@samebase/identity-broker 0.0.0-stage → 0.1.0

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,GAKrB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,CAAC,EAAE,MAAM,eAAe,CAAC;AAClC,OAAO,KAAK,KAAK,MAAM,cAAc,CAAC;AAStC,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACpF,OAAO,EACL,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,iBAAiB,EAAe,MAAM,WAAW,CAAC;AACpF,OAAO,EACL,cAAc,EACd,WAAW,EACX,eAAe,EACf,wBAAwB,EACxB,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,GACrB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,IAAI,EACJ,UAAU,EACV,cAAc,EACd,QAAQ,GACT,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAUrF,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAE,KAAK,EAAE,MAAM,uBAAuB,CAAC;AAC9C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AAYpE,sEAAsE;AACtE,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,2DAA2D;AAC3D,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9B,MAAM,iBAAiB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACzC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAC7B,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3D,4DAA4D;AAC5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAI7D,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,SAAS,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;IACtD,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IACnC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;IAC9F,IAAI,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,CAAC,SAAyC,EAAE,EAAE,CAChE,GAAG,MAAM,eAAe,SAAS,CAAC,IAAI,WAAW,CAAC;IAEpD,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,CAAC;QACtB,MAAM;QACN,sBAAsB,EAAE,GAAG,MAAM,YAAY;QAC7C,cAAc,EAAE,GAAG,MAAM,QAAQ;QACjC,iBAAiB,EAAE,GAAG,MAAM,WAAW;QACvC,QAAQ,EAAE,GAAG,MAAM,wBAAwB;QAC3C,qBAAqB,EAAE,GAAG,MAAM,WAAW;QAC3C,gBAAgB,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC;QAChD,wBAAwB,EAAE,CAAC,MAAM,CAAC;QAClC,wBAAwB,EAAE,CAAC,OAAO,CAAC;QACnC,qBAAqB,EAAE,CAAC,oBAAoB,CAAC;QAC7C,uBAAuB,EAAE,CAAC,UAAU,CAAC;QACrC,qCAAqC,EAAE,CAAC,iBAAiB,CAAC;QAC1D,qCAAqC,EAAE,CAAC,oBAAoB,EAAE,qBAAqB,CAAC;QACpF,gCAAgC,EAAE,CAAC,MAAM,CAAC;QAC1C,gBAAgB,EAAE;YAChB,KAAK;YACL,KAAK;YACL,KAAK;YACL,KAAK;YACL,KAAK;YACL,WAAW;YACX,OAAO;YACP,OAAO;YACP,gBAAgB;YAChB,MAAM;YACN,SAAS;YACT,WAAW;SACZ;QACD,8CAA8C,EAAE,IAAI;QACpD,0BAA0B,EAAE,KAAK;QACjC,2BAA2B,EAAE,KAAK;QAClC,+BAA+B,EAAE,KAAK;KACvC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,IAAI,EAAE,CAC7C,IAAI,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC,CAClE,CAAC;IAEF,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,IAAI,EAAE,CACxC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,EAAE,eAAe,EAAE,qBAAqB,EAAE,CAAC,CAC5E,CAAC;IAEF,mFAAmF;IACnF,KAAK,UAAU,cAAc,CAC3B,GAAQ,EACR,IAUC;QAED,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QACpC,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAChF,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC/B,OAAO,gBAAgB,CAAC;gBACtB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,mBAAmB,CAAC;gBACjC,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,UAAU,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACrD,OAAO,kBAAkB,CAAC;gBACxB,GAAG,IAAI;gBACP,KAAK,EAAE,gBAAgB;gBACvB,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,2EAA2E;aAC3G,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC;YAChC,SAAS;YACT,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC;YACnC,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE;YACzE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,SAAS,EAAE,SAAS,CAAC,IAAI;YACzB,iBAAiB,EAAE,MAAM,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC;YAC/C,oBAAoB,EAAE,KAAK,CAAC,YAAY;YACxC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YACpE,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,KAAK,KAAK,WAAW;gBACjC,CAAC,CAAC,SAAS,CACP,mBAAmB,EACnB,2DAA2D,EAC3D,GAAG,CACJ;gBACH,CAAC,CAAC,kBAAkB,CAAC;oBACjB,GAAG,IAAI;oBACP,KAAK,EAAE,eAAe;oBACtB,WAAW,EAAE,eAAe,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,GAAG;iBAC3F,CAAC,CAAC;QACT,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAED,KAAK,UAAU,OAAO,CAAC,GAAQ,EAAE,KAAa;QAC5C,OAAO,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QACzD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,UAAU,CACf,GAAG,EACH,iBAAiB,EACjB,mDAAmD,CACpD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,SAAS,CAAC,yBAAyB,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9F,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CACd,gBAAgB,EAChB,qDAAqD,EACrD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,6FAA6F;QAC7F,IAAI,MAAM,CAAC,WAAW,KAAK,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACpD,OAAO,SAAS,CACd,sBAAsB,EACtB,6DAA6D,EAC7D,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG;YACX,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,MAAM;YACN,