@portaidentity/cli 1.7.3 → 1.8.0

package/dist/admin/client-controller.js

@@ -0,0 +1,462 @@
+/** Operation, context, and plaintext ownership for selected-organization clients. */
+/** Creates the feature-specific selected-organization client controller. */
+export function createAdminClientController(options) {
+    let sessionEpoch = -1;
+    let organizationId;
+    let generation = 0;
+    let operation;
+    let mutationDispatched = false;
+    let projection;
+    let recoveryRequired = false;
+    let disposed = false;
+    /** Publishes only while this controller still belongs to the application. */
+    const publish = (state) => {
+        if (!disposed)
+            options.publishState(state);
+    };
+    /** Keeps the earlier list-only retained-state shape compatible with existing callers. */
+    const previous = () => projection?.kind === 'list' ? projection.clients : projection;
+    /** Publishes the fixed reconciliation state without retaining plaintext. */
+    const requireReconciliation = (owner) => {
+        recoveryRequired = true;
+        options.setRecoveryRequired?.(true);
+        const retained = previous();
+        publish({
+            kind: 'indeterminate',
+            organizationId: owner,
+            ...(retained ? { previous: retained } : {}),
+        });
+    };
+    /** Clears ownership and records uncertainty only after a mutation was dispatched. */
+    const cancel = (reconcileDispatchedMutation = false) => {
+        const uncertainOwner = reconcileDispatchedMutation && mutationDispatched ? organizationId : undefined;
+        generation += 1;
+        operation?.abort();
+        operation = undefined;
+        mutationDispatched = false;
+        if (uncertainOwner)
+            requireReconciliation(uncertainOwner);
+    };
+    /** Returns true only for the current organization/session continuation. */
+    const owns = (capturedGeneration, capturedOrganization, controller) => !disposed &&
+        generation === capturedGeneration &&
+        organizationId === capturedOrganization &&
+        operation === controller &&
+        !controller.signal.aborted;
+    /** Clears state and enters authentication after a definite session failure. */
+    const sessionInvalid = () => {
+        cancel();
+        projection = undefined;
+        recoveryRequired = false;
+        options.setRecoveryRequired?.(false);
+        publish({ kind: 'closed' });
+        options.requestAuthentication();
+    };
+    /** Publishes one fixed safe failure while preserving validated content. */
+    const publishFailure = (owner, result) => {
+        const retained = previous();
+        publish({
+            kind: 'failure',
+            organizationId: owner,
+            failure: result.failure,
+            ...(retained ? { previous: retained } : {}),
+        });
+    };
+    /** Loads the complete catalog for the current selected organization. */
+    const load = async () => {
+        if (disposed || operation || !organizationId)
+            return;
+        const current = options.readState();
+        const operations = options.readOperations();
+        if (current.kind !== 'authenticated' ||
+            current.organization?.id !== organizationId ||
+            !current.capabilities.canReadClients ||
+            !operations?.listAll)
+            return;
+        const owner = organizationId;
+        const controller = new AbortController();
+        operation = controller;
+        const capturedGeneration = ++generation;
+        const retained = previous();
+        publish({
+            kind: 'loading',
+            organizationId: owner,
+            ...(retained ? { previous: retained } : {}),
+        });
+        try {
+            const result = await operations.listAll(owner);
+            if (!owns(capturedGeneration, owner, controller) || !result)
+                return;
+            if (result.kind === 'session-invalid') {
+                sessionInvalid();
+            }
+            else if (result.kind === 'success') {
+                projection = { kind: 'list', organizationId: owner, clients: result.value };
+                recoveryRequired = false;
+                options.setRecoveryRequired?.(false);
+                publish(projection);
+            }
+            else {
+                publish({
+                    kind: 'failure',
+                    organizationId: owner,
+                    failure: result.failure,
+                    ...(retained ? { previous: retained } : {}),
+                });
+            }
+        }
+        finally {
+            if (operation === controller)
+                operation = undefined;
+        }
+    };
+    /** Loads one client while preserving its complete parent catalog. */
+    const select = async (clientId) => {
+        if (disposed || operation || !organizationId)
+            return;
+        const current = options.readState();
+        const operations = options.readOperations();
+        if (current.kind !== 'authenticated' ||
+            current.organization?.id !== organizationId ||
+            !current.capabilities.canReadClients ||
+            !operations?.get)
+            return;
+        const owner = organizationId;
+        const controller = new AbortController();
+        operation = controller;
+        const capturedGeneration = ++generation;
+        const retained = previous();
+        publish({
+            kind: 'loading',
+            organizationId: owner,
+            ...(retained ? { previous: retained } : {}),
+        });
+        try {
+            const result = await operations.get(owner, clientId);
+            if (!owns(capturedGeneration, owner, controller) || !result)
+                return;
+            if (result.kind === 'session-invalid') {
+                sessionInvalid();
+            }
+            else if (result.kind === 'failure') {
+                publish({
+                    kind: 'failure',
+                    organizationId: owner,
+                    failure: result.failure,
+                    ...(retained ? { previous: retained } : {}),
