@turnkey/sdk-browser 1.15.0 → 2.0.0

package/CHANGELOG.md

@@ -1,5 +1,68 @@
 # @turnkey/sdk-browser
 
+## 2.0.0
+
+### Major Changes
+
+- 93540e7: ## Major Package Updates
+
+  ### @turnkey/sdk-browser
+
+  - create abstract `TurnkeyBaseClient` class which extends `TurnkeySDKClientBase`
+    - `TurnkeyBrowserClient`, `TurnkeyIframeClient`, `TurnkeyPasskeyClient`, and `TurnkeyWalletClient` all extend `TurnkeyBaseClient`
+  - TurnkeyBrowserClient
+    - Session Management
+      - `refreshSession` - attempts to refresh an existing, active session and will extend the session expiry using the `expirationSeconds` parameter
+      - loginWithBundle - authenticate a user via a credential bundle and creates a read-write session
+      - loginWithPasskey - attempts to authenticate a user via passkey and create a read-only or read-write session
+      - loginWithSession - takes a `Session`, which can be either read-only or read-write, created via a server action and attempts to authenticate the user
+  - TurnkeyPasskeyClient
+    - Session Management
+      - createPasskeySession - leverages passkey authentication to create a read-write session. Once authenticated, the user will not be prompted for additional passkey taps.
+
+  ### @turnkey/sdk-react
+
+  - update `TurnkeyContext` to use new `.getSession()` method to check if there is an active session
+  - `OTPVerification` component no longer receives `authIframeClient` or `onValidateSuccess` props
+
+  ## Minor Package Updates
+
+  ### @turnkey/sdk-server
+
+  - expose `sendCredential` server action
+  - add `SessionType` enum
+    - `READ_ONLY` & `READ_WRITE`
+
+  ### @turnkey/eip-1193-provider
+
+  - update dependencies in `package.json`
+    - moved from `peerDependencies` to `dependencies`
+      - `"@turnkey/http": "workspace:*"`
+      - `"@turnkey/sdk-browser": "workspace:*"`
+    - moved from `devDependencies` to `dependencies`
+      - `"@turnkey/api-key-stamper": "workspace:*"`
+  - specify TypeScript version ^5.1.5
+
+### Minor Changes
+
+- 9147962: add dangerouslyOverrideIframeKeyTtl option to override iframe embedded key TTL (for longer lived read/write sessions)
+
+### Patch Changes
+
+- Updated dependencies [9147962]
+  - @turnkey/iframe-stamper@2.3.0
+  - @turnkey/crypto@2.3.1
+
+## 1.16.0
+
+### Minor Changes
+
+- 233ae71: Add updateUserAuth, addUserAuth, deleteUserAuth helper functions
+
+### Patch Changes
+
+- @turnkey/crypto@2.3.1
+
 ## 1.15.0
 
 ### Minor Changes

package/dist/__clients__/base-client.d.ts

@@ -0,0 +1,7 @@
+import type { TurnkeySDKClientConfig, AuthClient } from "@types";
+import { TurnkeySDKClientBase } from "../__generated__/sdk-client-base";
+export declare abstract class TurnkeyBaseClient extends TurnkeySDKClientBase {
+    authClient?: AuthClient | undefined;
+    constructor(config: TurnkeySDKClientConfig, authClient?: AuthClient);
+}
+//# sourceMappingURL=base-client.d.ts.map

package/dist/__clients__/base-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-client.d.ts","sourceRoot":"","sources":["../../src/__clients__/base-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AAExE,8BAAsB,iBAAkB,SAAQ,oBAAoB;IAClE,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;gBAExB,MAAM,EAAE,sBAAsB,EAAE,UAAU,CAAC,EAAE,UAAU;CAIpE"}

package/dist/__clients__/base-client.js

@@ -0,0 +1,13 @@
+'use strict';
+
+var sdkClientBase = require('../__generated__/sdk-client-base.js');
+
+class TurnkeyBaseClient extends sdkClientBase.TurnkeySDKClientBase {
+    constructor(config, authClient) {
+        super(config);
+        this.authClient = authClient;
+    }
+}
+
+exports.TurnkeyBaseClient = TurnkeyBaseClient;
+//# sourceMappingURL=base-client.js.map

