@shopify/shopify-app-remix 2.8.0 → 2.8.2

package/dist/esm/server/authenticate/admin/helpers/ensure-session-token-search-param-if-required.mjs

@@ -0,0 +1,17 @@
+import { redirectToBouncePage } from './redirect-to-bounce-page.mjs';
+
+const SESSION_TOKEN_PARAM = 'id_token';
+const ensureSessionTokenSearchParamIfRequired = async (params, request) => {
+    const { api, logger } = params;
+    const url = new URL(request.url);
+    const shop = url.searchParams.get('shop');
+    const searchParamSessionToken = url.searchParams.get(SESSION_TOKEN_PARAM);
+    const isEmbedded = url.searchParams.get('embedded') === '1';
+    if (api.config.isEmbeddedApp && isEmbedded && !searchParamSessionToken) {
+        logger.debug('Missing session token in search params, going to bounce page', { shop });
+        redirectToBouncePage(params, url);
+    }
+};
+
+export { ensureSessionTokenSearchParamIfRequired };
+//# sourceMappingURL=ensure-session-token-search-param-if-required.mjs.map

package/dist/esm/server/authenticate/admin/helpers/ensure-session-token-search-param-if-required.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-session-token-search-param-if-required.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/ensure-session-token-search-param-if-required.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAIA,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAE1B,MAAA,uCAAuC,GAAG,OACrD,MAAmB,EACnB,OAAgB,KACd;AACF,IAAA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;IAC3C,MAAM,uBAAuB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAC1E,IAAA,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;IAE5D,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,UAAU,IAAI,CAAC,uBAAuB,EAAE;QACtE,MAAM,CAAC,KAAK,CACV,8DAA8D,EAC9D,EAAC,IAAI,EAAC,CACP,CAAC;AACF,QAAA,oBAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KACnC;AACH;;;;"}

package/dist/esm/server/authenticate/admin/helpers/handle-client-error.mjs

@@ -0,0 +1,28 @@
+import { HttpResponseError } from '@shopify/shopify-api';
+
+function handleClientErrorFactory({ request, onError, }) {
+    return async function handleClientError({ error, params, session, }) {
+        if (error instanceof HttpResponseError !== true) {
+            params.logger.debug(`Got a response error from the API: ${error.message}`);
+            throw error;
+        }
+        params.logger.debug(`Got an HTTP response error from the API: ${error.message}`, {
+            code: error.response.code,
+            statusText: error.response.statusText,
+            body: JSON.stringify(error.response.body),
+        });
+        if (onError) {
+            await onError({ request, session, error });
+        }
+        // forward a minimal copy of the upstream HTTP response instead of an Error:
+        throw new Response(JSON.stringify(error.response.body), {
+            status: error.response.code,
+            headers: {
+                'Content-Type': error.response.headers['Content-Type'],
+            },
+        });
+    };
+}
+
+export { handleClientErrorFactory };
+//# sourceMappingURL=handle-client-error.mjs.map

package/dist/esm/server/authenticate/admin/helpers/handle-client-error.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-client-error.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/handle-client-error.ts"],"sourcesContent":[null],"names":[],"mappings":";;SAKgB,wBAAwB,CAAC,EACvC,OAAO,EACP,OAAO,GACkB,EAAA;IACzB,OAAO,eAAe,iBAAiB,CAAC,EACtC,KAAK,EACL,MAAM,EACN,OAAO,GACR,EAAA;AACC,QAAA,IAAI,KAAK,YAAY,iBAAiB,KAAK,IAAI,EAAE;YAC/C,MAAM,CAAC,MAAM,CAAC,KAAK,CACjB,CAAsC,mCAAA,EAAA,KAAK,CAAC,OAAO,CAAE,CAAA,CACtD,CAAC;AACF,YAAA,MAAM,KAAK,CAAC;SACb;QAED,MAAM,CAAC,MAAM,CAAC,KAAK,CACjB,4CAA4C,KAAK,CAAC,OAAO,CAAA,CAAE,EAC3D;AACE,YAAA,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;AACzB,YAAA,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;YACrC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC1C,SAAA,CACF,CAAC;QAEF,IAAI,OAAO,EAAE;YACX,MAAM,OAAO,CAAC,EAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC,CAAC;SAC1C;;AAGD,QAAA,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;AACtD,YAAA,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;AAC3B,YAAA,OAAO,EAAE;gBACP,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAQ,CAAC,cAAc,CAAW;AAClE,aAAA;AACF,SAAA,CAAC,CAAC;AACL,KAAC,CAAC;AACJ;;;;"}

package/dist/esm/server/authenticate/admin/helpers/redirect-to-auth-page.mjs

@@ -0,0 +1,24 @@
+import { beginAuth } from './begin-auth.mjs';
+import { redirectWithExitIframe } from './redirect-with-exitiframe.mjs';
+import { redirectWithAppBridgeHeaders } from './redirect-with-app-bridge-headers.mjs';
+
+async function redirectToAuthPage(params, request, shop, isOnline = false) {
+    const { config } = params;
+    const url = new URL(request.url);
+    const isEmbeddedRequest = url.searchParams.get('embedded') === '1';
+    const isXhrRequest = request.headers.get('authorization');
+    if (isXhrRequest) {
+        const redirectUri = new URL(config.auth.path, config.appUrl);
+        redirectUri.searchParams.set('shop', shop);
+        redirectWithAppBridgeHeaders(redirectUri.toString());
+    }
+    else if (isEmbeddedRequest) {
+        redirectWithExitIframe(params, request, shop);
+    }
+    else {
+        throw await beginAuth(params, request, isOnline, shop);
+    }
+}
+
+export { redirectToAuthPage };
+//# sourceMappingURL=redirect-to-auth-page.mjs.map

