@neuroncloud/ido-client 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,17 @@
+export * from "@neuroncloud/ido-core";
+export { resolveClientOptions } from "./client-options.js";
+export type { AuthEndpoints, ClientOptions, ResolvedClientOptions, StorageSlots } from "./client-options.js";
+export * from "./adapters/index.js";
+export { CacheManager, CacheManager as StorageManager } from "./cache/cache.js";
+export type { Cache, CacheSlot, CacheSlots, StorageProvider } from "./cache/cache.js";
+export { MemoryCache, MemoryCache as MemoryStorage } from "./cache/memory-cache.js";
+export { ClientStateManager } from "./state-manager.js";
+export type { ClientState, ClientStateListener } from "./state-manager.js";
+export { createClient, createMemoryStorageSlots } from "./client.js";
+export type { ClientAdapters, IdoClient, RedirectMeta, SignInWithRedirectOptions, SignOutOptions, } from "./client.js";
+export { createTokenApi, TokenManager, tokensFromResponse } from "./token/token-manager.js";
+export type { TokenApi, TokenManagerEvent, TokenManagerListener, TokenRenewHandler, } from "./token/token-manager.js";
+export { createInteractionClient } from "./interaction/interaction-client.js";
+export type { InteractionClient } from "./interaction/interaction-client.js";
+export { InteractionTransactionManager } from "./interaction/transaction.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC3D,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE7G,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,YAAY,IAAI,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAChF,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AACrE,YAAY,EACV,cAAc,EACd,SAAS,EACT,YAAY,EACZ,yBAAyB,EACzB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC5F,YAAY,EACV,QAAQ,EACR,iBAAiB,EACjB,oBAAoB,EACpB,iBAAiB,GAClB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,YAAY,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAC7E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+export * from "@neuroncloud/ido-core";
+export { resolveClientOptions } from "./client-options.js";
+export * from "./adapters/index.js";
+export { CacheManager, CacheManager as StorageManager } from "./cache/cache.js";
+export { MemoryCache, MemoryCache as MemoryStorage } from "./cache/memory-cache.js";
+export { ClientStateManager } from "./state-manager.js";
+export { createClient, createMemoryStorageSlots } from "./client.js";
+export { createTokenApi, TokenManager, tokensFromResponse } from "./token/token-manager.js";
+export { createInteractionClient } from "./interaction/interaction-client.js";
+export { InteractionTransactionManager } from "./interaction/transaction.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,uBAAuB,CAAC;AAEtC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAG3D,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,YAAY,IAAI,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,WAAW,EAAE,WAAW,IAAI,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAEpF,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AASrE,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAQ5F,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAE9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAC"}

package/dist/interaction/interaction-client.d.ts

@@ -0,0 +1,26 @@
+import { type AuthenticateOptions, type InteractionResult, type ProceedOptions, type StartOptions } from "@neuroncloud/ido-core";
+import type { HttpClient } from "../adapters/http.js";
+import type { WebAuthnAdapter } from "../adapters/webauthn.js";
+import type { CacheManager } from "../cache/cache.js";
+import type { ResolvedClientOptions } from "../client-options.js";
+import type { ClientStateManager } from "../state-manager.js";
+import type { TokenManager } from "../token/token-manager.js";
+import type { InteractionTransactionManager } from "./transaction.js";
+export interface InteractionClient {
+    authenticate(options?: AuthenticateOptions): Promise<InteractionResult>;
+    start(options: StartOptions): Promise<InteractionResult>;
+    proceed(options?: ProceedOptions): Promise<InteractionResult>;
+    canProceed(): boolean;
+    cancel(): Promise<InteractionResult>;
+}
+export interface InteractionContext {
+    options: ResolvedClientOptions;
+    http: HttpClient;
+    cache: CacheManager;
+    transactions: InteractionTransactionManager;
+    tokenManager: TokenManager;
+    clientState: ClientStateManager;
+    webauthn?: WebAuthnAdapter;
+}
+export declare function createInteractionClient(context: InteractionContext): InteractionClient;
+//# sourceMappingURL=interaction-client.d.ts.map

package/dist/interaction/interaction-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interaction-client.d.ts","sourceRoot":"","sources":["../../src/interaction/interaction-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAuBL,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,YAAY,EAGlB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AAEtE,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxE,KAAK,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzD,OAAO,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9D,UAAU,IAAI,OAAO,CAAC;IACtB,MAAM,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,qBAAqB,CAAC;IAC/B,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,YAAY,CAAC;IACpB,YAAY,EAAE,6BAA6B,CAAC;IAC5C,YAAY,EAAE,YAAY,CAAC;IAC3B,WAAW,EAAE,kBAAkB,CAAC;IAChC,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,CAWtF"}

