@pelican-identity/auth-core 1.2.47 → 1.2.48

package/README.md

@@ -59,17 +59,17 @@ const cleanup = createPelicanAuth("container-id", {
 
 The `createPelicanAuth` function initializes the Pelican UI inside a target DOM element.
 
-| Option           | Type       | Required | Description                                   |
-| ---------------- | ---------- | -------- | --------------------------------------------- |
-| `publicKey`      | `string`   | ✅       | Business public key from Pelican dashboard    |
-| `projectId`      | `string`   | ✅       | Project ID from Pelican dashboard             |
-| `authType`       | `AuthType` | ✅       | `"signup"`, `"login"`, or `"id-verification"` |
-| `onSuccess`      | `Function` | ✅       | Callback with `IdentityResult`                |
-| `onError`        | `Function` | ❌       | Callback for errors                           |
-| `onClose`        | `Function` | ❌       | Callback when the user closes the modal       |
-| `continuousMode` | `boolean`  | ❌       | Auto-restart auth after completion            |
-| `forceQRCode`    | `boolean`  | ❌       | Always show QR even on mobile                 |
-| `buttonText`     | `string`   | ❌       | Custom text for the Pelican button            |
+| Option           | Type                       | Required | Description                                                               |
+| ---------------- | -------------------------- | -------- | ------------------------------------------------------------------------- |
+| `publicKey`      | `string`                   | ✅       | Business public key from Pelican dashboard                                |
+| `projectId`      | `string`                   | ✅       | Project ID from Pelican dashboard                                         |
+| `authType`       | `AuthType`                 | ✅       | `"signup"`, `"login"`, or `"id-verification"`                             |
+| `onSuccess`      | `Function`                 | ✅       | Callback with `IdentityResult`                                            |
+| `onError`        | `Function`                 | ❌       | Callback for errors                                                       |
+| `onClose`        | `Function`                 | ❌       | Callback when the user closes the modal                                   |
+| `forceQRCode`    | `boolean (default: false)` | Optional | Always show QR code instead of deep link                                  |
+| `continuousMode` | `boolean (default: false)` | Optional | Automatically restart auth after completion                               |
+| `disableWebAuth` | `boolean (default: false)` | Optional | Disable web authentication, useful for phyiscal access control and kiosks |
 
 ---
 

package/dist/engine/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/engine/engine.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EAGpB,MAAM,gBAAgB,CAAC;AAgBxB,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC;AAQxC,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IAEnD,OAAO,CAAC,SAAS,CAAC,CAAY;IAC9B,OAAO,CAAC,SAAS,CAAM;IACvB,OAAO,CAAC,UAAU,CAAuB;IACzC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAiB;IACtD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,gBAAgB,CAAa;IAErC,OAAO,CAAC,iBAAiB,CAAC,CAAa;IACvC,OAAO,CAAC,kBAAkB,CAAC,CAAS;IACpC,OAAO,CAAC,YAAY,CAAQ;IAC5B,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,aAAa,CAA8C;IAEnE,OAAO,CAAC,SAAS,CAEV;IAEP,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;gBAEzC,MAAM,EAAE,iBAAiB;IAiBrC,EAAE,CAAC,CAAC,SAAS,MAAM,mBAAmB,EACpC,KAAK,EAAE,CAAC,EACR,EAAE,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;IAOhC,KAAK;IA2CX,IAAI;IAIJ,WAAW;IAiIX,OAAO;IAQP,YAAY;IAQZ,kBAAkB;IAOlB,OAAO,CAAC,kBAAkB;YAeZ,kBAAkB;IAuBhC,OAAO,CAAC,sBAAsB;IA4B9B,OAAO,CAAC,iBAAiB;YAqCX,iBAAiB;IAYxB,YAAY;IA6BnB,OAAO,CAAC,gBAAgB;IAOxB,OAAO,CAAC,cAAc,CAA8C;YAEtD,YAAY;IAsE1B,OAAO,CAAC,WAAW;YASL,UAAU;YAkBV,YAAY;IAe1B,OAAO,CAAC,wBAAwB;IAuBhC,OAAO,CAAC,wBAAwB;YASlB,aAAa;IAkB3B,OAAO,CAAC,SAAS;IA6BjB,OAAO,CAAC,mBAAmB;IAc3B,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,IAAI;IAOZ,OAAO,CAAC,IAAI;CAIb"}

package/dist/engine/engine.js

@@ -0,0 +1,462 @@
+import CryptoService from "../utilities/crypto";
+import QRCode from "qrcode";
+import { storeAuthSession, getAuthSession, clearAuthSession, } from "../utilities/storage";
+import { StateMachine } from "../utilities/stateMachine";
+import { Transport } from "../utilities/transport";
+import { APPLE_APP_STORE_URL, BASEURL, FALLBACK_URL, PLAY_STORE_URL, } from "../constants";
+export class PelicanAuthentication {
+    constructor(config) {
+        this.crypto = new CryptoService();
+        this.stateMachine = new StateMachine();
+        this.sessionId = "";
+        this.sessionKey = null;
