@missionsquad/mcp-server-tron 1.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (193) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +537 -0
  3. package/bin/cli.js +51 -0
  4. package/build/core/chains.d.ts +17 -0
  5. package/build/core/chains.js +87 -0
  6. package/build/core/chains.js.map +1 -0
  7. package/build/core/prompts.d.ts +19 -0
  8. package/build/core/prompts.js +485 -0
  9. package/build/core/prompts.js.map +1 -0
  10. package/build/core/resources.d.ts +14 -0
  11. package/build/core/resources.js +42 -0
  12. package/build/core/resources.js.map +1 -0
  13. package/build/core/services/account-data.d.ts +144 -0
  14. package/build/core/services/account-data.js +228 -0
  15. package/build/core/services/account-data.js.map +1 -0
  16. package/build/core/services/account-resource.d.ts +56 -0
  17. package/build/core/services/account-resource.js +133 -0
  18. package/build/core/services/account-resource.js.map +1 -0
  19. package/build/core/services/account.d.ts +141 -0
  20. package/build/core/services/account.js +191 -0
  21. package/build/core/services/account.js.map +1 -0
  22. package/build/core/services/address.d.ts +8 -0
  23. package/build/core/services/address.js +52 -0
  24. package/build/core/services/address.js.map +1 -0
  25. package/build/core/services/agent-wallet.d.ts +62 -0
  26. package/build/core/services/agent-wallet.js +234 -0
  27. package/build/core/services/agent-wallet.js.map +1 -0
  28. package/build/core/services/balance.d.ts +26 -0
  29. package/build/core/services/balance.js +60 -0
  30. package/build/core/services/balance.js.map +1 -0
  31. package/build/core/services/blocks.d.ts +25 -0
  32. package/build/core/services/blocks.js +65 -0
  33. package/build/core/services/blocks.js.map +1 -0
  34. package/build/core/services/broadcast.d.ts +13 -0
  35. package/build/core/services/broadcast.js +24 -0
  36. package/build/core/services/broadcast.js.map +1 -0
  37. package/build/core/services/clients.d.ts +5 -0
  38. package/build/core/services/clients.js +29 -0
  39. package/build/core/services/clients.js.map +1 -0
  40. package/build/core/services/contract-data.d.ts +31 -0
  41. package/build/core/services/contract-data.js +54 -0
  42. package/build/core/services/contract-data.js.map +1 -0
  43. package/build/core/services/contracts.d.ts +108 -0
  44. package/build/core/services/contracts.js +482 -0
  45. package/build/core/services/contracts.js.map +1 -0
  46. package/build/core/services/events.d.ts +56 -0
  47. package/build/core/services/events.js +99 -0
  48. package/build/core/services/events.js.map +1 -0
  49. package/build/core/services/governance.d.ts +78 -0
  50. package/build/core/services/governance.js +207 -0
  51. package/build/core/services/governance.js.map +1 -0
  52. package/build/core/services/index.d.ts +28 -0
  53. package/build/core/services/index.js +81 -0
  54. package/build/core/services/index.js.map +1 -0
  55. package/build/core/services/mempool.d.ts +12 -0
  56. package/build/core/services/mempool.js +32 -0
  57. package/build/core/services/mempool.js.map +1 -0
  58. package/build/core/services/multicall-abi.d.ts +55 -0
  59. package/build/core/services/multicall-abi.js +61 -0
  60. package/build/core/services/multicall-abi.js.map +1 -0
  61. package/build/core/services/nodes.d.ts +8 -0
  62. package/build/core/services/nodes.js +18 -0
  63. package/build/core/services/nodes.js.map +1 -0
  64. package/build/core/services/proposals.d.ts +33 -0
  65. package/build/core/services/proposals.js +95 -0
  66. package/build/core/services/proposals.js.map +1 -0
  67. package/build/core/services/query.d.ts +34 -0
  68. package/build/core/services/query.js +60 -0
  69. package/build/core/services/query.js.map +1 -0
  70. package/build/core/services/staking.d.ts +40 -0
  71. package/build/core/services/staking.js +113 -0
  72. package/build/core/services/staking.js.map +1 -0
  73. package/build/core/services/tokens.d.ts +22 -0
  74. package/build/core/services/tokens.js +68 -0
  75. package/build/core/services/tokens.js.map +1 -0
  76. package/build/core/services/transactions.d.ts +16 -0
  77. package/build/core/services/transactions.js +42 -0
  78. package/build/core/services/transactions.js.map +1 -0
  79. package/build/core/services/transfer.d.ts +24 -0
  80. package/build/core/services/transfer.js +84 -0
  81. package/build/core/services/transfer.js.map +1 -0
  82. package/build/core/services/trongrid-client.d.ts +14 -0
  83. package/build/core/services/trongrid-client.js +19 -0
  84. package/build/core/services/trongrid-client.js.map +1 -0
  85. package/build/core/services/utils.d.ts +13 -0
  86. package/build/core/services/utils.js +39 -0
  87. package/build/core/services/utils.js.map +1 -0
  88. package/build/core/services/wallet.d.ts +13 -0
  89. package/build/core/services/wallet.js +18 -0
