@songsid/agend 2.3.5-alpha.4 → 2.3.5-alpha.5

package/dist/web-backend-login.d.ts

@@ -1,3 +1,17 @@
+/**
+ * #2233: signing a backend in from the web dashboard — the dashboard side of LoginController's `web` requester.
+ *
+ * - Who: a signed-in admin session on the local surface (the route checks it; the controller asks again through the
+ *   sink, and the watchdog below keeps asking while the sign-in runs). Never a guest, a read session or the public link.
+ * - Two steps, as in chat: `check` runs the controller's pre-check and keeps its answer here, server-side, under a
+ *   random id bound to the session that asked (chat keeps it in a nonce button); `begin` with that id starts the
+ *   sign-in through every check again. The client never says whether a token was present.
+ * - What chat sends as a link, a DM or a device code goes to the one session that started it, read back with `view`:
+ *   the browser terminal's URL, the provider's URL and code, and the access token while it is unredeemed. Other admin
+ *   sessions see that a sign-in is running (backend, device, phase) and may cancel it; nothing more.
+ * - A sign-in whose session signs out, expires or is revoked is cancelled (WEB_LOGIN_WATCH_MS).
+ */
+import type { AccountIdentity } from "./claude-auth-status.js";
 import type { LoginChat, LoginStartOptions, WebLoginSink } from "./login-controller.js";
 import type { AvailabilityState } from "./backend-availability.js";
 export { linkableLoginUrl, LOGIN_LINK_HOSTS } from "./login-url.js";
@@ -21,6 +35,8 @@ export interface SignInTarget {
     install?: string;
     /** Too old: the command that installs the current version over it. */
     update?: string;
+    /** Which account this sign-in is (a masked e-mail and a plan), Claude Code only, from the host's own `claude auth status`. Local administrators only: this list is never served to anyone else. */
+    identity?: AccountIdentity;
 }
 export interface WebLoginRequester {
     /** The session's handle (web-session.ts): what the sign-in is bound to. */
@@ -46,7 +62,12 @@ export interface WebBackendLoginDeps {
         handle: string;
     }): void;
     /** The current sign-in started, changed phase or went: the pages are told to read it again (no details in the event). */
-    changed?(): void;
+    changed?(phase?: "running" | "ended"): void;
+    /**
+     * Any sign-in this registry started has ended (success, failure or cancel), including one that a later one replaced or that ended before it was ever
+     * published as the current one. It says nothing about what the pages show: what is known about the accounts may be out of date, that is all.
+     */
+    loginEnded?(): void;
     now?(): number;
 }
 export interface WebLoginConfirm {
@@ -116,6 +137,7 @@ export declare class WebBackendLogins {
     cancel(): Promise<string>;
     dispose(): void;
     private viewOf;
+    private loginEnded;
     private changed;
     private chatFor;
     private sweep;

package/dist/web-backend-login.js

@@ -1,16 +1,3 @@
-/**
- * #2233: signing a backend in from the web dashboard — the dashboard side of LoginController's `web` requester.
- *
- * - Who: a signed-in admin session on the local surface (the route checks it; the controller asks again through the
- *   sink, and the watchdog below keeps asking while the sign-in runs). Never a guest, a read session or the public link.
- * - Two steps, as in chat: `check` runs the controller's pre-check and keeps its answer here, server-side, under a
- *   random id bound to the session that asked (chat keeps it in a nonce button); `begin` with that id starts the
- *   sign-in through every check again. The client never says whether a token was present.
- * - What chat sends as a link, a DM or a device code goes to the one session that started it, read back with `view`:
- *   the browser terminal's URL, the provider's URL and code, and the access token while it is unredeemed. Other admin
- *   sessions see that a sign-in is running (backend, device, phase) and may cancel it; nothing more.
- * - A sign-in whose session signs out, expires or is revoked is cancelled (WEB_LOGIN_WATCH_MS).
- */
 import { randomBytes } from "node:crypto";
 import { LOGIN_BACKEND_ALIASES, LOGIN_FLOWS } from "./login-flows.js";
 import { CHAT_PROFILE_LOGIN_BACKENDS } from "./backend/credential-profile.js";
@@ -92,8 +79,11 @@ export class WebBackendLogins {
                 this.live.delete(run);
                 if (!this.live.size)
                     this.stopWatch();
+                // Every end forgets the accounts, whichever sign-in it was: the account behind a login may have changed. Only the sign-in the pages are
+                // showing tells them it ended; one that was replaced (or never published) must not make them show the current one as over.