package/dist/interaction/interaction-client.js

@@ -0,0 +1,284 @@
+import { asRecord, canceled, challengeAuthenticatorStep, challengePasskeyStep, ChallengeTypes, exchangeToken, failure, GrantTypes, identifyStep, isMfaMethod, OAuthError, Parameters, parseMfaMethods, passwordStep, pending, readNumber, readString, readUnknown, RuntimeError, selectAuthenticatorStep, success, verifyIdToken, } from "@neuroncloud/ido-core";
+export function createInteractionClient(context) {
+    return {
+        authenticate: (options) => authenticate(context, options ?? {}),
+        start: (options) => start(context, options),
+        proceed: (options) => proceed(context, options ?? {}),
+        canProceed: () => context.transactions.load() !== undefined,
+        cancel: async () => {
+            context.transactions.clear();
+            return canceled();
+        },
+    };
+}
+async function authenticate(context, options) {
+    if (options.authenticators?.includes("passkey")) {
+        const transaction = await startPasskey(context, {
+            username: options.username,
+            challengeType: "passkey",
+        });
+        if (transaction.status !== "PENDING") {
+            return transaction;
+        }
+        return context.webauthn ? proceed(context, { step: "challenge-passkey" }) : transaction;
+    }
+    if (!options.username?.trim()) {
+        return pending(identifyStep());
+    }
+    const transaction = await identify(context, { username: options.username });
+    if (transaction.status !== "PENDING" || !options.password) {
+        return transaction;
+    }
+    return proceed(context, { step: "challenge-password", password: options.password });
+}
+async function start(context, options) {
+    return options.challengeType === "passkey"
+        ? startPasskey(context, options)
+        : identify(context, { username: options.username });
+}
+async function proceed(context, options) {
+    if (options.continuationToken) {
+        const current = context.transactions.load();
+        context.transactions.save({
+            continuationToken: options.continuationToken,
+            username: options.username ?? current?.username,
+            challengeType: current?.challengeType,
+            nextStep: options.step ?? current?.nextStep ?? "identify",
+            selectedMethod: options.authenticator ?? current?.selectedMethod,
+            availableMethods: current?.availableMethods,
+            publicKey: options.publicKey ?? current?.publicKey,
+            expiresAt: current?.expiresAt,
+            scopes: current?.scopes ?? context.options.scopes.join(" "),
+        });
+    }
+    const step = options.step ?? context.transactions.load()?.nextStep;
+    if (!step) {
+        throw new RuntimeError("There is no in-progress authentication transaction.", { code: "no_transaction" });
+    }
+    return runRemediation(context, step, options);
+}
+function runRemediation(context, step, options) {
+    switch (step) {
+        case "identify":
+            return identify(context, options);
+        case "challenge-password":
+            return challengePassword(context, options);
+        case "select-authenticator":
+            return selectAuthenticator(context, options);
+        case "challenge-authenticator":
+            return challengeAuthenticator(context, options);
+        case "challenge-passkey":
+            return challengePasskey(context, options);
+    }
+}
+async function identify(context, options) {
+    const username = options.username?.trim();
+    if (!username) {
+        return pending(identifyStep());
+    }
+    const response = await context.http.postForm(context.options.endpoints.initiate, {
+        [Parameters.ClientId]: context.options.clientId,
+        [Parameters.Username]: username,
+        [Parameters.ChallengeType]: ChallengeTypes.Password,
+    });
+    const body = asRecord(response.body);
+    const continuationToken = readString(body, "continuationToken", "continuation_token");
+    if (response.status >= 200 && response.status < 300 && continuationToken) {
+        const expiresIn = readNumber(body, "expiresIn", "expires_in");
+        context.transactions.save({
+            continuationToken,
+            username,
+            challengeType: ChallengeTypes.Password,
+            nextStep: "challenge-password",
+            scopes: context.options.scopes.join(" "),
+            expiresAt: expiresIn === undefined ? undefined : Date.now() + expiresIn * 1000,
+        });
+        return pending(passwordStep());
+    }
+    return failure(new OAuthError(readString(body, "error") ?? "invalid_request", {
+        errorDescription: readString(body, "error_description", "errorDescription") ?? "The initiate request failed.",
+    }), identifyStep());
+}
+async function challengePassword(context, options) {
+    const transaction = context.transactions.require();
+    if (!options.password) {
+        return pending(passwordStep());
+    }
+    if (!transaction.username) {
+        throw new RuntimeError("The password challenge is missing a username.", { code: "username_required" });
+    }
+    const result = await exchangeToken(context.http, context.options, {
+        grantType: GrantTypes.Password,
+        scopes: transaction.scopes,
+        extra: {
+            [Parameters.Username]: transaction.username,
+            [Parameters.Password]: options.password,
+            [Parameters.ContinuationToken]: transaction.continuationToken,
+        },
+    });
+    if (result.tokens) {
+        return completeWithTokens(context, result.tokens);
+    }
+    if (result.mfa) {
+        const availableMethods = parseMfaMethods(result.mfa.availableMethods);
+        const selectedMethod = isMfaMethod(result.mfa.method) ? result.mfa.method : undefined;
+        const nextStep = selectedMethod ? "challenge-authenticator" : "select-authenticator";
+        context.transactions.save({
+            ...transaction,
+            continuationToken: result.mfa.continuationToken,
+            selectedMethod,
+            availableMethods,
+            nextStep,
+        });
+        return pending(selectedMethod ? challengeAuthenticatorStep() : selectAuthenticatorStep(availableMethods));
+    }
+    return failure(result.error ?? new RuntimeError("The password challenge failed."));
+}
+async function selectAuthenticator(context, options) {
+    const transaction = context.transactions.require();
+    const method = options.authenticator;
+    if (method !== "authenticator" && method !== "recovery_code") {
+        return pending(selectAuthenticatorStep(transaction.availableMethods));
+    }
+    const response = await context.http.postForm(context.options.endpoints.challenge, {
+        [Parameters.ClientId]: context.options.clientId,
+        [Parameters.ContinuationToken]: options.continuationToken ?? transaction.continuationToken,
+        [Parameters.Method]: method,
