@missionsquad/mcp-server-tron 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +21 -0
- package/README.md +537 -0
- package/bin/cli.js +51 -0
- package/build/core/chains.d.ts +17 -0
- package/build/core/chains.js +87 -0
- package/build/core/chains.js.map +1 -0
- package/build/core/prompts.d.ts +19 -0
- package/build/core/prompts.js +485 -0
- package/build/core/prompts.js.map +1 -0
- package/build/core/resources.d.ts +14 -0
- package/build/core/resources.js +42 -0
- package/build/core/resources.js.map +1 -0
- package/build/core/services/account-data.d.ts +144 -0
- package/build/core/services/account-data.js +228 -0
- package/build/core/services/account-data.js.map +1 -0
- package/build/core/services/account-resource.d.ts +56 -0
- package/build/core/services/account-resource.js +133 -0
- package/build/core/services/account-resource.js.map +1 -0
- package/build/core/services/account.d.ts +141 -0
- package/build/core/services/account.js +191 -0
- package/build/core/services/account.js.map +1 -0
- package/build/core/services/address.d.ts +8 -0
- package/build/core/services/address.js +52 -0
- package/build/core/services/address.js.map +1 -0
- package/build/core/services/agent-wallet.d.ts +62 -0
- package/build/core/services/agent-wallet.js +234 -0
- package/build/core/services/agent-wallet.js.map +1 -0
- package/build/core/services/balance.d.ts +26 -0
- package/build/core/services/balance.js +60 -0
- package/build/core/services/balance.js.map +1 -0
- package/build/core/services/blocks.d.ts +25 -0
- package/build/core/services/blocks.js +65 -0
- package/build/core/services/blocks.js.map +1 -0
- package/build/core/services/broadcast.d.ts +13 -0
- package/build/core/services/broadcast.js +24 -0
- package/build/core/services/broadcast.js.map +1 -0
- package/build/core/services/clients.d.ts +5 -0
- package/build/core/services/clients.js +29 -0
- package/build/core/services/clients.js.map +1 -0
- package/build/core/services/contract-data.d.ts +31 -0
- package/build/core/services/contract-data.js +54 -0
- package/build/core/services/contract-data.js.map +1 -0
- package/build/core/services/contracts.d.ts +108 -0
- package/build/core/services/contracts.js +482 -0
- package/build/core/services/contracts.js.map +1 -0
- package/build/core/services/events.d.ts +56 -0
- package/build/core/services/events.js +99 -0
- package/build/core/services/events.js.map +1 -0
- package/build/core/services/governance.d.ts +78 -0
- package/build/core/services/governance.js +207 -0
- package/build/core/services/governance.js.map +1 -0
- package/build/core/services/index.d.ts +28 -0
- package/build/core/services/index.js +81 -0
- package/build/core/services/index.js.map +1 -0
- package/build/core/services/mempool.d.ts +12 -0
- package/build/core/services/mempool.js +32 -0
- package/build/core/services/mempool.js.map +1 -0
- package/build/core/services/multicall-abi.d.ts +55 -0
- package/build/core/services/multicall-abi.js +61 -0
- package/build/core/services/multicall-abi.js.map +1 -0
- package/build/core/services/nodes.d.ts +8 -0
- package/build/core/services/nodes.js +18 -0
- package/build/core/services/nodes.js.map +1 -0
- package/build/core/services/proposals.d.ts +33 -0
- package/build/core/services/proposals.js +95 -0
- package/build/core/services/proposals.js.map +1 -0
- package/build/core/services/query.d.ts +34 -0
- package/build/core/services/query.js +60 -0
- package/build/core/services/query.js.map +1 -0
- package/build/core/services/staking.d.ts +40 -0
- package/build/core/services/staking.js +113 -0
- package/build/core/services/staking.js.map +1 -0
- package/build/core/services/tokens.d.ts +22 -0
- package/build/core/services/tokens.js +68 -0
- package/build/core/services/tokens.js.map +1 -0
- package/build/core/services/transactions.d.ts +16 -0
- package/build/core/services/transactions.js +42 -0
- package/build/core/services/transactions.js.map +1 -0
- package/build/core/services/transfer.d.ts +24 -0
- package/build/core/services/transfer.js +84 -0
- package/build/core/services/transfer.js.map +1 -0
- package/build/core/services/trongrid-client.d.ts +14 -0
- package/build/core/services/trongrid-client.js +19 -0
- package/build/core/services/trongrid-client.js.map +1 -0
- package/build/core/services/utils.d.ts +13 -0
- package/build/core/services/utils.js +39 -0
- package/build/core/services/utils.js.map +1 -0
- package/build/core/services/wallet.d.ts +13 -0
- package/build/core/services/wallet.js +18 -0
- package/build/core/services/wallet.js.map +1 -0
- package/build/core/tools/account-data.d.ts +2 -0
- package/build/core/tools/account-data.js +253 -0
- package/build/core/tools/account-data.js.map +1 -0
- package/build/core/tools/account-resource.d.ts +2 -0
- package/build/core/tools/account-resource.js +269 -0
- package/build/core/tools/account-resource.js.map +1 -0
- package/build/core/tools/account.d.ts +2 -0
- package/build/core/tools/account.js +451 -0
- package/build/core/tools/account.js.map +1 -0
- package/build/core/tools/address.d.ts +2 -0
- package/build/core/tools/address.js +45 -0
- package/build/core/tools/address.js.map +1 -0
- package/build/core/tools/balance.d.ts +2 -0
- package/build/core/tools/balance.js +94 -0
- package/build/core/tools/balance.js.map +1 -0
- package/build/core/tools/block.d.ts +2 -0
- package/build/core/tools/block.js +74 -0
- package/build/core/tools/block.js.map +1 -0
- package/build/core/tools/broadcast.d.ts +2 -0
- package/build/core/tools/broadcast.js +102 -0
