@microsoft/omnichannel-chat-sdk 2.0.1 → 2.0.2-main.355218f

package/lib/utils/chatTokenRenewal.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Fail-safe ACS chat token refresher backed by the Omnichannel renew chat token API.
+ *
+ * The refresher NEVER throws and NEVER returns an unusable token. On any failure (API not deployed, feature disabled,
+ * chat ended, network error, timeout, invalid response, ...) it returns the last known good token, which is exactly
+ * what the SDK did before renewal existed, so behavior falls back to the existing flow.
+ */
+export interface RenewedChatToken {
+    ChatId?: string;
+    Token?: string;
+    ExpiresIn?: string | number;
+    VoiceVideoCallToken?: unknown;
+}
+export interface ChatTokenRefresherParams {
+    initialToken: string;
+    chatId: string;
+    /** Returns false once the chat this refresher was created for has ended or was replaced. */
+    isChatActive: () => boolean;
+    /** Calls the renew chat token API. May throw. */
+    renewChatToken: () => Promise<RenewedChatToken>;
+    /** Invoked after a usable token is received for the same chat. May throw. */
+    onRenewed: (renewed: RenewedChatToken) => void;
+    onStart?: () => void;
+    onSuccess?: () => void;
+    onFailure?: (reason: string, error?: unknown) => void;
+    /** Returns true when an HTTP status means renewal cannot succeed for this chat. Checked on each failure. */
+    isNonRetriableStatus?: (statusCode: number) => boolean;
+    retryCooldownInMs?: number;
+    timeoutInMs?: number;
+    now?: () => number;
+}
+export declare const defaultChatTokenRenewalRetryCooldownInMs: number;
+export declare const defaultChatTokenRenewalTimeoutInMs: number;
+export declare const defaultNonRetriableStatusCodes: number[];
+export declare const authenticatedNonRetriableStatusCodes: number[];
+/**
+ * Returns the expiry of a JWT chat token in milliseconds since epoch, or undefined when it cannot be read.
+ */
+export declare const getChatTokenExpiresOnInMs: (token: unknown) => number | undefined;
+/**
+ * Returns true when the token is a JWT whose exp claim is far enough in the future to be accepted by ACS.
+ */
+export declare const isChatTokenUsable: (token: unknown, nowInMs?: number) => boolean;
+export declare const createChatTokenRefresher: (params: ChatTokenRefresherParams) => (() => Promise<string>);

package/lib/utils/chatTokenRenewal.js

@@ -0,0 +1,223 @@
+"use strict";
+/**
+ * Fail-safe ACS chat token refresher backed by the Omnichannel renew chat token API.
+ *
+ * The refresher NEVER throws and NEVER returns an unusable token. On any failure (API not deployed, feature disabled,
+ * chat ended, network error, timeout, invalid response, ...) it returns the last known good token, which is exactly
+ * what the SDK did before renewal existed, so behavior falls back to the existing flow.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createChatTokenRefresher = exports.isChatTokenUsable = exports.getChatTokenExpiresOnInMs = exports.authenticatedNonRetriableStatusCodes = exports.defaultNonRetriableStatusCodes = exports.defaultChatTokenRenewalTimeoutInMs = exports.defaultChatTokenRenewalRetryCooldownInMs = void 0;
+exports.defaultChatTokenRenewalRetryCooldownInMs = 60 * 1000;
+exports.defaultChatTokenRenewalTimeoutInMs = 60 * 1000;
+var minimumTokenLifetimeInMs = 60 * 1000;
+// The API is not deployed, renewal is disabled for the org, or the chat cannot be renewed. Retrying will not help.
+exports.defaultNonRetriableStatusCodes = [400, 401, 403, 404, 405];
+// On the authenticated route, 400/401/403 come from customer token validation and can succeed once the host has a fresh token.
+exports.authenticatedNonRetriableStatusCodes = [404, 405];
+var decodeBase64Url = function (value) {
+    var base64 = value.replace(/-/g, "+").replace(/_/g, "/");
+    var padded = base64 + "=".repeat((4 - (base64.length % 4)) % 4);
+    if (typeof atob === "function") {
+        return atob(padded);
+    }
+    if (typeof Buffer !== "undefined" && typeof Buffer.from === "function") {
+        return Buffer.from(padded, "base64").toString("utf8");
+    }
+    return null;
+};
+/**
+ * Returns the expiry of a JWT chat token in milliseconds since epoch, or undefined when it cannot be read.
+ */
+var getChatTokenExpiresOnInMs = function (token) {
+    try {
+        if (typeof token !== "string" || token.trim().length === 0) {
+            return undefined;
+        }
+        var parts = token.split(".");
+        if (parts.length !== 3) {
+            return undefined;
+        }
+        var payload = decodeBase64Url(parts[1]);
+        if (!payload) {
+            return undefined;
+        }
+        var exp = JSON.parse(payload).exp;
+        return typeof exp === "number" ? exp * 1000 : undefined;
+    }
+    catch (_a) {
+        return undefined;
+    }
+};
+exports.getChatTokenExpiresOnInMs = getChatTokenExpiresOnInMs;
+/**
+ * Returns true when the token is a JWT whose exp claim is far enough in the future to be accepted by ACS.
+ */
+var isChatTokenUsable = function (token, nowInMs) {
+    if (nowInMs === void 0) { nowInMs = Date.now(); }
+    var expiresOnInMs = (0, exports.getChatTokenExpiresOnInMs)(token);
+    return expiresOnInMs !== undefined && expiresOnInMs > nowInMs + minimumTokenLifetimeInMs;
+};
+exports.isChatTokenUsable = isChatTokenUsable;
+var getStatusCode = function (error) {
+    var _a;
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    var status = (_a = error === null || error === void 0 ? void 0 : error.response) === null || _a === void 0 ? void 0 : _a.status;
+    return typeof status === "number" ? status : undefined;
+};
+var createChatTokenRefresher = function (params) {
+    var _a, _b, _c, _d;
+    var retryCooldownInMs = (_a = params.retryCooldownInMs) !== null && _a !== void 0 ? _a : exports.defaultChatTokenRenewalRetryCooldownInMs;
+    var timeoutInMs = (_b = params.timeoutInMs) !== null && _b !== void 0 ? _b : exports.defaultChatTokenRenewalTimeoutInMs;
+    var now = (_c = params.now) !== null && _c !== void 0 ? _c : (function () { return Date.now(); });
+    var isNonRetriableStatus = (_d = params.isNonRetriableStatus) !== null && _d !== void 0 ? _d : (function (statusCode) { return exports.defaultNonRetriableStatusCodes.includes(statusCode); });
+    var latestToken = params.initialToken;
+    var isDisabled = false;
+    var lastFailureTime = null;
+    var activeRenewal = null;
+    var safeInvoke = function (callback) {
+        try {
+            callback === null || callback === void 0 ? void 0 : callback();
+        }
+        catch (_a) {
+            // Telemetry callbacks must never break the refresh.