+                });
+            }
+            else {
+                projection = {
+                    kind: 'detail',
+                    organizationId: owner,
+                    clients: projection?.clients ?? [result.value.client],
+                    client: result.value.client,
+                    applicationName: current.capabilities.canReadApplications
+                        ? options.resolveApplicationName?.(result.value.client.applicationId)
+                        : undefined,
+                    etag: result.value.etag,
+                    secrets: [],
+                };
+                recoveryRequired = false;
+                options.setRecoveryRequired?.(false);
+                publish(projection);
+            }
+        }
+        finally {
+            if (operation === controller)
+                operation = undefined;
+        }
+    };
+    /** Loads metadata only for the currently selected confidential client. */
+    const loadSecrets = async (clientId) => {
+        if (disposed ||
+            operation ||
+            !organizationId ||
+            !projection ||
+            projection.kind === 'list' ||
+            projection.client.id !== clientId ||
+            projection.client.clientType !== 'confidential')
+            return;
+        const current = options.readState();
+        const operations = options.readOperations();
+        if (current.kind !== 'authenticated' ||
+            current.organization?.id !== organizationId ||
+            !current.capabilities.canReadClients ||
+            !operations?.listSecrets)
+            return;
+        const owner = organizationId;
+        const retained = projection;
+        const controller = new AbortController();
+        operation = controller;
+        const capturedGeneration = ++generation;
+        publish({ kind: 'loading', organizationId: owner, previous: retained });
+        try {
+            const result = await operations.listSecrets(owner, clientId);
+            if (!owns(capturedGeneration, owner, controller) || !result)
+                return;
+            if (result.kind === 'session-invalid') {
+                sessionInvalid();
+            }
+            else if (result.kind === 'failure') {
+                publish({
+                    kind: 'failure',
+                    organizationId: owner,
+                    failure: result.failure,
+                    previous: retained,
+                });
+            }
+            else {
+                projection = {
+                    kind: 'secrets',
+                    organizationId: owner,
+                    clients: retained.clients,
+                    client: retained.client,
+                    applicationName: retained.applicationName,
+                    etag: retained.etag,
+                    secrets: result.value,
+                };
+                recoveryRequired = false;
+                options.setRecoveryRequired?.(false);
+                publish(projection);
+            }
+        }
+        finally {
+            if (operation === controller)
+                operation = undefined;
+        }
+    };
+    /** Reloads whichever validated projection is currently retained. */
+    const reload = () => {
+        if (projection?.kind === 'secrets')
+            return loadSecrets(projection.client.id);
+        if (projection?.kind === 'detail')
+            return select(projection.client.id);
+        return load();
+    };
+    /** Checks the exact retained parent and operation eligibility before dispatch. */
+    const ownsMutableTarget = (clientId, mode, secretId) => {
+        // Earlier direct lifecycle callers are retained; the service and server still recheck ownership
+        // and lifecycle state. New configuration and secret paths fail closed until detail is loaded.
+        if (!projection)
+            return mode === 'lifecycle';
+        const client = projection.clients.find((candidate) => candidate.id === clientId);
+        if (!client)
+            return false;
+        if (mode === 'lifecycle')
+            return true;
+        if (projection.kind === 'list' || projection.client.id !== clientId)
+            return false;
+        if (mode === 'update')
+            return true;
+        if (client.clientType !== 'confidential')
+            return false;
+        if (mode === 'generate')
+            return true;
+        return (projection.kind === 'secrets' &&
+            secretId !== undefined &&
+            projection.secrets.some((secret) => secret.id === secretId && secret.clientId === clientId && secret.status === 'active'));
+    };
+    /** Requires active organization context and application-read capability for client creation. */
+    const canCreateInContext = () => {
+        const current = options.readState();
+        return (current.kind === 'authenticated' &&
+            current.organization?.id === organizationId &&
+            current.organization?.status === 'active' &&
+            current.capabilities.canReadApplications);
+    };
+    /** Finishes one plaintext presentation and then performs its authoritative read. */
+    const finishPresentation = async (presentation, owner, controller, reloadAfter) => {
+        try {
+            await presentation;
+        }
+        catch {
+            if (owns(generation, owner, controller)) {
+                operation = undefined;
+                requireReconciliation(owner);
+                mutationDispatched = false;
+            }
+            return;
+        }
+        if (!owns(generation, owner, controller))
+            return;
+        operation = undefined;
+        await reloadAfter();
+        mutationDispatched = false;
+    };
+    /** Enriches a returned secret with authoritative display identity before handoff. */
+    const presentationValue = (value) => {
+        if ('client' in value) {
+            if (!value.secret)
+                return undefined;
+            return {
+                ...value.secret,
+                clientName: value.client.clientName,
