@rool-dev/client 0.3.0-dev.52960ac → 0.3.0-dev.f9b91b8

package/dist/auth-browser.js

@@ -1,328 +0,0 @@
-const GCIP_REFRESH_ENDPOINT = 'https://securetoken.googleapis.com/v1/token';
-const REFRESH_BUFFER_MS = 5 * 60 * 1000; // Refresh 5 minutes before expiry
-const DEFAULT_STORAGE_PREFIX = 'rool_';
-export class BrowserAuthProvider {
-    config;
-    apiKey = null;
-    apiKeyFetchPromise = null;
-    refreshPromise = null;
-    refreshTimeoutId = null;
-    get storageKeys() {
-        const prefix = this.config.storagePrefix ?? DEFAULT_STORAGE_PREFIX;
-        return {
-            access: `${prefix}access_token`,
-            refresh: `${prefix}refresh_token`,
-            expiresAt: `${prefix}token_expires_at`,
-            state: `${prefix}auth_state`,
-        };
-    }
-    /** Auth URL without trailing slash */
-    get authBaseUrl() {
-        return this.config.authUrl.replace(/\/+$/, '');
-    }
-    constructor(config) {
-        this.config = config;
-    }
-    /**
-     * Initialize auth manager - should be called on app startup.
-     * Processes any auth callback in the URL and sets up auto-refresh.
-     */
-    initialize() {
-        const wasCallback = this.processCallback();
-        this.scheduleTokenRefresh();
-        return wasCallback;
-    }
-    /**
-     * Check if user is currently authenticated (has valid token).
-     */
-    isAuthenticated() {
-        const accessToken = this.readAccessToken();
-        const expiresAt = this.readExpiresAt();
-        if (!accessToken || !expiresAt)
-            return false;
-        return Date.now() < expiresAt;
-    }
-    /**
-     * Get current access token, refreshing if expired.
-     * Returns undefined if not authenticated.
-     */
-    async getToken() {
-        const accessToken = this.readAccessToken();
-        const expiresAt = this.readExpiresAt();
-        if (!accessToken)
-            return undefined;
-        // Token expired or about to expire - try refresh
-        if (expiresAt && Date.now() >= expiresAt - REFRESH_BUFFER_MS) {
-            const refreshed = await this.tryRefreshToken();
-            if (!refreshed)
-                return undefined;
-            return this.readAccessToken() ?? undefined;
-        }
-        return accessToken;
-    }
-    /**
-     * Get user info decoded from JWT token.
-     */
-    getUser() {
-        const accessToken = this.readAccessToken();
-        if (!accessToken)
-            return { email: null, name: null };
-        return this.decodeUserInfo(accessToken);
-    }
-    /**
-     * Initiate login by redirecting to auth page.
-     */
-    login() {
-        const loginUrl = new URL(`${this.authBaseUrl}/`);
-        const redirectTarget = window.location.origin + window.location.pathname + window.location.search;
-        loginUrl.searchParams.set('redirect_uri', redirectTarget);
-        const state = this.generateState();
-        this.storeState(state);
-        loginUrl.searchParams.set('state', state);
-        window.location.href = loginUrl.toString();
-    }
-    /**
-     * Logout - clear all tokens and state.
-     */
-    logout() {
-        this.clearTokens();
-        this.clearState();
-        this.cancelScheduledRefresh();
-        this.config.onAuthStateChanged(false);
-    }
-    /**
-     * Process auth callback from URL fragment.
-     * Should be called on page load.
-     * @returns true if callback was processed
-     */
-    processCallback() {
-        const hash = window.location.hash ?? '';
-        const trimmed = hash.startsWith('#') ? hash.slice(1) : hash;
-        if (!trimmed)
-            return false;
-        const params = new URLSearchParams(trimmed);
-        const idToken = params.get('id_token');
-        if (!idToken)
-            return false;
-        const refreshToken = params.get('refresh_token');
-        const expiresIn = params.get('expires_in');
-        const expiresAt = expiresIn ? Date.now() + Number(expiresIn) * 1000 : NaN;
-        const incomingState = params.get('state');
-        const storedState = this.readState();
-        // Validate state - if we stored one, require it back
-        if (storedState && incomingState !== storedState) {
-            console.error('[RoolClient] Auth state mismatch. Token fragment ignored.');
-            return false;
-        }
-        if (!Number.isFinite(expiresAt)) {
-            console.error('[RoolClient] Auth response missing expires_in. Token ignored.');
-            return false;
-        }
-        // Clear state and store tokens
-        this.clearState();
-        this.writeTokens(idToken, refreshToken, expiresAt);
-        // Clean URL
-        const cleanUrl = window.location.origin + window.location.pathname + window.location.search;
-        window.history.replaceState({}, document.title, cleanUrl);
-        // Schedule refresh and notify
-        this.scheduleTokenRefresh();
-        this.config.onAuthStateChanged(true);
-        return true;
-    }
-    /**
-     * Destroy auth manager - clear refresh timers.