+                this.loginEnded();
                 if (this.run === run)
-                    this.changed();
+                    this.changed("ended");
             },
         };
         // Watched from admission, not from publication: a session revoked while its listener, tunnel or cloudflared is
@@ -117,7 +107,7 @@ export class WebBackendLogins {
         if (this.run && this.run.seq > run.seq)
             return running ? { login: this.viewOf(run, who.handle) } : { message: message ?? run.lines.join("\n") };
         this.run = run;
-        this.changed();
+        this.changed(run.phase);
         if (running) {
             try {
                 this.deps.notice({ shown: asked.profile ? `${asked.backend} (${asked.profile})` : asked.backend, label: who.label, handle: who.handle });
@@ -154,8 +144,12 @@ export class WebBackendLogins {
             accessCode: running && run.terminal ? this.deps.accessToken(run.sink) : null,
         };
     }
-    changed() { try {
-        this.deps.changed?.();
+    loginEnded() { try {
+        this.deps.loginEnded?.();
+    }
+    catch { /* a cache of what is known about accounts never stops a sign-in */ } }
+    changed(phase) { try {
+        this.deps.changed?.(phase);
     }
     catch { /* the pages read it on their own next time */ } }
     chatFor(who, sink, lines) {

package/dist/web-backend-login.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-backend-login.js","sourceRoot":"","sources":["../src/web-backend-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAE9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,6GAA6G;AAC7G,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,MAAM,CAAC;AACnD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,MAAM,CAAC;AACnD,mGAAmG;AACnG,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACxC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,uIAAuI;AACvI,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,OAAuB;IAC/E,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7F,OAAO,CAAC,OAAO,IAAI,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC;AAoGD,MAAM,OAAO,gBAAgB;IAQE,IAAI;IAPhB,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,GAAG,GAAe,IAAI,CAAC;IAC/B,qHAAqH;IACpG,IAAI,GAAG,IAAI,GAAG,EAAO,CAAC;IAC/B,GAAG,GAAG,CAAC,CAAC;IACR,KAAK,GAA0C,IAAI,CAAC;IAE5D,YAA6B,IAAyB;oBAAzB,IAAI;IAAwB,CAAC;IAElD,GAAG,KAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/D,4GAA4G;IAC5G,KAAK,CAAC,KAAK,CAAC,GAAsB,EAAE,UAAkB,EAAE,OAAgB;QACtE,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAC5F,MAAM,KAAK,GAA0F,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACpH,MAAM,IAAI,GAAiB;YACzB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YACjD,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;YACvC,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;SACpD,CAAC;QACF,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAG,2BAA2B;QACvH,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAY,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,wBAAwB,EAAE,CAAC;QAC3K,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,yGAAyG;IACzG,KAAK,CAAC,KAAK,CAAC,GAAsB,EAAE,SAAiB,EAAE,MAAe;QACpE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QAC/E,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU;YAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAQ;YACf,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChJ,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI;YACtG,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAA+B;SAC7E,CAAC;QACF,GAAG,CAAC,IAAI,GAAG;YACT,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YACjD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAChG,QAAQ,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;YACjD,KAAK,EAAE,MAAM,CAAC,EAAE;gBACd,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC;gBAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAAE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtC,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;oBAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACvC,CAAC;SACF,CAAC;QACF,+GAA+G;QAC/G,iFAAiF;QACjF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE;YAC3F,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC,CAAqC,uBAAuB;YAClG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAuB,4BAA4B;QACzG,oHAAoH;QACpH,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChJ,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;QAClM,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,YAAoB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,GAAG,uBAAuB,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC1I,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACxC,CAAC;IAED,8GAA8G;IAC9G,MAAM,KAAsB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAExD,OAAO,KAAW,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEtE,MAAM,CAAC,GAAQ,EAAE,YAAoB;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACjF,MAAM,IAAI,GAAiB;YACzB,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE;YAC9H,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI;SAC3E,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO;YACL,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YACxG,UAAU,EAAE,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;SAC7E,CAAC;IACJ,CAAC;IAEO,OAAO,KAAW,IAAI,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC;IAE3G,OAAO,CAAC,GAAsB,EAAE,IAAkB,EAAE,KAAe;QACzE,mHAAmH;QACnH,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK;YACtB,QAAQ,EAAE,KAAK,EAAE,OAAe,EAAE,IAAY,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;SACtH,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC9F,CAAC;IAEO,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,SAAS;gBACjD,wGAAwG;gBACxG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;IACnE,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAe,EAAE,IAAY;IAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;QAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"web-backend-login.js","sourceRoot":"","sources":["../src/web-backend-login.