@oxyhq/services 5.17.17 → 5.18.0

package/lib/module/core/mixins/OxyServices.popup.js

@@ -0,0 +1,349 @@
+"use strict";
+
+import { OxyAuthenticationError } from '../OxyServices.errors';
+/**
+ * Popup-based Cross-Domain Authentication Mixin
+ *
+ * Implements OAuth2-style authentication using popup windows and postMessage.
+ * This is the primary authentication method for modern browsers, providing a
+ * Google-like experience without full page redirects.
+ *
+ * Flow:
+ * 1. Opens small popup window to auth.oxy.so
+ * 2. User signs in (auth.oxy.so sets its own first-party cookie)
+ * 3. auth.oxy.so sends token back via postMessage
+ * 4. Popup closes, parent app has the session
+ *
+ * Features:
+ * - No full page redirect (preserves app state)
+ * - Works across different domains (homiio.com, mention.earth, etc.)
+ * - Silent refresh using hidden iframe for seamless SSO
+ * - CSRF protection via state parameter
+ * - XSS protection via origin validation
+ *
+ * Browser Support: All modern browsers (IE11+)
+ */
+export function OxyServicesPopupAuthMixin(Base) {
+  return class extends Base {
+    constructor(...args) {
+      super(...args);
+    }
+    static AUTH_URL = 'https://auth.oxy.so';
+    static POPUP_WIDTH = 500;
+    static POPUP_HEIGHT = 700;
+    static POPUP_TIMEOUT = 60000; // 1 minute
+    static SILENT_TIMEOUT = 5000; // 5 seconds
+
+    /**
+     * Sign in using popup window
+     *
+     * Opens a centered popup window to auth.oxy.so where the user can sign in.
+     * The popup automatically closes after successful authentication and the
+     * session is returned to the parent window.
+     *
+     * @param options - Popup configuration options
+     * @returns Session with access token and user data
+     * @throws {OxyAuthenticationError} If popup is blocked or auth fails
+     *
+     * @example
+     * ```typescript
+     * const handleSignIn = async () => {
+     *   try {
+     *     const session = await oxyServices.signInWithPopup();
+     *     console.log('Signed in:', session.user);
+     *   } catch (error) {
+     *     if (error.message.includes('blocked')) {
+     *       alert('Please allow popups for this site');
+     *     }
+     *   }
+     * };
+     * ```
+     */
+    async signInWithPopup(options = {}) {
+      if (typeof window === 'undefined') {
+        throw new OxyAuthenticationError('Popup authentication requires browser environment');
+      }
+      const state = this.generateState();
+      const nonce = this.generateNonce();
+
+      // Store state for CSRF protection
+      this.storeAuthState(state, nonce);
+      const width = options.width || this.constructor.POPUP_WIDTH;
+      const height = options.height || this.constructor.POPUP_HEIGHT;
+      const timeout = options.timeout || this.constructor.POPUP_TIMEOUT;
+      const mode = options.mode || 'login';
+      const authUrl = this.buildAuthUrl({
+        mode,
+        state,
+        nonce,
+        clientId: window.location.origin,
+        redirectUri: `${this.constructor.AUTH_URL}/auth/callback`
+      });
+      const popup = this.openCenteredPopup(authUrl, 'Oxy Sign In', width, height);
+      if (!popup) {
+        throw new OxyAuthenticationError('Popup blocked. Please allow popups for this site and try again.');
+      }
+      try {
+        const session = await this.waitForPopupAuth(popup, state, timeout);
+
+        // Store access token if present
+        if (session && session.accessToken) {
+          this.httpService.setTokens(session.accessToken);
+        }
+        return session;
+      } catch (error) {
+        throw error;
+      } finally {
+        this.clearAuthState(state);
+      }
+    }
+
+    /**
+     * Sign up using popup window
+     *
+     * Same as signInWithPopup but opens the signup page by default.
+     *
+     * @param options - Popup configuration options
+     * @returns Session with access token and user data
+     */
+    async signUpWithPopup(options = {}) {
+      return this.signInWithPopup({
+        ...options,
+        mode: 'signup'
+      });
+    }
+
+    /**
+     * Silent sign-in using hidden iframe
+     *
+     * Attempts to automatically re-authenticate the user without any UI.