  90. package/build/core/services/wallet.js.map +1 -0
  91. package/build/core/tools/account-data.d.ts +2 -0
  92. package/build/core/tools/account-data.js +253 -0
  93. package/build/core/tools/account-data.js.map +1 -0
  94. package/build/core/tools/account-resource.d.ts +2 -0
  95. package/build/core/tools/account-resource.js +269 -0
  96. package/build/core/tools/account-resource.js.map +1 -0
  97. package/build/core/tools/account.d.ts +2 -0
  98. package/build/core/tools/account.js +451 -0
  99. package/build/core/tools/account.js.map +1 -0
  100. package/build/core/tools/address.d.ts +2 -0
  101. package/build/core/tools/address.js +45 -0
  102. package/build/core/tools/address.js.map +1 -0
  103. package/build/core/tools/balance.d.ts +2 -0
  104. package/build/core/tools/balance.js +94 -0
  105. package/build/core/tools/balance.js.map +1 -0
  106. package/build/core/tools/block.d.ts +2 -0
  107. package/build/core/tools/block.js +74 -0
  108. package/build/core/tools/block.js.map +1 -0
  109. package/build/core/tools/broadcast.d.ts +2 -0
  110. package/build/core/tools/broadcast.js +102 -0
  111. package/build/core/tools/broadcast.js.map +1 -0
  112. package/build/core/tools/contract-data.d.ts +2 -0
  113. package/build/core/tools/contract-data.js +159 -0
  114. package/build/core/tools/contract-data.js.map +1 -0
  115. package/build/core/tools/contract.d.ts +2 -0
  116. package/build/core/tools/contract.js +600 -0
  117. package/build/core/tools/contract.js.map +1 -0
  118. package/build/core/tools/event.d.ts +2 -0
  119. package/build/core/tools/event.js +159 -0
  120. package/build/core/tools/event.js.map +1 -0
  121. package/build/core/tools/governance.d.ts +6 -0
  122. package/build/core/tools/governance.js +424 -0
  123. package/build/core/tools/governance.js.map +1 -0
  124. package/build/core/tools/index.d.ts +15 -0
  125. package/build/core/tools/index.js +93 -0
  126. package/build/core/tools/index.js.map +1 -0
  127. package/build/core/tools/mempool.d.ts +2 -0
  128. package/build/core/tools/mempool.js +116 -0
  129. package/build/core/tools/mempool.js.map +1 -0
  130. package/build/core/tools/network.d.ts +2 -0
  131. package/build/core/tools/network.js +114 -0
  132. package/build/core/tools/network.js.map +1 -0
  133. package/build/core/tools/node.d.ts +2 -0
  134. package/build/core/tools/node.js +75 -0
  135. package/build/core/tools/node.js.map +1 -0
  136. package/build/core/tools/proposals.d.ts +6 -0
  137. package/build/core/tools/proposals.js +219 -0
  138. package/build/core/tools/proposals.js.map +1 -0
  139. package/build/core/tools/query.d.ts +2 -0
  140. package/build/core/tools/query.js +399 -0
  141. package/build/core/tools/query.js.map +1 -0
  142. package/build/core/tools/staking.d.ts +2 -0
  143. package/build/core/tools/staking.js +281 -0
  144. package/build/core/tools/staking.js.map +1 -0
  145. package/build/core/tools/transaction.d.ts +2 -0
  146. package/build/core/tools/transaction.js +65 -0
  147. package/build/core/tools/transaction.js.map +1 -0
  148. package/build/core/tools/transfer.d.ts +2 -0
  149. package/build/core/tools/transfer.js +101 -0
  150. package/build/core/tools/transfer.js.map +1 -0
  151. package/build/core/tools/types.d.ts +13 -0
  152. package/build/core/tools/types.js +2 -0
  153. package/build/core/tools/types.js.map +1 -0
  154. package/build/core/tools/wallet.d.ts +2 -0
  155. package/build/core/tools/wallet.js +172 -0
  156. package/build/core/tools/wallet.js.map +1 -0
  157. package/build/index.d.ts +1 -0
  158. package/build/index.js +21 -0
  159. package/build/index.js.map +1 -0
  160. package/build/middleware/auth.d.ts +16 -0
  161. package/build/middleware/auth.js +44 -0
  162. package/build/middleware/auth.js.map +1 -0
  163. package/build/oauth/OAuthService.d.ts +100 -0
  164. package/build/oauth/OAuthService.js +507 -0
  165. package/build/oauth/OAuthService.js.map +1 -0
  166. package/build/oauth/page.d.ts +1 -0
  167. package/build/oauth/page.js +255 -0
  168. package/build/oauth/page.js.map +1 -0
  169. package/build/oauth/types.d.ts +65 -0
  170. package/build/oauth/types.js +2 -0
  171. package/build/oauth/types.js.map +1 -0
  172. package/build/server/http-app.d.ts +9 -0
  173. package/build/server/http-app.js +128 -0
  174. package/build/server/http-app.js.map +1 -0
  175. package/build/server/http-server.d.ts +1 -0
  176. package/build/server/http-server.js +35 -0
  177. package/build/server/http-server.js.map +1 -0
  178. package/build/server/oauth-routes.d.ts +7 -0
  179. package/build/server/oauth-routes.js +157 -0
  180. package/build/server/oauth-routes.js.map +1 -0
  181. package/build/server/server.d.ts +9 -0
  182. package/build/server/server.js +54 -0
  183. package/build/server/server.js.map +1 -0