+        }
+    };
+    var fail = function (reason, error, disable) {
+        if (disable === void 0) { disable = false; }
+        if (disable) {
+            isDisabled = true;
+        }
+        else {
+            lastFailureTime = now();
+        }
+        safeInvoke(function () { var _a; return (_a = params.onFailure) === null || _a === void 0 ? void 0 : _a.call(params, reason, error); });
+        return latestToken;
+    };
+    var renew = function () { return __awaiter(void 0, void 0, void 0, function () {
+        var renewed, timeoutId_1, timeout, error_1, statusCode, isNonRetriable;
+        return __generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    safeInvoke(params.onStart);
+                    _a.label = 1;
+                case 1:
+                    _a.trys.push([1, 6, , 7]);
+                    timeout = new Promise(function (_, reject) {
+                        timeoutId_1 = setTimeout(function () { return reject(new Error("RenewChatTokenTimeout")); }, timeoutInMs);
+                    });
+                    _a.label = 2;
+                case 2:
+                    _a.trys.push([2, , 4, 5]);
+                    return [4 /*yield*/, Promise.race([params.renewChatToken(), timeout])];
+                case 3:
+                    renewed = _a.sent();
+                    return [3 /*break*/, 5];
+                case 4:
+                    clearTimeout(timeoutId_1);
+                    return [7 /*endfinally*/];
+                case 5: return [3 /*break*/, 7];
+                case 6:
+                    error_1 = _a.sent();
+                    statusCode = getStatusCode(error_1);
+                    isNonRetriable = statusCode !== undefined && isNonRetriableStatus(statusCode);
+                    return [2 /*return*/, fail(statusCode !== undefined ? "HttpStatus".concat(statusCode) : "RequestFailed", error_1, isNonRetriable)];
+                case 7:
+                    if (!params.isChatActive()) {
+                        return [2 /*return*/, fail("ChatNotActive")];
+                    }
+                    if (!renewed || renewed.ChatId !== params.chatId) {
+                        return [2 /*return*/, fail("ChatIdMismatch")];
+                    }
+                    if (!(0, exports.isChatTokenUsable)(renewed.Token, now())) {
+                        return [2 /*return*/, fail("InvalidToken")];
+                    }
+                    try {
+                        params.onRenewed(renewed);
+                    }
+                    catch (error) {
+                        return [2 /*return*/, fail("UpdateFailed", error)];
+                    }
+                    latestToken = renewed.Token;
+                    lastFailureTime = null;
+                    safeInvoke(params.onSuccess);
+                    return [2 /*return*/, latestToken];
+            }
+        });
+    }); };
+    return function () { return __awaiter(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    _b.trys.push([0, 2, , 3]);
+                    if (isDisabled || !params.isChatActive()) {
+                        return [2 /*return*/, latestToken];
+                    }
+                    if (lastFailureTime !== null && now() - lastFailureTime < retryCooldownInMs) {
+                        return [2 /*return*/, latestToken];
+                    }
+                    if (!activeRenewal) {
+                        activeRenewal = (function () { return __awaiter(void 0, void 0, void 0, function () {
+                            return __generator(this, function (_a) {
+                                switch (_a.label) {
+                                    case 0:
+                                        _a.trys.push([0, , 2, 3]);
+                                        return [4 /*yield*/, renew()];
+                                    case 1: return [2 /*return*/, _a.sent()];
+                                    case 2:
+                                        activeRenewal = null;
+                                        return [7 /*endfinally*/];
+                                    case 3: return [2 /*return*/];
+                                }
+                            });
+                        }); })();
+                    }
+                    return [4 /*yield*/, activeRenewal];
+                case 1: return [2 /*return*/, _b.sent()];
+                case 2:
+                    _a = _b.sent();
+                    return [2 /*return*/, latestToken];
+                case 3: return [2 /*return*/];
+            }
+        });
+    }); };
+};
+exports.createChatTokenRefresher = createChatTokenRefresher;
+//# sourceMappingURL=chatTokenRenewal.js.map

