@oneblink/apps-react 11.0.0-beta.10 → 11.0.0-beta.12

package/dist/apps/job-service.d.ts

@@ -1,5 +1,39 @@
 import { ensurePrefillFormDataExists } from './services/job-prefill';
 import { SubmissionTypes } from '@oneblink/types';
+export type JobListenerEvent = {
+    action: 'SUBMITTED';
+    jobId: string;
+};
+export type JobsListener = (event: JobListenerEvent) => unknown;
+/**
+ * Register a listener function that will be called when jobs state should be
+ * updated after a submission.
+ *
+ * #### Example
+ *
+ * ```js
+ * const listener = ({ action, jobId }) => {
+ *   if (action === 'SUBMITTED') {
+ *     // remove job from local state...
+ *   }
+ * }
+ * const deregister = jobService.registerJobsListener(listener)
+ *
+ * // When no longer needed, remember to deregister the listener
+ * deregister()
+ * ```
+ *
+ * @param listener
+ * @returns
+ */
+export declare function registerJobsListener(listener: JobsListener): () => void;
+/**
+ * Notify listeners that a job has been submitted and should no longer appear in
+ * the jobs list.
+ *
+ * @param jobId
+ */
+export declare function notifyJobSubmitted(jobId: string): void;
 /**
  * Get Jobs for the current user. Jobs that are in the pending queue will be
  * filtered out and Jobs with drafts will include the `draft` property.

package/dist/apps/job-service.js

@@ -8,6 +8,51 @@ import { isLoggedIn } from './auth-service';
 import { getDrafts } from './draft-service';
 import tenants from './tenants';
 import Sentry from './Sentry';
+const jobsListeners = [];
+/**
+ * Register a listener function that will be called when jobs state should be
+ * updated after a submission.
+ *
+ * #### Example
+ *
+ * ```js
+ * const listener = ({ action, jobId }) => {
+ *   if (action === 'SUBMITTED') {
+ *     // remove job from local state...
+ *   }
+ * }
+ * const deregister = jobService.registerJobsListener(listener)
+ *
+ * // When no longer needed, remember to deregister the listener
+ * deregister()
+ * ```
+ *
+ * @param listener
+ * @returns
+ */
+export function registerJobsListener(listener) {
+    jobsListeners.push(listener);
+    return () => {
+        const index = jobsListeners.indexOf(listener);
+        if (index !== -1) {
+            jobsListeners.splice(index, 1);
+        }
+    };
+}
+function executeJobsListeners(event) {
+    for (const jobsListener of jobsListeners) {
+        jobsListener(event);
+    }
+}
+/**
+ * Notify listeners that a job has been submitted and should no longer appear in
+ * the jobs list.
+ *
+ * @param jobId
+ */
+export function notifyJobSubmitted(jobId) {
+    executeJobsListeners({ action: 'SUBMITTED', jobId });
+}
 async function removePendingSubmissions(jobList) {
     // Get list of pending submissions, remove jobs that are in the pending queue
     return getPendingQueueSubmissions().then((submissions) => {

package/dist/apps/job-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"job-service.js","sourceRoot":"","sources":["../../src/apps/job-service.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAErC,OAAO,iBAAiB,MAAM,qCAAqC,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,OAAO,MAAM,WAAW,CAAA;AAE/B,OAAO,MAAM,MAAM,UAAU,CAAA;AAE7B,KAAK,UAAU,wBAAwB,CACrC,OAAsC;IAEtC,6EAA6E;IAC7E,OAAO,0BAA0B,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;QACvD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC,CAC1D,CAAA;QACD,OAAO,eAAe,CAAA;IACxB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,OAAsC,EACtC,WAAyB;IAEzB,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QAC5D,OAAO;YACL,GAAG,GAAG;YACN,KAAK;SACN,CAAA;IACH,CAAC,CAAC,CACH,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,UAAkB,EAClB,SAAiB,EACjB,WAAyB;IAEzB,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,OAAO,aAAa,CAClB,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,eAAe,UAAU,OAAO,EAC5D;QACE,WAAW,EAAE,KAAK;KACnB,CACF;SACE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACnD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;SAC5C,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAChB,QAAQ,CACN,OAAO,EACP,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EACxD,CAAC,KAAK,EAAE,KAAK,CAAC,CACf,CACF;SACA,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAC9B,OAAO,CAAC,IAAI,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAA;QAE1D,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,iBAAiB,CACzB,4HAA4H,EAC5H;gBACE,aAAa,EAAE,KAAK;gBACpB,SAAS,EAAE,IAAI;aAChB,CACF,CAAA;QACH,CAAC;QAED,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,GAAG,CAAC,CAAC,CAAC;gBACT,MAAM,IAAI,iBAAiB,CACzB,kCAAkC,SAAS,+BAA+B,EAC1E;oBACE,aAAa,EAAE,KAAK;oBACpB,aAAa,EAAE,IAAI;oBACnB,cAAc,EAAE,KAAK,CAAC,MAAM;iBAC7B,CACF,CAAA;YACH,CAAC;YACD,KAAK,GAAG,CAAC,CAAC,CAAC;gBACT,MAAM,IAAI,iBAAiB,CACzB,uCAAuC,SAAS,0EAA0E,EAC1H;oBACE,aAAa,EAAE,KAAK;oBACpB,qBAAqB,EAAE,IAAI;oBAC3B,cAAc,EAAE,KAAK,CAAC,MAAM;iBAC7B,CACF,CAAA;YACH,CAAC;YACD,KAAK,GAAG,CAAC;YACT,KAAK,GAAG,CAAC,CAAC,CAAC;gBACT,MAAM,IAAI,iBAAiB,CACzB,oKAAoK,EACpK;oBACE,aAAa,EAAE,KAAK;oBACpB,KAAK,EAAE,qBAAqB;oBAC5B,cAAc,EAAE,KAAK,CAAC,MAAM;iBAC7B,CACF,CAAA;YACH,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAI,iBAAiB,CACzB,gFAAgF,EAChF;oBACE,aAAa,EAAE,KAAK;oBACpB,cAAc,EAAE,KAAK,CAAC,MAAM;iBAC7B,CACF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACN,CAAC;AAED,OAAO,EAAE,2BAA2B,EAAE,CAAA","sourcesContent":["import _orderBy from 'lodash.orderby'\n\nimport OneBlinkAppsError from './services/errors/oneBlinkAppsError'\nimport { searchRequest } from './services/fetch'\nimport { getPendingQueueSubmissions } from './services/pending-queue'\nimport { ensurePrefillFormDataExists } from './services/job-prefill'\nimport { isOffline } from './offline-service'\nimport { isLoggedIn } from './auth-service'\nimport { getDrafts } from './draft-service'\nimport tenants from './tenants'\nimport { SubmissionTypes } from '@oneblink/types'\nimport Sentry from './Sentry'\n\nasync function removePendingSubmissions(\n  jobList: SubmissionTypes.FormsAppJob[],\n) {\n  // Get list of pending submissions, remove jobs that are in the pending queue\n  return getPendingQueueSubmissions().then((submissions) => {\n    const unprocessedJobs = jobList.filter(\n      (job) => !submissions.some((sub) => sub.jobId === job.id),\n    )\n    return unprocessedJobs\n  })\n}\n\nasync function tagDrafts(\n  jobList: SubmissionTypes.FormsAppJob[],\n  abortSignal?: AbortSignal,\n) {\n  return getDrafts(abortSignal).then((drafts) =>\n    jobList.map((job) => {\n      const draft = drafts.find((draft) => draft.jobId === job.id)\n      return {\n        ...job,\n        draft,\n      }\n    }),\n  )\n}\n\n/**\n * Get Jobs for the current user. Jobs that are in the pending queue will be\n * filtered out and Jobs with drafts will include the `draft` property.\n *\n * #### Example\n *\n * ```js\n * const formsAppId = 1\n * const label = 'Applications'\n * const jobs = await jobService.getJobs(formsAppId, label)\n * ```\n *\n * @param formsAppId\n * @param jobsLabel\n * @param abortSignal - Signal to abort the requests\n * @returns\n */\nexport async function getJobs(\n  formsAppId: number,\n  jobsLabel: string,\n  abortSignal?: AbortSignal,\n): Promise<SubmissionTypes.FormsAppJob[]> {\n  if (!isLoggedIn()) {\n    return []\n  }\n\n  return searchRequest<{ jobs: Array<SubmissionTypes.FormsAppJob> }>(\n    `${tenants.current.apiOrigin}/forms-apps/${formsAppId}/jobs`,\n    {\n      isSubmitted: false,\n    },\n  )\n    .then((data) => removePendingSubmissions(data.jobs))\n    .then((jobs) => tagDrafts(jobs, abortSignal))\n    .then((jobList) =>\n      _orderBy(\n        jobList,\n        ['details.priority', (job) => Date.parse(job.createdAt)],\n        ['asc', 'asc'],\n      ),\n    )\n    .catch((error) => {\n      Sentry.captureException(error)\n      console.warn('Error retrieving Jobs for forms app', error)\n\n      if (isOffline()) {\n        throw new OneBlinkAppsError(\n          'You are currently offline and do not have a local copy of this app available, please connect to the internet and try again',\n          {\n            originalError: error,\n            isOffline: true,\n          },\n        )\n      }\n\n      switch (error.status) {\n        case 401: {\n          throw new OneBlinkAppsError(\n            `You need to log in to see your ${jobsLabel}. Please login and try again.`,\n            {\n              originalError: error,\n              requiresLogin: true,\n              httpStatusCode: error.status,\n            },\n          )\n        }\n        case 403: {\n          throw new OneBlinkAppsError(\n            `You have not been granted access to ${jobsLabel}. Please contact your administrator to gain the correct level of access.`,\n            {\n              originalError: error,\n              requiresAccessRequest: true,\n              httpStatusCode: error.status,\n            },\n          )\n        }\n        case 400:\n        case 404: {\n          throw new OneBlinkAppsError(\n            'We could not find the application you are looking for. Please contact your administrator to ensure your application configuration has been completed successfully.',\n            {\n              originalError: error,\n              title: 'Unknown Application',\n              httpStatusCode: error.status,\n            },\n          )\n        }\n        default: {\n          throw new OneBlinkAppsError(\n            'An unknown error has occurred. Please contact support if the problem persists.',\n            {\n              originalError: error,\n              httpStatusCode: error.status,\n            },\n          )\n        }\n      }\n    })\n}\n\nexport { ensurePrefillFormDataExists }\n"]}
+{"version":3,"file":"job-service.js","sourceRoot":"","sources":["../../src/apps/job-service.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,MAAM,gBAAgB,CAAA;AAErC,OAAO,iBAAiB,MAAM,qCAAqC,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AACrE,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAA;AACpE,OAAO,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAA;AAC3C,OAAO,OAAO,MAAM,WAAW,CAAA;AAE/B,OAAO,MAAM,MAAM,UAAU,CAAA;AAS7B,MAAM,aAAa,GAAwB,EAAE,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAsB;IACzD,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAE5B,OAAO,GAAG,EAAE;QACV,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAC7C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;YACjB,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QAChC,CAAC;IACH,CAAC,CAAA;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAuB;IACnD,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,oBAAoB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAA;AACtD,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,OAAsC;IAEtC,6EAA6E;IAC7E,OAAO,0BAA0B,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE;QACvD,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CACpC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC,CAC1D,CAAA;QACD,OAAO,eAAe,CAAA;IACxB,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,OAAsC,EACtC,WAAyB;IAEzB,OAAO,SAAS,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAC5C,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAClB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QAC5D,OAAO;YACL,GAAG,GAAG;YACN,KAAK;SACN,CAAA;IACH,CAAC,CAAC,CACH,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,UAAkB,EAClB,SAAiB,EACjB,WAAyB;IAEzB,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;QAClB,OAAO,EAAE,CAAA;IACX,CAAC;IAED,OAAO,aAAa,CAClB,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,eAAe,UAAU,OAAO,EAC5D;QACE,WAAW,EAAE,KAAK;KACnB,CACF;SACE,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SACnD,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;SAC5C,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAChB,QAAQ,CACN,OAAO,EACP,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EACxD,CAAC,KAAK,EAAE,KAAK,CAAC,CACf,CACF;SACA,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAC9B,OAAO,CAAC,IAAI,CAAC,qCAAqC,EAAE,KAAK,CAAC,CAAA;QAE1D,IAAI,SAAS,EAAE,EAAE,CAAC;YAChB,MAAM,IAAI,iBAAiB,CACzB,4HAA4H,EAC5H;gBACE,aAAa,EAAE,KAAK;gBACpB,SAAS,EAAE,IAAI;aAChB,CACF,CAAA;QACH,CAAC;QAED,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;YACrB,KAAK,GAAG,CAAC,CAAC,CAAC;gBACT,MAAM,IAAI,iBAAiB,CACzB,kCAAkC,SAAS,+BAA+B,EAC1E;oBACE,aAAa,EAAE,KAAK;oBACpB,aAAa,EAAE,IAAI;oBACnB,cAAc,EAAE,KAAK,CAAC,MAAM;iBAC7B,CACF,CAAA;YACH,CAAC;YACD,KAAK,GAAG,CAAC,CAAC,CAAC;gBACT,MAAM,IAAI,iBAAiB,CACzB,uCAAuC,SAAS,0EAA0E,EAC1H;oBACE,aAAa,EAAE,KAAK;oBACpB,qBAAqB,EAAE,IAAI;oBAC3B,cAAc,EAAE,KAAK,CAAC,MAAM;iBAC7B,CACF,CAAA;YACH,CAAC;YACD,KAAK,GAAG,CAAC;YACT,KAAK,GAAG,CAAC,CAAC,CAAC;gBACT,MAAM,IAAI,iBAAiB,CACzB,oKAAoK,EACpK;oBACE,aAAa,EAAE,KAAK;oBACpB,KAAK,EAAE,qBAAqB;oBAC5B,cAAc,EAAE,KAAK,CAAC,MAAM;iBAC7B,CACF,CAAA;YACH,CAAC;YACD,OAAO,CAAC,CAAC,CAAC;gBACR,MAAM,IAAI,iBAAiB,CACzB,gFAAgF,EAChF;oBACE,aAAa,EAAE,KAAK;oBACpB,cAAc,EAAE,KAAK,CAAC,MAAM;iBAC7B,CACF,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAA;AACN,CAAC;AAED,OAAO,EAAE,2BAA2B,EAAE,CAAA","sourcesContent":["import _orderBy from 'lodash.orderby'\n\nimport OneBlinkAppsError from './services/errors/oneBlinkAppsError'\nimport { searchRequest } from './services/fetch'\nimport { getPendingQueueSubmissions } from './services/pending-queue'\nimport { ensurePrefillFormDataExists } from './services/job-prefill'\nimport { isOffline } from './offline-service'\nimport { isLoggedIn } from './auth-service'\nimport { getDrafts } from './draft-service'\nimport tenants from './tenants'\nimport { SubmissionTypes } from '@oneblink/types'\nimport Sentry from './Sentry'\n\nexport type JobListenerEvent = {\n  action: 'SUBMITTED'\n  jobId: string\n}\n\nexport type JobsListener = (event: JobListenerEvent) => unknown\n\nconst jobsListeners: Array<JobsListener> = []\n\n/**\n * Register a listener function that will be called when jobs state should be\n * updated after a submission.\n *\n * #### Example\n *\n * ```js\n * const listener = ({ action, jobId }) => {\n *   if (action === 'SUBMITTED') {\n *     // remove job from local state...\n *   }\n * }\n * const deregister = jobService.registerJobsListener(listener)\n *\n * // When no longer needed, remember to deregister the listener\n * deregister()\n * ```\n *\n * @param listener\n * @returns\n */\nexport function registerJobsListener(listener: JobsListener): () => void {\n  jobsListeners.push(listener)\n\n  return () => {\n    const index = jobsListeners.indexOf(listener)\n    if (index !== -1) {\n      jobsListeners.splice(index, 1)\n    }\n  }\n}\n\nfunction executeJobsListeners(event: JobListenerEvent) {\n  for (const jobsListener of jobsListeners) {\n    jobsListener(event)\n  }\n}\n\n/**\n * Notify listeners that a job has been submitted and should no longer appear in\n * the jobs list.\n *\n * @param jobId\n */\nexport function notifyJobSubmitted(jobId: string) {\n  executeJobsListeners({ action: 'SUBMITTED', jobId })\n}\n\nasync function removePendingSubmissions(\n  jobList: SubmissionTypes.FormsAppJob[],\n) {\n  // Get list of pending submissions, remove jobs that are in the pending queue\n  return getPendingQueueSubmissions().then((submissions) => {\n    const unprocessedJobs = jobList.filter(\n      (job) => !submissions.some((sub) => sub.jobId === job.id),\n    )\n    return unprocessedJobs\n  })\n}\n\nasync function tagDrafts(\n  jobList: SubmissionTypes.FormsAppJob[],\n  abortSignal?: AbortSignal,\n) {\n  return getDrafts(abortSignal).then((drafts) =>\n    jobList.map((job) => {\n      const draft = drafts.find((draft) => draft.jobId === job.id)\n      return {\n        ...job,\n        draft,\n      }\n    }),\n  )\n}\n\n/**\n * Get Jobs for the current user. Jobs that are in the pending queue will be\n * filtered out and Jobs with drafts will include the `draft` property.\n *\n * #### Example\n *\n * ```js\n * const formsAppId = 1\n * const label = 'Applications'\n * const jobs = await jobService.getJobs(formsAppId, label)\n * ```\n *\n * @param formsAppId\n * @param jobsLabel\n * @param abortSignal - Signal to abort the requests\n * @returns\n */\nexport async function getJobs(\n  formsAppId: number,\n  jobsLabel: string,\n  abortSignal?: AbortSignal,\n): Promise<SubmissionTypes.FormsAppJob[]> {\n  if (!isLoggedIn()) {\n    return []\n  }\n\n  return searchRequest<{ jobs: Array<SubmissionTypes.FormsAppJob> }>(\n    `${tenants.current.apiOrigin}/forms-apps/${formsAppId}/jobs`,\n    {\n      isSubmitted: false,\n    },\n  )\n    .then((data) => removePendingSubmissions(data.jobs))\n    .then((jobs) => tagDrafts(jobs, abortSignal))\n    .then((jobList) =>\n      _orderBy(\n        jobList,\n        ['details.priority', (job) => Date.parse(job.createdAt)],\n        ['asc', 'asc'],\n      ),\n    )\n    .catch((error) => {\n      Sentry.captureException(error)\n      console.warn('Error retrieving Jobs for forms app', error)\n\n      if (isOffline()) {\n        throw new OneBlinkAppsError(\n          'You are currently offline and do not have a local copy of this app available, please connect to the internet and try again',\n          {\n            originalError: error,\n            isOffline: true,\n          },\n        )\n      }\n\n      switch (error.status) {\n        case 401: {\n          throw new OneBlinkAppsError(\n            `You need to log in to see your ${jobsLabel}. Please login and try again.`,\n            {\n              originalError: error,\n              requiresLogin: true,\n              httpStatusCode: error.status,\n            },\n          )\n        }\n        case 403: {\n          throw new OneBlinkAppsError(\n            `You have not been granted access to ${jobsLabel}. Please contact your administrator to gain the correct level of access.`,\n            {\n              originalError: error,\n              requiresAccessRequest: true,\n              httpStatusCode: error.status,\n            },\n          )\n        }\n        case 400:\n        case 404: {\n          throw new OneBlinkAppsError(\n            'We could not find the application you are looking for. Please contact your administrator to ensure your application configuration has been completed successfully.',\n            {\n              originalError: error,\n              title: 'Unknown Application',\n              httpStatusCode: error.status,\n            },\n          )\n        }\n        default: {\n          throw new OneBlinkAppsError(\n            'An unknown error has occurred. Please contact support if the problem persists.',\n            {\n              originalError: error,\n              httpStatusCode: error.status,\n            },\n          )\n        }\n      }\n    })\n}\n\nexport { ensurePrefillFormDataExists }\n"]}