  184. package/build/tenant/TenantManager.d.ts +35 -0
  185. package/build/tenant/TenantManager.js +167 -0
  186. package/build/tenant/TenantManager.js.map +1 -0
  187. package/build/tenant/context.d.ts +11 -0
  188. package/build/tenant/context.js +23 -0
  189. package/build/tenant/context.js.map +1 -0
  190. package/build/tenant/types.d.ts +16 -0
  191. package/build/tenant/types.js +2 -0
  192. package/build/tenant/types.js.map +1 -0
  193. package/package.json +95 -0
@@ -0,0 +1,507 @@
1
+ import { createHash, randomBytes, randomUUID } from "node:crypto";
2
+ import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
3
+ import { join } from "node:path";
4
+ import jwt from "jsonwebtoken";
5
+ import { getTronWeb } from "../core/services/clients.js";
6
+ const DEFAULT_SCOPE = "mcp";
7
+ const AUTH_CODE_COOKIE_NAME = "mcp_oauth_request";
8
+ const NONCE_REGEX = /^Nonce:\s+([A-Za-z0-9_-]+)$/m;
9
+ export class OAuthService {
10
+ publicOrigin;
11
+ resourceUri;
12
+ authCodeCookieName = AUTH_CODE_COOKIE_NAME;
13
+ jwtSecret;
14
+ dataDir;
15
+ authChallengeTtlSeconds;
16
+ oauthAuthCodeTtlSeconds;
17
+ oauthAccessTokenTtlSeconds;
18
+ oauthRefreshTokenTtlSeconds;
19
+ clientMetadataTimeoutMs;
20
+ pendingAuthorizations = new Map();
21
+ challenges = new Map();
22
+ authorizationCodes = new Map();
23
+ constructor(options) {
24
+ this.publicOrigin = trimTrailingSlash(options.publicOrigin);
25
+ this.resourceUri = `${this.publicOrigin}/mcp`;
26
+ this.jwtSecret = options.jwtSecret;
27
+ this.dataDir = options.dataDir;
28
+ this.authChallengeTtlSeconds = options.authChallengeTtlSeconds ?? 300;
29
+ this.oauthAuthCodeTtlSeconds = options.oauthAuthCodeTtlSeconds ?? 300;
30
+ this.oauthAccessTokenTtlSeconds = options.oauthAccessTokenTtlSeconds ?? 3600;
31
+ this.oauthRefreshTokenTtlSeconds = options.oauthRefreshTokenTtlSeconds ?? 2_592_000;
32
+ this.clientMetadataTimeoutMs = options.clientMetadataTimeoutMs ?? 10_000;
33
+ }
34
+ getAuthorizationServerMetadata() {
35
+ return {
36
+ issuer: this.publicOrigin,
37
+ authorization_endpoint: `${this.publicOrigin}/oauth/authorize`,
38
+ token_endpoint: `${this.publicOrigin}/oauth/token`,
39
+ response_types_supported: ["code"],
40
+ grant_types_supported: ["authorization_code", "refresh_token"],
41
+ code_challenge_methods_supported: ["S256"],
42
+ token_endpoint_auth_methods_supported: ["none"],
43
+ };
44
+ }
45
+ getProtectedResourceMetadata() {
46
+ return {
47
+ resource: this.resourceUri,
48
+ authorization_servers: [this.publicOrigin],
49
+ bearer_methods_supported: ["header"],
50
+ };
51
+ }
52
+ async createPendingAuthorization(params) {
53
+ const responseType = params.responseType?.trim();
54
+ const clientId = params.clientId?.trim();
55
+ const redirectUri = params.redirectUri?.trim();
56
+ const state = params.state?.trim();
57
+ const codeChallenge = params.codeChallenge?.trim();
58
+ const codeChallengeMethod = params.codeChallengeMethod?.trim();
59
+ if (responseType !== "code") {
60
+ throw new Error("response_type must be 'code'.");
61
+ }
62
+ if (!clientId) {
63
+ throw new Error("client_id is required.");
64
+ }
65
+ if (!redirectUri) {
66
+ throw new Error("redirect_uri is required.");
67
+ }
68
+ if (!state) {
69
+ throw new Error("state is required.");
70
+ }
71
+ if (!codeChallenge) {
72
+ throw new Error("code_challenge is required.");
73
+ }
74
+ if (codeChallengeMethod !== "S256") {
75
+ throw new Error("code_challenge_method must be 'S256'.");
76
+ }
77
+ if (params.resource && trimTrailingSlash(params.resource) !== this.resourceUri) {
78
+ throw new Error(`resource must be '${this.resourceUri}'.`);
79
+ }
80
+ await this.validateClientMetadata(clientId, redirectUri);
81
+ const now = params.now ?? Date.now();
82
+ const request = {
83
+ authRequestId: randomUUID(),
84
+ clientId,
85
+ redirectUri,
86
+ state,
87
+ scope: parseScopes(params.scope),
88
+ resource: this.resourceUri,
89
+ codeChallenge,
90
+ codeChallengeMethod: "S256",
91
+ issuedAt: now,
92
+ expiresAt: now + this.oauthAuthCodeTtlSeconds * 1000,
93
+ };
94
+ this.pendingAuthorizations.set(request.authRequestId, request);
95
+ return request;
96
+ }
97
+ getPendingAuthorization(authRequestId) {
98
+ const request = this.pendingAuthorizations.get(authRequestId);
99
+ if (!request) {
100
+ throw new Error("OAuth authorization request not found.");
101
+ }
102
+ if (Date.now() > request.expiresAt) {
103
+ this.pendingAuthorizations.delete(authRequestId);
104
+ throw new Error("OAuth authorization request expired.");
105
+ }
106
+ return request;
107
+ }
108
+ createWalletChallenge(authRequestId, tenant, now = Date.now()) {
109
+ const pending = this.getPendingAuthorization(authRequestId);
110
+ const nonce = randomUUID();
111
+ const issuedAtIso = new Date(now).toISOString();
112
+ const expiresAt = now + this.authChallengeTtlSeconds * 1000;