package/dist/esm/server/authenticate/admin/helpers/redirect-to-auth-page.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-to-auth-page.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect-to-auth-page.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAMO,eAAe,kBAAkB,CACtC,MAAmB,EACnB,OAAgB,EAChB,IAAY,EACZ,QAAQ,GAAG,KAAK,EAAA;AAEhB,IAAA,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,CAAC;IAExB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACjC,IAAA,MAAM,iBAAiB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;IACnE,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,YAAY,EAAE;AAChB,QAAA,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC3C,QAAA,4BAA4B,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;KACtD;SAAM,IAAI,iBAAiB,EAAE;AAC5B,QAAA,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;KAC/C;SAAM;QACL,MAAM,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;KACxD;AACH;;;;"}

package/dist/esm/server/authenticate/admin/helpers/redirect-to-bounce-page.mjs

@@ -0,0 +1,17 @@
+import { redirect } from '@remix-run/server-runtime';
+
+const redirectToBouncePage = (params, url) => {
+    const { config } = params;
+    // Make sure we always point to the configured app URL so it also works behind reverse proxies (that alter the Host
+    // header).
+    const searchParams = url.searchParams;
+    searchParams.delete('id_token');
+    searchParams.set('shopify-reload', `${config.appUrl}${url.pathname}?${searchParams.toString()}`);
+    // eslint-disable-next-line no-warning-comments
+    // TODO Make sure this works on chrome without a tunnel (weird HTTPS redirect issue)
+    // https://github.com/orgs/Shopify/projects/6899/views/1?pane=issue&itemId=28376650
+    throw redirect(`${config.auth.patchSessionTokenPath}?${searchParams.toString()}`);
+};
+
+export { redirectToBouncePage };
+//# sourceMappingURL=redirect-to-bounce-page.mjs.map

package/dist/esm/server/authenticate/admin/helpers/redirect-to-bounce-page.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-to-bounce-page.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect-to-bounce-page.ts"],"sourcesContent":[null],"names":[],"mappings":";;MAIa,oBAAoB,GAAG,CAAC,MAAmB,EAAE,GAAQ,KAAW;AAC3E,IAAA,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,CAAC;;;AAIxB,IAAA,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;AACtC,IAAA,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,YAAY,CAAC,GAAG,CACd,gBAAgB,EAChB,CAAG,EAAA,MAAM,CAAC,MAAM,CAAA,EAAG,GAAG,CAAC,QAAQ,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAA,CAAE,CAC7D,CAAC;;;;AAKF,IAAA,MAAM,QAAQ,CACZ,CAAG,EAAA,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAA,CAAA,EAAI,YAAY,CAAC,QAAQ,EAAE,CAAA,CAAE,CAClE,CAAC;AACJ;;;;"}

package/dist/esm/server/authenticate/admin/helpers/redirect-to-shopify-or-app-root.mjs

@@ -0,0 +1,15 @@
+import { redirect } from '@remix-run/server-runtime';
+
+async function redirectToShopifyOrAppRoot(request, params, responseHeaders) {
+    const { api } = params;
+    const url = new URL(request.url);
+    const host = api.utils.sanitizeHost(url.searchParams.get('host'));
+    const shop = api.utils.sanitizeShop(url.searchParams.get('shop'));
+    const redirectUrl = api.config.isEmbeddedApp
+        ? await api.auth.getEmbeddedAppUrl({ rawRequest: request })
+        : `/?shop=${shop}&host=${encodeURIComponent(host)}`;
+    throw redirect(redirectUrl, { headers: responseHeaders });
+}
+
+export { redirectToShopifyOrAppRoot };
+//# sourceMappingURL=redirect-to-shopify-or-app-root.mjs.map

package/dist/esm/server/authenticate/admin/helpers/redirect-to-shopify-or-app-root.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-to-shopify-or-app-root.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect-to-shopify-or-app-root.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAIO,eAAe,0BAA0B,CAC9C,OAAgB,EAChB,MAAmB,EACnB,eAAyB,EAAA;AAEzB,IAAA,MAAM,EAAC,GAAG,EAAC,GAAG,MAAM,CAAC;IACrB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAEjC,IAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAE,CAAC;AACpE,IAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAE,CAAC;AAEpE,IAAA,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa;AAC1C,UAAE,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAC,UAAU,EAAE,OAAO,EAAC,CAAC;UACvD,UAAU,IAAI,CAAA,MAAA,EAAS,kBAAkB,CAAC,IAAI,CAAC,CAAA,CAAE,CAAC;IAEtD,MAAM,QAAQ,CAAC,WAAW,EAAE,EAAC,OAAO,EAAE,eAAe,EAAC,CAAC,CAAC;AAC1D;;;;"}

package/dist/esm/server/authenticate/admin/helpers/redirect-with-app-bridge-headers.mjs

@@ -0,0 +1,15 @@
+import { REAUTH_URL_HEADER } from '../../const.mjs';
+
+function redirectWithAppBridgeHeaders(redirectUri) {
+    throw new Response(undefined, {
+        status: 401,
+        statusText: 'Unauthorized',
+        headers: getAppBridgeHeaders(redirectUri),
+    });
+}
+function getAppBridgeHeaders(url) {
+    return new Headers({ [REAUTH_URL_HEADER]: url });
+}
+
+export { getAppBridgeHeaders, redirectWithAppBridgeHeaders };
+//# sourceMappingURL=redirect-with-app-bridge-headers.mjs.map

package/dist/esm/server/authenticate/admin/helpers/redirect-with-app-bridge-headers.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-with-app-bridge-headers.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect-with-app-bridge-headers.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAEM,SAAU,4BAA4B,CAAC,WAAmB,EAAA;AAC9D,IAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,QAAA,MAAM,EAAE,GAAG;AACX,QAAA,UAAU,EAAE,cAAc;AAC1B,QAAA,OAAO,EAAE,mBAAmB,CAAC,WAAW,CAAC;AAC1C,KAAA,CAAC,CAAC;AACL,CAAC;AAEK,SAAU,mBAAmB,CAAC,GAAW,EAAA;IAC7C,OAAO,IAAI,OAAO,CAAC,EAAC,CAAC,iBAAiB,GAAG,GAAG,EAAC,CAAC,CAAC;AACjD;;;;"}