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG1C,OAAO,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,2BAA2B,EAAE,MAAM,iCAAiC,CAAC;AAE9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,6GAA6G;AAC7G,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,GAAG,MAAM,CAAC;AACnD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,GAAG,MAAM,CAAC;AACnD,mGAAmG;AACnG,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,CAAC;AACxC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,MAAM,cAAc,GAAG,IAAI,CAAC;AAE5B,uIAAuI;AACvI,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,OAAuB;IAC/E,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,aAAa,IAAI,IAAI,CAAC,aAAa,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC7F,OAAO,CAAC,OAAO,IAAI,2BAA2B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAC9D,CAAC;AA2GD,MAAM,OAAO,gBAAgB;IAQE,IAAI;IAPhB,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC9C,GAAG,GAAe,IAAI,CAAC;IAC/B,qHAAqH;IACpG,IAAI,GAAG,IAAI,GAAG,EAAO,CAAC;IAC/B,GAAG,GAAG,CAAC,CAAC;IACR,KAAK,GAA0C,IAAI,CAAC;IAE5D,YAA6B,IAAyB;oBAAzB,IAAI;IAAwB,CAAC;IAElD,GAAG,KAAa,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE/D,4GAA4G;IAC5G,KAAK,CAAC,KAAK,CAAC,GAAsB,EAAE,UAAkB,EAAE,OAAgB;QACtE,MAAM,OAAO,GAAG,qBAAqB,CAAC,UAAU,CAAC,WAAW,EAAE,CAAC,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAC5F,MAAM,KAAK,GAA0F,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACpH,MAAM,IAAI,GAAiB;YACzB,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YACjD,OAAO,EAAE,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;YACvC,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;SACpD,CAAC;QACF,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACzH,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAG,2BAA2B;QACvH,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAY,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,wBAAwB,EAAE,CAAC;QAC3K,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IAED,yGAAyG;IACzG,KAAK,CAAC,KAAK,CAAC,GAAsB,EAAE,SAAiB,EAAE,MAAe;QACpE,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;QAC/E,IAAI,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU;YAAE,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACxE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAQ;YACf,EAAE,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChJ,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI;YACtG,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,IAA+B;SAC7E,CAAC;QACF,GAAG,CAAC,IAAI,GAAG;YACT,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;YACjD,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,IAAI,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAChG,QAAQ,EAAE,IAAI,CAAC,EAAE,GAAG,GAAG,CAAC,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC;YACjD,KAAK,EAAE,MAAM,CAAC,EAAE;gBACd,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC;gBAAC,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;gBAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;gBAClE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;oBAAE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACtC,wIAAwI;gBACxI,2HAA2H;gBAC3H,IAAI,CAAC,UAAU,EAAE,CAAC;gBAClB,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;oBAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC9C,CAAC;SACF,CAAC;QACF,+GAA+G;QAC/G,iFAAiF;QACjF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE;YAC3F,aAAa,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1F,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC,CAAqC,uBAAuB;YAClG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;QACpC,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAuB,4BAA4B;QACzG,oHAAoH;QACpH,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChJ,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxB,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oCAAoC,CAAC,CAAC;QAClM,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;IACjD,CAAC;IAED,+DAA+D;IAC/D,IAAI,CAAC,YAAoB;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;QACrB,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,IAAI,GAAG,CAAC,KAAK,KAAK,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,OAAO,GAAG,uBAAuB,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC1I,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;IACxC,CAAC;IAED,8GAA8G;IAC9G,MAAM,KAAsB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAExD,OAAO,KAAW,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAEtE,MAAM,CAAC,GAAQ,EAAE,YAAoB;QAC3C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,KAAK,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACjF,MAAM,IAAI,GAAiB;YACzB,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE;YAC9H,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI;SAC3E,CAAC;QACF,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3E,OAAO;YACL,GAAG,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;YACxG,UAAU,EAAE,OAAO,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;SAC7E,CAAC;IACJ,CAAC;IAEO,UAAU,KAAW,IAAI,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,mEAAmE,CAAC,CAAC,CAAC,CAAC;IACtI,OAAO,CAAC,KAA2B,IAAU,IAAI,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,CAAC;IAE3I,OAAO,CAAC,GAAsB,EAAE,IAAkB,EAAE,KAAe;QACzE,mHAAmH;QACnH,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK;YACtB,QAAQ,EAAE,KAAK,EAAE,OAAe,EAAE,IAAY,EAAE,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;SACtH,CAAC;QAC/B,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC9F,CAAC;IAEO,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;YAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,SAAS;gBACjD,wGAAwG;gBACxG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACtB,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACxD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,CAAC;IAEO,SAAS;QACf,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;IACnE,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAe,EAAE,IAAY;IAC7C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC1F,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;QAAE,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;AAC1E,CAAC"}

package/dist/web-device-login.d.ts

@@ -0,0 +1,153 @@
+export declare const DEVICE_LOGIN_TTL_MS: number;
+export declare const MAX_PENDING_DEVICE_LOGINS = 8;
+export declare const MAX_PENDING_PER_PEER = 2;
+/** Requests one address, and the whole fleet, may ask for per DEVICE_LOGIN_CREATE_WINDOW_MS. */
+export declare const DEVICE_LOGIN_CREATE_WINDOW_MS: number;
+export declare const DEVICE_LOGIN_CREATES_PER_PEER = 6;
+export declare const DEVICE_LOGIN_CREATES_GLOBAL = 20;
+/**
+ * The approving side's breaker: this many wrong codes in the window pause it. Shorter than a request's life on purpose
+ * (a pause that outlasted it would end every request waiting): ten tries per two minutes is still hopeless against a
+ * 40-bit code among at most eight, and the person approving is already an owner-verified session.
