryStringUtils();\n }\n\n private _tokenHandler: TokenRequestHandler;\n private _utils: QueryStringUtils;\n\n public async getByAuthorizationCode(\n redirectUrl: string,\n code: string,\n codeVerifier?: string\n ) {\n const config = await this.config.getConfiguration();\n const redirectUri = redirectUrl;\n const req = new TokenRequest({\n client_id: this.config.clientId,\n redirect_uri: redirectUri,\n grant_type: GRANT_TYPE_AUTHORIZATION_CODE,\n code,\n extras: codeVerifier ? { code_verifier: codeVerifier } : undefined,\n });\n return await this._tokenHandler.performTokenRequest(config, req);\n }\n\n public async getByRefreshToken(refreshToken: string) {\n const config = await this.config.getConfiguration();\n const redirectUri = this.config.redirectUrl;\n const req = new TokenRequest({\n client_id: this.config.clientId,\n redirect_uri: redirectUri,\n grant_type: GRANT_TYPE_REFRESH_TOKEN,\n refresh_token: refreshToken,\n });\n return await this._tokenHandler.performTokenRequest(config, req);\n }\n\n public async getByClientCredentials(\n clientId: string,\n clientSecret: string,\n scope: string\n ) {\n const config = await this.config.getConfiguration();\n const req = new TokenRequest({\n client_id: clientId,\n redirect_uri: '',\n grant_type: 'client_credentials',\n extras: {\n client_secret: clientSecret,\n scope,\n },\n });\n return await this._tokenHandler.performTokenRequest(config, req);\n }\n\n public async getBySecret(\n provider: string,\n secret: string,\n assertionToken: string,\n scope: string\n ) {\n const config = await this.config.getConfiguration();\n const req = new TokenRequest({\n client_id: this.config.clientId,\n redirect_uri: '',\n grant_type: 'urn:kolektor:nucleus:secret',\n extras: {\n secret_provider: provider,\n secret_value: secret,\n client_assertion_type:\n 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',\n client_assertion: assertionToken,\n scope,\n },\n });\n\n return await this._tokenHandler.performTokenRequest(config, req);\n }\n\n public async getByDeviceCode(deviceCode: string) {\n const config = await this.config.getConfiguration();\n const req = new TokenRequest({\n client_id: this.config.clientId,\n redirect_uri: '',\n grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\n extras: {\n device_code: deviceCode,\n },\n });\n return await this._tokenHandler.performTokenRequest(config, req);\n }\n\n public async registerServicePrincipal(token: string) {\n const config = await this.config.getConfiguration();\n\n const response = await this.requestor.xhr<\n ClientRegistrationResponseJson | TokenErrorJson\n >({\n url: config.registrationEndpoint,\n method: 'POST',\n dataType: 'json',\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${token}`,\n },\n // data: this._utils.stringify(map)\n });\n\n if ((response as TokenErrorJson).error === undefined) {\n return new ClientRegistrationResponse(\n response as ClientRegistrationResponseJson\n );\n } else {\n throw new AppAuthError((response as TokenErrorJson).error);\n }\n }\n\n public async getRegistrationCode(\n existingServicePrincipalId: string | null = null\n ) {\n const params = {\n custom_action: 'sp_register',\n service_principal_id: existingServicePrincipalId,\n };\n\n return this.getDeviceCodeInternal(params as StringMap);\n }\n\n public async getDeviceCode(scope: string) {\n const params = {\n scope,\n };\n return this.getDeviceCodeInternal(params);\n }\n\n private async getDeviceCodeInternal(params: StringMap) {\n const config = await this.config.getConfiguration();\n\n params['client_id'] = this.config.clientId;\n const map: StringMap = params;\n\n const response = await this.requestor.xhr<DeviceCodeJson | TokenErrorJson>({\n url: config.deviceAuthorizationEndpoint,\n method: 'POST',\n dataType: 'json',\n headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n data: this._utils.stringify(map),\n });\n\n if ((response as TokenErrorJson).error === undefined) {\n return new DeviceCode(response as DeviceCodeJson);\n } else {\n throw new AppAuthError((response as TokenErrorJson).error);\n }\n }\n}\n","import {\n AppAuthError,\n AuthorizationRequest,\n AuthorizationRequestHandler,\n BasicQueryStringUtils,\n Crypto,\n DefaultCrypto,\n LocalStorageBackend,\n RedirectRequestHandler,\n StringMap,\n TokenResponse,\n} from '@openid/appauth';\n\nimport { HttpClient } from '@angular/common/http';\nimport { Injectable } from '@angular/core';\n\nimport { App } from '@capacitor/app';\nimport { Browser } from '@capacitor/browser';\nimport { Device } from '@capacitor/device';\n\nimport { NucleusAppService } from '@kolektor/nucleus-common';\n\nimport { lastValueFrom } from 'rxjs';\n\nimport { DeviceCode } from './models/device-code';\nimport { OtpResponse, OtpStatus, OtpType } from './models/otp';\nimport { ServicePrincipalRegistrationStatus } from './models/service-principal';\n\nimport { LocationService } from './utils/location.service';\nimport { NucleusAuthorizationNotifier } from './utils/nucleus-authorization-notifier';\nimport { OidcConfigurationService } from './utils/oidc-configuration.service';\nimport { SecretsStore } from './utils/secrets-store';\nimport { TokenClient } from './utils/token-client';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class NucleusIdentityService {\n constructor(\n private appService: NucleusAppService,\n location: LocationService,\n private http: HttpClient,\n private config: OidcConfigurationService,\n private tokenClient: TokenClient\n ) {\n const storage = new LocalStorageBackend();\n this._crypto = new DefaultCrypto();\n this._authorizationHandler = new RedirectRequestHandler(\n storage,\n new BasicQueryStringUtils(),\n location,\n this._crypto\n );\n this._authorizationHandler.setAuthorizationNotifier(\n this._authorizationNotifier\n );\n this._store = new SecretsStore(config.clientId);\n }\n\n private _authorizationHandler: AuthorizationRequestHandler;\n private _authorizationNotifier = new NucleusAuthorizationNotifier();\n private _crypto: Crypto;\n private _initStarted = false;\n private _initialized = false;\n private _refreshTokenPromise: Promise<TokenResponse | null> | null = null;\n private _getTokenPromise: Promise<string | null> | null = null;\n private _getServicePrincipalTokenPromise: Promise<string> | null = null;\n private _servicePrincipalTokenId = '_svcp';\n private _store: SecretsStore;\n\n public get identity() {\n return this._store.getIdentity();\n }\n\n public get isAuthenticated() {\n return this.identity != null;\n }\n\n public get servicePrincipalIdentity() {\n return this._store.getIdentity(this._servicePrincipalTokenId);\n }\n\n public get isServicePrincipalAuthenticated() {\n return this.servicePrincipalIdentity != null;\n }\n\n public get isIdentityServicePrincipal() {\n return this._store.defaultIdentityId === this._servicePrincipalTokenId;\n }\n\n public async init(startLogin = false): Promise<void> {\n if (this._initStarted || this._initialized) {\n console.warn(\n \"Nucleus.Identity: Auth initialization was already started. Don't call init() multiple times!\"\n );\n return;\n }\n this._initStarted = true;\n\n this.handleLaunchCodeHash();\n await this._authorizationHandler.completeAuthorizationRequestIfPossible();\n\n const authErr = this._authorizationNotifier.error;\n if (authErr) {\n throw new Error(\n 'Authorization err: ' + authErr.error + ': ' + authErr.errorDescription\n );\n } else if (this._authorizationNotifier.response) {\n window.location.hash = '';\n const request = this._authorizationNotifier.request;\n const response = this._authorizationNotifier.response;\n\n const codeVerifier = request.internal\n ? request.internal['code_verifier']\n : undefined;\n const res = await this.tokenClient.getByAuthorizationCode(\n request.redirectUri,\n response.code,\n codeVerifier\n );\n this._store.setDefaultIdentityId(null);\n await this._store.setToken(res);\n } else {\n const res = await this._store.getToken();\n if (!res && startLogin) {\n await this.login();\n }\n }\n this._initialized = true;\n }\n\n public async loginWithSecret(\n provider: string,\n secret: string\n ): Promise<void> {\n this._store.removeToken().catch(() => console.log('No token to remove.'));\n const assertionToken = await this.getServicePrincipalAccessToken();\n const scope = this.prepareScope(true, this.config?.requestedScopes);\n const res = await this.tokenClient.getBySecret(\n provider,\n secret,\n assertionToken,\n scope\n );\n this._store.setDefaultIdentityId(null);\n await this._store.setToken(res);\n }\n\n public async login(): Promise<void> {\n this._store.removeToken();\n const config = await this.config.getConfiguration();\n const request = this.prepareAuthorizationRequest();\n if (this.appService.isNative) {\n const listener = await App.addListener('appUrlOpen', (data) => {\n if (this.appService.platform === 'ios') {\n Browser.close();\n }\n listener.remove();\n const hash = this.getCodeHash(data.url);\n if (hash) {\n const targetUrl =\n window.location.origin + window.location.pathname + '#' + hash;\n window.location.assign(targetUrl);\n window.location.reload();\n } else {\n console.warn(\n 'Nucleus.Identity: Redirect url did not contain authorization code!',\n data\n );\n }\n });\n }\n this._authorizationHandler.performAuthorizationRequest(config, request);\n }\n\n public async logout(): Promise<void> {\n this._store.removeToken();\n const config = await this.config.getConfiguration();\n const redirectUrl = this.config.redirectUrl;\n const logoutUrl =\n config.endSessionEndpoint +\n '?post_logout_redirect_uri=' +\n encodeURI(redirectUrl);\n if (this.appService.isNative) {\n const listener = await App.addListener('appUrlOpen', () => {\n Device.getInfo().then((info) => {\n if (info.platform === 'ios') {\n Browser.close();\n }\n });\n listener.remove();\n });\n Browser.open({ url: logoutUrl });\n } else {\n window.location.assign(logoutUrl);\n }\n }\n\n public async getAccessToken() {\n if (!this._getTokenPromise) {\n this._getTokenPromise = this.getAccessTokenInternal();\n }\n try {\n return await this._getTokenPromise;\n } finally {\n this._getTokenPromise = null;\n }\n }\n\n public async getServicePrincipalAccessToken() {\n if (!this._getServicePrincipalTokenPromise) {\n this._getServicePrincipalTokenPromise =\n this.getServicePrincipalAccessTokenInternal();\n }\n try {\n return await this._getServicePrincipalTokenPromise;\n } finally {\n this._getServicePrincipalTokenPromise = null;\n }\n }\n\n public async loginServicePrincipal() {\n const sp = await this._store.getServicePrincipal();\n if (sp) {\n const scope = this.prepareScope(\n false,\n this.config.servicePrincipalRequestedScopes\n );\n const res = await this.tokenClient.getByClientCredentials(\n sp.id,\n sp.secret,\n scope\n );\n await this._store.setToken(res, this._servicePrincipalTokenId);\n return res;\n } else {\n throw Error('Service principal is not registered!');\n }\n }\n\n public async loginAsServicePrincipal() {\n const token = await this._store.getToken(this._servicePrincipalTokenId);\n if (!token) {\n await this.loginServicePrincipal();\n }\n this._store.setDefaultIdentityId(this._servicePrincipalTokenId);\n }\n\n public async getOtp(type: OtpType, expiresIn = -1) {\n let url = this.config.getServerUrl(`/otp/create?type=${type}`);\n if (expiresIn > 0) {\n url += `&expiresIn=${expiresIn}`;\n }\n return lastValueFrom(this.http.get<OtpResponse>(url));\n }\n\n public async getOtpStatus(id: string) {\n const url = this.config.getServerUrl(`/otp/status/${id}`);\n return lastValueFrom(this.http.get<OtpStatus>(url));\n }\n\n public getOtpUrl(redirectUrl: string, password: string) {\n const encoded = encodeURIComponent(redirectUrl);\n const url = `/otp/auth?otpValue=${password}&returnUrl=${encoded}`;\n return this.config.getServerUrl(url);\n }\n\n public async startServicePrincipalRegistration() {\n const sp = await this._store.getServicePrincipal();\n return await this.tokenClient.getRegistrationCode(sp?.id);\n }\n\n public async completeServicePrincipalRegistration(deviceCode: DeviceCode) {\n const tokenRes = await this.waitForDeviceToken(deviceCode);\n const regRes = await this.tokenClient.registerServicePrincipal(\n tokenRes.accessToken\n );\n\n await this._store.setServicePrincipal({\n id: regRes.clientId,\n secret: regRes.clientSecret,\n expiresAt: regRes.secretExpirationDate,\n });\n }\n\n public removeServicePrincipalRegistration() {\n return this._store.removeServicePrincipal();\n }\n\n public async getServicePrincipalRegistrationStatus() {\n const sp = await this._store.getServicePrincipal();\n return new ServicePrincipalRegistrationStatus(sp);\n }\n\n public async startDeviceCodeLogin() {\n const scope = this.prepareScope(true, this.config.requestedScopes);\n return await this.tokenClient.getDeviceCode(scope);\n }\n\n public async completeDeviceCodeLogin(deviceCode: DeviceCode) {\n const res = await this.waitForDeviceToken(deviceCode);\n await this._store.setToken(res);\n }\n\n private async waitForDeviceToken(deviceCode: DeviceCode) {\n let res: TokenResponse | null = null;\n do {\n if (deviceCode.isExpired()) {\n throw Error('Device code is expired!');\n }\n\n try {\n res = await this.tokenClient.getByDeviceCode(deviceCode.deviceCode);\n } catch (error) {\n if (\n error instanceof AppAuthError &&\n error.message === 'authorization_pending'\n ) {\n await this.delay(2000);\n } else {\n throw error;\n }\n }\n } while (!res);\n return res;\n }\n\n private prepareAuthorizationRequest(): AuthorizationRequest {\n const redirectUri = this.config.redirectUrl;\n\n const params = {\n response_mode: 'fragment',\n prompt: 'consent',\n access_type: 'offline',\n auth_provider_hint: this.config.authProviderHint,\n };\n\n return new AuthorizationRequest(\n {\n client_id: this.config.clientId,\n redirect_uri: redirectUri,\n response_type: AuthorizationRequest.RESPONSE_TYPE_CODE,\n scope: this.prepareScope(true, this.config.requestedScopes),\n extras: params as StringMap,\n },\n this._crypto,\n true\n );\n }\n\n private async getServicePrincipalAccessTokenInternal() {\n let token = await this._store.getToken(this._servicePrincipalTokenId);\n if (!token?.isValid()) {\n token = await this.loginServicePrincipal();\n }\n return token?.accessToken;\n }\n\n private async getAccessTokenInternal() {\n let token = await this._store.getToken();\n if (token && !token.isValid()) {\n token = await this.loginWithRefreshToken(token);\n }\n return token?.accessToken ?? null;\n }\n\n private async loginWithRefreshToken(token: TokenResponse) {\n if (!this._refreshTokenPromise) {\n this._refreshTokenPromise = this.loginWithRefreshTokenInternal(token);\n }\n try {\n return await this._refreshTokenPromise;\n } finally {\n this._refreshTokenPromise = null;\n }\n }\n\n private async loginWithRefreshTokenInternal(token: TokenResponse) {\n if (token?.refreshToken) {\n try {\n const res = await this.tokenClient.getByRefreshToken(\n token.refreshToken\n );\n await this._store.setToken(res);\n return res;\n } catch (err) {\n console.warn(\n 'Nucleus.Identity: Failed to login with refresh token.',\n err\n );\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n if ((err as any).message === 'invalid_grant') {\n await this.logout();\n }\n }\n } else {\n console.warn('Nucleus.Identity: There is no refresh token available.');\n }\n return null;\n }\n\n private getCodeHash(url: string) {\n const arr = url.split('#');\n if (arr.length > 1) {\n const hash = arr[1];\n if (hash.startsWith('code=')) {\n return hash;\n }\n }\n return null;\n }\n\n private handleLaunchCodeHash() {\n if (this.appService.isNative && this.appService.launchUrl) {\n const hash = this.getCodeHash(this.appService.launchUrl);\n if (hash) {\n console.log(\n 'Nucleus.Identity: Got authorization code from launchUrl, will assign it to hash.'