package/dist/esm/server/authenticate/admin/helpers/redirect-with-exitiframe.mjs

@@ -0,0 +1,19 @@
+import { redirect } from '@remix-run/server-runtime';
+
+function redirectWithExitIframe(params, request, shop) {
+    const { api, config } = params;
+    const url = new URL(request.url);
+    const queryParams = url.searchParams;
+    const host = api.utils.sanitizeHost(queryParams.get('host'));
+    queryParams.set('shop', shop);
+    let destination = `${config.auth.path}?shop=${shop}`;
+    if (host) {
+        queryParams.set('host', host);
+        destination = `${destination}&host=${host}`;
+    }
+    queryParams.set('exitIframe', destination);
+    throw redirect(`${config.auth.exitIframePath}?${queryParams.toString()}`);
+}
+
+export { redirectWithExitIframe };
+//# sourceMappingURL=redirect-with-exitiframe.mjs.map

package/dist/esm/server/authenticate/admin/helpers/redirect-with-exitiframe.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-with-exitiframe.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect-with-exitiframe.ts"],"sourcesContent":[null],"names":[],"mappings":";;SAIgB,sBAAsB,CACpC,MAAmB,EACnB,OAAgB,EAChB,IAAY,EAAA;AAEZ,IAAA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAEjC,IAAA,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;AAErC,IAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;AAE9D,IAAA,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE9B,IAAI,WAAW,GAAG,CAAA,EAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAA,MAAA,EAAS,IAAI,CAAA,CAAE,CAAC;IAErD,IAAI,IAAI,EAAE;AACR,QAAA,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9B,QAAA,WAAW,GAAG,CAAG,EAAA,WAAW,CAAS,MAAA,EAAA,IAAI,EAAE,CAAC;KAC7C;AACD,IAAA,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAE3C,IAAA,MAAM,QAAQ,CAAC,CAAG,EAAA,MAAM,CAAC,IAAI,CAAC,cAAc,CAAA,CAAA,EAAI,WAAW,CAAC,QAAQ,EAAE,CAAA,CAAE,CAAC,CAAC;AAC5E;;;;"}

package/dist/esm/server/authenticate/admin/helpers/redirect.mjs

@@ -0,0 +1,60 @@
+import { redirect } from '@remix-run/server-runtime';
+import { getSessionTokenHeader } from '../../helpers/get-session-token-header.mjs';
+import { renderAppBridge } from './render-app-bridge.mjs';
+import { redirectWithAppBridgeHeaders } from './redirect-with-app-bridge-headers.mjs';
+
+function redirectFactory(params, request) {
+    const { config } = params;
+    return function redirect$1(url, init) {
+        const { searchParams } = new URL(request.url);
+        const parsedUrl = new URL(url, config.appUrl);
+        const isSameOrigin = parsedUrl.origin === config.appUrl;
+        if (isSameOrigin || url.startsWith('/')) {
+            searchParams.forEach((value, key) => {
+                if (!parsedUrl.searchParams.has(key)) {
+                    parsedUrl.searchParams.set(key, value);
+                }
+            });
+        }
+        const target = (typeof init !== 'number' && init?.target) || '_self';
+        if (target === '_self') {
+            if (isBounceRequest(request)) {
+                throw renderAppBridge(params, request, {
+                    url: parsedUrl.toString(),
+                    target,
+                });
+            }
+            else {
+                return redirect(parsedUrl.toString(), init);
+            }
+        }
+        else if (isDataRequest(request)) {
+            throw redirectWithAppBridgeHeaders(parsedUrl.toString());
+        }
+        else if (isEmbeddedRequest(request)) {
+            throw renderAppBridge(params, request, {
+                url: parsedUrl.toString(),
+                target,
+            });
+        }
+        return redirect(url, init);
+    };
+}
+function isBounceRequest(request) {
+    return (Boolean(getSessionTokenHeader(request)) &&
+        request.headers.has('X-Shopify-Bounce'));
+}
+function isDataRequest(request) {
+    const isGet = request.method === 'GET';
+    const sessionTokenHeader = Boolean(getSessionTokenHeader(request));
+    return (sessionTokenHeader &&
+        !isBounceRequest(request) &&
+        (!isEmbeddedRequest(request) || !isGet));
+}
+function isEmbeddedRequest(request) {
+    const { searchParams } = new URL(request.url);
+    return searchParams.get('embedded') === '1';
+}
+
+export { redirectFactory };
+//# sourceMappingURL=redirect.mjs.map

package/dist/esm/server/authenticate/admin/helpers/redirect.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect.ts"],"sourcesContent":[null],"names":["redirect","remixRedirect"],"mappings":";;;;;AAkBgB,SAAA,eAAe,CAC7B,MAAmB,EACnB,OAAgB,EAAA;AAEhB,IAAA,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,CAAC;AAExB,IAAA,OAAO,SAASA,UAAQ,CAAC,GAAG,EAAE,IAAkB,EAAA;QAC9C,MAAM,EAAC,YAAY,EAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAE9C,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QACxD,IAAI,YAAY,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;YACvC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,KAAI;gBAClC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;oBACpC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;iBACxC;AACH,aAAC,CAAC,CAAC;SACJ;AAED,QAAA,MAAM,MAAM,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AACrE,QAAA,IAAI,MAAM,KAAK,OAAO,EAAE;AACtB,YAAA,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE;AAC5B,gBAAA,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE;AACrC,oBAAA,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE;oBACzB,MAAM;AACP,iBAAA,CAAC,CAAC;aACJ;iBAAM;gBACL,OAAOC,QAAa,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;aAClD;SACF;AAAM,aAAA,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE;AACjC,YAAA,MAAM,4BAA4B,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;SAC1D;AAAM,aAAA,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE;AACrC,YAAA,MAAM,eAAe,CAAC,MAAM,EAAE,OAAO,EAAE;AACrC,gBAAA,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE;gBACzB,MAAM;AACP,aAAA,CAAC,CAAC;SACJ;AAED,QAAA,OAAOA,QAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAClC,KAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB,EAAA;AACvC,IAAA,QACE,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EACvC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAA;AACrC,IAAA,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;IACvC,MAAM,kBAAkB,GAAG,OAAO,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AAEnE,IAAA,QACE,kBAAkB;QAClB,CAAC,eAAe,CAAC,OAAO,CAAC;SACxB,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EACvC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgB,EAAA;IACzC,MAAM,EAAC,YAAY,EAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE5C,OAAO,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;AAC9C;;;;"}