113
+ const expiresAtIso = new Date(expiresAt).toISOString();
114
+ const challenge = [
115
+ "MissionSquad TRON MCP OAuth Login",
116
+ "Version: 1",
117
+ "Purpose: Authorize managed wallet access",
118
+ `Address: ${tenant.walletAddressBase58}`,
119
+ `Tenant: ${tenant.tenantId}`,
120
+ `Client ID: ${pending.clientId}`,
121
+ `Nonce: ${nonce}`,
122
+ `Issued At: ${issuedAtIso}`,
123
+ `Expires At: ${expiresAtIso}`,
124
+ ].join("\n");
125
+ const record = {
126
+ nonce,
127
+ authRequestId,
128
+ tenantId: tenant.tenantId,
129
+ walletAddressBase58: tenant.walletAddressBase58,
130
+ walletAddressHex: tenant.walletAddressHex,
131
+ challenge,
132
+ issuedAt: now,
133
+ expiresAt,
134
+ usedAt: null,
135
+ };
136
+ this.challenges.set(record.nonce, record);
137
+ return record;
138
+ }
139
+ async verifyWalletChallenge(params) {
140
+ const pending = this.getPendingAuthorization(params.authRequestId);
141
+ const tenant = params.tenantManager.requireTenantByAddress(params.walletAddress);
142
+ const challenge = this.requireChallenge(params.challenge);
143
+ const now = params.now ?? Date.now();
144
+ if (challenge.authRequestId !== params.authRequestId) {
145
+ challenge.usedAt = now;
146
+ throw new Error("Challenge does not belong to the current OAuth authorization request.");
147
+ }
148
+ if (challenge.tenantId !== tenant.tenantId) {
149
+ challenge.usedAt = now;
150
+ throw new Error("Challenge tenant does not match the requested wallet.");
151
+ }
152
+ if (challenge.challenge !== params.challenge) {
153
+ challenge.usedAt = now;
154
+ throw new Error("Challenge text mismatch.");
155
+ }
156
+ if (challenge.usedAt !== null) {
157
+ throw new Error("Challenge has already been used.");
158
+ }
159
+ if (now > challenge.expiresAt) {
160
+ challenge.usedAt = now;
161
+ throw new Error("Challenge expired.");
162
+ }
163
+ challenge.usedAt = now;
164
+ const recoveredAddress = await getTronWeb("mainnet").trx.verifyMessageV2(params.challenge, params.signature);
165
+ const normalizedRecovered = params.tenantManager.normalizeAddress(recoveredAddress);
166
+ if (normalizedRecovered.walletAddressBase58 !== tenant.walletAddressBase58) {
167
+ throw new Error("Wallet signature verification failed.");
168
+ }
169
+ const code = this.issueAuthorizationCode(pending, tenant, now);
170
+ return {
171
+ redirectTo: buildRedirectUrl(pending.redirectUri, code.code, pending.state),
172
+ tenant,
173
+ };
174
+ }
175
+ async createWalletAndAuthorize(params) {
176
+ const pending = this.getPendingAuthorization(params.authRequestId);
177
+ const created = await params.tenantManager.createTenantWithNewWallet();
178
+ const code = this.issueAuthorizationCode(pending, created.tenant, params.now ?? Date.now());
179
+ return {
180
+ redirectTo: buildRedirectUrl(pending.redirectUri, code.code, pending.state),
181
+ tenant: created.tenant,
182
+ wallet: {
183
+ tenantId: created.tenant.tenantId,
184
+ walletAddress: created.wallet.address,
185
+ walletAddressHex: created.wallet.addressHex,
186
+ privateKey: created.wallet.privateKey,
187
+ },
188
+ };
189
+ }
190
+ async exchangeToken(body, tenantManager) {
191
+ const grantType = readRequiredString(body, "grant_type");
192
+ if (grantType === "authorization_code") {
193
+ return this.exchangeAuthorizationCode(body, tenantManager);
194
+ }
195
+ if (grantType === "refresh_token") {
196
+ return this.exchangeRefreshToken(body, tenantManager);
197
+ }
198
+ throw new Error("Unsupported grant_type.");
199
+ }
200
+ verifyAccessToken(token) {
201
+ return jwt.verify(token, this.jwtSecret, {
202
+ algorithms: ["HS256"],
203
+ issuer: this.publicOrigin,
204
+ audience: this.resourceUri,
205
+ });
206
+ }
207
+ async exchangeAuthorizationCode(body, tenantManager) {
208
+ const code = readRequiredString(body, "code");
209
+ const clientId = readRequiredString(body, "client_id");
210
+ const redirectUri = readRequiredString(body, "redirect_uri");
211
+ const codeVerifier = readRequiredString(body, "code_verifier");
212
+ const resource = readOptionalString(body, "resource");
213
+ if (resource && trimTrailingSlash(resource) !== this.resourceUri) {
214
+ throw new Error(`resource must be '${this.resourceUri}'.`);
215
+ }
216
+ await this.validateClientMetadata(clientId, redirectUri);
217
+ const record = this.authorizationCodes.get(code);
218
+ if (!record) {
219
+ throw new Error("Authorization code not found.");
220
+ }
221
+ if (record.usedAt !== null) {
222
+ throw new Error("Authorization code has already been used.");
223
+ }
224
+ if (Date.now() > record.expiresAt) {
225
+ this.authorizationCodes.delete(code);
226
+ throw new Error("Authorization code expired.");
227
+ }
228
+ if (record.clientId !== clientId) {
229
+ throw new Error("Authorization code client_id mismatch.");
230
+ }
231
