@oxyhq/services 15.0.0 → 17.0.0

package/lib/commonjs/ui/hooks/useOxyAuthSession.js

@@ -1,501 +0,0 @@
-"use strict";
-
-Object.defineProperty(exports, "__esModule", {
-  value: true
-});
-exports.POLLING_INTERVAL_MS = exports.OXY_AUTH_WEB_URL = exports.OXY_ACCOUNTS_WEB_URL = exports.AUTH_SESSION_EXPIRY_MS = void 0;
-exports.useOxyAuthSession = useOxyAuthSession;
-var _react = require("react");
-var _reactNative = require("react-native");
-var _socket = _interopRequireDefault(require("socket.io-client"));
-var _core = require("@oxyhq/core");
-var _deviceFlowSignIn = require("../../utils/deviceFlowSignIn.js");
-function _interopRequireDefault(e) { return e && e.__esModule ? e : { default: e }; }
-/**
- * useOxyAuthSession — the single shared engine for the cross-app device-flow
- * sign-in ("Sign in with Oxy") used by BOTH containers:
- *
- *   - `SignInModal` (web centered modal)
- *   - `OxyAuthScreen` (native bottom sheet)
- *
- * Before this hook existed, those two files each re-implemented ~90% of the
- * same auth-session machinery (session-token creation, QR data, socket.io
- * `/auth-session` subscription, the HTTP polling fallback, waiting/error/retry
- * state, the open-auth handler, and cleanup) — and they had drifted (notably a
- * weaker `Math.random()` session token on native vs the crypto-secure one on
- * web). This hook owns ALL of it ONCE, with a clean typed surface, so the
- * containers only own their layout. The transport is functionally identical to
- * the previous implementations — this is a structural de-duplication, not a
- * behavior change.
- *
- * The native-only deep-link return path (`Linking` redirect handling) lives
- * HERE, gated to native via `Platform.OS`, so the web container never carries
- * native-only code while the two paths still cannot drift.
- */
-
-const debug = (0, _core.createDebugLogger)('useOxyAuthSession');
-
-/**
- * Default destination for the "Create an Oxy account" / "Get Oxy Accounts"
- * link, shared by both containers. Reused as-is from the original native
- * `OxyAuthScreen` so no new route is invented.
- */
-const OXY_ACCOUNTS_WEB_URL = exports.OXY_ACCOUNTS_WEB_URL = 'https://accounts.oxy.so';
-
-/** Default central Oxy auth web origin used when no override can be resolved. */
-const OXY_AUTH_WEB_URL = exports.OXY_AUTH_WEB_URL = 'https://auth.oxy.so';
-
-/** Auth session expiration (5 minutes). */
-const AUTH_SESSION_EXPIRY_MS = exports.AUTH_SESSION_EXPIRY_MS = 5 * 60 * 1000;
-
-/** Polling interval (fallback if the socket fails) in milliseconds. */
-const POLLING_INTERVAL_MS = exports.POLLING_INTERVAL_MS = 3000;
-
-/** The active device-flow session this client created and is waiting on. */
-
-/**
- * Extended `POST /auth/session/create` response (the "Sign in with Oxy" handoff
- * fields, Workstream C2). Both are optional so this hook degrades gracefully
- * when the handoff backend is not yet deployed — the legacy `oxyauth://<token>`
- * QR (`qrData`) remains the fallback.
- */
-
-/** Real-time auth-session socket payload (also matches the poll status shape). */
-
-/**
- * Resolve the central Oxy auth web origin from config or the API base URL.
- * Mirrors the resolution both containers previously inlined.
- */
-function resolveAuthWebBaseUrl(baseURL, authWebUrl) {
-  if (authWebUrl) {
-    return authWebUrl;
-  }
-  try {
-    const url = new URL(baseURL);
-    if (url.port === '3001') {
-      url.port = '3002';
-      return url.origin;
-    }
-    if (url.hostname.startsWith('api.')) {
-      url.hostname = `auth.${url.hostname.slice(4)}`;
-      return url.origin;
-    }
-  } catch {
-    // Malformed base URL — fall back to the default origin below.
-  }
-  return OXY_AUTH_WEB_URL;
-}
-
-/**
- * Resolve the deep-link redirect URI used on native so the auth web flow can
- * bounce back into the app. Prefers an explicit config value, otherwise derives
- * a clean (query/hash-stripped) URI from the app's initial deep link.
- */
-async function resolveAuthRedirectUri(authRedirectUri) {
-  if (authRedirectUri) {
-    return authRedirectUri;
-  }
-  try {
-    const initialUrl = await _reactNative.Linking.getInitialURL();
-    if (!initialUrl) {
-      return null;
-    }
-    const parsed = new URL(initialUrl);
-    parsed.search = '';
-    parsed.hash = '';
-    return parsed.toString();
-  } catch {
-    return null;
-  }
-}
-
-/** Parse the `session_id` / `error` params from a deep-link redirect URL. */
-function getRedirectParams(url) {
-  try {
-    const parsed = new URL(url);
-    const sessionId = parsed.searchParams.get('session_id') ?? undefined;
-    const error = parsed.searchParams.get('error') ?? undefined;
-    if (!sessionId && !error) {
-      return null;
-    }
-    return {
-      sessionId,
-      error
-    };
-  } catch {
-    return null;
-  }
-}
-
-/**
- * Generate a cryptographically random session token.
- *
- * 16 random bytes -> 32 hex chars (128 bits of entropy) — unguessable.
- * `crypto.getRandomValues` is guaranteed available because importing
- * `@oxyhq/core` installs a polyfill via `expo-crypto` on React Native. This is
- * the secure generator the web modal already used; the native screen previously
- * used a weaker `Math.random()` generator, which this consolidation removes.
- */
-function generateSessionToken() {
-  const bytes = new Uint8Array(16);
-  crypto.getRandomValues(bytes);
-  return Array.from(bytes, b => b.toString(16).padStart(2, '0')).join('');
-}
-
-/**
- * Owns the full device-flow auth-session lifecycle for one mounted sign-in
- * surface. Both `SignInModal` and `OxyAuthScreen` consume this; neither
- * re-implements the socket / polling / deep-link transport.
