@turnkey/react-wallet-kit 1.11.0 → 2.0.0

package/dist/utils/oauth/pkce.js

@@ -0,0 +1,48 @@
+'use strict';
+
+var config = require('./config.js');
+
+/**
+ * Generates a PKCE challenge pair (verifier and code challenge)
+ */
+async function generateChallengePair() {
+  const randomBytes = new Uint8Array(32);
+  window.crypto.getRandomValues(randomBytes);
+  const verifier = btoa(String.fromCharCode(...randomBytes)).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  const encoder = new TextEncoder();
+  const data = encoder.encode(verifier);
+  const digest = await window.crypto.subtle.digest("SHA-256", data);
+  const base64Challenge = btoa(String.fromCharCode(...new Uint8Array(digest))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+  return {
+    verifier,
+    codeChallenge: base64Challenge
+  };
+}
+/**
+ * Exchanges Facebook authorization code for token
+ */
+async function exchangeFacebookCodeForToken(clientId, redirectUri, code, codeVerifier) {
+  const params = new URLSearchParams({
+    client_id: clientId,
+    redirect_uri: redirectUri,
+    code_verifier: codeVerifier,
+    code: code,
+    grant_type: "authorization_code"
+  });
+  const response = await fetch(config.FACEBOOK_GRAPH_URL, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/x-www-form-urlencoded"
+    },
+    body: params.toString()
+  });
+  if (!response.ok) {
+    const errorData = await response.json();
+    throw new Error(`Facebook token exchange failed: ${JSON.stringify(errorData)}`);
+  }
+  return await response.json();
+}
+
+exports.exchangeFacebookCodeForToken = exchangeFacebookCodeForToken;
+exports.generateChallengePair = generateChallengePair;
+//# sourceMappingURL=pkce.js.map

package/dist/utils/oauth/pkce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.js","sources":["../../../src/utils/oauth/pkce.ts"],"sourcesContent":[null],"names":["generateChallengePair","randomBytes","Uint8Array","window","crypto","getRandomValues","verifier","btoa","String","fromCharCode","replace","encoder","TextEncoder","data","encode","digest","subtle","base64Challenge","codeChallenge","exchangeFacebookCodeForToken","clientId","redirectUri","code","codeVerifier","params","URLSearchParams","client_id","redirect_uri","code_verifier","grant_type","response","fetch","FACEBOOK_GRAPH_URL","method","headers","body","toString","ok","errorData","json","Error","JSON","stringify"],"mappings":";;;;AAEA;;AAEG;AACI,eAAeA,qBAAqBA,GAAA;AAIzC,EAAA,MAAMC,WAAW,GAAG,IAAIC,UAAU,CAAC,EAAE,CAAC;AACtCC,EAAAA,MAAM,CAACC,MAAM,CAACC,eAAe,CAACJ,WAAW,CAAC;AAC1C,EAAA,MAAMK,QAAQ,GAAGC,IAAI,CAACC,MAAM,CAACC,YAAY,CAAC,GAAGR,WAAW,CAAC,CAAC,CACvDS,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AAErB,EAAA,MAAMC,OAAO,GAAG,IAAIC,WAAW,EAAE;AACjC,EAAA,MAAMC,IAAI,GAAGF,OAAO,CAACG,MAAM,CAACR,QAAQ,CAAC;AACrC,EAAA,MAAMS,MAAM,GAAG,MAAMZ,MAAM,CAACC,MAAM,CAACY,MAAM,CAACD,MAAM,CAAC,SAAS,EAAEF,IAAI,CAAC;AAEjE,EAAA,MAAMI,eAAe,GAAGV,IAAI,CAACC,MAAM,CAACC,YAAY,CAAC,GAAG,IAAIP,UAAU,CAACa,MAAM,CAAC,CAAC,CAAC,CACzEL,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;EAErB,OAAO;IAAEJ,QAAQ;AAAEY,IAAAA,aAAa,EAAED;GAAiB;AACrD;AAEA;;AAEG;AACI,eAAeE,4BAA4BA,CAChDC,QAAgB,EAChBC,WAAmB,EACnBC,IAAY,EACZC,YAAoB,EAAA;AAEpB,EAAA,MAAMC,MAAM,GAAG,IAAIC,eAAe,CAAC;AACjCC,IAAAA,SAAS,EAAEN,QAAQ;AACnBO,IAAAA,YAAY,EAAEN,WAAW;AACzBO,IAAAA,aAAa,EAAEL,YAAY;AAC3BD,IAAAA,IAAI,EAAEA,IAAI;AACVO,IAAAA,UAAU,EAAE;AACb,GAAA,CAAC;AAEF,EAAA,MAAMC,QAAQ,GAAG,MAAMC,KAAK,CAACC,yBAAkB,EAAE;AAC/CC,IAAAA,MAAM,EAAE,MAAM;AACdC,IAAAA,OAAO,EAAE;AACP,MAAA,cAAc,EAAE;KACjB;AACDC,IAAAA,IAAI,EAAEX,MAAM,CAACY,QAAQ;AACtB,GAAA,CAAC;AAEF,EAAA,IAAI,CAACN,QAAQ,CAACO,EAAE,EAAE;AAChB,IAAA,MAAMC,SAAS,GAAG,MAAMR,QAAQ,CAACS,IAAI,EAAE;IACvC,MAAM,IAAIC,KAAK,CACb,CAAA,gCAAA,EAAmCC,IAAI,CAACC,SAAS,CAACJ,SAAS,CAAC,CAAA,CAAE,CAC/D;AACH,EAAA;AAEA,EAAA,OAAO,MAAMR,QAAQ,CAACS,IAAI,EAAE;AAC9B;;;;;"}