package/dist/apps/mfa-service.d.ts

@@ -2,8 +2,8 @@ import { MiscTypes } from '@oneblink/types';
 import { getMfaSettings } from './services/cognito';
 export { getMfaSettings };
 export { updateUserPhoneNumber, removeUserPhoneNumber, verifyUserPhoneNumber, disableMfaMethod, setPreferredMfaMethod, setupMfaAuthenticatorApp, setupSmsMfa, generateMfaAuthenticatorAppQrCodeUrl, DEFAULT_MFA_SETTINGS, } from './services/cognito';
-export type { MfaMethod, MfaSettings } from './services/cognito';
-export { isMfaRequired, mfaRequirementToSelectedMethods, mfaSelectedMethodsToMfaRequirement, formatMfaRequirementLabel, formatMfaRequirementMethodLabel, userMeetsMfaRequirement, formatMfaSetupRequiredMessage, formatMfaMethodNotAcceptedMessage, } from '../utils/mfa-requirement';
+export type { MfaMethod, MfaSettings, LoggedInMfaMethod } from './services/cognito';
+export { isMfaRequired, mfaRequirementToSelectedMethods, mfaSelectedMethodsToMfaRequirement, formatMfaRequirementLabel, userMeetsMfaRequirement, formatMfaSetupRequiredMessage, formatMfaMethodRequirementMessage, isMfaMethodUsedForLogin, } from '../utils/mfa-requirement';
 export type { MfaRequirementMethod } from '../utils/mfa-requirement';
 export type MfaRequirementCheckResult = {
     mfaSettings: Awaited<ReturnType<typeof getMfaSettings>>;

package/dist/apps/mfa-service.js

@@ -2,7 +2,7 @@ import { getMfaSettings } from './services/cognito';
 import { userMeetsMfaRequirement } from '../utils/mfa-requirement';
 export { getMfaSettings };
 export { updateUserPhoneNumber, removeUserPhoneNumber, verifyUserPhoneNumber, disableMfaMethod, setPreferredMfaMethod, setupMfaAuthenticatorApp, setupSmsMfa, generateMfaAuthenticatorAppQrCodeUrl, DEFAULT_MFA_SETTINGS, } from './services/cognito';
-export { isMfaRequired, mfaRequirementToSelectedMethods, mfaSelectedMethodsToMfaRequirement, formatMfaRequirementLabel, formatMfaRequirementMethodLabel, userMeetsMfaRequirement, formatMfaSetupRequiredMessage, formatMfaMethodNotAcceptedMessage, } from '../utils/mfa-requirement';
+export { isMfaRequired, mfaRequirementToSelectedMethods, mfaSelectedMethodsToMfaRequirement, formatMfaRequirementLabel, userMeetsMfaRequirement, formatMfaSetupRequiredMessage, formatMfaMethodRequirementMessage, isMfaMethodUsedForLogin, } from '../utils/mfa-requirement';
 /**
  * Check if the current user meets an MFA requirement.
  *

package/dist/apps/mfa-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"mfa-service.js","sourceRoot":"","sources":["../../src/apps/mfa-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAA;AAElE,OAAO,EAAE,cAAc,EAAE,CAAA;AACzB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,WAAW,EACX,oCAAoC,EACpC,oBAAoB,GACrB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EACL,aAAa,EACb,+BAA+B,EAC/B,kCAAkC,EAClC,yBAAyB,EACzB,+BAA+B,EAC/B,uBAAuB,EACvB,6BAA6B,EAC7B,iCAAiC,GAClC,MAAM,0BAA0B,CAAA;AAQjC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,cAAoD;IAEpD,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAA;IAE1C,OAAO;QACL,WAAW;QACX,uBAAuB,EAAE,uBAAuB,CAC9C,cAAc,EACd,WAAW,CACZ;KACF,CAAA;AACH,CAAC","sourcesContent":["import { MiscTypes } from '@oneblink/types'\r\nimport { getMfaSettings } from './services/cognito'\r\nimport { userMeetsMfaRequirement } from '../utils/mfa-requirement'\r\n\r\nexport { getMfaSettings }\r\nexport {\r\n  updateUserPhoneNumber,\r\n  removeUserPhoneNumber,\r\n  verifyUserPhoneNumber,\r\n  disableMfaMethod,\r\n  setPreferredMfaMethod,\r\n  setupMfaAuthenticatorApp,\r\n  setupSmsMfa,\r\n  generateMfaAuthenticatorAppQrCodeUrl,\r\n  DEFAULT_MFA_SETTINGS,\r\n} from './services/cognito'\r\nexport type { MfaMethod, MfaSettings } from './services/cognito'\r\nexport {\r\n  isMfaRequired,\r\n  mfaRequirementToSelectedMethods,\r\n  mfaSelectedMethodsToMfaRequirement,\r\n  formatMfaRequirementLabel,\r\n  formatMfaRequirementMethodLabel,\r\n  userMeetsMfaRequirement,\r\n  formatMfaSetupRequiredMessage,\r\n  formatMfaMethodNotAcceptedMessage,\r\n} from '../utils/mfa-requirement'\r\nexport type { MfaRequirementMethod } from '../utils/mfa-requirement'\r\n\r\nexport type MfaRequirementCheckResult = {\r\n  mfaSettings: Awaited<ReturnType<typeof getMfaSettings>>\r\n  userMeetsMfaRequirement: boolean\r\n}\r\n\r\n/**\r\n * Check if the current user meets an MFA requirement.\r\n *\r\n * #### Example\r\n *\r\n * ```js\r\n * const { mfaSettings, userMeetsMfaRequirement } =\r\n *   await mfaService.checkIsMfaEnabled('any')\r\n * if (userMeetsMfaRequirement) {\r\n *   // User has met the MFA requirement\r\n * } else {\r\n *   // Prompt user to set up MFA\r\n * }\r\n * ```\r\n *\r\n * @returns\r\n */\r\nexport async function checkIsMfaEnabled(\r\n  mfaRequirement: MiscTypes.MfaRequirement | undefined,\r\n): Promise<MfaRequirementCheckResult> {\r\n  const mfaSettings = await getMfaSettings()\r\n\r\n  return {\r\n    mfaSettings,\r\n    userMeetsMfaRequirement: userMeetsMfaRequirement(\r\n      mfaRequirement,\r\n      mfaSettings,\r\n    ),\r\n  }\r\n}\r\n"]}
+{"version":3,"file":"mfa-service.js","sourceRoot":"","sources":["../../src/apps/mfa-service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAA;AAElE,OAAO,EAAE,cAAc,EAAE,CAAA;AACzB,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,WAAW,EACX,oCAAoC,EACpC,oBAAoB,GACrB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EACL,aAAa,EACb,+BAA+B,EAC/B,kCAAkC,EAClC,yBAAyB,EACzB,uBAAuB,EACvB,6BAA6B,EAC7B,iCAAiC,EACjC,uBAAuB,GACxB,MAAM,0BAA0B,CAAA;AAQjC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,cAAoD;IAEpD,MAAM,WAAW,GAAG,MAAM,cAAc,EAAE,CAAA;IAE1C,OAAO;QACL,WAAW;QACX,uBAAuB,EAAE,uBAAuB,CAC9C,cAAc,EACd,WAAW,CACZ;KACF,CAAA;AACH,CAAC","sourcesContent":["import { MiscTypes } from '@oneblink/types'\r\nimport { getMfaSettings } from './services/cognito'\r\nimport { userMeetsMfaRequirement } from '../utils/mfa-requirement'\r\n\r\nexport { getMfaSettings }\r\nexport {\r\n  updateUserPhoneNumber,\r\n  removeUserPhoneNumber,\r\n  verifyUserPhoneNumber,\r\n  disableMfaMethod,\r\n  setPreferredMfaMethod,\r\n  setupMfaAuthenticatorApp,\r\n  setupSmsMfa,\r\n  generateMfaAuthenticatorAppQrCodeUrl,\r\n  DEFAULT_MFA_SETTINGS,\r\n} from './services/cognito'\r\nexport type { MfaMethod, MfaSettings, LoggedInMfaMethod } from './services/cognito'\r\nexport {\r\n  isMfaRequired,\r\n  mfaRequirementToSelectedMethods,\r\n  mfaSelectedMethodsToMfaRequirement,\r\n  formatMfaRequirementLabel,\r\n  userMeetsMfaRequirement,\r\n  formatMfaSetupRequiredMessage,\r\n  formatMfaMethodRequirementMessage,\r\n  isMfaMethodUsedForLogin,\r\n} from '../utils/mfa-requirement'\r\nexport type { MfaRequirementMethod } from '../utils/mfa-requirement'\r\n\r\nexport type MfaRequirementCheckResult = {\r\n  mfaSettings: Awaited<ReturnType<typeof getMfaSettings>>\r\n  userMeetsMfaRequirement: boolean\r\n}\r\n\r\n/**\r\n * Check if the current user meets an MFA requirement.\r\n *\r\n * #### Example\r\n *\r\n * ```js\r\n * const { mfaSettings, userMeetsMfaRequirement } =\r\n *   await mfaService.checkIsMfaEnabled('any')\r\n * if (userMeetsMfaRequirement) {\r\n *   // User has met the MFA requirement\r\n * } else {\r\n *   // Prompt user to set up MFA\r\n * }\r\n * ```\r\n *\r\n * @returns\r\n */\r\nexport async function checkIsMfaEnabled(\r\n  mfaRequirement: MiscTypes.MfaRequirement | undefined,\r\n): Promise<MfaRequirementCheckResult> {\r\n  const mfaSettings = await getMfaSettings()\r\n\r\n  return {\r\n    mfaSettings,\r\n    userMeetsMfaRequirement: userMeetsMfaRequirement(\r\n      mfaRequirement,\r\n      mfaSettings,\r\n    ),\r\n  }\r\n}\r\n"]}

package/dist/apps/services/AWSCognitoClient.d.ts

@@ -1,6 +1,8 @@
 import { AuthenticationResultType, CognitoIdentityProviderClient, InitiateAuthResponse } from '@aws-sdk/client-cognito-identity-provider';
 export type MfaMethod = 'authenticator' | 'sms';
+export type LoggedInMfaMethod = 'SOFTWARE_TOKEN_MFA' | 'SMS_MFA' | 'NO_MFA_ENABLED';
 export type MfaSettings = {
+    loggedInWithMfaMethod: LoggedInMfaMethod;
     authenticator: {
         enabled: boolean;
         preferred: boolean;
@@ -13,6 +15,7 @@ export type MfaSettings = {
     };
 };
 export declare const DEFAULT_MFA_SETTINGS: MfaSettings;
+export declare function resolveLoggedInMfaMethod(idToken: string | undefined): LoggedInMfaMethod;
 export declare function resolveMfaPreferredFlags({ authenticatorEnabled, smsEnabled, preferredMfaSetting, }: {
     authenticatorEnabled: boolean;
     smsEnabled: boolean;

package/dist/apps/services/AWSCognitoClient.js

@@ -1,7 +1,9 @@
-import { AssociateSoftwareTokenCommand, ChangePasswordCommand, CognitoIdentityProviderClient, ConfirmForgotPasswordCommand, DeleteUserAttributesCommand, GetUserCommand, GlobalSignOutCommand, InitiateAuthCommand, RespondToAuthChallengeCommand, SetUserMFAPreferenceCommand, UpdateUserAttributesCommand, VerifySoftwareTokenCommand, VerifyUserAttributeCommand, } from '@aws-sdk/client-cognito-identity-provider';
+import { AssociateSoftwareTokenCommand, ChangePasswordCommand, CognitoIdentityProviderClient, ConfirmForgotPasswordCommand, DeleteUserAttributesCommand, GetUserCommand, GlobalSignOutCommand, InitiateAuthCommand, RespondToAuthChallengeCommand, SetUserMFAPreferenceCommand, UpdateUserAttributesCommand, VerifySoftwareTokenCommand, VerifyUserAttributeCommand, NotAuthorizedException, } from '@aws-sdk/client-cognito-identity-provider';
+import { jwtDecode } from 'jwt-decode';
 import Sentry from '../Sentry';
 import { OneBlinkAppsError } from '..';
 export const DEFAULT_MFA_SETTINGS = {
+    loggedInWithMfaMethod: 'NO_MFA_ENABLED',
     authenticator: { enabled: false, preferred: false },
     sms: {
         enabled: false,
@@ -10,6 +12,23 @@ export const DEFAULT_MFA_SETTINGS = {
         isPhoneNumberVerified: false,
     },
 };
+export function resolveLoggedInMfaMethod(idToken) {
+    if (idToken) {
+        try {
+            const payload = jwtDecode(idToken);
+            switch (payload.mfa_method) {
+                case 'SOFTWARE_TOKEN_MFA':
+                case 'SMS_MFA':
+                    return payload.mfa_method;
+            }
+        }
+        catch (error) {
+            console.warn('Error while decoding id token for logged in MFA method', error);
+            Sentry.captureException(error);
+        }
+    }
+    return 'NO_MFA_ENABLED';
+}
 export function resolveMfaPreferredFlags({ authenticatorEnabled, smsEnabled, preferredMfaSetting, }) {
     const cognitoAuthenticatorPreferred = preferredMfaSetting === 'SOFTWARE_TOKEN_MFA';
     const cognitoSmsPreferred = preferredMfaSetting === 'SMS_MFA';
@@ -387,32 +406,44 @@ export default class AWSCognitoClient {
         if (!accessToken) {
             return DEFAULT_MFA_SETTINGS;
         }
-        const user = await this.cognitoIdentityProviderClient.send(new GetUserCommand({
-            AccessToken: accessToken,
-        }), { abortSignal });
-        const mfaList = user.UserMFASettingList || [];
-        const preferredMfaSetting = user.PreferredMfaSetting;
-        const phoneNumber = (_b = (_a = user.UserAttributes) === null || _a === void 0 ? void 0 : _a.find((attribute) => attribute.Name === 'phone_number')) === null || _b === void 0 ? void 0 : _b.Value;
-        const isPhoneNumberVerified = ((_d = (_c = user.UserAttributes) === null || _c === void 0 ? void 0 : _c.find((attribute) => attribute.Name === 'phone_number_verified')) === null || _d === void 0 ? void 0 : _d.Value) === 'true';
-        const authenticatorEnabled = mfaList.includes('SOFTWARE_TOKEN_MFA');
-        const smsEnabled = mfaList.includes('SMS_MFA');
-        const { authenticatorPreferred, smsPreferred } = resolveMfaPreferredFlags({
-            authenticatorEnabled,
-            smsEnabled,
-            preferredMfaSetting,
-        });
-        return {
-            authenticator: {
-                enabled: authenticatorEnabled,
-                preferred: authenticatorPreferred,
-            },
-            sms: {
-                enabled: smsEnabled,
-                preferred: smsPreferred,
-                phoneNumber,
-                isPhoneNumberVerified,
-            },
-        };
+        try {
+            const user = await this.cognitoIdentityProviderClient.send(new GetUserCommand({
+                AccessToken: accessToken,
+            }), { abortSignal });
+            const mfaList = user.UserMFASettingList || [];
+            const preferredMfaSetting = user.PreferredMfaSetting;
+            const phoneNumber = (_b = (_a = user.UserAttributes) === null || _a === void 0 ? void 0 : _a.find((attribute) => attribute.Name === 'phone_number')) === null || _b === void 0 ? void 0 : _b.Value;
+            const isPhoneNumberVerified = ((_d = (_c = user.UserAttributes) === null || _c === void 0 ? void 0 : _c.find((attribute) => attribute.Name === 'phone_number_verified')) === null || _d === void 0 ? void 0 : _d.Value) === 'true';
+            const authenticatorEnabled = mfaList.includes('SOFTWARE_TOKEN_MFA');
+            const smsEnabled = mfaList.includes('SMS_MFA');
+            const { authenticatorPreferred, smsPreferred } = resolveMfaPreferredFlags({
+                authenticatorEnabled,
+                smsEnabled,
+                preferredMfaSetting,
+            });
+            const loggedInWithMfaMethod = resolveLoggedInMfaMethod(this._getIdToken());
+            return {
+                loggedInWithMfaMethod,
+                authenticator: {
+                    enabled: authenticatorEnabled,
+                    preferred: authenticatorPreferred,
+                },
+                sms: {
+                    enabled: smsEnabled,
+                    preferred: smsPreferred,
+                    phoneNumber,
+                    isPhoneNumberVerified,
+                },
+            };
+        }
+        catch (error) {
+            if (error instanceof NotAuthorizedException) {
+                console.warn('User session has expired, returning default MFA settings', error);
+                this._removeAuthenticationResult();
+                return DEFAULT_MFA_SETTINGS;
+            }
+            throw error;
+        }
     }
     async updateUserPhoneNumber(phoneNumber) {
         const accessToken = await this.getAccessToken();