- *
- * Subscriptions (socket connect/disconnect, the poll interval, the native
- * deep-link listener, and unmount cleanup) are the legitimate `useEffect` use
- * WITH cleanup. No effect here computes derived UI state.
- */
-function useOxyAuthSession(oxyServices, clientId, commitSession, options = {}) {
-  const {
-    onSignedIn
-  } = options;
-  const [authSession, setAuthSession] = (0, _react.useState)(null);
-  const [isLoading, setIsLoading] = (0, _react.useState)(true);
-  const [error, setError] = (0, _react.useState)(null);
-  const [isWaiting, setIsWaiting] = (0, _react.useState)(false);
-  // "Sign in with Oxy" handoff fields surfaced from the `create` response.
-  const [authorizeCode, setAuthorizeCode] = (0, _react.useState)(null);
-  const [qrPayload, setQrPayload] = (0, _react.useState)(null);
-  const socketRef = (0, _react.useRef)(null);
-  const pollingIntervalRef = (0, _react.useRef)(null);
-  const isProcessingRef = (0, _react.useRef)(false);
-  const linkingHandledRef = (0, _react.useRef)(false);
-
-  // The latest `onSignedIn` callback, read via ref so the success handler does
-  // not need it in its dependency list (which would otherwise rebuild the
-  // socket/poll callbacks on every render where the container passes a new
-  // closure).
-  const onSignedInRef = (0, _react.useRef)(onSignedIn);
-  onSignedInRef.current = onSignedIn;
-
-  // Cleanup socket and polling. Idempotent.
-  const cleanup = (0, _react.useCallback)(() => {
-    setIsWaiting(false);
-    if (socketRef.current) {
-      socketRef.current.disconnect();
-      socketRef.current = null;
-    }
-    if (pollingIntervalRef.current) {
-      clearInterval(pollingIntervalRef.current);
-      pollingIntervalRef.current = null;
-    }
-  }, []);
-
-  // Handle successful authorization.
-  //
-  // The auth-session socket / poll (or deep-link return) hands us the
-  // authorized `sessionId`. Before any session-management code can use it we
-  // MUST first exchange the secret `sessionToken` (held only by this client,
-  // generated for THIS flow) for the first access token via
-  // `claimSessionByToken` — the device-flow equivalent of OAuth's
-  // code-for-token exchange (RFC 8628 §3.4).
-  //
-  // Without that exchange the SDK has no bearer token — the session is
-  // authorized server-side but the app never becomes authenticated and the UI
-  // sits "Waiting for authorization..." forever. Once `claimSessionByToken`
-  // plants the tokens in the HttpService, the claimed session is committed via
-  // `commitSession` (`useOxy().handleWebSession`) — the SAME path a fresh
-  // password sign-in or a silent cross-domain restore uses to register the
-  // account into the device's server-authoritative session set. It is NOT yet a
-  // member of that set, so
-  // `switchSession` (an account-SWITCH between accounts already on the
-  // device) is the wrong primitive here. Shared with both containers via
-  // `completeDeviceFlowSignIn` so the two paths cannot drift.
-  const handleAuthSuccess = (0, _react.useCallback)(async (sessionId, sessionToken) => {
-    if (isProcessingRef.current) return;
-    isProcessingRef.current = true;
-    try {
-      if (!commitSession) {
-        throw new Error('Session commit unavailable');
-      }
-      const user = await (0, _deviceFlowSignIn.completeDeviceFlowSignIn)({
-        oxyServices,
-        sessionId,
-        sessionToken,
-        commitSession
-      });
-      onSignedInRef.current?.(user);
-    } catch (err) {
-      debug.error('Error completing auth:', err);
-      setError('Authorization successful but failed to complete sign in. Please try again.');
-      isProcessingRef.current = false;
-    }
-  }, [oxyServices, commitSession]);
-
-  // Start polling for authorization.
-  //
-  // Idempotent: if a poll interval is already running this is a no-op, so the
-  // `connect_error` path (which also calls this) cannot stack a second interval
-  // on top of the always-on poll started in `generateAuthSession`.
-  const startPolling = (0, _react.useCallback)(sessionToken => {
-    if (pollingIntervalRef.current) return;
-    pollingIntervalRef.current = setInterval(async () => {
-      if (isProcessingRef.current) return;
-      try {
-        const response = await oxyServices.makeRequest('GET', `/auth/session/status/${sessionToken}`, undefined, {
-          cache: false
-        });
-        if (response.authorized && response.sessionId) {
-          cleanup();
-          // Pass the original sessionToken (in closure) through; the claim
-          // exchange needs it to mint the first access token.
-          handleAuthSuccess(response.sessionId, sessionToken);
-        } else if (response.status === 'cancelled') {
-          cleanup();
-          setError('Authorization was denied.');
-        } else if (response.status === 'expired') {
-          cleanup();
-          setError('Session expired. Please try again.');
-        }
-      } catch (err) {
-        // Transient poll error — the next tick retries. Logged, never thrown.
-        debug.log('Auth polling error:', err);
-      }
-    }, POLLING_INTERVAL_MS);
-  }, [oxyServices, handleAuthSuccess, cleanup]);
-
-  // Connect to the auth-session socket for real-time updates.
-  const connectSocket = (0, _react.useCallback)(sessionToken => {
-    const baseURL = oxyServices.getBaseURL();
-
-    // Connect to the auth-session namespace (no authentication required).
-    const socket = (0, _socket.default)(`${baseURL}/auth-session`, {
-      transports: ['websocket', 'polling'],
-      reconnection: true,
-      reconnectionAttempts: 3,
-      reconnectionDelay: 1000
-    });
-    socketRef.current = socket;
-    socket.on('connect', () => {
-      debug.log('Auth socket connected');
-      socket.emit('join', sessionToken);
-    });
-    socket.on('joined', () => {
-      debug.log('Joined auth session room');
-    });
-    socket.on('auth_update', payload => {
-      debug.log('Auth update received:', payload);
-      if (payload.status === 'authorized' && payload.sessionId) {
-        cleanup();
-        // `sessionToken` is this flow's secret credential (in closure) — pass
-        // it through so `handleAuthSuccess` can claim the first access token.