\n );\n window.location.hash = '#' + hash;\n }\n }\n }\n\n private prepareScope(offlineAccess: boolean, aditionalScope?: string) {\n let scope = 'openid';\n if (offlineAccess) {\n scope += ' offline_access';\n }\n if (aditionalScope) {\n scope += ' ' + aditionalScope;\n }\n return scope;\n }\n\n private delay(miliseconds: number) {\n return new Promise<void>((resolve) => {\n setTimeout(() => {\n resolve();\n }, miliseconds);\n });\n }\n}\n","import {\n HttpErrorResponse,\n HttpEvent,\n HttpHandler,\n HttpInterceptor,\n HttpRequest,\n} from '@angular/common/http';\nimport { Injectable } from '@angular/core';\nimport { Observable, from, throwError } from 'rxjs';\nimport { catchError, mergeMap } from 'rxjs/operators';\nimport { NucleusIdentityConfig } from './nucleus-identity-config';\nimport { NucleusIdentityService } from './nucleus-identity.service';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class NucleusTokenInterceptor implements HttpInterceptor {\n constructor(\n private auth: NucleusIdentityService,\n private config: NucleusIdentityConfig\n ) {\n this._authority = config.authority.toLowerCase();\n this._interceptUrls = config.httpInterceptorUrls?.map((x) =>\n x.toLowerCase()\n );\n }\n\n private _authority: string;\n private _authorityInterceptPaths = [\n '/api',\n '/manage',\n '/otp/create',\n '/otp/status',\n ];\n private _interceptUrls?: string[];\n\n public intercept(\n req: HttpRequest<unknown>,\n next: HttpHandler\n ): Observable<HttpEvent<unknown>> {\n if (this.shouldIntercept(req.url)) {\n const res = this.authorizeRequest(this.auth.getAccessToken(), req, next);\n return this.checkUnauthorized(res);\n }\n return next.handle(req);\n }\n\n private shouldIntercept(url: string): boolean {\n url = url.toLowerCase();\n\n if (url.startsWith(this._authority)) {\n const pathname = new URL(url).pathname;\n return this._authorityInterceptPaths.some((x) => pathname.startsWith(x));\n }\n\n if (this._interceptUrls && this._interceptUrls.length > 0) {\n return (\n this.config.httpInterceptorUrls?.some((x) => url.startsWith(x)) ?? false\n );\n }\n return false;\n }\n\n private authorizeRequest(\n getToken: Promise<string | null>,\n req: HttpRequest<unknown>,\n next: HttpHandler\n ): Observable<HttpEvent<unknown>> {\n return from(getToken).pipe(\n mergeMap((token) => {\n if (token) {\n const headers = req.headers.set('Authorization', `Bearer ${token}`);\n req = req.clone({ headers });\n }\n return next.handle(req);\n })\n );\n }\n\n private checkUnauthorized(\n response: Observable<HttpEvent<unknown>>\n ): Observable<HttpEvent<unknown>> {\n return response.pipe(\n catchError((err) => {\n if (err instanceof HttpErrorResponse && err.status === 401) {\n if (this.config.automaticLoginOnHttp401) {\n this.auth.login();\n }\n }\n return throwError(() => err);\n })\n );\n }\n}\n","import { NgModule, ModuleWithProviders } from '@angular/core';\nimport { HTTP_INTERCEPTORS } from '@angular/common/http';\nimport { NucleusTokenInterceptor } from './nucleus-token-interceptor.service';\nimport { NucleusIdentityConfig } from './nucleus-identity-config';\n\n@NgModule({\n imports: [],\n declarations: [],\n exports: [],\n})\nexport class NucleusIdentityModule {\n static forRoot(\n config: NucleusIdentityConfig\n ): ModuleWithProviders<NucleusIdentityModule> {\n return {\n ngModule: NucleusIdentityModule,\n providers: [\n { provide: NucleusIdentityConfig, useValue: config },\n {\n provide: HTTP_INTERCEPTORS,\n useClass: NucleusTokenInterceptor,\n multi: true,\n },\n ],\n };\n }\n}\n","export class OtpResponse {\n public password!: string;\n public passwordId!: string;\n}\n\nexport class OtpStatus {\n public isExpired!: boolean;\n public isUsed!: boolean;\n public secondsToExpiration!: number;\n}\n\nexport enum OtpType {\n SimpleNumbers = 0,\n SimpleAlfanumeric = 1,\n Complex = 2,\n}\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":["i1","i1.AngularRequestor","i2.NucleusIdentityConfig","i3","i2.OidcConfigurationService","i2.LocationService","i4.OidcConfigurationService","i5.TokenClient","i1.NucleusIdentityService"],"mappings":";;;;;;;;;;;;;MAAa,qBAAqB,CAAA;AAAlC,IAAA,WAAA,GAAA;QAWS,IAAA,CAAA,mBAAmB,GAAc,EAAE;QAEnC,IAAA,CAAA,uBAAuB,GAAG,KAAK;IAOxC;AAAC;;MCpBY,gBAAgB,CAAA;AAI5B;MAEY,kCAAkC,CAAA;AAK7C,IAAA,WAAA,CAAY,gBAAyC,EAAA;QAH9C,IAAA,CAAA,YAAY,GAAG,KAAK;QAIzB,IAAI,gBAAgB,EAAE;AACpB,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;AACxB,YAAA,IAAI,CAAC,EAAE,GAAG,gBAAgB,CAAC,EAAE;AAC7B,YAAA,IAAI,CAAC,SAAS,GAAG,gBAAgB,CAAC,SAAS;QAC7C;IACF;AAEA,IAAA,IAAW,SAAS,GAAA;AAClB,QAAA,OAAO,KAAK;IACd;AACD;;MCdY,eAAe,CAAA;AAC1B,IAAA,WAAA,CAAoB,UAA6B,EAAA;QAA7B,IAAA,CAAA,UAAU,GAAV,UAAU;IAAsB;AAEpD,IAAA,IAAI,IAAI,GAAA;AACN,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI;IAC7B;IACA,IAAI,IAAI,CAAC,CAAC,EAAA;AACR,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;IAC1B;AAEA,IAAA,IAAI,IAAI,GAAA;AACN,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI;IAC7B;IACA,IAAI,IAAI,CAAC,CAAC,EAAA;AACR,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;IAC1B;AAEA,IAAA,IAAI,MAAM,GAAA;AACR,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM;IAC/B;AAEA,IAAA,IAAI,QAAQ,GAAA;AACV,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ;IACjC;IACA,IAAI,QAAQ,CAAC,CAAC,EAAA;AACZ,QAAA,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC;IAC9B;AAEA,IAAA,IAAI,QAAQ,GAAA;AACV,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ;IACjC;IACA,IAAI,QAAQ,CAAC,CAAC,EAAA;AACZ,QAAA,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC;IAC9B;AAEA,IAAA,IAAI,IAAI,GAAA;AACN,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI;IAC7B;IACA,IAAI,IAAI,CAAC,CAAC,EAAA;AACR,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;IAC1B;AAEA,IAAA,IAAI,QAAQ,GAAA;AACV,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ;IACjC;IACA,IAAI,QAAQ,CAAC,CAAC,EAAA;AACZ,QAAA,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC;IAC9B;AAEA,IAAA,IAAI,MAAM,GAAA;AACR,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM;IAC/B;IACA,IAAI,MAAM,CAAC,CAAC,EAAA;AACV,QAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;IAC5B;AAEA,IAAA,MAAM,CAAC,GAAW,EAAA;AAChB,QAAA,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;AAC5B,YAAA,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACvB;aAAO;AACL,YAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;QAC7B;IACF;8GA9DW,eAAe,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,iBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAf,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,eAAe,cAFd,MAAM,EAAA,CAAA,CAAA;;2FAEP,eAAe,EAAA,UAAA,EAAA,CAAA;kBAH3B,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;ACHK,MAAO,4BAA6B,SAAQ,qBAAqB,CAAA;AAKrE,IAAA,WAAA,GAAA;AACE,QAAA,KAAK,EAAE;QALT,IAAA,CAAA,QAAQ,GAAiC,IAAI;QAE7C,IAAA,CAAA,KAAK,GAA8B,IAAI;QAIrC,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,KAAI;YACzD,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC;AACxE,YAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ;AACxB,YAAA,IAAI,CAAC,OAAO,GAAG,OAAO;AACtB,YAAA,IAAI,CAAC,KAAK,GAAG,KAAK;AACpB,QAAA,CAAC,CAAC;IACJ;AACD;;ACVK,MAAO,gBAAiB,SAAQ,SAAS,CAAA;AAC7C,IAAA,WAAA,CAAoB,IAAgB,EAAA;AAClC,QAAA,KAAK,EAAE;QADW,IAAA,CAAA,IAAI,GAAJ,IAAI;IAExB;;AAGA,IAAA,GAAG,CAAI,QAA4B,EAAA;QACjC,IAAI,MAAM,GAAG,KAAK;AAClB,QAAA,IAAI,QAAQ,CAAC,MAAM,EAAE;AACnB,YAAA,MAAM,GAAG,QAAQ,CAAC,MAAM;QAC1B;QAEA,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,KAAI;AACxC,YAAA,IAAI,CAAC;AACF,iBAAA,OAAO,CAAI,MAAM,EAAE,QAAQ,CAAC,GAAa,EAAE;gBAC1C,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAsB;aACzC;AACA,iBAAA,SAAS,CAAC;gBACT,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC;AAC3B,gBAAA,KAAK,EAAE,CAAC,GAAG,KAAI;AACb,oBAAA,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC;AAC7B,oBAAA,IAAI,GAAG,YAAY,iBAAiB,EAAE;AACpC,wBAAA,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC;oBAC1D;oBACA,MAAM,CAAC,CAAC,CAAC;gBACX,CAAC;AACF,aAAA,CAAC;AACN,QAAA,CAAC,CAAC;IACJ;8GA7BW,gBAAgB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,IAAA,CAAA,UAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAhB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,cAFf,MAAM,EAAA,CAAA,CAAA;;2FAEP,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAH5B,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;ACAD,MAAM,eAAe,GAAG,aAAa;AACrC,MAAM,oBAAoB,GAAG,sBAAsB;AAQ7C,MAAO,wCAAyC,SAAQ,iCAAiC,CAAA;AAC7F,IAAA,WAAA,CAAY,OAAqD,EAAA;QAC/D,KAAK,CAAC,OAAO,CAAC;AACd,QAAA,IAAI,CAAC,2BAA2B,GAAG,OAAO,CAAC,6BAA6B;AACxE,QAAA,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,qBAAqB;IAC3D;AAKA,IAAA,aAAsB,eAAe,CACnC,eAAuB,EACvB,SAAqB,EAAA;QAErB,MAAM,OAAO,GAAG,CAAA,EAAG,eAAe,IAAI,eAAe,CAAA,CAAA,EAAI,oBAAoB,CAAA,CAAE;AAC/E,QAAA,MAAM,cAAc,GAAG,SAAS,IAAI,IAAI,eAAe,EAAE;AACzD,QAAA,MAAM,IAAI,GACR,MAAM,cAAc,CAAC,GAAG,CAA+C;AACrE,YAAA,GAAG,EAAE,OAAO;AACZ,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,MAAM,EAAE,KAAK;AACd,SAAA,CAAC;AACJ,QAAA,OAAO,IAAI,wCAAwC,CAAC,IAAI,CAAC;IAC3D;IAES,MAAM,GAAA;AACb,QAAA,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAkD;AAC1E,QAAA,GAAG,CAAC,6BAA6B,GAAG,IAAI,CAAC,2BAA2B;;AAEpE,QAAA,OAAO,GAAU;IACnB;AACD;;MCtCY,wBAAwB,CAAA;AACnC,IAAA,WAAA,CACU,SAA2B,EAC3B,MAA6B,EAC7B,UAA6B,EAAA;QAF7B,IAAA,CAAA,SAAS,GAAT,SAAS;QACT,IAAA,CAAA,MAAM,GAAN,MAAM;QACN,IAAA,CAAA,UAAU,GAAV,UAAU;QAGZ,IAAA,CAAA,cAAc,GACpB,IAAI;IAHH;AAKI,IAAA,MAAM,gBAAgB,GAAA;AAC3B,QAAA,MAAM,IAAI,CAAC,mBAAmB,EAAE;AAChC,QAAA,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;AACxB,YAAA,MAAM,KAAK,CAAC,mCAAmC,CAAC;QAClD;QAEA,OAAO,IAAI,CAAC,cAAc;IAC5B;AAEA,IAAA,IAAW,QAAQ,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ;IAC7B;AAEA,IAAA,IAAW,eAAe,GAAA;AACxB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe;IACpC;AAEA,IAAA,IAAW,+BAA+B,GAAA;AACxC,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,+BAA+B;IACpD;AAEA,IAAA,IAAW,gBAAgB,GAAA;AACzB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB;IACrC;AAEA,IAAA,IAAW,WAAW,GAAA;AACpB,QAAA,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI;AAC9B,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ;QACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE;AAC5D,YAAA,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB;QACtC;aAAO,IAAI,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;AAC3D,YAAA,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc;QAClC;AAAO,aAAA,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;AAClC,YAAA,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;QAC/B;AACA,QAAA,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;IACvC;IAEO,YAAY,CAAC,cAA6B,IAAI,EAAA;AACnD,QAAA,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;AACrC,QAAA,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE;AACxC,YAAA,SAAS,GAAG,MAAM,CAAC,MAAM;QAC3B;AAEA,QAAA,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC;QAE5B,IAAI,WAAW,EAAE;YACf,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC;QACjC;QAEA,OAAO,GAAG,CAAC,IAAI;IACjB;AAEQ,IAAA,oBAAoB,CAAC,GAAW,EAAA;QACtC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;AAC1B,QAAA,IAAI,CAAC,GAAG,CAAC,EAAE;YACT,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B;AACA,QAAA,OAAO,GAAG;IACZ;AAEQ,IAAA,MAAM,mBAAmB,GAAA;AAC/B,QAAA,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE;YAC/B;QACF;AACA,QAAA,IAAI,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE;QACnC,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;YAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC;AACA,QAAA,IAAI;AACF,YAAA,IAAI,CAAC,cAAc;gBACjB,MAAM,wCAAwC,CAAC,eAAe,CAC5D,SAAS,EACT,IAAI,CAAC,SAAS,CACf;QACL;QAAE,OAAO,CAAC,EAAE;YACV,OAAO,CAAC,KAAK,CACX,oDAAoD;gBACjD,CAAW,CAAC,OAAO,CACvB;AACD,YAAA,MAAM,CAAC;QACT;IACF;8GA5FW,wBAAwB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAC,gBAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,qBAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,EAAA,CAAA,iBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAxB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,cAFvB,MAAM,EAAA,CAAA,CAAA;;2FAEP,wBAAwB,EAAA,UAAA,EAAA,CAAA;kBAHpC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;MCNY,KAAK,CAAA;IAIhB,WAAA,CAAY,IAAY,EAAE,MAAgB,EAAA;AACxC,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI;AAChB,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;IACtB;AACD;MAEY,QAAQ,CAAA;AAMnB,IAAA,WAAA,CAAY,GAAkB,EAAA;QAFvB,IAAA,CAAA,MAAM,GAAY,EAAE;AAGzB,QAAA,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE;AAChB,YAAA,MAAM,KAAK,CAAC,6CAA6C,CAAC;QAC5D;QAEA,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;AAE3C,QAAA,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI;AACtB,QAAA,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG;AACxB,QAAA,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE;YACvB,IAAI,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE;AACtC,gBAAA,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC;gBAErB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;AACxB,oBAAA,IAAI,GAAG,CAAC,IAAI,CAAC;gBACf;gBAEA,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;AAClC,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YACzB;QACF;IACF;;AAGQ,IAAA,WAAW,CAAC,GAAW,EAAA;QAC7B,IAAI,CAAC,GAAG,EAAE;AACR,YAAA,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE;QACH;AAEA,QAAA,IAAI;YACF,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;;YAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;;AAE7C,YAAA,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B;QAAE,OAAO,KAAK,EAAE;AACd,YAAA,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC;AAC3D,YAAA,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC;QAC/D;IACF;AAEQ,IAAA,gBAAgB,CAAC,GAAW,EAAA;AAClC,QAAA,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAChD,QAAA,OAAO,kBAAkB,CACvB,IAAI,CAAC,GAAG;aACL,KAAK,CAAC,EAAE;AACR,aAAA,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAChE,aAAA,IAAI,CAAC,EAAE,CAAC,CACZ;IACH;AACD;;MChEY,YAAY,CAAA;AACvB,IAAA,WAAA,CAAY,QAAgB,EAAA;QASpB,IAAA,CAAA,OAAO,GAA2C,EAAE;QACpD,IAAA,CAAA,WAAW,GAA+B,EAAE;QAE5C,IAAA,CAAA,iBAAiB,GAA4B,IAAI;QAXvD,IAAI,CAAC,sBAAsB,GAAG,CAAA,iBAAA,EAAoB,QAAQ,CAAA,CAAE,CAAC;QAC7D,IAAI,CAAC,oBAAoB,GAAG,CAAA,EAAG,IAAI,CAAC,sBAAsB,OAAO;QACjE,IAAI,CAAC,4BAA4B,GAAG,CAAA,EAAG,IAAI,CAAC,sBAAsB,OAAO;QACzE,IAAI,CAAC,kBAAkB,GAAG,YAAY,CAAC,OAAO,CAC5C,IAAI,CAAC,4BAA4B,CAClC;IACH;AAUA,IAAA,IAAW,iBAAiB,GAAA;QAC1B,OAAO,IAAI,CAAC,kBAAkB;IAChC;IAEO,sBAAsB,GAAA;AAC3B,QAAA,IAAI,CAAC,iBAAiB,GAAG,IAAI;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC;IAC9C;IAEO,MAAM,mBAAmB,CAAC,gBAAkC,EAAA;AACjE,QAAA,IAAI,CAAC,iBAAiB,GAAG,gBAAgB;QACzC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;IAC9D;AAEO,IAAA,MAAM,mBAAmB,GAAA;AAC9B,QAAA,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;AAC3B,YAAA,IAAI,CAAC,iBAAiB,GAAG,MAAM,IAAI,CAAC,IAAI,CACtC,IAAI,CAAC,oBAAoB,CAC1B;QACH;QACA,OAAO,IAAI,CAAC,iBAAiB;IAC/B;AAEO,IAAA,QAAQ,CAAC,KAAoB,EAAE,EAAA,GAAoB,IAAI,EAAA;QAC5D,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;IAC/C;IAEO,WAAW,CAAC,KAAoB,IAAI,EAAA;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;AAChC,QAAA,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B;AAEO,IAAA,oBAAoB,CAAC,EAAiB,EAAA;AAC3C,QAAA,IAAI,CAAC,kBAAkB,GAAG,EAAE;AAC5B,QAAA,IAAI,IAAI,CAAC,kBAAkB,EAAE;YAC3B,YAAY,CAAC,OAAO,CAClB,IAAI,CAAC,4BAA4B,EACjC,IAAI,CAAC,kBAAkB,CACxB;QACH;aAAO;AACL,YAAA,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC;QAC5D;IACF;AAEO,IAAA,MAAM,QAAQ,CAAC,EAAA,GAAoB,IAAI,EAAA;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;;AAGhC,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE;AACvD,YAAA,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACvC;AACA,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1B;IAEO,WAAW,CAAC,KAAoB,IAAI,EAAA;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;AAChC,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AACxB,QAAA,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;AAC5B,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;IACxB;IAEQ,MAAM,sBAAsB,CAAC,EAAiB,EAAA;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAoB,GAAG,CAAC;QAC3D,IAAI,WAAW,EAAE;AACf,YAAA,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC;YAC1C,IAAI,GAAG,EAAE,WAAW,IAAI,GAAG,EAAE,OAAO,EAAE;gBACpC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7C;QACF;AACA,QAAA,OAAO,IAAI;IACb;AAEQ,IAAA,MAAM,gBAAgB,CAC5B,KAAoB,EACpB,IAAa,EACb,EAAiB,EAAA;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;AAChC,QAAA,IAAI,KAAK,IAAI,IAAI,EAAE;AACjB,YAAA,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B;aAAO;AACL,YAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK;YACzB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC;YAC3C,IAAI,IAAI,EAAE;AACR,gBAAA,IAAI;oBACF,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBACtC;gBAAE,OAAO,CAAC,EAAE;AACV,oBAAA,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC;gBACpE;YACF;QACF;IACF;AAEQ,IAAA,WAAW,CAAC,EAAiB,EAAA;QACnC,IAAI,CAAC,EAAE,EAAE;AACP,YAAA,EAAE,GAAG,IAAI,CAAC,kBAAkB;QAC9B;AACA,QAAA,OAAO;AACL,cAAE,CAAA,EAAG,IAAI,CAAC,sBAAsB,CAAA,CAAA,EAAI,EAAE,CAAA;AACtC,cAAE,IAAI,CAAC,sBAAsB;IACjC;AAEQ,IAAA,KAAK,CAAC,GAAW,EAAA;QACvB,OAAO,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IAC5C;IAEQ,IAAI,CAAI,GAAW,EAAE,KAAQ,EAAA;AACnC,QAAA,OAAO,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACvE;IAEQ,MAAM,IAAI,CAAI,GAAW,EAAA;AAC/B,QAAA,IAAI;YACF,MAAM,CAAC,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;AAChD,YAAA,IAAI,CAAC,EAAE,KAAK,EAAE;gBACZ,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAM;YACjC;iBAAO;AACL,gBAAA,OAAO,IAAI;YACb;QACF;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,IAAI;QACb;IACF;AACD;;MCxIY,UAAU,CAAA;AACrB,IAAA,WAAA,CAAY,QAAwB,EAAA;AAClC,QAAA,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,WAAW;AACtC,QAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS;AAClC,QAAA,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,gBAAgB;AAChD,QAAA,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,yBAAyB;QACjE