package/dist/apps/services/AWSCognitoClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"AWSCognitoClient.js","sourceRoot":"","sources":["../../../src/apps/services/AWSCognitoClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAE7B,qBAAqB,EACrB,6BAA6B,EAC7B,4BAA4B,EAC5B,2BAA2B,EAC3B,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EAEnB,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,2CAA2C,CAAA;AAClD,OAAO,MAAM,MAAM,WAAW,CAAA;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAA;AAiBtC,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAC/C,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACnD,GAAG,EAAE;QACH,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,SAAS;QACtB,qBAAqB,EAAE,KAAK;KAC7B;CACF,CAAA;AAED,MAAM,UAAU,wBAAwB,CAAC,EACvC,oBAAoB,EACpB,UAAU,EACV,mBAAmB,GAKpB;IAIC,MAAM,6BAA6B,GACjC,mBAAmB,KAAK,oBAAoB,CAAA;IAC9C,MAAM,mBAAmB,GAAG,mBAAmB,KAAK,SAAS,CAAA;IAE7D,IAAI,6BAA6B,IAAI,oBAAoB,EAAE,CAAC;QAC1D,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;IAC9D,CAAC;IAED,IAAI,mBAAmB,IAAI,UAAU,EAAE,CAAC;QACtC,OAAO,EAAE,sBAAsB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;IAC9D,CAAC;IAED,IAAI,oBAAoB,IAAI,UAAU,EAAE,CAAC;QACvC,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;IAC9D,CAAC;IAED,OAAO;QACL,sBAAsB,EAAE,oBAAoB;QAC5C,YAAY,EAAE,UAAU;KACzB,CAAA;AACH,CAAC;AAaD,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAQnC,YAAY,EACV,QAAQ,EACR,MAAM,EACN,WAAW,EACX,WAAW,EACX,SAAS,GAOV;QACC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;QAC9D,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAA;QAC5D,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,EAAE,CAAA;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,6BAA6B,GAAG,IAAI,6BAA6B,CAAC;YACrE,MAAM;SACP,CAAC,CAAA;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,UAAU;QACZ,OAAO,WAAW,IAAI,CAAC,QAAQ,aAAa,CAAA;IAC9C,CAAC;IACD,IAAI,YAAY;QACd,OAAO,WAAW,IAAI,CAAC,QAAQ,eAAe,CAAA;IAChD,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,WAAW,IAAI,CAAC,QAAQ,WAAW,CAAA;IAC5C,CAAC;IACD,IAAI,aAAa;QACf,OAAO,WAAW,IAAI,CAAC,QAAQ,gBAAgB,CAAA;IACjD,CAAC;IACD,IAAI,KAAK;QACP,OAAO,WAAW,IAAI,CAAC,QAAQ,QAAQ,CAAA;IACzC,CAAC;IACD,IAAI,kBAAkB;QACpB,OAAO,WAAW,IAAI,CAAC,QAAQ,qBAAqB,CAAA;IACtD,CAAC;IAED,iBAAiB;QACf,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,EAAE,CAAA;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;gBAC9B,8BAA8B;gBAC9B,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAA;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,0BAA0B,CAAC,oBAA8C;QACvE,qFAAqF;QACrF,MAAM,SAAS,GACZ,oBAAoB,CAAC,SAAoB,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;QACvE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC3D,YAAY,CAAC,OAAO,CAClB,IAAI,CAAC,YAAY,EACjB,oBAAoB,CAAC,WAAqB,CAC3C,CAAA;QACD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,OAAiB,CAAC,CAAA;QAC3E,IAAI,oBAAoB,CAAC,YAAY,EAAE,CAAC;YACtC,YAAY,CAAC,OAAO,CAClB,IAAI,CAAC,aAAa,EAClB,oBAAoB,CAAC,YAAY,CAClC,CAAA;QACH,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAA;IAC1B,CAAC;IAED,2BAA2B;QACzB,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACxC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC1C,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAE3C,IAAI,CAAC,iBAAiB,EAAE,CAAA;IAC1B,CAAC;IAED,eAAe;QACb,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,SAAS,CAAA;IAC7D,CAAC;IAED,WAAW;QACT,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAA;IACzD,CAAC;IAED,gBAAgB;QACd,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,SAAS,CAAA;IAC9D,CAAC;IAED,eAAe;QACb,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAM;QACR,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAA;QAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAM;QACR,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC1D,IAAI,mBAAmB,CAAC;gBACtB,QAAQ,EAAE,oBAAoB;gBAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE;oBACd,aAAa,EAAE,YAAY;iBAC5B;aACF,CAAC,CACH,CAAA;YACD,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBAChC,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;YAC9D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAA;YAChE,IAAI,CAAC,2BAA2B,EAAE,CAAA;YAClC,MAAM,IAAI,iBAAiB,CACzB,kFAAkF,EAClF;gBACE,aAAa,EAAE,IAAI;gBACnB,aAAa,EAAE,KAAc;aAC9B,CACF,CAAA;QACH,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,QAAuB;QACtC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE7B,OAAO,GAAG,EAAE;YACV,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC9C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YACjC,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,QAAgB,EAChB,oBAA0C,EAC1C,QAAiB;QAEjB,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,CAAC;YAC9C,IAAI,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAA;YAC1E,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,aAAa,CAAA;QACxD,QAAQ,aAAa,EAAE,CAAC;YACtB,KAAK,uBAAuB,CAAC,CAAC,CAAC;gBAC7B,OAAO;oBACL,qBAAqB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;wBAC3C,MAAM,mBAAmB,GACvB,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,6BAA6B,CAAC;4BAChC,aAAa;4BACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,OAAO,EAAE,oBAAoB,CAAC,OAAO;4BACrC,kBAAkB,EAAE;gCAClB,QAAQ,EAAE,QAAQ;gCAClB,YAAY,EAAE,WAAW;6BAC1B;yBACF,CAAC,CACH,CAAA;wBACH,OAAO,MAAM,IAAI,CAAC,uBAAuB,CACvC,QAAQ,EACR,mBAAmB,EACnB,WAAW,CACZ,CAAA;oBACH,CAAC;iBACF,CAAA;YACH,CAAC;YACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;gBAC1B,OAAO;oBACL,GAAG,EAAE;wBACH,MAAM,EAAE,eAAe;wBACvB,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;4BAC3B,MAAM,mBAAmB,GACvB,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,6BAA6B,CAAC;gCAChC,aAAa;gCACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;gCACvB,OAAO,EAAE,oBAAoB,CAAC,OAAO;gCACrC,kBAAkB,EAAE;oCAClB,QAAQ,EAAE,QAAQ;oCAClB,uBAAuB,EAAE,IAAI;iCAC9B;6BACF,CAAC,CACH,CAAA;4BACH,OAAO,MAAM,IAAI,CAAC,uBAAuB,CACvC,QAAQ,EACR,mBAAmB,EACnB,QAAQ,CACT,CAAA;wBACH,CAAC;wBACD,kBAAkB,EAAE,SAAS;qBAC9B;iBACF,CAAA;YACH,CAAC;YACD,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YAC/C,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAA;gBACH,CAAC;gBAED,OAAO;oBACL,GAAG,EAAE;wBACH,MAAM,EAAE,KAAK;wBACb,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;4BAC3B,MAAM,kBAAkB,GACtB,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,6BAA6B,CAAC;gCAChC,aAAa;gCACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;gCACvB,OAAO,EAAE,oBAAoB,CAAC,OAAO;gCACrC,kBAAkB,EAAE;oCAClB,QAAQ,EAAE,QAAQ;oCAClB,YAAY,EAAE,IAAI;iCACnB;6BACF,CAAC,CACH,CAAA;4BACH,OAAO,MAAM,IAAI,CAAC,uBAAuB,CACvC,QAAQ,EACR,kBAAkB,EAClB,QAAQ,CACT,CAAA;wBACH,CAAC;wBACD,kBAAkB,EAAE,KAAK,IAAI,EAAE;;4BAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;gCACd,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAA;4BACH,CAAC;4BAED,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAC3D,QAAQ,EACR,QAAQ,CACT,CAAA;4BAED,IAAI,CAAA,MAAA,oBAAoB,CAAC,GAAG,0CAAE,MAAM,MAAK,KAAK,EAAE,CAAC;gCAC/C,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAA;4BACH,CAAC;4BAED,OAAO,oBAAoB,CAAA;wBAC7B,CAAC;qBACF;iBACF,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CACV,uFAAuF,EACvF,oBAAoB,CACrB,CAAA;QACD,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAA;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,QAAgB,EAChB,QAAgB;QAEhB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC/D,IAAI,mBAAmB,CAAC;YACtB,QAAQ,EAAE,oBAAoB;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE;gBACd,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,QAAQ;aACnB;SACF,CAAC,CACH,CAAA;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC5E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,oBAA6B;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACpC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CACjB,6GAA6G,CAC9G,CAAA;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;QACpC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAEvC,0EAA0E;QAC1E,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;QAC3C,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAA;QAE3D,+DAA+D;QAC/D,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,YAAY,CAAC,CAAA;QAEpE,MAAM,CAAC,QAAQ,CAAC,IAAI;YAClB,WAAW,WAAW,mBAAmB;gBACzC,qBAAqB;gBACrB,aAAa;gBACb,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACjC,SAAS;gBACT,kBAAkB,CAAC,KAAK,CAAC;gBACzB,SAAS;gBACT,kBAAkB,CAAC,oDAAoD,CAAC;gBACxE,gBAAgB;gBAChB,kBAAkB,CAAC,WAAW,CAAC;gBAC/B,kBAAkB;gBAClB,kBAAkB,CAAC,cAAc,CAAC;gBAClC,6BAA6B;gBAC7B,CAAC,oBAAoB;oBACnB,CAAC,CAAC,qBAAqB,GAAG,kBAAkB,CAAC,oBAAoB,CAAC;oBAClE,CAAC,CAAC,EAAE,CAAC,CAAA;IACX,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACpC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CACjB,sHAAsH,CACvH,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACzD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,qBAAqB,GAAG,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QAE5D,+CAA+C;QAC/C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,MACX,OAAO,qBAAqB,KAAK,QAAQ;gBACvC,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,gCACN,EAAE,CACH,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACtE,CAAC;QAED,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QAClC,CAAC;QAED,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAEnE,kDAAkD;QAClD,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAEhD,sDAAsD;QACtD,MAAM,MAAM,GAA4B,MAAM,IAAI,OAAO,CACvD,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClB,eAAe,CACb,WAAW,WAAW,eAAe,EACrC;gBACE,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,YAAY,EAAE,WAAW;gBACzB,aAAa;aACd,EACD,OAAO,EACP,CAAC,KAAK,EAAE,EAAE;gBACR,MAAM,CACJ,IAAI,KAAK,CACP,KAAK,CAAC,iBAAiB;oBACrB,KAAK,CAAC,OAAO;oBACb,oEAAoE,CACvE,CACF,CAAA;YACH,CAAC,CACF,CAAA;QACH,CAAC,CACF,CAAA;QAED,IAAI,CAAC,0BAA0B,CAAC;YAC9B,WAAW,EAAE,MAAM,CAAC,YAAsB;YAC1C,SAAS,EAAE,MAAM,CAAC,UAAoB;YACtC,OAAO,EAAE,MAAM,CAAC,QAAkB;YAClC,SAAS,EAAE,MAAM,CAAC,UAAoB;YACtC,YAAY,EAAE,MAAM,CAAC,aAAuB;SAC7C,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,gBAAwB,EACxB,WAAmB;QAEnB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,qBAAqB,CAAC;YACxB,WAAW,EAAE,WAAW,IAAI,EAAE;YAC9B,gBAAgB,EAAE,gBAAgB;YAClC,gBAAgB,EAAE,WAAW;SAC9B,CAAC,CACH,CAAA;IACH,CAAC;IACD,KAAK,CAAC,qBAAqB,CAAC,EAC1B,QAAQ,EACR,IAAI,EACJ,QAAQ,GAKT;QACC,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,4BAA4B,CAAC;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,QAAQ;SACnB,CAAC,CACH,CAAA;IACH,CAAC;IAED,cAAc;QACZ,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAChC,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,SAAS,CACjB,4GAA4G,CAC7G,CAAA;QACH,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC,IAAI;YAClB,WAAW,WAAW,SAAS;gBAC/B,aAAa;gBACb,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACjC,cAAc;gBACd,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAA;YAC5C,4DAA4D;YAC5D,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;YAC9B,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;YAC1C,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,oBAAoB,CAAC;oBACvB,WAAW,EAAE,WAAW;iBACzB,CAAC,CACH,CAAA;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAE,KAA2B,CAAC,aAAa,EAAE,CAAC;gBAChD,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,2BAA2B,EAAE,CAAA;QACpC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;QAE5B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;QAE5B,OAAO,IAAI,CAAC,eAAe,EAAE,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAyB;;QAC5C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,oBAAoB,CAAA;QAC7B,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CACxD,IAAI,cAAc,CAAC;YACjB,WAAW,EAAE,WAAW;SACzB,CAAC,EACF,EAAE,WAAW,EAAE,CAChB,CAAA;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAA;QAC7C,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;QACpD,MAAM,WAAW,GAAG,MAAA,MAAA,IAAI,CAAC,cAAc,0CAAE,IAAI,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,CACjD,0CAAE,KAAK,CAAA;QACR,MAAM,qBAAqB,GACzB,CAAA,MAAA,MAAA,IAAI,CAAC,cAAc,0CAAE,IAAI,CACvB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,uBAAuB,CAC1D,0CAAE,KAAK,MAAK,MAAM,CAAA;QAErB,MAAM,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;QACnE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QAC9C,MAAM,EAAE,sBAAsB,EAAE,YAAY,EAAE,GAAG,wBAAwB,CAAC;YACxE,oBAAoB;YACpB,UAAU;YACV,mBAAmB;SACpB,CAAC,CAAA;QAEF,OAAO;YACL,aAAa,EAAE;gBACb,OAAO,EAAE,oBAAoB;gBAC7B,SAAS,EAAE,sBAAsB;aAClC;YACD,GAAG,EAAE;gBACH,OAAO,EAAE,UAAU;gBACnB,SAAS,EAAE,YAAY;gBACvB,WAAW;gBACX,qBAAqB;aACtB;SACF,CAAA;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,WAAmB;QAEnB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAA;QACzC,CAAC;QAED,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;YAC9B,WAAW,EAAE,WAAW;YACxB,cAAc,EAAE;gBACd;oBACE,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,WAAW;iBACnB;aACF;SACF,CAAC,CACH,CAAA;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,OAAO,EAAE,qBAAqB,EAAE,WAAW,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;YAC9B,WAAW,EAAE,WAAW;YACxB,kBAAkB,EAAE,CAAC,cAAc,CAAC;SACrC,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAY;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,0BAA0B,CAAC;YAC7B,WAAW,EAAE,WAAW;YACxB,aAAa,EAAE,cAAc;YAC7B,IAAI,EAAE,IAAI;SACX,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAAiB;QAC3C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAEnD,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;YAC9B,WAAW,EAAE,WAAW;YACxB,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO;gBACvC,CAAC,CAAC;oBACE,wBAAwB,EAAE;wBACxB,OAAO,EAAE,IAAI;wBACb,YAAY,EAAE,MAAM,KAAK,eAAe;qBACzC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO;gBAC7B,CAAC,CAAC;oBACE,cAAc,EAAE;wBACd,OAAO,EAAE,IAAI;wBACb,YAAY,EAAE,MAAM,KAAK,KAAK;qBAC/B;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAiB;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QACnD,MAAM,YAAY,GAChB,MAAM,KAAK,eAAe;YACxB,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,SAAS;YACzC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAA;QACnC,MAAM,WAAW,GACf,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAA;QACtD,MAAM,aAAa,GACjB,MAAM,KAAK,eAAe;YACxB,CAAC,CAAC,eAAe,CAAC,GAAG;YACrB,CAAC,CAAC,eAAe,CAAC,aAAa,CAAA;QAEnC,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;YAC9B,WAAW,EAAE,WAAW;YACxB,GAAG,CAAC,MAAM,KAAK,eAAe;gBAC5B,CAAC,CAAC;oBACE,wBAAwB,EAAE;wBACxB,OAAO,EAAE,KAAK;wBACd,YAAY,EAAE,KAAK;qBACpB;iBACF;gBACH,CAAC,CAAC;oBACE,cAAc,EAAE;wBACd,OAAO,EAAE,KAAK;wBACd,YAAY,EAAE,KAAK;qBACpB;iBACF,CAAC;YACN,GAAG,CAAC,YAAY,IAAI,aAAa,CAAC,OAAO;gBACvC,CAAC,CAAC,WAAW,KAAK,eAAe;oBAC/B,CAAC,CAAC;wBACE,wBAAwB,EAAE;4BACxB,OAAO,EAAE,IAAI;4BACb,YAAY,EAAE,IAAI;yBACnB;qBACF;oBACH,CAAC,CAAC;wBACE,cAAc,EAAE;4BACd,OAAO,EAAE,IAAI;4BACb,YAAY,EAAE,IAAI;yBACnB;qBACF;gBACL,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS,KAA8B,EAAE;QAC3D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QACnD,MAAM,kBAAkB,GACtB,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO;YACpC,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC;YAC1C,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAChE,MAAM,iBAAiB,GACrB,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEpE,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;YAC9B,WAAW,EAAE,WAAW;YACxB,cAAc,EAAE;gBACd,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,iBAAiB;aAChC;YACD,GAAG,CAAC,iBAAiB,IAAI,eAAe,CAAC,aAAa,CAAC,OAAO;gBAC5D,CAAC,CAAC;oBACE,wBAAwB,EAAE;wBACxB,OAAO,EAAE,IAAI;wBACb,YAAY,EAAE,KAAK;qBACpB;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,EAAE,SAAS,KAA8B,EAAE;QACxE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAClE,IAAI,6BAA6B,CAAC;YAChC,WAAW,EAAE,WAAW;SACzB,CAAC,CACH,CAAA;QAED,OAAO;YACL,UAAU,EAAE,UAAU;YACtB,eAAe,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBACtC,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,0BAA0B,CAAC;oBAC7B,WAAW,EAAE,WAAW;oBACxB,QAAQ,EAAE,IAAI;iBACf,CAAC,CACH,CAAA;gBAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;gBACnD,MAAM,kBAAkB,GACtB,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO;oBACpC,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC;oBAC1C,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;gBAChE,MAAM,iBAAiB,GACrB,SAAS,aAAT,SAAS,cAAT,SAAS,GACT,CAAC,CAAC,kBAAkB,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;gBAEjE,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;oBAC9B,wBAAwB,EAAE;wBACxB,OAAO,EAAE,IAAI;wBACb,YAAY,EAAE,iBAAiB;qBAChC;oBACD,GAAG,CAAC,iBAAiB,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO;wBAClD,CAAC,CAAC;4BACE,cAAc,EAAE;gCACd,OAAO,EAAE,IAAI;gCACb,YAAY,EAAE,KAAK;6BACpB;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,WAAW,EAAE,WAAW;iBACzB,CAAC,CACH,CAAA;YACH,CAAC;SACF,CAAA;IACH,CAAC;CACF;AAED,sEAAsE;AACtE,2BAA2B;AAE3B,qDAAqD;AACrD,SAAS,eAAe,CACtB,GAAW,EACX,MAA+B,EAC/B,OAAiD,EACjD,KAAsE;IAEtE,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAA;IACpC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC/B,OAAO,CAAC,gBAAgB,CACtB,cAAc,EACd,kDAAkD,CACnD,CAAA;IACD,OAAO,CAAC,MAAM,GAAG;QACf,IAAI,IAAI,GAAG,EAAE,CAAA;QACb,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAA;YAC1B,aAAa;QACf,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,CAAA;QACf,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,CAAA;QACb,CAAC;IACH,CAAC,CAAA;IACD,OAAO,CAAC,OAAO,GAAG;QAChB,KAAK,CAAC,EAAE,CAAC,CAAA;IACX,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SAC7B,MAAM,CAAC,CAAC,IAAc,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACpC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,EAAE,EAAE,CAAC;SACL,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACpB,CAAC;AAED,sEAAsE;AACtE,wBAAwB;AAExB,qEAAqE;AACrE,SAAS,oBAAoB;IAC3B,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAA;IACjC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACzE,EAAE,CACH,CAAA;AACH,CAAC;AAED,+CAA+C;AAC/C,oDAAoD;AACpD,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;AACrD,CAAC;AAED,qCAAqC;AACrC,SAAS,eAAe,CAAC,GAAgB;IACvC,sFAAsF;IACtF,sEAAsE;IACtE,uDAAuD;IACvD,0DAA0D;IAC1D,mBAAmB;IACnB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;SAC9D,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AACvB,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,yBAAyB,CAAC,CAAS;IAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,CAAA;IAC9B,OAAO,eAAe,CAAC,MAAM,CAAC,CAAA;AAChC,CAAC","sourcesContent":["import {\n  AssociateSoftwareTokenCommand,\n  AuthenticationResultType,\n  ChangePasswordCommand,\n  CognitoIdentityProviderClient,\n  ConfirmForgotPasswordCommand,\n  DeleteUserAttributesCommand,\n  GetUserCommand,\n  GlobalSignOutCommand,\n  InitiateAuthCommand,\n  InitiateAuthResponse,\n  RespondToAuthChallengeCommand,\n  SetUserMFAPreferenceCommand,\n  UpdateUserAttributesCommand,\n  VerifySoftwareTokenCommand,\n  VerifyUserAttributeCommand,\n} from '@aws-sdk/client-cognito-identity-provider'\nimport Sentry from '../Sentry'\nimport { OneBlinkAppsError } from '..'