-        handleAuthSuccess(payload.sessionId, sessionToken);
-      } else if (payload.status === 'cancelled') {
-        cleanup();
-        setError('Authorization was denied.');
-      } else if (payload.status === 'expired') {
-        cleanup();
-        setError('Session expired. Please try again.');
-      }
-    });
-    socket.on('connect_error', err => {
-      debug.log('Socket connection error, falling back to polling:', err instanceof Error ? err.message : null);
-      // Realtime transport errored — fall back to polling. The poll is
-      // already running (started unconditionally in `generateAuthSession`),
-      // so `startPolling` here is a no-op backstop.
-      socket.disconnect();
-      startPolling(sessionToken);
-    });
-    socket.on('disconnect', () => {
-      debug.log('Auth socket disconnected');
-    });
-  }, [oxyServices, handleAuthSuccess, cleanup, startPolling]);
-
-  // Generate a new auth session.
-  const generateAuthSession = (0, _react.useCallback)(async () => {
-    setIsLoading(true);
-    setError(null);
-    // Reset the handoff fields for the fresh session (also clears them on retry).
-    setAuthorizeCode(null);
-    setQrPayload(null);
-    isProcessingRef.current = false;
-
-    // The cross-app device sign-in flow identifies the requesting app by its
-    // real registered OAuth client id (ApplicationCredential publicKey).
-    // Without it the API cannot resolve the consent identity, so we fail fast
-    // with a clear configuration error rather than creating a session the
-    // server would reject.
-    if (!clientId) {
-      setError('This app is not configured for sign-in (missing clientId).');
-      setIsLoading(false);
-      return;
-    }
-    try {
-      const sessionToken = generateSessionToken();
-      const expiresAt = Date.now() + AUTH_SESSION_EXPIRY_MS;
-
-      // Register the auth session with the server. The response carries the
-      // "Sign in with Oxy" handoff fields (public `authorizeCode` + structured
-      // `qrPayload`) when the handoff backend is deployed; both are optional, so
-      // the legacy `oxyauth://<token>` QR path keeps working without them.
-      const createResponse = await oxyServices.makeRequest('POST', '/auth/session/create', {
-        sessionToken,
-        expiresAt,
-        clientId
-      }, {
-        cache: false
-      });
-      setAuthSession({
-        sessionToken,
-        expiresAt
-      });
-      setAuthorizeCode(createResponse?.authorizeCode ?? null);
-      setQrPayload(createResponse?.qrPayload ?? null);
-      setIsWaiting(true);
-
-      // Socket is the fast path; the poll is a transport-independent backstop
-      // that guarantees completion even if the socket connects but silently
-      // never delivers auth_update (RN transport / idle-timeout).
-      connectSocket(sessionToken);
-      startPolling(sessionToken);
-    } catch (err) {
-      setError((err instanceof Error ? err.message : null) || 'Failed to create auth session');
-    } finally {
-      setIsLoading(false);
-    }
-  }, [oxyServices, connectSocket, startPolling, clientId]);
-
-  // Open the central Oxy auth approval surface for this device-flow session.
-  // On web this is a centered popup; on native it opens the system browser,
-  // carrying a `redirect_uri` so the deep-link return path can complete the
-  // flow even if the socket/poll is slow.
-  const openAuthApproval = (0, _react.useCallback)(async () => {
-    if (!authSession) return;
-    const authBaseUrl = resolveAuthWebBaseUrl(oxyServices.getBaseURL(), oxyServices.config?.authWebUrl);
-    const webUrl = new URL('/authorize', authBaseUrl);
-    webUrl.searchParams.set('token', authSession.sessionToken);
-    if (_reactNative.Platform.OS === 'web') {
-      // Open a separate approval window on web for the device-flow token.
-      const width = 500;
-      const height = 650;
-      const screenWidth = window.screen?.width ?? width;
-      const screenHeight = window.screen?.height ?? height;
-      const left = (screenWidth - width) / 2;
-      const top = (screenHeight - height) / 2;
-      window.open(webUrl.toString(), 'oxy-auth-approval', `width=${width},height=${height},left=${left},top=${top}`);
-      return;
-    }
-
-    // Native: carry a redirect URI so the auth web flow can bounce back in.
-    const redirectUri = await resolveAuthRedirectUri(oxyServices.config?.authRedirectUri);
-    if (redirectUri) {
-      webUrl.searchParams.set('redirect_uri', redirectUri);
-    }
-    try {
-      await _reactNative.Linking.openURL(webUrl.toString());
-    } catch (err) {
-      debug.error('Unable to open Oxy Auth:', err);
-      setError('Unable to open Oxy Auth. Please try again or use the QR code.');
-    }
-  }, [authSession, oxyServices]);
-
-  // Same-device "Sign in with Oxy" handoff: deep-link to the `qrPayload`
-  // (`oxycommons://approve?...`) so the native Oxy identity app opens directly
-  // to approve. The socket / poll already resolves the flow once the approval
-  // lands, so this only needs to launch the deep link. No-op when the handoff
-  // backend returned no `qrPayload`.
-  const openSameDeviceApproval = (0, _react.useCallback)(async () => {
-    if (!qrPayload) {
-      return;
-    }
-    try {
-      await _reactNative.Linking.openURL(qrPayload);
-    } catch (err) {
-      debug.error('Unable to open the Oxy app for approval:', err);
-      setError('Unable to open the Oxy app. Scan the QR code from another device instead.');
-    }
-  }, [qrPayload]);
-
-  // Tear down and recreate the session (the retry action).
-  const retry = (0, _react.useCallback)(() => {
-    cleanup();
-    generateAuthSession();
-  }, [generateAuthSession, cleanup]);
-
-  // Handle a native deep-link return carrying the authorized session_id.