+ if (record.redirectUri !== redirectUri) {
232
+ throw new Error("Authorization code redirect_uri mismatch.");
233
+ }
234
+ if (buildPkceChallenge(codeVerifier) !== record.codeChallenge) {
235
+ throw new Error("Invalid code_verifier.");
236
+ }
237
+ record.usedAt = Date.now();
238
+ const tenant = tenantManager.getTenantById(record.tenantId);
239
+ if (!tenant) {
240
+ throw new Error("Tenant not found for authorization code.");
241
+ }
242
+ const accessToken = this.issueAccessToken({
243
+ tenant,
244
+ clientId,
245
+ scopes: record.scope,
246
+ });
247
+ const refreshToken = this.issueRefreshToken({
248
+ tenant,
249
+ clientId,
250
+ scopes: record.scope,
251
+ });
252
+ return {
253
+ access_token: accessToken,
254
+ refresh_token: refreshToken,
255
+ token_type: "Bearer",
256
+ expires_in: this.oauthAccessTokenTtlSeconds,
257
+ scope: record.scope.join(" "),
258
+ };
259
+ }
260
+ async exchangeRefreshToken(body, tenantManager) {
261
+ const refreshToken = readRequiredString(body, "refresh_token");
262
+ const clientId = readRequiredString(body, "client_id");
263
+ const record = this.loadRefreshTokenRecord(refreshToken);
264
+ if (record.revokedAt !== null) {
265
+ throw new Error("Refresh token revoked.");
266
+ }
267
+ if (record.rotatedAt !== null) {
268
+ throw new Error("Refresh token already rotated.");
269
+ }
270
+ if (Date.now() > record.expiresAt) {
271
+ throw new Error("Refresh token expired.");
272
+ }
273
+ if (record.clientId !== clientId) {
274
+ throw new Error("Refresh token client_id mismatch.");
275
+ }
276
+ const tenant = tenantManager.getTenantById(record.tenantId);
277
+ if (!tenant) {
278
+ throw new Error("Tenant not found for refresh token.");
279
+ }
280
+ if (tenant.sessionVersion !== record.sessionVersion) {
281
+ throw new Error("Refresh token session version mismatch.");
282
+ }
283
+ const newAccessToken = this.issueAccessToken({
284
+ tenant,
285
+ clientId,
286
+ scopes: record.scopes,
287
+ });
288
+ const newRefreshToken = this.issueRefreshToken({
289
+ tenant,
290
+ clientId,
291
+ scopes: record.scopes,
292
+ });
293
+ const newTokenHash = hashOpaqueToken(newRefreshToken);
294
+ const updatedRecord = {
295
+ ...record,
296
+ rotatedAt: Date.now(),
297
+ replacedByTokenHash: newTokenHash,
298
+ };
299
+ this.writeRefreshTokenRecord(updatedRecord);
300
+ return {
301
+ access_token: newAccessToken,
302
+ refresh_token: newRefreshToken,
303
+ token_type: "Bearer",
304
+ expires_in: this.oauthAccessTokenTtlSeconds,
305
+ scope: record.scopes.join(" "),
306
+ };
307
+ }
308
+ issueAuthorizationCode(pending, tenant, now = Date.now()) {
309
+ const code = randomBytes(32).toString("base64url");
310
+ const record = {
311
+ code,
312
+ clientId: pending.clientId,
313
+ redirectUri: pending.redirectUri,
314
+ tenantId: tenant.tenantId,
315
+ walletAddressBase58: tenant.walletAddressBase58,
316
+ walletId: "primary",
317
+ scope: pending.scope,
318
+ codeChallenge: pending.codeChallenge,
319
+ codeChallengeMethod: pending.codeChallengeMethod,
320
+ issuedAt: now,
321
+ expiresAt: now + this.oauthAuthCodeTtlSeconds * 1000,
322
+ usedAt: null,
323
+ };
324
+ this.authorizationCodes.set(code, record);
325
+ return record;
326
+ }
327
+ issueAccessToken(params) {
328
+ const iat = Math.floor(Date.now() / 1000);
329
+ const exp = iat + this.oauthAccessTokenTtlSeconds;
330
+ const payload = {
331
+ sub: params.tenant.tenantId,
332
+ tenantId: params.tenant.tenantId,
333
+ walletId: "primary",
334
+ walletAddress: params.tenant.walletAddressBase58,
335
+ clientId: params.clientId,
336
+ scope: params.scopes.join(" "),
337
+ sessionVersion: params.tenant.sessionVersion,
338
+ iss: this.publicOrigin,
339
+ aud: this.resourceUri,
340
+ iat,
341
+ exp,
342
+ jti: randomUUID(),
343
+ };
344
+ return jwt.sign(payload, this.jwtSecret, {
345
+ algorithm: "HS256",
346
+ noTimestamp: true,
347
+ });
348
+ }
349
+ issueRefreshToken(params) {
350
+ const refreshToken = randomBytes(48).toString("base64url");
351
+ const record = {
352
+ tokenHash: hashOpaqueToken(refreshToken),
353
+ tenantId: params.tenant.tenantId,
354
+ walletAddressBase58: params.tenant.walletAddressBase58,
355
+ walletId: "primary",
356
+ clientId: params.clientId,
357
+ scopes: params.scopes,
358
+ sessionVersion: params.tenant.sessionVersion,
359
+ createdAt: Date.now(),
360
+ expiresAt: Date.now() + this.oauthRefreshTokenTtlSeconds * 1000,
361
+ rotatedAt: null,
362
+ revokedAt: null,
363
+ replacedByTokenHash: null,
364
+ };
365
+ this.writeRefreshTokenRecord(record);
366
+ return refreshToken;
367
+ }
368
+ loadRefreshTokenRecord(refreshToken) {
369
+ const tokenHash = hashOpaqueToken(refreshToken);
370
+ const filePath = this.getRefreshTokenPath(tokenHash);
371
+ if (!existsSync(filePath)) {
372
+ throw new Error("Refresh token not found.");