package/dist/utils/oauth/pkce.mjs

@@ -0,0 +1,85 @@
+import { asyncToGenerator as _asyncToGenerator, regenerator as _regenerator, toConsumableArray as _toConsumableArray } from '../../_virtual/_rollupPluginBabelHelpers.mjs';
+import { FACEBOOK_GRAPH_URL } from './config.mjs';
+
+/**
+ * Generates a PKCE challenge pair (verifier and code challenge)
+ */
+function generateChallengePair() {
+  return _generateChallengePair.apply(this, arguments);
+}
+/**
+ * Exchanges Facebook authorization code for token
+ */
+function _generateChallengePair() {
+  _generateChallengePair = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee() {
+    var randomBytes, verifier, encoder, data, digest, base64Challenge;
+    return _regenerator().w(function (_context) {
+      while (1) switch (_context.n) {
+        case 0:
+          randomBytes = new Uint8Array(32);
+          window.crypto.getRandomValues(randomBytes);
+          verifier = btoa(String.fromCharCode.apply(String, _toConsumableArray(randomBytes))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+          encoder = new TextEncoder();
+          data = encoder.encode(verifier);
+          _context.n = 1;
+          return window.crypto.subtle.digest("SHA-256", data);
+        case 1:
+          digest = _context.v;
+          base64Challenge = btoa(String.fromCharCode.apply(String, _toConsumableArray(new Uint8Array(digest)))).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+          return _context.a(2, {
+            verifier: verifier,
+            codeChallenge: base64Challenge
+          });
+      }
+    }, _callee);
+  }));
+  return _generateChallengePair.apply(this, arguments);
+}
+function exchangeFacebookCodeForToken(_x, _x2, _x3, _x4) {
+  return _exchangeFacebookCodeForToken.apply(this, arguments);
+}
+function _exchangeFacebookCodeForToken() {
+  _exchangeFacebookCodeForToken = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2(clientId, redirectUri, code, codeVerifier) {
+    var params, response, errorData;
+    return _regenerator().w(function (_context2) {
+      while (1) switch (_context2.n) {
+        case 0:
+          params = new URLSearchParams({
+            client_id: clientId,
+            redirect_uri: redirectUri,
+            code_verifier: codeVerifier,
+            code: code,
+            grant_type: "authorization_code"
+          });
+          _context2.n = 1;
+          return fetch(FACEBOOK_GRAPH_URL, {
+            method: "POST",
+            headers: {
+              "Content-Type": "application/x-www-form-urlencoded"
+            },
+            body: params.toString()
+          });
+        case 1:
+          response = _context2.v;
+          if (response.ok) {
+            _context2.n = 3;
+            break;
+          }
+          _context2.n = 2;
+          return response.json();
+        case 2:
+          errorData = _context2.v;
+          throw new Error("Facebook token exchange failed: ".concat(JSON.stringify(errorData)));
+        case 3:
+          _context2.n = 4;
+          return response.json();
+        case 4:
+          return _context2.a(2, _context2.v);
+      }
+    }, _callee2);
+  }));
+  return _exchangeFacebookCodeForToken.apply(this, arguments);
+}
+
+export { exchangeFacebookCodeForToken, generateChallengePair };
+//# sourceMappingURL=pkce.mjs.map