+     * This is what enables seamless SSO across all Oxy domains.
+     *
+     * How it works:
+     * 1. Creates hidden iframe pointing to auth.oxy.so/silent-auth
+     * 2. If user has valid session at auth.oxy.so, it sends token via postMessage
+     * 3. If not, iframe responds with null (no error thrown)
+     *
+     * This should be called on app startup to check for existing sessions.
+     *
+     * @param options - Silent auth options
+     * @returns Session if user is signed in, null otherwise
+     *
+     * @example
+     * ```typescript
+     * useEffect(() => {
+     *   const checkAuth = async () => {
+     *     const session = await oxyServices.silentSignIn();
+     *     if (session) {
+     *       setUser(session.user);
+     *     }
+     *   };
+     *   checkAuth();
+     * }, []);
+     * ```
+     */
+    async silentSignIn(options = {}) {
+      if (typeof window === 'undefined') {
+        return null;
+      }
+      const timeout = options.timeout || this.constructor.SILENT_TIMEOUT;
+      const nonce = this.generateNonce();
+      const clientId = window.location.origin;
+      const iframe = document.createElement('iframe');
+      iframe.style.display = 'none';
+      iframe.style.position = 'absolute';
+      iframe.style.width = '0';
+      iframe.style.height = '0';
+      iframe.style.border = 'none';
+      const silentUrl = `${this.constructor.AUTH_URL}/auth/silent?` + `client_id=${encodeURIComponent(clientId)}&` + `nonce=${nonce}`;
+      iframe.src = silentUrl;
+      document.body.appendChild(iframe);
+      try {
+        const session = await this.waitForIframeAuth(iframe, timeout, clientId);
+        if (session && session.accessToken) {
+          this.httpService.setTokens(session.accessToken);
+        }
+        return session;
+      } catch (error) {
+        return null;
+      } finally {
+        document.body.removeChild(iframe);
+      }
+    }
+
+    /**
+     * Open a centered popup window
+     *
+     * @private
+     */
+    openCenteredPopup(url, title, width, height) {
+      const left = window.screenX + (window.outerWidth - width) / 2;
+      const top = window.screenY + (window.outerHeight - height) / 2;
+      const features = [`width=${width}`, `height=${height}`, `left=${left}`, `top=${top}`, 'toolbar=no', 'menubar=no', 'scrollbars=yes', 'resizable=yes', 'status=no', 'location=no'].join(',');
+      return window.open(url, title, features);
+    }
+
+    /**
+     * Wait for authentication response from popup
+     *
+     * @private
+     */
+    async waitForPopupAuth(popup, expectedState, timeout) {
+      return new Promise((resolve, reject) => {
+        const timeoutId = setTimeout(() => {
+          cleanup();