-     */
-    destroy() {
-        this.cancelScheduledRefresh();
-    }
-    // ===========================================================================
-    // Private methods
-    // ===========================================================================
-    /**
-     * Get the API key, fetching from server if not provided in config.
-     */
-    async getApiKey() {
-        // Already have it
-        if (this.apiKey)
-            return this.apiKey;
-        // Already fetching
-        if (this.apiKeyFetchPromise)
-            return this.apiKeyFetchPromise;
-        // Fetch from server
-        this.apiKeyFetchPromise = fetch(`${this.authBaseUrl}/config.json`)
-            .then(async (response) => {
-            if (!response.ok) {
-                console.warn('[RoolClient] Failed to fetch API key from server');
-                return null;
-            }
-            const data = await response.json();
-            if (data.apiKey && typeof data.apiKey === 'string') {
-                this.apiKey = data.apiKey;
-                return this.apiKey;
-            }
-            return null;
-        })
-            .catch((error) => {
-            console.warn('[RoolClient] Failed to fetch API key:', error);
-            return null;
-        })
-            .finally(() => {
-            this.apiKeyFetchPromise = null;
-        });
-        return this.apiKeyFetchPromise;
-    }
-    async tryRefreshToken() {
-        // Deduplicate concurrent refresh attempts
-        if (this.refreshPromise) {
-            return this.refreshPromise;
-        }
-        const refreshToken = localStorage.getItem(this.storageKeys.refresh);
-        if (!refreshToken)
-            return false;
-        // Get API key (from config or server)
-        const apiKey = await this.getApiKey();
-        if (!apiKey) {
-            console.warn('[RoolClient] Cannot refresh token: no API key available');
-            return false;
-        }
-        const refreshUrl = new URL(GCIP_REFRESH_ENDPOINT);
-        refreshUrl.searchParams.set('key', apiKey);
-        this.refreshPromise = fetch(refreshUrl.toString(), {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
-            body: new URLSearchParams({
-                grant_type: 'refresh_token',
-                refresh_token: refreshToken,
-            }),
-        })
-            .then(async (response) => {
-            if (!response.ok) {
-                throw new Error(`Refresh failed: ${response.status} ${response.statusText}`);
-            }
-            const data = await response.json();
-            const accessToken = data.id_token ?? data.access_token ?? null;
-            const nextRefreshToken = data.refresh_token ?? refreshToken;
-            const expiresAt = data.expires_in ? Date.now() + data.expires_in * 1000 : NaN;
-            if (!accessToken || !Number.isFinite(expiresAt)) {
-                throw new Error('Refresh response missing access token or expires_in');
-            }
-            this.writeTokens(accessToken, nextRefreshToken, expiresAt);
-            this.scheduleTokenRefresh();
-            return true;
-        })
-            .catch((error) => {
-            console.error('[RoolClient] Token refresh failed:', error);
-            this.clearTokens();
-            this.config.onAuthStateChanged(false);
-            return false;
-        })
-            .finally(() => {
-            this.refreshPromise = null;
-        });
-        return this.refreshPromise;
-    }
-    scheduleTokenRefresh() {
-        this.cancelScheduledRefresh();
-        const expiresAt = this.readExpiresAt();
-        if (!expiresAt)
-            return;
-        const refreshAt = expiresAt - REFRESH_BUFFER_MS;
-        const delay = refreshAt - Date.now();
-        if (delay <= 0) {
-            // Already needs refresh
-            void this.tryRefreshToken();
-        }
-        else {
-            this.refreshTimeoutId = setTimeout(() => {
-                void this.tryRefreshToken();
-            }, delay);
-        }
-    }
-    cancelScheduledRefresh() {
-        if (this.refreshTimeoutId !== null) {
-            clearTimeout(this.refreshTimeoutId);
-            this.refreshTimeoutId = null;
-        }
-    }
-    readAccessToken() {
-        return localStorage.getItem(this.storageKeys.access);
-    }
-    readExpiresAt() {
-        const raw = localStorage.getItem(this.storageKeys.expiresAt);
-        if (!raw)
-            return null;
-        const parsed = Number.parseInt(raw, 10);
-        return Number.isFinite(parsed) ? parsed : null;
-    }
-    writeTokens(accessToken, refreshToken, expiresAt) {
-        if (accessToken) {
-            localStorage.setItem(this.storageKeys.access, accessToken);
-        }
-        else {
-            localStorage.removeItem(this.storageKeys.access);
-        }
-        if (refreshToken) {
-            localStorage.setItem(this.storageKeys.refresh, refreshToken);
-        }
-        else {
-            localStorage.removeItem(this.storageKeys.refresh);
-        }