package/lib/utils/chatTokenRenewal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatTokenRenewal.js","sourceRoot":"","sources":["../../src/utils/chatTokenRenewal.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BU,QAAA,wCAAwC,GAAG,EAAE,GAAG,IAAI,CAAC;AACrD,QAAA,kCAAkC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,IAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C,mHAAmH;AACtG,QAAA,8BAA8B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAExE,+HAA+H;AAClH,QAAA,oCAAoC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAE/D,IAAM,eAAe,GAAG,UAAC,KAAa;IAClC,IAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3D,IAAM,MAAM,GAAG,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACrE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1D,CAAC;IAED,OAAO,IAAI,CAAC;AAChB,CAAC,CAAC;AAEF;;GAEG;AACI,IAAM,yBAAyB,GAAG,UAAC,KAAc;IACpD,IAAI,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,SAAS,CAAC;QACrB,CAAC;QAEO,IAAA,GAAG,GAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAxB,CAAyB;QACpC,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5D,CAAC;IAAC,WAAM,CAAC;QACL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC,CAAC;AArBW,QAAA,yBAAyB,6BAqBpC;AAEF;;GAEG;AACI,IAAM,iBAAiB,GAAG,UAAC,KAAc,EAAE,OAA4B;IAA5B,wBAAA,EAAA,UAAkB,IAAI,CAAC,GAAG,EAAE;IAC1E,IAAM,aAAa,GAAG,IAAA,iCAAyB,EAAC,KAAK,CAAC,CAAC;IACvD,OAAO,aAAa,KAAK,SAAS,IAAI,aAAa,GAAG,OAAO,GAAG,wBAAwB,CAAC;AAC7F,CAAC,CAAC;AAHW,QAAA,iBAAiB,qBAG5B;AAEF,IAAM,aAAa,GAAG,UAAC,KAAc;;IACjC,8DAA8D;IAC9D,IAAM,MAAM,GAAG,MAAC,KAAa,aAAb,KAAK,uBAAL,KAAK,CAAU,QAAQ,0CAAE,MAAM,CAAC;IAChD,OAAO,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC,CAAC;AAEK,IAAM,wBAAwB,GAAG,UAAC,MAAgC;;IACrE,IAAM,iBAAiB,GAAG,MAAA,MAAM,CAAC,iBAAiB,mCAAI,gDAAwC,CAAC;IAC/F,IAAM,WAAW,GAAG,MAAA,MAAM,CAAC,WAAW,mCAAI,0CAAkC,CAAC;IAC7E,IAAM,GAAG,GAAG,MAAA,MAAM,CAAC,GAAG,mCAAI,CAAC,cAAM,OAAA,IAAI,CAAC,GAAG,EAAE,EAAV,CAAU,CAAC,CAAC;IAC7C,IAAM,oBAAoB,GAAG,MAAA,MAAM,CAAC,oBAAoB,mCAAI,CAAC,UAAC,UAAkB,IAAK,OAAA,sCAA8B,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAnD,CAAmD,CAAC,CAAC;IAE1I,IAAI,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;IACtC,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,IAAI,aAAa,GAA2B,IAAI,CAAC;IAEjD,IAAM,UAAU,GAAG,UAAC,QAAqB;QACrC,IAAI,CAAC;YACD,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,EAAI,CAAC;QACjB,CAAC;QAAC,WAAM,CAAC;YACL,oDAAoD;QACxD,CAAC;IACL,CAAC,CAAC;IAEF,IAAM,IAAI,GAAG,UAAC,MAAc,EAAE,KAAe,EAAE,OAAe;QAAf,wBAAA,EAAA,eAAe;QAC1D,IAAI,OAAO,EAAE,CAAC;YACV,UAAU,GAAG,IAAI,CAAC;QACtB,CAAC;aAAM,CAAC;YACJ,eAAe,GAAG,GAAG,EAAE,CAAC;QAC5B,CAAC;QAED,UAAU,CAAC,sBAAM,OAAA,MAAA,MAAM,CAAC,SAAS,uDAAG,MAAM,EAAE,KAAK,CAAC,CAAA,EAAA,CAAC,CAAC;QACpD,OAAO,WAAW,CAAC;IACvB,CAAC,CAAC;IAEF,IAAM,KAAK,GAAG;;;;;oBACV,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;;;;oBAKjB,OAAO,GAAG,IAAI,OAAO,CAAQ,UAAC,CAAC,EAAE,MAAM;wBACzC,WAAS,GAAG,UAAU,CAAC,cAAM,OAAA,MAAM,CAAC,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAA1C,CAA0C,EAAE,WAAW,CAAC,CAAC;oBAC1F,CAAC,CAAC,CAAC;;;;oBAGW,qBAAM,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,OAAO,CAAC,CAAC,EAAA;;oBAAhE,OAAO,GAAG,SAAsD,CAAC;;;oBAEjE,YAAY,CAAC,WAAS,CAAC,CAAC;;;;;oBAGtB,UAAU,GAAG,aAAa,CAAC,OAAK,CAAC,CAAC;oBAClC,cAAc,GAAG,UAAU,KAAK,SAAS,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;oBACpF,sBAAO,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAa,UAAU,CAAE,CAAC,CAAC,CAAC,eAAe,EAAE,OAAK,EAAE,cAAc,CAAC,EAAC;;oBAG/G,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;wBACzB,sBAAO,IAAI,CAAC,eAAe,CAAC,EAAC;oBACjC,CAAC;oBAED,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;wBAC/C,sBAAO,IAAI,CAAC,gBAAgB,CAAC,EAAC;oBAClC,CAAC;oBAED,IAAI,CAAC,IAAA,yBAAiB,EAAC,OAAO,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;wBAC3C,sBAAO,IAAI,CAAC,cAAc,CAAC,EAAC;oBAChC,CAAC;oBAED,IAAI,CAAC;wBACD,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;oBAC9B,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACb,sBAAO,IAAI,CAAC,cAAc,EAAE,KAAK,CAAC,EAAC;oBACvC,CAAC;oBAED,WAAW,GAAG,OAAO,CAAC,KAAe,CAAC;oBACtC,eAAe,GAAG,IAAI,CAAC;oBACvB,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC7B,sBAAO,WAAW,EAAC;;;SACtB,CAAC;IAEF,OAAO;;;;;;oBAEC,IAAI,UAAU,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,CAAC;wBACvC,sBAAO,WAAW,EAAC;oBACvB,CAAC;oBAED,IAAI,eAAe,KAAK,IAAI,IAAI,GAAG,EAAE,GAAG,eAAe,GAAG,iBAAiB,EAAE,CAAC;wBAC1E,sBAAO,WAAW,EAAC;oBACvB,CAAC;oBAED,IAAI,CAAC,aAAa,EAAE,CAAC;wBACjB,aAAa,GAAG,CAAC;;;;;wCAEF,qBAAM,KAAK,EAAE,EAAA;4CAApB,sBAAO,SAAa,EAAC;;wCAErB,aAAa,GAAG,IAAI,CAAC;;;;;6BAE5B,CAAC,EAAE,CAAC;oBACT,CAAC;oBAEM,qBAAM,aAAa,EAAA;wBAA1B,sBAAO,SAAmB,EAAC;;;oBAE3B,sBAAO,WAAW,EAAC;;;;SAE1B,CAAC;AACN,CAAC,CAAC;AApGW,QAAA,wBAAwB,4BAoGnC"}

package/lib/utils/chatTokenUnauthorizedRecovery.d.ts

@@ -0,0 +1,64 @@
+/**
+ * Recovers ACS chat requests that fail with 401 Unauthorized while the chat token has not expired, for example after
+ * the token was revoked.