package/dist/esm/server/authenticate/admin/helpers/render-app-bridge.mjs

@@ -0,0 +1,23 @@
+import { appBridgeUrl } from '../../helpers/app-bridge-url.mjs';
+import { addDocumentResponseHeaders } from '../../helpers/add-response-headers.mjs';
+import { sanitizeRedirectUrl } from './validate-redirect-url.mjs';
+
+function renderAppBridge({ config }, request, redirectTo) {
+    let redirectToScript = '';
+    if (redirectTo) {
+        const destination = sanitizeRedirectUrl(config.appUrl, redirectTo.url);
+        const target = redirectTo.target ?? '_top';
+        redirectToScript = `<script>window.open(${JSON.stringify(destination.toString())}, ${JSON.stringify(target)})</script>`;
+    }
+    const responseHeaders = new Headers({
+        'content-type': 'text/html;charset=utf-8',
+    });
+    addDocumentResponseHeaders(responseHeaders, config.isEmbeddedApp, new URL(request.url).searchParams.get('shop'));
+    throw new Response(`
+      <script data-api-key="${config.apiKey}" src="${appBridgeUrl()}"></script>
+      ${redirectToScript}
+    `, { headers: responseHeaders });
+}
+
+export { renderAppBridge };
+//# sourceMappingURL=render-app-bridge.mjs.map

package/dist/esm/server/authenticate/admin/helpers/render-app-bridge.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-app-bridge.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/render-app-bridge.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAaM,SAAU,eAAe,CAC7B,EAAC,MAAM,EAAc,EACrB,OAAgB,EAChB,UAA8B,EAAA;IAE9B,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,IAAI,UAAU,EAAE;AACd,QAAA,MAAM,WAAW,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;AAEvE,QAAA,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC;AAE3C,QAAA,gBAAgB,GAAG,CAAuB,oBAAA,EAAA,IAAI,CAAC,SAAS,CACtD,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAA,EAAA,EAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;KAC1C;AAED,IAAA,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC;AAClC,QAAA,cAAc,EAAE,yBAAyB;AAC1C,KAAA,CAAC,CAAC;IACH,0BAA0B,CACxB,eAAe,EACf,MAAM,CAAC,aAAa,EACpB,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAC9C,CAAC;IAEF,MAAM,IAAI,QAAQ,CAChB,CAAA;AAC0B,4BAAA,EAAA,MAAM,CAAC,MAAM,CAAU,OAAA,EAAA,YAAY,EAAE,CAAA;QAC3D,gBAAgB,CAAA;AACnB,IAAA,CAAA,EACD,EAAC,OAAO,EAAE,eAAe,EAAC,CAC3B,CAAC;AACJ;;;;"}

package/dist/esm/server/authenticate/admin/helpers/trigger-after-auth-hook.mjs

@@ -0,0 +1,15 @@
+import { createAdminApiContext } from './create-admin-api-context.mjs';
+
+async function triggerAfterAuthHook(params, session, request, authStrategy) {
+    const { config, logger } = params;
+    if (config.hooks.afterAuth) {
+        logger.info('Running afterAuth hook');
+        await config.hooks.afterAuth({
+            session,
+            admin: createAdminApiContext(session, params, authStrategy.handleClientError(request)),
+        });
+    }
+}
+
+export { triggerAfterAuthHook };
+//# sourceMappingURL=trigger-after-auth-hook.mjs.map

package/dist/esm/server/authenticate/admin/helpers/trigger-after-auth-hook.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-after-auth-hook.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/trigger-after-auth-hook.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAOO,eAAe,oBAAoB,CAGxC,MAAmB,EACnB,OAAgB,EAChB,OAAgB,EAChB,YAAmC,EAAA;AAEnC,IAAA,MAAM,EAAC,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAChC,IAAA,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE;AAC1B,QAAA,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AACtC,QAAA,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;YAC3B,OAAO;AACP,YAAA,KAAK,EAAE,qBAAqB,CAC1B,OAAO,EACP,MAAM,EACN,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,CACxC;AACF,SAAA,CAAC,CAAC;KACJ;AACH;;;;"}