-        if (expiresAt !== null && Number.isFinite(expiresAt)) {
-            localStorage.setItem(this.storageKeys.expiresAt, Math.floor(expiresAt).toString());
-        }
-        else {
-            localStorage.removeItem(this.storageKeys.expiresAt);
-        }
-    }
-    clearTokens() {
-        this.writeTokens(null, null, null);
-    }
-    storeState(value) {
-        try {
-            sessionStorage.setItem(this.storageKeys.state, value);
-        }
-        catch {
-            // Ignore storage restrictions
-        }
-    }
-    readState() {
-        try {
-            return sessionStorage.getItem(this.storageKeys.state);
-        }
-        catch {
-            return null;
-        }
-    }
-    clearState() {
-        try {
-            sessionStorage.removeItem(this.storageKeys.state);
-        }
-        catch {
-            // Ignore storage restrictions
-        }
-    }
-    generateState() {
-        try {
-            const buffer = new Uint8Array(16);
-            window.crypto.getRandomValues(buffer);
-            return Array.from(buffer, (value) => value.toString(16).padStart(2, '0')).join('');
-        }
-        catch {
-            return Math.random().toString(36).slice(2) + Math.random().toString(36).slice(2);
-        }
-    }
-    decodeUserInfo(accessToken) {
-        try {
-            const payload = JSON.parse(atob(accessToken.split('.')[1]));
-            return {
-                email: payload.email || null,
-                name: payload.name || null,
-            };
-        }
-        catch (error) {
-            console.error('[RoolClient] Failed to decode token:', error);
-            return { email: null, name: null };
-        }
-    }
-}
-//# sourceMappingURL=auth-browser.js.map

package/dist/auth-browser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-browser.js","sourceRoot":"","sources":["../src/auth-browser.ts"],"names":[],"mappings":"AAGA,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAC5E,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,kCAAkC;AAE3E,MAAM,sBAAsB,GAAG,OAAO,CAAC;AASvC,MAAM,OAAO,mBAAmB;IACpB,MAAM,CAAoB;IAC1B,MAAM,GAAkB,IAAI,CAAC;IAC7B,kBAAkB,GAAkC,IAAI,CAAC;IACzD,cAAc,GAA4B,IAAI,CAAC;IAC/C,gBAAgB,GAAyC,IAAI,CAAC;IAEtE,IAAY,WAAW;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,IAAI,sBAAsB,CAAC;QACnE,OAAO;YACH,MAAM,EAAE,GAAG,MAAM,cAAc;YAC/B,OAAO,EAAE,GAAG,MAAM,eAAe;YACjC,SAAS,EAAE,GAAG,MAAM,kBAAkB;YACtC,KAAK,EAAE,GAAG,MAAM,YAAY;SACtB,CAAC;IACf,CAAC;IAED,sCAAsC;IACtC,IAAY,WAAW;QACnB,OAAO,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,YAAY,MAAyB;QACjC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED;;;OAGG;IACH,UAAU;QACN,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,OAAO,WAAW,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,eAAe;QACX,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,WAAW,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAC7C,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAClC,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,QAAQ;QACV,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAEvC,IAAI,CAAC,WAAW;YAAE,OAAO,SAAS,CAAC;QAEnC,iDAAiD;QACjD,IAAI,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,SAAS,GAAG,iBAAiB,EAAE,CAAC;YAC3D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,eAAe,EAAE,CAAC;YAC/C,IAAI,CAAC,SAAS;gBAAE,OAAO,SAAS,CAAC;YACjC,OAAO,IAAI,CAAC,eAAe,EAAE,IAAI,SAAS,CAAC;QAC/C,CAAC;QAED,OAAO,WAAW,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,OAAO;QACH,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QAC3C,IAAI,CAAC,WAAW;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrD,OAAO,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,KAAK;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;QACjD,MAAM,cAAc,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAClG,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE1C,MAAM,CAAC,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,MAAM;QACF,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED;;;;OAIG;IACH,eAAe;QACX,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QAC5C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAE3B,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAC3C,MAAM,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1E,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAErC,qDAAqD;QACrD,IAAI,WAAW,IAAI,aAAa,KAAK,WAAW,EAAE,CAAC;YAC/C,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;YAC3E,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;YAC/E,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,+BAA+B;QAC/B,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QAEnD,YAAY;QACZ,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC5F,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAE1D,8BAA8B;QAC9B,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAErC,OAAO,IAAI,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,OAAO;QACH,IAAI,CAAC,sBAAsB,EAAE,CAAC;IAClC,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAE9E;;OAEG;IACK,KAAK,CAAC,SAAS;QACnB,kBAAkB;QAClB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,mBAAmB;QACnB,IAAI,IAAI,CAAC,kBAAkB;