+ *
+ * Recovery is fail-safe. It never throws, retries a failed request at most once, renews the token at most once per
+ * interval for a chat, stops renewing after ACS rejects several renewed tokens in a row, and gives the original 401
+ * back to the caller when no different usable token is available, which is exactly the behavior without recovery.
+ */
+import { ChatClientOptions } from "@azure/communication-chat";
+import { CommunicationTokenCredential } from "@azure/communication-common";
+export declare enum UnauthorizedRecoverySource {
+    ChatRequest = "ChatRequest"
+}
+export declare enum UnauthorizedRecoveryFailureReason {
+    /** Renewal did not return a different usable token. */
+    NoNewToken = "NoNewToken",
+    /** ACS returned 401 for the renewed token too. */
+    RenewedTokenRejected = "RenewedTokenRejected"
+}
+export interface ChatTokenUnauthorizedRecoveryParams {
+    initialToken: string;
+    /** Renews the chat token. Must never throw and returns the current token when renewal is not possible. */
+    refreshToken: () => Promise<string>;
+    onStart?: (source: UnauthorizedRecoverySource) => void;
+    /** Called when ACS accepts a renewed token, or when an existing newer token is used without renewing. */
+    onSuccess?: (source: UnauthorizedRecoverySource, usedExistingToken: boolean) => void;
+    onFailure?: (source: UnauthorizedRecoverySource, reason: UnauthorizedRecoveryFailureReason) => void;
+    minRenewalIntervalInMs?: number;
+    /** Renewals in a row whose token ACS also rejected, after which recovery stops renewing for the chat. */
+    maxRejectedRenewals?: number;
+    now?: () => number;
+}
+export interface ChatTokenUnauthorizedRecovery {
+    /** Returns the token to send: the given token, or the newest usable token known, whichever expires later. */
+    selectToken: (token: string) => string;
+    /** Records a token obtained outside recovery, such as a proactive renewal. */
+    observeToken: (token: string) => void;
+    /** Returns a different usable token to retry with after a 401, or undefined when none is available. */
+    recover: (failedToken: string | undefined, source: UnauthorizedRecoverySource) => Promise<string | undefined>;
+    /** Reports whether ACS accepted a request sent with the given token. */
+    reportTokenResult: (token: string, accepted: boolean) => void;
+}
+export declare const defaultUnauthorizedRecoveryMinRenewalIntervalInMs: number;
+export declare const defaultUnauthorizedRecoveryMaxRejectedRenewals = 3;
+export declare const createChatTokenUnauthorizedRecovery: (params: ChatTokenUnauthorizedRecoveryParams) => ChatTokenUnauthorizedRecovery;
+type ChatAdditionalPolicy = NonNullable<ChatClientOptions["additionalPolicies"]>[number];
+export declare const chatTokenUnauthorizedRecoveryPolicyName = "ChatTokenUnauthorizedRecoveryPolicy";
+/**
+ * Pipeline policy for ACS chat requests. Runs after the authentication policy on every attempt, sends the newest
+ * usable token, and resends a request that failed with 401 once with a different usable token.
+ */
+export declare const createChatTokenUnauthorizedRecoveryPolicy: (recovery: ChatTokenUnauthorizedRecovery) => ChatAdditionalPolicy;
+/**
+ * Credential that gives the newest usable token to ACS, including the real-time notification client, which reads
+ * the token from the credential instead of the request pipeline.
+ */
+export declare class ChatTokenUnauthorizedRecoveryCredential implements CommunicationTokenCredential {
+    private credential;
+    private recovery;
+    constructor(credential: CommunicationTokenCredential, recovery: ChatTokenUnauthorizedRecovery);
+    getToken(options?: Parameters<CommunicationTokenCredential["getToken"]>[0]): Promise<Awaited<ReturnType<CommunicationTokenCredential["getToken"]>>>;
+    dispose(): void;
+}
+export {};

package/lib/utils/chatTokenUnauthorizedRecovery.js

@@ -0,0 +1,293 @@
+"use strict";
+/**
+ * Recovers ACS chat requests that fail with 401 Unauthorized while the chat token has not expired, for example after
+ * the token was revoked.
+ *
+ * Recovery is fail-safe. It never throws, retries a failed request at most once, renews the token at most once per
+ * interval for a chat, stops renewing after ACS rejects several renewed tokens in a row, and gives the original 401
+ * back to the caller when no different usable token is available, which is exactly the behavior without recovery.