\n\nexport type MfaMethod = 'authenticator' | 'sms'\n\nexport type MfaSettings = {\n  authenticator: {\n    enabled: boolean\n    preferred: boolean\n  }\n  sms: {\n    enabled: boolean\n    preferred: boolean\n    phoneNumber: string | undefined\n    isPhoneNumberVerified: boolean\n  }\n}\n\nexport const DEFAULT_MFA_SETTINGS: MfaSettings = {\n  authenticator: { enabled: false, preferred: false },\n  sms: {\n    enabled: false,\n    preferred: false,\n    phoneNumber: undefined,\n    isPhoneNumberVerified: false,\n  },\n}\n\nexport function resolveMfaPreferredFlags({\n  authenticatorEnabled,\n  smsEnabled,\n  preferredMfaSetting,\n}: {\n  authenticatorEnabled: boolean\n  smsEnabled: boolean\n  preferredMfaSetting: string | undefined\n}): {\n  authenticatorPreferred: boolean\n  smsPreferred: boolean\n} {\n  const cognitoAuthenticatorPreferred =\n    preferredMfaSetting === 'SOFTWARE_TOKEN_MFA'\n  const cognitoSmsPreferred = preferredMfaSetting === 'SMS_MFA'\n\n  if (cognitoAuthenticatorPreferred && authenticatorEnabled) {\n    return { authenticatorPreferred: true, smsPreferred: false }\n  }\n\n  if (cognitoSmsPreferred && smsEnabled) {\n    return { authenticatorPreferred: false, smsPreferred: true }\n  }\n\n  if (authenticatorEnabled && smsEnabled) {\n    return { authenticatorPreferred: true, smsPreferred: false }\n  }\n\n  return {\n    authenticatorPreferred: authenticatorEnabled,\n    smsPreferred: smsEnabled,\n  }\n}\n\nexport type LoginAttemptMfa = {\n  method: MfaMethod\n  codeCallback: (code: string) => Promise<LoginAttemptResponse>\n  resendCodeCallback?: () => Promise<LoginAttemptResponse>\n}\n\nexport type LoginAttemptResponse = {\n  resetPasswordCallback?: (newPassword: string) => Promise<LoginAttemptResponse>\n  mfa?: LoginAttemptMfa\n}\n\nexport default class AWSCognitoClient {\n  clientId: string\n  cognitoIdentityProviderClient: CognitoIdentityProviderClient\n  loginDomain: string | void\n  redirectUri: string | void\n  logoutUri: string | void\n  listeners: Array<() => unknown>\n\n  constructor({\n    clientId,\n    region,\n    loginDomain,\n    redirectUri,\n    logoutUri,\n  }: {\n    clientId: string\n    region: string\n    redirectUri?: string\n    logoutUri?: string\n    loginDomain?: string\n  }) {\n    if (!clientId) {\n      throw new TypeError('\"clientId\" is required in constructor')\n    }\n    if (!region) {\n      throw new TypeError('\"region\" is required in constructor')\n    }\n\n    this.listeners = []\n    this.redirectUri = redirectUri\n    this.logoutUri = logoutUri\n    this.loginDomain = loginDomain\n    this.clientId = clientId\n    this.cognitoIdentityProviderClient = new CognitoIdentityProviderClient({\n      region,\n    })\n  }\n\n  // Local Storage Keys\n  get EXPIRES_AT() {\n    return `COGNITO_${this.clientId}_EXPIRES_AT`\n  }\n  get ACCESS_TOKEN() {\n    return `COGNITO_${this.clientId}_ACCESS_TOKEN`\n  }\n  get ID_TOKEN() {\n    return `COGNITO_${this.clientId}_ID_TOKEN`\n  }\n  get REFRESH_TOKEN() {\n    return `COGNITO_${this.clientId}_REFRESH_TOKEN`\n  }\n  get STATE() {\n    return `COGNITO_${this.clientId}_STATE`\n  }\n  get PKCE_CODE_VERIFIER() {\n    return `COGNITO_${this.clientId}_PKCE_CODE_VERIFIER`\n  }\n\n  _executeListeners() {\n    for (const listener of this.listeners) {\n      try {\n        listener()\n      } catch (error) {\n        Sentry.captureException(error)\n        // Ignore error from listeners\n        console.warn('AWSCognitoClient listener error', error)\n      }\n    }\n  }\n\n  _storeAuthenticationResult(authenticationResult: AuthenticationResultType) {\n    // Take off 5 seconds to ensure a request does not become unauthenticated mid request\n    const expiresAt =\n      (authenticationResult.ExpiresIn as number) * 1000 + Date.now() - 5000\n    localStorage.setItem(this.EXPIRES_AT, expiresAt.toString())\n    localStorage.setItem(\n      this.ACCESS_TOKEN,\n      authenticationResult.AccessToken as string,\n    )\n    localStorage.setItem(this.ID_TOKEN, authenticationResult.IdToken as string)\n    if (authenticationResult.RefreshToken) {\n      localStorage.setItem(\n        this.REFRESH_TOKEN,\n        authenticationResult.RefreshToken,\n      )\n    }\n\n    this._executeListeners()\n  }\n\n  _removeAuthenticationResult() {\n    localStorage.removeItem(this.EXPIRES_AT)\n    localStorage.removeItem(this.ACCESS_TOKEN)\n    localStorage.removeItem(this.ID_TOKEN)\n    localStorage.removeItem(this.REFRESH_TOKEN)\n\n    this._executeListeners()\n  }\n\n  _getAccessToken(): string | undefined {\n    return localStorage.getItem(this.ACCESS_TOKEN) || undefined\n  }\n\n  _getIdToken(): string | undefined {\n    return localStorage.getItem(this.ID_TOKEN) || undefined\n  }\n\n  _getRefreshToken(): string | undefined {\n    return localStorage.getItem(this.REFRESH_TOKEN) || undefined\n  }\n\n  _isSessionValid(): boolean {\n    const expiresAt = localStorage.getItem(this.EXPIRES_AT)\n    if (!expiresAt) {\n      return false\n    }\n    return parseInt(expiresAt, 10) > Date.now()\n  }\n\n  async _refreshSession(): Promise<void> {\n    if (this._isSessionValid()) {\n      return\n    }\n\n    const refreshToken = this._getRefreshToken()\n    if (!refreshToken) {\n      return\n    }\n\n    try {\n      const result = await this.cognitoIdentityProviderClient.send(\n        new InitiateAuthCommand({\n          AuthFlow: 'REFRESH_TOKEN_AUTH',\n          ClientId: this.clientId,\n          AuthParameters: {\n            REFRESH_TOKEN: refreshToken,\n          },\n        }),\n      )\n      if (result.AuthenticationResult) {\n        this._storeAuthenticationResult(result.AuthenticationResult)\n      }\n    } catch (error) {\n      console.warn('Error while attempting to refresh session', error)\n      this._removeAuthenticationResult()\n      throw new OneBlinkAppsError(\n        'Your session has expired. Please login again to continue to use the application.',\n        {\n          requiresLogin: true,\n          originalError: error as Error,\n        },\n      )\n    }\n  }\n\n  registerListener(listener: () => unknown): () => void {\n    this.listeners.push(listener)\n\n    return () => {\n      const index = this.listeners.indexOf(listener)\n      if (index !== -1) {\n        this.listeners.splice(index, 1)\n      }\n    }\n  }\n\n  async responseToAuthChallenge(\n    username: string,\n    initiateAuthResponse: InitiateAuthResponse,\n    password?: string,\n  ): Promise<LoginAttemptResponse> {\n    if (initiateAuthResponse.AuthenticationResult) {\n      this._storeAuthenticationResult(initiateAuthResponse.AuthenticationResult)\n      return {}\n    }\n\n    const ChallengeName = initiateAuthResponse.ChallengeName\n    switch (ChallengeName) {\n      case 'NEW_PASSWORD_REQUIRED': {\n        return {\n          resetPasswordCallback: async (newPassword) => {\n            const resetPasswordResult =\n              await this.cognitoIdentityProviderClient.send(\n                new RespondToAuthChallengeCommand({\n                  ChallengeName,\n                  ClientId: this.clientId,\n                  Session: initiateAuthResponse.Session,\n                  ChallengeResponses: {\n                    USERNAME: username,\n                    NEW_PASSWORD: newPassword,\n                  },\n                }),\n              )\n            return await this.responseToAuthChallenge(\n              username,\n              resetPasswordResult,\n              newPassword,\n            )\n          },\n        }\n      }\n      case 'SOFTWARE_TOKEN_MFA': {\n        return {\n          mfa: {\n            method: 'authenticator',\n            codeCallback: async (code) => {\n              const resetPasswordResult =\n                await this.cognitoIdentityProviderClient.send(\n                  new RespondToAuthChallengeCommand({\n                    ChallengeName,\n                    ClientId: this.clientId,\n                    Session: initiateAuthResponse.Session,\n                    ChallengeResponses: {\n                      USERNAME: username,\n                      SOFTWARE_TOKEN_MFA_CODE: code,\n                    },\n                  }),\n                )\n              return await this.responseToAuthChallenge(\n                username,\n                resetPasswordResult,\n                password,\n              )\n            },\n            resendCodeCallback: undefined,\n          },\n        }\n      }\n      case 'EMAIL_OTP': {\n        throw new Error('Email OTP is not supported')\n      }\n      case 'SMS_MFA': {\n        if (!initiateAuthResponse.Session) {\n          throw new Error(\n            'An unexpected error occurred while attempting to process your login. Please try again or contact support if the problem persists.',\n          )\n        }\n\n        return {\n          mfa: {\n            method: 'sms',\n            codeCallback: async (code) => {\n              const smsChallengeResult =\n                await this.cognitoIdentityProviderClient.send(\n                  new RespondToAuthChallengeCommand({\n                    ChallengeName,\n                    ClientId: this.clientId,\n                    Session: initiateAuthResponse.Session,\n                    ChallengeResponses: {\n                      USERNAME: username,\n                      SMS_MFA_CODE: code,\n                    },\n                  }),\n                )\n              return await this.responseToAuthChallenge(\n                username,\n                smsChallengeResult,\n                password,\n              )\n            },\n            resendCodeCallback: async () => {\n              if (!password) {\n                throw new Error(\n                  'Unable to resend the SMS verification code. Please try signing in again.',\n                )\n              }\n\n              const loginAttemptResponse = await this.loginUsernamePassword(\n                username,\n                password,\n              )\n\n              if (loginAttemptResponse.mfa?.method !== 'sms') {\n                throw new Error(\n                  'Unable to resend the SMS verification code. Please try signing in again.',\n                )\n              }\n\n              return loginAttemptResponse\n            },\n          },\n        }\n      }\n    }\n\n    console.warn(\n      '\"CognitoIdentityServiceProvider.InitiateAuthResponse\" challenge has not been catered.',\n      initiateAuthResponse,\n    )\n    throw new Error(\n      'An unexpected error occurred while attempting to process your login. Please try again or contact support if the problem persists.',\n    )\n  }\n\n  async loginUsernamePassword(\n    username: string,\n    password: string,\n  ): Promise<LoginAttemptResponse> {\n    const loginResult = await this.cognitoIdentityProviderClient.send(\n      new InitiateAuthCommand({\n        AuthFlow: 'USER_PASSWORD_AUTH',\n        ClientId: this.clientId,\n        AuthParameters: {\n          USERNAME: username,\n          PASSWORD: password,\n        },\n      }),\n    )\n\n    return await this.responseToAuthChallenge(username, loginResult, password)\n  }\n\n  async loginHostedUI(identityProviderName?: string): Promise<void> {\n    const loginDomain = this.loginDomain\n    const redirectUri = this.redirectUri\n    if (!loginDomain || !redirectUri) {\n      throw new TypeError(\n        '\"loginDomain\" or \"redirectUri\" was not passed to constructor. Both are required before attempting to login.',\n      )\n    }\n\n    // Create and store a random \"state\" value\n    const state = generateRandomString()\n    localStorage.setItem(this.STATE, state)\n\n    // Create and store a new PKCE code_verifier (the plaintext random secret)\n    const codeVerifier = generateRandomString()\n    localStorage.setItem(this.PKCE_CODE_VERIFIER, codeVerifier)\n\n    // Hash and base64-urlencode the secret to use as the challenge\n    const code_challenge = await pkceChallengeFromVerifier(codeVerifier)\n\n    window.location.href =\n      `https://${loginDomain}/oauth2/authorize` +\n      '?response_type=code' +\n      '&client_id=' +\n      encodeURIComponent(this.clientId) +\n      '&state=' +\n      encodeURIComponent(state) +\n      '&scope=' +\n      encodeURIComponent('openid email profile aws.cognito.signin.user.admin') +\n      '&redirect_uri=' +\n      encodeURIComponent(redirectUri) +\n      '&code_challenge=' +\n      encodeURIComponent(code_challenge) +\n      '&code_challenge_method=S256' +\n      (identityProviderName\n        ? '&identity_provider=' + encodeURIComponent(identityProviderName)\n        : '')\n  }\n\n  async handleAuthentication(): Promise<void> {\n    const loginDomain = this.loginDomain\n    const redirectUri = this.redirectUri\n    if (!loginDomain || !redirectUri) {\n      throw new TypeError(\n        '\"loginDomain\" or \"redirectUri\" was not passed to constructor. Both are required before attempting to handle a login.',\n      )\n    }\n\n    const query = new URLSearchParams(window.location.search)\n    const queryError = query.get('error')\n    const queryErrorDescription = query.get('error_description')\n\n    // Check if the server returned an error string\n    if (typeof queryError === 'string') {\n      throw new Error(\n        `${queryError} - ${\n          typeof queryErrorDescription === 'string'\n            ? queryErrorDescription\n            : 'An unknown error has occurred.'\n        }`,\n      )\n    }\n\n    const code = query.get('code')\n    if (typeof code !== 'string') {\n      throw new Error('\"code\" was not including in query string to parse')\n    }\n\n    if (localStorage.getItem(this.STATE) !== query.get('state')) {\n      throw new Error('Invalid login')\n    }\n\n    const code_verifier = localStorage.getItem(this.PKCE_CODE_VERIFIER)\n\n    // Clean these up since we don't need them anymore\n    localStorage.removeItem(this.STATE)\n    localStorage.removeItem(this.PKCE_CODE_VERIFIER)\n\n    // Exchange the authorization code for an access token\n    const result: Record<string, unknown> = await new Promise(\n      (resolve, reject) => {\n        sendPostRequest(\n          `https://${loginDomain}/oauth2/token`,\n          {\n            grant_type: 'authorization_code',\n            code,\n            client_id: this.clientId,\n            redirect_uri: redirectUri,\n            code_verifier,\n          },\n          resolve,\n          (error) => {\n            reject(\n              new Error(\n                error.error_description ||\n                  error.message ||\n                  'An unknown error has occurred while processing authentication code',\n              ),\n            )\n          },\n        )\n      },\n    )\n\n    this._storeAuthenticationResult({\n      AccessToken: result.access_token as string,\n      ExpiresIn: result.expires_in as number,\n      IdToken: result.id_token as string,\n      TokenType: result.token_type as string,\n      RefreshToken: result.refresh_token as string,\n    })\n  }\n\n  async changePassword(\n    existingPassword: string,\n    newPassword: string,\n  ): Promise<void> {\n    const accessToken = await this.getAccessToken()\n    await this.cognitoIdentityProviderClient.send(\n      new ChangePasswordCommand({\n        AccessToken: accessToken || '',\n        PreviousPassword: existingPassword,\n        ProposedPassword: newPassword,\n      }),\n    )\n  }\n  async confirmForgotPassword({\n    username,\n    code,\n    password,\n  }: {\n    username: string\n    code: string\n    password: string\n  }) {\n    await this.cognitoIdentityProviderClient.send(\n      new ConfirmForgotPasswordCommand({\n        ClientId: this.clientId,\n        ConfirmationCode: code,\n        Password: password,\n        Username: username,\n      }),\n    )\n  }\n\n  logoutHostedUI(): void {\n    const loginDomain = this.loginDomain\n    const logoutUri = this.logoutUri\n    if (!loginDomain || !logoutUri) {\n      throw new TypeError(\n        '\"loginDomain\" or \"logoutUri\" was not passed to constructor. Both are required before attempting to logout.',\n      )\n    }\n\n    window.location.href =\n      `https://${loginDomain}/logout` +\n      '?client_id=' +\n      encodeURIComponent(this.clientId) +\n      '&logout_uri=' +\n      encodeURIComponent(logoutUri)\n  }\n\n  async logout(): Promise<void> {\n    try {\n      const refreshToken = this._getRefreshToken()\n      // Refresh session to allow access token to perform sign out\n      if (refreshToken) {\n        await this._refreshSession()\n      }\n\n      const accessToken = this._getAccessToken()\n      if (accessToken) {\n        await this.cognitoIdentityProviderClient.send(\n          new GlobalSignOutCommand({\n            AccessToken: accessToken,\n          }),\n        )\n      }\n    } catch (error) {\n      if (!(error as OneBlinkAppsError).requiresLogin) {\n        throw error\n      }\n    } finally {\n      this._removeAuthenticationResult()\n    }\n  }\n\n  async getIdToken(): Promise<string | undefined> {\n    await this._refreshSession()\n\n    return this._getIdToken()\n  }\n\n  async getAccessToken(): Promise<string | undefined> {\n    await this._refreshSession()\n\n    return this._getAccessToken()\n  }\n\n  async getMfaSettings(abortSignal?: AbortSignal): Promise<MfaSettings> {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return DEFAULT_MFA_SETTINGS\n    }\n\n    const user = await this.cognitoIdentityProviderClient.send(\n      new GetUserCommand({\n        AccessToken: accessToken,\n      }),\n      { abortSignal },\n    )\n\n    const mfaList = user.UserMFASettingList || []\n    const preferredMfaSetting = user.PreferredMfaSetting\n    const phoneNumber = user.UserAttributes?.find(\n      (attribute) => attribute.Name === 'phone_number',\n    )?.Value\n    const isPhoneNumberVerified =\n      user.UserAttributes?.find(\n        (attribute) => attribute.Name === 'phone_number_verified',\n      )?.Value === 'true'\n\n    const authenticatorEnabled = mfaList.includes('SOFTWARE_TOKEN_MFA')\n    const smsEnabled = mfaList.includes('SMS_MFA')\n    const { authenticatorPreferred, smsPreferred } = resolveMfaPreferredFlags({\n      authenticatorEnabled,\n      smsEnabled,\n      preferredMfaSetting,\n    })\n\n    return {\n      authenticator: {\n        enabled: authenticatorEnabled,\n        preferred: authenticatorPreferred,\n      },\n      sms: {\n        enabled: smsEnabled,\n        preferred: smsPreferred,\n        phoneNumber,\n        isPhoneNumberVerified,\n      },\n    }\n  }\n\n  async updateUserPhoneNumber(\n    phoneNumber: string,\n  ): Promise<{ isPhoneNumberVerified: boolean }> {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return { isPhoneNumberVerified: false }\n    }\n\n    await this.cognitoIdentityProviderClient.send(\n      new UpdateUserAttributesCommand({\n        AccessToken: accessToken,\n        UserAttributes: [\n          {\n            Name: 'phone_number',\n            Value: phoneNumber,\n          },\n        ],\n      }),\n    )\n\n    const mfaSettings = await this.getMfaSettings()\n    return { isPhoneNumberVerified: mfaSettings.sms.isPhoneNumberVerified }\n  }\n\n  async removeUserPhoneNumber() {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    await this.cognitoIdentityProviderClient.send(\n      new DeleteUserAttributesCommand({\n        AccessToken: accessToken,\n        UserAttributeNames: ['phone_number'],\n      }),\n    )\n  }\n\n  async verifyUserPhoneNumber(code: string) {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    await this.cognitoIdentityProviderClient.send(\n      new VerifyUserAttributeCommand({\n        AccessToken: accessToken,\n        AttributeName: 'phone_number',\n        Code: code,\n      }),\n    )\n  }\n\n  async setPreferredMfaMethod(method: MfaMethod) {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    const currentSettings = await this.getMfaSettings()\n\n    await this.cognitoIdentityProviderClient.send(\n      new SetUserMFAPreferenceCommand({\n        AccessToken: accessToken,\n        ...