package/dist/esm/server/authenticate/admin/helpers/validate-redirect-url.mjs

@@ -0,0 +1,46 @@
+import { ShopifyError } from '@shopify/shopify-api';
+
+const FILE_URI_MATCH = /\/\/\//;
+const INVALID_RELATIVE_URL = /[/\\][/\\]/;
+const WHITESPACE_CHARACTER = /\s/;
+const VALID_PROTOCOLS = ['https:', 'http:'];
+function isSafe(domain, redirectUrl, requireSSL = true) {
+    if (typeof redirectUrl !== 'string') {
+        return false;
+    }
+    if (FILE_URI_MATCH.test(redirectUrl) ||
+        WHITESPACE_CHARACTER.test(redirectUrl)) {
+        return false;
+    }
+    let url;
+    try {
+        url = new URL(redirectUrl, domain);
+    }
+    catch (error) {
+        return false;
+    }
+    if (INVALID_RELATIVE_URL.test(url.pathname)) {
+        return false;
+    }
+    if (!VALID_PROTOCOLS.includes(url.protocol)) {
+        return false;
+    }
+    if (requireSSL && url.protocol !== 'https:') {
+        return false;
+    }
+    return true;
+}
+function sanitizeRedirectUrl(domain, redirectUrl, options = {}) {
+    if (isSafe(domain, redirectUrl, options.requireSSL)) {
+        return new URL(redirectUrl, domain);
+    }
+    else if (options.throwOnInvalid === false) {
+        return undefined;
+    }
+    else {
+        throw new ShopifyError('Invalid URL. Refusing to redirect');
+    }
+}
+
+export { sanitizeRedirectUrl };
+//# sourceMappingURL=validate-redirect-url.mjs.map

package/dist/esm/server/authenticate/admin/helpers/validate-redirect-url.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-redirect-url.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/validate-redirect-url.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAUA,MAAM,cAAc,GAAG,QAAQ,CAAC;AAChC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAC1C,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAE5C,SAAS,MAAM,CACb,MAAc,EACd,WAAoB,EACpB,aAAkC,IAAI,EAAA;AAEtC,IAAA,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE;AACnC,QAAA,OAAO,KAAK,CAAC;KACd;AAED,IAAA,IACE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,QAAA,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EACtC;AACA,QAAA,OAAO,KAAK,CAAC;KACd;AAED,IAAA,IAAI,GAAQ,CAAC;AAEb,IAAA,IAAI;QACF,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;KACpC;IAAC,OAAO,KAAK,EAAE;AACd,QAAA,OAAO,KAAK,CAAC;KACd;IAED,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;AAC3C,QAAA,OAAO,KAAK,CAAC;KACd;IAED,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;AAC3C,QAAA,OAAO,KAAK,CAAC;KACd;IAED,IAAI,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE;AAC3C,QAAA,OAAO,KAAK,CAAC;KACd;AAED,IAAA,OAAO,IAAI,CAAC;AACd,CAAC;AAEK,SAAU,mBAAmB,CACjC,MAAc,EACd,WAAoB,EACpB,UAAsB,EAAgB,EAAA;IAEtC,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE;AACnD,QAAA,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAqC,CAAC;KACzE;AAAM,SAAA,IAAI,OAAO,CAAC,cAAc,KAAK,KAAK,EAAE;AAC3C,QAAA,OAAO,SAA6C,CAAC;KACtD;SAAM;AACL,QAAA,MAAM,IAAI,YAAY,CAAC,mCAAmC,CAAC,CAAC;KAC7D;AACH;;;;"}

package/dist/esm/server/authenticate/admin/helpers/validate-shop-and-host-params.mjs

@@ -0,0 +1,25 @@
+import { redirect } from '@remix-run/server-runtime';
+
+function validateShopAndHostParams(params, request) {
+    const { api, config, logger } = params;
+    if (config.isEmbeddedApp) {
+        const url = new URL(request.url);
+        const shop = api.utils.sanitizeShop(url.searchParams.get('shop'));
+        if (!shop) {
+            logger.debug('Missing or invalid shop, redirecting to login path', {
+                shop,
+            });
+            throw redirect(config.auth.loginPath);
+        }
+        const host = api.utils.sanitizeHost(url.searchParams.get('host'));
+        if (!host) {
+            logger.debug('Invalid host, redirecting to login path', {
+                host: url.searchParams.get('host'),
+            });
+            throw redirect(config.auth.loginPath);
+        }
+    }
+}
+
+export { validateShopAndHostParams };
+//# sourceMappingURL=validate-shop-and-host-params.mjs.map

package/dist/esm/server/authenticate/admin/helpers/validate-shop-and-host-params.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-shop-and-host-params.mjs","sources":["../../../../../../../src/server/authenticate/admin/helpers/validate-shop-and-host-params.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAGgB,SAAA,yBAAyB,CACvC,MAAmB,EACnB,OAAgB,EAAA;IAEhB,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAErC,IAAA,IAAI,MAAM,CAAC,aAAa,EAAE;QACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACjC,QAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE;AACT,YAAA,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;gBACjE,IAAI;AACL,aAAA,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;SACvC;AAED,QAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE;AACT,YAAA,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;gBACtD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACnC,aAAA,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;SACvC;KACF;AACH;;;;"}

