@kya-os/mcp-i-cloudflare 1.15.1 → 1.16.0

package/dist/services/approval-route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-route.d.ts","sourceRoot":"","sources":["../../src/services/approval-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG,WAAW,GAAG,OAAO,CAAC;AAmBjE;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa,GAAG,IAAI,CAIvE;AAED,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAGvD;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE5D;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAevD,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,OAAO,GACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAazB"}

package/dist/services/approval-route.js

@@ -0,0 +1,87 @@
+/**
+ * Routing and input hygiene for `/consent/approve`.
+ *
+ * SECURITY: `provider_type` decides which identity check an approval goes
+ * through, so it is matched against an allowlist. A value outside it used to
+ * fall through to an unchecked path that minted under a DID looked up from the
+ * caller's own `oauth_identity`, and that labelled the grant with the caller's
+ * `customFields`. Everything that names who signed in, or how, is now set by
+ * the server; the caller only chooses the route.
+ *
+ * Pure functions, no I/O.
+ */
+/**
+ * Every `provider_type` a consent page sends today. `credential` is the
+ * legacy spelling of `password`; `oauth` and `oauth2` are the two spellings of
+ * the post-OAuth clickwrap.
+ */
+const APPROVAL_ROUTES = new Map([
+    ["none", "clickwrap"],
+    ["credential", "credential"],
+    ["password", "credential"],
+    ["oauth", "oauth"],
+    ["oauth2", "oauth"],
+]);
+function normalizeLabel(raw) {
+    return typeof raw === "string" ? raw.trim().toLowerCase() : undefined;
+}
+/**
+ * Map a caller's `provider_type` to its route, or `null` when it is missing,
+ * not a string, or not one of the allowed values.
+ *
+ * @example
+ * resolveApprovalRoute(" OAuth2 "); // "oauth"
+ * resolveApprovalRoute("magic_link"); // null
+ */
+export function resolveApprovalRoute(raw) {
+    const label = normalizeLabel(raw);
+    if (label === undefined)
+        return null;
+    return APPROVAL_ROUTES.get(label) ?? null;
+}
+/** True when `oauth_provider_type` marks a post-OAuth clickwrap. */
+export function isPostOAuthMarker(raw) {
+    const label = normalizeLabel(raw);
+    return label === "oauth" || label === "oauth2";
+}
+/** True when `credential_provider_type` marks a post-credential clickwrap. */
+export function isPostCredentialMarker(raw) {
+    return normalizeLabel(raw) === "password";
+}
+/**
+ * `customFields` keys the server owns. Checkpoint reads the delegation's
+ * authorization type and provider from these, and the dashboard shows the
+ * user fields, so a caller must never set them.
+ */
+export const SERVER_OWNED_CUSTOM_FIELDS = [
+    "provider",
+    "oauth_provider",
+    "provider_type",
+    "authorization",
+    "authorization_type",
+    "issuer_did",
+    "subject_did",
+    "user_did",
+    "user_identifier",
+    "user_email",
+    "user_id",
+    "credential_user_email",
+    "credential_provider_user_id",
+    "format_version",
+];
+/**
+ * Copy a caller's `customFields` without the server-owned keys. Anything that
+ * is not a plain object becomes `{}`.
+ *
+ * @example
+ * stripServerOwnedFields({ note: "hi", provider_type: "oauth" }); // { note: "hi" }
+ */
+export function stripServerOwnedFields(customFields) {
+    if (!customFields ||
+        typeof customFields !== "object" ||
+        Array.isArray(customFields)) {
+        return {};
+    }
+    return Object.fromEntries(Object.entries(customFields).filter(([key]) => !SERVER_OWNED_CUSTOM_FIELDS.includes(key)));
+}
+//# sourceMappingURL=approval-route.js.map

package/dist/services/approval-route.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-route.js","sourceRoot":"","sources":["../../src/services/approval-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAWH;;;;GAIG;AACH,MAAM,eAAe,GAAuC,IAAI,GAAG,CAAC;IAClE,CAAC,MAAM,EAAE,WAAW,CAAC;IACrB,CAAC,YAAY,EAAE,YAAY,CAAC;IAC5B,CAAC,UAAU,EAAE,YAAY,CAAC;IAC1B,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,QAAQ,EAAE,OAAO,CAAC;CACpB,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,GAAY;IAClC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAY;IAC/C,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAC5C,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,iBAAiB,CAAC,GAAY;IAC5C,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ,CAAC;AACjD,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,GAAY;IACjD,OAAO,cAAc,CAAC,GAAG,CAAC,KAAK,UAAU,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,UAAU;IACV,gBAAgB;IAChB,eAAe;IACf,eAAe;IACf,oBAAoB;IACpB,YAAY;IACZ,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,YAAY;IACZ,SAAS;IACT,uBAAuB;IACvB,6BAA6B;IAC7B,gBAAgB;CACjB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,YAAqB;IAErB,IACE,CAAC,YAAY;QACb,OAAO,YAAY,KAAK,QAAQ;QAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAC3B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,YAAuC,CAAC,CAAC,MAAM,CAC5D,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,0BAA0B,CAAC,QAAQ,CAAC,GAAG,CAAC,CACrD,CACF,CAAC;AACJ,CAAC"}

package/dist/services/consent-config.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consent-config.service.d.ts","sourceRoot":"","sources":["../../src/services/consent-config.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE9C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG7D;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAmBtD;;;;GAIG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,GAAG,CAAgB;gBAEf,GAAG,EAAE,aAAa;IAI9B;;;;;;;;;;OAUG;IACG,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IA0KrE;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;;;OAIG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBxD"}
