@masmarino/gabarit 1.4.0 → 2.1.0

package/fesm2022/masmarino-gabarit-auth-login.mjs

@@ -0,0 +1,467 @@
+import * as i0 from "@angular/core";
+import { ChangeDetectionStrategy, Component, ElementRef, Injector, computed, contentChild, inject, input, output, signal } from "@angular/core";
+import { takeUntilDestroyed } from "@angular/core/rxjs-interop";
+import * as i1 from "@angular/forms";
+import { FormsModule } from "@angular/forms";
+import { EMPTY, from, switchMap } from "rxjs";
+import { Button } from "@masmarino/gabarit/button";
+import { Divider } from "@masmarino/gabarit/divider";
+import { GbtInput } from "@masmarino/gabarit/input";
+import { Alert } from "@masmarino/gabarit/alert";
+import { AUTH_PORT, AuthFooter, AuthFooterLink, AuthPanel, DEFAULT_LOGIN_LABELS, authLabels, classifyMfaFailure, classifyPasskeyError, focusAfterRender, getPasskeyAssertion, isAuthPortError, passkeysSupported } from "@masmarino/gabarit/auth";
+import { MfaEnrollment } from "@masmarino/gabarit/mfa-enrollment";
+let nextId = 0;
+var AuthLogin = class AuthLogin {
+	auth = inject(AUTH_PORT);
+	host = inject(ElementRef);
+	injector = inject(Injector);
+	labels = input({}, ...ngDevMode ? [{ debugName: "labels" }] : /* istanbul ignore next */ []);
+	loggedIn = output();
+	text = authLabels("login", DEFAULT_LOGIN_LABELS, this.labels);
+	registerLink = contentChild(AuthFooterLink, ...ngDevMode ? [{ debugName: "registerLink" }] : /* istanbul ignore next */ []);
+	id = `gbt-login-${nextId++}`;
+	username = signal("", ...ngDevMode ? [{ debugName: "username" }] : /* istanbul ignore next */ []);
+	password = signal("", ...ngDevMode ? [{ debugName: "password" }] : /* istanbul ignore next */ []);
+	error = signal("", ...ngDevMode ? [{ debugName: "error" }] : /* istanbul ignore next */ []);
+	submitting = signal(false, ...ngDevMode ? [{ debugName: "submitting" }] : /* istanbul ignore next */ []);
+	mfaToken = signal(null, ...ngDevMode ? [{ debugName: "mfaToken" }] : /* istanbul ignore next */ []);
+	mfaSetupRequired = signal(false, ...ngDevMode ? [{ debugName: "mfaSetupRequired" }] : /* istanbul ignore next */ []);
+	mfaHasTotp = signal(false, ...ngDevMode ? [{ debugName: "mfaHasTotp" }] : /* istanbul ignore next */ []);
+	mfaHasPasskey = signal(false, ...ngDevMode ? [{ debugName: "mfaHasPasskey" }] : /* istanbul ignore next */ []);
+	useBackupCode = signal(false, ...ngDevMode ? [{ debugName: "useBackupCode" }] : /* istanbul ignore next */ []);
+	code = signal("", ...ngDevMode ? [{ debugName: "code" }] : /* istanbul ignore next */ []);
+	backupCode = signal("", ...ngDevMode ? [{ debugName: "backupCode" }] : /* istanbul ignore next */ []);
+	registrationEnabled = signal(false, ...ngDevMode ? [{ debugName: "registrationEnabled" }] : /* istanbul ignore next */ []);
+	passkeysAvailable = signal(null, ...ngDevMode ? [{ debugName: "passkeysAvailable" }] : /* istanbul ignore next */ []);
+	browserHasPasskeys = signal(false, ...ngDevMode ? [{ debugName: "browserHasPasskeys" }] : /* istanbul ignore next */ []);
+	passkeyInFlight = signal(false, ...ngDevMode ? [{ debugName: "passkeyInFlight" }] : /* istanbul ignore next */ []);
+	ceremony = 0;
+	errorVariant = signal("error", ...ngDevMode ? [{ debugName: "errorVariant" }] : /* istanbul ignore next */ []);
+	enrolling = computed(() => this.mfaToken() !== null && this.mfaSetupRequired(), ...ngDevMode ? [{ debugName: "enrolling" }] : /* istanbul ignore next */ []);
+	challenging = computed(() => this.mfaToken() !== null && !this.mfaSetupRequired(), ...ngDevMode ? [{ debugName: "challenging" }] : /* istanbul ignore next */ []);
+	canUsePasskey = computed(() => this.mfaHasPasskey() && this.browserHasPasskeys() && this.passkeysAvailable() !== false, ...ngDevMode ? [{ debugName: "canUsePasskey" }] : /* istanbul ignore next */ []);
+	hasTotp = computed(() => this.mfaHasTotp() || !this.mfaHasPasskey(), ...ngDevMode ? [{ debugName: "hasTotp" }] : /* istanbul ignore next */ []);
+	passkeyBlocked = computed(() => this.challenging() && this.mfaHasPasskey() && !this.hasTotp() && !this.canUsePasskey(), ...ngDevMode ? [{ debugName: "passkeyBlocked" }] : /* istanbul ignore next */ []);
+	showBackupCode = computed(() => this.useBackupCode() || this.passkeyBlocked(), ...ngDevMode ? [{ debugName: "showBackupCode" }] : /* istanbul ignore next */ []);
+	blockedReason = computed(() => this.browserHasPasskeys() ? this.text().blockedByServer : this.text().blockedByBrowser, ...ngDevMode ? [{ debugName: "blockedReason" }] : /* istanbul ignore next */ []);
+	backFromBackupLabel = computed(() => {
+		const text = this.text();
+		if (this.canUsePasskey()) return this.hasTotp() ? text.backToPasskeyOrApp : text.backToPasskey;
+		return text.backToApp;
+	}, ...ngDevMode ? [{ debugName: "backFromBackupLabel" }] : /* istanbul ignore next */ []);
+	heading = computed(() => {
+		if (this.enrolling()) return this.text().enrollmentHeading;
+		return this.challenging() ? this.text().challengeHeading : this.text().heading;
+	}, ...ngDevMode ? [{ debugName: "heading" }] : /* istanbul ignore next */ []);
+	intro = computed(() => {
+		const text = this.text();
+		if (this.enrolling()) return "";
+		if (!this.challenging()) return text.intro;
+		if (this.showBackupCode()) return text.introBackupCode;
+		if (this.canUsePasskey()) return this.hasTotp() ? text.introPasskeyOrCode : text.introPasskey;
+		return text.introCode;
+	}, ...ngDevMode ? [{ debugName: "intro" }] : /* istanbul ignore next */ []);
+	constructor() {
+		this.focusField("username");
+		this.auth.authConfig().pipe(takeUntilDestroyed()).subscribe({
+			next: (config) => {
+				this.registrationEnabled.set(config.registrationEnabled === true);
+				this.passkeysAvailable.set(config.passkeysAvailable === true);
+			},
+			error: () => this.registrationEnabled.set(false)
+		});
+	}
+	submit() {
+		if (this.submitting()) return;
+		this.error.set("");
+		this.submitting.set(true);
+		this.auth.login(this.username(), this.password()).subscribe({
+			next: (res) => {
+				this.password.set("");
+				this.submitting.set(false);
+				if (res.token) this.loggedIn.emit();
+				else if (res.mfaToken) {
+					this.mfaSetupRequired.set(res.mfaSetupRequired === true);
+					this.mfaHasTotp.set(res.mfaHasTotp === true);
+					this.mfaHasPasskey.set(res.mfaHasPasskey === true);
+					this.browserHasPasskeys.set(passkeysSupported());
+					this.mfaToken.set(res.mfaToken);
+					if (!this.mfaSetupRequired()) this.focusField(this.firstChallengeTarget());