+ */
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+var __generator = (this && this.__generator) || function (thisArg, body) {
+    var _ = { label: 0, sent: function() { if (t[0] & 1) throw t[1]; return t[1]; }, trys: [], ops: [] }, f, y, t, g = Object.create((typeof Iterator === "function" ? Iterator : Object).prototype);
+    return g.next = verb(0), g["throw"] = verb(1), g["return"] = verb(2), typeof Symbol === "function" && (g[Symbol.iterator] = function() { return this; }), g;
+    function verb(n) { return function (v) { return step([n, v]); }; }
+    function step(op) {
+        if (f) throw new TypeError("Generator is already executing.");
+        while (g && (g = 0, op[0] && (_ = 0)), _) try {
+            if (f = 1, y && (t = op[0] & 2 ? y["return"] : op[0] ? y["throw"] || ((t = y["return"]) && t.call(y), 0) : y.next) && !(t = t.call(y, op[1])).done) return t;
+            if (y = 0, t) op = [op[0] & 2, t.value];
+            switch (op[0]) {
+                case 0: case 1: t = op; break;
+                case 4: _.label++; return { value: op[1], done: false };
+                case 5: _.label++; y = op[1]; op = [0]; continue;
+                case 7: op = _.ops.pop(); _.trys.pop(); continue;
+                default:
+                    if (!(t = _.trys, t = t.length > 0 && t[t.length - 1]) && (op[0] === 6 || op[0] === 2)) { _ = 0; continue; }
+                    if (op[0] === 3 && (!t || (op[1] > t[0] && op[1] < t[3]))) { _.label = op[1]; break; }
+                    if (op[0] === 6 && _.label < t[1]) { _.label = t[1]; t = op; break; }
+                    if (t && _.label < t[2]) { _.label = t[2]; _.ops.push(op); break; }
+                    if (t[2]) _.ops.pop();
+                    _.trys.pop(); continue;
+            }
+            op = body.call(thisArg, _);
+        } catch (e) { op = [6, e]; y = 0; } finally { f = t = 0; }
+        if (op[0] & 5) throw op[1]; return { value: op[0] ? op[1] : void 0, done: true };
+    }
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChatTokenUnauthorizedRecoveryCredential = exports.createChatTokenUnauthorizedRecoveryPolicy = exports.chatTokenUnauthorizedRecoveryPolicyName = exports.createChatTokenUnauthorizedRecovery = exports.defaultUnauthorizedRecoveryMaxRejectedRenewals = exports.defaultUnauthorizedRecoveryMinRenewalIntervalInMs = exports.UnauthorizedRecoveryFailureReason = exports.UnauthorizedRecoverySource = void 0;
+var chatTokenRenewal_1 = require("./chatTokenRenewal");
+var UnauthorizedRecoverySource;
+(function (UnauthorizedRecoverySource) {
+    UnauthorizedRecoverySource["ChatRequest"] = "ChatRequest";
+})(UnauthorizedRecoverySource || (exports.UnauthorizedRecoverySource = UnauthorizedRecoverySource = {}));
+var UnauthorizedRecoveryFailureReason;
+(function (UnauthorizedRecoveryFailureReason) {
+    /** Renewal did not return a different usable token. */
+    UnauthorizedRecoveryFailureReason["NoNewToken"] = "NoNewToken";
+    /** ACS returned 401 for the renewed token too. */
+    UnauthorizedRecoveryFailureReason["RenewedTokenRejected"] = "RenewedTokenRejected";
+})(UnauthorizedRecoveryFailureReason || (exports.UnauthorizedRecoveryFailureReason = UnauthorizedRecoveryFailureReason = {}));
+exports.defaultUnauthorizedRecoveryMinRenewalIntervalInMs = 60 * 1000;
+exports.defaultUnauthorizedRecoveryMaxRejectedRenewals = 3;
+var createChatTokenUnauthorizedRecovery = function (params) {
+    var _a, _b, _c;
+    var minRenewalIntervalInMs = (_a = params.minRenewalIntervalInMs) !== null && _a !== void 0 ? _a : exports.defaultUnauthorizedRecoveryMinRenewalIntervalInMs;
+    var maxRejectedRenewals = (_b = params.maxRejectedRenewals) !== null && _b !== void 0 ? _b : exports.defaultUnauthorizedRecoveryMaxRejectedRenewals;
+    var now = (_c = params.now) !== null && _c !== void 0 ? _c : (function () { return Date.now(); });
+    var latestToken = params.initialToken;
+    var lastRenewalTime = null;
+    var activeRenewal = null;
+    var rejectedRenewals = 0;
+    // Renewed token whose first ACS response has not been reported yet
+    var unverifiedRenewal = null;
+    var safeInvoke = function (callback) {
+        try {
+            callback();
+        }
+        catch (_a) {
+            // Telemetry callbacks must never break recovery
+        }
+    };
+    var isNewer = function (candidate, current) {
+        var candidateExpiresOn = (0, chatTokenRenewal_1.getChatTokenExpiresOnInMs)(candidate);
+        if (candidateExpiresOn === undefined) {
+            return false;
+        }
+        var currentExpiresOn = (0, chatTokenRenewal_1.getChatTokenExpiresOnInMs)(current);
+        return currentExpiresOn === undefined || candidateExpiresOn > currentExpiresOn;
+    };
+    var observeToken = function (token) {
+        try {
+            if (token && token !== latestToken && (0, chatTokenRenewal_1.isChatTokenUsable)(token, now()) && isNewer(token, latestToken)) {
+                latestToken = token;
+            }
+        }
+        catch (_a) {
+            // Keep the current token
+        }
+    };
+    var selectToken = function (token) {
+        try {
+            if (latestToken && latestToken !== token && (0, chatTokenRenewal_1.isChatTokenUsable)(latestToken, now()) && isNewer(latestToken, token)) {
+                return latestToken;
+            }
+        }
+        catch (_a) {
+            // Keep the given token
+        }
+        return token;
+    };
+    var renew = function (failedToken, source) { return __awaiter(void 0, void 0, void 0, function () {
+        var token, _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    lastRenewalTime = now();
+                    safeInvoke(function () { var _a; return (_a = params.onStart) === null || _a === void 0 ? void 0 : _a.call(params, source); });
+                    _b.label = 1;
+                case 1:
+                    _b.trys.push([1, 3, , 4]);
+                    return [4 /*yield*/, params.refreshToken()];
+                case 2:
+                    token = _b.sent();
+                    return [3 /*break*/, 4];
+                case 3:
+                    _a = _b.sent();
+                    token = undefined;
+                    return [3 /*break*/, 4];
+                case 4:
+                    if (!token || token === failedToken || !(0, chatTokenRenewal_1.isChatTokenUsable)(token, now())) {
+                        safeInvoke(function () { var _a; return (_a = params.onFailure) === null || _a === void 0 ? void 0 : _a.call(params, source, UnauthorizedRecoveryFailureReason.NoNewToken); });
+                        return [2 /*return*/, undefined];
+                    }
+                    observeToken(token);
+                    unverifiedRenewal = { token: token, source: source };
