@levr-one/auth 1.0.0

package/dist/oauth-client.js

@@ -0,0 +1,572 @@
+/**
+ * OAuth 2.0 client for TQ MCP servers
+ * Implements authorization code flow with PKCE (RFC 7636)
+ */
+import * as crypto from 'crypto';
+import * as http from 'http';
+import { URL } from 'url';
+import { loadTokens, saveTokens, clearTokens, restoreTokensFromBackup, } from './token-store.js';
+import { acquireFileLock, getLockPath } from './file-lock.js';
+import { saveWorkspace, clearWorkspace } from './workspace-store.js';
+import { loadConfig } from './config.js';
+/**
+ * OAuth 2.0 client with PKCE support
+ */
+/**
+ * Number of consecutive 400/401 refresh failures before clearing tokens.
+ * A single transient backend error (restart, DB hiccup) returns 400 but the
+ * refresh token may still be valid. Only clear after repeated failures.
+ */
+const CLEAR_TOKENS_AFTER_FAILURES = 3;
+export class OAuthClient {
+    config;
+    accessToken = null;
+    refreshToken = null;
+    expiresAt = 0;
+    consecutiveRefreshFailures = 0;
+    /**
+     * Set when refresh is definitively rejected (400/401).
+     * Prevents further network refresh attempts until re-authorization
+     * or fresh tokens are loaded via setTokensFromStorage/authorize.
+     */
+    refreshRejected = false;
+    /**
+     * Deduplicates concurrent refresh calls. When multiple callers invoke
+     * refresh() simultaneously (e.g., parallel MCP tool requests), they
+     * all await the same in-flight promise instead of each firing a
+     * separate token rotation request — which would cause the second
+     * request to fail with invalid_grant (token already revoked by first).
+     */
+    refreshPromise = null;
+    constructor(config) {
+        // Resolve defaults from unified config (staging default)
+        const tqConfig = loadConfig();
+        const defaults = {
+            authServerUrl: tqConfig.apiUrl,
+            redirectPort: 6274,
+            scopes: ['read:own', 'write:own'],
+        };
+        this.config = {
+            ...defaults,
+            ...config,
+        };
+        // Try to load stored tokens on initialization
+        this.loadStoredTokens();
+    }
+    /**
+     * Load tokens from persistent storage
+     */
+    loadStoredTokens() {
+        const stored = loadTokens();
+        if (stored) {
+            this.accessToken = stored.accessToken;
+            this.refreshToken = stored.refreshToken;
+            this.expiresAt = stored.expiresAt;
+        }
+    }
+    /**
+     * Set tokens from external storage (used during initialization)
+     */
+    setTokensFromStorage(tokens) {
+        this.accessToken = tokens.accessToken;
+        this.refreshToken = tokens.refreshToken;
+        this.expiresAt = tokens.expiresAt;
+        // Fresh tokens from external source clear the rejection flag
+        this.refreshRejected = false;
+    }
+    /**
+     * Generate PKCE code verifier and challenge
+     * @see https://datatracker.ietf.org/doc/html/rfc7636
+     */
+    generatePKCE() {
+        // Code verifier: 43-128 character random string
+        const verifier = crypto.randomBytes(32).toString('base64url');
+        // Code challenge: base64url(SHA256(verifier))
+        const challenge = crypto
+            .createHash('sha256')
+            .update(verifier)
+            .digest('base64url');
+        return { verifier, challenge };
+    }
+    /**
+     * Start local HTTP server to receive OAuth callback
+     */
+    async waitForCallback(port, expectedState) {
+        return new Promise((resolve, reject) => {
+            const server = http.createServer((req, res) => {
+                const url = new URL(req.url, `http://localhost:${port}`);
+                const code = url.searchParams.get('code');
+                const error = url.searchParams.get('error');
+                const state = url.searchParams.get('state');
+                // Validate state parameter to prevent CSRF
+                if (state !== expectedState) {
+                    res.writeHead(400, { 'Content-Type': 'text/html' });
+                    res.end(`
+            <html>
+              <body style="font-family: system-ui; padding: 40px; text-align: center;">
+                <h1>Authorization Failed</h1>