-  const handleAuthRedirect = (0, _react.useCallback)(url => {
-    const params = getRedirectParams(url);
-    if (!params) {
-      return;
-    }
-    if (params.error) {
-      cleanup();
-      setError('Authorization was denied.');
-      return;
-    }
-    if (params.sessionId) {
-      // The deep-link return carries only `session_id` — the secret
-      // `sessionToken` for this flow lives in component state (generated in
-      // `generateAuthSession`). Without it we cannot claim the first access
-      // token, so the flow would 401 in `handleAuthSuccess`. If it is somehow
-      // unavailable, fall through to the socket/poll path (which carries the
-      // token in closure) rather than attempting an unauthenticated claim.
-      const flowSessionToken = authSession?.sessionToken;
-      if (!flowSessionToken) {
-        return;
-      }
-      cleanup();
-      handleAuthSuccess(params.sessionId, flowSessionToken);
-    }
-  }, [authSession, cleanup, handleAuthSuccess]);
-
-  // Initialize the auth session once on mount.
-  // biome-ignore lint/correctness/useExhaustiveDependencies: this must run exactly once on mount; re-running on `generateAuthSession` identity changes would recreate the session mid-flow.
-  (0, _react.useEffect)(() => {
-    generateAuthSession();
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, []);
-
-  // Native-only: handle the deep-link return from the auth web flow. Gated to
-  // native so the web container never carries this listener. The socket / poll
-  // path still resolves the flow if no deep link arrives.
-  (0, _react.useEffect)(() => {
-    if (_reactNative.Platform.OS === 'web') {
-      return;
-    }
-    const subscription = _reactNative.Linking.addEventListener('url', ({
-      url
-    }) => {
-      linkingHandledRef.current = true;
-      handleAuthRedirect(url);
-    });
-    _reactNative.Linking.getInitialURL().then(url => {
-      if (url && !linkingHandledRef.current) {
-        handleAuthRedirect(url);
-      }
-    }).catch(() => {
-      // Ignore linking errors; auth will still resolve via socket/polling.
-    });
-    return () => {
-      subscription.remove();
-    };
-  }, [handleAuthRedirect]);
-
-  // Clean up subscriptions on unmount.
-  (0, _react.useEffect)(() => {
-    return () => {
-      cleanup();
-    };
-  }, [cleanup]);
-  const qrData = authSession ? `oxyauth://${authSession.sessionToken}` : '';
-  return {
-    authSession,
-    qrData,
-    authorizeCode,
-    qrPayload,
-    isLoading,
-    error,
-    isWaiting,
-    openAuthApproval,
-    openSameDeviceApproval,
-    retry,
-    cleanup
-  };
-}
-//# sourceMappingURL=useOxyAuthSession.js.map

package/lib/commonjs/ui/hooks/useOxyAuthSession.js.map

@@ -1 +0,0 @@