package/dist/__clients__/base-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-client.js","sources":["../../src/__clients__/base-client.ts"],"sourcesContent":[null],"names":["TurnkeySDKClientBase"],"mappings":";;;;AAGM,MAAgB,iBAAkB,SAAQA,kCAAoB,CAAA;IAGlE,WAAY,CAAA,MAA8B,EAAE,UAAuB,EAAA;QACjE,KAAK,CAAC,MAAM,CAAC,CAAC;AACd,QAAA,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;KAC9B;AACF;;;;"}

package/dist/__clients__/base-client.mjs

@@ -0,0 +1,11 @@
+import { TurnkeySDKClientBase } from '../__generated__/sdk-client-base.mjs';
+
+class TurnkeyBaseClient extends TurnkeySDKClientBase {
+    constructor(config, authClient) {
+        super(config);
+        this.authClient = authClient;
+    }
+}
+
+export { TurnkeyBaseClient };
+//# sourceMappingURL=base-client.mjs.map

package/dist/__clients__/base-client.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-client.mjs","sources":["../../src/__clients__/base-client.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAGM,MAAgB,iBAAkB,SAAQ,oBAAoB,CAAA;IAGlE,WAAY,CAAA,MAA8B,EAAE,UAAuB,EAAA;QACjE,KAAK,CAAC,MAAM,CAAC,CAAC;AACd,QAAA,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;KAC9B;AACF;;;;"}