+                <p>Invalid state parameter. This may be a security issue.</p>
+              </body>
+            </html>
+          `);
+                    server.close();
+                    reject(new Error('Invalid state parameter'));
+                    return;
+                }
+                if (error) {
+                    const errorDescription = url.searchParams.get('error_description');
+                    res.writeHead(400, { 'Content-Type': 'text/html' });
+                    res.end(`
+            <html>
+              <body style="font-family: system-ui; padding: 40px; text-align: center;">
+                <h1>Authorization Failed</h1>
+                <p>${errorDescription || error}</p>
+              </body>
+            </html>
+          `);
+                    server.close();
+                    reject(new Error(errorDescription || error));
+                    return;
+                }
+                if (code) {
+                    res.writeHead(200, { 'Content-Type': 'text/html' });
+                    res.end(`
+            <html>
+              <body style="font-family: system-ui; padding: 40px; text-align: center;">
+                <h1>Authorization Successful!</h1>
+                <p>You can close this window and return to your terminal.</p>
+                <script>setTimeout(() => window.close(), 2000);</script>
+              </body>
+            </html>
+          `);
+                    server.close();
+                    resolve(code);
+                    return;
+                }
+                // Unknown request
+                res.writeHead(404);
+                res.end('Not found');
+            });
+            server.listen(port, () => {
+                console.log(`[tq-oauth] OAuth callback server listening on port ${port}`);
+            });
+            // Timeout after 2 minutes
+            const timeout = setTimeout(() => {
+                server.close();
+                reject(new Error('Authorization timeout - no response received'));
+            }, 120000);
+            server.on('close', () => {
+                clearTimeout(timeout);
+            });
+        });
+    }
+    /**
+     * Perform full OAuth authorization flow
+     * Opens browser for user to authorize, waits for callback
+     */
+    async authorize() {
+        const { verifier, challenge } = this.generatePKCE();
+        const state = crypto.randomBytes(16).toString('hex');
+        const redirectUri = `http://localhost:${this.config.redirectPort}/oauth/callback`;
+        // Build authorization URL (uses versioned API route)
+        const authUrl = new URL('/v1/oauth/authorize', this.config.authServerUrl);
+        authUrl.searchParams.set('response_type', 'code');
+        authUrl.searchParams.set('client_id', this.config.clientId);
+        authUrl.searchParams.set('redirect_uri', redirectUri);
+        authUrl.searchParams.set('scope', this.config.scopes.join(' '));
+        authUrl.searchParams.set('state', state);
+        authUrl.searchParams.set('code_challenge', challenge);
+        authUrl.searchParams.set('code_challenge_method', 'S256');
+        // Open browser for user authorization
+        console.log('[tq-oauth] Opening browser for authorization...');
+        console.log(`[tq-oauth] If browser doesn't open, visit: ${authUrl.toString()}`);
+        // Dynamic import of 'open' package (ESM)
+        // unref() the child process so it doesn't keep the event loop alive
+        const open = (await import('open')).default;
+        const cp = await open(authUrl.toString());
+        cp.unref();
+        // Wait for callback with authorization code
+        const code = await this.waitForCallback(this.config.redirectPort, state);
+        // Exchange code for tokens
+        await this.exchangeCode(code, verifier, redirectUri);
+        // Fresh authorization clears any prior rejection
+        this.refreshRejected = false;
+        console.log('[tq-oauth] Authorization successful!');
+    }
+    /**
+     * Perform OAuth 2.0 Device Authorization Grant (RFC 8628).
+     * Works in headless/remote terminals — no browser redirect needed.
+     * Displays a URL and code for the user to authorize on any device.
