@pelican-identity/auth-core 1.2.3 → 1.2.5

package/dist/constants.d.ts

@@ -0,0 +1,2 @@
+export declare const BASEURL = "http://192.168.1.2:8080";
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,4BAA4B,CAAC"}

package/dist/constants.js

@@ -0,0 +1,2 @@
+export const BASEURL = "http://192.168.1.2:8080";
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,yBAAyB,CAAC"}

package/dist/engine/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/engine/engine.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EAGpB,MAAM,gBAAgB,CAAC;AAYxB,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC;AAMxC,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD,OAAO,CAAC,SAAS,CAAC,CAAY;IAC9B,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,UAAU,CAAuB;IAEzC,OAAO,CAAC,iBAAiB,CAAC,CAAa;IAEvC,OAAO,CAAC,SAAS,CAEV;IAEP,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;gBAEzC,MAAM,EAAE,iBAAiB;IAsBrC,EAAE,CAAC,CAAC,SAAS,MAAM,mBAAmB,EACpC,KAAK,EAAE,CAAC,EACR,EAAE,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAWhC,KAAK;IAqCX,IAAI;YAOU,aAAa;YAiBb,cAAc;IA+B5B,OAAO,CAAC,aAAa;IAqCrB,OAAO,CAAC,iBAAiB;YAwCX,cAAc;IA4B5B,OAAO,CAAC,wBAAwB;IAYhC,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,SAAS;IAyBjB,OAAO,CAAC,mBAAmB;IAU3B,OAAO,CAAC,YAAY;IAMpB,OAAO;IAMP,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,IAAI;CAIb"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/engine/engine.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EAGpB,MAAM,gBAAgB,CAAC;AAYxB,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC;AAMxC,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD,OAAO,CAAC,SAAS,CAAC,CAAY;IAC9B,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,UAAU,CAAuB;IAEzC,OAAO,CAAC,iBAAiB,CAAC,CAAa;IAEvC,OAAO,CAAC,SAAS,CAEV;IAEP,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;gBAEzC,MAAM,EAAE,iBAAiB;IAsBrC,EAAE,CAAC,CAAC,SAAS,MAAM,mBAAmB,EACpC,KAAK,EAAE,CAAC,EACR,EAAE,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAWhC,KAAK;IAqCX,IAAI;YAOU,aAAa;YAiBb,cAAc;IAkC5B,OAAO,CAAC,aAAa;IAiCrB,OAAO,CAAC,iBAAiB;YAwCX,cAAc;IA4B5B,OAAO,CAAC,wBAAwB;IAYhC,OAAO,CAAC,wBAAwB;IAQhC,OAAO,CAAC,SAAS;IAsBjB,OAAO,CAAC,mBAAmB;IAQ3B,OAAO,CAAC,YAAY;IAMpB,OAAO;IAMP,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,IAAI;CAIb"}

package/dist/index.d.mts

@@ -155,8 +155,13 @@ type TransportHandlers = {
 declare class Transport {
     private socket?;
     private handlers;
+    private reconnectAttempts;
+    private maxReconnectAttempts;
+    private isExplicitlyClosed;
+    private url?;
     constructor(handlers: TransportHandlers);
     connect(url: string): void;
+    private attemptReconnect;
     send(payload: ISocketMessage): void;
     close(): void;
 }
@@ -170,6 +175,6 @@ declare const getAuthSession: () => AuthSession | null;
 declare const clearAuthSession: () => void;
 declare const clearAllAuthData: () => void;
 
-declare const BASEURL = "http://localhost:8080";
+declare const BASEURL = "http://192.168.1.2:8080";
 
 export { type AuthSession, type AuthType, BASEURL, CryptoService, type IEmail, type IKycData, type IPhone, type ISocketMessage, type IUserData, type IdCardTypes, type IdentityResult, type PelicanAuthConfig, type PelicanAuthEventMap, type PelicanAuthState, PelicanAuthentication, StateMachine, Transport, clearAllAuthData, clearAuthSession, getAuthSession, storeAuthSession };

package/dist/index.d.ts

@@ -155,8 +155,13 @@ type TransportHandlers = {
 declare class Transport {
     private socket?;
     private handlers;
+    private reconnectAttempts;
+    private maxReconnectAttempts;
+    private isExplicitlyClosed;
+    private url?;
     constructor(handlers: TransportHandlers);
     connect(url: string): void;
+    private attemptReconnect;
     send(payload: ISocketMessage): void;
     close(): void;
 }
@@ -170,6 +175,6 @@ declare const getAuthSession: () => AuthSession | null;
 declare const clearAuthSession: () => void;
 declare const clearAllAuthData: () => void;
 
-declare const BASEURL = "http://localhost:8080";
+declare const BASEURL = "http://192.168.1.2:8080";
 
 export { type AuthSession, type AuthType, BASEURL, CryptoService, type IEmail, type IKycData, type IPhone, type ISocketMessage, type IUserData, type IdCardTypes, type IdentityResult, type PelicanAuthConfig, type PelicanAuthEventMap, type PelicanAuthState, PelicanAuthentication, StateMachine, Transport, clearAllAuthData, clearAuthSession, getAuthSession, storeAuthSession };

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,eAAe,CAAC;AAE9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -187,14 +187,47 @@ var StateMachine = class {
 // src/utilities/transport.ts
 var Transport = class {
   constructor(handlers) {
+    this.reconnectAttempts = 0;
+    this.maxReconnectAttempts = 5;
+    this.isExplicitlyClosed = false;
     this.handlers = handlers;
   }
   connect(url) {
+    this.url = url;
+    this.isExplicitlyClosed = false;
     this.socket = new WebSocket(url);
-    this.socket.onopen = () => this.handlers.onOpen?.();
-    this.socket.onmessage = (e) => this.handlers.onMessage?.(e.data);
-    this.socket.onerror = (e) => this.handlers.onError?.(e);
-    this.socket.onclose = (e) => this.handlers.onClose?.(e);
+    this.socket.onopen = () => {
+      this.reconnectAttempts = 0;
+      this.handlers.onOpen?.();
+    };
+    this.socket.onmessage = (e) => {
+      try {
+        const data = JSON.parse(e.data);
+        this.handlers.onMessage?.(data);
+      } catch (err) {
+        console.error("Failed to parse message", err);
+      }
+    };
+    this.socket.onerror = (e) => {
+      this.handlers.onError?.(e);
+    };
+    this.socket.onclose = (e) => {
+      this.handlers.onClose?.(e);
+      if (!this.isExplicitlyClosed) {
+        this.attemptReconnect();
+      }
+    };
+  }
+  attemptReconnect() {
+    if (this.reconnectAttempts >= this.maxReconnectAttempts) {
+      console.error("\u274C Max reconnect attempts reached");
+      return;
+    }
+    this.reconnectAttempts++;
+    const delay = Math.pow(2, this.reconnectAttempts) * 500;
+    setTimeout(() => {
+      if (this.url) this.connect(this.url);
+    }, delay);
   }
   send(payload) {
     if (this.socket?.readyState === WebSocket.OPEN) {
@@ -202,12 +235,13 @@ var Transport = class {
     }
   }
   close() {
+    this.isExplicitlyClosed = true;
     this.socket?.close();
   }
 };
 
 // src/constants.ts
-var BASEURL = "http://localhost:8080";
+var BASEURL = "http://192.168.1.2:8080";
 
 // src/engine/engine.ts
 var PelicanAuthentication = class {
@@ -310,16 +344,18 @@ var PelicanAuthentication = class {
         )}`
       );
     } else {
-      const qr = await QRCode__default.default.toDataURL(JSON.stringify(payload));
+      const qr = await QRCode__default.default.toDataURL(JSON.stringify(payload), {
+        type: "image/png",
+        scale: 3,
+        color: { light: "#FFFFF5", dark: "#121212" }
+      });
       this.emit("qr", qr);
     }
   }
   /** Main WebSocket message router */
   handleMessage(msg) {
-    console.log(msg);
     switch (msg.type) {
       case "paired":
-        console.log("Paired");
         this.stateMachine.transition("paired");
         this.transport.send({
           type: "authenticate",
@@ -427,20 +463,17 @@ var PelicanAuthentication = class {
         authType: this.config.authType
       });
     }
-    setTimeout(() => {
-      this.transport?.close();
-    }, 150);
+    this.transport?.close();
     clearAuthSession();
     this.resetSession();
     if (!this.config.continuousMode) {
       this.detachVisibilityRecovery();
     }
-    this.stateMachine.transition(success ? "confirmed" : "terminated");
+    this.stateMachine.transition(success ? "confirmed" : "idle");
   }
   restartIfContinuous() {
-    if (!this.config.continuousMode) return;
-    this.terminate(false);
     this.stateMachine.transition("idle");
+    if (!this.config.continuousMode) return;
     setTimeout(() => {
       this.start();
     }, 150);