+    });
+    if (response.status === 404) {
+        return failure(new RuntimeError("The MFA challenge endpoint is not available.", { code: "challenge_unavailable" }), selectAuthenticatorStep(transaction.availableMethods));
+    }
+    const body = asRecord(response.body);
+    const continuationToken = readString(body, "continuationToken", "continuation_token");
+    if (response.status >= 200 && response.status < 300 && continuationToken) {
+        const expiresIn = readNumber(body, "expiresIn", "expires_in");
+        context.transactions.save({
+            ...transaction,
+            continuationToken,
+            selectedMethod: method,
+            nextStep: "challenge-authenticator",
+            expiresAt: expiresIn === undefined ? transaction.expiresAt : Date.now() + expiresIn * 1000,
+        });
+        return pending(challengeAuthenticatorStep());
+    }
+    return failure(new OAuthError(readString(body, "error") ?? "invalid_request", {
+        errorDescription: readString(body, "error_description", "errorDescription") ?? "The authenticator could not be selected.",
+        continuationToken,
+    }), selectAuthenticatorStep(transaction.availableMethods));
+}
+async function challengeAuthenticator(context, options) {
+    const transaction = context.transactions.require();
+    const method = options.authenticator ?? transaction.selectedMethod;
+    if (!options.verificationCode || (method !== "authenticator" && method !== "recovery_code")) {
+        return pending(challengeAuthenticatorStep());
+    }
+    const result = await exchangeToken(context.http, context.options, {
+        grantType: GrantTypes.TwoFactor,
+        scopes: transaction.scopes,
+        extra: {
+            [Parameters.ContinuationToken]: options.continuationToken ?? transaction.continuationToken,
+            [Parameters.Method]: method,
+            [Parameters.Code]: options.verificationCode,
+        },
+    });
+    return result.tokens
+        ? completeWithTokens(context, result.tokens)
+        : failure(result.error ?? new RuntimeError("The authenticator challenge failed."));
+}
+async function startPasskey(context, options) {
+    const response = await context.http.postForm(context.options.endpoints.passkeyInitiate, {
+        [Parameters.ClientId]: context.options.clientId,
+        [Parameters.LoginHint]: options.username?.trim() ?? "",
+        [Parameters.Scope]: options.scopes ?? context.options.scopes.join(" "),
+    });
+    const body = asRecord(response.body);
+    const continuationToken = readString(body, "continuationToken", "continuation_token");
+    const publicKey = readUnknown(body, "publicKey", "public_key");
+    if (response.status >= 200 && response.status < 300 && continuationToken) {
+        const expiresIn = readNumber(body, "expiresIn", "expires_in");
+        context.transactions.save({
+            continuationToken,
+            username: options.username?.trim(),
+            challengeType: ChallengeTypes.Passkey,
+            nextStep: "challenge-passkey",
+            publicKey,
+            scopes: options.scopes ?? context.options.scopes.join(" "),
+            expiresAt: expiresIn === undefined ? undefined : Date.now() + expiresIn * 1000,
+        });
+        return pending(challengePasskeyStep(publicKey));
+    }
+    return failure(new OAuthError(readString(body, "error") ?? "invalid_request", {
+        errorDescription: readString(body, "error_description", "errorDescription") ?? "The passkey initiate request failed.",
+    }));
+}
+async function challengePasskey(context, options) {
+    const transaction = context.transactions.require();
+    const publicKey = options.publicKey ?? transaction.publicKey;
+    let credential = options.credential;
+    if (!credential) {
+        if (!publicKey) {
+            return failure(new RuntimeError("The passkey challenge is missing publicKey.", { code: "passkey_public_key_required" }));
+        }
+        if (!context.webauthn) {
+            return pending(challengePasskeyStep(publicKey));
+        }
+        try {
+            credential = await context.webauthn.get(publicKey);
+        }
+        catch (error) {
+            return failure(error instanceof RuntimeError
+                ? error
+                : new RuntimeError("The passkey challenge was cancelled.", { code: "webauthn_cancelled", cause: error }), challengePasskeyStep(publicKey));
+        }
+    }
+    const complete = await context.http.postForm(context.options.endpoints.passkeyComplete, {
+        [Parameters.ClientId]: context.options.clientId,
+        [Parameters.ContinuationToken]: options.continuationToken ?? transaction.continuationToken,
+        [Parameters.Credential]: credential,
+    });
+    const completeBody = asRecord(complete.body);
+    const continuationToken = readString(completeBody, "continuationToken", "continuation_token");
+    if (complete.status < 200 || complete.status >= 300 || !continuationToken) {
+        return failure(new OAuthError(readString(completeBody, "error") ?? "invalid_grant", {
+            errorDescription: readString(completeBody, "error_description", "errorDescription") ??
+                "The passkey assertion could not be verified.",
+        }), challengePasskeyStep(publicKey));
+    }
+    const expiresIn = readNumber(completeBody, "expiresIn", "expires_in");
+    context.transactions.save({
+        ...transaction,
+        continuationToken,
+        publicKey: undefined,
+        nextStep: "challenge-passkey",
+        expiresAt: expiresIn === undefined ? transaction.expiresAt : Date.now() + expiresIn * 1000,
+    });
+    const result = await exchangeToken(context.http, context.options, {
+        grantType: GrantTypes.Passkey,
+        scopes: transaction.scopes,
+        extra: { [Parameters.ContinuationToken]: continuationToken },
+    });
+    return result.tokens
+        ? completeWithTokens(context, result.tokens)
+        : failure(result.error ?? new RuntimeError("The passkey token request failed."));
+}
+async function completeWithTokens(context, tokens) {
+    const scopes = context.transactions.load()?.scopes ?? context.options.scopes.join(" ");
+    const idToken = tokens.idToken?.token;
+    if (idToken) {
+        await verifyIdToken(idToken, {
+            issuer: context.options.issuer,
+            clientId: context.options.clientId,
+            http: context.http,
+            jwksUri: context.options.endpoints.jwks,
+            cache: context.cache.get("cache"),
+        });
+    }
+    else if (scopes.split(/\s+/).includes("openid")) {
+        throw new RuntimeError("The token response did not include an ID token.", { code: "missing_id_token" });
+    }
+    context.transactions.clear();
+    context.tokenManager.setTokens(tokens);
+    context.clientState.updateClientState();
+    return success(tokens);
+}
+//# sourceMappingURL=interaction-client.js.map