- package/build/core/tools/broadcast.js.map +1 -0
- package/build/core/tools/contract-data.d.ts +2 -0
- package/build/core/tools/contract-data.js +159 -0
- package/build/core/tools/contract-data.js.map +1 -0
- package/build/core/tools/contract.d.ts +2 -0
- package/build/core/tools/contract.js +600 -0
- package/build/core/tools/contract.js.map +1 -0
- package/build/core/tools/event.d.ts +2 -0
- package/build/core/tools/event.js +159 -0
- package/build/core/tools/event.js.map +1 -0
- package/build/core/tools/governance.d.ts +6 -0
- package/build/core/tools/governance.js +424 -0
- package/build/core/tools/governance.js.map +1 -0
- package/build/core/tools/index.d.ts +15 -0
- package/build/core/tools/index.js +93 -0
- package/build/core/tools/index.js.map +1 -0
- package/build/core/tools/mempool.d.ts +2 -0
- package/build/core/tools/mempool.js +116 -0
- package/build/core/tools/mempool.js.map +1 -0
- package/build/core/tools/network.d.ts +2 -0
- package/build/core/tools/network.js +114 -0
- package/build/core/tools/network.js.map +1 -0
- package/build/core/tools/node.d.ts +2 -0
- package/build/core/tools/node.js +75 -0
- package/build/core/tools/node.js.map +1 -0
- package/build/core/tools/proposals.d.ts +6 -0
- package/build/core/tools/proposals.js +219 -0
- package/build/core/tools/proposals.js.map +1 -0
- package/build/core/tools/query.d.ts +2 -0
- package/build/core/tools/query.js +399 -0
- package/build/core/tools/query.js.map +1 -0
- package/build/core/tools/staking.d.ts +2 -0
- package/build/core/tools/staking.js +281 -0
- package/build/core/tools/staking.js.map +1 -0
- package/build/core/tools/transaction.d.ts +2 -0
- package/build/core/tools/transaction.js +65 -0
- package/build/core/tools/transaction.js.map +1 -0
- package/build/core/tools/transfer.d.ts +2 -0
- package/build/core/tools/transfer.js +101 -0
- package/build/core/tools/transfer.js.map +1 -0
- package/build/core/tools/types.d.ts +13 -0
- package/build/core/tools/types.js +2 -0
- package/build/core/tools/types.js.map +1 -0
- package/build/core/tools/wallet.d.ts +2 -0
- package/build/core/tools/wallet.js +172 -0
- package/build/core/tools/wallet.js.map +1 -0
- package/build/index.d.ts +1 -0
- package/build/index.js +21 -0
- package/build/index.js.map +1 -0
- package/build/middleware/auth.d.ts +16 -0
- package/build/middleware/auth.js +44 -0
- package/build/middleware/auth.js.map +1 -0
- package/build/oauth/OAuthService.d.ts +100 -0
- package/build/oauth/OAuthService.js +507 -0
- package/build/oauth/OAuthService.js.map +1 -0
- package/build/oauth/page.d.ts +1 -0
- package/build/oauth/page.js +255 -0
- package/build/oauth/page.js.map +1 -0
- package/build/oauth/types.d.ts +65 -0
- package/build/oauth/types.js +2 -0
- package/build/oauth/types.js.map +1 -0
- package/build/server/http-app.d.ts +9 -0
- package/build/server/http-app.js +128 -0
- package/build/server/http-app.js.map +1 -0
- package/build/server/http-server.d.ts +1 -0
- package/build/server/http-server.js +35 -0
- package/build/server/http-server.js.map +1 -0
- package/build/server/oauth-routes.d.ts +7 -0
- package/build/server/oauth-routes.js +157 -0
- package/build/server/oauth-routes.js.map +1 -0
- package/build/server/server.d.ts +9 -0
- package/build/server/server.js +54 -0
- package/build/server/server.js.map +1 -0
- package/build/tenant/TenantManager.d.ts +35 -0
- package/build/tenant/TenantManager.js +167 -0
- package/build/tenant/TenantManager.js.map +1 -0
- package/build/tenant/context.d.ts +11 -0
- package/build/tenant/context.js +23 -0
- package/build/tenant/context.js.map +1 -0
- package/build/tenant/types.d.ts +16 -0
- package/build/tenant/types.js +2 -0
- package/build/tenant/types.js.map +1 -0
- package/package.json +95 -0
|
@@ -0,0 +1,507 @@
|
|
|
1
|
+
import { createHash, randomBytes, randomUUID } from "node:crypto";
|
|
2
|
+
import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
|
|
3
|
+
import { join } from "node:path";
|
|
4
|
+
import jwt from "jsonwebtoken";
|
|
5
|
+
import { getTronWeb } from "../core/services/clients.js";
|
|
6
|
+
const DEFAULT_SCOPE = "mcp";
|
|
7
|
+
const AUTH_CODE_COOKIE_NAME = "mcp_oauth_request";
|
|
8
|
+
const NONCE_REGEX = /^Nonce:\s+([A-Za-z0-9_-]+)$/m;
|
|
9
|
+
export class OAuthService {
|
|
10
|
+
publicOrigin;
|
|
11
|
+
resourceUri;
|
|
12
|
+
authCodeCookieName = AUTH_CODE_COOKIE_NAME;
|
|
13
|
+
jwtSecret;
|
|
14
|
+
dataDir;
|
|
15
|
+
authChallengeTtlSeconds;
|
|
16
|
+
oauthAuthCodeTtlSeconds;
|
|
17
|
+
oauthAccessTokenTtlSeconds;
|
|
18
|
+
oauthRefreshTokenTtlSeconds;
|
|
19
|
+
clientMetadataTimeoutMs;
|
|
20
|
+
pendingAuthorizations = new Map();
|
|
21
|
+
challenges = new Map();
|
|
22
|
+
authorizationCodes = new Map();
|
|
23
|
+
constructor(options) {
|
|
24
|
+
this.publicOrigin = trimTrailingSlash(options.publicOrigin);
|
|
25
|
+
this.resourceUri = `${this.publicOrigin}/mcp`;
|
|
26
|
+
this.jwtSecret = options.jwtSecret;
|
|
27
|
+
this.dataDir = options.dataDir;
|
|
28
|
+
this.authChallengeTtlSeconds = options.authChallengeTtlSeconds ?? 300;
|
|
29
|
+
this.oauthAuthCodeTtlSeconds = options.oauthAuthCodeTtlSeconds ?? 300;
|
|
30
|
+
this.oauthAccessTokenTtlSeconds = options.oauthAccessTokenTtlSeconds ?? 3600;
|
|
31
|
+
this.oauthRefreshTokenTtlSeconds = options.oauthRefreshTokenTtlSeconds ?? 2_592_000;
|
|
32
|
+
this.clientMetadataTimeoutMs = options.clientMetadataTimeoutMs ?? 10_000;
|
|
33
|
+
}
|
|
34
|
+
getAuthorizationServerMetadata() {
|
|
35
|
+
return {