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;SACxC,CAAC;QACF,MAAM,IAAI,GAAG,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,OAAO,kBAAkB,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,kBAAkB,CAAC;gBACxB,GAAG,IAAI;gBACP,KAAK,EAAE,cAAc;gBACrB,WAAW,EAAE,2BAA2B;aACzC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvC,2EAA2E;YAC3E,OAAO,kBAAkB,CAAC;gBACxB,GAAG,IAAI;gBACP,KAAK,EAAE,gBAAgB;gBACvB,WAAW,EAAE,wCAAwC;aACtD,CAAC,CAAC;QACL,CAAC;QACD,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;QAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE;YACnD,SAAS;YACT,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;YACtE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa;YACvC,UAAU;YACV,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG,GAAG,mBAAmB;SACrC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG;YACb,SAAS;YACT,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK;YACvB,UAAU;SACX,CAAC;QACF,+FAA+F;QAC/F,kEAAkE;QAClE,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxF,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC7E,MAAM,MAAM,GAAG,KAAK,IAAI,IAAI,CAAC;YAC7B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,OAAO,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9F,CAAC;QACH,CAAC;QACD,OAAO,WAAW,CAAC;YACjB,OAAO,EAAE,GAAG,CAAC,IAAI;YACjB,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,UAAU,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBACvD,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,KAAK,EAAE,SAAS,CAAC,KAAK;gBACtB,IAAI,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,kBAAkB,CAAC,SAAS,CAAC,cAAc,kBAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;aACtH,CAAC,CAAC;YACH,QAAQ,EAAE,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,kBAAkB,CAAC,SAAS,CAAC,SAAS;SACjF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,mFAAmF;IACnF,MAAM,cAAc,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QAC9D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7E,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CACd,mBAAmB,EACnB,uEAAuE,EACvE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9E,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YAC1C,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YACrE,OAAO,kBAAkB,CAAC;gBACxB,GAAG,IAAI;gBACP,KAAK,EAAE,eAAe;gBACtB,WAAW,EAAE,iCAAiC;aAC/C,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YACjE,OAAO,SAAS,CACd,kBAAkB,EAClB,mDAAmD,EACnD,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC,mBAAmB,EAAE,wCAAwC,EAAE,GAAG,CAAC,CAAC;QACvF,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,kBAAkB,CAAC;gBACxB,GAAG,IAAI;gBACP,KAAK,EAAE,cAAc;gBACrB,WAAW,EAAE,2BAA2B;aACzC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,cAAc,CAAC,GAAG,EAAE;YAC/B,SAAS;YACT,OAAO,EAAE;gBACP,SAAS;gBACT,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B;YACD,OAAO,EAAE,GAAG,CAAC,IAAI;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,SAAS,gBAAgB,CAAC,SAAyC;QACjE,OAAO,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;YAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,OAAO,SAAS,CAAC,kBAAkB,EAAE,6BAA6B,EAAE,GAAG,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE;gBACxE,iBAAiB,EAAE,MAAM,SAAS,CAAC,KAAK,CAAC;gBACzC,GAAG;aACJ,CAAC,CAAC;YACH,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,SAAS,CACd,mBAAmB,EACnB,oFAAoF,EACpF,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,kBAAkB,CAAC;oBACxB,GAAG,IAAI;oBACP,KAAK,EAAE,eAAe;oBACtB,WAAW,EAAE,sBAAsB;iBACpC,CAAC,CAAC;YACL,CAAC;YACD,IAAI,QAA0B,CAAC;YAC/B,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,cAAc,CAAC;oBAC9B,SAAS;oBACT,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC;oBACnC,UAAU,EAAE,GAAG;oBACf,KAAK;oBACL,YAAY,EAAE,KAAK,CAAC,oBAAoB;oBACxC,KAAK,EAAE,KAAK,CAAC,aAAa;iBAC3B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC;gBACtF,IAAI,KAAK,YAAY,KAAK,CAAC,0BAA0B,EAAE,CAAC;oBACtD,OAAO,kBAAkB,CAAC;wBACxB,GAAG,IAAI;wBACP,KAAK,EAAE,KAAK,CAAC,KAAK,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,cAAc;wBACzE,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,aAAa,KAAK,CAAC,KAAK,GAAG;qBAC3D,CAAC,CAAC;gBACL,CAAC;gBACD,OAAO,CAAC,KAAK,CAAC,cAAc,SAAS,CAAC,IAAI,UAAU,EAAE,KAAK,CAAC,CAAC;gBAC7D,OAAO,kBAAkB,CAAC;oBACxB,GAAG,IAAI;oBACP,KAAK,EAAE,cAAc;oBACrB,WAAW,EAAE,GAAG,SAAS,CAAC,KAAK,kBAAkB;iBAClD,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YAC7B,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,QAAQ,EAAE;gBACvE,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,QAAQ,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,GAAG,QAAQ,EAAE;gBACpD,QAAQ,EAAE,GAAG;gBACb,QAAQ,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC;gBAC/B,aAAa,EAAE,GAAG,GAAG,WAAW;gBAChC,GAAG;aACJ,CAAC,CAAC;YACH,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC;gBAClB,OAAO,kBAAkB,CAAC;oBACxB,GAAG,IAAI;oBACP,KAAK,EAAE,eAAe;oBACtB,WAAW,EAAE,sBAAsB;iBACpC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,qBAAqB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,cAAc,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAClD,CAAC,SAAS,EAA+B,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,OAAO,CACvE,CAAC;IAEF,MAAM,SAAS,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QACzD,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,SAAS,CAAC,gBAAgB,EAAE,kCAAkC,EAAE,GAAG,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CAAC,cAAc,EAAE,qDAAqD,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7E,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,SAAS,CACd,mBAAmB,EACnB,uEAAuE,EACvE,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;QAC9E,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,kBAAkB,CAAC;gBACxB,GAAG,IAAI;gBACP,KAAK,EAAE,cAAc;gBACrB,WAAW,EAAE,2BAA2B;aACzC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1D,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,OAAO,gBAAgB,CAAC;oBACtB,OAAO,EAAE,GAAG,CAAC,IAAI;oBACjB,MAAM;oBACN,SAAS;oBACT,KAAK,EAAE,8BAA8B;iBACtC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,UAAU,EAAE;gBACvE,SAAS;gBACT,SAAS,EAAE,cAAc,CAAC,IAAI;gBAC9B,KAAK,EAAE,OAAO;gBACd,aAAa,EAAE,MAAM,SAAS,CAAC,IAAI,CAAC;gBACpC,kBAAkB,EAAE,GAAG,GAAG,iBAAiB;gBAC3C,GAAG;aACJ,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,OAAO,OAAO,CAAC,KAAK,KAAK,WAAW;oBAClC,CAAC,CAAC,SAAS,CACP,mBAAmB,EACnB,2DAA2D,EAC3D,GAAG,CACJ;oBACH,CAAC,CAAC,kBAAkB,CAAC;wBACjB,GAAG,IAAI;wBACP,KAAK,EAAE,eAAe;wBACtB,WAAW,EAAE,sBAAsB;qBACpC,CAAC,CAAC;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACrF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,4BAA4B,EAAE,KAAK,CAAC,CAAC;gBACnD,OAAO,SAAS,CACd,gBAAgB,EAChB,oDAAoD,EACpD,GAAG,CACJ,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAClC,OAAO,gBAAgB,CAAC;oBACtB,OAAO,EAAE,GAAG,CAAC,IAAI;oBACjB,MAAM;oBACN,SAAS;oBACT,KAAK,EAAE,uBAAuB;iBAC/B,CAAC,CAAC;YACL,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAChD,MAAM,iBAAiB,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,eAAe,EAAE;gBAC3E,SAAS;gBACT,aAAa,EAAE,MAAM,SAAS,CAAC,KAAK,CAAC;gBACrC,WAAW,EAAE,kBAAkB;gBAC/B,QAAQ,EAAE,MAAM,SAAS,CAAC,iBAAiB,CAAC;gBAC5C,aAAa,EAAE,GAAG,GAAG,WAAW;gBAChC,GAAG;aACJ,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;gBACd,OAAO,qBAAqB,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAC;gBACrB,KAAK,YAAY;oBACf,OAAO,aAAa,CAAC;wBACnB,OAAO,EAAE,GAAG,CAAC,IAAI;wBACjB,MAAM;wBACN,SAAS;wBACT,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,KAAK,EAAE,yBAAyB;qBACjC,CAAC,CAAC;gBACL,KAAK,cAAc;oBACjB,OAAO,gBAAgB,CAAC;wBACtB,OAAO,EAAE,GAAG,CAAC,IAAI;wBACjB,MAAM;wBACN,SAAS;wBACT,KAAK,EAAE,sCAAsC;qBAC9C,CAAC,CAAC;gBACL,KAAK,QAAQ;oBACX,OAAO,kBAAkB,CAAC;wBACxB,GAAG,IAAI;wBACP,KAAK,EAAE,eAAe;wBACtB,WAAW,EAAE,uBAAuB;qBACrC,CAAC,CAAC;gBACL,KAAK,SAAS;oBACZ,OAAO,kBAAkB,CAAC;wBACxB,GAAG,IAAI;wBACP,KAAK,EAAE,eAAe;wBACtB,WAAW,EAAE,sBAAsB;qBACpC,CAAC,CAAC;gBACL,KAAK,cAAc;oBACjB,OAAO,gBAAgB,CAAC;wBACtB,OAAO,EAAE,GAAG,CAAC,IAAI;wBACjB,MAAM;wBACN,SAAS;wBACT,KAAK,EAAE,uBAAuB;qBAC/B,CAAC,CAAC;gBACL,KAAK,WAAW;oBACd,OAAO,SAAS,CACd,mBAAmB,EACnB,2DAA2D,EAC3D,GAAG,CACJ,CAAC;gBACJ;oBACE,OAAO,MAAsB,CAAC;YAClC,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC,cAAc,EAAE,eAAe,EAAE,GAAG,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QACxD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,UAAU,CACf,GAAG,EACH,eAAe,EACf,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE;YAC/D,SAAS,EAAE,MAAM,SAAS,CAAC,KAAK,CAAC;YACjC,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,OAAO,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,+CAA+C,CAAC,CAAC;QAC3F,CAAC;QACD,IAAI,OAAgB,CAAC;QACrB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,UAAU,CAAC,GAAG,EAAE,yBAAyB,EAAE,gCAAgC,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,UAAU,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;QAC5D,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,oBAAoB,CAAC,EAAE,CAAC;YACjD,OAAO,UAAU,CACf,GAAG,EACH,sBAAsB,EACtB,aAAa,IAAI,gCAAgC,CAClD,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;QACzC,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE;YAC9C,QAAQ;YACR,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,MAAM,SAAS,CAAC,YAAY,CAAC;YACzC,uBAAuB,EAAE,UAAU,CAAC,KAAK,CAAC,uBAAuB;YACjE,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW;YACzC,cAAc,EAAE,UAAU,CAAC,KAAK,CAAC,cAAc;YAC/C,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU;YACvC,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,eAAe;YACjD,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QACH,OAAO,IAAI,CACT;YACE,SAAS,EAAE,QAAQ;YACnB,aAAa,EAAE,YAAY;YAC3B,mBAAmB,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC;YAC3C,wBAAwB,EAAE,CAAC;YAC3B,aAAa,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC;YAC7C,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU;YACxC,WAAW,EAAE,GAAG,CAAC,KAAK;YACtB,gBAAgB,EAAE,UAAU,CAAC,KAAK,CAAC,eAAe;YAClD,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,cAAc;YAChD,0BAA0B,EAAE,UAAU,CAAC,KAAK,CAAC,uBAAuB;YACpE,WAAW,EAAE,CAAC,oBAAoB,CAAC;YACnC,cAAc,EAAE,CAAC,MAAM,CAAC;SACzB,EACD,GAAG,CACJ,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE;QACrD,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QAC7E,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,mCAAmC,CAAC,EAAE,CAAC;YACjE,OAAO,UAAU,CACf,GAAG,EACH,iBAAiB,EACjB,qDAAqD,CACtD,CAAC;QACJ,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,UAAU,GAAG,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,OAAO,UAAU,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,GAAG,EAAE;YACvD,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ;SACpC,CAAC,CAAC;QACH,IACE,MAAM,KAAK,IAAI;YACf,MAAM,CAAC,uBAAuB,KAAK,UAAU,CAAC,KAAK,CAAC,MAAM;YAC1D,MAAM,CAAC,UAAU,KAAK,CAAC,MAAM,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EACtE,CAAC;YACD,OAAO,UAAU,CAAC,GAAG,EAAE,gBAAgB,EAAE,+BAA+B,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE;YAC1E,QAAQ,EAAE,MAAM,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;YAChD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS;gBAC5C,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YAClD,YAAY,EAAE,UAAU,CAAC,KAAK,CAAC,YAAY;YAC3C,GAAG;SACJ,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO,UAAU,CAAC,GAAG,EAAE,eAAe,EAAE,QAAQ,CAAC,WAAW,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC;YAChC,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS;YACtC,UAAU,EAAE,QAAQ,CAAC,QAAQ,CAAC,UAAU;YACxC,IAAI,EAAE,IAAI,CAAC,YAAY;SACxB,CAAC,CAAC;QACH,MAAM,MAAM,GAAmB,EAAE,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QAC/E,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,CAAC,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YACvC,MAAM,CAAC,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC,aAAa,KAAK,IAAI,CAAC;QACnE,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;QACvC,CAAC;QACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC5C,MAAM,CAAC,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;QAC7C,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC/C,WAAW,CAAC;gBACV,MAAM,EAAE,IAAI;gBACZ,MAAM;gBACN,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM;gBACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,KAAK,EAAE,QAAQ,CAAC,KAAK;aACtB,CAAC;YACF,eAAe,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;SAC7E,CAAC,CAAC;QACH,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE;YAC9C,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,SAAS;YACtC,GAAG;YACH,EAAE,EAAE,GAAG;SACR,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;YACV,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,QAAQ;YACpB,UAAU,EAAE,iBAAiB;YAC7B,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,QAAQ,CAAC,KAAK;SACtB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;QACzD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC;QACrE,MAAM,MAAM,GACV,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAChG,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,IAAI,CACT;gBACE,KAAK,EAAE,eAAe;gBACtB,iBAAiB,EAAE,kDAAkD;aACtE,EACD,GAAG,EACH;gBACE,kBAAkB,EAAE,8BAA8B;aACnD,CACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,kDAAkD;QAClD,aAAa,CAAC,IAAgB;YAC5B,IAAI,CAAC,KAAK,CAAC;gBACT,IAAI,EAAE,IAAI,CAAC,mCAAmC,CAAC;gBAC/C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC;gBACT,IAAI,EAAE,0CAA0C,MAAM,EAAE;gBACxD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,SAAS;aACnB,CAAC,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,wBAAwB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5E,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAC7E,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;YAChF,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACrE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC1E,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;YAC3E,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC5C,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC/B,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,mBAAmB,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;gBACtF,CAAC;qBAAM,CAAC;oBACN,IAAI,CAAC,KAAK,CAAC;wBACT,IAAI,EAAE,IAAI,CAAC,eAAe,SAAS,CAAC,IAAI,WAAW,CAAC;wBACpD,MAAM,EAAE,KAAK;wBACb,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC;qBACrC,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED;;;WAGG;QACH,KAAK;YACH,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACvD,OAAO;gBACL,SAAS,EAAE,uBAAuB,CAAC;oBACjC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,oBAAoB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;oBACtF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC;oBACtC