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC;QAE5D,oBAAoB;QACpB,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,WAAW,cAAc,CAAC;aAC7D,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACrB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,OAAO,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;gBACjE,OAAO,IAAI,CAAC;YAChB,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACjD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;gBAC1B,OAAO,IAAI,CAAC,MAAM,CAAC;YACvB,CAAC;YACD,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,OAAO,CAAC,IAAI,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACnC,CAAC,CAAC,CAAC;QAEP,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,eAAe;QACzB,0CAA0C;QAC1C,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACtB,OAAO,IAAI,CAAC,cAAc,CAAC;QAC/B,CAAC;QAED,MAAM,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY;YAAE,OAAO,KAAK,CAAC;QAEhC,sCAAsC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;YACxE,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAClD,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAE3C,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE;YAC/C,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;YAChE,IAAI,EAAE,IAAI,eAAe,CAAC;gBACtB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,YAAY;aAC9B,CAAC;SACL,CAAC;aACG,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;YACrB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,WAAW,GAAkB,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC;YAC9E,MAAM,gBAAgB,GAAkB,IAAI,CAAC,aAAa,IAAI,YAAY,CAAC;YAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YAE9E,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;YAC3E,CAAC;YAED,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,gBAAgB,EAAE,SAAS,CAAC,CAAC;YAC3D,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,OAAO,IAAI,CAAC;QAChB,CAAC,CAAC;aACD,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;YACb,OAAO,CAAC,KAAK,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;YAC3D,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACV,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC;QAC/B,CAAC,CAAC,CAAC;QAEP,OAAO,IAAI,CAAC,cAAc,CAAC;IAC/B,CAAC;IAEO,oBAAoB;QACxB,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAE9B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACvC,IAAI,CAAC,SAAS;YAAE,OAAO;QAEvB,MAAM,SAAS,GAAG,SAAS,GAAG,iBAAiB,CAAC;QAChD,MAAM,KAAK,GAAG,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAErC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YACb,wBAAwB;YACxB,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;QAChC,CAAC;aAAM,CAAC;YACJ,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;gBACpC,KAAK,IAAI,CAAC,eAAe,EAAE,CAAC;YAChC,CAAC,EAAE,KAAK,CAAC,CAAC;QACd,CAAC;IACL,CAAC;IAEO,sBAAsB;QAC1B,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;YACjC,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QACjC,CAAC;IACL,CAAC;IAEO,eAAe;QACnB,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IAEO,aAAa;QACjB,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACxC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,CAAC;IAEO,WAAW,CACf,WAA0B,EAC1B,YAA2B,EAC3B,SAAwB;QAExB,IAAI,WAAW,EAAE,CAAC;YACd,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,YAAY,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACjE,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACvF,CAAC;aAAM,CAAC;YACJ,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACxD,CAAC;IACL,CAAC;IAEO,WAAW;QACf,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAEO,UAAU,CAAC,KAAa;QAC5B,IAAI,CAAC;YACD,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACL,8BAA8B;QAClC,CAAC;IACL,CAAC;IAEO,SAAS;QACb,IAAI,CAAC;YACD,OAAO,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,UAAU;QACd,IAAI,CAAC;YACD,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACL,8BAA8B;QAClC,CAAC;IACL,CAAC;IAEO,aAAa;QACjB,IAAI,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvF,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrF,CAAC;IACL,CAAC;IAEO,cAAc,CAAC,WAAmB;QACtC,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,OAAO;gBACH,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;gBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;aAC7B,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,sCAAsC,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;IACL,CAAC;CACJ"}

package/dist/auth-node.d.ts

@@ -1,33 +0,0 @@
-import type { AuthProvider, UserInfo } from './types.js';
-export interface NodeAuthConfig {
-    /** Path to store credentials (default: ~/.config/rool/credentials.json) */
-    credentialsPath?: string;
-    /** Timeout for login flow in ms (default: 5 minutes) */
-    loginTimeoutMs?: number;
-    onAuthStateChanged?: (authenticated: boolean) => void;
-}
-export declare class NodeAuthProvider implements AuthProvider {
-    private config;
-    private apiKey;
-    private _authUrl;
-    constructor(config?: NodeAuthConfig);
-    /** Called by AuthManager to inject the auth URL */
-    setAuthUrl(url: string): void;
-    private get credentialsPath();
-    /**
-     * Get the auth endpoint URL (without trailing slash).