+				} else this.fail(this.text().loginFailed, "password");
+			},
+			error: (err) => {
+				this.submitting.set(false);
+				this.fail(this.loginFailureMessage(err), "password");
+			}
+		});
+	}
+	loginFailureMessage(err) {
+		const status = isAuthPortError(err) ? err.status : null;
+		if (status === 401) return this.text().wrongCredentials;
+		if (status === 429) return this.text().tooManyAttempts;
+		return this.text().loginFailed;
+	}
+	verify() {
+		if (this.submitting()) return;
+		const mfaToken = this.mfaToken();
+		const backup = this.showBackupCode();
+		const value = (backup ? this.backupCode() : this.code()).replace(/\s+/g, "");
+		const field = backup ? "mfa-backup-code" : "mfa-code";
+		if (mfaToken === null) return;
+		if (value === "") {
+			this.fail(backup ? this.text().enterBackupCode : this.text().enterCode, field);
+			return;
+		}
+		this.error.set("");
+		this.submitting.set(true);
+		const proof = backup ? { backupCode: value } : { code: value };
+		this.auth.verifyMfa(mfaToken, proof).subscribe({
+			next: () => {
+				this.submitting.set(false);
+				this.resetMfa();
+				this.loggedIn.emit();
+			},
+			error: (err) => {
+				this.submitting.set(false);
+				const failure = classifyMfaFailure(err);
+				if (failure === "expired") {
+					this.sessionExpired();
+					return;
+				}
+				if (failure === "wrong-code") {
+					this.code.set("");
+					this.backupCode.set("");
+				}
+				const text = this.text();
+				this.fail(failure === "rate-limited" ? text.tooManyAttempts : failure === "wrong-code" ? text.wrongCode : text.verifyFailed, field);
+			}
+		});
+	}
+	usePasskey() {
+		const mfaToken = this.mfaToken();
+		if (this.submitting() || mfaToken === null) return;
+		this.error.set("");
+		this.submitting.set(true);
+		this.passkeyInFlight.set(true);
+		const run = ++this.ceremony;
+		this.auth.startPasskeyChallenge(mfaToken).pipe(switchMap(({ challengeId, publicKey }) => run !== this.ceremony ? EMPTY : from(getPasskeyAssertion(publicKey)).pipe(switchMap((credential) => run === this.ceremony ? this.auth.finishPasskeyChallenge(mfaToken, challengeId, credential) : EMPTY)))).subscribe({
+			next: () => {
+				this.submitting.set(false);
+				this.passkeyInFlight.set(false);
+				this.resetMfa();
+				this.loggedIn.emit();
+			},
+			error: (err) => {
+				if (run !== this.ceremony) return;
+				this.submitting.set(false);
+				this.passkeyInFlight.set(false);
+				this.passkeyFailed(err);
+			}
+		});
+	}
+	passkeyFailed(err) {
+		const text = this.text();
+		if (!isAuthPortError(err)) switch (classifyPasskeyError(err)) {
+			case "cancelled":
+				this.fail(text.cancelled, "mfa-passkey", "info");
+				return;
+			case "unsupported":
+				this.fail(text.browserUnsupported, "mfa-passkey");
+				return;
+			default:
+				this.fail(text.verifyFailed, "mfa-passkey");
+				return;
+		}
+		switch (classifyMfaFailure(err)) {
+			case "expired":
+				this.sessionExpired();
+				return;
+			case "wrong-code":
+				this.fail(text.passkeyRefused, "mfa-passkey");
+				return;
+			case "rate-limited":
+				this.fail(text.tooManyAttempts, "mfa-passkey");
+				return;
+			case "unavailable":
+				this.fail(text.passkeysUnavailable, "mfa-passkey");
+				return;
+			default: this.fail(text.verifyFailed, "mfa-passkey");
+		}
+	}
+	toggleBackupCode() {
+		this.error.set("");
+		this.useBackupCode.update((backup) => !backup);
+		this.focusField(this.useBackupCode() ? "mfa-backup-code" : this.firstChallengeTarget());
+	}
+	firstChallengeTarget() {
+		if (this.showBackupCode()) return "mfa-backup-code";
+		return this.canUsePasskey() ? "mfa-passkey" : "mfa-code";
+	}
+	backToCredentials() {
+		this.resetMfa();
+		this.error.set("");
+		this.focusField("password");
+	}
+	sessionExpired() {
+		this.resetMfa();
+		this.fail(this.text().loginExpired, "password");
+	}
+	enrolled(token) {
+		this.auth.setToken(token);
+		this.resetMfa();
+		this.loggedIn.emit();
+	}
+	resetMfa() {
+		this.ceremony++;
+		this.submitting.set(false);
+		this.passkeyInFlight.set(false);
+		this.mfaToken.set(null);
+		this.mfaSetupRequired.set(false);
+		this.mfaHasTotp.set(false);
+		this.mfaHasPasskey.set(false);
+		this.useBackupCode.set(false);
+		this.code.set("");
+		this.backupCode.set("");
+	}
+	fail(message, focusSuffix, variant = "error") {
+		this.errorVariant.set(variant);
+		this.error.set(message);
+		this.focusField(focusSuffix);
+	}
+	focusField(suffix) {
+		focusAfterRender(this.host, this.injector, `#${this.id}-${suffix}`, { nestedFallback: "button" });
+	}
+	static ɵfac = i0.ɵɵngDeclareFactory({
+		minVersion: "12.0.0",
+		version: "22.2.0",
+		ngImport: i0,
+		type: AuthLogin,
+		deps: [],
+		target: i0.ɵɵFactoryTarget.Component
+	});
+	static ɵcmp = i0.ɵɵngDeclareComponent({
+		minVersion: "17.0.0",
+		version: "22.2.0",
+		type: AuthLogin,
+		isStandalone: true,
+		selector: "gbt-auth-login",
+		inputs: { labels: {
+			classPropertyName: "labels",
+			publicName: "labels",
+			isSignal: true,
+			isRequired: false,
+			transformFunction: null
+		} },
+		outputs: { loggedIn: "loggedIn" },
+		queries: [{
+			propertyName: "registerLink",
+			first: true,
+			predicate: AuthFooterLink,
+			descendants: true,
+			isSignal: true
+		}],
+		ngImport: i0,
+		template: "<gbt-auth-panel [heading]=\"heading()\" [intro]=\"intro()\" [wide]=\"enrolling()\">\n  <ng-container ngProjectAs=\"[auth-backdrop]\"><ng-content select=\"[auth-backdrop]\" /></ng-container>\n  <ng-container ngProjectAs=\"[auth-logo]\"><ng-content select=\"[auth-logo]\" /></ng-container>\n\n  @if (mfaToken() === null) {\n    <form class=\"gbt-auth-panel__form\" (ngSubmit)=\"submit()\">\n      <ng-content select=\"[auth-notice]\" />\n      @if (error()) {\n        <gbt-alert variant=\"error\" appearance=\"subtle\" iconAlign=\"start\">{{ error() }}</gbt-alert>\n      }\n\n      <gbt-input\n        [id]=\"id + '-username'\"\n        name=\"username\"\n        autocomplete=\"username\"\n        [label]=\"text().username\"\n        [ngModel]=\"username()\"\n        (ngModelChange)=\"username.set($event)\"\n      />\n      <gbt-input\n        [id]=\"id + '-password'\"\n        type=\"password\"\n        name=\"password\"\n        autocomplete=\"current-password\"\n        [label]=\"text().password\"\n        [showPasswordLabel]=\"text().showPassword\"\n        [hidePasswordLabel]=\"text().hidePassword\"\n        [ngModel]=\"password()\"\n        (ngModelChange)=\"password.set($event)\"\n      />\n\n      <gbt-button\n        class=\"gbt-auth-panel__submit\"\n        block\n        type=\"submit\"\n        size=\"large\"\n        [text]=\"text().submit\"\n        [loading]=\"submitting()\"\n        [loadingLabel]=\"text().submitting\"\n      />\n    </form>\n\n    @if (registrationEnabled() && registerLink()) {\n      <gbt-auth-footer [text]=\"text().registerPrompt\"\n        ><ng-content select=\"[gbtAuthFooterLink]\"\n      /></gbt-auth-footer>\n    }\n  } @else if (enrolling()) {\n    <gbt-mfa-enrollment\n      [mfaToken]=\"mfaToken()!