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/utilities/crypto.ts","../src/utilities/storage.ts","../src/utilities/stateMachine.ts","../src/utilities/transport.ts","../src/constants.ts","../src/engine/engine.ts"],"names":["nacl","encodeBase64","decodeBase64","QRCode"],"mappings":";;;;;;;;;;;;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,oBAAA,GAA+B;AAC7B,IAAA,MAAM,GAAA,GAAMA,qBAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAC/B,IAAA,OAAOC,2BAAa,GAAG,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGqB;AACnB,IAAA,MAAM,GAAA,GAAMC,2BAAa,SAAS,CAAA;AAClC,IAAA,MAAM,KAAA,GAAQF,qBAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAEjC,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAEvD,IAAA,MAAM,UAAA,GAAaA,qBAAA,CAAK,SAAA,CAAU,YAAA,EAAc,OAAO,GAAG,CAAA;AAE1D,IAAA,OAAO;AAAA,MACL,MAAA,EAAQC,2BAAa,UAAU,CAAA;AAAA,MAC/B,KAAA,EAAOA,2BAAa,KAAK;AAAA,KAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGkB;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAMC,2BAAa,SAAS,CAAA;AAClC,MAAA,MAAM,eAAA,GAAkBA,0BAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACrD,MAAA,MAAM,UAAA,GAAaA,0BAAA,CAAa,SAAA,CAAU,KAAK,CAAA;AAE/C,MAAA,MAAM,YAAYF,qBAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,EAAiB,YAAY,GAAG,CAAA;AAEtE,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,MACrE;AAEA,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAClD,MAAA,OAAO,OAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,qBAAqB,KAAK,CAAA;AACxC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,cAAA,GAAQ,aAAA;;;AC/Df,IAAM,cAAN,MAAkB;AAAA,EAAlB,WAAA,GAAA;AACE,IAAA,IAAA,CAAiB,MAAA,GAAS,eAAA;AAC1B,IAAA,IAAA,CAAiB,UAAA,GAAa,IAAI,EAAA,GAAK,GAAA;AACvC;AAAA,IAAA,IAAA,CAAQ,WAAA,uBACF,GAAA,EAAI;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKV,GAAA,CAAI,GAAA,EAAa,KAAA,EAAY,OAAA,GAA0B,EAAC,EAAS;AAC/D,IAAA,MAAM,EAAE,KAAA,GAAQ,IAAA,CAAK,UAAA,EAAY,iBAAA,GAAoB,MAAK,GAAI,OAAA;AAE9D,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAC/B,IAAA,MAAM,IAAA,GAAO,EAAE,KAAA,EAAO,SAAA,EAAU;AAGhC,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MACrE,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,6CAA6C,KAAK,CAAA;AAC/D,QAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,MAC1B;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,GAAA,EAAyB;AAE3B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,eAAe,OAAA,CAAQ,CAAA,EAAG,KAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAC5D,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAG9B,QAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,UAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,OAAO,IAAA,CAAK,KAAA;AAAA,MACd;AAAA,IACF,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,GAAA,EAAmB;AACxB,IAAA,IAAI;AACF,MAAA,cAAA,CAAe,WAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAAA,IAClD,SAAS,KAAA,EAAO;AAAA,IAEhB;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AAEZ,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAA,KAAQ;AAC3C,QAAA,IAAI,GAAA,CAAI,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA,EAAG;AAC/B,UAAA,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,QAC/B;AAAA,MACF,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,IAAA,CAAK,YAAY,KAAA,EAAM;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAA,CACN,KACA,IAAA,EACM;AACN,IAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAG9B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI;AACtC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,IAC7B,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,UAAU,GAAA,EAAyB;AACzC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAG,CAAA;AACrC,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AACF,CAAA;AAGA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAWzB,IAAM,gBAAA,GAAmB,CAC9B,SAAA,EACA,UAAA,EACA,KAAA,KACS;AACT,EAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,EAAE,SAAA,EAAW,YAAW,EAAG,EAAE,OAAO,CAAA;AAC7D;AAEO,IAAM,iBAAiB,MAA0B;AACtD,EAAA,OAAO,OAAA,CAAQ,IAAI,SAAS,CAAA;AAC9B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAC1B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,KAAA,EAAM;AAChB;;;AC1JO,IAAM,eAAN,MAAmB;AAAA,EAAnB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,KAAA,GAA0B,MAAA;AAClC,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAmC;AAAA,EAAA;AAAA,EAE3D,IAAI,OAAA,GAAU;AACZ,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,WAAW,IAAA,EAAwB;AACjC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,UAAU,EAAA,EAAmC;AAC3C,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,EAAE,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,EAAE,CAAA;AAAA,EACvC;AACF;;;ACPO,IAAM,YAAN,MAAgB;AAAA,EAIrB,YAAY,QAAA,EAA6B;AACvC,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA,EAEA,QAAQ,GAAA,EAAa;AACnB,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,SAAA,CAAU,GAAG,CAAA;AAE/B,IAAA,IAAA,CAAK,MAAA,CAAO,MAAA,GAAS,MAAM,IAAA,CAAK,SAAS,MAAA,IAAS;AAClD,IAAA,IAAA,CAAK,MAAA,CAAO,YAAY,CAAC,CAAA,KACvB,KAAK,QAAA,CAAS,SAAA,GAAY,EAAE,IAAI,CAAA;AAClC,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAa,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAC7D,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAkB,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EACpE;AAAA,EAEA,KAAK,OAAA,EAAyB;AAC5B,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AAC9C,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,KAAA,GAAQ;AACN,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;;;ACvCO,IAAM,OAAA,GAAU;;;ACyBhB,IAAM,wBAAN,MAA4B;AAAA,EAgBjC,YAAY,MAAA,EAA2B;AAfvC,IAAA,IAAA,CAAiB,MAAA,GAAS,IAAI,cAAA,EAAc;AAC5C,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,YAAA,EAAa;AAGjD,IAAA,IAAA,CAAQ,SAAA,GAAY,EAAA;AACpB,IAAA,IAAA,CAAQ,UAAA,GAA4B,IAAA;AAIpC,IAAA,IAAA,CAAQ,YAEJ,EAAC;AAKH,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAExD,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,cAAA,EAAgB,KAAA;AAAA,MAChB,WAAA,EAAa,KAAA;AAAA,MACb,GAAG;AAAA,KACL;AAGA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAU,CAAC,CAAA,KAAM,KAAK,IAAA,CAAK,OAAA,EAAS,CAAC,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,EAAA,CACE,OACA,EAAA,EACA;AAlEJ,IAAA,IAAA,EAAA;AAmEI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,SAAA,EAAL,KAAA,CAAA,KAAA,EAAA,CAAA,KAAA,CAAA,mBAA0B,IAAI,GAAA,EAAI,CAAA;AAClC,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,GAAA,CAAI,EAAE,CAAA;AAC7B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,OAAO,EAAE,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAA,GAAQ;AACZ,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,OAAA,KAAY,MAAA,EAAQ;AAE1C,IAAA,IAAA,CAAK,YAAA,EAAa;AAClB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,cAAc,CAAA;AAE3C,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,aAAA,EAAc;AAGvC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,oBAAA,EAAqB;AACnD,MAAA,IAAA,CAAK,SAAA,GAAY,MAAA,CAAO,UAAA,EAAW,GAAI,OAAO,UAAA,EAAW;AAEzD,MAAA,IAAA,CAAK,SAAA,GAAY,IAAI,SAAA,CAAU;AAAA,QAC7B,QAAQ,MAAM;AAEZ,UAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,YACnB,IAAA,EAAM,UAAA;AAAA,YACN,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,GAAG,IAAA,CAAK;AAAA,WACT,CAAA;AACD,UAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAAA,QAC9C,CAAA;AAAA,QACA,SAAA,EAAW,CAAC,GAAA,KAAwB,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QAC1D,SAAS,MAAM,IAAA,CAAK,KAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC;AAAA,OAClE,CAAA;AAED,MAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC5B,MAAA,MAAM,KAAK,cAAA,EAAe;AAAA,IAC5B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,KAAK,GAAA,YAAe,KAAA,GAAQ,MAAM,IAAI,KAAA,CAAM,cAAc,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAA,GAAO;AACL,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,EACtB;AAAA;AAAA;AAAA,EAKA,MAAc,aAAA,GAAiC;AAC7C,IAAA,MAAM,EAAE,SAAA,EAAW,SAAA,EAAW,QAAA,KAAa,IAAA,CAAK,MAAA;AAChD,IAAA,MAAM,MAAM,MAAM,KAAA;AAAA,MAChB,GAAG,OAAO,CAAA,kBAAA,EAAqB,SAAS,CAAA,WAAA,EAAc,QAAQ,eAAe,SAAS,CAAA;AAAA,KACxF;AAEA,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,IAC7C;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cAAA,GAAiB;AAC7B,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,MACtB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,KACvB;AAEA,IAAA,MAAM,WAAA,GACJ,KAAK,MAAA,CAAO,WAAA,IACZ,CAAC,sBAAA,CAAuB,IAAA,CAAK,UAAU,SAAS,CAAA;AAElD,IAAA,IAAI,CAAC,WAAA,IAAe,IAAA,CAAK,UAAA,EAAY;AAEnC,MAAA,gBAAA,CAAiB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,UAAA,EAAY,IAAI,GAAM,CAAA;AAC5D,MAAA,IAAA,CAAK,IAAA;AAAA,QACH,UAAA;AAAA,QACA,CAAA,mCAAA,EAAsC,kBAAA;AAAA,UACpC,IAAA,CAAK,UAAU,OAAO;AAAA,SACvB,CAAA;AAAA,OACH;AAAA,IACF,CAAA,MAAO;AAEL,MAAA,MAAM,KAAK,MAAMG,uBAAA,CAAO,UAAU,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AACzD,MAAA,IAAA,CAAK,IAAA,CAAK,MAAM,EAAE,CAAA;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,cAAc,GAAA,EAAqB;AACzC,IAAA,OAAA,CAAQ,IAAI,GAAG,CAAA;AAEf,IAAA,QAAQ,IAAI,IAAA;AAAM,MAChB,KAAK,QAAA;AACH,QAAA,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAEpB,QAAA,IAAA,CAAK,YAAA,CAAa,WAAW,QAAQ,CAAA;AACrC,QAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,UACnB,IAAA,EAAM,cAAA;AAAA,UACN,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,GAAG,IAAA,CAAK,MAAA;AAAA,UACR,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,SACtB,CAAA;AACD,QAAA;AAAA,MAEF,KAAK,oBAAA;AAEH,QAAA,IAAA,CAAK,kBAAkB,GAAG,CAAA;AAC1B,QAAA;AAAA,MAEF,KAAK,kBAAA;AACH,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,iDAAiD,CAAC,CAAA;AACtE,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MAEF,KAAK,WAAA;AAEH,QAAA,IAAA,CAAK,UAAU,IAAI,CAAA;AACnB,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,GAAA,EAAqB;AAC7C,IAAA,IAAI,CAAC,KAAK,UAAA,IAAc,CAAC,IAAI,MAAA,IAAU,CAAC,IAAI,KAAA,EAAO;AACjD,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,gCAAgC,CAAC,CAAA;AACrD,MAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,IAAI,MAAA,EAAQ,KAAA,EAAO,IAAI,KAAA,EAAM;AAAA,QAClD,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAClD,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAG5C,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,SAAA;AAAA,QACN,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,uCAAuC,CAAC,CAAA;AAC5D,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,eAAe,MAAA,EAAqB;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,MAAM,KAAA;AAAA,QAChB,CAAA,EAAG,OAAO,CAAA,oBAAA,EAAuB,MAAA,CAAO,SAAS,CAAA;AAAA,OACnD;AAEA,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAE9C,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,KAAA,EAAO,KAAK,KAAA,EAAM;AAAA,QACpD,WAAW,MAAA,CAAO;AAAA,OACnB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAC3C,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,gBAAA,EAAiB;AAAA,IACnB,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,yBAAyB,CAAC,CAAA;AAC9C,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAA,CAAK,oBAAoB,YAAY;AACnC,MAAA,IAAI,QAAA,CAAS,oBAAoB,SAAA,EAAW;AAE5C,MAAA,MAAM,SAAS,cAAA,EAAe;AAC9B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAA,CAAK,eAAe,MAAM,CAAA;AAAA,IAClC,CAAA;AAEA,IAAA,QAAA,CAAS,gBAAA,CAAiB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AAAA,EACtE;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAI,KAAK,iBAAA,EAAmB;AAC1B,MAAA,QAAA,CAAS,mBAAA,CAAoB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AACvE,MAAA,IAAA,CAAK,iBAAA,GAAoB,MAAA;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAGQ,UAAU,OAAA,EAAkB;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACrB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,mBAAA;AAAA,QACN,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,QAAA,EAAU,KAAK,MAAA,CAAO;AAAA,OACvB,CAAA;AAAA,IACH;AAEA,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,IACxB,GAAG,GAAG,CAAA;AAEN,IAAA,gBAAA,EAAiB;AACjB,IAAA,IAAA,CAAK,YAAA,EAAa;AAElB,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AAC/B,MAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,IAChC;AACA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAA,CAAW,OAAA,GAAU,WAAA,GAAc,YAAY,CAAA;AAAA,EACnE;AAAA,EAEQ,mBAAA,GAAsB;AAC5B,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AACjC,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AACpB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,MAAM,CAAA;AAEnC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,YAAA,GAAe;AACrB,IAAA,IAAA,CAAK,SAAA,GAAY,EAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,EACpB;AAAA;AAAA,EAGA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAC9B,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,IAAA,CAAK,YAAY,EAAC;AAAA,EACpB;AAAA,EAEQ,IAAA,CACN,OACA,OAAA,EACA;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,OAAO,CAAC,CAAA;AAAA,EACpD;AAAA,EAEQ,KAAK,GAAA,EAAY;AACvB,IAAA,IAAA,CAAK,IAAA,CAAK,SAAS,GAAG,CAAA;AACtB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,OAAO,CAAA;AAAA,EACtC;AACF","file":"index.js","sourcesContent":["import nacl from \"tweetnacl\";\nimport { decodeBase64, encodeBase64 } from \"tweetnacl-util\";\n\ninterface EncryptedMessage {\n  cipher: string; // Base64 encoded\n  nonce: string; // Base64 encoded\n}\n\nexport class CryptoService {\n  generateSymmetricKey(): string {\n    const key = nacl.randomBytes(32);\n    return encodeBase64(key);\n  }\n\n  /**\n   * Encrypt with symmetric key (secret-key encryption)\n   * Use this when both parties share the same secret key\n   * @param plaintext - Message to encrypt\n   * @param keyString - Symmetric key (base64)\n   * @returns Encrypted message with nonce\n   */\n  encryptSymmetric({\n    plaintext,\n    keyString,\n  }: {\n    plaintext: string;\n    keyString: string;\n  }): EncryptedMessage {\n    const key = decodeBase64(keyString);\n    const nonce = nacl.randomBytes(24);\n\n    const messageBytes = new TextEncoder().encode(plaintext);\n\n    const ciphertext = nacl.secretbox(messageBytes, nonce, key);\n\n    return {\n      cipher: encodeBase64(ciphertext),\n      nonce: encodeBase64(nonce),\n    };\n  }\n\n  /**\n   * Decrypt with symmetric key\n   * @param encrypted - Encrypted message with nonce\n   * @param keyString - Symmetric key (base64)\n   * @returns Decrypted plaintext\n   */\n  decryptSymmetric({\n    encrypted,\n    keyString,\n  }: {\n    encrypted: EncryptedMessage;\n    keyString: string;\n  }): string | null {\n    try {\n      const key = decodeBase64(keyString);\n      const ciphertextBytes = decodeBase64(encrypted.cipher);\n      const nonceBytes = decodeBase64(encrypted.nonce);\n\n      const decrypted = nacl.secretbox.open(ciphertextBytes, nonceBytes, key);\n\n      if (!decrypted) {\n        throw new Error(\"Decryption failed - invalid key or corrupted data\");\n      }\n\n      const decoded = new TextDecoder().decode(decrypted);\n      return decoded;\n    } catch (error) {\n      console.error(\"Decryption failed\", error);\n      return null;\n    }\n  }\n}\n\nexport default CryptoService;\nexport type { EncryptedMessage };\n","// hybridStorage.ts\n/**\n * Hybrid storage: Try sessionStorage first, fallback to memory\n * Best of both worlds - survives page refresh but auto-cleans\n */\n\ninterface StorageOptions {\n  ttlMs?: number;\n  useSessionStorage?: boolean;\n}\n\nclass AuthStorage {\n  private readonly prefix = \"pelican_auth_\";\n  private readonly defaultTTL = 5 * 60 * 1000; // 5 minutes\n  private memoryCache: Map<string, { value: any; expiresAt: number }> =\n    new Map();\n\n  /**\n   * Store auth session with automatic cleanup\n   */\n  set(key: string, value: any, options: StorageOptions = {}): void {\n    const { ttlMs = this.defaultTTL, useSessionStorage = true } = options;\n\n    const expiresAt = Date.now() + ttlMs;\n    const data = { value, expiresAt };\n\n    // Try sessionStorage first\n    if (useSessionStorage) {\n      try {\n        sessionStorage.setItem(`${this.prefix}${key}`, JSON.stringify(data));\n      } catch (error) {\n        console.warn(\"SessionStorage unavailable, using memory:\", error);\n        this.setMemory(key, data);\n      }\n    } else {\n      this.setMemory(key, data);\n    }\n  }\n\n  /**\n   * Get stored value if not expired\n   */\n  get(key: string): any | null {\n    // Try sessionStorage first\n    try {\n      const stored = sessionStorage.getItem(`${this.prefix}${key}`);\n      if (stored) {\n        const data = JSON.parse(stored);\n\n        // Check expiration\n        if (Date.now() > data.expiresAt) {\n          this.remove(key);\n          return null;\n        }\n\n        return data.value;\n      }\n    } catch (error) {\n      // Fallback to memory\n    }\n\n    // Try memory cache\n    return this.getMemory(key);\n  }\n\n  /**\n   * Remove specific key\n   */\n  remove(key: string): void {\n    try {\n      sessionStorage.removeItem(`${this.prefix}${key}`);\n    } catch (error) {\n      // Ignore\n    }\n    this.memoryCache.delete(key);\n  }\n\n  /**\n   * Clear all auth data\n   */\n  clear(): void {\n    // Clear sessionStorage\n    try {\n      Object.keys(sessionStorage).forEach((key) => {\n        if (key.startsWith(this.prefix)) {\n          sessionStorage.removeItem(key);\n        }\n      });\n    } catch (error) {\n      // Ignore\n    }\n\n    // Clear memory\n    this.memoryCache.clear();\n  }\n\n  // ========================================\n  // Memory cache helpers\n  // ========================================\n\n  private setMemory(\n    key: string,\n    data: { value: any; expiresAt: number }\n  ): void {\n    this.memoryCache.set(key, data);\n\n    // Schedule cleanup\n    const ttl = data.expiresAt - Date.now();\n    setTimeout(() => {\n      this.memoryCache.delete(key);\n    }, ttl);\n  }\n\n  private getMemory(key: string): any | null {\n    const data = this.memoryCache.get(key);\n    if (!data) return null;\n\n    if (Date.now() > data.expiresAt) {\n      this.memoryCache.delete(key);\n      return null;\n    }\n\n    return data.value;\n  }\n}\n\n// Singleton instance\nconst storage = new AuthStorage();\n\n// ========================================\n// Convenience functions for auth flow\n// ========================================\n\nexport interface AuthSession {\n  sessionId: string;\n  sessionKey: string;\n}\n\nexport const storeAuthSession = (\n  sessionId: string,\n  sessionKey: string,\n  ttlMs?: number\n): void => {\n  storage.set(\"session\", { sessionId, sessionKey }, { ttlMs });\n};\n\nexport const getAuthSession = (): AuthSession | null => {\n  return storage.get(\"session\");\n};\n\nexport const clearAuthSession = (): void => {\n  storage.remove(\"session\");\n};\n\nexport const clearAllAuthData = (): void => {\n  storage.clear();\n};\n\nexport default storage;\n","import type { PelicanAuthState } from \"../types/types\";\n\nexport class StateMachine {\n  private state: PelicanAuthState = \"idle\";\n  private listeners = new Set<(s: PelicanAuthState) => void>();\n\n  get current() {\n    return this.state;\n  }\n\n  transition(next: PelicanAuthState) {\n    this.state = next;\n    this.listeners.forEach((l) => l(next));\n  }\n\n  subscribe(fn: (s: PelicanAuthState) => void) {\n    this.listeners.add(fn);\n    return () => this.listeners.delete(fn);\n  }\n}\n","import { ISocketMessage } from \"../types/types\";\n\ntype TransportHandlers = {\n  onOpen?: () => void;\n  onMessage?: (msg: ISocketMessage) => void;\n  onError?: (err: Event) => void;\n  onClose?: (ev: CloseEvent) => void;\n};\n\ninterface PelicanMessageEvent extends MessageEvent {\n  data: ISocketMessage;\n}\nexport class Transport {\n  private socket?: WebSocket;\n  private handlers: TransportHandlers;\n\n  constructor(handlers: TransportHandlers) {\n    this.handlers = handlers;\n  }\n\n  connect(url: string) {\n    this.socket = new WebSocket(url);\n\n    this.socket.onopen = () => this.handlers.onOpen?.();\n    this.socket.onmessage = (e: PelicanMessageEvent) =>\n      this.handlers.onMessage?.(e.data);\n    this.socket.onerror = (e: Event) => this.handlers.onError?.(e);\n    this.socket.onclose = (e: CloseEvent) => this.handlers.onClose?.(e);\n  }\n\n  send(payload: ISocketMessage) {\n    if (this.socket?.readyState === WebSocket.OPEN) {\n      this.socket.send(JSON.stringify(payload));\n    }\n  }\n\n  close() {\n    this.socket?.close();\n  }\n}\n","export const BASEURL = \"http://localhost:8080\";\n","import CryptoService from \"../utilities/crypto\";\nimport QRCode from \"qrcode\";\nimport {\n  PelicanAuthConfig,\n  PelicanAuthEventMap,\n  ISocketMessage,\n  IdentityResult,\n} from \"../types/types\";\nimport {\n  storeAuthSession,\n  getAuthSession,\n  clearAuthSession,\n  AuthSession,\n} from \"../utilities/storage\";\nimport { StateMachine } from \"../utilities/stateMachine\";\nimport { Transport } from \"../utilities/transport\";\n\nimport { BASEURL } from \"../constants\";\n\ntype Listener<T> = (payload: T) => void;\n\n/**\n * PelicanAuth SDK\n * Handles cross-device authentication via WebSockets and E2EE (End-to-End Encryption).\n */\nexport class PelicanAuthentication {\n  private readonly crypto = new CryptoService();\n  private readonly stateMachine = new StateMachine();\n\n  private transport?: Transport;\n  private sessionId = \"\";\n  private sessionKey: string | null = null;\n\n  private visibilityHandler?: () => void;\n\n  private listeners: {\n    [K in keyof PelicanAuthEventMap]?: Set<Listener<any>>;\n  } = {};\n\n  private readonly config: Required<PelicanAuthConfig>;\n\n  constructor(config: PelicanAuthConfig) {\n    if (!config.publicKey) throw new Error(\"Missing publicKey\");\n    if (!config.projectId) throw new Error(\"Missing projectId\");\n    if (!config.authType) throw new Error(\"Missing authType\");\n\n    this.config = {\n      continuousMode: false,\n      forceQRCode: false,\n      ...config,\n    };\n\n    // Sync internal state machine changes with the 'state' event\n    this.stateMachine.subscribe((s) => this.emit(\"state\", s));\n    this.attachVisibilityRecovery();\n  }\n\n  /* -------------------- public API -------------------- */\n\n  /**\n   * Subscribe to SDK events (qr, deeplink, success, error, state)\n   * @returns Unsubscribe function\n   */\n  on<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    cb: Listener<PelicanAuthEventMap[K]>\n  ) {\n    this.listeners[event] ??= new Set();\n    this.listeners[event]!.add(cb);\n    return () => this.listeners[event]!.delete(cb);\n  }\n\n  /**\n   * Initializes the authentication flow.\n   * Fetches a relay, establishes a WebSocket, and generates the E2EE session key.\n   */\n  async start() {\n    if (this.stateMachine.current !== \"idle\") return;\n\n    this.resetSession();\n    this.stateMachine.transition(\"initializing\");\n\n    try {\n      const relay = await this.fetchRelayUrl();\n\n      // Generate a fresh symmetric key for this specific session\n      this.sessionKey = this.crypto.generateSymmetricKey();\n      this.sessionId = crypto.randomUUID() + crypto.randomUUID();\n\n      this.transport = new Transport({\n        onOpen: () => {\n          // Register this browser session with the relay\n          this.transport!.send({\n            type: \"register\",\n            sessionID: this.sessionId,\n            ...this.config,\n          });\n          this.stateMachine.transition(\"awaiting-pair\");\n        },\n        onMessage: (msg: ISocketMessage) => this.handleMessage(msg),\n        onError: () => this.fail(new Error(\"WebSocket connection failed\")),\n      });\n\n      this.transport.connect(relay);\n      await this.emitEntryPoint();\n    } catch (err) {\n      this.fail(err instanceof Error ? err : new Error(\"Start failed\"));\n    }\n  }\n\n  /**\n   * Manually stops the authentication process and closes connections.\n   */\n  stop() {\n    this.terminate(false);\n  }\n\n  /* -------------------- internals -------------------- */\n\n  /** Fetches the WebSocket Relay URL from the backend */\n  private async fetchRelayUrl(): Promise<string> {\n    const { publicKey, projectId, authType } = this.config;\n    const res = await fetch(\n      `${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`\n    );\n\n    if (!res.ok) {\n      throw new Error(\"Failed to fetch relay URL\");\n    }\n\n    const json = await res.json();\n    return json.relay_url;\n  }\n\n  /**\n   * Decides whether to show a QR code (Desktop) or a Deep Link (Mobile).\n   */\n  private async emitEntryPoint() {\n    const payload = {\n      sessionID: this.sessionId,\n      sessionKey: this.sessionKey,\n      publicKey: this.config.publicKey,\n      authType: this.config.authType,\n      projectId: this.config.projectId,\n      url: window.location.href,\n    };\n\n    const shouldUseQR =\n      this.config.forceQRCode ||\n      !/Android|iPhone|iPad/i.test(navigator.userAgent);\n\n    if (!shouldUseQR && this.sessionKey) {\n      // For mobile: Store session locally so we can recover when the user returns from the app\n      storeAuthSession(this.sessionId, this.sessionKey, 5 * 60_000);\n      this.emit(\n        \"deeplink\",\n        `pelicanvault://auth/deep-link?data=${encodeURIComponent(\n          JSON.stringify(payload)\n        )}`\n      );\n    } else {\n      // For desktop: Generate a QR code for the mobile app to scan\n      const qr = await QRCode.toDataURL(JSON.stringify(payload));\n      this.emit(\"qr\", qr);\n    }\n  }\n\n  /** Main WebSocket message router */\n  private handleMessage(msg: ISocketMessage) {\n    console.log(msg);\n\n    switch (msg.type) {\n      case \"paired\":\n        console.log(\"Paired\");\n\n        this.stateMachine.transition(\"paired\");\n        this.transport!.send({\n          type: \"authenticate\",\n          sessionID: this.sessionId,\n          ...this.config,\n          url: window.location.href,\n        });\n        return;\n\n      case \"phone-auth-success\":\n        // Mobile device successfully authenticated and sent encrypted credentials\n        this.handleAuthSuccess(msg);\n        return;\n\n      case \"phone-terminated\":\n        this.fail(new Error(\"Authenticating device terminated the connection\"));\n        this.restartIfContinuous();\n        return;\n\n      case \"confirmed\":\n        // Handshake complete\n        this.terminate(true);\n        this.restartIfContinuous();\n        return;\n    }\n  }\n\n  /**\n   * Decrypts the identity payload received from the phone using the session key.\n   */\n  private handleAuthSuccess(msg: ISocketMessage) {\n    if (!this.sessionKey || !msg.cipher || !msg.nonce) {\n      this.fail(new Error(\"Invalid authentication payload\"));\n      this.restartIfContinuous();\n      return;\n    }\n\n    try {\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: msg.cipher, nonce: msg.nonce },\n        keyString: this.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid authentication data\"));\n        this.restartIfContinuous();\n        return;\n      }\n\n      const result: IdentityResult = JSON.parse(decrypted);\n\n      this.emit(\"success\", result);\n      this.stateMachine.transition(\"authenticated\");\n\n      // Signal to the relay/phone that we have received and decrypted the data\n      this.transport?.send({\n        type: \"confirm\",\n        sessionID: this.sessionId,\n      });\n    } catch {\n      this.fail(new Error(\"Failed to decrypt authentication data\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  /**\n   * Logic to handle users returning to the browser tab after using the mobile app.\n   * Checks the server for a completed session that might have finished while in background.\n   */\n\n  private async getCachedEntry(cached: AuthSession) {\n    try {\n      const res = await fetch(\n        `${BASEURL}/session?session_id=${cached.sessionId}`\n      );\n\n      if (!res.ok) throw new Error(\"Invalid session\");\n\n      const data = await res.json();\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: data.cipher, nonce: data.nonce },\n        keyString: cached.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid session data\"));\n        this.restartIfContinuous();\n        return;\n      }\n      const result: IdentityResult = JSON.parse(decrypted);\n      this.emit(\"success\", result);\n      clearAuthSession();\n    } catch {\n      this.fail(new Error(\"Session recovery failed\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  private attachVisibilityRecovery() {\n    this.visibilityHandler = async () => {\n      if (document.visibilityState !== \"visible\") return;\n\n      const cached = getAuthSession();\n      if (!cached) return;\n      await this.getCachedEntry(cached);\n    };\n\n    document.addEventListener(\"visibilitychange\", this.visibilityHandler);\n  }\n\n  private detachVisibilityRecovery() {\n    if (this.visibilityHandler) {\n      document.removeEventListener(\"visibilitychange\", this.visibilityHandler);\n      this.visibilityHandler = undefined;\n    }\n  }\n\n  /** Cleans up the current session state */\n  private terminate(success: boolean) {\n    if (!this.transport) return;\n    if (!success) {\n      this.transport?.send({\n        type: \"client-terminated\",\n        sessionID: this.sessionId,\n        projectId: this.config.projectId,\n        publicKey: this.config.publicKey,\n        authType: this.config.authType,\n      });\n    }\n\n    setTimeout(() => {\n      this.transport?.close();\n    }, 150);\n\n    clearAuthSession();\n    this.resetSession();\n\n    if (!this.config.continuousMode) {\n      this.detachVisibilityRecovery();\n    }\n    this.stateMachine.transition(success ? \"confirmed\" : \"terminated\");\n  }\n\n  private restartIfContinuous() {\n    if (!this.config.continuousMode) return;\n    this.terminate(false);\n    this.stateMachine.transition(\"idle\");\n\n    setTimeout(() => {\n      this.start();\n    }, 150);\n  }\n\n  private resetSession() {\n    this.sessionId = \"\";\n    this.sessionKey = null;\n  }\n\n  /** Completely destroys the instance and removes all listeners */\n  destroy() {\n    this.detachVisibilityRecovery();\n    this.transport?.close();\n    this.listeners = {};\n  }\n\n  private emit<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    payload: PelicanAuthEventMap[K]\n  ) {\n    this.listeners[event]?.forEach((cb) => cb(payload));\n  }\n\n  private fail(err: Error) {\n    this.emit(\"error\", err);\n    this.stateMachine.transition(\"error\");\n  }\n}\n"]}