package/dist/esm/server/authenticate/admin/strategies/auth-code-flow.mjs

@@ -0,0 +1,223 @@
+import { CookieNotFound, InvalidHmacError, InvalidOAuthError, HttpResponseError, GraphqlQueryError } from '@shopify/shopify-api';
+import { beginAuth } from '../helpers/begin-auth.mjs';
+import { redirectToShopifyOrAppRoot } from '../helpers/redirect-to-shopify-or-app-root.mjs';
+import '@remix-run/server-runtime';
+import { handleClientErrorFactory } from '../helpers/handle-client-error.mjs';
+import { redirectToAuthPage } from '../helpers/redirect-to-auth-page.mjs';
+import { redirectWithExitIframe } from '../helpers/redirect-with-exitiframe.mjs';
+import { getSessionTokenHeader } from '../../helpers/get-session-token-header.mjs';
+import { triggerAfterAuthHook } from '../helpers/trigger-after-auth-hook.mjs';
+import { validateShopAndHostParams } from '../helpers/validate-shop-and-host-params.mjs';
+import 'isbot';
+
+class AuthCodeFlowStrategy {
+    constructor({ api, config, logger }) {
+        this.api = api;
+        this.config = config;
+        this.logger = logger;
+    }
+    async respondToOAuthRequests(request) {
+        const { api, config } = this;
+        const url = new URL(request.url);
+        const isAuthRequest = url.pathname === config.auth.path;
+        const isAuthCallbackRequest = url.pathname === config.auth.callbackPath;
+        if (isAuthRequest || isAuthCallbackRequest) {
+            const shop = api.utils.sanitizeShop(url.searchParams.get('shop'));
+            if (!shop)
+                throw new Response('Shop param is invalid', { status: 400 });
+            if (isAuthRequest) {
+                throw await this.handleAuthBeginRequest(request, shop);
+            }
+            else {
+                throw await this.handleAuthCallbackRequest(request, shop);
+            }
+        }
+        if (!getSessionTokenHeader(request)) {
+            // This is a document request that doesn't contain a session token. We check if the app is installed.
+            // If the app isn't installed, we initiate the OAuth auth code flow.
+            // Requests with a header can only happen after the app is installed.
+            await this.ensureInstalledOnShop(request);
+        }
+    }
+    async authenticate(request, sessionContext) {
+        const { api, config, logger } = this;
+        const { shop, session } = sessionContext;
+        if (!session) {
+            logger.debug('No session found, redirecting to OAuth', { shop });
+            await redirectToAuthPage({ config, logger, api }, request, shop);
+        }
+        else if (!session.isActive(config.scopes)) {
+            logger.debug('Found a session, but it has expired, redirecting to OAuth', { shop });
+            await redirectToAuthPage({ config, logger, api }, request, shop);
+        }
+        logger.debug('Found a valid session', { shop });
+        return session;
+    }
+    handleClientError(request) {
+        const { api, config, logger } = this;
+        return handleClientErrorFactory({
+            request,
+            onError: async ({ session, error }) => {
+                if (error.response.code === 401) {
+                    throw await redirectToAuthPage({ api, config, logger }, request, session.shop);
+                }
+            },
+        });
+    }
+    async ensureInstalledOnShop(request) {
+        const { api, config, logger } = this;
+        validateShopAndHostParams({ api, config, logger }, request);
+        const url = new URL(request.url);
+        let shop = url.searchParams.get('shop');
+        // Ensure app is installed
+        logger.debug('Ensuring app is installed on shop', { shop });
+        if (!(await this.hasValidOfflineId(request))) {
+            logger.info("Could not find a shop, can't authenticate request");
+            throw new Response(undefined, {
+                status: 400,
+                statusText: 'Bad Request',
+            });
+        }
+        const offlineSession = await this.getOfflineSession(request);
+        const isEmbedded = url.searchParams.get('embedded') === '1';
+        if (!offlineSession) {
+            logger.info("Shop hasn't installed app yet, redirecting to OAuth", {
+                shop,
+            });
+            if (isEmbedded) {
+                redirectWithExitIframe({ api, config, logger }, request, shop);
+            }
+            else {
+                throw await beginAuth({ api, config, logger }, request, false, shop);
+            }
+        }
+        shop = shop || offlineSession.shop;
+        if (config.isEmbeddedApp && !isEmbedded) {
+            try {
+                logger.debug('Ensuring offline session is valid before embedding', {
+                    shop,
+                });
+                await this.testSession(offlineSession);
+                logger.debug('Offline session is still valid, embedding app', { shop });
+            }
+            catch (error) {
+                await this.handleInvalidOfflineSession(error, request, shop);
+            }
+        }
+    }
+    async handleAuthBeginRequest(request, shop) {
+        const { api, config, logger } = this;
+        logger.info('Handling OAuth begin request', { shop });
+        // If we're loading from an iframe, we need to break out of it
+        if (config.isEmbeddedApp &&
+            request.headers.get('Sec-Fetch-Dest') === 'iframe') {
+            logger.debug('Auth request in iframe detected, exiting iframe', { shop });
+            throw redirectWithExitIframe({ api, config, logger }, request, shop);
+        }
+        else {
+            throw await beginAuth({ api, config, logger }, request, false, shop);
+        }
+    }
+    async handleAuthCallbackRequest(request, shop) {
+        const { api, config, logger } = this;
+        logger.info('Handling OAuth callback request');
+        try {
+            const { session, headers: responseHeaders } = await api.auth.callback({
+                rawRequest: request,
+            });
+            await config.sessionStorage.storeSession(session);
+            if (config.useOnlineTokens && !session.isOnline) {
+                logger.info('Requesting online access token for offline session');
+                await beginAuth({ api, config, logger }, request, true, shop);
+            }
+            await triggerAfterAuthHook({ api, config, logger }, session, request, this);
+            throw await redirectToShopifyOrAppRoot(request, { api, config, logger }, responseHeaders);
+        }
+        catch (error) {
+            if (error instanceof Response)
+                throw error;
+            throw await this.oauthCallbackError(error, request, shop);
+        }
+    }
+    async getOfflineSession(request) {
+        const offlineId = await this.getOfflineSessionId(request);
+        return this.config.sessionStorage.loadSession(offlineId);
+    }
+    async hasValidOfflineId(request) {
+        return Boolean(await this.getOfflineSessionId(request));
+    }
+    async getOfflineSessionId(request) {
+        const { api } = this;
+        const url = new URL(request.url);
+        const shop = url.searchParams.get('shop');
+        return shop
+            ? api.session.getOfflineId(shop)
+            : api.session.getCurrentId({ isOnline: false, rawRequest: request });
+    }
+    async testSession(session) {
+        const { api } = this;
+        const client = new api.clients.Graphql({
+            session,
+        });
+        await client.request(`#graphql
+      query shopifyAppShopName {
+        shop {
+          name
+        }
+      }
+    `);
+    }
+    async oauthCallbackError(error, request, shop) {
+        const { logger } = this;
+        logger.error('Error during OAuth callback', { error: error.message });
+        if (error instanceof CookieNotFound) {
+            return this.handleAuthBeginRequest(request, shop);
+        }
+        if (error instanceof InvalidHmacError ||
+            error instanceof InvalidOAuthError) {
+            return new Response(undefined, {
+                status: 400,
+                statusText: 'Invalid OAuth Request',
+            });
+        }
+        return new Response(undefined, {
+            status: 500,
+            statusText: 'Internal Server Error',
+        });
+    }
+    async handleInvalidOfflineSession(error, request, shop) {
+        const { api, logger, config } = this;
+        if (error instanceof HttpResponseError) {
+            if (error.response.code === 401) {
+                logger.info('Shop session is no longer valid, redirecting to OAuth', {
+                    shop,
+                });
+                throw await beginAuth({ api, config, logger }, request, false, shop);
+            }
+            else {
+                const message = JSON.stringify(error.response.body, null, 2);
+                logger.error(`Unexpected error during session validation: ${message}`, {
+                    shop,
+                });
+                throw new Response(undefined, {
+                    status: error.response.code,
+                    statusText: error.response.statusText,
+                });
+            }
+        }
+        else if (error instanceof GraphqlQueryError) {
+            const context = { shop };
+            if (error.response) {
+                context.response = JSON.stringify(error.body);
+            }
+            logger.error(`Unexpected error during session validation: ${error.message}`, context);
+            throw new Response(undefined, {
+                status: 500,
+                statusText: 'Internal Server Error',
+            });
+        }
+    }
+}
+
+export { AuthCodeFlowStrategy };
+//# sourceMappingURL=auth-code-flow.mjs.map