package/dist/interaction/interaction-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interaction-client.js","sourceRoot":"","sources":["../../src/interaction/interaction-client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,QAAQ,EACR,QAAQ,EACR,0BAA0B,EAC1B,oBAAoB,EACpB,cAAc,EACd,aAAa,EACb,OAAO,EACP,UAAU,EACV,YAAY,EACZ,WAAW,EACX,UAAU,EACV,UAAU,EACV,eAAe,EACf,YAAY,EACZ,OAAO,EACP,UAAU,EACV,UAAU,EACV,WAAW,EACX,YAAY,EACZ,uBAAuB,EACvB,OAAO,EACP,aAAa,GAOd,MAAM,uBAAuB,CAAC;AA2B/B,MAAM,UAAU,uBAAuB,CAAC,OAA2B;IACjE,OAAO;QACL,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;QAC/D,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;QAC3C,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,IAAI,EAAE,CAAC;QACrD,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,SAAS;QAC3D,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;YAC7B,OAAO,QAAQ,EAAE,CAAC;QACpB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA2B,EAAE,OAA4B;IACnF,IAAI,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,MAAM,WAAW,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE;YAC9C,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,aAAa,EAAE,SAAS;SACzB,CAAC,CAAC;QAEH,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACrC,OAAO,WAAW,CAAC;QACrB,CAAC;QAED,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC;IAC1F,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;QAC9B,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAE5E,IAAI,WAAW,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC1D,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AACtF,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,OAA2B,EAAE,OAAqB;IACrE,OAAO,OAAO,CAAC,aAAa,KAAK,SAAS;QACxC,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC;QAChC,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,OAA2B,EAAE,OAAuB;IACzE,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;QAC5C,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;YACxB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;YAC5C,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,OAAO,EAAE,QAAQ;YAC/C,aAAa,EAAE,OAAO,EAAE,aAAa;YACrC,QAAQ,EAAE,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,QAAQ,IAAI,UAAU;YACzD,cAAc,EAAE,OAAO,CAAC,aAAa,IAAI,OAAO,EAAE,cAAc;YAChE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB;YAC3C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,OAAO,EAAE,SAAS;YAClD,SAAS,EAAE,OAAO,EAAE,SAAS;YAC7B,MAAM,EAAE,OAAO,EAAE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC;IAEnE,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,YAAY,CAAC,qDAAqD,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC5G,CAAC;IAED,OAAO,cAAc,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,cAAc,CACrB,OAA2B,EAC3B,IAAc,EACd,OAAuB;IAEvB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACpC,KAAK,oBAAoB;YACvB,OAAO,iBAAiB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,KAAK,sBAAsB;YACzB,OAAO,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC/C,KAAK,yBAAyB;YAC5B,OAAO,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAClD,KAAK,mBAAmB;YACtB,OAAO,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAA2B,EAAE,OAAuB;IAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAE1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE;QAC/E,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;QAC/C,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,QAAQ;QAC/B,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,cAAc,CAAC,QAAQ;KACpD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;IAEtF,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAC9D,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;YACxB,iBAAiB;YACjB,QAAQ;YACR,aAAa,EAAE,cAAc,CAAC,QAAQ;YACtC,QAAQ,EAAE,oBAAoB;YAC9B,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YACxC,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI;SAC/E,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,OAAO,CACZ,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,iBAAiB,EAAE;QAC7D,gBAAgB,EAAE,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,IAAI,8BAA8B;KAC9G,CAAC,EACF,YAAY,EAAE,CACf,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,OAA2B,EAAE,OAAuB;IACnF,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;IAEnD,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC1B,MAAM,IAAI,YAAY,CAAC,+CAA+C,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACzG,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;QAChE,SAAS,EAAE,UAAU,CAAC,QAAQ;QAC9B,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,KAAK,EAAE;YACL,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,QAAQ;YAC3C,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,QAAQ;YACvC,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,iBAAiB;SAC9D;KACF,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QACf,MAAM,gBAAgB,GAAG,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtE,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACtF,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,sBAAsB,CAAC;QACrF,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;YACxB,GAAG,WAAW;YACd,iBAAiB,EAAE,MAAM,CAAC,GAAG,CAAC,iBAAiB;YAC/C,cAAc;YACd,gBAAgB;YAChB,QAAQ;SACT,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,0BAA0B,EAAE,CAAC,CAAC,CAAC,uBAAuB,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,gCAAgC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,OAA2B,EAAE,OAAuB;IACrF,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAErC,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,eAAe,EAAE,CAAC;QAC7D,OAAO,OAAO,CAAC,uBAAuB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,SAAS,EAAE;QAChF,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;QAC/C,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,iBAAiB,IAAI,