\"\n      [passkeysAvailable]=\"passkeysAvailable() === true\"\n      (completed)=\"enrolled($event)\"\n      (cancelled)=\"backToCredentials()\"\n      (expired)=\"sessionExpired()\"\n    />\n  } @else {\n    <form class=\"gbt-auth-panel__form\" (ngSubmit)=\"verify()\">\n      @if (passkeyBlocked()) {\n        <gbt-alert variant=\"warning\" appearance=\"subtle\" iconAlign=\"start\" live=\"off\">{{\n          blockedReason()\n        }}</gbt-alert>\n      }\n      @if (error()) {\n        <gbt-alert [variant]=\"errorVariant()\" appearance=\"subtle\" iconAlign=\"start\">{{\n          error()\n        }}</gbt-alert>\n      }\n      @if (passkeyInFlight()) {\n        <gbt-alert variant=\"info\" appearance=\"subtle\" iconAlign=\"start\" live=\"polite\">{{\n          text().passkeyPrompt\n        }}</gbt-alert>\n      }\n\n      @if (showBackupCode()) {\n        <gbt-input\n          [id]=\"id + '-mfa-backup-code'\"\n          inputmode=\"text\"\n          [spellcheck]=\"false\"\n          autocapitalize=\"off\"\n          enterkeyhint=\"go\"\n          name=\"backupCode\"\n          autocomplete=\"off\"\n          [label]=\"text().backupCodeLabel\"\n          [ngModel]=\"backupCode()\"\n          (ngModelChange)=\"backupCode.set($event)\"\n        />\n\n        <gbt-button\n          class=\"gbt-auth-panel__submit\"\n          block\n          type=\"submit\"\n          size=\"large\"\n          [text]=\"text().verify\"\n          [loading]=\"submitting()\"\n          [loadingLabel]=\"text().verifying\"\n        />\n      } @else {\n        @if (canUsePasskey()) {\n          <gbt-button\n            [attr.id]=\"id + '-mfa-passkey'\"\n            class=\"gbt-auth-panel__submit\"\n            block\n            size=\"large\"\n            iconName=\"key\"\n            [text]=\"text().usePasskey\"\n            [loading]=\"passkeyInFlight()\"\n            [disabled]=\"submitting() && !passkeyInFlight()\"\n            [loadingLabel]=\"text().passkeyValidating\"\n            (clicked)=\"usePasskey()\"\n          />\n        }\n\n        @if (canUsePasskey() && hasTotp()) {\n          <gbt-divider [label]=\"text().or\" />\n        }\n\n        @if (hasTotp()) {\n          <gbt-input\n            [id]=\"id + '-mfa-code'\"\n            inputmode=\"numeric\"\n            [spellcheck]=\"false\"\n            autocapitalize=\"off\"\n            enterkeyhint=\"go\"\n            name=\"code\"\n            autocomplete=\"one-time-code\"\n            [label]=\"text().codeLabel\"\n            [ngModel]=\"code()\"\n            (ngModelChange)=\"code.set($event)\"\n          />\n\n          <gbt-button\n            class=\"gbt-auth-panel__submit\"\n            block\n            type=\"submit\"\n            size=\"large\"\n            [text]=\"text().verify\"\n            [variant]=\"canUsePasskey() ? 'secondary' : 'primary'\"\n            [loading]=\"submitting() && !passkeyInFlight()\"\n            [disabled]=\"passkeyInFlight()\"\n            [loadingLabel]=\"text().verifying\"\n          />\n        }\n      }\n\n      <div class=\"gbt-auth-panel__links\">\n        @if (!passkeyBlocked()) {\n          <gbt-button\n            variant=\"link\"\n            [text]=\"showBackupCode() ? backFromBackupLabel() : text().useBackupCode\"\n            (clicked)=\"toggleBackupCode()\"\n          />\n        }\n        <gbt-button variant=\"link\" [text]=\"text().back\" (clicked)=\"backToCredentials()\" />\n      </div>\n    </form>\n  }\n</gbt-auth-panel>\n",
+		dependencies: [
+			{
+				kind: "ngmodule",
+				type: FormsModule
+			},
+			{
+				kind: "directive",
+				type: i1.ɵNgNoValidate,
+				selector: "form:not([ngNoForm]):not([ngNativeValidate])"
+			},
+			{
+				kind: "directive",
+				type: i1.NgControlStatus,
+				selector: "[formControlName],[ngModel],[formControl]"
+			},
+			{
+				kind: "directive",
+				type: i1.NgControlStatusGroup,
+				selector: "[formGroupName],[formArrayName],[ngModelGroup],[formGroup],[formArray],form:not([ngNoForm]),[ngForm]"
+			},
+			{
+				kind: "directive",
+				type: i1.NgModel,
+				selector: "[ngModel]:not([formControlName]):not([formControl])",
+				inputs: [
+					"name",
+					"disabled",
+					"ngModel",
+					"ngModelOptions"
+				],
+				outputs: ["ngModelChange"],
+				exportAs: ["ngModel"]
+			},
+			{
+				kind: "directive",
+				type: i1.NgForm,
+				selector: "form:not([ngNoForm]):not([formGroup]):not([formArray]),ng-form,[ngForm]",
+				inputs: ["ngFormOptions"],
+				outputs: ["ngSubmit"],
+				exportAs: ["ngForm"]
+			},
+			{
+				kind: "component",
+				type: Button,
+				selector: "gbt-button, a[gbtButton]",
+				inputs: [
+					"variant",
+					"size",
+					"type",
+					"text",
+					"iconName",
+					"ariaLabel",
+					"loading",
+					"loadingLabel",
+					"disabled",
+					"pressed",
+					"ariaExpanded",
+					"ariaControls",
+					"ariaHaspopup",
+					"block",
+					"iconOnly"
+				],
+				outputs: ["clicked"]
+			},
+			{
+				kind: "component",
+				type: Divider,
+				selector: "gbt-divider",
+				inputs: ["orientation", "label"]
+			},
+			{
+				kind: "component",
+				type: GbtInput,
+				selector: "gbt-input",
+				inputs: [
+					"id",
+					"label",
+					"type",
+					"required",
+					"disabled",
+					"placeholder",
+					"errorMessage",
+					"autocomplete",
+					"hint",
+					"hideLabel",
+					"size",
+					"mono",
+					"leadingIcon",
+					"inputmode",
+					"spellcheck",
+					"autocapitalize",
+					"enterkeyhint",
+					"maxlength",
+					"min",
+					"max",
+					"combobox",
+					"showPasswordLabel",
+					"hidePasswordLabel"
+				],
+				outputs: ["committed"]
+			},
+			{
+				kind: "component",
+				type: Alert,
+				selector: "gbt-alert",
+				inputs: [
+					"variant",
+					"dismissible",
+					"closeLabel",
+					"live",
+					"heading",
+					"size",
+					"appearance",
+					"iconAlign"
+				],
+				outputs: ["dismissed"]
+			},
+			{
+				kind: "component",
+				type: AuthFooter,
+				selector: "gbt-auth-footer",