-{"version":3,"names":["_react","require","_reactNative","_socket","_interopRequireDefault","_core","_deviceFlowSignIn","e","__esModule","default","debug","createDebugLogger","OXY_ACCOUNTS_WEB_URL","exports","OXY_AUTH_WEB_URL","AUTH_SESSION_EXPIRY_MS","POLLING_INTERVAL_MS","resolveAuthWebBaseUrl","baseURL","authWebUrl","url","URL","port","origin","hostname","startsWith","slice","resolveAuthRedirectUri","authRedirectUri","initialUrl","Linking","getInitialURL","parsed","search","hash","toString","getRedirectParams","sessionId","searchParams","get","undefined","error","generateSessionToken","bytes","Uint8Array","crypto","getRandomValues","Array","from","b","padStart","join","useOxyAuthSession","oxyServices","clientId","commitSession","options","onSignedIn","authSession","setAuthSession","useState","isLoading","setIsLoading","setError","isWaiting","setIsWaiting","authorizeCode","setAuthorizeCode","qrPayload","setQrPayload","socketRef","useRef","pollingIntervalRef","isProcessingRef","linkingHandledRef","onSignedInRef","current","cleanup","useCallback","disconnect","clearInterval","handleAuthSuccess","sessionToken","Error","user","completeDeviceFlowSignIn","err","startPolling","setInterval","response","makeRequest","cache","authorized","status","log","connectSocket","getBaseURL","socket","io","transports","reconnection","reconnectionAttempts","reconnectionDelay","on","emit","payload","message","generateAuthSession","expiresAt","Date","now","createResponse","openAuthApproval","authBaseUrl","config","webUrl","set","Platform","OS","width","height","screenWidth","window","screen","screenHeight","left","top","open","redirectUri","openURL","openSameDeviceApproval","retry","handleAuthRedirect","params","flowSessionToken","useEffect","subscription","addEventListener","then","catch","remove","qrData"],"sourceRoot":"../../../../src","sources":["ui/hooks/useOxyAuthSession.ts"],"mappings":";;;;;;;AAsBA,IAAAA,MAAA,GAAAC,OAAA;AACA,IAAAC,YAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAC,sBAAA,CAAAH,OAAA;AAEA,IAAAI,KAAA,GAAAJ,OAAA;AACA,IAAAK,iBAAA,GAAAL,OAAA;AAAwE,SAAAG,uBAAAG,CAAA,WAAAA,CAAA,IAAAA,CAAA,CAAAC,UAAA,GAAAD,CAAA,KAAAE,OAAA,EAAAF,CAAA;AA3BxE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AASA,MAAMG,KAAK,GAAG,IAAAC,uBAAiB,EAAC,mBAAmB,CAAC;;AAEpD;AACA;AACA;AACA;AACA;AACO,MAAMC,oBAAoB,GAAAC,OAAA,CAAAD,oBAAA,GAAG,yBAAyB;;AAE7D;AACO,MAAME,gBAAgB,GAAAD,OAAA,CAAAC,gBAAA,GAAG,qBAAqB;;AAErD;AACO,MAAMC,sBAAsB,GAAAF,OAAA,CAAAE,sBAAA,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;;AAEnD;AACO,MAAMC,mBAAmB,GAAAH,OAAA,CAAAG,mBAAA,GAAG,IAAI;;AAEvC;;AAQA;AACA;AACA;AACA;AACA;AACA;;AAgBA;;AAgEA;AACA;AACA;AACA;AACA,SAASC,qBAAqBA,CAACC,OAAe,EAAEC,UAAmB,EAAU;EAC3E,IAAIA,UAAU,EAAE;IACd,OAAOA,UAAU;EACnB;EAEA,IAAI;IACF,MAAMC,GAAG,GAAG,IAAIC,GAAG,CAACH,OAAO,CAAC;IAC5B,IAAIE,GAAG,CAACE,IAAI,KAAK,MAAM,EAAE;MACvBF,GAAG,CAACE,IAAI,GAAG,MAAM;MACjB,OAAOF,GAAG,CAACG,MAAM;IACnB;IACA,IAAIH,GAAG,CAACI,QAAQ,CAACC,UAAU,CAAC,MAAM,CAAC,EAAE;MACnCL,GAAG,CAACI,QAAQ,GAAG,QAAQJ,GAAG,CAACI,QAAQ,CAACE,KAAK,CAAC,CAAC,CAAC,EAAE;MAC9C,OAAON,GAAG,CAACG,MAAM;IACnB;EACF,CAAC,CAAC,MAAM;IACN;EAAA;EAEF,OAAOT,gBAAgB;AACzB;;AAEA;AACA;AACA;AACA;AACA;AACA,eAAea,sBAAsBA,CAACC,eAAwB,EAA0B;EACtF,IAAIA,eAAe,EAAE;IACnB,OAAOA,eAAe;EACxB;EAEA,IAAI;IACF,MAAMC,UAAU,GAAG,MAAMC,oBAAO,CAACC,aAAa,CAAC,CAAC;IAChD,IAAI,CAACF,UAAU,EAAE;MACf,OAAO,IAAI;IACb;IAEA,MAAMG,MAAM,GAAG,IAAIX,GAAG,CAACQ,UAAU,CAAC;IAClCG,MAAM,CAACC,MAAM,GAAG,EAAE;IAClBD,MAAM,CAACE,IAAI,GAAG,EAAE;IAChB,OAAOF,MAAM,CAACG,QAAQ,CAAC,CAAC;EAC1B,