WAAW,CAAC,iBAAiB;QAC1F,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM;KAC5B,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,OAAO,OAAO,CACZ,IAAI,YAAY,CAAC,8CAA8C,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,CAAC,EACnG,uBAAuB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CACtD,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;IAEtF,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAC9D,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;YACxB,GAAG,WAAW;YACd,iBAAiB;YACjB,cAAc,EAAE,MAAM;YACtB,QAAQ,EAAE,yBAAyB;YACnC,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI;SAC3F,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,OAAO,CACZ,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,iBAAiB,EAAE;QAC7D,gBAAgB,EACd,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,IAAI,0CAA0C;QACzG,iBAAiB;KAClB,CAAC,EACF,uBAAuB,CAAC,WAAW,CAAC,gBAAgB,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,sBAAsB,CAAC,OAA2B,EAAE,OAAuB;IACxF,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;IACnD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC,cAAc,CAAC;IAEnE,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,CAAC,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,eAAe,CAAC,EAAE,CAAC;QAC5F,OAAO,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;QAChE,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,KAAK,EAAE;YACL,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,iBAAiB,IAAI,WAAW,CAAC,iBAAiB;YAC1F,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM;YAC3B,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,gBAAgB;SAC5C;KACF,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM;QAClB,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,qCAAqC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,OAA2B,EAAE,OAAqB;IAC5E,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,EAAE;QACtF,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;QAC/C,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE;QACtD,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;KACvE,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;IACtF,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IAE/D,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzE,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAC9D,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;YACxB,iBAAiB;YACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE;YAClC,aAAa,EAAE,cAAc,CAAC,OAAO;YACrC,QAAQ,EAAE,mBAAmB;YAC7B,SAAS;YACT,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAC1D,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI;SAC/E,CAAC,CAAC;QACH,OAAO,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,OAAO,CACZ,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,iBAAiB,EAAE;QAC7D,gBAAgB,EACd,UAAU,CAAC,IAAI,EAAE,mBAAmB,EAAE,kBAAkB,CAAC,IAAI,sCAAsC;KACtG,CAAC,CACH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,OAA2B,EAAE,OAAuB;IAClF,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;IACnD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS,CAAC;IAC7D,IAAI,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAEpC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,OAAO,CAAC,IAAI,YAAY,CAAC,6CAA6C,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,CAAC,CAAC,CAAC;QAC3H,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,OAAO,OAAO,CAAC,oBAAoB,CAAC,SAAS,CAAC,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,OAAO,CACZ,KAAK,YAAY,YAAY;gBAC3B,CAAC,CAAC,KAAK;gBACP,CAAC,CAAC,IAAI,YAAY,CAAC,sCAAsC,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAC1G,oBAAoB,CAAC,SAAS,CAAC,CAChC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,eAAe,EAAE;QACtF,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;QAC/C,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC,iBAAiB,IAAI,WAAW,CAAC,iBAAiB;QAC1F,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,UAAU;KACpC,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7C,MAAM,iBAAiB,GAAG,UAAU,CAAC,YAAY,EAAE,mBAAmB,EAAE,oBAAoB,CAAC,CAAC;IAE9F,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC1E,OAAO,OAAO,CACZ,IAAI,UAAU,CAAC,UAAU,CAAC,YAAY,EAAE,OAAO,CAAC,IAAI,eAAe,EAAE;YACnE,gBAAgB,EACd,UAAU,CAAC,YAAY,EAAE,mBAAmB,EAAE,kBAAkB,CAAC;gBACjE,8CAA8C;SACjD,CAAC,EACF,oBAAoB,CAAC,SAAS,CAAC,CAChC,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,UAAU,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;IACtE,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;QACxB,GAAG,WAAW;QACd,iBAAiB;QACjB,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,mBAAmB;QAC7B,SAAS,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI;KAC3F,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;QAChE,SAAS,EAAE,UAAU,CAAC,OAAO;QAC7B,MAAM,EAAE,WAAW,CAAC,MAAM;QAC1B,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE;KAC7D,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,MAAM;QAClB,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QAC5C,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,YAAY,CAAC,mCAAmC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,OAA2B,EAAE,MAAc;IAC3E,MAAM,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC;IAEtC,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,aAAa,CAAC,OAAO,EAAE;YAC3B,MAAM,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM;YAC9B,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,QAAQ;YAClC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI;YACvC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,YAAY,CAAC,iDAAiD,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC1G,CAAC;IAED,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAC7B,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC;IACxC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;AACzB,CAAC"}