+				inputs: [
+					"text",
+					"href",
+					"linkText"
+				]
+			},
+			{
+				kind: "component",
+				type: AuthPanel,
+				selector: "gbt-auth-panel",
+				inputs: [
+					"heading",
+					"intro",
+					"wide"
+				]
+			},
+			{
+				kind: "component",
+				type: MfaEnrollment,
+				selector: "gbt-mfa-enrollment",
+				inputs: [
+					"mfaToken",
+					"passkeysAvailable",
+					"labels"
+				],
+				outputs: [
+					"completed",
+					"cancelled",
+					"expired"
+				]
+			}
+		],
+		changeDetection: i0.ChangeDetectionStrategy.OnPush
+	});
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.0",
+	ngImport: i0,
+	type: AuthLogin,
+	decorators: [{
+		type: Component,
+		args: [{
+			selector: "gbt-auth-login",
+			standalone: true,
+			imports: [
+				FormsModule,
+				Button,
+				Divider,
+				GbtInput,
+				Alert,
+				AuthFooter,
+				AuthPanel,
+				MfaEnrollment
+			],
+			changeDetection: ChangeDetectionStrategy.OnPush,
+			template: "<gbt-auth-panel [heading]=\"heading()\" [intro]=\"intro()\" [wide]=\"enrolling()\">\n  <ng-container ngProjectAs=\"[auth-backdrop]\"><ng-content select=\"[auth-backdrop]\" /></ng-container>\n  <ng-container ngProjectAs=\"[auth-logo]\"><ng-content select=\"[auth-logo]\" /></ng-container>\n\n  @if (mfaToken() === null) {\n    <form class=\"gbt-auth-panel__form\" (ngSubmit)=\"submit()\">\n      <ng-content select=\"[auth-notice]\" />\n      @if (error()) {\n        <gbt-alert variant=\"error\" appearance=\"subtle\" iconAlign=\"start\">{{ error() }}</gbt-alert>\n      }\n\n      <gbt-input\n        [id]=\"id + '-username'\"\n        name=\"username\"\n        autocomplete=\"username\"\n        [label]=\"text().username\"\n        [ngModel]=\"username()\"\n        (ngModelChange)=\"username.set($event)\"\n      />\n      <gbt-input\n        [id]=\"id + '-password'\"\n        type=\"password\"\n        name=\"password\"\n        autocomplete=\"current-password\"\n        [label]=\"text().password\"\n        [showPasswordLabel]=\"text().showPassword\"\n        [hidePasswordLabel]=\"text().hidePassword\"\n        [ngModel]=\"password()\"\n        (ngModelChange)=\"password.set($event)\"\n      />\n\n      <gbt-button\n        class=\"gbt-auth-panel__submit\"\n        block\n        type=\"submit\"\n        size=\"large\"\n        [text]=\"text().submit\"\n        [loading]=\"submitting()\"\n        [loadingLabel]=\"text().submitting\"\n      />\n    </form>\n\n    @if (registrationEnabled() && registerLink()) {\n      <gbt-auth-footer [text]=\"text().registerPrompt\"\n        ><ng-content select=\"[gbtAuthFooterLink]\"\n      /></gbt-auth-footer>\n    }\n  } @else if (enrolling()) {\n    <gbt-mfa-enrollment\n      [mfaToken]=\"mfaToken()!\"\n      [passkeysAvailable]=\"passkeysAvailable() === true\"\n      (completed)=\"enrolled($event)\"\n      (cancelled)=\"backToCredentials()\"\n      (expired)=\"sessionExpired()\"\n    />\n  } @else {\n    <form class=\"gbt-auth-panel__form\" (ngSubmit)=\"verify()\">\n      @if (passkeyBlocked()) {\n        <gbt-alert variant=\"warning\" appearance=\"subtle\" iconAlign=\"start\" live=\"off\">{{\n          blockedReason()\n        }}</gbt-alert>\n      }\n      @if (error()) {\n        <gbt-alert [variant]=\"errorVariant()\" appearance=\"subtle\" iconAlign=\"start\">{{\n          error()\n        }}</gbt-alert>\n      }\n      @if (passkeyInFlight()) {\n        <gbt-alert variant=\"info\" appearance=\"subtle\" iconAlign=\"start\" live=\"polite\">{{\n          text().passkeyPrompt\n        }}</gbt-alert>\n      }\n\n      @if (showBackupCode()) {\n        <gbt-input\n          [id]=\"id + '-mfa-backup-code'\"\n          inputmode=\"text\"\n          [spellcheck]=\"false\"\n          autocapitalize=\"off\"\n          enterkeyhint=\"go\"\n          name=\"backupCode\"\n          autocomplete=\"off\"\n          [label]=\"text().backupCodeLabel\"\n          [ngModel]=\"backupCode()\"\n          (ngModelChange)=\"backupCode.set($event)\"\n        />\n\n        <gbt-button\n          class=\"gbt-auth-panel__submit\"\n          block\n          type=\"submit\"\n          size=\"large\"\n          [text]=\"text().verify\"\n          [loading]=\"submitting()\"\n          [loadingLabel]=\"text().verifying\"\n        />\n      } @else {\n        @if (canUsePasskey()) {\n          <gbt-button\n            [attr.id]=\"id + '-mfa-passkey'\"\n            class=\"gbt-auth-panel__submit\"\n            block\n            size=\"large\"\n            iconName=\"key\"\n            [text]=\"text().usePasskey\"\n            [loading]=\"passkeyInFlight()\"\n            [disabled]=\"submitting() && !passkeyInFlight()\"\n            [loadingLabel]=\"text().passkeyValidating\"\n            (clicked)=\"usePasskey()\"\n          />\n        }\n\n        @if (canUsePasskey() && hasTotp()) {\n          <gbt-divider [label]=\"text().or\" />\n        }\n\n        @if (hasTotp()) {\n          <gbt-input\n            [id]=\"id + '-mfa-code'\"\n            inputmode=\"numeric\"\n            [spellcheck]=\"false\"\n            autocapitalize=\"off\"\n            enterkeyhint=\"go\"\n            name=\"code\"\n            autocomplete=\"one-time-code\"\n            [label]=\"text().codeLabel\"\n            [ngModel]=\"code()\"\n            (ngModelChange)=\"code.set($event)\"\n          />\n\n          <gbt-button\n            class=\"gbt-auth-panel__submit\"\n            block\n            type=\"submit\"\n            size=\"large\"\n            [text]=\"text().verify\"\n            [variant]=\"canUsePasskey() ? 'secondary' : 'primary'\"\n            [loading]=\"submitting() && !passkeyInFlight()\"\n            [disabled]=\"passkeyInFlight()\"\n            [loadingLabel]=\"text().verifying\"\n          />\n        }\n      }\n\n      <div class=\"gbt-auth-panel__links\">\n        @if (!passkeyBlocked()) {\n          <gbt-button\n            variant=\"link\"\n            [text]=\"showBackupCode() ? backFromBackupLabel() : text().useBackupCode\"\n            (clicked)=\"toggleBackupCode()\"\n          />\n        }\n        <gbt-button variant=\"link\" [text]=\"text().back\" (clicked)=\"backToCredentials()\" />\n      </div>\n    </form>\n  }\n</gbt-auth-panel>\n"
+		}]
+	}],
+	ctorParameters: () => [],
+	propDecorators: {
+		labels: [{
+			type: i0.Input,
+			args: [{
+				isSignal: true,
+				alias: "labels",
+				required: false
+			}]
+		}],
+		loggedIn: [{
+			type: i0.Output,
+			args: ["loggedIn"]
+		}],
+		registerLink: [{