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;AAClD,QAAA,IAAI,CAAC,QAAQ,GAAG,YAAY,EAAE;IAChC;IAUA,SAAS,CAAC,MAAM,GAAG,EAAE,EAAA;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;IACtC;IAEA,WAAW,CAAC,MAAM,GAAG,EAAE,EAAA;AACrB,QAAA,MAAM,GAAG,GAAG,YAAY,EAAE;QAC1B,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,GAAG,MAAM,GAAG,GAAG;IACtD;AACD;;MC/BY,0BAA0B,CAAA;AACrC,IAAA,WAAA,CAAY,QAAwC,EAAA;AAClD,QAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS;AAClC,QAAA,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,aAAa;AAC1C,QAAA,IAAI,CAAC,oBAAoB,GAAG,IAAI,IAAI,CAClC,QAAQ,CAAC,wBAAwB,GAAG,IAAI,CACzC;IACH;AAKD;;MCMY,WAAW,CAAA;IACtB,WAAA,CACU,SAA2B,EAC3B,MAAgC,EAAA;QADhC,IAAA,CAAA,SAAS,GAAT,SAAS;QACT,IAAA,CAAA,MAAM,GAAN,MAAM;QAEd,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,SAAS,CAAC;AAC3D,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,EAAE;IAC3C;AAKO,IAAA,MAAM,sBAAsB,CACjC,WAAmB,EACnB,IAAY,EACZ,YAAqB,EAAA;QAErB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;QACnD,MAAM,WAAW,GAAG,WAAW;AAC/B,QAAA,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;AAC3B,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAC/B,YAAA,YAAY,EAAE,WAAW;AACzB,YAAA,UAAU,EAAE,6BAA6B;YACzC,IAAI;AACJ,YAAA,MAAM,EAAE,YAAY,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,SAAS;AACnE,SAAA,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC;IAClE;IAEO,MAAM,iBAAiB,CAAC,YAAoB,EAAA;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;AAC3C,QAAA,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;AAC3B,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAC/B,YAAA,YAAY,EAAE,WAAW;AACzB,YAAA,UAAU,EAAE,wBAAwB;AACpC,YAAA,aAAa,EAAE,YAAY;AAC5B,SAAA,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC;IAClE;AAEO,IAAA,MAAM,sBAAsB,CACjC,QAAgB,EAChB,YAAoB,EACpB,KAAa,EAAA;QAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;AAC3B,YAAA,SAAS,EAAE,QAAQ;AACnB,YAAA,YAAY,EAAE,EAAE;AAChB,YAAA,UAAU,EAAE,oBAAoB;AAChC,YAAA,MAAM,EAAE;AACN,gBAAA,aAAa,EAAE,YAAY;gBAC3B,KAAK;AACN,aAAA;AACF,SAAA,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC;IAClE;IAEO,MAAM,WAAW,CACtB,QAAgB,EAChB,MAAc,EACd,cAAsB,EACtB,KAAa,EAAA;QAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;AAC3B,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAC/B,YAAA,YAAY,EAAE,EAAE;AAChB,YAAA,UAAU,EAAE,6BAA6B;AACzC,YAAA,MAAM,EAAE;AACN,gBAAA,eAAe,EAAE,QAAQ;AACzB,gBAAA,YAAY,EAAE,MAAM;AACpB,gBAAA,qBAAqB,EACnB,wDAAwD;AAC1D,gBAAA,gBAAgB,EAAE,cAAc;gBAChC,KAAK;AACN,aAAA;AACF,SAAA,CAAC;QAEF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC;IAClE;IAEO,MAAM,eAAe,CAAC,UAAkB,EAAA;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;AAC3B,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAC/B,YAAA,YAAY,EAAE,EAAE;AAChB,YAAA,UAAU,EAAE,8CAA8C;AAC1D,YAAA,MAAM,EAAE;AACN,gBAAA,WAAW,EAAE,UAAU;AACxB,aAAA;AACF,SAAA,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC;IAClE;IAEO,MAAM,wBAAwB,CAAC,KAAa,EAAA;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAEnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAEvC;YACA,GAAG,EAAE,MAAM,CAAC,oBAAoB;AAChC,YAAA,MAAM,EAAE,MAAM;AACd,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,OAAO,EAAE;AACP,gBAAA,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE;AACjC,aAAA;;AAEF,SAAA,CAAC;AAEF,QAAA,IAAK,QAA2B,CAAC,KAAK,KAAK,SAAS,EAAE;AACpD,YAAA,OAAO,IAAI,0BAA0B,CACnC,QAA0C,CAC3C;QACH;aAAO;AACL,YAAA,MAAM,IAAI,YAAY,CAAE,QAA2B,CAAC,KAAK,CAAC;QAC5D;IACF;AAEO,IAAA,MAAM,mBAAmB,CAC9B,0BAAA,GAA4C,IAAI,EAAA;AAEhD,QAAA,MAAM,MAAM,GAAG;AACb,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,oBAAoB,EAAE,0BAA0B;SACjD;AAED,QAAA,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAmB,CAAC;IACxD;IAEO,MAAM,aAAa,CAAC,KAAa,EAAA;AACtC,QAAA,MAAM,MAAM,GAAG;YACb,KAAK;SACN;AACD,QAAA,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;IAC3C;IAEQ,MAAM,qBAAqB,CAAC,MAAiB,EAAA;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAEnD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;QAC1C,MAAM,GAAG,GAAc,MAAM;QAE7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAkC;YACzE,GAAG,EAAE,MAAM,CAAC,2BAA2B;AACvC,YAAA,MAAM,EAAE,MAAM;AACd,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;AACjC,SAAA,CAAC;AAEF,QAAA,IAAK,QAA2B,CAAC,KAAK,KAAK,SAAS,EAAE;AACpD,YAAA,OAAO,IAAI,UAAU,CAAC,QAA0B,CAAC;QACnD;aAAO;AACL,YAAA,MAAM,IAAI,YAAY,CAAE,QAA2B,CAAC,KAAK,CAAC;QAC5D;IACF;8GA9JW,WAAW,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAF,gBAAA,EAAA,EAAA,EAAA,KAAA,EAAAG,wBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAX,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAW,cAFV,MAAM,EAAA,CAAA,CAAA;;2FAEP,WAAW,EAAA,UAAA,EAAA,CAAA;kBAHvB,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;MCcY,sBAAsB,CAAA;IACjC,WAAA,CACU,UAA6B,EACrC,QAAyB,EACjB,IAAgB,EAChB,MAAgC,EAChC,WAAwB,EAAA;QAJxB,IAAA,CAAA,UAAU,GAAV,UAAU;QAEV,IAAA,CAAA,IAAI,GAAJ,IAAI;QACJ,IAAA,CAAA,MAAM,GAAN,MAAM;QACN,IAAA,CAAA,WAAW,GAAX,WAAW;AAiBb,QAAA,IAAA,CAAA,sBAAsB,GAAG,IAAI,4BAA4B,EAAE;QAE3D,IAAA,CAAA,YAAY,GAAG,KAAK;QACpB,IAAA,CAAA,YAAY,GAAG,KAAK;QACpB,IAAA,CAAA,oBAAoB,GAAyC,IAAI;QACjE,IAAA,CAAA,gBAAgB,GAAkC,IAAI;QACtD,IAAA,CAAA,gCAAgC,GAA2B,IAAI;QAC/D,IAAA,CAAA,wBAAwB,GAAG,OAAO;AAtBxC,QAAA,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE;AACzC,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,EAAE;AAClC,QAAA,IAAI,CAAC,qBAAqB,GAAG,IAAI,sBAAsB,CACrD,OAAO,EACP,IAAI,qBAAqB,EAAE,EAC3B,QAAQ,EACR,IAAI,CAAC,OAAO,CACb;QACD,IAAI,CAAC,qBAAqB,CAAC,wBAAwB,CACjD,IAAI,CAAC,sBAAsB,CAC5B;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC;IACjD;AAaA,IAAA,IAAW,QAAQ,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;IAClC;AAEA,IAAA,IAAW,eAAe,GAAA;AACxB,QAAA,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI;IAC9B;AAEA,IAAA,IAAW,wBAAwB,GAAA;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC;IAC/D;AAEA,IAAA,IAAW,+BAA+B,GAAA;AACxC,QAAA,OAAO,IAAI,CAAC,wBAAwB,IAAI,IAAI;IAC9C;AAEA,IAAA,IAAW,0BAA0B,GAAA;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,KAAK,IAAI,CAAC,wBAAwB;IACxE;AAEO,IAAA,MAAM,IAAI,CAAC,UAAU,GAAG,KAAK,EAAA;QAClC,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE;AAC1C,YAAA,OAAO,CAAC,IAAI,CACV,8FAA8F,CAC/F;YACD;QACF;AACA,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAExB,IAAI,CAAC,oBAAoB,EAAE;AAC3B,QAAA,MAAM,IAAI,CAAC,qBAAqB,CAAC,sCAAsC,EAAE;AAEzE,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK;QACjD,IAAI,OAAO,EAAE;AACX,YAAA,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CACxE;QACH;AAAO,aAAA,IAAI,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE;AAC/C,YAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE;AACzB,YAAA,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO;AACnD,YAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ;AAErD,YAAA,MAAM,YAAY,GAAG,OAAO,CAAC;AAC3B,kBAAE,OAAO,CAAC,QAAQ,CAAC,eAAe;kBAChC,SAAS;AACb,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CACvD,OAAO,CAAC,WAAW,EACnB,QAAQ,CAAC,IAAI,EACb,YAAY,CACb;AACD,YAAA,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC;YACtC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACjC;aAAO;YACL,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;AACxC,YAAA,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE;AACtB,gBAAA,MAAM,IAAI,CAAC,KAAK,EAAE;YACpB;QACF;AACA,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI;IAC1B;AAEO,IAAA,MAAM,eAAe,CAC1B,QAAgB,EAChB,MAAc,EAAA;AAEd,QAAA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACzE,QAAA,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,8BAA8B,EAAE;AAClE,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;AACnE,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAC5C,QAAQ,EACR,MAAM,EACN,cAAc,EACd,KAAK,CACN;AACD,QAAA,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;IACjC;AAEO,IAAA,MAAM,KAAK,GAAA;AAChB,QAAA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,EAAE;AAClD,QAAA,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;AAC5B,YAAA,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,IAAI,KAAI;gBAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE;oBACtC,OAAO,CAAC,KAAK,EAAE;gBACjB;gBACA,QAAQ,CAAC,MAAM,EAAE;gBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;gBACvC,IAAI,IAAI,EAAE;AACR,oBAAA,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,GAAG,IAAI;AAChE,oBAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;AACjC,oBAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAC1B;qBAAO;AACL,oBAAA,OAAO,CAAC,IAAI,CACV,oEAAoE,EACpE,IAAI,CACL;gBACH;AACF,YAAA,CAAC,CAAC;QACJ;QACA,IAAI,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC;IACzE;AAEO,IAAA,MAAM,MAAM,GAAA;AACjB,QAAA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;AAC3C,QAAA,MAAM,SAAS,GACb,MAAM,CAAC,kBAAkB;YACzB,4BAA4B;YAC5B,SAAS,CAAC,WAAW,CAAC;AACxB,QAAA,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YAC5B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,MAAK;gBACxD,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAI;AAC7B,oBAAA,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE;wBAC3B,OAAO,CAAC,KAAK,EAAE;oBACjB;AACF,gBAAA,CAAC,CAAC;gBACF,QAAQ,CAAC,MAAM,EAAE;AACnB,YAAA,CAAC,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAClC;aAAO;AACL,YAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC;IACF;AAEO,IAAA,MAAM,cAAc,GAAA;AACzB,QAAA,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;AAC1B,YAAA,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,EAAE;QACvD;AACA,QAAA,IAAI;AACF,YAAA,OAAO,MAAM,IAAI,CAAC,gBAAgB;QACpC;gBAAU;AACR,YAAA,IAAI,CAAC,gBAAgB,GAAG,IAAI;QAC9B;IACF;AAEO,IAAA,MAAM,8BAA8B,GAAA;AACzC,QAAA,IAAI,CAAC,IAAI,CAAC,gCAAgC,EAAE;AAC1C,YAAA,IAAI,CAAC,gCAAgC;gBACnC,IAAI,CAAC,sCAAsC,EAAE;QACjD;AACA,QAAA,IAAI;AACF,YAAA,OAAO,MAAM,IAAI,CAAC,gCAAgC;QACpD;gBAAU;AACR,YAAA,IAAI,CAAC,gCAAgC,GAAG,IAAI;QAC9C;IACF;AAEO,IAAA,MAAM,qBAAqB,GAAA;QAChC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE;QAClD,IAAI,EAAE,EAAE;AACN,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAC7B,KAAK,EACL,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAC5C;AACD,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CACvD,EAAE,CAAC,EAAE,EACL,EAAE,CAAC,MAAM,EACT,KAAK,CACN;AACD,YAAA,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,wBAAwB,CAAC;AAC9D,YAAA,OAAO,GAAG;QACZ;aAAO;AACL,YAAA,MAAM,KAAK,CAAC,sCAAsC,CAAC;QACrD;IACF;AAEO,IAAA,MAAM,uBAAuB,GAAA;AAClC,QAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC;QACvE,IAAI,CAAC,KAAK,EAAE;AACV,YAAA,MAAM,IAAI,CAAC,qBAAqB,EAAE;QACpC;QACA,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,wBAAwB,CAAC;IACjE;IAEO,MAAM,MAAM,CAAC,IAAa,EAAE,SAAS,GAAG,CAAC,CAAC,EAAA;AAC/C,QAAA,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA,iBAAA,EAAoB,IAAI,CAAA,CAAE,CAAC;AAC9D,QAAA,IAAI,SAAS,GAAG,CAAC,EAAE;AACjB,YAAA,GAAG,IAAI,CAAA,WAAA,EAAc,SAAS,CAAA,CAAE;QAClC;QACA,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAc,GAAG,CAAC,CAAC;IACvD;IAEO,MAAM,YAAY,CAAC,EAAU,EAAA;AAClC,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA,YAAA,EAAe,EAAE,CAAA,CAAE,CAAC;QACzD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAY,GAAG,CAAC,CAAC;IACrD;IAEO,SAAS,CAAC,WAAmB,EAAE,QAAgB,EAAA;AACpD,QAAA,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC;AAC/C,QAAA,MAAM,GAAG,GAAG,CAAA,mBAAA,EAAsB,QAAQ,CAAA,WAAA,EAAc,OAAO,EAAE;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC;IACtC;AAEO,IAAA,MAAM,iCAAiC,GAAA;QAC5C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE;QAClD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;IAC3D;IAEO,MAAM,oCAAoC,CAAC,UAAsB,EAAA;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;AAC1D,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAC5D,QAAQ,CAAC,WAAW,CACrB;AAED,QAAA,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;YACpC,EAAE,EAAE,MAAM,CAAC,QAAQ;YACnB,MAAM,EAAE,MAAM,CAAC,YAAY;YAC3B,SAAS,EAAE,MAAM,CAAC,oBAAoB;AACvC,SAAA,CAAC;IACJ;IAEO,kCAAkC,GAAA;AACvC,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;IAC7C;AAEO,IAAA,MAAM,qCAAqC,GAAA;QAChD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE;AAClD,QAAA,OAAO,IAAI,kCAAkC,CAAC,EAAE,CAAC;IACnD;AAEO,IAAA,MAAM,oBAAoB,GAAA;AAC/B,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAClE,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC;IACpD;IAEO,MAAM,uBAAuB,CAAC,UAAsB,EAAA;QACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;QACrD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;IACjC;IAEQ,MAAM,kBAAkB,CAAC,UAAsB,EAAA;QACrD,IAAI,GAAG,GAAyB,IAAI;AACpC,QAAA,GAAG;AACD,YAAA,IAAI,UAAU,CAAC,SAAS,EAAE,EAAE;AAC1B,gBAAA,MAAM,KAAK,CAAC,yBAAyB,CAAC;YACxC;AAEA,YAAA,IAAI;AACF,gBAAA,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC;YACrE;YAAE,OAAO,KAAK,EAAE;gBACd,IACE,KAAK,YAAY,YAAY;AAC7B,oBAAA,KAAK,CAAC,OAAO,KAAK,uBAAuB,EACzC;AACA,oBAAA,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACxB;qBAAO;AACL,oBAAA,MAAM,KAAK;gBACb;YACF;QACF,CAAC,QAAQ,CAAC,GAAG;AACb,QAAA,OAAO,GAAG;IACZ;IAEQ,2BAA2B,GAAA;AACjC,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;AAE3C,QAAA,MAAM,MAAM,GAAG;AACb,YAAA,aAAa,EAAE,UAAU;AACzB,YAAA,MAAM,EAAE,SAAS;AACjB,YAAA,WAAW,EAAE,SAAS;AACtB,YAAA,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;SACjD;QAED,OAAO,IAAI,oBAAoB,CAC7B;AACE,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAC/B,YAAA,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,oBAAoB,CAAC,kBAAkB;AACtD,YAAA,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;AAC3D,YAAA,MAAM,EAAE,MAAmB;AAC5B,SAAA,EACD,IAAI,CAAC,OAAO,EACZ,IAAI,CACL;IACH;AAEQ,IAAA,MAAM,sCAAsC,GAAA;AAClD,QAAA,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC;AACrE,QAAA,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;AACrB,YAAA,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE;QAC5C;QACA,OAAO,KAAK,EAAE,WAAW;IAC3B;AAEQ,IAAA,MAAM,sBAAsB,GAAA;QAClC,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;QACxC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE;YAC7B,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;QACjD;AACA,QAAA,OAAO,KAAK,EAAE,WAAW,IAAI,IAAI;IACnC;IAEQ,MAAM,qBAAqB,CAAC,KAAoB,EAAA;AACtD,QAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC9B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC;QACvE;AACA,QAAA,IAAI;AACF,YAAA,OAAO,MAAM,IAAI,CAAC,oBAAoB;QACxC;gBAAU;AACR,YAAA,IAAI,CAAC,oBAAoB,GAAG,IAAI;QAClC;IACF;IAEQ,MAAM,6BAA6B,CAAC,KAAoB,EAAA;AAC9D,QAAA,IAAI,KAAK,EAAE,YAAY,EAAE;AACvB,YAAA,IAAI;AACF,gBAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAClD,KAAK,CAAC,YAAY,CACnB;gBACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;AAC/B,gBAAA,OAAO,GAAG;YACZ;YAAE,OAAO,GAAG,EAAE;AACZ,gBAAA,OAAO,CAAC,IAAI,CACV,uDAAuD,EACvD,GAAG,CACJ;;AAED,gBAAA,IAAK,GAAW,CAAC,OAAO,KAAK,eAAe,EAAE;AAC5C,oBAAA,MAAM,IAAI,CAAC,MAAM,EAAE;gBACrB;YACF;QACF;aAAO;AACL,YAAA,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC;QACxE;AACA,QAAA,OAAO,IAAI;IACb;AAEQ,IAAA,WAAW,CAAC,GAAW,EAAA;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;AAC1B,QAAA,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE;AAClB,YAAA,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;AACnB,YAAA,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AAC5B,gBAAA,OAAO,IAAI;YACb;QACF;AACA,QAAA,OAAO,IAAI;IACb;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;AACzD,YAAA,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YACxD,IAAI,IAAI,EAAE;AACR,gBAAA,OAAO,CAAC,GAAG,CACT,kFAAkF,CACnF;gBACD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;YACnC;QACF;IACF;IAEQ,YAAY,CAAC,aAAsB,EAAE,cAAuB,EAAA;QAClE,IAAI,KAAK,GAAG,QAAQ;QACpB,IAAI,aAAa,EAAE;YACjB,KAAK,IAAI,iBAAiB;QAC5B;QACA,IAAI,cAAc,EAAE;AAClB,YAAA,KAAK,IAAI,GAAG,GAAG,cAAc;QAC/B;AACA,QAAA,OAAO,KAAK;IACd;AAEQ,IAAA,KAAK,CAAC,WAAmB,EAAA;AAC/B,QAAA,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,KAAI;YACnC,UAAU,CAAC,MAAK;AACd,gBAAA,OAAO,EAAE;YACX,CAAC,EAAE,WAAW,CAAC;AACjB,QAAA,CAAC,CAAC;IACJ;8GApZW,sBAAsB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,iBAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,eAAA,EAAA,EAAA,EAAA,KAAA,EAAAF,IAAA,CAAA,UAAA,EAAA,EAAA,EAAA,KAAA,EAAAG,wBAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,WAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAtB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,sBAAsB,cAFrB,MAAM,EAAA,CAAA,CAAA;;2FAEP,sBAAsB,EAAA,UAAA,EAAA,CAAA;kBAHlC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;MCpBY,uBAAuB,CAAA;IAClC,WAAA,CACU,IAA4B,EAC5B,MAA6B,EAAA;QAD7B,IAAA,CAAA,IAAI,GAAJ,IAAI;QACJ,IAAA,CAAA,MAAM,GAAN,MAAM;AASR,QAAA,IAAA,CAAA,wBAAwB,GAAG;YACjC,MAAM;YACN,SAAS;YACT,aAAa;YACb,aAAa;SACd;QAZC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;AAChD,QAAA,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC,KACtD,CAAC,CAAC,WAAW,EAAE,CAChB;IACH;IAWO,SAAS,CACd,GAAyB,EACzB,IAAiB,EAAA;QAEjB,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACjC,YAAA,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC;AACxE,YAAA,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QACpC;AACA,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;IACzB;AAEQ,IAAA,eAAe,CAAC,GAAW,EAAA;AACjC,QAAA,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE;QAEvB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ;AACtC,YAAA,OAAO,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1E;AAEA,QAAA,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;YACzD,QACE,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK;QAE5E;AACA,QAAA,OAAO,KAAK;IACd;AAEQ,IAAA,gBAAgB,CACtB,QAAgC,EAChC,GAAyB,EACzB,IAAiB,EAAA;AAEjB,QAAA,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACxB,QAAQ,CAAC,CAAC,KAAK,KAAI;YACjB,IAAI,KAAK,EAAE;AACT,gBAAA,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAC;gBACnE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;YAC9B;AACA,YAAA,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QACzB,CAAC,CAAC,CACH;IACH;AAEQ,IAAA,iBAAiB,CACvB,QAAwC,EAAA;QAExC,OAAO,QAAQ,CAAC,IAAI,CAClB,UAAU,CAAC,CAAC,GAAG,KAAI;YACjB,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE;AAC1D,gBAAA,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE;AACvC,oBAAA,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;gBACnB;YACF;AACA,YAAA,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC;QAC9B,CAAC,CAAC,CACH;IACH;8GA5EW,uBAAuB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAC,sBAAA,EAAA,EAAA,EAAA,KAAA,EAAAN,qBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAvB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,uBAAuB,cAFtB,MAAM,EAAA,CAAA,CAAA;;2FAEP,uBAAuB,EAAA,UAAA,EAAA,CAAA;kBAHnC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;MCLY,qBAAqB,CAAA;IAChC,OAAO,OAAO,CACZ,MAA6B,EAAA;QAE7B,OAAO;AACL,YAAA,QAAQ,EAAE,qBAAqB;AAC/B,YAAA,SAAS,EAAE;AACT,gBAAA,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;AACpD,gBAAA;AACE,oBAAA,OAAO,EAAE,iBAAiB;AAC1B,oBAAA,QAAQ,EAAE,uBAAuB;AACjC,oBAAA,KAAK,EAAE,IAAI;AACZ,iBAAA;AACF,aAAA;SACF;IACH;8GAfW,qBAAqB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;+GAArB,qBAAqB,EAAA,CAAA,CAAA;+GAArB,qBAAqB,EAAA,CAAA,CAAA;;2FAArB,qBAAqB,EAAA,UAAA,EAAA,CAAA;kBALjC,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;AACR,oBAAA,OAAO,EAAE,EAAE;AACX,oBAAA,YAAY,EAAE,EAAE;AAChB,oBAAA,OAAO,EAAE,EAAE;AACZ,iBAAA;;;MCTY,WAAW,CAAA;AAGvB;MAEY,SAAS,CAAA;AAIrB;IAEW;AAAZ,CAAA,UAAY,OAAO,EAAA;AACjB,IAAA,OAAA,CAAA,OAAA,CAAA,eAAA,CAAA,GAAA,CAAA,CAAA,GAAA,eAAiB;AACjB,IAAA,OAAA,CAAA,OAAA,CAAA,mBAAA,CAAA,GAAA,CAAA,CAAA,GAAA,mBAAqB;AACrB,IAAA,OAAA,CAAA,OAAA,CAAA,SAAA,CAAA,GAAA,CAAA,CAAA,GAAA,SAAW;AACb,CAAC,EAJW,OAAO,KAAP,OAAO,GAAA,EAAA,CAAA,CAAA;;ACXnB;;AAEG;;;;"}