+{"version":3,"sources":["../src/utilities/crypto.ts","../src/utilities/storage.ts","../src/utilities/stateMachine.ts","../src/utilities/transport.ts","../src/constants.ts","../src/engine/engine.ts"],"names":["nacl","encodeBase64","decodeBase64","QRCode"],"mappings":";;;;;;;;;;;;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,oBAAA,GAA+B;AAC7B,IAAA,MAAM,GAAA,GAAMA,qBAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAC/B,IAAA,OAAOC,2BAAa,GAAG,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGqB;AACnB,IAAA,MAAM,GAAA,GAAMC,2BAAa,SAAS,CAAA;AAClC,IAAA,MAAM,KAAA,GAAQF,qBAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAEjC,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAEvD,IAAA,MAAM,UAAA,GAAaA,qBAAA,CAAK,SAAA,CAAU,YAAA,EAAc,OAAO,GAAG,CAAA;AAE1D,IAAA,OAAO;AAAA,MACL,MAAA,EAAQC,2BAAa,UAAU,CAAA;AAAA,MAC/B,KAAA,EAAOA,2BAAa,KAAK;AAAA,KAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGkB;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAMC,2BAAa,SAAS,CAAA;AAClC,MAAA,MAAM,eAAA,GAAkBA,0BAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACrD,MAAA,MAAM,UAAA,GAAaA,0BAAA,CAAa,SAAA,CAAU,KAAK,CAAA;AAE/C,MAAA,MAAM,YAAYF,qBAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,EAAiB,YAAY,GAAG,CAAA;AAEtE,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,MACrE;AAEA,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAClD,MAAA,OAAO,OAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,qBAAqB,KAAK,CAAA;AACxC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,cAAA,GAAQ,aAAA;;;AC/Df,IAAM,cAAN,MAAkB;AAAA,EAAlB,WAAA,GAAA;AACE,IAAA,IAAA,CAAiB,MAAA,GAAS,eAAA;AAC1B,IAAA,IAAA,CAAiB,UAAA,GAAa,IAAI,EAAA,GAAK,GAAA;AACvC;AAAA,IAAA,IAAA,CAAQ,WAAA,uBACF,GAAA,EAAI;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKV,GAAA,CAAI,GAAA,EAAa,KAAA,EAAY,OAAA,GAA0B,EAAC,EAAS;AAC/D,IAAA,MAAM,EAAE,KAAA,GAAQ,IAAA,CAAK,UAAA,EAAY,iBAAA,GAAoB,MAAK,GAAI,OAAA;AAE9D,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAC/B,IAAA,MAAM,IAAA,GAAO,EAAE,KAAA,EAAO,SAAA,EAAU;AAGhC,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MACrE,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,6CAA6C,KAAK,CAAA;AAC/D,QAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,MAC1B;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,GAAA,EAAyB;AAE3B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,eAAe,OAAA,CAAQ,CAAA,EAAG,KAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAC5D,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAG9B,QAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,UAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,OAAO,IAAA,CAAK,KAAA;AAAA,MACd;AAAA,IACF,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,GAAA,EAAmB;AACxB,IAAA,IAAI;AACF,MAAA,cAAA,CAAe,WAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAAA,IAClD,SAAS,KAAA,EAAO;AAAA,IAEhB;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AAEZ,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAA,KAAQ;AAC3C,QAAA,IAAI,GAAA,CAAI,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA,EAAG;AAC/B,UAAA,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,QAC/B;AAAA,MACF,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,IAAA,CAAK,YAAY,KAAA,EAAM;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAA,CACN,KACA,IAAA,EACM;AACN,IAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAG9B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI;AACtC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,IAC7B,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,UAAU,GAAA,EAAyB;AACzC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAG,CAAA;AACrC,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AACF,CAAA;AAGA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAWzB,IAAM,gBAAA,GAAmB,CAC9B,SAAA,EACA,UAAA,EACA,KAAA,KACS;AACT,EAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,EAAE,SAAA,EAAW,YAAW,EAAG,EAAE,OAAO,CAAA;AAC7D;AAEO,IAAM,iBAAiB,MAA0B;AACtD,EAAA,OAAO,OAAA,CAAQ,IAAI,SAAS,CAAA;AAC9B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAC1B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,KAAA,EAAM;AAChB;;;AC1JO,IAAM,eAAN,MAAmB;AAAA,EAAnB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,KAAA,GAA0B,MAAA;AAClC,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAmC;AAAA,EAAA;AAAA,EAE3D,IAAI,OAAA,GAAU;AACZ,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,WAAW,IAAA,EAAwB;AACjC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,UAAU,EAAA,EAAmC;AAC3C,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,EAAE,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,EAAE,CAAA;AAAA,EACvC;AACF;;;ACVO,IAAM,YAAN,MAAgB;AAAA,EAQrB,YAAY,QAAA,EAA6B;AALzC,IAAA,IAAA,CAAQ,iBAAA,GAAoB,CAAA;AAC5B,IAAA,IAAA,CAAQ,oBAAA,GAAuB,CAAA;AAC/B,IAAA,IAAA,CAAQ,kBAAA,GAAqB,KAAA;AAI3B,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA,EAEA,QAAQ,GAAA,EAAa;AACnB,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AACX,IAAA,IAAA,CAAK,kBAAA,GAAqB,KAAA;AAC1B,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,SAAA,CAAU,GAAG,CAAA;AAE/B,IAAA,IAAA,CAAK,MAAA,CAAO,SAAS,MAAM;AACzB,MAAA,IAAA,CAAK,iBAAA,GAAoB,CAAA;AACzB,MAAA,IAAA,CAAK,SAAS,MAAA,IAAS;AAAA,IACzB,CAAA;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,SAAA,GAAY,CAAC,CAAA,KAAoB;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAA,CAAE,IAAI,CAAA;AAC9B,QAAA,IAAA,CAAK,QAAA,CAAS,YAAY,IAAI,CAAA;AAAA,MAChC,SAAS,GAAA,EAAK;AACZ,QAAA,OAAA,CAAQ,KAAA,CAAM,2BAA2B,GAAG,CAAA;AAAA,MAC9C;AAAA,IACF,CAAA;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,OAAA,GAAU,CAAC,CAAA,KAAa;AAClC,MAAA,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,IAC3B,CAAA;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,OAAA,GAAU,CAAC,CAAA,KAAkB;AACvC,MAAA,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAGzB,MAAA,IAAI,CAAC,KAAK,kBAAA,EAAoB;AAC5B,QAAA,IAAA,CAAK,gBAAA,EAAiB;AAAA,MACxB;AAAA,IACF,CAAA;AAAA,EACF;AAAA,EAEQ,gBAAA,GAAmB;AACzB,IAAA,IAAI,IAAA,CAAK,iBAAA,IAAqB,IAAA,CAAK,oBAAA,EAAsB;AACvD,MAAA,OAAA,CAAQ,MAAM,uCAAkC,CAAA;AAChD,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,iBAAA,EAAA;AAEL,IAAA,MAAM,QAAQ,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,iBAAiB,CAAA,GAAI,GAAA;AACpD,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAI,IAAA,CAAK,GAAA,EAAK,IAAA,CAAK,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,IACrC,GAAG,KAAK,CAAA;AAAA,EACV;AAAA,EACA,KAAK,OAAA,EAAyB;AAC5B,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AAC9C,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,KAAA,GAAQ;AACN,IAAA,IAAA,CAAK,kBAAA,GAAqB,IAAA;AAC1B,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;;;AC1EO,IAAM,OAAA,GAAU;;;ACyBhB,IAAM,wBAAN,MAA4B;AAAA,EAgBjC,YAAY,MAAA,EAA2B;AAfvC,IAAA,IAAA,CAAiB,MAAA,GAAS,IAAI,cAAA,EAAc;AAC5C,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,YAAA,EAAa;AAGjD,IAAA,IAAA,CAAQ,SAAA,GAAY,EAAA;AACpB,IAAA,IAAA,CAAQ,UAAA,GAA4B,IAAA;AAIpC,IAAA,IAAA,CAAQ,YAEJ,EAAC;AAKH,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAExD,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,cAAA,EAAgB,KAAA;AAAA,MAChB,WAAA,EAAa,KAAA;AAAA,MACb,GAAG;AAAA,KACL;AAGA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAU,CAAC,CAAA,KAAM,KAAK,IAAA,CAAK,OAAA,EAAS,CAAC,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,EAAA,CACE,OACA,EAAA,EACA;AAlEJ,IAAA,IAAA,EAAA;AAmEI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,SAAA,EAAL,KAAA,CAAA,KAAA,EAAA,CAAA,KAAA,CAAA,mBAA0B,IAAI,GAAA,EAAI,CAAA;AAClC,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,GAAA,CAAI,EAAE,CAAA;AAC7B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,OAAO,EAAE,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAA,GAAQ;AACZ,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,OAAA,KAAY,MAAA,EAAQ;AAE1C,IAAA,IAAA,CAAK,YAAA,EAAa;AAClB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,cAAc,CAAA;AAE3C,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,aAAA,EAAc;AAGvC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,oBAAA,EAAqB;AACnD,MAAA,IAAA,CAAK,SAAA,GAAY,MAAA,CAAO,UAAA,EAAW,GAAI,OAAO,UAAA,EAAW;AAEzD,MAAA,IAAA,CAAK,SAAA,GAAY,IAAI,SAAA,CAAU;AAAA,QAC7B,QAAQ,MAAM;AAEZ,UAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,YACnB,IAAA,EAAM,UAAA;AAAA,YACN,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,GAAG,IAAA,CAAK;AAAA,WACT,CAAA;AACD,UAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAAA,QAC9C,CAAA;AAAA,QACA,SAAA,EAAW,CAAC,GAAA,KAAwB,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QAC1D,SAAS,MAAM,IAAA,CAAK,KAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC;AAAA,OAClE,CAAA;AAED,MAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC5B,MAAA,MAAM,KAAK,cAAA,EAAe;AAAA,IAC5B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,KAAK,GAAA,YAAe,KAAA,GAAQ,MAAM,IAAI,KAAA,CAAM,cAAc,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAA,GAAO;AACL,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,EACtB;AAAA;AAAA;AAAA,EAKA,MAAc,aAAA,GAAiC;AAC7C,IAAA,MAAM,EAAE,SAAA,EAAW,SAAA,EAAW,QAAA,KAAa,IAAA,CAAK,MAAA;AAChD,IAAA,MAAM,MAAM,MAAM,KAAA;AAAA,MAChB,GAAG,OAAO,CAAA,kBAAA,EAAqB,SAAS,CAAA,WAAA,EAAc,QAAQ,eAAe,SAAS,CAAA;AAAA,KACxF;AAEA,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,IAC7C;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cAAA,GAAiB;AAC7B,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,MACtB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,KACvB;AAEA,IAAA,MAAM,WAAA,GACJ,KAAK,MAAA,CAAO,WAAA,IACZ,CAAC,sBAAA,CAAuB,IAAA,CAAK,UAAU,SAAS,CAAA;AAElD,IAAA,IAAI,CAAC,WAAA,IAAe,IAAA,CAAK,UAAA,EAAY;AAEnC,MAAA,gBAAA,CAAiB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,UAAA,EAAY,IAAI,GAAM,CAAA;AAC5D,MAAA,IAAA,CAAK,IAAA;AAAA,QACH,UAAA;AAAA,QACA,CAAA,mCAAA,EAAsC,kBAAA;AAAA,UACpC,IAAA,CAAK,UAAU,OAAO;AAAA,SACvB,CAAA;AAAA,OACH;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAM,KAAK,MAAMG,uBAAA,CAAO,UAAU,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA,EAAG;AAAA,QACzD,IAAA,EAAM,WAAA;AAAA,QACN,KAAA,EAAO,CAAA;AAAA,QACP,KAAA,EAAO,EAAE,KAAA,EAAO,SAAA,EAAW,MAAM,SAAA;AAAU,OAC5C,CAAA;AACD,MAAA,IAAA,CAAK,IAAA,CAAK,MAAM,EAAE,CAAA;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,cAAc,GAAA,EAAqB;AACzC,IAAA,QAAQ,IAAI,IAAA;AAAM,MAChB,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,YAAA,CAAa,WAAW,QAAQ,CAAA;AACrC,QAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,UACnB,IAAA,EAAM,cAAA;AAAA,UACN,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,GAAG,IAAA,CAAK,MAAA;AAAA,UACR,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,SACtB,CAAA;AACD,QAAA;AAAA,MAEF,KAAK,oBAAA;AAEH,QAAA,IAAA,CAAK,kBAAkB,GAAG,CAAA;AAC1B,QAAA;AAAA,MAEF,KAAK,kBAAA;AACH,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,iDAAiD,CAAC,CAAA;AACtE,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MAEF,KAAK,WAAA;AAEH,QAAA,IAAA,CAAK,UAAU,IAAI,CAAA;AACnB,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,GAAA,EAAqB;AAC7C,IAAA,IAAI,CAAC,KAAK,UAAA,IAAc,CAAC,IAAI,MAAA,IAAU,CAAC,IAAI,KAAA,EAAO;AACjD,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,gCAAgC,CAAC,CAAA;AACrD,MAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,IAAI,MAAA,EAAQ,KAAA,EAAO,IAAI,KAAA,EAAM;AAAA,QAClD,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAClD,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAG5C,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,SAAA;AAAA,QACN,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,uCAAuC,CAAC,CAAA;AAC5D,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,eAAe,MAAA,EAAqB;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,MAAM,KAAA;AAAA,QAChB,CAAA,EAAG,OAAO,CAAA,oBAAA,EAAuB,MAAA,CAAO,SAAS,CAAA;AAAA,OACnD;AAEA,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAE9C,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,KAAA,EAAO,KAAK,KAAA,EAAM;AAAA,QACpD,WAAW,MAAA,CAAO;AAAA,OACnB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAC3C,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,gBAAA,EAAiB;AAAA,IACnB,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,yBAAyB,CAAC,CAAA;AAC9C,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAA,CAAK,oBAAoB,YAAY;AACnC,MAAA,IAAI,QAAA,CAAS,oBAAoB,SAAA,EAAW;AAE5C,MAAA,MAAM,SAAS,cAAA,EAAe;AAC9B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAA,CAAK,eAAe,MAAM,CAAA;AAAA,IAClC,CAAA;AAEA,IAAA,QAAA,CAAS,gBAAA,CAAiB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AAAA,EACtE;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAI,KAAK,iBAAA,EAAmB;AAC1B,MAAA,QAAA,CAAS,mBAAA,CAAoB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AACvE,MAAA,IAAA,CAAK,iBAAA,GAAoB,MAAA;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAGQ,UAAU,OAAA,EAAkB;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACrB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,mBAAA;AAAA,QACN,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,QAAA,EAAU,KAAK,MAAA,CAAO;AAAA,OACvB,CAAA;AAAA,IACH;AAEA,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,gBAAA,EAAiB;AACjB,IAAA,IAAA,CAAK,YAAA,EAAa;AAElB,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AAC/B,MAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,IAChC;AACA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAA,CAAW,OAAA,GAAU,WAAA,GAAc,MAAM,CAAA;AAAA,EAC7D;AAAA,EAEQ,mBAAA,GAAsB;AAC5B,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,MAAM,CAAA;AACnC,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AACjC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,YAAA,GAAe;AACrB,IAAA,IAAA,CAAK,SAAA,GAAY,EAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,EACpB;AAAA;AAAA,EAGA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAC9B,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,IAAA,CAAK,YAAY,EAAC;AAAA,EACpB;AAAA,EAEQ,IAAA,CACN,OACA,OAAA,EACA;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,OAAO,CAAC,CAAA;AAAA,EACpD;AAAA,EAEQ,KAAK,GAAA,EAAY;AACvB,IAAA,IAAA,CAAK,IAAA,CAAK,SAAS,GAAG,CAAA;AACtB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,OAAO,CAAA;AAAA,EACtC;AACF","file":"index.js","sourcesContent":["import nacl from \"tweetnacl\";\nimport { decodeBase64, encodeBase64 } from \"tweetnacl-util\";\n\ninterface EncryptedMessage {\n  cipher: string; // Base64 encoded\n  nonce: string; // Base64 encoded\n}\n\nexport class CryptoService {\n  generateSymmetricKey(): string {\n    const key = nacl.randomBytes(32);\n    return encodeBase64(key);\n  }\n\n  /**\n   * Encrypt with symmetric key (secret-key encryption)\n   * Use this when both parties share the same secret key\n   * @param plaintext - Message to encrypt\n   * @param keyString - Symmetric key (base64)\n   * @returns Encrypted message with nonce\n   */\n  encryptSymmetric({\n    plaintext,\n    keyString,\n  }: {\n    plaintext: string;\n    keyString: string;\n  }): EncryptedMessage {\n    const key = decodeBase64(keyString);\n    const nonce = nacl.randomBytes(24);\n\n    const messageBytes = new TextEncoder().encode(plaintext);\n\n    const ciphertext = nacl.secretbox(messageBytes, nonce, key);\n\n    return {\n      cipher: encodeBase64(ciphertext),\n      nonce: encodeBase64(nonce),\n    };\n  }\n\n  /**\n   * Decrypt with symmetric key\n   * @param encrypted - Encrypted message with nonce\n   * @param keyString - Symmetric key (base64)\n   * @returns Decrypted plaintext\n   */\n  decryptSymmetric({\n    encrypted,\n    keyString,\n  }: {\n    encrypted: EncryptedMessage;\n    keyString: string;\n  }): string | null {\n    try {\n      const key = decodeBase64(keyString);\n      const ciphertextBytes = decodeBase64(encrypted.cipher);\n      const nonceBytes = decodeBase64(encrypted.nonce);\n\n      const decrypted = nacl.secretbox.open(ciphertextBytes, nonceBytes, key);\n\n      if (!decrypted) {\n        throw new Error(\"Decryption failed - invalid key or corrupted data\");\n      }\n\n      const decoded = new TextDecoder().decode(decrypted);\n      return decoded;\n    } catch (error) {\n      console.error(\"Decryption failed\", error);\n      return null;\n    }\n  }\n}\n\nexport default CryptoService;\nexport type { EncryptedMessage };\n","// hybridStorage.ts\n/**\n * Hybrid storage: Try sessionStorage first, fallback to memory\n * Best of both worlds - survives page refresh but auto-cleans\n */\n\ninterface StorageOptions {\n  ttlMs?: number;\n  useSessionStorage?: boolean;\n}\n\nclass AuthStorage {\n  private readonly prefix = \"pelican_auth_\";\n  private readonly defaultTTL = 5 * 60 * 1000; // 5 minutes\n  private memoryCache: Map<string, { value: any; expiresAt: number }> =\n    new Map();\n\n  /**\n   * Store auth session with automatic cleanup\n   */\n  set(key: string, value: any, options: StorageOptions = {}): void {\n    const { ttlMs = this.defaultTTL, useSessionStorage = true } = options;\n\n    const expiresAt = Date.now() + ttlMs;\n    const data = { value, expiresAt };\n\n    // Try sessionStorage first\n    if (useSessionStorage) {\n      try {\n        sessionStorage.setItem(`${this.prefix}${key}`, JSON.stringify(data));\n      } catch (error) {\n        console.warn(\"SessionStorage unavailable, using memory:\", error);\n        this.setMemory(key, data);\n      }\n    } else {\n      this.setMemory(key, data);\n    }\n  }\n\n  /**\n   * Get stored value if not expired\n   */\n  get(key: string): any | null {\n    // Try sessionStorage first\n    try {\n      const stored = sessionStorage.getItem(`${this.prefix}${key}`);\n      if (stored) {\n        const data = JSON.parse(stored);\n\n        // Check expiration\n        if (Date.now() > data.expiresAt) {\n          this.remove(key);\n          return null;\n        }\n\n        return data.value;\n      }\n    } catch (error) {\n      // Fallback to memory\n    }\n\n    // Try memory cache\n    return this.getMemory(key);\n  }\n\n  /**\n   * Remove specific key\n   */\n  remove(key: string): void {\n    try {\n      sessionStorage.removeItem(`${this.prefix}${key}`);\n    } catch (error) {\n      // Ignore\n    }\n    this.memoryCache.delete(key);\n  }\n\n  /**\n   * Clear all auth data\n   */\n  clear(): void {\n    // Clear sessionStorage\n    try {\n      Object.keys(sessionStorage).forEach((key) => {\n        if (key.startsWith(this.prefix)) {\n          sessionStorage.removeItem(key);\n        }\n      });\n    } catch (error) {\n      // Ignore\n    }\n\n    // Clear memory\n    this.memoryCache.clear();\n  }\n\n  // ========================================\n  // Memory cache helpers\n  // ========================================\n\n  private setMemory(\n    key: string,\n    data: { value: any; expiresAt: number }\n  ): void {\n    this.memoryCache.set(key, data);\n\n    // Schedule cleanup\n    const ttl = data.expiresAt - Date.now();\n    setTimeout(() => {\n      this.memoryCache.delete(key);\n    }, ttl);\n  }\n\n  private getMemory(key: string): any | null {\n    const data = this.memoryCache.get(key);\n    if (!data) return null;\n\n    if (Date.now() > data.expiresAt) {\n      this.memoryCache.delete(key);\n      return null;\n    }\n\n    return data.value;\n  }\n}\n\n// Singleton instance\nconst storage = new AuthStorage();\n\n// ========================================\n// Convenience functions for auth flow\n// ========================================\n\nexport interface AuthSession {\n  sessionId: string;\n  sessionKey: string;\n}\n\nexport const storeAuthSession = (\n  sessionId: string,\n  sessionKey: string,\n  ttlMs?: number\n): void => {\n  storage.set(\"session\", { sessionId, sessionKey }, { ttlMs });\n};\n\nexport const getAuthSession = (): AuthSession | null => {\n  return storage.get(\"session\");\n};\n\nexport const clearAuthSession = (): void => {\n  storage.remove(\"session\");\n};\n\nexport const clearAllAuthData = (): void => {\n  storage.clear();\n};\n\nexport default storage;\n","import type { PelicanAuthState } from \"../types/types\";\n\nexport class StateMachine {\n  private state: PelicanAuthState = \"idle\";\n  private listeners = new Set<(s: PelicanAuthState) => void>();\n\n  get current() {\n    return this.state;\n  }\n\n  transition(next: PelicanAuthState) {\n    this.state = next;\n    this.listeners.forEach((l) => l(next));\n  }\n\n  subscribe(fn: (s: PelicanAuthState) => void) {\n    this.listeners.add(fn);\n    return () => this.listeners.delete(fn);\n  }\n}\n","import { ISocketMessage } from \"../types/types\";\n\ntype TransportHandlers = {\n  onOpen?: () => void;\n  onMessage?: (msg: ISocketMessage) => void;\n  onError?: (err: Event) => void;\n  onClose?: (ev: CloseEvent) => void;\n};\n\nexport class Transport {\n  private socket?: WebSocket;\n  private handlers: TransportHandlers;\n  private reconnectAttempts = 0;\n  private maxReconnectAttempts = 5;\n  private isExplicitlyClosed = false;\n  private url?: string;\n\n  constructor(handlers: TransportHandlers) {\n    this.handlers = handlers;\n  }\n\n  connect(url: string) {\n    this.url = url;\n    this.isExplicitlyClosed = false;\n    this.socket = new WebSocket(url);\n\n    this.socket.onopen = () => {\n      this.reconnectAttempts = 0;\n      this.handlers.onOpen?.();\n    };\n    this.socket.onmessage = (e: MessageEvent) => {\n      try {\n        const data = JSON.parse(e.data);\n        this.handlers.onMessage?.(data);\n      } catch (err) {\n        console.error(\"Failed to parse message\", err);\n      }\n    };\n    this.socket.onerror = (e: Event) => {\n      this.handlers.onError?.(e);\n    };\n    this.socket.onclose = (e: CloseEvent) => {\n      this.handlers.onClose?.(e);\n\n      // Only reconnect if the user didn't call .close() manually\n      if (!this.isExplicitlyClosed) {\n        this.attemptReconnect();\n      }\n    };\n  }\n\n  private attemptReconnect() {\n    if (this.reconnectAttempts >= this.maxReconnectAttempts) {\n      console.error(\"❌ Max reconnect attempts reached\");\n      return;\n    }\n\n    this.reconnectAttempts++;\n\n    const delay = Math.pow(2, this.reconnectAttempts) * 500;\n    setTimeout(() => {\n      if (this.url) this.connect(this.url);\n    }, delay);\n  }\n  send(payload: ISocketMessage) {\n    if (this.socket?.readyState === WebSocket.OPEN) {\n      this.socket.send(JSON.stringify(payload));\n    }\n  }\n\n  close() {\n    this.isExplicitlyClosed = true;\n    this.socket?.close();\n  }\n}\n","export const BASEURL = \"http://192.168.1.2:8080\";\n","import CryptoService from \"../utilities/crypto\";\nimport QRCode from \"qrcode\";\nimport {\n  PelicanAuthConfig,\n  PelicanAuthEventMap,\n  ISocketMessage,\n  IdentityResult,\n} from \"../types/types\";\nimport {\n  storeAuthSession,\n  getAuthSession,\n  clearAuthSession,\n  AuthSession,\n} from \"../utilities/storage\";\nimport { StateMachine } from \"../utilities/stateMachine\";\nimport { Transport } from \"../utilities/transport\";\n\nimport { BASEURL } from \"../constants\";\n\ntype Listener<T> = (payload: T) => void;\n\n/**\n * PelicanAuth SDK\n * Handles cross-device authentication via WebSockets and E2EE (End-to-End Encryption).\n */\nexport class PelicanAuthentication {\n  private readonly crypto = new CryptoService();\n  private readonly stateMachine = new StateMachine();\n\n  private transport?: Transport;\n  private sessionId = \"\";\n  private sessionKey: string | null = null;\n\n  private visibilityHandler?: () => void;\n\n  private listeners: {\n    [K in keyof PelicanAuthEventMap]?: Set<Listener<any>>;\n  } = {};\n\n  private readonly config: Required<PelicanAuthConfig>;\n\n  constructor(config: PelicanAuthConfig) {\n    if (!config.publicKey) throw new Error(\"Missing publicKey\");\n    if (!config.projectId) throw new Error(\"Missing projectId\");\n    if (!config.authType) throw new Error(\"Missing authType\");\n\n    this.config = {\n      continuousMode: false,\n      forceQRCode: false,\n      ...config,\n    };\n\n    // Sync internal state machine changes with the 'state' event\n    this.stateMachine.subscribe((s) => this.emit(\"state\", s));\n    this.attachVisibilityRecovery();\n  }\n\n  /* -------------------- public API -------------------- */\n\n  /**\n   * Subscribe to SDK events (qr, deeplink, success, error, state)\n   * @returns Unsubscribe function\n   */\n  on<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    cb: Listener<PelicanAuthEventMap[K]>\n  ) {\n    this.listeners[event] ??= new Set();\n    this.listeners[event]!.add(cb);\n    return () => this.listeners[event]!.delete(cb);\n  }\n\n  /**\n   * Initializes the authentication flow.\n   * Fetches a relay, establishes a WebSocket, and generates the E2EE session key.\n   */\n  async start() {\n    if (this.stateMachine.current !== \"idle\") return;\n\n    this.resetSession();\n    this.stateMachine.transition(\"initializing\");\n\n    try {\n      const relay = await this.fetchRelayUrl();\n\n      // Generate a fresh symmetric key for this specific session\n      this.sessionKey = this.crypto.generateSymmetricKey();\n      this.sessionId = crypto.randomUUID() + crypto.randomUUID();\n\n      this.transport = new Transport({\n        onOpen: () => {\n          // Register this browser session with the relay\n          this.transport!.send({\n            type: \"register\",\n            sessionID: this.sessionId,\n            ...this.config,\n          });\n          this.stateMachine.transition(\"awaiting-pair\");\n        },\n        onMessage: (msg: ISocketMessage) => this.handleMessage(msg),\n        onError: () => this.fail(new Error(\"WebSocket connection failed\")),\n      });\n\n      this.transport.connect(relay);\n      await this.emitEntryPoint();\n    } catch (err) {\n      this.fail(err instanceof Error ? err : new Error(\"Start failed\"));\n    }\n  }\n\n  /**\n   * Manually stops the authentication process and closes connections.\n   */\n  stop() {\n    this.terminate(false);\n  }\n\n  /* -------------------- internals -------------------- */\n\n  /** Fetches the WebSocket Relay URL from the backend */\n  private async fetchRelayUrl(): Promise<string> {\n    const { publicKey, projectId, authType } = this.config;\n    const res = await fetch(\n      `${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`\n    );\n\n    if (!res.ok) {\n      throw new Error(\"Failed to fetch relay URL\");\n    }\n\n    const json = await res.json();\n    return json.relay_url;\n  }\n\n  /**\n   * Decides whether to show a QR code (Desktop) or a Deep Link (Mobile).\n   */\n  private async emitEntryPoint() {\n    const payload = {\n      sessionID: this.sessionId,\n      sessionKey: this.sessionKey,\n      publicKey: this.config.publicKey,\n      authType: this.config.authType,\n      projectId: this.config.projectId,\n      url: window.location.href,\n    };\n\n    const shouldUseQR =\n      this.config.forceQRCode ||\n      !/Android|iPhone|iPad/i.test(navigator.userAgent);\n\n    if (!shouldUseQR && this.sessionKey) {\n      // For mobile: Store session locally so we can recover when the user returns from the app\n      storeAuthSession(this.sessionId, this.sessionKey, 5 * 60_000);\n      this.emit(\n        \"deeplink\",\n        `pelicanvault://auth/deep-link?data=${encodeURIComponent(\n          JSON.stringify(payload)\n        )}`\n      );\n    } else {\n      const qr = await QRCode.toDataURL(JSON.stringify(payload), {\n        type: \"image/png\",\n        scale: 3,\n        color: { light: \"#FFFFF5\", dark: \"#121212\" },\n      });\n      this.emit(\"qr\", qr);\n    }\n  }\n\n  /** Main WebSocket message router */\n  private handleMessage(msg: ISocketMessage) {\n    switch (msg.type) {\n      case \"paired\":\n        this.stateMachine.transition(\"paired\");\n        this.transport!.send({\n          type: \"authenticate\",\n          sessionID: this.sessionId,\n          ...this.config,\n          url: window.location.href,\n        });\n        return;\n\n      case \"phone-auth-success\":\n        // Mobile device successfully authenticated and sent encrypted credentials\n        this.handleAuthSuccess(msg);\n        return;\n\n      case \"phone-terminated\":\n        this.fail(new Error(\"Authenticating device terminated the connection\"));\n        this.restartIfContinuous();\n        return;\n\n      case \"confirmed\":\n        // Handshake complete\n        this.terminate(true);\n        this.restartIfContinuous();\n        return;\n    }\n  }\n\n  /**\n   * Decrypts the identity payload received from the phone using the session key.\n   */\n  private handleAuthSuccess(msg: ISocketMessage) {\n    if (!this.sessionKey || !msg.cipher || !msg.nonce) {\n      this.fail(new Error(\"Invalid authentication payload\"));\n      this.restartIfContinuous();\n      return;\n    }\n\n    try {\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: msg.cipher, nonce: msg.nonce },\n        keyString: this.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid authentication data\"));\n        this.restartIfContinuous();\n        return;\n      }\n\n      const result: IdentityResult = JSON.parse(decrypted);\n\n      this.emit(\"success\", result);\n      this.stateMachine.transition(\"authenticated\");\n\n      // Signal to the relay/phone that we have received and decrypted the data\n      this.transport?.send({\n        type: \"confirm\",\n        sessionID: this.sessionId,\n      });\n    } catch {\n      this.fail(new Error(\"Failed to decrypt authentication data\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  /**\n   * Logic to handle users returning to the browser tab after using the mobile app.\n   * Checks the server for a completed session that might have finished while in background.\n   */\n\n  private async getCachedEntry(cached: AuthSession) {\n    try {\n      const res = await fetch(\n        `${BASEURL}/session?session_id=${cached.sessionId}`\n      );\n\n      if (!res.ok) throw new Error(\"Invalid session\");\n\n      const data = await res.json();\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: data.cipher, nonce: data.nonce },\n        keyString: cached.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid session data\"));\n        this.restartIfContinuous();\n        return;\n      }\n      const result: IdentityResult = JSON.parse(decrypted);\n      this.emit(\"success\", result);\n      clearAuthSession();\n    } catch {\n      this.fail(new Error(\"Session recovery failed\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  private attachVisibilityRecovery() {\n    this.visibilityHandler = async () => {\n      if (document.visibilityState !== \"visible\") return;\n\n      const cached = getAuthSession();\n      if (!cached) return;\n      await this.getCachedEntry(cached);\n    };\n\n    document.addEventListener(\"visibilitychange\", this.visibilityHandler);\n  }\n\n  private detachVisibilityRecovery() {\n    if (this.visibilityHandler) {\n      document.removeEventListener(\"visibilitychange\", this.visibilityHandler);\n      this.visibilityHandler = undefined;\n    }\n  }\n\n  /** Cleans up the current session state */\n  private terminate(success: boolean) {\n    if (!this.transport) return;\n    if (!success) {\n      this.transport?.send({\n        type: \"client-terminated\",\n        sessionID: this.sessionId,\n        projectId: this.config.projectId,\n        publicKey: this.config.publicKey,\n        authType: this.config.authType,\n      });\n    }\n\n    this.transport?.close();\n    clearAuthSession();\n    this.resetSession();\n\n    if (!this.config.continuousMode) {\n      this.detachVisibilityRecovery();\n    }\n    this.stateMachine.transition(success ? \"confirmed\" : \"idle\");\n  }\n\n  private restartIfContinuous() {\n    this.stateMachine.transition(\"idle\");\n    if (!this.config.continuousMode) return;\n    setTimeout(() => {\n      this.start();\n    }, 150);\n  }\n\n  private resetSession() {\n    this.sessionId = \"\";\n    this.sessionKey = null;\n  }\n\n  /** Completely destroys the instance and removes all listeners */\n  destroy() {\n    this.detachVisibilityRecovery();\n    this.transport?.close();\n    this.listeners = {};\n  }\n\n  private emit<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    payload: PelicanAuthEventMap[K]\n  ) {\n    this.listeners[event]?.forEach((cb) => cb(payload));\n  }\n\n  private fail(err: Error) {\n    this.emit(\"error\", err);\n    this.stateMachine.transition(\"error\");\n  }\n}\n"]}