+			type: i0.ContentChild,
+			args: [i0.forwardRef(() => AuthFooterLink), { isSignal: true }]
+		}]
+	}
+});
+export { AuthLogin };
+
+//# sourceMappingURL=masmarino-gabarit-auth-login.mjs.map

package/fesm2022/masmarino-gabarit-auth-login.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"masmarino-gabarit-auth-login.mjs","names":[],"sources":["../../../projects/gabarit/auth-login/login.ts","../../../projects/gabarit/auth-login/login.html"],"sourcesContent":["import {\n  ChangeDetectionStrategy,\n  Component,\n  ElementRef,\n  Injector,\n  computed,\n  contentChild,\n  inject,\n  input,\n  output,\n  signal,\n} from '@angular/core'\nimport { takeUntilDestroyed } from '@angular/core/rxjs-interop'\nimport { FormsModule } from '@angular/forms'\nimport { EMPTY, from, switchMap } from 'rxjs'\nimport { Button } from '@masmarino/gabarit/button'\nimport { Divider } from '@masmarino/gabarit/divider'\nimport { GbtInput } from '@masmarino/gabarit/input'\nimport { Alert } from '@masmarino/gabarit/alert'\nimport { DEFAULT_LOGIN_LABELS, type LoginLabels, authLabels } from '@masmarino/gabarit/auth'\nimport { AuthFooter, AuthFooterLink } from '@masmarino/gabarit/auth'\nimport { AuthPanel } from '@masmarino/gabarit/auth'\nimport { MfaEnrollment } from '@masmarino/gabarit/mfa-enrollment'\nimport { AUTH_PORT, type MfaProof } from '@masmarino/gabarit/auth'\nimport { focusAfterRender } from '@masmarino/gabarit/auth'\nimport { classifyMfaFailure } from '@masmarino/gabarit/auth'\nimport { isAuthPortError } from '@masmarino/gabarit/auth'\nimport {\n  classifyPasskeyError,\n  getPasskeyAssertion,\n  passkeysSupported,\n} from '@masmarino/gabarit/auth'\n\nlet nextId = 0\n\n@Component({\n  selector: 'gbt-auth-login',\n  standalone: true,\n  imports: [FormsModule, Button, Divider, GbtInput, Alert, AuthFooter, AuthPanel, MfaEnrollment],\n  templateUrl: './login.html',\n  changeDetection: ChangeDetectionStrategy.OnPush,\n})\nexport class AuthLogin {\n  private readonly auth = inject(AUTH_PORT)\n  private readonly host = inject<ElementRef<HTMLElement>>(ElementRef)\n  private readonly injector = inject(Injector)\n\n  labels = input<Partial<LoginLabels>>({})\n  loggedIn = output<void>()\n\n  protected readonly text = authLabels('login', DEFAULT_LOGIN_LABELS, this.labels)\n  protected readonly registerLink = contentChild(AuthFooterLink)\n  protected readonly id = `gbt-login-${nextId++}`\n\n  username = signal('')\n  protected password = signal('')\n  error = signal('')\n  submitting = signal(false)\n\n  protected mfaToken = signal<string | null>(null)\n  mfaSetupRequired = signal(false)\n  mfaHasTotp = signal(false)\n  mfaHasPasskey = signal(false)\n  useBackupCode = signal(false)\n  protected code = signal('')\n  protected backupCode = signal('')\n\n  protected registrationEnabled = signal(false)\n  protected passkeysAvailable = signal<boolean | null>(null)\n  private browserHasPasskeys = signal(false)\n  protected passkeyInFlight = signal(false)\n  private ceremony = 0\n  protected errorVariant = signal<'error' | 'info'>('error')\n\n  protected enrolling = computed(() => this.mfaToken() !== null && this.mfaSetupRequired())\n  protected challenging = computed(() => this.mfaToken() !== null && !this.mfaSetupRequired())\n\n  protected canUsePasskey = computed(\n    () => this.mfaHasPasskey() && this.browserHasPasskeys() && this.passkeysAvailable() !== false,\n  )\n  protected hasTotp = computed(() => this.mfaHasTotp() || !this.mfaHasPasskey())\n  protected passkeyBlocked = computed(\n    () => this.challenging() && this.mfaHasPasskey() && !this.hasTotp() && !this.canUsePasskey(),\n  )\n  protected showBackupCode = computed(() => this.useBackupCode() || this.passkeyBlocked())\n  protected blockedReason = computed(() =>\n    this.browserHasPasskeys() ? this.text().blockedByServer : this.text().blockedByBrowser,\n  )\n  protected backFromBackupLabel = computed(() => {\n    const text = this.text()\n    if (this.canUsePasskey()) {\n      return this.hasTotp() ? text.backToPasskeyOrApp : text.backToPasskey\n    }\n    return text.backToApp\n  })\n\n  protected heading = computed(() => {\n    if (this.enrolling()) {\n      return this.text().enrollmentHeading\n    }\n    return this.challenging() ? this.text().challengeHeading : this.text().heading\n  })\n  protected intro = computed(() => {\n    const text = this.text()\n    if (this.enrolling()) {\n      return ''\n    }\n    if (!this.challenging()) {\n      return text.intro\n    }\n    if (this.showBackupCode()) {\n      return text.introBackupCode\n    }\n    if (this.canUsePasskey()) {\n      return this.hasTotp() ? text.introPasskeyOrCode : text.introPasskey\n    }\n    return text.introCode\n  })\n\n  constructor() {\n    this.focusField('username')\n    this.auth\n      .authConfig()\n      .pipe(takeUntilDestroyed())\n      .subscribe({\n        next: (config) => {\n          this.registrationEnabled.set(config.registrationEnabled === true)\n          this.passkeysAvailable.set(config.passkeysAvailable === true)\n        },\n        error: () => this.registrationEnabled.set(false),\n      })\n  }\n\n  submit(): void {\n    if (this.submitting()) {\n      return\n    }\n    this.error.set('')\n    this.submitting.set(true)\n    this.auth.login(this.username(), this.password()).subscribe({\n      next: (res) => {\n        this.password.set('')\n        this.submitting.set(false)\n        if (res.token) {\n          this.loggedIn.emit()\n        } else if (res.mfaToken) {\n          this.mfaSetupRequired.set(res.mfaSetupRequired === true)\n          this.mfaHasTotp.set(res.mfaHasTotp === true)\n          this.mfaHasPasskey.set(res.mfaHasPasskey === true)\n          this.browserHasPasskeys.set(passkeysSupported())\n          this.mfaToken.set(res.mfaToken)\n          if (!this.mfaSetupRequired()) {\n            this.focusField(this.firstChallengeTarget())\n          }\n        } else {\n          this.fail(this.text().loginFailed, 'password')\n        }\n      },\n      error: (err: unknown) => {\n        this.submitting.set(false)\n        this.fail(this.loginFailureMessage(err), 'password')\n      },\n    })\n  }\n\n  private loginFailureMessage(err: unknown): string {\n    const status = isAuthPortError(err) ? err.status : null\n    if (status === 401) {\n      return this.text().wrongCredentials\n    }\n    if (status === 429) {\n      return this.text().tooManyAttempts\n    }\n    return this.text().loginFailed\n  }\n\n  verify(): void {\n    if (this.submitting()) {\n      return\n    }\n    const mfaToken = this.mfaToken()\n    const backup = this.showBackupCode()\n    const value = (backup ? this.backupCode() : this.code()).replace(/\\s+/g, '')\n    const field = backup ? 