+{"version":3,"file":"consent-config.service.d.ts","sourceRoot":"","sources":["../../src/services/consent-config.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAG9C,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAG7D;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAqBtD;;;;GAIG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,GAAG,CAAgB;gBAEf,GAAG,EAAE,aAAa;IAI9B;;;;;;;;;;OAUG;IACG,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAqMrE;;;;;;;OAOG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;;;OAIG;IACG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAiBxD"}

package/dist/services/consent-config.service.js

@@ -7,6 +7,7 @@
  * Related Spec: MCP-I Phase 0 Implementation Plan, Task B.3
  */
 import { DEFAULT_CHECKPOINT_URL } from "../constants";
+import { isValidCheckpointProjectId } from "../utils/checkpoint-project-id";
 import { getDefaultConsentConfig, DEFAULT_TERMS } from "@kya-os/consent";
 /**
  * Default consent configuration cache TTL (5 minutes)
@@ -34,12 +35,24 @@ export class ConsentConfigService {
      * @returns Consent configuration (always returns valid config, never throws)
      */
     async getConsentConfig(projectId) {
+        // No project id at all (CHECKPOINT_PROJECT_ID unset, or none in the URL)
+        // is not a misconfiguration: answer with the defaults, quietly
+        if (!projectId) {
+            return this.getDefaultConfig();
+        }
+        // The id comes from the consent URL's query string and goes into a
+        // Checkpoint path sent with the server's key: an id that cannot be a
+        // Checkpoint project gets the same defaults a failed fetch does
+        if (!isValidCheckpointProjectId(projectId)) {
+            console.warn("[ConsentConfig] Project id is not a valid Checkpoint project id, using defaults");
+            return this.getDefaultConfig();
+        }
         const cache = this.env.TOOL_PROTECTION_KV;
         // Check cache first
         if (cache) {
             const cacheKey = `consent:config:${projectId}`;
             try {
-                const cached = await cache.get(cacheKey, "json");
+                const cached = (await cache.get(cacheKey, "json"));
                 if (cached) {
                     // ✅ Accept full config from cache (don't validate against limited contracts schema)
                     const mergedConfig = {
@@ -75,7 +88,7 @@ export class ConsentConfigService {
                 console.warn("[ConsentConfig] No API key configured, using defaults");
                 return this.getDefaultConfig();
             }
-            const response = await fetch(`${checkpointUrl}/api/v1/bouncer/projects/${projectId}/consent-config`, {
+            const response = await fetch(`${checkpointUrl}/api/v1/bouncer/projects/${encodeURIComponent(projectId)}/consent-config`, {
                 headers: {
                     Authorization: `Bearer ${apiKey}`,
                     "Content-Type": "application/json",
@@ -89,15 +102,17 @@ export class ConsentConfigService {
                 let configData;
                 // Log the raw response structure for debugging
                 console.error("[ConsentConfig] Raw API response structure:", {
-                    hasSuccess: 'success' in responseData,
-                    hasData: 'data' in responseData,
+                    hasSuccess: "success" in responseData,
+                    hasData: "data" in responseData,
                     dataKeys: responseData.data ? Object.keys(responseData.data) : null,
                 });
                 if (responseData.success && responseData.data) {
                     // Check if data has a nested 'config' property (older format)
                     const data = responseData.data;
                     // Note: typeof null === 'object', so we must also check !== null
-                    if ('config' in data && typeof data.config === 'object' && data.config !== null) {
+                    if ("config" in data &&
+                        typeof data.config === "object" &&
+                        data.config !== null) {
                         configData = data.config;
                     }
                     else {

package/dist/services/consent-config.service.js.map

@@ -1 +1 @@
-{"version":3,"file":"consent-config.service.js","sourceRoot":"","sources":["../../src/services/consent-config.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAoBzE;;GAEG;AACH,MAAM,wBAAwB,GAAG,GAAG,CAAC,CAAC,uBAAuB;AAE7D;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IACvB,GAAG,CAAgB;IAE3B,YAAY,GAAkB;QAC5B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAE1C,oBAAoB;QACpB,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,kBAAkB,SAAS,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAA6B,CAAC;gBAC7E,IAAI,MAAM,EAAE,CAAC;oBACX,oFAAoF;oBACpF,MAAM,YAAY,GAAsB;wBACtC,GAAG,MAAM;wBACT,uFAAuF;wBACvF,KAAK,EAAE,MAAM,CAAC,KAAK;4BACjB,CAAC,CAAC;gCACE,GAAG,aAAa;gCAChB,GAAG,MAAM,CAAC,KAAK;gCACf,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;6BACzD;4BACH,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE;qBACzB,CAAC;oBACF,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE;wBAC7D,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE;wBACxB,