|
|
36
|
+
issuer: this.publicOrigin,
|
|
37
|
+
authorization_endpoint: `${this.publicOrigin}/oauth/authorize`,
|
|
38
|
+
token_endpoint: `${this.publicOrigin}/oauth/token`,
|
|
39
|
+
response_types_supported: ["code"],
|
|
40
|
+
grant_types_supported: ["authorization_code", "refresh_token"],
|
|
41
|
+
code_challenge_methods_supported: ["S256"],
|
|
42
|
+
token_endpoint_auth_methods_supported: ["none"],
|
|
43
|
+
};
|
|
44
|
+
}
|
|
45
|
+
getProtectedResourceMetadata() {
|
|
46
|
+
return {
|
|
47
|
+
resource: this.resourceUri,
|
|
48
|
+
authorization_servers: [this.publicOrigin],
|
|
49
|
+
bearer_methods_supported: ["header"],
|
|
50
|
+
};
|
|
51
|
+
}
|
|
52
|
+
async createPendingAuthorization(params) {
|
|
53
|
+
const responseType = params.responseType?.trim();
|
|
54
|
+
const clientId = params.clientId?.trim();
|
|
55
|
+
const redirectUri = params.redirectUri?.trim();
|
|
56
|
+
const state = params.state?.trim();
|
|
57
|
+
const codeChallenge = params.codeChallenge?.trim();
|
|
58
|
+
const codeChallengeMethod = params.codeChallengeMethod?.trim();
|
|
59
|
+
if (responseType !== "code") {
|
|
60
|
+
throw new Error("response_type must be 'code'.");
|
|
61
|
+
}
|
|
62
|
+
if (!clientId) {
|
|
63
|
+
throw new Error("client_id is required.");
|
|
64
|
+
}
|
|
65
|
+
if (!redirectUri) {
|
|
66
|
+
throw new Error("redirect_uri is required.");
|
|
67
|
+
}
|
|
68
|
+
if (!state) {
|
|
69
|
+
throw new Error("state is required.");
|
|
70
|
+
}
|
|
71
|
+
if (!codeChallenge) {
|
|
72
|
+
throw new Error("code_challenge is required.");
|
|
73
|
+
}
|
|
74
|
+
if (codeChallengeMethod !== "S256") {
|
|
75
|
+
throw new Error("code_challenge_method must be 'S256'.");
|
|
76
|
+
}
|
|
77
|
+
if (params.resource && trimTrailingSlash(params.resource) !== this.resourceUri) {
|
|
78
|
+
throw new Error(`resource must be '${this.resourceUri}'.`);
|
|
79
|
+
}
|
|
80
|
+
await this.validateClientMetadata(clientId, redirectUri);
|
|
81
|
+
const now = params.now ?? Date.now();
|
|
82
|
+
const request = {
|
|
83
|
+
authRequestId: randomUUID(),
|
|
84
|
+
clientId,
|
|
85
|
+
redirectUri,
|
|
86
|
+
state,
|
|
87
|
+
scope: parseScopes(params.scope),
|
|
88
|
+
resource: this.resourceUri,
|
|
89
|
+
codeChallenge,
|
|
90
|
+
codeChallengeMethod: "S256",
|
|
91
|
+
issuedAt: now,
|
|
92
|
+
expiresAt: now + this.oauthAuthCodeTtlSeconds * 1000,
|
|
93
|
+
};
|
|
94
|
+
this.pendingAuthorizations.set(request.authRequestId, request);
|
|
95
|
+
return request;
|
|
96
|
+
}
|
|
97
|
+
getPendingAuthorization(authRequestId) {
|
|
98
|
+
const request = this.pendingAuthorizations.get(authRequestId);
|
|
99
|
+
if (!request) {
|
|
100
|
+
throw new Error("OAuth authorization request not found.");
|
|
101
|
+
}
|
|
102
|
+
if (Date.now() > request.expiresAt) {
|
|
103
|
+
this.pendingAuthorizations.delete(authRequestId);
|
|
104
|
+
throw new Error("OAuth authorization request expired.");
|
|
105
|
+
}
|
|
106
|
+
return request;
|
|
107
|
+
}
|
|
108
|
+
createWalletChallenge(authRequestId, tenant, now = Date.now()) {
|
|
109
|
+
const pending = this.getPendingAuthorization(authRequestId);
|
|
110
|
+
const nonce = randomUUID();
|
|
111
|
+
const issuedAtIso = new Date(now).toISOString();
|
|
112
|
+
const expiresAt = now + this.authChallengeTtlSeconds * 1000;
|
|
113
|
+
const expiresAtIso = new Date(expiresAt).toISOString();
|
|
114
|
+
const challenge = [
|
|
115
|
+
"MissionSquad TRON MCP OAuth Login",
|
|
116
|
+
"Version: 1",
|
|
117
|
+
"Purpose: Authorize managed wallet access",
|
|
118
|
+
`Address: ${tenant.walletAddressBase58}`,
|
|
119
|
+
`Tenant: ${tenant.tenantId}`,
|
|
120
|
+
`Client ID: ${pending.clientId}`,
|
|
121
|
+
`Nonce: ${nonce}`,
|
|
122
|
+
`Issued At: ${issuedAtIso}`,
|
|
123
|
+
`Expires At: ${expiresAtIso}`,
|
|
124
|
+
].join("\n");
|
|
125
|
+
const record = {
|
|
126
|
+
nonce,
|
|
127
|
+
authRequestId,
|
|
128
|
+
tenantId: tenant.tenantId,
|
|
129
|
+
walletAddressBase58: tenant.walletAddressBase58,
|
|
130
|
+
walletAddressHex: tenant.walletAddressHex,
|
|
131
|
+
challenge,
|
|
132
|
+
issuedAt: now,
|
|
133
|
+
expiresAt,
|
|
134
|
+
usedAt: null,
|
|
135
|
+
};
|
|
136
|
+
this.challenges.set(record.nonce, record);
|
|
137
|
+
return record;
|
|
138
|
+
}
|
|
139
|
+
async verifyWalletChallenge(params) {
|
|
140
|
+
const pending = this.getPendingAuthorization(params.authRequestId);
|
|
141
|
+
const tenant = params.tenantManager.requireTenantByAddress(params.walletAddress);
|
|
142
|
+
const challenge = this.requireChallenge(params.challenge);
|
|
143
|
+
const now = params.now ?? Date.now();
|
|
144
|
+
if (challenge.authRequestId !== params.authRequestId) {
|
|
145
|
+
challenge.usedAt = now;
|
|
146
|
+
throw new Error("Challenge does not belong to the current OAuth authorization request.");
|
|
147
|
+
}
|
|
148
|
+
if (challenge.tenantId !== tenant.tenantId) {
|
|
149
|
+
challenge.usedAt = now;
|
|
150
|
+
throw new Error("Challenge tenant does not match the requested wallet.");
|
|
151
|
+
}
|
|
152
|
+
if (challenge.challenge !== params.challenge) {
|
|
153
|
+
challenge.usedAt = now;
|
|
154
|
+
throw new Error("Challenge text mismatch.");
|
|
155
|
+
}
|
|
156
|
+
if (challenge.usedAt !== null) {
|
|
157
|
+
throw new Error("Challenge has already been used.");
|
|
158
|
+
}
|
|
159
|
+
if (now > challenge.expiresAt) {
|
|
160
|
+
challenge.usedAt = now;
|
|
161
|
+
throw new Error("Challenge expired.");
|
|
162
|
+
}
|
|
163
|
+