-     */
-    private get authEndpoint();
-    initialize(): boolean;
-    getToken(): Promise<string | undefined>;
-    getUser(): UserInfo;
-    isAuthenticated(): boolean;
-    login(): Promise<void>;
-    logout(): void;
-    private readCredentials;
-    private writeCredentials;
-    private getApiKey;
-    private refreshToken;
-    private startLoopbackServer;
-}
-//# sourceMappingURL=auth-node.d.ts.map

package/dist/auth-node.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-node.d.ts","sourceRoot":"","sources":["../src/auth-node.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAIzD,MAAM,WAAW,cAAc;IAC3B,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,wDAAwD;IACxD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,CAAC,aAAa,EAAE,OAAO,KAAK,IAAI,CAAC;CACzD;AAQD,qBAAa,gBAAiB,YAAW,YAAY;IACjD,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,QAAQ,CAAuB;gBAE3B,MAAM,GAAE,cAAmB;IAIvC,mDAAmD;IACnD,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAI7B,OAAO,KAAK,eAAe,GAO1B;IAED;;OAEG;IACH,OAAO,KAAK,YAAY,GAKvB;IAED,UAAU,IAAI,OAAO;IAIf,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IAY7C,OAAO,IAAI,QAAQ;IAenB,eAAe,IAAI,OAAO;IAQpB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA6C5B,MAAM,IAAI,IAAI;IAYd,OAAO,CAAC,eAAe;IAWvB,OAAO,CAAC,gBAAgB;YAYV,SAAS;YAcT,YAAY;IAoD1B,OAAO,CAAC,mBAAmB;CAuE9B"}

package/dist/auth-node.js

@@ -1,271 +0,0 @@
-import * as http from 'node:http';
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import * as os from 'node:os';
-import open from 'open';
-const GCIP_REFRESH_ENDPOINT = 'https://securetoken.googleapis.com/v1/token';
-export class NodeAuthProvider {
-    config;
-    apiKey = null;
-    _authUrl = null;
-    constructor(config = {}) {
-        this.config = config;
-    }
-    /** Called by AuthManager to inject the auth URL */
-    setAuthUrl(url) {
-        this._authUrl = url;
-    }
-    get credentialsPath() {
-        if (this.config.credentialsPath) {
-            return this.config.credentialsPath;
-        }
-        const homeDir = os.homedir();
-        const configDir = path.join(homeDir, '.config', 'rool');
-        return path.join(configDir, 'credentials.json');
-    }
-    /**
-     * Get the auth endpoint URL (without trailing slash).