'mfa-backup-code' : 'mfa-code'\n    if (mfaToken === null) {\n      return\n    }\n    if (value === '') {\n      this.fail(backup ? this.text().enterBackupCode : this.text().enterCode, field)\n      return\n    }\n    this.error.set('')\n    this.submitting.set(true)\n    const proof: MfaProof = backup ? { backupCode: value } : { code: value }\n    this.auth.verifyMfa(mfaToken, proof).subscribe({\n      next: () => {\n        this.submitting.set(false)\n        this.resetMfa()\n        this.loggedIn.emit()\n      },\n      error: (err: unknown) => {\n        this.submitting.set(false)\n        const failure = classifyMfaFailure(err)\n        if (failure === 'expired') {\n          this.sessionExpired()\n          return\n        }\n        if (failure === 'wrong-code') {\n          this.code.set('')\n          this.backupCode.set('')\n        }\n        const text = this.text()\n        this.fail(\n          failure === 'rate-limited'\n            ? text.tooManyAttempts\n            : failure === 'wrong-code'\n              ? text.wrongCode\n              : text.verifyFailed,\n          field,\n        )\n      },\n    })\n  }\n\n  usePasskey(): void {\n    const mfaToken = this.mfaToken()\n    if (this.submitting() || mfaToken === null) {\n      return\n    }\n    this.error.set('')\n    this.submitting.set(true)\n    this.passkeyInFlight.set(true)\n    const run = ++this.ceremony\n    this.auth\n      .startPasskeyChallenge(mfaToken)\n      .pipe(\n        switchMap(({ challengeId, publicKey }) =>\n          run !== this.ceremony\n            ? EMPTY\n            : from(getPasskeyAssertion(publicKey)).pipe(\n                switchMap((credential) =>\n                  run === this.ceremony\n                    ? this.auth.finishPasskeyChallenge(mfaToken, challengeId, credential)\n                    : EMPTY,\n                ),\n              ),\n        ),\n      )\n      .subscribe({\n        next: () => {\n          this.submitting.set(false)\n          this.passkeyInFlight.set(false)\n          this.resetMfa()\n          this.loggedIn.emit()\n        },\n        error: (err: unknown) => {\n          if (run !== this.ceremony) {\n            return\n          }\n          this.submitting.set(false)\n          this.passkeyInFlight.set(false)\n          this.passkeyFailed(err)\n        },\n      })\n  }\n\n  private passkeyFailed(err: unknown): void {\n    const text = this.text()\n    if (!isAuthPortError(err)) {\n      switch (classifyPasskeyError(err)) {\n        case 'cancelled':\n          this.fail(text.cancelled, 'mfa-passkey', 'info')\n          return\n        case 'unsupported':\n          this.fail(text.browserUnsupported, 'mfa-passkey')\n          return\n        default:\n          this.fail(text.verifyFailed, 'mfa-passkey')\n          return\n      }\n    }\n    switch (classifyMfaFailure(err)) {\n      case 'expired':\n        this.sessionExpired()\n        return\n      case 'wrong-code':\n        this.fail(text.passkeyRefused, 'mfa-passkey')\n        return\n      case 'rate-limited':\n        this.fail(text.tooManyAttempts, 'mfa-passkey')\n        return\n      case 'unavailable':\n        this.fail(text.passkeysUnavailable, 'mfa-passkey')\n        return\n      default:\n        this.fail(text.verifyFailed, 'mfa-passkey')\n    }\n  }\n\n  toggleBackupCode(): void {\n    this.error.set('')\n    this.useBackupCode.update((backup) => !backup)\n    this.focusField(this.useBackupCode() ? 'mfa-backup-code' : this.firstChallengeTarget())\n  }\n\n  private firstChallengeTarget(): string {\n    if (this.showBackupCode()) {\n      return 'mfa-backup-code'\n    }\n    return this.canUsePasskey() ? 'mfa-passkey' : 'mfa-code'\n  }\n\n  backToCredentials(): void {\n    this.resetMfa()\n    this.error.set('')\n    this.focusField('password')\n  }\n\n  sessionExpired(): void {\n    this.resetMfa()\n    this.fail(this.text().loginExpired, 'password')\n  }\n\n  enrolled(token: string): void {\n    this.auth.setToken(token)\n    this.resetMfa()\n    this.loggedIn.emit()\n  }\n\n  private resetMfa(): void {\n    this.ceremony++\n    this.submitting.set(false)\n    this.passkeyInFlight.set(false)\n    this.mfaToken.set(null)\n    this.mfaSetupRequired.set(false)\n    this.mfaHasTotp.set(false)\n    this.mfaHasPasskey.set(false)\n    this.useBackupCode.set(false)\n    this.code.set('')\n    this.backupCode.set('')\n  }\n\n  private fail(message: string, focusSuffix: string, variant: 'error' | 'info' = 'error'): void {\n    this.errorVariant.set(variant)\n    this.error.set(message)\n    this.focusField(focusSuffix)\n  }\n\n  private focusField(suffix: string): void {\n    focusAfterRender(this.host, this.injector, `#${this.id}-${suffix}`, {\n      nestedFallback: 'button',\n    })\n  }\n}\n","<gbt-auth-panel [heading]=\"heading()\" [intro]=\"intro()\" [wide]=\"enrolling()\">\n  <ng-container ngProjectAs=\"[auth-backdrop]\"><ng-content select=\"[auth-backdrop]\" /></ng-container>\n  <ng-container ngProjectAs=\"[auth-logo]\"><ng-content select=\"[auth-logo]\" /></ng-container>\n\n  @if (mfaToken() === null) {\n    <form class=\"gbt-auth-panel__form\" (ngSubmit)=\"submit()\">\n      <ng-content select=\"[auth-notice]\" />\n      @if (error()) {\n        <gbt-alert variant=\"error\" appearance=\"subtle\" iconAlign=\"start\">{{ error() }}</gbt-alert>\n      }\n\n      <gbt-input\n        [id]=\"id + '-username'\"\n        name=\"username\"\n        autocomplete=\"username\"\n        [label]=\"text().username\"\n        [ngModel]=\"username()\"\n        (ngModelChange)=\"username.set($event)\"\n      />\n      <gbt-input\n        [id]=\"id + '-password'\"\n        type=\"password\"\n        name=\"password\"\n        autocomplete=\"current-password\"\n        [label]=\"text().password\"\n        [showPasswordLabel]=\"text().showPassword\"\n        [hidePasswordLabel]=\"text().hidePassword\"\n        [ngModel]=\"password()\"\n        (ngModelChange)=\"password.set($event)\"\n      />\n\n      <gbt-button\n        class=\"gbt-auth-panel__submit\"\n        block\n        type=\"submit\"\n        size=\"large\"\n        [text]=\"text().submit\"\n        [loading]=\"submitting()\"\n        [loadingLabel]=\"text().submitting\"\n      />\n    </form>\n\n    @if (registrationEnabled() && registerLink()) {\n      <gbt-auth-footer [text]=\"text().registerPrompt\"\n        ><ng-content select=\"[gbtAuthFooterLink]\"\n      /></gbt-auth-footer>\n    }\n  } @else if (enrolling()) {\n    <gbt-mfa-enrollment\n      [mfaToken]=\"mfaToken()!