package/dist/__clients__/browser-clients.d.ts

@@ -0,0 +1,243 @@
+import type { WalletInterface } from "@turnkey/wallet-stamper";
+import type { KeyFormat } from "@turnkey/iframe-stamper";
+import type * as SdkApiTypes from "../__generated__/sdk_api_types";
+import { TurnkeyBaseClient } from "../__clients__/base-client";
+import { AuthClient, TurnkeySDKClientConfig, SessionType, TurnkeyWalletClientConfig } from "@types";
+import type { ReadWriteSession, Passkey } from "@models";
+import { Session } from "@storage";
+export interface OauthProvider {
+    providerName: string;
+    oidcToken: string;
+}
+export interface ApiKey {
+    apiKeyName: string;
+    publicKey: string;
+    curveType: "API_KEY_CURVE_P256" | "API_KEY_CURVE_SECP256K1" | "API_KEY_CURVE_ED25519";
+    expirationSeconds?: string;
+}
+export interface Authenticator {
+    authenticatorName: string;
+    challenge: string;
+    attestation: {
+        credentialId: string;
+        clientDataJson: string;
+        attestationObject: string;
+        transports: ("AUTHENTICATOR_TRANSPORT_BLE" | "AUTHENTICATOR_TRANSPORT_INTERNAL" | "AUTHENTICATOR_TRANSPORT_NFC" | "AUTHENTICATOR_TRANSPORT_USB" | "AUTHENTICATOR_TRANSPORT_HYBRID")[];
+    };
+}
+interface UpdateUserAuthParams {
+    userId: string;
+    phoneNumber?: string | null;
+    email?: string | null;
+    authenticators?: {
+        add?: Authenticator[];
+        deleteIds?: string[];
+    };
+    oauthProviders?: {
+        add?: OauthProvider[];
+        deleteIds?: string[];
+    };
+    apiKeys?: {
+        add?: ApiKey[];
+        deleteIds?: string[];
+    };
+}
+interface DeleteUserAuthParams {
+    userId: string;
+    phoneNumber?: boolean;
+    email?: boolean;
+    authenticatorIds?: string[];
+    oauthProviderIds?: string[];
+    apiKeyIds?: string[];
+}
+interface AddUserAuthParams {
+    userId: string;
+    phoneNumber?: string;
+    email?: string;
+    authenticators?: Authenticator[];
+    oauthProviders?: OauthProvider[];
+    apiKeys?: ApiKey[];
+}
+export declare class TurnkeyBrowserClient extends TurnkeyBaseClient {
+    constructor(config: TurnkeySDKClientConfig, authClient?: AuthClient);
+    login: (config?: {
+        organizationId?: string;
+    }) => Promise<SdkApiTypes.TCreateReadOnlySessionResponse>;
+    /**
+     * Creates a read-write session. This method infers the current user's organization ID and target userId.
+     * To be used in conjunction with an `iframeStamper`: the resulting session's credential bundle can be
+     * injected into an iframeStamper to create a session that enables both read and write requests.
+     *
+     * @param targetEmbeddedKey
+     * @param expirationSeconds
+     * @param userId
+     * @returns {Promise<void>}
+     */
+    refereshSession: (sessionType?: SessionType, targetPublicKey?: string, expirationSeconds?: string) => Promise<void>;
+    /**
+     * Log in with a bundle. This method uses a bundle sent to the end user email
+     * To be used in conjunction with an `iframeStamper`.
+     *
+     * @param bundle
+     * @param expirationSeconds
+     * @returns {Promise<void>}
+     */
+    loginWithBundle: (bundle: string, expirationSeconds: string) => Promise<void>;
+    /**
+     * Log in with a session object. This method uses a session object from server actions and stores it and the active client in local storage
+     * To be used in conjunction with an `iframeStamper`.
+     *
+     * @param session
+     * @returns {Promise<void>}
+     */
+    loginWithSession: (session: Session) => Promise<void>;
+    /**
+     * Log in with a passkey.
+     * To be used in conjunction with a `passkeyStamper`
+     *
+     * @param session
+     * @returns {Promise<void>}
+     */
+    loginWithPasskey: (sessionType: SessionType | undefined, iframeClient: TurnkeyIframeClient, targetPublicKey?: string, expirationSeconds?: string) => Promise<void>;
+    /**
+     * Log in with a browser wallet.
+     *
+     * @param session
+     * @returns {Promise<void>}
+     */
+    loginWithWallet: (sessionType: SessionType | undefined, iframeClient: TurnkeyIframeClient, targetPublicKey?: string, expirationSeconds?: string) => Promise<void>;
+    /**
+     * Creates a read-write session. This method infers the current user's organization ID and target userId.
+     * To be used in conjunction with an `iframeStamper`: the resulting session's credential bundle can be
+     * injected into an iframeStamper to create a session that enables both read and write requests.
+     *
+     * @param targetEmbeddedKey
+     * @param expirationSeconds
+     * @param userId
+     * @returns {Promise<SdkApiTypes.TCreateReadWriteSessionResponse>}
+     */
+    loginWithReadWriteSession: (targetEmbeddedKey: string, expirationSeconds?: string, userId?: string) => Promise<SdkApiTypes.TCreateReadWriteSessionResponse>;
+    /**
+     * Logs in with an existing auth bundle. this bundle enables both read and write requests.
+     *
+     * @param credentialBundle
+     * @param expirationSeconds
+     * @returns {Promise<boolean>}
+     */
+    loginWithAuthBundle: (credentialBundle: string, expirationSeconds?: string) => Promise<boolean>;
+    /**
+     * Removes authentication factors from an end user.
+     *
+     * This function allows selectively removing:
+     * - Phone number
+     * - Email
+     * - Authenticators (by ID)
+     * - OAuth providers (by ID)
+     * - API keys (by ID)