package/dist/index.mjs

@@ -180,14 +180,47 @@ var StateMachine = class {
 // src/utilities/transport.ts
 var Transport = class {
   constructor(handlers) {
+    this.reconnectAttempts = 0;
+    this.maxReconnectAttempts = 5;
+    this.isExplicitlyClosed = false;
     this.handlers = handlers;
   }
   connect(url) {
+    this.url = url;
+    this.isExplicitlyClosed = false;
     this.socket = new WebSocket(url);
-    this.socket.onopen = () => this.handlers.onOpen?.();
-    this.socket.onmessage = (e) => this.handlers.onMessage?.(e.data);
-    this.socket.onerror = (e) => this.handlers.onError?.(e);
-    this.socket.onclose = (e) => this.handlers.onClose?.(e);
+    this.socket.onopen = () => {
+      this.reconnectAttempts = 0;
+      this.handlers.onOpen?.();
+    };
+    this.socket.onmessage = (e) => {
+      try {
+        const data = JSON.parse(e.data);
+        this.handlers.onMessage?.(data);
+      } catch (err) {
+        console.error("Failed to parse message", err);
+      }
+    };
+    this.socket.onerror = (e) => {
+      this.handlers.onError?.(e);
+    };
+    this.socket.onclose = (e) => {
+      this.handlers.onClose?.(e);
+      if (!this.isExplicitlyClosed) {
+        this.attemptReconnect();
+      }
+    };
+  }
+  attemptReconnect() {
+    if (this.reconnectAttempts >= this.maxReconnectAttempts) {
+      console.error("\u274C Max reconnect attempts reached");
+      return;
+    }
+    this.reconnectAttempts++;
+    const delay = Math.pow(2, this.reconnectAttempts) * 500;
+    setTimeout(() => {
+      if (this.url) this.connect(this.url);
+    }, delay);
   }
   send(payload) {
     if (this.socket?.readyState === WebSocket.OPEN) {
@@ -195,12 +228,13 @@ var Transport = class {
     }
   }
   close() {
+    this.isExplicitlyClosed = true;
     this.socket?.close();
   }
 };
 
 // src/constants.ts
-var BASEURL = "http://localhost:8080";
+var BASEURL = "http://192.168.1.2:8080";
 
 // src/engine/engine.ts
 var PelicanAuthentication = class {
@@ -303,16 +337,18 @@ var PelicanAuthentication = class {
         )}`
       );
     } else {
-      const qr = await QRCode.toDataURL(JSON.stringify(payload));
+      const qr = await QRCode.toDataURL(JSON.stringify(payload), {
+        type: "image/png",
+        scale: 3,
+        color: { light: "#FFFFF5", dark: "#121212" }
+      });
       this.emit("qr", qr);
     }
   }
   /** Main WebSocket message router */
   handleMessage(msg) {
-    console.log(msg);
     switch (msg.type) {
       case "paired":
-        console.log("Paired");
         this.stateMachine.transition("paired");
         this.transport.send({
           type: "authenticate",
@@ -420,20 +456,17 @@ var PelicanAuthentication = class {
         authType: this.config.authType
       });
     }
-    setTimeout(() => {
-      this.transport?.close();
-    }, 150);
+    this.transport?.close();
     clearAuthSession();
     this.resetSession();
     if (!this.config.continuousMode) {
       this.detachVisibilityRecovery();
     }
-    this.stateMachine.transition(success ? "confirmed" : "terminated");
+    this.stateMachine.transition(success ? "confirmed" : "idle");
   }
   restartIfContinuous() {
-    if (!this.config.continuousMode) return;
-    this.terminate(false);
     this.stateMachine.transition("idle");
+    if (!this.config.continuousMode) return;
     setTimeout(() => {
       this.start();
     }, 150);