+          reject(new OxyAuthenticationError('Authentication timeout'));
+        }, timeout);
+        const messageHandler = event => {
+          // CRITICAL: Verify origin to prevent XSS attacks
+          if (event.origin !== this.constructor.AUTH_URL) {
+            return;
+          }
+          const {
+            type,
+            state,
+            session,
+            error
+          } = event.data;
+          if (type !== 'oxy_auth_response') {
+            return;
+          }
+
+          // Verify state parameter to prevent CSRF attacks
+          if (state !== expectedState) {
+            cleanup();
+            reject(new OxyAuthenticationError('Invalid state parameter. Possible CSRF attack.'));
+            return;
+          }
+          cleanup();
+          if (error) {
+            reject(new OxyAuthenticationError(error));
+          } else if (session) {
+            resolve(session);
+          } else {
+            reject(new OxyAuthenticationError('No session received from authentication server'));
+          }
+        };
+
+        // Poll to detect if user closed the popup
+        const pollInterval = setInterval(() => {
+          if (popup.closed) {
+            cleanup();
+            reject(new OxyAuthenticationError('Authentication cancelled by user'));
+          }
+        }, 500);
+        const cleanup = () => {
+          clearTimeout(timeoutId);
+          clearInterval(pollInterval);
+          window.removeEventListener('message', messageHandler);
+          if (!popup.closed) {
+            popup.close();
+          }
+        };
+        window.addEventListener('message', messageHandler);
+      });
+    }
+
+    /**
+     * Wait for authentication response from iframe
+     *
+     * @private
+     */
+    async waitForIframeAuth(iframe, timeout, expectedOrigin) {
+      return new Promise(resolve => {
+        const timeoutId = setTimeout(() => {
+          cleanup();
+          resolve(null); // Silent failure - don't throw
+        }, timeout);
+        const messageHandler = event => {
+          // Verify origin
+          if (event.origin !== this.constructor.AUTH_URL) {
+            return;
+          }
+          const {
+            type,
+            session
+          } = event.data;
+          if (type !== 'oxy_silent_auth') {
+            return;
+          }
+          cleanup();
+          resolve(session || null);
+        };
+        const cleanup = () => {
+          clearTimeout(timeoutId);
+          window.removeEventListener('message', messageHandler);
+        };
+        window.addEventListener('message', messageHandler);
+      });
+    }
+
+    /**
+     * Build authentication URL with query parameters
+     *
+     * @private
+     */