package/dist/esm/server/authenticate/admin/strategies/auth-code-flow.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-code-flow.mjs","sources":["../../../../../../../src/server/authenticate/admin/strategies/auth-code-flow.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;;;;;MA+Ba,oBAAoB,CAAA;AAc/B,IAAA,WAAA,CAAmB,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAc,EAAA;AACnD,QAAA,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;AACf,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;AACrB,QAAA,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;KACtB;IAEM,MAAM,sBAAsB,CAAC,OAAgB,EAAA;AAClD,QAAA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAC,GAAG,IAAI,CAAC;QAE3B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,aAAa,GAAG,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACxD,MAAM,qBAAqB,GAAG,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC;AAExE,QAAA,IAAI,aAAa,IAAI,qBAAqB,EAAE;AAC1C,YAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;AACnE,YAAA,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE,EAAC,MAAM,EAAE,GAAG,EAAC,CAAC,CAAC;YAEtE,IAAI,aAAa,EAAE;gBACjB,MAAM,MAAM,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;aACxD;iBAAM;gBACL,MAAM,MAAM,IAAI,CAAC,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;aAC3D;SACF;AAED,QAAA,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,EAAE;;;;AAInC,YAAA,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC;SAC3C;KACF;AAEM,IAAA,MAAM,YAAY,CACvB,OAAgB,EAChB,cAA8B,EAAA;QAE9B,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,IAAI,CAAC;AAEnC,QAAA,MAAM,EAAC,IAAI,EAAE,OAAO,EAAC,GAAG,cAAc,CAAC;QAEvC,IAAI,CAAC,OAAO,EAAE;YACZ,MAAM,CAAC,KAAK,CAAC,wCAAwC,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;AAC/D,YAAA,MAAM,kBAAkB,CAAC,EAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;SAChE;aAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;YAC3C,MAAM,CAAC,KAAK,CACV,2DAA2D,EAC3D,EAAC,IAAI,EAAC,CACP,CAAC;AACF,YAAA,MAAM,kBAAkB,CAAC,EAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;SAChE;QAED,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;AAE9C,QAAA,OAAO,OAAQ,CAAC;KACjB;AAEM,IAAA,iBAAiB,CAAC,OAAgB,EAAA;QACvC,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,IAAI,CAAC;AACnC,QAAA,OAAO,wBAAwB,CAAC;YAC9B,OAAO;YACP,OAAO,EAAE,OAAO,EAAC,OAAO,EAAE,KAAK,EAAiB,KAAI;gBAClD,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE;AAC/B,oBAAA,MAAM,MAAM,kBAAkB,CAC5B,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EACrB,OAAO,EACP,OAAO,CAAC,IAAI,CACb,CAAC;iBACH;aACF;AACF,SAAA,CAAC,CAAC;KACJ;IAEO,MAAM,qBAAqB,CAAC,OAAgB,EAAA;QAClD,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,IAAI,CAAC;QAEnC,yBAAyB,CAAC,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EAAE,OAAO,CAAC,CAAC;QAE1D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;;QAGxC,MAAM,CAAC,KAAK,CAAC,mCAAmC,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;QAE1D,IAAI,EAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,EAAE;AAC5C,YAAA,MAAM,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;AACjE,YAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,gBAAA,MAAM,EAAE,GAAG;AACX,gBAAA,UAAU,EAAE,aAAa;AAC1B,aAAA,CAAC,CAAC;SACJ;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC7D,QAAA,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;QAE5D,IAAI,CAAC,cAAc,EAAE;AACnB,YAAA,MAAM,CAAC,IAAI,CAAC,qDAAqD,EAAE;gBACjE,IAAI;AACL,aAAA,CAAC,CAAC;YACH,IAAI,UAAU,EAAE;AACd,gBAAA,sBAAsB,CAAC,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EAAE,OAAO,EAAE,IAAK,CAAC,CAAC;aAC/D;iBAAM;AACL,gBAAA,MAAM,MAAM,SAAS,CAAC,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAK,CAAC,CAAC;aACrE;SACF;AAED,QAAA,IAAI,GAAG,IAAI,IAAI,cAAc,CAAC,IAAI,CAAC;AAEnC,QAAA,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,UAAU,EAAE;AACvC,YAAA,IAAI;AACF,gBAAA,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;oBACjE,IAAI;AACL,iBAAA,CAAC,CAAC;AACH,gBAAA,MAAM,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;gBAEvC,MAAM,CAAC,KAAK,CAAC,+CAA+C,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;aACvE;YAAC,OAAO,KAAK,EAAE;gBACd,MAAM,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;aAC9D;SACF;KACF;AAEO,IAAA,MAAM,sBAAsB,CAClC,OAAgB,EAChB,IAAY,EAAA;QAEZ,