package/dist/utils/oauth/pkce.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"pkce.mjs","sources":["../../../src/utils/oauth/pkce.ts"],"sourcesContent":[null],"names":["generateChallengePair","_generateChallengePair","apply","arguments","_asyncToGenerator","_regenerator","m","_callee","randomBytes","verifier","encoder","data","digest","base64Challenge","w","_context","n","Uint8Array","window","crypto","getRandomValues","btoa","String","fromCharCode","_toConsumableArray","replace","TextEncoder","encode","subtle","v","a","codeChallenge","exchangeFacebookCodeForToken","_x","_x2","_x3","_x4","_exchangeFacebookCodeForToken","_callee2","clientId","redirectUri","code","codeVerifier","params","response","errorData","_context2","URLSearchParams","client_id","redirect_uri","code_verifier","grant_type","fetch","FACEBOOK_GRAPH_URL","method","headers","body","toString","ok","json","Error","concat","JSON","stringify"],"mappings":";;;AAEA;;AAEG;AACH,SAAsBA,qBAAqBA,GAAA;AAAA,EAAA,OAAAC,sBAAA,CAAAC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA;AAAA;AAuB3C;;AAEG;AAFH,SAAAF,sBAAAA,GAAA;EAAAA,sBAAA,GAAAG,iBAAA,cAAAC,YAAA,GAAAC,CAAA,CAvBO,SAAAC,OAAAA,GAAA;IAAA,IAAAC,WAAA,EAAAC,QAAA,EAAAC,OAAA,EAAAC,IAAA,EAAAC,MAAA,EAAAC,eAAA;AAAA,IAAA,OAAAR,YAAA,EAAA,CAAAS,CAAA,CAAA,UAAAC,QAAA,EAAA;MAAA,OAAA,CAAA,EAAA,QAAAA,QAAA,CAAAC,CAAA;AAAA,QAAA,KAAA,CAAA;AAICR,UAAAA,WAAW,GAAG,IAAIS,UAAU,CAAC,EAAE,CAAC;AACtCC,UAAAA,MAAM,CAACC,MAAM,CAACC,eAAe,CAACZ,WAAW,CAAC;AACpCC,UAAAA,QAAQ,GAAGY,IAAI,CAACC,MAAM,CAACC,YAAY,CAAArB,KAAA,CAAnBoB,MAAM,EAAAE,kBAAA,CAAiBhB,WAAW,CAAA,CAAC,CAAC,CACvDiB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;AAEff,UAAAA,OAAO,GAAG,IAAIgB,WAAW,EAAE;AAC3Bf,UAAAA,IAAI,GAAGD,OAAO,CAACiB,MAAM,CAAClB,QAAQ,CAAC;AAAAM,UAAAA,QAAA,CAAAC,CAAA,GAAA,CAAA;UAAA,OAChBE,MAAM,CAACC,MAAM,CAACS,MAAM,CAAChB,MAAM,CAAC,SAAS,EAAED,IAAI,CAAC;AAAA,QAAA,KAAA,CAAA;UAA3DC,MAAM,GAAAG,QAAA,CAAAc,CAAA;AAENhB,UAAAA,eAAe,GAAGQ,IAAI,CAACC,MAAM,CAACC,YAAY,CAAArB,KAAA,CAAnBoB,MAAM,EAAAE,kBAAA,CAAiB,IAAIP,UAAU,CAACL,MAAM,CAAC,CAAA,CAAC,CAAC,CACzEa,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CACnBA,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;UAAA,OAAAV,QAAA,CAAAe,CAAA,CAAA,CAAA,EAEd;AAAErB,YAAAA,QAAQ,EAARA,QAAQ;AAAEsB,YAAAA,aAAa,EAAElB;WAAiB,CAAA;AAAA;AAAA,IAAA,CAAA,EAAAN,OAAA,CAAA;EAAA,CACpD,CAAA,CAAA;AAAA,EAAA,OAAAN,sBAAA,CAAAC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA;AAAA;AAKD,SAAsB6B,4BAA4BA,CAAAC,EAAA,EAAAC,GAAA,EAAAC,GAAA,EAAAC,GAAA,EAAA;AAAA,EAAA,OAAAC,6BAAA,CAAAnC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA;AAAA;AA8BjD,SAAAkC,6BAAAA,GAAA;AAAAA,EAAAA,6BAAA,GAAAjC,iBAAA,cAAAC,YAAA,GAAAC,CAAA,CA9BM,SAAAgC,QAAAA,CACLC,QAAgB,EAChBC,WAAmB,EACnBC,IAAY,EACZC,YAAoB,EAAA;AAAA,IAAA,IAAAC,MAAA,EAAAC,QAAA,EAAAC,SAAA;AAAA,IAAA,OAAAxC,YAAA,EAAA,CAAAS,CAAA,CAAA,UAAAgC,SAAA,EAAA;MAAA,OAAA,CAAA,EAAA,QAAAA,SAAA,CAAA9B,CAAA;AAAA,QAAA,KAAA,CAAA;UAEd2B,MAAM,GAAG,IAAII,eAAe,CAAC;AACjCC,YAAAA,SAAS,EAAET,QAAQ;AACnBU,YAAAA,YAAY,EAAET,WAAW;AACzBU,YAAAA,aAAa,EAAER,YAAY;AAC3BD,YAAAA,IAAI,EAAEA,IAAI;AACVU,YAAAA,UAAU,EAAE;AACb,WAAA,CAAC;AAAAL,UAAAA,SAAA,CAAA9B,CAAA,GAAA,CAAA;UAAA,OAEqBoC,KAAK,CAACC,kBAAkB,EAAE;AAC/CC,YAAAA,MAAM,EAAE,MAAM;AACdC,YAAAA,OAAO,EAAE;AACP,cAAA,cAAc,EAAE;aACjB;AACDC,YAAAA,IAAI,EAAEb,MAAM,CAACc,QAAQ;AACtB,WAAA,CAAC;AAAA,QAAA,KAAA,CAAA;UANIb,QAAQ,GAAAE,SAAA,CAAAjB,CAAA;UAAA,IAQTe,QAAQ,CAACc,EAAE,EAAA;AAAAZ,YAAAA,SAAA,CAAA9B,CAAA,GAAA,CAAA;AAAA,YAAA;AAAA,UAAA;AAAA8B,UAAAA,SAAA,CAAA9B,CAAA,GAAA,CAAA;AAAA,UAAA,OACU4B,QAAQ,CAACe,IAAI,EAAE;AAAA,QAAA,KAAA,CAAA;UAAjCd,SAAS,GAAAC,SAAA,CAAAjB,CAAA;AAAA,UAAA,MACT,IAAI+B,KAAK,CAAA,kCAAA,CAAAC,MAAA,CACsBC,IAAI,CAACC,SAAS,CAAClB,SAAS,CAAC,CAAE,CAC/D;AAAA,QAAA,KAAA,CAAA;AAAAC,UAAAA,SAAA,CAAA9B,CAAA,GAAA,CAAA;AAAA,UAAA,OAGU4B,QAAQ,CAACe,IAAI,EAAE;AAAA,QAAA,KAAA,CAAA;AAAA,UAAA,OAAAb,SAAA,CAAAhB,CAAA,CAAA,CAAA,EAAAgB,SAAA,CAAAjB,CAAA,CAAA;AAAA;AAAA,IAAA,CAAA,EAAAS,QAAA,CAAA;EAAA,CAC7B,CAAA,CAAA;AAAA,EAAA,OAAAD,6BAAA,CAAAnC,KAAA,CAAA,IAAA,EAAAC,SAAA,CAAA;AAAA;;;;"}