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC,WAAW;wBAC1C,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK;wBAC/B,aAAa,EAAE,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;qBAC9D,CAAC,CAAC;oBACH,OAAO,YAAY,CAAC;gBACtB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CACV,mDAAmD,EACnD,KAAK,CACN,CAAC;gBACF,yCAAyC;YAC3C,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,aAAa,GACjB,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,sBAAsB,CAAC;YACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjC,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,aAAa,4BAA4B,SAAS,iBAAiB,EACtE;gBACE,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,EAAE;oBACjC,cAAc,EAAE,kBAAkB;iBACnC;aACF,CACF,CAAC;YAEF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;gBAEnE,qDAAqD;gBACrD,6EAA6E;gBAC7E,8DAA8D;gBAC9D,IAAI,UAA6B,CAAC;gBAElC,+CAA+C;gBAC/C,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE;oBAC3D,UAAU,EAAE,SAAS,IAAI,YAAY;oBACrC,OAAO,EAAE,MAAM,IAAI,YAAY;oBAC/B,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;iBACpE,CAAC,CAAC;gBAEH,IAAI,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;oBAC9C,8DAA8D;oBAC9D,MAAM,IAAI,GAAG,YAAY,CAAC,IAA+B,CAAC;oBAC1D,iEAAiE;oBACjE,IAAI,QAAQ,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;wBAChF,UAAU,GAAG,IAAI,CAAC,MAA2B,CAAC;oBAChD,CAAC;yBAAM,CAAC;wBACN,oCAAoC;wBACpC,UAAU,GAAG,YAAY,CAAC,IAAyB,CAAC;oBACtD,CAAC;oBACD,OAAO,CAAC,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBAC5E,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;oBAC/E,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACjC,CAAC;gBAED,uEAAuE;gBACvE,kEAAkE;gBAClE,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE;oBACrD,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ;oBAClC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK;oBAC5B,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE;oBACtB,cAAc,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW;oBACxC,aAAa,EAAE,UAAU,CAAC,QAAQ,EAAE,YAAY;oBAChD,iBAAiB,EAAE,UAAU,CAAC,QAAQ,EAAE,cAAc;oBACtD,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK;oBAC7B,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;oBAC3D,cAAc,EAAE,UAAU,CAAC,WAAW,EAAE,kBAAkB;oBAC1D,gBAAgB,EAAE,UAAU,CAAC,WAAW,EAAE,cAAc;iBACzD,CAAC,CAAC;gBAEH,4EAA4E;gBAC5E,MAAM,MAAM,GAAsB;oBAChC,GAAG,UAAU,EAAE,mCAAmC;oBAClD,8FAA8F;oBAC9F,KAAK,EAAE,UAAU,CAAC,KAAK;wBACrB,CAAC,CAAC;4BACE,GAAG,aAAa;4BAChB,GAAG,UAAU,CAAC,KAAK;4BACnB,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;yBAC7D;wBACH,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE;iBACzB,CAAC;gBAEF,qCAAqC;gBACrC,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE;oBAC5D,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY;oBAC5C,iBAAiB,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc;oBAClD,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO;oBACzC,mBAAmB,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW;oBACjD,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;oBAC/C,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ;oBACrC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK;oBACzB,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;oBACvD,cAAc,EAAE,MAAM,CAAC,WAAW,EAAE,kBAAkB;oBACtD,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc;iBACrD,CAAC,CAAC;gBAEH,kCAAkC;gBAClC,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC;wBACH,MAAM,KAAK,CAAC,GAAG,CACb,kBAAkB,SAAS,EAAE,EAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,EAAE,aAAa,EAAE,wBAAwB,EAAE,CAC5C,CAAC;wBACF,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;oBAC/D,CAAC;oBAAC,OAAO,UAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,IAAI,CACV,iDAAiD,EACjD,UAAU,CACX,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnC,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CACV,qCAAqC,EACrC,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,UAAU,CACpB,CAAC;gBACF,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CACV,yDAAyD,EACzD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB;QACtB,gDAAgD;QAChD,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;QACzC,gEAAgE;QAChE,OAAO;YACL,GAAG,MAAM;YACT,KAAK,EAAE,EAAE,GAAG,aAAa,EAAE;SAC5B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,kBAAkB,SAAS,EAAE,CAAC;YAC/C,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,CAAC,KAAK,CACX,gDAAgD,EAChD,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"consent-config.service.js","sourceRoot":"","sources":["../../src/services/consent-config.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAE5E,OAAO,EAAE,uBAAuB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAsBzE;;GAEG;AACH,MAAM,wBAAwB,GAAG,GAAG,CAAC,CAAC,uBAAuB;AAE7D;;;;GAIG;AACH,MAAM,OAAO,oBAAoB;IACvB,GAAG,CAAgB;IAE3B,YAAY,GAAkB;QAC5B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QACtC,yEAAyE;QACzE,+DAA+D;QAC/D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjC,CAAC;QAED,mEAAmE;QACnE,qEAAqE;QACrE,gEAAgE;QAChE,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CACV,iFAAiF,CAClF,CAAC;YACF,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAE1C,oBAAoB;QACpB,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,QAAQ,GAAG,kBAAkB,SAAS,EAAE,CAAC;YAC/C,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,CAAC,MAAM,KAAK,CAAC,GAAG,CAC7B,QAAQ,EACR,MAAM,CACP,CAA6B,CAAC;gBAC/B,IAAI,MAAM,EAAE,CAAC;oBACX,oFAAoF;oBACpF,MAAM,YAAY,GAAsB;wBACtC,GAAG,MAAM;wBACT,uFAAuF;wBACvF,KAAK,EAAE,MAAM,CAAC,KAAK;4BACjB,CAAC,CAAC;gCACE,GAAG,aAAa;gCAChB,GAAG,MAAM,CAAC,KAAK;gCACf,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;6BACzD;4BACH,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE;qBACzB,CAAC;oBACF,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE;wBAC7D,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE;wBACxB,cAAc,EAAE,CAAC,CAAC,YAAY,CAAC,WAAW;wBAC1C,OAAO,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK;wBAC/B,aAAa,EAAE,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;qBAC9D,CAAC,CAAC;oBACH,OAAO,YAAY,CAAC;gBACtB,CAAC;YACH,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CACV,mDAAmD,EACnD,KAAK,CACN,CAAC;gBACF,yCAAyC;YAC3C,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC;YACH,MAAM,aAAa,GACjB,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,sBAAsB,CAAC;YACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;YAE3C,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,OAAO,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;gBACtE,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjC,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAC1B,GAAG,aAAa,4BAA4B,kBAAkB,CAAC,SAAS,CAAC,iBAAiB,EAC1F;gBACE,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,MAAM,EAAE;oBACjC,cAAc,EAAE,kBAAkB;iBACnC;aACF,CACF,CAAC;YAEF,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,YAAY,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;gBAEnE,qDAAqD;gBACrD,6EAA6E;gBAC7E,8DAA8D;gBAC9D,IAAI,UAA6B,CAAC;gBAElC,+CAA+C;gBAC/C,OAAO,CAAC,KAAK,CAAC,6CAA6C,EAAE;oBAC3D,UAAU,EAAE,SAAS,IAAI,YAAY;oBACrC,OAAO,EAAE,MAAM,IAAI,YAAY;oBAC/B,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;iBACpE,CAAC,CAAC;gBAEH,IAAI,YAAY,CAAC,OAAO,IAAI,YAAY,CAAC,IAAI,EAAE,CAAC;oBAC9C,8DAA8D;oBAC9D,MAAM,IAAI,GAAG,YAAY,CAAC,IAA+B,CAAC;oBAC1D,iEAAiE;oBACjE,IACE,QAAQ,IAAI,IAAI;wBAChB,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ;wBAC/B,IAAI,CAAC,MAAM,KAAK,IAAI,EACpB,CAAC;wBACD,UAAU,GAAG,IAAI,CAAC,MAA2B,CAAC;oBAChD,CAAC;yBAAM,CAAC;wBACN,oCAAoC;wBACpC,UAAU,GAAG,YAAY,CAAC,IAAyB,CAAC;oBACtD,CAAC;oBACD,OAAO,CAAC,KAAK,CACX,0DAA0D,CAC3D,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CACV,gEAAgE,CACjE,CAAC;oBACF,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACjC,CAAC;gBAED,uEAAuE;gBACvE,kEAAkE;gBAClE,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE;oBACrD,WAAW,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ;oBAClC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC,KAAK;oBAC5B,KAAK,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE;oBACtB,cAAc,EAAE,CAAC,CAAC,UAAU,CAAC,WAAW;oBACxC,aAAa,EAAE,UAAU,CAAC,QAAQ,EAAE,YAAY;oBAChD,iBAAiB,EAAE,UAAU,CAAC,QAAQ,EAAE,cAAc;oBACtD,OAAO,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK;oBAC7B,aAAa,EAAE,UAAU,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;oBAC3D,cAAc,EAAE,UAAU,CAAC,WAAW,EAAE,kBAAkB;oBAC1D,gBAAgB,EAAE,UAAU,CAAC,WAAW,EAAE,cAAc;iBACzD,CAAC,CAAC;gBAEH,4EAA4E;gBAC5E,MAAM,MAAM,GAAsB;oBAChC,GAAG,UAAU,EAAE,mCAAmC;oBAClD,8FAA8F;oBAC9F,KAAK,EAAE,UAAU,CAAC,KAAK;wBACrB,CAAC,CAAC;4BACE,GAAG,aAAa;4BAChB,GAAG,UAAU,CAAC,KAAK;4BACnB,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;yBAC7D;wBACH,CAAC,CAAC,EAAE,GAAG,aAAa,EAAE;iBACzB,CAAC;gBAEF,qCAAqC;gBACrC,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE;oBAC5D,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY;oBAC5C,iBAAiB,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc;oBAClD,eAAe,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO;oBACzC,mBAAmB,EAAE,MAAM,CAAC,QAAQ,EAAE,WAAW;oBACjD,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;oBAC/C,aAAa,EAAE,MAAM,CAAC,KAAK,EAAE,QAAQ;oBACrC,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK;oBACzB,aAAa,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC;oBACvD,cAAc,EAAE,MAAM,CAAC,WAAW,EAAE,kBAAkB;oBACtD,gBAAgB,EAAE,MAAM,CAAC,WAAW,EAAE,cAAc;iBACrD,CAAC,CAAC;gBAEH,kCAAkC;gBAClC,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,CAAC;wBACH,MAAM,KAAK,CAAC,GAAG,CACb,kBAAkB,SAAS,EAAE,EAC7B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,EAAE,aAAa,EAAE,wBAAwB,EAAE,CAC5C,CAAC;wBACF,OAAO,CAAC,KAAK,CAAC,6CAA6C,CAAC,CAAC;oBAC/D,CAAC;oBAAC,OAAO,UAAU,EAAE,CAAC;wBACpB,OAAO,CAAC,IAAI,CACV,iDAAiD,EACjD,UAAU,CACX,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,OAAO,MAAM,CAAC;YAChB,CAAC;iBAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnC,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;gBACnE,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjC,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,IAAI,CACV,qCAAqC,EACrC,QAAQ,CAAC,MAAM,EACf,QAAQ,CAAC,UAAU,CACpB,CAAC;gBACF,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CACV,yDAAyD,EACzD,KAAK,CACN,CAAC;YACF,OAAO,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACjC,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,gBAAgB;QACtB,gDAAgD;QAChD,MAAM,MAAM,GAAG,uBAAuB,EAAE,CAAC;QACzC,gEAAgE;QAChE,OAAO;YACL,GAAG,MAAM;YACT,KAAK,EAAE,EAAE,GAAG,aAAa,EAAE;SAC5B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe,CAAC,SAAiB;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,kBAAkB,SAAS,EAAE,CAAC;YAC/C,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC7B,OAAO,CAAC,KAAK,CACX,gDAAgD,EAChD,SAAS,CACV,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,6CAA6C,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;CACF"}

package/dist/services/consent.service.d.ts

@@ -17,6 +17,19 @@ export interface ConsentServiceOptions {
     /** Server-bound grant limits; see CloudflareRuntimeConfig.delegationMandate. */
     delegationMandate?: DelegationMandateProvider;
 }
+/**
+ * Thrown by `isOAuthRequired` when Checkpoint is in use (CHECKPOINT_API_KEY is
+ * set) but its answer about the project's sign-in provider cannot be read. The
+ * consent page refuses rather than render an approvable consent-only screen.