+                    return [2 /*return*/, token];
+            }
+        });
+    }); };
+    var reportTokenResult = function (token, accepted) {
+        try {
+            if (!unverifiedRenewal || unverifiedRenewal.token !== token) {
+                return;
+            }
+            var source_1 = unverifiedRenewal.source;
+            unverifiedRenewal = null;
+            if (accepted) {
+                rejectedRenewals = 0;
+                safeInvoke(function () { var _a; return (_a = params.onSuccess) === null || _a === void 0 ? void 0 : _a.call(params, source_1, false); });
+            }
+            else {
+                rejectedRenewals++;
+                safeInvoke(function () { var _a; return (_a = params.onFailure) === null || _a === void 0 ? void 0 : _a.call(params, source_1, UnauthorizedRecoveryFailureReason.RenewedTokenRejected); });
+            }
+        }
+        catch (_a) {
+            // Reporting must never break the request
+        }
+    };
+    var recover = function (failedToken, source) { return __awaiter(void 0, void 0, void 0, function () {
+        var _a;
+        return __generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    _b.trys.push([0, 4, , 5]);
+                    if (latestToken && latestToken !== failedToken && (0, chatTokenRenewal_1.isChatTokenUsable)(latestToken, now())) {
+                        safeInvoke(function () { var _a; return (_a = params.onSuccess) === null || _a === void 0 ? void 0 : _a.call(params, source, true); });
+                        return [2 /*return*/, latestToken];
+                    }
+                    if (!activeRenewal) return [3 /*break*/, 2];
+                    return [4 /*yield*/, activeRenewal];
+                case 1: return [2 /*return*/, _b.sent()];
+                case 2:
+                    if (rejectedRenewals >= maxRejectedRenewals
+                        || (lastRenewalTime !== null && now() - lastRenewalTime < minRenewalIntervalInMs)) {
+                        return [2 /*return*/, undefined];
+                    }
+                    activeRenewal = (function () { return __awaiter(void 0, void 0, void 0, function () {
+                        return __generator(this, function (_a) {
+                            switch (_a.label) {
+                                case 0:
+                                    _a.trys.push([0, , 2, 3]);
+                                    return [4 /*yield*/, renew(failedToken, source)];
+                                case 1: return [2 /*return*/, _a.sent()];
+                                case 2:
+                                    activeRenewal = null;
+                                    return [7 /*endfinally*/];
+                                case 3: return [2 /*return*/];
+                            }
+                        });
+                    }); })();
+                    return [4 /*yield*/, activeRenewal];
+                case 3: return [2 /*return*/, _b.sent()];
+                case 4:
+                    _a = _b.sent();
+                    return [2 /*return*/, undefined];
+                case 5: return [2 /*return*/];
+            }
+        });
+    }); };
+    return { selectToken: selectToken, observeToken: observeToken, recover: recover, reportTokenResult: reportTokenResult };
+};
+exports.createChatTokenUnauthorizedRecovery = createChatTokenUnauthorizedRecovery;
+exports.chatTokenUnauthorizedRecoveryPolicyName = "ChatTokenUnauthorizedRecoveryPolicy";
+var authorizationHeaderName = "Authorization";
+var bearerPrefix = "Bearer ";
+var getBearerToken = function (request) {
+    var header = request.headers.get(authorizationHeaderName);
+    return header && header.startsWith(bearerPrefix) ? header.substring(bearerPrefix.length) : undefined;
+};
+// Only bodies that can be sent again unchanged are retried
+var isReplayableBody = function (request) {
+    var body = request.body;
+    return body === undefined || body === null || typeof body === "string";
+};
+/**
+ * Pipeline policy for ACS chat requests. Runs after the authentication policy on every attempt, sends the newest
+ * usable token, and resends a request that failed with 401 once with a different usable token.
+ */
+var createChatTokenUnauthorizedRecoveryPolicy = function (recovery) {
+    var policy = {
+        name: exports.chatTokenUnauthorizedRecoveryPolicyName,
+        sendRequest: function (request, next) { return __awaiter(void 0, void 0, void 0, function () {
+            var sentToken, selectedToken, response, token, retryResponse;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        sentToken = getBearerToken(request);
+                        if (sentToken) {
+                            selectedToken = recovery.selectToken(sentToken);
+                            if (selectedToken !== sentToken) {
+                                request.headers.set(authorizationHeaderName, "".concat(bearerPrefix).concat(selectedToken));
+                                sentToken = selectedToken;
+                            }
+                        }
+                        return [4 /*yield*/, next(request)];
+                    case 1:
+                        response = _a.sent();
+                        if (sentToken) {
+                            recovery.reportTokenResult(sentToken, response.status !== 401);
+                        }
+                        if (response.status !== 401 || !sentToken || !isReplayableBody(request)) {
+                            return [2 /*return*/, response];
+                        }
+                        return [4 /*yield*/, recovery.recover(sentToken, UnauthorizedRecoverySource.ChatRequest)];
+                    case 2:
+                        token = _a.sent();
+                        if (!token || token === sentToken) {
+                            return [2 /*return*/, response];
+                        }
+                        request.headers.set(authorizationHeaderName, "".concat(bearerPrefix).concat(token));
+                        return [4 /*yield*/, next(request)];
+                    case 3:
+                        retryResponse = _a.sent();
+                        recovery.reportTokenResult(token, retryResponse.status !== 401);
+                        return [2 /*return*/, retryResponse];
+                }
+            });
+        }); }
+    };
+    return { policy: policy, position: "perRetry" };
+};
+exports.createChatTokenUnauthorizedRecoveryPolicy = createChatTokenUnauthorizedRecoveryPolicy;
+/**
+ * Credential that gives the newest usable token to ACS, including the real-time notification client, which reads
+ * the token from the credential instead of the request pipeline.