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF;;AAEA;AACA,SAASC,iBAAiBA,CAAChB,GAAW,EAAiD;EACrF,IAAI;IACF,MAAMY,MAAM,GAAG,IAAIX,GAAG,CAACD,GAAG,CAAC;IAC3B,MAAMiB,SAAS,GAAGL,MAAM,CAACM,YAAY,CAACC,GAAG,CAAC,YAAY,CAAC,IAAIC,SAAS;IACpE,MAAMC,KAAK,GAAGT,MAAM,CAACM,YAAY,CAACC,GAAG,CAAC,OAAO,CAAC,IAAIC,SAAS;IAE3D,IAAI,CAACH,SAAS,IAAI,CAACI,KAAK,EAAE;MACxB,OAAO,IAAI;IACb;IAEA,OAAO;MAAEJ,SAAS;MAAEI;IAAM,CAAC;EAC7B,CAAC,CAAC,MAAM;IACN,OAAO,IAAI;EACb;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASC,oBAAoBA,CAAA,EAAW;EACtC,MAAMC,KAAK,GAAG,IAAIC,UAAU,CAAC,EAAE,CAAC;EAChCC,MAAM,CAACC,eAAe,CAACH,KAAK,CAAC;EAC7B,OAAOI,KAAK,CAACC,IAAI,CAACL,KAAK,EAAGM,CAAC,IAAKA,CAAC,CAACd,QAAQ,CAAC,EAAE,CAAC,CAACe,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAACC,IAAI,CAAC,EAAE,CAAC;AAC3E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,iBAAiBA,CAC/BC,WAAwB,EACxBC,QAAuB,EACvBC,aAA6E,EAC7EC,OAAiC,GAAG,CAAC,CAAC,EACb;EACzB,MAAM;IAAEC;EAAW,CAAC,GAAGD,OAAO;EAE9B,MAAM,CAACE,WAAW,EAAEC,cAAc,CAAC,GAAG,IAAAC,eAAQ,EAAqB,IAAI,CAAC;EACxE,MAAM,CAACC,SAAS,EAAEC,YAAY,CAAC,GAAG,IAAAF,eAAQ,EAAC,IAAI,CAAC;EAChD,MAAM,CAACnB,KAAK,EAAEsB,QAAQ,CAAC,GAAG,IAAAH,eAAQ,EAAgB,IAAI,CAAC;EACvD,MAAM,CAACI,SAAS,EAAEC,YAAY,CAAC,GAAG,IAAAL,eAAQ,EAAC,KAAK,CAAC;EACjD;EACA,MAAM,CAACM,aAAa,EAAEC,gBAAgB,CAAC,GAAG,IAAAP,eAAQ,EAAgB,IAAI,CAAC;EACvE,MAAM,CAACQ,SAAS,EAAEC,YAAY,CAAC,GAAG,IAAAT,eAAQ,EAAgB,IAAI,CAAC;EAE/D,MAAMU,SAAS,GAAG,IAAAC,aAAM,EAAgB,IAAI,CAAC;EAC7C,MAAMC,kBAAkB,GAAG,IAAAD,aAAM,EAAwC,IAAI,CAAC;EAC9E,MAAME,eAAe,GAAG,IAAAF,aAAM,EAAC,KAAK,CAAC;EACrC,MAAMG,iBAAiB,GAAG,IAAAH,aAAM,EAAC,KAAK,CAAC;;EAEvC;EACA;EACA;EACA;EACA,MAAMI,aAAa,GAAG,IAAAJ,aAAM,EAACd,UAAU,CAAC;EACxCkB,aAAa,CAACC,OAAO,GAAGnB,UAAU;;EAElC;EACA,MAAMoB,OAAO,GAAG,IAAAC,kBAAW,EAAC,MAAM;IAChCb,YAAY,CAAC,KAAK,CAAC;IAEnB,IAAIK,SAAS,CAACM,OAAO,EAAE;MACrBN,SAAS,CAACM,OAAO,CAACG,UAAU,CAAC,CAAC;MAC9BT,SAAS,CAACM,OAAO,GAAG,IAAI;IAC1B;IAEA,IAAIJ,kBAAkB,CAACI,OAAO,EAAE;MAC9BI,aAAa,CAACR,kBAAkB,CAACI,OAAO,CAAC;MACzCJ,kBAAkB,CAACI,OAAO,GAAG,IAAI;IACnC;EACF,CAAC,EAAE,EAAE,CAAC;;EAEN;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMK,iBAAiB,GAAG,IAAAH,kBAAW,EACnC,OAAOzC,SAAiB,EAAE6C,YAAoB,KAAK;IACjD,IAAIT,eAAe,CAACG,OAAO,EAAE;IAC7BH,eAAe,CAACG,OAAO,GAAG,IAAI;IAE9B,IAAI;MACF,IAAI,CAACrB,aAAa,EAAE;QAClB,MAAM,IAAI4B,KAAK,CAAC,4BAA4B,CAAC;MAC/C;MACA,MAAMC,IAAI,GAAG,MAAM,IAAAC,0CAAwB,EAAC;QAC1ChC,WAAW;QACXhB,SAAS;QACT6C,YAAY;QACZ3B;MACF,CAAC,CAAC;MACFoB,aAAa,CAACC,OAAO,GAAGQ,IAAI,CAAC;IAC/B,CAAC,CAAC,OAAOE,GAAG,EAAE;MACZ5E,KAAK,CAAC+B,KAAK,CAAC,wBAAwB,EAAE6C,GAAG,CAAC;MAC1CvB,QAAQ,CAAC,4EAA4E,CAAC;MACtFU,eAAe,CAACG,OAAO,GAAG,KAAK;IACjC;EACF,CAAC,EACD,CAACvB,WAAW,EAAEE,aAAa,CAC7B,CAAC;;EAED;EACA;EACA;EACA;EACA;EACA,MAAMgC,YAAY,GAAG,IAAAT,kBAAW,EAC7BI,YAAoB,IAAK;IACxB,IAAIV,kBAAkB,CAACI,OAAO,EAAE;IAEhCJ,kBAAkB,CAACI,OAAO,GAAGY,WAAW,CAAC,YAAY;MACnD,IAAIf,eAAe,CAACG,OAAO,EAAE;MAE7B,IAAI;QACF,MAAMa,QAKL,GAAG,MAAMpC,WAAW,CAACqC,WAAW,CAC/B,KAAK,EACL,wBAAwBR,YAAY,EAAE,EACtC1C,SAAS,EACT;UAAEmD,KAAK,EAAE;QAAM,CACjB,CAAC;QAED,IAAIF,QAAQ,CAACG,UAAU,IAAIH,QAAQ,CAACpD,SAAS,EAAE;UAC7CwC,OAAO,CAAC,CAAC;UACT;UACA;UACAI,iBAAiB,CAACQ,QAAQ,CAACpD,SAAS,EAAE6C,YAAY,CAAC;QACrD,CAAC,MAAM,IAAIO,QAAQ,CAACI,MAAM,KAAK,WAAW,EAAE;UAC1ChB,OAAO,CAAC,CAAC;UACTd,QAAQ,CAAC,2BAA2B,CAAC;QACvC,CAAC,MAAM,IAAI0B,QAAQ,CAACI,MAAM,KAAK,SAAS,EAAE;UACxChB,OAAO,CAAC,CAAC;UACTd,QAAQ,CAAC,oCAAoC,CAAC;QAChD;MACF,CAAC,CAAC,OAAOuB,GAAG,EAAE;QACZ;QACA5E,KAAK,CAACoF,GAAG,CAAC,qBAAqB,EAAER,GAAG,CAAC;MACvC;IACF,CAAC,EAAEtE,mBAAmB,CAAC;EACzB,CAAC,EACD,CAACqC,WAAW,EAAE4B,iBAAiB,EAAEJ,OAAO,CAC1C,CAAC;;EAED;EACA,MAAMkB,aAAa,GAAG,IAAAjB,kBAAW,EAC9BI,YAAoB,IAAK;IACxB,MAAMhE,OAAO,GAAGmC,WAAW,CAAC2C,UAAU,CAAC,CAAC;;IAExC;IACA,MAAMC,MAAM,GAAG,IAAAC,eAAE,EAAC,GAAGhF,OAAO,eAAe,EAAE;MAC3CiF,UAAU,EAAE,CAAC,WAAW,EAAE,SAAS,CAAC;MACpCC,YAAY,EAAE,IAAI;MAClBC,oBAAoB,EAAE,CAAC;MACvBC,iBAAiB,EAAE;IACrB,CAAC,CAAC;IAEFhC,SAAS,CAACM,OAAO,GAAGqB,MAAM;IAE1BA,MAAM,CAACM,EAAE,CAAC,SAAS,EAAE,MAAM;MACzB7F,KAAK,CAACoF,GAAG,CAAC,uBAAuB,CAAC;MAClCG,MAAM,CAACO,IAAI,CAAC,MAAM,EAAEtB,YAAY,CAAC;IACnC,CAAC,CAAC;IAEFe,MAAM,CAACM,EAAE,CAAC,QAAQ,EAAE,MAAM;MACxB7F,KAAK,CAACoF,GAAG,CAAC,0BAA0B,CAAC;IACvC,CAAC,CAAC;IAEFG,MAAM,CAACM,EAAE,CAAC,aAAa,EAAGE,OAA0B,IAAK;MACvD/F,KAAK,CAACoF,GAAG,CAAC,uBAAuB,EAAEW,OAAO,CAAC;MAE3C,IAAIA,OAAO,CAACZ,MAAM,KAAK,YAAY,IAAIY,OAAO,CAACpE,SAAS,EAAE;QACxDwC,OAAO,CAAC,CAAC;QACT;QACA;QACAI,iBAAiB,CAACwB,OAAO,CAACpE,SAAS,EAAE6C,YAAY,CAAC;MACpD,CAAC,MAAM,IAAIuB,OAAO,CAACZ,MAAM,KAAK,WAAW,EAAE;QACzChB,OAAO,CAAC,CAAC;QACTd,QAAQ,CAAC,2BAA2B,CAAC;MACvC,CAAC,MAAM,IAAI0C,OAAO,CAACZ,MAAM,KAAK,SAAS,EAAE;QACvChB,OAAO,CAAC,CAAC;QACTd,QAAQ,CAAC,oCAAoC,CAAC;MAChD;IACF,CAAC,CAAC;IAEFkC,MAAM,CAACM,EAAE,CAAC,eAAe,EAAGjB,GAAG,IAAK;MAClC5E,KAAK,CAACoF,GAAG,CACP,mDAAmD,EACnDR,GAAG,YAAYH,KAAK,GAAGG,GAAG,CAACoB,OAAO,GAAG,IACvC,CAAC;MACD;MACA;MACA;MACAT,MAAM,CAAClB,UAAU,CAAC,CAAC;MACnBQ,YAAY,CAACL,YAAY,CAAC;IAC5B,CAAC,CAAC;IAEFe,MAAM,CAACM,EAAE,CAAC,YAAY,EAAE,MAAM;MAC5B7F,KAAK,CAACoF,GAAG,CAAC,0BAA0B,CAAC;IACvC,CAAC,CAAC;EACJ,CAAC,EACD,CAACzC,WAAW,EAAE4B,iBAAiB,EAAEJ,OAAO,EAAEU,YAAY,CACxD,CAAC;;EAED;EACA,MAAMoB,mBAAmB,GAAG,IAAA7B,kBAAW,EAAC,YAAY;IAClDhB,YAAY,CAAC,IAAI,CAAC;IAClBC,QAAQ,CAAC,IAAI,CAAC;IACd;IACAI,gBAAgB,CAAC,IAAI,CAAC;IACtBE,YAAY,CAAC,IAAI,CAAC;IAClBI,eAAe,CAACG,OAAO,GAAG,KAAK;;IAE/B;IACA;IACA;IACA;IACA;IACA,IAAI,CAACtB,QAAQ,EAAE;MACbS,QAAQ,CAAC,4DAA4D,CAAC;MACtED,YAAY,CAAC,KAAK,CAAC;MACnB;IACF;IAEA,IAAI;MACF,MAAMoB,YAAY,GAAGxC,oBAAoB,CAAC,CAAC;MAC3C,MAAMkE,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,GAAG/F,sBAAsB;;MAErD;MACA;MACA;MACA;MACA,MAAMgG,cAAc,GAAG,MAAM1D,WAAW,CAACqC,WAAW,CAClD,MAAM,EACN,sBAAsB,EACtB;QAAER,YAAY;QAAE0B,SAAS;QAAEtD;MAAS,CAAC,EACrC;QAAEqC,KAAK,EAAE;MAAM,CACjB,CAAC;MAEDhC,cAAc,CAAC;QAAEuB,YAAY;QAAE0B;MAAU,CAAC,CAAC;MAC3CzC,gBAAgB,CAAC4C,cAAc,EAAE7C,aAAa,IAAI,IAAI,CAAC;MACvDG,YAAY,CAAC0C,cAAc,EAAE3C,SAAS,IAAI,IAAI,CAAC;MAC/CH,YAAY,CAAC,IAAI,CAAC;;MAElB;MACA;MACA;MACA8B,aAAa,CAACb,YAAY,CAAC;MAC3BK,YAAY,CAACL,YAAY,CAAC;IAC5B,CAAC,CAAC,OAAOI,GAAY,EAAE;MACrBvB,QAAQ,CAAC,CAACuB,GAAG,YAAYH,KAAK,GAAGG,GAAG,CAACoB,OAAO,GAAG,IAAI,KAAK,+BAA+B,CAAC;IAC1F,CAAC,SAAS;MACR5C,YAAY,CAAC,KAAK,CAAC;IACrB;EACF,CAAC,EAAE,CAACT,WAAW,EAAE0C,aAAa,EAAER,YAAY,EAAEjC,QAAQ,CAAC,CAAC;;EAExD;EACA;EACA;EACA;EACA,MAAM0D,gBAAgB,GAAG,IAAAlC,kBAAW,EAAC,YAAY;IAC/C,IAAI,CAACpB,WAAW,EAAE;IAElB,MAAMuD,WAAW,GAAGhG,qBAAqB,CACvCoC,WAAW,