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;wBAC3B,MAAM,IAAI,GACR,IAAI,CAAC,IAAI;6BACN,WAAW,EAAE;6BACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;6BAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC;wBACpC,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC;6BACpC,WAAW,EAAE;6BACb,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;6BACzB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;wBACjB,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE;4BAC3C,KAAK;4BACL,IAAI,EAAE,IAAI,CAAC,IAAI;4BACf,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;4BAC/C,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;yBACtB,CAAC,CAAC;wBACH,OAAO,EAAE,KAAK,EAAE,CAAC;oBACnB,CAAC;iBACF,CAAC;gBACF,qBAAqB,EAAE,uBAAuB,CAAC;oBAC7C,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,aAAa,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE;oBAC5D,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;oBAC3D,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;wBAC3B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;wBACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBACvB,MAAM,SAAS,GACb,GAAG;4BACH,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS;gCAC/B,CAAC,CAAC,yBAAyB;gCAC3B,CAAC,CAAC,IAAI,CAAC,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;wBAChD,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,YAAY,CAAC,SAAS,EAAE;4BACtD,SAAS,EAAE,MAAM,SAAS,CAAC,KAAK,CAAC;4BACjC,KAAK,EAAE,IAAI,CAAC,KAAK;4BACjB,SAAS;4BACT,SAAS,EAAE,GAAG;yBACf,CAAC,CAAC;wBACH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;oBAC9B,CAAC;iBACF,CAAC;gBACF,uBAAuB,EAAE,uBAAuB,CAAC;oBAC/C,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,oBAAoB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;oBAChE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;oBACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;wBAC3B,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,uBAAuB,EAAE;4BAC5D,KAAK,EAAE,IAAI,CAAC,KAAK;4BACjB,oBAAoB,EAAE,IAAI,CAAC,oBAAoB;yBAChD,CAAC,CAAC;wBACH,OAAO,IAAI,CAAC;oBACd,CAAC;iBACF,CAAC;gBACF,SAAS,EAAE,uBAAuB,CAAC;oBACjC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBACzB,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;oBACjB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;wBAC3B,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;wBACpE,OAAO,IAAI,CAAC;oBACd,CAAC;iBACF,CAAC;gBACF,QAAQ,EAAE,oBAAoB,CAAC;oBAC7B,IAAI,EAAE,EAAE;oBACR,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;iBACpE,CAAC;gBACF,WAAW,EAAE,oBAAoB,CAAC;oBAChC,IAAI,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE;oBACzB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,CAC3B,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;iBACzE,CAAC;gBACF,OAAO,EAAE,uBAAuB,CAAC;oBAC/B,IAAI,EAAE,EAAE;oBACR,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CACrB,MAAM,GAAG,CAAC,WAAW,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE;wBACjD,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE;wBACf,qBAAqB,EAAE,yBAAyB;wBAChD,iBAAiB,EAAE,oBAAoB;qBACxC,CAAC;iBACL,CAAC;aACH,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/client/jwt.d.ts

@@ -0,0 +1,31 @@
+import { type KeySet } from "./keys.js";
+/** Both tokens live this long: the app's callback redeems the code and the id_token at once. */
+export declare const TOKEN_TTL_SECONDS: number;
+export type IdentityClaims = {
+    sub: string;
+    connector: string;
+    email?: string;
+    email_verified?: boolean;
+    name?: string;
+    picture?: string;
+};
+export declare function signIdToken(args: {
+    keySet: KeySet;
+    issuer: string;
+    clientId: string;
+    claims: IdentityClaims;
+    authTime: number;
+    nonce: string | undefined;
+}): Promise<string>;
+/** The access token for /userinfo: the same claims, with the issuer itself as the audience. */
+export declare function signAccessToken(args: {
+    keySet: KeySet;
+    issuer: string;
+    clientId: string;
+    claims: IdentityClaims;
+}): Promise<string>;
+export declare function verifyAccessToken(args: {
+    keySet: KeySet;
+    issuer: string;
+    token: string;
+}): Promise<IdentityClaims | null>;

package/dist/client/jwt.js

@@ -0,0 +1,55 @@
+import { createLocalJWKSet, jwtVerify, SignJWT } from "jose";
+import { importSigningKey, publicJwks, SIGNING_ALGORITHM } from "./keys.js";
+/** Both tokens live this long: the app's callback redeems the code and the id_token at once. */
+export const TOKEN_TTL_SECONDS = 5 * 60;
+async function sign(keySet, payload, issuer, audience) {
+    const { kid, key } = await importSigningKey(keySet);
+    return await new SignJWT(payload)
+        .setProtectedHeader({ alg: SIGNING_ALGORITHM, kid, typ: "JWT" })
+        .setIssuer(issuer)
+        .setAudience(audience)
+        .setIssuedAt()