(currentSettings.authenticator.enabled\n          ? {\n              SoftwareTokenMfaSettings: {\n                Enabled: true,\n                PreferredMfa: method === 'authenticator',\n              },\n            }\n          : {}),\n        ...(currentSettings.sms.enabled\n          ? {\n              SMSMfaSettings: {\n                Enabled: true,\n                PreferredMfa: method === 'sms',\n              },\n            }\n          : {}),\n      }),\n    )\n  }\n\n  async disableMfaMethod(method: MfaMethod) {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    const currentSettings = await this.getMfaSettings()\n    const wasPreferred =\n      method === 'authenticator'\n        ? currentSettings.authenticator.preferred\n        : currentSettings.sms.preferred\n    const otherMethod: MfaMethod =\n      method === 'authenticator' ? 'sms' : 'authenticator'\n    const otherSettings =\n      method === 'authenticator'\n        ? currentSettings.sms\n        : currentSettings.authenticator\n\n    await this.cognitoIdentityProviderClient.send(\n      new SetUserMFAPreferenceCommand({\n        AccessToken: accessToken,\n        ...(method === 'authenticator'\n          ? {\n              SoftwareTokenMfaSettings: {\n                Enabled: false,\n                PreferredMfa: false,\n              },\n            }\n          : {\n              SMSMfaSettings: {\n                Enabled: false,\n                PreferredMfa: false,\n              },\n            }),\n        ...(wasPreferred && otherSettings.enabled\n          ? otherMethod === 'authenticator'\n            ? {\n                SoftwareTokenMfaSettings: {\n                  Enabled: true,\n                  PreferredMfa: true,\n                },\n              }\n            : {\n                SMSMfaSettings: {\n                  Enabled: true,\n                  PreferredMfa: true,\n                },\n              }\n          : {}),\n      }),\n    )\n  }\n\n  async setupSmsMfa({ preferred }: { preferred?: boolean } = {}) {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    const currentSettings = await this.getMfaSettings()\n    const hasPreferredMethod =\n      (currentSettings.authenticator.enabled &&\n        currentSettings.authenticator.preferred) ||\n      (currentSettings.sms.enabled && currentSettings.sms.preferred)\n    const shouldBePreferred =\n      preferred ?? (!hasPreferredMethod && !currentSettings.sms.enabled)\n\n    await this.cognitoIdentityProviderClient.send(\n      new SetUserMFAPreferenceCommand({\n        AccessToken: accessToken,\n        SMSMfaSettings: {\n          Enabled: true,\n          PreferredMfa: shouldBePreferred,\n        },\n        ...(shouldBePreferred && currentSettings.authenticator.enabled\n          ? {\n              SoftwareTokenMfaSettings: {\n                Enabled: true,\n                PreferredMfa: false,\n              },\n            }\n          : {}),\n      }),\n    )\n  }\n\n  async setupMfaAuthenticatorApp({ preferred }: { preferred?: boolean } = {}) {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    const { SecretCode } = await this.cognitoIdentityProviderClient.send(\n      new AssociateSoftwareTokenCommand({\n        AccessToken: accessToken,\n      }),\n    )\n\n    return {\n      secretCode: SecretCode,\n      mfaCodeCallback: async (code: string) => {\n        await this.cognitoIdentityProviderClient.send(\n          new VerifySoftwareTokenCommand({\n            AccessToken: accessToken,\n            UserCode: code,\n          }),\n        )\n\n        const currentSettings = await this.getMfaSettings()\n        const hasPreferredMethod =\n          (currentSettings.authenticator.enabled &&\n            currentSettings.authenticator.preferred) ||\n          (currentSettings.sms.enabled && currentSettings.sms.preferred)\n        const shouldBePreferred =\n          preferred ??\n          (!hasPreferredMethod && !currentSettings.authenticator.enabled)\n\n        await this.cognitoIdentityProviderClient.send(\n          new SetUserMFAPreferenceCommand({\n            SoftwareTokenMfaSettings: {\n              Enabled: true,\n              PreferredMfa: shouldBePreferred,\n            },\n            ...(shouldBePreferred && currentSettings.sms.enabled\n              ? {\n                  SMSMfaSettings: {\n                    Enabled: true,\n                    PreferredMfa: false,\n                  },\n                }\n              : {}),\n            AccessToken: accessToken,\n          }),\n        )\n      },\n    }\n  }\n}\n\n//////////////////////////////////////////////////////////////////////\n// GENERAL HELPER FUNCTIONS\n\n// Make a POST request and parse the response as JSON\nfunction sendPostRequest(\n  url: string,\n  params: Record<string, unknown>,\n  success: (value: Record<string, unknown>) => void,\n  error: (err: { message?: string; error_description?: string }) => void,\n) {\n  const request = new XMLHttpRequest()\n  request.open('POST', url, true)\n  request.setRequestHeader(\n    'Content-Type',\n    'application/x-www-form-urlencoded; charset=UTF-8',\n  )\n  request.onload = function () {\n    let body = {}\n    try {\n      body = JSON.parse(request.response)\n    } catch (e) {\n      Sentry.captureException(e)\n      // Do nothing\n    }\n\n    if (request.status == 200) {\n      success(body)\n    } else {\n      error(body)\n    }\n  }\n  request.onerror = function () {\n    error({})\n  }\n  const body = Object.keys(params)\n    .reduce((keys: string[], key) => {\n      if (params[key]) {\n        keys.push(key + '=' + params[key])\n      }\n      return keys\n    }, [])\n    .join('&')\n  request.send(body)\n}\n\n//////////////////////////////////////////////////////////////////////\n// PKCE HELPER FUNCTIONS\n\n// Generate a secure random string using the browser crypto functions\nfunction generateRandomString() {\n  const array = new Uint32Array(28)\n  window.crypto.getRandomValues(array)\n  return Array.from(array, (dec) => ('0' + dec.toString(16)).substr(-2)).join(\n    '',\n  )\n}\n\n// Calculate the SHA256 hash of the input text.\n// Returns a promise that resolves to an ArrayBuffer\nfunction sha256(plain: string) {\n  const encoder = new TextEncoder()\n  const data = encoder.encode(plain)\n  return window.crypto.subtle.digest('SHA-256', data)\n}\n\n// Base64-urlencodes the input string\nfunction base64urlencode(str: ArrayBuffer) {\n  // Convert the ArrayBuffer to string using Uint8 array to conver to what btoa accepts.\n  // btoa accepts chars only within ascii 0-255 and base64 encodes them.\n  // Then convert the base64 encoded to base64url encoded\n  //   (replace + with -, replace / with _, trim trailing =)\n  // @ts-expect-error\n  return btoa(String.fromCharCode.apply(null, new Uint8Array(str)))\n    .replace(/\\+/g, '-')\n    .replace(/\\//g, '_')\n    .replace(/=+$/, '')\n}\n\n// Return the base64-urlencoded sha256 hash for the PKCE challenge\nasync function pkceChallengeFromVerifier(v: string) {\n  const hashed = await sha256(v)\n  return base64urlencode(hashed)\n}\n"]}
+{"version":3,"file":"AWSCognitoClient.js","sourceRoot":"","sources":["../../../src/apps/services/AWSCognitoClient.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,6BAA6B,EAE7B,qBAAqB,EACrB,6BAA6B,EAC7B,4BAA4B,EAC5B,2BAA2B,EAC3B,cAAc,EACd,oBAAoB,EACpB,mBAAmB,EAEnB,6BAA6B,EAC7B,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,2CAA2C,CAAA;AAClD,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AACtC,OAAO,MAAM,MAAM,WAAW,CAAA;AAC9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,IAAI,CAAA;AAuBtC,MAAM,CAAC,MAAM,oBAAoB,GAAgB;IAC/C,qBAAqB,EAAE,gBAAgB;IACvC,aAAa,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE;IACnD,GAAG,EAAE;QACH,OAAO,EAAE,KAAK;QACd,SAAS,EAAE,KAAK;QAChB,WAAW,EAAE,SAAS;QACtB,qBAAqB,EAAE,KAAK;KAC7B;CACF,CAAA;AAED,MAAM,UAAU,wBAAwB,CACtC,OAA2B;IAE3B,IAAI,OAAO,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,SAAS,CAA2B,OAAO,CAAC,CAAA;YAC5D,QAAQ,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC3B,KAAK,oBAAoB,CAAC;gBAC1B,KAAK,SAAS;oBACZ,OAAO,OAAO,CAAC,UAAU,CAAA;YAC7B,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CACV,wDAAwD,EACxD,KAAK,CACN,CAAA;YACD,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAChC,CAAC;IACH,CAAC;IACD,OAAO,gBAAgB,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,EACvC,oBAAoB,EACpB,UAAU,EACV,mBAAmB,GAKpB;IAIC,MAAM,6BAA6B,GACjC,mBAAmB,KAAK,oBAAoB,CAAA;IAC9C,MAAM,mBAAmB,GAAG,mBAAmB,KAAK,SAAS,CAAA;IAE7D,IAAI,6BAA6B,IAAI,oBAAoB,EAAE,CAAC;QAC1D,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;IAC9D,CAAC;IAED,IAAI,mBAAmB,IAAI,UAAU,EAAE,CAAC;QACtC,OAAO,EAAE,sBAAsB,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,CAAA;IAC9D,CAAC;IAED,IAAI,oBAAoB,IAAI,UAAU,EAAE,CAAC;QACvC,OAAO,EAAE,sBAAsB,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;IAC9D,CAAC;IAED,OAAO;QACL,sBAAsB,EAAE,oBAAoB;QAC5C,YAAY,EAAE,UAAU;KACzB,CAAA;AACH,CAAC;AAaD,MAAM,CAAC,OAAO,OAAO,gBAAgB;IAQnC,YAAY,EACV,QAAQ,EACR,MAAM,EACN,WAAW,EACX,WAAW,EACX,SAAS,GAOV;QACC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;QAC9D,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAA;QAC5D,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,EAAE,CAAA;QACnB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;QAC9B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,6BAA6B,GAAG,IAAI,6BAA6B,CAAC;YACrE,MAAM;SACP,CAAC,CAAA;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,UAAU;QACZ,OAAO,WAAW,IAAI,CAAC,QAAQ,aAAa,CAAA;IAC9C,CAAC;IACD,IAAI,YAAY;QACd,OAAO,WAAW,IAAI,CAAC,QAAQ,eAAe,CAAA;IAChD,CAAC;IACD,IAAI,QAAQ;QACV,OAAO,WAAW,IAAI,CAAC,QAAQ,WAAW,CAAA;IAC5C,CAAC;IACD,IAAI,aAAa;QACf,OAAO,WAAW,IAAI,CAAC,QAAQ,gBAAgB,CAAA;IACjD,CAAC;IACD,IAAI,KAAK;QACP,OAAO,WAAW,IAAI,CAAC,QAAQ,QAAQ,CAAA;IACzC,CAAC;IACD,IAAI,kBAAkB;QACpB,OAAO,WAAW,IAAI,CAAC,QAAQ,qBAAqB,CAAA;IACtD,CAAC;IAED,iBAAiB;QACf,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,EAAE,CAAA;YACZ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;gBAC9B,8BAA8B;gBAC9B,OAAO,CAAC,IAAI,CAAC,iCAAiC,EAAE,KAAK,CAAC,CAAA;YACxD,CAAC;QACH,CAAC;IACH,CAAC;IAED,0BAA0B,CAAC,oBAA8C;QACvE,qFAAqF;QACrF,MAAM,SAAS,GACZ,oBAAoB,CAAC,SAAoB,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;QACvE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC3D,YAAY,CAAC,OAAO,CAClB,IAAI,CAAC,YAAY,EACjB,oBAAoB,CAAC,WAAqB,CAC3C,CAAA;QACD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,OAAiB,CAAC,CAAA;QAC3E,IAAI,oBAAoB,CAAC,YAAY,EAAE,CAAC;YACtC,YAAY,CAAC,OAAO,CAClB,IAAI,CAAC,aAAa,EAClB,oBAAoB,CAAC,YAAY,CAClC,CAAA;QACH,CAAC;QAED,IAAI,CAAC,iBAAiB,EAAE,CAAA;IAC1B,CAAC;IAED,2BAA2B;QACzB,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACxC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC1C,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACtC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;QAE3C,IAAI,CAAC,iBAAiB,EAAE,CAAA;IAC1B,CAAC;IAED,eAAe;QACb,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,SAAS,CAAA;IAC7D,CAAC;IAED,WAAW;QACT,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAA;IACzD,CAAC;IAED,gBAAgB;QACd,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,SAAS,CAAA;IAC9D,CAAC;IAED,eAAe;QACb,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;QACvD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC7C,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,IAAI,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;YAC3B,OAAM;QACR,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAA;QAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAM;QACR,CAAC;QAED,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC1D,IAAI,mBAAmB,CAAC;gBACtB,QAAQ,EAAE,oBAAoB;gBAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;gBACvB,cAAc,EAAE;oBACd,aAAa,EAAE,YAAY;iBAC5B;aACF,CAAC,CACH,CAAA;YACD,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;gBAChC,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAA;YAC9D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,IAAI,CAAC,2CAA2C,EAAE,KAAK,CAAC,CAAA;YAChE,IAAI,CAAC,2BAA2B,EAAE,CAAA;YAClC,MAAM,IAAI,iBAAiB,CACzB,kFAAkF,EAClF;gBACE,aAAa,EAAE,IAAI;gBACnB,aAAa,EAAE,KAAc;aAC9B,CACF,CAAA;QACH,CAAC;IACH,CAAC;IAED,gBAAgB,CAAC,QAAuB;QACtC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAE7B,OAAO,GAAG,EAAE;YACV,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;YAC9C,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;YACjC,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,QAAgB,EAChB,oBAA0C,EAC1C,QAAiB;QAEjB,IAAI,oBAAoB,CAAC,oBAAoB,EAAE,CAAC;YAC9C,IAAI,CAAC,0BAA0B,CAAC,oBAAoB,CAAC,oBAAoB,CAAC,CAAA;YAC1E,OAAO,EAAE,CAAA;QACX,CAAC;QAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,aAAa,CAAA;QACxD,QAAQ,aAAa,EAAE,CAAC;YACtB,KAAK,uBAAuB,CAAC,CAAC,CAAC;gBAC7B,OAAO;oBACL,qBAAqB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE;wBAC3C,MAAM,mBAAmB,GACvB,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,6BAA6B,CAAC;4BAChC,aAAa;4BACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;4BACvB,OAAO,EAAE,oBAAoB,CAAC,OAAO;4BACrC,kBAAkB,EAAE;gCAClB,QAAQ,EAAE,QAAQ;gCAClB,YAAY,EAAE,WAAW;6BAC1B;yBACF,CAAC,CACH,CAAA;wBACH,OAAO,MAAM,IAAI,CAAC,uBAAuB,CACvC,QAAQ,EACR,mBAAmB,EACnB,WAAW,CACZ,CAAA;oBACH,CAAC;iBACF,CAAA;YACH,CAAC;YACD,KAAK,oBAAoB,CAAC,CAAC,CAAC;gBAC1B,OAAO;oBACL,GAAG,EAAE;wBACH,MAAM,EAAE,eAAe;wBACvB,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;4BAC3B,MAAM,mBAAmB,GACvB,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,6BAA6B,CAAC;gCAChC,aAAa;gCACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;gCACvB,OAAO,EAAE,oBAAoB,CAAC,OAAO;gCACrC,kBAAkB,EAAE;oCAClB,QAAQ,EAAE,QAAQ;oCAClB,uBAAuB,EAAE,IAAI;iCAC9B;6BACF,CAAC,CACH,CAAA;4BACH,OAAO,MAAM,IAAI,CAAC,uBAAuB,CACvC,QAAQ,EACR,mBAAmB,EACnB,QAAQ,CACT,CAAA;wBACH,CAAC;wBACD,kBAAkB,EAAE,SAAS;qBAC9B;iBACF,CAAA;YACH,CAAC;YACD,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;YAC/C,CAAC;YACD,KAAK,SAAS,CAAC,CAAC,CAAC;gBACf,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,CAAC;oBAClC,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAA;gBACH,CAAC;gBAED,OAAO;oBACL,GAAG,EAAE;wBACH,MAAM,EAAE,KAAK;wBACb,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;4BAC3B,MAAM,kBAAkB,GACtB,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,6BAA6B,CAAC;gCAChC,aAAa;gCACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;gCACvB,OAAO,EAAE,oBAAoB,CAAC,OAAO;gCACrC,kBAAkB,EAAE;oCAClB,QAAQ,EAAE,QAAQ;oCAClB,YAAY,EAAE,IAAI;iCACnB;6BACF,CAAC,CACH,CAAA;4BACH,OAAO,MAAM,IAAI,CAAC,uBAAuB,CACvC,QAAQ,EACR,kBAAkB,EAClB,QAAQ,CACT,CAAA;wBACH,CAAC;wBACD,kBAAkB,EAAE,KAAK,IAAI,EAAE;;4BAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;gCACd,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAA;4BACH,CAAC;4BAED,MAAM,oBAAoB,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAC3D,QAAQ,EACR,QAAQ,CACT,CAAA;4BAED,IAAI,CAAA,MAAA,oBAAoB,CAAC,GAAG,0CAAE,MAAM,MAAK,KAAK,EAAE,CAAC;gCAC/C,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAA;4BACH,CAAC;4BAED,OAAO,oBAAoB,CAAA;wBAC7B,CAAC;qBACF;iBACF,CAAA;YACH,CAAC;QACH,CAAC;QAED,OAAO,CAAC,IAAI,CACV,uFAAuF,EACvF,oBAAoB,CACrB,CAAA;QACD,MAAM,IAAI,KAAK,CACb,mIAAmI,CACpI,CAAA;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,QAAgB,EAChB,QAAgB;QAEhB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC/D,IAAI,mBAAmB,CAAC;YACtB,QAAQ,EAAE,oBAAoB;YAC9B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,cAAc,EAAE;gBACd,QAAQ,EAAE,QAAQ;gBAClB,QAAQ,EAAE,QAAQ;aACnB;SACF,CAAC,CACH,CAAA;QAED,OAAO,MAAM,IAAI,CAAC,uBAAuB,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAA;IAC5E,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,oBAA6B;QAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACpC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CACjB,6GAA6G,CAC9G,CAAA;QACH,CAAC;QAED,0CAA0C;QAC1C,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAA;QACpC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAEvC,0EAA0E;QAC1E,MAAM,YAAY,GAAG,oBAAoB,EAAE,CAAA;QAC3C,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,YAAY,CAAC,CAAA;QAE3D,+DAA+D;QAC/D,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,YAAY,CAAC,CAAA;QAEpE,MAAM,CAAC,QAAQ,CAAC,IAAI;YAClB,WAAW,WAAW,mBAAmB;gBACzC,qBAAqB;gBACrB,aAAa;gBACb,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACjC,SAAS;gBACT,kBAAkB,CAAC,KAAK,CAAC;gBACzB,SAAS;gBACT,kBAAkB,CAAC,oDAAoD,CAAC;gBACxE,gBAAgB;gBAChB,kBAAkB,CAAC,WAAW,CAAC;gBAC/B,kBAAkB;gBAClB,kBAAkB,CAAC,cAAc,CAAC;gBAClC,6BAA6B;gBAC7B,CAAC,oBAAoB;oBACnB,CAAC,CAAC,qBAAqB,GAAG,kBAAkB,CAAC,oBAAoB,CAAC;oBAClE,CAAC,CAAC,EAAE,CAAC,CAAA;IACX,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACpC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACpC,IAAI,CAAC,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;YACjC,MAAM,IAAI,SAAS,CACjB,sHAAsH,CACvH,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;QACzD,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACrC,MAAM,qBAAqB,GAAG,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAA;QAE5D,+CAA+C;QAC/C,IAAI,OAAO,UAAU,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,MACX,OAAO,qBAAqB,KAAK,QAAQ;gBACvC,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,gCACN,EAAE,CACH,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;QACtE,CAAC;QAED,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAA;QAClC,CAAC;QAED,MAAM,aAAa,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAEnE,kDAAkD;QAClD,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QAEhD,sDAAsD;QACtD,MAAM,MAAM,GAA4B,MAAM,IAAI,OAAO,CACvD,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClB,eAAe,CACb,WAAW,WAAW,eAAe,EACrC;gBACE,UAAU,EAAE,oBAAoB;gBAChC,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,QAAQ;gBACxB,YAAY,EAAE,WAAW;gBACzB,aAAa;aACd,EACD,OAAO,EACP,CAAC,KAAK,EAAE,EAAE;gBACR,MAAM,CACJ,IAAI,KAAK,CACP,KAAK,CAAC,iBAAiB;oBACrB,KAAK,CAAC,OAAO;oBACb,oEAAoE,CACvE,CACF,CAAA;YACH,CAAC,CACF,CAAA;QACH,CAAC,CACF,CAAA;QAED,IAAI,CAAC,0BAA0B,CAAC;YAC9B,WAAW,EAAE,MAAM,CAAC,YAAsB;YAC1C,SAAS,EAAE,MAAM,CAAC,UAAoB;YACtC,OAAO,EAAE,MAAM,CAAC,QAAkB;YAClC,SAAS,EAAE,MAAM,CAAC,UAAoB;YACtC,YAAY,EAAE,MAAM,CAAC,aAAuB;SAC7C,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,gBAAwB,EACxB,WAAmB;QAEnB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,qBAAqB,CAAC;YACxB,WAAW,EAAE,WAAW,IAAI,EAAE;YAC9B,gBAAgB,EAAE,gBAAgB;YAClC,gBAAgB,EAAE,WAAW;SAC9B,CAAC,CACH,CAAA;IACH,CAAC;IACD,KAAK,CAAC,qBAAqB,CAAC,EAC1B,QAAQ,EACR,IAAI,EACJ,QAAQ,GAKT;QACC,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,4BAA4B,CAAC;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,gBAAgB,EAAE,IAAI;YACtB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