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/utilities/crypto.ts","../src/utilities/storage.ts","../src/utilities/stateMachine.ts","../src/utilities/transport.ts","../src/constants.ts","../src/engine/engine.ts"],"names":[],"mappings":";;;;;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,oBAAA,GAA+B;AAC7B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAC/B,IAAA,OAAO,aAAa,GAAG,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGqB;AACnB,IAAA,MAAM,GAAA,GAAM,aAAa,SAAS,CAAA;AAClC,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAEjC,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAEvD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,YAAA,EAAc,OAAO,GAAG,CAAA;AAE1D,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,aAAa,UAAU,CAAA;AAAA,MAC/B,KAAA,EAAO,aAAa,KAAK;AAAA,KAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGkB;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,aAAa,SAAS,CAAA;AAClC,MAAA,MAAM,eAAA,GAAkB,YAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACrD,MAAA,MAAM,UAAA,GAAa,YAAA,CAAa,SAAA,CAAU,KAAK,CAAA;AAE/C,MAAA,MAAM,YAAY,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,EAAiB,YAAY,GAAG,CAAA;AAEtE,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,MACrE;AAEA,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAClD,MAAA,OAAO,OAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,qBAAqB,KAAK,CAAA;AACxC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,cAAA,GAAQ,aAAA;;;AC/Df,IAAM,cAAN,MAAkB;AAAA,EAAlB,WAAA,GAAA;AACE,IAAA,IAAA,CAAiB,MAAA,GAAS,eAAA;AAC1B,IAAA,IAAA,CAAiB,UAAA,GAAa,IAAI,EAAA,GAAK,GAAA;AACvC;AAAA,IAAA,IAAA,CAAQ,WAAA,uBACF,GAAA,EAAI;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKV,GAAA,CAAI,GAAA,EAAa,KAAA,EAAY,OAAA,GAA0B,EAAC,EAAS;AAC/D,IAAA,MAAM,EAAE,KAAA,GAAQ,IAAA,CAAK,UAAA,EAAY,iBAAA,GAAoB,MAAK,GAAI,OAAA;AAE9D,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAC/B,IAAA,MAAM,IAAA,GAAO,EAAE,KAAA,EAAO,SAAA,EAAU;AAGhC,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MACrE,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,6CAA6C,KAAK,CAAA;AAC/D,QAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,MAC1B;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,GAAA,EAAyB;AAE3B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,eAAe,OAAA,CAAQ,CAAA,EAAG,KAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAC5D,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAG9B,QAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,UAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,OAAO,IAAA,CAAK,KAAA;AAAA,MACd;AAAA,IACF,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,GAAA,EAAmB;AACxB,IAAA,IAAI;AACF,MAAA,cAAA,CAAe,WAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAAA,IAClD,SAAS,KAAA,EAAO;AAAA,IAEhB;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AAEZ,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAA,KAAQ;AAC3C,QAAA,IAAI,GAAA,CAAI,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA,EAAG;AAC/B,UAAA,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,QAC/B;AAAA,MACF,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,IAAA,CAAK,YAAY,KAAA,EAAM;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAA,CACN,KACA,IAAA,EACM;AACN,IAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAG9B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI;AACtC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,IAC7B,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,UAAU,GAAA,EAAyB;AACzC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAG,CAAA;AACrC,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AACF,CAAA;AAGA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAWzB,IAAM,gBAAA,GAAmB,CAC9B,SAAA,EACA,UAAA,EACA,KAAA,KACS;AACT,EAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,EAAE,SAAA,EAAW,YAAW,EAAG,EAAE,OAAO,CAAA;AAC7D;AAEO,IAAM,iBAAiB,MAA0B;AACtD,EAAA,OAAO,OAAA,CAAQ,IAAI,SAAS,CAAA;AAC9B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAC1B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,KAAA,EAAM;AAChB;;;AC1JO,IAAM,eAAN,MAAmB;AAAA,EAAnB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,KAAA,GAA0B,MAAA;AAClC,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAmC;AAAA,EAAA;AAAA,EAE3D,IAAI,OAAA,GAAU;AACZ,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,WAAW,IAAA,EAAwB;AACjC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,UAAU,EAAA,EAAmC;AAC3C,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,EAAE,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,EAAE,CAAA;AAAA,EACvC;AACF;;;ACPO,IAAM,YAAN,MAAgB;AAAA,EAIrB,YAAY,QAAA,EAA6B;AACvC,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA,EAEA,QAAQ,GAAA,EAAa;AACnB,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,SAAA,CAAU,GAAG,CAAA;AAE/B,IAAA,IAAA,CAAK,MAAA,CAAO,MAAA,GAAS,MAAM,IAAA,CAAK,SAAS,MAAA,IAAS;AAClD,IAAA,IAAA,CAAK,MAAA,CAAO,YAAY,CAAC,CAAA,KACvB,KAAK,QAAA,CAAS,SAAA,GAAY,EAAE,IAAI,CAAA;AAClC,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAa,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAC7D,IAAA,IAAA,CAAK,OAAO,OAAA,GAAU,CAAC,MAAkB,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,EACpE;AAAA,EAEA,KAAK,OAAA,EAAyB;AAC5B,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AAC9C,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,KAAA,GAAQ;AACN,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;;;ACvCO,IAAM,OAAA,GAAU;;;ACyBhB,IAAM,wBAAN,MAA4B;AAAA,EAgBjC,YAAY,MAAA,EAA2B;AAfvC,IAAA,IAAA,CAAiB,MAAA,GAAS,IAAI,cAAA,EAAc;AAC5C,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,YAAA,EAAa;AAGjD,IAAA,IAAA,CAAQ,SAAA,GAAY,EAAA;AACpB,IAAA,IAAA,CAAQ,UAAA,GAA4B,IAAA;AAIpC,IAAA,IAAA,CAAQ,YAEJ,EAAC;AAKH,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAExD,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,cAAA,EAAgB,KAAA;AAAA,MAChB,WAAA,EAAa,KAAA;AAAA,MACb,GAAG;AAAA,KACL;AAGA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAU,CAAC,CAAA,KAAM,KAAK,IAAA,CAAK,OAAA,EAAS,CAAC,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,EAAA,CACE,OACA,EAAA,EACA;AAlEJ,IAAA,IAAA,EAAA;AAmEI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,SAAA,EAAL,KAAA,CAAA,KAAA,EAAA,CAAA,KAAA,CAAA,mBAA0B,IAAI,GAAA,EAAI,CAAA;AAClC,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,GAAA,CAAI,EAAE,CAAA;AAC7B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,OAAO,EAAE,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAA,GAAQ;AACZ,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,OAAA,KAAY,MAAA,EAAQ;AAE1C,IAAA,IAAA,CAAK,YAAA,EAAa;AAClB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,cAAc,CAAA;AAE3C,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,aAAA,EAAc;AAGvC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,oBAAA,EAAqB;AACnD,MAAA,IAAA,CAAK,SAAA,GAAY,MAAA,CAAO,UAAA,EAAW,GAAI,OAAO,UAAA,EAAW;AAEzD,MAAA,IAAA,CAAK,SAAA,GAAY,IAAI,SAAA,CAAU;AAAA,QAC7B,QAAQ,MAAM;AAEZ,UAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,YACnB,IAAA,EAAM,UAAA;AAAA,YACN,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,GAAG,IAAA,CAAK;AAAA,WACT,CAAA;AACD,UAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAAA,QAC9C,CAAA;AAAA,QACA,SAAA,EAAW,CAAC,GAAA,KAAwB,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QAC1D,SAAS,MAAM,IAAA,CAAK,KAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC;AAAA,OAClE,CAAA;AAED,MAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC5B,MAAA,MAAM,KAAK,cAAA,EAAe;AAAA,IAC5B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,KAAK,GAAA,YAAe,KAAA,GAAQ,MAAM,IAAI,KAAA,CAAM,cAAc,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAA,GAAO;AACL,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,EACtB;AAAA;AAAA;AAAA,EAKA,MAAc,aAAA,GAAiC;AAC7C,IAAA,MAAM,EAAE,SAAA,EAAW,SAAA,EAAW,QAAA,KAAa,IAAA,CAAK,MAAA;AAChD,IAAA,MAAM,MAAM,MAAM,KAAA;AAAA,MAChB,GAAG,OAAO,CAAA,kBAAA,EAAqB,SAAS,CAAA,WAAA,EAAc,QAAQ,eAAe,SAAS,CAAA;AAAA,KACxF;AAEA,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,IAC7C;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cAAA,GAAiB;AAC7B,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,MACtB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,KACvB;AAEA,IAAA,MAAM,WAAA,GACJ,KAAK,MAAA,CAAO,WAAA,IACZ,CAAC,sBAAA,CAAuB,IAAA,CAAK,UAAU,SAAS,CAAA;AAElD,IAAA,IAAI,CAAC,WAAA,IAAe,IAAA,CAAK,UAAA,EAAY;AAEnC,MAAA,gBAAA,CAAiB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,UAAA,EAAY,IAAI,GAAM,CAAA;AAC5D,MAAA,IAAA,CAAK,IAAA;AAAA,QACH,UAAA;AAAA,QACA,CAAA,mCAAA,EAAsC,kBAAA;AAAA,UACpC,IAAA,CAAK,UAAU,OAAO;AAAA,SACvB,CAAA;AAAA,OACH;AAAA,IACF,CAAA,MAAO;AAEL,MAAA,MAAM,KAAK,MAAM,MAAA,CAAO,UAAU,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AACzD,MAAA,IAAA,CAAK,IAAA,CAAK,MAAM,EAAE,CAAA;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,cAAc,GAAA,EAAqB;AACzC,IAAA,OAAA,CAAQ,IAAI,GAAG,CAAA;AAEf,IAAA,QAAQ,IAAI,IAAA;AAAM,MAChB,KAAK,QAAA;AACH,QAAA,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAEpB,QAAA,IAAA,CAAK,YAAA,CAAa,WAAW,QAAQ,CAAA;AACrC,QAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,UACnB,IAAA,EAAM,cAAA;AAAA,UACN,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,GAAG,IAAA,CAAK,MAAA;AAAA,UACR,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,SACtB,CAAA;AACD,QAAA;AAAA,MAEF,KAAK,oBAAA;AAEH,QAAA,IAAA,CAAK,kBAAkB,GAAG,CAAA;AAC1B,QAAA;AAAA,MAEF,KAAK,kBAAA;AACH,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,iDAAiD,CAAC,CAAA;AACtE,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MAEF,KAAK,WAAA;AAEH,QAAA,IAAA,CAAK,UAAU,IAAI,CAAA;AACnB,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,GAAA,EAAqB;AAC7C,IAAA,IAAI,CAAC,KAAK,UAAA,IAAc,CAAC,IAAI,MAAA,IAAU,CAAC,IAAI,KAAA,EAAO;AACjD,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,gCAAgC,CAAC,CAAA;AACrD,MAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,IAAI,MAAA,EAAQ,KAAA,EAAO,IAAI,KAAA,EAAM;AAAA,QAClD,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAClD,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAG5C,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,SAAA;AAAA,QACN,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,uCAAuC,CAAC,CAAA;AAC5D,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,eAAe,MAAA,EAAqB;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,MAAM,KAAA;AAAA,QAChB,CAAA,EAAG,OAAO,CAAA,oBAAA,EAAuB,MAAA,CAAO,SAAS,CAAA;AAAA,OACnD;AAEA,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAE9C,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,KAAA,EAAO,KAAK,KAAA,EAAM;AAAA,QACpD,WAAW,MAAA,CAAO;AAAA,OACnB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAC3C,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,gBAAA,EAAiB;AAAA,IACnB,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,yBAAyB,CAAC,CAAA;AAC9C,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAA,CAAK,oBAAoB,YAAY;AACnC,MAAA,IAAI,QAAA,CAAS,oBAAoB,SAAA,EAAW;AAE5C,MAAA,MAAM,SAAS,cAAA,EAAe;AAC9B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAA,CAAK,eAAe,MAAM,CAAA;AAAA,IAClC,CAAA;AAEA,IAAA,QAAA,CAAS,gBAAA,CAAiB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AAAA,EACtE;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAI,KAAK,iBAAA,EAAmB;AAC1B,MAAA,QAAA,CAAS,mBAAA,CAAoB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AACvE,MAAA,IAAA,CAAK,iBAAA,GAAoB,MAAA;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAGQ,UAAU,OAAA,EAAkB;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACrB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,mBAAA;AAAA,QACN,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,QAAA,EAAU,KAAK,MAAA,CAAO;AAAA,OACvB,CAAA;AAAA,IACH;AAEA,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AAAA,IACxB,GAAG,GAAG,CAAA;AAEN,IAAA,gBAAA,EAAiB;AACjB,IAAA,IAAA,CAAK,YAAA,EAAa;AAElB,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AAC/B,MAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,IAChC;AACA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAA,CAAW,OAAA,GAAU,WAAA,GAAc,YAAY,CAAA;AAAA,EACnE;AAAA,EAEQ,mBAAA,GAAsB;AAC5B,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AACjC,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AACpB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,MAAM,CAAA;AAEnC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,YAAA,GAAe;AACrB,IAAA,IAAA,CAAK,SAAA,GAAY,EAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,EACpB;AAAA;AAAA,EAGA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAC9B,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,IAAA,CAAK,YAAY,EAAC;AAAA,EACpB;AAAA,EAEQ,IAAA,CACN,OACA,OAAA,EACA;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,OAAO,CAAC,CAAA;AAAA,EACpD;AAAA,EAEQ,KAAK,GAAA,EAAY;AACvB,IAAA,IAAA,CAAK,IAAA,CAAK,SAAS,GAAG,CAAA;AACtB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,OAAO,CAAA;AAAA,EACtC;AACF","file":"index.mjs","sourcesContent":["import nacl from \"tweetnacl\";\nimport { decodeBase64, encodeBase64 } from \"tweetnacl-util\";\n\ninterface EncryptedMessage {\n  cipher: string; // Base64 encoded\n  nonce: string; // Base64 encoded\n}\n\nexport class CryptoService {\n  generateSymmetricKey(): string {\n    const key = nacl.randomBytes(32);\n    return encodeBase64(key);\n  }\n\n  /**\n   * Encrypt with symmetric key (secret-key encryption)\n   * Use this when both parties share the same secret key\n   * @param plaintext - Message to encrypt\n   * @param keyString - Symmetric key (base64)\n   * @returns Encrypted message with nonce\n   */\n  encryptSymmetric({\n    plaintext,\n    keyString,\n  }: {\n    plaintext: string;\n    keyString: string;\n  }): EncryptedMessage {\n    const key = decodeBase64(keyString);\n    const nonce = nacl.randomBytes(24);\n\n    const messageBytes = new TextEncoder().encode(plaintext);\n\n    const ciphertext = nacl.secretbox(messageBytes, nonce, key);\n\n    return {\n      cipher: encodeBase64(ciphertext),\n      nonce: encodeBase64(nonce),\n    };\n  }\n\n  /**\n   * Decrypt with symmetric key\n   * @param encrypted - Encrypted message with nonce\n   * @param keyString - Symmetric key (base64)\n   * @returns Decrypted plaintext\n   */\n  decryptSymmetric({\n    encrypted,\n    keyString,\n  }: {\n    encrypted: EncryptedMessage;\n    keyString: string;\n  }): string | null {\n    try {\n      const key = decodeBase64(keyString);\n      const ciphertextBytes = decodeBase64(encrypted.cipher);\n      const nonceBytes = decodeBase64(encrypted.nonce);\n\n      const decrypted = nacl.secretbox.open(ciphertextBytes, nonceBytes, key);\n\n      if (!decrypted) {\n        throw new Error(\"Decryption failed - invalid key or corrupted data\");\n      }\n\n      const decoded = new TextDecoder().decode(decrypted);\n      return decoded;\n    } catch (error) {\n      console.error(\"Decryption failed\", error);\n      return null;\n    }\n  }\n}\n\nexport default CryptoService;\nexport type { EncryptedMessage };\n","// hybridStorage.ts\n/**\n * Hybrid storage: Try sessionStorage first, fallback to memory\n * Best of both worlds - survives page refresh but auto-cleans\n */\n\ninterface StorageOptions {\n  ttlMs?: number;\n  useSessionStorage?: boolean;\n}\n\nclass AuthStorage {\n  private readonly prefix = \"pelican_auth_\";\n  private readonly defaultTTL = 5 * 60 * 1000; // 5 minutes\n  private memoryCache: Map<string, { value: any; expiresAt: number }> =\n    new Map();\n\n  /**\n   * Store auth session with automatic cleanup\n   */\n  set(key: string, value: any, options: StorageOptions = {}): void {\n    const { ttlMs = this.defaultTTL, useSessionStorage = true } = options;\n\n    const expiresAt = Date.now() + ttlMs;\n    const data = { value, expiresAt };\n\n    // Try sessionStorage first\n    if (useSessionStorage) {\n      try {\n        sessionStorage.setItem(`${this.prefix}${key}`, JSON.stringify(data));\n      } catch (error) {\n        console.warn(\"SessionStorage unavailable, using memory:\", error);\n        this.setMemory(key, data);\n      }\n    } else {\n      this.setMemory(key, data);\n    }\n  }\n\n  /**\n   * Get stored value if not expired\n   */\n  get(key: string): any | null {\n    // Try sessionStorage first\n    try {\n      const stored = sessionStorage.getItem(`${this.prefix}${key}`);\n      if (stored) {\n        const data = JSON.parse(stored);\n\n        // Check expiration\n        if (Date.now() > data.expiresAt) {\n          this.remove(key);\n          return null;\n        }\n\n        return data.value;\n      }\n    } catch (error) {\n      // Fallback to memory\n    }\n\n    // Try memory cache\n    return this.getMemory(key);\n  }\n\n  /**\n   * Remove specific key\n   */\n  remove(key: string): void {\n    try {\n      sessionStorage.removeItem(`${this.prefix}${key}`);\n    } catch (error) {\n      // Ignore\n    }\n    this.memoryCache.delete(key);\n  }\n\n  /**\n   * Clear all auth data\n   */\n  clear(): void {\n    // Clear sessionStorage\n    try {\n      Object.keys(sessionStorage).forEach((key) => {\n        if (key.startsWith(this.prefix)) {\n          sessionStorage.removeItem(key);\n        }\n      });\n    } catch (error) {\n      // Ignore\n    }\n\n    // Clear memory\n    this.memoryCache.clear();\n  }\n\n  // ========================================\n  // Memory cache helpers\n  // ========================================\n\n  private setMemory(\n    key: string,\n    data: { value: any; expiresAt: number }\n  ): void {\n    this.memoryCache.set(key, data);\n\n    // Schedule cleanup\n    const ttl = data.expiresAt - Date.now();\n    setTimeout(() => {\n      this.memoryCache.delete(key);\n    }, ttl);\n  }\n\n  private getMemory(key: string): any | null {\n    const data = this.memoryCache.get(key);\n    if (!data) return null;\n\n    if (Date.now() > data.expiresAt) {\n      this.memoryCache.delete(key);\n      return null;\n    }\n\n    return data.value;\n  }\n}\n\n// Singleton instance\nconst storage = new AuthStorage();\n\n// ========================================\n// Convenience functions for auth flow\n// ========================================\n\nexport interface AuthSession {\n  sessionId: string;\n  sessionKey: string;\n}\n\nexport const storeAuthSession = (\n  sessionId: string,\n  sessionKey: string,\n  ttlMs?: number\n): void => {\n  storage.set(\"session\", { sessionId, sessionKey }, { ttlMs });\n};\n\nexport const getAuthSession = (): AuthSession | null => {\n  return storage.get(\"session\");\n};\n\nexport const clearAuthSession = (): void => {\n  storage.remove(\"session\");\n};\n\nexport const clearAllAuthData = (): void => {\n  storage.clear();\n};\n\nexport default storage;\n","import type { PelicanAuthState } from \"../types/types\";\n\nexport class StateMachine {\n  private state: PelicanAuthState = \"idle\";\n  private listeners = new Set<(s: PelicanAuthState) => void>();\n\n  get current() {\n    return this.state;\n  }\n\n  transition(next: PelicanAuthState) {\n    this.state = next;\n    this.listeners.forEach((l) => l(next));\n  }\n\n  subscribe(fn: (s: PelicanAuthState) => void) {\n    this.listeners.add(fn);\n    return () => this.listeners.delete(fn);\n  }\n}\n","import { ISocketMessage } from \"../types/types\";\n\ntype TransportHandlers = {\n  onOpen?: () => void;\n  onMessage?: (msg: ISocketMessage) => void;\n  onError?: (err: Event) => void;\n  onClose?: (ev: CloseEvent) => void;\n};\n\ninterface PelicanMessageEvent extends MessageEvent {\n  data: ISocketMessage;\n}\nexport class Transport {\n  private socket?: WebSocket;\n  private handlers: TransportHandlers;\n\n  constructor(handlers: TransportHandlers) {\n    this.handlers = handlers;\n  }\n\n  connect(url: string) {\n    this.socket = new WebSocket(url);\n\n    this.socket.onopen = () => this.handlers.onOpen?.();\n    this.socket.onmessage = (e: PelicanMessageEvent) =>\n      this.handlers.onMessage?.(e.data);\n    this.socket.onerror = (e: Event) => this.handlers.onError?.(e);\n    this.socket.onclose = (e: CloseEvent) => this.handlers.onClose?.(e);\n  }\n\n  send(payload: ISocketMessage) {\n    if (this.socket?.readyState === WebSocket.OPEN) {\n      this.socket.send(JSON.stringify(payload));\n    }\n  }\n\n  close() {\n    this.socket?.close();\n  }\n}\n","export const BASEURL = \"http://localhost:8080\";\n","import CryptoService from \"../utilities/crypto\";\nimport QRCode from \"qrcode\";\nimport {\n  PelicanAuthConfig,\n  PelicanAuthEventMap,\n  ISocketMessage,\n  IdentityResult,\n} from \"../types/types\";\nimport {\n  storeAuthSession,\n  getAuthSession,\n  clearAuthSession,\n  AuthSession,\n} from \"../utilities/storage\";\nimport { StateMachine } from \"../utilities/stateMachine\";\nimport { Transport } from \"../utilities/transport\";\n\nimport { BASEURL } from \"../constants\";\n\ntype Listener<T> = (payload: T) => void;\n\n/**\n * PelicanAuth SDK\n * Handles cross-device authentication via WebSockets and E2EE (End-to-End Encryption).