+        this.MAX_POLLING_DURATION = 2 * 60 * 1000;
+        this.INITIAL_DELAY = 2000;
+        this.MAX_DELAY = 10000;
+        this.pollingStartTime = 0;
+        this.useWebSocket = true;
+        this.deeplinkUrl = null;
+        this.fallbackTimer = null;
+        this.listeners = {};
+        this.pollingTimeout = null;
+        if (!config.publicKey)
+            throw new Error("Missing publicKey");
+        if (!config.projectId)
+            throw new Error("Missing projectId");
+        if (!config.authType)
+            throw new Error("Missing authType");
+        this.config = {
+            continuousMode: false,
+            forceQRCode: false,
+            disableWebAuth: false,
+            ...config,
+        };
+        this.stateMachine.subscribe((s) => this.emit("state", s));
+    }
+    on(event, cb) {
+        var _a;
+        (_a = this.listeners)[event] ?? (_a[event] = new Set());
+        this.listeners[event].add(cb);
+        return () => this.listeners[event].delete(cb);
+    }
+    async start() {
+        if (this.config.authType !== "id-verification" &&
+            this.config.authType !== "signup" &&
+            this.config.authType !== "login") {
+            this.fail(new Error("Invalid authType"));
+            return;
+        }
+        if (!this.config.projectId) {
+            this.fail(new Error("Missing projectId"));
+            return;
+        }
+        if (!this.config.publicKey) {
+            this.fail(new Error("Missing publicKey"));
+            return;
+        }
+        if (this.stateMachine.current !== "idle")
+            return;
+        this.resetSession();
+        clearAuthSession();
+        this.stateMachine.transition("initializing");
+        try {
+            this.sessionKey = this.crypto.generateSymmetricKey();
+            this.sessionId = crypto.randomUUID() + crypto.randomUUID();
+            this.useWebSocket = this.shouldUseWebSocket();
+            if (this.useWebSocket) {
+                await this.startWebSocketFlow();
+            }
+            else {
+                await this.startDeepLinkFlow();
+            }
+        }
+        catch (err) {
+            this.fail(err instanceof Error ? err : new Error("Start failed"));
+        }
+    }
+    stop() {
+        this.terminate(false);
+    }
+    openWebAuth() {
+        if (this.config.disableWebAuth || this.config.forceQRCode) {
+            this.fail(new Error("Web authentication is disabled"));
+            return;
+        }
+        if (!this.sessionKey || !this.sessionId) {
+            this.fail(new Error("No active session. Call start() before openWebAuth()."));
+            return;
+        }
+        const openerOrigin = window.location.origin;
+        const urlParams = new URLSearchParams({
+            projectId: this.config.projectId,
+            publicKey: this.config.publicKey,
+            authType: this.config.authType,
+            sessionId: this.sessionId,
+            sessionKey: this.sessionKey,
+            origin: openerOrigin,
+        });
+        const authUrl = `https://vault.pelicanidentity.com/auth?${urlParams.toString()}`;
+        const authWindow = window.open(authUrl, "pelican-auth", "width=480,height=640,left=400,top=100,resizable=no,scrollbars=no") ?? window.open(authUrl, "_blank");
+        if (!authWindow) {
+            this.fail(new Error("Unable to open authentication window. Please allow popups for this site and try again."));
+            return;
+        }
+        this.detachVisibilityRecovery();
+        this.transport?.close();
+        this.transport = undefined;
+        authWindow.focus();
+        this.stateMachine.transition("awaiting-pair");
+        const cleanup = () => {
+            window.removeEventListener("message", handleMessage);
+            clearInterval(closedPoller);
+        };
+        const handleMessage = (event) => {
+            if (event.origin !== "https://vault.pelicanidentity.com")
+                return;
+            if (event.source !== authWindow)
+                return;
+            const { type, payload } = event.data ?? {};
+            if (type === "pelican-auth-success") {
+                console.log("Web auth success");
+                cleanup();
+                if (!payload?.cipher || !payload?.nonce) {
+                    this.fail(new Error("Invalid web auth payload"));
+                    this.restartIfContinuous();
+                    return;
+                }
+                try {
+                    const decrypted = this.crypto.decryptSymmetric({
+                        encrypted: { cipher: payload.cipher, nonce: payload.nonce },
+                        keyString: this.sessionKey,
+                    });
+                    if (!decrypted) {