package/dist/interaction/transaction.d.ts

@@ -0,0 +1,11 @@
+import { type TransactionMeta } from "@neuroncloud/ido-core";
+import type { CacheManager } from "../cache/cache.js";
+export declare class InteractionTransactionManager {
+    private readonly cache;
+    constructor(cache: CacheManager);
+    load(): TransactionMeta | undefined;
+    save(transaction: TransactionMeta): void;
+    clear(): void;
+    require(): TransactionMeta;
+}
+//# sourceMappingURL=transaction.d.ts.map

package/dist/interaction/transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.d.ts","sourceRoot":"","sources":["../../src/interaction/transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAA6B,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEtD,qBAAa,6BAA6B;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,YAAY;IAEhD,IAAI,IAAI,eAAe,GAAG,SAAS;IAsBnC,IAAI,CAAC,WAAW,EAAE,eAAe,GAAG,IAAI;IAIxC,KAAK,IAAI,IAAI;IAIb,OAAO,IAAI,eAAe;CAS3B"}

package/dist/interaction/transaction.js

@@ -0,0 +1,39 @@
+import { RuntimeError, StorageKeys } from "@neuroncloud/ido-core";
+export class InteractionTransactionManager {
+    cache;
+    constructor(cache) {
+        this.cache = cache;
+    }
+    load() {
+        const raw = this.cache.get("transaction").getItem(StorageKeys.Transaction);
+        if (!raw) {
+            return undefined;
+        }
+        try {
+            const transaction = JSON.parse(raw);
+            if (transaction.expiresAt !== undefined && transaction.expiresAt <= Date.now()) {
+                this.clear();
+                return undefined;
+            }
+            return transaction;
+        }
+        catch {
+            this.clear();
+            return undefined;
+        }
+    }
+    save(transaction) {
+        this.cache.get("transaction").setItem(StorageKeys.Transaction, JSON.stringify(transaction));
+    }
+    clear() {
+        this.cache.get("transaction").removeItem(StorageKeys.Transaction);
+    }
+    require() {
+        const transaction = this.load();
+        if (!transaction) {
+            throw new RuntimeError("There is no in-progress authentication transaction.", { code: "no_transaction" });
+        }
+        return transaction;
+    }
+}
+//# sourceMappingURL=transaction.js.map