package/dist/utils/oauth/storage.d.ts

@@ -0,0 +1,59 @@
+import { OAuthProviders } from "@turnkey/sdk-types";
+export declare const OAUTH_INTENT_ADD_PROVIDER = "addProvider";
+export declare const OAUTH_ADD_PROVIDER_METADATA_KEY = "oauth_add_provider_metadata";
+export declare const OAUTH_STATE_KEY = "oauth_state";
+export type OAuthAddProviderMetadata = {
+    organizationId: string;
+    userId: string;
+    stampWith?: string;
+    successPageDuration?: number;
+};
+/** Provider type for PKCE-based OAuth */
+export type PKCEProvider = OAuthProviders.FACEBOOK | OAuthProviders.DISCORD | OAuthProviders.X;
+/**
+ * Stores OAuth add provider metadata in local storage
+ * Used for addOauthProvider flow if opening in-page
+ */
+export declare function storeOAuthAddProviderMetadata(metadata: OAuthAddProviderMetadata): void;
+/**
+ * Retrieves OAuth add provider metadata from local storage
+ */
+export declare function getOAuthAddProviderMetadata(): OAuthAddProviderMetadata | null;
+/**
+ * Gets the verifier key name for a PKCE provider
+ */
+export declare function getPKCEVerifierKey(provider: PKCEProvider): string;
+/**
+ * Retrieves and removes the PKCE verifier from local storage
+ * @param provider - The OAuth provider
+ * @returns The verifier string
+ * @throws TurnkeyError if verifier is not found
+ */
+export declare function consumePKCEVerifier(provider: PKCEProvider): string;
+/**
+ * Stores the PKCE verifier in local storage
+ * @param provider - The OAuth provider
+ * @param verifier - The verifier string to store
+ */
+export declare function storePKCEVerifier(provider: PKCEProvider, verifier: string): void;
+/**
+ * Checks if a PKCE verifier exists for a provider (without consuming it)
+ * @param provider - The OAuth provider
+ * @returns true if verifier exists
+ */
+export declare function hasPKCEVerifier(provider: PKCEProvider): boolean;
+/**
+ * Stores the OAuth state string in local storage for later validation
+ * @param state - The OAuth state string to store
+ */
+export declare function storeOAuthState(state: string): void;
+/**
+ * Consumes the OAuth state string from local storage for validation
+ * @param returnedState - The OAuth state string returned from the provider
+ */
+export declare function consumeOAuthState(returnedState: string): void;
+/**
+ * Clears all OAuth-related data from local storage
+ */
+export declare function clearAllOAuthData(): void;
+//# sourceMappingURL=storage.d.ts.map

package/dist/utils/oauth/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/utils/oauth/storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,cAAc,EACf,MAAM,oBAAoB,CAAC;AAE5B,eAAO,MAAM,yBAAyB,gBAAgB,CAAC;AACvD,eAAO,MAAM,+BAA+B,gCAAgC,CAAC;AAC7E,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAE7C,MAAM,MAAM,wBAAwB,GAAG;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,yCAAyC;AACzC,MAAM,MAAM,YAAY,GACpB,cAAc,CAAC,QAAQ,GACvB,cAAc,CAAC,OAAO,GACtB,cAAc,CAAC,CAAC,CAAC;AAOrB;;;GAGG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,wBAAwB,GACjC,IAAI,CAKN;AAED;;GAEG;AACH,wBAAgB,2BAA2B,IAAI,wBAAwB,GAAG,IAAI,CAQ7E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAEjE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,YAAY,GAAG,MAAM,CAWlE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,YAAY,EACtB,QAAQ,EAAE,MAAM,GACf,IAAI,CAEN;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAE/D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,QAE5C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,QAoBtD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAWxC"}

package/dist/utils/oauth/storage.js

@@ -0,0 +1,116 @@
+'use strict';
+
+var sdkTypes = require('@turnkey/sdk-types');
+
+const OAUTH_INTENT_ADD_PROVIDER = "addProvider";
+const OAUTH_ADD_PROVIDER_METADATA_KEY = "oauth_add_provider_metadata";
+const OAUTH_STATE_KEY = "oauth_state";
+// We use localStorage instead of sessionStorage to store OAuth data since the user
+// might leave the current browsing context during the OAuth flow. We ran into this
+// with X OAuth on Android where if the user has the X app installed, oauth would
+// open the native app and when they come back to the browser, sessionStorage is gone
+/**
+ * Stores OAuth add provider metadata in local storage
+ * Used for addOauthProvider flow if opening in-page
+ */
+function storeOAuthAddProviderMetadata(metadata) {
+  localStorage.setItem(OAUTH_ADD_PROVIDER_METADATA_KEY, JSON.stringify(metadata));
+}
+/**
+ * Retrieves OAuth add provider metadata from local storage
+ */
+function getOAuthAddProviderMetadata() {
+  const stored = localStorage.getItem(OAUTH_ADD_PROVIDER_METADATA_KEY);
+  if (!stored) return null;
+  try {
+    return JSON.parse(stored);
+  } catch {
+    return null;
+  }
+}
+/**
+ * Gets the verifier key name for a PKCE provider
+ */
+function getPKCEVerifierKey(provider) {
+  return `${provider}_verifier`;
+}
+/**
+ * Retrieves and removes the PKCE verifier from local storage
+ * @param provider - The OAuth provider
+ * @returns The verifier string
+ * @throws TurnkeyError if verifier is not found
+ */
+function consumePKCEVerifier(provider) {
+  const key = getPKCEVerifierKey(provider);
+  const verifier = localStorage.getItem(key);
+  if (!verifier) {
+    throw new sdkTypes.TurnkeyError(`Missing PKCE verifier for ${provider} authentication`, sdkTypes.TurnkeyErrorCodes.NO_PKCE_VERIFIER_FOUND);
+  }
+  localStorage.removeItem(key);
+  return verifier;
+}
+/**
+ * Stores the PKCE verifier in local storage
+ * @param provider - The OAuth provider
+ * @param verifier - The verifier string to store
+ */
+function storePKCEVerifier(provider, verifier) {
+  localStorage.setItem(getPKCEVerifierKey(provider), verifier);
+}
+/**
+ * Checks if a PKCE verifier exists for a provider (without consuming it)
+ * @param provider - The OAuth provider
+ * @returns true if verifier exists
+ */
+function hasPKCEVerifier(provider) {
+  return localStorage.getItem(getPKCEVerifierKey(provider)) !== null;
+}
+/**
+ * Stores the OAuth state string in local storage for later validation
+ * @param state - The OAuth state string to store
+ */
+function storeOAuthState(state) {
+  localStorage.setItem(OAUTH_STATE_KEY, state);
+}
+/**
+ * Consumes the OAuth state string from local storage for validation
+ * @param returnedState - The OAuth state string returned from the provider
+ */
+function consumeOAuthState(returnedState) {
+  try {
+    const stored = localStorage.getItem(OAUTH_STATE_KEY);
+    if (!stored) {
+      throw new sdkTypes.TurnkeyError("Missing OAuth state in storage", sdkTypes.TurnkeyErrorCodes.INVALID_OAUTH_STATE);
+    }
+    if (stored !== returnedState) {
+      throw new sdkTypes.TurnkeyError("OAuth state mismatch", sdkTypes.TurnkeyErrorCodes.INVALID_OAUTH_STATE);
+    }
+  } finally {
+    localStorage.removeItem(OAUTH_STATE_KEY);
+  }
+}
+/**
+ * Clears all OAuth-related data from local storage
+ */
+function clearAllOAuthData() {
+  localStorage.removeItem(OAUTH_ADD_PROVIDER_METADATA_KEY);
+  localStorage.removeItem(OAUTH_STATE_KEY);
+  const pkceProviders = [sdkTypes.OAuthProviders.FACEBOOK, sdkTypes.OAuthProviders.DISCORD, sdkTypes.OAuthProviders.X];
+  for (const provider of pkceProviders) {
+    localStorage.removeItem(getPKCEVerifierKey(provider));
+  }
+}
+
+exports.OAUTH_ADD_PROVIDER_METADATA_KEY = OAUTH_ADD_PROVIDER_METADATA_KEY;
+exports.OAUTH_INTENT_ADD_PROVIDER = OAUTH_INTENT_ADD_PROVIDER;
+exports.OAUTH_STATE_KEY = OAUTH_STATE_KEY;
+exports.clearAllOAuthData = clearAllOAuthData;
+exports.consumeOAuthState = consumeOAuthState;
+exports.consumePKCEVerifier = consumePKCEVerifier;
+exports.getOAuthAddProviderMetadata = getOAuthAddProviderMetadata;
+exports.getPKCEVerifierKey = getPKCEVerifierKey;
+exports.hasPKCEVerifier = hasPKCEVerifier;
+exports.storeOAuthAddProviderMetadata = storeOAuthAddProviderMetadata;
+exports.storeOAuthState = storeOAuthState;
+exports.storePKCEVerifier = storePKCEVerifier;
+//# sourceMappingURL=storage.js.map