,QAAQ;SACnB,CAAC,CACH,CAAA;IACH,CAAC;IAED,cAAc;QACZ,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACpC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAA;QAChC,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,MAAM,IAAI,SAAS,CACjB,4GAA4G,CAC7G,CAAA;QACH,CAAC;QAED,MAAM,CAAC,QAAQ,CAAC,IAAI;YAClB,WAAW,WAAW,SAAS;gBAC/B,aAAa;gBACb,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACjC,cAAc;gBACd,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACjC,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC;YACH,MAAM,YAAY,GAAG,IAAI,CAAC,gBAAgB,EAAE,CAAA;YAC5C,4DAA4D;YAC5D,IAAI,YAAY,EAAE,CAAC;gBACjB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;YAC9B,CAAC;YAED,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAA;YAC1C,IAAI,WAAW,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,oBAAoB,CAAC;oBACvB,WAAW,EAAE,WAAW;iBACzB,CAAC,CACH,CAAA;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAE,KAA2B,CAAC,aAAa,EAAE,CAAC;gBAChD,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,2BAA2B,EAAE,CAAA;QACpC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU;QACd,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;QAE5B,OAAO,IAAI,CAAC,WAAW,EAAE,CAAA;IAC3B,CAAC;IAED,KAAK,CAAC,cAAc;QAClB,MAAM,IAAI,CAAC,eAAe,EAAE,CAAA;QAE5B,OAAO,IAAI,CAAC,eAAe,EAAE,CAAA;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAyB;;QAC5C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,oBAAoB,CAAA;QAC7B,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CACxD,IAAI,cAAc,CAAC;gBACjB,WAAW,EAAE,WAAW;aACzB,CAAC,EACF,EAAE,WAAW,EAAE,CAChB,CAAA;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,IAAI,EAAE,CAAA;YAC7C,MAAM,mBAAmB,GAAG,IAAI,CAAC,mBAAmB,CAAA;YACpD,MAAM,WAAW,GAAG,MAAA,MAAA,IAAI,CAAC,cAAc,0CAAE,IAAI,CAC3C,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,cAAc,CACjD,0CAAE,KAAK,CAAA;YACR,MAAM,qBAAqB,GACzB,CAAA,MAAA,MAAA,IAAI,CAAC,cAAc,0CAAE,IAAI,CACvB,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,uBAAuB,CAC1D,0CAAE,KAAK,MAAK,MAAM,CAAA;YAErB,MAAM,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAA;YACnE,MAAM,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;YAC9C,MAAM,EAAE,sBAAsB,EAAE,YAAY,EAAE,GAAG,wBAAwB,CACvE;gBACE,oBAAoB;gBACpB,UAAU;gBACV,mBAAmB;aACpB,CACF,CAAA;YAED,MAAM,qBAAqB,GAAG,wBAAwB,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;YAE1E,OAAO;gBACL,qBAAqB;gBACrB,aAAa,EAAE;oBACb,OAAO,EAAE,oBAAoB;oBAC7B,SAAS,EAAE,sBAAsB;iBAClC;gBACD,GAAG,EAAE;oBACH,OAAO,EAAE,UAAU;oBACnB,SAAS,EAAE,YAAY;oBACvB,WAAW;oBACX,qBAAqB;iBACtB;aACF,CAAA;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;gBAC5C,OAAO,CAAC,IAAI,CACV,0DAA0D,EAC1D,KAAK,CACN,CAAA;gBACD,IAAI,CAAC,2BAA2B,EAAE,CAAA;gBAClC,OAAO,oBAAoB,CAAA;YAC7B,CAAC;YACD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,WAAmB;QAEnB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAA;QACzC,CAAC;QAED,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;YAC9B,WAAW,EAAE,WAAW;YACxB,cAAc,EAAE;gBACd;oBACE,IAAI,EAAE,cAAc;oBACpB,KAAK,EAAE,WAAW;iBACnB;aACF;SACF,CAAC,CACH,CAAA;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,OAAO,EAAE,qBAAqB,EAAE,WAAW,CAAC,GAAG,CAAC,qBAAqB,EAAE,CAAA;IACzE,CAAC;IAED,KAAK,CAAC,qBAAqB;QACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;YAC9B,WAAW,EAAE,WAAW;YACxB,kBAAkB,EAAE,CAAC,cAAc,CAAC;SACrC,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,IAAY;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,0BAA0B,CAAC;YAC7B,WAAW,EAAE,WAAW;YACxB,aAAa,EAAE,cAAc;YAC7B,IAAI,EAAE,IAAI;SACX,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,MAAiB;QAC3C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAEnD,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;YAC9B,WAAW,EAAE,WAAW;YACxB,GAAG,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO;gBACvC,CAAC,CAAC;oBACE,wBAAwB,EAAE;wBACxB,OAAO,EAAE,IAAI;wBACb,YAAY,EAAE,MAAM,KAAK,eAAe;qBACzC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO;gBAC7B,CAAC,CAAC;oBACE,cAAc,EAAE;wBACd,OAAO,EAAE,IAAI;wBACb,YAAY,EAAE,MAAM,KAAK,KAAK;qBAC/B;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAiB;QACtC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QACnD,MAAM,YAAY,GAChB,MAAM,KAAK,eAAe;YACxB,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,SAAS;YACzC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAA;QACnC,MAAM,WAAW,GACf,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAA;QACtD,MAAM,aAAa,GACjB,MAAM,KAAK,eAAe;YACxB,CAAC,CAAC,eAAe,CAAC,GAAG;YACrB,CAAC,CAAC,eAAe,CAAC,aAAa,CAAA;QAEnC,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;YAC9B,WAAW,EAAE,WAAW;YACxB,GAAG,CAAC,MAAM,KAAK,eAAe;gBAC5B,CAAC,CAAC;oBACE,wBAAwB,EAAE;wBACxB,OAAO,EAAE,KAAK;wBACd,YAAY,EAAE,KAAK;qBACpB;iBACF;gBACH,CAAC,CAAC;oBACE,cAAc,EAAE;wBACd,OAAO,EAAE,KAAK;wBACd,YAAY,EAAE,KAAK;qBACpB;iBACF,CAAC;YACN,GAAG,CAAC,YAAY,IAAI,aAAa,CAAC,OAAO;gBACvC,CAAC,CAAC,WAAW,KAAK,eAAe;oBAC/B,CAAC,CAAC;wBACE,wBAAwB,EAAE;4BACxB,OAAO,EAAE,IAAI;4BACb,YAAY,EAAE,IAAI;yBACnB;qBACF;oBACH,CAAC,CAAC;wBACE,cAAc,EAAE;4BACd,OAAO,EAAE,IAAI;4BACb,YAAY,EAAE,IAAI;yBACnB;qBACF;gBACL,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,EAAE,SAAS,KAA8B,EAAE;QAC3D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QACnD,MAAM,kBAAkB,GACtB,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO;YACpC,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC;YAC1C,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QAChE,MAAM,iBAAiB,GACrB,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAEpE,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;YAC9B,WAAW,EAAE,WAAW;YACxB,cAAc,EAAE;gBACd,OAAO,EAAE,IAAI;gBACb,YAAY,EAAE,iBAAiB;aAChC;YACD,GAAG,CAAC,iBAAiB,IAAI,eAAe,CAAC,aAAa,CAAC,OAAO;gBAC5D,CAAC,CAAC;oBACE,wBAAwB,EAAE;wBACxB,OAAO,EAAE,IAAI;wBACb,YAAY,EAAE,KAAK;qBACpB;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CACH,CAAA;IACH,CAAC;IAED,KAAK,CAAC,wBAAwB,CAAC,EAAE,SAAS,KAA8B,EAAE;QACxE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;QAC/C,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAM;QACR,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAClE,IAAI,6BAA6B,CAAC;YAChC,WAAW,EAAE,WAAW;SACzB,CAAC,CACH,CAAA;QAED,OAAO;YACL,UAAU,EAAE,UAAU;YACtB,eAAe,EAAE,KAAK,EAAE,IAAY,EAAE,EAAE;gBACtC,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,0BAA0B,CAAC;oBAC7B,WAAW,EAAE,WAAW;oBACxB,QAAQ,EAAE,IAAI;iBACf,CAAC,CACH,CAAA;gBAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,cAAc,EAAE,CAAA;gBACnD,MAAM,kBAAkB,GACtB,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO;oBACpC,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC;oBAC1C,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;gBAChE,MAAM,iBAAiB,GACrB,SAAS,aAAT,SAAS,cAAT,SAAS,GACT,CAAC,CAAC,kBAAkB,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,OAAO,CAAC,CAAA;gBAEjE,MAAM,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAC3C,IAAI,2BAA2B,CAAC;oBAC9B,wBAAwB,EAAE;wBACxB,OAAO,EAAE,IAAI;wBACb,YAAY,EAAE,iBAAiB;qBAChC;oBACD,GAAG,CAAC,iBAAiB,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO;wBAClD,CAAC,CAAC;4BACE,cAAc,EAAE;gCACd,OAAO,EAAE,IAAI;gCACb,YAAY,EAAE,KAAK;6BACpB;yBACF;wBACH,CAAC,CAAC,EAAE,CAAC;oBACP,WAAW,EAAE,WAAW;iBACzB,CAAC,CACH,CAAA;YACH,CAAC;SACF,CAAA;IACH,CAAC;CACF;AAED,sEAAsE;AACtE,2BAA2B;AAE3B,qDAAqD;AACrD,SAAS,eAAe,CACtB,GAAW,EACX,MAA+B,EAC/B,OAAiD,EACjD,KAAsE;IAEtE,MAAM,OAAO,GAAG,IAAI,cAAc,EAAE,CAAA;IACpC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAA;IAC/B,OAAO,CAAC,gBAAgB,CACtB,cAAc,EACd,kDAAkD,CACnD,CAAA;IACD,OAAO,CAAC,MAAM,GAAG;QACf,IAAI,IAAI,GAAG,EAAE,CAAA;QACb,IAAI,CAAC;YACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAA;YAC1B,aAAa;QACf,CAAC;QAED,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YAC1B,OAAO,CAAC,IAAI,CAAC,CAAA;QACf,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,CAAA;QACb,CAAC;IACH,CAAC,CAAA;IACD,OAAO,CAAC,OAAO,GAAG;QAChB,KAAK,CAAC,EAAE,CAAC,CAAA;IACX,CAAC,CAAA;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SAC7B,MAAM,CAAC,CAAC,IAAc,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAA;QACpC,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC,EAAE,EAAE,CAAC;SACL,IAAI,CAAC,GAAG,CAAC,CAAA;IACZ,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACpB,CAAC;AAED,sEAAsE;AACtE,wBAAwB;AAExB,qEAAqE;AACrE,SAAS,oBAAoB;IAC3B,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAA;IACjC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IACpC,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CACzE,EAAE,CACH,CAAA;AACH,CAAC;AAED,+CAA+C;AAC/C,oDAAoD;AACpD,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAClC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAA;AACrD,CAAC;AAED,qCAAqC;AACrC,SAAS,eAAe,CAAC,GAAgB;IACvC,sFAAsF;IACtF,sEAAsE;IACtE,uDAAuD;IACvD,0DAA0D;IAC1D,mBAAmB;IACnB,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;SAC9D,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;AACvB,CAAC;AAED,kEAAkE;AAClE,KAAK,UAAU,yBAAyB,CAAC,CAAS;IAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,CAAA;IAC9B,OAAO,eAAe,CAAC,MAAM,CAAC,CAAA;AAChC,CAAC","sourcesContent":["import {\n  AssociateSoftwareTokenCommand,\n  AuthenticationResultType,\n  ChangePasswordCommand,\n  CognitoIdentityProviderClient,\n  ConfirmForgotPasswordCommand,\n  DeleteUserAttributesCommand,\n  GetUserCommand,\n  GlobalSignOutCommand,\n  InitiateAuthCommand,\n  InitiateAuthResponse,\n  RespondToAuthChallengeCommand,\n  SetUserMFAPreferenceCommand,\n  UpdateUserAttributesCommand,\n  VerifySoftwareTokenCommand,\n  VerifyUserAttributeCommand,\n  NotAuthorizedException,\n} from '@aws-sdk/client-cognito-identity-provider'\nimport { jwtDecode } from 'jwt-decode'\nimport Sentry from '../Sentry'\nimport { OneBlinkAppsError } from '..'\n\nexport type MfaMethod = 'authenticator' | 'sms'\n\nexport type LoggedInMfaMethod =\n  | 'SOFTWARE_TOKEN_MFA'\n  | 'SMS_MFA'\n  | 'NO_MFA_ENABLED'\n\nexport type MfaSettings = {\n  loggedInWithMfaMethod: LoggedInMfaMethod\n  authenticator: {\n    enabled: boolean\n    preferred: boolean\n  }\n  sms: {\n    enabled: boolean\n    preferred: boolean\n    phoneNumber: string | undefined\n    isPhoneNumberVerified: boolean\n  }\n}\n\nexport const DEFAULT_MFA_SETTINGS: MfaSettings = {\n  loggedInWithMfaMethod: 'NO_MFA_ENABLED',\n  authenticator: { enabled: false, preferred: false },\n  sms: {\n    enabled: false,\n    preferred: false,\n    phoneNumber: undefined,\n    isPhoneNumberVerified: false,\n  },\n}\n\nexport function resolveLoggedInMfaMethod(\n  idToken: string | undefined,\n): LoggedInMfaMethod {\n  if (idToken) {\n    try {\n      const payload = jwtDecode<{ mfa_method?: unknown }>(idToken)\n      switch (payload.mfa_method) {\n        case 'SOFTWARE_TOKEN_MFA':\n        case 'SMS_MFA':\n          return payload.mfa_method\n      }\n    } catch (error) {\n      console.warn(\n        'Error while decoding id token for logged in MFA method',\n        error,\n      )\n      Sentry.captureException(error)\n    }\n  }\n  return 'NO_MFA_ENABLED'\n}\n\nexport function resolveMfaPreferredFlags({\n  authenticatorEnabled,\n  smsEnabled,\n  preferredMfaSetting,\n}: {\n  authenticatorEnabled: boolean\n  smsEnabled: boolean\n  preferredMfaSetting: string | undefined\n}): {\n  authenticatorPreferred: boolean\n  smsPreferred: boolean\n} {\n  const cognitoAuthenticatorPreferred =\n    preferredMfaSetting === 'SOFTWARE_TOKEN_MFA'\n  const cognitoSmsPreferred = preferredMfaSetting === 'SMS_MFA'\n\n  if (cognitoAuthenticatorPreferred && authenticatorEnabled) {\n    return { authenticatorPreferred: true, smsPreferred: false }\n  }\n\n  if (cognitoSmsPreferred && smsEnabled) {\n    return { authenticatorPreferred: false, smsPreferred: true }\n  }\n\n  if (authenticatorEnabled && smsEnabled) {\n    return { authenticatorPreferred: true, smsPreferred: false }\n  }\n\n  return {\n    authenticatorPreferred: authenticatorEnabled,\n    smsPreferred: smsEnabled,\n  }\n}\n\nexport type LoginAttemptMfa = {\n  method: MfaMethod\n  codeCallback: (code: string) => Promise<LoginAttemptResponse>\n  resendCodeCallback?: () => Promise<LoginAttemptResponse>\n}\n\nexport type LoginAttemptResponse = {\n  resetPasswordCallback?: (newPassword: string) => Promise<LoginAttemptResponse>\n  mfa?: LoginAttemptMfa\n}\n\nexport default class AWSCognitoClient {\n  clientId: string\n  cognitoIdentityProviderClient: CognitoIdentityProviderClient\n  loginDomain: string | void\n  redirectUri: string | void\n  logoutUri: string | void\n  listeners: Array<() => unknown>\n\n  constructor({\n    clientId,\n    region,\n    loginDomain,\n    redirectUri,\n    logoutUri,\n  }: {\n    clientId: string\n    region: string\n    redirectUri?: string\n    logoutUri?: string\n    loginDomain?: string\n  }) {\n    if (!clientId) {\n      throw new TypeError('\"clientId\" is required in constructor')\n    }\n    if (!region) {\n      throw new TypeError('\"region\" is required in constructor')\n    }\n\n    this.listeners = []\n    this.redirectUri = redirectUri\n    this.logoutUri = logoutUri\n    this.loginDomain = loginDomain\n    this.clientId = clientId\n    this.cognitoIdentityProviderClient = new CognitoIdentityProviderClient({\n      region,\n    })\n  }\n\n  // Local Storage Keys\n  get EXPIRES_AT() {\n    return `COGNITO_${this.clientId}_EXPIRES_AT`\n  }\n  get ACCESS_TOKEN() {\n    return `COGNITO_${this.clientId}_ACCESS_TOKEN`\n  }\n  get ID_TOKEN() {\n    return `COGNITO_${this.clientId}_ID_TOKEN`\n  }\n  get REFRESH_TOKEN() {\n    return `COGNITO_${this.clientId}_REFRESH_TOKEN`\n  }\n  get STATE() {\n    return `COGNITO_${this.clientId}_STATE`\n  }\n  get PKCE_CODE_VERIFIER() {\n    return `COGNITO_${this.clientId}_PKCE_CODE_VERIFIER`\n  }\n\n  _executeListeners() {\n    for (const listener of this.listeners) {\n      try {\n        listener()\n      } catch (error) {\n        Sentry.captureException(error)\n        // Ignore error from listeners\n        console.warn('AWSCognitoClient listener error', error)\n      }\n    }\n  }\n\n  _storeAuthenticationResult(authenticationResult: AuthenticationResultType) {\n    // Take off 5 seconds to ensure a request does not become unauthenticated mid request\n    const expiresAt =\n      (authenticationResult.ExpiresIn as number) * 1000 + Date.now() - 5000\n    localStorage.setItem(this.EXPIRES_AT, expiresAt.toString())\n    localStorage.setItem(\n      this.ACCESS_TOKEN,\n      authenticationResult.AccessToken as string,\n    )\n    localStorage.setItem(this.ID_TOKEN, authenticationResult.IdToken as string)\n    if (authenticationResult.RefreshToken) {\n      localStorage.setItem(\n        this.REFRESH_TOKEN,\n        authenticationResult.RefreshToken,\n      )\n    }\n\n    this._executeListeners()\n  }\n\n  _removeAuthenticationResult() {\n    localStorage.removeItem(this.EXPIRES_AT)\n    localStorage.removeItem(this.ACCESS_TOKEN)\n    localStorage.removeItem(this.ID_TOKEN)\n    localStorage.removeItem(this.REFRESH_TOKEN)\n\n    this._executeListeners()\n  }\n\n  _getAccessToken(): string | undefined {\n    return localStorage.getItem(this.ACCESS_TOKEN) || undefined\n  }\n\n  _getIdToken(): string | undefined {\n    return localStorage.getItem(this.ID_TOKEN) || undefined\n  }\n\n  _getRefreshToken(): string | undefined {\n    return localStorage.getItem(this.REFRESH_TOKEN) || undefined\n  }\n\n  _isSessionValid(): boolean {\n    const expiresAt = localStorage.getItem(this.EXPIRES_AT)\n    if (!expiresAt) {\n      return false\n    }\n    return parseInt(expiresAt, 10) > Date.now()\n  }\n\n  async _refreshSession(): Promise<void> {\n    if (this._isSessionValid()) {\n      return\n    }\n\n    const refreshToken = this._getRefreshToken()\n    if (!refreshToken) {\n      return\n    }\n\n    try {\n      const result = await this.cognitoIdentityProviderClient.send(\n        new InitiateAuthCommand({\n          AuthFlow: 'REFRESH_TOKEN_AUTH',\n          ClientId: this.clientId,\n          AuthParameters: {\n            REFRESH_TOKEN: refreshToken,\n          },\n        }),\n      )\n      if (result.AuthenticationResult) {\n        this._storeAuthenticationResult(result.AuthenticationResult)\n      }\n    } catch (error) {\n      console.warn('Error while attempting to refresh session', error)\n      this._removeAuthenticationResult()\n      throw new OneBlinkAppsError(\n        'Your session has expired. Please login again to continue to use the application.',\n        {\n          requiresLogin: true,\n          originalError: error as Error,\n        },\n      )\n    }\n  }\n\n  registerListener(listener: () => unknown): () => void {\n    this.listeners.push(listener)\n\n    return () => {\n      const index = this.listeners.indexOf(listener)\n      if (index !== -1) {\n        this.listeners.splice(index, 1)\n      }\n    }\n  }\n\n  async responseToAuthChallenge(\n    username: string,\n    initiateAuthResponse: InitiateAuthResponse,\n    password?: string,\n  ): Promise<LoginAttemptResponse> {\n    if (initiateAuthResponse.AuthenticationResult) {\n      this._storeAuthenticationResult(initiateAuthResponse.AuthenticationResult)\n      return {}\n    }\n\n    const ChallengeName = initiateAuthResponse.ChallengeName\n    switch (ChallengeName) {\n      case 'NEW_PASSWORD_REQUIRED': {\n        return {\n          resetPasswordCallback: async (newPassword) => {\n            const resetPasswordResult =\n              await this.cognitoIdentityProviderClient.send(\n                new RespondToAuthChallengeCommand({\n                  ChallengeName,\n                  ClientId: this.clientId,\n                  Session: initiateAuthResponse.Session,\n                  ChallengeResponses: {\n                    USERNAME: username,\n                    NEW_PASSWORD: newPassword,\n                  },\n                }),\n              )\n            return await this.responseToAuthChallenge(\n              username,\n              resetPasswordResult,\n              newPassword,\n            )\n          },\n        }\n      }\n      case 'SOFTWARE_TOKEN_MFA': {\n        return {\n          mfa: {\n            method: 'authenticator',\n            codeCallback: async (code) => {\n              const resetPasswordResult =\n                await this.cognitoIdentityProviderClient.send(\n                  new RespondToAuthChallengeCommand({\n                    ChallengeName,\n                    ClientId: this.clientId,\n                    Session: initiateAuthResponse.Session,\n                    ChallengeResponses: {\n                      USERNAME: username,\n                      SOFTWARE_TOKEN_MFA_CODE: code,\n                    },\n                  }),\n                )\n              return await this.responseToAuthChallenge(\n                username,\n                resetPasswordResult,\n                password,\n              )\n            },\n            resendCodeCallback: undefined,\n          },\n        }\n      }\n      case 'EMAIL_OTP': {\n        throw new Error('Email OTP is not supported')\n      }\n      case 'SMS_MFA': {\n        if (!initiateAuthResponse.Session) {\n          throw new Error(\n            'An unexpected error occurred while attempting to process your login. Please try again or contact support if the problem persists.',\n          )\n        }\n\n        return {\n          mfa: {\n            method: 'sms',\n            codeCallback: async (code) => {\n              const smsChallengeResult =\n                await this.cognitoIdentityProviderClient.send(\n                  new RespondToAuthChallengeCommand({\n                    ChallengeName,\n                    ClientId: this.clientId,\n                    Session: initiateAuthResponse.Session,\n                    ChallengeResponses: {\n                      USERNAME: username,\n                      SMS_MFA_CODE: code,\n                    },\n                  }),\n                )\n              return await this.responseToAuthChallenge(\n                username,\n                smsChallengeResult,\n                password,\n              )\n            },\n            resendCodeCallback: async () => {\n              if (!password) {\n                throw new Error(\n                  'Unable to resend the SMS verification code. Please try signing in again.',\n                )\n              }\n\n              const loginAttemptResponse = await this.loginUsernamePassword(\n                username,\n                password,\n              )\n\n              if (loginAttemptResponse.mfa?.method !