challenge.usedAt = now;
|
|
164
|
+
const recoveredAddress = await getTronWeb("mainnet").trx.verifyMessageV2(params.challenge, params.signature);
|
|
165
|
+
const normalizedRecovered = params.tenantManager.normalizeAddress(recoveredAddress);
|
|
166
|
+
if (normalizedRecovered.walletAddressBase58 !== tenant.walletAddressBase58) {
|
|
167
|
+
throw new Error("Wallet signature verification failed.");
|
|
168
|
+
}
|
|
169
|
+
const code = this.issueAuthorizationCode(pending, tenant, now);
|
|
170
|
+
return {
|
|
171
|
+
redirectTo: buildRedirectUrl(pending.redirectUri, code.code, pending.state),
|
|
172
|
+
tenant,
|
|
173
|
+
};
|
|
174
|
+
}
|
|
175
|
+
async createWalletAndAuthorize(params) {
|
|
176
|
+
const pending = this.getPendingAuthorization(params.authRequestId);
|
|
177
|
+
const created = await params.tenantManager.createTenantWithNewWallet();
|
|
178
|
+
const code = this.issueAuthorizationCode(pending, created.tenant, params.now ?? Date.now());
|
|
179
|
+
return {
|
|
180
|
+
redirectTo: buildRedirectUrl(pending.redirectUri, code.code, pending.state),
|
|
181
|
+
tenant: created.tenant,
|
|
182
|
+
wallet: {
|
|
183
|
+
tenantId: created.tenant.tenantId,
|
|
184
|
+
walletAddress: created.wallet.address,
|
|
185
|
+
walletAddressHex: created.wallet.addressHex,
|
|
186
|
+
privateKey: created.wallet.privateKey,
|
|
187
|
+
},
|
|
188
|
+
};
|
|
189
|
+
}
|
|
190
|
+
async exchangeToken(body, tenantManager) {
|
|
191
|
+
const grantType = readRequiredString(body, "grant_type");
|
|
192
|
+
if (grantType === "authorization_code") {
|
|
193
|
+
return this.exchangeAuthorizationCode(body, tenantManager);
|
|
194
|
+
}
|
|
195
|
+
if (grantType === "refresh_token") {
|
|
196
|
+
return this.exchangeRefreshToken(body, tenantManager);
|
|
197
|
+
}
|
|
198
|
+
throw new Error("Unsupported grant_type.");
|
|
199
|
+
}
|
|
200
|
+
verifyAccessToken(token) {
|
|
201
|
+
return jwt.verify(token, this.jwtSecret, {
|
|
202
|
+
algorithms: ["HS256"],
|
|
203
|
+
issuer: this.publicOrigin,
|
|
204
|
+
audience: this.resourceUri,
|
|
205
|
+
});
|
|
206
|
+
}
|
|
207
|
+
async exchangeAuthorizationCode(body, tenantManager) {
|
|
208
|
+
const code = readRequiredString(body, "code");
|
|
209
|
+
const clientId = readRequiredString(body, "client_id");
|
|
210
|
+
const redirectUri = readRequiredString(body, "redirect_uri");
|
|
211
|
+
const codeVerifier = readRequiredString(body, "code_verifier");
|
|
212
|
+
const resource = readOptionalString(body, "resource");
|
|
213
|
+
if (resource && trimTrailingSlash(resource) !== this.resourceUri) {
|
|
214
|
+
throw new Error(`resource must be '${this.resourceUri}'.`);
|
|
215
|
+
}
|
|
216
|
+
await this.validateClientMetadata(clientId, redirectUri);
|
|
217
|
+
const record = this.authorizationCodes.get(code);
|
|
218
|
+
if (!record) {
|
|
219
|
+
throw new Error("Authorization code not found.");
|
|
220
|
+
}
|
|
221
|
+
if (record.usedAt !== null) {
|
|
222
|
+
throw new Error("Authorization code has already been used.");
|
|
223
|
+
}
|
|
224
|
+
if (Date.now() > record.expiresAt) {
|
|
225
|
+
this.authorizationCodes.delete(code);
|
|
226
|
+
throw new Error("Authorization code expired.");
|
|
227
|
+
}
|
|
228
|
+
if (record.clientId !== clientId) {
|
|
229
|
+
throw new Error("Authorization code client_id mismatch.");
|
|
230
|
+
}
|
|
231
|
+
if (record.redirectUri !== redirectUri) {
|
|
232
|
+
throw new Error("Authorization code redirect_uri mismatch.");
|
|
233
|
+
}
|
|
234
|
+
if (buildPkceChallenge(codeVerifier) !== record.codeChallenge) {
|
|
235
|
+
throw new Error("Invalid code_verifier.");
|
|
236
|
+
}
|
|
237
|
+
record.usedAt = Date.now();
|
|
238
|
+
const tenant = tenantManager.getTenantById(record.tenantId);
|
|
239
|
+
if (!tenant) {
|
|
240
|
+
throw new Error("Tenant not found for authorization code.");
|
|
241
|
+
}
|
|
242
|
+
const accessToken = this.issueAccessToken({
|
|
243
|
+
tenant,
|
|
244
|
+
clientId,
|
|
245
|
+
scopes: record.scope,
|
|
246
|
+
});
|
|
247
|
+
const refreshToken = this.issueRefreshToken({
|
|
248
|
+
tenant,
|
|
249
|
+
clientId,
|
|
250
|
+
scopes: record.scope,
|
|
251
|
+
});
|
|
252
|
+
return {
|
|
253
|
+
access_token: accessToken,
|
|
254
|
+
refresh_token: refreshToken,
|
|
255
|
+
token_type: "Bearer",
|
|
256
|
+
expires_in: this.oauthAccessTokenTtlSeconds,
|
|
257
|
+
scope: record.scope.join(" "),
|
|
258
|
+
};
|
|
259
|
+
}
|
|
260
|
+
async exchangeRefreshToken(body, tenantManager) {
|
|
261
|
+
const refreshToken = readRequiredString(body, "refresh_token");
|
|
262
|
+
const clientId = readRequiredString(body, "client_id");
|
|
263
|
+
const record = this.loadRefreshTokenRecord(refreshToken);
|
|
264
|
+
if (record.revokedAt !== null) {
|
|
265
|
+
throw new Error("Refresh token revoked.");
|
|
266
|
+
}
|
|
267
|
+
if (record.rotatedAt !== null) {
|
|
268
|
+
throw new Error("Refresh token already rotated.");
|
|
269
|
+
}
|
|
270
|
+
if (Date.now() > record.expiresAt) {
|
|
271
|
+
throw new Error("Refresh token expired.");
|
|
272
|
+
}
|
|
273
|
+
if (record.clientId !== clientId) {
|
|
274
|
+
throw new Error("Refresh token client_id mismatch.");
|
|
275
|
+
}
|
|
276
|
+
const tenant = tenantManager.getTenantById(record.tenantId);
|
|
277
|
+
if (!tenant) {
|
|
278
|
+
throw new Error("Tenant not found for refresh token.");
|
|
279
|
+
}
|
|
280
|
+
if (tenant.sessionVersion !== record.sessionVersion) {
|
|
281
|
+
throw new Error("Refresh token session version mismatch.");