package/dist/utils/oauth/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sources":["../../../src/utils/oauth/storage.ts"],"sourcesContent":[null],"names":["OAUTH_INTENT_ADD_PROVIDER","OAUTH_ADD_PROVIDER_METADATA_KEY","OAUTH_STATE_KEY","storeOAuthAddProviderMetadata","metadata","localStorage","setItem","JSON","stringify","getOAuthAddProviderMetadata","stored","getItem","parse","getPKCEVerifierKey","provider","consumePKCEVerifier","key","verifier","TurnkeyError","TurnkeyErrorCodes","NO_PKCE_VERIFIER_FOUND","removeItem","storePKCEVerifier","hasPKCEVerifier","storeOAuthState","state","consumeOAuthState","returnedState","INVALID_OAUTH_STATE","clearAllOAuthData","pkceProviders","OAuthProviders","FACEBOOK","DISCORD","X"],"mappings":";;;;AAMO,MAAMA,yBAAyB,GAAG;AAClC,MAAMC,+BAA+B,GAAG;AACxC,MAAMC,eAAe,GAAG;AAe/B;AACA;AACA;AACA;AAEA;;;AAGG;AACG,SAAUC,6BAA6BA,CAC3CC,QAAkC,EAAA;EAElCC,YAAY,CAACC,OAAO,CAClBL,+BAA+B,EAC/BM,IAAI,CAACC,SAAS,CAACJ,QAAQ,CAAC,CACzB;AACH;AAEA;;AAEG;SACaK,2BAA2BA,GAAA;AACzC,EAAA,MAAMC,MAAM,GAAGL,YAAY,CAACM,OAAO,CAACV,+BAA+B,CAAC;AACpE,EAAA,IAAI,CAACS,MAAM,EAAE,OAAO,IAAI;EACxB,IAAI;AACF,IAAA,OAAOH,IAAI,CAACK,KAAK,CAACF,MAAM,CAA6B;AACvD,EAAA,CAAC,CAAC,MAAM;AACN,IAAA,OAAO,IAAI;AACb,EAAA;AACF;AAEA;;AAEG;AACG,SAAUG,kBAAkBA,CAACC,QAAsB,EAAA;EACvD,OAAO,CAAA,EAAGA,QAAQ,CAAA,SAAA,CAAW;AAC/B;AAEA;;;;;AAKG;AACG,SAAUC,mBAAmBA,CAACD,QAAsB,EAAA;AACxD,EAAA,MAAME,GAAG,GAAGH,kBAAkB,CAACC,QAAQ,CAAC;AACxC,EAAA,MAAMG,QAAQ,GAAGZ,YAAY,CAACM,OAAO,CAACK,GAAG,CAAC;EAC1C,IAAI,CAACC,QAAQ,EAAE;IACb,MAAM,IAAIC,qBAAY,CACpB,CAAA,0BAAA,EAA6BJ,QAAQ,iBAAiB,EACtDK,0BAAiB,CAACC,sBAAsB,CACzC;AACH,EAAA;AACAf,EAAAA,YAAY,CAACgB,UAAU,CAACL,GAAG,CAAC;AAC5B,EAAA,OAAOC,QAAQ;AACjB;AAEA;;;;AAIG;AACG,SAAUK,iBAAiBA,CAC/BR,QAAsB,EACtBG,QAAgB,EAAA;EAEhBZ,YAAY,CAACC,OAAO,CAACO,kBAAkB,CAACC,QAAQ,CAAC,EAAEG,QAAQ,CAAC;AAC9D;AAEA;;;;AAIG;AACG,SAAUM,eAAeA,CAACT,QAAsB,EAAA;EACpD,OAAOT,YAAY,CAACM,OAAO,CAACE,kBAAkB,CAACC,QAAQ,CAAC,CAAC,KAAK,IAAI;AACpE;AAEA;;;AAGG;AACG,SAAUU,eAAeA,CAACC,KAAa,EAAA;AAC3CpB,EAAAA,YAAY,CAACC,OAAO,CAACJ,eAAe,EAAEuB,KAAK,CAAC;AAC9C;AAEA;;;AAGG;AACG,SAAUC,iBAAiBA,CAACC,aAAqB,EAAA;EACrD,IAAI;AACF,IAAA,MAAMjB,MAAM,GAAGL,YAAY,CAACM,OAAO,CAACT,eAAe,CAAC;IAEpD,IAAI,CAACQ,MAAM,EAAE;MACX,MAAM,IAAIQ,qBAAY,CACpB,gCAAgC,EAChCC,0BAAiB,CAACS,mBAAmB,CACtC;AACH,IAAA;IAEA,IAAIlB,MAAM,KAAKiB,aAAa,EAAE;MAC5B,MAAM,IAAIT,qBAAY,CACpB,sBAAsB,EACtBC,0BAAiB,CAACS,mBAAmB,CACtC;AACH,IAAA;AACF,EAAA,CAAC,SAAS;AACRvB,IAAAA,YAAY,CAACgB,UAAU,CAACnB,eAAe,CAAC;AAC1C,EAAA;AACF;AAEA;;AAEG;SACa2B,iBAAiBA,GAAA;AAC/BxB,EAAAA,YAAY,CAACgB,UAAU,CAACpB,+BAA+B,CAAC;AACxDI,EAAAA,YAAY,CAACgB,UAAU,CAACnB,eAAe,CAAC;AACxC,EAAA,MAAM4B,aAAa,GAAmB,CACpCC,uBAAc,CAACC,QAAQ,EACvBD,uBAAc,CAACE,OAAO,EACtBF,uBAAc,CAACG,CAAC,CACjB;AACD,EAAA,KAAK,MAAMpB,QAAQ,IAAIgB,aAAa,EAAE;AACpCzB,IAAAA,YAAY,CAACgB,UAAU,CAACR,kBAAkB,CAACC,QAAQ,CAAC,CAAC;AACvD,EAAA;AACF;;;;;;;;;;;;;;;"}