+ */
+var ChatTokenUnauthorizedRecoveryCredential = /** @class */ (function () {
+    function ChatTokenUnauthorizedRecoveryCredential(credential, recovery) {
+        this.credential = credential;
+        this.recovery = recovery;
+    }
+    ChatTokenUnauthorizedRecoveryCredential.prototype.getToken = function (options) {
+        return __awaiter(this, void 0, void 0, function () {
+            var accessToken, token, expiresOnTimestamp;
+            return __generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.credential.getToken(options)];
+                    case 1:
+                        accessToken = _a.sent();
+                        token = this.recovery.selectToken(accessToken.token);
+                        expiresOnTimestamp = token !== accessToken.token ? (0, chatTokenRenewal_1.getChatTokenExpiresOnInMs)(token) : undefined;
+                        return [2 /*return*/, expiresOnTimestamp !== undefined ? { token: token, expiresOnTimestamp: expiresOnTimestamp } : accessToken];
+                }
+            });
+        });
+    };
+    ChatTokenUnauthorizedRecoveryCredential.prototype.dispose = function () {
+        this.credential.dispose();
+    };
+    return ChatTokenUnauthorizedRecoveryCredential;
+}());
+exports.ChatTokenUnauthorizedRecoveryCredential = ChatTokenUnauthorizedRecoveryCredential;
+//# sourceMappingURL=chatTokenUnauthorizedRecovery.js.map

package/lib/utils/chatTokenUnauthorizedRecovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chatTokenUnauthorizedRecovery.js","sourceRoot":"","sources":["../../src/utils/chatTokenUnauthorizedRecovery.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIH,uDAAkF;AAElF,IAAY,0BAEX;AAFD,WAAY,0BAA0B;IAClC,yDAA2B,CAAA;AAC/B,CAAC,EAFW,0BAA0B,0CAA1B,0BAA0B,QAErC;AAED,IAAY,iCAKX;AALD,WAAY,iCAAiC;IACzC,uDAAuD;IACvD,8DAAyB,CAAA;IACzB,kDAAkD;IAClD,kFAA6C,CAAA;AACjD,CAAC,EALW,iCAAiC,iDAAjC,iCAAiC,QAK5C;AA2BY,QAAA,iDAAiD,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9D,QAAA,8CAA8C,GAAG,CAAC,CAAC;AAEzD,IAAM,mCAAmC,GAAG,UAAC,MAA2C;;IAC3F,IAAM,sBAAsB,GAAG,MAAA,MAAM,CAAC,sBAAsB,mCAAI,yDAAiD,CAAC;IAClH,IAAM,mBAAmB,GAAG,MAAA,MAAM,CAAC,mBAAmB,mCAAI,sDAA8C,CAAC;IACzG,IAAM,GAAG,GAAG,MAAA,MAAM,CAAC,GAAG,mCAAI,CAAC,cAAM,OAAA,IAAI,CAAC,GAAG,EAAE,EAAV,CAAU,CAAC,CAAC;IAE7C,IAAI,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC;IACtC,IAAI,eAAe,GAAkB,IAAI,CAAC;IAC1C,IAAI,aAAa,GAAuC,IAAI,CAAC;IAC7D,IAAI,gBAAgB,GAAG,CAAC,CAAC;IACzB,mEAAmE;IACnE,IAAI,iBAAiB,GAAiE,IAAI,CAAC;IAE3F,IAAM,UAAU,GAAG,UAAC,QAAoB;QACpC,IAAI,CAAC;YACD,QAAQ,EAAE,CAAC;QACf,CAAC;QAAC,WAAM,CAAC;YACL,gDAAgD;QACpD,CAAC;IACL,CAAC,CAAC;IAEF,IAAM,OAAO,GAAG,UAAC,SAAiB,EAAE,OAAe;QAC/C,IAAM,kBAAkB,GAAG,IAAA,4CAAyB,EAAC,SAAS,CAAC,CAAC;QAChE,IAAI,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACnC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAM,gBAAgB,GAAG,IAAA,4CAAyB,EAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,gBAAgB,KAAK,SAAS,IAAI,kBAAkB,GAAG,gBAAgB,CAAC;IACnF,CAAC,CAAC;IAEF,IAAM,YAAY,GAAG,UAAC,KAAa;QAC/B,IAAI,CAAC;YACD,IAAI,KAAK,IAAI,KAAK,KAAK,WAAW,IAAI,IAAA,oCAAiB,EAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;gBACnG,WAAW,GAAG,KAAK,CAAC;YACxB,CAAC;QACL,CAAC;QAAC,WAAM,CAAC;YACL,yBAAyB;QAC7B,CAAC;IACL,CAAC,CAAC;IAEF,IAAM,WAAW,GAAG,UAAC,KAAa;QAC9B,IAAI,CAAC;YACD,IAAI,WAAW,IAAI,WAAW,KAAK,KAAK,IAAI,IAAA,oCAAiB,EAAC,WAAW,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,CAAC;gBAC/G,OAAO,WAAW,CAAC;YACvB,CAAC;QACL,CAAC;QAAC,WAAM,CAAC;YACL,uBAAuB;QAC3B,CAAC;QAED,OAAO,KAAK,CAAC;IACjB,CAAC,CAAC;IAEF,IAAM,KAAK,GAAG,UAAO,WAA+B,EAAE,MAAkC;;;;;oBACpF,eAAe,GAAG,GAAG,EAAE,CAAC;oBACxB,UAAU,CAAC,sBAAM,OAAA,MAAA,MAAM,CAAC,OAAO,uDAAG,MAAM,CAAC,CAAA,EAAA,CAAC,CAAC;;;;oBAI/B,qBAAM,MAAM,CAAC,YAAY,EAAE,EAAA;;oBAAnC,KAAK,GAAG,SAA2B,CAAC;;;;oBAEpC,KAAK,GAAG,SAAS,CAAC;;;oBAGtB,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,WAAW,IAAI,CAAC,IAAA,oCAAiB,EAAC,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;wBACtE,UAAU,CAAC,sBAAM,OAAA,MAAA,MAAM,CAAC,SAAS,uDAAG,MAAM,EAAE,iCAAiC,CAAC,UAAU,CAAC,CAAA,EAAA,CAAC,CAAC;wBAC3F,sBAAO,SAAS,EAAC;oBACrB,CAAC;oBAED,YAAY,CAAC,KAAK,CAAC,CAAC;oBACpB,iBAAiB,