+ */
+export declare const DEVICE_APPROVE_WINDOW_MS: number;
+export declare const DEVICE_APPROVE_THRESHOLD = 10;
+export declare const DEVICE_APPROVE_PAUSE_MS: number;
+/** Where a request came from, for the approver: this computer, or somewhere on the network (LAN, tailnet). */
+export type DeviceLoginPeer = "host" | "network";
+export type DeviceLoginState = "pending" | "approved" | "denied";
+/** What the approving device may see of a request. */
+export interface DeviceLoginView {
+    /** As typed: `ABCD-EFGH`. */
+    readonly code: string;
+    readonly label: string;
+    readonly peer: DeviceLoginPeer;
+    readonly address: string;
+    readonly expiresAt: number;
+    readonly state: DeviceLoginState;
+}
+export type DeviceLoginCreate = {
+    readonly kind: "ok";
+    readonly requestId: string;
+    readonly code: string;
+    readonly expiresAt: number;
+}
+/** Too many asked for from this address, or the fleet over. */
+ | {
+    readonly kind: "limited";
+    readonly retryAfterMs: number;
+}
+/** The room is full (or this address already has its share waiting). */
+ | {
+    readonly kind: "full";
+};
+export type DeviceLoginPoll = {
+    readonly kind: "pending";
+    readonly expiresAt: number;
+}
+/** Approved, and now spent: the caller makes the session. Never returned twice for one request. */
+ | {
+    readonly kind: "claimed";
+    readonly label: string;
+    readonly approvedBy: string;
+} | {
+    readonly kind: "denied";
+}
+/** Expired, spent, withdrawn, made under another token, or never made: deliberately indistinguishable. */
+ | {
+    readonly kind: "expired";
+};
+export type DeviceLoginMatch = {
+    readonly kind: "ok";
+    readonly view: DeviceLoginView;
+}
+/** Wrong, expired, or none waiting: deliberately indistinguishable. */
+ | {
+    readonly kind: "invalid";
+} | {
+    readonly kind: "paused";
+    readonly retryAfterMs: number;
+};
+export type DeviceLoginDecision = {
+    readonly kind: "ok";
+    readonly view: DeviceLoginView;
+} | {
+    readonly kind: "invalid";
+} | {
+    readonly kind: "paused";
+    readonly retryAfterMs: number;
+}
+/** The code was already approved or denied (and not yet taken up): what it is now. */
+ | {
+    readonly kind: "decided";
+    readonly state: DeviceLoginState;
+};
+export interface DeviceLoginRequestsOptions {
+    readonly now?: () => number;
+    /** For tests that need a known code. */
+    readonly generate?: () => string;
+    readonly onEvent?: (event: "created" | "approved" | "denied" | "claimed" | "breaker-open") => void;
+}
+/**
+ * The key the per-address limits count by. An IPv4 address (also one an IPv6 socket reports as `::ffff:a.b.c.d`) is its
+ * own key. An IPv6 address counts by its /64: a single network hands one machine a whole /64, so keying by the full
+ * address would give one host as many allowances as it has addresses. Whatever is not an IP address (`unknown`) is its
+ * own key. Never read from a header: only the socket's peer.
+ */
+export declare function peerKeyOf(address: string): string;
+export declare class DeviceLoginRequests {
+    private readonly entries;
+    private readonly createdByPeer;
+    private created;
+    private approveFailures;
+    private approvePausedUntil;
+    private readonly now;
+    private readonly generate;
+    private readonly onEvent;
+    constructor(opts?: DeviceLoginRequestsOptions);
+    /** How many requests are waiting (or approved and not yet taken up) — for tests and status lines. */
+    get size(): number;
+    /** How many addresses the creation rate limit is holding stamps for (for tests: it must not grow without bound). */
+    get rateTableSize(): number;
+    /**
+     * A new request. `replaces` is the request id the same browser held (its cookie): it is withdrawn first, so "get a
+     * new code" never counts against the room — but it does count against the rate. `label`, `peer` and `address` are
+     * the server's own reading of the request (never body input); they are what the approver is shown.
+     */
+    create(input: {
+        epoch: string;
+        peerKey: string;
+        label: string;
+        peer: DeviceLoginPeer;
+        address: string;
+        replaces?: string;
+    }): DeviceLoginCreate;
+    /**
+     * The new browser asks where its request stands. An approved one is spent by this very call (`claimed`): the caller
+     * then makes the session, and a second poll with the same id finds nothing. A denied one is told once and forgotten.
+     * An unknown, malformed, expired or other-token id is `expired` — the answer never says which.
+     */
+    poll(requestId: string | undefined, currentEpoch: string): DeviceLoginPoll;
+    /** The browser leaves the page (or asks again): its request is withdrawn. Whatever the id, nothing is said. */
+    cancel(requestId: string | undefined): void;
+    /** The approving side types a code: the request it names, for the confirm screen. A wrong code counts. */
+    lookup(input: string, currentEpoch: string): DeviceLoginMatch;
+    /**
+     * Approve or deny the request this code names. Only a pending one changes: one already decided says what it is now,
+     * so a second tap approves nothing twice. `by` is the approving session's handle (logged, never shown to the device).
+     */
+    decide(input: string, decision: "approved" | "denied", by: string, currentEpoch: string): DeviceLoginDecision;
+    /** `/dashboard revoke`: every request is withdrawn. */
+    revokeAll(): void;
+    /** How long the approving side stays paused by its breaker (0 when it is closed). */
+    approvePausedForMs(): number;
+    private codeTaken;
+    private match;
+    private prune;
+}
+export declare const DEVICE_LOGIN_COOKIE = "agend_device_login";
+export declare const DEVICE_LOGIN_PATH = "/auth/device-login";
+export declare function buildDeviceLoginCookie(requestId: string, secure: boolean, webToken: string, maxAgeSeconds: number): string;
+export declare function clearDeviceLoginCookie(secure: boolean, webToken: string): string;
+/** The request id this browser holds, if the cookie header carries a well-formed one. */
+export declare function readDeviceLoginCookie(cookieHeader: string | undefined, webToken: string): string | undefined;

package/dist/web-device-login.js

@@ -0,0 +1,278 @@
+/**
+ * Device-code sign-in (Refs #3061, P2a): a new browser shows an 8-character code; a device that is already signed in AND
+ * is this fleet's verified owner types that code under Settings → Access & security → Add device and approves it; the
+ * new browser then signs itself in.