package/dist/utils/oauth/storage.mjs

@@ -0,0 +1,104 @@
+import { OAuthProviders, TurnkeyError, TurnkeyErrorCodes } from '@turnkey/sdk-types';
+
+var OAUTH_INTENT_ADD_PROVIDER = "addProvider";
+var OAUTH_ADD_PROVIDER_METADATA_KEY = "oauth_add_provider_metadata";
+var OAUTH_STATE_KEY = "oauth_state";
+// We use localStorage instead of sessionStorage to store OAuth data since the user
+// might leave the current browsing context during the OAuth flow. We ran into this
+// with X OAuth on Android where if the user has the X app installed, oauth would
+// open the native app and when they come back to the browser, sessionStorage is gone
+/**
+ * Stores OAuth add provider metadata in local storage
+ * Used for addOauthProvider flow if opening in-page
+ */
+function storeOAuthAddProviderMetadata(metadata) {
+  localStorage.setItem(OAUTH_ADD_PROVIDER_METADATA_KEY, JSON.stringify(metadata));
+}
+/**
+ * Retrieves OAuth add provider metadata from local storage
+ */
+function getOAuthAddProviderMetadata() {
+  var stored = localStorage.getItem(OAUTH_ADD_PROVIDER_METADATA_KEY);
+  if (!stored) return null;
+  try {
+    return JSON.parse(stored);
+  } catch (_unused) {
+    return null;
+  }
+}
+/**
+ * Gets the verifier key name for a PKCE provider
+ */
+function getPKCEVerifierKey(provider) {
+  return "".concat(provider, "_verifier");
+}
+/**
+ * Retrieves and removes the PKCE verifier from local storage
+ * @param provider - The OAuth provider
+ * @returns The verifier string
+ * @throws TurnkeyError if verifier is not found
+ */
+function consumePKCEVerifier(provider) {
+  var key = getPKCEVerifierKey(provider);
+  var verifier = localStorage.getItem(key);
+  if (!verifier) {
+    throw new TurnkeyError("Missing PKCE verifier for ".concat(provider, " authentication"), TurnkeyErrorCodes.NO_PKCE_VERIFIER_FOUND);
+  }
+  localStorage.removeItem(key);
+  return verifier;
+}
+/**
+ * Stores the PKCE verifier in local storage
+ * @param provider - The OAuth provider
+ * @param verifier - The verifier string to store
+ */
+function storePKCEVerifier(provider, verifier) {
+  localStorage.setItem(getPKCEVerifierKey(provider), verifier);
+}
+/**
+ * Checks if a PKCE verifier exists for a provider (without consuming it)
+ * @param provider - The OAuth provider
+ * @returns true if verifier exists
+ */
+function hasPKCEVerifier(provider) {
+  return localStorage.getItem(getPKCEVerifierKey(provider)) !== null;
+}
+/**
+ * Stores the OAuth state string in local storage for later validation
+ * @param state - The OAuth state string to store
+ */
+function storeOAuthState(state) {
+  localStorage.setItem(OAUTH_STATE_KEY, state);
+}
+/**
+ * Consumes the OAuth state string from local storage for validation
+ * @param returnedState - The OAuth state string returned from the provider
+ */
+function consumeOAuthState(returnedState) {
+  try {
+    var stored = localStorage.getItem(OAUTH_STATE_KEY);
+    if (!stored) {
+      throw new TurnkeyError("Missing OAuth state in storage", TurnkeyErrorCodes.INVALID_OAUTH_STATE);
+    }
+    if (stored !== returnedState) {
+      throw new TurnkeyError("OAuth state mismatch", TurnkeyErrorCodes.INVALID_OAUTH_STATE);
+    }
+  } finally {
+    localStorage.removeItem(OAUTH_STATE_KEY);
+  }
+}
+/**
+ * Clears all OAuth-related data from local storage
+ */
+function clearAllOAuthData() {
+  localStorage.removeItem(OAUTH_ADD_PROVIDER_METADATA_KEY);
+  localStorage.removeItem(OAUTH_STATE_KEY);
+  var pkceProviders = [OAuthProviders.FACEBOOK, OAuthProviders.DISCORD, OAuthProviders.X];
+  for (var _i = 0, _pkceProviders = pkceProviders; _i < _pkceProviders.length; _i++) {
+    var provider = _pkceProviders[_i];
+    localStorage.removeItem(getPKCEVerifierKey(provider));
+  }
+}
+
+export { OAUTH_ADD_PROVIDER_METADATA_KEY, OAUTH_INTENT_ADD_PROVIDER, OAUTH_STATE_KEY, clearAllOAuthData, consumeOAuthState, consumePKCEVerifier, getOAuthAddProviderMetadata, getPKCEVerifierKey, hasPKCEVerifier, storeOAuthAddProviderMetadata, storeOAuthState, storePKCEVerifier };
+//# sourceMappingURL=storage.mjs.map