\n */\nexport class PelicanAuthentication {\n  private readonly crypto = new CryptoService();\n  private readonly stateMachine = new StateMachine();\n\n  private transport?: Transport;\n  private sessionId = \"\";\n  private sessionKey: string | null = null;\n\n  private visibilityHandler?: () => void;\n\n  private listeners: {\n    [K in keyof PelicanAuthEventMap]?: Set<Listener<any>>;\n  } = {};\n\n  private readonly config: Required<PelicanAuthConfig>;\n\n  constructor(config: PelicanAuthConfig) {\n    if (!config.publicKey) throw new Error(\"Missing publicKey\");\n    if (!config.projectId) throw new Error(\"Missing projectId\");\n    if (!config.authType) throw new Error(\"Missing authType\");\n\n    this.config = {\n      continuousMode: false,\n      forceQRCode: false,\n      ...config,\n    };\n\n    // Sync internal state machine changes with the 'state' event\n    this.stateMachine.subscribe((s) => this.emit(\"state\", s));\n    this.attachVisibilityRecovery();\n  }\n\n  /* -------------------- public API -------------------- */\n\n  /**\n   * Subscribe to SDK events (qr, deeplink, success, error, state)\n   * @returns Unsubscribe function\n   */\n  on<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    cb: Listener<PelicanAuthEventMap[K]>\n  ) {\n    this.listeners[event] ??= new Set();\n    this.listeners[event]!.add(cb);\n    return () => this.listeners[event]!.delete(cb);\n  }\n\n  /**\n   * Initializes the authentication flow.\n   * Fetches a relay, establishes a WebSocket, and generates the E2EE session key.\n   */\n  async start() {\n    if (this.stateMachine.current !== \"idle\") return;\n\n    this.resetSession();\n    this.stateMachine.transition(\"initializing\");\n\n    try {\n      const relay = await this.fetchRelayUrl();\n\n      // Generate a fresh symmetric key for this specific session\n      this.sessionKey = this.crypto.generateSymmetricKey();\n      this.sessionId = crypto.randomUUID() + crypto.randomUUID();\n\n      this.transport = new Transport({\n        onOpen: () => {\n          // Register this browser session with the relay\n          this.transport!.send({\n            type: \"register\",\n            sessionID: this.sessionId,\n            ...this.config,\n          });\n          this.stateMachine.transition(\"awaiting-pair\");\n        },\n        onMessage: (msg: ISocketMessage) => this.handleMessage(msg),\n        onError: () => this.fail(new Error(\"WebSocket connection failed\")),\n      });\n\n      this.transport.connect(relay);\n      await this.emitEntryPoint();\n    } catch (err) {\n      this.fail(err instanceof Error ? err : new Error(\"Start failed\"));\n    }\n  }\n\n  /**\n   * Manually stops the authentication process and closes connections.\n   */\n  stop() {\n    this.terminate(false);\n  }\n\n  /* -------------------- internals -------------------- */\n\n  /** Fetches the WebSocket Relay URL from the backend */\n  private async fetchRelayUrl(): Promise<string> {\n    const { publicKey, projectId, authType } = this.config;\n    const res = await fetch(\n      `${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`\n    );\n\n    if (!res.ok) {\n      throw new Error(\"Failed to fetch relay URL\");\n    }\n\n    const json = await res.json();\n    return json.relay_url;\n  }\n\n  /**\n   * Decides whether to show a QR code (Desktop) or a Deep Link (Mobile).\n   */\n  private async emitEntryPoint() {\n    const payload = {\n      sessionID: this.sessionId,\n      sessionKey: this.sessionKey,\n      publicKey: this.config.publicKey,\n      authType: this.config.authType,\n      projectId: this.config.projectId,\n      url: window.location.href,\n    };\n\n    const shouldUseQR =\n      this.config.forceQRCode ||\n      !/Android|iPhone|iPad/i.test(navigator.userAgent);\n\n    if (!shouldUseQR && this.sessionKey) {\n      // For mobile: Store session locally so we can recover when the user returns from the app\n      storeAuthSession(this.sessionId, this.sessionKey, 5 * 60_000);\n      this.emit(\n        \"deeplink\",\n        `pelicanvault://auth/deep-link?data=${encodeURIComponent(\n          JSON.stringify(payload)\n        )}`\n      );\n    } else {\n      // For desktop: Generate a QR code for the mobile app to scan\n      const qr = await QRCode.toDataURL(JSON.stringify(payload));\n      this.emit(\"qr\", qr);\n    }\n  }\n\n  /** Main WebSocket message router */\n  private handleMessage(msg: ISocketMessage) {\n    console.log(msg);\n\n    switch (msg.type) {\n      case \"paired\":\n        console.log(\"Paired\");\n\n        this.stateMachine.transition(\"paired\");\n        this.transport!.send({\n          type: \"authenticate\",\n          sessionID: this.sessionId,\n          ...this.config,\n          url: window.location.href,\n        });\n        return;\n\n      case \"phone-auth-success\":\n        // Mobile device successfully authenticated and sent encrypted credentials\n        this.handleAuthSuccess(msg);\n        return;\n\n      case \"phone-terminated\":\n        this.fail(new Error(\"Authenticating device terminated the connection\"));\n        this.restartIfContinuous();\n        return;\n\n      case \"confirmed\":\n        // Handshake complete\n        this.terminate(true);\n        this.restartIfContinuous();\n        return;\n    }\n  }\n\n  /**\n   * Decrypts the identity payload received from the phone using the session key.\n   */\n  private handleAuthSuccess(msg: ISocketMessage) {\n    if (!this.sessionKey || !msg.cipher || !msg.nonce) {\n      this.fail(new Error(\"Invalid authentication payload\"));\n      this.restartIfContinuous();\n      return;\n    }\n\n    try {\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: msg.cipher, nonce: msg.nonce },\n        keyString: this.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid authentication data\"));\n        this.restartIfContinuous();\n        return;\n      }\n\n      const result: IdentityResult = JSON.parse(decrypted);\n\n      this.emit(\"success\", result);\n      this.stateMachine.transition(\"authenticated\");\n\n      // Signal to the relay/phone that we have received and decrypted the data\n      this.transport?.send({\n        type: \"confirm\",\n        sessionID: this.sessionId,\n      });\n    } catch {\n      this.fail(new Error(\"Failed to decrypt authentication data\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  /**\n   * Logic to handle users returning to the browser tab after using the mobile app.\n   * Checks the server for a completed session that might have finished while in background.\n   */\n\n  private async getCachedEntry(cached: AuthSession) {\n    try {\n      const res = await fetch(\n        `${BASEURL}/session?session_id=${cached.sessionId}`\n      );\n\n      if (!res.ok) throw new Error(\"Invalid session\");\n\n      const data = await res.json();\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: data.cipher, nonce: data.nonce },\n        keyString: cached.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid session data\"));\n        this.restartIfContinuous();\n        return;\n      }\n      const result: IdentityResult = JSON.parse(decrypted);\n      this.emit(\"success\", result);\n      clearAuthSession();\n    } catch {\n      this.fail(new Error(\"Session recovery failed\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  private attachVisibilityRecovery() {\n    this.visibilityHandler = async () => {\n      if (document.visibilityState !== \"visible\") return;\n\n      const cached = getAuthSession();\n      if (!cached) return;\n      await this.getCachedEntry(cached);\n    };\n\n    document.addEventListener(\"visibilitychange\", this.visibilityHandler);\n  }\n\n  private detachVisibilityRecovery() {\n    if (this.visibilityHandler) {\n      document.removeEventListener(\"visibilitychange\", this.visibilityHandler);\n      this.visibilityHandler = undefined;\n    }\n  }\n\n  /** Cleans up the current session state */\n  private terminate(success: boolean) {\n    if (!this.transport) return;\n    if (!success) {\n      this.transport?.send({\n        type: \"client-terminated\",\n        sessionID: this.sessionId,\n        projectId: this.config.projectId,\n        publicKey: this.config.publicKey,\n        authType: this.config.authType,\n      });\n    }\n\n    setTimeout(() => {\n      this.transport?.close();\n    }, 150);\n\n    clearAuthSession();\n    this.resetSession();\n\n    if (!this.config.continuousMode) {\n      this.detachVisibilityRecovery();\n    }\n    this.stateMachine.transition(success ? \"confirmed\" : \"terminated\");\n  }\n\n  private restartIfContinuous() {\n    if (!this.config.continuousMode) return;\n    this.terminate(false);\n    this.stateMachine.transition(\"idle\");\n\n    setTimeout(() => {\n      this.start();\n    }, 150);\n  }\n\n  private resetSession() {\n    this.sessionId = \"\";\n    this.sessionKey = null;\n  }\n\n  /** Completely destroys the instance and removes all listeners */\n  destroy() {\n    this.detachVisibilityRecovery();\n    this.transport?.close();\n    this.listeners = {};\n  }\n\n  private emit<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    payload: PelicanAuthEventMap[K]\n  ) {\n    this.listeners[event]?.forEach((cb) => cb(payload));\n  }\n\n  private fail(err: Error) {\n    this.emit(\"error\", err);\n    this.stateMachine.transition(\"error\");\n  }\n}\n"]}
+{"version":3,"sources":["../src/utilities/crypto.ts","../src/utilities/storage.ts","../src/utilities/stateMachine.ts","../src/utilities/transport.ts","../src/constants.ts","../src/engine/engine.ts"],"names":[],"mappings":";;;;;AAQO,IAAM,gBAAN,MAAoB;AAAA,EACzB,oBAAA,GAA+B;AAC7B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAC/B,IAAA,OAAO,aAAa,GAAG,CAAA;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGqB;AACnB,IAAA,MAAM,GAAA,GAAM,aAAa,SAAS,CAAA;AAClC,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,WAAA,CAAY,EAAE,CAAA;AAEjC,IAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAEvD,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,YAAA,EAAc,OAAO,GAAG,CAAA;AAE1D,IAAA,OAAO;AAAA,MACL,MAAA,EAAQ,aAAa,UAAU,CAAA;AAAA,MAC/B,KAAA,EAAO,aAAa,KAAK;AAAA,KAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAA,CAAiB;AAAA,IACf,SAAA;AAAA,IACA;AAAA,GACF,EAGkB;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,aAAa,SAAS,CAAA;AAClC,MAAA,MAAM,eAAA,GAAkB,YAAA,CAAa,SAAA,CAAU,MAAM,CAAA;AACrD,MAAA,MAAM,UAAA,GAAa,YAAA,CAAa,SAAA,CAAU,KAAK,CAAA;AAE/C,MAAA,MAAM,YAAY,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,EAAiB,YAAY,GAAG,CAAA;AAEtE,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,MAAM,IAAI,MAAM,mDAAmD,CAAA;AAAA,MACrE;AAEA,MAAA,MAAM,OAAA,GAAU,IAAI,WAAA,EAAY,CAAE,OAAO,SAAS,CAAA;AAClD,MAAA,OAAO,OAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,OAAA,CAAQ,KAAA,CAAM,qBAAqB,KAAK,CAAA;AACxC,MAAA,OAAO,IAAA;AAAA,IACT;AAAA,EACF;AACF;AAEA,IAAO,cAAA,GAAQ,aAAA;;;AC/Df,IAAM,cAAN,MAAkB;AAAA,EAAlB,WAAA,GAAA;AACE,IAAA,IAAA,CAAiB,MAAA,GAAS,eAAA;AAC1B,IAAA,IAAA,CAAiB,UAAA,GAAa,IAAI,EAAA,GAAK,GAAA;AACvC;AAAA,IAAA,IAAA,CAAQ,WAAA,uBACF,GAAA,EAAI;AAAA,EAAA;AAAA;AAAA;AAAA;AAAA,EAKV,GAAA,CAAI,GAAA,EAAa,KAAA,EAAY,OAAA,GAA0B,EAAC,EAAS;AAC/D,IAAA,MAAM,EAAE,KAAA,GAAQ,IAAA,CAAK,UAAA,EAAY,iBAAA,GAAoB,MAAK,GAAI,OAAA;AAE9D,IAAA,MAAM,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA;AAC/B,IAAA,MAAM,IAAA,GAAO,EAAE,KAAA,EAAO,SAAA,EAAU;AAGhC,IAAA,IAAI,iBAAA,EAAmB;AACrB,MAAA,IAAI;AACF,QAAA,cAAA,CAAe,OAAA,CAAQ,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAA,CAAK,SAAA,CAAU,IAAI,CAAC,CAAA;AAAA,MACrE,SAAS,KAAA,EAAO;AACd,QAAA,OAAA,CAAQ,IAAA,CAAK,6CAA6C,KAAK,CAAA;AAC/D,QAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,MAC1B;AAAA,IACF,CAAA,MAAO;AACL,MAAA,IAAA,CAAK,SAAA,CAAU,KAAK,IAAI,CAAA;AAAA,IAC1B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,GAAA,EAAyB;AAE3B,IAAA,IAAI;AACF,MAAA,MAAM,MAAA,GAAS,eAAe,OAAA,CAAQ,CAAA,EAAG,KAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAC5D,MAAA,IAAI,MAAA,EAAQ;AACV,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAG9B,QAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,UAAA,IAAA,CAAK,OAAO,GAAG,CAAA;AACf,UAAA,OAAO,IAAA;AAAA,QACT;AAEA,QAAA,OAAO,IAAA,CAAK,KAAA;AAAA,MACd;AAAA,IACF,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,GAAA,EAAmB;AACxB,IAAA,IAAI;AACF,MAAA,cAAA,CAAe,WAAW,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,EAAG,GAAG,CAAA,CAAE,CAAA;AAAA,IAClD,SAAS,KAAA,EAAO;AAAA,IAEhB;AACA,IAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,KAAA,GAAc;AAEZ,IAAA,IAAI;AACF,MAAA,MAAA,CAAO,IAAA,CAAK,cAAc,CAAA,CAAE,OAAA,CAAQ,CAAC,GAAA,KAAQ;AAC3C,QAAA,IAAI,GAAA,CAAI,UAAA,CAAW,IAAA,CAAK,MAAM,CAAA,EAAG;AAC/B,UAAA,cAAA,CAAe,WAAW,GAAG,CAAA;AAAA,QAC/B;AAAA,MACF,CAAC,CAAA;AAAA,IACH,SAAS,KAAA,EAAO;AAAA,IAEhB;AAGA,IAAA,IAAA,CAAK,YAAY,KAAA,EAAM;AAAA,EACzB;AAAA;AAAA;AAAA;AAAA,EAMQ,SAAA,CACN,KACA,IAAA,EACM;AACN,IAAA,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAA,EAAK,IAAI,CAAA;AAG9B,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,SAAA,GAAY,IAAA,CAAK,GAAA,EAAI;AACtC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAAA,IAC7B,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,UAAU,GAAA,EAAyB;AACzC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,GAAA,CAAI,GAAG,CAAA;AACrC,IAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAElB,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,GAAI,IAAA,CAAK,SAAA,EAAW;AAC/B,MAAA,IAAA,CAAK,WAAA,CAAY,OAAO,GAAG,CAAA;AAC3B,MAAA,OAAO,IAAA;AAAA,IACT;AAEA,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AACF,CAAA;AAGA,IAAM,OAAA,GAAU,IAAI,WAAA,EAAY;AAWzB,IAAM,gBAAA,GAAmB,CAC9B,SAAA,EACA,UAAA,EACA,KAAA,KACS;AACT,EAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,EAAE,SAAA,EAAW,YAAW,EAAG,EAAE,OAAO,CAAA;AAC7D;AAEO,IAAM,iBAAiB,MAA0B;AACtD,EAAA,OAAO,OAAA,CAAQ,IAAI,SAAS,CAAA;AAC9B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAC1B;AAEO,IAAM,mBAAmB,MAAY;AAC1C,EAAA,OAAA,CAAQ,KAAA,EAAM;AAChB;;;AC1JO,IAAM,eAAN,MAAmB;AAAA,EAAnB,WAAA,GAAA;AACL,IAAA,IAAA,CAAQ,KAAA,GAA0B,MAAA;AAClC,IAAA,IAAA,CAAQ,SAAA,uBAAgB,GAAA,EAAmC;AAAA,EAAA;AAAA,EAE3D,IAAI,OAAA,GAAU;AACZ,IAAA,OAAO,IAAA,CAAK,KAAA;AAAA,EACd;AAAA,EAEA,WAAW,IAAA,EAAwB;AACjC,IAAA,IAAA,CAAK,KAAA,GAAQ,IAAA;AACb,IAAA,IAAA,CAAK,UAAU,OAAA,CAAQ,CAAC,CAAA,KAAM,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EACvC;AAAA,EAEA,UAAU,EAAA,EAAmC;AAC3C,IAAA,IAAA,CAAK,SAAA,CAAU,IAAI,EAAE,CAAA;AACrB,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,MAAA,CAAO,EAAE,CAAA;AAAA,EACvC;AACF;;;ACVO,IAAM,YAAN,MAAgB;AAAA,EAQrB,YAAY,QAAA,EAA6B;AALzC,IAAA,IAAA,CAAQ,iBAAA,GAAoB,CAAA;AAC5B,IAAA,IAAA,CAAQ,oBAAA,GAAuB,CAAA;AAC/B,IAAA,IAAA,CAAQ,kBAAA,GAAqB,KAAA;AAI3B,IAAA,IAAA,CAAK,QAAA,GAAW,QAAA;AAAA,EAClB;AAAA,EAEA,QAAQ,GAAA,EAAa;AACnB,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AACX,IAAA,IAAA,CAAK,kBAAA,GAAqB,KAAA;AAC1B,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,SAAA,CAAU,GAAG,CAAA;AAE/B,IAAA,IAAA,CAAK,MAAA,CAAO,SAAS,MAAM;AACzB,MAAA,IAAA,CAAK,iBAAA,GAAoB,CAAA;AACzB,MAAA,IAAA,CAAK,SAAS,MAAA,IAAS;AAAA,IACzB,CAAA;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,SAAA,GAAY,CAAC,CAAA,KAAoB;AAC3C,MAAA,IAAI;AACF,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAA,CAAE,IAAI,CAAA;AAC9B,QAAA,IAAA,CAAK,QAAA,CAAS,YAAY,IAAI,CAAA;AAAA,MAChC,SAAS,GAAA,EAAK;AACZ,QAAA,OAAA,CAAQ,KAAA,CAAM,2BAA2B,GAAG,CAAA;AAAA,MAC9C;AAAA,IACF,CAAA;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,OAAA,GAAU,CAAC,CAAA,KAAa;AAClC,MAAA,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAAA,IAC3B,CAAA;AACA,IAAA,IAAA,CAAK,MAAA,CAAO,OAAA,GAAU,CAAC,CAAA,KAAkB;AACvC,MAAA,IAAA,CAAK,QAAA,CAAS,UAAU,CAAC,CAAA;AAGzB,MAAA,IAAI,CAAC,KAAK,kBAAA,EAAoB;AAC5B,QAAA,IAAA,CAAK,gBAAA,EAAiB;AAAA,MACxB;AAAA,IACF,CAAA;AAAA,EACF;AAAA,EAEQ,gBAAA,GAAmB;AACzB,IAAA,IAAI,IAAA,CAAK,iBAAA,IAAqB,IAAA,CAAK,oBAAA,EAAsB;AACvD,MAAA,OAAA,CAAQ,MAAM,uCAAkC,CAAA;AAChD,MAAA;AAAA,IACF;AAEA,IAAA,IAAA,CAAK,iBAAA,EAAA;AAEL,IAAA,MAAM,QAAQ,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,iBAAiB,CAAA,GAAI,GAAA;AACpD,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAI,IAAA,CAAK,GAAA,EAAK,IAAA,CAAK,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,IACrC,GAAG,KAAK,CAAA;AAAA,EACV;AAAA,EACA,KAAK,OAAA,EAAyB;AAC5B,IAAA,IAAI,IAAA,CAAK,MAAA,EAAQ,UAAA,KAAe,SAAA,CAAU,IAAA,EAAM;AAC9C,MAAA,IAAA,CAAK,MAAA,CAAO,IAAA,CAAK,IAAA,CAAK,SAAA,CAAU,OAAO,CAAC,CAAA;AAAA,IAC1C;AAAA,EACF;AAAA,EAEA,KAAA,GAAQ;AACN,IAAA,IAAA,CAAK,kBAAA,GAAqB,IAAA;AAC1B,IAAA,IAAA,CAAK,QAAQ,KAAA,EAAM;AAAA,EACrB;AACF;;;AC1EO,IAAM,OAAA,GAAU;;;ACyBhB,IAAM,wBAAN,MAA4B;AAAA,EAgBjC,YAAY,MAAA,EAA2B;AAfvC,IAAA,IAAA,CAAiB,MAAA,GAAS,IAAI,cAAA,EAAc;AAC5C,IAAA,IAAA,CAAiB,YAAA,GAAe,IAAI,YAAA,EAAa;AAGjD,IAAA,IAAA,CAAQ,SAAA,GAAY,EAAA;AACpB,IAAA,IAAA,CAAQ,UAAA,GAA4B,IAAA;AAIpC,IAAA,IAAA,CAAQ,YAEJ,EAAC;AAKH,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,SAAA,EAAW,MAAM,IAAI,MAAM,mBAAmB,CAAA;AAC1D,IAAA,IAAI,CAAC,MAAA,CAAO,QAAA,EAAU,MAAM,IAAI,MAAM,kBAAkB,CAAA;AAExD,IAAA,IAAA,CAAK,MAAA,GAAS;AAAA,MACZ,cAAA,EAAgB,KAAA;AAAA,MAChB,WAAA,EAAa,KAAA;AAAA,MACb,GAAG;AAAA,KACL;AAGA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAU,CAAC,CAAA,KAAM,KAAK,IAAA,CAAK,OAAA,EAAS,CAAC,CAAC,CAAA;AACxD,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,EAChC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,EAAA,CACE,OACA,EAAA,EACA;AAlEJ,IAAA,IAAA,EAAA;AAmEI,IAAA,CAAA,EAAA,GAAA,IAAA,CAAK,SAAA,EAAL,KAAA,CAAA,KAAA,EAAA,CAAA,KAAA,CAAA,mBAA0B,IAAI,GAAA,EAAI,CAAA;AAClC,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,GAAA,CAAI,EAAE,CAAA;AAC7B,IAAA,OAAO,MAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,CAAG,OAAO,EAAE,CAAA;AAAA,EAC/C;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAA,GAAQ;AACZ,IAAA,IAAI,IAAA,CAAK,YAAA,CAAa,OAAA,KAAY,MAAA,EAAQ;AAE1C,IAAA,IAAA,CAAK,YAAA,EAAa;AAClB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,cAAc,CAAA;AAE3C,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,aAAA,EAAc;AAGvC,MAAA,IAAA,CAAK,UAAA,GAAa,IAAA,CAAK,MAAA,CAAO,oBAAA,EAAqB;AACnD,MAAA,IAAA,CAAK,SAAA,GAAY,MAAA,CAAO,UAAA,EAAW,GAAI,OAAO,UAAA,EAAW;AAEzD,MAAA,IAAA,CAAK,SAAA,GAAY,IAAI,SAAA,CAAU;AAAA,QAC7B,QAAQ,MAAM;AAEZ,UAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,YACnB,IAAA,EAAM,UAAA;AAAA,YACN,WAAW,IAAA,CAAK,SAAA;AAAA,YAChB,GAAG,IAAA,CAAK;AAAA,WACT,CAAA;AACD,UAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAAA,QAC9C,CAAA;AAAA,QACA,SAAA,EAAW,CAAC,GAAA,KAAwB,IAAA,CAAK,cAAc,GAAG,CAAA;AAAA,QAC1D,SAAS,MAAM,IAAA,CAAK,KAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC;AAAA,OAClE,CAAA;AAED,MAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,KAAK,CAAA;AAC5B,MAAA,MAAM,KAAK,cAAA,EAAe;AAAA,IAC5B,SAAS,GAAA,EAAK;AACZ,MAAA,IAAA,CAAK,KAAK,GAAA,YAAe,KAAA,GAAQ,MAAM,IAAI,KAAA,CAAM,cAAc,CAAC,CAAA;AAAA,IAClE;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAA,GAAO;AACL,IAAA,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,EACtB;AAAA;AAAA;AAAA,EAKA,MAAc,aAAA,GAAiC;AAC7C,IAAA,MAAM,EAAE,SAAA,EAAW,SAAA,EAAW,QAAA,KAAa,IAAA,CAAK,MAAA;AAChD,IAAA,MAAM,MAAM,MAAM,KAAA;AAAA,MAChB,GAAG,OAAO,CAAA,kBAAA,EAAqB,SAAS,CAAA,WAAA,EAAc,QAAQ,eAAe,SAAS,CAAA;AAAA,KACxF;AAEA,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAI,MAAM,2BAA2B,CAAA;AAAA,IAC7C;AAEA,IAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,cAAA,GAAiB;AAC7B,IAAA,MAAM,OAAA,GAAU;AAAA,MACd,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,YAAY,IAAA,CAAK,UAAA;AAAA,MACjB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,QAAA,EAAU,KAAK,MAAA,CAAO,QAAA;AAAA,MACtB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,MACvB,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,KACvB;AAEA,IAAA,MAAM,WAAA,GACJ,KAAK,MAAA,CAAO,WAAA,IACZ,CAAC,sBAAA,CAAuB,IAAA,CAAK,UAAU,SAAS,CAAA;AAElD,IAAA,IAAI,CAAC,WAAA,IAAe,IAAA,CAAK,UAAA,EAAY;AAEnC,MAAA,gBAAA,CAAiB,IAAA,CAAK,SAAA,EAAW,IAAA,CAAK,UAAA,EAAY,IAAI,GAAM,CAAA;AAC5D,MAAA,IAAA,CAAK,IAAA;AAAA,QACH,UAAA;AAAA,QACA,CAAA,mCAAA,EAAsC,kBAAA;AAAA,UACpC,IAAA,CAAK,UAAU,OAAO;AAAA,SACvB,CAAA;AAAA,OACH;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAM,KAAK,MAAM,MAAA,CAAO,UAAU,IAAA,CAAK,SAAA,CAAU,OAAO,CAAA,EAAG;AAAA,QACzD,IAAA,EAAM,WAAA;AAAA,QACN,KAAA,EAAO,CAAA;AAAA,QACP,KAAA,EAAO,EAAE,KAAA,EAAO,SAAA,EAAW,MAAM,SAAA;AAAU,OAC5C,CAAA;AACD,MAAA,IAAA,CAAK,IAAA,CAAK,MAAM,EAAE,CAAA;AAAA,IACpB;AAAA,EACF;AAAA;AAAA,EAGQ,cAAc,GAAA,EAAqB;AACzC,IAAA,QAAQ,IAAI,IAAA;AAAM,MAChB,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,YAAA,CAAa,WAAW,QAAQ,CAAA;AACrC,QAAA,IAAA,CAAK,UAAW,IAAA,CAAK;AAAA,UACnB,IAAA,EAAM,cAAA;AAAA,UACN,WAAW,IAAA,CAAK,SAAA;AAAA,UAChB,GAAG,IAAA,CAAK,MAAA;AAAA,UACR,GAAA,EAAK,OAAO,QAAA,CAAS;AAAA,SACtB,CAAA;AACD,QAAA;AAAA,MAEF,KAAK,oBAAA;AAEH,QAAA,IAAA,CAAK,kBAAkB,GAAG,CAAA;AAC1B,QAAA;AAAA,MAEF,KAAK,kBAAA;AACH,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,iDAAiD,CAAC,CAAA;AACtE,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MAEF,KAAK,WAAA;AAEH,QAAA,IAAA,CAAK,UAAU,IAAI,CAAA;AACnB,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,kBAAkB,GAAA,EAAqB;AAC7C,IAAA,IAAI,CAAC,KAAK,UAAA,IAAc,CAAC,IAAI,MAAA,IAAU,CAAC,IAAI,KAAA,EAAO;AACjD,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,gCAAgC,CAAC,CAAA;AACrD,MAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,MAAA;AAAA,IACF;AAEA,IAAA,IAAI;AACF,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,IAAI,MAAA,EAAQ,KAAA,EAAO,IAAI,KAAA,EAAM;AAAA,QAClD,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,6BAA6B,CAAC,CAAA;AAClD,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AAEnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,IAAA,CAAK,YAAA,CAAa,WAAW,eAAe,CAAA;AAG5C,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,SAAA;AAAA,QACN,WAAW,IAAA,CAAK;AAAA,OACjB,CAAA;AAAA,IACH,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,uCAAuC,CAAC,CAAA;AAC5D,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,eAAe,MAAA,EAAqB;AAChD,IAAA,IAAI;AACF,MAAA,MAAM,MAAM,MAAM,KAAA;AAAA,QAChB,CAAA,EAAG,OAAO,CAAA,oBAAA,EAAuB,MAAA,CAAO,SAAS,CAAA;AAAA,OACnD;AAEA,MAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,MAAM,iBAAiB,CAAA;AAE9C,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,MAAA,MAAM,SAAA,GAAY,IAAA,CAAK,MAAA,CAAO,gBAAA,CAAiB;AAAA,QAC7C,WAAW,EAAE,MAAA,EAAQ,KAAK,MAAA,EAAQ,KAAA,EAAO,KAAK,KAAA,EAAM;AAAA,QACpD,WAAW,MAAA,CAAO;AAAA,OACnB,CAAA;AAED,MAAA,IAAI,CAAC,SAAA,EAAW;AACd,QAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,sBAAsB,CAAC,CAAA;AAC3C,QAAA,IAAA,CAAK,mBAAA,EAAoB;AACzB,QAAA;AAAA,MACF;AACA,MAAA,MAAM,MAAA,GAAyB,IAAA,CAAK,KAAA,CAAM,SAAS,CAAA;AACnD,MAAA,IAAA,CAAK,IAAA,CAAK,WAAW,MAAM,CAAA;AAC3B,MAAA,gBAAA,EAAiB;AAAA,IACnB,CAAA,CAAA,MAAQ;AACN,MAAA,IAAA,CAAK,IAAA,CAAK,IAAI,KAAA,CAAM,yBAAyB,CAAC,CAAA;AAC9C,MAAA,IAAA,CAAK,mBAAA,EAAoB;AAAA,IAC3B;AAAA,EACF;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAA,CAAK,oBAAoB,YAAY;AACnC,MAAA,IAAI,QAAA,CAAS,oBAAoB,SAAA,EAAW;AAE5C,MAAA,MAAM,SAAS,cAAA,EAAe;AAC9B,MAAA,IAAI,CAAC,MAAA,EAAQ;AACb,MAAA,MAAM,IAAA,CAAK,eAAe,MAAM,CAAA;AAAA,IAClC,CAAA;AAEA,IAAA,QAAA,CAAS,gBAAA,CAAiB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AAAA,EACtE;AAAA,EAEQ,wBAAA,GAA2B;AACjC,IAAA,IAAI,KAAK,iBAAA,EAAmB;AAC1B,MAAA,QAAA,CAAS,mBAAA,CAAoB,kBAAA,EAAoB,IAAA,CAAK,iBAAiB,CAAA;AACvE,MAAA,IAAA,CAAK,iBAAA,GAAoB,MAAA;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAGQ,UAAU,OAAA,EAAkB;AAClC,IAAA,IAAI,CAAC,KAAK,SAAA,EAAW;AACrB,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAA,CAAK,WAAW,IAAA,CAAK;AAAA,QACnB,IAAA,EAAM,mBAAA;AAAA,QACN,WAAW,IAAA,CAAK,SAAA;AAAA,QAChB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,QACvB,QAAA,EAAU,KAAK,MAAA,CAAO;AAAA,OACvB,CAAA;AAAA,IACH;AAEA,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,gBAAA,EAAiB;AACjB,IAAA,IAAA,CAAK,YAAA,EAAa;AAElB,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AAC/B,MAAA,IAAA,CAAK,wBAAA,EAAyB;AAAA,IAChC;AACA,IAAA,IAAA,CAAK,YAAA,CAAa,UAAA,CAAW,OAAA,GAAU,WAAA,GAAc,MAAM,CAAA;AAAA,EAC7D;AAAA,EAEQ,mBAAA,GAAsB;AAC5B,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,MAAM,CAAA;AACnC,IAAA,IAAI,CAAC,IAAA,CAAK,MAAA,CAAO,cAAA,EAAgB;AACjC,IAAA,UAAA,CAAW,MAAM;AACf,MAAA,IAAA,CAAK,KAAA,EAAM;AAAA,IACb,GAAG,GAAG,CAAA;AAAA,EACR;AAAA,EAEQ,YAAA,GAAe;AACrB,IAAA,IAAA,CAAK,SAAA,GAAY,EAAA;AACjB,IAAA,IAAA,CAAK,UAAA,GAAa,IAAA;AAAA,EACpB;AAAA;AAAA,EAGA,OAAA,GAAU;AACR,IAAA,IAAA,CAAK,wBAAA,EAAyB;AAC9B,IAAA,IAAA,CAAK,WAAW,KAAA,EAAM;AACtB,IAAA,IAAA,CAAK,YAAY,EAAC;AAAA,EACpB;AAAA,EAEQ,IAAA,CACN,OACA,OAAA,EACA;AACA,IAAA,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,EAAG,OAAA,CAAQ,CAAC,EAAA,KAAO,EAAA,CAAG,OAAO,CAAC,CAAA;AAAA,EACpD;AAAA,EAEQ,KAAK,GAAA,EAAY;AACvB,IAAA,IAAA,CAAK,IAAA,CAAK,SAAS,GAAG,CAAA;AACtB,IAAA,IAAA,CAAK,YAAA,CAAa,WAAW,OAAO,CAAA;AAAA,EACtC;AACF","file":"index.mjs","sourcesContent":["import