+    buildAuthUrl(params) {
+      const url = new URL(`${this.constructor.AUTH_URL}/${params.mode}`);
+      url.searchParams.set('response_type', 'token');
+      url.searchParams.set('client_id', params.clientId);
+      url.searchParams.set('redirect_uri', params.redirectUri);
+      url.searchParams.set('state', params.state);
+      url.searchParams.set('nonce', params.nonce);
+      return url.toString();
+    }
+
+    /**
+     * Generate cryptographically secure state for CSRF protection
+     *
+     * @private
+     */
+    generateState() {
+      if (typeof window !== 'undefined' && window.crypto && window.crypto.randomUUID) {
+        return window.crypto.randomUUID();
+      }
+      return `${Date.now()}-${Math.random().toString(36).substring(2, 15)}`;
+    }
+
+    /**
+     * Generate nonce for replay attack prevention
+     *
+     * @private
+     */
+    generateNonce() {
+      if (typeof window !== 'undefined' && window.crypto && window.crypto.randomUUID) {
+        return window.crypto.randomUUID();
+      }
+      return `${Date.now()}-${Math.random().toString(36).substring(2, 15)}`;
+    }
+
+    /**
+     * Store auth state in session storage
+     *
+     * @private
+     */
+    storeAuthState(state, nonce) {
+      if (typeof window !== 'undefined' && window.sessionStorage) {
+        sessionStorage.setItem(`oxy_auth_state_${state}`, JSON.stringify({
+          nonce,
+          timestamp: Date.now()
+        }));
+      }
+    }
+
+    /**
+     * Clear auth state from session storage
+     *
+     * @private
+     */
+    clearAuthState(state) {
+      if (typeof window !== 'undefined' && window.sessionStorage) {
+        sessionStorage.removeItem(`oxy_auth_state_${state}`);
+      }
+    }
+  };
+}
+
+// Export the mixin function as both named and default
+export { OxyServicesPopupAuthMixin as PopupAuthMixin };
+//# sourceMappingURL=OxyServices.popup.js.map

package/lib/module/core/mixins/OxyServices.popup.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["OxyAuthenticationError","OxyServicesPopupAuthMixin","Base","constructor","args","AUTH_URL","POPUP_WIDTH","POPUP_HEIGHT","POPUP_TIMEOUT","SILENT_TIMEOUT","signInWithPopup","options","window","state","generateState","nonce","generateNonce","storeAuthState","width","height","timeout","mode","authUrl","buildAuthUrl","clientId","location","origin","redirectUri","popup","openCenteredPopup","session","waitForPopupAuth","accessToken","httpService","setTokens","error","clearAuthState","signUpWithPopup","silentSignIn","iframe","document","createElement","style","display","position","border","silentUrl","encodeURIComponent","src","body","appendChild","waitForIframeAuth","removeChild","url","title","left","screenX","outerWidth