package/dist/utils/oauth/storage.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.mjs","sources":["../../../src/utils/oauth/storage.ts"],"sourcesContent":[null],"names":["OAUTH_INTENT_ADD_PROVIDER","OAUTH_ADD_PROVIDER_METADATA_KEY","OAUTH_STATE_KEY","storeOAuthAddProviderMetadata","metadata","localStorage","setItem","JSON","stringify","getOAuthAddProviderMetadata","stored","getItem","parse","_unused","getPKCEVerifierKey","provider","concat","consumePKCEVerifier","key","verifier","TurnkeyError","TurnkeyErrorCodes","NO_PKCE_VERIFIER_FOUND","removeItem","storePKCEVerifier","hasPKCEVerifier","storeOAuthState","state","consumeOAuthState","returnedState","INVALID_OAUTH_STATE","clearAllOAuthData","pkceProviders","OAuthProviders","FACEBOOK","DISCORD","X","_i","_pkceProviders","length"],"mappings":";;AAMO,IAAMA,yBAAyB,GAAG;AAClC,IAAMC,+BAA+B,GAAG;AACxC,IAAMC,eAAe,GAAG;AAe/B;AACA;AACA;AACA;AAEA;;;AAGG;AACG,SAAUC,6BAA6BA,CAC3CC,QAAkC,EAAA;EAElCC,YAAY,CAACC,OAAO,CAClBL,+BAA+B,EAC/BM,IAAI,CAACC,SAAS,CAACJ,QAAQ,CAAC,CACzB;AACH;AAEA;;AAEG;SACaK,2BAA2BA,GAAA;AACzC,EAAA,IAAMC,MAAM,GAAGL,YAAY,CAACM,OAAO,CAACV,+BAA+B,CAAC;AACpE,EAAA,IAAI,CAACS,MAAM,EAAE,OAAO,IAAI;EACxB,IAAI;AACF,IAAA,OAAOH,IAAI,CAACK,KAAK,CAACF,MAAM,CAA6B;EACvD,CAAC,CAAC,OAAAG,OAAA,EAAM;AACN,IAAA,OAAO,IAAI;AACb,EAAA;AACF;AAEA;;AAEG;AACG,SAAUC,kBAAkBA,CAACC,QAAsB,EAAA;EACvD,OAAA,EAAA,CAAAC,MAAA,CAAUD,QAAQ,EAAA,WAAA,CAAA;AACpB;AAEA;;;;;AAKG;AACG,SAAUE,mBAAmBA,CAACF,QAAsB,EAAA;AACxD,EAAA,IAAMG,GAAG,GAAGJ,kBAAkB,CAACC,QAAQ,CAAC;AACxC,EAAA,IAAMI,QAAQ,GAAGd,YAAY,CAACM,OAAO,CAACO,GAAG,CAAC;EAC1C,IAAI,CAACC,QAAQ,EAAE;IACb,MAAM,IAAIC,YAAY,CAAA,4BAAA,CAAAJ,MAAA,CACSD,QAAQ,EAAA,iBAAA,CAAA,EACrCM,iBAAiB,CAACC,sBAAsB,CACzC;AACH,EAAA;AACAjB,EAAAA,YAAY,CAACkB,UAAU,CAACL,GAAG,CAAC;AAC5B,EAAA,OAAOC,QAAQ;AACjB;AAEA;;;;AAIG;AACG,SAAUK,iBAAiBA,CAC/BT,QAAsB,EACtBI,QAAgB,EAAA;EAEhBd,YAAY,CAACC,OAAO,CAACQ,kBAAkB,CAACC,QAAQ,CAAC,EAAEI,QAAQ,CAAC;AAC9D;AAEA;;;;AAIG;AACG,SAAUM,eAAeA,CAACV,QAAsB,EAAA;EACpD,OAAOV,YAAY,CAACM,OAAO,CAACG,kBAAkB,CAACC,QAAQ,CAAC,CAAC,KAAK,IAAI;AACpE;AAEA;;;AAGG;AACG,SAAUW,eAAeA,CAACC,KAAa,EAAA;AAC3CtB,EAAAA,YAAY,CAACC,OAAO,CAACJ,eAAe,EAAEyB,KAAK,CAAC;AAC9C;AAEA;;;AAGG;AACG,SAAUC,iBAAiBA,CAACC,aAAqB,EAAA;EACrD,IAAI;AACF,IAAA,IAAMnB,MAAM,GAAGL,YAAY,CAACM,OAAO,CAACT,eAAe,CAAC;IAEpD,IAAI,CAACQ,MAAM,EAAE;MACX,MAAM,IAAIU,YAAY,CACpB,gCAAgC,EAChCC,iBAAiB,CAACS,mBAAmB,CACtC;AACH,IAAA;IAEA,IAAIpB,MAAM,KAAKmB,aAAa,EAAE;MAC5B,MAAM,IAAIT,YAAY,CACpB,sBAAsB,EACtBC,iBAAiB,CAACS,mBAAmB,CACtC;AACH,IAAA;AACF,EAAA,CAAC,SAAS;AACRzB,IAAAA,YAAY,CAACkB,UAAU,CAACrB,eAAe,CAAC;AAC1C,EAAA;AACF;AAEA;;AAEG;SACa6B,iBAAiBA,GAAA;AAC/B1B,EAAAA,YAAY,CAACkB,UAAU,CAACtB,+BAA+B,CAAC;AACxDI,EAAAA,YAAY,CAACkB,UAAU,CAACrB,eAAe,CAAC;AACxC,EAAA,IAAM8B,aAAa,GAAmB,CACpCC,cAAc,CAACC,QAAQ,EACvBD,cAAc,CAACE,OAAO,EACtBF,cAAc,CAACG,CAAC,CACjB;AACD,EAAA,KAAA,IAAAC,EAAA,GAAA,CAAA,EAAAC,cAAA,GAAuBN,aAAa,EAAAK,EAAA,GAAAC,cAAA,CAAAC,MAAA,EAAAF,EAAA,EAAA,EAAE;AAAjC,IAAA,IAAMtB,QAAQ,GAAAuB,cAAA,CAAAD,EAAA,CAAA;AACjBhC,IAAAA,YAAY,CAACkB,UAAU,CAACT,kBAAkB,CAACC,QAAQ,CAAC,CAAC;AACvD,EAAA;AACF;;;;"}