+ *
+ * What is kept here is only the requests — never a credential. Approval moves a request from `pending` to `approved`
+ * and nothing else: no cookie, session id or token passes from the approving device to the new one. The new browser
+ * mints its own session in its own request (auth-api `POST /auth/device-login/poll`), by presenting the request id it
+ * was given when it asked. That id is 256 random bits, is never shown to the approver, and travels only in an HttpOnly
+ * cookie scoped to /auth/device-login.
+ *
+ * The rules, each of them a property worth testing on its own:
+ * - **Short-lived and single-use.** A request lives five minutes from when it was asked for — approving does not extend
+ *   it — and the poll that claims an approved request spends it. A second claim, a second approval of the same code and
+ *   a code that has expired are all refused.
+ * - **Rotating the web token withdraws every request** (each carries the token epoch it was made under), as it does an
+ *   unused login code. So does `/dashboard revoke` (`revokeAll`).
+ * - **Bounded.** At most MAX_PENDING_DEVICE_LOGINS requests at once, MAX_PENDING_PER_PEER per address, and a limit on
+ *   how many one address — and the fleet — may ask for in a window, so a stranger on the network cannot fill the room
+ *   or run the fleet out of memory. A full room refuses new requests; it never evicts a waiting person's.
+ * - **A breaker on the approving side.** Typing a code that matches no request is a wrong try; enough of them pause every
+ *   lookup and decision, correct codes included. With no request waiting there is nothing to guess: it counts against
+ *   nothing (as for login codes). The approving side is already an owner-verified session, so this guards against a
+ *   mistake, a stolen owner session guessing at someone else's code, and a phishing line "read me the code".
+ * - **The approver learns only what it needs to decide:** the device's label, whether it asked from this computer or the
+ *   network, its address, and the time left. Never the request id.
+ *
+ * Deliberately knows nothing of HTTP, sessions or who the approver is: the caller has already decided that.
+ * In memory only — a restart drops every request, as it does an unused login code.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { isIPv4, isIPv6 } from "node:net";
+import { constantTimeMatches, formatOneTimeCode, generateOneTimeCode, normalizeOneTimeCode } from "./auth/one-time-code.js";
+import { fleetCookieName } from "./web-cookie-names.js";
+export const DEVICE_LOGIN_TTL_MS = 5 * 60 * 1000;
+export const MAX_PENDING_DEVICE_LOGINS = 8;
+export const MAX_PENDING_PER_PEER = 2;
+/** Requests one address, and the whole fleet, may ask for per DEVICE_LOGIN_CREATE_WINDOW_MS. */
+export const DEVICE_LOGIN_CREATE_WINDOW_MS = 10 * 60 * 1000;
+export const DEVICE_LOGIN_CREATES_PER_PEER = 6;
+export const DEVICE_LOGIN_CREATES_GLOBAL = 20;
+/**
+ * The approving side's breaker: this many wrong codes in the window pause it. Shorter than a request's life on purpose
+ * (a pause that outlasted it would end every request waiting): ten tries per two minutes is still hopeless against a
+ * 40-bit code among at most eight, and the person approving is already an owner-verified session.
+ */
+export const DEVICE_APPROVE_WINDOW_MS = 15 * 60 * 1000;
+export const DEVICE_APPROVE_THRESHOLD = 10;
+export const DEVICE_APPROVE_PAUSE_MS = 2 * 60 * 1000;
+/** Compared against when nothing waits, so "no request" costs what "wrong code" costs. */
+const NO_REQUEST_PLACEHOLDER = "AAAAAAAA";
+/**
+ * The key the per-address limits count by. An IPv4 address (also one an IPv6 socket reports as `::ffff:a.b.c.d`) is its
+ * own key. An IPv6 address counts by its /64: a single network hands one machine a whole /64, so keying by the full
+ * address would give one host as many allowances as it has addresses. Whatever is not an IP address (`unknown`) is its
+ * own key. Never read from a header: only the socket's peer.
+ */
+export function peerKeyOf(address) {
+    const a = address.replace(/%.*$/, "").toLowerCase(); // a zone id (fe80::1%eth0) is not part of the address
+    const dotted = /^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/.exec(a);
+    if (dotted)
+        return dotted[1];
+    const hex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/.exec(a);
+    if (hex) {
+        const hi = parseInt(hex[1], 16), lo = parseInt(hex[2], 16);
+        return `${hi >> 8}.${hi & 255}.${lo >> 8}.${lo & 255}`;
+    }
+    if (isIPv4(a) || !isIPv6(a))
+        return a;
+    const halves = a.split("::");
+    const groups = (part) => (part ? part.split(":").flatMap(g => {
+        if (!g.includes("."))