\"\n      [passkeysAvailable]=\"passkeysAvailable() === true\"\n      (completed)=\"enrolled($event)\"\n      (cancelled)=\"backToCredentials()\"\n      (expired)=\"sessionExpired()\"\n    />\n  } @else {\n    <form class=\"gbt-auth-panel__form\" (ngSubmit)=\"verify()\">\n      @if (passkeyBlocked()) {\n        <gbt-alert variant=\"warning\" appearance=\"subtle\" iconAlign=\"start\" live=\"off\">{{\n          blockedReason()\n        }}</gbt-alert>\n      }\n      @if (error()) {\n        <gbt-alert [variant]=\"errorVariant()\" appearance=\"subtle\" iconAlign=\"start\">{{\n          error()\n        }}</gbt-alert>\n      }\n      @if (passkeyInFlight()) {\n        <gbt-alert variant=\"info\" appearance=\"subtle\" iconAlign=\"start\" live=\"polite\">{{\n          text().passkeyPrompt\n        }}</gbt-alert>\n      }\n\n      @if (showBackupCode()) {\n        <gbt-input\n          [id]=\"id + '-mfa-backup-code'\"\n          inputmode=\"text\"\n          [spellcheck]=\"false\"\n          autocapitalize=\"off\"\n          enterkeyhint=\"go\"\n          name=\"backupCode\"\n          autocomplete=\"off\"\n          [label]=\"text().backupCodeLabel\"\n          [ngModel]=\"backupCode()\"\n          (ngModelChange)=\"backupCode.set($event)\"\n        />\n\n        <gbt-button\n          class=\"gbt-auth-panel__submit\"\n          block\n          type=\"submit\"\n          size=\"large\"\n          [text]=\"text().verify\"\n          [loading]=\"submitting()\"\n          [loadingLabel]=\"text().verifying\"\n        />\n      } @else {\n        @if (canUsePasskey()) {\n          <gbt-button\n            [attr.id]=\"id + '-mfa-passkey'\"\n            class=\"gbt-auth-panel__submit\"\n            block\n            size=\"large\"\n            iconName=\"key\"\n            [text]=\"text().usePasskey\"\n            [loading]=\"passkeyInFlight()\"\n            [disabled]=\"submitting() && !passkeyInFlight()\"\n            [loadingLabel]=\"text().passkeyValidating\"\n            (clicked)=\"usePasskey()\"\n          />\n        }\n\n        @if (canUsePasskey() && hasTotp()) {\n          <gbt-divider [label]=\"text().or\" />\n        }\n\n        @if (hasTotp()) {\n          <gbt-input\n            [id]=\"id + '-mfa-code'\"\n            inputmode=\"numeric\"\n            [spellcheck]=\"false\"\n            autocapitalize=\"off\"\n            enterkeyhint=\"go\"\n            name=\"code\"\n            autocomplete=\"one-time-code\"\n            [label]=\"text().codeLabel\"\n            [ngModel]=\"code()\"\n            (ngModelChange)=\"code.set($event)\"\n          />\n\n          <gbt-button\n            class=\"gbt-auth-panel__submit\"\n            block\n            type=\"submit\"\n            size=\"large\"\n            [text]=\"text().verify\"\n            [variant]=\"canUsePasskey() ? 'secondary' : 'primary'\"\n            [loading]=\"submitting() && !passkeyInFlight()\"\n            [disabled]=\"passkeyInFlight()\"\n            [loadingLabel]=\"text().verifying\"\n          />\n        }\n      }\n\n      <div class=\"gbt-auth-panel__links\">\n        @if (!passkeyBlocked()) {\n          <gbt-button\n            variant=\"link\"\n            [text]=\"showBackupCode() ? backFromBackupLabel() : text().useBackupCode\"\n            (clicked)=\"toggleBackupCode()\"\n          />\n        }\n        <gbt-button variant=\"link\" [text]=\"text().back\" (clicked)=\"backToCredentials()\" />\n      </div>\n    </form>\n  }\n</gbt-auth-panel>\n"],"mappings":";;;;;;;;;;;;AAiCA,IAAI,SAAS;AASb,IAAa,YAAb,MAAa,UAAS;CACH,OAAO,OAAO,SAAS;CACvB,OAAO,OAAgC,UAAU;CACjD,WAAW,OAAO,QAAQ;CAE3C,SAAS,MAA4B,CAAA,GAAG,GAAA,YAAA,CAAA,EAAA,WAAA,SAAA,CAAA,+BAAA,CAAA,CAAA;CACxC,WAAW,OAAM;CAEE,OAAO,WAAW,SAAS,sBAAsB,KAAK,MAAM;CAC5D,eAAe,aAAa,gBAAe,GAAA,YAAA,CAAA,EAAA,WAAA,eAAA,CAAA,+BAAA,CAAA,CAAA;CAC3C,KAAK,aAAa;CAErC,WAAW,OAAO,IAAG,GAAA,YAAA,CAAA,EAAA,WAAA,WAAA,CAAA,+BAAA,CAAA,CAAA;CACX,WAAW,OAAO,IAAG,GAAA,YAAA,CAAA,EAAA,WAAA,WAAA,CAAA,+BAAA,CAAA,CAAA;CAC/B,QAAQ,OAAO,IAAG,GAAA,YAAA,CAAA,EAAA,WAAA,QAAA,CAAA,+BAAA,CAAA,CAAA;CAClB,aAAa,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,aAAA,CAAA,+BAAA,CAAA,CAAA;CAEhB,WAAW,OAAsB,MAAK,GAAA,YAAA,CAAA,EAAA,WAAA,WAAA,CAAA,+BAAA,CAAA,CAAA;CAChD,mBAAmB,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,mBAAA,CAAA,+BAAA,CAAA,CAAA;CAChC,aAAa,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,aAAA,CAAA,+BAAA,CAAA,CAAA;CAC1B,gBAAgB,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,gBAAA,CAAA,+BAAA,CAAA,CAAA;CAC7B,gBAAgB,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,gBAAA,CAAA,+BAAA,CAAA,CAAA;CACnB,OAAO,OAAO,IAAG,GAAA,YAAA,CAAA,EAAA,WAAA,OAAA,CAAA,+BAAA,CAAA,CAAA;CACjB,aAAa,OAAO,IAAG,GAAA,YAAA,CAAA,EAAA,WAAA,aAAA,CAAA,+BAAA,CAAA,CAAA;CAEvB,sBAAsB,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,sBAAA,CAAA,+BAAA,CAAA,CAAA;CACnC,oBAAoB,OAAuB,MAAK,GAAA,YAAA,CAAA,EAAA,WAAA,oBAAA,CAAA,+BAAA,CAAA,CAAA;CAClD,qBAAqB,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,qBAAA,CAAA,+BAAA,CAAA,CAAA;CAChC,kBAAkB,OAAO,OAAM,GAAA,YAAA,CAAA,EAAA,WAAA,kBAAA,CAAA,+BAAA,CAAA,CAAA;CACjC,WAAW;CACT,eAAe,OAAyB,SAAQ,GAAA,YAAA,CAAA,EAAA,WAAA,eAAA,CAAA,+BAAA,CAAA,CAAA;CAEhD,YAAY,eAAe,KAAK,SAAQ,MAAO,QAAQ,KAAK,iBAAgB,GAAG,GAAA,YAAA,CAAA,EAAA,WAAA,YAAA,CAAA,+BAAA,CAAA,CAAA;CAC/E,cAAc,eAAe,KAAK,SAAQ,MAAO,QAAQ,CAAC,KAAK,iBAAgB,GAAG,GAAA,YAAA,CAAA,EAAA,WAAA,cAAA,CAAA,+BAAA,CAAA,CAAA;CAElF,gBAAgB,eAClB,KAAK,cAAa,KAAM,KAAK,mBAAkB,KAAM,KAAK,kBAAiB,MAAO,OACzF,GAAA,YAAA,CAAA,EAAA,WAAA,gBAAA,CAAA,+BAAA,CAAA,CAAA;CACS,UAAU,eAAe,KAAK,WAAU,KAAM,CAAC,KAAK,cAAa,GAAG,GAAA,YAAA,CAAA,EAAA,WAAA,UAAA,CAAA,+BAAA,CAAA,CAAA;CACpE,iBAAiB,eACnB,KAAK,YAAW,KAAM,KAAK,cAAa,KAAM,CAAC,KAAK,QAAO,KAAM,CAAC,KAAK,cAAa,GAC3F,GAAA,YAAA,CAAA,EAAA,WAAA,iBAAA,CAAA,+BAAA,CAAA,CAAA;CACS,iBAAiB,eAAe,KAAK,cAAa,KAAM,KAAK,eAAc,GAAG,GAAA,YAAA,CAAA,EAAA,WAAA,iBAAA,CAAA,+BAAA,CAAA,CAAA;CAC9E,gBAAgB,eACxB,KAAK,mBAAkB,IAAK,KAAK,KAAI,CAAE,CAAC,kBAAkB,KAAK,KAAI,CAAE,CAAC,kBACvE,GAAA,YAAA,CAAA,EAAA,WAAA,gBAAA,CAAA,+BAAA,CAAA,CAAA;CACS,sBAAsB,eAAc;EAC5C,MAAM,OAAO,KAAK,KAAI;EACtB,IAAI,KAAK,cAAa,GACpB,OAAO,KAAK,QAAO,IAAK,KAAK,qBAAqB,KAAK;EAEzD,OAAO,KAAK;CACd,GAAE,GAAA,YAAA,CAAA,EAAA,WAAA,sBAAA,CAAA,+BAAA,CAAA,CAAA;CAEQ,UAAU,eAAc;EAChC,IAAI,KAAK,UAAS,GAChB,OAAO,KAAK,KAAI,CAAE,CAAC;EAErB,OAAO,KAAK,YAAW,IAAK,KAAK,KAAI,CAAE,CAAC,mBAAmB,KAAK,KAAI,CAAE,CAAC;CACzE,GAAE,GAAA,YAAA,CAAA,EAAA,WAAA,UAAA,CAAA,+BAAA,CAAA,CAAA;CACQ,QAAQ,eAAc;EAC9B,MAAM,OAAO,KAAK,KAAI;EACtB,IAAI,KAAK,UAAS,GAChB,OAAO;EAET,IAAI,CAAC,KAAK,YAAW,GACnB,OAAO,KAAK;EAEd,IAAI,KAAK,eAAc,GACrB,OAAO,KAAK;EAEd,IAAI,KAAK,cAAa,GACpB,OAAO,KAAK,QAAO,IAAK,KAAK,qBAAqB,KAAK;EAEzD,OAAO,KAAK;CACd,GAAE,GAAA,YAAA,CAAA,EAAA,WAAA,QAAA,CAAA,+BAAA,CAAA,CAAA;CAEF,cAAA;EACE,KAAK,WAAW,UAAU;EAC1B,KAAK,KACF,WAAU,CAAE,CACZ,KAAK,mBAAkB,CAAE,CAAC,CAC1B,UAAU;GACT,OAAO,WAAU;IACf,KAAK,oBAAoB,IAAI,OAAO,wBAAwB,IAAI;IAChE,KAAK,kBAAkB,IAAI,OAAO,sBAAsB,IAAI;GAC9D;GACA,aAAa,KAAK,oBAAoB,IAAI,KAAK;EAChD,CAAA;CACL;CAEA,SAAM;EACJ,IAAI,KAAK,WAAU,GACjB;EAEF,KAAK,MAAM,IAAI,EAAE;EACjB,KAAK,WAAW,IAAI,IAAI;EACxB,KAAK,KAAK,MAAM,KAAK,SAAQ,GAAI,KAAK,SAAQ,CAAE,CAAC,CAAC,UAAU;GAC1D,OAAO,QAAO;IACZ,KAAK,SAAS,IAAI,EAAE;IACpB,KAAK,WAAW,IAAI,KAAK;IACzB,IAAI,IAAI,OACN,KAAK,SAAS,KAAI;SACb,IAAI,IAAI,UAAU;KACvB,KAAK,iBAAiB,IAAI,IAAI,qBAAqB,IAAI;KACvD,KAAK,WAAW,IAAI,IAAI,eAAe,IAAI;KAC3C,KAAK,cAAc,IAAI,IAAI,kBAAkB,IAAI;KACjD,KAAK,mBAAmB,IAAI,kBAAiB,CAAE;KAC/C,KAAK,SAAS,IAAI,IAAI,QAAQ;KAC9B,IAAI,CAAC,KAAK,iBAAgB,GACxB,KAAK,WAAW,KAAK,qBAAoB,CAAE;IAE/C,OACE,KAAK,KAAK,KAAK,KAAI,CAAE,CAAC,aAAa,UAAU;GAEjD;GACA,QAAQ,QAAgB;IACtB,KAAK,WAAW,IAAI,KAAK;IACzB,KAAK,KAAK,KAAK,oBAAoB,GAAG,GAAG,UAAU;GACrD;EACD,CAAA;CACH;CAEQ,oBAAoB,KAAY;EACtC,MAAM,SAAS,gBAAgB,GAAG,IAAI,IAAI,SAAS;EACnD,IAAI,WAAW,KACb,OAAO,KAAK,KAAI,CAAE,CAAC;EAErB,IAAI,WAAW,KACb,OAAO,KAAK,KAAI,CAAE,CAAC;EAErB,OAAO,KAAK,KAAI,CAAE,CAAC;CACrB;CAEA,SAAM;EACJ,IAAI,KAAK,WAAU,GACjB;EAEF,MAAM,WAAW,KAAK,SAAQ;EAC9B,MAAM,SAAS,KAAK,eAAc;EAClC,MAAM,SAAS,SAAS,KAAK,WAAU,IAAK,KAAK,KAAI,EAAA,CAAI,QAAQ,QAAQ,EAAE;EAC3E,MAAM,QAAQ,SAAS,oBAAoB;EAC3C,IAAI,aAAa,MACf;EAEF,IAAI,UAAU,IAAI;GAChB,KAAK,KAAK,SAAS,KAAK,KAAI,CAAE,CAAC,kBAAkB,KAAK,KAAI,CAAE,CAAC,WAAW,KAAK;GAC7E;EACF;EACA,KAAK,MAAM,IAAI,EAAE;EACjB,KAAK,WAAW,IAAI,IAAI;EACxB,MAAM,QAAkB,SAAS,EAAE,YAAY,MAAK,IAAK,EAAE,MAAM,MAAK;EACtE,KAAK,KAAK,UAAU,UAAU,KAAK,CAAC,CAAC,UAAU;GAC7C,YAAW;IACT,KAAK,WAAW,IAAI,KAAK;IACzB,KAAK,SAAQ;IACb,KAAK,SAAS,KAAI;GACpB;GACA,QAAQ,QAAgB;IACtB,KAAK,WAAW,IAAI,KAAK;IACzB,MAAM,UAAU,mBAAmB,GAAG;IACtC,IAAI,YAAY,WAAW;KACzB,KAAK,eAAc;KACnB;IACF;IACA,IAAI,YAAY,cAAc;KAC5B,KAAK,KAAK,IAAI,EAAE;KAChB,KAAK,WAAW,IAAI,EAAE;IACxB;IACA,MAAM,OAAO,KAAK,KAAI;IACtB,KAAK,KACH,YAAY,iBACR,KAAK,kBACL,YAAY,eACV,KAAK,YACL,KAAK,cACX,KAAK;GAET;EACD,CAAA;CACH;CAEA,aAAU;EACR,MAAM,WAAW,KAAK,SAAQ;EAC9B,IAAI,KAAK,WAAU,KAAM,aAAa,MACpC;EAEF,KAAK,MAAM,IAAI,EAAE;EACjB,KAAK,WAAW,IAAI,IAAI;EACxB,KAAK,gBAAgB,IAAI,IAAI;EAC7B,MAAM,MAAM,EAAE,KAAK;EACnB,KAAK,KACF,sBAAsB,QAAQ,CAAC,CAC/B,KACC,WAAW,EAAE,aAAa,gBACxB,QAAQ,KAAK,WACT,QACA,KAAK,oBAAoB,SAAS,CAAC,CAAC,CAAC,KACnC,WAAW,eACT,QAAQ,KAAK,WACT,KAAK,KAAK,uBAAuB,UAAU,aAAa,UAAU,IAClE,KAAK,CACV,CACF,CACN,CACF,CACA,UAAU;GACT,YAAW;IACT,KAAK,WAAW,IAAI,KAAK;IACzB,KAAK,gBAAgB,IAAI,KAAK;IAC9B,KAAK,SAAQ;IACb,KAAK,SAAS,KAAI;GACpB;GACA,QAAQ,QAAgB;IACtB,IAAI,QAAQ,KAAK,UACf;IAEF,KAAK,WAAW,IAAI,KAAK;IACzB,KAAK,gBAAgB,IAAI,KAAK;IAC9B,KAAK,cAAc,GAAG;GACxB;EACD,CAAA;CACL;CAEQ,cAAc,KAAY;EAChC,MAAM,OAAO,KAAK,KAAI;EACtB,IAAI,CAAC,gBAAgB,GAAG,GACtB,QAAQ,qBAAqB,GAAG,GAAhC;GACE,KAAK;IACH,KAAK,KAAK,KAAK,WAAW,eAAe,MAAM;IAC/C;GACF,KAAK;IACH,KAAK,KAAK,KAAK,oBAAoB,aAAa;IAChD;GACF;IACE,KAAK,KAAK,KAAK,cAAc,aAAa;IAC1C;EACJ;EAEF,QAAQ,mBAAmB,GAAG,GAA9B;GACE,KAAK;IACH,KAAK,eAAc;IACnB;GACF,KAAK;IACH,KAAK,KAAK,KAAK,gBAAgB,aAAa;IAC5C;GACF,KAAK;IACH,KAAK,KAAK,KAAK,iBAAiB,aAAa;IAC7C;GACF,KAAK;IACH,KAAK,KAAK,KAAK,qBAAqB,aAAa;IACjD;GACF,SACE,KAAK,KAAK,KAAK,cAAc,aAAa;EAC9C;CACF;CAEA,mBAAgB;EACd,KAAK,MAAM,IAAI,EAAE;EACjB,KAAK,cAAc,QAAQ,WAAW,CAAC,MAAM;EAC7C,KAAK,WAAW,KAAK,cAAa,IAAK,oBAAoB,KAAK,qBAAoB,CAAE;CACxF;CAEQ,uBAAoB;EAC1B,IAAI,KAAK,eAAc,GACrB,OAAO;EAET,OAAO,KAAK,cAAa,IAAK,gBAAgB;CAChD;CAEA,oBAAiB;EACf,KAAK,SAAQ;EACb,KAAK,MAAM,IAAI,EAAE;EACjB,KAAK,WAAW,UAAU;CAC5B;CAEA,iBAAc;EACZ,KAAK,SAAQ;EACb,KAAK,KAAK,KAAK,KAAI,CAAE,CAAC,cAAc,UAAU;CAChD;CAEA,SAAS,OAAa;EACpB,KAAK,KAAK,SAAS,KAAK;EACxB,KAAK,SAAQ;EACb,KAAK,SAAS,KAAI;CACpB;CAEQ,WAAQ;EACd,KAAK;EACL,KAAK,WAAW,IAAI,KAAK;EACzB,KAAK,gBAAgB,IAAI,KAAK;EAC9B,KAAK,SAAS,IAAI,IAAI;EACtB,KAAK,iBAAiB,IAAI,KAAK;EAC/B,KAAK,WAAW,IAAI,KAAK;EACzB,KAAK,cAAc,IAAI,KAAK;EAC5B,KAAK,cAAc,IAAI,KAAK;EAC5B,KAAK,KAAK,IAAI,EAAE;EAChB,KAAK,WAAW,IAAI,EAAE;CACxB;CAEQ,KAAK,SAAiB,aAAqB,UAA4B,SAAO;EACpF,KAAK,aAAa,IAAI,OAAO;EAC7B,KAAK,MAAM,IAAI,OAAO;EACtB,KAAK,WAAW,WAAW;CAC7B;CAEQ,WAAW,QAAc;EAC/B,iBAAiB,KAAK,MAAM,KAAK,UAAU,IAAI,KAAK,GAAE,GAAI,UAAU,EAClE,gBAAgB,SACjB,CAAA;CACH;CAtTW,OAAA,OAAA,GAAA,mBAAA;EAAA,YAAA;EAAA,SAAA;EAAA,UAAA;EAAA,MAAA;EAAS,MAAA,CAAA;EAAA,QAAA,GAAA,gBAAA;CAAA,CAAA;CAAT,OAAA,OAAA,GAAA,qBAAA;EAAA,YAAA;EAAA,SAAA;EAAA,MAAA;EAAS,cAAA;EAAA,UAAA;EAAA,QAAA,EAAA,QAAA;GAAA,mBAAA;GAAA,YAAA;GAAA,UAAA;GAAA,YAAA;GAAA,mBAAA;EAAA,EAAA;EAAA,SAAA,EAAA,UAAA,WAAA;EAAA,SAAA,CAAA;GAAA,cAAA;GAAA,OAAA;GAAA,WAS2B;GAAc,aAAA;GAAA,UAAA;EAAA,CAAA;EAAA,UAAA;EAAA,UCnD/D;EA6JA,cAAA;GAAA;IAAA,MAAA;IAAA,MDvHY;GAAW;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;KAAA;IAAA;IAAA,SAAA,CAAA,eAAA;IAAA,UAAA,CAAA,SAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAA,GAAA;IAAA,UAAA;IAAA,QAAA,CAAA,eAAA;IAAA,SAAA,CAAA,UAAA;IAAA,UAAA,CAAA,QAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAM,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;IAAA;IAAA,SAAA,CAAA,SAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAO,UAAA;IAAA,QAAA,CAAA,eAAA,OAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAQ,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;IAAA;IAAA,SAAA,CAAA,WAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAK,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;KAAA;IAAA;IAAA,SAAA,CAAA,WAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAU,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;IAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAS,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;IAAA;GAAA;GAAA;IAAA,MAAA;IAAA,MAAE;IAAa,UAAA;IAAA,QAAA;KAAA;KAAA;KAAA;IAAA;IAAA,SAAA;KAAA;KAAA;KAAA;IAAA;GAAA;EAAA;EAAA,iBAAA,GAAA,wBAAA;CAAA,CAAA;;AAIlF,GAAA,yBAAA;CAAA,YAAA;CAAA,SAAA;CAAA,UAAA;CAAA,MAAA;CAAS,YAAA,CAAA;EAPrB,MAAA;EACW,MAAA,CAAA;GAAA,UAAA;GAAgB,YACd;GAAI,SACP;IAAC;IAAa;IAAQ;IAAS;IAAU;IAAO;IAAY;IAAW;GAAa;GAAC,iBAE7E,wBAAwB;GAAM,UAAA;EAAA,CAAA;CAWA,CAAA;CAAA,sBAAA,CAAA;CAAA,gBAAA;EAAA,QAAA,CAAA;GAAA,MAAA,GAAA;GAAA,MAAA,CAAA;IAAA,UAAA;IAAA,OAAA;IAAA,UAAA;GAAA,CAAA;EAAA,CAAA;EAAA,UAAA,CAAA;GAAA,MAAA,GAAA;GAAA,MAAA,CAAA,UAAA;EAAA,CAAA;EAAA,cAAA,CAAA;GAAA,MAAA,GAAA;GAAA,MAAA,CAAA,GAAA,iBAAA,cAAc,GAAA,EAAA,UAAA,KAAA,CAAA;EAAA,CAAA;CAAA;AAAA,CAAA"}