+                oidcClientId: value.client.clientId,
+            };
+        }
+        const retained = projection;
+        if (!retained || retained.kind === 'list' || retained.client.id !== value.clientId)
+            return undefined;
+        return {
+            ...value,
+            clientName: retained.client.clientName,
+            oidcClientId: retained.client.clientId,
+        };
+    };
+    /** Reloads after a known mutation while retaining cancellation reconciliation ownership. */
+    const finishReload = async (reloadAfter) => {
+        await reloadAfter();
+        mutationDispatched = false;
+    };
+    /** Applies one mutation result and synchronously hands transient plaintext to its presenter. */
+    const finishMutation = async (result, owner, controller, reloadAfter, reloadOnFailure) => {
+        if (result.kind === 'session-invalid') {
+            sessionInvalid();
+            return;
+        }
+        if (result.kind === 'outcome-unknown') {
+            operation = undefined;
+            requireReconciliation(owner);
+            mutationDispatched = false;
+            return;
+        }
+        if (result.kind === 'failure') {
+            if (reloadOnFailure) {
+                const selectedClientId = projection && projection.kind !== 'list' ? projection.client.id : undefined;
+                operation = undefined;
+                if (selectedClientId)
+                    await select(selectedClientId);
+                else
+                    await load();
+            }
+            if (organizationId === owner)
+                publishFailure(owner, result);
+            mutationDispatched = false;
+            return;
+        }
+        if (result.kind !== 'success') {
+            mutationDispatched = false;
+            return;
+        }
+        const value = 'value' in result ? result.value : undefined;
+        const secret = value ? presentationValue(value) : undefined;
+        if (value && ('plaintext' in value || ('secret' in value && value.secret)) && !secret) {
+            operation = undefined;
+            requireReconciliation(owner);
+            mutationDispatched = false;
+            return;
+        }
+        if (secret) {
+            if (!options.presentSecret) {
+                operation = undefined;
+                requireReconciliation(owner);
+                mutationDispatched = false;
+                return;
+            }
+            try {
+                return finishPresentation(options.presentSecret(secret, controller.signal), owner, controller, () => reloadAfter(value));
+            }
+            catch {
+                operation = undefined;
+                requireReconciliation(owner);
+                mutationDispatched = false;
+                return;
+            }
+        }
+        operation = undefined;
+        await finishReload(() => reloadAfter(value));
+    };
+    /** Runs one client or secret mutation with fresh context and capability checks. */
+    const mutate = async (capability, invoke, reloadAfter, confirm, precondition, reloadOnFailure = false) => {
+        if (disposed || operation || recoveryRequired || !organizationId)
+            return;
+        const initial = options.readState();
+        if (initial.kind !== 'authenticated' ||
+            initial.organization?.id !== organizationId ||
+            !initial.capabilities[capability] ||
+            (precondition && !precondition()))
+            return;
+        const owner = organizationId;
+        const controller = new AbortController();
+        operation = controller;
+        const capturedGeneration = ++generation;
+        let handedOff = false;
+        try {
+            if (confirm &&
+                (!(await confirm(controller.signal)) || !owns(capturedGeneration, owner, controller)))
+                return;
+            const current = options.readState();
+            const operations = options.readOperations();
+            if (current.kind !== 'authenticated' ||
+                current.organization?.id !== owner ||
+                !current.capabilities[capability] ||
+                !operations ||
+                (precondition && !precondition()))
+                return;
+            mutationDispatched = true;
+            const result = await invoke(operations, controller.signal, owner);
+            if (!owns(capturedGeneration, owner, controller))
+                return;
+            const completion = finishMutation(result, owner, controller, reloadAfter, reloadOnFailure);
+            handedOff = true;
+            return completion;
+        }
+        finally {
+            if (!handedOff && operation === controller) {
+                operation = undefined;
+                mutationDispatched = false;
+            }
+        }
+    };
+    return {
+        syncContext(state, nextSessionEpoch) {
+            if (disposed)
+                return;
+            const nextOrganization = state.kind === 'authenticated' ? state.organization?.id : undefined;
+            const changed = state.kind !== 'authenticated' ||
+                (sessionEpoch >= 0 && sessionEpoch !== nextSessionEpoch) ||
+                organizationId !== nextOrganization;
+            if (changed) {
+                cancel();
+                projection = undefined;
+                recoveryRequired = false;
+                options.setRecoveryRequired?.(false);
+                publish({ kind: 'closed' });
+            }
+            sessionEpoch = state.kind === 'authenticated' ? nextSessionEpoch : -1;
+            organizationId = nextOrganization;
+        },
+        load,
+        select,
+        reload,
+        create: (input) => mutate('canCreateClients', (operations, _signal, owner) => operations.create?.(owner, input) ?? Promise.resolve({ kind: 'cancelled' }), (value) => (value && 'client' in value ? select(value.client.id) : load()), undefined, canCreateInContext),
+        update: (clientId, input, etag) => mutate('canUpdateClients', (operations, signal, owner) => operations.update?.(owner, clientId, input, etag, signal) ??