+            return [g];
+        const [b0, b1, b2, b3] = g.split(".").map(Number); // an embedded IPv4 is two groups
+        return [((b0 << 8) | b1).toString(16), ((b2 << 8) | b3).toString(16)];
+    }) : []);
+    const head = groups(halves[0]), tail = halves.length > 1 ? groups(halves[1]) : [];
+    const all = halves.length > 1 ? [...head, ...Array(Math.max(0, 8 - head.length - tail.length)).fill("0"), ...tail] : head;
+    return `${all.slice(0, 4).map(g => parseInt(g || "0", 16).toString(16)).join(":")}::/64`;
+}
+/** The key a request id is kept under: its hash, so the map never holds what the new browser presents. */
+function keyOf(requestId) {
+    return createHash("sha256").update(`agend-device-login-v1:${requestId}`).digest("hex");
+}
+const REQUEST_ID = /^[0-9a-f]{64}$/;
+export class DeviceLoginRequests {
+    entries = new Map();
+    createdByPeer = new Map();
+    created = [];
+    approveFailures = [];
+    approvePausedUntil = 0;
+    now;
+    generate;
+    onEvent;
+    constructor(opts = {}) {
+        this.now = opts.now ?? (() => Date.now());
+        this.generate = opts.generate ?? generateOneTimeCode;
+        this.onEvent = opts.onEvent ?? (() => { });
+    }
+    /** How many requests are waiting (or approved and not yet taken up) — for tests and status lines. */
+    get size() { this.prune(); return this.entries.size; }
+    /** How many addresses the creation rate limit is holding stamps for (for tests: it must not grow without bound). */
+    get rateTableSize() { return this.createdByPeer.size; }
+    /**
+     * A new request. `replaces` is the request id the same browser held (its cookie): it is withdrawn first, so "get a
+     * new code" never counts against the room — but it does count against the rate. `label`, `peer` and `address` are
+     * the server's own reading of the request (never body input); they are what the approver is shown.
+     */
+    create(input) {
+        const now = this.now();
+        this.prune();
+        if (input.replaces && REQUEST_ID.test(input.replaces))
+            this.entries.delete(keyOf(input.replaces));
+        const cutoff = now - DEVICE_LOGIN_CREATE_WINDOW_MS;
+        this.created = this.created.filter(t => t > cutoff);
+        // The whole per-address table, not just this address: one whose every stamp is out of the window is forgotten, so
+        // addresses seen once never pile up (the table holds at most what the window admitted — DEVICE_LOGIN_CREATES_GLOBAL).
+        for (const [key, stamps] of this.createdByPeer) {
+            const live = stamps.filter(t => t > cutoff);
+            if (live.length)
+                this.createdByPeer.set(key, live);
+            else
+                this.createdByPeer.delete(key);
+        }
+        const mine = this.createdByPeer.get(input.peerKey) ?? [];
+        if (mine.length >= DEVICE_LOGIN_CREATES_PER_PEER)
+            return { kind: "limited", retryAfterMs: Math.max(1000, mine[0] + DEVICE_LOGIN_CREATE_WINDOW_MS - now) };
+        if (this.created.length >= DEVICE_LOGIN_CREATES_GLOBAL)
+            return { kind: "limited", retryAfterMs: Math.max(1000, this.created[0] + DEVICE_LOGIN_CREATE_WINDOW_MS - now) };
+        let waitingHere = 0;
+        for (const e of this.entries.values())
+            if (e.peerKey === input.peerKey)
+                waitingHere++;
+        if (this.entries.size >= MAX_PENDING_DEVICE_LOGINS || waitingHere >= MAX_PENDING_PER_PEER)
+            return { kind: "full" };
+        // A code no other waiting request has (the room is eight; a clash is a one-in-a-trillion retry).
+        let code = this.generate();
+        for (let n = 0; n < 16 && this.codeTaken(code); n++)
+            code = this.generate();
+        if (this.codeTaken(code))
+            return { kind: "full" };
+        const requestId = randomBytes(32).toString("hex");
+        const expiresAt = now + DEVICE_LOGIN_TTL_MS;
+        this.entries.set(keyOf(requestId), { code, label: input.label, peer: input.peer, address: input.address, peerKey: input.peerKey,
+            epoch: input.epoch, createdAt: now, expiresAt, state: "pending" });
+        this.created.push(now);
+        this.createdByPeer.set(input.peerKey, [...mine, now]);
+        this.onEvent("created");
+        return { kind: "ok", requestId, code: formatOneTimeCode(code), expiresAt };
+    }
+    /**
+     * The new browser asks where its request stands. An approved one is spent by this very call (`claimed`): the caller
+     * then makes the session, and a second poll with the same id finds nothing. A denied one is told once and forgotten.
+     * An unknown, malformed, expired or other-token id is `expired` — the answer never says which.
+     */
+    poll(requestId, currentEpoch) {
+        if (!requestId || !REQUEST_ID.test(requestId))
+            return { kind: "expired" };
+        this.prune();
+        const key = keyOf(requestId), e = this.entries.get(key);
+        if (!e)
+            return { kind: "expired" };
+        if (e.epoch !== currentEpoch) {
+            this.entries.delete(key);
+            return { kind: "expired" };
+        }
+        if (e.state === "pending")
+            return { kind: "pending", expiresAt: e.expiresAt };
+        this.entries.delete(key);
+        if (e.state === "denied")
+            return { kind: "denied" };
+        this.onEvent("claimed");
+        return { kind: "claimed", label: e.label, approvedBy: e.decidedBy ?? "" };
+    }
+    /** The browser leaves the page (or asks again): its request is withdrawn. Whatever the id, nothing is said. */
+    cancel(requestId) {
+        if (requestId && REQUEST_ID.test(requestId))
+            this.entries.delete(keyOf(requestId));
+    }
+    /** The approving side types a code: the request it names, for the confirm screen. A wrong code counts. */
+    lookup(input, currentEpoch) {
+        const m = this.match(input, currentEpoch);
+        return m.kind === "found" ? { kind: "ok", view: viewOf(m.entry) } : m;
+    }
+    /**
+     * Approve or deny the request this code names. Only a pending one changes: one already decided says what it is now,
+     * so a second tap approves nothing twice. `by` is the approving session's handle (logged, never shown to the device).