1
+ {"version":3,"file":"kolektor-nucleus-identity.mjs","sources":["../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/nucleus-identity-config.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/models/service-principal.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/location.service.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/nucleus-authorization-notifier.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/angular-requestor.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/authorization-service-configuration.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/oidc-configuration.service.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/models/identity.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/secrets-store.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/models/device-code.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/models/client-registration.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/utils/token-client.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/nucleus-identity.service.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/nucleus-token-interceptor.service.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/nucleus-identity.module.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/lib/models/otp.ts","../../../../../../libs/ng/nucleus/nucleus-identity/src/kolektor-nucleus-identity.ts"],"sourcesContent":["export class NucleusIdentityConfig {\n public authority!: string;\n\n public clientId!: string;\n\n public redirectUri?: string;\n\n public androidRedirectUri?: string;\n\n public iOSRedirectUri?: string;\n\n public httpInterceptorUrls?: string[] = [];\n\n public automaticLoginOnHttp401 = false;\n\n public requestedScopes?: string;\n\n public servicePrincipalRequestedScopes?: string;\n\n public authProviderHint?: string;\n}\n","export class ServicePrincipal {\n public id!: string;\n public secret!: string;\n public expiresAt!: Date;\n}\n\nexport class ServicePrincipalRegistrationStatus {\n public id!: string;\n public isRegistered = false;\n public expiresAt!: Date;\n\n constructor(servicePrincipal: ServicePrincipal | null) {\n if (servicePrincipal) {\n this.isRegistered = true;\n this.id = servicePrincipal.id;\n this.expiresAt = servicePrincipal.expiresAt;\n }\n }\n\n public get isExpired() {\n return false;\n }\n}\n","import { LocationLike } from '@openid/appauth';\nimport { NucleusAppService } from '@kolektor/nucleus-common';\nimport { Browser } from '@capacitor/browser';\nimport { Injectable } from '@angular/core';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class LocationService implements LocationLike {\n constructor(private appService: NucleusAppService) {}\n\n get hash() {\n return window.location.hash;\n }\n set hash(v) {\n window.location.hash = v;\n }\n\n get host() {\n return window.location.host;\n }\n set host(v) {\n window.location.host = v;\n }\n\n get origin() {\n return window.location.origin;\n }\n\n get hostname() {\n return window.location.hostname;\n }\n set hostname(v) {\n window.location.hostname = v;\n }\n\n get pathname() {\n return window.location.pathname;\n }\n set pathname(v) {\n window.location.pathname = v;\n }\n\n get port() {\n return window.location.port;\n }\n set port(v) {\n window.location.port = v;\n }\n\n get protocol() {\n return window.location.protocol;\n }\n set protocol(v) {\n window.location.protocol = v;\n }\n\n get search() {\n return window.location.search;\n }\n set search(v) {\n window.location.search = v;\n }\n\n assign(url: string): void {\n if (this.appService.isNative) {\n Browser.open({ url });\n } else {\n window.location.assign(url);\n }\n }\n}\n","import { AuthorizationNotifier } from '@openid/appauth';\nimport { AuthorizationResponse, AuthorizationError } from '@openid/appauth';\nimport { AuthorizationRequest } from '@openid/appauth';\n\nexport class NucleusAuthorizationNotifier extends AuthorizationNotifier {\n response: AuthorizationResponse | null = null;\n request!: AuthorizationRequest;\n error: AuthorizationError | null = null;\n\n constructor() {\n super();\n this.setAuthorizationListener((request, response, error) => {\n console.log('Authorization request complete ', request, response, error);\n this.response = response;\n this.request = request;\n this.error = error;\n });\n }\n}\n","import { AppAuthError, Requestor } from '@openid/appauth';\nimport { Injectable } from '@angular/core';\nimport { HttpClient, HttpErrorResponse } from '@angular/common/http';\nimport { HttpHeaders } from '@capacitor/core';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class AngularRequestor extends Requestor {\n constructor(private http: HttpClient) {\n super();\n }\n\n // eslint-disable-next-line no-undef\n xhr<T>(settings: JQueryAjaxSettings): Promise<T> {\n let method = 'GET';\n if (settings.method) {\n method = settings.method;\n }\n\n return new Promise<T>((resolve, reject) => {\n this.http\n .request<T>(method, settings.url as string, {\n body: settings.data,\n headers: settings.headers as HttpHeaders,\n })\n .subscribe({\n next: (res) => resolve(res),\n error: (err) => {\n let e = new AppAuthError(err);\n if (err instanceof HttpErrorResponse) {\n e = new AppAuthError(err.error?.error || err.statusText);\n }\n reject(e);\n },\n });\n });\n }\n}\n","import {\n AuthorizationServiceConfiguration,\n AuthorizationServiceConfigurationJson,\n JQueryRequestor,\n Requestor,\n} from '@openid/appauth';\n\nconst WELL_KNOWN_PATH = '.well-known';\nconst OPENID_CONFIGURATION = 'openid-configuration';\n\nexport interface NucleusAuthorizationServiceConfigurationJson\n extends AuthorizationServiceConfigurationJson {\n device_authorization_endpoint?: string;\n registration_endpoint?: string;\n}\n\nexport class NucleusAuthorizationServiceConfiguration extends AuthorizationServiceConfiguration {\n constructor(request: NucleusAuthorizationServiceConfigurationJson) {\n super(request);\n this.deviceAuthorizationEndpoint = request.device_authorization_endpoint;\n this.registrationEndpoint = request.registration_endpoint;\n }\n\n public deviceAuthorizationEndpoint?: string;\n public registrationEndpoint?: string;\n\n static override async fetchFromIssuer(\n openIdIssuerUrl: string,\n requestor?: Requestor\n ) {\n const fullUrl = `${openIdIssuerUrl}/${WELL_KNOWN_PATH}/${OPENID_CONFIGURATION}`;\n const requestorToUse = requestor || new JQueryRequestor();\n const json =\n await requestorToUse.xhr<NucleusAuthorizationServiceConfigurationJson>({\n url: fullUrl,\n dataType: 'json',\n method: 'GET',\n });\n return new NucleusAuthorizationServiceConfiguration(json);\n }\n\n override toJson() {\n const res = super.toJson() as NucleusAuthorizationServiceConfigurationJson;\n res.device_authorization_endpoint = this.deviceAuthorizationEndpoint;\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n return res as any;\n }\n}\n","import { Injectable } from '@angular/core';\nimport { NucleusAppService } from '@kolektor/nucleus-common';\nimport { NucleusIdentityConfig } from '../nucleus-identity-config';\nimport { AngularRequestor } from './angular-requestor';\nimport { NucleusAuthorizationServiceConfiguration } from './authorization-service-configuration';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class OidcConfigurationService {\n constructor(\n private requestor: AngularRequestor,\n private config: NucleusIdentityConfig,\n private appService: NucleusAppService\n ) {}\n\n private _configuration: NucleusAuthorizationServiceConfiguration | null =\n null;\n\n public async getConfiguration() {\n await this.assureConfiguration();\n if (!this._configuration) {\n throw Error('Failed to get OIDC configuration!');\n }\n\n return this._configuration;\n }\n\n public get clientId() {\n return this.config.clientId;\n }\n\n public get requestedScopes() {\n return this.config.requestedScopes;\n }\n\n public get servicePrincipalRequestedScopes() {\n return this.config.servicePrincipalRequestedScopes;\n }\n\n public get authProviderHint() {\n return this.config.authProviderHint;\n }\n\n public get redirectUrl() {\n let uri = window.location.href;\n const platform = this.appService.platform;\n if (platform === 'android' && this.config.androidRedirectUri) {\n uri = this.config.androidRedirectUri;\n } else if (platform === 'ios' && this.config.iOSRedirectUri) {\n uri = this.config.iOSRedirectUri;\n } else if (this.config.redirectUri) {\n uri = this.config.redirectUri;\n }\n return this.NormalizeRedirectUri(uri);\n }\n\n public getServerUrl(relativeUri: string | null = null) {\n let authority = this.config.authority;\n if (!authority || authority === 'origin') {\n authority = window.origin;\n }\n\n let url = new URL(authority);\n\n if (relativeUri) {\n url = new URL(relativeUri, url);\n }\n\n return url.href;\n }\n\n private NormalizeRedirectUri(uri: string) {\n const i = uri.indexOf('#');\n if (i > 0) {\n uri = uri.substring(0, i);\n }\n return uri;\n }\n\n private async assureConfiguration() {\n if (this._configuration != null) {\n return;\n }\n let authority = this.getServerUrl();\n if (authority[authority.length - 1] === '/') {\n authority = authority.slice(0, -1);\n }\n try {\n this._configuration =\n await NucleusAuthorizationServiceConfiguration.fetchFromIssuer(\n authority,\n this.requestor\n );\n } catch (e) {\n console.error(\n 'Nucleus.Identity: Cannot load OIDC configuration: ' +\n (e as Error).message\n );\n throw e;\n }\n }\n}\n","import { TokenResponse } from '@openid/appauth';\n\nexport class Claim {\n public name: string;\n public values: string[];\n\n constructor(name: string, values: string[]) {\n this.name = name;\n this.values = values;\n }\n}\n\nexport class Identity {\n public name: string;\n public subject: string;\n\n public claims: Claim[] = [];\n\n constructor(res: TokenResponse) {\n if (!res.idToken) {\n throw Error('There is no id token in the token response!');\n }\n\n const token = this.decodeToken(res.idToken);\n\n this.name = token.name;\n this.subject = token.sub;\n for (const key in token) {\n if ({}.hasOwnProperty.call(token, key)) {\n let vals = token[key];\n\n if (!Array.isArray(vals)) {\n vals = [vals];\n }\n\n const claim = new Claim(key, vals);\n this.claims.push(claim);\n }\n }\n }\n\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n private decodeToken(jwt: string): any {\n if (!jwt) {\n throw new Error(\n 'NucleusIdentity: There was no identity token in the response!'\n );\n }\n\n try {\n const arr = jwt.split('.');\n // var header = arr[0];\n const payload = this.b64DecodeUnicode(arr[1]);\n // var signature = arr[2];\n return JSON.parse(payload);\n } catch (error) {\n console.error('Error while decoding identity token', error);\n console.error('Error while decoding identity token JWT', jwt);\n }\n }\n\n private b64DecodeUnicode(str: string) {\n str = str.replace(/-/g, '+').replace(/_/g, '/'); // Qlector fix :)\n return decodeURIComponent(\n atob(str)\n .split('')\n .map((c) => '%' + ('00' + c.charCodeAt(0).toString(16)).slice(-2))\n .join('')\n );\n }\n}\n","import 'capacitor-secure-storage-plugin';\nimport { TokenResponse, TokenResponseJson } from '@openid/appauth';\nimport { ServicePrincipal } from '../models/service-principal';\nimport { SecureStoragePlugin } from 'capacitor-secure-storage-plugin';\nimport { Identity } from '../models/identity';\n\nexport class SecretsStore {\n constructor(clientId: string) {\n this._tokenStorageKeyPrefix = `Nucleus.Identity.${clientId}`; // do not change this or login with existing tokens will fail\n this._servicePrincipalKey = `${this._tokenStorageKeyPrefix}.SvcP`;\n this._defaultIdentityIdStorageKey = `${this._tokenStorageKeyPrefix}.IdId`;\n this._defaultIdentityId = localStorage.getItem(\n this._defaultIdentityIdStorageKey\n );\n }\n private _tokenStorageKeyPrefix: string;\n private _tokens: { [id: string]: TokenResponse | null } = {};\n private _identities: { [id: string]: Identity } = {};\n private _servicePrincipalKey;\n private _servicePrincipal: ServicePrincipal | null = null;\n // this specify which identity id is used by default, when If id is not specified in getToken or getIdentity\n private _defaultIdentityId: string | null;\n private _defaultIdentityIdStorageKey: string;\n\n public get defaultIdentityId() {\n return this._defaultIdentityId;\n }\n\n public removeServicePrincipal() {\n this._servicePrincipal = null;\n return this.clear(this._servicePrincipalKey);\n }\n\n public async setServicePrincipal(servicePrincipal: ServicePrincipal) {\n this._servicePrincipal = servicePrincipal;\n await this.save(this._servicePrincipalKey, servicePrincipal);\n }\n\n public async getServicePrincipal() {\n if (!this._servicePrincipal) {\n this._servicePrincipal = await this.load<ServicePrincipal>(\n this._servicePrincipalKey\n );\n }\n return this._servicePrincipal;\n }\n\n public setToken(token: TokenResponse, id: string | null = null) {\n return this.setTokenInternal(token, true, id);\n }\n\n public getIdentity(id: string | null = null): Identity | null {\n const key = this.getTokenKey(id);\n return this._identities[key];\n }\n\n public setDefaultIdentityId(id: string | null) {\n this._defaultIdentityId = id;\n if (this._defaultIdentityId) {\n localStorage.setItem(\n this._defaultIdentityIdStorageKey,\n this._defaultIdentityId\n );\n } else {\n localStorage.removeItem(this._defaultIdentityIdStorageKey);\n }\n }\n\n public async getToken(id: string | null = null) {\n const key = this.getTokenKey(id);\n\n // if token is not there or it is invalid we check storage again before returning\n if (!this._tokens[key] || !this._tokens[key]?.isValid()) {\n await this.reloadTokenFromStorage(id);\n }\n return this._tokens[key];\n }\n\n public removeToken(id: string | null = null) {\n const key = this.getTokenKey(id);\n delete this._tokens[key];\n delete this._identities[key];\n return this.clear(key);\n }\n\n private async reloadTokenFromStorage(id: string | null) {\n const key = this.getTokenKey(id);\n const storedToken = await this.load<TokenResponseJson>(key);\n if (storedToken) {\n const res = new TokenResponse(storedToken);\n if (res?.accessToken || res?.idToken) {\n await this.setTokenInternal(res, false, id);\n }\n }\n return null;\n }\n\n private async setTokenInternal(\n token: TokenResponse,\n save: boolean,\n id: string | null\n ) {\n const key = this.getTokenKey(id);\n if (token == null) {\n await this.removeToken(id);\n } else {\n this._tokens[key] = token;\n this._identities[key] = new Identity(token);\n if (save) {\n try {\n await this.save(key, token.toJson());\n } catch (e) {\n console.warn('Nucleus.Identity: Could not save to SecureStorage.');\n }\n }\n }\n }\n\n private getTokenKey(id: string | null) {\n if (!id) {\n id = this._defaultIdentityId;\n }\n return id\n ? `${this._tokenStorageKeyPrefix}.