+     *
+     * All removal operations are executed in parallel if multiple
+     * parameters are provided.
+     *
+     * @param params - A structured object containing all the removal parameters
+     *   @param params.userId - Unique identifier of the user
+     *   @param params.phoneNumber - true to remove the phone number
+     *   @param params.email - true to remove the email
+     *   @param params.authenticatorIds - Array of authenticator IDs to remove
+     *   @param params.oauthProviderIds - Array of OAuth provider IDs to remove
+     *   @param params.apiKeyIds - Array of API key IDs to remove
+     * @returns A promise that resolves to an array of results from each removal operation
+     */
+    deleteUserAuth: (params: DeleteUserAuthParams) => Promise<any[]>;
+    /**
+     * Adds or updates authentication factors for an end user.
+     *
+     * This function allows selectively adding:
+     * - Phone number
+     * - Email
+     * - Authenticators
+     * - OAuth providers
+     * - API keys
+     *
+     * All additions/updates are executed in parallel if multiple
+     * parameters are provided.
+     *
+     * @param params - A structured object containing all the addition/update parameters
+     *   @param params.userId - Unique identifier of the user
+     *   @param params.phoneNumber - New phone number for the user
+     *   @param params.email - New email address for the user
+     *   @param params.authenticators - Array of authenticator objects to create
+     *   @param params.oauthProviders - Array of OAuth provider objects to create
+     *   @param params.apiKeys - Array of API key objects to create
+     * @returns A promise that resolves to an array of results from each addition or update
+     */
+    addUserAuth: (params: AddUserAuthParams) => Promise<any[]>;
+    /**
+     * Comprehensive authentication update for an end user.
+     * Combines add/update and delete operations into a single call.
+     *
+     * The behavior is driven by whether values are set to:
+     * - A string/array (to create or update)
+     * - `null` or an array of IDs (to remove)
+     *
+     * All operations are executed in parallel where applicable.
+     *
+     * @param params - A structured object containing all the update parameters
+     *   @param params.userId - Unique identifier of the user
+     *   @param params.phoneNumber - String to set (new phone) or `null` to remove
+     *   @param params.email - String to set (new email) or `null` to remove
+     *   @param params.authenticators - Object describing authenticators to add or remove
+     *   @param params.oauthProviders - Object describing OAuth providers to add or remove
+     *   @param params.apiKeys - Object describing API keys to add or remove
+     *
+     * @returns A promise that resolves to a boolean indicating overall success
+     */
+    updateUserAuth(params: UpdateUserAuthParams): Promise<boolean>;
+}
+export declare class TurnkeyPasskeyClient extends TurnkeyBrowserClient {
+    rpId: string;
+    constructor(config: TurnkeySDKClientConfig);
+    /**
+     * Create a passkey for an end-user, taking care of various lower-level details.
+     *
+     * @returns {Promise<Passkey>}
+     */
+    createUserPasskey: (config?: Record<any, any>) => Promise<Passkey>;
+    /**
+     * Uses passkey authentication to create a read-write session, via an embedded API key,
+     * and stores + returns the resulting auth bundle that contains the encrypted API key.
+     * This auth bundle (also referred to as a credential bundle) can be injected into an `iframeStamper`,
+     * resulting in a touch-free authenticator. Unlike `loginWithReadWriteSession`, this method
+     * assumes the end-user's organization ID (i.e. the sub-organization ID) is already known.
+     *
+     * @param userId
+     * @param targetEmbeddedKey
+     * @param expirationSeconds
+     * @param curveType
+     * @returns {Promise<ReadWriteSession>}
+     */
+    createPasskeySession: (userId: string, targetEmbeddedKey: string, expirationSeconds?: string, organizationId?: string) => Promise<ReadWriteSession>;
+}
+/**
+ * TurnkeyIframeClient is a client that uses an iframe to interact with the Turnkey API.
+ * It is used to create read-write sessions, and to inject credential bundles into the iframe.
+ * It is also used to extract encrypted credential bundles from the iframe.
+ * @extends TurnkeyBrowserClient
+ */
+export declare class TurnkeyIframeClient extends TurnkeyBrowserClient {
+    iframePublicKey: string | null;
+    constructor(config: TurnkeySDKClientConfig);
+    injectCredentialBundle: (credentialBundle: string) => Promise<boolean>;
+    injectWalletExportBundle: (credentialBundle: string, organizationId: string) => Promise<boolean>;
+    injectKeyExportBundle: (credentialBundle: string, organizationId: string, keyFormat?: KeyFormat | undefined) => Promise<boolean>;
+    injectImportBundle: (bundle: string, organizationId: string, userId: string) => Promise<boolean>;
+    extractWalletEncryptedBundle: () => Promise<string>;
+    extractKeyEncryptedBundle: () => Promise<string>;
+}
+export declare class TurnkeyWalletClient extends TurnkeyBrowserClient {
+    private wallet;
+    constructor(config: TurnkeyWalletClientConfig);
+    getPublicKey(): Promise<string>;
+    getWalletInterface(): WalletInterface;
+}
+export {};
+//# sourceMappingURL=browser-clients.d.ts.map