+     */
+    async authorizeDevice() {
+        // 1. Request device code
+        const deviceUrl = new URL('/v1/oauth/device/authorize', this.config.authServerUrl);
+        const deviceRes = await fetch(deviceUrl.toString(), {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: new URLSearchParams({
+                client_id: this.config.clientId,
+                scope: this.config.scopes.join(' '),
+            }),
+        });
+        if (!deviceRes.ok) {
+            const body = await deviceRes.text();
+            throw new Error(`Device authorization request failed (${deviceRes.status}): ${body}`);
+        }
+        const device = (await deviceRes.json());
+        // 2. Display code and URL (stderr to keep stdout clean for piped output)
+        console.error(`\nVisit:      ${device.verification_uri}`);
+        console.error(`Enter code: ${device.user_code}\n`);
+        // 3. Poll for token
+        let interval = device.interval;
+        const deadline = Date.now() + device.expires_in * 1000;
+        const tokenUrl = new URL('/v1/oauth/token', this.config.authServerUrl);
+        while (Date.now() < deadline) {
+            await new Promise((r) => setTimeout(r, interval * 1000));
+            const res = await fetch(tokenUrl.toString(), {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: new URLSearchParams({
+                    grant_type: 'urn:ietf:params:oauth:grant-type:device_code',
+                    device_code: device.device_code,
+                    client_id: this.config.clientId,
+                }),
+            });
+            if (res.ok) {
+                const tokens = (await res.json());
+                this.setTokens(tokens);
+                this.refreshRejected = false;
+                return;
+            }
+            const bodyText = await res.text();
+            let error;
+            try {
+                error = JSON.parse(bodyText).error;
+            }
+            catch {
+                throw new Error(`Device flow polling failed (${res.status}): ${bodyText}`);
+            }
+            switch (error) {
+                case 'authorization_pending':
+                    continue;
+                case 'slow_down':
+                    interval += 5;
+                    continue;
+                case 'expired_token':
+                    throw new Error('Device code expired. Please try again.');
+                case 'access_denied':
+                    throw new Error('Authorization denied by user.');
+                default:
+                    throw new Error(`Device flow error: ${error}`);
+            }
+        }
+        throw new Error('Device code expired. Please try again.');
+    }
+    /**
+     * Exchange authorization code for access and refresh tokens
+     */
+    async exchangeCode(code, codeVerifier, redirectUri) {
+        const tokenUrl = new URL('/v1/oauth/token', this.config.authServerUrl);
+        const body = new URLSearchParams({
+            grant_type: 'authorization_code',
+            code,
+            redirect_uri: redirectUri,
+            client_id: this.config.clientId,
+            code_verifier: codeVerifier,
+        });
+        const response = await fetch(tokenUrl.toString(), {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: body.toString(),
+        });
+        if (!response.ok) {
+            const errorBody = await response.text();
+            throw new Error(`Token exchange failed: ${response.status} ${response.statusText} - ${errorBody}`);
+        }
+        const tokens = (await response.json());
+        this.setTokens(tokens);
+    }
+    /**
+     * Refresh access token using refresh token.
+     *
+     * Two layers of coordination:
+     *   1. In-process: `refreshPromise` dedups concurrent callers within
+     *      this OAuthClient instance.
+     *   2. Cross-process: a file lock keyed on apiBaseUrl serializes
+     *      refreshes across MCP server processes. On lock acquire, we
+     *      re-read the on-disk token — if another process already
+     *      refreshed while we waited, adopt their tokens and skip the
+     *      network call. This avoids the "N processes all POST with the
+     *      same refresh_token, all but one get invalid_grant" race that
+     *      would otherwise exhaust consecutiveRefreshFailures and trigger
+     *      clearTokens().
+     */
+    async refresh() {
+        // If a refresh is already in flight in THIS process, piggyback on it
+        if (this.refreshPromise) {
+            return this.refreshPromise;
+        }
+        // Pre-flight checks (synchronous — safe before dedup)
+        if (!this.refreshToken) {
+            // Last resort: try restoring from backup before giving up
+            if (restoreTokensFromBackup()) {
+                this.loadStoredTokens();
+                if (this.refreshToken) {
+                    console.error('[tq-oauth] Recovered refresh token from backup, retrying...');
+                    return this.refresh();
+                }
+            }
+            throw new Error('No refresh token available - authorization required');
+        }
+        if (this.refreshRejected) {
+            throw new Error('Refresh token was rejected - re-authorization required');
+        }
+        // Create the deduplication promise — wraps lock acquire + conditional
+        // refresh + release in a single await-able unit.