+ *
+ * `reason` is fixed text written here, plus at most an error's `name` or an
+ * HTTP status (never an upstream error message), so it is safe to log.
+ */
+export declare class OAuthRequirementUnavailableError extends Error {
+    readonly projectId: string;
+    readonly reason: string;
+    constructor(projectId: string, reason: string);
+}
 export declare class ConsentService {
     private configService;
     private renderer;
@@ -197,6 +210,22 @@ export declare class ConsentService {
      * Following spec: https://w3c-ccg.github.io/did-method-key/
      */
     private generateDidKeyFromPublicKey;
+    /**
+     * The session's own throwaway DID, or undefined.
+     *
+     * A session record also holds a signed-in user's DID once the OAuth callback
+     * or the credential handler has run (`updateSessionWithIdentity`), and that
+     * write keeps the earlier throwaway `keyPair`. So the DID counts as
+     * throwaway only when it is the did:key of the key pair stored with it.
+     */
+    private sessionThrowawayDid;
+    /**
+     * A fresh throwaway did:key and its key pair. Nothing is stored.
+     *
+     * @returns The key pair (its `did` is the throwaway DID), or null if key
+     *   generation fails
+     */
+    private createThrowawayIdentity;
     /**
      * Generate an ephemeral userDid for consent-only flows
      *
@@ -209,7 +238,10 @@ export declare class ConsentService {
      * and used for delegation storage during the current session.
      *
      * @param sessionId - Session ID to associate the ephemeral userDid with
-     * @returns Ephemeral userDid (did:key format) or null if generation fails
+     * @returns Ephemeral userDid (did:key format), or null if generation fails,
+     *   the session record can't be read before the write, or the session
+     *   already holds a signed-in user's DID (which is never returned or
+     *   overwritten here)
      */
     generateEphemeralUserDidForSession(sessionId: string): Promise<string | null>;
     /**
@@ -251,17 +283,51 @@ export declare class ConsentService {
     /**
      * Check if OAuth is required for delegation creation
      *
-     * Determines if OAuth flow should be used instead of direct delegation creation.
-     * OAuth is required if:
-     * - Project has OAuth provider configured in Checkpoint
+     * Determines if a sign-in step must come before consent.
+     * Sign-in is required if:
+     * - Project has a default sign-in provider configured in Checkpoint
      * - No OAuth identity is present in the request
      *
+     * A "credential" default provider (a merchant's own sign-in form) counts as
+     * required too. `true` never forces an OAuth redirect by itself: the consent
+     * page renders the credential form instead whenever the provider has a
+     * credential config.
+     *
      * @param projectId - Project ID to check
      * @param oauthIdentity - Optional OAuth identity from cookie
      * @param toolOAuthProvider - Optional tool-specific OAuth provider (takes precedence)
-     * @returns True if OAuth redirect is required
+     * @returns True if a sign-in step is required
+     * @throws OAuthRequirementUnavailableError when CHECKPOINT_API_KEY is set
+     *   and Checkpoint's config cannot be read (request failed or timed out,
+     *   non-OK status, unparseable body, or no `oauth` field), whatever
+     *   `toolProtection` says
+     *
+     * @example
+     * // Checkpoint answers { success: true, data: { config: { oauth: { provider: "github", type: "oauth2" } } } }
+     * await consentService.isOAuthRequired("proj123", undefined, undefined, {
+     *   requiresDelegation: true,
+     *   requiredScopes: ["cart:write"],
+     * }); // true
      */
     isOAuthRequired(projectId: string, oauthIdentity?: OAuthIdentity, toolOAuthProvider?: string, toolProtection?: import("@kya-os/contracts/tool-protection").ToolProtection): Promise<boolean>;
+    /**
+     * `isOAuthRequired`, plus the project's default provider when Checkpoint's
+     * config is what made sign-in required. The consent page names that
+     * provider so the OAuth callback signs it into the identity assertion,
+     * without asking Checkpoint a second time.
+     *
+     * @throws OAuthRequirementUnavailableError as `isOAuthRequired` does
+     */
+    private resolveSignInRequirement;
+    /**
+     * Fetch the project's default sign-in provider from Checkpoint's config
+     * (`GET /api/v1/bouncer/projects/{projectId}/config`, `data.config.oauth`).
+     *
+     * @returns The provider, or null when Checkpoint says the project has none
+     * @throws OAuthRequirementUnavailableError when the answer cannot be read
+     */
+    private fetchProjectDefaultProvider;
+    private oauthRequirementErrorResponse;
     /**
      * Build OAuth authorization URL
      *
@@ -420,6 +486,41 @@ export declare class ConsentService {
      * "no identity resolved at all".
      */
     private identityAssertionRequiredResponse;
+    /**
+     * 400 returned by `handleApproval` when `provider_type` is missing or not
+     * one of the routes in approval-route.ts. Nothing is minted.
+     */
+    private unsupportedProviderTypeResponse;
+    /**
+     * 503 returned by `handleApproval` when a consent-only approval has a
+     * session but no throwaway DID could be made or reused (key generation or a
+     * session read failed). Nothing is minted; the user can retry.
+     */
+    private identityUnavailableResponse;
+    /** A non-empty string, or undefined. */
+    private optionalString;
+    /**
+     * The provider signed into an identity assertion. Call ONLY after
+     * `verifyIdentityAssertion` accepted the same token: this decodes the
+     * payload and does not check the signature again.
+     */
+    private readAssertionProvider;
+    /**
+     * Keep a credential sign-in's display fields server-side for the clickwrap
+     * that follows. Expires with the identity assertion. Best effort: without
+     * it the delegation falls back to showing the user DID.