+        .setExpirationTime(`${TOKEN_TTL_SECONDS}s`)
+        .sign(key);
+}
+export async function signIdToken(args) {
+    return await sign(args.keySet, {
+        ...args.claims,
+        auth_time: Math.floor(args.authTime / 1000),
+        ...(args.nonce === undefined ? {} : { nonce: args.nonce }),
+    }, args.issuer, args.clientId);
+}
+/** The access token for /userinfo: the same claims, with the issuer itself as the audience. */
+export async function signAccessToken(args) {
+    return await sign(args.keySet, { ...args.claims, client_id: args.clientId }, args.issuer, args.issuer);
+}
+export async function verifyAccessToken(args) {
+    try {
+        const { payload } = await jwtVerify(args.token, createLocalJWKSet(publicJwks(args.keySet)), {
+            issuer: args.issuer,
+            audience: args.issuer,
+            algorithms: [SIGNING_ALGORITHM],
+        });
+        if (typeof payload.sub !== "string" || typeof payload["connector"] !== "string") {
+            return null;
+        }
+        const claims = { sub: payload.sub, connector: payload["connector"] };
+        if (typeof payload["email"] === "string") {
+            claims.email = payload["email"];
+        }
+        if (typeof payload["email_verified"] === "boolean") {
+            claims.email_verified = payload["email_verified"];
+        }
+        if (typeof payload["name"] === "string") {
+            claims.name = payload["name"];
+        }
+        if (typeof payload["picture"] === "string") {
+            claims.picture = payload["picture"];
+        }
+        return claims;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=jwt.js.map

package/dist/client/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../src/client/jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,OAAO,EAAmB,MAAM,MAAM,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAe,MAAM,WAAW,CAAC;AAEzF,gGAAgG;AAChG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,CAAC;AAWxC,KAAK,UAAU,IAAI,CAAC,MAAc,EAAE,OAAmB,EAAE,MAAc,EAAE,QAAgB;IACvF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACpD,OAAO,MAAM,IAAI,OAAO,CAAC,OAAO,CAAC;SAC9B,kBAAkB,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC/D,SAAS,CAAC,MAAM,CAAC;SACjB,WAAW,CAAC,QAAQ,CAAC;SACrB,WAAW,EAAE;SACb,iBAAiB,CAAC,GAAG,iBAAiB,GAAG,CAAC;SAC1C,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAOjC;IACC,OAAO,MAAM,IAAI,CACf,IAAI,CAAC,MAAM,EACX;QACE,GAAG,IAAI,CAAC,MAAM;QACd,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;KAC3D,EACD,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,QAAQ,CACd,CAAC;AACJ,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAKrC;IACC,OAAO,MAAM,IAAI,CACf,IAAI,CAAC,MAAM,EACX,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAC5C,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,MAAM,CACZ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAIvC;IACC,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE;YAC1F,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,MAAM;YACrB,UAAU,EAAE,CAAC,iBAAiB,CAAC;SAChC,CAAC,CAAC;QACH,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;YAChF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAmB,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACrF,IAAI,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzC,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAClC,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,gBAAgB,CAAC,KAAK,SAAS,EAAE,CAAC;YACnD,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,OAAO,OAAO,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3C,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/client/keys.d.ts

@@ -0,0 +1,44 @@
+import { type CryptoKey, type JWK } from "jose";
+export declare const SIGNING_ALGORITHM = "RS256";
+/** How long a retired key's public half stays in the JWKS: longer than any token it signed lives. */
+export declare const KEY_OVERLAP_MS: number;
+/**
+ * The content of the `IDENTITY_BROKER_KEYS` env var: one current private key, the public halves of
+ * recently retired keys, and the pairwise salt. `identity-broker keys` writes it.
+ */
+export type KeySet = {
+    version: 1;
+    /** Created once with the first key set and never rotated: a new salt changes every subject. */
+    pairwiseSalt: string;
+    keys: Array<{
+        kid: string;
+        status: "current";
+        privateJwk: JWK;
+    } | {
+        kid: string;
+        status: "retired";
+        retiredAt: number;
+        publicJwk: JWK;
+    }>;
+};
+/** A new key set: one current key and a salt. */
+export declare function createKeySet(): Promise<KeySet>;
+/**
+ * Rotation: the current key keeps only its public half and a retirement time, a new key becomes
+ * current, and keys retired longer than the overlap window drop out. The salt never changes.
+ */
+export declare function rotateKeySet(keySet: KeySet, now?: number): Promise<KeySet>;
+/** Parses the env var. Throws on anything that is not a complete key set: a hub without keys is down. */
+export declare function parseKeySet(raw: string | undefined): KeySet;
+export declare function currentKey(keySet: KeySet): {
+    kid: string;
+    privateJwk: JWK;
+};
+export declare function importSigningKey(keySet: KeySet): Promise<{
+    kid: string;
+    key: CryptoKey;
+}>;
+/** The public JWKS: the current key and the retired keys still inside the overlap window. */
+export declare function publicJwks(keySet: KeySet, now?: number): {
+    keys: JWK[];
+};

package/dist/client/keys.js

@@ -0,0 +1,130 @@
+import { exportJWK, generateKeyPair, importJWK } from "jose";
+import { asRecord } from "./protocol.js";
+export const SIGNING_ALGORITHM = "RS256";
+/** How long a retired key's public half stays in the JWKS: longer than any token it signed lives. */
+export const KEY_OVERLAP_MS = 14 * 24 * 60 * 60 * 1000;
+const PRIVATE_MEMBERS = ["d", "p", "q", "dp", "dq", "qi", "oth"];
+function publicHalf(jwk) {
+    const copy = { ...jwk };
+    for (const member of PRIVATE_MEMBERS) {
+        delete copy[member];
+    }
+    return copy;
+}
+function randomKid() {
+    const bytes = new Uint8Array(12);
+    crypto.getRandomValues(bytes);
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function randomSalt() {
+    const bytes = new Uint8Array(32);
+    crypto.getRandomValues(bytes);
+    return btoa(String.fromCharCode(...bytes))
+        .replace(/\+/g, "-")
+        .replace(/\//g, "_")
+        .replace(/=+$/, "");
+}
+async function freshKey() {
+    const kid = randomKid();
+    const { privateKey } = await generateKeyPair(SIGNING_ALGORITHM, { extractable: true });
+    const privateJwk = await exportJWK(privateKey);
+    return { kid, privateJwk: { ...privateJwk, kid, alg: SIGNING_ALGORITHM, use: "sig" } };
+}
+/** A new key set: one current key and a salt. */
+export async function createKeySet() {
+    const key = await freshKey();
+    return { version: 1, pairwiseSalt: randomSalt(), keys: [{ status: "current", ...key }] };
+}
+/**
+ * Rotation: the current key keeps only its public half and a retirement time, a new key becomes
+ * current, and keys retired longer than the overlap window drop out. The salt never changes.
+ */
+export async function rotateKeySet(keySet, now = Date.now()) {
+    const key = await freshKey();
+    const kept = keySet.keys.flatMap((entry) => {
+        if (entry.status === "current") {
+            return [
+                {
+                    kid: entry.kid,
+                    status: "retired",
+                    retiredAt: now,
+                    publicJwk: publicHalf(entry.privateJwk),
+                },
+            ];
+        }
+        return entry.retiredAt + KEY_OVERLAP_MS > now ? [entry] : [];
+    });
+    return {
+        version: 1,
+        pairwiseSalt: keySet.pairwiseSalt,
+        keys: [{ status: "current", ...key }, ...kept],
+    };
+}
+function isJwk(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        typeof value.kty === "string");
+}
+/** Parses the env var. Throws on anything that is not a complete key set: a hub without keys is down. */
+export function parseKeySet(raw) {
+    if (raw === undefined || raw.trim().length === 0) {
+        throw new Error("IDENTITY_BROKER_KEYS is not set; run `identity-broker keys` and store its output");
+    }
+    const record = asRecord(JSON.parse(raw));
+    if (record["version"] !== 1 ||
+        typeof record["pairwiseSalt"] !== "string" ||
+        !Array.isArray(record["keys"])) {
+        throw new Error("IDENTITY_BROKER_KEYS is not a version 1 key set");
+    }
+    const keys = record["keys"].map((entry) => {
+        const key = asRecord(entry);
+        if (typeof key["kid"] !== "string") {
+            throw new Error("IDENTITY_BROKER_KEYS has a key without kid");
+        }
+        if (key["status"] === "current" && isJwk(key["privateJwk"])) {
+            return { kid: key["kid"], status: "current", privateJwk: key["privateJwk"] };
+        }
+        if (key["status"] === "retired" &&
+            typeof key["retiredAt"] === "number" &&
+            isJwk(key["publicJwk"])) {
+            return {
+                kid: key["kid"],
+                status: "retired",
+                retiredAt: key["retiredAt"],
+                publicJwk: key["publicJwk"],
+            };
+        }
+        throw new Error(`IDENTITY_BROKER_KEYS key "${key["kid"]}" is neither current nor retired`);
+    });
+    if (keys.filter((key) => key.status === "current").length !== 1) {
+        throw new Error("IDENTITY_BROKER_KEYS must hold exactly one current key");
+    }
+    return { version: 1, pairwiseSalt: record["pairwiseSalt"], keys };
+}
+export function currentKey(keySet) {
+    const key = keySet.keys.find((entry) => entry.status === "current");
+    if (key === undefined || key.status !== "current") {
+        throw new Error("The key set has no current key");
+    }
+    return { kid: key.kid, privateJwk: key.privateJwk };
+}
+export async function importSigningKey(keySet) {
+    const { kid, privateJwk } = currentKey(keySet);
+    const key = await importJWK(privateJwk, SIGNING_ALGORITHM);
+    if (typeof key === "string" || !("type" in key)) {
+        throw new Error("The current key is not an asymmetric key");
+    }
+    return { kid, key };
+}
+/** The public JWKS: the current key and the retired keys still inside the overlap window. */
+export function publicJwks(keySet, now = Date.now()) {
+    return {
+        keys: keySet.keys.flatMap((entry) => {
+            if (entry.status === "current") {
+                return [publicHalf(entry.privateJwk)];
+            }
+            return entry.retiredAt + KEY_OVERLAP_MS > now ? [{ ...entry.publicJwk, kid: entry.kid }] : [];
+        }),
+    };
+}
+//# sourceMappingURL=keys.js.map