+        this.refreshPromise = this.refreshWithLock().finally(() => {
+            this.refreshPromise = null;
+        });
+        return this.refreshPromise;
+    }
+    /**
+     * Acquire the cross-process refresh lock, re-check disk state, and
+     * either adopt freshly-rotated tokens from disk or call the refresh
+     * endpoint. Always releases the lock.
+     */
+    async refreshWithLock() {
+        const lockPath = getLockPath(this.config.authServerUrl);
+        const tokenBeforeLock = this.accessToken;
+        const lock = await acquireFileLock(lockPath).catch((err) => {
+            // Lock acquisition failed outright — fall back to unlocked refresh.
+            // Better to race than to block indefinitely if the lock subsystem
+            // itself is broken (e.g. disk full, permissions, etc.).
+            console.error('[tq-oauth] File lock acquire failed; proceeding without lock:', err instanceof Error ? err.message : String(err));
+            return null;
+        });
+        if (lock?.brokeStaleLock) {
+            console.error('[tq-oauth] Broke stale refresh lock (previous holder likely crashed)');
+        }
+        try {
+            // Check if another process refreshed while we waited for the lock
+            const onDisk = loadTokens();
+            if (onDisk &&
+                onDisk.accessToken &&
+                onDisk.accessToken !== tokenBeforeLock &&
+                onDisk.expiresAt > Date.now()) {
+                // Another process won the race — adopt their tokens instead of
+                // rotating ours (which would now 400 with invalid_grant since
+                // our refresh_token was already consumed by the winner).
+                this.accessToken = onDisk.accessToken;
+                this.refreshToken = onDisk.refreshToken;
+                this.expiresAt = onDisk.expiresAt;
+                this.refreshRejected = false;
+                this.consecutiveRefreshFailures = 0;
+                return;
+            }
+            // Nobody else refreshed — do it ourselves
+            await this.refreshInternal();
+        }
+        finally {
+            lock?.release();
+        }
+    }
+    /**
+     * Internal refresh implementation — called only once per dedup window.
+     * All concurrent callers share the same promise via refresh().
+     */
+    async refreshInternal() {
+        const tokenUrl = new URL('/v1/oauth/token', this.config.authServerUrl);
+        const body = new URLSearchParams({
+            grant_type: 'refresh_token',
+            refresh_token: this.refreshToken,
+            client_id: this.config.clientId,
+        });
+        let response;
+        try {
+            response = await fetch(tokenUrl.toString(), {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+                body: body.toString(),
+            });
+        }
+        catch (fetchError) {
+            // Network error — backend is unreachable. NEVER clear tokens for this.
+            throw new Error(`Token refresh failed (network error: ${fetchError instanceof Error ? fetchError.message : String(fetchError)}) - will retry`);
+        }
+        if (!response.ok) {
+            if (response.status === 400 || response.status === 401) {
+                this.consecutiveRefreshFailures++;
+                console.error(`[tq-oauth] Refresh rejected (${response.status}), ` +
+                    `failure ${this.consecutiveRefreshFailures}/${CLEAR_TOKENS_AFTER_FAILURES}`);
+                // Only clear tokens after CLEAR_TOKENS_AFTER_FAILURES consecutive
+                // 400/401 responses. A single failure could be a transient backend
+                // issue (restart, DB connection drop) where the refresh token is
+                // still valid.
+                if (this.consecutiveRefreshFailures >= CLEAR_TOKENS_AFTER_FAILURES) {
+                    console.error('[tq-oauth] Clearing tokens after ' +
+                        `${this.consecutiveRefreshFailures} consecutive failures`);
+                    this.accessToken = null;
+                    this.refreshToken = null;
+                    this.expiresAt = 0;
+                    this.refreshRejected = true;
+                    clearTokens();
+                    this.consecutiveRefreshFailures = 0;
+                    throw new Error('Refresh token rejected by server after multiple attempts - re-authorization required');
+                }
+                // Not enough consecutive failures yet — clear in-memory access token
+                // but keep the file on disk so next retry uses the same refresh token.