+            Promise.resolve({ kind: 'cancelled' }), () => select(clientId), undefined, () => ownsMutableTarget(clientId, 'update')),
+        activate: (clientId, confirm) => mutate('canUpdateClients', (operations, signal, owner) => operations.activate?.(owner, clientId, signal) ?? Promise.resolve({ kind: 'cancelled' }), () => select(clientId), confirm, () => ownsMutableTarget(clientId, 'lifecycle')),
+        deactivate: (clientId, confirm) => mutate('canUpdateClients', (operations, signal, owner) => operations.deactivate?.(owner, clientId, signal) ??
+            Promise.resolve({ kind: 'cancelled' }), () => select(clientId), confirm, () => ownsMutableTarget(clientId, 'lifecycle')),
+        delete: (clientId, confirm) => mutate('canDeleteClients', (operations, signal, owner) => operations.delete?.(owner, clientId, signal) ?? Promise.resolve({ kind: 'cancelled' }), load, confirm, () => ownsMutableTarget(clientId, 'lifecycle'), true),
+        loadSecrets,
+        generateSecret: (clientId, input) => mutate('canUpdateClients', (operations, signal, owner) => operations.generateSecret?.(owner, clientId, input, signal) ??
+            Promise.resolve({ kind: 'cancelled' }), () => loadSecrets(clientId), undefined, () => ownsMutableTarget(clientId, 'generate')),
+        revokeSecret: (clientId, secretId, confirm) => mutate('canRevokeClientSecrets', (operations, signal, owner) => operations.revokeSecret?.(owner, clientId, secretId, signal) ??
+            Promise.resolve({ kind: 'cancelled' }), () => loadSecrets(clientId), confirm, () => ownsMutableTarget(clientId, 'revoke-secret', secretId)),
+        cancelActiveOperation: () => cancel(true),
+        handleRecoverableGeometry(recoverable) {
+            if (!recoverable)
+                cancel(true);
+        },
+        dispose() {
+            if (disposed)
+                return;
+            cancel();
+            disposed = true;
+            projection = undefined;
+            recoveryRequired = false;
+            options.setRecoveryRequired?.(false);
+            options.publishState({ kind: 'closed' });
+        },
+    };
+}
+//# sourceMappingURL=client-controller.js.map

package/dist/admin/client-controller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-controller.js","sourceRoot":"","sources":["../../src/admin/client-controller.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAyFrF,4EAA4E;AAC5E,MAAM,UAAU,2BAA2B,CACzC,OAAqC;IAErC,IAAI,YAAY,GAAG,CAAC,CAAC,CAAC;IACtB,IAAI,cAAkC,CAAC;IACvC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,SAAsC,CAAC;IAC3C,IAAI,kBAAkB,GAAG,KAAK,CAAC;IAC/B,IAAI,UAA6C,CAAC;IAClD,IAAI,gBAAgB,GAAG,KAAK,CAAC;IAC7B,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,6EAA6E;IAC7E,MAAM,OAAO,GAAG,CAAC,KAA2B,EAAQ,EAAE;QACpD,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IAC7C,CAAC,CAAC;IAEF,yFAAyF;IACzF,MAAM,QAAQ,GAAG,GAA+D,EAAE,CAChF,UAAU,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;IAEhE,4EAA4E;IAC5E,MAAM,qBAAqB,GAAG,CAAC,KAAa,EAAQ,EAAE;QACpD,gBAAgB,GAAG,IAAI,CAAC;QACxB,OAAO,CAAC,mBAAmB,EAAE,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC;YACN,IAAI,EAAE,eAAe;YACrB,cAAc,EAAE,KAAK;YACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,qFAAqF;IACrF,MAAM,MAAM,GAAG,CAAC,2BAA2B,GAAG,KAAK,EAAQ,EAAE;QAC3D,MAAM,cAAc,GAClB,2BAA2B,IAAI,kBAAkB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QACjF,UAAU,IAAI,CAAC,CAAC;QAChB,SAAS,EAAE,KAAK,EAAE,CAAC;QACnB,SAAS,GAAG,SAAS,CAAC;QACtB,kBAAkB,GAAG,KAAK,CAAC;QAC3B,IAAI,cAAc;YAAE,qBAAqB,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC,CAAC;IAEF,2EAA2E;IAC3E,MAAM,IAAI,GAAG,CACX,kBAA0B,EAC1B,oBAA4B,EAC5B,UAA2B,EAClB,EAAE,CACX,CAAC,QAAQ;QACT,UAAU,KAAK,kBAAkB;QACjC,cAAc,KAAK,oBAAoB;QACvC,SAAS,KAAK,UAAU;QACxB,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;IAE7B,+EAA+E;IAC/E,MAAM,cAAc,GAAG,GAAS,EAAE;QAChC,MAAM,EAAE,CAAC;QACT,UAAU,GAAG,SAAS,CAAC;QACvB,gBAAgB,GAAG,KAAK,CAAC;QACzB,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC5B,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAClC,CAAC,CAAC;IAEF,2EAA2E;IAC3E,MAAM,cAAc,GAAG,CACrB,KAAa,EACb,MAA+D,EACzD,EAAE;QACR,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC;YACN,IAAI,EAAE,SAAS;YACf,cAAc,EAAE,KAAK;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,wEAAwE;IACxE,MAAM,IAAI,GAAG,KAAK,IAAmB,EAAE;QACrC,IAAI,QAAQ,IAAI,SAAS,IAAI,CAAC,cAAc;YAAE,OAAO;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,IACE,OAAO,CAAC,IAAI,KAAK,eAAe;YAChC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,cAAc;YAC3C,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc;YACpC,CAAC,UAAU,EAAE,OAAO;YAEpB,OAAO;QACT,MAAM,KAAK,GAAG,cAAc,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,SAAS,GAAG,UAAU,CAAC;QACvB,MAAM,kBAAkB,GAAG,EAAE,UAAU,CAAC;QACxC,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC;YACN,IAAI,EAAE,SAAS;YACf,cAAc,EAAE,KAAK;YACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpE,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACtC,cAAc,EAAE,CAAC;YACnB,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACrC,UAAU,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;gBAC5E,gBAAgB,GAAG,KAAK,CAAC;gBACzB,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC;gBACrC,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC;oBACN,IAAI,EAAE,SAAS;oBACf,cAAc,EAAE,KAAK;oBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,KAAK,UAAU;gBAAE,SAAS,GAAG,SAAS,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;IAEF,qEAAqE;IACrE,MAAM,MAAM,GAAG,KAAK,EAAE,QAAgB,EAAiB,EAAE;QACvD,IAAI,QAAQ,IAAI,SAAS,IAAI,CAAC,cAAc;YAAE,OAAO;QACrD,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,IACE,OAAO,CAAC,IAAI,KAAK,eAAe;YAChC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,cAAc;YAC3C,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc;YACpC,CAAC,UAAU,EAAE,GAAG;YAEhB,OAAO;QACT,MAAM,KAAK,GAAG,cAAc,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,SAAS,GAAG,UAAU,CAAC;QACvB,MAAM,kBAAkB,GAAG,EAAE,UAAU,CAAC;QACxC,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC;QAC5B,OAAO,CAAC;YACN,IAAI,EAAE,SAAS;YACf,cAAc,EAAE,KAAK;YACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC,CAAC;QACH,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YACrD,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpE,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACtC,cAAc,EAAE,CAAC;YACnB,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACrC,OAAO,CAAC;oBACN,IAAI,EAAE,SAAS;oBACf,cAAc,EAAE,KAAK;oBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5C,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG;oBACX,IAAI,EAAE,QAAQ;oBACd,cAAc,EAAE,KAAK;oBACrB,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;oBACrD,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM;oBAC3B,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,mBAAmB;wBACvD,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;wBACrE,CAAC,CAAC,SAAS;oBACb,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI;oBACvB,OAAO,EAAE,EAAE;iBACZ,CAAC;gBACF,gBAAgB,GAAG,KAAK,CAAC;gBACzB,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC;gBACrC,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,KAAK,UAAU;gBAAE,SAAS,GAAG,SAAS,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;IAEF,0EAA0E;IAC1E,MAAM,WAAW,GAAG,KAAK,EAAE,QAAgB,EAAiB,EAAE;QAC5D,IACE,QAAQ;YACR,SAAS;YACT,CAAC,cAAc;YACf,CAAC,UAAU;YACX,UAAU,CAAC,IAAI,KAAK,MAAM;YAC1B,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ;YACjC,UAAU,CAAC,MAAM,CAAC,UAAU,KAAK,cAAc;YAE/C,OAAO;QACT,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACpC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5C,IACE,OAAO,CAAC,IAAI,KAAK,eAAe;YAChC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,cAAc;YAC3C,CAAC,OAAO,CAAC,YAAY,CAAC,cAAc;YACpC,CAAC,UAAU,EAAE,WAAW;YAExB,OAAO;QACT,MAAM,KAAK,GAAG,cAAc,CAAC;QAC7B,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,SAAS,GAAG,UAAU,CAAC;QACvB,MAAM,kBAAkB,GAAG,EAAE,UAAU,CAAC;QACxC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;YAC7D,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACpE,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACtC,cAAc,EAAE,CAAC;YACnB,CAAC;iBAAM,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACrC,OAAO,CAAC;oBACN,IAAI,EAAE,SAAS;oBACf,cAAc,EAAE,KAAK;oBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,UAAU,GAAG;oBACX,IAAI,EAAE,SAAS;oBACf,cAAc,EAAE,KAAK;oBACrB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,eAAe,EAAE,QAAQ,CAAC,eAAe;oBACzC,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,OAAO,EAAE,MAAM,CAAC,KAAK;iBACtB,CAAC;gBACF,gBAAgB,GAAG,KAAK,CAAC;gBACzB,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC;gBACrC,OAAO,CAAC,UAAU,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,SAAS,KAAK,UAAU;gBAAE,SAAS,GAAG,SAAS,CAAC;QACtD,CAAC;IACH,CAAC,CAAC;IAEF,oEAAoE;IACpE,MAAM,MAAM,GAAG,GAAkB,EAAE;QACjC,IAAI,UAAU,EAAE,IAAI,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7E,IAAI,UAAU,EAAE,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACvE,OAAO,IAAI,EAAE,CAAC;IAChB,CAAC,CAAC;IAEF,kFAAkF;IAClF,MAAM,iBAAiB,GAAG,CACxB,QAAgB,EAChB,IAA2D,EAC3D,QAAiB,EACR,EAAE;QACX,gGAAgG;QAChG,8FAA8F;QAC9F,IAAI,CAAC,UAAU;YAAE,OAAO,IAAI,KAAK,WAAW,CAAC;QAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC1B,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO,IAAI,CAAC;QACtC,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAClF,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,MAAM,CAAC,UAAU,KAAK,cAAc;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,IAAI,KAAK,UAAU;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,CACL,UAAU,CAAC,IAAI,KAAK,SAAS;YAC7B,QAAQ,KAAK,SAAS;YACtB,UAAU,CAAC,OAAO,CAAC,IAAI,CACrB,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CACvF,CACF,CAAC;IACJ,CAAC,CAAC;IAEF,gGAAgG;IAChG,MAAM,kBAAkB,GAAG,GAAY,EAAE;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACpC,OAAO,CACL,OAAO,CAAC,IAAI,KAAK,eAAe;YAChC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,cAAc;YAC3C,OAAO,CAAC,YAAY,EAAE,MAAM,KAAK,QAAQ;YACzC,OAAO,CAAC,YAAY,CAAC,mBAAmB,CACzC,CAAC;IACJ,CAAC,CAAC;IAEF,oFAAoF;IACpF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,YAA2B,EAC3B,KAAa,EACb,UAA2B,EAC3B,WAAgC,EACjB,EAAE;QACjB,IAAI,CAAC;YACH,MAAM,YAAY,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;gBACxC,SAAS,GAAG,SAAS,CAAC;gBACtB,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBAC7B,kBAAkB,GAAG,KAAK,CAAC;YAC7B,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,CAAC;YAAE,OAAO;QACjD,SAAS,GAAG,SAAS,CAAC;QACtB,MAAM,WAAW,EAAE,CAAC;QACpB,kBAAkB,GAAG,KAAK,CAAC;IAC7B,CAAC,CAAC;IAEF,qFAAqF;IACrF,MAAM,iBAAiB,GAAG,CACxB,KAA0B,EACiB,EAAE;QAC7C,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YACpC,OAAO;gBACL,GAAG,KAAK,CAAC,MAAM;gBACf,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;gBACnC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;aACpC,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC;QAC5B,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ;YAChF,OAAO,SAAS,CAAC;QACnB,OAAO;YACL,GAAG,KAAK;YACR,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;YACtC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ;SACvC,CAAC;IACJ,CAAC,CAAC;IAEF,4FAA4F;IAC5F,MAAM,YAAY,GAAG,KAAK,EAAE,WAAgC,EAAiB,EAAE;QAC7E,MAAM,WAAW,EAAE,CAAC;QACpB,kBAAkB,GAAG,KAAK,CAAC;IAC7B,CAAC,CAAC;IAEF,gGAAgG;IAChG,MAAM,cAAc,GAAG,KAAK,EAC1B,MAAkF,EAClF,KAAa,EACb,UAA2B,EAC3B,WAA2D,EAC3D,eAAwB,EACT,EAAE;QACjB,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,cAAc,EAAE,CAAC;YACjB,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;YACtC,SAAS,GAAG,SAAS,CAAC;YACtB,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC7B,kBAAkB,GAAG,KAAK,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,IAAI,eAAe,EAAE,CAAC;gBACpB,MAAM,gBAAgB,GACpB,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;gBAC9E,SAAS,GAAG,SAAS,CAAC;gBACtB,IAAI,gBAAgB;oBAAE,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;;oBAChD,MAAM,IAAI,EAAE,CAAC;YACpB,CAAC;YACD,IAAI,cAAc,KAAK,KAAK;gBAAE,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;YAC5D,kBAAkB,GAAG,KAAK,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC9B,kBAAkB,GAAG,KAAK,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5D,IAAI,KAAK,IAAI,CAAC,WAAW,IAAI,KAAK,IAAI,CAAC,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACtF,SAAS,GAAG,SAAS,CAAC;YACtB,qBAAqB,CAAC,KAAK,CAAC,CAAC;YAC7B,kBAAkB,GAAG,KAAK,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC3B,SAAS,GAAG,SAAS,CAAC;gBACtB,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBAC7B,kBAAkB,GAAG,KAAK,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,OAAO,kBAAkB,CACvB,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAChD,KAAK,EACL,UAAU,EACV,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CACzB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,GAAG,SAAS,CAAC;gBACtB,qBAAqB,CAAC,KAAK,CAAC,CAAC;gBAC7B,kBAAkB,GAAG,KAAK,CAAC;gBAC3B,OAAO;YACT,CAAC;QACH,CAAC;QACD,SAAS,GAAG,SAAS,CAAC;QACtB,MAAM,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,mFAAmF;IACnF,MAAM,MAAM,GAAG,KAAK,EAClB,UAA4B,EAC5B,MAIwF,EACxF,WAA2D,EAC3D,OAAmD,EACnD,YAA4B,EAC5B,eAAe,GAAG,KAAK,EACR,EAAE;QACjB,IAAI,QAAQ,IAAI,SAAS,IAAI,gBAAgB,IAAI,CAAC,cAAc;YAAE,OAAO;QACzE,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACpC,IACE,OAAO,CAAC,IAAI,KAAK,eAAe;YAChC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,cAAc;YAC3C,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC;YACjC,CAAC,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC;YAEjC,OAAO;QACT,MAAM,KAAK,GAAG,cAAc,CAAC;QAC7B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,SAAS,GAAG,UAAU,CAAC;QACvB,MAAM,kBAAkB,GAAG,EAAE,UAAU,CAAC;QACxC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,CAAC;YACH,IACE,OAAO;gBACP,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;gBAErF,OAAO;YACT,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;YACpC,MAAM,UAAU,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;YAC5C,IACE,OAAO,CAAC,IAAI,KAAK,eAAe;gBAChC,OAAO,CAAC,YAAY,EAAE,EAAE,KAAK,KAAK;gBAClC,CAAC,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC;gBACjC,CAAC,UAAU;gBACX,CAAC,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC;gBAEjC,OAAO;YACT,kBAAkB,GAAG,IAAI,CAAC;YAC1B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAClE,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,UAAU,CAAC;gBAAE,OAAO;YACzD,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3F,SAAS,GAAG,IAAI,CAAC;YACjB,OAAO,UAAU,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gBAC3C,SAAS,GAAG,SAAS,CAAC;gBACtB,kBAAkB,GAAG,KAAK,CAAC;YAC7B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,WAAW,CAAC,KAAK,EAAE,gBAAgB;YACjC,IAAI,QAAQ;gBAAE,OAAO;YACrB,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7F,MAAM,OAAO,GACX,KAAK,CAAC,IAAI,KAAK,eAAe;gBAC9B,CAAC,YAAY,IAAI,CAAC,IAAI,YAAY,KAAK,gBAAgB,CAAC;gBACxD,cAAc,KAAK,gBAAgB,CAAC;YACtC,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,EAAE,CAAC;gBACT,UAAU,GAAG,SAAS,CAAC;gBACvB,gBAAgB,GAAG,KAAK,CAAC;gBACzB,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC;gBACrC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC9B,CAAC;YACD,YAAY,GAAG,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACtE,cAAc,GAAG,gBAAgB,CAAC;QACpC,CAAC;QACD,IAAI;QACJ,MAAM;QACN,MAAM;QACN,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAChB,MAAM,CACJ,kBAAkB,EAClB,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAC7B,UAAU,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAC7E,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,EAC1E,SAAS,EACT,kBAAkB,CACnB;QACH,MAAM,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,CAChC,MAAM,CACJ,kBAAkB,EAClB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAC5B,UAAU,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC;YACzD,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EACxC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EACtB,SAAS,EACT,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAC5C;QACH,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAC9B,MAAM,CACJ,kBAAkB,EAClB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAC5B,UAAU,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EAC1F,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EACtB,OAAO,EACP,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC/C;QACH,UAAU,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAChC,MAAM,CACJ,kBAAkB,EAClB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAC5B,UAAU,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC;YAChD,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EACxC,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EACtB,OAAO,EACP,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAC/C;QACH,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE,CAC5B,MAAM,CACJ,kBAAkB,EAClB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAC5B,UAAU,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EACxF,IAAI,EACJ,OAAO,EACP,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,WAAW,CAAC,EAC9C,IAAI,CACL;QACH,WAAW;QACX,cAAc,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAClC,MAAM,CACJ,kBAAkB,EAClB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAC5B,UAAU,CAAC,cAAc,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC;YAC3D,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EACxC,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAC3B,SAAS,EACT,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAC9C;QACH,YAAY,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,CAC5C,MAAM,CACJ,wBAAwB,EACxB