+     */
+    decide(input, decision, by, currentEpoch) {
+        const m = this.match(input, currentEpoch);
+        if (m.kind !== "found")
+            return m;
+        const e = m.entry;
+        if (e.state !== "pending")
+            return { kind: "decided", state: e.state };
+        e.state = decision;
+        e.decidedBy = by;
+        this.onEvent(decision === "approved" ? "approved" : "denied");
+        return { kind: "ok", view: viewOf(e) };
+    }
+    /** `/dashboard revoke`: every request is withdrawn. */
+    revokeAll() { this.entries.clear(); }
+    /** How long the approving side stays paused by its breaker (0 when it is closed). */
+    approvePausedForMs() { return Math.max(0, this.approvePausedUntil - this.now()); }
+    codeTaken(code) {
+        for (const e of this.entries.values())
+            if (e.code === code)
+                return true;
+        return false;
+    }
+    match(input, currentEpoch) {
+        const now = this.now();
+        if (now < this.approvePausedUntil)
+            return { kind: "paused", retryAfterMs: this.approvePausedUntil - now };
+        const provided = normalizeOneTimeCode(input);
+        // Nothing typed is not a guess; it costs nothing.
+        if (!provided)
+            return { kind: "invalid" };
+        this.prune();
+        for (const [key, e] of this.entries)
+            if (e.epoch !== currentEpoch)
+                this.entries.delete(key); // the token was rotated
+        if (!this.entries.size) {
+            constantTimeMatches(provided, NO_REQUEST_PLACEHOLDER);
+            return { kind: "invalid" };
+        }
+        // Every waiting code is compared, in constant time each: where the match is does not show in the time taken.
+        let hit = null;
+        for (const e of this.entries.values())
+            if (constantTimeMatches(provided, e.code))
+                hit = e;
+        if (hit)
+            return { kind: "found", entry: hit };
+        this.approveFailures = this.approveFailures.filter(t => t > now - DEVICE_APPROVE_WINDOW_MS);
+        this.approveFailures.push(now);
+        if (this.approveFailures.length >= DEVICE_APPROVE_THRESHOLD) {
+            this.approvePausedUntil = now + DEVICE_APPROVE_PAUSE_MS;
+            this.approveFailures = [];
+            this.onEvent("breaker-open");
+        }
+        return { kind: "invalid" };
+    }
+    prune() {
+        const now = this.now();
+        for (const [key, e] of this.entries)
+            if (now >= e.expiresAt)
+                this.entries.delete(key);
+    }
+}
+function viewOf(e) {
+    return { code: formatOneTimeCode(e.code), label: e.label, peer: e.peer, address: e.address, expiresAt: e.expiresAt, state: e.state };
+}
+// ── The new browser's one cookie: the request id, HttpOnly, and sent only to /auth/device-login ──
+export const DEVICE_LOGIN_COOKIE = "agend_device_login";
+export const DEVICE_LOGIN_PATH = "/auth/device-login";
+export function buildDeviceLoginCookie(requestId, secure, webToken, maxAgeSeconds) {
+    return [`${fleetCookieName(DEVICE_LOGIN_COOKIE, webToken)}=${requestId}`, `Path=${DEVICE_LOGIN_PATH}`, "HttpOnly", "SameSite=Strict",
+        `Max-Age=${Math.max(0, Math.floor(maxAgeSeconds))}`, ...(secure ? ["Secure"] : [])].join("; ");
+}
+export function clearDeviceLoginCookie(secure, webToken) {
+    return buildDeviceLoginCookie("", secure, webToken, 0);
+}
+/** The request id this browser holds, if the cookie header carries a well-formed one. */
+export function readDeviceLoginCookie(cookieHeader, webToken) {
+    if (!cookieHeader)
+        return undefined;
+    const name = fleetCookieName(DEVICE_LOGIN_COOKIE, webToken);
+    for (const part of cookieHeader.split(";")) {
+        const at = part.indexOf("=");
+        if (at < 0 || part.slice(0, at).trim() !== name)
+            continue;
+        const value = part.slice(at + 1).trim();
+        if (REQUEST_ID.test(value))
+            return value;
+    }
+    return undefined;
+}
+//# sourceMappingURL=web-device-login.js.map

package/dist/web-device-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-device-login.js","sourceRoot":"","sources":["../src/web-device-login.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAC5H,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACjD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AACtC,gGAAgG;AAChG,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC5D,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC;AAC9C;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACvD,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD,0FAA0F;AAC1F,MAAM,sBAAsB,GAAG,UAAU,CAAC;AAgE1C;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe;IACvC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAuB,sDAAsD;IACjI,MAAM,MAAM,GAAG,oCAAoC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5D,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,0CAA0C,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,GAAG,EAAE,CAAC;QAAC,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC;QAAC,OAAO,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC;IAAC,CAAC;IAClI,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,CAAC,IAAwB,EAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;QACzF,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAqC,CAAC,CAAK,iCAAiC;QAC5H,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACT,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,GAAG,KAAK,CAAS,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClI,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC;AAC3F,CAAC;AAED,0GAA0G;AAC1G,SAAS,KAAK,CAAC,SAAiB;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,yBAAyB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,GAAG,gBAAgB,CAAC;AAEpC,MAAM,OAAO,mBAAmB;IACb,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACnC,aAAa,GAAG,IAAI,GAAG,EAAoB,CAAC;IACrD,OAAO,GAAa,EAAE,CAAC;IACvB,eAAe,GAAa,EAAE,CAAC;IAC/B,kBAAkB,GAAG,CAAC,CAAC;IACd,GAAG,CAAe;IAClB,QAAQ,CAAe;IACvB,OAAO,CAAkF;IAE1G,YAAY,IAAI,GAA+B,EAAE;QAC/C,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,mBAAmB,CAAC;QACrD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC5C,CAAC;IAED,qGAAqG;IACrG,IAAI,IAAI,KAAa,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAE9D,oHAAoH;IACpH,IAAI,aAAa,KAAa,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;IAE/D;;;;OAIG;IACH,MAAM,CAAC,KAAmH;QACxH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,CAAC,QAAQ,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,GAAG,GAAG,6BAA6B,CAAC;QACnD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;QACpD,kHAAkH;QAClH,sHAAsH;QACtH,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC;YAC5C,IAAI,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;;gBAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,IAAI,6BAA6B;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAE,GAAG,6BAA6B,GAAG,GAAG,CAAC,EAAE,CAAC;QAC3J,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,2BAA2B;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,GAAG,6BAA6B,GAAG,GAAG,CAAC,EAAE,CAAC;QACzK,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;gBAAE,WAAW,EAAE,CAAC;QACtF,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,yBAAyB,IAAI,WAAW,IAAI,oBAAoB;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAEnH,iGAAiG;QACjG,IAAI,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE;YAAE,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC5E,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAClD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,GAAG,GAAG,mBAAmB,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;YAC7H,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC;IAC7E,CAAC;IAED;;;;OAIG;IACH,IAAI,CAAC,SAA6B,EAAE,YAAoB;QACtD,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACnC,IAAI,CAAC,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAAC,CAAC;QACvF,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC;QAC9E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QACpD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,+GAA+G;IAC/G,MAAM,CAAC,SAA6B;QAClC,IAAI,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,0GAA0G;IAC1G,MAAM,CAAC,KAAa,EAAE,YAAoB;QACxC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC1C,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAa,EAAE,QAA+B,EAAE,EAAU,EAAE,YAAoB;QACrF,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC1C,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAClB,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QACtE,CAAC,CAAC,KAAK,GAAG,QAAQ,CAAC;QACnB,CAAC,CAAC,SAAS,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACzC,CAAC;IAED,uDAAuD;IACvD,SAAS,KAAW,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAE3C,qFAAqF;IACrF,kBAAkB,KAAa,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAElF,SAAS,CAAC,IAAY;QAC5B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,KAAa,EAAE,YAAoB;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,GAAG,IAAI,CAAC,kBAAkB;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,kBAAkB,GAAG,GAAG,EAAE,CAAC;QAC1G,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC7C,kDAAkD;QAClD,IAAI,CAAC,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,CAAC,KAAK,KAAK,YAAY;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAO,wBAAwB;QAC3H,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACvB,mBAAmB,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;YACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QACD,6GAA6G;QAC7G,IAAI,GAAG,GAAiB,IAAI,CAAC;QAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;YAAE,IAAI,mBAAmB,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC;gBAAE,GAAG,GAAG,CAAC,CAAC;QAC1F,IAAI,GAAG;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,wBAAwB,CAAC,CAAC;QAC5F,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,IAAI,wBAAwB,EAAE,CAAC;YAC5D,IAAI,CAAC,kBAAkB,GAAG,GAAG,GAAG,uBAAuB,CAAC;YACxD,IAAI,CAAC,eAAe,GAAG,EAAE,CAAC;YAC1B,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAEO,KAAK;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO;YAAE,IAAI,GAAG,IAAI,CAAC,CAAC,SAAS;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxF,CAAC;CACF;AAED,SAAS,MAAM,CAAC,CAAQ;IACtB,OAAO,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AACvI,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,MAAM,mBAAmB,GAAG,oBAAoB,CAAC;AACxD,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAEtD,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,MAAe,EAAE,QAAgB,EAAE,aAAqB;IAChH,OAAO,CAAC,GAAG,eAAe,CAAC,mBAAmB,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,EAAE,QAAQ,iBAAiB,EAAE,EAAE,UAAU,EAAE,iBAAiB;QAClI,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAe,EAAE,QAAgB;IACtE,OAAO,sBAAsB,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,qBAAqB,CAAC,YAAgC,EAAE,QAAgB;IACtF,IAAI,CAAC,YAAY;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,IAAI,GAAG,eAAe,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI;YAAE,SAAS;QAC1D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/web-office-skins.d.ts

@@ -72,6 +72,15 @@ export declare function checkSkinPicture(name: string, bytes: Uint8Array): {
     width: number;
     height: number;
 } | SkinRefusal;
+/** #2861: the largest portrait, and the largest dialogue-box frame (image px). */
+export declare const PORTRAIT_MAX: {
+    w: number;
+    h: number;
+};
+export declare const FRAME_MAX: {
+    w: number;
+    h: number;
+};
 /**
  * An upload, as the page sends it: { manifest, files: { <src>: <base64> }, name? }. Every rule, or a refusal naming
  * where it broke. Pure (no I/O); `by` and `now` are kept in the record.