+                this.accessToken = null;
+                this.expiresAt = 0;
+                throw new Error(`Token refresh failed (${response.status}) - will retry ` +
+                    `(${CLEAR_TOKENS_AFTER_FAILURES - this.consecutiveRefreshFailures} attempts remaining)`);
+            }
+            // 5xx or other non-auth errors — transient, don't count as rejections
+            throw new Error(`Token refresh failed (${response.status}) - will retry`);
+        }
+        // Success — reset failure counter and rejected flag
+        this.consecutiveRefreshFailures = 0;
+        this.refreshRejected = false;
+        const tokens = (await response.json());
+        this.setTokens(tokens);
+    }
+    /**
+     * Store tokens in memory and persist to disk.
+     *
+     * Non-refresh grants (authorization_code, device_code, password) carry
+     * `tokens.user.workspace_id` — the workspace the user just logged into.
+     * Refresh grants omit it. When present we persist it to ~/.tq/workspace.json
+     * so MCP clients pick up the selected workspace without a separate round-trip.
+     */
+    setTokens(tokens) {
+        this.accessToken = tokens.access_token;
+        this.refreshToken = tokens.refresh_token;
+        // Expire 1 minute early to avoid edge cases
+        this.expiresAt = Date.now() + tokens.expires_in * 1000 - 60000;
+        // Persist to disk (keyed by apiBaseUrl in the token map)
+        saveTokens({
+            accessToken: this.accessToken,
+            refreshToken: this.refreshToken,
+            expiresAt: this.expiresAt,
+            apiBaseUrl: this.config.authServerUrl,
+        });
+        if (tokens.user?.workspace_id) {
+            try {
+                saveWorkspace(tokens.user.workspace_id);
+            }
+            catch (err) {
+                console.error('[tq-oauth] Failed to persist workspace:', err);
+            }
+        }
+    }
+    /**
+     * Get a valid access token, refreshing if needed
+     * Note: Does NOT auto-authorize - throws if no tokens available
+     */
+    async getAccessToken() {
+        // No access token but refresh token available — try refresh
+        if (!this.accessToken && this.refreshToken) {
+            await this.refresh();
+            return this.accessToken;
+        }
+        // No token at all - need to authorize
+        if (!this.accessToken) {
+            throw new Error('No access token available - authorization required');
+        }
+        // Token expired - try to refresh
+        if (Date.now() >= this.expiresAt) {
+            await this.refresh();
+        }
+        return this.accessToken;
+    }
+    /**
+     * Get access token without auto-refresh (for checking current state)
+     */
+    getAccessTokenSync() {
+        return this.accessToken;
+    }
+    /**
+     * Check if client has valid tokens
+     */
+    isAuthorized() {
+        return this.accessToken !== null && Date.now() < this.expiresAt;
+    }
+    /**
+     * Check if tokens exist (may be expired)
+     */
+    hasTokens() {
+        return this.accessToken !== null;
+    }
+    /**
+     * Attempt a proactive (background) refresh without accumulating toward
+     * the nuclear clearTokens() threshold. If refresh fails, the failure
+     * counter is reset so background timer ticks can never delete the
+     * token file. Only critical-path refreshes (from getAccessToken /
+     * ensureAuth) should count toward the threshold.
+     *
+     * @returns true if refresh succeeded, false otherwise
+     */
+    async refreshProactive() {
+        try {
+            await this.refresh();
+            return true;
+        }
+        catch {
+            // Reset counter — proactive failures must never accumulate toward
+            // the CLEAR_TOKENS_AFTER_FAILURES threshold that deletes the file.
+            this.consecutiveRefreshFailures = 0;
+            return false;
+        }
+    }
+    /**
+     * Clear all tokens (logout). Also clears the persisted workspace selection
+     * so the next login starts from a clean state on shared machines.