${id}`\n : this._tokenStorageKeyPrefix;\n }\n\n private clear(key: string) {\n return SecureStoragePlugin.remove({ key });\n }\n\n private save<T>(key: string, value: T): Promise<{ value: boolean }> {\n return SecureStoragePlugin.set({ key, value: JSON.stringify(value) });\n }\n\n private async load<T>(key: string) {\n try {\n const x = await SecureStoragePlugin.get({ key });\n if (x?.value) {\n return JSON.parse(x.value) as T;\n } else {\n return null;\n }\n } catch {\n return null;\n }\n }\n}\n","import { nowInSeconds } from '@openid/appauth';\n\nexport interface DeviceCodeJson {\n device_code: string;\n user_code: string;\n verification_uri: string;\n verification_uri_complete: string;\n expires_in: string;\n message: string;\n}\n\nexport class DeviceCode {\n constructor(response: DeviceCodeJson) {\n this.deviceCode = response.device_code;\n this.userCode = response.user_code;\n this.verificationUrl = response.verification_uri;\n this.verificationUrlComplete = response.verification_uri_complete;\n this.expiresIn = parseInt(response.expires_in, 10);\n this.issuedAt = nowInSeconds();\n }\n\n private expiresIn: number;\n private issuedAt: number;\n\n public deviceCode: string;\n public userCode: string;\n public verificationUrl: string;\n public verificationUrlComplete: string;\n\n isExpired(buffer = 60) {\n return this.secondsLeft(buffer) <= 0;\n }\n\n secondsLeft(buffer = 60) {\n const now = nowInSeconds();\n return this.issuedAt + this.expiresIn - buffer - now;\n }\n}\n","export interface ClientRegistrationResponseJson {\n client_id: string;\n client_secret: string;\n client_secret_expires_at: number;\n}\n\nexport class ClientRegistrationResponse {\n constructor(response: ClientRegistrationResponseJson) {\n this.clientId = response.client_id;\n this.clientSecret = response.client_secret;\n this.secretExpirationDate = new Date(\n response.client_secret_expires_at * 1000\n );\n }\n\n clientId: string;\n clientSecret: string;\n secretExpirationDate: Date;\n}\n","import {\n AppAuthError,\n BaseTokenRequestHandler,\n BasicQueryStringUtils,\n GRANT_TYPE_AUTHORIZATION_CODE,\n GRANT_TYPE_REFRESH_TOKEN,\n QueryStringUtils,\n StringMap,\n TokenErrorJson,\n TokenRequest,\n TokenRequestHandler,\n} from '@openid/appauth';\nimport { OidcConfigurationService } from './oidc-configuration.service';\nimport { AngularRequestor } from './angular-requestor';\nimport { Injectable } from '@angular/core';\nimport { DeviceCode, DeviceCodeJson } from '../models/device-code';\nimport {\n ClientRegistrationResponse,\n ClientRegistrationResponseJson,\n} from '../models/client-registration';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class TokenClient {\n constructor(\n private requestor: AngularRequestor,\n private config: OidcConfigurationService\n ) {\n this._tokenHandler = new BaseTokenRequestHandler(requestor);\n this._utils = new BasicQueryStringUtils();\n }\n\n private _tokenHandler: TokenRequestHandler;\n private _utils: QueryStringUtils;\n\n public async getByAuthorizationCode(\n redirectUrl: string,\n code: string,\n codeVerifier?: string\n ) {\n const config = await this.config.getConfiguration();\n const redirectUri = redirectUrl;\n const req = new TokenRequest({\n client_id: this.config.clientId,\n redirect_uri: redirectUri,\n grant_type: GRANT_TYPE_AUTHORIZATION_CODE,\n code,\n extras: codeVerifier ? { code_verifier: codeVerifier } : undefined,\n });\n return await this._tokenHandler.performTokenRequest(config, req);\n }\n\n public async getByRefreshToken(refreshToken: string) {\n const config = await this.config.getConfiguration();\n const redirectUri = this.config.redirectUrl;\n const req = new TokenRequest({\n client_id: this.config.clientId,\n redirect_uri: redirectUri,\n grant_type: GRANT_TYPE_REFRESH_TOKEN,\n refresh_token: refreshToken,\n });\n return await this._tokenHandler.performTokenRequest(config, req);\n }\n\n public async getByClientCredentials(\n clientId: string,\n clientSecret: string,\n scope: string\n ) {\n const config = await this.config.getConfiguration();\n const req = new TokenRequest({\n client_id: clientId,\n redirect_uri: '',\n grant_type: 'client_credentials',\n extras: {\n client_secret: clientSecret,\n scope,\n },\n });\n return await this._tokenHandler.performTokenRequest(config, req);\n }\n\n public async getBySecret(\n provider: string,\n secret: string,\n assertionToken: string,\n scope: string\n ) {\n const config = await this.config.getConfiguration();\n const req = new TokenRequest({\n client_id: this.config.clientId,\n redirect_uri: '',\n grant_type: 'urn:kolektor:nucleus:secret',\n extras: {\n secret_provider: provider,\n secret_value: secret,\n client_assertion_type:\n 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',\n client_assertion: assertionToken,\n scope,\n },\n });\n\n return await this._tokenHandler.performTokenRequest(config, req);\n }\n\n public async getByDeviceCode(deviceCode: string) {\n const config = await this.config.getConfiguration();\n const req = new TokenRequest({\n client_id: this.config.clientId,\n redirect_uri: '',\n grant_type: 'urn:ietf:params:oauth:grant-type:device_code',\n extras: {\n device_code: deviceCode,\n },\n });\n return await this._tokenHandler.performTokenRequest(config, req);\n }\n\n public async registerServicePrincipal(token: string) {\n const config = await this.config.getConfiguration();\n\n const response = await this.requestor.xhr<\n ClientRegistrationResponseJson | TokenErrorJson\n >({\n url: config.registrationEndpoint,\n method: 'POST',\n dataType: 'json',\n headers: {\n 'Content-Type': 'application/json',\n Authorization: `Bearer ${token}`,\n },\n // data: this._utils.stringify(map)\n });\n\n if ((response as TokenErrorJson).error === undefined) {\n return new ClientRegistrationResponse(\n response as ClientRegistrationResponseJson\n );\n } else {\n throw new AppAuthError((response as TokenErrorJson).error);\n }\n }\n\n public async getRegistrationCode(\n existingServicePrincipalId: string | null = null\n ) {\n const params = {\n custom_action: 'sp_register',\n service_principal_id: existingServicePrincipalId,\n };\n\n return this.getDeviceCodeInternal(params as StringMap);\n }\n\n public async getDeviceCode(scope: string) {\n const params = {\n scope,\n };\n return this.getDeviceCodeInternal(params);\n }\n\n private async getDeviceCodeInternal(params: StringMap) {\n const config = await this.config.getConfiguration();\n\n params['client_id'] = this.config.clientId;\n const map: StringMap = params;\n\n const response = await this.requestor.xhr<DeviceCodeJson | TokenErrorJson>({\n url: config.deviceAuthorizationEndpoint,\n method: 'POST',\n dataType: 'json',\n headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n data: this._utils.stringify(map),\n });\n\n if ((response as TokenErrorJson).error === undefined) {\n return new DeviceCode(response as DeviceCodeJson);\n } else {\n throw new AppAuthError((response as TokenErrorJson).error);\n }\n }\n}\n","import {\n AppAuthError,\n AuthorizationRequest,\n AuthorizationRequestHandler,\n BasicQueryStringUtils,\n Crypto,\n DefaultCrypto,\n LocalStorageBackend,\n RedirectRequestHandler,\n StringMap,\n TokenResponse,\n} from '@openid/appauth';\n\nimport { HttpClient } from '@angular/common/http';\nimport { Injectable } from '@angular/core';\n\nimport { App } from '@capacitor/app';\nimport { Browser } from '@capacitor/browser';\nimport { Device } from '@capacitor/device';\n\nimport { NucleusAppService } from '@kolektor/nucleus-common';\n\nimport { lastValueFrom } from 'rxjs';\n\nimport { DeviceCode } from './models/device-code';\nimport { OtpResponse, OtpStatus, OtpType } from './models/otp';\nimport { ServicePrincipalRegistrationStatus } from './models/service-principal';\n\nimport { LocationService } from './utils/location.service';\nimport { NucleusAuthorizationNotifier } from './utils/nucleus-authorization-notifier';\nimport { OidcConfigurationService } from './utils/oidc-configuration.service';\nimport { SecretsStore } from './utils/secrets-store';\nimport { TokenClient } from './utils/token-client';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class NucleusIdentityService {\n constructor(\n private appService: NucleusAppService,\n location: LocationService,\n private http: HttpClient,\n private config: OidcConfigurationService,\n private tokenClient: TokenClient\n ) {\n const storage = new LocalStorageBackend();\n this._crypto = new DefaultCrypto();\n this._authorizationHandler = new RedirectRequestHandler(\n storage,\n new BasicQueryStringUtils(),\n location,\n this._crypto\n );\n this._authorizationHandler.setAuthorizationNotifier(\n this._authorizationNotifier\n );\n this._store = new SecretsStore(config.clientId);\n }\n\n private _authorizationHandler: AuthorizationRequestHandler;\n private _authorizationNotifier = new NucleusAuthorizationNotifier();\n private _crypto: Crypto;\n private _initStarted = false;\n private _initialized = false;\n private _refreshTokenPromise: Promise<TokenResponse | null> | null = null;\n private _getTokenPromise: Promise<string | null> | null = null;\n private _getServicePrincipalTokenPromise: Promise<string> | null = null;\n private _servicePrincipalTokenId = '_svcp';\n private _store: SecretsStore;\n\n public get identity() {\n return this._store.getIdentity();\n }\n\n public get isAuthenticated() {\n return this.identity != null;\n }\n\n public get servicePrincipalIdentity() {\n return this._store.getIdentity(this._servicePrincipalTokenId);\n }\n\n public get isServicePrincipalAuthenticated() {\n return this.servicePrincipalIdentity != null;\n }\n\n public get isIdentityServicePrincipal() {\n return this._store.defaultIdentityId === this._servicePrincipalTokenId;\n }\n\n public async init(startLogin = false): Promise<void> {\n if (this._initStarted || this._initialized) {\n console.warn(\n \"Nucleus.Identity: Auth initialization was already started. Don't call init() multiple times!\"\n );\n return;\n }\n this._initStarted = true;\n\n this.handleLaunchCodeHash();\n await this._authorizationHandler.completeAuthorizationRequestIfPossible();\n\n const authErr = this._authorizationNotifier.error;\n if (authErr) {\n throw new Error(\n 'Authorization err: ' + authErr.error + ': ' + authErr.errorDescription\n );\n } else if (this._authorizationNotifier.response) {\n window.location.hash = '';\n const request = this._authorizationNotifier.request;\n const response = this._authorizationNotifier.response;\n\n const codeVerifier = request.internal\n ? request.internal['code_verifier']\n : undefined;\n const res = await this.tokenClient.getByAuthorizationCode(\n request.redirectUri,\n response.code,\n codeVerifier\n );\n this._store.setDefaultIdentityId(null);\n await this._store.setToken(res);\n } else {\n const res = await this._store.getToken();\n if (!res && startLogin) {\n await this.login();\n }\n }\n this._initialized = true;\n }\n\n public async loginWithSecret(\n provider: string,\n secret: string\n ): Promise<void> {\n this._store.removeToken().catch(() => console.log('No token to remove.'));\n const assertionToken = await this.getServicePrincipalAccessToken();\n const scope = this.prepareScope(true, this.config?.requestedScopes);\n const res = await this.tokenClient.getBySecret(\n provider,\n secret,\n assertionToken,\n scope\n );\n this._store.setDefaultIdentityId(null);\n await this._store.setToken(res);\n }\n\n public async login(): Promise<void> {\n this._store.removeToken();\n const config = await this.config.getConfiguration();\n const request = this.prepareAuthorizationRequest();\n if (this.appService.isNative) {\n const listener = await App.addListener('appUrlOpen', (data) => {\n if (this.appService.platform === 'ios') {\n Browser.close();\n }\n listener.remove();\n const hash = this.getCodeHash(data.url);\n if (hash) {\n const targetUrl =\n window.location.origin + window.location.pathname + '#' + hash;\n window.location.assign(targetUrl);\n window.location.reload();\n } else {\n console.warn(\n 'Nucleus.Identity: Redirect url did not contain authorization code!',\n data\n );\n }\n });\n }\n this._authorizationHandler.performAuthorizationRequest(config, request);\n }\n\n public async logout(): Promise<void> {\n this._store.removeToken();\n const config = await this.config.getConfiguration();\n const redirectUrl = this.config.redirectUrl;\n const logoutUrl =\n config.endSessionEndpoint +\n '?post_logout_redirect_uri=' +\n encodeURI(redirectUrl);\n if (this.appService.isNative) {\n const listener = await App.addListener('appUrlOpen', () => {\n Device.getInfo().then((info) => {\n if (info.platform === 'ios') {\n Browser.close();\n }\n });\n listener.remove();\n });\n Browser.open({ url: logoutUrl });\n } else {\n window.location.assign(logoutUrl);\n }\n }\n\n public async getAccessToken() {\n if (!this._getTokenPromise) {\n this._getTokenPromise = this.getAccessTokenInternal();\n }\n try {\n return await this._getTokenPromise;\n } finally {\n this._getTokenPromise = null;\n }\n }\n\n public async getServicePrincipalAccessToken() {\n if (!this._getServicePrincipalTokenPromise) {\n this._getServicePrincipalTokenPromise =\n this.getServicePrincipalAccessTokenInternal();\n }\n try {\n return await this._getServicePrincipalTokenPromise;\n } finally {\n this._getServicePrincipalTokenPromise = null;\n }\n }\n\n public async loginServicePrincipal() {\n const sp = await this._store.getServicePrincipal();\n if (sp) {\n const scope = this.prepareScope(\n false,\n this.config.servicePrincipalRequestedScopes\n );\n const res = await this.tokenClient.getByClientCredentials(\n sp.id,\n sp.secret,\n scope\n );\n await this._store.setToken(res, this._servicePrincipalTokenId);\n return res;\n } else {\n throw Error('Service principal is not registered!');\n }\n }\n\n public async loginAsServicePrincipal() {\n const token = await this._store.getToken(this._servicePrincipalTokenId);\n if (!token) {\n await this.loginServicePrincipal();\n }\n this._store.setDefaultIdentityId(this._servicePrincipalTokenId);\n }\n\n public async getOtp(type: OtpType, expiresIn = -1) {\n let url = this.config.getServerUrl(`/otp/create?type=${type}`);\n if (expiresIn > 0) {\n url += `&expiresIn=${expiresIn}`;\n }\n return lastValueFrom(this.http.get<OtpResponse>(url));\n }\n\n public async getOtpStatus(id: string) {\n const url = this.config.getServerUrl(`/otp/status/${id}`);\n return lastValueFrom(this.http.get<OtpStatus>(url));\n }\n\n public getOtpUrl(redirectUrl: string, password: string) {\n const encoded = encodeURIComponent(redirectUrl);\n const url = `/otp/auth?otpValue=${password}&returnUrl=${encoded}`;\n return this.config.getServerUrl(url);\n }\n\n public async startServicePrincipalRegistration() {\n const sp = await this._store.getServicePrincipal();\n return await this.tokenClient.getRegistrationCode(sp?.id);\n }\n\n public async completeServicePrincipalRegistration(deviceCode: DeviceCode) {\n const tokenRes = await this.waitForDeviceToken(deviceCode);\n const regRes = await this.tokenClient.registerServicePrincipal(\n tokenRes.accessToken\n );\n\n await this._store.setServicePrincipal({\n id: regRes.clientId,\n secret: regRes.clientSecret,\n expiresAt: regRes.secretExpirationDate,\n });\n }\n\n public removeServicePrincipalRegistration() {\n return this._store.removeServicePrincipal();\n }\n\n public async getServicePrincipalRegistrationStatus() {\n const sp = await this._store.getServicePrincipal();\n return new ServicePrincipalRegistrationStatus(sp);\n }\n\n public async startDeviceCodeLogin() {\n const scope = this.prepareScope(true, this.config.requestedScopes);\n return await this.tokenClient.getDeviceCode(scope);\n }\n\n public async completeDeviceCodeLogin(deviceCode: DeviceCode) {\n const res = await this.waitForDeviceToken(deviceCode);\n await this._store.setToken(res);\n }\n\n private async waitForDeviceToken(deviceCode: DeviceCode) {\n let res: TokenResponse | null = null;\n do {\n if (deviceCode.isExpired()) {\n throw Error('Device code is expired!');\n }\n\n try {\n res = await this.tokenClient.getByDeviceCode(deviceCode.deviceCode);\n } catch (error) {\n if (\n error instanceof AppAuthError &&\n error.message === 'authorization_pending'\n ) {\n await this.delay(2000);\n } else {\n throw error;\n }\n }\n } while (!res);\n return res;\n }\n\n private prepareAuthorizationRequest(): AuthorizationRequest {\n const redirectUri = this.config.redirectUrl;\n\n const params = {\n response_mode: 'fragment',\n prompt: 'consent',\n access_type: 'offline',\n auth_provider_hint: this.config.authProviderHint,\n };\n\n return new AuthorizationRequest(\n {\n client_id: this.config.clientId,\n redirect_uri: redirectUri,\n response_type: AuthorizationRequest.RESPONSE_TYPE_CODE,\n scope: this.prepareScope(true, this.config.requestedScopes),\n extras: params as StringMap,\n },\n this._crypto,\n true\n );\n }\n\n private async getServicePrincipalAccessTokenInternal() {\n let token = await this._store.getToken(this._servicePrincipalTokenId);\n if (!token?.isValid()) {\n token = await this.loginServicePrincipal();\n }\n return token?.accessToken;\n }\n\n private async getAccessTokenInternal() {\n let token = await this._store.getToken();\n if (token && !token.isValid()) {\n token = await this.loginWithRefreshToken(token);\n }\n return token?.accessToken ?? null;\n }\n\n private async loginWithRefreshToken(token: TokenResponse) {\n if (!this._refreshTokenPromise) {\n this._refreshTokenPromise = this.loginWithRefreshTokenInternal(token);\n }\n try {\n return await this._refreshTokenPromise;\n } finally {\n this._refreshTokenPromise = null;\n }\n }\n\n private async loginWithRefreshTokenInternal(token: TokenResponse) {\n if (token?.refreshToken) {\n try {\n const res = await this.tokenClient.getByRefreshToken(\n token.refreshToken\n );\n await this._store.setToken(res);\n return res;\n } catch (err) {\n console.warn(\n 'Nucleus.Identity: Failed to login with refresh token.',\n err\n );\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n if ((err as any).message === 'invalid_grant') {\n await this.logout();\n }\n }\n } else {\n console.warn('Nucleus.Identity: There is no refresh token available.');\n }\n return null;\n }\n\n private getCodeHash(url: string) {\n const arr = url.split('#');\n if (arr.length > 1) {\n const hash = arr[1];\n if (hash.startsWith('code=')) {\n return hash;\n }\n }\n return null;\n }\n\n private handleLaunchCodeHash() {\n if (this.appService.isNative && this.appService.launchUrl) {\n const hash = this.getCodeHash(this.appService.launchUrl);\n if (hash) {\n console.log(\n 'Nucleus.Identity: Got authorization code from launchUrl, will assign it to hash.'