|
|
282
|
+
}
|
|
283
|
+
const newAccessToken = this.issueAccessToken({
|
|
284
|
+
tenant,
|
|
285
|
+
clientId,
|
|
286
|
+
scopes: record.scopes,
|
|
287
|
+
});
|
|
288
|
+
const newRefreshToken = this.issueRefreshToken({
|
|
289
|
+
tenant,
|
|
290
|
+
clientId,
|
|
291
|
+
scopes: record.scopes,
|
|
292
|
+
});
|
|
293
|
+
const newTokenHash = hashOpaqueToken(newRefreshToken);
|
|
294
|
+
const updatedRecord = {
|
|
295
|
+
...record,
|
|
296
|
+
rotatedAt: Date.now(),
|
|
297
|
+
replacedByTokenHash: newTokenHash,
|
|
298
|
+
};
|
|
299
|
+
this.writeRefreshTokenRecord(updatedRecord);
|
|
300
|
+
return {
|
|
301
|
+
access_token: newAccessToken,
|
|
302
|
+
refresh_token: newRefreshToken,
|
|
303
|
+
token_type: "Bearer",
|
|
304
|
+
expires_in: this.oauthAccessTokenTtlSeconds,
|
|
305
|
+
scope: record.scopes.join(" "),
|
|
306
|
+
};
|
|
307
|
+
}
|
|
308
|
+
issueAuthorizationCode(pending, tenant, now = Date.now()) {
|
|
309
|
+
const code = randomBytes(32).toString("base64url");
|
|
310
|
+
const record = {
|
|
311
|
+
code,
|
|
312
|
+
clientId: pending.clientId,
|
|
313
|
+
redirectUri: pending.redirectUri,
|
|
314
|
+
tenantId: tenant.tenantId,
|
|
315
|
+
walletAddressBase58: tenant.walletAddressBase58,
|
|
316
|
+
walletId: "primary",
|
|
317
|
+
scope: pending.scope,
|
|
318
|
+
codeChallenge: pending.codeChallenge,
|
|
319
|
+
codeChallengeMethod: pending.codeChallengeMethod,
|
|
320
|
+
issuedAt: now,
|
|
321
|
+
expiresAt: now + this.oauthAuthCodeTtlSeconds * 1000,
|
|
322
|
+
usedAt: null,
|
|
323
|
+
};
|
|
324
|
+
this.authorizationCodes.set(code, record);
|
|
325
|
+
return record;
|
|
326
|
+
}
|
|
327
|
+
issueAccessToken(params) {
|
|
328
|
+
const iat = Math.floor(Date.now() / 1000);
|
|
329
|
+
const exp = iat + this.oauthAccessTokenTtlSeconds;
|
|
330
|
+
const payload = {
|
|
331
|
+
sub: params.tenant.tenantId,
|
|
332
|
+
tenantId: params.tenant.tenantId,
|
|
333
|
+
walletId: "primary",
|
|
334
|
+
walletAddress: params.tenant.walletAddressBase58,
|
|
335
|
+
clientId: params.clientId,
|
|
336
|
+
scope: params.scopes.join(" "),
|
|
337
|
+
sessionVersion: params.tenant.sessionVersion,
|
|
338
|
+
iss: this.publicOrigin,
|
|
339
|
+
aud: this.resourceUri,
|
|
340
|
+
iat,
|
|
341
|
+
exp,
|
|
342
|
+
jti: randomUUID(),
|
|
343
|
+
};
|
|
344
|
+
return jwt.sign(payload, this.jwtSecret, {
|
|
345
|
+
algorithm: "HS256",
|
|
346
|
+
noTimestamp: true,
|
|
347
|
+
});
|
|
348
|
+
}
|
|
349
|
+
issueRefreshToken(params) {
|
|
350
|
+
const refreshToken = randomBytes(48).toString("base64url");
|
|
351
|
+
const record = {
|
|
352
|
+
tokenHash: hashOpaqueToken(refreshToken),
|
|
353
|
+
tenantId: params.tenant.tenantId,
|
|
354
|
+
walletAddressBase58: params.tenant.walletAddressBase58,
|
|
355
|
+
walletId: "primary",
|
|
356
|
+
clientId: params.clientId,
|
|
357
|
+
scopes: params.scopes,
|
|
358
|
+
sessionVersion: params.tenant.sessionVersion,
|
|
359
|
+
createdAt: Date.now(),
|
|
360
|
+
expiresAt: Date.now() + this.oauthRefreshTokenTtlSeconds * 1000,
|
|
361
|
+
rotatedAt: null,
|
|
362
|
+
revokedAt: null,
|
|
363
|
+
replacedByTokenHash: null,
|
|
364
|
+
};
|
|
365
|
+
this.writeRefreshTokenRecord(record);
|
|
366
|
+
return refreshToken;
|
|
367
|
+
}
|
|
368
|
+
loadRefreshTokenRecord(refreshToken) {
|
|
369
|
+
const tokenHash = hashOpaqueToken(refreshToken);
|
|
370
|
+
const filePath = this.getRefreshTokenPath(tokenHash);
|
|
371
|
+
if (!existsSync(filePath)) {
|
|
372
|
+
throw new Error("Refresh token not found.");
|
|
373
|
+
}
|
|
374
|
+
return JSON.parse(readFileSync(filePath, "utf-8"));
|
|
375
|
+
}
|
|
376
|
+
writeRefreshTokenRecord(record) {
|
|
377
|
+
mkdirSync(this.getRefreshTokenDir(), { recursive: true });
|
|
378
|
+
writeJsonAtomic(this.getRefreshTokenPath(record.tokenHash), record);
|
|
379
|
+
}
|
|
380
|
+
getRefreshTokenDir() {
|
|
381
|
+
return join(this.dataDir, "oauth", "refresh-tokens");
|
|
382
|
+
}
|
|
383
|
+
getRefreshTokenPath(tokenHash) {
|
|
384
|
+
return join(this.getRefreshTokenDir(), `${tokenHash}.json`);
|
|
385
|
+
}
|
|
386
|
+
requireChallenge(challengeText) {
|
|
387
|
+
const nonce = extractNonce(challengeText);
|
|
388
|
+
const record = this.challenges.get(nonce);
|
|
389
|
+
if (!record) {
|
|
390
|
+
throw new Error("Challenge not found.");
|
|
391
|
+
}
|
|
392
|
+
return record;
|
|
393
|
+
}
|
|
394
|
+
async validateClientMetadata(clientId, redirectUri) {
|
|
395
|
+
const clientUrl = new URL(clientId);
|
|
396
|
+
if (!isAllowedClientMetadataUrl(clientUrl)) {
|
|
397
|
+
throw new Error("client_id must be an HTTPS URL, or localhost HTTP in development.");
|
|
398
|
+
}
|
|
399
|
+
const controller = new AbortController();
|
|
400
|
+
const timeoutId = setTimeout(() => controller.abort(), this.clientMetadataTimeoutMs);
|
|
401
|
+
let response;
|
|
402
|
+
try {
|
|
403
|
+
response = await fetch(clientId, {
|
|
404
|
+
headers: { Accept: "application/json" },
|
|
405
|
+
signal: controller.signal,
|
|
406
|
+
});
|
|
407
|
+
}
|
|
408
|
+
finally {
|
|
409
|
+
clearTimeout(timeoutId);
|
|
410
|
+
}
|
|
411
|
+
if (!response.ok) {
|
|
412
|
+
throw new Error(`Unable to load client metadata from client_id URL: ${response.status}`);
|
|
413
|
+
}
|
|
414
|
+
const metadata = (await response.json());
|
|
415
|
+
if (typeof metadata.client_id !== "string" || metadata.client_id !== clientId) {
|
|
416
|
+
throw new Error("Client metadata client_id mismatch.");
|
|
417
|
+
}
|
|