== 'sms') {\n                throw new Error(\n                  'Unable to resend the SMS verification code. Please try signing in again.',\n                )\n              }\n\n              return loginAttemptResponse\n            },\n          },\n        }\n      }\n    }\n\n    console.warn(\n      '\"CognitoIdentityServiceProvider.InitiateAuthResponse\" challenge has not been catered.',\n      initiateAuthResponse,\n    )\n    throw new Error(\n      'An unexpected error occurred while attempting to process your login. Please try again or contact support if the problem persists.',\n    )\n  }\n\n  async loginUsernamePassword(\n    username: string,\n    password: string,\n  ): Promise<LoginAttemptResponse> {\n    const loginResult = await this.cognitoIdentityProviderClient.send(\n      new InitiateAuthCommand({\n        AuthFlow: 'USER_PASSWORD_AUTH',\n        ClientId: this.clientId,\n        AuthParameters: {\n          USERNAME: username,\n          PASSWORD: password,\n        },\n      }),\n    )\n\n    return await this.responseToAuthChallenge(username, loginResult, password)\n  }\n\n  async loginHostedUI(identityProviderName?: string): Promise<void> {\n    const loginDomain = this.loginDomain\n    const redirectUri = this.redirectUri\n    if (!loginDomain || !redirectUri) {\n      throw new TypeError(\n        '\"loginDomain\" or \"redirectUri\" was not passed to constructor. Both are required before attempting to login.',\n      )\n    }\n\n    // Create and store a random \"state\" value\n    const state = generateRandomString()\n    localStorage.setItem(this.STATE, state)\n\n    // Create and store a new PKCE code_verifier (the plaintext random secret)\n    const codeVerifier = generateRandomString()\n    localStorage.setItem(this.PKCE_CODE_VERIFIER, codeVerifier)\n\n    // Hash and base64-urlencode the secret to use as the challenge\n    const code_challenge = await pkceChallengeFromVerifier(codeVerifier)\n\n    window.location.href =\n      `https://${loginDomain}/oauth2/authorize` +\n      '?response_type=code' +\n      '&client_id=' +\n      encodeURIComponent(this.clientId) +\n      '&state=' +\n      encodeURIComponent(state) +\n      '&scope=' +\n      encodeURIComponent('openid email profile aws.cognito.signin.user.admin') +\n      '&redirect_uri=' +\n      encodeURIComponent(redirectUri) +\n      '&code_challenge=' +\n      encodeURIComponent(code_challenge) +\n      '&code_challenge_method=S256' +\n      (identityProviderName\n        ? '&identity_provider=' + encodeURIComponent(identityProviderName)\n        : '')\n  }\n\n  async handleAuthentication(): Promise<void> {\n    const loginDomain = this.loginDomain\n    const redirectUri = this.redirectUri\n    if (!loginDomain || !redirectUri) {\n      throw new TypeError(\n        '\"loginDomain\" or \"redirectUri\" was not passed to constructor. Both are required before attempting to handle a login.',\n      )\n    }\n\n    const query = new URLSearchParams(window.location.search)\n    const queryError = query.get('error')\n    const queryErrorDescription = query.get('error_description')\n\n    // Check if the server returned an error string\n    if (typeof queryError === 'string') {\n      throw new Error(\n        `${queryError} - ${\n          typeof queryErrorDescription === 'string'\n            ? queryErrorDescription\n            : 'An unknown error has occurred.'\n        }`,\n      )\n    }\n\n    const code = query.get('code')\n    if (typeof code !== 'string') {\n      throw new Error('\"code\" was not including in query string to parse')\n    }\n\n    if (localStorage.getItem(this.STATE) !== query.get('state')) {\n      throw new Error('Invalid login')\n    }\n\n    const code_verifier = localStorage.getItem(this.PKCE_CODE_VERIFIER)\n\n    // Clean these up since we don't need them anymore\n    localStorage.removeItem(this.STATE)\n    localStorage.removeItem(this.PKCE_CODE_VERIFIER)\n\n    // Exchange the authorization code for an access token\n    const result: Record<string, unknown> = await new Promise(\n      (resolve, reject) => {\n        sendPostRequest(\n          `https://${loginDomain}/oauth2/token`,\n          {\n            grant_type: 'authorization_code',\n            code,\n            client_id: this.clientId,\n            redirect_uri: redirectUri,\n            code_verifier,\n          },\n          resolve,\n          (error) => {\n            reject(\n              new Error(\n                error.error_description ||\n                  error.message ||\n                  'An unknown error has occurred while processing authentication code',\n              ),\n            )\n          },\n        )\n      },\n    )\n\n    this._storeAuthenticationResult({\n      AccessToken: result.access_token as string,\n      ExpiresIn: result.expires_in as number,\n      IdToken: result.id_token as string,\n      TokenType: result.token_type as string,\n      RefreshToken: result.refresh_token as string,\n    })\n  }\n\n  async changePassword(\n    existingPassword: string,\n    newPassword: string,\n  ): Promise<void> {\n    const accessToken = await this.getAccessToken()\n    await this.cognitoIdentityProviderClient.send(\n      new ChangePasswordCommand({\n        AccessToken: accessToken || '',\n        PreviousPassword: existingPassword,\n        ProposedPassword: newPassword,\n      }),\n    )\n  }\n  async confirmForgotPassword({\n    username,\n    code,\n    password,\n  }: {\n    username: string\n    code: string\n    password: string\n  }) {\n    await this.cognitoIdentityProviderClient.send(\n      new ConfirmForgotPasswordCommand({\n        ClientId: this.clientId,\n        ConfirmationCode: code,\n        Password: password,\n        Username: username,\n      }),\n    )\n  }\n\n  logoutHostedUI(): void {\n    const loginDomain = this.loginDomain\n    const logoutUri = this.logoutUri\n    if (!loginDomain || !logoutUri) {\n      throw new TypeError(\n        '\"loginDomain\" or \"logoutUri\" was not passed to constructor. Both are required before attempting to logout.',\n      )\n    }\n\n    window.location.href =\n      `https://${loginDomain}/logout` +\n      '?client_id=' +\n      encodeURIComponent(this.clientId) +\n      '&logout_uri=' +\n      encodeURIComponent(logoutUri)\n  }\n\n  async logout(): Promise<void> {\n    try {\n      const refreshToken = this._getRefreshToken()\n      // Refresh session to allow access token to perform sign out\n      if (refreshToken) {\n        await this._refreshSession()\n      }\n\n      const accessToken = this._getAccessToken()\n      if (accessToken) {\n        await this.cognitoIdentityProviderClient.send(\n          new GlobalSignOutCommand({\n            AccessToken: accessToken,\n          }),\n        )\n      }\n    } catch (error) {\n      if (!(error as OneBlinkAppsError).requiresLogin) {\n        throw error\n      }\n    } finally {\n      this._removeAuthenticationResult()\n    }\n  }\n\n  async getIdToken(): Promise<string | undefined> {\n    await this._refreshSession()\n\n    return this._getIdToken()\n  }\n\n  async getAccessToken(): Promise<string | undefined> {\n    await this._refreshSession()\n\n    return this._getAccessToken()\n  }\n\n  async getMfaSettings(abortSignal?: AbortSignal): Promise<MfaSettings> {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return DEFAULT_MFA_SETTINGS\n    }\n\n    try {\n      const user = await this.cognitoIdentityProviderClient.send(\n        new GetUserCommand({\n          AccessToken: accessToken,\n        }),\n        { abortSignal },\n      )\n\n      const mfaList = user.UserMFASettingList || []\n      const preferredMfaSetting = user.PreferredMfaSetting\n      const phoneNumber = user.UserAttributes?.find(\n        (attribute) => attribute.Name === 'phone_number',\n      )?.Value\n      const isPhoneNumberVerified =\n        user.UserAttributes?.find(\n          (attribute) => attribute.Name === 'phone_number_verified',\n        )?.Value === 'true'\n\n      const authenticatorEnabled = mfaList.includes('SOFTWARE_TOKEN_MFA')\n      const smsEnabled = mfaList.includes('SMS_MFA')\n      const { authenticatorPreferred, smsPreferred } = resolveMfaPreferredFlags(\n        {\n          authenticatorEnabled,\n          smsEnabled,\n          preferredMfaSetting,\n        },\n      )\n\n      const loggedInWithMfaMethod = resolveLoggedInMfaMethod(this._getIdToken())\n\n      return {\n        loggedInWithMfaMethod,\n        authenticator: {\n          enabled: authenticatorEnabled,\n          preferred: authenticatorPreferred,\n        },\n        sms: {\n          enabled: smsEnabled,\n          preferred: smsPreferred,\n          phoneNumber,\n          isPhoneNumberVerified,\n        },\n      }\n    } catch (error) {\n      if (error instanceof NotAuthorizedException) {\n        console.warn(\n          'User session has expired, returning default MFA settings',\n          error,\n        )\n        this._removeAuthenticationResult()\n        return DEFAULT_MFA_SETTINGS\n      }\n      throw error\n    }\n  }\n\n  async updateUserPhoneNumber(\n    phoneNumber: string,\n  ): Promise<{ isPhoneNumberVerified: boolean }> {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return { isPhoneNumberVerified: false }\n    }\n\n    await this.cognitoIdentityProviderClient.send(\n      new UpdateUserAttributesCommand({\n        AccessToken: accessToken,\n        UserAttributes: [\n          {\n            Name: 'phone_number',\n            Value: phoneNumber,\n          },\n        ],\n      }),\n    )\n\n    const mfaSettings = await this.getMfaSettings()\n    return { isPhoneNumberVerified: mfaSettings.sms.isPhoneNumberVerified }\n  }\n\n  async removeUserPhoneNumber() {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    await this.cognitoIdentityProviderClient.send(\n      new DeleteUserAttributesCommand({\n        AccessToken: accessToken,\n        UserAttributeNames: ['phone_number'],\n      }),\n    )\n  }\n\n  async verifyUserPhoneNumber(code: string) {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    await this.cognitoIdentityProviderClient.send(\n      new VerifyUserAttributeCommand({\n        AccessToken: accessToken,\n        AttributeName: 'phone_number',\n        Code: code,\n      }),\n    )\n  }\n\n  async setPreferredMfaMethod(method: MfaMethod) {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    const currentSettings = await this.getMfaSettings()\n\n    await this.cognitoIdentityProviderClient.send(\n      new SetUserMFAPreferenceCommand({\n        AccessToken: accessToken,\n        ...(currentSettings.authenticator.enabled\n          ? {\n              SoftwareTokenMfaSettings: {\n                Enabled: true,\n                PreferredMfa: method === 'authenticator',\n              },\n            }\n          : {}),\n        ...(currentSettings.sms.enabled\n          ? {\n              SMSMfaSettings: {\n                Enabled: true,\n                PreferredMfa: method === 'sms',\n              },\n            }\n          : {}),\n      }),\n    )\n  }\n\n  async disableMfaMethod(method: MfaMethod) {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    const currentSettings = await this.getMfaSettings()\n    const wasPreferred =\n      method === 'authenticator'\n        ? currentSettings.authenticator.preferred\n        : currentSettings.sms.preferred\n    const otherMethod: MfaMethod =\n      method === 'authenticator' ? 'sms' : 'authenticator'\n    const otherSettings =\n      method === 'authenticator'\n        ? currentSettings.sms\n        : currentSettings.authenticator\n\n    await this.cognitoIdentityProviderClient.send(\n      new SetUserMFAPreferenceCommand({\n        AccessToken: accessToken,\n        ...(method === 'authenticator'\n          ? {\n              SoftwareTokenMfaSettings: {\n                Enabled: false,\n                PreferredMfa: false,\n              },\n            }\n          : {\n              SMSMfaSettings: {\n                Enabled: false,\n                PreferredMfa: false,\n              },\n            }),\n        ...(wasPreferred && otherSettings.enabled\n          ? otherMethod === 'authenticator'\n            ? {\n                SoftwareTokenMfaSettings: {\n                  Enabled: true,\n                  PreferredMfa: true,\n                },\n              }\n            : {\n                SMSMfaSettings: {\n                  Enabled: true,\n                  PreferredMfa: true,\n                },\n              }\n          : {}),\n      }),\n    )\n  }\n\n  async setupSmsMfa({ preferred }: { preferred?: boolean } = {}) {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    const currentSettings = await this.getMfaSettings()\n    const hasPreferredMethod =\n      (currentSettings.authenticator.enabled &&\n        currentSettings.authenticator.preferred) ||\n      (currentSettings.sms.enabled && currentSettings.sms.preferred)\n    const shouldBePreferred =\n      preferred ?? (!hasPreferredMethod && !currentSettings.sms.enabled)\n\n    await this.cognitoIdentityProviderClient.send(\n      new SetUserMFAPreferenceCommand({\n        AccessToken: accessToken,\n        SMSMfaSettings: {\n          Enabled: true,\n          PreferredMfa: shouldBePreferred,\n        },\n        ...(shouldBePreferred && currentSettings.authenticator.enabled\n          ? {\n              SoftwareTokenMfaSettings: {\n                Enabled: true,\n                PreferredMfa: false,\n              },\n            }\n          : {}),\n      }),\n    )\n  }\n\n  async setupMfaAuthenticatorApp({ preferred }: { preferred?: boolean } = {}) {\n    const accessToken = await this.getAccessToken()\n    if (!accessToken) {\n      return\n    }\n\n    const { SecretCode } = await this.cognitoIdentityProviderClient.send(\n      new AssociateSoftwareTokenCommand({\n        AccessToken: accessToken,\n      }),\n    )\n\n    return {\n      secretCode: SecretCode,\n      mfaCodeCallback: async (code: string) => {\n        await this.cognitoIdentityProviderClient.send(\n          new VerifySoftwareTokenCommand({\n            AccessToken: accessToken,\n            UserCode: code,\n          }),\n        )\n\n        const currentSettings = await this.getMfaSettings()\n        const hasPreferredMethod =\n          (currentSettings.authenticator.enabled &&\n            currentSettings.authenticator.preferred) ||\n          (currentSettings.sms.enabled && currentSettings.sms.preferred)\n        const shouldBePreferred =\n          preferred ??\n          (!hasPreferredMethod && !currentSettings.authenticator.enabled)\n\n        await this.cognitoIdentityProviderClient.send(\n          new SetUserMFAPreferenceCommand({\n            SoftwareTokenMfaSettings: {\n              Enabled: true,\n              PreferredMfa: shouldBePreferred,\n            },\n            ...(shouldBePreferred && currentSettings.sms.enabled\n              ? {\n                  SMSMfaSettings: {\n                    Enabled: true,\n                    PreferredMfa: false,\n                  },\n                }\n              : {}),\n            AccessToken: accessToken,\n          }),\n        )\n      },\n    }\n  }\n}\n\n//////////////////////////////////////////////////////////////////////\n// GENERAL HELPER FUNCTIONS\n\n// Make a POST request and parse the response as JSON\nfunction sendPostRequest(\n  url: string,\n  params: Record<string, unknown>,\n  success: (value: Record<string, unknown>) => void,\n  error: (err: { message?: string; error_description?: string }) => void,\n) {\n  const request = new XMLHttpRequest()\n  request.open('POST', url, true)\n  request.setRequestHeader(\n    'Content-Type',\n    'application/x-www-form-urlencoded; charset=UTF-8',\n  )\n  request.onload = function () {\n    let body = {}\n    try {\n      body = JSON.parse(request.response)\n    } catch (e) {\n      Sentry.captureException(e)\n      // Do nothing\n    }\n\n    if (request.status == 200) {\n      success(body)\n    } else {\n      error(body)\n    }\n  }\n  request.onerror = function () {\n    error({})\n  }\n  const body = Object.keys(params)\n    .reduce((keys: string[], key) => {\n      if (params[key]) {\n        keys.push(key + '=' + params[key])\n      }\n      return keys\n    }, [])\n    .join('&')\n  request.send(body)\n}\n\n//////////////////////////////////////////////////////////////////////\n// PKCE HELPER FUNCTIONS\n\n// Generate a secure random string using the browser crypto functions\nfunction generateRandomString() {\n  const array = new Uint32Array(28)\n  window.crypto.getRandomValues(array)\n  return Array.from(array, (dec) => ('0' + dec.toString(16)).substr(-2)).join(\n    '',\n  )\n}\n\n// Calculate the SHA256 hash of the input text.\n// Returns a promise that resolves to an ArrayBuffer\nfunction sha256(plain: string) {\n  const encoder = new TextEncoder()\n  const data = encoder.encode(plain)\n  return window.crypto.subtle.digest('SHA-256', data)\n}\n\n// Base64-urlencodes the input string\nfunction base64urlencode(str: ArrayBuffer) {\n  // Convert the ArrayBuffer to string using Uint8 array to conver to what btoa accepts.\n  // btoa accepts chars only within ascii 0-255 and base64 encodes them.\n  // Then convert the base64 encoded to base64url encoded\n  //   (replace + with -, replace / with _, trim trailing =)\n  // @ts-expect-error\n  return btoa(String.fromCharCode.apply(null, new Uint8Array(str)))\n    .replace(/\\+/g, '-')\n    .replace(/\\//g, '_')\n    .replace(/=+$/, '')\n}\n\n// Return the base64-urlencoded sha256 hash for the PKCE challenge\nasync function pkceChallengeFromVerifier(v: string) {\n  const hashed = await sha256(v)\n  return base64urlencode(hashed)\n}\n"]}