","top","screenY","outerHeight","features","join","open","expectedState","Promise","resolve","reject","timeoutId","setTimeout","cleanup","messageHandler","event","type","data","pollInterval","setInterval","closed","clearTimeout","clearInterval","removeEventListener","close","addEventListener","expectedOrigin","params","URL","searchParams","set","toString","crypto","randomUUID","Date","now","Math","random","substring","sessionStorage","setItem","JSON","stringify","timestamp","removeItem","PopupAuthMixin"],"sourceRoot":"../../../../src","sources":["core/mixins/OxyServices.popup.ts"],"mappings":";;AACA,SAASA,sBAAsB,QAAQ,uBAAuB;AAc9D;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,yBAAyBA,CAAmCC,IAAO,EAAE;EACnF,OAAO,cAAcA,IAAI,CAAC;IACxBC,WAAWA,CAAC,GAAGC,IAAW,EAAE;MAC1B,KAAK,CAAC,GAAIA,IAAc,CAAC;IAC3B;IACF,OAAuBC,QAAQ,GAAG,qBAAqB;IACvD,OAAuBC,WAAW,GAAG,GAAG;IACxC,OAAuBC,YAAY,GAAG,GAAG;IACzC,OAAuBC,aAAa,GAAG,KAAK,CAAC,CAAC;IAC9C,OAAuBC,cAAc,GAAG,IAAI,CAAC,CAAC;;IAE9C;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAMC,eAAeA,CAACC,OAAyB,GAAG,CAAC,CAAC,EAAiC;MACnF,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;QACjC,MAAM,IAAIZ,sBAAsB,CAAC,mDAAmD,CAAC;MACvF;MAEA,MAAMa,KAAK,GAAG,IAAI,CAACC,aAAa,CAAC,CAAC;MAClC,MAAMC,KAAK,GAAG,IAAI,CAACC,aAAa,CAAC,CAAC;;MAElC;MACA,IAAI,CAACC,cAAc,CAACJ,KAAK,EAAEE,KAAK,CAAC;MAEjC,MAAMG,KAAK,GAAGP,OAAO,CAACO,KAAK,IAAK,IAAI,CAACf,WAAW,CAASG,WAAW;MACpE,MAAMa,MAAM,GAAGR,OAAO,CAACQ,MAAM,IAAK,IAAI,CAAChB,WAAW,CAASI,YAAY;MACvE,MAAMa,OAAO,GAAGT,OAAO,CAACS,OAAO,IAAK,IAAI,CAACjB,WAAW,CAASK,aAAa;MAC1E,MAAMa,IAAI,GAAGV,OAAO,CAACU,IAAI,IAAI,OAAO;MAEpC,MAAMC,OAAO,GAAG,IAAI,CAACC,YAAY,CAAC;QAChCF,IAAI;QACJR,KAAK;QACLE,KAAK;QACLS,QAAQ,EAAEZ,MAAM,CAACa,QAAQ,CAACC,MAAM;QAChCC,WAAW,EAAE,GAAI,IAAI,CAACxB,WAAW,CAASE,QAAQ;MACpD,CAAC,CAAC;MAEF,MAAMuB,KAAK,GAAG,IAAI,CAACC,iBAAiB,CAACP,OAAO,EAAE,aAAa,EAAEJ,KAAK,EAAEC,MAAM,CAAC;MAE3E,IAAI,CAACS,KAAK,EAAE;QACV,MAAM,IAAI5B,sBAAsB,CAC9B,iEACF,CAAC;MACH;MAEA,IAAI;QACF,MAAM8B,OAAO,GAAG,MAAM,IAAI,CAACC,gBAAgB,CAACH,KAAK,EAAEf,KAAK,EAAEO,OAAO,CAAC;;QAElE;QACA,IAAIU,OAAO,IAAKA,OAAO,CAASE,WAAW,EAAE;UAC3C,IAAI,CAACC,WAAW,CAACC,SAAS,CAAEJ,OAAO,CAASE,WAAW,CAAC;QAC1D;QAEA,OAAOF,OAAO;MAChB,CAAC,CAAC,OAAOK,KAAK,EAAE;QACd,MAAMA,KAAK;MACb,CAAC,SAAS;QACR,IAAI,CAACC,cAAc,CAACvB,KAAK,CAAC;MAC5B;IACF;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAMwB,eAAeA,CAAC1B,OAAyB,GAAG,CAAC,CAAC,EAAiC;MACnF,OAAO,IAAI,CAACD,eAAe,CAAC;QAAE,GAAGC,OAAO;QAAEU,IAAI,EAAE;MAAS,CAAC,CAAC;IAC7D;;IAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;IACE,MAAMiB,YAAYA,CAAC3B,OAA0B,GAAG,CAAC,CAAC,EAAwC;MACxF,IAAI,OAAOC,MAAM,KAAK,WAAW,EAAE;QACjC,OAAO,IAAI;MACb;MAEA,MAAMQ,OAAO,GAAGT,OAAO,CAACS,OAAO,IAAK,IAAI,CAACjB,WAAW,CAASM,cAAc;MAC3E,MAAMM,KAAK,GAAG,IAAI,CAACC,aAAa,CAAC,CAAC;MAClC,MAAMQ,QAAQ,GAAGZ,MAAM,CAACa,QAAQ,CAACC,MAAM;MAEvC,MAAMa,MAAM,GAAGC,QAAQ,CAACC,aAAa,CAAC,QAAQ,CAAC;MAC/CF,MAAM,CAACG,KAAK,CAACC,OAAO,GAAG,MAAM;MAC7BJ,MAAM,CAACG,KAAK,CAACE,QAAQ,GAAG,UAAU;MAClCL,MAAM,CAACG,KAAK,CAACxB,KAAK,GAAG,GAAG;MACxBqB,MAAM,CAACG,KAAK,CAACvB,MAAM,GAAG,GAAG;MACzBoB,MAAM,CAACG,KAAK,CAACG,MAAM,GAAG,MAAM;MAE5B,MAAMC,SAAS,GAAG,GAAI,IAAI,CAAC3C,WAAW,CAASE,QAAQ,eAAe,GAAG,aAAa0C,kBAAkB,CAACvB,QAAQ,CAAC,GAAG,GAAG,SAAST,KAAK,EAAE;MAExIwB,MAAM,CAACS,GAAG,GAAGF,SAAS;MACtBN,QAAQ,CAACS,IAAI,CAACC,WAAW,CAACX,MAAM,CAAC;MAEjC,IAAI;QACF,MAAMT,OAAO,GAAG,MAAM,IAAI,CAACqB,iBAAiB,CAACZ,MAAM,EAAEnB,OAAO,EAAEI,QAAQ,CAAC;QAEvE,IAAIM,OAAO,IAAKA,OAAO,CAASE,WAAW,EAAE;UAC3C,IAAI,CAACC,WAAW,CAACC,SAAS,CAAEJ,OAAO,CAASE,WAAW,CAAC;QAC1D;QAEA,OAAOF,OAAO;MAChB,CAAC,CAAC,OAAOK,KAAK,EAAE;QACd,OAAO,IAAI;MACb,CAAC,SAAS;QACRK,QAAQ,CAACS,IAAI,CAACG,WAAW,CAACb,MAAM,CAAC;MACnC;IACF;;IAEA;AACF;AACA;AACA;AACA;IACSV,iBAAiBA,CAACwB,GAAW,EAAEC,KAAa,EAAEpC,KAAa,EAAEC,MAAc,EAAiB;MACjG,MAAMoC,IAAI,GAAG3C,MAAM,CAAC4C,OAAO,GAAG,CAAC5C,MAAM,CAAC6C,UAAU,GAAGvC,KAAK,IAAI,CAAC;MAC7D,MAAMwC,GAAG,GAAG9C,MAAM,CAAC+C,OAAO,GAAG,CAAC/C,MAAM,CAACgD,WAAW,GAAGzC,MAAM,IAAI,CAAC;MAE9D,MAAM0C,QAAQ,GAAG,CACf,SAAS3C,KAAK,EAAE,EAChB,UAAUC,MAAM,EAAE,EAClB,QAAQoC,IAAI,EAAE,EACd,OAAOG,GAAG,EAAE,EACZ,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,WAAW,EACX,aAAa,CACd,CAACI,IAAI,CAAC,GAAG,CAAC;MAEX,OAAOlD,MAAM,CAACmD,IAAI,CAACV,GAAG,EAAEC,KAAK,EAAEO,QAAQ,CAAC;IAC1C;;IAEA;AACF;AACA;AACA;AACA;IACE,MAAa9B,gBAAgBA,CAC3BH,KAAa,EACboC,aAAqB,EACrB5C,OAAe,EACgB;MAC/B,OAAO,IAAI6C,OAAO,CAAC,CAACC,OAAO,EAAEC,MAAM,KAAK;QACtC,MAAMC,SAAS,GAAGC,UAAU,CAAC,MAAM;UACjCC,OAAO,CAAC,CAAC;UACTH,MAAM,CAAC,IAAInE,sBAAsB,CAAC,wBAAwB,CAAC,CAAC;QAC9D,CAAC,EAAEoB,OAAO,CAAC;QAEX,MAAMmD,cAAc,GAAIC,KAAmB,IAAK;UAC9C;UACA,IAAIA,KAAK,CAAC9C,MAAM,KAAM,IAAI,CAACvB,WAAW,CAASE,QAAQ,EAAE;YACvD;UACF;UAEA,MAAM;YAAEoE,IAAI;YAAE5D,KAAK;YAAEiB,OAAO;YAAEK;UAAM,CAAC,GAAGqC,KAAK,CAACE,IAAI;UAElD,IAAID,IAAI,KAAK,mBAAmB,EAAE;YAChC;UACF;;UAEA;UACA,IAAI5D,KAAK,KAAKmD,aAAa,EAAE;YAC3BM,OAAO,CAAC,CAAC;YACTH,MAAM,CAAC,IAAInE,sBAAsB,CAAC,gDAAgD,CAAC,CAAC;YACpF;UACF;UAEAsE,OAAO,CAAC,CAAC;UAET,IAAInC,KAAK,EAAE;YACTgC,MAAM,CAAC,IAAInE,sBAAsB,CAACmC,KAAK,CAAC,CAAC;UAC3C,CAAC,MAAM,IAAIL,OAAO,EAAE;YAClBoC,OAAO,CAACpC,OAAO,CAAC;UAClB,CAAC,MAAM;YACLqC,MAAM,CAAC,IAAInE,sBAAsB,CAAC,gDAAgD,CAAC,CAAC;UACtF;QACF,CAAC;;QAED;QACA,MAAM2E,YAAY,GAAGC,WAAW,CAAC,MAAM;UACrC,IAAIhD,KAAK,CAACiD,MAAM,EAAE;YAChBP,OAAO,CAAC,CAAC;YACTH,MAAM,CAAC,IAAInE,sBAAsB,CAAC,kCAAkC,CAAC,CAAC;UACxE;QACF,CAAC,EAAE,GAAG,CAAC;QAEP,MAAMsE,OAAO,GAAGA,CAAA,KAAM;UACpBQ,YAAY,CAACV,SAAS,CAAC;UACvBW,aAAa,CAACJ,YAAY,CAAC;UAC3B/D,MAAM,CAACoE,mBAAmB,CAAC,SAAS,EAAET,cAAc,CAAC;UACrD,IAAI,CAAC3C,KAAK,CAACiD,MAAM,EAAE;YACjBjD,KAAK,CAACqD,KAAK,CAAC,CAAC;