\n );\n window.location.hash = '#' + hash;\n }\n }\n }\n\n private prepareScope(offlineAccess: boolean, aditionalScope?: string) {\n let scope = 'openid';\n if (offlineAccess) {\n scope += ' offline_access';\n }\n if (aditionalScope) {\n scope += ' ' + aditionalScope;\n }\n return scope;\n }\n\n private delay(miliseconds: number) {\n return new Promise<void>((resolve) => {\n setTimeout(() => {\n resolve();\n }, miliseconds);\n });\n }\n}\n","import { HttpErrorResponse, HttpEvent, HttpHandler, HttpInterceptor, HttpRequest } from '@angular/common/http';\nimport { Injectable } from '@angular/core';\nimport { Observable, from, throwError } from 'rxjs';\nimport { catchError, mergeMap } from 'rxjs/operators';\nimport { NucleusIdentityConfig } from './nucleus-identity-config';\nimport { NucleusIdentityService } from './nucleus-identity.service';\n\n@Injectable({\n providedIn: 'root',\n})\nexport class NucleusTokenInterceptor implements HttpInterceptor {\n constructor(\n private auth: NucleusIdentityService,\n private config: NucleusIdentityConfig\n ) {\n this._authority = config.authority.toLowerCase();\n this._interceptUrls = config.httpInterceptorUrls?.map((x) =>\n x.toLowerCase()\n );\n }\n\n private _authority: string;\n private _authorityInterceptPaths = [\n '/api',\n '/manage',\n '/otp/create',\n '/otp/status',\n ];\n private _interceptUrls?: string[];\n\n public intercept(\n req: HttpRequest<unknown>,\n next: HttpHandler\n ): Observable<HttpEvent<unknown>> {\n if (this.shouldIntercept(req.url)) {\n const res = this.authorizeRequest(this.auth.getAccessToken(), req, next);\n return this.checkUnauthorized(res);\n }\n return next.handle(req);\n }\n\n private shouldIntercept(url: string): boolean {\n url = url.toLowerCase();\n\n if (url.startsWith(this._authority)) {\n const pathname = new URL(url).pathname;\n return this._authorityInterceptPaths.some((x) => pathname.startsWith(x));\n }\n\n if (this._interceptUrls && this._interceptUrls.length > 0) {\n return (\n this.config.httpInterceptorUrls?.some((x) => url.startsWith(x)) ?? false\n );\n }\n return false;\n }\n\n private authorizeRequest(\n getToken: Promise<string | null>,\n req: HttpRequest<unknown>,\n next: HttpHandler\n ): Observable<HttpEvent<unknown>> {\n return from(getToken).pipe(\n mergeMap((token) => {\n if (token) {\n const headers = req.headers.set('Authorization', `Bearer ${token}`);\n req = req.clone({ headers });\n }\n return next.handle(req);\n })\n );\n }\n\n private checkUnauthorized(\n response: Observable<HttpEvent<unknown>>\n ): Observable<HttpEvent<unknown>> {\n return response.pipe(\n catchError((err) => {\n if (err instanceof HttpErrorResponse && err.status === 401) {\n if (this.config.automaticLoginOnHttp401) {\n this.auth.login();\n }\n }\n return throwError(() => err);\n })\n );\n }\n}\n","import { NgModule, ModuleWithProviders } from '@angular/core';\nimport { HTTP_INTERCEPTORS } from '@angular/common/http';\nimport { NucleusTokenInterceptor } from './nucleus-token-interceptor.service';\nimport { NucleusIdentityConfig } from './nucleus-identity-config';\n\n@NgModule({\n imports: [],\n declarations: [],\n exports: [],\n})\nexport class NucleusIdentityModule {\n static forRoot(\n config: NucleusIdentityConfig\n ): ModuleWithProviders<NucleusIdentityModule> {\n return {\n ngModule: NucleusIdentityModule,\n providers: [\n { provide: NucleusIdentityConfig, useValue: config },\n {\n provide: HTTP_INTERCEPTORS,\n useClass: NucleusTokenInterceptor,\n multi: true,\n },\n ],\n };\n }\n}\n","export class OtpResponse {\n public password!: string;\n public passwordId!: string;\n}\n\nexport class OtpStatus {\n public isExpired!: boolean;\n public isUsed!: boolean;\n public secondsToExpiration!: number;\n}\n\nexport enum OtpType {\n SimpleNumbers = 0,\n SimpleAlfanumeric = 1,\n Complex = 2,\n}\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './index';\n"],"names":["i1","i1.AngularRequestor","i2.NucleusIdentityConfig","i3","i2.OidcConfigurationService","i2.LocationService","i4.OidcConfigurationService","i5.TokenClient","i1.NucleusIdentityService"],"mappings":";;;;;;;;;;;;;MAAa,qBAAqB,CAAA;AAAlC,IAAA,WAAA,GAAA;QAWS,IAAA,CAAA,mBAAmB,GAAc,EAAE;QAEnC,IAAA,CAAA,uBAAuB,GAAG,KAAK;IAOxC;AAAC;;MCpBY,gBAAgB,CAAA;AAI5B;MAEY,kCAAkC,CAAA;AAK7C,IAAA,WAAA,CAAY,gBAAyC,EAAA;QAH9C,IAAA,CAAA,YAAY,GAAG,KAAK;QAIzB,IAAI,gBAAgB,EAAE;AACpB,YAAA,IAAI,CAAC,YAAY,GAAG,IAAI;AACxB,YAAA,IAAI,CAAC,EAAE,GAAG,gBAAgB,CAAC,EAAE;AAC7B,YAAA,IAAI,CAAC,SAAS,GAAG,gBAAgB,CAAC,SAAS;QAC7C;IACF;AAEA,IAAA,IAAW,SAAS,GAAA;AAClB,QAAA,OAAO,KAAK;IACd;AACD;;MCdY,eAAe,CAAA;AAC1B,IAAA,WAAA,CAAoB,UAA6B,EAAA;QAA7B,IAAA,CAAA,UAAU,GAAV,UAAU;IAAsB;AAEpD,IAAA,IAAI,IAAI,GAAA;AACN,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI;IAC7B;IACA,IAAI,IAAI,CAAC,CAAC,EAAA;AACR,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;IAC1B;AAEA,IAAA,IAAI,IAAI,GAAA;AACN,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI;IAC7B;IACA,IAAI,IAAI,CAAC,CAAC,EAAA;AACR,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;IAC1B;AAEA,IAAA,IAAI,MAAM,GAAA;AACR,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM;IAC/B;AAEA,IAAA,IAAI,QAAQ,GAAA;AACV,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ;IACjC;IACA,IAAI,QAAQ,CAAC,CAAC,EAAA;AACZ,QAAA,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC;IAC9B;AAEA,IAAA,IAAI,QAAQ,GAAA;AACV,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ;IACjC;IACA,IAAI,QAAQ,CAAC,CAAC,EAAA;AACZ,QAAA,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC;IAC9B;AAEA,IAAA,IAAI,IAAI,GAAA;AACN,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI;IAC7B;IACA,IAAI,IAAI,CAAC,CAAC,EAAA;AACR,QAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;IAC1B;AAEA,IAAA,IAAI,QAAQ,GAAA;AACV,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,QAAQ;IACjC;IACA,IAAI,QAAQ,CAAC,CAAC,EAAA;AACZ,QAAA,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,CAAC;IAC9B;AAEA,IAAA,IAAI,MAAM,GAAA;AACR,QAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM;IAC/B;IACA,IAAI,MAAM,CAAC,CAAC,EAAA;AACV,QAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;IAC5B;AAEA,IAAA,MAAM,CAAC,GAAW,EAAA;AAChB,QAAA,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;AAC5B,YAAA,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;QACvB;aAAO;AACL,YAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC;QAC7B;IACF;+GA9DW,eAAe,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,iBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAf,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,eAAe,cAFd,MAAM,EAAA,CAAA,CAAA;;4FAEP,eAAe,EAAA,UAAA,EAAA,CAAA;kBAH3B,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;ACHK,MAAO,4BAA6B,SAAQ,qBAAqB,CAAA;AAKrE,IAAA,WAAA,GAAA;AACE,QAAA,KAAK,EAAE;QALT,IAAA,CAAA,QAAQ,GAAiC,IAAI;QAE7C,IAAA,CAAA,KAAK,GAA8B,IAAI;QAIrC,IAAI,CAAC,wBAAwB,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,KAAI;YACzD,OAAO,CAAC,GAAG,CAAC,iCAAiC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC;AACxE,YAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ;AACxB,YAAA,IAAI,CAAC,OAAO,GAAG,OAAO;AACtB,YAAA,IAAI,CAAC,KAAK,GAAG,KAAK;AACpB,QAAA,CAAC,CAAC;IACJ;AACD;;ACVK,MAAO,gBAAiB,SAAQ,SAAS,CAAA;AAC7C,IAAA,WAAA,CAAoB,IAAgB,EAAA;AAClC,QAAA,KAAK,EAAE;QADW,IAAA,CAAA,IAAI,GAAJ,IAAI;IAExB;;AAGA,IAAA,GAAG,CAAI,QAA4B,EAAA;QACjC,IAAI,MAAM,GAAG,KAAK;AAClB,QAAA,IAAI,QAAQ,CAAC,MAAM,EAAE;AACnB,YAAA,MAAM,GAAG,QAAQ,CAAC,MAAM;QAC1B;QAEA,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,KAAI;AACxC,YAAA,IAAI,CAAC;AACF,iBAAA,OAAO,CAAI,MAAM,EAAE,QAAQ,CAAC,GAAa,EAAE;gBAC1C,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,QAAQ,CAAC,OAAsB;aACzC;AACA,iBAAA,SAAS,CAAC;gBACT,IAAI,EAAE,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC;AAC3B,gBAAA,KAAK,EAAE,CAAC,GAAG,KAAI;AACb,oBAAA,IAAI,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC;AAC7B,oBAAA,IAAI,GAAG,YAAY,iBAAiB,EAAE;AACpC,wBAAA,CAAC,GAAG,IAAI,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,KAAK,IAAI,GAAG,CAAC,UAAU,CAAC;oBAC1D;oBACA,MAAM,CAAC,CAAC,CAAC;gBACX,CAAC;AACF,aAAA,CAAC;AACN,QAAA,CAAC,CAAC;IACJ;+GA7BW,gBAAgB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAA,IAAA,CAAA,UAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAhB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,cAFf,MAAM,EAAA,CAAA,CAAA;;4FAEP,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAH5B,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;ACAD,MAAM,eAAe,GAAG,aAAa;AACrC,MAAM,oBAAoB,GAAG,sBAAsB;AAQ7C,MAAO,wCAAyC,SAAQ,iCAAiC,CAAA;AAC7F,IAAA,WAAA,CAAY,OAAqD,EAAA;QAC/D,KAAK,CAAC,OAAO,CAAC;AACd,QAAA,IAAI,CAAC,2BAA2B,GAAG,OAAO,CAAC,6BAA6B;AACxE,QAAA,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,qBAAqB;IAC3D;AAKA,IAAA,aAAsB,eAAe,CACnC,eAAuB,EACvB,SAAqB,EAAA;QAErB,MAAM,OAAO,GAAG,CAAA,EAAG,eAAe,IAAI,eAAe,CAAA,CAAA,EAAI,oBAAoB,CAAA,CAAE;AAC/E,QAAA,MAAM,cAAc,GAAG,SAAS,IAAI,IAAI,eAAe,EAAE;AACzD,QAAA,MAAM,IAAI,GACR,MAAM,cAAc,CAAC,GAAG,CAA+C;AACrE,YAAA,GAAG,EAAE,OAAO;AACZ,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,MAAM,EAAE,KAAK;AACd,SAAA,CAAC;AACJ,QAAA,OAAO,IAAI,wCAAwC,CAAC,IAAI,CAAC;IAC3D;IAES,MAAM,GAAA;AACb,QAAA,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,EAAkD;AAC1E,QAAA,GAAG,CAAC,6BAA6B,GAAG,IAAI,CAAC,2BAA2B;;AAEpE,QAAA,OAAO,GAAU;IACnB;AACD;;MCtCY,wBAAwB,CAAA;AACnC,IAAA,WAAA,CACU,SAA2B,EAC3B,MAA6B,EAC7B,UAA6B,EAAA;QAF7B,IAAA,CAAA,SAAS,GAAT,SAAS;QACT,IAAA,CAAA,MAAM,GAAN,MAAM;QACN,IAAA,CAAA,UAAU,GAAV,UAAU;QAGZ,IAAA,CAAA,cAAc,GACpB,IAAI;IAHH;AAKI,IAAA,MAAM,gBAAgB,GAAA;AAC3B,QAAA,MAAM,IAAI,CAAC,mBAAmB,EAAE;AAChC,QAAA,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE;AACxB,YAAA,MAAM,KAAK,CAAC,mCAAmC,CAAC;QAClD;QAEA,OAAO,IAAI,CAAC,cAAc;IAC5B;AAEA,IAAA,IAAW,QAAQ,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ;IAC7B;AAEA,IAAA,IAAW,eAAe,GAAA;AACxB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe;IACpC;AAEA,IAAA,IAAW,+BAA+B,GAAA;AACxC,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,+BAA+B;IACpD;AAEA,IAAA,IAAW,gBAAgB,GAAA;AACzB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB;IACrC;AAEA,IAAA,IAAW,WAAW,GAAA;AACpB,QAAA,IAAI,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI;AAC9B,QAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ;QACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE;AAC5D,YAAA,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,kBAAkB;QACtC;aAAO,IAAI,QAAQ,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE;AAC3D,YAAA,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc;QAClC;AAAO,aAAA,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;AAClC,YAAA,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;QAC/B;AACA,QAAA,OAAO,IAAI,CAAC,oBAAoB,CAAC,GAAG,CAAC;IACvC;IAEO,YAAY,CAAC,cAA6B,IAAI,EAAA;AACnD,QAAA,IAAI,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS;AACrC,QAAA,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE;AACxC,YAAA,SAAS,GAAG,MAAM,CAAC,MAAM;QAC3B;AAEA,QAAA,IAAI,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC;QAE5B,IAAI,WAAW,EAAE;YACf,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC;QACjC;QAEA,OAAO,GAAG,CAAC,IAAI;IACjB;AAEQ,IAAA,oBAAoB,CAAC,GAAW,EAAA;QACtC,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;AAC1B,QAAA,IAAI,CAAC,GAAG,CAAC,EAAE;YACT,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B;AACA,QAAA,OAAO,GAAG;IACZ;AAEQ,IAAA,MAAM,mBAAmB,GAAA;AAC/B,QAAA,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,EAAE;YAC/B;QACF;AACA,QAAA,IAAI,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE;QACnC,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE;YAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpC;AACA,QAAA,IAAI;AACF,YAAA,IAAI,CAAC,cAAc;gBACjB,MAAM,wCAAwC,CAAC,eAAe,CAC5D,SAAS,EACT,IAAI,CAAC,SAAS,CACf;QACL;QAAE,OAAO,CAAC,EAAE;YACV,OAAO,CAAC,KAAK,CACX,oDAAoD;gBACjD,CAAW,CAAC,OAAO,CACvB;AACD,YAAA,MAAM,CAAC;QACT;IACF;+GA5FW,wBAAwB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAC,gBAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,qBAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,EAAA,CAAA,iBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAxB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,wBAAwB,cAFvB,MAAM,EAAA,CAAA,CAAA;;4FAEP,wBAAwB,EAAA,UAAA,EAAA,CAAA;kBAHpC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;MCNY,KAAK,CAAA;IAIhB,WAAA,CAAY,IAAY,EAAE,MAAgB,EAAA;AACxC,QAAA,IAAI,CAAC,IAAI,GAAG,IAAI;AAChB,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM;IACtB;AACD;MAEY,QAAQ,CAAA;AAMnB,IAAA,WAAA,CAAY,GAAkB,EAAA;QAFvB,IAAA,CAAA,MAAM,GAAY,EAAE;AAGzB,QAAA,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE;AAChB,YAAA,MAAM,KAAK,CAAC,6CAA6C,CAAC;QAC5D;QAEA,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;AAE3C,QAAA,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI;AACtB,QAAA,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG;AACxB,QAAA,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE;YACvB,IAAI,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE;AACtC,gBAAA,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC;gBAErB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE;AACxB,oBAAA,IAAI,GAAG,CAAC,IAAI,CAAC;gBACf;gBAEA,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC;AAClC,gBAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;YACzB;QACF;IACF;;AAGQ,IAAA,WAAW,CAAC,GAAW,EAAA;QAC7B,IAAI,CAAC,GAAG,EAAE;AACR,YAAA,MAAM,IAAI,KAAK,CACb,+DAA+D,CAChE;QACH;AAEA,QAAA,IAAI;YACF,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;;YAE1B,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;;AAE7C,YAAA,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B;QAAE,OAAO,KAAK,EAAE;AACd,YAAA,OAAO,CAAC,KAAK,CAAC,qCAAqC,EAAE,KAAK,CAAC;AAC3D,YAAA,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC;QAC/D;IACF;AAEQ,IAAA,gBAAgB,CAAC,GAAW,EAAA;AAClC,QAAA,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAChD,QAAA,OAAO,kBAAkB,CACvB,IAAI,CAAC,GAAG;aACL,KAAK,CAAC,EAAE;AACR,aAAA,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AAChE,aAAA,IAAI,CAAC,EAAE,CAAC,CACZ;IACH;AACD;;MChEY,YAAY,CAAA;AACvB,IAAA,WAAA,CAAY,QAAgB,EAAA;QASpB,IAAA,CAAA,OAAO,GAA2C,EAAE;QACpD,IAAA,CAAA,WAAW,GAA+B,EAAE;QAE5C,IAAA,CAAA,iBAAiB,GAA4B,IAAI;QAXvD,IAAI,CAAC,sBAAsB,GAAG,CAAA,iBAAA,EAAoB,QAAQ,CAAA,CAAE,CAAC;QAC7D,IAAI,CAAC,oBAAoB,GAAG,CAAA,EAAG,IAAI,CAAC,sBAAsB,OAAO;QACjE,IAAI,CAAC,4BAA4B,GAAG,CAAA,EAAG,IAAI,CAAC,sBAAsB,OAAO;QACzE,IAAI,CAAC,kBAAkB,GAAG,YAAY,CAAC,OAAO,CAC5C,IAAI,CAAC,4BAA4B,CAClC;IACH;AAUA,IAAA,IAAW,iBAAiB,GAAA;QAC1B,OAAO,IAAI,CAAC,kBAAkB;IAChC;IAEO,sBAAsB,GAAA;AAC3B,QAAA,IAAI,CAAC,iBAAiB,GAAG,IAAI;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC;IAC9C;IAEO,MAAM,mBAAmB,CAAC,gBAAkC,EAAA;AACjE,QAAA,IAAI,CAAC,iBAAiB,GAAG,gBAAgB;QACzC