373
+ }
374
+ return JSON.parse(readFileSync(filePath, "utf-8"));
375
+ }
376
+ writeRefreshTokenRecord(record) {
377
+ mkdirSync(this.getRefreshTokenDir(), { recursive: true });
378
+ writeJsonAtomic(this.getRefreshTokenPath(record.tokenHash), record);
379
+ }
380
+ getRefreshTokenDir() {
381
+ return join(this.dataDir, "oauth", "refresh-tokens");
382
+ }
383
+ getRefreshTokenPath(tokenHash) {
384
+ return join(this.getRefreshTokenDir(), `${tokenHash}.json`);
385
+ }
386
+ requireChallenge(challengeText) {
387
+ const nonce = extractNonce(challengeText);
388
+ const record = this.challenges.get(nonce);
389
+ if (!record) {
390
+ throw new Error("Challenge not found.");
391
+ }
392
+ return record;
393
+ }
394
+ async validateClientMetadata(clientId, redirectUri) {
395
+ const clientUrl = new URL(clientId);
396
+ if (!isAllowedClientMetadataUrl(clientUrl)) {
397
+ throw new Error("client_id must be an HTTPS URL, or localhost HTTP in development.");
398
+ }
399
+ const controller = new AbortController();
400
+ const timeoutId = setTimeout(() => controller.abort(), this.clientMetadataTimeoutMs);
401
+ let response;
402
+ try {
403
+ response = await fetch(clientId, {
404
+ headers: { Accept: "application/json" },
405
+ signal: controller.signal,
406
+ });
407
+ }
408
+ finally {
409
+ clearTimeout(timeoutId);
410
+ }
411
+ if (!response.ok) {
412
+ throw new Error(`Unable to load client metadata from client_id URL: ${response.status}`);
413
+ }
414
+ const metadata = (await response.json());
415
+ if (typeof metadata.client_id !== "string" || metadata.client_id !== clientId) {
416
+ throw new Error("Client metadata client_id mismatch.");
417
+ }
418
+ const redirectUris = Array.isArray(metadata.redirect_uris)
419
+ ? metadata.redirect_uris.filter((value) => typeof value === "string")
420
+ : [];
421
+ if (!redirectUris.includes(redirectUri)) {
422
+ throw new Error("redirect_uri is not allowed by the client metadata document.");
423
+ }
424
+ const grantTypes = Array.isArray(metadata.grant_types)
425
+ ? metadata.grant_types.filter((value) => typeof value === "string")
426
+ : [];
427
+ if (!grantTypes.includes("authorization_code")) {
428
+ throw new Error("Client metadata must allow authorization_code grant type.");
429
+ }
430
+ const responseTypes = Array.isArray(metadata.response_types)
431
+ ? metadata.response_types.filter((value) => typeof value === "string")
432
+ : [];
433
+ if (!responseTypes.includes("code")) {
434
+ throw new Error("Client metadata must allow code response type.");
435
+ }
436
+ const tokenEndpointAuthMethod = metadata.token_endpoint_auth_method;
437
+ if (tokenEndpointAuthMethod !== undefined &&
438
+ tokenEndpointAuthMethod !== null &&
439
+ tokenEndpointAuthMethod !== "none") {
440
+ throw new Error("Only token_endpoint_auth_method 'none' is supported.");
441
+ }
442
+ }
443
+ }
444
+ function parseScopes(rawScope) {
445
+ if (!rawScope) {
446
+ return [DEFAULT_SCOPE];
447
+ }
448
+ const scopes = rawScope
449
+ .split(/\s+/)
450
+ .map((value) => value.trim())
451
+ .filter((value) => value.length > 0);
452
+ return scopes.length > 0 ? scopes : [DEFAULT_SCOPE];
453
+ }
454
+ function readRequiredString(body, key) {
455
+ const value = readOptionalString(body, key);
456
+ if (!value) {
457
+ throw new Error(`${key} is required.`);
458
+ }
459
+ return value;
460
+ }
461
+ function readOptionalString(body, key) {
462
+ const value = body[key];
463
+ if (typeof value !== "string") {
464
+ return undefined;
465
+ }
466
+ const trimmed = value.trim();
467
+ return trimmed.length > 0 ? trimmed : undefined;
468
+ }
469
+ function buildPkceChallenge(codeVerifier) {
470
+ return createHash("sha256").update(codeVerifier, "utf8").digest("base64url");
471
+ }
472
+ function buildRedirectUrl(redirectUri, code, state) {
473
+ const url = new URL(redirectUri);
474
+ url.searchParams.set("code", code);
475
+ url.searchParams.set("state", state);
476
+ return url.toString();
477
+ }
478
+ function hashOpaqueToken(token) {
479
+ return createHash("sha256").update(token, "utf8").digest("hex");
480
+ }
481
+ function extractNonce(challenge) {
482
+ const match = NONCE_REGEX.exec(challenge);
483
+ if (!match?.[1]) {
484
+ throw new Error("Challenge nonce not found.");
485
+ }
486
+ return match[1];
487
+ }
488
+ function writeJsonAtomic(path, data) {
489
+ const tempPath = `${path}.tmp`;
490
+ writeFileSync(tempPath, JSON.stringify(data, null, 2) + "\n", "utf-8");
491
+ renameSync(tempPath, path);
492
+ }
493
+ function trimTrailingSlash(value) {
494
+ return value.replace(/\/+$/, "");
495
+ }
496
+ function isAllowedClientMetadataUrl(url) {
497
+ if (url.protocol === "https:") {
498
+ return true;
499
+ }
500
+ if (process.env.NODE_ENV === "development" &&
501
+ url.protocol === "http:" &&
502