+                        this.fail(new Error("Failed to decrypt web auth response"));
+                        this.restartIfContinuous();
+                        return;
+                    }
+                    const result = JSON.parse(decrypted);
+                    this.emit("success", result);
+                    this.stateMachine.transition("authenticated");
+                    this.restartIfContinuous();
+                }
+                catch {
+                    this.fail(new Error("Failed to decrypt web auth response"));
+                    this.restartIfContinuous();
+                }
+            }
+            if (type === "pelican-auth-cancelled") {
+                cleanup();
+                this.fail(new Error("Authentication cancelled"));
+                this.restartIfContinuous();
+            }
+            if (type === "pelican-auth-error") {
+                cleanup();
+                this.fail(new Error(payload?.message ?? "Web auth failed"));
+                this.restartIfContinuous();
+            }
+        };
+        window.addEventListener("message", handleMessage);
+        const closedPoller = setInterval(() => {
+            if (!authWindow.closed)
+                return;
+            cleanup();
+            if (!["authenticated", "confirmed", "error"].includes(this.stateMachine.current)) {
+                this.fail(new Error("Authentication window closed"));
+                this.restartIfContinuous();
+            }
+        }, 500);
+    }
+    destroy() {
+        this.detachVisibilityRecovery();
+        this.clearBackupCheck();
+        this.transport?.close();
+        this.transport = undefined;
+        this.listeners = {};
+    }
+    useQrInstead() {
+        this.useWebSocket = true;
+        this.emit("deeplink", "");
+        this.stateMachine.transition("initializing");
+        this.startWebSocketFlow();
+    }
+    useDeepLinkInstead() {
+        this.useWebSocket = false;
+        this.stateMachine.transition("initializing");
+        this.startDeepLinkFlow();
+    }
+    shouldUseWebSocket() {
+        const userAgent = navigator.userAgent;
+        const isTablet = /(iPad|Android(?!.*Mobile))/i.test(userAgent);
+        const isMobile = /Android|webOS|iPhone|iPod|BlackBerry|IEMobile|Opera Mini/i.test(userAgent);
+        const useWebSocket = isMobile && !isTablet;
+        return this.config.forceQRCode || !useWebSocket;
+    }
+    async startWebSocketFlow() {
+        const { relayUrl, deeplinkUrl } = await this.fetchRelayUrl();
+        this.transport = new Transport({
+            onOpen: () => {
+                this.transport.send({
+                    type: "register",
+                    sessionID: this.sessionId,
+                    ...this.config,
+                });
+                this.stateMachine.transition("awaiting-pair");
+            },
+            onMessage: (msg) => this.handleWebSocketMessage(msg),
+            onError: (err) => {
+                console.error("WebSocket error:", err);
+                this.fail(new Error("WebSocket connection failed"));
+            },
+        });
+        this.transport.connect(relayUrl);
+        await this.emitQRCode(deeplinkUrl);
+    }
+    handleWebSocketMessage(msg) {
+        switch (msg.type) {
+            case "paired":
+                this.stateMachine.transition("paired");
+                this.transport.send({
+                    type: "authenticate",
+                    sessionID: this.sessionId,
+                    ...this.config,
+                    url: window.location.href,
+                });
+                return;
+            case "phone-auth-success":
+                this.handleAuthSuccess(msg);
+                return;
+            case "phone-terminated":
+                this.fail(new Error("Authentication cancelled on device"));
+                this.restartIfContinuous();
+                return;
+            case "confirmed":
+                this.terminate(true);
+                this.restartIfContinuous();
+                return;
+        }
+    }
+    handleAuthSuccess(msg) {
+        if (!this.sessionKey || !msg.cipher || !msg.nonce) {
+            this.fail(new Error("Invalid authentication payload"));
+            this.restartIfContinuous();
+            return;
+        }
+        try {
+            const decrypted = this.crypto.decryptSymmetric({
+                encrypted: { cipher: msg.cipher, nonce: msg.nonce },
+                keyString: this.sessionKey,
+            });
+            if (!decrypted) {
+                this.fail(new Error("Invalid authentication data"));
+                this.restartIfContinuous();
+                return;
+            }
+            const result = JSON.parse(decrypted);