-     */
-    get authEndpoint() {
-        if (!this._authUrl) {
-            throw new Error('Auth URL not set. Ensure RoolClient is configured correctly.');
-        }
-        return this._authUrl.replace(/\/+$/, '');
-    }
-    initialize() {
-        return this.isAuthenticated();
-    }
-    async getToken() {
-        const creds = this.readCredentials();
-        if (!creds)
-            return undefined;
-        // Refresh if expiring in less than 5 minutes
-        if (Date.now() >= creds.expires_at - 5 * 60 * 1000) {
-            return this.refreshToken(creds);
-        }
-        return creds.access_token;
-    }
-    getUser() {
-        const creds = this.readCredentials();
-        if (!creds?.access_token)
-            return { email: null, name: null };
-        try {
-            const payload = JSON.parse(Buffer.from(creds.access_token.split('.')[1], 'base64').toString());
-            return {
-                email: payload.email || null,
-                name: payload.name || null,
-            };
-        }
-        catch {
-            return { email: null, name: null };
-        }
-    }
-    isAuthenticated() {
-        const creds = this.readCredentials();
-        if (!creds)
-            return false;
-        // We consider it authenticated if we have a refresh token, 
-        // effectively "remember me" behavior for CLI
-        return !!creds.refresh_token || Date.now() < creds.expires_at;
-    }
-    async login() {
-        const { server, closeAll } = await this.startLoopbackServer();
-        const port = server.address().port;
-        const redirectUri = `http://localhost:${port}`;
-        // Generate code verifier/state if needed, currently just state
-        const state = Math.random().toString(36).substring(2);
-        // Auth endpoint is the root of the auth service
-        const loginUrl = new URL(`${this.authEndpoint}/`);
-        loginUrl.searchParams.set('redirect_uri', redirectUri);
-        loginUrl.searchParams.set('state', state);
-        console.log('Opening browser to login:', loginUrl.toString());
-        await open(loginUrl.toString());
-        const timeoutMs = this.config.loginTimeoutMs ?? 5 * 60 * 1000; // 5 minutes default
-        return new Promise((resolve, reject) => {
-            const timeout = setTimeout(() => {
-                closeAll();
-                reject(new Error('Login timed out. Please try again.'));
-            }, timeoutMs);
-            server.on('authenticated', (tokens) => {
-                clearTimeout(timeout);
-                const expiresAt = Date.now() + (tokens.expires_in * 1000);
-                this.writeCredentials({
-                    access_token: tokens.id_token, // GCIP returns id_token
-                    refresh_token: tokens.refresh_token,
-                    expires_at: expiresAt
-                });
-                this.config.onAuthStateChanged?.(true);
-                closeAll();
-                resolve();
-            });
-            server.on('error', (err) => {
-                clearTimeout(timeout);
-                closeAll();
-                reject(err);
-            });
-        });
-    }
-    logout() {
-        const filePath = this.credentialsPath;
-        if (fs.existsSync(filePath)) {
-            fs.unlinkSync(filePath);
-        }
-        this.config.onAuthStateChanged?.(false);
-    }
-    // ===========================================================================
-    // Private Helpers
-    // ===========================================================================
-    readCredentials() {
-        try {
-            const filePath = this.credentialsPath;
-            if (!fs.existsSync(filePath))
-                return null;
-            const data = fs.readFileSync(filePath, 'utf-8');
-            return JSON.parse(data);
-        }
-        catch {
-            return null;
-        }
-    }
-    writeCredentials(creds) {
-        const filePath = this.credentialsPath;
-        const dir = path.dirname(filePath);
-        try {
-            fs.mkdirSync(dir, { recursive: true });
-            fs.writeFileSync(filePath, JSON.stringify(creds, null, 2), { mode: 0o600 });
-        }
-        catch (error) {
-            console.error('[RoolClient] Failed to save credentials:', error);
-        }
-    }
-    async getApiKey() {
-        if (this.apiKey)
-            return this.apiKey;
-        try {
-            const response = await fetch(`${this.authEndpoint}/config.json`);
-            if (!response.ok)
-                return null;
-            const data = await response.json();
-            this.apiKey = data.apiKey;
-            return this.apiKey;
-        }
-        catch {
-            return null;
-        }
-    }
-    async refreshToken(creds) {
-        if (!creds.refresh_token)
-            return undefined;
-        const apiKey = await this.getApiKey();
-        if (!apiKey) {
-            console.warn('[RoolClient] Cannot refresh: API key not found');
-            return undefined;
-        }
-        try {
-            // Derive referer from auth URL (required for API key restrictions)
-            const referer = new URL(this.authEndpoint).origin;
-            const response = await fetch(`${GCIP_REFRESH_ENDPOINT}?key=${apiKey}`, {
-                method: 'POST',
-                headers: {
-                    'Content-Type': 'application/x-www-form-urlencoded',
-                    'Referer': referer,
-                },
-                body: new URLSearchParams({
-                    grant_type: 'refresh_token',