UACf;QACF,CAAC;QAEDrE,MAAM,CAACsE,gBAAgB,CAAC,SAAS,EAAEX,cAAc,CAAC;MACpD,CAAC,CAAC;IACJ;;IAEA;AACF;AACA;AACA;AACA;IACE,MAAapB,iBAAiBA,CAC5BZ,MAAyB,EACzBnB,OAAe,EACf+D,cAAsB,EACgB;MACtC,OAAO,IAAIlB,OAAO,CAAEC,OAAO,IAAK;QAC9B,MAAME,SAAS,GAAGC,UAAU,CAAC,MAAM;UACjCC,OAAO,CAAC,CAAC;UACTJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACjB,CAAC,EAAE9C,OAAO,CAAC;QAEX,MAAMmD,cAAc,GAAIC,KAAmB,IAAK;UAC9C;UACA,IAAIA,KAAK,CAAC9C,MAAM,KAAM,IAAI,CAACvB,WAAW,CAASE,QAAQ,EAAE;YACvD;UACF;UAEA,MAAM;YAAEoE,IAAI;YAAE3C;UAAQ,CAAC,GAAG0C,KAAK,CAACE,IAAI;UAEpC,IAAID,IAAI,KAAK,iBAAiB,EAAE;YAC9B;UACF;UAEAH,OAAO,CAAC,CAAC;UACTJ,OAAO,CAACpC,OAAO,IAAI,IAAI,CAAC;QAC1B,CAAC;QAED,MAAMwC,OAAO,GAAGA,CAAA,KAAM;UACpBQ,YAAY,CAACV,SAAS,CAAC;UACvBxD,MAAM,CAACoE,mBAAmB,CAAC,SAAS,EAAET,cAAc,CAAC;QACvD,CAAC;QAED3D,MAAM,CAACsE,gBAAgB,CAAC,SAAS,EAAEX,cAAc,CAAC;MACpD,CAAC,CAAC;IACJ;;IAEA;AACF;AACA;AACA;AACA;IACShD,YAAYA,CAAC6D,MAMnB,EAAU;MACT,MAAM/B,GAAG,GAAG,IAAIgC,GAAG,CAAC,GAAI,IAAI,CAAClF,WAAW,CAASE,QAAQ,IAAI+E,MAAM,CAAC/D,IAAI,EAAE,CAAC;MAC3EgC,GAAG,CAACiC,YAAY,CAACC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC;MAC9ClC,GAAG,CAACiC,YAAY,CAACC,GAAG,CAAC,WAAW,EAAEH,MAAM,CAAC5D,QAAQ,CAAC;MAClD6B,GAAG,CAACiC,YAAY,CAACC,GAAG,CAAC,cAAc,EAAEH,MAAM,CAACzD,WAAW,CAAC;MACxD0B,GAAG,CAACiC,YAAY,CAACC,GAAG,CAAC,OAAO,EAAEH,MAAM,CAACvE,KAAK,CAAC;MAC3CwC,GAAG,CAACiC,YAAY,CAACC,GAAG,CAAC,OAAO,EAAEH,MAAM,CAACrE,KAAK,CAAC;MAC3C,OAAOsC,GAAG,CAACmC,QAAQ,CAAC,CAAC;IACvB;;IAEA;AACF;AACA;AACA;AACA;IACS1E,aAAaA,CAAA,EAAW;MAC7B,IAAI,OAAOF,MAAM,KAAK,WAAW,IAAIA,MAAM,CAAC6E,MAAM,IAAI7E,MAAM,CAAC6E,MAAM,CAACC,UAAU,EAAE;QAC9E,OAAO9E,MAAM,CAAC6E,MAAM,CAACC,UAAU,CAAC,CAAC;MACnC;MACA,OAAO,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAIC,IAAI,CAACC,MAAM,CAAC,CAAC,CAACN,QAAQ,CAAC,EAAE,CAAC,CAACO,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;IACvE;;IAEA;AACF;AACA;AACA;AACA;IACS/E,aAAaA,CAAA,EAAW;MAC7B,IAAI,OAAOJ,MAAM,KAAK,WAAW,IAAIA,MAAM,CAAC6E,MAAM,IAAI7E,MAAM,CAAC6E,MAAM,CAACC,UAAU,EAAE;QAC9E,OAAO9E,MAAM,CAAC6E,MAAM,CAACC,UAAU,CAAC,CAAC;MACnC;MACA,OAAO,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC,IAAIC,IAAI,CAACC,MAAM,CAAC,CAAC,CAACN,QAAQ,CAAC,EAAE,CAAC,CAACO,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;IACvE;;IAEA;AACF;AACA;AACA;AACA;IACS9E,cAAcA,CAACJ,KAAa,EAAEE,KAAa,EAAQ;MACxD,IAAI,OAAOH,MAAM,KAAK,WAAW,IAAIA,MAAM,CAACoF,cAAc,EAAE;QAC1DA,cAAc,CAACC,OAAO,CAAC,kBAAkBpF,KAAK,EAAE,EAAEqF,IAAI,CAACC,SAAS,CAAC;UAAEpF,KAAK;UAAEqF,SAAS,EAAET,IAAI,CAACC,GAAG,CAAC;QAAE,CAAC,CAAC,CAAC;MACrG;IACF;;IAEA;AACF;AACA;AACA;AACA;IACSxD,cAAcA,CAACvB,KAAa,EAAQ;MACzC,IAAI,OAAOD,MAAM,KAAK,WAAW,IAAIA,MAAM,CAACoF,cAAc,EAAE;QAC1DA,cAAc,CAACK,UAAU,CAAC,kBAAkBxF,KAAK,EAAE,CAAC;MACtD;IACF;EACA,CAAC;AACH;;AAEA;AACA,SAASZ,yBAAyB,IAAIqG,cAAc","ignoreList":[]}