package/dist/client/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/client/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAA4B,MAAM,MAAM,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAEzC,qGAAqG;AACrG,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAgBvD,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAU,CAAC;AAE1E,SAAS,UAAU,CAAC,GAAQ;IAC1B,MAAM,IAAI,GAAQ,EAAE,GAAG,GAAG,EAAE,CAAC;IAC7B,KAAK,MAAM,MAAM,IAAI,eAAe,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,SAAS;IAChB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC;SACvC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,QAAQ;IACrB,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,iBAAiB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;AACzF,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC7B,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,EAAE,CAAC,EAAE,CAAC;AAC3F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACjE,MAAM,GAAG,GAAG,MAAM,QAAQ,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACzC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO;gBACL;oBACE,GAAG,EAAE,KAAK,CAAC,GAAG;oBACd,MAAM,EAAE,SAAkB;oBAC1B,SAAS,EAAE,GAAG;oBACd,SAAS,EAAE,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC;iBACxC;aACF,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC,SAAS,GAAG,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,OAAO;QACL,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAQ,KAA2B,CAAC,GAAG,KAAK,QAAQ,CACrD,CAAC;AACJ,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,IACE,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACvB,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ;QAC1C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAc,EAA0B,EAAE;QACzE,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YAC5D,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/E,CAAC;QACD,IACE,GAAG,CAAC,QAAQ,CAAC,KAAK,SAAS;YAC3B,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ;YACpC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EACvB,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC;gBACf,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC;gBAC3B,SAAS,EAAE,GAAG,CAAC,WAAW,CAAC;aAC5B,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,CAAC,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACpE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc;IACnD,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAC3D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACzD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;YAClC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAC/B,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;YACxC,CAAC;YACD,OAAO,KAAK,CAAC,SAAS,GAAG,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChG,CAAC,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/client/protocol.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Request validation for the OpenID Provider endpoints: pure functions over URLs, form bodies and
+ * headers, with the error shapes the handlers turn into OAuth responses.
+ */
+export type Validation<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+    description: string;
+};
+export declare const TOKEN_ENDPOINT_AUTH_METHODS: readonly ["client_secret_post", "client_secret_basic"];
+export type TokenEndpointAuthMethod = (typeof TOKEN_ENDPOINT_AUTH_METHODS)[number];
+export declare const DEPLOYMENT_TYPES: readonly ["production", "development", "preview"];
+export type DeploymentType = (typeof DEPLOYMENT_TYPES)[number];
+/** The own enumerable entries of a JSON value, or an empty record for anything but an object. */
+export declare function asRecord(value: unknown): Record<string, unknown>;
+/** A redirect URI: absolute, no fragment, https, or http on a loopback host for local development. */
+export declare function parseRedirectUri(value: string): URL | null;
+/**
+ * Whether `hostname` is covered by one of an app's allowed callback hosts: an exact host, or a
+ * `*.suffix` pattern whose wildcard stands for exactly one leading label.
+ */
+export declare function hostAllowed(hostname: string, allowedHosts: readonly string[]): boolean;
+export type RegistrationInput = {
+    redirectUri: string;
+    clientName: string;
+    softwareVersion: string;
+    deploymentType: DeploymentType;
+    tokenEndpointAuthMethod: TokenEndpointAuthMethod;
+};
+/** RFC 7591 registration metadata as this provider accepts it: one redirect URI per client. */
+export declare function validateRegistration(payload: unknown): Validation<RegistrationInput>;
+export type AuthorizeInput = {
+    clientId: string;
+    redirectUri: string;
+    scopes: string[];
+    state: string | undefined;
+    nonce: string | undefined;
+    codeChallenge: string;
+    prompt: string[];
+    maxAge: number | undefined;
+    connector: string | undefined;
+};
+/**
+ * The first half of /authorize validation: the parameters that identify the client and where to
+ * send errors. Everything else is checked by `validateAuthorizeRest` once the client is known, so
+ * those errors can go back to the registered redirect URI.
+ */
+export declare function validateAuthorizeTarget(params: URLSearchParams): Validation<{
+    clientId: string;
+    redirectUri: string;
+}>;
+export declare function validateAuthorizeRest(params: URLSearchParams, target: {
+    clientId: string;
+    redirectUri: string;
+}): Validation<AuthorizeInput>;
+export type TokenInput = {
+    code: string;
+    redirectUri: string | undefined;
+    codeVerifier: string;
+    client: {
+        clientId: string;
+        clientSecret: string;
+        method: TokenEndpointAuthMethod;
+    };
+};
+/** Client credentials from HTTP Basic (RFC 6749 section 2.3.1) or the form body. */
+export declare function readClientAuthentication(authorization: string | null, params: URLSearchParams): Validation<TokenInput["client"]>;
+export declare function validateTokenRequest(params: URLSearchParams, client: TokenInput["client"]): Validation<TokenInput>;
+export declare function readBearerToken(authorization: string | null): string | null;
+/** An email address as the broker identifies it: trimmed, NFC-normalized, lowercased. */
+export declare function canonicalEmail(value: string): string | null;