+            this.emit("success", result);
+            this.stateMachine.transition("authenticated");
+            this.transport?.send({
+                type: "confirm",
+                sessionID: this.sessionId,
+            });
+        }
+        catch {
+            this.fail(new Error("Failed to decrypt authentication data"));
+            this.restartIfContinuous();
+        }
+    }
+    async startDeepLinkFlow() {
+        const { deeplinkUrl } = await this.fetchRelayUrl();
+        if (this.sessionKey) {
+            storeAuthSession(this.sessionId, this.sessionKey, 10 * 60000);
+        }
+        await this.emitDeepLink(deeplinkUrl);
+        this.stateMachine.transition("awaiting-pair");
+    }
+    openDeepLink() {
+        if (!this.deeplinkUrl) {
+            this.fail(new Error("Deep link not found"));
+            return;
+        }
+        const userAgent = navigator.userAgent;
+        let fallbackUrl = FALLBACK_URL;
+        if (/iPad|iPhone|iPod/.test(userAgent)) {
+            fallbackUrl = APPLE_APP_STORE_URL;
+        }
+        else if (/android/i.test(userAgent)) {
+            fallbackUrl = PLAY_STORE_URL;
+        }
+        const start = Date.now();
+        this.fallbackTimer = setTimeout(() => {
+            if (Date.now() - start < 3500) {
+                window.location.href = fallbackUrl;
+                this.fail(new Error("Pelican Vault not installed on your device"));
+                setTimeout(() => {
+                    this.terminate(false);
+                }, 2000);
+            }
+        }, 3000);
+        this.attachVisibilityRecovery();
+        window.location.href = this.deeplinkUrl;
+    }
+    clearBackupCheck() {
+        if (this.backupCheckTimeout) {
+            clearTimeout(this.backupCheckTimeout);
+            this.backupCheckTimeout = undefined;
+        }
+    }
+    async checkSession() {
+        const cached = getAuthSession();
+        if (!cached) {
+            this.fail(new Error("Authentication session not found"));
+            this.restartIfContinuous();
+            return;
+        }
+        this.stopPolling();
+        this.pollingStartTime = Date.now();
+        this.stateMachine.transition("awaiting-auth");
+        let currentDelay = this.INITIAL_DELAY;
+        const performCheck = async () => {
+            if (Date.now() - this.pollingStartTime > this.MAX_POLLING_DURATION) {
+                this.stopPolling();
+                this.fail(new Error("Authentication timed out. Please try again."));
+                return;
+            }
+            try {
+                const res = await fetch(`${BASEURL}/session?session_id=${cached.sessionId}`);
+                if (res.ok) {
+                    const data = await res.json();
+                    const decrypted = this.crypto.decryptSymmetric({
+                        encrypted: { cipher: data.cipher, nonce: data.nonce },
+                        keyString: cached.sessionKey,
+                    });
+                    if (!decrypted) {
+                        this.stopPolling();
+                        this.fail(new Error("Failed to decrypt session"));
+                        return;
+                    }
+                    this.stopPolling();
+                    this.clearBackupCheck();
+                    clearAuthSession();
+                    const result = JSON.parse(decrypted);
+                    this.emit("success", result);
+                    this.stateMachine.transition("authenticated");
+                    this.restartIfContinuous();
+                    return;
+                }
+                console.debug("Session not ready yet...");
+            }
+            catch (err) {
+                console.debug("Network error during session check, retrying:", err);
+            }
+            if (this.stateMachine.current === "awaiting-auth") {
+                this.pollingTimeout = setTimeout(() => {
+                    currentDelay = Math.min(currentDelay * 1.5, this.MAX_DELAY);
+                    performCheck();
+                }, currentDelay);
+            }
+        };
+        await performCheck();
+    }
+    stopPolling() {
+        if (this.pollingTimeout) {
+            clearTimeout(this.pollingTimeout);
+            this.pollingTimeout = null;
+        }
+    }
+    async emitQRCode(deeplinkUrl) {
+        const embeddedUrl = `${deeplinkUrl}?sessionID=${encodeURIComponent(this.sessionId)}&sessionKey=${encodeURIComponent(this.sessionKey)}&publicKey=${encodeURIComponent(this.config.publicKey)}&authType=${this.config.authType}&projectId=${encodeURIComponent(this.config.projectId)}`;
+        const qr = await QRCode.toDataURL(embeddedUrl, {
+            type: "image/png",
+            scale: 3,