package/dist/interaction/transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction.js","sourceRoot":"","sources":["../../src/interaction/transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAwB,MAAM,uBAAuB,CAAC;AAGxF,MAAM,OAAO,6BAA6B;IACX;IAA7B,YAA6B,KAAmB;QAAnB,UAAK,GAAL,KAAK,CAAc;IAAG,CAAC;IAEpD,IAAI;QACF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAE3E,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;YAEvD,IAAI,WAAW,CAAC,SAAS,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC/E,IAAI,CAAC,KAAK,EAAE,CAAC;gBACb,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,OAAO,WAAW,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IAED,IAAI,CAAC,WAA4B;QAC/B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;IACpE,CAAC;IAED,OAAO;QACL,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAEhC,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,YAAY,CAAC,qDAAqD,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QAC5G,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF"}

package/dist/state-manager.d.ts

@@ -0,0 +1,20 @@
+import type { Tokens } from "@neuroncloud/ido-core";
+import type { TokenManager } from "./token/token-manager.js";
+export interface ClientState {
+    isAuthenticated: boolean;
+    accessToken?: string;
+    idToken?: string;
+    tokens: Tokens;
+}
+export type ClientStateListener = (state: ClientState) => void;
+export declare class ClientStateManager {
+    private readonly tokenManager;
+    private state;
+    private readonly listeners;
+    constructor(tokenManager: TokenManager);
+    getClientState(): ClientState;
+    subscribe(listener: ClientStateListener): () => void;
+    unsubscribe(listener?: ClientStateListener): void;
+    updateClientState(): ClientState;
+}
+//# sourceMappingURL=state-manager.d.ts.map

package/dist/state-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-manager.d.ts","sourceRoot":"","sources":["../src/state-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAE7D,MAAM,WAAW,WAAW;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,mBAAmB,GAAG,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;AAE/D,qBAAa,kBAAkB;IAIjB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAHzC,OAAO,CAAC,KAAK,CAAuD;IACpE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAkC;gBAE/B,YAAY,EAAE,YAAY;IAEvD,cAAc,IAAI,WAAW;IAI7B,SAAS,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,IAAI;IAOpD,WAAW,CAAC,QAAQ,CAAC,EAAE,mBAAmB,GAAG,IAAI;IASjD,iBAAiB,IAAI,WAAW;CAkBjC"}

package/dist/state-manager.js

@@ -0,0 +1,40 @@
+export class ClientStateManager {
+    tokenManager;
+    state = { isAuthenticated: false, tokens: {} };
+    listeners = new Set();
+    constructor(tokenManager) {
+        this.tokenManager = tokenManager;
+    }
+    getClientState() {
+        return this.state;
+    }
+    subscribe(listener) {
+        this.listeners.add(listener);
+        return () => {
+            this.listeners.delete(listener);
+        };
+    }
+    unsubscribe(listener) {
+        if (listener) {
+            this.listeners.delete(listener);
+            return;
+        }
+        this.listeners.clear();
+    }
+    updateClientState() {
+        const tokens = this.tokenManager.getTokens();
+        const accessToken = this.tokenManager.getSync("accessToken")?.token;
+        const idToken = this.tokenManager.getSync("idToken")?.token;
+        this.state = {
+            isAuthenticated: Boolean(accessToken),
+            accessToken,
+            idToken,
+            tokens,
+        };
+        for (const listener of this.listeners) {
+            listener(this.state);
+        }
+        return this.state;
+    }
+}
+//# sourceMappingURL=state-manager.js.map

package/dist/state-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-manager.js","sourceRoot":"","sources":["../src/state-manager.ts"],"names":[],"mappings":"AAYA,MAAM,OAAO,kBAAkB;IAIA;IAHrB,KAAK,GAAgB,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnD,SAAS,GAAG,IAAI,GAAG,EAAuB,CAAC;IAE5D,YAA6B,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAE3D,cAAc;QACZ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,SAAS,CAAC,QAA6B;QACrC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC,CAAC;IACJ,CAAC;IAED,WAAW,CAAC,QAA8B;QACxC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED,iBAAiB;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,KAAK,CAAC;QACpE,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC;QAE5D,IAAI,CAAC,KAAK,GAAG;YACX,eAAe,EAAE,OAAO,CAAC,WAAW,CAAC;YACrC,WAAW;YACX,OAAO;YACP,MAAM;SACP,CAAC;QAEF,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;CACF"}