418
|
+
const redirectUris = Array.isArray(metadata.redirect_uris)
|
|
419
|
+
? metadata.redirect_uris.filter((value) => typeof value === "string")
|
|
420
|
+
: [];
|
|
421
|
+
if (!redirectUris.includes(redirectUri)) {
|
|
422
|
+
throw new Error("redirect_uri is not allowed by the client metadata document.");
|
|
423
|
+
}
|
|
424
|
+
const grantTypes = Array.isArray(metadata.grant_types)
|
|
425
|
+
? metadata.grant_types.filter((value) => typeof value === "string")
|
|
426
|
+
: [];
|
|
427
|
+
if (!grantTypes.includes("authorization_code")) {
|
|
428
|
+
throw new Error("Client metadata must allow authorization_code grant type.");
|
|
429
|
+
}
|
|
430
|
+
const responseTypes = Array.isArray(metadata.response_types)
|
|
431
|
+
? metadata.response_types.filter((value) => typeof value === "string")
|
|
432
|
+
: [];
|
|
433
|
+
if (!responseTypes.includes("code")) {
|
|
434
|
+
throw new Error("Client metadata must allow code response type.");
|
|
435
|
+
}
|
|
436
|
+
const tokenEndpointAuthMethod = metadata.token_endpoint_auth_method;
|
|
437
|
+
if (tokenEndpointAuthMethod !== undefined &&
|
|
438
|
+
tokenEndpointAuthMethod !== null &&
|
|
439
|
+
tokenEndpointAuthMethod !== "none") {
|
|
440
|
+
throw new Error("Only token_endpoint_auth_method 'none' is supported.");
|
|
441
|
+
}
|
|
442
|
+
}
|
|
443
|
+
}
|
|
444
|
+
function parseScopes(rawScope) {
|
|
445
|
+
if (!rawScope) {
|
|
446
|
+
return [DEFAULT_SCOPE];
|
|
447
|
+
}
|
|
448
|
+
const scopes = rawScope
|
|
449
|
+
.split(/\s+/)
|
|
450
|
+
.map((value) => value.trim())
|
|
451
|
+
.filter((value) => value.length > 0);
|
|
452
|
+
return scopes.length > 0 ? scopes : [DEFAULT_SCOPE];
|
|
453
|
+
}
|
|
454
|
+
function readRequiredString(body, key) {
|
|
455
|
+
const value = readOptionalString(body, key);
|
|
456
|
+
if (!value) {
|
|
457
|
+
throw new Error(`${key} is required.`);
|
|
458
|
+
}
|
|
459
|
+
return value;
|
|
460
|
+
}
|
|
461
|
+
function readOptionalString(body, key) {
|
|
462
|
+
const value = body[key];
|
|
463
|
+
if (typeof value !== "string") {
|
|
464
|
+
return undefined;
|
|
465
|
+
}
|
|
466
|
+
const trimmed = value.trim();
|
|
467
|
+
return trimmed.length > 0 ? trimmed : undefined;
|
|
468
|
+
}
|
|
469
|
+
function buildPkceChallenge(codeVerifier) {
|
|
470
|
+
return createHash("sha256").update(codeVerifier, "utf8").digest("base64url");
|
|
471
|
+
}
|
|
472
|
+
function buildRedirectUrl(redirectUri, code, state) {
|
|
473
|
+
const url = new URL(redirectUri);
|
|
474
|
+
url.searchParams.set("code", code);
|
|
475
|
+
url.searchParams.set("state", state);
|
|
476
|
+
return url.toString();
|
|
477
|
+
}
|
|
478
|
+
function hashOpaqueToken(token) {
|
|
479
|
+
return createHash("sha256").update(token, "utf8").digest("hex");
|
|
480
|
+
}
|
|
481
|
+
function extractNonce(challenge) {
|
|
482
|
+
const match = NONCE_REGEX.exec(challenge);
|
|
483
|
+
if (!match?.[1]) {
|
|
484
|
+
throw new Error("Challenge nonce not found.");
|
|
485
|
+
}
|
|
486
|
+
return match[1];
|
|
487
|
+
}
|
|
488
|
+
function writeJsonAtomic(path, data) {
|
|
489
|
+
const tempPath = `${path}.tmp`;
|
|
490
|
+
writeFileSync(tempPath, JSON.stringify(data, null, 2) + "\n", "utf-8");
|
|
491
|
+
renameSync(tempPath, path);
|
|
492
|
+
}
|
|
493
|
+
function trimTrailingSlash(value) {
|
|
494
|
+
return value.replace(/\/+$/, "");
|
|
495
|
+
}
|
|
496
|
+
function isAllowedClientMetadataUrl(url) {
|
|
497
|
+
if (url.protocol === "https:") {
|
|
498
|
+
return true;
|
|
499
|
+
}
|
|
500
|
+
if (process.env.NODE_ENV === "development" &&
|
|
501
|
+
url.protocol === "http:" &&
|
|
502
|
+
(url.hostname === "localhost" || url.hostname === "127.0.0.1")) {
|
|
503
|
+
return true;
|
|
504
|
+
}
|
|
505
|
+
return false;
|
|
506
|
+
}
|
|
507
|
+
//# sourceMappingURL=OAuthService.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"OAuthService.js","sourceRoot":"","sources":["../../src/oauth/OAuthService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,GAAG,MAAM,cAAc,CAAC;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAWzD,MAAM,aAAa,GAAG,KAAK,CAAC;AAC5B,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AAClD,MAAM,WAAW,GAAG,8BAA8B,CAAC;AAanD,MAAM,OAAO,YAAY;IACP,YAAY,CAAS;IACrB,WAAW,CAAS;IACpB,kBAAkB,GAAG,qBAAqB,CAAC;IAE1C,SAAS,CAAS;IAClB,OAAO,CAAS;IAChB,uBAAuB,CAAS;IAChC,uBAAuB,CAAS;IAChC,0BAA0B,CAAS;IACnC,2BAA2B,CAAS;IACpC,uBAAuB,CAAS;IAChC,qBAAqB,GAAG,IAAI,GAAG,EAAuC,CAAC;IACvE,UAAU,GAAG,IAAI,GAAG,EAA2B,CAAC;IAChD,kBAAkB,GAAG,IAAI,GAAG,EAAmC,CAAC;IAEjF,YAAY,OAA4B;QACtC,IAAI,CAAC,YAAY,GAAG,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC5D,IAAI,CAAC,WAAW,GAAG,GAAG,IAAI,CAAC,YAAY,MAAM,CAAC;QAC9C,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,GAAG,CAAC;QACtE,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,GAAG,CAAC;QACtE,IAAI,CAAC,0BAA0B,GAAG,OAAO,CAAC,0BAA0B,IAAI,IAAI,CAAC;QAC7E,IAAI,CAAC,2BAA2B,GAAG,OAAO,CAAC,2BAA2B,IAAI,SAAS,CAAC;QACpF,IAAI,CAAC,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,IAAI,MAAM,CAAC;IAC3E,CAAC;IAED,8BAA8B;QAC5B,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,YAAY;YACzB,sBAAsB,EAAE,GAAG,IAAI,CAAC,YAAY,kBAAkB;YAC9D,cAAc,EAAE,GAAG,IAAI,CAAC,YAAY,cAAc;YAClD,wBAAwB,EAAE,CAAC,MAAM,CAAC;YAClC,qBAAqB,EAAE,CAAC,oBAAoB,EAAE,eAAe,CAAC;YAC9D,gCAAgC,EAAE,CAAC,MAAM,CAAC;YAC1C,qCAAqC,EAAE,CAAC,MAAM,CAAC;SAChD,CAAC;IACJ,CAAC;IAED,4BAA4B;QAC1B,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,qBAAqB,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC;YAC1C,wBAAwB,EAAE,CAAC,QAAQ,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,MAUhC;QACC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QACzC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;QACnC,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC;QACnD,MAAM,mBAAmB,GAAG,MAAM,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;QAE/D,IAAI,YAAY,KAAK,MAAM,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,mBAAmB,KAAK,MAAM,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YAC/E,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QACrC,MAAM,OAAO,GAAgC;YAC3C,aAAa,EAAE,UAAU,EAAE;YAC3B,QAAQ;YACR,WAAW;YACX,KAAK;YACL,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC;YAChC,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,aAAa;YACb,mBAAmB,EAAE,MAAM;YAC3B,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,uBAAuB,GAAG,IAAI;SACrD,CAAC;QAEF,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,uBAAuB,CAAC,aAAqB;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,qBAAqB,CACnB,aAAqB,EACrB,MAAoB,EACpB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAEhB,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC;QAC3B,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,GAAG,GAAG,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAEvD,MAAM,SAAS,GAAG;YAChB,mCAAmC;YACnC,YAAY;YACZ,0CAA0C;YAC1C,YAAY,MAAM,CAAC,mBAAmB,EAAE;YACxC,WAAW,MAAM,CAAC,QAAQ,EAAE;YAC5B,cAAc,OAAO,CAAC,QAAQ,EAAE;YAChC,UAAU,KAAK,EAAE;YACjB,cAAc,WAAW,EAAE;YAC3B,eAAe,YAAY,EAAE;SAC9B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,MAAM,GAAoB;YAC9B,KAAK;YACL,aAAa;YACb,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,SAAS;YACT,QAAQ,EAAE,GAAG;YACb,SAAS;YACT,MAAM,EAAE,IAAI;SACb,CAAC;QAEF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAO3B;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnE,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACjF,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAErC,IAAI,SAAS,CAAC,aAAa,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YACrD,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;YAC3C,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,SAAS,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;YAC7C,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,SAAS,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,GAAG,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;YAC9B,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QAED,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;QAEvB,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,eAAe,CACtE,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB,CAAC;QACF,MAAM,mBAAmB,GAAG,MAAM,CAAC,aAAa,CAAC,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QACpF,IAAI,mBAAmB,CAAC,mBAAmB,KAAK,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO;YACL,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;YAC3E,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,MAI9B;QAUC,MAAM,OAAO,GAAG,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,yBAAyB,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAE5F,OAAO;YACL,UAAU,EAAE,gBAAgB,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC;YAC3E,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE;gBACN,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;gBACjC,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;gBACrC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;gBAC3C,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU;aACtC;SACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,IAA6B,EAC7B,aAA4B;QAQ5B,MAAM,SAAS,GAAG,kBAAkB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACzD,IAAI,SAAS,KAAK,oBAAoB,EAAE,CAAC;YACvC,OAAO,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,SAAS,KAAK,eAAe,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,oBAAoB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC7C,CAAC;IAED,iBAAiB,CAAC,KAAa;QAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE;YACvC,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,IAAI,CAAC,YAAY;YACzB,QAAQ,EAAE,IAAI,CAAC,WAAW;SAC3B,CAA4B,CAAC;IAChC,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,IAA6B,EAC7B,aAA4B;QAQ5B,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAC7D,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QACtD,IAAI,QAAQ,IAAI,iBAAiB,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACjE,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,IAAI,CAAC,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAEzD,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAClC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,MAAM,CAAC,WAAW,KAAK,WAAW,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,kBAAkB,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,aAAa,EAAE,CAAC;YAC9D,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAE3B,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,gBAAgB,CAAC;YACxC,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,KAAK;SACrB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;YAC1C,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,KAAK;SACrB,CAAC,CAAC;QAEH,OAAO;YACL,YAAY,EAAE,WAAW;YACzB,aAAa,EAAE,YAAY;YAC3B,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAI,CAAC,0BAA0B;YAC3C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;SAC9B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,IAA6B,EAC7B,aAA4B;QAQ5B,MAAM,YAAY,GAAG,kBAAkB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QAEzD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,MAAM,CAAC,cAAc,