+            color: { light: "#ffffff", dark: "#424242ff" },
+        });
+        this.emit("qr", qr);
+    }
+    async emitDeepLink(deeplinkUrl) {
+        const deeplink = `${deeplinkUrl}?sessionID=${encodeURIComponent(this.sessionId)}&sessionKey=${encodeURIComponent(this.sessionKey)}&publicKey=${encodeURIComponent(this.config.publicKey)}&authType=${this.config.authType}&projectId=${encodeURIComponent(this.config.projectId)}`;
+        this.deeplinkUrl = deeplink;
+        this.emit("deeplink", deeplink);
+    }
+    attachVisibilityRecovery() {
+        let fired = false;
+        this.visibilityHandler = async () => {
+            if (this.fallbackTimer) {
+                clearTimeout(this.fallbackTimer);
+                this.fallbackTimer = null;
+            }
+            if (document.visibilityState !== "visible")
+                return;
+            if (this.useWebSocket)
+                return;
+            if (fired)
+                return;
+            fired = true;
+            await this.checkSession();
+        };
+        document.addEventListener("visibilitychange", this.visibilityHandler);
+    }
+    detachVisibilityRecovery() {
+        if (this.visibilityHandler) {
+            document.removeEventListener("visibilitychange", this.visibilityHandler);
+            this.visibilityHandler = undefined;
+        }
+    }
+    async fetchRelayUrl() {
+        const { publicKey, projectId, authType } = this.config;
+        const res = await fetch(`${BASEURL}/relay?public_key=${publicKey}&auth_type=${authType}&project_id=${projectId}`);
+        if (!res.ok) {
+            const error = await res.text();
+            throw new Error(error);
+        }
+        const json = await res.json();
+        return { deeplinkUrl: json.deeplink_url, relayUrl: json.relay_url };
+    }
+    terminate(success) {
+        this.clearBackupCheck();
+        if (this.transport) {
+            if (!success) {
+                this.transport.send({
+                    type: "client-terminated",
+                    sessionID: this.sessionId,
+                    projectId: this.config.projectId,
+                    publicKey: this.config.publicKey,
+                    authType: this.config.authType,
+                });
+            }
+            this.transport.close();
+            this.transport = undefined;
+        }
+        clearAuthSession();
+        this.resetSession();
+        if (!this.config.continuousMode) {
+            this.detachVisibilityRecovery();
+        }
+        this.stateMachine.transition(success ? "confirmed" : "idle");
+    }
+    restartIfContinuous() {
+        if (this.config.continuousMode) {
+            this.stateMachine.transition("idle");
+            this.clearBackupCheck();
+            this.transport?.close();
+            this.transport = undefined;
+            setTimeout(() => {
+                this.start();
+            }, 150);
+        }
+        else {
+            this.stateMachine.transition("idle");
+        }
+    }
+    resetSession() {
+        this.sessionId = "";
+        this.sessionKey = null;
+    }
+    emit(event, payload) {
+        this.listeners[event]?.forEach((cb) => cb(payload));
+    }
+    fail(err) {
+        this.emit("error", err);
+        this.stateMachine.transition("error");
+    }
+}
+//# sourceMappingURL=engine.js.map

package/dist/engine/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/engine/engine.ts"],"names":[],"mappings":"AAAA,OAAO,aAAa,MAAM,qBAAqB,CAAC;AAChD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAO5B,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EACL,mBAAmB,EACnB,OAAO,EACP,YAAY,EACZ,cAAc,GACf,MAAM,cAAc,CAAC;AAUtB,MAAM,OAAO,qBAAqB;IAwBhC,YAAY,MAAyB;QAvBpB,WAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAC7B,iBAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QAG3C,cAAS,GAAG,EAAE,CAAC;QACf,eAAU,GAAkB,IAAI,CAAC;QACxB,yBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACrC,kBAAa,GAAG,IAAI,CAAC;QACrB,cAAS,GAAG,KAAK,CAAC;QAC3B,qBAAgB,GAAW,CAAC,CAAC;QAI7B,iBAAY,GAAG,IAAI,CAAC;QACpB,gBAAW,GAAkB,IAAI,CAAC;QAClC,kBAAa,GAAyC,IAAI,CAAC;QAE3D,cAAS,GAEb,EAAE,CAAC;QA4XC,mBAAc,GAAyC,IAAI,CAAC;QAvXlE,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAE1D,IAAI,CAAC,MAAM,GAAG;YACZ,cAAc,EAAE,KAAK;YACrB,WAAW,EAAE,KAAK;YAClB,cAAc,EAAE,KAAK;YACrB,GAAG,MAAM;SACV,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAID,EAAE,CACA,KAAQ,EACR,EAAoC;;QAEpC,MAAA,IAAI,CAAC,SAAS,EAAC,KAAK,SAAL,KAAK,IAAM,IAAI,GAAG,EAAE,EAAC;QACpC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IACE,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,iBAAiB;YAC1C,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACjC,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,EAChC,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