+     */
+    clearTokens() {
+        this.accessToken = null;
+        this.refreshToken = null;
+        this.expiresAt = 0;
+        clearTokens();
+        clearWorkspace();
+    }
+    /**
+     * Get token expiration time
+     */
+    getExpiresAt() {
+        return this.expiresAt;
+    }
+    /**
+     * Get current refresh token (for storage)
+     */
+    getRefreshToken() {
+        return this.refreshToken;
+    }
+    /**
+     * Get time until expiration in milliseconds
+     */
+    getTimeUntilExpiry() {
+        return this.expiresAt - Date.now();
+    }
+    /**
+     * Check if token is expiring soon (within given minutes)
+     */
+    isExpiringSoon(withinMinutes = 5) {
+        const threshold = withinMinutes * 60 * 1000;
+        const timeUntilExpiry = this.getTimeUntilExpiry();
+        return timeUntilExpiry > 0 && timeUntilExpiry < threshold;
+    }
+    /**
+     * Check if refresh was definitively rejected (token revoked/invalid).
+     * When true, no further refresh attempts will be made until
+     * re-authorization or fresh tokens are loaded.
+     */
+    isRefreshRejected() {
+        return this.refreshRejected;
+    }
+    /**
+     * Reload tokens from storage (useful after external refresh)
+     */
+    reloadTokens() {
+        this.loadStoredTokens();
+    }
+}
+//# sourceMappingURL=oauth-client.js.map

package/dist/oauth-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client.js","sourceRoot":"","sources":["../src/oauth-client.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,CAAC;AAC1B,OAAO,EACL,UAAU,EACV,UAAU,EACV,WAAW,EACX,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAQzC;;GAEG;AACH;;;;GAIG;AACH,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAEtC,MAAM,OAAO,WAAW;IACd,MAAM,CAAc;IACpB,WAAW,GAAkB,IAAI,CAAC;IAClC,YAAY,GAAkB,IAAI,CAAC;IACnC,SAAS,GAAW,CAAC,CAAC;IACtB,0BAA0B,GAAW,CAAC,CAAC;IAC/C;;;;OAIG;IACK,eAAe,GAAY,KAAK,CAAC;IACzC;;;;;;OAMG;IACK,cAAc,GAAyB,IAAI,CAAC;IAEpD,YAAY,MAAmD;QAC7D,yDAAyD;QACzD,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAyB;YACrC,aAAa,EAAE,QAAQ,CAAC,MAAM;YAC9B,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,CAAC,UAAU,EAAE,WAAW,CAAC;SAClC,CAAC;QAEF,IAAI,CAAC,MAAM,GAAG;YACZ,GAAG,QAAQ;YACX,GAAG,MAAM;SACK,CAAC;QAEjB,8CAA8C;QAC9C,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,gBAAgB;QACtB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YACtC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;YACxC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QACpC,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,MAAoB;QACvC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QACtC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,6DAA6D;QAC7D,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACK,YAAY;QAClB,gDAAgD;QAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAE9D,8CAA8C;QAC9C,MAAM,SAAS,GAAG,MAAM;aACrB,UAAU,CAAC,QAAQ,CAAC;aACpB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC,WAAW,CAAC,CAAC;QAEvB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IACjC,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,eAAe,CAC3B,IAAY,EACZ,aAAqB;QAErB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;gBAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAI,EAAE,oBAAoB,IAAI,EAAE,CAAC,CAAC;gBAC1D,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC1C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBAE5C,2CAA2C;gBAC3C,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;oBAC5B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;WAOP,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;oBAC7C,OAAO;gBACT,CAAC;gBAED,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;oBACnE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC;;;;qBAIG,gBAAgB,IAAI,KAAK;;;WAGnC,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,KAAK,CAAC,gBAAgB,IAAI,KAAK,CAAC,CAAC,CAAC;oBAC7C,OAAO;gBACT,CAAC;gBAED,IAAI,IAAI,EAAE,CAAC;oBACT,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;WAQP,CAAC,CAAC;oBACH,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,IAAI,CAAC,CAAC;oBACd,OAAO;gBACT,CAAC;gBAED,kBAAkB;gBAClB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;gBACvB,OAAO,CAAC,GAAG,CACT,sDAAsD,IAAI,EAAE,CAC7D,CAAC;YACJ,CAAC,CAAC,CAAC;YAEH,0BAA0B;YAC1B,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,MAAM,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC,CAAC;YACpE,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;gBACtB,YAAY,CAAC,OAAO,CAAC,CAAC;YACxB,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrD,MAAM,WAAW,GAAG,oBAAoB,IAAI,CAAC,MAAM,CAAC,YAAY,iBAAiB,CAAC;QAElF,qDAAqD;QACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC1E,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACtD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC;QACtD,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAE1D,sCAAsC;QACtC,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;QAC/D,OAAO,CAAC,GAAG,CACT,8CAA8C,OAAO,CAAC,QAAQ,EAAE,EAAE,CACnE,CAAC;QAEF,yCAAyC;QACzC,oEAAoE;QACpE,MAAM,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1C,EAAE,CAAC,KAAK,EAAE,CAAC;QAEX,4CAA4C;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QAEzE,2BAA2B;QAC3B,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;QAErD,iDAAiD;QACjD,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;IACtD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe;QACnB,yBAAyB;QACzB,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,4BAA4B,EAC5B,IAAI,CAAC,MAAM,CAAC,aAAa,CAC1B,CAAC;QAEF,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE;YAClD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACxB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;gBAC/B,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aACpC,CAAC;SACH,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CACb,wCAAwC,SAAS,CAAC,MAAM,MAAM,IAAI,EAAE,CACrE,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAgC,CAAC;QAEvE,yEAAyE;QACzE,OAAO,CAAC,KAAK,CAAC,iBAAiB,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,KAAK,CAAC,eAAe,MAAM,CAAC,SAAS,IAAI,CAAC,CAAC;QAEnD,oBAAoB;QACpB,IAAI,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEvE,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC;YAEzD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE;gBAC3C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,eAAe,CAAC;oBACxB,UAAU,EAAE,8CAA8C;oBAC1D,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAChC,CAAC;aACH,CAAC,CAAC;YAEH,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAkB,CAAC;gBACnD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACvB,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;gBAC7B,OAAO;YACT,CAAC;YAED,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,KAAa,CAAC;YAClB,IAAI,CAAC;gBACH,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAuB,CAAC,KAAK,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACb,+BAA+B,GAAG,CAAC,MAAM,MAAM,QAAQ,EAAE,CAC1D,CAAC;YACJ,CAAC;YAED,QAAQ,KAAK,EAAE,CAAC;gBACd,KAAK,uBAAuB;oBAC1B,SAAS;gBACX,KAAK,WAAW;oBACd,QAAQ,IAAI,CAAC,CAAC;oBACd,SAAS;gBACX,KAAK,eAAe;oBAClB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;gBAC5D,KAAK,eAAe;oBAClB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACnD;oBACE,MAAM,IAAI,KAAK,CAAC,sBAAsB,KAAK,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;QAED,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,YAAY,CACxB,IAAY,EACZ,YAAoB,EACpB,WAAmB;QAEnB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEvE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,oBAAoB;YAChC,IAAI;YACJ,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC/B,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE;YAChD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,0BAA0B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CAClF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;QACxD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED;;;;;;;;;;;;;;OAcG;IACH,KAAK,CAAC,OAAO;QACX,qEAAqE;QACrE,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,cAAc,CAAC;QAC7B,CAAC;QAED,sDAAsD;QACtD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,0DAA0D;YAC1D,IAAI,uBAAuB,EAAE,EAAE,CAAC;gBAC9B,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACxB,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBACtB,OAAO,CAAC,KAAK,CACX,6DAA6D,CAC9D,CAAC;oBACF,OAAO,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxB,CAAC;YACH,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QAED,sEAAsE;QACtE,iDAAiD;QACjD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACxD,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,eAAe;QAC3B,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACxD,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;YAClE,oEAAoE;YACpE,kEAAkE;YAClE,wDAAwD;YACxD,OAAO,CAAC,KAAK,CACX,+DAA+D,EAC/D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CACjD,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CACX,sEAAsE,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,kEAAkE;YAClE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IACE,MAAM;gBACN,MAAM,CAAC