package/dist/token/token-manager.d.ts

@@ -0,0 +1,51 @@
+import { type IntrospectionResult, type Token, type TokenKey, type Tokens } from "@neuroncloud/ido-core";
+import type { CacheManager } from "../cache/cache.js";
+import type { ResolvedClientOptions } from "../client-options.js";
+import type { HttpClient } from "../adapters/http.js";
+import type { ClientStateManager } from "../state-manager.js";
+export type TokenManagerEvent = "added" | "expired" | "renewed" | "removed" | "error" | "changed";
+export type TokenManagerListener = (event: TokenManagerEvent, ...args: unknown[]) => void;
+export type TokenRenewHandler = () => Promise<Tokens>;
+export declare class TokenManager {
+    private readonly storage;
+    private readonly options;
+    private tokens;
+    private renewHandler?;
+    private renewing?;
+    private unwatchStorage?;
+    private readonly timers;
+    private readonly listeners;
+    constructor(storage: CacheManager, options: ResolvedClientOptions);
+    bindRenew(handler: TokenRenewHandler): void;
+    start(): void;
+    stop(): void;
+    getTokens(): Tokens;
+    setTokens(tokens: Tokens): void;
+    getSync(key: TokenKey): Token | undefined;
+    get(key: TokenKey): Promise<Token | undefined>;
+    hasExpired(token: Token): boolean;
+    renew(key?: TokenKey): Promise<Token | undefined>;
+    remove(key: TokenKey): void;
+    clear(): void;
+    on(event: TokenManagerEvent, listener: TokenManagerListener): void;
+    off(event: TokenManagerEvent, listener?: TokenManagerListener): void;
+    private emit;
+    private pruneExpired;
+    private scheduleAll;
+    private schedule;
+    private onTimer;
+    private clearTimer;
+    private clearTimers;
+    private persist;
+    private loadFromStorage;
+    private watchStorage;
+}
+export declare function tokensFromResponse(body: unknown, issuedAt?: number): Tokens;
+export interface TokenApi {
+    refresh(): Promise<Tokens>;
+    revoke(token?: string, hint?: "access_token" | "refresh_token"): Promise<void>;
+    introspect(token?: string, hint?: "access_token" | "refresh_token"): Promise<IntrospectionResult>;
+    getUserInfo(): Promise<Record<string, unknown>>;
+}
+export declare function createTokenApi(http: HttpClient, options: ResolvedClientOptions, tokenManager: TokenManager, clientState: ClientStateManager, cache: CacheManager): TokenApi;
+//# sourceMappingURL=token-manager.d.ts.map

package/dist/token/token-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-manager.d.ts","sourceRoot":"","sources":["../../src/token/token-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAYL,KAAK,mBAAmB,EACxB,KAAK,KAAK,EACV,KAAK,QAAQ,EACb,KAAK,MAAM,EACZ,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAE9D,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;AAElG,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAC;AAE1F,MAAM,MAAM,iBAAiB,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;AAEtD,qBAAa,YAAY;IASrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAT1B,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,YAAY,CAAC,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,CAAkB;IACnC,OAAO,CAAC,cAAc,CAAC,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsD;IAC7E,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2D;gBAGlE,OAAO,EAAE,YAAY,EACrB,OAAO,EAAE,qBAAqB;IAGjD,SAAS,CAAC,OAAO,EAAE,iBAAiB,GAAG,IAAI;IAI3C,KAAK,IAAI,IAAI;IAOb,IAAI,IAAI,IAAI;IAMZ,SAAS,IAAI,MAAM;IAInB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAc/B,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,KAAK,GAAG,SAAS;IAUnC,GAAG,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;IA6BpD,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO;IAQ3B,KAAK,CAAC,GAAG,GAAE,QAAwB,GAAG,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC;IA0BtE,MAAM,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI;IAW3B,KAAK,IAAI,IAAI;IAMb,EAAE,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,oBAAoB,GAAG,IAAI;IAMlE,GAAG,CAAC,KAAK,EAAE,iBAAiB,EAAE,QAAQ,CAAC,EAAE,oBAAoB,GAAG,IAAI;IASpE,OAAO,CAAC,IAAI;IAMZ,OAAO,CAAC,YAAY;IAgBpB,OAAO,CAAC,WAAW;IAWnB,OAAO,CAAC,QAAQ;YAgBF,OAAO;IAuBrB,OAAO,CAAC,UAAU;IASlB,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,OAAO;IAIf,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,YAAY;CAarB;AAID,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,SAAgC,GAAG,MAAM,CAmBlG;AAeD,MAAM,WAAW,QAAQ;IACvB,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/E,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,cAAc,GAAG,eAAe,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClG,WAAW,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACjD;AAED,wBAAgB,cAAc,CAC5B,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE,qBAAqB,EAC9B,YAAY,EAAE,YAAY,EAC1B,WAAW,EAAE,kBAAkB,EAC/B,KAAK,EAAE,YAAY,GAClB,QAAQ,CA4DV"}