;YACzC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO;QAEjD,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,gBAAgB,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAE7C,IAAI,CAAC;YAEH,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC;YACrD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAG3D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAE9C,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBACtB,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,IAAI;QACF,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAED,WAAW;QACT,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YAC1D,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CACP,IAAI,KAAK,CAAC,uDAAuD,CAAC,CACnE,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAE5C,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YACpC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;YAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;YAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,0CAA0C,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;QAGjF,MAAM,UAAU,GACd,MAAM,CAAC,IAAI,CACT,OAAO,EACP,cAAc,EACd,kEAAkE,CACnE,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEtC,IAAI,CAAC,UAAU,EAAE,CAAC;YAEhB,IAAI,CAAC,IAAI,CACP,IAAI,KAAK,CACP,wFAAwF,CACzF,CACF,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAE3B,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAE9C,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACrD,aAAa,CAAC,YAAY,CAAC,CAAC;QAC9B,CAAC,CAAC;QAEF,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,EAAE;YAE5C,IAAI,KAAK,CAAC,MAAM,KAAK,mCAAmC;gBAAE,OAAO;YAIjE,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO;YAExC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;YAE3C,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBACpC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;gBAChC,OAAO,EAAE,CAAC;gBAEV,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;oBACxC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;oBACjD,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBAED,IAAI,CAAC;oBACH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;wBAC7C,SAAS,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE;wBAC3D,SAAS,EAAE,IAAI,CAAC,UAAW;qBAC5B,CAAC,CAAC;oBAEH,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;wBAC5D,IAAI,CAAC,mBAAmB,EAAE,CAAC;wBAC3B,OAAO;oBACT,CAAC;oBAED,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACrD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAC7B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;oBAC9C,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC7B,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC,CAAC;oBAC5D,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC7B,CAAC;YACH,CAAC;YAED,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;gBACtC,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBACjD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,CAAC;YAED,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAClC,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,IAAI,iBAAiB,CAAC,CAAC,CAAC;gBAC5D,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAKlD,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,UAAU,CAAC,MAAM;gBAAE,OAAO;YAC/B,OAAO,EAAE,CAAC;YACV,IACE,CAAC,CAAC,eAAe,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAC/C,IAAI,CAAC,YAAY,CAAC,OAAO,CAC1B,EACD,CAAC;gBACD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;gBACrD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,CAAC;QACH,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC;IAED,OAAO;QACL,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,YAAY;QACV,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAEzB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,kBAAkB,EAAE,CAAC;IAC5B,CAAC;IAED,kBAAkB;QAChB,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;QAC1B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QAC7C,IAAI,CAAC,iBAAiB,EAAE,CAAC;IAC3B,CAAC;IAGO,kBAAkB;QACxB,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QAEtC,MAAM,QAAQ,GAAG,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,QAAQ,GACZ,2DAA2D,CAAC,IAAI,CAC9D,SAAS,CACV,CAAC;QAEJ,MAAM,YAAY,GAAG,QAAQ,IAAI,CAAC,QAAQ,CAAC;QAC3C,OAAO,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC;IAClD,CAAC;IAIO,KAAK,CAAC,kBAAkB;QAC9B,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAE7D,IAAI,CAAC,SAAS,GAAG,IAAI,SAAS,CAAC;YAC7B,MAAM,EAAE,GAAG,EAAE;gBACX,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,UAAU;oBAChB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,IAAI,CAAC,MAAM;iBACf,CAAC,CAAC;gBACH,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YAChD,CAAC;YACD,SAAS,EAAE,CAAC,GAAmB,EAAE,EAAE,CAAC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC;YACpE,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBACf,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC;gBACvC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;YACtD,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAEO,sBAAsB,CAAC,GAAmB;QAChD,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;YACjB,KAAK,QAAQ;gBACX,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;gBACvC,IAAI,CAAC,SAAU,CAAC,IAAI,CAAC;oBACnB,IAAI,EAAE,cAAc;oBACpB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,GAAG,IAAI,CAAC,MAAM;oBACd,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI;iBAC1B,CAAC,CAAC;gBACH,OAAO;YAET,KAAK,oBAAoB;gBACvB,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;gBAC5B,OAAO;YAET,KAAK,kBAAkB;gBACrB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;gBAC3D,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;YAET,KAAK,WAAW;gBACd,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBACrB,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;QACX,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,GAAmB;QAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAClD,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBAC7C,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE;gBACnD,SAAS,EAAE,IAAI,CAAC,UAAU;aAC3B,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC,CAAC;gBACpD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAErD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAC7B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YAG9C,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC;gBACnB,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,IAAI,CAAC,SAAS;aAC1B,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;YAC9D,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAIO,KAAK,CAAC,iBAAiB;QAC7B,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;QAEnD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,GAAG,KAAM,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QAErC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;IAChD,CAAC;IAEM,YAAY;QACjB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;QACtC,IAAI,WAAW,GAAG,YAAY,CAAC;QAE/B,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,WAAW,GAAG,mBAAmB,CAAC;QACpC,CAAC;aAAM,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACtC,WAAW,GAAG,cAAc,CAAC;QAC/B,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAEzB,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;YACnC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,GAAG,IAAI,EAAE,CAAC;gBAC9B,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,WAAW,CAAC;gBACnC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,CAAC;gBACnE,UAAU,CAAC,GAAG,EAAE;oBACd,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC,EAAE,IAAI,CAAC,CAAC;YACX,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;IAC1C,CAAC;IAEO,gBAAgB;QACtB,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,YAAY,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACtC,IAAI,CAAC,kBAAkB,GAAG,SAAS,CAAC;QACtC,CAAC;IACH,CAAC;IAIO,KAAK,CAAC,YAAY;QACxB,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;QAChC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;YACzD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QAGD,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAE9C,IAAI,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC;QAEtC,MAAM,YAAY,GAAG,KAAK,IAAI,EAAE;YAE9B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC,oBAAoB,EAAE,CAAC;gBACnE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACnB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAC;gBACpE,OAAO;YACT,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,OAAO,uBAAuB,MAAM,CAAC,SAAS,EAAE,CACpD,CAAC;gBAEF,IAAI,GAAG,CAAC,EAAE,EAAE,CAAC;oBACX,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;oBAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;wBAC7C,SAAS,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;wBACrD,SAAS,EAAE,MAAM,CAAC,UAAU;qBAC7B,CAAC,CAAC;oBAEH,IAAI,CAAC,SAAS,EAAE,CAAC;wBACf,IAAI,CAAC,WAAW,EAAE,CAAC;wBACnB,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;wBAClD,OAAO;oBACT,CAAC;oBAGD,IAAI,CAAC,WAAW,EAAE,CAAC;oBACnB,IAAI,CAAC,gBAAgB,EAAE,CAAC;oBACxB,gBAAgB,EAAE,CAAC;oBAEnB,MAAM,MAAM,GAAmB,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;oBACrD,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;oBAC7B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;oBAC9C,IAAI,CAAC,mBAAmB,EAAE,CAAC;oBAC3B,OAAO;gBACT,CAAC;gBAGD,OAAO,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,KAAK,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;YACtE,CAAC;YAGD,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,KAAK,eAAe,EAAE,CAAC;gBAClD,IAAI,CAAC,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE;oBACpC,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,YAAY,GAAG,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC5D,YAAY,EAAE,CAAC;gBACjB,CAAC,EAAE,YAAY,CAAC,CAAC;YACnB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,YAAY,EAAE,CAAC;IACvB,CAAC;IAEO,WAAW;QACjB,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,YAAY,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAClC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC7B,CAAC;IACH,CAAC;IAIO,KAAK,CAAC,UAAU,CAAC,WAAmB;QAC1C,MAAM,WAAW,GAAG,GAAG,WAAW,cAAc,kBAAkB,CAChE,IAAI,CAAC,SAAS,CACf,eAAe,kBAAkB,CAChC,IAAI,CAAC,UAAW,CACjB,cAAc,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aACtD,IAAI,CAAC,MAAM,CAAC,QACd,cAAc,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAE1D,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;YAC7C,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,CAAC;YACR,KAAK,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE;SAC/C,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,WAAmB;QAC5C,MAAM,QAAQ,GAAG,GAAG,WAAW,cAAc,kBAAkB,CAC7D,IAAI,CAAC,SAAS,CACf,eAAe,kBAAkB,CAChC,IAAI,CAAC,UAAW,CACjB,cAAc,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aACtD,IAAI,CAAC,MAAM,CAAC,QACd,cAAc,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAE1D,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAClC,CAAC;IAIO,wBAAwB;QAC9B,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC,iBAAiB,GAAG,KAAK,IAAI,EAAE;YAClC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;gBACvB,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACjC,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;YAC5B,CAAC;YAED,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;gBAAE,OAAO;YAGnD,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAO;YAE9B,IAAI,KAAK;gBAAE,OAAO;YAClB,KAAK,GAAG,IAAI,CAAC;YAGb,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5B,CAAC,CAAC;QAEF,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACxE,CAAC;IAEO,wBAAwB;QAC9B,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;YAC3B,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACzE,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACrC,CAAC;IACH,CAAC;IAIO,KAAK,CAAC,aAAa;QAIzB,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,OAAO,qBAAqB,SAAS,cAAc,QAAQ,eAAe,SAAS,EAAE,CACzF,CAAC;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;IACtE,CAAC;IAEO,SAAS,CAAC,OAAgB;QAEhC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAGxB,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;oBAClB,IAAI,EAAE,mBAAmB;oBACzB,SAAS,EAAE,IAAI,CAAC,SAAS;oBACzB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;oBAChC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;oBAChC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;YACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;QAED,gBAAgB,EAAE,CAAC;QACnB,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClC,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC/D,CAAC;IAEO,mBAAmB;QACzB,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YACrC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC;YACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;YAC3B,UAAU,CAAC,GAAG,EAAE;gBACd,IAAI,CAAC,KAAK,EAAE,CAAC;YACf,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC,SAAS,GAAG,EAAE,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IACzB,CAAC;IAEO,IAAI,CACV,KAAQ,EACR,OAA+B;QAE/B,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,IAAI,CAAC,GAAU;QACrB,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACxB,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/index.d.mts

@@ -6,6 +6,7 @@ interface PelicanAuthConfig {
     authType: AuthType;
     continuousMode?: boolean;
     forceQRCode?: boolean;
+    disableWebAuth?: boolean;
 }
 type PelicanAuthEventMap = {
     state: PelicanAuthState;

package/dist/index.d.ts

@@ -6,6 +6,7 @@ interface PelicanAuthConfig {
     authType: AuthType;
     continuousMode?: boolean;
     forceQRCode?: boolean;
+    disableWebAuth?: boolean;
 }
 type PelicanAuthEventMap = {
     state: PelicanAuthState;

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,eAAe,CAAC;AAE9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAGxD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,cAAc,qBAAqB,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -347,6 +347,7 @@ var PelicanAuthentication = class {
     this.config = {
       continuousMode: false,
       forceQRCode: false,
+      disableWebAuth: false,
       ...config
     };
     this.stateMachine.subscribe((s) => this.emit("state", s));
@@ -392,6 +393,10 @@ var PelicanAuthentication = class {
     this.terminate(false);
   }
   openWebAuth() {
+    if (this.config.disableWebAuth || this.config.forceQRCode) {
+      this.fail(new Error("Web authentication is disabled"));
+      return;
+    }
     if (!this.sessionKey || !this.sessionId) {
       this.fail(
         new Error("No active session. Call start() before openWebAuth().")