GAAG,EAAE,KAAK,OAAA,EAAE,MAAM,QAAA,EAAE,CAAC;oBACtC,sBAAO,KAAK,EAAC;;;SAChB,CAAC;IAEF,IAAM,iBAAiB,GAAG,UAAC,KAAa,EAAE,QAAiB;QACvD,IAAI,CAAC;YACD,IAAI,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;gBAC1D,OAAO;YACX,CAAC;YAEO,IAAA,QAAM,GAAK,iBAAiB,OAAtB,CAAuB;YACrC,iBAAiB,GAAG,IAAI,CAAC;YACzB,IAAI,QAAQ,EAAE,CAAC;gBACX,gBAAgB,GAAG,CAAC,CAAC;gBACrB,UAAU,CAAC,sBAAM,OAAA,MAAA,MAAM,CAAC,SAAS,uDAAG,QAAM,EAAE,KAAK,CAAC,CAAA,EAAA,CAAC,CAAC;YACxD,CAAC;iBAAM,CAAC;gBACJ,gBAAgB,EAAE,CAAC;gBACnB,UAAU,CAAC,sBAAM,OAAA,MAAA,MAAM,CAAC,SAAS,uDAAG,QAAM,EAAE,iCAAiC,CAAC,oBAAoB,CAAC,CAAA,EAAA,CAAC,CAAC;YACzG,CAAC;QACL,CAAC;QAAC,WAAM,CAAC;YACL,yCAAyC;QAC7C,CAAC;IACL,CAAC,CAAC;IAEF,IAAM,OAAO,GAAG,UAAO,WAA+B,EAAE,MAAkC;;;;;;oBAElF,IAAI,WAAW,IAAI,WAAW,KAAK,WAAW,IAAI,IAAA,oCAAiB,EAAC,WAAW,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;wBACtF,UAAU,CAAC,sBAAM,OAAA,MAAA,MAAM,CAAC,SAAS,uDAAG,MAAM,EAAE,IAAI,CAAC,CAAA,EAAA,CAAC,CAAC;wBACnD,sBAAO,WAAW,EAAC;oBACvB,CAAC;yBAEG,aAAa,EAAb,wBAAa;oBACN,qBAAM,aAAa,EAAA;wBAA1B,sBAAO,SAAmB,EAAC;;oBAG/B,IAAI,gBAAgB,IAAI,mBAAmB;2BACpC,CAAC,eAAe,KAAK,IAAI,IAAI,GAAG,EAAE,GAAG,eAAe,GAAG,sBAAsB,CAAC,EAAE,CAAC;wBACpF,sBAAO,SAAS,EAAC;oBACrB,CAAC;oBAED,aAAa,GAAG,CAAC;;;;;oCAEF,qBAAM,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,EAAA;wCAAvC,sBAAO,SAAgC,EAAC;;oCAExC,aAAa,GAAG,IAAI,CAAC;;;;;yBAE5B,CAAC,EAAE,CAAC;oBAEE,qBAAM,aAAa,EAAA;wBAA1B,sBAAO,SAAmB,EAAC;;;oBAE3B,sBAAO,SAAS,EAAC;;;;SAExB,CAAC;IAEF,OAAO,EAAE,WAAW,aAAA,EAAE,YAAY,cAAA,EAAE,OAAO,SAAA,EAAE,iBAAiB,mBAAA,EAAE,CAAC;AACrE,CAAC,CAAC;AA5HW,QAAA,mCAAmC,uCA4H9C;AAMW,QAAA,uCAAuC,GAAG,qCAAqC,CAAC;AAE7F,IAAM,uBAAuB,GAAG,eAAe,CAAC;AAChD,IAAM,YAAY,GAAG,SAAS,CAAC;AAE/B,IAAM,cAAc,GAAG,UAAC,OAA4B;IAChD,IAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC5D,OAAO,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzG,CAAC,CAAC;AAEF,2DAA2D;AAC3D,IAAM,gBAAgB,GAAG,UAAC,OAA4B;IAClD,IAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,OAAO,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;AAC3E,CAAC,CAAC;AAEF;;;GAGG;AACI,IAAM,yCAAyC,GAAG,UAAC,QAAuC;IAC7F,IAAM,MAAM,GAAuB;QAC/B,IAAI,EAAE,+CAAuC;QAC7C,WAAW,EAAE,UAAO,OAAO,EAAE,IAAI;;;;;wBACzB,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;wBACxC,IAAI,SAAS,EAAE,CAAC;4BACN,aAAa,GAAG,QAAQ,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;4BACtD,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;gCAC9B,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,UAAG,YAAY,SAAG,aAAa,CAAE,CAAC,CAAC;gCAChF,SAAS,GAAG,aAAa,CAAC;4BAC9B,CAAC;wBACL,CAAC;wBAEgB,qBAAM,IAAI,CAAC,OAAO,CAAC,EAAA;;wBAA9B,QAAQ,GAAG,SAAmB;wBACpC,IAAI,SAAS,EAAE,CAAC;4BACZ,QAAQ,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;wBACnE,CAAC;wBAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;4BACtE,sBAAO,QAAQ,EAAC;wBACpB,CAAC;wBAEa,qBAAM,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,0BAA0B,CAAC,WAAW,CAAC,EAAA;;wBAAjF,KAAK,GAAG,SAAyE;wBACvF,IAAI,CAAC,KAAK,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;4BAChC,sBAAO,QAAQ,EAAC;wBACpB,CAAC;wBAED,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,UAAG,YAAY,SAAG,KAAK,CAAE,CAAC,CAAC;wBAClD,qBAAM,IAAI,CAAC,OAAO,CAAC,EAAA;;wBAAnC,aAAa,GAAG,SAAmB;wBACzC,QAAQ,CAAC,iBAAiB,CAAC,KAAK,EAAE,aAAa,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;wBAChE,sBAAO,aAAa,EAAC;;;aACxB;KACJ,CAAC;IAEF,OAAO,EAAE,MAAM,QAAA,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAC5C,CAAC,CAAC;AAnCW,QAAA,yCAAyC,6CAmCpD;AAEF;;;GAGG;AACH;IAII,iDAAmB,UAAwC,EAAE,QAAuC;QAChG,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC7B,CAAC;IAEY,0DAAQ,GAArB,UAAsB,OAAiE;;;;;4BAC/D,qBAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAA;;wBAArD,WAAW,GAAG,SAAuC;wBACrD,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;wBACrD,kBAAkB,GAAG,KAAK,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,IAAA,4CAAyB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;wBACtG,sBAAO,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,OAAA,EAAE,kBAAkB,oBAAA,EAAE,CAAC,CAAC,CAAC,WAAW,EAAC;;;;KACzF;IAEM,yDAAO,GAAd;QACI,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;IAC9B,CAAC;IACL,8CAAC;AAAD,CAAC,AAnBD,IAmBC;AAnBY,0FAAuC"}