CAAC2C,UAAU,CAAC,CAAC,EACxB3C,WAAW,CAAC6D,MAAM,EAAE/F,UACtB,CAAC;IACD,MAAMgG,MAAM,GAAG,IAAI9F,GAAG,CAAC,YAAY,EAAE4F,WAAW,CAAC;IACjDE,MAAM,CAAC7E,YAAY,CAAC8E,GAAG,CAAC,OAAO,EAAE1D,WAAW,CAACwB,YAAY,CAAC;IAE1D,IAAImC,qBAAQ,CAACC,EAAE,KAAK,KAAK,EAAE;MACzB;MACA,MAAMC,KAAK,GAAG,GAAG;MACjB,MAAMC,MAAM,GAAG,GAAG;MAClB,MAAMC,WAAW,GAAGC,MAAM,CAACC,MAAM,EAAEJ,KAAK,IAAIA,KAAK;MACjD,MAAMK,YAAY,GAAGF,MAAM,CAACC,MAAM,EAAEH,MAAM,IAAIA,MAAM;MACpD,MAAMK,IAAI,GAAG,CAACJ,WAAW,GAAGF,KAAK,IAAI,CAAC;MACtC,MAAMO,GAAG,GAAG,CAACF,YAAY,GAAGJ,MAAM,IAAI,CAAC;MAEvCE,MAAM,CAACK,IAAI,CACTZ,MAAM,CAAChF,QAAQ,CAAC,CAAC,EACjB,mBAAmB,EACnB,SAASoF,KAAK,WAAWC,MAAM,SAASK,IAAI,QAAQC,GAAG,EACzD,CAAC;MACD;IACF;;IAEA;IACA,MAAME,WAAW,GAAG,MAAMrG,sBAAsB,CAAC0B,WAAW,CAAC6D,MAAM,EAAEtF,eAAe,CAAC;IACrF,IAAIoG,WAAW,EAAE;MACfb,MAAM,CAAC7E,YAAY,CAAC8E,GAAG,CAAC,cAAc,EAAEY,WAAW,CAAC;IACtD;IAEA,IAAI;MACF,MAAMlG,oBAAO,CAACmG,OAAO,CAACd,MAAM,CAAChF,QAAQ,CAAC,CAAC,CAAC;IAC1C,CAAC,CAAC,OAAOmD,GAAG,EAAE;MACZ5E,KAAK,CAAC+B,KAAK,CAAC,0BAA0B,EAAE6C,GAAG,CAAC;MAC5CvB,QAAQ,CAAC,+DAA+D,CAAC;IAC3E;EACF,CAAC,EAAE,CAACL,WAAW,EAAEL,WAAW,CAAC,CAAC;;EAE9B;EACA;EACA;EACA;EACA;EACA,MAAM6E,sBAAsB,GAAG,IAAApD,kBAAW,EAAC,YAAY;IACrD,IAAI,CAACV,SAAS,EAAE;MACd;IACF;IACA,IAAI;MACF,MAAMtC,oBAAO,CAACmG,OAAO,CAAC7D,SAAS,CAAC;IAClC,CAAC,CAAC,OAAOkB,GAAG,EAAE;MACZ5E,KAAK,CAAC+B,KAAK,CAAC,0CAA0C,EAAE6C,GAAG,CAAC;MAC5DvB,QAAQ,CAAC,2EAA2E,CAAC;IACvF;EACF,CAAC,EAAE,CAACK,SAAS,CAAC,CAAC;;EAEf;EACA,MAAM+D,KAAK,GAAG,IAAArD,kBAAW,EAAC,MAAM;IAC9BD,OAAO,CAAC,CAAC;IACT8B,mBAAmB,CAAC,CAAC;EACvB,CAAC,EAAE,CAACA,mBAAmB,EAAE9B,OAAO,CAAC,CAAC;;EAElC;EACA,MAAMuD,kBAAkB,GAAG,IAAAtD,kBAAW,EACnC1D,GAAW,IAAK;IACf,MAAMiH,MAAM,GAAGjG,iBAAiB,CAAChB,GAAG,CAAC;IACrC,IAAI,CAACiH,MAAM,EAAE;MACX;IACF;IAEA,IAAIA,MAAM,CAAC5F,KAAK,EAAE;MAChBoC,OAAO,CAAC,CAAC;MACTd,QAAQ,CAAC,2BAA2B,CAAC;MACrC;IACF;IAEA,IAAIsE,MAAM,CAAChG,SAAS,EAAE;MACpB;MACA;MACA;MACA;MACA;MACA;MACA,MAAMiG,gBAAgB,GAAG5E,WAAW,EAAEwB,YAAY;MAClD,IAAI,CAACoD,gBAAgB,EAAE;QACrB;MACF;MACAzD,OAAO,CAAC,CAAC;MACTI,iBAAiB,CAACoD,MAAM,CAAChG,SAAS,EAAEiG,gBAAgB,CAAC;IACvD;EACF,CAAC,EACD,CAAC5E,WAAW,EAAEmB,OAAO,EAAEI,iBAAiB,CAC1C,CAAC;;EAED;EACA;EACA,IAAAsD,gBAAS,EAAC,MAAM;IACd5B,mBAAmB,CAAC,CAAC;IACrB;EACF,CAAC,EAAE,EAAE,CAAC;;EAEN;EACA;EACA;EACA,IAAA4B,gBAAS,EAAC,MAAM;IACd,IAAIlB,qBAAQ,CAACC,EAAE,KAAK,KAAK,EAAE;MACzB;IACF;IAEA,MAAMkB,YAAY,GAAG1G,oBAAO,CAAC2G,gBAAgB,CAAC,KAAK,EAAE,CAAC;MAAErH;IAAI,CAAC,KAAK;MAChEsD,iBAAiB,CAACE,OAAO,GAAG,IAAI;MAChCwD,kBAAkB,CAAChH,GAAG,CAAC;IACzB,CAAC,CAAC;IAEFU,oBAAO,CAACC,aAAa,CAAC,CAAC,CACpB2G,IAAI,CAAEtH,GAAG,IAAK;MACb,IAAIA,GAAG,IAAI,CAACsD,iBAAiB,CAACE,OAAO,EAAE;QACrCwD,kBAAkB,CAAChH,GAAG,CAAC;MACzB;IACF,CAAC,CAAC,CACDuH,KAAK,CAAC,MAAM;MACX;IAAA,CACD,CAAC;IAEJ,OAAO,MAAM;MACXH,YAAY,CAACI,MAAM,CAAC,CAAC;IACvB,CAAC;EACH,CAAC,EAAE,CAACR,kBAAkB,CAAC,CAAC;;EAExB;EACA,IAAAG,gBAAS,EAAC,MAAM;IACd,OAAO,MAAM;MACX1D,OAAO,CAAC,CAAC;IACX,CAAC;EACH,CAAC,EAAE,CAACA,OAAO,CAAC,CAAC;EAEb,MAAMgE,MAAM,GAAGnF,WAAW,GAAG,aAAaA,WAAW,CAACwB,YAAY,EAAE,GAAG,EAAE;EAEzE,OAAO;IACLxB,WAAW;IACXmF,MAAM;IACN3E,aAAa;IACbE,SAAS;IACTP,SAAS;IACTpB,KAAK;IACLuB,SAAS;IACTgD,gBAAgB;IAChBkB,sBAAsB;IACtBC,KAAK;IACLtD;EACF,CAAC;AACH","ignoreList":[]}