nacl from \"tweetnacl\";\nimport { decodeBase64, encodeBase64 } from \"tweetnacl-util\";\n\ninterface EncryptedMessage {\n  cipher: string; // Base64 encoded\n  nonce: string; // Base64 encoded\n}\n\nexport class CryptoService {\n  generateSymmetricKey(): string {\n    const key = nacl.randomBytes(32);\n    return encodeBase64(key);\n  }\n\n  /**\n   * Encrypt with symmetric key (secret-key encryption)\n   * Use this when both parties share the same secret key\n   * @param plaintext - Message to encrypt\n   * @param keyString - Symmetric key (base64)\n   * @returns Encrypted message with nonce\n   */\n  encryptSymmetric({\n    plaintext,\n    keyString,\n  }: {\n    plaintext: string;\n    keyString: string;\n  }): EncryptedMessage {\n    const key = decodeBase64(keyString);\n    const nonce = nacl.randomBytes(24);\n\n    const messageBytes = new TextEncoder().encode(plaintext);\n\n    const ciphertext = nacl.secretbox(messageBytes, nonce, key);\n\n    return {\n      cipher: encodeBase64(ciphertext),\n      nonce: encodeBase64(nonce),\n    };\n  }\n\n  /**\n   * Decrypt with symmetric key\n   * @param encrypted - Encrypted message with nonce\n   * @param keyString - Symmetric key (base64)\n   * @returns Decrypted plaintext\n   */\n  decryptSymmetric({\n    encrypted,\n    keyString,\n  }: {\n    encrypted: EncryptedMessage;\n    keyString: string;\n  }): string | null {\n    try {\n      const key = decodeBase64(keyString);\n      const ciphertextBytes = decodeBase64(encrypted.cipher);\n      const nonceBytes = decodeBase64(encrypted.nonce);\n\n      const decrypted = nacl.secretbox.open(ciphertextBytes, nonceBytes, key);\n\n      if (!decrypted) {\n        throw new Error(\"Decryption failed - invalid key or corrupted data\");\n      }\n\n      const decoded = new TextDecoder().decode(decrypted);\n      return decoded;\n    } catch (error) {\n      console.error(\"Decryption failed\", error);\n      return null;\n    }\n  }\n}\n\nexport default CryptoService;\nexport type { EncryptedMessage };\n","// hybridStorage.ts\n/**\n * Hybrid storage: Try sessionStorage first, fallback to memory\n * Best of both worlds - survives page refresh but auto-cleans\n */\n\ninterface StorageOptions {\n  ttlMs?: number;\n  useSessionStorage?: boolean;\n}\n\nclass AuthStorage {\n  private readonly prefix = \"pelican_auth_\";\n  private readonly defaultTTL = 5 * 60 * 1000; // 5 minutes\n  private memoryCache: Map<string, { value: any; expiresAt: number }> =\n    new Map();\n\n  /**\n   * Store auth session with automatic cleanup\n   */\n  set(key: string, value: any, options: StorageOptions = {}): void {\n    const { ttlMs = this.defaultTTL, useSessionStorage = true } = options;\n\n    const expiresAt = Date.now() + ttlMs;\n    const data = { value, expiresAt };\n\n    // Try sessionStorage first\n    if (useSessionStorage) {\n      try {\n        sessionStorage.setItem(`${this.prefix}${key}`, JSON.stringify(data));\n      } catch (error) {\n        console.warn(\"SessionStorage unavailable, using memory:\", error);\n        this.setMemory(key, data);\n      }\n    } else {\n      this.setMemory(key, data);\n    }\n  }\n\n  /**\n   * Get stored value if not expired\n   */\n  get(key: string): any | null {\n    // Try sessionStorage first\n    try {\n      const stored = sessionStorage.getItem(`${this.prefix}${key}`);\n      if (stored) {\n        const data = JSON.parse(stored);\n\n        // Check expiration\n        if (Date.now() > data.expiresAt) {\n          this.remove(key);\n          return null;\n        }\n\n        return data.value;\n      }\n    } catch (error) {\n      // Fallback to memory\n    }\n\n    // Try memory cache\n    return this.getMemory(key);\n  }\n\n  /**\n   * Remove specific key\n   */\n  remove(key: string): void {\n    try {\n      sessionStorage.removeItem(`${this.prefix}${key}`);\n    } catch (error) {\n      // Ignore\n    }\n    this.memoryCache.delete(key);\n  }\n\n  /**\n   * Clear all auth data\n   */\n  clear(): void {\n    // Clear sessionStorage\n    try {\n      Object.keys(sessionStorage).forEach((key) => {\n        if (key.startsWith(this.prefix)) {\n          sessionStorage.removeItem(key);\n        }\n      });\n    } catch (error) {\n      // Ignore\n    }\n\n    // Clear memory\n    this.memoryCache.clear();\n  }\n\n  // ========================================\n  // Memory cache helpers\n  // ========================================\n\n  private setMemory(\n    key: string,\n    data: { value: any; expiresAt: number }\n  ): void {\n    this.memoryCache.set(key, data);\n\n    // Schedule cleanup\n    const ttl = data.expiresAt - Date.now();\n    setTimeout(() => {\n      this.memoryCache.delete(key);\n    }, ttl);\n  }\n\n  private getMemory(key: string): any | null {\n    const data = this.memoryCache.get(key);\n    if (!data) return null;\n\n    if (Date.now() > data.expiresAt) {\n      this.memoryCache.delete(key);\n      return null;\n    }\n\n    return data.value;\n  }\n}\n\n// Singleton instance\nconst storage = new AuthStorage();\n\n// ========================================\n// Convenience functions for auth flow\n// ========================================\n\nexport interface AuthSession {\n  sessionId: string;\n  sessionKey: string;\n}\n\nexport const storeAuthSession = (\n  sessionId: string,\n  sessionKey: string,\n  ttlMs?: number\n): void => {\n  storage.set(\"session\", { sessionId, sessionKey }, { ttlMs });\n};\n\nexport const getAuthSession = (): AuthSession | null => {\n  return storage.get(\"session\");\n};\n\nexport const clearAuthSession = (): void => {\n  storage.remove(\"session\");\n};\n\nexport const clearAllAuthData = (): void => {\n  storage.clear();\n};\n\nexport default storage;\n","import type { PelicanAuthState } from \"../types/types\";\n\nexport class StateMachine {\n  private state: PelicanAuthState = \"idle\";\n  private listeners = new Set<(s: PelicanAuthState) => void>();\n\n  get current() {\n    return this.state;\n  }\n\n  transition(next: PelicanAuthState) {\n    this.state = next;\n    this.listeners.forEach((l) => l(next));\n  }\n\n  subscribe(fn: (s: PelicanAuthState) => void) {\n    this.listeners.add(fn);\n    return () => this.listeners.delete(fn);\n  }\n}\n","import { ISocketMessage } from \"../types/types\";\n\ntype TransportHandlers = {\n  onOpen?: () => void;\n  onMessage?: (msg: ISocketMessage) => void;\n  onError?: (err: Event) => void;\n  onClose?: (ev: CloseEvent) => void;\n};\n\nexport class Transport {\n  private socket?: WebSocket;\n  private handlers: TransportHandlers;\n  private reconnectAttempts = 0;\n  private maxReconnectAttempts = 5;\n  private isExplicitlyClosed = false;\n  private url?: string;\n\n  constructor(handlers: TransportHandlers) {\n    this.handlers = handlers;\n  }\n\n  connect(url: string) {\n    this.url = url;\n    this.isExplicitlyClosed = false;\n    this.socket = new WebSocket(url);\n\n    this.socket.onopen = () => {\n      this.reconnectAttempts = 0;\n      this.handlers.onOpen?.();\n    };\n    this.socket.onmessage = (e: MessageEvent) => {\n      try {\n        const data = JSON.parse(e.data);\n        this.handlers.onMessage?.(data);\n      } catch (err) {\n        console.error(\"Failed to parse message\", err);\n      }\n    };\n    this.socket.onerror = (e: Event) => {\n      this.handlers.onError?.(e);\n    };\n    this.socket.onclose = (e: CloseEvent) => {\n      this.handlers.onClose?.(e);\n\n      // Only reconnect if the user didn't call .close() manually\n      if (!this.isExplicitlyClosed) {\n        this.attemptReconnect();\n      }\n    };\n  }\n\n  private attemptReconnect() {\n    if (this.reconnectAttempts >= this.maxReconnectAttempts) {\n      console.error(\"❌ Max reconnect attempts reached\");\n      return;\n    }\n\n    this.reconnectAttempts++;\n\n    const delay = Math.pow(2, this.reconnectAttempts) * 500;\n    setTimeout(() => {\n      if (this.url) this.connect(this.url);\n    }, delay);\n  }\n  send(payload: ISocketMessage) {\n    if (this.socket?.readyState === WebSocket.OPEN) {\n      this.socket.send(JSON.stringify(payload));\n    }\n  }\n\n  close() {\n    this.isExplicitlyClosed = true;\n    this.socket?.close();\n  }\n}\n","export const BASEURL = \"http://192.168.1.2:8080\";\n","import CryptoService from \"../utilities/crypto\";\nimport QRCode from \"qrcode\";\nimport {\n  PelicanAuthConfig,\n  PelicanAuthEventMap,\n  ISocketMessage,\n  IdentityResult,\n} from \"../types/types\";\nimport {\n  storeAuthSession,\n  getAuthSession,\n  clearAuthSession,\n  AuthSession,\n} from \"../utilities/storage\";\nimport { StateMachine } from \"../utilities/stateMachine\";\nimport { Transport } from \"../utilities/transport\";\n\nimport { BASEURL } from \"../constants\";\n\ntype Listener<T> = (payload: T) => void;\n\n/**\n * PelicanAuth SDK\n * Handles cross-device authentication via WebSockets and E2EE (End-to-End Encryption).\n */\nexport class PelicanAuthentication {\n  private readonly crypto = new CryptoService();\n  private readonly stateMachine = new StateMachine();\n\n  private transport?: Transport;\n  private sessionId = \"\";\n  private sessionKey: string | null = null;\n\n  private visibilityHandler?: () => void;\n\n  private listeners: {\n    [K in keyof PelicanAuthEventMap]?: Set<Listener<any>>;\n  } = {};\n\n  private readonly config: Required<PelicanAuthConfig>;\n\n  constructor(config: PelicanAuthConfig) {\n    if (!config.publicKey) throw new Error(\"Missing publicKey\");\n    if (!config.projectId) throw new Error(\"Missing projectId\");\n    if (!config.authType) throw new Error(\"Missing authType\");\n\n    this.config = {\n      continuousMode: false,\n      forceQRCode: false,\n      ...config,\n    };\n\n    // Sync internal state machine changes with the 'state' event\n    this.stateMachine.subscribe((s) => this.emit(\"state\", s));\n    this.attachVisibilityRecovery();\n  }\n\n  /* -------------------- public API -------------------- */\n\n  /**\n   * Subscribe to SDK events (qr, deeplink, success, error, state)\n   * @returns Unsubscribe function\n   */\n  on<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    cb: Listener<PelicanAuthEventMap[K]>\n  ) {\n    this.listeners[event] ??= new Set();\n    this.listeners[event]!.add(cb);\n    return () => this.listeners[event]!.delete(cb);\n  }\n\n  /**\n   * Initializes the authentication flow.\n   * Fetches a relay, establishes a WebSocket, and generates the E2EE session key.\n   */\n  async start() {\n    if (this.stateMachine.current !== \"idle\") return;\n\n    this.resetSession();\n    this.stateMachine.transition(\"initializing\");\n\n    try {\n      const relay = await this.fetchRelayUrl();\n\n      // Generate a fresh symmetric key for this specific session\n      this.sessionKey = this.crypto.generateSymmetricKey();\n      this.sessionId = crypto.randomUUID() + crypto.randomUUID();\n\n      this.transport = new Transport({\n        onOpen: () => {\n          // Register this browser session with the relay\n          this.transport!.send({\n            type: \"register\",\n            sessionID: this.sessionId,\n            ...this.config,\n          });\n          this.stateMachine.transition(\"awaiting-pair\");\n        },\n        onMessage: (msg: ISocketMessage) => this.handleMessage(msg),\n        onError: () => this.fail(new Error(\"WebSocket connection failed\")),\n      });\n\n      this.transport.connect(relay);\n      await this.emitEntryPoint();\n    } catch (err) {\n      this.fail(err instanceof Error ? err : new Error(\"Start failed\"));\n    }\n  }\n\n  /**\n   * Manually stops the authentication process and closes connections.\n   */\n  stop() {\n    this.terminate(false);\n  }\n\n  /* -------------------- internals -------------------- */\n\n  /** Fetches the WebSocket Relay URL from the backend */\n  private async fetchRelayUrl(): Promise<string> {\n    const { publicKey, projectId, authType } = this.config;\n    const res = await fetch(\n      `${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`\n    );\n\n    if (!res.ok) {\n      throw new Error(\"Failed to fetch relay URL\");\n    }\n\n    const json = await res.json();\n    return json.relay_url;\n  }\n\n  /**\n   * Decides whether to show a QR code (Desktop) or a Deep Link (Mobile).\n   */\n  private async emitEntryPoint() {\n    const payload = {\n      sessionID: this.sessionId,\n      sessionKey: this.sessionKey,\n      publicKey: this.config.publicKey,\n      authType: this.config.authType,\n      projectId: this.config.projectId,\n      url: window.location.href,\n    };\n\n    const shouldUseQR =\n      this.config.forceQRCode ||\n      !/Android|iPhone|iPad/i.test(navigator.userAgent);\n\n    if (!shouldUseQR && this.sessionKey) {\n      // For mobile: Store session locally so we can recover when the user returns from the app\n      storeAuthSession(this.sessionId, this.sessionKey, 5 * 60_000);\n      this.emit(\n        \"deeplink\",\n        `pelicanvault://auth/deep-link?data=${encodeURIComponent(\n          JSON.stringify(payload)\n        )}`\n      );\n    } else {\n      const qr = await QRCode.toDataURL(JSON.stringify(payload), {\n        type: \"image/png\",\n        scale: 3,\n        color: { light: \"#FFFFF5\", dark: \"#121212\" },\n      });\n      this.emit(\"qr\", qr);\n    }\n  }\n\n  /** Main WebSocket message router */\n  private handleMessage(msg: ISocketMessage) {\n    switch (msg.type) {\n      case \"paired\":\n        this.stateMachine.transition(\"paired\");\n        this.transport!.send({\n          type: \"authenticate\",\n          sessionID: this.sessionId,\n          ...this.config,\n          url: window.location.href,\n        });\n        return;\n\n      case \"phone-auth-success\":\n        // Mobile device successfully authenticated and sent encrypted credentials\n        this.handleAuthSuccess(msg);\n        return;\n\n      case \"phone-terminated\":\n        this.fail(new Error(\"Authenticating device terminated the connection\"));\n        this.restartIfContinuous();\n        return;\n\n      case \"confirmed\":\n        // Handshake complete\n        this.terminate(true);\n        this.restartIfContinuous();\n        return;\n    }\n  }\n\n  /**\n   * Decrypts the identity payload received from the phone using the session key.\n   */\n  private handleAuthSuccess(msg: ISocketMessage) {\n    if (!this.sessionKey || !msg.cipher || !msg.nonce) {\n      this.fail(new Error(\"Invalid authentication payload\"));\n      this.restartIfContinuous();\n      return;\n    }\n\n    try {\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: msg.cipher, nonce: msg.nonce },\n        keyString: this.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid authentication data\"));\n        this.restartIfContinuous();\n        return;\n      }\n\n      const result: IdentityResult = JSON.parse(decrypted);\n\n      this.emit(\"success\", result);\n      this.stateMachine.transition(\"authenticated\");\n\n      // Signal to the relay/phone that we have received and decrypted the data\n      this.transport?.send({\n        type: \"confirm\",\n        sessionID: this.sessionId,\n      });\n    } catch {\n      this.fail(new Error(\"Failed to decrypt authentication data\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  /**\n   * Logic to handle users returning to the browser tab after using the mobile app.\n   * Checks the server for a completed session that might have finished while in background.\n   */\n\n  private async getCachedEntry(cached: AuthSession) {\n    try {\n      const res = await fetch(\n        `${BASEURL}/session?session_id=${cached.sessionId}`\n      );\n\n      if (!res.ok) throw new Error(\"Invalid session\");\n\n      const data = await res.json();\n      const decrypted = this.crypto.decryptSymmetric({\n        encrypted: { cipher: data.cipher, nonce: data.nonce },\n        keyString: cached.sessionKey,\n      });\n\n      if (!decrypted) {\n        this.fail(new Error(\"Invalid session data\"));\n        this.restartIfContinuous();\n        return;\n      }\n      const result: IdentityResult = JSON.parse(decrypted);\n      this.emit(\"success\", result);\n      clearAuthSession();\n    } catch {\n      this.fail(new Error(\"Session recovery failed\"));\n      this.restartIfContinuous();\n    }\n  }\n\n  private attachVisibilityRecovery() {\n    this.visibilityHandler = async () => {\n      if (document.visibilityState !== \"visible\") return;\n\n      const cached = getAuthSession();\n      if (!cached) return;\n      await this.getCachedEntry(cached);\n    };\n\n    document.addEventListener(\"visibilitychange\", this.visibilityHandler);\n  }\n\n  private detachVisibilityRecovery() {\n    if (this.visibilityHandler) {\n      document.removeEventListener(\"visibilitychange\", this.visibilityHandler);\n      this.visibilityHandler = undefined;\n    }\n  }\n\n  /** Cleans up the current session state */\n  private terminate(success: boolean) {\n    if (!this.transport) return;\n    if (!success) {\n      this.transport?.send({\n        type: \"client-terminated\",\n        sessionID: this.sessionId,\n        projectId: this.config.projectId,\n        publicKey: this.config.publicKey,\n        authType: this.config.authType,\n      });\n    }\n\n    this.transport?.close();\n    clearAuthSession();\n    this.resetSession();\n\n    if (!this.config.continuousMode) {\n      this.detachVisibilityRecovery();\n    }\n    this.stateMachine.transition(success ? \"confirmed\" : \"idle\");\n  }\n\n  private restartIfContinuous() {\n    this.stateMachine.transition(\"idle\");\n    if (!this.config.continuousMode) return;\n    setTimeout(() => {\n      this.start();\n    }, 150);\n  }\n\n  private resetSession() {\n    this.sessionId = \"\";\n    this.sessionKey = null;\n  }\n\n  /** Completely destroys the instance and removes all listeners */\n  destroy() {\n    this.detachVisibilityRecovery();\n    this.transport?.close();\n    this.listeners = {};\n  }\n\n  private emit<K extends keyof PelicanAuthEventMap>(\n    event: K,\n    payload: PelicanAuthEventMap[K]\n  ) {\n    this.listeners[event]?.forEach((cb) => cb(payload));\n  }\n\n  private fail(err: Error) {\n    this.emit(\"error\", err);\n    this.stateMachine.transition(\"error\");\n  }\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pelican-identity/auth-core",
-  "version": "1.2.3",
+  "version": "1.2.5",
   "description": "Framework-agnostic authentication SDK for Pelican Identity",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",