-                    refresh_token: creds.refresh_token,
-                }),
-            });
-            if (!response.ok) {
-                // 400 typically means invalid/expired refresh token - clear credentials
-                if (response.status === 400) {
-                    console.warn('[RoolClient] Refresh token expired or invalid. Please login again.');
-                    this.logout();
-                }
-                else {
-                    console.warn(`[RoolClient] Refresh failed: ${response.status}`);
-                }
-                return undefined;
-            }
-            const data = await response.json();
-            const newCreds = {
-                access_token: data.id_token || data.access_token,
-                refresh_token: data.refresh_token || creds.refresh_token,
-                expires_at: Date.now() + (Number(data.expires_in) * 1000),
-            };
-            this.writeCredentials(newCreds);
-            return newCreds.access_token;
-        }
-        catch (error) {
-            console.error('[RoolClient] Refresh failed:', error);
-            return undefined;
-        }
-    }
-    startLoopbackServer() {
-        return new Promise((resolve) => {
-            const server = http.createServer((req, res) => {
-                const url = new URL(req.url || '/', `http://localhost`);
-                // 1. Serve the capture page if we just have a root request
-                if (url.pathname === '/') {
-                    res.writeHead(200, { 'Content-Type': 'text/html' });
-                    res.end(`
-            <html>
-            <body>
-              <h1>Authenticating...</h1>
-              <script>
-                // Extract hash and post to /callback
-                if (window.location.hash) {
-                  const hash = window.location.hash.substring(1);
-                  fetch('/callback', {
-                    method: 'POST',
-                    headers: {'Content-Type': 'application/x-www-form-urlencoded'},
-                    body: hash
-                  })
-                  .then(() => document.body.innerHTML = '<h1>Login Successful. You can close this window.</h1>')
-                  .catch(err => document.body.innerHTML = '<h1>Error: ' + err.message + '</h1>');
-                }
-              </script>
-            </body>
-            </html>
-          `);
-                    return;
-                }
-                // 2. Handle the callback POST
-                if (url.pathname === '/callback' && req.method === 'POST') {
-                    let body = '';
-                    req.on('data', (chunk) => body += chunk.toString());
-                    req.on('end', () => {
-                        const params = new URLSearchParams(body);
-                        const idToken = params.get('id_token');
-                        const refreshToken = params.get('refresh_token');
-                        const expiresIn = params.get('expires_in');
-                        if (idToken && expiresIn) {
-                            res.writeHead(200);
-                            res.end('OK');
-                            server.emit('authenticated', {
-                                id_token: idToken,
-                                refresh_token: refreshToken,
-                                expires_in: Number(expiresIn)
-                            });
-                        }
-                        else {
-                            res.writeHead(400);
-                            res.end('Invalid tokens');
-                        }
-                    });
-                    return;
-                }
-                res.writeHead(404);
-                res.end();
-            });
-            // Listen on random port
-            server.listen(0, '127.0.0.1', () => resolve({
-                server,
-                closeAll: () => {
-                    server.close();
-                    server.closeAllConnections();
-                },
-            }));
-        });
-    }
-}
-//# sourceMappingURL=auth-node.js.map

package/dist/auth-node.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth-node.js","sourceRoot":"","sources":["../src/auth-node.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,MAAM,qBAAqB,GAAG,6CAA6C,CAAC;AAgB5E,MAAM,OAAO,gBAAgB;IACjB,MAAM,CAAiB;IACvB,MAAM,GAAkB,IAAI,CAAC;IAC7B,QAAQ,GAAkB,IAAI,CAAC;IAEvC,YAAY,SAAyB,EAAE;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,mDAAmD;IACnD,UAAU,CAAC,GAAW;QAClB,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;IACxB,CAAC;IAED,IAAY,eAAe;QACvB,IAAI,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC;QACvC,CAAC;QACD,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,IAAY,YAAY;QACpB,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,UAAU;QACN,OAAO,IAAI,CAAC,eAAe,EAAE,CAAC;IAClC,CAAC;IAED,KAAK,CAAC,QAAQ;QACV,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAE7B,6CAA6C;QAC7C,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK,CAAC,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,KAAK,CAAC,YAAY,CAAC;IAC9B,CAAC;IAED,OAAO;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,YAAY;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAE7D,IAAI,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/F,OAAO;gBACH,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;gBAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;aAC7B,CAAC;QACN,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC;IACL,CAAC;IAED,eAAe;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,4DAA4D;QAC5D,6CAA