package/dist/__clients__/browser-clients.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-clients.d.ts","sourceRoot":"","sources":["../../src/__clients__/browser-clients.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC/D,OAAO,KAAK,EAAiB,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAIxE,OAAO,KAAK,KAAK,WAAW,MAAM,gCAAgC,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,OAAO,EACL,UAAU,EACV,sBAAsB,EACtB,WAAW,EACX,yBAAyB,EAC1B,MAAM,QAAQ,CAAC;AAQhB,OAAO,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzD,OAAO,EACL,OAAO,EAKR,MAAM,UAAU,CAAC;AAIlB,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,MAAM;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EACL,oBAAoB,GACpB,yBAAyB,GACzB,uBAAuB,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,aAAa;IAC5B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE;QACX,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,UAAU,EAAE,CACR,6BAA6B,GAC7B,kCAAkC,GAClC,6BAA6B,GAC7B,6BAA6B,GAC7B,gCAAgC,CACnC,EAAE,CAAC;KACL,CAAC;CACH;AACD,UAAU,oBAAoB;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,cAAc,CAAC,EAAE;QACf,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IACF,cAAc,CAAC,EAAE;QACf,GAAG,CAAC,EAAE,aAAa,EAAE,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;IACF,OAAO,CAAC,EAAE;QACR,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC;CACH;AAED,UAAU,oBAAoB;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,UAAU,iBAAiB;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AACD,qBAAa,oBAAqB,SAAQ,iBAAiB;gBAC7C,MAAM,EAAE,sBAAsB,EAAE,UAAU,CAAC,EAAE,UAAU;IAInE,KAAK,YAAmB;QACtB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,KAAG,QAAQ,YAAY,8BAA8B,CAAC,CAOrD;IAEF;;;;;;;;;OASG;IACH,eAAe,iBACA,WAAW,oBACN,MAAM,sBACL,MAAM,KACxB,QAAQ,IAAI,CAAC,CAkDd;IAEF;;;;;;;OAOG;IACH,eAAe,WACL,MAAM,qBACK,MAAM,KACxB,QAAQ,IAAI,CAAC,CAoBd;IAEF;;;;;;OAMG;IACH,gBAAgB,YAAmB,OAAO,KAAG,QAAQ,IAAI,CAAC,CAUxD;IAEF;;;;;;OAMG;IACH,gBAAgB,uDAEA,mBAAmB,oBACf,MAAM,sBACL,MAAM,KACxB,QAAQ,IAAI,CAAC,CAmDd;IAEF;;;;;OAKG;IACH,eAAe,uDAEC,mBAAmB,oBACf,MAAM,sBACL,MAAM,KACxB,QAAQ,IAAI,CAAC,CA+Cd;IAEF;;;;;;;;;OASG;IACH,yBAAyB,sBACJ,MAAM,sBACN,MAAM,WAChB,MAAM,KACd,QAAQ,YAAY,+BAA+B,CAAC,CAsBrD;IAEF;;;;;;OAMG;IACH,mBAAmB,qBACC,MAAM,sBACL,MAAM,KACxB,QAAQ,OAAO,CAAC,CAejB;IAEF;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,cAAc,WAAkB,oBAAoB,KAAG,QAAQ,GAAG,EAAE,CAAC,CAwCnE;IAEF;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,WAAW,WAAkB,iBAAiB,KAAG,QAAQ,GAAG,EAAE,CAAC,CA0C7D;IAEF;;;;;;;;;;;;;;;;;;;OAmBG;IACG,cAAc,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;CAgGrE;AAED,qBAAa,oBAAqB,SAAQ,oBAAoB;IAC5D,IAAI,EAAE,MAAM,CAAC;gBAED,MAAM,EAAE,sBAAsB;IAK1C;;;;OAIG;IACH,iBAAiB,YACP,OAAO,GAAG,EAAE,GAAG,CAAC,KACvB,QAAQ,OAAO,CAAC,CA4DjB;IAEF;;;;;;;;;;;;OAYG;IACH,oBAAoB,WACV,MAAM,qBACK,MAAM,sBACN,MAAM,mBACR,MAAM,KACtB,QAAQ,gBAAgB,CAAC,CAuD1B;CACH;AAED;;;;;GAKG;AACH,qBAAa,mBAAoB,SAAQ,oBAAoB;IAC3D,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;gBAEnB,MAAM,EAAE,sBAAsB;IAK1C,sBAAsB,qBACF,MAAM,KACvB,QAAQ,OAAO,CAAC,CAIjB;IAEF,wBAAwB,qBACJ,MAAM,kBACR,MAAM,KACrB,QAAQ,OAAO,CAAC,CAKjB;IAEF,qBAAqB,qBACD,MAAM,kBACR,MAAM,cACV,SAAS,GAAG,SAAS,KAChC,QAAQ,OAAO,CAAC,CAMjB;IAEF,kBAAkB,WACR,MAAM,kBACE,MAAM,UACd,MAAM,KACb,QAAQ,OAAO,CAAC,CAMjB;IAEF,4BAA4B,QAAa,QAAQ,MAAM,CAAC,CAEtD;IAEF,yBAAyB,QAAa,QAAQ,MAAM,CAAC,CAEnD;CACH;AAED,qBAAa,mBAAoB,SAAQ,oBAAoB;IAC3D,OAAO,CAAC,MAAM,CAAkB;gBAEpB,MAAM,EAAE,yBAAyB;IAKvC,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAIrC,kBAAkB,IAAI,eAAe;CAGtC"}