package/dist/apps/services/cognito.d.ts

@@ -1,4 +1,4 @@
-import { DEFAULT_MFA_SETTINGS, LoginAttemptResponse, MfaMethod, MfaSettings } from './AWSCognitoClient';
+import { DEFAULT_MFA_SETTINGS, LoginAttemptResponse, LoggedInMfaMethod, MfaMethod, MfaSettings } from './AWSCognitoClient';
 import { MiscTypes } from '@oneblink/types';
 interface CognitoServiceData {
     oAuthClientId: string;
@@ -289,4 +289,4 @@ declare function setupMfaAuthenticatorApp(options?: {
     mfaCodeCallback: (code: string) => Promise<void>;
 } | undefined>;
 export { init, registerAuthListener, loginUsernamePassword, loginHostedUI, handleAuthentication, changePassword, forgotPassword, logoutHostedUI, logout, isLoggedIn, getCognitoIdToken, getUserProfile, getUserFriendlyName, getMfaSettings, updateUserPhoneNumber, removeUserPhoneNumber, verifyUserPhoneNumber, disableMfaMethod, setPreferredMfaMethod, setupSmsMfa, setupMfaAuthenticatorApp, generateMfaAuthenticatorAppQrCodeUrl, DEFAULT_MFA_SETTINGS, };
-export type { LoginAttemptResponse, MfaMethod, MfaSettings };
+export type { LoginAttemptResponse, LoggedInMfaMethod, MfaMethod, MfaSettings };