package/dist/engine/engine.js

@@ -1,238 +0,0 @@
-import CryptoService from "../utilities/crypto";
-import QRCode from "qrcode";
-import { storeAuthSession, getAuthSession, clearAuthSession, } from "../utilities/storage";
-import { StateMachine } from "../utilities/stateMachine";
-import { Transport } from "../utilities/transport";
-import { BASEURL } from "../constants";
-export class PelicanAuthentication {
-    constructor(config) {
-        this.crypto = new CryptoService();
-        this.stateMachine = new StateMachine();
-        this.sessionId = "";
-        this.sessionKey = null;
-        this.listeners = {};
-        if (!config.publicKey)
-            throw new Error("Missing publicKey");
-        if (!config.projectId)
-            throw new Error("Missing projectId");
-        if (!config.authType)
-            throw new Error("Missing authType");
-        this.config = {
-            continuousMode: false,
-            forceQRCode: false,
-            ...config,
-        };
-        this.stateMachine.subscribe((s) => this.emit("state", s));
-        this.attachVisibilityRecovery();
-    }
-    on(event, cb) {
-        var _a;
-        (_a = this.listeners)[event] ?? (_a[event] = new Set());
-        this.listeners[event].add(cb);
-        return () => this.listeners[event].delete(cb);
-    }
-    async start() {
-        if (this.stateMachine.current !== "idle")
-            return;
-        this.resetSession();
-        this.stateMachine.transition("initializing");
-        try {
-            const relay = await this.fetchRelayUrl();
-            this.sessionKey = this.crypto.generateSymmetricKey();
-            this.sessionId = crypto.randomUUID() + crypto.randomUUID();
-            this.transport = new Transport({
-                onOpen: () => {
-                    this.transport.send({
-                        type: "register",
-                        sessionID: this.sessionId,
-                        ...this.config,
-                    });
-                    this.stateMachine.transition("awaiting-pair");
-                },
-                onMessage: (msg) => this.handleMessage(msg),
-                onError: () => this.fail(new Error("WebSocket connection failed")),
-            });
-            this.transport.connect(relay);
-            await this.emitEntryPoint();
-        }
-        catch (err) {
-            this.fail(err instanceof Error ? err : new Error("Start failed"));
-        }
-    }
-    stop() {
-        this.terminate(false);
-    }
-    async fetchRelayUrl() {
-        const { publicKey, projectId, authType } = this.config;
-        const res = await fetch(`${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`);
-        if (!res.ok) {
-            throw new Error("Failed to fetch relay URL");
-        }
-        const json = await res.json();
-        return json.relay_url;
-    }
-    async emitEntryPoint() {
-        const payload = {
-            sessionID: this.sessionId,
-            sessionKey: this.sessionKey,
-            publicKey: this.config.publicKey,
-            authType: this.config.authType,
-            projectId: this.config.projectId,
-            url: window.location.href,
-        };
-        const shouldUseQR = this.config.forceQRCode ||
-            !/Android|iPhone|iPad/i.test(navigator.userAgent);
-        if (!shouldUseQR && this.sessionKey) {
-            storeAuthSession(this.sessionId, this.sessionKey, 5 * 60000);
-            this.emit("deeplink", `pelicanvault://auth/deep-link?data=${encodeURIComponent(JSON.stringify(payload))}`);
-        }
-        else {
-            const qr = await QRCode.toDataURL(JSON.stringify(payload));
-            this.emit("qr", qr);
-        }
-    }
-    handleMessage(msg) {
-        console.log(msg);
-        switch (msg.type) {
-            case "paired":
-                console.log("Paired");
-                this.stateMachine.transition("paired");
-                this.transport.send({
-                    type: "authenticate",
-                    sessionID: this.sessionId,
-                    ...this.config,
-                    url: window.location.href,
-                });
-                return;
-            case "phone-auth-success":
-                this.handleAuthSuccess(msg);
-                return;
-            case "phone-terminated":
-                this.fail(new Error("Authenticating device terminated the connection"));
-                this.restartIfContinuous();
-                return;
-            case "confirmed":
-                this.terminate(true);
-                this.restartIfContinuous();
-                return;
-        }
-    }
-    handleAuthSuccess(msg) {
-        if (!this.sessionKey || !msg.cipher || !msg.nonce) {
-            this.fail(new Error("Invalid authentication payload"));
-            this.restartIfContinuous();
-            return;
-        }
-        try {
-            const decrypted = this.crypto.decryptSymmetric({
-                encrypted: { cipher: msg.cipher, nonce: msg.nonce },
-                keyString: this.sessionKey,
-            });
-            if (!decrypted) {
-                this.fail(new Error("Invalid authentication data"));
-                this.restartIfContinuous();
-                return;
-            }
-            const result = JSON.parse(decrypted);
-            this.emit("success", result);
-            this.stateMachine.transition("authenticated");
-            this.transport?.send({
-                type: "confirm",
-                sessionID: this.sessionId,
-            });
-        }
-        catch {
-            this.fail(new Error("Failed to decrypt authentication data"));
-            this.restartIfContinuous();
-        }
-    }
-    async getCachedEntry(cached) {
-        try {
-            const res = await fetch(`${BASEURL}/session?session_id=${cached.sessionId}`);
-            if (!res.ok)
-                throw new Error("Invalid session");
-            const data = await res.json();
-            const decrypted = this.crypto.decryptSymmetric({
-                encrypted: { cipher: data.cipher, nonce: data.nonce },
-                keyString: cached.sessionKey,
-            });
-            if (!decrypted) {
-                this.fail(new Error("Invalid session data"));
-                this.restartIfContinuous();
-                return;
-            }
-            const result = JSON.parse(decrypted);
-            this.emit("success", result);
-            clearAuthSession();
-        }
-        catch {
-            this.fail(new Error("Session recovery failed"));
-            this.restartIfContinuous();
-        }
-    }
-    attachVisibilityRecovery() {
-        this.visibilityHandler = async () => {
-            if (document.visibilityState !== "visible")
-                return;
-            const cached = getAuthSession();
-            if (!cached)
-                return;
-            await this.getCachedEntry(cached);
-        };
-        document.addEventListener("visibilitychange", this.visibilityHandler);
-    }
-    detachVisibilityRecovery() {
-        if (this.visibilityHandler) {
-            document.removeEventListener("visibilitychange", this.visibilityHandler);
-            this.visibilityHandler = undefined;
-        }
-    }
-    terminate(success) {
-        if (!this.transport)
-            return;
-        if (!success) {
-            this.transport?.send({
-                type: "client-terminated",
-                sessionID: this.sessionId,
-                projectId: this.config.projectId,
-                publicKey: this.config.publicKey,
-                authType: this.config.authType,
-            });
-        }
-        setTimeout(() => {
-            this.transport?.close();
-        }, 150);
-        clearAuthSession();
-        this.resetSession();
-        if (!this.config.continuousMode) {
-            this.detachVisibilityRecovery();
-        }
-        this.stateMachine.transition(success ? "confirmed" : "terminated");
-    }
-    restartIfContinuous() {
-        if (!this.config.continuousMode)
-            return;
-        this.terminate(false);
-        this.stateMachine.transition("idle");
-        setTimeout(() => {
-            this.start();
-        }, 150);
-    }
-    resetSession() {
-        this.sessionId = "";
-        this.sessionKey = null;
-    }
-    destroy() {
-        this.detachVisibilityRecovery();
-        this.transport?.close();
-        this.listeners = {};
-    }
-    emit(event, payload) {
-        this.listeners[event]?.forEach((cb) => cb(payload));
-    }
-    fail(err) {
-        this.emit("error", err);
-        this.stateMachine.transition("error");
-    }
-}
-//# sourceMappingURL=engine.js.map

package/dist/engine/engine.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/engine/engine.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAO5B,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,GAEjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAQvC,MAAM,OAAO,qBAAqB;IAgBhC,YAAY,MAAyB;QAfpB,WAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAC7B,iBAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QAG3C,cAAS,GAAG,EAAE,CAAC;QACf,eAAU,GAAkB,IAAI,CAAC;QAIjC,cAAS,GAEb,EAAE,CAAC;QAKL,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAE1D,IAAI,CAAC,MAAM,GAAG;YACZ,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,KAAK;YAClB,GAAG,MAAM;SACV,CAAC;QAGF,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,wBAAwB,EAAE,CAAC;IAClC,CAAC;IAQD,EAAE,CACA,KAAQ,EACR,EAAoC;;QAEpC,MAAA,IAAI,CAAC,SAAS,EAAC,KAAK,SAAL,KAAK,IAAM,IAAI,GAAG,EAAE,EAAC;QACpC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAMD,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO;QAEjD,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE7C,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;YAGzC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACrD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAE3D,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC;gBAC7B,MAAM,EAAE,GAAG,EAAE;oBAEX,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC;wBACnB,IAAI,EAAE,UAAU;wBAChB,SAAS,EAAE,IAAI,CAAC,SAAS;wBACzB,GAAG,IAAI,CAAC,MAAM;qBACf,CAAC,CAAC;oBACH,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;gBAChD,CAAC;gBACD,SAAS,EAAE,CAAC,GAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC;gBAC3D,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;aACnE,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC9B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAKD,IAAI;QACF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAKO,KAAK,CAAC,aAAa;QACzB,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,OAAO,qBAAqB,SAAS,cAAc,QAAQ,eAAe,SAAS,EAAE,CACzF,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAKO,KAAK,CAAC,cAAc;QAC1B,MAAM,OAAO,GAAG;YACd,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;SAC1B,CAAC;QAEF,MAAM,WAAW,GACf,IAAI,CAAC,MAAM,CAAC,WAAW;YACvB,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAEpD,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAEpC,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,GAAG,KAAM,CAAC,CAAC;YAC9D,IAAI,CAAC,IAAI,CACP,UAAU,EACV,sCAAsC,kBAAkB,CACtD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CACxB,EAAE,CACJ,CAAC;QACJ,CAAC;aAAM,CAAC;YAEN,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAGO,aAAa,CAAC,GAAmB;QACvC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEjB,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,QAAQ;gBACX,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAEtB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,cAAc;oBACpB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,IAAI,CAAC,MAAM;oBACd,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;iBAC1B,CAAC,CAAC;gBACH,OAAO;YAET,KAAK,oBAAoB;gBAEvB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAC5B,OAAO;YAET,KAAK,kBAAkB;gBACrB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,CAAC;gBACxE,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;YAET,KAAK,WAAW;gBAEd,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACrB,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;QACX,CAAC;IACH,CAAC;IAKO,iBAAiB,CAAC,GAAmB;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAC7C,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE;gBACnD,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;gBACpD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAErD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YAG9C,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;gBACnB,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAOO,KAAK,CAAC,cAAc,CAAC,MAAmB;QAC9C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,OAAO,uBAAuB,MAAM,CAAC,SAAS,EAAE,CACpD,CAAC;YAEF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YAEhD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAC7C,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;gBACrD,SAAS,EAAE,MAAM,CAAC,UAAU;aAC7B,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBAC7C,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC7B,gBAAgB,EAAE,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAChD,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAEO,wBAAwB;QAC9B,IAAI,CAAC,iBAAiB,GAAG,KAAK,IAAI,EAAE;YAClC,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,OAAO;YAEnD,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpB,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC,CAAC;QAEF,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACxE,CAAC;IAEO,wBAAwB;QAC9B,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACzE,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;IAGO,SAAS,CAAC,OAAgB;QAChC,IAAI,CAAC,IAAI,CAAC,SAAS;YAAE,OAAO;QAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;gBACnB,IAAI,EAAE,mBAAmB;gBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;gBAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;QAC1B,CAAC,EAAE,GAAG,CAAC,CAAC;QAER,gBAAgB,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClC,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACrE,CAAC;IAEO,mBAAmB;QACzB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,OAAO;QACxC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAErC,UAAU,CAAC,GAAG,EAAE;YACd,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAGD,OAAO;QACL,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAEO,IAAI,CACV,KAAQ,EACR,OAA+B;QAE/B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,IAAI,CAAC,GAAU;QACrB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;CACF"}