,WAAW;gBAClB,MAAM,CAAC,WAAW,KAAK,eAAe;gBACtC,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAC7B,CAAC;gBACD,+DAA+D;gBAC/D,8DAA8D;gBAC9D,yDAAyD;gBACzD,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBACtC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;gBACxC,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBAClC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;gBAC7B,IAAI,CAAC,0BAA0B,GAAG,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YAED,0CAA0C;YAC1C,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;QAC/B,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,KAAK,CAAC,eAAe;QAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAEvE,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;YAC/B,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,IAAI,CAAC,YAAa;YACjC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;SAChC,CAAC,CAAC;QAEH,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE;gBAC1C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;gBAChE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;aACtB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,UAAU,EAAE,CAAC;YACpB,uEAAuE;YACvE,MAAM,IAAI,KAAK,CACb,wCAAwC,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,gBAAgB,CAC9H,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvD,IAAI,CAAC,0BAA0B,EAAE,CAAC;gBAElC,OAAO,CAAC,KAAK,CACX,gCAAgC,QAAQ,CAAC,MAAM,KAAK;oBAClD,WAAW,IAAI,CAAC,0BAA0B,IAAI,2BAA2B,EAAE,CAC9E,CAAC;gBAEF,kEAAkE;gBAClE,mEAAmE;gBACnE,iEAAiE;gBACjE,eAAe;gBACf,IAAI,IAAI,CAAC,0BAA0B,IAAI,2BAA2B,EAAE,CAAC;oBACnE,OAAO,CAAC,KAAK,CACX,mCAAmC;wBACjC,GAAG,IAAI,CAAC,0BAA0B,uBAAuB,CAC5D,CAAC;oBACF,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;oBACxB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;oBACzB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;oBACnB,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC;oBAC5B,WAAW,EAAE,CAAC;oBACd,IAAI,CAAC,0BAA0B,GAAG,CAAC,CAAC;oBACpC,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;gBACJ,CAAC;gBAED,qEAAqE;gBACrE,uEAAuE;gBACvE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;gBACnB,MAAM,IAAI,KAAK,CACb,yBAAyB,QAAQ,CAAC,MAAM,iBAAiB;oBACvD,IAAI,2BAA2B,GAAG,IAAI,CAAC,0BAA0B,sBAAsB,CAC1F,CAAC;YACJ,CAAC;YAED,sEAAsE;YACtE,MAAM,IAAI,KAAK,CAAC,yBAAyB,QAAQ,CAAC,MAAM,gBAAgB,CAAC,CAAC;QAC5E,CAAC;QAED,oDAAoD;QACpD,IAAI,CAAC,0BAA0B,GAAG,CAAC,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,KAAK,CAAC;QAC7B,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAkB,CAAC;QACxD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACK,SAAS,CAAC,MAAqB;QACrC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC,aAAa,CAAC;QACzC,4CAA4C;QAC5C,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,GAAG,KAAK,CAAC;QAE/D,yDAAyD;QACzD,UAAU,CAAC;YACT,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;SACtC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,IAAI,EAAE,YAAY,EAAE,CAAC;YAC9B,IAAI,CAAC;gBACH,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,GAAG,CAAC,CAAC;YAChE,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc;QAClB,4DAA4D;QAC5D,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC,WAAY,CAAC;QAC3B,CAAC;QAED,sCAAsC;QACtC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,iCAAiC;QACjC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACvB,CAAC;QAED,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,WAAW,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC;IACnC,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,gBAAgB;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,CAAC,0BAA0B,GAAG,CAAC,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,WAAW;QACT,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;QACnB,WAAW,EAAE,CAAC;QACd,cAAc,EAAE,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,kBAAkB;QAChB,OAAO,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACrC,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,gBAAwB,CAAC;QACtC,MAAM,SAAS,GAAG,aAAa,GAAG,EAAE,GAAG,IAAI,CAAC;QAC5C,MAAM,eAAe,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QAClD,OAAO,eAAe,GAAG,CAAC,IAAI,eAAe,GAAG,SAAS,CAAC;IAC5D,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,eAAe,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC1B,CAAC;CACF"}

package/dist/oauth-client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=oauth-client.test.d.ts.map

package/dist/oauth-client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-client.test.d.ts","sourceRoot":"","sources":["../src/oauth-client.test.ts"],"names":[],"mappings":""}