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAC5B,UAAU,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;YAC5D,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,EACxC,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,EAC3B,OAAO,EACP,GAAG,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,eAAe,EAAE,QAAQ,CAAC,CAC7D;QACH,qBAAqB,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC;QACzC,yBAAyB,CAAC,WAAW;YACnC,IAAI,CAAC,WAAW;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,OAAO;YACL,IAAI,QAAQ;gBAAE,OAAO;YACrB,MAAM,EAAE,CAAC;YACT,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,GAAG,SAAS,CAAC;YACvB,gBAAgB,GAAG,KAAK,CAAC;YACzB,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/admin/client-credential-dialogs.d.ts

@@ -0,0 +1,36 @@
+/** Focused OIDC client credential dialogs and their shared secret-expiry composition. */
+import type { GenerateSecretInput } from '@portaidentity/sdk';
+import { Group } from '@jsvision/ui';
+import type { EventLoop, ModalDialogHost } from '@jsvision/ui';
+import type { AdminClient } from './client-state.js';
+/** Exact warning shown when an administrator chooses a non-expiring secret. */
+export declare const NEVER_SECRET_EXPIRY_WARNING = "This secret will remain valid until it is deleted. Regular rotation is recommended.";
+/** Non-blocking warning shown for a selected date beyond the 24-month preset boundary. */
+export declare const LONG_SECRET_EXPIRY_WARNING = "This secret expires after 24 months. Regular rotation is recommended.";
+/** Feature-local expiry fields shared by registration and credential generation. */
+export interface ClientSecretExpiryFields {
+    /** Layout DSL content containing the choice, optional calendar, and warning. */
+    readonly content: Group;
+    /** Returns whether the selected choice contains a valid future civil date. */
+    readonly isValid: () => boolean;
+    /** Serializes the selected date, or omits expiry when Never is selected. */
+    readonly expiresAt: () => string | undefined;
+}
+/** Modal host needed for abort-driven credential-dialog closure. */
+export interface ClientCredentialDialogHost extends ModalDialogHost {
+    /** Event loop that can synchronously close an owned modal. */
+    readonly loop: ModalDialogHost['loop'] & Pick<EventLoop, 'endModal'>;
+}
+/** Result of the focused client-secret generation form. */
+export type GenerateClientSecretDialogResult = {
+    readonly kind: 'generate';
+    readonly clientId: string;
+    readonly input?: GenerateSecretInput;
+} | {
+    readonly kind: 'cancel';
+};
+/** Creates one complete calendar-based secret-expiry selector with a six-month default. */
+export declare function createClientSecretExpiryFields(now?: Date): ClientSecretExpiryFields;
+/** Opens focused label and calendar expiry controls for a new client secret. */
+export declare function showGenerateClientSecretDialog(host: ClientCredentialDialogHost, operationSignal: AbortSignal, client: AdminClient): Promise<GenerateClientSecretDialogResult>;
+//# sourceMappingURL=client-credential-dialogs.d.ts.map

package/dist/admin/client-credential-dialogs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-credential-dialogs.d.ts","sourceRoot":"","sources":["../../src/admin/client-credential-dialogs.ts"],"names":[],"mappings":"AAAA,yFAAyF;AAEzF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAcL,KAAK,EASN,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAgB,SAAS,EAAE,eAAe,EAAU,MAAM,cAAc,CAAC;AAGrF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAGrD,+EAA+E;AAC/E,eAAO,MAAM,2BAA2B,wFAC+C,CAAC;AAExF,0FAA0F;AAC1F,eAAO,MAAM,0BAA0B,0EACkC,CAAC;AAiB1E,oFAAoF;AACpF,MAAM,WAAW,wBAAwB;IACvC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC;IAChC,4EAA4E;IAC5E,QAAQ,CAAC,SAAS,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,oEAAoE;AACpE,MAAM,WAAW,0BAA2B,SAAQ,eAAe;IACjE,8DAA8D;IAC9D,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;CACtE;AAED,2DAA2D;AAC3D,MAAM,MAAM,gCAAgC,GACxC;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAA;CAAE,GAC9F;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAyChC,2FAA2F;AAC3F,wBAAgB,8BAA8B,CAAC,GAAG,GAAE,IAAiB,GAAG,wBAAwB,CA8D/F;AAgCD,gFAAgF;AAChF,wBAAsB,8BAA8B,CAClD,IAAI,EAAE,0BAA0B,EAChC,eAAe,EAAE,WAAW,EAC5B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,gCAAgC,CAAC,CAmD3C"}