package/dist/utils/oauth/url.d.ts

@@ -0,0 +1,92 @@
+import { OAuthProviders } from "@turnkey/sdk-types";
+/**
+ * Builds the OAuth state parameter string
+ */
+export declare function buildOAuthState(params: {
+    provider: OAuthProviders;
+    flow: "redirect" | "popup";
+    publicKey: string;
+    nonce?: string;
+    additionalState?: Record<string, string> | undefined;
+}): string;
+/**
+ * Opens a centered OAuth popup window
+ */
+export declare function openOAuthPopup(): Window | null;
+/**
+ * Redirects to OAuth provider URL
+ */
+export declare function redirectToOAuthProvider(url: string): Promise<never>;
+/**
+ * Cleans up OAuth parameters from URL (removes hash and search)
+ */
+export declare function cleanupOAuthUrl(): void;
+/**
+ * Cleans up OAuth hash from URL but preserves search parameters
+ */
+export declare function cleanupOAuthUrlPreserveSearch(): void;
+/**
+ * Parses the OAuth state parameter string into an object
+ */
+export declare function parseStateParam(stateParam: string | null | undefined): {
+    sessionKey?: string;
+    oauthIntent?: string;
+    provider?: string;
+    flow?: string;
+    publicKey?: string;
+    openModal?: string;
+    [key: string]: string | undefined;
+};
+/**
+ * Result from parsing an OAuth response (both popup and redirect flows)
+ */
+export interface OAuthResponseResult {
+    /** The OIDC token (for non-PKCE providers) */
+    idToken?: string | null | undefined;
+    /** The authorization code (for PKCE providers) */
+    authCode?: string | null | undefined;
+    /** Session key from state */
+    sessionKey?: string | undefined;
+    /** The provider from state */
+    provider?: string | null;
+    /** Flow type from state */
+    flow?: string | null;
+    /** Public key from state */
+    publicKey?: string | null;
+    /** Open modal flag from state */
+    openModal?: string | null;
+    /** OAuth intent from state */
+    oauthIntent?: string | null;
+    /** Nonce from state */
+    nonce?: string | null;
+}
+/**
+ * Unified OAuth response parser for both popup and redirect flows.
+ * Handles both:
+ * - PKCE flows (Facebook, Discord, X): code in search parameters
+ * - Non-PKCE flows (Google, Apple): id_token in hash parameters
+ * - Apple's non-standard hash format where state parameters are directly embedded
+ *
+ * @param url - The full URL to parse (from popup or redirect)
+ * @param expectedProvider - Optional provider if already known (for popup flows)
+ * @returns Parsed OAuth response data including tokens, codes, and state parameters, or null if invalid
+ */
+export declare function parseOAuthResponse(url: string, expectedProvider?: OAuthProviders): OAuthResponseResult | null;
+/**
+ * Parameters for building an OAuth URL
+ */
+export interface BuildOAuthUrlParams {
+    provider: OAuthProviders;
+    clientId: string;
+    redirectUri: string;
+    publicKey: string;
+    nonce: string;
+    flow: "redirect" | "popup";
+    codeChallenge?: string | undefined;
+    additionalState?: Record<string, string> | undefined;
+}
+/**
+ * Builds the complete OAuth authorization URL for a provider
+ */
+export declare function buildOAuthUrl(params: BuildOAuthUrlParams): string;
+//# sourceMappingURL=url.d.ts.map

package/dist/utils/oauth/url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.d.ts","sourceRoot":"","sources":["../../../src/utils/oauth/url.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EAGf,MAAM,oBAAoB,CAAC;AAI5B;;GAEG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE;IACtC,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD,GAAG,MAAM,CAkBT;AAED;;GAEG;AACH,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAW9C;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CASnE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAEtC;AAED;;GAEG;AACH,wBAAgB,6BAA6B,IAAI,IAAI,CAMpD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG;IACtE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;CACnC,CAcA;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACpC,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,6BAA6B;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,4BAA4B;IAC5B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iCAAiC;IACjC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,uBAAuB;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,gBAAgB,CAAC,EAAE,cAAc,GAChC,mBAAmB,GAAG,IAAI,CAqF5B;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;CACtD;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CA8DjE"}