+ (url.hostname === "localhost" || url.hostname === "127.0.0.1")) {
503
+ return true;
504
+ }
505
+ return false;
506
+ }
507
+ //# sourceMappingURL=OAuthService.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"OAuthService.js","sourceRoot":"","sources":["../../src/oauth/OAuthService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,GAAG,MAAM,cAAc,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAWzD,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAClD,MAAM,WAAW,GAAG,8BAA8B,CAAC;AAanD,MAAM,OAAO,YAAY;IACP,YAAY,CAAS;IACrB,WAAW,CAAS;IACpB,kBAAkB,GAAG,qBAAqB,CAAC;IAE1C,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,uBAAuB,CAAS;IAChC,uBAAuB,CAAS;IAChC,0BAA0B,CAAS;IACnC,2BAA2B,CAAS;IACpC,uBAAuB,CAAS;IAChC,qBAAqB,GAAG,IAAI,GAAG,EAAuC,CAAC;IACvE,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAChD,kBAAkB,GAAG,IAAI,GAAG,EAAmC,CAAC;IAEjF,YAAY,OAA4B;QACtC,IAAI,CAAC,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,CAAC,WAAW,GAAG,GAAG,IAAI,CAAC,YAAY,MAAM,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,GAAG,CAAC;QACtE,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,GAAG,CAAC;QACtE,IAAI,CAAC,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,IAAI,IAAI,CAAC;QAC7E,IAAI,CAAC,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,IAAI,SAAS,CAAC;QACpF,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,MAAM,CAAC;IAC3E,CAAC;IAED,8BAA8B;QAC5B,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,YAAY;YACzB,sBAAsB,EAAE,GAAG,IAAI,CAAC,YAAY,kBAAkB;YAC9D,cAAc,EAAE,GAAG,IAAI,CAAC,YAAY,cAAc;YAClD,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YAC9D,gCAAgC,EAAE,CAAC,MAAM,CAAC;YAC1C,qCAAqC,EAAE,CAAC,MAAM,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,4BAA4B;QAC1B,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,qBAAqB,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;YAC1C,wBAAwB,EAAE,CAAC,QAAQ,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,MAUhC;QACC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;QACnD,MAAM,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;QAE/D,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,mBAAmB,KAAK,MAAM,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,MAAM,OAAO,GAAgC;YAC3C,aAAa,EAAE,UAAU,EAAE;YAC3B,QAAQ;YACR,WAAW;YACX,KAAK;YACL,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;YAChC,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,aAAa;YACb,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,uBAAuB,GAAG,IAAI;SACrD,CAAC;QAEF,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,uBAAuB,CAAC,aAAqB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,qBAAqB,CACnB,aAAqB,EACrB,MAAoB,EACpB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAEvD,MAAM,SAAS,GAAG;YAChB,mCAAmC;YACnC,YAAY;YACZ,0CAA0C;YAC1C,YAAY,MAAM,CAAC,mBAAmB,EAAE;YACxC,WAAW,MAAM,CAAC,QAAQ,EAAE;YAC5B,cAAc,OAAO,CAAC,QAAQ,EAAE;YAChC,UAAU,KAAK,EAAE;YACjB,cAAc,WAAW,EAAE;YAC3B,eAAe,YAAY,EAAE;SAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,MAAM,GAAoB;YAC9B,KAAK;YACL,aAAa;YACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,SAAS;YACT,QAAQ,EAAE,GAAG;YACb,SAAS;YACT,MAAM,EAAE,IAAI;SACb,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAO3B;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAErC,IAAI,SAAS,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACrD,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC3C,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,GAAG,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YAC9B,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;QAEvB,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,eAAe,CACtE,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB,CAAC;QACF,MAAM,mBAAmB,GAAG,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACpF,IAAI,mBAAmB,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO;YACL,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;YAC3E,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,MAI9B;QAUC,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,yBAAyB,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAE5F,OAAO;YACL,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;YAC3E,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE;gBACN,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;gBACjC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;gBACrC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;gBAC3C,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;aACtC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,IAA6B,EAC7B,aAA4B;QAQ5B,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzD,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE;YACvC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,IAAI,CAAC,YAAY;YACzB,QAAQ,EAAE,IAAI,CAAC,WAAW;SAC3B,CAA4B,CAAC;IAChC,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,IAA6B,EAC7B,aAA4B;QAQ5B,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACtD,IAAI,QAAQ,IAAI,iBAAiB,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,kBAAkB,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE3B,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC;YACxC,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;YAC1C,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,KAAK;SACrB,CAAC,CAAC;QAEH,OAAO;YACL,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,YAAY;YAC3B,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAI,CAAC,0BAA0B;YAC3C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;SAC9B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAA6B,EAC7B,aAA4B;QAQ5B,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QAEzD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC;YAC3C,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC;YAC7C,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAuB;YACxC,GAAG,MAAM;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,mBAAmB,EAAE,YAAY;SAClC,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;QAE5C,OAAO;YACL,YAAY,EAAE,cAAc;YAC5B,aAAa,EAAE,eAAe;YAC9B,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAI,CAAC,0BAA0B;YAC3C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC/B,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAC5B,OAAoC,EACpC,MAAoB,EACpB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAEhB,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,MAAM,GAA4B;YACtC,IAAI;YACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,uBAAuB,GAAG,IAAI;YACpD,MAAM,EAAE,IAAI;SACb,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,gBAAgB,CAAC,MAIxB;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,0BAA0B,CAAC;QAClD,MAAM,OAAO,GAA4B;YACvC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAChC,QAAQ,EAAE,SAAS;YACnB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB;YAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc;YAC5C,GAAG,EAAE,IAAI,CAAC,YAAY;YACtB,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,GAAG;YACH,GAAG;YACH,GAAG,EAAE,UAAU,EAAE;SAClB,CAAC;QAEF,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE;YACvC,SAAS,EAAE,OAAO;YAClB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CAAC,MAIzB;QACC,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAuB;YACjC,SAAS,EAAE,eAAe,CAAC,YAAY,CAAC;YACxC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAChC,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB;YACtD,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc;YAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,2BAA2B,GAAG,IAAI;YAC/D,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,mBAAmB,EAAE,IAAI;SAC1B,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,sBAAsB,CAAC,YAAoB;QACjD,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAuB,CAAC;IAC3E,CAAC;IAEO,uBAAuB,CAAC,MAA0B;QACxD,SAAS,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAEO,kBAAkB;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAEO,mBAAmB,CAAC,SAAiB;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;IAC9D,CAAC;IAEO,gBAAgB,CAAC,aAAqB;QAC5C,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,QAAgB,EAAE,WAAmB;QACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACrF,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBAC/B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sDAAsD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QACpE,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;YACxD,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACtF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YACpD,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACpF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC1D,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACvF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,uBAAuB,GAAG,QAAQ,CAAC,0BAA0B,CAAC;QACpE,IACE,uBAAuB,KAAK,SAAS;YACrC,uBAAuB,KAAK,IAAI;YAChC,uBAAuB,KAAK,MAAM,EAClC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF;AAED,SAAS,WAAW,CAAC,QAA4B;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,aAAa,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ;SACpB,KAAK,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA6B,EAAE,GAAW;IACpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA6B,EAAE,GAAW;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAmB,EAAE,IAAY,EAAE,KAAa;IACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACjC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAa;IAClD,MAAM,QAAQ,GAAG,GAAG,IAAI,MAAM,CAAC;IAC/B,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACvE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAQ;IAC1C,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa;QACtC,GAAG,CAAC,QAAQ,KAAK,OAAO;QACxB,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAC,EAC9D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
@@ -0,0 +1 @@
1
+ export declare function renderOAuthWalletPage(): string;