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE,gBAAgB,CAAC;IAC9D;AAEO,IAAA,MAAM,mBAAmB,GAAA;AAC9B,QAAA,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE;AAC3B,YAAA,IAAI,CAAC,iBAAiB,GAAG,MAAM,IAAI,CAAC,IAAI,CACtC,IAAI,CAAC,oBAAoB,CAC1B;QACH;QACA,OAAO,IAAI,CAAC,iBAAiB;IAC/B;AAEO,IAAA,QAAQ,CAAC,KAAoB,EAAE,EAAA,GAAoB,IAAI,EAAA;QAC5D,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC;IAC/C;IAEO,WAAW,CAAC,KAAoB,IAAI,EAAA;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;AAChC,QAAA,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;IAC9B;AAEO,IAAA,oBAAoB,CAAC,EAAiB,EAAA;AAC3C,QAAA,IAAI,CAAC,kBAAkB,GAAG,EAAE;AAC5B,QAAA,IAAI,IAAI,CAAC,kBAAkB,EAAE;YAC3B,YAAY,CAAC,OAAO,CAClB,IAAI,CAAC,4BAA4B,EACjC,IAAI,CAAC,kBAAkB,CACxB;QACH;aAAO;AACL,YAAA,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,4BAA4B,CAAC;QAC5D;IACF;AAEO,IAAA,MAAM,QAAQ,CAAC,EAAA,GAAoB,IAAI,EAAA;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;;AAGhC,QAAA,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE;AACvD,YAAA,MAAM,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACvC;AACA,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IAC1B;IAEO,WAAW,CAAC,KAAoB,IAAI,EAAA;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;AAChC,QAAA,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;AACxB,QAAA,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC;AAC5B,QAAA,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;IACxB;IAEQ,MAAM,sBAAsB,CAAC,EAAiB,EAAA;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,IAAI,CAAoB,GAAG,CAAC;QAC3D,IAAI,WAAW,EAAE;AACf,YAAA,MAAM,GAAG,GAAG,IAAI,aAAa,CAAC,WAAW,CAAC;YAC1C,IAAI,GAAG,EAAE,WAAW,IAAI,GAAG,EAAE,OAAO,EAAE;gBACpC,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;YAC7C;QACF;AACA,QAAA,OAAO,IAAI;IACb;AAEQ,IAAA,MAAM,gBAAgB,CAC5B,KAAoB,EACpB,IAAa,EACb,EAAiB,EAAA;QAEjB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;AAChC,QAAA,IAAI,KAAK,IAAI,IAAI,EAAE;AACjB,YAAA,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B;aAAO;AACL,YAAA,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK;YACzB,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC;YAC3C,IAAI,IAAI,EAAE;AACR,gBAAA,IAAI;oBACF,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;gBACtC;gBAAE,OAAO,CAAC,EAAE;AACV,oBAAA,OAAO,CAAC,IAAI,CAAC,oDAAoD,CAAC;gBACpE;YACF;QACF;IACF;AAEQ,IAAA,WAAW,CAAC,EAAiB,EAAA;QACnC,IAAI,CAAC,EAAE,EAAE;AACP,YAAA,EAAE,GAAG,IAAI,CAAC,kBAAkB;QAC9B;AACA,QAAA,OAAO;AACL,cAAE,CAAA,EAAG,IAAI,CAAC,sBAAsB,CAAA,CAAA,EAAI,EAAE,CAAA;AACtC,cAAE,IAAI,CAAC,sBAAsB;IACjC;AAEQ,IAAA,KAAK,CAAC,GAAW,EAAA;QACvB,OAAO,mBAAmB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC;IAC5C;IAEQ,IAAI,CAAI,GAAW,EAAE,KAAQ,EAAA;AACnC,QAAA,OAAO,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;IACvE;IAEQ,MAAM,IAAI,CAAI,GAAW,EAAA;AAC/B,QAAA,IAAI;YACF,MAAM,CAAC,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;AAChD,YAAA,IAAI,CAAC,EAAE,KAAK,EAAE;gBACZ,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAM;YACjC;iBAAO;AACL,gBAAA,OAAO,IAAI;YACb;QACF;AAAE,QAAA,MAAM;AACN,YAAA,OAAO,IAAI;QACb;IACF;AACD;;MCxIY,UAAU,CAAA;AACrB,IAAA,WAAA,CAAY,QAAwB,EAAA;AAClC,QAAA,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC,WAAW;AACtC,QAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS;AAClC,QAAA,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,gBAAgB;AAChD,QAAA,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,yBAAyB;QACjE,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC;AAClD,QAAA,IAAI,CAAC,QAAQ,GAAG,YAAY,EAAE;IAChC;IAUA,SAAS,CAAC,MAAM,GAAG,EAAE,EAAA;QACnB,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC;IACtC;IAEA,WAAW,CAAC,MAAM,GAAG,EAAE,EAAA;AACrB,QAAA,MAAM,GAAG,GAAG,YAAY,EAAE;QAC1B,OAAO,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,GAAG,MAAM,GAAG,GAAG;IACtD;AACD;;MC/BY,0BAA0B,CAAA;AACrC,IAAA,WAAA,CAAY,QAAwC,EAAA;AAClD,QAAA,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC,SAAS;AAClC,QAAA,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,aAAa;AAC1C,QAAA,IAAI,CAAC,oBAAoB,GAAG,IAAI,IAAI,CAClC,QAAQ,CAAC,wBAAwB,GAAG,IAAI,CACzC;IACH;AAKD;;MCMY,WAAW,CAAA;IACtB,WAAA,CACU,SAA2B,EAC3B,MAAgC,EAAA;QADhC,IAAA,CAAA,SAAS,GAAT,SAAS;QACT,IAAA,CAAA,MAAM,GAAN,MAAM;QAEd,IAAI,CAAC,aAAa,GAAG,IAAI,uBAAuB,CAAC,SAAS,CAAC;AAC3D,QAAA,IAAI,CAAC,MAAM,GAAG,IAAI,qBAAqB,EAAE;IAC3C;AAKO,IAAA,MAAM,sBAAsB,CACjC,WAAmB,EACnB,IAAY,EACZ,YAAqB,EAAA;QAErB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;QACnD,MAAM,WAAW,GAAG,WAAW;AAC/B,QAAA,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;AAC3B,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAC/B,YAAA,YAAY,EAAE,WAAW;AACzB,YAAA,UAAU,EAAE,6BAA6B;YACzC,IAAI;AACJ,YAAA,MAAM,EAAE,YAAY,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,SAAS;AACnE,SAAA,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC;IAClE;IAEO,MAAM,iBAAiB,CAAC,YAAoB,EAAA;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;AAC3C,QAAA,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;AAC3B,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAC/B,YAAA,YAAY,EAAE,WAAW;AACzB,YAAA,UAAU,EAAE,wBAAwB;AACpC,YAAA,aAAa,EAAE,YAAY;AAC5B,SAAA,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC;IAClE;AAEO,IAAA,MAAM,sBAAsB,CACjC,QAAgB,EAChB,YAAoB,EACpB,KAAa,EAAA;QAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;AAC3B,YAAA,SAAS,EAAE,QAAQ;AACnB,YAAA,YAAY,EAAE,EAAE;AAChB,YAAA,UAAU,EAAE,oBAAoB;AAChC,YAAA,MAAM,EAAE;AACN,gBAAA,aAAa,EAAE,YAAY;gBAC3B,KAAK;AACN,aAAA;AACF,SAAA,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC;IAClE;IAEO,MAAM,WAAW,CACtB,QAAgB,EAChB,MAAc,EACd,cAAsB,EACtB,KAAa,EAAA;QAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;AAC3B,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAC/B,YAAA,YAAY,EAAE,EAAE;AAChB,YAAA,UAAU,EAAE,6BAA6B;AACzC,YAAA,MAAM,EAAE;AACN,gBAAA,eAAe,EAAE,QAAQ;AACzB,gBAAA,YAAY,EAAE,MAAM;AACpB,gBAAA,qBAAqB,EACnB,wDAAwD;AAC1D,gBAAA,gBAAgB,EAAE,cAAc;gBAChC,KAAK;AACN,aAAA;AACF,SAAA,CAAC;QAEF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC;IAClE;IAEO,MAAM,eAAe,CAAC,UAAkB,EAAA;QAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,GAAG,GAAG,IAAI,YAAY,CAAC;AAC3B,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAC/B,YAAA,YAAY,EAAE,EAAE;AAChB,YAAA,UAAU,EAAE,8CAA8C;AAC1D,YAAA,MAAM,EAAE;AACN,gBAAA,WAAW,EAAE,UAAU;AACxB,aAAA;AACF,SAAA,CAAC;QACF,OAAO,MAAM,IAAI,CAAC,aAAa,CAAC,mBAAmB,CAAC,MAAM,EAAE,GAAG,CAAC;IAClE;IAEO,MAAM,wBAAwB,CAAC,KAAa,EAAA;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAEnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAEvC;YACA,GAAG,EAAE,MAAM,CAAC,oBAAoB;AAChC,YAAA,MAAM,EAAE,MAAM;AACd,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,OAAO,EAAE;AACP,gBAAA,cAAc,EAAE,kBAAkB;gBAClC,aAAa,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE;AACjC,aAAA;;AAEF,SAAA,CAAC;AAEF,QAAA,IAAK,QAA2B,CAAC,KAAK,KAAK,SAAS,EAAE;AACpD,YAAA,OAAO,IAAI,0BAA0B,CACnC,QAA0C,CAC3C;QACH;aAAO;AACL,YAAA,MAAM,IAAI,YAAY,CAAE,QAA2B,CAAC,KAAK,CAAC;QAC5D;IACF;AAEO,IAAA,MAAM,mBAAmB,CAC9B,0BAAA,GAA4C,IAAI,EAAA;AAEhD,QAAA,MAAM,MAAM,GAAG;AACb,YAAA,aAAa,EAAE,aAAa;AAC5B,YAAA,oBAAoB,EAAE,0BAA0B;SACjD;AAED,QAAA,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAmB,CAAC;IACxD;IAEO,MAAM,aAAa,CAAC,KAAa,EAAA;AACtC,QAAA,MAAM,MAAM,GAAG;YACb,KAAK;SACN;AACD,QAAA,OAAO,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;IAC3C;IAEQ,MAAM,qBAAqB,CAAC,MAAiB,EAAA;QACnD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;QAEnD,MAAM,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;QAC1C,MAAM,GAAG,GAAc,MAAM;QAE7B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,CAAkC;YACzE,GAAG,EAAE,MAAM,CAAC,2BAA2B;AACvC,YAAA,MAAM,EAAE,MAAM;AACd,YAAA,QAAQ,EAAE,MAAM;AAChB,YAAA,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;AACjC,SAAA,CAAC;AAEF,QAAA,IAAK,QAA2B,CAAC,KAAK,KAAK,SAAS,EAAE;AACpD,YAAA,OAAO,IAAI,UAAU,CAAC,QAA0B,CAAC;QACnD;aAAO;AACL,YAAA,MAAM,IAAI,YAAY,CAAE,QAA2B,CAAC,KAAK,CAAC;QAC5D;IACF;+GA9JW,WAAW,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAF,gBAAA,EAAA,EAAA,EAAA,KAAA,EAAAG,wBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAX,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,WAAW,cAFV,MAAM,EAAA,CAAA,CAAA;;4FAEP,WAAW,EAAA,UAAA,EAAA,CAAA;kBAHvB,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;MCcY,sBAAsB,CAAA;IACjC,WAAA,CACU,UAA6B,EACrC,QAAyB,EACjB,IAAgB,EAChB,MAAgC,EAChC,WAAwB,EAAA;QAJxB,IAAA,CAAA,UAAU,GAAV,UAAU;QAEV,IAAA,CAAA,IAAI,GAAJ,IAAI;QACJ,IAAA,CAAA,MAAM,GAAN,MAAM;QACN,IAAA,CAAA,WAAW,GAAX,WAAW;AAiBb,QAAA,IAAA,CAAA,sBAAsB,GAAG,IAAI,4BAA4B,EAAE;QAE3D,IAAA,CAAA,YAAY,GAAG,KAAK;QACpB,IAAA,CAAA,YAAY,GAAG,KAAK;QACpB,IAAA,CAAA,oBAAoB,GAAyC,IAAI;QACjE,IAAA,CAAA,gBAAgB,GAAkC,IAAI;QACtD,IAAA,CAAA,gCAAgC,GAA2B,IAAI;QAC/D,IAAA,CAAA,wBAAwB,GAAG,OAAO;AAtBxC,QAAA,MAAM,OAAO,GAAG,IAAI,mBAAmB,EAAE;AACzC,QAAA,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,EAAE;AAClC,QAAA,IAAI,CAAC,qBAAqB,GAAG,IAAI,sBAAsB,CACrD,OAAO,EACP,IAAI,qBAAqB,EAAE,EAC3B,QAAQ,EACR,IAAI,CAAC,OAAO,CACb;QACD,IAAI,CAAC,qBAAqB,CAAC,wBAAwB,CACjD,IAAI,CAAC,sBAAsB,CAC5B;QACD,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC;IACjD;AAaA,IAAA,IAAW,QAAQ,GAAA;AACjB,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;IAClC;AAEA,IAAA,IAAW,eAAe,GAAA;AACxB,QAAA,OAAO,IAAI,CAAC,QAAQ,IAAI,IAAI;IAC9B;AAEA,IAAA,IAAW,wBAAwB,GAAA;QACjC,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,wBAAwB,CAAC;IAC/D;AAEA,IAAA,IAAW,+BAA+B,GAAA;AACxC,QAAA,OAAO,IAAI,CAAC,wBAAwB,IAAI,IAAI;IAC9C;AAEA,IAAA,IAAW,0BAA0B,GAAA;QACnC,OAAO,IAAI,CAAC,MAAM,CAAC,iBAAiB,KAAK,IAAI,CAAC,wBAAwB;IACxE;AAEO,IAAA,MAAM,IAAI,CAAC,UAAU,GAAG,KAAK,EAAA;QAClC,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,EAAE;AAC1C,YAAA,OAAO,CAAC,IAAI,CACV,8FAA8F,CAC/F;YACD;QACF;AACA,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI;QAExB,IAAI,CAAC,oBAAoB,EAAE;AAC3B,QAAA,MAAM,IAAI,CAAC,qBAAqB,CAAC,sCAAsC,EAAE;AAEzE,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,KAAK;QACjD,IAAI,OAAO,EAAE;AACX,YAAA,MAAM,IAAI,KAAK,CACb,qBAAqB,GAAG,OAAO,CAAC,KAAK,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CACxE;QACH;AAAO,aAAA,IAAI,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE;AAC/C,YAAA,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,EAAE;AACzB,YAAA,MAAM,OAAO,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO;AACnD,YAAA,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB,CAAC,QAAQ;AAErD,YAAA,MAAM,YAAY,GAAG,OAAO,CAAC;AAC3B,kBAAE,OAAO,CAAC,QAAQ,CAAC,eAAe;kBAChC,SAAS;AACb,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CACvD,OAAO,CAAC,WAAW,EACnB,QAAQ,CAAC,IAAI,EACb,YAAY,CACb;AACD,YAAA,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC;YACtC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACjC;aAAO;YACL,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;AACxC,YAAA,IAAI,CAAC,GAAG,IAAI,UAAU,EAAE;AACtB,gBAAA,MAAM,IAAI,CAAC,KAAK,EAAE;YACpB;QACF;AACA,QAAA,IAAI,CAAC,YAAY,GAAG,IAAI;IAC1B;AAEO,IAAA,MAAM,eAAe,CAC1B,QAAgB,EAChB,MAAc,EAAA;AAEd,QAAA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;AACzE,QAAA,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,8BAA8B,EAAE;AAClE,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;AACnE,QAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAC5C,QAAQ,EACR,MAAM,EACN,cAAc,EACd,KAAK,CACN;AACD,QAAA,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC;QACtC,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;IACjC;AAEO,IAAA,MAAM,KAAK,GAAA;AAChB,QAAA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,2BAA2B,EAAE;AAClD,QAAA,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;AAC5B,YAAA,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,CAAC,IAAI,KAAI;gBAC5D,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,KAAK,KAAK,EAAE;oBACtC,OAAO,CAAC,KAAK,EAAE;gBACjB;gBACA,QAAQ,CAAC,MAAM,EAAE;gBACjB,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC;gBACvC,IAAI,IAAI,EAAE;AACR,oBAAA,MAAM,SAAS,GACb,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,GAAG,GAAG,IAAI;AAChE,oBAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;AACjC,oBAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE;gBAC1B;qBAAO;AACL,oBAAA,OAAO,CAAC,IAAI,CACV,oEAAoE,EACpE,IAAI,CACL;gBACH;AACF,YAAA,CAAC,CAAC;QACJ;QACA,IAAI,CAAC,qBAAqB,CAAC,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC;IACzE;AAEO,IAAA,MAAM,MAAM,GAAA;AACjB,QAAA,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE;AACnD,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;AAC3C,QAAA,MAAM,SAAS,GACb,MAAM,CAAC,kBAAkB;YACzB,4BAA4B;YAC5B,SAAS,CAAC,WAAW,CAAC;AACxB,QAAA,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE;YAC5B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,YAAY,EAAE,MAAK;gBACxD,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,KAAI;AAC7B,oBAAA,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE;wBAC3B,OAAO,CAAC,KAAK,EAAE;oBACjB;AACF,gBAAA,CAAC,CAAC;gBACF,QAAQ,CAAC,MAAM,EAAE;AACnB,YAAA,CAAC,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;QAClC;aAAO;AACL,YAAA,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC;IACF;AAEO,IAAA,MAAM,cAAc,GAAA;AACzB,QAAA,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;AAC1B,YAAA,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,sBAAsB,EAAE;QACvD;AACA,QAAA,IAAI;AACF,YAAA,OAAO,MAAM,IAAI,CAAC,gBAAgB;QACpC;gBAAU;AACR,YAAA,IAAI,CAAC,gBAAgB,GAAG,IAAI;QAC9B;IACF;AAEO,IAAA,MAAM,8BAA8B,GAAA;AACzC,QAAA,IAAI,CAAC,IAAI,CAAC,gCAAgC,EAAE;AAC1C,YAAA,IAAI,CAAC,gCAAgC;gBACnC,IAAI,CAAC,sCAAsC,EAAE;QACjD;AACA,QAAA,IAAI;AACF,YAAA,OAAO,MAAM,IAAI,CAAC,gCAAgC;QACpD;gBAAU;AACR,YAAA,IAAI,CAAC,gCAAgC,GAAG,IAAI;QAC9C;IACF;AAEO,IAAA,MAAM,qBAAqB,GAAA;QAChC,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE;QAClD,IAAI,EAAE,EAAE;AACN,YAAA,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAC7B,KAAK,EACL,IAAI,CAAC,MAAM,CAAC,+BAA+B,CAC5C;AACD,YAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,sBAAsB,CACvD,EAAE,CAAC,EAAE,EACL,EAAE,CAAC,MAAM,EACT,KAAK,CACN;AACD,YAAA,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,wBAAwB,CAAC;AAC9D,YAAA,OAAO,GAAG;QACZ;aAAO;AACL,YAAA,MAAM,KAAK,CAAC,sCAAsC,CAAC;QACrD;IACF;AAEO,IAAA,MAAM,uBAAuB,GAAA;AAClC,QAAA,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC;QACvE,IAAI,CAAC,KAAK,EAAE;AACV,YAAA,MAAM,IAAI,CAAC,qBAAqB,EAAE;QACpC;QACA,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,wBAAwB,CAAC;IACjE;IAEO,MAAM,MAAM,CAAC,IAAa,EAAE,SAAS,GAAG,CAAC,CAAC,EAAA;AAC/C,QAAA,IAAI,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA,iBAAA,EAAoB,IAAI,CAAA,CAAE,CAAC;AAC9D,QAAA,IAAI,SAAS,GAAG,CAAC,EAAE;AACjB,YAAA,GAAG,IAAI,CAAA,WAAA,EAAc,SAAS,CAAA,CAAE;QAClC;QACA,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAc,GAAG,CAAC,CAAC;IACvD;IAEO,MAAM,YAAY,CAAC,EAAU,EAAA;AAClC,QAAA,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAA,YAAA,EAAe,EAAE,CAAA,CAAE,CAAC;QACzD,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAY,GAAG,CAAC,CAAC;IACrD;IAEO,SAAS,CAAC,WAAmB,EAAE,QAAgB,EAAA;AACpD,QAAA,MAAM,OAAO,GAAG,kBAAkB,CAAC,WAAW,CAAC;AAC/C,QAAA,MAAM,GAAG,GAAG,CAAA,mBAAA,EAAsB,QAAQ,CAAA,WAAA,EAAc,OAAO,EAAE;QACjE,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC;IACtC;AAEO,IAAA,MAAM,iCAAiC,GAAA;QAC5C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE;QAClD,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,CAAC;IAC3D;IAEO,MAAM,oCAAoC,CAAC,UAAsB,EAAA;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;AAC1D,QAAA,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAC5D,QAAQ,CAAC,WAAW,CACrB;AAED,QAAA,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC;YACpC,EAAE,EAAE,MAAM,CAAC,QAAQ;YACnB,MAAM,EAAE,MAAM,CAAC,YAAY;YAC3B,SAAS,EAAE,MAAM,CAAC,oBAAoB;AACvC,SAAA,CAAC;IACJ;IAEO,kCAAkC,GAAA;AACvC,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE;IAC7C;AAEO,IAAA,MAAM,qCAAqC,GAAA;QAChD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE;AAClD,QAAA,OAAO,IAAI,kCAAkC,CAAC,EAAE,CAAC;IACnD;AAEO,IAAA,MAAM,oBAAoB,GAAA;AAC/B,QAAA,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QAClE,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC;IACpD;IAEO,MAAM,uBAAuB,CAAC,UAAsB,EAAA;QACzD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC;QACrD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;IACjC;IAEQ,MAAM,kBAAkB,CAAC,UAAsB,EAAA;QACrD,IAAI,GAAG,GAAyB,IAAI;AACpC,QAAA,GAAG;AACD,YAAA,IAAI,UAAU,CAAC,SAAS,EAAE,EAAE;AAC1B,gBAAA,MAAM,KAAK,CAAC,yBAAyB,CAAC;YACxC;AAEA,YAAA,IAAI;AACF,gBAAA,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,eAAe,CAAC,UAAU,CAAC,UAAU,CAAC;YACrE;YAAE,OAAO,KAAK,EAAE;gBACd,IACE,KAAK,YAAY,YAAY;AAC7B,oBAAA,KAAK,CAAC,OAAO,KAAK,uBAAuB,EACzC;AACA,oBAAA,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBACxB;qBAAO;AACL,oBAAA,MAAM,KAAK;gBACb;YACF;QACF,CAAC,QAAQ,CAAC,GAAG;AACb,QAAA,OAAO,GAAG;IACZ;IAEQ,2BAA2B,GAAA;AACjC,QAAA,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW;AAE3C,QAAA,MAAM,MAAM,GAAG;AACb,YAAA,aAAa,EAAE,UAAU;AACzB,YAAA,MAAM,EAAE,SAAS;AACjB,YAAA,WAAW,EAAE,SAAS;AACtB,YAAA,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,gBAAgB;SACjD;QAED,OAAO,IAAI,oBAAoB,CAC7B;AACE,YAAA,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;AAC/B,YAAA,