6C;QAC7C,OAAO,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,KAAK;QACP,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,mBAAmB,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAI,MAAM,CAAC,OAAO,EAAU,CAAC,IAAI,CAAC;QAC5C,MAAM,WAAW,GAAG,oBAAoB,IAAI,EAAE,CAAC;QAE/C,+DAA+D;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEtD,gDAAgD;QAChD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;QAClD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;QACvD,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE1C,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;QAEhC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,oBAAoB;QAEnF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,QAAQ,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,CAAC;YAC5D,CAAC,EAAE,SAAS,CAAC,CAAC;YAEd,MAAM,CAAC,EAAE,CAAC,eAAe,EAAE,CAAC,MAAW,EAAE,EAAE;gBACvC,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;gBAC1D,IAAI,CAAC,gBAAgB,CAAC;oBAClB,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE,wBAAwB;oBACvD,aAAa,EAAE,MAAM,CAAC,aAAa;oBACnC,UAAU,EAAE,SAAS;iBACxB,CAAC,CAAC;gBACH,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,IAAI,CAAC,CAAC;gBACvC,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAU,EAAE,EAAE;gBAC9B,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,QAAQ,EAAE,CAAC;gBACX,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;IACP,CAAC;IAED,MAAM;QACF,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,8EAA8E;IAC9E,kBAAkB;IAClB,8EAA8E;IAEtE,eAAe;QACnB,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;YACtC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,gBAAgB,CAAC,KAAwB;QAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAEnC,IAAI,CAAC;YACD,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAChF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,KAAK,CAAC,CAAC;QACrE,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,SAAS;QACnB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QAEpC,IAAI,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,YAAY,cAAc,CAAC,CAAC;YACjE,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,IAAI,CAAC;YAC9B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC1B,OAAO,IAAI,CAAC,MAAM,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,IAAI,CAAC;QAChB,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAwB;QAC/C,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,OAAO,SAAS,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,EAAE,CAAC;YACV,OAAO,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YAC/D,OAAO,SAAS,CAAC;QACrB,CAAC;QAED,IAAI,CAAC;YACD,mEAAmE;YACnE,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC;YAElD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,qBAAqB,QAAQ,MAAM,EAAE,EAAE;gBACnE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACL,cAAc,EAAE,mCAAmC;oBACnD,SAAS,EAAE,OAAO;iBACrB;gBACD,IAAI,EAAE,IAAI,eAAe,CAAC;oBACtB,UAAU,EAAE,eAAe;oBAC3B,aAAa,EAAE,KAAK,CAAC,aAAa;iBACrC,CAAC;aACL,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACf,wEAAwE;gBACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC1B,OAAO,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;oBACnF,IAAI,CAAC,MAAM,EAAE,CAAC;gBAClB,CAAC;qBAAM,CAAC;oBACJ,OAAO,CAAC,IAAI,CAAC,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;gBACpE,CAAC;gBACD,OAAO,SAAS,CAAC;YACrB,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAEnC,MAAM,QAAQ,GAAsB;gBAChC,YAAY,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,YAAY;gBAChD,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa;gBACxD,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;aAC5D,CAAC;YAEF,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;YAChC,OAAO,QAAQ,CAAC,YAAY,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,8BAA8B,EAAE,KAAK,CAAC,CAAC;YACrD,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IAEO,mBAAmB;QACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAyB,EAAE,GAAwB,EAAE,EAAE;gBACrF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;gBAExD,2DAA2D;gBAC3D,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;oBACvB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,CAAC,CAAC;oBACpD,GAAG,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;;WAmBjB,CAAC,CAAC;oBACO,OAAO;gBACX,CAAC;gBAED,8BAA8B;gBAC9B,IAAI,GAAG,CAAC,QAAQ,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACxD,IAAI,IAAI,GAAG,EAAE,CAAC;oBACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;oBAC5D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;wBACf,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;wBACzC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;wBACvC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;wBACjD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;wBAE3C,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;4BACvB,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;4BACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;4BACd,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE;gCACzB,QAAQ,EAAE,OAAO;gCACjB,aAAa,EAAE,YAAY;gCAC3B,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC;6BAChC,CAAC,CAAC;wBACP,CAAC;6BAAM,CAAC;4BACJ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;4BACnB,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;wBAC9B,CAAC;oBACL,CAAC,CAAC,CAAC;oBACH,OAAO;gBACX,CAAC;gBAED,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACd,CAAC,CAAC,CAAC;YAEH,wBAAwB;YACxB,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC;gBACxC,MAAM;gBACN,QAAQ,EAAE,GAAG,EAAE;oBACX,MAAM,CAAC,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,mBAAmB,EAAE,CAAC;gBACjC,CAAC;aACJ,CAAC,CAAC,CAAC;QACR,CAAC,CAAC,CAAC;IACP,CAAC;CACJ"}