+     */
+    private storeCredentialClickwrapUser;
+    /**
+     * The display fields `storeCredentialClickwrapUser` kept for this session,
+     * only when they belong to `userDid` (the asserted user).
+     */
+    private readCredentialClickwrapUser;
+    /**
+     * The OAuth identity the callback recorded on this session, only when the
+     * session's user is `userDid` (the asserted user). Used for display fields.
+     */
+    private readSessionOAuthUser;
     /**
      * Handle consent approval
      *
@@ -434,6 +535,9 @@ export declare class ConsentService {
      * Create delegation via Checkpoint API
      *
      * @param request - Approval request
+     * @param signingKeyPair - Key that signs the delegation VC when the user DID
+     *   is a throwaway identity not stored on the session (consent-only in a
+     *   signed-in session). Otherwise the session's own key is used.
      * @returns Delegation creation result
      */
     private createDelegation;
@@ -475,6 +579,10 @@ export declare class ConsentService {
      *   persisting so the call-time enforcement gate (Task B2/B3) reads a
      *   consistent value ("password" | "oauth2" | "none" | …). Undefined → the
      *   field is omitted and the gate fails safe (never satisfies a typed tool).
+     * @param keepSessionUserDid - Keep the session record's existing userDid
+     *   instead of overwriting it with this delegation's: set when a
+     *   consent-only grant in a signed-in session was minted under a fresh
+     *   throwaway DID, so the session keeps its signed-in identity.
      */
     private storeDelegationToken;
     /**

package/dist/services/consent.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consent.service.d.ts","sourceRoot":"","sources":["../../src/services/consent.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAepD,OAAO,KAAK,EAIV,aAAa,EACd,MAAM,2BAA2B,CAAC;AAYnC,OAAO,EAYL,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EAGV,yBAAyB,EAC1B,MAAM,WAAW,CAAC;AAyDnB,iEAAiE;AACjE,MAAM,WAAW,qBAAqB;IACpC,gFAAgF;IAChF,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;CAC/C;AAgBD,qBAAa,cAAc;IACzB,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAmB;IACnC,OAAO,CAAC,GAAG,CAAgB;IAC3B,OAAO,CAAC,OAAO,CAAC,CAAoB;IACpC,OAAO,CAAC,cAAc,CAAC,CAAiB;IAGxC,OAAO,CAAC,YAAY,CAAC,CAAsB;IAC3C,OAAO,CAAC,gBAAgB,CAAC,CAAgB;IAGzC,OAAO,CAAC,gBAAgB,CAAC,CAAmD;IAC5E,OAAO,CAAC,gBAAgB,CAAC,CAAwD;IAEjF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAA4B;IAE/D;;;OAGG;gBAED,GAAG,EAAE,aAAa,EAClB,OAAO,CAAC,EAAE,iBAAiB,EAC3B,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,EAAE,gBAAgB,EACnE,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,EAAE,qBAAqB,EACxE,OAAO,GAAE,qBAA0B;IAYrC;;;;;;;;;;OAUG;YACW,cAAc;IAuB5B,OAAO,CAAC,oBAAoB;IAO5B;;;;;;;OAOG;YACW,eAAe;IAmC7B;;;;;;;OAOG;IACG,mBAAmB,CAAC,KAAK,EAAE;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KACzD,GAAG,OAAO,CAAC,IAAI,CAAC;IAMX,kBAAkB,CAAC,KAAK,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjB;;;;;;;;;;;;OAYG;IACG,uBAAuB,CAC3B,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QAEjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,EACD,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,OAAO,CAAC;IAYnB;;;;;OAKG;YACW,sBAAsB;IAwCpC;;;;;;;;;;OAUG;YACW,sBAAsB;IAqEpC;;;;;;;;;;;;;;OAcG;IACU,oBAAoB,CAC/B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkFzB;;;;;;;;;;;OAWG;YACW,iCAAiC;IA0D/C;;;;;;;;;OASG;IACU,yBAAyB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,IAAI,CAAC;IAuIhB;;;;;;;;;OASG;IACU,oBAAoB,CAC/B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAsE9B;;;;;;;;;;;;;;OAcG;IACU,yBAAyB,CACpC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA0F9B;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAInC;;;;;;;;;;;;;OAaG;IACU,kCAAkC,CAC7C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAmGzB;;;;;;;;;;;;;OAaG;IACU,iBAAiB,CAC5B,UAAU,EAAE,gBAAgB,EAC5B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,EACpC,eAAe,CAAC,EAAE,WAAW,GAAG,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA4DzB;;;;;;;;;;;;;;;;OAgBG;IACU,kBAAkB,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,GACA,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC;IAwJjD;;;;;;;;;;;;OAYG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,EAC7B,iBAAiB,CAAC,EAAE,MAAM,EAC1B,cAAc,CAAC,EAAE,OAAO,mCAAmC,EAAE,cAAc,GAC1E,OAAO,CAAC,OAAO,CAAC;IA+HnB;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EAAE,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,6DAA6D;IAChF,oBAAoB,CAAC,EAAE,OAAO,0BAA0B,EAAE,oBAAoB,EAC9E,SAAS,CAAC,EAAE,MAAM,EAAE,qDAAqD;IACzE,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC;IA6QlB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,mBAAmB;IAuB3B;;;;;;;;;;;OAWG;IACG,kBAAkB,CACtB,aAAa,EAAE,aAAa,EAC5B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC;IAyElB;;;;;;;;;;OAUG;IACG,oBAAoB,CACxB,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAgFhB;;;;;;;;;;OAUG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAqCjD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kBAAkB;IAkB1B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,8BAA8B;IAYtC;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAetB;;;;;;;;;;;;;OAaG;YACW,iBAAiB;IA02B/B;;;;;;;;OAQG;YACW,gBAAgB;IA2lC9B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAO1B;;;;;;OAMG;IACH,OAAO,CAAC,iCAAiC;IAczC;;;;;;;;OAQG;YACW,cAAc;IA+kB5B;;;;;OAKG;YACW,gBAAgB;IAsV9B;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;;;;;;;;OASG;YACW,oBAAoB;IAqElC;;;;;;;;;;;;;;;;;OAiBG;YACW,oBAAoB;IAiLlC;;;;;OAKG;YACW,iBAAiB;IAmC/B;;;;OAIG;YACW,sBAAsB;IAwFpC;;;;;;;;;OASG;YACW,wBAAwB;IAgiBtC;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IA2BnB;;;;;;;OAOG;YACW,2BAA2B;IAkGzC;;;;;;;;;OASG;IACH,OAAO,CAAC,2BAA2B;IA4GnC;;OAEG;YACW,yBAAyB;IAsDvC;;OAEG;YACW,oBAAoB;IAmDlC;;;;;;;;;;;OAWG;YACW,2BAA2B;IAyDzC;;;;;;;;;OASG;IACU,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkCzE;;;;;OAKG;YACW,eAAe;IAgB7B;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAI7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAK7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAY3B;;;;;;;;;;;;;;;;;;;OAmBG;IACI,oBAAoB,IAAI,OAAO;IAYtC;;;;;;;;;;;;OAYG;YACW,UAAU;IAWxB;;;;;;;;OAQG;YACW,mBAAmB;IAgBjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACU,qBAAqB,CAAC,MAAM,EAAE;QACzC,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,MAAM,CAAC;IA8BnB;;;;;;;;;;;;;;;;;OAiBG;IACU,6BAA6B,CACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE;QACR,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAMX,uBAAuB;IAgHrC;;OAEG;YACW,sBAAsB;IAmJpC;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IAMnB;;;;;;;;;OASG;IACH,OAAO,CAAC,4BAA4B;IAqLpC;;OAEG;YACW,UAAU;IAwDxB;;;;;OAKG;YACW,WAAW;IA0GzB;;OAEG;YACW,qBAAqB;CAsBpC"}
+{"version":3,"file":"consent.service.d.ts","sourceRoot":"","sources":["../../src/services/consent.service.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAC9C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAoBpD,OAAO,KAAK,EAIV,aAAa,EACd,MAAM,2BAA2B,CAAC;AAYnC,OAAO,EAYL,KAAK,8BAA8B,EACnC,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,EAKL,KAAK,WAAW,EACjB,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EAGV,yBAAyB,EAC1B,MAAM,WAAW,CAAC;AAuEnB,iEAAiE;AACjE,MAAM,WAAW,qBAAqB;IACpC,gFAAgF;IAChF,iBAAiB,CAAC,EAAE,yBAAyB,CAAC;CAC/C;AAkCD;;;;;;;GAOG;AACH,qBAAa,gCAAiC,SAAQ,KAAK;aAEvC,SAAS,EAAE,MAAM;aACjB,MAAM,EAAE,MAAM;gBADd,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM;CAOjC;AAuDD,qBAAa,cAAc;IACzB,OAAO,CAAC,aAAa,CAAuB;IAC5C,OAAO,CAAC,QAAQ,CAAmB;IACnC,OAAO,CAAC,GAAG,CAAgB;IAC3B,OAAO,CAAC,OAAO,CAAC,CAAoB;IACpC,OAAO,CAAC,cAAc,CAAC,CAAiB;IAGxC,OAAO,CAAC,YAAY,CAAC,CAAsB;IAC3C,OAAO,CAAC,gBAAgB,CAAC,CAAgB;IAGzC,OAAO,CAAC,gBAAgB,CAAC,CAAmD;IAC5E,OAAO,CAAC,gBAAgB,CAAC,CAAwD;IAEjF,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAA4B;IAE/D;;;OAGG;gBAED,GAAG,EAAE,aAAa,EAClB,OAAO,CAAC,EAAE,iBAAiB,EAC3B,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,EAAE,gBAAgB,EACnE,gBAAgB,CAAC,EAAE,OAAO,uBAAuB,EAAE,qBAAqB,EACxE,OAAO,GAAE,qBAA0B;IAYrC;;;;;;;;;;OAUG;YACW,cAAc;IA0B5B,OAAO,CAAC,oBAAoB;IAO5B;;;;;;;OAOG;YACW,eAAe;IAmC7B;;;;;;;OAOG;IACG,mBAAmB,CAAC,KAAK,EAAE;QAC/B,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE;YAAE,QAAQ,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;KACzD,GAAG,OAAO,CAAC,IAAI,CAAC;IAMX,kBAAkB,CAAC,KAAK,EAAE;QAC9B,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMjB;;;;;;;;;;;;OAYG;IACG,uBAAuB,CAC3B,MAAM,EAAE;QACN,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,EAAE,MAAM,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