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,IAAI,CAAC;QAEnC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;;QAGpD,IACE,MAAM,CAAC,aAAa;YACpB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,KAAK,QAAQ,EAClD;YACA,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;AACxE,YAAA,MAAM,sBAAsB,CAAC,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;SACpE;aAAM;AACL,YAAA,MAAM,MAAM,SAAS,CAAC,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;SACpE;KACF;AAEO,IAAA,MAAM,yBAAyB,CACrC,OAAgB,EAChB,IAAY,EAAA;QAEZ,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,IAAI,CAAC;AAEnC,QAAA,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;AAE/C,QAAA,IAAI;AACF,YAAA,MAAM,EAAC,OAAO,EAAE,OAAO,EAAE,eAAe,EAAC,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;AAClE,gBAAA,UAAU,EAAE,OAAO;AACpB,aAAA,CAAC,CAAC;YAEH,MAAM,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAElD,IAAI,MAAM,CAAC,eAAe,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;AAC/C,gBAAA,MAAM,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;AAClE,gBAAA,MAAM,SAAS,CAAC,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;aAC7D;AAED,YAAA,MAAM,oBAAoB,CACxB,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EACrB,OAAO,EACP,OAAO,EACP,IAAI,CACL,CAAC;AAEF,YAAA,MAAM,MAAM,0BAA0B,CACpC,OAAO,EACP,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EACrB,eAAe,CAChB,CAAC;SACH;QAAC,OAAO,KAAK,EAAE;YACd,IAAI,KAAK,YAAY,QAAQ;AAAE,gBAAA,MAAM,KAAK,CAAC;YAE3C,MAAM,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;SAC3D;KACF;IAEO,MAAM,iBAAiB,CAC7B,OAAgB,EAAA;QAEhB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,SAAU,CAAC,CAAC;KAC3D;IAEO,MAAM,iBAAiB,CAAC,OAAgB,EAAA;QAC9C,OAAO,OAAO,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;KACzD;IAEO,MAAM,mBAAmB,CAC/B,OAAgB,EAAA;AAEhB,QAAA,MAAM,EAAC,GAAG,EAAC,GAAG,IAAI,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAE1C,QAAA,OAAO,IAAI;cACP,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC;AAChC,cAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,EAAC,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAC,CAAC,CAAC;KACtE;IAEO,MAAM,WAAW,CAAC,OAAgB,EAAA;AACxC,QAAA,MAAM,EAAC,GAAG,EAAC,GAAG,IAAI,CAAC;QAEnB,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;YACrC,OAAO;AACR,SAAA,CAAC,CAAC;QAEH,MAAM,MAAM,CAAC,OAAO,CAAC,CAAA;;;;;;AAMpB,IAAA,CAAA,CAAC,CAAC;KACJ;AAEO,IAAA,MAAM,kBAAkB,CAC9B,KAAY,EACZ,OAAgB,EAChB,IAAY,EAAA;AAEZ,QAAA,MAAM,EAAC,MAAM,EAAC,GAAG,IAAI,CAAC;AACtB,QAAA,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAC,KAAK,EAAE,KAAK,CAAC,OAAO,EAAC,CAAC,CAAC;AAEpE,QAAA,IAAI,KAAK,YAAY,cAAc,EAAE;YACnC,OAAO,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;SACnD;QAED,IACE,KAAK,YAAY,gBAAgB;YACjC,KAAK,YAAY,iBAAiB,EAClC;AACA,YAAA,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC7B,gBAAA,MAAM,EAAE,GAAG;AACX,gBAAA,UAAU,EAAE,uBAAuB;AACpC,aAAA,CAAC,CAAC;SACJ;AAED,QAAA,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC7B,YAAA,MAAM,EAAE,GAAG;AACX,YAAA,UAAU,EAAE,uBAAuB;AACpC,SAAA,CAAC,CAAC;KACJ;AAEO,IAAA,MAAM,2BAA2B,CACvC,KAAY,EACZ,OAAgB,EAChB,IAAY,EAAA;QAEZ,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,IAAI,CAAC;AACnC,QAAA,IAAI,KAAK,YAAY,iBAAiB,EAAE;YACtC,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE;AAC/B,gBAAA,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;oBACnE,IAAI;AACL,iBAAA,CAAC,CAAC;AACH,gBAAA,MAAM,MAAM,SAAS,CAAC,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;aACpE;iBAAM;AACL,gBAAA,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC7D,gBAAA,MAAM,CAAC,KAAK,CAAC,CAA+C,4CAAA,EAAA,OAAO,EAAE,EAAE;oBACrE,IAAI;AACL,iBAAA,CAAC,CAAC;AAEH,gBAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,oBAAA,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;AAC3B,oBAAA,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;AACtC,iBAAA,CAAC,CAAC;aACJ;SACF;AAAM,aAAA,IAAI,KAAK,YAAY,iBAAiB,EAAE;AAC7C,YAAA,MAAM,OAAO,GAA2B,EAAC,IAAI,EAAC,CAAC;AAC/C,YAAA,IAAI,KAAK,CAAC,QAAQ,EAAE;gBAClB,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aAC/C;YAED,MAAM,CAAC,KAAK,CACV,CAA+C,4CAAA,EAAA,KAAK,CAAC,OAAO,CAAE,CAAA,EAC9D,OAAO,CACR,CAAC;AAEF,YAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,gBAAA,MAAM,EAAE,GAAG;AACX,gBAAA,UAAU,EAAE,uBAAuB;AACpC,aAAA,CAAC,CAAC;SACJ;KACF;AACF;;;;"}