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,oBAAoB,CAAC,kBAAkB;AACtD,YAAA,KAAK,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;AAC3D,YAAA,MAAM,EAAE,MAAmB;AAC5B,SAAA,EACD,IAAI,CAAC,OAAO,EACZ,IAAI,CACL;IACH;AAEQ,IAAA,MAAM,sCAAsC,GAAA;AAClD,QAAA,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,wBAAwB,CAAC;AACrE,QAAA,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;AACrB,YAAA,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE;QAC5C;QACA,OAAO,KAAK,EAAE,WAAW;IAC3B;AAEQ,IAAA,MAAM,sBAAsB,GAAA;QAClC,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;QACxC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE;YAC7B,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC;QACjD;AACA,QAAA,OAAO,KAAK,EAAE,WAAW,IAAI,IAAI;IACnC;IAEQ,MAAM,qBAAqB,CAAC,KAAoB,EAAA;AACtD,QAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC9B,IAAI,CAAC,oBAAoB,GAAG,IAAI,CAAC,6BAA6B,CAAC,KAAK,CAAC;QACvE;AACA,QAAA,IAAI;AACF,YAAA,OAAO,MAAM,IAAI,CAAC,oBAAoB;QACxC;gBAAU;AACR,YAAA,IAAI,CAAC,oBAAoB,GAAG,IAAI;QAClC;IACF;IAEQ,MAAM,6BAA6B,CAAC,KAAoB,EAAA;AAC9D,QAAA,IAAI,KAAK,EAAE,YAAY,EAAE;AACvB,YAAA,IAAI;AACF,gBAAA,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAClD,KAAK,CAAC,YAAY,CACnB;gBACD,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;AAC/B,gBAAA,OAAO,GAAG;YACZ;YAAE,OAAO,GAAG,EAAE;AACZ,gBAAA,OAAO,CAAC,IAAI,CACV,uDAAuD,EACvD,GAAG,CACJ;;AAED,gBAAA,IAAK,GAAW,CAAC,OAAO,KAAK,eAAe,EAAE;AAC5C,oBAAA,MAAM,IAAI,CAAC,MAAM,EAAE;gBACrB;YACF;QACF;aAAO;AACL,YAAA,OAAO,CAAC,IAAI,CAAC,wDAAwD,CAAC;QACxE;AACA,QAAA,OAAO,IAAI;IACb;AAEQ,IAAA,WAAW,CAAC,GAAW,EAAA;QAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC;AAC1B,QAAA,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE;AAClB,YAAA,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;AACnB,YAAA,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;AAC5B,gBAAA,OAAO,IAAI;YACb;QACF;AACA,QAAA,OAAO,IAAI;IACb;IAEQ,oBAAoB,GAAA;AAC1B,QAAA,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE;AACzD,YAAA,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YACxD,IAAI,IAAI,EAAE;AACR,gBAAA,OAAO,CAAC,GAAG,CACT,kFAAkF,CACnF;gBACD,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;YACnC;QACF;IACF;IAEQ,YAAY,CAAC,aAAsB,EAAE,cAAuB,EAAA;QAClE,IAAI,KAAK,GAAG,QAAQ;QACpB,IAAI,aAAa,EAAE;YACjB,KAAK,IAAI,iBAAiB;QAC5B;QACA,IAAI,cAAc,EAAE;AAClB,YAAA,KAAK,IAAI,GAAG,GAAG,cAAc;QAC/B;AACA,QAAA,OAAO,KAAK;IACd;AAEQ,IAAA,KAAK,CAAC,WAAmB,EAAA;AAC/B,QAAA,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,KAAI;YACnC,UAAU,CAAC,MAAK;AACd,gBAAA,OAAO,EAAE;YACX,CAAC,EAAE,WAAW,CAAC;AACjB,QAAA,CAAC,CAAC;IACJ;+GApZW,sBAAsB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAA,EAAA,CAAA,iBAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,eAAA,EAAA,EAAA,EAAA,KAAA,EAAAF,IAAA,CAAA,UAAA,EAAA,EAAA,EAAA,KAAA,EAAAG,wBAAA,EAAA,EAAA,EAAA,KAAA,EAAAC,WAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAtB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,sBAAsB,cAFrB,MAAM,EAAA,CAAA,CAAA;;4FAEP,sBAAsB,EAAA,UAAA,EAAA,CAAA;kBAHlC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;MC1BY,uBAAuB,CAAA;IAClC,WAAA,CACU,IAA4B,EAC5B,MAA6B,EAAA;QAD7B,IAAA,CAAA,IAAI,GAAJ,IAAI;QACJ,IAAA,CAAA,MAAM,GAAN,MAAM;AASR,QAAA,IAAA,CAAA,wBAAwB,GAAG;YACjC,MAAM;YACN,SAAS;YACT,aAAa;YACb,aAAa;SACd;QAZC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;AAChD,QAAA,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC,KACtD,CAAC,CAAC,WAAW,EAAE,CAChB;IACH;IAWO,SAAS,CACd,GAAyB,EACzB,IAAiB,EAAA;QAEjB,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACjC,YAAA,MAAM,GAAG,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC;AACxE,YAAA,OAAO,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QACpC;AACA,QAAA,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;IACzB;AAEQ,IAAA,eAAe,CAAC,GAAW,EAAA;AACjC,QAAA,GAAG,GAAG,GAAG,CAAC,WAAW,EAAE;QAEvB,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE;YACnC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ;AACtC,YAAA,OAAO,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1E;AAEA,QAAA,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE;YACzD,QACE,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK;QAE5E;AACA,QAAA,OAAO,KAAK;IACd;AAEQ,IAAA,gBAAgB,CACtB,QAAgC,EAChC,GAAyB,EACzB,IAAiB,EAAA;AAEjB,QAAA,OAAO,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACxB,QAAQ,CAAC,CAAC,KAAK,KAAI;YACjB,IAAI,KAAK,EAAE;AACT,gBAAA,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAC;gBACnE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;YAC9B;AACA,YAAA,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QACzB,CAAC,CAAC,CACH;IACH;AAEQ,IAAA,iBAAiB,CACvB,QAAwC,EAAA;QAExC,OAAO,QAAQ,CAAC,IAAI,CAClB,UAAU,CAAC,CAAC,GAAG,KAAI;YACjB,IAAI,GAAG,YAAY,iBAAiB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE;AAC1D,gBAAA,IAAI,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE;AACvC,oBAAA,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;gBACnB;YACF;AACA,YAAA,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC;QAC9B,CAAC,CAAC,CACH;IACH;+GA5EW,uBAAuB,EAAA,IAAA,EAAA,CAAA,EAAA,KAAA,EAAAC,sBAAA,EAAA,EAAA,EAAA,KAAA,EAAAN,qBAAA,EAAA,CAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAvB,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,uBAAuB,cAFtB,MAAM,EAAA,CAAA,CAAA;;4FAEP,uBAAuB,EAAA,UAAA,EAAA,CAAA;kBAHnC,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;MCCY,qBAAqB,CAAA;IAChC,OAAO,OAAO,CACZ,MAA6B,EAAA;QAE7B,OAAO;AACL,YAAA,QAAQ,EAAE,qBAAqB;AAC/B,YAAA,SAAS,EAAE;AACT,gBAAA,EAAE,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,EAAE;AACpD,gBAAA;AACE,oBAAA,OAAO,EAAE,iBAAiB;AAC1B,oBAAA,QAAQ,EAAE,uBAAuB;AACjC,oBAAA,KAAK,EAAE,IAAI;AACZ,iBAAA;AACF,aAAA;SACF;IACH;+GAfW,qBAAqB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,QAAA,EAAA,CAAA,CAAA;gHAArB,qBAAqB,EAAA,CAAA,CAAA;gHAArB,qBAAqB,EAAA,CAAA,CAAA;;4FAArB,qBAAqB,EAAA,UAAA,EAAA,CAAA;kBALjC,QAAQ;AAAC,YAAA,IAAA,EAAA,CAAA;AACR,oBAAA,OAAO,EAAE,EAAE;AACX,oBAAA,YAAY,EAAE,EAAE;AAChB,oBAAA,OAAO,EAAE,EAAE;AACZ,iBAAA;;;MCTY,WAAW,CAAA;AAGvB;MAEY,SAAS,CAAA;AAIrB;IAEW;AAAZ,CAAA,UAAY,OAAO,EAAA;AACjB,IAAA,OAAA,CAAA,OAAA,CAAA,eAAA,CAAA,GAAA,CAAA,CAAA,GAAA,eAAiB;AACjB,IAAA,OAAA,CAAA,OAAA,CAAA,mBAAA,CAAA,GAAA,CAAA,CAAA,GAAA,mBAAqB;AACrB,IAAA,OAAA,CAAA,OAAA,CAAA,SAAA,CAAA,GAAA,CAAA,CAAA,GAAA,SAAW;AACb,CAAC,EAJW,OAAO,KAAP,OAAO,GAAA,EAAA,CAAA,CAAA;;ACXnB;;AAEG;;;;"}
package/index.d.ts CHANGED
@@ -1,6 +1,237 @@
1
- export * from './lib/nucleus-identity.module';
2
- export * from './lib/nucleus-identity.service';
3
- export * from './lib/nucleus-identity-config';
4
- export { OtpResponse, OtpStatus, OtpType } from './lib/models/otp';
5
- export { DeviceCode } from './lib/models/device-code';
6
- export { ServicePrincipalRegistrationStatus } from './lib/models/service-principal';
1
+ import * as i0 from '@angular/core';
2
+ import { ModuleWithProviders } from '@angular/core';
3
+ import * as _openid_appauth from '@openid/appauth';
4
+ import { TokenResponse, LocationLike, Requestor, AuthorizationServiceConfiguration, AuthorizationServiceConfigurationJson } from '@openid/appauth';
5
+ import { HttpClient } from '@angular/common/http';
6
+ import { NucleusAppService } from '@kolektor/nucleus-common';
7
+
8
+ declare class NucleusIdentityConfig {
9
+ authority: string;
10
+ clientId: string;
11
+ redirectUri?: string;
12
+ androidRedirectUri?: string;
13
+ iOSRedirectUri?: string;
14
+ httpInterceptorUrls?: string[];
15
+ automaticLoginOnHttp401: boolean;
16
+ requestedScopes?: string;
17
+ servicePrincipalRequestedScopes?: string;
18
+ authProviderHint?: string;
19
+ }
20
+
21
+ declare class NucleusIdentityModule {
22
+ static forRoot(config: NucleusIdentityConfig): ModuleWithProviders<NucleusIdentityModule>;
23
+ static ɵfac: i0.ɵɵFactoryDeclaration<NucleusIdentityModule, never>;
24
+ static ɵmod: i0.ɵɵNgModuleDeclaration<NucleusIdentityModule, never, never, never>;
25
+ static ɵinj: i0.ɵɵInjectorDeclaration<NucleusIdentityModule>;
26
+ }
27
+
28
+ declare class Claim {
29
+ name: string;
30
+ values: string[];
31
+ constructor(name: string, values: string[]);
32
+ }
33
+ declare class Identity {
34
+ name: string;
35
+ subject: string;
36
+ claims: Claim[];
37
+ constructor(res: TokenResponse);
38
+ private decodeToken;
39
+ private b64DecodeUnicode;
40
+ }
41
+
42
+ interface DeviceCodeJson {
43
+ device_code: string;
44
+ user_code: string;
45
+ verification_uri: string;
46
+ verification_uri_complete: string;
47
+ expires_in: string;
48
+ message: string;
49
+ }
50
+ declare class DeviceCode {
51
+ constructor(response: DeviceCodeJson);
52
+ private expiresIn;
53
+ private issuedAt;
54
+ deviceCode: string;
55
+ userCode: string;
56
+ verificationUrl: string;
57
+ verificationUrlComplete: string;
58
+ isExpired(buffer?: number): boolean;
59
+ secondsLeft(buffer?: number): number;
60
+ }
61
+
62
+ declare class OtpResponse {
63
+ password: string;
64
+ passwordId: string;
65
+ }
66
+ declare class OtpStatus {
67
+ isExpired: boolean;
68
+ isUsed: boolean;
69
+ secondsToExpiration: number;
70
+ }
71
+ declare enum OtpType {
72
+ SimpleNumbers = 0,
73
+ SimpleAlfanumeric = 1,
74
+ Complex = 2
75
+ }
76
+
77
+ declare class ServicePrincipal {
78
+ id: string;
79
+ secret: string;
80
+ expiresAt: Date;
81
+ }
82
+ declare class ServicePrincipalRegistrationStatus {
83
+ id: string;
84
+ isRegistered: boolean;
85
+ expiresAt: Date;
86
+ constructor(servicePrincipal: ServicePrincipal | null);
87
+ get isExpired(): boolean;
88
+ }
89
+
90
+ declare class LocationService implements LocationLike {
91
+ private appService;
92
+ constructor(appService: NucleusAppService);
93
+ get hash(): string;
94
+ set hash(v: string);
95
+ get host(): string;
96
+ set host(v: string);
97
+ get origin(): string;
98
+ get hostname(): string;
99
+ set hostname(v: string);
100
+ get pathname(): string;
101
+ set pathname(v: string);
102
+ get port(): string;
103
+ set port(v: string);
104
+ get protocol(): string;
105
+ set protocol(v: string);
106
+ get search(): string;
107
+ set search(v: string);
108
+ assign(url: string): void;
109
+ static ɵfac: i0.ɵɵFactoryDeclaration<LocationService, never>;
110
+ static ɵprov: i0.ɵɵInjectableDeclaration<LocationService>;
111
+ }
112
+
113
+ declare class AngularRequestor extends Requestor {
114
+ private http;
115
+ constructor(http: HttpClient);
116
+ xhr<T>(settings: JQueryAjaxSettings): Promise<T>;
117
+ static ɵfac: i0.ɵɵFactoryDeclaration<AngularRequestor, never>;
118
+ static ɵprov: i0.ɵɵInjectableDeclaration<AngularRequestor>;
119
+ }
120
+
121
+ interface NucleusAuthorizationServiceConfigurationJson extends AuthorizationServiceConfigurationJson {
122
+ device_authorization_endpoint?: string;
123
+ registration_endpoint?: string;
124
+ }
125
+ declare class NucleusAuthorizationServiceConfiguration extends AuthorizationServiceConfiguration {
126
+ constructor(request: NucleusAuthorizationServiceConfigurationJson);
127
+ deviceAuthorizationEndpoint?: string;
128
+ registrationEndpoint?: string;
129
+ static fetchFromIssuer(openIdIssuerUrl: string, requestor?: Requestor): Promise<NucleusAuthorizationServiceConfiguration>;
130
+ toJson(): any;
131
+ }
132
+
133
+ declare class OidcConfigurationService {
134
+ private requestor;
135
+ private config;
136
+ private appService;
137
+ constructor(requestor: AngularRequestor, config: NucleusIdentityConfig, appService: NucleusAppService);
138
+ private _configuration;
139
+ getConfiguration(): Promise<NucleusAuthorizationServiceConfiguration>;
140
+ get clientId(): string;
141
+ get requestedScopes(): string | undefined;
142
+ get servicePrincipalRequestedScopes(): string | undefined;
143
+ get authProviderHint(): string | undefined;
144
+ get redirectUrl(): string;
145
+ getServerUrl(relativeUri?: string | null): string;
146
+ private NormalizeRedirectUri;
147
+ private assureConfiguration;
148
+ static ɵfac: i0.ɵɵFactoryDeclaration<OidcConfigurationService, never>;
149
+ static ɵprov: i0.ɵɵInjectableDeclaration<OidcConfigurationService>;
150
+ }
151
+
152
+ interface ClientRegistrationResponseJson {
153
+ client_id: string;
154
+ client_secret: string;
155
+ client_secret_expires_at: number;
156
+ }
157
+ declare class ClientRegistrationResponse {
158
+ constructor(response: ClientRegistrationResponseJson);
159
+ clientId: string;
160
+ clientSecret: string;
161
+ secretExpirationDate: Date;
162
+ }
163
+
164
+ declare class TokenClient {
165
+ private requestor;
166
+ private config;
167
+ constructor(requestor: AngularRequestor, config: OidcConfigurationService);
168
+ private _tokenHandler;
169
+ private _utils;
170
+ getByAuthorizationCode(redirectUrl: string, code: string, codeVerifier?: string): Promise<_openid_appauth.TokenResponse>;
171
+ getByRefreshToken(refreshToken: string): Promise<_openid_appauth.TokenResponse>;
172
+ getByClientCredentials(clientId: string, clientSecret: string, scope: string): Promise<_openid_appauth.TokenResponse>;
173
+ getBySecret(provider: string, secret: string, assertionToken: string, scope: string): Promise<_openid_appauth.TokenResponse>;
174
+ getByDeviceCode(deviceCode: string): Promise<_openid_appauth.TokenResponse>;
175
+ registerServicePrincipal(token: string): Promise<ClientRegistrationResponse>;
176
+ getRegistrationCode(existingServicePrincipalId?: string | null): Promise<DeviceCode>;
177
+ getDeviceCode(scope: string): Promise<DeviceCode>;
178
+ private getDeviceCodeInternal;
179
+ static ɵfac: i0.ɵɵFactoryDeclaration<TokenClient, never>;
180
+ static ɵprov: i0.ɵɵInjectableDeclaration<TokenClient>;
181
+ }
182
+
183
+ declare class NucleusIdentityService {
184
+ private appService;
185
+ private http;
186
+ private config;
187
+ private tokenClient;
188
+ constructor(appService: NucleusAppService, location: LocationService, http: HttpClient, config: OidcConfigurationService, tokenClient: TokenClient);
189
+ private _authorizationHandler;
190
+ private _authorizationNotifier;
191
+ private _crypto;
192
+ private _initStarted;
193
+ private _initialized;
194
+ private _refreshTokenPromise;
195
+ private _getTokenPromise;
196
+ private _getServicePrincipalTokenPromise;
197
+ private _servicePrincipalTokenId;
198
+ private _store;
199
+ get identity(): Identity | null;
200
+ get isAuthenticated(): boolean;
201
+ get servicePrincipalIdentity(): Identity | null;
202
+ get isServicePrincipalAuthenticated(): boolean;
203
+ get isIdentityServicePrincipal(): boolean;
204
+ init(startLogin?: boolean): Promise<void>;
205
+ loginWithSecret(provider: string, secret: string): Promise<void>;
206
+ login(): Promise<void>;
207
+ logout(): Promise<void>;
208
+ getAccessToken(): Promise<string | null>;
209
+ getServicePrincipalAccessToken(): Promise<string>;
210
+ loginServicePrincipal(): Promise<TokenResponse>;
211
+ loginAsServicePrincipal(): Promise<void>;
212
+ getOtp(type: OtpType, expiresIn?: number): Promise<OtpResponse>;
213
+ getOtpStatus(id: string): Promise<OtpStatus>;
214
+ getOtpUrl(redirectUrl: string, password: string): string;
215
+ startServicePrincipalRegistration(): Promise<DeviceCode>;
216
+ completeServicePrincipalRegistration(deviceCode: DeviceCode): Promise<void>;
217
+ removeServicePrincipalRegistration(): Promise<{
218
+ value: boolean;
219
+ }>;
220
+ getServicePrincipalRegistrationStatus(): Promise<ServicePrincipalRegistrationStatus>;
221
+ startDeviceCodeLogin(): Promise<DeviceCode>;
222
+ completeDeviceCodeLogin(deviceCode: DeviceCode): Promise<void>;
223
+ private waitForDeviceToken;
224
+ private prepareAuthorizationRequest;
225
+ private getServicePrincipalAccessTokenInternal;
226
+ private getAccessTokenInternal;
227
+ private loginWithRefreshToken;
228
+ private loginWithRefreshTokenInternal;
229
+ private getCodeHash;
230
+ private handleLaunchCodeHash;
231
+ private prepareScope;
232
+ private delay;
233
+ static ɵfac: i0.ɵɵFactoryDeclaration<NucleusIdentityService, never>;
234
+ static ɵprov: i0.ɵɵInjectableDeclaration<NucleusIdentityService>;
235
+ }
236
+
237
+ export { DeviceCode, NucleusIdentityConfig, NucleusIdentityModule, NucleusIdentityService, OtpResponse, OtpStatus, OtpType, ServicePrincipalRegistrationStatus };
package/package.json CHANGED
@@ -1,8 +1,8 @@
1
1
  {
2
2
  "name": "@kolektor/nucleus-identity",
3
3
  "peerDependencies": {
4
- "@angular/common": "^17.3.0",
5
- "@angular/core": "^17.3.0",
4
+ "@angular/common": "^20.3.0",
5
+ "@angular/core": "^20.3.0",
6
6
  "@capacitor/app": "^7.0.0",
7
7
  "@capacitor/browser": "^7.0.0",
8
8
  "@capacitor/device": "^7.0.0",
@@ -21,13 +21,11 @@
21
21
  },
22
22
  ".": {
23
23
  "types": "./index.d.ts",
24
- "esm2022": "./esm2022/kolektor-nucleus-identity.mjs",
25
- "esm": "./esm2022/kolektor-nucleus-identity.mjs",
26
24
  "default": "./fesm2022/kolektor-nucleus-identity.mjs"
27
25
  }
28
26
  },
29
27
  "dependencies": {
30
28
  "tslib": "^2.3.0"
31
29
  },
32
- "version": "0.1.1911"
30
+ "version": "0.1.2192"
33
31
  }