,OAAO,CAAC,EAAE,MAAM,CAAC;QAEjB,iBAAiB,CAAC,EAAE,MAAM,CAAC;KAC5B,EACD,YAAY,CAAC,EAAE,MAAM,GACpB,OAAO,CAAC,OAAO,CAAC;IAYnB;;;;;OAKG;YACW,sBAAsB;IAwCpC;;;;;;;;;;OAUG;YACW,sBAAsB;IAqEpC;;;;;;;;;;;;;;OAcG;IACU,oBAAoB,CAC/B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkFzB;;;;;;;;;;;OAWG;YACW,iCAAiC;IA0D/C;;;;;;;;;OASG;IACU,yBAAyB,CACpC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,IAAI,CAAC;IAuIhB;;;;;;;;;OASG;IACU,oBAAoB,CAC/B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAsE9B;;;;;;;;;;;;;;OAcG;IACU,yBAAyB,CACpC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,aAAa,GAC3B,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IA0F9B;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAInC;;;;;;;OAOG;IACH,OAAO,CAAC,mBAAmB;IAiB3B;;;;;OAKG;YACW,uBAAuB;IAmBrC;;;;;;;;;;;;;;;;OAgBG;IACU,kCAAkC,CAC7C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAkHzB;;;;;;;;;;;;;OAaG;IACU,iBAAiB,CAC5B,UAAU,EAAE,gBAAgB,EAC5B,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,EACpC,eAAe,CAAC,EAAE,WAAW,GAAG,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA4DzB;;;;;;;;;;;;;;;;OAgBG;IACU,kBAAkB,CAC7B,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE;QACR,aAAa,CAAC,EAAE,OAAO,CAAC;QACxB,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,GACA,OAAO,CAAC,8BAA8B,GAAG,IAAI,CAAC;IAwJjD;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACG,eAAe,CACnB,SAAS,EAAE,MAAM,EACjB,aAAa,CAAC,EAAE,aAAa,EAC7B,iBAAiB,CAAC,EAAE,MAAM,EAC1B,cAAc,CAAC,EAAE,OAAO,mCAAmC,EAAE,cAAc,GAC1E,OAAO,CAAC,OAAO,CAAC;IAUnB;;;;;;;OAOG;YACW,wBAAwB;IAoItC;;;;;;OAMG;YACW,2BAA2B;IAgEzC,OAAO,CAAC,6BAA6B;IAUrC;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,MAAM,EAAE,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,EAAE,6DAA6D;IAChF,oBAAoB,CAAC,EAAE,OAAO,0BAA0B,EAAE,oBAAoB,EAC9E,SAAS,CAAC,EAAE,MAAM,EAAE,qDAAqD;IACzE,IAAI,CAAC,EAAE,MAAM,GACZ,OAAO,CAAC,MAAM,CAAC;IA4QlB;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,mBAAmB;IAuB3B;;;;;;;;;;;OAWG;IACG,kBAAkB,CACtB,aAAa,EAAE,aAAa,EAC5B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC;IAyElB;;;;;;;;;;OAUG;IACG,oBAAoB,CACxB,aAAa,EAAE,aAAa,EAC5B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAgFhB;;;;;;;;;;OAUG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IAqCjD;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,CAAC,kBAAkB;IAkB1B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,8BAA8B;IAYtC;;;;OAIG;IACH,OAAO,CAAC,cAAc;IAetB;;;;;;;;;;;;;OAaG;YACW,iBAAiB;IAs5B/B;;;;;;;;OAQG;YACW,gBAAgB;IAkiB9B;;;;;OAKG;IACH,OAAO,CAAC,kBAAkB;IAO1B;;;;;;OAMG;IACH,OAAO,CAAC,iCAAiC;IAczC;;;OAGG;IACH,OAAO,CAAC,+BAA+B;IAcvC;;;;OAIG;IACH,OAAO,CAAC,2BAA2B;IAenC,wCAAwC;IACxC,OAAO,CAAC,cAAc;IAMtB;;;;OAIG;IACH,OAAO,CAAC,qBAAqB;IAc7B;;;;OAIG;YACW,4BAA4B;IAqB1C;;;OAGG;YACW,2BAA2B;IAyBzC;;;OAGG;YACW,oBAAoB;IA4BlC;;;;;;;;OAQG;YACW,cAAc;IA8nB5B;;;;;;;;OAQG;YACW,gBAAgB;IA4V9B;;;;;;;;OAQG;IACH,OAAO,CAAC,qBAAqB;IAQ7B;;;;;;;;;OASG;YACW,oBAAoB;IAqElC;;;;;;;;;;;;;;;;;;;;;OAqBG;YACW,oBAAoB;IAoLlC;;;;;OAKG;YACW,iBAAiB;IAmC/B;;;;OAIG;YACW,sBAAsB;IAwFpC;;;;;;;;;OASG;YACW,wBAAwB;IAyiBtC;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IA2BnB;;;;;;;OAOG;YACW,2BAA2B;IAiGzC;;;;;;;;;OASG;IACH,OAAO,CAAC,2BAA2B;IA4GnC;;OAEG;YACW,yBAAyB;IAqDvC;;OAEG;YACW,oBAAoB;IAmDlC;;;;;;;;;;;OAWG;YACW,2BAA2B;IAyDzC;;;;;;;;;OASG;IACU,wBAAwB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAkCzE;;;;;OAKG;YACW,eAAe;IAgB7B;;OAEG;IACH,OAAO,CAAC,eAAe;IAOvB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAI7B;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAK7B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAY3B;;;;;;;;;;;;;;;;;;;OAmBG;IACI,oBAAoB,IAAI,OAAO;IAYtC;;;;;;;;;;;;OAYG;YACW,UAAU;IAWxB;;;;;;;;OAQG;YACW,mBAAmB;IAgBjC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACU,qBAAqB,CAAC,MAAM,EAAE;QACzC,GAAG,EAAE,MAAM,CAAC;QACZ,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,MAAM,CAAC;IA8BnB;;;;;;;;;;;;;;;;;OAiBG;IACU,6BAA6B,CACxC,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE;QACR,GAAG,EAAE,MAAM,CAAC;QACZ,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;YAMX,uBAAuB;IAgHrC;;OAEG;YACW,sBAAsB;IAmJpC;;;;;;;;;OASG;IACH,OAAO,CAAC,WAAW;IAMnB;;;;;;;;;OASG;IACH,OAAO,CAAC,4BAA4B;IAqLpC;;OAEG;YACW,UAAU;IAwDxB;;;;;OAKG;YACW,WAAW;IA0GzB;;OAEG;YACW,qBAAqB;CAsBpC"}