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC;YAC3C,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC;YAC7C,MAAM;YACN,QAAQ;YACR,MAAM,EAAE,MAAM,CAAC,MAAM;SACtB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,eAAe,CAAC,eAAe,CAAC,CAAC;QAEtD,MAAM,aAAa,GAAuB;YACxC,GAAG,MAAM;YACT,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,mBAAmB,EAAE,YAAY;SAClC,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;QAE5C,OAAO;YACL,YAAY,EAAE,cAAc;YAC5B,aAAa,EAAE,eAAe;YAC9B,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,IAAI,CAAC,0BAA0B;YAC3C,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC/B,CAAC;IACJ,CAAC;IAEO,sBAAsB,CAC5B,OAAoC,EACpC,MAAoB,EACpB,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAEhB,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACnD,MAAM,MAAM,GAA4B;YACtC,IAAI;YACJ,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,mBAAmB,EAAE,MAAM,CAAC,mBAAmB;YAC/C,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,aAAa,EAAE,OAAO,CAAC,aAAa;YACpC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;YAChD,QAAQ,EAAE,GAAG;YACb,SAAS,EAAE,GAAG,GAAG,IAAI,CAAC,uBAAuB,GAAG,IAAI;YACpD,MAAM,EAAE,IAAI;SACb,CAAC;QACF,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC1C,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,gBAAgB,CAAC,MAIxB;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,0BAA0B,CAAC;QAClD,MAAM,OAAO,GAA4B;YACvC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAC3B,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAChC,QAAQ,EAAE,SAAS;YACnB,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB;YAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC9B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc;YAC5C,GAAG,EAAE,IAAI,CAAC,YAAY;YACtB,GAAG,EAAE,IAAI,CAAC,WAAW;YACrB,GAAG;YACH,GAAG;YACH,GAAG,EAAE,UAAU,EAAE;SAClB,CAAC;QAEF,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE;YACvC,SAAS,EAAE,OAAO;YAClB,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;IACL,CAAC;IAEO,iBAAiB,CAAC,MAIzB;QACC,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAuB;YACjC,SAAS,EAAE,eAAe,CAAC,YAAY,CAAC;YACxC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAChC,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB;YACtD,QAAQ,EAAE,SAAS;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc;YAC5C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,2BAA2B,GAAG,IAAI;YAC/D,SAAS,EAAE,IAAI;YACf,SAAS,EAAE,IAAI;YACf,mBAAmB,EAAE,IAAI;SAC1B,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,YAAY,CAAC;IACtB,CAAC;IAEO,sBAAsB,CAAC,YAAoB;QACjD,MAAM,SAAS,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;QAChD,MAAM,QAAQ,GAAG,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC9C,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAuB,CAAC;IAC3E,CAAC;IAEO,uBAAuB,CAAC,MAA0B;QACxD,SAAS,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1D,eAAe,CAAC,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC;IACtE,CAAC;IAEO,kBAAkB;QACxB,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACvD,CAAC;IAEO,mBAAmB,CAAC,SAAiB;QAC3C,OAAO,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,GAAG,SAAS,OAAO,CAAC,CAAC;IAC9D,CAAC;IAEO,gBAAgB,CAAC,aAAqB;QAC5C,MAAM,KAAK,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,QAAgB,EAAE,WAAmB;QACxE,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpC,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACrF,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;gBAC/B,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;gBACvC,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,sDAAsD,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QACpE,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAC9E,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QAED,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;YACxD,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACtF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QAED,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YACpD,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACpF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;YAC1D,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC;YACvF,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,uBAAuB,GAAG,QAAQ,CAAC,0BAA0B,CAAC;QACpE,IACE,uBAAuB,KAAK,SAAS;YACrC,uBAAuB,KAAK,IAAI;YAChC,uBAAuB,KAAK,MAAM,EAClC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF;AAED,SAAS,WAAW,CAAC,QAA4B;IAC/C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,CAAC,aAAa,CAAC,CAAC;IACzB,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ;SACpB,KAAK,CAAC,KAAK,CAAC;SACZ,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA6B,EAAE,GAAW;IACpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,eAAe,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA6B,EAAE,GAAW;IACpE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAClD,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,WAAmB,EAAE,IAAY,EAAE,KAAa;IACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IACjC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACrC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAa;IAClD,MAAM,QAAQ,GAAG,GAAG,IAAI,MAAM,CAAC;IAC/B,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;IACvE,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,0BAA0B,CAAC,GAAQ;IAC1C,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,aAAa;QACtC,GAAG,CAAC,QAAQ,KAAK,OAAO;QACxB,CAAC,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,CAAC,EAC9D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
export declare function renderOAuthWalletPage(): string;
|